[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_213":214,"_215":216},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_42":-7,"_155":-5,"_19":156,"_157":158,"_159":160,"_161":162,"_163":164,"_21":165,"_166":-5,"_167":-5,"_168":24,"_169":170,"_171":117,"_172":-5,"_173":-5,"_174":175},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","mdevslabs","name","eticket","branchName","main","path","purge.ts","project",{"_36":104,"_13":14,"_40":105,"_106":-5,"_107":24,"_108":109,"_110":109,"_111":112,"_113":-5,"_30":71,"_114":115,"_116":117,"_118":-5,"_119":-5,"_120":26,"_44":45,"_121":-5,"_122":-5,"_123":-5,"_124":-5,"_125":126,"_127":126,"_128":129,"_130":129,"_131":129,"_132":126,"_133":126,"_55":134,"_135":136,"_137":138,"_139":24},"file",{"_65":66,"_13":18,"_68":88,"_70":24,"_103":-5},"isDirectory",false,"page",0,"history",[31,32,33,34,35],"hasNext","userId",{"_36":96,"_38":39,"_40":97,"_42":98,"_44":45,"_46":89,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":99,"_21":100,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":101},{"_36":89,"_38":39,"_40":90,"_42":91,"_44":45,"_46":81,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":92,"_21":93,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":94},{"_36":81,"_38":39,"_40":82,"_42":83,"_44":45,"_46":74,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":84,"_21":85,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":86},{"_36":74,"_38":39,"_40":75,"_42":76,"_44":45,"_46":37,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":77,"_21":78,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":79},{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":56,"_21":57,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":63},"id","117e685c-c158-4750-9859-a7bc24641fa9","branchId","f409cc80-4dfe-4648-826c-5f94984b93a7","createdAt",["D",1787751919469],"version",4,"orgId","019f99eb-d944-7332-99f8-2fbb8b1e7011","parentId","775a6eff-6fcc-4018-b874-355fbc6e686a","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_36":71,"_44":45,"_11":12,"_72":73},{"_65":66,"_13":67,"_68":69,"_70":24},"pull","merge","revert","multiple","commits",[64],{"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":56,"_21":57,"_58":-5,"_59":-5,"_60":-5},"fileId","60942de0-a154-11f1-94ff-1607ee4eb77e","new-file-9447.ts","fileType","script","deleted","7ed13655-83c2-4934-a981-01578302df33","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789538399&sig=b90c7895d89b2c8a9d976c298024ed06d954dd92e3be0b0905971776951516a4","1aa716d3-4146-4f53-a550-e96fa32d5205",["D",1787751923971],5,{"_36":71,"_44":45,"_11":12,"_72":73},{"_65":66,"_13":18,"_68":69,"_70":24},[80],{"_36":74,"_38":39,"_40":75,"_42":76,"_44":45,"_46":37,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":77,"_21":78,"_58":-5,"_59":-5,"_60":-5},"935424b1-e5c3-4cda-9d9b-26b98045d386",["D",1787751940428],6,{"_36":71,"_44":45,"_11":12,"_72":73},{"_65":66,"_13":18,"_68":88,"_70":24},[87],{"_36":81,"_38":39,"_40":82,"_42":83,"_44":45,"_46":74,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":84,"_21":85,"_58":-5,"_59":-5,"_60":-5},"interval","2a24cefd-07b5-45cd-9f2b-b49ff6b23fd7",["D",1787751940642],7,{"_36":71,"_44":45,"_11":12,"_72":73},{"_65":66,"_13":18,"_68":88,"_70":24},[95],{"_36":89,"_38":39,"_40":90,"_42":91,"_44":45,"_46":81,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":92,"_21":93,"_58":-5,"_59":-5,"_60":-5},"b7a2b02b-a6dd-4882-9ca7-4daf50863c5b",["D",1787751953719],8,{"_36":71,"_44":45,"_11":12,"_72":73},{"_65":66,"_13":18,"_68":88,"_70":24},[102],{"_36":96,"_38":39,"_40":97,"_42":98,"_44":45,"_46":89,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":-5,"_55":99,"_21":100,"_58":-5,"_59":-5,"_60":-5},"deletedAtVersion","67d3ebca-0208-40ef-9e43-526d7a9d01a3",["D",1787751631620],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","pinnedFileId","b50ac696-a153-11f1-85e9-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_154":73},"org",{"_11":12,"_149":150,"_72":73,"_30":71,"_151":152,"_153":24},"branch",{"_42":140,"_13":16,"_36":39,"_141":104,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":14,"_148":12},"isOwned",17,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","mProjects","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":104,"_13":14,"_40":209,"_106":-5,"_107":24,"_108":109,"_110":109,"_111":112,"_113":-5,"_30":71,"_114":115,"_116":117,"_118":-5,"_119":-5,"_120":26,"_44":45,"_121":-5,"_122":-5,"_123":-5,"_124":-5,"_125":126,"_127":126,"_128":129,"_130":129,"_131":129,"_132":126,"_133":126,"_55":210,"_135":211,"_137":212,"_139":24},"tree",[196,197],"files",[196,197],"counts",{"_184":26,"_185":186,"_187":26,"_188":189,"_190":191},"contents",[],{"_36":176,"_13":18,"_65":66,"_46":-5,"_38":39,"_177":98,"_178":117,"_40":179,"_42":43,"_68":88,"_180":181,"_70":24,"_182":-5,"_17":183},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"3f2cc61b-8cdd-4025-bd4e-9fb44ea489e1","branchVersion","latest",["D",1787751953719],"content","/**\n * E-Ticket — Cron val Val Town (optionnel)\n * -----------------------------------------------------------------------------\n * Crée un Val « Scheduled » qui tourne 1× / jour et colle ce fichier.\n * Il appelle le HTTP val pour supprimer les tickets dont la date d'expiration\n * est dépassée — même si personne n'ouvre l'application.\n *\n * Variables : API_BASE_URL (https://xxx.web.val.run) et CRON_SECRET.