[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_243":244,"_245":246},"routes/_app.x.$handle.$name",{"_103":102,"_32":45,"_112":91,"_27":36,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":125,"_126":25,"_127":128,"_129":60,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",20,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","middleware.ts","latestPath","fileId","afc29e96-9c69-11f1-8931-1607ee4eb77e","name","fileType","script","content","","import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { jwtVerify } from \"npm:jose\";\nimport { getDb, getJwtSecret, TIER_REQUEST_LIMITS } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware /v1/* pour Auth & Logging\n app.use(\"/v1/*\", async (c, next) => {\n const path = c.req.path;\n const isPublicRoute = path === \"/v1/models\" || path === \"/v1/mai/models\" ||\n path === \"/v1/status\";\n\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n const reqUserId = c.req.header(\"x-user-id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max)\n if (systemMaiApiKey && apiKey === systemMaiApiKey) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée\n else if (apiKey) {\n const sql = getDb();\n const prefixCandidate = apiKey.substring(0, 11);\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text \n OR k.api_key = ${prefixCandidate}::text\n OR ${apiKey}::text LIKE (k.api_key || '%')\n OR k.api_key LIKE (${prefixCandidate} || '%')\n LIMIT 1\n `;\n\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else if (isJwtRoute && apiKey) {\n // Routes de compte : accepter un token JWT de session (pas une API Key)\n try {\n const blacklisted = await sqlite.execute({\n args: [apiKey],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (blacklisted.rows.length > 0) {\n return c.json({ error: \"Token révoqué.\" }, 401);\n }\n const { payload } = await jwtVerify(apiKey, getJwtSecret());\n currentUserId = String(payload.sub);\n userPlan = String(payload.tier || \"Free\");\n } catch (_jwtErr) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n } else if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : prévaut pour le forfait du compte\n if (reqUserId && reqUserId !== \"system-mai\") {\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0 && uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n currentUserId = reqUserId;\n } catch (_err) {}\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !reqUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record = {\n Free: 500,\n Gratuit: 500,\n Plus: 1000,\n Pro: 2000,\n Max: 5000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n\n // Calculer l'usage global pour l'utilisateur\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n }\n\n await next();\n\n if (isPublicRoute) {\n return; // Ne pas logger les requêtes vers les routes publiques\n }\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Mise à jour quota (uniquement pour les clés API utilisateur réelles)\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n if (!isJwtRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n const prefixCandidate = apiKey.substring(0, 11);\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n OR api_key = ${apiKey}::text\n OR api_key = ${prefixCandidate}::text\n OR ${apiKey}::text LIKE (api_key || '%')\n OR api_key LIKE (${prefixCandidate} || '%')\n `;\n } catch (err) {\n console.error(\"Erreur logging API:\", err);\n }\n }\n });\n}","createdAt",["D",1787211323241],"branchVersion","branchId","e65ab3d1-fcf7-4f45-8398-30fe8ee6e67a","id","200f8efb-f4ef-4117-ae26-ee737dbffb76","mai",["D",1785339526786],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Avec l'API d'mAI, récupérez des données sur les projets !","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/cdf5d0c3-f220-4dec-712e-87455a037c00/square512?exp=1789592399&sig=33ab33a57684dc01927194ec97d011092eed324182cc0893a423df70056d9056","7ed13655-83c2-4934-a981-01578302df33","pinnedFileId","968028a2-8b63-11f1-b718-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f99eb-d944-7332-99f8-2fbb8b1e7011","tursoName","200f8efbf4ef4117ae26ee737dbffb76","tursoHostname","200f8efbf4ef4117ae26ee737dbffb76-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789561254403],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_111":107},"org",{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":44,"_99":66,"_100":45,"_101":102},"isOwned",29,"API-1.1","projectId","forkedBranchId","3345cb6c-eeb2-4b61-ab03-8e0abc2dcd73","forkedBranchVersion",53,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mdevslabs","handle","displayName","mProjects","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