Secrétariat IAPlateforme métier autonome

Espace entreprise sécurisé

Votre activité.
Une longueur d’avance.

Le cockpit charge automatiquement votre entreprise, votre métier et vos droits. L’IA peut ensuite lire, préparer et exécuter uniquement les actions autorisées.

Identité SupabaseIsolation par entrepriseActions auditées0 mot de passe stocké ici

↗

Connexion sécurisée

Utilisez ici un mot de passe déjà créé. Pour une première connexion, choisissez le parcours dédié juste sous le formulaire.

Mot de passeLien e-mailCockpit

${safeError ? `

${safeError}

` : \"\"}\n \n

Première connexion ou mot de passe oublié ?
Recevez le lien qui permettra de choisir un nouveau mot de passe.

\n `;\n}\n\nexport function callbackPage(nonce: string): string {\n return `Vérification · Secrétariat IA

Lien à usage unique

Identité en cours de vérification.

La session est rattachée à la bonne entreprise avant toute ouverture du cockpit.

⌁

Connexion en cours…

Nous vérifions le lien, l’identité et l’entreprise.

LienIdentitéRetour cockpit

`;\n}\n\nexport function passwordSetupPage(session: Session, nonce: string): string {\n const organization=session.v===3?escapeHtml(session.organizationName):\"Entreprise\";\n return `Créer le mot de passe · ${organization}

${session.v===3?escapeHtml(session.ui.brandMark):\"S\"}

${organization}Identité vérifiée

Dernière étape

Créez votre mot de passe sécurisé.

Il sera géré directement par Supabase Auth. Le cockpit ne le stocke jamais.

⌘

Définir le mot de passe

Au moins 12 caractères et trois catégories parmi minuscules, majuscules, chiffres et symboles.

`;\n}\n\nexport function appPage(data: Record, session: Session, nonce: string): string {\n const tenantSession = session.v === 3 ? session : null;\n const rawContext = data.business_context\n && typeof data.business_context === \"object\"\n && !Array.isArray(data.business_context)\n ? data.business_context as Record\n : {};\n const rawUi = rawContext.ui_config\n && typeof rawContext.ui_config === \"object\"\n && !Array.isArray(rawContext.ui_config)\n ? rawContext.ui_config as Record\n : {};\n const vocabulary = rawUi.vocabulary\n && typeof rawUi.vocabulary === \"object\"\n && !Array.isArray(rawUi.vocabulary)\n ? rawUi.vocabulary as Record\n : {};\n const packTheme = rawUi.theme\n && typeof rawUi.theme === \"object\"\n && !Array.isArray(rawUi.theme)\n ? rawUi.theme as Record\n : {};\n const tenantSettings = rawContext.tenant_settings\n && typeof rawContext.tenant_settings === \"object\"\n && !Array.isArray(rawContext.tenant_settings)\n ? rawContext.tenant_settings as Record\n : {};\n const branding = tenantSettings.branding\n && typeof tenantSettings.branding === \"object\"\n && !Array.isArray(tenantSettings.branding)\n ? tenantSettings.branding as Record\n : {};\n const tenantTheme = branding.theme\n && typeof branding.theme === \"object\"\n && !Array.isArray(branding.theme)\n ? branding.theme as Record\n : {};\n const theme = { ...packTheme, ...tenantTheme };\n const quickActions = Array.isArray(rawUi.quick_actions)\n ? rawUi.quick_actions.filter((item) => item && typeof item === \"object\").slice(0, 12) as Record[]\n : [];\n const label = (key: string, fallback: string, max = 80) =>\n escapeHtml(String(vocabulary[key] || fallback).slice(0, max));\n const quick = (key: string, field: \"label\" | \"description\", fallback: string) => {\n const item = quickActions.find((entry) => entry.key === key);\n return escapeHtml(String(item?.[field] || fallback).slice(0, 140));\n };\n const safeColor = (value: unknown, fallback: string) => {\n const color = String(value || \"\").toLowerCase();\n return /^#[0-9a-f]{6}$/.test(color) ? color : fallback;\n };\n const organizationName = escapeHtml(String(\n rawContext.organization_name || tenantSession?.organizationName || \"Secrétariat IA\",\n ).slice(0, 120));\n const verticalName = escapeHtml(String(\n rawContext.vertical_display_name || tenantSession?.verticalDisplayName || \"Entreprise\",\n ).slice(0, 80));\n const brandMark = escapeHtml(String(\n branding.brand_mark || rawUi.brand_mark || tenantSession?.ui.brandMark || \"S\",\n ).slice(0, 3));\n const primaryAction = escapeHtml(String(\n rawUi.primary_action || tenantSession?.ui.primaryAction || vocabulary.new_request || \"Nouvelle demande\",\n ).slice(0, 80));\n const themeCss = `:root{--accent:${safeColor(theme.accent,\"#43d7ba\")};--accent2:${safeColor(theme.accent_soft,\"#123a34\")};--accent-text:${safeColor(theme.accent_text,\"#06251f\")}}`;\n if (!tenantSession) throw new Error(\"enterprise_identity_required\");\n const businessContext = {\n ...rawContext,\n tenant_id: tenantSession.tenantId,\n staff_id: tenantSession.staffId,\n role: tenantSession.role,\n login_identifier: tenantSession.loginIdentifier,\n organization_name: String(rawContext.organization_name || tenantSession.organizationName),\n vertical_key: String(rawContext.vertical_key || tenantSession.verticalKey),\n vertical_display_name: String(rawContext.vertical_display_name || tenantSession.verticalDisplayName),\n vertical_version: Number(rawContext.vertical_version || tenantSession.verticalVersion),\n locale: String(rawContext.locale || tenantSession.locale),\n timezone: String(rawContext.timezone || tenantSession.timezone),\n backend_mode: String(rawContext.backend_mode || tenantSession.backendMode),\n auth_method: tenantSession.authMethod,\n };\n return `${organizationName} · Secrétariat IAAller au contenu

À traiter maintenant

Priorités commerciales et interventions du jour.

Priorités

Actions rapides

Prochains rendez-vous

File opérationnelle

${label(\"requests\",\"Demandes\")}

${label(\"request_singular\",\"Demande\")}	Priorité	Statut	Objet	Créée

Planning

${label(\"appointments\",\"Agenda\")}

Portefeuille

${label(\"customers\",\"Clients\")}

0 clients

Client	Téléphone	E-mail	État

Vente et comptabilité

${label(\"documents\",\"Documents\")}

Créer, facturer, imprimer et encaisser.

Document	Date	Montant	Statut

\n ${accountingViewHtml()}\n

Décisions utiles

${label(\"pilot\",\"Pilotage\")}

File supervisée issue des seules données de production.

Axes opérationnels

Vérification…

File de supervision

Supabase · simulations exclues

Accès directs

Autonomie supervisée

Missions

Objectifs, confirmations, engagements et preuves réellement enregistrés.

Chargement

—

File des missions

0 résultat(s)

Ouvrez cette vue pour charger les missions.

\n \n

Assistante IA

${label(\"assistant\",\"Assistante IA\")}

Parlez naturellement ou choisissez une action.

Chargement

\n \n

Vérification…

Que puis-je faire pour vous ?

Clients, rendez-vous, devis, factures et tâches.

Les actions sensibles demandent toujours votre confirmation.

\n \n \n \n \n

Prête.

Options vocales

VoixRythme

Activité de la session1 action

✓Assistante prêteEn attente de votre demandemaintenant

Identité, sécurité et personnalisation

${label(\"settings\",\"Réglages\")}

Votre configuration est isolée par entreprise et par métier.

Configuration d’exploitation

Versionnée

SMS technique unique

Supervisé

Numéro de test au format international

Vérification…

Profil chargé

Supabase vérifié

Sécurité du compte

Session chiffrée

À compléter

\n \n \n

\n `;\n}\n",[],[1122,1159],"e42a9f48-6400-46eb-8bd0-95571282a8b4","twilio-status.ts","01a008e7-12ca-757f-ba31-fb26c7aad94c",["D",1786855756508],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { reserveN8nExecution } from \"./n8n-budget.ts\";\n\nfunction env(key: string): string {\n try {\n return Deno.env.has(key) ? (Deno.env.get(key) || \"\") : \"\";\n } catch {\n return \"\";\n }\n}\n\nconst N8N_BASE = env(\"PISCINE_N8N_BASE\").replace(/\\/$/, \"\");\nconst STATUS_PATH = env(\"PISCINE_TWILIO_STATUS_N8N_PATH\").replace(/^\\//, \"\");\nconst TOOL_SECRET = env(\"PISCINE_TOOL_SECRET\");\nconst TENANT = env(\"PISCINE_TENANT\") || \"pisciniste_01\";\nconst TWILIO_AUTH_TOKEN = env(\"PISCINE_TWILIO_AUTH_TOKEN\");\nconst LEGACY_STATUS_GATEWAY_PUBLISHED =\n env(\"PISCINE_TWILIO_STATUS_GATEWAY_PUBLISHED\") === \"true\";\nconst RECEIVER_ENABLED =\n env(\"PISCINE_TWILIO_STATUS_RECEIVER_ENABLED\") === \"true\";\nconst STATUS_GATEWAY_PUBLISHED =\n LEGACY_STATUS_GATEWAY_PUBLISHED || RECEIVER_ENABLED;\n\nexport type NormalizedTwilioStatus = {\n provider_status: string;\n delivery_state:\n | \"queued\"\n | \"provider_accepted\"\n | \"sent\"\n | \"delivered\"\n | \"opened\"\n | \"failed\"\n | \"undelivered\";\n terminal: boolean;\n};\n\nexport function normalizeTwilioStatus(\n value: unknown,\n): NormalizedTwilioStatus | null {\n const provider_status = String(value ?? \"\").trim().toLowerCase();\n if (provider_status === \"queued\" || provider_status === \"scheduled\") {\n return { provider_status, delivery_state: \"queued\", terminal: false };\n }\n if (provider_status === \"accepted\" || provider_status === \"sending\") {\n return {\n provider_status,\n delivery_state: \"provider_accepted\",\n terminal: false,\n };\n }\n if (provider_status === \"sent\") {\n return { provider_status, delivery_state: \"sent\", terminal: false };\n }\n if (provider_status === \"delivered\" || provider_status === \"received\") {\n return { provider_status, delivery_state: \"delivered\", terminal: true };\n }\n if (provider_status === \"read\") {\n return { provider_status, delivery_state: \"opened\", terminal: true };\n }\n if (provider_status === \"undelivered\") {\n return { provider_status, delivery_state: \"undelivered\", terminal: true };\n }\n if (provider_status === \"failed\" || provider_status === \"canceled\") {\n return { provider_status, delivery_state: \"failed\", terminal: true };\n }\n return null;\n}\n\nfunction canonicalForm(\n exactUrl: string,\n params: URLSearchParams,\n): string {\n const entries = [...params.entries()].sort(([leftKey, leftValue], [rightKey, rightValue]) => {\n const keyOrder = leftKey.localeCompare(rightKey);\n return keyOrder || leftValue.localeCompare(rightValue);\n });\n return exactUrl + entries.map(([key, value]) => key + value).join(\"\");\n}\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nexport async function computeTwilioFormSignature(\n exactUrl: string,\n params: URLSearchParams,\n authToken: string,\n): Promise {\n if (!authToken) return \"\";\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(authToken),\n { name: \"HMAC\", hash: \"SHA-1\" },\n false,\n [\"sign\"],\n );\n const digest = await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(canonicalForm(exactUrl, params)),\n );\n return bytesToBase64(new Uint8Array(digest));\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n const max = Math.max(left.length, right.length);\n let difference = left.length ^ right.length;\n for (let index = 0; index < max; index += 1) {\n difference |= (left.charCodeAt(index) || 0) ^ (right.charCodeAt(index) || 0);\n }\n return difference === 0;\n}\n\nexport async function validateTwilioFormSignature(\n exactUrl: string,\n params: URLSearchParams,\n suppliedSignature: string,\n authToken = TWILIO_AUTH_TOKEN,\n): Promise {\n if (!authToken || !suppliedSignature) return false;\n const expected = await computeTwilioFormSignature(exactUrl, params, authToken);\n return constantTimeEqual(expected, suppliedSignature.trim());\n}\n\nexport async function configuredTwilioAuthTokenSelfTest(): Promise<{\n ok: boolean;\n tamper_rejected: boolean;\n}> {\n if (!TWILIO_AUTH_TOKEN) return { ok: false, tamper_rejected: false };\n\n const exactUrl = \"https://self-test.invalid/twilio-status\";\n const params = new URLSearchParams({\n MessageSid: \"SM11111111111111111111111111111111\",\n MessageStatus: \"delivered\",\n });\n const signature = await computeTwilioFormSignature(\n exactUrl,\n params,\n TWILIO_AUTH_TOKEN,\n );\n const valid = await validateTwilioFormSignature(\n exactUrl,\n params,\n signature,\n );\n params.set(\"MessageStatus\", \"failed\");\n const tampered = await validateTwilioFormSignature(\n exactUrl,\n params,\n signature,\n );\n return { ok: valid && !tampered, tamper_rejected: !tampered };\n}\n\nfunction clean(value: unknown, max: number): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nexport function buildSanitizedTwilioStatusPayload(\n params: URLSearchParams,\n occurredAt = new Date().toISOString(),\n context: Record = {},\n): Record | null {\n const messageSid = clean(params.get(\"MessageSid\"), 64);\n const normalized = normalizeTwilioStatus(params.get(\"MessageStatus\"));\n if (!/^(SM|MM)[0-9A-Za-z]{32}$/.test(messageSid) || !normalized) return null;\n\n const documentType = clean(context.document_type, 16).toLowerCase();\n const documentId = clean(context.document_id, 64);\n const documentLinked =\n (documentType === \"quote\" || documentType === \"invoice\") &&\n /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i\n .test(documentId);\n\n return {\n schema_version: \"1.0\",\n tenant_id: TENANT,\n source: \"valtown-twilio-status\",\n message_sid: messageSid,\n message_status: normalized.provider_status,\n delivery_state: normalized.delivery_state,\n terminal: normalized.terminal,\n document_type: documentLinked ? documentType : null,\n document_id: documentLinked ? documentId : null,\n self_test:\n messageSid === \"SM22222222222222222222222222222222\" &&\n params.get(\"PiscineSelfTest\") === \"1\",\n error_code: clean(params.get(\"ErrorCode\"), 64) || null,\n error_message: clean(params.get(\"ErrorMessage\"), 500) || null,\n occurred_at: occurredAt,\n raw_status: {\n ChannelPrefix: clean(params.get(\"ChannelPrefix\"), 32) || null,\n EventType: clean(params.get(\"EventType\"), 64) || null,\n },\n };\n}\n\nconst STATUS_QUEUE_SCHEMA = `\n create table if not exists twilio_status_fallback_queue (\n event_key text primary key,\n payload_json text not null,\n forward_state text not null default 'pending',\n attempts integer not null default 0,\n last_error text,\n created_at text not null,\n updated_at text not null,\n forwarded_at text\n )\n`;\n\nasync function ensureTwilioStatusQueue() {\n await sqlite.execute(STATUS_QUEUE_SCHEMA);\n}\n\nfunction twilioStatusEventKey(payload: Record): string {\n const tenant = clean(payload.tenant_id, 80);\n const messageSid = clean(payload.message_sid, 64);\n const deliveryState = clean(payload.delivery_state, 32);\n if (!tenant || !/^(SM|MM)[0-9A-Za-z]{32}$/.test(messageSid) || !deliveryState) {\n throw new Error(\"invalid_twilio_status_queue_key\");\n }\n return [tenant, \"twilio\", messageSid, deliveryState].join(\":\");\n}\n\nexport async function persistTwilioStatusFallback(\n payload: Record,\n reason = \"n8n_forward_pending\",\n): Promise<{ event_key: string; queue_depth: number }> {\n await ensureTwilioStatusQueue();\n const eventKey = twilioStatusEventKey(payload);\n await sqlite.execute({\n sql: `insert into twilio_status_fallback_queue (\n event_key,payload_json,forward_state,attempts,last_error,created_at,updated_at\n ) values (\n :event_key,:payload_json,'pending',0,:last_error,datetime('now'),datetime('now')\n )\n on conflict(event_key) do update set\n payload_json=excluded.payload_json,\n forward_state=case\n when twilio_status_fallback_queue.forward_state='forwarded' then 'forwarded'\n else 'pending'\n end,\n last_error=case\n when twilio_status_fallback_queue.forward_state='forwarded' then twilio_status_fallback_queue.last_error\n else excluded.last_error\n end,\n updated_at=datetime('now')`,\n args: {\n event_key: eventKey,\n payload_json: JSON.stringify(payload),\n last_error: clean(reason, 160) || \"n8n_forward_pending\",\n },\n });\n const depthResult = await sqlite.execute(\n \"select count(*) as queue_depth from twilio_status_fallback_queue where forward_state='pending'\",\n );\n const row = depthResult.rows[0] as Record | undefined;\n return { event_key: eventKey, queue_depth: Number(row?.queue_depth || 0) };\n}\n\nexport async function markTwilioStatusForwarded(eventKey: string) {\n await ensureTwilioStatusQueue();\n await sqlite.execute({\n sql: `update twilio_status_fallback_queue\n set forward_state='forwarded',\n last_error=null,\n forwarded_at=datetime('now'),\n updated_at=datetime('now')\n where event_key=:event_key`,\n args: { event_key: clean(eventKey, 240) },\n });\n}\n\nexport async function markTwilioStatusForwardFailed(\n eventKey: string,\n reason: string,\n) {\n await ensureTwilioStatusQueue();\n await sqlite.execute({\n sql: `update twilio_status_fallback_queue\n set forward_state='pending',\n attempts=attempts+1,\n last_error=:last_error,\n updated_at=datetime('now')\n where event_key=:event_key and forward_state<>'forwarded'`,\n args: {\n event_key: clean(eventKey, 240),\n last_error: clean(reason, 160) || \"n8n_forward_failed\",\n },\n });\n}\n\nexport async function twilioStatusQueueHealth() {\n await ensureTwilioStatusQueue();\n const result = await sqlite.execute(`\n select\n count(*) filter (where forward_state='pending') as pending,\n count(*) filter (where forward_state='forwarded') as forwarded,\n coalesce(max(attempts),0) as max_attempts\n from twilio_status_fallback_queue\n `);\n const row = result.rows[0] as Record | undefined;\n return {\n durable_fallback: true,\n pending: Number(row?.pending || 0),\n forwarded: Number(row?.forwarded || 0),\n max_attempts: Number(row?.max_attempts || 0),\n };\n}\n\nexport async function replayQueuedTwilioStatuses(limit = 50) {\n await ensureTwilioStatusQueue();\n const safeLimit = Math.max(1, Math.min(50, Number(limit) || 50));\n const queued = await sqlite.execute({\n sql: `select event_key,payload_json,attempts\n from twilio_status_fallback_queue\n where forward_state='pending'\n order by created_at\n limit :limit`,\n args: { limit: safeLimit },\n });\n\n const events: Array> = [];\n for (const raw of queued.rows as Array>) {\n try {\n const parsed = JSON.parse(String(raw.payload_json || \"{}\"));\n if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) {\n events.push({\n ...(parsed as Record),\n event_key: clean(raw.event_key, 240),\n });\n }\n } catch {\n await markTwilioStatusForwardFailed(\n clean(raw.event_key, 240),\n \"invalid_queued_payload\",\n );\n }\n }\n\n if (!events.length) {\n return {\n ok: true,\n inspected: queued.rows.length,\n forwarded: 0,\n failed: 0,\n n8n_executions: 0,\n batch_execution: true,\n automatic_retry: false,\n secrets_exposed: false,\n };\n }\n\n let response: { status: number; payload: Record };\n try {\n response = await forwardTwilioStatusBatch(events);\n } catch {\n response = {\n status: 503,\n payload: { ok: false, error: \"n8n_unreachable\" },\n };\n }\n\n const resultRows = Array.isArray(response.payload.results)\n ? response.payload.results as Array>\n : [];\n const resultsByKey = new Map(\n resultRows.map((item) => [clean(item.event_key, 240), item]),\n );\n let forwarded = 0;\n let failed = 0;\n for (const event of events) {\n const eventKey = clean(event.event_key, 240);\n const item = resultsByKey.get(eventKey);\n if (\n response.status >= 200 &&\n response.status < 300 &&\n item?.ok === true\n ) {\n await markTwilioStatusForwarded(eventKey);\n forwarded += 1;\n } else {\n await markTwilioStatusForwardFailed(\n eventKey,\n clean(response.payload.error || \"n8n_batch_item_failed\", 160),\n );\n failed += 1;\n }\n }\n\n return {\n ok: failed === 0,\n inspected: queued.rows.length,\n forwarded,\n failed,\n n8n_executions: 1,\n batch_execution: true,\n automatic_retry: false,\n secrets_exposed: false,\n };\n}\n\nasync function sha256Hex(value: string): Promise {\n const digest = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(value),\n );\n return [...new Uint8Array(digest)]\n .map((byte) => byte.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nfunction canonicalForwardPayload(\n payload: Record,\n requestId: string,\n timestamp: string,\n): string {\n return [\n timestamp,\n requestId,\n clean(payload.schema_version, 16),\n clean(payload.tenant_id, 80),\n clean(payload.source, 80),\n clean(payload.message_sid, 64),\n clean(payload.message_status, 32),\n clean(payload.occurred_at, 64),\n ].join(\"|\");\n}\n\nasync function signedForwardHeaders(\n payload: Record,\n requestId: string,\n): Promise> {\n const timestamp = String(Math.floor(Date.now() / 1000));\n const keyHash = await sha256Hex(TOOL_SECRET);\n const signature = await sha256Hex(\n keyHash + \":\" + canonicalForwardPayload(payload, requestId, timestamp),\n );\n return {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-twilio-status\",\n \"x-piscine-timestamp\": timestamp,\n \"x-piscine-signature\": signature,\n \"x-request-id\": requestId,\n };\n}\n\nfunction canonicalForwardBatch(\n body: Record,\n requestId: string,\n timestamp: string,\n): string {\n const events = Array.isArray(body.events) ? body.events : [];\n return [\n timestamp,\n requestId,\n clean(body.schema_version, 16),\n clean(body.tenant_id, 80),\n clean(body.source, 80),\n String(events.length),\n \"\",\n ].join(\"|\");\n}\n\nasync function signedForwardBatchHeaders(\n body: Record,\n requestId: string,\n): Promise> {\n const timestamp = String(Math.floor(Date.now() / 1000));\n const keyHash = await sha256Hex(TOOL_SECRET);\n const events = Array.isArray(body.events) ? body.events : [];\n const eventDigest = await sha256Hex(JSON.stringify(events));\n const canonical = canonicalForwardBatch(\n body,\n requestId,\n timestamp,\n ).replace(/\\|$/, \"|\" + eventDigest);\n const signature = await sha256Hex(keyHash + \":\" + canonical);\n return {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-twilio-status\",\n \"x-piscine-timestamp\": timestamp,\n \"x-piscine-signature\": signature,\n \"x-request-id\": requestId,\n };\n}\n\nexport async function forwardTwilioStatusBatch(\n inputEvents: Array>,\n): Promise<{ status: number; payload: Record }> {\n const gateway = twilioStatusGatewayStatus();\n const events = inputEvents.slice(0, 50);\n if (!gateway.available || !gateway.n8n_configured || !events.length) {\n return {\n status: 503,\n payload: { ok: false, error: \"twilio_status_batch_forwarder_unavailable\" },\n };\n }\n\n const requestId = crypto.randomUUID();\n const budget = await reserveN8nExecution(\n \"callback_batch\",\n `twilio-status-batch:${requestId}`,\n { channel: \"twilio_status\", batch_size: events.length },\n );\n if (!budget.allowed) {\n return {\n status: 429,\n payload: {\n ok: false,\n error: budget.error || \"n8n_project_daily_budget_exhausted\",\n budget_blocked: true,\n },\n };\n }\n\n const body: Record = {\n schema_version: \"1.0\",\n tenant_id: TENANT,\n source: \"valtown-twilio-status-batch\",\n request_id: requestId,\n events,\n };\n const headers = await signedForwardBatchHeaders(body, requestId);\n const response = await fetch(`${N8N_BASE}/webhook/${STATUS_PATH}`, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body),\n signal: AbortSignal.timeout(8000),\n });\n const raw = await response.text();\n let payload: Record;\n try {\n payload = JSON.parse(raw);\n } catch {\n payload = { ok: false, error: \"twilio_status_batch_invalid_response\" };\n }\n return { status: response.status, payload };\n}\n\nexport function twilioStatusGatewayStatus() {\n const n8n_configured = Boolean(N8N_BASE && STATUS_PATH && TOOL_SECRET);\n const auth_token_configured = Boolean(TWILIO_AUTH_TOKEN);\n return {\n published: STATUS_GATEWAY_PUBLISHED,\n activation_source: RECEIVER_ENABLED\n ? \"receiver_only_v2\"\n : LEGACY_STATUS_GATEWAY_PUBLISHED\n ? \"legacy_gate\"\n : \"none\",\n auth_token_configured,\n n8n_configured,\n available: STATUS_GATEWAY_PUBLISHED && auth_token_configured,\n durable_fallback: true,\n forwarder_configured: n8n_configured,\n forwarding_auth: \"signed_request_v2\" as const,\n forwarding_mode: \"batched\" as const,\n immediate_forward: false,\n max_batch_size: 50,\n mode: \"delivery_status_ingest_only\" as const,\n };\n}\n\nexport async function forwardTwilioStatus(\n payload: Record,\n): Promise<{ status: number; payload: Record }> {\n const gateway = twilioStatusGatewayStatus();\n if (!gateway.available || !gateway.n8n_configured) {\n return {\n status: 503,\n payload: { ok: false, error: \"twilio_status_forwarder_unavailable\" },\n };\n }\n\n const requestId = crypto.randomUUID();\n const budget = await reserveN8nExecution(\n \"production\",\n `twilio-status-single:${requestId}`,\n { channel: \"twilio_status\", legacy_single: true },\n );\n if (!budget.allowed) {\n return {\n status: 429,\n payload: {\n ok: false,\n error: budget.error || \"n8n_project_daily_budget_exhausted\",\n budget_blocked: true,\n },\n };\n }\n const headers = await signedForwardHeaders(payload, requestId);\n const response = await fetch(`${N8N_BASE}/webhook/${STATUS_PATH}`, {\n method: \"POST\",\n headers,\n body: JSON.stringify({ ...payload, request_id: requestId }),\n signal: AbortSignal.timeout(8000),\n });\n\n const body = await response.text();\n let parsed: Record;\n try {\n parsed = JSON.parse(body);\n } catch {\n parsed = { ok: false, error: \"twilio_status_ingest_invalid_response\" };\n }\n return { status: response.status, payload: parsed };\n}\n",[],[1122,1166],"c81c243f-5fb3-4c69-bef6-65a20ad54ff6","trace-v50.ts","01a008e7-12ca-757f-ba31-f6f63e95b1e2",["D",1786855756508],"/**\n * Trace v50 — remplace « Parcours de l'action ».\n *\n * POURQUOI LE REMPLACER PLUTÔT QUE LE REDESSINER\n * L'ancien composant affiche six étapes, mais son pilote `v26Index` ne connaît\n * que quatre positions :\n * ok/completed → toutes les étapes marquées franchies\n * pending/prepared → saut direct à « Confirmer »\n * bad/failed → avant-dernière étape\n * défaut → étape 1\n * Les étapes intermédiaires — « Comprendre », « Vérifier », « Brouillon » — ne\n * sont donc jamais observées. Pire : `renderV26Path(action,'pending',…)` est\n * appelé AVANT le `await`, ce qui les marque `done` alors que rien n'a encore\n * eu lieu. Le composant affirme l'achèvement d'étapes qui n'ont pas été\n * exécutées. Ce n'est pas un défaut de style, c'est une façade : le redessiner\n * n'aurait produit qu'une façade plus jolie.\n *\n * CE QUI LE REMPLACE\n * Une trace d'événements réels. Chaque ligne correspond à une chose observée :\n * un appel effectivement parti, une réponse effectivement reçue, une durée\n * effectivement mesurée au chronomètre du navigateur. Rien n'est prédit,\n * aucune étape n'est inventée. Pendant qu'un appel est en vol, le compteur\n * avance — et cette attente-là est réelle, c'est la seule animation.\n *\n * L'état affiché est lu tel quel dans la réponse du serveur : `ok`,\n * `confirmation_required`, `action_completed`, `execution_state`, `error`.\n * Aucune interprétation, aucun enjolivement.\n *\n * LIMITE ASSUMÉE : seules les actions passant par `ownerAction` sont tracées.\n * C'est la frontière d'exécution réelle, donc celle qui donne des durées\n * justes. Un événement émis ailleurs n'apparaîtra pas — mieux vaut une trace\n * incomplète qu'une trace qui devine.\n *\n * FORME : mesurée sur Linear et Stripe — zéro dégradé, zéro liseré interne,\n * un filet, des chiffres tabulaires. Pas de pastilles, pas de carte, pas de\n * cadre. Une colonne.\n */\n\nexport const TRACE_RELEASE = \"trace-v50-evenements-reels\";\n\nexport function styleTrace(): string {\n return `\n/* ── L'ancienne barre et la pastille flottante disparaissent ────────────── */\n.action-path-v26,.action-path-v26-head,.action-path-v26-steps{\ndisplay:none!important;\n}\n/* La notification flottante en bas à droite faisait une TROISIÈME surface\n d'état pour une seule action, après la barre et la conversation. La trace\n porte désormais l'information, avec son aria-live. */\n.v26-status-dock,.v26-status-dock.show{display:none!important}\n\n/* ── Trace ──────────────────────────────────────────────────────────────── */\n.trace-v50{\ndisplay:grid;gap:2px;\nmargin:0 0 24px;padding:15px 0 0;\nborder-top:1px solid var(--line);\n}\n.trace-v50-tete{\ndisplay:flex;align-items:baseline;justify-content:space-between;gap:12px;\nmargin-bottom:5px;\nfont-size:.585rem;letter-spacing:.15em;text-transform:uppercase;\ncolor:var(--muted-2);\n}\n.trace-v50-tete span{font-family:var(--font-mono);letter-spacing:.06em;font-variant-numeric:tabular-nums}\n.trace-v50-corps{list-style:none;margin:0;padding:0;display:grid}\n.trace-v50-ligne{\ndisplay:grid;grid-template-columns:auto minmax(0,1fr) auto;\nalign-items:baseline;gap:16px;\npadding:8px 0;\nborder-top:1px solid color-mix(in srgb,var(--line) 50%,transparent);\nfont-size:.735rem;\n}\n.trace-v50-corps>li:first-child{border-top:0}\n.trace-v50-heure{\nfont-family:var(--font-mono);font-size:.625rem;\nfont-variant-numeric:tabular-nums;color:var(--muted-2);\n}\n.trace-v50-nom{color:var(--ink);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.trace-v50-etat{\ndisplay:flex;align-items:center;gap:8px;\nfont-family:var(--font-mono);font-size:.625rem;\nfont-variant-numeric:tabular-nums;color:var(--muted);white-space:nowrap;\n}\n.trace-v50-duree{color:var(--muted-2)}\n.trace-v50-puce{\nflex:none;width:5px;height:5px;border-radius:50%;\nbackground:var(--muted-2);\n}\n/* Le seul mouvement de l'ensemble, et il correspond à une attente réelle. */\n.trace-v50-ligne.vif .trace-v50-puce{\nbackground:var(--accent);\nanimation:traceV50Battement 1.2s ease-in-out infinite;\n}\n.trace-v50-ligne.vif .trace-v50-etat{color:var(--ink)}\n.trace-v50-ligne.reussi .trace-v50-puce{background:var(--ok)}\n.trace-v50-ligne.attente .trace-v50-puce{background:var(--accent);opacity:.55}\n.trace-v50-ligne.echec .trace-v50-puce{background:var(--danger,#c96a52)}\n.trace-v50-ligne.echec .trace-v50-etat{color:var(--danger,#c96a52)}\n.trace-v50-vide{padding:8px 0;font-size:.7rem;color:var(--muted-2)}\n/* Région d'annonce : invisible à l'œil, présente pour les lecteurs d'écran. */\n.trace-v50-annonce{\nposition:absolute!important;width:1px!important;height:1px!important;\npadding:0!important;margin:-1px!important;overflow:hidden!important;\nclip:rect(0 0 0 0)!important;clip-path:inset(50%)!important;\nwhite-space:nowrap!important;border:0!important;\n}\n@keyframes traceV50Battement{0%,100%{opacity:1}50%{opacity:.25}}\n@media (prefers-reduced-motion:reduce){\n.trace-v50-ligne.vif .trace-v50-puce{animation:none}\n}\n@media (max-width:640px){\n.trace-v50-ligne{gap:10px;font-size:.7rem}\n.trace-v50-nom{white-space:normal}\n}\n`;\n}\n\nexport function scriptTrace(): string {\n return String.raw`(function(){\nvar MAX=6,evts=[],hote=null,corps=null,compte=null,annonce=null,minuteur=0,essais=0;\n\nfunction esc(v){\n return String(v==null?\"\":v).replace(/[&<>\"']/g,function(c){\n return {\"&\":\"&\",\"<\":\"<\",\">\":\">\",\"\\\"\":\""\",\"'\":\"'\"}[c];\n });\n}\nfunction deux(n){return (n<10?\"0\":\"\")+n}\nfunction heure(d){return deux(d.getHours())+\":\"+deux(d.getMinutes())+\":\"+deux(d.getSeconds())}\nfunction duree(ms){\n if(ms<1000)return Math.round(ms)+\" ms\";\n if(ms<10000)return (ms/1000).toFixed(1)+\" s\";\n return Math.round(ms/1000)+\" s\";\n}\nfunction etiquette(action){\n var t=window.ownerActionLabels;\n if(t&&t[action])return String(t[action]);\n return String(action||\"action\").replace(/[._]/g,\" \");\n}\n\n/* L'ancienne barre : on coupe le pilote, sinon renderV26Path la reconstruit à\n chaque action. Le CSS la masque de toute façon — ceci évite le travail. */\nfunction neutraliserAncien(){\n var f=window.renderV26Path;\n if(typeof f===\"function\"&&!f.__traceV50){\n var vide=function(){};vide.__traceV50=true;window.renderV26Path=vide;\n }\n var d=window.showV26Status;\n if(typeof d===\"function\"&&!d.__traceV50){\n var rien=function(){};rien.__traceV50=true;window.showV26Status=rien;\n }\n var vieux=document.getElementById(\"v26ActionPath\");\n if(vieux&&vieux.parentNode)vieux.parentNode.removeChild(vieux);\n var dock=document.getElementById(\"v26StatusDock\");\n if(dock&&dock.parentNode)dock.parentNode.removeChild(dock);\n}\n\nfunction monter(){\n if(hote&&document.body&&document.body.contains(hote))return true;\n var ancre=document.querySelector(\"#view-owner .hero\")\n ||document.querySelector(\"#view-owner\")\n ||document.querySelector(\".owner-voice-copy\");\n if(!ancre)return false;\n hote=document.createElement(\"section\");\n hote.id=\"traceV50\";\n hote.className=\"trace-v50\";\n /* Pas d'aria-live sur ce conteneur : le compteur de durée d'une action en\n cours change toutes les 140 ms, et une région vivante le ferait annoncer\n sept fois par seconde. Une région dédiée annonce les issues, une fois. */\n hote.innerHTML='

Activit\\u00e9

'\n +'

';\n ancre.insertAdjacentElement(\"afterend\",hote);\n corps=hote.querySelector(\"#traceV50Corps\");\n compte=hote.querySelector(\"#traceV50Compte\");\n annonce=document.createElement(\"div\");\n annonce.id=\"traceV50Annonce\";\n annonce.className=\"trace-v50-annonce\";\n annonce.setAttribute(\"aria-live\",\"polite\");\n annonce.setAttribute(\"aria-atomic\",\"true\");\n hote.insertAdjacentElement(\"afterend\",annonce);\n return true;\n}\n\nfunction classe(e){\n if(e.etat===\"en cours\")return \"vif\";\n if(e.etat===\"ex\\u00e9cut\\u00e9e\")return \"reussi\";\n if(e.etat===\"confirmation requise\")return \"attente\";\n return \"echec\";\n}\n\nfunction rendre(){\n if(!monter())return;\n if(!evts.length){\n corps.innerHTML='

