[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","cold36873","name","my-ai-proxy","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","263ab19c-6124-49c9-9f8e-73c8138ab7ce","main.ts","fileId","2a2fad5a-8de1-11f1-8ea3-1607ee4eb77e","parentId","branchId","da6a1c3b-8fb6-4682-8de7-560dfd238000","branchVersion",29,"latest",true,"createdAt",["D",1788256014292],28,"fileType","http","content","import { blob } from \"https://esm.town/v/std/blob\";\n\nconst DAILY_LIMIT_PER_USER = 35; // \"всё про всё\" — общий суточный лимит на юзера, все модели считаются вместе\nconst MAX_UNIQUE_IPS_PER_DAY = 50; // защита от спама новыми IP\nconst RATE_LIMIT_PER_MINUTE = 5; // макс запросов с одного IP за минуту\n\nconst MODEL_ROUTES: Record = {\n \"openai/gpt-oss-120b\": [\n { provider: \"groq\", id: \"openai/gpt-oss-120b\" },\n { provider: \"cerebras\", id: \"gpt-oss-120b\" },\n { provider: \"sambanova\", id: \"gpt-oss-120b\" },\n ],\n \"openai/gpt-oss-20b\": [\n { provider: \"groq\", id: \"openai/gpt-oss-20b\" },\n ],\n \"qwen/qwen3.6-27b\": [\n { provider: \"groq\", id: \"qwen/qwen3.6-27b\" },\n ],\n \"groq/compound\": [\n { provider: \"groq\", id: \"groq/compound\" },\n ],\n \"groq/compound-mini\": [\n { provider: \"groq\", id: \"groq/compound-mini\" },\n ],\n \"google/gemini-3.5-flash\": [\n { provider: \"google\", id: \"gemini-3.5-flash\" },\n ],\n \"google/gemini-3.1-flash-lite\": [\n { provider: \"google\", id: \"gemini-3.1-flash-lite\" },\n ],\n \"mistral-large-latest\": [\n { provider: \"mistral\", id: \"mistral-large-latest\" },\n ],\n \"openrouter/free\": [\n { provider: \"openrouter\", id: \"openrouter/free\" },\n ],\n \"meta-llama-3.3-70b\": [\n { provider: \"sambanova\", id: \"Meta-Llama-3.3-70B-Instruct\" },\n ],\n \"deepseek-v3\": [\n { provider: \"sambanova\", id: \"DeepSeek-V3.1\" },\n ],\n};\nconst DEFAULT_MODEL = \"openai/gpt-oss-120b\";\n\nconst IMAGE_GEN_VIRTUAL_MODELS = new Set([\"google/gemini-image\"]);\nconst POLLINATIONS_MIN_INTERVAL_MS = 15000;\nconst POLLINATIONS_THROTTLE_KEY = \"pollinations-throttle\";\nconst OVERLOAD_MESSAGE = \"Сервер перегружен, попробуйте через пару минут.\";\n// Показываем это вместо сырой ошибки провайдера, когда у модели закончился\n// лимит запросов к API (rate limit / quota) — пользователю такое понятнее\n// и не пугает техническими деталями\nconst PROVIDER_LIMIT_MESSAGE =\n \"Сервер перегружен — свободный лимит запросов к этой модели на сегодня закончился. Попробуйте, пожалуйста, ещё раз примерно через сутки, лучше всего с утра.\";\n\nconst PROVIDER_ENDPOINTS: Record = {\n groq: \"https://api.groq.com/openai/v1/chat/completions\",\n cerebras: \"https://api.cerebras.ai/v1/chat/completions\",\n google:\n \"https://generativelanguage.googleapis.com/v1beta/openai/chat/completions\",\n mistral: \"https://api.mistral.ai/v1/chat/completions\",\n openrouter: \"https://openrouter.ai/api/v1/chat/completions\",\n sambanova: \"https://api.sambanova.ai/v1/chat/completions\",\n};\n\nconst PROVIDER_ENV_KEYS: Record = {\n groq: \"GROQ_API_KEY\",\n cerebras: \"CEREBRAS_API_KEY\",\n google: \"GOOGLE_API_KEY\",\n mistral: \"MISTRAL_API_KEY\",\n openrouter: \"OPENROUTER_API_KEY\",\n sambanova: \"SAMBANOVA_API_KEY\",\n};\n\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Expose-Headers\": \"X-Quota-Used, X-Quota-Limit\",\n};\n\nfunction isRateLimitError(status: number, data: any): boolean {\n if (status === 429) return true;\n const code = data?.error?.code || data?.error?.type || \"\";\n const msg = (data?.error?.message || \"\").toLowerCase();\n return (\n code.includes(\"rate_limit\") ||\n code.includes(\"quota\") ||\n