789592399&sig=2fe8ff3a1eed984dde77217a7df68d2c2ffd9bcc711ede7089e37c937bac683a","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":238,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":239,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":240,"_85":241,"_87":242,"_89":25},"tree",[209,210,211,212,213,214,215],"files",[209,210,211,212,213,214,215],"counts",{"_198":64,"_199":169,"_200":64,"_201":202,"_203":204},"contents",[141,142,143,144,145,146,147],"upstreamProject","upstreamBranch",{"_43":94,"_38":134,"_135":136,"_32":137,"_92":44,"_13":138,"_93":-5,"_95":-5,"_139":140,"_47":-5,"_89":25,"_49":50,"_101":102,"_65":66,"_100":45},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785339526798],"updatedAt",["D",1789315877037],"main",364,"lockfileKey","1789315877318-esm.town_v_mdevslabs_mai@364-main",{"_43":191,"_32":192,"_30":193,"_151":-5,"_41":42,"_40":194,"_153":60,"_38":195,"_13":155,"_33":34,"_35":196,"_24":25,"_157":-5,"_27":197},{"_43":184,"_32":185,"_30":186,"_151":-5,"_41":42,"_40":187,"_153":60,"_38":188,"_13":155,"_33":34,"_35":189,"_24":25,"_157":-5,"_27":190},{"_43":176,"_32":177,"_30":178,"_151":-5,"_41":42,"_40":155,"_153":25,"_38":179,"_13":180,"_33":181,"_35":182,"_24":25,"_157":-5,"_27":183},{"_43":173,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_153":60,"_38":174,"_13":155,"_33":34,"_35":37,"_24":25,"_157":-5,"_27":175},{"_43":166,"_32":167,"_30":168,"_151":-5,"_41":42,"_40":169,"_153":25,"_38":170,"_13":155,"_33":34,"_35":171,"_24":25,"_157":-5,"_27":172},{"_43":159,"_32":160,"_30":161,"_151":-5,"_41":42,"_40":162,"_153":60,"_38":163,"_13":155,"_33":34,"_35":164,"_24":25,"_157":-5,"_27":165},{"_43":148,"_32":149,"_30":150,"_151":-5,"_41":42,"_40":152,"_153":60,"_38":154,"_13":155,"_33":34,"_35":156,"_24":25,"_157":-5,"_27":158},"c4c55eff-bd40-4cbf-919f-9c0e945fc347","storage.ts","a661719c-9c69-11f1-990f-1607ee4eb77e","parentId",17,"latest",["D",1787211307006],2,"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n STORAGE_LIMITS_BYTES,\n verifyToken,\n} from \"./config.ts\";\n\n// Helper : retourne le client S3/R2 (réutilise les variables S3_* existantes)\nexport async function buildR2Client() {\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n}\n\nexport function getR2Endpoint(): string {\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n return endpoint.endsWith(\"/\") ? endpoint.slice(0, -1) : endpoint;\n}\n\nexport function getR2Bucket(): string {\n return Deno.env.get(\"S3_BUCKET\") || \"\";\n}\n\nexport function getR2PublicBase(): string {\n const pub = Deno.env.get(\"S3_PUBLIC_URL\");\n if (pub) return pub.endsWith(\"/\") ? pub.slice(0, -1) : pub;\n return `${getR2Endpoint()}/${getR2Bucket()}`;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar\n app.post(\"/upload-avatar\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const ext = file.name.split(\".\").pop();\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type,\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload de l'image.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${userId}`;\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n });\n\n // POST /upload-file\n app.post(\"/upload-file\", async (c) => {\n try {\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload vers S3.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n });\n\n // GET /cloud/storage — Consommation actuelle de stockage\n app.get(\"/cloud/storage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used, files_count FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n app.get(\"/cloud/files\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE user_id = ${userId}::text\n ORDER BY uploaded_at DESC\n LIMIT 200\n `;\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /cloud/upload — Upload d'un fichier vers R2 + mise à jour quota\n app.post(\"/cloud/upload\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n\n if (bytesUsed + fileSize > bytesLimit) {\n const limitMB = Math.round(bytesLimit / (1024 * 1024));\n const usedMB = Math.round(bytesUsed / (1024 * 1024));\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error:\n `Quota de stockage dépassé. Vous utilisez ${usedMB} MB sur ${limitMB} MB (tier ${tier}).`,\n over_limit: true,\n }, 413);\n }\n\n // Générer une clé R2 unique\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"bin\";\n const uniqueId = crypto.randomUUID();\n const r2Key = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Uploader vers R2\n const r2Client = await buildR2Client();\n const uploadUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2Key}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await r2Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: { \"Content-Type\": file.type || \"application/octet-stream\" },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n const errText = await uploadRes.text();\n console.error(\"R2 Upload Error:\", errText);\n return c.json({ error: \"Erreur lors de l'upload vers R2.