\n \n \n

\n $\"mAI$ \n

${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${escapeHtml(code)}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n

\n $\"mAI$ \n

${title}

\n\n \n

Bonjour,

${textContent}

\n \n ${\n showCode\n ? `\n \n

\n ${escapeHtml(code)}\n

Code unique • Expire dans 10 minutes

\n `\n : \"\"\n }\n\n

Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.

\n\n \n

Cet e-mail automatique a été envoyé de manière sécurisée.

\n\n

\n \n \n `;\n\n // 1. Gmail SMTP via Nodemailer — exige conf env, plus de fallback hardcodé\n const gmailUser = Deno.env.get(\"GMAIL_USER\");\n const gmailAppPass = Deno.env.get(\"GMAIL_APP_PASSWORD\");\n\n if (gmailUser && gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI\" <${gmailUser}>`,\n html,\n subject,\n to: email,\n });\n\n const maskedTo = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Gmail OK to=${maskedTo}`);\n return;\n } catch (err: any) {\n console.error(\"Erreur envoi Gmail SMTP :\", err?.message || err);\n }\n } else if (!gmailUser || !gmailAppPass) {\n console.warn(\n \"[EMAIL] GMAIL_USER/GMAIL_APP_PASSWORD non configurés — fallback Resend\",\n );\n }\n\n // 2. Resend Fallback\n const resendKey = Deno.env.get(\"RESEND_API_KEY\");\n if (resendKey) {\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n body: JSON.stringify({\n from: \"mAI \",\n html,\n subject,\n to: email,\n }),\n headers: {\n Authorization: `Bearer ${resendKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n });\n if (res.ok) {\n }\n } catch (_e) {\n // ignore\n }\n }\n}",[132],"d590d904cc1643ae3d05fc3a31468f30fdb87b9f0fc3f2251565ddd963e6fb1b","devices.ts",{"_50":157,"_15":148,"_52":158,"_54":-5,"_55":76,"_57":77,"_59":68,"_60":159,"_62":160,"_64":65,"_66":161,"_31":68,"_69":-5,"_70":-7,"_44":162,"_72":163},{"_50":151,"_15":148,"_52":152,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":153,"_62":63,"_64":65,"_66":154,"_31":68,"_69":-5,"_70":-7,"_44":155,"_72":156},"75106dad-2fce-48b0-9d38-715e417a35f4","01a0341e-bbbf-77c2-8cde-b03121597523",["D",1787587614375],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n created_at: d.created_at,\n device_model: d.device_model,\n device_name: d.device_name,\n device_version: d.device_version || \"\",\n id: d.id,\n ip_address: d.ip_address,\n is_current: d.token === token,\n last_active: d.last_active,\n os: d.os,\n }));\n\n return c.json({ devices, success: true });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n message: \"Tous les autres appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n message: \"Tous les appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[148],"84d57af920c9d301ed3513409e479f972f0496fc27870ab4f20f5c8741a6a1de","af57293a-73f8-4dcf-b1fa-346508a61569","e97247d0-9c6a-11f1-8111-1607ee4eb77e",["D",1787561287917],4,"import type { Hono } from \"npm:hono@4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n id: d.id,\n os: d.os,\n device_model: d.device_model,\n device_version: d.device_version || \"\",\n ip_address: d.ip_address,\n device_name: d.device_name,\n last_active: d.last_active,\n created_at: d.created_at,\n is_current: d.token === token,\n }));\n\n return c.json({ success: true, devices });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n success: true,\n message: \"Tous les autres appareils ont été déconnectés.\",\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n success: true,\n message: \"Tous les appareils ont été déconnectés.\",\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[148],"0805eacaa011feb3f1693f5a3ff994cb2c15053d3dab5c081d573ff179a97c14","config.ts",{"_50":173,"_15":164,"_52":174,"_54":-5,"_55":76,"_57":77,"_59":68,"_60":175,"_62":79,"_64":65,"_66":176,"_31":68,"_69":-5,"_70":-7,"_44":177,"_72":178},{"_50":167,"_15":164,"_52":168,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":169,"_62":63,"_64":65,"_66":170,"_31":68,"_69":-5,"_70":-7,"_44":171,"_72":172},"0bc01ae8-8333-4ef9-9d67-859c4240782f","01a0341e-bbbf-77c2-8cde-ae7ba37867a1",["D",1787587614375],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"14d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// Limites de tokens hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record = {\n Free: 2_000_000,\n Max: 20_000_000,\n Plus: 5_000_000,\n Pro: 10_000_000,\n};\n\nexport const TIER_REQUEST_LIMITS: Record = {\n Free: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n};\n\n// Limites quotidiennes de génération d'images (Free: 3/j, Plus: 5/j, Pro: 10/j, Max: 20/j)\nexport const TIER_DAILY_IMAGE_LIMITS: Record = {\n Free: 3,\n free: 3,\n Gratuit: 3,\n gratuit: 3,\n Max: 20,\n max: 20,\n Plus: 5,\n Pro: 10,\n plus: 5,\n pro: 10,\n};\n\nexport function getTierDailyImageLimit(tier?: string | null): number {\n const t = (tier || \"Free\").toLowerCase().trim();\n if (t === \"max\") {\n return 20;\n }\n if (t === \"pro\") {\n return 10;\n }\n if (t === \"plus\") {\n return 5;\n }\n return 3;\n}\n\n// Coût en requêtes API par génération d'image\n// Free = 100 requêtes, Plus = 50 requêtes, Pro = 25 requêtes, Max = 10 requêtes\nexport const TIER_IMAGE_REQUEST_COST: Record = {\n Free: 100,\n free: 100,\n Gratuit: 100,\n gratuit: 100,\n Max: 10,\n max: 10,\n Plus: 50,\n Pro: 25,\n plus: 50,\n pro: 25,\n};\n\nexport function getTierImageRequestCost(tier?: string | null): number {\n const t = (tier || \"Free\").toLowerCase().trim();\n if (t === \"max\") {\n return 10;\n }\n if (t === \"pro\") {\n return 25;\n }\n if (t === \"plus\") {\n return 50;\n }\n return 100;\n}\n\n// Limites de stockage Cloud par tier (en bytes) — SSOT: Free 500Mo / Plus 1Go / Pro 2Go / Max 5Go\nexport const STORAGE_LIMITS_BYTES: Record = {\n Free: 500 * 1024 * 1024, // 500 MB\n // alias lowercase pour lookup case-insensitive côté Val Town\n free: 500 * 1024 * 1024,\n gratuit: 500 * 1024 * 1024,\n Max: 5 * 1024 * 1024 * 1024, // 5 GB\n max: 5 * 1024 * 1024 * 1024,\n Plus: 1 * 1024 * 1024 * 1024, // 1 GB\n Pro: 2 * 1024 * 1024 * 1024, // 2 GB\n plus: 1 * 1024 * 1024 * 1024,\n pro: 2 * 1024 * 1024 * 1024,\n} as Record;\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret = Deno.env.get(\"MAI_JWT_SECRET\");\n if (!secret) {\n throw new Error(\"MAI_JWT_SECRET not set\");\n }\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record,\n): Promise {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise> {\n // Vérif SQLite (legacy Val Town) + Postgres (nouveau)\n const sqliteResult = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (sqliteResult.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n // Vérif Postgres token_blacklist avec TTL 14j\n try {\n const sql = getDb();\n const pgResult =\n await sql`SELECT 1 FROM token_blacklist WHERE token = ${token} LIMIT 1`;\n if (pgResult.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n } catch (e: any) {\n if (e?.message === \"Token révoqué.\") {\n throw e;\n }\n // ignore DB errors (table not yet exists)\n }\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record;\n}\n\nexport async function blacklistToken(token: string) {\n const expiresAt = new Date(\n Date.now() + 14 * 24 * 60 * 60 * 1000,\n ).toISOString();\n try {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n try {\n const sql = getDb();\n await sql`INSERT INTO token_blacklist (token, revoked_at, expires_at) VALUES (${token}, NOW(), ${expiresAt}::timestamp) ON CONFLICT (token) DO NOTHING`;\n } catch {}\n // Nettoyage opportuniste des vieux tokens\n try {\n const sql = getDb();\n await sql`DELETE FROM token_blacklist WHERE expires_at < NOW() OR revoked_at < NOW() - INTERVAL '14 days'`;\n } catch {}\n try {\n await sqlite.execute({\n sql:\n \"DELETE FROM token_blacklist WHERE revoked_at < datetime('now', '-14 days')\",\n });\n } catch {}\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") ||\n uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n device_model: model,\n device_name: deviceName,\n device_version: fullVersion,\n os,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = 10 ** (length - 1);\n const max = 10 ** length - 1;\n // Crypto PRNG (corrige Math.random prévisible)\n const range = max - min;\n const randomValue = crypto.getRandomValues(new Uint32Array(1))[0] /\n 0xff_ff_ff_ff;\n const code = Math.floor(min + randomValue * range)\n .toString()\n .padStart(length, \"0\");\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[164],"fdf77222d2c3c4c05f1895cf7b24f616354cf483fe3f2fcca006f42fd3892e9f","5682de08-aa14-420a-8c5e-85fc811c4608","e9721ca6-9c6a-11f1-8111-1607ee4eb77e",["D",1787561287917],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"14d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// Limites de tokens hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record = {\n Free: 2_000_000,\n Max: 20_000_000,\n Plus: 5_000_000,\n Pro: 10_000_000,\n};\n\nexport const TIER_REQUEST_LIMITS: Record = {\n Free: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n};\n\n// Limites de stockage Cloud par tier (en bytes) — SSOT: Free 500Mo / Plus 1Go / Pro 2Go / Max 5Go\nexport const STORAGE_LIMITS_BYTES: Record = {\n Free: 500 * 1024 * 1024, // 500 MB\n Plus: 1 * 1024 * 1024 * 1024, // 1 GB\n Pro: 2 * 1024 * 1024 * 1024, // 2 GB\n Max: 5 * 1024 * 1024 * 1024, // 5 GB\n // alias lowercase pour lookup case-insensitive côté Val Town\n free: 500 * 1024 * 1024,\n plus: 1 * 1024 * 1024 * 1024,\n pro: 2 * 1024 * 1024 * 1024,\n max: 5 * 1024 * 1024 * 1024,\n gratuit: 500 * 1024 * 1024,\n} as Record;\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret = Deno.env.get(\"MAI_JWT_SECRET\");\n if (!secret) {\n throw new Error(\"MAI_JWT_SECRET not set\");\n }\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record,\n): Promise {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise> {\n // Vérif SQLite (legacy Val Town) + Postgres (nouveau)\n const sqliteResult = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (sqliteResult.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n // Vérif Postgres token_blacklist avec TTL 14j\n try {\n const sql = getDb();\n const pgResult =\n await sql`SELECT 1 FROM token_blacklist WHERE token = ${token} LIMIT 1`;\n if (pgResult.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n } catch (e: any) {\n if (e?.message === \"Token révoqué.\") throw e;\n // ignore DB errors (table not yet exists)\n }\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record;\n}\n\nexport async function blacklistToken(token: string) {\n const expiresAt = new Date(Date.now() + 14 * 24 * 60 * 60 * 1000)\n .toISOString();\n try {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n try {\n const sql = getDb();\n await sql`INSERT INTO token_blacklist (token, revoked_at, expires_at) VALUES (${token}, NOW(), ${expiresAt}::timestamp) ON CONFLICT (token) DO NOTHING`;\n } catch {}\n // Nettoyage opportuniste des vieux tokens\n try {\n const sql = getDb();\n await sql`DELETE FROM token_blacklist WHERE expires_at < NOW() OR revoked_at < NOW() - INTERVAL '14 days'`;\n } catch {}\n try {\n await sqlite.execute({\n sql:\n \"DELETE FROM token_blacklist WHERE revoked_at < datetime('now', '-14 days')\",\n });\n } catch {}\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") || uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) version = `v${match[1].split(\".\")[0]}`;\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n os,\n device_model: model,\n device_version: fullVersion,\n device_name: deviceName,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = Math.pow(10, length - 1);\n const max = Math.pow(10, length) - 1;\n // Crypto PRNG (corrige Math.random prévisible)\n const range = max - min;\n const randomValue = crypto.getRandomValues(new Uint32Array(1))[0] /\n 0xffffffff;\n const code = Math.floor(min + randomValue * range).toString().padStart(\n length,\n \"0\",\n );\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[164],"0dfcdd2d988d18960d17fb9cb03f1b0e69d6857d8537186d55a4396831934401","auth.ts",{"_50":188,"_15":179,"_52":189,"_54":-5,"_55":76,"_57":190,"_59":68,"_60":191,"_62":79,"_64":65,"_66":192,"_31":68,"_69":-5,"_70":-7,"_44":193,"_72":194},{"_50":182,"_15":179,"_52":183,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":184,"_62":63,"_64":65,"_66":185,"_31":68,"_69":-5,"_70":-7,"_44":186,"_72":187},"fa3edd11-f39d-46f1-80f2-3cc0ce671418","01a0341e-bbbf-77c2-8cde-a9eb72d3242a",["D",1787587614375],"import bcrypt from \"npm:bcryptjs\";\nimport type { Hono } from \"npm:hono@4\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n c.req.header(\"x-real-ip\") ||\n \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const geoRes = await fetch(`https://ip-api.com/json/${ip}`, {\n headers: { \"User-Agent\": \"mAI/1.0\" },\n signal: controller.signal,\n });\n clearTimeout(timeout);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some(\n (d) => d.device_name === device_name,\n );\n const knownLocation = pastDevices.some(\n (d) => d.location && d.location.includes(countryStr),\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 &&\n Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) {\n upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n }\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) {\n upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n }\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) {\n upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n }\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(`[Verify-Code] Code invalide soumis par user=${userId}`);\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.json();\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n auto_logout_minutes,\n } = body;\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n email: cleanEmail,\n status: \"email_verification_required\",\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (auto_logout_minutes !== undefined) {\n const mins = Number.parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ email: email.trim(), success: true });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ email, success: true });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n }\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ keys, success: true });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[179],"0271a7feb5f758f54b55c5b40c27d7931ea2edf85ef24985c421b7d51ab3f72e","bc92ba41-a81e-4be3-811b-47eeb9b3e114","e9719b14-9c6a-11f1-8111-1607ee4eb77e",72,["D",1787556286512],"import type { Hono } from \"npm:hono@4\";\nimport bcrypt from \"npm:bcryptjs\";\nimport {\n BCRYPT_ROUNDS,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n // POST /register\n app.post(\"/register\", async (c) => {\n try {\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(email, \"register\");\n await sendVerificationEmail(email, code, \"register\");\n\n return c.json({ email, status: \"verification_required\", success: true });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n app.post(\"/verify-register\", async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"register\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${email} OR username = ${username} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${email}, ${username}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /login\n app.post(\"/login\", async (c) => {\n try {\n const { email, password, identifier } = await c.req.json();\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, email, password_hash, tier FROM users WHERE email = ${loginId} OR username = ${loginId} OR phone = ${loginId} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({ error: \"Identifiants invalides.\" }, 401);\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n app.post(\"/verify-login\", async (c) => {\n try {\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const users =\n await sql`SELECT id, tier FROM users WHERE email = ${email} LIMIT 1`;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") || c.req.header(\"x-real-ip\") || \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const geoRes = await fetch(`https://ip-api.com/json/${ip}`, {\n signal: controller.signal,\n headers: { \"User-Agent\": \"mAI/1.0\" },\n });\n clearTimeout(timeout);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some((d) =>\n d.device_name === device_name\n );\n const knownLocation = pastDevices.some((d) =>\n d.location && d.location.includes(countryStr)\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n app.post(\"/resend-code\", async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 && Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(`[Verify-Code] Code invalide soumis par user=${userId}`);\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.json();\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n auto_logout_minutes,\n } = body;\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim();\n const existing =\n await sql`SELECT id FROM users WHERE username = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Ce nom d'utilisateur est déjà pris.\" }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n status: \"email_verification_required\",\n email: cleanEmail,\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (auto_logout_minutes !== undefined) {\n const mins = parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) return c.json({ error: \"Champs manquants.\" }, 400);\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ success: true, email: email.trim() });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ success: true, email });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const keys = await sql`\n SELECT api_key, plan, request_count, created_at, last_used_at \n FROM mprojects_api_keys \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ success: true, keys });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n });\n}",[179],"4fa5d4ce026e061e202a0102c0ae43e54465e8f7d3ed0228c2e1231f404b5a3a","api-middleware.ts",{"_50":204,"_15":195,"_52":205,"_54":-5,"_55":76,"_57":77,"_59":68,"_60":206,"_62":111,"_64":65,"_66":207,"_31":68,"_69":-5,"_70":-7,"_44":208,"_72":209},{"_50":198,"_15":195,"_52":199,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":200,"_62":79,"_64":65,"_66":201,"_31":68,"_69":-5,"_70":-7,"_44":202,"_72":203},"d1e847e0-3b54-418e-a43b-980a1398ae0a","01a0341e-bbbf-77c2-8cde-a51281704ae3",["D",1787587614375],"import type { Hono } from \"npm:hono@4\";\nimport { getDb, TIER_REQUEST_LIMITS, verifyToken } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware global pour Auth, Rate limiting & Logging sur toutes les routes d'API\n app.use(\"*\", async (c, next) => {\n const path = c.req.path;\n\n // Détection des routes d'API\n const isApiRoute = path.startsWith(\"/v1/\") ||\n path.startsWith(\"/v1beta/\") ||\n path === \"/v1/models\" ||\n path === \"/models\" ||\n path.startsWith(\"/models/\") ||\n path === \"/v1beta/models\" ||\n path === \"/chat/completions\" ||\n path.startsWith(\"/chat/\") ||\n path === \"/messages\" ||\n path.startsWith(\"/messages/\") ||\n path === \"/usage\" ||\n path === \"/log-usage\" ||\n path === \"/v1/status\" ||\n path === \"/status\";\n\n if (!isApiRoute) {\n await next();\n return;\n }\n\n const isPublicRoute = path === \"/v1/models\" ||\n path === \"/models\" ||\n path === \"/v1beta/models\" ||\n path === \"/v1/models/images\" ||\n path === \"/models/images\" ||\n path === \"/v1/models/mai\" ||\n path === \"/v1/mai/models\" ||\n path === \"/models/mai\" ||\n path === \"/mai/models\" ||\n path === \"/v1/status\" ||\n path === \"/status\";\n\n const authHeader = c.req.header(\"Authorization\") ||\n c.req.header(\"authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const queryApiKey = c.req.query(\"api_key\") ||\n c.req.query(\"key\");\n\n let rawApiKey =\n (authHeader?.startsWith(\"Bearer \") ? authHeader.slice(7) : authHeader) ||\n headerApiKey ||\n queryApiKey ||\n null;\n\n if (rawApiKey) {\n rawApiKey = rawApiKey.trim();\n if (\n rawApiKey === \"\" ||\n rawApiKey === \"null\" ||\n rawApiKey === \"undefined\" ||\n rawApiKey === \"Bearer\"\n ) {\n rawApiKey = null;\n }\n }\n\n const apiKey = rawApiKey;\n const reqUserId = c.req.header(\"x-user-id\") || c.req.header(\"X-User-Id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) {\n return false;\n }\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n }\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max) — comparaison constant-time\n if (systemMaiApiKey && apiKey && timingSafeEqual(apiKey, systemMaiApiKey)) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée ou Token JWT\n else if (apiKey) {\n const sql = getDb();\n try {\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text\n LIMIT 1\n `;\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else {\n // Tenter de valider le token comme un JWT de session\n try {\n const payload = await verifyToken(apiKey);\n currentUserId = String(payload.sub || \"\");\n userPlan = String(payload.tier || \"Free\");\n\n // Vérifier dans la table users si le forfait a changé\n if (currentUserId) {\n const uRows = await sql`\n SELECT tier FROM users\n WHERE id::text = ${currentUserId}::text OR username = ${currentUserId}::text OR email = ${currentUserId}::text\n LIMIT 1\n `;\n if (uRows.length > 0 && uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n }\n } catch {\n if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n }\n } catch (dbErr) {\n console.error(\"Auth DB Error in middleware:\", dbErr);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : uniquement si déjà authentifié ou fallback route publique\n if (reqUserId && reqUserId !== \"system-mai\") {\n if (currentUserId) {\n // Déjà authentifié via clé API ou JWT : x-user-id doit correspondre, sinon on l'ignore\n if (reqUserId !== currentUserId) {\n console.warn(\n `[Auth] x-user-id mismatch: header=${reqUserId} vs auth=${currentUserId} — header ignoré`,\n );\n }\n } else if (apiKey) {\n // apiKey présent mais non reconnu (route publique) : ne pas promouvoir via x-user-id seul\n } else {\n // Aucune auth vérifiée\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0) {\n if (uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n if (isPublicRoute) {\n currentUserId = reqUserId;\n } else {\n console.warn(\n `[Auth] x-user-id sans JWT sur route privée ${path} — ignoré`,\n );\n }\n }\n } catch {}\n }\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !currentUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record = {\n Free: 500,\n Gratuit: 500,\n Max: 5000,\n Plus: 1000,\n Pro: 2000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé (idempotent)\n try {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n } catch {}\n\n // Calculer l'usage global pour l'utilisateur\n try {\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n } catch {}\n }\n\n await next();\n\n if (isPublicRoute) {\n return; // Ne pas logger les requêtes vers les routes publiques\n }\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Mise à jour quota (uniquement pour les clés API utilisateur réelles)\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n if (!isJwtRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n `;\n } catch (err) {\n console.error(\"Erreur logging API:\", err);\n }\n }\n });\n}",[195],"0c2fc22a6be251c47864139c51e0f3e2c4e8141435b019412dc44ead17ac13b3","cbdd1419-8ce3-4730-8170-6a1bc1aedce9","e972842a-9c6a-11f1-8111-1607ee4eb77e",["D",1787561287917],"import type { Hono } from \"npm:hono@4\";\nimport { getDb, TIER_REQUEST_LIMITS, verifyToken } from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware /v1/* pour Auth & Logging\n app.use(\"/v1/*\", async (c, next) => {\n const path = c.req.path;\n const isPublicRoute = path === \"/v1/models\" || path === \"/v1/mai/models\" ||\n path === \"/v1/status\";\n\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n const reqUserId = c.req.header(\"x-user-id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n\n function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n }\n\n // 1. Clé système MAI_API_KEY (accès complet aux modèles Plus/Max) — comparaison constant-time\n if (systemMaiApiKey && apiKey && timingSafeEqual(apiKey, systemMaiApiKey)) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } // 2. Clé API utilisateur enregistrée — comparaison exacte uniquement (pas de LIKE fuzzy)\n else if (apiKey) {\n const sql = getDb();\n const rows = await sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text\n LIMIT 1\n `;\n\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n userPlan = apiKeyData.user_tier || apiKeyData.plan || \"Free\";\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n } else if (isJwtRoute && apiKey) {\n // Routes de compte : accepter un token JWT de session (pas une API Key)\n try {\n const payload = await verifyToken(apiKey);\n currentUserId = String(payload.sub);\n userPlan = String(payload.tier || \"Free\");\n } catch {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n } else if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : uniquement si déjà authentifié\n if (reqUserId && reqUserId !== \"system-mai\") {\n if (currentUserId) {\n // Déjà authentifié via clé API ou JWT : x-user-id doit correspondre, sinon on l'ignore\n if (reqUserId !== currentUserId) {\n console.warn(\n `[Auth] x-user-id mismatch: header=${reqUserId} vs auth=${currentUserId} — header ignoré`,\n );\n }\n } else if (apiKey) {\n // apiKey présent mais non reconnu (route publique) : ne pas promouvoir via x-user-id seul\n } else {\n // Aucune auth vérifiée\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0) {\n if (isPublicRoute) {\n if (uRows[0].tier) userPlan = uRows[0].tier;\n currentUserId = reqUserId;\n } else {\n console.warn(\n `[Auth] x-user-id sans JWT sur route privée ${path} — ignoré`,\n );\n }\n }\n } catch {}\n }\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !reqUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification des quotas pour les clés API enregistrées\n if (apiKey && currentUserId && currentUserId !== \"system-mai\") {\n const tierMap: Record = {\n Free: 500,\n Gratuit: 500,\n Plus: 1000,\n Pro: 2000,\n Max: 5000,\n };\n const limit = TIER_REQUEST_LIMITS?.[userPlan] || tierMap[userPlan] || 500;\n const sql = getDb();\n\n // Réinitialisation mensuelle automatique si le mois a changé (idempotent)\n try {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0\n WHERE user_id = ${currentUserId}::text\n AND last_used_at IS NOT NULL\n AND last_used_at < DATE_TRUNC('month', NOW())\n `;\n } catch {}\n\n // Calculer l'usage global pour l'utilisateur\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id = ${currentUserId}::text\n `;\n const globalRequestCount = countRows[0]?.total_requests || 0;\n\n if (globalRequestCount >= limit) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({ error: \"Quota exceeded for your account.\" }, 429);\n }\n }\n\n await next();\n\n if (isPublicRoute) {\n return; // Ne pas logger les requêtes vers les routes publiques\n }\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Logging & Mise à jour quota (uniquement pour les clés API utilisateur réelles)\n const isJwtRoute = path.startsWith(\"/v1/devices\");\n if (!isJwtRoute && apiKey && apiKey !== systemMaiApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n `;\n } catch (err) {\n console.error(\"Erreur logging API:\", err);\n }\n }\n });\n}",[195],"44c841f3f036ee19febe55496f940f9eb3929d859eece10c906a1b8398a938d6",{"_44":229,"_46":-7,"_48":230},{"_44":221,"_46":-7,"_48":222},{"_44":213,"_46":-7,"_48":214},"web.ts",{"_50":215,"_15":213,"_52":216,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":217,"_62":79,"_64":65,"_66":218,"_31":68,"_69":-5,"_70":-7,"_44":219,"_72":220},"2e51784c-de68-4b57-a55a-1fb88c79ff53","5ab33b2c-9fcf-11f1-9be7-1607ee4eb77e",["D",1787587614375],"import type { Hono } from \"npm:hono@4\";\n\nexport interface YouSearchHit {\n description?: string;\n page_age?: string;\n snippets?: string[];\n title?: string;\n url?: string;\n}\n\nexport interface YouSearchResponse {\n hits?: YouSearchHit[];\n results?: Array<{\n title: string;\n url: string;\n description: string;\n snippets?: string[];\n }>;\n}\n\n/**\n * Récupère les clés You.com configurées pour le triple fallback.\n */\nfunction getYouApiKeys(): string[] {\n const keys: string[] = [];\n const getEnv = (name: string): string | undefined => {\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(name);\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env[name];\n }\n };\n\n const k1 = getEnv(\"YOU_API_KEY\") || getEnv(\"YOU_API_KEY_1\");\n const k2 = getEnv(\"YOU_API_KEY_2\");\n const k3 = getEnv(\"YOU_API_KEY_3\");\n\n if (k1) {\n keys.push(k1.trim());\n }\n if (k2) {\n keys.push(k2.trim());\n }\n if (k3) {\n keys.push(k3.trim());\n }\n\n return keys;\n}\n\n/**\n * Exécute une recherche Web via l'API You.com avec triple fallback automatique.\n */\nexport async function executeWebSearch(\n query: string,\n count = 5\n): Promise<{\n success: boolean;\n query: string;\n results: Array<{ title: string; url: string; snippet: string }>;\n provider: string;\n error?: string;\n}> {\n const trimmedQuery = (query || \"\").trim();\n if (!trimmedQuery) {\n return {\n error: \"La requête de recherche est vide.\",\n provider: \"you.com\",\n query: \"\",\n results: [],\n success: false,\n };\n }\n\n const keys = getYouApiKeys();\n if (keys.length === 0) {\n console.warn(\"[WebSearch] Aucune clé YOU_API_KEY configurée.\");\n return {\n error:\n \"Service de recherche temporairement non configuré (clés API You.com manquantes).\",\n provider: \"you.com\",\n query: trimmedQuery,\n results: [],\n success: false,\n };\n }\n\n let lastError: any = null;\n\n // Tentative avec triple fallback séquentiel\n for (let i = 0; i < keys.length; i++) {\n const key = keys[i];\n const keyLabel = `YOU_API_KEY_${i + 1}`;\n\n try {\n // Endpoint standard You.com Search API (ydc-index ou api.you.com)\n const url = `https://api.ydc-index.io/search?query=${encodeURIComponent(trimmedQuery)}&count=${count}`;\n const res = await fetch(url, {\n headers: {\n Accept: \"application/json\",\n \"X-API-Key\": key,\n },\n method: \"GET\",\n });\n\n if (res.ok) {\n const data: YouSearchResponse = await res.json();\n const rawHits = data.hits || data.results || [];\n const formattedResults = rawHits.map((hit) => ({\n snippet:\n hit.snippets && hit.snippets.length > 0\n ? hit.snippets.join(\" ... \")\n : hit.description || \"\",\n title: hit.title || \"Sans titre\",\n url: hit.url || \"\",\n }));\n\n return {\n provider: \"you.com\",\n query: trimmedQuery,\n results: formattedResults,\n success: true,\n };\n }\n\n const status = res.status;\n const errBody = await res.text().catch(() => \"\");\n console.warn(\n `[WebSearch] Échec ${keyLabel} (HTTP ${status}): ${errBody.slice(0, 150)}`\n );\n lastError = new Error(`HTTP ${status}: ${errBody}`);\n } catch (err: any) {\n console.warn(`[WebSearch] Erreur réseau avec ${keyLabel}:`, err.message);\n lastError = err;\n }\n }\n\n return {\n error: `Échec de la recherche après tentative sur toutes les clés You.com (${lastError?.message || \"Erreur inconnue\"}).`,\n provider: \"you.com\",\n query: trimmedQuery,\n results: [],\n success: false,\n };\n}\n\n/**\n * Définition standard de l'outil web_search pour les IA compatibles Tool Calling.\n */\nexport const WEB_SEARCH_TOOL = {\n function: {\n description:\n \"Recherche sur le Web des informations récentes et actualisées en temps réel via You.com.\",\n name: \"web_search\",\n parameters: {\n properties: {\n query: {\n description: \"La requête de recherche textuelle complète et précise.\",\n type: \"string\",\n },\n },\n required: [\"query\"],\n type: \"object\",\n },\n },\n type: \"function\" as const,\n};\n\n/**\n * Vérifie si la recherche web doit être activée ou désactivée sur un appel API.\n * Activée par défaut, désactivable via { \"web_search\": false } dans le body\n * ou via l'en-tête HTTP 'x-web-search: false' / 'x-disable-web-search: true'.\n */\nexport function isWebSearchEnabled(body: any, reqHeaders?: Headers): boolean {\n if (body && (body.web_search === false || body.enable_web_search === false)) {\n return false;\n }\n if (reqHeaders) {\n const headerVal =\n reqHeaders.get(\"x-web-search\") || reqHeaders.get(\"X-Web-Search\");\n if (headerVal && headerVal.toLowerCase() === \"false\") {\n return false;\n }\n const disableHeader =\n reqHeaders.get(\"x-disable-web-search\") ||\n reqHeaders.get(\"X-Disable-Web-Search\");\n if (\n disableHeader &&\n (disableHeader.toLowerCase() === \"true\" || disableHeader === \"1\")\n ) {\n return false;\n }\n }\n return true;\n}\n\n/**\n * Enregistrement des routes de recherche Web dans Hono.\n */\nexport function registerWebRoutes(app: Hono) {\n // POST /v1/web/search\n app.post(\"/v1/web/search\", async (c) => {\n try {\n const body = await c.req.json().catch(() => ({}));\n const query = body.query || body.q;\n const count = typeof body.count === \"number\" ? body.count : 5;\n\n if (!query || typeof query !== \"string\") {\n return c.json({ error: \"Le paramètre 'query' est obligatoire.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(query, count);\n return c.json(searchResult, searchResult.success ? 200 : 502);\n } catch {\n return c.json({ error: \"Erreur serveur lors de la recherche Web.\" }, 500);\n }\n });\n\n // GET /v1/web/search\n app.get(\"/v1/web/search\", async (c) => {\n const query = c.req.query(\"q\") || c.req.query(\"query\");\n const countParam = c.req.query(\"count\");\n const count = countParam ? Number.parseInt(countParam, 10) : 5;\n\n if (!query) {\n return c.json({ error: \"Paramètre 'q' ou 'query' manquant.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(\n query,\n isNaN(count) ? 5 : count\n );\n return c.json(searchResult, searchResult.success ? 200 : 502);\n });\n}",[213],"8f6551bbd15a3d13eb2906af69b5141d8cb6bb60c69dc4d6618adf2fc0934316","maiModels.ts",{"_50":223,"_15":221,"_52":224,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":225,"_62":79,"_64":65,"_66":226,"_31":68,"_69":-5,"_70":-7,"_44":227,"_72":228},"b4ce1478-cc60-4bca-bf0c-3b5752b60bff","e757287c-9fcf-11f1-ada6-1607ee4eb77e",["D",1787587614375],"export interface MAIModelDetail {\n capabilities: {\n coding: boolean;\n reasoning: boolean;\n vision: boolean;\n jsonOutput: boolean;\n functionCalling: boolean;\n };\n contextWindow: number;\n description: string;\n huggingFaceTag: string;\n id: string;\n license: string;\n maxOutputTokens: number;\n multimodal: boolean;\n name: string;\n ollamaTag: string;\n parameters: string;\n recommendedHardware: {\n minVram: string;\n recommendedVram: string;\n ram: string;\n };\n releaseDate: string;\n status: \"active\" | \"beta\" | \"deprecated\";\n tagline: string;\n version: string;\n vision: boolean;\n}\n\nexport const maiModelsList: MAIModelDetail[] = [\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Modèle léger de 4 milliards de paramètres conçu pour une agilité maximale sur machines personnelles avec vision intégrée, capacité de raisonnement (thinking) et gestion avancée des appels d'outils (tools).\",\n huggingFaceTag: \"mDevsLabs/mAI-1.5-Light\",\n id: \"mai-1.5-light\",\n license: \"MIT\",\n maxOutputTokens: 32_768,\n multimodal: true,\n name: \"mAI-1.5-Light\",\n ollamaTag: \"mDevsLabs/mAI-1.5-Light\",\n parameters: \"4B\",\n recommendedHardware: {\n minVram: \"4GB\",\n ram: \"8GB\",\n recommendedVram: \"8GB\",\n },\n releaseDate: \"2026-08-28\",\n status: \"active\",\n tagline:\n \"Assistant IA local ultra-rapide et multimodal. Vision intégrée, raisonnement (thinking) et appels d'outils (tools).\",\n version: \"1.5.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Modèle d'élite de 9 milliards de paramètres offrant des performances d'analyse logique et de programmation exceptionnelles, avec support natif du raisonnement profond (thinking), de la vision et des appels d'outils.\",\n huggingFaceTag: \"mDevsLabs/mAI-1.5-Apex\",\n id: \"mai-1.5-apex\",\n license: \"MIT\",\n maxOutputTokens: 32_768,\n multimodal: true,\n name: \"mAI-1.5-Apex\",\n ollamaTag: \"mDevsLabs/mAI-1.5-Apex\",\n parameters: \"9B\",\n recommendedHardware: {\n minVram: \"8GB\",\n ram: \"16GB\",\n recommendedVram: \"16GB\",\n },\n releaseDate: \"2026-08-28\",\n status: \"active\",\n tagline:\n \"Le haut de gamme absolu de la famille mAI. Puissance maximale, vision multimodale, raisonnement complexe et tools.\",\n version: \"1.5.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Modèle 27B polyvalent et surpuissant pour postes de travail et serveurs locaux, réunissant vision multimodale, raisonnement étape par étape et intégration fluide des API et outils externes.\",\n huggingFaceTag: \"mDevsLabs/mAI-1.5-Opal\",\n id: \"mai-1.5-opal\",\n license: \"MIT\",\n maxOutputTokens: 32_768,\n multimodal: true,\n name: \"mAI-1.5-Opal\",\n ollamaTag: \"mDevsLabs/mAI-1.5-Opal\",\n parameters: \"27B\",\n recommendedHardware: {\n minVram: \"16GB\",\n ram: \"32GB\",\n recommendedVram: \"24GB\",\n },\n releaseDate: \"2026-08-28\",\n status: \"active\",\n tagline:\n \"L'équilibre parfait entre haute intelligence et vélocité. Multimodal 27B avec vision, thinking et tools.\",\n version: \"1.5.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Modèle léger de 3 milliards de paramètres conçu pour une exécution ultra-rapide sur laptops et machines personnelles avec accélération vision intégrée.\",\n huggingFaceTag: \"mDevsLabs/mAI-1.2-Light-GGUF\",\n id: \"mai-1.2-light\",\n license: \"MIT\",\n maxOutputTokens: 16_384,\n multimodal: true,\n name: \"mAI-1.2-Light\",\n ollamaTag: \"mDevsLabs/mAI-1.2-Light\",\n parameters: \"3B\",\n recommendedHardware: {\n minVram: \"4GB\",\n ram: \"8GB\",\n recommendedVram: \"8GB\",\n },\n releaseDate: \"2026-07-22\",\n status: \"active\",\n tagline:\n \"Assistant IA local ultra-rapide et multimodal. Légèreté maximale, vision intégrée.\",\n version: \"1.2.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Modèle phare de 9 milliards de paramètres offrant un raisonnement logique complexe, des compétences en développement logiciel et une analyse d'images de haute précision.\",\n huggingFaceTag: \"mDevsLabs/mAI-1.2-Apex-GGUF\",\n id: \"mai-1.2-apex\",\n license: \"MIT\",\n maxOutputTokens: 32_768,\n multimodal: true,\n name: \"mAI-1.2-Apex\",\n ollamaTag: \"mDevsLabs/mAI-1.2-Apex\",\n parameters: \"9B\",\n recommendedHardware: {\n minVram: \"8GB\",\n ram: \"16GB\",\n recommendedVram: \"16GB\",\n },\n releaseDate: \"2026-07-22\",\n status: \"active\",\n tagline:\n \"Le top tier de la famille mAI-1.2. Performances maximales, vision et raisonnement avancé.\",\n version: \"1.2.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: true,\n jsonOutput: true,\n reasoning: true,\n vision: false,\n },\n contextWindow: 262_144,\n description:\n \"Modèle 33B polyvalent pour serveurs locaux et postes de travail spécialisés, offrant un équilibre exceptionnel pour la rédaction, la programmation et l'analyse documentaire.\",\n huggingFaceTag: \"mDevsLabs/mAI-1.2-Opal-GGUF\",\n id: \"mai-1.2-opal\",\n license: \"MIT\",\n maxOutputTokens: 32_768,\n multimodal: false,\n name: \"mAI-1.2-Opal\",\n ollamaTag: \"mDevsLabs/mAI-1.2-Opal\",\n parameters: \"33B\",\n recommendedHardware: {\n minVram: \"16GB\",\n ram: \"32GB\",\n recommendedVram: \"24GB\",\n },\n releaseDate: \"2026-07-22\",\n status: \"active\",\n tagline:\n \"Le sweet spot parfait entre vitesse et intelligence élevée. Équilibré et fluide.\",\n version: \"1.2.0\",\n vision: false,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: false,\n jsonOutput: true,\n reasoning: true,\n vision: true,\n },\n contextWindow: 262_144,\n description:\n \"Première génération du modèle mAI 12B avec support multimodal original et capacités avancées en résolution de problèmes.\",\n huggingFaceTag: \"mDevsLabs/mAI-1-GGUF\",\n id: \"mai-1\",\n license: \"MIT\",\n maxOutputTokens: 16_384,\n multimodal: true,\n name: \"mAI-1\",\n ollamaTag: \"mDevsLabs/mAI-1\",\n parameters: \"12B\",\n recommendedHardware: {\n minVram: \"8GB\",\n ram: \"16GB\",\n recommendedVram: \"12GB\",\n },\n releaseDate: \"2026-07-11\",\n status: \"active\",\n tagline:\n \"Assistant IA local multimodal puissant de 12B paramètres pour le raisonnement et le code.\",\n version: \"1.0.0\",\n vision: true,\n },\n {\n capabilities: {\n coding: true,\n functionCalling: false,\n jsonOutput: true,\n reasoning: true,\n vision: false,\n },\n contextWindow: 131_072,\n description:\n \"Version 3B texte de première génération optimisée pour une empreinte mémoire minimale.\",\n huggingFaceTag: \"mDevsLabs/mAI-1-Light-GGUF\",\n id: \"mai-1-light\",\n license: \"MIT\",\n maxOutputTokens: 8192,\n multimodal: false,\n name: \"mAI-1-Light\",\n ollamaTag: \"mDevsLabs/mAI-1-Light\",\n parameters: \"3B\",\n recommendedHardware: {\n minVram: \"2GB\",\n ram: \"8GB\",\n recommendedVram: \"4GB\",\n },\n releaseDate: \"2026-07-11\",\n status: \"active\",\n tagline: \"Assistant IA local ultraléger et rapide de 3B paramètres.\",\n version: \"1.0.0\",\n vision: false,\n },\n];\n\nexport const maiModels = maiModelsList;",[221],"8908a651ab5cd8c0ec189c6899933a19b8dc141912092360a5d29206be148e75","images.ts",{"_50":231,"_15":229,"_52":232,"_54":-5,"_55":56,"_57":58,"_59":24,"_60":233,"_62":79,"_64":65,"_66":234,"_31":68,"_69":-5,"_70":-7,"_44":235,"_72":236},"934262bc-e420-448f-bd63-5596b5803b84","ee09fbcc-9fcf-11f1-8f1b-1607ee4eb77e",["D",1787587614375],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierDailyImageLimit,\n getTierImageRequestCost,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface ImageModelItem {\n created: number;\n description: string;\n id: string;\n name: string;\n}\n\nexport function getCometApiKey(): string {\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(\"COMET_API_KEY\") || \"\";\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env.COMET_API_KEY || \"\";\n }\n return \"\";\n}\n\n/**\n * Modèles de repli d'image de haute qualité\n */\nconst FALLBACK_IMAGE_MODELS = [\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle de génération d'images ultra-rapide en 4 étapes par Black Forest Labs (Text-to-Image).\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1-schnell\",\n model_type: \"image\",\n name: \"FLUX.1 Schnell\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle phare de haute précision pour la synthèse d'images photoréalistes et artistiques (Text-to-Image).\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1-dev\",\n model_type: \"image\",\n name: \"FLUX.1 Dev\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 15,\n description:\n \"Le sommet de la qualité visuelle, cohérence typographique et détails avancés par Black Forest Labs.\",\n features: [\"text-to-image\"],\n id: \"black-forest-labs/flux-1.1-pro\",\n model_type: \"image\",\n name: \"FLUX 1.1 Pro\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 20,\n description:\n \"Modèle de pointe de 8 milliards de paramètres de Stability AI pour une variété stylistique maximale.\",\n features: [\"text-to-image\", \"image-to-image\"],\n id: \"stabilityai/stable-diffusion-3.5-large\",\n model_type: \"image\",\n name: \"Stable Diffusion 3.5 Large\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 60,\n description:\n \"Génération stylisée haut de gamme avec esthétique et prompt comprehension avancée.\",\n features: [\"text-to-image\"],\n id: \"midjourney/v6\",\n model_type: \"image\",\n name: \"Midjourney v6\",\n },\n {\n created: Math.floor(Date.now() / 1000) - 86_400 * 10,\n description:\n \"Génération vectorielle et matricielle spécialisée dans les logos, illustrations et design graphique.\",\n features: [\"text-to-image\"],\n id: \"recraft-ai/recraft-v3\",\n model_type: \"image\",\n name: \"Recraft V3\",\n },\n];\n\nexport function registerImageRoutes(app: Hono) {\n // ─────────────────────────────────────────────\n // GET /v1/models/images\n // ─────────────────────────────────────────────\n app.get(\"/v1/models/images\", async (c) => {\n const userPlan = c.get(\"userPlan\");\n const apiKey = c.get(\"apiKey\");\n const planStr = String(userPlan || \"Free\")\n .toLowerCase()\n .trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n const shouldFilterFreeOnly = !isPaidPlan;\n\n const cometApiKey = getCometApiKey();\n\n try {\n let rawModels: any[] = [];\n\n if (cometApiKey) {\n const cometRes = await fetch(\"https://api.cometapi.com/v1/models\", {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n },\n });\n\n if (cometRes.ok) {\n const json = await cometRes.json();\n rawModels = json.data || json.models || [];\n }\n }\n\n if (rawModels.length === 0) {\n rawModels = FALLBACK_IMAGE_MODELS;\n }\n\n // 1. Premier filtre : model_type === 'image'\n let imageModels = rawModels.filter((m) => {\n const mType = (\n m.model_type ||\n m.type ||\n m.architecture?.modality ||\n \"\"\n ).toLowerCase();\n const features = (m.features || m.supported_features || []).map(\n (f: string) => f.toLowerCase(),\n );\n const isImg = mType.includes(\"image\") ||\n features.includes(\"text-to-image\") ||\n features.includes(\"image-to-image\") ||\n m.id.toLowerCase().includes(\"flux\") ||\n m.id.toLowerCase().includes(\"diffusion\") ||\n m.id.toLowerCase().includes(\"dall-e\") ||\n m.id.toLowerCase().includes(\"midjourney\");\n return isImg;\n });\n\n // 2. Si Free : id contenant 'flux' uniquement (règle stricte)\n if (shouldFilterFreeOnly) {\n imageModels = imageModels.filter((m) => {\n const idLower = (m.id || \"\").toLowerCase();\n return idLower.includes(\"flux\");\n });\n }\n\n // 3. Renvoyer les données : id, description, name, created et features\n const formatted = imageModels.map((m) => ({\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description ||\n `Modèle de génération d'images ${m.name || m.id}.`,\n features: m.features ||\n m.supported_features ||\n (m.id?.toLowerCase().includes(\"diffusion\")\n ? [\"text-to-image\", \"image-to-image\"]\n : [\"text-to-image\"]),\n id: m.id,\n name: m.name || m.id,\n }));\n\n return c.json({ data: formatted, object: \"list\" });\n } catch (_err) {\n // Fallback gracieux en cas d'erreur\n let fallback = FALLBACK_IMAGE_MODELS;\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) => m.id.toLowerCase().includes(\"flux\"));\n }\n const formatted = fallback.map((m) => ({\n created: m.created,\n description: m.description,\n features: m.features || [\"text-to-image\"],\n id: m.id,\n name: m.name,\n }));\n return c.json({ data: formatted, object: \"list\" });\n }\n });\n\n // ─────────────────────────────────────────────\n // GET /v1/images/usage\n // ─────────────────────────────────────────────\n app.get(\"/v1/images/usage\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const [uRows, countRows] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text LIMIT 1`,\n sql`\n SELECT images_generated \n FROM mprojects_daily_image_usage \n WHERE user_id = ${userId}::text AND usage_date = CURRENT_DATE \n LIMIT 1\n `,\n ]);\n\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const usedToday = countRows[0]?.images_generated || 0;\n const dailyLimit = getTierDailyImageLimit(effectiveTier);\n\n // Calculer la prochaine réinitialisation (minuit UTC)\n const now = new Date();\n const tomorrowMidnight = new Date(\n Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate() + 1,\n 0,\n 0,\n 0,\n ),\n );\n\n return c.json({\n dailyLimit,\n plan: effectiveTier,\n resetAt: tomorrowMidnight.toISOString(),\n usedToday,\n userId,\n });\n } catch (err: any) {\n return c.json(\n {\n details: err.message,\n error: \"Erreur lors de la récupération de l'usage image.\",\n },\n 500,\n );\n }\n });\n\n // ─────────────────────────────────────────────\n // GET /v1/images/history\n // ─────────────────────────────────────────────\n app.get(\"/v1/images/history\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const history = await sql`\n SELECT id, model, prompt, negative_prompt, width, height, image_url, status, created_at\n FROM mprojects_image_generations\n WHERE user_id = ${userId}::text\n ORDER BY created_at DESC\n LIMIT 50\n `;\n\n return c.json({ data: history, success: true });\n } catch (err: any) {\n return c.json(\n { details: err.message, error: \"Erreur historique images.\" },\n 500,\n );\n }\n });\n\n // ─────────────────────────────────────────────\n // POST /v1/images/generations\n // ─────────────────────────────────────────────\n app.post(\"/v1/images/generations\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : null;\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json(\n { error: \"Non authentifié. Clé API ou token requis.\" },\n 401,\n );\n }\n\n const body = await c.req.json().catch(() => ({}));\n const prompt = body.prompt;\n const model = body.model || \"black-forest-labs/flux-1-schnell\";\n const width = body.width ||\n (body.size ? Number.parseInt(body.size.split(\"x\")[0], 10) : 1024);\n const height = body.height ||\n (body.size ? Number.parseInt(body.size.split(\"x\")[1], 10) : 1024);\n const negativePrompt = body.negative_prompt || \"\";\n\n if (!prompt || typeof prompt !== \"string\") {\n return c.json({ error: \"Le paramètre 'prompt' est obligatoire.\" }, 400);\n }\n\n const sql = getDb();\n\n // Vérifier le forfait utilisateur réel dans la table users\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${userId}::text OR username = ${userId}::text \n LIMIT 1\n `;\n const effectiveTier = uRows[0]?.tier || userPlan || \"Free\";\n const planStr = effectiveTier.toLowerCase().trim();\n const isPaidPlan = [\"plus\", \"pro\", \"max\"].includes(planStr);\n\n // Vérification des droits sur le modèle\n if (!isPaidPlan && !model.toLowerCase().includes(\"flux\")) {\n return c.json(\n {\n error: {\n code: \"image_model_access_denied\",\n message:\n `Le modèle d'image '${model}' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${effectiveTier}) autorise les modèles Flux (ex: 'black-forest-labs/flux-1-schnell').`,\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n // Vérification du quota journalier (Free: 3/j, Plus: 5/j, Pro: 10/j, Max: 20/j)\n const dailyLimit = getTierDailyImageLimit(effectiveTier);\n\n const usageRows = await sql`\n SELECT images_generated \n FROM mprojects_daily_image_usage \n WHERE user_id = ${userId}::text AND usage_date = CURRENT_DATE \n LIMIT 1\n `;\n const currentDailyUsage = usageRows[0]?.images_generated || 0;\n\n if (currentDailyUsage >= dailyLimit) {\n return c.json(\n {\n error: {\n code: \"daily_image_quota_exceeded\",\n limit: dailyLimit,\n message:\n `Votre quota journalier de génération d'images est épuisé (${currentDailyUsage}/${dailyLimit} par jour pour le forfait ${effectiveTier}). Réinitialisation automatique à minuit UTC.`,\n type: \"quota_error\",\n used: currentDailyUsage,\n },\n },\n 429,\n );\n }\n\n // Appel de Comet API\n const cometApiKey = getCometApiKey();\n let generatedImageUrl = \"\";\n let cometResultData: any[] = [];\n\n if (cometApiKey) {\n const imagePayload: Record = {\n model,\n n: 1,\n prompt,\n response_format: body.response_format || \"url\",\n size: `${width}x${height}`,\n };\n if (body.image || body.image_url) {\n imagePayload.image = body.image || body.image_url;\n }\n\n const cometRes = await fetch(\n \"https://api.cometapi.com/v1/images/generations\",\n {\n body: JSON.stringify(imagePayload),\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n },\n method: \"POST\",\n },\n );\n\n if (!cometRes.ok) {\n const errText = await cometRes.text().catch(() => \"\");\n console.error(\"[CometAPI] Erreur génération:\", errText);\n return c.json(\n {\n details: errText,\n error: \"Erreur retournée par le fournisseur Comet API.\",\n },\n cometRes.status,\n );\n }\n\n const cometJson = await cometRes.json();\n cometResultData = cometJson.data || [];\n if (cometResultData.length > 0) {\n generatedImageUrl = cometResultData[0].url ||\n cometResultData[0].b64_json || \"\";\n }\n } else {\n // Mode simulation / fallback si la clé Comet n'est pas encore renseignée\n generatedImageUrl = `https://picsum.photos/seed/${\n encodeURIComponent(prompt.slice(0, 20))\n }/${width}/${height}`;\n cometResultData = [{ url: generatedImageUrl }];\n }\n\n // Incrémentation du quota journalier\n await sql`\n INSERT INTO mprojects_daily_image_usage (user_id, usage_date, images_generated, updated_at)\n VALUES (${userId}::text, CURRENT_DATE, 1, NOW())\n ON CONFLICT (user_id, usage_date)\n DO UPDATE SET \n images_generated = mprojects_daily_image_usage.images_generated + 1,\n updated_at = NOW()\n `;\n\n // Enregistrement dans l'historique\n await sql`\n INSERT INTO mprojects_image_generations (\n user_id, api_key, model, prompt, negative_prompt, width, height, image_url, status\n ) VALUES (\n ${userId}::text,\n ${apiKey || null},\n ${model}::text,\n ${prompt}::text,\n ${negativePrompt || null},\n ${width}::integer,\n ${height}::integer,\n ${generatedImageUrl}::text,\n 'completed'\n )\n `;\n\n // Incrémentation du compteur de requêtes de la clé API selon le forfait (Free: 100, Plus: 50, Pro: 25, Max: 10)\n const requestCost = getTierImageRequestCost(effectiveTier);\n if (apiKey) {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + ${requestCost}, last_used_at = NOW()\n WHERE api_key = ${apiKey}\n `;\n }\n\n // Enregistrement d'usage log dans mprojects_api_logs\n try {\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms, created_at)\n VALUES (${\n apiKey || \"anonymous\"\n }::text, '/v1/images/generations', 'POST', 200, 1500, NOW())\n `;\n } catch {}\n\n return c.json({\n created: Math.floor(Date.now() / 1000),\n data: cometResultData,\n usage: {\n daily_limit: dailyLimit,\n daily_used: currentDailyUsage + 1,\n plan: effectiveTier,\n request_cost: requestCost,\n requests_counted: requestCost,\n },\n });\n } catch (err: any) {\n console.error(\"[ImagesAPI] Erreur serveur:\", err);\n return c.json(\n {\n details: err.message,\n error: \"Erreur serveur lors de la génération d'image.\",\n },\n 500,\n );\n }\n });\n}",[229],"b7d8c84218cab5116858b8ac08df1477cc3164ff95cfc6ceaac6e6d9005ea8a6","1cdecf2a-f34a-443f-86c7-753c11c3c643","title","API-1.3","description","Ajout divers :\n1. Images\n2. Web\nPrise en charge des outils de web_search pour une compatibilité avec OpenAI SDK.",["D",1787585217643],"mergedAt",["D",1787587613987],"state","merged","targetBranchVersion","mergedBranchVersion",84,"isTargetOwner","isSourceOwner","targetBranch",{"_50":76,"_15":280,"_62":281,"_274":268,"_275":-5,"_276":-5,"_277":14,"_278":16,"_279":-5},"targetProject",{"_50":268,"_15":16,"_240":269,"_270":271,"_272":273},"targetOrg",{"_13":14,"_266":267},"sourceBranch",{"_50":56,"_15":239,"_62":58,"_274":268,"_275":76,"_276":249,"_277":14,"_278":16,"_279":-5},"sourceProject",{"_50":268,"_15":16,"_240":269,"_270":271,"_272":273},"sourceOrg",{"_13":14,"_266":267},"author",{"_13":14,"_266":267},"avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/ec72623f-c02d-461a-9b1c-c2f416214400/square512?exp=1789538399&sig=b90c7895d89b2c8a9d976c298024ed06d954dd92e3be0b0905971776951516a4","200f8efb-f4ef-4117-ae26-ee737dbffb76","Avec l'API d'mAI, récupérez des données sur les projets !","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/cdf5d0c3-f220-4dec-712e-87455a037c00/square512?exp=1789538399&sig=cd777e882462fce47bac2003be9a9fe1267d4472bdb46131ff02f8b27f89b2ac","privacy","public","projectId","forkedBranchId","forkedBranchVersion","userHandle","projectName","deletedAt","main",364,["D",1785339526786],"legacyEnvVars","httpPrivacy","userId","7ed13655-83c2-4934-a981-01578302df33","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f99eb-d944-7332-99f8-2fbb8b1e7011","tursoName","200f8efbf4ef4117ae26ee737dbffb76","tursoHostname","200f8efbf4ef4117ae26ee737dbffb76-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789474235934],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_13":14,"_325":267},"org",{"_13":14,"_320":321,"_266":267,"_285":286,"_322":323,"_324":68},"branch",{"_62":281,"_15":280,"_50":76,"_274":268,"_275":-5,"_276":-5,"_317":-5,"_318":-5,"_319":-5,"_278":16,"_277":14},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","mProjects","tier","free","canRestrictVals","profileImageUrl",{"_50":268,"_15":16,"_60":337,"_279":-5,"_283":68,"_272":273,"_284":273,"_240":269,"_270":271,"_285":286,"_287":126,"_288":24,"_289":-5,"_290":-5,"_291":26,"_292":293,"_294":295,"_296":297,"_298":338,"_300":-5,"_301":302,"_303":302,"_304":305,"_306":305,"_307":305,"_308":302,"_309":302,"_310":339,"_312":340,"_314":341,"_316":68},{"_50":237,"_238":239,"_240":241,"_60":328,"_243":329,"_245":246,"_247":77,"_248":249,"_250":68,"_251":68,"_252":330,"_254":331,"_256":332,"_258":333,"_260":334,"_262":335,"_264":336},["D",1787585217643],["D",1787587613987],{"_50":76,"_15":280,"_62":281,"_274":268,"_275":-5,"_276":-5,"_277":14,"_278":16,"_279":-5},{"_50":268,"_15":16,"_240":269,"_270":271,"_272":273},{"_13":14,"_266":267},{"_50":56,"_15":239,"_62":58,"_274":268,"_275":76,"_276":249,"_277":14,"_278":16,"_279":-5},{"_50":268,"_15":16,"_240":269,"_270":271,"_272":273},{"_13":14,"_266":267},{"_13":14,"_266":267},["D",1785339526786],["D",1789474235934],{"_13":14,"_325":267},{"_13":14,"_320":321,"_266":267,"_285":286,"_322":323,"_324":68},{"_62":281,"_15":280,"_50":76,"_274":268,"_275":-5,"_276":-5,"_317":-5,"_318":-5,"_319":-5,"_278":16,"_277":14},"branchName","","adoptOrgId",{"_50":268,"_15":16,"_60":892,"_279":-5,"_283":68,"_272":273,"_284":273,"_240":269,"_270":271,"_285":286,"_287":126,"_288":24,"_289":-5,"_290":-5,"_291":26,"_292":293,"_294":295,"_296":297,"_298":893,"_300":-5,"_301":302,"_303":302,"_304":305,"_306":305,"_307":305,"_308":302,"_309":302,"_310":894,"_312":895,"_314":896,"_316":68},"tree",[716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759],"files",[716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759],"counts",{"_704":26,"_705":421,"_706":26,"_707":708,"_709":710},"contents",[365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_50":698,"_15":195,"_52":205,"_54":-5,"_55":76,"_57":699,"_59":24,"_60":700,"_62":701,"_64":65,"_66":702,"_31":68,"_69":-5,"_44":703},{"_50":691,"_15":692,"_52":693,"_54":-5,"_55":76,"_57":694,"_59":24,"_60":695,"_62":624,"_64":65,"_66":696,"_31":68,"_69":-5,"_44":697},{"_50":685,"_15":179,"_52":189,"_54":-5,"_55":76,"_57":686,"_59":24,"_60":687,"_62":688,"_64":65,"_66":689,"_31":68,"_69":-5,"_44":690},{"_50":681,"_15":164,"_52":174,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":682,"_62":546,"_64":65,"_66":683,"_31":68,"_69":-5,"_44":684},{"_50":676,"_15":148,"_52":158,"_54":-5,"_55":76,"_57":677,"_59":24,"_60":678,"_62":624,"_64":65,"_66":679,"_31":68,"_69":-5,"_44":680},{"_50":672,"_15":132,"_52":142,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":673,"_62":546,"_64":65,"_66":674,"_31":68,"_69":-5,"_44":675},{"_50":667,"_15":229,"_52":668,"_54":-5,"_55":76,"_57":411,"_59":24,"_60":669,"_62":609,"_64":65,"_66":670,"_31":68,"_69":-5,"_44":671},{"_50":663,"_15":221,"_52":664,"_54":-5,"_55":76,"_57":249,"_59":24,"_60":665,"_62":26,"_64":65,"_66":226,"_31":68,"_69":-5,"_44":666},{"_50":657,"_15":115,"_52":126,"_54":-5,"_55":76,"_57":658,"_59":24,"_60":659,"_62":660,"_64":121,"_66":661,"_31":68,"_69":16,"_44":662},{"_50":651,"_15":99,"_52":109,"_54":-5,"_55":76,"_57":652,"_59":24,"_60":653,"_62":654,"_64":65,"_66":655,"_31":68,"_69":-5,"_44":656},{"_50":646,"_15":83,"_52":93,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":648,"_62":111,"_64":65,"_66":649,"_31":68,"_69":-5,"_44":650},{"_50":639,"_15":640,"_52":641,"_54":-5,"_55":76,"_57":642,"_59":24,"_60":643,"_62":160,"_64":65,"_66":644,"_31":68,"_69":-5,"_44":645},{"_50":634,"_15":45,"_52":75,"_54":-5,"_55":76,"_57":635,"_59":24,"_60":636,"_62":421,"_64":65,"_66":637,"_31":68,"_69":-5,"_44":638},{"_50":627,"_15":628,"_52":629,"_54":-5,"_55":76,"_57":630,"_59":24,"_60":631,"_62":160,"_64":65,"_66":632,"_31":68,"_69":-5,"_44":633},{"_50":619,"_15":620,"_52":621,"_54":-5,"_55":76,"_57":622,"_59":24,"_60":623,"_62":624,"_64":65,"_66":625,"_31":68,"_69":-5,"_44":626},{"_50":612,"_15":613,"_52":614,"_54":-5,"_55":76,"_57":615,"_59":24,"_60":616,"_62":63,"_64":65,"_66":617,"_31":68,"_69":-5,"_44":618},{"_50":604,"_15":605,"_52":606,"_54":-5,"_55":76,"_57":607,"_59":24,"_60":608,"_62":609,"_64":65,"_66":610,"_31":68,"_69":-5,"_44":611},{"_50":597,"_15":598,"_52":599,"_54":-5,"_55":76,"_57":600,"_59":24,"_60":601,"_62":160,"_64":65,"_66":602,"_31":68,"_69":-5,"_44":603},{"_50":591,"_15":592,"_52":593,"_54":-5,"_55":76,"_57":281,"_59":24,"_60":594,"_62":111,"_64":65,"_66":595,"_31":68,"_69":-5,"_44":596},{"_50":584,"_15":585,"_52":586,"_54":-5,"_55":76,"_57":587,"_59":24,"_60":588,"_62":79,"_64":65,"_66":589,"_31":68,"_69":-5,"_44":590},{"_50":577,"_15":578,"_52":579,"_54":-5,"_55":76,"_57":580,"_59":24,"_60":581,"_62":79,"_64":65,"_66":582,"_31":68,"_69":-5,"_44":583},{"_50":570,"_15":571,"_52":572,"_54":-5,"_55":76,"_57":573,"_59":24,"_60":574,"_62":63,"_64":65,"_66":575,"_31":68,"_69":-5,"_44":576},{"_50":563,"_15":564,"_52":565,"_54":-5,"_55":76,"_57":566,"_59":24,"_60":567,"_62":63,"_64":65,"_66":568,"_31":68,"_69":-5,"_44":569},{"_50":556,"_15":557,"_52":558,"_54":-5,"_55":76,"_57":559,"_59":24,"_60":560,"_62":63,"_64":65,"_66":561,"_31":68,"_69":-5,"_44":562},{"_50":549,"_15":550,"_52":551,"_54":-5,"_55":76,"_57":552,"_59":24,"_60":553,"_62":63,"_64":65,"_66":554,"_31":68,"_69":-5,"_44":555},{"_50":541,"_15":542,"_52":543,"_54":-5,"_55":76,"_57":544,"_59":24,"_60":545,"_62":546,"_64":65,"_66":547,"_31":68,"_69":-5,"_44":548},{"_50":534,"_15":535,"_52":536,"_54":-5,"_55":76,"_57":537,"_59":24,"_60":538,"_62":111,"_64":65,"_66":539,"_31":68,"_69":-5,"_44":540},{"_50":527,"_15":528,"_52":529,"_54":-5,"_55":76,"_57":530,"_59":24,"_60":531,"_62":63,"_64":65,"_66":532,"_31":68,"_69":-5,"_44":533},{"_50":520,"_15":521,"_52":522,"_54":-5,"_55":76,"_57":523,"_59":24,"_60":524,"_62":63,"_64":65,"_66":525,"_31":68,"_69":-5,"_44":526},{"_50":513,"_15":514,"_52":515,"_54":-5,"_55":76,"_57":516,"_59":24,"_60":517,"_62":63,"_64":65,"_66":518,"_31":68,"_69":-5,"_44":519},{"_50":506,"_15":507,"_52":508,"_54":-5,"_55":76,"_57":509,"_59":24,"_60":510,"_62":63,"_64":65,"_66":511,"_31":68,"_69":-5,"_44":512},{"_50":498,"_15":499,"_52":500,"_54":-5,"_55":76,"_57":501,"_59":24,"_60":502,"_62":503,"_64":65,"_66":504,"_31":68,"_69":-5,"_44":505},{"_50":491,"_15":492,"_52":493,"_54":-5,"_55":76,"_57":494,"_59":24,"_60":495,"_62":63,"_64":65,"_66":496,"_31":68,"_69":-5,"_44":497},{"_50":483,"_15":484,"_52":485,"_54":-5,"_55":76,"_57":486,"_59":24,"_60":487,"_62":488,"_64":65,"_66":489,"_31":68,"_69":-5,"_44":490},{"_50":476,"_15":477,"_52":478,"_54":-5,"_55":76,"_57":479,"_59":24,"_60":480,"_62":160,"_64":65,"_66":481,"_31":68,"_69":-5,"_44":482},{"_50":469,"_15":470,"_52":471,"_54":-5,"_55":76,"_57":472,"_59":24,"_60":473,"_62":160,"_64":65,"_66":474,"_31":68,"_69":-5,"_44":475},{"_50":462,"_15":463,"_52":464,"_54":-5,"_55":76,"_57":465,"_59":24,"_60":466,"_62":160,"_64":65,"_66":467,"_31":68,"_69":-5,"_44":468},{"_50":454,"_15":455,"_52":456,"_54":-5,"_55":76,"_57":457,"_59":24,"_60":458,"_62":459,"_64":65,"_66":460,"_31":68,"_69":-5,"_44":461},{"_50":446,"_15":447,"_52":448,"_54":-5,"_55":76,"_57":449,"_59":24,"_60":450,"_62":451,"_64":65,"_66":452,"_31":68,"_69":-5,"_44":453},{"_50":439,"_15":440,"_52":441,"_54":-5,"_55":76,"_57":442,"_59":24,"_60":443,"_62":429,"_64":65,"_66":444,"_31":68,"_69":-5,"_44":445},{"_50":432,"_15":433,"_52":434,"_54":-5,"_55":76,"_57":435,"_59":24,"_60":436,"_62":63,"_64":65,"_66":437,"_31":68,"_69":-5,"_44":438},{"_50":424,"_15":425,"_52":426,"_54":-5,"_55":76,"_57":427,"_59":24,"_60":428,"_62":429,"_64":65,"_66":430,"_31":68,"_69":-5,"_44":431},{"_50":416,"_15":417,"_52":418,"_54":-5,"_55":76,"_57":419,"_59":24,"_60":420,"_62":421,"_64":65,"_66":422,"_31":68,"_69":-5,"_44":423},{"_50":409,"_15":213,"_52":410,"_54":-5,"_55":76,"_57":411,"_59":24,"_60":412,"_62":413,"_64":65,"_66":414,"_31":68,"_69":-5,"_44":415},"643a97bd-33e1-4c90-aad8-df973a0aa2dd","d2e4e64e-9fd5-11f1-866a-1607ee4eb77e",120,["D",1788164141214],5,"import type { Hono } from \"npm:hono@4\";\n\nexport interface YouSearchHit {\n description?: string;\n page_age?: string;\n snippets?: string[];\n title?: string;\n url?: string;\n}\n\nexport interface YouSearchResponse {\n hits?: YouSearchHit[];\n results?: Array<{\n title: string;\n url: string;\n description: string;\n snippets?: string[];\n }>;\n}\n\n/**\n * Récupère les clés You.com configurées pour le triple fallback.\n */\nfunction getYouApiKeys(): string[] {\n const keys: string[] = [];\n const getEnv = (name: string): string | undefined => {\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(name);\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env[name];\n }\n };\n\n const candidateKeys = [\n getEnv(\"YOU_API_KEY\"),\n getEnv(\"YOU_API_KEY_1\"),\n getEnv(\"YOU_API_KEY_2\"),\n getEnv(\"YOU_API_KEY_3\"),\n getEnv(\"YDC_API_KEY\"),\n ];\n\n for (const k of candidateKeys) {\n if (k && k.trim() && !keys.includes(k.trim())) {\n keys.push(k.trim());\n }\n }\n\n return keys;\n}\n\n/**\n * Fallback Web Universel (Google News RSS, Bing News RSS, Wikipedia & DDG)\n */\nasync function fallbackWebSearch(\n query: string,\n count = 5,\n): Promise> {\n const results: Array<{ title: string; url: string; snippet: string }> = [];\n\n // 1. Essai Google News RSS (Ultra-rapide, mondial, temps réel, aucune clé requise)\n try {\n const rssUrl = `https://news.google.com/rss/search?q=${\n encodeURIComponent(query)\n }&hl=fr&gl=FR&ceid=FR:fr`;\n const res = await fetch(rssUrl, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36\",\n \"Accept\": \"application/rss+xml, text/xml, */*\",\n },\n });\n\n if (res.ok) {\n const xml = await res.text();\n const items = xml.split(\"\");\n for (let i = 1; i < items.length && results.length < count; i++) {\n const block = items[i].split(\"\")[0];\n const titleMatch = block.match(/([\\s\\S]*?)<\\/title>/i);\n const linkMatch = block.match(/<link>([\\s\\S]*?)<\\/link>/i) ||\n block.match(/<guid[^>]*>([\\s\\S]*?)<\\/guid>/i);\n const descMatch = block.match(\n /<description>([\\s\\S]*?)<\\/description>/i,\n );\n\n let title = titleMatch\n ? titleMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").replace(\n /<[^>]+>/g,\n \"\",\n ).trim()\n : \"\";\n let link = linkMatch\n ? linkMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").trim()\n : \"\";\n let snippet = descMatch\n ? descMatch[1].replace(/<!\\[CDATA\\[(.*?)\\]\\]>/gi, \"$1\").replace(\n /<[^>]+>/g,\n \"\",\n ).trim()\n : title;\n\n if (title && link) {\n results.push({\n title,\n url: link,\n snippet: snippet || title,\n });\n }\n }\n\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Google News RSS failed:\", err);\n }\n\n // 2. Essai Bing News RSS (Fallback de secours)\n try {\n const bingRssUrl = `https://www.bing.com/news/search?q=${\n encodeURIComponent(query)\n }&format=rss`;\n const res = await fetch(bingRssUrl, {\n headers: {\n \"User-Agent\":\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\",\n \"Accept\": \"application/rss+xml, text/xml, */*\",\n },\n });\n\n if (res.ok) {\n const xml = await res.text();\n const items = xml.split(\"<item>\");\n for (let i = 1; i < items.length && results.length < count; i++) {\n const block = items[i].split(\"</item>\")[0];\n const titleMatch = block.match(/<title>([\\s\\S]*?)<\\/title>/i);\n const linkMatch = block.match(/<link>([\\s\\S]*?)<\\/link>/i);\n const descMatch = block.match(\n /<description>([\\s\\S]*?)<\\/description>/i,\n );\n\n const title = titleMatch\n ? titleMatch[1].replace(/<[^>]+>/g, \"\").trim()\n : \"\";\n const link = linkMatch ? linkMatch[1].trim() : \"\";\n const snippet = descMatch\n ? descMatch[1].replace(/<[^>]+>/g, \"\").trim()\n : title;\n\n if (title && link) {\n results.push({\n title,\n url: link,\n snippet: snippet || title,\n });\n }\n }\n\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Bing RSS failed:\", err);\n }\n\n // 3. Essai Wikipedia API\n try {\n const lang = /[éèàùçâêîôû]/i.test(query) ? \"fr\" : \"en\";\n const wikiUrl =\n `https://${lang}.wikipedia.org/w/api.php?action=opensearch&search=${\n encodeURIComponent(query)\n }&limit=${count}&namespace=0&format=json`;\n const res = await fetch(wikiUrl, {\n headers: {\n \"User-Agent\":\n \"mAI-WebSearch-Agent/1.0 (https://m-ai.fr; contact@m-ai.fr)\",\n },\n });\n if (res.ok) {\n const data = await res.json();\n const titles = data[1] || [];\n const descriptions = data[2] || [];\n const urls = data[3] || [];\n for (let i = 0; i < titles.length && results.length < count; i++) {\n if (urls[i]) {\n results.push({\n title: titles[i],\n url: urls[i],\n snippet: descriptions[i] || `Article Wikipedia sur ${titles[i]}`,\n });\n }\n }\n if (results.length > 0) return results;\n }\n } catch (err) {\n console.warn(\"[WebSearch] Fallback Wikipedia failed:\", err);\n }\n\n return results;\n}\n\n/**\n * Exécute une recherche Web via l'API You.com avec triple fallback automatique et fallback multi-sources.\n */\nexport async function executeWebSearch(\n query: string,\n count = 5,\n): Promise<{\n success: boolean;\n query: string;\n results: Array<{ title: string; url: string; snippet: string }>;\n provider: string;\n error?: string;\n}> {\n const trimmedQuery = (query || \"\").trim();\n if (!trimmedQuery) {\n return {\n error: \"La requête de recherche est vide.\",\n provider: \"you.com\",\n query: \"\",\n results: [],\n success: false,\n };\n }\n\n const keys = getYouApiKeys();\n let lastError: any = null;\n\n // 1. Tentative avec les clés You.com (POST https://ydc-index.io/v1/search conforme à l'API You.com)\n if (keys.length > 0) {\n const endpoints = [\n \"https://ydc-index.io/v1/search\",\n \"https://api.ydc-index.io/v1/search\",\n \"https://api.ydc-index.io/search\",\n ];\n\n for (let i = 0; i < keys.length; i++) {\n const key = keys[i];\n\n for (const endpointUrl of endpoints) {\n try {\n const res = await fetch(endpointUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-API-Key\": key,\n \"Accept\": \"application/json\",\n \"User-Agent\": \"mAI-WebSearch/1.0\",\n },\n body: JSON.stringify({\n query: trimmedQuery,\n count,\n }),\n });\n\n if (res.ok) {\n const data: any = await res.json().catch(() => null);\n if (data) {\n // Support complet des structures You.com v1 :\n // 1. data.results.web & data.results.news (Format officiel v1)\n // 2. data.results (Array direct)\n // 3. data.hits / data.web.results\n let rawHits: any[] = [];\n if (data.results && typeof data.results === \"object\") {\n if (Array.isArray(data.results)) {\n rawHits = data.results;\n } else {\n if (Array.isArray(data.results.web)) {\n rawHits.push(...data.results.web);\n }\n if (Array.isArray(data.results.news)) {\n rawHits.push(...data.results.news);\n }\n }\n } else if (Array.isArray(data.hits)) {\n rawHits = data.hits;\n } else if (Array.isArray(data.web?.results)) {\n rawHits = data.web.results;\n }\n\n const formattedResults = rawHits.map((hit: any) => {\n let snippet = \"\";\n if (hit.contents?.markdown) {\n snippet = hit.contents.markdown.slice(0, 300);\n } else if (\n hit.snippets && Array.isArray(hit.snippets) &&\n hit.snippets.length > 0\n ) {\n snippet = hit.snippets.join(\" ... \");\n } else {\n snippet = hit.description || hit.snippet || hit.text || \"\";\n }\n\n return {\n snippet: snippet.trim(),\n title: hit.title || hit.name || \"Sans titre\",\n url: hit.url || hit.link || \"\",\n };\n }).filter((item: any) => item.title && item.url);\n\n if (formattedResults.length > 0) {\n return {\n provider: \"you.com\",\n query: trimmedQuery,\n results: formattedResults,\n success: true,\n };\n }\n }\n }\n\n const status = res.status;\n const errBody = await res.text().catch(() => \"\");\n lastError = new Error(`HTTP ${status}: ${errBody}`);\n } catch (err: any) {\n lastError = err;\n }\n }\n }\n }\n\n // 2. Fallback automatique multi-moteurs (DDG Lite / Instant / Wikipedia)\n const fallbackResults = await fallbackWebSearch(trimmedQuery, count);\n if (fallbackResults.length > 0) {\n return {\n provider: \"duckduckgo (fallback)\",\n query: trimmedQuery,\n results: fallbackResults,\n success: true,\n };\n }\n\n return {\n error: keys.length === 0\n ? \"Aucune clé You.com configurée et les services de fallback sont temporairement inaccessibles.\"\n : `Échec de la recherche (${lastError?.message || \"Erreur\"}).`,\n provider: \"you.com\",\n query: trimmedQuery,\n results: [],\n success: false,\n };\n}\n\n/**\n * Définition standard de l'outil web_search pour les IA compatibles Tool Calling.\n */\nexport const WEB_SEARCH_TOOL = {\n function: {\n description:\n \"Recherche sur le Web des informations récentes et actualisées en temps réel via You.com.\",\n name: \"web_search\",\n parameters: {\n properties: {\n query: {\n description: \"La requête de recherche textuelle complète et précise.\",\n type: \"string\",\n },\n },\n required: [\"query\"],\n type: \"object\",\n },\n },\n type: \"function\" as const,\n};\n\n/**\n * Vérifie si la recherche web doit être activée ou désactivée sur un appel API.\n */\nexport function isWebSearchEnabled(body: any, reqHeaders?: Headers): boolean {\n if (body && (body.web_search === false || body.enable_web_search === false)) {\n return false;\n }\n if (reqHeaders) {\n const headerVal = reqHeaders.get(\"x-web-search\") ||\n reqHeaders.get(\"X-Web-Search\");\n if (headerVal && headerVal.toLowerCase() === \"false\") {\n return false;\n }\n const disableHeader = reqHeaders.get(\"x-disable-web-search\") ||\n reqHeaders.get(\"X-Disable-Web-Search\");\n if (\n disableHeader &&\n (disableHeader.toLowerCase() === \"true\" || disableHeader === \"1\")\n ) {\n return false;\n }\n }\n return true;\n}\n\n/**\n * Enregistrement des routes de recherche Web dans Hono.\n */\nexport function registerWebRoutes(app: Hono) {\n // POST /v1/web/search\n app.post(\"/v1/web/search\", async (c) => {\n try {\n const body = await c.req.json().catch(() => ({}));\n const query = body.query || body.q;\n const count = typeof body.count === \"number\" ? body.count : 5;\n\n if (!query || typeof query !== \"string\") {\n return c.json({ error: \"Le paramètre 'query' est obligatoire.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(query, count);\n return c.json(searchResult, 200);\n } catch (err: any) {\n return c.json({\n error: \"Erreur serveur lors de la recherche Web.\",\n details: err?.message,\n }, 500);\n }\n });\n\n // GET /v1/web/search\n app.get(\"/v1/web/search\", async (c) => {\n try {\n const query = c.req.query(\"q\") || c.req.query(\"query\");\n const countParam = c.req.query(\"count\");\n const count = countParam ? Number.parseInt(countParam, 10) : 5;\n\n if (!query) {\n return c.json({ error: \"Paramètre 'q' ou 'query' manquant.\" }, 400);\n }\n\n const searchResult = await executeWebSearch(\n query,\n isNaN(count) ? 5 : count,\n );\n return c.json(searchResult, 200);\n } catch (err: any) {\n return c.json({\n error: \"Erreur serveur lors de la recherche Web.\",\n details: err?.message,\n }, 500);\n }\n });\n}",[213],"d805082b-ac86-48fc-a2e4-1ce12da4c8b8","vibe.ts","43a78234-a6ce-11f1-8de8-1607ee4eb77e",305,["D",1789229562093],11,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — API ADAPTER (vibe.ts)\n * Root orchestrator mounting all modular Vibe & mAI sub-routes\n * Compatible with https://mai.val.run (/v1/, /vibe/, /api/vibe/)\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { createRegisterMulti } from \"./vibe-common.ts\";\nimport { registerVibePostsRoutes } from \"./vibe-posts.ts\";\nimport { registerVibeFeedRoutes } from \"./vibe-feed.ts\";\nimport { registerVibeUsersRoutes } from \"./vibe-users.ts\";\nimport { registerVibeDMsRoutes } from \"./vibe-dms.ts\";\nimport { registerVibeSettingsRoutes } from \"./vibe-settings.ts\";\nimport { registerVibeMAIRoutes } from \"./vibe-mai.ts\";\nimport { registerVibeCircleRoutes } from \"./vibe-circle.ts\";\nimport { registerVibeBooksRoutes } from \"./vibe-books.ts\";\n\n// Re-export core classes & types for external modules and tests\nexport {\n type FeedTunerWeights,\n HybridRecommender,\n type PostCandidate,\n type RecommendationSignal,\n} from \"./vibe-recommender.ts\";\nexport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\nexport { registerVibePostsRoutes } from \"./vibe-posts.ts\";\nexport { registerVibeFeedRoutes } from \"./vibe-feed.ts\";\nexport { registerVibeUsersRoutes } from \"./vibe-users.ts\";\nexport { registerVibeDMsRoutes } from \"./vibe-dms.ts\";\nexport { registerVibeSettingsRoutes } from \"./vibe-settings.ts\";\nexport { registerVibeMAIRoutes } from \"./vibe-mai.ts\";\nexport { registerVibeBooksRoutes } from \"./vibe-books.ts\";\n\n/**\n * Registers all Vibe Social Network and mAI Engine routes on the main Hono application\n */\nexport function registerVibeRoutes(app: Hono) {\n const registerMulti = createRegisterMulti(app);\n\n // Mount modular route domains\n // Feed avant Posts : l'ordre d'enregistrement fait foi dans le routeur Hono,\n // la route statique /v1/posts/top (feed) doit primer sur /v1/posts/:id (posts).\n registerVibeFeedRoutes(app, registerMulti);\n registerVibePostsRoutes(app, registerMulti);\n registerVibeUsersRoutes(app, registerMulti);\n registerVibeDMsRoutes(app, registerMulti);\n registerVibeSettingsRoutes(app, registerMulti);\n registerVibeMAIRoutes(app, registerMulti);\n registerVibeCircleRoutes(app, registerMulti);\n registerVibeBooksRoutes(app, registerMulti);\n}",[417],"454c4318-7824-4fee-a02f-997a406bafeb","vibe-users.ts","83b18454-a6e4-11f1-b3bb-1607ee4eb77e",309,["D",1789229641719],13,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — USERS & PROFILES (vibe-users.ts)\n * User authentication, profile querying, avatar upload, follow graph & search\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierDailyImageLimit,\n getTierMaiTokenLimit,\n getWeekData,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { selectStorageNode, uploadWithFallback } from \"./storage.ts\";\nimport {\n attachBookRefs,\n attachPollsAndCollabs,\n attachQuotedPosts,\n ensureProfilePinnedPostsTable,\n publishDuePosts,\n} from \"./vibe-posts-core.ts\";\nimport { ensureCircleTable } from \"./vibe-circle.ts\";\n\nconst MAX_INTERESTS = 5;\nconst MAX_INTEREST_LENGTH = 30;\nconst MAX_BIO_LENGTH = 2000;\nconst MAX_WEBSITE_LENGTH = 255;\nconst MAX_LOCATION_LENGTH = 100;\n\nexport function registerVibeUsersRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1. CURRENT USER PROFILE & QUOTAS VIA JWT\n const handleMe = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(\n payload.sub || (payload as any).id || (payload as any).userId,\n );\n\n if (!userId || isNaN(userId)) {\n return c.json({ error: \"Jeton JWT invalide.\" }, 401);\n }\n\n const sql = getDb();\n const userRows = await sql`\n SELECT u.id, u.username, u.email, u.tier, u.avatar_url,\n COALESCE(u.created_at, NOW()) as created_at,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.bio, pr.banner_url, pr.website, pr.location, pr.interests, pr.followers_count, pr.following_count, pr.posts_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE u.id = ${userId}\n LIMIT 1\n `;\n\n if (userRows.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const row = userRows[0];\n const { weekStartStr, nextResetIso } = getWeekData();\n const [usageRows, imgRows] = await Promise.all([\n sql`SELECT COALESCE(SUM(tokens_used), 0) as tokens FROM weekly_usage WHERE user_id = ${userId} AND week_start = ${weekStartStr}::date`,\n sql`SELECT COALESCE(images_generated, 0) as images FROM daily_image_usage WHERE user_id = ${userId} AND usage_date = CURRENT_DATE`,\n ]);\n\n const tier = row.tier || \"Free\";\n const tokenLimit = getTierMaiTokenLimit(tier);\n const imageLimit = getTierDailyImageLimit(tier);\n const tokensUsed = Number(usageRows[0]?.tokens || 0);\n const imagesUsed = Number(imgRows[0]?.images || 0);\n\n const quotas = {\n tier,\n weeklyTokens: {\n used: tokensUsed,\n limit: tokenLimit,\n percent: Math.min(100, Math.round((tokensUsed / tokenLimit) * 100)),\n },\n dailyImages: {\n used: imagesUsed,\n limit: imageLimit,\n percent: Math.min(100, Math.round((imagesUsed / imageLimit) * 100)),\n },\n resetAt: nextResetIso,\n };\n\n return c.json({\n user: {\n id: row.id,\n username: row.username,\n email: row.email,\n tier: row.tier,\n avatar_url: row.avatar_url,\n is_verified: Boolean(row.is_verified),\n created_at: row.created_at,\n },\n profile: {\n id: row.id,\n username: row.username,\n displayName: row.display_name || row.username,\n bio: row.bio || \"\",\n avatarUrl: row.avatar_url,\n bannerUrl: row.banner_url,\n website: row.website || \"\",\n location: row.location || \"\",\n interests: row.interests || [],\n followersCount: row.followers_count || 0,\n followingCount: row.following_count || 0,\n postsCount: row.posts_count || 0,\n is_verified: Boolean(row.is_verified),\n },\n quotas,\n });\n } catch (err: any) {\n console.error(\"[Me Handler Error]:\", err);\n return c.json(\n { error: err.message || \"Session expirée ou invalide.\" },\n 401,\n );\n }\n };\n\n registerMulti(\"get\", [\"/api/vibe/me\", \"/vibe/me\", \"/v1/me\", \"/me\"], handleMe);\n\n // 2. SUGGESTED USERS\n const handleSuggestedUsers = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const sql = getDb();\n const rows = await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n COALESCE(pr.display_name, u.username) as display_name,\n COALESCE(pr.avatar_url, u.avatar_url) as avatar_url,\n COALESCE(pr.bio, 'Membre Vibe') as bio,\n COALESCE(pr.followers_count, 0) as followers_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE (${currentUserId ? sql`u.id != ${currentUserId}` : true})\n ORDER BY pr.followers_count DESC, u.id DESC\n LIMIT 5\n `;\n\n return c.json({ users: rows });\n } catch {\n return c.json({ users: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/suggested\",\n \"/vibe/users/suggested\",\n \"/v1/users/suggested\",\n \"/users/suggested\",\n ], handleSuggestedUsers);\n\n // 2bis. TOP VIBERS — meilleurs comptes par abonnés (Explorer)\n const handleTopVibers = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const limit = Math.min(\n 20,\n Math.max(1, Number(c.req.query(\"limit\") || 5)),\n );\n\n const sql = getDb();\n const rows = await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n COALESCE(pr.display_name, u.username) as display_name,\n COALESCE(pr.avatar_url, u.avatar_url) as avatar_url,\n COALESCE(pr.bio, 'Membre Vibe') as bio,\n COALESCE(pr.followers_count, 0) as followers_count,\n ${\n currentUserId\n ? sql`EXISTS (SELECT 1 FROM follows f WHERE f.follower_id = ${currentUserId} AND f.following_id = u.id)`\n : sql`FALSE`\n } as is_following\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE (${currentUserId ? sql`u.id != ${currentUserId}` : true})\n AND LOWER(u.username) NOT IN ('bot', 'mai')\n ORDER BY COALESCE(pr.followers_count, 0) DESC, u.id DESC\n LIMIT ${limit}\n `;\n\n return c.json({ users: rows });\n } catch {\n return c.json({ users: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/top\",\n \"/vibe/users/top\",\n \"/v1/users/top\",\n \"/users/top\",\n ], handleTopVibers);\n\n // 2ter. ABONNÉS / ABONNEMENTS D'UN PROFIL (listes paginées, boutons Suivre)\n const handleFollowList = async (c: any, kind: \"followers\" | \"following\") => {\n try {\n const username = (c.req.param(\"username\") || \"\").replace(/^@/, \"\")\n .toLowerCase().trim();\n if (!username) return c.json({ users: [], has_more: false });\n let currentUserId: number | null = null;\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n const limit = Math.min(\n 100,\n Math.max(1, Number(c.req.query(\"limit\") || 20)),\n );\n const offset = Math.max(0, Number(c.req.query(\"offset\") || 0));\n\n const sql = getDb();\n const target =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${username} LIMIT 1`;\n if (target.length === 0) {\n return c.json({ error: \"Profil introuvable.\" }, 404);\n }\n const targetId = Number(target[0].id);\n\n const users = kind === \"followers\"\n ? await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n COALESCE(pr.display_name, u.username) as display_name,\n COALESCE(pr.avatar_url, u.avatar_url) as avatar_url,\n COALESCE(pr.followers_count, 0) as followers_count,\n ${\n currentUserId\n ? sql`EXISTS (SELECT 1 FROM follows f2 WHERE f2.follower_id = ${currentUserId} AND f2.following_id = u.id)`\n : sql`FALSE`\n } as is_following\n FROM follows f\n JOIN users u ON u.id = f.follower_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE f.following_id = ${targetId}\n ORDER BY f.created_at DESC\n LIMIT ${limit + 1} OFFSET ${offset}\n `\n : await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n COALESCE(pr.display_name, u.username) as display_name,\n COALESCE(pr.avatar_url, u.avatar_url) as avatar_url,\n COALESCE(pr.followers_count, 0) as followers_count,\n ${\n currentUserId\n ? sql`EXISTS (SELECT 1 FROM follows f2 WHERE f2.follower_id = ${currentUserId} AND f2.following_id = u.id)`\n : sql`FALSE`\n } as is_following\n FROM follows f\n JOIN users u ON u.id = f.following_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE f.follower_id = ${targetId}\n ORDER BY f.created_at DESC\n LIMIT ${limit + 1} OFFSET ${offset}\n `;\n\n const hasMore = users.length > limit;\n return c.json({ users: users.slice(0, limit), has_more: hasMore });\n } catch {\n return c.json({ users: [], has_more: false });\n }\n };\n\n const handleProfileFollowers = (c: any) => handleFollowList(c, \"followers\");\n const handleProfileFollowing = (c: any) => handleFollowList(c, \"following\");\n\n registerMulti(\"get\", [\n \"/api/vibe/profiles/:username/followers\",\n \"/vibe/profiles/:username/followers\",\n \"/v1/profiles/:username/followers\",\n \"/profiles/:username/followers\",\n ], handleProfileFollowers);\n registerMulti(\"get\", [\n \"/api/vibe/profiles/:username/following\",\n \"/vibe/profiles/:username/following\",\n \"/v1/profiles/:username/following\",\n \"/profiles/:username/following\",\n ], handleProfileFollowing);\n\n // 3. SEARCH USERS\n const handleSearchUsers = async (c: any) => {\n try {\n const q = (c.req.query(\"q\") || \"\").trim().toLowerCase();\n if (!q || q.length < 1) return c.json({ users: [] });\n\n const sql = getDb();\n const users = await sql`\n SELECT\n u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.avatar_url, pr.bio,\n pr.followers_count, pr.posts_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE\n LOWER(u.username) LIKE ${`%${q}%`}\n OR LOWER(COALESCE(pr.display_name, '')) LIKE ${`%${q}%`}\n ORDER BY\n CASE WHEN LOWER(u.username) = ${q} THEN 0\n WHEN LOWER(u.username) LIKE ${`${q}%`} THEN 1\n ELSE 2 END,\n COALESCE(pr.followers_count, 0) DESC\n LIMIT 10\n `;\n return c.json({ users });\n } catch {\n return c.json({ users: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/search/users\",\n \"/vibe/search/users\",\n \"/v1/search/users\",\n ], handleSearchUsers);\n\n // 3b. ONBOARDING SUGGESTIONS (10 comptes populaires non suivis)\n const handleOnboardingSuggestions = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n const users = await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.avatar_url, pr.bio, pr.followers_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE u.id <> ${userId}\n AND u.id NOT IN (SELECT following_id FROM follows WHERE follower_id = ${userId})\n AND LOWER(u.username) NOT IN ('bot', 'mai')\n ORDER BY COALESCE(pr.followers_count, 0) DESC\n LIMIT 10\n `.catch(() => []);\n return c.json({ users });\n } catch (err: any) {\n return c.json({ error: \"Erreur suggestions onboarding.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/onboarding/suggestions\",\n \"/vibe/onboarding/suggestions\",\n \"/v1/onboarding/suggestions\",\n \"/onboarding/suggestions\",\n ], handleOnboardingSuggestions);\n\n // 3c. ONBOARDING COMPLETE\n const handleOnboardingComplete = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS onboarding_completed BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`\n INSERT INTO user_settings (user_id, onboarding_completed)\n VALUES (${userId}, TRUE)\n ON CONFLICT (user_id) DO UPDATE SET onboarding_completed = TRUE, updated_at = NOW()\n `;\n return c.json({ success: true });\n } catch (err: any) {\n return c.json({ error: \"Erreur validation onboarding.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/onboarding/complete\",\n \"/vibe/onboarding/complete\",\n \"/v1/onboarding/complete\",\n \"/onboarding/complete\",\n ], handleOnboardingComplete);\n\n // 4. GET PROFILE\n const handleGetProfile = async (c: any) => {\n try {\n const rawParam = c.req.param(\"username\") || \"\";\n const username = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n const sql = getDb();\n\n let currentUserId: number | null = null;\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const userRows = await sql`\n SELECT u.id, u.username, u.email, u.tier, u.avatar_url,\n COALESCE(u.created_at, NOW()) as created_at,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.bio, pr.banner_url, pr.website, pr.location, pr.interests, pr.followers_count, pr.following_count, pr.posts_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE LOWER(u.username) = ${username}\n LIMIT 1\n `;\n\n if (userRows.length === 0) {\n return c.json({ error: \"Profil introuvable.\" }, 404);\n }\n\n const row = userRows[0];\n let isFollowing = false;\n let blockedByMe = false;\n let blockedMe = false;\n let mutedByMe = false;\n // Coche bleue masquée par le propriétaire (colonne ajoutée paresseusement : requête tolérante)\n let hideVerifiedBadge = false;\n try {\n const settingsRows = await sql`\n SELECT hide_verified_badge FROM user_settings WHERE user_id = ${row.id} LIMIT 1\n `;\n hideVerifiedBadge = Boolean(settingsRows[0]?.hide_verified_badge);\n } catch {}\n if (currentUserId && currentUserId !== Number(row.id)) {\n try {\n const followRows = await sql`\n SELECT 1 FROM follows WHERE follower_id = ${currentUserId} AND following_id = ${row.id} LIMIT 1\n `;\n isFollowing = followRows.length > 0;\n } catch {}\n // Statuts sociaux pour l'UI (bannière de blocage, option « Masquer »)\n try {\n const socialRows = await sql`\n SELECT\n EXISTS (SELECT 1 FROM blocked_users WHERE user_id = ${currentUserId} AND blocked_user_id = ${row.id}) AS blocked_by_me,\n EXISTS (SELECT 1 FROM blocked_users WHERE user_id = ${row.id} AND blocked_user_id = ${currentUserId}) AS blocked_me,\n EXISTS (SELECT 1 FROM muted_users WHERE user_id = ${currentUserId} AND muted_user_id = ${row.id}) AS muted_by_me\n `;\n blockedByMe = Boolean(socialRows[0]?.blocked_by_me);\n blockedMe = Boolean(socialRows[0]?.blocked_me);\n mutedByMe = Boolean(socialRows[0]?.muted_by_me);\n } catch {}\n }\n\n let posts: any[] = [];\n try {\n // Publication paresseuse des vibes planifiées arrivées à échéance\n await publishDuePosts();\n await ensureCircleTable().catch(() => {});\n await ensureProfilePinnedPostsTable().catch(() => {});\n posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.author_id = ${row.id}\n AND (COALESCE(p.status, 'published') = 'published' OR ${currentUserId}::bigint = p.author_id)\n AND (\n p.visibility = 'public'\n OR ${\n currentUserId\n ? sql`p.author_id = ${currentUserId}\n OR (p.visibility = 'followers' AND EXISTS (SELECT 1 FROM follows f3 WHERE f3.follower_id = ${currentUserId} AND f3.following_id = p.author_id))\n OR (p.visibility = 'circle' AND EXISTS (SELECT 1 FROM circle_members cm3 WHERE cm3.user_id = p.author_id AND cm3.member_user_id = ${currentUserId}))`\n : sql`FALSE`\n }\n )\n ORDER BY p.is_pinned DESC, p.published_at DESC\n LIMIT 40\n `;\n\n // Posts d'autres comptes mis en avant sur ce profil (max 2 au total,\n // limite contrôlée côté serveur au moment de l'épinglage)\n try {\n const foreignPinned = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n TRUE AS pinned_by_profile,\n pu.username AS pinned_by_username,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked\n FROM profile_pinned_posts ppp\n JOIN posts p ON p.id = ppp.post_id\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n LEFT JOIN users pu ON pu.id = ppp.user_id\n WHERE ppp.user_id = ${row.id}\n AND p.author_id <> ${row.id}\n AND p.visibility = 'public'\n AND COALESCE(p.status, 'published') = 'published'\n ORDER BY ppp.created_at DESC\n LIMIT 2\n `;\n if (foreignPinned.length > 0) {\n const ownPinned = posts.filter((p) => p.is_pinned);\n const rest = posts.filter((p) => !p.is_pinned);\n posts = [...ownPinned, ...foreignPinned, ...rest].slice(0, 40);\n }\n } catch {}\n\n // Charger tous les médias en une seule requête (évite le N+1)\n if (posts.length > 0) {\n const postIds = posts.map((p) => p.id);\n const allMedia = await sql`\n SELECT post_id, url, media_type, alt_text\n FROM media_assets\n WHERE post_id = ANY(${postIds}::uuid[])\n `;\n const mediaByPost = new Map<string, any[]>();\n for (const m of allMedia) {\n const key = String(m.post_id);\n if (!mediaByPost.has(key)) mediaByPost.set(key, []);\n mediaByPost.get(key)!.push({\n url: m.url,\n media_type: m.media_type,\n alt_text: m.alt_text,\n });\n }\n for (const p of posts) {\n p.media_assets = mediaByPost.get(String(p.id)) || [];\n }\n }\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n } catch (postErr: any) {\n console.error(\"[Get Profile] Erreur chargement posts:\", postErr);\n posts = [];\n }\n\n return c.json({\n profile: {\n id: row.id,\n username: row.username,\n tier: row.tier || \"Free\",\n displayName: row.display_name || row.username,\n bio: row.bio || \"\",\n avatarUrl: row.avatar_url,\n bannerUrl: row.banner_url,\n website: row.website || \"\",\n location: row.location || \"\",\n interests: row.interests || [],\n followersCount: row.followers_count || 0,\n followingCount: row.following_count || 0,\n postsCount: row.posts_count || posts.length,\n is_verified: Boolean(row.is_verified),\n hide_verified_badge: hideVerifiedBadge,\n isFollowing,\n blocked_by_me: blockedByMe,\n blocked_me: blockedMe,\n muted_by_me: mutedByMe,\n },\n posts,\n });\n } catch {\n return c.json({ error: \"Erreur profil.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/profiles/:username\",\n \"/vibe/profiles/:username\",\n \"/v1/profiles/:username\",\n \"/profiles/:username\",\n \"/profile/:username\",\n ], handleGetProfile);\n\n // 4b. GET USER LIKED POSTS\n const handleGetUserLikedPosts = async (c: any) => {\n try {\n const rawParam = c.req.param(\"username\") || \"\";\n const username = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n const sql = getDb();\n\n let currentUserId: number | null = null;\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const userRows = await sql`\n SELECT id FROM users WHERE LOWER(username) = ${username} LIMIT 1\n `;\n if (userRows.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n const targetUserId = userRows[0].id;\n\n const posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked\n FROM post_interactions pi\n JOIN posts p ON p.id = pi.post_id\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE pi.user_id = ${targetUserId} AND pi.interaction_type = 'like' AND p.visibility = 'public'\n ORDER BY pi.created_at DESC\n LIMIT 40\n `;\n\n if (posts.length > 0) {\n const postIds = posts.map((p) => p.id);\n const allMedia = await sql`\n SELECT post_id, url, media_type, alt_text\n FROM media_assets\n WHERE post_id = ANY(${postIds}::uuid[])\n `;\n const mediaByPost = new Map<string, any[]>();\n for (const m of allMedia) {\n const key = String(m.post_id);\n if (!mediaByPost.has(key)) mediaByPost.set(key, []);\n mediaByPost.get(key)!.push({\n url: m.url,\n media_type: m.media_type,\n alt_text: m.alt_text,\n });\n }\n for (const p of posts) {\n p.media_assets = mediaByPost.get(String(p.id)) || [];\n }\n }\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n\n return c.json({ posts });\n } catch (err: any) {\n console.error(\"[Get User Liked Posts] Erreur:\", err);\n return c.json({ error: \"Erreur récupération des likes.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/profiles/:username/likes\",\n \"/vibe/profiles/:username/likes\",\n \"/v1/profiles/:username/likes\",\n \"/profiles/:username/likes\",\n ], handleGetUserLikedPosts);\n\n // 5. UPDATE PROFILE\n const handleUpdateProfile = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json();\n const {\n username,\n displayName,\n bio,\n interests,\n avatarUrl,\n bannerUrl,\n website,\n location,\n } = body;\n const sql = getDb();\n\n // Vérifier et mettre à jour le nom d'utilisateur avec vérification stricte de non-duplication\n if (username !== undefined && username !== null) {\n const rawUser = String(username).trim();\n if (rawUser) {\n const cleanUser = rawUser.toLowerCase().replace(/^@/, \"\").trim();\n if (!/^[a-z0-9_]{2,30}$/.test(cleanUser)) {\n return c.json(\n {\n error:\n \"Le nom d'utilisateur doit comporter entre 2 et 30 caractères (lettres minuscules, chiffres, _).\",\n },\n 400,\n );\n }\n const taken = await sql`\n SELECT id FROM users\n WHERE LOWER(username) = ${cleanUser}\n AND id::text != ${String(userId)}\n LIMIT 1\n `;\n if (taken.length > 0) {\n return c.json({\n error: \"Ce nom d'utilisateur est déjà pris par un autre compte.\",\n }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUser} WHERE id::text = ${\n String(userId)\n }`;\n }\n }\n\n if (avatarUrl) {\n await sql`UPDATE users SET avatar_url = ${avatarUrl} WHERE id = ${userId}`;\n }\n\n // Écriture réelle des champs fournis (les champs vides sont bien enregistrés\n // comme vides au lieu d'être ignorés par l'ancien COALESCE).\n const nextDisplayName = displayName !== undefined\n ? (displayName || null)\n : undefined;\n const rawBio = bio !== undefined ? String(bio) : undefined;\n if (rawBio !== undefined && rawBio.length > MAX_BIO_LENGTH) {\n return c.json({\n error: `La biographie est limitée à ${MAX_BIO_LENGTH} caractères.`,\n }, 400);\n }\n const nextBio = rawBio !== undefined ? (rawBio || null) : undefined;\n\n // Centres d'intérêt : tags normalisés (trim, sans #, dédupliqués, max 5×30).\n // Un format invalide renvoie 400 au lieu d'écraser silencieusement la liste.\n let nextInterests: string[] | undefined;\n if (interests !== undefined) {\n if (!Array.isArray(interests)) {\n return c.json(\n { error: \"Format des centres d'intérêt invalide.\" },\n 400,\n );\n }\n const cleaned: string[] = [];\n const seen = new Set<string>();\n for (const raw of interests) {\n if (typeof raw !== \"string\") continue;\n const tag = raw.trim().replace(/^#+/, \"\").trim();\n if (!tag) continue;\n if (tag.length > MAX_INTEREST_LENGTH) {\n return c.json(\n {\n error:\n `Chaque centre d'intérêt est limité à ${MAX_INTEREST_LENGTH} caractères.`,\n },\n 400,\n );\n }\n const key = tag.toLowerCase();\n if (seen.has(key)) continue;\n seen.add(key);\n cleaned.push(tag);\n }\n if (cleaned.length > MAX_INTERESTS) {\n return c.json({\n error: `Maximum ${MAX_INTERESTS} centres d'intérêt.`,\n }, 400);\n }\n nextInterests = cleaned;\n }\n\n const nextAvatarUrl = avatarUrl !== undefined\n ? (avatarUrl || null)\n : undefined;\n const nextBannerUrl = bannerUrl !== undefined\n ? (bannerUrl || null)\n : undefined;\n\n // Site web : « https:// » ajouté si absent, validé par URL, vide → null\n let nextWebsite: string | null | undefined;\n if (website !== undefined) {\n const rawWebsite = String(website).trim();\n if (!rawWebsite) {\n nextWebsite = null;\n } else {\n const withScheme = /^https?:\\/\\//i.test(rawWebsite)\n ? rawWebsite\n : `https://${rawWebsite}`;\n let valid = false;\n try {\n const parsed = new URL(withScheme);\n valid = Boolean(parsed.hostname && parsed.hostname.includes(\".\"));\n } catch {}\n if (!valid || withScheme.length > MAX_WEBSITE_LENGTH) {\n return c.json({\n error: \"Lien de site invalide (ex. https://exemple.com).\",\n }, 400);\n }\n nextWebsite = withScheme;\n }\n }\n\n // Localisation : texte court, vide → null\n let nextLocation: string | null | undefined;\n if (location !== undefined) {\n const rawLocation = String(location).trim();\n if (rawLocation.length > MAX_LOCATION_LENGTH) {\n return c.json({\n error:\n `La localisation est limitée à ${MAX_LOCATION_LENGTH} caractères.`,\n }, 400);\n }\n nextLocation = rawLocation || null;\n }\n\n await sql`\n INSERT INTO profiles (user_id, display_name, bio, interests, avatar_url, banner_url, website, location)\n VALUES (\n ${userId},\n ${nextDisplayName !== undefined ? nextDisplayName : null},\n ${nextBio !== undefined ? nextBio : null},\n ${nextInterests !== undefined ? (nextInterests as string[]) : []},\n ${nextAvatarUrl !== undefined ? nextAvatarUrl : null},\n ${nextBannerUrl !== undefined ? nextBannerUrl : null},\n ${nextWebsite !== undefined ? nextWebsite : null},\n ${nextLocation !== undefined ? nextLocation : null}\n )\n ON CONFLICT (user_id)\n DO UPDATE SET\n display_name = ${\n nextDisplayName !== undefined\n ? nextDisplayName\n : sql`profiles.display_name`\n },\n bio = ${nextBio !== undefined ? nextBio : sql`profiles.bio`},\n interests = ${\n nextInterests !== undefined\n ? (nextInterests as string[])\n : sql`profiles.interests`\n },\n avatar_url = ${\n nextAvatarUrl !== undefined ? nextAvatarUrl : sql`profiles.avatar_url`\n },\n banner_url = ${\n nextBannerUrl !== undefined ? nextBannerUrl : sql`profiles.banner_url`\n },\n website = ${\n nextWebsite !== undefined ? nextWebsite : sql`profiles.website`\n },\n location = ${\n nextLocation !== undefined ? nextLocation : sql`profiles.location`\n },\n updated_at = NOW()\n `;\n\n // Renvoyer le profil à jour (avec le username potentiellement modifié)\n const updated = await sql`\n SELECT u.username, u.avatar_url,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.bio, pr.banner_url, pr.website, pr.location, pr.interests, pr.followers_count, pr.following_count, pr.posts_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE u.id::text = ${String(userId)}\n LIMIT 1\n `;\n const r = updated[0] || {};\n\n return c.json({\n success: true,\n message: \"Profil mis à jour.\",\n profile: {\n username: r.username,\n displayName: r.display_name || r.username,\n bio: r.bio || \"\",\n avatarUrl: r.avatar_url,\n bannerUrl: r.banner_url,\n website: r.website || \"\",\n location: r.location || \"\",\n interests: r.interests || [],\n followersCount: r.followers_count || 0,\n followingCount: r.following_count || 0,\n postsCount: r.posts_count || 0,\n is_verified: Boolean(r.is_verified),\n },\n });\n } catch (err: any) {\n console.error(\"[Update Profile Error]:\", err);\n return c.json({ error: \"Erreur mise à jour profil.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/profile/update\",\n \"/vibe/profile/update\",\n \"/v1/profile/update\",\n ], handleUpdateProfile);\n\n // 6. UPDATE AVATAR\n const handleUpdateAvatar = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n\n let avatarUrl = \"\";\n\n try {\n const body = await c.req.parseBody();\n const file = body[\"avatar\"] || body[\"file\"];\n if (file instanceof File && file.size > 0) {\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `avatars/${userId}-${Date.now()}-${cleanFilename}`;\n const primaryNode = selectStorageNode(`avatar-${userId}`);\n const arrayBuffer = await file.arrayBuffer();\n const uploadResult = await uploadWithFallback(\n primaryNode,\n filename,\n arrayBuffer,\n { contentType: file.type || \"image/jpeg\", acl: \"public-read\" },\n );\n if (uploadResult.success) {\n avatarUrl = uploadResult.publicUrl;\n }\n }\n } catch {}\n\n if (!avatarUrl) {\n try {\n const json = await c.req.json();\n avatarUrl = json.avatarUrl || json.avatar_url || \"\";\n } catch {}\n }\n\n if (!avatarUrl) {\n return c.json({ error: \"Fichier ou URL d'avatar requis.\" }, 400);\n }\n\n await sql`UPDATE users SET avatar_url = ${avatarUrl} WHERE id = ${userId}`;\n await sql`\n INSERT INTO profiles (user_id, avatar_url)\n VALUES (${userId}, ${avatarUrl})\n ON CONFLICT (user_id)\n DO UPDATE SET avatar_url = ${avatarUrl}, updated_at = NOW()\n `;\n\n return c.json({\n success: true,\n avatarUrl,\n message: \"Avatar synchronisé avec succès.\",\n });\n } catch (err: any) {\n console.error(\"[Update Avatar Error]:\", err);\n return c.json(\n { error: \"Erreur lors de la mise à jour de l'avatar.\" },\n 500,\n );\n }\n };\n\n // NB : /upload-avatar et /v1/upload-avatar sont gérés par registerStorageRoutes (storage.ts),\n // seule source de vérité pour l'upload d'avatar. Ici on ne garde que /profile/avatar\n // pour la mise à jour via URL JSON (multipart accepté aussi pour compat).\n registerMulti(\"post\", [\n \"/api/vibe/profile/avatar\",\n \"/vibe/profile/avatar\",\n \"/v1/profile/avatar\",\n ], handleUpdateAvatar);\n\n // 7. FOLLOW / UNFOLLOW\n const handleFollow = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const currentUserId = Number(payload.sub || (payload as any).id);\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n\n const sql = getDb();\n const targetUser =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n if (targetUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n const targetId = Number(targetUser[0].id);\n\n if (targetId === currentUserId) {\n return c.json({ error: \"Impossible de se suivre soi-même.\" }, 400);\n }\n\n const existing = await sql`\n SELECT 1 FROM follows WHERE follower_id = ${currentUserId} AND following_id = ${targetId}\n `;\n\n if (existing.length > 0) {\n await sql`DELETE FROM follows WHERE follower_id = ${currentUserId} AND following_id = ${targetId}`;\n await sql`UPDATE profiles SET following_count = GREATEST(0, following_count - 1) WHERE user_id = ${currentUserId}`;\n await sql`UPDATE profiles SET followers_count = GREATEST(0, followers_count - 1) WHERE user_id = ${targetId}`;\n return c.json({ success: true, following: false });\n } else {\n // Blocage (dans un sens ou l'autre) : interdit de s'abonner\n try {\n const blockRows = await sql`\n SELECT 1 FROM blocked_users\n WHERE (user_id = ${currentUserId} AND blocked_user_id = ${targetId})\n OR (user_id = ${targetId} AND blocked_user_id = ${currentUserId})\n LIMIT 1\n `;\n if (blockRows.length > 0) {\n return c.json({\n error: \"Impossible de suivre ce compte : un blocage est actif.\",\n blocked: true,\n }, 403);\n }\n } catch {}\n\n await sql`INSERT INTO follows (follower_id, following_id) VALUES (${currentUserId}, ${targetId})`;\n await sql`UPDATE profiles SET following_count = following_count + 1 WHERE user_id = ${currentUserId}`;\n await sql`UPDATE profiles SET followers_count = followers_count + 1 WHERE user_id = ${targetId}`;\n\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${targetId}, ${currentUserId}, 'follow', 'a commencé à vous suivre')\n `;\n } catch {}\n\n return c.json({ success: true, following: true });\n }\n } catch {\n return c.json({ error: \"Erreur follow.