[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_159":160,"_161":162},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":53,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",19,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","9f13ed0e-8876-11f1-adcd-1607ee4eb77e","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst REPORT_API_URL =\n \"https://mangalchimya_hd--edd3c6e2869811f183f71607ee4eb77e.web.val.run\";\n\nconst NB_SECTIONS = 14;\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Admin-Secret\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n};\n\n// ---------------------------------------------------------------------------\n// TABLE JOBS\n// ---------------------------------------------------------------------------\n\nasync function ensureJobsTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mangalchimya_jobs_test (\n job_id TEXT PRIMARY KEY,\n session_hash TEXT NOT NULL,\n email TEXT NOT NULL,\n statut TEXT NOT NULL DEFAULT 'pending',\n progression INTEGER NOT NULL DEFAULT 0,\n erreur TEXT,\n pdf_key TEXT,\n payload TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n}\n\n// ---------------------------------------------------------------------------\n// HASH DE SESSION\n// Doit reproduire exactement hashSession() du Val principal.\n// ---------------------------------------------------------------------------\n\nasync function sha256Hex(base: string): Promise {\n const buf = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(base),\n );\n\n return Array.from(new Uint8Array(buf))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function hashSession(payload: any): Promise {\n return await sha256Hex(JSON.stringify({\n hdType: payload.hdType,\n hdAutorite: payload.hdAutorite,\n hdProfil: payload.hdProfil,\n hdDefinition: payload.hdDefinition,\n marqueurs: payload.marqueurs,\n codeAcces: (payload.codeAcces || \"\").trim(),\n }));\n}\n\n// ---------------------------------------------------------------------------\n// TRAITEMENT DU RAPPORT\n// ---------------------------------------------------------------------------\n\nasync function traiterJob(jobId: string): Promise {\n const rows = await sqlite.execute({\n sql: `SELECT payload, statut\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n throw new Error(\"Job introuvable.\");\n }\n\n const payloadJson = rows.rows[0][0] as string;\n const statut = rows.rows[0][1] as string;\n\n // Empêche de relancer volontairement un job déjà terminé.\n if (statut === \"completed\") return;\n\n const maintenant = new Date().toISOString();\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'processing',\n erreur = NULL,\n updated_at = ?\n WHERE job_id = ?`,\n args: [maintenant, jobId],\n });\n\n const payload = JSON.parse(payloadJson);\n\n const email = String(payload.email || \"\").trim();\n\n try {\n for (let chapter = 1; chapter <= NB_SECTIONS; chapter++) {\n console.log(`[JOB ${jobId}] Section ${chapter}/${NB_SECTIONS}`);\n\n const res = await fetch(REPORT_API_URL, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n ...payload,\n chapter,\n }),\n });\n\n const data = await res.json().catch(() => ({}));\n\n if (!res.ok || data.error) {\n throw new Error(\n data.error ||\n `Erreur génération section ${chapter} (HTTP ${res.status})`,\n );\n }\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET progression = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n chapter,\n new Date().toISOString(),\n jobId,\n ],\n });\n }\n\n console.log(`[JOB ${jobId}] 14 sections terminées. Génération du PDF...`);\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'generating_pdf',\n progression = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n NB_SECTIONS,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n // Le Val principal sait déjà fabriquer le PDF complet.\n // On lui envoie exactement le même payload.\n const pdfRes = await fetch(`${REPORT_API_URL}?format=pdf`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(payload),\n });\n\n if (!pdfRes.ok) {\n const erreurPdf = await pdfRes.text();\n\n throw new Error(\n `Erreur génération PDF (HTTP ${pdfRes.status}) : ${erreurPdf}`,\n );\n }\n\n const pdfBytes = new Uint8Array(\n await pdfRes.arrayBuffer(),\n );\n\n if (pdfBytes.byteLength === 0) {\n throw new Error(\"Le PDF généré est vide.\");\n }\n\n console.log(\n `[JOB ${jobId}] PDF généré : ${pdfBytes.byteLength} octets.`,\n );\n\n // Une clé unique par rapport.\n const pdfKey = `mangalchimya/reports/${jobId}.pdf`;\n\n await blob.set(\n pdfKey,\n new Blob(\n [pdfBytes],\n { type: \"application/pdf\" },\n ),\n );\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'completed',\n progression = ?,\n pdf_key = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n NB_SECTIONS,\n pdfKey,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n console.log(\n `[JOB ${jobId}] Rapport terminé et PDF stocké : ${pdfKey}`,\n );\n\n const resendApiKey = Deno.env.get(\"RESEND_API_KEY\");\n\n if (!resendApiKey) {\n throw new Error(\"RESEND_API_KEY manquante.\");\n }\n\n if (!email) {\n throw new Error(\"Adresse e-mail client manquante.\");\n }\n\n const prenomEmail = String(payload.prenom || \"toi\").trim();\n\n const emailRes = await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${resendApiKey}`,\n \"Content-Type\": \"application/json\",\n \"Idempotency-Key\": `rapport-srank-${jobId}`,\n },\n body: JSON.stringify({\n from: \"MangAlchimya \",\n to: [email],\n subject: `${prenomEmail}, ton Rapport S-Rank™ est prêt`,\n html: `\n

Ton Rapport S-Rank™ est prêt.