\n */\n\nexport default async function purgeExpiredTickets() {\n const base = (Deno.env.get(\"API_BASE_URL\") ?? \"\").replace(/\\/$/, \"\");\n const secret = Deno.env.get(\"CRON_SECRET\") ?? \"\";\n if (!base || !secret) {\n console.error(\"API_BASE_URL ou CRON_SECRET manquant\");\n return;\n }\n const res = await fetch(`${base}/internal/purge`, {\n method: \"POST\",\n headers: { Authorization: `Bearer ${secret}` },\n });\n const body = await res.text();\n console.log(\"purge\", res.status, body);\n}","label",[18],"pulls","branches",1,"forks","envVars",{"_192":194,"_195":26},"connections",{"_192":26,"_193":26},"count","unfilledCount",29,"emptyCount",{"_36":202,"_13":203,"_65":115,"_46":-5,"_38":39,"_177":140,"_178":117,"_40":204,"_42":83,"_68":205,"_180":206,"_70":24,"_182":14,"_199":207,"_17":208},{"_36":176,"_13":18,"_65":66,"_46":-5,"_38":39,"_177":98,"_178":117,"_40":198,"_42":43,"_68":88,"_180":181,"_70":24,"_182":-5,"_199":200,"_17":201},["D",1787751953719],"children",[],[18],"990755bb-5208-43f8-9130-7ee8e81805fa","main.ts",["D",1788082079309],"http","/**\n * E-Ticket — HTTP val Val Town\n * -----------------------------------------------------------------------------\n * Colle ce fichier dans un Val HTTP (nom suggéré : eticket).\n * Déclare les variables d'environnement dans Val Town (voir /.env.example).\n *\n * Auth : OAuth 2.0 Resource Owner Password Credentials\n * POST /oauth/token (grant_type=password)\n * Stockage : Z1 Storage (S3) — un index JSON + fichiers, aucune base SQL.\n *\n * Coffres famille : un seul mot de passe partagé, tickets communs.\n */\n\nimport { AwsClient } from \"https://esm.sh/aws4fetch@1.0.20\";\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\n\ntype TicketKind = \"pdf\" | \"image\" | \"other\";\n\ninterface Brand {\n id: string;\n name: string;\n color: string;\n createdAt: string;\n}\n\ninterface Ticket {\n id: string;\n name: string;\n brandId: string | null;\n tags: string[];\n color: string;\n kind: TicketKind;\n fileName: string;\n mimeType: string;\n size: number;\n notes: string;\n expiresAt: string | null;\n createdAt: string;\n updatedAt: string;\n createdBy: string;\n storageKey: string;\n}\n\ninterface VaultIndex {\n version: number;\n brands: Brand[];\n tickets: Ticket[];\n updatedAt: string;\n}\n\ninterface AuthRecord {\n algo: \"pbkdf2-sha256\";\n iterations: number;\n salt: string;\n hash: string;\n updatedAt: string;\n /** Incrémenté à chaque changement de mot de passe — permet de révoquer les JWT */\n authVersion: number;\n}\n\nconst ITERATIONS = 120_000;\nconst TOKEN_TTL_SEC = 60 * 60 * 24 * 7;\n\n// Helpers sanitization\nfunction sanitizeDisplayName(raw: string): string {\n // Limite 32 car, retire \\r\\n et contrôles, trim\n const s = raw.trim().replace(/[\\r\\n\\t]/g, \" \").replace(/\\s+/g, \" \").slice(\n 0,\n 32,\n );\n // Retire caractères de contrôle restants\n return s.replace(/[\\x00-\\x1F\\x7F]/g, \"\") || \"Famille\";\n}\n\nfunction sanitizeColor(input: string, fallback = \"#c45c26\"): string {\n const s = String(input).trim();\n if (/^#[0-9a-fA-F]{6}$/.test(s)) return s.toLowerCase();\n if (/^#[0-9a-fA-F]{3}$/.test(s)) {\n return `#${s[1]}${s[1]}${s[2]}${s[2]}${s[3]}${s[3]}`.toLowerCase();\n }\n return fallback;\n}\n\nfunction sanitizeFileName(raw: string): string {\n // basename + retire \\r\\n \" ; / \\ et ..\n let name = raw.split(\"/\").pop() ?? raw;\n name = name.split(\"\\\\\").pop() ?? name;\n name = name.replace(/[\\r\\n\"]/g, \"\").replace(/;/g, \"\").replace(/\\.\\.+/g, \".\")\n .trim();\n // Limite 120 car\n if (name.length > 120) {\n const ext = name.includes(\".\")\n ? `.${name.split(\".\").pop()!.slice(0, 10)}`\n : \"\";\n name = `${name.slice(0, 120 - ext.length)}${ext}`;\n }\n return name || \"ticket.bin\";\n}\n\nfunction sanitizeStorageKey(id: string, fileName: string): string {\n const safe = sanitizeFileName(fileName);\n return `files/${id}/${safe}`.replace(/\\/+/g, \"/\");\n}\n\nfunction validateExpiresAt(raw: unknown): string | null {\n if (raw == null || raw === \"\") return null;\n const s = String(raw).trim();\n const ms = Date.parse(s);\n if (Number.isNaN(ms)) {\n throw new HttpError(400, \"Date d'expiration invalide (ISO attendu)\");\n }\n // Normalise en ISO\n return new Date(ms).toISOString();\n}\n\nfunction env(name: string, fallback = \"\"): string {\n return (Deno.env.get(name) ?? fallback).trim();\n}\n\nfunction requiredEnv(name: string): string {\n const v = env(name);\n if (!v) throw new HttpError(500, `Variable manquante : ${name}`);\n return v;\n}\n\nfunction s3(): {\n client: AwsClient;\n bucket: string;\n prefix: string;\n endpoint: string;\n} {\n const accessKey = requiredEnv(\"Z1_ACCESS_KEY\");\n const secretKey = requiredEnv(\"Z1_SECRET_KEY\");\n const bucket = requiredEnv(\"Z1_BUCKET\");\n const endpoint = env(\"Z1_ENDPOINT\", \"https://s3.z1storage.com\").replace(\n /\\/$/,\n \"\",\n );\n const region = env(\"Z1_REGION\", \"default\");\n const prefix = env(\"Z1_PREFIX\", \"eticket\").replace(/^\\/|\\/$/g, \"\");\n const client = new AwsClient({\n accessKeyId: accessKey,\n secretAccessKey: secretKey,\n region,\n service: \"s3\",\n });\n return { client, bucket, prefix, endpoint };\n}\n\nfunction objectUrl(endpoint: string, bucket: string, key: string): string {\n return `${endpoint}/${bucket}/${\n key.split(\"/\").map(encodeURIComponent).join(\"/\")\n }`;\n}\n\nasync function s3Send(\n method: string,\n key: string,\n body?: Uint8Array | string | null,\n contentType?: string,\n): Promise {\n const { client, bucket, prefix, endpoint } = s3();\n const fullKey = `${prefix}/${key}`.replace(/\\/+/g, \"/\");\n const headers: Record = {};\n if (contentType) headers[\"content-type\"] = contentType;\n if (body != null) {\n headers[\"content-length\"] = String(\n typeof body === \"string\"\n ? encoder.encode(body).byteLength\n : body.byteLength,\n );\n }\n return await client.fetch(objectUrl(endpoint, bucket, fullKey), {\n method,\n headers,\n body: body as unknown as BodyInit | undefined,\n });\n}\n\nasync function s3Get(\n key: string,\n): Promise<{ status: number; bytes: Uint8Array; type: string }> {\n const res = await s3Send(\"GET\", key);\n const bytes = new Uint8Array(await res.arrayBuffer());\n return {\n status: res.status,\n bytes,\n type: res.headers.get(\"content-type\") ?? \"application/octet-stream\",\n };\n}\n\nasync function s3Put(\n key: string,\n body: Uint8Array | string,\n contentType: string,\n): Promise {\n const res = await s3Send(\"PUT\", key, body, contentType);\n if (!res.ok) {\n // Ne pas exposer le body S3 au client (fuite info)\n console.error(`Z1 Storage PUT ${res.status} ${key}`);\n throw new HttpError(502, `Erreur de stockage (${res.status})`);\n }\n}\n\nasync function s3Delete(key: string): Promise {\n const res = await s3Send(\"DELETE\", key);\n if (!res.ok && res.status !