feat(notes): vues structurées tableau/kanban, flashcards et MCP robuste

Ajoute la base organisable par carnet (schéma, champs partagés, valeurs par note)
avec activation guidée, tableau éditable, kanban et suppression de colonnes.
Corrige le multiselect en vue tableau et enrichit sidebar, grille et i18n FR/EN.
Inclut aussi les améliorations flashcards SM-2, l'audit consentement IA et la
robustesse du serveur MCP (config, validation, rate-limit, métriques).

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/api/flashcards/[id]/route.ts

@@ -0,0 +1,80 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
+
+/**
+ * PATCH /api/flashcards/[id]
+ * Update front and/or back of a flashcard.
+ */
+export async function PATCH(
+  request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const session = await auth()
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const { id: cardId } = await params
+    const body = await request.json()
+    const front = typeof body.front === 'string' ? body.front.trim() : undefined
+    const back = typeof body.back === 'string' ? body.back.trim() : undefined
+
+    if (!front && !back) {
+      return NextResponse.json({ error: 'Nothing to update' }, { status: 400 })
+    }
+
+    const card = await prisma.flashcard.findFirst({
+      where: { id: cardId, deck: { userId: session.user.id } },
+    })
+    if (!card) {
+      return NextResponse.json({ error: 'Card not found' }, { status: 404 })
+    }
+
+    const updated = await prisma.flashcard.update({
+      where: { id: cardId },
+      data: {
+        ...(front !== undefined && { front }),
+        ...(back !== undefined && { back }),
+      },
+    })
+
+    return NextResponse.json({ card: { id: updated.id, front: updated.front, back: updated.back } })
+  } catch (error) {
+    console.error('[flashcards/[id] PATCH]', error)
+    return NextResponse.json({ error: 'Failed to update card' }, { status: 500 })
+  }
+}
+
+/**
+ * DELETE /api/flashcards/[id]
+ * Delete a single flashcard.
+ */
+export async function DELETE(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const session = await auth()
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const { id: cardId } = await params
+
+    const card = await prisma.flashcard.findFirst({
+      where: { id: cardId, deck: { userId: session.user.id } },
+    })
+    if (!card) {
+      return NextResponse.json({ error: 'Card not found' }, { status: 404 })
+    }
+
+    await prisma.flashcard.delete({ where: { id: cardId } })
+
+    return NextResponse.json({ ok: true })
+  } catch (error) {
+    console.error('[flashcards/[id] DELETE]', error)
+    return NextResponse.json({ error: 'Failed to delete card' }, { status: 500 })
+  }
+}

memento-note/app/api/flashcards/decks/[id]/route.ts

@@ -1,5 +1,6 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
 import { getDeckDetail } from '@/lib/flashcards/deck-queries'
 
 export async function GET(
@@ -35,3 +36,35 @@ export async function GET(
     return NextResponse.json({ error: 'Failed to load deck' }, { status: 500 })
   }
 }
+
+/**
+ * DELETE /api/flashcards/decks/[id]
+ * Permanently deletes the deck and all its cards (cascade via Prisma).
+ */
+export async function DELETE(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  try {
+    const session = await auth()
+    if (!session?.user?.id) {
+      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+    }
+
+    const { id } = await params
+
+    const deck = await prisma.flashcardDeck.findFirst({
+      where: { id, userId: session.user.id },
+    })
+    if (!deck) {
+      return NextResponse.json({ error: 'Deck not found' }, { status: 404 })
+    }
+
+    await prisma.flashcardDeck.delete({ where: { id } })
+
+    return NextResponse.json({ ok: true })
+  } catch (error) {
+    console.error('[flashcards/decks/[id] DELETE]', error)
+    return NextResponse.json({ error: 'Failed to delete deck' }, { status: 500 })
+  }
+}

memento-note/app/api/flashcards/save/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
+import { Prisma } from '@prisma/client'
 import { auth } from '@/auth'
-import prisma from '@/lib/prisma'
+import { prisma } from '@/lib/prisma'
 import { getOrCreateDeckForNotebook } from '@/lib/flashcards/deck-utils'
 import type { FlashcardStyle } from '@/lib/flashcards/generate-flashcards'
 
@@ -12,6 +13,13 @@ interface CardInput {
 
 export async function POST(request: NextRequest) {
   try {
+    if (!prisma.flashcard || !prisma.flashcardDeck) {
+      return NextResponse.json(
+        { error: 'Flashcards client outdated. Restart the app after prisma generate.', errorKey: 'flashcards.schemaMissing' },
+        { status: 503 },
+      )
+    }
+
     const session = await auth()
     if (!session?.user?.id) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
@@ -103,6 +111,15 @@ export async function POST(request: NextRequest) {
     })
   } catch (error) {
     console.error('[flashcards/save]', error)
-    return NextResponse.json({ error: 'Failed to save flashcards' }, { status: 500 })
+    if (error instanceof Prisma.PrismaClientKnownRequestError) {
+      if (error.code === 'P2021' || error.code === 'P2022') {
+        return NextResponse.json(
+          { error: 'Flashcards schema not migrated. Run prisma migrate deploy.', errorKey: 'flashcards.schemaMissing' },
+          { status: 503 },
+        )
+      }
+    }
+    const message = error instanceof Error ? error.message : 'Failed to save flashcards'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }

memento-note/app/api/flashcards/stats/route.ts

@@ -13,19 +13,26 @@ export async function GET() {
     const userId = session.user.id
     const now = new Date()
 