Aucune action ex\\u00e9cut\\u00e9e depuis l\\u2019ouverture

';\n compte.textContent=\"\";\n return;\n }\n var vifs=0,i;\n for(i=0;i1?\" \\u00e9v\\u00e9nements\":\" \\u00e9v\\u00e9nement\");\n var html=\"\";\n for(i=0;i'\n +''+heure(e.horodatage)+''\n +''+esc(e.nom)+detail+''\n +''\n +esc(e.etat)+' '+duree(e.ms)+''\n +'';\n }\n corps.innerHTML=html;\n}\n\nfunction ouvrir(nom){\n var e={nom:nom,debut:performance.now(),horodatage:new Date(),etat:\"en cours\",ms:0,detail:\"\"};\n evts.unshift(e);\n if(evts.length>MAX)evts.length=MAX;\n if(!minuteur){\n /* Le tic ne réécrit QUE le texte des durées en cours. La version\n précédente reconstruisait tout le HTML de la liste toutes les 120 ms,\n ce qui réveillait à chaque fois les observateurs de mutations de portée\n document — un coût global pour afficher un chronomètre. */\n minuteur=setInterval(function(){\n var vif=false;\n for(var i=0;i${styleTrace()}`\n + ``;\n}\n",[],[1122,1173],"60018b56-357e-48a5-8029-9cb43217c5fa","texture-v33.ts","01a008e7-12ca-757f-ba31-f1662c03edc4",["D",1786855756508],"/**\n * Couche de surface v34 — minimalisme, neutralité chaude, mouvement.\n *\n * Ce qui change par rapport à v33, et pourquoi :\n *\n * 1. LE GRAIN EST SUPPRIMÉ. Il était jugé disgracieux, et la référence la plus\n * minimaliste fournie (pp-fragment.com) n'en utilise aucun. Adobe en met,\n * pp-fragment n'en met pas : ce n'est donc pas un marqueur de qualité mais\n * un choix d'ambiance. Dans un outil métier consulté toute la journée, il\n * ajoute du bruit visuel sans rien apporter à la lecture.\n *\n * 2. LA PALETTE PASSE EN NEUTRE CHAUD. L'ancienne base — turquoise #49e7c3 sur\n * bleu nuit #05080f — est un code visuel de tableau de bord SaaS daté. Les\n * gris sont désormais légèrement chauds (Adobe : #856866, #b4a19b, #f8e7dc),\n * ce qui retire la froideur clinique sans virer au sépia.\n *\n * 3. UN SEUL ACCENT, employé avec parcimonie. pp-fragment ne déclare qu'une\n * couleur. La hiérarchie est portée par la typographie, l'espace et le\n * contraste — pas par la couleur.\n *\n * 4. MOINS D'OMBRE, PLUS DE MOUVEMENT. Le minimalisme suppose de retirer les\n * ombres lourdes ; le style vient de la densité de transitions. Relevé :\n * Adobe 141 transitions, pp-fragment 72, ce cockpit en comptait 6.\n *\n * Couche strictement additive, injectée en dernier dans le : son `:root`\n * l'emporte sur les déclarations antérieures. Retirer l'appel dans cockpit.ts\n * rétablit exactement l'état d'origine.\n *\n * Contraintes : CSP `style-src 'nonce-…'`, `prefers-reduced-motion` respecté,\n * aucune requête réseau, aucune image.\n */\n\nimport { styleVision, VISION_RELEASE } from \"./vision-v44.ts\";\n\nexport const TEXTURE_RELEASE = \"surface-v50.1-scene-retiree\";\n\nexport function coucheTexture(pageNonce: string): string {\n return ``;\n}\n",[],[1122,1180],"14d2ddec-f86f-48a8-be82-fca66a4a42db","teinte-v56.ts","01a008e7-12ca-757f-ba31-eda6447d8d90",["D",1786855756508],"/**\n * Teinte v56 — la chaleur Claude.\n *\n * CONSIGNE : « change la palette de couleur complète du système, éclaircis un\n * peu, dans le délire moderne comme Claude — simple, avec des petites choses\n * qui marquent et qui font office d'image de marque. »\n *\n * CE QUE FAIT CETTE COUCHE (finale, après interface-v55) :\n *\n * 1. PALETTE COMPLÈTE — le noir absolu (#0b0a0a) devient le charbon CHAUD de\n * Claude (#262624) : plus clair, plus doux, jamais clinique. Panneaux et\n * champs montent d'un ton, l'encre passe au crème (#f0eee6), les gris\n * deviennent des beiges éteints. L'accent adopte le terracotta exact de\n * Claude (#d97757). Toute l'interface référence ces variables : une seule\n * surcharge de :root reskinne le système entier.\n *\n * 2. SIGNATURES DE MARQUE — les « petites choses qui marquent » :\n * · La SÉRIF D'APPARAT sur les titres et sur « Que puis-je faire pour\n * vous ? » : c'est LE geste typographique de Claude. Pile ui-serif\n * locale (aucune requête réseau, CSP font-src 'self' respectée).\n * · Les réponses de l'assistante en sérif, les vôtres en sans — la\n * conversation porte la marque.\n * · La sidebar un ton PLUS SOMBRE que le contenu (grammaire Claude).\n * · Sélection de texte et anneaux de focus au terracotta.\n *\n * 3. CORRECTIONS DE CASSE — plus aucun titre en capitales (le\n * « ASSISTANTE PISCINISTE » criard de la capture redevient un titre) ;\n * l'aide du composeur repasse en casse normale.\n *\n * Couche strictement additive, injectée EN DERNIER : la retirer de cockpit.ts\n * rétablit exactement la teinte v50/v55.\n */\n\nexport const TEINTE_RELEASE = \"teinte-v56.2-rail-claude-et-silence\";\n\nexport function styleTeinte(): string {\n return `\n/* ══ 1 · PALETTE — charbon chaud, encre crème, terracotta Claude ══════════ */\n:root{\n--bg:#262624;\n--panel:#2f2e2b;\n--panel2:#383632;\n--panel3:#43403a;\n--ink:#f0eee6;\n--muted:#b3aca0;\n--muted-2:#8b8578;\n--line:rgba(240,238,230,.10);\n--line-strong:rgba(240,238,230,.20);\n--accent:#d97757;\n--accent2:#3c2a21;\n--on-accent:#ffffff;\n--blue:#b3aca0;\n--warn:#dfa14f;\n--danger:#d3756b;\n--ok:#a3b57a;\n--serif:ui-serif,Georgia,\"Iowan Old Style\",\"Palatino Linotype\",\"Times New Roman\",serif;\n}\nbody{\nbackground:var(--bg)!important;\nbackground-image:radial-gradient(1100px 640px at 50% -12%,rgba(217,119,87,.055),transparent 62%)!important;\ncolor:var(--ink);\n}\nselect option,select optgroup,datalist option{background:#2f2e2b!important;color:#f0eee6!important}\n::selection{background:color-mix(in srgb,var(--accent) 32%,transparent);color:var(--ink)}\n\n/* ══ 2 · SIGNATURES DE MARQUE ═════════════════════════════════════════════ */\n/* La sérif d'apparat : titres de vues et accueil de l'assistante. */\nh1,.h1,.hero-title,#ownerVoiceTitle{\nfont-family:var(--serif)!important;\nfont-weight:500!important;\nletter-spacing:-.01em!important;\ntext-transform:none!important;\n}\n#ownerVoiceTitle{font-size:clamp(1.7rem,1.2rem + 1.8vw,2.4rem)!important}\n/* Les réponses de l'assistante en sérif — la conversation porte la marque. */\n.conv-v50-tour.assistante,#convV50 .assistante,\n.owner-bubble-v26.assistant{\nfont-family:var(--serif)!important;\nfont-size:1.02rem!important;line-height:1.72!important;\n}\n/* La sidebar, un ton plus sombre que le contenu (grammaire Claude). */\n.side{background:#21201d!important;border-right:1px solid var(--line)!important}\n.side .nav button{color:#a9a294!important}\n.side .nav button:hover{color:var(--ink)!important;background:rgba(240,238,230,.05)!important}\n.side .nav button.active{color:var(--ink)!important;background:rgba(240,238,230,.08)!important}\n.side .brand b{color:var(--ink)!important}\n/* La marque : pastille terracotta pleine, sans dégradé. */\n.side .brand-mark{\nbackground:var(--accent)!important;color:#fff!important;\nbox-shadow:none!important;border-radius:8px!important;\n}\n/* Le seul bouton coloré : terracotta plein, texte blanc. */\n.btn.primary,.btn-primary,button[type=\"submit\"],.auth-submit{\nbackground:var(--accent)!important;color:#fff!important;\n}\n.btn.primary:hover,.btn-primary:hover,button[type=\"submit\"]:hover,.auth-submit:hover{\nbackground:#c96a4b!important;color:#fff!important;\n}\n\n/* ══ 3 · CASSE ET DÉTAIL ══════════════════════════════════════════════════ */\nh1,h2,h3,.card-head>h2,.card-head>h3{text-transform:none!important}\n.ecrit-v53-note{text-transform:none!important;letter-spacing:.01em!important;font-size:.68rem!important}\n.owner-transcript:empty:before{color:var(--muted-2)!important}\n\n/* ══ 4 · DIALOGUES NATIFS, VOILE ET NOTIFICATIONS (v56.1) ═════════════════\n Le dialogue est l'élément natif — pas une classe. Les couches\n précédentes visaient .dialog, qui n'existe pas : il gardait le style de\n base, dont un voile ::backdrop bleu-noir à 78 % qui replongeait tout\n l'écran dans le noir dès qu'il s'ouvrait. Voile chaud et léger, boîte\n dans la palette, notifications accordées. */\ndialog{\nbackground:var(--panel2)!important;color:var(--ink)!important;\nborder:1px solid var(--line-strong)!important;border-radius:12px!important;\nbox-shadow:0 24px 80px -32px rgba(0,0,0,.6)!important;\n}\ndialog::backdrop{background:rgba(24,23,21,.55)!important}\ndialog header,.dialog-head{background:none!important;border-bottom:1px solid var(--line)!important}\ndialog footer,.dialog-foot{background:none!important;border-top:1px solid var(--line)!important}\n.result{\nbackground:color-mix(in srgb,var(--ink) 4%,transparent)!important;\nborder:1px solid var(--line)!important;color:var(--muted)!important;\nborder-radius:8px!important;\n}\n.blocker{\nbackground:none!important;\nborder:1px solid color-mix(in srgb,var(--warn) 35%,transparent)!important;\ncolor:var(--warn)!important;border-radius:8px!important;\n}\n.toast{\nbackground:var(--ink)!important;color:#262624!important;border:0!important;\nborder-radius:10px!important;box-shadow:0 14px 40px -18px rgba(0,0,0,.5)!important;\n}\n.toast.bad{background:#5a2b25!important;color:#ffd8d0!important}\n\n/* ══ 5 · LES BOUTONS QUI MÈNENT AUX PAGES PORTENT LA MARQUE (v56.1) ═══════\n Entrée active de la navigation et onglet actif : teinte terracotta. C'est\n la seule décoration admise — elle dit où l'on est. */\n.side .nav button.active{\nbackground:color-mix(in srgb,var(--accent) 16%,transparent)!important;\ncolor:var(--ink)!important;\n}\n.segmented button.active,.tabs button.active{\nbackground:color-mix(in srgb,var(--accent) 15%,transparent)!important;\ncolor:var(--ink)!important;\nborder-color:color-mix(in srgb,var(--accent) 35%,transparent)!important;\n}\n\n/* ══ 6 · PAGES D'AUTHENTIFICATION ACCORDÉES (v56.1) ═══════════════════════\n La feuille auth de base code en dur une pastille taupe, une icône\n verdâtre et des barres d'étapes taupe : les variables ne les atteignent\n pas, on reprend les mêmes sélecteurs plus tard dans la cascade. */\n.brand-mark{background:var(--accent)!important;color:#fff!important;box-shadow:none!important}\n.auth-icon{\nbackground:var(--panel3)!important;border-color:var(--line-strong)!important;\ncolor:var(--accent)!important;\n}\n.auth-step:before{background:var(--line-strong)!important}\n.auth-step.active:before,.auth-step.done:before{background:var(--accent)!important}\n.waiting{background:var(--panel)!important;color:var(--muted)!important}\n.auth-card{background:var(--panel)!important;border-color:var(--line-strong)!important;box-shadow:none!important}\n\n/* ══ 7 · LE RAIL, FAÇON CLAUDE (v56.2) ════════════════════════════════════\n « Recopie la barre latérale de Claude. » L'épure v55 bordait TOUS les\n boutons — y compris ceux de la navigation, d'où ces boîtes empilées.\n Grammaire Claude : une liste plate, du texte, une pastille de survol,\n l'entrée active teintée terracotta. Aucune boîte. */\n.side{padding:14px 10px!important}\n.side .brand{padding:6px 8px 14px!important;margin:0 0 4px!important;border:0!important;background:none!important}\n.side .nav{display:grid!important;gap:2px!important}\n.side .nav button{\nborder:0!important;background:transparent!important;box-shadow:none!important;\njustify-content:flex-start!important;text-align:left!important;\nmin-height:38px!important;padding:8px 10px!important;border-radius:8px!important;\nfont-size:.875rem!important;font-weight:500!important;letter-spacing:0!important;\ntransform:none!important;\n}\n.side .nav button:hover{background:rgba(240,238,230,.06)!important;color:var(--ink)!important}\n.side .nav button.active{\nbackground:color-mix(in srgb,var(--accent) 15%,transparent)!important;\ncolor:var(--ink)!important;\n}\n\n/* ══ 8 · SILENCE ET VOILE DE CHARGEMENT (v56.2) ═══════════════════════════\n Plus aucun toast à l'écran — ni « Données synchronisées », ni erreurs\n techniques brutes en bas à gauche. Le retour d'information vit dans les\n surfaces en place : résultats de dialogue, zone de résultat, conversation,\n états ligne à ligne du radar, erreurs du composeur (inline, conservées).\n Rétablir les toasts : supprimer la ligne display:none.\n\n Le voile de rechargement (« Chargement des données ») est habillé à\n l'exécution par claude v53.3 qui lui pose la classe .voile-v56 : fond nu\n à la couleur de la page, contenu masqué, trois points blancs qui sautent\n chacun leur tour. */\n.toast,#toast{display:none!important}\n.voile-v56{background:var(--bg)!important;backdrop-filter:none!important;isolation:isolate}\n.voile-v56>*{display:none!important}\n.voile-v56::before{\ncontent:\"\";position:absolute;left:50%;top:50%;\nwidth:9px;height:9px;margin:-5px 0 0 -5px;border-radius:50%;\nbackground:transparent;\nbox-shadow:-18px 0 0 #fff,0 0 0 #fff,18px 0 0 #fff;\nanimation:voilePointsV56 1.05s ease-in-out infinite;\n}\n@keyframes voilePointsV56{\n0%,90%,100%{box-shadow:-18px 0 0 #fff,0 0 0 #fff,18px 0 0 #fff}\n15%{box-shadow:-18px -9px 0 #fff,0 0 0 #fff,18px 0 0 #fff}\n30%{box-shadow:-18px 0 0 #fff,0 0 0 #fff,18px 0 0 #fff}\n45%{box-shadow:-18px 0 0 #fff,0 -9px 0 #fff,18px 0 0 #fff}\n60%{box-shadow:-18px 0 0 #fff,0 0 0 #fff,18px 0 0 #fff}\n75%{box-shadow:-18px 0 0 #fff,0 0 0 #fff,18px -9px 0 #fff}\n}\n@media (prefers-reduced-motion:reduce){.voile-v56::before{animation:none}}\n`;\n}\n\nexport function coucheTeinte(nonce: string): string {\n return ``;\n}\n",[],[1122,1187],"26a06694-c9c6-4b83-9ba6-c3345f1b7ad2","sobriete-v52.ts","01a008e7-12ca-757f-ba31-eb14e2e878d7",["D",1786855756508],"/**\n * Sobriété v52 — la conversation devient l'interface.\n *\n * CE QUE LA MESURE A MONTRÉ\n * La vue assistante empile onze surfaces distinctes, relevées par leurs\n * familles de classes : orbe 3D, panneau d'activation, bloqueurs, grille de\n * commandes, liste de contrôles, KPI de livraison, prochaines actions,\n * raccourcis, bandeau de sûreté, chronologie d'actions, conversation.\n * Onze surfaces qui se disputent l'attention alors que l'usage annoncé est\n * simple : on va s'appuyer sur l'assistante.\n *\n * LE PARTI PRIS\n * Une colonne. La conversation à pleine force, large et lisible. Tout le reste\n * descend d'un cran : plus petit, plus sourd, sans cadre ni fond. La scène 3D\n * passe en arrière-plan — elle porte un signal réel, la réactivité au son,\n * mais elle ne doit plus rivaliser avec le texte.\n *\n * CE QUE JE N'AI PAS FAIT, ET POURQUOI\n * Je ne masque rien en display:none. Deux raisons. D'abord parce que masquer\n * n'est pas simplifier : c'est retirer sans le dire. Ensuite parce que la\n * palette ⌘K n'indexe que ce qui est réellement visible — masquer ces panneaux\n * les rendrait introuvables, et la simplification se paierait d'une perte\n * d'accès. Ils restent là, atteignables, simplement plus discrets.\n *\n * SEULE EXCEPTION, ASSUMÉE : owner-action-timeline. C'est une seconde\n * chronologie d'activité, en doublon de la trace que j'ai construite et\n * vérifiée. Deux affichages de la même chose sont une confusion, pas une\n * richesse. Je n'ai pas audité celle-ci — je garde donc celle dont je peux\n * répondre, et une ligne suffit à rétablir l'autre.\n */\n\nexport const SOBRIETE_RELEASE = \"sobriete-v52-conversation-centrale\";\n\nexport function styleSobriete(): string {\n return `\n/* ══ UNE COLONNE ══════════════════════════════════════════════════════════ */\n#view-owner{\nmax-width:768px!important;\nmargin-left:auto!important;margin-right:auto!important;\n}\n.owner-simple-layout,.owner-focus-layout,.owner-focus{\ndisplay:block!important;\ngrid-template-columns:none!important;\nmax-width:100%!important;\n}\n\n/* ══ LA CONVERSATION À PLEINE FORCE ═══════════════════════════════════════\n Corps plus grand et interligne plus ample : c'est le texte qu'on va lire\n toute la journée, il mérite la place. */\n.conv-v50{margin:18px 0 0}\n.conv-v50-tour{\nfont-size:.95rem!important;\nline-height:1.72!important;\nmax-width:68ch!important;\nmargin-bottom:22px!important;\npadding-left:20px!important;\n}\n.conv-v50-tour.utilisateur{padding:13px 16px!important}\n.conv-v50-role{font-size:.585rem!important;margin-bottom:6px!important}\n.conv-v50-tour.systeme{font-size:.68rem!important}\n\n/* ══ LA SCÈNE 3D PASSE DERRIÈRE ═══════════════════════════════════════════\n Elle reste vivante — la réactivité au son est une information réelle — mais\n elle cesse d'être un objet à regarder. */\n.owner-orb-shell{\nposition:fixed!important;\nright:-8vw!important;top:14vh!important;\nwidth:min(44vw,480px)!important;height:min(44vw,480px)!important;\nopacity:.14!important;\npointer-events:none!important;\nz-index:0!important;\nmargin:0!important;\n}\n#view-owner,.conv-v50,.trace-v50{position:relative;z-index:1}\n\n/* ══ LE RESTE DESCEND D'UN CRAN ═══════════════════════════════════════════\n Rien n'est retiré. Plus de cadre, plus de fond, plus petit, plus sourd :\n ces panneaux deviennent des notes de bas de page, pas des fenêtres. */\n.owner-activation,.owner-blockers,.owner-delivery-kpis,.owner-shortcuts,\n.owner-command-grid,.owner-control-list,.owner-safety-strip,\n.owner-activity-panel,.owner-next-list{\nbackground:none!important;\nborder:0!important;\nbox-shadow:none!important;\npadding:0!important;\nmargin-top:26px!important;\nfont-size:.74rem!important;\ncolor:var(--muted)!important;\n}\n.owner-activation-grid,.owner-command-grid,.owner-shortcut-grid,\n.owner-delivery-kpis{\ndisplay:flex!important;flex-wrap:wrap!important;gap:8px 18px!important;\ngrid-template-columns:none!important;\n}\n.owner-activation-step,.owner-command-row,.owner-control-row,\n.owner-delivery-kpi,.owner-next-item,.owner-blocker,.owner-safe-note{\nbackground:none!important;\nborder:0!important;\nbox-shadow:none!important;\nborder-radius:0!important;\npadding:3px 0!important;\nfont-size:.74rem!important;\n}\n.owner-activation-head,.owner-simple-head{\nfont-size:.585rem!important;letter-spacing:.15em!important;\ntext-transform:uppercase!important;color:var(--muted-2)!important;\nborder:0!important;background:none!important;padding:0!important;\n}\n\n/* Un seul filet sépare la conversation de tout le reste. */\n.owner-activation,.owner-activity-panel,.owner-shortcuts{\nborder-top:1px solid var(--line)!important;\npadding-top:18px!important;\n}\n\n/* ══ LA SEULE CHOSE RETIRÉE ═══════════════════════════════════════════════\n Doublon de la trace vérifiée. Retirer cette ligne la rétablit. */\n.owner-action-timeline{display:none!important}\n\n/* ══ LA TRACE RESTE, PLUS DISCRÈTE ════════════════════════════════════════ */\n.trace-v50{margin-top:30px!important;padding-top:16px!important}\n.trace-v50-ligne{font-size:.7rem!important}\n\n@media (max-width:820px){\n.owner-orb-shell{display:none!important}\n#view-owner{max-width:100%!important}\n.conv-v50-tour{font-size:.9rem!important}\n}\n`;\n}\n\nexport function coucheSobriete(nonce: string): string {\n return ``;\n}\n",[],[1122,1194],"c79a88b9-f3a7-4a76-a45f-53d82c67fafb","silence-v57.ts","01a008e7-12ca-757f-ba31-e5df7e4d7034",["D",1786855756508],"/**\n * Silence v57 — l'interface se tait.\n *\n * TROIS DÉFAUTS MESURÉS, TROIS CORRECTIONS\n *\n * 1. L'ÉCRAN DE CHARGEMENT MOCHE. Source trouvée par sonde mécanique :\n * client-v10.ts pose `.v10-loading:after` avec `content:'Chargement des\n * données…'`, un voile `rgba(9,16,23,.72)` — bleu-noir, seul reste de\n * l'ancienne palette — et un `backdrop-filter:blur(3px)`. D'où l'écran\n * « plus foncé » au changement de vue. Remplacé par : la couleur de fond,\n * rien d'écrit, et trois points blancs qui sautent l'un après l'autre.\n * Un seul pseudo-élément suffit : le point central est l'élément, les deux\n * autres sont ses ombres portées — leurs décalages verticaux sont animés\n * en décalé. Aucun nœud ajouté au DOM, aucune boucle JS.\n *\n * 2. « DONNÉES SYNCHRONISÉES ». C'est `.v10-data-note`, une pastille d'état\n * posée dans l'en-tête d'Aujourd'hui. Elle a quatre états ; trois sont du\n * bruit (synchronisées / en cours / progressif) et disparaissent. Le\n * quatrième — `.bad`, « Données métier indisponibles » — RESTE : c'est une\n * panne réelle, la masquer serait mentir sur l'état du système.\n *\n * 3. LES CODES TECHNIQUES EN TOAST. Les appels `toast(error.message,false)`\n * de client-v10 affichent la valeur brute renvoyée par l'API :\n * `lecture_indisponible`, `csrf_rejected`, « invalid channel »… Ce n'est\n * pas une information pour un pisciniste. Deux traitements :\n * · TRADUCTION — chaque code connu devient une phrase française ; un code\n * inconnu devient une phrase générique honnête. L'échec reste dit.\n * · SILENCE — uniquement pour deux messages dont l'état est DÉJÀ affiché\n * ailleurs et sur lesquels l'utilisateur n'a rien à faire : « Données\n * conservées : … » (les données à l'écran restent valables) et l'échec\n * de synchronisation de fond (la pastille .bad le porte déjà).\n *\n * POURQUOI DEUX MÉCANISMES POUR LES TOASTS\n * Cette couche est injectée dans : au moment où elle s'exécute, la\n * fonction globale `toast` n'existe pas encore (elle est définie plus bas\n * dans le corps). On installe donc AUSSI un observateur sur #toast qui\n * assainit le texte au moment de l'affichage — celui-là ne rate rien, quelle\n * que soit la source de l'appel. L'observateur est sans risque de boucle :\n * messageHumain est idempotente (une phrase française se traduit en\n * elle-même), donc la seconde passe ne change rien.\n *\n * #toast est aussi déplacé sous : un ancêtre transformé transforme un\n * position:fixed en position relative à cet ancêtre — c'est ce qui collait le\n * bandeau en bas à gauche, à moitié hors de l'écran.\n *\n * messageHumain est une fonction PURE et EXPORTÉE : le banc de test appelle\n * exactement le code qui tourne dans le navigateur, pas une copie.\n */\n\nexport const SILENCE_RELEASE = \"silence-v57.2-refus-actionnables\";\n\n/**\n * Traduit un message destiné à l'utilisateur.\n * Retourne null quand le message ne doit pas être affiché du tout.\n * Volontairement autonome (aucune constante externe) : sa source est\n * embarquée telle quelle dans le script client.\n */\nexport function messageHumain(brut: string, ok: boolean): string | null {\n var t = String(brut == null ? \"\" : brut).trim();\n if (!t) return null;\n\n var CODES: Record = {\n unauthorized: \"Votre session a expir\\u00e9. Reconnectez-vous.\",\n csrf_rejected: \"Cette page a expir\\u00e9. Rechargez-la puis r\\u00e9essayez.\",\n payload_too_large: \"Le contenu envoy\\u00e9 est trop volumineux.\",\n lecture_indisponible: \"Ces donn\\u00e9es n\\u2019ont pas pu \\u00eatre lues.\",\n data_api_unavailable: \"Ces donn\\u00e9es n\\u2019ont pas pu \\u00eatre lues.\",\n unsupported_data_resource: \"Ces donn\\u00e9es ne sont pas disponibles ici.\",\n business_action_failed: \"L\\u2019action n\\u2019a pas pu aboutir.\",\n action_failed: \"L\\u2019action n\\u2019a pas pu aboutir.\",\n action_not_enabled: \"Cette action n\\u2019est pas disponible ici.\",\n action_metier_refusee: \"L\\u2019action a \\u00e9t\\u00e9 refus\\u00e9e.\",\n action_metier_non_autorisee: \"Cette action n\\u2019est pas autoris\\u00e9e.\",\n lecture_metier_non_autorisee: \"Cette lecture n\\u2019est pas autoris\\u00e9e.\",\n action_proprietaire_refusee: \"L\\u2019action a \\u00e9t\\u00e9 refus\\u00e9e.\",\n confirmation_invalid_or_expired: \"La confirmation a expir\\u00e9. Recommencez.\",\n owner_strong_identity_required_for_commit: \"Confirmez votre identit\\u00e9 avant cette action.\",\n owner_strong_identity_required_for_voice: \"Confirmez votre identit\\u00e9 avant de parler \\u00e0 l\\u2019assistante.\",\n owner_voice_unavailable: \"L\\u2019assistante vocale est indisponible pour le moment.\",\n session_vocale_refusee: \"La session vocale a \\u00e9t\\u00e9 refus\\u00e9e.\",\n capacites_indisponibles: \"L\\u2019assistante n\\u2019a pas pu \\u00eatre jointe.\",\n supervision_indisponible: \"Le tableau de supervision est indisponible.\",\n tenant_context_unavailable: \"Votre espace n\\u2019a pas pu \\u00eatre charg\\u00e9. R\\u00e9essayez.\",\n business_bootstrap_unavailable: \"Les donn\\u00e9es n\\u2019ont pas pu \\u00eatre charg\\u00e9es. R\\u00e9essayez.\",\n accounting_action_failed: \"L\\u2019\\u00e9criture comptable n\\u2019a pas pu aboutir.\",\n owner_action_failed: \"L\\u2019action n\\u2019a pas pu aboutir.\",\n not_found: \"Cet \\u00e9l\\u00e9ment est introuvable.\",\n\n /* ── REFUS MÉTIER (v57.2) ────────────────────────────────────────────\n Les 37 codes de la passerelle métier, relevés directement dans le SQL\n de flowos_pisciniste_action_v1. Ils n'étaient pas traduits : le\n traducteur les prenait pour du bruit technique et répondait « réessayez\n dans un instant ». Or ce sont des CONDITIONS, pas des incidents —\n réessayer ne les changera jamais. Chaque phrase dit donc la raison ET\n le geste qui débloque. */\n accepted_quote_required: \"Ce devis doit d\\u2019abord \\u00eatre accept\\u00e9. Marquez-le accept\\u00e9, puis relancez la facturation.\",\n quote_already_invoiced: \"Ce devis est d\\u00e9j\\u00e0 factur\\u00e9.\",\n invoice_already_exists_for_type: \"Une facture de ce type existe d\\u00e9j\\u00e0 pour ce devis. Choisissez un autre type, ou ouvrez la facture existante.\",\n invoice_balance_empty: \"Il ne reste rien \\u00e0 facturer sur ce devis.\",\n quote_has_no_lines: \"Ce devis n\\u2019a aucune ligne. Ajoutez au moins une prestation avant de continuer.\",\n quote_lines_required: \"Ce devis n\\u2019a aucune ligne. Ajoutez au moins une prestation avant de continuer.\",\n quote_line_invalid: \"Une ligne du devis est incompl\\u00e8te : v\\u00e9rifiez la d\\u00e9signation, la quantit\\u00e9 et le prix.\",\n quote_not_found: \"Ce devis est introuvable. Il a peut-\\u00eatre \\u00e9t\\u00e9 archiv\\u00e9.\",\n invoice_not_found: \"Cette facture est introuvable. Elle a peut-\\u00eatre \\u00e9t\\u00e9 archiv\\u00e9e.\",\n appointment_not_found: \"Ce rendez-vous est introuvable. Il a peut-\\u00eatre \\u00e9t\\u00e9 annul\\u00e9.\",\n quote_status_invalid: \"Ce statut de devis n\\u2019existe pas.\",\n appointment_status_invalid: \"Ce statut de rendez-vous n\\u2019existe pas.\",\n invoice_type_invalid: \"Le type de facture doit \\u00eatre simple, acompte ou solde.\",\n deposit_percentage_invalid: \"Le pourcentage d\\u2019acompte n\\u2019est pas valide.\",\n quote_deposit_percentage_invalid: \"Le pourcentage d\\u2019acompte du devis n\\u2019est pas valide.\",\n invoice_due_days_invalid: \"Le d\\u00e9lai de paiement n\\u2019est pas valide.\",\n quote_validity_days_invalid: \"La dur\\u00e9e de validit\\u00e9 du devis n\\u2019est pas valide.\",\n payment_date_invalid: \"La date de paiement n\\u2019est pas valide.\",\n quote_issue_date_invalid: \"La date d\\u2019\\u00e9mission du devis n\\u2019est pas valide.\",\n appointment_datetime_invalid: \"La date ou l\\u2019heure du rendez-vous n\\u2019est pas valide.\",\n appointment_duration_invalid: \"La dur\\u00e9e du rendez-vous n\\u2019est pas valide.\",\n changes_required: \"Aucune modification \\u00e0 enregistrer.\",\n customer_phone_required: \"Le num\\u00e9ro de t\\u00e9l\\u00e9phone du client est n\\u00e9cessaire pour cette action.\",\n quote_id_required: \"Aucun devis n\\u2019est s\\u00e9lectionn\\u00e9.\",\n invoice_id_required: \"Aucune facture n\\u2019est s\\u00e9lectionn\\u00e9e.\",\n appointment_id_required: \"Aucun rendez-vous n\\u2019est s\\u00e9lectionn\\u00e9.\",\n quote_object_required: \"L\\u2019objet du devis est n\\u00e9cessaire.\",\n flowos_writes_disabled: \"Les enregistrements sont d\\u00e9sactiv\\u00e9s pour le moment.\",\n flowos_action_not_allowed: \"Cette action n\\u2019est pas disponible ici.\",\n flowos_gateway_unauthorized: \"Votre session a expir\\u00e9. Reconnectez-vous.\",\n tenant_not_active: \"Cet espace n\\u2019est pas actif.\",\n idempotency_key_required: \"La demande est incompl\\u00e8te. Recommencez l\\u2019action.\",\n idempotency_payload_mismatch: \"Les donn\\u00e9es ont chang\\u00e9 depuis la pr\\u00e9paration. Recommencez la confirmation.\",\n idempotent_request_in_progress: \"Cette action est d\\u00e9j\\u00e0 en cours. Attendez son r\\u00e9sultat plut\\u00f4t que de la relancer.\",\n quote_line_number_invalid: \"Le num\\u00e9ro de ligne du devis n\\u2019est pas valide.\",\n /* Legacy : plus produit par le code actuel, conservé pour les journaux. */\n quote_not_invoiceable: \"Ce devis doit d\\u2019abord \\u00eatre accept\\u00e9. Marquez-le accept\\u00e9, puis relancez la facturation.\",\n };\n var GENERIQUE = \"L\\u2019action n\\u2019a pas pu aboutir. R\\u00e9essayez dans un instant.\";\n\n /* Bruit de fond : l'état est déjà porté à l'écran, l'utilisateur n'a rien\n à décider. Ce sont les DEUX seuls messages réellement supprimés. */\n if (/^Donn\\u00e9es conserv\\u00e9es\\s*:/i.test(t)) return null;\n if (/^Synchronisation m\\u00e9tier indisponible/i.test(t)) return null;\n\n if (Object.prototype.hasOwnProperty.call(CODES, t)) return CODES[t];\n\n /* Une phrase écrite en français a des accents ou des mots outils. */\n var accents = /[\\u00e0\\u00e2\\u00e4\\u00e9\\u00e8\\u00ea\\u00eb\\u00ee\\u00ef\\u00f4\\u00f6\\u00f9\\u00fb\\u00fc\\u00e7\\u0153\\u2019]/;\n var mots = /(^|\\s)(le|la|les|un|une|des|du|de|est|sont|pas|vous|votre|aucun|aucune|action|session|compte|client|devis|facture|t\\u00e2che|lien|mode|donn|indisponible|impossible|envoy|pr\\u00eat|pr\\u00eate|termin)/i;\n var francais = accents.test(t) || mots.test(t);\n\n /* Un suffixe technique collé à une phrase française : on garde la phrase. */\n var coupe = t.lastIndexOf(\" : \");\n if (coupe > 0) {\n var tete = t.slice(0, coupe).trim();\n var queue = t.slice(coupe + 3).trim();\n if (Object.prototype.hasOwnProperty.call(CODES, queue)) return CODES[queue];\n var queueFr = accents.test(queue) || mots.test(queue);\n if (!queueFr) return accents.test(tete) || mots.test(tete) ? tete + \".\" : GENERIQUE;\n }\n\n if (!francais) return ok ? null : GENERIQUE;\n return t;\n}\n\nexport function styleSilence(): string {\n return `\n/* ══ 1 · ATTENTE : LE FOND, ET TROIS POINTS ══════════════════════════════ */\n.v10-loading{position:relative!important}\n.v10-loading:after{\ncontent:\"\"!important;\nposition:absolute!important;inset:0!important;z-index:15!important;\nbackground:var(--bg)!important;background-image:none!important;\nbackdrop-filter:none!important;-webkit-backdrop-filter:none!important;\nborder-radius:0!important;display:block!important;\n}\n/* Le point central est l'élément ; les deux autres sont ses ombres portées.\n Leurs décalages verticaux sont animés en décalé : la vague part de la\n gauche, passe au centre, finit à droite. */\n.v10-loading:before{\ncontent:\"\"!important;\nposition:absolute!important;left:50%!important;top:50%!important;z-index:16!important;\nwidth:6px!important;height:6px!important;border-radius:50%!important;\nbackground:#fff!important;border:0!important;padding:0!important;margin:0!important;\nbox-shadow:-13px 0 0 0 #fff,13px 0 0 0 #fff;\ntransform:translate(-50%,-50%);\nanimation:silenceV57Points 1.05s infinite ease-in-out;\n}\n@keyframes silenceV57Points{\n0%,100%{transform:translate(-50%,-50%);box-shadow:-13px 0 0 0 #fff,13px 0 0 0 #fff}\n17%{transform:translate(-50%,-50%);box-shadow:-13px -7px 0 0 #fff,13px 0 0 0 #fff}\n50%{transform:translate(-50%,calc(-50% - 7px));box-shadow:-13px 0 0 0 #fff,13px 0 0 0 #fff}\n83%{transform:translate(-50%,-50%);box-shadow:-13px 0 0 0 #fff,13px -7px 0 0 #fff}\n}\n@media (prefers-reduced-motion:reduce){\n.v10-loading:before{animation:none!important;opacity:.75}\n}\n\n/* ══ 2 · PASTILLE D'ÉTAT : LE BRUIT PART, LA PANNE RESTE ═════════════════ */\n.v10-data-note:not(.bad){display:none!important}\n.v10-data-note.bad{color:var(--danger)!important;font-size:.72rem!important}\n\n/* ══ 3 · NOTIFICATION BIEN PLACÉE ════════════════════════════════════════\n Un ancêtre transformé rend un position:fixed relatif à cet ancêtre — d'où\n le bandeau collé en bas à gauche, coupé par le bas de l'écran. Position\n réaffirmée ici, et l'élément est déplacé sous par le script.\n\n RÉ-AFFICHAGE ASSUMÉ. Une couche écrite hors de cette session (teinte\n v56.2) masque toute notification (display:none sur .toast et #toast).\n Or trois retours réels ne passent que par là :\n · « Lien de connexion envoyé » (lien magique) ;\n · le bilan de la relance groupée du radar v54 (N envoyées / N échouées) ;\n · le résultat des commandes propriétaire.\n Les masquer tous ne supprime pas le bruit : il supprime la preuve qu'une\n action a eu lieu — exactement la façade que ce projet refuse. On rétablit\n donc l'affichage, mais seuls les messages HUMAINS passent (le traducteur\n ci-dessous supprime les codes techniques et le bruit de fond).\n Le sélecteur reprend #toast : à !important égal, c'est la spécificité de\n l'identifiant qui tranche, pas l'ordre.\n SILENCE TOTAL : supprimer la ligne ci-dessous rétablit le masquage complet. */\n#toast,.toast{display:block!important}\n.toast{\nposition:fixed!important;left:auto!important;\nright:22px!important;bottom:22px!important;\nmax-width:min(380px,calc(100vw - 44px))!important;\nz-index:400!important;\n}\n@media (max-width:560px){\n.toast{left:14px!important;right:14px!important;bottom:14px!important;max-width:none!important}\n}\n\n/* ══ 4 · UN SEUL VOILE D'ATTENTE ═════════════════════════════════════════\n La couche teinte v56.2 introduit un second voile (.voile-v56) posé par un\n script qui cherche un élément dont le TEXTE vaut « Chargement des\n données ». Deux défauts mesurés :\n · le texte en question est un pseudo-élément CSS (content: sur\n .v10-loading:after) — il n'appartient pas au DOM, donc textContent ne\n le contient jamais : ce détecteur ne peut pas atteindre le cas visé ;\n · en revanche il attrape les vrais textes « Chargement » (la pastille\n #ownerModePill en contenait un, les cellules de dialogue aussi) et\n applique alors display:none à tous les enfants de leur ancêtre\n positionné — ce qui peut vider une boîte de dialogue entière.\n On neutralise donc ce second mécanisme et on garde celui de la §1, qui\n vise directement la règle fautive. Rétablir l'autre : supprimer ce bloc\n (et, pour économiser le balayage du document, retirer habillerVoile()\n de claude-v53.ts). */\n.voile-v56{background:none!important;isolation:auto!important}\n.voile-v56>*{display:revert!important}\n.voile-v56::before{content:none!important;animation:none!important}\n`;\n}\n\nexport function scriptSilence(): string {\n return `(function(){\n\"use strict\";\nvar messageHumain=${messageHumain.toString()};\nvar essais=0;\n\nfunction assainir(el){\n if(!el)return;\n if(!/\\\\bshow\\\\b/.test(String(el.className||\"\")))return;\n var brut=String(el.textContent||\"\").trim();\n if(!brut)return;\n var mauvais=/\\\\bbad\\\\b/.test(String(el.className||\"\"));\n var clair=messageHumain(brut,!mauvais);\n /* Idempotence : une phrase déjà claire se traduit en elle-même, la seconde\n passe de l'observateur ne change donc rien et aucune boucle ne s'amorce. */\n if(clair===null){el.className=String(el.className||\"\").replace(/\\\\bshow\\\\b/g,\"\").trim();return}\n if(clair!==brut)el.textContent=clair;\n}\n\nfunction installer(){\n var el=document.getElementById(\"toast\");\n if(!el)return false;\n if(el.__silenceV57)return true;\n el.__silenceV57=true;\n try{if(el.parentNode!==document.body)document.body.appendChild(el)}catch(e){}\n if(window.MutationObserver){\n new MutationObserver(function(){assainir(el)}).observe(el,{\n attributes:true,attributeFilter:[\"class\"],\n childList:true,characterData:true,subtree:true\n });\n }\n assainir(el);\n /* Enveloppe de la fonction globale : évite même l'apparition d'un message\n supprimé (l'observateur, lui, le retirerait après coup). */\n if(typeof window.toast===\"function\"&&!window.toast.__silenceV57){\n var brute=window.toast;\n var enveloppe=function(message,ok){\n var clair=messageHumain(String(message==null?\"\":message),ok!==false);\n if(clair===null)return;\n return brute.call(this,clair,ok);\n };\n enveloppe.__silenceV57=true;\n window.toast=enveloppe;\n }\n return true;\n}\n\nfunction amorcer(){\n var pret=installer();\n var enveloppe=typeof window.toast===\"function\"&&window.toast.__silenceV57===true;\n if((!pret||!enveloppe)&&++essais<32)setTimeout(amorcer,250);\n}\nif(document.readyState===\"loading\")document.addEventListener(\"DOMContentLoaded\",amorcer);\nelse amorcer();\n})();`;\n}\n\nexport function coucheSilence(nonce: string): string {\n return ``\n + ``;\n}\n",[],[1122,1201],"e1eff122-d2e2-4174-a53c-4ad4ab98b916","realtime-bridge.ts","01a008e7-12ca-757f-ba31-e15a942b82fb",10,["D",1788060314434],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n openN8nCircuit,\n reserveN8nExecution,\n secondsUntilNextMonthReset,\n type N8nBudgetCategory,\n} from \"./n8n-budget.ts\";\nimport {\n claimQueuedBusinessActions,\n completeQueuedBusinessAction,\n deadLetterQueuedBusinessAction,\n failQueuedBusinessAction,\n isQueueableBusinessAction,\n queueBusinessAction,\n} from \"./business-queue.ts\";\n\nexport type CallContext = {\n call_id: string;\n from_number: string;\n to_number: string;\n started_at: string;\n tenant_id?: string;\n organization_name?: string;\n vertical_key?: string;\n vertical_display_name?: string;\n timezone?: string;\n assistant_config?: Record;\n};\n\nconst ENV = Deno.env.toObject();\nconst N8N_BASE = (ENV.PLATFORM_N8N_BASE || ENV.PISCINE_N8N_BASE || \"\").replace(/\\/$/, \"\");\nconst INTERNAL_PATH = (ENV.PLATFORM_N8N_INTERNAL_PATH || ENV.PISCINE_N8N_INTERNAL_PATH || \"\").trim();\nconst TOOL_SECRET = ENV.PLATFORM_TOOL_SECRET || ENV.PISCINE_TOOL_SECRET || \"\";\nconst TENANT = ENV.PLATFORM_DEFAULT_TENANT || ENV.PISCINE_TENANT || \"pisciniste_01\";\nconst EVENT_PATH = ENV.PLATFORM_OPENAI_EVENT_PATH || ENV.PISCINE_OPENAI_EVENT_PATH || \"secretariat-pisciniste-openai-events\";\n\nconst BRIDGE_CONFIGURATION_SOURCES = {\n n8n_base: ENV.PLATFORM_N8N_BASE ? \"platform_native\" : ENV.PISCINE_N8N_BASE ? \"legacy_fallback\" : \"missing\",\n n8n_internal_path: ENV.PLATFORM_N8N_INTERNAL_PATH ? \"platform_native\" : ENV.PISCINE_N8N_INTERNAL_PATH ? \"legacy_fallback\" : \"missing\",\n tool_secret_bridge: ENV.PLATFORM_TOOL_SECRET ? \"platform_native\" : ENV.PISCINE_TOOL_SECRET ? \"legacy_fallback\" : \"missing\",\n default_tenant: ENV.PLATFORM_DEFAULT_TENANT ? \"platform_native\" : ENV.PISCINE_TENANT ? \"legacy_fallback\" : \"built_in_default\",\n openai_event_path: ENV.PLATFORM_OPENAI_EVENT_PATH ? \"platform_native\" : ENV.PISCINE_OPENAI_EVENT_PATH ? \"legacy_fallback\" : \"built_in_default\",\n} as const;\n\nexport function bridgeConfigurationSnapshot() {\n const platformKeys = {\n PLATFORM_N8N_BASE: Boolean(ENV.PLATFORM_N8N_BASE),\n PLATFORM_N8N_INTERNAL_PATH: Boolean(ENV.PLATFORM_N8N_INTERNAL_PATH),\n PLATFORM_TOOL_SECRET: Boolean(ENV.PLATFORM_TOOL_SECRET),\n PLATFORM_DEFAULT_TENANT: Boolean(ENV.PLATFORM_DEFAULT_TENANT),\n PLATFORM_OPENAI_EVENT_PATH: Boolean(ENV.PLATFORM_OPENAI_EVENT_PATH),\n };\n const missingPlatformKeys = Object.entries(platformKeys)\n .filter(([, present]) => !present)\n .map(([key]) => key);\n const legacyFallbackKeys = [\n BRIDGE_CONFIGURATION_SOURCES.n8n_base === \"legacy_fallback\" && \"PLATFORM_N8N_BASE\",\n BRIDGE_CONFIGURATION_SOURCES.n8n_internal_path === \"legacy_fallback\" && \"PLATFORM_N8N_INTERNAL_PATH\",\n BRIDGE_CONFIGURATION_SOURCES.tool_secret_bridge === \"legacy_fallback\" && \"PLATFORM_TOOL_SECRET\",\n BRIDGE_CONFIGURATION_SOURCES.default_tenant === \"legacy_fallback\" && \"PLATFORM_DEFAULT_TENANT\",\n BRIDGE_CONFIGURATION_SOURCES.openai_event_path === \"legacy_fallback\" && \"PLATFORM_OPENAI_EVENT_PATH\",\n ].filter(Boolean) as string[];\n return {\n configured: Boolean(N8N_BASE && INTERNAL_PATH && TOOL_SECRET),\n platform_native_complete: missingPlatformKeys.length === 0,\n missing_platform_keys: missingPlatformKeys,\n legacy_fallback_keys: legacyFallbackKeys,\n sources: BRIDGE_CONFIGURATION_SOURCES,\n secrets_exposed: false,\n };\n}\n\nfunction clean(value: unknown, max = 4000): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nexport function normalizePhone(value: unknown): string {\n const input = clean(value, 200);\n const match = input.match(/(?:sip:|tel:)?(\\+?[0-9]{6,15})/i);\n return (match?.[1] || \"\").replace(/[^+0-9]/g, \"\");\n}\n\nexport function bridgeConfigured(): boolean {\n return Boolean(N8N_BASE && INTERNAL_PATH && TOOL_SECRET);\n}\n\nasync function postJson(\n url: string,\n body: Record,\n timeoutMs: number,\n budgetPurpose = \"realtime\",\n budgetCategory: N8nBudgetCategory = \"production\",\n reservationKey?: string,\n): Promise> {\n const budget = await reserveN8nExecution(\n budgetCategory,\n reservationKey || `realtime:${budgetPurpose}:${crypto.randomUUID()}`,\n { channel: \"valtown_realtime\", purpose: budgetPurpose },\n );\n if (!budget.allowed) {\n return {\n ok: false,\n error: clean(budget.error || \"n8n_project_daily_budget_exhausted\", 120),\n budget_blocked: true,\n };\n }\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-piscine-source\": \"valtown-realtime\",\n \"x-piscine-tool-secret\": TOOL_SECRET,\n \"x-request-id\": crypto.randomUUID(),\n },\n body: JSON.stringify(body),\n signal: controller.signal,\n });\n const raw = (await response.text()).slice(0, 100_000);\n if (/execution limit reached|max executions|quota.*execution/i.test(raw)) {\n await openN8nCircuit(\"n8n_account_execution_limit_reached\", secondsUntilNextMonthReset());\n return {\n ok: false,\n error: \"n8n_account_execution_limit_reached\",\n budget_blocked: true,\n circuit_opened: true,\n };\n }\n let payload: Record = {};\n try {\n payload = raw ? JSON.parse(raw) : {};\n } catch {\n payload = { ok: false, error: \"invalid_upstream_json\" };\n }\n if (!response.ok) {\n return { ok: false, error: clean(payload.error || `upstream_${response.status}`, 120), status: response.status };\n }\n return payload;\n } catch (error) {\n return {\n ok: false,\n error: error instanceof DOMException && error.name === \"AbortError\" ? \"upstream_timeout\" : \"upstream_unavailable\",\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nexport async function callBusinessTool(\n action: string,\n args: Record,\n call: CallContext,\n): Promise> {\n const tenantId = clean(call.tenant_id || TENANT, 80);\n const verticalKey = clean(call.vertical_key || \"general_services\", 64);\n const assetType = clean(args.asset_type || args.pool_type, 180);\n const data = {\n ...args,\n tenant_id: tenantId,\n vertical_key: verticalKey,\n organization_name: clean(call.organization_name || \"\", 120),\n asset_type: assetType || undefined,\n pool_type: clean(args.pool_type || (verticalKey === \"pool_service\" ? assetType : \"\"), 180) || undefined,\n customer_phone: clean(args.customer_phone || call.from_number, 40),\n request_id: clean(args.request_id || `${call.call_id}:${action}:${crypto.randomUUID()}`, 240),\n };\n if (!bridgeConfigured()) {\n return isQueueableBusinessAction(action)\n ? await queueBusinessAction(action, data, call.call_id, \"business_bridge_not_configured\")\n : {\n ok: false,\n action_completed: false,\n error: \"business_bridge_not_configured\",\n safe_to_announce: true,\n requires_human: true,\n assistant_message: \"Cette vérification est momentanément indisponible. L’équipe doit vous rappeler.\",\n };\n }\n const timeoutByAction: Record = {\n client_context: 3_000,\n update_client: 4_500,\n knowledge_lookup: 4_500,\n next_best_action: 4_500,\n check_availability: 5_500,\n create_lead: 6_000,\n estimate_quote: 5_500,\n create_quote: 7_000,\n book_appointment: 6_500,\n cancel_appointment: 5_500,\n save_call_summary: 4_500,\n transfer_to_human: 5_500,\n };\n const result = await postJson(`${N8N_BASE}/webhook/${INTERNAL_PATH}`, {\n args: { action, data },\n call: {\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n tenant_id: tenantId,\n vertical_key: verticalKey,\n provider: \"openai_realtime\",\n },\n }, timeoutByAction[action] || 6_000, `business_tool:${action}`);\n\n const unavailable = result.ok === false && (\n result.error === \"upstream_timeout\"\n || result.error === \"upstream_unavailable\"\n || result.error === \"n8n_circuit_open\"\n || result.error === \"n8n_account_execution_limit_reached\"\n || result.budget_blocked === true\n );\n if (unavailable && isQueueableBusinessAction(action)) {\n return queueBusinessAction(action, data, call.call_id, String(result.error || \"upstream_unavailable\"));\n }\n if (unavailable) {\n return {\n ...result,\n action_completed: false,\n safe_to_announce: true,\n requires_human: true,\n assistant_message: \"Cette vérification est momentanément indisponible. L’équipe doit vous rappeler.\",\n };\n }\n return result;\n}\n\nconst PERMANENT_BUSINESS_REPLAY_ERRORS = new Set([\n \"missing_required_fields\",\n \"invalid_payload\",\n \"invalid_action\",\n \"invalid_phone\",\n \"invalid_email\",\n \"confirmation_required\",\n \"tenant_not_found\",\n]);\n\nfunction isPermanentBusinessReplayFailure(result: Record, attempts: number): boolean {\n const error = clean(result.error, 120).toLowerCase();\n const status = Number(result.status || 0);\n return PERMANENT_BUSINESS_REPLAY_ERRORS.has(error)\n || (status >= 400 && status < 500 && status !== 408 && status !== 429)\n || attempts >= 4;\n}\n\nexport async function replayQueuedBusinessActions(limit = 20) {\n if (!bridgeConfigured()) {\n return { ok: false, replayed: 0, error: \"business_bridge_not_configured\" };\n }\n const queued = await claimQueuedBusinessActions(limit);\n if (!queued.length) return { ok: true, replayed: 0, pending: 0 };\n\n let replayed = 0;\n let failed = 0;\n for (const item of queued) {\n const result = await postJson(`${N8N_BASE}/webhook/${INTERNAL_PATH}`, {\n args: { action: item.action, data: item.payload },\n call: {\n call_id: item.call_id,\n from_number: clean(item.payload.customer_phone, 40),\n provider: \"openai_realtime_recovery\",\n },\n }, 8_000, `business_replay:${item.action}`, \"callback_batch\",\n `recovery:business:${item.queue_id}:attempt:${Number(item.attempts || 0) + 1}`);\n if (result.ok === false) {\n failed += 1;\n const nextAttempt = Number(item.attempts || 0) + 1;\n const reason = String(result.error || \"replay_failed\");\n if (isPermanentBusinessReplayFailure(result, nextAttempt)) {\n await deadLetterQueuedBusinessAction(item.queue_id, reason);\n } else {\n await failQueuedBusinessAction(item.queue_id, reason, 86400);\n }\n if (result.budget_blocked === true || result.error === \"n8n_circuit_open\") break;\n } else {\n replayed += 1;\n await completeQueuedBusinessAction(item.queue_id);\n }\n }\n return { ok: failed === 0, replayed, failed, inspected: queued.length };\n}\n\nconst VOICE_EVENT_BUFFER_SCHEMA = `create table if not exists voice_event_buffer (\n event_id text primary key,\n call_id text not null,\n event_type text not null,\n payload_json text not null,\n forward_state text not null default 'pending',\n attempt_count integer not null default 0,\n last_error text,\n next_attempt_at integer not null default 0,\n created_at text not null,\n forwarded_at text\n)`;\n\nlet voiceEventBufferReady: Promise | null = null;\n\nasync function ensureVoiceEventBuffer(): Promise {\n if (!voiceEventBufferReady) {\n voiceEventBufferReady = (async () => {\n await sqlite.execute(VOICE_EVENT_BUFFER_SCHEMA);\n for (const statement of [\n \"alter table voice_event_buffer add column attempt_count integer not null default 0\",\n \"alter table voice_event_buffer add column last_error text\",\n \"alter table voice_event_buffer add column next_attempt_at integer not null default 0\",\n ]) {\n try {\n await sqlite.execute(statement);\n } catch {\n // Colonne déjà présente.