== 404) {\n console.error(`Z1 Storage DELETE ${res.status} ${key}`);\n throw new HttpError(502, `Erreur de stockage (${res.status})`);\n }\n}\n\nclass HttpError extends Error {\n status: number;\n constructor(status: number, message: string) {\n super(message);\n this.status = status;\n }\n}\n\nfunction json(data: unknown, status = 200, extra: HeadersInit = {}): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...extra },\n });\n}\n\nfunction corsHeaders(req: Request): Record {\n const allowed = env(\"CORS_ORIGIN\", \"*\");\n const origin = req.headers.get(\"origin\") ?? \"\";\n // Si * autorisé partout, on renvoie * sans Vary\n if (allowed === \"*\") {\n return {\n \"access-control-allow-origin\": \"*\",\n \"access-control-allow-headers\":\n \"Authorization, Content-Type, X-Display-Name\",\n \"access-control-allow-methods\": \"GET, POST, PATCH, PUT, DELETE, OPTIONS\",\n \"access-control-max-age\": \"86400\",\n };\n }\n const list = allowed.split(\",\").map((s) => s.trim()).filter(Boolean);\n if (list.includes(\"*\")) {\n return {\n \"access-control-allow-origin\": \"*\",\n \"access-control-allow-headers\":\n \"Authorization, Content-Type, X-Display-Name\",\n \"access-control-allow-methods\": \"GET, POST, PATCH, PUT, DELETE, OPTIONS\",\n \"access-control-max-age\": \"86400\",\n };\n }\n // Pas de fallback vers list[0] : si origin non autorisé, on ne renvoie pas ACAO (le navigateur bloquera)\n if (origin && list.includes(origin)) {\n return {\n \"access-control-allow-origin\": origin,\n \"access-control-allow-headers\":\n \"Authorization, Content-Type, X-Display-Name\",\n \"access-control-allow-methods\": \"GET, POST, PATCH, PUT, DELETE, OPTIONS\",\n \"access-control-max-age\": \"86400\",\n \"vary\": \"Origin\",\n };\n }\n // Pas d'origin ou origin non listé : pas de header ACAO (ou on pourrait renvoyer 403 côté route)\n return {\n \"access-control-allow-headers\":\n \"Authorization, Content-Type, X-Display-Name\",\n \"access-control-allow-methods\": \"GET, POST, PATCH, PUT, DELETE, OPTIONS\",\n \"access-control-max-age\": \"86400\",\n \"vary\": \"Origin\",\n };\n}\n\nfunction withCors(req: Request, res: Response): Response {\n const headers = new Headers(res.headers);\n for (const [k, v] of Object.entries(corsHeaders(req))) headers.set(k, v);\n return new Response(res.body, { status: res.status, headers });\n}\n\nfunction b64url(bytes: Uint8Array): string {\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\n \"=\",\n \"\",\n );\n}\n\nfunction b64urlDecode(s: string): Uint8Array {\n const pad = s.length % 4 === 0 ? \"\" : \"=\".repeat(4 - (s.length % 4));\n const b64 = s.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") + pad;\n let bin: string;\n try {\n bin = atob(b64);\n } catch {\n throw new HttpError(401, \"Jeton invalide\");\n }\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nasync function pbkdf2(\n password: string,\n salt: Uint8Array,\n iterations: number,\n): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(password),\n \"PBKDF2\",\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n {\n name: \"PBKDF2\",\n hash: \"SHA-256\",\n salt: salt as unknown as ArrayBuffer,\n iterations,\n },\n key,\n 256,\n );\n return new Uint8Array(bits);\n}\n\nfunction timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n return diff === 0;\n}\n\nfunction timingSafeEqualString(a: string, b: string): boolean {\n const ab = encoder.encode(a);\n const bb = encoder.encode(b);\n if (ab.length !== bb.length) {\n // Comparaison dummy pour garder temps constant quand longueurs diffèrent\n // On compare quand même jusqu'à max len avec différence forcée\n const max = Math.max(ab.length, bb.length);\n let diff = ab.length ^ bb.length;\n for (let i = 0; i < max; i++) diff |= (ab[i] ?? 0) ^ (bb[i] ?? 0);\n return false;\n }\n return timingSafeEqual(ab, bb);\n}\n\nasync function hmac(secret: string, data: string): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return new Uint8Array(\n await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data)),\n );\n}\n\nasync function signJwt(payload: Record): Promise {\n const header = b64url(\n encoder.encode(JSON.stringify({ alg: \"HS256\", typ: \"JWT\" })),\n );\n const body = b64url(encoder.encode(JSON.stringify(payload)));\n const sig = b64url(\n await hmac(requiredEnv(\"JWT_SECRET\"), `${header}.${body}`),\n );\n return `${header}.${body}.${sig}`;\n}\n\nasync function verifyJwt(\n token: string,\n): Promise<{ sub: string; name: string; exp: number; av?: number }> {\n const parts = token.split(\".\");\n if (parts.length !== 3) throw new HttpError(401, \"Jeton invalide\");\n // Validation header alg\n let header: { alg?: string };\n try {\n header = JSON.parse(decoder.decode(b64urlDecode(parts[0])));\n } catch {\n throw new HttpError(401, \"Jeton invalide\");\n }\n if (header.alg !== \"HS256\") throw new HttpError(401, \"Jeton invalide\");\n let payload: { sub: string; name: string; exp: number; av?: number };\n try {\n payload = JSON.parse(decoder.decode(b64urlDecode(parts[1])));\n } catch {\n throw new HttpError(401, \"Jeton invalide\");\n }\n const expectedSig = b64url(\n await hmac(requiredEnv(\"JWT_SECRET\"), `${parts[0]}.${parts[1]}`),\n );\n // Comparaison timing-safe\n const sigBytes = encoder.encode(parts[2]);\n const expBytes = encoder.encode(expectedSig);\n const sigOk = timingSafeEqual(sigBytes, expBytes) && parts[2] === expectedSig;\n if (!sigOk) throw new HttpError(401, \"Jeton invalide\");\n if (typeof payload.exp !