[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_280":281,"_282":283},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",82,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","frontend/components/App.tsx","latestPath","fileId","01a09189-5662-71b2-beb6-9d19ff7710b2","name","App.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport jsQR from \"https://esm.sh/jsqr@1.4.0\";\n\ntype ResultState = {\n kind: \"idle\" | \"loading\" | \"ready\" | \"success\" | \"error\";\n message: string;\n tracking?: string;\n code?: string;\n status?: string | null;\n};\n\nfunction sleep(ms: number) {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nfunction extractTracking(raw: string) {\n const value = String(raw || \"\").trim();\n if (!value) return \"\";\n if (/^[A-Za-z0-9_-]{6,64}$/.test(value)) return value.toUpperCase();\n const ecotrackLike = value.match(/\\b[A-Z]{3,10}\\d{8,24}\\b/i);\n return ecotrackLike?.[0]?.toUpperCase() || \"\";\n}\n\nfunction normalizeStatus(value: unknown) {\n return String(value ?? \"\")\n .trim()\n .toLowerCase()\n .normalize(\"NFD\")\n .replace(/[\\u0300-\\u036f]/g, \"\")\n .replace(/[\\s-]+/g, \"_\");\n}\n\nexport function App() {\n const videoRef = useRef(null);\n const canvasRef = useRef(null);\n const streamRef = useRef(null);\n const scanningRef = useRef(false);\n const lastScanRef = useRef(\"\");\n const framesRef = useRef(0);\n\n const [cameraOn, setCameraOn] = useState(false);\n const [qrDetected, setQrDetected] = useState(false);\n const [integrationReady, setIntegrationReady] = useState(false);\n const [settingsOpen, setSettingsOpen] = useState(false);\n const [apiToken, setApiToken] = useState(\"\");\n const [manualTracking, setManualTracking] = useState(\"\");\n const [apiConfigured, setApiConfigured] = useState(false);\n const [settingsMessage, setSettingsMessage] = useState(\"\");\n const [savingSettings, setSavingSettings] = useState(false);\n const [validatingReturn, setValidatingReturn] = useState(false);\n const [result, setResult] = useState({ kind: \"idle\", message: \"Prêt à scanner\" });\n const [history, setHistory] = useState([]);\n\n useEffect(() => {\n fetch(\"/api/config\")\n .then((r) => r.json())\n .then((data) => setIntegrationReady(Boolean(data.integrationReady)))\n .catch(() => setIntegrationReady(false));\n\n fetch(\"/api/ecotrack/settings\")\n .then((r) => r.json())\n .then((data) => {\n setApiConfigured(Boolean(data.configured));\n })\n .catch(() => {});\n\n return () => stopCamera();\n }, []);\n\n async function saveEcotrackSettings() {\n const token = apiToken.trim();\n if (!token) {\n setSettingsMessage(\"Entre ton API Token.\");\n return;\n }\n\n setSavingSettings(true);\n setSettingsMessage(\"Enregistrement…\");\n try {\n const response = await fetch(\"/api/ecotrack/settings\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiToken: token }),\n });\n const data = await response.json();\n if (!response.ok || !data.ok) {\n setSettingsMessage(data.message || \"Impossible d’enregistrer l’API.\");\n return;\n }\n setApiConfigured(true);\n setIntegrationReady(true);\n setApiToken(\"\");\n setSettingsMessage(\"API Ecotrack enregistrée côté serveur.\");\n } catch {\n setSettingsMessage(\"Erreur réseau pendant l’enregistrement.\");\n } finally {\n setSavingSettings(false);\n }\n }\n\n async function removeEcotrackSettings() {\n setSavingSettings(true);\n try {\n const response = await fetch(\"/api/ecotrack/settings\", { method: \"DELETE\" });\n const data = await response.json();\n if (response.ok && data.ok) {\n setApiConfigured(false);\n setIntegrationReady(false);\n setApiToken(\"\");\n setSettingsMessage(\"API supprimée.\");\n } else {\n setSettingsMessage(data.message || \"Impossible de supprimer l’API.\");\n }\n } catch {\n setSettingsMessage(\"Erreur réseau.\");\n } finally {\n setSavingSettings(false);\n }\n }\n\n async function submitManualTracking() {\n const tracking = manualTracking.trim().toUpperCase();\n if (!tracking) {\n setResult({ kind: \"error\", message: \"Entre un numéro de tracking.\" });\n return;\n }\n if (!/^[A-Z0-9_-]{6,64}$/.test(tracking)) {\n setResult({ kind: \"error\", message: \"Numéro de tracking invalide.\", tracking });\n return;\n }\n\n setQrDetected(false);\n stopCamera();\n setResult({ kind: \"loading\", message: \"Vérification du tracking…\", tracking });\n try {\n const response = await fetch(\"/api/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const data = await response.json();\n if (response.ok && data.code === \"TRACKING_FOUND\") {\n setResult({ kind: \"ready\", message: data.message || \"Tracking trouvé dans OM Express.\", tracking, code: data.code, status: data.status ?? null });\n return;\n }\n if (response.ok && data.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé\", tracking, code: data.code, status: data.status ?? null });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n if (navigator.vibrate) navigator.vibrate([80, 50, 120]);\n return;\n }\n setResult({ kind: \"error\", message: data.message || \"Tracking vérifié, mais aucune validation n’a été effectuée.\", tracking });\n } catch {\n setResult({ kind: \"error\", message: \"Erreur réseau pendant la vérification.\", tracking });\n }\n }\n\n function stopCamera() {\n scanningRef.current = false;\n streamRef.current?.getTracks().forEach((track) => track.stop());\n streamRef.current = null;\n setCameraOn(false);\n }\n\n async function improveCamera(stream: MediaStream) {\n try {\n const track = stream.getVideoTracks()[0];\n if (!track) return;\n const capabilities = (track.getCapabilities?.() || {}) as any;\n const advanced: any[] = [];\n\n if (Array.isArray(capabilities.focusMode) && capabilities.focusMode.includes(\"continuous\")) {\n advanced.push({ focusMode: \"continuous\" });\n }\n if (capabilities.zoom && typeof capabilities.zoom.min === \"number\") {\n const targetZoom = Math.min(capabilities.zoom.max ?? 2, Math.max(capabilities.zoom.min, 1.6));\n advanced.push({ zoom: targetZoom });\n }\n if (advanced.length) {\n await track.applyConstraints({ advanced } as any);\n }\n } catch {\n // Le téléphone peut ignorer autofocus/zoom sans bloquer le scanner.\n }\n }\n\n async function startCamera() {\n setQrDetected(false);\n stopCamera();\n lastScanRef.current = \"\";\n framesRef.current = 0;\n setResult({ kind: \"idle\", message: \"Ouverture de la caméra…\" });\n\n try {\n if (!navigator.mediaDevices?.getUserMedia) throw new Error(\"camera_unavailable\");\n\n const stream = await navigator.mediaDevices.getUserMedia({\n video: {\n facingMode: { ideal: \"environment\" },\n width: { ideal: 1920 },\n height: { ideal: 1080 },\n },\n audio: false,\n });\n\n streamRef.current = stream;\n await improveCamera(stream);\n\n const video = videoRef.current;\n if (!video) return;\n video.srcObject = stream;\n video.setAttribute(\"playsinline\", \"true\");\n await video.play();\n\n scanningRef.current = true;\n setCameraOn(true);\n setResult({ kind: \"idle\", message: \"Analyse QR active — place le QR dans le cadre\" });\n void scanLoop();\n } catch (error) {\n console.error(\"Camera error\", error);\n setResult({ kind: \"error\", message: \"Impossible d’ouvrir la caméra. Autorise la caméra dans Chrome puis réessaie.\" });\n }\n }\n\n async function scanWithNativeDetector(video: HTMLVideoElement) {\n const Detector = (window as any).BarcodeDetector;\n if (!Detector) return \"\";\n try {\n const supported = typeof Detector.getSupportedFormats === \"function\"\n ? await Detector.getSupportedFormats()\n : [\"qr_code\"];\n if (!supported.includes(\"qr_code\")) return \"\";\n const detector = new Detector({ formats: [\"qr_code\"] });\n const codes = await detector.detect(video);\n return String(codes?.[0]?.rawValue || \"\").trim();\n } catch {\n return \"\";\n }\n }\n\n function decodeCanvas(canvas: HTMLCanvasElement) {\n const ctx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!ctx || canvas.width < 2 || canvas.height < 2) return \"\";\n const image = ctx.getImageData(0, 0, canvas.width, canvas.height);\n const decoded = jsQR(image.data, image.width, image.height, { inversionAttempts: \"attemptBoth\" });\n return String(decoded?.data || \"\").trim();\n }\n\n function scanWithJsQR(video: HTMLVideoElement) {\n const canvas = canvasRef.current;\n if (!canvas || video.videoWidth < 2 || video.videoHeight < 2) return \"\";\n\n const ctx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!ctx) return \"\";\n\n // 1) Analyse de l'image complète.\n const maxWidth = 960;\n const scale = Math.min(1, maxWidth / video.videoWidth);\n canvas.width = Math.max(2, Math.round(video.videoWidth * scale));\n canvas.height = Math.max(2, Math.round(video.videoHeight * scale));\n ctx.drawImage(video, 0, 0, canvas.width, canvas.height);\n let raw = decodeCanvas(canvas);\n if (raw) return raw;\n\n // 2) Deuxième passe : zone centrale, utile quand le QR est petit dans l'image.\n const cropSize = Math.round(Math.min(video.videoWidth, video.videoHeight) * 0.78);\n const sx = Math.round((video.videoWidth - cropSize) / 2);\n const sy = Math.round((video.videoHeight - cropSize) / 2);\n const cropOut = 720;\n canvas.width = cropOut;\n canvas.height = cropOut;\n const cropCtx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!cropCtx) return \"\";\n cropCtx.drawImage(video, sx, sy, cropSize, cropSize, 0, 0, cropOut, cropOut);\n raw = decodeCanvas(canvas);\n return raw;\n }\n\n async function scanLoop() {\n while (scanningRef.current) {\n const video = videoRef.current;\n\n if (video && video.readyState >= 2 && video.videoWidth > 0) {\n framesRef.current += 1;\n let raw = await scanWithNativeDetector(video);\n if (!raw) raw = scanWithJsQR(video);\n\n if (raw && raw !== lastScanRef.current) {\n lastScanRef.current = raw;\n scanningRef.current = false;\n setQrDetected(true);\n if (navigator.vibrate) navigator.vibrate([70, 40, 110]);\n setResult({ kind: \"loading\", message: \"QR détecté\", tracking: raw });\n await sleep(150);\n stopCamera();\n await handleQr(raw);\n return;\n }\n\n if (framesRef.current === 12) {\n setResult({ kind: \"idle\", message: \"Recherche du QR… rapproche-le et garde-le bien net\" });\n } else if (framesRef.current === 35) {\n setResult({ kind: \"idle\", message: \"QR non détecté — rapproche-le, garde-le bien net et centré\" });\n }\n }\n\n await sleep(160);\n }\n }\n\n async function handleQr(raw: string) {\n const tracking = extractTracking(raw);\n\n if (!tracking) {\n setResult({ kind: \"error\", message: \"QR lu, mais aucun numéro de tracking reconnu.\", tracking: raw });\n return;\n }\n\n setResult({ kind: \"loading\", message: \"QR détecté — tracking reconnu\", tracking });\n await sleep(120);\n\n try {\n const response = await fetch(\"/api/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const data = await response.json();\n\n if (response.ok && data.code === \"TRACKING_FOUND\") {\n setResult({ kind: \"ready\", message: data.message || \"Tracking trouvé dans OM Express.\", tracking, code: data.code, status: data.status ?? null });\n return;\n }\n\n if (response.ok && data.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé\", tracking, code: data.code, status: data.status ?? null });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n if (navigator.vibrate) navigator.vibrate([80, 50, 120]);\n return;\n }\n\n setResult({ kind: \"error\", message: data.message || \"QR détecté, mais la validation Ecotrack n’est pas encore disponible.\", tracking });\n } catch {\n setResult({ kind: \"error\", message: \"QR détecté, mais erreur réseau côté validation.\", tracking });\n }\n }\n\n async function validateReturn() {\n const tracking = result.tracking?.trim().toUpperCase() || \"\";\n const normalized = normalizeStatus(result.status);\n if (!tracking || ![\"retour_recu\", \"livraison_echoue_recu\"].includes(normalized)) return;\n\n setValidatingReturn(true);\n setResult((current) => ({ ...current, kind: \"loading\", message: \"Validation du retour dans OM Express…\" }));\n try {\n const response = await fetch(\"/api/return/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const raw = await response.text();\n let data: any = null;\n try {\n data = raw ? JSON.parse(raw) : null;\n } catch {\n data = null;\n }\n if (response.ok && data?.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé avec succès.\", tracking, code: data.code || \"RETURN_VALIDATED\", status: \"return_validated_by_partener\" });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n setManualTracking(\"\");\n if (navigator.vibrate) navigator.vibrate([100, 50, 160]);\n return;\n }\n const fallback = raw && raw.length < 300 && !raw.trim().startsWith(\"<\") ? raw : `Erreur serveur (${response.status}).`;\n setResult({ kind: \"error\", message: data?.message || fallback || \"OM Express n’a pas confirmé la validation.\", tracking, code: data?.code, status: result.status ?? null });\n } catch {\n setResult({ kind: \"error\", message: \"Erreur réseau pendant la validation du retour.\", tracking, status: result.status ?? null });\n } finally {\n setValidatingReturn(false);\n }\n }\n\n const canValidateReturn = result.kind === \"ready\" && [\"retour_recu\", \"livraison_echoue_recu\"].includes(normalizeStatus(result.status));\n\n return (\n

