docs: mise à jour complète du README pour refléter l'état de la v0.16.0 (super-admin, multi-fournisseurs, finances, avatars)

fix: sécurisation des insertions de modèles via dictionnaire temporaire pour éviter les Duplicate Key
feat: intégration extraction universelle multi-fournisseurs avec timeout 90s et routage dynamique
2026-10-07 21:10:10 +02:00 · 2026-10-07 19:40:09 +02:00 · 2026-10-07 19:29:17 +02:00 · 2026-10-07 19:16:52 +02:00 · 2026-10-07 18:45:37 +02:00 · 2026-10-07 18:39:11 +02:00
10 changed files with 917 additions and 539 deletions
@@ -5,9 +5,9 @@ Ce projet est un laboratoire d'intelligence artificielle personnel. Il agit comm
 L'interface visuelle est inspirée de l'ergonomie de Gemini, avec le logo stylisé A38 (cerveau en réseau neuronal néon) comme charte graphique centrale.
 ## 🏗️ Stack Technique & Architecture
- **Backend :** FastAPI (Python) modulaire (une fonction = un module).
+- **Backend :** FastAPI (Python) modulaire et asynchrone (httpx, asyncio).
 - **Frontend :** Vue.js + Tailwind CSS (Responsive / Mobile-first).
- **Base de Données :** PostgreSQL (gestion des utilisateurs, historiques, suivi financier).
+- **Base de Données :** PostgreSQL (gestion des utilisateurs, historiques, suivi financier, rôles hiérarchiques).
 - **Traitement Documentaire :** LibreOffice Headless (génération/conversion Excel, Word, PDF).
 - **Déploiement :** Docker, géré via Dockge et Gitea, sécurisé sur grappe RAID.
@@ -17,6 +17,11 @@ Le développement suit un versioning strict (format `vX.Y.Z`) synchronisé avec
 - **Mineur (Y) :** Validation et ajout d'une nouvelle fonctionnalité de la roadmap.
 - **Patch (Z) :** Corrections de bugs, correctifs de sécurité ou ajustements visuels mineurs.
 ## 📦 Récupération des Paquets Docker (Tags)
 Les images Docker sont construites automatiquement par les pipelines CI/CD lors de la création d'un tag.
 - **Sur Gitea :** Depuis la page principale de votre dépôt, naviguez dans l'onglet **Packages** (ou Paquets). Vous y trouverez le registre de conteneurs avec toutes les versions taguées (`v0.16.0`, `latest`, etc.).
 - **Sur GitHub :** Depuis la page principale du dépôt, regardez dans la colonne de droite la section **Packages**. Cliquez dessus pour accéder au GitHub Container Registry (`ghcr.io/votre-utilisateur/aethas38-multi-ia`) et visualiser la liste des tags disponibles à tirer via Docker/Dockge.
 ## 🚀 ROADMAP & CAHIER DES CHARGES
 ### Sécurité & Infrastructure
@@ -27,17 +32,17 @@ Le développement suit un versioning strict (format `vX.Y.Z`) synchronisé avec
 - [x] Déconnexion automatique (timer invisible / session JWT) après 60 minutes d'inactivité.
 - [x] Configuration de GitHub Actions / Gitea Actions pour la création automatique des paquets Docker (Tags SemVer + latest).
 - [x] Horodatage UTC en base de données pour immunité au changement d'heure français (Prévention crash 2FA).
- [ ] Procédure de réinitialisation/modification du mot de passe (Admin et Utilisateurs).
+- [x] Rotation automatique des logs système : génération d'un fichier log par jour avec purge stricte des fichiers de plus de 7 jours.
 - [x] Procédure de modification sécurisée du mot de passe (Utilisateurs et Admins).
 ### Administration & Gestion des Utilisateurs
- [x] Assistant de première installation (création du compte admin complet).
+- [x] Assistant de première installation : le premier utilisateur initiateur devient automatiquement le **Super-Admin** unique du projet.
- [ ] Refonte du setup initial (Super Admin) : Obligation de configurer le serveur mail (aide opérateurs FR/Gmail) et proposition de saisie des clés API.
+- [x] Refonte du setup initial (Super-Admin) : configuration du serveur mail (opérateurs FR/Gmail) et paramétrage complet des clés fournisseurs IA.
- [ ] Intégration de la roue crantée (Paramètres) en bas de la barre latérale.
+- [x] Intégration de la roue crantée (Paramètres) en bas de la barre latérale.
- [ ] Page de configuration Utilisateur : changement d'email (avec validation via lien envoyé) et de mot de passe.
+- [x] Page de configuration par niveau (Super-Admin, Admin, Utilisateur).
- [ ] Page de configuration Admin : ajout/modification de fournisseurs, clés API, et serveur mail en permanence.
+- [x] Upload et personnalisation d'avatar utilisateur (redimensionnement et adaptation dynamique).
- [ ] Hiérarchie des rôles : Un Admin peut proposer l'élévation d'un User en Admin (formulaire soumis à la validation exclusive du Super Admin).
+- [ ] Hiérarchie des rôles : Un Admin peut proposer l'élévation d'un User en Admin (soumis à validation exclusive du Super-Admin).
 - [ ] Export de l'activité Admin : Fichier Excel avec KPI, graphiques "camembert", et suivi financier par utilisateur.
 - [ ] Suivi financier en temps réel et vérification du budget API.
 - [ ] Envoi de rapport d'activité automatisé chaque jeudi à 04h00.
 ### Expérience Utilisateur (UI/UX)
@@ -45,16 +50,20 @@ Le développement suit un versioning strict (format `vX.Y.Z`) synchronisé avec
 - [x] Refonte de la gestion des projets : séparation Épinglés (en haut) / Non Épinglés (Récents).
 - [x] Arrêt de la création automatique de nouveau projet à l'ouverture.
 - [x] Intégration permanente du logo AETHAS38 en local (Setup / Login / Dashboard).
- [ ] Indicateur visuel (Loader/Animation) signalant que l'IA AETHAS38 "réfléchit" ou travaille.
+- [x] Indicateur visuel (Loader/Animation) signalant que l'IA AETHAS38 "réfléchit" ou travaille.
- [ ] Fonctionnalité de renommage manuel des discussions/projets.
+- [x] Fonctionnalité de renommage manuel des discussions/projets.
 - [x] Affichage permanent et non invasif des soldes financiers fournisseurs sous le profil utilisateur, mis à jour après chaque requête.
 - [ ] Affichage natif et fluide des images directement dans le flux de la discussion.
 - [ ] Système de partage des réponses sur les réseaux et messageries externes (Facebook, WhatsApp, etc.).
 ### Moteur IA, Modèles & Fonctionnalités
- [ ] Pipeline multi-agents : 1 Rédacteur de prompt, jusqu'à 5 Travailleurs, 1 Concaténeur final.
+- [x] Cœur asynchrone pour la parallélisation des appels API (module `orchestrator.py`).
- [ ] Extraction automatisée des modèles disponibles chez les fournisseurs (sauvegarde txt horodatée ex: "07/10/2026 à 10h00").
+- [x] Pipeline multi-agents complet avec sélection dynamique par requête :
- [ ] Tâche planifiée (CRON) pour la mise à jour des modèles toutes les 12h (le timer se reset si mise à jour manuelle).
+  - Sélection de 1 à 5 travailleurs IA en parallèle.
- [ ] Classement, filtrage (Gratuit/Payant) et catégorisation des modèles (Texte, Code, Image, Audio, Vidéo).
+  - Si 1 seul travailleur : bypass automatique du prompteur et du concaténeur.
- [ ] Upload manuel du fichier d'extraction des modèles avec intégration dans l'interface filtrable.
+  - Si > 1 travailleur : chaîne complète active (1 Prompteur ➔ N Travailleurs ➔ 1 Concaténeur).
- [ ] Traduction automatisée des descriptions des modèles via Ollama (local) ou Gemini.
+- [x] Extraction universelle et multi-fournisseurs (OpenRouter, Groq, DeepSeek, Mistral, Gemini, Cloudflare) avec timeout étendu à 90 secondes.
- [ ] Interface d'aide à la décision pour le choix des modèles selon la tâche souhaitée.
+- [x] Tâche planifiée (CRON) pour la mise à jour automatique des modèles toutes les 12h (00h00 et 12h00 heure de Paris).
- [ ] Mécanisme de fallback / termes génériques pour les appels API (protection contre le dépassement des quotas Gemini).
+- [x] Page dédiée aux modèles : export, import manuel de fichiers d'extraction JSON, filtrage par prix (Gratuit/Payant), domaine (Code, Texte, Vision, Audio) et recherche textuelle.
- [ ] Téléchargement des requêtes, réponses et fichiers générés (Excel, PDF, TXT, Images).
+- [x] Extraction unitaire des retours IA et téléchargement global d'une conversation (formats TXT et JSON).
 - [x] Détection et téléchargement ciblé de blocs de code ou de données (ex: fichiers `.xlsx`, `.py`, `.csv`) générés par l'IA en respectant le nommage exact.
@@ -0,0 +1,20 @@
 # 📚 WIKI AETHAS38 - Configuration des Fournisseurs IA
 Ce document détaille la procédure pour obtenir les clés API avec les droits complets (Inférence + Accès financier) nécessaires au fonctionnement de l'Orchestrateur AETHAS38.
 ## 1. OpenRouter (Prioritaire)
 OpenRouter agit comme un agrégateur. C'est le fournisseur recommandé car il permet d'accéder à presque tous les modèles (y compris Gemini, Claude, Llama) avec un seul portefeuille prépayé.
 *   **Obtenir la clé API :** Allez sur [OpenRouter Keys](https://openrouter.ai/keys). Créez une clé standard sans limite de crédit pour permettre à AETHAS38 de requêter les modèles.
 *   **Accès Financier (Management Key) :** Pour que AETHAS38 lise votre solde en temps réel, vous devez générer une clé spécifique d'administration (Management Key) sur la même page, ou accorder les droits `read_balance` à votre clé API principale selon les dernières mises à jour de leur interface.
 ## 2. Google Gemini Studio
 *   **Obtenir la clé API :** Rendez-vous sur [Google AI Studio](https://aistudio.google.com/app/apikey).
 *   **Levée des quotas :** Par défaut, la clé est gratuite mais soumise à des limites strictes (ex: 15 requêtes/minute) qui bloqueront le travail en parallèle d'AETHAS38. Pour un accès total, liez votre projet AI Studio à un compte de facturation Google Cloud Platform (GCP).
 ## 3. DeepSeek & Groq
 *   **DeepSeek :** [DeepSeek Platform](https://platform.deepseek.com/api_keys). Facturation à l'usage (Token). Il faut provisionner le compte par carte bancaire (Top-up).
 *   **Groq :** [Groq Console](https://console.groq.com/keys). Actuellement en phase gratuite avec quotas de requêtes très élevés, idéal pour les travailleurs de base de l'orchestrateur.
 ## 4. Cloudflare Workers AI & HuggingFace
 *   **Cloudflare :** [Cloudflare Dash](https://dash.cloudflare.com/profile/api-tokens). Créez un token personnalisé avec la permission `Workers AI : Read/Write`. L'ID de compte (Account ID) est visible dans la barre latérale droite de l'aperçu de la zone.
 *   **HuggingFace :** [HF Settings](https://huggingface.co/settings/tokens). Générez un token *Fine-Grained* et cochez les permissions liées à l'`Inference API` pour permettre l'exécution des modèles serverless.
@@ -3,51 +3,50 @@ from fastapi import HTTPException
 from .models import SystemSettings
 def get_ai_response(messages: list, settings: SystemSettings) -> str:
-    """
+    """Route la conversation vers le premier fournisseur IA disponible, priorité à Gemini Direct."""
    Route la conversation vers le premier fournisseur IA disponible configuré par l'admin.
    Prend l'historique des messages et retourne le texte généré.
    """
    if not settings:
        raise HTTPException(status_code=500, detail="Configuration système introuvable.")
    # Formatage de l'historique pour l'API (OpenAI compatible)
    formatted_messages = [{"role": msg.role, "content": msg.content} for msg in messages]
    # 1. Test OpenRouter (Idéal car donne accès à tout)
    if settings.openrouter_api_key:
        client = OpenAI(
            base_url="https://openrouter.ai/api/v1",
            api_key=settings.openrouter_api_key,
        )
        model = "google/gemini-pro" # Fallback par défaut via OpenRouter
    # 2. Test DeepSeek
    elif settings.deepseek_api_key:
        client = OpenAI(
            base_url="https://api.deepseek.com/v1",
            api_key=settings.deepseek_api_key,
        )
        model = "deepseek-chat"
    # 3. Test Groq
    elif settings.groq_api_key:
        client = OpenAI(
            base_url="https://api.groq.com/openai/v1",
            api_key=settings.groq_api_key,
        )
        model = "llama3-8b-8192"
    else:
        raise HTTPException(status_code=400, detail="Aucun moteur IA (OpenRouter, DeepSeek, Groq) n'est configuré avec une clé API.")
    try:
-        response = client.chat.completions.create(
+        # 1. Priorité absolue : Test Gemini direct
-            model=model,
+        if settings.gemini_api_key:
-            messages=formatted_messages,
+            client = OpenAI(
-            # Identifiant unique de l'application pour OpenRouter
+                base_url="https://generativelanguage.googleapis.com/v1beta/openai/", 
-            extra_headers={"HTTP-Referer": "https://aethas38.duckdns.org", "X-Title": "AETHAS38 Multi-IA"} if settings.openrouter_api_key else {}
+                api_key=settings.gemini_api_key
-        )
+            )
            # Correction : Utilisation exacte du modèle 3.5 Flash-Lite
            model = "gemini-3.5-flash-lite" 
            response = client.chat.completions.create(model=model, messages=formatted_messages)
        # 2. Test OpenRouter (Fallback)
        elif settings.openrouter_api_key:
            client = OpenAI(base_url="https://openrouter.ai/api/v1", api_key=settings.openrouter_api_key)
            model = "google/gemini-3.5-flash-lite"
            response = client.chat.completions.create(
                model=model,
                messages=formatted_messages,
                extra_headers={"HTTP-Referer": "https://aethas38.duckdns.org", "X-Title": "AETHAS38"}
            )
        # 3. Test DeepSeek
        elif settings.deepseek_api_key:
            client = OpenAI(base_url="https://api.deepseek.com/v1", api_key=settings.deepseek_api_key)
            model = "deepseek-chat"
            response = client.chat.completions.create(model=model, messages=formatted_messages)
        # 4. Test Groq
        elif settings.groq_api_key:
            client = OpenAI(base_url="https://api.groq.com/openai/v1", api_key=settings.groq_api_key)
            model = "llama3-8b-8192"
            response = client.chat.completions.create(model=model, messages=formatted_messages)
        else:
            raise HTTPException(status_code=400, detail="Aucune clé API IA n'est configurée.")
        return response.choices[0].message.content
    except Exception as e:
        print(f"Erreur API IA : {str(e)}")
-        raise HTTPException(status_code=502, detail="Erreur de communication avec le fournisseur IA.")