== \"number\" || payload.exp * 1000 < Date.now()) {\n throw new HttpError(401, \"Session expirée\");\n }\n if (typeof payload.sub !== \"string\" || typeof payload.name !== \"string\") {\n throw new HttpError(401, \"Jeton invalide\");\n }\n // Vérification authVersion : si auth.json a une version plus récente, le token est révoqué\n const rec = await readJson(\"auth.json\").catch(() => null);\n const currentAv = rec?.authVersion ?? 0;\n if (typeof payload.av === \"number\" && payload.av < currentAv) {\n throw new HttpError(401, \"Session expirée — mot de passe changé\");\n }\n // Si pas de av dans token et qu'on a déjà changé le mdp au moins une fois, on invalide les vieux tokens sans av\n if (payload.av == null && currentAv > 0) {\n // Tolérance : les tokens émis avant l'introduction de av restent valides jusqu'à expiration,\n // mais après un changement de mdp ils seront rejetés car currentAv > 0 et pas de av.\n // On exige désormais av.\n throw new HttpError(401, \"Session expirée — reconnecte-toi\");\n }\n return payload;\n}\n\nasync function requireAuth(req: Request): Promise<{ name: string }> {\n const header = req.headers.get(\"authorization\") ?? \"\";\n const m = header.match(/^Bearer\\s+(.+)$/i);\n if (!m) throw new HttpError(401, \"Authentification requise\");\n const payload = await verifyJwt(m[1].trim());\n const rawDisplay = req.headers.get(\"x-display-name\")?.trim() ||\n payload.name || \"Famille\";\n const name = sanitizeDisplayName(rawDisplay);\n return { name };\n}\n\nasync function readJson(key: string): Promise {\n const { status, bytes } = await s3Get(key);\n if (status === 404) return null;\n if (status >= 400) {\n console.error(`Z1 lecture ${key} : ${status}`);\n throw new HttpError(502, `Erreur de lecture (${status})`);\n }\n try {\n return JSON.parse(decoder.decode(bytes)) as T;\n } catch {\n console.error(`Z1 JSON parse error ${key}`);\n throw new HttpError(502, \"Erreur de lecture\");\n }\n}\n\nasync function writeJson(key: string, data: unknown): Promise {\n await s3Put(key, JSON.stringify(data, null, 2), \"application/json\");\n}\n\nfunction emptyIndex(): VaultIndex {\n return {\n version: 1,\n brands: [],\n tickets: [],\n updatedAt: new Date().toISOString(),\n };\n}\n\nasync function loadIndex(): Promise {\n const idx = await readJson(\"index.json\");\n return idx ?? emptyIndex();\n}\n\nasync function saveIndex(index: VaultIndex): Promise {\n index.version = (index.version ?? 0) + 1;\n index.updatedAt = new Date().toISOString();\n await writeJson(\"index.json\", index);\n return index;\n}\n\n/** Purge en mémoire sans sauver — pour les handlers d'écriture (évite double save) */\nfunction stripExpiredInPlace(index: VaultIndex): Ticket[] {\n const now = Date.now();\n const keep: Ticket[] = [];\n const removed: Ticket[] = [];\n for (const t of index.tickets) {\n const exp = t.expiresAt ? Date.parse(t.expiresAt) : NaN;\n // Si expiresAt invalide (NaN), on garde (mais sera corrigé à la validation)\n if (t.expiresAt && !Number.isNaN(exp) && exp < now) removed.push(t);\n else keep.push(t);\n }\n if (removed.length) {\n // Best-effort deletion des blobs, sans bloquer si échec\n // On ne fait pas await ici dans stripExpiredInPlace synchrone ; caller fera best-effort async\n index.tickets = keep;\n }\n return removed;\n}\n\nasync function deleteBlobsBestEffort(tickets: Ticket[]): Promise {\n for (const t of tickets) {\n if (!t.storageKey) continue;\n try {\n await s3Delete(t.storageKey);\n } catch {\n /* best-effort */\n }\n }\n}\n\nasync function purgeExpired(\n index: VaultIndex,\n): Promise<{ index: VaultIndex; removed: Ticket[] }> {\n const now = Date.now();\n const keep: Ticket[] = [];\n const removed: Ticket[] = [];\n for (const t of index.tickets) {\n const exp = t.expiresAt ? Date.parse(t.expiresAt) : NaN;\n if (t.expiresAt && !Number.isNaN(exp) && exp < now) removed.push(t);\n else keep.push(t);\n }\n if (!removed.length) return { index, removed };\n await deleteBlobsBestEffort(removed);\n index.tickets = keep;\n await saveIndex(index);\n return { index, removed };\n}\n\nasync function ensureAuthRecord(): Promise {\n return await readJson(\"auth.json\");\n}\n\nasync function verifyPassword(password: string): Promise {\n if (!password) return false;\n const bootstrap = env(\"VAULT_PASSWORD\");\n const rec = await ensureAuthRecord();\n if (rec) {\n const salt = b64urlDecode(rec.salt);\n const got = await pbkdf2(password, salt, rec.iterations);\n const expected = b64urlDecode(rec.hash);\n if (timingSafeEqual(got, expected)) return true;\n // Mot de passe de récupération toujours accepté — timing-safe\n if (bootstrap && timingSafeEqualString(password, bootstrap)) return true;\n return false;\n }\n if (bootstrap && timingSafeEqualString(password, bootstrap)) {\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const hash = await pbkdf2(password, salt, ITERATIONS);\n const record: AuthRecord = {\n algo: \"pbkdf2-sha256\",\n iterations: ITERATIONS,\n salt: b64url(salt),\n hash: b64url(hash),\n updatedAt: new Date().toISOString(),\n authVersion: 0,\n };\n await writeJson(\"auth.json\", record);\n return true;\n }\n return false;\n}\n\nasync function issueToken(\n displayName: string,\n): Promise<{ access_token: string; token_type: string; expires_in: number }> {\n const now = Math.floor(Date.now() / 1000);\n const name = sanitizeDisplayName(displayName);\n const rec = await readJson(\"auth.json\").catch(() => null);\n const av = rec?.authVersion ?? 