SAMI.TECH

Retours Ecotrack

{integrationReady ? \"API SAUVEGARDÉE\" : \"À CONFIGURER\"}

\n {\n stopCamera();\n setSettingsMessage(\"\");\n setSettingsOpen((open) => !open);\n }}\n aria-label=\"Paramètres Ecotrack\"\n >⚙\n

\n\n {!integrationReady && (\n

Ajoute ton API Ecotrack directement ici pour préparer la connexion au serveur.

\n )}\n\n {(settingsOpen || !apiConfigured) && (\n

PARAMÈTRES ECOTRACK

{apiConfigured ? \"API enregistrée\" : \"Ajouter l’API\"}

\n {apiConfigured && ✓}\n

\n\n API Token\n setApiToken(e.currentTarget.value)}\n placeholder={apiConfigured ? \"•••••••• entre un nouveau token pour le remplacer\" : \"Colle ton API Token\"}\n />\n\n

\n \n {apiConfigured && (\n \n )}\n

\n {settingsMessage &&

{settingsMessage}

}\n

Le token n’est jamais réaffiché après l’enregistrement.

\n )}\n\n

\n\n

\n \n

\n\n

SAISIE MANUELLE

\n setManualTracking(e.currentTarget.value.toUpperCase())}\n onKeyDown={(e) => {\n if (e.key === \"Enter\") void submitManualTracking();\n }}\n placeholder=\"Ex. ECCDA2260901788920\"\n />\n \n