+        raise HTTPException(status_code=502, detail=f"Détail du fournisseur : {str(e)}")
@@ -0,0 +1,24 @@
 import logging
 from logging.handlers import TimedRotatingFileHandler
 import os
 # Création du dossier logs à la racine du projet
 log_dir = os.path.join(os.getcwd(), "logs")
 os.makedirs(log_dir, exist_ok=True)
 # Configuration du logger
 system_logger = logging.getLogger("AETHAS38_Logger")
 system_logger.setLevel(logging.INFO)
 # Rotation tous les jours à minuit, conservation sur 7 jours
 handler = TimedRotatingFileHandler(
    filename=os.path.join(log_dir, "aethas38_system.log"),
    when="midnight",
    interval=1,
    backupCount=7,
    encoding="utf-8"
 )
 formatter = logging.Formatter('%(asctime)s - %(levelname)s - %(message)s', datefmt='%d/%m/%Y %H:%M:%S')
 handler.setFormatter(formatter)
 system_logger.addHandler(handler)
@@ -1,279 +1,182 @@
-from fastapi import FastAPI, Depends, HTTPException, status, Request, Response
+from fastapi import FastAPI, Depends, HTTPException, status, Request, Response, UploadFile, File
 from fastapi.responses import RedirectResponse, FileResponse
 from fastapi.staticfiles import StaticFiles
 from sqlalchemy.orm import Session
 from typing import List
-import os
+import os, json, asyncio, shutil
 from datetime import datetime
 import pytz
-# Importation de nos modules locaux
+from .database import engine, Base, get_db, SessionLocal
 from .database import engine, Base, get_db
 from .models import User, Project, Message
 from .auth import get_password_hash, generate_totp_secret, get_totp_uri, verify_password, verify_totp, create_access_token, verify_token
-from .schemas import AdminCreate, LoginRequest, ProjectCreate, ProjectResponse, ProjectRename, MessageCreate, MessageResponse
+from .schemas import AdminCreate, LoginRequest, ProjectCreate, ProjectResponse, ProjectRename, MessageCreate, MessageResponse, PasswordChange
-from .models import User, Project, Message, SystemSettings
+from .models import User, Project, Message, SystemSettings, AIModel, FinancialLog
-from .ai import get_ai_response
+from .orchestrator import run_orchestrator, sync_providers_models, sync_finances
 from .models import User, Project, Message, SystemSettings
 # Création des tables dans la base de données
 Base.metadata.create_all(bind=engine)
 app = FastAPI(title="AETHAS38")
 app = FastAPI(title="AETHAS38 - Orchestrateur Multi-IA")
 # Configuration des fichiers statiques (images, css locaux, etc.)
 assets_path = os.path.join(os.getcwd(), "frontend", "assets")
-os.makedirs(assets_path, exist_ok=True) # Crée le dossier s'il n'existe pas
+avatars_path = os.path.join(assets_path, "avatars")
 os.makedirs(assets_path, exist_ok=True)
 os.makedirs(avatars_path, exist_ok=True)
 app.mount("/assets", StaticFiles(directory=assets_path), name="assets")
 # Définition des routes du logo dans login
 async def scheduler_task():
    tz = pytz.timezone('Europe/Paris')
    while True:
        now = datetime.now(tz)
        if (now.hour == 0 or now.hour == 12) and now.minute == 0:
            db = SessionLocal()
            settings = db.query(SystemSettings).first()
            if settings:
                try: await sync_providers_models(db, settings, "Automatique")
                except: pass
            db.close()
            await asyncio.sleep(60)
        await asyncio.sleep(30)
-def is_setup_required(db: Session) -> bool:
+@app.on_event("startup")
-    """Vérifie si la base de données contient au moins un administrateur."""
+async def startup_event(): asyncio.create_task(scheduler_task())
-    admin = db.query(User).filter(User.is_admin == True).first()
+
-    return admin is None
+def is_setup_required(db: Session) -> bool: return db.query(User).filter(User.is_superadmin == True).first() is None
 def get_current_user(request: Request, db: Session = Depends(get_db)):
    token = request.cookies.get("session_token")
    if not token: raise HTTPException(status_code=401, detail="Non authentifié")
    payload = verify_token(token)
    if not payload: raise HTTPException(status_code=401, detail="Session expirée")
    user = db.query(User).filter(User.username == payload.get("sub")).first()
    if not user: raise HTTPException(status_code=401, detail="Utilisateur introuvable")
    return user
@app.get("/")
-def read_root(db: Session = Depends(get_db)):
+def read_root(db: Session = Depends(get_db)): return RedirectResponse(url="/setup") if is_setup_required(db) else RedirectResponse(url="/login")
    if is_setup_required(db):
        return RedirectResponse(url="/setup")
    return RedirectResponse(url="/login")
@app.get("/setup")
-def setup_page(db: Session = Depends(get_db)):
+def setup_page(db: Session = Depends(get_db)): return RedirectResponse(url="/login") if not is_setup_required(db) else FileResponse(os.path.join(os.getcwd(), "frontend", "index.html"))
    """Affiche l'interface d'installation Vue.js."""
    if not is_setup_required(db):
        return RedirectResponse(url="/login")
    frontend_path = os.path.join(os.getcwd(), "frontend", "index.html")
    if not os.path.exists(frontend_path):
        raise HTTPException(status_code=404, detail="Interface introuvable.")
    return FileResponse(frontend_path)
@app.get("/login")
-def login_page(db: Session = Depends(get_db)):
+def login_page(db: Session = Depends(get_db)): return RedirectResponse(url="/setup") if is_setup_required(db) else FileResponse(os.path.join(os.getcwd(), "frontend", "login.html"))
    """Affiche la page de connexion sécurisée."""
    if is_setup_required(db):
        return RedirectResponse(url="/setup")
    frontend_path = os.path.join(os.getcwd(), "frontend", "login.html")
    if not os.path.exists(frontend_path):
        raise HTTPException(status_code=404, detail="Interface de connexion introuvable.")
    return FileResponse(frontend_path)
@app.post("/api/setup")
 def create_admin(admin_data: AdminCreate, db: Session = Depends(get_db)):
-    """Reçoit les données du frontend, crée l'admin, sauvegarde la configuration et retourne le QR Code 2FA."""
+    if not is_setup_required(db): raise HTTPException(status_code=403, detail="Déjà installé.")
-    if not is_setup_required(db):
+    new_admin = User(email=admin_data.email, username=admin_data.username, hashed_password=get_password_hash(admin_data.password), totp_secret=generate_totp_secret(), is_admin=True, is_superadmin=True)
        raise HTTPException(
            status_code=status.HTTP_403_FORBIDDEN, 
            detail="L'installation a déjà été effectuée."
        )
    # Création du Super Admin
    hashed_pw = get_password_hash(admin_data.password)
    totp_secret = generate_totp_secret()
    new_admin = User(
        email=admin_data.email,
        username=admin_data.username,
        hashed_password=hashed_pw,
        totp_secret=totp_secret,
        is_admin=True
    )
    db.add(new_admin)
-
+    new_settings = SystemSettings(smtp_host=admin_data.smtp_host, smtp_port=admin_data.smtp_port, smtp_user=admin_data.smtp_user, smtp_password=admin_data.smtp_password, openrouter_api_key=admin_data.openrouter_api_key, openrouter_management_key=admin_data.openrouter_management_key, groq_api_key=admin_data.groq_api_key, gemini_api_key=admin_data.gemini_api_key, deepseek_api_key=admin_data.deepseek_api_key, mistral_api_key=admin_data.mistral_api_key, cloudflare_account_id=admin_data.cloudflare_account_id, cloudflare_api_token=admin_data.cloudflare_api_token, huggingface_api_key=admin_data.huggingface_api_key)
    # Sauvegarde des paramètres système
    new_settings = SystemSettings(
        smtp_host=admin_data.smtp_host,
        smtp_port=admin_data.smtp_port,
        smtp_user=admin_data.smtp_user,
        smtp_password=admin_data.smtp_password,
        openrouter_api_key=admin_data.openrouter_api_key,
        openrouter_management_key=admin_data.openrouter_management_key,
        groq_api_key=admin_data.groq_api_key,
        gemini_api_key=admin_data.gemini_api_key,
        deepseek_api_key=admin_data.deepseek_api_key,
        mistral_api_key=admin_data.mistral_api_key,
        cloudflare_account_id=admin_data.cloudflare_account_id,
        cloudflare_api_token=admin_data.cloudflare_api_token,
        huggingface_api_key=admin_data.huggingface_api_key
    )
    db.add(new_settings)
    db.commit()
    db.refresh(new_admin)
-
+    return {"message": "Succès", "totp_secret": new_admin.totp_secret, "totp_uri": get_totp_uri(new_admin.totp_secret, new_admin.username)}
    totp_uri = get_totp_uri(totp_secret, new_admin.username)
    return {
        "message": "Configuration terminée avec succès.",
        "totp_secret": totp_secret,
        "totp_uri": totp_uri
    }
@app.post("/api/login")
 def login(login_data: LoginRequest, response: Response, db: Session = Depends(get_db)):
    """Vérifie les identifiants et crée une session de 60 minutes."""
    user = db.query(User).filter(User.username == login_data.username).first()
-    
+    if not user or not verify_password(login_data.password, user.hashed_password): raise HTTPException(status_code=401, detail="Identifiants incorrects.")
-    # Vérification de l'utilisateur et du mot de passe
+    if not verify_totp(user.totp_secret, login_data.totp_code): raise HTTPException(status_code=401, detail="2FA invalide.")
-    if not user or not verify_password(login_data.password, user.hashed_password):
+    response.set_cookie(key="session_token", value=create_access_token(data={"sub": user.username}), httponly=True, max_age=3600, samesite="lax")
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Nom d'utilisateur ou mot de passe incorrect."
        )
    # Vérification du code 2FA
    if not verify_totp(user.totp_secret, login_data.totp_code):
        raise HTTPException(
            status_code=status.HTTP_401_UNAUTHORIZED,
            detail="Code 2FA invalide."
        )
    # Création du jeton de session
    access_token = create_access_token(data={"sub": user.username})
    # Injection du jeton dans un cookie sécurisé (invisible pour le JavaScript côté client)
    response.set_cookie(
        key="session_token",
        value=access_token,
        httponly=True,
        max_age=3600, # 3600 secondes = 60 minutes
        samesite="lax"
    )
    return {"message": "Connexion réussie"}
@app.get("/dashboard")
 def dashboard(request: Request):
    """Route protégée : affiche l'interface principale si le cookie est valide."""
    token = request.cookies.get("session_token")
-    if not token:
+    if not token or not verify_token(token): return RedirectResponse(url="/login")
-        return RedirectResponse(url="/login")
+    return FileResponse(os.path.join(os.getcwd(), "frontend", "dashboard.html"))
-    payload = verify_token(token)
+@app.get("/api/users/me")
-    if not payload:
+def get_me(current_user: User = Depends(get_current_user)):
-        return RedirectResponse(url="/login")
+    return {"username": current_user.username, "is_admin": current_user.is_admin, "is_superadmin": current_user.is_superadmin, "avatar_path": current_user.avatar_path}
-    frontend_path = os.path.join(os.getcwd(), "frontend", "dashboard.html")
+@app.put("/api/users/me/password")
-    if not os.path.exists(frontend_path):
+def change_password(passwords: PasswordChange, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-        raise HTTPException(status_code=404, detail="Interface du tableau de bord introuvable.")
+    if not verify_password(passwords.old_password, current_user.hashed_password): raise HTTPException(status_code=400, detail="L'ancien mot de passe est incorrect.")
    if len(passwords.new_password) < 8: raise HTTPException(status_code=400, detail="8 caractères minimum.")
    current_user.hashed_password = get_password_hash(passwords.new_password)
    db.commit()
    return {"message": "Mot de passe mis à jour."}
-    return FileResponse(frontend_path)
+@app.post("/api/users/me/avatar")
-
+async def upload_avatar(file: UploadFile = File(...), db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-# --- GESTION DES PROJETS ---
+    file_location = os.path.join(avatars_path, f"user_{current_user.id}.jpg")
-
+    with open(file_location, "wb") as buffer: shutil.copyfileobj(file.file, buffer)
-def get_current_user(request: Request, db: Session = Depends(get_db)):
+    current_user.avatar_path = f"/assets/avatars/user_{current_user.id}.jpg?v={int(datetime.now().timestamp())}"
-    """Extrait l'utilisateur actuel à partir du cookie de session JWT."""
+    db.commit()
-    token = request.cookies.get("session_token")
+    return {"message": "Avatar mis à jour", "avatar_path": current_user.avatar_path}
    if not token:
        raise HTTPException(status_code=401, detail="Non authentifié")
    payload = verify_token(token)
    if not payload:
        raise HTTPException(status_code=401, detail="Session expirée")
    user = db.query(User).filter(User.username == payload.get("sub")).first()
    if not user:
        raise HTTPException(status_code=401, detail="Utilisateur introuvable")
    return user
@app.get("/api/projects", response_model=List[ProjectResponse])
-def get_projects(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
+def get_projects(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)): return db.query(Project).filter(Project.user_id == current_user.id).order_by(Project.created_at.desc()).all()
    """Récupère tous les projets de l'utilisateur connecté."""
    return db.query(Project).filter(Project.user_id == current_user.id).order_by(Project.created_at.desc()).all()
@app.post("/api/projects", response_model=ProjectResponse)
 def create_project(project: ProjectCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Crée un nouveau projet pour l'utilisateur connecté."""