\" }, 500);\n }\n\n const publicUrl = `${getR2PublicBase()}/${r2Key}`;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${r2Key}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10000) / 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n });\n\n // DELETE /cloud/files/:id — Suppression définitive d'un fichier\n app.delete(\"/cloud/files/:id\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, size_bytes } = fileRes[0];\n\n // Supprimer de R2\n const r2Client = await buildR2Client();\n const deleteUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2_key}`;\n try {\n await r2Client.fetch(deleteUrl, { method: \"DELETE\" });\n } catch (r2Err) {\n console.error(\"R2 Delete Error (continuing anyway):\", r2Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n });\n}","label",[149],"20224b3d-7ad1-4b9b-ad8d-6e0f46d13361","projects.ts","950bdc7a-9c69-11f1-b29b-1607ee4eb77e",14,["D",1787211281216],"import type { Hono } from \"npm:hono@4\";\nimport { getDb } from \"./config.ts\";\n\nexport const STATIC_PROJECTS_LIST = [\n {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n features: [\"Chat Web\", \"Interface fluide\", \"Streaming en direct\"],\n id: \"proj_web\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n features: [\"Extension navigateur\", \"Extension VS Code\", \"Accès contextuel\"],\n id: \"proj_pulse\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n features: [\n \"Terminal interactif\",\n \"Génération de code\",\n \"Workflows développeur\",\n ],\n id: \"proj_cli\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n version: \"0.5.0\",\n },\n {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n features: [\n \"Génération de documents\",\n \"Présentations interactives\",\n \"Export multi-format\",\n ],\n id: \"proj_office\",\n is_public: true,\n label: \"Bêta\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"beta\",\n version: \"0.1.0\",\n },\n {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n features: [\n \"Stockage sécurisé\",\n \"Résumés automatiques\",\n \"Indexation de documents\",\n ],\n id: \"proj_cloud\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description:\n \"Moteur de recherche sémantique et d'indexation vectorielle ultra-rapide.\",\n features: [\"Indexation hybride\", \"Recherche locale\"],\n id: \"proj_msearch\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n version: \"1.0.3\",\n },\n {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage intelligent d'API et modèles LLM.\",\n features: [\"Load balancing\", \"Multi-fournisseurs\"],\n id: \"proj_openprovider\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n version: \"0.5.0\",\n },\n {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast\",\n features: [\"Video game\", \"Assembler\"],\n id: \"proj_snob\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n version: \"1.0.1\",\n },\n {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n features: [\"Chat Completions\", \"Embeddings\"],\n id: \"proj_mai_legacy\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n version: \"2.4.0\",\n },\n];\n\nexport const STATIC_PROJECTS_MAP: Record = {\n web: {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n },\n pulse: {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n },\n cli: {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n },\n office: {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"beta\",\n },\n cloud: {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n },\n mai: {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n },\n maicli: {\n category: \"CLI Tool\",\n created_at: \"2026-02-10T00:00:00.000Z\",\n description:\n \"Interface en ligne de commande professionnelle pour l'écosystème mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI CLI (Legacy)\",\n project_id: \"maicli\",\n repository: \"https://github.com/mDevsLabs/mAI-CLI\",\n status: \"archived\",\n },\n msearch: {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description: \"Moteur de recherche sémantique et d'indexation vectorielle.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n },\n openprovider: {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage d'API et modèles LLM.