\n\n

Bonjour ${prenomEmail},

\n\n

\n Ta lecture business personnalisée est terminée.\n Tu trouveras ton Rapport S-Rank™ en pièce jointe.\n

\n\n

\n Prends le temps de le parcourir à ton rythme et de revenir\n particulièrement sur ta Ligne de Jeu et tes prochains leviers.\n

\n\n

\n À bientôt,
\n MangAlchimya\n

\n `,\n attachments: [\n {\n filename: `Rapport_S-Rank_${\n prenomEmail.replace(/[^a-zA-Z0-9_-]/g, \"_\")\n }.pdf`,\n content: btoa(\n Array.from(pdfBytes)\n .map((b) => String.fromCharCode(b))\n .join(\"\"),\n ),\n },\n ],\n }),\n });\n\n const emailData = await emailRes.json().catch(() => ({}));\n\n if (!emailRes.ok) {\n throw new Error(\n `Erreur Resend (HTTP ${emailRes.status}) : ${\n JSON.stringify(emailData)\n }`,\n );\n }\n\n console.log(\n `[JOB ${jobId}] E-mail envoyé à ${email}.`,\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(`[JOB ${jobId}] ÉCHEC :`, message);\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'failed',\n erreur = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n message,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n throw err;\n }\n}\n\n// ---------------------------------------------------------------------------\n// HTTP\n// ---------------------------------------------------------------------------\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: CORS_HEADERS,\n });\n }\n\n await ensureJobsTable();\n\n const url = new URL(req.url);\n\n // -------------------------------------------------------------------------\n // /status?job_id=...\n // Permettra plus tard au frontend de connaître la progression.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/status\"\n ) {\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT statut, progression, erreur\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Job introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n return Response.json(\n {\n job_id: jobId,\n statut: rows.rows[0][0],\n progression: rows.rows[0][1],\n erreur: rows.rows[0][2],\n total: NB_SECTIONS,\n },\n { headers: CORS_HEADERS },\n );\n }\n\n // -------------------------------------------------------------------------\n // /process\n // Cet endpoint n'est appelé que par le worker lui-même.\n // -------------------------------------------------------------------------\n\n // -------------------------------------------------------------------------\n // /admin/reports\n // Recherche sécurisée des rapports clients.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/admin/reports\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = url.searchParams.get(\"secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const recherche = (\n url.searchParams.get(\"q\") || \"\"\n ).trim().toLowerCase();\n\n const rows = await sqlite.execute({\n sql: `SELECT\n job_id,\n email,\n statut,\n progression,\n erreur,\n pdf_key,\n payload,\n created_at,\n updated_at\n FROM mangalchimya_jobs_test\n ORDER BY created_at DESC\n LIMIT 100`,\n args: [],\n });\n\n const rapports = rows.rows\n .map((row: any[]) => {\n let payload: any = {};\n\n try {\n payload = JSON.parse(String(row[6] || \"{}\"));\n } catch {\n payload = {};\n }\n\n return {\n job_id: String(row[0] || \"\"),\n prenom: String(payload.prenom || \"\"),\n email: String(row[1] || \"\"),\n statut: String(row[2] || \"\"),\n progression: Number(row[3] || 0),\n erreur: row[4] ? String(row[4]) : null,\n pdf_disponible: Boolean(row[5]),\n created_at: String(row[7] || \"\"),\n updated_at: String(row[8] || \"\"),\n };\n })\n .filter((rapport: any) => {\n if (!recherche) return true;\n\n return (\n rapport.prenom.toLowerCase().includes(recherche) ||\n rapport.email.toLowerCase().includes(recherche) ||\n rapport.job_id.toLowerCase().includes(recherche)\n );\n });\n\n return Response.json(\n {\n ok: true,\n rapports,\n },\n {\n headers: CORS_HEADERS,\n },\n );\n }\n\n // -------------------------------------------------------------------------\n // /admin/pdf\n // Téléchargement sécurisé d'un PDF depuis l'espace administrateur.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/admin/pdf\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = url.searchParams.get(\"secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Rapport introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const pdfKey = rows.rows[0][0] as string | null;\n const payloadJson = rows.rows[0][1] as string;\n\n if (!pdfKey) {\n return Response.json(\n { error: \"Aucun PDF disponible pour ce rapport.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = await pdfResponse.arrayBuffer();\n\n const payload = JSON.parse(payloadJson);\n\n const prenom = String(payload.prenom || \"client\")\n .replace(/[^a-zA-Z0-9À-ÿ_-]/g, \"_\");\n\n return new Response(pdfBytes, {\n headers: {\n \"Content-Type\": \"application/pdf\",\n \"Content-Length\": String(pdfBytes.byteLength),\n \"Content-Disposition\":\n `attachment; filename=\"Rapport_S-Rank_${prenom}.pdf\"`,\n ...CORS_HEADERS,\n },\n });\n } catch (err) {\n console.error(\n `[ADMIN PDF ${jobId}] Lecture impossible :`,\n err,\n );\n\n return Response.json(\n { error: \"PDF stocké introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /admin/resend\n // Renvoie un rapport existant par e-mail depuis l'espace admin.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/admin/resend\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = req.headers.get(\"X-Admin-Secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const { job_id } = await req.json();\n\n if (!job_id) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT email, pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [job_id],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Rapport introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const email = String(rows.rows[0][0] || \"\").trim();\n const pdfKey = rows.rows[0][1] as string | null;\n const payloadJson = String(rows.rows[0][2] || \"{}\");\n\n if (!email) {\n return Response.json(\n { error: \"Aucune adresse e-mail enregistrée pour ce rapport.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n if (!pdfKey) {\n return Response.json(\n { error: \"Aucun PDF disponible pour ce rapport.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const resendApiKey = Deno.env.get(\"RESEND_API_KEY\");\n\n if (!resendApiKey) {\n throw new Error(\"RESEND_API_KEY manquante.\");\n }\n\n const payload = JSON.parse(payloadJson);\n const prenom = String(payload.prenom || \"toi\").trim();\n\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = new Uint8Array(\n await pdfResponse.arrayBuffer(),\n );\n\n const emailRes = await fetch(\n \"https://api.resend.com/emails\",\n {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${resendApiKey}`,\n \"Content-Type\": \"application/json\",\n \"Idempotency-Key\": `admin-resend-${job_id}-${Date.now()}`,\n },\n body: JSON.stringify({\n from: \"MangAlchimya \",\n to: [email],\n subject: `${prenom}, ton Rapport S-Rank™`,\n html: `\n

