[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_262":263,"_264":265},"routes/_app.x.$handle.$name",{"_101":100,"_32":45,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",78,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","storage.ts","latestPath","fileId","e973306e-9c6a-11f1-8111-1607ee4eb77e","name","fileType","script","content","import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n STORAGE_LIMITS_BYTES,\n verifyToken,\n} from \"./config.ts\";\n\n// Helper : retourne le client S3/R2 (réutilise les variables S3_* existantes)\nexport async function buildR2Client() {\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n}\n\nexport function getR2Endpoint(): string {\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n return endpoint.endsWith(\"/\") ? endpoint.slice(0, -1) : endpoint;\n}\n\nexport function getR2Bucket(): string {\n return Deno.env.get(\"S3_BUCKET\") || \"\";\n}\n\nexport function getR2PublicBase(): string {\n const pub = Deno.env.get(\"S3_PUBLIC_URL\");\n if (pub) return pub.endsWith(\"/\") ? pub.slice(0, -1) : pub;\n return `${getR2Endpoint()}/${getR2Bucket()}`;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar\n app.post(\"/upload-avatar\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const ext = file.name.split(\".\").pop();\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type,\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload de l'image.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${userId}`;\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n });\n\n // POST /upload-file\n app.post(\"/upload-file\", async (c) => {\n try {\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload vers S3.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n });\n\n // GET /cloud/storage — Consommation actuelle de stockage\n app.get(\"/cloud/storage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used, files_count FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n app.get(\"/cloud/files\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE user_id = ${userId}::text\n ORDER BY uploaded_at DESC\n LIMIT 200\n `;\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /cloud/upload — Upload d'un fichier vers R2 + mise à jour quota\n app.post(\"/cloud/upload\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n\n if (bytesUsed + fileSize > bytesLimit) {\n const limitMB = Math.round(bytesLimit / (1024 * 1024));\n const usedMB = Math.round(bytesUsed / (1024 * 1024));\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error:\n `Quota de stockage dépassé. Vous utilisez ${usedMB} MB sur ${limitMB} MB (tier ${tier}).`,\n over_limit: true,\n }, 413);\n }\n\n // Générer une clé R2 unique\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"bin\";\n const uniqueId = crypto.randomUUID();\n const r2Key = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Uploader vers R2\n const r2Client = await buildR2Client();\n const uploadUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2Key}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await r2Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: { \"Content-Type\": file.type || \"application/octet-stream\" },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n const errText = await uploadRes.text();\n console.error(\"R2 Upload Error:\", errText);\n return c.json({ error: \"Erreur lors de l'upload vers R2.\" }, 500);\n }\n\n const publicUrl = `${getR2PublicBase()}/${r2Key}`;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${r2Key}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10000) / 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n });\n\n // DELETE /cloud/files/:id — Suppression définitive d'un fichier\n app.delete(\"/cloud/files/:id\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, size_bytes } = fileRes[0];\n\n // Supprimer de R2\n const r2Client = await buildR2Client();\n const deleteUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2_key}`;\n try {\n await r2Client.fetch(deleteUrl, { method: \"DELETE\" });\n } catch (r2Err) {\n console.error(\"R2 Delete Error (continuing anyway):\", r2Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n });\n}","import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n STORAGE_LIMITS_BYTES,\n verifyToken,\n} from \"./config.ts\";\n\n// Helper : retourne le client S3/R2 (réutilise les variables S3_* existantes)\nexport async function buildR2Client() {\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n}\n\nexport function getR2Endpoint(): string {\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n return endpoint.endsWith(\"/\") ? endpoint.slice(0, -1) : endpoint;\n}\n\nexport function getR2Bucket(): string {\n return Deno.env.get(\"S3_BUCKET\") || \"\";\n}\n\nexport function getR2PublicBase(): string {\n const pub = Deno.env.get(\"S3_PUBLIC_URL\");\n if (pub) return pub.endsWith(\"/\") ? pub.slice(0, -1) : pub;\n return `${getR2Endpoint()}/${getR2Bucket()}`;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar\n app.post(\"/upload-avatar\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const ext = file.name.split(\".\").pop();\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type,\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload de l'image.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${userId}`;\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n });\n\n // POST /upload-file — protégé par JWT (critique: sans auth = R2 spam)\n app.post(\"/upload-file\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n try {\n await verifyToken(token);\n } catch {\n return c.json({ error: \"Token invalide ou expiré.