\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n },\n snob: {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n },\n};\n\nexport function registerProjectRoutes(app: Hono) {\n // GET /v1/projects\n app.get(\"/v1/projects\", async (c) => {\n try {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const dbProjects =\n await sql`SELECT * FROM mprojects_projects WHERE user_id = ${userId} ORDER BY created_at DESC LIMIT 50`;\n return c.json({\n data: [...STATIC_PROJECTS_LIST, ...dbProjects],\n object: \"list\",\n });\n } catch (_err) {\n return c.json({ data: STATIC_PROJECTS_LIST, object: \"list\" });\n }\n });\n\n // POST /v1/projects\n app.post(\"/v1/projects\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const body = await c.req.json();\n if (!body.name) {\n return c.json({ error: \"Le nom du projet est obligatoire.\" }, 400);\n }\n\n const projectId = \"proj-\" + Math.random().toString(36).substr(2, 9);\n\n await sql`\n INSERT INTO mprojects_projects (user_id, project_id, name, description, is_public)\n VALUES (${userId}, ${projectId}, ${body.name}, ${\n body.description || \"\"\n }, ${body.isPublic || false})\n `;\n\n return c.json({ name: body.name, project_id: projectId, success: true });\n });\n\n // GET /v1/projects/:id\n app.get(\"/v1/projects/:id\", async (c) => {\n const projectId = c.req.param(\"id\").toLowerCase();\n\n if (STATIC_PROJECTS_MAP[projectId]) {\n return c.json({ project: STATIC_PROJECTS_MAP[projectId] });\n }\n\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projects = await sql`\n SELECT * FROM mprojects_projects \n WHERE (user_id = ${userId} OR is_public = TRUE) AND LOWER(project_id) = ${projectId} \n LIMIT 1\n `;\n\n if (projects.length === 0) {\n return c.json({ error: \"Project not found\" }, 404);\n }\n\n return c.json({ project: projects[0] });\n });\n\n // PUT /v1/projects/:id\n app.put(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n const body = await c.req.json();\n\n const existing =\n await sql`SELECT id FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Projet non trouvé ou non autorisé.\" }, 404);\n }\n\n const name = body.name;\n const description = body.description;\n const isPublic = body.isPublic;\n\n await sql`\n UPDATE mprojects_projects\n SET name = COALESCE(${name}, name),\n description = COALESCE(${description}, description),\n is_public = COALESCE(${isPublic}, is_public),\n updated_at = NOW()\n WHERE user_id = ${userId} AND project_id = ${projectId}\n `;\n\n return c.json({\n message: \"Projet mis à jour.\",\n project_id: projectId,\n success: true,\n });\n });\n\n // DELETE /v1/projects/:id\n app.delete(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const result = await sql`\n DELETE FROM mprojects_projects \n WHERE user_id = ${userId} AND project_id = ${projectId}\n RETURNING id\n `;\n\n if (result.length === 0) {\n return c.json({ error: \"Projet non trouvé ou déjà supprimé.\" }, 404);\n }\n\n return c.json({ message: \"Projet supprimé avec succès.\", success: true });\n });\n\n // GET /v1/projects/:id/stats\n app.get(\"/v1/projects/:id/stats\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const projects =\n await sql`SELECT id, name, created_at FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (projects.length === 0) {\n return c.json({ error: \"Projet non trouvé.\" }, 404);\n }\n\n return c.json({\n active_deployments: 1,\n name: projects[0].name,\n project_id: projectId,\n requests_count: Math.floor(Math.random() * 500) + 12,\n status: \"healthy\",\n uptime_percentage: 99.98,\n });\n });\n}",[160],"3614cd64-d827-4516-bf7a-e03a2d1703a9","models.ts","8c8ee60a-9c69-11f1-88ba-1607ee4eb77e",11,["D",1787211265380],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n TIER_LIMITS,\n verifyToken,\n} from \"./config.ts\";\n\nexport function registerModelRoutes(app: Hono) {\n // GET /usage\n app.get(\"/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const sql = getDb();\n const [usageResult, userResult] = await Promise.all([\n sql`SELECT tokens_used FROM weekly_usage WHERE user_id = ${userId} AND week_start = ${weekStartStr}`,\n sql`SELECT tier, email, username, phone, avatar_url FROM users WHERE id = ${userId} LIMIT 1`,\n ]);\n\n const user = userResult[0];\n const tokensUsed = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[user?.tier] || TIER_LIMITS[\"Free\"];\n\n return c.json({\n avatarUrl: user?.avatar_url,\n email: user?.email,\n limit,\n phone: user?.phone,\n resetAt: nextResetIso,\n tier: user?.tier || \"Free\",\n tokensUsed,\n username: user?.username,\n weekStart: weekStartStr,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /log-usage\n app.post(\"/log-usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { tokensUsed = 0 } = await c.req.json();\n const { weekStartStr } = getWeekData();\n\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage + tokensUsed > limit) {\n return c.json(\n { error: \"Limite atteinte.