[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_173":174,"_175":176},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_131":-5,"_20":132,"_22":133,"_134":135,"_136":137,"_25":138,"_24":-5,"_139":-5,"_140":-5,"_141":54,"_142":143,"_144":45,"_145":-5,"_146":-5,"_147":148},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","nicolasduchene","name","lengow-upload-relay","branchName","main","version","path","","project",{"_34":75,"_13":14,"_46":76,"_77":-5,"_78":54,"_79":80,"_81":80,"_82":83,"_84":-5,"_85":86,"_87":59,"_88":45,"_89":-5,"_90":-5,"_91":92,"_93":94,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":100,"_101":100,"_102":103,"_104":103,"_105":103,"_106":100,"_107":100,"_108":109,"_110":111,"_112":113,"_114":54},"tree",[66,67],"file","contents",[32,33],"upstream","pull","ahead","behind","envVars",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_18":65},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":56},"id","4e8fde8f-7167-4949-83a1-8b24a91577d4","octopia-test.ts","fileId","e07cc4ae-8426-11f1-bb7c-1607ee4eb77e","parentId","branchId","f566c77c-2b3b-4809-986f-12e44a636da1","branchVersion",18,"latest",true,"createdAt",["D",1784553138844],12,"fileType","script","content","const clientId = Deno.env.get(\"OCTOPIA_CLIENT_ID\")!;\nconst clientSecret = Deno.env.get(\"OCTOPIA_CLIENT_SECRET\")!;\nconst sellerId = Deno.env.get(\"OCTOPIA_SELLER_ID\")!;\nconst relaySecret = Deno.env.get(\"RELAY_SHARED_SECRET\")!;\n\nconst tokenResp = await fetch(\n \"https://auth.octopia-io.net/auth/realms/maas/protocol/openid-connect/token\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, grant_type: \"client_credentials\" }),\n },\n);\nconst accessToken = JSON.parse(await tokenResp.text()).access_token;\n\nconst orderId = \"26071600422UAMB\";\nconst minimalPdf = \"%PDF-1.4\\n1 0 obj<>endobj\\n2 0 obj<>endobj\\n3 0 obj<>endobj\\ntrailer<>\\n%%EOF\";\nconst pdf_base64 = btoa(minimalPdf);\n\nconst relayResp = await fetch(\"https://nicolasduchene--99c4956e81f611f1a5591607ee4eb77e.web.val.run\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-relay-secret\": relaySecret },\n body: JSON.stringify({\n mode: \"octopia_upload\",\n order_ref: orderId,\n filename: `${orderId}.pdf`,\n pdf_base64,\n octopia_token: accessToken,\n octopia_seller_id: sellerId,\n }),\n});\nconsole.log(\"relay_octopia_upload\", relayResp.status, await relayResp.text());\n","deleted",false,"label",[36],"b4433d54-152b-4523-9354-3597fb780ec3","main.ts","99c4956e-81f6-11f1-a559-1607ee4eb77e",16,["D",1784553112252],4,"http","// ======================================================================\n// RELAIS \"Lengow / Octopia document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Octopia (Cdiscount), ajouté le 20/07/2026, a une contrainte différente\n// mais qui pose le même problème avec Mechanic seul : le nom de champ\n// multipart est libre, mais le FILENAME doit être EXACTEMENT\n// l'identifiant de commande Octopia (ex. \"26071600422UAMB.pdf\") — confirmé\n// via un test réel sur POST /order-invoice-imports (201, puis statut\n// \"Success\" en relisant l'import). Là encore, Mechanic seul ne permet pas\n// de fixer ce filename indépendamment d'un nom de champ.\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet au bon service (Lengow ou Octopia) et renvoie sa réponse telle\n// quelle à Mechanic.\n// ======================================================================\n\nfunction decodeBase64ToBlob(pdf_base64: string): Blob {\n const decoded = atob(pdf_base64);\n const binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n return new Blob([binary], { type: \"application/pdf\" });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode diagnostic temporaire (18/07/2026) ----\n // Permet au script Mechanic d'envoyer un simple message de diagnostic\n // (par ex. le résultat de la vérification anti-doublon) sans passer\n // par tout le flux Lengow, pour investiguer les doublons persistants\n // sans dépendre de l'interface Mechanic (Activity/Runs).\n if (payload.mode === \"debug_log\") {\n console.log(\"debug_log\", payload);\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode \"octopia_upload\" (ajouté le 20/07/2026) ----\n // Upload de la preuve d'achat pour les commandes Cdiscount, via\n // l'endpoint bulk Octopia POST /order-invoice-imports (l'endpoint\n // unitaire /orders/{orderId}/invoice-documents renvoie un 404\n // générique en production malgré la doc — voir investigation du\n // 20/07/2026 : le endpoint bulk, lui, fonctionne, même avec un seul\n // fichier). Le nom de champ multipart est libre côté Octopia ; seul le\n // FILENAME compte, et doit être l'identifiant exact de la commande\n // Octopia (ex. \"26071600422UAMB.pdf\").