\" }, 401);\n }\n\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const { AwsClient } = await import(\"npm:aws4fetch\");\n\n const s3Client = new AwsClient({\n accessKeyId: Deno.env.get(\"S3_ACCESS_KEY_ID\") || \"\",\n region: Deno.env.get(\"S3_REGION\") || \"auto\",\n secretAccessKey: Deno.env.get(\"S3_SECRET_ACCESS_KEY\") || \"\",\n service: \"s3\",\n });\n\n const endpoint = Deno.env.get(\"S3_ENDPOINT\") || \"\";\n const bucket = Deno.env.get(\"S3_BUCKET\") || \"\";\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n let url = endpoint;\n if (url.endsWith(\"/\")) {\n url = url.slice(0, -1);\n }\n\n const uploadUrl = `${url}/${bucket}/${filename}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await s3Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: {\n \"Content-Type\": file.type || \"application/octet-stream\",\n },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n console.error(\"Erreur S3:\", await uploadRes.text());\n return c.json({ error: \"Erreur lors de l'upload vers S3.\" }, 500);\n }\n\n const publicBase = Deno.env.get(\"S3_PUBLIC_URL\") || `${url}/${bucket}`;\n const publicUrl = `${publicBase}/${filename}`;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n });\n\n // GET /cloud/storage — Consommation actuelle de stockage\n app.get(\"/cloud/storage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used, files_count FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n app.get(\"/cloud/files\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE user_id = ${userId}::text\n ORDER BY uploaded_at DESC\n LIMIT 200\n `;\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /cloud/upload — Upload d'un fichier vers R2 + mise à jour quota\n app.post(\"/cloud/upload\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const tier = userRes[0]?.tier || \"Free\";\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = STORAGE_LIMITS_BYTES[tier] ||\n STORAGE_LIMITS_BYTES[\"Free\"];\n\n if (bytesUsed + fileSize > bytesLimit) {\n const limitMB = Math.round(bytesLimit / (1024 * 1024));\n const usedMB = Math.round(bytesUsed / (1024 * 1024));\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error:\n `Quota de stockage dépassé. Vous utilisez ${usedMB} MB sur ${limitMB} MB (tier ${tier}).`,\n over_limit: true,\n }, 413);\n }\n\n // Générer une clé R2 unique\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"bin\";\n const uniqueId = crypto.randomUUID();\n const r2Key = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Uploader vers R2\n const r2Client = await buildR2Client();\n const uploadUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2Key}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadRes = await r2Client.fetch(uploadUrl, {\n body: arrayBuffer,\n headers: { \"Content-Type\": file.type || \"application/octet-stream\" },\n method: \"PUT\",\n });\n\n if (!uploadRes.ok) {\n const errText = await uploadRes.text();\n console.error(\"R2 Upload Error:\", errText);\n return c.json({ error: \"Erreur lors de l'upload vers R2.\" }, 500);\n }\n\n const publicUrl = `${getR2PublicBase()}/${r2Key}`;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${r2Key}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10000) / 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n });\n\n // DELETE /cloud/files/:id — Suppression définitive d'un fichier\n app.delete(\"/cloud/files/:id\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, size_bytes } = fileRes[0];\n\n // Supprimer de R2\n const r2Client = await buildR2Client();\n const deleteUrl = `${getR2Endpoint()}/${getR2Bucket()}/${r2_key}`;\n try {\n await r2Client.fetch(deleteUrl, { method: \"DELETE\" });\n } catch (r2Err) {\n console.error(\"R2 Delete Error (continuing anyway):\", r2Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n });\n}","createdAt",["D",1787556364493],"branchVersion","branchId","3345cb6c-eeb2-4b61-ab03-8e0abc2dcd73","id","200f8efb-f4ef-4117-ae26-ee737dbffb76","mai",["D",1785339526786],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Avec l'API d'mAI, récupérez des données sur les projets !","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/cdf5d0c3-f220-4dec-712e-87455a037c00/square512?exp=1789574399&sig=cfa9490d533e7871253a6ab2a88e4402f4e87053e4af84aa18173402e4231c98","7ed13655-83c2-4934-a981-01578302df33","pinnedFileId","968028a2-8b63-11f1-b718-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f99eb-d944-7332-99f8-2fbb8b1e7011","tursoName","200f8efbf4ef4117ae26ee737dbffb76","tursoHostname","200f8efbf4ef4117ae26ee737dbffb76-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789561254403],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"isOwned",364,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mdevslabs","handle","displayName","mProjects","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789574399&sig=aac5f4aa360c828da2eb3e613d0215d418c17d66231e62b35d3f6e40267383dd","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":257,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":258,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":259,"_85":260,"_87":261,"_89":25},"tree",[220,221,222,223,224,225,226,227,228],"files",[220,221,222,223,224,225,226,227,228],"counts",{"_207":64,"_208":209,"_210":64,"_211":212,"_213":214},"contents",[132,133,134,135,136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":200,"_32":201,"_30":202,"_142":-5,"_41":42,"_40":203,"_143":25,"_38":204,"_13