([\\s\\S]*?)<\\/title>/i);\n const linkMatch = block.match(/<link>([\\s\\S]*?)<\\/link>/i) ||\n block.match(/<guid[^>]*>([\\s\\S]*?)<\\/guid>/i);\n const descMatch = block.match(\n /<description>([\\s\\S]*?)<\\/description>/i,\n );\n\n let title = titleMatch\n ? titleMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").replace(\n /<[^>]+>/g,\n \"\",\n ).trim()\n : \"\";\n let link = linkMatch\n ? linkMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").trim()\n : \"\";\n let snippet = descMatch\n ? descMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").replace(\n /<[^>]+>/g,\n \"\",\n ).trim()\n : title;\n\n if (title && link) {\n results.push({\n title,\n url: link,\n snippet: snippet || title,\n });\n }\n }\n\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Google News RSS failed:\", err);\n }\n\n // 2. Essai Bing News RSS (Fallback de secours)\n try {\n const bingRssUrl = `https://www.bing.com/news/search?q=${\n encodeURIComponent(query)\n }&format=rss`;\n const res = await fetch(bingRssUrl, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\",\n \"Accept\": \"application/rss+xml, text/xml, */*\",\n },\n });\n\n if (res.ok) {\n const xml = await res.text();\n const items = xml.split(\"<item>\");\n for (let i = 1; i < items.length && results.length < count; i++) {\n const block = items[i].split(\"</item>\")[0];\n const titleMatch = block.match(/<title>([\\s\\S]*?)<\\/title>/i);\n const linkMatch = block.match(/<link>([\\s\\S]*?)<\\/link>/i);\n const descMatch = block.match(\n /<description>([\\s\\S]*?)<\\/description>/i,\n );\n\n const title = titleMatch\n ? titleMatch[1].replace(/<[^>]+>/g, \"\").trim()\n : \"\";\n const link = linkMatch ? linkMatch[1].trim() : \"\";\n const snippet = descMatch\n ? descMatch[1].replace(/<[^>]+>/g, \"\").trim()\n : title;\n\n if (title && link) {\n results.push({\n title,\n url: link,\n snippet: snippet || title,\n });\n }\n }\n\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Bing RSS failed:\", err);\n }\n\n // 3. Essai Wikipedia API\n try {\n const lang = /[éèàùçâêîôû]/i.test(query) ? \"fr\" : \"en\";\n const wikiUrl =\n `https://${lang}.wikipedia.org/w/api.php?action=opensearch&search=${\n encodeURIComponent(query)\n }&limit=${count}&namespace=0&format=json`;\n const res = await fetch(wikiUrl, {\n headers: {\n \"User-Agent\":\n \"mAI-WebSearch-Agent/1.0 (https://m-ai.fr; contact@m-ai.fr)\",\n },\n });\n if (res.ok) {\n const data = await res.json();\n const titles = data[1] || [];\n const descriptions = data[2] || [];\n const urls = data[3] || [];\n for (let i = 0; i < titles.length && results.length < count; i++) {\n if (urls[i]) {\n results.push({\n title: titles[i],\n url: urls[i],\n snippet: descriptions[i] || `Article Wikipedia sur ${titles[i]}`,\n });\n }\n }\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Wikipedia failed:\", err);\n }\n\n return results;\n}\n\n/**\n * Exécute une recherche Web via l'API You.com avec triple fallback automatique et fallback multi-sources.\n */\nexport async function executeWebSearch(\n query: string,\n count = 5,\n): Promise<{\n success: boolean;\n query: string;\n results: Array<{ title: string; url: string; snippet: string }>;\n provider: string;\n error?: string;\n}> {\n const trimmedQuery = (query || \"\").trim();\n if (!trimmedQuery) {\n return {\n error: \"La requête de recherche est vide.\",\n provider: \"you.com\",\n query: \"\",\n results: [],\n success: false,\n };\n }\n\n const keys = getYouApiKeys();\n let lastError: any = null;\n\n // 1. Tentative avec les clés You.com (POST https://ydc-index.io/v1/search conforme à l'API You.com)\n if (keys.length > 0) {\n const endpoints = [\n \"https://ydc-index.io/v1/search\",\n \"https://api.ydc-index.io/v1/search\",\n \"https://api.ydc-index.io/search\",\n ];\n\n for (let i = 0; i < keys.length; i++) {\n const key = keys[i];\n const keyLabel = `YOU_API_KEY_${i + 1}`;\n\n for (const endpointUrl of endpoints) {\n try {\n const res = await fetch(endpointUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-API-Key\": key,\n \"Accept\": \"application/json\",\n \"User-Agent\": \"mAI-WebSearch/1.0\",\n },\n body: JSON.stringify({\n query: trimmedQuery,\n count,\n }),\n });\n\n if (res.ok) {\n const data: any = await res.json().catch(() => null);\n if (data) {\n // Support complet des structures You.com v1 :\n // 1. data.results.web & data.results.news (Format officiel v1)\n // 2. data.results (Array direct)\n // 3. data.hits / data.web.results\n let rawHits: any[] = [];\n if (data.results && typeof data.results === \"object\") {\n if (Array.isArray(data.results)) {\n rawHits = data.results;\n } else {\n if (Array.isArray(data.results.web)) {\n rawHits.push(...data.results.web);\n }\n if (Array.isArray(data.results.news)) {\n rawHits.push(...data.results.news);\n }\n }\n } else if (Array.isArray(data.hits)) {\n rawHits = data.hits;\n } else if (Array.isArray(data.web?.results)) {\n rawHits = data.web.results;\n }\n\n const formattedResults = rawHits.map((hit: any) => {\n let snippet = \"\";\n if (hit.contents?.markdown) {\n snippet = hit.contents.markdown.slice(0, 300);\n } else if (\n hit.snippets && Array.isArray(hit.snippets) &&\n hit.snippets.length > 0\n ) {\n snippet = hit.snippets.join(\" ... \");\n } else {\n snippet = hit.description || hit.snippet || hit.text || \"\";\n }\n\n return {\n snippet: snippet.trim(),\n title: hit.title || hit.name || \"Sans titre\",\n url: hit.url || hit.link || \"\",\n };\n }).filter((item: any) => item.title && item.url);\n\n if (formattedResults.length > 0) {\n return {\n provider: \"you.com\",\n query: trimmedQuery,\n results: formattedResults,\n success: true,\n };\n }\n }\n }\n\n const status = res.status;\n const errBody = await res.text().catch(() => \"\");\n lastError = new Error(`HTTP ${status}: ${errBody}`);\n } catch (err: any) {\n lastError = err;\n }\n }\n }\n }\n\n // 2. Fallback automatique multi-moteurs (DDG Lite / Instant / Wikipedia)\n const fallbackResults = await fallbackWebSearch(trimmedQuery, count);\n if (fallbackResults.length > 0) {\n return {\n provider: \"duckduckgo (fallback)\",\n query: trimmedQuery,\n results: fallbackResults,\n success: true,\n };\n }\n\n return {\n error: keys.length === 0\n ? \"Aucune clé You.com configurée et les services de fallback sont temporairement inaccessibles.\"\n : `Échec de la recherche (${lastError?.message || \"Erreur\"}).`,\n provider: \"you.com\",\n query: trimmedQuery,\n results: [],\n success: false,\n };\n}\n\n/**\n * Définition standard de l'outil web_search pour les IA compatibles Tool Calling.\n */\nexport const WEB_SEARCH_TOOL = {\n function: {\n description:\n \"Recherche sur le Web des informations récentes et actualisées en temps réel via You.com.\",\n name: \"web_search\",\n parameters: {\n properties: {\n query: {\n description: \"La requête de recherche textuelle complète et précise.\",\n type: \"string\",\n },\n },\n required: [\"query\"],\n type: \"object\",\n },\n },\n type: \"function\" as const,\n};\n\n/**\n * Vérifie si la recherche web doit être activée ou désactivée sur un appel API.\n */\nexport function isWebSearchEnabled(body: any, reqHeaders?: Headers): boolean {\n if (body && (body.web_search === false || body.enable_web_search === false)) {\n return false;\n }\n if (reqHeaders) {\n const headerVal = reqHeaders.get(\"x-web-search\") ||\n reqHeaders.get(\"X-Web-Search\");\n if (headerVal && headerVal.toLowerCase() === \"false\") {\n return false;\n }\n const disableHeader = reqHeaders.get(\"x-disable-web-search\") ||\n reqHeaders.get(\"X-Disable-Web-Search\");\n if (\n disableHeader &&\n (disableHeader.toLowerCase() === \"true\" || disableHeader === \"1\")\n ) {\n return false;\n }\n }\n return true;\n}\n\n/**\n * Enregistrement des routes de recherche Web dans Hono.\n */\nexport function registerWebRoutes(app: Hono) {\n // POST /v1/web/search\n app.post(\"/v1/web/search\", async (c) => {\n try {\n const body = await c.req.json().catch(() => ({}));\n const query = body.query || body.q;\n const count = typeof body.count === \"number\" ? body.count : 5;\n\n if (!query || typeof query !== \"string\") {\n return c.json({ error: \"Le paramètre 'query' est obligatoire.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(query, count);\n return c.json(searchResult, 200);\n } catch (err: any) {\n return c.json({\n error: \"Erreur serveur lors de la recherche Web.\",\n details: err?.message,\n }, 500);\n }\n });\n\n // GET /v1/web/search\n app.get(\"/v1/web/search\", async (c) => {\n try {\n const query = c.req.query(\"q\") || c.req.query(\"query\");\n const countParam = c.req.query(\"count\");\n const count = countParam ? Number.parseInt(countParam, 10) : 5;\n\n if (!query) {\n return c.json({ error: \"Paramètre 'q' ou 'query' manquant.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(\n query,\n isNaN(count) ? 5 : count,\n );\n return c.json(searchResult, 200);\n } catch (err: any) {\n return c.json({\n error: \"Erreur serveur lors de la recherche Web.\",\n details: err?.message,\n }, 500);\n }\n });\n}","children",[],[191],"3e348676-db90-43cb-a5fe-b8870efbff89","storage.ts","01a0394d-9f6c-757b-8820-0c1373354892",["D",1787729246325],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n STORAGE_LIMITS_BYTES,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface StorageNode {\n id: number;\n endpoint: string;\n region: string;\n accessKeyId: string;\n secretAccessKey: string;\n bucket: string;\n publicUrl: string;\n}\n\nfunction cleanUrl(url: string, removeDefaultPort = true): string {\n let cleaned = (url || \"\").trim();\n if (cleaned.endsWith(\"/\")) {\n cleaned = cleaned.slice(0, -1);\n }\n if (removeDefaultPort) {\n // Normalise https://domaine.com:443 -> https://domaine.com pour des URLs publiques propres\n cleaned = cleaned.replace(\n /^https:\\/\\/([^/:]+):443(\\/.*)?$/,\n \"https://$1$2\",\n );\n cleaned = cleaned.replace(/^http:\\/\\/([^/:]+):80(\\/.*)?$/, \"http://$1$2\");\n }\n return cleaned;\n}\n\n/**\n * Récupère la liste des nœuds de stockage Z1 Storage / S3 configurés.\n * Supporte jusqu'à 5 comptes/buckets distincts (S3_BUCKET_1..5) pour multiplier l'espace gratuit,\n * ou une liste séparée par des virgules (S3_BUCKETS), ou la configuration classique (S3_BUCKET).