\n }\n }\n await sqlite.execute(\n \"create index if not exists voice_event_buffer_pending_idx on voice_event_buffer(forward_state,next_attempt_at,created_at)\",\n );\n })().catch((error) => {\n voiceEventBufferReady = null;\n throw error;\n });\n }\n await voiceEventBufferReady;\n}\n\nasync function bufferVoiceEvent(\n event: Record,\n call: CallContext,\n): Promise<{ event_id: string; pending_for_call: number; event_type: string }> {\n await ensureVoiceEventBuffer();\n const eventType = clean(event.event_type || \"unknown\", 80);\n const eventId = clean(\n event.event_id || `${call.call_id}:${eventType}:${crypto.randomUUID()}`,\n 240,\n );\n const payload = {\n tenant_id: clean(call.tenant_id || TENANT, 80),\n provider: \"openai_realtime\",\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n started_at: call.started_at,\n ...event,\n event_id: eventId,\n };\n await sqlite.execute({\n sql: `insert or ignore into voice_event_buffer (\n event_id,call_id,event_type,payload_json,forward_state,created_at\n ) values (\n :event_id,:call_id,:event_type,:payload_json,'pending',datetime('now')\n )`,\n args: {\n event_id: eventId,\n call_id: clean(call.call_id, 240),\n event_type: eventType,\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n },\n });\n const count = await sqlite.execute({\n sql: `select count(*) as pending\n from voice_event_buffer\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: clean(call.call_id, 240) },\n });\n return {\n event_id: eventId,\n event_type: eventType,\n pending_for_call: Number((count.rows[0] as Record | undefined)?.pending || 0),\n };\n}\n\nasync function markVoiceCallForwarded(callId: string) {\n await ensureVoiceEventBuffer();\n await sqlite.execute({\n sql: `update voice_event_buffer\n set forward_state='forwarded',forwarded_at=datetime('now'),last_error=null\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: clean(callId, 240) },\n });\n}\n\nexport async function voiceEventBufferStatus() {\n await ensureVoiceEventBuffer();\n const totals = await sqlite.execute(`select\n count(*) filter(where forward_state='pending') as pending_events,\n count(*) filter(where forward_state='forwarded') as forwarded_events,\n min(created_at) filter(where forward_state='pending') as oldest_pending\n from voice_event_buffer`);\n const ready = await sqlite.execute(`select count(*) as ready_calls from (\n select call_id\n from voice_event_buffer\n where forward_state='pending' and next_attempt_at<=unixepoch()\n group by call_id\n having max(case when event_type='call.ended' then 1 else 0 end)=1\n )`);\n return {\n ok: true,\n ...((totals.rows[0] as Record) || {}),\n ready_calls: Number((ready.rows[0] as Record | undefined)?.ready_calls || 0),\n };\n}\n\nexport async function replayBufferedVoiceCalls(limit = 2) {\n await ensureVoiceEventBuffer();\n if (!N8N_BASE || !TOOL_SECRET) {\n return { ok: false, replayed: 0, failed: 0, error: \"event_bridge_not_configured\" };\n }\n const safeLimit = Math.max(1, Math.min(8, Number(limit) || 2));\n const ready = await sqlite.execute({\n sql: `select call_id,max(created_at) as ended_at\n from voice_event_buffer\n where forward_state='pending' and next_attempt_at<=unixepoch()\n group by call_id\n having max(case when event_type='call.ended' then 1 else 0 end)=1\n order by ended_at asc\n limit :limit`,\n args: { limit: safeLimit },\n });\n let replayed = 0;\n let failed = 0;\n for (const callRow of ready.rows as Array>) {\n const callId = clean(callRow.call_id, 240);\n const events = await sqlite.execute({\n sql: `select event_type,payload_json,attempt_count\n from voice_event_buffer\n where call_id=:call_id and forward_state='pending'\n order by created_at asc`,\n args: { call_id: callId },\n });\n const rows = events.rows as Array>;\n const finalRow = [...rows].reverse().find((row) => row.event_type === \"call.ended\");\n let finalPayload: Record | null = null;\n try {\n const parsed = JSON.parse(String(finalRow?.payload_json || \"\"));\n if (parsed && typeof parsed === \"object\" && !Array.isArray(parsed)) finalPayload = parsed;\n } catch {\n finalPayload = null;\n }\n if (!finalPayload) {\n failed += 1;\n await sqlite.execute({\n sql: `update voice_event_buffer\n set attempt_count=attempt_count+1,last_error='invalid_final_payload',\n next_attempt_at=unixepoch()+86400\n where call_id=:call_id and forward_state='pending'`,\n args: { call_id: callId },\n });\n continue;\n }\n const attempt = Math.max(0, ...rows.map((row) => Number(row.attempt_count || 0))) + 1;\n const result = await postJson(\n `${N8N_BASE}/webhook/${EVENT_PATH}`,\n {\n ...finalPayload,\n buffered_event_count: rows.length,\n recovered_from_buffer: true,\n recovery_attempt: attempt,\n },\n 8_000,\n \"voice_call_replay\",\n \"callback_batch\",\n `recovery:voice:${callId}:attempt:${attempt}`,\n );\n if (result.ok === false) {\n failed += 1;\n const delay = Math.min(86400, 900 * (2 ** Math.min(attempt, 6)));\n await sqlite.execute({\n sql: `update voice_event_buffer\n set attempt_count=attempt_count+1,last_error=:last_error,\n next_attempt_at=unixepoch()+:delay\n where call_id=:call_id and forward_state='pending'`,\n args: {\n call_id: callId,\n last_error: clean(result.error || \"voice_replay_failed\", 240),\n delay,\n },\n });\n if (result.budget_blocked === true || result.error === \"n8n_circuit_open\") break;\n } else {\n replayed += 1;\n await markVoiceCallForwarded(callId);\n }\n }\n await sqlite.execute(\n \"delete from voice_event_buffer where forward_state='forwarded' and forwarded_at,\n call: CallContext,\n): Promise> {\n const buffered = await bufferVoiceEvent(event, call);\n if (buffered.event_type !== \"call.ended\") {\n return {\n ok: true,\n buffered: true,\n forwarded: false,\n pending_for_call: buffered.pending_for_call,\n };\n }\n if (!N8N_BASE || !TOOL_SECRET) {\n return {\n ok: true,\n buffered: true,\n forwarded: false,\n error: \"event_bridge_not_configured\",\n pending_for_call: buffered.pending_for_call,\n };\n }\n const result = await postJson(`${N8N_BASE}/webhook/${EVENT_PATH}`, {\n tenant_id: clean(call.tenant_id || TENANT, 80),\n provider: \"openai_realtime\",\n call_id: call.call_id,\n from_number: call.from_number,\n to_number: call.to_number,\n started_at: call.started_at,\n buffered_event_count: buffered.pending_for_call,\n ...event,\n }, 8_000, \"voice_call_final\");\n if (result.ok !== false) await markVoiceCallForwarded(call.call_id);\n return {\n ...result,\n buffered: true,\n forwarded: result.ok !== false,\n buffered_event_count: buffered.pending_for_call,\n };\n}\n\n\nexport async function deliverQuote(\n devisId: unknown,\n channel: unknown,\n): Promise> {\n const id = clean(devisId, 80);\n const deliveryChannel = clean(channel, 20).toLowerCase();\n if (!N8N_BASE || !TOOL_SECRET) {\n return { ok: false, action_completed: false, error: \"delivery_bridge_not_configured\" };\n }\n if (!/^[0-9a-f-]{36}$/i.test(id)) {\n return { ok: false, action_completed: false, error: \"invalid_quote_id\" };\n }\n if (!['sms', 'email'].includes(deliveryChannel)) {\n return { ok: false, action_completed: false, error: \"invalid_delivery_channel\" };\n }\n const result = await postJson(`${N8N_BASE}/webhook/sp-document-delivery-v1`, {\n document_type: \"quote\",\n devis_id: id,\n delivery_channel: deliveryChannel,\n }, deliveryChannel === \"email\" ? 18_000 : 12_000, `quote_delivery:${deliveryChannel}`);\n if (result.ok === false) {\n const error = clean(result.error, 120);\n return {\n ...result,\n action_completed: false,\n delivery_channel: deliveryChannel,\n safe_to_announce: true,\n assistant_message: error === \"sms_not_configured\"\n ? \"L’envoi par SMS n’est pas disponible sur ce numéro. Proposez l’envoi par email.\"\n : error === \"email_missing\"\n ? \"Il manque l’adresse email du client. Demandez-la, mettez la fiche à jour, puis relancez l’envoi.\"\n : \"Le devis est généré mais l’envoi n’a pas abouti. N’annoncez pas qu’il a été envoyé.\",\n };\n }\n return {\n ...result,\n ok: true,\n action_completed: true,\n delivery_channel: deliveryChannel,\n safe_to_announce: true,\n assistant_message: deliveryChannel === \"email\"\n ? \"Le devis estimatif a bien été envoyé par email.\"\n : \"Le devis estimatif a bien été envoyé par SMS.\",\n };\n}\n",[],[1122,1208],"955bb05e-8121-4c78-b7f9-4a9146354697","realtime-agent-v13.ts","01a008e7-12ca-757f-ba31-dc838776b1f5",["D",1786855756508],"export type RealtimeTool = {\n type: \"function\";\n name: string;\n description: string;\n parameters: Record;\n};\n\nexport const POOL_ROLE_PROMPT = `# RÔLE\nTu es la secrétaire téléphonique d’une entreprise de piscine. Tu accueilles, comprends le besoin, qualifies le dossier, prends les rendez-vous, prépare les estimations et clôtures les appels comme le ferait une secrétaire expérimentée.\n\n# LANGUE — RÈGLE PRIORITAIRE\n- Parle exclusivement en français. N’utilise jamais l’anglais, même pour acquiescer, saluer, nommer une étape ou répondre à un mot anglais isolé.\n- Si l’appelant parle une autre langue, explique brièvement en français que le service fonctionne en français puis continue en français.\n- Les noms propres, adresses, marques et références produit peuvent conserver leur prononciation usuelle, sans faire basculer la conversation en anglais.\n\n# VOIX ET ACCENT\n- Utilise un français standard de France, avec une prononciation native, neutre et sans intonation anglophone.\n- Ne copie jamais l’accent de l’appelant. Garde la même prosodie française, posée et professionnelle pendant tout l’appel.\n- Prononce les nombres, dates, heures, sigles et mots techniques selon les usages français.\n- Si une phrase te vient en anglais, reformule-la silencieusement en français avant de parler.\n\n# FAÇON DE PARLER\n- Parle comme une personne, jamais comme un serveur vocal.\n- Réponds généralement en une ou deux phrases courtes.\n- Pose une seule question à la fois, uniquement quand sa réponse est utile à l’action suivante.\n- Ne répète pas la demande du client sauf pour corriger une ambiguïté importante.\n- N’enchaîne pas les « très bien », « parfait », « d’accord » à chaque tour. Varie naturellement ou réponds directement.\n- Évite les listes orales, les formulations administratives et les longs récapitulatifs.\n- Laisse le client finir sa phrase et accepte qu’il t’interrompe.\n- Utilise un français de France simple, chaleureux et professionnel.\n\n# DATES ET HEURES À L’ORAL\n- Utilise uniquement le champ spoken_label renvoyé par l’outil.\n- Ne prononce jamais une heure sous la forme « zéro neuf heures », « neuf zéro zéro », « 09:00 » ou une date ISO.\n- Dis par exemple : « mercredi matin à neuf heures », « vers midi », « jeudi après-midi à quatorze heures trente ».\n- Quand un seul créneau demandé est libre, dis simplement qu’il est disponible ; ne propose pas trois autres horaires.\n\n# QUALIFICATION CLIENT\nLe numéro appelant est déjà connu du système.\n- Pour un nouveau client, demande naturellement le prénom, puis le nom, sans annoncer une liste de questions.\n- Demande une seule fois : « Je pourrai vous joindre sur le numéro avec lequel vous appelez ? »\n- Si la réponse est non, demande le numéro à utiliser et enregistre-le.\n- Demande l’adresse complète uniquement lorsqu’une intervention ou un rendez-vous sur place est envisagé.\n- Demande l’email uniquement si le client choisit l’envoi par email et qu’il n’est pas déjà connu.\n- Pour un client connu, ne redemande jamais une information déjà présente, sauf si tu dois vérifier qu’elle est toujours correcte.\n- Après avoir obtenu de nouvelles coordonnées, utilise update_client sans commenter l’opération technique.\n\n# CONDUITE DE L’APPEL\n1. Comprends d’abord le besoin. Une ou deux questions ciblées suffisent généralement.\n2. Enregistre la demande dès que le problème est clair.\n3. Agis immédiatement quand le client demande un rendez-vous, une estimation ou un envoi.\n4. Ne promets jamais une action avant le résultat de l’outil.\n\n# RENDEZ-VOUS\n- Si le client donne une date et une heure précises, vérifie ce créneau immédiatement : cette lecture ne demande pas de confirmation.\n- Avant toute réservation ou annulation réelle, utilise prepare_sensitive_action avec un résumé exact et action_payload égal aux futurs arguments de l’action. Ne modifie aucun détail après la confirmation.\n- Lis ensuite exactement la question de confirmation renvoyée. Attends une réponse distincte et explicite du client.\n- Après un « oui », « je confirme », « d’accord » ou « allez-y » sans contradiction, appelle l’action réelle avec le confirmation_id renvoyé. Un choix de créneau seul ne remplace pas cette confirmation finale.\n- Un silence, une hésitation, « peut-être », « je crois », « finalement non » ou toute phrase contradictoire interdit l’écriture.\n- Demande une clarification seulement si la date, l’heure, l’adresse ou l’objet est ambigu.\n- Si le créneau n’est plus libre, propose les nouvelles disponibilités sans recommencer toute la qualification.\n- Après succès, annonce une seule fois le rendez-vous avec le spoken_slot et l’adresse utile.\n\n# DEVIS ESTIMATIF\n- Après avoir compris le problème, tu peux proposer spontanément une estimation utile, sans insister.\n- Utilise estimate_quote : annonce la fourchette TTC une seule fois et précise brièvement qu’elle reste à confirmer après diagnostic.\n- Demande ensuite : « Vous préférez que je vous l’envoie par SMS ou par email ? »\n- Pour un email, collecte l’adresse manquante puis mets la fiche à jour.\n- Avant create_and_send_quote, utilise prepare_sensitive_action avec le canal, le destinataire, le contenu estimé et action_payload égal aux futurs arguments ; lis la question renvoyée et attends une confirmation explicite distincte.\n- Appelle create_and_send_quote uniquement avec le confirmation_id valide renvoyé par cette préparation.\n- N’annonce l’envoi que si l’outil confirme action_completed=true.\n- Si le SMS n’est pas disponible, propose simplement l’email, sans explication technique.\n\n# VERROU DE COMPLÉTUDE\n- Ne termine jamais un appel utile avec seulement une formule vague. Avant complete_call, assure-toi d’avoir un résumé factuel, l’intention et le niveau d’urgence.\n- Pour une demande à traiter, le besoin doit être clair, l’identité utile doit être connue et la demande doit avoir été enregistrée ou mise en attente par un outil.\n- Pour un rendez-vous sur place, collecte l’adresse complète et le créneau exact. N’utilise appointment_booked que si l’outil confirme réellement la réservation.\n- N’utilise quote_sent que si l’envoi est réellement confirmé. Pour un email, l’adresse email doit être connue.\n- Une synchronisation en attente n’est ni une réservation ni un envoi confirmé : dis simplement que la demande est prise en charge et reste à confirmer.\n- Si complete_call répond needs_more_information=true, ne prends pas congé. Pose uniquement la next_question indiquée ou exécute la required_action, puis réessaie.\n- Une exception de qualification n’est permise que si le client refuse explicitement de répondre, devient abusif, si une urgence impose de conclure vite, ou si aucune action métier n’était nécessaire.\n\n# FIN D’APPEL\n- Quand le besoin est traité, fais un récapitulatif d’une seule phrase avec uniquement les actions réellement réalisées.\n- Ne demande pas plusieurs fois s’il reste autre chose.\n- Si le client remercie, dit au revoir ou n’a plus de demande, utilise complete_call seulement après le verrou de complétude.\n- Après complete_call autorisé, prononce une formule de fin courte et naturelle, puis laisse le système raccrocher.\n\n# LIMITES ET SÉCURITÉ\nTu traites uniquement les sujets liés à la piscine et à l’entreprise : dépannage, entretien, eau, équipements, travaux, rendez-vous, devis et suivi.\nN’invente jamais un diagnostic, un tarif ferme, une disponibilité, un envoi ou une garantie.\nEn cas de risque électrique, local technique inondé, fuite majeure ou danger corporel, conseille brièvement de sécuriser la zone sans se mettre en danger puis crée une demande urgente ou un rappel humain.\nNe prononce jamais le nom d’un outil, du JSON, un identifiant ou un message d’erreur.\nLe résultat structuré des outils est l’unique vérité : confirmation_required n’est pas un succès, queued n’est pas booked, et action_completed=false interdit d’annoncer que l’action est faite.`;\n\nexport const ROLE_PROMPT = `# RÔLE\nTu es la secrétaire téléphonique de l’entreprise dont le profil métier sera chargé par le système. Tu accueilles le client, comprends son besoin, qualifies le dossier et aides sur les rendez-vous, devis, factures et suivis autorisés.\n\n# LANGUE — RÈGLE PRIORITAIRE\n- Parle exclusivement en français, du premier au dernier mot. Ne réponds jamais en anglais et ne changes jamais de langue automatiquement.\n- Utilise un français standard de France, avec une prononciation native, neutre, sans accent ni intonation anglophone.\n- Ne copie pas l’accent de l’appelant. Prononce nombres, dates, heures et sigles selon les usages français.\n- Si une formulation te vient en anglais, reformule-la silencieusement en français avant de parler.\n\n# CONFIRMATION DES ACTIONS\n- Les lectures peuvent être lancées immédiatement.\n- Avant une réservation, une annulation ou un envoi réel, prépare l’action, résume sa conséquence et demande une confirmation explicite distincte.\n- La préparation doit contenir action_payload égal aux futurs arguments. N’exécute l’écriture qu’avec son confirmation_id, après une réponse positive sans contradiction, sans modifier le moindre détail.\n- Le résultat structuré de l’outil est l’unique vérité. N’annonce jamais un succès si action_completed n’est pas true.\n\n# FAÇON DE PARLER\n- Parle comme une personne, en français de France naturel, chaleureux et professionnel.\n- Réponds généralement en une ou deux phrases courtes et pose une seule question utile à la fois.\n- Ne répète pas inutilement la demande et accepte que le client t’interrompe.\n- Le premier accueil doit commencer immédiatement, sans attendre les données externes.\n\n# VÉRITÉ OPÉRATIONNELLE\n- Utilise un outil pour toute donnée d’entreprise, disponibilité, création ou envoi.\n- Ne promets jamais une action avant son résultat réel.\n- Ne présente jamais une action en attente comme exécutée ou livrée.\n- Ne prononce jamais le nom d’un outil, du JSON, un identifiant ou une erreur technique.\n- N’invente ni diagnostic, ni tarif ferme, ni garantie.\n\n# QUALIFICATION\n- Le numéro appelant est déjà connu du système.\n- Ne redemande pas une information déjà présente dans la fiche.\n- Demande les coordonnées et l’adresse uniquement lorsqu’elles sont utiles à la suite.\n- Demande l’e-mail si le client choisit ce canal et qu’il n’est pas déjà connu.\n- Enregistre la demande dès que le besoin est suffisamment clair.\n\n# LIMITES\nReste strictement dans le métier et les services décrits dans le contexte serveur. Si le métier n’est pas chargé, limite-toi à l’accueil administratif générique, prends un message et n’invente aucune spécialité.`;\n\nconst objectSchema = (properties: Record, required: string[] = []) => ({\n type: \"object\",\n properties,\n required,\n additionalProperties: false,\n});\n\nconst text = (description: string) => ({ type: \"string\", description });\n\nexport const REALTIME_SENSITIVE_ACTIONS = Object.freeze([\n \"book_appointment\",\n \"cancel_appointment\",\n \"create_and_send_quote\",\n] as const);\n\nexport const REALTIME_TOOLS: RealtimeTool[] = [\n {\n type: \"function\",\n name: \"client_context\",\n description: \"Lire la fiche liée au numéro appelant et les informations encore manquantes. Lecture seule.\",\n parameters: objectSchema({}),\n },\n {\n type: \"function\",\n name: \"update_client\",\n description: \"Enregistrer immédiatement les coordonnées ou préférences que le client vient de communiquer. Ne pas redemander les champs déjà connus.\",\n parameters: objectSchema({\n first_name: text(\"Prénom du client.\"),\n last_name: text(\"Nom de famille du client.\"),\n email: text(\"Adresse email communiquée.\"),\n address: text(\"Numéro et voie de l’adresse d’intervention.\"),\n postal_code: text(\"Code postal.\"),\n city: text(\"Ville.\"),\n phone_reachable: { type: \"boolean\", description: \"Vrai si le client confirme être joignable sur le numéro appelant.\" },\n alternate_phone: text(\"Autre numéro à utiliser si le numéro appelant ne convient pas.\"),\n preferred_contact_channel: { type: \"string\", enum: [\"telephone\", \"sms\", \"email\"], description: \"Canal préféré exprimé par le client.\" },\n }),\n },\n {\n type: \"function\",\n name: \"create_lead\",\n description: \"Créer ou compléter la demande dès que le besoin métier est compris. Utiliser les champs et la terminologie du profil serveur.\",\n parameters: objectSchema({\n first_name: text(\"Prénom si connu.\"),\n last_name: text(\"Nom si connu.\"),\n customer_name: text(\"Nom complet si le client l’a donné en une seule fois.\"),\n address: text(\"Adresse si connue.\"),\n postal_code: text(\"Code postal si connu.\"),\n city: text(\"Ville si connue.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier si connu.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n business_fields: { type: \"object\", description: \"Champs structurés propres au métier, selon intake_schema du contexte serveur.\", additionalProperties: true },\n problem: text(\"Description factuelle du besoin.\"),\n intent: { type: \"string\", enum: [\"depannage\", \"entretien\", \"installation\", \"mise_en_securite\", \"conformite\", \"devis\", \"rendez_vous\", \"construction\", \"renovation\", \"suivi\", \"autre\"] },\n urgency: { type: \"string\", enum: [\"basse\", \"normale\", \"haute\", \"urgente\"] },\n }, [\"problem\", \"intent\", \"urgency\"]),\n },\n {\n type: \"function\",\n name: \"check_availability\",\n description: \"Vérifier le créneau exact demandé ou chercher les premiers créneaux libres. Si une date et une heure sont données, les transmettre précisément.\",\n parameters: objectSchema({\n appointment_datetime: text(\"Date et heure souhaitées au format ISO 8601 avec fuseau horaire.\"),\n preferred_period: { type: \"string\", enum: [\"matin\", \"apres_midi\", \"indifferent\"] },\n duration_min: { type: \"number\", description: \"Durée estimée, généralement 60 minutes.\" },\n }),\n },\n {\n type: \"function\",\n name: \"prepare_sensitive_action\",\n description: \"Préparer sans exécuter une réservation, une annulation ou un envoi de devis. Retourne une question et un confirmation_id à utiliser seulement après la réponse explicite suivante du client.\",\n parameters: objectSchema({\n action: { type: \"string\", enum: REALTIME_SENSITIVE_ACTIONS },\n summary: text(\"Résumé exact, intelligible à l’oral, de l’action et de sa conséquence.\"),\n action_payload: { type: \"object\", description: \"Copie exacte des arguments qui seront transmis à l’action réelle, sans confirmation_id.\", additionalProperties: true },\n }, [\"action\", \"summary\", \"action_payload\"]),\n },\n {\n type: \"function\",\n name: \"book_appointment\",\n description: \"Réserver le créneau exact seulement après la préparation serveur et la confirmation explicite suivante du client.\",\n parameters: objectSchema({\n appointment_datetime: text(\"Créneau exact au format ISO 8601, repris du résultat de disponibilité.\"),\n address: text(\"Adresse d’intervention si elle vient d’être communiquée.\"),\n appointment_type: text(\"Motif court du rendez-vous.\"),\n duration_min: { type: \"number\", description: \"Durée du créneau.\" },\n first_name: text(\"Prénom si nouvellement communiqué.\"),\n last_name: text(\"Nom si nouvellement communiqué.\"),\n phone_reachable: { type: \"boolean\", description: \"Confirmation de joignabilité sur le numéro appelant si connue.\" },\n alternate_phone: text(\"Numéro alternatif si nécessaire.\"),\n confirmation_id: text(\"Jeton renvoyé par prepare_sensitive_action après confirmation verbale explicite.\"),\n }, [\"appointment_datetime\", \"confirmation_id\"]),\n },\n {\n type: \"function\",\n name: \"cancel_appointment\",\n description: \"Annuler un rendez-vous existant lorsque le client le demande clairement. Utiliser uniquement l’identifiant du prochain rendez-vous présent dans le contexte CRM ou retourné pendant cet appel.\",\n parameters: objectSchema({\n appointment_id: text(\"Identifiant interne du rendez-vous à annuler.\"),\n reason: text(\"Motif court donné par le client, si disponible.\"),\n confirmation_id: text(\"Jeton renvoyé par prepare_sensitive_action après confirmation verbale explicite.\"),\n }, [\"appointment_id\", \"confirmation_id\"]),\n },\n {\n type: \"function\",\n name: \"estimate_quote\",\n description: \"Calculer une fourchette estimative à partir du problème décrit et du catalogue interne. Lecture seule, montant non contractuel.\",\n parameters: objectSchema({\n problem: text(\"Problème, installation, équipement ou prestation à estimer avec les précisions données par le client.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier si connu.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n }, [\"problem\"]),\n },\n {\n type: \"function\",\n name: \"create_and_send_quote\",\n description: \"Créer le devis estimatif dans le format du cockpit puis l’envoyer réellement par le canal choisi.\",\n parameters: objectSchema({\n problem: text(\"Description complète servant de base à l’estimation.\"),\n delivery_channel: { type: \"string\", enum: [\"sms\", \"email\"], description: \"Canal choisi explicitement par le client.\" },\n first_name: text(\"Prénom.\"),\n last_name: text(\"Nom de famille.\"),\n customer_name: text(\"Nom complet si fourni en une seule fois.\"),\n email: text(\"Email obligatoire pour un envoi par email s’il n’est pas déjà en fiche.\"),\n address: text(\"Adresse si connue.\"),\n postal_code: text(\"Code postal si connu.\"),\n city: text(\"Ville si connue.\"),\n asset_type: text(\"Type d’installation, d’équipement ou d’actif métier.\"),\n pool_type: text(\"Alias de compatibilité réservé au métier piscine.\"),\n business_fields: { type: \"object\", description: \"Champs structurés propres au métier.\", additionalProperties: true },\n phone_reachable: { type: \"boolean\", description: \"Joignabilité sur le numéro appelant.\" },\n alternate_phone: text(\"Numéro alternatif.\"),\n confirmation_id: text(\"Jeton renvoyé par prepare_sensitive_action après confirmation verbale explicite.\"),\n }, [\"problem\", \"delivery_channel\", \"confirmation_id\"]),\n },\n {\n type: \"function\",\n name: \"knowledge_lookup\",\n description: \"Consulter une information métier validée avant une réponse technique ou commerciale précise.\",\n parameters: objectSchema({ query: text(\"Question métier courte.\") }, [\"query\"]),\n },\n {\n type: \"function\",\n name: \"transfer_to_human\",\n description: \"Transférer vers un humain si possible ou créer une demande de rappel.\",\n parameters: objectSchema({\n problem: text(\"Raison factuelle du transfert ou du rappel.\"),\n urgency: { type: \"string\", enum: [\"normale\", \"haute\", \"urgente\"] },\n }, [\"problem\"]),\n },\n {\n type: \"function\",\n name: \"complete_call\",\n description: \"Enregistrer le résultat final puis terminer proprement l’appel quand aucune action ou question n’est encore en attente.\",\n parameters: objectSchema({\n summary: text(\"Résumé court : identité utile, besoin, coordonnées qualifiées et actions réellement terminées.\"),\n intent: { type: \"string\", enum: [\"depannage\", \"entretien\", \"installation\", \"mise_en_securite\", \"conformite\", \"devis\", \"rendez_vous\", \"construction\", \"renovation\", \"suivi\", \"information\", \"autre\"], description: \"Intention principale normalisée selon le métier.\" },\n urgency: { type: \"string\", enum: [\"basse\", \"normale\", \"haute\", \"urgente\"] },\n sentiment: { type: \"string\", enum: [\"positif\", \"neutre\", \"inquiet\", \"frustre\", \"urgent\"] },\n closing_reason: { type: \"string\", enum: [\"resolved\", \"appointment_booked\", \"quote_sent\", \"callback_created\", \"client_finished\"] },\n qualification_exception: {\n type: \"string\",\n enum: [\"caller_refused\", \"caller_abusive\", \"emergency_handled\", \"no_action_needed\"],\n description: \"À renseigner uniquement si cette exception a réellement eu lieu ; ne jamais l’utiliser pour éviter une question utile.\"\n },\n }, [\"summary\", \"intent\", \"urgency\", \"closing_reason\"]),\n },\n];\n\nexport const REALTIME_TOOL_NAMES = Object.freeze(\n REALTIME_TOOLS.map((tool) => tool.name),\n);\n\nexport function buildSessionInstructions(\n context: Record | null,\n fromNumber: string,\n businessContext: Record | null = null,\n): string {\n const compact = context ? JSON.stringify(context).slice(0, 8000) : \"indisponible\";\n const business = businessContext && typeof businessContext === \"object\"\n ? businessContext\n : {};\n const verticalKey = String(business.vertical_key || \"\");\n const organization = String(business.organization_name || \"l’entreprise\").slice(0, 120);\n const vertical = String(business.vertical_display_name || \"services\").slice(0, 80);\n const assistantConfig = business.assistant_config\n && typeof business.assistant_config === \"object\"\n ? JSON.stringify(business.assistant_config).slice(0, 5000)\n : \"{}\";\n const timezone = String(business.timezone || \"Europe/Paris\").slice(0, 80);\n let currentTime: string;\n try {\n currentTime = new Intl.DateTimeFormat(\"fr-FR\", {\n timeZone: timezone,\n dateStyle: \"full\",\n timeStyle: \"long\",\n }).format(new Date());\n } catch {\n currentTime = new Intl.DateTimeFormat(\"fr-FR\", {\n timeZone: \"Europe/Paris\",\n dateStyle: \"full\",\n timeStyle: \"long\",\n }).format(new Date());\n }\n const rolePrompt = verticalKey === \"pool_service\" ? POOL_ROLE_PROMPT : ROLE_PROMPT;\n return `${rolePrompt}\n\n# ENTREPRISE ET MÉTIER VÉRIFIÉS\nOrganisation : ${organization}\nMétier : ${vertical}\nConfiguration métier : ${assistantConfig}\nCes informations viennent du routage serveur par numéro appelé. Ne les remplace jamais par une affirmation de l’appelant.\n\n# CONTEXTE DE CET APPEL\nDate et heure locale : ${currentTime}.\nNuméro appelant : ${fromNumber || \"inconnu\"}.\nFiche CRM et informations manquantes : ${compact}.\nLe contexte CRM est fiable. Utilise-le silencieusement et ne redemande que ce qui manque pour l’action en cours.`;\n}\n\nexport function buildAcceptConfig(model: string, voice: string) {\n return {\n type: \"realtime\",\n model,\n instructions: ROLE_PROMPT,\n output_modalities: [\"audio\"],\n audio: {\n input: {\n transcription: {\n model: \"gpt-4o-mini-transcribe\",\n language: \"fr\",\n prompt: \"Conversation téléphonique en français de France. Transcrire fidèlement les noms propres, adresses, dates, heures, montants et équipements techniques.\",\n },\n turn_detection: {\n type: \"semantic_vad\",\n eagerness: \"medium\",\n create_response: true,\n interrupt_response: true,\n },\n },\n output: { voice },\n },\n tools: REALTIME_TOOLS,\n tool_choice: \"auto\",\n };\n}\n",[],[1122,1216],"f8ff8d38-3b99-4120-be69-ab5327c452f7","rail-v59.ts","01a008e7-12ca-757f-ba31-d963756e3b6f",["D",1786855756508],"/**\n * Rail v59 — le rail de Claude, pour de bon : groupes, profil en pied.\n *\n * TROIS DEMANDES ET UNE RÉGRESSION.\n *\n * 0. RÉGRESSION CORRIGÉE (non signalée, mais visible sur la capture) : les\n * entrées de navigation occupaient chacune près d'un cinquième de l'écran.\n * Cause : `.nav` est une grille, `.side` une colonne flexible pleine\n * hauteur ; or `align-content` vaut `normal` — c'est-à-dire `stretch` en\n * grille — et l'espace libre est donc réparti entre les lignes à hauteur\n * automatique. Dix entrées se partageaient toute la hauteur. Correction :\n * `align-content:start` et lignes en `min-content`. La grille ne s'étire\n * plus, elle se pose en haut.\n *\n * 1. TITRE CENTRÉ. Sur la page Assistante, le titre restait calé à gauche\n * pendant que tout le reste était centré. Il rejoint l'axe de la colonne.\n *\n * 2. LE CHAMP D'ÉCRITURE. La boîte alignait ses éléments sur leur base\n * (`align-items:flex-end`), ce qui posait le texte trop bas quand la ligne\n * était unique. Centrage vertical, hauteur minimale franche, respiration à\n * gauche, et un fond léger : le champ se lit comme un champ, pas comme un\n * trait. La croissance en hauteur à la frappe reste inchangée.\n *\n * 3. LE RAIL, CALQUÉ SUR CLAUDE :\n * · les entrées sont regroupées par intention, avec un intertitre discret\n * (Claude sépare de la même façon ses sections) ;\n * · le compte de l'entreprise s'installe EN PIED de rail, sous un filet,\n * avec sa pastille et son nom — et mène aux Réglages.\n *\n * POINT D'HONNÊTETÉ SUR LA MÉTHODE : le pied de rail ne fabrique aucun\n * bouton. Il DÉPLACE le bouton « Réglages » existant (déplacer un nœud\n * conserve ses écouteurs) et l'habille. Le clic passe donc exactement par\n * le même circuit qu'avant — aucune navigation parallèle, aucune façade.\n * De même, les groupes sont construits à partir des boutons réellement\n * présents : une vue absente est simplement ignorée, une vue inconnue reste\n * à sa place en fin de liste. Rien n'est masqué, rien n'est inventé.\n *\n * Couche additive : la retirer de cockpit.ts rétablit le rail précédent.\n */\n\nexport const RAIL_RELEASE = \"rail-v59.2-pied-visible\";\n\nexport function styleRail(): string {\n return `\n/* ══ 0 · LA GRILLE DE NAVIGATION NE S'ÉTIRE PLUS ═════════════════════════ */\n.side .nav{\nalign-content:start!important;\ngrid-auto-rows:min-content!important;\nflex:0 0 auto!important;\n}\n.side .nav button{height:auto!important;min-height:36px!important}\n\n/* ══ 1 · TITRE DE LA PAGE ASSISTANTE SUR L'AXE ═══════════════════════════ */\n#view-owner .hero,#view-owner .hero h1,#view-owner>h1{text-align:center!important}\n\n/* ══ 2 · LE CHAMP D'ÉCRITURE ═════════════════════════════════════════════\n CONSOLIDÉ v61 : cette section dupliquait le composeur, dont la couche\n propriétaire est claude-v53. Les vingt-huit déclarations qu'elle portait\n étaient soit mortes, soit des doublons qui écrasaient l'original. Elles\n sont rapatriées dans claude-v53 — rendu identique, un seul endroit à\n modifier. Ne rien réintroduire ici : le composeur ne se style pas depuis\n la couche du rail. */\n\n/* ══ 3 · GROUPES ET PIED DE RAIL ═════════════════════════════════════════\n CONSOLIDÉ v61 : l'affinage vivait dans lisibilite-v60 et écrasait ici\n trente-trois déclarations. Valeurs finales rapatriées dans leur couche\n propriétaire ; lisibilite ne garde que ce qui relève du contraste. */\n.rail-v59-groupe{\npadding:16px 10px 5px;\nfont-size:.66rem;font-weight:600;letter-spacing:.07em;text-transform:uppercase;\ncolor:var(--muted-2);\n}\n.rail-v59-groupe:first-child{padding-top:2px}\n.side{padding-bottom:10px!important}\n.rail-v59-pied{\nmargin-top:auto!important;\npadding-top:10px;\nposition:relative;\n}\n/* Un filet qui s'efface sur les bords plutôt qu'un trait qui coupe. */\n.rail-v59-pied::before{\ncontent:\"\";position:absolute;left:10px;right:10px;top:0;height:1px;\nbackground:linear-gradient(90deg,transparent,var(--line) 22%,var(--line) 78%,transparent);\n}\n.rail-v59-profil{\ndisplay:flex!important;align-items:center!important;gap:9px!important;\nwidth:100%!important;text-align:left!important;justify-content:flex-start!important;\nmin-height:46px!important;padding:8px 10px!important;\nbackground:transparent!important;border:0!important;box-shadow:none!important;\nborder-radius:9px!important;\ntransition:background-color .12s ease!important;\n}\n.rail-v59-profil:hover{background:color-mix(in srgb,var(--ink) 6%,transparent)!important}\n.rail-v59-pastille{\nwidth:26px;height:26px;flex:0 0 auto;border-radius:50%;\nbackground:var(--accent);\ndisplay:grid;place-items:center;font-weight:700;font-size:.7rem;\n}\n.rail-v59-ident{display:grid;min-width:0;line-height:1.25}\n.rail-v59-ident b{\nfont-size:.78rem;font-weight:600;letter-spacing:-.005em;color:var(--ink);\noverflow:hidden;text-overflow:ellipsis;white-space:nowrap;\n}\n.rail-v59-ident small{\nfont-size:.65rem;color:var(--muted-2);\noverflow:hidden;text-overflow:ellipsis;white-space:nowrap;\n}\n.rail-v59-chevron{\nmargin-left:auto;color:var(--muted-2);font-size:.58rem;flex:0 0 auto;\nopacity:.55;transition:transform .14s ease,opacity .14s ease;\n}\n.rail-v59-profil:hover .rail-v59-chevron{opacity:.9}\n.rail-v59-profil[aria-expanded=\"true\"] .rail-v59-chevron{transform:rotate(180deg);opacity:.9}\n\n/* ══ 4 · MENU DU COMPTE ══════════════════════════════════════════════════\n Il s'ouvre vers le HAUT, comme chez Claude, et ne contient que des entrées\n qui déclenchent un circuit réel de l'application. */\n.rail-v59-pied{position:relative}\n.rail-v59-menu{\nposition:absolute;left:6px;right:6px;bottom:calc(100% + 6px);z-index:120;\ndisplay:grid;gap:0;padding:5px;\nbackground:var(--panel2);\nborder:1px solid var(--line);\nborder-radius:12px;\nbox-shadow:0 16px 40px -20px rgba(0,0,0,.7);\n}\n.rail-v59-menu[hidden]{display:none}\n.rail-v59-menu-tete{\npadding:6px 10px 7px;margin-bottom:3px;\nborder-bottom:1px solid var(--line);\nfont-size:.64rem;letter-spacing:.04em;text-transform:uppercase;\noverflow:hidden;text-overflow:ellipsis;white-space:nowrap;\n}\n.rail-v59-menu .rail-v59-item{\ndisplay:flex!important;align-items:center!important;gap:8px!important;\nwidth:100%!important;justify-content:flex-start!important;text-align:left!important;\nmin-height:32px!important;padding:5px 10px!important;\nbackground:transparent!important;border:0!important;box-shadow:none!important;\nborder-radius:6px!important;\nfont-size:.78rem!important;font-weight:450!important;color:var(--ink)!important;\n}\n.rail-v59-menu .rail-v59-item:hover:not(:disabled){background:color-mix(in srgb,var(--ink) 7%,transparent)!important}\n.rail-v59-menu .rail-v59-item:disabled{\ncolor:var(--muted-2)!important;cursor:not-allowed;\nopacity:1!important;filter:none!important;\n}\n.rail-v59-menu .rail-v59-item small{margin-left:auto;font-size:.62rem;letter-spacing:.02em}\n/* La sortie se détache du reste : un souffle, pas un trait de plus. */\n.rail-v59-menu .rail-v59-item.danger{color:var(--danger)!important;margin-top:4px!important}\n`;\n}\n\nexport function scriptRail(): string {\n return String.raw`(function(){\n\"use strict\";\nvar essais=0,fait=false;\n\n/* Groupes exprimés par identifiant de vue. Aucun n'est obligatoire : on ne\n travaille qu'avec les boutons réellement présents dans le rail. */\nvar GROUPES=[\n {titre:\"\",vues:[\"owner\",\"today\"]},\n {titre:\"Activit\\u00e9\",vues:[\"requests\",\"agenda\",\"clients\"]},\n {titre:\"Argent\",vues:[\"documents\",\"accounting\"]},\n {titre:\"Pilotage\",vues:[\"pilot\",\"missions\"]}\n];\n\nfunction boutonProfil(boutons){\n for(var i=0;i0))return;\n rail.style.height=Math.round(ecran/facteur)+\"px\";\n rail.style.bottom=\"auto\";\n}\nvar minuterie=null;\nif(typeof window!==\"undefined\"&&window.addEventListener){\n window.addEventListener(\"resize\",function(){\n clearTimeout(minuterie);\n minuterie=setTimeout(calerRail,120);\n });\n}\nif(document.readyState===\"loading\")document.addEventListener(\"DOMContentLoaded\",amorcer);\nelse amorcer();\n})();`;\n}\n\nexport function coucheRail(nonce: string): string {\n return ``\n + ``;\n}\n",[],[1122,1223],"23c7b5dd-ded8-4e79-bae9-1a2bcd8865f8","radar-v54.ts","01a008e7-12ca-757f-ba31-d4fdbb9d1e7d",["D",1786855756508],"/**\n * Radar v54 — l'argent dormant, chiffré, prouvé, actionnable.\n *\n * CE QUE C'EST\n * Un moteur qui lit les MÊMES données serveur que tout le cockpit\n * (window.__BOOT__ : devis, factures, clients, demandes, rendez-vous, tâches)\n * et en extrait l'argent immobile en cinq catégories :\n * 1. Factures échues non encaissées → montant réel dû\n * 2. Devis acceptés jamais facturés → montant réel gagné non facturé\n * 3. Devis envoyés sans réponse ≥ 7 jours → pipeline à relancer\n * 4. Brouillons de devis ≥ 14 jours → potentiel non chiffré au client\n * 5. Clients dormants ≥ 180 jours → relation à réveiller\n * Chaque catégorie se déplie sur SES lignes réelles (numéro, client, montant,\n * date) : le chiffre affiché est toujours la somme des lignes visibles —\n * jamais un agrégat invérifiable. Chaque ligne porte les actions qui existent\n * déjà dans le cockpit : Encaisser (openPaymentDialog), Facturer\n * (openInvoiceDialog), Finaliser (quote.status), Voir (openDoc), Relancer\n * (task.create). Aucun nouveau chemin d'écriture n'est créé.\n *\n * RELANCE EN MASSE — SIMULATEUR D'IMPACT\n * Le bouton de relance groupée est armé en deux temps : premier clic → il\n * annonce exactement combien de tâches seront créées (les doublons — une\n * tâche ouverte contenant déjà la référence du devis — sont exclus et\n * marqués « déjà relancé ») ; second clic dans les 7 secondes → exécution\n * séquentielle, avec l'état RÉEL de chaque ligne affiché après chaque retour\n * serveur (✓ créée / échec + raison). Rien n'est annoncé avant le retour.\n *\n * DÉGRADATION HONNÊTE\n * La catégorie « clients dormants » exige la liaison client_id entre\n * documents et fiches clients. Si les données chargées ne portent pas cette\n * liaison, la catégorie l'ÉCRIT au lieu d'afficher un zéro faussement\n * rassurant ou une liste fausse.\n *\n * REMPLACEMENT ASSUMÉ\n * Le « Centre d'actions » de Pilotage listait déjà une partie de ces lignes,\n * sans montants agrégés, sans provenance, sans masse, sans dormants. Deux\n * affichages de la même chose sont une confusion (décision v52) : le radar\n * le remplace en surensemble. Une ligne le rétablit :\n * q('#actionCenter').closest('article.card').style.display='';\n */\n\nexport const RADAR_RELEASE = \"radar-v54-argent-dormant\";\n\nexport function styleRadar(): string {\n return `\n/* ══ RADAR — argent dormant ══════════════════════════════════════════════ */\n.radar-v54-head{display:flex;align-items:baseline;gap:12px;padding:14px 16px;border-bottom:1px solid var(--line)}\n.radar-v54-head h2{font-size:12px;margin:0}\n.radar-v54-sous{color:var(--muted);font-size:9px;text-transform:uppercase;letter-spacing:.12em}\n.radar-v54-total{margin-left:auto;font-size:21px;font-weight:900;letter-spacing:-.03em}\ndetails.radar-v54-cat{border-bottom:1px solid var(--line)}\ndetails.radar-v54-cat:last-of-type{border-bottom:0}\n.radar-v54-cat summary{\ndisplay:flex;align-items:center;gap:10px;padding:12px 16px;cursor:pointer;\nlist-style:none;font-size:12px;font-weight:700;\n}\n.radar-v54-cat summary::-webkit-details-marker{display:none}\n.radar-v54-cat summary:after{content:\"+\";margin-left:2px;color:var(--muted);font-weight:500}\n.radar-v54-cat[open] summary:after{content:\"−\"}\n.radar-v54-compte{color:var(--muted);font-size:10px;font-weight:600}\n.radar-v54-montant{margin-left:auto;font-weight:850}\n.radar-v54-ligne{display:flex;align-items:center;gap:10px;padding:9px 16px;border-top:1px dashed var(--line);font-size:11px}\n.radar-v54-ligne .grow{min-width:0}\n.radar-v54-ligne b{display:block;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;font-size:11px}\n.radar-v54-ligne small{color:var(--muted);font-size:9px}\n.radar-v54-ligne .btn.small{min-height:30px;padding:5px 9px;font-size:10px}\n.radar-v54-etat{font-size:9px;color:var(--muted);white-space:nowrap}\n.radar-v54-etat.ok{color:var(--ok)}\n.radar-v54-etat.bad{color:#ff746b}\n.radar-v54-note{padding:10px 16px;color:var(--muted);font-size:10px;border-top:1px dashed var(--line)}\n.radar-v54-vide{padding:22px 16px;text-align:center;color:var(--muted);font-size:11px}\n.radar-v54-masse{padding:10px 16px;border-top:1px dashed var(--line)}\n.radar-v54-masse .btn{width:100%}\n.radar-v54-masse .btn.arme{border-color:var(--accent);color:var(--accent)}\n`;\n}\n\nexport function scriptRadar(): string {\n return String.raw`(function(){\n\"use strict\";\nvar essais=0,racine=null,donnees=null,arme=null,armeTimer=null,relancesFaites={};\n\nfunction pret(){\n try{\n return typeof quotes!==\"undefined\"&&typeof invoices!==\"undefined\"\n &&typeof clients!==\"undefined\"&&typeof tasks!==\"undefined\"\n &&typeof requests!==\"undefined\"&&typeof appointments!==\"undefined\"\n &&typeof q===\"function\"&&typeof action===\"function\";\n }catch(e){return false}\n}\nfunction somme(liste){return liste.reduce(function(s,x){return s+Number(x.total_ttc||0)},0)}\nfunction refDevis(x){return x.numero||(\"devis \"+String(x.id||\"\").slice(0,8))}\nfunction tacheOuverteContient(ref){\n if(relancesFaites[ref])return true;\n return tasks.some(function(t){\n return !/(termine|done|annule)/i.test(String(t.statut||\"\"))\n &&String(t.titre||\"\").indexOf(ref)>=0;\n });\n}\n\nfunction calculer(){\n var aujourd=new Date(todayIso());\n var retard=invoices.filter(function(x){\n return !isPaid(x)&&!isCancelled(x)&&x.date_echeance&&new Date(x.date_echeance)=7;\n });\n var brouillons=quotes.filter(function(x){\n return /brouillon/i.test(String(x.statut||\"\"))&&daysAgo(x.updated_at||x.created_at)>=14;\n });\n /* Dormants : calculable UNIQUEMENT si la liaison client_id existe des deux\n côtés. Sinon on le dit, on n'invente pas. */\n var vus={},docsLies=false;\n function marquer(liste,champ){\n liste.forEach(function(x){\n var id=x&&x.client_id;if(!id)return;docsLies=true;\n var d=new Date(x[champ]||x.created_at||0).getTime();\n if(Number.isFinite(d)&&(!vus[id]||d>vus[id]))vus[id]=d;\n });\n }\n marquer(quotes,\"updated_at\");marquer(invoices,\"updated_at\");\n marquer(requests,\"created_at\");marquer(appointments,\"date_heure\");\n var clientsAvecId=clients.filter(function(c){return c&&c.id});\n var seuil=Date.now()-180*86400000;\n var dormants=null,dormantsCalculables=docsLies&&clientsAvecId.length>0;\n if(dormantsCalculables){\n dormants=clientsAvecId.filter(function(c){\n var d=vus[c.id];return !d||d

