opencode-pollinations-plugin 6.1.0-beta.22 → 6.1.0-beta.24

package/dist/tools/power/remove_background.js

@@ -7,8 +7,8 @@ import { resolveOutputDir, formatFileSize, TOOL_DIRS } from '../shared.js';
 import { getConfigDir } from '../../server/config.js';
 // ─── Provider Defaults ───────────────────────────────────────────────────────
 const CUT_API_URL = 'https://cut.esprit-artificiel.com';
-const CUT_API_KEY = 'sk-cut-fkomEA2026-hybridsoap161200';
 const BACKGROUNDCUT_API_URL = 'https://backgroundcut.co/api/v1/cut/';
+const HMAC_SECRET = "super_secret_community_key_2026"; // Sel caché dans le code transpilé
 // ─── Key Storage ─────────────────────────────────────────────────────────────
 const KEYS_FILE = path.join(getConfigDir(), 'backgroundcut_keys.json');
 function loadKeys() {
@@ -105,14 +105,40 @@ async function removeViaCut(imageData, filename, mimeType) {
     parts.push(Buffer.from(`\r\n--${boundary}--\r\n`));
     const body = Buffer.concat(parts);
     const url = new URL(`${CUT_API_URL}/remove-bg`);
+    const headers = {
+        'Content-Type': `multipart/form-data; boundary=${boundary}`,
+        'Content-Length': body.length,
+        'User-Agent': 'OpenCode-Pollinations-Plugin/6.1',
+    };
+    // 1. Vérifier si l'utilisateur (Franck) a configuré une clé VIP localement
+    let vipKey = null;
+    try {
+        const vipPath = path.join(getConfigDir(), 'cut_vip.json');
+        if (fs.existsSync(vipPath)) {
+            const data = JSON.parse(fs.readFileSync(vipPath, 'utf-8'));
+            if (data.vip_key)
+                vipKey = data.vip_key;
+        }
+    }
+    catch { }
+    if (vipKey) {
+        // Mode Fast-Lane (VIP) : la requête passe directement en tête de file
+        headers['X-Api-Key'] = vipKey;
+    }
+    else {
+        // Mode Communauté (Plugin public) : Génération de la signature dynamique courte durée (Anti-leech)
+        const timestamp = Date.now().toString();
+        const payloadToSign = `request-rembg-v1:${timestamp}`;
+        const signature = require('crypto')
+            .createHmac('sha256', HMAC_SECRET)
+            .update(payloadToSign)
+            .digest('hex');
+        headers['X-Cut-Timestamp'] = timestamp;
+        headers['Authorization'] = `Bearer community:${signature}`;
+    }
     const res = await httpRequest(url.toString(), {
         method: 'POST',
-        headers: {
-            'Content-Type': `multipart/form-data; boundary=${boundary}`,
-            'Content-Length': body.length,
-            'X-Api-Key': CUT_API_KEY,
-            'User-Agent': 'OpenCode-Pollinations-Plugin/6.0',
-        },
+        headers
     }, body);
     if (res.statusCode >= 400) {
         throw new Error(`CUT API Error ${res.statusCode}: ${res.body.toString().substring(0, 200)}`);

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "opencode-pollinations-plugin",
     "displayName": "Pollinations AI (V5.9)",
-    "version": "6.1.0-beta.22",
+    "version": "6.1.0-beta.24",
     "description": "Native Pollinations.ai Provider Plugin for OpenCode",
     "publisher": "pollinations",
     "repository": {