feat: marketplace, économie à crédits, perks temps réel & pubs réelles

Transforme XIP en réseau social satirique complet : monnaie fictive,
marketplace, cosmétiques visibles de tous, messages riches sandboxés,
pubs pilotées par les données, et tous les compteurs mock rendus réels.

Backend (Bun + Hono + Prisma + Redis)
- Économie par IP : modèles Wallet/Purchase/Entitlement, lib/wallet.ts
  avec spend() atomique (point unique du paywall) + recharge gratuite.
- isLocalhost() → mode gratuit (README « si localhost: pas de paywall »).
- Marketplace : lib/catalog.ts (achat transactionnel, stock limité,
  limites par IP) + routes/shop.ts ; 10 produits seedés (idempotent).
- Perks : lib/perks.ts (cache Redis busté à l'achat) ; authorPerks
  injecté dans les payloads messages + endpoint batch /api/perks ;
  frame WS « perks » global pour MAJ live des messages déjà affichés.
- Messages riches : Message.richMode/richContent, gating par entitlement.
- Pubs réelles : modèle Ad seedé avec les 4 pubs (ex-hardcodées),
  rotation par API, comptage d'impressions réel + réconciliation.
- WebSocket : IP capturée par connexion → broadcastToIp / broadcast ;
  frames wallet/perks/ads/alert.
- Pièces jointes : lib/storage.ts (UUID, jamais exécuté) + routes/uploads.ts
  (limite 1 Mo sauf déblocage/localhost, Content-Disposition: attachment).
- Alerte audio : routes/alert.ts (cooldown serveur Redis NX, clamp durée).
- Compteur « argent extorqué » réel : impressions×CPM + crédits dépensés.

Frontend (Vue 3 + Vite)
- /shop : ShopPage + ProductCard fidèles aux maquettes ; composables
  useWallet/useShop/usePerks/useAds/useAttachments/useAlert.
- UI de réponse (bannière + sous-threads), solde + lien Shop dans le header.
- Perks rendus : Style Doré (or), Pets autour de l'IP, NoAds masque les pubs.
- RichContent.vue : iframe sandbox verrouillée (htmlcss sans script ;
  js allow-scripts seul, jamais allow-same-origin) + CSP.
- AdBand/InlineCasinoAd pilotés par l'API ; barre de saisie avec 📎,
  compteur de caractères, composer riche et bouton alerte.

Infra
- Migration economy_ads_attachments_rich ; seed idempotent (produits+pubs).
- vite.config : usePolling (HMR fiable sur /mnt/c via WSL).
- backend/.gitignore : uploads/.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
This commit is contained in:
2026-05-30 22:47:23 +02:00
parent 97f6fdaeae
commit cf239ab95f
46 changed files with 4080 additions and 198 deletions

View File

@@ -1,49 +1,48 @@
<!-- Bande publicitaire gauche (130 px) -->
<!-- Bande publicitaire gauche (130 px) pilotée par l'inventaire de pubs réel -->
<template>
<aside class="ad-band">
<p class="ad-label">PUBLICITÉ</p>
<!-- NOVA STORE -->
<div class="ad-card">
<div class="ad-header ad-header--blue">
<p class="ad-brand ad-brand--blue">NOVA</p>
<p class="ad-sub">STORE 2026</p>
<component
:is="ad.url ? 'a' : 'div'"
v-for="ad in ads"
:key="ad.id"
class="ad-card"
:href="ad.url || undefined"
target="_blank"
rel="noopener noreferrer nofollow"
>
<div class="ad-header" :class="`ad-header--${ad.tone}`">
<p class="ad-brand" :class="`ad-brand--${ad.tone}`">{{ ad.brand }}</p>
<p v-if="ad.subtitle" class="ad-sub">{{ ad.subtitle }}</p>
</div>
<div class="ad-body">
<span class="ad-icon">🛒</span>
<div class="ad-body" :class="`ad-body--${ad.tone}`">
<span class="ad-icon">{{ ad.icon || '📢' }}</span>
</div>
<p class="ad-cta ad-cta--blue">DÉCOUVRIR</p>
<p class="ad-url">nova-store.io</p>
</div>
<!-- APEX GEAR -->
<div class="ad-card">
<div class="ad-header ad-header--green">
<p class="ad-brand ad-brand--green">APEX GEAR</p>
<p class="ad-sub">Gaming Setup</p>
</div>
<div class="ad-body ad-body--green">
<span class="ad-icon">🎮</span>
</div>
<p class="ad-cta ad-cta--green">ACHETER</p>
<p class="ad-url">apex-gear.com</p>
</div>
<!-- SHIELDVPN -->
<div class="ad-card">
<div class="ad-header ad-header--purple">
<p class="ad-brand ad-brand--purple">SHIELDVPN</p>
<p class="ad-sub">Sécurité totale</p>
</div>
<div class="ad-body ad-body--purple">
<span class="ad-icon">🔒</span>
</div>
<p class="ad-cta ad-cta--purple">ESSAI GRATUIT</p>
<p class="ad-url">shieldvpn.net</p>
</div>
<p v-if="ad.cta" class="ad-cta" :class="`ad-cta--${ad.tone}`">{{ ad.cta }}</p>
<p v-if="ad.url" class="ad-url">{{ prettyUrl(ad.url) }}</p>
</component>
</aside>
</template>
<script setup lang="ts">
import { onMounted, watch } from 'vue';
import { useAds } from '@/composables/useAds';
const { ads, fetchAds, reportImpression } = useAds('band');
function prettyUrl(url: string): string {
return url.replace(/^https?:\/\//, '').replace(/\/$/, '');
}
// Report one impression per ad each time the set (re)loads.
watch(ads, (list) => {
for (const a of list) reportImpression(a.id);
});
onMounted(fetchAds);
</script>
<style scoped>
.ad-band {
width: 130px;
@@ -82,6 +81,8 @@
.ad-header--blue { background: #161620; }
.ad-header--green { background: #101614; }
.ad-header--purple { background: #16101a; }
.ad-header--user { background: #1a1606; }
.ad-header--casino { background: #1a0606; }
.ad-brand {
font-family: Arial, sans-serif;
@@ -92,6 +93,8 @@
.ad-brand--blue { color: #5555cc; text-shadow: 0 0 8px #4444aa; }
.ad-brand--green { color: #33aa55; text-shadow: 0 0 8px #225533; }
.ad-brand--purple { color: #9944dd; text-shadow: 0 0 8px #6622aa; }
.ad-brand--user { color: #ffcc44; text-shadow: 0 0 8px #aa8822; }
.ad-brand--casino { color: #ff5533; text-shadow: 0 0 8px #aa2200; }
.ad-sub {
font-family: Arial, sans-serif;
@@ -108,6 +111,8 @@
}
.ad-body--green { background: #0e160e; }
.ad-body--purple { background: #110e16; }
.ad-body--user { background: #16140e; }
.ad-body--casino { background: #160e0e; }
.ad-icon { font-size: 24px; }
@@ -119,10 +124,15 @@
.ad-cta--blue { color: #3a3a88; }
.ad-cta--green { color: #33aa55; }
.ad-cta--purple { color: #9944dd; }
.ad-cta--user { color: #ffcc44; }
.ad-cta--casino { color: #ff5533; }
.ad-url {
font-family: Arial, sans-serif;
font-size: 8px;
color: #282840;
}
/* Carte cliquable : pas de soulignement, héritage couleur */
a.ad-card { text-decoration: none; display: block; }
</style>

View File

@@ -0,0 +1,50 @@
<!-- Tweened number display (easeOutCubic) for live-updating stats -->
<template>
<span>{{ formatted }}</span>
</template>
<script setup lang="ts">
import { ref, computed, watch, onUnmounted } from 'vue';
const props = withDefaults(
defineProps<{ value: number; decimals?: number; duration?: number }>(),
{ decimals: 0, duration: 600 },
);
const display = ref(props.value);
let raf = 0;
let startVal = props.value;
let startTime = 0;
let target = props.value;
function animate(to: number): void {
cancelAnimationFrame(raf);
startVal = display.value;
target = to;
startTime = performance.now();
const step = (now: number) => {
const t = Math.min(1, (now - startTime) / props.duration);
const eased = 1 - Math.pow(1 - t, 3); // easeOutCubic
display.value = startVal + (target - startVal) * eased;
if (t < 1) raf = requestAnimationFrame(step);
else display.value = target;
};
raf = requestAnimationFrame(step);
}
watch(
() => props.value,
(v) => {
if (Number.isFinite(v)) animate(v);
},
);
const formatted = computed(() =>
display.value.toLocaleString('fr-FR', {
minimumFractionDigits: props.decimals,
maximumFractionDigits: props.decimals,
}),
);
onUnmounted(() => cancelAnimationFrame(raf));
</script>

View File

@@ -7,12 +7,26 @@
<span class="online-dot" aria-hidden="true" />
<span class="online-count">{{ connectedCount }} connectés</span>
</div>
<div class="channel-badge"># général</div>
<div class="header-right">
<span v-if="ip" class="me-ip" :title="'Ton pseudo = ton IP'">{{ ip }}</span>
<span class="balance" :class="{ 'balance--free': freeMode }" title="Tes crédits XIP">
<span class="balance-coin"></span>
<span class="balance-val">{{ displayBalance() }}</span>
<span class="balance-unit">cr</span>
</span>
<router-link to="/shop" class="shop-link">🛒 Shop</router-link>
<span class="channel-badge"># général</span>
</div>
</header>
</template>
<script setup lang="ts">
import { useWallet } from '@/composables/useWallet';
defineProps<{ connectedCount: number }>();
const { ip, freeMode, displayBalance } = useWallet();
</script>
<style scoped>
@@ -33,6 +47,12 @@ defineProps<{ connectedCount: number }>();
gap: 8px;
}
.header-right {
display: flex;
align-items: center;
gap: 12px;
}
.xip-title {
font-family: Arial, sans-serif;
font-size: 18px;
@@ -62,6 +82,44 @@ defineProps<{ connectedCount: number }>();
color: #33ff66;
}
.me-ip {
font-family: 'Courier New', monospace;
font-size: 11px;
color: #5566aa;
}
.balance {
display: inline-flex;
align-items: baseline;
gap: 4px;
background: #131322;
border: 1px solid #2a2a44;
border-radius: 12px;
padding: 3px 10px;
font-family: 'Courier New', monospace;
}
.balance-coin { color: #ffcc44; font-size: 11px; }
.balance-val { color: #ffdd66; font-size: 13px; font-weight: bold; text-shadow: 0 0 8px #ffaa0055; }
.balance-unit { color: #886633; font-size: 9px; }
.balance--free .balance-val { color: #33ff99; text-shadow: 0 0 8px #00ff6655; }
.balance--free .balance-coin { color: #33ff99; }
.shop-link {
font-family: Arial, sans-serif;
font-size: 12px;
font-weight: bold;
color: #00eeff;
text-decoration: none;
border: 1px solid #00eeff55;
border-radius: 12px;
padding: 4px 12px;
transition: background 0.15s, box-shadow 0.15s;
}
.shop-link:hover {
background: #00eeff14;
box-shadow: 0 0 10px #00ccff44;
}
.channel-badge {
background: #131320;
border: 1px solid #222233;

