[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_164":165,"_166":167},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_90":-7,"_91":92,"_29":-7,"_93":-5,"_15":94,"_95":96,"_97":98,"_99":100,"_101":102,"_103":-5,"_104":-5,"_105":-5,"_106":38,"_107":108,"_109":50,"_110":-5,"_111":-5,"_112":113},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","nicolasduchene","name","lengow-upload-relay","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62,"_63":62,"_64":65,"_66":65,"_67":65,"_68":62,"_69":62,"_70":71,"_72":73,"_74":75,"_76":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","f566c77c-2b3b-4809-986f-12e44a636da1","createdAt",["D",1784303156658],"updatedAt",["D",1784553138844],"main","projectId","1db8cf4a-ffb9-4c35-9b08-6f4eb2b2e8e8","version",18,"forkedBranchId","forkedBranchVersion","lockfileKey","1784553139203-esm.town_v_nicolasduchene_lengow-upload-relay@18-main","deletedAt",["D",1784303156653],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","Relais multipart upload facture vers Lengow (Mechanic)","imageUrl","userId","9dc0f674-f4af-4f43-82f0-60e027cb7685","pinnedFileId","99c4956e-81f6-11f1-a559-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f70ba-a157-71ef-a091-fba3f4e32aa1","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_89":85},"org",{"_11":12,"_82":83,"_84":85,"_45":46,"_86":87,"_88":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nicolas Duchene","avatar","https://lh3.googleusercontent.com/a/ACg8ocIezwTGgRq3xwm4fhgneTl1bk1gYVw-Hs87-EJKQoj3b5WO_2hc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":160,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":-5,"_53":54,"_55":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62,"_63":62,"_64":65,"_66":65,"_67":65,"_68":62,"_69":62,"_70":161,"_72":162,"_74":163,"_76":38},"tree",[151,152],"files",[151,152],"counts",{"_141":54,"_17":142,"_143":54,"_144":145,"_146":147},"contents",[114,115],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_20":133,"_13":134,"_118":48,"_120":-5,"_121":21,"_122":135,"_123":50,"_22":136,"_29":137,"_126":138,"_128":139,"_130":38,"_131":-5,"_91":140},{"_20":116,"_13":117,"_118":119,"_120":-5,"_121":21,"_122":30,"_123":50,"_22":124,"_29":125,"_126":127,"_128":129,"_130":38,"_131":-5,"_91":132},"4e8fde8f-7167-4949-83a1-8b24a91577d4","octopia-test.ts","fileId","e07cc4ae-8426-11f1-bb7c-1607ee4eb77e","parentId","branchId","branchVersion","latest",["D",1784553138844],12,"fileType","script","content","const clientId = Deno.env.get(\"OCTOPIA_CLIENT_ID\")!;\nconst clientSecret = Deno.env.get(\"OCTOPIA_CLIENT_SECRET\")!;\nconst sellerId = Deno.env.get(\"OCTOPIA_SELLER_ID\")!;\nconst relaySecret = Deno.env.get(\"RELAY_SHARED_SECRET\")!;\n\nconst tokenResp = await fetch(\n \"https://auth.octopia-io.net/auth/realms/maas/protocol/openid-connect/token\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, grant_type: \"client_credentials\" }),\n },\n);\nconst accessToken = JSON.parse(await tokenResp.text()).access_token;\n\nconst orderId = \"26071600422UAMB\";\nconst minimalPdf = \"%PDF-1.4\\n1 0 obj<>endobj\\n2 0 obj<>endobj\\n3 0 obj<>endobj\\ntrailer<>\\n%%EOF\";\nconst pdf_base64 = btoa(minimalPdf);\n\nconst relayResp = await fetch(\"https://nicolasduchene--99c4956e81f611f1a5591607ee4eb77e.web.val.run\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-relay-secret\": relaySecret },\n body: JSON.stringify({\n mode: \"octopia_upload\",\n order_ref: orderId,\n filename: `${orderId}.pdf`,\n pdf_base64,\n octopia_token: accessToken,\n octopia_seller_id: sellerId,\n }),\n});\nconsole.log(\"relay_octopia_upload\", relayResp.status, await relayResp.text());\n","deleted","label",[117],"b4433d54-152b-4523-9354-3597fb780ec3","main.ts",16,["D",1784553112252],4,"http","// ======================================================================\n// RELAIS \"Lengow / Octopia document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Octopia (Cdiscount), ajouté le 20/07/2026, a une contrainte différente\n// mais qui pose le même problème avec Mechanic seul : le nom de champ\n// multipart est libre, mais le FILENAME doit être EXACTEMENT\n// l'identifiant de commande Octopia (ex. \"26071600422UAMB.pdf\") — confirmé\n// via un test réel sur POST /order-invoice-imports (201, puis statut\n// \"Success\" en relisant l'import). Là encore, Mechanic seul ne permet pas\n// de fixer ce filename indépendamment d'un nom de champ.