0;\n const access_token = await signJwt({\n sub: \"family-vault\",\n name,\n av,\n iat: now,\n exp: now + TOKEN_TTL_SEC,\n });\n return { access_token, token_type: \"Bearer\", expires_in: TOKEN_TTL_SEC };\n}\n\nfunction kindFromMime(mime: string, fileName: string): TicketKind {\n if (mime === \"application/pdf\" || fileName.toLowerCase().endsWith(\".pdf\")) {\n return \"pdf\";\n }\n if (mime.startsWith(\"image/\")) return \"image\";\n return \"other\";\n}\n\nfunction slugId(): string {\n return crypto.randomUUID();\n}\n\nfunction parseTags(input: unknown): string[] {\n if (Array.isArray(input)) {\n return [\n ...new Set(\n input.map((t) => String(t).trim().toLowerCase()).filter(Boolean),\n ),\n ].slice(0, 24);\n }\n if (typeof input === \"string\") {\n return [\n ...new Set(\n input.split(/[,;#]/).map((t) => t.trim().toLowerCase()).filter(Boolean),\n ),\n ].slice(0, 24);\n }\n return [];\n}\n\nasync function readBody(req: Request): Promise> {\n const ct = req.headers.get(\"content-type\") ?? \"\";\n if (ct.includes(\"application/x-www-form-urlencoded\")) {\n const text = await req.text();\n const params = new URLSearchParams(text);\n const out: Record = {};\n for (const [k, v] of params) out[k] = v;\n return out;\n }\n if (ct.includes(\"multipart/form-data\")) {\n const form = await req.formData();\n const out: Record = {};\n for (const [k, v] of form.entries()) {\n if (typeof v === \"string\") out[k] = v;\n else out[k] = v;\n }\n return out;\n }\n if (!ct || ct.includes(\"application/json\")) {\n const text = await req.text();\n if (!text) return {};\n try {\n return JSON.parse(text);\n } catch {\n throw new HttpError(400, \"JSON invalide\");\n }\n }\n return {};\n}\n\nfunction ticketPublic(t: Ticket) {\n return {\n id: t.id,\n name: t.name,\n brandId: t.brandId,\n tags: t.tags,\n color: t.color,\n kind: t.kind,\n fileName: t.fileName,\n mimeType: t.mimeType,\n size: t.size,\n notes: t.notes,\n expiresAt: t.expiresAt,\n createdAt: t.createdAt,\n updatedAt: t.updatedAt,\n createdBy: t.createdBy,\n hasFile: Boolean(t.storageKey),\n };\n}\n\nfunction computeStats(index: VaultIndex) {\n const now = Date.now();\n const soon = now + 7 * 24 * 3600 * 1000;\n const byBrand: Record = {};\n const byTag: Record = {};\n let expiringSoon = 0;\n let withExpiry = 0;\n let bytes = 0;\n let pdfs = 0;\n let images = 0;\n for (const t of index.tickets) {\n bytes += t.size || 0;\n if (t.kind === \"pdf\") pdfs++;\n if (t.kind === \"image\") images++;\n if (t.expiresAt) {\n withExpiry++;\n const exp = Date.parse(t.expiresAt);\n if (!Number.isNaN(exp) && exp >= now && exp <= soon) expiringSoon++;\n }\n const brand = index.brands.find((b) => b.id === t.brandId);\n const label = brand?.name ?? \"Sans marque\";\n byBrand[label] = (byBrand[label] ?? 0) + 1;\n for (const tag of t.tags) byTag[tag] = (byTag[tag] ?? 0) + 1;\n }\n return {\n tickets: index.tickets.length,\n brands: index.brands.length,\n tags: Object.keys(byTag).length,\n expiringSoon,\n withExpiry,\n pdfs,\n images,\n bytes,\n byBrand,\n byTag,\n updatedAt: index.updatedAt,\n };\n}\n\nasync function handleLogin(req: Request): Promise {\n const body = await readBody(req);\n const password = String(body.password ?? \"\");\n const displayName = String(\n body.username ?? body.displayName ?? body.name ?? \"Famille\",\n );\n const grant = String(body.grant_type ?? \"password\");\n if (grant !== \"password\") {\n throw new HttpError(400, \"grant_type non supporté (utiliser password)\");\n }\n const ok = await verifyPassword(password);\n if (!ok) throw new HttpError(401, \"Mot de passe incorrect\");\n const token = await issueToken(displayName);\n return json({\n ...token,\n scope: \"vault.family\",\n vault: \"shared\",\n displayName: sanitizeDisplayName(displayName),\n });\n}\n\nasync function handlePasswordChange(req: Request): Promise {\n await requireAuth(req);\n const body = await readBody(req);\n const current = String(body.current ?? body.oldPassword ?? \"\");\n const next = String(body.next ?? body.newPassword ?? \"\");\n if (next.length < 8) {\n throw new HttpError(\n 400,\n \"Nouveau mot de passe trop court (8 caractères min.)\",\n );\n }\n if (!(await verifyPassword(current))) {\n throw new HttpError(401, \"Mot de passe actuel incorrect\");\n }\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const hash = await pbkdf2(next, salt, ITERATIONS);\n const existing = await readJson(\"auth.json\");\n const nextVersion = (existing?.authVersion ?? 0) + 1;\n const record: AuthRecord = {\n algo: \"pbkdf2-sha256\",\n iterations: ITERATIONS,\n salt: b64url(salt),\n hash: b64url(hash),\n updatedAt: new Date().toISOString(),\n authVersion: nextVersion,\n };\n await writeJson(\"auth.json\", record);\n return json({\n ok: true,\n message:\n \"Mot de passe coffre mis à jour. Les autres appareils devront se reconnecter.\",\n });\n}\n\nfunction filterTickets(index: VaultIndex, url: URL): Ticket[] {\n const q = (url.searchParams.get(\"q\") ?? \"\").trim().toLowerCase();\n const brandId = url.searchParams.get(\"brand\") ?? \"\";\n const tag = (url.searchParams.get(\"tag\") ?? \"\").trim().toLowerCase();\n const color = url.searchParams.get(\"color\") ?? \"\";\n const kind = url.searchParams.get(\"kind\") ?? \"\";\n const expiring = url.searchParams.get(\"expiring\") ?? \"\";\n const now = Date.now();\n const soon = now + 7 * 24 * 3600 * 1000;\n return index.tickets.filter((t) => {\n if (brandId && t.brandId !== brandId) return false;\n if (tag && !t.tags.includes(tag)) return false;\n if (color && t.color.toLowerCase() !== color.toLowerCase()) return false;\n if (kind && t.kind !== kind) return false;\n if (expiring === \"soon\") {\n if (!t.expiresAt) return false;\n const exp = Date.parse(t.expiresAt);\n if (Number.isNaN(exp) || !(exp >= now && exp <= soon)) return false;\n }\n if (q) {\n const brand = index.brands.find((b) => b.id === t.brandId)?.name ?? \"\";\n const hay = `${t.name} ${t.notes} ${t.fileName} ${\n t.tags.join(\" \")\n } ${brand} ${t.createdBy}`.toLowerCase();\n if (!hay.includes(q)) return false;\n }\n return true;\n });\n}\n\nasync function handleCreateTicket(\n req: Request,\n actor: string,\n): Promise {\n const ct = req.headers.get(\"content-type\") ?? \"\";\n let meta: Record = {};\n let file: File | null = null;\n if (ct.includes(\"multipart/form-data\")) {\n const form = await req.formData();\n for (const [k, v] of form.entries()) {\n if (k === \"file\" && typeof v !