+    const oneYearAgo = new Date()
+    oneYearAgo.setFullYear(oneYearAgo.getFullYear() - 1)
+
+    // Récupérer les reviews de la dernière année + toutes les cartes
     const [reviews, allCards] = await Promise.all([
       prisma.flashcardReview.findMany({
-        where: { card: { deck: { userId } } },
+        where: {
+          card: { deck: { userId } },
+          reviewedAt: { gte: oneYearAgo },
+        },
         select: { reviewedAt: true, grade: true },
-        orderBy: { reviewedAt: 'desc' },
-        take: 500,
+        orderBy: { reviewedAt: 'asc' },
       }),
       prisma.flashcard.findMany({
         where: { deck: { userId } },
-        select: { id: true, interval: true, easinessFactor: true, front: true, deck: { select: { name: true } } },
+        select: { id: true, interval: true, easinessFactor: true, front: true, deck: { select: { id: true, name: true } } },
       }),
     ])
 
+    // --- Heatmap (90 derniers jours) ---
     const heatmapMap = new Map<string, number>()
     for (const r of reviews) {
       const day = r.reviewedAt.toISOString().slice(0, 10)
@@ -36,33 +43,62 @@ export async function GET() {
       .sort((a, b) => a.date.localeCompare(b.date))
       .slice(-90)
 
+    // --- Taux de rétention global (cartes maîtrisées / total) ---
     const totalCards = allCards.length
-    const masteredCount = allCards.filter((c) => isCardMastered(c.interval)).length
+    // Maîtrisée = interval >= 7 jours (cohérent avec deck-queries)
+    const masteredCount = allCards.filter((c) => c.interval >= 7).length
     const retentionRate = totalCards > 0 ? Math.round((masteredCount / totalCards) * 100) : 0
 
+    // --- Rétention par semaine : vrai taux de succès (grade >= 3) sur les reviews réelles ---
     const weekMs = 7 * 24 * 60 * 60 * 1000
-    const retentionByWeek: { week: string; rate: number }[] = []
+    const retentionByWeek: { week: string; rate: number; total: number }[] = []
+
     for (let i = 7; i >= 0; i--) {
       const weekEnd = new Date(now.getTime() - i * weekMs)
       const weekStart = new Date(weekEnd.getTime() - weekMs)
-      const cardsAtWeek = allCards.filter((c) => c.interval >= 7 * (8 - i))
-      const masteredAtWeek = cardsAtWeek.filter((c) => isCardMastered(c.interval)).length
-      const rate = cardsAtWeek.length > 0
-        ? Math.round((masteredAtWeek / cardsAtWeek.length) * 100)
-        : retentionRate
+
+      const weekReviews = reviews.filter((r) => {
+        const t = r.reviewedAt.getTime()
+        return t >= weekStart.getTime() && t < weekEnd.getTime()
+      })
+
+      const total = weekReviews.length
+      const successful = weekReviews.filter((r) => r.grade >= 3).length
+      // Si aucune review cette semaine, on laisse null pour distinguer "pas de données" vs "0%"
+      const rate = total > 0 ? Math.round((successful / total) * 100) : -1
+
       retentionByWeek.push({
         week: weekStart.toISOString().slice(0, 10),
         rate,
+        total,
       })
     }
 
+    // --- Streak (jours consécutifs avec au moins 1 review) ---
+    const reviewDays = new Set(reviews.map((r) => r.reviewedAt.toISOString().slice(0, 10)))
+    let streak = 0
+    for (let d = 0; d < 365; d++) {
+      const day = new Date(now)
+      day.setDate(day.getDate() - d)
+      const key = day.toISOString().slice(0, 10)
+      if (reviewDays.has(key)) {
+        streak++
+      } else {
+        // On tolère le jour actuel s'il n'a pas encore eu de review (on commence à hier)
+        if (d === 0) continue
+        break
+      }
+    }
+
+    // --- Cartes difficiles (facteur d'aisance le plus bas) ---
     const difficultCards = [...allCards]
       .sort((a, b) => a.easinessFactor - b.easinessFactor)
-      .slice(0, 5)
+      .slice(0, 10)
       .map((c) => ({
         id: c.id,
-        front: c.front.slice(0, 120),
+        front: c.front.slice(0, 200),
         easinessFactor: c.easinessFactor,
+        deckId: c.deck.id,
         deckName: c.deck.name,
       }))
 
@@ -72,6 +108,9 @@ export async function GET() {
       retentionByWeek,
       difficultCards,
       totalReviews: reviews.length,
+      streak,
+      totalCards,
+      masteredCount,
     })
   } catch (error) {
     console.error('[flashcards/stats]', error)