Add nice tut

backend/config.py

@@ -3,6 +3,8 @@ from dotenv import load_dotenv
 
 load_dotenv()
 
+DEBUG: bool = os.getenv("DEBUG", "false").lower() == "true"
+
 MISTRAL_API_KEY: str = os.getenv("MISTRAL_API_KEY", "")
 SECRET_KEY: str = os.getenv("SECRET_KEY", "dev-secret-key-change-me")
 

backend/main.py

@@ -44,7 +44,7 @@ from pathlib import Path
 from typing import Any, Optional
 
 import socketio
-from fastapi import APIRouter, Body, FastAPI, HTTPException
+from fastapi import APIRouter, Body, Depends, FastAPI, HTTPException
 from fastapi.middleware.cors import CORSMiddleware
 from fastapi.staticfiles import StaticFiles
 from fastapi.responses import FileResponse
@@ -56,8 +56,15 @@ from game.state import GameState, TUTORIAL_DUMMY_ID
 from lobby.manager import LobbyManager
 from lobby.safe_name import sanitize_player_name
 from voice import command_parser, stt
+import config as _config
 import stats as _stats
 
+
+def require_debug():
+    """FastAPI dependency — raises 403 in production (DEBUG=False)."""
+    if not _config.DEBUG:
+        raise HTTPException(status_code=403, detail="Not available in production")
+
 BOT_OFFER_DELAY = 10  # seconds before offering bot opponent
 
 logging.basicConfig(level=logging.INFO)
@@ -180,6 +187,10 @@ def get_stats_recent():
 
 fastapi_app.include_router(_stats_router)
 
+@fastapi_app.get("/api/config")
+def get_config():
+    return {"debug": _config.DEBUG}
+
 # Unit sound effects (generated by scripts/generate_unit_sounds.py)
 _SOUNDS_DIR = Path(__file__).parent / "static" / "sounds"
 _UNITS_SOUNDS_DIR = _SOUNDS_DIR / "units"
@@ -290,7 +301,7 @@ def _merged_walkable_polygon(polygons: list) -> list:
     return polygons[0]
 
 
-@fastapi_app.put("/api/map/walkable")
+@fastapi_app.put("/api/map/walkable", dependencies=[Depends(require_debug)])
 async def save_walkable_polygon(body: dict = Body(...)):
     """Enregistre les polygones marchables (liste de polygones [x, y] en 0-100). Le jeu reçoit la fusion via GET."""
     polygons = body.get("polygons")
@@ -353,7 +364,7 @@ def _generate_geysers_around(cx: int, cy: int, count: int = 1, radius: float = 4
     return out
 
 
-@fastapi_app.put("/api/map/positions")
+@fastapi_app.put("/api/map/positions", dependencies=[Depends(require_debug)])
 async def save_map_positions(body: dict = Body(...)):
     """Enregistre positions de départ (2 ou 3, si 3 alors 2 seront tirées au sort par partie) et expansions."""
     import json
@@ -409,7 +420,7 @@ async def save_map_positions(body: dict = Body(...)):
     return {"status": "ok", "minerals_count": total_minerals, "geysers_count": total_geysers}
 
 
-@fastapi_app.put("/api/map/locations")
+@fastapi_app.put("/api/map/locations", dependencies=[Depends(require_debug)])
 async def save_map_locations(body: dict = Body(...)):
     """Enregistre les zones clés (locations) dans map.json."""
     import json
@@ -451,7 +462,7 @@ async def list_unit_sounds():
     return {"sounds": sounds}
 
 
-@fastapi_app.delete("/api/sounds/units/{unit}/{kind}")
+@fastapi_app.delete("/api/sounds/units/{unit}/{kind}", dependencies=[Depends(require_debug)])
 async def delete_unit_sound(unit: str, kind: str):
     """Supprime un son. Relancer le script régénère uniquement les manquants."""
     if not unit.replace("-", "").isalnum() or not kind.replace("-", "").isalnum():
@@ -485,7 +496,7 @@ async def list_building_sprites():
     return {"sprites": _list_sprites(_SPRITES_DIR / "buildings")}
 
 
-@fastapi_app.post("/api/sprites/generate")
+@fastapi_app.post("/api/sprites/generate", dependencies=[Depends(require_debug)])
 async def generate_sprites():
     """Lance la génération des sprites (unités + bâtiments) via l'API Mistral. Peut prendre plusieurs minutes."""
     import subprocess
@@ -522,7 +533,7 @@ def _run_sprite_script(extra_args: list[str]) -> subprocess.CompletedProcess:
     )
 
 
-@fastapi_app.post("/api/sprites/generate/units/{unit_id}")
+@fastapi_app.post("/api/sprites/generate/units/{unit_id}", dependencies=[Depends(require_debug)])
 async def generate_one_unit_sprite(unit_id: str):
     """Régénère une seule image d'unité."""
     unit_id = unit_id.strip().lower()
@@ -536,7 +547,7 @@ async def generate_one_unit_sprite(unit_id: str):
     return {"status": "ok", "id": unit_id}
 
 
-@fastapi_app.post("/api/sprites/generate/buildings/{building_id}")
+@fastapi_app.post("/api/sprites/generate/buildings/{building_id}", dependencies=[Depends(require_debug)])
 async def generate_one_building_sprite(building_id: str):
     """Régénère une seule image de bâtiment."""
     building_id = building_id.strip().lower().replace(" ", "_")
@@ -556,7 +567,7 @@ async def list_resource_sprites():
     return {"sprites": _list_sprites(_SPRITES_DIR / "resources")}
 
