fix(dashboard): audit Second Brain — pistes, erreur briefing, dark, crédits

Corrige loadPaths sans argument après Echo/IA, bannière si briefing en échec,
checklist connexion inversée, skeletons dark, libellé usage = solde unique.

.cursor/hooks/state/continual-learning-index.json

@@ -59,13 +59,14 @@
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ea18d177-228d-4e44-8e79-8957e6f2da39/subagents/375b2e07-202f-4e8e-9e80-718bbdf88005.jsonl": 1781973640324,
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ea18d177-228d-4e44-8e79-8957e6f2da39/subagents/6cba0291-51b3-42d9-939c-2e95d01128f8.jsonl": 1781975383642,
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ea18d177-228d-4e44-8e79-8957e6f2da39/subagents/d6546245-4e3f-47dd-bc3e-39e1af726138.jsonl": 1781973598054,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/ec2b194c-c67e-4089-a434-6daff69ca69d.jsonl": 1782633068860,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/ec2b194c-c67e-4089-a434-6daff69ca69d.jsonl": 1783196585431,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/2bb8ea12-29cb-4456-a5ee-af86d7a427a3.jsonl": 1783196591937,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/372b1e4e-cc60-4117-b3c1-48af0dbc38d9.jsonl": 1782059598659,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/8ad24313-529f-41f7-96b3-dc6314e94c72.jsonl": 1782633223580,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/993325c9-a748-4183-9b2d-866cc0d73338.jsonl": 1782056882673,
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/99e20a50-1e7b-4ed8-931a-5c4c7a65ea4d.jsonl": 1782037965469,
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/e483aeb3-3b38-4f7f-9ad8-d79f362c102d.jsonl": 1782058095940,
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/f0ad176d-04d7-4d9a-82b8-65273acd313a/subagents/96507ccc-6150-4260-a55c-94abd2b57441.jsonl": 1778946698447,
   "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/fb7fd15f-b9ef-490b-a1de-8238ea026e53/fb7fd15f-b9ef-490b-a1de-8238ea026e53.jsonl": 1780001507987,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/fb7fd15f-b9ef-490b-a1de-8238ea026e53/subagents/a5601ff1-7934-4872-acd8-266e416c3680.jsonl": 1779998536313,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/993325c9-a748-4183-9b2d-866cc0d73338.jsonl": 1782056882673,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/e483aeb3-3b38-4f7f-9ad8-d79f362c102d.jsonl": 1782058095940,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/372b1e4e-cc60-4117-b3c1-48af0dbc38d9.jsonl": 1782059598659,
-  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/ec2b194c-c67e-4089-a434-6daff69ca69d/subagents/8ad24313-529f-41f7-96b3-dc6314e94c72.jsonl": 1782633077601
+  "/home/devparsa/.cursor/projects/home-devparsa-dev-Momento/agent-transcripts/fb7fd15f-b9ef-490b-a1de-8238ea026e53/subagents/a5601ff1-7934-4872-acd8-266e416c3680.jsonl": 1779998536313
 }

.cursor/hooks/state/continual-learning.json

@@ -1,8 +1,8 @@
 {
   "version": 1,
-  "lastRunAtMs": 1782633053032,
-  "turnsSinceLastRun": 8,
-  "lastTranscriptMtimeMs": 1782633052959.9294,
-  "lastProcessedGenerationId": "6d690dcb-cba6-47d2-9361-43956be8667e",
+  "lastRunAtMs": 1783196565768,
+  "turnsSinceLastRun": 5,
+  "lastTranscriptMtimeMs": 1783196565691.0437,
+  "lastProcessedGenerationId": "7ac52bd5-5714-460a-9c3b-e4b21907d6d7",
   "trialStartedAtMs": null
 }

.env.docker.example

@@ -78,3 +78,6 @@ TELEGRAM_CHAT_ID=<var>
 # Monitoring
 METRICS_TOKEN=<secret>
 GRAFANA_ADMIN_PASSWORD=<secret>
+# Monitoring LAN : définir GRAFANA_BIND et GRAFANA_URL dans .env.docker (voir deploy)
+# GRAFANA_BIND=127.0.0.1
+# GRAFANA_URL=http://localhost:3002

.gitea/workflows/ci.yaml

@@ -174,12 +174,13 @@ jobs:
           TELEGRAM_CHAT_ID:     ${{ secrets.TELEGRAM_CHAT_ID }}
           METRICS_TOKEN:        ${{ secrets.METRICS_TOKEN }}
           GRAFANA_ADMIN_PASSWORD: ${{ secrets.GRAFANA_ADMIN_PASSWORD }}
+          GRAFANA_BIND: ${{ vars.GRAFANA_BIND }}
+          GRAFANA_URL: ${{ vars.GRAFANA_URL }}
           MCP_API_KEY:          ${{ secrets.MCP_API_KEY }}
         run: |
           ENV_FILE="/opt/memento/.env.docker"
           touch "$ENV_FILE"
           sed -i 's/\r$//' "$ENV_FILE"
-          echo "## AUTO-MANAGED BY CI — do not edit manually ##" > "$ENV_FILE"
           upsert() {
             local key="$1" val="$2"
             [ -z "$val" ] && return
@@ -233,19 +234,11 @@ jobs:
           upsert TELEGRAM_CHAT_ID       "$TELEGRAM_CHAT_ID"
           upsert METRICS_TOKEN          "$METRICS_TOKEN"
           upsert GRAFANA_ADMIN_PASSWORD "$GRAFANA_ADMIN_PASSWORD"
+          upsert GRAFANA_BIND "$GRAFANA_BIND"
+          upsert GRAFANA_URL "$GRAFANA_URL"
           upsert MCP_API_KEY            "$MCP_API_KEY"
           # Write metrics token file for Prometheus (same secret)
           [ -n "$METRICS_TOKEN" ] && echo "$METRICS_TOKEN" > /opt/memento/monitoring/metrics-token && chmod 600 /opt/memento/monitoring/metrics-token || true
-          # Sanity-check: abort if a critical var is missing
-          for required in NEXTAUTH_URL NEXTAUTH_SECRET AUTH_GOOGLE_ID AUTH_GOOGLE_SECRET \
-                          AI_PROVIDER_TAGS AI_MODEL_TAGS AI_PROVIDER_EMBEDDING AI_MODEL_EMBEDDING \
-                          AI_PROVIDER_CHAT AI_MODEL_CHAT MCP_SERVER_URL; do
-            grep -q "^${required}=" "$ENV_FILE" || {
-              echo "ERROR: required var $required missing in $ENV_FILE — check Gitea vars/secrets"
-              exit 1
-            }
-          done
-          echo "env.docker sanity-check passed ($(wc -l < "$ENV_FILE") lines)"
 
       - name: Deploy on 192.168.1.190
         env:

.gitea/workflows/deploy.yaml

@@ -63,12 +63,13 @@ jobs:
           TELEGRAM_CHAT_ID:     ${{ secrets.TELEGRAM_CHAT_ID }}
           METRICS_TOKEN:        ${{ secrets.METRICS_TOKEN }}
           GRAFANA_ADMIN_PASSWORD: ${{ secrets.GRAFANA_ADMIN_PASSWORD }}
+          GRAFANA_BIND: ${{ vars.GRAFANA_BIND }}
+          GRAFANA_URL: ${{ vars.GRAFANA_URL }}
           MCP_API_KEY:          ${{ secrets.MCP_API_KEY }}
         run: |
           ENV_FILE="/opt/memento/.env.docker"
           touch "$ENV_FILE"
           sed -i 's/\r$//' "$ENV_FILE"
-          echo "## AUTO-MANAGED BY CI — do not edit manually ##" > "$ENV_FILE"
           upsert() {
             local key="$1" val="$2"
             [ -z "$val" ] && return
@@ -122,17 +123,10 @@ jobs:
           upsert TELEGRAM_CHAT_ID       "$TELEGRAM_CHAT_ID"
           upsert METRICS_TOKEN          "$METRICS_TOKEN"
           upsert GRAFANA_ADMIN_PASSWORD "$GRAFANA_ADMIN_PASSWORD"
+          upsert GRAFANA_BIND "$GRAFANA_BIND"
+          upsert GRAFANA_URL "$GRAFANA_URL"
           upsert MCP_API_KEY            "$MCP_API_KEY"
           [ -n "$METRICS_TOKEN" ] && echo "$METRICS_TOKEN" > /opt/memento/monitoring/metrics-token && chmod 600 /opt/memento/monitoring/metrics-token || true
-          # Sanity-check: abort if a critical var is missing
-          for required in NEXTAUTH_URL NEXTAUTH_SECRET AUTH_GOOGLE_ID AUTH_GOOGLE_SECRET \
-                          AI_PROVIDER_TAGS AI_MODEL_TAGS AI_PROVIDER_EMBEDDING AI_MODEL_EMBEDDING \
-                          AI_PROVIDER_CHAT AI_MODEL_CHAT MCP_SERVER_URL; do
-            grep -q "^${required}=" "$ENV_FILE" || {
-              echo "ERROR: required var $required missing in $ENV_FILE — check Gitea vars/secrets"
-              exit 1
-            }
-          done
           echo "env.docker sanity-check passed ($(wc -l < "$ENV_FILE") lines)"
 
       - name: Deploy (full build, no CI artifact)

AGENTS.md

@@ -2,18 +2,18 @@
 
 ## Learned User Preferences
 
-- Préfère les échanges en français, avec des explications détaillées et claires (éviter le jargon flou).
-- Interface : tout libellé via i18n dans les 15 fichiers `memento-note/locales/*.json` (FR et EN comme références de contenu) ; éviter le texte en dur ; traductions **contextuelles** (sens produit, pas mot à mot — ex. « connecter votre propre fournisseur ») ; libellés FR **lisibles** (éviter jargon non expliqué : « wiki », « embed », etc.) et **aide contextuelle** où l'UX l'exige ; lors d'une traduction complète, mettre à jour toutes les locales concernées ; si l'utilisateur demande seulement les **clés i18n**, ajouter les clés (souvent EN/FR) sans remplir les 15 locales — il traduit souvent avec un autre modèle.
+- Préfère les échanges en français, avec des explications détaillées et claires (éviter le jargon flou) ; **nom produit** : **Memento** (jamais « Momento ») — libellés, metadata, pages publiques, docs.
+- Interface : tout libellé via i18n dans les 15 fichiers `memento-note/locales/*.json` (FR et EN comme références de contenu) ; éviter le texte en dur ; traductions **contextuelles** (sens produit, pas mot à mot — ex. « connecter votre propre fournisseur ») ; libellés FR **lisibles** (éviter jargon non expliqué : « wiki », « embed », etc.) et **aide contextuelle** où l'UX l'exige ; lors d'une traduction complète, mettre à jour toutes les locales concernées ; si l'utilisateur demande seulement les **clés i18n**, ajouter les clés (souvent EN/FR) sans remplir les 15 locales — il traduit souvent avec un autre modèle ; **insights Memory Echo** (texte généré/stocké) : langue utilisateur à la génération + fallback i18n à l'affichage (`memoryEcho.defaultInsight`) — jamais d'anglais en dur quand l'UI est FR.
 - Base de données : **INTERDIT TOTALEMENT** de lancer `prisma db push --force-reset`, `prisma migrate reset`, `DROP TABLE`, `TRUNCATE`, `pg_restore` avec clean, ou TOUTE commande qui vide/supprime des données — MÊME SI l'utilisateur est d'accord — sans avoir d'abord : (1) dumpé la base avec `bash /home/devparsa/dev/Memento/dump-db.sh`, (2) vérifié le dump fait au moins 1Mo, (3) obtenu un "OUI" explicite de l'utilisateur. **4 incidents de perte de données documentés (14/05, 15/05 x2, 16/05). NE JAMAIS REFAIRE ÇA.**
-- Design produit : migration depuis `architectural-grid1` (base) et `architectural-grid` (prototype UI courant) ; **consulter le prototype avant toute implémentation UI** ; logique liste/carte puis contenu au clic ; parité actions liste/carte (menus « … », déplacer, génération SVG, etc.) ; contraste éditeur clair / sidebar sombre ; retirer thèmes obsolètes ; **pas de refresh/revalidation complets inutiles** (aligné prototype — mutations optimistes, pas de `revalidatePath` systématique ni resync depuis `initialNotes`) ; **Memory Echo en section inline dans l'éditeur** (pas l'ancienne modale) — similarité sur contenu **représentatif** (pas de troncature arbitraire type 200/800 car.) ; **recherche (sidebar / résultats, ex. flux « ouvrir la note ») et navigation liste des notes** (modes affichage, icônes vs initiales…) : suivre **`SearchModal` et les patterns actuels** dans `architectural-grid`, pas une approximation ou un ancien flux ; **sidebar rail** (`sidebar.tsx`) : une seule icône active ; `activeView` synchronisé avec pathname et query (`/insights`, `/revision`, `/home?reminders=1`) ; panneau latéral contextuel par route (pas la liste carnets sur `/insights` ou Rappels) ; **`/insights` (insights sémantiques)** : suivre **`InsightsView.tsx` + graphe réseau associé dans le prototype** (ex. composition type `NetworkGraph.tsx`) ; **distincte de `/graph`** ; ne pas substituer par une UX « géométrique » décorative ou un regroupement par carnet hors spec prototype ; lorsque données clusters en retard ou partiellement périmées, **montrer l’état dégradé exploitable plutôt qu’une page vide** ; si l'utilisateur hésite entre variantes UX, **trancher pour le design prototype** plutôt que multiplier les toggles.
+- Design produit : migration depuis `architectural-grid1` (base) et `architectural-grid` (prototype UI courant) ; **consulter le prototype avant toute implémentation UI** ; logique liste/carte puis contenu au clic ; parité actions liste/carte (menus « … », déplacer, génération SVG, etc.) ; contraste éditeur clair / sidebar sombre ; retirer thèmes obsolètes ; **pas de refresh/revalidation complets inutiles** (aligné prototype — mutations optimistes, pas de `revalidatePath` systématique ni resync depuis `initialNotes`) ; **Memory Echo en section inline dans l'éditeur** (pas l'ancienne modale) — similarité sur contenu **représentatif** (pas de troncature arbitraire type 200/800 car.) ; **recherche (sidebar / résultats, ex. flux « ouvrir la note ») et navigation liste des notes** (modes affichage, icônes vs initiales…) : suivre **`SearchModal` et les patterns actuels** dans `architectural-grid`, pas une approximation ou un ancien flux ; **sidebar rail** (`sidebar.tsx`) : une seule icône active ; **largeur sidebar** (`components/sidebar.tsx`) — redimensionnement utilisateur par poignée sur le bord droit (desktop `md+`, 280–560px, persisté `localStorage` `memento-sidebar-width`) ; défaut responsive `w-80` puis plus large en `xl`/`2xl` si aucune valeur stockée ; **hauteur zone carnets** ajustable via poignée horizontale (`memento-sidebar-notebooks-height`, min 120px) ; fallback `Suspense` de `app/(main)/layout.tsx` **aligné** sur les largeurs par défaut (rail fixe 54px) ; **pas de bouton « Note du jour »** dans la sidebar (retiré volontairement) ; **dashboard Second Brain** (`/home`, `dashboard-view.tsx`) : vue d'ensemble **interactive** (pas dashboard statique/mort) — layout **v5** configurable (catalogue ~15 widgets, persisté `/api/dashboard/layout`) ; widget **« Prochaines pistes »** (`next-paths`) = recommandations actionnables depuis la dernière note éditée (fast paths briefing puis enrichissement async `/api/briefing/paths`) ; widget **« Revue quotidienne »** = **checklist matinale interactive** (inbox, découvertes IA, connexion, flashcards) — **pas** une revue automatique de contenu ; cartes cliquables, section Memory Echo « L'IA a trouvé » exploitable (pas vide après 1ère visite), consentement/provider IA + **quotas** vérifiés sur chaque action IA (dashboard et agents) ; chaque widget : **aide contextuelle « ? » i18n** ; couleurs alignées sur le **thème settings** ; icônes **Lucide** (pas emojis système type 🎯) ; `MindMapCard` remplace l'ancien `MiniResonanceGraph` D3 (graphe décoratif qui débordait) ; navigation sidebar alignée sur `/home` ; `activeView` synchronisé avec pathname et query (`/insights`, `/revision`, `/home?reminders=1`) ; panneau latéral contextuel par route (pas la liste carnets sur `/insights` ou Rappels) ; **`/insights` (insights sémantiques)** : suivre **`InsightsView.tsx` + graphe réseau associé dans le prototype** (ex. composition type `NetworkGraph.tsx`) ; **distincte de `/graph`** ; ne pas substituer par une UX « géométrique » décorative ou un regroupement par carnet hors spec prototype ; lorsque données clusters en retard ou partiellement périmées, **montrer l’état dégradé exploitable plutôt qu’une page vide** ; liens/ponts proposés : **pertinence sémantique réelle** (rejeter associations absurdes cross-domaine) ; **pas d'IDs techniques** type « cluster 15 » exposés à l'utilisateur ; bouton Menu immersif `/insights` : **cacher la sidebar ET agrandir le contenu principal** (pas de bandeau beige vide — attention `twMerge` qui peut faire perdre `fixed` au profit de `relative`) ; si l'utilisateur hésite entre variantes UX, **trancher pour le design prototype** plutôt que multiplier les toggles ; **landing page** (`components/landing-page.tsx`) : style marketing sombre/premium type **x.ai** (pas de fond blanc plat) ; mettre en avant **Second Brain** ; **multilinguisme** avec sélecteur de langue (icône globe — ne pas confondre avec navigation back) ; harmonie dark mode (ex. zone notifications).
 - Locale persane : dates en calendrier iranien (conversion), chiffres persans, et vérification RTL/positionnement global (app **et** extension Web Clipper) ; **Memory Echo** et recherche sémantique doivent fonctionner en persan (RTL, embeddings — pas de contournement « EN only ») ; attention à ne pas confondre un nom de carnet (ex. « Persan ») avec le libellé de langue.
 - Flux Excalidraw / diagrammes générés : accès via notification en plus d'une simple redirection ; priorité à la mise en page et au texte contenu dans les formes ; proposer des modes visuels (ex. coloré vs plus austère) tout en visant un rendu proche du style Excalidraw (polices, look).
 - **Interdiction d'écrire des tests** sauf demande explicite ; en CI, seul `npm run test:unit` (`tests/unit/**`) — pas `tests/migration/` ; ne jamais générer de code superflu.
-- Déploiement : privilégier le chemin rapide (artifact Next.js en CI + `Dockerfile.prebuilt`) ; CI/CD très robuste (pas d'image Docker obsolète en prod, pas de migrations/schéma DB via le workflow deploy) ; éviter les rebuild Docker complets inutiles (~15 min par itération) ; **ne pas pousser un déploiement quand des features clés sont inachevées** ; ne pas insister sur le déploiement tant que le produit n'est pas fini ou meilleur. **CI/CD Gitea spécifique** : (1) `actions/upload-artifact` et `download-artifact` doivent utiliser **@v3** (pas @v4 — non supporté par Gitea, erreur `GHESNotSupportedError`) ; (2) `Dockerfile.socket.prebuilt` doit utiliser `--legacy-peer-deps` dans `npm install` (conflit TipTap 3.22.5 vs 3.23.6) ; (3) le serveur de prod (192.168.1.190) **ne peut pas pull Docker Hub** (DNS cassé) — le build Docker complet échoue, seul le chemin prebuilt artifact fonctionne ; (4) `docker-entrypoint.sh` applique les migrations Prisma **avant** de démarrer le serveur Next.js (ordre correct) ; (5) rollback d'urgence : `docker tag memento-memento-note:rollback memento-memento-note:latest && docker compose up -d --force-recreate memento-note` ; **TRAVAILLER SUR UNE BRANCHE** pendant le dev, ne push sur `main` que quand le code est testé et fonctionnel — chaque push sur `main` déclenche un déploiement automatique en production.
-- Authentification : priorité à l'inscription/connexion via **Google OAuth** (plutôt qu'un compte email/mot de passe) ; exiger une vraie déconnexion (invalidation session/cookies — pas de reconnexion implicite, y compris en navigation privée).
-- Priorité absolue à la qualité UX, même si l'implémentation est complexe (« je m'en fous si c'est complexe ») ; **ne jamais affirmer qu'un correctif ou une feature est fait sans vérification réelle** (app, prototype `architectural-grid`, ou test), **notamment navigation recherche/liste notes et vue `/insights` vs fichiers prototype** — l'utilisateur sanctionne fermement les fausses déclarations ; **ouverture note liée depuis l'éditeur** (ex. bloc live « Ouvrir ») : **split peek inline** animé (`lib/note-peek-sync.ts`, `note-editor-split-peek.tsx` — éditeur courant à **gauche**, note liée en lecture seule à **droite** en LTR ; **inversé en RTL** `fa`/`ar`), **pas nouvel onglet** ; **ne jamais annuler du code non commité** (`git checkout`, reset fichier) **sans demande explicite** (perte de travail documentée, ex. drag handle éditeur) ; **ne jamais remettre du code que l'utilisateur a explicitement retiré sans demander d'abord** (ex. `reserveUsageOrThrow` retiré intentionnellement de `organize-notebook.ts` — agent l'a remis sans demander → user mécontent) ; **correction i18n ou spec doc** : **ne pas refondre logique/UI** hors scope (ex. US-4 `structuredViewBlock` — garder le dual-mode base locale + lien carnet, pas de suppression du mode local) ; en frustration ou pour déléguer, **prévoir des prompts / briefs d'implémentation détaillés** (autre modèle ou dev), en plus des briefs outil de design.
-- Livraison : **une user story à la fois**, tester et valider avec l'utilisateur avant la suivante (pas d'auto-validation ni d'enchaînement de code non demandé) ; suivi dans `docs/user-stories.md` ; briefs pour outil de design externe sur demande.
-- **Facturation & quotas IA** : limites mensuelles, tiers (BASIC/PRO/BUSINESS/ENTERPRISE) et Price IDs Stripe via **Admin > Facturation & quotas** (`/admin/billing`) — pas via `.env` pour le métier ; secrets Stripe (`STRIPE_SECRET_KEY`, webhook) restent en env serveur ; doc `memento-note/docs/admin-billing-quotas-guide.md`.
+- Déploiement : privilégier le chemin rapide (artifact Next.js en CI + `Dockerfile.prebuilt`) ; CI/CD très robuste (pas d'image Docker obsolète en prod, pas de migrations/schéma DB via le workflow deploy) ; éviter les rebuild Docker complets inutiles (~15 min par itération) ; **ne pas pousser un déploiement quand des features clés sont inachevées** ; ne pas insister sur le déploiement tant que le produit n'est pas fini ou meilleur ; **ne jamais hardcoder d'IP/URL** dans le repo ou les défauts CI — uniquement variables d'env (ex. `GRAFANA_BIND`, `GRAFANA_URL`) ; la config runtime reste sur le serveur dans `.env.docker`. **Machines** : agent/dev = **192.168.1.83** (devSanbox) ; prod = **192.168.1.190** (`/opt/memento`) — **ne jamais confondre** les deux au diagnostic services. **CI/CD Gitea spécifique** : (1) CI `ubuntu-24.04` = lint + tests + build (validation) ; deploy `docker-host` = build sur le serveur → `/tmp/web-artifact.tgz` → `deploy-prod.sh` — **sans** upload/download-artifact inter-runners (stockage Gitea instable ; si artifacts utilisés, **@v3** uniquement — @v4 → `GHESNotSupportedError`) ; (2) `Dockerfile.socket.prebuilt` doit utiliser `--legacy-peer-deps` dans `npm install` (conflit TipTap 3.22.5 vs 3.23.6) ; (3) le serveur de prod (192.168.1.190) **ne peut pas pull Docker Hub** (DNS cassé) — le build Docker complet échoue, seul le chemin prebuilt artifact fonctionne ; (4) `docker-entrypoint.sh` applique les migrations Prisma **avant** de démarrer le serveur Next.js (ordre correct) ; (5) rollback d'urgence : `docker tag memento-memento-note:rollback memento-memento-note:latest && docker compose up -d --force-recreate memento-note` ; (6) `scripts/deploy-prod.sh` charge `/opt/memento/.env.docker` via un **parseur robuste ligne-par-ligne** (jamais `source` — crash `unexpected EOF` sur guillemet non fermé) et teste Postgres avec `pg_isready` + credentials **du conteneur** (`$POSTGRES_USER` interne) ; (7) lint CI = `eslint --max-warnings 9999` : les **warnings ne bloquent pas**, seules les **erreurs** bloquent (ex. `no-html-link-for-pages` → `<Link>` obligatoire pour la navigation interne, pas `<a href="/">`) ; **TRAVAILLER SUR UNE BRANCHE** pendant le dev, ne push sur `main` que quand le code est testé et fonctionnel — **avant push `main`** : exécuter localement `npm run lint`, `npm run test:unit`, `npm run build` (même enchaînement que CI) ; chaque push sur `main` déclenche un déploiement automatique en production.
+- Authentification : priorité à l'inscription/connexion via **Google OAuth** (plutôt qu'un compte email/mot de passe) ; exiger une vraie déconnexion (invalidation session/cookies — pas de reconnexion implicite, y compris en navigation privée) ; prod : `AUTH_GOOGLE_ID`/`AUTH_GOOGLE_SECRET` dans `/opt/memento/.env.docker` **et** variables/secrets Gitea Actions (workflow deploy n'écrit pas les valeurs vides) — absence → `invalid_client` ; redirect URI exacte `https://memento-note.com/api/auth/callback/google` ; config via **Google Auth Platform** (Branding → Audience **In production**, pas Testing → Clients Web) ; `ALLOW_REGISTRATION=true` requis pour inscription email (env ou `SystemConfig` en base — la DB peut primer sur l'env).
+- Priorité absolue à la qualité UX, même si l'implémentation est complexe (« je m'en fous si c'est complexe ») ; préférer les **solutions long terme** aux rustines ; si l'utilisateur demande explicitement d'**analyser sans coder**, expliquer d'abord et **ne pas modifier le code** tant qu'il n'a pas validé ; pour les **tâches ops** (config OAuth prod, serveur), préfère un **guidage interactif étape par étape** plutôt qu'un bloc d'instructions monolithique ; **ne jamais affirmer qu'un correctif ou une feature est fait sans vérification réelle** (app, prototype `architectural-grid`, ou test), **notamment navigation recherche/liste notes et vue `/insights` vs fichiers prototype** — l'utilisateur sanctionne fermement les fausses déclarations ; **ouverture note liée depuis l'éditeur** (ex. bloc live « Ouvrir ») : **split peek inline** animé (`lib/note-peek-sync.ts`, `note-editor-split-peek.tsx` — éditeur courant à **gauche**, note liée en lecture seule à **droite** en LTR ; **inversé en RTL** `fa`/`ar`), **pas nouvel onglet** ; **ne jamais annuler du code non commité** (`git checkout`, reset fichier) **sans demande explicite** (perte de travail documentée, ex. drag handle éditeur) ; **ne jamais remettre du code que l'utilisateur a explicitement retiré sans demander d'abord** (ex. `reserveUsageOrThrow` retiré intentionnellement de `organize-notebook.ts` — agent l'a remis sans demander → user mécontent) ; **correction i18n ou spec doc** : **ne pas refondre logique/UI** hors scope (ex. US-4 `structuredViewBlock` — garder le dual-mode base locale + lien carnet, pas de suppression du mode local) ; en frustration ou pour déléguer, **prévoir des prompts / briefs d'implémentation détaillés** (autre modèle ou dev), en plus des briefs outil de design.
+- Livraison : **une user story à la fois**, tester et valider avec l'utilisateur avant la suivante (pas d'auto-validation ni d'enchaînement de code non demandé) ; suivi dans `docs/user-stories.md` ; briefs pour outil de design externe sur demande ; **avant de développer une story, vérifier d'abord dans le code si la feature existe déjà** — les docs de stories (`docs/story-nextgen-editor.md`, `docs/user-stories.md`) sont **souvent périmés** (features livrées mais marquées « à faire ») ; **dashboard Second Brain** : même rythme — **une feature à la fois**, validation explicite avant la suivante.
+- **Facturation & quotas IA** : limites mensuelles, tiers (BASIC/PRO/BUSINESS/ENTERPRISE) et Price IDs Stripe via **Admin > Facturation & quotas** (`/admin/billing`) — pas via `.env` pour le métier ; secrets Stripe (`STRIPE_SECRET_KEY`, webhook) restent en env serveur ; doc `memento-note/docs/admin-billing-quotas-guide.md` ; **tier BASIC sans accès MCP** ; chaque usage IA (dashboard, agents, MCP si autorisé, etc.) doit **décompter le quota** — mécanisme = **réservation atomique upfront** (Redis/Postgres) **avant** l'appel IA, sans rollback si l'appel échoue ensuite ; BYOK peut contourner selon config — ne pas affirmer un déploiement prod sans vérif réelle (ex. travail MCP/quotas encore local).
 
