Code.gs

/**
 * AutoScript AI - Sanadidari
 * Jour 1 : Initialisation & Structure
 */

function onOpen() {
  SpreadsheetApp.getUi()
    .createMenu('⚡ AutoScript AI')
    .addItem('Open Assistant', 'showSidebar')
    .addItem('Authorize AI (Startup)', 'testAuth')
    .addToUi();
}

/**
 * Function to force Google authorization dialogue
 */
function testAuth() {
  UrlFetchApp.fetch("https://www.google.com");
  SpreadsheetApp.getUi().alert("✅ Authorization successful! You can now use AutoScript AI.");
}

/**
 * Gère les notifications de paiement PayPal (Via Router Hub Sanadidari)
 */
function doPost(e) {
  try {
    const params = e.parameter;
    const paymentStatus = params.payment_status;
    const payerEmail = params.payer_email; // Envoyé par le Router Hub
    const itemNumber = params.item_number || ""; // Ex: AS_PACK_50

    if (paymentStatus === "Completed" && itemNumber.indexOf("AS_") === 0) {
      let creditsToAdd = 0;
      if (itemNumber === "AS_PACK_10" || itemNumber.includes("10")) creditsToAdd = 10;
      if (itemNumber === "AS_PACK_50" || itemNumber.includes("50")) creditsToAdd = 50;
      if (itemNumber === "AS_PACK_100" || itemNumber.includes("100")) creditsToAdd = 100;
      if (itemNumber === "AS_PACK_500" || itemNumber.includes("500")) creditsToAdd = 500;

      if (creditsToAdd > 0 && payerEmail) {
        const currentCredits = getCreditsForEmail(payerEmail);
        updateCreditsForEmail(payerEmail, currentCredits + creditsToAdd);
        console.log(`Paiement validé : +${creditsToAdd} crédits pour ${payerEmail}`);
      }
      return ContentService.createTextOutput("SUCCESS");
    }
  } catch (err) {
    console.error("Erreur IPN AutoScript : " + err.toString());
    return ContentService.createTextOutput("ERROR");
  }
  return ContentService.createTextOutput("IGNORED");
}

function getCreditsForEmail(email) {
  const scriptProps = PropertiesService.getScriptProperties();
  const creditsDB = JSON.parse(scriptProps.getProperty('CREDITS_DB') || "{}");
  return creditsDB[email] === undefined ? 10 : creditsDB[email];
}

function updateCreditsForEmail(email, newCount) {
  const scriptProps = PropertiesService.getScriptProperties();
  const creditsDB = JSON.parse(scriptProps.getProperty('CREDITS_DB') || "{}");
  creditsDB[email] = newCount;
  scriptProps.setProperty('CREDITS_DB', JSON.stringify(creditsDB));
}

function showSidebar() {
  const html = HtmlService.createTemplateFromFile('sidebar')
    .evaluate()
    .setTitle('AutoScript AI')
    .setWidth(300);
  SpreadsheetApp.getUi().showSidebar(html);
}

/**
 * Fonction utilitaire pour inclure des fichiers HTML
 */
function include(filename) {
  return HtmlService.createHtmlOutputFromFile(filename).getContent();
}

/**
 * Fonction de traitement principale (Appelée par le frontend)
 */
function processAutoScript(prompt) {
  try {
    // 1. Credit check
    let credits = getUserCredits();
    if (credits <= 0) {
      return { status: 'error', message: '🚫 Credits exhausted.' };
    }

    // 2. Call Gemini AI
    const aiResponse = callGemini(prompt);
    
    // 3. Deduct credit if success
    updateUserCredits(credits - 1);
    
    return {
      status: 'success',
      message: '✅ Script generated successfully!<br><br><code>' + aiResponse.summary + '</code><br><br>The code has been copied to your project. (Note: Auto-injection requires Apps Script API authorization).',
      credits: credits - 1,
      code: aiResponse.code
    };
  } catch (e) {
    return { status: 'error', message: '❌ Error: ' + e.toString() };
  }
}

/**
 * Appel API Gemini avec mécanisme de secours (Fallback)
 */
function callGemini(userPrompt) {
  const apiKey = PropertiesService.getScriptProperties().getProperty('GEMINI_API_KEY');
  if (!apiKey) throw new Error('GEMINI_API_KEY not configured. Run setupApiKey() first.');
  
