[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_259":260,"_261":262},"routes/_app.x.$handle.$name",{"_100":99,"_32":44,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",66,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","devices.ts","latestPath","fileId","e97247d0-9c6a-11f1-8111-1607ee4eb77e","name","fileType","script","content","import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n id: d.id,\n os: d.os,\n device_model: d.device_model,\n device_version: d.device_version || \"\",\n ip_address: d.ip_address,\n device_name: d.device_name,\n last_active: d.last_active,\n created_at: d.created_at,\n is_current: d.token === token,\n }));\n\n return c.json({ success: true, devices });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n success: true,\n message: \"Tous les autres appareils ont été déconnectés.\",\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n success: true,\n message: \"Tous les appareils ont été déconnectés.\",\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}","createdAt",["D",1787473722591],"branchVersion","branchId","3345cb6c-eeb2-4b61-ab03-8e0abc2dcd73","id","200f8efb-f4ef-4117-ae26-ee737dbffb76","mai",["D",1785339526786],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Avec l'API d'mAI, récupérez des données sur les projets !","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/cdf5d0c3-f220-4dec-712e-87455a037c00/square512?exp=1789549199&sig=3c62b13784bc3d199c8bc7cb8d7605ea4751f60d4fe4d0e40149a5240c3a0705","7ed13655-83c2-4934-a981-01578302df33","pinnedFileId","968028a2-8b63-11f1-b718-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f99eb-d944-7332-99f8-2fbb8b1e7011","tursoName","200f8efbf4ef4117ae26ee737dbffb76","tursoHostname","200f8efbf4ef4117ae26ee737dbffb76-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474235934],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_42":41,"_91":43,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":44,"_98":99},"isOwned",364,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mdevslabs","handle","displayName","mProjects","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789549199&sig=7352c859f7aae34f0d8c2fe9e414b6fa60f4156d174825699aea4c91f0faa822","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":254,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":255,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":256,"_84":257,"_86":258,"_88":25},"tree",[217,218,219,220,221,222,223,224,225],"files",[217,218,219,220,221,222,223,224,225],"counts",{"_205":63,"_206":207,"_208":63,"_209":210,"_211":212},"contents",[131,132,133,134,135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":198,"_32":199,"_30":200,"_143":-5,"_40":41,"_39":201,"_145":25,"_37":202,"_13":178,"_33":34,"_35":203,"_24":25,"_149":-5,"_27":204},{"_42":191,"_32":192,"_30":193,"_143":-5,"_40":41,"_39":194,"_145":25,"_37":195,"_13":178,"_33":34,"_35":196,"_24":25,"_149":-5,"_27":197},{"_42":184,"_32":185,"_30":186,"_143":-5,"_40":41,"_39":187,"_145":25,"_37":188,"_13":147,"_33":34,"_35":189,"_24":25,"_149":-5,"_27":190},{"_42":181,"_32":28,"_30":31,"_143":-5,"_40":41,"_39":14,"_145":25,"_37":182,"_13":178,"_33":34,"_35":36,"_24":25,"_149":-5,"_27":183},{"_42":173,"_32":174,"_30":175,"_143":-5,"_40":41,"_39":176,"_145":25,"_37":177,"_13":178,"_33":34,"_35":179,"_24":25,"_149":-5,"_27":180},{"_42":165,"_32":166,"_30":57,"_143":-5,"_40":41,"_39":167,"_145":25,"_37":168,"_13":169,"_33":170,"_35":171,"_24":25,"_149":44,"_27":172},{"_42":158,"_32":159,"_30":160,"_143":-5,"_40":41,"_39":161,"_145":25,"_37":162,"_13":147,"_33":34,"_35":163,"_24":25,"_149":-5,"_27":164},{"_42":151,"_32":152,"_30":153,"_143":-5,"_40":41,"_39":154,"_145":25,"_37":155,"_13":147,"_33":34,"_35":156,"_24":25,"_149":-5,"_27":157},{"_42":140,"_32":141,"_30":142,"_143":-5,"_40":41,"_39":144,"_145":25,"_37":146,"_13":147,"_33":34,"_35":148,"_24":25,"_149":-5,"_27":150},"edcb1de7-e299-4a60-b456-fba09fadafa8","storage.ts","e973306e-9c6a-11f1-8111-1607ee4eb77e","parentId",62,"latest",["D",1787244176917],1,"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n STORAGE_LIMITS_BYTES,\n verifyToken,\n} from \"./config.ts\";\n\n// Helper : retourne le client S3/R2 (réutilise les variables S3_* existantes)\nexport async function buildR2Client() {\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n}\n\nexport function getR2Endpoint(): string {\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n return endpoint.endsWith(\"/\") ? endpoint.slice(0, -1) : endpoint;\n}\n\nexport function getR2Bucket(): string {\n return Deno.env.get(\"S3_BUCKET\") || \"\";\n}\n\nexport function getR2PublicBase(): string {\n const pub = Deno.env.get(\"S3_PUBLIC_URL\");\n if (pub) return pub.endsWith(\"/\") ? pub.slice(0, -1) : pub;\n return `${getR2Endpoint()}/${getR2Bucket()}`;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar\n app.post(\"/upload-avatar\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const ext = file.name.split(\".