\n */\nexport function getStorageNodes(): StorageNode[] {\n const nodes: StorageNode[] = [];\n\n // 1. Détection des configurations individuelles S3_BUCKET_1 à S3_BUCKET_5 (5 comptes Z1 distincts)\n for (let i = 1; i <= 5; i++) {\n const bucket = Deno.env.get(`S3_BUCKET_${i}`) ||\n Deno.env.get(`S3_BUCKET${i}`);\n const accessKeyId = Deno.env.get(`S3_ACCESS_KEY_ID_${i}`) ||\n Deno.env.get(`S3_ACCESS_KEY_ID${i}`) ||\n Deno.env.get(\"S3_ACCESS_KEY_ID\") ||\n \"\";\n const secretAccessKey = Deno.env.get(`S3_SECRET_ACCESS_KEY_${i}`) ||\n Deno.env.get(`S3_SECRET_ACCESS_KEY${i}`) ||\n Deno.env.get(\"S3_SECRET_ACCESS_KEY\") ||\n \"\";\n const rawEndpoint = Deno.env.get(`S3_ENDPOINT_${i}`) ||\n Deno.env.get(`S3_ENDPOINT${i}`) ||\n Deno.env.get(\"S3_ENDPOINT\") ||\n \"https://s3.z1storage.com\";\n const endpoint = cleanUrl(rawEndpoint);\n const region = Deno.env.get(`S3_REGION_${i}`) ||\n Deno.env.get(`S3_REGION${i}`) ||\n Deno.env.get(\"S3_REGION\") ||\n \"auto\";\n const rawPublicUrl = Deno.env.get(`S3_PUBLIC_URL_${i}`) ||\n Deno.env.get(`S3_PUBLIC_URL${i}`);\n\n let publicUrl = \"\";\n if (rawPublicUrl) {\n publicUrl = cleanUrl(rawPublicUrl);\n } else if (bucket) {\n publicUrl = `${endpoint}/${bucket}`;\n }\n\n if (bucket && accessKeyId && secretAccessKey) {\n nodes.push({\n id: i,\n endpoint,\n region,\n accessKeyId,\n secretAccessKey,\n bucket,\n publicUrl: publicUrl || `${endpoint}/${bucket}`,\n });\n }\n }\n\n // 2. Si S3_BUCKETS (liste séparée par des virgules) est configuré avec un compte unique\n if (nodes.length === 0) {\n const bucketsList = Deno.env.get(\"S3_BUCKETS\");\n if (bucketsList) {\n const bucketNames = bucketsList\n .split(\",\")\n .map((b) => b.trim())\n .filter(Boolean);\n const accessKeyId = Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\";\n const secretAccessKey = Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\";\n const rawEndpoint = Deno.env.get(\"S3_ENDPOINT\") ||\n \"https://s3.z1storage.com\";\n const endpoint = rawEndpoint.endsWith(\"/\")\n ? rawEndpoint.slice(0, -1)\n : rawEndpoint;\n const region = Deno.env.get(\"S3_REGION\") || \"auto\";\n\n bucketNames.forEach((bucket, idx) => {\n nodes.push({\n id: idx + 1,\n endpoint,\n region,\n accessKeyId,\n secretAccessKey,\n bucket,\n publicUrl: `${endpoint}/${bucket}`,\n });\n });\n }\n }\n\n // 3. Fallback mono-bucket standard (S3_BUCKET)\n if (nodes.length === 0) {\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"mai\";\n const accessKeyId = Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\";\n const secretAccessKey = Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\";\n const rawEndpoint = Deno.env.get(\"S3_ENDPOINT\") ||\n \"https://s3.z1storage.com\";\n const endpoint = rawEndpoint.endsWith(\"/\")\n ? rawEndpoint.slice(0, -1)\n : rawEndpoint;\n const region = Deno.env.get(\"S3_REGION\") || \"auto\";\n const rawPublicUrl = Deno.env.get(\"S3_PUBLIC_URL\");\n const publicUrl = rawPublicUrl\n ? rawPublicUrl.endsWith(\"/\") ? rawPublicUrl.slice(0, -1) : rawPublicUrl\n : `${endpoint}/${bucket}`;\n\n nodes.push({\n id: 1,\n endpoint,\n region,\n accessKeyId,\n secretAccessKey,\n bucket,\n publicUrl,\n });\n }\n\n return nodes;\n}\n\n/**\n * Sélectionne un nœud de stockage dans le pool via un hachage déterministe (sharding équilibré).\n */\nexport function selectStorageNode(seed: string): StorageNode {\n const nodes = getStorageNodes();\n if (nodes.length <= 1) return nodes[0];\n\n let hash = 0;\n for (let i = 0; i < seed.length; i++) {\n hash = (hash << 5) - hash + seed.charCodeAt(i);\n hash |= 0; // Convertit en entier 32 bits\n }\n const index = Math.abs(hash) % nodes.length;\n return nodes[index];\n}\n\n/**\n * Retrouve le nœud de stockage et la clé brute d'un enregistrement existant.\n */\nexport function findStorageNodeForRecord(\n r2Key: string,\n fileUrl?: string,\n): { node: StorageNode; rawKey: string } {\n const nodes = getStorageNodes();\n\n // 1. Format explicite taggé : node-1:bucket-name:key-path\n if (r2Key && r2Key.startsWith(\"node-\")) {\n const parts = r2Key.split(\":\");\n if (parts.length >= 3) {\n const nodeId = parseInt(parts[0].replace(\"node-\", \"\"), 10);\n const found = nodes.find((n) => n.id === nodeId);\n if (found) {\n return { node: found, rawKey: parts.slice(2).join(\":\") };\n }\n }\n }\n\n // 2. Recherche par nom de bucket dans la clé ou l'URL\n for (const node of nodes) {\n if (r2Key && r2Key.startsWith(`${node.bucket}/`)) {\n return { node, rawKey: r2Key.slice(node.bucket.length + 1) };\n }\n if (\n fileUrl &&\n (fileUrl.includes(`/${node.bucket}/`) ||\n fileUrl.includes(`://${node.bucket}.`))\n ) {\n return { node, rawKey: r2Key };\n }\n }\n\n // 3. Fallback sur le premier nœud\n return { node: nodes[0], rawKey: r2Key };\n}\n\n/**\n * Crée un client S3 (compatible Z1 Storage / Cloudflare R2 / AWS S3) pour un nœud donné.\n */\nexport async function buildS3Client(node?: StorageNode) {\n const targetNode = node || getStorageNodes()[0];\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: targetNode.accessKeyId,\n region: targetNode.region,\n secretAccessKey: targetNode.secretAccessKey,\n service: \"s3\",\n });\n}\n\n// Aliases de rétro-compatibilité\nexport const buildR2Client = buildS3Client;\nexport function getR2Endpoint(): string {\n return getStorageNodes()[0].endpoint;\n}\nexport function getR2Bucket(): string {\n return getStorageNodes()[0].bucket;\n}\nexport function getR2PublicBase(): string {\n return getStorageNodes()[0].publicUrl;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar\n app.post(\"/upload-avatar\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const node = selectStorageNode(`avatar-${userId}`);\n const s3Client = await buildS3Client(node);\n\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"jpg\";\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n\n const uploadUrl = `${node.endpoint}/${node.bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"image/jpeg\",\n \"x-amz-acl\": \"public-read\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur Z1 Storage S3 (avatar):\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload de l'image.\" }, 500);\n }\n\n const publicUrl = `${node.publicUrl}/${filename}`;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${userId}`;\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(\"Upload Avatar Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n });\n\n // POST /upload-file (sécurisé: auth + validation 10MB + allowlist)\n app.post(\"/upload-file\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n try {\n await verifyToken(token);\n } catch {\n return c.json({ error: \"Token invalide.\" }, 401);\n }\n\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const MAX_FILE_SIZE = 10 * 1024 * 1024;\n if (file.size > MAX_FILE_SIZE) {\n return c.json({ error: \"Fichier trop volumineux (max 10 MB).\" }, 413);\n }\n if (file.size === 0) {\n return c.json({ error: \"Fichier vide.\" }, 400);\n }\n const ALLOWED = [\n \"image/jpeg\",\n \"image/png\",\n \"image/webp\",\n \"image/gif\",\n \"application/pdf\",\n \"text/plain\",\n \"text/markdown\",\n \"text/csv\",\n \"application/json\",\n ];\n const isAllowed = ALLOWED.includes(file.type) ||\n file.type.startsWith(\"image/\") ||\n file.type.startsWith(\"text/\") ||\n file.type === \"application/pdf\" ||\n file.type === \"application/json\";\n if (file.type && !isAllowed) {\n return c.json({ error: \"Type de fichier non autorisé.\" }, 400);\n }\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n const node = selectStorageNode(cleanFilename);\n const s3Client = await buildS3Client(node);\n\n const uploadUrl = `${node.endpoint}/${node.bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n \"x-amz-acl\": \"public-read\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur Z1 Storage S3 (file):\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload vers S3.\" }, 500);\n }\n\n const publicUrl = `${node.publicUrl}/${filename}`;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n });\n\n // GET /cloud/storage — Consommation actuelle de stockage\n app.get(\"/cloud/storage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used, files_count FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const rawTier2 = userRes[0]?.tier || \"Free\";\n const tier = String(rawTier2).trim();\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[tier.toLowerCase()] ||\n STORAGE_LIMITS_BYTES[\n tier.charAt(0).toUpperCase() + tier.slice(1).toLowerCase()\n ] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n app.get(\"/cloud/files\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE user_id = ${userId}::text\n ORDER BY uploaded_at DESC\n LIMIT 200\n `;\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /cloud/upload — Upload d'un fichier vers Z1 Storage + mise à jour quota\n app.post(\"/cloud/upload\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n const MAX_FILE_SIZE = 10 * 1024 * 1024;\n if (fileSize > MAX_FILE_SIZE) {\n return c.json({ error: \"Fichier trop volumineux (max 10 MB).\" }, 413);\n }\n const ALLOWED_CLOUD_TYPES = [\n \"image/jpeg\",\n \"image/png\",\n \"image/webp\",\n \"image/gif\",\n \"application/pdf\",\n \"text/plain\",\n \"text/markdown\",\n \"text/csv\",\n \"application/json\",\n ];\n const isCloudAllowed = !file.type ||\n ALLOWED_CLOUD_TYPES.includes(file.type) ||\n file.type.startsWith(\"image/\") ||\n file.type.startsWith(\"text/\") ||\n file.type === \"application/pdf\" ||\n file.type === \"application/json\";\n if (file.type && !isCloudAllowed) {\n return c.json({ error: \"Type de fichier non autorisé.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const rawTier = userRes[0]?.tier || \"Free\";\n const tier = String(rawTier).trim();\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[tier.toLowerCase()] ||\n STORAGE_LIMITS_BYTES[\n tier.charAt(0).toUpperCase() + tier.slice(1).toLowerCase()\n ] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n\n if (bytesUsed + fileSize > bytesLimit) {\n const limitMB = Math.round(bytesLimit / (1024 * 1024));\n const usedMB = Math.round(bytesUsed / (1024 * 1024));\n return c.json(\n {\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error:\n `Quota de stockage dépassé. Vous utilisez ${usedMB} MB sur ${limitMB} MB (tier ${tier}).`,\n over_limit: true,\n },\n 413,\n );\n }\n\n // Générer une clé unique\n const ext = file.name\n .split(\".\")\n .pop()\n ?.replace(/[^a-zA-Z0-9]/g, \"\") || \"bin\";\n const uniqueId = crypto.randomUUID();\n const fileKey = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Sélectionner un nœud de stockage dans le pool à 5 buckets\n const node = selectStorageNode(`${userId}-${uniqueId}`);\n const storedKey = `node-${node.id}:${node.bucket}:${fileKey}`;\n\n // Uploader vers Z1 Storage\n const s3Client = await buildS3Client(node);\n const uploadUrl = `${node.endpoint}/${node.bucket}/${fileKey}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n \"x-amz-acl\": \"public-read\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n const errText = await uploadRes.text();\n console.error(\"Z1 Storage Upload Error:\", errText);\n return c.json(\n { error: \"Erreur lors de l'upload vers le stockage.\" },\n 500,\n );\n }\n\n const publicUrl = `${node.publicUrl}/${fileKey}`;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${storedKey}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10_000) /\n 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n });\n\n // DELETE /cloud/files/:id — Suppression définitive d'un fichier\n app.delete(\"/cloud/files/:id\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, url, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, url, size_bytes } = fileRes[0];\n\n // Identifier le nœud et supprimer de Z1 Storage\n const { node, rawKey } = findStorageNodeForRecord(r2_key, url);\n const s3Client = await buildS3Client(node);\n const deleteUrl = `${node.endpoint}/${node.bucket}/${rawKey}`;\n\n try {\n await s3Client.fetch(deleteUrl, { method: \"DELETE\" });\n } catch (s3Err) {\n console.error(\"Z1 Delete Error (continuing anyway):\", s3Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n });\n}",[],[199],"73b7c788-f6c0-4f77-911c-67d303bf71ef","projects.ts","01a0394d-9f6c-757b-8820-0acad3893034",["D",1787667783545],"import type { Hono } from \"npm:hono@4\";\nimport { getDb } from \"./config.ts\";\n\nexport const STATIC_PROJECTS_LIST = [\n {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n features: [\"Chat Web\", \"Interface fluide\", \"Streaming en direct\"],\n id: \"proj_web\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n features: [\"Extension navigateur\", \"Extension VS Code\", \"Accès contextuel\"],\n id: \"proj_pulse\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n features: [\n \"Terminal interactif\",\n \"Génération de code\",\n \"Workflows développeur\",\n ],\n id: \"proj_cli\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n version: \"0.5.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n features: [\n \"IDE IA Intelligent\",\n \"Agents Autonomes\",\n \"Outils MCP\",\n \"Multi-Modèles\",\n ],\n id: \"proj_coder\",\n is_public: true,\n label: \"Alpha\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n features: [\n \"Stockage sécurisé\",\n \"Résumés automatiques\",\n \"Indexation de documents\",\n ],\n id: \"proj_cloud\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations assistée par mAI.