\n\n

ÉTAT

{result.message}

\n {result.tracking &&

{result.tracking}

}\n

\n\n {canValidateReturn && (\n \n )}\n\n {history.length > 0 && (\n

DERNIERS RETOURS VALIDÉS

\n {history.map((item) => (\n

{item}✓

\n ))}\n

\n )}\n\n \n

\n );\n}\n","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport jsQR from \"https://esm.sh/jsqr@1.4.0\";\n\ntype ResultState = {\n kind: \"idle\" | \"loading\" | \"ready\" | \"success\" | \"error\";\n message: string;\n tracking?: string;\n code?: string;\n status?: string | null;\n};\n\nfunction sleep(ms: number) {\n return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\nfunction extractTracking(raw: string) {\n const value = String(raw || \"\").trim();\n if (!value) return \"\";\n if (/^[A-Za-z0-9_-]{6,64}$/.test(value)) return value.toUpperCase();\n const ecotrackLike = value.match(/\\b[A-Z]{3,10}\\d{8,24}\\b/i);\n return ecotrackLike?.[0]?.toUpperCase() || \"\";\n}\n\nfunction normalizeStatus(value: unknown) {\n return String(value ?? \"\")\n .trim()\n .toLowerCase()\n .normalize(\"NFD\")\n .replace(/[\\u0300-\\u036f]/g, \"\")\n .replace(/[\\s-]+/g, \"_\");\n}\n\nexport function App() {\n const videoRef = useRef(null);\n const canvasRef = useRef(null);\n const streamRef = useRef(null);\n const scanningRef = useRef(false);\n const lastScanRef = useRef(\"\");\n const framesRef = useRef(0);\n\n const [cameraOn, setCameraOn] = useState(false);\n const [qrDetected, setQrDetected] = useState(false);\n const [integrationReady, setIntegrationReady] = useState(false);\n const [settingsOpen, setSettingsOpen] = useState(false);\n const [apiToken, setApiToken] = useState(\"\");\n const [manualTracking, setManualTracking] = useState(\"\");\n const [apiConfigured, setApiConfigured] = useState(false);\n const [settingsMessage, setSettingsMessage] = useState(\"\");\n const [savingSettings, setSavingSettings] = useState(false);\n const [validatingReturn, setValidatingReturn] = useState(false);\n const [result, setResult] = useState({ kind: \"idle\", message: \"Prêt à scanner\" });\n const [history, setHistory] = useState([]);\n\n useEffect(() => {\n fetch(\"/api/config\")\n .then((r) => r.json())\n .then((data) => setIntegrationReady(Boolean(data.integrationReady)))\n .catch(() => setIntegrationReady(false));\n\n fetch(\"/api/ecotrack/settings\")\n .then((r) => r.json())\n .then((data) => {\n setApiConfigured(Boolean(data.configured));\n })\n .catch(() => {});\n\n return () => stopCamera();\n }, []);\n\n async function saveEcotrackSettings() {\n const token = apiToken.trim();\n if (!token) {\n setSettingsMessage(\"Entre ton API Token.\");\n return;\n }\n\n setSavingSettings(true);\n setSettingsMessage(\"Enregistrement…\");\n try {\n const response = await fetch(\"/api/ecotrack/settings\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ apiToken: token }),\n });\n const data = await response.json();\n if (!response.ok || !data.ok) {\n setSettingsMessage(data.message || \"Impossible d’enregistrer l’API.\");\n return;\n }\n setApiConfigured(true);\n setIntegrationReady(true);\n setApiToken(\"\");\n setSettingsMessage(\"API Ecotrack enregistrée côté serveur.\");\n } catch {\n setSettingsMessage(\"Erreur réseau pendant l’enregistrement.\");\n } finally {\n setSavingSettings(false);\n }\n }\n\n async function removeEcotrackSettings() {\n setSavingSettings(true);\n try {\n const response = await fetch(\"/api/ecotrack/settings\", { method: \"DELETE\" });\n const data = await response.json();\n if (response.ok && data.ok) {\n setApiConfigured(false);\n setIntegrationReady(false);\n setApiToken(\"\");\n setSettingsMessage(\"API supprimée.\");\n } else {\n setSettingsMessage(data.message || \"Impossible de supprimer l’API.\");\n }\n } catch {\n setSettingsMessage(\"Erreur réseau.\");\n } finally {\n setSavingSettings(false);\n }\n }\n\n async function submitManualTracking() {\n const tracking = manualTracking.trim().toUpperCase();\n if (!tracking) {\n setResult({ kind: \"error\", message: \"Entre un numéro de tracking.\" });\n return;\n }\n if (!/^[A-Z0-9_-]{6,64}$/.test(tracking)) {\n setResult({ kind: \"error\", message: \"Numéro de tracking invalide.\", tracking });\n return;\n }\n\n setQrDetected(false);\n stopCamera();\n setResult({ kind: \"loading\", message: \"Vérification du tracking…\", tracking });\n try {\n const response = await fetch(\"/api/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const data = await response.json();\n if (response.ok && data.code === \"TRACKING_FOUND\") {\n setResult({ kind: \"ready\", message: data.message || \"Tracking trouvé dans OM Express.\", tracking, code: data.code, status: data.status ?? null });\n return;\n }\n if (response.ok && data.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé\", tracking, code: data.code, status: data.status ?? null });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n if (navigator.vibrate) navigator.vibrate([80, 50, 120]);\n return;\n }\n setResult({ kind: \"error\", message: data.message || \"Tracking vérifié, mais aucune validation n’a été effectuée.\", tracking });\n } catch {\n setResult({ kind: \"error\", message: \"Erreur réseau pendant la vérification.\", tracking });\n }\n }\n\n function stopCamera() {\n scanningRef.current = false;\n streamRef.current?.getTracks().forEach((track) => track.stop());\n streamRef.current = null;\n setCameraOn(false);\n }\n\n async function improveCamera(stream: MediaStream) {\n try {\n const track = stream.getVideoTracks()[0];\n if (!track) return;\n const capabilities = (track.getCapabilities?.() || {}) as any;\n const advanced: any[] = [];\n\n if (Array.isArray(capabilities.focusMode) && capabilities.focusMode.includes(\"continuous\")) {\n advanced.push({ focusMode: \"continuous\" });\n }\n if (capabilities.zoom && typeof capabilities.zoom.min === \"number\") {\n const targetZoom = Math.min(capabilities.zoom.max ?? 2, Math.max(capabilities.zoom.min, 1.6));\n advanced.push({ zoom: targetZoom });\n }\n if (advanced.length) {\n await track.applyConstraints({ advanced } as any);\n }\n } catch {\n // Le téléphone peut ignorer autofocus/zoom sans bloquer le scanner.