\").pop();\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type,\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload de l'image.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${userId}`;\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n });\n\n // POST /upload-file\n app.post(\"/upload-file\", async (c) => {\n try {\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload vers S3.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n });\n\n // GET /cloud/storage — Consommation actuelle de stockage\n app.get(\"/cloud/storage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used, files_count FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n app.get(\"/cloud/files\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE user_id = ${userId}::text\n ORDER BY uploaded_at DESC\n LIMIT 200\n `;\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /cloud/upload — Upload d'un fichier vers R2 + mise à jour quota\n app.post(\"/cloud/upload\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n\n if (bytesUsed + fileSize > bytesLimit) {\n const limitMB = Math.round(bytesLimit / (1024 * 1024));\n const usedMB = Math.round(bytesUsed / (1024 * 1024));\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error:\n `Quota de stockage dépassé. Vous utilisez ${usedMB} MB sur ${limitMB} MB (tier ${tier}).`,\n over_limit: true,\n }, 413);\n }\n\n // Générer une clé R2 unique\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"bin\";\n const uniqueId = crypto.randomUUID();\n const r2Key = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Uploader vers R2\n const r2Client = await buildR2Client();\n const uploadUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2Key}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await r2Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: { \"Content-Type\": file.type || \"application/octet-stream\" },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n const errText = await uploadRes.text();\n console.error(\"R2 Upload Error:\", errText);\n return c.json({ error: \"Erreur lors de l'upload vers R2.\" }, 500);\n }\n\n const publicUrl = `${getR2PublicBase()}/${r2Key}`;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${r2Key}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10000) / 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n });\n\n // DELETE /cloud/files/:id — Suppression définitive d'un fichier\n app.delete(\"/cloud/files/:id\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, size_bytes } = fileRes[0];\n\n // Supprimer de R2\n const r2Client = await buildR2Client();\n const deleteUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2_key}`;\n try {\n await r2Client.fetch(deleteUrl, { method: \"DELETE\" });\n } catch (r2Err) {\n console.error(\"R2 Delete Error (continuing anyway):\", r2Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n });\n}","label",[141],"8fa80761-f40b-45a4-b3c9-ea1db85d4871","projects.ts","e972f7ac-9c6a-11f1-8111-1607ee4eb77e",61,["D",1787244169695],"import type { Hono } from \"npm:hono@4\";\nimport { getDb } from \"./config.ts\";\n\nexport const STATIC_PROJECTS_LIST = [\n {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n features: [\"Chat Web\", \"Interface fluide\", \"Streaming en direct\"],\n id: \"proj_web\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n features: [\"Extension navigateur\", \"Extension VS Code\", \"Accès contextuel\"],\n id: \"proj_pulse\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n features: [\n \"Terminal interactif\",\n \"Génération de code\",\n \"Workflows développeur\",\n ],\n id: \"proj_cli\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n version: \"0.5.0\",\n },\n {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n features: [\n \"Génération de documents\",\n \"Présentations interactives\",\n \"Export multi-format\",\n ],\n id: \"proj_office\",\n is_public: true,\n label: \"Bêta\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"beta\",\n version: \"0.1.0\",\n },\n {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n features: [\n \"Stockage sécurisé\",\n \"Résumés automatiques\",\n \"Indexation de documents\",\n ],\n id: \"proj_cloud\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description:\n \"Moteur de recherche sémantique et d'indexation vectorielle ultra-rapide.