 ## Learned Workspace Facts
 
@@ -23,9 +23,9 @@
 - Workflow BMad : stories sous `docs/` (ex. `3-4-host-pays-session-logic.md`), suivi sprint dans `docs/sprint-status.yaml` et stories courantes dans `docs/user-stories.md` ; skills sous `.claude/skills/bmad-*` ; `_bmad-output/planning-artifacts` souvent vide — planification de référence dans `docs/` ; préférer **une user story par feature** (pas de stories groupées).
 - PostgreSQL Docker (`memento-postgres`) port 5433 ; Redis (`memento-redis`) port 6379 ; règles Prisma/DB dans `CLAUDE.md`.
 - **Admin facturation** : page `/admin/billing` (`billing-admin-client.tsx`, actions `admin-billing.ts`) — quotas par feature IA et config Stripe métier en base, effet ~60 s ; guide `memento-note/docs/admin-billing-quotas-guide.md`.
-- Production : dépôt `/opt/memento` sur `192.168.1.190`, conteneur `memento-note` sur le port **3000**, URL publique **https://memento-note.com** (nginx + Cloudflare ; ancien domaine note.parsanet.org) ; `NEXTAUTH_URL` aligné sur ce domaine ; email sortant via **Resend** (`SMTP_FROM` ex. `noreply@memento-note.com`, domaine vérifié sur resend.com) ; deploy (`deploy.yaml` / `deploy-prod.sh`) **sans toucher Postgres** (pas de `postgresql-client`, pas de migrations auto en prod).
-- CI/CD Gitea : `.gitea/workflows/ci.yaml` — CI sur `ubuntu-24.04`, deploy sur runner **`docker-host`** (sur le serveur) ; deploy manuel via `.gitea/workflows/deploy.yaml` ou `bash scripts/deploy-prod.sh`.
+- **Hosts** : machine agent/dev (**192.168.1.83**, Vibe/annotations locales) ≠ prod (**192.168.1.190**, dépôt `/opt/memento`) — ne jamais diagnostiquer l'un pour l'autre. Production : conteneur `memento-note` port **3000**, URL publique **https://memento-note.com** (nginx + Cloudflare ; ancien domaine note.parsanet.org) ; `NEXTAUTH_URL` aligné sur ce domaine ; auth prod requiert `AUTH_GOOGLE_ID`/`AUTH_GOOGLE_SECRET` dans `.env.docker` (sinon OAuth `invalid_client`) et `ALLOW_REGISTRATION=true` pour l'inscription email ; email sortant via **Resend** (`SMTP_FROM` ex. `noreply@memento-note.com`, domaine vérifié sur resend.com) ; monitoring Grafana via `GRAFANA_BIND` / `GRAFANA_URL` dans `.env.docker` (pas d'IP en dur dans le compose) ; deploy (`deploy.yaml` / `deploy-prod.sh`) **sans toucher Postgres** (pas de `postgresql-client`, pas de migrations auto en prod).
+- CI/CD Gitea : `.gitea/workflows/ci.yaml` — CI sur `ubuntu-24.04` (lint + tests + build validation), deploy sur runner **`docker-host`** (build local `/tmp/web-artifact.tgz`, sans artifacts inter-runners) ; deploy manuel via `.gitea/workflows/deploy.yaml` ou `bash scripts/deploy-prod.sh`.
 - Migrations prebuilt + vérif deploy : `docker compose exec memento-note node ./node_modules/prisma/build/index.js migrate deploy` (pas `npx prisma`) ; helper `scripts/migrate-docker.sh` ; `GET /api/build-info` (SHA Git) ; comparer `127.0.0.1:3000` et domaine Cloudflare — purger cache si versions divergent ; 403 `/api/manifest` côté domaine = souvent Cloudflare.
-- Éditeur riche : `rich-text-editor.tsx` — `immediatelyRender: false` ; activer **`shouldRerenderOnTransaction: false`** (quick win perf TipTap 2.5) ; **drag handle / menu bloc** via **`@tiptap/extension-drag-handle-react`** (spec officielle — pas de double plugin `DragHandleExtension` + composant React, pas de repositionnement maison) ; poignée dans **colonne gutter fixe** du wrapper (padding + `getReferencedVirtualElement`), pas sur le bord des listes/numéros ; CSS : **pas `opacity:0` sur `.drag-handle`** (visibilité gérée par le plugin) ; config/callbacks **stables hors composant** ; fondation blocs : `tiptap-unique-id-extension.ts` / **`data-id` persisté à la sauvegarde** (références « Copier la référence ») ; **Smart Paste** : `lib/editor/smart-paste-extension.ts` ; **peek split** note source : `lib/note-peek-sync.ts` + `note-editor-split-peek.tsx` ; **US-4 `structuredViewBlock`** (`tiptap-structured-view-block-extension.tsx`, `structured-view-block-embed.tsx`) : **dual-mode** — base locale autonome par défaut (`/database`, `/vue`, `isLocal: true`) + option « Lier à un carnet » (Structured Views) ; i18n `structuredViewBlock.*` ; **rejeté** : ancien `databaseBlock` « Auteurs & Œuvres » et spec embed-only `docs/story-nextgen-editor-us4-redesign.md` ; epic active `docs/story-nextgen-editor.md` — priorité **PERF > NEXTGEN > UX > MOBILE > MARKDOWN**.
+- Éditeur riche : `rich-text-editor.tsx` — `immediatelyRender: false` ; activer **`shouldRerenderOnTransaction: false`** (quick win perf TipTap 2.5) ; **drag handle / menu bloc** via **`@tiptap/extension-drag-handle-react`** (spec officielle — pas de double plugin `DragHandleExtension` + composant React, pas de repositionnement maison) ; poignée dans **colonne gutter fixe** du wrapper (padding + `getReferencedVirtualElement`), pas sur le bord des listes/numéros ; CSS : **pas `opacity:0` sur `.drag-handle`** (visibilité gérée par le plugin) ; config/callbacks **stables hors composant** ; fondation blocs : `tiptap-unique-id-extension.ts` / **`data-id` persisté à la sauvegarde** (références « Copier la référence ») ; **Smart Paste** : `lib/editor/smart-paste-extension.ts` ; **peek split** note source : `lib/note-peek-sync.ts` + `note-editor-split-peek.tsx` ; **conversion markdown → texte enrichi** : un **seul** convertisseur `lib/markdown-to-html.ts` (`markdownToHtml`, gfm+breaks) + une **action atomique** `convertToRichText(html)` dans `note-editor-context.tsx` (applique le HTML **immédiatement** via `setContentImmediate` — pas le `setContent` débouncé 800ms — et bascule `isMarkdown=false`) ; toolbar (`handleConvertToRichtext`) **et** chat IA contextuel (`contextual-ai-chat.tsx`, action `toRichText` → `/api/ai/convert-markdown`) passent par cette action unique (ne pas dupliquer la conversion ni oublier de basculer `isMarkdown`) ; **US-4 `structuredViewBlock`** (`tiptap-structured-view-block-extension.tsx`, `structured-view-block-embed.tsx`) : **dual-mode** — base locale autonome par défaut (`/database`, `/vue`, `isLocal: true`) + option « Lier à un carnet » (Structured Views) ; i18n `structuredViewBlock.*` ; **rejeté** : ancien `databaseBlock` « Auteurs & Œuvres » et spec embed-only `docs/story-nextgen-editor-us4-redesign.md` ; epic active `docs/story-nextgen-editor.md` — priorité **PERF > NEXTGEN > UX > MOBILE > MARKDOWN**.
 - Sync mutations notes entre composants : `memento-note/lib/note-change-sync.ts` (`emitNoteChange`, événement `NOTE_CHANGE_EVENT`) ; tracking quotas IA : événement `ai-usage-changed` (window) — doit être dispatché depuis **tous** les points d'appel IA (recherche sémantique, auto-tag, auto-title, chat, reformulation, analyse carnet, etc.) ; UI quotas : `usage-meter.tsx` (polling 5s + écoute événement).
-- Roadmap / écart prototype vs prod : Web Clipper — **`ClipperSimulator.tsx` = référence design uniquement** (pas de simulateur en prod) ; extension **`memento-note/extension/`** v0.3 **Side Panel** (clip page/sélection/lien ; popup Chrome se ferme au clic page — Side Panel pour la sélection) ; i18n extension **15 langues** (`_locales/`, détection locale navigateur ; script `extension/i18n/generate-translations.cjs`) ; **`host_permissions`** incl. LAN ; **URL serveur configurable en dev**, adresse prod figée en release ; cookies/session alignés avec l'instance cible ; **Flashcards IA SM-2 livrées** : `/revision`, `/api/flashcards/*`, génération depuis l'éditeur (GraduationCap) — réf. prototype `RevisionView.tsx` ; **Structured Views partiellement livrées** : schéma par carnet, Table/Kanban, champs partagés et valeurs par note (`/home` + toolbar carnet) — **suivi de tâches par carnet via Kanban structuré** (pas de vue agrégée Notes/Tâches sur la home ; cases à cocher inline dans les notes) ; **Living Blocks partiellement livrées** : `data-id`, Smart Paste, nœud `liveBlock`, détacher/supprimer, peek split — **US-NEXTGEN-EDITOR** en cours (`docs/story-nextgen-editor.md`, **US-TEMPORAL reporté**) ; encore en gap : transclusion bidirectionnelle complète, graphe knowledge enrichi (`GraphKnowledgeMap.tsx`), **insights sémantiques** (`InsightsView.tsx`, **`/insights` ≠ `/graph`**) ; publication **Chrome Web Store** : icônes 16/48/128, privacy policy, `host_permissions` prod restreints vs build dev ; **Wizards** : `NotebookOrganizerDialog` (tags/doublons) branché via bouton "Tags IA" dans `home-client.tsx` — `StructuredViewsWizard` encore **orphelin** (pas de point d'entrée UI) ; **Publication web** (`note-editor-toolbar.tsx`) : deux modes — simple (copie directe) + IA (2-3 templates, reformulation adaptée au contenu, KaTeX pour équations, images incluses) — quota IA consommé uniquement sur publication IA ; **champs DB publication** sur modèle `Note` : `publicSlug` (pas `publishedSlug`), `publishedContent` (pas `publishedHtml`) — `publishMode` est paramètre API uniquement (`mode: 'simple' | 'ai'`), **pas** un champ en base.
+- Roadmap / écart prototype vs prod : Web Clipper — **`ClipperSimulator.tsx` = référence design uniquement** (pas de simulateur en prod) ; extension **`memento-note/extension/`** v0.3 **Side Panel** (clip page/sélection/lien ; popup Chrome se ferme au clic page — Side Panel pour la sélection) ; i18n extension **15 langues** (`_locales/`, détection locale navigateur ; script `extension/i18n/generate-translations.cjs`) ; **`host_permissions`** incl. LAN ; **URL serveur configurable en dev**, adresse prod figée en release ; cookies/session alignés avec l'instance cible ; **Flashcards IA SM-2 livrées** : `/revision`, `/api/flashcards/*`, génération depuis l'éditeur (GraduationCap) — réf. prototype `RevisionView.tsx` ; **Structured Views partiellement livrées** : schéma par carnet, Table/Kanban, champs partagés et valeurs par note (`/home` + toolbar carnet) — **suivi de tâches par carnet via Kanban structuré** (pas de vue agrégée Notes/Tâches sur la home ; cases à cocher inline dans les notes) ; **Éditeur Next-Gen livré** (doc `docs/story-nextgen-editor.md` **périmé** — vérifier le code) : US-1 poignée gutter unique (`editor-block-drag-handle.tsx` + `lib/editor/global-drag-handle-extension.ts`, extension Novel `tiptap-extension-global-drag-handle`), US-2 menu action bloc (`block-action-menu.tsx`), US-3 Smart Paste transclusion (`smart-paste-extension.ts` + `smart-paste-menu.tsx`), US-4 database inline (`structuredViewBlock`), plus `data-id` / `liveBlock` / peek split ; **`/insights` livré** : `app/(main)/insights/page.tsx` + `network-graph.tsx` (clusters sémantiques, bridge notes ; **≠ `/graph`**) ; **US-TEMPORAL reporté** ; encore en gap : transclusion bidirectionnelle complète, graphe knowledge enrichi (`GraphKnowledgeMap.tsx`) ; publication **Chrome Web Store** : icônes 16/48/128, privacy policy, `host_permissions` prod restreints vs build dev ; **Wizards** : `NotebookOrganizerDialog` (tags/doublons) branché via bouton "Tags IA" dans `home-client.tsx` — `StructuredViewsWizard` encore **orphelin** (pas de point d'entrée UI) ; **Publication web** (`note-editor-toolbar.tsx`) : deux modes — simple (copie directe) + IA (2-3 templates **visuellement distincts**, reformulation/mise en page **adaptée au contenu** — exercices, toggles, callouts — **images incluses**, KaTeX pour équations) — quota IA consommé uniquement sur publication IA ; l'utilisateur rejette les rendus « copie du texte » / mise en page nulle ; **champs DB publication** sur modèle `Note` : `publicSlug` (pas `publishedSlug`), `publishedContent` (pas `publishedHtml`) — `publishMode` est paramètre API uniquement (`mode: 'simple' | 'ai'`), **pas** un champ en base ; **Second Brain dashboard** (`/home`, `dashboard-view.tsx`) **livré** : layout v5 configurable (~15 widgets, `/api/dashboard/layout`), briefing agrégé (`/api/briefing`), pistes fast+enrich (`/api/briefing/paths`, `paths-fast.ts`), suggestions agents, scan Gmail (`GmailScanHistory`), navigation sidebar `/home` ; bento interactif — `MindMapCard` (clusters), suggestions agents (`AgentSuggestion`, cron), Memory Echo, sentiment, inbox/révisions ; **Gmail OAuth** (`/api/integrations/gmail/*`, pattern Calendar) — scan vols/colis/abonnements → notes + rappels ; crons entrypoint : agents, agent-suggestions, clusters, reminders, gmail-scan, sync-usage.

docker-compose.yml

@@ -150,7 +150,7 @@ services:
           cpus: '0.25'
           memory: 128M
     healthcheck:
-      test: ["CMD-SHELL", "wget --header \"x-api-key: $${MCP_API_KEY:-dev-key}\" -q -O /dev/null http://localhost:3001/ || exit 1"]
+      test: ["CMD-SHELL", "wget -q -O /dev/null http://localhost:3001/health || exit 1"]
       interval: 30s
       timeout: 10s
       retries: 3

mcp-server/auth.js

@@ -28,6 +28,28 @@ function setCachedKey(keyHash, data) {
   keyCache.set(keyHash, { data, timestamp: Date.now() });
 }
 
+async function getEffectiveTier(prisma, userId) {
+  if (!userId) return 'BASIC';
+  const sub = await prisma.subscription.findUnique({
+    where: { userId },
+    select: { tier: true, status: true, currentPeriodEnd: true },
+  });
+  if (!sub) return 'BASIC';
+  if (sub.status === 'ACTIVE' || sub.status === 'TRIALING') return sub.tier;
+  if (
+    (sub.status === 'PAST_DUE' || sub.status === 'CANCELED') &&
+    sub.currentPeriodEnd &&
+    new Date() < new Date(sub.currentPeriodEnd)
+  ) {
+    return sub.tier;
+  }
+  return 'BASIC';
+}
+
+function isMcpTierAllowed(tier) {
+  return tier !== 'BASIC';
+}
+
 /**
  * Generate a new API key.
  * @param {import('@prisma/client').PrismaClient} prisma
@@ -111,6 +133,9 @@ export async function validateApiKey(prisma, rawKey) {
     const info = JSON.parse(entry.value);
     if (info.keyHash !== keyHash || !info.active) return null;
 
+    const tier = await getEffectiveTier(prisma, info.userId);
+    if (!isMcpTierAllowed(tier)) return null;
+
     info.lastUsedAt = new Date().toISOString();
     prisma.systemConfig.update({
       where: { key: configKey },

memento-mobile/app/(tabs)/_layout.tsx

@@ -1,6 +1,7 @@
 import { Tabs } from 'expo-router'
 import { BookOpen, Search, Home, User, GraduationCap } from 'lucide-react-native'
 import { C } from '@/lib/theme'
+import { t } from '@/lib/i18n'
 
 export default function TabsLayout() {
   return (
@@ -13,11 +14,11 @@ export default function TabsLayout() {
         tabBarLabelStyle: { fontSize: 10, fontWeight: '600', marginTop: -2 },
       }}
     >
-      <Tabs.Screen name="home" options={{ title: 'Accueil', tabBarIcon: ({ color, size }) => <Home size={size} color={color} /> }} />
-      <Tabs.Screen name="notebooks" options={{ title: 'Carnets', tabBarIcon: ({ color, size }) => <BookOpen size={size} color={color} /> }} />
-      <Tabs.Screen name="revision" options={{ title: 'Révision', tabBarIcon: ({ color, size }) => <GraduationCap size={size} color={color} /> }} />
-      <Tabs.Screen name="search" options={{ title: 'Recherche', tabBarIcon: ({ color, size }) => <Search size={size} color={color} /> }} />
-      <Tabs.Screen name="profile" options={{ title: 'Profil', tabBarIcon: ({ color, size }) => <User size={size} color={color} /> }} />
+      <Tabs.Screen name="home" options={{ title: t('tab.home'), tabBarIcon: ({ color, size }) => <Home size={size} color={color} /> }} />
+      <Tabs.Screen name="notebooks" options={{ title: t('tab.notebooks'), tabBarIcon: ({ color, size }) => <BookOpen size={size} color={color} /> }} />
+      <Tabs.Screen name="revision" options={{ title: t('tab.revision'), tabBarIcon: ({ color, size }) => <GraduationCap size={size} color={color} /> }} />
+      <Tabs.Screen name="search" options={{ title: t('tab.search'), tabBarIcon: ({ color, size }) => <Search size={size} color={color} /> }} />
+      <Tabs.Screen name="profile" options={{ title: t('tab.profile'), tabBarIcon: ({ color, size }) => <User size={size} color={color} /> }} />
     </Tabs>
   )
 }

memento-mobile/app/note/[id].tsx

@@ -158,7 +158,6 @@ export default function NoteScreen() {
   const handleEdit = () => {
     if (!note) return
     setEditTitle(note.title)
-    setEditContent(htmlToPlainText(note.content ?? ''))
     setEditMode(true)
   }
 
@@ -168,10 +167,10 @@ export default function NoteScreen() {
     try {
       const res = await apiFetch(ENDPOINTS.note(note.id), {
         method: 'PUT',
-        body: JSON.stringify({ title: editTitle.trim(), content: editContent }),
+        body: JSON.stringify({ title: editTitle.trim() }),
       })
       if (!res.ok) throw new Error('Erreur de sauvegarde')
-      setNote((prev) => prev ? { ...prev, title: editTitle.trim(), content: editContent } : prev)
+      setNote((prev) => prev ? { ...prev, title: editTitle.trim() } : prev)
       setEditMode(false)
     } catch (e: any) {
       Alert.alert('Erreur', e.message)
@@ -188,7 +187,12 @@ export default function NoteScreen() {
 
   const handleShare = async () => {
     if (!note) return
-    await Share.share({ title: note.title, message: `${note.title}\nhttps://memento-note.com` })
+    const publicUrl = note.publicSlug ? `https://memento-note.com/p/${note.publicSlug}` : null
+    const plain = note.content?.replace(/<[^>]+>/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 200) || ''
+    const message = publicUrl
+      ? `${note.title}\n\n${plain}...\n\nLire: ${publicUrl}`
+      : `${note.title}\n\n${plain}${plain.length === 200 ? '...' : ''}`
+    await Share.share({ title: note.title, message })
   }
 
   const handleDelete = () => {
@@ -257,20 +261,21 @@ export default function NoteScreen() {
         />
       )}
 
-      {/* Mode édition */}
+      {/* Mode édition — titre uniquement, contenu preserve HTML */}
       {note && editMode && (
         <View style={{ flex: 1 }}>
-          <TextInput value={editTitle} onChangeText={setEditTitle} style={s.editTitle} placeholder="Titre…" placeholderTextColor={C.border} />
+          <TextInput value={editTitle} onChangeText={setEditTitle} style={s.editTitle} placeholder="Titre…" placeholderTextColor={C.border} autoFocus />
           <View style={s.editDivider} />
-          <TextInput value={editContent} onChangeText={setEditContent} style={s.editContent} placeholder="Contenu…" placeholderTextColor={C.concrete} multiline textAlignVertical="top" scrollEnabled />
+          <View style={{ flex: 1, justifyContent: 'center', alignItems: 'center', paddingHorizontal: 20 }}>
+            <Text style={{ fontSize: 14, color: C.concrete, textAlign: 'center', lineHeight: 22 }}>
+              Le contenu enrichi ne peut pas être édité depuis mobile.{`\n\n`}Utilisez la version web pour modifier le texte.
+            </Text>
+          </View>
           {/* Barre outils */}
           <View style={s.toolbar}>
-            <MicButton state={audioState} onPress={handleMic} />
-            {audioState === 'recording'
-              ? <Text style={s.recordHint}>● Enregistrement… Appuyez pour arrêter</Text>
-              : <TouchableOpacity onPress={() => setAiSheetOpen(true)} disabled={!editContent.trim()} style={[s.aiBtn, !editContent.trim() && { opacity: 0.35 }]} activeOpacity={0.8}>
-                  <Text style={s.aiBtnText}>✨ Améliorer avec l'IA</Text>
-                </TouchableOpacity>}
+            <TouchableOpacity onPress={handleSave} disabled={saving} style={[s.aiBtn, { flex: 1, justifyContent: 'center' }]} activeOpacity={0.8}>
+              <Text style={s.aiBtnText}>{saving ? 'Sauvegarde…' : 'Enregistrer le titre'}</Text>
+            </TouchableOpacity>
           </View>
         </View>
       )}

memento-mobile/components/TitleSheet.tsx

@@ -27,7 +27,7 @@ export function TitleSheet({ visible, onClose, content, onSelect }: Props) {
     if (visible && content.trim()) {
       fetchTitles()
     }
-  }, [visible])
+  }, [visible, content])
 
   const fetchTitles = async () => {
     setLoading(true)

memento-mobile/lib/i18n.ts

@@ -0,0 +1,176 @@
+import { getLocales } from 'expo-localization'
+import { I18nManager } from 'react-native'
+
+export type MobileLang = 'fr' | 'en' | 'fa'
+
+const translations: Record<MobileLang, Record<string, string>> = {
+  fr: {
+    'tab.home': 'Accueil',
+    'tab.notebooks': 'Carnets',
+    'tab.revision': 'Révision',
+    'tab.search': 'Recherche',
+    'tab.profile': 'Profil',
+    'common.error': 'Erreur',
+    'common.loading': 'Chargement…',
+    'common.save': 'Enregistrer',
+    'common.delete': 'Supprimer',
+    'common.cancel': 'Annuler',
+    'common.search': 'Rechercher',
+    'common.settings': 'Paramètres',
+    'common.logout': 'Déconnexion',
+    'note.title': 'Titre…',
+    'note.contentPlaceholder': 'Contenu…',
+    'note.deleteTitle': 'Supprimer la note',
+    'note.deleteConfirm': 'Voulez-vous vraiment supprimer cette note ?',
+    'note.saveError': 'Erreur de sauvegarde',
+    'note.deleteError': 'Impossible de supprimer la note',
+    'note.dayNote': 'Note du jour',
+    'note.dayNoteError': 'Impossible de charger la note du jour.',
+    'note.editTitleOnly': "Le contenu enrichi ne peut pas être édité depuis mobile. Utilisez la version web pour modifier le texte.",
+    'note.saveTitle': 'Enregistrer le titre',
+    'note.saving': 'Sauvegarde…',
+    'auth.loginFailed': 'Connexion échouée',
+    'auth.googleFailed': 'Connexion Google échouée',
+    'auth.serverError': 'Erreur serveur',
+    'auth.unauthorized': 'Non autorisé',
+    'auth.emailPlaceholder': 'Email',
+    'auth.passwordPlaceholder': 'Mot de passe',
+    'auth.loginButton': 'Se connecter',
+    'auth.orGoogle': 'ou',
+    'revision.title': 'Révision',
+    'revision.empty': 'Aucune carte à réviser',
+    'revision.loadingError': 'Erreur de chargement',
+    'revision.difficult': 'Difficile',
+    'revision.hard': 'Dur',
+    'revision.good': 'Bien',
+    'revision.easy': 'Facile',
+    'profile.title': 'Profil',
+    'search.placeholder': 'Rechercher des notes…',
+    'search.noResults': 'Aucun résultat',
+    'ai.improve': "✨ Améliorer avec l'IA",
+  },
+  en: {
+    'tab.home': 'Home',
+    'tab.notebooks': 'Notebooks',
+    'tab.revision': 'Review',
+    'tab.search': 'Search',
+    'tab.profile': 'Profile',
+    'common.error': 'Error',
+    'common.loading': 'Loading…',
+    'common.save': 'Save',
+    'common.delete': 'Delete',
+    'common.cancel': 'Cancel',
+    'common.search': 'Search',
+    'common.settings': 'Settings',
+    'common.logout': 'Log out',
+    'note.title': 'Title…',
+    'note.contentPlaceholder': 'Content…',
+    'note.deleteTitle': 'Delete note',
+    'note.deleteConfirm': 'Are you sure you want to delete this note?',
+    'note.saveError': 'Save error',
+    'note.deleteError': 'Could not delete the note',
+    'note.dayNote': 'Note of the day',
+    'note.dayNoteError': 'Could not load the note of the day.',
+    'note.editTitleOnly': 'Rich content cannot be edited from mobile. Use the web version to modify the text.',
+    'note.saveTitle': 'Save title',
+    'note.saving': 'Saving…',
+    'auth.loginFailed': 'Login failed',
+    'auth.googleFailed': 'Google sign-in failed',
+    'auth.serverError': 'Server error',
+    'auth.unauthorized': 'Unauthorized',
+    'auth.emailPlaceholder': 'Email',
+    'auth.passwordPlaceholder': 'Password',
+    'auth.loginButton': 'Sign in',
+    'auth.orGoogle': 'or',
+    'revision.title': 'Review',
+    'revision.empty': 'No cards to review',
+    'revision.loadingError': 'Loading error',
+    'revision.difficult': 'Hard',
+    'revision.hard': 'Difficult',
+    'revision.good': 'Good',
+    'revision.easy': 'Easy',
+    'profile.title': 'Profile',
+    'search.placeholder': 'Search notes…',
+    'search.noResults': 'No results',
+    'ai.improve': '✨ Improve with AI',
+  },
+  fa: {
+    'tab.home': 'خانه',
+    'tab.notebooks': 'دفترچه‌ها',
+    'tab.revision': 'مرور',
+    'tab.search': 'جستجو',
+    'tab.profile': 'پروفایل',
+    'common.error': 'خطا',
+    'common.loading': 'در حال بارگذاری…',
+    'common.save': 'ذخیره',
+    'common.delete': 'حذف',
+    'common.cancel': 'انصراف',
+    'common.search': 'جستجو',
+    'common.settings': 'تنظیمات',
+    'common.logout': 'خروج',
+    'note.title': 'عنوان…',
+    'note.contentPlaceholder': 'محتوا…',
+    'note.deleteTitle': 'حذف یادداشت',
+    'note.deleteConfirm': 'آیا از حذف این یادداشت مطمئن هستید؟',
+    'note.saveError': 'خطای ذخیره‌سازی',
+    'note.deleteError': 'حذف یادداشت امکان‌پذیر نیست',
+    'note.dayNote': 'یادداشت روز',
+    'note.dayNoteError': 'بارگذاری یادداشت روز امکان‌پذیر نیست.',
+    'note.editTitleOnly': 'محتوای غنی از موبایل قابل ویرایش نیست. برای ویرایش متن از نسخه وب استفاده کنید.',
+    'note.saveTitle': 'ذخیره عنوان',
+    'note.saving': 'در حال ذخیره…',
+    'auth.loginFailed': 'ورود ناموفق',
+    'auth.googleFailed': 'ورود با گوگل ناموفق',
+    'auth.serverError': 'خطای سرور',
+    'auth.unauthorized': 'غیر مجاز',
+    'auth.emailPlaceholder': 'ایمیل',
+    'auth.passwordPlaceholder': 'رمز عبور',
+    'auth.loginButton': 'ورود',
+    'auth.orGoogle': 'یا',
+    'revision.title': 'مرور',
+    'revision.empty': 'کارت مروری موجود نیست',
+    'revision.loadingError': 'خطای بارگذاری',
+    'revision.difficult': 'سخت',
+    'revision.hard': 'دشوار',
+    'revision.good': 'خوب',
+    'revision.easy': 'آسان',
+    'profile.title': 'پروفایل',
+    'search.placeholder': 'جستجوی یادداشت…',
+    'search.noResults': 'نتیجه‌ای یافت نشد',
+    'ai.improve': '✨ بهبود با هوش مصنوعی',
+  },
+}
+
+const RTL_LANGS: MobileLang[] = ['fa', 'ar']
+
+function detectLang(): MobileLang {
+  try {
+    const locales = getLocales()
+    const lang = locales[0]?.languageCode ?? 'fr'
+    if (lang === 'fa') return 'fa'
+    if (lang === 'en') return 'en'
+    return 'fr'
+  } catch {
+    return 'fr'
+  }
+}
+
+let currentLang: MobileLang = detectLang()
+
+export function setLang(lang: MobileLang) {
+  currentLang = lang
+  const isRtl = RTL_LANGS.includes(lang)
+  I18nManager.forceRTL(isRtl)
+}
+
+export function isRTL(): boolean {
+  return RTL_LANGS.includes(currentLang)
+}
+
+export function getLang(): MobileLang {
+  return currentLang
+}
+
+export function t(key: string): string {
+  return translations[currentLang]?.[key] ?? translations.fr[key] ?? translations.en[key] ?? key
+}

memento-mobile/lib/store.ts

@@ -43,6 +43,7 @@ export const useAuthStore = create<AuthState>((set) => ({
   },
 
   logout: async () => {
+    try { await apiFetch(ENDPOINTS.logout, { method: 'POST' }) } catch {}
     await clearToken()
     set({ user: null })
   },

memento-mobile/lib/theme.ts

@@ -6,7 +6,13 @@ export const C = {
   concrete: '#8A8A82',
   border: '#E8E6E0',
   white: '#FFFFFF',
+  surface: '#F5F4F0',
   rose: '#e11d48',
   roseBg: '#fff1f2',
   roseBorder: '#fecdd3',
+  emerald: '#10b981',
+  emeraldBg: '#ecfdf5',
+  blue: '#3b82f6',
+  amber: '#f59e0b',
+  purple: '#8b5cf6',
 }

memento-note/app/(admin)/admin/billing/billing-admin-client.tsx

@@ -1,24 +1,16 @@
 'use client'
 
-import { useEffect, useState } from 'react'
+import { useState } from 'react'
 import { Button } from '@/components/ui/button'
 import { Input } from '@/components/ui/input'
 import { Label } from '@/components/ui/label'
 import { Checkbox } from '@/components/ui/checkbox'
-import { updateBillingConfig, updatePlanEntitlement } from '@/app/actions/admin-billing'
+import { updateBillingConfig } from '@/app/actions/admin-billing'
 import { toast } from 'sonner'
 import { useLanguage } from '@/lib/i18n'
-import { CreditCard, Gauge, Settings2 } from 'lucide-react'
-
-type EntitlementRow = {
-  tier: string
-  feature: string
-  limitValue: number | null
-  mode: 'limited' | 'unlimited' | 'unavailable'
-}
+import { CreditCard, Gauge, Coins, Package } from 'lucide-react'
 
 type BillingAdminData = {
-  entitlements: EntitlementRow[]
   billingConfig: Record<string, string>
   usageOverview: {
     period: string
@@ -26,34 +18,55 @@ type BillingAdminData = {
     byFeature: Array<{ feature: string; requests: number; tokens: number; users: number }>
     topUsers: Array<{ userId: string; email: string; name: string | null; requests: number }>
   }
-  features: string[]
   tiers: string[]
+  /** Allocations mensuelles du solde unique (source de vérité débit) */
+  creditAllocations?: Array<{
+    tier: string
+    monthlyCredits: number | null
+    unlimited: boolean
+  }>
+  creditCosts?: Record<string, number>
+  creditPacks?: Array<{
+    id: string
+    credits: number
+    defaultDisplay: string
+  }>
 }
 
-function getEntitlement(
-  entitlements: EntitlementRow[],
-  tier: string,
-  feature: string,
-): EntitlementRow | undefined {
-  return entitlements.find((e) => e.tier === tier && e.feature === feature)
+const SUBSCRIPTION_PRICE_KEYS = [
+  'STRIPE_PRICE_PRO_MONTHLY',
+  'STRIPE_PRICE_PRO_ANNUAL',
+  'STRIPE_PRICE_BUSINESS_MONTHLY',
+  'STRIPE_PRICE_BUSINESS_ANNUAL',
+] as const
+
+const PACK_PRICE_KEYS = [
+  'STRIPE_PRICE_CREDITS_S',
+  'STRIPE_PRICE_CREDITS_M',
+  'STRIPE_PRICE_CREDITS_L',
+] as const
+
+/** Date stable SSR/client (pas de toLocaleString — mismatch locale + fuseau). */
+function formatStableUtc(iso: string): string {
+  const d = new Date(iso)
+  if (Number.isNaN(d.getTime())) return iso
+  const pad = (n: number) => String(n).padStart(2, '0')
+  return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())} ${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())} UTC`
 }
 
 export function BillingAdminClient({ initialData }: { initialData: BillingAdminData }) {
   const { t } = useLanguage()
-  const [activeTier, setActiveTier] = useState(initialData.tiers[0] ?? 'BASIC')
   const [billingEnabled, setBillingEnabled] = useState(initialData.billingConfig.BILLING_ENABLED === 'true')
   const [isSavingBilling, setIsSavingBilling] = useState(false)
-  const [savingCell, setSavingCell] = useState<string | null>(null)
 
   const handleSaveBilling = async (formData: FormData) => {
     setIsSavingBilling(true)
     try {
       const data: Record<string, string> = {
         BILLING_ENABLED: billingEnabled ? 'true' : 'false',
-        STRIPE_PRICE_PRO_MONTHLY: String(formData.get('STRIPE_PRICE_PRO_MONTHLY') ?? ''),
-        STRIPE_PRICE_PRO_ANNUAL: String(formData.get('STRIPE_PRICE_PRO_ANNUAL') ?? ''),
-        STRIPE_PRICE_BUSINESS_MONTHLY: String(formData.get('STRIPE_PRICE_BUSINESS_MONTHLY') ?? ''),
-        STRIPE_PRICE_BUSINESS_ANNUAL: String(formData.get('STRIPE_PRICE_BUSINESS_ANNUAL') ?? ''),
+      }
+      for (const key of [...SUBSCRIPTION_PRICE_KEYS, ...PACK_PRICE_KEYS]) {
+        data[key] = String(formData.get(key) ?? '')
       }
       await updateBillingConfig(data)
       toast.success(t('admin.billing.configSaved'))
@@ -64,23 +77,6 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
     }
   }
 
-  const handleEntitlementChange = async (
-    feature: string,
-    mode: 'unavailable' | 'unlimited' | 'limited',
-    limitValue?: number,
-  ) => {
-    const key = `${activeTier}:${feature}`
-    setSavingCell(key)
-    try {
-      await updatePlanEntitlement(activeTier, feature, mode, limitValue)
-      toast.success(t('admin.billing.limitSaved'))
-    } catch (e: unknown) {
-      toast.error(e instanceof Error ? e.message : t('admin.billing.limitFailed'))
-    } finally {
-      setSavingCell(null)
-    }
-  }
-
   return (
     <div className="space-y-8">
       <div>
@@ -98,7 +94,7 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
             <p className="text-sm text-muted-foreground">{t('admin.billing.stripeConfigDescription')}</p>
           </div>
         </div>
-        <form onSubmit={(e) => { e.preventDefault(); handleSaveBilling(new FormData(e.currentTarget)) }} className="p-6 space-y-4">
+        <form onSubmit={(e) => { e.preventDefault(); handleSaveBilling(new FormData(e.currentTarget)) }} className="p-6 space-y-6">
           <div className="flex items-center space-x-2">
             <Checkbox
               id="BILLING_ENABLED"
@@ -107,8 +103,10 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
             />
             <Label htmlFor="BILLING_ENABLED">{t('admin.billing.enableBilling')}</Label>
           </div>
+          <div>
+            <h3 className="text-sm font-medium mb-3">{t('admin.billing.subscriptionPricesTitle')}</h3>
             <div className="grid gap-4 sm:grid-cols-2">
-            {(['STRIPE_PRICE_PRO_MONTHLY', 'STRIPE_PRICE_PRO_ANNUAL', 'STRIPE_PRICE_BUSINESS_MONTHLY', 'STRIPE_PRICE_BUSINESS_ANNUAL'] as const).map((key) => (
+              {SUBSCRIPTION_PRICE_KEYS.map((key) => (
                 <div key={key} className="space-y-2">
                   <Label htmlFor={key}>{t(`admin.billing.${key}`)}</Label>
                   <Input
@@ -120,69 +118,91 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
                 </div>
               ))}
             </div>
+          </div>
+          <div className="border-t border-border/50 pt-4">
+            <div className="flex items-center gap-2 mb-1">
+              <Package className="h-4 w-4 text-muted-foreground" />
+              <h3 className="text-sm font-medium">{t('admin.billing.packPricesTitle')}</h3>
+            </div>
+            <p className="text-xs text-muted-foreground mb-3">{t('admin.billing.packPricesDescription')}</p>
+            <div className="grid gap-4 sm:grid-cols-3">
+              {PACK_PRICE_KEYS.map((key) => (
+                <div key={key} className="space-y-2">
+                  <Label htmlFor={key}>{t(`admin.billing.${key}`)}</Label>
+                  <Input
+                    id={key}
+                    name={key}
+                    defaultValue={initialData.billingConfig[key] ?? ''}
+                    placeholder="price_..."
+                  />
+                </div>
+              ))}
+            </div>
+          </div>
           <p className="text-xs text-muted-foreground">{t('admin.billing.secretsNote')}</p>
           <Button type="submit" disabled={isSavingBilling}>{t('admin.billing.saveConfig')}</Button>
         </form>
       </div>
 
+      {/* Solde unique — source de vérité du débit */}
       <div className="bg-card rounded-lg border border-border shadow-sm overflow-hidden">
         <div className="flex items-center gap-3 p-6 border-b border-border">
           <div className="w-10 h-10 rounded-full bg-primary/10 flex items-center justify-center text-primary">
-            <Settings2 className="h-5 w-5" />
+            <Coins className="h-5 w-5" />
           </div>
           <div>
-            <h2 className="font-semibold">{t('admin.billing.limitsTitle')}</h2>
-            <p className="text-sm text-muted-foreground">{t('admin.billing.limitsDescription')}</p>
+            <h2 className="font-semibold">{t('admin.billing.creditsTitle')}</h2>
+            <p className="text-sm text-muted-foreground">{t('admin.billing.creditsDescription')}</p>
           </div>
         </div>
         <div className="p-6 space-y-4">
-          <div className="flex flex-wrap gap-2">
-            {initialData.tiers.map((tier) => (
-              <button
-                key={tier}
-                type="button"
-                onClick={() => setActiveTier(tier)}
-                className={`px-3 py-1.5 rounded-lg text-sm font-medium border transition-colors ${
-                  activeTier === tier
-                    ? 'border-primary bg-primary/10 text-primary'
-                    : 'border-border text-muted-foreground hover:bg-muted'
-                }`}
+          <div className="grid grid-cols-2 sm:grid-cols-4 gap-3">
+            {(initialData.creditAllocations ?? []).map((row) => (
+              <div
+                key={row.tier}
+                className="rounded-xl border border-border/60 bg-muted/30 p-4 space-y-1"
               >
-                {tier}
-              </button>
+                <p className="text-[10px] font-bold uppercase tracking-widest text-muted-foreground">
+                  {row.tier}
+                </p>
+                <p className="text-2xl font-semibold tabular-nums">
+                  {row.unlimited
+                    ? t('admin.billing.modeUnlimited')
+                    : row.monthlyCredits?.toLocaleString('fr-FR')}
+                </p>
+                {!row.unlimited && (
+                  <p className="text-[11px] text-muted-foreground">
+                    {t('admin.billing.creditsPerMonth')}
+                  </p>
+                )}
+              </div>
             ))}
           </div>
-          <div className="overflow-x-auto">
-            <table className="w-full text-sm">
-              <thead>
-                <tr className="border-b text-left text-muted-foreground">
-                  <th className="py-2 pr-4">{t('admin.billing.feature')}</th>
-                  <th className="py-2 pr-4">{t('admin.billing.mode')}</th>
-                  <th className="py-2 pr-4">{t('admin.billing.monthlyLimit')}</th>
-                  <th className="py-2">{t('admin.billing.actions')}</th>
-                </tr>
-              </thead>
-              <tbody>
-                {initialData.features.map((feature) => {
-                  const row = getEntitlement(initialData.entitlements, activeTier, feature)
-                  const mode = row?.mode ?? 'unavailable'
-                  const cellKey = `${activeTier}:${feature}`
-                  return (
-                    <EntitlementRowEditor
-                      key={`${activeTier}:${feature}`}
-                      feature={feature}
-                      mode={mode}
-                      limitValue={row?.limitValue ?? null}
-                      isSaving={savingCell === cellKey}
-                      onSave={handleEntitlementChange}
-                      t={t}
-                    />
-                  )
-                })}
-              </tbody>
-            </table>
+          {(initialData.creditPacks?.length ?? 0) > 0 && (
+            <div className="border-t border-border/40 pt-3">
+              <p className="text-xs font-medium mb-2">{t('admin.billing.packsCatalogTitle')}</p>
+              <div className="flex flex-wrap gap-2">
+                {(initialData.creditPacks ?? []).map((pack) => (
+                  <span
+                    key={pack.id}
+                    className="inline-flex items-center gap-1.5 rounded-lg border border-border/60 bg-muted/20 px-3 py-1.5 text-xs"
+                  >
+                    <span className="font-semibold uppercase">{pack.id}</span>
+                    <span className="text-muted-foreground">
+                      {pack.credits.toLocaleString('fr-FR')} cr. · {pack.defaultDisplay}
+                    </span>
+                  </span>
+                ))}
               </div>
             </div>
+          )}
+          <p className="text-xs text-muted-foreground leading-relaxed border-t border-border/40 pt-3">
+            {t('admin.billing.creditsCostsNote')}
+          </p>
+          <p className="text-xs text-muted-foreground">
+            {t('admin.billing.creditsResetHint')}
+          </p>
+        </div>
       </div>
 