\"+gauche+\"\"+sous+\"

\"+droite+\"\";\n}\nfunction boutons(defs){\n return defs.map(function(d){\n return \"\";\n }).join(\"\");\n}\nfunction cat(cle,titre,liste,montant,corps,ouvert){\n return \"

\"\n +\"

\"+titre+\" \"+liste.length+\" ligne\"+(liste.length>1?\"s\":\"\")+\"\"\n +(montant===null?\"\":\"\"+montant+\"\")\n +\"

\"+corps+\"

\";\n}\n\nfunction rendre(){\n donnees=calculer();\n var d=donnees;\n var total=somme(d.retard)+somme(d.acceptes)+somme(d.attente);\n var html=\"

Argent dormant

\"\n +\"

Somme des trois premi\\u00e8res cat\\u00e9gories \\u00b7 chaque montant = ses lignes ci-dessous

\"\n +\"

\"+money(total)+\"

\";\n\n if(!d.retard.length&&!d.acceptes.length&&!d.attente.length&&!d.brouillons.length){\n html+=\"

Aucun argent dormant d\\u00e9tect\\u00e9 dans les documents charg\\u00e9s. La file est propre.

\";\n }\n\n if(d.retard.length){\n var corpsRetard=d.retard.map(function(x,i){\n return ligne(\n esc(x.numero||\"Facture\")+\" \\u00b7 \"+esc(clientName(x)),\n \"\\u00c9chue le \"+dateOnly(x.date_echeance)+\" \\u00b7 \"+money(x.total_ttc),\n boutons([\n {act:\"pay\",cat:\"retard\",i:i,label:\"Encaisser\",primaire:true},\n {act:\"voirf\",cat:\"retard\",i:i,label:\"Voir\"}\n ])\n );\n }).join(\"\");\n html+=cat(\"retard\",\"Factures \\u00e9chues\",d.retard,money(somme(d.retard)),corpsRetard,true);\n }\n if(d.acceptes.length){\n var corpsAcceptes=d.acceptes.map(function(x,i){\n return ligne(\n esc(refDevis(x))+\" \\u00b7 \"+esc(clientName(x)),\n \"Accept\\u00e9 \\u00b7 jamais factur\\u00e9 \\u00b7 \"+money(x.total_ttc),\n boutons([\n {act:\"facturer\",cat:\"acceptes\",i:i,label:\"Facturer\",primaire:true},\n {act:\"voirq\",cat:\"acceptes\",i:i,label:\"Voir\"}\n ])\n );\n }).join(\"\");\n html+=cat(\"acceptes\",\"Devis accept\\u00e9s non factur\\u00e9s\",d.acceptes,money(somme(d.acceptes)),corpsAcceptes,true);\n }\n if(d.attente.length){\n var corpsAttente=d.attente.map(function(x,i){\n var ref=refDevis(x),deja=tacheOuverteContient(\"Relancer \"+ref);\n return ligne(\n esc(ref)+\" \\u00b7 \"+esc(clientName(x)),\n \"Envoy\\u00e9 il y a \"+daysAgo(x.date_envoi||x.updated_at)+\" jours \\u00b7 \"+money(x.total_ttc),\n (deja?\"d\\u00e9j\\u00e0 relanc\\u00e9\":\"\"\n +boutons([{act:\"relancer\",cat:\"attente\",i:i,label:\"Relancer\"}]))\n +boutons([{act:\"voirq\",cat:\"attente\",i:i,label:\"Voir\"}])\n );\n }).join(\"\");\n var aCreer=d.attente.filter(function(x){return !tacheOuverteContient(\"Relancer \"+refDevis(x))}).length;\n corpsAttente+=\"

\";\n html+=cat(\"attente\",\"Devis sans r\\u00e9ponse \\u2265 7 j\",d.attente,money(somme(d.attente)),corpsAttente,false);\n }\n if(d.brouillons.length){\n var corpsBrouillons=d.brouillons.map(function(x,i){\n return ligne(\n esc(refDevis(x))+\" \\u00b7 \"+esc(clientName(x)),\n \"Brouillon depuis \"+daysAgo(x.updated_at||x.created_at)+\" jours \\u00b7 \"+money(x.total_ttc),\n boutons([\n {act:\"finaliser\",cat:\"brouillons\",i:i,label:\"Finaliser\"},\n {act:\"voirq\",cat:\"brouillons\",i:i,label:\"Voir\"}\n ])\n );\n }).join(\"\");\n html+=cat(\"brouillons\",\"Brouillons \\u2265 14 j \\u00b7 potentiel non envoy\\u00e9\",d.brouillons,money(somme(d.brouillons)),corpsBrouillons,false);\n }\n if(d.dormantsCalculables){\n if(d.dormants.length){\n var visibles=d.dormants.slice(0,8);\n var corpsDormants=visibles.map(function(c,i){\n var vu=d.vus[c.id];\n var deja=tacheOuverteContient(\"Reprendre contact \\u2014 \"+String(c.nom||c.telephone||\"\"));\n return ligne(\n esc(c.nom||c.telephone||\"Client\"),\n vu?\"Derni\\u00e8re trace le \"+dateOnly(new Date(vu).toISOString()):\"Aucune trace dans les documents charg\\u00e9s\",\n deja?\"t\\u00e2che d\\u00e9j\\u00e0 ouverte\"\n :\"\"\n +boutons([{act:\"reprendre\",cat:\"dormants\",i:i,label:\"Reprendre contact\"}])\n );\n }).join(\"\");\n if(d.dormants.length>8)corpsDormants+=\"

\\u2026 et \"+(d.dormants.length-8)+\" autre(s) client(s) dormant(s).

\";\n html+=cat(\"dormants\",\"Clients dormants \\u2265 180 j\",d.dormants,null,corpsDormants,false);\n }\n }else{\n html+=\"

Clients dormants : non calculable \\u2014 la liaison client_id entre documents et fiches clients est absente des donn\\u00e9es charg\\u00e9es. Aucun chiffre invent\\u00e9.