\",\n features: [\n \"Génération de documents\",\n \"Présentations interactives\",\n \"Export multi-format\",\n ],\n id: \"proj_office\",\n is_public: true,\n label: \"Archivé\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"archived\",\n version: \"0.1.0\",\n },\n {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description:\n \"Moteur de recherche sémantique et d'indexation vectorielle ultra-rapide.\",\n features: [\"Indexation hybride\", \"Recherche locale\"],\n id: \"proj_msearch\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n version: \"1.0.3\",\n },\n {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage intelligent d'API et modèles LLM.\",\n features: [\"Load balancing\", \"Multi-fournisseurs\"],\n id: \"proj_openprovider\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n version: \"0.5.0\",\n },\n {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast\",\n features: [\"Video game\", \"Assembler\"],\n id: \"proj_snob\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n version: \"1.0.1\",\n },\n {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n features: [\"Chat Completions\", \"Embeddings\"],\n id: \"proj_mai_legacy\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n version: \"2.4.0\",\n },\n];\n\nexport const STATIC_PROJECTS_MAP: Record<string, any> = {\n cli: {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n },\n cloud: {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n },\n coder: {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"alpha\",\n },\n mai: {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n },\n maicli: {\n category: \"CLI Tool\",\n created_at: \"2026-02-10T00:00:00.000Z\",\n description:\n \"Interface en ligne de commande professionnelle pour l'écosystème mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI CLI (Legacy)\",\n project_id: \"maicli\",\n repository: \"https://github.com/mDevsLabs/mAI-CLI\",\n status: \"archived\",\n },\n msearch: {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description: \"Moteur de recherche sémantique et d'indexation vectorielle.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n },\n office: {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"archived\",\n },\n openprovider: {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage d'API et modèles LLM.\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n },\n pulse: {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n },\n snob: {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n },\n web: {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n },\n};\n\nexport function registerProjectRoutes(app: Hono) {\n // GET /v1/projects\n app.get(\"/v1/projects\", async (c) => {\n try {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const dbProjects =\n await sql`SELECT * FROM mprojects_projects WHERE user_id = ${userId} ORDER BY created_at DESC LIMIT 50`;\n return c.json({\n data: [...STATIC_PROJECTS_LIST, ...dbProjects],\n object: \"list\",\n });\n } catch (_err) {\n return c.json({ data: STATIC_PROJECTS_LIST, object: \"list\" });\n }\n });\n\n // POST /v1/projects\n app.post(\"/v1/projects\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const body = await c.req.json();\n if (!body.name) {\n return c.json({ error: \"Le nom du projet est obligatoire.\" }, 400);\n }\n\n const projectId = \"proj-\" + Math.random().toString(36).substr(2, 9);\n\n await sql`\n INSERT INTO mprojects_projects (user_id, project_id, name, description, is_public)\n VALUES (${userId}, ${projectId}, ${body.name}, ${\n body.description || \"\"\n }, ${body.isPublic || false})\n `;\n\n return c.json({ name: body.name, project_id: projectId, success: true });\n });\n\n // GET /v1/projects/:id\n app.get(\"/v1/projects/:id\", async (c) => {\n const projectId = c.req.param(\"id\").toLowerCase();\n\n if (STATIC_PROJECTS_MAP[projectId]) {\n return c.json({ project: STATIC_PROJECTS_MAP[projectId] });\n }\n\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projects = await sql`\n SELECT * FROM mprojects_projects \n WHERE (user_id = ${userId} OR is_public = TRUE) AND LOWER(project_id) = ${projectId} \n LIMIT 1\n `;\n\n if (projects.length === 0) {\n return c.json({ error: \"Project not found\" }, 404);\n }\n\n return c.json({ project: projects[0] });\n });\n\n // PUT /v1/projects/:id\n app.put(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n const body = await c.req.json();\n\n const existing =\n await sql`SELECT id FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Projet non trouvé ou non autorisé.\" }, 404);\n }\n\n const name = body.name;\n const description = body.description;\n const isPublic = body.isPublic;\n\n await sql`\n UPDATE mprojects_projects\n SET name = COALESCE(${name}, name),\n description = COALESCE(${description}, description),\n is_public = COALESCE(${isPublic}, is_public),\n updated_at = NOW()\n WHERE user_id = ${userId} AND project_id = ${projectId}\n `;\n\n return c.json({\n message: \"Projet mis à jour.\",\n project_id: projectId,\n success: true,\n });\n });\n\n // DELETE /v1/projects/:id\n app.delete(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const result = await sql`\n DELETE FROM mprojects_projects \n WHERE user_id = ${userId} AND project_id = ${projectId}\n RETURNING id\n `;\n\n if (result.length === 0) {\n return c.json({ error: \"Projet non trouvé ou déjà supprimé.\" }, 404);\n }\n\n return c.json({ message: \"Projet supprimé avec succès.\", success: true });\n });\n\n // GET /v1/projects/:id/stats\n app.get(\"/v1/projects/:id/stats\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const projects =\n await sql`SELECT id, name, created_at FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (projects.length === 0) {\n return c.json({ error: \"Projet non trouvé.\" }, 404);\n }\n\n return c.json({\n active_deployments: 1,\n name: projects[0].name,\n project_id: projectId,\n requests_count: Math.floor(Math.random() * 500) + 12,\n status: \"healthy\",\n uptime_percentage: 99.98,\n });\n });\n}",[],[206],"2d06950c-edd6-4418-8289-d1a5d611bce5","models.ts","01a0394d-9f6c-757b-8820-07b916b3f853",["D",1787667783545],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierSpeechLimit,\n getWeekData,\n TIER_LIMITS,\n verifyToken,\n} from \"./config.ts\";\nimport { maiModelsList } from \"./maiModels.ts\";\n\nfunction getOpenRouterApiKey(userCustomKey?: string | null): string {\n if (userCustomKey && userCustomKey.trim().startsWith(\"sk-or-\")) {\n return userCustomKey.trim();\n }\n return Deno.env.get(\"OPENROUTER_API_KEY\") || \"\";\n}\n\nexport function registerModelRoutes(app: Hono) {\n // GET /usage\n app.get(\"/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const sql = getDb();\n const [usageResult, userResult, speechResult] = await Promise.all([\n sql`SELECT tokens_used FROM weekly_usage WHERE user_id = ${userId} AND week_start = ${weekStartStr}`,\n sql`SELECT tier, email, username, phone, avatar_url FROM users WHERE id = ${userId} LIMIT 1`,\n sql`SELECT tokens_used FROM weekly_speech_usage WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}::date LIMIT 1`\n .catch(() => []),\n ]);\n\n const user = userResult[0];\n const tokensUsed = usageResult[0]?.tokens_used || 0;\n const speechTokensUsed = Number(speechResult?.[0]?.tokens_used || 0);\n const userTier = user?.tier || \"Free\";\n const limit = TIER_LIMITS[userTier] || TIER_LIMITS[\"Free\"];\n const speechLimit = getTierSpeechLimit(userTier);\n\n return c.json({\n avatarUrl: user?.avatar_url,\n email: user?.email,\n id: userId,\n limit,\n phone: user?.phone,\n resetAt: nextResetIso,\n speechLimit,\n speechTokensUsed,\n tier: userTier,\n tokensUsed,\n username: user?.username,\n weekStart: weekStartStr,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /log-usage\n app.post(\"/log-usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { tokensUsed = 0 } = await c.req.json();\n const { weekStartStr } = getWeekData();\n\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage + tokensUsed > limit) {\n return c.json(\n { error: \"Limite atteinte.\", limit, used: currentUsage },\n 429,\n );\n }\n\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}, ${tokensUsed})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokensUsed}\n `;\n\n return c.json({\n limit,\n success: true,\n weeklyUsed: currentUsage + tokensUsed,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // ─────────────────────────────────────────────\n // GET /v1/models, /models & /v1beta/models\n // ─────────────────────────────────────────────\n const handleGetModels = async (c: any) => {\n const userPlan = c.get(\"userPlan\");\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const shouldFilterFreeOnly = !isPaidPlan;\n\n try {\n const res = await fetch(\"https://openrouter.ai/api/v1/models\");\n if (!res.ok) {\n throw new Error(\"OpenRouter fetch error\");\n }\n const json = await res.json();\n const rawModels: any[] = json.data || [];\n\n let filtered = rawModels\n .filter((m) => m && m.id && !m.id.startsWith(\"openrouter/\"))\n .filter((m) => {\n const modality = m.architecture?.modality || \"\";\n const outputModalities = m.architecture?.output_modalities || [];\n return (\n outputModalities.includes(\"text\") ||\n modality.endsWith(\"text\") ||\n modality.includes(\"->text\")\n );\n })\n .map((m) => {\n const rawName = m.name || m.id;\n const cleanName = (rawName || \"\")\n .replace(/\\s*\\((free|gratuit|free tier)\\)/gi, \"\")\n .replace(/:free/gi, \"\")\n .trim();\n return {\n architecture: m.architecture,\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description || \"\",\n id: m.id,\n maxContext: m.context_length || 128_000,\n maxOutput: m.top_provider?.max_completion_tokens || 4096,\n name: cleanName || m.id,\n object: \"model\",\n owned_by: m.id.split(\"/\")[0] || \"openrouter\",\n supported_parameters: m.supported_parameters || [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"stop\",\n \"tools\",\n \"response_format\",\n ],\n };\n });\n\n if (shouldFilterFreeOnly) {\n filtered = filtered.filter((m) =>\n (m.id || \"\").toLowerCase().includes(\":free\")\n );\n }\n\n return c.json({ data: filtered, object: \"list\" });\n } catch (_err) {\n let fallback = [\n {\n architecture: {\n input_modalities: [\"text\", \"image\", \"file\"],\n modality: \"text+image->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle multimodal ultra-rapide de Google conçu pour des tâches à haut débit et de raisonnement avec un très grand contexte.\",\n id: \"google/gemini-2.5-flash:free\",\n maxContext: 1_048_576,\n maxOutput: 65_535,\n name: \"Google: Gemini 2.5 Flash\",\n object: \"model\",\n owned_by: \"google\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"top_k\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"seed\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle phare de Meta Llama 3.3 70B offrant des compétences avancées de programmation, logique et résolution de problèmes complexes.\",\n id: \"meta-llama/llama-3.3-70b-instruct:free\",\n maxContext: 131_072,\n maxOutput: 128_000,\n name: \"Meta: Llama 3.3 70B Instruct\",\n object: \"model\",\n owned_by: \"meta-llama\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"frequency_penalty\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle de code spécialisé de haute précision par Alibaba Cloud, optimisé pour la synthèse de code, le refactoring et le debug.\",\n id: \"qwen/qwen-2.5-coder-32b-instruct:free\",\n maxContext: 32_768,\n maxOutput: 8192,\n name: \"Qwen: Qwen 2.5 Coder 32B Instruct\",\n object: \"model\",\n owned_by: \"qwen\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stop\",\n \"tools\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle de raisonnement logique étape par étape de premier ordre par DeepSeek pour les mathématiques et la logique complexe.