${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${code}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n `;\n\n // 1. Gmail SMTP via Nodemailer\n const gmailUser = Deno.env.get(\"GMAIL_USER\") || \"tusseaumathias85@gmail.com\";\n const gmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n\n if (gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n html,\n subject,\n to: email,\n });\n\n console.log(`✉️ E-mail envoyé avec succès via Gmail SMTP à ${email}`);\n return;\n } catch (err: any) {\n console.error(\"❌ Erreur d'envoi Gmail SMTP :\", err?.message || err);\n }\n }\n\n // 2. Resend Fallback\n const resendKey = Deno.env.get(\"RESEND_API_KEY\");\n if (resendKey) {\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n body: JSON.stringify({\n from: \"mAI \",\n html,\n subject,\n to: email,\n }),\n headers: {\n Authorization: `Bearer ${resendKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n });\n if (res.ok) {\n }\n } catch (_e) {\n // ignore\n }\n }\n}",[],[131],"9b750e11-6a45-4f15-aad4-6fe445dbc98a","devices.ts","4f3d3e9a-9c6a-11f1-bbc7-1607ee4eb77e",25,["D",1787211590586],"import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n id: d.id,\n os: d.os,\n device_model: d.device_model,\n device_version: d.device_version || \"\",\n ip_address: d.ip_address,\n device_name: d.device_name,\n last_active: d.last_active,\n created_at: d.created_at,\n is_current: d.token === token,\n }));\n\n return c.json({ success: true, devices });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n success: true,\n message: \"Tous les autres appareils ont été déconnectés.\",\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n success: true,\n message: \"Tous les appareils ont été déconnectés.\",\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[],[139],["D",1787211599199],[],[19],"91cd934e-cae9-48af-a926-67c72097855e","auth.ts","76ede8c8-9c69-11f1-8401-1607ee4eb77e",5,["D",1787211239194],"import type { Hono } from \"npm:hono@4\";\nimport bcrypt from \"npm:bcryptjs\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || c.req.header(\"x-real-ip\") || \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const geoRes = await fetch(`http://ip-api.com/json/${ip}`);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some((d) =>\n d.device_name === device_name\n );\n const knownLocation = pastDevices.some((d) =>\n d.location && d.location.includes(countryStr)\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n\n // Les codes sont définis dans les variables d'environnement de Val Town\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) {\n upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n }\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") || Deno.env.get(\"PRO_CODE\");\n if (proCode) {\n upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n }\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") || Deno.env.get(\"MAX_CODE\");\n if (maxCode) {\n upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n }\n\n const newTier = upgradeCodes[inputCode];\n\n if (!newTier) {\n console.log(\n `[Verify-Code] Code soumis: \"${inputCode}\", Codes reconnus en ENV:`,\n Object.keys(upgradeCodes),\n );\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // On regénère le token pour inclure le nouveau tier\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({ success: true, tier: newTier, token: newToken });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n } = await c.req.json();\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n status: \"email_verification_required\",\n email: cleanEmail,\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n const { auto_logout_minutes } = await c.req.json();\n if (auto_logout_minutes !== undefined) {\n const mins = parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) return c.json({ error: \"Champs manquants.