 
-@fastapi_app.post("/api/sprites/generate/resources/{resource_id}")
+@fastapi_app.post("/api/sprites/generate/resources/{resource_id}", dependencies=[Depends(require_debug)])
 async def generate_one_resource_sprite(resource_id: str):
     """Régénère une seule icône de ressource (mineral, geyser)."""
     resource_id = resource_id.strip().lower()
@@ -579,7 +590,7 @@ async def list_icons():
     return {"icons": _list_sprites(_ICONS_DIR)}
 
 
-@fastapi_app.post("/api/sprites/rotate/{kind}/{sprite_id}")
+@fastapi_app.post("/api/sprites/rotate/{kind}/{sprite_id}", dependencies=[Depends(require_debug)])
 async def rotate_sprite(kind: str, sprite_id: str):
     """Fait pivoter un sprite de 90° dans le sens antihoraire (rotate CCW = tourne l'arme vers le haut)."""
     valid_kinds = {"units": _SPRITES_DIR / "units", "buildings": _SPRITES_DIR / "buildings", "resources": _SPRITES_DIR / "resources"}
@@ -600,7 +611,7 @@ async def rotate_sprite(kind: str, sprite_id: str):
     return {"status": "ok", "id": sprite_id, "kind": kind}
 
 
-@fastapi_app.post("/api/icons/rotate/{icon_id}")
+@fastapi_app.post("/api/icons/rotate/{icon_id}", dependencies=[Depends(require_debug)])
 async def rotate_icon(icon_id: str):
     """Fait pivoter une icône UI de 90° dans le sens antihoraire."""
     icon_id = icon_id.strip().lower()
@@ -617,7 +628,7 @@ async def rotate_icon(icon_id: str):
     return {"status": "ok", "id": icon_id}
 
 
-@fastapi_app.post("/api/icons/generate/{icon_id}")
+@fastapi_app.post("/api/icons/generate/{icon_id}", dependencies=[Depends(require_debug)])
 async def generate_one_icon(icon_id: str):
     """Génère une icône UI symbolique (mineral, gas, supply)."""
     icon_id = icon_id.strip().lower()

dev.sh

@@ -46,7 +46,7 @@ log "Démarrage backend  → http://localhost:8000"
 (
     cd "$ROOT/backend"
     set -a; source "$ROOT/.env"; set +a
-    uvicorn main:app --reload --host 0.0.0.0 --port 8000 2>&1 | sed 's/^/\033[0;33m[back]\033[0m /'
+    DEBUG=true uvicorn main:app --reload --host 0.0.0.0 --port 8000 2>&1 | sed 's/^/\033[0;33m[back]\033[0m /'
 ) &
 BACKEND_PID=$!
 

frontend/.svelte-kit/types/route_meta_data.json

@@ -2,15 +2,23 @@
 	"/": [
 		"src/routes/+page.js"
 	],
-	"/admin": [],
+	"/admin": [
+		"src/routes/admin/+layout.ts"
+	],
 	"/admin/compiled-map": [
-		"src/routes/admin/compiled-map/+page.ts"
+		"src/routes/admin/compiled-map/+page.ts",
+		"src/routes/admin/+layout.ts"
 	],
 	"/admin/map": [
-		"src/routes/admin/map/+page.ts"
+		"src/routes/admin/map/+page.ts",
+		"src/routes/admin/+layout.ts"
+	],
+	"/admin/sounds": [
+		"src/routes/admin/+layout.ts"
+	],
+	"/admin/sprites": [
+		"src/routes/admin/+layout.ts"
 	],
-	"/admin/sounds": [],
-	"/admin/sprites": [],
 	"/game": [
 		"src/routes/game/+page.js"
 	],

frontend/.svelte-kit/types/src/routes/admin/$types.d.ts

@@ -16,5 +16,7 @@ type LayoutParams = RouteParams & {  }
 type LayoutParentData = EnsureDefined<import('../$types.js').LayoutData>;
 
 export type LayoutServerData = null;
-export type LayoutData = Expand<LayoutParentData>;
+export type LayoutLoad<OutputData extends OutputDataShape<LayoutParentData> = OutputDataShape<LayoutParentData>> = Kit.Load<LayoutParams, LayoutServerData, LayoutParentData, OutputData, LayoutRouteId>;
+export type LayoutLoadEvent = Parameters<LayoutLoad>[0];
+export type LayoutData = Expand<Omit<LayoutParentData, keyof Kit.LoadProperties<Awaited<ReturnType<typeof import('./proxy+layout.js').load>>>> & OptionalUnion<EnsureDefined<Kit.LoadProperties<Awaited<ReturnType<typeof import('./proxy+layout.js').load>>>>>>;
 export type LayoutProps = { params: LayoutParams; data: LayoutData; children: import("svelte").Snippet }

frontend/.svelte-kit/types/src/routes/admin/proxy+layout.ts

@@ -0,0 +1,12 @@
+// @ts-nocheck
+import { redirect } from '@sveltejs/kit';
+import type { LayoutLoad } from './$types';
+
+export const ssr = false;
+
+export const load = async ({ fetch }: Parameters<LayoutLoad>[0]) => {
+  const res = await fetch('/api/config');
+  if (!res.ok) throw redirect(302, '/');
+  const { debug } = await res.json();
+  if (!debug) throw redirect(302, '/');
+};

frontend/src/routes/admin/+layout.ts

@@ -0,0 +1,11 @@
+import { redirect } from '@sveltejs/kit';
+import type { LayoutLoad } from './$types';
+
+export const ssr = false;
+
+export const load: LayoutLoad = async ({ fetch }) => {
+  const res = await fetch('/api/config');
+  if (!res.ok) throw redirect(302, '/');
+  const { debug } = await res.json();
+  if (!debug) throw redirect(302, '/');
+};