\",\n features: [\"Indexation hybride\", \"Recherche locale\"],\n id: \"proj_msearch\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n version: \"1.0.3\",\n },\n {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage intelligent d'API et modèles LLM.\",\n features: [\"Load balancing\", \"Multi-fournisseurs\"],\n id: \"proj_openprovider\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n version: \"0.5.0\",\n },\n {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast\",\n features: [\"Video game\", \"Assembler\"],\n id: \"proj_snob\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n version: \"1.0.1\",\n },\n {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n features: [\"Chat Completions\", \"Embeddings\"],\n id: \"proj_mai_legacy\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n version: \"2.4.0\",\n },\n];\n\nexport const STATIC_PROJECTS_MAP: Record = {\n web: {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n },\n pulse: {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n },\n cli: {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n },\n office: {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"beta\",\n },\n cloud: {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n },\n mai: {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n },\n maicli: {\n category: \"CLI Tool\",\n created_at: \"2026-02-10T00:00:00.000Z\",\n description:\n \"Interface en ligne de commande professionnelle pour l'écosystème mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI CLI (Legacy)\",\n project_id: \"maicli\",\n repository: \"https://github.com/mDevsLabs/mAI-CLI\",\n status: \"archived\",\n },\n msearch: {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description: \"Moteur de recherche sémantique et d'indexation vectorielle.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n },\n openprovider: {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage d'API et modèles LLM.\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n },\n snob: {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n },\n};\n\nexport function registerProjectRoutes(app: Hono) {\n // GET /v1/projects\n app.get(\"/v1/projects\", async (c) => {\n try {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const dbProjects =\n await sql`SELECT * FROM mprojects_projects WHERE user_id = ${userId} ORDER BY created_at DESC LIMIT 50`;\n return c.json({\n data: [...STATIC_PROJECTS_LIST, ...dbProjects],\n object: \"list\",\n });\n } catch (_err) {\n return c.json({ data: STATIC_PROJECTS_LIST, object: \"list\" });\n }\n });\n\n // POST /v1/projects\n app.post(\"/v1/projects\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const body = await c.req.json();\n if (!body.name) {\n return c.json({ error: \"Le nom du projet est obligatoire.\" }, 400);\n }\n\n const projectId = \"proj-\" + Math.random().toString(36).substr(2, 9);\n\n await sql`\n INSERT INTO mprojects_projects (user_id, project_id, name, description, is_public)\n VALUES (${userId}, ${projectId}, ${body.name}, ${\n body.description || \"\"\n }, ${body.isPublic || false})\n `;\n\n return c.json({ name: body.name, project_id: projectId, success: true });\n });\n\n // GET /v1/projects/:id\n app.get(\"/v1/projects/:id\", async (c) => {\n const projectId = c.req.param(\"id\").toLowerCase();\n\n if (STATIC_PROJECTS_MAP[projectId]) {\n return c.json({ project: STATIC_PROJECTS_MAP[projectId] });\n }\n\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projects = await sql`\n SELECT * FROM mprojects_projects \n WHERE (user_id = ${userId} OR is_public = TRUE) AND LOWER(project_id) = ${projectId} \n LIMIT 1\n `;\n\n if (projects.length === 0) {\n return c.json({ error: \"Project not found\" }, 404);\n }\n\n return c.json({ project: projects[0] });\n });\n\n // PUT /v1/projects/:id\n app.put(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n const body = await c.req.json();\n\n const existing =\n await sql`SELECT id FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Projet non trouvé ou non autorisé.