\" }, 400);\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ success: true, email: email.trim() });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ success: true, email });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ success: true, keys });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[],[150],["D",1785339526786],"legacyEnvVars","httpPrivacy","description","Avec l'API d'mAI, récupérez des données sur les projets !","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/cdf5d0c3-f220-4dec-712e-87455a037c00/square512?exp=1789545599&sig=12a77d19d7ed046113fdbca2b3bcd348d6a9128b459d6b6f0a5b5b484e09b589","userId","7ed13655-83c2-4934-a981-01578302df33","pinnedFileId","968028a2-8b63-11f1-b718-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","200f8efbf4ef4117ae26ee737dbffb76","tursoHostname","200f8efbf4ef4117ae26ee737dbffb76-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474235934],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_205":201},"org",{"_11":12,"_198":199,"_200":201,"_164":165,"_202":203,"_204":52},"branch",{"_17":124,"_13":16,"_36":64,"_43":44,"_46":37,"_47":194,"_195":54,"_196":44,"_197":57,"_58":14,"_55":12},53,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","mProjects","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789545599&sig=08eef8449f71d20417eca4ef90af9754a44aa9aad2e05215c7b99f2ea9133ce4","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":44,"_13":14,"_38":268,"_50":-5,"_158":52,"_53":54,"_159":54,"_160":161,"_162":163,"_164":165,"_166":167,"_168":68,"_169":-5,"_170":-5,"_171":32,"_56":57,"_172":173,"_174":175,"_176":269,"_178":-5,"_179":180,"_181":180,"_182":183,"_184":183,"_185":183,"_186":180,"_187":180,"_188":270,"_190":271,"_192":272,"_51":52},[241,242,243,244,245,246,247,248,249],"files",[241,242,243,244,245,246,247,248,249],"counts",{"_229":32,"_230":231,"_232":32,"_35":233,"_234":235},[],{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":69,"_17":70,"_71":72,"_73":74,"_75":52,"_76":-5,"_18":228},"upstreamProject","upstreamBranch",{"_36":37,"_38":226,"_40":227,"_13":42,"_43":44,"_17":45,"_46":-5,"_47":-5,"_48":49,"_50":-5,"_51":52,"_53":54,"_55":12,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785339526798],["D",1789315877037],[19],"pulls","branches",11,"forks",{"_236":239,"_240":32},"connections",{"_236":237,"_238":32},"count",1,"unfilledCount",117,"emptyCount",{"_36":149,"_13":150,"_60":151,"_62":-5,"_63":64,"_65":152,"_67":68,"_38":153,"_17":70,"_71":72,"_73":154,"_75":52,"_76":-5,"_93":266,"_18":267},{"_36":59,"_13":19,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_38":146,"_17":70,"_71":72,"_73":74,"_75":52,"_76":-5,"_93":264,"_18":265},{"_36":138,"_13":139,"_60":140,"_62":-5,"_63":64,"_65":141,"_67":68,"_38":142,"_17":70,"_71":72,"_73":143,"_75":52,"_76":-5,"_93":262,"_18":263},{"_36":130,"_13":131,"_60":132,"_62":-5,"_63":64,"_65":133,"_67":68,"_38":134,"_17":70,"_71":72,"_73":135,"_75":52,"_76":-5,"_93":260,"_18":261},{"_36":121,"_13":122,"_60":123,"_62":-5,"_63":64,"_65":124,"_67":68,"_38":125,"_17":109,"_71":126,"_73":127,"_75":52,"_76":-5,"_93":258,"_18":259},{"_36":113,"_13":114,"_60":115,"_62":-5,"_63":64,"_65":116,"_67":68,"_38":117,"_17":70,"_71":72,"_73":118,"_75":52,"_76":-5,"_93":256,"_18":257},{"_36":104,"_13":105,"_60":106,"_62":-5,"_63":64,"_65":107,"_67":68,"_38":108,"_17":109,"_71":72,"_73":110,"_75":52,"_76":-5,"_93":254,"_18":255},{"_36":96,"_13":97,"_60":98,"_62":-5,"_63":64,"_65":99,"_67":68,"_38":100,"_17":70,"_71":72,"_73":101,"_75":52,"_76":-5,"_93":252,"_18":253},{"_36":87,"_13":88,"_60":89,"_62":-5,"_63":64,"_65":90,"_67":68,"_38":91,"_17":70,"_71":72,"_73":92,"_75":52,"_76":-5,"_93":250,"_18":251},[],[88],[],[97],[],[105],[],[114],[],[122],[],[131],[],[139],[],[19],[],[150],["D",1785339526786],["D",1789474235934],{"_11":12,"_205":201},{"_11":12,"_198":199,"_200":201,"_164":165,"_202":203,"_204":52},{"_17":124,"_13":16,"_36":64,"_43":44,"_46":37,"_47":194,"_195":54,"_196":44,"_197":57,"_58":14,"_55":12},"ctx",{"_188":-5,"_223":306,"_307":308,"_309":310,"_311":52,"_312":52,"_313":52,"_314":68,"_315":-5,"_316":-7,"_317":-7,"_318":32,"_319":52,"_320":52,"_321":-5,"_322":52,"_323":52,"_324":52,"_325":-5},"ENV",{"_277":278,"_279":280,"_281":42,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]