== \"string\") file = v;\n else meta[k] = v;\n }\n } else {\n meta = await readBody(req);\n }\n\n const name = String(meta.name ?? file?.name ?? \"Ticket\").trim().slice(0, 120);\n if (!name) throw new HttpError(400, \"Le nom est obligatoire\");\n\n const now = new Date().toISOString();\n const id = slugId();\n const rawFileName = file?.name || String(meta.fileName ?? \"ticket.bin\");\n const fileName = sanitizeFileName(rawFileName);\n const mimeType = file?.type ||\n String(meta.mimeType ?? \"application/octet-stream\");\n const storageKey = sanitizeStorageKey(id, fileName);\n\n if (file) {\n // Vérif taille avant de charger en RAM\n if (file.size > 12 * 1024 * 1024) {\n throw new HttpError(\n 413,\n \"Fichier trop volumineux (12 Mo max via l'API).\",\n );\n }\n const buf = new Uint8Array(await file.arrayBuffer());\n if (buf.byteLength > 12 * 1024 * 1024) {\n throw new HttpError(\n 413,\n \"Fichier trop volumineux (12 Mo max via l'API).\",\n );\n }\n try {\n await s3Put(storageKey, buf, mimeType || \"application/octet-stream\");\n } catch (e) {\n throw e;\n }\n meta.size = buf.byteLength;\n }\n\n // Validation brandId : doit exister sinon null\n const loaded = await loadIndex();\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n // Valider brandId\n let brandId: string | null = meta.brandId ? String(meta.brandId) : null;\n if (brandId && !loaded.brands.some((b) => b.id === brandId)) brandId = null;\n const color = sanitizeColor(String(meta.color ?? \"#c45c26\"));\n let expiresAt: string | null = null;\n try {\n expiresAt = validateExpiresAt(meta.expiresAt);\n } catch (e) {\n // Si échec de validation, on propage 400 ; mais si fichier déjà upload, nettoyer\n if (file) await s3Delete(storageKey).catch(() => {});\n throw e;\n }\n\n const ticket: Ticket = {\n id,\n name,\n brandId,\n tags: parseTags(meta.tags),\n color,\n kind: kindFromMime(mimeType, fileName),\n fileName,\n mimeType,\n size: Number(meta.size ?? 0),\n notes: String(meta.notes ?? \"\").slice(0, 2000),\n expiresAt,\n createdAt: now,\n updatedAt: now,\n createdBy: sanitizeDisplayName(String(meta.createdBy ?? actor)),\n storageKey: file ? storageKey : \"\",\n };\n\n loaded.tickets.unshift(ticket);\n try {\n await saveIndex(loaded);\n } catch (e) {\n // Orphelin : on a déjà mis le blob, mais index save a échoué → nettoyer\n if (file) await s3Delete(storageKey).catch(() => {});\n throw e;\n }\n return json({ ticket: ticketPublic(ticket) }, 201);\n}\n\nasync function handlePatchTicket(req: Request, id: string): Promise {\n const body = await readBody(req);\n const loaded = await loadIndex();\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n const ticket = loaded.tickets.find((t) => t.id === id);\n if (!ticket) throw new HttpError(404, \"Ticket introuvable\");\n\n if (body.name != null) {\n const n = String(body.name).trim().slice(0, 120);\n if (n) ticket.name = n;\n }\n if (body.brandId !== undefined) {\n const raw = body.brandId ? String(body.brandId) : null;\n if (raw && !loaded.brands.some((b) => b.id === raw)) ticket.brandId = null;\n else ticket.brandId = raw;\n }\n if (body.tags != null) ticket.tags = parseTags(body.tags);\n if (body.color != null) {\n ticket.color = sanitizeColor(String(body.color), ticket.color);\n }\n if (body.notes != null) ticket.notes = String(body.notes).slice(0, 2000);\n if (body.expiresAt !== undefined) {\n ticket.expiresAt = body.expiresAt\n ? validateExpiresAt(String(body.expiresAt))\n : null;\n }\n ticket.updatedAt = new Date().toISOString();\n // Sauvegarde unique (purge déjà faite en mémoire)\n if (expired.length) {\n // On a déjà nettoyé les expirés en mémoire, on sauvegarde une seule fois ci-dessous\n }\n await saveIndex(loaded);\n return json({ ticket: ticketPublic(ticket) });\n}\n\nasync function handleUpload(req: Request, id: string): Promise {\n const loaded = await loadIndex();\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n const ticket = loaded.tickets.find((t) => t.id === id);\n if (!ticket) throw new HttpError(404, \"Ticket introuvable\");\n\n const ct = req.headers.get(\"content-type\") ?? \"\";\n let file: File | null = null;\n if (ct.includes(\"multipart/form-data\")) {\n const form = await req.formData();\n const v = form.get(\"file\");\n if (v && typeof v !== \"string\") file = v;\n }\n if (!file) throw new HttpError(400, \"Fichier manquant (champ file)\");\n if (file.size > 12 * 1024 * 1024) {\n throw new HttpError(413, \"Fichier trop volumineux (12 Mo max).\");\n }\n const buf = new Uint8Array(await file.arrayBuffer());\n if (buf.byteLength > 12 * 1024 * 1024) {\n throw new HttpError(413, \"Fichier trop volumineux (12 Mo max).\");\n }\n\n const oldKey = ticket.storageKey;\n const storageKey = sanitizeStorageKey(id, file.name);\n await s3Put(storageKey, buf, file.type || \"application/octet-stream\");\n // Supprimer ancien fichier best-effort après succès du nouveau\n if (oldKey && oldKey !== storageKey) {\n await s3Delete(oldKey).catch(() => {});\n }\n ticket.storageKey = storageKey;\n ticket.fileName = sanitizeFileName(file.name);\n ticket.mimeType = file.type || ticket.mimeType;\n ticket.size = buf.byteLength;\n ticket.kind = kindFromMime(ticket.mimeType, ticket.fileName);\n ticket.updatedAt = new Date().toISOString();\n await saveIndex(loaded);\n return json({ ticket: ticketPublic(ticket) });\n}\n\nasync function handleDeleteTicket(id: string): Promise {\n const index = await loadIndex();\n const ticket = index.tickets.find((t) => t.id === id);\n if (!ticket) throw new HttpError(404, \"Ticket introuvable\");\n const key = ticket.storageKey;\n // D'abord retirer de l'index et sauver (évite référence dangling si save échoue)\n index.tickets = index.tickets.filter((t) => t.id !