[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_159":160,"_161":162},"routes/_app.x.$handle.$name",{"_16":17,"_20":21,"_85":67,"_86":87,"_65":-7,"_88":-5,"_13":89,"_90":91,"_11":92,"_93":94,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":26,"_101":102,"_103":38,"_104":-5,"_105":-5,"_106":107},"routes/_app.x.$handle.$name.search.$(branch)",{"_11":12,"_13":14,"_15":-5,"_16":17},"files",[],"project",{"_18":19,"_20":21,"_22":23,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":31,"_32":-5,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":50,"_52":53,"_54":53,"_55":53,"_56":50,"_57":50,"_58":59,"_60":61,"_62":63,"_64":26},"query","handle","nicolasduchene","id","1db8cf4a-ffb9-4c35-9b08-6f4eb2b2e8e8","name","lengow-upload-relay","createdAt",["D",1784303156653],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","Relais multipart upload facture vers Lengow (Mechanic)","imageUrl","userId","9dc0f674-f4af-4f43-82f0-60e027cb7685","pinnedFileId","99c4956e-81f6-11f1-a559-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f70ba-a157-71ef-a091-fba3f4e32aa1","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_16":17,"_84":80},"org",{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},"branch",{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"isOwned","version",18,"main","f566c77c-2b3b-4809-986f-12e44a636da1","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nicolas Duchene","avatar","https://lh3.googleusercontent.com/a/ACg8ocIezwTGgRq3xwm4fhgneTl1bk1gYVw-Hs87-EJKQoj3b5WO_2hc=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_18":19,"_20":21,"_22":155,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":31,"_32":-5,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":50,"_52":53,"_54":53,"_55":53,"_56":50,"_57":50,"_58":156,"_60":157,"_62":158,"_64":26},"tree",[146,147],[146,147],"counts",{"_135":42,"_136":137,"_138":42,"_139":140,"_141":142},"contents",[108,109],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_18":127,"_20":128,"_112":36,"_114":-5,"_115":68,"_116":129,"_117":38,"_22":130,"_65":131,"_120":132,"_122":133,"_124":26,"_125":-5,"_86":134},{"_18":110,"_20":111,"_112":113,"_114":-5,"_115":68,"_116":66,"_117":38,"_22":118,"_65":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_86":126},"4e8fde8f-7167-4949-83a1-8b24a91577d4","octopia-test.ts","fileId","e07cc4ae-8426-11f1-bb7c-1607ee4eb77e","parentId","branchId","branchVersion","latest",["D",1784553138844],12,"fileType","script","content","const clientId = Deno.env.get(\"OCTOPIA_CLIENT_ID\")!;\nconst clientSecret = Deno.env.get(\"OCTOPIA_CLIENT_SECRET\")!;\nconst sellerId = Deno.env.get(\"OCTOPIA_SELLER_ID\")!;\nconst relaySecret = Deno.env.get(\"RELAY_SHARED_SECRET\")!;\n\nconst tokenResp = await fetch(\n \"https://auth.octopia-io.net/auth/realms/maas/protocol/openid-connect/token\",\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({ client_id: clientId, client_secret: clientSecret, grant_type: \"client_credentials\" }),\n },\n);\nconst accessToken = JSON.parse(await tokenResp.text()).access_token;\n\nconst orderId = \"26071600422UAMB\";\nconst minimalPdf = \"%PDF-1.4\\n1 0 obj<>endobj\\n2 0 obj<>endobj\\n3 0 obj<>endobj\\ntrailer<>\\n%%EOF\";\nconst pdf_base64 = btoa(minimalPdf);\n\nconst relayResp = await fetch(\"https://nicolasduchene--99c4956e81f611f1a5591607ee4eb77e.web.val.run\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", \"x-relay-secret\": relaySecret },\n body: JSON.stringify({\n mode: \"octopia_upload\",\n order_ref: orderId,\n filename: `${orderId}.pdf`,\n pdf_base64,\n octopia_token: accessToken,\n octopia_seller_id: sellerId,\n }),\n});\nconsole.log(\"relay_octopia_upload\", relayResp.status, await relayResp.text());\n","deleted","label",[111],"b4433d54-152b-4523-9354-3597fb780ec3","main.ts",16,["D",1784553112252],4,"http","// ======================================================================\n// RELAIS \"Lengow / Octopia document upload\" — hébergé sur Val Town\n// ======================================================================\n//\n// POURQUOI CE FICHIER EXISTE\n// ------------------------------------------------------------------\n// L'action HTTP de Mechanic (option \"files\") impose que la MÊME clé JSON\n// serve à la fois de nom de champ multipart (\"name\") ET de nom de fichier\n// (\"filename\") — confirmé en creusant toute la documentation Mechanic\n// (HTTP action, File generators, Files action, générateurs PDF/URL/\n// Base64/Plaintext : aucun ne permet de définir ces deux valeurs\n// séparément).