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/profiles/:username/follow\",\n \"/vibe/profiles/:username/follow\",\n \"/v1/profiles/:username/follow\",\n ], handleFollow);\n\n // 7b. POST NOTIFICATIONS SUBSCRIPTION — être notifié des posts d'un compte\n const ensurePostSubscriptionsTable = async (sql: any) => {\n await sql`\n CREATE TABLE IF NOT EXISTS post_subscriptions (\n subscriber_id INTEGER NOT NULL,\n author_id INTEGER NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (subscriber_id, author_id)\n )\n `;\n };\n\n // Statut d'abonnement aux notifications de posts d'un compte\n const handleGetSubscription = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const currentUserId = Number(payload.sub || (payload as any).id);\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n\n const sql = getDb();\n await ensurePostSubscriptionsTable(sql);\n const targetUser =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n if (targetUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const rows = await sql`\n SELECT 1 FROM post_subscriptions\n WHERE subscriber_id = ${currentUserId} AND author_id = ${\n Number(targetUser[0].id)\n }\n `;\n return c.json({ success: true, subscribed: rows.length > 0 });\n } catch (err: any) {\n console.error(\"[vibe-users] Get subscription error:\", err);\n return c.json({ error: \"Erreur lecture abonnement.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/profiles/:username/subscribe\",\n \"/vibe/profiles/:username/subscribe\",\n \"/v1/profiles/:username/subscribe\",\n ], handleGetSubscription);\n\n // Toggle : s'abonner / se désabonner aux notifications de posts\n const handleToggleSubscription = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const currentUserId = Number(payload.sub || (payload as any).id);\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n\n const sql = getDb();\n await ensurePostSubscriptionsTable(sql);\n const targetUser =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n if (targetUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n const targetId = Number(targetUser[0].id);\n\n if (targetId === currentUserId) {\n return c.json(\n { error: \"Impossible de s'abonner à ses propres posts.\" },\n 400,\n );\n }\n\n const existing = await sql`\n SELECT 1 FROM post_subscriptions WHERE subscriber_id = ${currentUserId} AND author_id = ${targetId}\n `;\n\n if (existing.length > 0) {\n await sql`DELETE FROM post_subscriptions WHERE subscriber_id = ${currentUserId} AND author_id = ${targetId}`;\n return c.json({ success: true, subscribed: false });\n } else {\n await sql`INSERT INTO post_subscriptions (subscriber_id, author_id) VALUES (${currentUserId}, ${targetId}) ON CONFLICT DO NOTHING`;\n return c.json({ success: true, subscribed: true });\n }\n } catch (err: any) {\n console.error(\"[vibe-users] Toggle subscription error:\", err);\n return c.json({ error: \"Erreur abonnement.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/profiles/:username/subscribe\",\n \"/vibe/profiles/:username/subscribe\",\n \"/v1/profiles/:username/subscribe\",\n ], handleToggleSubscription);\n\n // 8. MUTE / UNMUTE — masquage silencieux (l'autre compte n'est pas informé)\n // Table créée paresseusement ici + en migration 009 (idempotent).\n let socialTablesReady = false;\n const ensureSocialTables = async () => {\n if (socialTablesReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS muted_users (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n muted_user_id BIGINT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (user_id, muted_user_id)\n )\n `;\n socialTablesReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-users] ensureSocialTables skipped:\",\n (err as any)?.message,\n );\n }\n };\n\n const handleMuteUser = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const currentUserId = Number(payload.sub || (payload as any).id);\n\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n const body = await c.req.json().catch(() => ({} as any));\n const muted = body.muted !== false; // défaut : masquer\n\n await ensureSocialTables();\n const sql = getDb();\n const targetUser =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n if (targetUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n const targetId = Number(targetUser[0].id);\n if (targetId === currentUserId) {\n return c.json({ error: \"Impossible de se masquer soi-même.\" }, 400);\n }\n\n if (muted) {\n await sql`\n INSERT INTO muted_users (user_id, muted_user_id)\n VALUES (${currentUserId}, ${targetId})\n ON CONFLICT (user_id, muted_user_id) DO NOTHING\n `;\n } else {\n await sql`DELETE FROM muted_users WHERE user_id = ${currentUserId} AND muted_user_id = ${targetId}`;\n }\n return c.json({ success: true, muted });\n } catch (err: any) {\n console.error(\"[Mute User Error]:\", err);\n return c.json({ error: \"Erreur lors du masquage du compte.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/users/:username/mute\",\n \"/vibe/users/:username/mute\",\n \"/v1/users/:username/mute\",\n ], handleMuteUser);\n\n const handleListMuted = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const currentUserId = Number(payload.sub || (payload as any).id);\n\n await ensureSocialTables();\n const sql = getDb();\n const rows = await sql`\n SELECT m.id, m.muted_user_id, u.username AS muted_username,\n COALESCE(pr.display_name, u.username) AS muted_display_name,\n COALESCE(pr.avatar_url, u.avatar_url) AS muted_avatar_url,\n m.created_at\n FROM muted_users m\n JOIN users u ON u.id = m.muted_user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE m.user_id = ${currentUserId}\n ORDER BY m.created_at DESC\n `;\n return c.json({ muted: rows });\n } catch (err: any) {\n console.error(\"[List Muted Error]:\", err);\n return c.json({ muted: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/muted\",\n \"/vibe/users/muted\",\n \"/v1/users/muted\",\n ], handleListMuted);\n\n // 9. VISITES PROFIL — tracking + série (isSelf uniquement pour la lecture)\n // Table créée paresseusement ici + migration 017 (idempotent).\n let profileViewsReady = false;\n const ensureProfileViewsTable = async () => {\n if (profileViewsReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS profile_views (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n profile_user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n viewer_id BIGINT REFERENCES users(id) ON DELETE SET NULL,\n source TEXT DEFAULT 'profile',\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_views_profile ON profile_views(profile_user_id, created_at DESC)`;\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_views_viewer ON profile_views(viewer_id, created_at DESC)`;\n profileViewsReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-users] ensureProfileViewsTable skipped:\",\n (err as any)?.message,\n );\n }\n };\n\n const handleTrackProfileView = async (c: any) => {\n try {\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n if (!targetUsername) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n await ensureProfileViewsTable();\n const sql = getDb();\n const targetUser =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n if (targetUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n const targetId = Number(targetUser[0].id);\n let viewerId: number | null = null;\n try {\n const token = extractToken(c.req.raw);\n if (token) {\n const payload = await verifyToken(token);\n viewerId = Number(payload.sub || (payload as any).id) || null;\n }\n } catch {}\n // Pas d'auto-comptage\n if (viewerId && viewerId === targetId) {\n return c.json({ success: true, counted: false });\n }\n if (viewerId && !rateLimit(`pv:${viewerId}:${targetId}`, 1, 60_000)) {\n return c.json({ success: true, counted: false });\n }\n const body = await c.req.json().catch(() => ({} as any));\n const source = String(body?.source || \"profile\").toLowerCase().slice(\n 0,\n 20,\n );\n // Anti-spam : 1 visite / viewer / 24h (anonymes toujours comptés, dédoublonnés côté client)\n if (viewerId) {\n const recent =\n await sql`SELECT 1 FROM profile_views WHERE profile_user_id = ${targetId} AND viewer_id = ${viewerId} AND created_at >= NOW() - INTERVAL '24 hours' LIMIT 1`;\n if (recent.length > 0) return c.json({ success: true, counted: false });\n }\n await sql`INSERT INTO profile_views (profile_user_id, viewer_id, source) VALUES (${targetId}, ${viewerId}, ${source})`;\n return c.json({ success: true, counted: true });\n } catch (err: any) {\n console.warn(\"[Profile View Error]:\", err);\n return c.json({ success: false });\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/profiles/:username/view\",\n \"/vibe/profiles/:username/view\",\n \"/v1/profiles/:username/view\",\n ], handleTrackProfileView);\n\n const handleProfileViewsStats = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const periodParam = String(c.req.query(\"period\") || \"30d\").toLowerCase();\n const periodDays = periodParam === \"7d\"\n ? 7\n : periodParam === \"90d\"\n ? 90\n : periodParam === \"12m\"\n ? 365\n : 30;\n const sinceIso = new Date(Date.now() - periodDays * 86400000)\n .toISOString();\n await ensureProfileViewsTable();\n const sql = getDb();\n const total =\n await sql`SELECT COUNT(*) AS n FROM profile_views WHERE profile_user_id = ${userId} AND created_at >= ${sinceIso}::timestamptz`;\n const rows =\n await sql`SELECT created_at::date AS day, COUNT(*) AS n FROM profile_views WHERE profile_user_id = ${userId} AND created_at >= ${sinceIso}::timestamptz GROUP BY created_at::date ORDER BY day ASC`;\n const byDay = new Map<string, number>();\n for (const r of rows as any[]) {\n byDay.set(String(r.day).slice(0, 10), Number(r.n || 0));\n }\n const series: Array<{ day: string; views: number }> = [];\n for (let i = periodDays - 1; i >= 0; i--) {\n const d = new Date(Date.now() - i * 86400000).toISOString().slice(\n 0,\n 10,\n );\n series.push({ day: d, views: byDay.get(d) || 0 });\n }\n return c.json({\n period: periodParam,\n total: Number((total[0] as any)?.n || 0),\n series,\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur visites profil.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/me/profile-views\",\n \"/vibe/users/me/profile-views\",\n \"/v1/users/me/profile-views\",\n ], handleProfileViewsStats);\n}",[425],"48c26d34-ea7f-4bc2-acf6-518b48a2d4fe","vibe-tools.ts","7929c944-aecb-11f1-9d8b-1607ee4eb77e",321,["D",1789232449909],"/**\n * ============================================================================\n * VIBE — CATALOGUE D'OUTILS mAI (vibe-tools.ts — fichier racine de l'API)\n * Miroir embarqué de lib/tools/index.json (catalogue v1.1.0 du 2026-09-12) :\n * l'API Val Town (mai.val.run) est un projet plat, sans sous-dossier lib/.\n * Expose :\n * - MAI_TOOLS_CATALOG : entrées typées du catalogue\n * - getToolDeclarations() : déclarations function-calling filtrées\n * - isToolEnabledForUser(userId) : lit user_settings.mai_enabled_tools\n * (NULL/[] = tous les outils activés par défaut)\n * Chaque outil délègue l'exécution à MAIAgentFleet (vibe-mai-fleet.ts),\n * qui reste le moteur unique : le catalogue décrit et filtre, il ne duplique pas.\n * ============================================================================\n */\nimport { getDb } from \"./config.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\n\nexport interface MAICatalogTool {\n id: string;\n name: string;\n slash_command: string;\n mention_tag: string;\n description: string;\n icon_name: string;\n category: \"creation\" | \"search\" | \"analysis\" | \"account\";\n sensitive: boolean;\n enabled: boolean;\n file: string;\n}\n\n/** Catalogue officiel des outils mAI (miroir de lib/tools/index.json). */\nexport const MAI_TOOLS_CATALOG: MAICatalogTool[] = [\n {\n id: \"generate_vibe_image\",\n name: \"Génération d'Image\",\n slash_command: \"/image\",\n mention_tag: \"@image\",\n description:\n \"Génère une image IA artistique en haute résolution (ratios 1:1, 16:9, 4:5, 9:16).\",\n icon_name: \"Image\",\n category: \"creation\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/generateImage.ts\",\n },\n {\n id: \"search_web\",\n name: \"Recherche Web en Direct\",\n slash_command: \"/search\",\n mention_tag: \"@search\",\n description:\n \"Recherche sur le web des informations vérifiées et actualités récentes.\",\n icon_name: \"Globe\",\n category: \"search\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/searchWeb.ts\",\n },\n {\n id: \"fact_check\",\n name: \"Vérification des Faits\",\n slash_command: \"/fact_check\",\n mention_tag: \"@fact_check\",\n description:\n \"Analyse et vérifie la véracité d'une information avec sources et indice de confiance.\",\n icon_name: \"ShieldCheck\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/factCheck.ts\",\n },\n {\n id: \"rewrite_post\",\n name: \"Reformulation de Style\",\n slash_command: \"/rewrite\",\n mention_tag: \"@rewrite\",\n description:\n \"Reformule un texte (Viral, Professionnel, Humoristique, Concis, Poétique).\",\n icon_name: \"Sparkles\",\n category: \"creation\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/rewritePost.ts\",\n },\n {\n id: \"translate\",\n name: \"Traduction Instantanée\",\n slash_command: \"/translate\",\n mention_tag: \"@translate\",\n description:\n \"Traduit un texte dans la langue souhaitée via DeepL (repli mAI).\",\n icon_name: \"Languages\",\n category: \"creation\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/translate.ts\",\n },\n {\n id: \"create_post\",\n name: \"Publier un Post\",\n slash_command: \"/publish\",\n mention_tag: \"@publish\",\n description:\n \"Publie directement une publication sur le profil Vibe de l'utilisateur.\",\n icon_name: \"Send\",\n category: \"creation\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/createPost.ts\",\n },\n {\n id: \"delete_post\",\n name: \"Supprimer un Post\",\n slash_command: \"/delete_post\",\n mention_tag: \"@delete_post\",\n description: \"Supprime une publication appartenant à l'utilisateur.\",\n icon_name: \"Trash2\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/deletePost.ts\",\n },\n {\n id: \"suggest_post\",\n name: \"Idées de Posts\",\n slash_command: \"/inspire\",\n mention_tag: \"@inspire\",\n description:\n \"Génère des idées de publications originales sur un thème (sans les publier).\",\n icon_name: \"Lightbulb\",\n category: \"creation\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/suggestPost.ts\",\n },\n {\n id: \"analyze_trends\",\n name: \"Tendances en Temps Réel\",\n slash_command: \"/trends\",\n mention_tag: \"@trends\",\n description:\n \"Détecte les sujets chauds et discussions émergentes de la plateforme.\",\n icon_name: \"TrendingUp\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeTrends.ts\",\n },\n {\n id: \"search_posts\",\n name: \"Recherche de Posts\",\n slash_command: \"/find\",\n mention_tag: \"@find\",\n description:\n \"Recherche des publications Vibe par mot-clé (titre, contenu).\",\n icon_name: \"Search\",\n category: \"search\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/searchPosts.ts\",\n },\n {\n id: \"get_account_stats\",\n name: \"Statistiques du Compte\",\n slash_command: \"/stats\",\n mention_tag: \"@stats\",\n description:\n \"Affiche réputation, nombre de posts, abonnés et forfait du compte.\",\n icon_name: \"BarChart3\",\n category: \"account\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/getAccountStats.ts\",\n },\n {\n id: \"analyze_creator_stats\",\n name: \"Analyse des Statistiques Créateur\",\n slash_command: \"/analyze_stats\",\n mention_tag: \"@analyze_stats\",\n description:\n \"Analyse approfondie des stats créateur (vues, engagement, sources) et produit des recommandations concrètes.\",\n icon_name: \"Activity\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeCreatorStats.ts\",\n },\n {\n id: \"get_post_stats\",\n name: \"Analyser un Post\",\n slash_command: \"/analyze\",\n mention_tag: \"@analyze\",\n description:\n \"Analyse vues, likes, engagement détaillé d'une publication précise.\",\n icon_name: \"Activity\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/getPostStats.ts\",\n },\n {\n id: \"check_quotas\",\n name: \"Vérifier mes Quotas\",\n slash_command: \"/quotas\",\n mention_tag: \"@quotas\",\n description:\n \"Consulte l'état des tokens mAI hebdomadaires et images quotidiennes.\",\n icon_name: \"Zap\",\n category: \"account\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/checkQuotas.ts\",\n },\n {\n id: \"follow_user\",\n name: \"Suivre un Compte\",\n slash_command: \"/follow\",\n mention_tag: \"@follow\",\n description:\n \"Suit (ou ne suit plus) un compte Vibe désigné par son @username.\",\n icon_name: \"UserPlus\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/followUser.ts\",\n },\n {\n id: \"get_notifications\",\n name: \"Mes Notifications\",\n slash_command: \"/notifications\",\n mention_tag: \"@notifications\",\n description:\n \"Affiche les dernières notifications (likes, réponses, follows, DMs).\",\n icon_name: \"Bell\",\n category: \"account\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/getNotifications.ts\",\n },\n {\n id: \"like_post\",\n name: \"Liker un Post\",\n slash_command: \"/like\",\n mention_tag: \"@like\",\n description: \"Like (ou unlike) une publication par son UUID.\",\n icon_name: \"Heart\",\n category: \"account\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/likePost.ts\",\n },\n {\n id: \"send_message\",\n name: \"Envoyer un DM\",\n slash_command: \"/dm\",\n mention_tag: \"@dm\",\n description:\n \"Envoie un message privé à un @username (approbation requise).\",\n icon_name: \"MessageCircle\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/sendMessage.ts\",\n },\n {\n id: \"update_settings\",\n name: \"Modifier mes Paramètres\",\n slash_command: \"/settings\",\n mention_tag: \"@settings\",\n description:\n \"Modifie thème, langue, fil, notifications, mAI (approbation requise).\",\n icon_name: \"Settings\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/updateSettings.ts\",\n },\n {\n id: \"update_profile\",\n name: \"Modifier mon Profil\",\n slash_command: \"/profile\",\n mention_tag: \"@profile\",\n description: \"Met à jour le nom affiché et/ou la bio du profil Vibe.\",\n icon_name: \"User\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/updateProfile.ts\",\n },\n {\n id: \"bookmark_post\",\n name: \"Sauvegarder un Post\",\n slash_command: \"/bookmark\",\n mention_tag: \"@bookmark\",\n description:\n \"Ajoute (ou retire) une publication des favoris de l'utilisateur.\",\n icon_name: \"Bookmark\",\n category: \"account\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/bookmarkPost.ts\",\n },\n {\n id: \"repost_post\",\n name: \"Reposter\",\n slash_command: \"/repost\",\n mention_tag: \"@repost\",\n description:\n \"Republie (ou annule) une publication sur le profil de l'utilisateur.\",\n icon_name: \"Repeat2\",\n category: \"account\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/repostPost.ts\",\n },\n {\n id: \"comment_post\",\n name: \"Commenter un Post\",\n slash_command: \"/comment\",\n mention_tag: \"@comment\",\n description: \"Commente une publication via mAI (approbation requise).\",\n icon_name: \"MessageSquare\",\n category: \"creation\",\n sensitive: true,\n enabled: true,\n file: \"lib/tools/commentPost.ts\",\n },\n {\n id: \"analyze_audience\",\n name: \"Analyse d'Audience\",\n slash_command: \"/audience\",\n mention_tag: \"@audience\",\n description:\n \"Sources de vues, visiteurs uniques, heures de pointe et followers les plus engagés.\",\n icon_name: \"Users\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeAudience.ts\",\n },\n {\n id: \"best_time_to_post\",\n name: \"Meilleur Moment pour Publier\",\n slash_command: \"/besttime\",\n mention_tag: \"@besttime\",\n description:\n \"Meilleures heures et jours de publication selon tes vues et ton engagement réels.\",\n icon_name: \"Clock\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/bestTimeToPost.ts\",\n },\n {\n id: \"compare_periods\",\n name: \"Comparaison de Périodes\",\n slash_command: \"/compare\",\n mention_tag: \"@compare\",\n description:\n \"Croissance vs période précédente : vues, likes, reposts, réponses, followers, visites de profil.\",\n icon_name: \"ArrowLeftRight\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/comparePeriods.ts\",\n },\n {\n id: \"predict_post_performance\",\n name: \"Prévision de Performance\",\n slash_command: \"/predict\",\n mention_tag: \"@predict\",\n description:\n \"Score et estimation de portée/engagement d'un brouillon avant publication.\",\n icon_name: \"Target\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/predictPostPerformance.ts\",\n },\n {\n id: \"analyze_content_performance\",\n name: \"Performance par Format\",\n slash_command: \"/formats\",\n mention_tag: \"@formats\",\n description:\n \"Performance par format (texte, image, sondage, citation) et par hashtag.\",\n icon_name: \"LayoutGrid\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeContentPerformance.ts\",\n },\n {\n id: \"analyze_dm_activity\",\n name: \"Activité de Messagerie\",\n slash_command: \"/dmstats\",\n mention_tag: \"@dmstats\",\n description:\n \"Volumes de messages, conversations actives, temps de réponse moyen, top correspondants.\",\n icon_name: \"MessagesSquare\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeDmActivity.ts\",\n },\n {\n id: \"analyze_book_stats\",\n name: \"Statistiques des Livres\",\n slash_command: \"/bookstats\",\n mention_tag: \"@bookstats\",\n description:\n \"Livres collaboratifs : contributions par membre, activité récente, posts populaires.\",\n icon_name: \"BookOpen\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeBookStats.ts\",\n },\n {\n id: \"analyze_hashtags\",\n name: \"Analyse des Hashtags\",\n slash_command: \"/hashtags\",\n mention_tag: \"@hashtags\",\n description:\n \"Tes hashtags : vues et likes moyens, meilleurs performers, suggestions tendance.\",\n icon_name: \"Hash\",\n category: \"analysis\",\n sensitive: false,\n enabled: true,\n file: \"lib/tools/analyzeHashtags.ts\",\n },\n];\n\n/** Version du catalogue (index.json). */\nexport const MAI_CATALOG_VERSION = \"1.1.0\";\n\n/** Exécuteur générique : délègue l'outil `id` à la flotte MAIAgentFleet. */\nconst fleetExecutor =\n (id: string) => (userId: number | string, args: any): Promise<any> =>\n MAIAgentFleet.executeTool(id, args, userId);\n\n/** Registre d'exécution : id → implémentation. */\nexport const TOOL_EXECUTORS: Record<\n string,\n (userId: number | string, args: any) => Promise<any>\n> = {\n generate_vibe_image: fleetExecutor(\"generate_vibe_image\"),\n search_web: fleetExecutor(\"search_web\"),\n fact_check: fleetExecutor(\"fact_check\"),\n rewrite_post: fleetExecutor(\"rewrite_post\"),\n translate: fleetExecutor(\"translate\"),\n create_post: fleetExecutor(\"create_post\"),\n delete_post: fleetExecutor(\"delete_post\"),\n suggest_post: fleetExecutor(\"suggest_post\"),\n // Ces outils ignorent leurs arguments (ex. flotte : {}, pas args).\n analyze_trends: (userId) =>\n MAIAgentFleet.executeTool(\"analyze_trends\", {}, userId),\n search_posts: fleetExecutor(\"search_posts\"),\n get_account_stats: (userId) =>\n MAIAgentFleet.executeTool(\"get_account_stats\", {}, userId),\n analyze_creator_stats: analyzeCreatorStats,\n get_post_stats: fleetExecutor(\"get_post_stats\"),\n check_quotas: (userId) =>\n MAIAgentFleet.executeTool(\"check_quotas\", {}, userId),\n follow_user: fleetExecutor(\"follow_user\"),\n get_notifications: (userId) =>\n MAIAgentFleet.executeTool(\"get_notifications\", {}, userId),\n like_post: fleetExecutor(\"like_post\"),\n send_message: fleetExecutor(\"send_message\"),\n update_settings: fleetExecutor(\"update_settings\"),\n update_profile: fleetExecutor(\"update_profile\"),\n bookmark_post: fleetExecutor(\"bookmark_post\"),\n repost_post: fleetExecutor(\"repost_post\"),\n comment_post: fleetExecutor(\"comment_post\"),\n analyze_audience: fleetExecutor(\"analyze_audience\"),\n best_time_to_post: fleetExecutor(\"best_time_to_post\"),\n compare_periods: fleetExecutor(\"compare_periods\"),\n predict_post_performance: fleetExecutor(\"predict_post_performance\"),\n analyze_content_performance: fleetExecutor(\"analyze_content_performance\"),\n analyze_dm_activity: fleetExecutor(\"analyze_dm_activity\"),\n analyze_book_stats: fleetExecutor(\"analyze_book_stats\"),\n analyze_hashtags: fleetExecutor(\"analyze_hashtags\"),\n};\n\n/** Cache des outils activés par utilisateur (TTL 60 s, miroir userModelCache). */\nconst userToolsCache = new Map<\n string,\n { ids: string[] | null; expiresAt: number }\n>();\n\n/**\n * Liste des outils activés pour un utilisateur.\n * - user_settings.mai_enabled_tools = NULL ou [] → tous les outils du catalogue\n * - sinon → l'intersection catalogue ∩ liste choisie dans les Paramètres\n */\nexport async function loadUserEnabledTools(\n userId: number | string,\n): Promise<string[]> {\n const key = String(userId);\n const cached = userToolsCache.get(key);\n if (cached && cached.expiresAt > Date.now()) {\n return cached.ids ??\n MAI_TOOLS_CATALOG.filter((t) => t.enabled).map((t) => t.id);\n }\n let enabledIds: string[] | null = null;\n try {\n const sql = getDb();\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_enabled_tools JSONB DEFAULT NULL`\n .catch(() => {});\n const rows =\n await sql`SELECT mai_enabled_tools FROM user_settings WHERE user_id = ${\n Number(key)\n } LIMIT 1`;\n const raw = rows[0]?.mai_enabled_tools;\n if (Array.isArray(raw) && raw.length > 0) {\n const valid = new Set(\n MAI_TOOLS_CATALOG.filter((t) => t.enabled).map((t) => t.id),\n );\n enabledIds = raw.map(String).filter((id) => valid.has(id));\n }\n } catch {}\n userToolsCache.set(key, { ids: enabledIds, expiresAt: Date.now() + 60_000 });\n return enabledIds ??\n MAI_TOOLS_CATALOG.filter((t) => t.enabled).map((t) => t.id);\n}\n\n/** Indique si un outil est activé pour l'utilisateur (défaut : oui). */\nexport async function isToolEnabledForUser(\n userId: number | string,\n toolId: string,\n): Promise<boolean> {\n const enabled = await loadUserEnabledTools(userId);\n return enabled.includes(toolId);\n}\n\n/**\n * Déclarations function-calling filtrées par les outils activés.\n * Utilisée pour la négociation d'outils côté modèle et pour GET /v1/mai/tools.\n */\nexport function getToolDeclarations(enabledIds?: string[]) {\n const ids = enabledIds ??\n MAI_TOOLS_CATALOG.filter((t) => t.enabled).map((t) => t.id);\n return MAI_TOOLS_CATALOG.filter((t) => ids.includes(t.id)).map((t) => ({\n id: t.id,\n name: t.name,\n slash_command: t.slash_command,\n mention_tag: t.mention_tag,\n description: t.description,\n icon_name: t.icon_name,\n category: t.category,\n sensitive: t.sensitive,\n }));\n}\n\n/** Invalide le cache d'outils d'un utilisateur (après mise à jour des réglages). */\nexport function invalidateUserToolsCache(userId: number | string): void {\n userToolsCache.delete(String(userId));\n}\n\n/**\n * Outil analyze_creator_stats — seule implémentation directe (pas de case\n * dans la flotte). Agrège les mêmes données que GET /v1/users/me/creator-stats,\n * puis produit une synthèse analytique (période la plus forte, engagement,\n * sources, recommandations).\n */\nasync function analyzeCreatorStats(\n userId: number | string,\n args: { period?: \"7d\" | \"30d\" | \"90d\" | \"12m\" } = {},\n) {\n try {\n const sql = getDb();\n const periodDays = args.period === \"7d\"\n ? 7\n : args.period === \"90d\"\n ? 90\n : args.period === \"12m\"\n ? 365\n : 30;\n const sinceIso = new Date(Date.now() - periodDays * 86400000).toISOString();\n\n const agg = await sql`\n SELECT COALESCE(SUM(views_count), 0) AS total_views,\n COALESCE(SUM(likes_count), 0) AS total_likes,\n COALESCE(SUM(reposts_count), 0) AS total_reposts,\n COALESCE(SUM(replies_count), 0) AS total_replies,\n COUNT(*) AS posts_count\n FROM posts WHERE author_id = ${\n Number(userId)\n } AND published_at >= ${sinceIso}::timestamptz\n `.catch(() => []);\n const a = agg[0] || {};\n const views = Number(a.total_views || 0);\n const likes = Number(a.total_likes || 0);\n const reposts = Number(a.total_reposts || 0);\n const replies = Number(a.total_replies || 0);\n const posts = Number(a.posts_count || 0);\n const engagementRate = views > 0\n ? Math.round(((likes + reposts * 2 + replies * 2) / views) * 1000) / 10\n : 0;\n\n const top = await sql`\n SELECT id, content, views_count, likes_count, reposts_count, replies_count, published_at\n FROM posts WHERE author_id = ${\n Number(userId)\n } AND published_at >= ${sinceIso}::timestamptz\n ORDER BY (COALESCE(likes_count,0) + COALESCE(reposts_count,0)*2 + COALESCE(replies_count,0)*2) DESC\n LIMIT 3\n `.catch(() => []);\n\n let sources: Array<{ source: string; views: number }> = [];\n try {\n const s = await sql`\n SELECT COALESCE(pv.source, 'feed') AS source, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${\n Number(userId)\n } AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 5\n `;\n sources = (s as any[]).map((r) => ({\n source: String(r.source),\n views: Number(r.views || 0),\n }));\n } catch {}\n\n // Meilleur jour de la période (vues par jour)\n let bestDay: { day: string; views: number } | null = null;\n try {\n const d = await sql`\n SELECT created_at::date AS day, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${\n Number(userId)\n } AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 1\n `;\n if (d[0]) {\n bestDay = {\n day: String(d[0].day).slice(0, 10),\n views: Number(d[0].views || 0),\n };\n }\n } catch {}\n\n // Recommandations générées à partir des chiffres\n const recommendations: string[] = [];\n if (posts === 0) {\n recommendations.push(\n \"Publiez au moins une publication sur la période pour générer des données analysables.\",\n );\n }\n if (engagementRate < 2 && views > 0) {\n recommendations.push(\n \"Engagement faible : posez des questions ou ajoutez un sondage pour stimuler les réponses.\",\n );\n }\n if (replies === 0 && views > 50) {\n recommendations.push(\n \"Aucune réponse : terminez vos publications par une question ouverte.\",\n );\n }\n if (reposts < likes / 10 && likes > 10) {\n recommendations.push(\n \"Peu de reposts : visez des contenus utiles/partenables (listes, conseils).\",\n );\n }\n if (bestDay && bestDay.views > 0) {\n recommendations.push(\n `Votre meilleur jour est le ${bestDay.day} (${bestDay.views} vues) : publiez aux heures similaires.`,\n );\n }\n if (sources.length > 1) {\n recommendations.push(\n `Source dominante : ${sources[0].source} — amplifiez ce canal.`,\n );\n }\n if (recommendations.length === 0) {\n recommendations.push(\n \"Vos métriques sont équilibrées : continuez et testez de nouveaux formats.\",\n );\n }\n\n return {\n success: true,\n result: {\n period_days: periodDays,\n totals: { views, likes, reposts, replies, posts },\n engagement_rate_percent: engagementRate,\n top_posts: (top as any[]).map((p) => ({\n id: String(p.id),\n content: String(p.content || \"\").slice(0, 120),\n views: Number(p.views_count || 0),\n likes: Number(p.likes_count || 0),\n reposts: Number(p.reposts_count || 0),\n replies: Number(p.replies_count || 0),\n })),\n sources,\n best_day: bestDay,\n recommendations,\n },\n };\n } catch (err: any) {\n return {\n success: false,\n error: err?.message || \"Erreur analyse statistiques.\",\n };\n }\n}",[433],"8c78689d-d0b4-4d26-ad82-52c5c6c8b9c5","vibe-settings.ts","8e58d038-a6e4-11f1-9a91-1607ee4eb77e",317,["D",1789232416588],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — SETTINGS & PRIVACY (vibe-settings.ts)\n * User settings management, usage logging & GDPR data export\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, getWeekData, verifyToken } from \"./config.ts\";\nimport { invalidateUserToolsCache } from \"./vibe-tools.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\n\nexport function registerVibeSettingsRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // Colonnes de personnalisation ajoutées paresseusement (idempotent)\n let personalizationColumnsReady = false;\n const ensurePersonalizationColumns = async () => {\n if (personalizationColumnsReady) return;\n try {\n const sql = getDb();\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS accent_color TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS font_size TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_auto_approve_tools BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS posts_ai_generated_by_default BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_default_model TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_tts_voice TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS ui_language TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS message_bubble_theme TEXT DEFAULT 'monochrome'`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS chat_background_theme TEXT DEFAULT 'default'`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS message_bubble_shape TEXT DEFAULT 'pill'`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS default_vibe_audience VARCHAR(32) DEFAULT 'public'`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS scheduled_theme TEXT`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS onboarding_completed BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_context_posts BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_context_dms BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_context_books BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS hide_verified_badge BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_enabled_tools JSONB DEFAULT NULL`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS collab_auto_accept BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS dm_auto_translate BOOLEAN DEFAULT FALSE`;\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS dm_translate_lang TEXT`;\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_audience_preferences (\n user_id INTEGER PRIMARY KEY REFERENCES users(id) ON DELETE CASCADE,\n default_audience VARCHAR(32) NOT NULL DEFAULT 'public',\n updated_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n personalizationColumnsReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-settings] ensurePersonalizationColumns skipped:\",\n (err as any)?.message,\n );\n }\n };\n\n // 1. USAGE LOGGING\n const handleLogUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ success: true, logged: false });\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n if (!userId) return c.json({ success: true, logged: false });\n\n const body = await c.req.json().catch(() => ({}));\n const { endpoint = \"api_call\", tokens = 10, action_type = \"request\" } =\n body;\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n\n await Promise.all([\n sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, ${tokens})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokens}, updated_at = NOW()\n `,\n sql`\n INSERT INTO usage_logs (user_id, action_type, endpoint, metadata, tokens_used, timestamp)\n VALUES (${userId}, ${action_type}, ${endpoint}, ${\n JSON.stringify({ endpoint, timestamp: new Date().toISOString() })\n }::jsonb, ${tokens}, NOW())\n `.catch(() => {}),\n ]);\n\n return c.json({ success: true, logged: true });\n } catch (err: any) {\n return c.json({ success: false, error: err.message });\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/usage/log\",\n \"/vibe/usage/log\",\n \"/v1/usage/log\",\n \"/usage/log\",\n ], handleLogUsage);\n\n // 2. GET SETTINGS\n const handleSettings = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n await ensurePersonalizationColumns();\n const [rows, prefRows] = await Promise.all([\n sql`SELECT * FROM user_settings WHERE user_id = ${userId} LIMIT 1`,\n sql`SELECT default_audience FROM vibe_audience_preferences WHERE user_id = ${userId} LIMIT 1`\n .catch(() => []),\n ]);\n const settings = rows[0] || {};\n if (!settings.default_vibe_audience && prefRows.length > 0) {\n settings.default_vibe_audience = prefRows[0].default_audience;\n }\n if (!settings.default_vibe_audience) {\n settings.default_vibe_audience = \"public\";\n }\n return c.json({ settings });\n } catch (err: any) {\n return c.json({ error: \"Erreur paramètres.\" }, 500);\n }\n };\n\n registerMulti(\n \"get\",\n [\"/api/vibe/settings\", \"/vibe/settings\", \"/v1/settings\"],\n handleSettings,\n );\n\n // 3. UPDATE SETTINGS\n const handleUpdateSettings = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json();\n const sql = getDb();\n await ensurePersonalizationColumns();\n\n await sql`\n INSERT INTO user_settings (\n user_id, email_notifications, push_notifications, notify_on_like,\n notify_on_repost, notify_on_reply, notify_on_dm, content_filter_level,\n blur_sensitive_content, age_restriction_enabled, allow_dms, dms_enabled,\n feed_default_mode, hide_reposts, blocked_keywords, two_factor_auth, allow_mentions,\n theme_preference, accent_color, font_size, mai_auto_approve_tools,\n posts_ai_generated_by_default, mai_default_model, mai_tts_voice, ui_language,\n message_bubble_theme, chat_background_theme, message_bubble_shape, default_vibe_audience,\n scheduled_theme, onboarding_completed, mai_context_posts, mai_context_dms, mai_context_books,\n hide_verified_badge, mai_enabled_tools, collab_auto_accept, dm_auto_translate, dm_translate_lang\n )\n VALUES (\n ${userId},\n ${body.email_notifications ?? true},\n ${body.push_notifications ?? true},\n ${body.notify_on_like ?? true},\n ${body.notify_on_repost ?? true},\n ${body.notify_on_reply ?? true},\n ${body.notify_on_dm ?? true},\n ${body.content_filter_level || \"medium\"},\n ${body.blur_sensitive_content ?? true},\n ${body.age_restriction_enabled ?? false},\n ${body.allow_dms || \"everyone\"},\n ${body.dms_enabled ?? true},\n ${body.feed_default_mode || \"for_you\"},\n ${body.hide_reposts ?? false},\n ${body.blocked_keywords || []},\n ${body.two_factor_auth ?? false},\n ${body.allow_mentions || \"everyone\"},\n ${body.theme_preference || \"light\"},\n ${body.accent_color || null},\n ${body.font_size || null},\n ${body.mai_auto_approve_tools ?? false},\n ${body.posts_ai_generated_by_default ?? false},\n ${body.mai_default_model || null},\n ${body.mai_tts_voice || null},\n ${body.ui_language || null},\n ${body.message_bubble_theme || \"monochrome\"},\n ${body.chat_background_theme || \"default\"},\n ${body.message_bubble_shape || \"pill\"},\n ${body.default_vibe_audience || \"public\"},\n ${body.scheduled_theme ?? null},\n ${body.onboarding_completed ?? false},\n ${body.mai_context_posts ?? false},\n ${body.mai_context_dms ?? false},\n ${body.mai_context_books ?? false},\n ${body.hide_verified_badge ?? false},\n ${\n body.mai_enabled_tools ? JSON.stringify(body.mai_enabled_tools) : null\n }::jsonb,\n ${body.collab_auto_accept ?? false},\n ${body.dm_auto_translate ?? false},\n ${body.dm_translate_lang || null}\n )\n ON CONFLICT (user_id)\n DO UPDATE SET\n email_notifications = CASE WHEN ${\n body.email_notifications !== undefined\n } THEN EXCLUDED.email_notifications ELSE user_settings.email_notifications END,\n push_notifications = CASE WHEN ${\n body.push_notifications !== undefined\n } THEN EXCLUDED.push_notifications ELSE user_settings.push_notifications END,\n notify_on_like = CASE WHEN ${\n body.notify_on_like !== undefined\n } THEN EXCLUDED.notify_on_like ELSE user_settings.notify_on_like END,\n notify_on_repost = CASE WHEN ${\n body.notify_on_repost !== undefined\n } THEN EXCLUDED.notify_on_repost ELSE user_settings.notify_on_repost END,\n notify_on_reply = CASE WHEN ${\n body.notify_on_reply !== undefined\n } THEN EXCLUDED.notify_on_reply ELSE user_settings.notify_on_reply END,\n notify_on_dm = CASE WHEN ${\n body.notify_on_dm !== undefined\n } THEN EXCLUDED.notify_on_dm ELSE user_settings.notify_on_dm END,\n content_filter_level = CASE WHEN ${\n body.content_filter_level !== undefined\n } THEN EXCLUDED.content_filter_level ELSE user_settings.content_filter_level END,\n blur_sensitive_content = CASE WHEN ${\n body.blur_sensitive_content !== undefined\n } THEN EXCLUDED.blur_sensitive_content ELSE user_settings.blur_sensitive_content END,\n age_restriction_enabled = CASE WHEN ${\n body.age_restriction_enabled !== undefined\n } THEN EXCLUDED.age_restriction_enabled ELSE user_settings.age_restriction_enabled END,\n allow_dms = CASE WHEN ${\n body.allow_dms !== undefined || body.allow_dms_from !== undefined\n } THEN EXCLUDED.allow_dms ELSE user_settings.allow_dms END,\n dms_enabled = CASE WHEN ${\n body.dms_enabled !== undefined\n } THEN EXCLUDED.dms_enabled ELSE user_settings.dms_enabled END,\n feed_default_mode = CASE WHEN ${\n body.feed_default_mode !== undefined\n } THEN EXCLUDED.feed_default_mode ELSE user_settings.feed_default_mode END,\n hide_reposts = CASE WHEN ${\n body.hide_reposts !== undefined\n } THEN EXCLUDED.hide_reposts ELSE user_settings.hide_reposts END,\n blocked_keywords = CASE WHEN ${\n body.blocked_keywords !== undefined\n } THEN EXCLUDED.blocked_keywords ELSE user_settings.blocked_keywords END,\n two_factor_auth = CASE WHEN ${\n body.two_factor_auth !== undefined\n } THEN EXCLUDED.two_factor_auth ELSE user_settings.two_factor_auth END,\n allow_mentions = CASE WHEN ${\n body.allow_mentions !== undefined\n } THEN EXCLUDED.allow_mentions ELSE user_settings.allow_mentions END,\n theme_preference = CASE WHEN ${\n body.theme_preference !== undefined\n } THEN EXCLUDED.theme_preference ELSE user_settings.theme_preference END,\n accent_color = CASE WHEN ${\n body.accent_color !== undefined\n } THEN EXCLUDED.accent_color ELSE user_settings.accent_color END,\n font_size = CASE WHEN ${\n body.font_size !== undefined\n } THEN EXCLUDED.font_size ELSE user_settings.font_size END,\n mai_auto_approve_tools = CASE WHEN ${\n body.mai_auto_approve_tools !== undefined\n } THEN EXCLUDED.mai_auto_approve_tools ELSE user_settings.mai_auto_approve_tools END,\n posts_ai_generated_by_default = CASE WHEN ${\n body.posts_ai_generated_by_default !== undefined\n } THEN EXCLUDED.posts_ai_generated_by_default ELSE user_settings.posts_ai_generated_by_default END,\n mai_default_model = CASE WHEN ${\n body.mai_default_model !== undefined\n } THEN EXCLUDED.mai_default_model ELSE user_settings.mai_default_model END,\n mai_tts_voice = CASE WHEN ${\n body.mai_tts_voice !== undefined\n } THEN EXCLUDED.mai_tts_voice ELSE user_settings.mai_tts_voice END,\n ui_language = CASE WHEN ${\n body.ui_language !== undefined\n } THEN EXCLUDED.ui_language ELSE user_settings.ui_language END,\n message_bubble_theme = CASE WHEN ${\n body.message_bubble_theme !== undefined\n } THEN EXCLUDED.message_bubble_theme ELSE user_settings.message_bubble_theme END,\n chat_background_theme = CASE WHEN ${\n body.chat_background_theme !== undefined\n } THEN EXCLUDED.chat_background_theme ELSE user_settings.chat_background_theme END,\n message_bubble_shape = CASE WHEN ${\n body.message_bubble_shape !== undefined\n } THEN EXCLUDED.message_bubble_shape ELSE user_settings.message_bubble_shape END,\n default_vibe_audience = CASE WHEN ${\n body.default_vibe_audience !== undefined\n } THEN EXCLUDED.default_vibe_audience ELSE user_settings.default_vibe_audience END,\n scheduled_theme = CASE WHEN ${\n body.scheduled_theme !== undefined\n } THEN EXCLUDED.scheduled_theme ELSE user_settings.scheduled_theme END,\n onboarding_completed = CASE WHEN ${\n body.onboarding_completed !== undefined\n } THEN EXCLUDED.onboarding_completed ELSE user_settings.onboarding_completed END,\n mai_context_posts = CASE WHEN ${\n body.mai_context_posts !== undefined\n } THEN EXCLUDED.mai_context_posts ELSE user_settings.mai_context_posts END,\n mai_context_dms = CASE WHEN ${\n body.mai_context_dms !== undefined\n } THEN EXCLUDED.mai_context_dms ELSE user_settings.mai_context_dms END,\n mai_context_books = CASE WHEN ${\n body.mai_context_books !== undefined\n } THEN EXCLUDED.mai_context_books ELSE user_settings.mai_context_books END,\n hide_verified_badge = CASE WHEN ${\n body.hide_verified_badge !== undefined\n } THEN EXCLUDED.hide_verified_badge ELSE user_settings.hide_verified_badge END,\n mai_enabled_tools = CASE WHEN ${\n body.mai_enabled_tools !== undefined\n } THEN EXCLUDED.mai_enabled_tools ELSE user_settings.mai_enabled_tools END,\n collab_auto_accept = CASE WHEN ${\n body.collab_auto_accept !== undefined\n } THEN EXCLUDED.collab_auto_accept ELSE user_settings.collab_auto_accept END,\n dm_auto_translate = CASE WHEN ${\n body.dm_auto_translate !== undefined\n } THEN EXCLUDED.dm_auto_translate ELSE user_settings.dm_auto_translate END,\n dm_translate_lang = CASE WHEN ${\n body.dm_translate_lang !== undefined\n } THEN EXCLUDED.dm_translate_lang ELSE user_settings.dm_translate_lang END,\n updated_at = NOW()\n `;\n\n if (body.default_vibe_audience !== undefined) {\n await sql`\n INSERT INTO vibe_audience_preferences (user_id, default_audience, updated_at)\n VALUES (${userId}, ${body.default_vibe_audience || \"public\"}, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET default_audience = EXCLUDED.default_audience, updated_at = NOW()\n `.catch((err: any) =>\n console.warn(\n \"[vibe-settings] error updating vibe_audience_preferences:\",\n err?.message,\n )\n );\n }\n\n // Les outils mAI activés ont changé : invalider le cache du filtre par utilisateur\n if (body.mai_enabled_tools !== undefined) {\n try {\n invalidateUserToolsCache(userId);\n } catch {}\n }\n\n return c.json({\n success: true,\n message: \"Paramètres mis à jour avec succès.\",\n });\n } catch (err: any) {\n console.error(\"[Update Settings Error]:\", err);\n return c.json({ error: \"Erreur mise à jour paramètres.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/settings/update\",\n \"/vibe/settings/update\",\n \"/v1/settings/update\",\n ], handleUpdateSettings);\n\n // 4. PRIVACY — DATA EXPORT\n const handlePrivacyExport = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n\n const [\n userRows,\n profileRows,\n postRows,\n settingsRows,\n followersRows,\n followingRows,\n ] = await Promise.all([\n sql`SELECT id, username, email, tier, created_at FROM users WHERE id = ${userId} LIMIT 1`,\n sql`SELECT display_name, bio, avatar_url, banner_url, interests, followers_count, following_count, posts_count FROM profiles WHERE user_id = ${userId} LIMIT 1`,\n sql`SELECT id, content, format, visibility, likes_count, reposts_count, replies_count, published_at FROM posts WHERE author_id = ${userId} ORDER BY published_at DESC LIMIT 200`,\n sql`SELECT email_notifications, push_notifications, content_filter_level, allow_dms, allow_mentions, feed_default_mode, hide_reposts, blocked_keywords, two_factor_auth FROM user_settings WHERE user_id = ${userId} LIMIT 1`,\n sql`SELECT u.username FROM follows f JOIN users u ON u.id = f.following_id WHERE f.follower_id = ${userId} LIMIT 500`,\n sql`SELECT u.username FROM follows f JOIN users u ON u.id = f.follower_id WHERE f.following_id = ${userId} LIMIT 500`,\n ]);\n\n return c.json({\n success: true,\n export_date: new Date().toISOString(),\n user: userRows[0] || null,\n profile: profileRows[0] || null,\n settings: settingsRows[0] || null,\n posts: postRows,\n following: followingRows.map((r: any) => r.username),\n followers: followersRows.map((r: any) => r.username),\n posts_count: postRows.length,\n following_count: followingRows.length,\n followers_count: followersRows.length,\n });\n } catch (err: any) {\n console.error(\"[Privacy Export Error]:\", err);\n return c.json({ error: \"Erreur lors de l'export des données.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/privacy/export\",\n \"/vibe/privacy/export\",\n \"/v1/privacy/export\",\n ], handlePrivacyExport);\n}",[440],"e4ee806e-db64-43b5-940f-ac7fa5881ea0","vibe-recommender.ts","9ad48262-a6e4-11f1-ac0d-1607ee4eb77e",303,["D",1789204570685],9,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — RECOMMENDATION ENGINE (vibe-recommender.ts)\n * Moteur de scoring hybride du fil « Pour Vous ».\n * Toutes les fonctions de signaux et la classe HybridRecommender sont\n * regroupées ici à la racine pour assurer la compatibilité avec l'environnement\n * d'exécution et de déploiement (Val Town / Deno / Node).\n * ============================================================================\n */\n\n// ─────────────────────────────────────────────\n// SIGNAUX PURS DE SCORING (Fraîcheur, Engagement, Sécurité...)\n// ─────────────────────────────────────────────\n\n/** Demi-vie de fraîcheur : une publication perd 50 % de fraîcheur tous les 18 h. */\nexport const FRESHNESS_HALF_LIFE_HOURS = 18;\n\n/** Poids des impressions (vues) dans l'engagement brut — faible mais réel. */\nexport const VIEW_WEIGHT = 0.1;\n\nexport function ageInHours(\n publishedAt: Date,\n now: number = Date.now(),\n): number {\n return Math.max(0.05, (now - publishedAt.getTime()) / (1000 * 60 * 60));\n}\n\n/** Décroissance exponentielle à demi-vie : 1.0 à la publication, 0.5 après 18 h. */\nexport function freshnessDecay(ageHours: number): number {\n return Math.exp((-Math.LN2 * ageHours) / FRESHNESS_HALF_LIFE_HOURS);\n}\n\n/** Engagement brut pondéré : Likes ×1, Reposts ×2.5, Réponses ×2, Vues ×0.1. */\nexport function rawEngagement(\n likes: number,\n reposts: number,\n replies: number,\n views: number,\n): number {\n return (\n likes * 1.0 +\n reposts * 2.5 +\n replies * 2.0 +\n views * VIEW_WEIGHT\n );\n}\n\n/** Compression logarithmique de l'engagement brut vers [0, 1]. */\nexport function engagementScore(rawEngagements: number): number {\n return Math.min(1.0, Math.log10(rawEngagements + 1) / 2.5);\n}\n\n/** Vélocité virale : engagement par heure écoulée, saturé à 1. */\nexport function velocityScore(\n rawEngagements: number,\n ageHours: number,\n): number {\n return Math.min(1.0, rawEngagements / Math.max(0.5, ageHours) / 8.0);\n}\n\n/** Facteur de sécurité : pénalise la toxicité (0 → neutre, 1 → score nul). */\nexport function safetyFactor(toxicityScore: number | undefined): number {\n return Math.max(0, 1 - (toxicityScore || 0) * 2.5);\n}\n\n/**\n * Proximité sociale : abonnement + affinité mesurée (historique d'interactions\n * avec l'auteur), borné [0.2, 1].\n */\nexport function graphProximityScore(\n isFollowedAuthor: boolean | undefined,\n affinity: number | undefined,\n): number {\n const clampedAffinity = Math.max(0, Math.min(1, affinity || 0));\n return isFollowedAuthor\n ? 0.7 + 0.3 * clampedAffinity\n : 0.2 + 0.5 * clampedAffinity;\n}\n\n/** Affinement utilisateur : ×0.65 (pas intéressé) .. ×1.35 (intéressé). */\nexport function interestFactor(interestSignal: number | undefined): number {\n const clamped = Math.max(-1, Math.min(1, interestSignal || 0));\n return 1 + 0.35 * clamped;\n}\n\n/** Score dwell 0..1 : temps passé sur un post (profil temporel). */\nexport function dwellScore(ms?: number): number {\n if (!ms || ms <= 0) return 0;\n return Math.min(1, Math.log10(ms / 1000 + 1) / 1.5);\n}\n\n/** Boost contexte temporel : +10% si même partie de journée (matin/midi/soir/nuit). */\nexport function dayPartBoost(\n publishedAt: Date,\n now: number = Date.now(),\n): number {\n const h = (t: Date) => t.getHours();\n const part = (hh: number) => (hh < 6 ? 0 : hh < 12 ? 1 : hh < 18 ? 2 : 3);\n return part(h(publishedAt)) === part(h(new Date(now))) ? 0.1 : 0;\n}\n\n/** Multiplicateurs de qualité : comptes vérifiés ×1.15, médias ×1.10. */\nexport function qualityBoost(\n isVerifiedAuthor?: boolean,\n hasMedia?: boolean,\n): number {\n let boost = 1.0;\n if (isVerifiedAuthor) boost *= 1.15;\n if (hasMedia) boost *= 1.10;\n return boost;\n}\n\n// ─────────────────────────────────────────────\n// TYPES ET INTERFACES DU RECOMMANDEUR\n// ─────────────────────────────────────────────\n\nexport interface FeedTunerWeights {\n freshness: number;\n novelty: number;\n popularity: number;\n serendipity: number;\n proximity: number;\n dwell: number;\n}\n\nexport interface PostCandidate {\n postId: string;\n authorId?: number;\n publishedAt: Date;\n likes: number;\n reposts: number;\n replies: number;\n views?: number;\n hasMedia?: boolean;\n isVerifiedAuthor?: boolean;\n semanticSimilarity?: number;\n isFollowedAuthor?: boolean;\n /** Affinité mesurée 0..1 : interactions passées de l'utilisateur avec cet auteur. */\n affinity?: number;\n candidateTopic?: string;\n candidateSentiment?: number;\n toxicityScore?: number;\n /** Signal d'affinement -1..1 issu des retours « Cela m'intéresse / pas » + intérêts. */\n interestSignal?: number;\n matchedInterestTags?: string[];\n tuner?: FeedTunerWeights;\n /** Temps passé utilisateur sur ce post (ms) — profil temporel. */\n userDwellMs?: number;\n /** Temps moyen passé par tous sur ce post (ms). */\n avgDwellMs?: number;\n}\n\nexport interface RecommendationSignal {\n totalScore: number;\n explanationText: string;\n matchedInterests: string[];\n breakdown: {\n freshnessScore: number;\n engagementScore: number;\n velocityScore: number;\n semanticScore: number;\n graphProximityScore: number;\n safetyFactor: number;\n boostFactor: number;\n interestFactor: number;\n dwellScore: number;\n timeContextBoost: number;\n };\n}\n\n// ─────────────────────────────────────────────\n// MOTEUR DE RECOMMANDATION HYBRIDE\n// ─────────────────────────────────────────────\n\nexport class HybridRecommender {\n private static readonly DEFAULT_TUNER: FeedTunerWeights = {\n freshness: 0.30,\n novelty: 0.18,\n popularity: 0.22,\n serendipity: 0.08,\n proximity: 0.09,\n dwell: 0.13,\n };\n\n public static scorePost(candidate: PostCandidate): RecommendationSignal {\n const tuner = candidate.tuner || this.DEFAULT_TUNER;\n const dwellW = (tuner as any).dwell ?? 0.13;\n const ageHours = ageInHours(candidate.publishedAt);\n\n // Récence : demi-vie de 18 h (50 % de fraîcheur restante après 18 h).\n const freshness = freshnessDecay(ageHours);\n\n // Engagement pondéré (vues incluses) compressé logarithmiquement.\n const engagement = engagementScore(\n rawEngagement(\n candidate.likes,\n candidate.reposts,\n candidate.replies,\n candidate.views || 0,\n ),\n );\n\n // Vélocité : engagement par heure depuis la publication (effet viral).\n const velocity = velocityScore(\n rawEngagement(\n candidate.likes,\n candidate.reposts,\n candidate.replies,\n candidate.views || 0,\n ),\n ageHours,\n );\n const semanticScore = candidate.semanticSimilarity ?? 0.6;\n const proximity = graphProximityScore(\n candidate.isFollowedAuthor,\n candidate.affinity,\n );\n const safety = safetyFactor(candidate.toxicityScore);\n const boost = qualityBoost(candidate.isVerifiedAuthor, candidate.hasMedia);\n const interest = interestFactor(candidate.interestSignal);\n const dwell = dwellScore(candidate.userDwellMs ?? candidate.avgDwellMs);\n const timeBoost = dayPartBoost(candidate.publishedAt);\n\n const rawScore = tuner.freshness * freshness +\n tuner.popularity * engagement +\n tuner.proximity * proximity +\n tuner.novelty * velocity +\n tuner.serendipity * (1 - semanticScore * 0.4) +\n dwellW * dwell +\n 0.05 * timeBoost;\n\n const totalScore = Math.max(\n 0,\n Math.min(100, Math.round(rawScore * safety * boost * interest * 100)),\n );\n\n let explanationText =\n \"Recommandé selon vos centres d'intérêt et l'engagement.\";\n if ((candidate.interestSignal || 0) >= 0.4) {\n explanationText = \"🎯 Affiné d'après vos retours « Cela m'intéresse ».\";\n } else if ((candidate.interestSignal || 0) <= -0.4) {\n explanationText =\n \"📉 Moins mis en avant : retour « Cela ne m'intéresse pas ».\";\n } else if ((candidate.userDwellMs || 0) >= 8000) {\n explanationText = \"⏱️ Vous passez du temps sur ce type de contenu.\";\n } else if (candidate.isFollowedAuthor) {\n explanationText = \"Publication d'un créateur que vous suivez.\";\n } else if (velocity > 0.6) {\n explanationText = \"🔥 Publication en forte progression.\";\n } else if (candidate.isVerifiedAuthor && engagement > 0.5) {\n explanationText = \"✨ Publication populaire d'un compte vérifié.\";\n } else if (freshness > 0.8) {\n explanationText = \"⚡ Publication récente.\";\n }\n\n return {\n totalScore,\n explanationText,\n matchedInterests:\n candidate.matchedInterestTags &&\n candidate.matchedInterestTags.length > 0\n ? candidate.matchedInterestTags\n : candidate.candidateTopic\n ? [candidate.candidateTopic]\n : [\"Général\"],\n breakdown: {\n freshnessScore: Math.round(freshness * 100),\n engagementScore: Math.round(engagement * 100),\n velocityScore: Math.round(velocity * 100),\n semanticScore: Math.round(semanticScore * 100),\n graphProximityScore: Math.round(proximity * 100),\n safetyFactor: Number(safety.toFixed(2)),\n boostFactor: Number(boost.toFixed(2)),\n interestFactor: Number(interest.toFixed(2)),\n dwellScore: Math.round(dwell * 100),\n timeContextBoost: Math.round(timeBoost * 100),\n },\n };\n }\n}",[447],"323c04c2-6d17-4f93-b3b8-c1b5ab12c306","vibe-posts.ts","ab1ab006-a6e4-11f1-9faf-1607ee4eb77e",284,["D",1789146610117],14,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — POSTS ROUTES ORCHESTRATOR (vibe-posts.ts)\n * Point d'entrée historique des routes posts : ré-exporte les helpers\n * (vibe-posts-core.ts) pour compatibilité ascendante et délègue\n * l'enregistrement aux modules CRUD (vibe-posts-crud.ts) et engagement\n * (vibe-posts-engage.ts), plus les flux (vibe-feed.ts).\n * L'ordre d'enregistrement des routes est strictement inchangé.\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { registerVibeFeedRoutes } from \"./vibe-feed.ts\";\nimport { ensurePostColumns } from \"./vibe-posts-core.ts\";\nimport { registerPostCrudRoutes } from \"./vibe-posts-crud.ts\";\nimport { registerPostEngagementRoutes } from \"./vibe-posts-engage.ts\";\n\nexport { registerVibeFeedRoutes } from \"./vibe-feed.ts\";\nexport {\n attachCollaborators,\n attachPolls,\n attachPollsAndCollabs,\n attachQuotedPosts,\n ensurePostColumns,\n fetchPostMedia,\n isUuid,\n publishDuePosts,\n stripHtmlTags,\n visibilityFilter,\n} from \"./vibe-posts-core.ts\";\n\nexport function registerVibePostsRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // Protection contre le double enregistrement (idempotence)\n if ((app as any).__vibe_posts_registered) return;\n (app as any).__vibe_posts_registered = true;\n\n // Garantir les colonnes en tâche de fond dès le chargement du serveur\n ensurePostColumns().catch(() => {});\n\n // Enregistrer également les routes de flux et recherche si non déjà fait\n registerVibeFeedRoutes(app, registerMulti);\n\n // CRUD + extensions (création, sondages, stats, collab, programmés, brouillons…)\n registerPostCrudRoutes(registerMulti);\n\n // Engagement (likes, reposts, feedback, bookmarks, commentaires, vues, pin…)\n registerPostEngagementRoutes(registerMulti);\n}",[455],"471dadf8-25ba-4c39-b70c-03fd51200a6c","vibe-posts-engage.ts","b818dc3a-ae03-11f1-9305-1607ee4eb77e",311,["D",1789229665577],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — POSTS ENGAGEMENT (vibe-posts-engage.ts)\n * Likes, reposts, feedback algorithmique, bookmarks, commentaires & fils,\n * comptage de vues et épinglage sur le profil.\n * Enregistré par vibe-posts.ts (registerVibePostsRoutes) via\n * registerPostEngagementRoutes — l'ordre des registerMulti est inchangé.\n * ============================================================================\n */\n\nimport {\n extractToken,\n getDb,\n isPaidTier,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport { isBlockEitherWay, type RegisterMultiFn } from \"./vibe-common.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\nimport { generateMAICommentAnswer } from \"./vibe-mai.ts\";\nimport { ensureMAIAccount, getMAIUserId } from \"./vibe-dms.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { ensureCircleTable } from \"./vibe-circle.ts\";\nimport {\n ensurePostColumns,\n ensureProfilePinnedPostsTable,\n isUuid,\n stripHtmlTags,\n} from \"./vibe-posts-core.ts\";\n\nexport function registerPostEngagementRoutes(registerMulti: RegisterMultiFn) {\n // 2. LIKES & REPOSTS & BOOKMARKS\n const handleLike = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n const sql = getDb();\n\n const existing = await sql`\n SELECT id FROM post_interactions\n WHERE user_id = ${userId} AND post_id = ${postId}::uuid AND interaction_type = 'like'\n `;\n\n if (existing.length > 0) {\n await sql`DELETE FROM post_interactions WHERE id = ${\n existing[0].id\n }::uuid`;\n await sql`UPDATE posts SET likes_count = GREATEST(0, likes_count - 1) WHERE id = ${postId}::uuid`;\n try {\n await sql`\n DELETE FROM notifications\n WHERE actor_id = ${userId} AND post_id = ${postId}::uuid AND type = 'like'\n `;\n } catch {}\n // Temps réel : compteurs actualisés pour l'auteur (flux SSE)\n try {\n const statsRows =\n await sql`SELECT author_id, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (statsRows[0]) {\n await pushRealtimeEvent(statsRows[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(statsRows[0].likes_count || 0),\n reposts_count: Number(statsRows[0].reposts_count || 0),\n replies_count: Number(statsRows[0].replies_count || 0),\n });\n }\n } catch {}\n return c.json({ success: true, liked: false });\n } else {\n await sql`\n INSERT INTO post_interactions (user_id, post_id, interaction_type)\n VALUES (${userId}, ${postId}::uuid, 'like')\n ON CONFLICT (user_id, post_id, interaction_type) DO NOTHING\n `;\n await sql`UPDATE posts SET likes_count = likes_count + 1 WHERE id = ${postId}::uuid`;\n\n const postAuthor =\n await sql`SELECT author_id, content, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (postAuthor.length > 0) {\n // Temps réel : compteurs actualisés pour l'auteur (flux SSE)\n pushRealtimeEvent(postAuthor[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(postAuthor[0].likes_count || 0),\n reposts_count: Number(postAuthor[0].reposts_count || 0),\n replies_count: Number(postAuthor[0].replies_count || 0),\n }).catch(() => {});\n\n const recipientId = Number(postAuthor[0].author_id);\n if (\n recipientId !== userId &&\n !(await isBlockEitherWay(userId, recipientId))\n ) {\n const rawContent = stripHtmlTags(postAuthor[0].content || \"\")\n .trim();\n const snippet = rawContent\n ? ` : « ${rawContent.slice(0, 45)}${\n rawContent.length > 45 ? \"…\" : \"\"\n } »`\n : \"\";\n const msg = `a aimé votre publication${snippet}`;\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${recipientId}, ${userId}, 'like', ${postId}::uuid, ${msg})\n `;\n } catch (err) {\n console.error(\"[Like Notification Error]:\", err);\n }\n }\n }\n\n return c.json({ success: true, liked: true });\n }\n } catch (err: any) {\n return c.json(\n { error: err.message || \"Erreur lors de l'interaction.\" },\n 500,\n );\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/like\",\n \"/vibe/posts/:id/like\",\n \"/v1/posts/:id/like\",\n \"/like/:id\",\n \"/api/vibe/posts/:id/likes\",\n ], handleLike);\n\n const handleRepost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n const sql = getDb();\n\n const existing = await sql`\n SELECT id FROM post_interactions\n WHERE user_id = ${userId} AND post_id = ${postId}::uuid AND interaction_type = 'repost'\n `;\n\n if (existing.length > 0) {\n await sql`DELETE FROM post_interactions WHERE id = ${\n existing[0].id\n }::uuid`;\n await sql`UPDATE posts SET reposts_count = GREATEST(0, reposts_count - 1) WHERE id = ${postId}::uuid`;\n try {\n await sql`\n DELETE FROM notifications\n WHERE actor_id = ${userId} AND post_id = ${postId}::uuid AND type = 'repost'\n `;\n } catch {}\n // Temps réel : compteurs actualisés pour l'auteur (flux SSE)\n try {\n const statsRows =\n await sql`SELECT author_id, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (statsRows[0]) {\n await pushRealtimeEvent(statsRows[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(statsRows[0].likes_count || 0),\n reposts_count: Number(statsRows[0].reposts_count || 0),\n replies_count: Number(statsRows[0].replies_count || 0),\n });\n }\n } catch {}\n return c.json({ success: true, reposted: false });\n } else {\n await sql`\n INSERT INTO post_interactions (user_id, post_id, interaction_type)\n VALUES (${userId}, ${postId}::uuid, 'repost')\n ON CONFLICT (user_id, post_id, interaction_type) DO NOTHING\n `;\n await sql`UPDATE posts SET reposts_count = reposts_count + 1 WHERE id = ${postId}::uuid`;\n\n const postAuthor =\n await sql`SELECT author_id, content, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (postAuthor.length > 0) {\n // Temps réel : compteurs actualisés pour l'auteur (flux SSE)\n pushRealtimeEvent(postAuthor[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(postAuthor[0].likes_count || 0),\n reposts_count: Number(postAuthor[0].reposts_count || 0),\n replies_count: Number(postAuthor[0].replies_count || 0),\n }).catch(() => {});\n\n const recipientId = Number(postAuthor[0].author_id);\n if (\n recipientId !== userId &&\n !(await isBlockEitherWay(userId, recipientId))\n ) {\n const rawContent = stripHtmlTags(postAuthor[0].content || \"\")\n .trim();\n const snippet = rawContent\n ? ` : « ${rawContent.slice(0, 45)}${\n rawContent.length > 45 ? \"…\" : \"\"\n } »`\n : \"\";\n const msg = `a republié votre publication${snippet}`;\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${recipientId}, ${userId}, 'repost', ${postId}::uuid, ${msg})\n `;\n } catch (err) {\n console.error(\"[Repost Notification Error]:\", err);\n }\n }\n }\n\n return c.json({ success: true, reposted: true });\n }\n } catch (err: any) {\n return c.json({ error: err.message || \"Erreur lors du repartage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/repost\",\n \"/vibe/posts/:id/repost\",\n \"/v1/posts/:id/repost\",\n \"/repost/:id\",\n \"/api/vibe/posts/:id/reposts\",\n ], handleRepost);\n\n // 2bis. FEEDBACK ALGORITHMIQUE (« Cela m'intéresse » / « Cela ne m'intéresse pas »)\n const handlePostFeedback = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n\n const body = await c.req.json().catch(() => ({} as any));\n const value = body?.value;\n if (\n value !== \"more\" && value !== \"less\" && value !== null &&\n value !== undefined\n ) {\n return c.json({\n error: \"Valeur de feedback invalide (more | less | null).\",\n }, 400);\n }\n\n const sql = getDb();\n // Toggle : supprime les deux types puis réinsère si un nouveau choix\n await sql`\n DELETE FROM post_interactions\n WHERE user_id = ${userId} AND post_id = ${postId}::uuid\n AND interaction_type IN ('interest_more', 'interest_less')\n `;\n if (value === \"more\" || value === \"less\") {\n const interactionType = value === \"more\"\n ? \"interest_more\"\n : \"interest_less\";\n await sql`\n INSERT INTO post_interactions (user_id, post_id, interaction_type)\n VALUES (${userId}, ${postId}::uuid, ${interactionType})\n ON CONFLICT (user_id, post_id, interaction_type) DO NOTHING\n `;\n }\n\n return c.json({ success: true, my_feedback: value ?? null });\n } catch (err: any) {\n console.error(\"[Post Feedback Error]:\", err);\n return c.json(\n { error: \"Erreur lors de l'enregistrement du feedback.\" },\n 500,\n );\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/feedback\",\n \"/vibe/posts/:id/feedback\",\n \"/v1/posts/:id/feedback\",\n \"/feedback/:id\",\n ], handlePostFeedback);\n\n const handleBookmark = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n const sql = getDb();\n\n const existing = await sql`\n SELECT id FROM bookmarks WHERE user_id = ${userId} AND post_id = ${postId}::uuid\n `;\n\n if (existing.length > 0) {\n await sql`DELETE FROM bookmarks WHERE id = ${existing[0].id}::uuid`;\n await sql`UPDATE posts SET bookmarks_count = GREATEST(0, bookmarks_count - 1) WHERE id = ${postId}::uuid`;\n return c.json({ success: true, bookmarked: false });\n } else {\n await sql`\n INSERT INTO bookmarks (user_id, post_id) VALUES (${userId}, ${postId}::uuid)\n ON CONFLICT (user_id, post_id) DO NOTHING\n `;\n await sql`UPDATE posts SET bookmarks_count = bookmarks_count + 1 WHERE id = ${postId}::uuid`;\n return c.json({ success: true, bookmarked: true });\n }\n } catch (err: any) {\n return c.json({\n error: err.message || \"Erreur lors de l'enregistrement.\",\n }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/bookmark\",\n \"/vibe/posts/:id/bookmark\",\n \"/v1/posts/:id/bookmark\",\n \"/bookmark/:id\",\n \"/api/vibe/posts/:id/bookmarks\",\n ], handleBookmark);\n\n // 3. COMMENTS\n const handleGetComments = async (c: any) => {\n try {\n const postId = c.req.param(\"id\");\n const sql = getDb();\n\n if (!isUuid(postId)) {\n return c.json({ count: 0, aiDigest: null, comments: [] });\n }\n\n let currentUserId: number | null = null;\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n // Visibilité du post parent : les commentaires d'un post à audience\n // restreinte (Abonnés / Cercle Privé) ne fuient pas par cette route.\n await ensureCircleTable().catch(() => {});\n const parentPost =\n await sql`SELECT author_id, visibility FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (parentPost.length > 0) {\n const vis = String(parentPost[0].visibility || \"public\");\n const authorId = Number(parentPost[0].author_id);\n let canView = vis === \"public\" ||\n (currentUserId != null && authorId === currentUserId);\n if (!canView && currentUserId != null && vis === \"followers\") {\n const followerRows =\n await sql`SELECT 1 FROM follows WHERE follower_id = ${currentUserId} AND following_id = ${authorId} LIMIT 1`;\n canView = followerRows.length > 0;\n } else if (!canView && currentUserId != null && vis === \"circle\") {\n const memberRows =\n await sql`SELECT 1 FROM circle_members WHERE user_id = ${authorId} AND member_user_id = ${currentUserId} LIMIT 1`;\n canView = memberRows.length > 0;\n }\n if (!canView) return c.json({ count: 0, aiDigest: null, comments: [] });\n }\n\n const comments = await sql`\n SELECT c.*, u.username, pr.display_name, pr.avatar_url,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified\n FROM comments c\n JOIN users u ON u.id = c.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE c.post_id = ${postId}::uuid AND c.is_hidden = FALSE\n ORDER BY c.depth ASC, c.likes_count DESC, c.created_at ASC\n `;\n\n let likedIds = new Set<string>();\n if (currentUserId && comments.length > 0) {\n try {\n const likedRows = await sql`\n SELECT cl.comment_id FROM comment_likes cl\n JOIN comments c ON c.id = cl.comment_id\n WHERE cl.user_id = ${currentUserId} AND c.post_id = ${postId}::uuid\n `;\n likedIds = new Set(likedRows.map((r: any) => String(r.comment_id)));\n } catch {}\n }\n\n const enriched = comments.map((cm: any) => ({\n ...cm,\n liked_by_me: likedIds.has(String(cm.id)),\n }));\n\n // Médias joints aux commentaires (3 images / 1 vidéo, légendes incluses)\n try {\n const commentIds = enriched.map((cm: any) => String(cm.id));\n if (commentIds.length > 0) {\n const mediaRows = await sql`\n SELECT comment_id, url, media_type, alt_text\n FROM media_assets\n WHERE comment_id = ANY(${commentIds}::uuid[])\n `;\n const mediaByComment: Record<string, any[]> = {};\n for (const m of mediaRows) {\n (mediaByComment[String(m.comment_id)] ||= []).push({\n url: m.url,\n media_type: m.media_type,\n alt_text: m.alt_text,\n });\n }\n for (const cm of enriched) {\n cm.media_assets = mediaByComment[String(cm.id)] || [];\n }\n }\n } catch (mediaErr) {\n console.warn(\"[vibe-posts] Comment media hydratation:\", mediaErr);\n }\n\n let aiDigest = null;\n if (enriched.length >= 2) {\n aiDigest = MAIAgentFleet.synthesizeThread(\n enriched.map((cm: any) => ({\n author: cm.username,\n content: cm.content,\n })),\n );\n }\n\n return c.json({ count: enriched.length, aiDigest, comments: enriched });\n } catch (err: any) {\n console.error(\"[Get Comments Error]:\", err);\n return c.json({ error: \"Erreur récupération réponses.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/posts/:id/comments\",\n \"/vibe/posts/:id/comments\",\n \"/v1/posts/:id/comments\",\n \"/comments/:id\",\n ], handleGetComments);\n\n // 2ter. COMPTAGE D'IMPRESSIONS / VUES\n // Le client dédoublonne par session (IntersectionObserver + dwell 1 s,\n // cf. src/algorithms/viewTracking.ts) ; le serveur incrémente simplement.\n // Nouveau : accepte {duration_ms, dwell_ms, visible_ratio} + auth optionnelle\n // pour alimenter post_views (profil temporel) sans casser l'ancien flux anonyme.\n const handlePostView = async (c: any) => {\n try {\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n const body = await c.req.json().catch(() => ({} as any));\n const durationMs = Math.max(\n 0,\n Math.min(\n 600000,\n Number(body?.duration_ms ?? body?.dwell_ms ?? 1000) || 1000,\n ),\n );\n const dwellMs = Math.max(\n 0,\n Math.min(600000, Number(body?.dwell_ms ?? durationMs) || durationMs),\n );\n const visibleRatio = Math.max(\n 0,\n Math.min(1, Number(body?.visible_ratio ?? 0.5) || 0.5),\n );\n const completed = dwellMs >= 5000 || durationMs >= 8000;\n const allowedSources = [\n \"feed\",\n \"profile\",\n \"detail\",\n \"search\",\n \"dm\",\n \"trends\",\n ];\n const rawSource = String(body?.source ?? \"feed\").toLowerCase().slice(\n 0,\n 20,\n );\n const source = allowedSources.includes(rawSource) ? rawSource : \"feed\";\n\n let viewerId: number | null = null;\n try {\n const token = extractToken(c.req.raw);\n if (token) {\n const payload = await verifyToken(token);\n viewerId = Number(payload.sub || (payload as any).id) || null;\n }\n } catch {}\n\n const sql = getDb();\n await ensurePostColumns().catch(() => {});\n const updated = await sql`\n UPDATE posts\n SET views_count = COALESCE(views_count, 0) + 1\n WHERE id = ${postId}::uuid\n RETURNING views_count\n `;\n if (updated.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n // Persistance temporelle (best-effort, n'échoue jamais la vue)\n try {\n await sql`\n INSERT INTO post_views (user_id, post_id, duration_ms, dwell_ms, visible_ratio, completed, source)\n VALUES (${viewerId}, ${postId}::uuid, ${Math.round(durationMs)}, ${\n Math.round(dwellMs)\n }, ${visibleRatio}, ${completed}, ${source})\n `;\n // Mise à jour incrémentale de l'affinité topic (fire-and-forget)\n if (viewerId) {\n try {\n const prow =\n await sql`SELECT content FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n const content = String(prow[0]?.content || \"\");\n const tags = Array.from(\n new Set(\n Array.from(content.matchAll(/#([\\p{L}\\p{N}_]{2,30})/gu)).map((\n m: any,\n ) => String(m[1]).toLowerCase()),\n ),\n ).slice(0, 5);\n for (const tag of tags) {\n await sql`\n INSERT INTO user_topic_affinity (user_id, topic, total_time_ms, views, score, updated_at)\n VALUES (${viewerId}, ${tag}, ${Math.round(durationMs)}, 1, ${\n Math.min(1, durationMs / 30000)\n }, NOW())\n ON CONFLICT (user_id, topic)\n DO UPDATE SET\n total_time_ms = user_topic_affinity.total_time_ms + ${\n Math.round(durationMs)\n },\n views = user_topic_affinity.views + 1,\n score = LEAST(1, user_topic_affinity.score * 0.95 + ${\n Math.min(1, durationMs / 30000)\n } * 0.2),\n updated_at = NOW()\n `.catch(() => {});\n }\n } catch {}\n }\n } catch {}\n return c.json({\n success: true,\n views_count: Number(updated[0].views_count || 0),\n });\n } catch (err: any) {\n console.warn(\"[Post View Error]:\", err);\n return c.json({ success: false, views_count: null });\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/view\",\n \"/vibe/posts/:id/view\",\n \"/v1/posts/:id/view\",\n ], handlePostView);\n\n // 2quater. ÉPINGLAGE SUR LE PROFIL (maximum 2 posts épinglés par auteur)\n const MAX_PINNED_POSTS = 2;\n const handlePinPost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n\n const body = await c.req.json().catch(() => ({} as any));\n const pinned = Boolean(body.pinned);\n\n const sql = getDb();\n const owned = await sql`\n SELECT id FROM posts WHERE id = ${postId}::uuid AND author_id = ${userId} LIMIT 1\n `;\n if (owned.length === 0) {\n return c.json(\n { error: \"Publication introuvable ou non autorisée.\" },\n 403,\n );\n }\n\n if (pinned) {\n const alreadyPinned = await sql`\n SELECT 1 FROM posts WHERE id = ${postId}::uuid AND is_pinned = TRUE LIMIT 1\n `;\n if (alreadyPinned.length === 0) {\n const countRows = await sql`\n SELECT COUNT(*)::int AS n FROM posts WHERE author_id = ${userId} AND is_pinned = TRUE\n `;\n if (Number(countRows[0]?.n || 0) >= MAX_PINNED_POSTS) {\n return c.json({\n error:\n `Vous ne pouvez épingler que ${MAX_PINNED_POSTS} publications sur votre profil.`,\n code: \"PIN_LIMIT\",\n }, 400);\n }\n }\n }\n\n await sql`\n UPDATE posts SET is_pinned = ${pinned} WHERE id = ${postId}::uuid AND author_id = ${userId}\n `;\n const countRows = await sql`\n SELECT COUNT(*)::int AS n FROM posts WHERE author_id = ${userId} AND is_pinned = TRUE\n `;\n return c.json({\n success: true,\n pinned,\n pinned_count: Number(countRows[0]?.n || 0),\n });\n } catch (err: any) {\n console.error(\"[Pin Post Error]:\", err);\n return c.json({ error: \"Erreur lors de l'épinglage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/pin\",\n \"/vibe/posts/:id/pin\",\n \"/v1/posts/:id/pin\",\n ], handlePinPost);\n\n // 2quinquies. MISE EN AVANT D'UN POST (Y COMPRIS D'AUTRES COMPTES) SUR SON PROFIL\n // La limite de 2 épinglages compte à la fois les posts de l'auteur et ceux mis en avant.\n const handleProfilePinPost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n const body = await c.req.json().catch(() => ({} as any));\n const pinned = Boolean(body.pinned);\n\n const sql = getDb();\n await ensureProfilePinnedPostsTable();\n\n const ownCountRows = await sql`\n SELECT COUNT(*)::int AS n FROM posts WHERE author_id = ${userId} AND is_pinned = TRUE\n `;\n const ownCount = Number(ownCountRows[0]?.n || 0);\n\n if (!pinned) {\n await sql`DELETE FROM profile_pinned_posts WHERE user_id = ${userId} AND post_id = ${postId}::uuid`;\n const foreignCountRows = await sql`\n SELECT COUNT(*)::int AS n FROM profile_pinned_posts WHERE user_id = ${userId}\n `;\n return c.json({\n success: true,\n pinned: false,\n pinned_count: ownCount + Number(foreignCountRows[0]?.n || 0),\n });\n }\n\n const postRows = await sql`\n SELECT author_id, visibility, COALESCE(status, 'published') AS status\n FROM posts WHERE id = ${postId}::uuid LIMIT 1\n `;\n if (postRows.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n const target = postRows[0];\n if (Number(target.author_id) === userId) {\n return c.json({\n error:\n \"Vos propres publications s'épinglent via « Épingler sur votre profil ».\",\n code: \"OWN_PIN\",\n }, 400);\n }\n if (target.visibility !== \"public\" || target.status !== \"published\") {\n return c.json({\n error:\n \"Seule une publication publique peut être mise en avant sur votre profil.\",\n }, 403);\n }\n\n // Insertion conditionnelle anti-course : la limite est réévaluée côté SQL\n await sql`\n INSERT INTO profile_pinned_posts (user_id, post_id)\n SELECT ${userId}, ${postId}::uuid\n WHERE ${ownCount} + (SELECT COUNT(*) FROM profile_pinned_posts WHERE user_id = ${userId}) < ${MAX_PINNED_POSTS}\n ON CONFLICT DO NOTHING\n `;\n const existsRows = await sql`\n SELECT 1 FROM profile_pinned_posts WHERE user_id = ${userId} AND post_id = ${postId}::uuid LIMIT 1\n `;\n if (existsRows.length === 0) {\n return c.json({\n error:\n `Vous ne pouvez épingler que ${MAX_PINNED_POSTS} publications sur votre profil.`,\n code: \"PIN_LIMIT\",\n }, 400);\n }\n const foreignCountRows = await sql`\n SELECT COUNT(*)::int AS n FROM profile_pinned_posts WHERE user_id = ${userId}\n `;\n return c.json({\n success: true,\n pinned: true,\n pinned_count: ownCount + Number(foreignCountRows[0]?.n || 0),\n });\n } catch (err: any) {\n console.error(\"[Profile Pin Error]:\", err);\n return c.json({ error: \"Erreur lors de l'épinglage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/profile-pin\",\n \"/vibe/posts/:id/profile-pin\",\n \"/v1/posts/:id/profile-pin\",\n ], handleProfilePinPost);\n\n const handleAddComment = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n const body = await c.req.json().catch(() => ({} as any));\n const content = body?.content ?? \"\";\n const parent_comment_id = body?.parent_comment_id;\n const commentMedia = Array.isArray(body?.media_assets)\n ? body.media_assets\n : [];\n\n if ((!content || !String(content).trim()) && commentMedia.length === 0) {\n return c.json({ error: \"Commentaire vide.\" }, 400);\n }\n if (String(content).length > 10000) {\n return c.json({\n error: \"Commentaire trop long (10 000 caractères max).\",\n }, 400);\n }\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n\n // Validation des médias de commentaire : max 3 images + 1 vidéo\n const normalizedCommentMedia: Array<\n { url: string; media_type: string; alt_text: string }\n > = [];\n let mediaImages = 0;\n let mediaVideos = 0;\n for (const m of commentMedia) {\n if (!m || !m.url || typeof m.url !== \"string\") continue;\n const type = String(m.media_type || m.type || \"\");\n const isVideo = type.startsWith(\"video\") ||\n /\\.(mp4|webm|mov)(\\?|$)/i.test(m.url);\n if (isVideo) mediaVideos++;\n else mediaImages++;\n if (mediaImages > 3 || mediaVideos > 1) {\n return c.json(\n { error: \"Maximum 3 images et 1 vidéo par réponse.\" },\n 400,\n );\n }\n normalizedCommentMedia.push({\n url: m.url.trim().slice(0, 2048),\n media_type: type || (isVideo ? \"video/mp4\" : \"image/jpeg\"),\n alt_text: String(m.alt_text || m.alt || \"\").slice(0, 500),\n });\n }\n\n const sql = getDb();\n await ensurePostColumns();\n\n // Commande /mai : réponse IA en commentaire (abonnés Plus, Pro et Max uniquement)\n const plainStart = stripHtmlTags(String(content || \"\")).trim();\n const isMaiCommand = /^\\/mai\\b/i.test(plainStart);\n let maiQuestion = \"\";\n if (isMaiCommand) {\n const tierRows =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n if (!isPaidTier(tierRows[0]?.tier)) {\n return c.json(\n {\n error:\n \"La commande /mai est réservée aux abonnés Plus, Pro et Max.\",\n plan_required: true,\n code: \"MAI_CMD\",\n },\n 403,\n );\n }\n maiQuestion = plainStart.replace(/^\\/mai\\b/i, \"\").trim();\n if (!maiQuestion) {\n return c.json({\n error: \"Ajoutez votre question après la commande /mai.\",\n }, 400);\n }\n if (!rateLimit(`mai-cmd:${userId}`, 5, 60_000)) {\n return c.json({\n error: \"Trop de commandes /mai. Patientez une minute.\",\n }, 429);\n }\n }\n\n // Résoudre le parent (profondeur réelle, aplatie au niveau 4 max)\n let parentDepth = 0;\n let effectiveParentId: string | null = null;\n if (parent_comment_id) {\n if (!isUuid(parent_comment_id)) {\n return c.json({ error: \"Commentaire parent invalide.\" }, 400);\n }\n const parentRows = await sql`\n SELECT id, depth, parent_comment_id FROM comments WHERE id = ${parent_comment_id}::uuid LIMIT 1\n `;\n if (parentRows.length === 0) {\n return c.json({ error: \"Commentaire parent introuvable.\" }, 404);\n }\n const parent = parentRows[0];\n // On répond toujours à la racine du fil si le parent est déjà profond\n if (Number(parent.depth) >= 4) {\n effectiveParentId = parent.parent_comment_id || parent.id;\n parentDepth = 3;\n } else {\n effectiveParentId = parent.id;\n parentDepth = Number(parent.depth) || 0;\n }\n }\n\n const inserted = await sql`\n INSERT INTO comments (post_id, author_id, parent_comment_id, content, depth)\n VALUES (${postId}::uuid, ${userId}, ${\n effectiveParentId || null\n }::uuid, ${String(content || \"\").trim()}, ${parentDepth + 1})\n RETURNING *\n `;\n\n // Insertion des médias joints au commentaire\n const insertedCommentMedia: any[] = [];\n for (const m of normalizedCommentMedia) {\n try {\n const res = await sql`\n INSERT INTO media_assets (owner_id, post_id, comment_id, url, media_type, alt_text)\n VALUES (${userId}, ${postId}::uuid, ${\n inserted[0].id\n }::uuid, ${m.url}, ${m.media_type}, ${m.alt_text})\n RETURNING id, url, media_type, alt_text\n `;\n if (res && res[0]) insertedCommentMedia.push(res[0]);\n } catch (mediaInsertErr) {\n console.warn(\"[vibe-posts] Comment media insert:\", mediaInsertErr);\n }\n }\n\n await sql`UPDATE posts SET replies_count = replies_count + 1 WHERE id = ${postId}::uuid`;\n\n // Temps réel : replies_count actualisé pour l'auteur du post (flux SSE)\n try {\n const statsRows =\n await sql`SELECT author_id, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (statsRows[0]) {\n await pushRealtimeEvent(statsRows[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(statsRows[0].likes_count || 0),\n reposts_count: Number(statsRows[0].reposts_count || 0),\n replies_count: Number(statsRows[0].replies_count || 0),\n });\n }\n } catch {}\n\n // Notifier l'auteur du post (ou du commentaire parent) sans se notifier soi-même\n try {\n let notifyId: number | null = null;\n let notifMsg = \"a répondu à votre post\";\n if (effectiveParentId) {\n const pAuthor =\n await sql`SELECT author_id FROM comments WHERE id = ${effectiveParentId}::uuid LIMIT 1`;\n notifyId = Number(pAuthor[0]?.author_id) || null;\n notifMsg = \"a répondu à votre commentaire\";\n } else {\n const pAuthor =\n await sql`SELECT author_id FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n notifyId = Number(pAuthor[0]?.author_id) || null;\n }\n if (\n notifyId && notifyId !== userId &&\n !(await isBlockEitherWay(userId, notifyId))\n ) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, comment_id, message)\n VALUES (${notifyId}, ${userId}, 'reply', ${postId}::uuid, ${\n inserted[0]?.id\n }::uuid, ${notifMsg})\n `;\n }\n\n // Détection et notification des mentions @username dans les commentaires\n try {\n const plainComment = stripHtmlTags(String(content || \"\"));\n const mentionMatches = Array.from(\n new Set(plainComment.match(/@([a-zA-Z0-9_]{1,30})/g) || []),\n ).map((m: string) => m.slice(1).toLowerCase());\n if (mentionMatches.length > 0) {\n const mentionedUsers = await sql`\n SELECT id, username FROM users\n WHERE LOWER(username) = ANY(${mentionMatches}) AND id <> ${userId}\n `;\n const snippet = plainComment.length > 45\n ? `${plainComment.slice(0, 45)}…`\n : plainComment;\n for (const u of mentionedUsers) {\n if (\n Number(u.id) !== notifyId &&\n !(await isBlockEitherWay(userId, Number(u.id)))\n ) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, comment_id, message)\n VALUES (${u.id}, ${userId}, 'mention', ${postId}::uuid, ${\n inserted[0]?.id\n }::uuid, ${`vous a mentionné dans un commentaire : « ${snippet} »`})\n `.catch(() => {});\n }\n }\n }\n } catch (mentionErr) {\n console.warn(\n \"[Vibe API] Erreur notification mention commentaire:\",\n mentionErr,\n );\n }\n } catch {}\n\n const userRow =\n await sql`SELECT username FROM users WHERE id = ${userId} LIMIT 1`;\n const prRow =\n await sql`SELECT display_name, avatar_url FROM profiles WHERE user_id = ${userId} LIMIT 1`;\n\n // Réponse mAI asynchrone (même pattern que les DMs) : commentaire de @mai\n // sous le /mai, généré à partir du contenu de la publication uniquement.\n if (isMaiCommand) {\n const maiParentId = String(inserted[0]?.id);\n const maiReplyDepth = Math.min(parentDepth + 2, 4);\n setTimeout(async () => {\n try {\n await ensureMAIAccount();\n const maiUserId = await getMAIUserId(sql);\n if (!maiUserId) return;\n const answer = await generateMAICommentAnswer(sql, {\n postId,\n question: maiQuestion,\n requesterId: userId,\n });\n const replyContent = answer ||\n \"Je n'ai pas pu générer de réponse pour le moment. Réessayez dans un instant.\";\n const aiInserted = await sql`\n INSERT INTO comments (post_id, author_id, parent_comment_id, content, depth)\n VALUES (${postId}::uuid, ${maiUserId}, ${maiParentId}::uuid, ${replyContent}, ${maiReplyDepth})\n RETURNING id\n `;\n await sql`UPDATE posts SET replies_count = replies_count + 1 WHERE id = ${postId}::uuid`;\n try {\n const statsRows =\n await sql`SELECT author_id, likes_count, reposts_count, replies_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (statsRows[0]) {\n await pushRealtimeEvent(statsRows[0].author_id, \"post_stats\", {\n post_id: postId,\n likes_count: Number(statsRows[0].likes_count || 0),\n reposts_count: Number(statsRows[0].reposts_count || 0),\n replies_count: Number(statsRows[0].replies_count || 0),\n });\n }\n } catch {}\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, comment_id, message)\n VALUES (${userId}, ${maiUserId}, 'reply', ${postId}::uuid, ${\n aiInserted[0]?.id\n }::uuid, 'mAI a répondu à votre question /mai')\n `;\n } catch {}\n } catch (aiErr) {\n console.warn(\"[Vibe API] /mai async:\", (aiErr as any)?.message);\n }\n }, 50);\n }\n\n return c.json({\n success: true,\n ai_pending: isMaiCommand,\n comment: {\n ...inserted[0],\n username: userRow[0]?.username,\n display_name: prRow[0]?.display_name || userRow[0]?.username,\n avatar_url: prRow[0]?.avatar_url,\n liked_by_me: false,\n media_assets: insertedCommentMedia,\n },\n }, 201);\n } catch (err: any) {\n console.error(\"[Add Comment Error]:\", err);\n const isMissingTable = err?.code === \"42P01\" ||\n (err?.message?.includes(\"does not exist\") &&\n (err?.message?.includes(\"comments\") ||\n err?.message?.includes(\"relation\")));\n return c.json(\n {\n error: isMissingTable\n ? \"Table comments incomplète — migration requise.\"\n : (err?.message || \"Erreur ajout commentaire.\"),\n },\n 500,\n );\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/comments\",\n \"/vibe/posts/:id/comments\",\n \"/v1/posts/:id/comments\",\n \"/comments/:id\",\n ], handleAddComment);\n\n // 4. LIKE / UNLIKE A COMMENT\n const handleLikeComment = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const commentId = c.req.param(\"commentId\");\n\n if (!isUuid(commentId)) {\n return c.json({ error: \"Identifiant de commentaire invalide.\" }, 400);\n }\n\n const sql = getDb();\n\n let alreadyLiked = false;\n try {\n const existing = await sql`\n SELECT 1 FROM comment_likes WHERE user_id = ${userId} AND comment_id = ${commentId}::uuid LIMIT 1\n `;\n alreadyLiked = existing.length > 0;\n } catch {\n // Table comment_likes absente : on retombe sur un simple compteur\n }\n\n if (alreadyLiked) {\n try {\n await sql`DELETE FROM comment_likes WHERE user_id = ${userId} AND comment_id = ${commentId}::uuid`;\n } catch {}\n await sql`UPDATE comments SET likes_count = GREATEST(0, COALESCE(likes_count, 0) - 1) WHERE id = ${commentId}::uuid`;\n const row =\n await sql`SELECT COALESCE(likes_count, 0) as likes_count FROM comments WHERE id = ${commentId}::uuid LIMIT 1`;\n return c.json({\n success: true,\n liked: false,\n likes_count: Number(row[0]?.likes_count || 0),\n });\n } else {\n try {\n await sql`INSERT INTO comment_likes (user_id, comment_id) VALUES (${userId}, ${commentId}::uuid)`;\n } catch {}\n await sql`UPDATE comments SET likes_count = COALESCE(likes_count, 0) + 1 WHERE id = ${commentId}::uuid`;\n const row =\n await sql`SELECT COALESCE(likes_count, 0) as likes_count FROM comments WHERE id = ${commentId}::uuid LIMIT 1`;\n\n try {\n const cm =\n await sql`SELECT author_id, post_id FROM comments WHERE id = ${commentId}::uuid LIMIT 1`;\n const authorId = Number(cm[0]?.author_id);\n if (\n authorId && authorId !== userId &&\n !(await isBlockEitherWay(userId, authorId))\n ) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, comment_id, message)\n VALUES (${authorId}, ${userId}, 'like', ${\n cm[0]?.post_id\n }::uuid, ${commentId}::uuid, 'a aimé votre commentaire')\n `;\n }\n } catch {}\n\n return c.json({\n success: true,\n liked: true,\n likes_count: Number(row[0]?.likes_count || 0),\n });\n }\n } catch (err: any) {\n console.error(\"[Like Comment Error]:\", err);\n return c.json({ error: \"Erreur lors du like du commentaire.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/comments/:commentId/like\",\n \"/vibe/posts/:id/comments/:commentId/like\",\n \"/v1/posts/:id/comments/:commentId/like\",\n ], handleLikeComment);\n}",[463],"94f77583-fda3-4a64-b71e-f55bf8dceb6f","vibe-posts-crud.ts","c96c0516-ae03-11f1-9d35-1607ee4eb77e",312,["D",1789229675080],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — POSTS CRUD & EXTENSIONS (vibe-posts-crud.ts)\n * Création / lecture / modification / suppression de posts, sondages (vote),\n * statistiques créateur, co-signature, posts programmés et brouillons serveur.\n * Enregistré par vibe-posts.ts (registerVibePostsRoutes) via\n * registerPostCrudRoutes — l'ordre des registerMulti est inchangé.\n * ============================================================================\n */\n\nimport {\n extractToken,\n getDb,\n isPaidTier,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport { isBlockEitherWay, type RegisterMultiFn } from \"./vibe-common.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { ensureCircleTable } from \"./vibe-circle.ts\";\nimport {\n attachBookRefs,\n attachPollsAndCollabs,\n attachQuotedPosts,\n ensurePostColumns,\n extractBookRefIds,\n fetchPostMedia,\n isUuid,\n publishDuePosts,\n stripHtmlTags,\n syncPostBookRefs,\n visibilityFilter,\n} from \"./vibe-posts-core.ts\";\nimport { ensureBooksTables } from \"./vibe-books.ts\";\n\n/** Longueur maximale d'une Vibe (publication), en texte brut, par forfait. */\nconst POST_CHARS_LIMIT_FREE = 1_000;\n/** Garde-fou technique pour les forfaits payants (« caractères illimités » en pratique). */\nconst POST_CHARS_LIMIT_PAID = 50_000;\n\nconst postCharsError = (isPaid: boolean, charLimit: number) => ({\n error: isPaid\n ? \"La publication est trop longue.\"\n : `Une Vibe est limitée à ${\n POST_CHARS_LIMIT_FREE.toLocaleString(\"fr-FR\")\n } caractères (texte) avec le forfait Free. Passez à Plus, Pro ou Max pour publier sans limite.`,\n char_limit: charLimit,\n plan_required: !isPaid,\n});\n\nexport function registerPostCrudRoutes(registerMulti: RegisterMultiFn) {\n // 1. POSTS CRUD\n const handleCreatePost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n // Anti-spam : 10 posts / 5 min / utilisateur\n if (!rateLimit(`post:${userId}`, 10, 5 * 60_000)) {\n return c.json({\n error: \"Vous publiez trop vite. Patientez un instant.\",\n }, 429);\n }\n\n const body = await c.req.json();\n const {\n content,\n format = \"micro_text\",\n media_url,\n media_assets = [],\n quoted_post_id,\n } = body;\n // Audience : Public (défaut), Abonnés uniquement, Cercle Privé, privé (soi seul)\n const visibility =\n [\"public\", \"followers\", \"circle\", \"private\"].includes(body.visibility)\n ? body.visibility\n : \"public\";\n const sql = getDb();\n await ensurePostColumns();\n await ensureCircleTable().catch(() => {});\n\n if (!content || !content.trim()) {\n return c.json({ error: \"Le contenu est obligatoire.\" }, 400);\n }\n\n // Limite de longueur par forfait (texte brut, balises de mise en forme exclues)\n const tierRows =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const isPaid = isPaidTier(tierRows[0]?.tier);\n const charLimit = isPaid ? POST_CHARS_LIMIT_PAID : POST_CHARS_LIMIT_FREE;\n if (stripHtmlTags(String(content)).length > charLimit) {\n return c.json(postCharsError(isPaid, charLimit), 400);\n }\n\n // Scan de sécurité sur le texte brut (sans balises de mise en forme)\n const safety = MAIAgentFleet.assessContentSafety(stripHtmlTags(content));\n\n // Planification de publication : réservée aux abonnés Plus / Pro / Max\n let scheduledAt: string | null = null;\n let postStatus = \"published\";\n if (body.scheduled_at) {\n const ts = Date.parse(String(body.scheduled_at));\n if (Number.isNaN(ts) || ts <= Date.now()) {\n return c.json(\n { error: \"Date de planification invalide ou passée.\" },\n 400,\n );\n }\n if (!isPaid) {\n return c.json(\n {\n error:\n \"La planification des vibes est réservée aux abonnés Plus, Pro et Max.\",\n plan_required: true,\n },\n 403,\n );\n }\n scheduledAt = new Date(ts).toISOString();\n postStatus = \"scheduled\";\n }\n\n if (!safety.isSafe) {\n return c.json(\n { error: `Publication refusée : ${safety.flagReason}` },\n 403,\n );\n }\n\n // Badge « Créé avec l'IA » : valeur fournie par le client, sinon\n // réglage utilisateur posts_ai_generated_by_default\n let aiGeneratedFlag = body.ai_generated;\n if (aiGeneratedFlag === undefined || aiGeneratedFlag === null) {\n try {\n const settingsRows =\n await sql`SELECT posts_ai_generated_by_default FROM user_settings WHERE user_id = ${userId} LIMIT 1`;\n aiGeneratedFlag = Boolean(\n settingsRows[0]?.posts_ai_generated_by_default,\n );\n } catch {\n aiGeneratedFlag = false;\n }\n }\n aiGeneratedFlag = Boolean(aiGeneratedFlag);\n\n // Post cité (quote-post) : validation existence + visibilité\n let quotedId: string | null = null;\n if (\n quoted_post_id && typeof quoted_post_id === \"string\" &&\n isUuid(quoted_post_id)\n ) {\n const quotedRows =\n await sql`SELECT id, author_id, visibility FROM posts WHERE id = ${quoted_post_id}::uuid LIMIT 1`;\n if (quotedRows.length > 0) {\n const quoted = quotedRows[0];\n const quotedAuthor = Number(quoted.author_id);\n let canQuote = quoted.visibility === \"public\" ||\n quotedAuthor === userId;\n if (!canQuote && quoted.visibility === \"followers\") {\n const followerRows =\n await sql`SELECT 1 FROM follows WHERE follower_id = ${userId} AND following_id = ${quotedAuthor} LIMIT 1`;\n canQuote = followerRows.length > 0;\n } else if (!canQuote && quoted.visibility === \"circle\") {\n const memberRows =\n await sql`SELECT 1 FROM circle_members WHERE user_id = ${quotedAuthor} AND member_user_id = ${userId} LIMIT 1`;\n canQuote = memberRows.length > 0;\n }\n if (canQuote) quotedId = String(quoted.id);\n }\n }\n\n const inserted = await sql`\n INSERT INTO posts (author_id, content, format, visibility, toxicity_score, created_via, ai_generated, quoted_post_id, status, scheduled_at)\n VALUES (${userId}, ${content.trim()}, ${format}, ${visibility}, ${safety.toxicityScore}, 'web', ${aiGeneratedFlag}, ${quotedId}, ${postStatus}, ${scheduledAt})\n RETURNING *\n `;\n\n const newPost = inserted[0];\n\n // Références de Livres (@livre / attachement) : extraites du HTML et persistées\n const bookRefIds = extractBookRefIds(String(content));\n if (bookRefIds.length > 0) {\n await ensureBooksTables(sql).catch(() => {});\n await syncPostBookRefs(sql, String(newPost.id), bookRefIds);\n }\n\n // Inférence du type MIME à partir de l'extension du fichier\n const inferMediaType = (url: string, fallback = \"image/jpeg\"): string => {\n try {\n const cleanUrl = url.split(\"?\")[0].split(\"#\")[0];\n const ext = cleanUrl.split(\".\").pop()?.toLowerCase();\n switch (ext) {\n case \"png\":\n return \"image/png\";\n case \"webp\":\n return \"image/webp\";\n case \"gif\":\n return \"image/gif\";\n case \"svg\":\n return \"image/svg+xml\";\n case \"jpg\":\n case \"jpeg\":\n return \"image/jpeg\";\n case \"mp4\":\n return \"video/mp4\";\n case \"webm\":\n return \"video/webm\";\n case \"mov\":\n return \"video/quicktime\";\n case \"mp3\":\n return \"audio/mpeg\";\n case \"wav\":\n return \"audio/wav\";\n case \"ogg\":\n return \"audio/ogg\";\n default:\n return fallback;\n }\n } catch {\n return fallback;\n }\n };\n\n // Normalisation des médias (support de media_url et de la liste media_assets)\n const normalizedMedia: Array<{\n url: string;\n media_type: string;\n file_size_bytes: number;\n alt_text: string;\n }> = [];\n\n if (Array.isArray(media_assets)) {\n for (const media of media_assets) {\n if (!media || !media.url) continue;\n const urlStr = String(media.url).trim();\n if (!urlStr) continue;\n normalizedMedia.push({\n url: urlStr,\n media_type: media.media_type || media.type ||\n inferMediaType(urlStr),\n file_size_bytes: Math.max(\n 0,\n Math.round(\n Number(\n media.file_size_bytes ?? media.size ?? media.file_size ?? 0,\n ) || 0,\n ),\n ),\n alt_text: media.alt_text || media.alt || \"\",\n });\n }\n }\n\n if (media_url && typeof media_url === \"string\" && media_url.trim()) {\n const trimmedUrl = media_url.trim();\n const alreadyPresent = normalizedMedia.some((m) =>\n m.url === trimmedUrl\n );\n if (!alreadyPresent) {\n normalizedMedia.unshift({\n url: trimmedUrl,\n media_type: body.media_type || inferMediaType(trimmedUrl),\n file_size_bytes: Math.max(\n 0,\n Math.round(\n Number(\n body.file_size_bytes ?? body.size ?? body.file_size ?? 0,\n ) || 0,\n ),\n ),\n alt_text: body.alt_text || \"\",\n });\n }\n }\n\n const insertedMediaList: any[] = [];\n // Position explicite du client (drag & drop) sinon ordre d'affichage\n const mediaPositions = Array.isArray(body.media_positions)\n ? body.media_positions.map((v: any) => Number(v) || 0)\n : [];\n let posIdx = 0;\n for (const media of normalizedMedia) {\n const position = Number.isFinite(mediaPositions[posIdx])\n ? mediaPositions[posIdx]\n : posIdx;\n posIdx += 1;\n const res = await sql`\n INSERT INTO media_assets (owner_id, post_id, url, media_type, file_size_bytes, alt_text, position)\n VALUES (${userId}, ${newPost.id}::uuid, ${media.url}, ${media.media_type}, ${media.file_size_bytes}, ${media.alt_text}, ${position})\n RETURNING id, url, media_type, file_size_bytes, alt_text\n `.catch(async () =>\n await sql`\n INSERT INTO media_assets (owner_id, post_id, url, media_type, file_size_bytes, alt_text)\n VALUES (${userId}, ${newPost.id}::uuid, ${media.url}, ${media.media_type}, ${media.file_size_bytes}, ${media.alt_text})\n RETURNING id, url, media_type, file_size_bytes, alt_text\n `\n );\n if (res && res[0]) {\n insertedMediaList.push(res[0]);\n }\n }\n\n // Sondage intégré : { options: string[2..4], duration_hours: 1h..7j, question? }\n let createdPoll: any = null;\n try {\n const pollBody = (body as any)?.poll;\n if (pollBody && Array.isArray(pollBody.options)) {\n const labels = pollBody.options.map((o: any) =>\n String(o ?? \"\").trim()\n ).filter(Boolean).slice(0, 4);\n const durationHours = Math.min(\n 24 * 7,\n Math.max(1, Math.round(Number(pollBody.duration_hours) || 24)),\n );\n if (labels.length >= 2) {\n const question =\n String(pollBody.question || \"\").trim().slice(0, 120) ||\n \"Votre avis ?\";\n const endsAt = new Date(Date.now() + durationHours * 3600_000)\n .toISOString();\n const pollRows = await sql`\n INSERT INTO post_polls (post_id, question, ends_at)\n VALUES (${newPost.id}::uuid, ${question}, ${endsAt}::timestamptz)\n RETURNING *\n `;\n if (pollRows[0]) {\n createdPoll = {\n ...pollRows[0],\n options: [],\n my_vote: null,\n expired: false,\n };\n for (let i = 0; i < labels.length; i++) {\n const optRows = await sql`\n INSERT INTO post_poll_options (poll_id, label, position)\n VALUES (${pollRows[0].id}::uuid, ${\n labels[i].slice(0, 80)\n }, ${i})\n RETURNING *\n `;\n if (optRows[0]) createdPoll.options.push(optRows[0]);\n }\n }\n }\n }\n } catch (pollErr) {\n console.warn(\"[Vibe API] Erreur création sondage:\", pollErr);\n }\n\n // Co-auteur : { collaborator_username }\n // - réglage invité collab_auto_accept = TRUE → co-signature directe (status\n // 'accepted', auto_accepted = TRUE, simple notification, AUCUNE invitation)\n // - sinon → invitation 'pending' à accepter/refuser (comportement historique)\n let createdCollaborators: any[] = [];\n try {\n const collabUsername = String(\n (body as any)?.collaborator_username || \"\",\n ).trim().replace(/^@/, \"\").toLowerCase();\n if (collabUsername) {\n const targetRows =\n await sql`SELECT id, username FROM users WHERE LOWER(username) = ${collabUsername} LIMIT 1`;\n const targetId = targetRows[0] ? Number(targetRows[0].id) : 0;\n if (\n targetId && targetId !== userId &&\n !(await isBlockEitherWay(userId, targetId))\n ) {\n // Réglage d'auto-acceptation du co-auteur désigné\n let autoAccept = false;\n try {\n const s =\n await sql`SELECT collab_auto_accept FROM user_settings WHERE user_id = ${targetId} LIMIT 1`\n .catch(() => []);\n autoAccept = Boolean(s[0]?.collab_auto_accept);\n } catch {}\n if (autoAccept) {\n await sql`\n INSERT INTO post_collaborators (post_id, user_id, status, auto_accepted, accepted_at)\n VALUES (${newPost.id}::uuid, ${targetId}, 'accepted', TRUE, NOW())\n ON CONFLICT (post_id, user_id) DO NOTHING\n `.catch(() => {});\n createdCollaborators = [{\n username: targetRows[0].username,\n status: \"accepted\",\n }];\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${targetId}, ${userId}, 'mention', ${newPost.id}::uuid, 'vous a ajouté comme co-auteur d\\'une publication')\n `.catch(() => {});\n try {\n await pushRealtimeEvent(targetId, \"notification\", {\n type: \"collab_accepted\",\n post_id: newPost.id,\n actor_id: userId,\n });\n } catch {}\n } else {\n await sql`\n INSERT INTO post_collaborators (post_id, user_id, status)\n VALUES (${newPost.id}::uuid, ${targetId}, 'pending')\n ON CONFLICT (post_id, user_id) DO NOTHING\n `.catch(() => {});\n createdCollaborators = [{\n username: targetRows[0].username,\n status: \"pending\",\n }];\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${targetId}, ${userId}, 'mention', ${newPost.id}::uuid, 'vous a invité à co-signer une publication')\n `.catch(() => {});\n try {\n await pushRealtimeEvent(targetId, \"notification\", {\n type: \"collab_invite\",\n post_id: newPost.id,\n actor_id: userId,\n });\n } catch {}\n }\n }\n }\n } catch (collabErr) {\n console.warn(\"[Vibe API] Erreur invitation co-auteur:\", collabErr);\n }\n\n const userRow =\n await sql`SELECT username FROM users WHERE id = ${userId} LIMIT 1`;\n const profileRow =\n await sql`SELECT display_name, avatar_url FROM profiles WHERE user_id = ${userId} LIMIT 1`;\n\n // Publication planifiée : le compteur de posts et les notifications\n // (mentions, citations) seront déclenchés à l'échéance (publishDuePosts).\n if (postStatus === \"scheduled\") {\n const createdPost: any = {\n ...newPost,\n username: userRow[0]?.username,\n display_name: profileRow[0]?.display_name || userRow[0]?.username,\n avatar_url: profileRow[0]?.avatar_url,\n media_assets: insertedMediaList,\n quoted_post: null,\n poll: createdPoll,\n collaborators: createdCollaborators,\n };\n await attachBookRefs([createdPost], userId).catch(() => {});\n return c.json({ success: true, post: createdPost }, 201);\n }\n\n await sql`UPDATE profiles SET posts_count = posts_count + 1 WHERE user_id = ${userId}`;\n\n // Détection et notification des mentions @username dans les publications\n // (les ancres de Livres @livre sont retirées du scan pour éviter de faux utilisateurs)\n try {\n const plainContent = stripHtmlTags(\n String(content).replace(/<a\\b[^>]*data-book-id[\\s\\S]*?