\",\n id: \"deepseek/deepseek-r1:free\",\n maxContext: 163_840,\n maxOutput: 16_000,\n name: \"DeepSeek: DeepSeek R1\",\n object: \"model\",\n owned_by: \"deepseek\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"thinking\",\n \"reasoning\",\n ],\n },\n ];\n\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) =>\n (m.id || \"\").toLowerCase().includes(\":free\")\n );\n }\n\n return c.json({ data: fallback, object: \"list\" });\n }\n };\n\n app.get(\"/v1/models\", handleGetModels);\n app.get(\"/models\", handleGetModels);\n app.get(\"/v1beta/models\", handleGetModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/models/mai & GET /v1/mai/models\n // ─────────────────────────────────────────────\n const handleGetMaiModels = (c: any) => {\n const formatted = maiModelsList.map((m) => ({\n capabilities: m.capabilities,\n context_length: m.contextWindow,\n created: Math.floor(new Date(m.releaseDate).getTime() / 1000) ||\n Math.floor(Date.now() / 1000),\n description: m.description,\n huggingface_tag: m.huggingFaceTag,\n id: m.id,\n license: m.license,\n max_output_tokens: m.maxOutputTokens,\n name: m.name,\n object: \"model\",\n ollama_tag: m.ollamaTag,\n owned_by: \"mDevsLabs\",\n parameters: m.parameters,\n recommended_hardware: m.recommendedHardware,\n status: m.status,\n tagline: m.tagline,\n usable_in_cloud_chat: false,\n version: m.version,\n }));\n return c.json({ data: formatted, object: \"list\" });\n };\n\n app.get(\"/v1/models/mai\", handleGetMaiModels);\n app.get(\"/v1/mai/models\", handleGetMaiModels);\n app.get(\"/models/mai\", handleGetMaiModels);\n app.get(\"/mai/models\", handleGetMaiModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/status\n // ─────────────────────────────────────────────\n const handleGetStatus = async (c: any) => {\n try {\n const res = await fetch(\"https://mai.instatus.com/summary.json\");\n const data = await res.json();\n return c.json(data);\n } catch {\n return c.json({ error: \"Failed to fetch status\" }, 500);\n }\n };\n\n app.get(\"/v1/status\", handleGetStatus);\n app.get(\"/status\", handleGetStatus);\n\n // ─────────────────────────────────────────────\n // POST /v1/chat/completions & /chat/completions (OpenAI Compatible)\n // ─────────────────────────────────────────────\n const handleChatCompletions = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n const body = await c.req.json().catch(() => ({}));\n const modelRequested = body.model;\n const modelStr = String(modelRequested || \"\").toLowerCase().trim();\n\n // Vérifier si c'est un modèle mAI (local uniquement)\n const isMaiLocal = modelStr.startsWith(\"mai-\") ||\n modelStr.startsWith(\"mdevslabs/\") ||\n modelStr.includes(\"mai-1.\") ||\n modelStr === \"mai-1\" ||\n modelStr === \"mai-1-light\";\n\n if (isMaiLocal) {\n return c.json(\n {\n error: {\n code: \"mai_model_not_supported_for_cloud_chat\",\n message:\n `Le modèle '${modelRequested}' est un modèle mAI destiné à une exécution locale (via Ollama / HuggingFace) et n'est pas directement utilisable en chat completions cloud.`,\n param: \"model\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles contenant ':free' dans leur identifiant (ex: 'google/gemini-2.5-flash:free', 'meta-llama/llama-3.3-70b-instruct:free').`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process chat completion.\" }, 500);\n }\n };\n\n app.post(\"/v1/chat/completions\", handleChatCompletions);\n app.post(\"/chat/completions\", handleChatCompletions);\n\n // ─────────────────────────────────────────────\n // POST /v1/messages & /messages (Proxy Anthropic SDK)\n // ─────────────────────────────────────────────\n const handleMessages = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n const body = await c.req.json().catch(() => ({}));\n const modelRequested = body.model;\n const modelStr = String(modelRequested || \"\").toLowerCase().trim();\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles gratuits dont l'ID contient ':free' (ex: 'meta-llama/llama-3.3-70b-instruct:free', 'deepseek/deepseek-r1:free').`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Anthropic)\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Anthropic request.\" }, 500);\n }\n };\n\n app.post(\"/v1/messages\", handleMessages);\n app.post(\"/messages\", handleMessages);\n\n // ─────────────────────────────────────────────\n // POST /v1beta/models/* & /v1/models/* (Proxy Google Gemini SDK)\n // ─────────────────────────────────────────────\n const handleGeminiGenerate = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n const body = await c.req.json().catch(() => ({}));\n\n const fullPath = c.req.path;\n // Extraire le modèle depuis l'URL (ex: /v1beta/models/google/gemini-2.5-flash:free:generateContent -> google/gemini-2.5-flash:free)\n const pathModel = fullPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(generateContent|streamGenerateContent).*$/, \"\");\n\n const paramModel = c.req.param(\"model\");\n const modelRequested = body.model || paramModel || pathModel;\n const modelStr = String(modelRequested || \"\").toLowerCase().trim();\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: 403,\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles gratuits contenant ':free' dans leur identifiant (ex: 'google/gemini-2.5-flash:free').`,\n status: \"PERMISSION_DENIED\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterPayload = {\n ...body,\n model: body.model || modelRequested,\n };\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(openRouterPayload),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Gemini)\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Google Gemini request.\" }, 500);\n }\n };\n\n app.post(\"/v1beta/models/*\", handleGeminiGenerate);\n app.post(\"/v1/models/*:generateContent\", handleGeminiGenerate);\n app.post(\"/v1/models/*:streamGenerateContent\", handleGeminiGenerate);\n}",[],[213],"8f74d313-b032-44f8-abf5-6169fa1a1753","main.ts","01a0394d-9f6c-757b-8820-02db3dd83984",["D",1787667783545],"http","/**\n * mAI — Val Town HTTP Proxy & Auth Backend\n * URL : https://mai.val.run/\n */\n\nimport { cors } from \"npm:hono/cors\";\nimport { Hono } from \"npm:hono@4\";\nimport { registerAuthRoutes } from \"./auth.ts\";\nimport { registerAudioRoutes } from \"./audio.ts\";\nimport { initSQLite } from \"./config.ts\";\nimport { registerDeviceRoutes } from \"./devices.ts\";\nimport { registerImageRoutes } from \"./images.ts\";\nimport { registerMiddleware } from \"./api-middleware.ts\";\nimport { registerModelRoutes } from \"./models.ts\";\nimport { registerProjectRoutes } from \"./projects.ts\";\nimport { registerStorageRoutes } from \"./storage.ts\";\nimport { registerWebRoutes } from \"./web.ts\";\n\n// ─────────────────────────────────────────────\n// Init DB SQLite en background\n// ─────────────────────────────────────────────\ninitSQLite().catch(console.error);\n\n// ─────────────────────────────────────────────\n// App Hono\n// ─────────────────────────────────────────────\nconst app = new Hono();\n\nconst ALLOWED_ORIGINS = [\n \"https://mai-officiel.vercel.app\",\n \"https://mai-devs.vercel.app\",\n \"https://mai.val.run\",\n \"https://mdevslabs.github.io\",\n \"https://m-ai.fr\",\n \"https://www.m-ai.fr\",\n \"http://localhost:3000\",\n \"http://localhost:3001\",\n];\n\napp.use(\n \"*\",\n cors({\n allowHeaders: [\n \"Content-Type\",\n \"Authorization\",\n \"x-user-id\",\n \"x-api-key\",\n \"X-User-Id\",\n \"X-API-Key\",\n \"x-web-search\",\n \"X-Web-Search\",\n \"x-disable-web-search\",\n \"X-Disable-Web-Search\",\n \"x-goog-api-key\",\n \"X-Goog-Api-Key\",\n \"anthropic-version\",\n \"anthropic-beta\",\n ],\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n exposeHeaders: [\"Content-Type\", \"Authorization\", \"x-user-id\"],\n maxAge: 86_400,\n origin: (origin) => {\n if (!origin) return \"*\"; // allow curl / mobile\n if (ALLOWED_ORIGINS.includes(origin)) return origin;\n // Allow vercel preview deployments\n if (origin.endsWith(\".vercel.app\")) return origin;\n return ALLOWED_ORIGINS[0];\n },\n credentials: true,\n }),\n);\n\n// ─────────────────────────────────────────────\n// ROUTE PAR DÉFAUT (Pour éviter le 404 en preview)\n// ─────────────────────────────────────────────\napp.get(\"/\", (c) => c.text(\"mAI\"));\n\n// ─────────────────────────────────────────────\n// Middleware & Routes modulaires\n// ─────────────────────────────────────────────\nregisterMiddleware(app);\nregisterAuthRoutes(app);\nregisterStorageRoutes(app);\nregisterModelRoutes(app);\nregisterImageRoutes(app);\nregisterAudioRoutes(app);\nregisterWebRoutes(app);\nregisterProjectRoutes(app);\nregisterDeviceRoutes(app);\n\nexport default app.fetch;",[],[220],["D",1787667783545],[],[18],"c55b36d2-b371-488a-ab84-bcdb258ea1a3","images.ts","01a0394d-9f6c-757b-881f-f956cc3c6991",["D",1787729246325],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierDailyImageLimit,\n getTierImageRequestCost,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface ImageModelItem {\n created: number;\n description: string;\n id: string;\n name: string;\n}\n\nexport function getCometApiKey(): string {\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(\"COMET_API_KEY\") || \"\";\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env.COMET_API_KEY || \"\";\n }\n return \"\";\n}\n\n/**\n * Modèles de repli d'image de haute qualité\n */\nconst FALLBACK_IMAGE_MODELS = [\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle de génération d'images ultra-rapide en 4 étapes par Black Forest Labs (Text-to-Image).\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1-schnell\",\n model_type: \"image\",\n name: \"FLUX.1 Schnell\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle phare de haute précision pour la synthèse d'images photoréalistes et artistiques (Text-to-Image).\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1-dev\",\n model_type: \"image\",\n name: \"FLUX.1 Dev\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 15,\n description:\n \"Le sommet de la qualité visuelle, cohérence typographique et détails avancés par Black Forest Labs.\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1.1-pro\",\n model_type: \"image\",\n name: \"FLUX 1.1 Pro\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 20,\n description:\n \"Modèle de pointe de 8 milliards de paramètres de Stability AI pour une variété stylistique maximale.\",\n features: [\"text-to-image\", \"image-to-image\"],\n id: \"stabilityai/stable-diffusion-3.5-large\",\n model_type: \"image\",\n name: \"Stable Diffusion 3.5 Large\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 60,\n description:\n \"Génération stylisée haut de gamme avec esthétique et prompt comprehension avancée.\",\n features: [\"text-to-image\"],\n id: \"midjourney/v6\",\n model_type: \"image\",\n name: \"Midjourney v6\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 10,\n description:\n \"Génération vectorielle et matricielle spécialisée dans les logos, illustrations et design graphique.