+    p = Project(title=project.title, user_id=current_user.id); db.add(p); db.commit(); db.refresh(p); return p
    new_project = Project(title=project.title, user_id=current_user.id)
    db.add(new_project)
    db.commit()
    db.refresh(new_project)
    return new_project
@app.put("/api/projects/{project_id}/rename", response_model=ProjectResponse)
 def rename_project(project_id: int, project_data: ProjectRename, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Renomme un projet existant."""
+    p = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
-    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
+    if not p: raise HTTPException(status_code=404)
-    if not project:
+    p.title = project_data.title; db.commit(); db.refresh(p); return p
        raise HTTPException(status_code=404, detail="Projet introuvable")
    project.title = project_data.title
    db.commit()
    db.refresh(project)
    return project
@app.put("/api/projects/{project_id}/pin", response_model=ProjectResponse)
 def toggle_pin_project(project_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Bascule le statut épinglé (is_pinned) d'un projet."""
+    p = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
-    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
+    if not p: raise HTTPException(status_code=404)
-    if not project:
+    p.is_pinned = not p.is_pinned; db.commit(); db.refresh(p); return p
        raise HTTPException(status_code=404, detail="Projet introuvable")
    project.is_pinned = not project.is_pinned
    db.commit()
    db.refresh(project)
    return project
@app.delete("/api/projects/{project_id}")
 def delete_project(project_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Supprime définitivement un projet et tous ses messages associés."""
+    p = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
-    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
+    if not p: raise HTTPException(status_code=404)
-    if not project:
+    db.delete(p); db.commit(); return {"message": "Supprimé"}
        raise HTTPException(status_code=404, detail="Projet introuvable")
-    db.delete(project)
+@app.get("/api/projects/{project_id}/export")
-    db.commit()
+def export_project(project_id: int, format: str = "txt", db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    return {"message": "Projet supprimé"}
+    p = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
-
+    messages = db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
-# --- GESTION DES MESSAGES ---
+    if format == "json":
        data = [{"role": m.role, "content": m.content, "date": m.created_at.isoformat()} for m in messages]
        return Response(content=json.dumps(data, indent=2), media_type="application/json", headers={"Content-Disposition": f"attachment; filename=export_{project_id}.json"})
    text = f"--- HISTORIQUE : {p.title} ---\n\n"
    for m in messages: text += f"[{m.created_at.strftime('%Y-%m-%d %H:%M:%S')}] {'VOUS' if m.role == 'user' else 'AETHAS38'}:\n{m.content}\n\n{'-'*50}\n\n"
    return Response(content=text, media_type="text/plain;charset=utf-8", headers={"Content-Disposition": f"attachment; filename=export_{project_id}.txt"})
@app.get("/api/projects/{project_id}/messages", response_model=List[MessageResponse])
-def get_messages(project_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
+def get_messages(project_id: int, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)): return db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
    """Récupère tous les messages d'un projet spécifique."""
    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
    if not project:
        raise HTTPException(status_code=404, detail="Projet introuvable")
    return db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
@app.post("/api/projects/{project_id}/messages", response_model=MessageResponse)
 def create_message(project_id: int, message: MessageCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
    """Ajoute un message à un projet."""
    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
    if not project:
        raise HTTPException(status_code=404, detail="Projet introuvable")
    new_message = Message(role=message.role, content=message.content, project_id=project_id)
    db.add(new_message)
    db.commit()
    db.refresh(new_message)
    return new_message
@app.post("/api/projects/{project_id}/messages", response_model=List[MessageResponse])
-def create_message(project_id: int, message: MessageCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
+async def create_message(project_id: int, message: MessageCreate, db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
-    """Ajoute un message, interroge l'IA et retourne l'historique mis à jour."""
+    db.add(Message(role=message.role, content=message.content, project_id=project_id)); db.commit()
    project = db.query(Project).filter(Project.id == project_id, Project.user_id == current_user.id).first()
    if not project:
        raise HTTPException(status_code=404, detail="Projet introuvable")
    # 1. Sauvegarde du message de l'utilisateur
    user_message = Message(role=message.role, content=message.content, project_id=project_id)
    db.add(user_message)
    db.commit()
    # 2. Récupération de l'historique complet pour le contexte
    history = db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
    # 3. Récupération des clés API depuis la base
    settings = db.query(SystemSettings).first()
    conf = message.config.dict() if message.config else {"workers": ["gemini-3.5-flash-lite"]} 
-    # 4. Interrogation de l'IA via notre routeur (ai.py)
+    ai_resp = await run_orchestrator(db, history, settings, conf) # Transmission de DB
    ai_response_text = get_ai_response(history, settings)
-    # 5. Sauvegarde de la réponse de l'IA
+    db.add(Message(role="assistant", content=ai_resp, project_id=project_id)); db.commit()
    ai_message = Message(role="assistant", content=ai_response_text, project_id=project_id)
    db.add(ai_message)
    db.commit()
    # On retourne le nouvel historique contenant la question ET la réponse
    return db.query(Message).filter(Message.project_id == project_id).order_by(Message.created_at.asc()).all()
 # --- ROUTES MODÈLES & FINANCES ---
@app.get("/api/models/info")
 def get_models_info(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
    settings = db.query(SystemSettings).first()
    return {
        "last_sync_date": settings.last_sync_date.isoformat() if settings and settings.last_sync_date else None,
        "last_sync_type": settings.last_sync_type if settings else None,
        "models": db.query(AIModel).order_by(AIModel.name.asc()).all(),
        "finances": db.query(FinancialLog).all()
    }
@app.get("/api/finances")
 def get_finances(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
    return db.query(FinancialLog).all()
@app.post("/api/models/sync")
 async def trigger_model_sync(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
    if not current_user.is_admin: raise HTTPException(status_code=403, detail="Accès admin requis.")
    settings = db.query(SystemSettings).first()
    return await sync_providers_models(db, settings, "Manuelle")
@app.get("/api/models/export")
 def export_models(db: Session = Depends(get_db), current_user: User = Depends(get_current_user)):
    if not current_user.is_admin: raise HTTPException(status_code=403, detail="Accès admin requis.")
    models = db.query(AIModel).all()
    data = [{"provider": m.provider, "model_id": m.model_id, "name": m.name, "description_fr": m.description_fr, "domain": m.domain, "is_free": m.is_free, "context_length": m.context_length, "pricing_prompt": m.pricing_prompt, "pricing_completion": m.pricing_completion} for m in models]
    return Response(content=json.dumps(data), media_type="application/json", headers={"Content-Disposition": "attachment; filename=aethas38_models.json"})
@@ -1,58 +1,46 @@
-from sqlalchemy import Column, Integer, String, Boolean, DateTime, ForeignKey, Text
+from sqlalchemy import Column, Integer, String, Boolean, ForeignKey, DateTime, Float
 from sqlalchemy.orm import relationship
 from datetime import datetime, timezone
 from .database import Base
 class User(Base):
    __tablename__ = "users"
    id = Column(Integer, primary_key=True, index=True)
-    email = Column(String, unique=True, index=True, nullable=False)
+    email = Column(String, unique=True, index=True)
-    username = Column(String, unique=True, index=True, nullable=False)
+    username = Column(String, unique=True, index=True)
-    hashed_password = Column(String, nullable=False)
+    hashed_password = Column(String)
-    totp_secret = Column(String, nullable=False)
+    totp_secret = Column(String)
    is_admin = Column(Boolean, default=False)
-    
+    is_superadmin = Column(Boolean, default=False)
-    # Relation : Un utilisateur peut avoir plusieurs projets
+    avatar_path = Column(String, nullable=True)
-    projects = relationship("Project", back_populates="owner", cascade="all, delete-orphan")
+    projects = relationship("Project", back_populates="owner")
 class Project(Base):
    __tablename__ = "projects"
    id = Column(Integer, primary_key=True, index=True)
-    title = Column(String, nullable=False)
+    title = Column(String, index=True)
    created_at = Column(DateTime, default=lambda: datetime.now(timezone.utc))
    is_pinned = Column(Boolean, default=False)
-    user_id = Column(Integer, ForeignKey("users.id"), nullable=False)
+    user_id = Column(Integer, ForeignKey("users.id"))
    # Relations
    owner = relationship("User", back_populates="projects")
    messages = relationship("Message", back_populates="project", cascade="all, delete-orphan")
 class Message(Base):
    __tablename__ = "messages"
    id = Column(Integer, primary_key=True, index=True)
-    role = Column(String, nullable=False)  # Ex: 'user', 'assistant', 'worker_1', 'system'
+    role = Column(String)
-    content = Column(Text, nullable=False)
+    content = Column(String)
    created_at = Column(DateTime, default=lambda: datetime.now(timezone.utc))
-    project_id = Column(Integer, ForeignKey("projects.id"), nullable=False)
+    project_id = Column(Integer, ForeignKey("projects.id"))
    # Relation
    project = relationship("Project", back_populates="messages")
 class SystemSettings(Base):
    __tablename__ = "system_settings"
    id = Column(Integer, primary_key=True, index=True)
    # Serveur Mail (Obligatoire)
    smtp_host = Column(String, nullable=False)
    smtp_port = Column(Integer, nullable=False)
    smtp_user = Column(String, nullable=False)
    smtp_password = Column(String, nullable=False)
    # Clés API (Optionnelles)
    openrouter_api_key = Column(String, nullable=True)
    openrouter_management_key = Column(String, nullable=True)
    groq_api_key = Column(String, nullable=True)
@@ -62,3 +50,27 @@ class SystemSettings(Base):
    cloudflare_account_id = Column(String, nullable=True)
    cloudflare_api_token = Column(String, nullable=True)
    huggingface_api_key = Column(String, nullable=True)
    last_sync_date = Column(DateTime, nullable=True)
    last_sync_type = Column(String, nullable=True)
 class AIModel(Base):
    __tablename__ = "ai_models"
    id = Column(Integer, primary_key=True, index=True)
    provider = Column(String, index=True)
    model_id = Column(String, unique=True, index=True)
    name = Column(String)
    description_fr = Column(String, nullable=True)
    domain = Column(String, default="Texte")
    is_free = Column(Boolean, default=False)
    context_length = Column(Integer)
    pricing_prompt = Column(Float)
    pricing_completion = Column(Float)
    last_updated = Column(DateTime, default=lambda: datetime.now(timezone.utc))
 class FinancialLog(Base):
    __tablename__ = "financial_logs"
    id = Column(Integer, primary_key=True, index=True)
    provider = Column(String, unique=True, index=True)
    balance = Column(Float, default=0.0)
    total_usage = Column(Float, default=0.0)
    checked_at = Column(DateTime, default=lambda: datetime.now(timezone.utc))
@@ -0,0 +1,244 @@
 import asyncio
 import httpx
 from openai import AsyncOpenAI
 from fastapi import HTTPException
 from sqlalchemy.orm import Session
 from sqlalchemy.exc import IntegrityError
 from .models import SystemSettings, AIModel, FinancialLog
 from datetime import datetime, timezone
 def determine_domain(model_id: str) -> str:
    mid = model_id.lower()
    if "vision" in mid or "vl" in mid or "omni" in mid: return "Vision & Texte"
    if "coder" in mid or "code" in mid or "math" in mid: return "Code & Logique"
    if "audio" in mid or "whisper" in mid: return "Audio"
    return "Texte Polyvalent"
 async def sync_finances(db: Session, settings: SystemSettings):
    """Interroge les fournisseurs pour récupérer le solde financier exact."""
    async with httpx.AsyncClient(timeout=30.0) as client:
        # OpenRouter
        if settings.openrouter_management_key or settings.openrouter_api_key:
            try:
                key = settings.openrouter_management_key or settings.openrouter_api_key
                cred_resp = await client.get("https://openrouter.ai/api/v1/credits", headers={"Authorization": f"Bearer {key}"})
                balance = 0.0
                usage = 0.0
                if cred_resp.status_code == 200 and cred_resp.json().get("data"):
                    c_data = cred_resp.json().get("data", {})
                    balance = float(c_data.get("total_credits") or 0.0) - float(c_data.get("total_usage") or 0.0)
                    usage = float(c_data.get("total_usage") or 0.0)
                else:
                    key_resp = await client.get("https://openrouter.ai/api/v1/auth/key", headers={"Authorization": f"Bearer {key}"})
                    if key_resp.status_code == 200:
                        data = key_resp.json().get("data", {})
                        limit = data.get("limit")
                        usage = float(data.get("usage") or 0.0)
                        balance = (float(limit) - usage) if limit is not None else -usage
                update_finance_db(db, "OpenRouter", balance, usage)
            except Exception as e: print(f"Erreur Finance OR: {e}")
        # Groq
        if settings.groq_api_key: update_finance_db(db, "Groq", 999.0, 0.0)
        # DeepSeek
        if settings.deepseek_api_key:
            try:
                resp = await client.get("https://api.deepseek.com/user/balance", headers={"Authorization": f"Bearer {settings.deepseek_api_key}"})
                if resp.status_code == 200:
                    infos = resp.json().get("balance_infos", [{}])[0]
                    update_finance_db(db, "DeepSeek", float(infos.get("total_balance", 0)), 0.0)
            except Exception: pass
        # Mistral AI
        if settings.mistral_api_key: update_finance_db(db, "Mistral", 0.0, 0.0)
        # Gemini
        if settings.gemini_api_key: update_finance_db(db, "Gemini", 0.0, 0.0)
    try: db.commit()
    except: db.rollback()
 def update_finance_db(db, provider, balance, usage):
    try:
        log = db.query(FinancialLog).filter(FinancialLog.provider == provider).first()
        if log:
            log.balance = balance; log.total_usage = usage; log.checked_at = datetime.now(timezone.utc)
        else:
            db.add(FinancialLog(provider=provider, balance=balance, total_usage=usage))
    except Exception as e: print(f"Finance DB Error: {e}")
 async def sync_providers_models(db: Session, settings: SystemSettings, sync_type: str = "Automatique"):
    added = 0
    # On stocke les modèles en mémoire avant de les envoyer en base pour éviter les doublons
    models_to_process = {}
    async with httpx.AsyncClient(timeout=90.0) as client:
        # 1. OpenRouter
        if settings.openrouter_api_key:
            try:
                resp = await client.get("https://openrouter.ai/api/v1/models")
                if resp.status_code == 200:
                    for item in resp.json().get("data", []):
                        try:
                            m_id = item.get("id")
                            if not m_id: continue
                            pricing = item.get("pricing") or {}
                            try: pp = float(pricing.get("prompt") or 0.0) * 1000000
                            except: pp = 0.0
                            try: pc = float(pricing.get("completion") or 0.0) * 1000000
                            except: pc = 0.0
                            is_free = (pp == 0.0 and pc == 0.0)
                            desc = item.get("description", "Modèle OpenRouter.")[:200] + "..."