View File

@@ -1,14 +1,14 @@
<!-- Pub casino néon : overlay dans le feed (identique à la maquette SVG) -->
<!-- Pub casino néon : overlay dans le feed, pilotée par l'inventaire de pubs -->
<template>
<div class="casino">
<div v-if="ad" class="casino">
<div class="casino-head">
<p class="casino-title"> CASINO LUCKY </p>
<p class="casino-title">♠ {{ ad.brand }} ♠</p>
<p class="casino-subtitle">OFFRE EXCLUSIVE</p>
</div>
<div class="casino-body">
<p class="bonus">+200%</p>
<p class="bonus-sub">sur votre 1er dépôt &bull; 500&euro; max</p>
<p class="bonus-sub">{{ ad.subtitle || 'sur votre 1er dépôt 500 max' }}</p>
<div class="slots">
<span class="suit suit--diamond">♦</span>
@@ -18,14 +18,29 @@
<span class="suit suit--spade">♠</span>
</div>
<button class="casino-cta">
JOUER MAINTENANT &rarr;
</button>
<p class="disclaimer">18+ &bull; Jeu responsable &bull; casino-lucky.bet</p>
<a class="casino-cta" :href="ad.url || '#'" target="_blank" rel="noopener noreferrer nofollow">
{{ ad.cta || 'JOUER MAINTENANT' }} &rarr;
</a>
<p class="disclaimer">18+ &bull; Jeu responsable &bull; {{ prettyUrl(ad.url) }}</p>
</div>
</div>
</template>
<script setup lang="ts">
import { computed, onMounted, watch } from 'vue';
import { useAds } from '@/composables/useAds';
const { ads, fetchAds, reportImpression } = useAds('casino');
const ad = computed(() => ads.value[0] ?? null);
function prettyUrl(url?: string | null): string {
return (url || 'casino-lucky.bet').replace(/^https?:\/\//, '').replace(/\/$/, '');
}
watch(ad, (a) => { if (a) reportImpression(a.id); });
onMounted(fetchAds);
</script>
<style scoped>
.casino {
width: 248px;
@@ -107,7 +122,9 @@
/* ── CTA ── */
.casino-cta {
display: block;
width: 100%;
box-sizing: border-box;
padding: 8px 0;
background: #220000;
border: 1.5px solid #ff2200;
@@ -117,6 +134,8 @@
font-size: 13px;
font-weight: bold;
cursor: pointer;
text-align: center;
text-decoration: none;
text-shadow: 0 0 6px #ff2200;
box-shadow: 0 0 8px #ff220044;
transition: box-shadow 0.15s;

View File

@@ -1,49 +0,0 @@
<!-- Bouton hamburger (panneau latéral droit, 35 px) -->
<template>
<div class="menu-toggle">
<button class="hamburger" aria-label="Menu" @click="$emit('toggle')">
<span />
<span />
<span />
</button>
</div>
</template>
<script setup lang="ts">
defineEmits<{ toggle: [] }>();
</script>
<style scoped>
.menu-toggle {
width: 35px;
flex-shrink: 0;
background: #0c0c10;
border-left: 1px solid #1a1a22;
display: flex;
justify-content: center;
padding-top: 12px;
}
.hamburger {
display: flex;
flex-direction: column;
gap: 6px;
background: none;
border: none;
cursor: pointer;
padding: 4px;
}
.hamburger span {
display: block;
width: 18px;
height: 2px;
background: #3a3a55;
border-radius: 1px;
transition: background 0.15s;
}
.hamburger:hover span {
background: #6666aa;
}
</style>

View File

@@ -0,0 +1,80 @@
<!-- Renders a message's attachments: image previews inline, everything else as a download link -->
<template>
<div class="attachments">
<template v-for="a in attachments" :key="a.id">
<a
v-if="isImage(a)"
class="att-image"
:href="urlFor(a.id)"
target="_blank"
rel="noopener noreferrer"
>
<img :src="urlFor(a.id)" :alt="a.filename" loading="lazy" />
</a>
<a
v-else
class="att-file"
:href="urlFor(a.id)"
target="_blank"
rel="noopener noreferrer"
:download="a.filename"
>
<span class="att-icon">{{ isExe(a) ? '' : '📎' }}</span>
<span class="att-name">{{ a.filename }}</span>
<span class="att-size">{{ kb(a.size) }}</span>
<span v-if="isExe(a)" class="att-warn">exécutable</span>
</a>
</template>
</div>
</template>
<script setup lang="ts">
import type { Attachment } from '@/composables/useMessages';
import { useAttachments } from '@/composables/useAttachments';
defineProps<{ attachments: Attachment[] }>();
const { kb, urlFor } = useAttachments();
function isImage(a: Attachment): boolean {
return a.mimeType.startsWith('image/');
}
function isExe(a: Attachment): boolean {
return /\.(exe|bat|cmd|msi|sh|app)$/i.test(a.filename) || a.mimeType === 'application/x-msdownload';
}
</script>
<style scoped>
.attachments {
display: flex;
flex-wrap: wrap;
gap: 8px;
padding: 6px 25px 0;
}
.att-image img {
max-width: 220px;
max-height: 160px;
border-radius: 8px;
border: 1px solid #222234;
display: block;
}
.att-file {
display: inline-flex;
align-items: center;
gap: 8px;
background: #141420;
border: 1px solid #222234;
border-radius: 10px;
padding: 7px 12px;
text-decoration: none;
font-family: Arial, sans-serif;
}
.att-file:hover { background: #1c1c2e; }
.att-icon { font-size: 14px; }
.att-name { font-size: 12px; color: #aaccdd; }
.att-size { font-size: 10px; color: #555577; }
.att-warn {
font-size: 8px; font-weight: bold; color: #ff5544;
background: #2a0a08; border: 1px solid #662211; border-radius: 4px; padding: 1px 5px;
}
</style>

View File

@@ -1,17 +1,28 @@
<!-- Un message avec ses éventuelles réponses -->
<!-- Un message avec ses éventuelles réponses, perks d'auteur, rich content et pièces jointes -->
<template>
<div class="message-item">
<!-- Auteur + horodatage -->
<div class="message-meta">
<span
class="ip"
:style="{ color: color, textShadow: glow }"
>{{ message.authorIp }}</span>
<span class="ip-wrap">
<span v-if="petsLeft(message)" class="pet">{{ petsLeft(message) }}</span>
<span class="ip" :style="ipStyle(message)">{{ message.authorIp }}</span>
<span v-if="petsRight(message)" class="pet">{{ petsRight(message) }}</span>
<span v-if="message.authorPerks?.badge" class="vip-badge">VIP</span>
</span>
<span class="ts">{{ fmt(message.createdAt) }}</span>
<button class="reply-btn" @click="$emit('reply', { id: message.id, authorIp: message.authorIp })" type="button">↩ répondre</button>
</div>
<!-- Contenu -->
<p class="message-body">{{ message.content }}</p>
<!-- Contenu : riche (iframe sandbox) ou texte simple -->
<RichContent
v-if="message.richMode && message.richMode !== 'none' && message.richContent"
:mode="message.richMode"
:content="message.richContent"
/>
<p v-else class="message-body">{{ message.content }}</p>
<!-- Pièces jointes -->
<MessageAttachments v-if="message.attachments?.length" :attachments="message.attachments" />
<!-- Réponses -->
<div
@@ -19,12 +30,20 @@
:key="reply.id"
class="reply"
>
<span
class="ip reply-ip"
:style="{ color: getColor(reply.authorIp) }"
>{{ reply.authorIp }}</span>
<span class="ip-wrap">
<span v-if="petsLeft(reply)" class="pet pet--sm">{{ petsLeft(reply) }}</span>
<span class="ip reply-ip" :style="ipStyle(reply)">{{ reply.authorIp }}</span>
<span v-if="petsRight(reply)" class="pet pet--sm">{{ petsRight(reply) }}</span>
</span>
<span class="ts">{{ fmt(reply.createdAt) }}</span>
<p class="message-body reply-body">{{ reply.content }}</p>
<button class="reply-btn" @click="$emit('reply', { id: message.id, authorIp: reply.authorIp })" type="button">↩</button>
<RichContent
v-if="reply.richMode && reply.richMode !== 'none' && reply.richContent"
:mode="reply.richMode"
:content="reply.richContent"
/>
<p v-else class="message-body reply-body">{{ reply.content }}</p>
<MessageAttachments v-if="reply.attachments?.length" :attachments="reply.attachments" />
</div>
<div class="divider" />
@@ -32,22 +51,47 @@
</template>
<script setup lang="ts">
import { computed } from 'vue';
import type { Message } from '@/composables/useMessages';
import { getIpColor, getIpGlow } from '@/composables/ipColor';
import type { Message, Reply } from '@/composables/useMessages';
import { getIpColorWithPerks, getIpGlowWithPerks } from '@/composables/ipColor';
import { usePerks } from '@/composables/usePerks';
import RichContent from './RichContent.vue';
import MessageAttachments from './MessageAttachments.vue';
const props = defineProps<{ message: Message }>();
defineProps<{ message: Message }>();
defineEmits<{ reply: [payload: { id: string; authorIp: string }] }>();
const color = computed(() => getIpColor(props.message.authorIp));
const glow = computed(() => getIpGlow(color.value));
const { perksFor } = usePerks();
function getColor(ip: string) { return getIpColor(ip); }
/** Perks for an author: prefer the perks embedded in the payload, else the store. */
function perksOf(m: Reply): any {
return m.authorPerks ?? perksFor(m.authorIp);
}
function ipStyle(m: Reply) {
const p = perksOf(m);
return {
color: getIpColorWithPerks(m.authorIp, p),
textShadow: getIpGlowWithPerks(m.authorIp, p),
};
}
function petsLeft(m: Reply): string {
const pets = perksOf(m)?.pets ?? [];
return pets
.filter((x: any) => x.position === 'left' || x.position === 'both')
.map((x: any) => x.char)
.join('');
}
function petsRight(m: Reply): string {
const pets = perksOf(m)?.pets ?? [];
return pets
.filter((x: any) => x.position === 'right' || x.position === 'both')
.map((x: any) => x.char)
.join('');
}
function fmt(date: string): string {
return new Date(date).toLocaleTimeString('fr-FR', {
hour: '2-digit',
minute: '2-digit',
});
return new Date(date).toLocaleTimeString('fr-FR', { hour: '2-digit', minute: '2-digit' });
}
</script>
@@ -63,6 +107,15 @@ function fmt(date: string): string {
padding: 0 25px;
}
.ip-wrap { display: inline-flex; align-items: baseline; gap: 4px; }
.pet { font-size: 12px; filter: drop-shadow(0 0 3px currentColor); }
.pet--sm { font-size: 11px; }
.vip-badge {
font-family: Arial, sans-serif; font-size: 8px; font-weight: bold;
color: #ffcc44; background: #2a2206; border: 1px solid #665511; border-radius: 4px;
padding: 0 4px; margin-left: 4px; letter-spacing: 0.5px;
}
.ip {
font-family: 'Courier New', monospace;
font-size: 12px;
@@ -75,12 +128,22 @@ function fmt(date: string): string {
color: #303030;
}
.reply-btn {
background: none; border: none; cursor: pointer;
font-family: Arial, sans-serif; font-size: 10px; color: #33335a;
padding: 0; opacity: 0; transition: opacity 0.12s, color 0.12s;
}
.message-item:hover .reply-btn,
.reply:hover .reply-btn { opacity: 1; }
.reply-btn:hover { color: #00ccff; }
.message-body {
font-family: Arial, sans-serif;
font-size: 13px;
color: #c0c0c0;
padding: 3px 25px 0;
margin: 0;
word-break: break-word;
}
.divider {