\n if (payload.mode === \"octopia_upload\") {\n const { order_ref, filename, pdf_base64, octopia_token, octopia_seller_id } =\n payload as Record;\n\n const missingOctopia = [\"order_ref\", \"filename\", \"pdf_base64\", \"octopia_token\", \"octopia_seller_id\"]\n .filter((key) => !(payload as Record)[key]);\n if (missingOctopia.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing: missingOctopia }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n let pdfBlob: Blob;\n try {\n pdfBlob = decodeBase64ToBlob(pdf_base64);\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const form = new FormData();\n // Le nom de champ (\"file1\") est arbitraire pour Octopia — seul le\n // filename ci-dessous (identifiant de commande) compte pour le\n // rattachement de la facture à la bonne commande.\n form.append(\"file1\", pdfBlob, filename);\n\n let octopiaResponse: Response;\n try {\n octopiaResponse = await fetch(\"https://api.octopia-io.net/seller/v2/order-invoice-imports\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${octopia_token}`,\n SellerId: String(octopia_seller_id),\n },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"octopia_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const octopiaText = await octopiaResponse.text();\n console.log(\"octopia_response\", { status: octopiaResponse.status, body: octopiaText, order_ref, filename });\n\n return new Response(\n JSON.stringify({ status: octopiaResponse.status, body: octopiaText }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ---- Mode par défaut : upload Lengow (comportement historique) ----\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n",[58],{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":72,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_69":73,"_18":74},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":68,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_69":70,"_18":71},["D",1784553138844],"children",[],[36],["D",1784553112252],[],[58],"1db8cf4a-ffb9-4c35-9b08-6f4eb2b2e8e8",["D",1784303156653],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Relais multipart upload facture vers Lengow (Mechanic)","imageUrl","userId","9dc0f674-f4af-4f43-82f0-60e027cb7685","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f70ba-a157-71ef-a091-fba3f4e32aa1","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_130":126},"org",{"_11":12,"_123":124,"_125":126,"_85":86,"_127":128,"_129":54},"branch",{"_17":43,"_13":16,"_34":41,"_115":75,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":14,"_122":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nicolas Duchene","avatar","https://lh3.googleusercontent.com/a/ACg8ocIezwTGgRq3xwm4fhgneTl1bk1gYVw-Hs87-EJKQoj3b5WO_2hc=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":75,"_13":14,"_46":169,"_77":-5,"_78":54,"_79":80,"_81":80,"_82":83,"_84":-5,"_85":86,"_87":59,"_88":45,"_89":-5,"_90":-5,"_91":92,"_93":94,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":100,"_101":100,"_102":103,"_104":103,"_105":103,"_106":100,"_107":100,"_108":170,"_110":171,"_112":172,"_114":54},[163,164],"files",[163,164],"counts",{"_153":92,"_154":155,"_156":92,"_31":157,"_158":159},[149,150],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":61,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_18":152},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_18":151},[36],[58],"pulls","branches",1,"forks",{"_160":62,"_162":92},"connections",{"_160":92,"_161":92},"count","unfilledCount","emptyCount",{"_34":57,"_13":58,"_37":59,"_39":-5,"_40":41,"_42":60,"_44":45,"_46":72,"_17":62,"_49":63,"_51":64,"_53":54,"_55":-5,"_69":167,"_18":168},{"_34":35,"_13":36,"_37":38,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":68,"_17":48,"_49":50,"_51":52,"_53":54,"_55":-5,"_69":165,"_18":166},[],[36],[],[58],["D",1784303156653],{"_11":12,"_130":126},{"_11":12,"_123":124,"_125":126,"_85":86,"_127":128,"_129":54},{"_17":43,"_13":16,"_34":41,"_115":75,"_116":-5,"_117":-5,"_118":-5,"_119":-5,"_120":-5,"_121":14,"_122":12},"ctx",{"_108":-5,"_146":206,"_207":208,"_209":210,"_211":54,"_212":54,"_213":54,"_214":45,"_215":-5,"_216":-7,"_217":-7,"_218":92,"_219":54,"_220":54,"_221":-5,"_222":54,"_223":54,"_224":54,"_225":-5},"ENV",{"_177":178,"_179":180,"_181":16,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]