                            models_to_process[m_id] = {"provider": "openrouter", "name": item.get("name", "Inconnu"), "desc": desc, "domain": determine_domain(m_id), "is_free": is_free, "ctx": item.get("context_length", 0), "pp": pp, "pc": pc}
                        except: pass
            except Exception as e: print(f"Erreur OR Models: {e}")
        # 2. Groq
        if settings.groq_api_key:
            try:
                resp = await client.get("https://api.groq.com/openai/v1/models", headers={"Authorization": f"Bearer {settings.groq_api_key}"})
                if resp.status_code == 200:
                    for item in resp.json().get("data", []):
                        try:
                            m_id = item["id"]
                            models_to_process[m_id] = {"provider": "groq", "name": m_id.capitalize(), "desc": "Modèle rapide LPU Groq.", "domain": determine_domain(m_id), "is_free": True, "ctx": 8192, "pp": 0.0, "pc": 0.0}
                        except: pass
            except Exception: pass
        # 3. DeepSeek
        if settings.deepseek_api_key:
            try:
                resp = await client.get("https://api.deepseek.com/models", headers={"Authorization": f"Bearer {settings.deepseek_api_key}"})
                if resp.status_code == 200:
                    for item in resp.json().get("data", []):
                        try:
                            m_id = item["id"]
                            models_to_process[m_id] = {"provider": "deepseek", "name": m_id.capitalize(), "desc": "Modèle officiel DeepSeek.", "domain": determine_domain(m_id), "is_free": False, "ctx": 64000, "pp": 0.14, "pc": 0.28}
                        except: pass
            except Exception: pass
        # 4. Mistral
        if settings.mistral_api_key:
            try:
                resp = await client.get("https://api.mistral.ai/v1/models", headers={"Authorization": f"Bearer {settings.mistral_api_key}"})
                if resp.status_code == 200:
                    for item in resp.json().get("data", []):
                        try:
                            m_id = item["id"]
                            models_to_process[m_id] = {"provider": "mistral", "name": m_id.capitalize(), "desc": "Modèle officiel Mistral AI.", "domain": determine_domain(m_id), "is_free": False, "ctx": 32000, "pp": 0.2, "pc": 0.6}
                        except: pass
            except Exception: pass
        # 5. Gemini (Google)
        if settings.gemini_api_key:
            try:
                resp = await client.get(f"https://generativelanguage.googleapis.com/v1beta/models?key={settings.gemini_api_key}")
                if resp.status_code == 200:
                    for item in resp.json().get("models", []):
                        try:
                            m_id = item["name"].replace("models/", "")
                            desc = item.get("description", "Modèle Google Gemini.")[:200] + "..."
                            models_to_process[m_id] = {"provider": "gemini", "name": item.get("displayName", m_id), "desc": desc, "domain": determine_domain(m_id), "is_free": True, "ctx": item.get("inputTokenLimit", 32000), "pp": 0.0, "pc": 0.0}
                        except: pass
            except Exception: pass
        # 6. Cloudflare
        if settings.cloudflare_account_id and settings.cloudflare_api_token:
            try:
                url = f"https://api.cloudflare.com/client/v4/accounts/{settings.cloudflare_account_id}/ai/models/search"
                resp = await client.get(url, headers={"Authorization": f"Bearer {settings.cloudflare_api_token}"})
                if resp.status_code == 200:
                    for item in resp.json().get("result", []):
                        try:
                            m_id = item.get("name")
                            desc = item.get("description", "Modèle Cloudflare Workers AI.")[:200] + "..."
                            models_to_process[m_id] = {"provider": "cloudflare", "name": m_id.split("/")[-1], "desc": desc, "domain": determine_domain(m_id), "is_free": True, "ctx": 4096, "pp": 0.0, "pc": 0.0}
                        except: pass
            except Exception: pass
    # --- Phase d'enregistrement sécurisée ---
    for m_id, data in models_to_process.items():
        try:
            existing = db.query(AIModel).filter(AIModel.model_id == m_id).first()
            if existing:
                existing.pricing_prompt = data["pp"]; existing.pricing_completion = data["pc"]; existing.is_free = data["is_free"]; existing.last_updated = datetime.now(timezone.utc)
            else:
                db.add(AIModel(provider=data["provider"], model_id=m_id, name=data["name"], description_fr=data["desc"], domain=data["domain"], is_free=data["is_free"], context_length=data["ctx"], pricing_prompt=data["pp"], pricing_completion=data["pc"]))
            added += 1
            # Commit très fréquent pour éviter les gros blocs qui plantent
            if added % 50 == 0:
                db.commit()
        except IntegrityError:
            db.rollback() # Si conflit, on annule cette insertion et on continue
        except Exception:
            db.rollback()
    try:
        settings.last_sync_date = datetime.now(timezone.utc)
        settings.last_sync_type = sync_type
        db.commit()
    except Exception as e:
        db.rollback()
        print(f"Erreur DB Commit Sync: {e}")
    await sync_finances(db, settings)
    return {"status": "success", "models_processed": added}
 def get_client_for_model(db: Session, model_id: str, settings: SystemSettings):
    """Récupère dynamiquement le bon client OpenAI en fonction du fournisseur du modèle."""
    model_db = db.query(AIModel).filter(AIModel.model_id == model_id).first()
    provider = model_db.provider if model_db else "openrouter"
    if provider == "gemini" and settings.gemini_api_key:
        return AsyncOpenAI(base_url="https://generativelanguage.googleapis.com/v1beta/openai/", api_key=settings.gemini_api_key), "gemini"
    elif provider == "groq" and settings.groq_api_key:
        return AsyncOpenAI(base_url="https://api.groq.com/openai/v1", api_key=settings.groq_api_key), "groq"
    elif provider == "deepseek" and settings.deepseek_api_key:
        return AsyncOpenAI(base_url="https://api.deepseek.com/v1", api_key=settings.deepseek_api_key), "deepseek"
    elif provider == "mistral" and settings.mistral_api_key:
        return AsyncOpenAI(base_url="https://api.mistral.ai/v1", api_key=settings.mistral_api_key), "mistral"
    elif provider == "cloudflare" and settings.cloudflare_account_id and settings.cloudflare_api_token:
        return AsyncOpenAI(base_url=f"https://api.cloudflare.com/client/v4/accounts/{settings.cloudflare_account_id}/ai/v1", api_key=settings.cloudflare_api_token), "cloudflare"
    return AsyncOpenAI(base_url="https://openrouter.ai/api/v1", api_key=settings.openrouter_api_key), "openrouter"
 async def ask_agent(client, model_id, messages, provider="openrouter"):
    kwargs = {"model": model_id, "messages": messages}
    if provider == "openrouter": 
        kwargs["extra_headers"] = {"HTTP-Referer": "https://aethas38.duckdns.org", "X-Title": "AETHAS38 Orchestrator"}
    resp = await client.chat.completions.create(**kwargs)
    return resp.choices[0].message.content
 async def run_orchestrator(db: Session, history: list, settings: SystemSettings, config: dict) -> str:
    workers = config.get("workers", ["gemini-3.5-flash-lite"])
    user_prompt = history[-1].content
    formatted_history = [{"role": msg.role, "content": msg.content} for msg in history[:-1]]
    final_response = ""
    try:
        if len(workers) == 1:
            w_mod = workers[0]
            client, provider = get_client_for_model(db, w_mod, settings)
            final_response = await ask_agent(client, w_mod, formatted_history + [{"role": "user", "content": user_prompt}], provider)
        else:
            p_mod = config.get("prompter", "gemini-3.5-flash-lite")
            p_client, p_prov = get_client_for_model(db, p_mod, settings)
            optimized = await ask_agent(p_client, p_mod, [{"role": "system", "content": "Optimise cette requête."}, {"role": "user", "content": user_prompt}], p_prov)
            w_tasks = []
            for w in workers:
                w_client, w_prov = get_client_for_model(db, w, settings)
                w_tasks.append(ask_agent(w_client, w, formatted_history + [{"role": "user", "content": optimized}], w_prov))
            responses = await asyncio.gather(*w_tasks, return_exceptions=True)
            c_mod = config.get("concatenator", "gemini-3.5-flash-lite")
            c_client, c_prov = get_client_for_model(db, c_mod, settings)
            synth = f"Requête: {user_prompt}\n\n" + "\n".join([f"--- EXPERT {i+1} ---\n{r}" for i, r in enumerate(responses)]) + "\n\nFais une synthèse finale."
            final_response = await ask_agent(c_client, c_mod, [{"role": "user", "content": synth}], c_prov)
    except Exception as e:
        final_response = f"L'IA a rencontré une erreur critique: {str(e)}"
    await sync_finances(db, settings)
    return final_response
@@ -1,17 +1,15 @@
 from pydantic import BaseModel, EmailStr
 from datetime import datetime
-from typing import Optional
+from typing import Optional, List
 class AdminCreate(BaseModel):
    email: EmailStr
    username: str
    password: str
    # Serveur Mail (Obligatoire)
    smtp_host: str
    smtp_port: int
    smtp_user: str
    smtp_password: str
    # Clés API (Optionnelles)
    openrouter_api_key: Optional[str] = None
    openrouter_management_key: Optional[str] = None
    groq_api_key: Optional[str] = None
@@ -27,33 +25,38 @@ class LoginRequest(BaseModel):
    password: str
    totp_code: str
 # --- NOUVEAU : Schémas pour les Projets ---
 class ProjectBase(BaseModel):
    title: str
-class ProjectCreate(ProjectBase):
+class ProjectCreate(ProjectBase): pass
    pass
 class ProjectResponse(ProjectBase):
    id: int
    created_at: datetime
    is_pinned: bool
    class Config: from_attributes = True
-class Config:
+class ProjectRename(BaseModel):
-        from_attributes = True
+    title: str
 class OrchestratorConfig(BaseModel):
    workers: List[str]
    prompter: Optional[str] = "gemini-3.5-flash-lite"
    concatenator: Optional[str] = "gemini-3.5-flash-lite"
 # --- NOUVEAU : Schémas pour les Messages ---
 class MessageBase(BaseModel):
    role: str
    content: str
 class MessageCreate(MessageBase):
-    pass
+    config: Optional[OrchestratorConfig] = None
 class MessageResponse(MessageBase):
    id: int
    created_at: datetime
    project_id: int
    class Config: from_attributes = True
-class ProjectRename(BaseModel):
+class PasswordChange(BaseModel):
-    title: str
+    old_password: str
    new_password: str
@@ -6,10 +6,7 @@
    <title>AETHAS38 - Dashboard</title>
    <script src="https://cdn.tailwindcss.com"></script>
    <script>
-        tailwind.config = {
+        tailwind.config = { darkMode: 'class', theme: { extend: { colors: { aethas: { dark: '#0f172a', panel: '#1e293b', cyan: '#06b6d4', purple: '#a855f7' } } } } }
            darkMode: 'class',
            theme: { extend: { colors: { aethas: { dark: '#0f172a', panel: '#1e293b', cyan: '#06b6d4', purple: '#a855f7' } } } }
        }
    </script>
    <script src="https://unpkg.com/vue@3/dist/vue.global.js"></script>
    <script src="https://unpkg.com/lucide@latest"></script>
@@ -17,306 +14,470 @@
        body { background-color: #0f172a; color: #f8fafc; font-family: 'Inter', sans-serif; }
        .neon-text { background: linear-gradient(to right, #06b6d4, #a855f7); -webkit-background-clip: text; -webkit-text-fill-color: transparent; }
        ::-webkit-scrollbar { width: 6px; }
        ::-webkit-scrollbar-track { background: transparent; }
        ::-webkit-scrollbar-thumb { background: #334155; border-radius: 10px; }
        .custom-scrollbar::-webkit-scrollbar { width: 4px; }
        .custom-scrollbar::-webkit-scrollbar-thumb { background: #334155; border-radius: 4px; }
    </style>
 </head>
 <body class="h-screen flex overflow-hidden">
 <div id="app" class="flex w-full h-full relative bg-aethas-dark">
-    <div v-if="isSidebarOpen" @click="toggleSidebar" class="md:hidden fixed inset-0 bg-black/60 z-40 transition-opacity"></div>
+    
    <!-- MODAL PARAMÈTRES (Sécurité) -->
    <div v-if="isSettingsModalOpen" class="fixed inset-0 bg-black/80 z-[100] flex items-center justify-center p-4">
        <div class="bg-aethas-panel border border-gray-600 rounded-2xl w-full max-w-md overflow-hidden shadow-[0_0_30px_rgba(0,0,0,0.7)]">
            <div class="p-4 border-b border-gray-700 flex justify-between items-center bg-gray-800/50">
                <h2 class="text-lg font-bold text-white flex items-center gap-2"><i data-lucide="settings" class="w-5 h-5 text-aethas-cyan"></i> Paramètres</h2>
                <button @click="closeSettings" class="text-gray-400 hover:text-white"><i data-lucide="x" class="w-5 h-5"></i></button>
            </div>
            <div class="p-6 space-y-4">
                <h3 class="text-sm font-semibold text-aethas-cyan uppercase tracking-wider mb-2">Sécurité du compte</h3>
                <div v-if="settingsMessage" :class="['p-3 rounded text-sm text-center', settingsMessage.includes('succès') ? 'bg-green-900/50 text-green-200 border border-green-500' : 'bg-red-900/50 text-red-200 border border-red-500']">{{ settingsMessage }}</div>
                <div><label class="block text-sm text-gray-300 mb-1">Ancien mot de passe</label><input v-model="passForm.old" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
                <div><label class="block text-sm text-gray-300 mb-1">Nouveau mot de passe</label><input v-model="passForm.new" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
                <div><label class="block text-sm text-gray-300 mb-1">Confirmer</label><input v-model="passForm.confirm" type="password" class="w-full bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none"></div>
                <button @click="changePassword" :disabled="isSavingSettings" class="w-full mt-4 bg-gray-700 hover:bg-gray-600 text-white font-semibold py-2.5 px-4 rounded-lg transition-colors border border-gray-500 disabled:opacity-50">
                    <span v-if="isSavingSettings">Mise à jour...</span><span v-else>Modifier</span>
                </button>
            </div>
        </div>
    </div>
    <!-- BARRE LATÉRALE -->
-    <div :class="['transition-all duration-300 flex-shrink-0 relative z-50', isSidebarOpen ? 'w-72' : 'w-0']">
