fix: sécurisation des insertions de modèles via dictionnaire temporaire pour éviter les Duplicate Key

backend/main.py

@@ -60,7 +60,6 @@ def login_page(db: Session = Depends(get_db)): return RedirectResponse(url="/set
 @app.post("/api/setup")
 def create_admin(admin_data: AdminCreate, db: Session = Depends(get_db)):
     if not is_setup_required(db): raise HTTPException(status_code=403, detail="Déjà installé.")
-    # Le créateur initial devient automatiquement Super-Admin ET Admin
     new_admin = User(email=admin_data.email, username=admin_data.username, hashed_password=get_password_hash(admin_data.password), totp_secret=generate_totp_secret(), is_admin=True, is_superadmin=True)
     db.add(new_admin)
     new_settings = SystemSettings(smtp_host=admin_data.smtp_host, smtp_port=admin_data.smtp_port, smtp_user=admin_data.smtp_user, smtp_password=admin_data.smtp_password, openrouter_api_key=admin_data.openrouter_api_key, openrouter_management_key=admin_data.openrouter_management_key, groq_api_key=admin_data.groq_api_key, gemini_api_key=admin_data.gemini_api_key, deepseek_api_key=admin_data.deepseek_api_key, mistral_api_key=admin_data.mistral_api_key, cloudflare_account_id=admin_data.cloudflare_account_id, cloudflare_api_token=admin_data.cloudflare_api_token, huggingface_api_key=admin_data.huggingface_api_key)
@@ -97,15 +96,12 @@ def change_password(passwords: PasswordChange, db: Session = Depends(get_db), cu
 
 @app.post("/api/users/me/avatar")
 async def upload_avatar(file: UploadFile = File(...), db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Enregistre l'avatar. Le redimensionnement parfait est géré visuellement par CSS (object-cover) dans le frontend."""
     file_location = os.path.join(avatars_path, f"user_{current_user.id}.jpg")
-    with open(file_location, "wb") as buffer:
+    with open(file_location, "wb") as buffer: shutil.copyfileobj(file.file, buffer)
-        shutil.copyfileobj(file.file, buffer)
     current_user.avatar_path = f"/assets/avatars/user_{current_user.id}.jpg?v={int(datetime.now().timestamp())}"
     db.commit()
     return {"message": "Avatar mis à jour", "avatar_path": current_user.avatar_path}
 
-# --- GESTION DES PROJETS ET MESSAGES ---
 @app.get("/api/projects", response_model=List[ProjectResponse])
 def get_projects(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)): return db.query(Project).filter(Project.user_id == current_user.id).order_by(Project.created_at.desc()).all()
 
@@ -151,7 +147,9 @@ async def create_message(project_id: int, message: MessageCreate, db: Session =
     history = db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
     settings = db.query(SystemSettings).first()
     conf = message.config.dict() if message.config else {"workers": ["gemini-3.5-flash-lite"]} 
-    ai_resp = await run_orchestrator(history, settings, conf)
+    
+    ai_resp = await run_orchestrator(db, history, settings, conf) # Transmission de DB
+    
     db.add(Message(role="assistant", content=ai_resp, project_id=project_id)); db.commit()
     return db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
 
@@ -166,6 +164,10 @@ def get_models_info(db: Session = Depends(get_db), current_user: User = Depends(
         "finances": db.query(FinancialLog).all()
     }
 
+@app.get("/api/finances")
+def get_finances(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
+    return db.query(FinancialLog).all()
+
 @app.post("/api/models/sync")
 async def trigger_model_sync(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
     if not current_user.is_admin: raise HTTPException(status_code=403, detail="Accès admin requis.")

backend/orchestrator.py

@@ -3,32 +3,45 @@ import httpx
 from openai import AsyncOpenAI
 from fastapi import HTTPException
 from sqlalchemy.orm import Session
+from sqlalchemy.exc import IntegrityError
 from .models import SystemSettings, AIModel, FinancialLog
 from datetime import datetime, timezone
 
 def determine_domain(model_id: str) -> str:
     mid = model_id.lower()
-    if "vision" in mid or "vl" in mid: return "Vision & Texte"
+    if "vision" in mid or "vl" in mid or "omni" in mid: return "Vision & Texte"
     if "coder" in mid or "code" in mid or "math" in mid: return "Code & Logique"
     if "audio" in mid or "whisper" in mid: return "Audio"
     return "Texte Polyvalent"
 