\",\n features: [\"text-to-image\"],\n id: \"recraft-ai/recraft-v3\",\n model_type: \"image\",\n name: \"Recraft V3\",\n },\n];\n\nexport function registerImageRoutes(app: Hono) {\n // ─────────────────────────────────────────────\n // GET /v1/models/images\n // ─────────────────────────────────────────────\n app.get(\"/v1/models/images\", async (c) => {\n const userPlan = c.get(\"userPlan\");\n const _apiKey = c.get(\"apiKey\");\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const shouldFilterFreeOnly = !isPaidPlan;\n\n const cometApiKey = getCometApiKey();\n\n try {\n let rawModels: any[] = [];\n\n if (cometApiKey) {\n const cometRes = await fetch(\"https://api.cometapi.com/v1/models\", {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n },\n });\n\n if (cometRes.ok) {\n const json = await cometRes.json();\n rawModels = json.data || json.models || [];\n }\n }\n\n if (rawModels.length === 0) {\n rawModels = FALLBACK_IMAGE_MODELS;\n }\n\n // 1. Premier filtre : model_type === 'image'\n let imageModels = rawModels.filter((m) => {\n const mType = (\n m.model_type ||\n m.type ||\n m.architecture?.modality ||\n \"\"\n ).toLowerCase();\n const features = (m.features || m.supported_features || []).map(\n (f: string) => f.toLowerCase(),\n );\n const isImg = mType.includes(\"image\") ||\n features.includes(\"text-to-image\") ||\n features.includes(\"image-to-image\") ||\n m.id.toLowerCase().includes(\"flux\") ||\n m.id.toLowerCase().includes(\"diffusion\") ||\n m.id.toLowerCase().includes(\"dall-e\") ||\n m.id.toLowerCase().includes(\"midjourney\");\n return isImg;\n });\n\n // 2. Si Free : id contenant 'flux' uniquement (règle stricte)\n if (shouldFilterFreeOnly) {\n imageModels = imageModels.filter((m) => {\n const idLower = (m.id || \"\").toLowerCase();\n return idLower.includes(\"flux\");\n });\n }\n\n // 3. Renvoyer les données : id, description, name, created et features\n const formatted = imageModels.map((m) => ({\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description ||\n `Modèle de génération d'images ${m.name || m.id}.`,\n features: m.features ||\n m.supported_features ||\n (m.id?.toLowerCase().includes(\"diffusion\")\n ? [\"text-to-image\", \"image-to-image\"]\n : [\"text-to-image\"]),\n id: m.id,\n name: m.name || m.id,\n }));\n\n return c.json({ data: formatted, object: \"list\" });\n } catch (_err) {\n // Fallback gracieux en cas d'erreur\n let fallback = FALLBACK_IMAGE_MODELS;\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) => m.id.toLowerCase().includes(\"flux\"));\n }\n const formatted = fallback.map((m) => ({\n created: m.created,\n description: m.description,\n features: m.features || [\"text-to-image\"],\n id: m.id,\n name: m.name,\n }));\n return c.json({ data: formatted, object: \"list\" });\n }\n });\n\n // ─────────────────────────────────────────────\n // GET /v1/images/usage\n // ─────────────────────────────────────────────\n app.get(\"/v1/images/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const _apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n void _apiKey;\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const [uRows, countRows] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text LIMIT 1`,\n sql`\n SELECT images_generated \n FROM mprojects_daily_image_usage \n WHERE user_id = ${userId}::text AND usage_date = CURRENT_DATE \n LIMIT 1\n `,\n ]);\n\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const usedToday = countRows[0]?.images_generated || 0;\n const dailyLimit = getTierDailyImageLimit(effectiveTier);\n\n // Calculer la prochaine réinitialisation (minuit UTC)\n const now = new Date();\n const tomorrowMidnight = new Date(\n Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate() + 1,\n 0,\n 0,\n 0,\n ),\n );\n\n return c.json({\n dailyLimit,\n plan: effectiveTier,\n resetAt: tomorrowMidnight.toISOString(),\n usedToday,\n userId,\n });\n } catch (err: any) {\n return c.json(\n {\n details: err.message,\n error: \"Erreur lors de la récupération de l'usage image.\",\n },\n 500,\n );\n }\n });\n\n // ─────────────────────────────────────────────\n // GET /v1/images/history\n // ─────────────────────────────────────────────\n app.get(\"/v1/images/history\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const history = await sql`\n SELECT id, model, prompt, negative_prompt, width, height, image_url, status, created_at\n FROM mprojects_image_generations\n WHERE user_id = ${userId}::text\n ORDER BY created_at DESC\n LIMIT 50\n `;\n\n return c.json({ data: history, success: true });\n } catch (err: any) {\n return c.json(\n { details: err.message, error: \"Erreur historique images.\" },\n 500,\n );\n }\n });\n\n // ─────────────────────────────────────────────\n // POST /v1/images/generations, /v1beta/models/*:generateImages (OpenAI, Google & Anthropic SDK)\n // ─────────────────────────────────────────────\n const handleImageGeneration = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : headerApiKey || null;\n\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json(\n { error: \"Non authentifié. Clé API ou token requis.\" },\n 401,\n );\n }\n\n const body = await c.req.json().catch(() => ({}));\n const reqPath = c.req.path || \"\";\n const isGoogleFormat = reqPath.includes(\":generateImages\") ||\n reqPath.includes(\":predict\") ||\n Boolean(body.instances || body.numberOfImages || body.aspectRatio);\n\n // Support des paramètres OpenAI & Google GenAI\n const rawPrompt = body.prompt ||\n body.instances?.[0]?.prompt ||\n body.parameters?.prompt ||\n \"\";\n const prompt = typeof rawPrompt === \"string\" ? rawPrompt.trim() : \"\";\n\n // Extraction du modèle demandé\n const pathModel = reqPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(generateImages|predict).*$/, \"\");\n const requestedModel = body.model || pathModel ||\n \"black-forest-labs/flux-1-schnell\";\n\n // Mapping des alias OpenAI (ex: dall-e-3, dall-e-2) et Google (imagen-3)\n let model = requestedModel;\n if (\n model.toLowerCase().includes(\"dall-e\") ||\n model.toLowerCase().includes(\"imagen\")\n ) {\n model = \"black-forest-labs/flux-1-schnell\";\n }\n\n // Résolution des dimensions (support aspectRatio Google et size OpenAI)\n let width = 1024;\n let height = 1024;\n\n if (body.aspectRatio) {\n const ar = String(body.aspectRatio).trim();\n if (ar === \"16:9\") {\n width = 1280;\n height = 720;\n } else if (ar === \"9:16\") {\n width = 720;\n height = 1280;\n } else if (ar === \"4:3\") {\n width = 1024;\n height = 768;\n } else if (ar === \"3:4\") {\n width = 768;\n height = 1024;\n }\n } else if (body.size) {\n const parts = String(body.size).split(\"x\");\n if (parts.length === 2) {\n width = Number.parseInt(parts[0], 10) || 1024;\n height = Number.parseInt(parts[1], 10) || 1024;\n }\n } else {\n if (body.width) width = Number(body.width);\n if (body.height) height = Number(body.height);\n }\n\n const negativePrompt = body.negative_prompt || \"\";\n\n if (!prompt) {\n return c.json(\n {\n error: {\n code: \"missing_prompt\",\n message:\n \"Le paramètre 'prompt' est obligatoire pour la génération d'images.\",\n param: \"prompt\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const sql = getDb();\n\n // Vérifier le forfait utilisateur réel dans la table users\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${userId}::text OR username = ${userId}::text \n LIMIT 1\n `;\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const planStr = effectiveTier.toLowerCase().trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n\n // Bloquer les utilisateurs du forfait Free pour la génération d'images via clé API\n if (!isPaidPlan) {\n return c.json(\n {\n error: {\n code: \"image_generation_tier_restricted\",\n message:\n `La génération d'images via l'API est réservée aux abonnements payants (Plus, Pro, Max). Les clés API issues d'un compte Free ne sont pas autorisées à effectuer de requêtes de génération d'images.`,\n param: null,\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n // Vérification du quota journalier (Plus: 5/j, Pro: 10/j, Max: 20/j)\n const dailyLimit = getTierDailyImageLimit(effectiveTier);\n\n const usageRows = await sql`\n SELECT images_generated \n FROM mprojects_daily_image_usage \n WHERE user_id = ${userId}::text AND usage_date = CURRENT_DATE \n LIMIT 1\n `;\n const currentDailyUsage = usageRows[0]?.images_generated || 0;\n\n if (currentDailyUsage >= dailyLimit) {\n return c.json(\n {\n error: {\n code: \"daily_image_quota_exceeded\",\n limit: dailyLimit,\n message:\n `Votre quota journalier de génération d'images est épuisé (${currentDailyUsage}/${dailyLimit} par jour pour le forfait ${effectiveTier}). Réinitialisation automatique à minuit UTC.`,\n type: \"quota_error\",\n used: currentDailyUsage,\n },\n },\n 429,\n );\n }\n\n // Appel de Comet API\n const cometApiKey = getCometApiKey();\n let generatedImageUrl = \"\";\n let cometResultData: any[] = [];\n\n if (cometApiKey) {\n const imagePayload: Record<string, any> = {\n model,\n n: body.n || body.numberOfImages || 1,\n prompt,\n response_format: body.response_format || \"url\",\n size: `${width}x${height}`,\n };\n if (body.image || body.image_url) {\n imagePayload.image = body.image || body.image_url;\n }\n\n const cometRes = await fetch(\n \"https://api.cometapi.com/v1/images/generations\",\n {\n body: JSON.stringify(imagePayload),\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n },\n );\n\n if (!cometRes.ok) {\n const errText = await cometRes.text().catch(() => \"\");\n console.error(\"[CometAPI] Erreur génération:\", errText);\n return c.json(\n {\n details: errText,\n error: \"Erreur retournée par le fournisseur Comet API.\",\n },\n cometRes.status,\n );\n }\n\n const cometJson = await cometRes.json();\n cometResultData = cometJson.data || [];\n if (cometResultData.length > 0) {\n generatedImageUrl = cometResultData[0].url ||\n cometResultData[0].b64_json || \"\";\n }\n } else {\n // Mode simulation / fallback si la clé Comet n'est pas encore renseignée\n generatedImageUrl = `https://picsum.photos/seed/${\n encodeURIComponent(prompt.slice(0, 20))\n }/${width}/${height}`;\n cometResultData = [{ url: generatedImageUrl }];\n }\n\n // Incrémentation du quota journalier\n await sql`\n INSERT INTO mprojects_daily_image_usage (user_id, usage_date, images_generated, updated_at)\n VALUES (${userId}::text, CURRENT_DATE, 1, NOW())\n ON CONFLICT (user_id, usage_date)\n DO UPDATE SET \n images_generated = mprojects_daily_image_usage.images_generated + 1,\n updated_at = NOW()\n `;\n\n // Enregistrement dans l'historique\n await sql`\n INSERT INTO mprojects_image_generations (\n user_id, api_key, model, prompt, negative_prompt, width, height, image_url, status\n ) VALUES (\n ${userId}::text,\n ${apiKey || null},\n ${model}::text,\n ${prompt}::text,\n ${negativePrompt || null},\n ${width}::integer,\n ${height}::integer,\n ${generatedImageUrl}::text,\n 'completed'\n )\n `;\n\n // Incrémentation du compteur de requêtes de la clé API selon le forfait (Free: 100, Plus: 50, Pro: 25, Max: 10)\n const requestCost = getTierImageRequestCost(effectiveTier);\n if (apiKey) {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + ${requestCost}, last_used_at = NOW()\n WHERE api_key = ${apiKey}\n `;\n }\n\n // Enregistrement d'usage log dans mprojects_api_logs\n try {\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms, created_at)\n VALUES (${apiKey || \"anonymous\"}::text, ${\n reqPath || \"/v1/images/generations\"\n }::text, 'POST', 200, 1500, NOW())\n `;\n } catch {}\n\n // Formatage de la réponse selon le SDK appelant (Google GenAI vs OpenAI / Anthropic)\n if (isGoogleFormat) {\n return c.json({\n generatedImages: cometResultData.map((img) => ({\n image: {\n imageBytes: img.b64_json || \"\",\n mimeType: \"image/jpeg\",\n uri: img.url || generatedImageUrl,\n },\n })),\n });\n }\n\n // Format OpenAI par défaut (utilisé par OpenAI SDK & Anthropic proxy)\n return c.json({\n created: Math.floor(Date.now() / 1000),\n data: cometResultData,\n usage: {\n daily_limit: dailyLimit,\n daily_used: currentDailyUsage + 1,\n plan: effectiveTier,\n request_cost: requestCost,\n requests_counted: requestCost,\n },\n });\n } catch (err: any) {\n console.error(\"[ImagesAPI] Erreur serveur:\", err);\n return c.json(\n {\n details: err.message,\n error: \"Erreur serveur lors de la génération d'image.