[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_183":184,"_185":186},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_61":148,"_16":-7,"_149":-5,"_17":150,"_151":152,"_28":153,"_21":154,"_23":155,"_156":-5,"_157":-5,"_158":-5,"_159":35,"_160":161,"_162":38,"_163":-5,"_164":-5,"_165":166},"routes/_app.x.$handle.$name._index",{"_11":12,"_13":14,"_15":-7,"_16":-7,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-7,"_26":-5,"_27":-5,"_28":29,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":35,"_37":38},"handle","nicolasduchene","name","lengow-upload-relay","branchName","version","project",{"_39":92,"_13":14,"_50":93,"_94":-5,"_95":35,"_96":97,"_98":97,"_99":100,"_101":-5,"_102":103,"_104":43,"_105":38,"_106":-5,"_107":-5,"_108":81,"_109":110,"_111":-5,"_112":-5,"_113":-5,"_114":-5,"_115":116,"_117":116,"_118":119,"_120":119,"_121":119,"_122":116,"_123":116,"_124":125,"_126":127,"_128":129,"_130":35},"tags",[],"counts",{"_80":81,"_82":83,"_84":81,"_85":86,"_87":88},"contents",[74,75],"readme","upstream","pull","files",[31,63],"preview",{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":60,"_61":62},"ahead","behind","showHomeCustomizationHint",false,"showHTTPPreviewSettingsHint","hasHTTPFiles",true,"id","b4433d54-152b-4523-9354-3597fb780ec3","main.ts","fileId","99c4956e-81f6-11f1-a559-1607ee4eb77e","parentId","branchId","f566c77c-2b3b-4809-986f-12e44a636da1","branchVersion",16,"latest","createdAt",["D",1784553112252],4,"fileType","http","content","// ======================================================================\n// RELAIS \"Lengow / Octopia document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Octopia (Cdiscount), ajouté le 20/07/2026, a une contrainte différente\n// mais qui pose le même problème avec Mechanic seul : le nom de champ\n// multipart est libre, mais le FILENAME doit être EXACTEMENT\n// l'identifiant de commande Octopia (ex. \"26071600422UAMB.pdf\") — confirmé\n// via un test réel sur POST /order-invoice-imports (201, puis statut\n// \"Success\" en relisant l'import). Là encore, Mechanic seul ne permet pas\n// de fixer ce filename indépendamment d'un nom de champ.\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet au bon service (Lengow ou Octopia) et renvoie sa réponse telle\n// quelle à Mechanic.\n// ======================================================================\n\nfunction decodeBase64ToBlob(pdf_base64: string): Blob {\n const decoded = atob(pdf_base64);\n const binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n return new Blob([binary], { type: \"application/pdf\" });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode diagnostic temporaire (18/07/2026) ----\n // Permet au script Mechanic d'envoyer un simple message de diagnostic\n // (par ex. le résultat de la vérification anti-doublon) sans passer\n // par tout le flux Lengow, pour investiguer les doublons persistants\n // sans dépendre de l'interface Mechanic (Activity/Runs).\n if (payload.mode === \"debug_log\") {\n console.log(\"debug_log\", payload);\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode \"octopia_upload\" (ajouté le 20/07/2026) ----\n // Upload de la preuve d'achat pour les commandes Cdiscount, via\n // l'endpoint bulk Octopia POST /order-invoice-imports (l'endpoint\n // unitaire /orders/{orderId}/invoice-documents renvoie un 404\n // générique en production malgré la doc — voir investigation du\n // 20/07/2026 : le endpoint bulk, lui, fonctionne, même avec un seul\n // fichier). Le nom de champ multipart est libre côté Octopia ; seul le\n // FILENAME compte, et doit être l'identifiant exact de la commande\n // Octopia (ex. \"26071600422UAMB.pdf\").\n if (payload.mode === \"octopia_upload\") {\n const { order_ref, filename, pdf_base64, octopia_token, octopia_seller_id } =\n payload as Record;\n\n const missingOctopia = [\"order_ref\", \"filename\", \"pdf_base64\", \"octopia_token\", \"octopia_seller_id\"]\n .filter((key) => !(payload as Record)[key]);\n if (missingOctopia.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing: missingOctopia }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n let pdfBlob: Blob;\n try {\n pdfBlob = decodeBase64ToBlob(pdf_base64);\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const form = new FormData();\n // Le nom de champ (\"file1\") est arbitraire pour Octopia — seul le\n // filename ci-dessous (identifiant de commande) compte pour le\n // rattachement de la facture à la bonne commande.