":160,"_33":34,"_35":205,"_24":25,"_146":-5,"_27":206},{"_43":193,"_32":194,"_30":195,"_142":-5,"_41":42,"_40":196,"_143":25,"_38":197,"_13":176,"_33":34,"_35":198,"_24":25,"_146":-5,"_27":199},{"_43":186,"_32":187,"_30":188,"_142":-5,"_41":42,"_40":189,"_143":25,"_38":190,"_13":145,"_33":34,"_35":191,"_24":25,"_146":-5,"_27":192},{"_43":179,"_32":180,"_30":181,"_142":-5,"_41":42,"_40":182,"_143":25,"_38":183,"_13":176,"_33":34,"_35":184,"_24":25,"_146":-5,"_27":185},{"_43":171,"_32":172,"_30":173,"_142":-5,"_41":42,"_40":174,"_143":25,"_38":175,"_13":176,"_33":34,"_35":177,"_24":25,"_146":-5,"_27":178},{"_43":163,"_32":164,"_30":58,"_142":-5,"_41":42,"_40":165,"_143":25,"_38":166,"_13":167,"_33":168,"_35":169,"_24":25,"_146":45,"_27":170},{"_43":155,"_32":156,"_30":157,"_142":-5,"_41":42,"_40":158,"_143":25,"_38":159,"_13":160,"_33":34,"_35":161,"_24":25,"_146":-5,"_27":162},{"_43":148,"_32":149,"_30":150,"_142":-5,"_41":42,"_40":151,"_143":25,"_38":152,"_13":145,"_33":34,"_35":153,"_24":25,"_146":-5,"_27":154},{"_43":141,"_32":28,"_30":31,"_142":-5,"_41":42,"_40":14,"_143":25,"_38":144,"_13":145,"_33":34,"_35":37,"_24":25,"_146":-5,"_27":147},"8d3a5b3e-4c84-4b61-bddb-cf5d866d0385","parentId","latest",["D",1787556364493],2,"label",[28],"eba7e60e-74dd-4a92-a27b-314085c11b18","projects.ts","e972f7ac-9c6a-11f1-8111-1607ee4eb77e",68,["D",1787473740736],"import type { Hono } from \"npm:hono@4\";\nimport { getDb } from \"./config.ts\";\n\nexport const STATIC_PROJECTS_LIST = [\n {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n features: [\"Chat Web\", \"Interface fluide\", \"Streaming en direct\"],\n id: \"proj_web\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n features: [\"Extension navigateur\", \"Extension VS Code\", \"Accès contextuel\"],\n id: \"proj_pulse\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n features: [\n \"Terminal interactif\",\n \"Génération de code\",\n \"Workflows développeur\",\n ],\n id: \"proj_cli\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n version: \"0.5.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n features: [\n \"IDE IA Intelligent\",\n \"Agents Autonomes\",\n \"Outils MCP\",\n \"Multi-Modèles\",\n ],\n id: \"proj_coder\",\n is_public: true,\n label: \"Alpha\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n features: [\n \"Stockage sécurisé\",\n \"Résumés automatiques\",\n \"Indexation de documents\",\n ],\n id: \"proj_cloud\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations assistée par mAI.\",\n features: [\n \"Génération de documents\",\n \"Présentations interactives\",\n \"Export multi-format\",\n ],\n id: \"proj_office\",\n is_public: true,\n label: \"Archivé\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"archived\",\n version: \"0.1.0\",\n },\n {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description:\n \"Moteur de recherche sémantique et d'indexation vectorielle ultra-rapide.\",\n features: [\"Indexation hybride\", \"Recherche locale\"],\n id: \"proj_msearch\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n version: \"1.0.3\",\n },\n {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage intelligent d'API et modèles LLM.\",\n features: [\"Load balancing\", \"Multi-fournisseurs\"],\n id: \"proj_openprovider\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n version: \"0.5.0\",\n },\n {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast\",\n features: [\"Video game\", \"Assembler\"],\n id: \"proj_snob\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n version: \"1.0.1\",\n },\n {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n features: [\"Chat Completions\", \"Embeddings\"],\n id: \"proj_mai_legacy\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n version: \"2.4.0\",\n },\n];\n\nexport const STATIC_PROJECTS_MAP: Record = {\n web: {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n },\n pulse: {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n },\n cli: {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n },\n coder: {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"alpha\",\n },\n office: {\n category: \"Productivity\",\n created_at: \"2026-08-12T00:00:00.000Z\",\n description: \"Création de documents et présentations avec mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Office\",\n project_id: \"office\",\n repository: \"https://github.com/mDevsLabs/Office\",\n status: \"archived\",\n },\n cloud: {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n },\n mai: {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n },\n maicli: {\n category: \"CLI Tool\",\n created_at: \"2026-02-10T00:00:00.000Z\",\n description:\n \"Interface en ligne de commande professionnelle pour l'écosystème mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI CLI (Legacy)\",\n project_id: \"maicli\",\n repository: \"https://github.com/mDevsLabs/mAI-CLI\",\n status: \"archived\",\n },\n msearch: {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description: \"Moteur de recherche sémantique et d'indexation vectorielle.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n },\n openprovider: {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage d'API et modèles LLM.