 async def sync_finances(db: Session, settings: SystemSettings):
-    async with httpx.AsyncClient() as client:
+    """Interroge les fournisseurs pour récupérer le solde financier exact."""
+    async with httpx.AsyncClient(timeout=30.0) as client:
+        # OpenRouter
         if settings.openrouter_management_key or settings.openrouter_api_key:
             try:
                 key = settings.openrouter_management_key or settings.openrouter_api_key
-                resp = await client.get("https://openrouter.ai/api/v1/auth/key", headers={"Authorization": f"Bearer {key}"})
+                cred_resp = await client.get("https://openrouter.ai/api/v1/credits", headers={"Authorization": f"Bearer {key}"})
-                if resp.status_code == 200:
+                balance = 0.0
-                    data = resp.json().get("data", {})
+                usage = 0.0
-                    limit = data.get("limit")
+                if cred_resp.status_code == 200 and cred_resp.json().get("data"):
-                    usage = data.get("usage", 0)
+                    c_data = cred_resp.json().get("data", {})
-                    balance = (limit - usage) if limit is not None else 0.0
+                    balance = float(c_data.get("total_credits") or 0.0) - float(c_data.get("total_usage") or 0.0)
-                    update_finance_db(db, "OpenRouter", balance, usage)
+                    usage = float(c_data.get("total_usage") or 0.0)
-            except Exception: pass
+                else:
+                    key_resp = await client.get("https://openrouter.ai/api/v1/auth/key", headers={"Authorization": f"Bearer {key}"})
+                    if key_resp.status_code == 200:
+                        data = key_resp.json().get("data", {})
+                        limit = data.get("limit")
+                        usage = float(data.get("usage") or 0.0)
+                        balance = (float(limit) - usage) if limit is not None else -usage
+                update_finance_db(db, "OpenRouter", balance, usage)
+            except Exception as e: print(f"Erreur Finance OR: {e}")
             
+        # Groq
         if settings.groq_api_key: update_finance_db(db, "Groq", 999.0, 0.0)
             
+        # DeepSeek
         if settings.deepseek_api_key:
             try:
                 resp = await client.get("https://api.deepseek.com/user/balance", headers={"Authorization": f"Bearer {settings.deepseek_api_key}"})
@@ -36,80 +49,196 @@ async def sync_finances(db: Session, settings: SystemSettings):
                     infos = resp.json().get("balance_infos", [{}])[0]
                     update_finance_db(db, "DeepSeek", float(infos.get("total_balance", 0)), 0.0)
             except Exception: pass
-    db.commit()
+
+        # Mistral AI
+        if settings.mistral_api_key: update_finance_db(db, "Mistral", 0.0, 0.0)
+        
+        # Gemini
+        if settings.gemini_api_key: update_finance_db(db, "Gemini", 0.0, 0.0)
+
+    try: db.commit()
+    except: db.rollback()
 
 def update_finance_db(db, provider, balance, usage):
-    log = db.query(FinancialLog).filter(FinancialLog.provider == provider).first()
+    try:
-    if log:
+        log = db.query(FinancialLog).filter(FinancialLog.provider == provider).first()
-        log.balance = balance; log.total_usage = usage; log.checked_at = datetime.now(timezone.utc)
+        if log:
-    else:
+            log.balance = balance; log.total_usage = usage; log.checked_at = datetime.now(timezone.utc)
-        db.add(FinancialLog(provider=provider, balance=balance, total_usage=usage))
+        else:
+            db.add(FinancialLog(provider=provider, balance=balance, total_usage=usage))
+    except Exception as e: print(f"Finance DB Error: {e}")
 
 async def sync_providers_models(db: Session, settings: SystemSettings, sync_type: str = "Automatique"):
     added = 0
-    async with httpx.AsyncClient() as client:
+    # On stocke les modèles en mémoire avant de les envoyer en base pour éviter les doublons
+    models_to_process = {}
+
+    async with httpx.AsyncClient(timeout=90.0) as client:
+        # 1. OpenRouter
         if settings.openrouter_api_key:
             try:
                 resp = await client.get("https://openrouter.ai/api/v1/models")
                 if resp.status_code == 200:
                     for item in resp.json().get("data", []):
-                        pricing = item.get("pricing", {})
+                        try:
-                        pp = float(pricing.get("prompt", 0)) * 1000000 if pricing.get("prompt") else 0.0
+                            m_id = item.get("id")
-                        pc = float(pricing.get("completion", 0)) * 1000000 if pricing.get("completion") else 0.0
+                            if not m_id: continue
-                        is_free = (pp == 0.0 and pc == 0.0)
+                            pricing = item.get("pricing") or {}
-                        desc = item.get("description", "Modèle IA générique.")[:200] + "..."
+                            try: pp = float(pricing.get("prompt") or 0.0) * 1000000
-                        process_model(db, "openrouter", item["id"], item["name"], desc, determine_domain(item["id"]), is_free, item.get("context_length", 0), pp, pc)
+                            except: pp = 0.0
-                        added += 1
+                            try: pc = float(pricing.get("completion") or 0.0) * 1000000
-            except Exception: pass
+                            except: pc = 0.0
+                            is_free = (pp == 0.0 and pc == 0.0)
+                            desc = item.get("description", "Modèle OpenRouter.")[:200] + "..."
+                            models_to_process[m_id] = {"provider": "openrouter", "name": item.get("name", "Inconnu"), "desc": desc, "domain": determine_domain(m_id), "is_free": is_free, "ctx": item.get("context_length", 0), "pp": pp, "pc": pc}
+                        except: pass
+            except Exception as e: print(f"Erreur OR Models: {e}")
             