\n form.append(\"file1\", pdfBlob, filename);\n\n let octopiaResponse: Response;\n try {\n octopiaResponse = await fetch(\"https://api.octopia-io.net/seller/v2/order-invoice-imports\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${octopia_token}`,\n SellerId: String(octopia_seller_id),\n },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"octopia_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const octopiaText = await octopiaResponse.text();\n console.log(\"octopia_response\", { status: octopiaResponse.status, body: octopiaText, order_ref, filename });\n\n return new Response(\n JSON.stringify({ status: octopiaResponse.status, body: octopiaText }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ---- Mode par défaut : upload Lengow (comportement historique) ----\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n","deleted","label","children",[],"path",[41],{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":68,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_59":72,"_61":73},"4e8fde8f-7167-4949-83a1-8b24a91577d4","octopia-test.ts","e07cc4ae-8426-11f1-bb7c-1607ee4eb77e",18,["D",1784553138844],12,"script","const clientId = Deno.env.get(\"OCTOPIA_CLIENT_ID\")!;\nconst clientSecret = Deno.env.get(\"OCTOPIA_CLIENT_SECRET\")!;\nconst sellerId = Deno.env.get(\"OCTOPIA_SELLER_ID\")!;\nconst relaySecret = Deno.env.get(\"RELAY_SHARED_SECRET\")!;\n\nconst tokenResp = await fetch(\n \"https://auth.octopia-io.net/auth/realms/maas/protocol/openid-connect/token\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, grant_type: \"client_credentials\" }),\n },\n);\nconst accessToken = JSON.parse(await tokenResp.text()).access_token;\n\nconst orderId = \"26071600422UAMB\";\nconst minimalPdf = \"%PDF-1.4\\n1 0 obj<>endobj\\n2 0 obj<>endobj\\n3 0 obj<>endobj\\ntrailer<>\\n%%EOF\";\nconst pdf_base64 = btoa(minimalPdf);\n\nconst relayResp = await fetch(\"https://nicolasduchene--99c4956e81f611f1a5591607ee4eb77e.web.val.run\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-relay-secret\": relaySecret },\n body: JSON.stringify({\n mode: \"octopia_upload\",\n order_ref: orderId,\n filename: `${orderId}.pdf`,\n pdf_base64,\n octopia_token: accessToken,\n octopia_seller_id: sellerId,\n }),\n});\nconsole.log(\"relay_octopia_upload\", relayResp.status, await relayResp.text());\n",[],[65],{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":78,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":79},{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":76,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_61":77},["D",1784553138844],[65],["D",1784553112252],[41],"pulls",0,"branches",1,"forks","envVars",{"_89":52,"_91":81},"connections",{"_89":81,"_90":81},"count","unfilledCount","emptyCount","1db8cf4a-ffb9-4c35-9b08-6f4eb2b2e8e8",["D",1784303156653],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Relais multipart upload facture vers Lengow (Mechanic)","imageUrl","userId","9dc0f674-f4af-4f43-82f0-60e027cb7685","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f70ba-a157-71ef-a091-fba3f4e32aa1","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_147":143},"org",{"_11":12,"_140":141,"_142":143,"_102":103,"_144":145,"_146":35},"branch",{"_16":67,"_13":131,"_39":46,"_132":92,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":14,"_139":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nicolas Duchene","avatar","https://lh3.googleusercontent.com/a/ACg8ocIezwTGgRq3xwm4fhgneTl1bk1gYVw-Hs87-EJKQoj3b5WO_2hc=s96-c","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_39":92,"_13":14,"_50":179,"_94":-5,"_95":35,"_96":97,"_98":97,"_99":100,"_101":-5,"_102":103,"_104":43,"_105":38,"_106":-5,"_107":-5,"_108":81,"_109":110,"_111":-5,"_112":-5,"_113":-5,"_114":-5,"_115":116,"_117":116,"_118":119,"_120":119,"_121":119,"_122":116,"_123":116,"_124":180,"_126":181,"_128":182,"_130":35},"tree",[173,174],[173,174],{"_80":81,"_82":83,"_84":81,"_85":171,"_87":172},[167,168],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":78,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":170},{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":76,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_61":169},[65],[41],{"_89":52,"_91":81},{"_89":81,"_90":81},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":177,"_61":178},{"_39":64,"_13":65,"_42":66,"_44":-5,"_45":46,"_47":67,"_49":38,"_50":68,"_16":69,"_53":70,"_55":71,"_57":35,"_58":-5,"_59":175,"_61":176},[],[65],[],[41],["D",1784303156653],{"_11":12,"_147":143},{"_11":12,"_140":141,"_142":143,"_102":103,"_144":145,"_146":35},{"_16":67,"_13":131,"_39":46,"_132":92,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":14,"_139":12},"ctx",{"_124":-5,"_164":216,"_217":218,"_219":220,"_221":35,"_222":35,"_223":35,"_224":38,"_225":-5,"_226":-7,"_227":-7,"_228":81,"_229":35,"_230":35,"_231":-5,"_232":35,"_233":35,"_234":35,"_235":-5},"ENV",{"_187":188,"_189":190,"_191":131,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]