View File

@@ -7,14 +7,15 @@
v-for="msg in messages"
:key="msg.id"
:message="msg"
@reply="$emit('reply', $event)"
/>
<div v-if="messages.length === 0" class="feed-empty">
Aucun message pour l'instant.
</div>
</div>
<!-- Pub casino : overlay absolu sur la droite du feed -->
<InlineCasinoAd class="casino-overlay" />
<!-- Pub casino : overlay absolu sur la droite du feed (masqué si NoAds) -->
<InlineCasinoAd v-if="!hideAds" class="casino-overlay" />
</div>
</template>
@@ -24,7 +25,8 @@ import type { Message } from '@/composables/useMessages';
import MessageItem from './MessageItem.vue';
import InlineCasinoAd from './InlineCasinoAd.vue';
const props = defineProps<{ messages: Message[] }>();
const props = defineProps<{ messages: Message[]; hideAds?: boolean }>();
defineEmits<{ reply: [payload: { id: string; authorIp: string }] }>();
const listEl = ref<HTMLElement | null>(null);

View File

@@ -0,0 +1,85 @@
<!--
Rich message renderer SECURITY CRITICAL.
Renders paid HTML/CSS or JS messages inside a FIXED-SIZE sandboxed iframe.
Sandbox policy (never deviate):
- htmlcss tier: sandbox="" (empty) scripts are INERT (honours README "pas de script").
- js tier: sandbox="allow-scripts" ONLY script runs in a NULL origin and
cannot touch the parent (no allow-same-origin, ever).
We NEVER combine allow-scripts with allow-same-origin (that would re-grant parent
access and defeat isolation). A runtime assertion below guards against it.
-->
<template>
<div class="rich-frame-wrap">
<span class="rich-tag" :class="`rich-tag--${mode}`">
{{ mode === 'js' ? '⚡ JS' : '🎨 HTML/CSS' }} · bac à sable
</span>
<iframe
class="rich-frame"
:sandbox="sandboxTokens"
:srcdoc="srcdoc"
referrerpolicy="no-referrer"
loading="lazy"
title="Message riche (isolé)"
/>
</div>
</template>
<script setup lang="ts">
import { computed } from 'vue';
const props = defineProps<{ mode: 'htmlcss' | 'js'; content: string }>();
// htmlcss → no scripts at all; js → scripts only, NEVER same-origin.
const sandboxTokens = computed(() => (props.mode === 'js' ? 'allow-scripts' : ''));
// Defense-in-depth assertion: the iframe must never get allow-same-origin alongside scripts.
if (import.meta.env.DEV) {
const t = props.mode === 'js' ? 'allow-scripts' : '';
if (t.includes('allow-same-origin') && t.includes('allow-scripts')) {
throw new Error('SECURITY: rich iframe must never combine allow-scripts + allow-same-origin');
}
}
const srcdoc = computed(() => {
// In-document CSP as a second layer (the sandbox is the primary boundary).
const csp =
props.mode === 'js'
? "default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data: https:; font-src data:;"
: "default-src 'none'; script-src 'none'; style-src 'unsafe-inline'; img-src data: https:; font-src data:;";
return `<!doctype html><html><head><meta charset="utf-8"><meta http-equiv="Content-Security-Policy" content="${csp}"><style>html,body{margin:0;padding:8px;color:#ddd;font-family:Arial,sans-serif;background:#0a0a12;overflow:auto;height:100%;box-sizing:border-box}</style></head><body>${props.content}</body></html>`;
});
</script>
<style scoped>
.rich-frame-wrap {
position: relative;
margin: 6px 25px 0;
}
.rich-tag {
position: absolute;
top: -7px;
left: 8px;
z-index: 1;
font-family: Arial, sans-serif;
font-size: 8px;
font-weight: bold;
padding: 1px 6px;
border-radius: 6px;
}
.rich-tag--htmlcss { color: #00ddaa; background: #062019; border: 1px solid #0a4435; }
.rich-tag--js { color: #ffcc44; background: #201a06; border: 1px solid #443a0a; }
/* Fixed size per README ("taille fixe") — contains any layout-breaking CSS. */
.rich-frame {
width: 480px;
max-width: 100%;
height: 270px;
border: 1px solid #222234;
border-radius: 8px;
background: #0a0a12;
display: block;
}
</style>

View File

@@ -0,0 +1,220 @@
<!-- Bandeau de stats permanent façon téléscripteur néon (casino / bourse). -->
<template>
<div class="ticker" :class="{ 'is-off': !connected }">
<!-- Badge LIVE fixe à gauche -->
<div class="ticker-badge">
<span class="ticker-dot" />
<span class="ticker-badge-txt">{{ connected ? 'LIVE' : '···' }}</span>
</div>
<!-- Piste défilante (2 groupes identiques pour une boucle sans couture) -->
<div class="ticker-viewport">
<div class="ticker-track">
<div
v-for="copy in 2"
:key="copy"
class="ticker-group"
:aria-hidden="copy === 2 ? 'true' : undefined"
>
<span
v-for="item in items"
:key="item.key + '-' + copy"
class="chip"
:class="`chip--${item.tone}`"
>
<span class="chip-val">
<AnimatedNumber :value="item.value" :decimals="item.decimals ?? 0" />
<span v-if="item.unit" class="chip-unit">{{ item.unit }}</span>
</span>
<span class="chip-label">{{ item.label }}</span>
</span>
</div>
</div>
</div>
</div>
</template>
<script setup lang="ts">
import { computed } from 'vue';
import AnimatedNumber from './AnimatedNumber.vue';
import type { Stats } from '@/composables/useRealtime';
const props = defineProps<{ stats: Stats | null; connected: boolean }>();
type Tone = 'cyan' | 'green' | 'magenta' | 'orange' | 'plain';
interface Chip {
key: string;
label: string;
value: number;
tone: Tone;
unit?: string;
decimals?: number;
}
const ZERO: Stats = {
connectedTabs: 0,
typingNow: 0,
lettersPerSec: 0,
msgsPerMin: 0,
messages: 0,
replies: 0,
charsSent: 0,
lettersTyped: 0,
uniqueIps: 0,
longestMsg: 0,
abandonRate: 0,
avgLength: 0,
moneyExtorted: 0,
};
const items = computed<Chip[]>(() => {
const s = props.stats ?? ZERO;
return [
{ key: 'tabs', label: 'onglets connectés', value: s.connectedTabs, tone: 'cyan' },
{ key: 'typing', label: 'écrivent là', value: s.typingNow, tone: 'green' },
{ key: 'lps', label: 'lettres / s', value: s.lettersPerSec, decimals: 1, tone: 'green' },
{ key: 'mpm', label: 'messages / min', value: s.msgsPerMin, tone: 'green' },
{ key: 'msgs', label: 'messages', value: s.messages, tone: 'cyan' },
{ key: 'replies', label: 'réponses', value: s.replies, tone: 'plain' },
{ key: 'chars', label: 'caractères envoyés', value: s.charsSent, tone: 'plain' },
{ key: 'letters', label: 'lettres tapées', value: s.lettersTyped, tone: 'magenta' },
{ key: 'ips', label: 'IP uniques', value: s.uniqueIps, tone: 'cyan' },
{ key: 'longest', label: 'le + long', value: s.longestMsg, unit: ' car', tone: 'plain' },
{ key: 'abandon', label: "taux d'abandon", value: s.abandonRate, decimals: 1, unit: ' %', tone: 'orange' },
{ key: 'avg', label: 'longueur moy.', value: s.avgLength, decimals: 1, unit: ' car', tone: 'plain' },
{ key: 'money', label: 'argent extorqué', value: s.moneyExtorted, decimals: 2, unit: ' €', tone: 'orange' },
];
});
</script>
<style scoped>
.ticker {
position: relative;
flex-shrink: 0;
height: 40px;
display: flex;
align-items: stretch;
background: #0a0a12;
border-bottom: 1px solid #00eeff33;
box-shadow: inset 0 -1px 0 #00eeff14, 0 2px 14px #00000066;
overflow: hidden;
}
/* ── Badge LIVE fixe ── */
.ticker-badge {
position: relative;
z-index: 2;
flex-shrink: 0;
display: flex;
align-items: center;
gap: 7px;
padding: 0 14px;
background: #0e0e18;
border-right: 1px solid #00eeff33;
box-shadow: 6px 0 12px #0a0a12;
}
.ticker-dot {
width: 8px;
height: 8px;
border-radius: 50%;
background: #00ff88;
box-shadow: 0 0 8px #00ff66;
animation: blink 1.5s ease-in-out infinite;
}
.ticker-badge-txt {
font-family: 'Courier New', monospace;
font-size: 11px;
font-weight: bold;
letter-spacing: 2px;
color: #00ff88;
text-shadow: 0 0 8px #00ff4466;
}
.ticker.is-off .ticker-dot {
background: #ff3344;
box-shadow: 0 0 8px #ff2233;
animation: none;
}
.ticker.is-off .ticker-badge-txt {
color: #ff5566;
text-shadow: none;
}
@keyframes blink {
0%, 100% { opacity: 1; }
50% { opacity: 0.3; }
}
/* ── Piste défilante ── */
.ticker-viewport {
flex: 1;
min-width: 0;
overflow: hidden;
display: flex;
align-items: center;
}
.ticker-track {
display: inline-flex;
white-space: nowrap;
will-change: transform;
animation: ticker-scroll 48s linear infinite;
}
.ticker:hover .ticker-track {
animation-play-state: paused;
}
.ticker-group {
display: inline-flex;
align-items: center;
}
@keyframes ticker-scroll {
from { transform: translateX(0); }
to { transform: translateX(-50%); }
}
/* ── Chips ── */
.chip {
position: relative;
display: inline-flex;
align-items: baseline;
gap: 7px;
padding: 0 22px;
}
.chip::after {
content: '';
position: absolute;
right: 0;
top: 50%;
transform: translateY(-50%);
height: 16px;
width: 1px;
background: #ffffff14;
}
.chip-val {
font-family: 'Courier New', monospace;
font-size: 15px;
font-weight: bold;
color: #d8d8e8;
}
.chip-unit {
font-size: 10px;
font-weight: normal;
opacity: 0.6;
}
.chip-label {
font-family: Arial, sans-serif;
font-size: 10px;
letter-spacing: 0.5px;
text-transform: uppercase;
color: #50506e;
}
.chip--cyan .chip-val { color: #00eeff; text-shadow: 0 0 9px #00ccff55; }
.chip--green .chip-val { color: #33ff77; text-shadow: 0 0 9px #00ff4455; }
.chip--magenta .chip-val { color: #ff44cc; text-shadow: 0 0 9px #ff22aa55; }
.chip--orange .chip-val { color: #ffaa44; text-shadow: 0 0 9px #ff880055; }
/* Accessibilité : pas de défilement si l'utilisateur le refuse */
@media (prefers-reduced-motion: reduce) {
.ticker-track { animation: none; }
.ticker-viewport { overflow-x: auto; scrollbar-width: none; }
.ticker-viewport::-webkit-scrollbar { display: none; }
}
</style>