  // Liste exhaustive des modèles détectés (Classés par performance/stabilité)
  const models = [
    'gemini-2.5-flash',
    'gemini-2.5-pro',
    'gemini-2.0-flash',
    'gemini-2.0-flash-001',
    'gemini-1.5-flash',
    'gemini-1.5-pro',
    'gemini-flash-latest',
    'gemini-pro-latest',
    'gemini-2.0-flash-lite',
    'gemini-1.0-pro'
  ];

  let lastError = '';

  for (let model of models) {
    try {
      const apiUrl = 'https://generativelanguage.googleapis.com/v1beta/models/' + model + ':generateContent?key=' + apiKey;

      const systemPrompt = "You are a Google Apps Script expert for Google Sheets. " +
        "Your mission is to generate immediately executable code. " +
        "IMPORTANT: Do NOT put the code inside a 'function main() { ... }'. Write direct code that executes immediately. " +
        "Respond ONLY with a JSON object in the exact format: {\"summary\": \"Description\", \"code\": \"the code here\"}. " +
        "No markdown. Request: " + userPrompt;

      const payload = {
        contents: [{ parts: [{ text: systemPrompt }] }]
      };

      const options = {
        method: 'post',
        contentType: 'application/json',
        payload: JSON.stringify(payload),
        muteHttpExceptions: true // Permet d'analyser l'erreur sans crasher
      };

      const response = UrlFetchApp.fetch(apiUrl, options);
      const statusCode = response.getResponseCode();
      const content = response.getContentText();
      
      if (statusCode === 200) {
        const result = JSON.parse(content);
        const aiText = result.candidates[0].content.parts[0].text;
        const cleanJson = aiText.replace(/```json/g, '').replace(/```/g, '').trim();
        return JSON.parse(cleanJson);
      } else {
        console.warn("Échec avec " + model + " (Code " + statusCode + ")");
        lastError = "Modèle " + model + " : " + content;
        continue; // Passer au modèle suivant
      }
    } catch (e) {
      lastError = e.toString();
      continue;
    }
  }

  throw new Error("Aucun modèle Gemini n'a répondu. Dernière erreur : " + lastError);
}

function getUserEmail() {
  return Session.getActiveUser().getEmail();
}

/**
 * Récupère les crédits pour un email spécifique (utilisé par doPost)
 */
function getCreditsForEmail(email) {
  const scriptProps = PropertiesService.getScriptProperties();
  const creditsDB = JSON.parse(scriptProps.getProperty('CREDITS_DB') || "{}");
  return creditsDB[email] === undefined ? 10 : creditsDB[email];
}

/**
 * Récupère les crédits de l'utilisateur actuel
 */
function getUserCredits() {
  return getCreditsForEmail(getUserEmail());
}

/**
 * Met à jour les crédits pour un email spécifique (utilisé par doPost)
 */
function updateCreditsForEmail(email, newCount) {
  const scriptProps = PropertiesService.getScriptProperties();
  const creditsDB = JSON.parse(scriptProps.getProperty('CREDITS_DB') || "{}");
  creditsDB[email] = newCount;
  scriptProps.setProperty('CREDITS_DB', JSON.stringify(creditsDB));
}

/**
 * Met à jour les crédits de l'utilisateur actuel
 */
function updateUserCredits(newCount) {
  updateCreditsForEmail(getUserEmail(), newCount);
}

/**
 * Exécute le code généré par l'IA avec filtrage de sécurité
 */
function runGeneratedCode(code) {
  try {
    // 1. Nettoyage du code
    const cleanCode = code.replace(/```javascript/g, '').replace(/```/g, '').trim();
    
    // 2. SECURITY FILTER: Forbidden critical operations without confirmation
    const forbiddenKeywords = ['deleteFile', 'removeFolder', 'deleteSheet', 'UrlFetchApp.fetch'];
    for (let kw of forbiddenKeywords) {
      if (cleanCode.includes(kw) && !cleanCode.includes('// force')) {
        return { status: 'error', message: '⚠️ Security: The operation \"' + kw + '\" has been blocked as it is potentially destructive.' };
      }
    }
    
    // 3. EXECUTION
    eval(cleanCode);
    SpreadsheetApp.flush();
    
    return { status: 'success', message: '🚀 Action performed!' };
  } catch (e) {
    return { status: 'error', message: '❌ Execution error: ' + e.toString() };
  }
}

/**
 * Run once from the ⚡ AutoScript AI menu or Apps Script editor to store your Gemini API key.
 */
function setupApiKey() {
  const ui = SpreadsheetApp.getUi();
  const result = ui.prompt('Setup', 'Enter your Gemini API Key:', ui.ButtonSet.OK_CANCEL);
  if (result.getSelectedButton() === ui.Button.OK) {
    PropertiesService.getScriptProperties().setProperty('GEMINI_API_KEY', result.getResponseText().trim());
    ui.alert('✅ API Key saved securely.');
  }
}