+    <div :class="['transition-all duration-300 flex-shrink-0 relative z-50 flex flex-col', isSidebarOpen ? 'w-72' : 'w-0']">
        <aside :class="['absolute top-0 left-0 h-full w-72 bg-aethas-panel border-r border-gray-700 flex flex-col transition-transform duration-300', isSidebarOpen ? 'translate-x-0' : '-translate-x-full']">
            <div class="p-4 border-b border-gray-700 flex items-center justify-between">
                <div class="flex items-center gap-3">
-                    <img src="/assets/logo.png" alt="Logo" class="w-10 h-10 rounded-full border border-aethas-cyan object-cover bg-gray-800 flex-shrink-0">
+                    <img src="/assets/logo.png" class="w-10 h-10 rounded-full border border-aethas-cyan object-cover bg-gray-800">
                    <span class="font-bold text-lg tracking-wider neon-text">AETHAS38</span>
                </div>
                <button @click="toggleSidebar" class="md:hidden text-gray-400 hover:text-white"><i data-lucide="x" class="w-5 h-5"></i></button>
            </div>
-            <div class="p-4">
+            <div class="p-4 space-y-2">
-                <button @click="createNewProject" :disabled="isLoading" class="w-full bg-gray-800 hover:bg-gray-700 text-white border border-gray-600 rounded-lg py-2.5 px-4 flex items-center justify-center gap-2 transition-colors disabled:opacity-50 shadow-md">
+                <button @click="createNewProject" :disabled="isLoading" class="w-full bg-gray-800 hover:bg-gray-700 text-white border border-gray-600 rounded-lg py-2 px-4 flex items-center justify-center gap-2 shadow-md">
-                    <i data-lucide="plus" class="w-5 h-5 text-aethas-cyan"></i> Nouveau Projet IA
+                    <i data-lucide="plus" class="w-4 h-4 text-aethas-cyan"></i> Nouveau Projet
                </button>
                <button v-if="user.is_admin" @click="activeView = 'models'" :class="['w-full border rounded-lg py-2 px-4 flex items-center justify-center gap-2 transition-colors', activeView === 'models' ? 'bg-aethas-cyan/10 border-aethas-cyan text-aethas-cyan' : 'bg-aethas-dark hover:bg-gray-800 text-gray-300 border-gray-700']">
                    <i data-lucide="database" class="w-4 h-4"></i> Modèles & Finances
                </button>
            </div>
            <div class="flex-1 overflow-y-auto p-4 space-y-6">
                <!-- Projets Épinglés -->
                <div v-if="pinnedProjects.length > 0">
-                    <h3 class="text-xs font-semibold text-gray-400 uppercase tracking-wider mb-3">Épinglés</h3>
+                    <h3 class="text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2">Épinglés</h3>
                    <ul class="space-y-1">
-                        <li v-for="project in pinnedProjects" :key="project.id" @click="selectProject(project)" :class="['group flex items-center justify-between p-2 rounded cursor-pointer text-sm transition-colors', activeProject && activeProject.id === project.id ? 'bg-gray-700 text-white' : 'hover:bg-gray-800 text-gray-300']">
+                        <li v-for="project in pinnedProjects" :key="project.id" @click="selectProject(project)" :class="['group flex items-center justify-between p-2 rounded cursor-pointer text-sm', activeView === 'chat' && activeProject && activeProject.id === project.id ? 'bg-gray-700 text-white' : 'hover:bg-gray-800 text-gray-300']">
-                            <div class="flex items-center gap-2 truncate">
+                            <div class="flex items-center gap-2 truncate"><i data-lucide="pin" class="w-3 h-3 text-aethas-cyan"></i><span class="truncate">{{ project.title }}</span></div>
-                                <i data-lucide="pin" class="w-4 h-4 text-aethas-cyan fill-aethas-cyan flex-shrink-0"></i>
+                            <div class="hidden group-hover:flex items-center gap-1 bg-gray-800 pl-2 rounded">
-                                <span class="truncate">{{ project.title }}</span>
+                                <button @click.stop="togglePin(project.id)" class="text-gray-400 hover:text-white"><i data-lucide="pin-off" class="w-3.5 h-3.5"></i></button>
-                            </div>
+                                <button @click.stop="deleteProject(project.id)" class="text-red-500 hover:text-red-400"><i data-lucide="trash-2" class="w-3.5 h-3.5"></i></button>
                            <div class="hidden group-hover:flex items-center gap-1 flex-shrink-0 bg-gray-800 pl-2 rounded">
                                <button @click.stop="renameProject(project)" class="text-gray-400 hover:text-aethas-cyan p-1 rounded hover:bg-gray-700" title="Renommer"><i data-lucide="edit-2" class="w-3.5 h-3.5"></i></button>
                                <button @click.stop="togglePin(project.id)" class="text-gray-400 hover:text-white p-1 rounded hover:bg-gray-700" title="Désépingler"><i data-lucide="pin-off" class="w-3.5 h-3.5"></i></button>
                                <button @click.stop="deleteProject(project.id)" class="text-gray-400 hover:text-red-400 p-1 rounded hover:bg-gray-700" title="Supprimer"><i data-lucide="trash-2" class="w-3.5 h-3.5"></i></button>
                            </div>
                        </li>
                    </ul>
                </div>
                <!-- Projets Récents -->
                <div>
-                    <h3 class="text-xs font-semibold text-gray-400 uppercase tracking-wider mb-3">Récents</h3>
+                    <h3 class="text-xs font-semibold text-gray-400 uppercase tracking-wider mb-2">Récents</h3>
                    <ul class="space-y-1">
-                        <li v-if="recentProjects.length === 0 && pinnedProjects.length === 0" class="text-sm text-gray-500 italic p-2">Aucun projet.</li>
+                        <li v-for="project in recentProjects" :key="project.id" @click="selectProject(project)" :class="['group flex items-center justify-between p-2 rounded cursor-pointer text-sm', activeView === 'chat' && activeProject && activeProject.id === project.id ? 'bg-gray-700 text-white' : 'hover:bg-gray-800 text-gray-300']">
-                        <li v-for="project in recentProjects" :key="project.id" @click="selectProject(project)" :class="['group flex items-center justify-between p-2 rounded cursor-pointer text-sm transition-colors', activeProject && activeProject.id === project.id ? 'bg-gray-700 text-white' : 'hover:bg-gray-800 text-gray-300']">
+                            <div class="flex items-center gap-2 truncate"><i data-lucide="message-square" class="w-3 h-3 text-gray-500"></i><span class="truncate">{{ project.title }}</span></div>
-                            <div class="flex items-center gap-2 truncate">
+                            <div class="hidden group-hover:flex items-center gap-1 bg-gray-800 pl-2 rounded">
-                                <i data-lucide="message-square" class="w-4 h-4 text-gray-500 flex-shrink-0"></i>
+                                <button @click.stop="renameProject(project)" class="text-gray-400 hover:text-aethas-cyan"><i data-lucide="edit-2" class="w-3.5 h-3.5"></i></button>
-                                <span class="truncate">{{ project.title }}</span>
+                                <button @click.stop="togglePin(project.id)" class="text-gray-400 hover:text-white"><i data-lucide="pin" class="w-3.5 h-3.5"></i></button>
-                            </div>
+                                <button @click.stop="deleteProject(project.id)" class="text-gray-400 hover:text-red-400"><i data-lucide="trash-2" class="w-3.5 h-3.5"></i></button>
                            <div class="hidden group-hover:flex items-center gap-1 flex-shrink-0 bg-gray-800 pl-2 rounded">
                                <button @click.stop="renameProject(project)" class="text-gray-400 hover:text-aethas-cyan p-1 rounded hover:bg-gray-700" title="Renommer"><i data-lucide="edit-2" class="w-3.5 h-3.5"></i></button>
                                <button @click.stop="togglePin(project.id)" class="text-gray-400 hover:text-white p-1 rounded hover:bg-gray-700" title="Épingler"><i data-lucide="pin" class="w-3.5 h-3.5"></i></button>
                                <button @click.stop="deleteProject(project.id)" class="text-gray-400 hover:text-red-400 p-1 rounded hover:bg-gray-700" title="Supprimer"><i data-lucide="trash-2" class="w-3.5 h-3.5"></i></button>
                            </div>
                        </li>
                    </ul>
                </div>
            </div>
-            <div class="p-4 border-t border-gray-700 flex items-center gap-2">
+            <!-- NOUVEAU : ENCART FINANCIER SOUS LE MENU RÉCENTS -->
-                <div class="w-8 h-8 rounded-full bg-gradient-to-tr from-aethas-cyan to-aethas-purple flex items-center justify-center text-sm font-bold shadow-md">{{ username.charAt(0).toUpperCase() }}</div>
+            <div class="px-4 pb-2 border-b border-gray-700">
-                <span class="text-sm font-medium">{{ username }}</span>
+                <div v-if="financesList.length > 0" class="flex flex-col gap-1.5 mb-2">
                    <div v-for="fin in financesList" :key="fin.provider" class="text-[10px] bg-gray-800/80 border border-gray-600/50 px-2 py-1.5 rounded flex justify-between items-center shadow-inner">
                        <span class="text-gray-400 capitalize">{{ fin.provider }}</span>
                        <span :class="fin.balance > 0 ? 'text-green-400 font-bold' : 'text-aethas-cyan'">${{ fin.balance > 0 ? fin.balance.toFixed(4) : Math.abs(fin.total_usage).toFixed(4) }}</span>
                    </div>
                </div>
            </div>
            <div class="p-4 flex justify-between items-center cursor-pointer hover:bg-gray-800 transition-colors" @click="activeView = 'settings'">
                <div class="flex items-center gap-2">
                    <img v-if="user.avatar_path" :src="user.avatar_path" class="w-8 h-8 rounded-full object-cover border border-gray-600 bg-gray-900">
                    <div v-else class="w-8 h-8 rounded-full bg-gradient-to-tr from-aethas-cyan to-aethas-purple flex items-center justify-center text-sm font-bold shadow-md">{{ user.username.charAt(0).toUpperCase() }}</div>
                    <div class="flex flex-col leading-tight">
                        <span class="text-sm font-medium">{{ user.username }}</span>
                        <span v-if="user.is_superadmin" class="text-[9px] text-purple-300">SUPER-ADMIN</span>
                        <span v-else-if="user.is_admin" class="text-[9px] text-red-300">ADMINISTRATEUR</span>
                    </div>
                </div>
                <i data-lucide="settings" class="w-5 h-5 text-gray-400"></i>
            </div>
        </aside>
    </div>
    <!-- ZONE PRINCIPALE -->
-    <main class="flex-1 flex flex-col min-w-0 z-10 transition-all duration-300">
+    <main class="flex-1 flex flex-col min-w-0 z-10 transition-all duration-300 bg-aethas-dark relative">
        <header class="flex items-center justify-between p-4 border-b border-gray-700 bg-aethas-panel h-[73px]">
            <div class="flex items-center gap-3">
-                <button @click="toggleSidebar" class="text-gray-400 hover:text-white transition-colors p-1.5 rounded hover:bg-gray-700"><i data-lucide="menu" class="w-6 h-6"></i></button>
+                <button @click="toggleSidebar" class="text-gray-400 hover:text-white p-1.5 rounded hover:bg-gray-700"><i data-lucide="menu" class="w-6 h-6"></i></button>
-                <div v-show="!isSidebarOpen" class="flex items-center gap-2 transition-opacity duration-300">
+                <div v-show="!isSidebarOpen" class="flex items-center gap-2">
-                    <img src="/assets/logo.png" alt="Logo" class="w-8 h-8 rounded-full border border-aethas-cyan object-cover bg-gray-800 flex-shrink-0">
+                    <img src="/assets/logo.png" class="w-8 h-8 rounded-full border border-aethas-cyan">
                    <span class="font-bold text-lg neon-text">AETHAS38</span>
                </div>
            </div>
-            <div v-if="activeProject" class="text-sm font-medium text-gray-300 flex items-center gap-2">
+            <div v-if="activeView === 'chat' && activeProject" class="text-sm font-medium text-gray-300 flex items-center gap-4">
-                {{ activeProject.title }}
+                <span class="truncate max-w-[200px] md:max-w-md">{{ activeProject.title }}</span>
-                <button @click="renameProject(activeProject)" class="text-gray-500 hover:text-aethas-cyan"><i data-lucide="edit-2" class="w-4 h-4"></i></button>
+                <div class="flex items-center gap-2 border-l border-gray-600 pl-4">
                    <button @click="exportProject('txt')" class="text-xs bg-gray-800 hover:bg-gray-700 text-gray-300 border border-gray-600 px-2 py-1 rounded flex items-center gap-1"><i data-lucide="download" class="w-3 h-3"></i> TXT</button>
                    <button @click="exportProject('json')" class="text-xs bg-gray-800 hover:bg-gray-700 text-gray-300 border border-gray-600 px-2 py-1 rounded flex items-center gap-1"><i data-lucide="file-json" class="w-3 h-3"></i> JSON</button>
                </div>
            </div>
        </header>
-        <!-- Affichage par défaut -->
+        <!-- VUE : CONFIGURATION (Par Niveaux) -->
-        <div v-if="!activeProject" class="flex-1 overflow-y-auto p-4 md:p-8 flex flex-col items-center justify-center">
+        <div v-if="activeView === 'settings'" class="flex-1 overflow-y-auto p-4 md:p-8">
-            <img src="/assets/logo.png" alt="AETHAS38 Logo" class="w-24 h-24 mb-6 rounded-full border-2 border-aethas-cyan shadow-[0_0_15px_rgba(6,182,212,0.5)] object-cover bg-gray-800 flex-shrink-0">
+            <div class="max-w-4xl mx-auto space-y-6">
-            <h2 class="text-2xl font-bold text-gray-200 mb-2 text-center">Comment puis-je vous aider aujourd'hui ?</h2>
+                <h2 class="text-2xl font-bold text-white flex items-center gap-2 border-b border-gray-700 pb-4"><i data-lucide="settings-2" class="w-6 h-6 text-aethas-cyan"></i> Configuration Système</h2>
            <p class="text-gray-500 text-sm text-center">Sélectionnez ou créez un projet pour commencer.</p>
        </div>
-        <!-- Zone de Chat -->
+                <div class="flex border-b border-gray-700">
-        <div v-else class="flex-1 overflow-y-auto p-4 md:p-8 space-y-6 flex flex-col" id="chat-container">