+        # 2. Groq
         if settings.groq_api_key:
             try:
                 resp = await client.get("https://api.groq.com/openai/v1/models", headers={"Authorization": f"Bearer {settings.groq_api_key}"})
                 if resp.status_code == 200:
                     for item in resp.json().get("data", []):
-                        process_model(db, "groq", item["id"], item["id"].capitalize(), "Modèle ultra-rapide exécuté sur LPU Groq.", determine_domain(item["id"]), True, 8192, 0.0, 0.0)
+                        try:
-                        added += 1
+                            m_id = item["id"]
+                            models_to_process[m_id] = {"provider": "groq", "name": m_id.capitalize(), "desc": "Modèle rapide LPU Groq.", "domain": determine_domain(m_id), "is_free": True, "ctx": 8192, "pp": 0.0, "pc": 0.0}
+                        except: pass
             except Exception: pass
 
-    settings.last_sync_date = datetime.now(timezone.utc)
+        # 3. DeepSeek
-    settings.last_sync_type = sync_type
+        if settings.deepseek_api_key:
-    db.commit()
+            try:
+                resp = await client.get("https://api.deepseek.com/models", headers={"Authorization": f"Bearer {settings.deepseek_api_key}"})
+                if resp.status_code == 200:
+                    for item in resp.json().get("data", []):
+                        try:
+                            m_id = item["id"]
+                            models_to_process[m_id] = {"provider": "deepseek", "name": m_id.capitalize(), "desc": "Modèle officiel DeepSeek.", "domain": determine_domain(m_id), "is_free": False, "ctx": 64000, "pp": 0.14, "pc": 0.28}
+                        except: pass
+            except Exception: pass
+
+        # 4. Mistral
+        if settings.mistral_api_key:
+            try:
+                resp = await client.get("https://api.mistral.ai/v1/models", headers={"Authorization": f"Bearer {settings.mistral_api_key}"})
+                if resp.status_code == 200:
+                    for item in resp.json().get("data", []):
+                        try:
+                            m_id = item["id"]
+                            models_to_process[m_id] = {"provider": "mistral", "name": m_id.capitalize(), "desc": "Modèle officiel Mistral AI.", "domain": determine_domain(m_id), "is_free": False, "ctx": 32000, "pp": 0.2, "pc": 0.6}
+                        except: pass
+            except Exception: pass
+
+        # 5. Gemini (Google)
+        if settings.gemini_api_key:
+            try:
+                resp = await client.get(f"https://generativelanguage.googleapis.com/v1beta/models?key={settings.gemini_api_key}")
+                if resp.status_code == 200:
+                    for item in resp.json().get("models", []):
+                        try:
+                            m_id = item["name"].replace("models/", "")
+                            desc = item.get("description", "Modèle Google Gemini.")[:200] + "..."
+                            models_to_process[m_id] = {"provider": "gemini", "name": item.get("displayName", m_id), "desc": desc, "domain": determine_domain(m_id), "is_free": True, "ctx": item.get("inputTokenLimit", 32000), "pp": 0.0, "pc": 0.0}
+                        except: pass
+            except Exception: pass
+
+        # 6. Cloudflare
+        if settings.cloudflare_account_id and settings.cloudflare_api_token:
+            try:
+                url = f"https://api.cloudflare.com/client/v4/accounts/{settings.cloudflare_account_id}/ai/models/search"
+                resp = await client.get(url, headers={"Authorization": f"Bearer {settings.cloudflare_api_token}"})
+                if resp.status_code == 200:
+                    for item in resp.json().get("result", []):
+                        try:
+                            m_id = item.get("name")
+                            desc = item.get("description", "Modèle Cloudflare Workers AI.")[:200] + "..."
+                            models_to_process[m_id] = {"provider": "cloudflare", "name": m_id.split("/")[-1], "desc": desc, "domain": determine_domain(m_id), "is_free": True, "ctx": 4096, "pp": 0.0, "pc": 0.0}
+                        except: pass
+            except Exception: pass
+
+    # --- Phase d'enregistrement sécurisée ---
+    for m_id, data in models_to_process.items():
+        try:
+            existing = db.query(AIModel).filter(AIModel.model_id == m_id).first()
+            if existing:
+                existing.pricing_prompt = data["pp"]; existing.pricing_completion = data["pc"]; existing.is_free = data["is_free"]; existing.last_updated = datetime.now(timezone.utc)
+            else:
+                db.add(AIModel(provider=data["provider"], model_id=m_id, name=data["name"], description_fr=data["desc"], domain=data["domain"], is_free=data["is_free"], context_length=data["ctx"], pricing_prompt=data["pp"], pricing_completion=data["pc"]))
+            added += 1
+            # Commit très fréquent pour éviter les gros blocs qui plantent
+            if added % 50 == 0:
+                db.commit()
+        except IntegrityError:
+            db.rollback() # Si conflit, on annule cette insertion et on continue
+        except Exception:
+            db.rollback()
+
+    try:
+        settings.last_sync_date = datetime.now(timezone.utc)
+        settings.last_sync_type = sync_type
+        db.commit()
+    except Exception as e:
+        db.rollback()
+        print(f"Erreur DB Commit Sync: {e}")
+        
     await sync_finances(db, settings)
     return {"status": "success", "models_processed": added}
 