Ton Rapport S-Rank™

\n\n

Bonjour ${prenom},

\n\n

\n Comme convenu, voici à nouveau ton Rapport S-Rank™\n en pièce jointe.\n

\n\n

\n À bientôt,
\n MangAlchimya\n

\n `,\n attachments: [\n {\n filename: `Rapport_S-Rank_${\n prenom.replace(/[^a-zA-Z0-9_-]/g, \"_\")\n }.pdf`,\n content: btoa(\n Array.from(pdfBytes)\n .map((b) => String.fromCharCode(b))\n .join(\"\"),\n ),\n },\n ],\n }),\n },\n );\n\n const emailData = await emailRes.json().catch(() => ({}));\n\n if (!emailRes.ok) {\n throw new Error(\n `Erreur Resend (HTTP ${emailRes.status}) : ${\n JSON.stringify(emailData)\n }`,\n );\n }\n\n console.log(\n `[ADMIN RESEND ${job_id}] E-mail renvoyé à ${email}.`,\n );\n\n return Response.json(\n {\n ok: true,\n message: `Rapport renvoyé à ${email}.`,\n },\n {\n headers: CORS_HEADERS,\n },\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(\"[ADMIN RESEND] ÉCHEC :\", message);\n\n return Response.json(\n { error: message },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /pdf\n // Téléchargement client du PDF.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/pdf\"\n ) {\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT statut, pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Job introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const statut = rows.rows[0][0] as string;\n const pdfKey = rows.rows[0][1] as string | null;\n const payloadJson = rows.rows[0][2] as string;\n\n if (statut !== \"completed\" || !pdfKey) {\n return Response.json(\n {\n error: \"Le PDF n'est pas encore disponible.\",\n statut,\n },\n {\n status: 409,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = await pdfResponse.arrayBuffer();\n\n const payload = JSON.parse(payloadJson);\n const prenom = String(payload.prenom || \"client\")\n .replace(/[^a-zA-Z0-9À-ÿ_-]/g, \"_\");\n\n return new Response(pdfBytes, {\n headers: {\n \"Content-Type\": \"application/pdf\",\n \"Content-Length\": String(pdfBytes.byteLength),\n \"Content-Disposition\":\n `attachment; filename=\"Rapport_S-Rank_${prenom}.pdf\"`,\n ...CORS_HEADERS,\n },\n });\n } catch (err) {\n console.error(\n `[JOB ${jobId}] Lecture PDF impossible :`,\n err,\n );\n\n return Response.json(\n { error: \"PDF stocké introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /process\n // Cet endpoint n'est appelé que par le worker lui-même.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/process\"\n ) {\n const secret = Deno.env.get(\"WORKER_SECRET\");\n\n if (\n !secret ||\n req.headers.get(\"X-Worker-Secret\") !== secret\n ) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const { job_id } = await req.json();\n\n if (!job_id) {\n throw new Error(\"job_id manquant.\");\n }\n\n await traiterJob(job_id);\n\n return Response.json(\n {\n ok: true,\n job_id,\n },\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n return Response.json(\n {\n error: err instanceof Error ? err.message : String(err),\n },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // POST /\n // Le navigateur appelle uniquement cet endpoint.\n // Il crée le job puis répond immédiatement.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/\"\n ) {\n try {\n const payload = await req.json();\n\n if (!payload.codeAcces?.trim()) {\n return Response.json(\n { error: \"Code d'accès manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n // Vérification immédiate du code avant de créer le job.\n const verification = await fetch(\n `${REPORT_API_URL}?checkCode=${\n encodeURIComponent(payload.codeAcces.trim())\n }`,\n );\n\n const verificationData = await verification.json()\n .catch(() => ({}));\n\n if (!verification.ok || !verificationData.valid) {\n return Response.json(\n { error: \"Code d'accès invalide.\" },\n {\n status: 403,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const jobId = crypto.randomUUID();\n const sessionHash = await hashSession(payload);\n\n // L'e-mail sera rendu obligatoire dans l'étape suivante.\n // Pour l'instant, une chaîne vide permet de tester l'asynchrone.\n const email = String(payload.email || \"\").trim();\n\n console.log(\"[EMAIL RECU PAR LE WORKER]\", email);\n\n const maintenant = new Date().toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO mangalchimya_jobs_test\n (\n job_id,\n session_hash,\n email,\n statut,\n progression,\n erreur,\n pdf_key,\n payload,\n created_at,\n updated_at\n )\n VALUES (?, ?, ?, 'pending', 0, NULL, NULL, ?, ?, ?)`,\n args: [\n jobId,\n sessionHash,\n email,\n JSON.stringify(payload),\n maintenant,\n maintenant,\n ],\n });\n\n const secret = Deno.env.get(\"WORKER_SECRET\");\n\n if (!secret) {\n throw new Error(\n \"Secret WORKER_SECRET manquant.\",\n );\n }\n\n // IMPORTANT :\n // volontairement PAS de \"await\".\n // Le navigateur reçoit sa réponse tout de suite.\n fetch(`${url.origin}/process`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Worker-Secret\": secret,\n },\n body: JSON.stringify({\n job_id: jobId,\n }),\n });\n\n return Response.json(\n {\n ok: true,\n job_id: jobId,\n statut: \"pending\",\n message: \"Ta lecture est en préparation. Tu peux quitter cette page.\",\n },\n {\n status: 202,\n headers: CORS_HEADERS,\n },\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(\"Création du job impossible :\", message);\n\n return Response.json(\n { error: message },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n return Response.json(\n { error: \"Route inconnue.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n}","import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst REPORT_API_URL =\n \"https://mangalchimya_hd--edd3c6e2869811f183f71607ee4eb77e.web.val.run\";\n\nconst NB_SECTIONS = 14;\n\n// Un job sans aucune mise à jour depuis 15 minutes est considéré comme bloqué.\n// Cette marge est volontairement supérieure au timeout Pro de 10 minutes.