\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n },\n snob: {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n },\n};\n\nexport function registerProjectRoutes(app: Hono) {\n // GET /v1/projects\n app.get(\"/v1/projects\", async (c) => {\n try {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const dbProjects =\n await sql`SELECT * FROM mprojects_projects WHERE user_id = ${userId} ORDER BY created_at DESC LIMIT 50`;\n return c.json({\n data: [...STATIC_PROJECTS_LIST, ...dbProjects],\n object: \"list\",\n });\n } catch (_err) {\n return c.json({ data: STATIC_PROJECTS_LIST, object: \"list\" });\n }\n });\n\n // POST /v1/projects\n app.post(\"/v1/projects\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const body = await c.req.json();\n if (!body.name) {\n return c.json({ error: \"Le nom du projet est obligatoire.\" }, 400);\n }\n\n const projectId = \"proj-\" + Math.random().toString(36).substr(2, 9);\n\n await sql`\n INSERT INTO mprojects_projects (user_id, project_id, name, description, is_public)\n VALUES (${userId}, ${projectId}, ${body.name}, ${\n body.description || \"\"\n }, ${body.isPublic || false})\n `;\n\n return c.json({ name: body.name, project_id: projectId, success: true });\n });\n\n // GET /v1/projects/:id\n app.get(\"/v1/projects/:id\", async (c) => {\n const projectId = c.req.param(\"id\").toLowerCase();\n\n if (STATIC_PROJECTS_MAP[projectId]) {\n return c.json({ project: STATIC_PROJECTS_MAP[projectId] });\n }\n\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projects = await sql`\n SELECT * FROM mprojects_projects \n WHERE (user_id = ${userId} OR is_public = TRUE) AND LOWER(project_id) = ${projectId} \n LIMIT 1\n `;\n\n if (projects.length === 0) {\n return c.json({ error: \"Project not found\" }, 404);\n }\n\n return c.json({ project: projects[0] });\n });\n\n // PUT /v1/projects/:id\n app.put(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n const body = await c.req.json();\n\n const existing =\n await sql`SELECT id FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Projet non trouvé ou non autorisé.\" }, 404);\n }\n\n const name = body.name;\n const description = body.description;\n const isPublic = body.isPublic;\n\n await sql`\n UPDATE mprojects_projects\n SET name = COALESCE(${name}, name),\n description = COALESCE(${description}, description),\n is_public = COALESCE(${isPublic}, is_public),\n updated_at = NOW()\n WHERE user_id = ${userId} AND project_id = ${projectId}\n `;\n\n return c.json({\n message: \"Projet mis à jour.\",\n project_id: projectId,\n success: true,\n });\n });\n\n // DELETE /v1/projects/:id\n app.delete(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const result = await sql`\n DELETE FROM mprojects_projects \n WHERE user_id = ${userId} AND project_id = ${projectId}\n RETURNING id\n `;\n\n if (result.length === 0) {\n return c.json({ error: \"Projet non trouvé ou déjà supprimé.\" }, 404);\n }\n\n return c.json({ message: \"Projet supprimé avec succès.\", success: true });\n });\n\n // GET /v1/projects/:id/stats\n app.get(\"/v1/projects/:id/stats\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const projects =\n await sql`SELECT id, name, created_at FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (projects.length === 0) {\n return c.json({ error: \"Projet non trouvé.\" }, 404);\n }\n\n return c.json({\n active_deployments: 1,\n name: projects[0].name,\n project_id: projectId,\n requests_count: Math.floor(Math.random() * 500) + 12,\n status: \"healthy\",\n uptime_percentage: 99.98,\n });\n });\n}",[149],"028aef1a-75f2-4df7-81b0-280d50a648bf","models.ts","e972ab30-9c6a-11f1-8111-1607ee4eb77e",77,["D",1787556344011],4,"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n TIER_LIMITS,\n verifyToken,\n} from \"./config.ts\";\n\nexport function registerModelRoutes(app: Hono) {\n // GET /usage\n app.get(\"/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const sql = getDb();\n const [usageResult, userResult] = await Promise.all([\n sql`SELECT tokens_used FROM weekly_usage WHERE user_id = ${userId} AND week_start = ${weekStartStr}`,\n sql`SELECT tier, email, username, phone, avatar_url FROM users WHERE id = ${userId} LIMIT 1`,\n ]);\n\n const user = userResult[0];\n const tokensUsed = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[user?.tier] || TIER_LIMITS[\"Free\"];\n\n return c.json({\n avatarUrl: user?.avatar_url,\n email: user?.email,\n limit,\n phone: user?.phone,\n resetAt: nextResetIso,\n tier: user?.tier || \"Free\",\n tokensUsed,\n username: user?.username,\n weekStart: weekStartStr,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /log-usage\n app.post(\"/log-usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { tokensUsed = 0 } = await c.req.json();\n const { weekStartStr } = getWeekData();\n\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage + tokensUsed > limit) {\n return c.json(\n { error: \"Limite atteinte.\", limit, used: currentUsage },\n 429,\n );\n }\n\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}, ${tokensUsed})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokensUsed}\n `;\n\n return c.json({\n limit,\n success: true,\n weeklyUsed: currentUsage + tokensUsed,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // PROXY : CHAT COMPLETIONS (CLI)\n app.post(\"/chat/completions\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n // Vérification des limites avant d'autoriser la requête\n const sql = getDb();\n const userRes =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const limit = TIER_LIMITS[tier] || TIER_LIMITS[\"Free\"];\n\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n if (currentUsage >= limit) {\n return c.json({ error: \"Votre limite hebdomadaire est épuisée.