<\\/a>/gi, \" \"),\n );\n const mentionMatches = Array.from(\n new Set(plainContent.match(/@([a-zA-Z0-9_]{1,30})/g) || []),\n ).map((m: string) => m.slice(1).toLowerCase());\n if (mentionMatches.length > 0) {\n const mentionedUsers = await sql`\n SELECT id, username FROM users\n WHERE LOWER(username) = ANY(${mentionMatches}) AND id <> ${userId}\n `;\n const snippet = plainContent.length > 45\n ? `${plainContent.slice(0, 45)}…`\n : plainContent;\n for (const u of mentionedUsers) {\n // Blocage croisé : aucune notification de mention ne traverse un blocage\n if (await isBlockEitherWay(userId, Number(u.id))) continue;\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${u.id}, ${userId}, 'mention', ${newPost.id}::uuid, ${`vous a mentionné dans une publication : « ${snippet} »`})\n `.catch(() => {});\n }\n }\n } catch (mentionErr) {\n console.warn(\n \"[Vibe API] Erreur notification mention post:\",\n mentionErr,\n );\n }\n\n // Notification de citation à l'auteur du post original\n if (quotedId) {\n try {\n const quotedRows =\n await sql`SELECT author_id, content FROM posts WHERE id = ${quotedId}::uuid LIMIT 1`;\n const recipientId = Number(quotedRows[0]?.author_id);\n if (\n recipientId && recipientId !== userId &&\n !(await isBlockEitherWay(userId, recipientId))\n ) {\n const plainQuoted = stripHtmlTags(content);\n const qSnippet = plainQuoted.length > 45\n ? `${plainQuoted.slice(0, 45)}…`\n : plainQuoted;\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${recipientId}, ${userId}, 'quote', ${newPost.id}::uuid, ${`a cité votre publication : « ${qSnippet} »`})\n `.catch(() => {});\n }\n } catch (quoteErr) {\n console.warn(\"[Vibe API] Erreur notification citation:\", quoteErr);\n }\n }\n\n // Notification aux abonnés aux posts de ce compte (post_subscriptions)\n try {\n const subscribers = await sql`\n SELECT ps.subscriber_id FROM post_subscriptions ps\n WHERE ps.author_id = ${userId} AND ps.subscriber_id <> ${userId}\n `;\n const plainSub = stripHtmlTags(content);\n const subSnippet = plainSub.length > 45\n ? `${plainSub.slice(0, 45)}…`\n : plainSub;\n for (const s of subscribers) {\n if (await isBlockEitherWay(userId, Number(s.subscriber_id))) continue;\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${s.subscriber_id}, ${userId}, 'post', ${newPost.id}::uuid, ${`a publié une nouvelle Vibe : « ${subSnippet} »`})\n `.catch(() => {});\n }\n } catch (subErr) {\n console.warn(\"[Vibe API] Erreur notification abonnés posts:\", subErr);\n }\n\n const createdPost: any = {\n ...newPost,\n username: userRow[0]?.username,\n display_name: profileRow[0]?.display_name || userRow[0]?.username,\n avatar_url: profileRow[0]?.avatar_url,\n media_assets: insertedMediaList,\n quoted_post: null,\n poll: createdPoll,\n collaborators: createdCollaborators,\n };\n await attachQuotedPosts([createdPost]);\n await attachBookRefs([createdPost], userId).catch(() => {});\n\n return c.json({\n success: true,\n post: createdPost,\n }, 201);\n } catch (err: any) {\n console.error(\"[Vibe API] Error creating post:\", err);\n return c.json({ error: \"Erreur serveur lors de la publication.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts\",\n \"/vibe/posts\",\n \"/v1/posts\",\n \"/posts\",\n ], handleCreatePost);\n\n // 1b. POLL VOTE (vote unique modifiable)\n const handlePollVote = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n const body = await c.req.json().catch(() => ({}));\n const optionId = String(body?.option_id || \"\");\n if (!isUuid(optionId)) return c.json({ error: \"Option invalide.\" }, 400);\n const sql = getDb();\n await ensurePostColumns();\n const polls =\n await sql`SELECT * FROM post_polls WHERE post_id = ${postId}::uuid LIMIT 1`;\n if (polls.length === 0) {\n return c.json({ error: \"Aucun sondage sur ce post.\" }, 404);\n }\n const poll = polls[0];\n if (new Date(poll.ends_at).getTime() <= Date.now()) {\n return c.json({ error: \"Sondage expiré.\" }, 410);\n }\n const optRows =\n await sql`SELECT * FROM post_poll_options WHERE id = ${optionId}::uuid AND poll_id = ${poll.id}::uuid LIMIT 1`;\n if (optRows.length === 0) {\n return c.json({ error: \"Option introuvable pour ce sondage.\" }, 404);\n }\n const existing =\n await sql`SELECT option_id FROM post_poll_votes WHERE poll_id = ${poll.id}::uuid AND user_id = ${userId} LIMIT 1`;\n if (existing.length > 0 && String(existing[0].option_id) === optionId) {\n // Idempotent : même option → résultats courants\n } else if (existing.length > 0) {\n const oldOptionId = String(existing[0].option_id);\n await sql`UPDATE post_poll_votes SET option_id = ${optionId}::uuid, voted_at = NOW() WHERE poll_id = ${poll.id}::uuid AND user_id = ${userId}`;\n await sql`UPDATE post_poll_options SET votes_count = GREATEST(0, votes_count - 1) WHERE id = ${oldOptionId}::uuid`;\n await sql`UPDATE post_poll_options SET votes_count = votes_count + 1 WHERE id = ${optionId}::uuid`;\n } else {\n await sql`INSERT INTO post_poll_votes (poll_id, user_id, option_id) VALUES (${poll.id}::uuid, ${userId}, ${optionId}::uuid)`;\n await sql`UPDATE post_poll_options SET votes_count = votes_count + 1 WHERE id = ${optionId}::uuid`;\n await sql`UPDATE post_polls SET total_votes = total_votes + 1 WHERE id = ${poll.id}::uuid`;\n }\n const freshPoll =\n (await sql`SELECT * FROM post_polls WHERE id = ${poll.id}::uuid LIMIT 1`)[\n 0\n ] || poll;\n const freshOptions =\n await sql`SELECT id, label, votes_count, position FROM post_poll_options WHERE poll_id = ${poll.id}::uuid ORDER BY position ASC`;\n return c.json({\n success: true,\n poll: {\n ...freshPoll,\n options: freshOptions,\n my_vote: optionId,\n expired: false,\n },\n });\n } catch (err: any) {\n console.error(\"[vibe-posts] Poll vote error:\", err);\n return c.json({ error: \"Erreur vote sondage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/poll/vote\",\n \"/vibe/posts/:id/poll/vote\",\n \"/v1/posts/:id/poll/vote\",\n \"/posts/:id/poll/vote\",\n ], handlePollVote);\n\n // 1c. POST STATS (auteur uniquement ; reach temporel via post_views)\n const handlePostStats = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n const periodParam = String(c.req.query(\"period\") || \"7d\").toLowerCase();\n const periodDays = periodParam === \"30d\"\n ? 30\n : periodParam === \"90d\"\n ? 90\n : 7;\n const sinceIso = new Date(Date.now() - periodDays * 86400000)\n .toISOString();\n const sql = getDb();\n const rows =\n await sql`SELECT author_id, views_count, likes_count, reposts_count, replies_count, bookmarks_count FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (rows.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n if (Number(rows[0].author_id) !== userId) {\n return c.json({ error: \"Réservé à l'auteur.\" }, 403);\n }\n const p = rows[0];\n const views = Number(p.views_count || 0);\n const likes = Number(p.likes_count || 0);\n const reposts = Number(p.reposts_count || 0);\n const replies = Number(p.replies_count || 0);\n const bookmarks = Number(p.bookmarks_count || 0);\n const engagement_rate = views > 0\n ? Math.round(((likes + reposts + replies + bookmarks) / views) * 1000) /\n 10\n : 0;\n // Série temporelle des vues (best-effort)\n let reach: Array<{ day: string; views: number }> = [];\n try {\n await ensurePostColumns().catch(() => {});\n const viewRows = await sql`\n SELECT created_at::date AS day, COUNT(*) AS views\n FROM post_views\n WHERE post_id = ${postId}::uuid AND created_at >= ${sinceIso}::timestamptz\n GROUP BY created_at::date\n ORDER BY day ASC\n `;\n const byDay = new Map<string, number>();\n for (const r of viewRows as any[]) {\n const d = String((r as any).day).slice(0, 10);\n byDay.set(d, Number((r as any).views || 0));\n }\n for (let i = periodDays - 1; i >= 0; i--) {\n const d = new Date(Date.now() - i * 86400000).toISOString().slice(\n 0,\n 10,\n );\n reach.push({ day: d, views: byDay.get(d) || 0 });\n }\n } catch {}\n return c.json({\n views,\n likes,\n reposts,\n replies,\n bookmarks,\n engagement_rate,\n period: periodParam,\n reach_7d: reach,\n reach,\n top_referrers: [],\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur stats post.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/posts/:id/stats\",\n \"/vibe/posts/:id/stats\",\n \"/v1/posts/:id/stats\",\n \"/posts/:id/stats\",\n ], handlePostStats);\n\n // 1d. CREATOR STATS (période ?period=7d|30d|90d|12m, défaut 30d)\n // Champs historiques conservés (total_*, top_post, daily) + nouveaux :\n // series[{day,views,likes,reposts,replies,profile_views}], sources, profile_views.\n const handleCreatorStats = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const periodParam = String(c.req.query(\"period\") || \"30d\").toLowerCase();\n const periodDays = periodParam === \"7d\"\n ? 7\n : periodParam === \"90d\"\n ? 90\n : periodParam === \"12m\"\n ? 365\n : 30;\n const sinceIso = new Date(Date.now() - periodDays * 86400000)\n .toISOString();\n const sql = getDb();\n await publishDuePosts().catch(() => {});\n await ensurePostColumns().catch(() => {});\n const agg = await sql`\n SELECT COALESCE(SUM(views_count), 0) AS total_views,\n COALESCE(SUM(likes_count), 0) AS total_likes,\n COALESCE(SUM(reposts_count), 0) AS total_reposts,\n COALESCE(SUM(replies_count), 0) AS total_replies,\n COUNT(*) AS posts_count\n FROM posts\n WHERE author_id = ${userId} AND published_at >= ${sinceIso}::timestamptz\n `;\n const top = await sql`\n SELECT id, content, views_count, likes_count, reposts_count, replies_count, published_at,\n (COALESCE(likes_count,0) + COALESCE(reposts_count,0) * 2 + COALESCE(replies_count,0) * 2) AS engagement\n FROM posts\n WHERE author_id = ${userId} AND published_at >= ${sinceIso}::timestamptz\n ORDER BY engagement DESC, published_at DESC\n LIMIT 1\n `;\n const daily = await sql`\n SELECT published_at::date AS day, COALESCE(SUM(views_count), 0) AS views, COUNT(*) AS posts\n FROM posts\n WHERE author_id = ${userId} AND published_at >= ${sinceIso}::timestamptz\n GROUP BY published_at::date\n ORDER BY day ASC\n `;\n const a = agg[0] || {};\n // Séries temporelles par date d'ÉVÉNEMENT (best-effort, tables absentes => zéros)\n const days: string[] = [];\n for (let i = periodDays - 1; i >= 0; i--) {\n days.push(\n new Date(Date.now() - i * 86400000).toISOString().slice(0, 10),\n );\n }\n const bucket = (rows: any[], key = \"day\", val = \"n\") => {\n const m = new Map<string, number>();\n for (const r of rows as any[]) {\n m.set(String(r[key]).slice(0, 10), Number(r[val] || 0));\n }\n return m;\n };\n let viewsByDay = new Map<string, number>();\n let likesByDay = new Map<string, number>();\n let repostsByDay = new Map<string, number>();\n let repliesByDay = new Map<string, number>();\n let profileByDay = new Map<string, number>();\n let sources: Array<{ source: string; views: number }> = [];\n let profileViewsTotal = 0;\n try {\n const [v, l, rp] = await Promise.all([\n sql`SELECT pv.created_at::date AS day, COUNT(*) AS n FROM post_views pv JOIN posts p ON p.id = pv.post_id WHERE p.author_id = ${userId} AND pv.created_at >= ${sinceIso}::timestamptz GROUP BY pv.created_at::date`,\n sql`SELECT pi.created_at::date AS day, COUNT(*) AS n FROM post_interactions pi JOIN posts p ON p.id = pi.post_id WHERE p.author_id = ${userId} AND pi.interaction_type = 'like' AND pi.created_at >= ${sinceIso}::timestamptz GROUP BY pi.created_at::date`,\n sql`SELECT pi.created_at::date AS day, COUNT(*) AS n FROM post_interactions pi JOIN posts p ON p.id = pi.post_id WHERE p.author_id = ${userId} AND pi.interaction_type = 'repost' AND pi.created_at >= ${sinceIso}::timestamptz GROUP BY pi.created_at::date`,\n ]);\n viewsByDay = bucket(v as any[]);\n likesByDay = bucket(l as any[]);\n repostsByDay = bucket(rp as any[]);\n } catch {}\n try {\n const cm =\n await sql`SELECT c.created_at::date AS day, COUNT(*) AS n FROM comments c JOIN posts p ON p.id = c.post_id WHERE p.author_id = ${userId} AND c.created_at >= ${sinceIso}::timestamptz GROUP BY c.created_at::date`;\n repliesByDay = bucket(cm as any[]);\n } catch {}\n try {\n const pv =\n await sql`SELECT created_at::date AS day, COUNT(*) AS n FROM profile_views WHERE profile_user_id = ${userId} AND created_at >= ${sinceIso}::timestamptz GROUP BY created_at::date`;\n profileByDay = bucket(pv as any[]);\n for (const n of profileByDay.values()) profileViewsTotal += n;\n } catch {}\n try {\n const s =\n await sql`SELECT COALESCE(pv.source, 'feed') AS source, COUNT(*) AS views FROM post_views pv JOIN posts p ON p.id = pv.post_id WHERE p.author_id = ${userId} AND pv.created_at >= ${sinceIso}::timestamptz GROUP BY COALESCE(pv.source, 'feed') ORDER BY views DESC`;\n sources = (s as any[]).map((r: any) => ({\n source: String(r.source),\n views: Number(r.views || 0),\n }));\n } catch {}\n // ── Nouvelles analyses (migration 019) ──\n // 1. Comparaison avec la période précédente (croissance)\n let previous_period: any = null;\n try {\n const prevSince = new Date(Date.now() - 2 * periodDays * 86400000)\n .toISOString();\n const prevUntil = new Date(Date.now() - periodDays * 86400000)\n .toISOString();\n const prev = await sql`\n SELECT COALESCE(SUM(views_count), 0) AS views, COALESCE(SUM(likes_count), 0) AS likes,\n COALESCE(SUM(reposts_count), 0) AS reposts, COALESCE(SUM(replies_count), 0) AS replies,\n COUNT(*) AS posts\n FROM posts\n WHERE author_id = ${userId} AND published_at >= ${prevSince}::timestamptz AND published_at < ${prevUntil}::timestamptz\n `;\n previous_period = {\n total_views: Number(prev[0]?.views || 0),\n total_likes: Number(prev[0]?.likes || 0),\n total_reposts: Number(prev[0]?.reposts || 0),\n total_replies: Number(prev[0]?.replies || 0),\n posts_count: Number(prev[0]?.posts || 0),\n };\n } catch {}\n // 2. Meilleur jour (vues) + meilleur jour de publication\n let best_day: any = null;\n let best_publish_day: any = null;\n try {\n const bd = await sql`\n SELECT created_at::date AS day, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${userId} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 1\n `;\n if (bd[0]) {\n best_day = {\n day: String(bd[0].day).slice(0, 10),\n views: Number(bd[0].views || 0),\n };\n }\n } catch {}\n try {\n const bpd = await sql`\n SELECT published_at::date AS day, COALESCE(SUM(views_count), 0) AS views, COUNT(*) AS posts\n FROM posts WHERE author_id = ${userId} AND published_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 1\n `;\n if (bpd[0]) {\n best_publish_day = {\n day: String(bpd[0].day).slice(0, 10),\n views: Number(bpd[0].views || 0),\n posts: Number(bpd[0].posts || 0),\n };\n }\n } catch {}\n // 3. Répartition horaire des vues (0-23) pour trouver les heures optimales\n let hourly: Array<{ hour: number; views: number }> = [];\n try {\n const h = await sql`\n SELECT EXTRACT(HOUR FROM pv.created_at)::int AS hour, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${userId} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY 1\n `;\n const byHour = new Map<number, number>(\n (h as any[]).map((r: any) => [Number(r.hour), Number(r.views || 0)]),\n );\n hourly = Array.from(\n { length: 24 },\n (_, i) => ({ hour: i, views: byHour.get(i) || 0 }),\n );\n } catch {}\n // 4. Posts les plus engageants de la période (top 5)\n let top_posts: any[] = [];\n try {\n const tp = await sql`\n SELECT id, content, views_count, likes_count, reposts_count, replies_count, published_at,\n (COALESCE(likes_count,0) + COALESCE(reposts_count,0)*2 + COALESCE(replies_count,0)*2) AS engagement\n FROM posts WHERE author_id = ${userId} AND published_at >= ${sinceIso}::timestamptz\n ORDER BY engagement DESC, published_at DESC LIMIT 5\n `;\n top_posts = (tp as any[]).map((p: any) => ({\n ...p,\n engagement: Number(p.engagement || 0),\n }));\n } catch {}\n // 5. Taux d'engagement moyen par post et fréquence de publication\n const views_total = Number(a.total_views || 0);\n const engagementRate = views_total > 0\n ? Math.round(\n ((Number(a.total_likes || 0) + Number(a.total_reposts || 0) * 2 +\n Number(a.total_replies || 0) * 2) / views_total) * 1000,\n ) / 10\n : 0;\n const postsPerWeek = periodDays >= 7\n ? Math.round((Number(a.posts_count || 0) / (periodDays / 7)) * 10) / 10\n : Number(a.posts_count || 0);\n const series = days.map((day) => ({\n day,\n views: viewsByDay.get(day) || 0,\n likes: likesByDay.get(day) || 0,\n reposts: repostsByDay.get(day) || 0,\n replies: repliesByDay.get(day) || 0,\n profile_views: profileByDay.get(day) || 0,\n }));\n return c.json({\n total_views: views_total,\n total_likes: Number(a.total_likes || 0),\n total_reposts: Number(a.total_reposts || 0),\n total_replies: Number(a.total_replies || 0),\n posts_count: Number(a.posts_count || 0),\n top_post: top[0] || null,\n daily,\n period: periodParam,\n series,\n sources,\n profile_views: profileViewsTotal,\n // Nouvelles analyses (migration 019)\n previous_period,\n best_day,\n best_publish_day,\n hourly,\n top_posts,\n engagement_rate: engagementRate,\n posts_per_week: postsPerWeek,\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur stats créateur.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/me/creator-stats\",\n \"/vibe/users/me/creator-stats\",\n \"/v1/users/me/creator-stats\",\n \"/users/me/creator-stats\",\n ], handleCreatorStats);\n\n // 1e. COLLABORATION accept / decline (co-auteur invité uniquement)\n const handleCollabRespond = async (c: any, accept: boolean) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n const sql = getDb();\n await ensurePostColumns();\n const rows =\n await sql`SELECT status FROM post_collaborators WHERE post_id = ${postId}::uuid AND user_id = ${userId} LIMIT 1`;\n if (rows.length === 0) {\n return c.json({ error: \"Aucune invitation.\" }, 404);\n }\n await sql`\n UPDATE post_collaborators\n SET status = ${accept ? \"accepted\" : \"declined\"}, accepted_at = ${\n accept ? new Date().toISOString() : null\n }::timestamptz\n WHERE post_id = ${postId}::uuid AND user_id = ${userId}\n `;\n try {\n const postRows =\n await sql`SELECT author_id FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n const authorId = Number(postRows[0]?.author_id);\n if (authorId) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${authorId}, ${userId}, 'mention', ${postId}::uuid, ${\n accept\n ? \"a accepté votre invitation de co-signature\"\n : \"a décliné votre invitation de co-signature\"\n })\n `.catch(() => {});\n await pushRealtimeEvent(authorId, \"notification\", {\n type: accept ? \"collab_accepted\" : \"collab_declined\",\n post_id: postId,\n actor_id: userId,\n }).catch(() => {});\n }\n } catch {}\n return c.json({\n success: true,\n status: accept ? \"accepted\" : \"declined\",\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur réponse collaboration.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/collaborate/accept\",\n \"/vibe/posts/:id/collaborate/accept\",\n \"/v1/posts/:id/collaborate/accept\",\n \"/posts/:id/collaborate/accept\",\n ], (c: any) => handleCollabRespond(c, true));\n registerMulti(\"post\", [\n \"/api/vibe/posts/:id/collaborate/decline\",\n \"/vibe/posts/:id/collaborate/decline\",\n \"/v1/posts/:id/collaborate/decline\",\n \"/posts/:id/collaborate/decline\",\n ], (c: any) => handleCollabRespond(c, false));\n\n // 1f. SCHEDULED LIST + RESCHEDULE (gate Plus/Pro/Max, null = publier aussitôt)\n const handleScheduledList = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n await ensurePostColumns();\n const posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.author_id = ${userId} AND p.status = 'scheduled'\n ORDER BY p.scheduled_at ASC\n `;\n await fetchPostMedia(posts);\n await attachPollsAndCollabs(posts, userId);\n return c.json({ posts });\n } catch (err: any) {\n return c.json({ error: \"Erreur posts programmés.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/posts/scheduled\",\n \"/vibe/posts/scheduled\",\n \"/v1/posts/scheduled\",\n \"/posts/scheduled\",\n ], handleScheduledList);\n\n const handleReschedule = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n const body = await c.req.json().catch(() => ({}));\n const sql = getDb();\n const existing =\n await sql`SELECT id, author_id FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n if (Number(existing[0].author_id) !== userId) {\n return c.json({ error: \"Réservé à l'auteur.\" }, 403);\n }\n const tierRows =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n if (!isPaidTier(tierRows[0]?.tier)) {\n return c.json({\n error:\n \"La planification des vibes est réservée aux abonnés Plus, Pro et Max.\",\n plan_required: true,\n }, 403);\n }\n const raw = body?.scheduled_at;\n if (raw === null || raw === \"\") {\n await sql`UPDATE posts SET status = 'published', scheduled_at = NULL, published_at = NOW(), updated_at = NOW() WHERE id = ${postId}::uuid`;\n return c.json({ success: true, status: \"published\" });\n }\n const ts = Date.parse(String(raw || \"\"));\n if (Number.isNaN(ts) || ts <= Date.now()) {\n return c.json(\n { error: \"Date de planification invalide ou passée.\" },\n 400,\n );\n }\n const scheduledAt = new Date(ts).toISOString();\n await sql`UPDATE posts SET status = 'scheduled', scheduled_at = ${scheduledAt}::timestamptz, updated_at = NOW() WHERE id = ${postId}::uuid`;\n return c.json({\n success: true,\n status: \"scheduled\",\n scheduled_at: scheduledAt,\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur replanification.\" }, 500);\n }\n };\n\n registerMulti(\"patch\", [\n \"/api/vibe/posts/:id/reschedule\",\n \"/vibe/posts/:id/reschedule\",\n \"/v1/posts/:id/reschedule\",\n \"/posts/:id/reschedule\",\n ], handleReschedule);\n\n // 1g. DRAFTS CRUD (multi-brouillons, tri updated_at DESC)\n const handleDraftsList = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n await ensurePostColumns();\n const drafts =\n await sql`SELECT * FROM post_drafts WHERE user_id = ${userId} ORDER BY updated_at DESC LIMIT 20`;\n return c.json({ drafts });\n } catch (err: any) {\n return c.json({ error: \"Erreur brouillons.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/drafts\",\n \"/vibe/drafts\",\n \"/v1/drafts\",\n \"/drafts\",\n ], handleDraftsList);\n\n const handleDraftUpsert = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const body = await c.req.json().catch(() => ({}));\n const draftId = c.req.param(\"id\") || (body as any)?.id;\n const html = String(body?.html || \"\");\n const text = String(body?.text || \"\");\n if (!html && !text) return c.json({ error: \"Brouillon vide.\" }, 400);\n const visibility =\n [\"public\", \"followers\", \"circle\", \"private\"].includes(body?.visibility)\n ? body.visibility\n : \"public\";\n const scheduledAt = body?.scheduled_at\n ? new Date(Date.parse(String(body.scheduled_at))).toISOString()\n : null;\n const aiGenerated = Boolean(body?.ai_generated);\n const mediaAssets = Array.isArray(body?.media_assets)\n ? body.media_assets.slice(0, 10)\n : [];\n const sql = getDb();\n await ensurePostColumns();\n if (draftId && isUuid(String(draftId))) {\n const owned = await sql`SELECT id FROM post_drafts WHERE id = ${\n String(draftId)\n }::uuid AND user_id = ${userId} LIMIT 1`;\n if (owned.length === 0) {\n return c.json({ error: \"Brouillon introuvable.\" }, 404);\n }\n await sql`\n UPDATE post_drafts\n SET html = ${html}, text = ${text}, visibility = ${visibility}, scheduled_at = ${scheduledAt}::timestamptz,\n ai_generated = ${aiGenerated}, media_assets = ${\n JSON.stringify(mediaAssets)\n }::jsonb, updated_at = NOW()\n WHERE id = ${String(draftId)}::uuid\n `;\n return c.json({ success: true, id: String(draftId) });\n }\n const inserted = await sql`\n INSERT INTO post_drafts (user_id, html, text, visibility, scheduled_at, ai_generated, media_assets)\n VALUES (${userId}, ${html}, ${text}, ${visibility}, ${scheduledAt}::timestamptz, ${aiGenerated}, ${\n JSON.stringify(mediaAssets)\n }::jsonb)\n RETURNING id\n `;\n return c.json({ success: true, id: String(inserted[0]?.id) }, 201);\n } catch (err: any) {\n return c.json({ error: \"Erreur sauvegarde brouillon.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/drafts\",\n \"/vibe/drafts\",\n \"/v1/drafts\",\n \"/drafts\",\n ], handleDraftUpsert);\n registerMulti(\"put\", [\n \"/api/vibe/drafts/:id\",\n \"/vibe/drafts/:id\",\n \"/v1/drafts/:id\",\n \"/drafts/:id\",\n ], handleDraftUpsert);\n\n const handleDraftDelete = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const draftId = c.req.param(\"id\");\n if (!isUuid(String(draftId))) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n const sql = getDb();\n await sql`DELETE FROM post_drafts WHERE id = ${\n String(draftId)\n }::uuid AND user_id = ${userId}`;\n return c.json({ success: true });\n } catch (err: any) {\n return c.json({ error: \"Erreur suppression brouillon.\" }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/drafts/:id\",\n \"/vibe/drafts/:id\",\n \"/v1/drafts/:id\",\n \"/drafts/:id\",\n ], handleDraftDelete);\n\n const handleGetPost = async (c: any) => {\n try {\n const postId = c.req.param(\"id\");\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const sql = getDb();\n await ensureCircleTable().catch(() => {});\n const rows = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.id = ${postId}::uuid ${visibilityFilter(currentUserId)}\n LIMIT 1\n `;\n\n if (rows.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n\n // Une vibe planifiée n'est visible que par son auteur\n if (\n (rows[0] as any).status === \"scheduled\" &&\n Number((rows[0] as any).author_id) !== currentUserId\n ) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n\n const media =\n await sql`SELECT * FROM media_assets WHERE post_id = ${postId}::uuid ORDER BY position ASC, created_at ASC`\n .catch(async () =>\n await sql`SELECT * FROM media_assets WHERE post_id = ${postId}::uuid`\n );\n const postResult = { ...rows[0], media_assets: media };\n await attachQuotedPosts([postResult]);\n await attachPollsAndCollabs([postResult], currentUserId);\n await attachBookRefs([postResult], currentUserId).catch(() => {});\n return c.json({ post: postResult });\n } catch {\n return c.json({ error: \"Erreur lors de la récupération.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/posts/:id\",\n \"/vibe/posts/:id\",\n \"/v1/posts/:id\",\n \"/posts/:id\",\n ], handleGetPost);\n\n const handleDeletePost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n const sql = getDb();\n\n const deleted = await sql`\n DELETE FROM posts WHERE id = ${postId}::uuid AND author_id = ${userId} RETURNING id\n `;\n\n if (deleted.length === 0) {\n return c.json(\n { error: \"Publication introuvable ou non autorisée.\" },\n 403,\n );\n }\n\n await sql`UPDATE profiles SET posts_count = GREATEST(0, posts_count - 1) WHERE user_id = ${userId}`;\n return c.json({ success: true, message: \"Publication supprimée.\" });\n } catch {\n return c.json({ error: \"Erreur suppression.\" }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/posts/:id\",\n \"/vibe/posts/:id\",\n \"/v1/posts/:id\",\n \"/posts/:id\",\n ], handleDeletePost);\n\n // 1bis. ÉDITION D'UNE PUBLICATION (auteur uniquement)\n const handleUpdatePost = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const postId = c.req.param(\"id\");\n if (!isUuid(postId)) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n\n const body = await c.req.json();\n const { content, media_assets = [] } = body;\n\n const sql = getDb();\n await ensurePostColumns();\n\n const existing =\n await sql`SELECT id, author_id, status, scheduled_at FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n if (Number(existing[0].author_id) !== userId) {\n return c.json({\n error: \"Seul l'auteur peut modifier cette publication.\",\n }, 403);\n }\n\n if (!content || !String(content).trim()) {\n return c.json({ error: \"Le contenu est obligatoire.\" }, 400);\n }\n\n // Limite de longueur par forfait (texte brut, balises de mise en forme exclues)\n const tierRows =\n await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n const isPaid = isPaidTier(tierRows[0]?.tier);\n const charLimit = isPaid ? POST_CHARS_LIMIT_PAID : POST_CHARS_LIMIT_FREE;\n if (stripHtmlTags(String(content)).length > charLimit) {\n return c.json(postCharsError(isPaid, charLimit), 400);\n }\n\n const safety = MAIAgentFleet.assessContentSafety(stripHtmlTags(content));\n if (!safety.isSafe) {\n return c.json(\n { error: `Publication refusée : ${safety.flagReason}` },\n 403,\n );\n }\n\n // Re-planification éventuelle (réservée Plus/Pro/Max)\n let scheduledAt: string | null = null;\n if (body.scheduled_at !== undefined) {\n if (body.scheduled_at === null || body.scheduled_at === \"\") {\n scheduledAt = null;\n } else {\n const ts = Date.parse(String(body.scheduled_at));\n if (Number.isNaN(ts) || ts <= Date.now()) {\n return c.json({\n error: \"Date de planification invalide ou passée.\",\n }, 400);\n }\n if (!isPaid) {\n return c.json(\n {\n error:\n \"La planification des vibes est réservée aux abonnés Plus, Pro et Max.\",\n plan_required: true,\n },\n 403,\n );\n }\n scheduledAt = new Date(ts).toISOString();\n }\n }\n\n // Audience mise à jour si fournie (Public / Abonnés / Cercle Privé / privé)\n const visibilityUpdate =\n [\"public\", \"followers\", \"circle\", \"private\"].includes(body.visibility)\n ? body.visibility\n : null;\n\n const updated = await sql`\n UPDATE posts\n SET content = ${String(content).trim()},\n toxicity_score = ${safety.toxicityScore},\n visibility = COALESCE(${visibilityUpdate}, visibility),\n updated_at = NOW(),\n published_at = CASE WHEN ${scheduledAt}::timestamptz IS NULL AND status = 'scheduled' THEN NOW() ELSE published_at END,\n status = CASE\n WHEN ${scheduledAt}::timestamptz IS NOT NULL THEN 'scheduled'\n ELSE 'published'\n END,\n scheduled_at = ${scheduledAt}::timestamptz\n WHERE id = ${postId}::uuid AND author_id = ${userId}\n RETURNING *\n `;\n if (updated.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n\n // Références de Livres : resynchronisées avec le nouveau contenu\n const updatedBookRefIds = extractBookRefIds(String(content));\n if (updatedBookRefIds.length > 0) {\n await ensureBooksTables(sql).catch(() => {});\n }\n await syncPostBookRefs(sql, postId, updatedBookRefIds);\n\n // Remplacement des médias (légendes incluses) si la liste est fournie\n let insertedMediaList: any[] = [];\n if (Array.isArray(media_assets)) {\n await sql`DELETE FROM media_assets WHERE post_id = ${postId}::uuid AND comment_id IS NULL`;\n const inferMediaType = (\n url: string,\n fallback = \"image/jpeg\",\n ): string => {\n try {\n const ext = url.split(\"?\")[0].split(\".\").pop()?.toLowerCase();\n switch (ext) {\n case \"png\":\n return \"image/png\";\n case \"webp\":\n return \"image/webp\";\n case \"gif\":\n return \"image/gif\";\n case \"jpg\":\n case \"jpeg\":\n return \"image/jpeg\";\n case \"mp4\":\n return \"video/mp4\";\n case \"webm\":\n return \"video/webm\";\n case \"mov\":\n return \"video/quicktime\";\n default:\n return fallback;\n }\n } catch {\n return fallback;\n }\n };\n const mediaPositions = Array.isArray(body.media_positions)\n ? body.media_positions\n : [];\n for (let mi = 0; mi < media_assets.length; mi++) {\n const media = media_assets[mi];\n if (!media || !media.url) continue;\n const urlStr = String(media.url).trim();\n if (!urlStr) continue;\n const position = Number.isFinite(Number(mediaPositions[mi]))\n ? Number(mediaPositions[mi])\n : mi;\n let res: any[] = [];\n try {\n res = await sql`\n INSERT INTO media_assets (owner_id, post_id, url, media_type, file_size_bytes, alt_text, position)\n VALUES (${userId}, ${postId}::uuid, ${urlStr}, ${\n media.media_type || media.type || inferMediaType(urlStr)\n },\n ${\n Math.max(\n 0,\n Math.round(\n Number(media.file_size_bytes ?? media.size ?? 0) || 0,\n ),\n )\n },\n ${media.alt_text || media.alt || \"\"}, ${position})\n RETURNING id, url, media_type, file_size_bytes, alt_text, position\n `;\n } catch {\n // Colonne position absente (base ancienne) : insertion sans ordre\n res = await sql`\n INSERT INTO media_assets (owner_id, post_id, url, media_type, file_size_bytes, alt_text)\n VALUES (${userId}, ${postId}::uuid, ${urlStr}, ${\n media.media_type || media.type || inferMediaType(urlStr)\n },\n ${\n Math.max(\n 0,\n Math.round(\n Number(media.file_size_bytes ?? media.size ?? 0) || 0,\n ),\n )\n },\n ${media.alt_text || media.alt || \"\"})\n RETURNING id, url, media_type, file_size_bytes, alt_text\n `;\n }\n if (res && res[0]) insertedMediaList.push(res[0]);\n }\n }\n\n const userRow =\n await sql`SELECT username FROM users WHERE id = ${userId} LIMIT 1`;\n const profileRow =\n await sql`SELECT display_name, avatar_url FROM profiles WHERE user_id = ${userId} LIMIT 1`;\n const updatedPost: any = {\n ...updated[0],\n username: userRow[0]?.username,\n display_name: profileRow[0]?.display_name || userRow[0]?.username,\n avatar_url: profileRow[0]?.avatar_url,\n media_assets: insertedMediaList,\n quoted_post: null,\n };\n await attachQuotedPosts([updatedPost]);\n await attachBookRefs([updatedPost], userId).catch(() => {});\n\n return c.json({ success: true, post: updatedPost });\n } catch (err: any) {\n console.error(\"[Vibe API] Error updating post:\", err);\n return c.json({\n error: \"Erreur lors de la modification de la publication.\",\n }, 500);\n }\n };\n\n registerMulti(\"patch\", [\n \"/api/vibe/posts/:id\",\n \"/vibe/posts/:id\",\n \"/v1/posts/:id\",\n \"/posts/:id\",\n ], handleUpdatePost);\n}",[470],"1dc88b4f-fa7c-41cc-ad43-9674a68921bb","vibe-posts-core.ts","d2a0d882-ae03-11f1-8af9-1607ee4eb77e",306,["D",1789229573039],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — POSTS CORE HELPERS (vibe-posts-core.ts)\n * Helpers partagés purs (sans dépendance Hono/app) : prédicats, requêtes\n * d'hydratation (citations, médias, sondages, collaborateurs), publication\n * paresseuse des vibes planifiées et migrations idempotentes des colonnes.\n * Importé par vibe-posts.ts, vibe-posts-crud.ts, vibe-posts-engage.ts,\n * vibe-feed.ts, vibe-users.ts et vibe-books.ts.\n * ============================================================================\n */\n\nimport { getDb } from \"./config.ts\";\n\nexport const isUuid = (v: any): boolean =>\n typeof v === \"string\" &&\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(v);\n\n/** Prédicat SQL : un post est lisible si public, sien, partagé aux abonnés\n * (et que le spectateur suit l'auteur) ou au cercle (et qu'il en est membre). */\nexport const visibilityFilter = (viewerId: number | null) => {\n const sql = getDb();\n if (!viewerId) return sql`AND p.visibility = 'public'`;\n return sql`AND (\n p.visibility = 'public'\n OR p.author_id = ${viewerId}\n OR (p.visibility = 'followers' AND EXISTS (SELECT 1 FROM follows f WHERE f.follower_id = ${viewerId} AND f.following_id = p.author_id))\n OR (p.visibility = 'circle' AND EXISTS (SELECT 1 FROM circle_members cm WHERE cm.user_id = p.author_id AND cm.member_user_id = ${viewerId}))\n )`;\n};\n\n/** Version texte brut d'un contenu riche (scan de sécurité, snippets, recherche). */\nexport function stripHtmlTags(text: string): string {\n if (!text || !text.includes(\"<\")) return text || \"\";\n return text\n .replace(/<br\\s*\\/?>/gi, \"\\n\")\n .replace(/<\\/(p|div|li|blockquote)>/gi, \"\\n\")\n .replace(/<[^>]*>/g, \" \")\n .replace(/[ \\t]+/g, \" \")\n .trim();\n}\n\n/**\n * Publication paresseuse des vibes planifiées dont la date est atteinte :\n * appelée au chargement des flux / profils (aucun cron nécessaire côté serveur).\n * Throttle 30 s pour éviter un scan de table à chaque requête.\n */\nlet lastPublishCheck = 0;\nexport async function publishDuePosts(): Promise<void> {\n const now = Date.now();\n if (now - lastPublishCheck < 30_000) return;\n lastPublishCheck = now;\n try {\n await ensurePostColumns();\n const sql = getDb();\n const due = await sql`\n UPDATE posts\n SET status = 'published', published_at = NOW(), updated_at = NOW()\n WHERE status = 'scheduled' AND scheduled_at IS NOT NULL AND scheduled_at <= NOW()\n RETURNING id, author_id\n `;\n for (const p of due) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${p.author_id}, ${p.author_id}, 'mai_system', ${p.id}::uuid, 'Votre vibe planifiée a été publiée.')\n `.catch(() => {});\n }\n } catch (err) {\n console.warn(\n \"[vibe-posts] publishDuePosts skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/**\n * Attache les publications citées (quote-posts) en une requête : champ\n * `quoted_post` {username, display_name, avatar_url, content, media_assets…}.\n * Exporté pour réutilisation (posts de profil dans vibe-users.ts).\n */\nexport async function attachQuotedPosts(posts: any[]) {\n if (!posts || posts.length === 0) return;\n for (const p of posts) p.quoted_post = null;\n const quoteIds = Array.from(\n new Set(posts.map((p) => p.quoted_post_id).filter(Boolean)),\n );\n if (quoteIds.length === 0) return;\n try {\n const sql = getDb();\n const rows = await sql`\n SELECT q.id, q.author_id, q.content, q.format, q.likes_count, q.replies_count, q.published_at, q.created_via, q.ai_generated,\n u.username, pr.display_name, pr.avatar_url,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified\n FROM posts q\n JOIN users u ON u.id = q.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE q.id = ANY(${quoteIds}::uuid[])\n `;\n const mediaRows = await sql`\n SELECT post_id, url, media_type, alt_text FROM media_assets WHERE post_id = ANY(${quoteIds}::uuid[])\n `;\n const mediaByPost: Record<string, any[]> = {};\n for (const m of mediaRows) {\n (mediaByPost[String(m.post_id)] ||= []).push({\n url: m.url,\n media_type: m.media_type,\n alt_text: m.alt_text,\n });\n }\n const byId = new Map(\n rows.map((\n r: any,\n ) => [String(r.id), {\n ...r,\n media_assets: mediaByPost[String(r.id)] || [],\n }]),\n );\n for (const p of posts) {\n if (p.quoted_post_id) {\n p.quoted_post = byId.get(String(p.quoted_post_id)) || null;\n }\n }\n } catch (err) {\n console.warn(\"[vibe-posts] attachQuotedPosts:\", (err as any)?.message);\n }\n}\n\n/**\n * Hydrate `media_assets` pour une liste de posts en une seule requête.\n * Forme tagged-template uniquement : neon@1.1.0 interdit l'appel\n * fonction classique `sql(ids)` — utiliser `= ANY(${ids}::uuid[])`.\n * Exporté car utilisé par le feed ET la recherche.\n */\nexport async function fetchPostMedia(posts: any[]) {\n if (!posts || posts.length === 0) return;\n try {\n const sql = getDb();\n const ids = posts.map((p) => p.id);\n const media =\n await sql`SELECT post_id, url, media_type, alt_text FROM media_assets WHERE post_id = ANY(${ids}::uuid[]) ORDER BY position ASC, created_at ASC`;\n const byPost: Record<string, any[]> = {};\n for (const m of media) {\n const key = String(m.post_id);\n (byPost[key] ||= []).push({\n url: m.url,\n media_type: m.media_type,\n alt_text: m.alt_text,\n });\n }\n for (const p of posts) p.media_assets = byPost[String(p.id)] || [];\n } catch (mediaErr) {\n console.warn(\"[Vibe API] Erreur fetchPostMedia:\", mediaErr);\n for (const p of posts) p.media_assets ||= [];\n }\n}\n\n/**\n * Hydrate `poll` {id, question, ends_at, total_votes, options[{id,label,votes_count,position}],\n * my_vote: option_id|null, expired} pour une liste de posts. Exporté (feed, recherche, profils).\n */\nexport async function attachPolls(posts: any[], currentUserId: number | null) {\n if (!posts || posts.length === 0) return;\n for (const p of posts) p.poll = null;\n try {\n const sql = getDb();\n const ids = posts.map((p) => p.id);\n const polls = await sql`\n SELECT id, post_id, question, ends_at, total_votes, created_at\n FROM post_polls WHERE post_id = ANY(${ids}::uuid[])\n `.catch(() => []);\n if (!polls || polls.length === 0) return;\n const pollIds = polls.map((pl: any) => pl.id);\n const options = await sql`\n SELECT id, poll_id, label, votes_count, position\n FROM post_poll_options WHERE poll_id = ANY(${pollIds}::uuid[])\n ORDER BY position ASC\n `.catch(() => []);\n const optsByPoll: Record<string, any[]> = {};\n for (const o of options) (optsByPoll[String(o.poll_id)] ||= []).push(o);\n let votesByPoll: Record<string, string> = {};\n if (currentUserId) {\n const votes = await sql`\n SELECT poll_id, option_id FROM post_poll_votes\n WHERE poll_id = ANY(${pollIds}::uuid[]) AND user_id = ${currentUserId}\n `.catch(() => []);\n for (const v of votes) {\n votesByPoll[String(v.poll_id)] = String(v.option_id);\n }\n }\n const pollByPost: Record<string, any> = {};\n for (const pl of polls) {\n pollByPost[String(pl.post_id)] = {\n ...pl,\n options: optsByPoll[String(pl.id)] || [],\n my_vote: votesByPoll[String(pl.id)] || null,\n expired: new Date(pl.ends_at).getTime() <= Date.now(),\n };\n }\n for (const p of posts) p.poll = pollByPost[String(p.id)] || null;\n } catch (err) {\n console.warn(\"[vibe-posts] attachPolls skipped:\", (err as any)?.message);\n }\n}\n\n/**\n * Hydrate `collaborators` [{username, display_name, avatar_url, status}] pour une liste de posts.\n */\nexport async function attachCollaborators(posts: any[]) {\n if (!posts || posts.length === 0) return;\n for (const p of posts) p.collaborators = [];\n try {\n const sql = getDb();\n const ids = posts.map((p) => p.id);\n const rows = await sql`\n SELECT pc.post_id, pc.status, u.username, pr.display_name, pr.avatar_url\n FROM post_collaborators pc\n JOIN users u ON u.id = pc.user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE pc.post_id = ANY(${ids}::uuid[])\n `.catch(() => []);\n const byPost: Record<string, any[]> = {};\n for (const r of rows) {\n (byPost[String(r.post_id)] ||= []).push({\n username: r.username,\n display_name: r.display_name,\n avatar_url: r.avatar_url,\n status: r.status,\n });\n }\n for (const p of posts) p.collaborators = byPost[String(p.id)] || [];\n } catch (err) {\n console.warn(\n \"[vibe-posts] attachCollaborators skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Hydratation combinée sondages + collaborateurs (une seule import côté feed). */\nexport async function attachPollsAndCollabs(\n posts: any[],\n currentUserId: number | null,\n) {\n await attachPolls(posts, currentUserId).catch(() => {});\n await attachCollaborators(posts).catch(() => {});\n}\n\nlet postColumnsReady = false;\nexport const ensurePostColumns = async () => {\n if (postColumnsReady) return;\n try {\n const sql = getDb();\n await sql`ALTER TABLE posts ADD COLUMN IF NOT EXISTS ai_generated BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`ALTER TABLE posts ADD COLUMN IF NOT EXISTS quoted_post_id UUID REFERENCES posts(id) ON DELETE SET NULL`\n .catch(() => {});\n // Planification de publication (réservée Plus/Pro/Max)\n await sql`ALTER TABLE posts ADD COLUMN IF NOT EXISTS status VARCHAR(20) DEFAULT 'published'`\n .catch(() => {});\n await sql`ALTER TABLE posts ADD COLUMN IF NOT EXISTS scheduled_at TIMESTAMPTZ`\n .catch(() => {});\n await sql`UPDATE posts SET status = 'published' WHERE status IS NULL`.catch(\n () => {},\n );\n await sql`CREATE INDEX IF NOT EXISTS idx_posts_status ON posts(status)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_posts_scheduled_due ON posts(status, scheduled_at) WHERE status = 'scheduled'`\n .catch(() => {});\n // Médias joints aux commentaires\n await sql`ALTER TABLE media_assets ADD COLUMN IF NOT EXISTS comment_id UUID REFERENCES comments(id) ON DELETE CASCADE`\n .catch(() => {});\n // Table comments : rendre path optionnel et garantir les colonnes requises\n await sql`ALTER TABLE comments ALTER COLUMN path DROP NOT NULL`.catch(\n () => {},\n );\n await sql`ALTER TABLE comments ALTER COLUMN path SET DEFAULT ''`.catch(\n () => {},\n );\n await sql`ALTER TABLE comments ADD COLUMN IF NOT EXISTS parent_comment_id UUID REFERENCES comments(id) ON DELETE CASCADE`\n .catch(() => {});\n await sql`ALTER TABLE comments ADD COLUMN IF NOT EXISTS depth INTEGER DEFAULT 0`\n .catch(() => {});\n await sql`ALTER TABLE comments ADD COLUMN IF NOT EXISTS likes_count INTEGER DEFAULT 0`\n .catch(() => {});\n await sql`ALTER TABLE comments ADD COLUMN IF NOT EXISTS is_hidden BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n // Table comment_likes pour persister les likes de commentaires\n await sql`\n CREATE TABLE IF NOT EXISTS comment_likes (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n comment_id UUID NOT NULL REFERENCES comments(id) ON DELETE CASCADE,\n created_at TIMESTAMP WITH TIME ZONE DEFAULT NOW(),\n UNIQUE (user_id, comment_id)\n )\n `.catch(() => {});\n // Sondages intégrés aux posts (2-4 options, vote unique modifiable)\n await sql`\n CREATE TABLE IF NOT EXISTS post_polls (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n question TEXT NOT NULL,\n ends_at TIMESTAMPTZ NOT NULL,\n total_votes INT DEFAULT 0,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `.catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS post_poll_options (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n poll_id UUID NOT NULL REFERENCES post_polls(id) ON DELETE CASCADE,\n label TEXT NOT NULL,\n votes_count INT DEFAULT 0,\n position INT NOT NULL\n )\n `.catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS post_poll_votes (\n poll_id UUID NOT NULL,\n user_id BIGINT NOT NULL,\n option_id UUID NOT NULL,\n voted_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (poll_id, user_id)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_polls_post ON post_polls(post_id)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_poll_options_poll ON post_poll_options(poll_id)`\n .catch(() => {});\n // Posts collaboratifs (co-signature : pending | accepted | declined)\n await sql`\n CREATE TABLE IF NOT EXISTS post_collaborators (\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n user_id BIGINT NOT NULL,\n status VARCHAR(20) DEFAULT 'pending',\n invited_at TIMESTAMPTZ DEFAULT NOW(),\n accepted_at TIMESTAMPTZ,\n PRIMARY KEY (post_id, user_id)\n )\n `.catch(() => {});\n // Brouillons multi-appareils (synchronisation serveur, complément de draftCookie local)\n await sql`\n CREATE TABLE IF NOT EXISTS post_drafts (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n html TEXT NOT NULL,\n text TEXT NOT NULL,\n visibility VARCHAR(20) DEFAULT 'public',\n scheduled_at TIMESTAMPTZ,\n ai_generated BOOLEAN DEFAULT FALSE,\n media_assets JSONB DEFAULT '[]',\n updated_at TIMESTAMPTZ DEFAULT NOW(),\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_drafts_user ON post_drafts(user_id, updated_at DESC)`\n .catch(() => {});\n // Ordre d'affichage des médias (carrousel + drag & drop)\n await sql`ALTER TABLE media_assets ADD COLUMN IF NOT EXISTS position INT DEFAULT 0`\n .catch(() => {});\n // Profil temporel utilisateur : vues détaillées + affinité topic implicite\n await sql`\n CREATE TABLE IF NOT EXISTS post_views (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT,\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n duration_ms INT NOT NULL DEFAULT 1000,\n dwell_ms INT NOT NULL DEFAULT 1000,\n visible_ratio FLOAT DEFAULT 0.5,\n completed BOOLEAN DEFAULT FALSE,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_views_user ON post_views(user_id, created_at DESC)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_views_post ON post_views(post_id)`\n .catch(() => {});\n // Migration 017 : source de trafic + index temporels pour les séries stats\n await sql`ALTER TABLE post_views ADD COLUMN IF NOT EXISTS source TEXT DEFAULT 'feed'`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_views_post_created ON post_views(post_id, created_at DESC)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_views_created ON post_views(created_at DESC)`\n .catch(() => {});\n // Migration 017 : visites profil (distinct des vues posts)\n await sql`\n CREATE TABLE IF NOT EXISTS profile_views (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n profile_user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n viewer_id BIGINT REFERENCES users(id) ON DELETE SET NULL,\n source TEXT DEFAULT 'profile',\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_views_profile ON profile_views(profile_user_id, created_at DESC)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_views_viewer ON profile_views(viewer_id, created_at DESC)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_views_created ON profile_views(created_at DESC)`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS user_topic_affinity (\n user_id BIGINT NOT NULL,\n topic TEXT NOT NULL,\n total_time_ms BIGINT DEFAULT 0,\n views INT DEFAULT 0,\n likes INT DEFAULT 0,\n score FLOAT DEFAULT 0,\n updated_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (user_id, topic)\n )\n `.catch(() => {});\n postColumnsReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-posts] ensurePostColumns skipped:\",\n (err as any)?.message,\n );\n }\n};\n\n// Épinglage sur son profil de posts (y compris d'autres comptes), max 2 au total\nlet profilePinnedReady = false;\nexport const ensureProfilePinnedPostsTable = async () => {\n if (profilePinnedReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS profile_pinned_posts (\n user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (user_id, post_id)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_profile_pinned_user ON profile_pinned_posts(user_id, created_at DESC)`\n .catch(() => {});\n profilePinnedReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-posts] ensureProfilePinnedPostsTable skipped:\",\n (err as any)?.message,\n );\n }\n};\n\n// ── Références de Livres dans les posts (attachement / mention @livre) ───────\nconst BOOK_REF_UUID_RE =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/** Extrait les identifiants de Livres référencés en HTML (<a data-book-id=\"…\">), max 5. */\nexport function extractBookRefIds(html: string): string[] {\n if (!html) return [];\n const ids = new Set<string>();\n const matches = String(html).matchAll(/<a\\b[^>]*data-book-id=\"([^\"]+)\"/gi);\n for (const match of matches) {\n const id = String(match[1] || \"\").trim();\n if (BOOK_REF_UUID_RE.test(id)) ids.add(id.toLowerCase());\n if (ids.size >= 5) break;\n }\n return Array.from(ids);\n}\n\n/** Remplace intégralement les références de Livres d'un post. */\nexport async function syncPostBookRefs(\n sql: any,\n postId: string,\n bookIds: string[],\n): Promise<void> {\n try {\n await sql`DELETE FROM post_book_refs WHERE post_id = ${postId}::uuid`;\n for (const bookId of bookIds) {\n await sql`\n INSERT INTO post_book_refs (post_id, book_id)\n VALUES (${postId}::uuid, ${bookId}::uuid)\n ON CONFLICT DO NOTHING\n `.catch(() => {});\n }\n } catch (err) {\n console.warn(\n \"[vibe-posts] syncPostBookRefs skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Hydrate les posts avec leurs Livres référencés (carte livre). */\nexport async function attachBookRefs(\n posts: any[],\n viewerId: number | null = null,\n): Promise<void> {\n if (!Array.isArray(posts) || posts.length === 0) return;\n try {\n const sql = getDb();\n const postIds = posts.map((p) => String(p.id));\n const refRows = await sql`\n SELECT post_id, book_id FROM post_book_refs WHERE post_id = ANY(${postIds}::uuid[])\n `;\n if (refRows.length === 0) {\n for (const p of posts) p.book_refs = [];\n return;\n }\n const bookIds = Array.from(\n new Set(refRows.map((r: any) => String(r.book_id))),\n );\n const books = await sql`\n SELECT b.id, b.title, b.icon, COALESCE(b.is_public, FALSE) AS is_public, b.user_id,\n u.username AS owner_username, pr.display_name AS owner_display_name,\n (SELECT COUNT(*) FROM vibe_book_members bm WHERE bm.book_id = b.id) AS members_count,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS items_count,\n ${\n viewerId !== null\n ? sql`(b.user_id = ${viewerId} OR EXISTS (SELECT 1 FROM vibe_book_members bm2 WHERE bm2.book_id = b.id AND bm2.user_id = ${viewerId}))`\n : sql`FALSE`\n } AS viewer_is_member\n FROM vibe_books b\n JOIN users u ON u.id = b.user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE b.id = ANY(${bookIds}::uuid[])\n `;\n const byId = new Map<string, any>(books.map((b: any) => [String(b.id), b]));\n const byPost = new Map<string, any[]>();\n for (const r of refRows) {\n const book = byId.get(String(r.book_id));\n if (!book) continue;\n const canView = Boolean(book.is_public) || Boolean(book.viewer_is_member);\n const entry = {\n id: String(book.id),\n title: book.title,\n icon: book.icon,\n owner_username: book.owner_username,\n owner_display_name: book.owner_display_name,\n members_count: Number(book.members_count || 0),\n items_count: Number(book.items_count || 0),\n can_view: canView,\n };\n const key = String(r.post_id);\n if (!byPost.has(key)) byPost.set(key, []);\n byPost.get(key)!.push(entry);\n }\n for (const p of posts) {\n p.book_refs = byPost.get(String(p.id)) || [];\n }\n } catch (err) {\n console.warn(\"[vibe-posts] attachBookRefs skipped:\", (err as any)?.message);\n }\n}",[477],"bfe7730f-0fae-4520-82c4-3f9ce73a4b63","vibe-mai.ts","77e4508e-a6e4-11f1-b892-1607ee4eb77e",343,["D",1789313578830],16,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI CHAT & QUOTAS (vibe-mai.ts)\n * Point d'entrée : orchestration des routes mAI + réexports du socle partagé.\n * Le module est scindé (limite de taille Val Town) en :\n * - vibe-mai-core.ts socle partagé (tables, helpers, détection, formatage)\n * - vibe-mai-chat.ts chat mAI + réponse /mai en commentaire\n * - vibe-mai-conversations.ts historique et CRUD des conversations\n * - vibe-mai-execute.ts régénération, exécution/refus d'outils\n * - vibe-mai-settings.ts quotas, modulation, catalogue des outils\n * Les outils sensibles nécessitent une approbation explicite de l'utilisateur\n * sauf si le réglage `mai_auto_approve_tools` est activé.\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { ensureMAIConversations } from \"./vibe-mai-core.ts\";\nimport { registerVibeMAIChatRoutes } from \"./vibe-mai-chat.ts\";\nimport { registerVibeMAIConversationRoutes } from \"./vibe-mai-conversations.ts\";\nimport { registerVibeMAIExecuteRoutes } from \"./vibe-mai-execute.ts\";\nimport { registerVibeMAISettingsRoutes } from \"./vibe-mai-settings.ts\";\n\nexport { buildPostContext, getOpenRouterKey } from \"./vibe-mai-core.ts\";\nexport { generateMAICommentAnswer } from \"./vibe-mai-chat.ts\";\n\nexport function registerVibeMAIRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n ensureMAIConversations();\n registerVibeMAIChatRoutes(app, registerMulti);\n registerVibeMAIConversationRoutes(app, registerMulti);\n registerVibeMAIExecuteRoutes(app, registerMulti);\n registerVibeMAISettingsRoutes(app, registerMulti);\n}",[484],"fdaf6ba1-1a67-4f08-b19c-5a7962de7a3d","vibe-mai-settings.ts","a8ffe4a6-af88-11f1-b784-1607ee4eb77e",358,["D",1789313699618],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI : QUOTAS, MODULATION & OUTILS\n * (vibe-mai-settings.ts)\n * Quotas hebdomadaires, modulation de texte, catalogue des outils mAI et\n * mise à jour des outils activés (Paramètres → Outils mAI).\n * Scindé de vibe-mai.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\nimport {\n getToolDeclarations,\n invalidateUserToolsCache,\n loadUserEnabledTools,\n MAI_CATALOG_VERSION,\n MAI_TOOLS_CATALOG,\n} from \"./vibe-tools.ts\";\n\nexport function registerVibeMAISettingsRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 2. mAI QUOTAS\n const handleMAIQuotas = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const res = await MAIAgentFleet.executeTool(\"check_quotas\", {}, userId);\n return c.json(res.result);\n } catch {\n return c.json({ error: \"Erreur quotas.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/mai/quotas\",\n \"/vibe/mai/quotas\",\n \"/v1/mai/quotas\",\n ], handleMAIQuotas);\n\n // 3. mAI MODULATE\n const handleMAIModulate = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n await verifyToken(token);\n\n const { text, tone = \"executive\" } = await c.req.json();\n const modulated = await MAIAgentFleet.modulateText({ text, tone });\n return c.json({ success: true, modulated });\n } catch {\n return c.json({ error: \"Erreur modulation.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/mai/modulate\",\n \"/vibe/mai/modulate\",\n \"/v1/mai/modulate\",\n ], handleMAIModulate);\n\n // 4. CATALOGUE DES OUTILS mAI (vibe-tools.ts, filtré par réglages)\n const handleMAITools = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let enabledIds: string[] | undefined = undefined;\n if (token) {\n try {\n const payload = await verifyToken(token);\n enabledIds = await loadUserEnabledTools(\n Number(payload.sub || (payload as any).id),\n );\n } catch {}\n }\n const tools = getToolDeclarations(enabledIds);\n return c.json({\n version: (MAI_TOOLS_CATALOG as any[]).length,\n catalog_version: MAI_CATALOG_VERSION,\n tools,\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur catalogue outils.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/mai/tools\",\n \"/vibe/mai/tools\",\n \"/v1/mai/tools\",\n ], handleMAITools);\n\n // 5. MISE À JOUR DES OUTILS ACTIVÉS (Paramètres → Outils mAI)\n const handleUpdateMAITools = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const body = await c.req.json().catch(() => ({}));\n const ids = Array.isArray(body?.enabled_tool_ids)\n ? Array.from(new Set(body.enabled_tool_ids.map(String)))\n : [];\n const validIds = new Set(\n MAI_TOOLS_CATALOG.filter((t) => t.enabled).map((t) => t.id),\n );\n const filtered = ids.filter((id) => validIds.has(id));\n const sql = getDb();\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_enabled_tools JSONB DEFAULT NULL`\n .catch(() => {});\n await sql`\n INSERT INTO user_settings (user_id, mai_enabled_tools) VALUES (${userId}, ${\n JSON.stringify(filtered)\n }::jsonb)\n ON CONFLICT (user_id) DO UPDATE SET mai_enabled_tools = ${\n JSON.stringify(filtered)\n }::jsonb, updated_at = NOW()\n `;\n invalidateUserToolsCache(userId);\n return c.json({\n success: true,\n enabled_tool_ids: filtered,\n count: filtered.length,\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur sauvegarde outils mAI.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/mai/tools\",\n \"/vibe/mai/tools\",\n \"/v1/mai/tools\",\n ], handleUpdateMAITools);\n}",[492],"0cb446ef-2e81-41fb-acd1-c98bd665257a","vibe-mai-fleet.ts","b7867488-a6e4-11f1-ae27-1607ee4eb77e",310,["D",1789229654431],10,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI AGENT FLEET (vibe-mai-fleet.ts)\n * Tool declarations and execution engine for database-backed AI agents\n * ============================================================================\n */\n\nimport {\n getDb,\n getTierDailyImageLimit,\n getTierMaiTokenLimit,\n getWeekData,\n} from \"./config.ts\";\nimport { executeWebSearch } from \"./web.ts\";\n\n/**\n * Outils \"sensibles\" : ils modifient le compte ou le contenu public de\n * l'utilisateur. Ils exigent une approbation explicite sauf si le réglage\n * `mai_auto_approve_tools` a été activé dans les paramètres.\n */\nexport const SENSITIVE_TOOLS = [\n \"create_post\",\n \"delete_post\",\n \"update_profile\",\n \"follow_user\",\n \"send_message\",\n \"update_settings\",\n \"repost_post\",\n \"comment_post\",\n];\n\n/** Clamp de période partagé par les outils d'analyse (défaut 30 jours). */\nfunction parsePeriodDays(period: unknown): number {\n return period === \"7d\"\n ? 7\n : period === \"90d\"\n ? 90\n : period === \"12m\"\n ? 365\n : 30;\n}\n\nconst WEEKDAY_NAMES = [\n \"dimanche\",\n \"lundi\",\n \"mardi\",\n \"mercredi\",\n \"jeudi\",\n \"vendredi\",\n \"samedi\",\n];\n\nexport class MAIAgentFleet {\n public static assessContentSafety(\n content: string,\n ): { isSafe: boolean; toxicityScore: number; flagReason?: string } {\n const prohibitedKeywords = [\n \"haine\",\n \"violence explicite\",\n \"terrorisme\",\n \"terrorist\",\n \"cp_illegal\",\n \"doxx\",\n ];\n const lower = content.toLowerCase();\n\n for (const kw of prohibitedKeywords) {\n if (lower.includes(kw)) {\n return {\n isSafe: false,\n toxicityScore: 0.95,\n flagReason: `Terme prohibé détecté (${kw})`,\n };\n }\n }\n\n return { isSafe: true, toxicityScore: 0.02 };\n }\n\n public static async modulateText(\n opts: { text: string; tone?: string; format?: string },\n ): Promise<string> {\n const { text, tone = \"executive\" } = opts;\n const tonePrefixes: Record<string, string> = {\n executive: \"⚡ \",\n viral: \"🔥 \",\n poetic: \"✨ \",\n minimal: \"✦ \",\n };\n\n const prefix = tonePrefixes[tone] || \"\";\n return `${prefix}${text.trim()}`;\n }\n\n public static synthesizeThread(\n comments: Array<{ author: string; content: string }>,\n ): string {\n if (!comments || comments.length === 0) {\n return \"Aucun commentaire pour le moment.\";\n }\n const count = comments.length;\n const authors = [...new Set(comments.map((c) => c.author))].slice(0, 3)\n .join(\", \");\n return `Synthèse (${count} réponses) : Échanges autour des points partagés par @${authors}.`;\n }\n\n /**\n * Récupère une clé OpenRouter (variable d'environnement ou table mprojects_api_keys).\n */\n public static async getOpenRouterKey(userId: number): Promise<string> {\n if (\n typeof (globalThis as any).Deno !== \"undefined\" &&\n (globalThis as any).Deno.env?.get(\"OPENROUTER_API_KEY\")\n ) {\n return (globalThis as any).Deno.env.get(\"OPENROUTER_API_KEY\");\n }\n if (typeof process !== \"undefined\" && process.env?.OPENROUTER_API_KEY) {\n return process.env.OPENROUTER_API_KEY;\n }\n try {\n const sql = getDb();\n const keyRows =\n await sql`SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${\n String(userId)\n }::text LIMIT 1`;\n return keyRows[0]?.api_key || \"\";\n } catch {\n return \"\";\n }\n }\n\n /**\n * Modèle mAI par défaut de l'utilisateur (réglage user_settings.mai_default_model,\n * choisi dans les paramètres ou directement dans mAI). Cache mémoire 60 s.\n */\n static userModelCache = new Map<\n string,\n { model: string; expiresAt: number }\n >();\n\n public static async getUserDefaultModel(\n userId: number | string,\n ): Promise<string> {\n const key = String(userId);\n const cached = this.userModelCache.get(key);\n if (cached && cached.expiresAt > Date.now()) return cached.model;\n let model = \"poolside/laguna-xs-2.1:free\";\n try {\n const sql = getDb();\n const rows =\n await sql`SELECT mai_default_model FROM user_settings WHERE user_id = ${\n Number(key)\n } LIMIT 1`;\n const saved = String(rows[0]?.mai_default_model || \"\").trim();\n if (saved) model = saved;\n } catch {}\n this.userModelCache.set(key, { model, expiresAt: Date.now() + 60_000 });\n return model;\n }\n\n /**\n * Appel générique OpenRouter pour les outils textuels (traduction, reformulation...).\n * Sans `model`, utilise le modèle par défaut de l'utilisateur.\n */\n public static async callOpenRouter(\n userId: number,\n system: string,\n user: string,\n model?: string,\n ): Promise<string | null> {\n const apiKey = await this.getOpenRouterKey(userId);\n if (!apiKey) return null;\n const resolvedModel = model || (await this.getUserDefaultModel(userId));\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: resolvedModel,\n messages: [\n { role: \"system\", content: system },\n { role: \"user\", content: user },\n ],\n }),\n },\n );\n if (!aiRes.ok) return null;\n const aiData = await aiRes.json();\n return aiData.choices?.[0]?.message?.content || null;\n } catch {\n return null;\n }\n }\n\n public static async executeTool(\n toolName: string,\n args: Record<string, any>,\n userId: string | number,\n ): Promise<{ success: boolean; result: any; error?: string }> {\n const sql = getDb();\n const startTime = Date.now();\n const uid = Number(userId);\n\n try {\n let resultData: any = null;\n\n switch (toolName) {\n case \"get_account_stats\": {\n const [uRows, prRows, pCount] = await Promise.all([\n sql`SELECT id, username, email, tier, avatar_url, COALESCE(created_at, NOW()) as created_at FROM users WHERE id = ${uid} LIMIT 1`,\n sql`SELECT * FROM profiles WHERE user_id = ${uid} LIMIT 1`,\n sql`SELECT COUNT(*) as count FROM posts WHERE author_id = ${uid}`,\n ]);\n resultData = {\n user: uRows[0],\n profile: prRows[0],\n totalPosts: Number(pCount[0]?.count || 0),\n };\n break;\n }\n\n case \"create_post\": {\n const { content, format = \"micro_text\", media_url } = args;\n if (!content || !content.trim()) {\n throw new Error(\"Le contenu du post est obligatoire.\");\n }\n\n const safety = this.assessContentSafety(content);\n if (!safety.isSafe) {\n throw new Error(\n `Publication refusée par mAI : ${safety.flagReason}`,\n );\n }\n\n const inserted = await sql`\n INSERT INTO posts (author_id, content, format, created_via, toxicity_score, ai_generated)\n VALUES (${uid}, ${content.trim()}, ${format}, 'mai_agent', ${safety.toxicityScore}, TRUE)\n RETURNING *\n `;\n const newPost = inserted[0];\n\n if (media_url) {\n const cleanUrl = String(media_url).split(\"?\")[0].split(\"#\")[0];\n const ext = cleanUrl.split(\".\").pop()?.toLowerCase();\n const mediaType = ext === \"png\"\n ? \"image/png\"\n : ext === \"webp\"\n ? \"image/webp\"\n : ext === \"gif\"\n ? \"image/gif\"\n : ext === \"mp4\"\n ? \"video/mp4\"\n : \"image/jpeg\";\n await sql`\n INSERT INTO media_assets (owner_id, post_id, url, media_type, file_size_bytes, alt_text)\n VALUES (${uid}, ${newPost.id}::uuid, ${media_url}, ${mediaType}, 0, '')\n `;\n }\n\n await sql`UPDATE profiles SET posts_count = posts_count + 1 WHERE user_id = ${uid}`;\n resultData = {\n post: newPost,\n message: \"Post publié avec succès sur Vibe !\",\n };\n break;\n }\n\n case \"delete_post\": {\n const { post_id } = args;\n if (!post_id) throw new Error(\"post_id est requis.\");\n\n const del = await sql`\n DELETE FROM posts WHERE id = ${post_id}::uuid AND author_id = ${uid} RETURNING id\n `;\n if (del.length === 0) {\n throw new Error(\n \"Publication introuvable ou vous n'êtes pas l'auteur.\",\n );\n }\n await sql`UPDATE profiles SET posts_count = GREATEST(0, posts_count - 1) WHERE user_id = ${uid}`;\n resultData = {\n deletedPostId: post_id,\n message: \"Publication supprimée avec succès.\",\n };\n break;\n }\n\n case \"search_posts\": {\n const { query, limit = 10 } = args;\n const rows = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.content ILIKE ('%' || ${query} || '%')\n ORDER BY p.published_at DESC\n LIMIT ${limit}\n `;\n resultData = { query, resultsCount: rows.length, posts: rows };\n break;\n }\n\n case \"generate_vibe_image\": {\n const { prompt, aspect_ratio = \"1:1\" } = args;\n const uRows =\n await sql`SELECT tier FROM users WHERE id = ${uid} LIMIT 1`;\n const tier = uRows[0]?.tier || \"Free\";\n const maxImages = getTierDailyImageLimit(tier);\n\n const todayRows = await sql`\n SELECT images_generated FROM daily_image_usage \n WHERE user_id = ${uid} AND usage_date = CURRENT_DATE LIMIT 1\n `;\n const currentCount = todayRows[0]?.images_generated || 0;\n\n if (currentCount >= maxImages) {\n throw new Error(\n `Quota journalier d'images atteint (${currentCount}/${maxImages} pour le forfait ${tier}).`,\n );\n }\n\n await sql`\n INSERT INTO daily_image_usage (user_id, usage_date, images_generated)\n VALUES (${uid}, CURRENT_DATE, 1)\n ON CONFLICT (user_id, usage_date)\n DO UPDATE SET images_generated = daily_image_usage.images_generated + 1\n `;\n\n const sampleImages = [\n \"https://images.unsplash.com/photo-1618005182384-a83a8bd57fbe?w=1200&q=80\",\n \"https://images.unsplash.com/photo-1600585154340-be6161a56a0c?w=1200&q=80\",\n \"https://images.unsplash.com/photo-1634017839464-5c339ebe3cb4?w=1200&q=80\",\n \"https://images.unsplash.com/photo-1550684848-fac1c5b4e853?w=1200&q=80\",\n ];\n const chosen =\n sampleImages[Math.floor(Math.random() * sampleImages.length)];\n\n resultData = {\n prompt,\n aspect_ratio,\n imageUrl: chosen,\n quotaRemaining: Math.max(0, maxImages - (currentCount + 1)),\n message: \"Image générée avec succès via mAI !\",\n };\n break;\n }\n\n case \"check_quotas\": {\n const uRows =\n await sql`SELECT tier FROM users WHERE id = ${uid} LIMIT 1`;\n const tier = uRows[0]?.tier || \"Free\";\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const [usageRows, imgRows] = await Promise.all([\n sql`SELECT COALESCE(SUM(tokens_used), 0) as tokens FROM weekly_usage WHERE user_id = ${uid} AND week_start = ${weekStartStr}::date`,\n sql`SELECT COALESCE(images_generated, 0) as images FROM daily_image_usage WHERE user_id = ${uid} AND usage_date = CURRENT_DATE`,\n ]);\n\n const tokenLimit = getTierMaiTokenLimit(tier);\n const imageLimit = getTierDailyImageLimit(tier);\n const tokensUsed = Number(usageRows[0]?.tokens || 0);\n const imagesUsed = Number(imgRows[0]?.images || 0);\n\n resultData = {\n tier,\n weeklyTokens: {\n used: tokensUsed,\n limit: tokenLimit,\n percent: Math.min(\n 100,\n Math.round((tokensUsed / tokenLimit) * 100),\n ),\n },\n dailyImages: {\n used: imagesUsed,\n limit: imageLimit,\n percent: Math.min(\n 100,\n Math.round((imagesUsed / imageLimit) * 100),\n ),\n },\n resetAt: nextResetIso,\n };\n break;\n }\n\n case \"search_web\": {\n const { query } = args;\n const search = await executeWebSearch(String(query || \"\"), 5);\n if (!search.success || search.results.length === 0) {\n throw new Error(search.error || \"Aucun résultat de recherche web.\");\n }\n const snippet = search.results\n .slice(0, 3)\n .map((r) => `• **${r.title}** — ${r.snippet}\\n ${r.url}`)\n .join(\"\\n\");\n resultData = {\n query,\n snippet,\n provider: search.provider,\n results: search.results,\n };\n break;\n }\n\n case \"fact_check\": {\n const { statement } = args;\n const search = await executeWebSearch(String(statement || \"\"), 5)\n .catch(() => null);\n const sources = search?.success ? search.results.slice(0, 3) : [];\n const llm = await this.callOpenRouter(\n uid,\n \"Tu es un vérificateur de faits rigoureux. Réponds en 3 phrases maximum en français : verdict (Vrai / Faux / Plausible / À vérifier) puis justification brève en t'appuyant sur les sources fournies.\",\n `Affirmation : « ${statement} »\\n\\nSources trouvées :\\n${\n sources.map((s) => `- ${s.title} : ${s.snippet}`).join(\"\\n\") ||\n \"(aucune)\"\n }`,\n );\n resultData = {\n statement,\n verdict: llm\n ? \"Analyse mAI\"\n : sources.length > 0\n ? \"À vérifier\"\n : \"Sources insuffisantes\",\n confidence: sources.length > 0 ? \"Moyen\" : \"Faible\",\n analysis: llm ||\n (sources.length > 0\n ? \"Des sources web ont été trouvées, croisez-les pour vous forger un avis.\"\n : \"Aucune source fiable trouvée sur le web pour cette affirmation.\"),\n sources,\n };\n break;\n }\n\n case \"rewrite_post\": {\n const { text, style = \"viral\" } = args;\n const tones: Record<string, string> = {\n viral: \"viral\",\n pro: \"executive\",\n humour: \"viral\",\n concis: \"minimal\",\n poétique: \"poetic\",\n };\n const llm = await this.callOpenRouter(\n uid,\n `Reformule le texte suivant en français dans un style « ${style} », percutant et adapté à un réseau social. Réponds UNIQUEMENT par le texte reformulé, sans commentaire.`,\n String(text || \"\"),\n );\n const rewritten = llm ||\n (await this.modulateText({\n text: String(text || \"\"),\n tone: tones[style] || \"viral\",\n }));\n resultData = { rewritten, style };\n break;\n }\n\n case \"suggest_post\": {\n const { topic, style = \"viral\" } = args;\n const llm = await this.callOpenRouter(\n uid,\n `Propose 3 idées de publications courtes pour le réseau social Vibe sur le thème « ${topic} », dans un style « ${style} ». Format : une liste numérotée, chaque post fait 1 à 2 phrases, avec des hashtags pertinents. Réponds UNIQUEMENT par la liste.`,\n String(topic || \"sujets d'actualité\"),\n );\n if (!llm) {\n throw new Error(\n \"Génération indisponible : aucune clé IA configurée sur le serveur.\",\n );\n }\n resultData = { suggestions: llm, topic, style };\n break;\n }\n\n case \"translate\": {\n const { text, target_language = \"anglais\" } = args;\n const llm = await this.callOpenRouter(\n uid,\n `Traduis le texte suivant en ${target_language}. Réponds UNIQUEMENT par la traduction, sans commentaire.`,\n String(text || \"\"),\n );\n if (!llm) {\n throw new Error(\n \"Traduction indisponible : aucune clé IA configurée sur le serveur.\",\n );\n }\n resultData = { translated: llm, targetLanguage: target_language };\n break;\n }\n\n case \"analyze_trends\": {\n const recent = await sql`\n SELECT content FROM posts WHERE published_at > NOW() - INTERVAL '7 days' ORDER BY published_at DESC LIMIT 200\n `;\n const tags: Record<string, number> = {};\n for (const r of recent) {\n for (\n const m of String(r.content).matchAll(/#([\\p{L}\\p{N}_]{2,30})/gu)\n ) {\n const tag = m[1].toLowerCase();\n tags[tag] = (tags[tag] || 0) + 1;\n }\n }\n const trendingTopics = Object.entries(tags)\n .sort((a, b) => b[1] - a[1])\n .slice(0, 8)\n .map(([name, postsCount]) => ({\n name: `#${name}`,\n postsCount,\n sentiment: postsCount >= 5 ? \"Très actif 🔥\" : \"Actif 📈\",\n }));\n resultData = { trendingTopics };\n break;\n }\n\n case \"update_profile\": {\n const { display_name, bio } = args;\n if (!display_name && !bio) {\n throw new Error(\n \"Fournissez au moins un champ (display_name ou bio).\",\n );\n }\n if (\n display_name !== undefined &&\n (String(display_name).length < 2 ||\n String(display_name).length > 40)\n ) {\n throw new Error(\n \"Le nom affiché doit contenir entre 2 et 40 caractères.\",\n );\n }\n if (bio !== undefined && String(bio).length > 200) {\n throw new Error(\"La bio ne doit pas dépasser 200 caractères.\");\n }\n const updated = await sql`\n UPDATE profiles SET\n display_name = COALESCE(${display_name ?? null}, display_name),\n bio = COALESCE(${bio ?? null}, bio),\n updated_at = NOW()\n WHERE user_id = ${uid}\n RETURNING display_name, bio\n `;\n if (updated.length === 0) throw new Error(\"Profil introuvable.\");\n resultData = {\n profile: updated[0],\n message: \"Profil mis à jour avec succès.\",\n };\n break;\n }\n\n case \"follow_user\": {\n const { username, follow = true } = args;\n const cleanUsername = String(username || \"\").replace(/^@/, \"\").trim()\n .toLowerCase();\n if (!cleanUsername) throw new Error(\"username est requis.\");\n const target =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${cleanUsername} LIMIT 1`;\n if (target.length === 0) {\n throw new Error(`Compte @${cleanUsername} introuvable sur Vibe.`);\n }\n const targetId = Number(target[0].id);\n if (targetId === uid) {\n throw new Error(\"Vous ne pouvez pas vous suivre vous-même.\");\n }\n\n if (follow) {\n const existing =\n await sql`SELECT 1 FROM follows WHERE follower_id = ${uid} AND following_id = ${targetId} LIMIT 1`;\n if (existing.length > 0) {\n resultData = {\n followed: true,\n username: cleanUsername,\n message: `Vous suivez déjà @${cleanUsername}.`,\n };\n break;\n }\n await sql`INSERT INTO follows (follower_id, following_id) VALUES (${uid}, ${targetId}) ON CONFLICT DO NOTHING`;\n await Promise.all([\n sql`UPDATE profiles SET following_count = following_count + 1 WHERE user_id = ${uid}`,\n sql`UPDATE profiles SET followers_count = followers_count + 1 WHERE user_id = ${targetId}`,\n ]);\n resultData = {\n followed: true,\n username: cleanUsername,\n message: `Vous suivez désormais @${cleanUsername} !`,\n };\n } else {\n const del =\n await sql`DELETE FROM follows WHERE follower_id = ${uid} AND following_id = ${targetId} RETURNING 1`;\n if (del.length > 0) {\n await Promise.all([\n sql`UPDATE profiles SET following_count = GREATEST(0, following_count - 1) WHERE user_id = ${uid}`,\n sql`UPDATE profiles SET followers_count = GREATEST(0, followers_count - 1) WHERE user_id = ${targetId}`,\n ]);\n }\n resultData = {\n followed: false,\n username: cleanUsername,\n message: `Vous ne suivez plus @${cleanUsername}.`,\n };\n }\n break;\n }\n\n case \"get_notifications\": {\n const rows = await sql`\n SELECT n.*, u.username as actor_username\n FROM notifications n\n LEFT JOIN users u ON u.id = n.actor_id\n WHERE n.recipient_id = ${uid}\n ORDER BY n.created_at DESC LIMIT 20\n `;\n resultData = { count: rows.length, notifications: rows };\n break;\n }\n\n case \"like_post\": {\n const { post_id, like = true } = args;\n if (\n !post_id ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(String(post_id))\n ) {\n throw new Error(\"post_id UUID valide est requis.\");\n }\n const postRows =\n await sql`SELECT id, author_id FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n if (postRows.length === 0) {\n throw new Error(\"Publication introuvable.\");\n }\n const authorId = Number(postRows[0].author_id);\n if (like) {\n const existing = await sql`\n SELECT id FROM post_interactions\n WHERE user_id = ${uid} AND post_id = ${\n String(post_id)\n }::uuid AND interaction_type = 'like' LIMIT 1\n `;\n if (existing.length > 0) {\n const c = await sql`SELECT likes_count FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n resultData = {\n liked: true,\n post_id,\n likes_count: Number(c[0]?.likes_count || 0),\n message: \"Vous aimez déjà cette publication.\",\n };\n break;\n }\n await sql`\n INSERT INTO post_interactions (user_id, post_id, interaction_type)\n VALUES (${uid}, ${String(post_id)}::uuid, 'like')\n ON CONFLICT (user_id, post_id, interaction_type) DO NOTHING\n `;\n await sql`UPDATE posts SET likes_count = COALESCE(likes_count,0) + 1 WHERE id = ${\n String(post_id)\n }::uuid`;\n if (authorId !== uid) {\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, message)\n VALUES (${authorId}, ${uid}, 'like', ${\n String(post_id)\n }::uuid, 'a aimé votre publication via mAI')\n `;\n } catch {}\n }\n const c = await sql`SELECT likes_count FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n resultData = {\n liked: true,\n post_id,\n likes_count: Number(c[0]?.likes_count || 0),\n message: \"Publication likée avec succès !\",\n };\n } else {\n const existing = await sql`\n SELECT id FROM post_interactions\n WHERE user_id = ${uid} AND post_id = ${\n String(post_id)\n }::uuid AND interaction_type = 'like' LIMIT 1\n `;\n if (existing.length > 0) {\n await sql`DELETE FROM post_interactions WHERE id = ${\n existing[0].id\n }::uuid`;\n await sql`UPDATE posts SET likes_count = GREATEST(0, COALESCE(likes_count,0) - 1) WHERE id = ${\n String(post_id)\n }::uuid`;\n }\n const c = await sql`SELECT likes_count FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n resultData = {\n liked: false,\n post_id,\n likes_count: Number(c[0]?.likes_count || 0),\n message: \"Like retiré.\",\n };\n }\n break;\n }\n\n case \"send_message\": {\n const { username, content } = args;\n const cleanUsername = String(username || \"\").replace(/^@/, \"\").trim()\n .toLowerCase();\n const text = String(content || \"\").trim();\n if (!cleanUsername) {\n throw new Error(\"username destinataire est requis.\");\n }\n if (!text) throw new Error(\"Le contenu du message est obligatoire.\");\n if (text.length > 2000) {\n throw new Error(\"Message trop long (max 2000 caractères).\");\n }\n const safety = this.assessContentSafety(text);\n if (!safety.isSafe) {\n throw new Error(`Message refusé par mAI : ${safety.flagReason}`);\n }\n const target =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${cleanUsername} LIMIT 1`;\n if (target.length === 0) {\n throw new Error(`Compte @${cleanUsername} introuvable sur Vibe.`);\n }\n const recId = Number(target[0].id);\n if (recId === uid) {\n throw new Error(\n \"Vous ne pouvez pas vous envoyer un message à vous-même.\",\n );\n }\n const p1 = uid < recId ? uid : recId;\n const p2 = uid < recId ? recId : uid;\n const convRows = await sql`\n INSERT INTO dm_conversations (participant_one_id, participant_two_id, last_message_preview, last_message_at)\n VALUES (${p1}, ${p2}, ${text.slice(0, 120)}, NOW())\n ON CONFLICT (participant_one_id, participant_two_id)\n DO UPDATE SET last_message_preview = ${\n text.slice(0, 120)\n }, last_message_at = NOW()\n RETURNING id\n `;\n const conversationId = String(convRows[0].id);\n const msg = await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, recipient_id, content)\n VALUES (${conversationId}::uuid, ${uid}, ${recId}, ${text})\n RETURNING *\n `;\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${recId}, ${uid}, 'dm', 'vous a envoyé un message via mAI')\n `;\n } catch {}\n resultData = {\n sent: true,\n username: cleanUsername,\n conversation_id: conversationId,\n message_id: String(msg[0]?.id || \"\"),\n preview: text.slice(0, 80),\n message: `Message envoyé à @${cleanUsername} !`,\n };\n break;\n }\n\n case \"update_settings\": {\n const ALLOWED = [\n \"theme_preference\",\n \"ui_language\",\n \"feed_default_mode\",\n \"hide_reposts\",\n \"blocked_keywords\",\n \"accent_color\",\n \"font_size\",\n \"mai_auto_approve_tools\",\n \"mai_default_model\",\n \"mai_context_posts\",\n \"mai_context_dms\",\n \"mai_context_books\",\n \"email_notifications\",\n \"push_notifications\",\n \"notify_on_like\",\n \"notify_on_reply\",\n \"notify_on_dm\",\n \"dm_auto_translate\",\n \"dm_translate_lang\",\n ];\n const patch: Record<string, any> = {};\n for (const k of ALLOWED) {\n if (args[k] !== undefined) patch[k] = args[k];\n }\n if (Object.keys(patch).length === 0) {\n throw new Error(\"Aucun paramètre autorisé fourni.\");\n }\n if (\n patch.feed_default_mode &&\n ![\"for_you\", \"following\", \"trending\"].includes(\n String(patch.feed_default_mode),\n )\n ) {\n throw new Error(\n \"feed_default_mode invalide (for_you | following | trending).\",\n );\n }\n if (\n patch.theme_preference &&\n ![\"light\", \"dark\", \"auto\"].includes(String(patch.theme_preference))\n ) {\n throw new Error(\"theme_preference invalide (light | dark | auto).\");\n }\n if (\n patch.blocked_keywords && !Array.isArray(patch.blocked_keywords)\n ) {\n throw new Error(\"blocked_keywords doit être un tableau de mots.\");\n }\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS mai_auto_approve_tools BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS dm_auto_translate BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`ALTER TABLE user_settings ADD COLUMN IF NOT EXISTS dm_translate_lang TEXT`\n .catch(() => {});\n const cols = Object.keys(patch);\n // Upsert générique : INSERT puis UPDATE ciblé colonne par colonne\n await sql`\n INSERT INTO user_settings (user_id) VALUES (${uid})\n ON CONFLICT (user_id) DO NOTHING\n `.catch(() => {});\n for (const col of cols) {\n const val = patch[col];\n const jsonVal = Array.isArray(val) ? val : null;\n if (jsonVal !== null) {\n await sql`UPDATE user_settings SET blocked_keywords = ${jsonVal} WHERE user_id = ${uid}`;\n } else if (typeof val === \"boolean\") {\n if (col === \"hide_reposts\") {\n await sql`UPDATE user_settings SET hide_reposts = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"mai_auto_approve_tools\") {\n await sql`UPDATE user_settings SET mai_auto_approve_tools = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"mai_context_posts\") {\n await sql`UPDATE user_settings SET mai_context_posts = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"mai_context_dms\") {\n await sql`UPDATE user_settings SET mai_context_dms = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"mai_context_books\") {\n await sql`UPDATE user_settings SET mai_context_books = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"email_notifications\") {\n await sql`UPDATE user_settings SET email_notifications = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"push_notifications\") {\n await sql`UPDATE user_settings SET push_notifications = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"notify_on_like\") {\n await sql`UPDATE user_settings SET notify_on_like = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"notify_on_reply\") {\n await sql`UPDATE user_settings SET notify_on_reply = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"notify_on_dm\") {\n await sql`UPDATE user_settings SET notify_on_dm = ${val} WHERE user_id = ${uid}`;\n } else if (col === \"dm_auto_translate\") {\n await sql`UPDATE user_settings SET dm_auto_translate = ${val} WHERE user_id = ${uid}`;\n }\n } else {\n const s = String(val).slice(0, 100);\n if (col === \"theme_preference\") {\n await sql`UPDATE user_settings SET theme_preference = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"ui_language\") {\n await sql`UPDATE user_settings SET ui_language = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"feed_default_mode\") {\n await sql`UPDATE user_settings SET feed_default_mode = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"accent_color\") {\n await sql`UPDATE user_settings SET accent_color = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"font_size\") {\n await sql`UPDATE user_settings SET font_size = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"mai_default_model\") {\n await sql`UPDATE user_settings SET mai_default_model = ${s} WHERE user_id = ${uid}`;\n } else if (col === \"dm_translate_lang\") {\n await sql`UPDATE user_settings SET dm_translate_lang = ${s} WHERE user_id = ${uid}`;\n }\n }\n }\n try {\n this.userModelCache.delete(String(uid));\n } catch {}\n resultData = {\n updated: true,\n patched: patch,\n message: \"Paramètres mis à jour avec succès via mAI.\",\n };\n break;\n }\n\n case \"bookmark_post\": {\n const { post_id, bookmark = true } = args;\n if (\n !post_id ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(String(post_id))\n ) {\n throw new Error(\"post_id UUID valide est requis.\");\n }\n const exists = await sql`SELECT id FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n if (exists.length === 0) throw new Error(\"Publication introuvable.\");\n if (bookmark) {\n await sql`\n INSERT INTO bookmarks (user_id, post_id) VALUES (${uid}, ${\n String(post_id)\n }::uuid)\n ON CONFLICT (user_id, post_id) DO NOTHING\n `;\n await sql`UPDATE posts SET bookmarks_count = COALESCE(bookmarks_count,0) + 1 WHERE id = ${\n String(post_id)\n }::uuid`;\n resultData = {\n bookmarked: true,\n post_id,\n message: \"Post ajouté à vos favoris !\",\n };\n } else {\n await sql`DELETE FROM bookmarks WHERE user_id = ${uid} AND post_id = ${\n String(post_id)\n }::uuid`;\n await sql`UPDATE posts SET bookmarks_count = GREATEST(0, COALESCE(bookmarks_count,0) - 1) WHERE id = ${\n String(post_id)\n }::uuid`;\n resultData = {\n bookmarked: false,\n post_id,\n message: \"Post retiré de vos favoris.\",\n };\n }\n break;\n }\n\n case \"repost_post\": {\n const { post_id, repost = true } = args;\n if (\n !post_id ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(String(post_id))\n ) {\n throw new Error(\"post_id UUID valide est requis.\");\n }\n const prow = await sql`SELECT id, author_id FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n if (prow.length === 0) throw new Error(\"Publication introuvable.\");\n if (repost) {\n const existing = await sql`\n SELECT id FROM post_interactions\n WHERE user_id = ${uid} AND post_id = ${\n String(post_id)\n }::uuid AND interaction_type = 'repost' LIMIT 1\n `;\n if (existing.length > 0) {\n resultData = {\n reposted: true,\n post_id,\n message: \"Vous avez déjà reposté cette publication.\",\n };\n break;\n }\n await sql`\n INSERT INTO post_interactions (user_id, post_id, interaction_type)\n VALUES (${uid}, ${String(post_id)}::uuid, 'repost')\n ON CONFLICT (user_id, post_id, interaction_type) DO NOTHING\n `;\n await sql`UPDATE posts SET reposts_count = COALESCE(reposts_count,0) + 1 WHERE id = ${\n String(post_id)\n }::uuid`;\n resultData = {\n reposted: true,\n post_id,\n message: \"Publication repostée avec succès !\",\n };\n } else {\n await sql`DELETE FROM post_interactions WHERE user_id = ${uid} AND post_id = ${\n String(post_id)\n }::uuid AND interaction_type = 'repost'`;\n await sql`UPDATE posts SET reposts_count = GREATEST(0, COALESCE(reposts_count,0) - 1) WHERE id = ${\n String(post_id)\n }::uuid`;\n resultData = {\n reposted: false,\n post_id,\n message: \"Repost annulé.\",\n };\n }\n break;\n }\n\n case \"comment_post\": {\n const { post_id, content } = args;\n const text = String(content || \"\").trim();\n if (\n !post_id ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(String(post_id))\n ) {\n throw new Error(\"post_id UUID valide est requis.\");\n }\n if (!text) {\n throw new Error(\"Le contenu du commentaire est obligatoire.\");\n }\n if (text.length > 2000) {\n throw new Error(\"Commentaire trop long (max 2000 caractères).\");\n }\n const safety = this.assessContentSafety(text);\n if (!safety.isSafe) {\n throw new Error(\n `Commentaire refusé par mAI : ${safety.flagReason}`,\n );\n }\n const prow = await sql`SELECT id, author_id FROM posts WHERE id = ${\n String(post_id)\n }::uuid LIMIT 1`;\n if (prow.length === 0) throw new Error(\"Publication introuvable.\");\n const inserted = await sql`\n INSERT INTO comments (post_id, author_id, content, depth)\n VALUES (${String(post_id)}::uuid, ${uid}, ${text}, 1)\n RETURNING id, content, created_at\n `;\n await sql`UPDATE posts SET replies_count = COALESCE(replies_count,0) + 1 WHERE id = ${\n String(post_id)\n }::uuid`;\n const authorId = Number(prow[0].author_id);\n if (authorId !== uid) {\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, post_id, comment_id, message)\n VALUES (${authorId}, ${uid}, 'reply', ${\n String(post_id)\n }::uuid, ${\n String(inserted[0].id)\n }::uuid, 'a commenté votre publication via mAI')\n `;\n } catch {}\n }\n resultData = {\n commented: true,\n post_id,\n comment_id: String(inserted[0].id),\n message: \"Commentaire publié avec succès !\",\n };\n break;\n }\n\n case \"get_post_stats\": {\n const { post_id } = args;\n if (\n !post_id ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(String(post_id))\n ) {\n throw new Error(\"post_id UUID valide est requis.\");\n }\n const rows = await sql`\n SELECT p.id, p.content, p.likes_count, p.reposts_count, p.replies_count,\n COALESCE(p.views_count,0) as views_count, COALESCE(p.bookmarks_count,0) as bookmarks_count,\n p.published_at, u.username, pr.display_name\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.id = ${String(post_id)}::uuid LIMIT 1\n `;\n if (rows.length === 0) throw new Error(\"Publication introuvable.\");\n const p = rows[0];\n const likes = Number(p.likes_count || 0),\n reposts = Number(p.reposts_count || 0);\n const replies = Number(p.replies_count || 0),\n views = Number(p.views_count || 0);\n const engagement = likes + reposts * 2.5 + replies * 2 + views * 0.1;\n const rate = views > 0\n ? Math.round(((likes + reposts + replies) / views) * 1000) / 10\n : 0;\n resultData = {\n post_id,\n author: p.username,\n content: String(p.content || \"\").slice(0, 300),\n likes,\n reposts,\n replies,\n views,\n bookmarks: Number(p.bookmarks_count || 0),\n engagement: Math.round(engagement * 10) / 10,\n engagement_rate_percent: rate,\n published_at: p.published_at,\n message: \"Analyse du post récupérée.\",\n };\n break;\n }\n\n case \"analyze_audience\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const [sourcesRows, uniqueRows, hoursRows, followerRows] =\n await Promise.all([\n sql`\n SELECT COALESCE(pv.source, 'feed') AS source, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${uid} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 8\n `,\n sql`\n SELECT COUNT(DISTINCT pv.user_id) AS unique_viewers\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${uid} AND pv.created_at >= ${sinceIso}::timestamptz AND pv.user_id IS NOT NULL\n `,\n sql`\n SELECT EXTRACT(HOUR FROM pv.created_at) AS hour, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${uid} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 5\n `,\n sql`\n SELECT u.username, pr.display_name, COUNT(*) AS views\n FROM post_views pv\n JOIN posts p ON p.id = pv.post_id\n JOIN follows f ON f.follower_id = pv.user_id AND f.following_id = ${uid}\n JOIN users u ON u.id = pv.user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.author_id = ${uid} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY u.username, pr.display_name ORDER BY views DESC LIMIT 5\n `,\n ]);\n const totalViews = (sourcesRows as any[]).reduce(\n (s, r) => s + Number(r.views || 0),\n 0,\n );\n resultData = {\n period_days: days,\n total_views: totalViews,\n sources: (sourcesRows as any[]).map((r) => ({\n source: String(r.source),\n views: Number(r.views || 0),\n percent: totalViews > 0\n ? Math.round((Number(r.views || 0) / totalViews) * 100)\n : 0,\n })),\n unique_viewers: Number(uniqueRows[0]?.unique_viewers || 0),\n peak_hours: (hoursRows as any[]).map((r) => ({\n hour: Number(r.hour),\n views: Number(r.views || 0),\n })),\n top_engaged_followers: (followerRows as any[]).map((r) => ({\n username: r.username,\n display_name: r.display_name,\n views: Number(r.views || 0),\n })),\n message: `Audience analysée sur ${days} jours.`,\n };\n break;\n }\n\n case \"best_time_to_post\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const [slotRows, hourRows, totalRows] = await Promise.all([\n sql`\n SELECT EXTRACT(DOW FROM p.published_at) AS dow, EXTRACT(HOUR FROM p.published_at) AS hour,\n COUNT(*) AS posts_count, AVG(COALESCE(p.views_count,0)) AS avg_views,\n AVG(COALESCE(p.likes_count,0) + COALESCE(p.reposts_count,0) * 2 + COALESCE(p.replies_count,0) * 2) AS avg_engagement\n FROM posts p WHERE p.author_id = ${uid} AND p.published_at >= ${sinceIso}::timestamptz\n GROUP BY 1, 2\n `,\n sql`\n SELECT EXTRACT(HOUR FROM pv.created_at) AS hour, COUNT(*) AS views\n FROM post_views pv JOIN posts p ON p.id = pv.post_id\n WHERE p.author_id = ${uid} AND pv.created_at >= ${sinceIso}::timestamptz\n GROUP BY 1 ORDER BY views DESC LIMIT 6\n `,\n sql`SELECT COUNT(*) AS n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz`,\n ]);\n const analyzedPosts = Number(totalRows[0]?.n || 0);\n const bestSlots = (slotRows as any[])\n .map((r) => ({\n weekday: WEEKDAY_NAMES[Number(r.dow)] || String(r.dow),\n hour: Number(r.hour),\n posts_count: Number(r.posts_count || 0),\n avg_views: Math.round(Number(r.avg_views || 0)),\n avg_engagement: Math.round(Number(r.avg_engagement || 0) * 10) /\n 10,\n }))\n .sort((a, b) => b.avg_engagement - a.avg_engagement)\n .slice(0, 3);\n resultData = {\n period_days: days,\n analyzed_posts: analyzedPosts,\n best_slots: bestSlots,\n audience_peak_hours: (hourRows as any[]).map((r) => ({\n hour: Number(r.hour),\n views: Number(r.views || 0),\n })),\n confidence: analyzedPosts >= 10\n ? \"high\"\n : analyzedPosts >= 4\n ? \"medium\"\n : \"low\",\n note: analyzedPosts === 0\n ? \"Aucune publication sur la période — publiez quelques posts pour obtenir des recommandations.\"\n : undefined,\n message: bestSlots.length > 0\n ? `Meilleur créneau : ${bestSlots[0].weekday} à ${\n bestSlots[0].hour\n }h (${bestSlots[0].avg_views} vues moyennes).`\n : \"Pas encore assez de données de publication.\",\n };\n break;\n }\n\n case \"compare_periods\": {\n const days = parsePeriodDays(args.period);\n const nowMs = Date.now();\n const nowIso = new Date(nowMs).toISOString();\n const curSince = new Date(nowMs - days * 86400000).toISOString();\n const prevSince = new Date(nowMs - 2 * days * 86400000).toISOString();\n const postAgg = (since: string, until: string) =>\n sql`\n SELECT COALESCE(SUM(views_count),0) AS views, COALESCE(SUM(likes_count),0) AS likes,\n COALESCE(SUM(reposts_count),0) AS reposts, COALESCE(SUM(replies_count),0) AS replies,\n COUNT(*) AS posts\n FROM posts WHERE author_id = ${uid} AND published_at >= ${since}::timestamptz AND published_at < ${until}::timestamptz\n `;\n const [curRows, prevRows, fCur, fPrev, pvCur, pvPrev] = await Promise\n .all([\n postAgg(curSince, nowIso),\n postAgg(prevSince, curSince),\n sql`SELECT COUNT(*) AS n FROM follows WHERE following_id = ${uid} AND created_at >= ${curSince}::timestamptz`,\n sql`SELECT COUNT(*) AS n FROM follows WHERE following_id = ${uid} AND created_at >= ${prevSince}::timestamptz AND created_at < ${curSince}::timestamptz`,\n sql`SELECT COUNT(*) AS n FROM profile_views WHERE profile_user_id = ${uid} AND created_at >= ${curSince}::timestamptz`,\n sql`SELECT COUNT(*) AS n FROM profile_views WHERE profile_user_id = ${uid} AND created_at >= ${prevSince}::timestamptz AND created_at < ${curSince}::timestamptz`,\n ]);\n const metric = (current: number, previous: number) => ({\n current,\n previous,\n delta: current - previous,\n percent: previous > 0\n ? Math.round(((current - previous) / previous) * 1000) / 10\n : current > 0\n ? 100\n : 0,\n });\n const c = curRows[0] || {};\n const p = prevRows[0] || {};\n resultData = {\n period_days: days,\n views: metric(Number(c.views || 0), Number(p.views || 0)),\n likes: metric(Number(c.likes || 0), Number(p.likes || 0)),\n reposts: metric(Number(c.reposts || 0), Number(p.reposts || 0)),\n replies: metric(Number(c.replies || 0), Number(p.replies || 0)),\n posts: metric(Number(c.posts || 0), Number(p.posts || 0)),\n followers_gained: metric(\n Number(fCur[0]?.n || 0),\n Number(fPrev[0]?.n || 0),\n ),\n profile_views: metric(\n Number(pvCur[0]?.n || 0),\n Number(pvPrev[0]?.n || 0),\n ),\n message:\n `Comparaison des ${days} derniers jours vs les ${days} jours précédents.`,\n };\n break;\n }\n\n case \"predict_post_performance\": {\n const content = String(args.content || \"\").trim();\n if (!content) {\n throw new Error(\"Le contenu du brouillon est obligatoire.\");\n }\n const plannedFormat = String(args.format || \"\").trim() || null;\n const sinceIso = new Date(Date.now() - 90 * 86400000).toISOString();\n const [globalRows, formatRows, hourRows] = await Promise.all([\n sql`\n SELECT COUNT(*) AS n, AVG(COALESCE(views_count,0)) AS avg_views,\n AVG(COALESCE(likes_count,0) + COALESCE(reposts_count,0) * 2 + COALESCE(replies_count,0) * 2) AS avg_engagement,\n AVG(LENGTH(content)) AS avg_length\n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz\n `,\n sql`\n SELECT COALESCE(format,'micro_text') AS format,\n AVG(COALESCE(likes_count,0) + COALESCE(reposts_count,0) * 2 + COALESCE(replies_count,0) * 2) AS avg_engagement\n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz GROUP BY 1\n `,\n sql`\n SELECT EXTRACT(HOUR FROM published_at) AS hour, AVG(COALESCE(views_count,0)) AS avg_views\n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz GROUP BY 1\n `,\n ]);\n const hist = globalRows[0] || {};\n const sampleSize = Number(hist.n || 0);\n const avgViews = Number(hist.avg_views || 0);\n const avgEngagement = Number(hist.avg_engagement || 0);\n const avgLength = Number(hist.avg_length || 0);\n\n const breakdown: Array<\n { factor: string; impact: number; tip?: string }\n > = [];\n let score = 50;\n\n if (sampleSize >= 3 && avgLength > 0) {\n const ratio = content.length / avgLength;\n if (ratio >= 0.5 && ratio <= 1.7) {\n score += 6;\n breakdown.push({\n factor: \"Longueur proche de vos habitudes\",\n impact: 6,\n });\n } else if (ratio > 1.7) {\n score -= 6;\n breakdown.push({\n factor: \"Texte plus long que d'habitude\",\n impact: -6,\n tip: \"Raccourcis ou structure en paragraphes courts.\",\n });\n } else {\n score += 2;\n breakdown.push({\n factor: \"Texte plus court que d'habitude\",\n impact: 2,\n });\n }\n }\n\n const hashtagCount =\n (content.match(/#[\\p{L}\\p{N}_]{2,30}/gu) || []).length;\n if (hashtagCount >= 1 && hashtagCount <= 3) {\n score += 8;\n breakdown.push({\n factor: `${hashtagCount} hashtag(s) — dosage optimal`,\n impact: 8,\n });\n } else if (hashtagCount === 0) {\n breakdown.push({\n factor: \"Aucun hashtag\",\n impact: 0,\n tip: \"Ajoutez 1 à 3 hashtags pertinents pour élargir la portée.\",\n });\n } else {\n score -= 6;\n breakdown.push({\n factor: \"Trop de hashtags\",\n impact: -6,\n tip: \"Limitez-vous à 1-3 hashtags pour éviter l'effet spam.\",\n });\n }\n\n if (\n /\\?|commentez|partagez|votre avis|selon vous|dites-moi|votez/i.test(\n content,\n )\n ) {\n score += 6;\n breakdown.push({\n factor: \"Question / appel à l'action présent\",\n impact: 6,\n });\n } else {\n breakdown.push({\n factor: \"Pas de question ni d'appel à l'action\",\n impact: 0,\n tip: \"Une question en fin de post stimule les réponses.\",\n });\n }\n\n if (sampleSize >= 3) {\n const fmt = plannedFormat || \"micro_text\";\n const fmtRow = (formatRows as any[]).find((r) =>\n String(r.format) === fmt\n );\n if (fmtRow) {\n const fmtEng = Number(fmtRow.avg_engagement || 0);\n if (fmtEng > avgEngagement * 1.15) {\n score += 10;\n breakdown.push({\n factor: `Format « ${fmt} » au-dessus de votre moyenne`,\n impact: 10,\n });\n } else if (fmtEng < avgEngagement * 0.85) {\n score -= 8;\n breakdown.push({\n factor: `Format « ${fmt} » sous votre moyenne`,\n impact: -8,\n tip: \"Testez un autre format plus performant.\",\n });\n }\n }\n }\n\n let plannedHour: number | null = null;\n if (args.scheduled_time) {\n const d = new Date(String(args.scheduled_time));\n if (!isNaN(d.getTime())) plannedHour = d.getHours();\n else {\n const hm = String(args.scheduled_time).match(/^(\\d{1,2})/);\n if (hm) plannedHour = Number(hm[1]);\n }\n }\n if (plannedHour !== null && sampleSize >= 3) {\n const hourRow = (hourRows as any[]).find((r) =>\n Number(r.hour) === plannedHour\n );\n if (hourRow) {\n const hourViews = Number(hourRow.avg_views || 0);\n const hourLabel = `${String(plannedHour).padStart(2, \"0\")}h`;\n if (hourViews > avgViews * 1.15) {\n score += 8;\n breakdown.push({\n factor: `Créneau ${hourLabel} au-dessus de votre moyenne`,\n impact: 8,\n });\n } else if (hourViews < avgViews * 0.85) {\n score -= 6;\n breakdown.push({\n factor: `Créneau ${hourLabel} sous votre moyenne`,\n impact: -6,\n tip:\n \"Utilisez /besttime pour trouver vos meilleurs créneaux.\",\n });\n }\n }\n }\n\n score = Math.max(0, Math.min(100, score));\n resultData = {\n score,\n estimated_reach: Math.round(avgViews * (0.6 + score / 100)),\n estimated_engagement:\n Math.round(avgEngagement * (0.6 + score / 100) * 10) / 10,\n based_on_posts: sampleSize,\n breakdown,\n cold_start: sampleSize < 3,\n message: sampleSize < 3\n ? \"Pas assez d'historique (moins de 3 posts sur 90 jours) — estimation neutre.\"\n : `Score ${score}/100 basé sur ${sampleSize} posts récents.`,\n };\n break;\n }\n\n case \"analyze_content_performance\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const rows = await sql`\n SELECT COALESCE(format,'micro_text') AS format, content,\n COALESCE(views_count,0) AS views, COALESCE(likes_count,0) AS likes,\n COALESCE(reposts_count,0) AS reposts, COALESCE(replies_count,0) AS replies\n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz\n ORDER BY published_at DESC LIMIT 500\n `;\n const byFormat: Record<\n string,\n { posts: number; views: number; engagement: number }\n > = {};\n const byTag: Record<\n string,\n { posts: number; views: number; likes: number }\n > = {};\n for (const r of rows as any[]) {\n const engagement = Number(r.likes) + Number(r.reposts) * 2 +\n Number(r.replies) * 2;\n const f = String(r.format || \"micro_text\");\n byFormat[f] = byFormat[f] || { posts: 0, views: 0, engagement: 0 };\n byFormat[f].posts += 1;\n byFormat[f].views += Number(r.views);\n byFormat[f].engagement += engagement;\n for (\n const m of String(r.content || \"\").matchAll(\n /#([\\p{L}\\p{N}_]{2,30})/gu,\n )\n ) {\n const tag = m[1].toLowerCase();\n byTag[tag] = byTag[tag] || { posts: 0, views: 0, likes: 0 };\n byTag[tag].posts += 1;\n byTag[tag].views += Number(r.views);\n byTag[tag].likes += Number(r.likes);\n }\n }\n const formats = Object.entries(byFormat)\n .map(([format, s]) => ({\n format,\n posts: s.posts,\n avg_views: Math.round(s.views / Math.max(1, s.posts)),\n avg_engagement:\n Math.round((s.engagement / Math.max(1, s.posts)) * 10) / 10,\n engagement_rate_percent: s.views > 0\n ? Math.round((s.engagement / s.views) * 1000) / 10\n : 0,\n }))\n .sort((a, b) => b.avg_engagement - a.avg_engagement);\n const top_hashtags = Object.entries(byTag)\n .map(([tag, s]) => ({\n tag: `#${tag}`,\n posts: s.posts,\n avg_views: Math.round(s.views / Math.max(1, s.posts)),\n avg_likes: Math.round((s.likes / Math.max(1, s.posts)) * 10) / 10,\n }))\n .sort((a, b) => b.avg_views - a.avg_views)\n .slice(0, 10);\n resultData = {\n period_days: days,\n posts_analyzed: (rows as any[]).length,\n formats,\n top_hashtags,\n message: formats.length > 0\n ? `Format le plus engageant : ${formats[0].format} (${\n formats[0].avg_engagement\n } engagement moyen).`\n : \"Aucun post publié sur la période.\",\n };\n break;\n }\n\n case \"analyze_dm_activity\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const msgs = await sql`\n SELECT dm.id, dm.conversation_id, dm.sender_id, dm.recipient_id, dm.created_at\n FROM direct_messages dm\n WHERE (dm.sender_id = ${uid} OR dm.recipient_id = ${uid})\n AND dm.created_at >= ${sinceIso}::timestamptz\n ORDER BY dm.conversation_id, dm.created_at ASC\n LIMIT 1000\n `;\n const rowsArr = msgs as any[];\n const sent = rowsArr.filter((m) =>\n Number(m.sender_id) === uid\n ).length;\n const received = rowsArr.length - sent;\n const convIds = new Set<string>(\n rowsArr.map((m) => String(m.conversation_id)),\n );\n let replyDeltas = 0;\n let replyCount = 0;\n let prev: any = null;\n for (const m of rowsArr) {\n if (\n prev &&\n String(prev.conversation_id) === String(m.conversation_id) &&\n Number(prev.sender_id) !== Number(m.sender_id)\n ) {\n const delta = new Date(m.created_at).getTime() -\n new Date(prev.created_at).getTime();\n if (delta > 0 && delta < 24 * 3600 * 1000) {\n replyDeltas += delta;\n replyCount += 1;\n }\n }\n prev = m;\n }\n const perOther: Record<string, number> = {};\n for (const m of rowsArr) {\n const other = Number(m.sender_id) === uid\n ? Number(m.recipient_id || 0)\n : Number(m.sender_id);\n if (other && other !== uid) {\n perOther[other] = (perOther[other] || 0) + 1;\n }\n }\n const topIds = Object.entries(perOther)\n .sort((a, b) => b[1] - a[1])\n .slice(0, 5)\n .map(([id]) => Number(id));\n let topCorrespondents: any[] = [];\n if (topIds.length > 0) {\n const users = await sql`\n SELECT u.id, u.username, pr.display_name FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE u.id = ANY(${topIds})\n `;\n const byId = new Map(\n (users as any[]).map((u) => [Number(u.id), u]),\n );\n topCorrespondents = topIds.map((id) => ({\n username: byId.get(id)?.username || null,\n display_name: byId.get(id)?.display_name || null,\n messages: perOther[id],\n }));\n }\n const groupsRows =\n await sql`SELECT COUNT(*) AS n FROM dm_group_members WHERE user_id = ${uid}`;\n resultData = {\n period_days: days,\n messages_total: rowsArr.length,\n sent,\n received,\n active_conversations: convIds.size,\n groups: Number(groupsRows[0]?.n || 0),\n avg_reply_minutes: replyCount > 0\n ? Math.round((replyDeltas / replyCount / 60000) * 10) / 10\n : null,\n replies_measured: replyCount,\n top_correspondents: topCorrespondents,\n note: rowsArr.length >= 1000\n ? \"Analyse limitée aux 1000 derniers messages de la période.\"\n : undefined,\n message:\n `${rowsArr.length} messages sur ${days} jours (${sent} envoyés, ${received} reçus).