\", limit, used: currentUsage },\n 429,\n );\n }\n\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}, ${tokensUsed})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokensUsed}\n `;\n\n return c.json({\n limit,\n success: true,\n weeklyUsed: currentUsage + tokensUsed,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // PROXY : CHAT COMPLETIONS (CLI)\n app.post(\"/chat/completions\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n // Vérification des limites avant d'autoriser la requête\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage >= limit) {\n return c.json({ error: \"Votre limite hebdomadaire est épuisée.\" }, 429);\n }\n\n // Le corps de la requête du CLI\n const body = await c.req.json();\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n // Redirection de la requête vers OpenRouter\n const response = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI CLI\",\n },\n method: \"POST\",\n },\n );\n\n // Retourne le stream ou la réponse directement au CLI\n return new Response(response.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": response.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: response.status,\n });\n } catch {\n return c.json({ error: \"Erreur serveur proxy.\" }, 500);\n }\n });\n\n // GET /v1/models\n app.get(\"/v1/models\", async (c) => {\n try {\n const res = await fetch(\"https://openrouter.ai/api/v1/models\");\n if (!res.ok) {\n throw new Error(\"OpenRouter fetch error\");\n }\n const json = await res.json();\n const rawModels: any[] = json.data || [];\n\n const filtered = rawModels\n .filter((m) => m && m.id && !m.id.startsWith(\"openrouter/\"))\n .filter((m) => {\n const modality = m.architecture?.modality || \"\";\n const outputModalities = m.architecture?.output_modalities || [];\n return (\n outputModalities.includes(\"text\") ||\n modality.endsWith(\"text\") ||\n modality.includes(\"->text\")\n );\n })\n .map((m) => ({\n created: m.created || Math.floor(Date.now() / 1000),\n id: m.id,\n maxContext: m.context_length || 128_000,\n maxOutput: m.top_provider?.max_completion_tokens || 4096,\n object: \"model\",\n owned_by: m.id.split(\"/\")[0] || \"openrouter\",\n }));\n\n return c.json({ data: filtered, object: \"list\" });\n } catch (_err) {\n const fallback = [\n {\n created: 0,\n id: \"google/gemini-2.5-flash:free\",\n object: \"model\",\n owned_by: \"google\",\n },\n {\n created: 0,\n id: \"meta-llama/llama-3.3-70b-instruct:free\",\n object: \"model\",\n owned_by: \"meta-llama\",\n },\n {\n created: 0,\n id: \"qwen/qwen-2.5-coder-32b-instruct:free\",\n object: \"model\",\n owned_by: \"qwen\",\n },\n {\n created: 0,\n id: \"deepseek/deepseek-r1:free\",\n object: \"model\",\n owned_by: \"deepseek\",\n },\n ];\n return c.json({ data: fallback, object: \"list\" });\n }\n });\n\n // GET /v1/mai/models\n app.get(\"/v1/mai/models\", async (c) => {\n const maiModelsList = [\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Light\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Apex\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Opal\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n ];\n return c.json({ data: maiModelsList, object: \"list\" });\n });\n\n // GET /v1/status\n app.get(\"/v1/status\", async (c) => {\n try {\n const res = await fetch(\"https://mai.instatus.com/summary.json\");\n const data = await res.json();\n return c.json(data);\n } catch {\n return c.json({ error: \"Failed to fetch status\" }, 500);\n }\n });\n\n // POST /v1/chat/completions\n app.post(\"/v1/chat/completions\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n\n const modelStr = String(modelRequested || \"\").toLowerCase();\n const isFreeModel = modelStr.includes(\"free\");\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles contenant 'free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process chat completion.\" }, 500);\n }\n });\n\n // POST /v1/messages (Proxy Anthropic SDK)\n app.post(\"/v1/messages\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Anthropic request.\" }, 500);\n }\n });\n\n // POST /v1beta/models/:model:generateContent (Proxy Google SDK)\n app.post(\"/v1beta/models/:model:generateContent\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json().catch(() => ({}));\n const modelRequested = c.req.param(\"model\");\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n // Google payload is different, we send it to OpenRouter's endpoint.