\" }, 429);\n }\n\n // Le corps de la requête du CLI\n const body = await c.req.json();\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch {}\n\n // Redirection de la requête vers OpenRouter\n const response = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI CLI\",\n },\n method: \"POST\",\n },\n );\n\n // Retourne le stream ou la réponse directement au CLI\n return new Response(response.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": response.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: response.status,\n });\n } catch {\n return c.json({ error: \"Erreur serveur proxy.\" }, 500);\n }\n });\n\n // GET /v1/models\n app.get(\"/v1/models\", async (c) => {\n const userPlan = c.get(\"userPlan\");\n const apiKey = c.get(\"apiKey\");\n const planStr = String(userPlan || \"Free\").toLowerCase().trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const shouldFilterFreeOnly = !isPaidPlan || !apiKey;\n\n try {\n const res = await fetch(\"https://openrouter.ai/api/v1/models\");\n if (!res.ok) {\n throw new Error(\"OpenRouter fetch error\");\n }\n const json = await res.json();\n const rawModels: any[] = json.data || [];\n\n let filtered = rawModels\n .filter((m) => m && m.id && !m.id.startsWith(\"openrouter/\"))\n .filter((m) => {\n const modality = m.architecture?.modality || \"\";\n const outputModalities = m.architecture?.output_modalities || [];\n return (\n outputModalities.includes(\"text\") ||\n modality.endsWith(\"text\") ||\n modality.includes(\"->text\")\n );\n })\n .map((m) => ({\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description || \"\",\n id: m.id,\n maxContext: m.context_length || 128_000,\n maxOutput: m.top_provider?.max_completion_tokens || 4096,\n name: m.name || m.id,\n object: \"model\",\n owned_by: m.id.split(\"/\")[0] || \"openrouter\",\n supported_parameters: m.supported_parameters || [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"stop\",\n \"tools\",\n \"response_format\",\n ],\n }));\n\n if (shouldFilterFreeOnly) {\n filtered = filtered.filter((m) => m.id.toLowerCase().includes(\"free\"));\n }\n\n return c.json({ data: filtered, object: \"list\" });\n } catch {\n let fallback = [\n {\n created: 0,\n description:\n \"Modèle multimodal ultra-rapide de Google conçu pour des tâches à haut débit et de raisonnement avec un très grand contexte.\",\n id: \"google/gemini-2.5-flash:free\",\n maxContext: 1_048_576,\n maxOutput: 65_535,\n name: \"Google: Gemini 2.5 Flash\",\n object: \"model\",\n owned_by: \"google\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"top_k\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"seed\",\n ],\n },\n {\n created: 0,\n description:\n \"Modèle phare de Meta Llama 3.3 70B offrant des compétences avancées de programmation, logique et résolution de problèmes complexes.\",\n id: \"meta-llama/llama-3.3-70b-instruct:free\",\n maxContext: 131_072,\n maxOutput: 128_000,\n name: \"Meta: Llama 3.3 70B Instruct\",\n object: \"model\",\n owned_by: \"meta-llama\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"frequency_penalty\",\n ],\n },\n {\n created: 0,\n description:\n \"Modèle de code spécialisé de haute précision par Alibaba Cloud, optimisé pour la synthèse de code, le refactoring et le debug.\",\n id: \"qwen/qwen-2.5-coder-32b-instruct:free\",\n maxContext: 32_768,\n maxOutput: 8192,\n name: \"Qwen: Qwen 2.5 Coder 32B Instruct\",\n object: \"model\",\n owned_by: \"qwen\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stop\",\n \"tools\",\n ],\n },\n {\n created: 0,\n description:\n \"Modèle de raisonnement logique étape par étape de premier ordre par DeepSeek pour les mathématiques et la logique complexe.\",\n id: \"deepseek/deepseek-r1:free\",\n maxContext: 163_840,\n maxOutput: 16_000,\n name: \"DeepSeek: DeepSeek R1\",\n object: \"model\",\n owned_by: \"deepseek\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n ],\n },\n ];\n\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) => m.id.toLowerCase().includes(\"free\"));\n }\n\n return c.json({ data: fallback, object: \"list\" });\n }\n });\n\n // GET /v1/status\n app.get(\"/v1/status\", async (c) => {\n try {\n const res = await fetch(\"https://mai.instatus.com/summary.json\");\n const data = await res.json();\n return c.json(data);\n } catch {\n return c.json({ error: \"Failed to fetch status\" }, 500);\n }\n });\n\n // POST /v1/chat/completions\n app.post(\"/v1/chat/completions\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const isFreePlan = !isPaidPlan;\n\n const modelStr = String(modelRequested || \"\").toLowerCase();\n const isFreeModel = modelStr.includes(\"free\");\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles contenant 'free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process chat completion.\" }, 500);\n }\n });\n\n // POST /v1/messages (Proxy Anthropic SDK)\n app.post(\"/v1/messages\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json();\n const modelRequested = body.model;\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch {}\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Anthropic request.\" }, 500);\n }\n });\n\n // POST /v1beta/models/:model:generateContent (Proxy Google SDK)\n app.post(\"/v1beta/models/:model:generateContent\", async (c) => {\n try {\n const userPlan = c.get(\"userPlan\");\n const body = await c.req.json().catch(() => ({}));\n const modelRequested = c.req.param(\"model\");\n\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isFreePlan = planStr === \"free\" || planStr === \"gratuit\";\n const isFreeModel = Boolean(\n modelRequested && modelRequested.includes(\":free\"),\n );\n\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (Free) autorise uniquement les modèles gratuits dont l'ID contient ':free' tel que 'poolside/laguna-xs-2.1:free'.