\nconst JOB_BLOQUE_APRES_MINUTES = 15;\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Admin-Secret\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n};\n\n// ---------------------------------------------------------------------------\n// TABLE JOBS\n// ---------------------------------------------------------------------------\n\nasync function ensureJobsTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS mangalchimya_jobs_test (\n job_id TEXT PRIMARY KEY,\n session_hash TEXT NOT NULL,\n email TEXT NOT NULL,\n statut TEXT NOT NULL DEFAULT 'pending',\n progression INTEGER NOT NULL DEFAULT 0,\n erreur TEXT,\n pdf_key TEXT,\n payload TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n}\n\n// ---------------------------------------------------------------------------\n// DÉTECTION DES JOBS BLOQUÉS\n// ---------------------------------------------------------------------------\n\nasync function marquerJobsBloquesCommeEchoues(\n jobId?: string,\n): Promise {\n const limite = new Date(\n Date.now() - JOB_BLOQUE_APRES_MINUTES * 60 * 1000,\n ).toISOString();\n\n const message = `Génération interrompue ou bloquée depuis plus de ` +\n `${JOB_BLOQUE_APRES_MINUTES} minutes.`;\n\n if (jobId) {\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'failed',\n erreur = ?,\n updated_at = ?\n WHERE job_id = ?\n AND statut IN ('pending', 'processing', 'generating_pdf')\n AND updated_at < ?`,\n args: [\n message,\n new Date().toISOString(),\n jobId,\n limite,\n ],\n });\n\n return;\n }\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'failed',\n erreur = ?,\n updated_at = ?\n WHERE statut IN ('pending', 'processing', 'generating_pdf')\n AND updated_at < ?`,\n args: [\n message,\n new Date().toISOString(),\n limite,\n ],\n });\n}\n\n// ---------------------------------------------------------------------------\n// HASH DE SESSION\n// Doit reproduire exactement hashSession() du Val principal.\n// ---------------------------------------------------------------------------\n\nasync function sha256Hex(base: string): Promise {\n const buf = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(base),\n );\n\n return Array.from(new Uint8Array(buf))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n}\n\nasync function hashSession(payload: any): Promise {\n return await sha256Hex(JSON.stringify({\n hdType: payload.hdType,\n hdAutorite: payload.hdAutorite,\n hdProfil: payload.hdProfil,\n hdDefinition: payload.hdDefinition,\n marqueurs: payload.marqueurs,\n codeAcces: (payload.codeAcces || \"\").trim(),\n }));\n}\n\n// ---------------------------------------------------------------------------\n// TRAITEMENT DU RAPPORT\n// ---------------------------------------------------------------------------\n\nasync function traiterJob(jobId: string): Promise {\n const rows = await sqlite.execute({\n sql: `SELECT payload, statut\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n throw new Error(\"Job introuvable.\");\n }\n\n const payloadJson = rows.rows[0][0] as string;\n const statut = rows.rows[0][1] as string;\n\n // Empêche de relancer volontairement un job déjà terminé.\n if (statut === \"completed\") return;\n\n const maintenant = new Date().toISOString();\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'processing',\n progression = 0,\n erreur = NULL,\n updated_at = ?\n WHERE job_id = ?`,\n args: [maintenant, jobId],\n });\n\n const payload = JSON.parse(payloadJson);\n\n const email = String(payload.email || \"\").trim();\n\n try {\n for (let chapter = 1; chapter <= NB_SECTIONS; chapter++) {\n console.log(`[JOB ${jobId}] Section ${chapter}/${NB_SECTIONS}`);\n\n const res = await fetch(REPORT_API_URL, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n ...payload,\n chapter,\n }),\n });\n\n const data = await res.json().catch(() => ({}));\n\n if (!res.ok || data.error) {\n throw new Error(\n data.error ||\n `Erreur génération section ${chapter} (HTTP ${res.status})`,\n );\n }\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET progression = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n chapter,\n new Date().toISOString(),\n jobId,\n ],\n });\n }\n\n console.log(`[JOB ${jobId}] 14 sections terminées. Génération du PDF...`);\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'generating_pdf',\n progression = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n NB_SECTIONS,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n // Le Val principal sait déjà fabriquer le PDF complet.\n // On lui envoie exactement le même payload.\n const pdfRes = await fetch(`${REPORT_API_URL}?format=pdf`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(payload),\n });\n\n if (!pdfRes.ok) {\n const erreurPdf = await pdfRes.text();\n\n throw new Error(\n `Erreur génération PDF (HTTP ${pdfRes.status}) : ${erreurPdf}`,\n );\n }\n\n const pdfBytes = new Uint8Array(\n await pdfRes.arrayBuffer(),\n );\n\n if (pdfBytes.byteLength === 0) {\n throw new Error(\"Le PDF généré est vide.\");\n }\n\n console.log(\n `[JOB ${jobId}] PDF généré : ${pdfBytes.byteLength} octets.`,\n );\n\n // Une clé unique par rapport.\n const pdfKey = `mangalchimya/reports/${jobId}.pdf`;\n\n await blob.set(\n pdfKey,\n new Blob(\n [pdfBytes],\n { type: \"application/pdf\" },\n ),\n );\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'completed',\n progression = ?,\n pdf_key = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n NB_SECTIONS,\n pdfKey,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n console.log(\n `[JOB ${jobId}] Rapport terminé et PDF stocké : ${pdfKey}`,\n );\n\n const resendApiKey = Deno.env.get(\"RESEND_API_KEY\");\n\n if (!resendApiKey) {\n throw new Error(\"RESEND_API_KEY manquante.\");\n }\n\n if (!email) {\n throw new Error(\"Adresse e-mail client manquante.\");\n }\n\n const prenomEmail = String(payload.prenom || \"toi\").trim();\n\n const emailRes = await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${resendApiKey}`,\n \"Content-Type\": \"application/json\",\n \"Idempotency-Key\": `rapport-srank-${jobId}`,\n },\n body: JSON.stringify({\n from: \"MangAlchimya \",\n to: [email],\n subject: `${prenomEmail}, ton Rapport S-Rank™ est prêt`,\n html: `\n