\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Google request.\" }, 500);\n }\n });\n}",[167],"176fb5a8-2e6f-4b80-bcf7-93f4bb65a1d3",["D",1787211323241],[28],"8ab77ded-2c22-48ed-bd53-314db8beb47c","main.ts","01a01e16-6362-7755-99b8-a977b480fc8f",["D",1787211210620],1,"http","/**\n * mAI — Val Town HTTP Proxy & Auth Backend\n * URL : https://mai.val.run/\n */\n\nimport { cors } from \"npm:hono/cors\";\nimport { Hono } from \"npm:hono@4\";\nimport { registerAuthRoutes } from \"./auth.ts\";\nimport { initSQLite } from \"./config.ts\";\nimport { registerDeviceRoutes } from \"./devices.ts\";\nimport { registerMiddleware } from \"./middleware.ts\";\nimport { registerModelRoutes } from \"./models.ts\";\nimport { registerProjectRoutes } from \"./projects.ts\";\nimport { registerStorageRoutes } from \"./storage.ts\";\n\n// ─────────────────────────────────────────────\n// Init DB SQLite en background\n// ─────────────────────────────────────────────\ninitSQLite().catch(console.error);\n\n// ─────────────────────────────────────────────\n// App Hono\n// ─────────────────────────────────────────────\nconst app = new Hono();\n\napp.use(\n \"*\",\n cors({\n allowHeaders: [\n \"Content-Type\",\n \"Authorization\",\n \"x-user-id\",\n \"x-api-key\",\n \"X-User-Id\",\n \"X-API-Key\",\n \"*\",\n ],\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n exposeHeaders: [\"Content-Type\", \"Authorization\", \"x-user-id\"],\n maxAge: 86_400,\n origin: \"*\",\n }),\n);\n\n// ─────────────────────────────────────────────\n// ROUTE PAR DÉFAUT (Pour éviter le 404 en preview)\n// ─────────────────────────────────────────────\napp.get(\"/\", (c) => c.text(\"mAI\"));\n\n// ─────────────────────────────────────────────\n// Middleware & Routes modulaires\n// ─────────────────────────────────────────────\nregisterMiddleware(app);\nregisterAuthRoutes(app);\nregisterStorageRoutes(app);\nregisterModelRoutes(app);\nregisterProjectRoutes(app);\nregisterDeviceRoutes(app);\n\nexport default app.fetch;",[177],"993b1ce9-a26c-4d8e-8141-b4991e1fc6c4","email.ts","82dacee4-9c69-11f1-882a-1607ee4eb77e",8,["D",1787211250592],"import nodemailer from \"npm:nodemailer\";\n\nexport async function sendVerificationEmail(\n email: string,\n code: string,\n action: string,\n extraInfo?: any,\n) {\n console.log(\n `🔑 [CODE/ALERT] (${action}) pour ${email} : ${code || \"Aucun (Alerte)\"}`,\n );\n\n let subject = \"Notification - mAI\";\n let title = \"Notification\";\n let textContent = \"\";\n let showCode = !code ? false : true;\n\n switch (action) {\n case \"register\":\n subject = \"Vérifiez votre adresse e-mail - mAI\";\n title = \"Vérification d'inscription\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"login\":\n subject = \"Code de vérification de connexion - mAI\";\n title = \"Vérification de connexion\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"verify_new_email\":\n subject = \"Vérification de votre nouvelle adresse e-mail - mAI\";\n title = \"Changement d'e-mail\";\n textContent =\n \"Voici le code de vérification pour confirmer votre nouvelle adresse e-mail :\";\n break;\n case \"delete_account\":\n subject = \"Code de suppression de compte - mAI\";\n title = \"Suppression du compte\";\n textContent =\n \"Vous avez demandé la suppression de votre compte. Voici votre code à 8 chiffres :\";\n break;\n case \"new_login\":\n subject = \"Nouvelle connexion détectée - mAI\";\n title = \"Alerte de sécurité\";\n showCode = false;\n const device = extraInfo?.device || \"Appareil inconnu\";\n const location = extraInfo?.location || \"Lieu inconnu\";\n textContent =\n `Une nouvelle connexion à votre compte mAI a été détectée depuis :

\n Appareil : ${device}
\n Localisation : ${location}

\n Si vous êtes à l'origine de cette connexion, aucune action n'est requise. Sinon, modifiez immédiatement votre mot de passe et déconnectez cet appareil.`;\n break;\n }\n\n const html = `\n \n \n \n \n \n \n \n

\n \n \n

\n $\"mAI$ \n