\";\n }\n racine.innerHTML=html;\n}\n\nfunction etat(id,texte,classe){\n var el=document.getElementById(id);\n if(el){el.textContent=texte;el.className=\"radar-v54-etat\"+(classe?\" \"+classe:\"\")}\n}\nfunction payloadRelance(x){\n var ref=refDevis(x);\n return {type_tache:\"rappeler\",priorite:\"normale\",titre:\"Relancer \"+ref,\n description:clientName(x)+\" \\u00b7 \"+money(x.total_ttc)+\" \\u00b7 envoy\\u00e9 il y a \"+daysAgo(x.date_envoi||x.updated_at)+\" jours\",\n client_id:x.client_id||null};\n}\nasync function relancerUn(i,bouton){\n var x=donnees.attente[i];if(!x)return false;\n var ref=\"Relancer \"+refDevis(x);\n if(tacheOuverteContient(ref)){etat(\"radarEtatAttente\"+i,\"d\\u00e9j\\u00e0 relanc\\u00e9\");return false}\n if(bouton)bouton.disabled=true;\n etat(\"radarEtatAttente\"+i,\"cr\\u00e9ation\\u2026\");\n try{\n await action(\"task.create\",payloadRelance(x),false);\n relancesFaites[ref]=true;\n etat(\"radarEtatAttente\"+i,\"\\u2713 t\\u00e2che cr\\u00e9\\u00e9e\",\"ok\");\n if(bouton)bouton.remove();\n return true;\n }catch(e){\n etat(\"radarEtatAttente\"+i,\"\\u00e9chec : \"+String(e&&e.message||e),\"bad\");\n if(bouton)bouton.disabled=false;\n return false;\n }\n}\nasync function masseRelances(bouton){\n var cibles=donnees.attente\n .map(function(x,i){return {x:x,i:i}})\n .filter(function(p){return !tacheOuverteContient(\"Relancer \"+refDevis(p.x))});\n if(!cibles.length){toast(\"Aucune relance \\u00e0 cr\\u00e9er \\u2014 tout est d\\u00e9j\\u00e0 couvert.\");return}\n /* Deux temps : annonce d'impact exacte, puis exécution confirmée. */\n if(arme!==\"attente\"){\n arme=\"attente\";\n bouton.classList.add(\"arme\");\n bouton.textContent=\"Confirmer : \"+cibles.length+\" t\\u00e2che\"+(cibles.length>1?\"s\":\"\")+\" de relance seront cr\\u00e9\\u00e9es (7 s)\";\n clearTimeout(armeTimer);\n armeTimer=setTimeout(function(){\n arme=null;bouton.classList.remove(\"arme\");\n bouton.textContent=\"Pr\\u00e9parer la relance group\\u00e9e \\u00b7 \"+cibles.length+\" t\\u00e2che\"+(cibles.length>1?\"s\":\"\");\n },7000);\n return;\n }\n clearTimeout(armeTimer);arme=null;\n bouton.disabled=true;bouton.classList.remove(\"arme\");\n var faites=0,ratees=0;\n for(var k=0;k1?\"s\":\"\")+(ratees?\" \\u00b7 \"+ratees+\" \\u00e9chec\"+(ratees>1?\"s\":\"\"):\"\");\n toast(\"Relances : \"+faites+\" t\\u00e2che(s) r\\u00e9ellement cr\\u00e9\\u00e9e(s)\"+(ratees?\", \"+ratees+\" \\u00e9chec(s)\":\"\"),!ratees);\n if(faites)setTimeout(function(){location.reload()},1500);\n}\nasync function reprendreContact(i,bouton){\n var c=donnees.dormants&&donnees.dormants[i];if(!c)return;\n var ref=\"Reprendre contact \\u2014 \"+String(c.nom||c.telephone||\"\");\n if(tacheOuverteContient(ref)){etat(\"radarEtatDormant\"+i,\"t\\u00e2che d\\u00e9j\\u00e0 ouverte\");return}\n bouton.disabled=true;etat(\"radarEtatDormant\"+i,\"cr\\u00e9ation\\u2026\");\n try{\n await action(\"task.create\",{type_tache:\"rappeler\",priorite:\"normale\",titre:ref,\n description:\"Client sans activit\\u00e9 depuis plus de 180 jours \\u00b7 \"\n +String([c.telephone,c.email].filter(Boolean).join(\" \\u00b7 \")||\"coordonn\\u00e9es \\u00e0 v\\u00e9rifier\"),\n client_id:c.id},false);\n relancesFaites[ref]=true;\n etat(\"radarEtatDormant\"+i,\"\\u2713 t\\u00e2che cr\\u00e9\\u00e9e\",\"ok\");\n bouton.remove();\n }catch(e){\n etat(\"radarEtatDormant\"+i,\"\\u00e9chec : \"+String(e&&e.message||e),\"bad\");\n bouton.disabled=false;\n }\n}\nasync function surClic(ev){\n var b=ev.target&&ev.target.closest?ev.target.closest(\"[data-ract]\"):null;\n if(!b)return;\n var actn=b.getAttribute(\"data-ract\"),catg=b.getAttribute(\"data-rcat\"),i=Number(b.getAttribute(\"data-ri\"));\n if(actn===\"pay\")return openPaymentDialog(donnees.retard[i].id);\n if(actn===\"voirf\")return openDoc(\"invoice\",donnees.retard[i].id);\n if(actn===\"facturer\")return openInvoiceDialog(donnees.acceptes[i].id);\n if(actn===\"voirq\"){\n var src=catg===\"acceptes\"?donnees.acceptes:catg===\"attente\"?donnees.attente:donnees.brouillons;\n return openDoc(\"quote\",src[i].id);\n }\n if(actn===\"finaliser\"){\n b.disabled=true;\n try{await action(\"quote.status\",{id:donnees.brouillons[i].id,statut:\"pret\"})}\n catch(e){toast(String(e&&e.message||e),false);b.disabled=false}\n return;\n }\n if(actn===\"relancer\")return relancerUn(i,b);\n if(actn===\"masse\")return masseRelances(b);\n if(actn===\"reprendre\")return reprendreContact(i,b);\n}\n\nfunction monter(){\n if(racine&&document.body&&document.body.contains(racine))return true;\n if(!pret())return false;\n var centre=q(\"#actionCenter\");\n if(!centre)return false;\n var carte=centre.closest(\"article.card\");\n if(!carte||!carte.parentNode)return false;\n racine=document.createElement(\"article\");\n racine.className=\"card radar-v54\";\n carte.parentNode.insertBefore(racine,carte);\n /* Remplacement en surensemble du Centre d'actions (doublon sinon).\n Rétablir : q('#actionCenter').closest('article.card').style.display=''; */\n carte.style.display=\"none\";\n rendre();\n racine.addEventListener(\"click\",surClic);\n return true;\n}\nfunction amorcer(){\n monter();\n if(++essais<40)setTimeout(amorcer,250);\n}\nif(document.readyState===\"loading\")document.addEventListener(\"DOMContentLoaded\",amorcer);\nelse amorcer();\n})();`;\n}\n\nexport function coucheRadar(nonce: string): string {\n return ``\n + ``;\n}\n",[],[1122,1230],"4024dd9f-4015-4ad4-a86e-b7de382277c8","platform-auth-v14.ts","01a008e7-12ca-757f-ba31-d373251eff10",80,["D",1788064122301],"import { getBusinessTemplate, publicTemplate, registrationTemplates, templateAssistantConfig, templateUiConfig } from \"./business-templates.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL=(Deno.env.get(\"PLATFORM_SUPABASE_URL\")||\"\").replace(/\\/$/,\"\");\nconst PUBLISHABLE_KEY=Deno.env.get(\"PLATFORM_SUPABASE_PUBLISHABLE_KEY\")||\"\";\nconst GATEWAY_SECRET=Deno.env.get(\"PLATFORM_AUTH_GATEWAY_SECRET\")||\"\";\nconst AUTH_FLOW_VERSION=\"v93_internal_pilot\";\nconst EDGE_URL=`${SUPABASE_URL}/functions/v1/tenant-auth-gateway`;\nconst RATE_TABLE=\"platform_login_request_rate\";\nconst RATE_WINDOW_MS=15*60*1000;\nconst MAX_REQUESTS=12;\nlet rateReady:Promise|null=null;\nconst TEMPLATE_PENDING_TABLE=\"platform_template_pending\";\nconst TEMPLATE_TENANT_TABLE=\"platform_tenant_template\";\nlet templateTablesReady:Promise|null=null;\n\nasync function ensureTemplateTables():Promise{\n if(!templateTablesReady){\n templateTablesReady=sqlite.batch([\n `create table if not exists ${TEMPLATE_PENDING_TABLE}(handoff_id text primary key,template_key text not null,created_at integer not null)`,\n `create table if not exists ${TEMPLATE_TENANT_TABLE}(tenant_id text primary key,template_key text not null,updated_at integer not null)`,\n `delete from ${TEMPLATE_PENDING_TABLE} where created_at{}).catch(error=>{templateTablesReady=null;throw error;});\n }\n return templateTablesReady;\n}\n\nasync function savePendingTemplate(handoff:string,templateKey:string):Promise{\n await ensureTemplateTables();\n await sqlite.execute({sql:`insert into ${TEMPLATE_PENDING_TABLE}(handoff_id,template_key,created_at) values(?,?,unixepoch()) on conflict(handoff_id) do update set template_key=excluded.template_key,created_at=excluded.created_at`,args:[handoff,templateKey]});\n}\n\nasync function assignPendingTemplate(handoff:string,tenantId:string):Promise{\n if(!handoff||!tenantId)return \"\";\n await ensureTemplateTables();\n const result=await sqlite.execute({sql:`select template_key from ${TEMPLATE_PENDING_TABLE} where handoff_id=? and created_at>=unixepoch()-86400 limit 1`,args:[handoff]});\n const key=clean((result.rows[0] as Record|undefined)?.template_key,80).toLowerCase();\n if(!getBusinessTemplate(key))return \"\";\n await sqlite.batch([\n {sql:`insert into ${TEMPLATE_TENANT_TABLE}(tenant_id,template_key,updated_at) values(?,?,unixepoch()) on conflict(tenant_id) do update set template_key=excluded.template_key,updated_at=excluded.updated_at`,args:[tenantId,key]},\n {sql:`delete from ${TEMPLATE_PENDING_TABLE} where handoff_id=?`,args:[handoff]},\n ]);\n return key;\n}\n\nasync function loadTenantTemplate(tenantId:string){\n if(!tenantId)return null;\n try{\n await ensureTemplateTables();\n const result=await sqlite.execute({sql:`select template_key from ${TEMPLATE_TENANT_TABLE} where tenant_id=? limit 1`,args:[tenantId]});\n return getBusinessTemplate((result.rows[0] as Record|undefined)?.template_key);\n }catch{return null;}\n}\n\n\n\nexport type TenantIdentity={\n tenant_id:string;\n staff_id:string;\n auth_user_id:string;\n role:string;\n login_identifier:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:\"legacy_single_tenant\"|\"direct_multi_tenant\"|\"disabled\";\n feature_flags:Record;\n ui_config:{\n brand_mark:string;\n trade_label:string;\n assistant_title:string;\n primary_action:string;\n };\n auth_method:\"supabase_email\";\n};\n\nexport type ChannelContext={\n tenant_id:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:string;\n feature_flags:Record;\n ui_config:Record;\n assistant_config:Record;\n business_template_key?:string;\n business_template_label?:string;\n};\n\nconst channelCache=new Map();\n\nfunction clean(value:unknown,max:number):string{\n return String(value??\"\").trim().slice(0,max);\n}\n\nfunction object(value:unknown):Record{\n return value&&typeof value===\"object\"&&!Array.isArray(value)\n ? value as Record\n : {};\n}\n\nasync function parse(response:Response):Promise>{\n const raw=(await response.text()).slice(0,50_000);\n if(!raw)return {};\n try{return object(JSON.parse(raw));}catch{return {};}\n}\n\nfunction uuid(value:unknown):string{\n const result=clean(value,80).toLowerCase();\n return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(result)\n ? result\n : \"\";\n}\n\nfunction safeObject(value:unknown,maxEntries=40):Record{\n const source=object(value);\n return Object.fromEntries(\n Object.entries(source)\n .filter(([key])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key))\n .slice(0,maxEntries)\n .map(([key,item])=>[\n key,\n typeof item===\"boolean\"||typeof item===\"number\"||typeof item===\"string\"\n ? item\n : null,\n ]),\n );\n}\n\nfunction booleanFlags(value:unknown):Record{\n return Object.fromEntries(\n Object.entries(object(value))\n .filter(([key,item])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key)&&typeof item===\"boolean\")\n .slice(0,40),\n ) as Record;\n}\n\nfunction sanitizeIdentity(value:unknown):TenantIdentity|null{\n const source=object(value);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const staffId=uuid(source.staff_id);\n const authUserId=uuid(source.auth_user_id);\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n const backend=clean(source.backend_mode,40) as TenantIdentity[\"backend_mode\"];\n if(\n !/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!staffId\n ||!authUserId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n ||![\"legacy_single_tenant\",\"direct_multi_tenant\",\"disabled\"].includes(backend)\n )return null;\n\n const ui=safeObject(source.ui_config,12);\n return {\n tenant_id:tenantId,\n staff_id:staffId,\n auth_user_id:authUserId,\n role:clean(source.role,40)||\"member\",\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Math.min(10000,Number(source.vertical_version||1))),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:backend,\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:{\n brand_mark:clean(ui.brand_mark,3).toUpperCase()||\"S\",\n trade_label:clean(ui.trade_label,80)||clean(source.vertical_display_name,80)||\"Services\",\n assistant_title:clean(ui.assistant_title,80)||\"Assistante IA\",\n primary_action:clean(ui.primary_action,80)||\"Nouveau devis\",\n },\n auth_method:\"supabase_email\",\n };\n}\n\nasync function ensureRateTable():Promise{\n if(!rateReady){\n rateReady=(async()=>{\n await sqlite.execute(`create table if not exists ${RATE_TABLE}(\n client_key text primary key,\n request_count integer not null,\n window_started_at integer not null,\n updated_at integer not null\n )`);\n })().catch(error=>{rateReady=null;throw error;});\n }\n return rateReady;\n}\n\nasync function clientKey(req:Request,identifier:string):Promise{\n const forwarded=req.headers.get(\"cf-connecting-ip\")\n ||req.headers.get(\"x-forwarded-for\")\n ||\"unknown\";\n const ip=forwarded.split(\",\")[0].trim();\n const bytes=new TextEncoder().encode(`${ip}\\u0000${identifier}\\u0000${GATEWAY_SECRET}`);\n const digest=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",bytes));\n return [...digest].map(byte=>byte.toString(16).padStart(2,\"0\")).join(\"\").slice(0,40);\n}\n\nasync function consumeRequestQuota(req:Request,identifier:string):Promise{\n await ensureRateTable();\n const key=await clientKey(req,identifier);\n const now=Date.now();\n const found=await sqlite.execute({\n sql:`select request_count,window_started_at from ${RATE_TABLE} where client_key=? limit 1`,\n args:[key],\n });\n const row=found.rows[0] as Record|undefined;\n const started=Number(row?.window_started_at||now);\n const expired=now-started>=RATE_WINDOW_MS;\n const count=expired?0:Number(row?.request_count||0);\n if(count>=MAX_REQUESTS)return false;\n await sqlite.execute({\n sql:`insert into ${RATE_TABLE}(client_key,request_count,window_started_at,updated_at)\n values(?,?,?,?)\n on conflict(client_key) do update set\n request_count=excluded.request_count,\n window_started_at=excluded.window_started_at,\n updated_at=excluded.updated_at`,\n args:[key,count+1,expired?now:started,now],\n });\n if(Math.random()<0.02){\n await sqlite.execute({\n sql:`delete from ${RATE_TABLE} where updated_at=40\n );\n}\n\nasync function edgeRequest(\n operation:string,\n body:Record,\n accessToken=PUBLISHABLE_KEY,\n):Promise<{response:Response|null;payload:Record}>{\n try{\n const response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${accessToken}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({operation,...body}),\n signal:AbortSignal.timeout(12_000),\n });\n return {response,payload:await parse(response)};\n }catch{return {response:null,payload:{}};}\n}\n\nfunction gatewayError(\n response:Response|null,\n payload:Record,\n fallback=\"platform_auth_unavailable\",\n):Record{\n const allowed=new Set([\n \"invalid_credentials\",\"email_rate_limited\",\"email_delivery_unavailable\",\n \"password_policy_rejected\",\"vertical_not_available\",\"signup_unavailable\",\n \"invalid_request\",\"platform_auth_unavailable\",\n ]);\n const candidate=clean(payload.error,120);\n return {\n ok:false,\n error:allowed.has(candidate)?candidate:fallback,\n retry_after_seconds:Number(payload.retry_after_seconds||0),\n n8n_execution_used:false,\n http_status:response?.status||503,\n };\n}\n\nasync function requestGatewayLink(\n req:Request,\n operation:\"request_login\"|\"request_password_reset\",\n loginIdentifier:unknown,\n emailValue:unknown,\n handoffValue:unknown,\n passwordValue?:unknown,\n):Promise>{\n const identifier=clean(loginIdentifier,64).toLowerCase();\n const email=clean(emailValue,254).toLowerCase();\n const handoff=uuid(handoffValue);\n const password=String(passwordValue??\"\").slice(0,1024);\n const reset=operation===\"request_password_reset\";\n if(!platformAuthConfigured()){\n return {ok:false,error:\"platform_auth_not_configured\",http_status:503};\n }\n if(\n !/^[a-z0-9][a-z0-9_-]{2,63}$/.test(identifier)\n ||!email.includes(\"@\")\n ||!handoff\n ||(!reset&&!password)\n )return {ok:false,error:\"invalid_request\",http_status:400};\n if(!(await consumeRequestQuota(req,identifier))){\n return {ok:false,error:\"email_rate_limited\",retry_after_seconds:900,http_status:429};\n }\n\n const {response,payload}=await edgeRequest(operation,{\n auth_flow_version:AUTH_FLOW_VERSION,\n login_identifier:identifier,\n email,\n handoff_id:handoff,\n ...(reset?{}:{password}),\n });\n if(!response||!response.ok||payload.ok===false){\n return gatewayError(response,payload);\n }\n return {...payload,http_status:response.status,n8n_execution_used:false};\n}\n\nexport async function requestTenantMagicLink(\n req:Request,\n loginIdentifier:unknown,\n emailValue:unknown,\n passwordValue:unknown,\n handoffValue:unknown,\n):Promise>{\n return requestGatewayLink(\n req,\"request_login\",loginIdentifier,emailValue,handoffValue,passwordValue,\n );\n}\n\nexport async function requestTenantPasswordReset(\n req:Request,\n loginIdentifier:unknown,\n emailValue:unknown,\n handoffValue:unknown,\n):Promise>{\n return requestGatewayLink(\n req,\"request_password_reset\",loginIdentifier,emailValue,handoffValue,\n );\n}\n\nexport async function listRegistrationVerticals():Promise{\n if(!platformAuthConfigured())return [];\n const {response,payload}=await edgeRequest(\"list_verticals\",{});\n if(!response?.ok||payload.ok!==true||!Array.isArray(payload.verticals))return [];\n const baseKeys=payload.verticals.map(value=>clean(object(value).key,80).toLowerCase()).filter(value=>/^[a-z][a-z0-9_]{1,79}$/.test(value));\n return registrationTemplates(baseKeys).map(publicTemplate).slice(0,40);\n}\n\nexport async function requestTenantSignup(\n req:Request,\n values:{\n organization_name:unknown;\n vertical_key:unknown;\n login_identifier:unknown;\n email:unknown;\n password:unknown;\n password_confirmation:unknown;\n handoff_id:unknown;\n },\n):Promise>{\n const organization=clean(values.organization_name,120);\n const templateKey=clean(values.vertical_key,80).toLowerCase();\n const template=getBusinessTemplate(templateKey);\n const identifier=clean(values.login_identifier,64).toLowerCase();\n const email=clean(values.email,254).toLowerCase();\n const handoff=uuid(values.handoff_id);\n const password=String(values.password??\"\");\n const confirmation=String(values.password_confirmation??\"\");\n if(!platformAuthConfigured())return {ok:false,error:\"platform_auth_not_configured\",http_status:503};\n if(\n organization.length<2\n ||!template\n ||!/^[a-z0-9][a-z0-9-]{2,62}$/.test(identifier)\n ||!email.includes(\"@\")\n ||!handoff\n ||password!==confirmation\n )return {ok:false,error:\"invalid_request\",http_status:400};\n if(!(await consumeRequestQuota(req,`signup:${identifier}`))){\n return {ok:false,error:\"email_rate_limited\",retry_after_seconds:900,http_status:429};\n }\n const {response,payload}=await edgeRequest(\"request_signup\",{\n auth_flow_version:AUTH_FLOW_VERSION,\n organization_name:organization,\n vertical_key:template.baseVertical,\n login_identifier:identifier,\n email,\n password,\n password_confirmation:confirmation,\n handoff_id:handoff,\n });\n if(!response||!response.ok||payload.ok===false){\n return gatewayError(response,payload,\"signup_unavailable\");\n }\n await savePendingTemplate(handoff,template.key);\n return {...payload,business_template_key:template.key,http_status:response.status,n8n_execution_used:false};\n}\n\nexport async function exchangeTenantIdentity(\n intentValue:unknown,\n accessTokenValue:unknown,\n):Promise>{\n const intent=clean(intentValue,128).toLowerCase();\n const accessToken=clean(accessTokenValue,8192);\n if(!platformAuthConfigured()||!intent||accessToken.length<20){\n return {ok:false,error:\"identity_exchange_rejected\",http_status:403};\n }\n const {response,payload}=await edgeRequest(\n \"exchange_identity\",\n {intent_token:intent},\n accessToken,\n );\n const identity=sanitizeIdentity(payload.identity);\n const authFlow=sanitizeAuthFlow(payload.auth_flow);\n if(!response?.ok||payload.ok!==true||!identity||!authFlow){\n return {\n ok:false,\n error:\"identity_exchange_rejected\",\n http_status:response?.status===502?502:403,\n };\n }\n const assignedKey=authFlow.purpose===\"signup\"?await assignPendingTemplate(authFlow.handoff,identity.tenant_id):\"\";\n const template=getBusinessTemplate(assignedKey)||await loadTenantTemplate(identity.tenant_id);\n const templateUi=template?templateUiConfig(template):null;\n const resolvedIdentity=template?{\n ...identity,\n vertical_display_name:template.label,\n ui_config:{\n ...identity.ui_config,\n brand_mark:String(templateUi?.brand_mark||identity.ui_config.brand_mark),\n trade_label:String(templateUi?.trade_label||template.label),\n assistant_title:String(templateUi?.assistant_title||\"Assistante IA\"),\n primary_action:String(templateUi?.primary_action||template.primaryAction),\n },\n }:identity;\n return {\n ok:true,\n identity:resolvedIdentity,\n auth_flow:authFlow,\n business_template_key:template?.key||null,\n http_status:200,\n n8n_execution_used:false,\n };\n}\n\nexport async function setTenantPassword(\n identity:Pick,\n passwordValue:unknown,\n):Promise>{\n const password=String(passwordValue??\"\");\n const classes=[/[a-z]/.test(password),/[A-Z]/.test(password),/[0-9]/.test(password),/[^A-Za-z0-9]/.test(password)];\n if(password.length<12||password.length>128||classes.filter(Boolean).length<3){\n return {ok:false,error:\"password_policy_rejected\",http_status:400};\n }\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"set_password\",\n tenant_id:identity.tenant_id,\n staff_id:identity.staff_id,\n auth_user_id:identity.auth_user_id,\n password,\n }),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"password_provider_unavailable\",http_status:502};\n }\n const payload=await parse(response);\n if(!response.ok||payload.ok!==true){\n return {\n ok:false,\n error:clean(payload.error,120)||\"password_change_rejected\",\n http_status:response.status,\n };\n }\n return {ok:true,password_updated:true,http_status:200,n8n_execution_used:false};\n}\n\nexport async function resolveChannelContext(\n addressValue:unknown,\n):Promise{\n const address=clean(addressValue,80);\n if(!platformAuthConfigured()||!address)return null;\n const cached=channelCache.get(address);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_channel\",\n provider:\"twilio\",\n channel:\"voice\",\n address,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n const payload=await parse(response);\n const source=object(payload.context);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n const template=await loadTenantTemplate(tenantId);\n const templateUi=template?templateUiConfig(template):{};\n const templateAssistant=template?templateAssistantConfig(template):{};\n const context:ChannelContext={\n tenant_id:tenantId,\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:template?.label||clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:{...object(source.ui_config),...templateUi},\n assistant_config:{...object(source.assistant_config),...templateAssistant},\n business_template_key:template?.key,\n business_template_label:template?.label,\n };\n channelCache.set(address,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n\n\nexport type TenantBusinessContext=ChannelContext&{\n login_identifier:string;\n tenant_settings:Record;\n};\n\nconst tenantContextCache=new Map();\n\nexport async function resolveTenantContext(\n tenantIdValue:unknown,\n):Promise{\n const tenantId=clean(tenantIdValue,80).toLowerCase();\n if(\n !platformAuthConfigured()\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n )return null;\n const cached=tenantContextCache.get(tenantId);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_tenant\",\n tenant_id:tenantId,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n\n const payload=await parse(response);\n const source=object(payload.context);\n const resolvedTenant=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||resolvedTenant!==tenantId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n\n const template=await loadTenantTemplate(resolvedTenant);\n const templateUi=template?templateUiConfig(template):{};\n const templateAssistant=template?templateAssistantConfig(template):{};\n const context:TenantBusinessContext={\n tenant_id:resolvedTenant,\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:template?.label||clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:{...object(source.ui_config),...templateUi},\n assistant_config:{...object(source.assistant_config),...templateAssistant},\n tenant_settings:object(source.tenant_settings),\n business_template_key:template?.key,\n business_template_label:template?.label,\n };\n tenantContextCache.set(tenantId,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n",[],[1122,1237],"4b1aae4b-35a7-4fc5-8e10-766f6332a5c7","platform-auth-v13.ts","01a008e7-12ca-757f-ba31-cef1efecbf95",["D",1786855756508],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL=(Deno.env.get(\"PLATFORM_SUPABASE_URL\")||\"\").replace(/\\/$/,\"\");\nconst PUBLISHABLE_KEY=Deno.env.get(\"PLATFORM_SUPABASE_PUBLISHABLE_KEY\")||\"\";\nconst GATEWAY_SECRET=Deno.env.get(\"PLATFORM_AUTH_GATEWAY_SECRET\")||\"\";\nconst EDGE_URL=`${SUPABASE_URL}/functions/v1/tenant-auth-gateway`;\nconst RATE_TABLE=\"platform_login_request_rate\";\nconst RATE_WINDOW_MS=15*60*1000;\nconst MAX_REQUESTS=12;\nlet rateReady:Promise|null=null;\n\nexport type TenantIdentity={\n tenant_id:string;\n staff_id:string;\n auth_user_id:string;\n role:string;\n login_identifier:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:\"legacy_single_tenant\"|\"direct_multi_tenant\"|\"disabled\";\n feature_flags:Record;\n ui_config:{\n brand_mark:string;\n trade_label:string;\n assistant_title:string;\n primary_action:string;\n };\n auth_method:\"supabase_email\";\n};\n\nexport type ChannelContext={\n tenant_id:string;\n organization_name:string;\n vertical_key:string;\n vertical_display_name:string;\n vertical_version:number;\n locale:string;\n timezone:string;\n backend_mode:string;\n feature_flags:Record;\n ui_config:Record;\n assistant_config:Record;\n};\n\nconst channelCache=new Map();\n\nfunction clean(value:unknown,max:number):string{\n return String(value??\"\").trim().slice(0,max);\n}\n\nfunction object(value:unknown):Record{\n return value&&typeof value===\"object\"&&!Array.isArray(value)\n ? value as Record\n : {};\n}\n\nasync function parse(response:Response):Promise>{\n const raw=(await response.text()).slice(0,50_000);\n if(!raw)return {};\n try{return object(JSON.parse(raw));}catch{return {};}\n}\n\nfunction uuid(value:unknown):string{\n const result=clean(value,80).toLowerCase();\n return /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(result)\n ? result\n : \"\";\n}\n\nfunction safeObject(value:unknown,maxEntries=40):Record{\n const source=object(value);\n return Object.fromEntries(\n Object.entries(source)\n .filter(([key])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key))\n .slice(0,maxEntries)\n .map(([key,item])=>[\n key,\n typeof item===\"boolean\"||typeof item===\"number\"||typeof item===\"string\"\n ? item\n : null,\n ]),\n );\n}\n\nfunction booleanFlags(value:unknown):Record{\n return Object.fromEntries(\n Object.entries(object(value))\n .filter(([key,item])=>/^[a-z][a-z0-9_]{1,62}$/i.test(key)&&typeof item===\"boolean\")\n .slice(0,40),\n ) as Record;\n}\n\nfunction sanitizeIdentity(value:unknown):TenantIdentity|null{\n const source=object(value);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const staffId=uuid(source.staff_id);\n const authUserId=uuid(source.auth_user_id);\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n const backend=clean(source.backend_mode,40) as TenantIdentity[\"backend_mode\"];\n if(\n !/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!staffId\n ||!authUserId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n ||![\"legacy_single_tenant\",\"direct_multi_tenant\",\"disabled\"].includes(backend)\n )return null;\n\n const ui=safeObject(source.ui_config,12);\n return {\n tenant_id:tenantId,\n staff_id:staffId,\n auth_user_id:authUserId,\n role:clean(source.role,40)||\"member\",\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Math.min(10000,Number(source.vertical_version||1))),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:backend,\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:{\n brand_mark:clean(ui.brand_mark,3).toUpperCase()||\"S\",\n trade_label:clean(ui.trade_label,80)||clean(source.vertical_display_name,80)||\"Services\",\n assistant_title:clean(ui.assistant_title,80)||\"Assistante IA\",\n primary_action:clean(ui.primary_action,80)||\"Nouveau devis\",\n },\n auth_method:\"supabase_email\",\n };\n}\n\nasync function ensureRateTable():Promise{\n if(!rateReady){\n rateReady=(async()=>{\n await sqlite.execute(`create table if not exists ${RATE_TABLE}(\n client_key text primary key,\n request_count integer not null,\n window_started_at integer not null,\n updated_at integer not null\n )`);\n })().catch(error=>{rateReady=null;throw error;});\n }\n return rateReady;\n}\n\nasync function clientKey(req:Request,identifier:string):Promise{\n const forwarded=req.headers.get(\"cf-connecting-ip\")\n ||req.headers.get(\"x-forwarded-for\")\n ||\"unknown\";\n const ip=forwarded.split(\",\")[0].trim();\n const bytes=new TextEncoder().encode(`${ip}\\u0000${identifier}\\u0000${GATEWAY_SECRET}`);\n const digest=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",bytes));\n return [...digest].map(byte=>byte.toString(16).padStart(2,\"0\")).join(\"\").slice(0,40);\n}\n\nasync function consumeRequestQuota(req:Request,identifier:string):Promise{\n await ensureRateTable();\n const key=await clientKey(req,identifier);\n const now=Date.now();\n const found=await sqlite.execute({\n sql:`select request_count,window_started_at from ${RATE_TABLE} where client_key=? limit 1`,\n args:[key],\n });\n const row=found.rows[0] as Record|undefined;\n const started=Number(row?.window_started_at||now);\n const expired=now-started>=RATE_WINDOW_MS;\n const count=expired?0:Number(row?.request_count||0);\n if(count>=MAX_REQUESTS)return false;\n await sqlite.execute({\n sql:`insert into ${RATE_TABLE}(client_key,request_count,window_started_at,updated_at)\n values(?,?,?,?)\n on conflict(client_key) do update set\n request_count=excluded.request_count,\n window_started_at=excluded.window_started_at,\n updated_at=excluded.updated_at`,\n args:[key,count+1,expired?now:started,now],\n });\n if(Math.random()<0.02){\n await sqlite.execute({\n sql:`delete from ${RATE_TABLE} where updated_atcharacter.charCodeAt(0));\n}\n\nasync function verifyAuthFlow(value:unknown):Promise{\n const token=clean(value,2400);\n const[payload,provided,extra]=token.split(\".\");\n if(\n !payload||!provided||extra\n ||!/^[A-Za-z0-9_-]{20,2200}$/.test(payload)\n ||!/^[A-Za-z0-9_-]{40,100}$/.test(provided)\n )return null;\n try{\n const key=await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(GATEWAY_SECRET),\n {name:\"HMAC\",hash:\"SHA-256\"},\n false,\n [\"verify\"],\n );\n const verified=await crypto.subtle.verify(\n \"HMAC\",\n key,\n decodeFlowPart(provided),\n new TextEncoder().encode(payload),\n );\n if(!verified)return null;\n const source=object(JSON.parse(new TextDecoder().decode(decodeFlowPart(payload))));\n const purpose=clean(source.purpose,40);\n const handoff=source.handoff?uuid(source.handoff):\"\";\n const expires=Number(source.exp||0);\n if(\n source.v!==1\n ||!['login','password_setup'].includes(purpose)\n ||!Number.isFinite(expires)\n ||expires<=Date.now()\n ||expires>Date.now()+16*60*1000\n )return null;\n return {purpose:purpose as AuthFlow[\"purpose\"],handoff};\n }catch{return null;}\n}\n\nexport function platformAuthConfigured():boolean{\n return Boolean(\n SUPABASE_URL\n &&PUBLISHABLE_KEY.startsWith(\"sb_publishable_\")\n &&GATEWAY_SECRET.length>=40\n );\n}\n\nasync function requestGatewayLink(\n req:Request,\n operation:\"request_login\"|\"request_password_setup\",\n loginIdentifier:unknown,\n emailValue:unknown,\n handoffValue:unknown,\n passwordValue?:unknown,\n):Promise>{\n const identifier=clean(loginIdentifier,64).toLowerCase();\n const email=clean(emailValue,254).toLowerCase();\n const handoff=uuid(handoffValue);\n // A password is opaque: it is sent directly to Supabase Auth and is never\n // normalized, persisted, logged or included in an audit payload.\n const password=String(passwordValue??\"\").slice(0,1024);\n const setup=operation===\"request_password_setup\";\n const generic={\n ok:true,\n accepted:true,\n message:setup\n ?\"Si ces informations correspondent à un compte actif, un lien de création de mot de passe va être envoyé.\"\n :\"Si ces informations et ce mot de passe correspondent à un compte actif, un lien sécurisé va être envoyé.\",\n n8n_execution_used:false,\n http_status:202,\n };\n if(!platformAuthConfigured()){\n return {ok:false,error:\"platform_auth_not_configured\",http_status:503};\n }\n if(\n !/^[a-z0-9][a-z0-9_-]{2,63}$/.test(identifier)\n ||!email.includes(\"@\")\n ||!handoff\n ||(!setup&&!password)\n )return generic;\n if(!(await consumeRequestQuota(req,identifier)))return generic;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation,\n auth_flow_version:\"v13\",\n login_identifier:identifier,\n email,\n handoff_id:handoff,\n ...(setup?{}:{password}),\n }),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n if(response.status===401){\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n const payload=await parse(response);\n if(!response.ok||payload.ok===false){\n return {ok:false,error:\"platform_auth_unavailable\",http_status:503};\n }\n return generic;\n}\n\nexport async function requestTenantMagicLink(\n req:Request,\n loginIdentifier:unknown,\n emailValue:unknown,\n passwordValue:unknown,\n handoffValue:unknown,\n):Promise>{\n return requestGatewayLink(\n req,\"request_login\",loginIdentifier,emailValue,handoffValue,passwordValue,\n );\n}\n\nexport async function requestTenantPasswordSetup(\n req:Request,\n loginIdentifier:unknown,\n emailValue:unknown,\n handoffValue:unknown,\n):Promise>{\n return requestGatewayLink(\n req,\"request_password_setup\",loginIdentifier,emailValue,handoffValue,\n );\n}\n\nexport async function exchangeTenantIdentity(\n intentValue:unknown,\n accessTokenValue:unknown,\n flowValue:unknown,\n):Promise>{\n const intent=clean(intentValue,128).toLowerCase();\n const accessToken=clean(accessTokenValue,8192);\n const authFlow=await verifyAuthFlow(flowValue);\n if(!platformAuthConfigured()||!intent||accessToken.length<20||!authFlow){\n return {ok:false,error:\"identity_exchange_rejected\",http_status:403};\n }\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${accessToken}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({operation:\"exchange_identity\",intent_token:intent}),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"identity_exchange_unavailable\",http_status:502};\n }\n const payload=await parse(response);\n const identity=sanitizeIdentity(payload.identity);\n if(!response.ok||payload.ok!==true||!identity){\n return {\n ok:false,\n error:\"identity_exchange_rejected\",\n http_status:response.status===502?502:403,\n };\n }\n return {\n ok:true,\n identity,\n auth_flow:authFlow,\n http_status:200,\n n8n_execution_used:false,\n };\n}\n\nexport async function setTenantPassword(\n identity:Pick,\n passwordValue:unknown,\n):Promise>{\n const password=String(passwordValue??\"\");\n const classes=[/[a-z]/.test(password),/[A-Z]/.test(password),/[0-9]/.test(password),/[^A-Za-z0-9]/.test(password)];\n if(password.length<12||password.length>128||classes.filter(Boolean).length<3){\n return {ok:false,error:\"password_policy_rejected\",http_status:400};\n }\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"set_password\",\n tenant_id:identity.tenant_id,\n staff_id:identity.staff_id,\n auth_user_id:identity.auth_user_id,\n password,\n }),\n signal:AbortSignal.timeout(10_000),\n });\n }catch{\n return {ok:false,error:\"password_provider_unavailable\",http_status:502};\n }\n const payload=await parse(response);\n if(!response.ok||payload.ok!==true){\n return {\n ok:false,\n error:clean(payload.error,120)||\"password_change_rejected\",\n http_status:response.status,\n };\n }\n return {ok:true,password_updated:true,http_status:200,n8n_execution_used:false};\n}\n\nexport async function resolveChannelContext(\n addressValue:unknown,\n):Promise{\n const address=clean(addressValue,80);\n if(!platformAuthConfigured()||!address)return null;\n const cached=channelCache.get(address);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_channel\",\n provider:\"twilio\",\n channel:\"voice\",\n address,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n const payload=await parse(response);\n const source=object(payload.context);\n const tenantId=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n const context:ChannelContext={\n tenant_id:tenantId,\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:safeObject(source.ui_config,20),\n assistant_config:object(source.assistant_config),\n };\n channelCache.set(address,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n\n\nexport type TenantBusinessContext=ChannelContext&{\n login_identifier:string;\n tenant_settings:Record;\n};\n\nconst tenantContextCache=new Map();\n\nexport async function resolveTenantContext(\n tenantIdValue:unknown,\n):Promise{\n const tenantId=clean(tenantIdValue,80).toLowerCase();\n if(\n !platformAuthConfigured()\n ||!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(tenantId)\n )return null;\n const cached=tenantContextCache.get(tenantId);\n if(cached&&cached.expires>Date.now())return cached.value;\n\n let response:Response;\n try{\n response=await fetch(EDGE_URL,{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n accept:\"application/json\",\n apikey:PUBLISHABLE_KEY,\n authorization:`Bearer ${PUBLISHABLE_KEY}`,\n \"x-platform-auth-secret\":GATEWAY_SECRET,\n },\n body:JSON.stringify({\n operation:\"resolve_tenant\",\n tenant_id:tenantId,\n }),\n signal:AbortSignal.timeout(7_000),\n });\n }catch{return null;}\n\n const payload=await parse(response);\n const source=object(payload.context);\n const resolvedTenant=clean(source.tenant_id,80).toLowerCase();\n const verticalKey=clean(source.vertical_key,64).toLowerCase();\n if(\n !response.ok\n ||payload.ok!==true\n ||resolvedTenant!==tenantId\n ||!