       <div className="bg-card rounded-lg border border-border shadow-sm overflow-hidden">
@@ -195,7 +215,10 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
             <p className="text-sm text-muted-foreground">
               {t('admin.billing.usagePeriod', { period: initialData.usageOverview.period })}
               {initialData.usageOverview.lastSyncedAt
-                ? ` · ${t('admin.billing.lastSync', { date: new Date(initialData.usageOverview.lastSyncedAt).toLocaleString() })}`
+                ? ` · ${t('admin.billing.lastSync', {
+                    // Format fixe UTC (évite mismatch SSR locale/fuseau vs client)
+                    date: formatStableUtc(initialData.usageOverview.lastSyncedAt),
+                  })}`
                 : ` · ${t('admin.billing.notSynced')}`}
             </p>
           </div>
@@ -236,68 +259,3 @@ export function BillingAdminClient({ initialData }: { initialData: BillingAdminD
     </div>
   )
 }
-
-function EntitlementRowEditor({
-  feature,
-  mode: initialMode,
-  limitValue: initialLimit,
-  isSaving,
-  onSave,
-  t,
-}: {
-  feature: string
-  mode: 'unavailable' | 'unlimited' | 'limited'
-  limitValue: number | null
-  isSaving: boolean
-  onSave: (feature: string, mode: 'unavailable' | 'unlimited' | 'limited', limit?: number) => Promise<void>
-  t: (key: string, params?: Record<string, string | number>) => string
-}) {
-  const [mode, setMode] = useState(initialMode)
-  const [limit, setLimit] = useState(initialLimit != null ? String(initialLimit) : '50')
-
-  useEffect(() => {
-    setMode(initialMode)
-    setLimit(initialLimit != null ? String(initialLimit) : '50')
-  }, [initialMode, initialLimit])
-
-  return (
-    <tr className="border-b border-border/30">
-      <td className="py-3 pr-4 font-mono text-xs">{feature}</td>
-      <td className="py-3 pr-4">
-        <select
-          value={mode}
-          onChange={(e) => setMode(e.target.value as typeof mode)}
-          className="h-9 rounded-md border border-input bg-background px-2 text-xs"
-        >
-          <option value="unavailable">{t('admin.billing.modeUnavailable')}</option>
-          <option value="limited">{t('admin.billing.modeLimited')}</option>
-          <option value="unlimited">{t('admin.billing.modeUnlimited')}</option>
-        </select>
-      </td>
-      <td className="py-3 pr-4">
-        {mode === 'limited' ? (
-          <Input
-            type="number"
-            min={0}
-            value={limit}
-            onChange={(e) => setLimit(e.target.value)}
-            className="h-9 w-24 text-xs"
-          />
-        ) : (
-          <span className="text-muted-foreground text-xs">—</span>
-        )}
-      </td>
-      <td className="py-3">
-        <Button
-          type="button"
-          size="sm"
-          variant="outline"
-          disabled={isSaving}
-          onClick={() => onSave(feature, mode, mode === 'limited' ? parseInt(limit, 10) : undefined)}
-        >
-          {isSaving ? '…' : t('admin.billing.saveLimit')}
-        </Button>
-      </td>
-    </tr>
-  )
-}

memento-note/app/(admin)/admin/page.tsx

@@ -1,59 +1,185 @@
 import { getUsers } from '@/app/actions/admin'
 import { AdminMetrics } from '@/components/admin-metrics'
-import { Users, Activity, Database, Zap } from 'lucide-react'
+import { Users, Activity, Database, Zap, CreditCard, Bot } from 'lucide-react'
+import prisma from '@/lib/prisma'
+import Link from 'next/link'
+
+async function getAdminDashboardStats() {
+  const now = new Date()
+  const dayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000)
+  const monthStart = new Date(now.getFullYear(), now.getMonth(), 1)
+
+  const [
+    userCount,
+    noteCount,
+    notebookCount,
+    agentsEnabled,
+    agentRunsToday,
+    paidSubs,
+    recentUsers,
+  ] = await Promise.all([
+    prisma.user.count().catch(() => 0),
+    prisma.note.count({ where: { trashedAt: null } }).catch(() => 0),
+    prisma.notebook.count().catch(() => 0),
+    prisma.agent.count({ where: { isEnabled: true } }).catch(() => 0),
+    prisma.agentAction.count({ where: { createdAt: { gte: dayAgo } } }).catch(() => 0),
+    prisma.subscription.count({
+      where: { tier: { in: ['PRO', 'BUSINESS', 'ENTERPRISE'] }, status: 'ACTIVE' },
+    }).catch(() => 0),
+    prisma.user.findMany({
+      orderBy: { createdAt: 'desc' },
+      take: 8,
+      select: { id: true, name: true, email: true, createdAt: true, role: true },
+    }).catch(() => []),
+  ])
+
+  // AI usage this month
+  let aiRequestsMonth = 0
+  try {
+    aiRequestsMonth = await prisma.usageLog.aggregate({
+      where: { periodStart: { gte: monthStart } },
+      _sum: { requestsCount: true },
+    }).then((r) => r._sum.requestsCount ?? 0)
+  } catch {
+    try {
+      aiRequestsMonth = await prisma.agentAction.count({
+        where: { createdAt: { gte: monthStart } },
+      })
+    } catch {
+      aiRequestsMonth = 0
+    }
+  }
+
+  return {
+    userCount,
+    noteCount,
+    notebookCount,
+    agentsEnabled,
+    agentRunsToday,
+    paidSubs,
+    aiRequestsMonth,
+    recentUsers,
+  }
+}
 
 export default async function AdminPage() {
-  const users = await getUsers()
+  const [users, stats] = await Promise.all([getUsers(), getAdminDashboardStats()])
 
-  // Mock metrics data - in a real app, these would come from analytics
   const metrics = [
     {
-      title: 'Total Users',
-      value: users.length,
-      trend: { value: 12, isPositive: true },
+      title: 'Utilisateurs',
+      value: stats.userCount,
+      trend: undefined as { value: number; isPositive: boolean } | undefined,
       icon: <Users className="h-5 w-5 text-primary dark:text-primary-foreground" />,
     },
     {
-      title: 'Active Sessions',
-      value: '24',
-      trend: { value: 8, isPositive: true },
-      icon: <Activity className="h-5 w-5 text-green-600 dark:text-green-400" />,
-    },
-    {
-      title: 'Total Notes',
-      value: '1,234',
-      trend: { value: 24, isPositive: true },
+      title: 'Notes',
+      value: stats.noteCount.toLocaleString('fr-FR'),
       icon: <Database className="h-5 w-5 text-purple-600 dark:text-purple-400" />,
     },
     {
-      title: 'AI Requests',
-      value: '856',
-      trend: { value: 5, isPositive: false },
+      title: 'Abonnements payants',
+      value: stats.paidSubs,
+      icon: <CreditCard className="h-5 w-5 text-emerald-600 dark:text-emerald-400" />,
+    },
+    {
+      title: 'Agents actifs',
+      value: stats.agentsEnabled,
+      icon: <Bot className="h-5 w-5 text-blue-600 dark:text-blue-400" />,
+    },
+    {
+      title: 'Exécutions agents (24h)',
+      value: stats.agentRunsToday,
+      icon: <Activity className="h-5 w-5 text-green-600 dark:text-green-400" />,
+    },
+    {
+      title: 'Usage IA (mois)',
+      value: stats.aiRequestsMonth.toLocaleString('fr-FR'),
       icon: <Zap className="h-5 w-5 text-yellow-600 dark:text-yellow-400" />,
     },
   ]
 
   return (
     <div className="space-y-6">
+      <div className="flex flex-col sm:flex-row sm:items-end sm:justify-between gap-3">
         <div>
-        <h1 className="text-3xl font-bold text-gray-900 dark:text-white">
-          Dashboard
+          <h1 className="text-3xl font-bold text-foreground">
+            Administration
           </h1>
-        <p className="text-gray-600 dark:text-gray-400 mt-1">
-          Overview of your application metrics
+          <p className="text-muted-foreground mt-1">
+            Vue d&apos;ensemble en temps réel — {stats.notebookCount} carnets · {users.length} comptes listés
           </p>
         </div>
+        <div className="flex flex-wrap gap-2">
+          <Link
+            href="/admin/billing"
+            className="text-xs font-medium px-3 py-2 rounded-lg border border-border bg-card hover:bg-muted transition-colors"
+          >
+            Facturation & quotas
+          </Link>
+          <Link
+            href="/admin/ai"
+            className="text-xs font-medium px-3 py-2 rounded-lg border border-border bg-card hover:bg-muted transition-colors"
+          >
+            Config IA
+          </Link>
+          <Link
+            href="/admin/users"
+            className="text-xs font-medium px-3 py-2 rounded-lg border border-border bg-card hover:bg-muted transition-colors"
+          >
+            Utilisateurs
+          </Link>
+          <Link
+            href="/admin/settings"
+            className="text-xs font-medium px-3 py-2 rounded-lg border border-border bg-card hover:bg-muted transition-colors"
+          >
+            Paramètres
+          </Link>
+        </div>
+      </div>
 
       <AdminMetrics metrics={metrics} />
 
+      <div className="grid md:grid-cols-2 gap-6">
         <div className="bg-card rounded-lg shadow-sm overflow-hidden border border-border p-6">
-        <h2 className="text-lg font-semibold text-gray-900 dark:text-white mb-4">
-          Recent Activity
+          <h2 className="text-lg font-semibold text-foreground mb-4">
+            Derniers utilisateurs
           </h2>
-        <p className="text-gray-600 dark:text-gray-400">
-          Recent activity will be displayed here.
+          {stats.recentUsers.length === 0 ? (
+            <p className="text-muted-foreground text-sm">Aucun utilisateur.</p>
+          ) : (
+            <ul className="divide-y divide-border">
+              {stats.recentUsers.map((u) => (
+                <li key={u.id} className="py-2.5 flex items-center justify-between gap-3 text-sm">
+                  <div className="min-w-0">
+                    <p className="font-medium text-foreground truncate">{u.name || u.email}</p>
+                    <p className="text-xs text-muted-foreground truncate">{u.email}</p>
+                  </div>
+                  <div className="text-right shrink-0">
+                    <span className="text-[10px] uppercase tracking-wider text-muted-foreground">{u.role}</span>
+                    <p className="text-[10px] text-muted-foreground">
+                      {u.createdAt ? new Date(u.createdAt).toLocaleDateString('fr-FR') : '—'}
                     </p>
                   </div>
+                </li>
+              ))}
+            </ul>
+          )}
+        </div>
+
+        <div className="bg-card rounded-lg shadow-sm overflow-hidden border border-border p-6">
+          <h2 className="text-lg font-semibold text-foreground mb-4">
+            Raccourcis ops
+          </h2>
+          <ul className="space-y-2 text-sm text-muted-foreground">
+            <li>· Configurer les Price IDs Stripe dans <Link href="/admin/billing" className="text-primary underline">Facturation</Link></li>
+            <li>· Vérifier les quotas IA par feature (BASIC / PRO / BUSINESS)</li>
+            <li>· Tester les providers dans <Link href="/admin/ai" className="text-primary underline">IA</Link></li>
+            <li>· CRON_SECRET requis pour agents planifiés (entrypoint Docker)</li>
+            <li>· Notes indexées via embeddings + fragments (y compris notes courtes)</li>
+          </ul>
+        </div>
+      </div>
     </div>
   )
 }

memento-note/app/(admin)/admin/settings/admin-settings-form.tsx

@@ -139,11 +139,11 @@ const SUGGESTED_EMBEDDINGS: Record<string, string[]> = {
   zai: ['text-embedding-3-small', 'text-embedding-3-large'],
 }
 
-type ModelPurpose = 'tags' | 'embeddings' | 'chat'
+type ModelPurpose = 'tags' | 'embeddings' | 'chat' | 'slides'
 
 export function AdminSettingsForm({ config }: { config: Record<string, string> }) {
   const { t } = useLanguage()
-  const [activeAiTab, setActiveAiTab] = useState<'tags' | 'embeddings' | 'chat'>('tags')
+  const [activeAiTab, setActiveAiTab] = useState<'tags' | 'embeddings' | 'chat' | 'slides'>('tags')
   const [isSaving, setIsSaving] = useState(false)
   const [isTesting, setIsTesting] = useState(false)
 
@@ -168,11 +168,15 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
     return PROVIDERS_WITHOUT_EMBEDDINGS.includes(v) ? 'ollama' : v
   })
   const [chatProvider, setChatProvider] = useState<AIProvider>((config.AI_PROVIDER_CHAT as AIProvider) || 'ollama')
+  const [slidesProvider, setSlidesProvider] = useState<AIProvider>(
+    (config.AI_PROVIDER_SLIDES as AIProvider) || (config.AI_PROVIDER_CHAT as AIProvider) || 'ollama',
+  )
 
   // Selected Models State
   const [selectedTagsModel, setSelectedTagsModel] = useState<string>(config.AI_MODEL_TAGS || '')
   const [selectedEmbeddingModel, setSelectedEmbeddingModel] = useState<string>(config.AI_MODEL_EMBEDDING || '')
   const [selectedChatModel, setSelectedChatModel] = useState<string>(config.AI_MODEL_CHAT || '')
+  const [selectedSlidesModel, setSelectedSlidesModel] = useState<string>(config.AI_MODEL_SLIDES || '')
 
   const [tagsFallbackProvider, setTagsFallbackProvider] = useState<string>(config.AI_PROVIDER_TAGS_FALLBACK || '')
   const [embedFallbackProvider, setEmbedFallbackProvider] = useState<string>(config.AI_PROVIDER_EMBEDDING_FALLBACK || '')
@@ -186,11 +190,13 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
     tags: [],
     embeddings: [],
     chat: [],
+    slides: [],
   })
   const [isLoadingModels, setIsLoadingModels] = useState<Record<ModelPurpose, boolean>>({
     tags: false,
     embeddings: false,
     chat: false,
+    slides: false,
   })
 
   // Fetch models from local providers (Ollama, LM Studio) or cloud providers with /v1/models
@@ -268,6 +274,16 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
         const key = config[API_KEY_CONFIG[chatProvider]] || ''
         if (url && key) await fetchModels('chat', chatProvider, url, key)
       }
+
+      if (slidesProvider === 'ollama') {
+        await fetchModels('slides', 'ollama', config.OLLAMA_BASE_URL_CHAT || config.OLLAMA_BASE_URL || 'http://localhost:11434')
+      } else if (slidesProvider === 'lmstudio') {
+        await fetchModels('slides', 'lmstudio', config.LMSTUDIO_BASE_URL || 'http://localhost:1234/v1')
+      } else if (PROVIDER_META[slidesProvider]?.hasApiKey && slidesProvider !== 'anthropic_custom') {
+        const url = DEFAULT_BASE_URLS[slidesProvider]
+        const key = config[API_KEY_CONFIG[slidesProvider]] || ''
+        if (url && key) await fetchModels('slides', slidesProvider, url, key)
+      }
     }
     fetchInitial()
      
@@ -408,6 +424,32 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
         }
       }
 
+      // Slides provider (dedicated model for deck generation — never auto-renamed)
+      const slidesProv = formData.get('AI_PROVIDER_SLIDES') as string
+      data.AI_PROVIDER_SLIDES = slidesProv?.trim() ?? ''
+      const slidesModel = formData.get('AI_MODEL_SLIDES') as string
+      data.AI_MODEL_SLIDES = slidesModel?.trim() ?? ''
+      if (slidesProv) {
+        if (slidesProv === 'ollama') {
+          const ollamaUrl = formData.get('BASE_URL_ollama_slides') as string
+          if (ollamaUrl) data.OLLAMA_BASE_URL_CHAT = ollamaUrl
+        } else if (slidesProv === 'lmstudio') {
+          const url = formData.get('BASE_URL_lmstudio_slides') as string
+          if (url) data.LMSTUDIO_BASE_URL = url
+        } else {
+          const apiKeyConfigKey = API_KEY_CONFIG[slidesProv as AIProvider]
+          if (apiKeyConfigKey) {
+            const apiKey = formData.get(`API_KEY_${slidesProv}_slides`) as string
+            if (apiKey) data[apiKeyConfigKey] = apiKey
+          }
+          const baseUrlConfigKey = BASE_URL_CONFIG[slidesProv as AIProvider]
+          if (baseUrlConfigKey) {
+            const baseUrl = formData.get(`BASE_URL_${slidesProv}_slides`) as string
+            if (baseUrl) data[baseUrlConfigKey] = baseUrl
+          }
+        }
+      }
+
       const result = await updateSystemConfig(data)
       setIsSaving(false)
 
@@ -740,6 +782,7 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
               <button type="button" onClick={() => setActiveAiTab('tags')} className={`px-4 py-2.5 text-sm font-medium border-b-2 whitespace-nowrap ${activeAiTab === 'tags' ? 'border-primary text-primary' : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'}`}>🏷️ Tags</button>
               <button type="button" onClick={() => setActiveAiTab('embeddings')} className={`px-4 py-2.5 text-sm font-medium border-b-2 whitespace-nowrap ${activeAiTab === 'embeddings' ? 'border-primary text-primary' : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'}`}>🔍 Embeddings</button>
               <button type="button" onClick={() => setActiveAiTab('chat')} className={`px-4 py-2.5 text-sm font-medium border-b-2 whitespace-nowrap ${activeAiTab === 'chat' ? 'border-primary text-primary' : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'}`}>💬 Chat</button>
+              <button type="button" onClick={() => setActiveAiTab('slides')} className={`px-4 py-2.5 text-sm font-medium border-b-2 whitespace-nowrap ${activeAiTab === 'slides' ? 'border-primary text-primary' : 'border-transparent text-muted-foreground hover:text-foreground hover:border-border'}`}>📑 {t('admin.ai.slidesTab')}</button>
             </div>
           </div>
           <div className="p-6 space-y-6">
@@ -945,6 +988,44 @@ export function AdminSettingsForm({ config }: { config: Record<string, string> }
                 />
               </div>
             </div>
+
+            {/* Slides Provider — dedicated model for deck generation */}
+            <div className={`space-y-4 p-4 border border-border/50 rounded-lg bg-muted/50 ${activeAiTab === 'slides' ? 'block' : 'hidden'}`}>
+              <h3 className="text-base font-semibold flex items-center gap-2">
+                <span>📑</span> {t('admin.ai.slidesProvider')}
+              </h3>
+              <p className="text-xs text-muted-foreground">
+                {t('admin.ai.slidesDescription')}
+              </p>
+
+              <div className="space-y-2">
+                <Label htmlFor="AI_PROVIDER_SLIDES">{t('admin.ai.provider')}</Label>
+                <select
+                  id="AI_PROVIDER_SLIDES"
+                  name="AI_PROVIDER_SLIDES"
+                  value={slidesProvider}
+                  onChange={(e) => {
+                    setSlidesProvider(e.target.value as AIProvider)
+                    setSelectedSlidesModel('')
+                    setDynamicModels((prev) => ({ ...prev, slides: [] }))
+                  }}
+                  className="flex h-10 w-full rounded-md border border-input bg-background px-3 py-2 text-sm ring-offset-background focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2"
+                >
+                  {providerOptions.map((opt) => (
+                    <option key={`slides-${opt.value}`} value={opt.value}>
+                      {opt.label}
+                    </option>
+                  ))}
+                </select>
+              </div>
+
+              <input type="hidden" name="AI_MODEL_SLIDES" value={selectedSlidesModel} />
+              {renderProviderConfig(slidesProvider, 'slides', selectedSlidesModel, setSelectedSlidesModel)}
+
+              <p className="text-xs text-muted-foreground border-t border-border/40 pt-3">
+                {t('admin.ai.slidesQuotaNote')}
+              </p>
+            </div>
           </div>
           <div className="px-6 pb-6 flex flex-col sm:flex-row gap-3 sm:justify-between pt-6">
             <Button type="submit" disabled={isSaving}>{isSaving ? t('admin.ai.saving') : t('admin.ai.saveSettings')}</Button>

memento-note/app/(admin)/admin/user-list.tsx

@@ -3,9 +3,9 @@
 import { useState, useRef, useEffect, useCallback } from 'react'
 import { createPortal } from 'react-dom'
 import { Button } from '@/components/ui/button'
-import { deleteUser, updateUserRole, updateUserSubscription } from '@/app/actions/admin'
+import { deleteUser, updateUserRole, updateUserSubscription, resetUserQuotas } from '@/app/actions/admin'
 import { toast } from 'sonner'
-import { Trash2, Shield, ShieldOff, Crown, ChevronDown } from 'lucide-react'
+import { Trash2, Shield, ShieldOff, Crown, ChevronDown, RotateCcw } from 'lucide-react'
 import { format } from 'date-fns'
 import { useLanguage } from '@/lib/i18n'
 
@@ -91,6 +91,7 @@ export function UserList({ initialUsers }: { initialUsers: any[] }) {
   const { t } = useLanguage()
   const [users, setUsers] = useState(initialUsers)
   const [openDropdown, setOpenDropdown] = useState<string | null>(null)
+  const [resettingId, setResettingId] = useState<string | null>(null)
 
   const handleDelete = async (id: string) => {
     if (!confirm(t('admin.users.confirmDelete'))) return
@@ -103,6 +104,27 @@ export function UserList({ initialUsers }: { initialUsers: any[] }) {
     }
   }
 
+  const handleResetQuotas = async (user: { id: string; email?: string | null; name?: string | null }) => {
+    const label = user.email || user.name || user.id
+    if (!confirm(t('admin.users.confirmResetQuotas', { user: label }))) return
+    setResettingId(user.id)
+    try {
+      const result = await resetUserQuotas(user.id)
+      toast.success(
+        t('admin.users.resetQuotasSuccess', {
+          period: result.period,
+          count: result.featuresReset.length,
+        }),
+      )
+    } catch (e) {
+      toast.error(
+        e instanceof Error ? e.message : t('admin.users.resetQuotasFailed'),
+      )
+    } finally {
+      setResettingId(null)
+    }
+  }
+
   const handleRoleToggle = async (user: any) => {
     const newRole = user.role === 'ADMIN' ? 'USER' : 'ADMIN'
     try {
@@ -163,6 +185,16 @@ export function UserList({ initialUsers }: { initialUsers: any[] }) {
                 <td className="p-4 align-middle">{format(new Date(user.createdAt), 'PP')}</td>
                 <td className="p-4 align-middle text-right">
                   <div className="flex justify-end gap-2">
+                    <Button
+                      variant="ghost"
+                      size="sm"
+                      onClick={() => handleResetQuotas(user)}
+                      disabled={resettingId === user.id}
+                      title={t('admin.users.resetQuotas')}
+                      className="text-amber-700 hover:text-amber-900 dark:text-amber-400 dark:hover:text-amber-200"
+                    >
+                      <RotateCcw className={`h-4 w-4 ${resettingId === user.id ? 'animate-spin' : ''}`} />
+                    </Button>
                     <Button
                       variant="ghost"
                       size="sm"

memento-note/app/(auth)/layout.tsx

@@ -1,27 +1,21 @@
 'use client';
 
-import { LanguageProvider } from '@/lib/i18n/LanguageProvider';
+import { LanguageProvider, useLanguage } from '@/lib/i18n/LanguageProvider';
 import Link from 'next/link';
-import { Globe } from 'lucide-react';
+import { ArrowLeft } from 'lucide-react';
+
+function AuthHeader() {
+  const { t } = useLanguage();
 
-export default function AuthLayout({
-  children,
-}: Readonly<{
-  children: React.ReactNode;
-}>) {
   return (
-    <LanguageProvider>
-      <div className="min-h-screen bg-[#FDFCFB] dark:bg-[#0D0D0D] flex flex-col relative overflow-hidden">
-        <div className="absolute top-[-10%] right-[-10%] w-[50%] h-[50%] bg-[var(--color-brand-accent)]/5 blur-[120px] rounded-full pointer-events-none" />
-        <div className="absolute bottom-[-10%] left-[-10%] w-[50%] h-[50%] bg-[#D4A373]/5 blur-[120px] rounded-full pointer-events-none" />
-
     <header className="p-6 md:p-8 flex justify-between items-center relative z-10">
       <Link
         href="/"
+        aria-label={t('general.back')}
         className="flex items-center gap-2 text-[var(--muted-foreground)] hover:text-[var(--foreground)] transition-colors group"
       >
         <div className="w-8 h-8 rounded-full border border-[var(--border)] flex items-center justify-center group-hover:border-[var(--color-brand-accent)] transition-colors">
-              <Globe size={14} className="group-hover:rotate-12 transition-transform" />
+          <ArrowLeft size={14} className="group-hover:-translate-x-0.5 transition-transform rtl:rotate-180" />
         </div>
       </Link>
 
@@ -34,12 +28,27 @@ export default function AuthLayout({
 
       <div className="w-8" />
     </header>
+  );
+}
+
+export default function AuthLayout({
+  children,
+}: Readonly<{
+  children: React.ReactNode;
+}>) {
+  return (
+    <LanguageProvider>
+      <div className="min-h-screen bg-[#FDFCFB] dark:bg-[#0D0D0D] flex flex-col relative overflow-hidden">
+        <div className="absolute top-[-10%] right-[-10%] w-[50%] h-[50%] bg-[var(--color-brand-accent)]/5 blur-[120px] rounded-full pointer-events-none" />
+        <div className="absolute bottom-[-10%] left-[-10%] w-[50%] h-[50%] bg-[#D4A373]/5 blur-[120px] rounded-full pointer-events-none" />
+
+        <AuthHeader />
 
         <main className="flex-1 flex items-center justify-center p-4 md:p-6 relative z-10">
           <div className="w-full max-w-md">
             {children}
             <p className="text-center mt-8 text-[9px] text-[var(--muted-foreground)] font-bold uppercase tracking-[0.3em] opacity-40 select-none">
-              © 2025 Memento Labs
+              © 2026 Memento
             </p>
           </div>
         </main>

memento-note/app/(main)/insights/page.tsx

@@ -17,14 +17,21 @@ import {
   Clock,
   AlertCircle,
   ChevronRight,
+  ChevronDown,
   Database,
   ArrowRight,
   Menu,
   Network,
   List,
+  Search,
+  ArrowUpDown,
+  X,
 } from 'lucide-react'
 import { toast } from 'sonner'
 import Link from 'next/link'
+import { useNotePeek, NotePeekPanel } from '@/components/note-peek'
+import { createNote } from '@/app/actions/notes'
+import { emitNoteChange } from '@/lib/note-change-sync'
 
 const NetworkGraph = dynamic(
   () => import('@/components/network-graph').then(m => ({ default: m.NetworkGraph })),
@@ -98,9 +105,28 @@ export default function InsightsPage() {
   const [selectedClusterId, setSelectedClusterId] = useState<string | null>(null)
   const [viewMode, setViewMode] = useState<'graph' | 'dashboard'>('dashboard')
   const [graphMode, setGraphMode] = useState<'visual' | 'list'>('visual')
+  const [listFilter, setListFilter] = useState('')
+  const [listSort, setListSort] = useState<'size' | 'alpha' | 'bridges'>('size')
+  /** Un seul cluster déplié à la fois (null = tous repliés) */
+  const [expandedListClusterId, setExpandedListClusterId] = useState<string | null>(null)
+  const [dashboardFilter, setDashboardFilter] = useState('')
+  const [bridgesShowAll, setBridgesShowAll] = useState(false)
+  const [isolatedShowAll, setIsolatedShowAll] = useState(false)
+  const [suggestionsShowAll, setSuggestionsShowAll] = useState(false)
+  const [actingSuggestionKey, setActingSuggestionKey] = useState<string | null>(null)
+  const [dashboardSectionOpen, setDashboardSectionOpen] = useState({
+    recalc: false,
+    isolated: true,
+    bridges: true,
+    suggestions: false,
+  })
   const [lastSyncTime, setLastSyncTime] = useState<string>('')
+  const peek = useNotePeek()
   const prefersReducedMotion = useReducedMotion()
 
+  const DASHBOARD_PREVIEW = 8
+  const SUGGESTIONS_PREVIEW = 3
+
   useEffect(() => {
     loadInitialData()
   }, [])
@@ -124,6 +150,43 @@ export default function InsightsPage() {
     return clusters.filter(c => !networkedIds.has(c.id))
   }, [clusters, bridgeNotes])
 
+  const listClusters = useMemo(() => {
+    const q = listFilter.trim().toLowerCase()
+    const rows = clusters.map(cluster => {
+      const clusterNotes = notes.filter(n => cluster.noteIds.includes(n.id))
+      const clusterBridges = bridgeNotes.filter(b =>
+        b.clustersConnected?.some(cid => String(cid) === cluster.id || cid === cluster.clusterId)
+      )
+      const name =
+        cluster.name ||
+        t('insightsView.clusterFallback', { index: cluster.clusterId })
+      const matchingNotes = q
+        ? clusterNotes.filter(n =>
+            (n.title || '').toLowerCase().includes(q)
+          )
+        : clusterNotes
+      const nameMatches = !q || name.toLowerCase().includes(q)
+      return { cluster, name, clusterNotes, matchingNotes, clusterBridges, nameMatches }
+    })
+
+    const filtered = q
+      ? rows.filter(r => r.nameMatches || r.matchingNotes.length > 0)
+      : rows
+
+    const sorted = [...filtered].sort((a, b) => {
+      if (listSort === 'alpha') return a.name.localeCompare(b.name, locale)
+      if (listSort === 'bridges') {
+        const d = b.clusterBridges.length - a.clusterBridges.length
+        return d !== 0 ? d : b.clusterNotes.length - a.clusterNotes.length
+      }
+      // size (default)
+      const d = b.clusterNotes.length - a.clusterNotes.length
+      return d !== 0 ? d : a.name.localeCompare(b.name, locale)
+    })
+
+    return sorted
+  }, [clusters, notes, bridgeNotes, listFilter, listSort, locale, t])
+
   const bridgeList = useMemo(
     () =>
       bridgeNotes.map(b => ({
@@ -133,6 +196,53 @@ export default function InsightsPage() {
     [bridgeNotes, t]
   )
 
+  const filteredIsolatedClusters = useMemo(() => {
+    const q = dashboardFilter.trim().toLowerCase()
+    if (!q) return isolatedClusters
+    return isolatedClusters.filter(c =>
+      (c.name || t('insightsView.clusterFallback', { index: c.clusterId }))
+        .toLowerCase()
+        .includes(q)
+    )
+  }, [isolatedClusters, dashboardFilter, t])
+
+  const filteredBridgeList = useMemo(() => {
+    const q = dashboardFilter.trim().toLowerCase()
+    const list = [...bridgeList].sort((a, b) => b.bridgeScore - a.bridgeScore)
+    if (!q) return list
+    return list.filter(b => {
+      const titleMatch = b.title.toLowerCase().includes(q)
+      const clusterMatch = b.clustersConnected.some(cid => {
+        const cluster = clusters.find(c => c.id === String(cid))
+        const name =
+          cluster?.name || t('insightsView.clusterFallback', { index: cid })
+        return name.toLowerCase().includes(q)
+      })
+      return titleMatch || clusterMatch
+    })
+  }, [bridgeList, dashboardFilter, clusters, t])
+
+  const visibleIsolatedClusters = isolatedShowAll || dashboardFilter.trim()
+    ? filteredIsolatedClusters
+    : filteredIsolatedClusters.slice(0, DASHBOARD_PREVIEW)
+
+  const visibleBridgeList = bridgesShowAll || dashboardFilter.trim()
+    ? filteredBridgeList
+    : filteredBridgeList.slice(0, DASHBOARD_PREVIEW)
+
+  /** Affiche au plus 2 thèmes (pair de brokerage) ; le reste derrière +N. */
+  const getBridgeThemeSlice = useCallback((clusterIds: number[]) => {
+    const ranked = [...clusterIds].sort((a, b) => {
+      const sizeA = clusters.find(c => c.id === String(a))?.noteIds.length ?? 0
+      const sizeB = clusters.find(c => c.id === String(b))?.noteIds.length ?? 0
+      return sizeB - sizeA
+    })
+    return {
+      primary: ranked.slice(0, 2),
+      extraCount: Math.max(0, ranked.length - 2),
+    }
+  }, [clusters])
+
   // ─── Chargement initial ──────────────────────────────────────────────────────
 
   const loadInitialData = async () => {
@@ -258,9 +368,60 @@ export default function InsightsPage() {
   }
 
   const handleNoteClick = (noteId: string) => {
-    router.push(`/home?openNote=${noteId}`)
+    peek.open(noteId)
   }
 