Ton Rapport S-Rank™ est prêt.

\n\n

Bonjour ${prenomEmail},

\n\n

\n Ta lecture business personnalisée est terminée.\n Tu trouveras ton Rapport S-Rank™ en pièce jointe.\n

\n\n

\n Prends le temps de le parcourir à ton rythme et de revenir\n particulièrement sur ta Ligne de Jeu et tes prochains leviers.\n

\n\n

\n À bientôt,
\n MangAlchimya\n

\n `,\n attachments: [\n {\n filename: `Rapport_S-Rank_${\n prenomEmail.replace(/[^a-zA-Z0-9_-]/g, \"_\")\n }.pdf`,\n content: btoa(\n Array.from(pdfBytes)\n .map((b) => String.fromCharCode(b))\n .join(\"\"),\n ),\n },\n ],\n }),\n });\n\n const emailData = await emailRes.json().catch(() => ({}));\n\n if (!emailRes.ok) {\n throw new Error(\n `Erreur Resend (HTTP ${emailRes.status}) : ${\n JSON.stringify(emailData)\n }`,\n );\n }\n\n console.log(\n `[JOB ${jobId}] E-mail envoyé à ${email}.`,\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(`[JOB ${jobId}] ÉCHEC :`, message);\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'failed',\n erreur = ?,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n message,\n new Date().toISOString(),\n jobId,\n ],\n });\n\n throw err;\n }\n}\n\n// ---------------------------------------------------------------------------\n// HTTP\n// ---------------------------------------------------------------------------\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n headers: CORS_HEADERS,\n });\n }\n\n await ensureJobsTable();\n\n const url = new URL(req.url);\n\n // -------------------------------------------------------------------------\n // /status?job_id=...\n // Permettra plus tard au frontend de connaître la progression.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/status\"\n ) {\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n await marquerJobsBloquesCommeEchoues(jobId);\n\n const rows = await sqlite.execute({\n sql: `SELECT statut, progression, erreur\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Job introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n return Response.json(\n {\n job_id: jobId,\n statut: rows.rows[0][0],\n progression: rows.rows[0][1],\n erreur: rows.rows[0][2],\n total: NB_SECTIONS,\n },\n { headers: CORS_HEADERS },\n );\n }\n\n // -------------------------------------------------------------------------\n // /process\n // Cet endpoint n'est appelé que par le worker lui-même.\n // -------------------------------------------------------------------------\n\n // -------------------------------------------------------------------------\n // /admin/reports\n // Recherche sécurisée des rapports clients.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/admin/reports\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = url.searchParams.get(\"secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const recherche = (\n url.searchParams.get(\"q\") || \"\"\n ).trim().toLowerCase();\n\n await marquerJobsBloquesCommeEchoues();\n\n const rows = await sqlite.execute({\n sql: `SELECT\n job_id,\n email,\n statut,\n progression,\n erreur,\n pdf_key,\n payload,\n created_at,\n updated_at\n FROM mangalchimya_jobs_test\n ORDER BY created_at DESC\n LIMIT 100`,\n args: [],\n });\n\n const rapports = rows.rows\n .map((row: any[]) => {\n let payload: any = {};\n\n try {\n payload = JSON.parse(String(row[6] || \"{}\"));\n } catch {\n payload = {};\n }\n\n return {\n job_id: String(row[0] || \"\"),\n prenom: String(payload.prenom || \"\"),\n email: String(row[1] || \"\"),\n statut: String(row[2] || \"\"),\n progression: Number(row[3] || 0),\n erreur: row[4] ? String(row[4]) : null,\n pdf_disponible: Boolean(row[5]),\n created_at: String(row[7] || \"\"),\n updated_at: String(row[8] || \"\"),\n };\n })\n .filter((rapport: any) => {\n if (!recherche) return true;\n\n return (\n rapport.prenom.toLowerCase().includes(recherche) ||\n rapport.email.toLowerCase().includes(recherche) ||\n rapport.job_id.toLowerCase().includes(recherche)\n );\n });\n\n return Response.json(\n {\n ok: true,\n rapports,\n },\n {\n headers: CORS_HEADERS,\n },\n );\n }\n\n // -------------------------------------------------------------------------\n // /admin/retry\n // Relance depuis le début un rapport échoué ou bloqué, sans ressaisie client.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/admin/retry\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = req.headers.get(\"X-Admin-Secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const { job_id } = await req.json();\n\n if (!job_id) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n await marquerJobsBloquesCommeEchoues(job_id);\n\n const rows = await sqlite.execute({\n sql: `SELECT statut\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [job_id],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Rapport introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const statut = String(rows.rows[0][0] || \"\");\n\n if (statut === \"completed\") {\n return Response.json(\n {\n error:\n \"Ce rapport est déjà terminé. Utilise plutôt « Renvoyer par e-mail ».