`,\n };\n break;\n }\n\n case \"analyze_book_stats\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const books = await sql`\n SELECT b.id, b.title, b.icon,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS items_count,\n (SELECT COUNT(DISTINCT bi.added_by) FROM vibe_book_items bi WHERE bi.book_id = b.id AND bi.added_by IS NOT NULL) AS contributors_count,\n (SELECT COUNT(*) FROM vibe_book_members bm WHERE bm.book_id = b.id) AS members_count,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id AND bi.added_at >= ${sinceIso}::timestamptz) AS recent_items,\n (SELECT MAX(bi.added_at) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS last_added_at\n FROM vibe_books b\n WHERE b.user_id = ${uid} OR EXISTS (SELECT 1 FROM vibe_book_members bm WHERE bm.book_id = b.id AND bm.user_id = ${uid})\n ORDER BY b.updated_at DESC NULLS LAST\n LIMIT 20\n `;\n const bookIds = (books as any[]).map((b) => String(b.id));\n let topPosts: any[] = [];\n if (bookIds.length > 0) {\n topPosts = await sql`\n SELECT bi.book_id, p.id AS post_id, p.content, COALESCE(p.views_count,0) AS views, COALESCE(p.likes_count,0) AS likes\n FROM vibe_book_items bi\n JOIN posts p ON p.id = bi.post_id\n WHERE bi.book_id = ANY(${bookIds}::uuid[])\n ORDER BY COALESCE(p.views_count,0) DESC\n LIMIT 60\n ` as any[];\n }\n const topPerBook = new Map<string, any>();\n for (const r of topPosts) {\n const key = String(r.book_id);\n if (!topPerBook.has(key)) {\n topPerBook.set(key, {\n post_id: r.post_id,\n excerpt: String(r.content || \"\").slice(0, 120),\n views: Number(r.views || 0),\n likes: Number(r.likes || 0),\n });\n }\n }\n resultData = {\n books: (books as any[]).map((b) => ({\n id: b.id,\n title: b.title,\n icon: b.icon,\n items_count: Number(b.items_count || 0),\n members_count: Number(b.members_count || 0),\n contributors_count: Number(b.contributors_count || 0),\n recent_items: Number(b.recent_items || 0),\n last_added_at: b.last_added_at,\n top_post: topPerBook.get(String(b.id)) || null,\n })),\n books_count: (books as any[]).length,\n message: `${(books as any[]).length} livre(s) analysé(s).`,\n };\n break;\n }\n\n case \"analyze_hashtags\": {\n const days = parsePeriodDays(args.period);\n const sinceIso = new Date(Date.now() - days * 86400000).toISOString();\n const [mine, trending] = await Promise.all([\n sql`\n SELECT content, COALESCE(views_count,0) AS views, COALESCE(likes_count,0) AS likes,\n COALESCE(reposts_count,0) AS reposts, COALESCE(replies_count,0) AS replies\n FROM posts WHERE author_id = ${uid} AND published_at >= ${sinceIso}::timestamptz\n ORDER BY published_at DESC LIMIT 500\n `,\n sql`SELECT content FROM posts WHERE published_at > NOW() - INTERVAL '7 days' ORDER BY published_at DESC LIMIT 200`,\n ]);\n const tagStats: Record<\n string,\n { posts: number; views: number; likes: number; engagement: number }\n > = {};\n for (const r of mine as any[]) {\n const eng = Number(r.likes) + Number(r.reposts) * 2 +\n Number(r.replies) * 2;\n for (\n const m of String(r.content || \"\").matchAll(\n /#([\\p{L}\\p{N}_]{2,30})/gu,\n )\n ) {\n const tag = m[1].toLowerCase();\n tagStats[tag] = tagStats[tag] ||\n { posts: 0, views: 0, likes: 0, engagement: 0 };\n tagStats[tag].posts += 1;\n tagStats[tag].views += Number(r.views);\n tagStats[tag].likes += Number(r.likes);\n tagStats[tag].engagement += eng;\n }\n }\n const hashtags = Object.entries(tagStats)\n .map(([tag, s]) => ({\n tag: `#${tag}`,\n posts: s.posts,\n avg_views: Math.round(s.views / Math.max(1, s.posts)),\n avg_likes: Math.round((s.likes / Math.max(1, s.posts)) * 10) / 10,\n engagement_rate_percent: s.views > 0\n ? Math.round((s.engagement / s.views) * 1000) / 10\n : 0,\n }))\n .sort((a, b) => b.avg_views - a.avg_views);\n const used = new Set(hashtags.map((h) => h.tag.slice(1)));\n const trendCounts: Record<string, number> = {};\n for (const r of trending as any[]) {\n for (\n const m of String(r.content || \"\").matchAll(\n /#([\\p{L}\\p{N}_]{2,30})/gu,\n )\n ) {\n const tag = m[1].toLowerCase();\n trendCounts[tag] = (trendCounts[tag] || 0) + 1;\n }\n }\n const suggestions = Object.entries(trendCounts)\n .filter(([tag]) => !used.has(tag))\n .sort((a, b) => b[1] - a[1])\n .slice(0, 6)\n .map(([tag, count]) => ({\n tag: `#${tag}`,\n platform_posts_7d: count,\n }));\n resultData = {\n period_days: days,\n hashtags: hashtags.slice(0, 10),\n best_hashtag: hashtags[0] || null,\n suggestions,\n message: hashtags.length === 0\n ? \"Aucun hashtag utilisé sur la période.\"\n : `Top hashtag : ${hashtags[0].tag} (${\n hashtags[0].avg_views\n } vues moyennes).`,\n };\n break;\n }\n\n default:\n throw new Error(`Outil inconnu : ${toolName}`);\n }\n\n const duration = Date.now() - startTime;\n await sql`\n INSERT INTO mai_tool_executions (user_id, tool_name, parameters, result, status, execution_time_ms)\n VALUES (${uid}, ${toolName}, ${JSON.stringify(args)}::jsonb, ${\n JSON.stringify(resultData)\n }::jsonb, 'success', ${duration})\n `;\n\n return { success: true, result: resultData };\n } catch (err: any) {\n console.error(`[MAIAgentFleet] Error executing tool ${toolName}:`, err);\n const duration = Date.now() - startTime;\n await sql`\n INSERT INTO mai_tool_executions (user_id, tool_name, parameters, result, status, execution_time_ms)\n VALUES (${uid}, ${toolName}, ${JSON.stringify(args)}::jsonb, ${\n JSON.stringify({ error: err.message })\n }::jsonb, 'failed', ${duration})\n `.catch(() => {});\n return { success: false, result: null, error: err.message };\n }\n }\n}",[499],"6961d478-ae3b-4245-9071-47b1ce8120c0","vibe-mai-execute.ts","6a7a88e4-af88-11f1-aa35-1607ee4eb77e",346,["D",1789313606037],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI : RÉGÉNÉRATION & EXÉCUTION D'OUTILS\n * (vibe-mai-execute.ts)\n * Régénération de la dernière réponse, exécution d'un outil approuvé et refus\n * d'un outil sensible. Mêmes contrôles que le chat : catalogue, outils\n * activés, approbation, débit et quotas. Scindé de vibe-mai.ts (limite de\n * taille Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { MAIAgentFleet, SENSITIVE_TOOLS } from \"./vibe-mai-fleet.ts\";\nimport {\n isToolEnabledForUser,\n MAI_TOOLS_CATALOG,\n TOOL_EXECUTORS,\n} from \"./vibe-tools.ts\";\nimport {\n _resolveOpenRouterModel,\n buildPostContext,\n ensureMAIConversations,\n finalizePendingToolMessage,\n formatToolReply,\n getOpenRouterKey,\n getOrCreateConversation,\n getUserAutoApprove,\n makeToolCallRecord,\n resolveOwnedConversation,\n saveMAIMessage,\n} from \"./vibe-mai-core.ts\";\n\nexport function registerVibeMAIExecuteRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1bis-bis. RÉGÉNÉRATION DE LA DERNIÈRE RÉPONSE mAI\n // Rejoue le dernier message utilisateur (éventuellement avec le post joint),\n // supprime la réponse assistant qui suivait et en produit une nouvelle.\n const handleMAIRegenerate = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json().catch(() => ({} as any));\n const sql = getDb();\n await ensureMAIConversations();\n const conv = await resolveOwnedConversation(\n sql,\n userId,\n body?.conversation_id,\n );\n if (conv.invalid) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const conversationId = conv.id ||\n await getOrCreateConversation(sql, userId);\n\n const lastUserRows = conversationId\n ? await sql`\n SELECT id, content, created_at FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND sender_role = 'user' AND content IS NOT NULL\n ORDER BY created_at DESC LIMIT 1\n `\n : [];\n if (lastUserRows.length === 0) {\n return c.json({ error: \"Aucun message à régénérer.\" }, 400);\n }\n const lastUser: any = lastUserRows[0];\n\n // Supprime la (les) réponse(s) assistant postérieures au dernier message utilisateur\n await sql`\n DELETE FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND sender_role = 'assistant' AND created_at > ${lastUser.created_at}\n `.catch(() => {});\n\n // Historique antérieur (hors message courant), même filtre que le chat\n let historyMessages: any[] = [];\n try {\n const historyRows = await sql`\n SELECT sender_role, content FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND content IS NOT NULL\n AND created_at < ${lastUser.created_at}\n ORDER BY created_at DESC LIMIT 20\n `;\n historyMessages = historyRows.slice().reverse().map((m: any) => ({\n role: m.sender_role === \"assistant\" ? \"assistant\" : \"user\",\n content: String(m.content).slice(0, 4000),\n }));\n } catch {}\n\n // Contexte de post optionnel (même comportement que le chat mAI)\n let postContextBlock = \"\";\n const contextPostId = body?.context?.post_id;\n if (contextPostId) {\n const postCtx = await buildPostContext(sql, String(contextPostId));\n if (postCtx) postContextBlock = `\\n\\n${postCtx.text}`;\n }\n\n const effectiveModel = body?.model ||\n (await MAIAgentFleet.getUserDefaultModel(userId));\n const primaryModel = _resolveOpenRouterModel(effectiveModel);\n const openRouterApiKey = await getOpenRouterKey(sql, userId);\n\n const systemContent =\n \"Tu es mAI, l'intelligence artificielle intégrée au réseau social Vibe. Tu es concis, créatif, pertinent et tu réponds en français avec des émojis.\" +\n \" Tu connais l'historique de la conversation en cours : apporte ta réponse en continuité naturelle avec les échanges précédents, sans redemander des informations déjà données.\" +\n (postContextBlock\n ? \" Une publication Vibe est jointe à la fin du message : base ta réponse sur son contenu, ses statistiques et ses commentaires.\"\n : \"\");\n\n let reply = \"\";\n if (openRouterApiKey) {\n const modelsToTry = [\n primaryModel,\n \"poolside/laguna-xs-2.1:free\",\n \"nvidia/nemotron-3.5-lightning:free\",\n ].filter(Boolean);\n for (const candidate of Array.from(new Set(modelsToTry))) {\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: candidate,\n messages: [\n { role: \"system\", content: systemContent },\n ...historyMessages,\n {\n role: \"user\",\n content: `${\n String(lastUser.content).trim()\n }${postContextBlock}`,\n },\n ],\n }),\n },\n );\n if (aiRes.ok) {\n const aiData = await aiRes.json();\n const textOutput = aiData.choices?.[0]?.message?.content;\n if (textOutput && textOutput.trim()) {\n reply = textOutput.trim();\n break;\n }\n }\n } catch (e) {\n console.warn(\n `[mAI Regenerate] Erreur sur ${candidate}, essai du suivant...`,\n e,\n );\n }\n }\n }\n if (!reply) {\n return c.json({\n error: \"Impossible de régénérer la réponse pour le moment.\",\n }, 502);\n }\n\n const saved = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n );\n\n // Débit quota (parité avec le chat mAI)\n try {\n const { weekStartStr } = getWeekData();\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, 250)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 250\n `;\n } catch {}\n\n return c.json({\n success: true,\n reply,\n message_id: saved?.id || null,\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n user_message_id: lastUser?.id || null,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Regenerate Error:\", err);\n return c.json({ error: \"Erreur lors de la régénération.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/mai/regenerate\",\n \"/vibe/mai/regenerate\",\n \"/v1/mai/regenerate\",\n ], handleMAIRegenerate);\n\n // 1bis. EXÉCUTION D'OUTIL APPROUVÉ PAR L'UTILISATEUR\n // Appelé par le front uniquement après confirmation explicite (bouton\n // \"Approuver\") — ou pour un outil non sensible (lecture seule).\n // Mêmes contrôles que le chat : catalogue, outils activés, approbation\n // des outils sensibles, limite de débit et débit de quota.\n const handleExecuteTool = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const { name, args = {}, model, approve = false, conversation_id } =\n await c.req.json();\n if (!name) return c.json({ error: \"Nom d'outil requis.\" }, 400);\n const toolName = String(name);\n\n const catalogTool = MAI_TOOLS_CATALOG.find((t) => t.id === toolName);\n if (!catalogTool || !catalogTool.enabled) {\n return c.json(\n { error: `Outil inconnu ou désactivé : ${toolName}` },\n 404,\n );\n }\n\n if (!rateLimit(`mai-execute:${userId}`, 30, 60_000)) {\n return c.json({\n error: \"Trop de requêtes d'exécution. Réessayez dans une minute.\",\n }, 429);\n }\n\n const effectiveModel = model ||\n (await MAIAgentFleet.getUserDefaultModel(userId));\n\n // Conversation ciblée (multi-conversations) — plus récente par défaut\n const sql = getDb();\n await ensureMAIConversations();\n const conv = await resolveOwnedConversation(sql, userId, conversation_id);\n if (conv.invalid) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const conversationId = conv.id ||\n await getOrCreateConversation(sql, userId);\n\n if (!(await isToolEnabledForUser(userId, toolName))) {\n const reply =\n `🚫 L'outil « ${toolName} » est désactivé dans vos Paramètres → Outils mAI. Activez-le pour l'utiliser.`;\n const record = makeToolCallRecord({\n name: toolName,\n args,\n status: \"disabled\",\n model: effectiveModel,\n });\n let savedAssistant: any = null;\n if (conversationId) {\n savedAssistant = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: [record] },\n );\n }\n return c.json({\n reply,\n toolExecuted: null,\n toolCalls: [record],\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n assistant_message_id: savedAssistant?.id || null,\n });\n }\n\n if (SENSITIVE_TOOLS.includes(toolName) && approve !== true) {\n const autoApprove = await getUserAutoApprove(sql, userId);\n if (!autoApprove) {\n // Le record « pending_approval » a déjà été persisté par le chat mAI :\n // aucune écriture supplémentaire ici (pas de doublon).\n return c.json({\n reply:\n `🔐 **Approbation requise** : mAI souhaite exécuter l'outil « ${toolName} » sur votre compte. Confirmez ou refusez dans le panneau ci-dessus.`,\n requiresApproval: true,\n pendingTool: { name: toolName, args },\n toolExecuted: null,\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n });\n }\n }\n\n const executor = TOOL_EXECUTORS[toolName];\n const result = executor\n ? await executor(userId, args)\n : await MAIAgentFleet.executeTool(toolName, args, userId);\n const reply = result.success\n ? formatToolReply(toolName, result.result, \"\")\n : `⚠️ L'action n'a pas pu être exécutée : ${result.error}`;\n\n if (result.success) {\n const { weekStartStr } = getWeekData();\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, 250)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 250\n `.catch(() => {});\n }\n\n // Persistance : finalise le message « approbation en attente » existant,\n // sinon insère un nouveau message assistant (jamais de doublon).\n const record = makeToolCallRecord({\n name: toolName,\n args,\n status: result.success ? \"executed\" : \"error\",\n result,\n error: result.success ? null : (result.error || \"Erreur d'exécution\"),\n model: effectiveModel,\n });\n let savedAssistantId: string | null = null;\n if (conversationId) {\n const finalized = await finalizePendingToolMessage(\n sql,\n conversationId,\n toolName,\n {\n status: result.success ? \"executed\" : \"error\",\n result,\n error: result.success\n ? null\n : (result.error || \"Erreur d'exécution\"),\n reply,\n model: effectiveModel,\n },\n );\n if (finalized.id) {\n savedAssistantId = finalized.id;\n } else {\n const saved = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: [record] },\n );\n savedAssistantId = saved?.id ? String(saved.id) : null;\n }\n }\n\n return c.json({\n reply,\n toolExecuted: { name: toolName, result },\n toolCalls: [record],\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n assistant_message_id: savedAssistantId,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Execute Tool Error:\", err);\n return c.json({ error: \"Erreur lors de l'exécution de l'outil.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/mai/execute-tool\",\n \"/vibe/mai/execute-tool\",\n \"/v1/mai/execute-tool\",\n ], handleExecuteTool);\n\n // 1ter. REFUS D'UN OUTIL SENSIBLE (persistance du flux d'approbation)\n // Appelé par le front quand l'utilisateur refuse : le message assistant\n // « approbation en attente » est finalisé avec le statut « rejected ».\n const handleMAIToolRefused = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const { name, args = {}, conversation_id } = await c.req.json().catch(\n () => ({} as any)\n );\n const toolName = String(name || \"\").trim();\n if (!toolName) return c.json({ error: \"Nom d'outil requis.\" }, 400);\n\n const sql = getDb();\n await ensureMAIConversations();\n const conv = await resolveOwnedConversation(sql, userId, conversation_id);\n if (conv.invalid) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const conversationId = conv.id ||\n await getOrCreateConversation(sql, userId);\n\n const reply =\n `🚫 Très bien, je n'exécute pas l'outil « ${toolName} ». Dites-moi si je peux faire autre chose pour vous.`;\n const record = makeToolCallRecord({\n name: toolName,\n args,\n status: \"rejected\",\n });\n let savedId: string | null = null;\n if (conversationId) {\n const finalized = await finalizePendingToolMessage(\n sql,\n conversationId,\n toolName,\n { status: \"rejected\", reply },\n );\n if (finalized.id) {\n savedId = finalized.id;\n } else {\n const saved = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: [record] },\n );\n savedId = saved?.id ? String(saved.id) : null;\n }\n }\n\n return c.json({\n success: true,\n reply,\n toolCalls: [record],\n conversation_id: conversationId || null,\n message_id: savedId,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Tool Refused Error:\", err);\n return c.json({ error: \"Erreur lors du refus de l'outil.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/mai/tool-refused\",\n \"/vibe/mai/tool-refused\",\n \"/v1/mai/tool-refused\",\n ], handleMAIToolRefused);\n}",[507],"992f27e1-8a83-440e-923e-807baf5dc491","vibe-mai-core.ts","97884b14-af88-11f1-9b2e-1607ee4eb77e",355,["D",1789313672518],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI : SOCLE PARTAGÉ (vibe-mai-core.ts)\n * Modèles OpenRouter, formatage des réponses d'outils, contexte de post\n * joint (vision), clé API, persistance des conversations/messages mAI,\n * détection des commandes / et @, et auto-approbation.\n * Scindé de vibe-mai.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport { getDb } from \"./config.ts\";\nimport { stripHtmlTags } from \"./vibe-posts-core.ts\";\n\n/** Regex UUID partagée (conversations mAI, publications jointes). */\nexport const UUID_RE =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\n/**\n * Modèles \"mAI\" marketing → modèles OpenRouter réels.\n * Les ids contenant déjà \"/\" (ex: anthropic/claude-3.7-sonnet) passent tels quels.\n */\nconst MODEL_MAP: Record<string, string> = {\n \"poolside/laguna-xs-2.1:free\": \"poolside/laguna-xs-2.1:free\",\n \"mai-1.5-apex\": \"poolside/laguna-xs-2.1:free\",\n \"mai-1.5-light\": \"poolside/laguna-xs-2.1:free\",\n};\n\nexport function _resolveOpenRouterModel(model: string): string {\n if (MODEL_MAP[model]) return MODEL_MAP[model];\n return model.includes(\"/\") ? model : \"poolside/laguna-xs-2.1:free\";\n}\n\n/** Période optionnelle en fin de commande (\"/audience 90d\", \"/hashtags 7j\", \"... 12m\"). */\nexport function parsePeriodArg(raw: string): \"7d\" | \"30d\" | \"90d\" | \"12m\" {\n const m = String(raw).toLowerCase().match(\n /(?:^|\\s)(7d|30d|90d|12m|7j|30j|90j|1an|an)\\s*$/,\n );\n if (!m) return \"30d\";\n const v = m[1];\n if (v === \"7d\" || v === \"7j\") return \"7d\";\n if (v === \"90d\" || v === \"90j\") return \"90d\";\n if (v === \"12m\" || v === \"1an\" || v === \"an\") return \"12m\";\n return \"30d\";\n}\n\n/** Formatte la réponse conversationnelle après exécution d'un outil. */\nexport function formatToolReply(\n toolName: string,\n result: any,\n _username: string,\n): string {\n if (toolName === \"generate_vibe_image\") {\n return `🎨 Voici l'image générée avec mAI :\\n\\n![Image générée](${result.imageUrl})\\n\\n*Prompt : « ${result.prompt} »*`;\n }\n if (toolName === \"search_web\") {\n return `🌐 **Recherche Web mAI** :\\n\\n${result.snippet}`;\n }\n if (toolName === \"fact_check\") {\n return `🛡️ **Vérification Factuelle mAI** :\\n• Affirmation : « ${result.statement} »\\n• Résultat : **${result.verdict}** (Indice de confiance : ${result.confidence})\\n\\n${result.analysis}`;\n }\n if (toolName === \"rewrite_post\") {\n return `✨ **Texte reformulé (${result.style})** :\\n\\n${result.rewritten}`;\n }\n if (toolName === \"translate\") {\n return `🌐 **Traduction (${result.targetLanguage})** :\\n\\n${result.translated}`;\n }\n if (toolName === \"create_post\") {\n return `🚀 Votre publication a été publiée avec succès sur Vibe :\\n\\n« ${result.post.content} »`;\n }\n if (toolName === \"delete_post\") {\n return `🗑️ ${result.message}`;\n }\n if (toolName === \"analyze_trends\") {\n const trendsList = result.trendingTopics.map((t: any) =>\n `• **${t.name}** (${t.postsCount} publications) — ${t.sentiment}`\n ).join(\"\\n\");\n return trendsList\n ? `🔥 **Tendances actuelles sur Vibe** :\\n\\n${trendsList}`\n : \"🔍 Pas encore de tendances détectées cette semaine. Publiez avec des hashtags pour lancer la vague !\";\n }\n if (toolName === \"suggest_post\") {\n return `💡 **Idées de publications Vibe** (thème : ${result.topic}) :\\n\\n${result.suggestions}\\n\\n*Utilisez /publish suivi du texte choisi pour publier.*`;\n }\n if (toolName === \"get_account_stats\") {\n return `📈 **Statistiques du compte @${result.user.username}** :\\n• Publications : **${result.totalPosts}**\\n• Score de réputation : **${\n result.profile?.reputation_score || 100\n } pts**\\n• Forfait : **${result.user.tier || \"Free\"}**`;\n }\n if (toolName === \"check_quotas\") {\n const q = result;\n return `📊 **Vos quotas réels (${q.tier})** :\\n• Tokens mAI : **${q.weeklyTokens.used.toLocaleString()}** / ${q.weeklyTokens.limit.toLocaleString()} (${q.weeklyTokens.percent}%)\\n• Images quotidiennes : **${q.dailyImages.used}** / ${q.dailyImages.limit} (${q.dailyImages.percent}%)\\n• Réinitialisation : ${\n new Date(q.resetAt).toLocaleDateString(\"fr-FR\")\n }`;\n }\n if (toolName === \"update_profile\") {\n return `✅ ${result.message}\\n\\n• Nom affiché : **${result.profile.display_name}**\\n• Bio : ${\n result.profile.bio || \"_(vide)_\"\n }`;\n }\n if (toolName === \"follow_user\") {\n return `👥 ${result.message}`;\n }\n if (toolName === \"get_notifications\") {\n if (result.count === 0) return \"🔔 Aucune notification récente.\";\n const list = result.notifications.slice(0, 10).map((n: any) =>\n `• **${n.type}** — ${\n n.message || (n.actor_username ? `@${n.actor_username}` : \"\")\n }`\n ).join(\"\\n\");\n return `🔔 **Vos ${result.count} dernières notifications** :\\n\\n${list}`;\n }\n if (toolName === \"like_post\") {\n return result.liked\n ? `❤️ ${result.message}\\n\\n• Post : \\`${result.post_id}\\`\\n• Total likes : **${result.likes_count}**`\n : `🤍 ${result.message}`;\n }\n if (toolName === \"send_message\") {\n return `💬 ${result.message}\\n\\n• Destinataire : **@${result.username}**\\n• Aperçu : « ${result.preview} »`;\n }\n if (toolName === \"update_settings\") {\n const keys = Object.keys(result.patched || {}).join(\", \");\n return `⚙️ ${result.message}\\n\\n• Modifiés : \\`${keys}\\``;\n }\n if (toolName === \"bookmark_post\") {\n return result.bookmarked ? `🔖 ${result.message}` : `📑 ${result.message}`;\n }\n if (toolName === \"repost_post\") {\n return result.reposted ? `🔁 ${result.message}` : `↩️ ${result.message}`;\n }\n if (toolName === \"comment_post\") {\n return `💭 ${result.message}\\n\\n• Commentaire : \\`${result.comment_id}\\``;\n }\n if (toolName === \"get_post_stats\") {\n return `📊 **Analyse du post @${result.author}** :\\n• ❤️ ${result.likes} · 🔁 ${result.reposts} · 💬 ${result.replies} · 👁️ ${result.views} · 🔖 ${result.bookmarks}\\n• Engagement : **${result.engagement}** (taux ${result.engagement_rate_percent}%)\\n\\n« ${result.content} »`;\n }\n if (toolName === \"search_posts\") {\n if (!result.resultsCount) {\n return `🔎 Aucune publication trouvée pour « ${result.query} ».`;\n }\n const list = (result.posts || []).slice(0, 5).map((p: any) =>\n `• @${p.username} — « ${\n String(p.content || \"\").replace(/\\s+/g, \" \").slice(0, 90)\n } »`\n ).join(\"\\n\");\n return `🔎 **${result.resultsCount} publication(s) pour « ${result.query} »** :\\n\\n${list}`;\n }\n if (toolName === \"analyze_creator_stats\") {\n const t = result.totals || {};\n const reco = (result.recommendations || []).map((r: string) => `• ${r}`)\n .join(\"\\n\");\n return `📈 **Analyse créateur (${result.period_days} j)** :\\n• 👁️ Vues : **${\n t.views ?? \"—\"\n }** · ❤️ ${t.likes ?? \"—\"} · 🔁 ${t.reposts ?? \"—\"} · 💬 ${\n t.replies ?? \"—\"\n }\\n• Taux d'engagement : **${result.engagement_rate_percent ?? \"—\"}%**${\n reco ? `\\n\\n**Recommandations :**\\n${reco}` : \"\"\n }`;\n }\n if (toolName === \"analyze_audience\") {\n const src = (result.sources || []).map((s: any) =>\n `• ${s.source} : **${s.views}** vues (${s.percent}%)`\n ).join(\"\\n\");\n const hours = (result.peak_hours || []).slice(0, 3).map((h: any) =>\n `${String(h.hour).padStart(2, \"0\")}h`\n ).join(\", \");\n const fans = (result.top_engaged_followers || []).slice(0, 3).map((\n f: any,\n ) => `@${f.username} (${f.views})`).join(\", \");\n return `👥 **Audience (${result.period_days} j)** :\\n• Vues : **${result.total_views}** · Visiteurs uniques : **${result.unique_viewers}**\\n${src}${\n hours ? `\\n• Heures de pointe : ${hours}` : \"\"\n }${fans ? `\\n• Top followers engagés : ${fans}` : \"\"}`;\n }\n if (toolName === \"best_time_to_post\") {\n const slots = (result.best_slots || []).map((s: any) =>\n `• **${s.weekday} ${\n String(s.hour).padStart(2, \"0\")\n }h** — ${s.avg_views} vues moy., ${s.avg_engagement} engagement`\n ).join(\"\\n\");\n return `🕐 **Meilleurs créneaux (${result.period_days} j, ${result.analyzed_posts} posts analysés)** :\\n${\n slots || \"• Pas assez de données.\"\n }\\n\\n*Confiance : ${result.confidence}*`;\n }\n if (toolName === \"compare_periods\") {\n const fmt = (label: string, m: any) =>\n `• ${label} : **${m.current}** vs ${m.previous} (${\n m.delta >= 0 ? \"+\" : \"\"\n }${m.delta}, ${m.percent >= 0 ? \"+\" : \"\"}${m.percent}%)`;\n return `📊 **Comparaison (${result.period_days} j vs les ${result.period_days} précédents)** :\\n${\n fmt(\"Vues\", result.views)\n }\\n${fmt(\"Likes\", result.likes)}\\n${fmt(\"Reposts\", result.reposts)}\\n${\n fmt(\"Réponses\", result.replies)\n }\\n${fmt(\"Followers gagnés\", result.followers_gained)}\\n${\n fmt(\"Vues du profil\", result.profile_views)\n }`;\n }\n if (toolName === \"predict_post_performance\") {\n const tips = (result.breakdown || []).filter((b: any) => b.tip).map((\n b: any,\n ) => `• ${b.tip}`).join(\"\\n\");\n return `🎯 **Prévision du brouillon : ${result.score}/100**${\n result.cold_start ? \" (historique insuffisant)\" : \"\"\n }\\n• Portée estimée : **${result.estimated_reach}** vues\\n• Engagement estimé : **${result.estimated_engagement}**${\n tips ? `\\n\\n**Conseils :**\\n${tips}` : \"\"\n }`;\n }\n if (toolName === \"analyze_content_performance\") {\n const formats = (result.formats || []).map((f: any) =>\n `• **${f.format}** : ${f.posts} posts · ${f.avg_views} vues moy. · ${f.avg_engagement} engagement`\n ).join(\"\\n\");\n const tags = (result.top_hashtags || []).slice(0, 5).map((t: any) =>\n `${t.tag} (${t.avg_views} vues)`\n ).join(\", \");\n return `🧩 **Performance par format (${result.period_days} j)** :\\n${\n formats || \"• Aucun post sur la période.\"\n }${tags ? `\\n\\n**Top hashtags :** ${tags}` : \"\"}`;\n }\n if (toolName === \"analyze_dm_activity\") {\n const top = (result.top_correspondents || []).slice(0, 3).map((c: any) =>\n `@${c.username} (${c.messages})`\n ).join(\", \");\n return `💬 **Activité messages (${result.period_days} j)** :\\n• Total : **${result.messages_total}** (${result.sent} envoyés, ${result.received} reçus)\\n• Conversations actives : **${result.active_conversations}** · Groupes : ${result.groups}${\n result.avg_reply_minutes !== null\n ? `\\n• Temps de réponse moyen : **${result.avg_reply_minutes} min**`\n : \"\"\n }${top ? `\\n• Top correspondants : ${top}` : \"\"}`;\n }\n if (toolName === \"analyze_book_stats\") {\n const books = (result.books || []).map((b: any) =>\n `• **${b.title}** : ${b.items_count} Vibes · ${b.members_count} membres · ${b.contributors_count} contributeurs`\n ).join(\"\\n\");\n return `📚 **Vos Livres (${result.books_count})** :\\n${\n books || \"• Aucun Livre.\"\n }`;\n }\n if (toolName === \"analyze_hashtags\") {\n const tags = (result.hashtags || []).slice(0, 5).map((t: any) =>\n `• **${t.tag}** — ${t.avg_views} vues moy., ${t.avg_likes} likes moy.`\n ).join(\"\\n\");\n const sugg = (result.suggestions || []).slice(0, 4).map((t: any) =>\n `${t.tag} (${t.platform_posts_7d})`\n ).join(\", \");\n return `#️⃣ **Hashtags (${result.period_days} j)** :\\n${\n tags || \"• Aucun hashtag utilisé sur la période.\"\n }${sugg ? `\\n\\n**Suggestions tendance :** ${sugg}` : \"\"}`;\n }\n return \"✅ Action effectuée.\";\n}\n\n// ── Contexte de post joint à une question mAI ────────────────────────────\n// Le post est transmis avec ses statistiques, ses premiers commentaires et\n// ses médias. Les images sont jointes comme FICHIERS (octets récupérés puis\n// encodés en base64 data-URL), jamais comme simples URLs.\nexport const VISION_CAPABLE_MODELS = new Set([\n \"openai/gpt-4o\",\n \"google/gemini-2.5-flash\",\n \"google/gemini-2.5-pro\",\n \"anthropic/claude-3.7-sonnet\",\n \"mai-1.5-apex\",\n]);\nconst MAX_CONTEXT_IMAGES = 3;\nconst MAX_CONTEXT_IMAGE_BYTES = 3.5 * 1024 * 1024;\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n let binary = \"\";\n const CHUNK = 0x8000;\n for (let i = 0; i < bytes.length; i += CHUNK) {\n binary += String.fromCharCode.apply(\n null,\n Array.from(bytes.subarray(i, i + CHUNK)) as any,\n );\n }\n return btoa(binary);\n}\n\nexport async function buildPostContext(\n sql: any,\n postId: string,\n): Promise<{ text: string; imageParts: any[] } | null> {\n try {\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n postId,\n )\n ) return null;\n\n const rows = await sql`\n SELECT p.id, p.content, p.likes_count, p.reposts_count, p.replies_count, p.views_count,\n p.published_at, p.created_via, p.ai_generated,\n u.username, pr.display_name\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.id = ${postId}::uuid\n LIMIT 1\n `;\n if (rows.length === 0) return null;\n const post = rows[0];\n\n let commentsText = \"\";\n try {\n const comments = await sql`\n SELECT c.content, u.username\n FROM comments c\n JOIN users u ON u.id = c.author_id\n WHERE c.post_id = ${postId}::uuid AND c.is_hidden = FALSE\n ORDER BY c.depth ASC, c.likes_count DESC, c.created_at ASC\n LIMIT 10\n `;\n if (comments.length > 0) {\n const lines = comments\n .map((cm: any) =>\n ` • @${cm.username} : ${String(cm.content || \"\").slice(0, 200)}`\n )\n .join(\"\\n\");\n commentsText = `\\n\\nPremiers commentaires :\\n${lines}`;\n }\n } catch {}\n\n let media: any[] = [];\n try {\n media =\n await sql`SELECT url, media_type FROM media_assets WHERE post_id = ${postId}::uuid`;\n } catch {}\n\n const text =\n `📌 Post mentionné de @${post.username} (${\n post.display_name || post.username\n })` +\n `${\n post.ai_generated ? \" [marqué « créé avec l'IA » par son auteur]\" : \"\"\n }\\n` +\n `Publié le ${new Date(post.published_at).toLocaleString(\"fr-FR\")}\\n\\n` +\n `« ${post.content} »\\n\\n` +\n `Statistiques : ${post.likes_count} J'aime · ${post.replies_count} réponses · ${post.reposts_count} republications · ${\n post.views_count || 0\n } vues` +\n commentsText;\n\n const imageParts: any[] = [];\n for (const m of media) {\n if (imageParts.length >= MAX_CONTEXT_IMAGES) break;\n const url = String(m.url || \"\");\n const isImage = String(m.media_type || \"\").startsWith(\"image\") ||\n /\\.(png|jpe?g|webp|gif)(\\?|$)/i.test(url);\n if (!url || !isImage) continue;\n try {\n const res = await fetch(url);\n if (!res.ok) continue;\n const buf = await res.arrayBuffer();\n if (buf.byteLength === 0 || buf.byteLength > MAX_CONTEXT_IMAGE_BYTES) {\n continue;\n }\n const contentType = res.headers.get(\"content-type\") || \"image/jpeg\";\n imageParts.push({\n type: \"image_url\",\n image_url: {\n url: `data:${contentType};base64,${\n bytesToBase64(new Uint8Array(buf))\n }`,\n },\n });\n } catch {}\n }\n\n return { text, imageParts };\n } catch (err) {\n console.warn(\"[mAI Chat] buildPostContext:\", (err as any)?.message);\n return null;\n }\n}\n\n/** Clé OpenRouter : variable d'environnement, sinon clé personnelle de l'utilisateur. */\nexport async function getOpenRouterKey(\n sql: any,\n userId: number,\n): Promise<string> {\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `.catch(() => []);\n return (\n (typeof (globalThis as any).Deno !== \"undefined\" &&\n (globalThis as any).Deno.env?.get(\"OPENROUTER_API_KEY\")) ||\n (typeof process !== \"undefined\" && process.env?.OPENROUTER_API_KEY) ||\n (keyRows.length > 0 ? keyRows[0].api_key : \"\")\n );\n}\n\n// ── Persistance des conversations mAI (tables migration 002, créées\n// idempotemment au démarrage : le migrateur n'exécute pas les SQL) ──\nlet maiTablesReady = false;\nexport async function ensureMAIConversations() {\n if (maiTablesReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS mai_conversations (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n title VARCHAR(255) DEFAULT 'Nouvelle discussion mAI',\n model_id VARCHAR(100) DEFAULT 'mai-1.5-apex',\n system_prompt TEXT,\n is_pinned BOOLEAN DEFAULT FALSE,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n updated_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS mai_messages (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n conversation_id UUID NOT NULL REFERENCES mai_conversations(id) ON DELETE CASCADE,\n sender_role VARCHAR(20) NOT NULL,\n content TEXT,\n tool_calls JSONB,\n tool_call_id VARCHAR(100),\n tokens_input INTEGER DEFAULT 0,\n tokens_output INTEGER DEFAULT 0,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n // Multi-conversations + chips d'outils : colonnes défensives et index\n await sql`ALTER TABLE mai_messages ADD COLUMN IF NOT EXISTS tool_calls JSONB`\n .catch(() => {});\n await sql`ALTER TABLE mai_messages ADD COLUMN IF NOT EXISTS tool_call_id VARCHAR(100)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_mai_messages_conv ON mai_messages(conversation_id, created_at DESC)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_mai_conversations_user ON mai_conversations(user_id, updated_at DESC)`\n .catch(() => {});\n maiTablesReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-mai] ensureMAIConversations skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Conversation active de l'utilisateur : la plus récente, créée au besoin. */\nexport async function getOrCreateConversation(sql: any, userId: number) {\n const existing = await sql`\n SELECT id FROM mai_conversations WHERE user_id = ${userId} ORDER BY updated_at DESC LIMIT 1\n `.catch(() => []);\n if (existing.length > 0) return existing[0].id as string;\n const created = await sql`\n INSERT INTO mai_conversations (user_id, title) VALUES (${userId}, 'Discussion mAI') RETURNING id\n `.catch(() => []);\n return created[0]?.id as string | undefined;\n}\n\n/** Conversation demandée par le client : validée propriétaire, ou signalée invalide. */\nexport async function resolveOwnedConversation(\n sql: any,\n userId: number,\n raw: unknown,\n): Promise<{ id: string | null; invalid: boolean }> {\n const rawId = typeof raw === \"string\" ? raw.trim() : \"\";\n if (!rawId) return { id: null, invalid: false };\n if (!UUID_RE.test(rawId)) return { id: null, invalid: true };\n const rows = await sql`\n SELECT id FROM mai_conversations WHERE id = ${rawId}::uuid AND user_id = ${userId} LIMIT 1\n `.catch(() => []);\n return rows.length > 0\n ? { id: String(rows[0].id), invalid: false }\n : { id: null, invalid: true };\n}\n\n/** Titre automatique depuis le premier message utilisateur (titre par défaut seulement). */\nexport async function maybeAutoTitleConversation(\n sql: any,\n conversationId: string,\n firstMessage: string,\n) {\n try {\n const rows =\n await sql`SELECT title FROM mai_conversations WHERE id = ${conversationId}::uuid LIMIT 1`;\n const current = String(rows[0]?.title || \"\").trim();\n if (\n current && current !== \"Discussion mAI\" &&\n current !== \"Nouvelle discussion mAI\"\n ) return;\n const plain = stripHtmlTags(String(firstMessage)).replace(/\\s+/g, \" \")\n .trim();\n if (!plain) return;\n const title = plain.length > 60 ? `${plain.slice(0, 57)}…` : plain;\n await sql`UPDATE mai_conversations SET title = ${title} WHERE id = ${conversationId}::uuid`;\n } catch {}\n}\n\n/** Insère un message mAI et met à jour l'horodatage de la conversation. */\nexport async function saveMAIMessage(\n sql: any,\n conversationId: string,\n role: \"user\" | \"assistant\",\n content: string,\n extra?: { toolCalls?: any[] | null; toolCallId?: string | null },\n) {\n try {\n const toolCallsJson = extra?.toolCalls && extra.toolCalls.length > 0\n ? JSON.stringify(extra.toolCalls)\n : null;\n const rows = await sql`\n INSERT INTO mai_messages (conversation_id, sender_role, content, tool_calls, tool_call_id)\n VALUES (${conversationId}::uuid, ${role}, ${content}, ${toolCallsJson}::jsonb, ${\n extra?.toolCallId || null\n })\n RETURNING id, created_at\n `;\n await sql`UPDATE mai_conversations SET updated_at = NOW() WHERE id = ${conversationId}::uuid`;\n return rows[0] || null;\n } catch (err) {\n console.warn(\"[vibe-mai] saveMAIMessage:\", (err as any)?.message);\n return null;\n }\n}\n\n/** Enregistre d'un appel d'outil (persisté dans mai_messages.tool_calls). */\nexport function makeToolCallRecord(opts: {\n name: string;\n args?: any;\n status:\n | \"executed\"\n | \"error\"\n | \"pending_approval\"\n | \"rejected\"\n | \"disabled\"\n | \"blocked\";\n result?: any;\n error?: string | null;\n model?: string | null;\n}) {\n return {\n id: globalThis.crypto?.randomUUID?.() ||\n `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,\n name: opts.name,\n args: opts.args || {},\n status: opts.status,\n result: opts.result ?? null,\n error: opts.error ?? null,\n model: opts.model ?? null,\n at: new Date().toISOString(),\n };\n}\n\n/**\n * Finalise le dernier message assistant portant un record `pending_approval`\n * pour cet outil (exécution ou refus) : met à jour contenu + tool_calls sans\n * insérer de doublon. Retourne l'id du message mis à jour, ou null.\n */\nexport async function finalizePendingToolMessage(\n sql: any,\n conversationId: string,\n toolName: string,\n patch: {\n status: string;\n result?: any;\n error?: string | null;\n reply: string;\n model?: string | null;\n },\n): Promise<{ id: string | null }> {\n try {\n const rows = await sql`\n SELECT id, tool_calls FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND sender_role = 'assistant' AND tool_calls IS NOT NULL\n ORDER BY created_at DESC LIMIT 12\n `;\n for (const row of rows as any[]) {\n const calls = Array.isArray(row.tool_calls) ? row.tool_calls : [];\n const idx = calls.findIndex((cc: any) =>\n cc && cc.name === toolName && cc.status === \"pending_approval\"\n );\n if (idx >= 0) {\n calls[idx] = {\n ...calls[idx],\n status: patch.status,\n result: patch.result ?? null,\n error: patch.error ?? null,\n model: patch.model ?? calls[idx].model ?? null,\n at: new Date().toISOString(),\n };\n await sql`\n UPDATE mai_messages SET content = ${patch.reply}, tool_calls = ${\n JSON.stringify(calls)\n }::jsonb\n WHERE id = ${row.id}::uuid\n `;\n return { id: String(row.id) };\n }\n }\n } catch (err) {\n console.warn(\n \"[vibe-mai] finalizePendingToolMessage:\",\n (err as any)?.message,\n );\n }\n return { id: null };\n}\n\n// Détection d'outils par commandes / ou mentions @\nexport function detectTool(\n cleanMsg: string,\n): { toolToRun: string; toolArgs: any } | null {\n const lower = cleanMsg.toLowerCase();\n if (\n lower.startsWith(\"/image\") || lower.startsWith(\"@image\") ||\n lower.startsWith(\"/draw\") || lower.startsWith(\"@draw\") ||\n lower.startsWith(\"@generate_image\") || lower.startsWith(\"génère une image\")\n ) {\n const prompt = cleanMsg.replace(\n /^([/@](image|draw|generate_image)|(génère|crée)\\s*(une image|l'image)?)\\s*:?\\s*/i,\n \"\",\n ).trim();\n return {\n toolToRun: \"generate_vibe_image\",\n toolArgs: {\n prompt: prompt || \"Création artistique numérique minimaliste\",\n },\n };\n }\n if (\n lower.startsWith(\"/search\") || lower.startsWith(\"@search\") ||\n lower.startsWith(\"/recherche\") || lower.startsWith(\"@recherche\") ||\n lower.startsWith(\"@web\")\n ) {\n const q = cleanMsg.replace(/^[/@](search|recherche|web)\\s*:?\\s*/i, \"\")\n .trim();\n return {\n toolToRun: \"search_web\",\n toolArgs: { query: q || \"Intelligence artificielle 2026\" },\n };\n }\n if (\n lower.startsWith(\"/fact_check\") || lower.startsWith(\"@fact_check\") ||\n lower.startsWith(\"/verifier\") || lower.startsWith(\"@verifier\")\n ) {\n const s = cleanMsg.replace(/^[/@](fact_check|verifier)\\s*:?\\s*/i, \"\")\n .trim();\n return { toolToRun: \"fact_check\", toolArgs: { statement: s || cleanMsg } };\n }\n if (\n lower.startsWith(\"/rewrite\") || lower.startsWith(\"@rewrite\") ||\n lower.startsWith(\"/reformuler\") || lower.startsWith(\"@reformuler\") ||\n lower.startsWith(\"@style\")\n ) {\n const words = cleanMsg.replace(\n /^[/@](rewrite|reformuler|style)\\s*:?\\s*/i,\n \"\",\n ).trim().split(/\\s+/);\n const style =\n [\"viral\", \"pro\", \"humour\", \"concis\", \"poétique\"].includes(\n words[0]?.toLowerCase(),\n )\n ? words.shift()\n : \"viral\";\n return {\n toolToRun: \"rewrite_post\",\n toolArgs: { text: words.join(\" \") || cleanMsg, style },\n };\n }\n if (\n lower.startsWith(\"/translate\") || lower.startsWith(\"@translate\") ||\n lower.startsWith(\"/traduire\") || lower.startsWith(\"@traduire\")\n ) {\n const words = cleanMsg.replace(/^[/@](translate|traduire)\\s*:?\\s*/i, \"\")\n .trim().split(/\\s+/);\n const lang = words[0] || \"anglais\";\n words.shift();\n return {\n toolToRun: \"translate\",\n toolArgs: { text: words.join(\" \") || cleanMsg, target_language: lang },\n };\n }\n if (\n lower.startsWith(\"/publish\") || lower.startsWith(\"@publish\") ||\n lower.startsWith(\"/publier\") || lower.startsWith(\"@publier\") ||\n lower.startsWith(\"@post\") || lower.startsWith(\"publie \")\n ) {\n const textMatch = cleanMsg.replace(\n /^([/@](publish|publier|post)|(publie|poste))\\s*:?\\s*/i,\n \"\",\n ).trim();\n return {\n toolToRun: \"create_post\",\n toolArgs: { content: textMatch || cleanMsg },\n };\n }\n if (\n lower.startsWith(\"/delete_post\") || lower.startsWith(\"@delete_post\") ||\n lower.startsWith(\"/supprimer\")\n ) {\n const raw = cleanMsg.replace(/^[/@](delete_post|supprimer)\\s*:?\\s*/i, \"\")\n .trim();\n const m = raw.match(\n /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n );\n if (m) return { toolToRun: \"delete_post\", toolArgs: { post_id: m[0] } };\n return null;\n }\n if (\n lower.startsWith(\"/find\") || lower.startsWith(\"@find\") ||\n lower.includes(\"cherche des posts\") || lower.includes(\"recherche des posts\")\n ) {\n const q = cleanMsg.replace(/^[/@]find\\s*:?\\s*/i, \"\").trim();\n return { toolToRun: \"search_posts\", toolArgs: { query: q || cleanMsg } };\n }\n if (\n lower.startsWith(\"/profile\") || lower.startsWith(\"@profile\") ||\n lower.includes(\"modifie mon profil\") || lower.includes(\"change ma bio\")\n ) {\n const raw = cleanMsg.replace(/^[/@]profile\\s*:?\\s*/i, \"\").trim();\n // Format : /profile display_name: X bio: Y (approbation requise côté chat)\n const dn = raw.match(/display_name\\s*:\\s*([^,;]+)/i);\n const bio = raw.match(/bio\\s*:\\s*([\\s\\S]+)/i);\n const args: Record<string, string> = {};\n if (dn) args.display_name = dn[1].trim();\n if (bio) args.bio = bio[1].trim();\n if (args.display_name || args.bio) {\n return { toolToRun: \"update_profile\", toolArgs: args };\n }\n return null;\n }\n if (\n lower.startsWith(\"/follow\") || lower.startsWith(\"@follow\") ||\n lower.startsWith(\"/suivre\") || lower.startsWith(\"@suivre\")\n ) {\n const target = cleanMsg.replace(/^[/@](follow|suivre)\\s*:?\\s*/i, \"\").trim()\n .replace(/^@/, \"\");\n if (target) {\n return { toolToRun: \"follow_user\", toolArgs: { username: target } };\n }\n }\n if (\n lower.startsWith(\"/trends\") || lower.startsWith(\"@trends\") ||\n lower.startsWith(\"/tendances\") || lower.startsWith(\"@tendances\")\n ) {\n return { toolToRun: \"analyze_trends\", toolArgs: {} };\n }\n // ── Outils d'analyse avancée ─────────────────────────────────────────────\n // Blocs placés AVANT /dm et /analyze : leurs préfixes (/dmstats, /analyze_stats)\n // commencent par /dm et /analyze et seraient capturés par les blocs plus bas.\n if (\n lower.startsWith(\"/analyze_stats\") || lower.startsWith(\"@analyze_stats\") ||\n lower.includes(\"analyse mes stats\") ||\n lower.includes(\"mes statistiques créateur\")\n ) {\n return {\n toolToRun: \"analyze_creator_stats\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/audience\") || lower.startsWith(\"@audience\") ||\n lower.includes(\"mon audience\") || lower.includes(\"qui me regarde\")\n ) {\n return {\n toolToRun: \"analyze_audience\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/besttime\") || lower.startsWith(\"@besttime\") ||\n lower.includes(\"meilleur moment\") || lower.includes(\"quand publier\")\n ) {\n return {\n toolToRun: \"best_time_to_post\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/compare\") || lower.startsWith(\"@compare\") ||\n lower.includes(\"compare mes\") || lower.includes(\"vs la période\")\n ) {\n return {\n toolToRun: \"compare_periods\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/predict\") || lower.startsWith(\"@predict\") ||\n lower.includes(\"prédis\") || lower.includes(\"prévision\")\n ) {\n const content = cleanMsg.replace(/^[/@]predict\\s*:?\\s*/i, \"\").trim();\n return {\n toolToRun: \"predict_post_performance\",\n toolArgs: { content: content || cleanMsg },\n };\n }\n if (\n lower.startsWith(\"/formats\") || lower.startsWith(\"@formats\") ||\n lower.includes(\"mes formats\") || lower.includes(\"performance par format\")\n ) {\n return {\n toolToRun: \"analyze_content_performance\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/dmstats\") || lower.startsWith(\"@dmstats\") ||\n lower.includes(\"activité de messagerie\")\n ) {\n return {\n toolToRun: \"analyze_dm_activity\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/bookstats\") || lower.startsWith(\"@bookstats\") ||\n lower.includes(\"stats de mes livres\")\n ) {\n return {\n toolToRun: \"analyze_book_stats\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/hashtags\") || lower.startsWith(\"@hashtags\") ||\n lower.includes(\"mes hashtags\")\n ) {\n return {\n toolToRun: \"analyze_hashtags\",\n toolArgs: { period: parsePeriodArg(cleanMsg) },\n };\n }\n if (\n lower.startsWith(\"/inspire\") || lower.startsWith(\"@inspire\") ||\n lower.startsWith(\"/idee\") || lower.startsWith(\"@idee\") ||\n lower.startsWith(\"/idée\")\n ) {\n const topic = cleanMsg.replace(\n /^[/@](inspire|idee|idée)(-?moi)?\\s*(sur|à propos de|about)?\\s*:?\\s*/i,\n \"\",\n ).trim();\n return {\n toolToRun: \"suggest_post\",\n toolArgs: { topic: topic || \"sujets d'actualité\", style: \"viral\" },\n };\n }\n if (\n lower.startsWith(\"/stats\") || lower.startsWith(\"@stats\") ||\n lower.startsWith(\"/compte\") || lower.startsWith(\"@compte\") ||\n lower.includes(\"mes stats\") || lower.includes(\"mon compte\")\n ) {\n return { toolToRun: \"get_account_stats\", toolArgs: {} };\n }\n if (\n lower.startsWith(\"/quotas\") || lower.startsWith(\"@quotas\") ||\n lower.startsWith(\"/limites\") || lower.includes(\"mes quotas\") ||\n lower.includes(\"mes limites\")\n ) {\n return { toolToRun: \"check_quotas\", toolArgs: {} };\n }\n if (\n lower.startsWith(\"/notifications\") || lower.startsWith(\"@notifications\") ||\n lower.startsWith(\"/notifs\") || lower.startsWith(\"@notifs\")\n ) {\n return { toolToRun: \"get_notifications\", toolArgs: {} };\n }\n if (\n lower.startsWith(\"/like\") || lower.startsWith(\"@like\") ||\n lower.startsWith(\"/liker\") || lower.startsWith(\"@liker\") ||\n lower.startsWith(\"/unlike\") || lower.startsWith(\"@unlike\")\n ) {\n const isUnlike = lower.startsWith(\"/unlike\") || lower.startsWith(\"@unlike\");\n const raw = cleanMsg.replace(/^[/@](like|liker|unlike)\\s*:?\\s*/i, \"\")\n .trim();\n const m = raw.match(\n /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n );\n if (m) {\n return {\n toolToRun: \"like_post\",\n toolArgs: { post_id: m[0], like: !isUnlike },\n };\n }\n if (raw) {\n return {\n toolToRun: \"like_post\",\n toolArgs: { post_id: raw.split(/\\s+/)[0], like: !isUnlike },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/dm\") || lower.startsWith(\"@dm\") ||\n lower.startsWith(\"/message\") || lower.startsWith(\"@message\") ||\n lower.startsWith(\"/envoyer\")\n ) {\n const raw = cleanMsg.replace(/^[/@](dm|message|envoyer)\\s*:?\\s*/i, \"\")\n .trim();\n const um = raw.match(/^@?([a-z0-9_]{1,30})\\s+([\\s\\S]+)/i);\n if (um) {\n return {\n toolToRun: \"send_message\",\n toolArgs: { username: um[1], content: um[2].trim() },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/settings\") || lower.startsWith(\"@settings\") ||\n lower.startsWith(\"/parametres\") || lower.startsWith(\"@parametres\") ||\n lower.startsWith(\"/paramètres\") || lower.startsWith(\"/reglage\")\n ) {\n const raw = cleanMsg.replace(\n /^[/@](settings|parametres|paramètres|reglage|reglages)\\s*:?\\s*/i,\n \"\",\n ).trim();\n // Format simple : /settings theme dark /settings langue fr /settings fil trending\n const parts = raw.split(/\\s+/);\n const key = (parts[0] || \"\").toLowerCase();\n const valRaw = parts.slice(1).join(\" \").trim();\n const map: Record<string, string> = {\n theme: \"theme_preference\",\n dark: \"dark\",\n light: \"light\",\n langue: \"ui_language\",\n lang: \"ui_language\",\n fil: \"feed_default_mode\",\n mode: \"feed_default_mode\",\n };\n if (map[key]) {\n const field = map[key];\n let v: any = valRaw;\n if (\n field === \"theme_preference\" &&\n [\"dark\", \"light\", \"auto\"].includes(valRaw.toLowerCase())\n ) v = valRaw.toLowerCase();\n else if (\n field === \"feed_default_mode\" &&\n [\"for_you\", \"following\", \"trending\"].includes(valRaw.toLowerCase())\n ) v = valRaw.toLowerCase();\n if (v) return { toolToRun: \"update_settings\", toolArgs: { [field]: v } };\n }\n if (\n raw.toLowerCase().includes(\"auto_approve\") ||\n raw.toLowerCase().includes(\"approbation\")\n ) {\n const on = /on|oui|true|activer/i.test(raw);\n return {\n toolToRun: \"update_settings\",\n toolArgs: { mai_auto_approve_tools: on },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/bookmark\") || lower.startsWith(\"@bookmark\") ||\n lower.startsWith(\"/favori\") || lower.startsWith(\"@favori\") ||\n lower.startsWith(\"/save\")\n ) {\n const raw = cleanMsg.replace(\n /^[/@](bookmark|favori|favoris|save)\\s*:?\\s*/i,\n \"\",\n ).trim();\n const m = raw.match(\n /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n );\n if (m) return { toolToRun: \"bookmark_post\", toolArgs: { post_id: m[0] } };\n if (raw) {\n return {\n toolToRun: \"bookmark_post\",\n toolArgs: { post_id: raw.split(/\\s+/)[0] },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/repost\") || lower.startsWith(\"@repost\") ||\n lower.startsWith(\"/republier\")\n ) {\n const raw = cleanMsg.replace(/^[/@](repost|republier)\\s*:?\\s*/i, \"\").trim();\n const m = raw.match(\n /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n );\n if (m) return { toolToRun: \"repost_post\", toolArgs: { post_id: m[0] } };\n if (raw) {\n return {\n toolToRun: \"repost_post\",\n toolArgs: { post_id: raw.split(/\\s+/)[0] },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/comment\") || lower.startsWith(\"@comment\") ||\n lower.startsWith(\"/commenter\") || lower.startsWith(\"/reply\")\n ) {\n const raw = cleanMsg.replace(\n /^[/@](comment|commenter|commentaire|reply)\\s*:?\\s*/i,\n \"\",\n ).trim();\n const m = raw.match(\n /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\\s+([\\s\\S]+)/i,\n );\n if (m) {\n return {\n toolToRun: \"comment_post\",\n toolArgs: { post_id: m[1], content: m[2].trim() },\n };\n }\n return null;\n }\n if (\n lower.startsWith(\"/analyze\") || lower.startsWith(\"@analyze\") ||\n lower.startsWith(\"/analyse\") || lower.startsWith(\"/poststats\") ||\n lower.startsWith(\"/vues\")\n ) {\n const m = cleanMsg.match(\n /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n );\n if (m) return { toolToRun: \"get_post_stats\", toolArgs: { post_id: m[0] } };\n return null;\n }\n return null;\n}\n\nexport async function getUserAutoApprove(\n sql: any,\n userId: number,\n): Promise<boolean> {\n try {\n const rows =\n await sql`SELECT mai_auto_approve_tools FROM user_settings WHERE user_id = ${userId} LIMIT 1`;\n return Boolean(rows[0]?.mai_auto_approve_tools);\n } catch {\n return false;\n }\n}",[514],"bb041852-ee96-4afa-9b81-070cee4aab3d","vibe-mai-conversations.ts","7c2ad5d0-af88-11f1-b40c-1607ee4eb77e",349,["D",1789313630313],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI : CONVERSATIONS (vibe-mai-conversations.ts)\n * Historique persisté, nouvelle discussion, liste, renommage, suppression et\n * duplication des conversations mAI. Scindé de vibe-mai.ts (limite de taille\n * Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { stripHtmlTags } from \"./vibe-posts-core.ts\";\nimport {\n ensureMAIConversations,\n getOrCreateConversation,\n resolveOwnedConversation,\n UUID_RE,\n} from \"./vibe-mai-core.ts\";\n\nexport function registerVibeMAIConversationRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1ter. HISTORIQUE DE LA CONVERSATION mAI (persistance serveur, multi-conversations)\n const handleMAIHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const requested = c.req.query(\"conversation_id\") || \"\";\n const limit = Math.min(\n 1000,\n Math.max(1, Number(c.req.query(\"limit\") || 50)),\n );\n const offset = Math.max(0, Number(c.req.query(\"offset\") || 0));\n\n const sql = getDb();\n await ensureMAIConversations();\n const conv = await resolveOwnedConversation(sql, userId, requested);\n if (conv.invalid) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const conversationId = conv.id ||\n await getOrCreateConversation(sql, userId);\n if (!conversationId) {\n return c.json({ conversation_id: null, messages: [], has_more: false });\n }\n\n const rows = await sql`\n SELECT id, sender_role, content, tool_calls, created_at FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND content IS NOT NULL\n ORDER BY created_at DESC\n LIMIT ${limit} OFFSET ${offset}\n `.catch(() => []);\n\n const messages = rows\n .filter((r: any) => String(r.content || \"\").trim())\n .reverse()\n .map((r: any) => ({\n id: String(r.id),\n role: r.sender_role === \"assistant\" ? \"assistant\" : \"user\",\n content: String(r.content),\n tool_calls: Array.isArray(r.tool_calls) ? r.tool_calls : [],\n created_at: r.created_at,\n }));\n\n return c.json({\n conversation_id: conversationId,\n messages,\n has_more: rows.length === limit,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI History Error:\", err);\n return c.json({ conversation_id: null, messages: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/mai/history\",\n \"/vibe/mai/history\",\n \"/v1/mai/history\",\n ], handleMAIHistory);\n\n // 1quater. NOUVELLE CONVERSATION mAI\n const handleMAINewConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n await ensureMAIConversations();\n const created = await sql`\n INSERT INTO mai_conversations (user_id, title) VALUES (${userId}, 'Discussion mAI') RETURNING id\n `;\n return c.json({ success: true, conversation_id: created[0]?.id || null });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI New Conversation Error:\", err);\n return c.json({ error: \"Erreur création conversation.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/mai/history/new\",\n \"/vibe/mai/history/new\",\n \"/v1/mai/history/new\",\n ], handleMAINewConversation);\n\n // 1quater-bis. LISTE DES CONVERSATIONS mAI (multi-conversations, page Studio)\n const handleMAIConversationsList = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const sql = getDb();\n await ensureMAIConversations();\n const rows = await sql`\n SELECT c.id, c.title, c.model_id, c.is_pinned, c.created_at, c.updated_at,\n (SELECT COUNT(*)::int FROM mai_messages m WHERE m.conversation_id = c.id) AS message_count,\n (SELECT m2.content FROM mai_messages m2\n WHERE m2.conversation_id = c.id AND m2.content IS NOT NULL\n ORDER BY m2.created_at DESC LIMIT 1) AS last_message\n FROM mai_conversations c\n WHERE c.user_id = ${userId}\n ORDER BY c.updated_at DESC NULLS LAST\n LIMIT 100\n `.catch(() => []);\n return c.json({\n success: true,\n conversations: (rows as any[]).map((r) => ({\n id: String(r.id),\n title: String(r.title || \"Discussion mAI\"),\n is_pinned: Boolean(r.is_pinned),\n created_at: r.created_at,\n updated_at: r.updated_at,\n message_count: Number(r.message_count || 0),\n preview: stripHtmlTags(String(r.last_message || \"\")).replace(\n /\\s+/g,\n \" \",\n ).trim().slice(0, 120),\n })),\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Conversations List Error:\", err);\n return c.json({ error: \"Erreur conversations mAI.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/mai/conversations\",\n \"/vibe/mai/conversations\",\n \"/v1/mai/conversations\",\n ], handleMAIConversationsList);\n\n // Création via la même route que « Nouvelle discussion »\n registerMulti(\"post\", [\n \"/api/vibe/mai/conversations\",\n \"/vibe/mai/conversations\",\n \"/v1/mai/conversations\",\n ], handleMAINewConversation);\n\n // 1quater-ter. RENOMMER UNE CONVERSATION mAI\n const handleMAIRenameConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const id = String(c.req.param(\"conversationId\") || \"\");\n if (!UUID_RE.test(id)) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const body = await c.req.json().catch(() => ({} as any));\n const clean = String(body?.title || \"\").replace(/\\s+/g, \" \").trim().slice(\n 0,\n 120,\n );\n if (!clean) return c.json({ error: \"Titre requis.\" }, 400);\n\n const sql = getDb();\n await ensureMAIConversations();\n const updated = await sql`\n UPDATE mai_conversations SET title = ${clean}\n WHERE id = ${id}::uuid AND user_id = ${userId}\n RETURNING id, title\n `.catch(() => []);\n if (updated.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n return c.json({\n success: true,\n conversation: {\n id: String(updated[0].id),\n title: String(updated[0].title),\n },\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Rename Conversation Error:\", err);\n return c.json({ error: \"Erreur renommage conversation.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/mai/conversations/:conversationId/rename\",\n \"/vibe/mai/conversations/:conversationId/rename\",\n \"/v1/mai/conversations/:conversationId/rename\",\n ], handleMAIRenameConversation);\n\n // 1quater-quater. SUPPRIMER UNE CONVERSATION mAI (messages en cascade)\n const handleMAIDeleteConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const id = String(c.req.param(\"conversationId\") || \"\");\n if (!UUID_RE.test(id)) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n\n const sql = getDb();\n await ensureMAIConversations();\n const deleted = await sql`\n DELETE FROM mai_conversations WHERE id = ${id}::uuid AND user_id = ${userId} RETURNING id\n `.catch(() => []);\n if (deleted.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n return c.json({ success: true, deleted: String(deleted[0].id) });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Delete Conversation Error:\", err);\n return c.json({ error: \"Erreur suppression conversation.\" }, 500);\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/mai/conversations/:conversationId\",\n \"/vibe/mai/conversations/:conversationId\",\n \"/v1/mai/conversations/:conversationId\",\n ], handleMAIDeleteConversation);\n\n // 1quater-quinquies. DUPLIQUER UNE CONVERSATION mAI (messages copiés)\n const handleMAIDuplicateConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const id = String(c.req.param(\"conversationId\") || \"\");\n if (!UUID_RE.test(id)) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n\n const sql = getDb();\n await ensureMAIConversations();\n const src = await sql`\n SELECT title, model_id, system_prompt FROM mai_conversations\n WHERE id = ${id}::uuid AND user_id = ${userId} LIMIT 1\n `.catch(() => []);\n if (src.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n\n const baseTitle = String(src[0].title || \"Discussion mAI\").slice(0, 100);\n const created = await sql`\n INSERT INTO mai_conversations (user_id, title, model_id, system_prompt)\n VALUES (${userId}, ${`${baseTitle} (copie)`}, ${\n src[0].model_id || null\n }, ${src[0].system_prompt || null})\n RETURNING id\n `;\n const newId = String(created[0].id);\n await sql`\n INSERT INTO mai_messages (conversation_id, sender_role, content, tool_calls, created_at)\n SELECT ${newId}::uuid, sender_role, content, tool_calls, created_at\n FROM mai_messages WHERE conversation_id = ${id}::uuid ORDER BY created_at ASC\n `.catch(() => {});\n return c.json({ success: true, conversation_id: newId });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Duplicate Conversation Error:\", err);\n return c.json({ error: \"Erreur duplication conversation.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/mai/conversations/:conversationId/duplicate\",\n \"/vibe/mai/conversations/:conversationId/duplicate\",\n \"/v1/mai/conversations/:conversationId/duplicate\",\n ], handleMAIDuplicateConversation);\n}",[521],"99a5c4e7-3174-4e0e-bc6c-44701494f2f0","vibe-mai-chat.ts","87f216e4-af88-11f1-a071-1607ee4eb77e",352,["D",1789313654225],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — mAI : CHAT (vibe-mai-chat.ts)\n * Réponse mAI en commentaire (/mai) et endpoint de conversation mAI avec\n * détection d'outils, contexte de post joint (vision), contexte personnel\n * opt-in et flux d'approbation. Scindé de vibe-mai.ts (limite de taille\n * Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, getWeekData, verifyToken } from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { MAIAgentFleet, SENSITIVE_TOOLS } from \"./vibe-mai-fleet.ts\";\nimport { isToolEnabledForUser, TOOL_EXECUTORS } from \"./vibe-tools.ts\";\nimport {\n buildPostContext,\n detectTool,\n ensureMAIConversations,\n formatToolReply,\n getOpenRouterKey,\n getOrCreateConversation,\n getUserAutoApprove,\n makeToolCallRecord,\n maybeAutoTitleConversation,\n resolveOwnedConversation,\n saveMAIMessage,\n VISION_CAPABLE_MODELS,\n} from \"./vibe-mai-core.ts\";\n\n/**\n * Réponse mAI à la commande /mai en commentaire : génération à partir du\n * contenu de la publication uniquement (sans historique de conversation),\n * modèle léger laguna, quota hebdomadaire débité de 250 tokens.\n */\nexport async function generateMAICommentAnswer(\n sql: any,\n opts: { postId: string; question: string; requesterId: number },\n): Promise<string | null> {\n try {\n const context = await buildPostContext(sql, opts.postId);\n if (!context) return null;\n\n const openRouterApiKey = await getOpenRouterKey(sql, opts.requesterId);\n if (!openRouterApiKey) return null;\n\n const systemContent =\n \"Tu es mAI, l'intelligence artificielle intégrée au réseau social Vibe. \" +\n \"Réponds en français, en un commentaire concis et utile (500 caractères maximum), \" +\n \"uniquement à partir du contenu de la publication fournie (texte, statistiques, commentaires). \" +\n \"Si l'information demandée ne s'y trouve pas, dis-le clairement. Pas de mise en forme lourde, un ou deux émojis maximum.\";\n\n const userText = `${opts.question}\\n\\n${context.text}`;\n\n let answer: string | null = null;\n for (\n const candidate of [\n \"poolside/laguna-xs-2.1:free\",\n \"nvidia/nemotron-3.5-lightning:free\",\n ]\n ) {\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 20000);\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: candidate,\n messages: [\n { role: \"system\", content: systemContent },\n { role: \"user\", content: userText },\n ],\n }),\n signal: controller.signal,\n },\n );\n if (aiRes.ok) {\n const aiData = await aiRes.json();\n const textOutput = aiData.choices?.[0]?.message?.content;\n if (textOutput && textOutput.trim()) {\n answer = textOutput.trim();\n break;\n }\n }\n } finally {\n clearTimeout(timeout);\n }\n } catch (e) {\n console.warn(\n `[mAI /mai] Erreur sur ${candidate}, essai du suivant...`,\n e,\n );\n }\n }\n if (!answer) return null;\n\n // Débit quota (parité avec le chat mAI)\n try {\n const { weekStartStr } = getWeekData();\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${opts.requesterId}, ${weekStartStr}::date, 250)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 250\n `;\n } catch {}\n\n return answer.slice(0, 800);\n } catch (err) {\n console.warn(\"[mAI /mai] generateMAICommentAnswer:\", (err as any)?.message);\n return null;\n }\n}\n\nexport function registerVibeMAIChatRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1. mAI CHAT & TOOL EXECUTION\n const handleMAIChat = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const { message, execute_tool, model, context, conversation_id } = await c\n .req.json();\n if (!message || !message.trim()) {\n return c.json({ error: \"Message requis.\" }, 400);\n }\n\n // Modèle demandé par le client (sélecteur mAI), sinon réglage utilisateur\n const effectiveModel = model ||\n (await MAIAgentFleet.getUserDefaultModel(userId));\n\n const sql = getDb();\n const userRows =\n await sql`SELECT username, tier FROM users WHERE id = ${userId} LIMIT 1`;\n const username = userRows[0]?.username || \"Ami\";\n\n // ── Conversation persistée : contexte complet pour chaque message ──\n await ensureMAIConversations();\n const requestedConv = await resolveOwnedConversation(\n sql,\n userId,\n conversation_id,\n );\n if (requestedConv.invalid) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const conversationId = requestedConv.id ||\n await getOrCreateConversation(sql, userId);\n let savedUser: any = null;\n if (conversationId) {\n savedUser = await saveMAIMessage(\n sql,\n conversationId,\n \"user\",\n String(message).trim(),\n );\n // Titre automatique de la conversation au premier message utilisateur\n try {\n const cnt = await sql`\n SELECT COUNT(*) AS n FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid AND sender_role = 'user'\n `;\n if (Number(cnt[0]?.n || 0) === 1) {\n await maybeAutoTitleConversation(\n sql,\n conversationId,\n String(message),\n );\n }\n } catch {}\n }\n // Historique récent (20 derniers échanges, sans le message courant)\n let historyMessages: Array<\n { role: \"user\" | \"assistant\"; content: string }\n > = [];\n if (conversationId) {\n try {\n const historyRows = await sql`\n SELECT sender_role, content FROM mai_messages\n WHERE conversation_id = ${conversationId}::uuid\n ORDER BY created_at DESC\n LIMIT 21\n `;\n historyMessages = historyRows\n .filter((r: any) => r.content && String(r.content).trim())\n .slice(1) // le message courant vient d'être inséré\n .reverse()\n .map((r: any) => ({\n role: r.sender_role === \"assistant\" ? \"assistant\" : \"user\",\n content: String(r.content).slice(0, 4000),\n }));\n } catch (historyErr) {\n console.warn(\"[vibe-mai] Historique non chargé:\", historyErr);\n }\n }\n\n // Post mentionné : contenu + stats + premiers commentaires + médias (fichiers)\n let postContextBlock = \"\";\n let postImageParts: any[] = [];\n if (context?.post_id) {\n const postCtx = await buildPostContext(sql, String(context.post_id));\n if (postCtx) {\n postContextBlock = `\\n\\n---\\n${postCtx.text}`;\n postImageParts = postCtx.imageParts;\n }\n }\n\n // Personnalisation du contexte (opt-in granulaire via user_settings)\n let personalContextBlock = \"\";\n try {\n const ctxRows =\n await sql`SELECT mai_context_posts, mai_context_dms, mai_context_books FROM user_settings WHERE user_id = ${userId} LIMIT 1`\n .catch(() => []);\n const flags = ctxRows[0] || {};\n const trunc = (s: any, n: number) =>\n String(s || \"\").replace(/\\s+/g, \" \").trim().slice(0, n);\n if (flags.mai_context_posts) {\n const recentPosts = await sql`\n SELECT content, published_at FROM posts\n WHERE author_id = ${userId} AND COALESCE(status, 'published') = 'published'\n ORDER BY published_at DESC LIMIT 20\n `.catch(() => []);\n if (recentPosts.length > 0) {\n const list = recentPosts.map((p: any, i: number) =>\n `${i + 1}. « ${trunc(p.content, 500)} »`\n ).join(\"\\n\");\n personalContextBlock +=\n `\\n\\nContexte : voici les publications récentes de l'utilisateur :\\n${list}`;\n }\n }\n if (flags.mai_context_dms) {\n console.warn(\n `[vibe-mai] Contexte DM inclus pour user ${userId} (opt-in mai_context_dms=TRUE) — données confidentielles.`,\n );\n const recentDMs = await sql`\n SELECT content, created_at FROM direct_messages\n WHERE (sender_id = ${userId} OR recipient_id = ${userId})\n AND (status IS NULL OR status = 'sent')\n ORDER BY created_at DESC LIMIT 10\n `.catch(() => []);\n if (recentDMs.length > 0) {\n const excerpt = recentDMs.map((m: any) =>\n `— « ${trunc(m.content, 200)} »`\n ).join(\"\\n\").slice(0, 2000);\n personalContextBlock +=\n `\\n\\nContexte : extraits récents des messages privés de l'utilisateur (confidentiel, ne pas citer verbatim) :\\n${excerpt}`;\n }\n }\n if (flags.mai_context_books) {\n const books =\n await sql`SELECT id, title FROM vibe_books WHERE user_id = ${userId} ORDER BY created_at ASC LIMIT 10`\n .catch(() => []);\n if (books.length > 0) {\n const titles = books.map((b: any) => `— ${trunc(b.title, 80)}`)\n .join(\"\\n\");\n personalContextBlock +=\n `\\n\\nContexte : Vibe Books de l'utilisateur :\\n${titles}`;\n try {\n const bookIds = books.map((b: any) => b.id);\n const items = await sql`\n SELECT bi.book_id, p.content FROM vibe_book_items bi\n JOIN posts p ON p.id = bi.post_id\n WHERE bi.book_id = ANY(${bookIds}::uuid[])\n LIMIT 20\n `.catch(() => []);\n if (items.length > 0) {\n const itemList = items.map((it: any) =>\n `— « ${trunc(it.content, 200)} »`\n ).join(\"\\n\").slice(0, 2000);\n personalContextBlock +=\n `\\nPublications épinglées dans ces livres :\\n${itemList}`;\n }\n } catch {}\n }\n }\n } catch (ctxErr) {\n console.warn(\n \"[vibe-mai] Contexte personnalisé ignoré:\",\n (ctxErr as any)?.message,\n );\n }\n\n let toolToRun: string | null = execute_tool?.name || null;\n let toolArgs: any = execute_tool?.args || {};\n\n if (!toolToRun) {\n const detected = detectTool(message.trim());\n if (detected) {\n toolToRun = detected.toolToRun;\n toolArgs = detected.toolArgs;\n }\n }\n\n // ── Filtre des outils activés par l'utilisateur (Paramètres → Outils mAI) ──\n // Un outil désactivé n'est ni détecté ni exécutable pour cet utilisateur.\n if (toolToRun && !(await isToolEnabledForUser(userId, toolToRun))) {\n const reply =\n `🚫 L'outil « ${toolToRun} » est désactivé dans vos Paramètres → Outils mAI. Activez-le pour l'utiliser.`;\n const record = makeToolCallRecord({\n name: toolToRun,\n args: toolArgs,\n status: \"disabled\",\n model: effectiveModel,\n });\n let savedAssistant: any = null;\n if (conversationId) {\n savedAssistant = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: [record] },\n );\n }\n return c.json({\n reply,\n toolExecuted: null,\n toolCalls: [record],\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n user_message_id: savedUser?.id || null,\n assistant_message_id: savedAssistant?.id || null,\n });\n }\n\n // ── Flux d'approbation utilisateur ──────────────────────────────\n // Un outil sensible n'est exécuté que si l'utilisateur l'approuve,\n // sauf si `mai_auto_approve_tools` est activé dans ses paramètres.\n if (toolToRun && SENSITIVE_TOOLS.includes(toolToRun)) {\n const autoApprove = await getUserAutoApprove(sql, userId);\n if (!autoApprove) {\n const reply =\n `🔐 **Approbation requise** : mAI souhaite exécuter l'outil « ${toolToRun} » sur votre compte. Confirmez ou refusez dans le panneau ci-dessus.`;\n const record = makeToolCallRecord({\n name: toolToRun,\n args: toolArgs,\n status: \"pending_approval\",\n model: effectiveModel,\n });\n let savedAssistant: any = null;\n if (conversationId) {\n savedAssistant = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: [record] },\n );\n }\n return c.json({\n reply,\n requiresApproval: true,\n pendingTool: { name: toolToRun, args: toolArgs },\n toolExecuted: null,\n toolCalls: [record],\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n user_message_id: savedUser?.id || null,\n assistant_message_id: savedAssistant?.id || null,\n });\n }\n }\n\n let toolResult: any = null;\n if (toolToRun) {\n // Registre vibe-tools d'abord (couvre les outils sans case dans la flotte,\n // ex. analyze_creator_stats), flotte en repli.\n const executor = TOOL_EXECUTORS[toolToRun];\n toolResult = executor\n ? await executor(userId, toolArgs)\n : await MAIAgentFleet.executeTool(toolToRun, toolArgs, userId);\n }\n\n const { weekStartStr } = getWeekData();\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, 250)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 250\n `.catch(() => {});\n\n let reply =\n `Bonjour @${username} ! Je suis mAI. Comment puis-je vous aider ?`;\n\n if (!toolToRun) {\n const openRouterApiKey = await getOpenRouterKey(sql, userId);\n\n const resolveModel = (m: string) => {\n if (\n !m || m === \"default\" || m === \"mai-1.5-light\" ||\n m === \"openrouter/free\"\n ) return \"poolside/laguna-xs-2.1:free\";\n if (m === \"mai-1.5-apex\") return \"openai/gpt-4o\";\n return m;\n };\n\n const hasImages = postImageParts.length > 0;\n let primaryModel = resolveModel(effectiveModel);\n // Images jointes → forcer un modèle vision si le modèle choisi ne l'est pas\n if (hasImages && !VISION_CAPABLE_MODELS.has(primaryModel)) {\n primaryModel = \"openai/gpt-4o\";\n }\n const modelsToTry = [primaryModel];\n if (hasImages) {\n if (!modelsToTry.includes(\"google/gemini-2.5-flash\")) {\n modelsToTry.push(\"google/gemini-2.5-flash\");\n }\n } else {\n if (!modelsToTry.includes(\"poolside/laguna-xs-2.1:free\")) {\n modelsToTry.push(\"poolside/laguna-xs-2.1:free\");\n }\n if (!modelsToTry.includes(\"nvidia/nemotron-3.5-lightning:free\")) {\n modelsToTry.push(\"nvidia/nemotron-3.5-lightning:free\");\n }\n }\n\n const userText =\n `${message.trim()}${postContextBlock}${personalContextBlock}`;\n const userContent: any = hasImages\n ? [{ type: \"text\", text: userText }, ...postImageParts]\n : userText;\n const systemContent =\n \"Tu es mAI, l'intelligence artificielle intégrée au réseau social Vibe. Tu es concis, créatif, pertinent et tu réponds en français avec des émojis.\" +\n \" Tu connais l'historique de la conversation en cours : apporte ta réponse en continuité naturelle avec les échanges précédents, sans redemander des informations déjà données.\" +\n (hasImages\n ? \" Des images sont jointes à la publication mentionnée : analyse-les directement.\"\n : \"\") +\n (postContextBlock\n ? \" Une publication Vibe est jointe à la fin du message : base ta réponse sur son contenu, ses statistiques et ses commentaires.\"\n : \"\");\n\n if (openRouterApiKey) {\n for (const candidate of modelsToTry) {\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: candidate,\n messages: [\n {\n role: \"system\",\n content: systemContent,\n },\n ...historyMessages,\n { role: \"user\", content: userContent },\n ],\n }),\n },\n );\n\n if (aiRes.ok) {\n const aiData = await aiRes.json();\n const textOutput = aiData.choices?.[0]?.message?.content;\n if (textOutput && textOutput.trim()) {\n reply = textOutput.trim();\n break;\n }\n }\n } catch (e) {\n console.warn(\n `[mAI Chat] Erreur sur ${candidate}, essai du suivant...`,\n e,\n );\n }\n }\n }\n } else if (toolResult && toolResult.success) {\n reply = formatToolReply(toolToRun, toolResult.result, username);\n } else if (toolResult && !toolResult.success) {\n reply = `⚠️ L'action n'a pas pu être exécutée : ${toolResult.error}`;\n }\n\n // Persistance de la réponse mAI (avec les outils utilisés — chips du chat)\n const toolCallRecords = toolToRun\n ? [makeToolCallRecord({\n name: toolToRun,\n args: toolArgs,\n status: toolResult?.success ? \"executed\" : \"error\",\n result: toolResult,\n error: toolResult && !toolResult.success\n ? (toolResult.error || \"Erreur d'exécution\")\n : null,\n model: effectiveModel,\n })]\n : [];\n let savedAssistant: any = null;\n if (conversationId) {\n savedAssistant = await saveMAIMessage(\n sql,\n conversationId,\n \"assistant\",\n reply,\n { toolCalls: toolCallRecords },\n );\n }\n\n return c.json({\n reply,\n toolExecuted: toolToRun\n ? { name: toolToRun, result: toolResult }\n : null,\n toolCalls: toolCallRecords,\n modelUsed: effectiveModel,\n conversation_id: conversationId || null,\n user_message_id: savedUser?.id || null,\n assistant_message_id: savedAssistant?.id || null,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] mAI Chat Error:\", err);\n return c.json({ error: \"Erreur lors de la conversation avec mAI.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/mai/chat\",\n \"/vibe/mai/chat\",\n \"/v1/mai/chat\",\n ], handleMAIChat);\n}",[528],"a095f7d0-d51f-4b25-99e4-2838b086e19a","vibe-feed.ts","06a630e8-a9c5-11f1-9947-1607ee4eb77e",307,["D",1789229613228],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — FEEDS & DISCOVERY (vibe-feed.ts)\n * Timeline feeds (Pour Vous, Abonnements, Tendances), real-time trends & search\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport {\n isBlockEitherWay,\n type RegisterMultiFn,\n resolveHiddenUserIds,\n} from \"./vibe-common.ts\";\nimport { HybridRecommender } from \"./vibe-recommender.ts\";\nimport { ensureCircleTable } from \"./vibe-circle.ts\";\nimport {\n attachBookRefs,\n attachPollsAndCollabs,\n attachQuotedPosts,\n ensurePostColumns,\n fetchPostMedia,\n publishDuePosts,\n} from \"./vibe-posts-core.ts\";\n\n// ── Signaux d'affinement d'algorithme (« Cela m'intéresse / pas ») ──\nexport const FEEDBACK_STOP_WORDS = new Set([\n \"avec\",\n \"dans\",\n \"cette\",\n \"pour\",\n \"plus\",\n \"moins\",\n \"tout\",\n \"tous\",\n \"être\",\n \"fait\",\n \"comme\",\n \"mais\",\n \"vous\",\n \"nous\",\n \"elle\",\n \"ils\",\n \"quoi\",\n \"ainsi\",\n \"alors\",\n \"très\",\n \"this\",\n \"that\",\n \"with\",\n \"from\",\n \"your\",\n \"have\",\n \"will\",\n \"about\",\n \"just\",\n \"they\",\n \"http\",\n \"https\",\n \"www\",\n]);\n\nexport const extractFeedbackTokens = (content: string): string[] => {\n const lower = (content || \"\").toLowerCase();\n const tokens: string[] = [];\n for (const m of lower.matchAll(/#([\\p{L}\\p{N}_]{2,30})/gu)) {\n tokens.push(`#${m[1]}`);\n }\n for (const w of lower.split(/[^\\p{L}\\p{N}#']+/u)) {\n if (w.length >= 4 && !FEEDBACK_STOP_WORDS.has(w)) tokens.push(w);\n }\n return Array.from(new Set(tokens));\n};\n\nexport function registerVibeFeedRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // Protection contre le double enregistrement (idempotence)\n if ((app as any).__vibe_feed_registered) return;\n (app as any).__vibe_feed_registered = true;\n\n // Initialisation paresseuse des colonnes critiques en tâche de fond\n ensurePostColumns().catch(() => {});\n\n // 1. TIMELINE FEED\n const handleFeed = async (c: any) => {\n try {\n await ensurePostColumns().catch(() => {});\n const type = c.req.query(\"type\") || \"for_you\";\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const sql = getDb();\n\n // Comptes masqués (mute) et bloqués : exclus de tous les modes de feed\n // (le blocage est bidirectionnel — cf. resolveHiddenUserIds).\n const { mutedIds, blockedIds } = await resolveHiddenUserIds(\n currentUserId,\n );\n const hiddenAuthorIds = new Set<number>([...mutedIds, ...blockedIds]);\n const isHiddenAuthor = (authorId: any) =>\n hiddenAuthorIds.has(Number(authorId));\n\n // Publication paresseuse des vibes planifiées arrivées à échéance\n await publishDuePosts();\n\n // Pagination par curseur : soit keyset chronologique \"ts|id\", soit\n // rang dans une liste scorée \"rank:N\" (trending / pour vous).\n const PAGE_SIZE = 20;\n const rawCursor = (c.req.query(\"cursor\") || \"\").trim();\n const parseKeyset = (cur: string): { ts: string; id: string } | null => {\n const [ts, id] = cur.split(\"|\");\n if (!ts || !id || Number.isNaN(Date.parse(ts))) return null;\n return { ts, id };\n };\n const parseRank = (cur: string): number | null => {\n const m = cur.match(/^rank:(\\d+)$/);\n return m ? Number(m[1]) : null;\n };\n\n // Médias hydratés via le helper top-level fetchPostMedia (tagged-template only).\n\n if (type === \"trending\") {\n const tag = (c.req.query(\"tag\") || \"\").trim();\n const rankOffset = rawCursor ? parseRank(rawCursor) ?? 0 : 0;\n let posts;\n if (tag) {\n posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published' AND p.content ILIKE ('%' || ${tag} || '%')\n ORDER BY (p.likes_count * 3 + p.reposts_count * 2 + p.replies_count * 2) DESC, p.published_at DESC\n LIMIT ${PAGE_SIZE} OFFSET ${rankOffset}\n `;\n } else {\n posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published'\n ORDER BY (p.likes_count * 3 + p.reposts_count * 2 + p.replies_count * 2) DESC, p.published_at DESC\n LIMIT ${PAGE_SIZE} OFFSET ${rankOffset}\n `;\n }\n\n await fetchPostMedia(posts);\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n\n // Filtrage mute/block (après pagination OFFSET — les trous éventuels\n // sont acceptables pour un classement de tendances).\n const visibleTrending = posts.filter((p: any) =>\n !isHiddenAuthor(p.author_id)\n );\n\n return c.json({\n mode: \"trending\",\n title: tag ? `Tendances : ${tag}` : \"Tendances Populaires\",\n count: visibleTrending.length,\n nextCursor: posts.length === PAGE_SIZE\n ? `rank:${rankOffset + PAGE_SIZE}`\n : null,\n posts: visibleTrending,\n });\n }\n\n if (type === \"stream\" || type === \"following\") {\n // Keyset pagination : (published_at, id) < (ts, id) — stable et indexable\n const keyset = rawCursor ? parseKeyset(rawCursor) : null;\n const cursorFilter = (uid: number | null) =>\n keyset\n ? sql`AND (p.published_at, p.id) < (${keyset.ts}::timestamptz, ${keyset.id}::uuid)`\n : sql``;\n let posts;\n if (currentUserId) {\n await ensureCircleTable().catch(() => {});\n posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n (SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0 as has_liked,\n (SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0 as has_reposted,\n (SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0 as has_bookmarked,\n (SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1) as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE (\n p.author_id = ${currentUserId}\n OR p.author_id IN (SELECT following_id FROM follows WHERE follower_id = ${currentUserId})\n ) AND COALESCE(p.status, 'published') = 'published'\n AND (\n p.visibility = 'public'\n OR p.author_id = ${currentUserId}\n OR (p.visibility = 'followers' AND EXISTS (SELECT 1 FROM follows f2 WHERE f2.follower_id = ${currentUserId} AND f2.following_id = p.author_id))\n OR (p.visibility = 'circle' AND EXISTS (SELECT 1 FROM circle_members cm2 WHERE cm2.user_id = p.author_id AND cm2.member_user_id = ${currentUserId}))\n ) ${cursorFilter(currentUserId)}\n ORDER BY p.published_at DESC, p.id DESC\n LIMIT ${PAGE_SIZE}\n `;\n } else {\n // Visiteur non connecté : aucun abonnement\n posts = [];\n }\n\n await fetchPostMedia(posts);\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n\n // Filtrage mute/block dans le flux Abonnements\n const visibleStream = posts.filter((p: any) =>\n !isHiddenAuthor(p.author_id)\n );\n\n const last = visibleStream[visibleStream.length - 1];\n return c.json({\n mode: \"stream\",\n title: \"Abonnements\",\n count: visibleStream.length,\n nextCursor: posts.length === PAGE_SIZE && last\n ? `${new Date(last.published_at).toISOString()}|${last.id}`\n : null,\n posts: visibleStream,\n });\n }\n\n // \"Pour Vous\" — Algorithme de recommandation sophistiqué\n let followedAuthorIds = new Set<number>();\n let affinityByAuthor = new Map<number, number>();\n let blockedKeywords: string[] = [];\n let shouldHideReposts = false;\n\n if (currentUserId) {\n try {\n const [followsRows, settingsRows, affinityRows] = await Promise.all([\n sql`SELECT following_id FROM follows WHERE follower_id = ${currentUserId}`,\n sql`SELECT blocked_keywords, hide_reposts FROM user_settings WHERE user_id = ${currentUserId} LIMIT 1`,\n // Affinité réelle : historique d'interactions de l'utilisateur par auteur\n sql`\n SELECT p.author_id, COUNT(*)::int AS n\n FROM post_interactions pi\n JOIN posts p ON p.id = pi.post_id\n WHERE pi.user_id = ${currentUserId}\n AND pi.interaction_type IN ('like', 'repost')\n GROUP BY p.author_id\n ORDER BY n DESC\n LIMIT 50\n `,\n ]);\n followedAuthorIds = new Set(\n followsRows.map((f: any) => Number(f.following_id)),\n );\n for (const row of affinityRows) {\n affinityByAuthor.set(\n Number(row.author_id),\n Math.min(1, Number(row.n) / 5),\n );\n }\n if (settingsRows[0]) {\n blockedKeywords = (settingsRows[0].blocked_keywords || []).map((\n k: string,\n ) => k.toLowerCase().trim());\n shouldHideReposts = Boolean(settingsRows[0].hide_reposts);\n }\n } catch {}\n }\n\n const rawCandidates = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published'\n ORDER BY p.published_at DESC\n LIMIT 300\n `;\n\n await fetchPostMedia(rawCandidates);\n\n // Filtrage selon les paramètres utilisateur\n const filteredCandidates = rawCandidates.filter((post: any) => {\n if (shouldHideReposts && post.is_repost) return false;\n if (currentUserId && Number(post.author_id) === currentUserId) {\n return true;\n }\n if (isHiddenAuthor(post.author_id)) return false;\n if (blockedKeywords.length > 0) {\n const contentLc = (post.content || \"\").toLowerCase();\n const hasBlocked = blockedKeywords.some((kw: string) =>\n kw && contentLc.includes(kw)\n );\n if (hasBlocked) return false;\n }\n return true;\n });\n\n // Signaux d'affinement : retours « Cela m'intéresse / pas » + centres d'intérêt\n let moreAuthorWeights = new Map<number, number>();\n let lessAuthorWeights = new Map<number, number>();\n let moreTokenWeights = new Map<string, number>();\n let lessTokenWeights = new Map<string, number>();\n let interestTags: string[] = [];\n let dwellByPost = new Map<string, number>();\n let topicAffinity = new Map<string, number>();\n\n if (currentUserId) {\n try {\n const [feedbackRows, interestRows, dwellRows, affinityRows] =\n await Promise.all([\n sql`\n SELECT pi.interaction_type, p.author_id, p.content\n FROM post_interactions pi\n JOIN posts p ON p.id = pi.post_id\n WHERE pi.user_id = ${currentUserId}\n AND pi.interaction_type IN ('interest_more', 'interest_less')\n ORDER BY pi.created_at DESC\n LIMIT 200\n `,\n sql`SELECT interests FROM profiles WHERE user_id = ${currentUserId} LIMIT 1`,\n sql`\n SELECT post_id, SUM(duration_ms)::int AS total_ms\n FROM post_views WHERE user_id = ${currentUserId} AND created_at > NOW() - INTERVAL '30 days'\n GROUP BY post_id\n `.catch(() => []),\n sql`SELECT topic, score FROM user_topic_affinity WHERE user_id = ${currentUserId} ORDER BY score DESC LIMIT 20`\n .catch(() => []),\n ]);\n for (const row of feedbackRows) {\n const authorId = Number(row.author_id);\n const isMore = row.interaction_type === \"interest_more\";\n const authorMap = isMore ? moreAuthorWeights : lessAuthorWeights;\n const tokenMap = isMore ? moreTokenWeights : lessTokenWeights;\n authorMap.set(\n authorId,\n Math.min(3, (authorMap.get(authorId) || 0) + 1),\n );\n for (const token of extractFeedbackTokens(row.content)) {\n tokenMap.set(token, Math.min(3, (tokenMap.get(token) || 0) + 1));\n }\n }\n const rawInterests = interestRows[0]?.interests;\n if (Array.isArray(rawInterests)) {\n interestTags = rawInterests.map((t: any) =>\n String(t).toLowerCase().trim()\n ).filter(Boolean);\n } else if (typeof rawInterests === \"string\") {\n interestTags = rawInterests.split(\",\").map((t) =>\n t.toLowerCase().trim()\n ).filter(Boolean);\n }\n for (const d of (dwellRows as any[]) || []) {\n dwellByPost.set(\n String((d as any).post_id),\n Number((d as any).total_ms || 0),\n );\n }\n for (const a of (affinityRows as any[]) || []) {\n topicAffinity.set(\n String((a as any).topic).toLowerCase(),\n Number((a as any).score || 0),\n );\n }\n } catch (feedbackErr) {\n console.warn(\"[Vibe API] Erreur signaux feedback:\", feedbackErr);\n }\n }\n\n const clamp = (v: number, lo: number, hi: number) =>\n Math.max(lo, Math.min(hi, v));\n\n const computeInterestSignal = (\n post: any,\n ): { signal: number; matched: string[] } => {\n if (!currentUserId) return { signal: 0, matched: [] };\n const authorId = Number(post.author_id);\n const authorDelta = (moreAuthorWeights.get(authorId) || 0) -\n (lessAuthorWeights.get(authorId) || 0);\n const tokens = extractFeedbackTokens(post.content);\n let topicDelta = 0;\n let interestMatches = 0;\n let affinityBoost = 0;\n const matched: string[] = [];\n for (const token of tokens) {\n const wMore = moreTokenWeights.get(token) || 0;\n const wLess = lessTokenWeights.get(token) || 0;\n if (wMore > 0 || wLess > 0) topicDelta += wMore - wLess;\n const bare = token.replace(/^#/, \"\");\n if (interestTags.includes(bare) || interestTags.includes(token)) {\n interestMatches += 1;\n if (matched.length < 3) matched.push(bare);\n }\n const aff = topicAffinity.get(bare) ?? topicAffinity.get(token) ?? 0;\n if (aff > 0) {\n affinityBoost += aff;\n if (matched.length < 3 && !matched.includes(bare)) {\n matched.push(bare);\n }\n }\n }\n // Dwell : temps passé sur ce post précis → boost implicite (vrai profil)\n const dwellMs = dwellByPost.get(String(post.id)) || 0;\n const dwellBoost = Math.min(1, dwellMs / 30000);\n const signal = clamp(\n 0.35 * (authorDelta / 3) +\n 0.3 * clamp(topicDelta / 3, -3, 3) / 3 +\n 0.15 * (Math.min(2, interestMatches) / 2) +\n 0.1 * Math.min(1, affinityBoost) +\n 0.1 * dwellBoost,\n -1,\n 1,\n );\n return { signal, matched };\n };\n\n const scoredPosts = filteredCandidates.map((post: any) => {\n const interest = computeInterestSignal(post);\n // Affinité topic → similarité sémantique (remplace le 0.75 en dur)\n const topicScore = interest.matched.length > 0 ? 0.85 : 0.6;\n const signal = HybridRecommender.scorePost({\n postId: post.id,\n authorId: Number(post.author_id),\n publishedAt: new Date(post.published_at),\n likes: Number(post.likes_count || 0),\n reposts: Number(post.reposts_count || 0),\n replies: Number(post.replies_count || 0),\n views: Number(post.views_count || 0),\n hasMedia: Array.isArray(post.media_assets) &&\n post.media_assets.length > 0,\n isVerifiedAuthor: Boolean(post.is_verified),\n isFollowedAuthor: followedAuthorIds.has(Number(post.author_id)),\n affinity: affinityByAuthor.get(Number(post.author_id)) || 0,\n semanticSimilarity: topicScore,\n candidateSentiment: Number(post.sentiment_score || 0.5),\n toxicityScore: Number(post.toxicity_score || 0),\n interestSignal: interest.signal,\n matchedInterestTags: interest.matched,\n userDwellMs: dwellByPost.get(String(post.id)) || 0,\n });\n\n return {\n ...post,\n recommendationScore: signal.totalScore,\n explanation: signal.explanationText,\n scoreBreakdown: signal.breakdown,\n };\n });\n\n scoredPosts.sort((a: any, b: any) =>\n b.recommendationScore - a.recommendationScore\n );\n\n // Diversification : max 3 posts consécutifs du même auteur\n const diversified: any[] = [];\n let streakAuthor: number | null = null;\n let streakLen = 0;\n const deferred: any[] = [];\n for (const post of scoredPosts) {\n const authorId = Number(post.author_id);\n if (authorId === streakAuthor && streakLen >= 3) {\n deferred.push(post);\n continue;\n }\n if (authorId === streakAuthor) streakLen += 1;\n else {\n streakAuthor = authorId;\n streakLen = 1;\n }\n diversified.push(post);\n }\n const ranked = diversified.concat(deferred);\n\n const rankOffset = rawCursor ? parseRank(rawCursor) ?? 0 : 0;\n const page = ranked.slice(rankOffset, rankOffset + PAGE_SIZE);\n await attachQuotedPosts(page);\n await attachBookRefs(page, currentUserId).catch(() => {});\n await attachPollsAndCollabs(page, currentUserId).catch(() => {});\n\n return c.json({\n mode: \"for_you\",\n title: \"Pour Vous\",\n count: page.length,\n nextCursor:\n page.length === PAGE_SIZE && rankOffset + PAGE_SIZE < ranked.length\n ? `rank:${rankOffset + PAGE_SIZE}`\n : null,\n posts: page,\n });\n } catch (err: any) {\n console.error(\"[Vibe API] Error fetching feed:\", err);\n return c.json({ error: \"Erreur lors de la récupération du flux.\" }, 500);\n }\n };\n\n registerMulti(\n \"get\",\n [\"/api/vibe/feed\", \"/vibe/feed\", \"/v1/feed\", \"/feed\"],\n handleFeed,\n );\n\n // 2. REAL TRENDS & HASHTAGS\n const handleGetTrends = async (c: any) => {\n try {\n const sql = getDb();\n\n // Chercher les posts récents (48h d'abord, puis 30j si pas assez)\n let recentPosts = await sql`\n SELECT content, likes_count, reposts_count, replies_count, views_count, published_at\n FROM posts\n WHERE published_at > NOW() - INTERVAL '48 hours'\n AND visibility = 'public' AND status = 'published'\n ORDER BY (likes_count * 2 + reposts_count * 3 + replies_count) DESC\n LIMIT 300\n `;\n\n if (recentPosts.length < 5) {\n recentPosts = await sql`\n SELECT content, likes_count, reposts_count, replies_count, views_count, published_at\n FROM posts\n WHERE published_at > NOW() - INTERVAL '30 days'\n AND visibility = 'public' AND status = 'published'\n ORDER BY (likes_count * 2 + reposts_count * 3 + replies_count) DESC\n LIMIT 300\n `;\n }\n\n const tagMap: Record<\n string,\n { count: number; engagement: number; recencyBoost: number }\n > = {};\n const now = Date.now();\n\n for (const p of recentPosts) {\n const text = p.content || \"\";\n const matches = text.match(/#[\\p{L}\\p{N}_]+/gu) || [];\n\n const eng = Number(p.likes_count || 0) * 2 +\n Number(p.reposts_count || 0) * 3 +\n Number(p.replies_count || 0) * 2 +\n Number(p.views_count || 0) * 0.1 +\n 1;\n\n const ageHours = (now - new Date(p.published_at).getTime()) /\n (1000 * 3600);\n const recency = ageHours < 6 ? 3 : ageHours < 24 ? 1.5 : 1;\n\n for (const rawTag of matches) {\n const normalized = rawTag.toLowerCase().trim();\n if (normalized.length <= 1 || normalized.length > 35) continue;\n\n if (!tagMap[rawTag]) {\n tagMap[rawTag] = { count: 0, engagement: 0, recencyBoost: 0 };\n }\n tagMap[rawTag].count += 1;\n tagMap[rawTag].engagement += eng;\n tagMap[rawTag].recencyBoost += recency;\n }\n }\n\n const sortedTrends = Object.entries(tagMap)\n .map(([tag, data]) => {\n const score = data.engagement * data.recencyBoost + data.count * 5;\n const formatted = data.count > 1000\n ? `${(data.count / 1000).toFixed(1)}k`\n : `${data.count}`;\n const lc = tag.toLowerCase();\n const category =\n lc.includes(\"mai\") || lc.includes(\"ia\") || lc.includes(\"ai\") ||\n lc.includes(\"llm\") || lc.includes(\"gpt\")\n ? \"Intelligence Artificielle\"\n : lc.includes(\"tech\") || lc.includes(\"dev\") ||\n lc.includes(\"code\") || lc.includes(\"web\")\n ? \"Technologie\"\n : lc.includes(\"design\") || lc.includes(\"art\") ||\n lc.includes(\"photo\") || lc.includes(\"ux\")\n ? \"Design & Création\"\n : lc.includes(\"vibe\") || lc.includes(\"social\") ||\n lc.includes(\"community\")\n ? \"Communauté\"\n : \"Tendances\";\n return {\n tag,\n category,\n posts: `${formatted} publications`,\n post_count: data.count,\n score,\n };\n })\n .sort((a, b) => b.score - a.score)\n .slice(0, 10);\n\n return c.json({ success: true, trends: sortedTrends });\n } catch (err: any) {\n console.error(\"[Get Trends Error]:\", err);\n return c.json({ success: true, trends: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/trends\",\n \"/vibe/trends\",\n \"/v1/trends\",\n \"/trends\",\n ], handleGetTrends);\n\n // 2bis. TOP VIBE — meilleures publications des N derniers jours (Explorer)\n // Score d'engagement : likes×1 + reposts×2.5 + réponses×2 + vues×0.1\n // (miroir SQL de rawEngagement — lib/recommendation/signals.ts).\n const handleTopPosts = async (c: any) => {\n try {\n await ensurePostColumns().catch(() => {});\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const limit = Math.min(\n 10,\n Math.max(1, Number(c.req.query(\"limit\") || 5)),\n );\n const days = Math.min(90, Math.max(1, Number(c.req.query(\"days\") || 30)));\n\n const sql = getDb();\n await publishDuePosts();\n\n const posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published'\n AND p.published_at > NOW() - (${days} * INTERVAL '1 day')\n ORDER BY (COALESCE(p.likes_count, 0) * 1.0\n + COALESCE(p.reposts_count, 0) * 2.5\n + COALESCE(p.replies_count, 0) * 2.0\n + COALESCE(p.views_count, 0) * 0.1) DESC,\n p.published_at DESC\n LIMIT ${limit}\n `;\n\n await fetchPostMedia(posts);\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n\n // Filtrage mute/block\n const { mutedIds, blockedIds } = await resolveHiddenUserIds(\n currentUserId,\n );\n const hiddenAuthorIds = new Set<number>([...mutedIds, ...blockedIds]);\n const visible = posts.filter((p: any) =>\n !hiddenAuthorIds.has(Number(p.author_id))\n );\n\n return c.json({ success: true, posts: visible });\n } catch (err: any) {\n console.error(\"[Top Posts Error]:\", err);\n return c.json({ success: true, posts: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/posts/top\",\n \"/vibe/posts/top\",\n \"/v1/posts/top\",\n ], handleTopPosts);\n\n // 3. SEARCH POSTS\n const handleSearchPosts = async (c: any) => {\n try {\n await ensurePostColumns().catch(() => {});\n const q = (c.req.query(\"q\") || c.req.query(\"query\") || \"\").trim();\n if (!q) {\n return c.json({ posts: [], count: 0 });\n }\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n\n const sql = getDb();\n const limit = Math.min(\n 50,\n Math.max(1, Number(c.req.query(\"limit\") || 20)),\n );\n const offset = Math.max(0, Number(c.req.query(\"offset\") || 0));\n\n const cleanQ = q.startsWith(\"#\") ? q.slice(1) : q;\n const posts = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'like') > 0`\n : sql`FALSE`\n } as has_liked,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${currentUserId} AND interaction_type = 'repost') > 0`\n : sql`FALSE`\n } as has_reposted,\n ${\n currentUserId\n ? sql`(SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${currentUserId}) > 0`\n : sql`FALSE`\n } as has_bookmarked,\n ${\n currentUserId\n ? sql`(SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${currentUserId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1)`\n : sql`NULL`\n } as my_feedback\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published'\n AND (\n p.content ILIKE ('%' || ${cleanQ} || '%')\n OR u.username ILIKE ('%' || ${cleanQ} || '%')\n OR pr.display_name ILIKE ('%' || ${cleanQ} || '%')\n )\n ORDER BY p.published_at DESC\n LIMIT ${limit} OFFSET ${offset}\n `;\n\n await fetchPostMedia(posts);\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, currentUserId).catch(() => {});\n await attachPollsAndCollabs(posts, currentUserId).catch(() => {});\n\n // Filtrage mute/block des résultats de recherche\n const { mutedIds: searchMuted, blockedIds: searchBlocked } =\n await resolveHiddenUserIds(currentUserId);\n const searchHidden = new Set<number>([...searchMuted, ...searchBlocked]);\n const visiblePosts = posts.filter((p: any) =>\n !searchHidden.has(Number(p.author_id))\n );\n\n return c.json({\n query: q,\n count: visiblePosts.length,\n posts: visiblePosts,\n });\n } catch (err: any) {\n console.error(\"[Search Posts Error]:\", err);\n return c.json({ error: \"Erreur recherche publications.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/search/posts\",\n \"/vibe/search/posts\",\n \"/v1/search/posts\",\n \"/search/posts\",\n ], handleSearchPosts);\n\n // 4. UNIFIED GLOBAL SEARCH (posts + users + books + DMs, limit/section)\n const handleSearchUnified = async (c: any) => {\n try {\n await ensurePostColumns().catch(() => {});\n const q = (c.req.query(\"q\") || c.req.query(\"query\") || \"\").trim();\n if (!q) {\n return c.json({\n posts: [],\n users: [],\n books: [],\n messages: [],\n total: 0,\n });\n }\n const token = extractToken(c.req.raw);\n let currentUserId: number | null = null;\n if (token) {\n try {\n const payload = await verifyToken(token);\n currentUserId = Number(payload.sub || (payload as any).id);\n } catch {}\n }\n const sql = getDb();\n const limit = Math.min(\n 10,\n Math.max(1, Number(c.req.query(\"limit\") || 5)),\n );\n const cleanQ = q.startsWith(\"#\") ? q.slice(1) : q;\n\n const postsPromise = sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE p.visibility = 'public' AND COALESCE(p.status, 'published') = 'published'\n AND (\n p.content ILIKE ('%' || ${cleanQ} || '%')\n OR u.username ILIKE ('%' || ${cleanQ} || '%')\n OR pr.display_name ILIKE ('%' || ${cleanQ} || '%')\n )\n ORDER BY p.published_at DESC\n LIMIT ${limit}\n `.catch(() => []);\n\n const usersPromise = sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.avatar_url, pr.bio, pr.followers_count, pr.posts_count\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE LOWER(u.username) LIKE ${`%${q.toLowerCase()}%`}\n OR LOWER(COALESCE(pr.display_name, '')) LIKE ${`%${q.toLowerCase()}%`}\n ORDER BY COALESCE(pr.followers_count, 0) DESC\n LIMIT ${limit}\n `.catch(() => []);\n\n const booksPromise = currentUserId\n ? sql`\n SELECT b.id, b.title, b.icon, b.created_at,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS items_count\n FROM vibe_books b\n WHERE b.user_id = ${currentUserId} AND b.title ILIKE ('%' || ${q} || '%')\n ORDER BY b.created_at DESC\n LIMIT ${limit}\n `.catch(() => [])\n : Promise.resolve([]);\n\n const messagesPromise = currentUserId\n ? sql`\n SELECT m.id, m.conversation_id, m.sender_id, m.recipient_id, m.content, m.is_read, m.created_at\n FROM direct_messages m\n WHERE m.content ILIKE ('%' || ${q} || '%')\n AND m.conversation_id IN (\n SELECT dm.id FROM dm_conversations dm\n WHERE dm.participant_one_id = ${currentUserId} OR dm.participant_two_id = ${currentUserId}\n )\n AND (m.status IS NULL OR m.status = 'sent')\n ORDER BY m.created_at DESC\n LIMIT ${limit}\n `.catch(() => [])\n : Promise.resolve([]);\n\n const [posts, users, books, messages] = await Promise.all([\n postsPromise,\n usersPromise,\n booksPromise,\n messagesPromise,\n ]);\n try {\n await fetchPostMedia(posts);\n } catch {}\n try {\n await attachQuotedPosts(posts);\n } catch {}\n try {\n await attachBookRefs(posts, currentUserId);\n } catch {}\n try {\n await attachPollsAndCollabs(posts, currentUserId);\n } catch {}\n\n return c.json({\n posts,\n users,\n books,\n messages,\n total: posts.length + users.length + books.length + messages.length,\n });\n } catch (err: any) {\n console.error(\"[Search Unified Error]:\", err);\n return c.json({ error: \"Erreur recherche unifiée.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/search/unified\",\n \"/vibe/search/unified\",\n \"/v1/search/unified\",\n \"/search/unified\",\n ], handleSearchUnified);\n}",[535],"782e3913-fd54-456a-a029-e36ec61981d4","vibe-dms.ts","6b04e9b4-a6e4-11f1-a11e-1607ee4eb77e",322,["D",1789233612605],12,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs & NOTIFICATIONS (vibe-dms.ts)\n * Point d'entrée : orchestration des routes + réexports du socle partagé.\n * Le module est scindé (limite de taille Val Town) en :\n * - vibe-dms-core.ts socle partagé (tables, compte mAI, helpers)\n * - vibe-dms-conversations.ts recherche, conversations, messages, envoi\n * - vibe-dms-message-actions.ts épinglage, recherche, non-lu, réactions, mAI\n * - vibe-dms-moderation.ts blocage, signalement, renommage, suppression\n * - vibe-dms-notifications.ts notifications et compteur non-lus\n * - vibe-dms-groups.ts groupes, masquage, traductions\n * ============================================================================\n */\nimport type { Hono } from \"npm:hono@4\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { ensureDMTables, ensureMAIAccount } from \"./vibe-dms-core.ts\";\nimport { registerDMDirectRoutes } from \"./vibe-dms-conversations.ts\";\nimport { registerDMMessageActionRoutes } from \"./vibe-dms-message-actions.ts\";\nimport { registerDMModerationRoutes } from \"./vibe-dms-moderation.ts\";\nimport { registerDMNotificationRoutes } from \"./vibe-dms-notifications.ts\";\nimport { registerDMGroupRoutes } from \"./vibe-dms-groups.ts\";\n\nexport {\n DM_MESSAGE_CHARS_FREE,\n DM_MESSAGE_CHARS_PAID,\n ensureMAIAccount,\n getMAIUserId,\n publishScheduledDMs,\n} from \"./vibe-dms-core.ts\";\n\nexport function registerVibeDMsRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n ensureDMTables();\n ensureMAIAccount();\n registerDMDirectRoutes(app, registerMulti);\n registerDMMessageActionRoutes(app, registerMulti);\n registerDMModerationRoutes(app, registerMulti);\n registerDMNotificationRoutes(app, registerMulti);\n registerDMGroupRoutes(app, registerMulti);\n}",[542],"354baa92-8ac9-4132-8196-b21587afea29","vibe-dms-notifications.ts","44be09d8-aece-11f1-bcc2-1607ee4eb77e",328,["D",1789233648949],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — NOTIFICATIONS (vibe-dms-notifications.ts)\n * Liste, lecture, suppression et compteur des notifications utilisateur.\n * Scindé de vibe-dms.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\n\nexport function registerDMNotificationRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 5. NOTIFICATIONS\n const handleNotifications = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n const notifs = await sql`\n SELECT n.*,\n u.username as actor_username,\n COALESCE(u.avatar_url, pr.avatar_url) as actor_avatar_url,\n COALESCE(pr.display_name, u.username) as actor_display_name,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as actor_verified\n FROM notifications n\n LEFT JOIN users u ON u.id = n.actor_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE n.recipient_id = ${userId}\n AND (n.actor_id IS NULL OR (\n n.actor_id NOT IN (SELECT COALESCE(blocked_user_id, -1) FROM blocked_users WHERE user_id = ${userId})\n AND n.actor_id NOT IN (SELECT COALESCE(user_id, -1) FROM blocked_users WHERE blocked_user_id = ${userId})\n AND n.actor_id NOT IN (SELECT COALESCE(muted_user_id, -1) FROM muted_users WHERE user_id = ${userId})\n ))\n ORDER BY n.created_at DESC\n LIMIT 100\n `;\n return c.json({ notifications: notifs });\n } catch (err: any) {\n return c.json({ error: \"Erreur notifications.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/notifications\",\n \"/vibe/notifications\",\n \"/v1/notifications\",\n ], handleNotifications);\n\n const handleMarkNotificationsRead = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n let body: any = {};\n try {\n body = await c.req.json();\n } catch {}\n\n const rawId = c.req.param?.(\"id\") || body?.id || body?.notification_id;\n const notifId = rawId ? String(rawId).trim() : null;\n const sql = getDb();\n const isReadVal = body?.is_read !