+  const visibleSuggestions = suggestionsShowAll
+    ? suggestions.slice(0, 12)
+    : suggestions.slice(0, SUGGESTIONS_PREVIEW)
+
+  const handleCreateSuggestion = useCallback(async (s: BridgeSuggestion) => {
+    const key = `${s.clusterAId}-${s.clusterBId}`
+    setActingSuggestionKey(key)
+    try {
+      const html = `<p>${s.suggestedContent.replace(/</g, '&lt;')}</p><p><em>${s.justification.replace(/</g, '&lt;')}</em></p>`
+      const note = await createNote({ title: s.suggestedTitle, content: html })
+      if (!note) throw new Error('create failed')
+      emitNoteChange({ type: 'created', note })
+      await fetch('/api/bridge-notes', {
+        method: 'DELETE',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ clusterAId: s.clusterAId, clusterBId: s.clusterBId }),
+      })
+      setSuggestions(prev =>
+        prev.filter(x => !(x.clusterAId === s.clusterAId && x.clusterBId === s.clusterBId))
+      )
+      toast.success(t('insightsView.suggestions.created'))
+      router.push(`/home?openNote=${note.id}`)
+    } catch {
+      toast.error(t('insightsView.suggestions.createError'))
+    } finally {
+      setActingSuggestionKey(null)
+    }
+  }, [router, t])
+
+  const handleDismissSuggestion = useCallback(async (s: BridgeSuggestion) => {
+    const key = `${s.clusterAId}-${s.clusterBId}`
+    setActingSuggestionKey(key)
+    try {
+      const res = await fetch('/api/bridge-notes', {
+        method: 'DELETE',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ clusterAId: s.clusterAId, clusterBId: s.clusterBId }),
+      })
+      if (!res.ok) throw new Error()
+      setSuggestions(prev =>
+        prev.filter(x => !(x.clusterAId === s.clusterAId && x.clusterBId === s.clusterBId))
+      )
+    } catch {
+      toast.error(t('insightsView.suggestions.dismissError'))
+    } finally {
+      setActingSuggestionKey(null)
+    }
+  }, [t])
+
+  const isRtl = locale === 'fa' || locale === 'ar'
+
   const motionConfig = prefersReducedMotion
     ? { initial: false as const, animate: { opacity: 1, y: 0 }, transition: { duration: 0 } }
     : {}
@@ -274,9 +435,9 @@ export default function InsightsPage() {
       <div className="p-6 sm:p-8 border-b border-border/20 flex flex-col gap-4 sm:flex-row sm:items-center sm:justify-between sticky top-0 bg-[#F9F8F6]/80 dark:bg-[#0D0D0D]/80 backdrop-blur-md z-30 shrink-0">
         <div className="flex items-center gap-4">
           <button
-            className="lg:hidden p-2 -ms-1 text-foreground hover:bg-foreground/5 rounded-lg transition-colors shrink-0 cursor-pointer focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none"
-            onClick={() => window.dispatchEvent(new CustomEvent('open-mobile-sidebar'))}
-            aria-label={t('sidebar.openNavigation') || 'Open navigation'}
+            className="p-2 -ms-1 text-foreground hover:bg-foreground/5 rounded-lg transition-colors shrink-0 cursor-pointer focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none"
+            onClick={() => window.dispatchEvent(new CustomEvent('toggle-insights-sidebar'))}
+            aria-label="Toggle sidebar"
           >
             <Menu size={22} />
           </button>
@@ -432,7 +593,10 @@ export default function InsightsPage() {
                 <Network size={12} /> {t('insightsView.viewGraph')}
               </button>
               <button
-                onClick={() => setGraphMode('list')}
+                onClick={() => {
+                  setGraphMode('list')
+                  if (selectedClusterId) setExpandedListClusterId(selectedClusterId)
+                }}
                 className={`flex items-center gap-1.5 px-3 py-1.5 text-[10px] font-bold uppercase tracking-wider rounded-lg transition-all cursor-pointer focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none ${
                   graphMode === 'list'
                     ? 'bg-ink text-paper dark:bg-white dark:text-black shadow-sm'
@@ -464,53 +628,145 @@ export default function InsightsPage() {
                   untitledLabel={t('insightsView.unknownNote')}
                   resetFocusLabel={t('insightsView.resetFocus')}
                   fitViewLabel={t('insightsView.fitGraphView')}
+                  legendFilterPlaceholder={t('insightsView.legendFilterPlaceholder')}
+                  legendShowMoreLabel={t('insightsView.legendShowMore')}
+                  legendShowLessLabel={t('insightsView.legendShowLess')}
                 />
               </div>
             )}
 
-            {/* Vue liste accessible (a11y fallback) */}
+            {/* Vue liste accessible (accordion + filtre + tri) */}
             {graphMode === 'list' && (
               <div
-                className="flex-1 min-h-0 overflow-y-auto custom-scrollbar space-y-4"
+                className="flex-1 min-h-0 flex flex-col gap-3"
                 role="region"
                 aria-label={t('insightsView.listAriaLabel') || 'Accessible cluster list'}
               >
-                {clusters.map(cluster => {
-                  const clusterNotes = notes.filter(n => cluster.noteIds.includes(n.id))
-                  const clusterBridges = bridgeNotes.filter(b =>
-                    b.clustersConnected?.some(cid => String(cid) === cluster.id)
-                  )
+                <div className="shrink-0 flex flex-col sm:flex-row gap-2">
+                  <div className="relative flex-1 min-w-0">
+                    <Search
+                      size={14}
+                      className="absolute start-3 top-1/2 -translate-y-1/2 text-concrete pointer-events-none"
+                      aria-hidden
+                    />
+                    <input
+                      type="search"
+                      value={listFilter}
+                      onChange={e => setListFilter(e.target.value)}
+                      placeholder={t('insightsView.listFilterPlaceholder')}
+                      aria-label={t('insightsView.listFilterPlaceholder')}
+                      className="w-full bg-white dark:bg-zinc-800/60 border border-border/40 rounded-xl ps-9 pe-3 py-2 text-xs outline-none focus:ring-2 focus:ring-ochre/30 focus:border-ochre/40 transition-all placeholder:text-concrete/70"
+                    />
+                  </div>
+                  <label className="shrink-0 flex items-center gap-1.5 px-3 py-2 rounded-xl bg-white dark:bg-zinc-800/60 border border-border/40 text-[10px] font-bold uppercase tracking-wider text-concrete">
+                    <ArrowUpDown size={12} aria-hidden />
+                    <span className="sr-only">{t('insightsView.listSortLabel')}</span>
+                    <select
+                      value={listSort}
+                      onChange={e => setListSort(e.target.value as 'size' | 'alpha' | 'bridges')}
+                      className="bg-transparent outline-none cursor-pointer text-ink dark:text-dark-ink font-bold uppercase tracking-wider"
+                      aria-label={t('insightsView.listSortLabel')}
+                    >
+                      <option value="size">{t('insightsView.listSortSize')}</option>
+                      <option value="bridges">{t('insightsView.listSortBridges')}</option>
+                      <option value="alpha">{t('insightsView.listSortAlpha')}</option>
+                    </select>
+                  </label>
+                </div>
+
+                <div className="flex-1 min-h-0 overflow-y-auto custom-scrollbar space-y-2">
+                  {listClusters.length === 0 ? (
+                    <p className="text-xs text-concrete text-center py-10 px-4">
+                      {t('insightsView.listFilterEmpty')}
+                    </p>
+                  ) : (
+                    listClusters.map(({ cluster, name, clusterNotes, matchingNotes, clusterBridges, nameMatches }) => {
+                      const isExpanded = expandedListClusterId === cluster.id
+                      const displayNotes = !listFilter.trim() || nameMatches
+                        ? clusterNotes
+                        : matchingNotes
+
                       return (
                         <div
                           key={cluster.id}
-                      className="p-4 rounded-xl bg-white dark:bg-zinc-800 border border-border/30"
+                          className="rounded-xl bg-white dark:bg-zinc-800 border border-border/30 overflow-hidden"
                         >
-                      <div className="flex items-center gap-2 mb-3">
-                        <div className="w-2.5 h-2.5 rounded-full shrink-0" style={{ backgroundColor: cluster.color }} />
-                        <h3 className="text-xs font-bold uppercase tracking-wider text-ink dark:text-dark-ink">
-                          {cluster.name || t('insightsView.clusterFallback', { index: cluster.clusterId })}
+                          <button
+                            type="button"
+                            onClick={() => {
+                              setExpandedListClusterId(prev =>
+                                prev === cluster.id ? null : cluster.id
+                              )
+                              setSelectedClusterId(cluster.id)
+                            }}
+                            aria-expanded={isExpanded}
+                            className="w-full flex items-center gap-2 p-3.5 text-start hover:bg-black/[0.03] dark:hover:bg-white/[0.04] transition-colors cursor-pointer focus-visible:ring-2 focus-visible:ring-inset focus-visible:ring-ochre/50 focus-visible:outline-none"
+                          >
+                            {isExpanded ? (
+                              <ChevronDown size={14} className="text-concrete shrink-0" aria-hidden />
+                            ) : (
+                              <ChevronRight size={14} className="text-concrete shrink-0" aria-hidden />
+                            )}
+                            <div
+                              className="w-2.5 h-2.5 rounded-full shrink-0"
+                              style={{ backgroundColor: cluster.color }}
+                              aria-hidden
+                            />
+                            <h3 className="text-xs font-bold uppercase tracking-wider text-ink dark:text-dark-ink truncate flex-1 min-w-0">
+                              {name}
                             </h3>
-                        <span className="text-[9px] text-concrete ml-auto shrink-0">
+                            <span className="text-[9px] text-concrete shrink-0 tabular-nums">
                               {clusterNotes.length} {t('insightsView.graphNotesLabel')}
-                          {clusterBridges.length > 0 && ` · ${clusterBridges.length} ${t('insightsView.bridgeCount')}`}
+                              {clusterBridges.length > 0 &&
+                                ` · ${clusterBridges.length} ${t('insightsView.bridgeCount')}`}
+                              {listFilter.trim() && matchingNotes.length > 0 && matchingNotes.length < clusterNotes.length && (
+                                <span className="text-ochre">
+                                  {` · ${matchingNotes.length} ${t('insightsView.listFilterMatch')}`}
                                 </span>
-                      </div>
-                      <ul className="space-y-1">
-                        {clusterNotes.map(note => (
+                              )}
+                            </span>
+                          </button>
+
+                          <AnimatePresence initial={false}>
+                            {isExpanded && (
+                              <motion.div
+                                key="notes"
+                                initial={prefersReducedMotion ? false : { height: 0, opacity: 0 }}
+                                animate={{ height: 'auto', opacity: 1 }}
+                                exit={prefersReducedMotion ? undefined : { height: 0, opacity: 0 }}
+                                transition={{ duration: 0.2 }}
+                                className="overflow-hidden"
+                              >
+                                <ul className="px-3 pb-3 space-y-0.5 border-t border-border/20 pt-2">
+                                  {displayNotes.length === 0 ? (
+                                    <li className="px-2.5 py-2 text-[11px] text-concrete">
+                                      {t('insightsView.clusters.emptyCluster')}
+                                    </li>
+                                  ) : (
+                                    displayNotes.map(note => (
                                       <li key={note.id}>
                                         <button
+                                          type="button"
                                           onClick={() => handleNoteClick(note.id)}
-                              className="w-full text-left px-2.5 py-1.5 rounded-lg hover:bg-black/5 dark:hover:bg-white/5 text-xs text-ink dark:text-dark-ink flex items-center gap-2 cursor-pointer transition-colors focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none"
+                                          className="w-full text-start px-2.5 py-1.5 rounded-lg hover:bg-black/5 dark:hover:bg-white/5 text-xs text-ink dark:text-dark-ink flex items-center gap-2 cursor-pointer transition-colors focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none"
                                         >
-                              <ChevronRight size={11} className="text-concrete shrink-0" />
-                              <span className="truncate">{note.title || t('insightsView.unknownNote')}</span>
+                                          <ChevronRight size={11} className="text-concrete shrink-0" aria-hidden />
+                                          <span className="truncate">
+                                            {note.title || t('insightsView.unknownNote')}
+                                          </span>
                                         </button>
                                       </li>
-                        ))}
+                                    ))
+                                  )}
                                 </ul>
+                              </motion.div>
+                            )}
+                          </AnimatePresence>
                         </div>
                       )
-                })}
+                    })
+                  )}
+                </div>
               </div>
             )}
           </div>
@@ -521,7 +777,33 @@ export default function InsightsPage() {
               viewMode === 'dashboard' ? 'flex' : 'hidden lg:flex'
             }`}
           >
-            <div className="p-6 sm:p-8 flex-1 overflow-y-auto custom-scrollbar space-y-10">
+            <div className="p-6 sm:p-8 flex-1 overflow-y-auto custom-scrollbar space-y-8">
+
+              {/* Filtre panneau droit (sticky) */}
+              <div className="sticky top-0 z-20 -mx-1 px-1 pb-2 bg-[#fcfbfa]/95 dark:bg-[#0D0D0D]/90 backdrop-blur-md">
+                <div className="relative">
+                  <Search
+                    size={14}
+                    className="absolute start-3 top-1/2 -translate-y-1/2 text-concrete pointer-events-none"
+                    aria-hidden
+                  />
+                  <input
+                    type="search"
+                    value={dashboardFilter}
+                    onChange={e => {
+                      setDashboardFilter(e.target.value)
+                      if (e.target.value.trim()) {
+                        setBridgesShowAll(true)
+                        setIsolatedShowAll(true)
+                        setDashboardSectionOpen(s => ({ ...s, bridges: true, isolated: true }))
+                      }
+                    }}
+                    placeholder={t('insightsView.dashboardFilterPlaceholder')}
+                    aria-label={t('insightsView.dashboardFilterPlaceholder')}
+                    className="w-full bg-white dark:bg-zinc-800/60 border border-border/40 rounded-xl ps-9 pe-3 py-2.5 text-xs outline-none focus:ring-2 focus:ring-ochre/30 focus:border-ochre/40 transition-all placeholder:text-concrete/70 shadow-sm"
+                  />
+                </div>
+              </div>
 
               {/* Avertissement d'obsolescence (stale banner) */}
               {isStale && !isCalculating && (
@@ -614,7 +896,7 @@ export default function InsightsPage() {
                       {clusters.length}
                     </div>
                     <p className="text-[9px] text-concrete font-medium uppercase mt-1">
-                      {t('insightsView.graphNotesLabel')}
+                      {t('insightsView.stats.themesSubtitle')}
                     </p>
                   </div>
                 </div>
@@ -630,26 +912,48 @@ export default function InsightsPage() {
                       {bridgeNotes.length}
                     </div>
                     <p className="text-[9px] text-concrete font-medium uppercase mt-1">
-                      {t('insightsView.bridgeCount')}
+                      {t('insightsView.stats.bridgesSubtitle')}
                     </p>
                   </div>
                 </div>
               </div>
 
-              {/* ③ Système de Recalcul */}
-              <section className="p-5 rounded-2xl bg-white dark:bg-zinc-800 border border-border/40 shadow-sm space-y-4">
-                <div className="flex items-center justify-between gap-4">
+              {/* ③ Système de Recalcul (replié par défaut) */}
+              <section className="rounded-2xl bg-white dark:bg-zinc-800 border border-border/40 shadow-sm overflow-hidden">
+                <button
+                  type="button"
+                  onClick={() => setDashboardSectionOpen(s => ({ ...s, recalc: !s.recalc }))}
+                  aria-expanded={dashboardSectionOpen.recalc}
+                  className="w-full flex items-center justify-between gap-4 p-5 text-start hover:bg-black/[0.02] dark:hover:bg-white/[0.03] transition-colors cursor-pointer"
+                >
                   <div className="flex items-center gap-2">
                     <Sliders size={15} className="text-ochre" />
                     <h4 className="text-[11px] font-black uppercase tracking-[0.2em] text-ink dark:text-dark-ink">
                       {t('insightsView.recalcSystem.title')}
                     </h4>
                   </div>
+                  <div className="flex items-center gap-2 shrink-0">
                     <span className="flex items-center gap-1 text-[9.5px] font-bold text-emerald-500 uppercase">
                       <CheckCircle2 size={11} /> {t('insightsView.recalcSystem.statusSynced')}
                     </span>
+                    {dashboardSectionOpen.recalc ? (
+                      <ChevronDown size={14} className="text-concrete" aria-hidden />
+                    ) : (
+                      <ChevronRight size={14} className="text-concrete" aria-hidden />
+                    )}
                   </div>
-                <div className="grid grid-cols-2 gap-4 pt-1">
+                </button>
+                <AnimatePresence initial={false}>
+                  {dashboardSectionOpen.recalc && (
+                    <motion.div
+                      initial={prefersReducedMotion ? false : { height: 0, opacity: 0 }}
+                      animate={{ height: 'auto', opacity: 1 }}
+                      exit={prefersReducedMotion ? undefined : { height: 0, opacity: 0 }}
+                      transition={{ duration: 0.2 }}
+                      className="overflow-hidden"
+                    >
+                      <div className="px-5 pb-5 space-y-4 border-t border-border/10 pt-4">
+                        <div className="grid grid-cols-2 gap-4">
                           <div className="space-y-1">
                             <span className="text-[9px] text-concrete block">{t('insightsView.recalcSystem.scheduledCron')}</span>
                             <p className="text-xs text-ink dark:text-dark-ink font-semibold flex items-center gap-1.5">
@@ -673,15 +977,12 @@ export default function InsightsPage() {
                                   })
                                 : '—'}
                             </span>
-                    <span className="font-bold font-mono text-ink dark:text-dark-ink shrink-0 ml-3">
+                            <span className="font-bold font-mono text-ink dark:text-dark-ink shrink-0 ms-3">
                               {embeddingStats
                                 ? `${embeddingStats.indexed} / ${embeddingStats.total}`
                                 : '—'}
                             </span>
                           </div>
-                  <p className="text-[8px] text-concrete italic block leading-relaxed">
-                    {t('insightsView.tipClusters')}
-                  </p>
                           <button
                             type="button"
                             onClick={() => void handleReindexEmbeddings()}
@@ -695,61 +996,122 @@ export default function InsightsPage() {
                             )}
                             {isReindexing ? t('insightsView.mapping') : t('insightsView.resync')}
                           </button>
-                  <span className="text-[8px] text-concrete italic block leading-relaxed">
-                    {t('insightsView.tipClustersAction')}
-                  </span>
                         </div>
+                      </div>
+                    </motion.div>
+                  )}
+                </AnimatePresence>
               </section>
 
               {/* ④ Clusters Isolés */}
-              <section className="space-y-4">
-                <div className="flex items-center justify-between gap-4 px-1">
-                  <div className="flex items-center gap-2">
-                    <AlertCircle size={15} className="text-rose-400" />
-                    <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink">
-                      {t('insightsView.isolatedClusters.title', { count: isolatedClusters.length })}
+              <section className="space-y-3">
+                <button
+                  type="button"
+                  onClick={() => setDashboardSectionOpen(s => ({ ...s, isolated: !s.isolated }))}
+                  aria-expanded={dashboardSectionOpen.isolated}
+                  className="w-full flex items-center justify-between gap-4 px-1 text-start cursor-pointer group"
+                >
+                  <div className="flex items-center gap-2 min-w-0">
+                    <AlertCircle size={15} className="text-rose-400 shrink-0" />
+                    <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink truncate">
+                      {t('insightsView.isolatedClusters.title', { count: filteredIsolatedClusters.length })}
                     </h3>
                   </div>
-                  <span className="text-[9px] text-concrete italic">{t('insightsView.tipIsolatedAction')}</span>
-                </div>
+                  {dashboardSectionOpen.isolated ? (
+                    <ChevronDown size={14} className="text-concrete shrink-0" aria-hidden />
+                  ) : (
+                    <ChevronRight size={14} className="text-concrete shrink-0" aria-hidden />
+                  )}
+                </button>
+                {dashboardSectionOpen.isolated && (
                   <div className="space-y-2">
-                  {isolatedClusters.map(c => (
+                    <p className="text-[10px] text-concrete italic px-1 leading-relaxed">
+                      {t('insightsView.tipIsolatedAction')}
+                    </p>
+                    {visibleIsolatedClusters.map(c => (
                       <motion.div
                         key={c.id}
                         whileHover={prefersReducedMotion ? undefined : { y: -1 }}
                         onClick={() => setSelectedClusterId(c.id)}
                         className="p-3.5 rounded-xl bg-white dark:bg-zinc-800 border border-border/30 hover:border-black/10 dark:hover:border-white/10 flex items-center justify-between cursor-pointer transition-all focus-visible:ring-2 focus-visible:ring-ochre/50 focus-visible:outline-none"
                       >
-                      <div className="flex items-center gap-2.5">
-                        <div className="w-2 h-2 rounded-full" style={{ backgroundColor: c.color }} />
-                        <span className="text-xs font-medium text-ink dark:text-dark-ink">
+                        <div className="flex items-center gap-2.5 min-w-0">
+                          <div className="w-2 h-2 rounded-full shrink-0" style={{ backgroundColor: c.color }} />
+                          <span className="text-xs font-medium text-ink dark:text-dark-ink truncate">
                             {c.name || t('insightsView.clusterFallback', { index: c.clusterId })}
                           </span>
                         </div>
-                      <span className="text-[10px] text-rose-500 font-semibold uppercase tracking-wider bg-rose-500/5 px-2.5 py-0.5 rounded-full border border-rose-500/10">
+                        <span className="text-[10px] text-rose-500 font-semibold uppercase tracking-wider bg-rose-500/5 px-2.5 py-0.5 rounded-full border border-rose-500/10 shrink-0">
                           {t('insightsView.isolatedClusters.badge')}
                         </span>
                       </motion.div>
                     ))}
-                  {isolatedClusters.length === 0 && (
+                    {!dashboardFilter.trim() && filteredIsolatedClusters.length > DASHBOARD_PREVIEW && (
+                      <button
+                        type="button"
+                        onClick={() => setIsolatedShowAll(v => !v)}
+                        className="w-full py-2 text-[10px] font-bold uppercase tracking-widest text-concrete hover:text-ink border border-dashed border-border/50 rounded-xl cursor-pointer"
+                      >
+                        {isolatedShowAll
+                          ? t('insightsView.legendShowLess')
+                          : t('insightsView.legendShowMore', {
+                              count: filteredIsolatedClusters.length - DASHBOARD_PREVIEW,
+                            })}
+                      </button>
+                    )}
+                    {filteredIsolatedClusters.length === 0 && (
                       <div className="p-4 bg-white dark:bg-zinc-800 rounded-xl text-xs text-concrete text-center italic border border-border/20">
-                      {t('insightsView.isolatedClusters.empty')}
+                        {dashboardFilter.trim()
+                          ? t('insightsView.listFilterEmpty')
+                          : t('insightsView.isolatedClusters.empty')}
                       </div>
                     )}
                   </div>
+                )}
               </section>
 
               {/* ⑤ Notes-Ponts Influentes */}
-              <section className="space-y-4">
-                <div className="flex items-center gap-2 px-1">
-                  <Zap size={16} className="text-ochre" />
-                  <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink">
+              <section className="space-y-3">
+                <button
+                  type="button"
+                  onClick={() => setDashboardSectionOpen(s => ({ ...s, bridges: !s.bridges }))}
+                  aria-expanded={dashboardSectionOpen.bridges}
+                  className="w-full flex items-center justify-between gap-4 px-1 text-start cursor-pointer"
+                >
+                  <div className="flex items-center gap-2 min-w-0">
+                    <Zap size={16} className="text-ochre shrink-0" />
+                    <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink truncate">
                       {t('insightsView.bridgeNotes.title')}
+                      <span className="ms-2 text-concrete font-mono normal-case tracking-normal">
+                        ({filteredBridgeList.length})
+                      </span>
                     </h3>
                   </div>
-                <p className="text-[10px] text-concrete italic px-1 -mt-2 leading-relaxed">{t('insightsView.tipBridgeNotes')}</p>
+                  {dashboardSectionOpen.bridges ? (
+                    <ChevronDown size={14} className="text-concrete shrink-0" aria-hidden />
+                  ) : (
+                    <ChevronRight size={14} className="text-concrete shrink-0" aria-hidden />
+                  )}
+                </button>
+                {dashboardSectionOpen.bridges && (
                   <div className="space-y-3">
-                  {bridgeList.map(bridge => (
+                    <p className="text-[10px] text-concrete italic px-1 leading-relaxed">
+                      {t('insightsView.tipBridgeNotes')}
+                    </p>
+                    {visibleBridgeList.map(bridge => {
+                      const { primary, extraCount } = getBridgeThemeSlice(bridge.clustersConnected)
+                      const themeA = clusters.find(c => c.id === String(primary[0]))
+                      const themeB = clusters.find(c => c.id === String(primary[1]))
+                      const nameA =
+                        themeA?.name ||
+                        t('insightsView.clusterFallback', { index: primary[0] ?? 0 })
+                      const nameB =
+                        themeB?.name ||
+                        (primary[1] !== undefined
+                          ? t('insightsView.clusterFallback', { index: primary[1] })
+                          : null)
+
+                      return (
                       <motion.div
                         key={bridge.noteId}
                         whileHover={prefersReducedMotion ? undefined : { x: 4 }}
@@ -759,98 +1121,212 @@ export default function InsightsPage() {
                         role="button"
                         onKeyDown={e => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); handleNoteClick(bridge.noteId) } }}
                       >
-                      <div className="flex items-center justify-between mb-2 gap-4">
-                        <h4 className="text-xs font-semibold text-ink dark:text-dark-ink truncate flex-1 group-hover:text-ochre transition-colors">
+                        <div className="flex items-start justify-between gap-3 mb-3">
+                          <h4 className="text-xs font-semibold text-ink dark:text-dark-ink line-clamp-2 flex-1 group-hover:text-ochre transition-colors">
                             {bridge.title}
                           </h4>
-                        <span className="text-[9.5px] font-bold text-ochre bg-ochre/5 border border-ochre/10 px-2.5 py-0.5 rounded-full shrink-0">
-                          {t('insightsView.bridgeNotes.score', {
+                          <span
+                            className="text-[9.5px] font-bold text-ochre bg-ochre/5 border border-ochre/10 px-2.5 py-0.5 rounded-full shrink-0"
+                            title={t('insightsView.bridgeNotes.scoreHint')}
+                          >
+                            {t('insightsView.bridgeNotes.affinity', {
                               score: (bridge.bridgeScore * 100).toFixed(0),
                             })}
                           </span>
                         </div>
-                      <div className="flex flex-wrap gap-1.5 pt-1.5 border-t border-black/5 dark:border-white/5">
-                        {bridge.clustersConnected.map(cid => {
-                          const cluster = clusters.find(c => c.id === String(cid))
-                          return (
-                            <div
-                              key={cid}
+
+                        {nameB ? (
+                          <div className="flex items-center gap-2 flex-wrap">
+                            <button
+                              type="button"
                               onClick={e => {
                                 e.stopPropagation()
-                                setSelectedClusterId(String(cid))
+                                setSelectedClusterId(String(primary[0]))
                               }}
-                              className="flex items-center gap-1.5 px-2 py-0.5 bg-black/[0.02] dark:bg-white/[0.02] border border-border/30 rounded-md hover:border-concrete/40 transition-colors cursor-pointer"
+                              className="inline-flex items-center gap-1.5 max-w-[42%] px-2 py-1 rounded-lg bg-black/[0.03] dark:bg-white/[0.04] border border-border/30 hover:border-concrete/40 cursor-pointer"
                             >
-                              <div
-                                className="w-1.5 h-1.5 rounded-full"
-                                style={{ backgroundColor: cluster?.color || '#cbd5e1' }}
+                              <span
+                                className="w-2 h-2 rounded-full shrink-0"
+                                style={{ backgroundColor: themeA?.color || '#cbd5e1' }}
                               />
-                              <span className="text-[9.5px] text-concrete font-medium uppercase tracking-wider">
-                                {cluster?.name || t('insightsView.clusterFallback', { index: cid })}
+                              <span className="text-[10px] font-medium text-ink dark:text-dark-ink truncate">
+                                {nameA}
                               </span>
+                            </button>
+                            <span className="text-[10px] font-bold text-ochre shrink-0" aria-hidden>
+                              ↔
+                            </span>
+                            <button
+                              type="button"
+                              onClick={e => {
+                                e.stopPropagation()
+                                setSelectedClusterId(String(primary[1]))
+                              }}
+                              className="inline-flex items-center gap-1.5 max-w-[42%] px-2 py-1 rounded-lg bg-black/[0.03] dark:bg-white/[0.04] border border-border/30 hover:border-concrete/40 cursor-pointer"
+                            >
+                              <span
+                                className="w-2 h-2 rounded-full shrink-0"
+                                style={{ backgroundColor: themeB?.color || '#cbd5e1' }}
+                              />
+                              <span className="text-[10px] font-medium text-ink dark:text-dark-ink truncate">
+                                {nameB}
+                              </span>
+                            </button>
+                            {extraCount > 0 && (
+                              <span className="text-[9px] text-concrete font-bold uppercase tracking-wider">
+                                {t('insightsView.bridgeNotes.moreThemes', { count: extraCount })}
+                              </span>
+                            )}
                           </div>
+                        ) : (
+                          <p className="text-[10px] text-concrete italic">
+                            {t('insightsView.bridgeNotes.needsResync')}
+                          </p>
+                        )}
+                      </motion.div>
                       )
                     })}
-                      </div>
-                    </motion.div>
-                  ))}
-                  {bridgeList.length === 0 && !isCalculating && (
+                    {!dashboardFilter.trim() && filteredBridgeList.length > DASHBOARD_PREVIEW && (
+                      <button
+                        type="button"
+                        onClick={() => setBridgesShowAll(v => !v)}
+                        className="w-full py-2.5 text-[10px] font-bold uppercase tracking-widest text-concrete hover:text-ink border border-dashed border-border/50 rounded-xl cursor-pointer"
+                      >
+                        {bridgesShowAll
+                          ? t('insightsView.legendShowLess')
+                          : t('insightsView.legendShowMore', {
+                              count: filteredBridgeList.length - DASHBOARD_PREVIEW,
+                            })}
+                      </button>
+                    )}
+                    {filteredBridgeList.length === 0 && !isCalculating && (
                       <div className="text-xs text-concrete italic text-center p-6 bg-white dark:bg-zinc-800 rounded-xl border border-border/20">
-                      {t('insightsView.bridgeNotes.empty')}
+                        {dashboardFilter.trim()
+                          ? t('insightsView.listFilterEmpty')
+                          : t('insightsView.bridgeNotes.empty')}
                       </div>
                     )}
                   </div>
+                )}
               </section>
 
-              {/* ⑥ Opportunités de Connexion */}
-              <section className="space-y-4">
-                <div className="flex items-center gap-2 px-1">
-                  <Lightbulb size={16} className="text-indigo-500" />
-                  <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink">
+              {/* ⑥ Opportunités de Connexion (link prediction — top near-miss pairs) */}
+              <section className="space-y-3">
+                <button
+                  type="button"
+                  onClick={() => setDashboardSectionOpen(s => ({ ...s, suggestions: !s.suggestions }))}
+                  aria-expanded={dashboardSectionOpen.suggestions}
+                  className="w-full flex items-center justify-between gap-4 px-1 text-start cursor-pointer"
+                >
+                  <div className="flex items-center gap-2 min-w-0">
+                    <Lightbulb size={16} className="text-indigo-500 shrink-0" />
+                    <h3 className="text-xs font-bold uppercase tracking-[0.2em] text-ink dark:text-dark-ink truncate">
                       {t('insightsView.suggestions.title')}
+                      {suggestions.length > 0 && (
+                        <span className="ms-2 text-concrete font-mono normal-case tracking-normal">
+                          ({Math.min(suggestions.length, 12)})
+                        </span>
+                      )}
                     </h3>
                   </div>
-                <p className="text-[10px] text-concrete italic px-1 -mt-2 leading-relaxed">{t('insightsView.tipSuggestions')}</p>
-                <div className="space-y-4">
-                  {suggestions.map(s => (
+                  {dashboardSectionOpen.suggestions ? (
+                    <ChevronDown size={14} className="text-concrete shrink-0" aria-hidden />
+                  ) : (
+                    <ChevronRight size={14} className="text-concrete shrink-0" aria-hidden />
+                  )}
+                </button>
+                {dashboardSectionOpen.suggestions && (
+                  <div className="space-y-3">
+                    <p className="text-[10px] text-concrete italic px-1 leading-relaxed">
+                      {t('insightsView.tipSuggestions')}
+                    </p>
+                    {visibleSuggestions.map(s => {
+                      const key = `${s.clusterAId}-${s.clusterBId}`
+                      const busy = actingSuggestionKey === key
+                      return (
                         <div
-                      key={`${s.clusterAId}-${s.clusterBId}`}
-                      className="p-6 rounded-2xl bg-gradient-to-br from-indigo-500/5 via-transparent to-transparent border border-indigo-500/10 hover:border-indigo-500/20 transition-all shadow-sm"
+                          key={key}
+                          className="p-4 rounded-xl bg-white dark:bg-zinc-800 border border-indigo-500/15 hover:border-indigo-500/30 transition-all shadow-sm"
                         >
-                      <div className="flex items-center gap-3 mb-4">
-                        <div className="flex -space-x-2 shrink-0">
-                          <div className="w-5 h-5 rounded-full border-2 border-paper bg-indigo-500 flex items-center justify-center text-[9px] text-white font-bold">
-                            A
-                          </div>
-                          <div className="w-5 h-5 rounded-full border-2 border-paper bg-ochre flex items-center justify-center text-[9px] text-white font-bold">
-                            B
-                          </div>
-                        </div>
-                        <span className="text-[9px] font-bold uppercase tracking-wider text-indigo-500/70 truncate">
-                          {t('insightsView.suggestions.bridging', {
-                            clusterA: s.clusterAName,
-                            clusterB: s.clusterBName,
-                          })}
+                          <div className="flex items-start justify-between gap-2 mb-2">
+                            <div className="flex items-center gap-2 min-w-0 flex-1">
+                              <span
+                                className="w-2 h-2 rounded-full shrink-0 bg-indigo-500"
+                                aria-hidden
+                              />
+                              <span className="text-[10px] font-medium text-ink dark:text-dark-ink truncate">
+                                {s.clusterAName}
+                              </span>
+                              <span className="text-[10px] font-bold text-ochre shrink-0" aria-hidden>
+                                ↔
+                              </span>
+                              <span
+                                className="w-2 h-2 rounded-full shrink-0 bg-ochre"
+                                aria-hidden
+                              />
+                              <span className="text-[10px] font-medium text-ink dark:text-dark-ink truncate">
+                                {s.clusterBName}
                               </span>
                             </div>
-                      <h4 className="text-sm font-semibold text-ink dark:text-dark-ink mb-2">
+                            <button
+                              type="button"
+                              disabled={busy}
+                              onClick={() => void handleDismissSuggestion(s)}
+                              className="p-1 rounded-md text-concrete hover:text-ink hover:bg-black/5 dark:hover:bg-white/5 disabled:opacity-50 cursor-pointer"
+                              aria-label={t('insightsView.suggestions.dismiss')}
+                              title={t('insightsView.suggestions.dismiss')}
+                            >
+                              <X size={14} />
+                            </button>
+                          </div>
+                          <h4 className="text-sm font-semibold text-ink dark:text-dark-ink mb-1.5 line-clamp-2">
                             {s.suggestedTitle}
                           </h4>
-                      <p className="text-xs text-muted-ink leading-relaxed mb-4">
+                          <p className="text-[11px] text-muted-ink leading-relaxed line-clamp-2 mb-3">
                             {s.suggestedContent}
                           </p>
-                      <div className="p-3.5 bg-white/60 dark:bg-zinc-800 rounded-xl border border-border/20 text-[10.5px] italic text-concrete flex gap-2">
-                        <Zap size={13} className="shrink-0 text-ochre mt-0.5" />
-                        <span>{s.justification}</span>
+                          <button
+                            type="button"
+                            disabled={busy}
+                            onClick={() => void handleCreateSuggestion(s)}
+                            className="w-full flex items-center justify-center gap-2 px-3 py-2 rounded-lg bg-ink text-paper dark:bg-white dark:text-black text-[10px] font-bold uppercase tracking-widest hover:opacity-90 disabled:opacity-50 transition-opacity cursor-pointer"
+                          >
+                            {busy ? (
+                              <RefreshCw size={12} className="animate-spin" />
+                            ) : (
+                              <Lightbulb size={12} />
+                            )}
+                            {t('insightsView.suggestions.createNote')}
+                          </button>
                         </div>
-                    </div>
-                  ))}
+                      )
+                    })}
+                    {!suggestionsShowAll && suggestions.length > SUGGESTIONS_PREVIEW && (
+                      <button
+                        type="button"
+                        onClick={() => setSuggestionsShowAll(true)}
+                        className="w-full py-2.5 text-[10px] font-bold uppercase tracking-widest text-concrete hover:text-ink border border-dashed border-border/50 rounded-xl cursor-pointer"
+                      >
+                        {t('insightsView.legendShowMore', {
+                          count: Math.min(suggestions.length, 12) - SUGGESTIONS_PREVIEW,
+                        })}
+                      </button>
+                    )}
+                    {suggestionsShowAll && suggestions.length > SUGGESTIONS_PREVIEW && (
+                      <button
+                        type="button"
+                        onClick={() => setSuggestionsShowAll(false)}
+                        className="w-full py-2.5 text-[10px] font-bold uppercase tracking-widest text-concrete hover:text-ink border border-dashed border-border/50 rounded-xl cursor-pointer"
+                      >
+                        {t('insightsView.legendShowLess')}
+                      </button>
+                    )}
                     {isCalculating && (
-                    <div className="animate-pulse space-y-4">
+                      <div className="animate-pulse space-y-3">
                         {[1, 2].map(i => (
                           <div
                             key={i}
-                          className="h-32 bg-indigo-500/5 rounded-2xl border border-indigo-500/10"
+                            className="h-24 bg-indigo-500/5 rounded-xl border border-indigo-500/10"
                           />
                         ))}
                       </div>
@@ -861,6 +1337,7 @@ export default function InsightsPage() {
                       </div>
                     )}
                   </div>
+                )}
               </section>
 