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const userId = c.get(\"userId\");\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const limit = TIER_LIMITS[String(userPlan || \"Free\")] ||\n TIER_LIMITS[\"Free\"];\n\n if (currentUsage >= limit) {\n return c.json({\n error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\",\n }, 429);\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id = ${userId}::text LIMIT 1\n `;\n const apiKey = keyRows.length > 0\n ? keyRows[0].api_key\n : Deno.env.get(\"OPENROUTER_API_KEY\");\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur manquante.\" }, 500);\n }\n\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::text, ${weekStartStr}, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch {}\n\n // Google payload is different, we send it to OpenRouter's endpoint.\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch {\n return c.json({ error: \"Failed to process Google request.\" }, 500);\n }\n });\n}",[156],"2bf57e9f-9650-4cee-ac02-c072205a4a4a","main.ts",76,["D",1787556334693],39,"http","/**\n * mAI — Val Town HTTP Proxy & Auth Backend\n * URL : https://mai.val.run/\n */\n\nimport { cors } from \"npm:hono/cors\";\nimport { Hono } from \"npm:hono@4\";\nimport { registerAuthRoutes } from \"./auth.ts\";\nimport { initSQLite } from \"./config.ts\";\nimport { registerDeviceRoutes } from \"./devices.ts\";\nimport { registerMiddleware } from \"./api-middleware.ts\";\nimport { registerModelRoutes } from \"./models.ts\";\nimport { registerProjectRoutes } from \"./projects.ts\";\nimport { registerStorageRoutes } from \"./storage.ts\";\n\n// ─────────────────────────────────────────────\n// Init DB SQLite en background\n// ─────────────────────────────────────────────\ninitSQLite().catch(console.error);\n\n// ─────────────────────────────────────────────\n// App Hono\n// ─────────────────────────────────────────────\nconst app = new Hono();\n\nconst ALLOWED_ORIGINS = [\n \"https://mai.val.run\",\n \"https://mdevslabs.github.io\",\n \"https://m-ai.fr\",\n \"https://www.m-ai.fr\",\n \"http://localhost:3000\",\n \"http://localhost:3001\",\n];\n\napp.use(\n \"*\",\n cors({\n allowHeaders: [\n \"Content-Type\",\n \"Authorization\",\n \"x-user-id\",\n \"x-api-key\",\n ],\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\"],\n credentials: true,\n exposeHeaders: [\"Content-Type\", \"Authorization\", \"x-user-id\"],\n maxAge: 86_400,\n origin: (origin) => {\n if (!origin) return origin;\n if (ALLOWED_ORIGINS.includes(origin)) return origin;\n // Autoriser les previews Vercel (*.vercel.app)\n if (origin.endsWith(\".vercel.app\")) return origin;\n return null;\n },\n }),\n);\n\n// ─────────────────────────────────────────────\n// ROUTE PAR DÉFAUT (Pour éviter le 404 en preview)\n// ─────────────────────────────────────────────\napp.get(\"/\", (c) => c.text(\"mAI\"));\n\n// ─────────────────────────────────────────────\n// Middleware & Routes modulaires\n// ─────────────────────────────────────────────\nregisterMiddleware(app);\nregisterAuthRoutes(app);\nregisterStorageRoutes(app);\nregisterModelRoutes(app);\nregisterProjectRoutes(app);\nregisterDeviceRoutes(app);\n\nexport default app.fetch;",[164],"13c811af-f265-4b36-8149-f33f6411c272","email.ts","e9725edc-9c6a-11f1-8111-1607ee4eb77e",75,["D",1787556323204],3,"import nodemailer from \"npm:nodemailer\";\n\nfunction escapeHtml(str: string): string {\n return String(str)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\nexport async function sendVerificationEmail(\n email: string,\n code: string,\n action: string,\n extraInfo?: any,\n) {\n // Ne jamais logger le code OTP en clair — seulement l'action et l'email hashé partiel\n const maskedEmail = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(\n `[EMAIL] action=${action} to=${maskedEmail} hasCode=${Boolean(code)}`,\n );\n\n let subject = \"Notification - mAI\";\n let title = \"Notification\";\n let textContent = \"\";\n let showCode = !code ? false : true;\n\n switch (action) {\n case \"register\":\n subject = \"Vérifiez votre adresse e-mail - mAI\";\n title = \"Vérification d'inscription\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"login\":\n subject = \"Code de vérification de connexion - mAI\";\n title = \"Vérification de connexion\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte mAI :\";\n break;\n case \"verify_new_email\":\n subject = \"Vérification de votre nouvelle adresse e-mail - mAI\";\n title = \"Changement d'e-mail\";\n textContent =\n \"Voici le code de vérification pour confirmer votre nouvelle adresse e-mail :\";\n break;\n case \"delete_account\":\n subject = \"Code de suppression de compte - mAI\";\n title = \"Suppression du compte\";\n textContent =\n \"Vous avez demandé la suppression de votre compte. Voici votre code à 8 chiffres :\";\n break;\n case \"subscription_unlocked\":\n const tierUnlocked = escapeHtml(extraInfo?.tier || \"Pro\");\n subject = `Merci d'avoir souscrit au forfait ${tierUnlocked} ! - mAI`;\n title = `Merci d'avoir souscrit au forfait ${tierUnlocked} !`;\n showCode = false;\n textContent =\n `Nous vous remercions chaleureusement pour votre souscription au forfait ${tierUnlocked} sur mAI ! 🎉

\n Votre compte bénéficie dès maintenant de vos nouveaux quotas étendus pour l'ensemble de vos applications et clés d'API (tokens mAI, requêtes API et stockage Cloud).

