feat(notes): liens internes, onglet Réseau, living blocks et consentement IA

Rend les liens entre notes visibles et persistants (sync NoteLink au save, auto-save, graphe réseau rafraîchi), ajoute living blocks, Memory Echo, recherche globale, consentement IA explicite et consolide les prototypes design en architectural-grid.

Co-authored-by: Cursor <cursoragent@cursor.com>

memento-note/app/api/ai/echo/connections/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { memoryEchoService } from '@/lib/ai/services/memory-echo.service'
+import { hasUserAiConsent } from '@/lib/consent/server-consent'
 
 /**
  * GET /api/ai/echo/connections?noteId={id}&page={page}&limit={limit}
@@ -17,6 +18,13 @@ export async function GET(req: NextRequest) {
       )
     }
 
+    if (!(await hasUserAiConsent())) {
+      return NextResponse.json(
+        { error: 'ai_consent_required' },
+        { status: 403 }
+      )
+    }
+
     // Get query parameters
     const { searchParams } = new URL(req.url)
     const noteId = searchParams.get('noteId')

memento-note/app/api/ai/echo/fusion/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getChatProvider } from '@/lib/ai/factory'
 import { getSystemConfig } from '@/lib/config'
 import prisma from '@/lib/prisma'
+import { hasUserAiConsent } from '@/lib/consent/server-consent'
 
 /**
  * POST /api/ai/echo/fusion
@@ -19,6 +20,10 @@ export async function POST(req: NextRequest) {
       )
     }
 
+    if (!(await hasUserAiConsent())) {
+      return NextResponse.json({ error: 'ai_consent_required' }, { status: 403 })
+    }
+
     const body = await req.json()
     const { noteIds, prompt } = body
 

memento-note/app/api/ai/echo/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { memoryEchoService } from '@/lib/ai/services/memory-echo.service'
+import { hasUserAiConsent } from '@/lib/consent/server-consent'
 
 /**
  * GET /api/ai/echo
@@ -17,6 +18,14 @@ export async function GET(req: NextRequest) {
       )
     }
 
+    // GDPR AI Consent check
+    if (!(await hasUserAiConsent())) {
+      return NextResponse.json(
+        { error: 'ai_consent_required' },
+        { status: 403 }
+      )
+    }
+
     // Get next insight (respects frequency limits)
     const insight = await memoryEchoService.getNextInsight(session.user.id)