/^[a-z][a-z0-9_]{2,62}$/.test(verticalKey)\n )return null;\n\n const context:TenantBusinessContext={\n tenant_id:resolvedTenant,\n login_identifier:clean(source.login_identifier,64).toLowerCase(),\n organization_name:clean(source.organization_name,120)||\"Entreprise\",\n vertical_key:verticalKey,\n vertical_display_name:clean(source.vertical_display_name,80)||\"Services\",\n vertical_version:Math.max(1,Number(source.vertical_version||1)),\n locale:clean(source.locale,20)||\"fr-FR\",\n timezone:clean(source.timezone,80)||\"Europe/Paris\",\n backend_mode:clean(source.backend_mode,40)||\"disabled\",\n feature_flags:booleanFlags(source.feature_flags),\n ui_config:object(source.ui_config),\n assistant_config:object(source.assistant_config),\n tenant_settings:object(source.tenant_settings),\n };\n tenantContextCache.set(tenantId,{expires:Date.now()+5*60*1000,value:context});\n return context;\n}\n",[],[1122,1245],"9fa42d7f-5b70-47a2-999f-99f365887f82","platform-api-v31.ts","01a008e7-12ca-757f-ba31-ca54e87713fe",["D",1786855756508],"import { COMMAND_SURFACE_PROJECTION } from \"./owner-action-contract-v85.ts\";\n\nexport const PLATFORM_API_RELEASE = \"89.8-demo-tenant-readiness\";\nexport const PLATFORM_COMMAND_RELEASE = \"88.0-command-surface-sql\";\n\nconst BASE = (Deno.env.get(\"PLATFORM_SUPABASE_URL\") || \"\").replace(/\\/$/, \"\");\nconst KEY = Deno.env.get(\"PLATFORM_SUPABASE_PUBLISHABLE_KEY\") || \"\";\nconst SECRET = Deno.env.get(\"PLATFORM_AUTH_GATEWAY_SECRET\") || \"\";\nconst EDGE_ENDPOINT = `${BASE}/functions/v1/platform-cockpit-gateway`;\n\ntype Json = Record;\n\nfunction object(value: unknown): Json {\n return value && typeof value === \"object\" && !Array.isArray(value) ? value as Json : {};\n}\n\nfunction rows(value: unknown): Json[] {\n return Array.isArray(value) ? value.filter((item) => item && typeof item === \"object\" && !Array.isArray(item)).map(object) : [];\n}\n\nfunction text(value: unknown, max = 200): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nfunction number(value: unknown, fallback = 0): number {\n const result = Number(value);\n return Number.isFinite(result) ? result : fallback;\n}\n\nfunction tenant(ctx: Json): string {\n const value = text(ctx.tenant_id, 80).toLowerCase();\n if (!/^[a-z0-9][a-z0-9_-]{2,79}$/.test(value)) throw new Error(\"tenant_context_required\");\n return value;\n}\n\nfunction statusOf(result: Json, fallback = 500): number {\n return Math.max(200, Math.min(599, number(result.http_status, result.ok === false ? fallback : 200)));\n}\n\nasync function parse(response: Response): Promise {\n const raw = (await response.text()).slice(0, 500_000);\n try {\n return object(raw ? JSON.parse(raw) : {});\n } catch {\n throw new Error(\"invalid_platform_response\");\n }\n}\n\nexport function platformConfigured() {\n return {\n platformApi: Boolean(BASE && KEY && SECRET.length >= 40),\n sourceOfTruth: \"supabase\",\n };\n}\n\nasync function edgeRequest(operation: string, payload: Json): Promise {\n if (!platformConfigured().platformApi) throw new Error(\"platform_cockpit_not_configured\");\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const response = await fetch(EDGE_ENDPOINT, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n accept: \"application/json\",\n apikey: KEY,\n \"x-platform-auth-secret\": SECRET,\n },\n body: JSON.stringify({ operation, payload }),\n signal: controller.signal,\n });\n const result = await parse(response);\n if (!response.ok || result.ok === false) {\n const error = text(result.error || result.error_code, 120) || `platform_http_${response.status}`;\n const failure = new Error(error) as Error & { status?: number; result?: Json };\n failure.status = statusOf(result, response.status);\n failure.result = result;\n throw failure;\n }\n return result;\n } finally {\n clearTimeout(timer);\n }\n}\n\n/**\n * Lecture ciblée via platform_business_query_v32.\n * Complète le bootstrap : celui-ci rapatrie tout le tenant, ce qui est correct\n * pour amorcer le cockpit mais coûteux pour lire une seule ligne ou une liste.\n * Toutes les opérations sont filtrées par tenant_id côté SQL.\n */\nasync function businessQuery(\n ctx: Json,\n operation: string,\n payload: Json = {},\n idempotencyKey?: string,\n): Promise {\n return edgeRequest(\"business.query\", {\n tenant_id: tenant(ctx),\n query_operation: operation,\n query_payload: payload,\n idempotency_key: idempotencyKey ?? null,\n });\n}\n\nfunction missionRow(value: unknown): Json {\n const row = object(value);\n return {\n ...row,\n action: row.action ?? row.action_key ?? \"\",\n risk: row.risk ?? row.risk_level ?? \"low\",\n };\n}\n\nfunction capabilityRow(value: unknown): Json {\n const row = object(value);\n return {\n ...row,\n capability_key: row.capability_key ?? row.code ?? \"\",\n mode: row.mode ?? row.operation_mode ?? \"read\",\n last_health: row.last_health ?? row.health_status ?? \"unknown\",\n };\n}\n\nexport async function platformBootstrap(ctx: Json): Promise {\n return edgeRequest(\"bootstrap\", { tenant_id: tenant(ctx) });\n}\n\nexport async function listPlatformCapabilities(ctx: Json): Promise {\n const result = await edgeRequest(\"autonomy.capabilities\", { tenant_id: tenant(ctx) });\n return { ...result, capabilities: rows(result.capabilities).map(capabilityRow) };\n}\n\nexport async function listPlatformMissions(ctx: Json, options: Json = {}): Promise {\n const result = await edgeRequest(\"autonomy.missions\", {\n tenant_id: tenant(ctx),\n status: text(options.status, 40),\n limit: Math.max(1, Math.min(100, number(options.limit, 30))),\n offset: Math.max(0, Math.min(100_000, number(options.offset, 0))),\n });\n return { ...result, missions: rows(result.missions).map(missionRow) };\n}\n\nexport async function listPlatformCommitments(ctx: Json, options: Json = {}): Promise {\n return edgeRequest(\"autonomy.commitments\", {\n tenant_id: tenant(ctx),\n status: text(options.status, 40) || \"all\",\n limit: Math.max(1, Math.min(100, number(options.limit, 50))),\n });\n}\n\nexport async function getPlatformMission(ctx: Json, missionId: unknown): Promise {\n const id = text(missionId, 80).toLowerCase();\n if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(id)) {\n throw new Error(\"invalid_mission_id\");\n }\n const result = await edgeRequest(\"autonomy.mission\", { tenant_id: tenant(ctx), mission_id: id });\n return { ...result, mission: missionRow(result.mission) };\n}\n\nexport async function platformBusinessBootstrap(ctx: Json): Promise {\n return edgeRequest(\"business.bootstrap\", { tenant_id: tenant(ctx) });\n}\n\nexport async function platformPilotStatus(ctx: Json): Promise {\n return edgeRequest(\"pilot.status\", { tenant_id: tenant(ctx) });\n}\n\nexport async function platformSupervision(ctx: Json): Promise {\n return edgeRequest(\"pilot.supervision\", { tenant_id: tenant(ctx) });\n}\n\nexport async function platformPilotConfigure(\n ctx: Json,\n configValue: unknown,\n expectedVersion: unknown,\n): Promise {\n const role = text(ctx.role, 40).toLowerCase();\n if (![\"owner\", \"admin\"].includes(role)) throw new Error(\"owner_role_required\");\n const expected = number(expectedVersion, -1);\n if (!Number.isInteger(expected) || expected < 0) throw new Error(\"configuration_version_required\");\n return edgeRequest(\"pilot.configure\", {\n tenant_id: tenant(ctx),\n config: object(configValue),\n expected_version: expected,\n actor: {\n staff_id: text(ctx.staff_id || ctx.actor_id, 80),\n role,\n correlation_id: text(ctx.correlation_id, 200),\n },\n });\n}\n\nexport async function platformPrepareTestSms(ctx: Json, recipient: unknown): Promise {\n const role = text(ctx.role, 40).toLowerCase();\n if (role !== \"owner\") throw new Error(\"owner_resolution_required\");\n return edgeRequest(\"pilot.sms.prepare\", {\n tenant_id: tenant(ctx),\n recipient: text(recipient, 40),\n actor: {\n staff_id: text(ctx.staff_id || ctx.actor_id, 80),\n role,\n correlation_id: text(ctx.correlation_id, 200),\n },\n });\n}\n\nexport async function platformSendTestSms(ctx: Json, requestIdValue: unknown): Promise {\n const role = text(ctx.role, 40).toLowerCase();\n if (role !== \"owner\") throw new Error(\"owner_resolution_required\");\n const accountSid = Deno.env.get(\"PISCINE_TWILIO_ACCOUNT_SID\") || \"\";\n const authToken = Deno.env.get(\"PISCINE_TWILIO_AUTH_TOKEN\") || \"\";\n if (!accountSid.startsWith(\"AC\") || authToken.length < 20) throw new Error(\"twilio_not_configured\");\n const requestId = text(requestIdValue, 200);\n if (requestId.length < 12) throw new Error(\"test_sms_request_required\");\n const authorization = await edgeRequest(\"pilot.sms.authorize\", {\n tenant_id: tenant(ctx),\n request_id: requestId,\n actor: {\n staff_id: text(ctx.staff_id || ctx.actor_id, 80),\n role,\n correlation_id: text(ctx.correlation_id, 200),\n },\n });\n const dispatch = object(authorization.dispatch);\n const toNumber = text(dispatch.to_number, 40);\n const fromNumber = text(dispatch.from_number, 40);\n const body = text(dispatch.body, 500);\n const outboxId = text(authorization.outbox_id, 80);\n if (!/^\\+[1-9][0-9]{7,14}$/.test(toNumber) || !/^\\+[1-9][0-9]{7,14}$/.test(fromNumber) || body.length < 10 || outboxId.length !== 36) {\n throw new Error(\"test_sms_dispatch_contract_invalid\");\n }\n let sid = \"\";\n let providerStatus = \"failed\";\n let errorCode = \"\";\n let providerHttpStatus = 0;\n try {\n const response = await fetch(`https://api.twilio.com/2010-04-01/Accounts/${encodeURIComponent(accountSid)}/Messages.json`, {\n method: \"POST\",\n headers: {\n authorization: \"Basic \" + btoa(accountSid + \":\" + authToken),\n \"content-type\": \"application/x-www-form-urlencoded\",\n accept: \"application/json\",\n },\n body: new URLSearchParams({ To: toNumber, From: fromNumber, Body: body }),\n signal: AbortSignal.timeout(15_000),\n });\n providerHttpStatus = response.status;\n const payload = object(JSON.parse((await response.text()).slice(0, 100_000) || \"{}\"));\n sid = text(payload.sid, 40);\n providerStatus = text(payload.status, 40).toLowerCase() || (response.ok ? \"queued\" : \"failed\");\n if (!response.ok || !/^(SM|MM)[0-9A-Za-z]{32}$/.test(sid)) {\n sid = \"\";\n errorCode = text(payload.code || payload.message, 120) || `twilio_http_${response.status}`;\n }\n } catch (error) {\n errorCode = error instanceof Error ? text(error.message, 120) : \"twilio_test_sms_unreachable\";\n }\n let finalized: Json;\n try {\n finalized = await edgeRequest(\"pilot.sms.finalize\", {\n tenant_id: tenant(ctx),\n outbox_id: outboxId,\n message_sid: sid,\n provider_status: providerStatus,\n error_code: errorCode || null,\n });\n } catch (error) {\n return {\n ok: false,\n sms_sent: Boolean(sid),\n delivery_uncertain: Boolean(sid),\n error: \"test_sms_finalization_unavailable\",\n provider_http_status: providerHttpStatus,\n automatic_retry: false,\n global_outbound_unchanged: true,\n safe_to_retry: false,\n };\n }\n return {\n ok: finalized.sms_sent === true,\n sms_sent: finalized.sms_sent === true,\n recipient_suffix: text(authorization.recipient_suffix, 4),\n provider_status: text(finalized.provider_status || providerStatus, 40),\n provider_message_suffix: sid ? sid.slice(-8) : null,\n provider_http_status: providerHttpStatus,\n error_code: text(finalized.error_code || errorCode, 120) || null,\n automatic_retry: false,\n global_outbound_unchanged: true,\n recipient_scrubbed: finalized.recipient_scrubbed === true,\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n };\n}\n\nexport async function platformProductAxes(ctx: Json): Promise {\n return edgeRequest(\"product.axes\", { tenant_id: tenant(ctx) });\n}\n\nfunction includesSearch(row: Json, search: string): boolean {\n if (!search) return true;\n return JSON.stringify(row).toLowerCase().includes(search);\n}\n\nfunction hasStatus(row: Json, status: string): boolean {\n if (!status || status === \"all\") return true;\n if (status === \"urgent\") return [\"haute\", \"urgente\"].includes(text(row.urgence, 40).toLowerCase());\n return [row.statut, row.status, row.ocr_statut].some((value) => text(value, 40).toLowerCase() === status);\n}\n\nfunction page(input: Json[], options: Json): Json[] {\n const search = text(options.search, 120).toLowerCase();\n const status = text(options.status, 40).toLowerCase();\n const offset = Math.max(0, Math.min(100_000, number(options.offset, 0)));\n const limit = Math.max(1, Math.min(100, number(options.limit, 50)));\n return input.filter((row) => includesSearch(row, search) && hasStatus(row, status)).slice(offset, offset + limit);\n}\n\nexport async function platformBusinessData(ctx: Json, resource: string, options: Json = {}): Promise {\n const data = await platformBusinessBootstrap(ctx);\n if (resource === \"snapshot\") return data;\n if (resource === \"requests\") {\n const result = page(rows(data.demandes), options);\n return { ok: true, demandes: result, requests: result, source_of_truth: \"supabase\" };\n }\n if (resource === \"clients\") {\n const result = page(rows(data.clients), options);\n return { ok: true, clients: result, source_of_truth: \"supabase\" };\n }\n if (resource === \"appointments\") {\n let result = page(rows(data.rendez_vous), options);\n const from = text(options.from, 40);\n const to = text(options.to, 40);\n if (from) result = result.filter((row) => text(row.date_heure, 50) >= from);\n if (to) result = result.filter((row) => text(row.date_heure, 50) <= to);\n return { ok: true, rendez_vous: result, appointments: result, source_of_truth: \"supabase\" };\n }\n if (resource === \"documents\") {\n const kind = text(options.kind, 20) || \"quotes\";\n const source = kind === \"invoices\" ? rows(data.factures) : kind === \"purchases\" ? rows(data.achats) : rows(data.devis);\n const result = page(source, options);\n return {\n ok: true,\n kind,\n documents: result,\n ...(kind === \"invoices\" ? { factures: result } : kind === \"purchases\" ? { achats: result } : { devis: result }),\n source_of_truth: \"supabase\",\n };\n }\n if (resource === \"universal-summary\") {\n const result = await businessQuery(ctx, \"universal.summary\");\n return {\n ...result,\n source_of_truth: \"supabase\",\n data_scope: \"production\",\n };\n }\n if (resource === \"cases\" || resource === \"service-cases\") {\n const status = text(options.status, 40).toLowerCase();\n const result = await businessQuery(ctx, \"service_case.list\", {\n limit: 100,\n status: status && status !== \"all\" ? status : null,\n });\n const allCases = rows(result.items)\n .filter((row) => includesSearch(row, text(options.search, 120).toLowerCase()));\n const offset = Math.max(0, Math.min(100_000, number(options.offset, 0)));\n const limit = Math.max(1, Math.min(100, number(options.limit, 50)));\n const cases = allCases.slice(offset, offset + limit);\n return {\n ok: true,\n cases,\n service_cases: cases,\n count: cases.length,\n total: allCases.length,\n truth_model_release: number(result.truth_model_release, 89),\n data_scope: \"production\",\n source_of_truth: \"supabase\",\n };\n }\n if (resource === \"sites\" || resource === \"assets\") {\n const operation = resource === \"sites\" ? \"site.list\" : \"asset.list\";\n const result = await businessQuery(ctx, operation, { limit: 100 });\n const allItems = rows(result.items)\n .filter((row) => includesSearch(row, text(options.search, 120).toLowerCase()));\n const items = page(allItems, options);\n return {\n ok: true,\n items,\n [resource]: items,\n count: items.length,\n total: allItems.length,\n truth_model_release: number(result.truth_model_release, 89),\n data_scope: \"production\",\n source_of_truth: \"supabase\",\n };\n }\n if (resource === \"tasks\") {\n // Les tâches n'étaient exposées par aucune ressource : elles existaient en\n // base sans jamais être consultables depuis le cockpit.\n const status = text(options.status, 40).toLowerCase();\n const result = await businessQuery(ctx, \"task.list\", {\n statut: status && status !== \"all\" ? status : null,\n });\n const ordre: Record = { urgente: 0, haute: 1, normale: 2, basse: 3 };\n const taches = rows(result.tasks)\n .filter((row) => includesSearch(row, text(options.search, 120).toLowerCase()))\n .sort((a, b) => {\n const pa = ordre[text(a.priorite, 20).toLowerCase()] ?? 9;\n const pb = ordre[text(b.priorite, 20).toLowerCase()] ?? 9;\n if (pa !== pb) return pa - pb;\n return text(b.created_at, 40).localeCompare(text(a.created_at, 40));\n });\n const fenetre = taches.slice(\n Math.max(0, number(options.offset, 0)),\n Math.max(0, number(options.offset, 0)) + Math.max(1, Math.min(100, number(options.limit, 50))),\n );\n return {\n ok: true,\n taches: fenetre,\n tasks: fenetre,\n total: taches.length,\n a_faire: taches.filter((row) => text(row.statut, 20) === \"a_faire\").length,\n en_retard: taches.filter((row) => {\n const echeance = text(row.due_at, 40);\n return echeance !== \"\" && echeance < new Date().toISOString() && text(row.statut, 20) === \"a_faire\";\n }).length,\n source_of_truth: \"supabase\",\n };\n }\n throw new Error(\"unsupported_data_resource\");\n}\n\nexport async function platformBusinessDocument(ctx: Json, kind: \"quote\" | \"invoice\", idValue: unknown): Promise {\n const id = text(idValue, 80).toLowerCase();\n if (!/^[0-9a-f-]{36}$/.test(id)) throw new Error(\"invalid_document_id\");\n const result = kind === \"invoice\"\n ? await businessQuery(ctx, \"invoice.get\", { invoice_id: id })\n : await businessQuery(ctx, \"quote.get\", { quote_id: id });\n return {\n ok: true,\n ...(kind === \"invoice\"\n ? { facture: object(result.invoice), devis: object(result.devis) }\n : { devis: object(result.quote) }),\n client: object(result.client),\n settings: object(result.settings),\n lignes: rows(result.lignes),\n lignes_count: number(result.lignes_count, rows(result.lignes).length),\n truth_model_release: number(result.truth_model_release, 88),\n source_of_truth: \"supabase\",\n };\n}\n\nexport async function platformBusinessOperations(ctx: Json): Promise {\n const data = await platformBusinessBootstrap(ctx);\n const providers = object(data.integrations);\n const axesSnapshot = object(data.operational_axes);\n const summary = object(axesSnapshot.summary);\n const axes = rows(axesSnapshot.axes);\n const total = number(summary.total, axes.length);\n const operational = number(summary.operational, 0);\n const partial = number(summary.partial, 0);\n const blocked = number(summary.blocked, 0);\n const readyUnproven = number(summary.ready_unproven, 0);\n const blockers = axes\n .filter((axis) => axis.status === \"blocked\")\n .flatMap((axis) => Array.isArray(axis.blockers) ? axis.blockers : [])\n .map((value) => text(value, 160));\n return {\n ok: data.ok !== false && axesSnapshot.ok !== false,\n mode: blocked > 0 ? \"limited\" : \"available\",\n label: total > 0 ? `${operational}/${total} axes opérationnels` : \"État indisponible\",\n explanation: blocked > 0\n ? `${blocked} axe(s) bloqué(s), ${partial} partiel(s), ${readyUnproven} prêt(s) à éprouver.`\n : \"Aucun axe structurant n’est bloqué.\",\n pending_actions: blocked + partial + readyUnproven,\n blockers,\n source_of_truth: \"supabase\",\n data_scope: data.data_scope,\n axes: axesSnapshot,\n providers,\n };\n}\n\nexport async function platformBusinessHealth(ctx: Json): Promise {\n const data = await platformBusinessBootstrap(ctx);\n return {\n ok: data.ok !== false && data.source_of_truth === \"supabase\",\n service: \"secretariat-ia-platform\",\n source_of_truth: data.source_of_truth,\n checked_at: new Date().toISOString(),\n runtime: data.runtime,\n ai: data.ai,\n security: data.security,\n integrations: data.integrations,\n operational_axes: data.operational_axes,\n data_scope: data.data_scope,\n demo_data: data.demo_data,\n };\n}\n\n/**\n * Correspondance des trois nommages de la plateforme.\n *\n * Cette table traduit le nom d'action historique de l'interface\n * (client.create, devis.create, quote.send…) vers le code de capacité que la\n * passerelle Postgres comprend (request.create, quote.draft…). Elle était une\n * fermeture privée : ni la base, ni l'interface, ni un audit ne pouvaient la\n * lire. C'est précisément cette opacité qui rend le système illisible — trois\n * vocabulaires pour les mêmes actions, sans dictionnaire consultable — et qui\n * m'a fait conclure deux fois de travers lors de l'audit du 30/07.\n *\n * L'exporter ne change aucun comportement : c'est la même référence, lisible.\n */\nexport const COMMAND_MAP: Readonly> = Object.freeze(\n Object.fromEntries(\n COMMAND_SURFACE_PROJECTION.map(([command, target]) => [command, target]),\n ),\n);\n\n/**\n * Vocabulaire réellement traduisible par la passerelle.\n *\n * Exposé pour qu'un appelant puisse vérifier AVANT d'exposer un bouton qu'une\n * action se résoudra en commande. Sans ce contrôle, une action absente de la\n * carte franchit le portail d'autorisation puis échoue en 409\n * command_not_supported — un bouton visible, autorisé, et mort.\n */\nexport const COMMANDES_CONNUES: readonly string[] = Object.freeze(Object.keys(COMMAND_MAP));\n\n/** Une action se résout-elle en commande ? */\nexport function commandeConnue(action: unknown): boolean {\n return Object.prototype.hasOwnProperty.call(COMMAND_MAP, text(action, 100).toLowerCase());\n}\n\nexport function commandPayload(legacy: string, command: string, data: Json, ctx: Json): Json {\n if (legacy === \"client.create\" || command === \"request.create\") {\n const vertical = text(ctx.vertical_key, 80).toLowerCase();\n const site = {\n ...object(data.business_site),\n ...object(data.site),\n };\n const asset = {\n ...object(data.business_asset),\n ...object(data.asset),\n };\n const assetType = data.asset_type ?? data.asset_kind ?? data.type_bassin ?? data.pool_type;\n if (assetType != null && !asset.kind) asset.kind = assetType;\n const universal: Json = {\n phone: data.telephone ?? data.customer_phone ?? data.phone ?? \"\",\n name: data.nom ?? data.customer_name ?? data.name ?? \"\",\n email: data.email ?? data.customer_email ?? \"\",\n intent: data.intent ?? \"other\",\n urgency: data.urgence ?? data.urgency ?? \"normal\",\n description: data.description ?? data.request_summary ?? data.objet ?? data.problem ?? \"\",\n call_id: data.call_id ?? \"\",\n channel: data.channel ?? \"cockpit\",\n test_mode: data.test_mode === true || data.synthetic === true,\n };\n if (Object.keys(site).length) universal.site = site;\n if (Object.keys(asset).length) universal.asset = asset;\n if (vertical === \"pool_service\") {\n const pool = {\n ...object(data.business_fields),\n ...object(data.pool),\n };\n if (assetType != null && !pool.type_bassin) pool.type_bassin = assetType;\n const poolId = data.pool_id ?? pool.pool_id;\n if (poolId != null) pool.pool_id = poolId;\n universal.pool = pool;\n }\n return universal;\n }\n if (legacy === \"client.context\") return { phone: data.telephone ?? data.customer_phone ?? data.phone ?? \"\" };\n if (legacy === \"availability.check\") {\n return {\n start_date: data.start_date ?? data.date ?? \"\",\n days: number(data.days, 14),\n duration_min: number(data.duration_min, 60),\n step_min: number(data.step_min, 30),\n address: data.adresse ?? data.address ?? \"\",\n };\n }\n if (legacy === \"rdv.create\") {\n return {\n client_id: data.client_id ?? \"\",\n request_id: data.request_id ?? data.demande_id ?? \"\",\n start: data.start ?? data.date_heure ?? data.appointment_datetime ?? \"\",\n duration_min: number(data.duration_min, 60),\n type: data.type ?? data.type_rdv ?? \"intervention\",\n address: data.adresse ?? data.address ?? \"\",\n notes: data.notes ?? \"\",\n };\n }\n if (legacy === \"devis.create\" || legacy === \"quote.create\") {\n return {\n client_id: data.client_id ?? \"\",\n request_id: data.request_id ?? data.demande_id ?? \"\",\n lines: Array.isArray(data.lines) ? data.lines : Array.isArray(data.lignes) ? data.lignes : [],\n object: data.object ?? data.objet ?? \"\",\n notes: data.notes ?? \"\",\n };\n }\n if (legacy === \"quote.send\") {\n return {\n quote_id: data.quote_id ?? data.id ?? data.devis_id ?? \"\",\n approved_by: ctx.staff_id ?? ctx.actor_id ?? \"owner\",\n send_after_approval: true,\n };\n }\n if (legacy === \"task.create\") {\n return {\n title: data.title ?? data.titre ?? \"Suivi requis\",\n description: data.description ?? \"\",\n priority: data.priority ?? data.priorite ?? \"normale\",\n request_id: data.request_id ?? data.demande_id ?? \"\",\n client_id: data.client_id ?? \"\",\n due_at: data.due_at ?? \"\",\n };\n }\n if (command === \"commitment.create\") {\n return {\n service_case_id: data.service_case_id ?? data.case_id ?? \"\",\n promise: data.promise ?? data.description ?? \"\",\n due_at: data.due_at ?? \"\",\n proof_required: data.proof_required ?? \"\",\n actor_id: data.actor_id ?? ctx.staff_id ?? ctx.actor_id ?? \"assistant\",\n };\n }\n if (command === \"quote.approve\" && !data.approved_by) {\n return { ...data, approved_by: ctx.staff_id ?? ctx.actor_id ?? \"owner\" };\n }\n return data;\n}\n\nexport function normalizePlatformCommandResult(result: Json): Json {\n const accepted = result.success === true || result.ok === true;\n const actionCompleted = typeof result.action_completed === \"boolean\"\n ? result.action_completed\n : accepted;\n const needsInput = result.requires_input === true\n || result.status === \"requires_input\";\n return {\n ...result,\n ok: accepted,\n action_completed: actionCompleted,\n execution_state: text(\n result.execution_state,\n 60,\n ) || (actionCompleted ? \"completed\" : needsInput ? \"requires_input\" : accepted ? \"pending\" : \"failed\"),\n safe_to_announce: accepted,\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n };\n}\n\nexport async function platformExecuteCommand(ctx: Json, legacyAction: unknown, dataValue: unknown): Promise {\n const legacy = text(legacyAction, 100).toLowerCase();\n if (!/^[a-z][a-z0-9_.-]{1,99}$/.test(legacy)) {\n return {\n ok: false,\n success: false,\n action_completed: false,\n execution_state: \"denied\",\n safe_to_announce: false,\n error: \"invalid_command\",\n http_status: 400,\n };\n }\n /* La projection locale ne décide plus de l'autorisation : SQL résout\n legacy via command_surface. Elle sert uniquement à adapter le payload. */\n const command = COMMAND_MAP[legacy] || legacy;\n const data = object(dataValue);\n const payload = commandPayload(legacy, command, data, ctx);\n const key = text(data.idempotency_key, 200) || `cockpit-${tenant(ctx)}-${command}-${crypto.randomUUID()}`;\n try {\n const result = await edgeRequest(\"command.execute\", {\n tenant_id: tenant(ctx),\n command: legacy,\n idempotency_key: key,\n command_payload: payload,\n });\n return normalizePlatformCommandResult(result);\n } catch (error) {\n const failure = error as Error & { status?: number; result?: Json };\n return {\n ...(failure.result || {}),\n ok: false,\n success: false,\n action_completed: false,\n execution_state: \"failed\",\n safe_to_announce: false,\n error: failure.message || \"platform_command_failed\",\n http_status: failure.status || 500,\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n };\n }\n}\n\n\n// Extension à ajouter à lib/platform-api-v31.ts sur Val Town.\nexport const PLATFORM_KERNEL_RELEASE = \"92.0.0-native-command-registry\";\nexport const PLATFORM_KERNEL_V91_RELEASE = \"91.0.0-universal-kernel\";\n\nconst KERNEL_COMMANDS_V91 = new Set([\n \"request.create\",\n \"appointment.book\",\n \"quote.draft\",\n \"request.status.update\",\n \"commitment.create\",\n]);\n\nfunction kernelActorV91(ctx: Json): Json {\n const role = text(ctx.role, 40).toLowerCase();\n if (![\"owner\", \"admin\"].includes(role)) throw new Error(\"owner_role_required\");\n const staffId = text(ctx.staff_id || ctx.actor_id, 80).toLowerCase();\n const authUserId = text(ctx.auth_user_id, 80).toLowerCase();\n if (!/^[0-9a-f-]{36}$/.test(staffId) || !/^[0-9a-f-]{36}$/.test(authUserId)) {\n throw new Error(\"authenticated_actor_required\");\n }\n return {\n staff_id: staffId,\n auth_user_id: authUserId,\n role,\n correlation_id: text(ctx.correlation_id, 200) || `cockpit-v91-${crypto.randomUUID()}`,\n origin: \"authenticated_cockpit\",\n };\n}\n\nexport async function platformKernelSnapshotV91(\n ctx: Json,\n serviceCaseIdValue: unknown = null,\n): Promise {\n const serviceCaseId = text(serviceCaseIdValue, 80).toLowerCase();\n if (serviceCaseId && !/^[0-9a-f-]{36}$/.test(serviceCaseId)) {\n throw new Error(\"invalid_service_case_id\");\n }\n return edgeRequest(\"bootstrap\", {\n kernel_version: \"91.0\",\n tenant_id: tenant(ctx),\n service_case_id: serviceCaseId || null,\n actor: kernelActorV91(ctx),\n });\n}\n\nexport async function platformKernelExecuteV91(\n ctx: Json,\n commandCodeValue: unknown,\n idempotencyKeyValue: unknown,\n payloadValue: unknown,\n): Promise {\n const commandCode = text(commandCodeValue, 100).toLowerCase();\n if (!KERNEL_COMMANDS_V91.has(commandCode)) throw new Error(\"kernel_command_not_allowed\");\n const idempotencyKey = text(idempotencyKeyValue, 200)\n || `cockpit-v91-${tenant(ctx)}-${commandCode}-${crypto.randomUUID()}`;\n if (!/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{7,199}$/.test(idempotencyKey)) {\n throw new Error(\"invalid_idempotency_key\");\n }\n const result = await edgeRequest(\"command.execute\", {\n kernel_version: \"91.0\",\n tenant_id: tenant(ctx),\n command_code: commandCode,\n idempotency_key: idempotencyKey,\n payload: object(payloadValue),\n actor: kernelActorV91(ctx),\n execution_mode: \"active_internal\",\n });\n return {\n ...result,\n kernel_version: \"91.0\",\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n external_effects_performed: false,\n };\n}\n\nexport async function platformKernelTransitionV91(\n ctx: Json,\n commandCodeValue: unknown,\n toStatusValue: unknown,\n reasonValue: unknown,\n): Promise {\n const commandCode = text(commandCodeValue, 100).toLowerCase();\n if (!KERNEL_COMMANDS_V91.has(commandCode)) throw new Error(\"kernel_command_not_allowed\");\n const toStatus = text(toStatusValue, 40).toLowerCase();\n if (![\"paused\", \"rolled_back\"].includes(toStatus)) {\n throw new Error(\"owner_admin_action_limited_to_pause_or_rollback\");\n }\n return edgeRequest(\"command.execute\", {\n kernel_version: \"91.0\",\n admin_action: \"route.transition\",\n tenant_id: tenant(ctx),\n command_code: commandCode,\n to_status: toStatus,\n reason: text(reasonValue, 300) || \"Owner controlled stop from cockpit V91\",\n actor: kernelActorV91(ctx),\n });\n}\n\n\n// V92 — client du registre natif. La base reste l’unique autorité pour les commandes.\nexport const PLATFORM_KERNEL_V92_RELEASE = \"92.0.0-native-command-registry\";\n\nfunction kernelActorV92(ctx: Json): Json {\n const role = text(ctx.role, 40).toLowerCase();\n if (![\"owner\", \"admin\"].includes(role)) throw new Error(\"owner_role_required\");\n const staffId = text(ctx.staff_id || ctx.actor_id, 80).toLowerCase();\n const authUserId = text(ctx.auth_user_id, 80).toLowerCase();\n if (!/^[0-9a-f-]{36}$/.test(staffId) || !/^[0-9a-f-]{36}$/.test(authUserId)) {\n throw new Error(\"authenticated_actor_required\");\n }\n return {\n staff_id: staffId,\n auth_user_id: authUserId,\n role,\n correlation_id: text(ctx.correlation_id, 200) || `cockpit-v92-${crypto.randomUUID()}`,\n origin: \"authenticated_cockpit_v92\",\n };\n}\n\nfunction kernelCommandCodeV92(value: unknown): string {\n const commandCode = text(value, 100).toLowerCase();\n if (!/^[a-z][a-z0-9_.]{2,99}$/.test(commandCode)) {\n throw new Error(\"kernel_command_code_invalid\");\n }\n return commandCode;\n}\n\nexport async function platformKernelSnapshotV92(\n ctx: Json,\n serviceCaseIdValue: unknown = null,\n): Promise {\n const serviceCaseId = text(serviceCaseIdValue, 80).toLowerCase();\n if (serviceCaseId && !/^[0-9a-f-]{36}$/.test(serviceCaseId)) {\n throw new Error(\"invalid_service_case_id\");\n }\n const result = await edgeRequest(\"bootstrap\", {\n kernel_version: \"92.0\",\n tenant_id: tenant(ctx),\n service_case_id: serviceCaseId || null,\n actor: kernelActorV92(ctx),\n });\n return {\n ...result,\n kernel_version: \"92.0\",\n registry_source: \"kernel_command_registry_v92\",\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n external_effects_performed: false,\n };\n}\n\nexport async function platformKernelExecuteV92(\n ctx: Json,\n commandCodeValue: unknown,\n idempotencyKeyValue: unknown,\n payloadValue: unknown,\n): Promise {\n const commandCode = kernelCommandCodeV92(commandCodeValue);\n const idempotencyKey = text(idempotencyKeyValue, 200)\n || `cockpit-v92-${tenant(ctx)}-${commandCode}-${crypto.randomUUID()}`;\n if (!/^[a-zA-Z0-9][a-zA-Z0-9_.:-]{7,199}$/.test(idempotencyKey)) {\n throw new Error(\"invalid_idempotency_key\");\n }\n const result = await edgeRequest(\"command.execute\", {\n kernel_version: \"92.0\",\n tenant_id: tenant(ctx),\n command_code: commandCode,\n idempotency_key: idempotencyKey,\n payload: object(payloadValue),\n actor: kernelActorV92(ctx),\n execution_mode: \"active_internal\",\n });\n return {\n ...result,\n kernel_version: \"92.0\",\n registry_source: \"kernel_command_registry_v92\",\n source_of_truth: \"supabase\",\n n8n_execution_used: false,\n external_effects_performed: false,\n };\n}\n\nexport async function platformKernelTransitionV92(\n ctx: Json,\n commandCodeValue: unknown,\n toStatusValue: unknown,\n reasonValue: unknown,\n): Promise {\n const commandCode = kernelCommandCodeV92(commandCodeValue);\n const toStatus = text(toStatusValue, 40).toLowerCase();\n if (![\"paused\", \"rolled_back\"].includes(toStatus)) {\n throw new Error(\"owner_admin_action_limited_to_pause_or_rollback\");\n }\n return edgeRequest(\"command.execute\", {\n kernel_version: \"92.0\",\n admin_action: \"route.transition\",\n tenant_id: tenant(ctx),\n command_code: commandCode,\n to_status: toStatus,\n reason: text(reasonValue, 300) || \"Owner controlled stop from cockpit V92\",\n actor: kernelActorV92(ctx),\n });\n}\n",[],[1122,1252],"e1610273-e986-46d8-b525-6931488e0081","palette-v51.ts","01a008e7-12ca-757f-ba31-c7c3bfb3ec4a",["D",1786855756508],"/**\n * Palette v51 — une entrée unique, au clavier.\n *\n * POURQUOI CELLE-CI PLUTÔT QU'AUTRE CHOSE\n * L'analyse du 31/07 mesure, sur l'ensemble du code servi :\n * 294 boutons, 171 champs de saisie, et AUCUN raccourci clavier global.\n * Pas de navigation aux flèches. Pas de piège de focus dans les surcouches.\n * Aucun motif combobox.\n * C'est l'écart concret avec une interface comme celle de Claude : là-bas tout\n * est atteignable au clavier et il n'existe qu'un seul endroit où taper. Ici on\n * navigue à la souris entre 294 boutons. Ajouter un dixième panneau n'y\n * changerait rien ; une entrée unique, si.\n *\n * LA RÈGLE ANTI-FAÇADE, ET ELLE EST STRICTE\n * Cette palette n'invente rien et ne déclenche aucune action métier.\n * 1. Elle n'indexe QUE ce qui est réellement dans le document au moment où\n * elle s'ouvre. Pas de liste écrite à la main : un balayage du DOM.\n * 2. Les commandes proposées viennent de COMMANDES_CONNUES, lu dans le\n * module d'API. Si l'API cesse d'accepter une commande, elle disparaît\n * d'ici sans que personne n'ait à y penser.\n * 3. Pour chaque commande, elle CHERCHE un déclencheur réel dans la page. Si\n * elle n'en trouve pas, elle l'écrit : « aucun déclencheur dans cette\n * vue ». Elle ne propose jamais un bouton qui n'existe pas.\n * 4. Entrée NAVIGUE et DONNE LE FOCUS. Elle ne clique jamais à la place de\n * l'utilisateur. Une palette qui déclencherait une facture parce qu'on a\n * tapé trois lettres et appuyé sur Entrée serait un piège, pas un confort.\n *\n * Ces quatre règles sont ce qui distingue un outil d'une démonstration.\n */\n\nimport { COMMANDES_CONNUES } from \"./platform-api-v31.ts\";\n\nexport const PALETTE_RELEASE = \"palette-v51-entree-unique\";\n\nexport function stylePalette(): string {\n return `\n.pal-v51-voile{\nposition:fixed;inset:0;z-index:9000;\ndisplay:none;align-items:flex-start;justify-content:center;\npadding:12vh 20px 20px;\nbackground:color-mix(in srgb,var(--bg) 78%,transparent);\n}\n.pal-v51-voile[data-ouvert=\"1\"]{display:flex}\n.pal-v51{\nwidth:min(640px,100%);max-height:70vh;\ndisplay:flex;flex-direction:column;\nbackground:var(--panel);\nborder:1px solid var(--line-strong);\nborder-radius:6px;\nbox-shadow:0 24px 60px rgba(0,0,0,.5);\noverflow:hidden;\n}\n.pal-v51-saisie{\nwidth:100%;box-sizing:border-box;\npadding:16px 18px;\nbackground:transparent;color:var(--ink);\nborder:0;border-bottom:1px solid var(--line);\nfont:inherit;font-size:.94rem;\noutline:none;\n}\n.pal-v51-saisie::placeholder{color:var(--muted-2)}\n.pal-v51-liste{\nlist-style:none;margin:0;padding:6px 0;\noverflow-y:auto;flex:1;\n}\n.pal-v51-groupe{\npadding:10px 18px 5px;\nfont-size:.565rem;letter-spacing:.15em;text-transform:uppercase;\ncolor:var(--muted-2);\n}\n.pal-v51-item{\ndisplay:grid;grid-template-columns:1fr auto;align-items:baseline;gap:14px;\npadding:9px 18px;\ncursor:pointer;\nborder-left:2px solid transparent;\nfont-size:.8rem;color:var(--ink);\n}\n.pal-v51-item[aria-selected=\"true\"]{\nbackground:var(--panel2);\nborder-left-color:var(--accent);\n}\n.pal-v51-item .pal-v51-note{\nfont-family:var(--font-mono);font-size:.62rem;color:var(--muted);\nwhite-space:nowrap;\n}\n.pal-v51-item[data-inerte=\"1\"]{color:var(--muted)}\n.pal-v51-item[data-inerte=\"1\"] .pal-v51-note{color:var(--muted-2)}\n.pal-v51-vide{padding:18px;font-size:.78rem;color:var(--muted-2)}\n.pal-v51-pied{\ndisplay:flex;gap:16px;flex-wrap:wrap;\npadding:9px 18px;\nborder-top:1px solid var(--line);\nfont-size:.6rem;letter-spacing:.06em;color:var(--muted-2);\n}\n.pal-v51-pied b{color:var(--muted);font-weight:600;font-family:var(--font-mono)}\n.pal-v51-indice{\nposition:fixed;right:16px;bottom:14px;z-index:40;\nfont-size:.6rem;letter-spacing:.1em;color:var(--muted-2);\npointer-events:none;\n}\n@media (max-width:640px){\n.pal-v51-voile{padding:8vh 12px 12px}\n.pal-v51-indice{display:none}\n}\n`;\n}\n\nexport function scriptPalette(): string {\n const commandes = JSON.stringify(COMMANDES_CONNUES || []);\n return String.raw`(function(){\nvar COMMANDES=` + commandes + String.raw`;\nvar voile=null,saisie=null,liste=null,ouvert=false,index=0,items=[],focusAvant=null;\n\nfunction esc(v){\n return String(v==null?\"\":v).replace(/[&<>\"']/g,function(c){\n return {\"&\":\"&\",\"<\":\"<\",\">\":\">\",\"\\\"\":\""\",\"'\":\"'\"}[c];\n });\n}\nfunction visible(el){\n if(!el)return false;\n if(el.offsetParent===null&&getComputedStyle(el).position!==\"fixed\")return false;\n var s=getComputedStyle(el);\n return s.display!==\"none\"&&s.visibility!==\"hidden\";\n}\nfunction libelle(el){\n var t=(el.getAttribute(\"aria-label\")||el.textContent||\"\").replace(/\\s+/g,\" \").trim();\n return t.slice(0,72);\n}\n\n/* ── Index : uniquement ce qui est RÉELLEMENT dans le document ─────────── */\nfunction construireIndex(){\n var out=[],vus={};\n\n // 1. Navigation : les liens de la barre latérale tels qu'ils existent.\n var liens=document.querySelectorAll('.side a,[data-view],nav a,.nav a');\n for(var i=0;i0){tous[i].s=s;retenus.push(tous[i]);}\n }\n retenus.sort(function(a,b){return b.s-a.s});\n retenus=retenus.slice(0,40);\n items=retenus;\n if(index>=items.length)index=0;\n\n if(!items.length){\n liste.innerHTML='