\",\n },\n {\n status: 409,\n headers: CORS_HEADERS,\n },\n );\n }\n\n if (\n statut === \"processing\" ||\n statut === \"generating_pdf\" ||\n statut === \"pending\"\n ) {\n return Response.json(\n {\n error:\n \"Ce rapport semble encore en cours. Attends qu'il soit déclaré en échec avant de le relancer.\",\n },\n {\n status: 409,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const secret = Deno.env.get(\"WORKER_SECRET\");\n\n if (!secret) {\n throw new Error(\"Secret WORKER_SECRET manquant.\");\n }\n\n await sqlite.execute({\n sql: `UPDATE mangalchimya_jobs_test\n SET statut = 'pending',\n progression = 0,\n erreur = NULL,\n pdf_key = NULL,\n updated_at = ?\n WHERE job_id = ?`,\n args: [\n new Date().toISOString(),\n job_id,\n ],\n });\n\n fetch(`${url.origin}/process`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Worker-Secret\": secret,\n },\n body: JSON.stringify({\n job_id,\n }),\n });\n\n console.log(`[ADMIN RETRY ${job_id}] Relance demandée.`);\n\n return Response.json(\n {\n ok: true,\n job_id,\n statut: \"pending\",\n message: \"La génération a été relancée depuis le début.\",\n },\n {\n status: 202,\n headers: CORS_HEADERS,\n },\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(\"[ADMIN RETRY] ÉCHEC :\", message);\n\n return Response.json(\n { error: message },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /admin/pdf\n // Téléchargement sécurisé d'un PDF depuis l'espace administrateur.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/admin/pdf\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = url.searchParams.get(\"secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Rapport introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const pdfKey = rows.rows[0][0] as string | null;\n const payloadJson = rows.rows[0][1] as string;\n\n if (!pdfKey) {\n return Response.json(\n { error: \"Aucun PDF disponible pour ce rapport.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = await pdfResponse.arrayBuffer();\n\n const payload = JSON.parse(payloadJson);\n\n const prenom = String(payload.prenom || \"client\")\n .replace(/[^a-zA-Z0-9À-ÿ_-]/g, \"_\");\n\n return new Response(pdfBytes, {\n headers: {\n \"Content-Type\": \"application/pdf\",\n \"Content-Length\": String(pdfBytes.byteLength),\n \"Content-Disposition\":\n `attachment; filename=\"Rapport_S-Rank_${prenom}.pdf\"`,\n ...CORS_HEADERS,\n },\n });\n } catch (err) {\n console.error(\n `[ADMIN PDF ${jobId}] Lecture impossible :`,\n err,\n );\n\n return Response.json(\n { error: \"PDF stocké introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /admin/resend\n // Renvoie un rapport existant par e-mail depuis l'espace admin.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/admin/resend\"\n ) {\n const adminSecret = Deno.env.get(\"ADMIN_SECRET\");\n const secretRecu = req.headers.get(\"X-Admin-Secret\") || \"\";\n\n if (!adminSecret || secretRecu !== adminSecret) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const { job_id } = await req.json();\n\n if (!job_id) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT email, pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [job_id],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Rapport introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const email = String(rows.rows[0][0] || \"\").trim();\n const pdfKey = rows.rows[0][1] as string | null;\n const payloadJson = String(rows.rows[0][2] || \"{}\");\n\n if (!email) {\n return Response.json(\n { error: \"Aucune adresse e-mail enregistrée pour ce rapport.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n if (!pdfKey) {\n return Response.json(\n { error: \"Aucun PDF disponible pour ce rapport.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const resendApiKey = Deno.env.get(\"RESEND_API_KEY\");\n\n if (!resendApiKey) {\n throw new Error(\"RESEND_API_KEY manquante.\");\n }\n\n const payload = JSON.parse(payloadJson);\n const prenom = String(payload.prenom || \"toi\").trim();\n\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = new Uint8Array(\n await pdfResponse.arrayBuffer(),\n );\n\n const emailRes = await fetch(\n \"https://api.resend.com/emails\",\n {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${resendApiKey}`,\n \"Content-Type\": \"application/json\",\n \"Idempotency-Key\": `admin-resend-${job_id}-${Date.now()}`,\n },\n body: JSON.stringify({\n from: \"MangAlchimya \",\n to: [email],\n subject: `${prenom}, ton Rapport S-Rank™`,\n html: `\n

