[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","99c4956e-81f6-11f1-a559-1607ee4eb77e","name","fileType","http","content","// ======================================================================\n// RELAIS \"Lengow document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Or Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet à Lengow et renvoie sa réponse telle quelle à Mechanic.\n// ======================================================================\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n","// ======================================================================\n// RELAIS \"Lengow document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Or Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet à Lengow et renvoie sa réponse telle quelle à Mechanic.\n// ======================================================================\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode diagnostic temporaire (18/07/2026) ----\n // Permet au script Mechanic d'envoyer un simple message de diagnostic\n // (par ex. le résultat de la vérification anti-doublon) sans passer\n // par tout le flux Lengow, pour investiguer les doublons persistants\n // sans dépendre de l'interface Mechanic (Activity/Runs).\n if ((payload as Record).mode === \"debug_log\") {\n console.log(\"debug_log\", payload);\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n","createdAt",["D",1784363763704],"branchVersion","branchId","f566c77c-2b3b-4809-986f-12e44a636da1","id","1db8cf4a-ffb9-4c35-9b08-6f4eb2b2e8e8","lengow-upload-relay",["D",1784303156653],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Relais multipart upload facture vers Lengow (Mechanic)","imageUrl","9dc0f674-f4af-4f43-82f0-60e027cb7685","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f70ba-a157-71ef-a091-fba3f4e32aa1","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","nicolasduchene","handle","displayName","Nicolas Duchene","avatar","https://lh3.googleusercontent.com/a/ACg8ocIezwTGgRq3xwm4fhgneTl1bk1gYVw-Hs87-EJKQoj3b5WO_2hc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":152,"_80":153,"_82":154,"_84":25},"tree",[146],"files",[146],"counts",{"_135":62,"_136":137,"_138":62,"_139":140,"_141":142},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"9ed50337-4258-4781-af3b-d21c9aeb9df6","parentId","latest",["D",1784363763704],3,"label",[28],"pulls","branches",1,"forks","envVars",{"_143":14,"_145":62},"connections",{"_143":62,"_144":62},"count","unfilledCount","emptyCount",{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":147,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_148":149,"_27":150},["D",1784363763704],"children",[],[28],["D",1784303156653],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_124":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":58,"_197":-5,"_198":-7,"_199":-7,"_200":62,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":86,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4