Rien ne correspond \\u00e0 cette recherche.

';\n saisie.setAttribute(\"aria-activedescendant\",\"\");\n return;\n }\n var html=\"\",groupe=null;\n for(var j=0;j'+esc(groupe)+'';}\n html+='

'\n +''+esc(it.titre)+''\n +''+esc(it.note)+'

';\n }\n liste.innerHTML=html;\n saisie.setAttribute(\"aria-activedescendant\",\"palV51-\"+index);\n var sel=liste.querySelector('[data-i=\"'+index+'\"]');\n if(sel&&sel.scrollIntoView)sel.scrollIntoView({block:\"nearest\"});\n}\n\n/* ── Choisir : naviguer ou donner le focus. Jamais cliquer. ────────────── */\nfunction choisir(){\n var it=items[index];\n if(!it)return;\n if(it.genre===\"cmd\"&&!it.cible)return; // inerte : on ne fait pas semblant\n var cible=it.cible;\n fermer();\n if(!cible)return;\n if(it.genre===\"nav\"&&typeof cible.click===\"function\"){cible.click();return;}\n if(cible.scrollIntoView)cible.scrollIntoView({block:\"center\",behavior:\"auto\"});\n try{cible.focus({preventScroll:true});}catch(e){try{cible.focus();}catch(e2){}}\n}\n\nfunction ouvrir(){\n if(ouvert)return;\n focusAvant=document.activeElement;\n monter();\n ouvert=true;index=0;\n voile.setAttribute(\"data-ouvert\",\"1\");\n saisie.value=\"\";\n saisie.setAttribute(\"aria-expanded\",\"true\");\n rendre();\n saisie.focus();\n}\nfunction fermer(){\n if(!ouvert)return;\n ouvert=false;\n voile.setAttribute(\"data-ouvert\",\"0\");\n saisie.setAttribute(\"aria-expanded\",\"false\");\n if(focusAvant&&focusAvant.focus){try{focusAvant.focus();}catch(e){}}\n}\n\nfunction monter(){\n if(voile&&document.body.contains(voile))return;\n voile=document.createElement(\"div\");\n voile.className=\"pal-v51-voile\";\n voile.setAttribute(\"data-ouvert\",\"0\");\n voile.innerHTML=\n '

'\n +''\n +'

'\n +'

'\n +'\\u2191\\u2193 naviguer'\n +'\\u21b5 y aller'\n +'esc fermer'\n +'Aucune action n\\u2019est d\\u00e9clench\\u00e9e depuis la palette.'\n +'

';\n document.body.appendChild(voile);\n saisie=voile.querySelector(\"#palV51Saisie\");\n liste=voile.querySelector(\"#palV51Liste\");\n\n saisie.addEventListener(\"input\",function(){index=0;rendre();});\n liste.addEventListener(\"click\",function(e){\n var li=e.target&&e.target.closest?e.target.closest(\"[data-i]\"):null;\n if(!li)return;\n index=Number(li.getAttribute(\"data-i\"))||0;\n choisir();\n });\n voile.addEventListener(\"mousedown\",function(e){if(e.target===voile)fermer();});\n\n if(!document.getElementById(\"palV51Indice\")){\n var indice=document.createElement(\"div\");\n indice.id=\"palV51Indice\";\n indice.className=\"pal-v51-indice\";\n indice.textContent=(/Mac|iPhone|iPad/.test(navigator.platform||\"\")?\"\\u2318K\":\"Ctrl+K\")+\" \\u00b7 commandes\";\n document.body.appendChild(indice);\n }\n}\n\n/* ── Clavier : ouverture globale, et piège de focus quand c'est ouvert ─── */\ndocument.addEventListener(\"keydown\",function(e){\n var k=(e.key||\"\").toLowerCase();\n if((e.metaKey||e.ctrlKey)&&k===\"k\"){e.preventDefault();ouvert?fermer():ouvrir();return;}\n if(!ouvert)return;\n if(k===\"escape\"){e.preventDefault();fermer();return;}\n if(k===\"arrowdown\"){e.preventDefault();if(items.length){index=(index+1)%items.length;rendre();}return;}\n if(k===\"arrowup\"){e.preventDefault();if(items.length){index=(index-1+items.length)%items.length;rendre();}return;}\n if(k===\"enter\"){e.preventDefault();choisir();return;}\n if(k===\"tab\"){e.preventDefault();saisie.focus();return;} // le focus ne sort pas\n});\n\nif(document.readyState===\"loading\")document.addEventListener(\"DOMContentLoaded\",monter);\nelse monter();\n})();`;\n}\n\nexport function couchePalette(nonce: string): string {\n return ``\n + ``;\n}\n",[],[1122,1259],"b392090c-488e-49a1-9b8a-e5599100cf21","owner-voice-observability.ts","01a008e7-12ca-757f-ba31-c2b81cbcd24d",["D",1786855756508],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nlet ready: Promise | null = null;\n\nasync function ensureTable(): Promise {\n if (!ready) {\n ready = sqlite.execute(`create table if not exists owner_voice_events (\n id text primary key,\n occurred_at text not null,\n event_code text not null,\n stage text not null,\n model text,\n voice text,\n turn_profile text,\n duration_ms integer,\n http_status integer,\n detail_code text\n )`).then(() => undefined).catch((error) => {\n ready = null;\n throw error;\n });\n }\n await ready;\n}\n\nfunction code(value: unknown, fallback = \"unknown\", max = 80): string {\n const normalized = String(value || fallback).trim().replace(/[^a-z0-9_.:-]/gi, \"_\").slice(0, max);\n return normalized || fallback;\n}\n\nfunction integer(value: unknown, minimum = 0, maximum = 120_000): number | null {\n const parsed = Number(value);\n return Number.isFinite(parsed) ? Math.min(maximum, Math.max(minimum, Math.round(parsed))) : null;\n}\n\nexport async function recordOwnerVoiceEvent(input: Record): Promise {\n await ensureTable();\n await sqlite.execute({\n sql: `insert into owner_voice_events (\n id,occurred_at,event_code,stage,model,voice,turn_profile,duration_ms,http_status,detail_code\n ) values (?,?,?,?,?,?,?,?,?,?)`,\n args: [\n crypto.randomUUID(),\n new Date().toISOString(),\n code(input.event_code),\n code(input.stage, \"client\"),\n code(input.model, \"\", 120),\n code(input.voice, \"\", 40),\n code(input.turn_profile, \"\", 40),\n integer(input.duration_ms),\n integer(input.http_status, 0, 599),\n code(input.detail_code, \"\", 120),\n ],\n });\n await sqlite.execute(`delete from owner_voice_events where occurred_at < datetime('now','-30 days')`);\n}\n\nexport async function ownerVoiceDiagnostics(): Promise> {\n await ensureTable();\n const [counts, recent] = await Promise.all([\n sqlite.execute(`select event_code,count(*) as total from owner_voice_events where occurred_at >= datetime('now','-7 days') group by event_code order by total desc`),\n sqlite.execute(`select occurred_at,event_code,stage,model,voice,turn_profile,duration_ms,http_status,detail_code from owner_voice_events order by occurred_at desc limit 40`),\n ]);\n return {\n ok: true,\n retention_days: 30,\n audio_stored: false,\n transcripts_stored: false,\n counts: counts.rows,\n recent: recent.rows,\n };\n}\n",[],[1122,1266],"86cfbcc4-41a2-4e3e-9776-0fa8f8107595","owner-ui-v13.ts","01a008e7-12ca-757f-ba31-bfbcaf860fe8",["D",1786855756508],"export const CLIENT_OWNER_BOOT = String.raw`\n(()=>{try{\n const fragment=new URLSearchParams(location.hash.slice(1));\n const accessToken=fragment.get('access_token')||'';\n const refreshToken=fragment.get('refresh_token')||'';\n const error=fragment.get('error')||'';\n if(accessToken||refreshToken||error){\n if(accessToken&&refreshToken){\n const expiresIn=Math.max(60,Math.min(86400,Number(fragment.get('expires_in')||3600)));\n sessionStorage.setItem('piscine_owner_auth_v1',JSON.stringify({\n access_token:accessToken,\n refresh_token:refreshToken,\n expires_at:Date.now()+expiresIn*1000\n }));\n sessionStorage.removeItem('piscine_owner_auth_error_v1');\n }else{\n sessionStorage.removeItem('piscine_owner_auth_v1');\n sessionStorage.setItem(\n 'piscine_owner_auth_error_v1',\n String(error||'owner_auth_callback_failed').slice(0,120)\n );\n }\n sessionStorage.setItem('piscine_owner_auth_callback_v1','1');\n const next=new URL(location.href);\n next.searchParams.delete('owner_auth');\n history.replaceState(null,'',next.pathname+(next.search||'')+'#owner');\n }\n}catch{\n sessionStorage.removeItem('piscine_owner_auth_v1');\n}})();\n`;\n\nexport const CSS_OWNER = String.raw`\n.owner-hero-actions{display:flex;gap:9px;align-items:center;flex-wrap:wrap}\n.owner-status-grid{grid-template-columns:repeat(4,minmax(0,1fr));margin-bottom:16px}\n.owner-status-card{padding:16px}.owner-status-card span{display:block;color:var(--muted);font-size:10px;margin-bottom:6px}.owner-status-card strong{font-size:15px}.owner-status-card small{display:block;color:var(--muted);margin-top:5px}\n.owner-voice{display:grid;gap:16px;padding:20px}.owner-orb{width:84px;height:84px;border-radius:50%;display:grid;place-items:center;margin:auto;background:radial-gradient(circle at 35% 30%,#65efd7,#159b87 55%,#0e4b43);box-shadow:0 0 0 10px rgba(53,209,181,.06),0 18px 45px rgba(0,0,0,.28);font-size:30px}.owner-orb.live{animation:ownerPulse 1.3s ease-in-out infinite}.owner-orb.blocked{filter:grayscale(.65);opacity:.58}@keyframes ownerPulse{50%{transform:scale(1.06);box-shadow:0 0 0 18px rgba(53,209,181,.03),0 20px 50px rgba(0,0,0,.3)}}\n.owner-voice-copy{text-align:center}.owner-voice-copy h2{margin:0 0 5px;font-size:18px}.owner-voice-copy p{margin:0;color:var(--muted);font-size:11px}.owner-voice-settings{display:grid;grid-template-columns:1fr 1fr;gap:9px}.owner-voice-settings label{display:grid;gap:5px;color:var(--muted);font-size:9px;text-transform:uppercase;letter-spacing:.06em}.owner-voice-settings select{width:100%;min-height:40px;border:1px solid var(--line);border-radius:11px;background:#0b141b;color:var(--ink);padding:0 10px}.owner-voice-actions{display:flex;justify-content:center;gap:9px}.owner-transcript{min-height:120px;max-height:260px;overflow:auto;border:1px solid var(--line);background:#0b141b;border-radius:13px;padding:13px;color:#c8d7dc;white-space:pre-wrap;font-size:12px}.owner-transcript:empty:before{content:\"La transcription de la session apparaîtra ici.\";color:var(--muted)}\n.owner-command-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px;padding:16px}.owner-command{border:1px solid var(--line);background:#0d161d;color:var(--ink);border-radius:13px;padding:13px;text-align:left}.owner-command b{display:block}.owner-command span{display:block;color:var(--muted);font-size:10px;margin-top:3px}.owner-command:hover:not(:disabled){border-color:#367b6e;background:#15312e}\n.owner-result{padding:14px 17px;color:var(--muted);font-size:11px;border-top:1px solid var(--line);white-space:pre-wrap}.owner-control-list{display:grid}.owner-control-row{display:grid;grid-template-columns:minmax(0,1fr) auto;gap:10px;padding:12px 16px;border-bottom:1px solid var(--line)}.owner-control-row:last-child{border-bottom:0}.owner-control-row b{display:block;font-size:11px}.owner-control-row small{display:block;color:var(--muted);margin-top:3px}.owner-blockers{display:grid;gap:8px;padding:14px}.owner-blocker{display:flex;gap:9px;align-items:center;padding:10px;border-radius:11px;background:var(--warnbg);color:var(--warn);font-size:11px}.owner-blocker.ok{background:var(--okbg);color:var(--ok)}\n.owner-delivery-kpis{grid-template-columns:repeat(4,minmax(0,1fr));padding:16px}.owner-delivery-kpi{padding:13px;border:1px solid var(--line);background:#0d161d;border-radius:13px}.owner-delivery-kpi span{display:block;color:var(--muted);font-size:10px}.owner-delivery-kpi strong{display:block;font-size:24px;margin-top:4px}.owner-delivery-kpi.ok strong{color:var(--ok)}.owner-delivery-kpi.warn strong{color:var(--warn)}.owner-delivery-kpi.bad strong{color:var(--danger)}.owner-safe-note{margin:0 16px 16px;padding:11px 12px;border-radius:12px;background:#0d161d;color:var(--muted);font-size:11px}.owner-safe-note b{color:var(--ink)}.owner-test-blockers{display:grid;gap:7px;margin-top:13px}.owner-test-blockers .owner-blocker{padding:8px 10px}\n.owner-activation{overflow:hidden}.owner-activation-head{display:flex;align-items:flex-start;justify-content:space-between;gap:16px;padding:18px;border-bottom:1px solid var(--line)}.owner-activation-head h2{margin:0 0 4px}.owner-activation-head p{margin:0;color:var(--muted);font-size:11px}.owner-activation-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:1px;background:var(--line)}.owner-activation-step{display:grid;grid-template-columns:minmax(0,1fr) auto;align-items:center;gap:12px;padding:14px 16px;background:var(--panel)}.owner-activation-step b{display:block;font-size:12px}.owner-activation-step small{display:block;color:var(--muted);margin-top:3px}.owner-activation-next{padding:16px;border-top:1px solid var(--line)}.owner-activation-next h3{margin:0 0 10px;font-size:12px}.owner-next-list{display:grid;gap:7px}.owner-next-item{display:flex;align-items:center;gap:10px;padding:10px 12px;border-radius:11px;background:#0d161d;color:var(--muted);font-size:11px}.owner-next-index{width:22px;height:22px;border-radius:8px;background:var(--accent2);color:var(--accent);display:grid;place-items:center;font-weight:900;flex:0 0 auto}\n.owner-auth-card{display:flex;align-items:center;justify-content:space-between;gap:20px;padding:17px 18px}.owner-auth-copy{min-width:0}.owner-auth-copy h2{margin:3px 0 5px;font-size:15px}.owner-auth-copy p{margin:0;color:var(--muted);font-size:11px}.owner-auth-copy small{display:block;margin-top:7px;color:var(--muted)}.owner-auth-actions{display:flex;align-items:center;justify-content:flex-end;gap:9px;flex-wrap:wrap}.owner-auth-actions .pill{white-space:nowrap}\n.owner-simple-head{margin-bottom:14px}.owner-auth-inline{display:flex;align-items:center;gap:10px;margin-bottom:14px;padding:10px 12px;border:1px solid var(--line);border-radius:13px;background:rgba(255,255,255,.018);color:var(--muted);font-size:11px}.owner-auth-inline>span:nth-child(2){min-width:0;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.owner-simple-layout{display:grid;grid-template-columns:minmax(380px,1.2fr) minmax(300px,.8fr);gap:16px;align-items:start}.owner-voice-simple{min-height:0;padding:24px}.owner-voice-top{display:flex;align-items:flex-start;justify-content:space-between;gap:12px}.owner-voice-top strong{display:block;margin-top:2px;font-size:14px}.owner-voice-top small{color:var(--muted);font-size:9px}.owner-live-label{display:block;color:var(--muted);font-size:9px;text-transform:uppercase;letter-spacing:.08em}.owner-simple-side{display:grid;gap:16px}.owner-shortcut-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px;padding:14px}.owner-shortcuts .owner-command{min-height:82px}.owner-voice-simple .owner-transcript{min-height:180px;max-height:300px}.owner-voice-simple .owner-safety-strip{padding:10px 12px}.owner-simple-side .owner-action-timeline{max-height:330px;overflow:auto}.owner-simple-side .owner-result{min-height:42px}.owner-auth-inline[hidden]{display:none}\n\n@media(max-width:900px){.owner-status-grid,.owner-delivery-kpis{grid-template-columns:repeat(2,minmax(0,1fr))}.owner-command-grid,.owner-activation-grid,.owner-simple-layout{grid-template-columns:1fr}.owner-auth-card{align-items:flex-start;flex-direction:column}.owner-auth-actions{justify-content:flex-start}.owner-auth-inline{align-items:flex-start;flex-wrap:wrap}.owner-auth-inline>span:nth-child(2){flex-basis:calc(100% - 90px)}.owner-shortcut-grid{grid-template-columns:1fr 1fr}}\n@media(max-width:560px){.owner-shortcut-grid,.owner-voice-settings{grid-template-columns:1fr}.owner-voice-simple{padding:18px}.owner-auth-inline>span:nth-child(2){flex-basis:100%;white-space:normal}}\n.owner-focus-layout{max-width:920px;margin:0 auto}.owner-simple-head{max-width:920px;margin:0 auto 16px}.owner-auth-inline{max-width:920px;margin:0 auto 14px}.owner-focus{display:grid;gap:20px;padding:clamp(22px,4vw,36px);background:var(--panel);border:1px solid var(--line);border-radius:20px}.owner-focus-status{display:flex;align-items:center;justify-content:center;gap:8px;color:var(--muted);font-size:12px}.owner-status-dot{width:8px;height:8px;border-radius:50%;background:var(--accent);flex:0 0 auto}.owner-focus .owner-orb-shell{display:grid;place-items:center;margin-top:2px}.owner-focus .owner-orb{width:72px;height:72px;margin:auto;background:var(--accent);border:8px solid color-mix(in srgb,var(--accent) 10%,transparent);box-shadow:none}.owner-focus .owner-orb.live{animation:ownerQuietPulse 1.8s ease-in-out infinite}@keyframes ownerQuietPulse{50%{transform:scale(1.035);box-shadow:0 0 0 12px color-mix(in srgb,var(--accent) 5%,transparent)}}.owner-focus .owner-voice-copy h2{font-size:clamp(24px,4vw,32px);letter-spacing:-.035em}.owner-focus .owner-voice-copy p{font-size:13px}.owner-focus .owner-voice-actions{display:flex;justify-content:center;gap:10px}.owner-focus .owner-voice-actions .btn{min-height:48px}.owner-focus #ownerVoiceStart{min-width:230px}.owner-focus .owner-transcript{min-height:180px;max-height:340px;background:#0a151c;border-color:var(--line);border-radius:14px;padding:18px;font-size:14px;line-height:1.65}.owner-focus .owner-transcript:empty:before{content:\"La conversation apparaîtra ici.\"}.owner-focus .owner-safety-strip{text-align:center;color:var(--muted);font-size:11px;padding:0}.owner-command-row{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:8px}.owner-command-row .owner-command{min-height:48px;padding:10px 12px;border-radius:10px;background:var(--panel2);text-align:center}.owner-command-row .owner-command:hover:not(:disabled){border-color:#3b505c;background:var(--panel3)}.owner-command-row .owner-command b{font-size:12px}.owner-focus .owner-result{border:0;border-radius:10px;background:color-mix(in srgb,var(--accent) 6%,var(--panel2));padding:11px 13px;color:var(--muted);text-align:center}.owner-disclosure{border-top:1px solid var(--line);padding-top:2px}.owner-disclosure summary{cursor:pointer;min-height:44px;display:flex;align-items:center;justify-content:space-between;color:var(--muted);font-weight:700;font-size:12px;list-style:none}.owner-disclosure summary::-webkit-details-marker{display:none}.owner-disclosure summary:after{content:\"+\";font-size:18px;font-weight:500}.owner-disclosure[open] summary:after{content:\"−\"}.owner-disclosure .owner-voice-settings{padding:4px 0 12px}.owner-activity-panel .owner-action-timeline{max-height:260px;overflow:auto;padding-top:8px}#ownerActivitySummary{font-size:10px;font-weight:600;margin-left:auto;margin-right:10px}@media(max-width:760px){.owner-command-row{grid-template-columns:repeat(2,minmax(0,1fr))}.owner-focus{padding:20px}}@media(max-width:480px){.owner-focus .owner-voice-actions{flex-direction:column}.owner-focus #ownerVoiceStart{min-width:0;width:100%}.owner-focus #ownerVoiceStop{width:100%}}@media(prefers-reduced-motion:reduce){.owner-focus .owner-orb.live{animation:none}.agent-wave span{animation:none!important}}\n\n`;\n\nexport const CLIENT_OWNER = String.raw`\ntitles.owner='Assistante IA';\nconst ownerState={caps:null,pc:null,stream:null,channel:null,audio:null,loading:false,activationLoading:false,activationLoaded:false,auth:null,authPromise:null,toolCalls:new Set(),confirmations:new Map(),assistantLineOpen:false};\nconst ownerLabels={\n owner_direct_gateway_disabled:\"La console directe reste coupée.\",\n owner_direct_gateway_not_configured:\"La passerelle directe Supabase doit être configurée.\",\n owner_voice_mode_disabled:\"La commande vocale dirigeant reste verrouillée pendant la phase de sécurisation.\",\n openai_api_not_configured:\"La connexion OpenAI Realtime manque.\",\n owner_staff_identity_missing:\"L’identité staff technique manque.\",\n owner_strong_identity_required_for_commit:\"Une identité forte liée au compte dirigeant est requise avant toute écriture réelle.\",\n owner_strong_identity_required_for_voice:\"La session e-mail sécurisée est requise avant la voix dirigeant.\",\n owner_email_auth_not_configured:\"La connexion e-mail propriétaire doit être configurée.\",\n owner_strong_identity_invalid:\"La session sécurisée a expiré.\",\n owner_email_not_allowlisted:\"Cette adresse n’est pas autorisée pour le compte propriétaire.\",\n owner_commit_permission_disabled:\"Les permissions d’écriture réelle restent volontairement désactivées.\"\n};\nfunction ownerText(value,fallback){return String(value==null?(fallback||''):value)}\nfunction ownerSetText(selector,value){const el=q(selector);if(el)el.textContent=ownerText(value)}\nfunction ownerSetTranscript(line,append){const el=q('#ownerTranscript');if(!el)return;if(append)el.textContent+=ownerText(line);else el.textContent=ownerText(line);el.scrollTop=el.scrollHeight}\nconst ownerActionLabels={\n owner_daily_briefing:'Briefing du jour',get_autonomy_status:'État de l’autonomie',\n get_delivery_status:'Suivi des livraisons',get_activation_readiness:'Diagnostic d’activation',\n list_priority_tasks:'Lecture des tâches',find_client:'Recherche client',\n get_client_timeline:'Chronologie client',list_pending_quotes:'Lecture des devis',\n list_overdue_invoices:'Lecture des factures',create_task:'Création de tâche',\n prepare_approval:'Préparation de validation',complete_owner_session:'Clôture de session',\n create_client_file:'Création dossier client',create_client_record:'Créer un client',update_client_record:'Modifier un client',archive_client_record:'Archiver un client',create_quote_record:'Créer un devis',update_quote_record:'Modifier un devis',archive_quote_record:'Archiver un devis',search_business_files:'Rechercher des fichiers',send_client_email:'Envoyer un e-mail client',business_read:'Lecture métier',business_write:'Action métier',voice_session:'Agent vocal',\n accounting_dashboard:'Vue comptable',accounting_list_transactions:'Lecture des transactions',accounting_trial_balance:'Lecture de la balance',accounting_ledger:'Lecture du grand livre',accounting_income_statement:'Lecture du résultat',accounting_vat_preview:'Estimation de TVA',accounting_anomalies:'Contrôle comptable',accounting_close_readiness:'Préparation de clôture',\n accounting_update_profile:'Profil comptable',accounting_record_sales_invoice:'Écriture de facture client',accounting_record_purchase_invoice:'Écriture de facture fournisseur',accounting_import_transactions:'Import comptable',accounting_categorize_transaction:'Classement comptable',accounting_create_entry:'Création d’écriture',accounting_approve_entry:'Validation d’écriture',accounting_post_entry:'Comptabilisation',accounting_reconcile:'Rapprochement',accounting_lock_period:'Verrouillage de période',accounting_reverse_entry:'Contre-passation'\n};\nfunction ownerTrackAction(action,state,message){\n const root=q('#ownerActionTimeline');if(!root)return;\n const entry=document.createElement('div');entry.className='owner-action-entry '+(state||'pending');\n const dot=document.createElement('span');dot.className='owner-action-dot';dot.textContent=state==='ok'?'✓':state==='bad'?'!':'·';\n const copy=document.createElement('span');copy.className='owner-action-copy';\n const title=document.createElement('b');title.textContent=ownerActionLabels[action]||ownerText(action,'Action');\n const detail=document.createElement('small');detail.textContent=ownerText(message,state==='pending'?'En cours…':state==='ok'?'Terminé':'Échec');\n const time=document.createElement('span');time.className='owner-action-time';time.textContent=new Intl.DateTimeFormat('fr-FR',{hour:'2-digit',minute:'2-digit'}).format(new Date());\n copy.append(title,detail);entry.append(dot,copy,time);root.prepend(entry);\n while(root.children.length>8)root.lastElementChild.remove();\n const summary=q('#ownerActivitySummary');\n if(summary){const count=root.children.length;summary.textContent=count+' action'+(count>1?'s':'')}\n}\nconst OWNER_AUTH_STORAGE='piscine_owner_auth_v1';\nfunction ownerAuthLoad(){\n if(ownerState.auth)return ownerState.auth;\n try{\n const parsed=JSON.parse(sessionStorage.getItem(OWNER_AUTH_STORAGE)||'null');\n if(!parsed||typeof parsed!=='object')return null;\n const access=ownerText(parsed.access_token),refresh=ownerText(parsed.refresh_token),expires=Number(parsed.expires_at||0);\n if(access.length<20||refresh.length<20||!Number.isFinite(expires))return null;\n ownerState.auth={access_token:access,refresh_token:refresh,expires_at:expires};\n return ownerState.auth;\n }catch{return null}\n}\nfunction ownerAuthSave(payload){\n const access=ownerText(payload.access_token),refresh=ownerText(payload.refresh_token);\n const expiresIn=Math.max(60,Math.min(86400,Number(payload.expires_in||3600)));\n if(access.length<20||refresh.length<20)throw new Error('owner_auth_invalid_response');\n ownerState.auth={access_token:access,refresh_token:refresh,expires_at:Date.now()+expiresIn*1000};\n sessionStorage.setItem(OWNER_AUTH_STORAGE,JSON.stringify(ownerState.auth));\n sessionStorage.removeItem('piscine_owner_auth_error_v1');\n return ownerState.auth;\n}\nfunction ownerAuthClear(){\n ownerState.auth=null;\n sessionStorage.removeItem(OWNER_AUTH_STORAGE);\n}\nasync function ownerAuthToken(){\n const current=ownerAuthLoad();\n if(!current)return '';\n if(current.expires_at>Date.now()+90000)return current.access_token;\n if(ownerState.authPromise)return ownerState.authPromise;\n ownerState.authPromise=(async()=>{\n const response=await fetch('/api/owner/auth/refresh',{\n method:'POST',\n headers:{'content-type':'application/json','x-csrf-token':csrf},\n body:JSON.stringify({refresh_token:current.refresh_token})\n });\n const result=await response.json();\n if(!response.ok||result.ok===false){ownerAuthClear();return ''}\n return ownerAuthSave(result).access_token;\n })();\n try{return await ownerState.authPromise}catch{ownerAuthClear();return ''}finally{ownerState.authPromise=null}\n}\nfunction ownerRenderAuth(auth){\n const configured=Boolean(auth&&auth.configured);\n const verified=Boolean(auth&&auth.verified);\n const local=ownerAuthLoad();\n const callbackError=sessionStorage.getItem('piscine_owner_auth_error_v1')||'';\n const pill=q('#ownerAuthPill'),request=q('#ownerAuthRequest'),logout=q('#ownerAuthLogout'),inline=q('#ownerAuthInline');\n if(inline)inline.hidden=verified;\n if(pill){\n pill.textContent=verified?'Identité vérifiée':configured?'À confirmer':'À configurer';\n pill.className='pill '+(verified?'ok':'warn');\n }\n ownerSetText(\n '#ownerAuthCopy',\n verified\n ?'Votre connexion à l’entreprise est déjà vérifiée par Supabase. Aucun second e-mail n’est nécessaire ; le métier et vos droits sont chargés par le serveur.'\n :callbackError\n ?'Le lien n’a pas pu être validé. Demandez un nouveau lien sécurisé.'\n :'Confirmez votre adresse e-mail avec un lien à usage unique. Aucun mot de passe n’est stocké.'\n );\n ownerSetText('#ownerAuthMeta',auth&&auth.email_hint?'Compte autorisé : '+ownerText(auth.email_hint):'Compte propriétaire sécurisé');\n if(request){request.hidden=verified;request.disabled=!configured;request.textContent='Recevoir mon lien sécurisé'}\n if(logout){logout.hidden=!local;logout.disabled=false}\n if(verified)sessionStorage.removeItem('piscine_owner_auth_error_v1');\n}\nasync function ownerRequestMagicLink(){\n const button=q('#ownerAuthRequest');\n if(button){button.disabled=true;button.textContent='Envoi en cours…'}\n try{\n const response=await fetch('/api/owner/auth/request',{\n method:'POST',\n headers:{'content-type':'application/json','x-csrf-token':csrf},\n body:'{}'\n });\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.error||'owner_magic_link_request_failed');\n ownerSetText('#ownerAuthCopy','Lien sécurisé envoyé. Ouvrez l’e-mail dans ce navigateur pour confirmer votre identité.');\n toast('Lien de connexion envoyé');\n }catch(error){\n toast(ownerLabels[ownerText(error.message)]||ownerText(error.message),false);\n }finally{\n if(button){button.textContent='Recevoir mon lien sécurisé';setTimeout(()=>{button.disabled=false},60000)}\n }\n}\nasync function ownerLogoutStrongIdentity(){\n const token=await ownerAuthToken();\n try{\n await fetch('/api/owner/auth/logout',{\n method:'POST',\n headers:{'x-csrf-token':csrf,...(token?{'x-owner-access-token':token}:{})}\n });\n }catch{}\n ownerAuthClear();\n ownerState.activationLoaded=false;\n await ownerFetchCaps();\n toast('Session propriétaire déconnectée');\n}\nfunction ownerRenderCaps(caps){\n ownerState.caps=caps;\n ownerRenderAuth(caps.owner_auth||{});\n const consoleAvailable=Boolean(caps.console_available);\n const voiceAvailable=Boolean(caps.voice_available);\n const pillEl=q('#ownerModePill');\n if(pillEl){\n pillEl.textContent=voiceAvailable?'Prête':consoleAvailable?'Lecture seule':'À configurer';\n pillEl.className='pill '+(consoleAvailable?'ok':'warn');\n }\n ownerSetText('#ownerModeValue',consoleAvailable?'Console active':'Console coupée');\n ownerSetText('#ownerGatewayValue',consoleAvailable?'Direct Supabase':'À configurer');\n ownerSetText('#ownerIdentityValue',caps.strong_identity_verified?'Identité forte':'Lecture sécurisée');\n ownerSetText('#ownerVoiceValue',voiceAvailable?'Prête':'Verrouillée');\n ownerSetText('#ownerModelMeta','Assistante vocale française');\n const voiceSelect=q('#ownerVoiceProfile'),turnSelect=q('#ownerTurnProfile');\n if(voiceSelect&&['cedar','marin'].includes(ownerText(caps.voice)))voiceSelect.value=ownerText(caps.voice);\n if(voiceSelect)voiceSelect.disabled=!voiceAvailable;\n if(turnSelect)turnSelect.disabled=!voiceAvailable;\n const blockers=q('#ownerBlockers');\n if(blockers){\n blockers.replaceChildren();\n const list=Array.isArray(caps.blockers)?caps.blockers:[];\n if(!list.length){\n const ok=document.createElement('div');ok.className='owner-blocker ok';ok.textContent='Tous les contrôles sont satisfaits.';blockers.appendChild(ok);\n }else{\n list.forEach(code=>{const row=document.createElement('div');row.className='owner-blocker';row.textContent=ownerLabels[code]||ownerText(code);blockers.appendChild(row)});\n }\n }\n const start=q('#ownerVoiceStart'),orb=q('#ownerOrb');\n if(start){start.disabled=!voiceAvailable;start.textContent=voiceAvailable?'Parler à l’assistante':'Voix verrouillée'}\n if(orb)orb.classList.toggle('blocked',!voiceAvailable);\n qa('[data-owner-action]').forEach(button=>{button.disabled=!consoleAvailable});\n}\nasync function ownerFetchCaps(){\n if(ownerState.loading)return;\n ownerState.loading=true;\n try{\n const token=await ownerAuthToken();\n const response=await fetch('/api/owner/capabilities',{headers:{accept:'application/json',...(token?{'x-owner-access-token':token}:{})}});\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.error||'capacites_indisponibles');\n ownerRenderCaps(result);\n }catch(error){\n ownerSetText('#ownerVoiceValue','Indisponible');\n ownerSetTranscript('L’assistante est temporairement indisponible. Réessayez dans quelques instants.',false);\n }finally{ownerState.loading=false}\n}\nconst ownerBusinessReads=new Set(['client.context','availability.check','quote.get','invoice.get','knowledge.lookup','next.action','dashboard.snapshot','clients.list','requests.list','appointments.list','documents.list']);\nconst ownerBusinessWrites=new Set(['client.create','rdv.create','quote.create','quote.update','quote.recalculate','quote.status','quote.send','invoice.from_quote','invoice.send','invoice.mark_paid','task.create']);\nfunction ownerStable(value){if(Array.isArray(value))return value.map(ownerStable);if(value&&typeof value==='object'){return Object.fromEntries(Object.entries(value).sort((a,b)=>a[0].localeCompare(b[0])).map(entry=>[entry[0],ownerStable(entry[1])]))}return value}\nfunction ownerStableJson(value){return JSON.stringify(ownerStable(value||{}))}\nfunction ownerBusinessSummary(action,payload){const labels={'client.create':'Créer un client','rdv.create':'Créer un rendez-vous','quote.create':'Créer un devis','quote.update':'Modifier un devis','quote.recalculate':'Recalculer un devis','quote.status':'Changer le statut d’un devis','quote.send':'Envoyer un devis','invoice.from_quote':'Créer une facture depuis un devis','invoice.send':'Envoyer une facture','invoice.mark_paid':'Enregistrer un paiement','task.create':'Créer une tâche'};const details=[payload.nom||payload.customer_name,payload.titre||payload.title||payload.objet,payload.date_heure||payload.appointment_datetime,payload.quote_id||payload.invoice_id||payload.id,payload.status,payload.amount==null?'':String(payload.amount)+' €'].filter(Boolean).join(' · ');return(ownerText(labels[action],'Action métier'))+(details?' — '+details:'')}\nasync function ownerBusinessRequest(action,payload){\n const normalized={...(payload||{})};\n if(normalized.quote_id&&!normalized.id)normalized.id=normalized.quote_id;\n if(normalized.invoice_id&&!normalized.id)normalized.id=normalized.invoice_id;\n if(normalized.quote_id&&!normalized.devis_id)normalized.devis_id=normalized.quote_id;\n if(normalized.invoice_id&&!normalized.facture_id)normalized.facture_id=normalized.invoice_id;\n const readRoutes={\n 'dashboard.snapshot':'/api/data/snapshot',\n 'clients.list':'/api/data/clients',\n 'requests.list':'/api/data/requests',\n 'appointments.list':'/api/data/appointments',\n 'documents.list':'/api/data/documents'\n };\n let response;\n if(readRoutes[action]){\n const query=new URLSearchParams();\n Object.entries(normalized).forEach(([key,value])=>{if(value!==null&&value!==undefined&&value!==''&&['string','number','boolean'].includes(typeof value))query.set(key,String(value))});\n response=await fetch(readRoutes[action]+(query.size?'?'+query.toString():''),{headers:{accept:'application/json'}});\n }else{\n response=await fetch('/api/action',{method:'POST',headers:{'content-type':'application/json','x-csrf-token':csrf},body:JSON.stringify({action:action,data:normalized})});\n }\n const result=await response.json();\n if(!response.ok||result.ok===false)throw new Error(result.assistant_message||result.error||'action_metier_refusee');\n return result\n}\nconst ownerAccountingTools={accounting_dashboard:'accounting.dashboard',accounting_list_transactions:'accounting.transactions.list',accounting_trial_balance:'accounting.trial_balance',accounting_ledger:'accounting.ledger',accounting_income_statement:'accounting.income_statement',accounting_vat_preview:'accounting.vat.preview',accounting_anomalies:'accounting.anomalies',accounting_close_readiness:'accounting.close.readiness',accounting_update_profile:'accounting.profile.update',accounting_record_sales_invoice:'accounting.sales_invoice.record',accounting_record_purchase_invoice:'accounting.purchase_invoice.record',accounting_import_transactions:'accounting.transactions.import',accounting_categorize_transaction:'accounting.transaction.categorize',accounting_create_entry:'accounting.entry.create',accounting_approve_entry:'accounting.entry.approve',accounting_post_entry:'accounting.entry.post',accounting_reconcile:'accounting.reconcile',accounting_lock_period:'accounting.period.lock',accounting_reverse_entry:'accounting.entry.reverse'};\nasync function ownerAction(action,data){\n const requestedAction=action;\n if(ownerAccountingTools[action]){\n ownerTrackAction(action,'pending','Vérification comptable en cours');\n const response=await fetch('/api/accounting/action',{method:'POST',headers:{'content-type':'application/json','x-csrf-token':csrf},body:JSON.stringify({action:ownerAccountingTools[action],data:data||{}})});\n const result=await response.json();\n if(result.confirmation_required===true){ownerTrackAction(action,'pending','Confirmation explicite requise');return result}\n if(!response.ok||result.ok===false){ownerTrackAction(action,'bad','Action comptable refusée');throw new Error(result.assistant_message||result.error||'accounting_action_failed')}\n ownerTrackAction(action,'ok',result.action_completed===true?'Action comptable exécutée':'Données comptables lues');return result;\n }\n if(action==='create_client_file'){\n action='business_write';\n data={\n action:'client.create',\n data:{nom:data.customer_name||'',telephone:data.customer_phone||'',email:data.customer_email||'',adresse:data.address||'',ville:data.city||'',code_postal:data.postal_code||'',description:data.request_summary||'',asset_type:data.asset_type||'',urgence:data.urgency||'normale'},\n explicit_confirmation:data.explicit_confirmation===true,\n confirmation_token:data.confirmation_token||null\n };\n }\n ownerTrackAction(requestedAction,'pending','Vérification et exécution en cours');\n if(action==='business_read'){\n const businessAction=ownerText(data&&data.action);const payload=data&&data.data&&typeof data.data==='object'?data.data:{};\n if(!ownerBusinessReads.has(businessAction))throw new Error('lecture_metier_non_autorisee');\n try{const result=await ownerBusinessRequest(businessAction,payload);ownerTrackAction(action,'ok','Données lues et vérifiées');return{...result,action_completed:false,execution_state:'read_completed',safe_to_announce:true}}\n catch(error){ownerTrackAction(action,'bad','Lecture refusée');throw error}\n }\n if(action==='business_write'){\n const businessAction=ownerText(data&&data.action);const payload=data&&data.data&&typeof data.data==='object'?data.data:{};const explicit=data&&data.explicit_confirmation===true;const supplied=ownerText(data&&data.confirmation_token);\n if(!ownerBusinessWrites.has(businessAction))throw new Error('action_metier_non_autorisee');\n if(!(ownerState.caps&&ownerState.caps.strong_identity_verified))throw new Error('owner_strong_identity_required_for_commit');\n const fingerprint=businessAction+'|'+ownerStableJson(payload);const summary=ownerBusinessSummary(businessAction,payload);\n if(!explicit){const confirmationToken=crypto.randomUUID();ownerState.confirmations.set(confirmationToken,{fingerprint:fingerprint,expires:Date.now()+300000});ownerTrackAction(action,'pending','Confirmation explicite requise');return{ok:false,action_completed:false,execution_state:'confirmation_required',confirmation_required:true,confirmation_token:confirmationToken,confirmation_expires_in_seconds:300,confirmation_summary:summary,safe_to_announce:true,assistant_message:summary+'. Confirmez-vous cette action ?'}}\n const prepared=ownerState.confirmations.get(supplied);ownerState.confirmations.delete(supplied);\n if(!prepared||prepared.expiresErreur';\n throw error;\n }finally{ownerState.activationLoading=false}\n}\nfunction ownerRenderDefinition(selector,pairs){\n const root=q(selector);if(!root)return;root.replaceChildren();\n pairs.forEach(pair=>{const dt=document.createElement('dt');dt.textContent=pair[0];const dd=document.createElement('dd');dd.textContent=pair[1];root.append(dt,dd)});\n}\nfunction ownerDeliveryPill(group,label){\n const state=document.createElement('span');\n state.className='pill '+(group==='delivered'?'ok':group==='failed'?'bad':group==='waiting'?'warn':'info');\n state.textContent=ownerText(label,'Inconnu');\n return state;\n}\nfunction ownerRenderDelivery(delivery){\n const counts=delivery&&delivery.counts||{};\n ownerSetText('#ownerDeliveryWaiting',counts.waiting||0);\n ownerSetText('#ownerDeliverySent',counts.sent||0);\n ownerSetText('#ownerDeliveryDelivered',counts.delivered||0);\n ownerSetText('#ownerDeliveryFailed',counts.failed||0);\n ownerSetText('#ownerDeliveryAlertCount',counts.open_delivery_alerts||0);\n\n const recent=Array.isArray(delivery&&delivery.recent_messages)?delivery.recent_messages:[];\n const recentRoot=q('#ownerDeliveryRecent');\n if(recentRoot){\n recentRoot.replaceChildren();\n if(!recent.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucun SMS réel suivi pour le moment.';recentRoot.appendChild(empty)}\n recent.forEach(item=>{\n const row=document.createElement('div');row.className='owner-control-row';\n const copy=document.createElement('div');\n const title=document.createElement('b');\n title.textContent=ownerText(item.document_number,item.message_id_suffix?'SMS …'+ownerText(item.message_id_suffix):'SMS');\n const meta=document.createElement('small');\n meta.textContent=[ownerText(item.provider_status),dt(item.occurred_at)].filter(Boolean).join(' · ');\n copy.append(title,meta);\n row.append(copy,ownerDeliveryPill(item.state_group,item.state_label));\n recentRoot.appendChild(row);\n });\n }\n\n const failures=Array.isArray(delivery&&delivery.open_failures)?delivery.open_failures:[];\n const failureRoot=q('#ownerDeliveryFailures');\n if(failureRoot){\n failureRoot.replaceChildren();\n if(!failures.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune alerte de livraison ouverte.';failureRoot.appendChild(empty)}\n failures.forEach(item=>{\n const row=document.createElement('div');row.className='owner-control-row';\n const copy=document.createElement('div');\n const title=document.createElement('b');title.textContent=ownerText(item.title,'Échec de livraison SMS');\n const meta=document.createElement('small');\n meta.textContent=['SMS …'+ownerText(item.message_id_suffix,'—'),ownerText(item.error_code,'code inconnu'),dt(item.occurred_at)].join(' · ');\n copy.append(title,meta);\n row.append(copy,ownerDeliveryPill('failed','À traiter'));\n failureRoot.appendChild(row);\n });\n }\n\n const plan=delivery&&delivery.test_sms_plan||{};\n const completed=plan.approval_status==='executed';\n const safeReady=Boolean(plan.ready_to_approve&&plan.recipient_configured&&plan.send_enabled&&plan.template_enabled&&plan.outbound_enabled);\n const planPill=q('#ownerTestSmsPill');\n if(planPill){planPill.className='pill '+(completed?'ok':safeReady?'warn':'info');planPill.textContent=completed?'Test livré':safeReady?'Prêt à valider':'Bloqué en sécurité'}\n ownerRenderDefinition('#ownerTestSmsSummary',[\n ['Préparation',plan.prepared?'Créée':'À créer'],\n ['Modèle',plan.template_enabled?'Activé':'Désactivé'],\n ['Destinataire',plan.recipient_configured?'Configuré':'À renseigner'],\n ['Validation humaine',plan.approval_status==='executed'?'Consommée':plan.approval_status==='approved'?'Accordée':plan.approval_status==='pending'?'En attente':'Requise'],\n ['Limite',ownerText(plan.max_messages,1)+' SMS maximum'],\n ['Relance automatique',plan.automatic_retry?'Activée':'Interdite'],\n ['Canaux sortants',plan.outbound_enabled?'Activés':'Coupés']\n ]);\n const blockerRoot=q('#ownerTestSmsBlockers');\n if(blockerRoot){\n blockerRoot.replaceChildren();\n const labels={\n template_disabled:'Le modèle de test reste désactivé.',\n human_approval_missing:'Une validation humaine est obligatoire.',\n recipient_missing:'Aucun numéro de test n’est enregistré.',\n send_disabled:'L’exécution de l’envoi est désactivée.',\n outbound_disabled:'Les communications sortantes restent coupées.',\n not_prepared:'Le plan de test n’est pas encore préparé.'\n };\n const blocked=Array.isArray(plan.blocked_reasons)?plan.blocked_reasons:[];\n blocked.forEach(code=>{const row=document.createElement('div');row.className='owner-blocker';row.textContent=labels[code]||ownerText(code);blockerRoot.appendChild(row)});\n }\n ownerSetText('#ownerTestSmsNote',completed?'Un SMS a été livré. Le quota est consommé et le mécanisme est refermé.':safeReady?'Le test attend votre validation explicite.':'Aucun SMS ne peut partir depuis ce bloc.');\n}\nfunction ownerRenderAutonomy(snapshot){\n const approvals=Array.isArray(snapshot.pending_approvals)?snapshot.pending_approvals:[];\n const approvalRoot=q('#ownerApprovalList');ownerSetText('#ownerApprovalCount',approvals.length);\n if(approvalRoot){\n approvalRoot.replaceChildren();\n if(!approvals.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune validation en attente.';approvalRoot.appendChild(empty)}\n approvals.forEach(item=>{const row=document.createElement('div');row.className='owner-control-row';const copy=document.createElement('div');const title=document.createElement('b');title.textContent=ownerText(item.summary,item.action_key);const preparation=item.action_key==='send_twilio_test_sms';const meta=document.createElement('small');meta.textContent=preparation?'Préparation sans envoi · destinataire manquant':ownerText(item.action_key)+' · risque '+ownerText(item.risk_level);copy.append(title,meta);const state=document.createElement('span');state.className='pill '+(preparation?'info':'warn');state.textContent=preparation?'À configurer':'À valider';row.append(copy,state);approvalRoot.appendChild(row)});\n }\n const rules=Array.isArray(snapshot.automation_candidates)?snapshot.automation_candidates:[];\n const automationRoot=q('#ownerAutomationList');ownerSetText('#ownerAutomationCount',rules.length);\n if(automationRoot){\n automationRoot.replaceChildren();\n if(!rules.length){const empty=document.createElement('div');empty.className='empty';empty.textContent='Aucune règle analysée.';automationRoot.appendChild(empty)}\n rules.forEach(rule=>{const row=document.createElement('div');row.className='owner-control-row';const copy=document.createElement('div');const title=document.createElement('b');title.textContent=ownerText(rule.rule_code);const meta=document.createElement('small');meta.textContent=ownerText(rule.candidate_count,0)+' candidat(s) · '+ownerText(rule.risk_level);copy.append(title,meta);const state=document.createElement('span');state.className='pill '+(rule.rule_enabled?'ok':'info');state.textContent=rule.rule_enabled?'Active':'Désactivée';row.append(copy,state);automationRoot.appendChild(row)});\n }\n const policy=snapshot.communication_policy||{};\n ownerRenderDefinition('#ownerPolicySummary',[\n ['Sortant',policy.outbound_enabled?'Activé':'Coupé'],\n ['SMS',policy.sms_sender_configured?'Configuré':'Expéditeur manquant'],\n ['Appels',policy.voice_caller_configured?'Configurés':'Émission coupée'],\n ['Jours fériés',policy.holiday_calendar_ready?'Prêts':'Calendrier manquant'],\n ['Version',ownerText(policy.policy_version,'—')]\n ]);\n const calendars=Array.isArray(snapshot.calendar_connections)?snapshot.calendar_connections:[];\n const calendar=calendars[0]||{};\n ownerRenderDefinition('#ownerCalendarSummary',[\n ['Compte',ownerText(calendar.account_email,'Aucun')],\n ['État',ownerText(calendar.status,'Non configuré')],\n ['Synchronisation',ownerText(calendar.sync_direction,'none')],\n ['Lecture',calendar.read_verified?'Vérifiée':'Non vérifiée'],\n ['Écriture',calendar.write_verified?'Vérifiée':'Interdite']\n ]);\n ownerRenderDelivery(snapshot.delivery||{});\n}\nfunction ownerRenderActivation(activation){\n const steps=activation&&activation.steps||{};\n const definitions=[\n ['holiday_calendar','Jours fériés','Règles françaises 2026–2027'],\n ['owner_identity','Identité dirigeant','Connexion personnelle et droits'],\n ['google_calendar','Google Calendar','Lecture, écriture et conflits'],\n ['sms_sender','Expéditeur SMS','Numéro Twilio compatible'],\n ['email_sender','Expéditeur e-mail','Compte Gmail vérifié'],\n ['communication_policy','Politique d’envoi','Validation humaine obligatoire'],\n ['outbox','Worker d’envoi','Effets externes désactivés']\n ];\n const root=q('#ownerActivationSteps');\n let completed=0;\n if(root){\n root.replaceChildren();\n definitions.forEach(item=>{\n const key=item[0],step=steps[key]||{},ready=Boolean(step.ready);\n if(ready)completed++;\n const row=document.createElement('div');row.className='owner-activation-step';\n const copy=document.createElement('div');\n const title=document.createElement('b');title.textContent=item[1];\n const meta=document.createElement('small');\n if(key==='holiday_calendar'&&step.details)meta.textContent='Couverture jusqu’au '+ownerText(step.details.coverage_through,'—');\n else if(key==='google_calendar'&&step.details)meta.textContent=Array.isArray(step.details.blockers)&&step.details.blockers.length?'Connexion ou vérification requise':'Synchronisation prête';\n else if(key==='owner_identity')meta.textContent=step.auth_linked?'Compte lié, validation récente requise':'Compte personnel à lier';\n else meta.textContent=item[2];\n copy.append(title,meta);\n const pill=document.createElement('span');\n pill.className='pill '+(ready?'ok':step.status==='human_approval_required'?'warn':'info');\n pill.textContent=ready?'Prêt':step.status==='human_approval_required'?'À valider':'À faire';\n row.append(copy,pill);root.appendChild(row);\n });\n }\n const total=definitions.length;\n ownerSetText('#ownerActivationProgress',completed+'/'+total+' prêts');\n const state=q('#ownerActivationState');\n if(state){\n const ready=activation.safe_state==='ready_for_human_activation';\n state.className='pill '+(ready?'ok':'warn');\n state.textContent=ready?'Prêt à valider':'Verrouillé en sécurité';\n }\n const next=q('#ownerActivationNext');\n if(next){\n next.replaceChildren();\n const actions=Array.isArray(activation.next_actions)?activation.next_actions:[];\n if(!actions.length){\n const done=document.createElement('div');done.className='owner-blocker ok';done.textContent='Tous les prérequis sont réunis. Une validation humaine reste nécessaire.';next.appendChild(done);\n }else{\n actions.forEach((action,index)=>{\n const row=document.createElement('div');row.className='owner-next-item';\n const badge=document.createElement('span');badge.className='owner-next-index';badge.textContent=String(index+1);\n const label=document.createElement('span');label.textContent=ownerText(action.label,action.key);\n row.append(badge,label);next.appendChild(row);\n });\n }\n }\n}\nfunction ownerSummarize(action,result){\n const data=result&&result.data||{};\n if(action==='get_autonomy_status'){\n const counts=data.counts||{};\n return 'Validations : '+ownerText(counts.pending_approvals,0)+' · règles actives : '+ownerText(counts.enabled_automation_rules,0)+' · outbox : '+ownerText(counts.pending_outbox,0);\n }\n if(action==='get_delivery_status'){\n const counts=data.counts||{};\n return 'SMS en attente : '+ownerText(counts.waiting,0)+' · envoyés : '+ownerText(counts.sent,0)+' · livrés : '+ownerText(counts.delivered,0)+' · échecs : '+ownerText(counts.failed,0);\n }\n if(action==='get_activation_readiness'){\n const steps=data.steps||{},values=Object.values(steps),ready=values.filter(step=>step&&step.ready).length;\n return ready+'/'+values.length+' prérequis prêts · '+(Array.isArray(data.next_actions)?data.next_actions.length:0)+' action(s) restante(s) · zéro exécution n8n';\n }\n if(action==='owner_daily_briefing'){\n const parts=[\n ['rendez-vous',data.appointments],\n ['urgences',data.urgent_requests],\n ['tâches en retard',data.overdue_tasks],\n ['validations',data.pending_approvals],\n ['devis à suivre',data.quotes_to_follow_up],\n ['factures échues',data.overdue_invoices]\n ].map(x=>x[0]+' : '+(Array.isArray(x[1])?x[1].length:0));\n return parts.join(' · ');\n }\n if(Array.isArray(data))return data.length+' résultat(s).';\n return result.assistant_message||'Résultat prêt.';\n}\nqa('[data-owner-action]').forEach(button=>{\n button.onclick=async()=>{\n const action=button.dataset.ownerAction;\n button.disabled=true;\n ownerSetText('#ownerCommandResult','Exécution…');\n try{\n const result=await ownerAction(action,{limit:10,status:'all',minimum_days_overdue:0});\n if(action==='get_autonomy_status')ownerRenderAutonomy(result.data||{});\n if(action==='get_delivery_status')ownerRenderDelivery(result.data||{});\n if(action==='get_activation_readiness'){ownerRenderActivation(result.data||{});ownerState.activationLoaded=true}\n ownerSetText('#ownerCommandResult',ownerSummarize(action,result));\n toast(result.assistant_message||'Résultat propriétaire prêt');\n }catch(error){\n ownerSetText('#ownerCommandResult',ownerText(error.message));\n toast(ownerText(error.message),false);\n }finally{button.disabled=!(ownerState.caps&&ownerState.caps.enabled)}\n };\n});\nfunction ownerStopVoice(message){\n if(ownerState.channel)try{ownerState.channel.close()}catch{}\n if(ownerState.pc)try{ownerState.pc.close()}catch{}\n if(ownerState.stream)ownerState.stream.getTracks().forEach(track=>track.stop());\n if(ownerState.audio)ownerState.audio.remove();\n ownerState.channel=null;ownerState.pc=null;ownerState.stream=null;ownerState.audio=null;ownerState.toolCalls.clear();\n const orb=q('#ownerOrb');if(orb)orb.classList.remove('live');\n const start=q('#ownerVoiceStart');if(start){start.disabled=!(ownerState.caps&&ownerState.caps.voice_available);start.textContent='Parler à l’assistante'}\n const stop=q('#ownerVoiceStop');if(stop)stop.disabled=true;\n if(message)ownerSetTranscript(message,true);\n}\nasync function ownerHandleTool(event){\n const callId=ownerText(event.call_id);\n const name=ownerText(event.name);\n if(!callId||!name||ownerState.toolCalls.has(callId))return;\n ownerState.toolCalls.add(callId);\n let args={};\n try{args=event.arguments?JSON.parse(event.arguments):{}}catch{args={}}\n let output;\n try{output=await ownerAction(name,args)}catch(error){output={ok:false,action_completed:false,execution_state:'failed',error:ownerText(error.message)}}\n if(ownerState.channel&&ownerState.channel.readyState==='open'){\n ownerState.channel.send(JSON.stringify({type:'conversation.item.create',item:{type:'function_call_output',call_id:callId,output:JSON.stringify(output)}}));\n ownerState.channel.send(JSON.stringify({type:'response.create'}));\n }\n}\nfunction ownerHandleRealtime(raw){\n let event;try{event=JSON.parse(raw)}catch{return}\n if(event.type==='response.function_call_arguments.done')ownerHandleTool(event);\n if(event.type==='conversation.item.input_audio_transcription.completed'&&event.transcript)ownerSetTranscript('\\nVous : '+ownerText(event.transcript).trim()+'\\n',true);\n if(event.type==='input_audio_buffer.speech_started')ownerSetText('#ownerVoiceValue','Écoute');\n if(event.type==='input_audio_buffer.speech_stopped')ownerSetText('#ownerVoiceValue','Analyse');\n if(event.type==='response.created')ownerSetText('#ownerVoiceValue','Réflexion');\n if(event.type==='response.output_audio.delta')ownerSetText('#ownerVoiceValue','Réponse vocale');\n if(event.type==='response.done')ownerSetText('#ownerVoiceValue','Prête');\n const delta=event.delta;\n if(typeof delta==='string'&&['response.audio_transcript.delta','response.output_audio_transcript.delta','response.output_text.delta'].includes(event.type)){if(!ownerState.assistantLineOpen){ownerSetTranscript('\\nAssistante : ',true);ownerState.assistantLineOpen=true}ownerSetTranscript(delta,true)}\n if(event.type==='response.done')ownerState.assistantLineOpen=false;\n if(event.type==='conversation.item.input_audio_transcription.failed')ownerSetTranscript('\\nJe n’ai pas compris clairement la dernière phrase. Répétez uniquement l’information utile.\\n',true);\n if(event.type==='error'){ownerSetTranscript('\\nLa session vocale a rencontré un problème. Réessayez.\\n',true);ownerTrackAction('voice_session','bad','Session vocale interrompue')}\n}\nasync function ownerStartVoice(){\n if(!ownerState.caps||!ownerState.caps.voice_available)return;\n ownerTrackAction('voice_session','pending','Connexion au canal vocal français');\n const start=q('#ownerVoiceStart');if(start){start.disabled=true;start.textContent='Connexion…'}\n try{\n if(ownerState.pc||ownerState.stream)ownerStopVoice('');\n ownerState.stream=await navigator.mediaDevices.getUserMedia({audio:{echoCancellation:true,noiseSuppression:true,autoGainControl:true,channelCount:{ideal:1}},video:false});\n ownerState.pc=new RTCPeerConnection();\n ownerState.audio=document.createElement('audio');ownerState.audio.autoplay=true;ownerState.audio.playsInline=true;ownerState.audio.hidden=true;document.body.appendChild(ownerState.audio);\n ownerState.pc.ontrack=event=>{ownerState.audio.srcObject=event.streams[0]};\n ownerState.pc.onconnectionstatechange=()=>{const state=ownerState.pc?.connectionState||'';if(state==='connected')ownerSetText('#ownerVoiceValue','Prête');if(state==='failed'){ownerTrackAction('voice_session','bad','Connexion WebRTC échouée');ownerStopVoice('\\nConnexion vocale interrompue.\\n')}if(state==='disconnected')ownerSetText('#ownerVoiceValue','Reconnexion…')};\n ownerState.pc.oniceconnectionstatechange=()=>{if(ownerState.pc?.iceConnectionState==='failed')ownerSetTranscript('\\nLa connexion audio réseau a échoué.\\n',true)};\n ownerState.channel=ownerState.pc.createDataChannel('oai-events');\n ownerState.channel.onmessage=event=>ownerHandleRealtime(event.data);\n ownerState.channel.onerror=()=>{ownerTrackAction('voice_session','bad','Canal de contrôle indisponible');ownerSetTranscript('\\nLe canal de contrôle vocal a rencontré une erreur.\\n',true)};\n ownerState.channel.onopen=()=>{\n ownerTrackAction('voice_session','ok','Agent connecté · français de France');\n const orb=q('#ownerOrb');if(orb)orb.classList.add('live');\n if(start)start.textContent='Assistante connectée';\n const stop=q('#ownerVoiceStop');if(stop)stop.disabled=false;\n ownerSetTranscript('Session connectée. Vous pouvez parler.\\n',false);\n };\n ownerState.channel.onclose=()=>ownerStopVoice('\\nSession terminée.');\n ownerState.stream.getTracks().forEach(track=>ownerState.pc.addTrack(track,ownerState.stream));\n const offer=await ownerState.pc.createOffer();\n await ownerState.pc.setLocalDescription(offer);\n if(ownerState.pc.iceGatheringState!=='complete')await new Promise(resolve=>{let done=false;const finish=()=>{if(done)return;done=true;clearTimeout(timer);ownerState.pc?.removeEventListener('icegatheringstatechange',check);resolve()};const check=()=>{if(ownerState.pc?.iceGatheringState==='complete')finish()};const timer=setTimeout(finish,1800);ownerState.pc.addEventListener('icegatheringstatechange',check)});\n const token=await ownerAuthToken();\n const voiceChoice=encodeURIComponent(ownerText(q('#ownerVoiceProfile')?.value||'cedar'));\n const turnChoice=encodeURIComponent(ownerText(q('#ownerTurnProfile')?.value||'patient'));\n const response=await fetch('/api/owner/session?voice='+voiceChoice+'&turn='+turnChoice,{\n method:'POST',\n headers:{'content-type':'application/sdp','x-csrf-token':csrf,...(token?{'x-owner-access-token':token}:{})},\n body:ownerState.pc.localDescription?.sdp||offer.sdp\n });\n if(!response.ok){\n let message='session_vocale_refusee';\n try{const failure=await response.json();message=failure.error||message}catch{}\n throw new Error(message);\n }\n const answer=await response.text();\n await ownerState.pc.setRemoteDescription({type:'answer',sdp:answer});\n }catch(error){\n ownerTrackAction('voice_session','bad','Connexion vocale impossible');\n ownerStopVoice('\\nConnexion vocale impossible. Vérifiez le microphone puis réessayez.');\n toast('Mode vocal indisponible',false);\n }\n}\nconst ownerStart=q('#ownerVoiceStart');if(ownerStart)ownerStart.onclick=ownerStartVoice;\nconst ownerStop=q('#ownerVoiceStop');if(ownerStop){ownerStop.disabled=true;ownerStop.onclick=()=>ownerStopVoice('\\nSession arrêtée.')}\nconst ownerAuthRequest=q('#ownerAuthRequest');if(ownerAuthRequest)ownerAuthRequest.onclick=ownerRequestMagicLink;\nconst ownerAuthLogout=q('#ownerAuthLogout');if(ownerAuthLogout)ownerAuthLogout.onclick=ownerLogoutStrongIdentity;\nconst ownerNav=q('.nav button[data-view=\"owner\"]');if(ownerNav)ownerNav.addEventListener('click',ownerFetchCaps);\nwindow.addEventListener('beforeunload',()=>ownerStopVoice(''));\nconst ownerAuthCallback=sessionStorage.getItem('piscine_owner_auth_callback_v1')==='1';\nif(ownerAuthCallback){\n sessionStorage.removeItem('piscine_owner_auth_callback_v1');\n showView('owner');\n if(location.hash!=='#owner')history.replaceState(null,'',location.pathname+(location.search||'')+'#owner');\n toast(ownerAuthLoad()?'Identité reçue, vérification en cours…':'Lien de connexion refusé',Boolean(ownerAuthLoad()));\n}\nif(ownerAuthCallback||location.hash==='#owner')void ownerFetchCaps();\n`;\n",[],[1122,1273],"2cb4c24f-2360-4ec8-a516-88f20b91d51c","owner-runtime-v13.ts","01a008e7-12ca-757f-ba31-b8f9e0289132",["D",1786855756508],"import { recordOwnerVoiceEvent } from \"./owner-voice-observability.ts\";\nimport { buildOwnerSessionConfig } from \"./owner-agent-v13.ts\";\nimport { callOwnerTool, ownerBridgeStatus } from \"./owner-bridge-v13.ts\";\nimport type { OwnerAuthStatus } from \"./owner-auth.ts\";\nimport { resolveTenantContext } from \"./platform-auth-v14.ts\";\n\nconst OPENAI_API_KEY = Deno.env.get(\"OPENAI_API_KEY\") || \"\";\nconst OPENAI_PROJECT_ID = Deno.env.get(\"PLATFORM_OPENAI_PROJECT_ID\") || Deno.env.get(\"PISCINE_OPENAI_PROJECT_ID\") || \"\";\nconst MODEL = Deno.env.get(\"PLATFORM_REALTIME_MODEL\") || Deno.env.get(\"PISCINE_REALTIME_MODEL\") || \"gpt-realtime-2.1\";\nconst VOICE = Deno.env.get(\"PLATFORM_REALTIME_VOICE\")\n || Deno.env.get(\"PISCINE_REALTIME_VOICE_V3\")\n || Deno.env.get(\"PISCINE_REALTIME_VOICE_V2\")\n || Deno.env.get(\"PISCINE_REALTIME_VOICE\")\n || \"cedar\";\n\nconst SUPPORTED_VOICES = new Set([\"cedar\"]);\nconst SUPPORTED_TURN_PROFILES = new Set([\"patient\", \"balanced\"]);\n\nfunction resolveVoice(requested: unknown): string {\n const requestedVoice = String(requested || \"\").trim().toLowerCase();\n if (SUPPORTED_VOICES.has(requestedVoice)) return requestedVoice;\n return \"cedar\";\n}\n\nfunction resolveEagerness(profile: unknown): \"low\" | \"auto\" {\n return String(profile || \"\").trim().toLowerCase() === \"balanced\" ? \"auto\" : \"low\";\n}\n\nconst STAFF_ID = Deno.env.get(\"PLATFORM_OWNER_STAFF_ID\") || Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\";\n\nexport const OWNER_COCKPIT_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n \"create_task\",\n \"prepare_approval\",\n \"complete_owner_session\",\n]);\n\nconst READ_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n]);\n\nfunction unique(values: string[]): string[] {\n return [...new Set(values)];\n}\n\nexport function ownerCapabilities(\n auth: OwnerAuthStatus,\n identity: Record = {},\n) {\n const bridge = ownerBridgeStatus();\n const staffId = String(identity.staff_id || identity.id || STAFF_ID || \"\").trim();\n const consoleBlockers: string[] = [];\n if (!bridge.enabled) consoleBlockers.push(\"owner_direct_gateway_disabled\");\n if (!bridge.configured) consoleBlockers.push(\"owner_direct_gateway_not_configured\");\n\n const voiceBlockers: string[] = [];\n if (!bridge.voice_gate_enabled) voiceBlockers.push(\"owner_voice_mode_disabled\");\n if (!OPENAI_API_KEY) voiceBlockers.push(\"openai_api_not_configured\");\n if (!staffId) voiceBlockers.push(\"owner_staff_identity_missing\");\n if (!auth.verified) {\n voiceBlockers.push(\"owner_strong_identity_required_for_voice\");\n }\n\n const commitBlockers = [\n ...(!auth.verified ? [\"owner_strong_identity_required_for_commit\"] : []),\n ];\n const consoleAvailable = bridge.available;\n const voiceAvailable = consoleAvailable\n && bridge.voice_gate_enabled\n && Boolean(OPENAI_API_KEY)\n && Boolean(staffId)\n && auth.verified;\n\n return {\n ok: true,\n schema_version: \"4.0\",\n enabled: consoleAvailable,\n configured: bridge.configured,\n console_available: consoleAvailable,\n voice_available: voiceAvailable,\n gateway_mode: bridge.gateway_mode,\n gateway_transport: bridge.gateway_transport,\n gateway_published: bridge.published,\n direct_gateway_enabled: bridge.enabled,\n commit_available: auth.verified,\n identity_configured: Boolean(staffId) && auth.configured,\n strong_identity_verified: auth.verified,\n owner_auth: {\n configured: auth.configured,\n verified: auth.verified,\n email_hint: auth.email_hint,\n provider: auth.provider,\n error: auth.error || null,\n },\n model: MODEL,\n voice: \"cedar\",\n voice_profiles: [\n { key: \"cedar\", label: \"Français neutre\", recommended: true },\n ],\n turn_profiles: [\n { key: \"patient\", label: \"Patient · phrases longues\", eagerness: \"low\" },\n { key: \"balanced\", label: \"Équilibré · échanges rapides\", eagerness: \"auto\" },\n ],\n voice_quality_release: \"voice-v20-fr-fr-coherent\",\n blockers: unique([...consoleBlockers, ...voiceBlockers, ...commitBlockers]),\n console_blockers: consoleBlockers,\n voice_blockers: voiceBlockers,\n commit_blockers: commitBlockers,\n n8n_execution_used: false,\n safeguards: {\n reads: \"direct_supabase_and_cockpit_api\",\n writes: \"confirmed_cockpit_actions\",\n approvals: \"two_step_confirmation\",\n external_delivery: \"explicit_confirmation_required\",\n strong_identity: \"required_for_commit\",\n idempotency: true,\n audit_receipts: true,\n n8n_execution_consumed: false,\n },\n actions: [...OWNER_COCKPIT_ACTIONS].map((key) => ({\n key,\n kind: READ_ACTIONS.has(key) ? \"read\" : \"write\",\n available: consoleAvailable,\n execution: READ_ACTIONS.has(key) ? \"read_only\" : \"preview_only\",\n gateway: \"direct_supabase\",\n n8n_execution_used: false,\n })),\n };\n}\n\nexport async function executeOwnerCockpitAction(\n action: string,\n data: Record,\n sessionNonce: string,\n identity: Record = {},\n accessToken = \"\",\n) {\n if (!OWNER_COCKPIT_ACTIONS.has(action)) {\n return {\n ok: false,\n action_completed: false,\n execution_state: \"failed\",\n error: \"owner_action_not_allowed\",\n safe_to_announce: false,\n gateway_mode: \"direct_supabase\",\n n8n_execution_used: false,\n };\n }\n\n return callOwnerTool(action, data, {\n ...identity,\n id: identity.staff_id || identity.id || STAFF_ID,\n staff_id: identity.staff_id || identity.id || STAFF_ID,\n role: identity.role || \"owner\",\n correlation_id: `cockpit-owner-${sessionNonce}`,\n }, accessToken);\n}\n\nexport async function createOwnerRealtimeCall(\n sdp: string,\n sessionNonce: string,\n auth: OwnerAuthStatus,\n identity: Record = {},\n options: { voice?: unknown; turnProfile?: unknown } = {},\n): Promise<{ ok: boolean; status: number; sdp?: string; error?: string }> {\n const capabilities = ownerCapabilities(auth, identity);\n const staffId = String(identity.staff_id || identity.id || STAFF_ID || \"\").trim();\n if (!capabilities.voice_available) {\n const blocker = capabilities.voice_blockers[0]\n || capabilities.console_blockers[0]\n || \"owner_voice_unavailable\";\n return { ok: false, status: 409, error: blocker };\n }\n if (!sdp.startsWith(\"v=0\") || sdp.length > 64_000) {\n return { ok: false, status: 400, error: \"invalid_sdp_offer\" };\n }\n\n const tenantContext = await resolveTenantContext(identity.tenant_id || \"\");\n const selectedVoice = resolveVoice(options.voice);\n const requestedTurnProfile = String(options.turnProfile || \"patient\").trim().toLowerCase();\n const turnProfile = SUPPORTED_TURN_PROFILES.has(requestedTurnProfile) ? requestedTurnProfile : \"patient\";\n const session = buildOwnerSessionConfig(MODEL, selectedVoice, {\n ...(tenantContext || {}),\n channel: \"cockpit_webrtc\",\n actor_type: \"staff\",\n actor_id: staffId,\n tenant_id: identity.tenant_id || tenantContext?.tenant_id || \"\",\n organization_name: tenantContext?.organization_name || identity.organization_name || \"\",\n vertical_key: tenantContext?.vertical_key || identity.vertical_key || \"\",\n vertical_display_name: tenantContext?.vertical_display_name || identity.vertical_display_name || \"\",\n role: identity.role || \"owner\",\n gateway_mode: \"direct_supabase\",\n console_available: capabilities.console_available,\n commit_available: capabilities.commit_available,\n n8n_execution_used: false,\n selected_voice: selectedVoice,\n turn_profile: turnProfile,\n correlation_id: `cockpit-owner-${sessionNonce}`,\n }, { eagerness: resolveEagerness(turnProfile) });\n const form = new FormData();\n form.set(\"sdp\", sdp);\n form.set(\"session\", JSON.stringify(session));\n\n const headers: Record = {\n Authorization: `Bearer ${OPENAI_API_KEY}`,\n };\n if (OPENAI_PROJECT_ID) headers[\"OpenAI-Project\"] = OPENAI_PROJECT_ID;\n\n const startedAt = Date.now();\n void recordOwnerVoiceEvent({ event_code: \"session_requested\", stage: \"server\", model: MODEL, voice: selectedVoice, turn_profile: turnProfile }).catch(() => {});\n\n const response = await fetch(\"https://api.openai.com/v1/realtime/calls\", {\n method: \"POST\",\n headers,\n body: form,\n signal: AbortSignal.timeout(15_000),\n });\n const answer = (await response.text()).slice(0, 100_000);\n if (!response.ok) {\n return { ok: false, status: 502, error: \"openai_realtime_session_failed\" };\n }\n if (!answer.startsWith(\"v=0\")) {\n return { ok: false, status: 502, error: \"invalid_openai_sdp_answer\" };\n }\n return { ok: true, status: 200, sdp: answer };\n}\n",[],[1122,1280],"597aea36-3959-4e6c-af73-050d83cf3230","owner-bridge-v13.ts","01a008e7-12ca-757f-ba31-b517c16fcb6e",["D",1786855756508],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SUPABASE_URL = (Deno.env.get(\"PLATFORM_OWNER_SUPABASE_URL\") || Deno.env.get(\"PISCINE_OWNER_SUPABASE_URL\") || \"\").replace(/\\/$/, \"\");\nconst SUPABASE_PUBLISHABLE_KEY = Deno.env.get(\"PLATFORM_OWNER_SUPABASE_PUBLISHABLE_KEY\") || Deno.env.get(\"PISCINE_OWNER_SUPABASE_PUBLISHABLE_KEY\") || \"\";\nconst DIRECT_SECRET = Deno.env.get(\"PLATFORM_OWNER_DIRECT_SECRET\") || Deno.env.get(\"PISCINE_OWNER_DIRECT_SECRET\") || \"\";\nconst DIRECT_ENABLED = Deno.env.get(\"PLATFORM_OWNER_DIRECT_ENABLED\") === \"true\"\n || Deno.env.get(\"PISCINE_OWNER_DIRECT_ENABLED\") === \"true\";\nconst OWNER_MODE_ENABLED = Deno.env.get(\"PLATFORM_OWNER_MODE_ENABLED\") === \"true\"\n || Deno.env.get(\"PISCINE_OWNER_MODE_ENABLED\") === \"true\";\nconst STAFF_ID = Deno.env.get(\"PLATFORM_OWNER_STAFF_ID\") || Deno.env.get(\"PISCINE_OWNER_STAFF_ID\") || \"\";\n\nconst OWNER_ACTIONS = new Set([\n \"owner_daily_briefing\",\n \"get_autonomy_status\",\n \"get_delivery_status\",\n \"get_activation_readiness\",\n \"list_priority_tasks\",\n \"find_client\",\n \"get_client_timeline\",\n \"list_pending_quotes\",\n \"list_overdue_invoices\",\n \"create_task\",\n \"prepare_approval\",\n \"complete_owner_session\",\n]);\n\nconst OWNER_READ_CACHE_TTL: Record = {\n owner_daily_briefing: 300,\n get_autonomy_status: 180,\n get_delivery_status: 120,\n get_activation_readiness: 120,\n list_priority_tasks: 120,\n find_client: 120,\n get_client_timeline: 120,\n list_pending_quotes: 120,\n list_overdue_invoices: 120,\n};\n\nfunction clean(value: unknown, max = 4000): string {\n return String(value ?? \"\").trim().slice(0, max);\n}\n\nfunction cacheKey(\n scope: string,\n action: string,\n args: Record,\n): string {\n return scope + \":\" + action + \":\" + JSON.stringify(args);\n}\n\nasync function ensureReadCache(): Promise {\n await sqlite.execute(`create table if not exists owner_direct_read_cache (\n cache_key text primary key,\n payload_json text not null,\n expires_at integer not null,\n updated_at text not null\n )`);\n}\n\nasync function readOwnerCache(\n scope: string,\n action: string,\n args: Record,\n): Promise | null> {\n const ttl = OWNER_READ_CACHE_TTL[action] || 0;\n if (!ttl) return null;\n await ensureReadCache();\n const result = await sqlite.execute({\n sql: `select payload_json from owner_direct_read_cache\n where cache_key=:cache_key and expires_at>unixepoch() limit 1`,\n args: { cache_key: cacheKey(scope, action, args) },\n });\n if (!result.rows.length) return null;\n try {\n return JSON.parse(String((result.rows[0] as Record).payload_json || \"{}\"));\n } catch {\n return null;\n }\n}\n\nasync function writeOwnerCache(\n scope: string,\n action: string,\n args: Record,\n payload: Record,\n): Promise {\n const ttl = OWNER_READ_CACHE_TTL[action] || 0;\n if (!ttl) return;\n await ensureReadCache();\n await sqlite.execute({\n sql: `insert into owner_direct_read_cache (\n cache_key,payload_json,expires_at,updated_at\n ) values (\n :cache_key,:payload_json,unixepoch()+:ttl,datetime('now')\n )\n on conflict(cache_key) do update set\n payload_json=excluded.payload_json,\n expires_at=excluded.expires_at,\n updated_at=excluded.updated_at`,\n args: {\n cache_key: cacheKey(scope, action, args),\n payload_json: JSON.stringify(payload).slice(0, 100_000),\n ttl,\n },\n });\n}\n\nexport function ownerBridgeStatus() {\n const configured = Boolean(\n SUPABASE_URL\n && SUPABASE_PUBLISHABLE_KEY\n && DIRECT_SECRET,\n );\n const available = DIRECT_ENABLED && configured;\n return {\n enabled: DIRECT_ENABLED,\n configured,\n published: DIRECT_ENABLED,\n available,\n console_available: available,\n voice_gate_enabled: OWNER_MODE_ENABLED,\n gateway_mode: \"direct_supabase\" as const,\n gateway_transport: \"edge_function\" as const,\n n8n_execution_used: false,\n n8n_budget_enforced: false,\n read_cache_enabled: true,\n };\n}\n\nexport function ownerBridgeConfigured(): boolean {\n return ownerBridgeStatus().available;\n}\n\nexport async function callOwnerTool(\n action: string,\n args: Record