View File

@@ -0,0 +1,296 @@
<!-- One marketplace product card handles per-kind options inline (faithful to shop mockups) -->
<template>
<div class="card" :class="{ 'card--owned': ownedAlready }">
<div v-if="product.badge" class="card-badge">{{ product.badge }}</div>
<div class="card-head">
<span class="card-icon">{{ icon }}</span>
<div>
<p class="card-name">{{ product.name }}</p>
<p v-if="product.subtitle" class="card-sub">{{ product.subtitle }}</p>
</div>
</div>
<!-- Aperçu cosmétique : avant / après -->
<div v-if="product.kind === 'ip-skin' || product.id === 'bundle-cosmetic'" class="preview">
<span class="prev-ip prev-plain">192.168.1.45</span>
<span class="prev-arrow"></span>
<span class="prev-ip prev-gold">192.168.1.45</span>
</div>
<!-- Options : abonnement NoAds -->
<div v-if="product.kind === 'subscription'" class="opts">
<label v-for="p in plans" :key="p.id" class="opt-radio" :class="{ active: plan === p.id }">
<input type="radio" :value="p.id" v-model="plan" />
<span>{{ p.label }}</span>
<span class="opt-price">{{ fmt(p.price) }} cr{{ p.id === 'monthly' ? '/mois' : '/an' }}</span>
</label>
</div>
<!-- Options : Cadre de Pub -->
<div v-if="product.kind === 'ad-frame'" class="opts">
<div class="opt-row">
<span class="opt-label">Durée</span>
<select v-model.number="durationDays" class="opt-select">
<option v-for="d in durations" :key="d.days" :value="d.days">
{{ d.days }} j{{ d.extra ? ` (+${fmt(d.extra)})` : '' }}
</option>
</select>
</div>
<div class="opt-row">
<span class="opt-label">Format</span>
<select v-model="format" class="opt-select">
<option v-for="f in formats" :key="f.id" :value="f.id">
{{ f.label }}{{ f.extra ? ` (+${fmt(f.extra)})` : '' }}
</option>
</select>
</div>
<input v-model="url" class="opt-input" type="text" placeholder="URL de destination (optionnel)" />
</div>
<!-- Options : Pet (grille + position) -->
<div v-if="product.kind === 'pet'" class="opts">
<div class="pet-grid">
<button
v-for="d in designs"
:key="d.id"
class="pet-cell"
:class="{ active: petDesign === d.id }"
@click="petDesign = d.id"
type="button"
>{{ d.char }}</button>
</div>
<div class="pet-pos">
<label v-for="pos in positions" :key="pos" class="opt-radio opt-radio--sm" :class="{ active: petPosition === pos }">
<input type="radio" :value="pos" v-model="petPosition" />
<span>{{ posLabel(pos) }}</span>
</label>
</div>
</div>
<!-- Stock limité -->
<div v-if="product.stockLimit" class="stock">
<div class="stock-bar"><div class="stock-fill" :style="{ width: stockPct + '%' }" /></div>
<span class="stock-txt">{{ product.stockSold }} / {{ product.stockLimit }} vendus</span>
</div>
<!-- Prix + CTA -->
<div class="card-foot">
<div class="price">
<span v-if="product.promoPrice != null" class="price-old">{{ fmt(product.basePrice) }}</span>
<span class="price-now">{{ fmt(effectivePrice) }}</span>
<span class="price-unit">cr</span>
</div>
<button
class="buy"
:disabled="disabled"
@click="onBuy"
type="button"
>{{ buyLabel }}</button>
</div>
</div>
</template>
<script setup lang="ts">
import { computed, ref } from 'vue';
import type { Product, PurchaseOptions } from '@/composables/useShop';
const props = defineProps<{
product: Product;
buying: boolean;
owns: (kind: string) => boolean;
petCount: number;
freeMode: boolean;
}>();
const emit = defineEmits<{ buy: [productId: string, options: PurchaseOptions] }>();
const meta = computed<any>(() => {
try { return props.product.metaJson ? JSON.parse(props.product.metaJson) : {}; }
catch { return {}; }
});
// Subscription
const plans = computed(() => meta.value.plans ?? []);
const plan = ref<'monthly' | 'annual'>('monthly');
// Ad-frame
const durations = computed(() => meta.value.durations ?? []);
const formats = computed(() => meta.value.formats ?? []);
const durationDays = ref<number>(7);
const format = ref<'static' | 'gif'>('static');
const url = ref('');
// Pet
const designs = computed(() => meta.value.designs ?? []);
const positions = computed<string[]>(() => meta.value.positions ?? ['left', 'right', 'both']);
const petDesign = ref<string>('');
const petPosition = ref<'left' | 'right' | 'both'>('left');
const icon = computed(() => {
switch (props.product.kind) {
case 'ad-frame': return '📣';
case 'subscription': return '🚫';
case 'ip-skin': return '👑';
case 'pet': return '✨';
case 'bundle': return '🎁';
case 'rich': return props.product.id === 'rich-js' ? '⚡' : '🎨';
case 'consumable': return '🔊';
default: return '🛍️';
}
});
const effectivePrice = computed(() => {
let price = props.product.promoPrice ?? props.product.basePrice;
if (props.product.kind === 'subscription') {
const p = plans.value.find((x: any) => x.id === plan.value);
if (p) price = p.price;
}
if (props.product.kind === 'ad-frame') {
const d = durations.value.find((x: any) => x.days === durationDays.value);
const f = formats.value.find((x: any) => x.id === format.value);
price += (d?.extra ?? 0) + (f?.extra ?? 0);
}
return price;
});
// Ownership / limits → disable & label.
const ownedAlready = computed(() => {
const k = props.product.kind;
if (k === 'ip-skin') return props.owns('style-dore');
if (k === 'subscription') return props.owns('noads');
if (k === 'rich') return props.owns(props.product.id);
if (k === 'unlock') return props.owns(props.product.id);
if (k === 'ad-frame') return props.owns('ad-frame');
return false;
});
const petFull = computed(() => props.product.kind === 'pet' && props.petCount >= 3);
const soldOut = computed(() => props.product.stockLimit != null && props.product.stockSold >= props.product.stockLimit);
const disabled = computed(() => props.buying || ownedAlready.value || petFull.value || soldOut.value);
const buyLabel = computed(() => {
if (props.buying) return '...';
if (soldOut.value) return 'Épuisé';
if (ownedAlready.value) return 'Possédé ✓';
if (petFull.value) return 'Max 3 pets';
return props.freeMode ? 'Obtenir (gratuit)' : 'Acheter';
});
const stockPct = computed(() =>
props.product.stockLimit ? Math.round((props.product.stockSold / props.product.stockLimit) * 100) : 0
);
function fmt(centi: number): string {
return (centi / 100).toLocaleString('fr-FR', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
}
function posLabel(p: string): string {
return p === 'left' ? 'Gauche' : p === 'right' ? 'Droite' : 'Les deux';
}
function onBuy(): void {
const options: PurchaseOptions = {};
if (props.product.kind === 'subscription') options.plan = plan.value;
if (props.product.kind === 'ad-frame') {
options.durationDays = durationDays.value;
options.format = format.value;
options.url = url.value || undefined;
}
if (props.product.kind === 'pet' || props.product.id === 'bundle-cosmetic') {
const d = designs.value.find((x: any) => x.id === petDesign.value) ?? designs.value[0];
if (d) { options.petDesign = d.id; options.petChar = d.char; }
options.petPosition = petPosition.value;
}
emit('buy', props.product.id, options);
}
</script>
<style scoped>
.card {
position: relative;
background: #101018;
border: 1px solid #20203a;
border-radius: 10px;
padding: 16px;
display: flex;
flex-direction: column;
gap: 12px;
font-family: Arial, sans-serif;
}
.card--owned { opacity: 0.7; }
.card-badge {
position: absolute;
top: -9px;
right: 12px;
background: #ff2266;
color: #fff;
font-size: 9px;
font-weight: bold;
letter-spacing: 0.5px;
padding: 3px 9px;
border-radius: 8px;
box-shadow: 0 0 10px #ff226688;
}
.card-head { display: flex; gap: 12px; align-items: flex-start; }
.card-icon { font-size: 28px; }
.card-name { font-size: 15px; font-weight: bold; color: #d8d8ee; margin: 0; }
.card-sub { font-size: 11px; color: #6a6a90; margin: 3px 0 0; line-height: 1.4; }
.preview {
display: flex; align-items: center; gap: 10px;
background: #0a0a12; border-radius: 6px; padding: 10px; justify-content: center;
}
.prev-ip { font-family: 'Courier New', monospace; font-size: 12px; font-weight: bold; }
.prev-plain { color: #666688; }
.prev-gold { color: #ffdd44; text-shadow: 0 0 8px #ffaa00cc; }
.prev-arrow { color: #444466; }
.opts { display: flex; flex-direction: column; gap: 8px; }
.opt-radio {
display: flex; align-items: center; gap: 8px;
background: #0c0c16; border: 1px solid #20203a; border-radius: 6px;
padding: 8px 10px; font-size: 12px; color: #aaaacc; cursor: pointer;
}
.opt-radio.active { border-color: #00aaff; background: #0a1622; }
.opt-radio input { accent-color: #00ccff; }
.opt-radio--sm { padding: 5px 8px; font-size: 11px; flex: 1; justify-content: center; }
.opt-price { margin-left: auto; color: #ffdd66; font-family: 'Courier New', monospace; }
.opt-row { display: flex; align-items: center; justify-content: space-between; gap: 8px; }
.opt-label { font-size: 11px; color: #8888aa; }
.opt-select, .opt-input {
background: #0c0c16; border: 1px solid #20203a; border-radius: 6px;
color: #ccccdd; font-size: 12px; padding: 6px 8px; outline: none;
}
.opt-select { flex: 1; }
.opt-input { width: 100%; }
.pet-grid { display: grid; grid-template-columns: repeat(5, 1fr); gap: 6px; }
.pet-cell {
aspect-ratio: 1; background: #0c0c16; border: 1px solid #20203a; border-radius: 6px;
font-size: 18px; color: #ccccee; cursor: pointer; display: flex; align-items: center; justify-content: center;
}
.pet-cell.active { border-color: #ff44cc; box-shadow: 0 0 8px #ff44cc55; }
.pet-pos { display: flex; gap: 6px; }
.stock { display: flex; flex-direction: column; gap: 4px; }
.stock-bar { height: 6px; background: #1a1a2a; border-radius: 3px; overflow: hidden; }
.stock-fill { height: 100%; background: linear-gradient(90deg, #ffaa00, #ff4444); }
.stock-txt { font-size: 10px; color: #886644; }
.card-foot { display: flex; align-items: center; justify-content: space-between; margin-top: auto; padding-top: 6px; }
.price { display: flex; align-items: baseline; gap: 6px; }
.price-old { font-size: 12px; color: #555; text-decoration: line-through; }
.price-now { font-size: 20px; font-weight: bold; color: #ffdd66; font-family: 'Courier New', monospace; text-shadow: 0 0 10px #ffaa0044; }
.price-unit { font-size: 11px; color: #886633; }
.buy {
background: #004488; border: 1px solid #0066aa; color: #00ddff;
font-size: 13px; font-weight: bold; padding: 9px 18px; border-radius: 20px; cursor: pointer;
box-shadow: 0 0 12px #00448855; transition: background 0.15s, box-shadow 0.15s;
}
.buy:hover:not(:disabled) { background: #005599; box-shadow: 0 0 18px #00ddff55; }
.buy:disabled { opacity: 0.4; cursor: not-allowed; box-shadow: none; }
</style>