Ton Rapport S-Rank™

\n\n

Bonjour ${prenom},

\n\n

\n Comme convenu, voici à nouveau ton Rapport S-Rank™\n en pièce jointe.\n

\n\n

\n À bientôt,
\n MangAlchimya\n

\n `,\n attachments: [\n {\n filename: `Rapport_S-Rank_${\n prenom.replace(/[^a-zA-Z0-9_-]/g, \"_\")\n }.pdf`,\n content: btoa(\n Array.from(pdfBytes)\n .map((b) => String.fromCharCode(b))\n .join(\"\"),\n ),\n },\n ],\n }),\n },\n );\n\n const emailData = await emailRes.json().catch(() => ({}));\n\n if (!emailRes.ok) {\n throw new Error(\n `Erreur Resend (HTTP ${emailRes.status}) : ${\n JSON.stringify(emailData)\n }`,\n );\n }\n\n console.log(\n `[ADMIN RESEND ${job_id}] E-mail renvoyé à ${email}.`,\n );\n\n return Response.json(\n {\n ok: true,\n message: `Rapport renvoyé à ${email}.`,\n },\n {\n headers: CORS_HEADERS,\n },\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(\"[ADMIN RESEND] ÉCHEC :\", message);\n\n return Response.json(\n { error: message },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /pdf\n // Téléchargement client du PDF.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"GET\" &&\n url.pathname === \"/pdf\"\n ) {\n const jobId = url.searchParams.get(\"job_id\");\n\n if (!jobId) {\n return Response.json(\n { error: \"job_id manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const rows = await sqlite.execute({\n sql: `SELECT statut, pdf_key, payload\n FROM mangalchimya_jobs_test\n WHERE job_id = ?`,\n args: [jobId],\n });\n\n if (rows.rows.length === 0) {\n return Response.json(\n { error: \"Job introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const statut = rows.rows[0][0] as string;\n const pdfKey = rows.rows[0][1] as string | null;\n const payloadJson = rows.rows[0][2] as string;\n\n if (statut !== \"completed\" || !pdfKey) {\n return Response.json(\n {\n error: \"Le PDF n'est pas encore disponible.\",\n statut,\n },\n {\n status: 409,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const pdfResponse = await blob.get(pdfKey);\n const pdfBytes = await pdfResponse.arrayBuffer();\n\n const payload = JSON.parse(payloadJson);\n const prenom = String(payload.prenom || \"client\")\n .replace(/[^a-zA-Z0-9À-ÿ_-]/g, \"_\");\n\n return new Response(pdfBytes, {\n headers: {\n \"Content-Type\": \"application/pdf\",\n \"Content-Length\": String(pdfBytes.byteLength),\n \"Content-Disposition\":\n `attachment; filename=\"Rapport_S-Rank_${prenom}.pdf\"`,\n ...CORS_HEADERS,\n },\n });\n } catch (err) {\n console.error(\n `[JOB ${jobId}] Lecture PDF impossible :`,\n err,\n );\n\n return Response.json(\n { error: \"PDF stocké introuvable.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // /process\n // Cet endpoint n'est appelé que par le worker lui-même.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/process\"\n ) {\n const secret = Deno.env.get(\"WORKER_SECRET\");\n\n if (\n !secret ||\n req.headers.get(\"X-Worker-Secret\") !== secret\n ) {\n return Response.json(\n { error: \"Non autorisé.\" },\n {\n status: 401,\n headers: CORS_HEADERS,\n },\n );\n }\n\n try {\n const { job_id } = await req.json();\n\n if (!job_id) {\n throw new Error(\"job_id manquant.\");\n }\n\n await traiterJob(job_id);\n\n return Response.json(\n {\n ok: true,\n job_id,\n },\n { headers: CORS_HEADERS },\n );\n } catch (err) {\n return Response.json(\n {\n error: err instanceof Error ? err.message : String(err),\n },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n // -------------------------------------------------------------------------\n // POST /\n // Le navigateur appelle uniquement cet endpoint.\n // Il crée le job puis répond immédiatement.\n // -------------------------------------------------------------------------\n\n if (\n req.method === \"POST\" &&\n url.pathname === \"/\"\n ) {\n try {\n const payload = await req.json();\n\n if (!payload.codeAcces?.trim()) {\n return Response.json(\n { error: \"Code d'accès manquant.\" },\n {\n status: 400,\n headers: CORS_HEADERS,\n },\n );\n }\n\n // Vérification immédiate du code avant de créer le job.