== undefined\n ? Boolean(body.is_read)\n : true;\n\n if (\n notifId && notifId !== \"all\" && notifId !== \"undefined\" &&\n notifId !== \"null\" && notifId !== \"\"\n ) {\n await sql`\n UPDATE notifications\n SET is_read = ${isReadVal}\n WHERE id::text = ${notifId} AND recipient_id = ${userId}\n `;\n } else {\n await sql`\n UPDATE notifications\n SET is_read = ${isReadVal}\n WHERE recipient_id = ${userId}\n `;\n }\n return c.json({ success: true, is_read: isReadVal, id: notifId });\n } catch (err: any) {\n console.error(\"[vibe-dms] Error in handleMarkNotificationsRead:\", err);\n return c.json({\n error: \"Erreur marquage notification.\",\n details: err?.message,\n }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/notifications/read\",\n \"/vibe/notifications/read\",\n \"/v1/notifications/read\",\n \"/v1/notifications/:id/read\",\n \"/api/vibe/notifications/:id/read\",\n ], handleMarkNotificationsRead);\n registerMulti(\"patch\", [\n \"/api/vibe/notifications/read\",\n \"/v1/notifications/read\",\n \"/v1/notifications/:id/read\",\n \"/api/vibe/notifications/:id/read\",\n ], handleMarkNotificationsRead);\n\n const handleDeleteNotification = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n let body: any = {};\n try {\n body = await c.req.json();\n } catch {}\n\n const rawId = c.req.param?.(\"id\") || body?.id || body?.notification_id;\n const notifId = rawId ? String(rawId).trim() : null;\n const sql = getDb();\n\n if (\n notifId && notifId !== \"all\" && notifId !== \"clear\" &&\n notifId !== \"undefined\" && notifId !== \"null\" && notifId !== \"\"\n ) {\n await sql`\n DELETE FROM notifications\n WHERE id::text = ${notifId} AND recipient_id = ${userId}\n `;\n } else {\n await sql`\n DELETE FROM notifications\n WHERE recipient_id = ${userId}\n `;\n }\n return c.json({ success: true, deleted_id: notifId || \"all\" });\n } catch (err: any) {\n console.error(\"[vibe-dms] Error in handleDeleteNotification:\", err);\n return c.json({\n error: \"Erreur suppression notification.\",\n details: err?.message,\n }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/notifications/:id\",\n \"/v1/notifications/:id\",\n \"/api/vibe/notifications\",\n \"/v1/notifications\",\n ], handleDeleteNotification);\n registerMulti(\"post\", [\n \"/api/vibe/notifications/:id/delete\",\n \"/v1/notifications/:id/delete\",\n \"/api/vibe/notifications/delete\",\n \"/v1/notifications/delete\",\n \"/api/vibe/notifications/clear\",\n \"/v1/notifications/clear\",\n ], handleDeleteNotification);\n\n // Compteur léger pour les badges — évite de charger toutes les notifications\n const handleUnreadCount = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n const [notifRow] = await sql`\n SELECT COUNT(*)::int AS unread_notifications FROM notifications WHERE recipient_id = ${userId} AND NOT is_read\n `;\n const [dmRow] = await sql`\n SELECT (\n (SELECT COUNT(*) FROM direct_messages\n WHERE recipient_id = ${userId} AND is_read = FALSE) +\n (SELECT COUNT(*) FROM direct_messages m\n JOIN dm_group_members gm ON gm.conversation_id = m.conversation_id AND gm.user_id = ${userId}\n WHERE m.sender_id <> ${userId}\n AND NOT COALESCE((m.read_by ? ${userId}::text), FALSE))\n )::int AS unread_messages\n `;\n return c.json({\n unread_notifications: Number(notifRow?.unread_notifications || 0),\n unread_messages: Number(dmRow?.unread_messages || 0),\n });\n } catch (err: any) {\n return c.json({ error: \"Erreur.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/notifications/unread_count\",\n \"/vibe/notifications/unread_count\",\n \"/v1/notifications/unread_count\",\n ], handleUnreadCount);\n}",[550],"18dde520-ed1e-49f8-99e4-b5569dd78f0b","vibe-dms-moderation.ts","3ba446a0-aece-11f1-bcc2-1607ee4eb77e",325,["D",1789233631883],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs : MODÉRATION & GESTION (vibe-dms-moderation.ts)\n * Blocage/déblocage, signalements, renommage, suppression de conversation,\n * suppression et édition de message. Scindé de vibe-dms.ts (limite Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { stripHtmlTags } from \"./vibe-posts-core.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport {\n dmPlainLength,\n getDmMessageCharLimit,\n pushToUsers,\n} from \"./vibe-dms-core.ts\";\n\nexport function registerDMModerationRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 4d. BLOCK / UNBLOCK / LIST BLOCKED USERS\n const handleBlock = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const { user_id } = await c.req.json();\n const targetId = Number(user_id);\n if (!targetId || targetId === userId) {\n return c.json({ error: \"Utilisateur invalide.\" }, 400);\n }\n\n const sql = getDb();\n await sql`\n INSERT INTO blocked_users (user_id, blocked_user_id)\n VALUES (${userId}, ${targetId})\n ON CONFLICT (user_id, blocked_user_id) DO NOTHING\n `;\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-dms] Block error:\", err);\n return c.json({ error: \"Erreur blocage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/block\",\n \"/vibe/dms/block\",\n \"/v1/dms/block\",\n ], handleBlock);\n\n const handleUnblock = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const { user_id } = await c.req.json();\n const targetId = Number(user_id);\n if (!targetId) return c.json({ error: \"Utilisateur invalide.\" }, 400);\n\n const sql = getDb();\n await sql`DELETE FROM blocked_users WHERE user_id = ${userId} AND blocked_user_id = ${targetId}`;\n return c.json({ success: true });\n } catch (err: any) {\n return c.json({ error: \"Erreur déblocage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/unblock\",\n \"/vibe/dms/unblock\",\n \"/v1/dms/unblock\",\n ], handleUnblock);\n\n const handleListBlocked = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n const rows = await sql`\n SELECT b.id, b.blocked_user_id, b.created_at,\n u.username as blocked_username,\n pr.display_name as blocked_display_name,\n pr.avatar_url as blocked_avatar_url\n FROM blocked_users b\n JOIN users u ON u.id = b.blocked_user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE b.user_id = ${userId}\n ORDER BY b.created_at DESC\n `;\n return c.json({ blocked: rows });\n } catch (err: any) {\n return c.json({ error: \"Erreur liste bloqués.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/dms/blocked\",\n \"/vibe/dms/blocked\",\n \"/v1/dms/blocked\",\n ], handleListBlocked);\n\n // 4e. REPORT A CONVERSATION / MESSAGE\n const handleReport = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const { reported_user_id, reason, message_id } = await c.req.json();\n const targetId = Number(reported_user_id);\n if (!targetId) {\n return c.json({ error: \"Utilisateur à signaler requis.\" }, 400);\n }\n\n const sql = getDb();\n await sql`\n INSERT INTO dm_reports (reporter_id, reported_user_id, message_id, reason)\n VALUES (${userId}, ${targetId}, ${message_id || null}, ${\n String(reason || \"non précisé\").slice(0, 500)\n })\n `;\n return c.json({\n success: true,\n message: \"Signalement transmis à la modération.\",\n });\n } catch (err: any) {\n console.error(\"[vibe-dms] Report error:\", err);\n return c.json({ error: \"Erreur signalement.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/report\",\n \"/vibe/dms/report\",\n \"/v1/dms/report\",\n ], handleReport);\n\n // 4f. RENAME A CONVERSATION (nom local en 1-à-1, nom du groupe en admin)\n const handleRenameConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const { name } = await c.req.json();\n const customName = String(name || \"\").trim();\n\n const sql = getDb();\n\n // ── Groupe : renommage global réservé à l'administrateur ──\n if (rawKey.startsWith(\"group:\")) {\n const groupId = rawKey.slice(6);\n const groupName = customName.slice(0, 100);\n if (!groupName) {\n return c.json({ error: \"Le nom du groupe est requis.\" }, 400);\n }\n const convRows =\n await sql`SELECT created_by FROM dm_conversations WHERE id = ${groupId}::uuid AND is_group = TRUE LIMIT 1`;\n if (convRows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n if (Number(convRows[0].created_by) !== userId) {\n return c.json({\n error: \"Seul l'administrateur du groupe peut le renommer.\",\n }, 403);\n }\n await sql`UPDATE dm_conversations SET group_name = ${groupName} WHERE id = ${groupId}::uuid`;\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid`;\n await pushToUsers(\n (memberRows as any[]).map((r) => Number(r.user_id)),\n \"group_updated\",\n { conversation_id: groupId, action: \"renamed\" },\n );\n return c.json({ success: true, group_name: groupName });\n }\n\n const partnerId = Number(rawKey);\n if (!partnerId) return c.json({ error: \"Conversation invalide.\" }, 400);\n const trimmed = customName.slice(0, 50);\n if (!trimmed) {\n await sql`DELETE FROM dm_conv_meta WHERE user_id = ${userId} AND partner_id = ${partnerId}`;\n } else {\n await sql`\n INSERT INTO dm_conv_meta (user_id, partner_id, custom_name)\n VALUES (${userId}, ${partnerId}, ${trimmed})\n ON CONFLICT (user_id, partner_id)\n DO UPDATE SET custom_name = ${trimmed}\n `;\n }\n return c.json({ success: true, custom_name: trimmed || null });\n } catch (err: any) {\n console.error(\"[vibe-dms] Rename error:\", err);\n return c.json({ error: \"Erreur renommage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/conversations/:partnerId/rename\",\n \"/vibe/dms/conversations/:partnerId/rename\",\n \"/v1/dms/conversations/:partnerId/rename\",\n ], handleRenameConversation);\n\n // 4g. DELETE A CONVERSATION (côté compte courant : messages reçus/envoyés + conversation)\n const handleDeleteConversation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const partnerId = Number(c.req.param(\"partnerId\"));\n if (!partnerId) return c.json({ error: \"Partenaire invalide.\" }, 400);\n\n const sql = getDb();\n await sql`\n DELETE FROM direct_messages\n WHERE (sender_id = ${userId} AND recipient_id = ${partnerId})\n OR (sender_id = ${partnerId} AND recipient_id = ${userId})\n `;\n await sql`\n DELETE FROM dm_conversations\n WHERE (participant_one_id = ${userId} AND participant_two_id = ${partnerId})\n OR (participant_one_id = ${partnerId} AND participant_two_id = ${userId})\n `;\n await sql`DELETE FROM dm_conv_meta WHERE (user_id = ${userId} AND partner_id = ${partnerId})`;\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-dms] Delete conversation error:\", err);\n return c.json({ error: \"Erreur suppression conversation.\" }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/dms/conversations/:partnerId\",\n \"/vibe/dms/conversations/:partnerId\",\n \"/v1/dms/conversations/:partnerId\",\n ], handleDeleteConversation);\n\n // 4h. DELETE A SINGLE MESSAGE (seulement ses propres messages)\n const handleDeleteMessage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const messageId = c.req.param(\"messageId\");\n if (!messageId) return c.json({ error: \"Message invalide.\" }, 400);\n\n const sql = getDb();\n const rows =\n await sql`SELECT sender_id, recipient_id, conversation_id FROM direct_messages WHERE id = ${messageId}::uuid LIMIT 1`;\n if (rows.length === 0) {\n return c.json({ error: \"Message introuvable.\" }, 404);\n }\n if (Number(rows[0].sender_id) !== userId) {\n return c.json({\n error: \"Vous ne pouvez supprimer que vos propres messages.\",\n }, 403);\n }\n const conversationId = rows[0].conversation_id;\n const recipientId = rows[0].recipient_id;\n await sql`DELETE FROM dm_reactions WHERE message_id = ${messageId}::uuid`\n .catch(() => {});\n await sql`DELETE FROM direct_messages WHERE id = ${messageId}::uuid`;\n // Diffusion temps réel aux autres membres (« supprimé pour tout le monde »)\n try {\n const convInfo = conversationId\n ? await sql`SELECT is_group FROM dm_conversations WHERE id = ${conversationId}::uuid LIMIT 1`\n : [];\n const payload = {\n id: messageId,\n conversation_id: conversationId ? String(conversationId) : null,\n };\n if (convInfo[0]?.is_group) {\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${conversationId}::uuid`;\n await pushToUsers(\n (memberRows as any[]).map((r) => Number(r.user_id)),\n \"dm_message_deleted\",\n payload,\n userId,\n );\n } else if (recipientId) {\n await pushRealtimeEvent(\n Number(recipientId),\n \"dm_message_deleted\",\n payload,\n );\n }\n } catch {}\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-dms] Delete message error:\", err);\n return c.json({ error: \"Erreur suppression message.\" }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/dms/messages/:messageId\",\n \"/vibe/dms/messages/:messageId\",\n \"/v1/dms/messages/:messageId\",\n ], handleDeleteMessage);\n\n // 4d. EDIT DM MESSAGE (avec limite de 60 minutes)\n const handleEditMessage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const messageId = c.req.param(\"messageId\");\n\n if (!messageId) return c.json({ error: \"ID du message requis.\" }, 400);\n\n const { content } = await c.req.json();\n if (!content || !content.trim()) {\n return c.json(\n { error: \"Le contenu du message ne peut pas être vide.\" },\n 400,\n );\n }\n const sql = getDb();\n const dmCharLimit = await getDmMessageCharLimit(sql, userId);\n if (dmPlainLength(content) > dmCharLimit) {\n return c.json({\n error: `Message trop long (${\n dmCharLimit.toLocaleString(\"fr-FR\")\n } caractères max).`,\n }, 400);\n }\n\n const rows = await sql`\n SELECT * FROM direct_messages WHERE id = ${messageId}::uuid LIMIT 1\n `;\n if (rows.length === 0) {\n return c.json({ error: \"Message introuvable.\" }, 404);\n }\n const msg = rows[0];\n if (Number(msg.sender_id) !== userId) {\n return c.json({\n error: \"Vous ne pouvez modifier que vos propres messages.\",\n }, 403);\n }\n\n // Vérifier la limite de 60 minutes\n const createdAt = new Date(msg.created_at).getTime();\n const now = Date.now();\n const diffMinutes = (now - createdAt) / (1000 * 60);\n if (diffMinutes > 60) {\n return c.json({\n error:\n \"Ce message a été envoyé il y a plus de 60 minutes et ne peut plus être modifié.\",\n }, 403);\n }\n\n const updated = await sql`\n UPDATE direct_messages\n SET content = ${content.trim()},\n is_edited = TRUE,\n edited_at = NOW()\n WHERE id = ${messageId}::uuid\n RETURNING *\n `;\n\n // Mettre à jour l'aperçu dans la conversation\n try {\n await sql`\n UPDATE dm_conversations\n SET last_message_preview = ${stripHtmlTags(String(content)).trim()}\n WHERE id = ${msg.conversation_id}::uuid\n `;\n } catch {}\n\n // Informer les autres membres en temps réel via SSE (destinataire ou groupe)\n try {\n const convInfo =\n await sql`SELECT is_group FROM dm_conversations WHERE id = ${msg.conversation_id}::uuid LIMIT 1`;\n if (convInfo[0]?.is_group) {\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${msg.conversation_id}::uuid`;\n await pushToUsers(\n (memberRows as any[]).map((r) => Number(r.user_id)),\n \"dm_message_edited\",\n { ...updated[0], conversation_id: String(msg.conversation_id) },\n userId,\n );\n } else if (msg.recipient_id) {\n await pushRealtimeEvent(\n Number(msg.recipient_id),\n \"dm_message_edited\",\n updated[0],\n );\n }\n } catch {}\n\n return c.json({ success: true, message: updated[0] });\n } catch (err: any) {\n console.error(\"[vibe-dms] Edit message error:\", err);\n return c.json(\n { error: \"Erreur lors de la modification du message.\" },\n 500,\n );\n }\n };\n\n registerMulti(\"patch\", [\n \"/api/vibe/dms/messages/:messageId\",\n \"/vibe/dms/messages/:messageId\",\n \"/v1/dms/messages/:messageId\",\n ], handleEditMessage);\n registerMulti(\"put\", [\n \"/api/vibe/dms/messages/:messageId\",\n \"/vibe/dms/messages/:messageId\",\n \"/v1/dms/messages/:messageId\",\n ], handleEditMessage);\n}",[557],"f422b236-d860-41a6-86e8-62d7c55f11fa","vibe-dms-message-actions.ts","6c855642-aece-11f1-99f1-1607ee4eb77e",340,["D",1789233728377],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs : ACTIONS MESSAGE (vibe-dms-message-actions.ts)\n * Épinglage, recherche dans la conversation, marquage non lu, réactions emoji\n * et suggestion de réponse mAI. Scindé de vibe-dms.ts (limite Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierMaiTokenLimit,\n getUserQuotaBoost,\n getWeekData,\n verifyToken,\n} from \"./config.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport {\n ensureDMTables,\n pushToUsers,\n resolveConversationTarget,\n} from \"./vibe-dms-core.ts\";\n\nexport function registerDMMessageActionRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 4c. PIN / UNPIN MESSAGE (max 3 par conversation, adressage partnerId)\n const handlePinMessage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const body = await c.req.json().catch(() => ({}));\n const messageId = String(body?.message_id || \"\");\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n messageId,\n )\n ) {\n return c.json({ error: \"Message invalide.\" }, 400);\n }\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const target = await resolveConversationTarget(sql, userId, rawKey);\n if (!target) return c.json({ error: \"Conversation introuvable.\" }, 404);\n const conversationId = target.conversationId;\n const msgRows =\n await sql`SELECT id FROM direct_messages WHERE id = ${messageId}::uuid AND conversation_id = ${conversationId}::uuid LIMIT 1`;\n if (msgRows.length === 0) {\n return c.json(\n { error: \"Message introuvable dans cette conversation.\" },\n 404,\n );\n }\n const countRows =\n await sql`SELECT COUNT(*) AS n FROM dm_pinned_messages WHERE conversation_id = ${conversationId}::uuid`;\n if (Number(countRows[0]?.n || 0) >= 3) {\n return c.json({\n error: \"Maximum 3 messages épinglés par conversation.\",\n code: \"PIN_LIMIT\",\n }, 403);\n }\n await sql`\n INSERT INTO dm_pinned_messages (conversation_id, message_id, pinned_by)\n VALUES (${conversationId}::uuid, ${messageId}::uuid, ${userId})\n ON CONFLICT (conversation_id, message_id) DO NOTHING\n `;\n await pushToUsers(target.memberIds, \"dm_pin_updated\", {\n conversation_id: conversationId,\n message_id: messageId,\n pinned: true,\n });\n return c.json({ success: true, pinned: true });\n } catch (err: any) {\n return c.json({ error: \"Erreur épinglage.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/conversations/:partnerId/pin\",\n \"/vibe/dms/conversations/:partnerId/pin\",\n \"/v1/dms/conversations/:partnerId/pin\",\n \"/dms/conversations/:partnerId/pin\",\n ], handlePinMessage);\n\n const handleUnpinMessage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const messageId = String(c.req.param(\"messageId\") || \"\");\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n messageId,\n )\n ) {\n return c.json({ error: \"Paramètres invalides.\" }, 400);\n }\n const sql = getDb();\n const target = await resolveConversationTarget(sql, userId, rawKey);\n if (!target) return c.json({ error: \"Conversation introuvable.\" }, 404);\n await sql`DELETE FROM dm_pinned_messages WHERE conversation_id = ${target.conversationId}::uuid AND message_id = ${messageId}::uuid`;\n await pushToUsers(target.memberIds, \"dm_pin_updated\", {\n conversation_id: target.conversationId,\n message_id: messageId,\n pinned: false,\n });\n return c.json({ success: true, pinned: false });\n } catch (err: any) {\n return c.json({ error: \"Erreur désépinglage.\" }, 500);\n }\n };\n\n registerMulti(\"delete\", [\n \"/api/vibe/dms/conversations/:partnerId/pin/:messageId\",\n \"/vibe/dms/conversations/:partnerId/pin/:messageId\",\n \"/v1/dms/conversations/:partnerId/pin/:messageId\",\n \"/dms/conversations/:partnerId/pin/:messageId\",\n ], handleUnpinMessage);\n\n // 4d. SEARCH IN CONVERSATION (ILIKE sur content, paire user/partner)\n const handleSearchDMMessages = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const q = (c.req.query(\"q\") || \"\").trim();\n if (!q) return c.json({ messages: [] });\n const sql = getDb();\n if (rawKey.startsWith(\"group:\")) {\n const groupId = rawKey.slice(6);\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(groupId)\n ) {\n return c.json({ messages: [] });\n }\n const memberRows = await sql`\n SELECT 1 FROM dm_group_members WHERE conversation_id = ${groupId}::uuid AND user_id = ${userId} LIMIT 1\n `;\n if (memberRows.length === 0) {\n return c.json({ error: \"Accès refusé.\" }, 403);\n }\n const messages = await sql`\n SELECT m.id, m.conversation_id, m.sender_id, m.recipient_id, m.content, u.username as sender_username, m.created_at\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n WHERE m.conversation_id = ${groupId}::uuid\n AND m.content ILIKE ('%' || ${q} || '%')\n AND (m.status IS NULL OR m.status = 'sent')\n AND NOT EXISTS (SELECT 1 FROM dm_hidden_messages h WHERE h.message_id = m.id AND h.user_id = ${userId})\n ORDER BY m.created_at DESC\n LIMIT 30\n `.catch(() => []);\n return c.json({ messages });\n }\n const partnerId = Number(rawKey);\n if (!partnerId) return c.json({ messages: [] });\n const messages = await sql`\n SELECT m.id, m.conversation_id, m.sender_id, m.recipient_id, m.content, m.is_read, m.created_at\n FROM direct_messages m\n WHERE ((m.sender_id = ${userId} AND m.recipient_id = ${partnerId})\n OR (m.sender_id = ${partnerId} AND m.recipient_id = ${userId}))\n AND m.content ILIKE ('%' || ${q} || '%')\n AND (m.status IS NULL OR m.status = 'sent')\n AND NOT EXISTS (SELECT 1 FROM dm_hidden_messages h WHERE h.message_id = m.id AND h.user_id = ${userId})\n ORDER BY m.created_at DESC\n LIMIT 30\n `.catch(() => []);\n return c.json({ messages });\n } catch (err: any) {\n return c.json({ error: \"Erreur recherche conversation.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/dms/messages/:partnerId/search\",\n \"/vibe/dms/messages/:partnerId/search\",\n \"/v1/dms/messages/:partnerId/search\",\n \"/dms/messages/:partnerId/search\",\n ], handleSearchDMMessages);\n\n // 4e. MARK CONVERSATION UNREAD (re-passe le dernier message reçu en non lu)\n const handleMarkUnread = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const sql = getDb();\n if (rawKey.startsWith(\"group:\")) {\n const groupId = rawKey.slice(6);\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(groupId)\n ) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const memberRows = await sql`\n SELECT 1 FROM dm_group_members WHERE conversation_id = ${groupId}::uuid AND user_id = ${userId} LIMIT 1\n `;\n if (memberRows.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const last = await sql`\n SELECT id, read_by FROM direct_messages\n WHERE conversation_id = ${groupId}::uuid AND sender_id <> ${userId}\n AND (status IS NULL OR status = 'sent')\n ORDER BY created_at DESC\n LIMIT 1\n `;\n if (last.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const readers = Array.isArray(last[0].read_by)\n ? (last[0].read_by as any[]).map(String).filter((x) =>\n x !== String(userId)\n )\n : [];\n await sql`UPDATE direct_messages SET read_by = ${\n JSON.stringify(readers)\n }::jsonb WHERE id = ${last[0].id}::uuid`;\n return c.json({ success: true, unread: true });\n }\n const partnerId = Number(rawKey);\n if (!partnerId) return c.json({ error: \"Conversation invalide.\" }, 400);\n const last = await sql`\n SELECT id FROM direct_messages\n WHERE recipient_id = ${userId} AND sender_id = ${partnerId}\n AND (status IS NULL OR status = 'sent')\n ORDER BY created_at DESC\n LIMIT 1\n `;\n if (last.length > 0) {\n await sql`UPDATE direct_messages SET is_read = FALSE, read_at = NULL WHERE id = ${\n last[0].id\n }::uuid`;\n } else {\n // Aucun message reçu : marquer le dernier envoyé pour rouvrir le fil côté client\n const own = await sql`\n SELECT id FROM direct_messages\n WHERE sender_id = ${userId} AND recipient_id = ${partnerId}\n ORDER BY created_at DESC LIMIT 1\n `;\n if (own.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n }\n return c.json({ success: true, unread: true });\n } catch (err: any) {\n return c.json({ error: \"Erreur marquage non lu.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/conversations/:partnerId/mark-unread\",\n \"/vibe/dms/conversations/:partnerId/mark-unread\",\n \"/v1/dms/conversations/:partnerId/mark-unread\",\n \"/dms/conversations/:partnerId/mark-unread\",\n ], handleMarkUnread);\n\n // 4b. REACT TO A DM MESSAGE (toggle emoji)\n const handleReactDM = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const messageId = c.req.param(\"messageId\");\n const { emoji } = await c.req.json();\n\n if (\n !messageId || !emoji || typeof emoji !== \"string\" || emoji.length > 16\n ) {\n return c.json({ error: \"Message et emoji requis.\" }, 400);\n }\n\n const sql = getDb();\n\n // Vérifier que l'utilisateur fait bien partie de la conversation\n // (messages de groupe : le destinataire est NULL → appartenance vérifiée)\n const msgRows = await sql`\n SELECT id, sender_id, recipient_id, conversation_id FROM direct_messages WHERE id = ${messageId}::uuid LIMIT 1\n `;\n if (msgRows.length === 0) {\n return c.json({ error: \"Message introuvable.\" }, 404);\n }\n const msg = msgRows[0];\n if (\n Number(msg.sender_id) !== userId && Number(msg.recipient_id) !== userId\n ) {\n const memberRows = await sql`\n SELECT 1 FROM dm_group_members\n WHERE conversation_id = ${msg.conversation_id}::uuid AND user_id = ${userId}\n LIMIT 1\n `;\n if (memberRows.length === 0) {\n return c.json({ error: \"Accès refusé.\" }, 403);\n }\n }\n\n const existing = await sql`\n SELECT id FROM dm_reactions WHERE message_id = ${messageId}::uuid AND user_id = ${userId} AND emoji = ${emoji} LIMIT 1\n `;\n\n let reacted: boolean;\n if (existing.length > 0) {\n await sql`DELETE FROM dm_reactions WHERE id = ${existing[0].id}`;\n reacted = false;\n } else {\n await sql`\n INSERT INTO dm_reactions (message_id, user_id, emoji)\n VALUES (${messageId}::uuid, ${userId}, ${emoji})\n ON CONFLICT (message_id, user_id, emoji) DO NOTHING\n `;\n reacted = true;\n }\n\n const all = await sql`\n SELECT emoji, user_id FROM dm_reactions WHERE message_id = ${messageId}::uuid\n `;\n const grouped: { emoji: string; count: number; mine: boolean }[] = [];\n for (const r of all) {\n const g = grouped.find((x) => x.emoji === r.emoji);\n if (g) {\n g.count += 1;\n g.mine = g.mine || Number(r.user_id) === userId;\n } else {\n grouped.push({\n emoji: r.emoji,\n count: 1,\n mine: Number(r.user_id) === userId,\n });\n }\n }\n\n return c.json({ success: true, reacted, reactions: grouped });\n } catch (err: any) {\n console.error(\"[vibe-dms] React error:\", err);\n return c.json({ error: \"Erreur réaction.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/messages/:messageId/react\",\n \"/vibe/dms/messages/:messageId/react\",\n \"/v1/dms/messages/:messageId/react\",\n ], handleReactDM);\n\n // 4c. AI-GENERATED REPLY SUGGESTION (mAI dans les DMs)\n const handleDMGenerateReply = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n let partnerId = Number(c.req.param(\"partnerId\"));\n let draft = \"\";\n let preset = \"improve\";\n let customPrompt = \"\";\n let toneValue = \"\";\n\n // Récupération de partner_id, draft/text, preset et customPrompt depuis le corps JSON\n try {\n const body = await c.req.json();\n if (!partnerId && body?.partner_id) {\n partnerId = Number(body.partner_id);\n }\n if (body?.draft && typeof body.draft === \"string\") {\n draft = body.draft.trim();\n } else if (body?.text && typeof body.text === \"string\") {\n draft = body.text.trim();\n }\n if (body?.preset && typeof body.preset === \"string\") {\n preset = body.preset;\n }\n if (body?.custom_prompt && typeof body.custom_prompt === \"string\") {\n customPrompt = body.custom_prompt.trim();\n }\n if (body?.tone && typeof body.tone === \"string\") {\n toneValue = body.tone.trim();\n }\n } catch {}\n\n if (!partnerId) {\n return c.json({ error: \"Identifiant du destinataire manquant.\" }, 400);\n }\n\n // Refuser l'appel si aucun texte n'est présent dans la bulle de message\n if (!draft || !draft.trim()) {\n return c.json(\n {\n error:\n \"Veuillez d'abord écrire un texte dans la bulle de message pour que mAI puisse l'améliorer.\",\n },\n 400,\n );\n }\n\n const sql = getDb();\n // Contexte de la conversation totale (chronologique sans limite réductrice)\n // — calculé AVANT les presets : PRESETS.improve interpole @partnerName.\n const [recent, partnerRow, userRow] = await Promise.all([\n sql`\n SELECT m.content, m.sender_id, u.username as sender_username\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n WHERE (m.sender_id = ${userId} AND m.recipient_id = ${partnerId})\n OR (m.sender_id = ${partnerId} AND m.recipient_id = ${userId})\n ORDER BY m.created_at ASC\n LIMIT 100\n `,\n sql`SELECT username, tier FROM users WHERE id = ${partnerId} LIMIT 1`,\n sql`SELECT username, tier FROM users WHERE id = ${userId} LIMIT 1`,\n ]);\n\n const partnerName = partnerRow[0]?.username || \"votre contact\";\n const userPlan = userRow[0]?.tier || \"Free\";\n\n // Presets d'écriture : Réduire, Allonger, Changer le ton, Améliorer, Personnalisé\n const PRESETS: Record<string, string> = {\n shorten:\n \"Réduis ce message : rends-le plus court et percutant tout en conservant son sens essentiel. Ne perds aucune information importante, supprime les fioritures.\",\n extend:\n \"Allonge ce message : développe-le avec plus de détails, de contexte et de naturel, sans le rendre verbeux ni artificiel.\",\n tone: `Change le ton de ce message : réécris-le avec un ton ${\n toneValue ? `« ${toneValue} »` : \"plus amical et naturel\"\n }, en gardant strictement le même fond et la même intention.`,\n improve:\n \"Améliore, enrichis et perfectionne ce message pour qu'il réponde harmonieusement à @\" +\n partnerName +\n \" dans le fil de la discussion. Préserve fidèlement l'intention de l'utilisateur, améliore la formulation et le naturel en français.\",\n custom: customPrompt\n ? `Applique exactement cette consigne de l'utilisateur à ce message : « ${customPrompt} ».`\n : \"\",\n };\n const presetInstruction = PRESETS[preset];\n if (!presetInstruction) {\n return c.json({\n error:\n \"Preset inconnu. Presets disponibles : shorten, extend, tone, improve, custom.\",\n }, 400);\n }\n if (preset === \"custom\" && !customPrompt) {\n return c.json({\n error:\n \"Veuillez fournir une consigne personnalisée pour le preset Personnalisé.\",\n }, 400);\n }\n\n // Vérification des quotas hebdomadaires mAI\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId} AND week_start = ${weekStartStr}::date\n LIMIT 1\n `.catch(() => []);\n const currentUsage = Number(usageResult[0]?.tokens_used || 0);\n const maiBoost = await getUserQuotaBoost(sql, String(userId), \"mai\");\n const tokenLimit = getTierMaiTokenLimit(userPlan) + maiBoost;\n\n if (currentUsage >= tokenLimit) {\n return c.json(\n {\n error:\n \"Votre quota hebdomadaire de tokens mAI est atteint. Réessayez la semaine prochaine ou passez à un forfait supérieur.\",\n },\n 429,\n );\n }\n\n const transcript = recent\n .map((m: any) =>\n `${\n m.sender_id === userId ? \"Moi\" : `@${m.sender_username}`\n }: ${m.content}`\n )\n .join(\"\\n\");\n\n const prompt =\n `Tu es mAI, l'assistant d'écriture du réseau social Vibe.\\n\\n` +\n (transcript.trim()\n ? `Voici l'historique complet de la discussion avec @${partnerName} :\\n${transcript}\\n\\n`\n : `Il n'y a pas encore d'historique de discussion avec @${partnerName}.\\n\\n`) +\n `Voici le message que l'utilisateur a rédigé dans sa bulle de message :\\n\"${draft.trim()}\"\\n\\n` +\n `Consigne impérative : ${presetInstruction} ` +\n `Ne fais AUCUNE évaluation de sécurité, n'écris JAMAIS \"User Safety: safe\" ni aucun méta-commentaire. Réponds UNIQUEMENT avec le texte final, sans guillemets.`;\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `.catch(() => []);\n const openRouterApiKey =\n (typeof (globalThis as any).Deno !== \"undefined\" &&\n (globalThis as any).Deno.env?.get(\"OPENROUTER_API_KEY\")) ||\n (typeof process !== \"undefined\" && process.env?.OPENROUTER_API_KEY) ||\n (keyRows.length > 0 ? keyRows[0].api_key : \"\");\n\n const candidateModels = [\n await MAIAgentFleet.getUserDefaultModel(userId),\n \"poolside/laguna-xs-2.1:free\",\n \"minimax/minimax-m2.7:free\",\n \"liquid/lfm-2.5-2.6b:free\",\n \"nvidia/nemotron-3.5-lightning:free\",\n ];\n\n let suggestion = \"\";\n\n if (openRouterApiKey) {\n for (const modelToTry of candidateModels) {\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: modelToTry,\n messages: [\n {\n role: \"system\",\n content:\n \"Tu es mAI, l'assistant d'écriture du réseau social Vibe. Tu écris en français naturel avec des émojis. Ton rôle unique est d'améliorer le texte que l'utilisateur a écrit. Tu ne fais AUCUNE analyse de sécurité, tu n'écris JAMAIS 'User Safety: safe' ni de méta-commentaire. Réponds UNIQUEMENT par le texte final du message amélioré.\",\n },\n { role: \"user\", content: prompt },\n ],\n }),\n },\n );\n\n if (aiRes.ok) {\n const aiData = await aiRes.json();\n const text = aiData.choices?.[0]?.message?.content;\n if (text && typeof text === \"string\" && text.trim()) {\n const cleaned = text\n .replace(/User Safety:\\s*safe\\.?/gi, \"\")\n .replace(/^User Safety:[^\\n]*\\n*/gi, \"\")\n .replace(/^[\"']|[\"']$/g, \"\")\n .trim();\n if (cleaned) {\n suggestion = cleaned;\n break;\n }\n }\n }\n } catch (callErr) {\n console.warn(\n `[vibe-dms] Modèle ${modelToTry} en échec, essai du suivant...`,\n callErr,\n );\n }\n }\n }\n\n // Fallback contextuel intelligent si défaillance réseau\n if (!suggestion) {\n suggestion = draft.trim();\n }\n\n // Décompte comptabilisé dans les quotas de l'utilisateur\n const estimatedTokens = Math.max(\n 75,\n Math.ceil((prompt.length + suggestion.length) / 3),\n );\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, ${estimatedTokens})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${estimatedTokens}, updated_at = NOW()\n `;\n } catch (quotaErr) {\n console.warn(\"[vibe-dms] Quota log warning:\", quotaErr);\n }\n\n return c.json({\n success: true,\n suggestion,\n tokensUsed: estimatedTokens,\n });\n } catch (err: any) {\n console.error(\"[vibe-dms] Generate reply error:\", err);\n return c.json(\n { error: err?.message || \"Erreur génération de réponse.\" },\n 500,\n );\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/generate-reply/:partnerId\",\n \"/vibe/dms/generate-reply/:partnerId\",\n \"/v1/dms/generate-reply/:partnerId\",\n \"/api/vibe/dms/suggest-reply\",\n \"/vibe/dms/suggest-reply\",\n \"/v1/dms/suggest-reply\",\n ], handleDMGenerateReply);\n}",[564],"43961400-f0fd-47a6-b174-17d855802c43","vibe-dms-groups.ts","6345d390-aece-11f1-91d9-1607ee4eb77e",337,["D",1789233699297],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs : GROUPES (vibe-dms-groups.ts)\n * Création/gestion des groupes, masquage local des messages et traductions\n * mémorisées. Scindé de vibe-dms.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport {\n assertMessageAccess,\n ensureDMTables,\n pushToUsers,\n} from \"./vibe-dms-core.ts\";\n\nexport function registerDMGroupRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // ═════════════════════════════════════════════════════════════\n // 5. CONVERSATIONS DE GROUPE (migration 019, admin unique = créateur)\n // ═════════════════════════════════════════════════════════════\n\n /** Crée un groupe : { name, member_ids: number[] } — le créateur devient admin. */\n const handleCreateGroup = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const { name, member_ids } = await c.req.json();\n const groupName = String(name || \"Nouveau groupe\").trim().slice(0, 100) ||\n \"Nouveau groupe\";\n const memberIds = Array.isArray(member_ids)\n ? Array.from(\n new Set(\n member_ids.map((x: any) => Number(x)).filter((n: number) =>\n n && n !== userId\n ),\n ),\n ).slice(0, 49)\n : [];\n if (memberIds.length === 0) {\n return c.json({ error: \"Au moins un membre est requis.\" }, 400);\n }\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const conv = await sql`\n INSERT INTO dm_conversations (participant_one_id, participant_two_id, is_group, group_name, created_by, last_message_preview, last_message_at)\n VALUES (${userId}, NULL, TRUE, ${groupName}, ${userId}, 'Groupe créé', NOW())\n RETURNING id\n `;\n const conversationId = String(conv[0].id);\n const allMembers = [userId, ...memberIds];\n for (const mid of allMembers) {\n await sql`\n INSERT INTO dm_group_members (conversation_id, user_id, role, added_by)\n VALUES (${conversationId}::uuid, ${mid}, ${\n mid === userId ? \"admin\" : \"member\"\n }, ${userId})\n ON CONFLICT (conversation_id, user_id) DO NOTHING\n `;\n if (mid !== userId) {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${mid}, ${userId}, 'dm', ${`vous a ajouté au groupe « ${groupName} »`})\n `.catch(() => {});\n try {\n await pushRealtimeEvent(mid, \"group_updated\", {\n conversation_id: conversationId,\n action: \"added\",\n });\n } catch {}\n }\n }\n return c.json({\n success: true,\n conversation_id: conversationId,\n name: groupName,\n member_count: allMembers.length,\n }, 201);\n } catch (err: any) {\n console.error(\"[vibe-dms] createGroup error:\", err);\n return c.json({ error: \"Erreur création groupe.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/groups\",\n \"/vibe/dms/groups\",\n \"/v1/dms/groups\",\n ], handleCreateGroup);\n\n /** Ajoute des membres (admin uniquement) — les ajoutés récupèrent tout l'historique. */\n const handleAddGroupMembers = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n const { member_ids } = await c.req.json();\n const memberIds = Array.isArray(member_ids)\n ? Array.from(\n new Set(member_ids.map((x: any) => Number(x)).filter(Boolean)),\n ).slice(0, 49)\n : [];\n if (memberIds.length === 0) {\n return c.json({ error: \"Aucun membre à ajouter.\" }, 400);\n }\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const convRows =\n await sql`SELECT is_group, group_name, created_by FROM dm_conversations WHERE id = ${groupId}::uuid LIMIT 1`;\n const conv = convRows[0];\n if (!conv || !conv.is_group) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n if (Number(conv.created_by) !== userId) {\n return c.json({\n error: \"Seul l'administrateur du groupe peut ajouter des membres.\",\n }, 403);\n }\n\n const groupName = String(conv.group_name || \"Groupe\");\n let added = 0;\n for (const mid of memberIds) {\n const res = await sql`\n INSERT INTO dm_group_members (conversation_id, user_id, role, added_by)\n VALUES (${groupId}::uuid, ${mid}, 'member', ${userId})\n ON CONFLICT (conversation_id, user_id) DO NOTHING\n RETURNING id\n `;\n if (res.length > 0) {\n added += 1;\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${mid}, ${userId}, 'dm', ${`vous a ajouté au groupe « ${groupName} »`})\n `.catch(() => {});\n // Le nouveau membre récupère tout l'historique : aucun filtrage nécessaire.\n try {\n await pushRealtimeEvent(mid, \"group_updated\", {\n conversation_id: groupId,\n action: \"added\",\n });\n } catch {}\n }\n }\n return c.json({ success: true, added, history_shared: true });\n } catch (err: any) {\n console.error(\"[vibe-dms] addGroupMembers error:\", err);\n return c.json({ error: \"Erreur ajout membres.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/groups/:groupId/members\",\n \"/vibe/dms/groups/:groupId/members\",\n \"/v1/dms/groups/:groupId/members\",\n ], handleAddGroupMembers);\n\n /** Retire un membre (admin uniquement) ou quitte le groupe soi-même. */\n const handleRemoveGroupMember = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n const targetId = Number(c.req.param(\"userId\"));\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const convRows =\n await sql`SELECT created_by FROM dm_conversations WHERE id = ${groupId}::uuid LIMIT 1`;\n if (convRows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n const isAdmin = Number(convRows[0].created_by) === userId;\n // Soit l'admin retire quelqu'un, soit chacun se retire lui-même\n if (!isAdmin && targetId !== userId) {\n return c.json({\n error: \"Seul l'administrateur peut retirer un membre.\",\n }, 403);\n }\n if (targetId === Number(convRows[0].created_by)) {\n return c.json({\n error: \"L'administrateur ne peut pas quitter son propre groupe.\",\n }, 400);\n }\n\n await sql`DELETE FROM dm_group_members WHERE conversation_id = ${groupId}::uuid AND user_id = ${targetId}`;\n try {\n await pushRealtimeEvent(targetId, \"group_updated\", {\n conversation_id: groupId,\n action: \"removed\",\n });\n } catch {}\n return c.json({ success: true, removed: targetId });\n } catch (err: any) {\n return c.json({ error: \"Erreur retrait membre.\" }, 500);\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/dms/groups/:groupId/members/:userId\",\n \"/vibe/dms/groups/:groupId/members/:userId\",\n \"/v1/dms/groups/:groupId/members/:userId\",\n ], handleRemoveGroupMember);\n\n /** Détails du groupe (nom, membres) pour l'affichage + gestion. */\n const handleGetGroup = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const rows = await sql`\n SELECT dm.id, dm.group_name, dm.group_avatar_url, dm.created_by, dm.last_message_at,\n (dm.created_by = ${userId}) as is_admin\n FROM dm_conversations dm\n JOIN dm_group_members gm ON gm.conversation_id = dm.id AND gm.user_id = ${userId}\n WHERE dm.id = ${groupId}::uuid\n LIMIT 1\n `;\n if (rows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n const members = await sql`\n SELECT gm.user_id, gm.role, gm.joined_at, u.username,\n pr.display_name, pr.avatar_url\n FROM dm_group_members gm\n JOIN users u ON u.id = gm.user_id\n LEFT JOIN profiles pr ON pr.user_id = gm.user_id\n WHERE gm.conversation_id = ${groupId}::uuid\n ORDER BY gm.joined_at ASC\n `;\n return c.json({ group: { ...rows[0], members } });\n } catch (err: any) {\n return c.json({ error: \"Erreur détails groupe.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/dms/groups/:groupId\",\n \"/vibe/dms/groups/:groupId\",\n \"/v1/dms/groups/:groupId\",\n ], handleGetGroup);\n\n // 6. MASQUER UN MESSAGE (« supprimer pour moi », sans toucher aux autres membres)\n const handleHideMessage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const messageId = String(c.req.param(\"messageId\") || \"\");\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n messageId,\n )\n ) {\n return c.json({ error: \"Message invalide.\" }, 400);\n }\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const access = await assertMessageAccess(sql, userId, messageId);\n if (!access.ok) {\n return c.json({ error: access.error }, access.code as any);\n }\n await sql`\n INSERT INTO dm_hidden_messages (user_id, message_id)\n VALUES (${userId}, ${messageId}::uuid)\n ON CONFLICT (user_id, message_id) DO NOTHING\n `;\n return c.json({ success: true, hidden: true });\n } catch (err: any) {\n console.error(\"[vibe-dms] Hide message error:\", err);\n return c.json({ error: \"Erreur masquage message.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/messages/:messageId/hide\",\n \"/vibe/dms/messages/:messageId/hide\",\n \"/v1/dms/messages/:messageId/hide\",\n ], handleHideMessage);\n\n // 7. TRADUCTION MÉMORISÉE D'UN MESSAGE (max 3 langues conservées)\n const handleSaveTranslation = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const messageId = String(c.req.param(\"messageId\") || \"\");\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n messageId,\n )\n ) {\n return c.json({ error: \"Message invalide.\" }, 400);\n }\n const { lang, text, detected } = await c.req.json().catch(() => ({}));\n const cleanLang = String(lang || \"\").trim().toLowerCase().slice(0, 12);\n const cleanText = String(text || \"\").trim().slice(0, 5000);\n if (!cleanLang || !cleanText) {\n return c.json({ error: \"Langue et texte requis.\" }, 400);\n }\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const access = await assertMessageAccess(sql, userId, messageId);\n if (!access.ok) {\n return c.json({ error: access.error }, access.code as any);\n }\n\n const rows =\n await sql`SELECT translations FROM direct_messages WHERE id = ${messageId}::uuid LIMIT 1`;\n const current: Record<string, any> =\n (rows[0]?.translations && typeof rows[0].translations === \"object\")\n ? { ...rows[0].translations }\n : {};\n current[cleanLang] = {\n text: cleanText,\n detected: detected ? String(detected).slice(0, 12) : null,\n at: new Date().toISOString(),\n };\n // Conserver au maximum les 3 langues les plus récentes\n const keys = Object.keys(current);\n if (keys.length > 3) {\n keys\n .sort((a, b) =>\n Date.parse(current[a]?.at || 0) - Date.parse(current[b]?.at || 0)\n )\n .slice(0, keys.length - 3)\n .forEach((k) => delete current[k]);\n }\n await sql`UPDATE direct_messages SET translations = ${\n JSON.stringify(current)\n }::jsonb WHERE id = ${messageId}::uuid`;\n return c.json({ success: true, translations: current });\n } catch (err: any) {\n console.error(\"[vibe-dms] Save translation error:\", err);\n return c.json({ error: \"Erreur enregistrement traduction.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/messages/:messageId/translations\",\n \"/vibe/dms/messages/:messageId/translations\",\n \"/v1/dms/messages/:messageId/translations\",\n ], handleSaveTranslation);\n\n // 8. MISE À JOUR DU GROUPE (admin : nom et/ou avatar)\n const handleUpdateGroup = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n const { name, avatar_url } = await c.req.json().catch(() => ({}));\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const convRows =\n await sql`SELECT created_by, group_name, group_avatar_url FROM dm_conversations WHERE id = ${groupId}::uuid AND is_group = TRUE LIMIT 1`;\n if (convRows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n if (Number(convRows[0].created_by) !== userId) {\n return c.json({\n error: \"Seul l'administrateur du groupe peut le modifier.\",\n }, 403);\n }\n\n if (name !== undefined) {\n const groupName = String(name).trim().slice(0, 100);\n if (!groupName) {\n return c.json({ error: \"Le nom du groupe est requis.\" }, 400);\n }\n await sql`UPDATE dm_conversations SET group_name = ${groupName} WHERE id = ${groupId}::uuid`;\n }\n if (avatar_url !== undefined) {\n const url = avatar_url === null\n ? null\n : String(avatar_url).trim().slice(0, 1000) || null;\n await sql`UPDATE dm_conversations SET group_avatar_url = ${url} WHERE id = ${groupId}::uuid`;\n }\n\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid`;\n await pushToUsers(\n (memberRows as any[]).map((r) => Number(r.user_id)),\n \"group_updated\",\n { conversation_id: groupId, action: \"updated\" },\n );\n const updated =\n await sql`SELECT group_name, group_avatar_url FROM dm_conversations WHERE id = ${groupId}::uuid LIMIT 1`;\n return c.json({ success: true, group: updated[0] || null });\n } catch (err: any) {\n console.error(\"[vibe-dms] updateGroup error:\", err);\n return c.json({ error: \"Erreur mise à jour groupe.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/groups/:groupId\",\n \"/vibe/dms/groups/:groupId\",\n \"/v1/dms/groups/:groupId\",\n ], handleUpdateGroup);\n\n // 9. SUPPRESSION DU GROUPE (admin)\n const handleDeleteGroup = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const convRows =\n await sql`SELECT created_by FROM dm_conversations WHERE id = ${groupId}::uuid AND is_group = TRUE LIMIT 1`;\n if (convRows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n if (Number(convRows[0].created_by) !== userId) {\n return c.json({\n error: \"Seul l'administrateur du groupe peut le supprimer.\",\n }, 403);\n }\n\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid`;\n const memberIds = (memberRows as any[]).map((r) => Number(r.user_id));\n await sql`DELETE FROM dm_reactions WHERE message_id IN (SELECT id FROM direct_messages WHERE conversation_id = ${groupId}::uuid)`\n .catch(() => {});\n await sql`DELETE FROM direct_messages WHERE conversation_id = ${groupId}::uuid`;\n await sql`DELETE FROM dm_conversations WHERE id = ${groupId}::uuid`;\n await pushToUsers(memberIds, \"group_updated\", {\n conversation_id: groupId,\n action: \"deleted\",\n });\n return c.json({ success: true, deleted: groupId });\n } catch (err: any) {\n console.error(\"[vibe-dms] deleteGroup error:\", err);\n return c.json({ error: \"Erreur suppression groupe.\" }, 500);\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/dms/groups/:groupId\",\n \"/vibe/dms/groups/:groupId\",\n \"/v1/dms/groups/:groupId\",\n ], handleDeleteGroup);\n\n // 10. TRANSFERT D'ADMINISTRATION DU GROUPE (admin → membre)\n const handleTransferGroupAdmin = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const groupId = c.req.param(\"groupId\");\n const targetId = Number(c.req.param(\"userId\"));\n if (!targetId || targetId === userId) {\n return c.json({ error: \"Cible invalide.\" }, 400);\n }\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const convRows =\n await sql`SELECT created_by FROM dm_conversations WHERE id = ${groupId}::uuid AND is_group = TRUE LIMIT 1`;\n if (convRows.length === 0) {\n return c.json({ error: \"Groupe introuvable.\" }, 404);\n }\n if (Number(convRows[0].created_by) !== userId) {\n return c.json({\n error: \"Seul l'administrateur peut transférer son rôle.\",\n }, 403);\n }\n const targetMember = await sql`\n SELECT 1 FROM dm_group_members WHERE conversation_id = ${groupId}::uuid AND user_id = ${targetId} LIMIT 1\n `;\n if (targetMember.length === 0) {\n return c.json(\n { error: \"Ce membre ne fait pas partie du groupe.\" },\n 404,\n );\n }\n\n await sql`UPDATE dm_group_members SET role = 'member' WHERE conversation_id = ${groupId}::uuid AND user_id = ${userId}`;\n await sql`UPDATE dm_group_members SET role = 'admin' WHERE conversation_id = ${groupId}::uuid AND user_id = ${targetId}`;\n await sql`UPDATE dm_conversations SET created_by = ${targetId} WHERE id = ${groupId}::uuid`;\n\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid`;\n await pushToUsers(\n (memberRows as any[]).map((r) => Number(r.user_id)),\n \"group_updated\",\n { conversation_id: groupId, action: \"admin_transferred\" },\n );\n return c.json({ success: true, new_admin: targetId });\n } catch (err: any) {\n console.error(\"[vibe-dms] transferGroupAdmin error:\", err);\n return c.json({ error: \"Erreur transfert administration.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/dms/groups/:groupId/members/:userId/transfer-admin\",\n \"/vibe/dms/groups/:groupId/members/:userId/transfer-admin\",\n \"/v1/dms/groups/:groupId/members/:userId/transfer-admin\",\n ], handleTransferGroupAdmin);\n}",[571],"20a1214b-17c6-4c57-9c98-10cf6ecbb42e","vibe-dms-core.ts","5c3d9f9c-aece-11f1-9133-1607ee4eb77e",341,["D",1789311921611],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs : SOCLE PARTAGÉ (vibe-dms-core.ts)\n * Tables DM (ensureDMTables), compte officiel mAI, helpers SSE et requêtes\n * communes aux routes DMs. Scindé de vibe-dms.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport {\n getDb,\n getTierMaiTokenLimit,\n getUserQuotaBoost,\n getWeekData,\n isPaidTier,\n} from \"./config.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { stripHtmlTags } from \"./vibe-posts-core.ts\";\n\n/** Longueurs maximales d'un message privé (texte brut, HTML décompté) par forfait. */\nexport const DM_MESSAGE_CHARS_FREE = 3000;\nexport const DM_MESSAGE_CHARS_PAID = 10000;\nexport const dmPlainLength = (content: unknown): number =>\n stripHtmlTags(String(content ?? \"\")).length;\n\n/** Limite du compte : 10 000 caractères pour Plus/Pro/Max, 3 000 sinon. */\nexport const getDmMessageCharLimit = async (\n sql: any,\n userId: number,\n): Promise<number> => {\n try {\n const rows = await sql`SELECT tier FROM users WHERE id = ${userId} LIMIT 1`;\n return isPaidTier(rows[0]?.tier)\n ? DM_MESSAGE_CHARS_PAID\n : DM_MESSAGE_CHARS_FREE;\n } catch {\n return DM_MESSAGE_CHARS_FREE;\n }\n};\n\n/**\n * Crée les tables de modération DM si besoin (idempotent, exécuté une fois).\n * — blocked_users : relations de blocage\n * — dm_reports : signalements\n * — dm_conv_meta : métadonnées locales par utilisateur (renommage conversation)\n * — dm_reactions : réactions emoji + colonne reply_to_id (réponses)\n */\nlet dmTablesReady = false;\nexport async function ensureDMTables() {\n if (dmTablesReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS blocked_users (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n blocked_user_id BIGINT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (user_id, blocked_user_id)\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS muted_users (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n muted_user_id BIGINT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (user_id, muted_user_id)\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS dm_reports (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n reporter_id BIGINT NOT NULL,\n reported_user_id BIGINT,\n message_id UUID,\n reason TEXT,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS dm_conv_meta (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n partner_id BIGINT NOT NULL,\n custom_name TEXT,\n UNIQUE (user_id, partner_id)\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS dm_reactions (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n message_id UUID NOT NULL,\n user_id BIGINT NOT NULL,\n emoji TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (message_id, user_id, emoji)\n )\n `;\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS reply_to_id UUID`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS is_edited BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS edited_at TIMESTAMPTZ`\n .catch(() => {});\n // Messages de groupe (migration 019) : conversations multi-participants\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS is_group BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n // Les groupes utilisent participant_two_id = NULL (plusieurs groupes par compte\n // malgré UNIQUE(participant_one_id, participant_two_id) — les NULL sont distincts)\n await sql`ALTER TABLE dm_conversations ALTER COLUMN participant_two_id DROP NOT NULL`\n .catch(() => {});\n // Les messages de groupe n'ont pas de destinataire unique (lecture via read_by)\n await sql`ALTER TABLE direct_messages ALTER COLUMN recipient_id DROP NOT NULL`\n .catch(() => {});\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS group_name VARCHAR(100)`\n .catch(() => {});\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS group_avatar_url TEXT`\n .catch(() => {});\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS created_by BIGINT`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS dm_group_members (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n conversation_id UUID NOT NULL REFERENCES dm_conversations(id) ON DELETE CASCADE,\n user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n role VARCHAR(20) DEFAULT 'member',\n joined_at TIMESTAMPTZ DEFAULT NOW(),\n added_by BIGINT,\n UNIQUE (conversation_id, user_id)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_group_members_conv ON dm_group_members(conversation_id)`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_group_members_user ON dm_group_members(user_id)`\n .catch(() => {});\n // Mentions urgentes (@tous / @utilisateur) + lecture multi-membres (groupes)\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS mentions JSONB DEFAULT '[]'`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS urgent_mentions JSONB DEFAULT '[]'`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS read_by JSONB DEFAULT '[]'`\n .catch(() => {});\n // Messages programmés (même mécanique que les posts planifiés)\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS status VARCHAR(20) DEFAULT 'sent'`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS send_at TIMESTAMPTZ`\n .catch(() => {});\n await sql`UPDATE direct_messages SET status = 'sent' WHERE status IS NULL`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_dm_scheduled ON direct_messages(status, send_at) WHERE status = 'scheduled'`\n .catch(() => {});\n // Traduction mémorisée, transfert (attribution) et masquage local (« pour moi »)\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS translations JSONB DEFAULT '{}'`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS forwarded_from JSONB`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS dm_hidden_messages (\n user_id BIGINT NOT NULL,\n message_id UUID NOT NULL REFERENCES direct_messages(id) ON DELETE CASCADE,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (user_id, message_id)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_dm_hidden_user ON dm_hidden_messages(user_id)`\n .catch(() => {});\n // Messages épinglés (max 3 par conversation, visibles des deux participants)\n await sql`\n CREATE TABLE IF NOT EXISTS dm_pinned_messages (\n conversation_id UUID NOT NULL,\n message_id UUID NOT NULL REFERENCES direct_messages(id) ON DELETE CASCADE,\n pinned_by BIGINT NOT NULL,\n pinned_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (conversation_id, message_id)\n )\n `.catch(() => {});\n // Conversations de Livre (chantier « Livres dans Messages ») : rattachement\n // d'une conversation de groupe à un Livre. Pas de FK : vibe_books peut ne\n // pas encore exister au démarrage.\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS book_id UUID`\n .catch(() => {});\n await sql`CREATE UNIQUE INDEX IF NOT EXISTS idx_dm_conversations_book ON dm_conversations(book_id) WHERE book_id IS NOT NULL`\n .catch(() => {});\n // Publication jointe à un message (carte cliquable dans les conversations de Livre)\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS attached_post_id UUID`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_dm_attached_post ON direct_messages(attached_post_id) WHERE attached_post_id IS NOT NULL`\n .catch(() => {});\n dmTablesReady = true;\n } catch (err) {\n console.warn(\"[vibe-dms] ensureDMTables skipped:\", (err as any)?.message);\n }\n}\n\n/**\n * Compte officiel mAI (pseudo-utilisateur) : répond automatiquement aux DMs.\n * Seed idempotent — même pattern que la migration 005 du compte @bot.\n */\nlet maiAccountReady = false;\nexport async function ensureMAIAccount() {\n if (maiAccountReady) return;\n try {\n const sql = getDb();\n await sql`\n INSERT INTO users (username, email, password_hash, tier, avatar_url, is_verified)\n VALUES (\n 'mai',\n 'mai@vibe.ai',\n '$2a$10$mAIvibeOfficialAccountNoLoginAllowedxxxxxxxxxxxxxxxxxxxx',\n 'Max',\n 'https://api.dicebear.com/7.x/bottts/svg?seed=mai-vibe',\n TRUE\n )\n ON CONFLICT (username) DO UPDATE\n SET is_verified = TRUE,\n tier = 'Max',\n avatar_url = 'https://api.dicebear.com/7.x/bottts/svg?seed=mai-vibe'\n `;\n await sql`\n INSERT INTO profiles (user_id, display_name, bio, avatar_url, is_verified)\n SELECT id, 'mAI', 'L''intelligence artificielle officielle de Vibe. Écrivez-moi en message privé : je réponds à toutes vos questions. ✨', 'https://api.dicebear.com/7.x/bottts/svg?seed=mai-vibe', TRUE\n FROM users WHERE username = 'mai'\n ON CONFLICT (user_id) DO UPDATE SET\n display_name = 'mAI',\n bio = 'L''intelligence artificielle officielle de Vibe. Écrivez-moi en message privé : je réponds à toutes vos questions. ✨',\n avatar_url = 'https://api.dicebear.com/7.x/bottts/svg?seed=mai-vibe',\n is_verified = TRUE\n `;\n await sql`\n INSERT INTO user_settings (user_id, allow_dms)\n SELECT id, 'everyone' FROM users WHERE username = 'mai'\n ON CONFLICT (user_id) DO NOTHING\n `;\n maiAccountReady = true;\n } catch (err) {\n console.warn(\"[vibe-dms] ensureMAIAccount skipped:\", (err as any)?.message);\n }\n}\n\n/** Identifiant du compte système @mai (auteur des réponses IA), ou null. */\nexport async function getMAIUserId(sql: any): Promise<number | null> {\n try {\n const rows =\n await sql`SELECT id FROM users WHERE LOWER(username) = 'mai' LIMIT 1`;\n return rows.length > 0 ? Number(rows[0].id) : null;\n } catch {\n return null;\n }\n}\n\n/**\n * Réponse automatique du compte mAI à un DM : génère une réponse avec\n * OpenRouter en tenant compte de l'historique de la conversation, puis\n * débite l'usage hebdomadaire de l'expéditeur.\n */\nexport async function generateMAIDMReply(\n sql: any,\n conversationId: string,\n senderId: number,\n maiUserId: number,\n senderMessage: string,\n) {\n try {\n // Historique de la conversation DM (contexte complet pour mAI)\n const historyRows = await sql`\n SELECT m.content, m.sender_id, u.username as sender_username\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n WHERE m.conversation_id = ${conversationId}::uuid\n ORDER BY m.created_at DESC\n LIMIT 40\n `.catch(() => []);\n const transcript = historyRows\n .reverse()\n .map((m: any) =>\n `${\n m.sender_id === maiUserId ? \"mAI\" : `@${m.sender_username}`\n }: ${m.content}`\n )\n .join(\"\\n\");\n\n // Quota hebdomadaire mAI de l'expéditeur\n const { weekStartStr } = getWeekData();\n const [usageRow, senderRow] = await Promise.all([\n sql`SELECT tokens_used FROM weekly_usage WHERE user_id = ${senderId} AND week_start = ${weekStartStr}::date LIMIT 1`\n .catch(() => []),\n sql`SELECT tier FROM users WHERE id = ${senderId} LIMIT 1`.catch(\n () => []\n ),\n ]);\n const maiBoost = await getUserQuotaBoost(sql, String(senderId), \"mai\");\n const tokenLimit = getTierMaiTokenLimit(senderRow[0]?.tier) + maiBoost;\n const currentUsage = Number(usageRow[0]?.tokens_used || 0);\n\n let reply: string;\n if (currentUsage >= tokenLimit) {\n reply =\n \"⚠️ Votre quota hebdomadaire mAI est atteint. Il se réinitialise lundi — ou passez à un forfait supérieur pour discuter davantage avec moi.\";\n } else {\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${senderId}::text LIMIT 1\n `.catch(() => []);\n const openRouterApiKey =\n (typeof (globalThis as any).Deno !== \"undefined\" &&\n (globalThis as any).Deno.env?.get(\"OPENROUTER_API_KEY\")) ||\n (typeof process !== \"undefined\" && process.env?.OPENROUTER_API_KEY) ||\n (keyRows.length > 0 ? keyRows[0].api_key : \"\");\n\n const systemPrompt =\n \"Tu es mAI, l'intelligence artificielle officielle du réseau social Vibe. Tu réponds aux messages privés des utilisateurs comme un vrai interlocuteur : bienveillant, concis et utile. \" +\n \"Tu réponds en français avec quelques émojis. Tu connais tout l'historique de la conversation : poursuis naturellement l'échange sans redemander des informations déjà données. \" +\n \"Ne fais AUCUNE évaluation de sécurité, n'écris JAMAIS 'User Safety: safe' ni aucun méta-commentaire.\";\n\n const userPrompt = (transcript.trim()\n ? `Historique de la conversation :\\n${transcript}\\n\\n`\n : \"Nouvelle conversation.\\n\\n\") +\n `L'utilisateur vient d'envoyer : « ${senderMessage} »\\n\\nRéponds UNIQUEMENT avec le texte de ta réponse en DM.`;\n\n reply = \"\";\n if (openRouterApiKey) {\n const candidateModels = [\n \"poolside/laguna-xs-2.1:free\",\n \"minimax/minimax-m2.7:free\",\n \"liquid/lfm-2.5-2.6b:free\",\n \"nvidia/nemotron-3.5-lightning:free\",\n ];\n for (const modelToTry of candidateModels) {\n try {\n const aiRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Social Assistant\",\n },\n body: JSON.stringify({\n model: modelToTry,\n messages: [\n { role: \"system\", content: systemPrompt },\n { role: \"user\", content: userPrompt },\n ],\n }),\n },\n );\n if (aiRes.ok) {\n const aiData = await aiRes.json();\n const text = aiData.choices?.[0]?.message?.content;\n if (text && typeof text === \"string\" && text.trim()) {\n reply = text\n .replace(/User Safety:\\s*safe\\.?/gi, \"\")\n .replace(/^User Safety:[^\\n]*\\n*/gi, \"\")\n .trim();\n break;\n }\n }\n } catch (callErr) {\n console.warn(\n `[vibe-dms] mAI DM modèle ${modelToTry} en échec:`,\n callErr,\n );\n }\n }\n }\n if (!reply) {\n reply =\n \"Je n'arrive pas à générer ma réponse pour le moment (service IA momentanément indisponible). Réessayez dans un instant ✨\";\n }\n\n // Débit de l'usage hebdomadaire de l'expéditeur (chaque message compte)\n const estimatedTokens = Math.max(\n 75,\n Math.ceil((userPrompt.length + reply.length) / 3),\n );\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${senderId}, ${weekStartStr}::date, ${estimatedTokens})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${estimatedTokens}, updated_at = NOW()\n `.catch(() => {});\n }\n\n // Insertion de la réponse mAI dans la conversation\n const maiMsg = await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, recipient_id, content)\n VALUES (${conversationId}::uuid, ${maiUserId}, ${senderId}, ${reply})\n RETURNING *\n `;\n await sql`\n UPDATE dm_conversations SET last_message_preview = ${\n reply.slice(0, 120)\n }, last_message_at = NOW()\n WHERE id = ${conversationId}::uuid\n `.catch(() => {});\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${senderId}, ${maiUserId}, 'dm', 'vous a envoyé un message')\n `.catch(() => {});\n\n // Temps réel : pousse la réponse mAI à l'expéditeur (flux SSE)\n try {\n await pushRealtimeEvent(\n senderId,\n \"dm_message\",\n maiMsg[0] || {\n conversation_id: conversationId,\n sender_id: maiUserId,\n recipient_id: senderId,\n content: reply,\n },\n );\n } catch {}\n } catch (err) {\n console.warn(\n \"[vibe-dms] generateMAIDMReply failed:\",\n (err as any)?.message,\n );\n }\n}\n\n/**\n * Publication paresseuse des DMs programmés arrivés à échéance (miroir\n * publishDuePosts) : appelée en tête de handleDMMessages, throttle 30 s.\n */\nlet lastDMpublishCheck = 0;\nexport async function publishScheduledDMs(): Promise<void> {\n const now = Date.now();\n if (now - lastDMpublishCheck < 30_000) return;\n lastDMpublishCheck = now;\n try {\n const sql = getDb();\n const due = await sql`\n UPDATE direct_messages\n SET status = 'sent', send_at = NULL\n WHERE status = 'scheduled' AND send_at IS NOT NULL AND send_at <= NOW()\n RETURNING *\n `.catch(() => []);\n for (const m of due || []) {\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${m.recipient_id}, ${m.sender_id}, 'dm', 'vous a envoyé un message')\n `.catch(() => {});\n await pushRealtimeEvent(Number(m.recipient_id), \"dm_message\", m);\n } catch {}\n }\n } catch (err) {\n console.warn(\n \"[vibe-dms] publishScheduledDMs skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Résout l'UUID de conversation dm_conversations depuis (userId, partnerId). */\nexport async function resolveConversationId(\n sql: any,\n userId: number,\n partnerId: number,\n): Promise<string | null> {\n try {\n const p1 = userId < partnerId ? userId : partnerId;\n const p2 = userId < partnerId ? partnerId : userId;\n const rows = await sql`\n SELECT id FROM dm_conversations\n WHERE participant_one_id = ${p1} AND participant_two_id = ${p2}\n LIMIT 1\n `;\n return rows[0] ? String(rows[0].id) : null;\n } catch {\n return null;\n }\n}\n\n/**\n * Résout une conversation depuis un partnerId brut : \"123\" (1-à-1) ou\n * \"group:<uuid>\" (groupe). Vérifie l'appartenance de l'utilisateur et\n * retourne les membres pour la diffusion SSE.\n */\nexport async function resolveConversationTarget(\n sql: any,\n userId: number,\n raw: string,\n): Promise<\n { conversationId: string; isGroup: boolean; memberIds: number[] } | null\n> {\n try {\n if (raw.startsWith(\"group:\")) {\n const groupId = raw.slice(6);\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n groupId,\n )\n ) return null;\n const memberRows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid`;\n const memberIds = (memberRows as any[]).map((r) => Number(r.user_id));\n if (!memberIds.includes(userId)) return null;\n return { conversationId: groupId, isGroup: true, memberIds };\n }\n const partnerId = Number(raw);\n if (!partnerId || partnerId === userId) return null;\n const conversationId = await resolveConversationId(sql, userId, partnerId);\n if (!conversationId) return null;\n return { conversationId, isGroup: false, memberIds: [userId, partnerId] };\n } catch {\n return null;\n }\n}\n\n/** Diffuse un événement SSE à plusieurs utilisateurs (fan-out groupe). */\nexport async function pushToUsers(\n ids: number[],\n type: string,\n payload: any,\n exclude?: number,\n): Promise<void> {\n for (const id of ids) {\n if (exclude && id === exclude) continue;\n try {\n await pushRealtimeEvent(id, type, payload);\n } catch {}\n }\n}\n\n/** Messages épinglés d'une conversation (aperçus, max 3), masqués exclus. */\nexport async function fetchPinnedMessages(\n sql: any,\n conversationId: string,\n userId: number,\n): Promise<any[]> {\n try {\n return await sql`\n SELECT m.*, u.username as sender_username\n FROM dm_pinned_messages pm\n JOIN direct_messages m ON m.id = pm.message_id\n JOIN users u ON u.id = m.sender_id\n WHERE pm.conversation_id = ${conversationId}::uuid\n AND NOT EXISTS (SELECT 1 FROM dm_hidden_messages h WHERE h.message_id = m.id AND h.user_id = ${userId})\n ORDER BY pm.pinned_at ASC\n LIMIT 3\n `;\n } catch {\n return [];\n }\n}\n\n/** Infos publiques de la publication jointe à un message (carte cliquable). */\nexport async function fetchDMAttachedPost(\n sql: any,\n postId: string,\n): Promise<\n {\n id: string;\n username: string;\n display_name: string | null;\n avatar_url: string | null;\n excerpt: string;\n } | null\n> {\n try {\n const rows = await sql`\n SELECT p.id, p.content, u.username, pr.display_name, pr.avatar_url\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = p.author_id\n WHERE p.id = ${postId}::uuid\n LIMIT 1\n `;\n if (rows.length === 0) return null;\n const r = rows[0];\n return {\n id: String(r.id),\n username: String(r.username),\n display_name: r.display_name || null,\n avatar_url: r.avatar_url || null,\n excerpt: stripHtmlTags(String(r.content || \"\")).replace(/\\s+/g, \" \")\n .trim().slice(0, 140),\n };\n } catch {\n return null;\n }\n}\n\n/** Enrichit des messages lus avec leur publication jointe (1 requête batch). */\nexport async function attachDMAttachedPosts(\n sql: any,\n messages: any[],\n): Promise<void> {\n if (!Array.isArray(messages) || messages.length === 0) return;\n const ids = Array.from(\n new Set(\n messages.filter((m) => m?.attached_post_id).map((m) =>\n String(m.attached_post_id)\n ),\n ),\n );\n if (ids.length === 0) return;\n try {\n const rows = await sql`\n SELECT p.id, p.content, u.username, pr.display_name, pr.avatar_url\n FROM posts p\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = p.author_id\n WHERE p.id = ANY(${ids}::uuid[])\n `;\n const byId = new Map<string, any>(\n (rows as any[]).map((r) => [String(r.id), {\n id: String(r.id),\n username: String(r.username),\n display_name: r.display_name || null,\n avatar_url: r.avatar_url || null,\n excerpt: stripHtmlTags(String(r.content || \"\")).replace(/\\s+/g, \" \")\n .trim().slice(0, 140),\n }]),\n );\n for (const m of messages) {\n if (m?.attached_post_id) {\n m.attached_post = byId.get(String(m.attached_post_id)) || null;\n }\n }\n } catch {}\n}\n\n/**\n * Normalise l'attribution d'un message transféré : seul l'id du message\n * d'origine est accepté, l'auteur est re-dérivé depuis la base (anti-usurpation).\n */\nexport async function deriveForwardedFrom(\n sql: any,\n raw: any,\n): Promise<\n { message_id: string; username: string; display_name: string | null } | null\n> {\n try {\n if (!raw || typeof raw !== \"object\" || !raw.message_id) return null;\n const id = String(raw.message_id);\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n id,\n )\n ) return null;\n const rows = await sql`\n SELECT m.id AS message_id, u.username, pr.display_name\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE m.id = ${id}::uuid\n LIMIT 1\n `;\n if (rows.length === 0) return null;\n return {\n message_id: String(rows[0].message_id),\n username: String(rows[0].username),\n display_name: rows[0].display_name || null,\n };\n } catch {\n return null;\n }\n}\n\n/** Vérifie qu'un utilisateur peut agir sur un message (expéditeur, destinataire ou membre du groupe). */\nexport const assertMessageAccess = async (\n sql: any,\n userId: number,\n messageId: string,\n): Promise<{ ok: boolean; message?: any; error?: string; code?: number }> => {\n const rows =\n await sql`SELECT id, sender_id, recipient_id, conversation_id FROM direct_messages WHERE id = ${messageId}::uuid LIMIT 1`;\n if (rows.length === 0) {\n return { ok: false, error: \"Message introuvable.\", code: 404 };\n }\n const m = rows[0];\n if (Number(m.sender_id) === userId || Number(m.recipient_id) === userId) {\n return { ok: true, message: m };\n }\n const memberRows = await sql`\n SELECT 1 FROM dm_group_members WHERE conversation_id = ${m.conversation_id}::uuid AND user_id = ${userId} LIMIT 1\n `;\n if (memberRows.length === 0) {\n return { ok: false, error: \"Accès refusé.\", code: 403 };\n }\n return { ok: true, message: m };\n};",[578],"6e0baf53-2f80-4641-97c6-71a7c1d5fe77","vibe-dms-conversations.ts","4fee7518-aece-11f1-837c-1607ee4eb77e",362,["D",1789313754778],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — DMs : CONVERSATIONS & MESSAGES\n * (vibe-dms-conversations.ts)\n * Recherche d'utilisateurs, liste des conversations (1-1 + groupes), lecture\n * et envoi des messages. Scindé de vibe-dms.ts (limite de taille Val Town).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { stripHtmlTags } from \"./vibe-posts-core.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport { ensureBooksTables } from \"./vibe-books.ts\";\nimport {\n attachDMAttachedPosts,\n deriveForwardedFrom,\n dmPlainLength,\n ensureDMTables,\n fetchDMAttachedPost,\n fetchPinnedMessages,\n generateMAIDMReply,\n getDmMessageCharLimit,\n publishScheduledDMs,\n resolveConversationId,\n} from \"./vibe-dms-core.ts\";\n\nexport function registerDMDirectRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1. SEARCH USERS FOR DM\n const handleDMUsers = async (c: any) => {\n try {\n const q = (c.req.query(\"q\") || \"\").trim().toLowerCase();\n if (!q) return c.json({ users: [] });\n\n const sql = getDb();\n const users = await sql`\n SELECT u.id, u.username, u.tier,\n (COALESCE(u.is_verified, FALSE) OR LOWER(COALESCE(u.tier, '')) IN ('plus', 'pro', 'max')) as is_verified,\n pr.display_name, pr.avatar_url\n FROM users u\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE LOWER(u.username) LIKE ('%' || ${q} || '%') OR LOWER(pr.display_name) LIKE ('%' || ${q} || '%')\n LIMIT 10\n `;\n return c.json({ users });\n } catch (err: any) {\n return c.json({ error: \"Erreur recherche.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/dms/users\",\n \"/vibe/dms/users\",\n \"/v1/dms/users\",\n ], handleDMUsers);\n\n // 2. DM CONVERSATIONS\n const handleDMConversations = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n // Conversations 1-1 (schéma participant_one/two) + groupes 019 (via dm_group_members)\n const [convs, groups] = await Promise.all([\n sql`\n SELECT dm.*,\n CASE WHEN dm.participant_one_id = ${userId} THEN u2.username ELSE u1.username END as partner_username,\n CASE WHEN dm.participant_one_id = ${userId} THEN pr2.display_name ELSE pr1.display_name END as partner_display_name,\n CASE WHEN dm.participant_one_id = ${userId} THEN pr2.avatar_url ELSE pr1.avatar_url END as partner_avatar_url,\n CASE WHEN dm.participant_one_id = ${userId} THEN dm.participant_two_id ELSE dm.participant_one_id END as partner_id,\n meta.custom_name,\n (blk.id IS NOT NULL) as is_blocked,\n COALESCE(unread.count, 0)::int as unread_count\n FROM dm_conversations dm\n JOIN users u1 ON u1.id = dm.participant_one_id\n JOIN users u2 ON u2.id = dm.participant_two_id\n LEFT JOIN profiles pr1 ON pr1.user_id = u1.id\n LEFT JOIN profiles pr2 ON pr2.user_id = u2.id\n LEFT JOIN dm_conv_meta meta\n ON meta.user_id = ${userId}\n AND meta.partner_id = CASE WHEN dm.participant_one_id = ${userId} THEN dm.participant_two_id ELSE dm.participant_one_id END\n LEFT JOIN blocked_users blk\n ON blk.user_id = ${userId}\n AND blk.blocked_user_id = CASE WHEN dm.participant_one_id = ${userId} THEN dm.participant_two_id ELSE dm.participant_one_id END\n LEFT JOIN LATERAL (\n SELECT COUNT(*)::int AS count FROM direct_messages m\n WHERE m.conversation_id = dm.id AND m.recipient_id = ${userId} AND m.is_read = FALSE\n ) unread ON TRUE\n WHERE COALESCE(dm.is_group, FALSE) = FALSE\n AND (dm.participant_one_id = ${userId} OR dm.participant_two_id = ${userId})\n ORDER BY dm.last_message_at DESC\n `,\n sql`\n SELECT dm.id as conversation_id,\n dm.group_name,\n dm.group_avatar_url,\n dm.created_by,\n dm.book_id,\n dm.last_message_preview,\n dm.last_message_at,\n (dm.created_by = ${userId}) as is_admin,\n COALESCE(unread.count, 0)::int as unread_count,\n (\n SELECT JSON_AGG(JSON_BUILD_OBJECT(\n 'user_id', gm.user_id, 'username', gu.username,\n 'display_name', gp.display_name, 'avatar_url', gp.avatar_url,\n 'role', gm.role\n ) ORDER BY gm.joined_at ASC)\n FROM dm_group_members gm\n JOIN users gu ON gu.id = gm.user_id\n LEFT JOIN profiles gp ON gp.user_id = gm.user_id\n WHERE gm.conversation_id = dm.id\n ) as members\n FROM dm_group_members me\n JOIN dm_conversations dm ON dm.id = me.conversation_id\n LEFT JOIN LATERAL (\n SELECT COUNT(*)::int AS count FROM direct_messages m\n WHERE m.conversation_id = dm.id\n AND m.sender_id <> ${userId}\n AND NOT COALESCE((m.read_by ? ${userId}::text), FALSE)\n ) unread ON TRUE\n WHERE me.user_id = ${userId}\n ORDER BY dm.last_message_at DESC\n `,\n ]);\n // Livres : métadonnées (titre, icône) pour distinguer la conversation de groupe\n const bookIds = Array.from(\n new Set(\n ((groups || []) as any[]).map((g) => g.book_id).filter(Boolean).map(\n String,\n ),\n ),\n );\n let bookMeta = new Map<string, any>();\n if (bookIds.length > 0) {\n try {\n const rows =\n await sql`SELECT id, title, icon FROM vibe_books WHERE id = ANY(${bookIds}::uuid[])`;\n bookMeta = new Map((rows as any[]).map((b) => [String(b.id), b]));\n } catch {\n // vibe_books absent : conversations affichées comme des groupes classiques\n }\n }\n // Normalisation des groupes au format DMConversation (partner_id = id de conversation)\n const groupConvs = ((groups || []) as any[]).map((g) => ({\n id: String(g.conversation_id),\n partner_id: `group:${g.conversation_id}`,\n partner_username: g.group_name || \"Groupe\",\n partner_display_name: g.group_name || \"Groupe\",\n partner_avatar_url: g.group_avatar_url || null,\n last_message_preview: g.last_message_preview || \"\",\n last_message_content: g.last_message_preview || \"\",\n last_message_at: g.last_message_at,\n unread_count: Number(g.unread_count || 0),\n is_group: true,\n is_admin: Boolean(g.is_admin) && !g.book_id,\n is_book: Boolean(g.book_id),\n book_id: g.book_id ? String(g.book_id) : null,\n book_title: g.book_id\n ? (bookMeta.get(String(g.book_id))?.title || g.group_name || null)\n : null,\n book_icon: g.book_id\n ? (bookMeta.get(String(g.book_id))?.icon || null)\n : null,\n members: g.members || [],\n }));\n return c.json({ conversations: [...convs, ...groupConvs] });\n } catch (err: any) {\n return c.json({ error: \"Erreur conversations.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/dms/conversations\",\n \"/vibe/dms/conversations\",\n \"/v1/dms/conversations\",\n ], handleDMConversations);\n\n // 3. DM MESSAGES (1-1 et groupes : les groupes utilisent conversationId \"group:<uuid>\")\n const handleDMMessages = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n const rawKey = String(c.req.param(\"partnerId\") || \"\");\n const isGroupKey = rawKey.startsWith(\"group:\");\n const partnerId = Number(isGroupKey ? rawKey.slice(6) : rawKey);\n const groupId = isGroupKey ? rawKey.slice(6) : null;\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n await publishScheduledDMs().catch(() => {});\n\n if (isGroupKey) {\n // ── Conversation de GROUPE ──\n if (\n !groupId ||\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(groupId)\n ) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n const memberRows = await sql`\n SELECT 1 FROM dm_group_members WHERE conversation_id = ${groupId}::uuid AND user_id = ${userId} LIMIT 1\n `;\n if (memberRows.length === 0) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n\n const messages = await sql`\n SELECT m.*, u.username as sender_username,\n r.content as reply_to_content,\n ru.username as reply_to_username\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n LEFT JOIN direct_messages r ON r.id = m.reply_to_id\n LEFT JOIN users ru ON ru.id = r.sender_id\n WHERE m.conversation_id = ${groupId}::uuid\n AND NOT EXISTS (SELECT 1 FROM dm_hidden_messages h WHERE h.message_id = m.id AND h.user_id = ${userId})\n ORDER BY m.created_at ASC\n LIMIT 200\n `;\n // Un nouveau membre récupère tout l'historique : aucune restriction de date.\n\n try {\n const msgIds = messages.map((m: any) => m.id);\n if (msgIds.length > 0) {\n const reactions = await sql`\n SELECT message_id, emoji, user_id FROM dm_reactions\n WHERE message_id = ANY(${msgIds}::uuid[])\n `;\n const byMsg = new Map<\n string,\n { emoji: string; user_id: number }[]\n >();\n for (const r of reactions) {\n const key = String(r.message_id);\n if (!byMsg.has(key)) byMsg.set(key, []);\n byMsg.get(key)!.push({\n emoji: r.emoji,\n user_id: Number(r.user_id),\n });\n }\n for (const m of messages) {\n const list = byMsg.get(String(m.id)) || [];\n const grouped: { emoji: string; count: number; mine: boolean }[] =\n [];\n for (const r of list) {\n const g = grouped.find((x) => x.emoji === r.emoji);\n if (g) {\n g.count += 1;\n g.mine = g.mine || r.user_id === userId;\n } else {\n grouped.push({\n emoji: r.emoji,\n count: 1,\n mine: r.user_id === userId,\n });\n }\n }\n m.reactions = grouped;\n }\n }\n } catch {}\n\n // Publications jointes (conversations de Livre) : carte cliquable côté client\n await attachDMAttachedPosts(sql, messages);\n\n // Marquer comme lu : ajoute mon id dans read_by des messages des autres\n try {\n const unreadRows = messages.filter(\n (m: any) =>\n Number(m.sender_id) !== userId &&\n !((m.read_by || []) as string[]).map(String).includes(\n String(userId),\n ),\n );\n for (const m of unreadRows as any[]) {\n const readers = Array.isArray(m.read_by)\n ? m.read_by.map(String)\n : [];\n readers.push(String(userId));\n await sql`UPDATE direct_messages SET read_by = ${\n JSON.stringify(readers)\n }::jsonb WHERE id = ${m.id}::uuid`;\n }\n } catch {}\n\n return c.json({\n messages,\n pinned_messages: await fetchPinnedMessages(sql, groupId!, userId),\n });\n }\n\n // ── Conversation 1-1 (flux historique) ──\n const messages = await sql`\n SELECT m.*, u.username as sender_username,\n r.content as reply_to_content,\n ru.username as reply_to_username\n FROM direct_messages m\n JOIN users u ON u.id = m.sender_id\n LEFT JOIN direct_messages r ON r.id = m.reply_to_id\n LEFT JOIN users ru ON ru.id = r.sender_id\n WHERE ((m.sender_id = ${userId} AND m.recipient_id = ${partnerId})\n OR (m.sender_id = ${partnerId} AND m.recipient_id = ${userId}))\n AND NOT EXISTS (SELECT 1 FROM dm_hidden_messages h WHERE h.message_id = m.id AND h.user_id = ${userId})\n ORDER BY m.created_at ASC\n LIMIT 100\n `;\n\n // Réactions emoji (table dm_reactions — ignorée silencieusement si absente)\n try {\n const msgIds = messages.map((m: any) => m.id);\n if (msgIds.length > 0) {\n const reactions = await sql`\n SELECT message_id, emoji, user_id FROM dm_reactions\n WHERE message_id = ANY(${msgIds}::uuid[])\n `;\n const byMsg = new Map<string, { emoji: string; user_id: number }[]>();\n for (const r of reactions) {\n const key = String(r.message_id);\n if (!byMsg.has(key)) byMsg.set(key, []);\n byMsg.get(key)!.push({\n emoji: r.emoji,\n user_id: Number(r.user_id),\n });\n }\n for (const m of messages) {\n const list = byMsg.get(String(m.id)) || [];\n const grouped: { emoji: string; count: number; mine: boolean }[] =\n [];\n for (const r of list) {\n const g = grouped.find((x) => x.emoji === r.emoji);\n if (g) {\n g.count += 1;\n g.mine = g.mine || r.user_id === userId;\n } else {\n grouped.push({\n emoji: r.emoji,\n count: 1,\n mine: r.user_id === userId,\n });\n }\n }\n m.reactions = grouped;\n }\n }\n } catch {}\n\n await sql`\n UPDATE direct_messages SET is_read = TRUE, read_at = NOW()\n WHERE recipient_id = ${userId} AND sender_id = ${partnerId} AND is_read = FALSE\n AND (status IS NULL OR status = 'sent')\n `;\n // Messages épinglés de la conversation (aperçus, max 3, masqués exclus)\n let pinned_messages: any[] = [];\n try {\n const conversationId = await resolveConversationId(\n sql,\n userId,\n partnerId,\n );\n if (conversationId) {\n pinned_messages = await fetchPinnedMessages(\n sql,\n conversationId,\n userId,\n );\n }\n } catch {}\n return c.json({ messages, pinned_messages });\n } catch (err: any) {\n return c.json({ error: \"Erreur messages.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/dms/messages/:partnerId\",\n \"/vibe/dms/messages/:partnerId\",\n \"/v1/dms/messages/:partnerId\",\n ], handleDMMessages);\n\n // 4. SEND DM (1-1 ou groupe)\n const handleSendDM = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const {\n recipient_id,\n content,\n reply_to_id,\n send_at,\n conversation_id,\n forwarded_from,\n attached_post_id,\n } = await c.req.json();\n\n // ── GROUPE : conversation_id \"group:<uuid>\" → diffusion à tous les membres ──\n if (\n typeof conversation_id === \"string\" &&\n conversation_id.startsWith(\"group:\")\n ) {\n const groupId = conversation_id.slice(6);\n if (!content || !content.trim()) {\n return c.json({ error: \"Contenu requis.\" }, 400);\n }\n if (send_at) {\n return c.json({\n error:\n \"La programmation d'envoi n'est pas disponible dans les groupes.\",\n }, 400);\n }\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const dmCharLimit = await getDmMessageCharLimit(sql, userId);\n if (dmPlainLength(content) > dmCharLimit) {\n return c.json({\n error: `Message trop long (${\n dmCharLimit.toLocaleString(\"fr-FR\")\n } caractères max).`,\n }, 400);\n }\n const memberRows = await sql`\n SELECT user_id FROM dm_group_members WHERE conversation_id = ${groupId}::uuid\n `;\n const memberIds = (memberRows as any[]).map((r) => Number(r.user_id));\n if (!memberIds.includes(userId)) {\n return c.json({ error: \"Conversation introuvable.\" }, 404);\n }\n\n // Conversation de Livre ? (book_id non nul → publication jointe autorisée)\n const convRows = await sql`\n SELECT book_id, group_name FROM dm_conversations WHERE id = ${groupId}::uuid LIMIT 1\n `.catch(() => []);\n const bookId = convRows[0]?.book_id\n ? String(convRows[0].book_id)\n : null;\n const convName = String(convRows[0]?.group_name || \"Groupe\");\n\n // Publication jointe (carte cliquable) : réservée aux conversations de Livre,\n // et le post doit appartenir au Livre concerné.\n let validAttachedPostId: string | null = null;\n const rawAttached = typeof attached_post_id === \"string\"\n ? attached_post_id\n : \"\";\n if (rawAttached) {\n if (!bookId) {\n return c.json({\n error:\n \"Les publications jointes ne sont disponibles que dans les conversations de Livre.\",\n }, 400);\n }\n if (\n !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(rawAttached)\n ) {\n return c.json({ error: \"Publication invalide.\" }, 400);\n }\n await ensureBooksTables(sql).catch(() => {});\n const okPost = await sql`\n SELECT 1 FROM vibe_book_items WHERE book_id = ${bookId}::uuid AND post_id = ${rawAttached}::uuid LIMIT 1\n `.catch(() => []);\n if (okPost.length === 0) {\n return c.json({\n error: \"Cette publication ne fait pas partie du Livre.\",\n }, 400);\n }\n validAttachedPostId = rawAttached;\n }\n\n // Réponse à un message du même groupe (validation d'appartenance)\n let validReplyTo: string | null = null;\n let replyPreview: {\n reply_to_content: string;\n reply_to_username: string;\n } | null = null;\n if (\n typeof reply_to_id === \"string\" &&\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(reply_to_id)\n ) {\n const rRows = await sql`\n SELECT r.content AS reply_to_content, u.username AS reply_to_username\n FROM direct_messages r JOIN users u ON u.id = r.sender_id\n WHERE r.id = ${reply_to_id}::uuid AND r.conversation_id = ${groupId}::uuid\n LIMIT 1\n `;\n if (rRows.length > 0) {\n validReplyTo = reply_to_id;\n replyPreview = {\n reply_to_content: String(rRows[0].reply_to_content),\n reply_to_username: String(rRows[0].reply_to_username),\n };\n }\n }\n\n // Transfert : l'auteur d'origine est re-dérivé depuis la base (anti-usurpation)\n const forwardedFrom = await deriveForwardedFrom(sql, forwarded_from);\n\n // Extraction des mentions : @tous (urgent, tout le groupe) + @username urgents\n const plain = stripHtmlTags(String(content));\n const mentionMatches = Array.from(\n new Set(plain.match(/@([a-zA-Z0-9_]{1,30})/g) || []),\n ).map((m: string) => m.slice(1));\n const isUrgentAll = mentionMatches.some((m) =>\n m.toLowerCase() === \"tous\"\n );\n const memberUsernames = memberIds.length\n ? await sql`SELECT id, username FROM users WHERE id = ANY(${memberIds})`\n : [];\n const urgentUsernames = isUrgentAll\n ? []\n : memberUsernames.filter((u: any) =>\n mentionMatches.some((m) =>\n m.toLowerCase() === String(u.username).toLowerCase()\n )\n );\n\n const msg = await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, content, mentions, urgent_mentions, reply_to_id, forwarded_from, attached_post_id)\n VALUES (${groupId}::uuid, ${userId}, ${content.trim()}, ${\n JSON.stringify(mentionMatches)\n }::jsonb, ${\n JSON.stringify(\n isUrgentAll\n ? [\"tous\"]\n : urgentUsernames.map((u: any) => u.username),\n )\n }::jsonb, ${validReplyTo}, ${\n forwardedFrom ? JSON.stringify(forwardedFrom) : null\n }::jsonb, ${validAttachedPostId})\n RETURNING *\n `;\n await sql`\n UPDATE dm_conversations SET last_message_preview = ${\n stripHtmlTags(String(content)).trim().slice(0, 120)\n }, last_message_at = NOW()\n WHERE id = ${groupId}::uuid\n `;\n // Infos de la publication jointe (diffusées aux membres pour la carte cliquable)\n const attachedPost = validAttachedPostId\n ? await fetchDMAttachedPost(sql, validAttachedPostId)\n : null;\n // Notification : urgente pour @tous / @user, normale sinon (hors expéditeur)\n const senderInfo = await sql`\n SELECT u.username, p.display_name FROM users u LEFT JOIN profiles p ON p.user_id = u.id WHERE u.id = ${userId} LIMIT 1\n `;\n for (const mid of memberIds) {\n if (mid === userId) continue;\n const mentioned = isUrgentAll ||\n urgentUsernames.some((u: any) => Number(u.id) === mid);\n const notifType = mentioned ? \"mention\" : \"dm\";\n const notifMsg = isUrgentAll\n ? \"🚨 vous a mentionné (urgent @tous) dans le groupe\"\n : mentioned\n ? \"🚨 vous a mentionné en urgence dans le groupe\"\n : bookId\n ? `a envoyé un message dans le Livre « ${convName} »`\n : \"a envoyé un message dans le groupe\";\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${mid}, ${userId}, ${notifType}, ${notifMsg})\n `.catch(() => {});\n try {\n await pushRealtimeEvent(mid, \"dm_message\", {\n ...msg[0],\n ...(replyPreview || {}),\n sender_username: senderInfo[0]?.username || null,\n sender_display_name: senderInfo[0]?.display_name || null,\n conversation_id: groupId,\n attached_post: attachedPost,\n });\n } catch {}\n }\n return c.json({\n success: true,\n message: { ...msg[0], attached_post: attachedPost },\n }, 201);\n }\n\n const recId = Number(recipient_id);\n\n if (!recId || !content || !content.trim()) {\n return c.json({ error: \"Destinataire et contenu requis.\" }, 400);\n }\n if (recId === userId) {\n return c.json({\n error: \"Impossible de s'envoyer un message à soi-même.\",\n }, 400);\n }\n\n const sql = getDb();\n await ensureDMTables().catch(() => {});\n const dmCharLimit = await getDmMessageCharLimit(sql, userId);\n if (dmPlainLength(content) > dmCharLimit) {\n return c.json({\n error: `Message trop long (${\n dmCharLimit.toLocaleString(\"fr-FR\")\n } caractères max).`,\n }, 400);\n }\n\n // Envoi programmé : date future → status 'scheduled', pas de SSE immédiat\n let scheduledAt: string | null = null;\n if (send_at) {\n const ts = Date.parse(String(send_at));\n if (Number.isNaN(ts) || ts <= Date.now()) {\n return c.json({ error: \"Date d'envoi invalide ou passée.\" }, 400);\n }\n scheduledAt = new Date(ts).toISOString();\n }\n\n // Blocage : impossible d'envoyer si l'un des deux a bloqué l'autre\n const blockCheck = await sql`\n SELECT 1 FROM blocked_users\n WHERE (user_id = ${userId} AND blocked_user_id = ${recId})\n OR (user_id = ${recId} AND blocked_user_id = ${userId})\n LIMIT 1\n `;\n if (blockCheck.length > 0) {\n return c.json({\n error: \"Impossible d'envoyer un message : utilisateur bloqué.\",\n }, 403);\n }\n\n // Vérifier les paramètres de messages du destinataire\n let recipientSettings: any[] = [];\n try {\n recipientSettings = await sql`\n SELECT allow_dms, dms_enabled\n FROM user_settings\n WHERE user_id = ${recId}\n LIMIT 1\n `;\n } catch (settingsErr) {\n console.warn(\n \"[vibe-dms] Note: user_settings check skipped or table incomplete:\",\n settingsErr,\n );\n }\n\n if (recipientSettings.length > 0) {\n const s = recipientSettings[0];\n const dmPolicy = s.allow_dms || \"everyone\";\n const dmsEnabled = s.dms_enabled !== false;\n if (!dmsEnabled || dmPolicy === \"nobody\") {\n return c.json({\n error: \"Cet utilisateur n'accepte pas les messages privés.\",\n }, 403);\n }\n if (dmPolicy === \"following\") {\n const isFollowing = await sql`\n SELECT 1 FROM follows WHERE follower_id = ${recId} AND following_id = ${userId} LIMIT 1\n `;\n if (isFollowing.length === 0) {\n return c.json({\n error:\n \"Cet utilisateur n'accepte les messages que de ses abonnements.\",\n }, 403);\n }\n }\n }\n\n const p1 = userId < recId ? userId : recId;\n const p2 = userId < recId ? recId : userId;\n\n const convRows = await sql`\n INSERT INTO dm_conversations (participant_one_id, participant_two_id, last_message_preview, last_message_at)\n VALUES (${p1}, ${p2}, ${stripHtmlTags(String(content)).trim()}, NOW())\n ON CONFLICT (participant_one_id, participant_two_id)\n DO UPDATE SET last_message_preview = ${\n stripHtmlTags(String(content)).trim()\n }, last_message_at = NOW()\n RETURNING id\n `;\n\n const conversationId = convRows[0].id;\n const validReplyTo =\n typeof reply_to_id === \"string\" &&\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i\n .test(reply_to_id)\n ? reply_to_id\n : null;\n const forwardedFrom = await deriveForwardedFrom(sql, forwarded_from);\n const msg = scheduledAt\n ? await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, recipient_id, content, reply_to_id, status, send_at, forwarded_from)\n VALUES (${conversationId}::uuid, ${userId}, ${recId}, ${content.trim()}, ${validReplyTo}, 'scheduled', ${scheduledAt}::timestamptz, ${\n forwardedFrom ? JSON.stringify(forwardedFrom) : null\n }::jsonb)\n RETURNING *\n `\n : await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, recipient_id, content, reply_to_id, forwarded_from)\n VALUES (${conversationId}::uuid, ${userId}, ${recId}, ${content.trim()}, ${validReplyTo}, ${\n forwardedFrom ? JSON.stringify(forwardedFrom) : null\n }::jsonb)\n RETURNING *\n `;\n\n // Message programmé : réponse immédiate, pas de notification ni SSE\n if (scheduledAt) {\n return c.json({ success: true, message: msg[0], scheduled: true }, 201);\n }\n\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${recId}, ${userId}, 'dm', 'vous a envoyé un message')\n `;\n } catch {}\n\n // Temps réel : pousse le message au destinataire (flux SSE)\n try {\n const senderInfo = await sql`\n SELECT u.username, p.display_name, p.avatar_url\n FROM users u LEFT JOIN profiles p ON p.user_id = u.id\n WHERE u.id = ${userId} LIMIT 1\n `;\n await pushRealtimeEvent(recId, \"dm_message\", {\n ...msg[0],\n sender_username: senderInfo[0]?.username || null,\n sender_display_name: senderInfo[0]?.display_name || null,\n sender_avatar_url: senderInfo[0]?.avatar_url || null,\n });\n } catch (rtErr) {\n console.warn(\"[vibe-dms] realtime dm_message push failed:\", rtErr);\n }\n\n // Réponse automatique pour le compte @bot de test\n const recipientUser =\n await sql`SELECT username FROM users WHERE id = ${recId} LIMIT 1`;\n if (recipientUser.length > 0 && recipientUser[0].username === \"bot\") {\n setTimeout(async () => {\n try {\n const botMsg = await sql`\n INSERT INTO direct_messages (conversation_id, sender_id, recipient_id, content)\n VALUES (${conversationId}::uuid, ${recId}, ${userId}, 'Bot')\n RETURNING *\n `;\n await sql`\n UPDATE dm_conversations SET last_message_preview = 'Bot', last_message_at = NOW()\n WHERE id = ${conversationId}::uuid\n `;\n await pushRealtimeEvent(\n userId,\n \"dm_message\",\n botMsg[0] ||\n {\n conversation_id: conversationId,\n sender_id: recId,\n recipient_id: userId,\n content: \"Bot\",\n },\n );\n } catch {}\n }, 100);\n }\n\n // Réponse automatique du compte officiel mAI (conversation avec historique,\n // usage hebdomadaire débité à l'expéditeur)\n if (recipientUser.length > 0 && recipientUser[0].username === \"mai\") {\n const maiUserId = recId;\n const senderMessage = String(content).trim().slice(0, 4000);\n setTimeout(async () => {\n try {\n await generateMAIDMReply(\n sql,\n conversationId,\n userId,\n maiUserId,\n senderMessage,\n );\n } catch (maiErr) {\n console.warn(\"[vibe-dms] mAI DM reply failed:\", maiErr);\n }\n }, 1200 + Math.floor(Math.random() * 1800));\n }\n\n return c.json({ success: true, message: msg[0] }, 201);\n } catch (err: any) {\n console.error(\"[vibe-dms] Error in handleSendDM:\", err);\n return c.json({ error: err.message || \"Erreur envoi message.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/messages\",\n \"/vibe/dms/messages\",\n \"/v1/dms/messages\",\n ], handleSendDM);\n}",[585],"61daf409-ce7e-4c62-994b-fd5aa3144722","vibe-common.ts","6198ed9e-a6e4-11f1-ada3-1607ee4eb77e",["D",1789315877037],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — COMMON HELPERS (vibe-common.ts)\n * Shared utilities for routes, JWT extraction & multi-alias registration\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\n\nexport type RegisterMultiFn = (\n method: \"get\" | \"post\" | \"delete\",\n paths: string[],\n handler: (c: any) => Promise<any> | any,\n) => void;\n\n/**\n * Creates a helper that registers multiple alias paths for a single route handler\n */\nexport function createRegisterMulti(app: Hono): RegisterMultiFn {\n return (\n method: \"get\" | \"post\" | \"delete\",\n paths: string[],\n handler: (c: any) => Promise<any> | any,\n ) => {\n for (const p of paths) {\n if (method === \"get\") app.get(p, handler);\n else if (method === \"post\") app.post(p, handler);\n else if (method === \"delete\") app.delete(p, handler);\n }\n };\n}\n\n/**\n * Blocage bidirectionnel : true si userA a bloqué userB ou inversement.\n */\nexport async function isBlockEitherWay(\n userA: number,\n userB: number,\n): Promise<boolean> {\n if (!userA || !userB) return false;\n try {\n const sql = getDb();\n const rows = await sql`\n SELECT 1 FROM blocked_users\n WHERE (user_id = ${userA} AND blocked_user_id = ${userB})\n OR (user_id = ${userB} AND blocked_user_id = ${userA})\n LIMIT 1\n `;\n return rows.length > 0;\n } catch {\n return false;\n }\n}\n\n/**\n * IDs à exclure des feeds : comptes masqués (mute) + blocages (bidirectionnel).\n */\nexport async function resolveHiddenUserIds(\n currentUserId: number | null,\n): Promise<{ mutedIds: number[]; blockedIds: number[] }> {\n if (!currentUserId) return { mutedIds: [], blockedIds: [] };\n const sql = getDb();\n const [mutedRows, blockedRows] = await Promise.all([\n sql`SELECT muted_user_id FROM muted_users WHERE user_id = ${currentUserId}`\n .catch(() => []),\n sql`\n SELECT CASE WHEN user_id = ${currentUserId} THEN blocked_user_id ELSE user_id END AS other_id\n FROM blocked_users\n WHERE user_id = ${currentUserId} OR blocked_user_id = ${currentUserId}\n `.catch(() => []),\n ]);\n return {\n mutedIds: mutedRows.map((r: any) => Number(r.muted_user_id)),\n blockedIds: blockedRows.map((r: any) => Number(r.other_id)),\n };\n}\n\n/**\n * Extracts and verifies the JWT user ID from request headers\n */\nexport async function getAuthUserId(c: any): Promise<number | null> {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return null;\n const payload = await verifyToken(token);\n const userId = Number(\n payload.sub || (payload as any).id || (payload as any).userId,\n );\n if (!userId || isNaN(userId)) return null;\n return userId;\n } catch {\n return null;\n }\n}",[592],"5665a8fe-d30c-40e7-966c-6ea51997dd30","vibe-circle.ts","9aae147a-a9c2-11f1-9a60-1607ee4eb77e",363,["D",1789315868425],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — CERCLE PRIVÉ (vibe-circle.ts)\n * Gestion du cercle privé (audience 'circle' des posts) : table circle_members,\n * ajout / retrait / liste des membres.\n * Enregistré par vibe.ts (registerVibeRoutes).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport { isBlockEitherWay, type RegisterMultiFn } from \"./vibe-common.ts\";\n\nlet circleTableReady = false;\n\n/**\n * Crée la table circle_members si absente (idempotent).\n * Les requêtes des feeds s'appuient sur (user_id = auteur, member_user_id = lecteur).\n */\nexport async function ensureCircleTable(): Promise<void> {\n if (circleTableReady) return;\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS circle_members (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id BIGINT NOT NULL,\n member_user_id BIGINT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (user_id, member_user_id)\n )\n `;\n circleTableReady = true;\n}\n\n/**\n * Enregistre les routes de gestion du cercle privé.\n */\nexport function registerVibeCircleRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n const authenticate = async (c: any): Promise<number | null> => {\n const token = extractToken(c.req.raw);\n if (!token) return null;\n try {\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n return userId && !isNaN(userId) ? userId : null;\n } catch {\n return null;\n }\n };\n\n const resolveTargetId = async (sql: any, c: any): Promise<number | null> => {\n const rawParam = c.req.param(\"username\") || \"\";\n const targetUsername = rawParam.toLowerCase().trim().replace(/^@/, \"\");\n if (!targetUsername) return null;\n const rows =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${targetUsername} LIMIT 1`;\n return rows.length > 0 ? Number(rows[0].id) : null;\n };\n\n // 1. LISTE des membres de mon cercle privé\n const handleListCircle = async (c: any) => {\n try {\n const currentUserId = await authenticate(c);\n if (!currentUserId) return c.json({ error: \"Non authentifié.\" }, 401);\n\n await ensureCircleTable().catch(() => {});\n const sql = getDb();\n const rows = await sql`\n SELECT cm.member_user_id, u.username,\n COALESCE(pr.display_name, u.username) AS display_name,\n COALESCE(pr.avatar_url, u.avatar_url) AS avatar_url,\n cm.created_at\n FROM circle_members cm\n JOIN users u ON u.id = cm.member_user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE cm.user_id = ${currentUserId}\n ORDER BY cm.created_at DESC\n `;\n return c.json({ success: true, circle: rows });\n } catch (err: any) {\n console.error(\"[List Circle Error]:\", err);\n return c.json({ success: true, circle: [] });\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/circle\",\n \"/vibe/users/circle\",\n \"/v1/users/circle\",\n \"/api/vibe/circle\",\n \"/vibe/circle\",\n \"/v1/circle\",\n ], handleListCircle);\n\n // 2. STATUT : ce compte est-il dans mon cercle ?\n const handleGetCircleStatus = async (c: any) => {\n try {\n const currentUserId = await authenticate(c);\n if (!currentUserId) return c.json({ error: \"Non authentifié.\" }, 401);\n\n await ensureCircleTable().catch(() => {});\n const sql = getDb();\n const targetId = await resolveTargetId(sql, c);\n if (targetId === null) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const rows = await sql`\n SELECT 1 FROM circle_members\n WHERE user_id = ${currentUserId} AND member_user_id = ${targetId}\n LIMIT 1\n `;\n return c.json({ success: true, in_circle: rows.length > 0 });\n } catch (err: any) {\n console.error(\"[Circle Status Error]:\", err);\n return c.json({ error: \"Erreur lecture du cercle.\" }, 500);\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/users/:username/circle\",\n \"/vibe/users/:username/circle\",\n \"/v1/users/:username/circle\",\n ], handleGetCircleStatus);\n\n // 3. AJOUT / RETRAIT d'un membre (toggle si in_circle absent du body)\n const handleToggleCircleMember = async (c: any) => {\n try {\n const currentUserId = await authenticate(c);\n if (!currentUserId) return c.json({ error: \"Non authentifié.\" }, 401);\n\n await ensureCircleTable().catch(() => {});\n const sql = getDb();\n const targetId = await resolveTargetId(sql, c);\n if (targetId === null) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n if (targetId === currentUserId) {\n return c.json({\n error: \"Impossible de s'ajouter soi-même à son cercle.\",\n }, 400);\n }\n\n const existing = await sql`\n SELECT 1 FROM circle_members\n WHERE user_id = ${currentUserId} AND member_user_id = ${targetId}\n LIMIT 1\n `;\n\n const body = await c.req.json().catch(() => ({} as any));\n const inCircle = body.in_circle === undefined\n ? existing.length === 0\n : Boolean(body.in_circle);\n\n if (inCircle) {\n // Blocage (dans un sens ou l'autre) : interdit d'ajouter au cercle\n if (await isBlockEitherWay(currentUserId, targetId)) {\n return c.json({\n error:\n \"Impossible d'ajouter ce compte à votre cercle : un blocage est actif.\",\n blocked: true,\n }, 403);\n }\n await sql`\n INSERT INTO circle_members (user_id, member_user_id)\n VALUES (${currentUserId}, ${targetId})\n ON CONFLICT (user_id, member_user_id) DO NOTHING\n `;\n } else {\n await sql`\n DELETE FROM circle_members\n WHERE user_id = ${currentUserId} AND member_user_id = ${targetId}\n `;\n }\n\n return c.json({ success: true, in_circle: inCircle });\n } catch (err: any) {\n console.error(\"[Toggle Circle Member Error]:\", err);\n return c.json({ error: \"Erreur lors de la mise à jour du cercle.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/users/:username/circle\",\n \"/vibe/users/:username/circle\",\n \"/v1/users/:username/circle\",\n ], handleToggleCircleMember);\n}",[598],"5c134c07-262f-4e76-8826-2990e21cb817","vibe-books.ts","a3562b8a-a9c2-11f1-b9fd-1607ee4eb77e",342,["D",1789312015279],8,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — BOOKS / VIBE PRÉFÉRÉES (vibe-books.ts)\n * Collections de Vibe (max 5 Livres possédés par compte), avec icône lucide +\n * titre. Les Livres sont COLLABORATIFS : on les rejoint par lien/code, tous\n * les membres peuvent inviter et enrichir, seul le créateur renomme/supprime.