${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${code}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n `;\n\n // 1. Gmail SMTP via Nodemailer\n const gmailUser = Deno.env.get(\"GMAIL_USER\") || \"tusseaumathias85@gmail.com\";\n const gmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n\n if (gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n html,\n subject,\n to: email,\n });\n\n console.log(`✉️ E-mail envoyé avec succès via Gmail SMTP à ${email}`);\n return;\n } catch (err: any) {\n console.error(\"❌ Erreur d'envoi Gmail SMTP :\", err?.message || err);\n }\n }\n\n // 2. Resend Fallback\n const resendKey = Deno.env.get(\"RESEND_API_KEY\");\n if (resendKey) {\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n body: JSON.stringify({\n from: \"mAI \",\n html,\n subject,\n to: email,\n }),\n headers: {\n Authorization: `Bearer ${resendKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n });\n if (res.ok) {\n }\n } catch (_e) {\n // ignore\n }\n }\n}",[185],"91cd934e-cae9-48af-a926-67c72097855e","auth.ts","76ede8c8-9c69-11f1-8401-1607ee4eb77e",5,["D",1787211239194],"import type { Hono } from \"npm:hono@4\";\nimport bcrypt from \"npm:bcryptjs\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || c.req.header(\"x-real-ip\") || \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const geoRes = await fetch(`http://ip-api.com/json/${ip}`);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some((d) =>\n d.device_name === device_name\n );\n const knownLocation = pastDevices.some((d) =>\n d.location && d.location.includes(countryStr)\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n\n // Les codes sont définis dans les variables d'environnement de Val Town\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) {\n upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n }\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") || Deno.env.get(\"PRO_CODE\");\n if (proCode) {\n upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n }\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") || Deno.env.get(\"MAX_CODE\");\n if (maxCode) {\n upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n }\n\n const newTier = upgradeCodes[inputCode];\n\n if (!newTier) {\n console.log(\n `[Verify-Code] Code soumis: \"${inputCode}\", Codes reconnus en ENV:`,\n Object.keys(upgradeCodes),\n );\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // On regénère le token pour inclure le nouveau tier\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({ success: true, tier: newTier, token: newToken });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n } = await c.req.json();\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n status: \"email_verification_required\",\n email: cleanEmail,\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n const { auto_logout_minutes } = await c.req.json();\n if (auto_logout_minutes !== undefined) {\n const mins = parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) return c.json({ error: \"Champs manquants.\" }, 400);\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ success: true, email: email.trim() });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ success: true, email });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ success: true, keys });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[192],"pulls","branches","forks","envVars",{"_205":207,"_208":64},"connections",{"_205":180,"_206":64},"count","unfilledCount",117,"emptyCount",{"_43":191,"_32":192,"_30":193,"_151":-5,"_41":42,"_40":194,"_153":60,"_38":235,"_13":155,"_33":34,"_35":196,"_24":25,"_157":-5,"_217":236,"_27":237},{"_43":184,"_32":185,"_30":186,"_151":-5,"_41":42,"_40":187,"_153":60,"_38":232,"_13":155,"_33":34,"_35":189,"_24":25,"_157":-5,"_217":233,"_27":234},{"_43":176,"_32":177,"_30":178,"_151":-5,"_41":42,"_40":155,"_153":25,"_38":229,"_13":180,"_33":181,"_35":182,"_24":25,"_157":-5,"_217":230,"_27":231},{"_43":173,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_153":60,"_38":226,"_13":155,"_33":34,"_35":37,"_24":25,"_157":-5,"_217":227,"_27":228},{"_43":166,"_32":167,"_30":168,"_151":-5,"_41":42,"_40":169,"_153":25,"_38":223,"_13":155,"_33":34,"_35":171,"_24":25,"_157":-5,"_217":224,"_27":225},{"_43":159,"_32":160,"_30":161,"_151":-5,"_41":42,"_40":162,"_153":60,"_38":220,"_13":155,"_33":34,"_35":164,"_24":25,"_157":-5,"_217":221,"_27":222},{"_43":148,"_32":149,"_30":150,"_151":-5,"_41":42,"_40":152,"_153":60,"_38":216,"_13":155,"_33":34,"_35":156,"_24":25,"_157":-5,"_217":218,"_27":219},["D",1787211307006],"children",[],[149],["D",1787211281216],[],[160],["D",1787211265380],[],[167],["D",1787211323241],[],[28],["D",1787211210620],[],[177],["D",1787211250592],[],[185],["D",1787211239194],[],[192],["D",1785339526786],["D",1789561254403],{"_103":102,"_111":107},{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":44,"_99":66,"_100":45,"_101":102},"ctx",{"_83":-5,"_131":276,"_277":278,"_279":280,"_281":25,"_282":25,"_283":25,"_284":60,"_285":-5,"_286":-7,"_287":-7,"_288":64,"_289":25,"_290":25,"_291":-5,"_292":25,"_293":25,"_294":25,"_295":-5},"ENV",{"_247":248,"_249":250,"_251":137,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v20