\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet au bon service (Lengow ou Octopia) et renvoie sa réponse telle\n// quelle à Mechanic.\n// ======================================================================\n\nfunction decodeBase64ToBlob(pdf_base64: string): Blob {\n const decoded = atob(pdf_base64);\n const binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n return new Blob([binary], { type: \"application/pdf\" });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode diagnostic temporaire (18/07/2026) ----\n // Permet au script Mechanic d'envoyer un simple message de diagnostic\n // (par ex. le résultat de la vérification anti-doublon) sans passer\n // par tout le flux Lengow, pour investiguer les doublons persistants\n // sans dépendre de l'interface Mechanic (Activity/Runs).\n if (payload.mode === \"debug_log\") {\n console.log(\"debug_log\", payload);\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode \"octopia_upload\" (ajouté le 20/07/2026) ----\n // Upload de la preuve d'achat pour les commandes Cdiscount, via\n // l'endpoint bulk Octopia POST /order-invoice-imports (l'endpoint\n // unitaire /orders/{orderId}/invoice-documents renvoie un 404\n // générique en production malgré la doc — voir investigation du\n // 20/07/2026 : le endpoint bulk, lui, fonctionne, même avec un seul\n // fichier). Le nom de champ multipart est libre côté Octopia ; seul le\n // FILENAME compte, et doit être l'identifiant exact de la commande\n // Octopia (ex. \"26071600422UAMB.pdf\").\n if (payload.mode === \"octopia_upload\") {\n const { order_ref, filename, pdf_base64, octopia_token, octopia_seller_id } =\n payload as Record;\n\n const missingOctopia = [\"order_ref\", \"filename\", \"pdf_base64\", \"octopia_token\", \"octopia_seller_id\"]\n .filter((key) => !(payload as Record)[key]);\n if (missingOctopia.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing: missingOctopia }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n let pdfBlob: Blob;\n try {\n pdfBlob = decodeBase64ToBlob(pdf_base64);\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const form = new FormData();\n // Le nom de champ (\"file1\") est arbitraire pour Octopia — seul le\n // filename ci-dessous (identifiant de commande) compte pour le\n // rattachement de la facture à la bonne commande.\n form.append(\"file1\", pdfBlob, filename);\n\n let octopiaResponse: Response;\n try {\n octopiaResponse = await fetch(\"https://api.octopia-io.net/seller/v2/order-invoice-imports\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${octopia_token}`,\n SellerId: String(octopia_seller_id),\n },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"octopia_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const octopiaText = await octopiaResponse.text();\n console.log(\"octopia_response\", { status: octopiaResponse.status, body: octopiaText, order_ref, filename });\n\n return new Response(\n JSON.stringify({ status: octopiaResponse.status, body: octopiaText }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ---- Mode par défaut : upload Lengow (comportement historique) ----\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n",[134],"pulls",1,"forks","envVars",{"_148":137,"_150":54},"connections",{"_148":54,"_149":54},"count","unfilledCount","emptyCount",{"_20":133,"_13":134,"_118":48,"_120":-5,"_121":21,"_122":135,"_123":50,"_22":157,"_29":137,"_126":138,"_128":139,"_130":38,"_131":-5,"_154":158,"_91":159},{"_20":116,"_13":117,"_118":119,"_120":-5,"_121":21,"_122":30,"_123":50,"_22":153,"_29":125,"_126":127,"_128":129,"_130":38,"_131":-5,"_154":155,"_91":156},["D",1784553138844],"children",[],[117],["D",1784553112252],[],[134],["D",1784303156653],{"_11":12,"_89":85},{"_11":12,"_82":83,"_84":85,"_45":46,"_86":87,"_88":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_111":197,"_198":199,"_200":201,"_202":38,"_203":38,"_204":38,"_205":50,"_206":-5,"_207":-7,"_208":-7,"_209":54,"_210":38,"_211":38,"_212":-5,"_213":38,"_214":38,"_215":38,"_216":-5},"ENV",{"_168":169,"_170":171,"_172":26,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1