\" }, 404);\n }\n\n const name = body.name;\n const description = body.description;\n const isPublic = body.isPublic;\n\n await sql`\n UPDATE mprojects_projects\n SET name = COALESCE(${name}, name),\n description = COALESCE(${description}, description),\n is_public = COALESCE(${isPublic}, is_public),\n updated_at = NOW()\n WHERE user_id = ${userId} AND project_id = ${projectId}\n `;\n\n return c.json({\n message: \"Projet mis à jour.\",\n project_id: projectId,\n success: true,\n });\n });\n\n // DELETE /v1/projects/:id\n app.delete(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const result = await sql`\n DELETE FROM mprojects_projects \n WHERE user_id = ${userId} AND project_id = ${projectId}\n RETURNING id\n `;\n\n if (result.length === 0) {\n return c.json({ error: \"Projet non trouvé ou déjà supprimé.\" }, 404);\n }\n\n return c.json({ message: \"Projet supprimé avec succès.\", success: true });\n });\n\n // GET /v1/projects/:id/stats\n app.get(\"/v1/projects/:id/stats\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const projects =\n await sql`SELECT id, name, created_at FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (projects.length === 0) {\n return c.json({ error: \"Projet non trouvé.\" }, 404);\n }\n\n return c.json({\n active_deployments: 1,\n name: projects[0].name,\n project_id: projectId,\n requests_count: Math.floor(Math.random() * 500) + 12,\n status: \"healthy\",\n uptime_percentage: 99.98,\n });\n });\n}",[152],"15ea62cc-c08a-492e-85e2-dca7c20a3c27","models.ts","e972ab30-9c6a-11f1-8111-1607ee4eb77e",54,["D",1787244064625],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n TIER_LIMITS,\n verifyToken,\n} from \"./config.ts\";\n\nexport function registerModelRoutes(app: Hono) {\n // GET /usage\n app.get(\"/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const sql = getDb();\n const [usageResult, userResult] = await Promise.all([\n sql`SELECT tokens_used FROM weekly_usage WHERE user_id = ${userId} AND week_start = ${weekStartStr}`,\n sql`SELECT tier, email, username, phone, avatar_url FROM users WHERE id = ${userId} LIMIT 1`,\n ]);\n\n const user = userResult[0];\n const tokensUsed = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[user?.tier] || TIER_LIMITS[\"Free\"];\n\n return c.json({\n avatarUrl: user?.avatar_url,\n email: user?.email,\n limit,\n phone: user?.phone,\n resetAt: nextResetIso,\n tier: user?.tier || \"Free\",\n tokensUsed,\n username: user?.username,\n weekStart: weekStartStr,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /log-usage\n app.post(\"/log-usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { tokensUsed = 0 } = await c.req.json();\n const { weekStartStr } = getWeekData();\n\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage + tokensUsed > limit) {\n return c.json(\n { error: \"Limite atteinte.\", limit, used: currentUsage },\n 429,\n );\n }\n\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}, ${tokensUsed})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokensUsed}\n `;\n\n return c.json({\n limit,\n success: true,\n weeklyUsed: currentUsage + tokensUsed,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // PROXY : CHAT COMPLETIONS (CLI)\n app.post(\"/chat/completions\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n // Vérification des limites avant d'autoriser la requête\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage >= limit) {\n return c.json({ error: \"Votre limite hebdomadaire est épuisée.\" }, 429);\n }\n\n // Le corps de la requête du CLI\n const body = await c.req.json();\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n // Redirection de la requête vers OpenRouter\n const response = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI CLI\",\n },\n method: \"POST\",\n },\n );\n\n // Retourne le stream ou la réponse directement au CLI\n return new Response(response.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": response.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: response.status,\n });\n } catch {\n return c.json({ error: \"Erreur serveur proxy.