\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport type { RegisterMultiFn } from \"./vibe-common.ts\";\nimport {\n attachBookRefs,\n attachQuotedPosts,\n stripHtmlTags,\n} from \"./vibe-posts-core.ts\";\nimport { pushRealtimeEvent } from \"./realtime.ts\";\nimport { pushToUsers } from \"./vibe-dms-core.ts\";\nimport {\n backfillBookConversations,\n deleteBookConversation,\n ensureBookConversation,\n getBookConversationId,\n removeBookConversationMember,\n renameBookConversation,\n transferBookConversationOwnership,\n} from \"./vibe-books-conversations.ts\";\n\n/** Limite de Livres possédés par compte (les Livres rejoints ne comptent pas). */\nexport const MAX_BOOKS_PER_USER = 5;\n\n/** Alphabet sans caractères ambigus (pas de I, L, O, 0, 1). */\nexport const BOOK_CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nexport const BOOK_CODE_LENGTH = 8;\n\nexport function makeBookCode(): string {\n const bytes = new Uint8Array(BOOK_CODE_LENGTH);\n crypto.getRandomValues(bytes);\n let code = \"\";\n for (let i = 0; i < BOOK_CODE_LENGTH; i++) {\n code += BOOK_CODE_ALPHABET[bytes[i] % BOOK_CODE_ALPHABET.length];\n }\n return code;\n}\n\n/** Normalise un code brut ou une URL de partage (« .../books/join/CODE »). */\nexport function normalizeBookCode(raw: unknown): string {\n const text = String(raw ?? \"\").trim();\n if (!text) return \"\";\n const segment = text.includes(\"/\")\n ? text.split(/[/?#]/).filter(Boolean).pop() || \"\"\n : text;\n return segment.toUpperCase().replace(/[^A-Z0-9]/g, \"\").slice(0, 12);\n}\n\nlet booksSchemaReady = false;\nexport async function ensureBooksTables(sql: any) {\n if (booksSchemaReady) return;\n try {\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_books (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id INTEGER NOT NULL,\n title VARCHAR(60) NOT NULL,\n icon VARCHAR(40) NOT NULL DEFAULT 'BookHeart',\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_book_items (\n book_id UUID NOT NULL REFERENCES vibe_books(id) ON DELETE CASCADE,\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n added_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (book_id, post_id)\n )\n `;\n // Collaboration : code de partage + attribution des Vibe ajoutées\n await sql`ALTER TABLE vibe_books ADD COLUMN IF NOT EXISTS join_code VARCHAR(12)`;\n await sql`ALTER TABLE vibe_books ADD COLUMN IF NOT EXISTS updated_at TIMESTAMPTZ DEFAULT NOW()`;\n await sql`CREATE UNIQUE INDEX IF NOT EXISTS idx_vibe_books_join_code ON vibe_books(join_code) WHERE join_code IS NOT NULL`;\n // Livres publics (lecture seule par tous) + références de livres dans les posts\n await sql`ALTER TABLE vibe_books ADD COLUMN IF NOT EXISTS is_public BOOLEAN DEFAULT FALSE`;\n await sql`\n CREATE TABLE IF NOT EXISTS post_book_refs (\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n book_id UUID NOT NULL REFERENCES vibe_books(id) ON DELETE CASCADE,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (post_id, book_id)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_post_book_refs_book ON post_book_refs(book_id)`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_book_members (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n book_id UUID NOT NULL REFERENCES vibe_books(id) ON DELETE CASCADE,\n user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n role VARCHAR(20) DEFAULT 'member',\n joined_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (book_id, user_id)\n )\n `;\n await sql`CREATE INDEX IF NOT EXISTS idx_book_members_book ON vibe_book_members(book_id)`;\n await sql`CREATE INDEX IF NOT EXISTS idx_book_members_user ON vibe_book_members(user_id)`;\n await sql`ALTER TABLE vibe_book_items ADD COLUMN IF NOT EXISTS added_by BIGINT`;\n // Épingles de contenu (max 3 par Livre) + discussion du Livre\n await sql`ALTER TABLE vibe_book_items ADD COLUMN IF NOT EXISTS is_pinned BOOLEAN DEFAULT FALSE`\n .catch(() => {});\n await sql`ALTER TABLE vibe_book_items ADD COLUMN IF NOT EXISTS pinned_at TIMESTAMPTZ`\n .catch(() => {});\n await sql`ALTER TABLE vibe_book_items ADD COLUMN IF NOT EXISTS pinned_by BIGINT`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_book_comments (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n book_id UUID NOT NULL REFERENCES vibe_books(id) ON DELETE CASCADE,\n user_id BIGINT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n content TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_book_comments_book ON vibe_book_comments(book_id, created_at DESC)`\n .catch(() => {});\n // Discussion : réponses citées + réactions emoji (migration 024)\n await sql`ALTER TABLE vibe_book_comments ADD COLUMN IF NOT EXISTS reply_to_id UUID REFERENCES vibe_book_comments(id) ON DELETE SET NULL`\n .catch(() => {});\n await sql`\n CREATE TABLE IF NOT EXISTS vibe_book_comment_reactions (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n comment_id UUID NOT NULL REFERENCES vibe_book_comments(id) ON DELETE CASCADE,\n user_id BIGINT NOT NULL,\n emoji TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n UNIQUE (comment_id, user_id, emoji)\n )\n `.catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_book_comment_reactions_comment ON vibe_book_comment_reactions(comment_id)`\n .catch(() => {});\n // Rétro-compat : inscrire les créateurs existants comme membres propriétaires\n await sql`\n INSERT INTO vibe_book_members (book_id, user_id, role)\n SELECT b.id, b.user_id, 'owner' FROM vibe_books b\n WHERE NOT EXISTS (SELECT 1 FROM vibe_book_members m WHERE m.book_id = b.id AND m.user_id = b.user_id)\n `.catch(() => {});\n // Rétro-compat : doter les Livres existants d'un code de partage\n const missing =\n await sql`SELECT id FROM vibe_books WHERE join_code IS NULL LIMIT 500`\n .catch(() => []);\n for (const row of missing) {\n for (let attempt = 0; attempt < 5; attempt++) {\n try {\n await sql`UPDATE vibe_books SET join_code = ${makeBookCode()} WHERE id = ${row.id}::uuid AND join_code IS NULL`;\n break;\n } catch {\n // collision de code : nouvelle tentative\n }\n }\n }\n // Conversation Messages de chaque Livre (création + rattachement des membres)\n await backfillBookConversations(sql).catch(() => {});\n booksSchemaReady = true;\n } catch (err) {\n console.error(\"[vibe-books] ensure tables error:\", err);\n }\n}\n\nasync function getAuthUserId(c: any): Promise<number | null> {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return null;\n const payload = await verifyToken(token);\n const userId = Number(\n payload.sub || (payload as any).id || (payload as any).userId,\n );\n return userId && !isNaN(userId) ? userId : null;\n } catch {\n return null;\n }\n}\n\n/** Clause d'appartenance : propriétaire OU membre inscrit. */\nconst bookAccessClause = (sql: any, userId: number) =>\n sql`\n (b.user_id = ${userId} OR EXISTS (SELECT 1 FROM vibe_book_members m WHERE m.book_id = b.id AND m.user_id = ${userId}))\n`;\n\nasync function fetchBookMembers(sql: any, bookId: string) {\n return await sql`\n SELECT m.user_id, m.role, m.joined_at, u.username, pr.display_name, pr.avatar_url\n FROM vibe_book_members m\n JOIN users u ON u.id = m.user_id\n LEFT JOIN profiles pr ON pr.user_id = m.user_id\n WHERE m.book_id = ${bookId}::uuid\n ORDER BY (m.role = 'owner') DESC, m.joined_at ASC\n LIMIT 100\n `;\n}\n\nexport function registerVibeBooksRoutes(\n app: Hono,\n registerMulti: RegisterMultiFn,\n) {\n // 1. LISTE DES LIVRES ACCESSIBLES (possédés + rejoints)\n const handleListBooks = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const postId = c.req.query(\"post_id\") || \"\";\n const rows = await sql`\n SELECT b.id, b.title, b.icon, b.created_at, b.join_code, b.user_id, COALESCE(b.is_public, FALSE) AS is_public,\n (b.user_id = ${userId}) AS is_owner,\n COALESCE(\n (SELECT m.role FROM vibe_book_members m WHERE m.book_id = b.id AND m.user_id = ${userId} LIMIT 1),\n CASE WHEN b.user_id = ${userId} THEN 'owner' ELSE 'member' END\n ) AS role,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS items_count,\n (SELECT COUNT(*) FROM vibe_book_members bm WHERE bm.book_id = b.id) AS members_count,\n (SELECT dm.id FROM dm_conversations dm WHERE dm.book_id = b.id LIMIT 1) AS conversation_id,\n ${\n postId\n ? sql`EXISTS (SELECT 1 FROM vibe_book_items bi2 WHERE bi2.book_id = b.id AND bi2.post_id = ${postId}::uuid)`\n : sql`FALSE`\n } AS contains_post\n FROM vibe_books b\n WHERE ${bookAccessClause(sql, userId)}\n ORDER BY (b.user_id = ${userId}) DESC, b.created_at ASC\n `;\n\n const ownedRows =\n await sql`SELECT COUNT(*) AS n FROM vibe_books WHERE user_id = ${userId}`;\n\n return c.json({\n success: true,\n books: rows,\n maxBooks: MAX_BOOKS_PER_USER,\n ownedCount: Number(ownedRows[0]?.n || 0),\n });\n } catch (err: any) {\n console.error(\"[vibe-books] List error:\", err);\n return c.json(\n { error: \"Erreur lors de la récupération des Livres.\" },\n 500,\n );\n }\n };\n registerMulti(\n \"get\",\n [\"/api/vibe/books\", \"/vibe/books\", \"/v1/books\"],\n handleListBooks,\n );\n\n // 2. CRÉATION D'UN LIVRE (max 5 possédés par compte, code de partage inclus)\n const handleCreateBook = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const body = await c.req.json().catch(() => ({}));\n const title = String(body?.title || \"\").trim();\n const icon = String(body?.icon || \"BookHeart\").trim().slice(0, 40);\n const isPublic = Boolean(body?.is_public);\n\n if (!title) {\n return c.json(\n { error: \"Veuillez donner un titre à votre Livre.\" },\n 400,\n );\n }\n if (title.length > 60) {\n return c.json({ error: \"Le titre est limité à 60 caractères.\" }, 400);\n }\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const countRows =\n await sql`SELECT COUNT(*) AS n FROM vibe_books WHERE user_id = ${userId}`;\n if (Number(countRows[0]?.n || 0) >= MAX_BOOKS_PER_USER) {\n return c.json({\n error:\n `Vous avez atteint la limite de ${MAX_BOOKS_PER_USER} Livres par compte.`,\n }, 403);\n }\n\n let inserted: any[] = [];\n for (let attempt = 0; attempt < 5 && inserted.length === 0; attempt++) {\n const code = makeBookCode();\n try {\n inserted = await sql`\n INSERT INTO vibe_books (user_id, title, icon, join_code, is_public)\n VALUES (${userId}, ${title}, ${icon}, ${code}, ${isPublic})\n RETURNING id, title, icon, created_at, join_code, is_public\n `;\n } catch (err: any) {\n const msg = String(err?.message || \"\").toLowerCase();\n if (!msg.includes(\"duplicate\") && !msg.includes(\"unique\")) throw err;\n }\n }\n if (inserted.length === 0) {\n return c.json(\n { error: \"Impossible de créer le Livre. Réessayez.\" },\n 500,\n );\n }\n\n await sql`\n INSERT INTO vibe_book_members (book_id, user_id, role)\n VALUES (${inserted[0].id}::uuid, ${userId}, 'owner')\n ON CONFLICT (book_id, user_id) DO NOTHING\n `.catch(() => {});\n\n // Conversation Messages du Livre : créée immédiatement pour le propriétaire\n const conversationId = await ensureBookConversation(sql, {\n id: String(inserted[0].id),\n user_id: userId,\n title: String(inserted[0].title || title),\n }).catch(() => null);\n if (conversationId) {\n await pushRealtimeEvent(userId, \"group_updated\", {\n conversation_id: conversationId,\n action: \"created\",\n book_id: String(inserted[0].id),\n }).catch(() => {});\n }\n\n return c.json({\n success: true,\n book: {\n ...inserted[0],\n items_count: 0,\n contains_post: false,\n is_owner: true,\n role: \"owner\",\n members_count: 1,\n conversation_id: conversationId || null,\n },\n }, 201);\n } catch (err: any) {\n console.error(\"[vibe-books] Create error:\", err);\n return c.json({ error: \"Erreur lors de la création du Livre.\" }, 500);\n }\n };\n registerMulti(\n \"post\",\n [\"/api/vibe/books\", \"/vibe/books\", \"/v1/books\"],\n handleCreateBook,\n );\n\n // 3. MISE À JOUR D'UN LIVRE (titre / icône — créateur uniquement)\n const handleUpdateBook = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const body = await c.req.json().catch(() => ({}));\n const title = body?.title !== undefined\n ? String(body.title).trim()\n : null;\n const icon = body?.icon !== undefined\n ? String(body.icon).trim().slice(0, 40)\n : null;\n const isPublic = body?.is_public !== undefined\n ? Boolean(body.is_public)\n : null;\n\n if (title !== null && !title) {\n return c.json({ error: \"Le titre ne peut pas être vide.\" }, 400);\n }\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const updated = await sql`\n UPDATE vibe_books SET\n title = ${title ?? sql`title`},\n icon = ${icon ?? sql`icon`},\n is_public = ${isPublic ?? sql`is_public`},\n updated_at = NOW()\n WHERE id = ${bookId}::uuid AND user_id = ${userId}\n RETURNING id, title, icon, created_at, join_code, is_public\n `;\n if (updated.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n // Synchro du titre de la conversation Messages du Livre\n if (title) {\n await renameBookConversation(sql, bookId, title).catch(() => {});\n }\n\n return c.json({\n success: true,\n book: {\n ...updated[0],\n is_owner: true,\n role: \"owner\",\n conversation_id: await getBookConversationId(sql, bookId),\n },\n });\n } catch (err: any) {\n console.error(\"[vibe-books] Update error:\", err);\n return c.json({ error: \"Erreur lors de la mise à jour du Livre.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/update\",\n \"/vibe/books/:bookId/update\",\n \"/v1/books/:bookId/update\",\n ], handleUpdateBook);\n\n // 4. SUPPRESSION D'UN LIVRE (créateur uniquement, les Vibe ne sont pas supprimées)\n const handleDeleteBook = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n const deleted = await sql`\n DELETE FROM vibe_books WHERE id = ${bookId}::uuid AND user_id = ${userId} RETURNING id\n `;\n if (deleted.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n await deleteBookConversation(sql, bookId).catch(() => {});\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-books] Delete error:\", err);\n return c.json({ error: \"Erreur lors de la suppression du Livre.\" }, 500);\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/books/:bookId\",\n \"/vibe/books/:bookId\",\n \"/v1/books/:bookId\",\n ], handleDeleteBook);\n\n // 5. REJOINDRE UN LIVRE PAR CODE / LIEN (adhésion immédiate)\n const handleJoinBook = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const body = await c.req.json().catch(() => ({}));\n const code = normalizeBookCode(body?.code);\n if (code.length < 4) {\n return c.json(\n { success: false, error: \"Code d'invitation invalide.\" },\n 400,\n );\n }\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const rows = await sql`\n SELECT id, user_id, title, icon, join_code FROM vibe_books WHERE join_code = ${code} LIMIT 1\n `;\n if (rows.length === 0) {\n return c.json({\n success: false,\n error: \"Aucun Livre ne correspond à ce code.\",\n }, 404);\n }\n\n const book = rows[0];\n const isOwner = Number(book.user_id) === userId;\n let alreadyMember = isOwner;\n if (!isOwner) {\n const inserted = await sql`\n INSERT INTO vibe_book_members (book_id, user_id, role)\n VALUES (${book.id}::uuid, ${userId}, 'member')\n ON CONFLICT (book_id, user_id) DO NOTHING\n RETURNING id\n `;\n alreadyMember = inserted.length === 0;\n if (!alreadyMember) {\n await sql`UPDATE vibe_books SET updated_at = NOW() WHERE id = ${book.id}::uuid`\n .catch(() => {});\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${book.user_id}, ${userId}, 'book_join', ${`a rejoint votre Livre « ${book.title} »`})\n `;\n await pushRealtimeEvent(Number(book.user_id), \"notification\", {\n type: \"book_join\",\n book_id: book.id,\n actor_id: userId,\n });\n } catch {\n // notification best-effort\n }\n }\n }\n\n const countRows =\n await sql`SELECT COUNT(*) AS n FROM vibe_book_members WHERE book_id = ${book.id}::uuid`;\n\n // Conversation Messages du Livre : garantie + membres synchronisés\n const conversationId = await ensureBookConversation(sql, {\n id: String(book.id),\n user_id: Number(book.user_id),\n title: String(book.title),\n }).catch(() => null);\n if (conversationId && !alreadyMember) {\n const memberRows = await sql`\n SELECT user_id FROM dm_group_members WHERE conversation_id = ${conversationId}::uuid\n `.catch(() => []);\n const memberIds = (memberRows as any[]).map((r) => Number(r.user_id));\n await pushToUsers(\n memberIds.length > 0 ? memberIds : [userId],\n \"group_updated\",\n {\n conversation_id: conversationId,\n action: \"added\",\n book_id: String(book.id),\n },\n ).catch(() => {});\n }\n\n return c.json({\n success: true,\n already_member: alreadyMember,\n book: {\n id: book.id,\n title: book.title,\n icon: book.icon,\n join_code: book.join_code,\n user_id: book.user_id,\n is_owner: isOwner,\n role: isOwner ? \"owner\" : \"member\",\n members_count: Number(countRows[0]?.n || 0),\n conversation_id: conversationId || null,\n },\n });\n } catch (err: any) {\n console.error(\"[vibe-books] Join error:\", err);\n return c.json({ error: \"Erreur lors de la jointure du Livre.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/join\",\n \"/vibe/books/join\",\n \"/v1/books/join\",\n ], handleJoinBook);\n\n // 6. MEMBRES D'UN LIVRE (qui a rejoint)\n const handleGetBookMembers = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const access = await sql`\n SELECT b.id FROM vibe_books b WHERE b.id = ${bookId}::uuid AND ${\n bookAccessClause(sql, userId)\n } LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n const members = await fetchBookMembers(sql, bookId);\n return c.json({ success: true, members });\n } catch (err: any) {\n console.error(\"[vibe-books] Members error:\", err);\n return c.json(\n { error: \"Erreur lors de la récupération des membres.\" },\n 500,\n );\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/books/:bookId/members\",\n \"/vibe/books/:bookId/members\",\n \"/v1/books/:bookId/members\",\n ], handleGetBookMembers);\n\n // 7. QUITTER UN LIVRE (membres non propriétaires)\n const handleLeaveBook = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const rows =\n await sql`SELECT id, user_id FROM vibe_books WHERE id = ${bookId}::uuid LIMIT 1`;\n if (rows.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n if (Number(rows[0].user_id) === userId) {\n return c.json({\n success: false,\n error:\n \"Le créateur ne peut pas quitter son Livre. Supprimez-le à la place.\",\n code: \"OWNER_CANNOT_LEAVE\",\n }, 403);\n }\n\n const deleted = await sql`\n DELETE FROM vibe_book_members\n WHERE book_id = ${bookId}::uuid AND user_id = ${userId}\n RETURNING id\n `;\n if (deleted.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n await removeBookConversationMember(sql, bookId, userId).catch(() => {});\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-books] Leave error:\", err);\n return c.json({ error: \"Erreur lors de la sortie du Livre.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/leave\",\n \"/vibe/books/:bookId/leave\",\n \"/v1/books/:bookId/leave\",\n ], handleLeaveBook);\n\n // 8. RÉGÉNÉRER LE CODE DE PARTAGE (créateur uniquement, invalide l'ancien lien)\n const handleRegenerateCode = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const rows = await sql`\n SELECT id FROM vibe_books WHERE id = ${bookId}::uuid AND user_id = ${userId} LIMIT 1\n `;\n if (rows.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n for (let attempt = 0; attempt < 5; attempt++) {\n const code = makeBookCode();\n try {\n const updated = await sql`\n UPDATE vibe_books SET join_code = ${code}, updated_at = NOW()\n WHERE id = ${bookId}::uuid\n RETURNING join_code\n `;\n return c.json({\n success: true,\n join_code: updated[0]?.join_code || code,\n });\n } catch {\n // collision de code : nouvelle tentative\n }\n }\n return c.json({ error: \"Impossible de générer un nouveau code.\" }, 500);\n } catch (err: any) {\n console.error(\"[vibe-books] Regenerate error:\", err);\n return c.json({ error: \"Erreur lors de la régénération du code.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/regenerate-code\",\n \"/vibe/books/:bookId/regenerate-code\",\n \"/v1/books/:bookId/regenerate-code\",\n ], handleRegenerateCode);\n\n // 9. ENREGISTRER / RETIRER UNE VIBE D'UN LIVRE (toggle, tout membre)\n const handleToggleBookItem = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const postId = c.req.param(\"postId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const access = await sql`\n SELECT b.id FROM vibe_books b WHERE b.id = ${bookId}::uuid AND ${\n bookAccessClause(sql, userId)\n } LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n const exists =\n await sql`SELECT 1 FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (exists.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n\n const already = await sql`\n SELECT 1 FROM vibe_book_items WHERE book_id = ${bookId}::uuid AND post_id = ${postId}::uuid\n `;\n if (already.length > 0) {\n await sql`DELETE FROM vibe_book_items WHERE book_id = ${bookId}::uuid AND post_id = ${postId}::uuid`;\n return c.json({ success: true, saved: false });\n } else {\n await sql`\n INSERT INTO vibe_book_items (book_id, post_id, added_by)\n VALUES (${bookId}::uuid, ${postId}::uuid, ${userId})\n ON CONFLICT DO NOTHING\n `;\n return c.json({ success: true, saved: true });\n }\n } catch (err: any) {\n console.error(\"[vibe-books] Toggle item error:\", err);\n return c.json(\n { error: \"Erreur lors de l'enregistrement dans le Livre.\" },\n 500,\n );\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/posts/:postId\",\n \"/vibe/books/:bookId/posts/:postId\",\n \"/v1/books/:bookId/posts/:postId\",\n ], handleToggleBookItem);\n\n // 10. CONTENU D'UN LIVRE (Vibe partagées + membres, même forme que le fil)\n const handleGetBookPosts = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const bookRows = await sql`\n SELECT b.id, b.title, b.icon, b.created_at, b.join_code, b.user_id, COALESCE(b.is_public, FALSE) AS is_public,\n (b.user_id = ${userId}) AS is_owner,\n (b.user_id = ${userId} OR EXISTS (SELECT 1 FROM vibe_book_members m2 WHERE m2.book_id = b.id AND m2.user_id = ${userId})) AS is_member,\n COALESCE(\n (SELECT m.role FROM vibe_book_members m WHERE m.book_id = b.id AND m.user_id = ${userId} LIMIT 1),\n CASE WHEN b.user_id = ${userId} THEN 'owner' ELSE 'member' END\n ) AS role,\n (SELECT COUNT(*) FROM vibe_book_members bm WHERE bm.book_id = b.id) AS members_count,\n (SELECT dm.id FROM dm_conversations dm WHERE dm.book_id = b.id LIMIT 1) AS conversation_id\n FROM vibe_books b\n WHERE b.id = ${bookId}::uuid AND (${\n bookAccessClause(sql, userId)\n } OR COALESCE(b.is_public, FALSE) = TRUE)\n LIMIT 1\n `;\n if (bookRows.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n // Un simple lecteur d'un Livre public ne doit jamais voir le code d'invitation\n const book: any = { ...bookRows[0] };\n if (!book.is_member) {\n delete book.join_code;\n }\n\n const rows = await sql`\n SELECT p.*, pr.display_name, pr.avatar_url, u.username,\n (SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${userId} AND interaction_type = 'like') > 0 as has_liked,\n (SELECT COUNT(*) FROM post_interactions WHERE post_id = p.id AND user_id = ${userId} AND interaction_type = 'repost') > 0 as has_reposted,\n (SELECT COUNT(*) FROM bookmarks WHERE post_id = p.id AND user_id = ${userId}) > 0 as has_bookmarked,\n (SELECT pi.interaction_type FROM post_interactions pi WHERE pi.post_id = p.id AND pi.user_id = ${userId} AND pi.interaction_type IN ('interest_more', 'interest_less') LIMIT 1) as my_feedback,\n bi.added_at as saved_at,\n bi.added_by,\n COALESCE(bi.is_pinned, FALSE) AS is_pinned,\n bi.pinned_at,\n au.username AS added_by_username,\n ap.display_name AS added_by_display_name,\n ap.avatar_url AS added_by_avatar_url\n FROM vibe_book_items bi\n JOIN posts p ON p.id = bi.post_id\n JOIN users u ON u.id = p.author_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n LEFT JOIN users au ON au.id = bi.added_by\n LEFT JOIN profiles ap ON ap.user_id = bi.added_by\n WHERE bi.book_id = ${bookId}::uuid\n AND (COALESCE(p.status, 'published') <> 'scheduled' OR p.author_id = ${userId})\n ORDER BY COALESCE(bi.is_pinned, FALSE) DESC, bi.pinned_at DESC NULLS LAST, bi.added_at DESC\n LIMIT 200\n `;\n\n const ids = rows.map((r: any) => String(r.id));\n const media = ids.length\n ? await sql`SELECT post_id, url, media_type, alt_text FROM media_assets WHERE post_id = ANY(${ids}::uuid[])`\n : [];\n const byPost: Record<string, any[]> = {};\n for (const m of media) {\n (byPost[String(m.post_id)] ||= []).push(m);\n }\n const posts = rows.map((r: any) => ({\n ...r,\n media_assets: byPost[String(r.id)] || [],\n }));\n await attachQuotedPosts(posts);\n await attachBookRefs(posts, userId).catch(() => {});\n\n // Membres visibles uniquement pour les membres/propriétaires du Livre\n const members = book.is_member ? await fetchBookMembers(sql, bookId) : [];\n\n return c.json({ success: true, book, members, posts });\n } catch (err: any) {\n console.error(\"[vibe-books] Book posts error:\", err);\n return c.json({ error: \"Erreur lors de la récupération du Livre.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/books/:bookId/posts\",\n \"/vibe/books/:bookId/posts\",\n \"/v1/books/:bookId/posts\",\n ], handleGetBookPosts);\n\n // 11. LIVRES CONTENANT UNE VIBE DONNÉE (badge du PostCard)\n const handleBooksForPost = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const postId = c.req.param(\"postId\");\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const rows = await sql`\n SELECT bi.book_id FROM vibe_book_items bi\n JOIN vibe_books b ON b.id = bi.book_id\n WHERE bi.post_id = ${postId}::uuid AND ${bookAccessClause(sql, userId)}\n `;\n\n return c.json({\n success: true,\n book_ids: rows.map((r: any) => String(r.book_id)),\n });\n } catch (err: any) {\n console.error(\"[vibe-books] Books for post error:\", err);\n return c.json(\n { error: \"Erreur lors de la vérification des Livres.\" },\n 500,\n );\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/books/for-post/:postId\",\n \"/vibe/books/for-post/:postId\",\n \"/v1/books/for-post/:postId\",\n ], handleBooksForPost);\n\n // 12. ÉPINGLER UNE VIBE DANS UN LIVRE (max 3 par Livre, membres autorisés)\n const handlePinBookPost = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const postId = c.req.param(\"postId\");\n const body = await c.req.json().catch(() => ({}));\n const pinned = body?.pinned !== false;\n\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const access = await sql`\n SELECT b.id FROM vibe_books b\n WHERE b.id = ${bookId}::uuid AND ${bookAccessClause(sql, userId)}\n LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n const item = await sql`\n SELECT 1 FROM vibe_book_items WHERE book_id = ${bookId}::uuid AND post_id = ${postId}::uuid LIMIT 1\n `;\n if (item.length === 0) {\n return c.json({ error: \"Cette Vibe n'est pas dans ce Livre.\" }, 404);\n }\n\n if (pinned) {\n const countRows = await sql`\n SELECT COUNT(*) AS n FROM vibe_book_items\n WHERE book_id = ${bookId}::uuid AND COALESCE(is_pinned, FALSE) = TRUE AND post_id <> ${postId}::uuid\n `;\n if (Number(countRows[0]?.n || 0) >= 3) {\n return c.json({\n error: \"Maximum 3 Vibes épinglées par Livre.\",\n code: \"PIN_LIMIT\",\n }, 403);\n }\n await sql`\n UPDATE vibe_book_items SET is_pinned = TRUE, pinned_at = NOW(), pinned_by = ${userId}\n WHERE book_id = ${bookId}::uuid AND post_id = ${postId}::uuid\n `;\n } else {\n await sql`\n UPDATE vibe_book_items SET is_pinned = FALSE, pinned_at = NULL, pinned_by = NULL\n WHERE book_id = ${bookId}::uuid AND post_id = ${postId}::uuid\n `;\n }\n await sql`UPDATE vibe_books SET updated_at = NOW() WHERE id = ${bookId}::uuid`\n .catch(() => {});\n return c.json({ success: true, pinned });\n } catch (err: any) {\n console.error(\"[vibe-books] Pin error:\", err);\n return c.json({ error: \"Erreur lors de l'épinglage.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/posts/:postId/pin\",\n \"/vibe/books/:bookId/posts/:postId/pin\",\n \"/v1/books/:bookId/posts/:postId/pin\",\n ], handlePinBookPost);\n\n // 13. EXCLURE UN MEMBRE DU LIVRE (créateur uniquement)\n const handleKickBookMember = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const targetId = Number(c.req.param(\"userId\"));\n if (!targetId) return c.json({ error: \"Membre invalide.\" }, 400);\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const bookRows =\n await sql`SELECT user_id, title FROM vibe_books WHERE id = ${bookId}::uuid LIMIT 1`;\n if (bookRows.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n if (Number(bookRows[0].user_id) !== userId) {\n return c.json({\n error: \"Seul le créateur du Livre peut exclure un membre.\",\n }, 403);\n }\n if (targetId === userId) {\n return c.json({\n error: \"Le créateur ne peut pas s'exclure de son propre Livre.\",\n }, 400);\n }\n\n const del = await sql`\n DELETE FROM vibe_book_members WHERE book_id = ${bookId}::uuid AND user_id = ${targetId} RETURNING 1\n `;\n if (del.length === 0) {\n return c.json({ error: \"Ce membre ne fait pas partie du Livre.\" }, 404);\n }\n\n await removeBookConversationMember(sql, bookId, targetId).catch(() => {});\n\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${targetId}, ${userId}, 'book_join', ${`vous a retiré du Livre « ${\n bookRows[0].title\n } »`})\n `;\n await pushRealtimeEvent(targetId, \"notification\", {\n type: \"book_join\",\n book_id: bookId,\n actor_id: userId,\n });\n } catch {}\n await sql`UPDATE vibe_books SET updated_at = NOW() WHERE id = ${bookId}::uuid`\n .catch(() => {});\n return c.json({ success: true, removed: targetId });\n } catch (err: any) {\n console.error(\"[vibe-books] Kick error:\", err);\n return c.json({ error: \"Erreur lors de l'exclusion du membre.\" }, 500);\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/books/:bookId/members/:userId\",\n \"/vibe/books/:bookId/members/:userId\",\n \"/v1/books/:bookId/members/:userId\",\n ], handleKickBookMember);\n\n // 14. TRANSFÉRER LA PROPRIÉTÉ DU LIVRE (créateur → membre)\n const handleTransferBookOwnership = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const targetId = Number(c.req.param(\"userId\"));\n if (!targetId || targetId === userId) {\n return c.json({ error: \"Cible invalide.\" }, 400);\n }\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const bookRows =\n await sql`SELECT user_id, title FROM vibe_books WHERE id = ${bookId}::uuid LIMIT 1`;\n if (bookRows.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n if (Number(bookRows[0].user_id) !== userId) {\n return c.json({\n error: \"Seul le créateur du Livre peut transférer la propriété.\",\n }, 403);\n }\n const targetMember = await sql`\n SELECT 1 FROM vibe_book_members WHERE book_id = ${bookId}::uuid AND user_id = ${targetId} LIMIT 1\n `;\n if (targetMember.length === 0) {\n return c.json({ error: \"Ce membre ne fait pas partie du Livre.\" }, 404);\n }\n\n const updated = await sql`\n UPDATE vibe_books SET user_id = ${targetId}, updated_at = NOW()\n WHERE id = ${bookId}::uuid AND user_id = ${userId}\n RETURNING id\n `;\n if (updated.length === 0) {\n return c.json({ error: \"Transfert impossible.\" }, 409);\n }\n\n await sql`UPDATE vibe_book_members SET role = 'member' WHERE book_id = ${bookId}::uuid AND user_id = ${userId}`;\n await sql`UPDATE vibe_book_members SET role = 'owner' WHERE book_id = ${bookId}::uuid AND user_id = ${targetId}`;\n\n await transferBookConversationOwnership(sql, bookId, userId, targetId)\n .catch(() => {});\n\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${targetId}, ${userId}, 'book_join', ${`vous a transféré la propriété du Livre « ${\n bookRows[0].title\n } »`})\n `;\n await pushRealtimeEvent(targetId, \"notification\", {\n type: \"book_join\",\n book_id: bookId,\n actor_id: userId,\n });\n } catch {}\n return c.json({ success: true, new_owner: targetId });\n } catch (err: any) {\n console.error(\"[vibe-books] Transfer error:\", err);\n return c.json({ error: \"Erreur lors du transfert de propriété.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/members/:userId/transfer-ownership\",\n \"/vibe/books/:bookId/members/:userId/transfer-ownership\",\n \"/v1/books/:bookId/members/:userId/transfer-ownership\",\n ], handleTransferBookOwnership);\n\n // 15. DISCUSSION DU LIVRE (commentaires au niveau du Livre)\n const handleGetBookComments = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const limit = Math.min(\n 100,\n Math.max(1, Number(c.req.query(\"limit\") || 50)),\n );\n const offset = Math.max(0, Number(c.req.query(\"offset\") || 0));\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const access = await sql`\n SELECT b.id FROM vibe_books b\n WHERE b.id = ${bookId}::uuid AND ${bookAccessClause(sql, userId)}\n LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n const comments = await sql`\n SELECT bc.id, bc.content, bc.created_at, bc.user_id,\n u.username, pr.display_name, pr.avatar_url,\n bc.reply_to_id,\n rc.content AS reply_content, ru.username AS reply_username\n FROM vibe_book_comments bc\n JOIN users u ON u.id = bc.user_id\n LEFT JOIN profiles pr ON pr.user_id = bc.user_id\n LEFT JOIN vibe_book_comments rc ON rc.id = bc.reply_to_id\n LEFT JOIN users ru ON ru.id = rc.user_id\n WHERE bc.book_id = ${bookId}::uuid\n ORDER BY bc.created_at DESC\n LIMIT ${limit} OFFSET ${offset}\n `;\n\n // Réactions emoji agrégées { emoji, count, mine } (modèle DMs)\n try {\n const ids = (comments as any[]).map((cmt) => cmt.id);\n if (ids.length > 0) {\n const reactions = await sql`\n SELECT comment_id, emoji, user_id FROM vibe_book_comment_reactions\n WHERE comment_id = ANY(${ids}::uuid[])\n `;\n const byComment = new Map<\n string,\n { emoji: string; user_id: number }[]\n >();\n for (const r of reactions) {\n const key = String(r.comment_id);\n if (!byComment.has(key)) byComment.set(key, []);\n byComment.get(key)!.push({\n emoji: r.emoji,\n user_id: Number(r.user_id),\n });\n }\n for (const cmt of comments as any[]) {\n const list = byComment.get(String(cmt.id)) || [];\n const grouped: { emoji: string; count: number; mine: boolean }[] =\n [];\n for (const r of list) {\n const g = grouped.find((x) => x.emoji === r.emoji);\n if (g) {\n g.count += 1;\n g.mine = g.mine || r.user_id === userId;\n } else {\n grouped.push({\n emoji: r.emoji,\n count: 1,\n mine: r.user_id === userId,\n });\n }\n }\n cmt.reactions = grouped;\n }\n }\n } catch {}\n for (const cmt of comments as any[]) {\n if (!cmt.reactions) cmt.reactions = [];\n }\n\n return c.json({ success: true, comments });\n } catch (err: any) {\n console.error(\"[vibe-books] Comments list error:\", err);\n return c.json({\n error: \"Erreur lors de la récupération de la discussion.\",\n }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/books/:bookId/comments\",\n \"/vibe/books/:bookId/comments\",\n \"/v1/books/:bookId/comments\",\n ], handleGetBookComments);\n\n const handleAddBookComment = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const body = await c.req.json().catch(() => ({}));\n const plain = stripHtmlTags(String(body?.content || \"\")).trim();\n if (!plain) {\n return c.json(\n { error: \"Le message de la discussion est requis.\" },\n 400,\n );\n }\n if (plain.length > 2000) {\n return c.json(\n { error: \"Message trop long (max 2000 caractères).\" },\n 400,\n );\n }\n\n // Réponse citée : le commentaire ciblé doit appartenir au même Livre\n const rawReplyTo = typeof body?.reply_to_id === \"string\"\n ? body.reply_to_id\n : \"\";\n const replyToId =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n rawReplyTo,\n )\n ? rawReplyTo\n : null;\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const access = await sql`\n SELECT b.id, b.user_id AS owner_id, b.title FROM vibe_books b\n WHERE b.id = ${bookId}::uuid AND ${bookAccessClause(sql, userId)}\n LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Livre introuvable.\" }, 404);\n }\n\n let validReplyTo: string | null = null;\n if (replyToId) {\n const replyRows = await sql`\n SELECT 1 FROM vibe_book_comments\n WHERE id = ${replyToId}::uuid AND book_id = ${bookId}::uuid\n LIMIT 1\n `;\n if (replyRows.length === 0) {\n return c.json({\n error: \"Le message auquel vous répondez est introuvable.\",\n }, 400);\n }\n validReplyTo = replyToId;\n }\n\n const inserted = await sql`\n INSERT INTO vibe_book_comments (book_id, user_id, content, reply_to_id)\n VALUES (${bookId}::uuid, ${userId}, ${plain}, ${validReplyTo})\n RETURNING id, content, created_at, user_id\n `;\n await sql`UPDATE vibe_books SET updated_at = NOW() WHERE id = ${bookId}::uuid`\n .catch(() => {});\n\n // Notification légère au créateur (best-effort, hors auto-commentaire)\n const ownerId = Number(access[0].owner_id);\n if (ownerId !== userId) {\n try {\n await sql`\n INSERT INTO notifications (recipient_id, actor_id, type, message)\n VALUES (${ownerId}, ${userId}, 'book_join', ${`a commenté la discussion du Livre « ${\n access[0].title\n } »`})\n `;\n await pushRealtimeEvent(ownerId, \"notification\", {\n type: \"book_join\",\n book_id: bookId,\n actor_id: userId,\n });\n } catch {}\n }\n\n const enriched = await sql`\n SELECT bc.id, bc.content, bc.created_at, bc.user_id,\n u.username, pr.display_name, pr.avatar_url,\n bc.reply_to_id,\n rc.content AS reply_content, ru.username AS reply_username\n FROM vibe_book_comments bc\n JOIN users u ON u.id = bc.user_id\n LEFT JOIN profiles pr ON pr.user_id = bc.user_id\n LEFT JOIN vibe_book_comments rc ON rc.id = bc.reply_to_id\n LEFT JOIN users ru ON ru.id = rc.user_id\n WHERE bc.id = ${inserted[0].id}::uuid\n LIMIT 1\n `;\n const comment = enriched[0] || inserted[0];\n if (comment && !comment.reactions) comment.reactions = [];\n return c.json({ success: true, comment }, 201);\n } catch (err: any) {\n console.error(\"[vibe-books] Add comment error:\", err);\n return c.json({ error: \"Erreur lors de l'ajout du commentaire.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/comments\",\n \"/vibe/books/:bookId/comments\",\n \"/v1/books/:bookId/comments\",\n ], handleAddBookComment);\n\n const handleDeleteBookComment = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const commentId = c.req.param(\"commentId\");\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const rows = await sql`\n SELECT bc.user_id AS author_id, b.user_id AS owner_id\n FROM vibe_book_comments bc\n JOIN vibe_books b ON b.id = bc.book_id\n WHERE bc.id = ${commentId}::uuid AND bc.book_id = ${bookId}::uuid\n LIMIT 1\n `;\n if (rows.length === 0) {\n return c.json({ error: \"Commentaire introuvable.\" }, 404);\n }\n if (\n Number(rows[0].author_id) !== userId &&\n Number(rows[0].owner_id) !== userId\n ) {\n return c.json({\n error:\n \"Seuls l'auteur du commentaire ou le créateur du Livre peuvent le supprimer.\",\n }, 403);\n }\n await sql`DELETE FROM vibe_book_comments WHERE id = ${commentId}::uuid`;\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"[vibe-books] Delete comment error:\", err);\n return c.json(\n { error: \"Erreur lors de la suppression du commentaire.\" },\n 500,\n );\n }\n };\n registerMulti(\"delete\", [\n \"/api/vibe/books/:bookId/comments/:commentId\",\n \"/vibe/books/:bookId/comments/:commentId\",\n \"/v1/books/:bookId/comments/:commentId\",\n ], handleDeleteBookComment);\n\n // Réaction emoji sur un message de la discussion (toggle, membres du Livre)\n const handleReactBookComment = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const bookId = c.req.param(\"bookId\");\n const commentId = c.req.param(\"commentId\");\n const body = await c.req.json().catch(() => ({}));\n const emoji = String(body?.emoji || \"\");\n if (!emoji || emoji.length > 16) {\n return c.json({ error: \"Emoji requis.\" }, 400);\n }\n\n const sql = getDb();\n await ensureBooksTables(sql);\n const access = await sql`\n SELECT bc.id FROM vibe_book_comments bc\n JOIN vibe_books b ON b.id = bc.book_id\n WHERE bc.id = ${commentId}::uuid AND bc.book_id = ${bookId}::uuid\n AND ${bookAccessClause(sql, userId)}\n LIMIT 1\n `;\n if (access.length === 0) {\n return c.json({ error: \"Commentaire introuvable.\" }, 404);\n }\n\n const existing = await sql`\n SELECT id FROM vibe_book_comment_reactions\n WHERE comment_id = ${commentId}::uuid AND user_id = ${userId} AND emoji = ${emoji}\n LIMIT 1\n `;\n let reacted = false;\n if (existing.length > 0) {\n await sql`DELETE FROM vibe_book_comment_reactions WHERE id = ${\n existing[0].id\n }`;\n } else {\n await sql`\n INSERT INTO vibe_book_comment_reactions (comment_id, user_id, emoji)\n VALUES (${commentId}::uuid, ${userId}, ${emoji})\n ON CONFLICT (comment_id, user_id, emoji) DO NOTHING\n `;\n reacted = true;\n }\n\n const all = await sql`\n SELECT emoji, user_id FROM vibe_book_comment_reactions WHERE comment_id = ${commentId}::uuid\n `;\n const grouped: { emoji: string; count: number; mine: boolean }[] = [];\n for (const r of all as any[]) {\n const g = grouped.find((x) => x.emoji === r.emoji);\n if (g) {\n g.count += 1;\n g.mine = g.mine || Number(r.user_id) === userId;\n } else {\n grouped.push({\n emoji: r.emoji,\n count: 1,\n mine: Number(r.user_id) === userId,\n });\n }\n }\n return c.json({ success: true, reacted, reactions: grouped });\n } catch (err: any) {\n console.error(\"[vibe-books] React comment error:\", err);\n return c.json({ error: \"Erreur lors de la réaction.\" }, 500);\n }\n };\n registerMulti(\"post\", [\n \"/api/vibe/books/:bookId/comments/:commentId/react\",\n \"/vibe/books/:bookId/comments/:commentId/react\",\n \"/v1/books/:bookId/comments/:commentId/react\",\n ], handleReactBookComment);\n\n // 16. RECHERCHE DE LIVRES PUBLICS (mention @livre / attachement dans un post)\n const handleSearchPublicBooks = async (c: any) => {\n try {\n const userId = await getAuthUserId(c);\n if (!userId) return c.json({ error: \"Non authentifié.\" }, 401);\n const q = String(c.req.query(\"q\") || \"\").trim().slice(0, 50);\n if (!q) return c.json({ success: true, books: [] });\n\n const sql = getDb();\n await ensureBooksTables(sql);\n\n const rows = await sql`\n SELECT b.id, b.title, b.icon, TRUE AS is_public,\n u.username AS owner_username,\n pr.display_name AS owner_display_name,\n (SELECT COUNT(*) FROM vibe_book_members bm WHERE bm.book_id = b.id) AS members_count,\n (SELECT COUNT(*) FROM vibe_book_items bi WHERE bi.book_id = b.id) AS items_count\n FROM vibe_books b\n JOIN users u ON u.id = b.user_id\n LEFT JOIN profiles pr ON pr.user_id = u.id\n WHERE COALESCE(b.is_public, FALSE) = TRUE AND b.title ILIKE ${\n \"%\" + q + \"%\"\n }\n ORDER BY items_count DESC, b.updated_at DESC NULLS LAST\n LIMIT 20\n `;\n return c.json({ success: true, books: rows });\n } catch (err: any) {\n console.error(\"[vibe-books] Public search error:\", err);\n return c.json({ error: \"Erreur lors de la recherche de Livres.\" }, 500);\n }\n };\n registerMulti(\"get\", [\n \"/api/vibe/books/public\",\n \"/vibe/books/public\",\n \"/v1/books/public\",\n ], handleSearchPublicBooks);\n}",[605],"4680835f-4a27-4872-bf07-3d942aee562c","vibe-books-conversations.ts","b6035d2c-af88-11f1-8e18-1607ee4eb77e",361,["D",1789313726383],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — CONVERSATIONS DES LIVRES (vibe-books-conversations.ts)\n * Chaque Livre possède une conversation de groupe dans Messages\n * (dm_conversations.book_id, partner_id = \"group:<uuid>\") : les mécanismes de\n * groupe existants (envoi, réactions, épingles, recherche, non-lus, SSE)\n * fonctionnent sans modification. Ce module synchronise membres et métadonnées\n * à chaque mutation du Livre + backfill idempotent des Livres existants.\n * ============================================================================\n */\n\nimport { ensureDMTables, pushToUsers } from \"./vibe-dms-core.ts\";\n\nlet bookConvTablesReady = false;\n\n/** Colonnes/index propres aux conversations de Livre (idempotent, 1×/isolate). */\nexport async function ensureBookConversationTables(sql: any): Promise<void> {\n if (bookConvTablesReady) return;\n try {\n await ensureDMTables().catch(() => {});\n await sql`ALTER TABLE dm_conversations ADD COLUMN IF NOT EXISTS book_id UUID`\n .catch(() => {});\n await sql`CREATE UNIQUE INDEX IF NOT EXISTS idx_dm_conversations_book ON dm_conversations(book_id) WHERE book_id IS NOT NULL`\n .catch(() => {});\n await sql`ALTER TABLE direct_messages ADD COLUMN IF NOT EXISTS attached_post_id UUID`\n .catch(() => {});\n await sql`CREATE INDEX IF NOT EXISTS idx_dm_attached_post ON direct_messages(attached_post_id) WHERE attached_post_id IS NOT NULL`\n .catch(() => {});\n bookConvTablesReady = true;\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] ensure tables skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Id de la conversation Messages d'un Livre (null si absente). */\nexport async function getBookConversationId(\n sql: any,\n bookId: string,\n): Promise<string | null> {\n try {\n const rows =\n await sql`SELECT id FROM dm_conversations WHERE book_id = ${bookId}::uuid LIMIT 1`;\n return rows[0] ? String(rows[0].id) : null;\n } catch {\n return null;\n }\n}\n\n/** Membres de la conversation d'un Livre (depuis dm_group_members). */\nasync function fetchConversationMemberIds(\n sql: any,\n conversationId: string,\n): Promise<number[]> {\n try {\n const rows =\n await sql`SELECT user_id FROM dm_group_members WHERE conversation_id = ${conversationId}::uuid`;\n return (rows as any[]).map((r) => Number(r.user_id)).filter((n) =>\n Number.isFinite(n)\n );\n } catch {\n return [];\n }\n}\n\n/**\n * Aligne dm_group_members sur vibe_book_members (upsert des rôles + purge des\n * partis). Retourne l'id de conversation et les membres synchronisés.\n */\nexport async function syncBookConversationMembers(\n sql: any,\n bookId: string,\n): Promise<{ conversationId: string | null; memberIds: number[] }> {\n const conversationId = await getBookConversationId(sql, bookId);\n if (!conversationId) return { conversationId: null, memberIds: [] };\n try {\n await sql`\n INSERT INTO dm_group_members (conversation_id, user_id, role, added_by)\n SELECT ${conversationId}::uuid, m.user_id,\n CASE WHEN m.role = 'owner' THEN 'admin' ELSE 'member' END,\n (SELECT user_id FROM vibe_books WHERE id = ${bookId}::uuid)\n FROM vibe_book_members m\n WHERE m.book_id = ${bookId}::uuid\n ON CONFLICT (conversation_id, user_id) DO UPDATE SET role = EXCLUDED.role\n `.catch(() => {});\n await sql`\n DELETE FROM dm_group_members\n WHERE conversation_id = ${conversationId}::uuid\n AND NOT EXISTS (\n SELECT 1 FROM vibe_book_members m\n WHERE m.book_id = ${bookId}::uuid AND m.user_id = dm_group_members.user_id\n )\n `.catch(() => {});\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] sync members failed:\",\n (err as any)?.message,\n );\n }\n const memberIds = await fetchConversationMemberIds(sql, conversationId);\n return { conversationId, memberIds };\n}\n\n/**\n * Garantit l'existence de la conversation du Livre + synchronise ses membres.\n * Retourne l'id de conversation (ou null en cas d'échec non bloquant).\n */\nexport async function ensureBookConversation(\n sql: any,\n book: { id: string; user_id: number; title: string },\n): Promise<string | null> {\n try {\n await ensureBookConversationTables(sql);\n let conversationId = await getBookConversationId(sql, book.id);\n if (!conversationId) {\n try {\n const created = await sql`\n INSERT INTO dm_conversations\n (participant_one_id, participant_two_id, is_group, group_name, created_by, book_id,\n last_message_preview, last_message_at)\n VALUES (${book.user_id}, NULL, TRUE, ${book.title}, ${book.user_id}, ${book.id}::uuid,\n 'Conversation du Livre', NOW())\n RETURNING id\n `;\n conversationId = created[0]?.id ? String(created[0].id) : null;\n } catch {\n // course possible avec un autre isolate : la ligne existe peut-être déjà\n conversationId = await getBookConversationId(sql, book.id);\n }\n }\n if (!conversationId) return null;\n await syncBookConversationMembers(sql, book.id);\n return conversationId;\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] ensure failed:\",\n (err as any)?.message,\n );\n return null;\n }\n}\n\n/** Retire un membre (leave/kick) et prévient le membre retiré + les restants. */\nexport async function removeBookConversationMember(\n sql: any,\n bookId: string,\n userId: number,\n): Promise<void> {\n try {\n const conversationId = await getBookConversationId(sql, bookId);\n if (!conversationId) return;\n await sql`\n DELETE FROM dm_group_members WHERE conversation_id = ${conversationId}::uuid AND user_id = ${userId}\n `.catch(() => {});\n const memberIds = await fetchConversationMemberIds(sql, conversationId);\n await pushToUsers([userId], \"group_updated\", {\n conversation_id: conversationId,\n action: \"removed\",\n book_id: bookId,\n });\n await pushToUsers(memberIds, \"group_updated\", {\n conversation_id: conversationId,\n action: \"updated\",\n book_id: bookId,\n });\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] remove member failed:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Renomme la conversation (synchro du titre du Livre). */\nexport async function renameBookConversation(\n sql: any,\n bookId: string,\n title: string,\n): Promise<void> {\n try {\n const conversationId = await getBookConversationId(sql, bookId);\n if (!conversationId) return;\n await sql`\n UPDATE dm_conversations SET group_name = ${\n title.slice(0, 100)\n } WHERE id = ${conversationId}::uuid\n `.catch(() => {});\n const memberIds = await fetchConversationMemberIds(sql, conversationId);\n await pushToUsers(memberIds, \"group_updated\", {\n conversation_id: conversationId,\n action: \"renamed\",\n book_id: bookId,\n });\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] rename failed:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Transfère la propriété : created_by + rôles dm_group_members. */\nexport async function transferBookConversationOwnership(\n sql: any,\n bookId: string,\n fromUserId: number,\n toUserId: number,\n): Promise<void> {\n try {\n const conversationId = await getBookConversationId(sql, bookId);\n if (!conversationId) return;\n await sql`\n UPDATE dm_conversations SET created_by = ${toUserId} WHERE id = ${conversationId}::uuid\n `.catch(() => {});\n await sql`\n UPDATE dm_group_members SET role = 'admin'\n WHERE conversation_id = ${conversationId}::uuid AND user_id = ${toUserId}\n `.catch(() => {});\n await sql`\n UPDATE dm_group_members SET role = 'member'\n WHERE conversation_id = ${conversationId}::uuid AND user_id = ${fromUserId}\n `.catch(() => {});\n const memberIds = await fetchConversationMemberIds(sql, conversationId);\n await pushToUsers(memberIds, \"group_updated\", {\n conversation_id: conversationId,\n action: \"admin_transferred\",\n book_id: bookId,\n });\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] transfer failed:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Supprime la conversation, ses messages et prévient les membres. */\nexport async function deleteBookConversation(\n sql: any,\n bookId: string,\n): Promise<void> {\n try {\n const conversationId = await getBookConversationId(sql, bookId);\n if (!conversationId) return;\n const memberIds = await fetchConversationMemberIds(sql, conversationId);\n // dm_reactions n'a pas de FK sur direct_messages : purge explicite (comme les groupes)\n await sql`DELETE FROM dm_reactions WHERE message_id IN (SELECT id FROM direct_messages WHERE conversation_id = ${conversationId}::uuid)`\n .catch(() => {});\n await sql`DELETE FROM direct_messages WHERE conversation_id = ${conversationId}::uuid`\n .catch(() => {});\n await sql`DELETE FROM dm_conversations WHERE id = ${conversationId}::uuid`\n .catch(() => {});\n await pushToUsers(memberIds, \"group_updated\", {\n conversation_id: conversationId,\n action: \"deleted\",\n book_id: bookId,\n });\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] delete failed:\",\n (err as any)?.message,\n );\n }\n}\n\n/** Backfill idempotent : conversation + membres pour chaque Livre qui n'en a pas. */\nexport async function backfillBookConversations(sql: any): Promise<void> {\n try {\n await ensureBookConversationTables(sql);\n await sql`\n INSERT INTO dm_conversations\n (participant_one_id, participant_two_id, is_group, group_name, created_by, book_id,\n last_message_preview, last_message_at)\n SELECT b.user_id, NULL, TRUE, b.title, b.user_id, b.id, 'Conversation du Livre', COALESCE(b.updated_at, NOW())\n FROM vibe_books b\n WHERE NOT EXISTS (SELECT 1 FROM dm_conversations dm WHERE dm.book_id = b.id)\n `.catch(() => {});\n await sql`\n INSERT INTO dm_group_members (conversation_id, user_id, role, added_by)\n SELECT dm.id, m.user_id, CASE WHEN m.role = 'owner' THEN 'admin' ELSE 'member' END, b.user_id\n FROM dm_conversations dm\n JOIN vibe_books b ON b.id = dm.book_id\n JOIN vibe_book_members m ON m.book_id = dm.book_id\n WHERE dm.book_id IS NOT NULL\n ON CONFLICT (conversation_id, user_id) DO NOTHING\n `.catch(() => {});\n await sql`\n UPDATE dm_group_members gm SET role = 'admin'\n WHERE gm.role <> 'admin'\n AND EXISTS (\n SELECT 1 FROM dm_conversations dm\n JOIN vibe_books b ON b.id = dm.book_id\n WHERE dm.id = gm.conversation_id AND b.user_id = gm.user_id\n )\n `.catch(() => {});\n } catch (err) {\n console.warn(\n \"[vibe-books-conversations] backfill failed:\",\n (err as any)?.message,\n );\n }\n}",[613],"d02ad25d-dd31-4e1f-8b72-c10389a39cc6","vibe-ai.ts","b6e0d2c2-a9c2-11f1-8c59-1607ee4eb77e",283,["D",1789145746117],6,"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — AI TEXT TOOLS (vibe-ai.ts)\n * Outils IA textuels du composer et des posts :\n * - POST /v1/ai/text : continuation (ghost-text Tab), orthographe,\n * allonger, réduire, ton — modèle par défaut mAI\n * - POST /v1/ai/translate : « Traduire avec mAI » (détection de langue +\n * traduction, cache post_translations en base)\n * Tous les appels passent par MAIAgentFleet.callOpenRouter (modèle par défaut\n * de l'utilisateur, cf. vibe-mai-fleet.ts).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport { createRegisterMulti } from \"./vibe-common.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\n\nconst TEXT_ACTIONS = new Set([\n \"complete\",\n \"fix_spelling\",\n \"lengthen\",\n \"shorten\",\n \"tone\",\n]);\n\nconst TONE_INSTRUCTIONS: Record<string, string> = {\n professionnel:\n \"professionnel, clair et crédible, adapté à un contexte de travail\",\n amical: \"amical et chaleureux, comme entre amis\",\n humoristique:\n \"léger et humoristique, avec une touche d'esprit (sans en faire trop)\",\n direct: \"direct et percutant, va droit au but\",\n inspirant: \"inspirant et motivant\",\n poetique: \"poétique et imagé\",\n};\n\nfunction stripCodeFences(raw: string): string {\n return raw\n .replace(/^\\s*```(?:json)?\\s*/i, \"\")\n .replace(/```\\s*$/i, \"\")\n .trim();\n}\n\n/** Nettoie la sortie LLM : supprime guillemets englobants et méta-commentaires. */\nexport function cleanLlmText(raw: string): string {\n let text = stripCodeFences(String(raw || \"\"));\n text = text.replace(/^User Safety:[^\\n]*\\n*/gi, \"\");\n // Guillemets englobants uniquement (pas les guillemets internes)\n if (\n text.length >= 2 &&\n ((text.startsWith('\"') && text.endsWith('\"')) ||\n (text.startsWith(\"'\") && text.endsWith(\"'\")))\n ) {\n text = text.slice(1, -1);\n }\n return text.trim();\n}\n\n/** Extrait le premier objet JSON d'une réponse LLM (tolérant aux fences). */\nexport function extractJsonObject(raw: string): Record<string, any> | null {\n const text = stripCodeFences(raw);\n const start = text.indexOf(\"{\");\n if (start === -1) return null;\n // Parse glissant : tente depuis la première accolade jusqu'à la dernière\n for (let end = text.length; end > start; end--) {\n const candidate = text.slice(start, end);\n try {\n const parsed = JSON.parse(candidate);\n if (parsed && typeof parsed === \"object\") return parsed;\n } catch {}\n }\n return null;\n}\n\n/** Débite le quota hebdomadaire mAI (estimation ~1 token / 3 caractères). */\nexport async function debitWeeklyTokens(\n sql: any,\n userId: number,\n chars: number,\n) {\n const { weekStartStr } = getWeekData();\n const tokens = Math.max(60, Math.ceil(chars / 3));\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, ${tokens})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokens}, updated_at = NOW()\n `;\n } catch {}\n}\n\nexport function registerVibeAIRoutes(app: Hono) {\n const registerMulti = createRegisterMulti(app);\n // ── Outils texte du composer ──────────────────────────────\n const handleAIText = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json().catch(() => ({} as any));\n const text = String(body?.text || \"\");\n const action = String(body?.action || \"\");\n const tone = String(body?.tone || \"\");\n\n if (!text.trim()) return c.json({ error: \"Texte requis.\" }, 400);\n if (!TEXT_ACTIONS.has(action)) {\n return c.json({ error: \"Action invalide.\" }, 400);\n }\n // Anti-abus : la continuation se déclenche en tapant, on la plafonne plus fort\n if (\n !rateLimit(`ai-text:${userId}`, action === \"complete\" ? 40 : 20, 60_000)\n ) {\n return c.json(\n { error: \"Trop de requêtes mAI. Patientez un instant.\" },\n 429,\n );\n }\n\n const sql = getDb();\n let system: string;\n if (action === \"complete\") {\n system =\n \"Tu es l'assistant d'écriture du réseau social Vibe. On te donne le début d'une publication. \" +\n \"Continue-la naturellement et brièvement : au maximum une proposition courte (15 mots environ). \" +\n \"Ne répète JAMAIS le texte existant, ne mets aucun guillemet, aucune explication. \" +\n \"Réponds UNIQUEMENT par la suite du texte, en français. Si le texte semble complet, réponds par une très courte continuation pertinente.\";\n } else if (action === \"fix_spelling\") {\n system =\n \"Corrige l'orthographe, la grammaire et la ponctuation du texte suivant (français), sans changer le sens ni le style. \" +\n \"Conserve les hashtags, mentions @ et émojis tels quels. \" +\n \"Réponds UNIQUEMENT par le texte corrigé, sans guillemets ni commentaire.\";\n } else if (action === \"lengthen\") {\n system =\n \"Allonge le texte suivant (environ le double), en gardant le même ton, le même point de vue et les hashtags/mentions/émojis existants. \" +\n \"Reste adapté à un réseau social. Réponds UNIQUEMENT par le texte allongé, sans guillemets ni commentaire.\";\n } else if (action === \"shorten\") {\n system =\n \"Raccourcis le texte suivant d'environ moitié en conservant l'essentiel du sens, le ton et les hashtags/mentions importants. \" +\n \"Réponds UNIQUEMENT par le texte raccourci, sans guillemets ni commentaire.\";\n } else {\n const toneDesc = TONE_INSTRUCTIONS[tone] ||\n TONE_INSTRUCTIONS[tone.toLowerCase()] || `« ${tone} »`;\n system =\n `Réécris le texte suivant avec un ton ${toneDesc}, sans changer le fond du message. ` +\n \"Conserve les hashtags/mentions/émojis pertinents. Réponds UNIQUEMENT par le texte réécrit, sans guillemets ni commentaire.\";\n }\n\n const result = await MAIAgentFleet.callOpenRouter(userId, system, text);\n if (!result) {\n return c.json({\n error: \"mAI est indisponible pour le moment (modèle ou clé IA).\",\n }, 502);\n }\n\n await debitWeeklyTokens(sql, userId, text.length + result.length);\n return c.json({ success: true, text: cleanLlmText(result) });\n } catch (err: any) {\n console.error(\"[vibe-ai] AI text error:\", err);\n return c.json({ error: err?.message || \"Erreur outil texte mAI.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/ai/text\",\n \"/vibe/ai/text\",\n \"/v1/ai/text\",\n \"/ai/text\",\n ], handleAIText);\n\n // ── « Traduire avec mAI » ─────────────────────────────────\n let translationsTableReady = false;\n const ensureTranslationsTable = async () => {\n if (translationsTableReady) return;\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS post_translations (\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n target_lang TEXT NOT NULL,\n detected_language TEXT,\n translation TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (post_id, target_lang)\n )\n `;\n translationsTableReady = true;\n };\n\n const LANG_NAMES: Record<string, string> = {\n fr: \"français\",\n en: \"anglais\",\n es: \"espagnol\",\n de: \"allemand\",\n it: \"italien\",\n pt: \"portugais\",\n nl: \"néerlandais\",\n ar: \"arabe\",\n ja: \"japonais\",\n ko: \"coréen\",\n zh: \"chinois\",\n ru: \"russe\",\n hi: \"hindi\",\n tr: \"turc\",\n pl: \"polonais\",\n };\n const langLabel = (code: string) => LANG_NAMES[code.toLowerCase()] || code;\n\n const handleTranslate = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json().catch(() => ({} as any));\n const postId = String(body?.post_id || \"\");\n const rawText = String(body?.text || \"\").trim();\n const targetLang = String(body?.target_lang || \"fr\").toLowerCase().slice(\n 0,\n 8,\n );\n if (!rateLimit(`ai-translate:${userId}`, 20, 60_000)) {\n return c.json(\n { error: \"Trop de traductions. Patientez un instant.\" },\n 429,\n );\n }\n const isUuid =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(\n postId,\n );\n // Traduction de texte brut (ex : message DM) : pas de cache post_translations\n if (!isUuid) {\n if (!rawText) {\n return c.json({ error: \"Identifiant de post invalide.\" }, 400);\n }\n if (rawText.length > 8000) {\n return c.json(\n { error: \"Texte trop long (8000 caractères max).\" },\n 400,\n );\n }\n const altTargetRaw = targetLang.slice(0, 2) === \"FR\" ? \"EN-US\" : \"FR\";\n const systemRaw =\n \"Tu es le moteur de traduction du réseau social Vibe. On te donne un message privé. \" +\n \"1) Détecte sa langue d'origine. \" +\n `2) Traduis-le fidèlement en ${langLabel(targetLang)} (ou en ${\n langLabel(altTargetRaw)\n } s'il est déjà rédigé en ${\n langLabel(targetLang)\n }) : sens EXACT, ton préservé. ` +\n \"Conserve les mentions @, émojis et liens tels quels. \" +\n 'Réponds UNIQUEMENT par un objet JSON strict : {\"detected_language\": \"<langue d\\'origine en français>\", \"target_language\": \"<langue cible>\", \"translation\": \"<traduction>\"} — sans markdown ni commentaire.';\n const sqlRaw = getDb();\n const raw = await MAIAgentFleet.callOpenRouter(\n userId,\n systemRaw,\n rawText,\n );\n if (!raw) {\n return c.json({\n error: \"mAI est indisponible pour le moment (modèle ou clé IA).\",\n }, 502);\n }\n await debitWeeklyTokens(sqlRaw, userId, rawText.length + raw.length);\n const parsedRaw = extractJsonObject(raw);\n let detectedRaw = \"\";\n let translationRaw = \"\";\n let effectiveTargetRaw = targetLang;\n if (\n parsedRaw && typeof parsedRaw.translation === \"string\" &&\n parsedRaw.translation.trim()\n ) {\n detectedRaw = String(parsedRaw.detected_language || \"\").trim();\n translationRaw = cleanLlmText(parsedRaw.translation);\n if (\n parsedRaw.target_language &&\n String(parsedRaw.target_language).toLowerCase().includes(\"anglais\")\n ) {\n effectiveTargetRaw = \"EN-US\";\n }\n } else {\n translationRaw = cleanLlmText(raw);\n }\n if (!translationRaw) return c.json({ error: \"Traduction vide.\" }, 502);\n return c.json({\n success: true,\n translation: translationRaw,\n detected_language: detectedRaw,\n target_lang: effectiveTargetRaw,\n cached: false,\n });\n }\n\n const sql = getDb();\n await ensureTranslationsTable().catch(() => {});\n\n // 1. Cache : traduction déjà générée pour ce post + langue cible\n try {\n const cachedRows = await sql`\n SELECT translation, detected_language FROM post_translations\n WHERE post_id = ${postId}::uuid AND target_lang = ${targetLang}\n LIMIT 1\n `;\n if (cachedRows.length > 0) {\n return c.json({\n success: true,\n translation: cachedRows[0].translation,\n detected_language: cachedRows[0].detected_language || \"\",\n cached: true,\n });\n }\n } catch {}\n\n // 2. Génération : détection de langue + traduction en un seul appel\n const postRows =\n await sql`SELECT content FROM posts WHERE id = ${postId}::uuid LIMIT 1`;\n if (postRows.length === 0) {\n return c.json({ error: \"Publication introuvable.\" }, 404);\n }\n const content = String(postRows[0].content || \"\").trim();\n if (!content) return c.json({ error: \"Publication vide.\" }, 400);\n\n const altTarget = targetLang.slice(0, 2) === \"FR\" ? \"EN-US\" : \"FR\";\n const system =\n \"Tu es le moteur de traduction du réseau social Vibe. On te donne une publication. \" +\n \"1) Détecte sa langue d'origine. \" +\n `2) Traduis-la fidèlement en ${langLabel(targetLang)} (ou en ${\n langLabel(altTarget)\n } si elle est déjà rédigée en ${\n langLabel(targetLang)\n }) : sens EXACT, ton préservé, ton naturel de réseau social. ` +\n \"Conserve les hashtags, mentions @, émojis et liens tels quels (ne les traduis pas). \" +\n 'Réponds UNIQUEMENT par un objet JSON strict : {\"detected_language\": \"<nom de la langue d\\'origine en français>\", \"target_language\": \"<nom de la langue cible>\", \"translation\": \"<traduction>\"} — sans guillemets markdown ni commentaire.';\n\n const raw = await MAIAgentFleet.callOpenRouter(userId, system, content);\n if (!raw) {\n return c.json({\n error: \"mAI est indisponible pour le moment (modèle ou clé IA).\",\n }, 502);\n }\n\n await debitWeeklyTokens(sql, userId, content.length + raw.length);\n\n const parsed = extractJsonObject(raw);\n let detected = \"\";\n let translation = \"\";\n let effectiveTarget = targetLang;\n if (\n parsed && typeof parsed.translation === \"string\" &&\n parsed.translation.trim()\n ) {\n detected = String(parsed.detected_language || \"\").trim();\n translation = cleanLlmText(parsed.translation);\n if (\n parsed.target_language &&\n String(parsed.target_language).toLowerCase().includes(\"anglais\")\n ) {\n effectiveTarget = \"EN-US\";\n }\n } else {\n // Repli : la réponse entière est la traduction\n translation = cleanLlmText(raw);\n }\n if (!translation) return c.json({ error: \"Traduction vide.\" }, 502);\n\n // 3. Mise en cache (traductions exactes réutilisables, coût amorti)\n try {\n await sql`\n INSERT INTO post_translations (post_id, target_lang, detected_language, translation)\n VALUES (${postId}::uuid, ${effectiveTarget}, ${detected}, ${translation})\n ON CONFLICT (post_id, target_lang) DO UPDATE SET translation = EXCLUDED.translation, detected_language = EXCLUDED.detected_language\n `;\n } catch {}\n\n return c.json({\n success: true,\n translation,\n detected_language: detected,\n target_lang: effectiveTarget,\n cached: false,\n });\n } catch (err: any) {\n console.error(\"[vibe-ai] Translate error:\", err);\n return c.json({ error: err?.message || \"Erreur traduction mAI.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/ai/translate\",\n \"/vibe/ai/translate\",\n \"/v1/ai/translate\",\n \"/ai/translate\",\n ], handleTranslate);\n}",[620],"fccdc9e2-9ab3-441c-9b26-494b496471cc","translate.ts","4366534a-aa16-11f1-904d-1607ee4eb77e",268,["D",1788800889123],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — TRADUCTION DEEPL (translate.ts)\n * POST /v1/translate : traduction des publications ET des commentaires via\n * l'API DeepL, avec repli automatique sur le moteur mAI (OpenRouter) si\n * toutes les clés DeepL échouent.\n * - DEEPL_API_KEY : clé principale (variables Val Town)\n * - DEEPL_API_KEY_2 : clé de secours, essayée si la première échoue\n * Les clés gratuites (suffixe « :fx ») sont routées vers api-free.deepl.com.\n * Le contenu HTML est envoyé avec tag_handling=html (balises préservées) et\n * les traductions sont mises en cache (post_translations / comment_translations).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getWeekData,\n rateLimit,\n verifyToken,\n} from \"./config.ts\";\nimport { createRegisterMulti } from \"./vibe-common.ts\";\nimport { MAIAgentFleet } from \"./vibe-mai-fleet.ts\";\n\n/** Codes cibles acceptés par DeepL /v2/translate (target_lang). */\nconst DEEPL_TARGET_LANGS = new Set([\n \"AR\",\n \"BG\",\n \"CS\",\n \"DA\",\n \"DE\",\n \"EL\",\n \"EN\",\n \"ES\",\n \"ET\",\n \"FI\",\n \"FR\",\n \"HE\",\n \"HU\",\n \"ID\",\n \"IT\",\n \"JA\",\n \"KO\",\n \"LT\",\n \"LV\",\n \"NB\",\n \"NL\",\n \"PL\",\n \"PT\",\n \"RO\",\n \"RU\",\n \"SK\",\n \"SL\",\n \"SV\",\n \"TR\",\n \"UK\",\n \"VI\",\n \"ZH\",\n]);\n\n/** Normalise « fr », « en-us », « pt_BR »… vers un code DeepL valide (null si inconnu). */\nfunction normalizeTargetLang(raw: string): string | null {\n const upper = String(raw || \"\").trim().toUpperCase().replace(\"_\", \"-\");\n if (!upper) return null;\n if (/^(EN|PT)-(US|GB|BR|PT)$/.test(upper)) return upper;\n const base = upper.slice(0, 2);\n if (base === \"EN\") return \"EN-US\";\n if (base === \"PT\") return \"PT-PT\";\n return DEEPL_TARGET_LANGS.has(base) ? base : null;\n}\n\n/** Les clés DeepL gratuites (suffixe « :fx ») utilisent un host dédié. */\nfunction deeplHost(key: string): string {\n return key.endsWith(\":fx\")\n ? \"https://api-free.deepl.com\"\n : \"https://api.deepl.com\";\n}\n\n/** Clés DeepL dans l'ordre de priorité (DEEPL_API_KEY puis DEEPL_API_KEY_2). */\nfunction getDeeplKeys(): string[] {\n const read = (name: string) =>\n (typeof Deno !== \"undefined\" ? Deno.env?.get(name) : null) ||\n (typeof process !== \"undefined\" ? (process.env as any)?.[name] : null) ||\n \"\";\n return [read(\"DEEPL_API_KEY\"), read(\"DEEPL_API_KEY_2\")]\n .map((k) => String(k).trim())\n .filter(Boolean);\n}\n\n/** Appel DeepL /v2/translate : essaie chaque clé dans l'ordre (fallback simple). */\nasync function callDeepl(\n text: string,\n targetLang: string,\n): Promise<{ text: string; detected: string }> {\n const keys = getDeeplKeys();\n if (keys.length === 0) {\n throw new Error(\"Aucune clé DeepL configurée (DEEPL_API_KEY).\");\n }\n const errors: string[] = [];\n for (const key of keys) {\n try {\n const res = await fetch(`${deeplHost(key)}/v2/translate`, {\n method: \"POST\",\n headers: {\n \"Authorization\": `DeepL-Auth-Key ${key}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n text: [text],\n target_lang: targetLang,\n tag_handling: \"html\",\n }),\n signal: AbortSignal.timeout(15_000),\n });\n if (!res.ok) {\n errors.push(`HTTP ${res.status}`);\n continue;\n }\n const data = await res.json();\n const tr = data?.translations?.[0];\n if (!tr?.text) {\n errors.push(\"réponse vide\");\n continue;\n }\n return {\n text: String(tr.text),\n detected: String(tr.detected_source_language || \"\").toUpperCase(),\n };\n } catch (err: any) {\n errors.push(err?.message || \"erreur réseau\");\n }\n }\n throw new Error(`DeepL indisponible (${errors.join(\" ; \")})`);\n}\n\nconst LANG_LABELS: Record<string, string> = {\n ar: \"arabe\",\n bg: \"bulgare\",\n cs: \"tchèque\",\n da: \"danois\",\n de: \"allemand\",\n el: \"grec\",\n en: \"anglais\",\n es: \"espagnol\",\n et: \"estonien\",\n fi: \"finnois\",\n fr: \"français\",\n he: \"hébreu\",\n hu: \"hongrois\",\n id: \"indonésien\",\n it: \"italien\",\n ja: \"japonais\",\n ko: \"coréen\",\n lt: \"lituanien\",\n lv: \"letton\",\n nb: \"norvégien\",\n nl: \"néerlandais\",\n pl: \"polonais\",\n pt: \"portugais\",\n ro: \"roumain\",\n ru: \"russe\",\n sk: \"slovaque\",\n sl: \"slovène\",\n sv: \"suédois\",\n tr: \"turc\",\n uk: \"ukrainien\",\n vi: \"vietnamien\",\n zh: \"chinois\",\n};\nconst langLabel = (code: string) =>\n LANG_LABELS[code.toLowerCase().slice(0, 2)] || code;\n\n// ── Helpers mAI : copies locales de vibe-ai.ts. translate.ts doit rester\n// auto-suffisant — un déploiement partiel peut servir un vibe-ai.ts sans\n// ces exports (cf. ERR_MODULE_NOT_FOUND au boot du val). ──\n\nfunction stripCodeFences(raw: string): string {\n return raw\n .replace(/^\\s*```(?:json)?\\s*/i, \"\")\n .replace(/```\\s*$/i, \"\")\n .trim();\n}\n\n/** Nettoie la sortie LLM : supprime guillemets englobants et méta-commentaires. */\nfunction cleanLlmText(raw: string): string {\n let text = stripCodeFences(String(raw || \"\"));\n text = text.replace(/^User Safety:[^\\n]*\\n*/gi, \"\");\n // Guillemets englobants uniquement (pas les guillemets internes)\n if (\n text.length >= 2 &&\n ((text.startsWith('\"') && text.endsWith('\"')) ||\n (text.startsWith(\"'\") && text.endsWith(\"'\")))\n ) {\n text = text.slice(1, -1);\n }\n return text.trim();\n}\n\n/** Extrait le premier objet JSON d'une réponse LLM (tolérant aux fences). */\nfunction extractJsonObject(raw: string): Record<string, any> | null {\n const text = stripCodeFences(raw);\n const start = text.indexOf(\"{\");\n if (start === -1) return null;\n // Parse glissant : tente depuis la première accolade jusqu'à la dernière\n for (let end = text.length; end > start; end--) {\n const candidate = text.slice(start, end);\n try {\n const parsed = JSON.parse(candidate);\n if (parsed && typeof parsed === \"object\") return parsed;\n } catch {}\n }\n return null;\n}\n\n/** Débite le quota hebdomadaire mAI (estimation ~1 token / 3 caractères). */\nasync function debitWeeklyTokens(sql: any, userId: number, chars: number) {\n const { weekStartStr } = getWeekData();\n const tokens = Math.max(60, Math.ceil(chars / 3));\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}, ${weekStartStr}::date, ${tokens})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokens}, updated_at = NOW()\n `;\n } catch {}\n}\n\nconst UUID_RE =\n /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\n\nexport function registerTranslateRoutes(app: Hono) {\n if ((app as any).__vibe_translate_registered) return;\n (app as any).__vibe_translate_registered = true;\n\n const registerMulti = createRegisterMulti(app);\n\n // Tables de cache créées paresseusement (idempotent) — post_translations\n // est partagée avec le moteur mAI (vibe-ai.ts), + provider pour distinguer.\n let translateTablesReady = false;\n const ensureTranslateTables = async () => {\n if (translateTablesReady) return;\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS post_translations (\n post_id UUID NOT NULL REFERENCES posts(id) ON DELETE CASCADE,\n target_lang TEXT NOT NULL,\n detected_language TEXT,\n translation TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (post_id, target_lang)\n )\n `;\n await sql`ALTER TABLE post_translations ADD COLUMN IF NOT EXISTS provider TEXT NOT NULL DEFAULT 'mai'`;\n await sql`\n CREATE TABLE IF NOT EXISTS comment_translations (\n comment_id UUID NOT NULL REFERENCES comments(id) ON DELETE CASCADE,\n target_lang TEXT NOT NULL,\n detected_language TEXT,\n translation TEXT NOT NULL,\n created_at TIMESTAMPTZ DEFAULT NOW(),\n PRIMARY KEY (comment_id, target_lang)\n )\n `;\n translateTablesReady = true;\n };\n\n const handleTranslate = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json().catch(() => ({} as any));\n const postId = String(body?.post_id || \"\");\n const commentId = String(body?.comment_id || \"\");\n // Source exclusive : une publication OU un commentaire\n if (Boolean(postId) === Boolean(commentId)) {\n return c.json({ error: \"Fournir post_id OU comment_id.\" }, 400);\n }\n const sourceId = postId || commentId;\n if (!UUID_RE.test(sourceId)) {\n return c.json({ error: \"Identifiant invalide.\" }, 400);\n }\n\n // Langue cible : corps de la requête, sinon réglage utilisateur, sinon français\n let effective = String(body?.target_lang || \"\").trim();\n const sql = getDb();\n if (!effective) {\n const srows =\n await sql`SELECT ui_language FROM user_settings WHERE user_id = ${userId} LIMIT 1`\n .catch(() => [] as any[]);\n effective = String(srows?.[0]?.ui_language || \"\").trim();\n }\n const targetLang = normalizeTargetLang(effective) || \"FR\";\n\n if (!rateLimit(`translate:${userId}`, 30, 60_000)) {\n return c.json(\n { error: \"Trop de traductions. Patientez un instant.\" },\n 429,\n );\n }\n\n await ensureTranslateTables().catch(() => {});\n\n // 1. Cache : traduction déjà générée pour cette source + langue cible\n try {\n const cachedRows = postId\n ? await sql`SELECT translation, detected_language, provider FROM post_translations WHERE post_id = ${postId}::uuid AND target_lang = ${targetLang} LIMIT 1`\n : await sql`SELECT translation, detected_language, provider FROM comment_translations WHERE comment_id = ${commentId}::uuid AND target_lang = ${targetLang} LIMIT 1`;\n if (cachedRows.length > 0) {\n const det = String(cachedRows[0].detected_language || \"\");\n const isSame = Boolean(det) &&\n det.slice(0, 2).toUpperCase() === targetLang.slice(0, 2);\n // Si la traduction en cache est une vraie traduction (pas identique au texte source)\n if (!isSame && cachedRows[0].translation) {\n return c.json({\n success: true,\n translation: cachedRows[0].translation,\n detected_language: det,\n target_lang: targetLang,\n provider: cachedRows[0].provider || \"mai\",\n same_language: false,\n cached: true,\n });\n }\n }\n } catch {}\n\n // 2. Contenu source (HTML riche)\n const rows = postId\n ? await sql`SELECT content FROM posts WHERE id = ${postId}::uuid LIMIT 1`\n : await sql`SELECT content FROM comments WHERE id = ${commentId}::uuid LIMIT 1`;\n if (rows.length === 0) {\n return c.json({\n error: postId ? \"Publication introuvable.\" : \"Réponse introuvable.\",\n }, 404);\n }\n const content = String(rows[0].content || \"\").trim();\n if (!content) return c.json({ error: \"Contenu vide.\" }, 400);\n\n // 3. DeepL d'abord (HTML préservé) ; si les deux clés échouent → mAI.\n // Un contenu trop long pour DeepL déclenche aussi le repli mAI.\n let translation = \"\";\n let detected = \"\";\n let provider = \"deepl\";\n let sameLanguage = false;\n let effectiveTargetLang = targetLang;\n try {\n const deepl = await callDeepl(content, targetLang);\n translation = deepl.text;\n detected = deepl.detected;\n // Déjà dans la langue cible (ex : post en français pour cible FR) :\n // on traduit vers l'anglais (ou le français si la cible initiale était EN)\n if (detected && detected.slice(0, 2) === targetLang.slice(0, 2)) {\n const altTarget = targetLang.slice(0, 2) === \"FR\" ? \"EN-US\" : \"FR\";\n try {\n const altDeepl = await callDeepl(content, altTarget);\n translation = altDeepl.text;\n detected = altDeepl.detected || detected;\n effectiveTargetLang = altTarget;\n } catch {\n sameLanguage = true;\n translation = content;\n }\n }\n } catch (deeplErr: any) {\n console.warn(\"[translate] DeepL échec, repli mAI :\", deeplErr?.message);\n const altTarget = targetLang.slice(0, 2) === \"FR\" ? \"EN-US\" : \"FR\";\n const system =\n \"Tu es le moteur de traduction du réseau social Vibe. On te donne une publication. \" +\n \"1) Détecte sa langue d'origine. \" +\n `2) Traduis-la fidèlement en ${langLabel(targetLang)} (ou en ${\n langLabel(altTarget)\n } si elle est déjà écrite en ${\n langLabel(targetLang)\n }) : sens EXACT, ton préservé, ton naturel de réseau social. ` +\n \"Conserve les hashtags, mentions @, émojis et liens tels quels (ne les traduis pas). \" +\n 'Réponds UNIQUEMENT par un objet JSON strict : {\"detected_language\": \"<nom de la langue d\\'origine en français>\", \"target_language\": \"<code ou nom de la langue cible>\", \"translation\": \"<traduction>\"} — sans guillemets markdown ni commentaire.';\n const raw = await MAIAgentFleet.callOpenRouter(userId, system, content);\n if (!raw) {\n return c.json({\n error: \"Traduction indisponible (DeepL et mAI injoignables).\",\n }, 502);\n }\n await debitWeeklyTokens(sql, userId, content.length + raw.length);\n const parsed = extractJsonObject(raw);\n if (\n parsed && typeof parsed.translation === \"string\" &&\n parsed.translation.trim()\n ) {\n detected = String(parsed.detected_language || \"\").trim();\n translation = cleanLlmText(parsed.translation);\n if (\n parsed.target_language &&\n String(parsed.target_language).toLowerCase().includes(\"anglais\")\n ) {\n effectiveTargetLang = \"EN-US\";\n }\n } else {\n // Repli : la réponse entière est la traduction\n translation = cleanLlmText(raw);\n }\n provider = \"mai\";\n if (!translation) return c.json({ error: \"Traduction vide.\" }, 502);\n }\n\n // 4. Mise en cache (traductions exactes réutilisables, coût amorti)\n if (!sameLanguage && translation && translation !== content) {\n try {\n if (postId) {\n await sql`\n INSERT INTO post_translations (post_id, target_lang, detected_language, translation, provider)\n VALUES (${postId}::uuid, ${effectiveTargetLang}, ${detected}, ${translation}, ${provider})\n ON CONFLICT (post_id, target_lang) DO UPDATE SET translation = EXCLUDED.translation, detected_language = EXCLUDED.detected_language, provider = EXCLUDED.provider\n `;\n } else {\n await sql`\n INSERT INTO comment_translations (comment_id, target_lang, detected_language, translation, provider)\n VALUES (${commentId}::uuid, ${effectiveTargetLang}, ${detected}, ${translation}, ${provider})\n ON CONFLICT (comment_id, target_lang) DO UPDATE SET translation = EXCLUDED.translation, detected_language = EXCLUDED.detected_language, provider = EXCLUDED.provider\n `;\n }\n } catch {}\n }\n\n return c.json({\n success: true,\n translation,\n detected_language: detected,\n target_lang: effectiveTargetLang,\n provider,\n same_language: sameLanguage,\n cached: false,\n });\n } catch (err: any) {\n console.error(\"[translate] Translate error:\", err);\n return c.json({ error: err?.message || \"Erreur de traduction.\" }, 500);\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/translate\",\n \"/vibe/translate\",\n \"/v1/translate\",\n \"/translate\",\n ], handleTranslate);\n}",[628],"88b73019-c4b9-4677-93d1-46ef805aa3d5",278,["D",1789145672482],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractTierFromApiKey,\n extractToken,\n getDb,\n getTierStorageLimitBytes,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface StorageNode {\n id: number;\n endpoint: string;\n region: string;\n accessKeyId: string;\n secretAccessKey: string;\n bucket: string;\n publicUrl: string;\n}\n\nfunction cleanUrl(url: string, removeDefaultPort = true): string {\n let cleaned = (url || \"\").trim();\n if (cleaned.endsWith(\"/\")) {\n cleaned = cleaned.slice(0, -1);\n }\n if (removeDefaultPort) {\n // Normalise https://domaine.com:443 -> https://domaine.com pour des URLs publiques propres\n cleaned = cleaned.replace(\n /^https:\\/\\/([^/:]+):443(\\/.*)?$/,\n \"https://$1$2\",\n );\n cleaned = cleaned.replace(/^http:\\/\\/([^/:]+):80(\\/.*)?$/, \"http://$1$2\");\n }\n return cleaned;\n}\n\n/**\n * 10 buckets Z1 Storage par défaut en fallback (mai-storage-1 à mai-storage-10)\n */\nexport const DEFAULT_Z1_FALLBACK_BUCKETS = [\n \"mai-storage-1\",\n \"mai-storage-2\",\n \"mai-storage-3\",\n \"mai-storage-4\",\n \"mai-storage-5\",\n \"mai-storage-6\",\n \"mai-storage-7\",\n \"mai-storage-8\",\n \"mai-storage-9\",\n \"mai-storage-10\",\n];\n\nexport const TOTAL_STORAGE_NODES_COUNT = 10;\n\n/**\n * Récupère la liste des nœuds de stockage Z1 Storage / S3 configurés.\n * Supporte jusqu'à 10 comptes/buckets distincts (S3_BUCKET_1..10 / Z1_BUCKET_1..10) pour multiplier l'espace,\n * ou une liste séparée par des virgules (S3_BUCKETS / Z1_BUCKETS),\n * ou un pool de 10 buckets Z1 Storage (mai-storage-1 à mai-storage-10) en fallback automatique.\n */\nexport function getStorageNodes(): StorageNode[] {\n const nodes: StorageNode[] = [];\n\n const baseAccessKey = Deno.env.get(\"S3_ACCESS_KEY_ID\") ||\n Deno.env.get(\"Z1_ACCESS_KEY_ID\") ||\n \"\";\n const baseSecretKey = Deno.env.get(\"S3_SECRET_ACCESS_KEY\") ||\n Deno.env.get(\"Z1_SECRET_ACCESS_KEY\") ||\n \"\";\n const baseRawEndpoint = Deno.env.get(\"S3_ENDPOINT\") ||\n Deno.env.get(\"Z1_ENDPOINT\") ||\n \"https://s3.z1storage.com\";\n const baseEndpoint = cleanUrl(baseRawEndpoint);\n const baseRegion = Deno.env.get(\"S3_REGION\") ||\n Deno.env.get(\"Z1_REGION\") ||\n \"auto\";\n const baseBucket = Deno.env.get(\"S3_BUCKET\") ||\n Deno.env.get(\"Z1_BUCKET\") ||\n \"mai-storage-1\";\n const basePublicUrl = Deno.env.get(\"S3_PUBLIC_URL\") ||\n Deno.env.get(\"Z1_PUBLIC_URL\");\n\n // 1. Détection des configurations individuelles S3_BUCKET_1 à S3_BUCKET_10 (ou Z1_BUCKET_1 à 10)\n for (let i = 1; i <= TOTAL_STORAGE_NODES_COUNT; i++) {\n const bucket = Deno.env.get(`S3_BUCKET_${i}`) ||\n Deno.env.get(`S3_BUCKET${i}`) ||\n Deno.env.get(`Z1_BUCKET_${i}`) ||\n Deno.env.get(`Z1_BUCKET${i}`);\n const accessKeyId = Deno.env.get(`S3_ACCESS_KEY_ID_${i}`) ||\n Deno.env.get(`S3_ACCESS_KEY_ID${i}`) ||\n Deno.env.get(`Z1_ACCESS_KEY_ID_${i}`) ||\n Deno.env.get(`Z1_ACCESS_KEY_ID${i}`) ||\n baseAccessKey;\n const secretAccessKey = Deno.env.get(`S3_SECRET_ACCESS_KEY_${i}`) ||\n Deno.env.get(`S3_SECRET_ACCESS_KEY${i}`) ||\n Deno.env.get(`Z1_SECRET_ACCESS_KEY_${i}`) ||\n Deno.env.get(`Z1_SECRET_ACCESS_KEY${i}`) ||\n baseSecretKey;\n const rawEndpoint = Deno.env.get(`S3_ENDPOINT_${i}`) ||\n Deno.env.get(`S3_ENDPOINT${i}`) ||\n Deno.env.get(`Z1_ENDPOINT_${i}`) ||\n Deno.env.get(`Z1_ENDPOINT${i}`) ||\n baseEndpoint;\n const endpoint = cleanUrl(rawEndpoint);\n const region = Deno.env.get(`S3_REGION_${i}`) ||\n Deno.env.get(`S3_REGION${i}`) ||\n Deno.env.get(`Z1_REGION_${i}`) ||\n Deno.env.get(`Z1_REGION${i}`) ||\n baseRegion;\n const rawPublicUrl = Deno.env.get(`S3_PUBLIC_URL_${i}`) ||\n Deno.env.get(`S3_PUBLIC_URL${i}`) ||\n Deno.env.get(`Z1_PUBLIC_URL_${i}`) ||\n Deno.env.get(`Z1_PUBLIC_URL${i}`);\n\n let publicUrl = \"\";\n if (rawPublicUrl) {\n publicUrl = cleanUrl(rawPublicUrl);\n } else if (basePublicUrl) {\n publicUrl = `${cleanUrl(basePublicUrl)}/${bucket}`;\n } else if (bucket) {\n publicUrl = `${endpoint}/${bucket}`;\n }\n\n if (bucket && accessKeyId && secretAccessKey) {\n nodes.push({\n id: i,\n endpoint,\n region,\n accessKeyId,\n secretAccessKey,\n bucket,\n publicUrl: publicUrl || `${endpoint}/${bucket}`,\n });\n }\n }\n\n // 2. Si S3_BUCKETS ou Z1_BUCKETS (liste séparée par des virgules) est configuré\n if (nodes.length === 0) {\n const bucketsList = Deno.env.get(\"S3_BUCKETS\") ||\n Deno.env.get(\"Z1_BUCKETS\");\n if (bucketsList) {\n const bucketNames = bucketsList\n .split(\",\")\n .map((b) => b.trim())\n .filter(Boolean);\n\n bucketNames.forEach((bucket, idx) => {\n const id = idx + 1;\n let publicUrl = \"\";\n if (basePublicUrl) {\n publicUrl = `${cleanUrl(basePublicUrl)}/${bucket}`;\n } else {\n publicUrl = `${baseEndpoint}/${bucket}`;\n }\n\n nodes.push({\n id,\n endpoint: baseEndpoint,\n region: baseRegion,\n accessKeyId: baseAccessKey,\n secretAccessKey: baseSecretKey,\n bucket,\n publicUrl,\n });\n });\n }\n }\n\n // 3. Fallback automatique : 10 buckets Z1 Storage (mai-storage-1 à mai-storage-10)\n // Si moins de 10 nœuds sont configurés, on complète avec les 10 buckets Z1 Storage en fallback\n if (nodes.length < TOTAL_STORAGE_NODES_COUNT) {\n const fallbackEnvList = (\n Deno.env.get(\"Z1_FALLBACK_BUCKETS\") ||\n Deno.env.get(\"S3_FALLBACK_BUCKETS\") ||\n \"\"\n )\n .split(\",\")\n .map((b) => b.trim())\n .filter(Boolean);\n\n for (let i = 1; i <= TOTAL_STORAGE_NODES_COUNT; i++) {\n const exists = nodes.some((n) => n.id === i);\n if (!exists) {\n let fallbackBucketName = \"\";\n if (fallbackEnvList[i - 1]) {\n fallbackBucketName = fallbackEnvList[i - 1];\n } else if (i === 1 && baseBucket) {\n fallbackBucketName = baseBucket;\n } else if (DEFAULT_Z1_FALLBACK_BUCKETS[i - 1]) {\n fallbackBucketName = DEFAULT_Z1_FALLBACK_BUCKETS[i - 1];\n } else {\n fallbackBucketName = `mai-storage-${i}`;\n }\n\n const bucket = Deno.env.get(`S3_BUCKET_${i}`) ||\n Deno.env.get(`S3_BUCKET${i}`) ||\n Deno.env.get(`Z1_BUCKET_${i}`) ||\n Deno.env.get(`Z1_BUCKET${i}`) ||\n fallbackBucketName;\n\n const accessKeyId = Deno.env.get(`S3_ACCESS_KEY_ID_${i}`) ||\n Deno.env.get(`S3_ACCESS_KEY_ID${i}`) ||\n Deno.env.get(`Z1_ACCESS_KEY_ID_${i}`) ||\n Deno.env.get(`Z1_ACCESS_KEY_ID${i}`) ||\n baseAccessKey;\n\n const secretAccessKey = Deno.env.get(`S3_SECRET_ACCESS_KEY_${i}`) ||\n Deno.env.get(`S3_SECRET_ACCESS_KEY${i}`) ||\n Deno.env.get(`Z1_SECRET_ACCESS_KEY_${i}`) ||\n Deno.env.get(`Z1_SECRET_ACCESS_KEY${i}`) ||\n baseSecretKey;\n\n const rawEndpoint = Deno.env.get(`S3_ENDPOINT_${i}`) ||\n Deno.env.get(`S3_ENDPOINT${i}`) ||\n Deno.env.get(`Z1_ENDPOINT_${i}`) ||\n Deno.env.get(`Z1_ENDPOINT${i}`) ||\n baseEndpoint;\n const endpoint = cleanUrl(rawEndpoint);\n\n const region = Deno.env.get(`S3_REGION_${i}`) ||\n Deno.env.get(`S3_REGION${i}`) ||\n Deno.env.get(`Z1_REGION_${i}`) ||\n Deno.env.get(`Z1_REGION${i}`) ||\n baseRegion;\n\n const rawPublicUrl = Deno.env.get(`S3_PUBLIC_URL_${i}`) ||\n Deno.env.get(`S3_PUBLIC_URL${i}`) ||\n Deno.env.get(`Z1_PUBLIC_URL_${i}`) ||\n Deno.env.get(`Z1_PUBLIC_URL${i}`);\n\n let publicUrl = \"\";\n if (rawPublicUrl) {\n publicUrl = cleanUrl(rawPublicUrl);\n } else if (basePublicUrl) {\n publicUrl = `${cleanUrl(basePublicUrl)}/${bucket}`;\n } else {\n publicUrl = `${endpoint}/${bucket}`;\n }\n\n nodes.push({\n id: i,\n endpoint,\n region,\n accessKeyId,\n secretAccessKey,\n bucket,\n publicUrl,\n });\n }\n }\n }\n\n // Tri par ID croissant pour ordre déterministe\n nodes.sort((a, b) => a.id - b.id);\n return nodes;\n}\n\n/**\n * Retourne la liste ordonnée des nœuds de stockage pour le fallback.\n * Le nœud principal est placé en premier, suivi des autres buckets Z1 Storage en réserve (fallback).\n */\nexport function getFallbackNodes(primaryNode?: StorageNode): StorageNode[] {\n const allNodes = getStorageNodes();\n if (!primaryNode) return allNodes;\n const others = allNodes.filter((n) => n.id !== primaryNode.id);\n return [primaryNode, ...others];\n}\n\n/**\n * Effectue un upload S3 avec bascule automatique (fallback) sur les 10 nœuds/buckets\n * Z1 Storage configurés si le nœud principal échoue (erreur HTTP 4xx/5xx ou exception réseau).\n */\nexport async function uploadWithFallback(\n primaryNode: StorageNode,\n filePath: string,\n body: any,\n options: {\n contentType: string;\n acl?: string;\n },\n): Promise<{\n success: boolean;\n activeNode: StorageNode;\n publicUrl: string;\n error?: string;\n}> {\n const candidateNodes = getFallbackNodes(primaryNode);\n let lastError = \"\";\n\n for (const node of candidateNodes) {\n try {\n const s3Client = await buildS3Client(node);\n const uploadUrl = `${node.endpoint}/${node.bucket}/${filePath}`;\n const res = await s3Client.fetch(uploadUrl, {\n body,\n headers: {\n \"Content-Type\": options.contentType || \"application/octet-stream\",\n \"x-amz-acl\": options.acl || \"public-read\",\n },\n method: \"PUT\",\n });\n\n if (res.ok) {\n return {\n activeNode: node,\n publicUrl: `${node.publicUrl}/${filePath}`,\n success: true,\n };\n }\n\n lastError = await res.text().catch(() => `HTTP ${res.status}`);\n console.warn(\n `[Z1 Storage Fallback] Échec upload sur le bucket \"${node.bucket}\" (node ${node.id}, status ${res.status}): ${lastError}. Bascule sur le bucket suivant...`,\n );\n } catch (err: any) {\n lastError = err?.message || String(err);\n console.warn(\n `[Z1 Storage Fallback] Exception réseau sur le bucket \"${node.bucket}\" (node ${node.id}): ${lastError}. Bascule sur le bucket suivant...`,\n );\n }\n }\n\n return {\n activeNode: primaryNode,\n error: lastError,\n publicUrl: `${primaryNode.publicUrl}/${filePath}`,\n success: false,\n };\n}\n\n/**\n * Sélectionne un nœud de stockage dans le pool via un hachage déterministe (sharding équilibré).\n */\nexport function selectStorageNode(seed: string): StorageNode {\n const nodes = getStorageNodes();\n if (nodes.length <= 1) return nodes[0];\n\n let hash = 0;\n for (let i = 0; i < seed.length; i++) {\n hash = (hash << 5) - hash + seed.charCodeAt(i);\n hash |= 0; // Convertit en entier 32 bits\n }\n const index = Math.abs(hash) % nodes.length;\n return nodes[index];\n}\n\n/**\n * Retrouve le nœud de stockage et la clé brute d'un enregistrement existant.\n */\nexport function findStorageNodeForRecord(\n r2Key: string,\n fileUrl?: string,\n): { node: StorageNode; rawKey: string } {\n const nodes = getStorageNodes();\n\n // 1. Format explicite taggé : node-1:bucket-name:key-path\n if (r2Key && r2Key.startsWith(\"node-\")) {\n const parts = r2Key.split(\":\");\n if (parts.length >= 3) {\n const nodeId = parseInt(parts[0].replace(\"node-\", \"\"), 10);\n const found = nodes.find((n) => n.id === nodeId);\n if (found) {\n return { node: found, rawKey: parts.slice(2).join(\":\") };\n }\n }\n }\n\n // 2. Recherche par nom de bucket dans la clé ou l'URL\n for (const node of nodes) {\n if (r2Key && r2Key.startsWith(`${node.bucket}/`)) {\n return { node, rawKey: r2Key.slice(node.bucket.length + 1) };\n }\n if (\n fileUrl &&\n (fileUrl.includes(`/${node.bucket}/`) ||\n fileUrl.includes(`://${node.bucket}.`))\n ) {\n return { node, rawKey: r2Key };\n }\n }\n\n // 3. Fallback sur le premier nœud\n return { node: nodes[0], rawKey: r2Key };\n}\n\n/**\n * Crée un client S3 (compatible Z1 Storage / Cloudflare R2 / AWS S3) pour un nœud donné.\n */\nexport async function buildS3Client(node?: StorageNode) {\n const targetNode = node || getStorageNodes()[0];\n const { AwsClient } = await import(\"npm:aws4fetch\");\n return new AwsClient({\n accessKeyId: targetNode.accessKeyId,\n region: targetNode.region,\n secretAccessKey: targetNode.secretAccessKey,\n service: \"s3\",\n });\n}\n\n// Aliases de rétro-compatibilité\nexport const buildR2Client = buildS3Client;\nexport function getR2Endpoint(): string {\n return getStorageNodes()[0].endpoint;\n}\nexport function getR2Bucket(): string {\n return getStorageNodes()[0].bucket;\n}\nexport function getR2PublicBase(): string {\n return getStorageNodes()[0].publicUrl;\n}\n\nconst GIB = 1024 * 1024 * 1024;\n\n/** Formate un volume de quota: en Go au-delà de 1 GiB, sinon en Mo. */\nexport function formatQuotaBytes(bytes: number): string {\n if (bytes >= GIB) {\n return `${\n (Math.round((bytes / GIB) * 10) / 10).toString().replace(\".\", \",\")\n } Go`;\n }\n return `${Math.round(bytes / (1024 * 1024))} Mo`;\n}\n\nexport function registerStorageRoutes(app: Hono) {\n // POST /upload-avatar & /v1/upload-avatar\n const handleUploadAvatar = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.parseBody();\n const file = body[\"avatar\"] || body[\"file\"];\n\n if (!(file instanceof File) || file.size === 0) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const MAX_AVATAR_SIZE = 10 * 1024 * 1024;\n if (file.size > MAX_AVATAR_SIZE) {\n return c.json({ error: \"Image trop volumineuse (max 10 MB).\" }, 413);\n }\n const ALLOWED_IMAGE_TYPES = [\n \"image/jpeg\",\n \"image/png\",\n \"image/webp\",\n \"image/gif\",\n ];\n if (file.type && !ALLOWED_IMAGE_TYPES.includes(file.type)) {\n return c.json({\n error: \"Format d'image non supporté (JPEG, PNG, WebP ou GIF requis).\",\n }, 400);\n }\n\n const primaryNode = selectStorageNode(`avatar-${userId}`);\n const ext = file.name.split(\".\").pop()?.replace(/[^a-zA-Z0-9]/g, \"\") ||\n \"jpg\";\n const filename = `avatars/${userId}-${Date.now()}.${ext}`;\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadResult = await uploadWithFallback(\n primaryNode,\n filename,\n arrayBuffer,\n {\n contentType: file.type || \"image/jpeg\",\n acl: \"public-read\",\n },\n );\n\n if (!uploadResult.success) {\n console.error(\n \"Erreur Z1 Storage S3 (avatar, fallback épuisé):\",\n uploadResult.error,\n );\n return c.json(\n {\n error:\n \"L'upload a échoué sur tous les buckets de stockage. Vérifiez la configuration Z1 Storage (credentials S3) ou réessayez plus tard.\",\n details: uploadResult.error?.slice(0, 300),\n },\n 503,\n );\n }\n\n const publicUrl = uploadResult.publicUrl;\n\n const sql = getDb();\n await sql`UPDATE users SET avatar_url = ${publicUrl} WHERE id = ${\n Number(userId)\n }`;\n try {\n await sql`\n INSERT INTO profiles (user_id, avatar_url)\n VALUES (${Number(userId)}, ${publicUrl})\n ON CONFLICT (user_id)\n DO UPDATE SET avatar_url = ${publicUrl}, updated_at = NOW()\n `;\n } catch {}\n\n return c.json({ avatarUrl: publicUrl, success: true });\n } catch (err: any) {\n console.error(\"Upload Avatar Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload.\" }, 500);\n }\n };\n\n app.post(\"/upload-avatar\", handleUploadAvatar);\n app.post(\"/v1/upload-avatar\", handleUploadAvatar);\n app.post(\"/upload-avatar/\", handleUploadAvatar);\n app.post(\"/v1/upload-avatar/\", handleUploadAvatar);\n\n // POST /upload-file & /v1/upload-file (sécurisé: auth + validation 10MB + allowlist)\n const handleUploadFile = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n try {\n await verifyToken(token);\n } catch {\n return c.json({ error: \"Token invalide.\" }, 401);\n }\n\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const MAX_FILE_SIZE = 50 * 1024 * 1024;\n if (file.size > MAX_FILE_SIZE) {\n return c.json({ error: \"Fichier trop volumineux (max 50 MB).\" }, 413);\n }\n if (file.size === 0) {\n return c.json({ error: \"Fichier vide.\" }, 400);\n }\n const isAllowed = file.type.startsWith(\"image/\") ||\n file.type.startsWith(\"video/\") ||\n file.type.startsWith(\"audio/\") ||\n file.type.startsWith(\"text/\") ||\n file.type === \"application/pdf\" ||\n file.type === \"application/json\" ||\n file.type === \"application/msword\" ||\n file.type ===\n \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\" ||\n file.type === \"application/vnd.ms-excel\" ||\n file.type ===\n \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\" ||\n file.type === \"application/vnd.ms-powerpoint\" ||\n file.type ===\n \"application/vnd.openxmlformats-officedocument.presentationml.presentation\";\n if (file.type && !isAllowed) {\n return c.json({ error: \"Type de fichier non autorisé.\" }, 400);\n }\n\n const cleanFilename = file.name.replace(/[^a-zA-Z0-9._-]/g, \"_\");\n const filename = `uploads/${Date.now()}-${cleanFilename}`;\n\n const primaryNode = selectStorageNode(cleanFilename);\n const arrayBuffer = await file.arrayBuffer();\n\n const uploadResult = await uploadWithFallback(\n primaryNode,\n filename,\n arrayBuffer,\n {\n contentType: file.type || \"application/octet-stream\",\n acl: \"public-read\",\n },\n );\n\n if (!uploadResult.success) {\n console.error(\n \"Erreur Z1 Storage S3 (file, fallback épuisé):\",\n uploadResult.error,\n );\n return c.json(\n {\n error:\n \"L'upload a échoué sur tous les buckets de stockage. Vérifiez la configuration Z1 Storage (credentials S3) ou réessayez plus tard.\",\n details: uploadResult.error?.slice(0, 300),\n },\n 503,\n );\n }\n\n const publicUrl = uploadResult.publicUrl;\n\n return c.json({\n contentType: file.type || \"application/octet-stream\",\n pathname: filename,\n url: publicUrl,\n });\n } catch (err: any) {\n console.error(\"Upload File S3 Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload S3.\" }, 500);\n }\n };\n\n app.post(\"/upload-file\", handleUploadFile);\n app.post(\"/v1/upload-file\", handleUploadFile);\n app.post(\"/upload-file/\", handleUploadFile);\n app.post(\"/v1/upload-file/\", handleUploadFile);\n\n // ─────────────────────────────────────────────\n // GET /cloud/storage — Consommation actuelle de stockage\n // ─────────────────────────────────────────────\n const handleGetStorage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n const sql = getDb();\n\n // Résolution du user_id réel via mprojects_api_keys si clé API transmise\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n userPlan = keyRows[0].tier || userPlan;\n }\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text OR email = ${userId}::text LIMIT 1`,\n sql`\n SELECT COALESCE(SUM(bytes_used::numeric), 0) as bytes_used, COALESCE(SUM(files_count::numeric), 0) as files_count \n FROM cloud_storage_usage \n WHERE (\n user_id = ${userId}::text \n OR user_id IN (SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n ) LIMIT 1\n `.catch(() => []),\n ]);\n\n const keyTier = extractTierFromApiKey(token);\n const rawTier2 = keyTier || userRes[0]?.tier || userPlan || \"Free\";\n const tier = String(rawTier2).trim();\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const filesCount = Number(usageRes[0]?.files_count || 0);\n const bytesLimit = getTierStorageLimitBytes(tier);\n const percentUsed = bytesLimit > 0\n ? Math.min(100, (bytesUsed / bytesLimit) * 100)\n : 0;\n\n return c.json({\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n files_count: filesCount,\n over_limit: bytesUsed >= bytesLimit,\n percent_used: Math.round(percentUsed * 100) / 100,\n tier,\n });\n } catch (err: any) {\n console.error(\"Cloud Storage Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n };\n\n app.get(\"/cloud/storage\", handleGetStorage);\n app.get(\"/v1/cloud/storage\", handleGetStorage);\n app.get(\"/storage\", handleGetStorage);\n app.get(\"/v1/storage\", handleGetStorage);\n\n // ─────────────────────────────────────────────\n // GET /cloud/files — Liste des fichiers de l'utilisateur\n // ─────────────────────────────────────────────\n const handleGetFiles = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n } catch {}\n }\n\n const sql = getDb();\n\n // Résolution du user_id réel via mprojects_api_keys si clé API transmise\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n }\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const files = await sql`\n SELECT id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n FROM cloud_files\n WHERE (\n user_id = ${userId}::text \n OR user_id IN (SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n )\n ORDER BY uploaded_at DESC\n LIMIT 200\n `.catch(() => []);\n\n return c.json({ files, success: true });\n } catch (err: any) {\n console.error(\"Cloud Files Error:\", err);\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n };\n\n app.get(\"/cloud/files\", handleGetFiles);\n app.get(\"/v1/cloud/files\", handleGetFiles);\n app.get(\"/files\", handleGetFiles);\n app.get(\"/v1/files\", handleGetFiles);\n\n // POST /cloud/upload & /v1/cloud/upload — Upload d'un fichier vers Z1 Storage avec fallback multi-buckets + mise à jour quota\n const handleCloudUpload = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const sql = getDb();\n\n // Lire le fichier\n const body = await c.req.parseBody();\n const file = body[\"file\"];\n if (!(file instanceof File)) {\n return c.json({ error: \"Fichier invalide ou non fourni.\" }, 400);\n }\n\n const fileSize = file.size;\n if (fileSize === 0) {\n return c.json({ error: \"Le fichier est vide.\" }, 400);\n }\n const MAX_FILE_SIZE = 10 * 1024 * 1024;\n if (fileSize > MAX_FILE_SIZE) {\n return c.json({ error: \"Fichier trop volumineux (max 10 MB).\" }, 413);\n }\n const ALLOWED_CLOUD_TYPES = [\n \"image/jpeg\",\n \"image/png\",\n \"image/webp\",\n \"image/gif\",\n \"application/pdf\",\n \"text/plain\",\n \"text/markdown\",\n \"text/csv\",\n \"application/json\",\n ];\n const isCloudAllowed = !file.type ||\n ALLOWED_CLOUD_TYPES.includes(file.type) ||\n file.type.startsWith(\"image/\") ||\n file.type.startsWith(\"text/\") ||\n file.type === \"application/pdf\" ||\n file.type === \"application/json\";\n if (file.type && !isCloudAllowed) {\n return c.json({ error: \"Type de fichier non autorisé.\" }, 400);\n }\n\n // Vérifier le quota AVANT d'uploader\n const [userRes, usageRes] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text LIMIT 1`,\n sql`SELECT bytes_used FROM cloud_storage_usage WHERE user_id = ${userId}::text LIMIT 1`,\n ]);\n\n const rawTier = userRes[0]?.tier || \"Free\";\n const tier = String(rawTier).trim();\n const bytesUsed = Number(usageRes[0]?.bytes_used || 0);\n const bytesLimit = getTierStorageLimitBytes(tier);\n\n if (bytesUsed + fileSize > bytesLimit) {\n return c.json(\n {\n bytes_limit: bytesLimit,\n bytes_used: bytesUsed,\n error: `Quota de stockage dépassé. Vous utilisez ${\n formatQuotaBytes(bytesUsed)\n } sur ${formatQuotaBytes(bytesLimit)} (tier ${tier}).`,\n over_limit: true,\n },\n 413,\n );\n }\n\n // Générer une clé unique\n const ext = file.name\n .split(\".\")\n .pop()\n ?.replace(/[^a-zA-Z0-9]/g, \"\") || \"bin\";\n const uniqueId = crypto.randomUUID();\n const fileKey = `cloud/${userId}/${uniqueId}.${ext}`;\n const cleanOriginal = file.name;\n const cleanFilename = `${uniqueId}.${ext}`;\n\n // Sélectionner un nœud de stockage dans le pool à 10 buckets\n const primaryNode = selectStorageNode(`${userId}-${uniqueId}`);\n const arrayBuffer = await file.arrayBuffer();\n\n // Upload avec bascule automatique (fallback) sur les autres buckets du pool Z1 Storage\n const uploadResult = await uploadWithFallback(\n primaryNode,\n fileKey,\n arrayBuffer,\n {\n contentType: file.type || \"application/octet-stream\",\n acl: \"public-read\",\n },\n );\n\n if (!uploadResult.success) {\n console.error(\n \"Z1 Storage Upload Error (fallback épuisé):\",\n uploadResult.error,\n );\n return c.json(\n {\n error:\n \"Erreur lors de l'upload vers le stockage (tous les buckets en échec).\",\n },\n 500,\n );\n }\n\n const activeNode = uploadResult.activeNode;\n const storedKey = `node-${activeNode.id}:${activeNode.bucket}:${fileKey}`;\n const publicUrl = uploadResult.publicUrl;\n const mimeType = file.type || \"application/octet-stream\";\n\n // Insérer dans cloud_files\n const inserted = await sql`\n INSERT INTO cloud_files (user_id, filename, original_name, r2_key, url, size_bytes, mime_type)\n VALUES (${userId}::text, ${cleanFilename}, ${cleanOriginal}, ${storedKey}, ${publicUrl}, ${fileSize}, ${mimeType})\n RETURNING id, filename, original_name, url, size_bytes, mime_type, uploaded_at\n `;\n\n // Upsert cloud_storage_usage\n await sql`\n INSERT INTO cloud_storage_usage (user_id, bytes_used, files_count, updated_at)\n VALUES (${userId}::text, ${fileSize}, 1, NOW())\n ON CONFLICT (user_id)\n DO UPDATE SET\n bytes_used = cloud_storage_usage.bytes_used + ${fileSize},\n files_count = cloud_storage_usage.files_count + 1,\n updated_at = NOW()\n `;\n\n const newBytesUsed = bytesUsed + fileSize;\n const percentUsed = Math.round((newBytesUsed / bytesLimit) * 10_000) /\n 100;\n\n return c.json({\n file: inserted[0],\n percent_used: percentUsed,\n storage: {\n bytes_limit: bytesLimit,\n bytes_used: newBytesUsed,\n over_limit: newBytesUsed >= bytesLimit,\n percent_used: percentUsed,\n tier,\n },\n success: true,\n });\n } catch (err: any) {\n console.error(\"Cloud Upload Error:\", err);\n return c.json({ error: \"Erreur serveur lors de l'upload Cloud.\" }, 500);\n }\n };\n\n app.post(\"/cloud/upload\", handleCloudUpload);\n app.post(\"/v1/cloud/upload\", handleCloudUpload);\n app.post(\"/cloud/upload/\", handleCloudUpload);\n app.post(\"/v1/cloud/upload/\", handleCloudUpload);\n\n // DELETE /cloud/files/:id & /v1/cloud/files/:id — Suppression définitive d'un fichier\n const handleDeleteFile = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n const fileId = c.req.param(\"id\");\n const sql = getDb();\n\n // Récupérer le fichier (vérification propriété)\n const fileRes = await sql`\n SELECT id, r2_key, url, size_bytes\n FROM cloud_files\n WHERE id = ${fileId}::uuid AND user_id = ${userId}::text\n LIMIT 1\n `;\n\n if (fileRes.length === 0) {\n return c.json({ error: \"Fichier introuvable ou accès refusé.