\n Toute l'équipe mDevsLabs vous remercie pour votre confiance et vous souhaite une excellente expérience créative et productive avec mAI.`;\n break;\n case \"new_login\":\n subject = \"Nouvelle connexion détectée - mAI\";\n title = \"Alerte de sécurité\";\n showCode = false;\n const device = escapeHtml(extraInfo?.device || \"Appareil inconnu\");\n const location = escapeHtml(extraInfo?.location || \"Lieu inconnu\");\n textContent =\n `Une nouvelle connexion à votre compte mAI a été détectée depuis :

\n Appareil : ${device}
\n Localisation : ${location}

\n Si vous êtes à l'origine de cette connexion, aucune action n'est requise. Sinon, modifiez immédiatement votre mot de passe et déconnectez cet appareil.`;\n break;\n }\n\n const html = `\n \n \n \n \n \n \n \n

\n \n \n

\n $\"mAI$ \n

${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${escapeHtml(code)}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n `;\n\n // 1. Gmail SMTP via Nodemailer — exige conf env, plus de fallback hardcodé\n const gmailUser = Deno.env.get(\"GMAIL_USER\");\n const gmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n\n if (gmailUser && gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n html,\n subject,\n to: email,\n });\n\n const maskedTo = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Gmail OK to=${maskedTo}`);\n return;\n } catch (err: any) {\n console.error(\"Erreur envoi Gmail SMTP :\", err?.message || err);\n }\n } else if (!gmailUser || !gmailAppPass) {\n console.warn(\n \"[EMAIL] GMAIL_USER/GMAIL_APP_PASSWORD non configurés — fallback Resend\",\n );\n }\n\n // 2. Resend Fallback\n const resendKey = Deno.env.get(\"RESEND_API_KEY\");\n if (resendKey) {\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n body: JSON.stringify({\n from: \"mAI \",\n html,\n subject,\n to: email,\n }),\n headers: {\n Authorization: `Bearer ${resendKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n });\n if (res.ok) {\n }\n } catch (_e) {\n // ignore\n }\n }\n}",[172],"2a17df3f-9684-4e52-ac33-2d080cf8fe51","devices.ts","e97247d0-9c6a-11f1-8111-1607ee4eb77e",74,["D",1787556315855],"import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n id: d.id,\n os: d.os,\n device_model: d.device_model,\n device_version: d.device_version || \"\",\n ip_address: d.ip_address,\n device_name: d.device_name,\n last_active: d.last_active,\n created_at: d.created_at,\n is_current: d.token === token,\n }));\n\n return c.json({ success: true, devices });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n success: true,\n message: \"Tous les autres appareils ont été déconnectés.\",\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n success: true,\n message: \"Tous les appareils ont été déconnectés.\",\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[180],"bca73c98-e088-49bc-8047-829902c3b2f8","config.ts","e9721ca6-9c6a-11f1-8111-1607ee4eb77e",73,["D",1787556304955],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"14d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// Limites de tokens hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record = {\n Free: 2_000_000,\n Max: 20_000_000,\n Plus: 5_000_000,\n Pro: 10_000_000,\n};\n\nexport const TIER_REQUEST_LIMITS: Record = {\n Free: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n};\n\n// Limites de stockage Cloud par tier (en bytes)\nexport const STORAGE_LIMITS_BYTES: Record = {\n Free: 500 * 1024 * 1024, // 500 MB\n Max: 100 * 1024 * 1024 * 1024, // 100 GB\n Plus: 5 * 1024 * 1024 * 1024, // 5 GB\n Pro: 20 * 1024 * 1024 * 1024, // 20 GB\n};\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret = Deno.env.get(\"MAI_JWT_SECRET\");\n if (!secret) {\n throw new Error(\"MAI_JWT_SECRET not set\");\n }\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record,\n): Promise {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise> {\n const result = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (result.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record;\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") || uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n os,\n device_model: model,\n device_version: fullVersion,\n device_name: deviceName,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = Math.pow(10, length - 1);\n const max = Math.pow(10, length) - 1;\n // Crypto-sécurisé (remplace Math.random vulnérable au brute-force)\n const range = max - min + 1;\n const randomInt = crypto.getRandomValues(new Uint32Array(1))[0] % range;\n const code = (min + randomInt).toString().padStart(length, \"0\");\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[187],"bc92ba41-a81e-4be3-811b-47eeb9b3e114","auth.ts","e9719b14-9c6a-11f1-8111-1607ee4eb77e",72,["D",1787556286512],"import type { Hono } from \"npm:hono@4\";\nimport bcrypt from \"npm:bcryptjs\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || c.req.header(\"x-real-ip\") || \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const geoRes = await fetch(`https://ip-api.com/json/${ip}`, {\n signal: controller.signal,\n headers: { \"User-Agent\": \"mAI/1.0\" },\n });\n clearTimeout(timeout);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some((d) =>\n d.device_name === device_name\n );\n const knownLocation = pastDevices.some((d) =>\n d.location && d.location.includes(countryStr)\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 && Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(`[Verify-Code] Code invalide soumis par user=${userId}`);\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.json();\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n auto_logout_minutes,\n } = body;\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n status: \"email_verification_required\",\n email: cleanEmail,\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (auto_logout_minutes !== undefined) {\n const mins = parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) return c.json({ error: \"Champs manquants.