msg.includes(\"rate limit\") ||\n msg.includes(\"quota\")\n );\n}\n\nasync function callProviderStream(\n provider: string,\n modelId: string,\n messages: any[],\n) {\n const apiKey = Deno.env.get(PROVIDER_ENV_KEYS[provider]);\n const res = await fetch(PROVIDER_ENDPOINTS[provider], {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${apiKey}`,\n },\n body: JSON.stringify({\n model: modelId,\n messages,\n temperature: 0.7,\n stream: true,\n }),\n });\n\n if (!res.ok || !res.body) {\n let data: any = null;\n try {\n data = await res.json();\n } catch {\n data = null;\n }\n const rawMessage = data?.error?.message || data?.message ||\n (data ? JSON.stringify(data) : \"Пустой ответ провайдера\");\n return {\n ok: false as const,\n status: res.status || 502,\n data: {\n error: { message: `[${provider}] ${rawMessage}`, status: res.status },\n },\n };\n }\n\n return { ok: true as const, status: res.status, stream: res.body };\n}\n\nasync function routeRequestStream(virtualModel: string, messages: any[]) {\n const routes = MODEL_ROUTES[virtualModel] ?? MODEL_ROUTES[DEFAULT_MODEL];\n let last: { status: number; data: any } | null = null;\n\n for (const route of routes) {\n const result = await callProviderStream(route.provider, route.id, messages);\n if (result.ok) {\n return {\n status: result.status,\n stream: result.stream,\n data: null,\n provider: route.provider,\n };\n }\n last = { status: result.status, data: result.data };\n if (!isRateLimitError(result.status, result.data)) break;\n }\n\n // Если провалились все запасные провайдеры именно из-за лимита/квоты —\n // прячем техническую ошибку API за понятным сообщением для пользователя\n if (last && isRateLimitError(last.status, last.data)) {\n return {\n status: 503,\n stream: null,\n data: {\n error: { message: PROVIDER_LIMIT_MESSAGE, code: \"model_overloaded\" },\n },\n provider: null,\n };\n }\n\n return {\n status: last?.status ?? 500,\n stream: null,\n data: last?.data ?? { error: \"Все провайдеры недоступны\" },\n provider: null,\n };\n}\n\nfunction bufferToBase64(buf: ArrayBuffer): string {\n const bytes = new Uint8Array(buf);\n let binary = \"\";\n const chunkSize = 0x8000;\n for (let i = 0; i < bytes.length; i += chunkSize) {\n binary += String.fromCharCode(...bytes.subarray(i, i + chunkSize));\n }\n return btoa(binary);\n}\n\nasync function passesPollinationsThrottle(): Promise {\n let state: { last: number } = { last: 0 };\n try {\n state = (await blob.getJSON(POLLINATIONS_THROTTLE_KEY)) ?? { last: 0 };\n } catch {\n state = { last: 0 };\n }\n const now = Date.now();\n if (now - state.last < POLLINATIONS_MIN_INTERVAL_MS) return false;\n await blob.setJSON(POLLINATIONS_THROTTLE_KEY, { last: now });\n return true;\n}\n\nfunction extractPrompt(messages: any[]): string {\n const lastUser = [...messages].reverse().find((m) => m.role === \"user\");\n if (!lastUser) return \"\";\n const content = lastUser.content;\n if (typeof content === \"string\") return content;\n if (Array.isArray(content)) {\n return content.filter((p: any) => p.type === \"text\").map((p: any) => p.text)\n .join(\" \");\n }\n return \"\";\n}\n\nasync function generateImageAnonymous(prompt: string) {\n const seed = Math.floor(Math.random() * 1_000_000_000);\n const url =\n `https://image.pollinations.ai/prompt/${encodeURIComponent(prompt)}` +\n `?width=1024&height=1024&nologo=true&seed=${seed}`;\n let res: Response;\n try {\n res = await fetch(url);\n } catch {\n return { ok: false as const };\n }\n if (!res.ok) return { ok: false as const };\n const contentType = res.headers.get(\"content-type\") || \"image/jpeg\";\n const buf = await res.arrayBuffer();\n if (!buf || buf.byteLength === 0) return { ok: false as const };\n const b64 = bufferToBase64(buf);\n return { ok: true as const, image: `data:${contentType};base64,${b64}` };\n}\n\n// Проверяет rate limit по минуте для одного IP\nasync function checkMinuteRateLimit(ip: string): Promise {\n const minuteKey = `ratelimit-${ip}-${new Date().toISOString().slice(0, 16)}`; // по минуте\n let count = 0;\n try {\n count = (await blob.getJSON(minuteKey)) ?? 