View File

@@ -13,3 +13,21 @@ export function getIpColor(ip: string): string {
export function getIpGlow(color: string): string {
return color === '#666688' ? 'none' : `0 0 8px ${color}80`;
}
/** Gold skin (Style Doré) — overrides the djb2 palette for owners. */
const GOLD = '#ffdd44';
interface PerkLike {
skin?: 'gold';
}
/** Perk-aware color: gold for Style Doré owners, else the deterministic palette. */
export function getIpColorWithPerks(ip: string, perks?: PerkLike | null): string {
if (perks?.skin === 'gold') return GOLD;
return getIpColor(ip);
}
export function getIpGlowWithPerks(ip: string, perks?: PerkLike | null): string {
if (perks?.skin === 'gold') return `0 0 10px ${GOLD}cc`;
return getIpGlow(getIpColor(ip));
}

View File

@@ -0,0 +1,67 @@
import { ref, watch } from 'vue';
/** Ad inventory client: fetch ads by slot, report impressions (debounced). */
// Shared signal: bumped when the server broadcasts an `ads` frame (e.g. a user
// bought a Cadre de Pub). All useAds instances refetch when this changes.
const adsRevision = ref(0);
export function bumpAdsRevision(): void {
adsRevision.value++;
}
export interface Ad {
id: string;
brand: string;
subtitle?: string | null;
url?: string | null;
cta?: string | null;
icon?: string | null;
tone: string; // blue | green | purple | casino | user
kind: string; // band | casino
ownerIp?: string | null;
imageUrl?: string | null;
}
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
export function useAds(kind: 'band' | 'casino') {
const ads = ref<Ad[]>([]);
async function fetchAds(): Promise<void> {
try {
const res = await fetch(`${API_URL}/api/ads?kind=${kind}`);
if (res.ok) ads.value = (await res.json()) as Ad[];
} catch {
/* ignore */
}
}
// Refetch whenever the server signals an inventory change.
watch(adsRevision, () => void fetchAds());
// Debounced impression reporting (each ad id at most once per flush).
const pending = new Set<string>();
let timer: ReturnType<typeof setTimeout> | null = null;
function reportImpression(id: string): void {
pending.add(id);
if (timer) return;
timer = setTimeout(flush, 800);
}
async function flush(): Promise<void> {
timer = null;
const ids = [...pending];
pending.clear();
if (!ids.length) return;
try {
await fetch(`${API_URL}/api/ads/impressions`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ ids }),
});
} catch {
/* ignore */
}
}
return { ads, fetchAds, reportImpression };
}

View File

@@ -0,0 +1,86 @@
import { ref } from 'vue';
/**
* Global audio alert (paid, consumable). On an `alert` WS frame, every tab plays
* the sound at full volume for at most maxDurationMs. If a custom mp3 URL is
* provided it's played; otherwise a synthesized siren is used (WebAudio).
*
* Browser autoplay policies block sound before a user gesture — we unlock the
* AudioContext on the first click anywhere.
*/
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
let audioCtx: AudioContext | null = null;
const lastFiredAt = ref(0);
function unlock(): void {
if (!audioCtx) {
const AC = (window as any).AudioContext || (window as any).webkitAudioContext;
if (AC) audioCtx = new AC();
}
if (audioCtx && audioCtx.state === 'suspended') void audioCtx.resume();
}
// Unlock on the first interaction.
if (typeof window !== 'undefined') {
window.addEventListener('pointerdown', unlock, { once: false });
}
function playSiren(maxDurationMs: number): void {
if (!audioCtx) return;
const dur = Math.min(maxDurationMs, 5000) / 1000;
const now = audioCtx.currentTime;
const osc = audioCtx.createOscillator();
const gain = audioCtx.createGain();
osc.type = 'sawtooth';
// Warble between two pitches like an air-raid siren.
osc.frequency.setValueAtTime(440, now);
for (let t = 0; t < dur; t += 0.5) {
osc.frequency.linearRampToValueAtTime(880, now + t + 0.25);
osc.frequency.linearRampToValueAtTime(440, now + t + 0.5);
}
gain.gain.setValueAtTime(1, now); // volume à fond
gain.gain.setValueAtTime(1, now + dur - 0.05);
gain.gain.linearRampToValueAtTime(0, now + dur);
osc.connect(gain).connect(audioCtx.destination);
osc.start(now);
osc.stop(now + dur);
}
function playMp3(url: string, maxDurationMs: number): void {
const audio = new Audio(url);
audio.volume = 1;
void audio.play().catch(() => { /* autoplay blocked */ });
setTimeout(() => { audio.pause(); audio.currentTime = 0; }, Math.min(maxDurationMs, 5000));
}
/** Handle an incoming `alert` frame. */
export function handleAlertFrame(data: { soundUrl?: string; maxDurationMs?: number }): void {
lastFiredAt.value = Date.now();
const max = data.maxDurationMs ?? 5000;
unlock();
if (data.soundUrl) playMp3(data.soundUrl, max);
else playSiren(max);
}
export function useAlert() {
async function fireAlert(soundUrl?: string): Promise<{ ok: boolean; error?: string }> {
unlock();
try {
const res = await fetch(`${API_URL}/api/alert`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ soundUrl }),
});
if (!res.ok) {
const d = await res.json().catch(() => ({}));
return { ok: false, error: d.error || 'Alerte impossible' };
}
return { ok: true };
} catch {
return { ok: false, error: 'Réseau indisponible' };
}
}
return { fireAlert };
}

View File

@@ -0,0 +1,43 @@
/** Upload helper: posts a file to /api/uploads, returns its metadata. */
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
export interface UploadedAttachment {
id: string;
filename: string;
mimeType: string;
size: number;
}
export type UploadResult =
| { ok: true; attachment: UploadedAttachment }
| { ok: false; error: string };
export function useAttachments() {
async function uploadFile(file: File): Promise<UploadResult> {
const form = new FormData();
form.append('file', file);
try {
const res = await fetch(`${API_URL}/api/uploads`, { method: 'POST', body: form });
const data = await res.json().catch(() => ({}));
if (!res.ok) return { ok: false, error: data.error || 'Upload refusé' };
return { ok: true, attachment: data as UploadedAttachment };
} catch {
return { ok: false, error: 'Réseau indisponible' };
}
}
/** Human file size. */
function kb(bytes: number): string {
if (bytes >= 1_000_000) return (bytes / 1_000_000).toFixed(1) + ' Mo';
if (bytes >= 1000) return Math.round(bytes / 1000) + ' Ko';
return bytes + ' o';
}
/** URL to fetch/download an attachment. */
function urlFor(id: string): string {
return `${API_URL}/api/uploads/${id}`;
}
return { uploadFile, kb, urlFor };
}

View File

@@ -1,10 +1,27 @@
import { ref, onMounted } from 'vue';
import { useRealtime } from './useRealtime';
import { useWallet, applyWalletFrame } from './useWallet';
import { setPerks, applyPerksFrame, type Perks } from './usePerks';
import { bumpAdsRevision } from './useAds';
import { handleAlertFrame } from './useAlert';
export interface Reply {
id: string;
content: string;
authorIp: string;
createdAt: string;
parentId?: string | null;
authorPerks?: Perks;
richMode?: 'none' | 'htmlcss' | 'js';
richContent?: string | null;
attachments?: Attachment[];
}
export interface Attachment {
id: string;
filename: string;
mimeType: string;
size: number;
}
export interface Message extends Reply {
@@ -19,37 +36,164 @@ export function useMessages() {
const loading = ref(false);
const sending = ref(false);
/** Seed the perks store from a message + its replies. */
function harvestPerks(m: Message): void {
setPerks(m.authorIp, m.authorPerks);
for (const r of m.replies ?? []) setPerks(r.authorIp, r.authorPerks);
}
async function fetchMessages(): Promise<void> {
loading.value = true;
try {
const res = await fetch(`${API_URL}/api/messages`);
if (res.ok) {
// L'API renvoie du plus récent au plus ancien ; on inverse pour affichage chronologique
messages.value = ((await res.json()) as Message[]).reverse();
// API returns newest→oldest; reverse for chronological display.
const list = ((await res.json()) as Message[]).reverse();
list.forEach(harvestPerks);
messages.value = list;
}
} finally {
loading.value = false;
}
}
async function postMessage(content: string): Promise<boolean> {
if (!content.trim()) return false;
/** Add a message pushed over the WebSocket (new thread or reply), with dedup. */
function addIncoming(raw: Message & { parentId: string | null }): void {
if (!raw || !raw.id) return;
// Always record the author's perks, even for replies.
setPerks(raw.authorIp, raw.authorPerks);
if (raw.parentId == null) {
// New top-level thread.
if (messages.value.some((m) => m.id === raw.id)) return;
messages.value.push({ ...raw, replies: raw.replies ?? [] });
return;
}
// Reply: attach to its parent thread if we have it.
const parent = messages.value.find((m) => m.id === raw.parentId);
if (!parent) return; // thread not loaded; reconnect-resync will reconcile
if (parent.replies.some((r) => r.id === raw.id)) return;
parent.replies.push({
id: raw.id,
content: raw.content,
authorIp: raw.authorIp,
createdAt: raw.createdAt,
parentId: raw.parentId,
authorPerks: raw.authorPerks,
richMode: raw.richMode,
richContent: raw.richContent,
attachments: raw.attachments,
});
}
const { fetchWallet, ip: myIp } = useWallet();
// The viewer's own perks (drives NoAds gating, rich-composer unlocks, etc.).
const myPerks = ref<Perks>({});
async function fetchMyPerks(): Promise<void> {
try {
const res = await fetch(`${API_URL}/api/shop/me`);
if (!res.ok) return;
const { entitlements } = (await res.json()) as {
entitlements: { kind: string; metaJson?: string | null }[];
};
const p: Perks = {};
const pets: { char: string; position: 'left' | 'right' | 'both' }[] = [];
for (const e of entitlements) {
let meta: any = {};
try { meta = e.metaJson ? JSON.parse(e.metaJson) : {}; } catch { /* */ }
if (e.kind === 'noads') { p.noads = true; if (meta.plan === 'annual') p.badge = true; }
if (e.kind === 'style-dore') p.skin = 'gold';
if (e.kind === 'pet' && meta.char) pets.push({ char: meta.char, position: meta.position ?? 'left' });
if (e.kind === 'element-skin') p.elementSkin = true;
if (e.kind === 'rich-htmlcss') p.richHtmlcss = true;
if (e.kind === 'rich-js') p.richJs = true;
if (e.kind === 'no-file-limit') p.noFileLimit = true;
if (e.kind === 'audio-alert') p.audioAlert = true;
}
if (pets.length) p.pets = pets.slice(0, 3);
myPerks.value = p;
if (myIp.value) setPerks(myIp.value, p);
} catch {
/* ignore */
}
}
const { stats, connected, sendTyping } = useRealtime({
onMessage: addIncoming,
onReconnect: () => {
fetchMessages();
fetchWallet();
fetchMyPerks();
},
onWallet: applyWalletFrame,
onPerks: (data: { ip: string; perks: Perks }) => {
applyPerksFrame(data);
// If it's about us, update myPerks too (viewer-scoped perks like NoAds).
if (myIp.value && data.ip === myIp.value) myPerks.value = data.perks ?? {};
},
onAds: () => bumpAdsRevision(), // a user ad entered rotation → refetch
onAlert: (data) => handleAlertFrame(data), // paid global audio alert
});
interface PostExtras {
parentId?: string;
richMode?: 'htmlcss' | 'js';
richContent?: string;
attachmentIds?: string[];
}
async function postMessage(content: string, extras: PostExtras = {}): Promise<boolean> {
const hasRich = !!extras.richContent && !!extras.richMode;
const hasFiles = !!extras.attachmentIds?.length;
// Allow empty text only when there's rich content or an attachment.
if (!content.trim() && !hasRich && !hasFiles) return false;
sending.value = true;
try {
const res = await fetch(`${API_URL}/api/messages`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ content: content.trim() }),
body: JSON.stringify({
content: content.trim() || ' ',
parentId: extras.parentId,
richMode: extras.richMode,
richContent: extras.richContent,
attachmentIds: extras.attachmentIds,
}),
});
if (!res.ok) return false;
await fetchMessages();
// The created message comes back via the WebSocket broadcast, so no
// re-fetch here. Fallback: if the socket is down, add it locally.
if (!connected.value) {
const created = (await res.json()) as Message;
addIncoming(
created.parentId == null ? { ...created, replies: [] } : created
);
}
return true;
} finally {
sending.value = false;
}
}
onMounted(fetchMessages);
onMounted(() => {
fetchMessages();
fetchWallet();
fetchMyPerks();
});
return { messages, loading, sending, postMessage };
return {
messages,
loading,
sending,
postMessage,
stats,
connected,
sendTyping,
myPerks,
fetchMyPerks,
};
}