             </div>
@@ -868,6 +1345,16 @@ export default function InsightsPage() {
         </div>
       )}
 
+      {/* ── Peek panel (factorisé) ── */}
+      <NotePeekPanel
+        note={peek.note}
+        blockId={peek.blockId}
+        loading={peek.loading}
+        mode="overlay"
+        onClose={peek.close}
+        onOpenFully={(n) => { router.push(`/home?openNote=${n.id}`); peek.close() }}
+      />
+
     </div>
   )
 }

memento-note/app/(main)/layout.tsx

@@ -35,13 +35,16 @@ export default async function MainLayout({
       initialTranslations={initialTranslations}
       initialAiProcessingConsent={aiSettings?.aiProcessingConsent === true}
     >
-      {/* No top-bar header — sidebar-only navigation (architectural-grid design) */}
-      <div className="flex h-screen overflow-hidden bg-memento-desk dark:bg-background">
-        <Suspense fallback={<div className="hidden w-80 shrink-0 md:block" />}>
+      {/* Fond via --background (suit .dark) — évite le flash beige/clair au changement de route */}
+      <div className="flex h-screen overflow-hidden bg-background">
+        <Suspense fallback={<div className="hidden w-80 md:w-[26rem] 2xl:w-[30rem] shrink-0 md:block h-full self-stretch bg-sidebar" />}>
           <Sidebar user={session?.user} />
         </Suspense>
 
-        <main className="flex min-h-0 flex-1 flex-col overflow-y-auto scroll-smooth bg-memento-paper dark:bg-background">
+        <main className="flex min-h-0 flex-1 flex-col overflow-y-auto scroll-smooth bg-background" id="main-content">
+          <a href="#main-content" className="sr-only focus:not-sr-only focus:absolute focus:z-[9999] focus:top-2 focus:left-2 focus:bg-brand-accent focus:text-white focus:px-4 focus:py-2 focus:rounded-lg focus:text-sm focus:font-bold">
+            Skip to content
+          </a>
           {children}
         </main>
 

memento-note/app/(main)/settings/appearance/appearance-settings-client.tsx

@@ -6,7 +6,7 @@ import { updateUserSettings } from '@/app/actions/user-settings'
 import { useLanguage } from '@/lib/i18n'
 import { toast } from 'sonner'
 import { Palette, Type, LayoutGrid, Maximize } from 'lucide-react'
-import { applyDocumentTheme, normalizeThemeId, type ThemeId } from '@/lib/apply-document-theme'
+import { persistThemePreference, normalizeThemeId, type ThemeId } from '@/lib/apply-document-theme'
 import {
   NOTES_LAYOUT_STORAGE_KEY,
   parseNotesLayoutMode,
@@ -65,8 +65,7 @@ export function AppearanceSettingsClient({
   const handleThemeChange = async (value: string) => {
     const next = normalizeThemeId(value)
     setTheme(next)
-    localStorage.setItem('theme-preference', next)
-    applyDocumentTheme(next)
+    persistThemePreference(next)
     await updateUserSettings({ theme: next })
     toast.success(t('settings.settingsSaved'))
   }

memento-note/app/(main)/settings/integrations/page.tsx

@@ -1,11 +1,13 @@
 'use client'
 
 import { useState, useEffect } from 'react'
-import { BookOpen, Loader2, Check, X, RefreshCw, Trash2, CalendarDays } from 'lucide-react'
+import { BookOpen, Loader2, Check, X, RefreshCw, Trash2, CalendarDays, Mail } from 'lucide-react'
 import { toast } from 'sonner'
 import { SettingsHelpBox } from '@/components/settings/settings-help-box'
+import { useLanguage } from '@/lib/i18n'
 
 export default function IntegrationsPage() {
+  const { t } = useLanguage()
   // ── Readwise ───────────────────────────────────────────────────────────
   const [rwToken, setRwToken] = useState('')
   const [rwConnected, setRwConnected] = useState(false)
@@ -19,32 +21,47 @@ export default function IntegrationsPage() {
   const [calEvents, setCalEvents] = useState<any[]>([])
   const [calFetching, setCalFetching] = useState(false)
 
+  // ── Gmail ────────────────────────────────────────────────────────────
+  const [gmailConnected, setGmailConnected] = useState(false)
+  const [gmailLoading, setGmailLoading] = useState(true)
+  const [gmailRecent, setGmailRecent] = useState(0)
+  const [gmailScanning, setGmailScanning] = useState(false)
+
   const [loading, setLoading] = useState(true)
 
   useEffect(() => {
     Promise.all([
       fetch('/api/integrations/readwise').then((r) => r.json()),
       fetch('/api/integrations/calendar').then((r) => r.json()),
-    ]).then(([rw, cal]) => {
+      fetch('/api/integrations/gmail').then((r) => r.json()),
+    ]).then(([rw, cal, gmail]) => {
       setRwConnected(rw.connected)
       setCalConnected(cal.connected)
+      setGmailConnected(gmail.connected)
+      setGmailRecent(gmail.recentCaptures ?? 0)
     }).finally(() => {
       setLoading(false)
       setCalLoading(false)
+      setGmailLoading(false)
     })
 
     // Handle redirect params
     const params = new URLSearchParams(window.location.search)
     if (params.get('connected') === 'calendar') {
       setCalConnected(true)
-      toast.success('Google Calendar connecté !')
+      toast.success(t('integrations.calendarConnected'))
+      window.history.replaceState({}, '', '/settings/integrations')
+    }
+    if (params.get('connected') === 'gmail') {
+      setGmailConnected(true)
+      toast.success(t('integrations.gmail.connected'))
       window.history.replaceState({}, '', '/settings/integrations')
     }
     if (params.get('error')) {
-      toast.error(`Erreur: ${params.get('error')}`)
+      toast.error(t('integrations.errorWith', { error: params.get('error') || '' }))
       window.history.replaceState({}, '', '/settings/integrations')
     }
-  }, [])
+  }, [t])
 
   // ── Readwise handlers ──────────────────────────────────────────────────
   const handleRwConnect = async () => {
@@ -57,12 +74,12 @@ export default function IntegrationsPage() {
         body: JSON.stringify({ token: rwToken.trim() }),
       })
       const data = await res.json()
-      if (!res.ok) { toast.error(data.error || 'Erreur Readwise'); return }
+      if (!res.ok) { toast.error(data.error || t('integrations.readwiseError')); return }
       setRwConnected(true)
       setRwToken('')
       setRwLastSync({ created: data.created, updated: data.updated })
-      toast.success(`Readwise connecté — ${data.created} notes créées, ${data.updated} mises à jour`)
-    } catch { toast.error('Erreur de connexion Readwise') } finally { setRwConnecting(false) }
+      toast.success(t('integrations.readwiseConnected', { created: data.created, updated: data.updated }))
+    } catch { toast.error(t('integrations.readwiseConnectError')) } finally { setRwConnecting(false) }
   }
 
   const handleRwSync = async () => {
@@ -74,16 +91,16 @@ export default function IntegrationsPage() {
         body: JSON.stringify({}),
       })
       const data = await res.json()
-      if (!res.ok) { toast.error(data.error || 'Erreur de sync'); return }
+      if (!res.ok) { toast.error(data.error || t('integrations.syncError')); return }
       setRwLastSync({ created: data.created, updated: data.updated })
-      toast.success(`Sync Readwise — ${data.created} créées, ${data.updated} mises à jour`)
-    } catch { toast.error('Erreur de synchronisation') } finally { setRwSyncing(false) }
+      toast.success(t('integrations.readwiseSynced', { created: data.created, updated: data.updated }))
+    } catch { toast.error(t('integrations.syncFailed')) } finally { setRwSyncing(false) }
   }
 
   const handleRwDisconnect = async () => {
     await fetch('/api/integrations/readwise', { method: 'DELETE' })
     setRwConnected(false)
-    toast.success('Readwise déconnecté')
+    toast.success(t('integrations.readwiseDisconnected'))
   }
 
   // ── Calendar handlers ──────────────────────────────────────────────────
@@ -96,10 +113,10 @@ export default function IntegrationsPage() {
     try {
       const res = await fetch('/api/integrations/calendar?events=1')
       const data = await res.json()
-      if (!res.ok) { toast.error(data.error || 'Erreur'); return }
+      if (!res.ok) { toast.error(data.error || t('common.error')); return }
       setCalEvents(data.events ?? [])
-      if (data.events.length === 0) toast.info('Aucun événement aujourd\'hui')
-    } catch { toast.error('Erreur de chargement des événements') } finally { setCalFetching(false) }
+      if (data.events.length === 0) toast.info(t('integrations.noEvents'))
+    } catch { toast.error(t('integrations.eventsLoadError')) } finally { setCalFetching(false) }
   }
 
   const handleCreateMeetingNote = async (event: any) => {
@@ -110,11 +127,11 @@ export default function IntegrationsPage() {
     })
     const data = await res.json()
     if (data.success) {
-      toast.success(`Note de réunion créée : ${event.summary}`, {
-        action: { label: 'Ouvrir', onClick: () => window.location.href = `/home?openNote=${data.note.id}` },
+      toast.success(t('integrations.meetingNoteCreated', { summary: event.summary }), {
+        action: { label: t('integrations.open'), onClick: () => window.location.href = `/home?openNote=${data.note.id}` },
       })
     } else {
-      toast.error('Erreur lors de la création de la note')
+      toast.error(t('integrations.createNoteError'))
     }
   }
 
@@ -122,25 +139,114 @@ export default function IntegrationsPage() {
     await fetch('/api/integrations/calendar', { method: 'DELETE' })
     setCalConnected(false)
     setCalEvents([])
-    toast.success('Google Calendar déconnecté')
+    toast.success(t('integrations.calendarDisconnected'))
+  }
+
+  // ── Gmail handlers ─────────────────────────────────────────────────────
+  const handleGmailConnect = () => {
+    window.location.href = '/api/integrations/gmail?connect=1'
+  }
+
+  const handleGmailScan = async () => {
+    setGmailScanning(true)
+    try {
+      const res = await fetch('/api/integrations/gmail?scan=1')
+      const data = await res.json()
+      if (!res.ok) { toast.error(data.error || t('common.error')); return }
+      setGmailRecent(prev => prev + (data.created ?? 0))
+      toast.success(t('integrations.gmail.scanDone', { created: data.created ?? 0 }))
+    } catch {
+      toast.error(t('integrations.gmailScanError'))
+    } finally {
+      setGmailScanning(false)
+    }
+  }
+
+  const handleGmailDisconnect = async () => {
+    await fetch('/api/integrations/gmail', { method: 'DELETE' })
+    setGmailConnected(false)
+    setGmailRecent(0)
+    toast.success(t('integrations.gmail.disconnected'))
   }
 
   const StatusBadge = ({ connected }: { connected: boolean }) =>
     connected ? (
       <span className="flex items-center gap-1.5 text-[11px] font-semibold text-emerald-700 dark:text-emerald-300 bg-emerald-50 dark:bg-emerald-950/40 border border-emerald-200 dark:border-emerald-800/50 rounded-full px-2.5 py-1">
-        <Check size={11} /> Connecté
+        <Check size={11} /> {t('integrations.connected')}
       </span>
     ) : (
       <span className="flex items-center gap-1.5 text-[11px] font-semibold text-concrete bg-border/20 border border-border/40 rounded-full px-2.5 py-1">
-        <X size={11} /> Non connecté
+        <X size={11} /> {t('integrations.notConnected')}
       </span>
     )
 
   return (
     <div className="space-y-8">
       <div>
-        <h2 className="text-2xl font-serif font-medium text-ink italic tracking-tight">Intégrations</h2>
-        <p className="text-sm text-concrete mt-1">Connectez des services externes à Memento.</p>
+        <h2 className="text-2xl font-serif font-medium text-ink italic tracking-tight">{t('settings.integrationsTitle')}</h2>
+        <p className="text-sm text-concrete mt-1">{t('settings.integrationsDesc')}</p>
+      </div>
+
+      {/* ── Gmail ──────────────────────────────────────────────────────── */}
+      <div className="border border-border/40 rounded-2xl p-6 bg-paper space-y-4">
+        <div className="flex items-start justify-between gap-4">
+          <div className="flex items-center gap-3">
+            <div className="w-10 h-10 rounded-xl bg-red-100 dark:bg-red-900/30 flex items-center justify-center">
+              <Mail size={20} className="text-red-600 dark:text-red-400" />
+            </div>
+            <div>
+              <h3 className="font-semibold text-ink text-sm">{t('integrations.gmail.title')}</h3>
+              <p className="text-[12px] text-concrete">{t('integrations.gmail.description')}</p>
+            </div>
+          </div>
+          {gmailLoading ? <Loader2 size={16} className="animate-spin text-concrete mt-2" /> : <StatusBadge connected={gmailConnected} />}
+        </div>
+
+        {!gmailConnected ? (
+          <div className="space-y-3">
+            <SettingsHelpBox
+              title={t('integrations.gmail.helpTitle')}
+              steps={[
+                { text: t('integrations.gmail.helpStep1') },
+                { text: t('integrations.gmail.helpStep2') },
+                { text: t('integrations.gmail.helpStep3') },
+                { text: t('integrations.gmail.helpStep4') },
+              ]}
+            />
+            <button
+              onClick={handleGmailConnect}
+              className="px-4 py-2 text-sm font-semibold bg-ink text-paper rounded-xl hover:bg-ink/80 transition-all flex items-center gap-2"
+            >
+              <Mail size={14} />
+              {t('integrations.gmail.connect')}
+            </button>
+          </div>
+        ) : (
+          <div className="space-y-3">
+            <div className="flex flex-wrap gap-2">
+              <button
+                onClick={handleGmailScan}
+                disabled={gmailScanning}
+                className="flex items-center gap-2 px-4 py-2 text-sm font-semibold border border-border/40 rounded-xl hover:bg-ink/5 transition-all disabled:opacity-50"
+              >
+                {gmailScanning ? <Loader2 size={14} className="animate-spin" /> : <RefreshCw size={14} />}
+                {t('integrations.gmail.scanNow')}
+              </button>
+              <button
+                onClick={handleGmailDisconnect}
+                className="flex items-center gap-2 px-4 py-2 text-sm font-semibold text-rose-600 dark:text-rose-400 border border-rose-200 dark:border-rose-800/40 rounded-xl hover:bg-rose-50 dark:hover:bg-rose-950/20 transition-all"
+              >
+                <Trash2 size={14} />
+                {t('integrations.gmail.disconnect')}
+              </button>
+            </div>
+            {gmailRecent > 0 && (
+              <p className="text-[11px] text-concrete">
+                {t('integrations.gmail.recentCaptures', { count: gmailRecent })}
+              </p>
+            )}
+          </div>
+        )}
       </div>
 
       {/* ── Google Calendar ────────────────────────────────────────────── */}
@@ -152,7 +258,7 @@ export default function IntegrationsPage() {
             </div>
             <div>
               <h3 className="font-semibold text-ink text-sm">Google Calendar</h3>
-              <p className="text-[12px] text-concrete">Accédez à vos événements et créez des notes de réunion</p>
+              <p className="text-[12px] text-concrete">{t('integrations.calendarDesc')}</p>
             </div>
           </div>
           {calLoading ? <Loader2 size={16} className="animate-spin text-concrete mt-2" /> : <StatusBadge connected={calConnected} />}
@@ -161,12 +267,12 @@ export default function IntegrationsPage() {
         {!calConnected ? (
           <div className="space-y-3">
             <SettingsHelpBox
-              title="Comment fonctionne Google Calendar ?"
+              title={t('integrations.calendarInfo')}
               steps={[
-                { text: 'Cliquez "Connecter Google Calendar" — vous serez redirigé vers Google pour autoriser l\'accès.' },
-                { text: 'Une fois connecté, revenez ici et cliquez "Événements aujourd\'hui" pour voir votre agenda.' },
-                { text: 'Sur chaque événement, cliquez "+ Note" pour créer automatiquement une note de réunion avec template (Ordre du jour / Notes / Actions).' },
-                { text: 'La note s\'ouvre directement dans Memento — ajoutez vos notes en temps réel pendant la réunion.' },
+                { text: t('integrations.calendarHelpStep1') },
+                { text: t('integrations.calendarHelpStep2') },
+                { text: t('integrations.calendarHelpStep3') },
+                { text: t('integrations.calendarHelpStep4') },
               ]}
             />
             <button
@@ -174,7 +280,7 @@ export default function IntegrationsPage() {
               className="px-4 py-2 text-sm font-semibold bg-ink text-paper rounded-xl hover:bg-ink/80 transition-all flex items-center gap-2"
             >
               <CalendarDays size={14} />
-              Connecter Google Calendar
+              {t('integrations.connectCalendar')}
             </button>
           </div>
         ) : (
@@ -186,14 +292,14 @@ export default function IntegrationsPage() {
                 className="flex items-center gap-2 px-4 py-2 text-sm font-semibold border border-border/40 rounded-xl hover:bg-ink/5 transition-all disabled:opacity-50"
               >
                 {calFetching ? <Loader2 size={14} className="animate-spin" /> : <CalendarDays size={14} />}
-                Événements aujourd&apos;hui
+                {t('integrations.todayEvents')}
               </button>
               <button
                 onClick={handleCalDisconnect}
                 className="flex items-center gap-2 px-4 py-2 text-sm font-semibold text-rose-600 dark:text-rose-400 border border-rose-200 dark:border-rose-800/40 rounded-xl hover:bg-rose-50 dark:hover:bg-rose-950/20 transition-all"
               >
                 <Trash2 size={14} />
-                Déconnecter
+                {t('integrations.disconnect')}
               </button>
             </div>
 
@@ -211,7 +317,7 @@ export default function IntegrationsPage() {
                       onClick={() => handleCreateMeetingNote(ev)}
                       className="shrink-0 text-[11px] font-semibold px-3 py-1.5 border border-border/40 rounded-full hover:bg-ink/5 transition-all"
                     >
-                      + Note
+                      {t('integrations.addNote')}
                     </button>
                   </div>
                 ))}
@@ -230,20 +336,20 @@ export default function IntegrationsPage() {
             </div>
             <div>
               <h3 className="font-semibold text-ink text-sm">Readwise</h3>
-              <p className="text-[12px] text-concrete">Importez vos surlignages de livres, articles et Kindle</p>
+              <p className="text-[12px] text-concrete">{t('integrations.readwiseDesc')}</p>
             </div>
           </div>
           {loading ? <Loader2 size={16} className="animate-spin text-concrete mt-2" /> : <StatusBadge connected={rwConnected} />}
         </div>
 
         <SettingsHelpBox
-          title="Comment fonctionne Readwise ?"
+          title={t('integrations.readwiseInfo')}
           steps={[
-            { text: 'Copiez votre token d\'accès Readwise.', link: { label: 'readwise.io/access_token', href: 'https://readwise.io/access_token' } },
-            { text: 'Collez-le dans le champ ci-dessous et cliquez "Connecter". La première synchronisation importe tous vos livres et articles.' },
-            { text: 'Chaque livre devient une note dans un carnet "Readwise 📚" — avec tous vos surlignages organisés.' },
-            { text: 'Pour mettre à jour avec de nouveaux surlignages, revenez ici et cliquez "Synchroniser maintenant".' },
-            { icon: '💡', text: 'Astuce : créez des flashcards IA depuis une note Readwise (bouton 🎓 dans l\'éditeur) pour réviser vos lectures.' },
+            { text: t('integrations.readwiseHelpStep1'), link: { label: 'readwise.io/access_token', href: 'https://readwise.io/access_token' } },
+            { text: t('integrations.readwiseHelpStep2') },
+            { text: t('integrations.readwiseHelpStep3') },
+            { text: t('integrations.readwiseHelpStep4') },
+            { icon: '💡', text: t('integrations.readwiseHelpStep5') },
           ]}
         />
 
@@ -254,7 +360,7 @@ export default function IntegrationsPage() {
                 type="password"
                 value={rwToken}
                 onChange={(e) => setRwToken(e.target.value)}
-                placeholder="Token Readwise…"
+                placeholder={t('integrations.readwiseTokenPlaceholder')}
                 className="flex-1 text-sm border border-border/40 rounded-xl px-3 py-2 bg-paper text-ink placeholder:text-concrete/50 focus:outline-none focus:ring-1 focus:ring-brand-accent/40"
                 onKeyDown={(e) => e.key === 'Enter' && handleRwConnect()}
               />
@@ -264,7 +370,7 @@ export default function IntegrationsPage() {
                 className="px-4 py-2 text-sm font-semibold bg-ink text-paper rounded-xl hover:bg-ink/80 transition-all disabled:opacity-50 flex items-center gap-2"
               >
                 {rwConnecting ? <Loader2 size={14} className="animate-spin" /> : null}
-                Connecter
+                {t('integrations.connect')}
               </button>
             </div>
           </div>
@@ -278,28 +384,28 @@ export default function IntegrationsPage() {
               className="flex items-center gap-2 px-4 py-2 text-sm font-semibold border border-border/40 rounded-xl hover:bg-ink/5 transition-all disabled:opacity-50"
             >
               {rwSyncing ? <Loader2 size={14} className="animate-spin" /> : <RefreshCw size={14} />}
-              Synchroniser maintenant
+              {t('integrations.syncNow')}
             </button>
             <button
               onClick={handleRwDisconnect}
               className="flex items-center gap-2 px-4 py-2 text-sm font-semibold text-rose-600 dark:text-rose-400 border border-rose-200 dark:border-rose-800/40 rounded-xl hover:bg-rose-50 dark:hover:bg-rose-950/20 transition-all"
             >
               <Trash2 size={14} />
-              Déconnecter
+              {t('integrations.disconnect')}
             </button>
           </div>
         )}
 
         {rwLastSync && (
           <p className="text-[11px] text-concrete">
-            Dernière sync : <strong>{rwLastSync.created}</strong> notes créées, <strong>{rwLastSync.updated}</strong> mises à jour
+            {t('integrations.lastSync')} <strong>{rwLastSync.created}</strong> {t('integrations.createdLabel')}, <strong>{rwLastSync.updated}</strong> {t('integrations.updatedLabel')}
           </p>
         )}
       </div>
 
       {/* Placeholder */}
       <div className="border border-dashed border-border/40 rounded-2xl p-6 text-center">
-        <p className="text-sm text-concrete italic">D'autres intégrations arrivent bientôt — Zapier, GitHub, Notion import…</p>
+        <p className="text-sm text-concrete italic">{t('integrations.moreComing')}</p>
       </div>
     </div>
   )

memento-note/app/(main)/settings/layout.tsx

@@ -11,21 +11,21 @@ export default function SettingsLayout({
 }) {
     const { t } = useLanguage()
     return (
-        <div className="flex flex-col h-full bg-[#F2F0E9] dark:bg-dark-paper">
+        <div className="flex flex-col h-full bg-[#F2F0E9] dark:bg-zinc-950">
             <header className="px-4 sm:px-8 md:px-12 pt-8 sm:pt-14 md:pt-20 pb-6 sm:pb-10 md:pb-16 space-y-6 sm:space-y-10 md:space-y-12 shrink-0">
                 <div className="flex items-start gap-3">
                     <button
-                        className="md:hidden p-2 -ms-1 text-ink/70 hover:bg-ink/5 rounded-lg transition-colors shrink-0 mt-1"
+                        className="md:hidden p-2 -ms-1 text-ink dark:text-zinc-200 hover:bg-ink/5 dark:hover:bg-white/10 rounded-lg transition-colors shrink-0 mt-1"
                         onClick={() => window.dispatchEvent(new CustomEvent('open-mobile-sidebar'))}
                         aria-label={t('settings.title')}
                     >
                         <Menu size={22} />
                     </button>
                     <div>
-                        <h1 className="text-3xl sm:text-5xl md:text-[64px] font-serif text-ink tracking-tight leading-none italic font-medium">
+                        <h1 className="text-3xl sm:text-5xl md:text-[64px] font-serif text-ink dark:text-zinc-50 tracking-tight leading-none italic font-medium">
                             {t('settings.title')}
                         </h1>
-                        <p className="text-[10px] font-bold uppercase tracking-[0.4em] text-concrete opacity-60 mt-4">
+                        <p className="text-[10px] font-bold uppercase tracking-[0.4em] text-concrete dark:text-zinc-500 opacity-60 mt-4">
                             {t('settings.description')}
                         </p>
                     </div>

memento-note/app/(main)/settings/mcp/mcp-settings-header.tsx

@@ -0,0 +1,22 @@
+'use client'
+
+import { useLanguage } from '@/lib/i18n'
+import { SettingsHelpBox } from '@/components/settings/settings-help-box'
+
+export function McpSettingsHeader() {
+  const { t } = useLanguage()
+
+  return (
+    <SettingsHelpBox
+      title={t('mcpSettings.helpBox.title')}
+      defaultOpen={true}
+      steps={[
+        { text: t('mcpSettings.helpBox.step1') },
+        { text: t('mcpSettings.helpBox.step2') },
+        { text: t('mcpSettings.helpBox.step3') },
+        { text: t('mcpSettings.helpBox.step4'), link: { label: t('mcpSettings.helpBox.step4Link'), href: 'https://modelcontextprotocol.io/docs' } },
+        { icon: '⚡', text: t('mcpSettings.helpBox.step5') },
+      ]}
+    />
+  )
+}

memento-note/app/(main)/settings/mcp/page.tsx

@@ -1,32 +1,23 @@
 import { auth } from '@/auth'
 import { redirect } from 'next/navigation'
 import { McpSettingsPanel } from '@/components/mcp/mcp-settings-panel'
-import { listMcpKeys, getMcpServerStatus } from '@/app/actions/mcp-keys'
-import { SettingsHelpBox } from '@/components/settings/settings-help-box'
+import { listMcpKeys, getMcpServerStatus, getMcpAccessStatus } from '@/app/actions/mcp-keys'
+import { McpSettingsHeader } from './mcp-settings-header'
 
 export default async function McpSettingsPage() {
   const session = await auth()
   if (!session?.user) redirect('/api/auth/signin')
 
-  const [keys, serverStatus] = await Promise.all([
+  const [keys, serverStatus, access] = await Promise.all([
     listMcpKeys(),
     getMcpServerStatus(),
+    getMcpAccessStatus(),
   ])
 
   return (
     <div className="space-y-8">
-      <SettingsHelpBox
-        title="Qu'est-ce que MCP (Model Context Protocol) ?"
-        defaultOpen={true}
-        steps={[
-          { text: 'MCP est un protocole qui permet aux agents IA de Memento de se connecter à des outils externes (bases de données, APIs, fichiers, etc.).' },
-          { text: 'Memento expose un serveur MCP avec 22 outils — vos agents peuvent lire/créer des notes, chercher dans votre base, gérer les carnets, etc.' },
-          { text: 'Créez une clé API ici, puis configurez-la dans votre client MCP (Claude Desktop, Cursor, Continue.dev…) avec l\'URL du serveur.' },
-          { text: 'Format de configuration : URL du serveur MCP + votre clé dans le header Authorization.', link: { label: 'Documentation MCP', href: 'https://modelcontextprotocol.io/docs' } },
-          { icon: '⚡', text: 'Cas d\'usage : demandez à Claude Desktop d\'écrire une note dans Memento, de chercher dans vos carnets, ou de créer un agent.' },
-        ]}
-      />
-      <McpSettingsPanel initialKeys={keys} serverStatus={serverStatus} />
+      <McpSettingsHeader />
+      <McpSettingsPanel initialKeys={keys} serverStatus={serverStatus} mcpAllowed={access.allowed} tier={access.tier} />
     </div>
   )
 }

memento-note/app/(main)/template.tsx

@@ -1,16 +1,12 @@
-'use client'
-
-import { motion } from 'motion/react'
-
+/**
+ * Plus d’animation d’entrée (opacity / translate) :
+ * ça laissait voir le fond clair une fraction de seconde en mode sombre.
+ * Conteneur neutre uniquement.
+ */
 export default function MainTemplate({ children }: { children: React.ReactNode }) {
   return (
-    <motion.div
-      initial={{ opacity: 0, x: 20 }}
-      animate={{ opacity: 1, x: 0 }}
-      transition={{ duration: 0.3 }}
-      className="flex-1 flex flex-col min-h-0"
-    >
+    <div className="flex min-h-0 flex-1 flex-col bg-background text-foreground">
       {children}
-    </motion.div>
+    </div>
   )
 }

memento-note/app/(main)/trash/trash-client.tsx

@@ -17,7 +17,6 @@ import {
 } from 'lucide-react'
 import { Note, Notebook } from '@/lib/types'
 import { restoreNote, permanentDeleteNote, emptyTrash } from '@/app/actions/notes'
-import { restoreNotebook, permanentDeleteNotebook } from '@/context/notebooks-context'
 import { useLanguage } from '@/lib/i18n'
 import { toast } from 'sonner'
 import { useNotebooks } from '@/context/notebooks-context'

memento-note/app/(public)/layout.tsx

@@ -3,6 +3,12 @@ import { detectUserLanguage, parseAcceptLanguage } from '@/lib/i18n/detect-user-
 import { loadTranslations } from '@/lib/i18n/load-translations'
 import { PublicProviders } from '@/components/public-providers'
 
+/**
+ * Le body racine est en hauteur d’écran avec débordement masqué
+ * (pour l’application connectée). Les pages publiques (accueil, tarifs,
+ * notes publiées) doivent pouvoir défiler : on crée un conteneur de
+ * défilement qui couvre tout l’écran, indépendant du body.
+ */
 export default async function PublicLayout({ children }: { children: React.ReactNode }) {
   const headersList = await headers()
   const browserLang = parseAcceptLanguage(headersList.get('accept-language'))
@@ -11,7 +17,13 @@ export default async function PublicLayout({ children }: { children: React.React
 
   return (
     <PublicProviders initialLanguage={initialLanguage} initialTranslations={initialTranslations}>
+      <div
+        data-public-scroll-root
+        className="fixed inset-0 z-[1] h-[100dvh] w-full overflow-y-auto overflow-x-hidden overscroll-y-contain"
+        style={{ WebkitOverflowScrolling: 'touch', touchAction: 'pan-y' }}
+      >
         {children}
+      </div>
     </PublicProviders>
   )
 }

memento-note/app/actions/admin-billing.ts

@@ -7,6 +7,7 @@ import { VALID_FEATURES, getCurrentPeriodKey } from '@/lib/quota-utils'
 import {
   getAllEntitlementsForAdmin,
   invalidateEntitlementCache,
+  ENTITLEMENT_UNAVAILABLE,
   type SubscriptionTier as TierType,
 } from '@/lib/plan-entitlements'
 import { logAuditEventAsync } from '@/lib/audit-log'
@@ -18,6 +19,9 @@ const BILLING_CONFIG_KEYS = [
   'STRIPE_PRICE_PRO_ANNUAL',
   'STRIPE_PRICE_BUSINESS_MONTHLY',
   'STRIPE_PRICE_BUSINESS_ANNUAL',
+  'STRIPE_PRICE_CREDITS_S',
+  'STRIPE_PRICE_CREDITS_M',
+  'STRIPE_PRICE_CREDITS_L',
 ] as const
 
 const TIERS: TierType[] = ['BASIC', 'PRO', 'BUSINESS', 'ENTERPRISE']
@@ -53,7 +57,42 @@ export async function getBillingAdminData() {
     BILLING_CONFIG_KEYS.map((key) => [key, config[key] ?? '']),
   )
 
-  return { entitlements, billingConfig, usageOverview, features: [...VALID_FEATURES], tiers: TIERS }
+  const { CREDIT_ALLOCATIONS, CREDIT_COSTS, slideGenerateCreditCost } = await import('@/lib/credits')
+  const { CREDIT_PACKS, CREDIT_PACK_IDS } = await import('@/lib/billing/credit-packs')
+
+  const creditAllocations = TIERS.map((tier) => {
+    const raw = CREDIT_ALLOCATIONS[tier]
+    return {
+      tier,
+      monthlyCredits: raw === 'unlimited' ? null : raw,
+      unlimited: raw === 'unlimited',
+    }
+  })
+
+  const creditCosts = {
+    ...CREDIT_COSTS,
+    slide_generate_example: slideGenerateCreditCost(7),
+  }
+
+  const creditPacks = CREDIT_PACK_IDS.map((id) => {
+    const p = CREDIT_PACKS[id]
+    return {
+      id: p.id,
+      credits: p.credits,
+      defaultDisplay: p.defaultDisplay,
+    }
+  })
+
+  return {
+    entitlements,
+    billingConfig,
+    usageOverview,
+    features: [...VALID_FEATURES],
+    tiers: TIERS,
+    creditAllocations,
+    creditCosts,
+    creditPacks,
+  }
 }
 
 export async function updatePlanEntitlement(
@@ -73,9 +112,20 @@ export async function updatePlanEntitlement(
   }
 
   if (mode === 'unavailable') {
-    await prisma.planEntitlement.deleteMany({
-      where: { tier: tier as SubscriptionTier, feature },
-    })
+    await prisma.planEntitlement.upsert({
+      where: {
+        tier_feature: {
+          tier: tier as SubscriptionTier,
+          feature,
+        },
+      },
+      update: { limitValue: ENTITLEMENT_UNAVAILABLE },
+      create: {
+        tier: tier as SubscriptionTier,
+        feature,
+        limitValue: ENTITLEMENT_UNAVAILABLE,
+      },
+    });
   } else {
     await prisma.planEntitlement.upsert({
       where: {
@@ -158,7 +208,7 @@ export async function updateBillingConfig(data: Record<string, string>) {
 
 async function getUsageOverviewInternal() {
   const period = getCurrentPeriodKey()
-  const periodStart = new Date(`${period}-01`)
+  const periodStart = new Date(`${period}-01T00:00:00.000Z`)
 
   const aggregated = await prisma.usageLog.groupBy({
     by: ['feature'],

memento-note/app/actions/admin-settings.ts

@@ -42,24 +42,47 @@ export async function getSystemConfig() {
   return getCachedConfig()
 }
 
+/** Keys that may be cleared (empty string) to fall back to chat / defaults. */
+const CLEARABLE_CONFIG_KEYS = new Set([
+  'AI_PROVIDER_SLIDES',
+  'AI_MODEL_SLIDES',
+])
+
 export async function updateSystemConfig(data: Record<string, string>) {
   await checkAdmin()
 
   try {
-    // Filter out empty values but keep 'false' as valid
-    const filteredData = Object.fromEntries(
-      Object.entries(data).filter(([key, value]) => value !== '' && value !== null && value !== undefined)
-    )
+    // Filter out empty values but keep 'false' as valid.
+    // Slides provider/model may be empty intentionally (= use Chat fallback).
+    const toUpsert: Record<string, string> = {}
+    const toDelete: string[] = []
 