-def process_model(db, provider, mod_id, name, desc, domain, is_free, ctx, pp, pc):
+def get_client_for_model(db: Session, model_id: str, settings: SystemSettings):
-    existing = db.query(AIModel).filter(AIModel.model_id == mod_id).first()
+    """Récupère dynamiquement le bon client OpenAI en fonction du fournisseur du modèle."""
-    if existing:
+    model_db = db.query(AIModel).filter(AIModel.model_id == model_id).first()
-        existing.pricing_prompt = pp; existing.pricing_completion = pc; existing.is_free = is_free; existing.last_updated = datetime.now(timezone.utc)
+    provider = model_db.provider if model_db else "openrouter"
-    else:
-        db.add(AIModel(provider=provider, model_id=mod_id, name=name, description_fr=desc, domain=domain, is_free=is_free, context_length=ctx, pricing_prompt=pp, pricing_completion=pc))
 
-def get_client_for_model(model_id: str, settings: SystemSettings):
+    if provider == "gemini" and settings.gemini_api_key:
-    if "gemini" in model_id.lower() and settings.gemini_api_key: return AsyncOpenAI(base_url="https://generativelanguage.googleapis.com/v1beta/openai/", api_key=settings.gemini_api_key)
+        return AsyncOpenAI(base_url="https://generativelanguage.googleapis.com/v1beta/openai/", api_key=settings.gemini_api_key), "gemini"
-    elif "groq" in model_id.lower() or "llama" in model_id.lower(): return AsyncOpenAI(base_url="https://api.groq.com/openai/v1", api_key=settings.groq_api_key)
+    elif provider == "groq" and settings.groq_api_key:
-    return AsyncOpenAI(base_url="https://openrouter.ai/api/v1", api_key=settings.openrouter_api_key)
+        return AsyncOpenAI(base_url="https://api.groq.com/openai/v1", api_key=settings.groq_api_key), "groq"
+    elif provider == "deepseek" and settings.deepseek_api_key:
+        return AsyncOpenAI(base_url="https://api.deepseek.com/v1", api_key=settings.deepseek_api_key), "deepseek"
+    elif provider == "mistral" and settings.mistral_api_key:
+        return AsyncOpenAI(base_url="https://api.mistral.ai/v1", api_key=settings.mistral_api_key), "mistral"
+    elif provider == "cloudflare" and settings.cloudflare_account_id and settings.cloudflare_api_token:
+        return AsyncOpenAI(base_url=f"https://api.cloudflare.com/client/v4/accounts/{settings.cloudflare_account_id}/ai/v1", api_key=settings.cloudflare_api_token), "cloudflare"
     
-async def ask_agent(client, model_id, messages, is_openrouter=False):
+    return AsyncOpenAI(base_url="https://openrouter.ai/api/v1", api_key=settings.openrouter_api_key), "openrouter"
+
+async def ask_agent(client, model_id, messages, provider="openrouter"):
     kwargs = {"model": model_id, "messages": messages}
-    if is_openrouter: kwargs["extra_headers"] = {"HTTP-Referer": "https://aethas38.duckdns.org", "X-Title": "AETHAS38 Orchestrator"}
+    if provider == "openrouter": 
+        kwargs["extra_headers"] = {"HTTP-Referer": "https://aethas38.duckdns.org", "X-Title": "AETHAS38 Orchestrator"}
     resp = await client.chat.completions.create(**kwargs)
     return resp.choices[0].message.content
 
-async def run_orchestrator(history: list, settings: SystemSettings, config: dict) -> str:
+async def run_orchestrator(db: Session, history: list, settings: SystemSettings, config: dict) -> str:
     workers = config.get("workers", ["gemini-3.5-flash-lite"])
     user_prompt = history[-1].content
     formatted_history = [{"role": msg.role, "content": msg.content} for msg in history[:-1]]
 
-    if len(workers) == 1:
+    final_response = ""
-        w_mod = workers[0]
+    try:
-        return await ask_agent(get_client_for_model(w_mod, settings), w_mod, formatted_history + [{"role": "user", "content": user_prompt}], "openrouter" in w_mod.lower())
+        if len(workers) == 1:
+            w_mod = workers[0]
+            client, provider = get_client_for_model(db, w_mod, settings)
+            final_response = await ask_agent(client, w_mod, formatted_history + [{"role": "user", "content": user_prompt}], provider)
+        else:
+            p_mod = config.get("prompter", "gemini-3.5-flash-lite")
+            p_client, p_prov = get_client_for_model(db, p_mod, settings)
+            optimized = await ask_agent(p_client, p_mod, [{"role": "system", "content": "Optimise cette requête."}, {"role": "user", "content": user_prompt}], p_prov)
 
-    p_mod = config.get("prompter", "gemini-3.5-flash-lite")
+            w_tasks = []
-    optimized = await ask_agent(get_client_for_model(p_mod, settings), p_mod, [{"role": "system", "content": "Optimise cette requête."}, {"role": "user", "content": user_prompt}])
+            for w in workers:
+                w_client, w_prov = get_client_for_model(db, w, settings)
+                w_tasks.append(ask_agent(w_client, w, formatted_history + [{"role": "user", "content": optimized}], w_prov))
                 