Désignation	Qté	Unité	Prix HT	TVA	Total HT
Aucune ligne renseignée.

'+esc(x.numero_facture||'Achat')+' '+pill(x.ocr_statut||'en_attente')+'

'+esc(x.fournisseur||'Fournisseur')+'

Montant TTC'+money(x.total_ttc)+'

Date'+dateOnly(x.date_facture||x.created_at)+'

Votre activité.Une longueur d’avance.

Connexion sécurisée

Identité en cours de vérification.

Connexion en cours…

Créez votre mot de passe sécurisé.

Définir le mot de passe

À traiter maintenant

Priorités

Actions rapides

Prochains rendez-vous

${label(\"requests\",\"Demandes\")}

${label(\"appointments\",\"Agenda\")}

${label(\"customers\",\"Clients\")}

${label(\"documents\",\"Documents\")}

${label(\"pilot\",\"Pilotage\")}

Axes opérationnels

File de supervision

Accès directs

Missions

File des missions

Mission

Étapes

Preuves et engagements

${label(\"assistant\",\"Assistante IA\")}

Que puis-je faire pour vous ?

${label(\"settings\",\"Réglages\")}

Configuration d’exploitation

SMS technique unique

Profil chargé

Sécurité du compte

À compléter

Argent dormant

Sur quel numéro joindre un humain ?

Une action utile par document

'+(m.correct+m.sendQ+m.invoiceQ+m.sendI+m.collect)+' dossiers à faire avancer

Aucun document dans cette étape

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

Facture '+(invoice.statut==='envoyee'?'créée et envoyée':'créée')+'

Cycle devis → encaissement

'+((incomplete+toSend+toInvoice)||0)+' décisions utiles

Aucun document

'+(id?esc(d.numero||'Devis'):'Nouveau devis')+'

Prestations et matériel

'+money(m.pipeline)+' en mouvement

Aucun document ici

'+esc(quote.numero||'Devis')+' · '+money(quote.total_ttc)+'

Facture enregistrée et relue

'+esc(invoice.numero||'Facture')+' · '+money(invoice.total_ttc)+'

Paiement confirmé

'+esc(invoice.numero||'Facture')+' · '+money(invoice.total_ttc)+'

Historique récent

'+esc(req.description||req.objet||'Non renseigné')+'

'+esc(rdv.type_rdv||rdv.objet||'Intervention')+'

Votre activité.Une longueur d’avance.

Connexion

Connexion entreprise

Choisissez votre métier

Votre activité.Une longueur d’avance.

Connexion sécurisée

Votre activité.Une longueur d’avance.

Connexion sécurisée

Choisissez un nouveau mot de passe.

Mot de passe oublié

Votre métier, votre interface.

Inscription

Identité en cours de vérification.

Vérification en cours…

Choisissez votre nouveau mot de passe.

Changer le mot de passe

Votre comptabilité, sans jargon

Actions simples

À faire maintenant

Transactions récentes

Votre activité.
Une longueur d’avance.

Votre activité.
Une longueur d’avance.

Votre activité.
Une longueur d’avance.

Votre activité.
Une longueur d’avance.

History · api.ts