View File

@@ -0,0 +1,41 @@
import { reactive } from 'vue';
/**
* Perks store (module-level singleton): maps an author IP → its visible perks.
* Seeded from message payloads (authorPerks), updated live by WS `perks` frames,
* and read by MessageItem to colour names / render pets for every author.
*/
export type PetPosition = 'left' | 'right' | 'both';
export interface Perks {
skin?: 'gold';
pets?: { char: string; position: PetPosition }[];
noads?: boolean;
badge?: boolean;
elementSkin?: boolean;
richHtmlcss?: boolean;
richJs?: boolean;
noFileLimit?: boolean;
audioAlert?: boolean;
}
const map = reactive<Record<string, Perks>>({});
/** Merge perks for one IP (from a message payload or a perks frame). */
export function setPerks(ip: string, perks: Perks | undefined | null): void {
if (!ip || !perks) return;
map[ip] = perks;
}
/** Apply a WS `perks` frame: { ip, perks }. */
export function applyPerksFrame(data: { ip: string; perks: Perks }): void {
if (data?.ip) map[data.ip] = data.perks ?? {};
}
export function usePerks() {
function perksFor(ip: string): Perks {
return map[ip] ?? {};
}
return { perksFor, setPerks };
}

View File

@@ -0,0 +1,125 @@
import { ref, onMounted, onUnmounted } from 'vue';
/** Mirror of the backend StatsSnapshot. */
export interface Stats {
// live
connectedTabs: number;
typingNow: number;
lettersPerSec: number;
msgsPerMin: number;
// totals
messages: number;
replies: number;
charsSent: number;
lettersTyped: number;
uniqueIps: number;
longestMsg: number;
// derived
abandonRate: number;
avgLength: number;
moneyExtorted: number;
}
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
const WS_URL = API_URL.replace(/^http/, 'ws') + '/ws';
const TYPING_FLUSH_MS = 400; // batch keystroke deltas before sending
const RECONNECT_DELAY_MS = 1500;
interface RealtimeHooks {
onMessage?: (raw: any) => void;
/** Called when the socket reconnects after a drop — use to resync state. */
onReconnect?: () => void;
/** Wallet update for THIS tab's IP (balance changed). */
onWallet?: (data: any) => void;
/** A visible perk changed for some IP (skin/pet) — update that author everywhere. */
onPerks?: (data: any) => void;
/** Ad inventory changed (e.g. a user bought a Cadre de Pub). */
onAds?: (data: any) => void;
/** A paid global audio alert was fired. */
onAlert?: (data: any) => void;
}
export function useRealtime(hooks: RealtimeHooks = {}) {
const stats = ref<Stats | null>(null);
const connected = ref(false);
let ws: WebSocket | null = null;
let reconnectTimer: ReturnType<typeof setTimeout> | null = null;
let typingTimer: ReturnType<typeof setTimeout> | null = null;
let typingBuffer = 0;
let everConnected = false;
let closedByUs = false;
function connect(): void {
try {
ws = new WebSocket(WS_URL);
} catch {
scheduleReconnect();
return;
}
ws.onopen = () => {
connected.value = true;
if (everConnected) hooks.onReconnect?.();
everConnected = true;
};
ws.onmessage = (ev) => {
let msg: { type?: string; data?: any };
try {
msg = JSON.parse(ev.data);
} catch {
return;
}
if (msg.type === 'stats') stats.value = msg.data as Stats;
else if (msg.type === 'message') hooks.onMessage?.(msg.data);
else if (msg.type === 'wallet') hooks.onWallet?.(msg.data);
else if (msg.type === 'perks') hooks.onPerks?.(msg.data);
else if (msg.type === 'ads') hooks.onAds?.(msg.data);
else if (msg.type === 'alert') hooks.onAlert?.(msg.data);
};
ws.onclose = () => {
connected.value = false;
if (!closedByUs) scheduleReconnect();
};
ws.onerror = () => {
ws?.close();
};
}
function scheduleReconnect(): void {
if (reconnectTimer || closedByUs) return;
reconnectTimer = setTimeout(() => {
reconnectTimer = null;
connect();
}, RECONNECT_DELAY_MS);
}
/** Report keystrokes (delta ≥ 0). Marks this tab as "typing" and feeds the global counter. */
function sendTyping(delta: number): void {
typingBuffer += Math.max(0, delta);
if (typingTimer) return;
typingTimer = setTimeout(flushTyping, TYPING_FLUSH_MS);
}
function flushTyping(): void {
typingTimer = null;
if (ws && ws.readyState === WebSocket.OPEN) {
ws.send(JSON.stringify({ type: 'typing', delta: typingBuffer }));
}
typingBuffer = 0;
}
onMounted(connect);
onUnmounted(() => {
closedByUs = true;
if (reconnectTimer) clearTimeout(reconnectTimer);
if (typingTimer) clearTimeout(typingTimer);
ws?.close();
});
return { stats, connected, sendTyping };
}

View File

@@ -0,0 +1,123 @@
import { ref } from 'vue';
import { useWallet } from './useWallet';
/** Marketplace client: catalogue, my entitlements, purchase flow. */
export interface Product {
id: string;
category: string;
name: string;
subtitle?: string | null;
kind: string;
basePrice: number; // centi-credits
promoPrice?: number | null;
badge?: string | null;
stockLimit?: number | null;
stockSold: number;
sortOrder: number;
metaJson?: string | null;
}
export interface Entitlement {
id: string;
ip: string;
kind: string;
active: boolean;
expiresAt?: string | null;
metaJson?: string | null;
createdAt: string;
}
export interface PurchaseOptions {
plan?: 'monthly' | 'annual';
durationDays?: number;
format?: 'static' | 'gif';
url?: string;
petDesign?: string;
petChar?: string;
petPosition?: 'left' | 'right' | 'both';
}
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
export function useShop() {
const products = ref<Product[]>([]);
const entitlements = ref<Entitlement[]>([]);
const loading = ref(false);
const buying = ref<string | null>(null); // productId currently being purchased
const lastError = ref<string | null>(null);
const lastSuccess = ref<string | null>(null);
const { fetchWallet } = useWallet();
async function fetchProducts(): Promise<void> {
loading.value = true;
try {
const res = await fetch(`${API_URL}/api/shop/products`);
if (res.ok) products.value = (await res.json()) as Product[];
} finally {
loading.value = false;
}
}
async function fetchMe(): Promise<void> {
try {
const res = await fetch(`${API_URL}/api/shop/me`);
if (res.ok) {
const data = await res.json();
entitlements.value = data.entitlements ?? [];
}
} catch {
/* ignore */
}
}
function owns(kind: string): boolean {
return entitlements.value.some((e) => e.kind === kind && e.active);
}
function petCount(): number {
return entitlements.value.filter((e) => e.kind === 'pet' && e.active).length;
}
async function purchase(productId: string, options: PurchaseOptions = {}): Promise<boolean> {
buying.value = productId;
lastError.value = null;
lastSuccess.value = null;
try {
const res = await fetch(`${API_URL}/api/shop/purchase`, {
method: 'POST',
headers: { 'Content-Type': 'application/json' },
body: JSON.stringify({ productId, options }),
});
const data = await res.json().catch(() => ({}));
if (!res.ok) {
lastError.value = data.error || 'Achat impossible';
return false;
}
lastSuccess.value = `Acheté : ${productId}`;
// Refresh wallet + my entitlements (WS also pushes wallet, this is belt-and-braces).
await Promise.all([fetchWallet(), fetchMe(), fetchProducts()]);
return true;
} catch {
lastError.value = 'Réseau indisponible';
return false;
} finally {
buying.value = null;
}
}
return {
products,
entitlements,
loading,
buying,
lastError,
lastSuccess,
fetchProducts,
fetchMe,
owns,
petCount,
purchase,
};
}