0;\n } catch {\n count = 0;\n }\n if (count >= RATE_LIMIT_PER_MINUTE) return false;\n await blob.setJSON(minuteKey, count + 1);\n return true;\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405, headers: cors });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"Некорректный запрос\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n }\n\n const messages = body.messages;\n if (!Array.isArray(messages)) {\n return new Response(\n JSON.stringify({ error: \"Поле messages обязательно\" }),\n {\n status: 400,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n },\n );\n }\n\n const ip = req.headers.get(\"cf-connecting-ip\") ||\n req.headers.get(\"x-forwarded-for\") || \"anon\";\n\n // Rate limit по минуте — защита от быстрого спама\n const passesMinuteLimit = await checkMinuteRateLimit(ip);\n if (!passesMinuteLimit) {\n return new Response(\n JSON.stringify({ error: \"Слишком много запросов. Подождите минуту.\" }),\n {\n status: 429,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n },\n );\n }\n\n // Валидация clientId — только безопасные символы\n const rawClientId = body.clientId;\n const validClientId = typeof rawClientId === \"string\" &&\n rawClientId.length >= 8 &&\n rawClientId.length <= 64 &&\n /^[a-zA-Z0-9_-]+$/.test(rawClientId);\n\n // clientId из тела запроса (для отображения пользователю)\n const clientId = validClientId ? rawClientId : null;\n\n const today = new Date().toISOString().slice(0, 10);\n const usersKey = `users-${today}`; // счётчики по clientId\n const ipsKey = `ips-${today}`; // счётчики по IP\n\n let users: Record = {};\n let ips: Record = {};\n try {\n users = (await blob.getJSON(usersKey)) ?? {};\n } catch {\n users = {};\n }\n try {\n ips = (await blob.getJSON(ipsKey)) ?? {};\n } catch {\n ips = {};\n }\n\n // Защита от слишком большого числа уникальных IP за день (спам-боты)\n const isNewIp = !(ip in ips);\n if (isNewIp && Object.keys(ips).length >= MAX_UNIQUE_IPS_PER_DAY) {\n return new Response(\n JSON.stringify({ error: \"Сервер перегружен, попробуйте завтра.\" }),\n {\n status: 503,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n },\n );\n }\n\n const usedByIp = ips[ip] ?? 0;\n const usedByClient = clientId ? (users[clientId] ?? 0) : usedByIp;\n\n // Общий суточный лимит \"на всё про всё\" — единый счётчик на все модели сразу\n const perUserLimit = DAILY_LIMIT_PER_USER;\n\n // Берём максимум из обоих счётчиков — обойти можно только оба сразу\n const effectiveUsed = Math.max(usedByIp, usedByClient);\n\n if (effectiveUsed >= perUserLimit) {\n return new Response(\n JSON.stringify({\n error: {\n message:\n `Ваш личный лимит на сегодня исчерпан (${effectiveUsed} из ${perUserLimit}). Попробуйте завтра.