\n }\n }\n\n async function startCamera() {\n setQrDetected(false);\n stopCamera();\n lastScanRef.current = \"\";\n framesRef.current = 0;\n setResult({ kind: \"idle\", message: \"Ouverture de la caméra…\" });\n\n try {\n if (!navigator.mediaDevices?.getUserMedia) throw new Error(\"camera_unavailable\");\n\n const stream = await navigator.mediaDevices.getUserMedia({\n video: {\n facingMode: { ideal: \"environment\" },\n width: { ideal: 1920 },\n height: { ideal: 1080 },\n },\n audio: false,\n });\n\n streamRef.current = stream;\n await improveCamera(stream);\n\n const video = videoRef.current;\n if (!video) return;\n video.srcObject = stream;\n video.setAttribute(\"playsinline\", \"true\");\n await video.play();\n\n scanningRef.current = true;\n setCameraOn(true);\n setResult({ kind: \"idle\", message: \"Analyse QR active — place le QR dans le cadre\" });\n void scanLoop();\n } catch (error) {\n console.error(\"Camera error\", error);\n setResult({ kind: \"error\", message: \"Impossible d’ouvrir la caméra. Autorise la caméra dans Chrome puis réessaie.\" });\n }\n }\n\n async function scanWithNativeDetector(video: HTMLVideoElement) {\n const Detector = (window as any).BarcodeDetector;\n if (!Detector) return \"\";\n try {\n const supported = typeof Detector.getSupportedFormats === \"function\"\n ? await Detector.getSupportedFormats()\n : [\"qr_code\"];\n if (!supported.includes(\"qr_code\")) return \"\";\n const detector = new Detector({ formats: [\"qr_code\"] });\n const codes = await detector.detect(video);\n return String(codes?.[0]?.rawValue || \"\").trim();\n } catch {\n return \"\";\n }\n }\n\n function decodeCanvas(canvas: HTMLCanvasElement) {\n const ctx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!ctx || canvas.width < 2 || canvas.height < 2) return \"\";\n const image = ctx.getImageData(0, 0, canvas.width, canvas.height);\n const decoded = jsQR(image.data, image.width, image.height, { inversionAttempts: \"attemptBoth\" });\n return String(decoded?.data || \"\").trim();\n }\n\n function scanWithJsQR(video: HTMLVideoElement) {\n const canvas = canvasRef.current;\n if (!canvas || video.videoWidth < 2 || video.videoHeight < 2) return \"\";\n\n const ctx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!ctx) return \"\";\n\n // 1) Analyse de l'image complète.\n const maxWidth = 960;\n const scale = Math.min(1, maxWidth / video.videoWidth);\n canvas.width = Math.max(2, Math.round(video.videoWidth * scale));\n canvas.height = Math.max(2, Math.round(video.videoHeight * scale));\n ctx.drawImage(video, 0, 0, canvas.width, canvas.height);\n let raw = decodeCanvas(canvas);\n if (raw) return raw;\n\n // 2) Deuxième passe : zone centrale, utile quand le QR est petit dans l'image.\n const cropSize = Math.round(Math.min(video.videoWidth, video.videoHeight) * 0.78);\n const sx = Math.round((video.videoWidth - cropSize) / 2);\n const sy = Math.round((video.videoHeight - cropSize) / 2);\n const cropOut = 720;\n canvas.width = cropOut;\n canvas.height = cropOut;\n const cropCtx = canvas.getContext(\"2d\", { willReadFrequently: true });\n if (!cropCtx) return \"\";\n cropCtx.drawImage(video, sx, sy, cropSize, cropSize, 0, 0, cropOut, cropOut);\n raw = decodeCanvas(canvas);\n return raw;\n }\n\n async function scanLoop() {\n while (scanningRef.current) {\n const video = videoRef.current;\n\n if (video && video.readyState >= 2 && video.videoWidth > 0) {\n framesRef.current += 1;\n let raw = await scanWithNativeDetector(video);\n if (!raw) raw = scanWithJsQR(video);\n\n if (raw && raw !== lastScanRef.current) {\n lastScanRef.current = raw;\n scanningRef.current = false;\n setQrDetected(true);\n if (navigator.vibrate) navigator.vibrate([70, 40, 110]);\n setResult({ kind: \"loading\", message: \"QR détecté\", tracking: raw });\n await sleep(150);\n stopCamera();\n await handleQr(raw);\n return;\n }\n\n if (framesRef.current === 12) {\n setResult({ kind: \"idle\", message: \"Recherche du QR… rapproche-le et garde-le bien net\" });\n } else if (framesRef.current === 35) {\n setResult({ kind: \"idle\", message: \"QR non détecté — rapproche-le, garde-le bien net et centré\" });\n }\n }\n\n await sleep(160);\n }\n }\n\n async function handleQr(raw: string) {\n const tracking = extractTracking(raw);\n\n if (!tracking) {\n setResult({ kind: \"error\", message: \"QR lu, mais aucun numéro de tracking reconnu.\", tracking: raw });\n return;\n }\n\n setResult({ kind: \"loading\", message: \"QR détecté — tracking reconnu\", tracking });\n await sleep(120);\n\n try {\n const response = await fetch(\"/api/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const data = await response.json();\n\n if (response.ok && data.code === \"TRACKING_FOUND\") {\n setResult({ kind: \"ready\", message: data.message || \"Tracking trouvé dans OM Express.\", tracking, code: data.code, status: data.status ?? null });\n return;\n }\n\n if (response.ok && data.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé\", tracking, code: data.code, status: data.status ?? null });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n if (navigator.vibrate) navigator.vibrate([80, 50, 120]);\n return;\n }\n\n setResult({ kind: \"error\", message: data.message || \"QR détecté, mais la validation Ecotrack n’est pas encore disponible.\", tracking });\n } catch {\n setResult({ kind: \"error\", message: \"QR détecté, mais erreur réseau côté validation.\", tracking });\n }\n }\n\n async function validateReturn() {\n const tracking = result.tracking?.trim().toUpperCase() || \"\";\n const normalized = normalizeStatus(result.status);\n if (!tracking || ![\"retour_recu\", \"livraison_echoue_recu\"].includes(normalized)) return;\n\n setValidatingReturn(true);\n setResult((current) => ({ ...current, kind: \"loading\", message: \"Validation du retour dans OM Express…\" }));\n try {\n const response = await fetch(\"/api/return/validate\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ tracking }),\n });\n const raw = await response.text();\n let data: any = null;\n try {\n data = raw ? JSON.parse(raw) : null;\n } catch {\n data = null;\n }\n if (response.ok && data?.ok) {\n setResult({ kind: \"success\", message: data.message || \"Retour validé avec succès.\", tracking, code: data.code || \"RETURN_VALIDATED\", status: \"return_validated_by_partener\" });\n setHistory((items) => [tracking, ...items.filter((item) => item !== tracking)].slice(0, 8));\n setManualTracking(\"\");\n if (navigator.vibrate) navigator.vibrate([100, 50, 160]);\n return;\n }\n const fallback = raw && raw.length < 300 && !raw.trim().startsWith(\"<\") ? raw : `Erreur serveur (${response.status}).`;\n setResult({ kind: \"error\", message: data?.message || fallback || \"OM Express n’a pas confirmé la validation.\", tracking, code: data?.code, status: result.status ?? null });\n } catch {\n setResult({ kind: \"error\", message: \"Erreur réseau pendant la validation du retour.\", tracking, status: result.status ?? null });\n } finally {\n setValidatingReturn(false);\n }\n }\n\n const canValidateReturn = result.kind === \"ready\" && [\"retour_recu\", \"livraison_echoue_recu\"].includes(normalizeStatus(result.status));\n\n return (\n