\" }, 400);\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ success: true, email: email.trim() });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ success: true, email });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ success: true, keys });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[194],"941d96d4-030e-46ba-9b13-821ceb718e7f","api-middleware.ts","e972842a-9c6a-11f1-8111-1607ee4eb77e",71,["D",1787556277452],"import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { jwtVerify } from \"npm:jose\";\nimport { getDb, getJwtSecret, TIER_REQUEST_LIMITS } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware /v1/* pour Auth & Logging\n app.use(\"/v1/*\", async (c, next) => {\n const path = c.req.path;\n const isPublicRoute = path === \"/v1/models\" || path === \"/v1/mai/models\" ||\n path === \"/v1/status\";\n\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n const reqUserId = c.req.header(\"x-user-id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n }\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max) — comparaison constant-time\n if (systemMaiApiKey && apiKey && timingSafeEqual(apiKey, systemMaiApiKey)) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée — comparaison exacte uniquement (pas de LIKE fuzzy)\n else if (apiKey) {\n const sql = getDb();\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text\n LIMIT 1\n `;\n\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else if (isJwtRoute && apiKey) {\n // Routes de compte : accepter un token JWT de session (pas une API Key)\n try {\n const blacklisted = await sqlite.execute({\n args: [apiKey],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (blacklisted.rows.length > 0) {\n return c.json({ error: \"Token révoqué.\" }, 401);\n }\n const { payload } = await jwtVerify(apiKey, getJwtSecret());\n currentUserId = String(payload.sub);\n userPlan = String(payload.tier || \"Free\");\n } catch {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n } else if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : uniquement si déjà authentifié\n // Un attaquant peut forger x-user-id via curl — on ne fait confiance que si une API key/JWT valide a déjà établi currentUserId\n // Si aucun currentUserId mais x-user-id présent, on tente de valider un JWT Bearer pour lier l'identité\n if (reqUserId && reqUserId !== \"system-mai\") {\n if (currentUserId) {\n // Déjà authentifié via clé API ou JWT : x-user-id doit correspondre, sinon on l'ignore\n if (reqUserId !== currentUserId) {\n console.warn(\n `[Auth] x-user-id mismatch: header=${reqUserId} vs auth=${currentUserId} — header ignoré`,\n );\n }\n // Ne pas écraser userPlan/currentUserId — garder l'identité vérifiée\n } else if (apiKey) {\n // apiKey présent mais non reconnu (route publique) : ne pas promouvoir via x-user-id seul\n // On laisse passer sans enrichir — la route décidera si 401\n } else {\n // Aucune auth vérifiée : tenter de vérifier un JWT si fourni (fallback web app)\n // Si aucun token vérifiable, on n'utilise PAS x-user-id pour privé — isPublicRoute check fera 401\n // Pour compat web app, on valide quand même le tier si l'utilisateur existe, mais on log l'usage non vérifié\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0) {\n // Seulement pour routes publiques on enrichit, sinon on exige JWT\n if (isPublicRoute) {\n if (uRows[0].tier) userPlan = uRows[0].tier;\n currentUserId = reqUserId;\n } else {\n // Route privée sans JWT : on ne trust pas x-user-id — restera 401 via check suivant\n console.warn(\n `[Auth] x-user-id sans JWT sur route privée ${path} — ignoré`,\n );\n }\n }\n } catch {}\n }\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !reqUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record = {\n Free: 500,\n Gratuit: 500,\n Plus: 1000,\n Pro: 2000,\n Max: 5000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé (idempotent)\n try {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n } catch {}\n\n // Calculer l'usage global pour l'utilisateur\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n }\n\n await next();\n\n if (isPublicRoute) {\n return; // Ne pas logger les requêtes vers les routes publiques\n }\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Mise à jour quota (uniquement pour les clés API utilisateur réelles)\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n if (!isJwtRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n `;\n } catch (err) {\n console.error(\"Erreur logging API:\", err);\n }\n }\n });\n}",[201],"pulls","branches",11,"forks","envVars",{"_215":218,"_219":64},"connections",{"_215":216,"_217":64},"count",1,"unfilledCount",117,"emptyCount",{"_43":200,"_32":201,"_30":202,"_142":-5,"_41":42,"_40":203,"_143":25,"_38":254,"_13":160,"_33":34,"_35":205,"_24":25,"_146":-5,"_230":255,"_27":256},{"_43":193,"_32":194,"_30":195,"_142":-5,"_41":42,"_40":196,"_143":25,"_38":251,"_13":176,"_33":34,"_35":198,"_24":25,"_146":-5,"_230":252,"_27":253},{"_43":186,"_32":187,"_30":188,"_142":-5,"_41":42,"_40":189,"_143":25,"_38":248,"_13":145,"_33":34,"_35":191,"_24":25,"_146":-5,"_230":249,"_27":250},{"_43":179,"_32":180,"_30":181,"_142":-5,"_41":42,"_40":182,"_143":25,"_38":245,"_13":176,"_33":34,"_35":184,"_24":25,"_146":-5,"_230":246,"_27":247},{"_43":171,"_32":172,"_30":173,"_142":-5,"_41":42,"_40":174,"_143":25,"_38":242,"_13":176,"_33":34,"_35":177,"_24":25,"_146":-5,"_230":243,"_27":244},{"_43":163,"_32":164,"_30":58,"_142":-5,"_41":42,"_40":165,"_143":25,"_38":239,"_13":167,"_33":168,"_35":169,"_24":25,"_146":45,"_230":240,"_27":241},{"_43":155,"_32":156,"_30":157,"_142":-5,"_41":42,"_40":158,"_143":25,"_38":236,"_13":160,"_33":34,"_35":161,"_24":25,"_146":-5,"_230":237,"_27":238},{"_43":148,"_32":149,"_30":150,"_142":-5,"_41":42,"_40":151,"_143":25,"_38":233,"_13":145,"_33":34,"_35":153,"_24":25,"_146":-5,"_230":234,"_27":235},{"_43":141,"_32":28,"_30":31,"_142":-5,"_41":42,"_40":14,"_143":25,"_38":229,"_13":145,"_33":34,"_35":37,"_24":25,"_146":-5,"_230":231,"_27":232},["D",1787556364493],"children",[],[28],["D",1787473740736],[],[149],["D",1787556344011],[],[156],["D",1787556334693],[],[164],["D",1787556323204],[],[172],["D",1787556315855],[],[180],["D",1787556304955],[],[187],["D",1787556286512],[],[194],["D",1787556277452],[],[201],["D",1785339526786],["D",1789561254403],{"_101":100,"_109":105},{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"ctx",{"_83":-5,"_129":295,"_296":297,"_298":299,"_300":25,"_301":25,"_302":25,"_303":60,"_304":-5,"_305":-7,"_306":-7,"_307":64,"_308":25,"_309":25,"_310":-5,"_311":25,"_312":25,"_313":25,"_314":-5},"ENV",{"_266":267,"_268":269,"_270":91,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292,"_293":294},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v78