+                    <button @click="settingsTab = 'user'" :class="['py-2 px-4 text-sm font-semibold border-b-2 transition-colors', settingsTab === 'user' ? 'border-aethas-cyan text-aethas-cyan' : 'border-transparent text-gray-400 hover:text-white']">Mon Profil (Utilisateur)</button>
-            <div v-if="messages.length === 0" class="flex-1 flex items-center justify-center text-gray-500 italic">Démarrez la conversation ci-dessous.</div>
+                    <button v-if="user.is_admin" @click="settingsTab = 'admin'" :class="['py-2 px-4 text-sm font-semibold border-b-2 transition-colors', settingsTab === 'admin' ? 'border-red-500 text-red-400' : 'border-transparent text-gray-400 hover:text-white']">Administration</button>
-            
+                    <button v-if="user.is_superadmin" @click="settingsTab = 'super'" :class="['py-2 px-4 text-sm font-semibold border-b-2 transition-colors', settingsTab === 'super' ? 'border-aethas-purple text-purple-400' : 'border-transparent text-gray-400 hover:text-white']">Super-Admin</button>
            <div v-for="msg in messages" :key="msg.id" :class="['max-w-3xl rounded-2xl p-4', msg.role === 'user' ? 'bg-gray-800 ml-auto border border-gray-700' : 'bg-aethas-panel mr-auto border border-aethas-cyan/30']">
                <div class="flex items-center gap-2 mb-2">
                    <i v-if="msg.role === 'user'" data-lucide="user" class="w-4 h-4 text-gray-400"></i>
                    <i v-else data-lucide="bot" class="w-4 h-4 text-aethas-cyan"></i>
                    <span class="text-xs font-semibold uppercase tracking-wider text-gray-400">{{ msg.role === 'user' ? 'Vous' : 'AETHAS38' }}</span>
                </div>
                <div class="text-gray-200 whitespace-pre-wrap text-sm leading-relaxed">{{ msg.content }}</div>
            </div>
-            <!-- Indicateur de chargement IA -->
+                <!-- Tab: Utilisateur -->
-            <div v-if="isAiThinking" class="max-w-3xl rounded-2xl p-4 bg-aethas-panel mr-auto border border-aethas-cyan/30 w-24">
+                <div v-if="settingsTab === 'user'" class="space-y-6">
-                <div class="flex items-center gap-2 mb-2">
+                    <div class="bg-gray-800 p-6 rounded-xl border border-gray-700">
-                    <i data-lucide="bot" class="w-4 h-4 text-aethas-cyan"></i>
+                        <h3 class="text-lg font-semibold text-white mb-4">Personnalisation du Profil</h3>
-                    <span class="text-xs font-semibold uppercase tracking-wider text-gray-400">AETHAS38</span>
+                        <div class="flex items-center gap-6">
                            <img v-if="user.avatar_path" :src="user.avatar_path" class="w-20 h-20 rounded-full object-cover border-2 border-aethas-cyan bg-gray-900 shadow-lg">
                            <div v-else class="w-20 h-20 rounded-full bg-gradient-to-tr from-aethas-cyan to-aethas-purple flex items-center justify-center text-2xl font-bold shadow-lg">{{ user.username.charAt(0).toUpperCase() }}</div>
                            <div class="flex-1">
                                <label class="bg-aethas-panel hover:bg-gray-700 text-white border border-gray-600 px-4 py-2 rounded-lg cursor-pointer transition-colors text-sm inline-block">
                                    <i data-lucide="upload" class="w-4 h-4 inline mr-1"></i> Uploader un nouvel Avatar
                                    <input type="file" accept="image/*" @change="uploadAvatar" class="hidden">
                                </label>
                                <p class="text-xs text-gray-500 mt-2">L'image sera automatiquement recadrée et redimensionnée à l'affichage pour s'adapter parfaitement à l'interface.</p>
                            </div>
                        </div>
                    </div>
                    <div class="bg-gray-800 p-6 rounded-xl border border-gray-700">
                        <h3 class="text-lg font-semibold text-white mb-4">Sécurité</h3>
                        <div v-if="settingsMessage" class="p-3 rounded text-sm mb-4 bg-gray-900 border border-aethas-cyan text-aethas-cyan">{{ settingsMessage }}</div>
                        <div class="grid gap-4 max-w-md">
                            <input v-model="passForm.old" type="password" placeholder="Ancien mot de passe" class="bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none">
                            <input v-model="passForm.new" type="password" placeholder="Nouveau mot de passe" class="bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none">
                            <input v-model="passForm.confirm" type="password" placeholder="Confirmer" class="bg-aethas-dark border border-gray-600 rounded-lg px-4 py-2 focus:border-aethas-cyan focus:outline-none">
                            <button @click="changePassword" :disabled="isSavingSettings" class="bg-gray-700 hover:bg-gray-600 text-white font-semibold py-2 px-4 rounded-lg disabled:opacity-50">Modifier le mot de passe</button>
                        </div>
                    </div>
                </div>
-                <div class="flex space-x-1.5 h-4 items-center">
+
-                    <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce"></div>
+                <!-- Tab: Admin -->
-                    <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce" style="animation-delay: 0.15s"></div>
+                <div v-if="settingsTab === 'admin' && user.is_admin" class="space-y-6">
-                    <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce" style="animation-delay: 0.3s"></div>
+                    <div class="bg-gray-800 p-6 rounded-xl border border-gray-700">
                        <h3 class="text-lg font-semibold text-red-400 mb-4">Outils Administrateur</h3>
                        <p class="text-sm text-gray-400 mb-4">Fonctionnalités réservées aux administrateurs pour la gestion des modèles et le suivi de base.</p>
                        <div class="flex gap-4">
                            <button @click="activeView = 'models'" class="bg-gray-700 hover:bg-gray-600 text-white px-4 py-2 rounded-lg text-sm border border-gray-600">Ouvrir le panneau Modèles IA</button>
                            <a href="/api/models/export" target="_blank" class="bg-gray-700 hover:bg-gray-600 text-white px-4 py-2 rounded-lg text-sm border border-gray-600">Exporter DB Modèles (JSON)</a>
                        </div>
                    </div>
                </div>
                <!-- Tab: Super-Admin -->
                <div v-if="settingsTab === 'super' && user.is_superadmin" class="space-y-6">
                    <div class="bg-gray-800 p-6 rounded-xl border border-gray-700 border-l-4 border-l-aethas-purple">
                        <h3 class="text-lg font-semibold text-purple-400 mb-4">Espace Réservé Super-Admin</h3>
                        <p class="text-sm text-gray-400">La gestion complète du serveur mail, des clés API et de l'élévation des droits utilisateurs sera disponible ici lors du prochain patch de développement.</p>
                    </div>
                </div>
            </div>
        </div>
-        <!-- Saisie du Prompt -->
+        <!-- VUE : MODÈLES ET FINANCES (Admin Only) -->
-        <div class="p-4 md:p-6 w-full max-w-4xl mx-auto">
+        <div v-if="activeView === 'models' && user.is_admin" class="flex-1 overflow-y-auto p-4 md:p-8 space-y-6">
-            <div class="relative flex items-end bg-gray-800 border border-gray-600 rounded-2xl p-2 shadow-lg focus-within:border-aethas-cyan focus-within:ring-1 focus-within:ring-aethas-cyan transition-all">
+            <div class="flex justify-between items-end border-b border-gray-700 pb-4">
-                <button class="p-3 text-gray-400 hover:text-aethas-cyan transition-colors flex-shrink-0" :disabled="!activeProject || isAiThinking"><i data-lucide="paperclip" class="w-5 h-5"></i></button>
+                <div>
-                <textarea 
+                    <h2 class="text-2xl font-bold text-white flex items-center gap-2"><i data-lucide="cpu" class="w-6 h-6 text-aethas-cyan"></i> Modèles & Finances API</h2>
-                    v-model="prompt" 
+                    <p class="text-sm text-gray-400 mt-1">Dernière extraction : <span class="text-gray-200 font-mono">{{ formatDate(modelInfo.last_sync_date) }}</span> <span class="text-xs bg-gray-800 px-2 py-0.5 rounded border border-gray-600 ml-2 uppercase">{{ modelInfo.last_sync_type || 'Aucune' }}</span></p>
-                    @input="autoResize"
+                </div>
-                    @keydown.enter.exact.prevent="sendMessage"
+                <div class="flex gap-2">
-                    ref="promptTextarea"
+                    <button @click="syncModels" :disabled="isSyncing" class="bg-aethas-cyan hover:bg-cyan-600 text-aethas-dark font-semibold py-2 px-4 rounded flex items-center gap-2 text-sm disabled:opacity-50"><i data-lucide="refresh-cw" :class="{'animate-spin': isSyncing}" class="w-4 h-4"></i> Forcer Extraction</button>
-                    :disabled="!activeProject || isAiThinking"
+                </div>
-                    rows="1" 
+            </div>
-                    class="w-full bg-transparent text-gray-200 p-3 max-h-[200px] overflow-y-auto focus:outline-none resize-none leading-relaxed disabled:opacity-50" 
+
-                    placeholder="Posez votre question à l'Orchestrateur..."></textarea>
+            <div class="grid grid-cols-1 md:grid-cols-3 gap-4">
-                <button @click="sendMessage" :disabled="!activeProject || !prompt.trim() || isAiThinking" class="p-3 text-aethas-cyan hover:text-white transition-colors flex-shrink-0 disabled:opacity-50 disabled:text-gray-500"><i data-lucide="send" class="w-5 h-5"></i></button>
+                <div v-for="fin in financesList" :key="fin.provider" class="bg-gray-800 border border-gray-700 rounded-xl p-4 flex flex-col justify-between">
                    <div class="flex justify-between items-start mb-2"><span class="font-bold text-gray-200 capitalize">{{ fin.provider }}</span><i data-lucide="wallet" class="w-5 h-5 text-gray-500"></i></div>
                    <div>
                        <div class="text-2xl font-mono" :class="fin.balance > 0 ? 'text-green-400' : 'text-aethas-cyan'">${{ fin.balance > 0 ? fin.balance.toFixed(4) : Math.abs(fin.total_usage).toFixed(4) }}</div>
                        <div class="text-xs text-gray-400 mt-1">Conso. API : ${{ fin.total_usage.toFixed(4) }}</div>
                    </div>
                </div>
            </div>
            <div class="bg-aethas-panel border border-gray-700 rounded-xl overflow-hidden flex flex-col">
                <div class="p-4 bg-gray-800/50 border-b border-gray-700 flex flex-wrap gap-4 items-center">
                    <input v-model="filterSearch" type="text" placeholder="Rechercher..." class="bg-gray-900 border border-gray-600 rounded px-3 py-1.5 text-sm text-gray-200 w-full md:w-64 focus:border-aethas-cyan focus:outline-none">
                    <select v-model="filterDomain" class="bg-gray-900 border border-gray-600 rounded px-3 py-1.5 text-sm text-gray-200 focus:outline-none">
                        <option value="">Tous les domaines</option>
                        <option value="Texte Polyvalent">Texte Polyvalent</option>
                        <option value="Code & Logique">Code & Logique</option>
                        <option value="Vision & Texte">Vision & Texte</option>
                        <option value="Audio">Audio</option>
                    </select>
                    <select v-model="filterPricing" class="bg-gray-900 border border-gray-600 rounded px-3 py-1.5 text-sm text-gray-200 focus:outline-none">
                        <option value="">Tous les prix</option>
                        <option value="free">Gratuits uniquement</option>
                        <option value="paid">Payants</option>
                    </select>
                </div>
                <div class="overflow-x-auto max-h-[500px] custom-scrollbar">
                    <table class="w-full text-left text-sm text-gray-300">
                        <thead class="text-xs uppercase bg-gray-800 text-gray-400 sticky top-0"><tr><th class="px-4 py-3">Modèle</th><th class="px-4 py-3">Fournisseur</th><th class="px-4 py-3">Domaine</th><th class="px-4 py-3">Coût (1M Tokens)</th><th class="px-4 py-3">Contexte</th><th class="px-4 py-3 w-1/3">Description</th></tr></thead>
                        <tbody>
                            <tr v-for="model in filteredModels" :key="model.model_id" class="border-b border-gray-700 hover:bg-gray-800/50 transition-colors">
                                <td class="px-4 py-3 font-mono text-xs text-aethas-cyan break-all">{{ model.model_id }}</td>
                                <td class="px-4 py-3 capitalize">{{ model.provider }}</td>
                                <td class="px-4 py-3"><span class="bg-gray-700 text-gray-200 px-2 py-1 rounded text-xs">{{ model.domain }}</span></td>
                                <td class="px-4 py-3 font-mono text-xs"><span v-if="model.is_free" class="text-green-400 font-bold">GRATUIT</span><span v-else>In: ${{ model.pricing_prompt.toFixed(2) }}<br>Out: ${{ model.pricing_completion.toFixed(2) }}</span></td>
                                <td class="px-4 py-3">{{ (model.context_length / 1000).toFixed(0) }}k</td>
                                <td class="px-4 py-3 text-xs text-gray-400 truncate max-w-[250px]" :title="model.description_fr">{{ model.description_fr }}</td>
                            </tr>
                        </tbody>
                    </table>
                </div>
            </div>
            <p class="text-center text-xs text-gray-500 mt-3">AETHAS38 peut faire des erreurs. Vérifiez toujours les informations importantes.</p>
        </div>
        <!-- VUE : CHAT PAR DÉFAUT -->
        <template v-if="activeView === 'chat'">
            <div v-if="!activeProject" class="flex-1 overflow-y-auto p-4 flex flex-col items-center justify-center">
                <img src="/assets/logo.png" class="w-24 h-24 mb-6 rounded-full border-2 border-aethas-cyan shadow-[0_0_15px_rgba(6,182,212,0.5)]">
                <h2 class="text-2xl font-bold text-gray-200 mb-2">Comment puis-je vous aider aujourd'hui ?</h2>
            </div>
            <div v-else class="flex-1 overflow-y-auto p-4 md:p-8 space-y-6 flex flex-col custom-scrollbar" id="chat-container">
                <div v-if="messages.length === 0" class="flex-1 flex items-center justify-center text-gray-500 italic">Démarrez la conversation ci-dessous.</div>