View File

@@ -0,0 +1,72 @@
import { ref } from 'vue';
/**
* Wallet store (module-level singleton so the header, shop, and composer all
* share one balance). Credits are CENTI-CREDITS server-side; `displayBalance`
* converts to a human "crédits" number. Live updates arrive via the WS `wallet`
* frame, routed here through useMessages' realtime hook (applyWalletFrame).
*/
export interface WalletView {
ip: string;
balance: number; // centi-credits, or a huge sentinel in free mode
freeMode: boolean;
}
const API_URL = import.meta.env.VITE_API_URL ?? 'http://localhost:3000';
const ip = ref<string>('');
const balanceRaw = ref<number>(0); // centi-credits
const freeMode = ref<boolean>(false);
const loaded = ref<boolean>(false);
function apply(view: WalletView): void {
ip.value = view.ip;
balanceRaw.value = view.balance;
freeMode.value = view.freeMode;
loaded.value = true;
}
/** Called by the realtime `wallet` frame handler. */
export function applyWalletFrame(data: WalletView): void {
apply(data);
}
async function fetchWallet(): Promise<void> {
try {
const res = await fetch(`${API_URL}/api/wallet`);
if (res.ok) apply((await res.json()) as WalletView);
} catch {
/* offline — keep last known */
}
}
async function topUp(): Promise<void> {
try {
const res = await fetch(`${API_URL}/api/wallet/topup`, { method: 'POST' });
if (res.ok) apply((await res.json()) as WalletView);
} catch {
/* ignore */
}
}
/** Human-readable balance ("∞" in free mode, else credits with 2 decimals). */
function displayBalance(): string {
if (freeMode.value) return '∞';
return (balanceRaw.value / 100).toLocaleString('fr-FR', {
minimumFractionDigits: 2,
maximumFractionDigits: 2,
});
}
export function useWallet() {
return {
ip,
balanceRaw,
freeMode,
loaded,
fetchWallet,
topUp,
displayBalance,
};
}

View File

@@ -2,11 +2,16 @@ import { createApp } from 'vue';
import { createRouter, createWebHistory } from 'vue-router';
import App from './App.vue';
import HomePage from './views/HomePage.vue';
import ShopPage from './views/ShopPage.vue';
import './style.css';
const router = createRouter({
history: createWebHistory(),
routes: [{ path: '/', component: HomePage }],
routes: [
{ path: '/', component: HomePage },
{ path: '/shop', component: ShopPage },
{ path: '/shop/p/:id', component: ShopPage },
],
});
createApp(App).use(router).mount('#app');

View File

@@ -1,63 +1,215 @@
<template>
<div class="xip-root">
<!-- Bande pub gauche -->
<AdBand />
<div class="xip-app">
<!-- Bandeau de stats temps réel, toujours visible -->
<StatsTicker :stats="stats" :connected="connected" />
<!-- Zone chat centrale -->
<div class="xip-center">
<ChatHeader :connected-count="connectedCount" />
<MessageList :messages="messages" />
<div class="xip-root">
<!-- Bande pub gauche masquée si l'utilisateur a NoAds -->
<AdBand v-if="!myPerks.noads" />
<!-- Barre de saisie -->
<div class="input-bar">
<input
v-model="draft"
class="input-field"
type="text"
placeholder="Entrez un message..."
:maxlength="267"
@keydown.enter.exact.prevent="submit"
/>
<SendButton :disabled="!draft.trim() || sending" @send="submit" />
<!-- Zone chat centrale -->
<div class="xip-center">
<ChatHeader :connected-count="stats?.connectedTabs ?? 0" />
<MessageList :messages="messages" :hide-ads="!!myPerks.noads" @reply="startReply" />
<!-- Bannière de réponse -->
<div v-if="replyingTo" class="reply-banner">
<span class="reply-banner-txt">
En réponse à <span class="reply-ip">{{ replyingTo.authorIp }}</span>
</span>
<button class="reply-cancel" @click="cancelReply" type="button">✕</button>
</div>
<!-- Composer riche (HTML/CSS ou JS) -->
<div v-if="richMode !== 'none'" class="rich-composer">
<div class="rich-head">
<span class="rich-badge" :class="`rich-badge--${richMode}`">
{{ richMode === 'js' ? ' JavaScript' : '🎨 HTML / CSS' }}
</span>
<button class="rich-close" @click="richMode = 'none'" type="button">✕ texte simple</button>
</div>
<textarea
v-model="richDraft"
class="rich-textarea"
:placeholder="richMode === 'js' ? '<script>document.body.style.background=&quot;lime&quot;<\/script>' : '<h1 style=&quot;color:#0ff&quot;>Salut</h1>'"
rows="4"
/>
</div>
<!-- Barre de saisie -->
<div class="input-bar">
<!-- Bouton mode riche (si débloqué) -->
<button
v-if="myPerks.richHtmlcss || myPerks.richJs"
class="icon-btn"
:title="richMenuTitle"
@click="cycleRichMode"
type="button"
>{{ richMode === 'none' ? '🎨' : richMode === 'htmlcss' ? '🎨' : '' }}</button>
<!-- Bouton pièce jointe -->
<button class="icon-btn" title="Joindre un fichier" @click="pickFile" type="button">📎</button>
<input ref="fileInput" type="file" hidden @change="onFileSelected" />
<!-- Bouton alerte audio (si débloqué) -->
<button
v-if="myPerks.audioAlert"
class="icon-btn icon-btn--alert"
:title="alertMsg || 'Déclencher l\'alerte audio générale'"
@click="triggerAlert"
type="button"
>🔊</button>
<div class="field-wrap">
<input
v-model="draft"
class="input-field"
type="text"
placeholder="Entrez un message..."
:maxlength="267"
@input="onInput"
@keydown.enter.exact.prevent="submit"
/>
<span class="char-counter" :class="{ warn: draft.length > 240 }">{{ draft.length }}/267</span>
</div>
<SendButton :disabled="!canSend || sending" @send="submit" />
</div>
<!-- Pièces jointes en attente -->
<div v-if="pendingFiles.length" class="pending-files">
<span v-for="f in pendingFiles" :key="f.id" class="pending-chip">
📎 {{ f.filename }} ({{ kb(f.size) }})
<button @click="removePending(f.id)" type="button">✕</button>
</span>
</div>
<div v-if="uploadError" class="upload-error">{{ uploadError }}</div>
</div>
</div>
<!-- Bouton hamburger droit -->
<MenuToggle @toggle="menuOpen = !menuOpen" />
</div>
</template>
<script setup lang="ts">
import { ref } from 'vue';
import { ref, computed } from 'vue';
import AdBand from '@/components/AdBand.vue';
import ChatHeader from '@/components/ChatHeader.vue';
import MessageList from '@/components/MessageList.vue';
import SendButton from '@/components/SendButton.vue';
import MenuToggle from '@/components/MenuToggle.vue';
import StatsTicker from '@/components/StatsTicker.vue';
import { useMessages } from '@/composables/useMessages';
import { useAttachments } from '@/composables/useAttachments';
import { useAlert } from '@/composables/useAlert';
const { messages, sending, postMessage } = useMessages();
const draft = ref('');
const menuOpen = ref(false);
const { messages, sending, postMessage, stats, connected, sendTyping, myPerks } = useMessages();
const { uploadFile, kb } = useAttachments();
const { fireAlert } = useAlert();
// Compte simulé (connexion WebSocket à brancher plus tard)
const connectedCount = ref(312);
const draft = ref('');
// ── Alerte audio ──
const alertMsg = ref('');
async function triggerAlert(): Promise<void> {
const res = await fireAlert();
alertMsg.value = res.ok ? '' : res.error || '';
if (alertMsg.value) setTimeout(() => { alertMsg.value = ''; }, 3000);
}
// ── Réponse ──
const replyingTo = ref<{ id: string; authorIp: string } | null>(null);
function startReply(payload: { id: string; authorIp: string }): void {
replyingTo.value = payload;
}
function cancelReply(): void {
replyingTo.value = null;
}
// ── Mode riche ──
const richMode = ref<'none' | 'htmlcss' | 'js'>('none');
const richDraft = ref('');
const richMenuTitle = computed(() =>
myPerks.value.richJs ? 'Message riche : texte / HTML-CSS / JS' : 'Message riche : texte / HTML-CSS'
);
function cycleRichMode(): void {
// Cycle through the tiers the user owns.
if (richMode.value === 'none') richMode.value = myPerks.value.richHtmlcss ? 'htmlcss' : 'js';
else if (richMode.value === 'htmlcss') richMode.value = myPerks.value.richJs ? 'js' : 'none';
else richMode.value = 'none';
}
// ── Pièces jointes ──
const fileInput = ref<HTMLInputElement | null>(null);
const pendingFiles = ref<{ id: string; filename: string; size: number }[]>([]);
const uploadError = ref<string | null>(null);
function pickFile(): void {
uploadError.value = null;
fileInput.value?.click();
}
async function onFileSelected(e: Event): Promise<void> {
const input = e.target as HTMLInputElement;
const file = input.files?.[0];
input.value = '';
if (!file) return;
const res = await uploadFile(file);
if (res.ok) {
pendingFiles.value.push({ id: res.attachment.id, filename: res.attachment.filename, size: res.attachment.size });
} else {
uploadError.value = res.error;
}
}
function removePending(id: string): void {
pendingFiles.value = pendingFiles.value.filter((f) => f.id !== id);
}
// ── Frappe (stats) ──
let prevLen = 0;
function onInput(): void {
const len = draft.value.length;
const delta = len - prevLen;
prevLen = len;
sendTyping(delta > 0 ? delta : 0);
}
// ── Envoi ──
const canSend = computed(() =>
!!draft.value.trim() || (richMode.value !== 'none' && !!richDraft.value.trim()) || pendingFiles.value.length > 0
);
async function submit(): Promise<void> {
const ok = await postMessage(draft.value);
if (ok) draft.value = '';
if (!canSend.value) return;
const ok = await postMessage(draft.value, {
parentId: replyingTo.value?.id,
richMode: richMode.value !== 'none' && richDraft.value.trim() ? richMode.value : undefined,
richContent: richMode.value !== 'none' && richDraft.value.trim() ? richDraft.value : undefined,
attachmentIds: pendingFiles.value.map((f) => f.id),
});
if (ok) {
draft.value = '';
richDraft.value = '';
richMode.value = 'none';
pendingFiles.value = [];
replyingTo.value = null;
uploadError.value = null;
prevLen = 0;
}
}
</script>
<style scoped>
.xip-root {
.xip-app {
display: flex;
flex-direction: column;
width: 100vw;
height: 100dvh;
background: #080808;
overflow: hidden;
}
.xip-root {
flex: 1;
min-height: 0;
display: flex;
overflow: hidden;
}
.xip-center {
flex: 1;
min-width: 0;
@@ -67,24 +219,69 @@ async function submit(): Promise<void> {
overflow: hidden;
}
/* ── Bannière de réponse ── */
.reply-banner {
flex-shrink: 0;
display: flex;
align-items: center;
justify-content: space-between;
background: #0c1622;
border-top: 1px solid #16324a;
padding: 6px 20px;
}
.reply-banner-txt { font-family: Arial, sans-serif; font-size: 11px; color: #6688aa; }
.reply-ip { font-family: 'Courier New', monospace; color: #00ccff; font-weight: bold; }
.reply-cancel { background: none; border: none; color: #557; cursor: pointer; font-size: 13px; }
.reply-cancel:hover { color: #aac; }
/* ── Composer riche ── */
.rich-composer {
flex-shrink: 0;
background: #0c0c16;
border-top: 1px solid #1a1a26;
padding: 8px 20px;
}
.rich-head { display: flex; align-items: center; justify-content: space-between; margin-bottom: 6px; }
.rich-badge { font-size: 11px; font-weight: bold; padding: 2px 8px; border-radius: 8px; }
.rich-badge--htmlcss { color: #00ddaa; background: #062019; }
.rich-badge--js { color: #ffcc44; background: #201a06; }
.rich-close { background: none; border: none; color: #557; cursor: pointer; font-size: 11px; }
.rich-close:hover { color: #aac; }
.rich-textarea {
width: 100%; box-sizing: border-box; resize: vertical;
background: #141420; border: 1px solid #222234; border-radius: 8px;
color: #aaccbb; font-family: 'Courier New', monospace; font-size: 12px; padding: 8px 10px; outline: none;
}
/* ── Barre de saisie ── */
.input-bar {
height: 70px;
min-height: 70px;
flex-shrink: 0;
background: #0e0e16;
border-top: 1px solid #1a1a26;
display: flex;
align-items: center;
padding: 0 20px;
gap: 12px;
gap: 10px;
}
.icon-btn {
flex-shrink: 0;
width: 36px; height: 36px;
background: #141420; border: 1px solid #222234; border-radius: 50%;
font-size: 16px; cursor: pointer; display: flex; align-items: center; justify-content: center;
transition: background 0.15s;
}
.icon-btn:hover { background: #1c1c2e; }
.icon-btn--alert { border-color: #aa3344; }
.icon-btn--alert:hover { background: #2a1418; box-shadow: 0 0 10px #ff224455; }
.field-wrap { flex: 1; position: relative; display: flex; align-items: center; }
.input-field {
flex: 1;
background: #141420;
border: 1px solid #222234;
border-radius: 23px;
padding: 12px 22px;
padding: 12px 60px 12px 22px;
color: #aaaacc;
font-family: Arial, sans-serif;
font-size: 13px;
@@ -93,4 +290,19 @@ async function submit(): Promise<void> {
}
.input-field::placeholder { color: #2a2a44; }
.input-field:focus { border-color: #333355; }
.char-counter {
position: absolute; right: 16px;
font-family: 'Courier New', monospace; font-size: 10px; color: #33334d; pointer-events: none;
}
.char-counter.warn { color: #ff8844; }
/* ── Pièces jointes en attente ── */
.pending-files { flex-shrink: 0; display: flex; flex-wrap: wrap; gap: 8px; padding: 0 20px 10px; }
.pending-chip {
display: inline-flex; align-items: center; gap: 6px;
background: #141420; border: 1px solid #222234; border-radius: 12px;
padding: 4px 10px; font-size: 11px; color: #aaccbb; font-family: Arial, sans-serif;
}
.pending-chip button { background: none; border: none; color: #66f; cursor: pointer; }
.upload-error { flex-shrink: 0; padding: 0 20px 10px; color: #ff7788; font-size: 11px; font-family: Arial, sans-serif; }
</style>