SAMI.TECH

Retours Ecotrack

{integrationReady ? \"API SAUVEGARDÉE\" : \"À CONFIGURER\"}

\n {\n stopCamera();\n setSettingsMessage(\"\");\n setSettingsOpen((open) => !open);\n }}\n aria-label=\"Paramètres Ecotrack\"\n >⚙\n

\n\n {!integrationReady && (\n

Ajoute ton API Ecotrack directement ici pour préparer la connexion au serveur.

\n )}\n\n {(settingsOpen || !apiConfigured) && (\n

PARAMÈTRES ECOTRACK

{apiConfigured ? \"API enregistrée\" : \"Ajouter l’API\"}

\n {apiConfigured && ✓}\n

\n\n API Token\n setApiToken(e.currentTarget.value)}\n placeholder={apiConfigured ? \"•••••••• entre un nouveau token pour le remplacer\" : \"Colle ton API Token\"}\n />\n\n

\n \n {apiConfigured && (\n \n )}\n

\n {settingsMessage &&

{settingsMessage}

}\n

Le token n’est jamais réaffiché après l’enregistrement.

\n )}\n\n

ÉTAT

{result.message}

\n {result.tracking &&

{result.tracking}

}\n

\n\n

\n \n

\n\n

SAISIE MANUELLE

\n setManualTracking(e.currentTarget.value.toUpperCase())}\n onKeyDown={(e) => {\n if (e.key === \"Enter\") void submitManualTracking();\n }}\n placeholder=\"Ex. ECCDA2260901788920\"\n />\n \n