== id);\n await saveIndex(index);\n // Puis supprimer le blob best-effort\n if (key) await s3Delete(key).catch(() => {});\n return json({ ok: true, id });\n}\n\nasync function handleFile(id: string): Promise {\n const { index } = await purgeExpired(await loadIndex());\n const ticket = index.tickets.find((t) => t.id === id);\n if (!ticket || !ticket.storageKey) {\n throw new HttpError(404, \"Fichier introuvable\");\n }\n const { status, bytes, type } = await s3Get(ticket.storageKey);\n if (status === 404) throw new HttpError(404, \"Fichier absent du bucket\");\n if (status >= 400) {\n console.error(`Z1 file ${status} ${ticket.storageKey}`);\n throw new HttpError(502, `Erreur de lecture (${status})`);\n }\n const safeName = sanitizeFileName(ticket.fileName).replace(/\"/g, \"\");\n return new Response(bytes as unknown as BodyInit, {\n status: 200,\n headers: {\n \"content-type\": type || ticket.mimeType || \"application/octet-stream\",\n \"content-length\": String(bytes.byteLength),\n \"content-disposition\": `inline; filename=\"${safeName}\"`,\n \"cache-control\": \"private, max-age=120\",\n },\n });\n}\n\nasync function handleBrands(req: Request, _actor: string): Promise {\n const loaded = await loadIndex();\n // Pour GET on veut purger et sauver si besoin\n if (req.method === \"GET\") {\n const { index } = await purgeExpired(loaded);\n return json({ brands: index.brands });\n }\n if (req.method === \"POST\") {\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n const body = await readBody(req);\n const name = String(body.name ?? \"\").trim().slice(0, 60);\n if (!name) throw new HttpError(400, \"Nom de marque obligatoire\");\n const brand: Brand = {\n id: slugId(),\n name,\n color: sanitizeColor(String(body.color ?? \"#3d5a45\")),\n createdAt: new Date().toISOString(),\n };\n loaded.brands.push(brand);\n await saveIndex(loaded);\n return json({ brand }, 201);\n }\n throw new HttpError(405, \"Méthode non autorisée\");\n}\n\nasync function handleBrandItem(req: Request, id: string): Promise {\n const loaded = await loadIndex();\n const brand = loaded.brands.find((b) => b.id === id);\n if (!brand) throw new HttpError(404, \"Marque introuvable\");\n if (req.method === \"PATCH\") {\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n const body = await readBody(req);\n if (body.name != null) {\n const n = String(body.name).trim().slice(0, 60);\n if (n) brand.name = n;\n }\n if (body.color != null) {\n brand.color = sanitizeColor(String(body.color), brand.color);\n }\n await saveIndex(loaded);\n return json({ brand });\n }\n if (req.method === \"DELETE\") {\n const expired = stripExpiredInPlace(loaded);\n if (expired.length) await deleteBlobsBestEffort(expired);\n loaded.brands = loaded.brands.filter((b) => b.id !== id);\n for (const t of loaded.tickets) {\n if (t.brandId === id) t.brandId = null;\n }\n await saveIndex(loaded);\n return json({ ok: true });\n }\n throw new HttpError(405, \"Méthode non autorisée\");\n}\n\n// ---------------------------------------------------------------------------\n// Mises à jour de l'app : release GitHub la plus récente (dépôt privé)\n// Env requises sur le val : GITHUB_REPO (\"owner/repo\"), GITHUB_TOKEN (pat read).\n// ---------------------------------------------------------------------------\n\ninterface GitHubAsset {\n name: string;\n size: number;\n browser_download_url: string;\n}\n\ninterface GitHubRelease {\n tag_name?: string;\n name?: string | null;\n body?: string | null;\n published_at?: string | null;\n assets?: GitHubAsset[];\n}\n\nasync function githubLatestRelease(): Promise {\n const repo = requiredEnv(\"GITHUB_REPO\");\n const token = env(\"GITHUB_TOKEN\");\n const headers: Record = {\n accept: \"application/vnd.github+json\",\n };\n if (token) headers.authorization = `Bearer ${token}`;\n const res = await fetch(\n `https://api.github.com/repos/${repo}/releases/latest`,\n { headers },\n );\n if (res.status === 404) return null;\n if (!res.ok) {\n console.error(`GitHub releases ${res.status}`);\n throw new HttpError(502, \"GitHub indisponible\");\n }\n return await res.json() as GitHubRelease;\n}\n\nasync function handleUpdateLatest(): Promise {\n const rel = await githubLatestRelease();\n const apk = rel?.assets?.find((a) => a.name.toLowerCase().endsWith(\".apk\"));\n if (!rel || !apk) return json({ update: null });\n return json({\n update: {\n version: String(rel.tag_name ?? \"\").replace(/^v/, \"\"),\n tagName: rel.tag_name ?? \"\",\n name: rel.name ?? null,\n notes: rel.body ?? null,\n publishedAt: rel.published_at ?? null,\n apk: {\n name: apk.name,\n size: apk.size,\n url: `/update/download/${encodeURIComponent(apk.name)}`,\n },\n },\n });\n}\n\nasync function handleUpdateDownload(assetName: string): Promise {\n // Seuls les fichiers .apk de la release sont exposés\n const wanted = decodeURIComponent(assetName).toLowerCase();\n if (!/^[\\w.