-    const operations = Object.entries(filteredData).map(([key, value]) =>
+    for (const [key, value] of Object.entries(data)) {
+      if (value === null || value === undefined) continue
+      if (value === '' && CLEARABLE_CONFIG_KEYS.has(key)) {
+        toDelete.push(key)
+        continue
+      }
+      if (value === '') continue
+      toUpsert[key] = value
+    }
+
+    const operations = [
+      ...Object.entries(toUpsert).map(([key, value]) =>
         prisma.systemConfig.upsert({
           where: { key },
           update: { value },
-        create: { key, value }
-      })
-    )
+          create: { key, value },
+        }),
+      ),
+      ...toDelete.map((key) =>
+        prisma.systemConfig.deleteMany({ where: { key } }),
+      ),
+    ]
 
+    if (operations.length > 0) {
       await prisma.$transaction(operations)
+    }
 
     return { success: true }
   } catch (error) {

memento-note/app/actions/admin.ts

@@ -186,3 +186,60 @@ export async function updateUserSubscription(userId: string, tier: string) {
     throw new Error('Failed to update subscription')
   }
 }
+
+/**
+ * Remet à zéro les crédits IA + anciens compteurs feature du mois pour un utilisateur.
+ * @param feature (optionnel, legacy) — le reset crédits est global ; feature ignorée pour le solde.
+ */
+export async function resetUserQuotas(userId: string, feature?: string) {
+  const session = await checkAdmin()
+
+  if (!userId?.trim()) {
+    throw new Error('Identifiant utilisateur manquant')
+  }
+
+  const user = await prisma.user.findUnique({
+    where: { id: userId },
+    select: { id: true, email: true },
+  })
+  if (!user) {
+    throw new Error('Utilisateur introuvable')
+  }
+
+  // Nouveau système : solde de crédits global
+  const { adminResetCredits } = await import('@/lib/credits')
+  const balance = await adminResetCredits(userId, { clearPurchased: false })
+
+  // Ancien système feature (compat / métriques)
+  const { resetUserUsageForCurrentPeriod } = await import('@/lib/entitlements')
+  const legacy = await resetUserUsageForCurrentPeriod(
+    userId,
+    feature ? { features: [feature] } : undefined,
+  )
+
+  const { logAuditEventAsync } = await import('@/lib/audit-log')
+  await logAuditEventAsync({
+    userId: session.user?.id,
+    action: 'QUOTA_RESET',
+    resource: userId,
+    metadata: {
+      targetUserId: userId,
+      targetEmail: user.email,
+      period: balance.period,
+      creditsRemaining: balance.unlimited ? 'unlimited' : balance.totalRemaining,
+      legacyFeaturesReset: legacy.featuresReset,
+      scope: feature || 'all',
+    },
+  })
+
+  revalidatePath('/admin')
+  revalidatePath('/admin/users')
+  return {
+    success: true as const,
+    period: balance.period,
+    featuresReset: legacy.featuresReset,
+    redisDeleted: legacy.redisDeleted,
+    dbUpdated: legacy.dbUpdated,
+    creditsRemaining: balance.unlimited ? null : balance.totalRemaining,
+  }
+}

memento-note/app/actions/agent-actions.ts

@@ -240,10 +240,10 @@ export async function runAgent(id: string) {
     return { success: false, agentId: id, error: 'Agent introuvable' }
   }
 
-  // Fire and forget — return immediately so the UI doesn't block
-  import('@/lib/ai/services/agent-executor.service')
-    .then(({ executeAgent }) => executeAgent(id, userId))
-    .then(() => { /* revalidation is handled client-side via polling */ })
+  // Load module first so import failures surface immediately (not silently after response)
+  const { executeAgent } = await import('@/lib/ai/services/agent-executor.service')
+
+  void executeAgent(id, userId)
     .catch(err => console.error('[runAgent] Background error:', err))
 
   return { success: true, agentId: id, status: 'running' }
@@ -319,9 +319,35 @@ export async function toggleAgent(id: string, isEnabled: boolean) {
   }
 
   try {
+    const existing = await prisma.agent.findFirst({
+      where: { id, userId: session.user.id },
+      select: {
+        id: true,
+        frequency: true,
+        scheduledTime: true,
+        scheduledDay: true,
+        timezone: true,
+        nextRun: true,
+      },
+    })
+    if (!existing) throw new Error('Agent introuvable')
+
+    const data: { isEnabled: boolean; nextRun?: Date | null } = { isEnabled }
+
+    // When re-enabling a scheduled agent, ensure nextRun is set (was often null → never cron'd)
+    if (isEnabled && existing.frequency !== 'manual' && existing.frequency !== 'one-shot') {
+      const nextRun = calculateNextRun({
+        frequency: existing.frequency,
+        scheduledTime: existing.scheduledTime,
+        scheduledDay: existing.scheduledDay,
+        timezone: existing.timezone,
+      })
+      data.nextRun = nextRun
+    }
+
     const agent = await prisma.agent.update({
       where: { id, userId: session.user.id },
-      data: { isEnabled }
+      data,
     })
     return { success: true, agent }
   } catch (error) {

memento-note/app/actions/ai-settings.ts

@@ -101,7 +101,7 @@ export async function updateAISettings(settings: UserAISettingsData) {
     revalidatePath('/settings/ai', 'page')
     revalidatePath('/settings/appearance', 'page')
     revalidatePath('/', 'layout')
-    revalidateTag('ai-settings')
+    revalidateTag('ai-settings', 'default')
 
     return { success: true }
   } catch (error) {

memento-note/app/actions/mcp-keys.ts

@@ -4,6 +4,8 @@ import { auth } from '@/auth'
 import { prisma } from '@/lib/prisma'
 import { revalidatePath } from 'next/cache'
 import { createHash, randomBytes } from 'crypto'
+import { assertMcpAccess, isMcpTierAllowed } from '@/lib/mcp-access'
+import { getEffectiveTier } from '@/lib/entitlements'
 
 const KEY_PREFIX = 'mcp_key_'
 
@@ -62,6 +64,8 @@ export async function generateMcpKey(name: string): Promise<{ rawKey: string; in
   const session = await auth()
   if (!session?.user?.id) throw new Error('Unauthorized')
 
+  await assertMcpAccess(session.user.id)
+
   const user = await prisma.user.findUnique({
     where: { id: session.user.id },
     select: { id: true, name: true, email: true },
@@ -155,6 +159,13 @@ export type McpServerStatus = {
   url: string | null
 }
 
+export async function getMcpAccessStatus(): Promise<{ allowed: boolean; tier: string }> {
+  const session = await auth()
+  if (!session?.user?.id) return { allowed: false, tier: 'BASIC' }
+  const tier = await getEffectiveTier(session.user.id)
+  return { allowed: isMcpTierAllowed(tier), tier }
+}
+
 /**
  * Get MCP server status — mode and URL.
  */

memento-note/app/actions/notes.ts

@@ -472,7 +472,6 @@ export async function createNote(data: {
             const autoLabelingEnabled = userAISettings.autoLabeling !== false
             const autoLabelingConfidence = await getConfigNumber('AUTO_LABELING_CONFIDENCE_THRESHOLD', 70)
 
-            // console.log('[BG] Auto-labeling check: enabled=', autoLabelingEnabled, 'confidence=', autoLabelingConfidence, 'notebookId=', notebookId)
 
             if (autoLabelingEnabled) {
               // Detect user's language from their existing notes for localized prompts
@@ -497,7 +496,6 @@ export async function createNote(data: {
                 userLang
               )
 
-              // console.log('[BG] Auto-labeling suggestions:', suggestions.length, suggestions.map(s => s.label))
 
               const appliedLabels = suggestions
                 .filter(s => s.confidence >= autoLabelingConfidence)
@@ -531,7 +529,6 @@ export async function createNote(data: {
             console.error('[BG] Auto-labeling failed:', error)
           }
         } else {
-          // console.log('[BG] Auto-labeling skipped: hasUserLabels=', hasUserLabels, 'notebookId=', notebookId)
         }
       })().catch(e => console.error('[BG] Uncaught background error:', e))
 
@@ -632,14 +629,12 @@ export async function updateNote(id: string, data: {
       updateData.contentUpdatedAt = new Date()
     }
 
-    // console.log('[updateNote] Attempting update, id:', id, 'userId:', session.user.id)
     let note
     try {
       note = await prisma.note.update({
         where: { id, userId: session.user.id },
         data: updateData
       })
-      // console.log('[updateNote] Succeeded, note id:', note?.id)
     } catch (dbError: any) {
       console.error('[updateNote] FAILED:', dbError.code, dbError.message)
       throw dbError
@@ -693,7 +688,6 @@ export async function updateNote(id: string, data: {
     const structuralFields = ['isPinned', 'isArchived', 'labels', 'notebookId']
     const isStructuralChange = structuralFields.some(field => field in data)
 
-    // console.log('[updateNote] Structural check — data fields:', Object.keys(data), '| isStructural:', isStructuralChange)
 
     if (!options?.skipRevalidation) {
       try { revalidatePath(`/note/${id}`) } catch {}
@@ -952,17 +946,25 @@ export async function syncAllEmbeddings() {
         userId,
         trashedAt: null,
         noteEmbedding: { is: null }
-      }
+      },
+      take: 200,
     })
-    for (const note of notesToSync) {
-      if (!note.content) continue;
+
+    const BATCH_SIZE = 5;
+    for (let i = 0; i < notesToSync.length; i += BATCH_SIZE) {
+      const batch = notesToSync.slice(i, i + BATCH_SIZE);
+      await Promise.allSettled(batch.map(async (note) => {
+        if (!note.content) return;
         try {
           const { embedding } = await embeddingService.generateNoteEmbedding(note.title, note.content)
           if (embedding) {
             await upsertNoteEmbedding(note.id, embedding)
             updatedCount++;
           }
-      } catch (e) { }
+        } catch (e) {
+          console.error(`[syncEmbeddings] Failed for note ${note.id}:`, e)
+        }
+      }));
     }
     return { success: true, count: updatedCount }
   } catch (error: any) {
@@ -1080,6 +1082,27 @@ export async function getRecentNotes(limit: number = 3) {
   }
 }
 
+// Get count of unassigned notes (Inbox count) — notes without a notebook
+export async function getInboxCount() {
+  const session = await auth()
+  if (!session?.user?.id) return 0
+
+  try {
+    const count = await prisma.note.count({
+      where: {
+        userId: session.user.id,
+        notebookId: null,
+        isArchived: false,
+        trashedAt: null,
+      },
+    })
+    return count
+  } catch (error) {
+    console.error('Error counting inbox notes:', error)
+    return 0
+  }
+}
+
 // Dismiss a note from Recent section
 export async function dismissFromRecent(id: string) {
   const session = await auth();

memento-note/app/actions/organize-notebook.ts

@@ -5,6 +5,8 @@ import prisma from '@/lib/prisma'
 import { getChatProvider } from '@/lib/ai/factory'
 import { getSystemConfig } from '@/lib/config'
 import { revalidatePath } from 'next/cache'
+import { withAiQuota } from '@/lib/ai-quota'
+import { QuotaExceededError } from '@/lib/entitlements'
 
 export interface OrganizationNote {
   id: string
@@ -134,8 +136,16 @@ Format de réponse JSON attendu:
 
     let rawResponse: string
     try {
-      rawResponse = await provider.generateText(prompt)
+      rawResponse = await withAiQuota(
+        session.user.id,
+        'reformulate',
+        () => provider.generateText(prompt),
+        { lane: 'chat' },
+      )
     } catch (aiErr) {
+      if (aiErr instanceof QuotaExceededError) {
+        return { success: false, error: 'Quota IA épuisé pour cette fonctionnalité.' }
+      }
       console.error('[organize-notebook] AI generateText failed:', aiErr)
       return { success: false, error: `L'IA n'a pas pu répondre : ${(aiErr as Error).message}` }
     }
@@ -205,11 +215,6 @@ export async function executeNotebookOrganization(plan: OrganizationPlan): Promi
     })
     if (!notebook) return { success: false, created: 0, moved: 0, error: 'Carnet introuvable' }
 
-    console.log('[organize-notebook] Executing plan:', JSON.stringify({
-      notebookId: plan.notebookId,
-      groups: plan.groups.map(g => ({ name: g.name, isNew: g.isNew, existingId: g.existingId, noteCount: g.notes.length }))
-    }))
-
     let created = 0
     let moved = 0
 
@@ -254,7 +259,6 @@ export async function executeNotebookOrganization(plan: OrganizationPlan): Promi
             userId: session.user.id,
           },
         })
-        console.log(`[organize-notebook] Created sub-notebook "${newSub.name}" (id: ${newSub.id}) under ${plan.notebookId}`)
         targetNotebookId = newSub.id
         created++
       }
@@ -269,7 +273,6 @@ export async function executeNotebookOrganization(plan: OrganizationPlan): Promi
           },
           data: { notebookId: targetNotebookId },
         })
-        console.log(`[organize-notebook] Moved ${result.count} notes to "${group.name}"`)
         moved += result.count
       }
     }

memento-note/app/api/agents/run-for-note/route.ts

@@ -1,8 +1,17 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { prisma } from '@/lib/prisma'
-import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
+import { QuotaExceededError } from '@/lib/entitlements'
+import { reserveAiUsageOrThrow } from '@/lib/ai-quota'
+import { slideGenerateCreditCost, notebookSlideCreditCost, resolveCreditCost } from '@/lib/credits'
+import type { FeatureName } from '@/lib/quota-utils'
 import { logAuditEvent, getClientIp } from '@/lib/audit-log'
+import {
+  encodeSlideIntentDescription,
+  normalizeSlideIntent,
+  type SlideAudience,
+  type SlidePurpose,
+} from '@/lib/ai/services/slide-intent'
 
 type GenerateType = 'slide-generator' | 'excalidraw-generator'
 
@@ -12,9 +21,10 @@ const TYPE_DEFAULTS: Record<GenerateType, {
   maxSteps: number
 }> = {
   'slide-generator': {
-    role: 'Génère une présentation professionnelle à partir du contenu de la note fournie. Appelle generate_slides avec un objet JSON structuré {title, theme, slides:[...]}.',
-    tools: ['note_search', 'note_read', 'generate_slides'],
-    maxSteps: 6,
+    // tools unused: slide-generator runs a structured-output pipeline (no function calling)
+    role: 'Génère un deck exécutif de haute qualité (titres d\'action, une idée par slide, pas de filler, graphiques uniquement avec vrais chiffres).',
+    tools: [],
+    maxSteps: 1,
   },
   'excalidraw-generator': {
     role: 'Génère un diagramme Excalidraw clair et professionnel à partir du contenu de la note fournie.',
@@ -32,37 +42,101 @@ export async function POST(req: NextRequest) {
   const userId = session.user.id
 
   const body = await req.json()
-  const { noteId, type, theme, style, language, template } = body as {
-    noteId: string
+  const { noteId, notebookId, type, theme, style, language, template, purpose, audience, slideCount } = body as {
+    noteId?: string
+    /** Si fourni (slides), génère un deck multi-notes du carnet */
+    notebookId?: string
     type: GenerateType
     theme?: string
     style?: string
     language?: string
     template?: string
+    purpose?: SlidePurpose
+    audience?: SlideAudience
+    slideCount?: number
   }
 
-  if (!noteId || !type || !TYPE_DEFAULTS[type]) {
+  if ((!noteId && !notebookId) || !type || !TYPE_DEFAULTS[type]) {
     return NextResponse.json({ error: 'Paramètres invalides' }, { status: 400 })
   }
+  if (notebookId && type !== 'slide-generator') {
+    return NextResponse.json({ error: 'notebookId réservé aux présentations' }, { status: 400 })
+  }
 
-  // Quota check — feature key depends on generation type
-  const featureKey = type === 'slide-generator' ? 'slide_generate' : 'excalidraw_generate'
+  let noteCountForPack = 1
+  if (notebookId) {
+    noteCountForPack = await prisma.note.count({
+      where: {
+        notebookId,
+        userId,
+        isArchived: false,
+        trashedAt: null,
+      },
+    })
+    if (noteCountForPack < 1) {
+      return NextResponse.json({ error: 'Carnet vide ou introuvable' }, { status: 404 })
+    }
+  }
+
+  // Crédits globaux (respecte le BYOK) — slides note = 1+N ; carnet = coût notebook
+  const featureKey = (type === 'slide-generator' ? 'slide_generate' : 'excalidraw_generate') as FeatureName
+  const creditCost =
+    type === 'slide-generator'
+      ? notebookId
+        ? notebookSlideCreditCost({ slideCount, noteCount: noteCountForPack })
+        : slideGenerateCreditCost(slideCount)
+      : resolveCreditCost(featureKey)
   try {
-    await reserveUsageOrThrow(userId, featureKey)
+    await reserveAiUsageOrThrow(userId, featureKey, {
+      amount: creditCost,
+      slideCount: type === 'slide-generator' ? slideCount : undefined,
+      metadata: {
+        noteId: noteId ?? null,
+        notebookId: notebookId ?? null,
+        type,
+        slideCount: slideCount ?? null,
+        noteCount: noteCountForPack,
+      },
+      lane: 'chat',
+    })
   } catch (e) {
     if (e instanceof QuotaExceededError) {
-      return NextResponse.json({ error: e.message }, { status: 402 })
+      return NextResponse.json(
+        {
+          error: e.message,
+          code: 'QUOTA_EXCEEDED',
+          feature: featureKey,
+          creditCost,
+        },
+        { status: 402 },
+      )
     }
     throw e
   }
 
-  const note = await prisma.note.findFirst({
+  let note: { id: string; title: string | null; notebookId: string | null } | null = null
+  if (noteId) {
+    note = await prisma.note.findFirst({
       where: { id: noteId, userId },
       select: { id: true, title: true, notebookId: true },
     })
     if (!note) {
       return NextResponse.json({ error: 'Note introuvable' }, { status: 404 })
     }
+  } else if (notebookId) {
+    const notebook = await prisma.notebook.findFirst({
+      where: { id: notebookId, userId },
+      select: { id: true, name: true },
+    })
+    if (!notebook) {
+      return NextResponse.json({ error: 'Carnet introuvable' }, { status: 404 })
+    }
+    note = {
+      id: notebookId,
+      title: notebook.name,
+      notebookId,
+    }
+  }
 
   const defaults = TYPE_DEFAULTS[type]
   const isEn = language === 'English'
@@ -71,31 +145,62 @@ export async function POST(req: NextRequest) {
   if (isEn) {
     if (type === 'slide-generator') {
       const recipeHint = (theme && theme !== 'auto') ? ` Use theme:"${theme}".` : ''
-      role = `Generate a professional presentation from the provided note content.${recipeHint} Call generate_slides with structured JSON {title, theme, slides:[...]}.`
+      role = `Generate a high-quality executive deck (action titles, one idea per slide, no filler, charts only with real numbers).${recipeHint}`
     } else {
       role = 'Generate a clear and professional Excalidraw diagram from the provided note content.'
     }
   } else if (type === 'slide-generator') {
     const recipeHint = (theme && theme !== 'auto') ? ` Utilise le thème "${theme}".` : ''
-    role = `Génère une présentation professionnelle à partir du contenu de la note fournie.${recipeHint} Appelle generate_slides avec le JSON structuré {title, theme, slides:[...]}.`
+    role = `Génère un deck exécutif de haute qualité (titres d'action, une idée par slide, pas de filler, graphiques uniquement avec vrais chiffres).${recipeHint}`
+  }
+
+  if (!note) {
+    return NextResponse.json({ error: 'Source introuvable' }, { status: 404 })
   }
 
   const agentName = type === 'slide-generator'
     ? `${isEn ? 'Slides' : 'Présentation'} — ${(note.title || 'Note').substring(0, 40)}`
     : `${isEn ? 'Diagram' : 'Diagramme'} — ${(note.title || 'Note').substring(0, 40)}`
 
+  const slideIntent =
+    type === 'slide-generator'
+      ? normalizeSlideIntent({
+          purpose,
+          audience,
+          slideCount,
+          template: template || 'auto',
+        })
+      : null
+
+  // Map purpose → legacy template when user picks intent without template
+  if (slideIntent && (!slideIntent.template || slideIntent.template === 'auto')) {
+    const purposeToTemplate: Record<string, string> = {
+      board: 'board-update',
+      project: 'project-status',
+      strategy: 'strategy-review',
+    }
+    if (slideIntent.purpose && purposeToTemplate[slideIntent.purpose]) {
+      slideIntent.template = purposeToTemplate[slideIntent.purpose]
+    }
+  }
+
+  const sourceNotebookId = notebookId || note.notebookId || undefined
   const agent = await prisma.agent.create({
     data: {
       name: agentName,
       type,
       role,
-      description: (type === 'slide-generator' && template && template !== 'auto') ? `template:${template}` : undefined,
+      description:
+        type === 'slide-generator' && slideIntent
+          ? encodeSlideIntentDescription(slideIntent)
+          : undefined,
       tools: JSON.stringify(defaults.tools),
       maxSteps: defaults.maxSteps,
       frequency: 'one-shot',
       isEnabled: true,
-      sourceNoteIds: JSON.stringify([noteId]),
-      targetNotebookId: note.notebookId ?? undefined,
+      sourceNoteIds: noteId ? JSON.stringify([noteId]) : JSON.stringify([]),
+      sourceNotebookId: notebookId ? notebookId : undefined,
+      targetNotebookId: sourceNotebookId,
       slideTheme: theme ?? 'keynote',
       slideStyle: style ?? 'soft',
       userId,
@@ -104,19 +209,31 @@ export async function POST(req: NextRequest) {
 
   // ── Fire and forget — do NOT await so the HTTP response returns immediately ──
   // In Node.js / Docker self-hosted, the process keeps running after response.
+  // skipQuota: units already reserved above (avoids double-charge in executeAgent).
   import('@/lib/ai/services/agent-executor.service')
-    .then(({ executeAgent }) => executeAgent(agent.id, userId))
+    .then(({ executeAgent }) => executeAgent(agent.id, userId, undefined, { skipQuota: true }))
     .catch(err => console.error('[run-for-note] Background agent error:', err))
 
   logAuditEvent({
     userId,
     action: 'AI_REQUEST',
     resource: featureKey,
-    metadata: { agentId: agent.id, noteId, featureKey },
+    metadata: {
+      agentId: agent.id,
+      noteId: noteId ?? null,
+      notebookId: notebookId ?? null,
+      featureKey,
+      creditCost,
+    },
     ip: getClientIp(req),
   })
 
-  return NextResponse.json({ success: true, agentId: agent.id, status: 'running' })
+  return NextResponse.json({
+    success: true,
+    agentId: agent.id,
+    status: 'running',
+    creditCost,
+  })
 }
 
 // ─── GET : poll current agent status ──────────────────────────────────────

memento-note/app/api/agents/suggestions/[id]/accept/route.ts

@@ -0,0 +1,21 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+
+export async function POST(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const { id } = await params
+  const result = await agentSuggestionService.accept(session.user.id, id)
+  if (!result) {
+    return NextResponse.json({ error: 'Suggestion introuvable' }, { status: 404 })
+  }
+
+  return NextResponse.json({ success: true, agentId: result.agentId })
+}

memento-note/app/api/agents/suggestions/[id]/dismiss/route.ts

@@ -0,0 +1,21 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+
+export async function POST(
+  _request: NextRequest,
+  { params }: { params: Promise<{ id: string }> },
+) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const { id } = await params
+  const result = await agentSuggestionService.dismiss(session.user.id, id)
+  if (!result) {
+    return NextResponse.json({ error: 'Suggestion introuvable' }, { status: 404 })
+  }
+
+  return NextResponse.json({ success: true })
+}

memento-note/app/api/agents/suggestions/route.ts

@@ -0,0 +1,30 @@
+import { NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+
+export async function GET() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const suggestions = await agentSuggestionService.getPending(session.user.id, 3)
+  return NextResponse.json({
+    suggestions: suggestions.map(s => ({
+      id: s.id,
+      topic: s.topic,
+      reason: s.reason,
+      suggestedType: s.suggestedType,
+      suggestedFrequency: s.suggestedFrequency,
+      relatedNoteCount: (() => {
+        try {
+          return JSON.parse(s.relatedNoteIds).length
+        } catch {
+          return 0
+        }
+      })(),
+      clusterId: s.clusterId,
+      createdAt: s.createdAt.toISOString(),
+    })),
+  })
+}

memento-note/app/api/ai/auto-labels/route.ts

@@ -1,8 +1,10 @@
+import { rateLimit } from '@/lib/rate-limit'
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { autoLabelCreationService } from '@/lib/ai/services'
 import { getAISettings } from '@/app/actions/ai-settings'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 /**
  * POST /api/ai/auto-labels - Suggest new labels for a notebook
@@ -58,11 +60,16 @@ export async function POST(request: NextRequest) {
       )
     }
 
-    // Get label suggestions
-    const suggestions = await autoLabelCreationService.suggestLabels(
-      notebookId,
+    const suggestions = await withAiQuota(
       session.user.id,
-      language
+      'auto_tag',
+      () =>
+        autoLabelCreationService.suggestLabels(
+          notebookId,
+          session.user!.id,
+          language,
+        ),
+      { lane: 'tags' },
     )
 
     if (!suggestions) {
@@ -78,8 +85,10 @@ export async function POST(request: NextRequest) {
       data: suggestions,
     })
   } catch (error) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[/api/ai/auto-labels] POST failed:', error)
-    return NextResponse.json({ success: true, data: null })
+    return NextResponse.json({ success: false, error: 'auto_labels_failed' }, { status: 500 })
   }
 }
 

memento-note/app/api/ai/batch-organize/route.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { batchOrganizationService } from '@/lib/ai/services'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 /**
  * POST /api/ai/batch-organize - Create organization plan for notes in Inbox
@@ -40,6 +41,8 @@ export async function POST(request: NextRequest) {
       }
     }
 
+    await reserveUsageOrThrow(session.user.id, 'reformulate')
+
     // Create organization plan
     const plan = await batchOrganizationService.createOrganizationPlan(
       session.user.id,

memento-note/app/api/ai/convert-markdown/route.ts

@@ -1,3 +1,4 @@
+import { rateLimit } from '@/lib/rate-limit'
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { markdownToHtml } from '@/lib/markdown-to-html'

memento-note/app/api/ai/describe-image/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getAISettings } from '@/app/actions/ai-settings'
 import { describeImages } from '@/lib/ai/services/image-description.service'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(req: NextRequest) {
   try {
@@ -11,7 +12,6 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
     }
 
-    // GDPR AI Consent check
     if (!(await hasUserAiConsent())) {
       return NextResponse.json({ error: 'ai_consent_required' }, { status: 403 })
     }
@@ -27,23 +27,31 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'imageUrls must be a non-empty array' }, { status: 400 })
     }
 
-    const result = await describeImages(
+    const isTitleMode = mode === 'title'
+    const feature = isTitleMode ? 'auto_title' : 'reformulate'
+    const lane = isTitleMode ? 'tags' : 'chat'
+
+    const result = await withAiQuota(
+      session.user.id,
+      feature,
+      () => describeImages(
         imageUrls,
-      mode === 'title' ? 'title' : 'description',
+        isTitleMode ? 'title' : 'description',
         language || 'fr'
+      ),
+      { lane },
     )
 
-    // For title mode, return suggestions in same format as /api/ai/title-suggestions
-    if (mode === 'title' && result.suggestions) {
+    if (isTitleMode && result.suggestions) {
       return NextResponse.json({ suggestions: result.suggestions })
     }
 
     return NextResponse.json(result)
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[describe-image] Error:', error)
-    return NextResponse.json(
-      { error: error.message || 'Failed to describe image' },
-      { status: 500 }
-    )
+    const message = error instanceof Error ? error.message : 'Failed to describe image'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }

memento-note/app/api/ai/echo/fusion/route.ts

@@ -4,6 +4,7 @@ import { getChatProvider } from '@/lib/ai/factory'
 import { getSystemConfig } from '@/lib/config'
 import prisma from '@/lib/prisma'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 /**
  * POST /api/ai/echo/fusion
@@ -34,7 +35,6 @@ export async function POST(req: NextRequest) {
       )
     }
 
-    // Fetch the notes
     const notes = await prisma.note.findMany({
       where: {
         id: { in: noteIds },
@@ -55,11 +55,9 @@ export async function POST(req: NextRequest) {
       )
     }
 
-    // Get AI provider
     const config = await getSystemConfig()
     const provider = getChatProvider(config)
 
-    // Build fusion prompt
     const notesDescriptions = notes.map((note, index) => {
       return `Note ${index + 1}: "${note.title || 'Untitled'}"
 ${note.content}`
@@ -90,21 +88,21 @@ Output format:
 
 Begin:`
 
-    try {
-      const fusedContent = await provider.generateText(fusionPrompt)
+    const fusedContent = await withAiQuota(
+      session.user.id,
+      'reformulate',
+      () => provider.generateText(fusionPrompt),
+      { lane: 'chat' },
+    )
 
     return NextResponse.json({
       fusedNote: fusedContent,
       notesCount: notes.length
     })
   } catch (error) {
-      return NextResponse.json(
-        { error: 'Failed to generate fusion' },
-        { status: 500 }
-      )
-    }
-
-  } catch (error) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
+    console.error('[/api/ai/echo/fusion] Error:', error)
     return NextResponse.json(
       { error: 'Failed to process fusion request' },
       { status: 500 }

memento-note/app/api/ai/echo/route.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { memoryEchoService } from '@/lib/ai/services/memory-echo.service'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 /**
  * GET /api/ai/echo
@@ -27,6 +28,7 @@ export async function GET(req: NextRequest) {
     }
 
     // Get next insight (respects frequency limits)
+    await reserveUsageOrThrow(session.user.id, 'reformulate')
     const insight = await memoryEchoService.getNextInsight(session.user.id)
 
     if (!insight) {
@@ -41,6 +43,9 @@ export async function GET(req: NextRequest) {
     return NextResponse.json({ insight })
 
   } catch (error) {
+    if (error instanceof QuotaExceededError) {
+      return NextResponse.json(error.toJSON(), { status: 429 })
+    }
     console.error('[/api/ai/echo] GET error:', error)
     return NextResponse.json(
       { error: 'Failed to fetch Memory Echo insight' },

memento-note/app/api/ai/enrich-from-resource/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getSystemConfig } from '@/lib/config'
 import { getTagsProvider } from '@/lib/ai/factory'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(request: NextRequest) {
   try {
@@ -32,7 +33,6 @@ export async function POST(request: NextRequest) {
     let prompt: string
 
     if (mode === 'complete') {
-      // Add missing info from resource without rewriting the existing note
       prompt = `You are an expert note editor. Your task is to enrich an existing note by adding relevant information from a provided resource, WITHOUT modifying or rewriting the existing content.
 
 LANGUAGE RULE: Respond in ${lang}. Match the language of the existing note.
@@ -56,7 +56,6 @@ INSTRUCTIONS:
 - Format the new content consistently with the existing note style and the requested FORMAT RULE
 - Respond ONLY with the enriched note content, no explanations`
     } else {
-      // Merge: intelligently rewrite integrating both sources
       prompt = `You are an expert note writer. Your task is to intelligently merge an existing note with a resource into a single, coherent, well-structured document.
 