\",\n },\n 500,\n );\n }\n };\n\n // Routes OpenAI & Anthropic SDK\n app.post(\"/v1/images/generations\", handleImageGeneration);\n app.post(\"/images/generations\", handleImageGeneration);\n app.post(\"/v1/images\", handleImageGeneration);\n app.post(\"/images\", handleImageGeneration);\n app.post(\"/v1/images/edits\", handleImageGeneration);\n app.post(\"/images/edits\", handleImageGeneration);\n app.post(\"/v1/images/variations\", handleImageGeneration);\n app.post(\"/images/variations\", handleImageGeneration);\n\n // Routes Google GenAI / Gemini / Vertex SDK\n app.post(\"/v1beta/models/*:generateImages\", handleImageGeneration);\n app.post(\"/v1/models/*:generateImages\", handleImageGeneration);\n app.post(\"/v1beta/models/*:predict\", handleImageGeneration);\n app.post(\"/v1/models/*:predict\", handleImageGeneration);\n}",[],[231],"e085e9e1-1e0b-4e89-9810-f7f665ecb407","email.ts","01a0394d-9f6c-757b-881f-f4aa5beb71c3",5,["D",1787671150121],4,"import nodemailer from \"npm:nodemailer\";\n\nfunction escapeHtml(str: string): string {\n return String(str)\n .replace(/&/g, \"&\")\n .replace(/</g, \"<\")\n .replace(/>/g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\nexport async function sendVerificationEmail(\n email: string,\n code: string,\n action: string,\n extraInfo?: any,\n) {\n // Log du code pour développement / debugging\n const maskedEmail = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(\n `[EMAIL] action=${action} to=${maskedEmail} hasCode=${\n Boolean(code)\n } code=${code}`,\n );\n\n let subject = \"Notification - mAI\";\n let title = \"Notification\";\n let textContent = \"\";\n let showCode = code ? true : false;\n\n switch (action) {\n case \"register\":\n subject = \"Vérifiez votre adresse e-mail - mAI\";\n title = \"Vérification d'inscription\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte <strong>mAI</strong> :\";\n break;\n case \"login\":\n subject = \"Code de vérification de connexion - mAI\";\n title = \"Vérification de connexion\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte <strong>mAI</strong> :\";\n break;\n case \"verify_new_email\":\n subject = \"Vérification de votre nouvelle adresse e-mail - mAI\";\n title = \"Changement d'e-mail\";\n textContent =\n \"Voici le code de vérification pour confirmer votre nouvelle adresse e-mail :\";\n break;\n case \"delete_account\":\n subject = \"Code de suppression de compte - mAI\";\n title = \"Suppression du compte\";\n textContent =\n \"Vous avez demandé la suppression de votre compte. Voici votre code à 8 chiffres :\";\n break;\n case \"subscription_unlocked\": {\n const tierUnlocked = escapeHtml(extraInfo?.tier || \"Pro\");\n subject = `Merci d'avoir souscrit au forfait ${tierUnlocked} ! - mAI`;\n title = `Merci d'avoir souscrit au forfait ${tierUnlocked} !`;\n showCode = false;\n textContent =\n `Nous vous remercions chaleureusement pour votre souscription au forfait <strong>${tierUnlocked}</strong> sur <strong>mAI</strong> !<br><br>\n Votre compte bénéficie dès maintenant de vos nouveaux quotas étendus pour l'ensemble de vos applications et clés d'API (tokens mAI, requêtes API et stockage Cloud).<br><br>\n Toute l'équipe mDevsLabs vous remercie pour votre confiance et vous souhaite une excellente expérience créative et productive avec mAI.`;\n break;\n }\n case \"new_login\": {\n subject = \"Nouvelle connexion détectée - mAI\";\n title = \"Alerte de sécurité\";\n showCode = false;\n const device = escapeHtml(extraInfo?.device || \"Appareil inconnu\");\n const location = escapeHtml(extraInfo?.location || \"Lieu inconnu\");\n textContent =\n `Une nouvelle connexion à votre compte <strong>mAI</strong> a été détectée depuis :<br><br>\n <strong>Appareil :</strong> ${device}<br>\n <strong>Localisation :</strong> ${location}<br><br>\n Si vous êtes à l'origine de cette connexion, aucune action n'est requise. Sinon, modifiez immédiatement votre mot de passe et déconnectez cet appareil.`;\n break;\n }\n }\n\n const html = `\n <!DOCTYPE html>\n <html>\n <head>\n <meta charset=\"utf-8\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n </head>\n <body style=\"margin:0; padding:0; background-color:#090d16; font-family:'Segoe UI', Roboto, Helvetica, Arial, sans-serif; color:#f8fafc;\">\n <div style=\"max-width:560px; margin:40px auto; background:#111827; border:1px solid #1f293d; border-radius:16px; overflow:hidden; box-shadow:0 20px 25px -5px rgba(0,0,0,0.5);\">\n \n \n <div style=\"background:linear-gradient(135deg, #1e1b4b 0%, #31104b 100%); padding:32px 24px; text-align:center; border-bottom:1px solid #2e1065;\">\n <img src=\"https://upload.fs.fr/azq3C6GLea.png\" alt=\"mAI Logo\" style=\"height:48px; width:auto; max-width:180px; object-fit:contain; display:inline-block;\" />\n <h1 style=\"color:#ffffff; font-size:20px; font-weight:700; margin:16px 0 0 0; letter-spacing:-0.5px;\">${title}</h1>\n </div>\n\n \n <div style=\"padding:32px 28px; line-height:1.6; font-size:15px; color:#cbd5e1;\">\n <p style=\"margin-top:0;\">Bonjour,</p>\n <p>${textContent}</p>\n \n ${\n showCode\n ? `\n \n <div style=\"background:#1e293b; border:1px solid #334155; border-radius:12px; padding:24px; text-align:center; margin:28px 0;\">\n <div style=\"font-size:34px; font-weight:800; letter-spacing:8px; color:#a855f7; font-family:Consolas, Monaco, monospace; margin-bottom:12px; user-select:all;\">\n ${escapeHtml(code)}\n </div>\n <p style=\"font-size:12px; color:#94a3b8; margin:0;\">Code unique • Expire dans 10 minutes</p>\n </div>\n `\n : \"\"\n }\n\n <p style=\"font-size:13px; color:#94a3b8; margin-top:28px;\">Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.</p>\n </div>\n\n \n <div style=\"background-color:#0b0f19; padding:20px 24px; text-align:center; border-top:1px solid #1e293b; font-size:12px; color:#64748b;\">\n <p style=\"margin:0 0 6px 0;\">© 2026 mAI — Plateforme d'Intelligence Artificielle & APIs</p>\n <p style=\"margin:0;\">Cet e-mail automatique a été envoyé de manière sécurisée.</p>\n </div>\n\n </div>\n </body>\n </html>\n `;\n\n // 1. Envoi via Google Apps Script (Recommandé)\n const googleScriptsUrl = Deno.env.get(\"GOOGLE_SCRIPTS_URL\") ||\n Deno.env.get(\"GOOGLE_SCRIPT_URL\");\n const googleScriptSecret = Deno.env.get(\"GOOGLE_SCRIPTS_SECRET\") ||\n Deno.env.get(\"GOOGLE_SCRIPT_SECRET\");\n\n if (googleScriptsUrl && googleScriptSecret) {\n try {\n const res = await fetch(googleScriptsUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n secret: googleScriptSecret,\n to: email,\n subject: subject,\n htmlBody: html,\n }),\n });\n\n if (res.ok) {\n const data = await res.json();\n if (data.success) {\n const maskedTo = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Google Apps Script OK to=${maskedTo}`);\n return;\n } else {\n console.error(\"Erreur de retour Google Apps Script :\", data.error);\n }\n } else {\n console.error(\n \"Erreur HTTP Google Apps Script :\",\n res.status,\n res.statusText,\n );\n }\n } catch (err: any) {\n console.error(\n \"Erreur envoi via Google Apps Script :\",\n err?.message || err,\n );\n }\n } else {\n console.warn(\n \"[EMAIL] GOOGLE_SCRIPTS_URL/GOOGLE_SCRIPT_SECRET non configurés — fallback SMTP\",\n );\n }\n\n // 2. Fallback Gmail SMTP via Nodemailer\n const gmailUser = Deno.env.get(\"GMAIL_USER\");\n const gmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n\n if (gmailUser && gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n html,\n subject,\n to: email,\n });\n\n const maskedTo = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Gmail SMTP OK to=${maskedTo}`);\n return;\n } catch (err: any) {\n console.error(\"Erreur envoi Gmail SMTP :\", err?.message || err);\n }\n } else {\n console.warn(\n \"[EMAIL] GMAIL_USER/GMAIL_APP_PASSWORD non configurés — aucun moyen d'envoi disponible\",\n );\n }\n}",[],[238],"b9d184df-6751-4017-b477-10b4cfee09fd","devices.ts","01a0394d-9f6c-757b-881f-f1ef031052a1",["D",1787667783545],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n created_at: d.created_at,\n device_model: d.device_model,\n device_name: d.device_name,\n device_version: d.device_version || \"\",\n id: d.id,\n ip_address: d.ip_address,\n is_current: d.token === token,\n last_active: d.last_active,\n os: d.os,\n }));\n\n return c.json({ devices, success: true });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n message: \"Tous les autres appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n message: \"Tous les appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[],[247],"687039fd-4e9e-4d5f-b533-5501539280b1","config.ts","01a0394d-9f6c-757b-881f-ee10d98b9879",["D",1787667783545],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"14d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// Limites de tokens hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record<string, number> = {\n Free: 2_000_000,\n Max: 20_000_000,\n Plus: 5_000_000,\n Pro: 10_000_000,\n};\n\n// Limites de tokens Speech hebdomadaires (Free: 20M, Plus: 50M, Pro: 100M, Max: 200M)\nexport const TIER_SPEECH_LIMITS: Record<string, number> = {\n Free: 20_000_000,\n free: 20_000_000,\n Gratuit: 20_000_000,\n gratuit: 20_000_000,\n Max: 200_000_000,\n max: 200_000_000,\n Plus: 50_000_000,\n plus: 50_000_000,\n Pro: 100_000_000,\n pro: 100_000_000,\n};\n\nexport function getTierSpeechLimit(tier?: string | null): number {\n const t = (tier || \"Free\").toLowerCase().trim();\n if (t === \"max\") {\n return 200_000_000;\n }\n if (t === \"pro\") {\n return 100_000_000;\n }\n if (t === \"plus\") {\n return 50_000_000;\n }\n return 20_000_000;\n}\n\nexport const TIER_REQUEST_LIMITS: Record<string, number> = {\n Free: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n};\n\n// Limites quotidiennes de génération d'images (Free: 3/j, Plus: 5/j, Pro: 10/j, Max: 20/j)\nexport const TIER_DAILY_IMAGE_LIMITS: Record<string, number> = {\n Free: 3,\n free: 3,\n Gratuit: 3,\n gratuit: 3,\n Max: 20,\n max: 20,\n Plus: 5,\n Pro: 10,\n plus: 5,\n pro: 10,\n};\n\nexport function getTierDailyImageLimit(tier?: string | null): number {\n const t = (tier || \"Free\").toLowerCase().trim();\n if (t === \"max\") {\n return 20;\n }\n if (t === \"pro\") {\n return 10;\n }\n if (t === \"plus\") {\n return 5;\n }\n return 3;\n}\n\n// Coût en requêtes API par génération d'image\n// Free = 100 requêtes, Plus = 50 requêtes, Pro = 25 requêtes, Max = 10 requêtes\nexport const TIER_IMAGE_REQUEST_COST: Record<string, number> = {\n Free: 100,\n free: 100,\n Gratuit: 100,\n gratuit: 100,\n Max: 10,\n max: 10,\n Plus: 50,\n Pro: 25,\n plus: 50,\n pro: 25,\n};\n\nexport function getTierImageRequestCost(tier?: string | null): number {\n const t = (tier || \"Free\").toLowerCase().trim();\n if (t === \"max\") {\n return 10;\n }\n if (t === \"pro\") {\n return 25;\n }\n if (t === \"plus\") {\n return 50;\n }\n return 100;\n}\n\n// Limites de stockage Cloud par tier (en bytes) — SSOT: Free 500Mo / Plus 1Go / Pro 2Go / Max 5Go\nexport const STORAGE_LIMITS_BYTES: Record<string, number> = {\n Free: 500 * 1024 * 1024, // 500 MB\n // alias lowercase pour lookup case-insensitive côté Val Town\n free: 500 * 1024 * 1024,\n gratuit: 500 * 1024 * 1024,\n Max: 5 * 1024 * 1024 * 1024, // 5 GB\n max: 5 * 1024 * 1024 * 1024,\n Plus: 1 * 1024 * 1024 * 1024, // 1 GB\n Pro: 2 * 1024 * 1024 * 1024, // 2 GB\n plus: 1 * 1024 * 1024 * 1024,\n pro: 2 * 1024 * 1024 * 1024,\n} as Record<string, number>;\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret = Deno.env.get(\"MAI_JWT_SECRET\");\n if (!secret) {\n throw new Error(\"MAI_JWT_SECRET not set\");\n }\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record<string, unknown>,\n): Promise<string> {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise<Record<string, unknown>> {\n // Vérif SQLite (legacy Val Town) + Postgres (nouveau)\n const sqliteResult = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (sqliteResult.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n // Vérif Postgres token_blacklist avec TTL 14j\n try {\n const sql = getDb();\n const pgResult =\n await sql`SELECT 1 FROM token_blacklist WHERE token = ${token} LIMIT 1`;\n if (pgResult.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n } catch (e: any) {\n if (e?.message === \"Token révoqué.