                <div v-for="msg in messages" :key="msg.id" :class="['max-w-4xl rounded-2xl p-4', msg.role === 'user' ? 'bg-gray-800 ml-auto border border-gray-700' : 'bg-aethas-panel mr-auto border border-aethas-cyan/30 flex flex-col']">
                    <div class="flex items-center gap-2 mb-2">
                        <img v-if="msg.role === 'user' && user.avatar_path" :src="user.avatar_path" class="w-5 h-5 rounded-full object-cover">
                        <span class="text-xs font-semibold uppercase tracking-wider text-gray-400">{{ msg.role === 'user' ? 'Vous' : 'AETHAS38' }}</span>
                    </div>
                    <div class="text-gray-200 text-sm leading-relaxed w-full">
                        <template v-for="(part, index) in parseMessage(msg.content)" :key="index">
                            <div v-if="part.type === 'text'" class="whitespace-pre-wrap font-sans">{{ part.content }}</div>
                            <div v-if="part.type === 'code'" class="my-4 bg-gray-900 rounded-lg border border-gray-700 overflow-hidden shadow-inner">
                                <div class="flex justify-between items-center px-4 py-2 bg-gray-800 border-b border-gray-700">
                                    <span class="text-xs text-gray-400 font-mono flex items-center gap-2"><i data-lucide="file-code-2" class="w-4 h-4"></i> {{ part.language || 'code' }}</span>
                                    <button @click="downloadFile(part.content, part.language)" class="text-aethas-cyan hover:text-white flex items-center gap-1 text-xs transition-colors bg-gray-700 hover:bg-gray-600 px-2 py-1 rounded"><i data-lucide="download" class="w-3 h-3"></i> Fichier</button>
                                </div>
                                <pre class="p-4 text-xs font-mono text-gray-300 overflow-x-auto custom-scrollbar"><code>{{ part.content }}</code></pre>
                            </div>
                        </template>
                    </div>
                    <div v-if="msg.role !== 'user'" class="mt-3 flex items-center gap-3 border-t border-gray-700/50 pt-2 opacity-50 hover:opacity-100 transition-opacity">
                        <button @click="copyToClipboard(msg.content)" class="text-xs text-gray-400 hover:text-aethas-cyan flex items-center gap-1"><i data-lucide="copy" class="w-3 h-3"></i> Copier</button>
                        <button @click="downloadMessage(msg.content, msg.created_at)" class="text-xs text-gray-400 hover:text-aethas-cyan flex items-center gap-1"><i data-lucide="file-down" class="w-3 h-3"></i> Extraire</button>
                    </div>
                </div>
                <div v-if="isAiThinking" class="max-w-3xl rounded-2xl p-4 bg-aethas-panel mr-auto border border-aethas-cyan/30 w-24">
                    <div class="flex space-x-1.5 h-4 items-center">
                        <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce"></div>
                        <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce" style="animation-delay: 0.15s"></div>
                        <div class="w-2 h-2 bg-aethas-cyan rounded-full animate-bounce" style="animation-delay: 0.3s"></div>
                    </div>
                </div>
            </div>
            <!-- ZONE SÉLECTION MODÈLES PAR REQUÊTE -->
            <div v-if="activeProject" class="p-4 md:p-6 w-full max-w-5xl mx-auto space-y-2">
                <div class="bg-gray-800/80 border border-gray-700 rounded-xl p-3 flex flex-wrap gap-4 items-center text-xs shadow-md">
                    <div class="flex items-center gap-2 flex-1 min-w-[200px]">
                        <span class="text-aethas-cyan font-semibold w-20"><i data-lucide="users" class="w-3 h-3 inline"></i> Travailleurs:</span>
                        <select multiple v-model="selectedWorkers" @change="limitWorkers" class="bg-aethas-dark border border-gray-600 rounded px-2 py-1 text-gray-200 w-full h-16 outline-none focus:border-aethas-cyan custom-scrollbar">
                            <option value="gemini-3.5-flash-lite">Gemini 3.5 Flash-Lite (Direct)</option>
                            <option v-for="m in modelInfo.models" :key="m.model_id" :value="m.model_id">{{ m.name || m.model_id }} ({{ m.domain }})</option>
                        </select>
                        <span class="text-gray-500 ml-1">{{ selectedWorkers.length }}/5</span>
                    </div>
                    <div class="flex flex-col gap-2 flex-1 min-w-[200px]" :class="{'opacity-30 pointer-events-none': selectedWorkers.length <= 1}">
                        <div class="flex items-center gap-2">
                            <span class="text-gray-400 font-semibold w-24"><i data-lucide="edit-3" class="w-3 h-3 inline"></i> Prompteur:</span>
                            <select v-model="selectedPrompter" class="bg-aethas-dark border border-gray-600 rounded px-2 py-1 text-gray-200 flex-1 outline-none truncate">
                                <option value="gemini-3.5-flash-lite">Gemini 3.5 Flash-Lite (Direct)</option>
                                <option v-for="m in modelInfo.models" :key="m.model_id" :value="m.model_id">{{ m.name || m.model_id }}</option>
                            </select>
                        </div>
                        <div class="flex items-center gap-2">
                            <span class="text-aethas-purple font-semibold w-24"><i data-lucide="git-merge" class="w-3 h-3 inline"></i> Concaténeur:</span>
                            <select v-model="selectedConcatenator" class="bg-aethas-dark border border-gray-600 rounded px-2 py-1 text-gray-200 flex-1 outline-none truncate">
                                <option value="gemini-3.5-flash-lite">Gemini 3.5 Flash-Lite (Direct)</option>
                                <option v-for="m in modelInfo.models" :key="m.model_id" :value="m.model_id">{{ m.name || m.model_id }}</option>
                            </select>
                        </div>
                    </div>
                </div>
                <div class="relative flex items-end bg-gray-800 border border-gray-600 rounded-2xl p-2 shadow-lg focus-within:border-aethas-cyan">
                    <textarea v-model="prompt" @input="autoResize" @keydown.enter.exact.prevent="sendMessage" ref="promptTextarea" :disabled="isAiThinking" rows="1" class="w-full bg-transparent text-gray-200 p-3 max-h-[200px] overflow-y-auto focus:outline-none resize-none disabled:opacity-50 custom-scrollbar" placeholder="Sélectionnez vos modèles ci-dessus, puis posez votre question..."></textarea>
                    <button @click="sendMessage" :disabled="!prompt.trim() || isAiThinking" class="p-3 text-aethas-cyan hover:text-white disabled:opacity-50"><i data-lucide="send" class="w-5 h-5"></i></button>
                </div>
            </div>
        </template>
    </main>
 </div>
 <script>
-    const { createApp, ref, onMounted, nextTick, computed } = Vue;
+    const { createApp, ref, reactive, onMounted, nextTick, computed } = Vue;
    createApp({
        setup() {
-            const username = ref("Admin");
+            const user = ref({ username: "Guest", is_admin: false, is_superadmin: false, avatar_path: null });
            const activeView = ref('chat'); 
            const settingsTab = ref('user');
            const isSidebarOpen = ref(true);
            const prompt = ref("");
            const promptTextarea = ref(null);
            const projects = ref([]);
            const activeProject = ref(null);
            const messages = ref([]);
            const isLoading = ref(false);
            const isAiThinking = ref(false);
            const isSyncing = ref(false);
            const isSavingSettings = ref(false);
            const settingsMessage = ref("");
            const passForm = reactive({ old: '', new: '', confirm: '' });
            const modelInfo = reactive({ last_sync_date: null, last_sync_type: null, models: [] });
            const financesList = ref([]);
            const filterSearch = ref("");
            const filterDomain = ref("");
            const filterPricing = ref("");
            const selectedWorkers = ref(["gemini-3.5-flash-lite"]);
            const selectedPrompter = ref("gemini-3.5-flash-lite");
            const selectedConcatenator = ref("gemini-3.5-flash-lite");
            const pinnedProjects = computed(() => projects.value.filter(p => p.is_pinned));
            const recentProjects = computed(() => projects.value.filter(p => !p.is_pinned));
-            const toggleSidebar = () => { isSidebarOpen.value = !isSidebarOpen.value; };
+            const filteredModels = computed(() => {
-            const autoResize = () => {
+                return modelInfo.models.filter(m => {
-                const el = promptTextarea.value;
+                    const matchSearch = (m.model_id.toLowerCase().includes(filterSearch.value.toLowerCase()) || m.provider.toLowerCase().includes(filterSearch.value.toLowerCase()));
-                if (!el) return;
+                    const matchDomain = filterDomain.value === "" || m.domain === filterDomain.value;
-                el.style.height = 'auto'; 
+                    let matchPrice = true;
-                el.style.height = el.scrollHeight + 'px'; 
+                    if (filterPricing.value === 'free') matchPrice = m.is_free;
-            };
+                    if (filterPricing.value === 'paid') matchPrice = !m.is_free;
-            const scrollToBottom = () => {
+                    return matchSearch && matchDomain && matchPrice;
                nextTick(() => {
                    const container = document.getElementById('chat-container');
                    if (container) container.scrollTop = container.scrollHeight;
                });
            };
            const fetchProjects = async () => {
                try {
                    const response = await fetch('/api/projects');
                    if (response.ok) {
                        projects.value = await response.json();
                        nextTick(() => lucide.createIcons());
                    }
                } catch (error) { console.error(error); }
            };
            const selectProject = async (project) => {
                activeProject.value = project;
                messages.value = [];
                try {
                    const response = await fetch(`/api/projects/${project.id}/messages`);
                    if (response.ok) {
                        messages.value = await response.json();
                        scrollToBottom();
                        nextTick(() => lucide.createIcons());
                    }
                } catch (error) { console.error(error); }
            };
            const createNewProject = async () => {
                isLoading.value = true;
                try {
                    const response = await fetch('/api/projects', {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify({ title: "Nouvelle discussion" })
                    });
                    if (response.ok) {
                        const newProject = await response.json();
                        projects.value.unshift(newProject);
                        selectProject(newProject);
                    }
                } catch (error) { console.error(error); } 
                finally { isLoading.value = false; }
            };
            const renameProject = async (project) => {
                const newTitle = window.prompt("Nouveau nom du projet :", project.title);
                if (!newTitle || newTitle.trim() === "" || newTitle === project.title) return;
                try {
                    const response = await fetch(`/api/projects/${project.id}/rename`, {
                        method: 'PUT',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify({ title: newTitle.trim() })
                    });
                    if (response.ok) {
                        const updatedProject = await response.json();
                        const index = projects.value.findIndex(p => p.id === project.id);
                        if (index !== -1) projects.value[index] = updatedProject;
                        if (activeProject.value && activeProject.value.id === project.id) {
                            activeProject.value.title = updatedProject.title;
                        }
                    }
                } catch (error) { console.error("Erreur de renommage", error); }
            };
            const sendMessage = async () => {
                if (!prompt.value.trim() || !activeProject.value) return;
                const userText = prompt.value.trim();
                prompt.value = "";
                autoResize();
                messages.value.push({ id: Date.now(), role: 'user', content: userText });
                isAiThinking.value = true;
                scrollToBottom();
                nextTick(() => lucide.createIcons());
                try {
                    const response = await fetch(`/api/projects/${activeProject.value.id}/messages`, {
                        method: 'POST',
                        headers: { 'Content-Type': 'application/json' },
                        body: JSON.stringify({ role: 'user', content: userText })
                    });
                    if (response.ok) {
                        // L'API nous renvoie l'historique à jour avec la réponse de l'IA
                        messages.value = await response.json();
                    } else {
                        const err = await response.json();
                        alert("Erreur: " + err.detail);
                    }
                } catch (error) { 
                    console.error("Erreur envoi message", error); 
                } finally {
                    isAiThinking.value = false;
                    scrollToBottom();
                    nextTick(() => lucide.createIcons());
                }
            };
            const togglePin = async (projectId) => { /* ... code existant identique ... */
                try {
                    const response = await fetch(`/api/projects/${projectId}/pin`, { method: 'PUT' });
                    if (response.ok) {
                        const updatedProject = await response.json();
                        const index = projects.value.findIndex(p => p.id === projectId);
                        if (index !== -1) projects.value[index] = updatedProject;
                    }
                } catch (error) { console.error(error); }
            };