 LANGUAGE RULE: Respond in ${lang}. Match the language of the existing note.
@@ -81,14 +80,19 @@ INSTRUCTIONS:
 - Respond ONLY with the merged content, no meta-commentary or explanations`
     }
 
-    const enrichedContent = await provider.generateText(prompt)
+    const enrichedContent = await withAiQuota(
+      session.user.id,
+      'reformulate',
+      () => provider.generateText(prompt),
+      { lane: 'chat' },
+    )
 
     return NextResponse.json({ enrichedContent: enrichedContent.trim() })
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[enrich-from-resource] Error:', error)
-    return NextResponse.json(
-      { error: error.message || 'Failed to enrich content' },
-      { status: 500 }
-    )
+    const message = error instanceof Error ? error.message : 'Failed to enrich content'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }

memento-note/app/api/ai/notebook-summary/route.ts

@@ -1,7 +1,9 @@
+import { rateLimit } from '@/lib/rate-limit'
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { notebookSummaryService } from '@/lib/ai/services'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 /**
  * POST /api/ai/notebook-summary - Generate summary for a notebook
@@ -50,6 +52,8 @@ export async function POST(request: NextRequest) {
       )
     }
 
+    await reserveUsageOrThrow(session.user.id, 'reformulate')
+
     // Generate summary
     const summary = await notebookSummaryService.generateSummary(
       notebookId,

memento-note/app/api/ai/notebook-wizard/route.ts

@@ -33,19 +33,35 @@ export async function POST(request: NextRequest) {
       throw err
     }
 
+    // language = UI locale (fallback only). Content language = language of the topic string.
     const result = await notebookWizardService.generateCarnet(
       profile as WizardProfile,
       topic,
       { level, count, language: language || 'fr' }
     )
 
+    // Prefer AI short title over raw user prompt (notebookName from client is often the full message)
+    const resolvedName = (
+      result.notebookName?.trim()
+      || (notebookName && notebookName.trim().length <= 60 ? notebookName.trim() : '')
+      || result.notes[0]?.title?.trim()
+      || topic.trim().slice(0, 60)
+    ).slice(0, 80)
+
+    // Place new notebook at top of manual order (before existing min order)
+    const minOrder = await prisma.notebook.aggregate({
+      where: { userId: session.user.id, trashedAt: null },
+      _min: { order: true },
+    })
+    const nextOrder = (minOrder._min.order ?? 0) - 1
+
     // 1. Create notebook
     const notebook = await prisma.notebook.create({
       data: {
-        name: notebookName || topic,
+        name: resolvedName,
         icon: notebookIcon || '📚',
         userId: session.user.id,
-        order: 0,
+        order: nextOrder,
       },
     })
 
@@ -87,6 +103,8 @@ export async function POST(request: NextRequest) {
           notebookId: notebook.id,
           type: 'richtext',
           order: noteIndex++,
+          autoGenerated: true,
+          aiProvider: 'notebook-wizard',
         },
       })
 

memento-note/app/api/ai/organize-notebook/route.ts

@@ -2,7 +2,7 @@ import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import prisma from '@/lib/prisma'
 import { notebookOrganizerService } from '@/lib/ai/services/notebook-organizer.service'
-import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 import { syncNoteLabels } from '@/app/actions/notes'
 
 export async function POST(request: NextRequest) {
@@ -17,19 +17,6 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: 'notebookId is required' }, { status: 400 })
     }
 
-    try {
-      await reserveUsageOrThrow(session.user.id, 'reformulate')
-    } catch (err) {
-      if (err instanceof QuotaExceededError) {
-        const isTierLocked = err.currentQuota === 0
-        return NextResponse.json(
-          { error: isTierLocked ? 'feature_locked' : 'quota_exceeded', errorKey: isTierLocked ? 'ai.featureLocked' : 'ai.quotaExceeded' },
-          { status: 402 },
-        )
-      }
-      throw err
-    }
-
     const notes = await prisma.note.findMany({
       where: { notebookId, trashedAt: null, userId: session.user.id },
       select: { id: true, title: true, content: true },
@@ -46,13 +33,20 @@ export async function POST(request: NextRequest) {
       contentPreview: n.content.replace(/<[^>]+>/g, ' ').replace(/\s+/g, ' ').trim().slice(0, 300),
     }))
 
-    const result = await notebookOrganizerService.analyze(notesForAnalysis)
-
+    const result = await withAiQuota(
+      session.user.id,
+      'reformulate',
+      () => notebookOrganizerService.analyze(notesForAnalysis),
+      { lane: 'chat' },
+    )
 
     return NextResponse.json(result)
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[Notebook Organizer] Error:', error)
-    return NextResponse.json({ error: error.message || 'Failed to organize notebook' }, { status: 500 })
+    const message = error instanceof Error ? error.message : 'Failed to organize notebook'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }
 

memento-note/app/api/ai/search-overview/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { searchOverviewService } from '@/lib/ai/services/search-overview.service'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(request: NextRequest) {
   try {
@@ -14,11 +15,19 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: 'query and results required' }, { status: 400 })
     }
 
-    const overview = await searchOverviewService.generate(query, results, language)
+    const overview = await withAiQuota(
+      session.user.id,
+      'semantic_search',
+      () => searchOverviewService.generate(query, results, language),
+      { lane: 'chat' },
+    )
 
     return NextResponse.json(overview)
-  } catch (error: any) {
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('[Search Overview] Error:', error)
-    return NextResponse.json({ error: error.message, hasRelevantInfo: false, answer: '' }, { status: 500 })
+    const message = error instanceof Error ? error.message : 'Search overview failed'
+    return NextResponse.json({ error: message, hasRelevantInfo: false, answer: '' }, { status: 500 })
   }
 }

memento-note/app/api/ai/study-plan/route.ts

@@ -42,13 +42,8 @@ export async function POST(request: NextRequest) {
       return NextResponse.json({ error: 'No notes found in notebook' }, { status: 400 })
     }
 
-    const userLang = await prisma.user.findUnique({
-      where: { id: session.user.id },
-      select: { language: true },
-    })
-
     const notesForService = notes.map(n => ({ id: n.id, title: n.title ?? '' }))
-    const plan = await studyPlannerService.generate(notesForService, examDate, userLang?.language || 'fr')
+    const plan = await studyPlannerService.generate(notesForService, examDate, 'fr')
 
     // Set the first occurrence reminder for each note (subsequent occurrences ignored)
     const seenNoteIds = new Set<string>()

memento-note/app/api/ai/suggest-charts/route.ts

@@ -28,10 +28,10 @@ interface SuggestChartsResponse {
   analyzedText: string
   detectedData: string
   hasData: boolean
+  error?: string
 }
 
 export async function POST(req: Request) {
-  console.log('[suggest-charts] ===== REQUEST START =====')
 
   // 1. Auth check
   const session = await auth()
@@ -47,16 +47,13 @@ export async function POST(req: Request) {
     })
   }
   const userId = session.user.id
-  console.log('[suggest-charts] userId:', userId)
 
   // 1.5 Quota check
   try {
     const sysConfigEarly = await getSystemConfig()
     const { usedByok: willUseByok } = await willUseByokForLane('chat', sysConfigEarly, userId)
-    console.log('[suggest-charts] BYOK:', willUseByok)
     if (!willUseByok) {
       await reserveUsageOrThrow(userId, 'suggest_charts')
-      console.log('[suggest-charts] Quota OK')
     }
   } catch (err) {
     console.error('[suggest-charts] QUOTA ERROR:', err)
@@ -84,7 +81,6 @@ export async function POST(req: Request) {
     } satisfies SuggestChartsResponse, { status: 400 })
   }
   const { content, selection, noteId } = body
-  console.log('[suggest-charts] contentLen:', content?.length, 'selectionLen:', selection?.length)
 
   if (!content || content.trim().length === 0) {
     console.error('[suggest-charts] EMPTY CONTENT')
@@ -98,7 +94,6 @@ export async function POST(req: Request) {
   }
 
   const textToAnalyze = selection && selection.trim() ? selection.trim() : content.trim()
-  console.log('[suggest-charts] analyzeLen:', textToAnalyze.length, 'preview:', textToAnalyze.substring(0, 100))
 
   // 3. Build AI context
   let provider, model
@@ -106,7 +101,6 @@ export async function POST(req: Request) {
     const sysConfig = await getSystemConfig()
     provider = getChatProvider(sysConfig)
     model = provider.getModel()
-    console.log('[suggest-charts] AI model:', model)
   } catch (e) {
     console.error('[suggest-charts] AI ROUTE ERROR:', e)
     return Response.json({
@@ -154,7 +148,6 @@ Response format (COPY this structure):
     })
 
     // 5. Parse AI response - be very lenient
-    console.log('[suggest-charts] AI response:', text.substring(0, 500))
 
     let parsed: SuggestChartsResponse
     try {
@@ -227,7 +220,7 @@ Response format (COPY this structure):
       if (baseSuggestion) {
         const types = ['bar', 'line', 'pie'].filter(t => t !== baseSuggestion.type)
         while (parsed.suggestions.length < 3 && types.length > 0) {
-          parsed.suggestions.push({ ...baseSuggestion, type: types.shift()! })
+          parsed.suggestions.push({ ...baseSuggestion, type: types.shift() as any })
         }
       }
     }

memento-note/app/api/ai/suggest-notebook/route.ts

@@ -2,6 +2,7 @@ import { NextRequest, NextResponse } from 'next/server'
 import { auth } from '@/auth'
 import { notebookSuggestionService } from '@/lib/ai/services/notebook-suggestion.service'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(req: NextRequest) {
   try {
@@ -21,7 +22,6 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'noteContent is required' }, { status: 400 })
     }
 
-    // Minimum content length for suggestion (20 words as per specs)
     const wordCount = noteContent.trim().split(/\s+/).length
     if (wordCount < 20) {
       return NextResponse.json({
@@ -31,18 +31,25 @@ export async function POST(req: NextRequest) {
       })
     }
 
-    // Get suggestion from AI service
-    const suggestedNotebook = await notebookSuggestionService.suggestNotebook(
-      noteContent,
+    const suggestedNotebook = await withAiQuota(
       session.user.id,
+      'auto_tag',
+      () => notebookSuggestionService.suggestNotebook(
+        noteContent,
+        session.user!.id,
         language
+      ),
+      { lane: 'tags' },
     )
 
     return NextResponse.json({
       suggestion: suggestedNotebook,
-      confidence: suggestedNotebook ? 0.8 : 0 // Placeholder confidence score
+      confidence: suggestedNotebook ? 0.8 : 0
     })
   } catch (error) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
+    console.error('[/api/ai/suggest-notebook] Error:', error)
     return NextResponse.json(
       { error: 'Failed to generate suggestion' },
       { status: 500 }

memento-note/app/api/ai/tags/route.ts

@@ -1,3 +1,4 @@
+import { rateLimit } from '@/lib/rate-limit'
 import { NextRequest, NextResponse } from 'next/server';
 import { auth } from '@/auth';
 import { contextualAutoTagService } from '@/lib/ai/services/contextual-auto-tag.service';
@@ -56,7 +57,6 @@ export async function POST(req: NextRequest) {
     // If notebookId is provided, use contextual suggestions (IA2)
     if (notebookId) {
       try {
-        console.log('[/api/ai/tags] contextual request — notebookId:', notebookId, 'content length:', content.length)
         const suggestions = await contextualAutoTagService.suggestLabels(
           content,
           notebookId,
@@ -64,7 +64,6 @@ export async function POST(req: NextRequest) {
           language
         );
 
-        console.log('[/api/ai/tags] suggestions:', suggestions.length, suggestions.map(s => `${s.label}(${s.confidence})`))
 
         const convertedTags = suggestions.map(s => ({
           tag: s.label,

memento-note/app/api/ai/title-suggestions/route.ts

@@ -1,9 +1,11 @@
+import { rateLimit } from '@/lib/rate-limit'
 import { NextRequest, NextResponse } from 'next/server'
-import { runLaneWithBillingUser, willUseByokForLane } from '@/lib/ai/provider-for-user'
+import { runLaneWithBillingUser } from '@/lib/ai/provider-for-user'
 import { getSystemConfig } from '@/lib/config'
 import { auth } from '@/auth'
 import { getAISettings } from '@/app/actions/ai-settings'
-import { reserveUsageOrThrow, QuotaExceededError, QuotaServiceUnavailableError } from '@/lib/entitlements'
+import { reserveAiUsageOrThrow } from '@/lib/ai-quota'
+import { QuotaExceededError, QuotaServiceUnavailableError } from '@/lib/entitlements'
 import { z } from 'zod'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
 
@@ -60,10 +62,8 @@ export async function POST(req: NextRequest) {
     }
 
     const config = await getSystemConfig()
-    const { usedByok: willUseByok } = await willUseByokForLane('tags', config, session.user.id)
-    if (!willUseByok) {
     try {
-        await reserveUsageOrThrow(session.user.id, 'auto_title')
+      await reserveAiUsageOrThrow(session.user.id, 'auto_title', { lane: 'tags' })
     } catch (err) {
       if (err instanceof QuotaExceededError) {
         return NextResponse.json(err.toJSON(), { status: 402 })
@@ -73,7 +73,6 @@ export async function POST(req: NextRequest) {
       }
       console.error('[/api/ai/title-suggestions] Quota check error (fail-open):', err)
     }
-    }
 
     // Détecter la langue du contenu (simple détection basée sur les caractères et mots)
     const isPersian = /[\u0600-\u06FF]/.test(content)

memento-note/app/api/ai/transform-markdown/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getChatProvider } from '@/lib/ai/factory'
 import { getSystemConfig } from '@/lib/config'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 export async function POST(request: NextRequest) {
   try {
@@ -18,12 +19,10 @@ export async function POST(request: NextRequest) {
 
     const { text } = await request.json()
 
-    // Validation
     if (!text || typeof text !== 'string') {
       return NextResponse.json({ error: 'Text is required' }, { status: 400 })
     }
 
-    // Validate word count
     const wordCount = text.split(/\s+/).length
     if (wordCount < 10) {
       return NextResponse.json(
@@ -42,11 +41,9 @@ export async function POST(request: NextRequest) {
     const config = await getSystemConfig()
     const provider = getChatProvider(config)
 
-    // Detect language from text
     const hasFrench = /[àâäéèêëïîôùûüÿç]/i.test(text)
     const responseLanguage = hasFrench ? 'French' : 'English'
 
-    // Build prompt to transform text to Markdown
     const prompt = hasFrench
       ? `Tu es un expert en Markdown. Transforme ce texte ${responseLanguage} en Markdown bien formaté.
 
@@ -77,19 +74,22 @@ ${text}
 
 Respond ONLY with the transformed Markdown text, no explanations.`
 
-    
-    const transformedText = await provider.generateText(prompt)
-
+    const transformedText = await withAiQuota(
+      session.user.id,
+      'reformulate',
+      () => provider.generateText(prompt),
+      { lane: 'chat' },
+    )
 
     return NextResponse.json({
       originalText: text,
-      transformedText: transformedText,
+      transformedText,
       language: responseLanguage
     })
-  } catch (error: any) {
-    return NextResponse.json(
-      { error: error.message || 'Failed to transform text to Markdown' },
-      { status: 500 }
-    )
+  } catch (error: unknown) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
+    const message = error instanceof Error ? error.message : 'Failed to transform text to Markdown'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }

memento-note/app/api/ai/translate/route.ts

@@ -3,6 +3,7 @@ import { auth } from '@/auth'
 import { getTagsProvider } from '@/lib/ai/factory'
 import { getSystemConfig } from '@/lib/config'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 export async function POST(request: NextRequest) {
   try {
@@ -24,12 +25,18 @@ export async function POST(request: NextRequest) {
     const config = await getSystemConfig()
     const provider = getTagsProvider(config)
 
+    await reserveUsageOrThrow(session.user.id, 'reformulate')
+
     const prompt = `Translate the following text to ${targetLanguage}. Return ONLY the translated text, no explanation, no preamble, no quotes:\n\n${text}`
 
     const translatedText = await provider.generateText(prompt)
 
     return NextResponse.json({ translatedText: translatedText.trim() })
-  } catch (error: any) {
-    return NextResponse.json({ error: error.message || 'Translation failed' }, { status: 500 })
+  } catch (error: unknown) {
+    if (error instanceof QuotaExceededError) {
+      return NextResponse.json(error.toJSON(), { status: 429 })
+    }
+    const message = error instanceof Error ? error.message : 'Translation failed'
+    return NextResponse.json({ error: message }, { status: 500 })
   }
 }

memento-note/app/api/billing/create-checkout/route.ts

@@ -1,13 +1,15 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { auth } from '@/auth';
 import { stripe } from '@/lib/stripe';
-import { resolvePriceId } from '@/lib/billing/stripe-prices';
+import { isBillingEnabled, resolvePriceId } from '@/lib/billing/stripe-prices';
 import { prisma } from '@/lib/prisma';
 import { z } from 'zod';
 
 const bodySchema = z.object({
   tier: z.enum(['PRO', 'BUSINESS']),
   interval: z.enum(['month', 'year']),
+  /** Prefer hosted redirect when embedded checkout is unavailable */
+  mode: z.enum(['hosted', 'embedded']).optional(),
 });
 
 export async function POST(req: NextRequest) {
@@ -16,17 +18,46 @@ export async function POST(req: NextRequest) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
   }
 
+  if (!(await isBillingEnabled())) {
+    return NextResponse.json({ error: 'Billing is not enabled' }, { status: 403 });
+  }
+
+  const secret = process.env.STRIPE_SECRET_KEY;
+  if (!secret || secret === 'sk_test_placeholder') {
+    return NextResponse.json(
+      { error: 'Stripe is not configured (STRIPE_SECRET_KEY missing)' },
+      { status: 503 },
+    );
+  }
+
   const parsed = bodySchema.safeParse(await req.json());
   if (!parsed.success) {
     return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
   }
 
   const { tier, interval } = parsed.data;
+  const preferredMode = parsed.data.mode ?? 'hosted';
   const userId = session.user.id;
   const userEmail = session.user.email;
 
   try {
-    const priceId = await resolvePriceId(tier, interval);
+    let priceId: string;
+    try {
+      priceId = await resolvePriceId(tier, interval);
+    } catch (e) {
+      console.error('[billing/create-checkout] price resolve failed:', e);
+      return NextResponse.json(
+        { error: 'Stripe price IDs not configured. Set them in Admin > Billing.' },
+        { status: 503 },
+      );
+    }
+
+    if (priceId.startsWith('price_mock_')) {
+      return NextResponse.json(
+        { error: 'Stripe price IDs not configured. Set them in Admin > Billing.' },
+        { status: 503 },
+      );
+    }
 
     const subscription = await prisma.subscription.findUnique({ where: { userId } });
     let customerId = subscription?.stripeCustomerId ?? undefined;
@@ -42,7 +73,6 @@ export async function POST(req: NextRequest) {
       });
       customerId = customer.id;
 
-      // Update DB to save the real Stripe customer ID
       await prisma.subscription.upsert({
         where: { userId },
         update: { stripeCustomerId: customerId },
@@ -52,8 +82,8 @@ export async function POST(req: NextRequest) {
           tier: 'BASIC',
           status: 'ACTIVE',
           currentPeriodStart: new Date(),
-          currentPeriodEnd: new Date(Date.now() + 30 * 24 * 3600 * 1000), // temp basic dates
-        }
+          currentPeriodEnd: new Date(Date.now() + 30 * 24 * 3600 * 1000),
+        },
       });
     }
 
@@ -61,29 +91,51 @@ export async function POST(req: NextRequest) {
     const proto = req.headers.get('x-forwarded-proto') ?? 'http';
     const origin = `${proto}://${host}`;
 
-    const sessionParams = {
+    // Hosted Checkout is the most reliable path (redirect). Embedded is optional.
+    if (preferredMode === 'embedded') {
+      try {
+        const embedded = await stripe.checkout.sessions.create({
           customer: customerId,
-      mode: 'subscription' as const,
+          mode: 'subscription',
           line_items: [{ price: priceId, quantity: 1 }],
-      ui_mode: 'embedded_page',
+          ui_mode: 'embedded' as any,
           return_url: `${origin}/settings/billing?session_id={CHECKOUT_SESSION_ID}`,
           metadata: { userId, tier },
           subscription_data: { metadata: { userId, tier } },
           customer_update: { address: 'auto' },
           allow_promotion_codes: true,
-    };
-    const checkoutSession = await stripe.checkout.sessions.create(sessionParams as any);
-
-    if (checkoutSession.client_secret) {
+        } as any);
+        if (embedded.client_secret) {
           return NextResponse.json({
-        clientSecret: checkoutSession.client_secret,
-        sessionId: checkoutSession.id,
+            clientSecret: embedded.client_secret,
+            sessionId: embedded.id,
           });
         }
+      } catch (embeddedErr) {
+        console.warn('[billing/create-checkout] embedded failed, falling back to hosted:', embeddedErr);
+      }
+    }
 
-    return NextResponse.json({ url: checkoutSession.url });
+    const checkoutSession = await stripe.checkout.sessions.create({
+      customer: customerId,
+      mode: 'subscription',
+      line_items: [{ price: priceId, quantity: 1 }],
+      success_url: `${origin}/settings/billing?session_id={CHECKOUT_SESSION_ID}`,
+      cancel_url: `${origin}/settings/billing?canceled=1`,
+      metadata: { userId, tier },
+      subscription_data: { metadata: { userId, tier } },
+      customer_update: { address: 'auto' },
+      allow_promotion_codes: true,
+    });
+
+    if (!checkoutSession.url) {
+      return NextResponse.json({ error: 'Checkout session has no URL' }, { status: 500 });
+    }
+
+    return NextResponse.json({ url: checkoutSession.url, sessionId: checkoutSession.id });
   } catch (error) {
     console.error('[billing/create-checkout]', error);
-    return NextResponse.json({ error: 'Failed to create checkout session' }, { status: 500 });
+    const msg = error instanceof Error ? error.message : 'Failed to create checkout session';
+    return NextResponse.json({ error: msg }, { status: 500 });
   }
 }

memento-note/app/api/billing/create-pack-checkout/route.ts

@@ -0,0 +1,135 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { stripe } from '@/lib/stripe'
+import { isBillingEnabled } from '@/lib/billing/stripe-prices'
+import {
+  isCreditPackId,
+  resolvePackPriceId,
+  getCreditPack,
+} from '@/lib/billing/credit-packs'
+import { prisma } from '@/lib/prisma'
+import { z } from 'zod'
+
+const bodySchema = z.object({
+  packId: z.enum(['S', 'M', 'L']),
+})
+
+export async function POST(req: NextRequest) {
+  const session = await auth()
+  if (!session?.user?.id || !session.user.email) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  if (!(await isBillingEnabled())) {
+    return NextResponse.json({ error: 'Billing is not enabled' }, { status: 403 })
+  }
+
+  const secret = process.env.STRIPE_SECRET_KEY
+  if (!secret || secret === 'sk_test_placeholder') {
+    return NextResponse.json(
+      { error: 'Stripe is not configured (STRIPE_SECRET_KEY missing)' },
+      { status: 503 },
+    )
+  }
+
+  const parsed = bodySchema.safeParse(await req.json())
+  if (!parsed.success || !isCreditPackId(parsed.data.packId)) {
+    return NextResponse.json({ error: 'Invalid pack' }, { status: 400 })
+  }
+
+  const packId = parsed.data.packId
+  const pack = getCreditPack(packId)
+  const userId = session.user.id
+  const userEmail = session.user.email
+
+  try {
+    let priceId: string
+    try {
+      priceId = await resolvePackPriceId(packId)
+    } catch (e) {
+      console.error('[billing/create-pack-checkout] price resolve failed:', e)
+      return NextResponse.json(
+        { error: 'Credit pack price IDs not configured. Set them in Admin > Billing.' },
+        { status: 503 },
+      )
+    }
+
+    if (priceId.startsWith('price_mock_')) {
+      return NextResponse.json(
+        { error: 'Credit pack price IDs not configured. Set them in Admin > Billing.' },
+        { status: 503 },
+      )
+    }
+
+    const subscription = await prisma.subscription.findUnique({ where: { userId } })
+    let customerId = subscription?.stripeCustomerId ?? undefined
+
+    if (customerId && customerId.startsWith('cus_mock')) {
+      customerId = undefined
+    }
+
+    if (!customerId) {
+      const customer = await stripe.customers.create({
+        email: userEmail,
+        metadata: { userId },
+      })
+      customerId = customer.id
+
+      await prisma.subscription.upsert({
+        where: { userId },
+        update: { stripeCustomerId: customerId },
+        create: {
+          userId,
+          stripeCustomerId: customerId,
+          tier: 'BASIC',
+          status: 'ACTIVE',
+          currentPeriodStart: new Date(),
+          currentPeriodEnd: new Date(Date.now() + 30 * 24 * 3600 * 1000),
+        },
+      })
+    }
+
+    const host = req.headers.get('x-forwarded-host') ?? req.headers.get('host') ?? 'localhost:3000'
+    const proto = req.headers.get('x-forwarded-proto') ?? 'http'
+    const origin = `${proto}://${host}`
+
+    const checkoutSession = await stripe.checkout.sessions.create({
+      customer: customerId,
+      mode: 'payment',
+      line_items: [{ price: priceId, quantity: 1 }],
+      success_url: `${origin}/settings/billing?session_id={CHECKOUT_SESSION_ID}&pack=1`,
+      cancel_url: `${origin}/settings/billing?canceled=1`,
+      metadata: {
+        userId,
+        type: 'credit_pack',
+        packId,
+        credits: String(pack.credits),
+      },
+      payment_intent_data: {
+        metadata: {
+          userId,
+          type: 'credit_pack',
+          packId,
+          credits: String(pack.credits),
+        },
+      },
+      customer_update: { address: 'auto' },
+      allow_promotion_codes: true,
+    })
+
+    if (!checkoutSession.url) {
+      return NextResponse.json({ error: 'Checkout session has no URL' }, { status: 500 })
+    }
+
+    return NextResponse.json({
+      url: checkoutSession.url,
+      sessionId: checkoutSession.id,
+      packId,
+      credits: pack.credits,
+    })
+  } catch (error) {
+    console.error('[billing/create-pack-checkout]', error)
+    const msg = error instanceof Error ? error.message : 'Failed to create pack checkout'
+    return NextResponse.json({ error: msg }, { status: 500 })
+  }
+}

memento-note/app/api/billing/status/route.ts

@@ -2,7 +2,6 @@ import { NextRequest, NextResponse } from 'next/server';
 import { auth } from '@/auth';
 import { getUserInfo, getEffectiveTier } from '@/lib/entitlements';
 import { stripe } from '@/lib/stripe';
-import type Stripe from 'stripe';
 import { priceIdToTier, getDynamicPrices, isBillingEnabled } from '@/lib/billing/stripe-prices';
 
 export const dynamic = 'force-dynamic';
@@ -76,6 +75,42 @@ export async function GET(req: NextRequest) {
     const subscription = await prisma.subscription.findUnique({ where: { userId } });
     const prices = await getDynamicPrices();
     const billingEnabled = await isBillingEnabled();
+    const { getPackPublicPrices } = await import('@/lib/billing/credit-packs');
+    const creditPacks = await getPackPublicPrices();
+
+    // Si retour checkout pack : créditer au cas où le webhook n'a pas encore tourné
+    if (sessionId && sessionId.startsWith('cs_')) {
+      try {
+        const checkoutSession = await stripe.checkout.sessions.retrieve(sessionId);
+        if (
+          checkoutSession.mode === 'payment' &&
+          checkoutSession.status === 'complete' &&
+          (checkoutSession.metadata?.type === 'credit_pack' || checkoutSession.metadata?.packId) &&
+          checkoutSession.metadata?.userId === userId
+        ) {
+          const { addPurchasedCredits } = await import('@/lib/credits');
+          const {
+            getCreditPack,
+            isCreditPackId,
+          } = await import('@/lib/billing/credit-packs');
+          const packId = checkoutSession.metadata?.packId;
+          let credits = Number(checkoutSession.metadata?.credits ?? 0);
+          if (packId && isCreditPackId(packId) && (!Number.isFinite(credits) || credits <= 0)) {
+            credits = getCreditPack(packId).credits;
+          }
+          if (Number.isFinite(credits) && credits > 0) {
+            await addPurchasedCredits(userId, credits, {
+              stripeSessionId: checkoutSession.id,
+              packId: packId ?? null,
+              type: 'credit_pack',
+              source: 'billing_status_sync',
+            });
+          }
+        }
+      } catch (packSyncErr) {
+        console.error('[billing/status] pack sync failed:', packSyncErr);
+      }
+    }
 
     return NextResponse.json({
       tier,
@@ -86,6 +121,7 @@ export async function GET(req: NextRequest) {
       cancelAtPeriodEnd: subscription?.cancelAtPeriodEnd ?? false,
       hasStripeSubscription: !!subscription?.stripeSubscriptionId,
       prices,
+      creditPacks,
       billingEnabled,
     });
   } catch (error) {

memento-note/app/api/billing/webhook/route.ts

@@ -6,11 +6,79 @@ import {
   handleSubscriptionDeleted,
   resolveUserIdFromStripeEvent,
 } from '@/lib/billing/sync-subscription-from-stripe';
-import { prisma } from '@/lib/prisma';
+import { addPurchasedCredits } from '@/lib/credits';
+import {
+  getCreditPack,
+  isCreditPackId,
+  resolvePackFromPriceId,
+} from '@/lib/billing/credit-packs';
 import type Stripe from 'stripe';
 
 export const runtime = 'nodejs';
 
+async function fulfillCreditPackPurchase(session: Stripe.Checkout.Session) {
+  if (session.mode !== 'payment') return;
+  if (session.payment_status && session.payment_status !== 'paid' && session.payment_status !== 'no_payment_required') {
+    console.warn('[billing/webhook] pack checkout not paid yet', session.id, session.payment_status);
+    return;
+  }
+
+  const userId = session.metadata?.userId as string | undefined;
+  if (!userId) {
+    console.warn('[billing/webhook] credit pack: no userId', session.id);
+    return;
+  }
+
+  let packId = session.metadata?.packId as string | undefined;
+  let credits = Number(session.metadata?.credits ?? 0);
+
+  if ((!packId || !Number.isFinite(credits) || credits <= 0) && session.line_items == null) {
+    try {
+      const full = await stripe.checkout.sessions.retrieve(session.id, {
+        expand: ['line_items.data.price'],
+      });
+      const priceId = full.line_items?.data?.[0]?.price?.id;
+      if (priceId) {
+        const resolved = await resolvePackFromPriceId(priceId);
+        if (resolved) {
+          packId = resolved.packId;
+          credits = resolved.credits;
+        }
+      }
+    } catch (err) {
+      console.error('[billing/webhook] expand line_items failed', err);
+    }
+  }
+
+  if (packId && isCreditPackId(packId) && (!Number.isFinite(credits) || credits <= 0)) {
+    credits = getCreditPack(packId).credits;
+  }
+
+  if (!Number.isFinite(credits) || credits <= 0) {
+    console.warn('[billing/webhook] credit pack: invalid credits', session.id, { packId, credits });
+    return;
+  }
+
+  const result = await addPurchasedCredits(userId, credits, {
+    stripeSessionId: session.id,
+    packId: packId ?? null,
+    type: 'credit_pack',
+    paymentIntent:
+      typeof session.payment_intent === 'string'
+        ? session.payment_intent
+        : session.payment_intent?.id ?? null,
+  });
+
+  if (result.applied) {
+    console.info('[billing/webhook] credited pack', {
+      userId,
+      credits: result.units,
+      packId,
+      sessionId: session.id,
+    });
+  }
+}
+
 export async function POST(req: NextRequest) {
   const body = await req.text();
   const headersList = await headers();
@@ -49,6 +117,11 @@ export async function POST(req: NextRequest) {
           } else {
             console.warn('[billing/webhook] checkout.session.completed: no userId in metadata', session.id);
           }
+        } else if (
+          session.mode === 'payment' &&
+          (session.metadata?.type === 'credit_pack' || session.metadata?.packId)
+        ) {
+          await fulfillCreditPackPurchase(session);
         }
         break;
       }

memento-note/app/api/brainstorm/[sessionId]/convert/route.ts

@@ -153,7 +153,9 @@ export async function POST(
       }
     }
 
-    await prisma.$transaction(tagPromises)
+    await prisma.$transaction(async () => {
+      await Promise.all(tagPromises)
+    })
 
     await logActivity(sessionId, 'idea_converted', session.user.id, { ideaTitle: idea.title, ideaId: idea.id, noteId: note.id })
 

memento-note/app/api/brainstorm/[sessionId]/finalize/route.ts

@@ -75,7 +75,9 @@ export async function POST(
     }
 
     if (updatePromises.length > 0) {
-      await prisma.$transaction(updatePromises)
+      await prisma.$transaction(async () => {
+        await Promise.all(updatePromises)
+      })
     }
 
     const fruitful = Array.from(noteImpactMap.values()).filter(n => n.acceptedCount > 0).length

memento-note/app/api/brainstorm/[sessionId]/summarize/route.ts

@@ -3,7 +3,8 @@ import prisma from '@/lib/prisma'
 import { auth } from '@/auth'
 import { runLaneWithBillingUser } from '@/lib/ai/provider-for-user'
 import { getSystemConfig } from '@/lib/config'
-import { verifyParticipant } from '@/lib/brainstorm-collab'
+import { billingOwnerFromSession, verifyParticipant } from '@/lib/brainstorm-collab'
+import { withSessionAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
 
 function localeToLanguageName(locale?: string): string {
   const map: Record<string, string> = {
@@ -53,6 +54,11 @@ export async function POST(
       return NextResponse.json({ error: 'No ideas to summarize' }, { status: 400 })
     }
 
+    const { billingOwnerId, isGuestActor } = billingOwnerFromSession(
+      brainstormSession.userId,
+      session.user.id,
+    )
+
     const ideasText = ideas
       .map((idea, i) => `${i + 1}. [Wave ${idea.waveNumber}] ${idea.title}: ${idea.description}`)
       .join('\n')
@@ -79,15 +85,27 @@ Write a concise synthesis (4-6 sentences) that:
 Be direct and action-oriented. No bullet points, just flowing prose.`
 
     const config = await getSystemConfig()
-    const { result: summary } = await runLaneWithBillingUser(
+    const summary = await withSessionAiQuota(
+      billingOwnerId,
+      session.user.id,
+      isGuestActor,
+      'brainstorm_enrich',
+      async () => {
+        const { result } = await runLaneWithBillingUser(
           'tags',
           config,
-      session.user.id,
+          billingOwnerId,
           (provider) => provider.generateText(prompt),
         )
+        return result
+      },
+      { lane: 'tags' },
+    )
 
     return NextResponse.json({ success: true, data: { summary: summary.trim() } })
   } catch (error) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
     console.error('Error summarizing brainstorm:', error)
     return NextResponse.json({ error: 'Failed to summarize' }, { status: 500 })
   }

memento-note/app/api/briefing/paths/route.ts

@@ -0,0 +1,204 @@
+import { NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+import { bridgeNotesService } from '@/lib/ai/services/bridge-notes.service'
+import { buildDashboardPaths, buildOpenLoops } from '@/lib/dashboard/paths.service'
+import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { getSystemConfig } from '@/lib/config'
+import { getChatProvider } from '@/lib/ai/factory'
+
+function excerptNoteContent(content: string | null | undefined, max = 200): string {
+  if (!content) return ''
+  const plain = content.replace(/<[^>]+>/g, ' ').replace(/&nbsp;/g, ' ').replace(/\s+/g, ' ').trim()
+  if (plain.length <= max) return plain
+  return `${plain.slice(0, max)}…`
+}
+
+interface PathsBriefingSnapshot {
+  recentNote?: {
+    id: string
+    title: string | null
+    content: string
+    notebookId: string | null
+  } | null
+  inboxCount?: number
+  dueFlashcards?: number
+  insights?: Array<{
+    id: string
+    insight: string
+    score: number
+    viewed: boolean
+    note1: { id: string; title: string | null }
+    note2: { id: string; title: string | null }
+    note1Excerpt?: string
+    note2Excerpt?: string
+  }>
+  bridgeSuggestions?: Array<{
+    clusterAId: number
+    clusterBId: number
+    clusterAName: string
+    clusterBName: string
+    suggestedTitle: string
+    suggestedContent: string
+    justification: string
+  }>
+  agentSuggestions?: Array<{
+    id: string
+    topic: string
+    reason: string
+    clusterId: number | null
+  }>
+  includeOpenLoops?: boolean
+}
+
+async function resolvePathsPayload(userId: string, snapshot?: PathsBriefingSnapshot | null) {
+  const now = new Date()
+  const hasSnapshot = !!snapshot?.recentNote
+
+  const needsAgents = !snapshot?.agentSuggestions
+  const needsBridges = !snapshot?.bridgeSuggestions
+  const needsInsights = !snapshot?.insights
+  const needsCounts = snapshot?.inboxCount === undefined || snapshot?.dueFlashcards === undefined
+  const needsFocusNote = !snapshot?.recentNote
+
+  const [
+    aiConsent,
+    aiSettings,
+    systemConfig,
+    recentNotes,
+    inboxCount,
+    dueFlashcards,
+    unviewedInsights,
+    agentSuggestions,
+    bridgeSuggestions,
+  ] = await Promise.all([
+    hasUserAiConsent(),
+    prisma.userAISettings.findUnique({
+      where: { userId },
+      select: { memoryEcho: true },
+    }),
+    getSystemConfig(),
+    needsFocusNote
+      ? prisma.note.findMany({
+          where: { userId, trashedAt: null, isArchived: false },
+          select: { id: true, title: true, content: true, notebookId: true, updatedAt: true },
+          orderBy: { updatedAt: 'desc' },
+          take: 1,
+        })
+      : Promise.resolve([]),
+    needsCounts
+      ? prisma.note.count({
+          where: { userId, notebookId: null, isArchived: false, trashedAt: null },
+        })
+      : Promise.resolve(snapshot!.inboxCount!),
+    needsCounts
+      ? prisma.flashcard.count({
+          where: { deck: { userId }, nextReviewAt: { lte: now } },
+        })
+      : Promise.resolve(snapshot!.dueFlashcards!),
+    needsInsights
+      ? prisma.memoryEchoInsight.findMany({
+          where: { userId, dismissed: false },
+          select: {
+            id: true, insight: true, similarityScore: true, viewed: true,
+            note1: { select: { id: true, title: true, content: true } },
+            note2: { select: { id: true, title: true, content: true } },
+          },
+          orderBy: { insightDate: 'desc' },
+          take: 5,
+        }).catch(() => [])
+      : Promise.resolve([]),
+    needsAgents
+      ? agentSuggestionService.getPending(userId, 3).catch(() => [])
+      : Promise.resolve([]),
+    needsBridges
+      ? bridgeNotesService.getBridgeSuggestions(userId).catch(() => [])
+      : Promise.resolve([]),
+  ])
+
+  const aiProviderReady = !!getChatProvider(systemConfig)
+  const memoryEchoEnabled = aiSettings?.memoryEcho ?? true
+  const aiActive = aiConsent && aiProviderReady && memoryEchoEnabled
+
+  const focusNotes = hasSnapshot && snapshot?.recentNote
+    ? [{
+        ...snapshot.recentNote,
+        updatedAt: now,
+      }]
+    : recentNotes
+
+  const insights = snapshot?.insights ?? unviewedInsights.map(i => ({
+    id: i.id,
+    insight: i.insight,
+    score: i.similarityScore,
+    viewed: i.viewed,
+    note1: { id: i.note1.id, title: i.note1.title },
+    note2: { id: i.note2.id, title: i.note2.title },
+    note1Excerpt: excerptNoteContent(i.note1.content),
+    note2Excerpt: excerptNoteContent(i.note2.content),
+  }))
+
+  const resolvedBridges = snapshot?.bridgeSuggestions
+    ?? bridgeSuggestions.slice(0, 3).map(s => ({
+      clusterAId: s.clusterAId,
+      clusterBId: s.clusterBId,
+      clusterAName: s.clusterAName,
+      clusterBName: s.clusterBName,
+      suggestedTitle: s.suggestedTitle,
+      suggestedContent: s.suggestedContent,
+      justification: s.justification,
+    }))
+
+  const resolvedAgents = snapshot?.agentSuggestions
+    ?? agentSuggestions.map(s => ({
+      id: s.id,
+      topic: s.topic,
+      reason: s.reason,
+      clusterId: s.clusterId,
+    }))
+
+  const paths = await buildDashboardPaths({
+    userId,
+    aiActive,
+    recentNotes: focusNotes,
+    inboxCount: needsCounts ? inboxCount : snapshot!.inboxCount!,
+    dueFlashcards: needsCounts ? dueFlashcards : snapshot!.dueFlashcards!,
+    insights,
+    bridgeSuggestions: resolvedBridges,
+    agentSuggestions: resolvedAgents,
+  }).catch(() => [])
+
+  const openLoops = snapshot?.includeOpenLoops === false
+    ? []
+    : await buildOpenLoops(userId).catch(() => [])
+
+  return { paths, openLoops }
+}
+
+/**
+ * GET /api/briefing/paths — pistes enrichies (fallback sans snapshot client).
+ */
+export async function GET() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const payload = await resolvePathsPayload(session.user.id)
+  return NextResponse.json(payload)
+}
+
+/**
+ * POST /api/briefing/paths — enrichissement avec snapshot briefing (évite re-fetch agents/ponts).
+ */
+export async function POST(request: Request) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const snapshot = await request.json().catch(() => null) as PathsBriefingSnapshot | null
+  const payload = await resolvePathsPayload(session.user.id, snapshot)
+  return NextResponse.json(payload)
+}