\n\n {canValidateReturn && (\n \n )}\n\n {history.length > 0 && (\n

DERNIERS RETOURS VALIDÉS

\n {history.map((item) => (\n

{item}✓

\n ))}\n

\n )}\n\n \n

\n );\n}\n","createdAt",["D",1789152279657],"branchVersion","branchId","35ff6f46-dcdc-4cd7-a4a5-2561eb24a897","id","3632ee8b-d3b0-4a9d-b80b-ecc4536ce5a6","sami-tech-retours",["D",1789148091907],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Scanner mobile pour valider les retours Ecotrack","imageUrl","d1a4e165-322f-4bea-a472-a3bfe065b80a","pinnedFileId","01a09189-5663-7486-bd31-6d54914632cb","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04a3a-ab09-722d-b08e-d53e0c46d95a","tursoName","3632ee8bd3b04a9db80becc4536ce5a6","tursoHostname","3632ee8bd3b04a9db80becc4536ce5a6-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789495880338],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",105,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","emller","handle","displayName","E. Müller","avatar","https://lh3.googleusercontent.com/a/ACg8ocLJnTmCFn0ipeSgvNaIC4rYdYukPA7khbo2Fye1VgNbr6ozzQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":275,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":276,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":277,"_85":278,"_87":279,"_89":25},"tree",[193,201,202,203,204,205],"files",[193,194,195,196,197,198,199,200,201,202,203,204,205],"counts",{"_183":64,"_184":167,"_185":64,"_186":187,"_188":189},"contents",[132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":177,"_32":178,"_30":179,"_141":-5,"_42":43,"_41":167,"_143":60,"_39":180,"_13":64,"_34":181,"_36":-5,"_24":25,"_146":-5,"_27":182},{"_44":171,"_32":172,"_30":173,"_141":-5,"_42":43,"_41":167,"_143":60,"_39":174,"_13":64,"_34":20,"_36":175,"_24":25,"_146":-5,"_27":176},{"_44":164,"_32":165,"_30":166,"_141":-5,"_42":43,"_41":167,"_143":60,"_39":168,"_13":64,"_34":20,"_36":169,"_24":25,"_146":-5,"_27":170},{"_44":156,"_32":157,"_30":58,"_141":-5,"_42":43,"_41":158,"_143":60,"_39":159,"_13":160,"_34":161,"_36":162,"_24":25,"_146":46,"_27":163},{"_44":148,"_32":149,"_30":150,"_141":-5,"_42":43,"_41":151,"_143":60,"_39":152,"_13":153,"_34":35,"_36":154,"_24":25,"_146":-5,"_27":155},{"_44":138,"_32":139,"_30":140,"_141":-5,"_42":43,"_41":142,"_143":60,"_39":144,"_13":64,"_34":35,"_36":145,"_24":25,"_146":-5,"_27":147},"235ee83b-b1e6-42f2-a1e9-64ba2e305b18","test-ecotrack-tracking.ts","55241964-ae0d-11f1-b815-1607ee4eb77e","parentId",48,"latest",["D",1789150771128],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TRACKING = \"ECCDA2260901788920\";\n\nasync function run() {\n const row = await sqlite.execute({\n sql: \"SELECT value FROM app_settings WHERE key = ? LIMIT 1\",\n args: [\"ecotrack_api_credentials\"],\n });\n if (!row.rows.length) return { ok: false, message: \"API non configurée\" };\n\n const parsed = JSON.parse(String(row.rows[0].value));\n const apiToken = String(parsed.apiToken || \"\").trim();\n if (!apiToken) return { ok: false, message: \"API Token vide\" };\n\n const url = new URL(\"https://omexpress.ecotrack.dz/api/v1/get/orders\");\n url.searchParams.set(\"tracking\", TRACKING);\n url.searchParams.set(\"api_token\", apiToken);\n\n try {\n const response = await fetch(url, {\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${apiToken}`,\n },\n });\n const contentType = response.headers.get(\"content-type\") || \"\";\n let body: any = null;\n if (contentType.includes(\"application/json\")) {\n try { body = await response.json(); } catch { body = null; }\n } else {\n const text = await response.text();\n body = text.slice(0, 120);\n }\n\n const data = body && typeof body === \"object\" ? body : null;\n const topKeys = data ? Object.keys(data).slice(0, 20) : [];\n const orderCandidate = Array.isArray(data)\n ? data[0]\n : Array.isArray(data?.data)\n ? data.data[0]\n : Array.isArray(data?.orders)\n ? data.orders[0]\n : data?.data && typeof data.data === \"object\"\n ? data.data\n : data;\n\n const orderKeys = orderCandidate && typeof orderCandidate === \"object\"\n ? Object.keys(orderCandidate).slice(0, 30)\n : [];\n\n const statusValue = orderCandidate && typeof orderCandidate === \"object\"\n ? (orderCandidate.status ?? orderCandidate.statut ?? orderCandidate.status_name ?? orderCandidate.activity ?? orderCandidate.etat ?? null)\n : null;\n\n return {\n ok: response.ok,\n httpStatus: response.status,\n tracking: TRACKING,\n responseType: contentType.split(\";\")[0] || null,\n topKeys,\n orderKeys,\n status: typeof statusValue === \"string\" || typeof statusValue === \"number\" ? statusValue : null,\n hasData: Boolean(orderCandidate),\n };\n } catch (error) {\n return { ok: false, message: error instanceof Error ? error.message : String(error) };\n }\n}\n\nconst result = await run();\nconsole.log(\"ECOTRACK_TRACKING_TEST\", JSON.stringify(result));\nexport default result;\n","label",[139],"4f06ff76-cde3-4238-87d0-496961f33707","test-ecotrack-token.ts","2889601c-ae0d-11f1-b584-1607ee4eb77e",47,["D",1789150711844],2,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nasync function testEcotrackToken() {\n const row = await sqlite.execute({\n sql: \"SELECT value FROM app_settings WHERE key = ? LIMIT 1\",\n args: [\"ecotrack_api_credentials\"],\n });\n\n if (!row.rows.length) {\n return { ok: false, configured: false, message: \"Aucun API Token enregistré.\" };\n }\n\n let apiToken = \"\";\n try {\n const parsed = JSON.parse(String(row.rows[0].value));\n apiToken = String(parsed.apiToken || \"\").trim();\n } catch {\n return { ok: false, configured: true, message: \"Configuration API illisible.\" };\n }\n\n if (!apiToken) {\n return { ok: false, configured: false, message: \"API Token vide.\" };\n }\n\n const url = new URL(\"https://omexpress.ecotrack.dz/api/v1/validate/token\");\n url.searchParams.set(\"api_token\", apiToken);\n\n try {\n const response = await fetch(url, {\n method: \"GET\",\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${apiToken}`,\n },\n });\n\n const contentType = response.headers.get(\"content-type\") || \"\";\n let body: any = null;\n if (contentType.includes(\"application/json\")) {\n try { body = await response.json(); } catch { body = null; }\n } else {\n const text = await response.text();\n body = text.slice(0, 300);\n }\n\n const valid = response.ok && Boolean(body?.success === true || body?.data?.success === true);\n\n return {\n ok: valid,\n configured: true,\n httpStatus: response.status,\n success: body?.success ?? body?.data?.success ?? null,\n message: valid ? \"API Token OM Express valide.\" : \"Le serveur OM Express n’a pas confirmé le token.\",\n responseType: contentType.split(\";\")[0] || null,\n };\n } catch (error) {\n return {\n ok: false,\n configured: true,\n message: \"Impossible de joindre l’API OM Express.\",\n error: error instanceof Error ? error.message : String(error),\n };\n }\n}\n\n\nconst result = await testEcotrackToken();\nconsole.log(\"ECOTRACK_TEST\", JSON.stringify(result));\nexport default result;\n",[149],"20b0e1fe-51af-4646-84f5-63b5678a29fb","index.ts",68,["D",1789151688418],14,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst app = new Hono();\nconst SESSION_COOKIE = \"sami_access\";\nconst SESSION_MS = 12 * 60 * 60 * 1000;\n\nfunction hex(bytes: Uint8Array) {\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction randomHex(size = 32) {\n return hex(crypto.getRandomValues(new Uint8Array(size)));\n}\n\nasync function sha256(value: string) {\n const data = new TextEncoder().encode(value);\n const digest = await crypto.subtle.digest(\"SHA-256\", data);\n return hex(new Uint8Array(digest));\n}\n\nfunction parseCookies(request: Request) {\n const raw = request.headers.get(\"cookie\") || \"\";\n const cookies: Record = {};\n for (const part of raw.split(\";\")) {\n const i = part.indexOf(\"=\");\n if (i <= 0) continue;\n cookies[part.slice(0, i).trim()] = decodeURIComponent(part.slice(i + 1).trim());\n }\n return cookies;\n}\n\nfunction validPattern(pattern: unknown) {\n if (!Array.isArray(pattern)) return false;\n if (pattern.length < 4 || pattern.length > 9) return false;\n if (!pattern.every((n) => Number.isInteger(n) && n >= 0 && n <= 8)) return false;\n return new Set(pattern).size === pattern.length;\n}\n\nasync function getPatternRecord() {\n const result = await sqlite.execute({\n sql: \"SELECT value FROM app_settings WHERE key = ? LIMIT 1\",\n args: [\"pattern_auth\"],\n });\n if (!result.rows.length) return null;\n try {\n return JSON.parse(String(result.rows[0].value));\n } catch {\n return null;\n }\n}\n\nasync function createSession() {\n const token = randomHex(32);\n const tokenHash = await sha256(token);\n const now = Date.now();\n const expiresAt = now + SESSION_MS;\n await sqlite.execute({\n sql: \"INSERT INTO app_sessions (token_hash, expires_at, created_at) VALUES (?, ?, ?)