\" }, 500);\n }\n });\n\n // GET /v1/models\n app.get(\"/v1/models\", async (c) => {\n const userPlan = c.get(\"userPlan\");\n const apiKey = c.get(\"apiKey\");\n const planStr = String(userPlan || \"Free\").toLowerCase().trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const shouldFilterFreeOnly = !isPaidPlan || !apiKey;\n\n try {\n const res = await fetch(\"https://openrouter.ai/api/v1/models\");\n if (!res.ok) {\n throw new Error(\"OpenRouter fetch error\");\n }\n const json = await res.json();\n const rawModels: any[] = json.data || [];\n\n let filtered = rawModels\n .filter((m) => m && m.id && !m.id.startsWith(\"openrouter/\"))\n .filter((m) => {\n const modality = m.architecture?.modality || \"\";\n const outputModalities = m.architecture?.output_modalities || [];\n return (\n outputModalities.includes(\"text\") ||\n modality.endsWith(\"text\") ||\n modality.includes(\"->text\")\n );\n })\n .map((m) => ({\n created: m.created || Math.floor(Date.now() / 1000),\n id: m.id,\n maxContext: m.context_length || 128_000,\n maxOutput: m.top_provider?.max_completion_tokens || 4096,\n object: \"model\",\n owned_by: m.id.split(\"/\")[0] || \"openrouter\",\n }));\n\n if (shouldFilterFreeOnly) {\n filtered = filtered.filter((m) => m.id.toLowerCase().includes(\"free\"));\n }\n\n return c.json({ data: filtered, object: \"list\" });\n } catch (_err) {\n let fallback = [\n {\n created: 0,\n id: \"google/gemini-2.5-flash:free\",\n object: \"model\",\n owned_by: \"google\",\n },\n {\n created: 0,\n id: \"meta-llama/llama-3.3-70b-instruct:free\",\n object: \"model\",\n owned_by: \"meta-llama\",\n },\n {\n created: 0,\n id: \"qwen/qwen-2.5-coder-32b-instruct:free\",\n object: \"model\",\n owned_by: \"qwen\",\n },\n {\n created: 0,\n id: \"deepseek/deepseek-r1:free\",\n object: \"model\",\n owned_by: \"deepseek\",\n },\n ];\n\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) => m.id.toLowerCase().includes(\"free\"));\n }\n\n return c.json({ data: fallback, object: \"list\" });\n }\n });\n\n // GET /v1/mai/models\n app.get(\"/v1/mai/models\", async (c) => {\n const maiModelsList = [\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Light\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Apex\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n {\n created: Math.floor(Date.now() / 1000),\n id: \"mDevsLabs/mAI-1.2-Opal\",\n object: \"model\",\n owned_by: \"mDevsLabs\",\n },\n ];\n return c.json({ data: maiModelsList, object: \"list\" });\n });\n\n // GET /v1/status\n app.get(\"/v1/status\", async (c) => {\n try {\n const res = await fetch(\"https://mai.instatus.com/summary.json\");\n const data = await res.json();\n return c.json(data);\n } catch {\n return c.json({ error: \"Failed to fetch status\" }, 500);\n }\n });\n\n // POST /v1/chat/completions\n app.post(\"/v1/chat/completions\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n\n const modelStr = String(modelRequested || \"\").toLowerCase();\n const isFreeModel = modelStr.includes(\"free\");\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles contenant 'free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process chat completion.\" }, 500);\n }\n });\n\n // POST /v1/messages (Proxy Anthropic SDK)\n app.post(\"/v1/messages\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Anthropic request.\" }, 500);\n }\n });\n\n // POST /v1beta/models/:model:generateContent (Proxy Google SDK)\n app.post(\"/v1beta/models/:model:generateContent\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json().catch(() => ({}));\n const modelRequested = c.req.param(\"model\");\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (e) {}\n\n // Google payload is different, we send it to OpenRouter's endpoint.\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Google request.\" }, 500);\n }\n });\n}",[159],"51c4897d-4cf2-43e0-8773-7c29622d32f3","main.ts",58,["D",1787244122485],38,"http","/**\n * mAI — Val Town HTTP Proxy & Auth Backend\n * URL : https://mai.val.run/\n */\n\nimport { cors } from \"npm:hono/cors\";\nimport { Hono } from \"npm:hono@4\";\nimport { registerAuthRoutes } from \"./auth.ts\";\nimport { initSQLite } from \"./config.ts\";\nimport { registerDeviceRoutes } from \"./devices.ts\";\nimport { registerMiddleware } from \"./api-middleware.ts\";\nimport { registerModelRoutes } from \"./models.ts\";\nimport { registerProjectRoutes } from \"./projects.ts\";\nimport { registerStorageRoutes } from \"./storage.ts\";\n\n// ─────────────────────────────────────────────\n// Init DB SQLite en background\n// ─────────────────────────────────────────────\ninitSQLite().catch(console.error);\n\n// ─────────────────────────────────────────────\n// App Hono\n// ─────────────────────────────────────────────\nconst app = new Hono();\n\napp.use(\n \"*\",\n cors({\n allowHeaders: [\n \"Content-Type\",\n \"Authorization\",\n \"x-user-id\",\n \"x-api-key\",\n \"X-User-Id\",\n \"X-API-Key\",\n \"*\",\n ],\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n exposeHeaders: [\"Content-Type\", \"Authorization\", \"x-user-id\"],\n maxAge: 86_400,\n origin: \"*\",\n }),\n);\n\n// ─────────────────────────────────────────────\n// ROUTE PAR DÉFAUT (Pour éviter le 404 en preview)\n// ─────────────────────────────────────────────\napp.get(\"/\", (c) => c.text(\"mAI\"));\n\n// ─────────────────────────────────────────────\n// Middleware & Routes modulaires\n// ─────────────────────────────────────────────\nregisterMiddleware(app);\nregisterAuthRoutes(app);\nregisterStorageRoutes(app);\nregisterModelRoutes(app);\nregisterProjectRoutes(app);\nregisterDeviceRoutes(app);\n\nexport default app.fetch;",[166],"79f78125-ce7b-4e89-bd5d-a5a321a12832","email.ts","e9725edc-9c6a-11f1-8111-1607ee4eb77e",63,["D",1787327659028],2,"import nodemailer from \"npm:nodemailer\";\n\nexport async function sendVerificationEmail(\n email: string,\n code: string,\n action: string,\n extraInfo?: any,\n) {\n console.log(\n `🔑 [CODE/ALERT] (${action}) pour ${email} : ${code || \"Aucun (Alerte)\"}`,\n );\n\n let subject = \"Notification - mAI\";\n let title = \"Notification\";\n let textContent = \"\";\n let showCode = !code ? false : true;\n\n switch (action) {\n case \"register\":\n subject = \"Vérifiez votre adresse e-mail - mAI\";\n title = \"Vérification d'inscription\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"login\":\n subject = \"Code de vérification de connexion - mAI\";\n title = \"Vérification de connexion\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"verify_new_email\":\n subject = \"Vérification de votre nouvelle adresse e-mail - mAI\";\n title = \"Changement d'e-mail\";\n textContent =\n \"Voici le code de vérification pour confirmer votre nouvelle adresse e-mail :\";\n break;\n case \"delete_account\":\n subject = \"Code de suppression de compte - mAI\";\n title = \"Suppression du compte\";\n textContent =\n \"Vous avez demandé la suppression de votre compte. Voici votre code à 8 chiffres :\";\n break;\n case \"new_login\":\n subject = \"Nouvelle connexion détectée - mAI\";\n title = \"Alerte de sécurité\";\n showCode = false;\n const device = extraInfo?.device || \"Appareil inconnu\";\n const location = extraInfo?.location || \"Lieu inconnu\";\n textContent =\n `Une nouvelle connexion à votre compte mAI a été détectée depuis :

\n Appareil : ${device}
\n Localisation : ${location}

\n Si vous êtes à l'origine de cette connexion, aucune action n'est requise. Sinon, modifiez immédiatement votre mot de passe et déconnectez cet appareil.`;\n break;\n }\n\n const html = `\n \n \n \n \n \n \n \n

\n \n \n

\n $\"mAI$ \n

${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${code}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n `;\n\n // 1. Gmail SMTP via Nodemailer\n const rawGmailUser = Deno.env.get(\"GMAIL_USER\") ||\n \"tusseaumathias85@gmail.com\";\n const gmailUser = rawGmailUser.trim();\n const rawGmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n // Nettoyer les espaces souvent présents dans les mots de passe d'application Google\n const gmailAppPass = rawGmailAppPass\n ? rawGmailAppPass.replace(/\\s+/g, \"\").trim()\n : \"\";\n\n let emailSent = false;\n\n if (gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n host: \"smtp.gmail.com\",\n port: 465,\n secure: true,\n auth: {\n user: gmailUser,\n pass: gmailAppPass,\n },\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n to: email,\n subject,\n html,\n });\n\n console.log(`✉️ [Gmail SMTP] E-mail envoyé avec succès à ${email}`);\n emailSent = true;\n return;\n } catch (err: any) {\n console.error(\"❌ [Gmail SMTP] Erreur d'envoi :\", err?.message || err);\n }\n } else {\n console.warn(\n \"⚠️ [Gmail SMTP] GMAIL_APP_PASSWORD non défini dans les variables d'environnement.\",\n );\n }\n\n // 2. Resend Fallback\n const resendKey = Deno.env.get(\"RESEND_API_KEY\");\n if (resendKey && !emailSent) {\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${resendKey.trim()}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n from: \"mAI \",\n to: email,\n subject,\n html,\n }),\n });\n\n if (res.ok) {\n console.log(`✉️ [Resend] E-mail envoyé avec succès à ${email}`);\n emailSent = true;\n return;\n } else {\n const errBody = await res.text();\n console.error(\"❌ [Resend] Erreur API :\", res.status, errBody);\n }\n } catch (e: any) {\n console.error(\"❌ [Resend] Erreur fetch :\", e?.message || e);\n }\n } else if (!resendKey && !emailSent) {\n console.warn(\n \"⚠️ [Resend] RESEND_API_KEY non défini dans les variables d'environnement.