`,\n code: \"daily_limit\",\n },\n }),\n {\n status: 429,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n },\n );\n }\n\n const requestedModel = typeof body.model === \"string\"\n ? body.model\n : DEFAULT_MODEL;\n const isImageModel = IMAGE_GEN_VIRTUAL_MODELS.has(requestedModel);\n const model = isImageModel\n ? requestedModel\n : (MODEL_ROUTES[requestedModel] ? requestedModel : DEFAULT_MODEL);\n\n // Функция сохранения счётчиков (оба сразу)\n async function incrementCounters() {\n ips[ip] = usedByIp + 1;\n if (clientId) users[clientId] = usedByClient + 1;\n await blob.setJSON(ipsKey, ips);\n if (clientId) await blob.setJSON(usersKey, users);\n }\n\n if (isImageModel) {\n const prompt = extractPrompt(messages);\n if (!prompt) {\n return new Response(\n JSON.stringify({\n error: \"Нужен текстовый запрос для генерации картинки\",\n }),\n {\n status: 400,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n },\n );\n }\n\n const canProceed = await passesPollinationsThrottle();\n if (!canProceed) {\n return new Response(\n JSON.stringify({\n error: {\n message:\n \"Слишком часто просишь картинки — подожди несколько секунд и попробуй снова.\",\n code: \"image_busy\",\n },\n }),\n {\n status: 503,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n },\n );\n }\n\n const result = await generateImageAnonymous(prompt);\n if (!result.ok) {\n return new Response(\n JSON.stringify({\n error: { message: OVERLOAD_MESSAGE, code: \"model_overloaded\" },\n }),\n {\n status: 503,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n },\n );\n }\n\n await incrementCounters();\n return new Response(JSON.stringify({ image: result.image }), {\n status: 200,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed + 1),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n });\n }\n\n const result = await routeRequestStream(model, messages);\n\n if (!result.stream) {\n return new Response(JSON.stringify(result.data), {\n status: result.status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Quota-Used\": String(effectiveUsed),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n });\n }\n\n await incrementCounters();\n return new Response(result.stream, {\n status: result.status,\n headers: {\n \"Content-Type\": \"text/event-stream; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n \"X-Quota-Used\": String(effectiveUsed + 1),\n \"X-Quota-Limit\": String(perUserLimit),\n ...cors,\n },\n });\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1788256014292],"children",[],[35],"6a522ade-84a4-4443-8ebd-49a011e904ae",["D",1785613363984],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","6f6641cd-d0ac-4064-bfae-000abf1f70a9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019fbed8-1723-7015-8238-546cb712cf60","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":111},"org",{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Максат","avatar","https://lh3.googleusercontent.com/a/ACg8ocKukuJ_kXs2RuL-jVx1iWumuu0NzQO1hzn1j-dqUcivbjdPFg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":150,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":19,"_69":-5,"_70":71,"_72":37,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":151,"_95":152,"_97":153,"_99":53},[147],"files",[147],"counts",{"_136":77,"_137":138,"_139":77,"_31":140,"_141":142},[134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":135},[35],"pulls","branches",1,"forks",{"_143":145,"_146":77},"connections",{"_143":77,"_144":77},"count","unfilledCount",6,"emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":148,"_18":149},[],[35],["D",1785613363984],{"_11":12,"_115":111},{"_11":12,"_108":109,"_110":111,"_70":71,"_112":113,"_114":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_131":187,"_188":189,"_190":191,"_192":53,"_193":53,"_194":53,"_195":44,"_196":-5,"_197":-7,"_198":-7,"_199":77,"_200":53,"_201":53,"_202":-5,"_203":53,"_204":53,"_205":53,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":16,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]