\",\n args: [tokenHash, expiresAt, now],\n });\n return { token, expiresAt };\n}\n\nasync function isAuthenticated(request: Request) {\n const token = parseCookies(request)[SESSION_COOKIE];\n if (!token) return false;\n const tokenHash = await sha256(token);\n const now = Date.now();\n const result = await sqlite.execute({\n sql: \"SELECT token_hash FROM app_sessions WHERE token_hash = ? AND expires_at > ? LIMIT 1\",\n args: [tokenHash, now],\n });\n return result.rows.length > 0;\n}\n\nfunction sessionCookie(token: string) {\n const maxAge = Math.floor(SESSION_MS / 1000);\n return `${SESSION_COOKIE}=${encodeURIComponent(token)}; Path=/; Max-Age=${maxAge}; HttpOnly; Secure; SameSite=Lax`;\n}\n\nfunction clearSessionCookie() {\n return `${SESSION_COOKIE}=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=Lax`;\n}\n\nfunction normalizeEcotrackStatus(value: unknown) {\n return String(value ?? \"\")\n .trim()\n .toLowerCase()\n .normalize(\"NFD\")\n .replace(/[\\u0300-\\u036f]/g, \"\")\n .replace(/[\\s-]+/g, \"_\");\n}\n\nasync function getEcotrackCredentials() {\n const result = await sqlite.execute({\n sql: \"SELECT value FROM app_settings WHERE key = ? LIMIT 1\",\n args: [\"ecotrack_api_credentials\"],\n });\n if (!result.rows.length) return null;\n try {\n const parsed = JSON.parse(String(result.rows[0].value));\n const apiToken = String(parsed.apiToken || \"\").trim();\n if (!apiToken) return null;\n return { apiToken };\n } catch {\n return null;\n }\n}\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/health\", (c) => c.json({ ok: true }));\n\napp.get(\"/api/access/status\", async (c) => {\n const configured = Boolean(await getPatternRecord());\n const authenticated = configured ? await isAuthenticated(c.req.raw) : false;\n return c.json({ ok: true, configured, authenticated });\n});\n\napp.post(\"/api/access/setup\", async (c) => {\n if (await getPatternRecord()) {\n return c.json({ ok: false, message: \"Le schéma est déjà configuré.\" }, 409);\n }\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false, message: \"Requête invalide.\" }, 400);\n }\n\n if (!validPattern(body.pattern)) {\n return c.json({ ok: false, message: \"Le schéma doit relier au moins 4 points différents.\" }, 400);\n }\n\n const pattern = body.pattern.join(\"-\");\n const salt = randomHex(16);\n const hash = await sha256(`${salt}:${pattern}`);\n const value = JSON.stringify({ salt, hash });\n\n const insert = await sqlite.execute({\n sql: \"INSERT OR IGNORE INTO app_settings (key, value) VALUES (?, ?)\",\n args: [\"pattern_auth\", value],\n });\n\n if (insert.rowsAffected === 0) {\n return c.json({ ok: false, message: \"Le schéma est déjà configuré.\" }, 409);\n }\n\n const session = await createSession();\n c.header(\"Set-Cookie\", sessionCookie(session.token));\n return c.json({ ok: true, authenticated: true });\n});\n\napp.post(\"/api/access/unlock\", async (c) => {\n const record = await getPatternRecord();\n if (!record) {\n return c.json({ ok: false, code: \"NOT_CONFIGURED\", message: \"Aucun schéma configuré.\" }, 409);\n }\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false, message: \"Requête invalide.\" }, 400);\n }\n\n if (!validPattern(body.pattern)) {\n return c.json({ ok: false, message: \"Schéma incorrect.\" }, 401);\n }\n\n const candidate = await sha256(`${record.salt}:${body.pattern.join(\"-\")}`);\n if (candidate !== record.hash) {\n return c.json({ ok: false, message: \"Schéma incorrect.\" }, 401);\n }\n\n const session = await createSession();\n c.header(\"Set-Cookie\", sessionCookie(session.token));\n return c.json({ ok: true, authenticated: true });\n});\n\napp.post(\"/api/access/logout\", async (c) => {\n const token = parseCookies(c.req.raw)[SESSION_COOKIE];\n if (token) {\n const tokenHash = await sha256(token);\n await sqlite.execute({ sql: \"DELETE FROM app_sessions WHERE token_hash = ?\", args: [tokenHash] });\n }\n c.header(\"Set-Cookie\", clearSessionCookie());\n return c.json({ ok: true });\n});\n\napp.get(\"/api/ecotrack/settings\", async (c) => {\n if (!(await isAuthenticated(c.req.raw))) {\n return c.json({ ok: false, code: \"LOCKED\", message: \"Application verrouillée.\" }, 401);\n }\n const credentials = await getEcotrackCredentials();\n return c.json({\n ok: true,\n configured: Boolean(credentials),\n });\n});\n\napp.post(\"/api/ecotrack/settings\", async (c) => {\n if (!(await isAuthenticated(c.req.raw))) {\n return c.json({ ok: false, code: \"LOCKED\", message: \"Application verrouillée.\" }, 401);\n }\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false, message: \"Requête invalide.\" }, 400);\n }\n\n const apiToken = String(body.apiToken || \"\").trim();\n if (apiToken.length < 8 || apiToken.length > 512) {\n return c.json({ ok: false, message: \"API Token invalide.\" }, 400);\n }\n\n const value = JSON.stringify({ apiToken });\n await sqlite.execute({\n sql: \"INSERT INTO app_settings (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value\",\n args: [\"ecotrack_api_credentials\", value],\n });\n\n return c.json({ ok: true, configured: true });\n});\n\napp.delete(\"/api/ecotrack/settings\", async (c) => {\n if (!(await isAuthenticated(c.req.raw))) {\n return c.json({ ok: false, code: \"LOCKED\", message: \"Application verrouillée.\" }, 401);\n }\n await sqlite.execute({ sql: \"DELETE FROM app_settings WHERE key = ?\", args: [\"ecotrack_api_credentials\"] });\n return c.json({ ok: true, configured: false });\n});\n\napp.get(\"/api/config\", async (c) => {\n const authenticated = await isAuthenticated(c.req.raw);\n const integrationReady = Boolean(await getEcotrackCredentials());\n return c.json({ ok: true, integrationReady, authenticated });\n});\n\napp.post(\"/api/validate\", async (c) => {\n if (!(await isAuthenticated(c.req.raw))) {\n return c.json({ ok: false, code: \"LOCKED\", message: \"Application verrouillée.\" }, 401);\n }\n\n let payload: { tracking?: unknown };\n try {\n payload = await c.req.json();\n } catch {\n return c.json({ ok: false, message: \"Requête invalide.\" }, 400);\n }\n\n const tracking = String(payload.tracking ?? \"\").trim().toUpperCase();\n console.log(\"QR_TRACKING\", tracking);\n if (!/^[A-Z0-9_-]{6,64}$/.test(tracking)) {\n return c.json({ ok: false, message: \"Numéro de tracking invalide.\" }, 400);\n }\n\n const credentials = await getEcotrackCredentials();\n if (!credentials) {\n return c.json({\n ok: false,\n tracking,\n code: \"API_NOT_CONFIGURED\",\n message: \"API Ecotrack non configurée.\",\n }, 503);\n }\n\n const url = new URL(\"https://omexpress.ecotrack.dz/api/v1/get/orders\");\n url.searchParams.set(\"tracking\", tracking);\n url.searchParams.set(\"api_token\", credentials.apiToken);\n\n try {\n const ecotrackResponse = await fetch(url, {\n method: \"GET\",\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${credentials.apiToken}`,\n },\n });\n\n if (!ecotrackResponse.ok) {\n return c.json({\n ok: false,\n tracking,\n code: \"ECOTRACK_READ_ERROR\",\n message: `OM Express a refusé la lecture du tracking (${ecotrackResponse.status}).