\",\n );\n }\n\n if (!emailSent) {\n console.error(\n `🚨 [ALERTE EMAIL] Échec total de l'envoi d'e-mail pour ${email} (Code: ${code}). Vérifiez les secrets Val Town !`,\n );\n }\n}",[174],"26d7c155-b627-4899-ae7c-94f2f5caec97",["D",1787473722591],[28],"f602c1c0-ddd0-4b17-bf59-6cb94512ef23","config.ts","e9721ca6-9c6a-11f1-8111-1607ee4eb77e",65,["D",1787473714392],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"14d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// Limites de tokens hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record = {\n Free: 2_000_000,\n Max: 20_000_000,\n Plus: 5_000_000,\n Pro: 10_000_000,\n};\n\nexport const TIER_REQUEST_LIMITS: Record = {\n Free: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n};\n\n// Limites de stockage Cloud par tier (en bytes)\nexport const STORAGE_LIMITS_BYTES: Record = {\n Free: 500 * 1024 * 1024, // 500 MB\n Max: 100 * 1024 * 1024 * 1024, // 100 GB\n Plus: 5 * 1024 * 1024 * 1024, // 5 GB\n Pro: 20 * 1024 * 1024 * 1024, // 20 GB\n};\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret = Deno.env.get(\"MAI_JWT_SECRET\");\n if (!secret) {\n throw new Error(\"MAI_JWT_SECRET not set\");\n }\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record,\n): Promise {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise> {\n const result = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (result.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record;\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") || uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n os,\n device_model: model,\n device_version: fullVersion,\n device_name: deviceName,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = Math.pow(10, length - 1);\n const max = Math.pow(10, length) - 1;\n const code = Math.floor(min + Math.random() * (max - min)).toString();\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[185],"d9a40d0f-18c1-4d55-b469-91b4d4b75739","auth.ts","e9719b14-9c6a-11f1-8111-1607ee4eb77e",64,["D",1787473704291],"import type { Hono } from \"npm:hono@4\";\nimport bcrypt from \"npm:bcryptjs\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || c.req.header(\"x-real-ip\") || \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const geoRes = await fetch(`http://ip-api.com/json/${ip}`);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some((d) =>\n d.device_name === device_name\n );\n const knownLocation = pastDevices.some((d) =>\n d.location && d.location.includes(countryStr)\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 && Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(\n `[Verify-Code] Code inconnu ou invalide soumis: \"${inputCode}\"`,\n );\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n } = await c.req.json();\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n status: \"email_verification_required\",\n email: cleanEmail,\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n const { auto_logout_minutes } = await c.req.json();\n if (auto_logout_minutes !== undefined) {\n const mins = parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) return c.json({ error: \"Champs manquants.\" }, 400);\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ success: true, email: email.trim() });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ success: true, email });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ success: true, keys });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[192],"abbd11ed-9040-4149-8f5f-db5cb5be8c4c","api-middleware.ts","e972842a-9c6a-11f1-8111-1607ee4eb77e",60,["D",1787244148436],"import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { jwtVerify } from \"npm:jose\";\nimport { getDb, getJwtSecret, TIER_REQUEST_LIMITS } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware /v1/* pour Auth & Logging\n app.use(\"/v1/*\", async (c, next) => {\n const path = c.req.path;\n const isPublicRoute = path === \"/v1/models\" || path === \"/v1/mai/models\" ||\n path === \"/v1/status\";\n\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n const reqUserId = c.req.header(\"x-user-id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max)\n if (systemMaiApiKey && apiKey === systemMaiApiKey) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée\n else if (apiKey) {\n const sql = getDb();\n const prefixCandidate = apiKey.substring(0, 11);\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text \n OR k.api_key = ${prefixCandidate}::text\n OR ${apiKey}::text LIKE (k.api_key || '%')\n OR k.api_key LIKE (${prefixCandidate} || '%')\n LIMIT 1\n `;\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else {\n // Tenter de valider comme jeton JWT de session (pour l'application Web mAI)\n try {\n const blacklisted = await sqlite.execute({\n args: [apiKey],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (blacklisted.rows.length > 0) {\n return c.json({ error: \"Token révoqué.