\n//\n// Lengow exige les DEUX à la fois, mais avec des valeurs différentes :\n// - name = \"upload\" (exactement ce mot, sinon \"A mandatory attribute\n// is missing\")\n// - filename = quelque chose qui se termine par \".pdf\" (sinon \"Invalid\n// file format. Expected 'pdf' or 'xml'\")\n//\n// Octopia (Cdiscount), ajouté le 20/07/2026, a une contrainte différente\n// mais qui pose le même problème avec Mechanic seul : le nom de champ\n// multipart est libre, mais le FILENAME doit être EXACTEMENT\n// l'identifiant de commande Octopia (ex. \"26071600422UAMB.pdf\") — confirmé\n// via un test réel sur POST /order-invoice-imports (201, puis statut\n// \"Success\" en relisant l'import). Là encore, Mechanic seul ne permet pas\n// de fixer ce filename indépendamment d'un nom de champ.\n//\n// Ce petit relais HTTP reçoit un simple JSON de Mechanic (pas de\n// multipart), reconstruit lui-même une vraie requête multipart/form-data\n// avec ces deux valeurs indépendantes (grâce à FormData.append(name,\n// blob, filename) qui le permet nativement en JavaScript), puis la\n// transmet au bon service (Lengow ou Octopia) et renvoie sa réponse telle\n// quelle à Mechanic.\n// ======================================================================\n\nfunction decodeBase64ToBlob(pdf_base64: string): Blob {\n const decoded = atob(pdf_base64);\n const binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n return new Blob([binary], { type: \"application/pdf\" });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(JSON.stringify({ error: \"method_not_allowed\" }), {\n status: 405,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Protection par secret partagé ----\n // Toute requête doit fournir le même secret (RELAY_SHARED_SECRET,\n // configuré dans les variables d'environnement de ce val) dans\n // l'en-tête \"x-relay-secret\", sinon elle est rejetée.\n const expectedSecret = Deno.env.get(\"RELAY_SHARED_SECRET\");\n if (expectedSecret) {\n const provided = req.headers.get(\"x-relay-secret\");\n if (provided !== expectedSecret) {\n return new Response(JSON.stringify({ error: \"unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n }\n\n // ---- Lecture et validation du payload envoyé par Mechanic ----\n let payload: Record;\n try {\n payload = await req.json();\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_json\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode diagnostic temporaire (18/07/2026) ----\n // Permet au script Mechanic d'envoyer un simple message de diagnostic\n // (par ex. le résultat de la vérification anti-doublon) sans passer\n // par tout le flux Lengow, pour investiguer les doublons persistants\n // sans dépendre de l'interface Mechanic (Activity/Runs).\n if (payload.mode === \"debug_log\") {\n console.log(\"debug_log\", payload);\n return new Response(JSON.stringify({ ok: true }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Mode \"octopia_upload\" (ajouté le 20/07/2026) ----\n // Upload de la preuve d'achat pour les commandes Cdiscount, via\n // l'endpoint bulk Octopia POST /order-invoice-imports (l'endpoint\n // unitaire /orders/{orderId}/invoice-documents renvoie un 404\n // générique en production malgré la doc — voir investigation du\n // 20/07/2026 : le endpoint bulk, lui, fonctionne, même avec un seul\n // fichier). Le nom de champ multipart est libre côté Octopia ; seul le\n // FILENAME compte, et doit être l'identifiant exact de la commande\n // Octopia (ex. \"26071600422UAMB.pdf\").\n if (payload.mode === \"octopia_upload\") {\n const { order_ref, filename, pdf_base64, octopia_token, octopia_seller_id } =\n payload as Record;\n\n const missingOctopia = [\"order_ref\", \"filename\", \"pdf_base64\", \"octopia_token\", \"octopia_seller_id\"]\n .filter((key) => !(payload as Record)[key]);\n if (missingOctopia.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing: missingOctopia }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n let pdfBlob: Blob;\n try {\n pdfBlob = decodeBase64ToBlob(pdf_base64);\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const form = new FormData();\n // Le nom de champ (\"file1\") est arbitraire pour Octopia — seul le\n // filename ci-dessous (identifiant de commande) compte pour le\n // rattachement de la facture à la bonne commande.