\") {\n throw e;\n }\n // ignore DB errors (table not yet exists)\n }\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record<string, unknown>;\n}\n\nexport async function blacklistToken(token: string) {\n const expiresAt = new Date(\n Date.now() + 14 * 24 * 60 * 60 * 1000,\n ).toISOString();\n try {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n try {\n const sql = getDb();\n await sql`INSERT INTO token_blacklist (token, revoked_at, expires_at) VALUES (${token}, NOW(), ${expiresAt}::timestamp) ON CONFLICT (token) DO NOTHING`;\n } catch {}\n // Nettoyage opportuniste des vieux tokens\n try {\n const sql = getDb();\n await sql`DELETE FROM token_blacklist WHERE expires_at < NOW() OR revoked_at < NOW() - INTERVAL '14 days'`;\n } catch {}\n try {\n await sqlite.execute({\n sql:\n \"DELETE FROM token_blacklist WHERE revoked_at < datetime('now', '-14 days')\",\n });\n } catch {}\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") ||\n uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n device_model: model,\n device_name: deviceName,\n device_version: fullVersion,\n os,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise<string> {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = 10 ** (length - 1);\n const max = 10 ** length - 1;\n // Crypto PRNG (corrige Math.random prévisible)\n const range = max - min;\n const randomValue = crypto.getRandomValues(new Uint32Array(1))[0] /\n 0xff_ff_ff_ff;\n const code = Math.floor(min + randomValue * range)\n .toString()\n .padStart(length, \"0\");\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise<boolean> {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[],[254],"07e3e783-7f9d-4713-a81d-0bb2c6978106","auth.ts","01a0394d-9f6c-757b-881f-ebd20dd80c13",["D",1787667783545],"import bcrypt from \"npm:bcryptjs\";\nimport type { Hono } from \"npm:hono@4\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n c.req.header(\"x-real-ip\") ||\n \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const geoRes = await fetch(`https://ip-api.com/json/${ip}`, {\n headers: { \"User-Agent\": \"mAI/1.0\" },\n signal: controller.signal,\n });\n clearTimeout(timeout);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some(\n (d) => d.device_name === device_name,\n );\n const knownLocation = pastDevices.some(\n (d) => d.location && d.location.includes(countryStr),\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 &&\n Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record<string, string> = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) {\n upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n }\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) {\n upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n }\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) {\n upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n }\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(`[Verify-Code] Code invalide soumis par user=${userId}`);\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.json();\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n auto_logout_minutes,\n } = body;\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n email: cleanEmail,\n status: \"email_verification_required\",\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (auto_logout_minutes !== undefined) {\n const mins = Number.parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ email: email.trim(), success: true });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ email, success: true });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n }\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ keys, success: true });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[],[261],"6672962c-8bfd-4b08-93a5-9a52530e3d17","audio.ts","01a0394d-9f6b-71ee-be0a-ad838d28674c",["D",1787667783545],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierSpeechLimit,\n getWeekData,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface SpeechModelItem {\n created: number;\n description: string;\n id: string;\n name: string;\n voices?: string[];\n}\n\nfunction getOpenRouterApiKey(userCustomKey?: string | null): string {\n if (userCustomKey && userCustomKey.trim().startsWith(\"sk-or-\")) {\n return userCustomKey.trim();\n }\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(\"OPENROUTER_API_KEY\") || \"\";\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env.OPENROUTER_API_KEY || \"\";\n }\n return \"\";\n}\n\n/**\n * Modèles Speech de repli avec voix disponibles\n */\nconst FALLBACK_SPEECH_MODELS = [\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->speech\",\n output_modalities: [\"speech\"],\n },\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle Text-to-Speech (TTS) ultra-rapide et haute fidélité par Deepgram.\",\n id: \"deepgram/flux-tts:free\",\n name: \"Deepgram: Flux TTS\",\n object: \"model\",\n owned_by: \"deepgram\",\n supported_parameters: [\"voice\", \"speed\", \"response_format\"],\n voices: [\n \"flux-alexis-en\",\n \"flux-michael-en\",\n \"flux-stacy-en\",\n \"flux-sam-en\",\n \"flux-asteria-en\",\n \"flux-orion-en\",\n ],\n },\n];\n\nexport function registerAudioRoutes(app: Hono) {\n // ─────────────────────────────────────────────\n // GET /v1/models/speech, /models/speech & /v1/audio/models\n // ─────────────────────────────────────────────\n const handleGetSpeechModels = async (c: any) => {\n try {\n const res = await fetch(\n \"https://openrouter.ai/api/v1/models?output_modalities=speech\",\n );\n\n let rawModels: any[] = [];\n if (res.ok) {\n const json = await res.json();\n rawModels = json.data || [];\n }\n\n if (rawModels.length === 0) {\n rawModels = FALLBACK_SPEECH_MODELS;\n }\n\n // Règle stricte : filtrer par l'ID contenant ':free' quel que soit le forfait\n const freeSpeechModels = rawModels\n .filter((m) =>\n m && m.id && (m.id || \"\").toLowerCase().includes(\":free\")\n )\n .map((m) => ({\n architecture: m.architecture || {\n input_modalities: [\"text\"],\n modality: \"text->speech\",\n output_modalities: [\"speech\"],\n },\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description ||\n `Modèle de synthèse vocale (TTS) ${m.name || m.id}.`,\n id: m.id,\n name: m.name || m.id,\n object: \"model\",\n owned_by: (m.id || \"\").split(\"/\")[0] || \"openrouter\",\n supported_parameters: m.supported_parameters || [\n \"voice\",\n \"speed\",\n \"response_format\",\n ],\n voices: m.voices || [\n \"flux-alexis-en\",\n \"flux-michael-en\",\n \"flux-stacy-en\",\n \"flux-sam-en\",\n ],\n }));\n\n const finalModels = freeSpeechModels.length > 0\n ? freeSpeechModels\n : FALLBACK_SPEECH_MODELS;\n\n return c.json({ data: finalModels, object: \"list\" });\n } catch (_err) {\n return c.json({ data: FALLBACK_SPEECH_MODELS, object: \"list\" });\n }\n };\n\n app.get(\"/v1/models/speech\", handleGetSpeechModels);\n app.get(\"/models/speech\", handleGetSpeechModels);\n app.get(\"/v1/speech/models\", handleGetSpeechModels);\n app.get(\"/speech/models\", handleGetSpeechModels);\n app.get(\"/v1/audio/models\", handleGetSpeechModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/speech/voices & /v1/audio/voices\n // ─────────────────────────────────────────────\n const handleGetSpeechVoices = (c: any) => {\n return c.json({\n data: [\n {\n gender: \"female\",\n id: \"flux-alexis-en\",\n language: \"en\",\n name: \"Alexis\",\n },\n {\n gender: \"male\",\n id: \"flux-michael-en\",\n language: \"en\",\n name: \"Michael\",\n },\n {\n gender: \"female\",\n id: \"flux-stacy-en\",\n language: \"en\",\n name: \"Stacy\",\n },\n { gender: \"male\", id: \"flux-sam-en\", language: \"en\", name: \"Sam\" },\n {\n gender: \"female\",\n id: \"flux-asteria-en\",\n language: \"en\",\n name: \"Asteria\",\n },\n { gender: \"male\", id: \"flux-orion-en\", language: \"en\", name: \"Orion\" },\n ],\n object: \"list\",\n });\n };\n\n app.get(\"/v1/speech/voices\", handleGetSpeechVoices);\n app.get(\"/speech/voices\", handleGetSpeechVoices);\n app.get(\"/v1/audio/voices\", handleGetSpeechVoices);\n\n // ─────────────────────────────────────────────\n // GET /v1/speech/usage, /speech/usage, /v1/audio/usage & /usage/speech\n // ─────────────────────────────────────────────\n const handleGetSpeechUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const [uRows, usageRows] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text LIMIT 1`,\n sql`\n SELECT tokens_used, requests_count \n FROM weekly_speech_usage \n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}::date \n LIMIT 1\n `,\n ]);\n\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const tokensUsed = Number(usageRows[0]?.tokens_used || 0);\n const requestsCount = Number(usageRows[0]?.requests_count || 0);\n const weeklyLimit = getTierSpeechLimit(effectiveTier);\n\n return c.json({\n plan: effectiveTier,\n requestsCount,\n resetAt: nextResetIso,\n tokensUsed,\n userId,\n weekStart: weekStartStr,\n weeklyLimit,\n });\n } catch (err: any) {\n return c.json(\n {\n details: err.message,\n error: \"Erreur lors de la récupération de l'usage Speech.\",\n },\n 500,\n );\n }\n };\n\n app.get(\"/v1/audio/usage\", handleGetSpeechUsage);\n app.get(\"/usage/speech\", handleGetSpeechUsage);\n\n // ─────────────────────────────────────────────\n // POST /v1/speech, /v1/audio/speech, /v1beta/models/*:synthesizeSpeech (OpenAI, Google & Anthropic SDK)\n // ─────────────────────────────────────────────\n const OPENAI_VOICE_MAP: Record<string, string> = {\n alloy: \"flux-alexis-en\",\n echo: \"flux-michael-en\",\n fable: \"flux-orion-en\",\n nova: \"flux-stacy-en\",\n onyx: \"flux-sam-en\",\n shimmer: \"flux-asteria-en\",\n };\n\n const handleAudioSpeech = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : headerApiKey || null;\n\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json(\n { error: \"Non authentifié. Clé API ou token Bearer requis.\" },\n 401,\n );\n }\n\n const body = await c.req.json().catch(() => ({}));\n const reqPath = c.req.path || \"\";\n const isGoogleTts = reqPath.includes(\":synthesizeSpeech\") ||\n reqPath.includes(\":synthesize\") ||\n Boolean(body.audioConfig);\n\n // Extraction du texte / prompt (support OpenAI, Anthropic et Google Cloud TTS / Gemini)\n const rawInput =\n (typeof body.input === \"object\" ? body.input?.text : body.input) ||\n body.text ||\n body.prompt ||\n \"\";\n const input = typeof rawInput === \"string\" ? rawInput.trim() : \"\";\n\n // Extraction du modèle demandé\n const pathModel = reqPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(synthesizeSpeech|synthesize).*$/, \"\");\n const requestedModel = body.model || pathModel ||\n \"deepgram/flux-tts:free\";\n\n // Mapping automatique des modèles OpenAI standards (tts-1, tts-1-hd) vers deepgram/flux-tts:free\n let model = requestedModel;\n if (\n model === \"tts-1\" ||\n model === \"tts-1-hd\" ||\n model === \"speech\" ||\n model.toLowerCase().includes(\"gemini\")\n ) {\n model = \"deepgram/flux-tts:free\";\n }\n\n // Extraction et mapping des voix (support des voix OpenAI alloy, echo, etc.)\n const rawVoice =\n (typeof body.voice === \"object\" ? body.voice?.name : body.voice) ||\n \"flux-alexis-en\";\n let voice = String(rawVoice).trim();\n if (OPENAI_VOICE_MAP[voice.toLowerCase()]) {\n voice = OPENAI_VOICE_MAP[voice.toLowerCase()];\n }\n\n const response_format = body.response_format ||\n (body.audioConfig?.audioEncoding === \"OGG_OPUS\" ? \"opus\" : \"mp3\");\n const speed = body.speed !== undefined\n ? Number(body.speed)\n : body.audioConfig?.speakingRate !== undefined\n ? Number(body.audioConfig.speakingRate)\n : 1.0;\n\n if (!input) {\n return c.json(\n {\n error: {\n code: \"missing_input\",\n message:\n \"Le paramètre 'input' est obligatoire pour la synthèse vocale.\",\n param: \"input\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n // Règle stricte : filtrer par l'ID contenant ':free' quel que soit le forfait\n const modelStr = String(model).toLowerCase().trim();\n if (!modelStr.includes(\":free\")) {\n return c.json(\n {\n error: {\n code: \"speech_model_free_required\",\n message:\n `Pour l'API Speech, seuls les modèles avec ':free' sont autorisés (ex: 'deepgram/flux-tts:free'). Le modèle '${model}' n'est pas autorisé.