\" }, 401);\n }\n const { payload } = await jwtVerify(apiKey, getJwtSecret());\n currentUserId = String(payload.sub);\n userPlan = String(payload.tier || \"Free\");\n } catch (_jwtErr) {\n if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : prévaut pour le forfait du compte\n if (reqUserId && reqUserId !== \"system-mai\") {\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0 && uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n currentUserId = reqUserId;\n } catch (_err) {}\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !reqUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record = {\n Free: 500,\n Gratuit: 500,\n Plus: 1000,\n Pro: 2000,\n Max: 5000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n\n // Calculer l'usage global pour l'utilisateur\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n }\n\n await next();\n\n if (isPublicRoute) {\n return; // Ne pas logger les requêtes vers les routes publiques\n }\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Mise à jour quota (uniquement pour les clés API utilisateur réelles)\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n if (!isJwtRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n const prefixCandidate = apiKey.substring(0, 11);\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n OR api_key = ${apiKey}::text\n OR api_key = ${prefixCandidate}::text\n OR ${apiKey}::text LIKE (api_key || '%')\n OR api_key LIKE (${prefixCandidate} || '%')\n `;\n } catch (err) {\n console.error(\"Erreur logging API:\", err);\n }\n }\n });\n}",[199],"pulls","branches",11,"forks","envVars",{"_213":215,"_216":63},"connections",{"_213":147,"_214":63},"count","unfilledCount",117,"emptyCount",{"_42":198,"_32":199,"_30":200,"_143":-5,"_40":41,"_39":201,"_145":25,"_37":251,"_13":178,"_33":34,"_35":203,"_24":25,"_149":-5,"_227":252,"_27":253},{"_42":191,"_32":192,"_30":193,"_143":-5,"_40":41,"_39":194,"_145":25,"_37":248,"_13":178,"_33":34,"_35":196,"_24":25,"_149":-5,"_227":249,"_27":250},{"_42":184,"_32":185,"_30":186,"_143":-5,"_40":41,"_39":187,"_145":25,"_37":245,"_13":147,"_33":34,"_35":189,"_24":25,"_149":-5,"_227":246,"_27":247},{"_42":181,"_32":28,"_30":31,"_143":-5,"_40":41,"_39":14,"_145":25,"_37":242,"_13":178,"_33":34,"_35":36,"_24":25,"_149":-5,"_227":243,"_27":244},{"_42":173,"_32":174,"_30":175,"_143":-5,"_40":41,"_39":176,"_145":25,"_37":239,"_13":178,"_33":34,"_35":179,"_24":25,"_149":-5,"_227":240,"_27":241},{"_42":165,"_32":166,"_30":57,"_143":-5,"_40":41,"_39":167,"_145":25,"_37":236,"_13":169,"_33":170,"_35":171,"_24":25,"_149":44,"_227":237,"_27":238},{"_42":158,"_32":159,"_30":160,"_143":-5,"_40":41,"_39":161,"_145":25,"_37":233,"_13":147,"_33":34,"_35":163,"_24":25,"_149":-5,"_227":234,"_27":235},{"_42":151,"_32":152,"_30":153,"_143":-5,"_40":41,"_39":154,"_145":25,"_37":230,"_13":147,"_33":34,"_35":156,"_24":25,"_149":-5,"_227":231,"_27":232},{"_42":140,"_32":141,"_30":142,"_143":-5,"_40":41,"_39":144,"_145":25,"_37":226,"_13":147,"_33":34,"_35":148,"_24":25,"_149":-5,"_227":228,"_27":229},["D",1787244176917],"children",[],[141],["D",1787244169695],[],[152],["D",1787244064625],[],[159],["D",1787244122485],[],[166],["D",1787327659028],[],[174],["D",1787473722591],[],[28],["D",1787473714392],[],[185],["D",1787473704291],[],[192],["D",1787244148436],[],[199],["D",1785339526786],["D",1789474235934],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_42":41,"_91":43,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":44,"_98":99},"ctx",{"_82":-5,"_128":292,"_293":294,"_295":296,"_297":25,"_298":25,"_299":25,"_300":59,"_301":-5,"_302":-7,"_303":-7,"_304":63,"_305":25,"_306":25,"_307":-5,"_308":25,"_309":25,"_310":25,"_311":-5},"ENV",{"_263":264,"_265":266,"_267":90,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v66