-    w_tasks = [ask_agent(get_client_for_model(w, settings), w, formatted_history + [{"role": "user", "content": optimized}], "openrouter" in w.lower()) for w in workers]
+            responses = await asyncio.gather(*w_tasks, return_exceptions=True)
-    responses = await asyncio.gather(*w_tasks, return_exceptions=True)
 
-    c_mod = config.get("concatenator", "gemini-3.5-flash-lite")
+            c_mod = config.get("concatenator", "gemini-3.5-flash-lite")
-    synth = f"Requête: {user_prompt}\n\n" + "\n".join([f"--- EXPERT {i+1} ---\n{r}" for i, r in enumerate(responses)]) + "\n\nFais une synthèse finale."
+            c_client, c_prov = get_client_for_model(db, c_mod, settings)
-    return await ask_agent(get_client_for_model(c_mod, settings), c_mod, [{"role": "user", "content": synth}])
+            synth = f"Requête: {user_prompt}\n\n" + "\n".join([f"--- EXPERT {i+1} ---\n{r}" for i, r in enumerate(responses)]) + "\n\nFais une synthèse finale."
+            final_response = await ask_agent(c_client, c_mod, [{"role": "user", "content": synth}], c_prov)
+    except Exception as e:
+        final_response = f"L'IA a rencontré une erreur critique: {str(e)}"
+    
+    await sync_finances(db, settings)
+    return final_response

frontend/dashboard.html

@@ -15,14 +15,36 @@
         .neon-text { background: linear-gradient(to right, #06b6d4, #a855f7); -webkit-background-clip: text; -webkit-text-fill-color: transparent; }
         ::-webkit-scrollbar { width: 6px; }
         ::-webkit-scrollbar-thumb { background: #334155; border-radius: 10px; }
+        .custom-scrollbar::-webkit-scrollbar { width: 4px; }
+        .custom-scrollbar::-webkit-scrollbar-thumb { background: #334155; border-radius: 4px; }
     </style>
 </head>
 <body class="h-screen flex overflow-hidden">
 
 <div id="app" class="flex w-full h-full relative bg-aethas-dark">
     
+    <!-- MODAL PARAMÈTRES (Sécurité) -->
+    <div v-if="isSettingsModalOpen" class="fixed inset-0 bg-black/80 z-[100] flex items-center justify-center p-4">
+        <div class="bg-aethas-panel border border-gray-600 rounded-2xl w-full max-w-md overflow-hidden shadow-[0_0_30px_rgba(0,0,0,0.7)]">
+            <div class="p-4 border-b border-gray-700 flex justify-between items-center bg-gray-800/50">
+                <h2 class="text-lg font-bold text-white flex items-center gap-2"><i data-lucide="settings" class="w-5 h-5 text-aethas-cyan"></i> Paramètres</h2>
+                <button @click="closeSettings" class="text-gray-400 hover:text-white"><i data-lucide="x" class="w-5 h-5"></i></button>
+            </div>
+            <div class="p-6 space-y-4">
+                <h3 class="text-sm font-semibold text-aethas-cyan uppercase tracking-wider mb-2">Sécurité du compte</h3>
+                <div v-if="settingsMessage" :class="['p-3 rounded text-sm text-center', settingsMessage.includes('succès') ? 'bg-green-900/50 text-green-200 border border-green-500' : 'bg-red-900/50 text-red-200 border border-red-500']">{{ settingsMessage }}</div>
+                <div><label class="block text-sm text-gray-300 mb-1">Ancien mot de passe</label><input v-model="passForm.old" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
+                <div><label class="block text-sm text-gray-300 mb-1">Nouveau mot de passe</label><input v-model="passForm.new" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
+                <div><label class="block text-sm text-gray-300 mb-1">Confirmer</label><input v-model="passForm.confirm" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
+                <button @click="changePassword" :disabled="isSavingSettings" class="w-full mt-4 bg-gray-700 hover:bg-gray-600 text-white font-semibold py-2.5 px-4 rounded-lg transition-colors border border-gray-500 disabled:opacity-50">
+                    <span v-if="isSavingSettings">Mise à jour...</span><span v-else>Modifier</span>
+                </button>
+            </div>
+        </div>
+    </div>
+
     <!-- BARRE LATÉRALE -->
-    <div :class="['transition-all duration-300 flex-shrink-0 relative z-50', isSidebarOpen ? 'w-72' : 'w-0']">
+    <div :class="['transition-all duration-300 flex-shrink-0 relative z-50 flex flex-col', isSidebarOpen ? 'w-72' : 'w-0']">
         <aside :class="['absolute top-0 left-0 h-full w-72 bg-aethas-panel border-r border-gray-700 flex flex-col transition-transform duration-300', isSidebarOpen ? 'translate-x-0' : '-translate-x-full']">
             <div class="p-4 border-b border-gray-700 flex items-center justify-between">
                 <div class="flex items-center gap-3">
@@ -69,15 +91,25 @@
                 </div>
             </div>
 