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const sql = getDb();\n const { weekStartStr, nextResetIso } = getWeekData();\n\n // Vérifier le forfait réel de l'utilisateur\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${userId}::text OR username = ${userId}::text \n LIMIT 1\n `;\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const weeklyLimit = getTierSpeechLimit(effectiveTier);\n\n // Estimation des tokens utilisés (environ 1 token pour ~3.5 caractères, min 1 token)\n const estimatedTokens = Math.max(1, Math.ceil(input.length / 3.5));\n\n // Vérification du quota hebdomadaire\n const usageRows = await sql`\n SELECT tokens_used \n FROM weekly_speech_usage \n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}::date \n LIMIT 1\n `;\n const currentUsage = Number(usageRows[0]?.tokens_used || 0);\n\n if (currentUsage + estimatedTokens > weeklyLimit) {\n return c.json(\n {\n error: {\n code: \"weekly_speech_quota_exceeded\",\n limit: weeklyLimit,\n message:\n `Votre quota hebdomadaire de tokens Speech est épuisé (${currentUsage}/${weeklyLimit} tokens pour le forfait ${effectiveTier}). Prochain renouvellement le ${nextResetIso}.`,\n type: \"quota_error\",\n used: currentUsage,\n },\n },\n 429,\n );\n }\n\n // Récupération de la clé OpenRouter\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const openRouterApiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!openRouterApiKey) {\n return c.json(\n { error: \"Clé fournisseur OpenRouter manquante côté serveur.\" },\n 500,\n );\n }\n\n // Payload minimal et valide pour OpenRouter audio/speech\n // Seuls les champs supportés par l'API sont envoyés\n const validFormats = [\"mp3\", \"opus\", \"aac\", \"flac\", \"wav\", \"pcm\"];\n const safeFormat = validFormats.includes(response_format)\n ? response_format\n : \"mp3\";\n const safeSpeed =\n typeof speed === \"number\" && speed >= 0.25 && speed <= 4.0\n ? speed\n : 1.0;\n\n const openRouterPayload: Record<string, any> = {\n input,\n model,\n voice,\n response_format: safeFormat,\n speed: safeSpeed,\n };\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/audio/speech\",\n {\n body: JSON.stringify(openRouterPayload),\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Speech)\",\n },\n method: \"POST\",\n },\n );\n\n if (!openRouterRes.ok) {\n const errText = await openRouterRes.text().catch(() => \"\");\n console.error(\"[OpenRouter Speech] Erreur retournée:\", errText);\n return c.json(\n {\n details: errText,\n error:\n \"Erreur retournée par le fournisseur OpenRouter pour Speech.\",\n },\n openRouterRes.status,\n );\n }\n\n // Incrémentation atomique du quota hebdomadaire de tokens Speech\n try {\n await sql`\n INSERT INTO weekly_speech_usage (user_id, week_start, tokens_used, requests_count, updated_at)\n VALUES (${userId}::text, ${weekStartStr}::date, ${estimatedTokens}, 1, NOW())\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET \n tokens_used = weekly_speech_usage.tokens_used + ${estimatedTokens},\n requests_count = weekly_speech_usage.requests_count + 1,\n updated_at = NOW()\n `;\n } catch (err) {\n console.error(\"[Speech API] Erreur update weekly_speech_usage:\", err);\n }\n\n // Log dans l'historique mprojects_speech_generations\n try {\n await sql`\n INSERT INTO mprojects_speech_generations (\n user_id, api_key, model, voice, input_text, tokens_count, character_count, status, created_at\n ) VALUES (\n ${userId}::text,\n ${apiKey || null},\n ${model}::text,\n ${voice}::text,\n ${input}::text,\n ${estimatedTokens}::integer,\n ${input.length}::integer,\n 'completed',\n NOW()\n )\n `;\n } catch (_e) {\n // Table optionnelle\n }\n\n // Log dans mprojects_api_logs\n try {\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms, created_at)\n VALUES (${apiKey || \"jwt\"}::text, ${\n reqPath || \"/v1/speech\"\n }::text, 'POST', 200, 500, NOW())\n `;\n } catch (_e) {}\n\n // Si appelé au format Google TTS et que le client attend du JSON avec audioContent en base64\n if (isGoogleTts) {\n const arrayBuf = await openRouterRes.arrayBuffer();\n const bytes = new Uint8Array(arrayBuf);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n const base64Audio = btoa(binary);\n return c.json({\n audioContent: base64Audio,\n });\n }\n\n // Format binaire standard pour OpenAI SDK & navigateurs\n const contentType = openRouterRes.headers.get(\"Content-Type\") ||\n \"audio/mpeg\";\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": contentType,\n \"x-speech-limit\": String(weeklyLimit),\n \"x-speech-used\": String(currentUsage + estimatedTokens),\n \"x-tokens-used\": String(estimatedTokens),\n },\n status: openRouterRes.status,\n });\n } catch (err: any) {\n console.error(\"[Speech API] Erreur serveur:\", err);\n return c.json(\n {\n details: err.message,\n error: \"Erreur serveur lors du traitement Speech.\",\n },\n 500,\n );\n }\n };\n\n // Routes OpenAI & Anthropic SDK\n app.post(\"/v1/speech\", handleAudioSpeech);\n app.post(\"/speech\", handleAudioSpeech);\n app.post(\"/v1/speech/generations\", handleAudioSpeech);\n app.post(\"/v1/audio/speech\", handleAudioSpeech);\n app.post(\"/audio/speech\", handleAudioSpeech);\n\n // Routes Google Cloud TTS / Gemini SDK\n app.post(\"/v1beta/models/*:synthesizeSpeech\", handleAudioSpeech);\n app.post(\"/v1/models/*:synthesizeSpeech\", handleAudioSpeech);\n app.post(\"/v1beta/speech:synthesize\", handleAudioSpeech);\n app.post(\"/v1/speech:synthesize\", handleAudioSpeech);\n}",[],[268],"660d32ee-2fb7-4068-a169-b5a935d2b8d5","api-middleware.ts","01a0394d-9f6b-71ee-be0a-a9f186c496ee",["D",1787667783545],"import type { Hono } from \"npm:hono@4\";\nimport { getDb, TIER_REQUEST_LIMITS, verifyToken } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware global pour Auth, Rate limiting & Logging sur toutes les routes d'API\n app.use(\"*\", async (c, next) => {\n const path = c.req.path;\n\n // Détection des routes d'API\n const isApiRoute = path.startsWith(\"/v1/\") ||\n path.startsWith(\"/v1beta/\") ||\n path === \"/v1/models\" ||\n path === \"/models\" ||\n path.startsWith(\"/models/\") ||\n path === \"/v1beta/models\" ||\n path === \"/chat/completions\" ||\n path.startsWith(\"/chat/\") ||\n path === \"/messages\" ||\n path.startsWith(\"/messages/\") ||\n path === \"/speech\" ||\n path.startsWith(\"/speech/\") ||\n path === \"/images\" ||\n path.startsWith(\"/images/\") ||\n path === \"/images/generations\" ||\n path === \"/audio/speech\" ||\n path.startsWith(\"/audio/\") ||\n path === \"/usage/speech\" ||\n path === \"/usage\" ||\n path === \"/log-usage\" ||\n path === \"/v1/status\" ||\n path === \"/status\";\n\n if (!isApiRoute) {\n await next();\n return;\n }\n\n const isPublicRoute = path === \"/v1/models\" ||\n path === \"/models\" ||\n path === \"/v1beta/models\" ||\n path === \"/v1/models/images\" ||\n path === \"/models/images\" ||\n path === \"/v1/models/speech\" ||\n path === \"/models/speech\" ||\n path === \"/v1/speech/models\" ||\n path === \"/speech/models\" ||\n path === \"/v1/speech/voices\" ||\n path === \"/speech/voices\" ||\n path === \"/v1/audio/models\" ||\n path === \"/v1/audio/voices\" ||\n path === \"/v1/models/mai\" ||\n path === \"/v1/mai/models\" ||\n path === \"/models/mai\" ||\n path === \"/mai/models\" ||\n path === \"/v1/status\" ||\n path === \"/status\" ||\n path === \"/v1/web/search\" ||\n path.startsWith(\"/v1/web/\");\n\n const authHeader = c.req.header(\"Authorization\") ||\n c.req.header(\"authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const queryApiKey = c.req.query(\"api_key\") ||\n c.req.query(\"key\");\n\n let rawApiKey =\n (authHeader?.startsWith(\"Bearer \") ? authHeader.slice(7) : authHeader) ||\n headerApiKey ||\n queryApiKey ||\n null;\n\n if (rawApiKey) {\n rawApiKey = rawApiKey.trim();\n if (\n rawApiKey === \"\" ||\n rawApiKey === \"null\" ||\n rawApiKey === \"undefined\" ||\n rawApiKey === \"Bearer\"\n ) {\n rawApiKey = null;\n }\n }\n\n const apiKey = rawApiKey;\n const reqUserId = c.req.header(\"x-user-id\") || c.req.header(\"X-User-Id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) {\n return false;\n }\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n }\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max) — comparaison constant-time\n if (systemMaiApiKey && apiKey && timingSafeEqual(apiKey, systemMaiApiKey)) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée ou Token JWT\n else if (apiKey) {\n const sql = getDb();\n try {\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text\n LIMIT 1\n `;\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else {\n // Tenter de valider le token comme un JWT de session\n try {\n const payload = await verifyToken(apiKey);\n currentUserId = String(payload.sub || \"\");\n userPlan = String(payload.tier || \"Free\");\n\n // Vérifier dans la table users si le forfait a changé\n if (currentUserId) {\n const uRows = await sql`\n SELECT tier FROM users\n WHERE id::text = ${currentUserId}::text OR username = ${currentUserId}::text OR email = ${currentUserId}::text\n LIMIT 1\n `;\n if (uRows.length > 0 && uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n }\n } catch {\n if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n }\n } catch (dbErr) {\n console.error(\"Auth DB Error in middleware:\", dbErr);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : uniquement si déjà authentifié ou fallback route publique\n if (reqUserId && reqUserId !== \"system-mai\") {\n if (currentUserId) {\n // Déjà authentifié via clé API ou JWT : x-user-id doit correspondre, sinon on l'ignore\n if (reqUserId !== currentUserId) {\n console.warn(\n `[Auth] x-user-id mismatch: header=${reqUserId} vs auth=${currentUserId} — header ignoré`,\n );\n }\n } else if (apiKey) {\n // apiKey présent mais non reconnu (route publique) : ne pas promouvoir via x-user-id seul\n } else {\n // Aucune auth vérifiée\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0) {\n if (uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n if (isPublicRoute) {\n currentUserId = reqUserId;\n } else {\n console.warn(\n `[Auth] x-user-id sans JWT sur route privée ${path} — ignoré`,\n );\n }\n }\n } catch {}\n }\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !currentUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record<string, number> = {\n Free: 500,\n Gratuit: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé (idempotent)\n try {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n } catch {}\n\n // Calculer l'usage global pour l'utilisateur\n try {\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n } catch {}\n }\n\n await next();\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Décompte de 1 crédit API (pour toutes les requêtes avec clé API valide incluant audio, images, web search et chat)\n const isExcludedRoute = path.startsWith(\"/v1/devices\") ||\n path === \"/v1/status\" || path === \"/status\";\n if (!isExcludedRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n `;\n } catch (err) {\n console.error(\"Erreur logging API & mise à jour quota:\", err);\n }\n }\n });\n}",[],[275],["D",1785339526786],["D",1789561254403],{"_11":12,"_129":73},{"_11":12,"_124":125,"_72":73,"_30":71,"_126":127,"_128":24},{"_38":114,"_13":16,"_32":35,"_115":75,"_116":62,"_117":118,"_119":79,"_120":75,"_121":41,"_122":14,"_123":12},"ctx",{"_51":-5,"_149":319,"_320":321,"_322":323,"_324":24,"_325":24,"_326":24,"_327":88,"_328":-5,"_329":-7,"_330":-7,"_331":26,"_332":24,"_333":24,"_334":-5,"_335":24,"_336":24,"_337":24,"_338":-5},"ENV",{"_290":291,"_292":293,"_294":63,"_295":296,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>

History · maiModels.ts