\n form.append(\"file1\", pdfBlob, filename);\n\n let octopiaResponse: Response;\n try {\n octopiaResponse = await fetch(\"https://api.octopia-io.net/seller/v2/order-invoice-imports\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${octopia_token}`,\n SellerId: String(octopia_seller_id),\n },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"octopia_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const octopiaText = await octopiaResponse.text();\n console.log(\"octopia_response\", { status: octopiaResponse.status, body: octopiaText, order_ref, filename });\n\n return new Response(\n JSON.stringify({ status: octopiaResponse.status, body: octopiaText }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n }\n\n // ---- Mode par défaut : upload Lengow (comportement historique) ----\n const { order_id, account_id, marketplace, metadata, filename, pdf_base64, lengow_token } =\n payload as Record;\n\n const missing = [\"order_id\", \"account_id\", \"marketplace\", \"metadata\", \"filename\", \"pdf_base64\", \"lengow_token\"]\n .filter((key) => !(payload as Record)[key]);\n\n if (missing.length > 0) {\n return new Response(JSON.stringify({ error: \"missing_required_field\", missing }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ---- Décodage du PDF (reçu en base64 depuis Mechanic) ----\n let binary: Uint8Array;\n try {\n const decoded = atob(pdf_base64);\n binary = new Uint8Array(decoded.length);\n for (let i = 0; i < decoded.length; i++) {\n binary[i] = decoded.charCodeAt(i);\n }\n } catch {\n return new Response(JSON.stringify({ error: \"invalid_base64\" }), {\n status: 400,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const pdfBlob = new Blob([binary], { type: \"application/pdf\" });\n\n // ---- Construction du VRAI multipart/form-data, avec name et filename\n // indépendants — c'est tout l'intérêt de ce relais. ----\n const form = new FormData();\n form.append(\"order_id\", String(order_id));\n form.append(\"account_id\", String(account_id));\n form.append(\"marketplace\", String(marketplace));\n form.append(\"metadata\", typeof metadata === \"string\" ? metadata : JSON.stringify(metadata));\n form.append(\"upload\", pdfBlob, filename); // name=\"upload\", filename=ex. \"preuve-achat-4445.pdf\"\n\n // ---- Envoi à Lengow ----\n let lengowResponse: Response;\n try {\n lengowResponse = await fetch(\"https://api.lengow.io/v3.0/document/\", {\n method: \"POST\",\n headers: { Authorization: String(lengow_token) },\n body: form,\n });\n } catch (err) {\n return new Response(JSON.stringify({ error: \"lengow_fetch_failed\", detail: String(err) }), {\n status: 502,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n const text = await lengowResponse.text();\n\n // ---- Journalisation temporaire (17/07/2026) pour diagnostiquer sans\n // avoir besoin de l'interface Mechanic — consultable via les\n // logs de ce val sur val.town. ----\n console.log(\"lengow_response\", { status: lengowResponse.status, body: text, order_id, marketplace, filename });\n\n // ---- On renvoie à Mechanic le statut ET le corps bruts de la réponse\n // Lengow, pour que le script Mechanic puisse les interpréter\n // normalement (comme s'il avait appelé Lengow directement). ----\n return new Response(\n JSON.stringify({ status: lengowResponse.status, body: text }),\n { status: 200, headers: { \"Content-Type\": \"application/json\" } },\n );\n}\n",[128],"pulls","branches",1,"forks","envVars",{"_143":131,"_145":42},"connections",{"_143":42,"_144":42},"count","unfilledCount","emptyCount",{"_18":127,"_20":128,"_112":36,"_114":-5,"_115":68,"_116":129,"_117":38,"_22":152,"_65":131,"_120":132,"_122":133,"_124":26,"_125":-5,"_149":153,"_86":154},{"_18":110,"_20":111,"_112":113,"_114":-5,"_115":68,"_116":66,"_117":38,"_22":148,"_65":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_149":150,"_86":151},["D",1784553138844],"children",[],[111],["D",1784553112252],[],[128],["D",1784303156653],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_105":192,"_193":194,"_195":196,"_197":26,"_198":26,"_199":26,"_200":38,"_201":-5,"_202":-7,"_203":-7,"_204":42,"_205":26,"_206":26,"_207":-5,"_208":26,"_209":26,"_210":26,"_211":-5},"ENV",{"_163":164,"_165":166,"_167":67,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]