-            <div class="p-4 border-t border-gray-700 flex justify-between items-center cursor-pointer hover:bg-gray-800 transition-colors" @click="activeView = 'settings'">
+            <!-- NOUVEAU : ENCART FINANCIER SOUS LE MENU RÉCENTS -->
+            <div class="px-4 pb-2 border-b border-gray-700">
+                <div v-if="financesList.length > 0" class="flex flex-col gap-1.5 mb-2">
+                    <div v-for="fin in financesList" :key="fin.provider" class="text-[10px] bg-gray-800/80 border border-gray-600/50 px-2 py-1.5 rounded flex justify-between items-center shadow-inner">
+                        <span class="text-gray-400 capitalize">{{ fin.provider }}</span>
+                        <span :class="fin.balance > 0 ? 'text-green-400 font-bold' : 'text-aethas-cyan'">${{ fin.balance > 0 ? fin.balance.toFixed(4) : Math.abs(fin.total_usage).toFixed(4) }}</span>
+                    </div>
+                </div>
+            </div>
+            
+            <div class="p-4 flex justify-between items-center cursor-pointer hover:bg-gray-800 transition-colors" @click="activeView = 'settings'">
                 <div class="flex items-center gap-2">
                     <img v-if="user.avatar_path" :src="user.avatar_path" class="w-8 h-8 rounded-full object-cover border border-gray-600 bg-gray-900">
                     <div v-else class="w-8 h-8 rounded-full bg-gradient-to-tr from-aethas-cyan to-aethas-purple flex items-center justify-center text-sm font-bold shadow-md">{{ user.username.charAt(0).toUpperCase() }}</div>
-                    <span class="text-sm font-medium">
+                    <div class="flex flex-col leading-tight">
-                        {{ user.username }} 
+                        <span class="text-sm font-medium">{{ user.username }}</span>
-                        <span v-if="user.is_superadmin" class="text-[10px] bg-purple-900 text-purple-200 px-1.5 py-0.5 rounded ml-1">Super-Admin</span>
+                        <span v-if="user.is_superadmin" class="text-[9px] text-purple-300">SUPER-ADMIN</span>
-                        <span v-else-if="user.is_admin" class="text-[10px] bg-red-900 text-red-200 px-1.5 py-0.5 rounded ml-1">Admin</span>
+                        <span v-else-if="user.is_admin" class="text-[9px] text-red-300">ADMINISTRATEUR</span>
-                    </span>
+                    </div>
                 </div>
                 <i data-lucide="settings" class="w-5 h-5 text-gray-400"></i>
             </div>
@@ -178,9 +210,12 @@
             </div>
 
             <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
-                <div v-for="fin in modelInfo.finances" :key="fin.provider" class="bg-gray-800 border border-gray-700 rounded-xl p-4 flex flex-col justify-between">
+                <div v-for="fin in financesList" :key="fin.provider" class="bg-gray-800 border border-gray-700 rounded-xl p-4 flex flex-col justify-between">
                     <div class="flex justify-between items-start mb-2"><span class="font-bold text-gray-200 capitalize">{{ fin.provider }}</span><i data-lucide="wallet" class="w-5 h-5 text-gray-500"></i></div>
-                    <div><div class="text-2xl font-mono text-aethas-cyan">${{ fin.balance.toFixed(4) }}</div><div class="text-xs text-gray-400 mt-1">Conso. Totale : ${{ fin.total_usage.toFixed(4) }}</div></div>
+                    <div>
+                        <div class="text-2xl font-mono" :class="fin.balance > 0 ? 'text-green-400' : 'text-aethas-cyan'">${{ fin.balance > 0 ? fin.balance.toFixed(4) : Math.abs(fin.total_usage).toFixed(4) }}</div>
+                        <div class="text-xs text-gray-400 mt-1">Conso. API : ${{ fin.total_usage.toFixed(4) }}</div>
+                    </div>
                 </div>
             </div>
 