`,\n }, 502);\n }\n\n let data: any = null;\n try {\n data = await ecotrackResponse.json();\n } catch {\n return c.json({\n ok: false,\n tracking,\n code: \"ECOTRACK_BAD_RESPONSE\",\n message: \"Réponse OM Express illisible.\",\n }, 502);\n }\n\n const orders = Array.isArray(data?.data)\n ? data.data\n : Array.isArray(data)\n ? data\n : [];\n const order = orders[0] || null;\n\n if (!order) {\n return c.json({\n ok: false,\n tracking,\n code: \"TRACKING_NOT_FOUND\",\n message: \"API connectée, mais ce tracking n’a pas été trouvé dans OM Express.\",\n });\n }\n\n const status = String(\n order.status_name ?? order.status ?? order.statut ?? order.etat ?? order.state ?? \"\",\n ).trim();\n\n return c.json({\n ok: false,\n tracking,\n code: \"TRACKING_FOUND\",\n status: status || null,\n message: status\n ? `Tracking trouvé dans OM Express — statut : ${status}. Retour non modifié.`\n : \"Tracking trouvé dans OM Express. Retour non modifié.\",\n });\n } catch (error) {\n console.error(\"ECOTRACK_READ_ERROR\", error instanceof Error ? error.message : String(error));\n return c.json({\n ok: false,\n tracking,\n code: \"ECOTRACK_NETWORK_ERROR\",\n message: \"Impossible de joindre OM Express.\",\n }, 502);\n }\n});\n\napp.post(\"/api/return/validate\", async (c) => {\n if (!(await isAuthenticated(c.req.raw))) {\n return c.json({ ok: false, code: \"LOCKED\", message: \"Application verrouillée.\" }, 401);\n }\n\n let payload: { tracking?: unknown };\n try {\n payload = await c.req.json();\n } catch {\n return c.json({ ok: false, message: \"Requête invalide.\" }, 400);\n }\n\n const tracking = String(payload.tracking ?? \"\").trim().toUpperCase();\n if (!/^[A-Z0-9_-]{6,64}$/.test(tracking)) {\n return c.json({ ok: false, message: \"Numéro de tracking invalide.\" }, 400);\n }\n\n const credentials = await getEcotrackCredentials();\n if (!credentials) {\n return c.json({ ok: false, code: \"API_NOT_CONFIGURED\", message: \"API Ecotrack non configurée.\" }, 503);\n }\n\n try {\n const checkUrl = new URL(\"https://omexpress.ecotrack.dz/api/v1/get/orders\");\n checkUrl.searchParams.set(\"tracking\", tracking);\n checkUrl.searchParams.set(\"api_token\", credentials.apiToken);\n\n const checkResponse = await fetch(checkUrl, {\n method: \"GET\",\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${credentials.apiToken}`,\n },\n });\n\n if (!checkResponse.ok) {\n return c.json({ ok: false, code: \"PRECHECK_FAILED\", message: \"Impossible de revérifier le colis avant validation.\" }, 502);\n }\n\n const checkData: any = await checkResponse.json();\n const orders = Array.isArray(checkData?.data)\n ? checkData.data\n : Array.isArray(checkData)\n ? checkData\n : [];\n const order = orders[0] || null;\n if (!order) {\n return c.json({ ok: false, code: \"TRACKING_NOT_FOUND\", message: \"Tracking introuvable dans OM Express.\" }, 404);\n }\n\n const status = String(order.status_name ?? order.status ?? order.statut ?? order.etat ?? order.state ?? \"\").trim();\n const normalizedStatus = normalizeEcotrackStatus(status);\n if (![\"retour_recu\", \"livraison_echoue_recu\"].includes(normalizedStatus)) {\n return c.json({\n ok: false,\n code: \"RETURN_NOT_READY\",\n tracking,\n status: status || null,\n message: `Validation refusée : statut actuel ${status || \"inconnu\"}.`,\n }, 409);\n }\n\n const validateUrl = new URL(\"https://omexpress.ecotrack.dz/api/v1/valid/returns\");\n validateUrl.searchParams.set(\"api_token\", credentials.apiToken);\n\n const validateResponse = await fetch(validateUrl, {\n method: \"POST\",\n headers: {\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${credentials.apiToken}`,\n },\n body: JSON.stringify({ trackings: [tracking] }),\n });\n\n const raw = await validateResponse.text();\n let result: any = null;\n if (raw.trim()) {\n try { result = JSON.parse(raw); } catch { result = null; }\n }\n\n console.log(\"RETURN_API\", JSON.stringify({\n status: validateResponse.status,\n returned: typeof result?.returned === \"string\" ? result.returned : null,\n emptyBody: !raw.trim(),\n }));\n\n if (validateResponse.status === 422) {\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_INVALID\",\n message: result?.message || \"OM Express a refusé le numéro de tracking envoyé.\",\n }, 422);\n }\n\n if (!validateResponse.ok) {\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_API_ERROR\",\n httpStatus: validateResponse.status,\n message: `OM Express a refusé la validation du retour (${validateResponse.status}).`,\n }, 502);\n }\n\n if (result?.returned === \"fail\") {\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_NOT_ELIGIBLE\",\n message: \"OM Express n’a trouvé aucun retour éligible à valider pour ce tracking.\",\n }, 409);\n }\n\n if (result?.returned === \"success\") {\n console.log(\"RETURN_VALIDATED\", tracking);\n return c.json({\n ok: true,\n tracking,\n code: \"RETURN_VALIDATED\",\n message: \"Retour validé avec succès dans OM Express.\",\n });\n }\n\n // La documentation montre aussi un exemple 200 sans corps. Dans ce cas,\n // on revérifie le tracking avant d'annoncer un succès.\n if (!raw.trim()) {\n for (let attempt = 0; attempt < 3; attempt += 1) {\n if (attempt > 0) await new Promise((resolve) => setTimeout(resolve, 350));\n const verifyUrl = new URL(\"https://omexpress.ecotrack.dz/api/v1/get/orders\");\n verifyUrl.searchParams.set(\"tracking\", tracking);\n verifyUrl.searchParams.set(\"api_token\", credentials.apiToken);\n const verifyResponse = await fetch(verifyUrl, {\n method: \"GET\",\n headers: {\n Accept: \"application/json\",\n Authorization: `Bearer ${credentials.apiToken}`,\n },\n });\n if (!verifyResponse.ok) continue;\n const verifyData: any = await verifyResponse.json();\n const verifyOrders = Array.isArray(verifyData?.data)\n ? verifyData.data\n : Array.isArray(verifyData)\n ? verifyData\n : [];\n const verifyOrder = verifyOrders[0] || null;\n if (!verifyOrder) continue;\n const verifyStatus = String(\n verifyOrder.status_name ?? verifyOrder.status ?? verifyOrder.statut ?? verifyOrder.etat ?? verifyOrder.state ?? \"\",\n ).trim();\n const normalizedVerifyStatus = normalizeEcotrackStatus(verifyStatus);\n if ([\n \"return_validated_by_partener\",\n \"return_validated_by_partner\",\n \"retour_valide\",\n \"retour_validee\",\n ].includes(normalizedVerifyStatus)) {\n console.log(\"RETURN_VALIDATED\", tracking);\n return c.json({\n ok: true,\n tracking,\n code: \"RETURN_VALIDATED\",\n status: verifyStatus || null,\n message: \"Retour validé avec succès dans OM Express.\",\n });\n }\n }\n\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_ACCEPTED_UNCONFIRMED\",\n message: \"OM Express a accepté la requête mais n’a renvoyé aucune confirmation. Revérifie le tracking avant de recommencer.\",\n }, 202);\n }\n\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_UNEXPECTED_RESPONSE\",\n message: \"Réponse inattendue de l’API OM Express.\",\n }, 502);\n } catch (error) {\n console.error(\"RETURN_VALIDATE_ERROR\", error instanceof Error ? error.message : String(error));\n return c.json({\n ok: false,\n tracking,\n code: \"RETURN_NETWORK_ERROR\",\n message: \"Erreur réseau pendant la validation du retour.\",\n }, 502);\n }\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n",[157],"a373e6a5-2b4c-4ec4-8183-faccde24322d","README.md","01a09189-5663-7486-bd31-6b2de115ed27",1,["D",1789148091907],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[165],"273ebb44-c518-4a33-a45f-2755ef99712f","CHANGELOG.md","01a09189-5663-7486-bd31-67a9b60befea",["D",1789148091907],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Retours Ecotrack

{apiConfigured ? \"API enregistrée\" : \"Ajouter l’API\"}

Scanner un retour

Retours Ecotrack

{apiConfigured ? \"API enregistrée\" : \"Ajouter l’API\"}

Scanner un retour

Diff · v82