\" }, 404);\n }\n\n const { r2_key, url, size_bytes } = fileRes[0];\n\n // Identifier le nœud et supprimer de Z1 Storage\n const { node, rawKey } = findStorageNodeForRecord(r2_key, url);\n const s3Client = await buildS3Client(node);\n const deleteUrl = `${node.endpoint}/${node.bucket}/${rawKey}`;\n\n try {\n const delRes = await s3Client.fetch(deleteUrl, { method: \"DELETE\" });\n if (!delRes.ok && (!r2_key || !r2_key.startsWith(\"node-\"))) {\n // Si suppression échoue sur nœud par défaut pour un ancien fichier, tenter sur les autres nœuds du pool\n for (const fallbackNode of getFallbackNodes(node).slice(1)) {\n try {\n const fbClient = await buildS3Client(fallbackNode);\n const fbUrl =\n `${fallbackNode.endpoint}/${fallbackNode.bucket}/${rawKey}`;\n await fbClient.fetch(fbUrl, { method: \"DELETE\" });\n } catch {}\n }\n }\n } catch (s3Err) {\n console.error(\"Z1 Delete Error (continuing anyway):\", s3Err);\n }\n\n // Supprimer de la base de données\n await sql`DELETE FROM cloud_files WHERE id = ${fileId}::uuid AND user_id = ${userId}::text`;\n\n // Décrémenter cloud_storage_usage\n await sql`\n UPDATE cloud_storage_usage\n SET\n bytes_used = GREATEST(0, bytes_used - ${size_bytes}),\n files_count = GREATEST(0, files_count - 1),\n updated_at = NOW()\n WHERE user_id = ${userId}::text\n `;\n\n return c.json({ id: fileId, success: true });\n } catch (err: any) {\n console.error(\"Cloud Delete Error:\", err);\n return c.json({ error: \"Erreur serveur lors de la suppression.\" }, 500);\n }\n };\n\n app.delete(\"/cloud/files/:id\", handleDeleteFile);\n app.delete(\"/v1/cloud/files/:id\", handleDeleteFile);\n}",[45],"851701e7-6e5a-4df7-b4b5-4329a5dec478","realtime.ts","8f14df76-a9c3-11f1-a1c2-1607ee4eb77e",315,["D",1789229709739],"/**\n * ============================================================================\n * VIBE SOCIAL PLATFORM — REALTIME (realtime.ts)\n * Server-Sent Events : notifications, messages, indicateur de frappe et stats\n * de posts poussés en direct (remplace le polling 15 s côté client).\n *\n * Architecture : une table d'événements transitoires `realtime_events`\n * (fiable même multi-isolates, contrairement à un bus mémoire) lue par la\n * boucle SSE ; les notifications et messages sont quant à eux détectés par\n * lecture directe de leurs tables (aucun site d'insertion à modifier).\n * ============================================================================\n */\n\nimport type { Hono } from \"npm:hono@4\";\nimport { streamSSE } from \"npm:hono/streaming\";\nimport { extractToken, getDb, verifyToken } from \"./config.ts\";\nimport { createRegisterMulti } from \"./vibe-common.ts\";\n\n// ─────────────────────────────────────────────\n// Table d'événements transitoires (typing, post_stats, dm_message)\n// ─────────────────────────────────────────────\nlet realtimeTablesReady = false;\n\nexport async function ensureRealtimeTables() {\n if (realtimeTablesReady) return;\n try {\n const sql = getDb();\n await sql`\n CREATE TABLE IF NOT EXISTS realtime_events (\n id BIGSERIAL PRIMARY KEY,\n user_id INTEGER NOT NULL,\n type TEXT NOT NULL,\n payload JSONB,\n created_at TIMESTAMPTZ DEFAULT NOW()\n )\n `;\n await sql`CREATE INDEX IF NOT EXISTS idx_realtime_user ON realtime_events(user_id, id)`;\n realtimeTablesReady = true;\n } catch (err) {\n console.warn(\n \"[realtime] ensureRealtimeTables skipped:\",\n (err as any)?.message,\n );\n }\n}\n\n/**\n * Pousse un événement temps réel vers un utilisateur (consommé par son flux SSE).\n * Jamais bloquant pour l'appelant : un échec de push ne doit pas faire échouer\n * l'action métier (like, message...).\n */\nexport async function pushRealtimeEvent(\n userId: number | string | null | undefined,\n type: string,\n payload: any,\n) {\n const target = Number(userId);\n if (!target || isNaN(target)) return;\n try {\n await ensureRealtimeTables();\n const sql = getDb();\n await sql`\n INSERT INTO realtime_events (user_id, type, payload)\n VALUES (${target}, ${type}, ${JSON.stringify(payload || {})}::jsonb)\n `;\n // Purge opportuniste : les clients connectés lisent ces événements en <2 s\n await sql`DELETE FROM realtime_events WHERE created_at < NOW() - INTERVAL '2 minutes'`\n .catch(() => {});\n } catch (err) {\n console.warn(\"[realtime] pushRealtimeEvent failed:\", (err as any)?.message);\n }\n}\n\n// ─────────────────────────────────────────────\n// Limiteur de connexions simultanées par utilisateur (best-effort par isolate)\n// ─────────────────────────────────────────────\nconst openConnections = new Map<string, number>();\n\nconst MAX_CONNECTIONS_PER_USER = 2;\nconst TICK_MS = 1_000;\nconst HEARTBEAT_TICKS = 15;\nconst UNREAD_TICKS = 30;\nconst NOTIF_POLL_TICKS = 2;\n\nexport function registerRealtimeRoutes(app: Hono) {\n const registerMulti = createRegisterMulti(app);\n const handleStream = async (c: any) => {\n // EventSource ne peut pas définir d'en-têtes : JWT accepté en ?token=\n const token = extractToken(c.req.raw) || c.req.query(\"token\") || \"\";\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n\n let userId: number;\n try {\n const payload = await verifyToken(token);\n userId = Number(payload.sub || (payload as any).id);\n if (!userId || isNaN(userId)) throw new Error(\"no user\");\n } catch {\n return c.json({ error: \"Token invalide.\" }, 401);\n }\n\n await ensureRealtimeTables();\n\n const key = String(userId);\n const current = openConnections.get(key) || 0;\n if (current >= MAX_CONNECTIONS_PER_USER) {\n return c.json(\n { error: \"Trop de connexions temps réel pour ce compte.\" },\n 429,\n );\n }\n openConnections.set(key, current + 1);\n\n const sql = getDb();\n\n // Chevauchement initial de 3 s : rattrape ce qui a été émis juste avant la\n // connexion (le client déduplique par id côté UI).\n const seenNotificationIds = new Set<string>();\n const seenMessageIds = new Set<string>();\n let notifCursor = new Date(Date.now() - 3_000).toISOString();\n let dmCursor = new Date(Date.now() - 3_000).toISOString();\n let lastEventId = 0;\n let tick = 0;\n\n try {\n return streamSSE(c, async (sse: any) => {\n let aborted = false;\n sse.onAbort(() => {\n aborted = true;\n });\n\n const pushUnreadCounts = async () => {\n try {\n const counts = await sql`\n SELECT\n (SELECT COUNT(*) FROM notifications WHERE recipient_id = ${userId} AND is_read = FALSE) AS unread_notifications,\n (\n (SELECT COUNT(*) FROM direct_messages WHERE recipient_id = ${userId} AND is_read = FALSE) +\n (SELECT COUNT(*) FROM direct_messages m\n JOIN dm_group_members gm ON gm.conversation_id = m.conversation_id AND gm.user_id = ${userId}\n WHERE m.sender_id <> ${userId}\n AND NOT COALESCE((m.read_by ? ${userId}::text), FALSE))\n ) AS unread_messages\n `;\n await sse.writeSSE({\n event: \"unread_counts\",\n data: JSON.stringify({\n unread_notifications: Number(\n counts[0]?.unread_notifications || 0,\n ),\n unread_messages: Number(counts[0]?.unread_messages || 0),\n }),\n });\n } catch {}\n };\n\n try {\n await sse.writeSSE({\n event: \"connected\",\n data: JSON.stringify({\n user_id: userId,\n at: new Date().toISOString(),\n }),\n });\n await pushUnreadCounts();\n } catch {\n aborted = true;\n }\n\n while (!aborted) {\n await sse.sleep(TICK_MS);\n if (aborted) break;\n tick += 1;\n\n try {\n // 1. Événements transitoires poussés (dm_message, dm_typing, post_stats)\n const events = await sql`\n SELECT id, type, payload FROM realtime_events\n WHERE user_id = ${userId} AND id > ${lastEventId}\n ORDER BY id ASC LIMIT 50\n `;\n for (const ev of events) {\n lastEventId = Number(ev.id);\n await sse.writeSSE({\n event: ev.type,\n data: JSON.stringify(ev.payload ?? {}),\n });\n }\n } catch (pollErr) {\n console.warn(\n \"[realtime] events poll error:\",\n (pollErr as any)?.message,\n );\n }\n\n // 2. Nouvelles notifications (toutes types : like, repost, mention, follow, dm...)\n if (tick % NOTIF_POLL_TICKS === 0) {\n try {\n const notifs = await sql`\n SELECT n.id, n.type, n.post_id, n.comment_id, n.message, n.is_read, n.created_at,\n a.username AS actor_username, p.display_name AS actor_display_name, p.avatar_url AS actor_avatar_url\n FROM notifications n\n LEFT JOIN users a ON a.id = n.actor_id\n LEFT JOIN profiles p ON p.user_id = n.actor_id\n WHERE n.recipient_id = ${userId} AND n.created_at > ${notifCursor}\n ORDER BY n.created_at ASC LIMIT 20\n `;\n let maxNotifAt: string | null = null;\n for (const n of notifs) {\n if (seenNotificationIds.has(String(n.id))) continue;\n seenNotificationIds.add(String(n.id));\n if (!maxNotifAt || String(n.created_at) > maxNotifAt) {\n maxNotifAt = String(n.created_at);\n }\n await sse.writeSSE({\n event: \"notification\",\n data: JSON.stringify(n),\n });\n }\n if (maxNotifAt) notifCursor = maxNotifAt;\n } catch (notifErr) {\n console.warn(\n \"[realtime] notifications poll error:\",\n (notifErr as any)?.message,\n );\n }\n }\n\n // 3. Rattrapage périodique des badges (filet si un événement a été manqué)\n if (tick % UNREAD_TICKS === 0) {\n await pushUnreadCounts();\n }\n\n // 4. Heartbeat (keep-alive proxies)\n if (tick % HEARTBEAT_TICKS === 0) {\n try {\n await sse.writeSSE({ event: \"ping\", data: String(Date.now()) });\n } catch {\n break;\n }\n }\n }\n });\n } finally {\n openConnections.set(\n key,\n Math.max(0, (openConnections.get(key) || 1) - 1),\n );\n }\n };\n\n registerMulti(\"get\", [\n \"/api/vibe/realtime/stream\",\n \"/vibe/realtime/stream\",\n \"/v1/realtime/stream\",\n \"/realtime/stream\",\n ], handleStream);\n\n // Indicateur de frappe : le client l'émet (throttlé) pendant la saisie d'un DM\n const handleTyping = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) return c.json({ error: \"Non authentifié.\" }, 401);\n const payload = await verifyToken(token);\n const userId = Number(payload.sub || (payload as any).id);\n\n const body = await c.req.json().catch(() => ({} as any));\n const partnerId = Number(body?.partner_id);\n const typing = body?.typing !== false;\n if (!partnerId || isNaN(partnerId) || partnerId === userId) {\n return c.json({ error: \"Partenaire requis.\" }, 400);\n }\n\n const sql = getDb();\n let actor: any = {};\n try {\n const rows = await sql`\n SELECT u.username, p.display_name\n FROM users u LEFT JOIN profiles p ON p.user_id = u.id\n WHERE u.id = ${userId} LIMIT 1\n `;\n actor = rows[0] || {};\n } catch {}\n\n await pushRealtimeEvent(partnerId, \"dm_typing\", {\n user_id: userId,\n username: actor.username || null,\n display_name: actor.display_name || null,\n typing,\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n return c.json(\n { error: err?.message || \"Erreur indicateur de frappe.\" },\n 500,\n );\n }\n };\n\n registerMulti(\"post\", [\n \"/api/vibe/dms/typing\",\n \"/vibe/dms/typing\",\n \"/v1/dms/typing\",\n ], handleTyping);\n}",[640],"b6b377a3-0af6-4e6e-b054-db9c89db6eed",211,["D",1788618643754],"import type { Hono } from \"npm:hono@4\";\nimport { getDb } from \"./config.ts\";\n\nexport const STATIC_PROJECTS_LIST = [\n {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n features: [\"Chat Web\", \"Interface fluide\", \"Streaming en direct\"],\n id: \"proj_web\",\n is_public: true,\n label: \"Release Candidate\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"rc\",\n version: \"0.1.0\",\n },\n {\n category: \"Social Network\",\n created_at: \"2026-09-01T00:00:00.000Z\",\n description:\n \"Réseau social open source où l'IA mAI est intégrée nativement : feed social, conversations et création de contenu assistée.\",\n features: [\n \"Feed social\",\n \"IA mAI intégrée\",\n \"Création assistée\",\n \"Open Source\",\n ],\n id: \"proj_vibe\",\n is_public: true,\n label: \"Bêta\",\n name: \"Vibe\",\n project_id: \"vibe\",\n repository: \"https://github.com/mDevsLabs/Vibe\",\n status: \"beta\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n features: [\"Extension navigateur\", \"Extension VS Code\", \"Accès contextuel\"],\n id: \"proj_pulse\",\n is_public: true,\n label: \"Release Candidate\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"rc\",\n version: \"0.2.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n features: [\n \"Terminal interactif\",\n \"Génération de code\",\n \"Workflows développeur\",\n ],\n id: \"proj_cli\",\n is_public: true,\n label: \"Release Candidate\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"rc\",\n version: \"0.5.0\",\n },\n {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n features: [\n \"IDE IA Intelligent\",\n \"Agents Autonomes\",\n \"Outils MCP\",\n \"Multi-Modèles\",\n ],\n id: \"proj_coder\",\n is_public: true,\n label: \"Release Candidate\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"rc\",\n version: \"0.1.0\",\n },\n {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n features: [\n \"Stockage sécurisé\",\n \"Résumés automatiques\",\n \"Indexation de documents\",\n ],\n id: \"proj_cloud\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Site & Web\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description: \"Site officiel et application web mAI.\",\n features: [\"Site\", \"Web App\"],\n id: \"proj_site\",\n is_public: true,\n label: \"Alpha\",\n name: \"Site\",\n project_id: \"site\",\n repository: \"https://github.com/mDevsLabs/Site\",\n status: \"alpha\",\n version: \"0.1.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour le navigateur web.\",\n features: [\"Extension navigateur\", \"Chat mAI\"],\n id: \"proj_pulse_web\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - Web\",\n project_id: \"pulse-web\",\n repository: \"https://github.com/mDevsLabs/Pulse-Web\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour l'IDE JetBrains.\",\n features: [\"Extension JetBrains\", \"Contextuel\"],\n id: \"proj_pulse_jetbrains\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - JetBrains\",\n project_id: \"pulse-jetbrains\",\n repository: \"https://github.com/mDevsLabs/Pulse-JetBrains\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour VS Code.\",\n features: [\"Extension VS Code\", \"Chat mAI\"],\n id: \"proj_pulse_vscode\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - VS Code\",\n project_id: \"pulse-vscode\",\n repository: \"https://github.com/mDevsLabs/Pulse-VSCode\",\n status: \"beta\",\n version: \"0.2.0\",\n },\n {\n category: \"Desktop\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description: \"Application desktop intégrée mAI.\",\n features: [\"Desktop\", \"Notifications\", \"Local\"],\n id: \"proj_desktop\",\n is_public: true,\n label: \"Concept\",\n name: \"Desktop\",\n project_id: \"desktop\",\n repository: \"https://github.com/mDevsLabs/Desktop\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Skills\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description: \"Compétences et agents spécialisés mAI.\",\n features: [\"Agents\", \"Workflows\"],\n id: \"proj_skills\",\n is_public: true,\n label: \"Concept\",\n name: \"Skills\",\n project_id: \"skills\",\n repository: \"https://github.com/mDevsLabs/Skills\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Plugins\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description: \"Écosystème de plugins mAI.\",\n features: [\"Plugins\", \"Intégrations\"],\n id: \"proj_plugins\",\n is_public: true,\n label: \"Concept\",\n name: \"Plugins\",\n project_id: \"plugins\",\n repository: \"https://github.com/mDevsLabs/Plugins\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"API\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description: \"Hub API mAI et agrégation de modèles.\",\n features: [\"API Gateway\", \"Modèles LLM\"],\n id: \"proj_api\",\n is_public: true,\n label: \"Bêta\",\n name: \"API\",\n project_id: \"api\",\n repository: \"https://github.com/mDevsLabs/API\",\n status: \"beta\",\n version: \"0.5.0\",\n },\n {\n category: \"Autre\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description: \"Autres projets et expérimentations mAI.\",\n features: [\"Expérimentations\"],\n id: \"proj_autre\",\n is_public: true,\n label: \"Concept\",\n name: \"Autre\",\n project_id: \"autre\",\n repository: \"\",\n status: \"conception\",\n version: \"0.0.1\",\n },\n {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description:\n \"Moteur de recherche sémantique et d'indexation vectorielle ultra-rapide.\",\n features: [\"Indexation hybride\", \"Recherche locale\"],\n id: \"proj_msearch\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n version: \"1.0.3\",\n },\n {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage intelligent d'API et modèles LLM.\",\n features: [\"Load balancing\", \"Multi-fournisseurs\"],\n id: \"proj_openprovider\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n version: \"0.5.0\",\n },\n {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast\",\n features: [\"Video game\", \"Assembler\"],\n id: \"proj_snob\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n version: \"1.0.1\",\n },\n {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n features: [\"Chat Completions\", \"Embeddings\"],\n id: \"proj_mai_legacy\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n version: \"2.4.0\",\n },\n];\n\nexport const STATIC_PROJECTS_MAP: Record<string, any> = {\n cli: {\n category: \"Developer Tools\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description:\n \"Discussions et séances de codage dans le terminal CLI via mAI.\",\n is_public: true,\n label: \"Bêta\",\n name: \"CLI\",\n project_id: \"cli\",\n repository: \"https://github.com/mDevsLabs/CLI\",\n status: \"beta\",\n },\n cloud: {\n category: \"Cloud & Storage\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description:\n \"Stockage cloud de documents et intégration d'mAI pour des résumés.\",\n is_public: true,\n label: \"Réflexion\",\n name: \"Cloud\",\n project_id: \"cloud\",\n repository: \"\",\n status: \"conception\",\n },\n coder: {\n category: \"Developer Tools\",\n created_at: \"2026-08-20T00:00:00.000Z\",\n description:\n \"IDE IA de nouvelle génération avec agents IA autonomes, orchestration multi-modèles et support natif des outils MCP.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Coder\",\n project_id: \"coder\",\n repository: \"https://github.com/mDevsLabs/Coder\",\n status: \"alpha\",\n },\n mai: {\n category: \"AI Suite\",\n created_at: \"2026-01-15T00:00:00.000Z\",\n description: \"Ancienne interface web de mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI Web (Legacy)\",\n project_id: \"mai\",\n repository: \"https://github.com/mDevsLabs/mAI\",\n status: \"archived\",\n },\n maicli: {\n category: \"CLI Tool\",\n created_at: \"2026-02-10T00:00:00.000Z\",\n description:\n \"Interface en ligne de commande professionnelle pour l'écosystème mAI.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mAI CLI (Legacy)\",\n project_id: \"maicli\",\n repository: \"https://github.com/mDevsLabs/mAI-CLI\",\n status: \"archived\",\n },\n msearch: {\n category: \"Search Engine\",\n created_at: \"2026-02-01T00:00:00.000Z\",\n description: \"Moteur de recherche sémantique et d'indexation vectorielle.\",\n is_public: true,\n label: \"Archivé\",\n name: \"mSearch\",\n project_id: \"msearch\",\n repository: \"https://github.com/mDevsLabs/mSearch\",\n status: \"archived\",\n },\n site: {\n category: \"Site & Web\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description: \"Site officiel et application web mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Site\",\n project_id: \"site\",\n repository: \"https://github.com/mDevsLabs/Site\",\n status: \"alpha\",\n },\n \"pulse-web\": {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour le navigateur web.\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - Web\",\n project_id: \"pulse-web\",\n repository: \"https://github.com/mDevsLabs/Pulse-Web\",\n status: \"beta\",\n },\n \"pulse-jetbrains\": {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour l'IDE JetBrains.\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - JetBrains\",\n project_id: \"pulse-jetbrains\",\n repository: \"https://github.com/mDevsLabs/Pulse-JetBrains\",\n status: \"beta\",\n },\n \"pulse-vscode\": {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description: \"Extension Pulse pour VS Code.\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse - VS Code\",\n project_id: \"pulse-vscode\",\n repository: \"https://github.com/mDevsLabs/Pulse-VSCode\",\n status: \"beta\",\n },\n desktop: {\n category: \"Desktop\",\n created_at: \"2026-08-15T00:00:00.000Z\",\n description: \"Application desktop intégrée mAI.\",\n is_public: true,\n label: \"Concept\",\n name: \"Desktop\",\n project_id: \"desktop\",\n repository: \"https://github.com/mDevsLabs/Desktop\",\n status: \"conception\",\n },\n skills: {\n category: \"Skills\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description: \"Compétences et agents spécialisés mAI.\",\n is_public: true,\n label: \"Concept\",\n name: \"Skills\",\n project_id: \"skills\",\n repository: \"https://github.com/mDevsLabs/Skills\",\n status: \"conception\",\n },\n plugins: {\n category: \"Plugins\",\n created_at: \"2026-08-10T00:00:00.000Z\",\n description: \"Écosystème de plugins mAI.\",\n is_public: true,\n label: \"Concept\",\n name: \"Plugins\",\n project_id: \"plugins\",\n repository: \"https://github.com/mDevsLabs/Plugins\",\n status: \"conception\",\n },\n api: {\n category: \"API\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description: \"Hub API mAI et agrégation de modèles.\",\n is_public: true,\n label: \"Bêta\",\n name: \"API\",\n project_id: \"api\",\n repository: \"https://github.com/mDevsLabs/API\",\n status: \"beta\",\n },\n autre: {\n category: \"Autre\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description: \"Autres projets et expérimentations mAI.\",\n is_public: true,\n label: \"Concept\",\n name: \"Autre\",\n project_id: \"autre\",\n repository: \"\",\n status: \"conception\",\n },\n openprovider: {\n category: \"API Gateway\",\n created_at: \"2026-03-01T00:00:00.000Z\",\n description:\n \"Hub universel d'agrégation et de routage d'API et modèles LLM.\",\n is_public: true,\n label: \"Archivé\",\n name: \"OpenProvider\",\n project_id: \"openprovider\",\n repository: \"https://github.com/mDevsLabs/OpenProvider\",\n status: \"archived\",\n },\n pulse: {\n category: \"Extensions\",\n created_at: \"2026-08-05T00:00:00.000Z\",\n description:\n \"Ensemble d'extensions pour diverses applications pour discuter avec mAI directement (navigateur, VS Code...).\",\n is_public: true,\n label: \"Bêta\",\n name: \"Pulse\",\n project_id: \"pulse\",\n repository: \"https://github.com/mDevsLabs/Pulse\",\n status: \"beta\",\n },\n snob: {\n category: \"Games\",\n created_at: \"2026-03-15T00:00:00.000Z\",\n description: \"Jeu vidéo du style Block Blast.\",\n is_public: true,\n label: \"Archivé\",\n name: \"Snob\",\n project_id: \"snob\",\n repository: \"https://github.com/mDevsLabs/Snob\",\n status: \"archived\",\n },\n web: {\n category: \"Web Application\",\n created_at: \"2026-08-01T00:00:00.000Z\",\n description:\n \"Application d'IA en ligne web directement et simplement pour discuter avec l'IA mAI.\",\n is_public: true,\n label: \"Alpha\",\n name: \"Web\",\n project_id: \"web\",\n repository: \"https://github.com/mDevsLabs/Web\",\n status: \"alpha\",\n },\n};\n\nexport function registerProjectRoutes(app: Hono) {\n // GET /v1/projects\n app.get(\"/v1/projects\", async (c) => {\n try {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const dbProjects =\n await sql`SELECT * FROM mprojects_projects WHERE user_id = ${userId} ORDER BY created_at DESC LIMIT 50`;\n return c.json({\n data: [...STATIC_PROJECTS_LIST, ...dbProjects],\n object: \"list\",\n });\n } catch (_err) {\n return c.json({ data: STATIC_PROJECTS_LIST, object: \"list\" });\n }\n });\n\n // POST /v1/projects\n app.post(\"/v1/projects\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const body = await c.req.json();\n if (!body.name) {\n return c.json({ error: \"Le nom du projet est obligatoire.\" }, 400);\n }\n\n const projectId = \"proj-\" + Math.random().toString(36).substr(2, 9);\n\n await sql`\n INSERT INTO mprojects_projects (user_id, project_id, name, description, is_public)\n VALUES (${userId}, ${projectId}, ${body.name}, ${\n body.description || \"\"\n }, ${body.isPublic || false})\n `;\n\n return c.json({ name: body.name, project_id: projectId, success: true });\n });\n\n // GET /v1/projects/:id\n app.get(\"/v1/projects/:id\", async (c) => {\n const projectId = c.req.param(\"id\").toLowerCase();\n\n if (STATIC_PROJECTS_MAP[projectId]) {\n return c.json({ project: STATIC_PROJECTS_MAP[projectId] });\n }\n\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projects = await sql`\n SELECT * FROM mprojects_projects \n WHERE (user_id = ${userId} OR is_public = TRUE) AND LOWER(project_id) = ${projectId} \n LIMIT 1\n `;\n\n if (projects.length === 0) {\n return c.json({ error: \"Project not found\" }, 404);\n }\n\n return c.json({ project: projects[0] });\n });\n\n // PUT /v1/projects/:id\n app.put(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n const body = await c.req.json();\n\n const existing =\n await sql`SELECT id FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (existing.length === 0) {\n return c.json({ error: \"Projet non trouvé ou non autorisé.\" }, 404);\n }\n\n const name = body.name;\n const description = body.description;\n const isPublic = body.isPublic;\n\n await sql`\n UPDATE mprojects_projects\n SET name = COALESCE(${name}, name),\n description = COALESCE(${description}, description),\n is_public = COALESCE(${isPublic}, is_public),\n updated_at = NOW()\n WHERE user_id = ${userId} AND project_id = ${projectId}\n `;\n\n return c.json({\n message: \"Projet mis à jour.\",\n project_id: projectId,\n success: true,\n });\n });\n\n // DELETE /v1/projects/:id\n app.delete(\"/v1/projects/:id\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const result = await sql`\n DELETE FROM mprojects_projects \n WHERE user_id = ${userId} AND project_id = ${projectId}\n RETURNING id\n `;\n\n if (result.length === 0) {\n return c.json({ error: \"Projet non trouvé ou déjà supprimé.\" }, 404);\n }\n\n return c.json({ message: \"Projet supprimé avec succès.\", success: true });\n });\n\n // GET /v1/projects/:id/stats\n app.get(\"/v1/projects/:id/stats\", async (c) => {\n const sql = getDb();\n const userId = c.get(\"userId\");\n const projectId = c.req.param(\"id\");\n\n const projects =\n await sql`SELECT id, name, created_at FROM mprojects_projects WHERE user_id = ${userId} AND project_id = ${projectId} LIMIT 1`;\n if (projects.length === 0) {\n return c.json({ error: \"Projet non trouvé.\" }, 404);\n }\n\n return c.json({\n active_deployments: 1,\n name: projects[0].name,\n project_id: projectId,\n requests_count: Math.floor(Math.random() * 500) + 12,\n status: \"healthy\",\n uptime_percentage: 99.98,\n });\n });\n}",[83],"78777eed-b81f-4cdd-828b-27a70d2a6a4f",217,["D",1788620602782],27,"import type { Hono } from \"npm:hono@4\";\nimport {\n extractToken,\n getDb,\n getTierMaiTokenLimit,\n getTierSpeechLimit,\n getUserQuotaBoost,\n getWeekData,\n isPaidTier,\n verifyToken,\n} from \"./config.ts\";\nimport { maiModelsList } from \"./maiModels.ts\";\n\nfunction getOpenRouterApiKey(userCustomKey?: string | null): string {\n if (userCustomKey && userCustomKey.trim().startsWith(\"sk-or-\")) {\n return userCustomKey.trim();\n }\n return Deno.env.get(\"OPENROUTER_API_KEY\") || \"\";\n}\n\nexport function registerModelRoutes(app: Hono) {\n // ─────────────────────────────────────────────\n // GET /v1/usage & /usage\n // ─────────────────────────────────────────────\n const handleGetUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw) || (c as any).get?.(\"apiKey\");\n let userId = (c as any).get?.(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n } catch {}\n }\n\n const sql = getDb();\n\n // Résolution de l'identifiant via mprojects_api_keys si clé API fournie\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n }\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const userResult =\n await sql`SELECT id, tier, email, username, phone, avatar_url FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text OR email = ${userId}::text LIMIT 1`;\n const user = userResult[0];\n const resolvedUserId = user ? user.id : userId;\n\n const [usageResult, speechResult] = await Promise.all([\n sql`\n SELECT COALESCE(SUM(tokens_used::numeric), 0) as tokens_used \n FROM weekly_usage \n WHERE user_id = ${resolvedUserId}::integer AND week_start = ${weekStartStr}::date\n `.catch((e) => {\n console.error(\"[usageResult] Error:\", e);\n return [];\n }),\n sql`\n SELECT COALESCE(SUM(tokens_used::numeric), 0) as tokens_used \n FROM weekly_speech_usage \n WHERE user_id = ${resolvedUserId}::text AND week_start = ${weekStartStr}::date\n `.catch((e) => {\n console.error(\"[speechResult] Error:\", e);\n return [];\n }),\n ]);\n const tokensUsed = usageResult[0]?.tokens_used || 0;\n const speechTokensUsed = Number(speechResult?.[0]?.tokens_used || 0);\n const userTier = user?.tier || \"Free\";\n const maiBoost = await getUserQuotaBoost(sql, resolvedUserId, \"mai\");\n const audioBoost = await getUserQuotaBoost(sql, resolvedUserId, \"audio\");\n const limit = getTierMaiTokenLimit(userTier) + maiBoost;\n const speechLimit = getTierSpeechLimit(userTier) + audioBoost;\n\n return c.json({\n avatarUrl: user?.avatar_url,\n email: user?.email,\n id: userId,\n limit,\n phone: user?.phone,\n resetAt: nextResetIso,\n speechLimit,\n speechTokensUsed,\n tier: userTier,\n tokensUsed,\n username: user?.username,\n weekStart: weekStartStr,\n });\n } catch {\n return c.json({ error: \"Erreur serveur.\" }, 500);\n }\n };\n\n app.get(\"/usage\", handleGetUsage);\n app.get(\"/v1/usage\", handleGetUsage);\n app.get(\"/usage/\", handleGetUsage);\n app.get(\"/v1/usage/\", handleGetUsage);\n\n // ─────────────────────────────────────────────\n // POST /v1/log-usage & /log-usage\n // ─────────────────────────────────────────────\n const handleLogUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw) || (c as any).get?.(\"apiKey\");\n let userId = (c as any).get?.(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const body = await c.req.json().catch(() => ({}));\n const inputTokens = Number(body.inputTokens || body.promptTokens || 0);\n const outputTokens = Number(\n body.outputTokens || body.completionTokens || 0,\n );\n const tokensUsed = Number(\n body.tokensUsed || inputTokens + outputTokens || 0,\n );\n const { weekStartStr } = getWeekData();\n\n const sql = getDb();\n const userRes =\n await sql`SELECT id, tier FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text LIMIT 1`;\n const tier = userRes.length > 0 ? userRes[0].tier : \"Free\";\n const resolvedUserId = userRes.length > 0 ? userRes[0].id : userId;\n const maiBoost = await getUserQuotaBoost(sql, resolvedUserId, \"mai\");\n const limit = getTierMaiTokenLimit(tier) + maiBoost;\n\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${resolvedUserId}::integer AND week_start = ${weekStartStr}::date\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${resolvedUserId}::integer, ${weekStartStr}::date, ${tokensUsed})\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + ${tokensUsed}\n `;\n\n return c.json({\n inputTokens,\n limit,\n outputTokens,\n success: true,\n tokensUsed,\n weeklyUsed: currentUsage + tokensUsed,\n });\n } catch (err: any) {\n console.error(\"[log-usage] Error:\", err);\n return c.json({ error: \"Erreur serveur.\", details: err?.message }, 500);\n }\n };\n\n app.post(\"/log-usage\", handleLogUsage);\n app.post(\"/v1/log-usage\", handleLogUsage);\n app.post(\"/log-usage/\", handleLogUsage);\n app.post(\"/v1/log-usage/\", handleLogUsage);\n\n // ─────────────────────────────────────────────\n // GET /v1/models, /models & /v1beta/models\n // ─────────────────────────────────────────────\n const handleGetModels = async (c: any) => {\n const userPlan = c.get(\"userPlan\");\n const shouldFilterFreeOnly = !isPaidTier(userPlan);\n\n try {\n const res = await fetch(\"https://openrouter.ai/api/v1/models\");\n if (!res.ok) {\n throw new Error(\"OpenRouter fetch error\");\n }\n const json = await res.json();\n const rawModels: any[] = json.data || [];\n\n let filtered = rawModels\n .filter((m) => m && m.id && !m.id.startsWith(\"openrouter/\"))\n .filter((m) => {\n const modality = m.architecture?.modality || \"\";\n const outputModalities = m.architecture?.output_modalities || [];\n return (\n outputModalities.includes(\"text\") ||\n modality.endsWith(\"text\") ||\n modality.includes(\"->text\")\n );\n })\n .map((m) => ({\n architecture: m.architecture,\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description || \"\",\n id: m.id,\n maxContext: m.context_length || 128_000,\n maxOutput: m.top_provider?.max_completion_tokens || 4096,\n name: m.name || m.id,\n object: \"model\",\n owned_by: m.id.split(\"/\")[0] || \"openrouter\",\n supported_parameters: m.supported_parameters || [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"stop\",\n \"tools\",\n \"response_format\",\n ],\n }));\n\n if (shouldFilterFreeOnly) {\n filtered = filtered.filter((m) =>\n (m.id || \"\").toLowerCase().includes(\":free\")\n );\n }\n\n const lagunaIdx = filtered.findIndex((m) =>\n m.id === \"poolside/laguna-xs-2.1:free\"\n );\n if (lagunaIdx > 0) {\n const [laguna] = filtered.splice(lagunaIdx, 1);\n filtered.unshift(laguna);\n }\n\n return c.json({ data: filtered, object: \"list\" });\n } catch (_err) {\n let fallback = [\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description: \"Modèle IA Laguna XS 2.1 haute performance par Poolside\",\n id: \"poolside/laguna-xs-2.1:free\",\n maxContext: 128_000,\n maxOutput: 4096,\n name: \"Laguna XS 2.1\",\n object: \"model\",\n owned_by: \"poolside\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"stop\",\n \"tools\",\n \"response_format\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\", \"image\", \"file\"],\n modality: \"text+image->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle multimodal ultra-rapide de Google conçu pour des tâches à haut débit et de raisonnement avec un très grand contexte.\",\n id: \"google/gemini-2.5-flash:free\",\n maxContext: 1_048_576,\n maxOutput: 65_535,\n name: \"Google: Gemini 2.5 Flash\",\n object: \"model\",\n owned_by: \"google\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"top_k\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"seed\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle phare de Meta Llama 3.3 70B offrant des compétences avancées de programmation, logique et résolution de problèmes complexes.\",\n id: \"meta-llama/llama-3.3-70b-instruct:free\",\n maxContext: 131_072,\n maxOutput: 128_000,\n name: \"Meta: Llama 3.3 70B Instruct\",\n object: \"model\",\n owned_by: \"meta-llama\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"tools\",\n \"response_format\",\n \"frequency_penalty\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle de code spécialisé de haute précision par Alibaba Cloud, optimisé pour la synthèse de code, le refactoring et le debug.\",\n id: \"qwen/qwen-2.5-coder-32b-instruct:free\",\n maxContext: 32_768,\n maxOutput: 8192,\n name: \"Qwen: Qwen 2.5 Coder 32B Instruct\",\n object: \"model\",\n owned_by: \"qwen\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stop\",\n \"tools\",\n ],\n },\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->text\",\n output_modalities: [\"text\"],\n },\n created: 0,\n description:\n \"Modèle de raisonnement logique étape par étape de premier ordre par DeepSeek pour les mathématiques et la logique complexe.\",\n id: \"deepseek/deepseek-r1:free\",\n maxContext: 163_840,\n maxOutput: 16_000,\n name: \"DeepSeek: DeepSeek R1\",\n object: \"model\",\n owned_by: \"deepseek\",\n supported_parameters: [\n \"temperature\",\n \"top_p\",\n \"max_tokens\",\n \"stream\",\n \"thinking\",\n \"reasoning\",\n ],\n },\n ];\n\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) =>\n (m.id || \"\").toLowerCase().includes(\":free\")\n );\n }\n\n return c.json({ data: fallback, object: \"list\" });\n }\n };\n\n app.get(\"/v1/models\", handleGetModels);\n app.get(\"/models\", handleGetModels);\n app.get(\"/v1beta/models\", handleGetModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/models/mai & GET /v1/mai/models\n // ─────────────────────────────────────────────\n const handleGetMaiModels = (c: any) => {\n const formatted = maiModelsList.map((m) => ({\n capabilities: m.capabilities,\n context_length: m.contextWindow,\n created: Math.floor(new Date(m.releaseDate).getTime() / 1000) ||\n Math.floor(Date.now() / 1000),\n description: m.description,\n huggingface_tag: m.huggingFaceTag,\n id: m.id,\n license: m.license,\n max_output_tokens: m.maxOutputTokens,\n name: m.name,\n object: \"model\",\n ollama_tag: m.ollamaTag,\n owned_by: \"mDevsLabs\",\n parameters: m.parameters,\n recommended_hardware: m.recommendedHardware,\n status: m.status,\n tagline: m.tagline,\n usable_in_cloud_chat: false,\n version: m.version,\n }));\n return c.json({ data: formatted, object: \"list\" });\n };\n\n app.get(\"/v1/models/mai\", handleGetMaiModels);\n app.get(\"/v1/mai/models\", handleGetMaiModels);\n app.get(\"/models/mai\", handleGetMaiModels);\n app.get(\"/mai/models\", handleGetMaiModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/status\n // ─────────────────────────────────────────────\n const handleGetStatus = async (c: any) => {\n try {\n const res = await fetch(\"https://mai.instatus.com/summary.json\");\n const data = await res.json();\n return c.json(data);\n } catch {\n return c.json({ error: \"Failed to fetch status\" }, 500);\n }\n };\n\n app.get(\"/v1/status\", handleGetStatus);\n app.get(\"/status\", handleGetStatus);\n\n // ─────────────────────────────────────────────\n // POST /v1/chat/completions & /chat/completions (OpenAI Compatible)\n // ─────────────────────────────────────────────\n const handleChatCompletions = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n\n let body: Record<string, any>;\n try {\n body = await c.req.json();\n } catch {\n return c.json(\n {\n error: {\n code: \"invalid_request_body\",\n message: \"Le corps de la requête doit être un JSON valide.\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const modelRequested = body.model;\n if (!modelRequested) {\n return c.json(\n {\n error: {\n code: \"missing_model\",\n message: \"Le paramètre 'model' est obligatoire.\",\n param: \"model\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n const modelStr = String(modelRequested).toLowerCase().trim();\n\n // Vérifier si c'est un modèle mAI (local uniquement)\n const isMaiLocal = modelStr.startsWith(\"mai-\") ||\n modelStr.startsWith(\"mdevslabs/\") ||\n modelStr.includes(\"mai-1.\") ||\n modelStr === \"mai-1\" ||\n modelStr === \"mai-1-light\";\n\n if (isMaiLocal) {\n return c.json(\n {\n error: {\n code: \"mai_model_not_supported_for_cloud_chat\",\n message:\n `Le modèle '${modelRequested}' est un modèle mAI destiné à une exécution locale (via Ollama / HuggingFace) et n'est pas directement utilisable en chat completions cloud.`,\n param: \"model\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const isFreePlan = !isPaidTier(userPlan);\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles contenant ':free' dans leur identifiant (ex: 'google/gemini-2.5-flash:free', 'meta-llama/llama-3.3-70b-instruct:free').`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::integer AND week_start = ${weekStartStr}::date\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const maiBoost = await getUserQuotaBoost(sql, userId, \"mai\");\n const limit = getTierMaiTokenLimit(userPlan) + maiBoost;\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n // Nettoyer le body : retirer tout champ `api_key` ou `Authorization` injecté par le client\n // pour empêcher tout contournement de la clé serveur.\n const {\n api_key: _ck,\n authorization: _ca,\n Authorization: _cA,\n ...safeBody\n } = body as Record<string, any>;\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(safeBody),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API\",\n },\n method: \"POST\",\n },\n );\n\n if (openRouterRes.status === 200) {\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::integer, ${weekStartStr}::date, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (_e) {}\n }\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch (err: any) {\n console.error(\"[ChatCompletions] Erreur inattendue:\", err);\n return c.json(\n {\n details: err?.message || \"Erreur interne.\",\n error: \"Failed to process chat completion.\",\n },\n 500,\n );\n }\n };\n\n app.post(\"/v1/chat/completions\", handleChatCompletions);\n app.post(\"/chat/completions\", handleChatCompletions);\n\n // ─────────────────────────────────────────────\n // POST /v1/messages & /messages (Proxy Anthropic SDK)\n // ─────────────────────────────────────────────\n const handleMessages = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n\n let body: Record<string, any>;\n try {\n body = await c.req.json();\n } catch {\n return c.json(\n {\n error: {\n code: \"invalid_request_body\",\n message: \"Le corps de la requête doit être un JSON valide.\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const modelRequested = body.model;\n const modelStr = String(modelRequested || \"\").toLowerCase().trim();\n\n const isFreePlan = !isPaidTier(userPlan);\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: \"model_access_denied\",\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles gratuits dont l'ID contient ':free' (ex: 'meta-llama/llama-3.3-70b-instruct:free', 'deepseek/deepseek-r1:free').`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::integer AND week_start = ${weekStartStr}::date\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const maiBoost = await getUserQuotaBoost(sql, userId, \"mai\");\n const limit = getTierMaiTokenLimit(userPlan) + maiBoost;\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n // Nettoyer le body : retirer tout champ `api_key` ou `Authorization` injecté par le client\n const {\n api_key: _ck,\n authorization: _ca,\n Authorization: _cA,\n ...safeBody\n } = body as Record<string, any>;\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(safeBody),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Anthropic)\",\n },\n method: \"POST\",\n },\n );\n\n if (openRouterRes.status === 200) {\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::integer, ${weekStartStr}::date, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (_e) {}\n }\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch (err: any) {\n console.error(\"[Messages] Erreur inattendue:\", err);\n return c.json(\n {\n details: err?.message || \"Erreur interne.\",\n error: \"Failed to process Anthropic request.\",\n },\n 500,\n );\n }\n };\n\n app.post(\"/v1/messages\", handleMessages);\n app.post(\"/messages\", handleMessages);\n\n // ─────────────────────────────────────────────\n // POST /v1beta/models/* & /v1/models/* (Proxy Google Gemini SDK)\n // ─────────────────────────────────────────────\n const handleGeminiGenerate = async (c: any) => {\n try {\n const userPlan = c.get(\"userPlan\") || \"Free\";\n\n // Pour Gemini, le body JSON peut être optionnel (le modèle est dans l'URL)\n let body: Record<string, any> = {};\n try {\n body = await c.req.json();\n } catch {\n // body vide acceptable pour Gemini (modèle dans le path)\n }\n\n const fullPath = c.req.path;\n // Extraire le modèle depuis l'URL (ex: /v1beta/models/google/gemini-2.5-flash:free:generateContent -> google/gemini-2.5-flash:free)\n const pathModel = fullPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(generateContent|streamGenerateContent).*$/, \"\");\n\n const paramModel = c.req.param(\"model\");\n const modelRequested = body.model || paramModel || pathModel;\n const modelStr = String(modelRequested || \"\").toLowerCase().trim();\n\n const isFreePlan = !isPaidTier(userPlan);\n const isFreeModel = modelStr.includes(\":free\");\n\n // Bloquer avec 403 les requêtes pour les modèles payants avec une clé ou JWT free\n if (isFreePlan && !isFreeModel) {\n return c.json(\n {\n error: {\n code: 403,\n message: `Le modèle '${\n modelRequested || \"inconnu\"\n }' nécessite un forfait payant (Plus, Pro ou Max). Votre forfait actuel (${userPlan}) autorise uniquement les modèles gratuits contenant ':free' dans leur identifiant (ex: 'google/gemini-2.5-flash:free').`,\n status: \"PERMISSION_DENIED\",\n },\n },\n 403,\n );\n }\n\n let userId = c.get(\"userId\");\n if (!userId) {\n const token = extractToken(c.req.raw);\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const { weekStartStr } = getWeekData();\n const usageResult = await sql`\n SELECT tokens_used FROM weekly_usage\n WHERE user_id = ${userId}::integer AND week_start = ${weekStartStr}::date\n LIMIT 1\n `;\n const currentUsage = usageResult[0]?.tokens_used || 0;\n const maiBoost = await getUserQuotaBoost(sql, userId, \"mai\");\n const limit = getTierMaiTokenLimit(userPlan) + maiBoost;\n\n if (currentUsage >= limit) {\n return c.json(\n { error: \"Votre limite hebdomadaire est épuisée. Quota atteint.\" },\n 429,\n );\n }\n\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `;\n const apiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!apiKey) {\n return c.json({ error: \"Clé fournisseur OpenRouter manquante.\" }, 500);\n }\n\n // Nettoyer le body : retirer tout champ `api_key` ou `Authorization` injecté par le client\n const {\n api_key: _ck,\n authorization: _ca,\n Authorization: _cA,\n ...safeBody\n } = body as Record<string, any>;\n\n const openRouterPayload = {\n ...safeBody,\n model: body.model || modelRequested,\n };\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/chat/completions\",\n {\n body: JSON.stringify(openRouterPayload),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Gemini)\",\n },\n method: \"POST\",\n },\n );\n\n if (openRouterRes.status === 200) {\n try {\n await sql`\n INSERT INTO weekly_usage (user_id, week_start, tokens_used)\n VALUES (${userId}::integer, ${weekStartStr}::date, 1)\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET tokens_used = weekly_usage.tokens_used + 1\n `;\n } catch (_e) {}\n }\n\n return new Response(openRouterRes.body, {\n headers: {\n \"Content-Type\": openRouterRes.headers.get(\"Content-Type\") ||\n \"application/json\",\n },\n status: openRouterRes.status,\n });\n } catch (err: any) {\n console.error(\"[GeminiGenerate] Erreur inattendue:\", err);\n return c.json(\n {\n details: err?.message || \"Erreur interne.\",\n error: \"Failed to process Google Gemini request.\",\n },\n 500,\n );\n }\n };\n\n app.post(\"/v1beta/models/*\", handleGeminiGenerate);\n app.post(\"/v1/models/*:generateContent\", handleGeminiGenerate);\n app.post(\"/v1/models/*:streamGenerateContent\", handleGeminiGenerate);\n}",[99],"d28aa131-3dbf-4246-bbf8-1a339dada4c2",257,["D",1788714800578],54,"/**\n * mAI — Backend & API Routes\n * Base URL : https://mai.val.run\n */\n\nimport { cors } from \"npm:hono/cors\";\nimport { Hono } from \"npm:hono@4\";\nimport { registerAuthRoutes } from \"./auth.ts\";\nimport { registerAudioRoutes } from \"./audio.ts\";\nimport { initSQLite } from \"./config.ts\";\nimport { registerDeviceRoutes } from \"./devices.ts\";\nimport { registerImageRoutes } from \"./images.ts\";\nimport { registerMiddleware } from \"./api-middleware.ts\";\nimport { registerModelRoutes } from \"./models.ts\";\nimport { registerProjectRoutes } from \"./projects.ts\";\nimport { registerRealtimeRoutes } from \"./realtime.ts\";\nimport { registerStorageRoutes } from \"./storage.ts\";\nimport { registerTranslateRoutes } from \"./translate.ts\";\nimport { registerVibeAIRoutes } from \"./vibe-ai.ts\";\nimport { registerVibeRoutes } from \"./vibe.ts\";\nimport { registerWebRoutes } from \"./web.ts\";\n\n// ─────────────────────────────────────────────\n// Init DB SQLite en background\n// ─────────────────────────────────────────────\ninitSQLite().catch(console.error);\n\n// ─────────────────────────────────────────────\n// App Hono\n// ─────────────────────────────────────────────\nconst app = new Hono();\n\n// ─────────────────────────────────────────────\n// CORS ouvert : toutes les origines acceptées (tests local / preview / prod temporaire)\n// ─────────────────────────────────────────────\n\napp.use(\n \"*\",\n cors({\n origin: \"*\",\n // \"*\" impose credentials: false (spec navigateur). Le frontend\n // utilise Authorization Bearer (src/services/api.ts), pas de cookies.\n credentials: false,\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"PATCH\", \"OPTIONS\", \"HEAD\"],\n allowHeaders: [\n // Standards fetch / navigateur\n \"Accept\",\n \"Accept-Language\",\n \"Content-Language\",\n \"Content-Type\",\n \"Content-Length\",\n \"Content-Disposition\",\n \"Range\",\n \"Origin\",\n \"Referer\",\n \"X-Requested-With\",\n \"DNT\",\n \"Cache-Control\",\n \"Pragma\",\n \"Expires\",\n \"If-Modified-Since\",\n \"If-None-Match\",\n \"If-Match\",\n // Auth / API maison (api-middleware.ts, audio.ts, images.ts)\n \"Authorization\",\n \"x-user-id\",\n \"X-User-Id\",\n \"x-api-key\",\n \"X-API-Key\",\n \"x-goog-api-key\",\n \"X-Goog-Api-Key\",\n // Custom app (web.ts)\n \"x-web-search\",\n \"X-Web-Search\",\n \"x-disable-web-search\",\n \"X-Disable-Web-Search\",\n // SDK Anthropic / OpenAI / OpenRouter compatibles\n \"anthropic-version\",\n \"anthropic-beta\",\n \"anthropic-dangerous-direct-browser-access\",\n \"OpenAI-Organization\",\n \"OpenAI-Project\",\n \"X-Title\",\n \"HTTP-Referer\",\n \"X-Request-Id\",\n \"X-Client-Info\",\n \"apikey\",\n \"x-client-version\",\n \"x-app-version\",\n \"X-Stripe-Signature\",\n ],\n exposeHeaders: [\n \"Content-Type\",\n \"Authorization\",\n \"x-user-id\",\n \"x-audio-id\",\n \"x-speech-limit\",\n \"x-speech-used\",\n \"x-tokens-used\",\n \"Content-Length\",\n \"Content-Range\",\n \"ETag\",\n ],\n maxAge: 86_400,\n }),\n);\n\n// Filet preflight explicite : répond 204 avant l'auth (local / preview / SDK).\napp.options(\"*\", (c) => c.text(\"\", 204));\n\napp.use(\"*\", async (c, next) => {\n await next();\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"strict-origin-when-cross-origin\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\n \"Permissions-Policy\",\n \"camera=(), geolocation=(), microphone=(self)\",\n );\n});\n\n// ─────────────────────────────────────────────\n// ROUTE RACINE : mAI UNIQUEMENT (URL de base de l'API)\n// ─────────────────────────────────────────────\napp.get(\"/\", (c) => c.text(\"mAI\"));\napp.get(\"/api\", (c) => c.text(\"mAI\"));\napp.get(\"/api/\", (c) => c.text(\"mAI\"));\napp.get(\"/v1\", (c) => c.text(\"mAI\"));\napp.get(\"/v1/\", (c) => c.text(\"mAI\"));\napp.get(\"/vibe\", (c) => c.text(\"mAI\"));\napp.get(\"/vibe/\", (c) => c.text(\"mAI\"));\napp.get(\"/api/vibe\", (c) => c.text(\"mAI\"));\napp.get(\"/api/vibe/\", (c) => c.text(\"mAI\"));\n\n// ─────────────────────────────────────────────\n// Middleware & Routes modulaires\n// ─────────────────────────────────────────────\nregisterMiddleware(app);\nregisterAuthRoutes(app);\nregisterStorageRoutes(app);\nregisterModelRoutes(app);\nregisterImageRoutes(app);\nregisterAudioRoutes(app);\nregisterWebRoutes(app);\nregisterProjectRoutes(app);\nregisterDeviceRoutes(app);\nregisterRealtimeRoutes(app);\nregisterVibeAIRoutes(app);\nregisterTranslateRoutes(app);\nregisterVibeRoutes(app);\n\nexport default app.fetch;",[115],"be398c28-d1fb-4c60-9f77-01436ae5c7db","d2e49b4e-9fd5-11f1-866a-1607ee4eb77e",["D",1787587613987],[221],"01b444a4-db1c-486c-9c4c-3d111a9ed347","d2e42ca4-9fd5-11f1-866a-1607ee4eb77e",["D",1788164141214],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractTierFromApiKey,\n extractToken,\n getDb,\n getTierDailyImageLimit,\n getTierImageRequestCost,\n getUserQuotaBoost,\n isPaidTier,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface ImageModelItem {\n capabilities?: {\n async_task?: boolean;\n image_to_image?: boolean;\n inpainting?: boolean;\n text_to_image?: boolean;\n upscaling?: boolean;\n variation?: boolean;\n };\n created: number;\n description: string;\n endpoints?: string[];\n features: string[];\n form:\n | \"openai-standard\"\n | \"midjourney-pipeline\"\n | \"image-edit\"\n | \"image-upscale\";\n id: string;\n name: string;\n object: \"model\";\n owned_by: string;\n parent?: string | null;\n permission?: Array<{\n allow_create_engine: boolean;\n allow_fine_tuning: boolean;\n allow_logprobs: boolean;\n allow_sampling: boolean;\n allow_search_indices: boolean;\n allow_view: boolean;\n created: number;\n group: string | null;\n id: string;\n is_blocking: boolean;\n object: \"model_permission\";\n organization: string;\n }>;\n root?: string;\n}\n\nexport function getCometApiKey(): string {\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(\"COMET_API_KEY\") || \"\";\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env.COMET_API_KEY || \"\";\n }\n return \"\";\n}\n\nexport function normalizeImageSrc(url?: string | null): string {\n if (!url || typeof url !== \"string\") {\n return \"\";\n }\n const clean = url.trim().replace(/^[\"']|[\"']$/g, \"\");\n if (!clean) {\n return \"\";\n }\n\n if (\n clean.startsWith(\"http://\") ||\n clean.startsWith(\"https://\") ||\n clean.startsWith(\"data:\") ||\n clean.startsWith(\"blob:\") ||\n clean.startsWith(\"/\")\n ) {\n return clean;\n }\n\n let mime = \"image/png\";\n if (clean.startsWith(\"/9j/\")) {\n mime = \"image/jpeg\";\n } else if (clean.startsWith(\"R0lGOD\")) {\n mime = \"image/gif\";\n } else if (clean.startsWith(\"UklGR\")) {\n mime = \"image/webp\";\n } else if (clean.startsWith(\"PHN2Zy\") || clean.startsWith(\"PD94bWw\")) {\n mime = \"image/svg+xml\";\n }\n\n return `data:${mime};base64,${clean}`;\n}\n\n/**\n * Cache mémoire pour les modèles CometAPI (TTL = 60 secondes)\n */\nlet cachedCometImageModels: ImageModelItem[] = [];\nlet lastCometFetchTime = 0;\nconst CACHE_TTL_MS = 60_000;\n\n/**\n * Modèles de repli de haute qualité en cas de défaillance réseau temporaire de CometAPI\n */\nconst FALLBACK_IMAGE_MODELS: ImageModelItem[] = [\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1722470400,\n description:\n \"Modèle ultra-rapide en 4 étapes par Black Forest Labs (Text-to-Image).\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"black-forest-labs/flux-schnell\",\n name: \"FLUX.1 Schnell\",\n object: \"model\",\n owned_by: \"black-forest-labs\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n },\n created: 1722470400,\n description:\n \"Modèle phare de synthèse photoréaliste et artistique par Black Forest Labs (Text-to-Image / Image-to-Image).\",\n endpoints: [\"/v1/images/generations\", \"/v1/images/edits\"],\n features: [\"text-to-image\", \"image-to-image\"],\n form: \"openai-standard\",\n id: \"black-forest-labs/flux-dev\",\n name: \"FLUX.1 Dev\",\n object: \"model\",\n owned_by: \"black-forest-labs\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1727827200,\n description:\n \"Sommet de la qualité visuelle, cohérence typographique et détails avancés par Black Forest Labs.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"black-forest-labs/flux-pro\",\n name: \"FLUX 1.1 Pro\",\n object: \"model\",\n owned_by: \"black-forest-labs\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1730419200,\n description:\n \"Version Ultra haute résolution (jusqu'à 4K) avec photoréalisme extrême et détails de peau par Black Forest Labs.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"black-forest-labs/flux-1.1-pro-ultra\",\n name: \"FLUX 1.1 Pro Ultra\",\n object: \"model\",\n owned_by: \"black-forest-labs\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n },\n created: 1729641600,\n description:\n \"Modèle phare de 8 milliards de paramètres de Stability AI pour une variété stylistique maximale et une typographie nette.\",\n endpoints: [\"/v1/images/generations\", \"/v1/images/edits\"],\n features: [\"text-to-image\", \"image-to-image\"],\n form: \"openai-standard\",\n id: \"stabilityai/stable-diffusion-3.5-large\",\n name: \"Stable Diffusion 3.5 Large\",\n object: \"model\",\n owned_by: \"stabilityai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1729641600,\n description:\n \"Version accélérée en 4 étapes de Stable Diffusion 3.5 Large par Stability AI.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"stabilityai/stable-diffusion-3.5-large-turbo\",\n name: \"Stable Diffusion 3.5 Large Turbo\",\n object: \"model\",\n owned_by: \"stabilityai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n },\n created: 1690848000,\n description:\n \"Modèle SDXL 1.0 haute résolution de Stability AI pour la création artistique et le rendu réaliste.\",\n endpoints: [\"/v1/images/generations\", \"/v1/images/edits\"],\n features: [\"text-to-image\", \"image-to-image\"],\n form: \"openai-standard\",\n id: \"stabilityai/sdxl\",\n name: \"Stable Diffusion XL 1.0\",\n object: \"model\",\n owned_by: \"stabilityai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n upscaling: true,\n variation: true,\n },\n created: 1718064000,\n description:\n \"Génération stylisée haut de gamme avec esthétique cinématique et compréhension sémantique de pointe via Midjourney v6.\",\n endpoints: [\n \"/v1/images/generations\",\n \"/mj/submit/imagine\",\n \"/mj/submit/action\",\n \"/mj/task/:id/fetch\",\n ],\n features: [\"text-to-image\", \"image-to-image\", \"upscale\", \"variation\"],\n form: \"midjourney-pipeline\",\n id: \"midjourney/v6\",\n name: \"Midjourney v6\",\n object: \"model\",\n owned_by: \"midjourney\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n upscaling: true,\n variation: true,\n },\n created: 1722384000,\n description:\n \"Dernière itération du moteur Midjourney v6.1 avec cohérence accrue des mains, textures et détails fins.\",\n endpoints: [\n \"/v1/images/generations\",\n \"/mj/submit/imagine\",\n \"/mj/submit/action\",\n \"/mj/task/:id/fetch\",\n ],\n features: [\"text-to-image\", \"image-to-image\", \"upscale\", \"variation\"],\n form: \"midjourney-pipeline\",\n id: \"midjourney/v6.1\",\n name: \"Midjourney v6.1\",\n object: \"model\",\n owned_by: \"midjourney\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: false,\n text_to_image: true,\n },\n created: 1730419200,\n description:\n \"Génération vectorielle et matricielle spécialisée dans les logos, icônes, illustrations et design graphique.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\", \"image-to-image\"],\n form: \"openai-standard\",\n id: \"recraft-ai/recraft-v3\",\n name: \"Recraft V3\",\n object: \"model\",\n owned_by: \"recraft-ai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1724284800,\n description:\n \"Modèle phare de rendu de texte dans l'image et composition graphique par Ideogram AI.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"ideogram-ai/ideogram-v2\",\n name: \"Ideogram V2\",\n object: \"model\",\n owned_by: \"ideogram-ai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1724284800,\n description:\n \"Version ultra-rapide d'Ideogram V2 optimisée pour les flux de production en temps réel.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"ideogram-ai/ideogram-v2-turbo\",\n name: \"Ideogram V2 Turbo\",\n object: \"model\",\n owned_by: \"ideogram-ai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1698796800,\n description:\n \"Modèle DALL-E 3 d'OpenAI pour la synthèse d'images haute fidélité avec reformulation automatique des prompts.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"dall-e-3\",\n name: \"DALL-E 3\",\n object: \"model\",\n owned_by: \"openai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: true,\n inpainting: true,\n text_to_image: true,\n },\n created: 1667260800,\n description:\n \"Modèle classique DALL-E 2 d'OpenAI pour la génération et l'édition rapide d'images.\",\n endpoints: [\n \"/v1/images/generations\",\n \"/v1/images/edits\",\n \"/v1/images/variations\",\n ],\n features: [\"text-to-image\", \"image-to-image\"],\n form: \"openai-standard\",\n id: \"dall-e-2\",\n name: \"DALL-E 2\",\n object: \"model\",\n owned_by: \"openai\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1723680000,\n description:\n \"Modèle de synthèse photoréaliste et typographique de Google DeepMind Imagen 3.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"google/imagen-3\",\n name: \"Google Imagen 3\",\n object: \"model\",\n owned_by: \"google\",\n },\n {\n capabilities: {\n async_task: true,\n image_to_image: false,\n inpainting: false,\n text_to_image: true,\n },\n created: 1730000000,\n description: \"Modèle ultra-rapide de génération photoréaliste par Luma AI.\",\n endpoints: [\"/v1/images/generations\"],\n features: [\"text-to-image\"],\n form: \"openai-standard\",\n id: \"luma/photon\",\n name: \"Luma Photon\",\n object: \"model\",\n owned_by: \"luma\",\n },\n];\n\n/**\n * Déterminer la forme technique d'un modèle d'image CometAPI\n */\nfunction detectModelForm(\n modelId: string,\n _features?: string[],\n): ImageModelItem[\"form\"] {\n const lower = modelId.toLowerCase();\n if (\n lower.includes(\"midjourney\") || lower.includes(\"mj-\") ||\n lower.startsWith(\"mj/\")\n ) {\n return \"midjourney-pipeline\";\n }\n if (lower.includes(\"upscale\")) {\n return \"image-upscale\";\n }\n if (lower.includes(\"edit\") || lower.includes(\"inpaint\")) {\n return \"image-edit\";\n }\n return \"openai-standard\";\n}\n\n/**\n * Obtenir la liste ordonnée des identifiants candidats pour un modèle donné sur CometAPI\n */\nfunction getCometCandidateModelIds(requestedModel: string): string[] {\n const lower = (requestedModel || \"\").toLowerCase().trim();\n\n if (\n lower.includes(\"schnell\") || lower === \"flux\" ||\n lower.includes(\"flux-1-schnell\") || lower.includes(\"flux-schnell\")\n ) {\n return [\n \"flux-schnell\",\n \"black-forest-labs/flux-schnell\",\n \"flux-1-schnell\",\n \"black-forest-labs/flux-1-schnell\",\n \"dall-e-3\",\n ];\n }\n if (lower.includes(\"flux\") && lower.includes(\"dev\")) {\n return [\n \"flux-dev\",\n \"black-forest-labs/flux-dev\",\n \"flux-1-dev\",\n \"black-forest-labs/flux-1-dev\",\n \"dall-e-3\",\n ];\n }\n if (\n lower.includes(\"flux\") && (lower.includes(\"pro\") || lower.includes(\"ultra\"))\n ) {\n return [\n \"flux-pro\",\n \"black-forest-labs/flux-pro\",\n \"flux-1.1-pro\",\n \"black-forest-labs/flux-1.1-pro\",\n \"dall-e-3\",\n ];\n }\n if (\n lower.includes(\"dall-e-3\") || lower.includes(\"dalle-3\") ||\n lower === \"dall-e\"\n ) {\n return [\"dall-e-3\", \"openai/dall-e-3\"];\n }\n if (lower.includes(\"dall-e-2\") || lower.includes(\"dalle-2\")) {\n return [\"dall-e-2\", \"openai/dall-e-2\", \"dall-e-3\"];\n }\n if (lower.includes(\"midjourney\") || lower.includes(\"mj\")) {\n return [\n \"midjourney/v6.1\",\n \"midjourney/v6\",\n \"midjourney\",\n \"mj-v6\",\n \"dall-e-3\",\n ];\n }\n if (\n lower.includes(\"diffusion\") || lower.includes(\"sd3\") ||\n lower.includes(\"sd-3\")\n ) {\n return [\n \"stable-diffusion-3.5-large\",\n \"stabilityai/stable-diffusion-3.5-large\",\n \"sdxl\",\n \"stabilityai/sdxl\",\n \"dall-e-3\",\n ];\n }\n if (lower.includes(\"sdxl\")) {\n return [\"sdxl\", \"stabilityai/sdxl\", \"dall-e-3\"];\n }\n if (lower.includes(\"recraft\")) {\n return [\"recraft-v3\", \"recraft-ai/recraft-v3\", \"dall-e-3\"];\n }\n if (lower.includes(\"ideogram\")) {\n return [\n \"ideogram-v2\",\n \"ideogram-ai/ideogram-v2\",\n \"ideogram-v2-turbo\",\n \"dall-e-3\",\n ];\n }\n if (lower.includes(\"imagen\")) {\n return [\"google/imagen-3\", \"imagen-3\", \"dall-e-3\"];\n }\n if (lower.includes(\"photon\")) {\n return [\"luma/photon\", \"photon\", \"dall-e-3\"];\n }\n\n return [requestedModel, \"flux-schnell\", \"dall-e-3\"];\n}\n\n/**\n * Résolution des alias de modèles\n */\nfunction resolveImageModel(requestedModel: string): string {\n if (!requestedModel) return \"flux-schnell\";\n const candidates = getCometCandidateModelIds(requestedModel);\n return candidates[0] || requestedModel;\n}\n\n/**\n * Formatage d'un modèle d'image selon le schéma OpenAI Model Specification\n */\nfunction formatOpenAiImageModel(m: any): ImageModelItem {\n const modelId = m.id || \"image-model\";\n const org = m.owned_by || modelId.split(\"/\")[0] || \"cometapi\";\n const created = Number(m.created) ||\n Math.floor(Date.now() / 1000) - 86_400 * 30;\n const features = m.features ||\n m.supported_features ||\n (modelId.toLowerCase().includes(\"diffusion\") ||\n modelId.toLowerCase().includes(\"midjourney\")\n ? [\"text-to-image\", \"image-to-image\"]\n : [\"text-to-image\"]);\n\n const form = m.form || detectModelForm(modelId, features);\n const endpoints = m.endpoints || (\n form === \"midjourney-pipeline\"\n ? [\n \"/v1/images/generations\",\n \"/mj/submit/imagine\",\n \"/mj/submit/action\",\n \"/mj/task/:id/fetch\",\n ]\n : form === \"image-edit\"\n ? [\"/v1/images/edits\", \"/v1/images/generations\"]\n : form === \"image-upscale\"\n ? [\"/v1/images/upscale\"]\n : [\"/v1/images/generations\", \"/v1/images/edits\"]\n );\n\n return {\n capabilities: {\n async_task: true,\n image_to_image: features.includes(\"image-to-image\") ||\n form === \"image-edit\",\n inpainting: features.includes(\"inpainting\") ||\n features.includes(\"image-to-image\"),\n text_to_image: true,\n upscaling: features.includes(\"upscale\") || form === \"image-upscale\" ||\n form === \"midjourney-pipeline\",\n variation: features.includes(\"variation\") ||\n form === \"midjourney-pipeline\",\n },\n created,\n description: m.description ||\n `Modèle de génération d'images haute fidélité ${m.name || modelId}.`,\n endpoints,\n features,\n form,\n id: modelId,\n name: m.name || modelId,\n object: \"model\",\n owned_by: org,\n parent: null,\n permission: [\n {\n allow_create_engine: false,\n allow_fine_tuning: false,\n allow_logprobs: true,\n allow_sampling: true,\n allow_search_indices: false,\n allow_view: true,\n created,\n group: null,\n id: `modelperm-${modelId.replace(/[^a-zA-Z0-9]/g, \"-\")}`,\n is_blocking: false,\n object: \"model_permission\",\n organization: \"*\",\n },\n ],\n root: modelId,\n };\n}\n\n/**\n * Récupération dynamique et filtrage en temps réel des modèles d'images depuis CometAPI\n */\nasync function fetchLiveCometImageModels(): Promise<ImageModelItem[]> {\n const now = Date.now();\n if (\n cachedCometImageModels.length > 0 && now - lastCometFetchTime < CACHE_TTL_MS\n ) {\n return cachedCometImageModels;\n }\n\n const cometApiKey = getCometApiKey();\n if (!cometApiKey) {\n return FALLBACK_IMAGE_MODELS;\n }\n\n try {\n const res = await fetch(\"https://api.cometapi.com/v1/models\", {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n });\n\n if (!res.ok) {\n console.warn(`[CometAPI] /v1/models réponse non-OK (${res.status})`);\n return cachedCometImageModels.length > 0\n ? cachedCometImageModels\n : FALLBACK_IMAGE_MODELS;\n }\n\n const json = await res.json();\n const rawModels: any[] = json.data || json.models || [];\n\n // Filtrage dynamique multi-formes des modèles d'image\n const imageModels = rawModels.filter((m: any) => {\n if (!m || !m.id) return false;\n const mType = String(\n m.model_type ||\n m.type ||\n m.architecture?.modality ||\n m.object ||\n \"\",\n ).toLowerCase();\n const outputModalities = (m.architecture?.output_modalities || []).map((\n o: string,\n ) => String(o).toLowerCase());\n const features = (m.features || m.supported_features || []).map((\n f: string,\n ) => String(f).toLowerCase());\n const idLower = String(m.id).toLowerCase();\n\n const isImageModality = mType.includes(\"image\") ||\n outputModalities.includes(\"image\") ||\n mType.endsWith(\"->image\") ||\n mType.includes(\"text->image\");\n\n const hasImageFeature = features.includes(\"text-to-image\") ||\n features.includes(\"image-to-image\") ||\n features.includes(\"inpainting\") ||\n features.includes(\"image\");\n\n const matchesImageKeyword = idLower.includes(\"flux\") ||\n idLower.includes(\"diffusion\") ||\n idLower.includes(\"dall-e\") ||\n idLower.includes(\"midjourney\") ||\n idLower.includes(\"mj-\") ||\n idLower.includes(\"recraft\") ||\n idLower.includes(\"ideogram\") ||\n idLower.includes(\"imagen\") ||\n idLower.includes(\"photon\") ||\n idLower.includes(\"kling\") ||\n idLower.includes(\"kolors\") ||\n idLower.includes(\"sdxl\") ||\n idLower.includes(\"stable-diffusion\") ||\n idLower.startsWith(\"sd-\") ||\n idLower.includes(\"qwen-image\") ||\n idLower.includes(\"gpt-image\");\n\n return isImageModality || hasImageFeature || matchesImageKeyword;\n });\n\n if (imageModels.length > 0) {\n const formatted = imageModels.map(formatOpenAiImageModel);\n cachedCometImageModels = formatted;\n lastCometFetchTime = now;\n return formatted;\n }\n\n return cachedCometImageModels.length > 0\n ? cachedCometImageModels\n : FALLBACK_IMAGE_MODELS;\n } catch (err) {\n console.error(\"[CometAPI] Erreur de récupération des modèles:\", err);\n return cachedCometImageModels.length > 0\n ? cachedCometImageModels\n : FALLBACK_IMAGE_MODELS;\n }\n}\n\n/**\n * Exécuteur robuste multi-stratégie pour la génération d'images CometAPI\n */\nasync function callCometImageGeneration(params: {\n apiKey: string;\n isEdit?: boolean;\n isVariation?: boolean;\n mask?: string;\n model: string;\n n: number;\n negativePrompt?: string;\n prompt: string;\n quality?: string;\n responseFormat?: string;\n seed?: number;\n size: string;\n sourceImage?: string;\n style?: string;\n}): Promise<\n {\n data: Array<{ b64_json?: string; revised_prompt?: string; url?: string }>;\n usedModel: string;\n }\n> {\n const {\n apiKey,\n prompt,\n size,\n n,\n responseFormat,\n quality,\n style,\n negativePrompt,\n seed,\n sourceImage,\n mask,\n isEdit,\n isVariation,\n } = params;\n\n const candidateModels = getCometCandidateModelIds(params.model);\n let lastErrorText = \"\";\n\n for (const candidate of candidateModels) {\n // 1. Construire le payload de base minimal\n const basePayload: Record<string, unknown> = {\n model: candidate,\n prompt,\n size: size || \"1024x1024\",\n };\n\n if (n && n > 1) {\n basePayload.n = Math.min(n, 4);\n }\n if (responseFormat && responseFormat === \"b64_json\") {\n basePayload.response_format = \"b64_json\";\n }\n if (quality) {\n basePayload.quality = quality;\n }\n if (style) {\n basePayload.style = style;\n }\n if (negativePrompt) {\n basePayload.negative_prompt = negativePrompt;\n }\n if (seed !== undefined) {\n basePayload.seed = seed;\n }\n if (sourceImage) {\n basePayload.image = sourceImage;\n }\n if (mask) {\n basePayload.mask = mask;\n }\n\n const endpointUrl = isEdit\n ? \"https://api.cometapi.com/v1/images/edits\"\n : isVariation\n ? \"https://api.cometapi.com/v1/images/variations\"\n : \"https://api.cometapi.com/v1/images/generations\";\n\n let currentPayload = { ...basePayload };\n\n for (let attempt = 0; attempt < 2; attempt++) {\n try {\n const res = await fetch(endpointUrl, {\n body: JSON.stringify(currentPayload),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n method: \"POST\",\n });\n\n if (res.ok) {\n const json = await res.json().catch(() => ({}));\n const rawList = json.data || json.images || [];\n if (Array.isArray(rawList) && rawList.length > 0) {\n const formatted = rawList.map((img: any) => {\n const rawUrl = img.url || \"\";\n const b64 = img.b64_json || \"\";\n const resolved = normalizeImageSrc(rawUrl || b64);\n return {\n b64_json: b64 ||\n (responseFormat === \"b64_json\" && resolved.startsWith(\"data:\")\n ? resolved.split(\",\")[1]\n : undefined),\n revised_prompt: img.revised_prompt || prompt,\n url: resolved || rawUrl,\n };\n });\n return { data: formatted, usedModel: candidate };\n }\n }\n\n lastErrorText = await res.text().catch(() => \"\");\n console.warn(\n `[CometAPI] Modèle '${candidate}' tentative ${\n attempt + 1\n } échouée (${res.status}):`,\n lastErrorText,\n );\n\n // Si l'erreur indique un paramètre inconnu (ex: 'style', 'quality', 'seed', etc.)\n if (\n lastErrorText.includes(\"Unknown parameter\") ||\n lastErrorText.includes(\"unknown_parameter\")\n ) {\n // Supprimer les paramètres optionnels et re-tenter immédiatement\n currentPayload = {\n model: candidate,\n prompt,\n size: size || \"1024x1024\",\n };\n continue;\n }\n } catch (fetchErr: unknown) {\n lastErrorText = fetchErr instanceof Error\n ? fetchErr.message\n : \"Erreur réseau\";\n console.warn(\n `[CometAPI] Exception fetch '${candidate}':`,\n lastErrorText,\n );\n }\n break;\n }\n }\n\n // 2. Fallback alternatif : essayer via /v1/chat/completions sur CometAPI\n try {\n const chatRes = await fetch(\n \"https://api.cometapi.com/v1/chat/completions\",\n {\n body: JSON.stringify({\n messages: [\n {\n content: `Generate this image: ${prompt}`,\n role: \"user\",\n },\n ],\n model: \"dall-e-3\",\n }),\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n method: \"POST\",\n },\n );\n\n if (chatRes.ok) {\n const chatJson = await chatRes.json();\n const content = chatJson.choices?.[0]?.message?.content || \"\";\n const match = content.match(/!\\[.*?\\]\$(https?:\\/\\/[^\\s\$]+)\\)/) ||\n content.match(/(https?:\\/\\/[^\\s\\)]+\\.(?:png|jpg|jpeg|webp))/i);\n if (match && match[1]) {\n return {\n data: [\n {\n revised_prompt: prompt,\n url: normalizeImageSrc(match[1]),\n },\n ],\n usedModel: \"chat-image-fallback\",\n };\n }\n }\n } catch {}\n\n throw new Error(\n `Erreur fournisseur Comet API: ${\n lastErrorText ||\n \"Impossible de générer l'image après plusieurs tentatives\"\n }`,\n );\n}\n\n/**\n * Exécuteur et pont asynchrone pour les tâches Midjourney sur CometAPI\n */\nasync function executeMidjourneyImagineBridge(\n prompt: string,\n cometApiKey: string,\n options?: {\n aspectRatio?: string;\n base64Array?: string[];\n notifyHook?: string;\n },\n): Promise<\n { failReason?: string; imageUrl: string; progress?: string; taskId?: string }\n> {\n let finalPrompt = prompt.trim();\n if (options?.aspectRatio && !finalPrompt.includes(\"--ar\")) {\n finalPrompt = `${finalPrompt} --ar ${options.aspectRatio}`;\n }\n\n const payload: Record<string, unknown> = {\n prompt: finalPrompt,\n };\n if (options?.base64Array && options.base64Array.length > 0) {\n payload.base64Array = options.base64Array;\n }\n if (options?.notifyHook) {\n payload.notifyHook = options.notifyHook;\n }\n\n try {\n const submitRes = await fetch(\n \"https://api.cometapi.com/mj/submit/imagine\",\n {\n body: JSON.stringify(payload),\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n method: \"POST\",\n },\n );\n\n if (submitRes.ok) {\n const submitJson = await submitRes.json();\n const taskId = submitJson.result || submitJson.task_id || submitJson.id;\n\n if (taskId) {\n // Polling actif jusqu'à succès (max 60s)\n const maxAttempts = 35;\n const pollIntervalMs = 1800;\n\n for (let attempt = 0; attempt < maxAttempts; attempt++) {\n await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));\n\n try {\n const fetchRes = await fetch(\n `https://api.cometapi.com/mj/task/${taskId}/fetch`,\n {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n },\n );\n\n if (!fetchRes.ok) continue;\n\n const taskJson = await fetchRes.json();\n const status = String(taskJson.status || \"\").toUpperCase();\n\n if (status === \"SUCCESS\") {\n const imgUrl = taskJson.imageUrl || taskJson.cdnImage ||\n taskJson.discordImage || taskJson.image_url;\n if (imgUrl) {\n return {\n imageUrl: imgUrl,\n progress: \"100%\",\n taskId,\n };\n }\n } else if (status === \"FAILURE\" || status === \"FAILED\") {\n break;\n }\n } catch {}\n }\n }\n }\n } catch (err) {\n console.warn(\"[CometAPI] Midjourney imagine bridge error:\", err);\n }\n\n // Si le bridge MJ natif échoue ou timeout, fallback transparent sur les générateurs d'images CometAPI\n const fallbackRes = await callCometImageGeneration({\n apiKey: cometApiKey,\n model: \"dall-e-3\",\n n: 1,\n prompt,\n size: \"1024x1024\",\n });\n\n return {\n imageUrl: fallbackRes.data[0]?.url || \"\",\n progress: \"100%\",\n taskId: \"fallback-standard\",\n };\n}\n\nexport function registerImageRoutes(app: Hono) {\n // ─────────────────────────────────────────────\n // GET /v1/models/images, /models/images & /v1/images/models (OpenAI Compatible)\n // ─────────────────────────────────────────────\n const handleGetImageModels = async (c: any) => {\n const userPlan = c.get(\"userPlan\");\n const shouldFilterFreeOnly = !isPaidTier(userPlan);\n\n try {\n let models = await fetchLiveCometImageModels();\n\n if (shouldFilterFreeOnly) {\n models = models.filter((m) => {\n const idLower = (m.id || \"\").toLowerCase();\n return idLower.includes(\"flux\") || idLower.includes(\"schnell\") ||\n idLower.includes(\"free\");\n });\n }\n\n return c.json({ data: models, object: \"list\" });\n } catch (_err) {\n let fallback = FALLBACK_IMAGE_MODELS;\n if (shouldFilterFreeOnly) {\n fallback = fallback.filter((m) => m.id.toLowerCase().includes(\"flux\"));\n }\n return c.json({\n data: fallback.map(formatOpenAiImageModel),\n object: \"list\",\n });\n }\n };\n\n app.get(\"/v1/models/images\", handleGetImageModels);\n app.get(\"/models/images\", handleGetImageModels);\n app.get(\"/v1/images/models\", handleGetImageModels);\n app.get(\"/images/models\", handleGetImageModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/models/images/:id & /models/images/:id (OpenAI Model Detail)\n // ─────────────────────────────────────────────\n const handleGetSingleImageModel = async (c: any) => {\n const rawId = c.req.param(\"id\") || \"\";\n const resolvedId = resolveImageModel(rawId);\n\n const liveModels = await fetchLiveCometImageModels();\n const found = liveModels.find(\n (m) =>\n m.id.toLowerCase() === rawId.toLowerCase() ||\n m.id.toLowerCase() === resolvedId.toLowerCase() ||\n m.name.toLowerCase() === rawId.toLowerCase(),\n ) ||\n FALLBACK_IMAGE_MODELS.find(\n (m) =>\n m.id.toLowerCase() === rawId.toLowerCase() ||\n m.id.toLowerCase() === resolvedId.toLowerCase() ||\n m.name.toLowerCase() === rawId.toLowerCase(),\n ) || {\n created: Math.floor(Date.now() / 1000),\n description: `Modèle d'image ${rawId}.`,\n features: [\"text-to-image\"],\n form: detectModelForm(resolvedId, [\"text-to-image\"]),\n id: resolvedId,\n name: rawId,\n object: \"model\" as const,\n owned_by: resolvedId.split(\"/\")[0] || \"cometapi\",\n };\n\n return c.json(formatOpenAiImageModel(found));\n };\n\n app.get(\"/v1/models/images/:id\", handleGetSingleImageModel);\n app.get(\"/models/images/:id\", handleGetSingleImageModel);\n\n // ─────────────────────────────────────────────\n // GET /v1/images/usage & /images/usage\n // ─────────────────────────────────────────────\n const handleGetImageUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n userPlan = (payload.tier as string) || userPlan;\n } catch {\n // Token non JWT ignoré\n }\n }\n\n const sql = getDb();\n\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n userPlan = keyRows[0].tier || userPlan;\n }\n } catch {\n // Erreur DB ignorée\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const [uRows, countRows] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text OR email = ${userId}::text LIMIT 1`,\n sql`\n SELECT COALESCE(SUM(images_generated::numeric), 0) as images_generated \n FROM mprojects_daily_image_usage \n WHERE (\n user_id = ${userId}::text \n OR user_id IN (SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n ) AND usage_date = CURRENT_DATE \n LIMIT 1\n `.catch(() => []),\n ]);\n\n const keyTier = extractTierFromApiKey(token);\n const effectiveTier = keyTier || uRows[0]?.tier || userPlan || \"Free\";\n const usedToday = Number(countRows[0]?.images_generated || 0);\n const imageBoost = await getUserQuotaBoost(sql, userId, \"images\");\n const dailyLimit = getTierDailyImageLimit(effectiveTier) + imageBoost;\n\n const now = new Date();\n const tomorrowMidnight = new Date(\n Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate() + 1,\n 0,\n 0,\n 0,\n ),\n );\n\n return c.json({\n dailyLimit,\n plan: effectiveTier,\n resetAt: tomorrowMidnight.toISOString(),\n usedToday,\n userId,\n });\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json(\n {\n details: msg,\n error: \"Erreur lors de la récupération de l'usage image.\",\n },\n 500,\n );\n }\n };\n\n app.get(\"/v1/images/usage\", handleGetImageUsage);\n app.get(\"/images/usage\", handleGetImageUsage);\n\n // ─────────────────────────────────────────────\n // GET /v1/images/history & /images/history\n // ─────────────────────────────────────────────\n const handleGetImageHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {\n // Token invalide ignoré\n }\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const history = await sql`\n SELECT id, title, pinned, model, prompt, negative_prompt, width, height, image_url, status, created_at\n FROM mprojects_image_generations\n WHERE user_id = ${userId}::text\n ORDER BY pinned DESC, created_at DESC\n LIMIT 50\n `.catch(() => []);\n\n const formattedHistory = history.map((item: any) => ({\n ...item,\n image_url: normalizeImageSrc(item.image_url),\n pinned: Boolean(item.pinned),\n title: item.title || null,\n }));\n\n return c.json({ data: formattedHistory, success: true });\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json(\n { details: msg, error: \"Erreur historique images.\" },\n 500,\n );\n }\n };\n\n const handleUpdateImageHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const id = c.req.param(\"id\") || c.req.query(\"id\");\n if (!id) {\n return c.json({ error: \"ID manquant.\" }, 400);\n }\n\n const body = await c.req.json().catch(() => ({}));\n const sql = getDb();\n const sets: string[] = [];\n const values: any[] = [];\n let idx = 1;\n\n if (body.title !== undefined) {\n sets.push(`title = $${idx++}`);\n values.push(\n body.title ? String(body.title).trim().slice(0, 200) : null,\n );\n }\n if (body.pinned !== undefined) {\n sets.push(`pinned = $${idx++}`);\n values.push(Boolean(body.pinned));\n }\n\n if (sets.length === 0) {\n return c.json({ success: true });\n }\n\n values.push(id, userId);\n const query = `UPDATE mprojects_image_generations SET ${\n sets.join(\", \")\n } WHERE id::text = $${idx++}::text AND user_id = $${idx}::text RETURNING id, title, pinned`;\n const result = await sql.unsafe(query, values);\n\n return c.json({ data: result[0] || null, success: true });\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json({ details: msg, error: \"Erreur mise à jour image.\" }, 500);\n }\n };\n\n app.get(\"/v1/images/history\", handleGetImageHistory);\n app.get(\"/images/history\", handleGetImageHistory);\n app.patch(\"/v1/images/history/:id\", handleUpdateImageHistory);\n app.patch(\"/v1/images/history\", handleUpdateImageHistory);\n app.patch(\"/images/history/:id\", handleUpdateImageHistory);\n app.patch(\"/images/history\", handleUpdateImageHistory);\n\n // ─────────────────────────────────────────────\n // POST /v1/images/generations & Formes Multi-Modèles (OpenAI, Midjourney, Google SDK)\n // ─────────────────────────────────────────────\n const handleImageGeneration = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : headerApiKey || null;\n\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n userPlan = (payload.tier as string) || userPlan;\n } catch {\n // Token non JWT ignoré\n }\n }\n\n if (!userId) {\n return c.json(\n {\n error: {\n code: \"invalid_api_key\",\n message: \"Non authentifié. Clé API ou token requis.\",\n param: null,\n type: \"authentication_error\",\n },\n },\n 401,\n );\n }\n\n const body = await c.req.json().catch(() => ({}));\n const reqPath = c.req.path || \"\";\n const isGoogleFormat = reqPath.includes(\":generateImages\") ||\n reqPath.includes(\":predict\") ||\n Boolean(body.instances || body.numberOfImages || body.aspectRatio);\n\n const rawPrompt = body.prompt ||\n body.instances?.[0]?.prompt ||\n body.parameters?.prompt ||\n \"\";\n const prompt = typeof rawPrompt === \"string\" ? rawPrompt.trim() : \"\";\n\n const pathModel = reqPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(generateImages|predict).*$/, \"\");\n const requestedModel = body.model || pathModel ||\n \"black-forest-labs/flux-schnell\";\n\n const model = resolveImageModel(requestedModel);\n const modelForm = detectModelForm(model, []);\n\n // Résolution des dimensions et aspect ratio\n let width = 1024;\n let height = 1024;\n const aspectRatioStr = body.aspect_ratio || body.aspectRatio || \"\";\n\n if (aspectRatioStr) {\n const ar = String(aspectRatioStr).trim();\n if (ar === \"16:9\") {\n width = 1280;\n height = 720;\n } else if (ar === \"9:16\") {\n width = 720;\n height = 1280;\n } else if (ar === \"4:3\") {\n width = 1024;\n height = 768;\n } else if (ar === \"3:4\") {\n width = 768;\n height = 1024;\n } else if (ar === \"21:9\") {\n width = 1536;\n height = 640;\n }\n } else if (body.size) {\n const parts = String(body.size).split(\"x\");\n if (parts.length === 2) {\n width = Number.parseInt(parts[0], 10) || 1024;\n height = Number.parseInt(parts[1], 10) || 1024;\n }\n } else {\n if (body.width) width = Number(body.width);\n if (body.height) height = Number(body.height);\n }\n\n const negativePrompt = body.negative_prompt || \"\";\n const n = Math.max(\n 1,\n Math.min(Number(body.n || body.numberOfImages || 1), 4),\n );\n const responseFormat = body.response_format || \"url\";\n const quality = body.quality ? String(body.quality) : undefined;\n const style = body.style ? String(body.style) : undefined;\n\n if (!prompt) {\n return c.json(\n {\n error: {\n code: \"missing_prompt\",\n message:\n \"Le paramètre 'prompt' est obligatoire pour la génération d'images.\",\n param: \"prompt\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n const sql = getDb();\n\n // Vérifier le forfait utilisateur réel\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${userId}::text OR username = ${userId}::text \n LIMIT 1\n `;\n const keyTier = extractTierFromApiKey(token);\n const effectiveTier = keyTier || uRows[0]?.tier || userPlan || \"Free\";\n const requestQuota = (c as any).get?.(\"requestQuota\") as\n | {\n apiKey: string | null;\n limit: number;\n remaining: number;\n used: number;\n }\n | undefined;\n\n if (!isPaidTier(effectiveTier)) {\n return c.json(\n {\n error: {\n code: \"image_generation_tier_restricted\",\n message:\n `La génération d'images via l'API est réservée aux abonnements payants (Plus, Pro, Max). Les clés API issues d'un compte Free ne sont pas autorisées à effectuer de requêtes de génération d'images.`,\n param: null,\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const imageBoost = await getUserQuotaBoost(sql, userId, \"images\");\n const dailyLimit = getTierDailyImageLimit(effectiveTier) + imageBoost;\n const usageRows = await sql`\n SELECT images_generated \n FROM mprojects_daily_image_usage \n WHERE user_id = ${userId}::text AND usage_date = CURRENT_DATE \n LIMIT 1\n `;\n const currentDailyUsage = Number(usageRows[0]?.images_generated || 0);\n\n if (currentDailyUsage + n > dailyLimit) {\n return c.json(\n {\n error: {\n code: \"daily_image_quota_exceeded\",\n limit: dailyLimit,\n message:\n `Votre quota journalier de génération d'images est épuisé (${currentDailyUsage}/${dailyLimit} par jour pour le forfait ${effectiveTier}, ${n} image(s) demandée(s)). Réinitialisation automatique à minuit UTC.`,\n requested: n,\n type: \"quota_error\",\n used: currentDailyUsage,\n },\n },\n 429,\n );\n }\n\n // Le crédit API débité est le coût du tier multiplié par le nombre d'images demandées:\n // il doit rester assez pour la requête AVANT d'appeler le fournisseur.\n const totalRequestCost = getTierImageRequestCost(effectiveTier) * n;\n if (\n requestQuota &&\n requestQuota.used + totalRequestCost > requestQuota.limit\n ) {\n return c.json(\n {\n error: {\n code: \"insufficient_api_requests\",\n dailyLimit,\n limit: requestQuota.limit,\n message:\n `Requête refusée : ${totalRequestCost} crédits API sont nécessaires pour générer ${n} image(s) avec le forfait ${effectiveTier}, il n'en reste que ${requestQuota.remaining} sur ${requestQuota.limit} cette semaine.`,\n remaining: requestQuota.remaining,\n required: totalRequestCost,\n type: \"quota_error\",\n used: requestQuota.used,\n },\n },\n 429,\n );\n }\n\n // Appel de Comet API avec exécution multi-stratégie & gestion des erreurs\n const cometApiKey = getCometApiKey();\n let generatedImageUrl = \"\";\n let cometResultData: Array<\n { b64_json?: string; revised_prompt?: string; url?: string }\n > = [];\n let finalUsedModel = model;\n\n if (cometApiKey) {\n if (\n modelForm === \"midjourney-pipeline\" && !reqPath.includes(\"/edits\")\n ) {\n const mjRes = await executeMidjourneyImagineBridge(\n prompt,\n cometApiKey,\n {\n aspectRatio: aspectRatioStr ||\n (width !== height ? `${width}:${height}` : undefined),\n base64Array: body.image ? [body.image] : undefined,\n },\n );\n generatedImageUrl = normalizeImageSrc(mjRes.imageUrl);\n cometResultData = [{\n revised_prompt: prompt,\n url: generatedImageUrl,\n }];\n } else {\n const genResult = await callCometImageGeneration({\n apiKey: cometApiKey,\n isEdit: reqPath.includes(\"/edits\") ||\n Boolean(body.image && body.mask),\n isVariation: reqPath.includes(\"/variations\"),\n mask: body.mask,\n model,\n n,\n negativePrompt,\n prompt,\n quality,\n responseFormat,\n seed: body.seed,\n size: `${width}x${height}`,\n sourceImage: body.image || body.image_url,\n style,\n });\n\n cometResultData = genResult.data;\n finalUsedModel = genResult.usedModel;\n if (cometResultData.length > 0) {\n generatedImageUrl = cometResultData[0].url || \"\";\n }\n }\n } else {\n generatedImageUrl = `https://picsum.photos/seed/${\n encodeURIComponent(prompt.slice(0, 20))\n }/${width}/${height}`;\n cometResultData = [{ revised_prompt: prompt, url: generatedImageUrl }];\n }\n\n // Incrémentation du quota journalier (1 par image générée)\n await sql`\n INSERT INTO mprojects_daily_image_usage (user_id, usage_date, images_generated, updated_at)\n VALUES (${userId}::text, CURRENT_DATE, ${n}, NOW())\n ON CONFLICT (user_id, usage_date)\n DO UPDATE SET \n images_generated = mprojects_daily_image_usage.images_generated + ${n},\n updated_at = NOW()\n `;\n\n // Enregistrement dans l'historique\n await sql`\n INSERT INTO mprojects_image_generations (\n user_id, api_key, model, prompt, negative_prompt, width, height, image_url, status\n ) VALUES (\n ${userId}::text,\n ${apiKey || null},\n ${finalUsedModel}::text,\n ${prompt}::text,\n ${negativePrompt || null},\n ${width}::integer,\n ${height}::integer,\n ${generatedImageUrl}::text,\n 'completed'\n )\n `;\n\n // Débit du compteur de requêtes de la clé API (cout x n verifie avant l'appel)\n const debitKey = requestQuota?.apiKey || apiKey;\n if (debitKey) {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + ${totalRequestCost}, last_used_at = NOW()\n WHERE api_key = ${debitKey}::text\n `;\n (c as any).set?.(\"quotaDebitedByHandler\", true);\n }\n\n // Log de requête\n try {\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms, created_at)\n VALUES (${apiKey || \"anonymous\"}::text, ${\n reqPath || \"/v1/images/generations\"\n }::text, 'POST', 200, 1500, NOW())\n `;\n } catch {}\n\n // Format Google GenAI\n if (isGoogleFormat) {\n return c.json({\n generatedImages: cometResultData.map((img) => ({\n image: {\n imageBytes: img.b64_json || \"\",\n mimeType: \"image/png\",\n uri: img.url || generatedImageUrl,\n },\n })),\n });\n }\n\n // Format OpenAI Standard\n return c.json({\n created: Math.floor(Date.now() / 1000),\n data: cometResultData,\n model: finalUsedModel,\n usage: {\n daily_limit: dailyLimit,\n daily_used: currentDailyUsage + n,\n plan: effectiveTier,\n request_cost: totalRequestCost,\n requests_counted: totalRequestCost,\n },\n });\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n console.error(\"[ImagesAPI] Erreur serveur génération:\", err);\n return c.json(\n {\n error: {\n code: \"image_generation_failed\",\n details: msg,\n message: `Erreur lors de la génération d'image : ${msg}`,\n type: \"api_error\",\n },\n },\n 500,\n );\n }\n };\n\n // ─────────────────────────────────────────────\n // POST & GET Routes Midjourney Dédiées (`/mj/*` et `/v1/mj/*`)\n // ─────────────────────────────────────────────\n const handleMidjourneyForward = async (c: any) => {\n const cometApiKey = getCometApiKey();\n if (!cometApiKey) {\n return c.json({\n error: \"Clé COMET_API_KEY non configurée sur le serveur.\",\n }, 500);\n }\n\n const subPath = c.req.path.replace(/^\\/v1\\/mj\\//, \"\").replace(\n /^\\/mj\\//,\n \"\",\n );\n const targetUrl = `https://api.cometapi.com/mj/${subPath}`;\n const method = c.req.method;\n\n try {\n const init: RequestInit = {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n method,\n };\n\n if (method === \"POST\" || method === \"PUT\" || method === \"PATCH\") {\n const reqBody = await c.req.json().catch(() => ({}));\n init.body = JSON.stringify(reqBody);\n }\n\n const res = await fetch(targetUrl, init);\n const data = await res.json().catch(() => ({}));\n return c.json(data, res.status as any);\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json(\n { error: \"Erreur proxy Midjourney CometAPI\", details: msg },\n 500,\n );\n }\n };\n\n app.post(\"/mj/submit/imagine\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/imagine\", handleMidjourneyForward);\n app.get(\"/mj/task/:id/fetch\", handleMidjourneyForward);\n app.get(\"/v1/mj/task/:id/fetch\", handleMidjourneyForward);\n app.post(\"/mj/submit/action\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/action\", handleMidjourneyForward);\n app.post(\"/mj/submit/describe\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/describe\", handleMidjourneyForward);\n app.post(\"/mj/submit/blend\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/blend\", handleMidjourneyForward);\n app.post(\"/mj/submit/change\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/change\", handleMidjourneyForward);\n app.post(\"/mj/submit/modal\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/modal\", handleMidjourneyForward);\n app.post(\"/mj/submit/shorten\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/shorten\", handleMidjourneyForward);\n app.post(\"/mj/submit/swap-face\", handleMidjourneyForward);\n app.post(\"/v1/mj/submit/swap-face\", handleMidjourneyForward);\n\n // ─────────────────────────────────────────────\n // POST & GET Routes Upscale, Edits, Variations & Tasks\n // ─────────────────────────────────────────────\n const handleImageUpscale = async (c: any) => {\n const cometApiKey = getCometApiKey();\n if (!cometApiKey) {\n return c.json({ error: \"Clé COMET_API_KEY non configurée.\" }, 500);\n }\n try {\n const body = await c.req.json().catch(() => ({}));\n const res = await fetch(\"https://api.cometapi.com/v1/images/upscale\", {\n body: JSON.stringify(body),\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n method: \"POST\",\n });\n const data = await res.json().catch(() => ({}));\n return c.json(data, res.status as any);\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json({ error: \"Erreur upscale image\", details: msg }, 500);\n }\n };\n\n app.post(\"/v1/images/upscale\", handleImageUpscale);\n app.post(\"/images/upscale\", handleImageUpscale);\n\n const handleFetchImageTask = async (c: any) => {\n const taskId = c.req.param(\"id\");\n const cometApiKey = getCometApiKey();\n if (!cometApiKey) {\n return c.json({ error: \"Clé COMET_API_KEY non configurée.\" }, 500);\n }\n try {\n const res = await fetch(\n `https://api.cometapi.com/mj/task/${taskId}/fetch`,\n {\n headers: {\n Authorization: `Bearer ${cometApiKey}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json\",\n },\n },\n );\n const data = await res.json().catch(() => ({}));\n return c.json(data, res.status as any);\n } catch (err: unknown) {\n const msg = err instanceof Error ? err.message : \"Erreur inconnue\";\n return c.json({ error: \"Erreur récupération tâche\", details: msg }, 500);\n }\n };\n\n app.get(\"/v1/images/tasks/:id\", handleFetchImageTask);\n app.get(\"/images/tasks/:id\", handleFetchImageTask);\n app.get(\"/v1/tasks/:id\", handleFetchImageTask);\n app.get(\"/tasks/:id\", handleFetchImageTask);\n\n // Routes OpenAI & Anthropic SDK\n app.post(\"/v1/images/generations\", handleImageGeneration);\n app.post(\"/images/generations\", handleImageGeneration);\n app.post(\"/v1/images\", handleImageGeneration);\n app.post(\"/images\", handleImageGeneration);\n app.post(\"/v1/images/edits\", handleImageGeneration);\n app.post(\"/images/edits\", handleImageGeneration);\n app.post(\"/v1/images/variations\", handleImageGeneration);\n app.post(\"/images/variations\", handleImageGeneration);\n\n // Routes Google GenAI / Gemini / Vertex SDK\n app.post(\"/v1beta/models/*:generateImages\", handleImageGeneration);\n app.post(\"/v1/models/*:generateImages\", handleImageGeneration);\n app.post(\"/v1beta/models/*:predict\", handleImageGeneration);\n app.post(\"/v1/models/*:predict\", handleImageGeneration);\n}",[229],"89ae05b3-5270-44cc-bd4a-2a9f00ac21db",["D",1788618643754],"import nodemailer from \"npm:nodemailer\";\n\nfunction escapeHtml(str: string): string {\n return String(str)\n .replace(/&/g, \"&\")\n .replace(/</g, \"<\")\n .replace(/>/g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\nfunction getEnv(key: string): string | undefined {\n if (typeof process !== \"undefined\" && process.env && process.env[key]) {\n return process.env[key];\n }\n // @ts-expect-error Nodemailer transport typing is incompatible with the configured transport.\n if (typeof Deno !== \"undefined\" && Deno.env && Deno.env.get) {\n // @ts-expect-error Nodemailer transport typing is incompatible with the configured transport.\n return Deno.env.get(key);\n }\n return undefined;\n}\n\nexport async function sendVerificationEmail(\n email: string,\n code: string,\n action: string,\n extraInfo?: any,\n) {\n // Log du code pour développement / debugging\n const maskedEmail = email.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(\n `[EMAIL] action=${action} to=${maskedEmail} hasCode=${\n Boolean(code)\n } code=${code}`,\n );\n\n let subject = \"Notification - mAI\";\n let title = \"Notification\";\n let textContent = \"\";\n let showCode = code ? true : false;\n\n switch (action) {\n case \"register\":\n subject = \"Vérifiez votre adresse e-mail - mAI\";\n title = \"Vérification d'inscription\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte <strong>mAI</strong> :\";\n break;\n case \"login\":\n subject = \"Code de vérification de connexion - mAI\";\n title = \"Vérification de connexion\";\n textContent =\n \"Voici votre code de vérification à 6 chiffres pour votre compte <strong>mAI</strong> :\";\n break;\n case \"verify_new_email\":\n subject = \"Vérification de votre nouvelle adresse e-mail - mAI\";\n title = \"Changement d'e-mail\";\n textContent =\n \"Voici le code de vérification pour confirmer votre nouvelle adresse e-mail :\";\n break;\n case \"delete_account\":\n subject = \"Code de suppression de compte - mAI\";\n title = \"Suppression du compte\";\n textContent =\n \"Vous avez demandé la suppression de votre compte. Voici votre code à 8 chiffres :\";\n break;\n case \"subscription_unlocked\": {\n const tierUnlocked = escapeHtml(extraInfo?.tier || \"Pro\");\n subject = `Merci d'avoir souscrit au forfait ${tierUnlocked} ! - mAI`;\n title = `Merci d'avoir souscrit au forfait ${tierUnlocked} !`;\n showCode = false;\n textContent =\n `Nous vous remercions chaleureusement pour votre souscription au forfait <strong>${tierUnlocked}</strong> sur <strong>mAI</strong> !<br><br>\n Votre compte bénéficie dès maintenant de vos nouveaux quotas étendus pour l'ensemble de vos applications et clés d'API (tokens mAI, requêtes API et stockage Cloud).<br><br>\n Toute l'équipe mDevsLabs vous remercie pour votre confiance et vous souhaite une excellente expérience créative et productive avec mAI.`;\n break;\n }\n case \"new_login\": {\n subject = \"Nouvelle connexion détectée - mAI\";\n title = \"Alerte de sécurité\";\n showCode = false;\n const device = escapeHtml(extraInfo?.device || \"Appareil inconnu\");\n const location = escapeHtml(extraInfo?.location || \"Lieu inconnu\");\n textContent =\n `Une nouvelle connexion à votre compte <strong>mAI</strong> a été détectée depuis :<br><br>\n <strong>Appareil :</strong> ${device}<br>\n <strong>Localisation :</strong> ${location}<br><br>\n Si vous êtes à l'origine de cette connexion, aucune action n'est requise. Sinon, modifiez immédiatement votre mot de passe et déconnectez cet appareil.`;\n break;\n }\n }\n\n const html = `\n <!DOCTYPE html>\n <html>\n <head>\n <meta charset=\"utf-8\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n </head>\n <body style=\"margin:0; padding:0; background-color:#090d16; font-family:'Segoe UI', Roboto, Helvetica, Arial, sans-serif; color:#f8fafc;\">\n <div style=\"max-width:560px; margin:40px auto; background:#111827; border:1px solid #1f293d; border-radius:16px; overflow:hidden; box-shadow:0 20px 25px -5px rgba(0,0,0,0.5);\">\n \n \n <div style=\"background:linear-gradient(135deg, #1e1b4b 0%, #31104b 100%); padding:32px 24px; text-align:center; border-bottom:1px solid #2e1065;\">\n <img src=\"https://upload.fs.fr/azq3C6GLea.png\" alt=\"mAI Logo\" style=\"height:48px; width:auto; max-width:180px; object-fit:contain; display:inline-block;\" />\n <h1 style=\"color:#ffffff; font-size:20px; font-weight:700; margin:16px 0 0 0; letter-spacing:-0.5px;\">${title}</h1>\n </div>\n\n \n <div style=\"padding:32px 28px; line-height:1.6; font-size:15px; color:#cbd5e1;\">\n <p style=\"margin-top:0;\">Bonjour,</p>\n <p>${textContent}</p>\n \n ${\n showCode\n ? `\n \n <div style=\"background:#1e293b; border:1px solid #334155; border-radius:12px; padding:24px; text-align:center; margin:28px 0;\">\n <div style=\"font-size:34px; font-weight:800; letter-spacing:8px; color:#a855f7; font-family:Consolas, Monaco, monospace; margin-bottom:12px; user-select:all;\">\n ${escapeHtml(code)}\n </div>\n <p style=\"font-size:12px; color:#94a3b8; margin:0;\">Code unique • Expire dans 10 minutes</p>\n </div>\n `\n : \"\"\n }\n\n <p style=\"font-size:13px; color:#94a3b8; margin-top:28px;\">Si vous n'êtes pas à l'origine de cette demande, vous pouvez l'ignorer ou sécuriser votre compte.</p>\n </div>\n\n \n <div style=\"background-color:#0b0f19; padding:20px 24px; text-align:center; border-top:1px solid #1e293b; font-size:12px; color:#64748b;\">\n <p style=\"margin:0 0 6px 0;\">© 2026 mAI — Plateforme d'Intelligence Artificielle & APIs</p>\n <p style=\"margin:0;\">Cet e-mail automatique a été envoyé de manière sécurisée.</p>\n </div>\n\n </div>\n </body>\n </html>\n `;\n\n await sendHtmlEmail(email, subject, html);\n}\n\n// ─────────────────────────────────────────────\n// Envoi d'e-mail générique avec fallback\n// ─────────────────────────────────────────────\nexport async function sendHtmlEmail(\n to: string,\n subject: string,\n html: string,\n): Promise<boolean> {\n // 1. Google Apps Script (Recommandé)\n const googleScriptsUrl = getEnv(\"GOOGLE_SCRIPTS_URL\") ||\n getEnv(\"GOOGLE_SCRIPT_URL\");\n const googleScriptSecret = getEnv(\"GOOGLE_SCRIPTS_SECRET\") ||\n getEnv(\"GOOGLE_SCRIPT_SECRET\");\n\n if (googleScriptsUrl && googleScriptSecret) {\n try {\n const res = await fetch(googleScriptsUrl, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n secret: googleScriptSecret,\n to,\n subject,\n htmlBody: html,\n body: \"Veuillez activer l'affichage HTML pour lire cet e-mail mAI.\",\n }),\n });\n\n if (res.ok) {\n const data = await res.json();\n if (data.success) {\n const maskedTo = to.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Google Apps Script OK to=${maskedTo}`);\n return true;\n } else {\n console.error(\"Erreur de retour Google Apps Script :\", data.error);\n }\n } else {\n console.error(\n \"Erreur HTTP Google Apps Script :\",\n res.status,\n res.statusText,\n );\n }\n } catch (err: any) {\n console.error(\n \"Erreur envoi via Google Apps Script :\",\n err?.message || err,\n );\n }\n }\n\n // 2. Fallback Gmail SMTP via Nodemailer\n const gmailUser = getEnv(\"GMAIL_USER\") || \"tusseaumathias85@gmail.com\";\n const gmailAppPass = getEnv(\"GMAIL_APP_PASSWORD\");\n\n if (gmailUser && gmailAppPass) {\n try {\n const transporter = nodemailer.createTransport({\n auth: {\n pass: gmailAppPass,\n user: gmailUser,\n },\n service: \"gmail\",\n });\n\n await transporter.sendMail({\n from: `\"mAI Support\" <${gmailUser}>`,\n html,\n subject,\n to,\n });\n\n const maskedTo = to.replace(/(.{2}).*(@.*)/, \"$1***$2\");\n console.log(`[EMAIL] Gmail SMTP OK to=${maskedTo}`);\n return true;\n } catch (err: any) {\n console.error(\"Erreur envoi Gmail SMTP :\", err?.message || err);\n }\n } else {\n console.warn(\n \"[EMAIL] Ni Google Apps Script ni Gmail SMTP configurés pour l'envoi.\",\n );\n }\n\n return false;\n}\n\n// ─────────────────────────────────────────────\n// Notifications pour le Support & Signalement de bugs\n// ─────────────────────────────────────────────\nexport interface SupportTicketEmailPayload {\n id: string;\n ticket_number?: number | string;\n user_id: string;\n user_email: string;\n user_name: string;\n user_tier?: string;\n title: string;\n description: string;\n category: string;\n project: string;\n priority: string;\n status?: string;\n created_at?: string;\n isAiGenerated?: boolean;\n}\n\nconst PRIORITY_COLORS: Record<\n string,\n { label: string; bg: string; text: string; border: string }\n> = {\n urgent: {\n label: \"Critique / Urgent\",\n bg: \"rgba(239, 68, 68, 0.15)\",\n text: \"#ef4444\",\n border: \"rgba(239, 68, 68, 0.4)\",\n },\n high: {\n label: \"Haute\",\n bg: \"rgba(249, 115, 22, 0.15)\",\n text: \"#f97316\",\n border: \"rgba(249, 115, 22, 0.4)\",\n },\n medium: {\n label: \"Normale\",\n bg: \"rgba(16, 185, 129, 0.15)\",\n text: \"#10b981\",\n border: \"rgba(16, 185, 129, 0.4)\",\n },\n low: {\n label: \"Faible\",\n bg: \"rgba(59, 130, 246, 0.15)\",\n text: \"#3b82f6\",\n border: \"rgba(59, 130, 246, 0.4)\",\n },\n};\n\n/**\n * Envoie un e-mail à mathias.tss2012@gmail.com pour lui présenter le nouveau ticket créé.\n */\nexport async function sendSupportTicketCreatedEmail({\n ticket,\n appUrl = \"https://m-ai.fr\",\n}: {\n ticket: SupportTicketEmailPayload;\n appUrl?: string;\n}) {\n const adminEmail = \"mathias.tss2012@gmail.com\";\n const ticketRef = ticket.ticket_number\n ? `#TICK-${ticket.ticket_number}`\n : `#${ticket.id.slice(0, 8)}`;\n const subject = `[Support mAI] Nouveau ticket ${ticketRef} : ${ticket.title}`;\n\n const priorityInfo = PRIORITY_COLORS[ticket.priority.toLowerCase()] ||\n PRIORITY_COLORS.medium;\n const directLink = `${\n appUrl.replace(/\\/$/, \"\")\n }/support/tickets/${ticket.id}`;\n const safeDescription = escapeHtml(ticket.description).replace(/\\n/g, \"<br>\");\n\n const html = `\n <!DOCTYPE html>\n <html lang=\"fr\">\n <head>\n <meta charset=\"utf-8\">\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\">\n <title>${escapeHtml(subject)}\n \n \n