            const deleteProject = async (projectId) => { /* ... code existant identique ... */
                if (!confirm("Voulez-vous vraiment supprimer ce projet ?")) return;
                try {
                    const response = await fetch(`/api/projects/${projectId}`, { method: 'DELETE' });
                    if (response.ok) {
                        projects.value = projects.value.filter(p => p.id !== projectId);
                        if (activeProject.value && activeProject.value.id === projectId) activeProject.value = null;
                    }
                } catch (error) { console.error(error); }
            };
            onMounted(() => {
                lucide.createIcons();
                fetchProjects();
            });
            const formatDate = (isoString) => {
                if (!isoString) return "Jamais";
                const d = new Date(isoString);
                return d.toLocaleDateString('fr-FR', { day: '2-digit', month: '2-digit', year: 'numeric' }) + " à " + d.toLocaleTimeString('fr-FR', { hour: '2-digit', minute: '2-digit' });
            };
            const toggleSidebar = () => { isSidebarOpen.value = !isSidebarOpen.value; };
            const autoResize = () => { const el = promptTextarea.value; if(el){ el.style.height = 'auto'; el.style.height = el.scrollHeight + 'px'; }};
            const scrollToBottom = () => { nextTick(() => { const c = document.getElementById('chat-container'); if (c) c.scrollTop = c.scrollHeight; }); };
            const fetchUser = async () => { try { const res = await fetch('/api/users/me'); if(res.ok) user.value = await res.json(); } catch(e){} };
            const fetchModelsInfo = async () => { try { const res = await fetch('/api/models/info'); if(res.ok) { const data = await res.json(); modelInfo.last_sync_date = data.last_sync_date; modelInfo.last_sync_type = data.last_sync_type; modelInfo.models = data.models; } } catch(e){} };
            const fetchFinances = async () => { try { const res = await fetch('/api/finances'); if(res.ok) financesList.value = await res.json(); } catch(e){} };
            const syncModels = async () => { 
                isSyncing.value = true; 
                try { 
                    const res = await fetch('/api/models/sync', { method: 'POST' }); 
                    if(res.ok) { 
                        await fetchModelsInfo(); 
                        await fetchFinances();
                        alert("Synchronisation terminée !"); 
                    } else {
                        const err = await res.json();
                        alert("Erreur: " + err.detail);
                    }
                } catch(e) { alert("Erreur réseau de synchronisation."); } 
                isSyncing.value = false; 
            };
            const uploadAvatar = async (event) => {
                const file = event.target.files[0];
                if (!file) return;
                const formData = new FormData(); formData.append("file", file);
                try {
                    const res = await fetch('/api/users/me/avatar', { method: 'POST', body: formData });
                    const data = await res.json();
                    if(res.ok) user.value.avatar_path = data.avatar_path;
                    else alert(data.detail);
                } catch(e) { alert("Erreur d'upload"); }
                event.target.value = null;
            };
            const exportProject = (format) => { if(activeProject.value) window.open(`/api/projects/${activeProject.value.id}/export?format=${format}`, '_blank'); };
            const copyToClipboard = async (text) => { try { await navigator.clipboard.writeText(text); alert("Copié !"); } catch (e) {} };
            const downloadFile = (content, hint) => { let fname = hint ? hint.trim() : 'code.txt'; if (!fname.includes('.')) fname += '.txt'; const blob = new Blob([content], { type: 'text/plain;charset=utf-8' }); const url = URL.createObjectURL(blob); const a = document.createElement('a'); a.href = url; a.download = fname; a.click(); URL.revokeObjectURL(url); };
            const downloadMessage = (content, dateString) => { downloadFile(content, `message_${dateString.replace(/[:T.Z]/g, '-')}.txt`); };
            const parseMessage = (content) => { const regex = /```([\w.-]*)\n([\s\S]*?)```/g; let parts = [], last = 0, m; while ((m = regex.exec(content)) !== null) { if (m.index > last) parts.push({ type: 'text', content: content.slice(last, m.index) }); parts.push({ type: 'code', language: m[1], content: m[2] }); last = m.index + m[0].length; } if (last < content.length) parts.push({ type: 'text', content: content.slice(last) }); return parts.length > 0 ? parts : [{ type: 'text', content: content }]; };
            const fetchProjects = async () => { try { const res = await fetch('/api/projects'); if(res.ok) projects.value = await res.json(); nextTick(()=>lucide.createIcons()); } catch(e){} };
            const selectProject = async (project) => { activeView.value = 'chat'; activeProject.value = project; messages.value = []; try { const res = await fetch(`/api/projects/${project.id}/messages`); if(res.ok) { messages.value = await res.json(); scrollToBottom(); nextTick(()=>lucide.createIcons()); } } catch(e){} };
            const createNewProject = async () => { activeView.value = 'chat'; isLoading.value = true; try { const res = await fetch('/api/projects', { method: 'POST', headers: {'Content-Type': 'application/json'}, body: JSON.stringify({title: "Nouvelle discussion"})}); if(res.ok){ const np = await res.json(); projects.value.unshift(np); selectProject(np); } } catch(e){} finally{isLoading.value = false;} };
            const sendMessage = async () => {
                if (!prompt.value.trim() || !activeProject.value || selectedWorkers.value.length === 0) return;
                const userText = prompt.value.trim(); prompt.value = ""; autoResize();
                messages.value.push({ id: Date.now(), role: 'user', content: userText });
                isAiThinking.value = true; scrollToBottom();
                const payload = { role: 'user', content: userText, config: { workers: selectedWorkers.value, prompter: selectedPrompter.value, concatenator: selectedConcatenator.value } };
                try {
                    const response = await fetch(`/api/projects/${activeProject.value.id}/messages`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify(payload) });
                    if (response.ok) { 
                        const data = await response.json(); 
                        if (Array.isArray(data)) messages.value = data; 
                        await fetchFinances(); // MAJ du budget sous le nom
                    } else { 
                        const err = await response.json(); alert("Erreur API IA : " + err.detail); 
                    }
                } catch (error) {} finally { isAiThinking.value = false; scrollToBottom(); nextTick(()=>lucide.createIcons()); }
            };
            const changePassword = async () => {
                settingsMessage.value = "";
                if (passForm.new !== passForm.confirm) { settingsMessage.value = "Mots de passe différents."; return; }
                if (passForm.new.length < 8) { settingsMessage.value = "8 caractères minimum."; return; }
                isSavingSettings.value = true;
                try { const res = await fetch('/api/users/me/password', { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ old_password: passForm.old, new_password: passForm.new }) }); const data = await res.json(); if (res.ok) { settingsMessage.value = data.message; passForm.old=''; passForm.new=''; passForm.confirm=''; } else { settingsMessage.value = data.detail; } } catch (e) {} finally { isSavingSettings.value = false; }
            };
            const renameProject = async (project) => { const nt = window.prompt("Nom :", project.title); if (!nt || nt.trim() === "" || nt === project.title) return; try { const res = await fetch(`/api/projects/${project.id}/rename`, { method: 'PUT', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ title: nt.trim() }) }); if (res.ok) { const up = await res.json(); const i = projects.value.findIndex(p => p.id === project.id); if (i !== -1) projects.value[i] = up; if (activeProject.value && activeProject.value.id === project.id) activeProject.value.title = up.title; } } catch (e) {} };
            const togglePin = async (pid) => { try { const res = await fetch(`/api/projects/${pid}/pin`, { method: 'PUT' }); if (res.ok) { const up = await res.json(); const i = projects.value.findIndex(p => p.id === pid); if (i !== -1) projects.value[i] = up; } } catch (e) {} };
            const deleteProject = async (pid) => { if (!confirm("Supprimer ce projet ?")) return; try { const res = await fetch(`/api/projects/${pid}`, { method: 'DELETE' }); if (res.ok) { projects.value = projects.value.filter(p => p.id !== pid); if (activeProject.value && activeProject.value.id === pid) activeProject.value = null; } } catch (e) {} };
            const limitWorkers = () => { if(selectedWorkers.value.length > 5) { selectedWorkers.value.pop(); alert("Max 5 travailleurs."); } };
            onMounted(() => { lucide.createIcons(); fetchUser(); fetchProjects(); fetchModelsInfo(); fetchFinances(); });
            return { 
-                username, isSidebarOpen, toggleSidebar, prompt, autoResize, promptTextarea, 
+                user, activeView, settingsTab, isSidebarOpen, toggleSidebar, prompt, autoResize, promptTextarea, 
                projects, pinnedProjects, recentProjects, activeProject, messages, isAiThinking,
-                createNewProject, selectProject, renameProject, sendMessage, isLoading, togglePin, deleteProject 
+                createNewProject, selectProject, renameProject, sendMessage, isLoading, togglePin, deleteProject,
                passForm, settingsMessage, isSavingSettings, changePassword, uploadAvatar,
                modelInfo, financesList, filterSearch, filterDomain, filterPricing, filteredModels, formatDate, syncModels, isSyncing,
                selectedWorkers, selectedPrompter, selectedConcatenator, limitWorkers,
                exportProject, copyToClipboard, downloadFile, downloadMessage, parseMessage
            };
        }
    }).mount('#app');
@@ -12,3 +12,6 @@ bcrypt
 email-validator
 PyJWT
 openai
 httpx
 python-multipart
 pytz
Author	SHA1	Message	Date
xavier	4a9a0d8ec6	docs: mise à jour complète du README pour refléter l'état de la v0.16.0 (super-admin, multi-fournisseurs, finances, avatars) Build and Push Docker Image / build-and-push (push) Successful in 43s Details	2026-10-07 21:10:10 +02:00
xavier	b554c983a6	fix: sécurisation des insertions de modèles via dictionnaire temporaire pour éviter les Duplicate Key Build and Push Docker Image / build-and-push (push) Successful in 47s Details	2026-10-07 19:40:09 +02:00
xavier	007e723e4e	feat: intégration extraction universelle multi-fournisseurs avec timeout 90s et routage dynamique Build and Push Docker Image / build-and-push (push) Successful in 43s Details	2026-10-07 19:29:17 +02:00
xavier	95125df3b2	fix: sécurisation extraction API, affichage permanent du solde dans le menu latéral et maj financière post-requête Build and Push Docker Image / build-and-push (push) Successful in 45s Details	2026-10-07 19:16:52 +02:00
xavier	36f205a56e	fix: ajout de la dépendance pytz manquante pour le planificateur CRON Build and Push Docker Image / build-and-push (push) Successful in 47s Details	2026-10-07 18:45:37 +02:00
xavier	2eb3acceea	feat: refonte bdd, ajout super-admin, pages de config par niveau, avatar natif et sélecteur de modèles par requête Build and Push Docker Image / build-and-push (push) Successful in 42s Details	2026-10-07 18:39:11 +02:00
xavier	4d5046e8d0	feat: ajout des exports de conversation globaux et du parseur de code pour l'extraction ciblée Build and Push Docker Image / build-and-push (push) Successful in 42s Details	2026-10-07 18:10:32 +02:00
xavier	ba2f37cf59	fix: réorganisation des fonctions dans main.py pour corriger le NameError sur get_current_user Build and Push Docker Image / build-and-push (push) Successful in 44s Details	2026-10-07 17:14:04 +02:00
xavier	4805228f28	fix: résolution des conflits d'imports et complétion des interfaces manquantes pour la v0.12.0 Build and Push Docker Image / build-and-push (push) Successful in 42s Details	2026-10-07 16:59:14 +02:00
xavier	6e4aee1984	feat: intégration du formulaire de modification du mot de passe utilisateur via le tableau de bord Build and Push Docker Image / build-and-push (push) Successful in 41s Details	2026-10-07 16:42:38 +02:00
xavier	b6765a9bc8	Maj readme Build and Push Docker Image / build-and-push (push) Successful in 40s Details	2026-10-07 16:19:28 +02:00
xavier	efdda0ed00	fix: ajout de la dépendance httpx manquante pour le module asynchrone Build and Push Docker Image / build-and-push (push) Successful in 47s Details	2026-10-07 15:54:42 +02:00
xavier	8a32c16ff4	feat: implémentation de l'orchestrateur asynchrone multi-agents (prompteur/travailleurs/concaténeur) et API de synchronisation des modèles Build and Push Docker Image / build-and-push (push) Successful in 42s Details	2026-10-07 15:39:24 +02:00
xavier	4ce11d0bfe	fix: mise à jour de l'identifiant du modèle Gemini vers gemini-3.5-flash-lite Build and Push Docker Image / build-and-push (push) Successful in 40s Details	2026-10-07 15:17:03 +02:00
xavier	b3d92558fc	fix: correction de l'indentation Python dans models.py provoquant le crash du backend Build and Push Docker Image / build-and-push (push) Successful in 41s Details	2026-10-07 14:55:42 +02:00
xavier	ec37ac06fe	fix: retrait de la dépendance au logger manquant et priorisation de Gemini Direct Build and Push Docker Image / build-and-push (push) Successful in 42s Details	2026-10-07 14:39:40 +02:00
xavier	6f7e3efd6e	feat: ajout du système de rotation de logs (7j), correction du modèle générique OpenRouter, création du Wiki et préparation BDD modèles/finances Build and Push Docker Image / build-and-push (push) Successful in 44s Details	2026-10-07 14:31:46 +02:00
xavier	f794937fd8	fix: intégration du support natif Gemini et affichage des erreurs API détaillées Build and Push Docker Image / build-and-push (push) Successful in 41s Details	2026-10-07 14:09:24 +02:00
xavier	4b80ff404f	fix: nettoyage des routes API dupliquées bloquant l'IA et application forcée du frontend Build and Push Docker Image / build-and-push (push) Successful in 41s Details	2026-10-07 11:35:48 +02:00