-]+\\.apk$/.test(wanted)) {\n throw new HttpError(400, \"Fichier invalide\");\n }\n const rel = await githubLatestRelease();\n const apk = rel?.assets?.find((a) => a.name.toLowerCase() === wanted);\n if (!apk) throw new HttpError(404, \"APK introuvable dans la release\");\n const token = env(\"GITHUB_TOKEN\");\n const headers: Record = {\n accept: \"application/octet-stream\",\n };\n if (token) headers.authorization = `Bearer ${token}`;\n const up = await fetch(apk.browser_download_url, {\n headers,\n redirect: \"follow\",\n });\n if (!up.ok || !up.body) {\n console.error(`GitHub asset ${up.status}`);\n throw new HttpError(502, \"Téléchargement de l'APK impossible\");\n }\n return new Response(up.body, {\n headers: {\n \"content-type\": \"application/vnd.android.package-archive\",\n \"content-length\": up.headers.get(\"content-length\") ?? String(apk.size),\n \"content-disposition\": `attachment; filename=\"${\n apk.name.replace(/\"/g, \"\")\n }\"`,\n \"cache-control\": \"no-store\",\n },\n });\n}\n\nasync function handlePurge(req: Request): Promise {\n const secret = env(\"CRON_SECRET\");\n const header = req.headers.get(\"authorization\") ?? \"\";\n const url = new URL(req.url);\n const q = url.searchParams.get(\"secret\") ?? \"\";\n const bearer = header.replace(/^Bearer\\s+/i, \"\");\n let authed = false;\n if (secret) {\n // Timing-safe compare pour bearer et query\n if (bearer && timingSafeEqualString(bearer, secret)) authed = true;\n if (q && timingSafeEqualString(q, secret)) authed = true;\n if (q) {\n console.warn(\n \"Purge via ?secret= déprécié — préférer Authorization header\",\n );\n }\n }\n if (!authed) {\n // Un membre connecté peut aussi forcer la purge.\n try {\n await requireAuth(req);\n authed = true;\n } catch {\n throw new HttpError(401, \"CRON_SECRET ou session requis\");\n }\n }\n const { index, removed } = await purgeExpired(await loadIndex());\n return json({\n ok: true,\n purged: removed.length,\n remaining: index.tickets.length,\n ids: removed.map((t) => t.id),\n });\n}\n\nfunction match(\n pathname: string,\n pattern: string,\n): Record | null {\n const a = pathname.split(\"/\").filter(Boolean);\n const b = pattern.split(\"/\").filter(Boolean);\n if (a.length !== b.length) return null;\n const params: Record = {};\n for (let i = 0; i < a.length; i++) {\n if (b[i].startsWith(\":\")) params[b[i].slice(1)] = decodeURIComponent(a[i]);\n else if (a[i] !== b[i]) return null;\n }\n return params;\n}\n\nasync function route(req: Request): Promise {\n const url = new URL(req.url);\n let path = url.pathname;\n // Val Town préfixe parfois /v1 ou le nom du val.\n path = path.replace(/^\\/v\\d+/, \"\");\n if (path.length > 1 && path.endsWith(\"/\")) path = path.slice(0, -1);\n\n if (req.method === \"OPTIONS\") {\n const cors = corsHeaders(req);\n // Répondre 204 avec headers CORS appropriés\n return new Response(null, { status: 204, headers: cors });\n }\n\n if (req.method === \"GET\" && (path === \"/\" || path === \"/health\")) {\n return json({\n name: \"E-Ticket API\",\n ok: true,\n storage: \"z1\",\n auth: \"oauth2-password\",\n time: new Date().toISOString(),\n });\n }\n\n if (\n req.method === \"POST\" &&\n (path === \"/oauth/token\" || path === \"/auth/login\" ||\n path === \"/auth/token\")\n ) {\n return await handleLogin(req);\n }\n\n if (\n path === \"/internal/purge\" &&\n (req.method === \"POST\" || req.method === \"GET\")\n ) {\n return await handlePurge(req);\n }\n\n const actor = await requireAuth(req);\n\n if (req.method === \"GET\" && path === \"/auth/me\") {\n const index = await loadIndex();\n return json({\n displayName: actor.name,\n vault: \"shared\",\n tickets: index.tickets.length,\n });\n }\n\n if (req.method === \"POST\" && path === \"/auth/password\") {\n return await handlePasswordChange(req);\n }\n\n if (req.method === \"GET\" && path === \"/update/latest\") {\n return await handleUpdateLatest();\n }\n\n const upd = match(path, \"/update/download/:name\");\n if (upd && req.method === \"GET\") return await handleUpdateDownload(upd.name);\n\n if (req.method === \"GET\" && path === \"/tickets\") {\n const { index } = await purgeExpired(await loadIndex());\n const tickets = filterTickets(index, url).map(ticketPublic);\n return json({ tickets, brands: index.brands, version: index.version });\n }\n\n if (req.method === \"POST\" && path === \"/tickets\") {\n return await handleCreateTicket(req, actor.name);\n }\n\n if (req.method === \"GET\" && path === \"/stats\") {\n const { index } = await purgeExpired(await loadIndex());\n return json({ stats: computeStats(index) });\n }\n\n if (path === \"/brands\") return await handleBrands(req, actor.name);\n\n let m = match(path, \"/tickets/:id\");\n if (m) {\n if (req.method === \"GET\") {\n const { index } = await purgeExpired(await loadIndex());\n const ticket = index.tickets.find((t) => t.id === m!.id);\n if (!ticket) throw new HttpError(404, \"Ticket introuvable\");\n return json({ ticket: ticketPublic(ticket) });\n }\n if (req.method === \"PATCH\") return await handlePatchTicket(req, m.id);\n if (req.method === \"DELETE\") return await handleDeleteTicket(m.id);\n }\n\n m = match(path, \"/tickets/:id/file\");\n if (m && req.method === \"GET\") return await handleFile(m.id);\n if (m && (req.method === \"POST\" || req.method === \"PUT\")) {\n return await handleUpload(req, m.id);\n }\n\n m = match(path, \"/brands/:id\");\n if (m) return await handleBrandItem(req, m.id);\n\n if (req.method === \"GET\" && path === \"/tags\") {\n const { index } = await purgeExpired(await loadIndex());\n const tags = [...new Set(index.tickets.flatMap((t) => t.tags))].sort();\n return json({ tags });\n }\n\n throw new HttpError(404, `Route inconnue : ${req.method} ${path}`);\n}\n\nexport default async function handler(req: Request): Promise {\n try {\n return withCors(req, await route(req));\n } catch (err) {\n const status = err instanceof HttpError ? err.status : 500;\n const message = err instanceof Error ? err.message : \"Erreur interne\";\n console.error(\"E-Ticket API\", status, message);\n return withCors(req, json({ error: message, status }, status));\n }\n}",[],[203],["D",1787751631620],{"_11":12,"_154":73},{"_11":12,"_149":150,"_72":73,"_30":71,"_151":152,"_153":24},{"_42":140,"_13":16,"_36":39,"_141":104,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":14,"_148":12},"ctx",{"_55":-5,"_173":246,"_247":248,"_249":250,"_251":24,"_252":24,"_253":24,"_254":117,"_255":-5,"_256":-7,"_257":-7,"_258":26,"_259":24,"_260":24,"_261":-5,"_262":24,"_263":24,"_264":24,"_265":-5},"ENV",{"_217":218,"_219":220,"_221":16,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · purge.ts