@@ -200,15 +235,15 @@
                         <option value="paid">Payants</option>
                     </select>
                 </div>
-                <div class="overflow-x-auto">
+                <div class="overflow-x-auto max-h-[500px] custom-scrollbar">
                     <table class="w-full text-left text-sm text-gray-300">
-                        <thead class="text-xs uppercase bg-gray-800 text-gray-400"><tr><th class="px-4 py-3">Modèle</th><th class="px-4 py-3">Fournisseur</th><th class="px-4 py-3">Domaine</th><th class="px-4 py-3">Coût (1M Tokens)</th><th class="px-4 py-3">Contexte</th><th class="px-4 py-3 w-1/3">Description</th></tr></thead>
+                        <thead class="text-xs uppercase bg-gray-800 text-gray-400 sticky top-0"><tr><th class="px-4 py-3">Modèle</th><th class="px-4 py-3">Fournisseur</th><th class="px-4 py-3">Domaine</th><th class="px-4 py-3">Coût (1M Tokens)</th><th class="px-4 py-3">Contexte</th><th class="px-4 py-3 w-1/3">Description</th></tr></thead>
                         <tbody>
                             <tr v-for="model in filteredModels" :key="model.model_id" class="border-b border-gray-700 hover:bg-gray-800/50 transition-colors">
                                 <td class="px-4 py-3 font-mono text-xs text-aethas-cyan break-all">{{ model.model_id }}</td>
                                 <td class="px-4 py-3 capitalize">{{ model.provider }}</td>
                                 <td class="px-4 py-3"><span class="bg-gray-700 text-gray-200 px-2 py-1 rounded text-xs">{{ model.domain }}</span></td>
-                                <td class="px-4 py-3 font-mono text-xs"><span v-if="model.is_free" class="text-green-400 font-bold">GRATUIT</span><span v-else>In: ${{ model.pricing_prompt.toFixed(2) }}<br>Out:${{ model.pricing_completion.toFixed(2) }}</span></td>
+                                <td class="px-4 py-3 font-mono text-xs"><span v-if="model.is_free" class="text-green-400 font-bold">GRATUIT</span><span v-else>In: ${{ model.pricing_prompt.toFixed(2) }}<br>Out: ${{ model.pricing_completion.toFixed(2) }}</span></td>
                                 <td class="px-4 py-3">{{ (model.context_length / 1000).toFixed(0) }}k</td>
                                 <td class="px-4 py-3 text-xs text-gray-400 truncate max-w-[250px]" :title="model.description_fr">{{ model.description_fr }}</td>
                             </tr>
@@ -225,7 +260,7 @@
                 <h2 class="text-2xl font-bold text-gray-200 mb-2">Comment puis-je vous aider aujourd'hui ?</h2>
             </div>
 
-            <div v-else class="flex-1 overflow-y-auto p-4 md:p-8 space-y-6 flex flex-col" id="chat-container">
+            <div v-else class="flex-1 overflow-y-auto p-4 md:p-8 space-y-6 flex flex-col custom-scrollbar" id="chat-container">
                 <div v-if="messages.length === 0" class="flex-1 flex items-center justify-center text-gray-500 italic">Démarrez la conversation ci-dessous.</div>
                 
                 <div v-for="msg in messages" :key="msg.id" :class="['max-w-4xl rounded-2xl p-4', msg.role === 'user' ? 'bg-gray-800 ml-auto border border-gray-700' : 'bg-aethas-panel mr-auto border border-aethas-cyan/30 flex flex-col']">
@@ -242,7 +277,7 @@
                                     <span class="text-xs text-gray-400 font-mono flex items-center gap-2"><i data-lucide="file-code-2" class="w-4 h-4"></i> {{ part.language || 'code' }}</span>
                                     <button @click="downloadFile(part.content, part.language)" class="text-aethas-cyan hover:text-white flex items-center gap-1 text-xs transition-colors bg-gray-700 hover:bg-gray-600 px-2 py-1 rounded"><i data-lucide="download" class="w-3 h-3"></i> Fichier</button>
                                 </div>
-                                <pre class="p-4 text-xs font-mono text-gray-300 overflow-x-auto"><code>{{ part.content }}</code></pre>
+                                <pre class="p-4 text-xs font-mono text-gray-300 overflow-x-auto custom-scrollbar"><code>{{ part.content }}</code></pre>
                             </div>
                         </template>
                     </div>
@@ -293,7 +328,7 @@
                 </div>
 
                 <div class="relative flex items-end bg-gray-800 border border-gray-600 rounded-2xl p-2 shadow-lg focus-within:border-aethas-cyan">
-                    <textarea v-model="prompt" @input="autoResize" @keydown.enter.exact.prevent="sendMessage" ref="promptTextarea" :disabled="isAiThinking" rows="1" class="w-full bg-transparent text-gray-200 p-3 max-h-[200px] overflow-y-auto focus:outline-none resize-none disabled:opacity-50" placeholder="Sélectionnez vos modèles ci-dessus, puis posez votre question..."></textarea>
+                    <textarea v-model="prompt" @input="autoResize" @keydown.enter.exact.prevent="sendMessage" ref="promptTextarea" :disabled="isAiThinking" rows="1" class="w-full bg-transparent text-gray-200 p-3 max-h-[200px] overflow-y-auto focus:outline-none resize-none disabled:opacity-50 custom-scrollbar" placeholder="Sélectionnez vos modèles ci-dessus, puis posez votre question..."></textarea>
                     <button @click="sendMessage" :disabled="!prompt.trim() || isAiThinking" class="p-3 text-aethas-cyan hover:text-white disabled:opacity-50"><i data-lucide="send" class="w-5 h-5"></i></button>
                 </div>
             </div>
@@ -325,7 +360,8 @@
             const settingsMessage = ref("");
             const passForm = reactive({ old: '', new: '', confirm: '' });
             