\n const verification = await fetch(\n `${REPORT_API_URL}?checkCode=${\n encodeURIComponent(payload.codeAcces.trim())\n }`,\n );\n\n const verificationData = await verification.json()\n .catch(() => ({}));\n\n if (!verification.ok || !verificationData.valid) {\n return Response.json(\n { error: \"Code d'accès invalide.\" },\n {\n status: 403,\n headers: CORS_HEADERS,\n },\n );\n }\n\n const jobId = crypto.randomUUID();\n const sessionHash = await hashSession(payload);\n\n // L'e-mail sera rendu obligatoire dans l'étape suivante.\n // Pour l'instant, une chaîne vide permet de tester l'asynchrone.\n const email = String(payload.email || \"\").trim();\n\n console.log(\"[EMAIL RECU PAR LE WORKER]\", email);\n\n const maintenant = new Date().toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO mangalchimya_jobs_test\n (\n job_id,\n session_hash,\n email,\n statut,\n progression,\n erreur,\n pdf_key,\n payload,\n created_at,\n updated_at\n )\n VALUES (?, ?, ?, 'pending', 0, NULL, NULL, ?, ?, ?)`,\n args: [\n jobId,\n sessionHash,\n email,\n JSON.stringify(payload),\n maintenant,\n maintenant,\n ],\n });\n\n const secret = Deno.env.get(\"WORKER_SECRET\");\n\n if (!secret) {\n throw new Error(\n \"Secret WORKER_SECRET manquant.\",\n );\n }\n\n // IMPORTANT :\n // volontairement PAS de \"await\".\n // Le navigateur reçoit sa réponse tout de suite.\n fetch(`${url.origin}/process`, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Worker-Secret\": secret,\n },\n body: JSON.stringify({\n job_id: jobId,\n }),\n });\n\n return Response.json(\n {\n ok: true,\n job_id: jobId,\n statut: \"pending\",\n message: \"Ta lecture est en préparation. Tu peux quitter cette page.\",\n },\n {\n status: 202,\n headers: CORS_HEADERS,\n },\n );\n } catch (err) {\n const message = err instanceof Error ? err.message : String(err);\n\n console.error(\"Création du job impossible :\", message);\n\n return Response.json(\n { error: message },\n {\n status: 500,\n headers: CORS_HEADERS,\n },\n );\n }\n }\n\n return Response.json(\n { error: \"Route inconnue.\" },\n {\n status: 404,\n headers: CORS_HEADERS,\n },\n );\n}","createdAt",["D",1785343740326],"branchVersion","branchId","7b9929b7-7135-4485-8b71-476ea0f19b80","id","3c907dd5-2254-450f-878a-0acc8257e358","mangalchimya_report_worker",["D",1785017848140],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","de920299-f1d4-4e98-98b1-321679ba4e55","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f2c45-4f6e-711f-8545-9457fd12bd57","tursoName","3c907dd52254450f878a0acc8257e358","tursoHostname","3c907dd52254450f878a0acc8257e358-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789571433983],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",22,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mangalchimya_hd","handle","displayName","MangAlchimya","avatar","https://lh3.googleusercontent.com/a/ACg8ocKzj_IQ73yyBNZipxayKsYqYk0BX7EZLwgL6BK6N1YDdMGCxw=s96-c","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":154,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":155,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":156,"_83":157,"_85":158,"_87":25},"tree",[149],"files",[149],"counts",{"_137":62,"_138":139,"_140":62,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_27":136},"d264463d-c30f-447d-b65d-e5bf681bc769","parentId","latest",["D",1785343740326],18,"label",[28],"pulls","branches",1,"forks","envVars",{"_145":147,"_148":62},"connections",{"_145":62,"_146":62},"count","unfilledCount",6,"emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":150,"_13":134,"_33":34,"_35":37,"_24":25,"_135":-5,"_151":152,"_27":153},["D",1785343740326],"children",[],[28],["D",1785017848140],["D",1789571433983],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":192,"_193":194,"_195":196,"_197":25,"_198":25,"_199":25,"_200":58,"_201":-5,"_202":-7,"_203":-7,"_204":62,"_205":25,"_206":25,"_207":-5,"_208":25,"_209":25,"_210":25,"_211":-5},"ENV",{"_163":164,"_165":166,"_167":89,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v19