View File

@@ -0,0 +1,212 @@
<template>
<div class="shop">
<!-- Header -->
<header class="shop-header">
<div class="sh-left">
<router-link to="/" class="sh-back"> Chat</router-link>
<span class="sh-title">XIP</span>
<span class="sh-sub">Marketplace</span>
</div>
<div class="sh-right">
<span v-if="ip" class="sh-ip">Connecté&nbsp;: {{ ip }}</span>
<span class="sh-balance" :class="{ free: freeMode }">
{{ displayBalance() }} <span class="sh-cr">cr</span>
</span>
<button class="sh-topup" @click="topUp" type="button">💸 Recharger</button>
</div>
</header>
<!-- Flash promo banner -->
<div class="flash">
OFFRES FLASH Cadre de Pub -33%, Pack Cosmétique -3 cr expire dans
<span class="flash-timer">{{ countdown }}</span>
</div>
<div class="shop-body">
<!-- Category nav -->
<nav class="shop-nav">
<button
v-for="cat in categories"
:key="cat.id"
class="nav-item"
:class="{ active: activeCat === cat.id }"
@click="activeCat = cat.id"
type="button"
>{{ cat.label }}</button>
<div class="nav-wallet">
<p class="nav-wallet-label">Ton solde</p>
<p class="nav-wallet-val" :class="{ free: freeMode }">{{ displayBalance() }} cr</p>
<button class="nav-topup" @click="topUp" type="button">+ Recharger gratuitement</button>
<p v-if="freeMode" class="nav-free-note">Mode localhost : tout gratuit 🎉</p>
</div>
</nav>
<!-- Product grid -->
<main class="shop-main">
<div v-if="lastError" class="toast toast--err">{{ lastError }}</div>
<div v-else-if="lastSuccess" class="toast toast--ok"> Achat effectué</div>
<div class="grid">
<ProductCard
v-for="p in visibleProducts"
:key="p.id"
:product="p"
:buying="buying === p.id"
:owns="owns"
:pet-count="petCount()"
:free-mode="freeMode"
@buy="onBuy"
/>
</div>
<p v-if="visibleProducts.length === 0" class="empty">Aucun produit dans cette catégorie.</p>
</main>
</div>
</div>
</template>
<script setup lang="ts">
import { ref, computed, onMounted, onUnmounted } from 'vue';
import { useShop, type PurchaseOptions } from '@/composables/useShop';
import { useWallet } from '@/composables/useWallet';
import ProductCard from '@/components/shop/ProductCard.vue';
const { products, loading, buying, lastError, lastSuccess, fetchProducts, fetchMe, owns, petCount, purchase } = useShop();
const { ip, freeMode, displayBalance, fetchWallet, topUp: walletTopUp } = useWallet();
const categories = [
{ id: 'all', label: 'Tout voir' },
{ id: 'publicite', label: 'Publicité' },
{ id: 'abonnements', label: 'Abonnements' },
{ id: 'cosmetiques', label: 'Cosmétiques' },
{ id: 'premium', label: 'Premium' },
{ id: 'promotions', label: 'Promotions' },
];
const activeCat = ref('all');
const visibleProducts = computed(() =>
activeCat.value === 'all'
? products.value
: products.value.filter((p) => p.category === activeCat.value)
);
async function onBuy(productId: string, options: PurchaseOptions): Promise<void> {
await purchase(productId, options);
}
async function topUp(): Promise<void> {
await walletTopUp();
}
// Cosmetic countdown timer (purely decorative, like the mockups).
const countdown = ref('02:47:33');
let timer: ReturnType<typeof setInterval> | null = null;
let remaining = 2 * 3600 + 47 * 60 + 33;
function tick(): void {
remaining = remaining > 0 ? remaining - 1 : 0;
const h = Math.floor(remaining / 3600);
const m = Math.floor((remaining % 3600) / 60);
const s = remaining % 60;
const pad = (n: number) => String(n).padStart(2, '0');
countdown.value = `${pad(h)}:${pad(m)}:${pad(s)}`;
}
onMounted(() => {
fetchProducts();
fetchMe();
fetchWallet();
timer = setInterval(tick, 1000);
});
onUnmounted(() => { if (timer) clearInterval(timer); });
</script>
<style scoped>
.shop {
width: 100vw;
height: 100dvh;
background: #08080e;
display: flex;
flex-direction: column;
overflow: hidden;
font-family: Arial, sans-serif;
}
/* Header */
.shop-header {
flex-shrink: 0;
height: 56px;
background: #0e0e18;
border-bottom: 1px solid #1a1a2e;
display: flex;
align-items: center;
justify-content: space-between;
padding: 0 20px;
}
.sh-left { display: flex; align-items: center; gap: 12px; }
.sh-back {
color: #00ddff; text-decoration: none; font-size: 12px; font-weight: bold;
border: 1px solid #00aaff44; border-radius: 10px; padding: 4px 10px;
}
.sh-back:hover { background: #00aaff14; }
.sh-title { font-size: 18px; font-weight: bold; color: #00eeff; text-shadow: 0 0 10px #00ccff99; }
.sh-sub { font-size: 13px; color: #8888aa; }
.sh-right { display: flex; align-items: center; gap: 12px; }
.sh-ip { font-family: 'Courier New', monospace; font-size: 11px; color: #5566aa; }
.sh-balance { font-family: 'Courier New', monospace; font-size: 15px; font-weight: bold; color: #ffdd66; text-shadow: 0 0 10px #ffaa0044; }
.sh-balance.free { color: #33ff99; text-shadow: 0 0 10px #00ff6644; }
.sh-cr { font-size: 10px; color: #886633; }
.sh-topup {
background: #1a2a1a; border: 1px solid #33aa55; color: #44dd77;
font-size: 12px; font-weight: bold; padding: 6px 14px; border-radius: 16px; cursor: pointer;
box-shadow: 0 0 10px #33aa5533;
}
.sh-topup:hover { background: #234a23; }
/* Flash banner */
.flash {
flex-shrink: 0;
background: linear-gradient(90deg, #2a0a0a, #1a0a1a);
border-bottom: 1px solid #44113344;
color: #ff8866; font-size: 12px; text-align: center; padding: 7px;
}
.flash-timer { font-family: 'Courier New', monospace; color: #ffcc44; font-weight: bold; }
/* Body */
.shop-body { flex: 1; display: flex; min-height: 0; }
.shop-nav {
width: 200px; flex-shrink: 0; background: #0b0b14; border-right: 1px solid #1a1a2a;
padding: 14px 10px; display: flex; flex-direction: column; gap: 4px; overflow-y: auto;
}
.nav-item {
text-align: left; background: none; border: none; color: #8888aa;
font-size: 13px; padding: 9px 12px; border-radius: 7px; cursor: pointer;
}
.nav-item:hover { background: #14142080; color: #aaaacc; }
.nav-item.active { background: #00aaff18; color: #00ddff; font-weight: bold; }
.nav-wallet {
margin-top: auto; background: #0e0e1a; border: 1px solid #20203a; border-radius: 8px; padding: 12px;
}
.nav-wallet-label { font-size: 10px; color: #6a6a90; margin: 0 0 4px; text-transform: uppercase; letter-spacing: 1px; }
.nav-wallet-val { font-family: 'Courier New', monospace; font-size: 20px; font-weight: bold; color: #ffdd66; margin: 0 0 10px; }
.nav-wallet-val.free { color: #33ff99; }
.nav-topup { width: 100%; background: #1a2a1a; border: 1px solid #33aa55; color: #44dd77; font-size: 11px; font-weight: bold; padding: 8px; border-radius: 14px; cursor: pointer; }
.nav-topup:hover { background: #234a23; }
.nav-free-note { font-size: 10px; color: #33aa66; margin: 8px 0 0; text-align: center; }
.shop-main { flex: 1; overflow-y: auto; padding: 20px; }
.grid {
display: grid;
grid-template-columns: repeat(auto-fill, minmax(280px, 1fr));
gap: 16px;
align-items: start;
}
.empty { color: #44446a; text-align: center; padding: 40px; }
.toast {
margin-bottom: 14px; padding: 10px 14px; border-radius: 8px; font-size: 13px;
}
.toast--err { background: #2a0e12; border: 1px solid #aa3344; color: #ff8899; }
.toast--ok { background: #0e2a16; border: 1px solid #33aa55; color: #66ffaa; }
</style>