-            const modelInfo = reactive({ last_sync_date: null, last_sync_type: null, models: [], finances: [] });
+            const modelInfo = reactive({ last_sync_date: null, last_sync_type: null, models: [] });
+            const financesList = ref([]);
             const filterSearch = ref("");
             const filterDomain = ref("");
             const filterPricing = ref("");
@@ -359,8 +395,24 @@
             const scrollToBottom = () => { nextTick(() => { const c = document.getElementById('chat-container'); if (c) c.scrollTop = c.scrollHeight; }); };
 
             const fetchUser = async () => { try { const res = await fetch('/api/users/me'); if(res.ok) user.value = await res.json(); } catch(e){} };
-            const fetchModelsInfo = async () => { try { const res = await fetch('/api/models/info'); if(res.ok) { const data = await res.json(); modelInfo.last_sync_date = data.last_sync_date; modelInfo.last_sync_type = data.last_sync_type; modelInfo.models = data.models; modelInfo.finances = data.finances; } } catch(e){} };
+            const fetchModelsInfo = async () => { try { const res = await fetch('/api/models/info'); if(res.ok) { const data = await res.json(); modelInfo.last_sync_date = data.last_sync_date; modelInfo.last_sync_type = data.last_sync_type; modelInfo.models = data.models; } } catch(e){} };
-            const syncModels = async () => { isSyncing.value = true; try { const res = await fetch('/api/models/sync', { method: 'POST' }); if(res.ok) { await fetchModelsInfo(); alert("Synchronisation terminée"); } } catch(e) {} isSyncing.value = false; };
+            const fetchFinances = async () => { try { const res = await fetch('/api/finances'); if(res.ok) financesList.value = await res.json(); } catch(e){} };
+            
+            const syncModels = async () => { 
+                isSyncing.value = true; 
+                try { 
+                    const res = await fetch('/api/models/sync', { method: 'POST' }); 
+                    if(res.ok) { 
+                        await fetchModelsInfo(); 
+                        await fetchFinances();
+                        alert("Synchronisation terminée !"); 
+                    } else {
+                        const err = await res.json();
+                        alert("Erreur: " + err.detail);
+                    }
+                } catch(e) { alert("Erreur réseau de synchronisation."); } 
+                isSyncing.value = false; 
+            };
 
             const uploadAvatar = async (event) => {
                 const file = event.target.files[0];
@@ -393,8 +445,13 @@
                 const payload = { role: 'user', content: userText, config: { workers: selectedWorkers.value, prompter: selectedPrompter.value, concatenator: selectedConcatenator.value } };
                 try {
                     const response = await fetch(`/api/projects/${activeProject.value.id}/messages`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload) });
-                    if (response.ok) { const data = await response.json(); if (Array.isArray(data)) messages.value = data; } 
+                    if (response.ok) { 
-                    else { const err = await response.json(); alert("Erreur: " + err.detail); }
+                        const data = await response.json(); 
+                        if (Array.isArray(data)) messages.value = data; 
+                        await fetchFinances(); // MAJ du budget sous le nom
+                    } else { 
+                        const err = await response.json(); alert("Erreur API IA : " + err.detail); 
+                    }
                 } catch (error) {} finally { isAiThinking.value = false; scrollToBottom(); nextTick(()=>lucide.createIcons()); }
             };
 
@@ -411,23 +468,19 @@
             const deleteProject = async (pid) => { if (!confirm("Supprimer ce projet ?")) return; try { const res = await fetch(`/api/projects/${pid}`, { method: 'DELETE' }); if (res.ok) { projects.value = projects.value.filter(p => p.id !== pid); if (activeProject.value && activeProject.value.id === pid) activeProject.value = null; } } catch (e) {} };
             const limitWorkers = () => { if(selectedWorkers.value.length > 5) { selectedWorkers.value.pop(); alert("Max 5 travailleurs."); } };
 
-            onMounted(() => { lucide.createIcons(); fetchUser(); fetchProjects(); fetchModelsInfo(); });
+            onMounted(() => { lucide.createIcons(); fetchUser(); fetchProjects(); fetchModelsInfo(); fetchFinances(); });
 
             return { 
                 user, activeView, settingsTab, isSidebarOpen, toggleSidebar, prompt, autoResize, promptTextarea, 
                 projects, pinnedProjects, recentProjects, activeProject, messages, isAiThinking,
                 createNewProject, selectProject, renameProject, sendMessage, isLoading, togglePin, deleteProject,
                 passForm, settingsMessage, isSavingSettings, changePassword, uploadAvatar,
-                modelInfo, filterSearch, filterDomain, filterPricing, filteredModels, formatDate, syncModels, isSyncing,
+                modelInfo, financesList, filterSearch, filterDomain, filterPricing, filteredModels, formatDate, syncModels, isSyncing,
                 selectedWorkers, selectedPrompter, selectedConcatenator, limitWorkers,
                 exportProject, copyToClipboard, downloadFile, downloadMessage, parseMessage
             };
         }
     }).mount('#app');
 </script>
-<style>
-.custom-scrollbar::-webkit-scrollbar { width: 4px; }
-.custom-scrollbar::-webkit-scrollbar-thumb { background: #334155; border-radius: 4px; }
-</style>
 </body>
 </html>

requirements.txt

@@ -14,3 +14,4 @@ PyJWT
 openai
 httpx
 python-multipart
+pytz