\n \n \n

\n $\"mAI$ \n

Nouveau ticket de support

RÉFÉRENCE : ${ticketRef}

\n\n \n

Un utilisateur vient de soumettre un nouveau ticket sur la plateforme mAI.

\n \n \n

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n

Demandeur :	\n ${escapeHtml(ticket.user_name)} \n (${\n escapeHtml(ticket.user_email)\n })\n ${\n ticket.user_tier\n ? `${\n escapeHtml(ticket.user_tier)\n }`\n : \"\"\n }\n
Projet :	${\n escapeHtml(ticket.project)\n }
Section :	${\n escapeHtml(ticket.category)\n }
Priorité :	\n \n ${priorityInfo.label}\n \n

\n\n \n

Objet de la demande :

${\n escapeHtml(ticket.title)\n }

\n ${safeDescription}\n

\n\n \n

\n \n → Répondre au ticket #${\n ticket.ticket_number || ticket.id.slice(0, 6)\n }\n \n

\n\n

\n Vous pouvez également écrire directement au demandeur : \n \n ${escapeHtml(ticket.user_email)}\n \n

\n\n \n

Cet e-mail automatique est destiné à l'administration du support mAI.

\n\n

\n \n \n `;\n\n return await sendHtmlEmail(adminEmail, subject, html);\n}\n\n/**\n * Envoie une notification par e-mail à l'utilisateur (ou à l'admin) lors d'une action ou d'une réponse.\n */\nexport async function sendSupportTicketUpdateEmail({\n ticket,\n recipientEmail,\n recipientName,\n message,\n newStatus,\n authorRole,\n appUrl = \"https://m-ai.fr\",\n isAiGenerated,\n}: {\n ticket: SupportTicketEmailPayload;\n recipientEmail: string;\n recipientName: string;\n message: string;\n newStatus?: string;\n authorRole: \"admin\" | \"user\" | \"system\";\n appUrl?: string;\n isAiGenerated?: boolean;\n}) {\n const ticketRef = ticket.ticket_number\n ? `#TICK-${ticket.ticket_number}`\n : `#${ticket.id.slice(0, 8)}`;\n const isFromAdmin = authorRole === \"admin\";\n const subject = isFromAdmin\n ? `[Support mAI] Réponse à votre ticket ${ticketRef} : ${ticket.title}`\n : `[Support mAI] Nouveau message sur le ticket ${ticketRef}`;\n\n const directLink = `${\n appUrl.replace(/\\/$/, \"\")\n }/support/tickets/${ticket.id}`;\n const safeMessage = escapeHtml(message).replace(/\\n/g, \"
\");\n\n const html = `\n \n \n \n \n \n ${escapeHtml(subject)}\n \n \n

\n \n \n

\n $\"mAI$ \n

\n ${isFromAdmin ? \"Réponse de l'Équipe Support\" : \"Nouveau message\"}\n

TICKET ${ticketRef} • ${\n escapeHtml(ticket.title)\n }

\n\n \n

Bonjour ${\n escapeHtml(recipientName)\n },

\n \n

\n ${\n isFromAdmin\n ? \"Un membre de l'équipe technique de mAI a répondu à votre demande :\"\n : \"Un nouveau message a été posté sur le ticket :\"\n }\n

\n \n \n

\n ${safeMessage}\n

\n\n ${\n isAiGenerated || ticket.isAiGenerated\n ? `\n

\n IA\n Contenu créé avec l'assistance de l'IA — ce message a été généré avec l'aide de l'IA et relu par l'équipe mAI.\n

\n `\n : \"\"\n }\n\n ${\n newStatus\n ? `\n

\n Mise à jour de statut : Le ticket est désormais noté comme ${\n escapeHtml(newStatus)\n }.\n

\n `\n : \"\"\n }\n\n \n

\n \n Voir le fil de discussion et répondre\n \n

\n\n

\n Vous pouvez à tout moment suivre l'état de l'ensemble de vos demandes sur votre \n Espace Support mAI.\n

\n\n \n

mDevsLabs • Solutions d'Intelligence Artificielle Souveraines

\n\n

\n \n \n `;\n\n return await sendHtmlEmail(recipientEmail, subject, html);\n}",[132],"af695e83-f648-44f3-bd53-f7a6fbe86e93",108,["D",1787754938926],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport type { Hono } from \"npm:hono@4\";\nimport { extractToken, getDb, parseUserAgent } from \"./config.ts\";\n\nexport function registerDeviceRoutes(app: Hono) {\n // GET /v1/devices\n app.get(\"/v1/devices\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const existing =\n await sql`SELECT id FROM connected_devices WHERE token = ${token}`;\n if (existing.length === 0) {\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${userId}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (err) {\n console.error(\"Auto-insert device error:\", err);\n }\n } else {\n try {\n await sql`UPDATE connected_devices SET last_active = NOW() WHERE token = ${token}`;\n } catch (_err) {}\n }\n\n const rawDevices = await sql`\n SELECT id, token, os, device_model, device_version, ip_address, device_name, last_active, created_at \n FROM connected_devices \n WHERE user_id = ${userId}::text \n ORDER BY last_active DESC\n `;\n\n const devices = rawDevices.map((d: any) => ({\n created_at: d.created_at,\n device_model: d.device_model,\n device_name: d.device_name,\n device_version: d.device_version || \"\",\n id: d.id,\n ip_address: d.ip_address,\n is_current: d.token === token,\n last_active: d.last_active,\n os: d.os,\n }));\n\n return c.json({ devices, success: true });\n });\n\n // DELETE /v1/devices/others\n app.delete(\"/v1/devices/others\", async (c) => {\n const userId = c.get(\"userId\");\n const token = extractToken(c.req.raw);\n const sql = getDb();\n\n const otherDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n for (const row of otherDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text AND token != ${token}\n `;\n\n return c.json({\n message: \"Tous les autres appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // DELETE /v1/devices/all\n app.delete(\"/v1/devices/all\", async (c) => {\n const userId = c.get(\"userId\");\n const sql = getDb();\n\n const allDevices = await sql`\n SELECT token FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n for (const row of allDevices) {\n if (row.token) {\n try {\n await sqlite.execute({\n args: [row.token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch (_e) {}\n }\n }\n\n await sql`\n DELETE FROM connected_devices \n WHERE user_id = ${userId}::text\n `;\n\n return c.json({\n message: \"Tous les appareils ont été déconnectés.\",\n success: true,\n });\n });\n\n // PUT /v1/devices/:id\n app.put(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const { device_name } = await c.req.json();\n const sql = getDb();\n await sql`UPDATE connected_devices SET device_name = ${device_name} WHERE id = ${deviceId} AND user_id = ${userId}::text`;\n return c.json({ success: true });\n });\n\n // DELETE /v1/devices/:id\n app.delete(\"/v1/devices/:id\", async (c) => {\n const userId = c.get(\"userId\");\n const deviceId = c.req.param(\"id\");\n const sql = getDb();\n\n const devices =\n await sql`SELECT token FROM connected_devices WHERE id = ${deviceId} AND user_id = ${userId}::text LIMIT 1`;\n if (devices.length > 0) {\n const token = devices[0].token;\n if (token) {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n }\n await sql`DELETE FROM connected_devices WHERE id = ${deviceId}`;\n }\n return c.json({ success: true });\n });\n}",[148],"c525f4f7-c89d-42a4-92c2-60d867a7e18a",["D",1788618643754],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { neon } from \"npm:@neondatabase/serverless\";\nimport { jwtVerify, SignJWT } from \"npm:jose\";\n\n// ─────────────────────────────────────────────\n// Config & Données\n// ─────────────────────────────────────────────\nexport const JWT_EXPIRY = \"7d\";\nexport const BCRYPT_ROUNDS = 12;\n\n// ─────────────────────────────────────────────\n// Rate limiting en mémoire (par clé : ip ou user)\n// ─────────────────────────────────────────────\nconst rateBuckets = new Map();\n\nexport function rateLimit(\n key: string,\n limit: number,\n windowMs: number,\n): boolean {\n const now = Date.now();\n const bucket = rateBuckets.get(key);\n if (!bucket || now > bucket.resetAt) {\n rateBuckets.set(key, { count: 1, resetAt: now + windowMs });\n return true;\n }\n if (bucket.count >= limit) return false;\n bucket.count += 1;\n return true;\n}\n\nexport function clientIp(c: any): string {\n return (\n c.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n c.req.header(\"x-real-ip\") ||\n \"unknown\"\n );\n}\n\nexport type Tier = \"Free\" | \"Plus\" | \"Pro\" | \"Max\";\n\nconst TIER_ALIASES: Record = {\n free: \"Free\",\n gratuit: \"Free\",\n plus: \"Plus\",\n pro: \"Pro\",\n max: \"Max\",\n};\n\n/**\n * Normalise n'importe quelle représentation de forfait venant de la base, d'une clé API\n * ou d'un JWT (\"gratuit\", \" PRO \", \"max\") en tier canonique.\n * Une valeur vide ou inconnue retombe sur \"Free\", comme l'ancien `MAP[t] || MAP[\"Free\"]`.\n */\nexport function normalizeTier(tier?: string | null): Tier {\n return TIER_ALIASES[String(tier || \"\").trim().toLowerCase()] || \"Free\";\n}\n\nexport function isPaidTier(tier?: string | null): boolean {\n return normalizeTier(tier) !== \"Free\";\n}\n\n// Limites de tokens mAI hebdomadaires (Input + Output)\nexport const TIER_LIMITS: Record = {\n Free: 10_000_000,\n Plus: 20_000_000,\n Pro: 30_000_000,\n Max: 50_000_000,\n};\n\nexport function getTierMaiTokenLimit(tier?: string | null): number {\n return TIER_LIMITS[normalizeTier(tier)];\n}\n\n// Limites de tokens Speech hebdomadaires\nexport const TIER_SPEECH_LIMITS: Record = {\n Free: 30_000_000,\n Plus: 75_000_000,\n Pro: 150_000_000,\n Max: 300_000_000,\n};\n\nexport function getTierSpeechLimit(tier?: string | null): number {\n return TIER_SPEECH_LIMITS[normalizeTier(tier)];\n}\n\n// Limites de requêtes API hebdomadaires (remise à zéro le lundi 00:00 UTC)\nexport const TIER_REQUEST_LIMITS: Record = {\n Free: 500,\n Plus: 1500,\n Pro: 3000,\n Max: 7500,\n};\n\nexport function getTierRequestLimit(tier?: string | null): number {\n return TIER_REQUEST_LIMITS[normalizeTier(tier)];\n}\n\n/**\n * Extrait le forfait (TIER_USER) encodé directement dans une clé API au format :\n * mai-TIER_USER-XXXXX-XXXXX (ex: mai-free-ABC12-defgh, mai-plus-..., mai-pro-..., mai-max-...)\n * Renvoie \"Free\", \"Plus\", \"Pro\", \"Max\" ou null si non présent.\n */\nexport function extractTierFromApiKey(\n apiKey: string | null | undefined,\n): \"Free\" | \"Plus\" | \"Pro\" | \"Max\" | null {\n if (!apiKey || typeof apiKey !== \"string\") return null;\n const match = apiKey.trim().match(/^mai-(free|plus|pro|max)-/i);\n if (!match) return null;\n const t = match[1].toLowerCase();\n if (t === \"free\") return \"Free\";\n if (t === \"plus\") return \"Plus\";\n if (t === \"pro\") return \"Pro\";\n if (t === \"max\") return \"Max\";\n return null;\n}\n\n/**\n * Calcule l'augmentation temporaire de quota active pour un utilisateur et un type de service.\n */\nexport async function getUserQuotaBoost(\n sql: any,\n userId: string | null | undefined,\n quotaType: \"mai\" | \"api\" | \"images\" | \"audio\",\n): Promise {\n if (!sql || !userId) return 0;\n try {\n const rows = await sql`\n SELECT COALESCE(SUM(boost_amount), 0) as total_boost\n FROM user_quota_boosts\n WHERE (\n user_id = 'all'\n OR user_id = ${userId}::text\n OR user_id IN (\n SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text\n )\n OR user_id IN (\n SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text\n )\n OR user_id IN (\n SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text\n )\n )\n AND quota_type = ${quotaType}\n AND is_active = TRUE\n AND starts_at <= NOW()\n AND expires_at >= NOW()\n `;\n return Number(rows[0]?.total_boost || 0);\n } catch {\n return 0;\n }\n}\n\n// Limites quotidiennes de génération d'images\nexport const TIER_DAILY_IMAGE_LIMITS: Record = {\n Free: 5,\n Plus: 10,\n Pro: 20,\n Max: 35,\n};\n\nexport function getTierDailyImageLimit(tier?: string | null): number {\n return TIER_DAILY_IMAGE_LIMITS[normalizeTier(tier)];\n}\n\n// Coût en requêtes API par image générée (multiplié par le nombre d'images demandées)\nexport const TIER_IMAGE_REQUEST_COST: Record = {\n Free: 100,\n Plus: 50,\n Pro: 25,\n Max: 10,\n};\n\nexport function getTierImageRequestCost(tier?: string | null): number {\n return TIER_IMAGE_REQUEST_COST[normalizeTier(tier)];\n}\n\n// Limites de stockage Cloud par tier (en octets)\nconst GIB = 1024 * 1024 * 1024;\n\nexport const STORAGE_LIMITS_BYTES: Record = {\n Free: 10 * GIB,\n Plus: 20 * GIB,\n Pro: 40 * GIB,\n Max: 60 * GIB,\n};\n\nexport function getTierStorageLimitBytes(tier?: string | null): number {\n return STORAGE_LIMITS_BYTES[normalizeTier(tier)];\n}\n\nexport function getDb() {\n const url = Deno.env.get(\"DATABASE_URL\");\n if (!url) {\n throw new Error(\"DATABASE_URL not set\");\n }\n return neon(url);\n}\n\nexport function getJwtSecret(): Uint8Array {\n const secret =\n (typeof Deno !== \"undefined\"\n ? Deno.env.get(\"MAI_JWT_SECRET\") || Deno.env.get(\"JWT_SECRET\")\n : null) ||\n \"mai_super_secret_jwt_key_2026_default_vibe\";\n return new TextEncoder().encode(secret);\n}\n\n// ─────────────────────────────────────────────\n// Helpers d'authentification & Utilitaires\n// ─────────────────────────────────────────────\nexport async function signToken(\n payload: Record,\n): Promise {\n return new SignJWT(payload)\n .setProtectedHeader({ alg: \"HS256\" })\n .setIssuedAt()\n .setExpirationTime(JWT_EXPIRY)\n .sign(getJwtSecret());\n}\n\nexport async function verifyToken(\n token: string,\n): Promise> {\n // Vérif SQLite (legacy Val Town)\n try {\n const sqliteResult = await sqlite.execute({\n args: [token],\n sql: \"SELECT 1 FROM token_blacklist WHERE token = ?\",\n });\n if (sqliteResult && sqliteResult.rows && sqliteResult.rows.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n } catch (e: any) {\n if (e?.message === \"Token révoqué.\") throw e;\n }\n\n // Vérif Postgres token_blacklist avec TTL 14j\n try {\n const sql = getDb();\n const pgResult =\n await sql`SELECT 1 FROM token_blacklist WHERE token = ${token} LIMIT 1`;\n if (pgResult && pgResult.length > 0) {\n throw new Error(\"Token révoqué.\");\n }\n } catch (e: any) {\n if (e?.message === \"Token révoqué.\") throw e;\n }\n\n const { payload } = await jwtVerify(token, getJwtSecret());\n return payload as Record;\n}\n\nexport async function blacklistToken(token: string) {\n const expiresAt = new Date(\n Date.now() + 14 * 24 * 60 * 60 * 1000,\n ).toISOString();\n try {\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n } catch {}\n try {\n const sql = getDb();\n await sql`INSERT INTO token_blacklist (token, revoked_at, expires_at) VALUES (${token}, NOW(), ${expiresAt}::timestamp) ON CONFLICT (token) DO NOTHING`;\n } catch {}\n // Nettoyage opportuniste des vieux tokens\n try {\n const sql = getDb();\n await sql`DELETE FROM token_blacklist WHERE expires_at < NOW() OR revoked_at < NOW() - INTERVAL '14 days'`;\n } catch {}\n try {\n await sqlite.execute({\n sql:\n \"DELETE FROM token_blacklist WHERE revoked_at < datetime('now', '-14 days')\",\n args: [],\n });\n } catch {}\n}\n\nexport function extractToken(req: Request): string | null {\n const auth = req.headers.get(\"Authorization\");\n if (!auth?.startsWith(\"Bearer \")) {\n return null;\n }\n return auth.slice(7);\n}\n\nexport function parseUserAgent(ua: string) {\n const uaLower = ua.toLowerCase();\n let os = \"linux\";\n let osVersion = \"Linux\";\n\n if (uaLower.includes(\"iphone\")) {\n os = \"apple\";\n osVersion = \"iPhone (iOS)\";\n } else if (uaLower.includes(\"ipad\")) {\n os = \"apple\";\n osVersion = \"iPad (iPadOS)\";\n } else if (uaLower.includes(\"mac os\") || uaLower.includes(\"macintosh\")) {\n os = \"apple\";\n osVersion = \"macOS\";\n } else if (\n uaLower.includes(\"windows nt 10.0\") ||\n uaLower.includes(\"windows 11\") ||\n uaLower.includes(\"windows 10\")\n ) {\n os = \"microsoft\";\n osVersion = \"Windows 10/11\";\n } else if (uaLower.includes(\"win\")) {\n os = \"microsoft\";\n osVersion = \"Windows\";\n } else if (uaLower.includes(\"android\")) {\n os = \"google\";\n osVersion = \"Android\";\n } else if (uaLower.includes(\"ubuntu\")) {\n os = \"linux\";\n osVersion = \"Ubuntu Linux\";\n } else if (uaLower.includes(\"debian\")) {\n os = \"linux\";\n osVersion = \"Debian Linux\";\n } else if (uaLower.includes(\"fedora\")) {\n os = \"linux\";\n osVersion = \"Fedora Linux\";\n }\n\n let model = \"Navigateur Web\";\n let version = \"\";\n\n if (uaLower.includes(\"mai-cli\") || uaLower.includes(\"mai cli\")) {\n model = \"mAI CLI\";\n version = \"Terminal\";\n } else if (uaLower.includes(\"pulse-extension\") || uaLower.includes(\"pulse\")) {\n model = \"Pulse Extension\";\n version = \"Extension\";\n } else if (uaLower.includes(\"edg/\")) {\n model = \"Microsoft Edge\";\n const match = ua.match(/Edg\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"opr/\") || uaLower.includes(\"opera/\")) {\n model = \"Opera\";\n const match = ua.match(/(?:OPR|Opera)\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"chrome/\")) {\n model = \"Google Chrome\";\n const match = ua.match(/Chrome\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"firefox/\")) {\n model = \"Mozilla Firefox\";\n const match = ua.match(/Firefox\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n } else if (uaLower.includes(\"safari/\") && !uaLower.includes(\"chrome\")) {\n model = \"Apple Safari\";\n const match = ua.match(/Version\\/([0-9.]+)/i);\n if (match) {\n version = `v${match[1].split(\".\")[0]}`;\n }\n }\n\n const fullVersion = version ? `${osVersion} • ${version}` : osVersion;\n const osLabel = os === \"apple\"\n ? \"Apple\"\n : os === \"microsoft\"\n ? \"Windows\"\n : os === \"google\"\n ? \"Google\"\n : \"Linux\";\n const deviceName = `${model} (${osLabel})`;\n\n return {\n device_model: model,\n device_name: deviceName,\n device_version: fullVersion,\n os,\n };\n}\n\nexport function getWeekData() {\n const now = new Date();\n const day = now.getUTCDay() || 7;\n\n const weekStart = new Date(now);\n weekStart.setUTCDate(now.getUTCDate() - (day - 1));\n weekStart.setUTCHours(0, 0, 0, 0);\n\n const nextReset = new Date(weekStart);\n nextReset.setUTCDate(weekStart.getUTCDate() + 7);\n\n return {\n nextResetIso: nextReset.toISOString(),\n weekStartStr: weekStart.toISOString().split(\"T\")[0],\n };\n}\n\n// ─────────────────────────────────────────────\n// E-mails & Vérification (SQLite)\n// ─────────────────────────────────────────────\nexport async function initSQLite() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS verification_codes (\n email TEXT,\n code TEXT,\n action TEXT,\n expires_at DATETIME,\n PRIMARY KEY (email, action)\n );\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS token_blacklist (\n token TEXT PRIMARY KEY,\n revoked_at DATETIME DEFAULT CURRENT_TIMESTAMP\n );\n `);\n}\n\nexport async function generateVerificationCode(\n email: string,\n action: string,\n): Promise {\n const isDeletion = action === \"delete_account\";\n const length = isDeletion ? 8 : 6;\n const min = 10 ** (length - 1);\n const max = 10 ** length - 1;\n // Crypto PRNG (corrige Math.random prévisible)\n const range = max - min;\n const randomValue = crypto.getRandomValues(new Uint32Array(1))[0] /\n 0xff_ff_ff_ff;\n const code = Math.floor(min + randomValue * range)\n .toString()\n .padStart(length, \"0\");\n const expiresAt = new Date(Date.now() + 10 * 60_000).toISOString(); // 10 minutes\n\n await sqlite.execute({\n args: [email, code, action, expiresAt],\n sql:\n \"INSERT OR REPLACE INTO verification_codes (email, code, action, expires_at) VALUES (?, ?, ?, ?)\",\n });\n\n return code;\n}\n\nexport async function verifyVerificationCode(\n email: string,\n code: string,\n action: string,\n): Promise {\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT code, expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const storedCode = result.rows[0][0] as string;\n const expiresAt = new Date(result.rows[0][1] as string);\n\n if (expiresAt < new Date()) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return false;\n }\n\n if (storedCode === code) {\n await sqlite.execute({\n args: [email, action],\n sql: \"DELETE FROM verification_codes WHERE email = ? AND action = ?\",\n });\n return true;\n }\n\n return false;\n}\n\nexport { sqlite };",[164],"d2b2ab48-9008-4015-8343-21a5aa3e4587",316,["D",1789229716185],15,"import bcrypt from \"npm:bcryptjs\";\nimport type { Hono } from \"npm:hono@4\";\nimport {\n BCRYPT_ROUNDS,\n clientIp,\n extractToken,\n generateVerificationCode,\n getDb,\n parseUserAgent,\n rateLimit,\n signToken,\n sqlite,\n verifyToken,\n verifyVerificationCode,\n} from \"./config.ts\";\nimport { sendVerificationEmail } from \"./email.ts\";\nimport { createRegisterMulti } from \"./vibe-common.ts\";\n\nexport function registerAuthRoutes(app: Hono) {\n const registerMulti = createRegisterMulti(app);\n\n // GET /register info endpoint (évite 404 lors des tests au navigateur)\n registerMulti(\"get\", [\n \"/register\",\n \"/v1/register\",\n \"/api/register\",\n \"/api/vibe/register\",\n ], (c) => {\n return c.json({\n service: \"mAI Vibe Auth\",\n endpoint: \"/register\",\n method: \"POST\",\n description:\n \"Pour créer un compte, envoyez une requête HTTP POST avec { email, username, password } en JSON.\",\n });\n });\n\n // POST /register\n registerMulti(\"post\", [\n \"/register\",\n \"/v1/register\",\n \"/api/register\",\n \"/api/vibe/register\",\n ], async (c) => {\n try {\n // Anti-abus : 5 inscriptions / IP / 15 min\n if (!rateLimit(`register:${clientIp(c)}`, 5, 15 * 60_000)) {\n return c.json(\n { error: \"Trop de tentatives. Réessayez plus tard.\" },\n 429,\n );\n }\n const { email, username, password } = await c.req.json();\n if (!email || !username || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const cleanEmail = String(email).trim().toLowerCase();\n const cleanUsername = String(username).trim().toLowerCase().replace(\n /^@/,\n \"\",\n );\n if (!/^[a-z0-9_]{2,30}$/.test(cleanUsername)) {\n return c.json(\n {\n error:\n \"Le nom d'utilisateur doit comporter entre 2 et 30 caractères (lettres minuscules, chiffres, _).\",\n },\n 400,\n );\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE LOWER(email) = ${cleanEmail} OR LOWER(username) = ${cleanUsername} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const code = await generateVerificationCode(cleanEmail, \"register\");\n await sendVerificationEmail(cleanEmail, code, \"register\");\n\n return c.json({\n email: cleanEmail,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Register Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-register\n registerMulti(\"post\", [\n \"/verify-register\",\n \"/v1/verify-register\",\n \"/api/verify-register\",\n \"/api/vibe/verify-register\",\n ], async (c) => {\n try {\n const { email, username, password, code } = await c.req.json();\n if (!email || !username || !password || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const cleanEmail = String(email).trim().toLowerCase();\n const cleanUsername = String(username).trim().toLowerCase().replace(\n /^@/,\n \"\",\n );\n if (!/^[a-z0-9_]{2,30}$/.test(cleanUsername)) {\n return c.json(\n {\n error:\n \"Le nom d'utilisateur doit comporter entre 2 et 30 caractères (lettres minuscules, chiffres, _).\",\n },\n 400,\n );\n }\n\n const isValid = await verifyVerificationCode(\n cleanEmail,\n code,\n \"register\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n const existing =\n await sql`SELECT id FROM users WHERE LOWER(email) = ${cleanEmail} OR LOWER(username) = ${cleanUsername} LIMIT 1`;\n if (existing.length > 0) {\n return c.json({ error: \"Email ou nom d'utilisateur déjà pris.\" }, 400);\n }\n\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n\n const result = await sql`\n INSERT INTO users (email, username, password_hash, tier)\n VALUES (${cleanEmail}, ${cleanUsername}, ${hash}, 'Free')\n RETURNING id, tier\n `;\n\n const user = result[0];\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n const ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n \"Inconnue\";\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Register Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /login info endpoint (évite 404 lors des tests au navigateur)\n registerMulti(\n \"get\",\n [\"/login\", \"/v1/login\", \"/api/login\", \"/api/vibe/login\"],\n (c) => {\n return c.json({\n service: \"mAI Vibe Auth\",\n endpoint: \"/login\",\n method: \"POST\",\n description:\n \"Pour vous connecter, envoyez une requête HTTP POST avec { identifier, password } en JSON.\",\n });\n },\n );\n\n // POST /login\n registerMulti(\"post\", [\n \"/login\",\n \"/v1/login\",\n \"/api/login\",\n \"/api/vibe/login\",\n ], async (c) => {\n let body;\n try {\n body = await c.req.json();\n } catch (err: any) {\n return c.json({\n error:\n \"Requête JSON invalide (vérifiez les guillemets double de votre payload).\",\n }, 400);\n }\n try {\n // Anti brute-force : 10 tentatives / IP / 5 min\n if (!rateLimit(`login:${clientIp(c)}`, 10, 5 * 60_000)) {\n return c.json(\n { error: \"Trop de tentatives. Réessayez plus tard.\" },\n 429,\n );\n }\n const { email, password, identifier } = body;\n const loginId = (identifier || email || \"\").trim();\n if (!loginId || !password) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const cleanId = loginId.toLowerCase();\n const cleanUser = cleanId.replace(/^@/, \"\");\n\n const sql = getDb();\n const users = await sql`\n SELECT id, email, username, password_hash, tier, is_blocked \n FROM users \n WHERE LOWER(email) = ${cleanId} \n OR LOWER(username) = ${cleanUser} \n OR phone = ${loginId} \n LIMIT 1\n `;\n if (users.length === 0) {\n return c.json({\n error:\n \"Aucun compte n'a été trouvé avec cet identifiant ou cet e-mail. Avez-vous créé votre compte ?\",\n accountNotFound: true,\n }, 401);\n }\n\n const user = users[0];\n const match = await bcrypt.compare(password, user.password_hash);\n if (!match) {\n return c.json({\n error:\n \"Mot de passe incorrect pour ce compte. Veuillez vérifier votre saisie.\",\n invalidPassword: true,\n }, 401);\n }\n\n // Compte bloqué par un administrateur : refus explicite (403)\n if (user.is_blocked) {\n return c.json(\n {\n error:\n \"Votre compte a été bloqué par un administrateur. Contactez le support pour demander sa réactivation.\",\n blocked: true,\n },\n 403,\n );\n }\n\n // Paramètre administrateur : ce compte exige-t-il un code de vérification à chaque connexion ?\n // (colonne users.require_login_verification — script SQL tmp/016_require_login_verification.sql ;\n // défaut TRUE si la colonne est absente ou NULL)\n let requiresOtp = true;\n try {\n const flags = await sql`\n SELECT COALESCE(require_login_verification, TRUE) AS flag\n FROM users\n WHERE id = ${user.id}\n LIMIT 1\n `;\n requiresOtp = flags[0]?.flag !== false;\n } catch {\n // Colonne non migrée : comportement par défaut conservé (code exigé)\n }\n\n if (!requiresOtp) {\n // Connexion directe sans code de vérification (paramètre désactivé par un administrateur)\n const token = await signToken({ sub: user.id, tier: user.tier });\n return c.json({ success: true, tier: user.tier, token });\n }\n\n const code = await generateVerificationCode(user.email, \"login\");\n await sendVerificationEmail(user.email, code, \"login\");\n\n return c.json({\n email: user.email,\n status: \"verification_required\",\n success: true,\n });\n } catch (err: any) {\n console.error(\"Login Error:\", err?.message || err, err?.stack);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-login\n registerMulti(\"post\", [\n \"/verify-login\",\n \"/v1/verify-login\",\n \"/api/verify-login\",\n \"/api/vibe/verify-login\",\n ], async (c) => {\n let body;\n try {\n body = await c.req.json();\n } catch (err: any) {\n return c.json({\n error:\n \"Requête JSON invalide (vérifiez les guillemets de votre payload).\",\n }, 400);\n }\n\n try {\n const { email, code, identifier } = body;\n const loginId = (email || identifier || \"\").trim();\n if (!loginId || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const cleanId = loginId.toLowerCase();\n const cleanUser = cleanId.replace(/^@/, \"\");\n\n const sql = getDb();\n const users = await sql`\n SELECT id, tier, is_blocked, email, username \n FROM users \n WHERE LOWER(email) = ${cleanId} \n OR LOWER(username) = ${cleanUser} \n LIMIT 1\n `;\n if (users.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const user = users[0];\n\n const isValid = await verifyVerificationCode(user.email, code, \"login\");\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // Compte bloqué par un administrateur : refus explicite (403)\n if (user.is_blocked) {\n return c.json(\n {\n error:\n \"Votre compte a été bloqué par un administrateur. Contactez le support pour demander sa réactivation.\",\n blocked: true,\n },\n 403,\n );\n }\n\n const token = await signToken({ sub: user.id, tier: user.tier });\n\n const userAgent = c.req.header(\"user-agent\") || \"\";\n // Pour les tests en dev, on utilise une IP par défaut\n let ip = c.req.header(\"cf-connecting-ip\") ||\n c.req.header(\"x-forwarded-for\") ||\n c.req.header(\"x-real-ip\") ||\n \"\";\n if (!ip || ip === \"::1\" || ip === \"127.0.0.1\") {\n ip = \"8.8.8.8\"; // IP Google par défaut pour ne pas planter l'API\n } else {\n // Extraire la première IP si on a une liste\n ip = ip.split(\",\")[0].trim();\n }\n const { os, device_model, device_version, device_name } = parseUserAgent(\n userAgent,\n );\n\n let locationStr = \"Lieu inconnu\";\n let countryStr = \"Pays inconnu\";\n try {\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 3000);\n const geoRes = await fetch(`https://ip-api.com/json/${ip}`, {\n headers: { \"User-Agent\": \"mAI/1.0\" },\n signal: controller.signal,\n });\n clearTimeout(timeout);\n if (geoRes.ok) {\n const geoData = await geoRes.json();\n if (geoData.status === \"success\") {\n locationStr = `${geoData.city}, ${geoData.country}`;\n countryStr = geoData.country;\n }\n }\n } catch (e) {\n console.error(\"Erreur de géolocalisation:\", e);\n }\n\n // Vérifier si c'est un nouvel appareil ou un nouveau pays\n let isNewDeviceOrLocation = true;\n try {\n const pastDevices = await sql`\n SELECT device_name, location FROM connected_devices \n WHERE user_id = ${user.id}::text\n `;\n if (pastDevices.length > 0) {\n // C'est pas sa toute première connexion\n const knownDevice = pastDevices.some(\n (d) => d.device_name === device_name,\n );\n const knownLocation = pastDevices.some(\n (d) => d.location && d.location.includes(countryStr),\n );\n if (knownDevice && knownLocation) {\n isNewDeviceOrLocation = false;\n }\n } else {\n // Première connexion jamais (donc nouvelle par defaut, ou pas besoin d'alerte? on envoie quand meme)\n isNewDeviceOrLocation = true;\n }\n } catch (e) {\n console.error(e);\n }\n\n try {\n await sql`\n INSERT INTO connected_devices (user_id, token, os, device_model, device_version, ip_address, device_name, location)\n VALUES (${user.id}::text, ${token}, ${os}, ${device_model}, ${device_version}, ${ip}, ${device_name}, ${locationStr})\n `;\n } catch (dbErr) {\n console.error(\"Erreur insertion device:\", dbErr);\n }\n\n if (isNewDeviceOrLocation) {\n // On n'attend pas l'envoi de l'email\n sendVerificationEmail(email, \"\", \"new_login\", {\n device: device_name,\n location: locationStr,\n }).catch(console.error);\n }\n\n return c.json({ success: true, tier: user.tier, token });\n } catch (err: any) {\n console.error(\"Verify Login Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /resend-code\n registerMulti(\"post\", [\n \"/resend-code\",\n \"/v1/resend-code\",\n \"/api/resend-code\",\n \"/api/vibe/resend-code\",\n ], async (c) => {\n try {\n const { email, action } = await c.req.json();\n if (!email || !action) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n // Vérifier le rate-limit (1 minute)\n const result = await sqlite.execute({\n args: [email, action],\n sql:\n \"SELECT expires_at FROM verification_codes WHERE email = ? AND action = ?\",\n });\n\n if (result.rows.length > 0) {\n const expiresAt = new Date(result.rows[0][0] as string);\n const now = new Date();\n // Si la date d'expiration est > maintenant + 9 minutes, ça veut dire qu'il a été généré il y a moins d'1 minute.\n const diffMinutes = (expiresAt.getTime() - now.getTime()) / 60_000;\n if (diffMinutes > 9) {\n return c.json(\n { error: \"Veuillez patienter 1 minute avant de renvoyer un code.\" },\n 429,\n );\n }\n }\n\n const code = await generateVerificationCode(email, action);\n await sendVerificationEmail(email, code, action);\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"Resend Code Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /verify-code\n app.post(\"/verify-code\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = String(payload.sub);\n\n const body = await c.req.json();\n const rawCode = body?.code;\n if (!rawCode) {\n return c.json({ error: \"Code requis.\" }, 400);\n }\n\n const inputCode = String(rawCode).trim().toUpperCase();\n const sql = getDb();\n\n let newTier: string | null = null;\n let dbCodeId: number | null = null;\n\n // 1. Recherche dans la table subscription_codes de la base de données\n try {\n const codeRows = await sql`\n SELECT id, code, tier, max_uses, uses_count, is_active, expires_at \n FROM subscription_codes \n WHERE UPPER(code) = UPPER(${inputCode}) \n LIMIT 1\n `;\n\n if (codeRows.length > 0) {\n const row = codeRows[0];\n\n if (!row.is_active) {\n return c.json(\n { error: \"Ce code d'abonnement est désactivé.\" },\n 400,\n );\n }\n\n if (row.expires_at && new Date(row.expires_at) < new Date()) {\n return c.json({ error: \"Ce code d'abonnement a expiré.\" }, 400);\n }\n\n if (\n row.max_uses > 0 &&\n Number(row.uses_count) >= Number(row.max_uses)\n ) {\n return c.json(\n { error: \"Ce code a atteint son quota maximal d'utilisations.\" },\n 400,\n );\n }\n\n // Vérifier si l'utilisateur a déjà activé ce code spécifique\n try {\n const redemptions = await sql`\n SELECT id FROM subscription_code_redemptions \n WHERE code_id = ${row.id} AND user_id = ${userId}::text \n LIMIT 1\n `;\n if (redemptions.length > 0) {\n return c.json(\n {\n error: \"Vous avez déjà débloqué votre forfait avec ce code.\",\n },\n 400,\n );\n }\n } catch (_redErr) {\n // Ignorer si la table de redemptions n'est pas encore créée\n }\n\n newTier = row.tier;\n dbCodeId = row.id;\n }\n } catch (dbErr) {\n console.warn(\n \"Table subscription_codes non accessible, vérification fallback ENV:\",\n dbErr,\n );\n }\n\n // 2. Fallback vers les variables d'environnement si non trouvé en base\n if (!newTier) {\n const upgradeCodes: Record = {};\n\n const plusCode = Deno.env.get(\"MAI_PLUS_CODE\") ||\n Deno.env.get(\"PLUS_CODE\");\n if (plusCode) {\n upgradeCodes[plusCode.trim().toUpperCase()] = \"Plus\";\n }\n\n const proCode = Deno.env.get(\"MAI_PRO_CODE\") ||\n Deno.env.get(\"PRO_CODE\");\n if (proCode) {\n upgradeCodes[proCode.trim().toUpperCase()] = \"Pro\";\n }\n\n const maxCode = Deno.env.get(\"MAI_MAX_CODE\") ||\n Deno.env.get(\"MAX_CODE\");\n if (maxCode) {\n upgradeCodes[maxCode.trim().toUpperCase()] = \"Max\";\n }\n\n newTier = upgradeCodes[inputCode] || null;\n }\n\n if (!newTier) {\n console.log(`[Verify-Code] Code invalide soumis par user=${userId}`);\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // 3. Mise à jour de l'utilisateur et de ses clés API\n await sql`UPDATE users SET tier = ${newTier} WHERE id::text = ${userId}::text`;\n await sql`UPDATE mprojects_api_keys SET plan = ${newTier} WHERE user_id = ${userId}::text`;\n\n // 4. Incrémentation du compteur et log de l'utilisation en base\n if (dbCodeId) {\n try {\n await sql`\n UPDATE subscription_codes \n SET uses_count = uses_count + 1,\n is_active = CASE WHEN max_uses > 0 AND (uses_count + 1) >= max_uses THEN FALSE ELSE is_active END\n WHERE id = ${dbCodeId}\n `;\n await sql`\n INSERT INTO subscription_code_redemptions (code_id, user_id)\n VALUES (${dbCodeId}, ${userId}::text)\n `;\n } catch (updateErr) {\n console.error(\"Erreur mise à jour usage code:\", updateErr);\n }\n }\n\n // 5. Envoi d'un e-mail de remerciements pour la souscription\n try {\n const userRows =\n await sql`SELECT email, username FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (userRows.length > 0 && userRows[0].email) {\n await sendVerificationEmail(\n userRows[0].email,\n \"\",\n \"subscription_unlocked\",\n {\n tier: newTier,\n username: userRows[0].username,\n },\n );\n }\n } catch (mailErr) {\n console.error(\n \"Erreur envoi email remerciements souscription:\",\n mailErr,\n );\n }\n\n // 6. Nouveau token JWT avec le tier débloqué\n const newToken = await signToken({ sub: userId, tier: newTier });\n\n return c.json({\n message: `Merci d'avoir souscrit au forfait ${newTier} !`,\n success: true,\n tier: newTier,\n token: newToken,\n });\n } catch (err: any) {\n console.error(\"Verify-Code error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /update-profile\n app.post(\"/update-profile\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const body = await c.req.json();\n const {\n username,\n email,\n phone,\n password,\n currentPassword,\n newsletter,\n notify_limits,\n auto_logout_minutes,\n } = body;\n const sql = getDb();\n\n // Vérification obligatoire du mot de passe actuel\n if (!currentPassword) {\n return c.json(\n {\n error:\n \"Le mot de passe actuel est obligatoire pour modifier vos informations.\",\n },\n 400,\n );\n }\n\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n currentPassword,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Le mot de passe actuel est incorrect.\" }, 400);\n }\n\n if (username && username.trim()) {\n const cleanUsername = username.trim().toLowerCase().replace(/^@/, \"\");\n if (!/^[a-z0-9_]{2,30}$/.test(cleanUsername)) {\n return c.json(\n {\n error:\n \"Le nom d'utilisateur doit comporter entre 2 et 30 caractères (lettres minuscules, chiffres, _).\",\n },\n 400,\n );\n }\n const existing =\n await sql`SELECT id FROM users WHERE LOWER(username) = ${cleanUsername} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json({\n error: \"Ce nom d'utilisateur est déjà pris par un autre compte.\",\n }, 400);\n }\n await sql`UPDATE users SET username = ${cleanUsername} WHERE id::text = ${userId}::text`;\n }\n\n if (email && email.trim()) {\n const cleanEmail = email.trim();\n const existing =\n await sql`SELECT id FROM users WHERE email = ${cleanEmail} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n { error: \"Cette adresse e-mail est déjà utilisée.\" },\n 400,\n );\n }\n if (cleanEmail !== currentUser[0].email) {\n // Send OTP instead of updating directly\n const code = await generateVerificationCode(\n cleanEmail,\n \"verify_new_email\",\n );\n await sendVerificationEmail(cleanEmail, code, \"verify_new_email\");\n return c.json({\n email: cleanEmail,\n status: \"email_verification_required\",\n success: true,\n });\n }\n }\n\n if (phone !== undefined) {\n const cleanPhone = phone ? phone.trim() : null;\n if (cleanPhone) {\n const existing =\n await sql`SELECT id FROM users WHERE phone = ${cleanPhone} AND id::text != ${userId}::text LIMIT 1`;\n if (existing.length > 0) {\n return c.json(\n {\n error:\n \"Ce numéro de téléphone est déjà associé à un autre compte.\",\n },\n 400,\n );\n }\n }\n await sql`UPDATE users SET phone = ${cleanPhone} WHERE id::text = ${userId}::text`;\n }\n\n if (newsletter !== undefined) {\n await sql`UPDATE users SET newsletter = ${\n Boolean(newsletter)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (notify_limits !== undefined) {\n await sql`UPDATE users SET notify_limits = ${\n Boolean(notify_limits)\n } WHERE id::text = ${userId}::text`;\n }\n\n if (auto_logout_minutes !== undefined) {\n const mins = Number.parseInt(auto_logout_minutes, 10);\n if (!isNaN(mins)) {\n await sql`UPDATE users SET auto_logout_minutes = ${mins} WHERE id::text = ${userId}::text`;\n }\n }\n\n if (password && password.trim()) {\n if (password.length < 6) {\n return c.json(\n { error: \"Le mot de passe doit contenir au moins 6 caractères.\" },\n 400,\n );\n }\n const hash = await bcrypt.hash(password, BCRYPT_ROUNDS);\n await sql`UPDATE users SET password_hash = ${hash} WHERE id::text = ${userId}::text`;\n }\n\n const updatedUser =\n await sql`SELECT username, email, phone, tier, newsletter, notify_limits FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n const user = updatedUser[0];\n\n return c.json({\n email: user?.email,\n newsletter: user?.newsletter,\n notify_limits: user?.notify_limits,\n phone: user?.phone,\n success: true,\n tier: user?.tier,\n username: user?.username,\n });\n } catch {\n return c.json({ error: \"Erreur lors de la mise à jour du profil.\" }, 500);\n }\n });\n\n // POST /verify-new-email\n app.post(\"/verify-new-email\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { email, code } = await c.req.json();\n if (!email || !code) {\n return c.json({ error: \"Champs manquants.\" }, 400);\n }\n\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"verify_new_email\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n const sql = getDb();\n await sql`UPDATE users SET email = ${email.trim()} WHERE id::text = ${userId}::text`;\n\n return c.json({ email: email.trim(), success: true });\n } catch (err: any) {\n console.error(\"verify-new-email Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /request-delete-account\n app.post(\"/request-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const email = currentUser[0].email;\n const code = await generateVerificationCode(email, \"delete_account\");\n await sendVerificationEmail(email, code, \"delete_account\");\n\n return c.json({ email, success: true });\n } catch (err: any) {\n console.error(\"request-delete-account Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // POST /confirm-delete-account\n app.post(\"/confirm-delete-account\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n if (!token) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n const payload = await verifyToken(token);\n const userId = payload.sub as string;\n\n const { password, code, confirmationText } = await c.req.json();\n if (!password || !code || confirmationText !== \"SUPPRIMER LE COMPTE\") {\n return c.json(\n { error: \"Informations de confirmation invalides.\" },\n 400,\n );\n }\n\n const sql = getDb();\n const currentUser =\n await sql`SELECT email, password_hash FROM users WHERE id::text = ${userId}::text LIMIT 1`;\n if (!currentUser || currentUser.length === 0) {\n return c.json({ error: \"Utilisateur introuvable.\" }, 404);\n }\n\n const passMatch = await bcrypt.compare(\n password,\n currentUser[0].password_hash,\n );\n if (!passMatch) {\n return c.json({ error: \"Mot de passe incorrect.\" }, 400);\n }\n\n const email = currentUser[0].email;\n const isValid = await verifyVerificationCode(\n email,\n code,\n \"delete_account\",\n );\n if (!isValid) {\n return c.json({ error: \"Code invalide ou expiré.\" }, 400);\n }\n\n // Suppression (ou anonymisation)\n await sql`DELETE FROM users WHERE id::text = ${userId}::text`;\n\n // Révoquer le token pour déconnecter immédiatement\n await sqlite.execute({\n args: [token],\n sql: \"INSERT OR IGNORE INTO token_blacklist (token) VALUES (?)\",\n });\n\n return c.json({ success: true });\n } catch (err: any) {\n console.error(\"confirm-delete-account Error:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n\n // GET /api-keys\n app.get(\"/api-keys\", async (c) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n } catch {}\n }\n\n const sql = getDb();\n\n // Résolution du user_id réel via mprojects_api_keys si clé API transmise\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n }\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const [uRows, keyRows] = await Promise.all([\n sql`SELECT tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text OR email = ${userId}::text LIMIT 1`,\n sql`\n SELECT k.*, u.tier as user_tier\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE (\n k.user_id = ${userId}::text \n OR k.user_id IN (SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR k.user_id IN (SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR k.user_id IN (SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n )\n ORDER BY k.created_at DESC\n `.catch(() => []),\n ]);\n\n const userTier = uRows[0]?.tier || \"Free\";\n const validTiers = [\"free\", \"plus\", \"pro\", \"max\"];\n\n const keys = keyRows.map((k: any) => {\n const rawPlan = String(k.plan || \"\").trim();\n const planLower = rawPlan.toLowerCase();\n const isPlanTier = validTiers.includes(planLower);\n\n // Nom personnalisé de la clé\n const keyName = k.name || (isPlanTier ? `Clé ${rawPlan}` : rawPlan) ||\n \"Clé API Principale\";\n // Le forfait est strictement le forfait d'abonnement du compte (free, plus, pro, max)\n const effectivePlan = k.user_tier || userTier ||\n (isPlanTier ? rawPlan : \"Plus\");\n\n return {\n api_key: k.api_key,\n name: keyName,\n plan: effectivePlan,\n request_count: Number(k.request_count || 0),\n created_at: k.created_at,\n last_used_at: k.last_used_at,\n };\n });\n\n return c.json({ keys, success: true });\n } catch (err: any) {\n console.error(\"Erreur API Keys:\", err);\n return c.json({ error: err?.message || \"Erreur serveur.\" }, 500);\n }\n });\n}",[179],"f772927d-accc-44e0-ab51-6c94d37d47fb","audio.ts","3b25ab8a-a080-11f1-99e5-1607ee4eb77e",269,["D",1788800899725],"import type { Hono } from \"npm:hono@4\";\nimport {\n extractTierFromApiKey,\n extractToken,\n getDb,\n getTierSpeechLimit,\n getUserQuotaBoost,\n getWeekData,\n verifyToken,\n} from \"./config.ts\";\n\nexport interface SpeechModelItem {\n created: number;\n description: string;\n id: string;\n name: string;\n voices?: string[];\n}\n\nfunction cleanModelName(name: string): string {\n return (name || \"\")\n .replace(/\\s*\$(free|gratuit|free tier)\$/gi, \"\")\n .replace(/:free/gi, \"\")\n .trim();\n}\n\nfunction getOpenRouterApiKey(userCustomKey?: string | null): string {\n if (userCustomKey && userCustomKey.trim().startsWith(\"sk-or-\")) {\n return userCustomKey.trim();\n }\n if (typeof Deno !== \"undefined\" && Deno.env) {\n return Deno.env.get(\"OPENROUTER_API_KEY\") || \"\";\n }\n if (typeof process !== \"undefined\" && process.env) {\n return process.env.OPENROUTER_API_KEY || \"\";\n }\n return \"\";\n}\n\n/**\n * Modèles Speech de repli avec voix disponibles et noms nettoyés sans (Free)\n */\nconst FALLBACK_SPEECH_MODELS = [\n {\n architecture: {\n input_modalities: [\"text\"],\n modality: \"text->speech\",\n output_modalities: [\"speech\"],\n },\n created: Math.floor(Date.now() / 1000) - 86_400 * 30,\n description:\n \"Modèle Text-to-Speech (TTS) ultra-rapide et haute fidélité par Deepgram.\",\n id: \"deepgram/flux-tts:free\",\n name: \"Deepgram: Flux TTS\",\n object: \"model\",\n owned_by: \"deepgram\",\n supported_parameters: [\"voice\", \"speed\", \"response_format\"],\n voices: [\n \"flux-alexis-en\",\n \"flux-michael-en\",\n \"flux-stacy-en\",\n \"flux-sam-en\",\n \"flux-asteria-en\",\n \"flux-orion-en\",\n ],\n },\n];\n\nlet speechTablesInitialized = false;\nasync function ensureSpeechTables(sql: any) {\n if (speechTablesInitialized) return;\n try {\n await sql`\n CREATE TABLE IF NOT EXISTS weekly_speech_usage (\n id SERIAL PRIMARY KEY,\n user_id TEXT NOT NULL,\n week_start DATE NOT NULL,\n tokens_used BIGINT NOT NULL DEFAULT 0,\n requests_count INTEGER NOT NULL DEFAULT 0,\n updated_at TIMESTAMP NOT NULL DEFAULT NOW(),\n CONSTRAINT weekly_speech_usage_user_week_unique UNIQUE (user_id, week_start)\n )\n `;\n await sql`\n CREATE TABLE IF NOT EXISTS mprojects_speech_generations (\n id UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n user_id TEXT NOT NULL,\n api_key TEXT,\n model TEXT NOT NULL DEFAULT 'deepgram/flux-tts:free',\n voice TEXT DEFAULT 'flux-alexis-en',\n input_text TEXT NOT NULL,\n audio_url TEXT,\n tokens_count INTEGER NOT NULL DEFAULT 0,\n character_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'completed',\n created_at TIMESTAMP NOT NULL DEFAULT NOW()\n )\n `;\n await sql`ALTER TABLE mprojects_speech_generations ADD COLUMN IF NOT EXISTS audio_url TEXT`;\n speechTablesInitialized = true;\n } catch (err) {\n console.error(\"[Speech API] Error initializing speech tables:\", err);\n }\n}\n\nexport function registerAudioRoutes(app: Hono) {\n try {\n ensureSpeechTables(getDb()).catch(() => {});\n } catch {}\n // ─────────────────────────────────────────────\n // GET /v1/models/speech, /models/speech & /v1/audio/models\n // ─────────────────────────────────────────────\n const handleGetSpeechModels = async (c: any) => {\n try {\n const res = await fetch(\n \"https://openrouter.ai/api/v1/models?output_modalities=speech\",\n );\n\n let rawModels: any[] = [];\n if (res.ok) {\n const json = await res.json();\n rawModels = json.data || [];\n }\n\n if (rawModels.length === 0) {\n rawModels = FALLBACK_SPEECH_MODELS;\n }\n\n // Règle stricte : filtrer par l'ID contenant ':free' quel que soit le forfait\n const freeSpeechModels = rawModels\n .filter((m) =>\n m && m.id && (m.id || \"\").toLowerCase().includes(\":free\")\n )\n .map((m) => {\n const rawName = m.name || m.id;\n const cleanedName = cleanModelName(rawName) || cleanModelName(m.id);\n return {\n architecture: m.architecture || {\n input_modalities: [\"text\"],\n modality: \"text->speech\",\n output_modalities: [\"speech\"],\n },\n created: m.created || Math.floor(Date.now() / 1000),\n description: m.description ||\n `Modèle de synthèse vocale (TTS) ${cleanedName}.`,\n id: m.id,\n name: cleanedName,\n object: \"model\",\n owned_by: (m.id || \"\").split(\"/\")[0] || \"openrouter\",\n supported_parameters: m.supported_parameters || [\n \"voice\",\n \"speed\",\n \"response_format\",\n ],\n voices: m.voices || [\n \"flux-alexis-en\",\n \"flux-michael-en\",\n \"flux-stacy-en\",\n \"flux-sam-en\",\n \"flux-asteria-en\",\n \"flux-orion-en\",\n ],\n };\n });\n\n const finalModels = freeSpeechModels.length > 0\n ? freeSpeechModels\n : FALLBACK_SPEECH_MODELS;\n\n return c.json({ data: finalModels, object: \"list\" });\n } catch {\n return c.json({ data: FALLBACK_SPEECH_MODELS, object: \"list\" });\n }\n };\n\n app.get(\"/v1/models/speech\", handleGetSpeechModels);\n app.get(\"/models/speech\", handleGetSpeechModels);\n app.get(\"/v1/speech/models\", handleGetSpeechModels);\n app.get(\"/speech/models\", handleGetSpeechModels);\n app.get(\"/v1/audio/models\", handleGetSpeechModels);\n app.get(\"/audio/models\", handleGetSpeechModels);\n\n // ─────────────────────────────────────────────\n // GET /v1/speech/voices & /v1/audio/voices\n // ─────────────────────────────────────────────\n const handleGetSpeechVoices = (c: any) => {\n return c.json({\n data: [\n {\n description: \"Voix féminine chaleureuse, naturelle et claire.\",\n gender: \"female\",\n id: \"flux-alexis-en\",\n language: \"fr/en\",\n name: \"Alexis\",\n },\n {\n description: \"Voix masculine posée, fluide et professionnelle.\",\n gender: \"male\",\n id: \"flux-michael-en\",\n language: \"fr/en\",\n name: \"Michael\",\n },\n {\n description: \"Voix féminine expressive, vive et dynamique.\",\n gender: \"female\",\n id: \"flux-stacy-en\",\n language: \"fr/en\",\n name: \"Stacy\",\n },\n {\n description:\n \"Voix masculine profonde, idéale pour narration & podcast.\",\n gender: \"male\",\n id: \"flux-sam-en\",\n language: \"fr/en\",\n name: \"Sam\",\n },\n {\n description: \"Voix féminine moderne, douce et mélodieuse.\",\n gender: \"female\",\n id: \"flux-asteria-en\",\n language: \"fr/en\",\n name: \"Asteria\",\n },\n {\n description: \"Voix masculine cinématique, intense et charismatique.\",\n gender: \"male\",\n id: \"flux-orion-en\",\n language: \"fr/en\",\n name: \"Orion\",\n },\n ],\n object: \"list\",\n });\n };\n\n app.get(\"/v1/speech/voices\", handleGetSpeechVoices);\n app.get(\"/speech/voices\", handleGetSpeechVoices);\n app.get(\"/v1/audio/voices\", handleGetSpeechVoices);\n app.get(\"/audio/voices\", handleGetSpeechVoices);\n app.get(\"/api/vibe/speech/voices\", handleGetSpeechVoices);\n app.get(\"/vibe/speech/voices\", handleGetSpeechVoices);\n app.get(\"/api/speech/voices\", handleGetSpeechVoices);\n app.get(\"/api/v1/speech/voices\", handleGetSpeechVoices);\n\n // ─────────────────────────────────────────────\n // GET /v1/speech/usage, /speech/usage, /v1/audio/usage & /usage/speech\n // ─────────────────────────────────────────────\n const handleGetSpeechUsage = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n const sql = getDb();\n\n // Résolution du user_id réel via mprojects_api_keys si token ou userId transmis\n if (token) {\n try {\n const keyRows = await sql`\n SELECT k.user_id, u.tier, u.email, u.username\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${token}::text\n LIMIT 1\n `;\n if (keyRows.length > 0) {\n userId = keyRows[0].user_id;\n userPlan = keyRows[0].tier || userPlan;\n }\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const { weekStartStr, nextResetIso } = getWeekData();\n\n const [uRows, usageRows] = await Promise.all([\n sql`SELECT id, email, username, tier FROM users WHERE id::text = ${userId}::text OR username = ${userId}::text OR email = ${userId}::text LIMIT 1`,\n sql`\n SELECT COALESCE(SUM(tokens_used::numeric), 0) as tokens_used, COALESCE(SUM(requests_count::numeric), 0) as requests_count \n FROM weekly_speech_usage \n WHERE (\n user_id = ${userId}::text \n OR user_id IN (SELECT id::text FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT email FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n OR user_id IN (SELECT username FROM users WHERE id::text = ${userId}::text OR email = ${userId}::text OR username = ${userId}::text)\n ) AND week_start = ${weekStartStr}::date\n `.catch(() => []),\n ]);\n\n const keyTier = extractTierFromApiKey(token);\n const effectiveTier = keyTier || uRows[0]?.tier || userPlan || \"Free\";\n const tokensUsed = Number(usageRows[0]?.tokens_used || 0);\n const requestsCount = Number(usageRows[0]?.requests_count || 0);\n const audioBoost = await getUserQuotaBoost(sql, userId, \"audio\");\n const weeklyLimit = getTierSpeechLimit(effectiveTier) + audioBoost;\n\n return c.json({\n plan: effectiveTier,\n requestsCount,\n resetAt: nextResetIso,\n tokensUsed,\n userId,\n weekStart: weekStartStr,\n weeklyLimit,\n });\n } catch (err: any) {\n return c.json(\n {\n details: err.message,\n error: \"Erreur lors de la récupération de l'usage Speech.\",\n },\n 500,\n );\n }\n };\n\n app.get(\"/v1/audio/usage\", handleGetSpeechUsage);\n app.get(\"/v1/speech/usage\", handleGetSpeechUsage);\n app.get(\"/audio/usage\", handleGetSpeechUsage);\n app.get(\"/speech/usage\", handleGetSpeechUsage);\n app.get(\"/usage/speech\", handleGetSpeechUsage);\n\n // ─────────────────────────────────────────────\n // GET /v1/audio/history & /v1/speech/history\n // ─────────────────────────────────────────────\n const handleGetSpeechHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const sql = getDb();\n const history = await sql`\n SELECT id, title, pinned, model, voice, input_text, audio_url, tokens_count, character_count, status, created_at\n FROM mprojects_speech_generations\n WHERE user_id = ${userId}::text\n ORDER BY pinned DESC, created_at DESC\n LIMIT 50\n `.catch(() => []);\n\n const formattedHistory = history.map((item: any) => ({\n ...item,\n pinned: Boolean(item.pinned),\n title: item.title || null,\n }));\n\n return c.json({ data: formattedHistory, success: true });\n } catch (err: any) {\n return c.json(\n { details: err.message, error: \"Erreur historique audio.\" },\n 500,\n );\n }\n };\n\n const handleUpdateSpeechHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const id = c.req.param(\"id\") || c.req.query(\"id\");\n if (!id) {\n return c.json({ error: \"ID manquant.\" }, 400);\n }\n\n const body = await c.req.json().catch(() => ({}));\n const sql = getDb();\n const sets: string[] = [];\n const values: any[] = [];\n let idx = 1;\n\n if (body.title !== undefined) {\n sets.push(`title = $${idx++}`);\n values.push(\n body.title ? String(body.title).trim().slice(0, 200) : null,\n );\n }\n if (body.pinned !== undefined) {\n sets.push(`pinned = $${idx++}`);\n values.push(Boolean(body.pinned));\n }\n\n if (sets.length === 0) {\n return c.json({ success: true });\n }\n\n values.push(id, userId);\n const query = `UPDATE mprojects_speech_generations SET ${\n sets.join(\", \")\n } WHERE id::text = $${idx++}::text AND user_id = $${idx}::text RETURNING id, title, pinned`;\n const result = await sql.unsafe(query, values);\n\n return c.json({ data: result[0] || null, success: true });\n } catch (err: any) {\n return c.json(\n { details: err.message, error: \"Erreur mise à jour audio.\" },\n 500,\n );\n }\n };\n\n app.get(\"/v1/audio/history\", handleGetSpeechHistory);\n app.get(\"/v1/speech/history\", handleGetSpeechHistory);\n app.get(\"/audio/history\", handleGetSpeechHistory);\n app.get(\"/speech/history\", handleGetSpeechHistory);\n app.patch(\"/v1/audio/history/:id\", handleUpdateSpeechHistory);\n app.patch(\"/v1/audio/history\", handleUpdateSpeechHistory);\n app.patch(\"/v1/speech/history/:id\", handleUpdateSpeechHistory);\n app.patch(\"/v1/speech/history\", handleUpdateSpeechHistory);\n app.patch(\"/audio/history/:id\", handleUpdateSpeechHistory);\n app.patch(\"/audio/history\", handleUpdateSpeechHistory);\n app.patch(\"/speech/history/:id\", handleUpdateSpeechHistory);\n app.patch(\"/speech/history\", handleUpdateSpeechHistory);\n\n // ─────────────────────────────────────────────\n // DELETE /v1/audio/history/:id & /v1/speech/history/:id\n // ─────────────────────────────────────────────\n const handleDeleteSpeechHistory = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n let userId = c.get(\"userId\");\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = payload.sub as string;\n } catch {}\n }\n\n if (!userId) {\n return c.json({ error: \"Non authentifié.\" }, 401);\n }\n\n const id = c.req.param(\"id\") || c.req.query(\"id\");\n if (!id) {\n return c.json({ error: \"ID manquant.\" }, 400);\n }\n\n const sql = getDb();\n await sql`\n DELETE FROM mprojects_speech_generations\n WHERE id::text = ${id}::text AND user_id = ${userId}::text\n `;\n\n return c.json({ message: \"Audio supprimé avec succès\", success: true });\n } catch (err: any) {\n return c.json(\n { details: err.message, error: \"Erreur suppression audio.\" },\n 500,\n );\n }\n };\n\n app.delete(\"/v1/audio/history/:id\", handleDeleteSpeechHistory);\n app.delete(\"/v1/audio/history\", handleDeleteSpeechHistory);\n app.delete(\"/v1/speech/history/:id\", handleDeleteSpeechHistory);\n app.delete(\"/v1/speech/history\", handleDeleteSpeechHistory);\n app.delete(\"/audio/history/:id\", handleDeleteSpeechHistory);\n app.delete(\"/audio/history\", handleDeleteSpeechHistory);\n\n // ─────────────────────────────────────────────\n // POST /v1/speech, /v1/audio/speech, /v1beta/models/*:synthesizeSpeech (OpenAI, Google & Anthropic SDK)\n // ─────────────────────────────────────────────\n const OPENAI_VOICE_MAP: Record = {\n alloy: \"flux-alexis-en\",\n echo: \"flux-michael-en\",\n fable: \"flux-orion-en\",\n nova: \"flux-stacy-en\",\n onyx: \"flux-sam-en\",\n shimmer: \"flux-asteria-en\",\n };\n\n const handleAudioSpeech = async (c: any) => {\n try {\n const token = extractToken(c.req.raw);\n const authHeader = c.req.header(\"Authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const apiKey = authHeader?.startsWith(\"Bearer \")\n ? authHeader.slice(7)\n : headerApiKey || null;\n\n let userId = c.get(\"userId\");\n let userPlan = c.get(\"userPlan\") || \"Free\";\n\n if (token) {\n try {\n const payload = await verifyToken(token);\n userId = (payload.sub as string) || userId;\n userPlan = (payload.tier as string) || userPlan;\n } catch {}\n }\n\n if (!userId) {\n return c.json(\n { error: \"Non authentifié. Clé API ou token Bearer requis.\" },\n 401,\n );\n }\n\n const body = await c.req.json().catch(() => ({}));\n const reqPath = c.req.path || \"\";\n const isGoogleTts = reqPath.includes(\":synthesizeSpeech\") ||\n reqPath.includes(\":synthesize\") ||\n Boolean(body.audioConfig);\n\n // Extraction du texte / prompt (support OpenAI, Anthropic et Google Cloud TTS / Gemini)\n const rawInput =\n (typeof body.input === \"object\" ? body.input?.text : body.input) ||\n body.text ||\n body.prompt ||\n \"\";\n const input = typeof rawInput === \"string\" ? rawInput.trim() : \"\";\n\n // Extraction du modèle demandé\n const pathModel = reqPath\n .replace(/^\\/(v1beta|v1)\\/models\\//, \"\")\n .replace(/:(synthesizeSpeech|synthesize).*$/, \"\");\n const requestedModel = body.model || pathModel ||\n \"deepgram/flux-tts:free\";\n\n // Mapping automatique des modèles OpenAI standards (tts-1, tts-1-hd) vers deepgram/flux-tts:free\n let model = requestedModel;\n if (\n model === \"tts-1\" ||\n model === \"tts-1-hd\" ||\n model === \"speech\" ||\n model.toLowerCase().includes(\"gemini\")\n ) {\n model = \"deepgram/flux-tts:free\";\n }\n\n // Extraction et mapping des voix (support des voix OpenAI alloy, echo, etc.)\n const rawVoice =\n (typeof body.voice === \"object\" ? body.voice?.name : body.voice) ||\n \"flux-alexis-en\";\n let voice = String(rawVoice).trim();\n if (OPENAI_VOICE_MAP[voice.toLowerCase()]) {\n voice = OPENAI_VOICE_MAP[voice.toLowerCase()];\n }\n\n const response_format = body.response_format ||\n (body.audioConfig?.audioEncoding === \"OGG_OPUS\" ? \"opus\" : \"mp3\");\n const speed = body.speed !== undefined\n ? body.speed\n : body.audioConfig?.speakingRate !== undefined\n ? body.audioConfig.speakingRate\n : 1.0;\n\n if (!input) {\n return c.json(\n {\n error: {\n code: \"missing_input\",\n message:\n \"Le paramètre 'input' ou 'prompt' est obligatoire pour la synthèse vocale.\",\n param: \"input\",\n type: \"invalid_request_error\",\n },\n },\n 400,\n );\n }\n\n // Règle stricte : filtrer par l'ID contenant ':free' quel que soit le forfait\n const modelStr = String(model).toLowerCase().trim();\n if (!modelStr.includes(\":free\")) {\n return c.json(\n {\n error: {\n code: \"speech_model_free_required\",\n message:\n `Pour l'API Speech, seuls les modèles avec ':free' sont autorisés (ex: 'deepgram/flux-tts:free'). Le modèle '${model}' n'est pas autorisé.`,\n param: \"model\",\n type: \"permission_error\",\n },\n },\n 403,\n );\n }\n\n const sql = getDb();\n const { weekStartStr, nextResetIso } = getWeekData();\n\n // Vérifier le forfait réel de l'utilisateur\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${userId}::text OR username = ${userId}::text \n LIMIT 1\n `.catch(() => []);\n const keyTier = extractTierFromApiKey(token);\n const effectiveTier = keyTier || uRows[0]?.tier || userPlan || \"Free\";\n const audioBoost = await getUserQuotaBoost(sql, userId, \"audio\");\n const weeklyLimit = getTierSpeechLimit(effectiveTier) + audioBoost;\n\n // Estimation des tokens utilisés (environ 1 token pour ~3.5 caractères, min 1 token)\n const estimatedTokens = Math.max(1, Math.ceil(input.length / 3.5));\n\n // Vérification du quota hebdomadaire\n const usageRows = await sql`\n SELECT tokens_used \n FROM weekly_speech_usage \n WHERE user_id = ${userId}::text AND week_start = ${weekStartStr}::date \n LIMIT 1\n `.catch(() => []);\n const currentUsage = Number(usageRows[0]?.tokens_used || 0);\n\n if (currentUsage + estimatedTokens > weeklyLimit) {\n return c.json(\n {\n error: {\n code: \"weekly_speech_quota_exceeded\",\n limit: weeklyLimit,\n message:\n `Votre quota hebdomadaire de tokens Speech est épuisé (${currentUsage}/${weeklyLimit} tokens pour le forfait ${effectiveTier}). Prochain renouvellement le ${nextResetIso}.`,\n type: \"quota_error\",\n used: currentUsage,\n },\n },\n 429,\n );\n }\n\n // Récupération de la clé OpenRouter\n const keyRows = await sql`\n SELECT api_key FROM mprojects_api_keys WHERE user_id::text = ${userId}::text LIMIT 1\n `.catch(() => []);\n const openRouterApiKey = getOpenRouterApiKey(\n keyRows.length > 0 ? keyRows[0].api_key : null,\n );\n\n if (!openRouterApiKey) {\n return c.json(\n { error: \"Clé fournisseur OpenRouter manquante côté serveur.\" },\n 500,\n );\n }\n\n const openRouterPayload: Record = {\n input,\n model,\n response_format,\n speed,\n voice,\n };\n\n const openRouterRes = await fetch(\n \"https://openrouter.ai/api/v1/audio/speech\",\n {\n body: JSON.stringify(openRouterPayload),\n headers: {\n Authorization: `Bearer ${openRouterApiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://mai.val.run\",\n \"X-Title\": \"mAI Public API (Speech)\",\n },\n method: \"POST\",\n },\n );\n\n if (!openRouterRes.ok) {\n const errText = await openRouterRes.text().catch(() => \"\");\n console.error(\"[OpenRouter Speech] Erreur retournée:\", errText);\n return c.json(\n {\n details: errText,\n error:\n \"Erreur retournée par le fournisseur OpenRouter pour Speech.\",\n },\n openRouterRes.status,\n );\n }\n\n // Récupérer le buffer binaire audio\n const arrayBuf = await openRouterRes.arrayBuffer();\n const bytes = new Uint8Array(arrayBuf);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n const base64Audio = btoa(binary);\n const mimeType = response_format === \"opus\"\n ? \"audio/opus\"\n : response_format === \"wav\"\n ? \"audio/wav\"\n : \"audio/mpeg\";\n const dataUrl = `data:${mimeType};base64,${base64Audio}`;\n\n // Incrémentation atomique du quota hebdomadaire de tokens Speech\n try {\n await sql`\n INSERT INTO weekly_speech_usage (user_id, week_start, tokens_used, requests_count, updated_at)\n VALUES (${userId}::text, ${weekStartStr}::date, ${estimatedTokens}, 1, NOW())\n ON CONFLICT (user_id, week_start)\n DO UPDATE SET \n tokens_used = weekly_speech_usage.tokens_used + ${estimatedTokens},\n requests_count = weekly_speech_usage.requests_count + 1,\n updated_at = NOW()\n `;\n } catch (err) {\n console.error(\"[Speech API] Erreur update weekly_speech_usage:\", err);\n }\n\n // Log dans l'historique mprojects_speech_generations\n let savedId = Date.now();\n try {\n const insertRes = await sql`\n INSERT INTO mprojects_speech_generations (\n user_id, api_key, model, voice, input_text, audio_url, tokens_count, character_count, status, created_at\n ) VALUES (\n ${userId}::text,\n ${apiKey || null},\n ${model}::text,\n ${voice}::text,\n ${input}::text,\n ${dataUrl}::text,\n ${estimatedTokens}::integer,\n ${input.length}::integer,\n 'completed',\n NOW()\n ) RETURNING id\n `;\n if (insertRes.length > 0 && insertRes[0].id) {\n savedId = insertRes[0].id;\n }\n } catch {}\n\n // Log dans mprojects_api_logs\n try {\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms, created_at)\n VALUES (${apiKey || \"jwt\"}::text, ${\n reqPath || \"/v1/speech\"\n }::text, 'POST', 200, 500, NOW())\n `;\n } catch {}\n\n // Vérifier si le client attend du JSON (outil IA, studio web, ou Google TTS)\n const acceptsJson =\n c.req.header(\"accept\")?.includes(\"application/json\") ||\n body.return_json ||\n body.response_format === \"json\" ||\n body.format === \"json\" ||\n isGoogleTts;\n\n if (acceptsJson) {\n return c.json({\n audio_url: dataUrl,\n audioContent: base64Audio,\n character_count: input.length,\n created: Math.floor(Date.now() / 1000),\n format: response_format,\n id: savedId,\n model: cleanModelName(model),\n model_id: model,\n status: \"completed\",\n text: input,\n tokens_used: estimatedTokens,\n usage: {\n requests_count: currentUsage + 1,\n tokens_used: estimatedTokens,\n weekly_limit: weeklyLimit,\n weekly_used: currentUsage + estimatedTokens,\n },\n voice,\n });\n }\n\n // Format binaire standard pour OpenAI SDK & requêtes natives\n // (CORS géré par le middleware global dans main.ts)\n return new Response(bytes, {\n headers: {\n \"Content-Type\": mimeType,\n \"x-audio-id\": String(savedId),\n \"x-speech-limit\": String(weeklyLimit),\n \"x-speech-used\": String(currentUsage + estimatedTokens),\n \"x-tokens-used\": String(estimatedTokens),\n },\n status: 200,\n });\n } catch (err: any) {\n console.error(\"[Speech API] Erreur serveur:\", err);\n return c.json(\n {\n details: err.message,\n error: \"Erreur serveur lors du traitement Speech.\",\n },\n 500,\n );\n }\n };\n\n // Routes OpenAI & Anthropic SDK\n app.post(\"/v1/speech\", handleAudioSpeech);\n app.post(\"/speech\", handleAudioSpeech);\n app.post(\"/v1/speech/generations\", handleAudioSpeech);\n app.post(\"/speech/generations\", handleAudioSpeech);\n app.post(\"/v1/audio/speech\", handleAudioSpeech);\n app.post(\"/v1/audio/generations\", handleAudioSpeech);\n app.post(\"/audio/speech\", handleAudioSpeech);\n app.post(\"/audio/generations\", handleAudioSpeech);\n app.post(\"/api/vibe/speech\", handleAudioSpeech);\n app.post(\"/vibe/speech\", handleAudioSpeech);\n app.post(\"/api/speech\", handleAudioSpeech);\n app.post(\"/api/v1/speech\", handleAudioSpeech);\n app.post(\"/api/v1/audio/speech\", handleAudioSpeech);\n app.post(\"/api/vibe/audio/speech\", handleAudioSpeech);\n\n // Routes Google Cloud TTS / Gemini SDK\n app.post(\"/v1beta/models/*:synthesizeSpeech\", handleAudioSpeech);\n app.post(\"/v1/models/*:synthesizeSpeech\", handleAudioSpeech);\n app.post(\"/v1beta/speech:synthesize\", handleAudioSpeech);\n app.post(\"/v1/speech:synthesize\", handleAudioSpeech);\n}",[692],"60b8bc13-9c84-453d-ae1e-cdcedb52c2a2",231,["D",1788678953719],25,"import type { Hono } from \"npm:hono@4\";\nimport {\n extractTierFromApiKey,\n getDb,\n getTierRequestLimit,\n getUserQuotaBoost,\n getWeekData,\n verifyToken,\n} from \"./config.ts\";\n\nexport function registerMiddleware(app: Hono) {\n // Middleware global pour Auth, Rate limiting & Logging sur toutes les routes d'API\n app.use(\"*\", async (c, next) => {\n // Preflight CORS : laisser passer sans auth (géré par le middleware CORS de main.ts)\n if (c.req.method === \"OPTIONS\") {\n await next();\n return;\n }\n\n const path = c.req.path;\n\n // Détection des routes d'API\n const isApiRoute = path.startsWith(\"/v1/\") ||\n path.startsWith(\"/v1beta/\") ||\n path === \"/v1/models\" ||\n path === \"/models\" ||\n path.startsWith(\"/models/\") ||\n path === \"/v1beta/models\" ||\n path === \"/chat/completions\" ||\n path.startsWith(\"/chat/\") ||\n path === \"/messages\" ||\n path.startsWith(\"/messages/\") ||\n path === \"/speech\" ||\n path.startsWith(\"/speech/\") ||\n path === \"/images\" ||\n path.startsWith(\"/images/\") ||\n path === \"/images/generations\" ||\n path === \"/mj\" ||\n path.startsWith(\"/mj/\") ||\n path.startsWith(\"/v1/mj/\") ||\n path === \"/audio/speech\" ||\n path.startsWith(\"/audio/\") ||\n path === \"/usage/speech\" ||\n path === \"/v1/usage/speech\" ||\n path === \"/usage\" ||\n path === \"/v1/usage\" ||\n path === \"/log-usage\" ||\n path === \"/v1/log-usage\" ||\n path === \"/v1/status\" ||\n path === \"/status\";\n\n if (!isApiRoute) {\n await next();\n return;\n }\n\n const isPublicRoute = path === \"/\" ||\n path === \"/api\" ||\n path === \"/api/\" ||\n path === \"/v1\" ||\n path === \"/v1/\" ||\n path === \"/vibe\" ||\n path === \"/vibe/\" ||\n path === \"/api/vibe\" ||\n path === \"/api/vibe/\" ||\n path === \"/v1/login\" ||\n path === \"/v1/register\" ||\n path === \"/v1/verify-login\" ||\n path === \"/v1/verify-register\" ||\n path === \"/v1/resend-code\" ||\n path.startsWith(\"/v1/feed\") ||\n path.startsWith(\"/api/vibe/feed\") ||\n path.startsWith(\"/vibe/feed\") ||\n path === \"/feed\" ||\n path.startsWith(\"/v1/posts\") ||\n path.startsWith(\"/api/vibe/posts\") ||\n path.startsWith(\"/v1/trends\") ||\n path.startsWith(\"/api/vibe/trends\") ||\n path.startsWith(\"/v1/profiles\") ||\n path.startsWith(\"/api/vibe/profiles\") ||\n path.startsWith(\"/v1/search\") ||\n path.startsWith(\"/api/vibe/search\") ||\n path.startsWith(\"/vibe/search\") ||\n path.startsWith(\"/search\") ||\n path === \"/v1/models\" ||\n path === \"/models\" ||\n path === \"/v1beta/models\" ||\n path === \"/v1/models/images\" ||\n path === \"/models/images\" ||\n path === \"/v1/images/models\" ||\n path === \"/images/models\" ||\n path.startsWith(\"/v1/models/images/\") ||\n path.startsWith(\"/models/images/\") ||\n path === \"/v1/models/speech\" ||\n path === \"/models/speech\" ||\n path === \"/v1/speech/models\" ||\n path === \"/speech/models\" ||\n path === \"/v1/speech/voices\" ||\n path === \"/speech/voices\" ||\n path === \"/v1/audio/models\" ||\n path === \"/v1/audio/voices\" ||\n path === \"/v1/models/mai\" ||\n path === \"/v1/mai/models\" ||\n path === \"/models/mai\" ||\n path === \"/mai/models\" ||\n path === \"/v1/status\" ||\n path === \"/status\" ||\n path === \"/v1/web/search\" ||\n path.startsWith(\"/v1/web/\");\n\n const authHeader = c.req.header(\"Authorization\") ||\n c.req.header(\"authorization\");\n const headerApiKey = c.req.header(\"x-api-key\") ||\n c.req.header(\"X-API-Key\") ||\n c.req.header(\"x-goog-api-key\") ||\n c.req.header(\"X-Goog-Api-Key\");\n const queryApiKey = c.req.query(\"api_key\") ||\n c.req.query(\"key\") ||\n // JWT de session en query : requis pour le flux SSE (EventSource ne\n // peut pas définir d'en-têtes) — cf. realtime.ts /v1/realtime/stream\n c.req.query(\"token\");\n\n let rawApiKey =\n (authHeader?.startsWith(\"Bearer \") ? authHeader.slice(7) : authHeader) ||\n headerApiKey ||\n queryApiKey ||\n null;\n\n if (rawApiKey) {\n rawApiKey = rawApiKey.trim();\n if (\n rawApiKey === \"\" ||\n rawApiKey === \"null\" ||\n rawApiKey === \"undefined\" ||\n rawApiKey === \"Bearer\"\n ) {\n rawApiKey = null;\n }\n }\n\n const apiKey = rawApiKey;\n const reqUserId = c.req.header(\"x-user-id\") || c.req.header(\"X-User-Id\");\n const startTime = Date.now();\n\n const systemMaiApiKey = Deno.env.get(\"MAI_API_KEY\");\n\n let userPlan = \"Free\";\n let currentUserId: string | null = null;\n const currentApiKey: string | null = apiKey;\n let matchedApiKey: string | null = apiKey;\n // Authentification par clé API enregistrée (par opposition à un JWT de session ou à la clé système)\n let isRegisteredApiKey = false;\n\n function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) {\n return false;\n }\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n }\n\n // Résolution de l'authentification : Clé API utilisateur enregistrée, Clé système, ou Token JWT\n if (apiKey) {\n // Détection prioritaire du forfait directement encodé dans la clé (mai-TIER_USER-XXXXX-XXXXX)\n const keyTier = extractTierFromApiKey(apiKey);\n if (keyTier) {\n userPlan = keyTier;\n }\n\n const sql = getDb();\n try {\n const rows = await sql`\n SELECT k.*, u.tier as user_tier, u.id as u_id\n FROM mprojects_api_keys k\n LEFT JOIN users u ON k.user_id = u.id::text OR k.user_id = u.username OR k.user_id = u.email\n WHERE k.api_key = ${apiKey}::text\n LIMIT 1\n `;\n\n if (rows.length > 0) {\n const apiKeyData = rows[0];\n // Si le TIER_USER a été extrait de la clé fournie, il fait foi en priorité\n if (!keyTier) {\n const rawPlan = String(apiKeyData.plan || \"\").trim().toLowerCase();\n const validTiers = [\"free\", \"plus\", \"pro\", \"max\"];\n userPlan = apiKeyData.user_tier ||\n (validTiers.includes(rawPlan) ? apiKeyData.plan : \"Plus\");\n }\n currentUserId = apiKeyData.user_id;\n matchedApiKey = apiKeyData.api_key || apiKey;\n isRegisteredApiKey = true;\n } else if (\n systemMaiApiKey && timingSafeEqual(apiKey, systemMaiApiKey)\n ) {\n userPlan = \"Plus\";\n currentUserId = \"system-mai\";\n } else {\n // Tenter de valider le token comme un JWT de session\n try {\n const payload = await verifyToken(apiKey);\n currentUserId = String(payload.sub || \"\");\n userPlan = String(payload.tier || \"Free\");\n\n // Vérifier dans la table users si le forfait a changé\n if (currentUserId) {\n const uRows = await sql`\n SELECT tier FROM users\n WHERE id::text = ${currentUserId}::text OR username = ${currentUserId}::text OR email = ${currentUserId}::text\n LIMIT 1\n `;\n if (uRows.length > 0 && uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n }\n } catch {\n if (!isPublicRoute) {\n return c.json({ error: \"Invalid API Key.\" }, 403);\n }\n }\n }\n } catch (dbErr) {\n console.error(\"Auth DB Error in middleware:\", dbErr);\n }\n }\n\n // 3. En-tête x-user-id (requêtes web app / internes) : uniquement si déjà authentifié ou fallback route publique\n if (reqUserId && reqUserId !== \"system-mai\") {\n if (currentUserId) {\n // Déjà authentifié via clé API ou JWT : x-user-id doit correspondre, sinon on l'ignore\n if (reqUserId !== currentUserId) {\n console.warn(\n `[Auth] x-user-id mismatch: header=${reqUserId} vs auth=${currentUserId} — header ignoré`,\n );\n }\n } else if (apiKey) {\n // apiKey présent mais non reconnu (route publique) : ne pas promouvoir via x-user-id seul\n } else {\n // Aucune auth vérifiée\n try {\n const sql = getDb();\n const uRows = await sql`\n SELECT tier FROM users \n WHERE id::text = ${reqUserId}::text OR username = ${reqUserId}::text OR email = ${reqUserId}::text \n LIMIT 1\n `;\n if (uRows.length > 0) {\n if (uRows[0].tier) {\n userPlan = uRows[0].tier;\n }\n if (isPublicRoute) {\n currentUserId = reqUserId;\n } else {\n console.warn(\n `[Auth] x-user-id sans JWT sur route privée ${path} — ignoré`,\n );\n }\n }\n } catch {}\n }\n }\n\n // 4. Aucun identifiant et route privée\n if (!apiKey && !currentUserId && !isPublicRoute) {\n return c.json({ error: \"Service Unavailable. API Key missing.\" }, 401);\n }\n\n // Enregistrer le plan et les infos de contexte\n c.set(\"userPlan\", userPlan);\n c.set(\"userId\", currentUserId);\n c.set(\"apiKey\", currentApiKey);\n c.set(\"matchedApiKey\", matchedApiKey);\n\n // Vérification préventive du quota de requêtes pour les clés API enregistrées.\n // Le solde est global au compte (cumul de toutes ses clés) et la période est hebdomadaire\n // (lundi 00:00 UTC), marquée par usage_period_start pour un reset idempotent.\n // Un token JWT de session ne consomme pas ce quota : la requête est exécutée directement.\n if (isRegisteredApiKey && currentUserId && currentUserId !== \"system-mai\") {\n const sql = getDb();\n const { nextResetIso, weekStartStr } = getWeekData();\n const apiBoost = await getUserQuotaBoost(sql, currentUserId, \"api\");\n const limit = getTierRequestLimit(userPlan) + apiBoost;\n\n try {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = 0, usage_period_start = ${weekStartStr}::date\n WHERE user_id::text = ${currentUserId}::text\n AND usage_period_start IS DISTINCT FROM ${weekStartStr}::date\n `;\n\n const countRows = await sql`\n SELECT SUM(request_count) as total_requests\n FROM mprojects_api_keys\n WHERE user_id::text = ${currentUserId}::text\n `;\n // Neon renvoie les bigint en chaîne: Number() est obligatoire pour comparer\n const used = Number(countRows[0]?.total_requests || 0);\n const remaining = Math.max(0, limit - used);\n\n (c as any).set(\"requestQuota\", {\n apiKey: matchedApiKey,\n limit,\n remaining,\n used,\n });\n\n if (remaining < 1) {\n if (isPublicRoute) {\n await next();\n return;\n }\n return c.json({\n code: \"quota_exceeded\",\n error: \"Quota exceeded for your account.\",\n limit,\n remaining,\n resetAt: nextResetIso,\n used,\n }, 429);\n }\n } catch {}\n }\n\n await next();\n\n const latency = Date.now() - startTime;\n const status = c.res.status;\n const endpoint = c.req.path;\n const method = c.req.method;\n\n // Log-usage & Décompte de 1 requête du quota API (chat, audio, images, web search, etc.).\n // Uniquement pour les clés API enregistrées : +1 requête au solde hebdomadaire du\n // propriétaire de la clé. Les requêtes authentifiées par JWT de session sont\n // exécutées directement, sans log-usage ni débit ensuite.\n const isExcludedRoute = path.startsWith(\"/v1/devices\") ||\n path === \"/v1/status\" || path === \"/status\";\n if (!isExcludedRoute && isRegisteredApiKey) {\n try {\n const sql = getDb();\n const effectiveKeyToLog = matchedApiKey || apiKey;\n\n await sql`\n INSERT INTO mprojects_api_logs (api_key, endpoint, method, status_code, latency_ms)\n VALUES (${effectiveKeyToLog}::text, ${endpoint}::text, ${method}::text, ${status}::integer, ${latency}::integer)\n `;\n\n // Les routes qui débitent elles-mêmes un coût multi-crédits (images) posent le fanion\n // pour éviter le double débit `cout + 1` sur la même requête.\n if (status === 200 && !(c as any).get?.(\"quotaDebitedByHandler\")) {\n await sql`\n UPDATE mprojects_api_keys\n SET request_count = request_count + 1, last_used_at = NOW()\n WHERE api_key = ${effectiveKeyToLog}::text\n `;\n }\n } catch (err) {\n console.error(\"Erreur logging API & mise à jour quota:\", err);\n }\n }\n });\n}",[195],"pulls","branches","forks","envVars",{"_711":714,"_715":26},"connections",{"_711":712,"_713":26},"count",1,"unfilledCount",117,"emptyCount",{"_50":698,"_15":195,"_52":205,"_54":-5,"_55":76,"_57":699,"_59":24,"_60":889,"_62":701,"_64":65,"_66":702,"_31":68,"_69":-5,"_70":890,"_44":891},{"_50":691,"_15":692,"_52":693,"_54":-5,"_55":76,"_57":694,"_59":24,"_60":886,"_62":624,"_64":65,"_66":696,"_31":68,"_69":-5,"_70":887,"_44":888},{"_50":685,"_15":179,"_52":189,"_54":-5,"_55":76,"_57":686,"_59":24,"_60":883,"_62":688,"_64":65,"_66":689,"_31":68,"_69":-5,"_70":884,"_44":885},{"_50":681,"_15":164,"_52":174,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":880,"_62":546,"_64":65,"_66":683,"_31":68,"_69":-5,"_70":881,"_44":882},{"_50":676,"_15":148,"_52":158,"_54":-5,"_55":76,"_57":677,"_59":24,"_60":877,"_62":624,"_64":65,"_66":679,"_31":68,"_69":-5,"_70":878,"_44":879},{"_50":672,"_15":132,"_52":142,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":874,"_62":546,"_64":65,"_66":674,"_31":68,"_69":-5,"_70":875,"_44":876},{"_50":667,"_15":229,"_52":668,"_54":-5,"_55":76,"_57":411,"_59":24,"_60":871,"_62":609,"_64":65,"_66":670,"_31":68,"_69":-5,"_70":872,"_44":873},{"_50":663,"_15":221,"_52":664,"_54":-5,"_55":76,"_57":249,"_59":24,"_60":868,"_62":26,"_64":65,"_66":226,"_31":68,"_69":-5,"_70":869,"_44":870},{"_50":657,"_15":115,"_52":126,"_54":-5,"_55":76,"_57":658,"_59":24,"_60":865,"_62":660,"_64":121,"_66":661,"_31":68,"_69":16,"_70":866,"_44":867},{"_50":651,"_15":99,"_52":109,"_54":-5,"_55":76,"_57":652,"_59":24,"_60":862,"_62":654,"_64":65,"_66":655,"_31":68,"_69":-5,"_70":863,"_44":864},{"_50":646,"_15":83,"_52":93,"_54":-5,"_55":76,"_57":647,"_59":24,"_60":859,"_62":111,"_64":65,"_66":649,"_31":68,"_69":-5,"_70":860,"_44":861},{"_50":639,"_15":640,"_52":641,"_54":-5,"_55":76,"_57":642,"_59":24,"_60":856,"_62":160,"_64":65,"_66":644,"_31":68,"_69":-5,"_70":857,"_44":858},{"_50":634,"_15":45,"_52":75,"_54":-5,"_55":76,"_57":635,"_59":24,"_60":853,"_62":421,"_64":65,"_66":637,"_31":68,"_69":-5,"_70":854,"_44":855},{"_50":627,"_15":628,"_52":629,"_54":-5,"_55":76,"_57":630,"_59":24,"_60":850,"_62":160,"_64":65,"_66":632,"_31":68,"_69":-5,"_70":851,"_44":852},{"_50":619,"_15":620,"_52":621,"_54":-5,"_55":76,"_57":622,"_59":24,"_60":847,"_62":624,"_64":65,"_66":625,"_31":68,"_69":-5,"_70":848,"_44":849},{"_50":612,"_15":613,"_52":614,"_54":-5,"_55":76,"_57":615,"_59":24,"_60":844,"_62":63,"_64":65,"_66":617,"_31":68,"_69":-5,"_70":845,"_44":846},{"_50":604,"_15":605,"_52":606,"_54":-5,"_55":76,"_57":607,"_59":24,"_60":841,"_62":609,"_64":65,"_66":610,"_31":68,"_69":-5,"_70":842,"_44":843},{"_50":597,"_15":598,"_52":599,"_54":-5,"_55":76,"_57":600,"_59":24,"_60":838,"_62":160,"_64":65,"_66":602,"_31":68,"_69":-5,"_70":839,"_44":840},{"_50":591,"_15":592,"_52":593,"_54":-5,"_55":76,"_57":281,"_59":24,"_60":835,"_62":111,"_64":65,"_66":595,"_31":68,"_69":-5,"_70":836,"_44":837},{"_50":584,"_15":585,"_52":586,"_54":-5,"_55":76,"_57":587,"_59":24,"_60":832,"_62":79,"_64":65,"_66":589,"_31":68,"_69":-5,"_70":833,"_44":834},{"_50":577,"_15":578,"_52":579,"_54":-5,"_55":76,"_57":580,"_59":24,"_60":829,"_62":79,"_64":65,"_66":582,"_31":68,"_69":-5,"_70":830,"_44":831},{"_50":570,"_15":571,"_52":572,"_54":-5,"_55":76,"_57":573,"_59":24,"_60":826,"_62":63,"_64":65,"_66":575,"_31":68,"_69":-5,"_70":827,"_44":828},{"_50":563,"_15":564,"_52":565,"_54":-5,"_55":76,"_57":566,"_59":24,"_60":823,"_62":63,"_64":65,"_66":568,"_31":68,"_69":-5,"_70":824,"_44":825},{"_50":556,"_15":557,"_52":558,"_54":-5,"_55":76,"_57":559,"_59":24,"_60":820,"_62":63,"_64":65,"_66":561,"_31":68,"_69":-5,"_70":821,"_44":822},{"_50":549,"_15":550,"_52":551,"_54":-5,"_55":76,"_57":552,"_59":24,"_60":817,"_62":63,"_64":65,"_66":554,"_31":68,"_69":-5,"_70":818,"_44":819},{"_50":541,"_15":542,"_52":543,"_54":-5,"_55":76,"_57":544,"_59":24,"_60":814,"_62":546,"_64":65,"_66":547,"_31":68,"_69":-5,"_70":815,"_44":816},{"_50":534,"_15":535,"_52":536,"_54":-5,"_55":76,"_57":537,"_59":24,"_60":811,"_62":111,"_64":65,"_66":539,"_31":68,"_69":-5,"_70":812,"_44":813},{"_50":527,"_15":528,"_52":529,"_54":-5,"_55":76,"_57":530,"_59":24,"_60":808,"_62":63,"_64":65,"_66":532,"_31":68,"_69":-5,"_70":809,"_44":810},{"_50":520,"_15":521,"_52":522,"_54":-5,"_55":76,"_57":523,"_59":24,"_60":805,"_62":63,"_64":65,"_66":525,"_31":68,"_69":-5,"_70":806,"_44":807},{"_50":513,"_15":514,"_52":515,"_54":-5,"_55":76,"_57":516,"_59":24,"_60":802,"_62":63,"_64":65,"_66":518,"_31":68,"_69":-5,"_70":803,"_44":804},{"_50":506,"_15":507,"_52":508,"_54":-5,"_55":76,"_57":509,"_59":24,"_60":799,"_62":63,"_64":65,"_66":511,"_31":68,"_69":-5,"_70":800,"_44":801},{"_50":498,"_15":499,"_52":500,"_54":-5,"_55":76,"_57":501,"_59":24,"_60":796,"_62":503,"_64":65,"_66":504,"_31":68,"_69":-5,"_70":797,"_44":798},{"_50":491,"_15":492,"_52":493,"_54":-5,"_55":76,"_57":494,"_59":24,"_60":793,"_62":63,"_64":65,"_66":496,"_31":68,"_69":-5,"_70":794,"_44":795},{"_50":483,"_15":484,"_52":485,"_54":-5,"_55":76,"_57":486,"_59":24,"_60":790,"_62":488,"_64":65,"_66":489,"_31":68,"_69":-5,"_70":791,"_44":792},{"_50":476,"_15":477,"_52":478,"_54":-5,"_55":76,"_57":479,"_59":24,"_60":787,"_62":160,"_64":65,"_66":481,"_31":68,"_69":-5,"_70":788,"_44":789},{"_50":469,"_15":470,"_52":471,"_54":-5,"_55":76,"_57":472,"_59":24,"_60":784,"_62":160,"_64":65,"_66":474,"_31":68,"_69":-5,"_70":785,"_44":786},{"_50":462,"_15":463,"_52":464,"_54":-5,"_55":76,"_57":465,"_59":24,"_60":781,"_62":160,"_64":65,"_66":467,"_31":68,"_69":-5,"_70":782,"_44":783},{"_50":454,"_15":455,"_52":456,"_54":-5,"_55":76,"_57":457,"_59":24,"_60":778,"_62":459,"_64":65,"_66":460,"_31":68,"_69":-5,"_70":779,"_44":780},{"_50":446,"_15":447,"_52":448,"_54":-5,"_55":76,"_57":449,"_59":24,"_60":775,"_62":451,"_64":65,"_66":452,"_31":68,"_69":-5,"_70":776,"_44":777},{"_50":439,"_15":440,"_52":441,"_54":-5,"_55":76,"_57":442,"_59":24,"_60":772,"_62":429,"_64":65,"_66":444,"_31":68,"_69":-5,"_70":773,"_44":774},{"_50":432,"_15":433,"_52":434,"_54":-5,"_55":76,"_57":435,"_59":24,"_60":769,"_62":63,"_64":65,"_66":437,"_31":68,"_69":-5,"_70":770,"_44":771},{"_50":424,"_15":425,"_52":426,"_54":-5,"_55":76,"_57":427,"_59":24,"_60":766,"_62":429,"_64":65,"_66":430,"_31":68,"_69":-5,"_70":767,"_44":768},{"_50":416,"_15":417,"_52":418,"_54":-5,"_55":76,"_57":419,"_59":24,"_60":763,"_62":421,"_64":65,"_66":422,"_31":68,"_69":-5,"_70":764,"_44":765},{"_50":409,"_15":213,"_52":410,"_54":-5,"_55":76,"_57":411,"_59":24,"_60":760,"_62":413,"_64":65,"_66":414,"_31":68,"_69":-5,"_70":761,"_44":762},["D",1788164141214],[],[213],["D",1789229562093],[],[417],["D",1789229641719],[],[425],["D",1789232449909],[],[433],["D",1789232416588],[],[440],["D",1789204570685],[],[447],["D",1789146610117],[],[455],["D",1789229665577],[],[463],["D",1789229675080],[],[470],["D",1789229573039],[],[477],["D",1789313578830],[],[484],["D",1789313699618],[],[492],["D",1789229654431],[],[499],["D",1789313606037],[],[507],["D",1789313672518],[],[514],["D",1789313630313],[],[521],["D",1789313654225],[],[528],["D",1789229613228],[],[535],["D",1789233612605],[],[542],["D",1789233648949],[],[550],["D",1789233631883],[],[557],["D",1789233728377],[],[564],["D",1789233699297],[],[571],["D",1789311921611],[],[578],["D",1789313754778],[],[585],["D",1789315877037],[],[592],["D",1789315868425],[],[598],["D",1789312015279],[],[605],["D",1789313726383],[],[613],["D",1789145746117],[],[620],["D",1788800889123],[],[628],["D",1789145672482],[],[45],["D",1789229709739],[],[640],["D",1788618643754],[],[83],["D",1788620602782],[],[99],["D",1788714800578],[],[115],["D",1787587613987],[],[221],["D",1788164141214],[],[229],["D",1788618643754],[],[132],["D",1787754938926],[],[148],["D",1788618643754],[],[164],["D",1789229716185],[],[179],["D",1788800899725],[],[692],["D",1788678953719],[],[195],["D",1785339526786],["D",1789474235934],{"_13":14,"_325":267},{"_13":14,"_320":321,"_266":267,"_285":286,"_322":323,"_324":68},{"_62":281,"_15":280,"_50":76,"_274":268,"_275":-5,"_276":-5,"_317":-5,"_318":-5,"_319":-5,"_278":16,"_277":14},"ctx",{"_310":-5,"_362":930,"_931":932,"_933":934,"_935":68,"_936":68,"_937":68,"_938":24,"_939":-5,"_940":-7,"_941":-7,"_942":26,"_943":68,"_944":68,"_945":-5,"_946":68,"_947":68,"_948":68,"_949":-5},"ENV",{"_901":902,"_903":904,"_905":280,"_906":907,"_908":909,"_910":911,"_912":913,"_914":915,"_916":917,"_918":919,"_920":921,"_922":923,"_924":925,"_926":927,"_928":929},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Pull requests

api-middleware.ts+125-50

auth.ts+48-24

config.ts+93-23

devices.ts+11-10

email.ts+6-4

Hmain.ts+12-0

models.ts+212-232

projects.ts+47-47

storage.ts+44-23

images.ts+511-0

maiModels.ts+281-0

web.ts+236-0