memento-note/app/api/briefing/route.ts

@@ -0,0 +1,240 @@
+import { NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+import { bridgeNotesService } from '@/lib/ai/services/bridge-notes.service'
+import { gmailScannerService } from '@/lib/integrations/gmail-scanner.service'
+import { hasUserAiConsent } from '@/lib/consent/server-consent'
+import { getSystemConfig } from '@/lib/config'
+import { getChatProvider } from '@/lib/ai/factory'
+
+function excerptNoteContent(content: string | null | undefined, max = 200): string {
+  if (!content) return ''
+  const plain = content.replace(/<[^>]+>/g, ' ').replace(/&nbsp;/g, ' ').replace(/\s+/g, ' ').trim()
+  if (plain.length <= max) return plain
+  return `${plain.slice(0, max)}…`
+}
+
+async function fetchWritingActivity(userId: string, since: Date) {
+  const rows = await prisma.$queryRaw<Array<{ date: string; count: number }>>`
+    SELECT to_char("updatedAt" AT TIME ZONE 'UTC', 'YYYY-MM-DD') AS date,
+           COUNT(*)::int AS count
+    FROM "Note"
+    WHERE "userId" = ${userId}
+      AND "trashedAt" IS NULL
+      AND "updatedAt" >= ${since}
+    GROUP BY 1
+    ORDER BY 1 ASC
+  `
+  return rows.map(r => ({ date: r.date, count: Number(r.count) }))
+}
+
+/**
+ * GET /api/briefing — agrégat rapide pour le tableau de bord.
+ * Pas de génération IA synchrone ; les pistes sont dans GET /api/briefing/paths.
+ */
+export async function GET() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const userId = session.user.id
+  const now = new Date()
+  const ninetyDaysAgo = new Date(now)
+  ninetyDaysAgo.setDate(ninetyDaysAgo.getDate() - 90)
+
+  const [aiConsent, aiSettings, systemConfig] = await Promise.all([
+    hasUserAiConsent(),
+    prisma.userAISettings.findUnique({
+      where: { userId },
+      select: { memoryEcho: true },
+    }),
+    getSystemConfig(),
+  ])
+  const aiProviderReady = !!getChatProvider(systemConfig)
+  const memoryEchoEnabled = aiSettings?.memoryEcho ?? true
+  const aiActive = aiConsent && aiProviderReady && memoryEchoEnabled
+
+  const [
+    recentNotes,
+    inboxCount,
+    dueFlashcards,
+    upcomingReminders,
+    unviewedInsights,
+    recentAgentActions,
+    pinnedNotes,
+    writingActivity,
+    gmailStatus,
+    agentSuggestions,
+    bridgeSuggestions,
+  ] = await Promise.all([
+    prisma.note.findMany({
+      where: { userId, trashedAt: null, isArchived: false },
+      select: {
+        id: true, title: true, content: true, color: true,
+        notebookId: true, updatedAt: true, createdAt: true,
+      },
+      orderBy: { updatedAt: 'desc' },
+      take: 8,
+    }),
+
+    prisma.note.count({
+      where: { userId, notebookId: null, isArchived: false, trashedAt: null },
+    }),
+
+    prisma.flashcard.count({
+      where: { deck: { userId }, nextReviewAt: { lte: now } },
+    }),
+
+    prisma.note.findMany({
+      where: {
+        userId, reminder: { gte: now }, isReminderDone: false, trashedAt: null,
+      },
+      select: { id: true, title: true, reminder: true, notebookId: true },
+      orderBy: { reminder: 'asc' },
+      take: 5,
+    }),
+
+    prisma.memoryEchoInsight.findMany({
+      where: { userId, viewed: false, dismissed: false },
+      select: {
+        id: true, insight: true, similarityScore: true,
+        insightDate: true, viewed: true,
+        note1: { select: { id: true, title: true, content: true } },
+        note2: { select: { id: true, title: true, content: true } },
+      },
+      orderBy: { insightDate: 'desc' },
+      take: 5,
+    }).catch(() => []),
+
+    prisma.agentAction.findMany({
+      where: {
+        agent: { userId },
+        status: 'completed',
+        createdAt: { gte: new Date(now.getTime() - 48 * 60 * 60 * 1000) },
+      },
+      select: {
+        id: true, result: true, createdAt: true,
+        agent: { select: { id: true, name: true, type: true } },
+      },
+      orderBy: { createdAt: 'desc' },
+      take: 3,
+    }).catch(() => []),
+
+    prisma.note.findMany({
+      where: { userId, isPinned: true, trashedAt: null, isArchived: false },
+      select: { id: true, title: true, notebookId: true, updatedAt: true },
+      orderBy: { updatedAt: 'desc' },
+      take: 5,
+    }),
+
+    fetchWritingActivity(userId, ninetyDaysAgo).catch(() => []),
+
+    gmailScannerService.getStatus(userId).catch(() => ({
+      connected: false,
+      recentCaptures: 0,
+    })),
+
+    agentSuggestionService.getPending(userId, 3).catch(() => []),
+
+    bridgeNotesService.getBridgeSuggestions(userId).catch(() => []),
+  ])
+
+  let insightRows = unviewedInsights
+  if (insightRows.length < 5) {
+    const viewedRecent = await prisma.memoryEchoInsight.findMany({
+      where: {
+        userId,
+        dismissed: false,
+        viewed: true,
+        id: { notIn: insightRows.map(i => i.id) },
+      },
+      select: {
+        id: true, insight: true, similarityScore: true,
+        insightDate: true, viewed: true,
+        note1: { select: { id: true, title: true, content: true } },
+        note2: { select: { id: true, title: true, content: true } },
+      },
+      orderBy: { insightDate: 'desc' },
+      take: 5 - insightRows.length,
+    }).catch(() => [])
+    insightRows = [...insightRows, ...viewedRecent]
+  }
+
+  const notebookIds = [...new Set(recentNotes.map(n => n.notebookId).filter(Boolean))] as string[]
+  const notebooks = notebookIds.length > 0
+    ? await prisma.notebook.findMany({
+        where: { id: { in: notebookIds } },
+        select: { id: true, name: true, color: true, icon: true },
+      })
+    : []
+  const notebookMap = new Map(notebooks.map(n => [n.id, n]))
+
+  return NextResponse.json({
+    recentNotes: recentNotes.map(n => ({
+      ...n,
+      notebook: n.notebookId ? notebookMap.get(n.notebookId) || null : null,
+    })),
+    inboxCount,
+    dueFlashcards,
+    upcomingReminders: upcomingReminders.map(r => ({
+      id: r.id,
+      title: r.title,
+      reminder: r.reminder?.toISOString() || null,
+      notebookId: r.notebookId,
+    })),
+    insights: insightRows.map(i => ({
+      id: i.id,
+      insight: i.insight,
+      score: i.similarityScore,
+      date: i.insightDate.toISOString(),
+      viewed: i.viewed,
+      note1: { id: i.note1.id, title: i.note1.title },
+      note2: { id: i.note2.id, title: i.note2.title },
+      note1Excerpt: excerptNoteContent(i.note1.content),
+      note2Excerpt: excerptNoteContent(i.note2.content),
+    })),
+    bridgeSuggestions: bridgeSuggestions.slice(0, 3).map(s => ({
+      clusterAId: s.clusterAId,
+      clusterBId: s.clusterBId,
+      clusterAName: s.clusterAName,
+      clusterBName: s.clusterBName,
+      suggestedTitle: s.suggestedTitle,
+      suggestedContent: s.suggestedContent,
+      justification: s.justification,
+    })),
+    ai: {
+      consent: aiConsent,
+      memoryEchoEnabled,
+      providerReady: aiProviderReady,
+      active: aiActive,
+    },
+    agentActions: recentAgentActions.map(a => ({
+      id: a.id,
+      agentName: a.agent?.name || 'Agent',
+      agentType: a.agent?.type || 'custom',
+      result: a.result ? String(a.result).slice(0, 200) : null,
+      createdAt: a.createdAt.toISOString(),
+    })),
+    gmail: gmailStatus,
+    pinnedNotes: pinnedNotes.map(n => ({
+      id: n.id,
+      title: n.title,
+      notebookId: n.notebookId,
+      updatedAt: n.updatedAt.toISOString(),
+    })),
+    writingActivity,
+    agentSuggestions: agentSuggestions.map(s => ({
+      id: s.id,
+      topic: s.topic,
+      reason: s.reason,
+      suggestedType: s.suggestedType,
+      suggestedFrequency: s.suggestedFrequency,
+      relatedNoteCount: (() => {
+        try { return JSON.parse(s.relatedNoteIds).length } catch { return 0 }
+      })(),
+      clusterId: s.clusterId,
+    })),
+  })
+}

memento-note/app/api/briefing/sentiment/route.ts

@@ -0,0 +1,99 @@
+import { NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
+import { getChatProvider } from '@/lib/ai/factory'
+import { getSystemConfig } from '@/lib/config'
+import { redis } from '@/lib/redis'
+import { detectUserLanguage } from '@/lib/i18n/detect-user-language'
+import { withAiQuota, handleQuotaHttpError } from '@/lib/ai-quota'
+import { QuotaExceededError } from '@/lib/entitlements'
+
+const CACHE_TTL_SEC = 3600
+
+/**
+ * GET /api/briefing/sentiment
+ * Analyzes the emotional tone of recent notes (last 7 days) using LLM.
+ */
+export async function GET() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const userId = session.user.id
+  const locale = await detectUserLanguage()
+  const cacheKey = `briefing:sentiment:${userId}:${locale}`
+
+  try {
+    const cached = await redis.get(cacheKey)
+    if (cached) return NextResponse.json(JSON.parse(cached))
+  } catch {}
+
+  const weekAgo = new Date()
+  weekAgo.setDate(weekAgo.getDate() - 7)
+
+  const recentNotes = await prisma.note.findMany({
+    where: {
+      userId,
+      trashedAt: null,
+      isArchived: false,
+      updatedAt: { gte: weekAgo },
+    },
+    select: { title: true, content: true },
+    take: 20,
+    orderBy: { updatedAt: 'desc' },
+  })
+
+  if (recentNotes.length < 3) {
+    return NextResponse.json({
+      available: false,
+      reason: 'Not enough notes this week',
+    })
+  }
+
+  const snippets = recentNotes.map(n => {
+    const text = n.content.replace(/<[^>]+>/g, ' ').replace(/&nbsp;/g, ' ').replace(/\s+/g, ' ').trim()
+    return `${n.title || ''}: ${text.slice(0, 200)}`
+  }).join('\n---\n')
+
+  try {
+    const config = await getSystemConfig()
+    const provider = getChatProvider(config)
+    if (!provider) {
+      return NextResponse.json({ available: false, reason: 'No AI provider' })
+    }
+
+    const localeLabel = locale === 'fr' ? 'French' : locale === 'en' ? 'English' : locale
+    const prompt = `Analyze the emotional patterns in these notes from the past week. Return ONLY valid JSON (no markdown, no code fences).
+Write "summary" and "topTopic" in ${localeLabel} (locale code: ${locale}). Keep dominantEmotion keys in English as listed.
+
+{"dominantEmotion":"focused|curious|enthusiastic|frustrated|calm|anxious|creative|reflective","sentimentScore":number from -1 to 1,"emotions":{"focused":number,"curious":number,"enthusiastic":number,"frustrated":number,"calm":number,"anxious":number,"creative":number,"reflective":number},"summary":"one sentence describing the emotional pattern","topTopic":"most discussed topic"}
+
+Notes:
+${snippets.slice(0, 3000)}`
+
+    const result = await withAiQuota(
+      userId,
+      'reformulate',
+      () => provider.generateText(prompt),
+      { lane: 'chat' },
+    )
+    const jsonMatch = result.match(/\{[\s\S]*\}/)
+    if (!jsonMatch) {
+      return NextResponse.json({ available: false, reason: 'Parse error' })
+    }
+
+    const parsed = JSON.parse(jsonMatch[0])
+    const payload = { available: true, ...parsed }
+    try { await redis.setex(cacheKey, CACHE_TTL_SEC, JSON.stringify(payload)) } catch {}
+    return NextResponse.json(payload)
+  } catch (error) {
+    const quotaResp = handleQuotaHttpError(error)
+    if (quotaResp) return quotaResp
+    if (error instanceof QuotaExceededError) {
+      return NextResponse.json(error.toJSON(), { status: 402 })
+    }
+    console.error('[briefing/sentiment]', error)
+    return NextResponse.json({ available: false, reason: 'Analysis failed' })
+  }
+}

memento-note/app/api/canvas/slides/pptx/route.ts

@@ -75,7 +75,6 @@ async function buildPptx(spec: any): Promise<Buffer> {
       }
 
       case 'bullets': {
-        console.log('[PPTX] Rendering bullets slide:', slide.title, 'items:', slide.items?.length)
         s.background = { color: p.bg }
         s.addShape(pptx.ShapeType.rect, {
           x: 0, y: 0, w: 0.06, h: H,
@@ -90,7 +89,6 @@ async function buildPptx(spec: any): Promise<Buffer> {
           fill: { color: p.accent }, line: { type: 'none' },
         })
         const items = slide.items ?? []
-        console.log('[PPTX] Bullet items:', items.length, items[0])
         // Use simpler bullet format - each item as separate text call with bullet option
         items.forEach((item: string, i: number) => {
           s.addText(item, {

memento-note/app/api/canvas/slides/route.ts

@@ -4,10 +4,8 @@ import { prisma } from '@/lib/prisma'
 export async function GET(req: NextRequest) {
   try {
     const canvasId = req.nextUrl.searchParams.get('id')
-    console.log('[Slides API] Request for id:', canvasId)
 
     if (!canvasId) {
-      console.log('[Slides API] ERROR: Missing id')
       return new Response(JSON.stringify({ error: 'Missing id' }), {
         status: 400,
         headers: { 'Content-Type': 'application/json' },
@@ -19,39 +17,31 @@ export async function GET(req: NextRequest) {
     })
 
     if (!canvas) {
-      console.log('[Slides API] ERROR: Canvas not found for id:', canvasId)
       return new Response(JSON.stringify({ error: 'Not found' }), {
         status: 404,
         headers: { 'Content-Type': 'application/json' },
       })
     }
 
-    console.log('[Slides API] Canvas found:', canvas.name, '| data length:', canvas.data?.length)
-    console.log('[Slides API] Raw data start:', canvas.data?.substring(0, 200))
 
     let parsed: any
     try {
       parsed = JSON.parse(canvas.data)
     } catch (parseErr) {
-      console.log('[Slides API] ERROR: JSON parse failed:', parseErr)
       return new Response(JSON.stringify({ error: 'Invalid data' }), {
         status: 500,
         headers: { 'Content-Type': 'application/json' },
       })
     }
 
-    console.log('[Slides API] Parsed type:', parsed.type, '| has html:', !!parsed.html, '| html length:', parsed.html?.length)
-    console.log('[Slides API] HTML start:', parsed.html?.substring(0, 150))
 
     if (parsed.type !== 'slides' || !parsed.html) {
-      console.log('[Slides API] ERROR: Not a slides canvas. type:', parsed.type, 'html exists:', !!parsed.html)
       return new Response(JSON.stringify({ error: 'Not a slides canvas' }), {
         status: 400,
         headers: { 'Content-Type': 'application/json' },
       })
     }
 
-    console.log('[Slides API] SUCCESS: Returning HTML, length:', parsed.html.length)
 
     return new Response(parsed.html, {
       status: 200,

memento-note/app/api/chat/route.ts

@@ -1,6 +1,6 @@
 import { streamText, UIMessage, stepCountIs } from 'ai'
 import { resolveAiRouteWithTiming, formatAiRouteDebug } from '@/lib/ai/router'
-import { runLaneWithBillingUser, willUseByokForLane } from '@/lib/ai/provider-for-user'
+import { runLaneWithBillingUser } from '@/lib/ai/provider-for-user'
 import { getSystemConfig } from '@/lib/config'
 import { getChatProvider } from '@/lib/ai/factory'
 import { semanticSearchService } from '@/lib/ai/services/semantic-search.service'
@@ -9,12 +9,14 @@ import { auth } from '@/auth'
 import { hasUserAiConsent } from '@/lib/consent/server-consent'
 import { loadTranslations, getTranslationValue, SupportedLanguage } from '@/lib/i18n'
 import { toolRegistry } from '@/lib/ai/tools'
-import { reserveUsageOrThrow, QuotaExceededError, QuotaServiceUnavailableError } from '@/lib/entitlements'
+import { reserveAiUsageOrThrow, handleQuotaHttpError } from '@/lib/ai-quota'
+import { QuotaExceededError, QuotaServiceUnavailableError } from '@/lib/entitlements'
 import { ByokUnavailableError } from '@/lib/byok'
 import { trackFeatureUsage } from '@/lib/usage-tracker'
 import { readFile } from 'fs/promises'
 import path from 'path'
 import { logAuditEvent, getClientIp } from '@/lib/audit-log'
+import { rateLimit } from '@/lib/rate-limit'
 
 export const maxDuration = 60
 
@@ -53,6 +55,14 @@ export async function POST(req: Request) {
   }
   const userId = session.user.id
 
+  const rl = await rateLimit(userId, 'chat', 15, 60)
+  if (!rl.allowed) {
+    return new Response(JSON.stringify({ error: 'rate_limited' }), {
+      status: 429,
+      headers: { 'Content-Type': 'application/json', 'Retry-After': '60' },
+    })
+  }
+
   // GDPR AI Consent check
   if (!(await hasUserAiConsent())) {
     return new Response(JSON.stringify({ error: 'ai_consent_required' }), {
@@ -63,11 +73,7 @@ export async function POST(req: Request) {
 
   // 1.5 Quota check (per-provider BYOK bypass — only when BYOK will be used for resolved provider)
   try {
-    const sysConfigEarly = await getSystemConfig()
-    const { usedByok: willUseByok } = await willUseByokForLane('chat', sysConfigEarly, userId)
-    if (!willUseByok) {
-      await reserveUsageOrThrow(userId, 'chat')
-    }
+    await reserveAiUsageOrThrow(userId, 'chat', { lane: 'chat' })
   } catch (err) {
     if (err instanceof QuotaExceededError) {
       return Response.json(err.toJSON(), { status: 402 })
@@ -153,14 +159,14 @@ Fais un résumé concis (max 200 mots) de cette conversation. Garde les informat
         })
 
         messagesForModel = [
-          { role: 'system' as const, content: `Contexte de la conversation précédente:\n${newSummary.slice(0, 1000)}` },
+          { role: 'system', content: `Contexte de la conversation précédente:\n${newSummary.slice(0, 1000)}` },
           ...incomingMessages.slice(-RECENT_KEEP),
-        ]
+        ] as any
       } else if (conversation.summary) {
         messagesForModel = [
-          { role: 'system' as const, content: `Contexte de la conversation précédente:\n${conversation.summary}` },
+          { role: 'system', content: `Contexte de la conversation précédente:\n${conversation.summary}` },
           ...incomingMessages.slice(-RECENT_KEEP),
-        ]
+        ] as any
       }
     } catch (e) {
       console.error('[Chat] Summary generation failed, using full context:', e)

memento-note/app/api/clusters/route.ts

@@ -18,10 +18,63 @@ export async function GET(request: NextRequest) {
 
     const userId = session.user.id
 
+    // Fix any leftover "Cluster N" placeholders from pre-save naming bug
+    await clusteringService.ensureClusterNames(userId)
+
     // Check for stored results (even if stale/périmés)
     const stored = await clusteringService.getStoredClusters(userId)
+    const lite = request.nextUrl.searchParams.get('lite') === '1'
+
     if (stored) {
       const cached = stored.clusters
+
+      if (lite) {
+        const [bridgeNotesData, totalNotes] = await Promise.all([
+          prisma.bridgeNote.findMany({
+            where: { userId },
+            orderBy: { bridgeScore: 'desc' },
+            take: 5,
+            select: { noteId: true, bridgeScore: true, clustersConnected: true },
+          }),
+          prisma.note.count({ where: { userId, trashedAt: null } }),
+        ])
+
+        let enrichedBridgeNotes: object[] = []
+        if (bridgeNotesData.length > 0) {
+          const bridgeNoteDetails = await prisma.note.findMany({
+            where: { id: { in: bridgeNotesData.map(b => b.noteId) } },
+            select: { id: true, title: true },
+          })
+          const bridgeNoteDetailsMap = new Map(bridgeNoteDetails.map(n => [n.id, n]))
+
+          enrichedBridgeNotes = bridgeNotesData.map(b => {
+            const clustersConnected = JSON.parse(b.clustersConnected) as number[]
+            return {
+              noteId: b.noteId,
+              bridgeScore: b.bridgeScore,
+              clustersConnected,
+              clusterNames: clustersConnected.map(
+                cid =>
+                  clusteringService.displayName(
+                    cached.find(c => c.clusterId === cid)?.name,
+                    cid,
+                  ),
+              ),
+              note: bridgeNoteDetailsMap.get(b.noteId),
+            }
+          })
+        }
+
+        return NextResponse.json({
+          clusters: cached,
+          bridgeNotes: enrichedBridgeNotes,
+          cached: true,
+          stale: stored.stale,
+          lastCalculated: stored.lastCalculated,
+          totalNotes,
+        })
+      }
+
       // Fetch notes with their cluster assignments
       const notes = await prisma.note.findMany({
         where: { userId, trashedAt: null },
@@ -66,8 +119,11 @@ export async function GET(request: NextRequest) {
             noteId: b.noteId,
             bridgeScore: b.bridgeScore,
             clustersConnected,
-            clusterNames: clustersConnected.map(
-              cid => cached.find(c => c.clusterId === cid)?.name || `Cluster ${cid}`
+            clusterNames: clustersConnected.map(cid =>
+              clusteringService.displayName(
+                cached.find(c => c.clusterId === cid)?.name,
+                cid,
+              ),
             ),
             note: bridgeNoteDetailsMap.get(b.noteId)
           }
@@ -153,12 +209,10 @@ export async function POST(request: NextRequest) {
       })
     }
 
-    // 2. Generate cluster names with AI
-    for (const cluster of results.clusters) {
-      cluster.name = await clusteringService.generateClusterName(cluster.clusterId, userId)
-    }
+    // 2. Name from in-memory members (DB members do not exist until save)
+    await clusteringService.nameClustersFromResults(userId, results)
 
-    // 3. Save clustering results
+    // 3. Save clustering results (with real names)
     await clusteringService.saveClusteringResults(userId, results)
 
     // 4. Detect and save bridge notes

memento-note/app/api/cron/agent-suggestions/route.ts

@@ -0,0 +1,41 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { agentSuggestionService } from '@/lib/ai/services/agent-suggestion.service'
+
+export const dynamic = 'force-dynamic'
+
+function authorizeCron(request: NextRequest): boolean {
+  const cronSecret = process.env.CRON_SECRET
+  if (!cronSecret) return false
+  const authHeader = request.headers.get('authorization')
+  const bearer = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null
+  const querySecret = new URL(request.url).searchParams.get('secret')
+  return bearer === cronSecret || querySecret === cronSecret
+}
+
+/**
+ * POST /api/cron/agent-suggestions
+ * Génère des suggestions d'agents à partir des clusters sémantiques existants.
+ */
+export async function POST(request: NextRequest) {
+  if (!authorizeCron(request)) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const users = await prisma.user.findMany({
+    where: { noteClusters: { some: {} } },
+    select: { id: true },
+    take: 30,
+  })
+
+  let total = 0
+  for (const user of users) {
+    try {
+      total += await agentSuggestionService.generateForUser(user.id)
+    } catch (err) {
+      console.error('[CronAgentSuggestions] user', user.id, err)
+    }
+  }
+
+  return NextResponse.json({ success: true, users: users.length, suggestionsUpserted: total })
+}

memento-note/app/api/cron/agents/route.ts

@@ -27,10 +27,12 @@ export async function POST(request: NextRequest) {
   try {
     const now = new Date()
 
+    // Due = nextRun in the past; also backfill agents whose nextRun was never set
+    // (legacy / toggle bug) — but only schedule them, don't stampede-execute all nulls
     const dueAgents = await prisma.agent.findMany({
       where: {
         isEnabled: true,
-        frequency: { not: 'manual' },
+        frequency: { notIn: ['manual', 'one-shot'] },
         nextRun: { lte: now },
       },
       select: {
@@ -40,25 +42,77 @@ export async function POST(request: NextRequest) {
         scheduledTime: true,
         scheduledDay: true,
         timezone: true,
+        nextRun: true,
       },
+      orderBy: { nextRun: 'asc' },
     })
 
-    if (dueAgents.length === 0) {
-      return NextResponse.json({ success: true, executed: 0 })
+    // Repair: set nextRun for enabled scheduled agents stuck with null
+    const unscheduled = await prisma.agent.findMany({
+      where: {
+        isEnabled: true,
+        frequency: { notIn: ['manual', 'one-shot'] },
+        nextRun: null,
+      },
+      select: {
+        id: true,
+        userId: true,
+        frequency: true,
+        scheduledTime: true,
+        scheduledDay: true,
+        timezone: true,
+      },
+      take: 50,
+    })
+    const repairedDue: typeof dueAgents = []
+    for (const a of unscheduled) {
+      const nextRun = calculateNextRun({
+        frequency: a.frequency,
+        scheduledTime: a.scheduledTime,
+        scheduledDay: a.scheduledDay,
+        timezone: a.timezone,
+      })
+      // Si le créneau calculé est déjà passé / immédiat → exécuter ce cycle
+      const effective = !nextRun || nextRun <= now ? now : nextRun
+      await prisma.agent.update({ where: { id: a.id }, data: { nextRun: effective } })
+      if (effective <= now) {
+        repairedDue.push({
+          id: a.id,
+          userId: a.userId,
+          frequency: a.frequency,
+          scheduledTime: a.scheduledTime,
+          scheduledDay: a.scheduledDay,
+          timezone: a.timezone,
+          nextRun: effective,
+        })
+      }
     }
 
-    console.log(`[CronAgents] Found ${dueAgents.length} due agent(s): ${dueAgents.map(a => a.id).join(', ')}`)
+    const queue = [...dueAgents]
+    const seen = new Set(dueAgents.map((a) => a.id))
+    for (const a of repairedDue) {
+      if (!seen.has(a.id)) {
+        queue.push(a)
+        seen.add(a.id)
+      }
+    }
+
+    if (queue.length === 0) {
+      return NextResponse.json({
+        success: true,
+        executed: 0,
+        repairedSchedules: unscheduled.length,
+      })
+    }
 
     const results: { id: string; success: boolean; error?: string }[] = []
 
-    // Execute agents sequentially (max 3 per cycle)
-    for (const agent of dueAgents.slice(0, 3)) {
+    // Execute agents sequentially (max 5 per cycle — rattrapage + due)
+    for (const agent of queue.slice(0, 5)) {
       try {
-        console.log(`[CronAgents] Executing agent ${agent.id} (${agent.frequency})`)
         const { executeAgent } = await import('@/lib/ai/services/agent-executor.service')
         const result = await executeAgent(agent.id, agent.userId)
 
-        // Calculate and set next run
         const nextRun = calculateNextRun({
           frequency: agent.frequency,
           scheduledTime: agent.scheduledTime,
@@ -66,8 +120,6 @@ export async function POST(request: NextRequest) {
           timezone: agent.timezone,
         })
 
-        console.log(`[CronAgents] Agent ${agent.id} done. success=${result.success}, nextRun=${nextRun?.toISOString() ?? 'null'}`)
-
         await prisma.agent.update({
           where: { id: agent.id },
           data: { nextRun },
@@ -78,7 +130,6 @@ export async function POST(request: NextRequest) {
         const msg = error instanceof Error ? error.message : 'Unknown error'
         console.error(`[CronAgents] Agent ${agent.id} failed:`, msg)
 
-        // Still schedule next run even on failure
         const nextRun = calculateNextRun({
           frequency: agent.frequency,
           scheduledTime: agent.scheduledTime,

memento-note/app/api/cron/clusters/route.ts

@@ -102,10 +102,8 @@ export async function GET(request: NextRequest) {
           continue
         }
 
-        // Generate cluster names
-        for (const cluster of clusterResults.clusters) {
-          cluster.name = await clusteringService.generateClusterName(cluster.clusterId, user.id)
-        }
+        // Name from in-memory members (before save — generateClusterName needs DB rows)
+        await clusteringService.nameClustersFromResults(user.id, clusterResults)
 
         // Save results
         await clusteringService.saveClusteringResults(user.id, clusterResults)
@@ -174,9 +172,9 @@ export async function POST(request: NextRequest) {
     if (userId) {
       // Process specific user
       const clusterResults = await clusteringService.clusterNotes(userId)
-      const bridgeNotes = await bridgeNotesService.detectBridgeNotes(userId)
-
+      await clusteringService.nameClustersFromResults(userId, clusterResults)
       await clusteringService.saveClusteringResults(userId, clusterResults)
+      const bridgeNotes = await bridgeNotesService.detectBridgeNotes(userId)
       await bridgeNotesService.saveBridgeNotes(userId, bridgeNotes)
 
       return NextResponse.json({
@@ -202,9 +200,9 @@ export async function POST(request: NextRequest) {
       for (const user of users) {
         try {
           const clusterResults = await clusteringService.clusterNotes(user.id)
-          const bridgeNotes = await bridgeNotesService.detectBridgeNotes(user.id)
-
+          await clusteringService.nameClustersFromResults(user.id, clusterResults)
           await clusteringService.saveClusteringResults(user.id, clusterResults)
+          const bridgeNotes = await bridgeNotesService.detectBridgeNotes(user.id)
           await bridgeNotesService.saveBridgeNotes(user.id, bridgeNotes)
 
           results.processed++

memento-note/app/api/cron/gmail/route.ts

@@ -0,0 +1,49 @@
+import { NextRequest, NextResponse } from 'next/server'
+import prisma from '@/lib/prisma'
+import { gmailScannerService } from '@/lib/integrations/gmail-scanner.service'
+
+export const dynamic = 'force-dynamic'
+
+function authorize(request: NextRequest): boolean {
+  const cronSecret = process.env.CRON_SECRET
+  if (!cronSecret) return false
+  const authHeader = request.headers.get('authorization')
+  const bearer = authHeader?.startsWith('Bearer ') ? authHeader.slice(7) : null
+  return bearer === cronSecret
+}
+
+/** POST /api/cron/gmail — scan Gmail for connected users (1×/jour en prod via entrypoint) */
+export async function POST(request: NextRequest) {
+  if (!authorize(request)) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const users = await prisma.userAISettings.findMany({
+    select: { userId: true, integrationTokens: true },
+    take: 200,
+  })
+
+  const connected = users.filter(u => {
+    if (!u.integrationTokens) return false
+    try {
+      const meta = typeof u.integrationTokens === 'string'
+        ? JSON.parse(u.integrationTokens)
+        : u.integrationTokens
+      return !!(meta?.gmailAccessToken && meta?.gmailRefreshToken)
+    } catch {
+      return false
+    }
+  })
+
+  let totalCreated = 0
+  for (const row of connected) {
+    try {
+      const { created } = await gmailScannerService.scanUser(row.userId)
+      totalCreated += created
+    } catch (err) {
+      console.error('[CronGmail]', row.userId, err)
+    }
+  }
+
+  return NextResponse.json({ success: true, users: connected.length, notesCreated: totalCreated })
+}

memento-note/app/api/cron/sync-usage/route.ts

@@ -77,12 +77,12 @@ export async function POST(req: NextRequest) {
           redis.get(`${key}:tokens`),
         ]);
 
-        const periodStart = new Date(`${period}-01`);
-        const periodEnd = new Date(
-          periodStart.getFullYear(),
-          periodStart.getMonth() + 1,
+        const periodStart = new Date(`${period}-01T00:00:00.000Z`);
+        const periodEnd = new Date(Date.UTC(
+          periodStart.getUTCFullYear(),
+          periodStart.getUTCMonth() + 1,
           1,
-        );
+        ));
 
         await prisma.usageLog.upsert({
           where: {

memento-note/app/api/dashboard/layout/route.ts

@@ -0,0 +1,49 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { Prisma } from '@prisma/client'
+import { auth } from '@/auth'
+import prisma from '@/lib/prisma'
+import {
+  getDefaultDashboardLayout,
+  normalizeDashboardLayout,
+  type DashboardLayout,
+} from '@/lib/dashboard/layout'
+
+export async function GET() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const settings = await prisma.userAISettings.findUnique({
+    where: { userId: session.user.id },
+    select: { dashboardLayout: true },
+  })
+
+  const layout = normalizeDashboardLayout(settings?.dashboardLayout ?? getDefaultDashboardLayout())
+  return NextResponse.json({ layout })
+}
+
+export async function PUT(request: NextRequest) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  let body: { layout?: DashboardLayout }
+  try {
+    body = await request.json()
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON' }, { status: 400 })
+  }
+
+  const layout = normalizeDashboardLayout(body.layout ?? getDefaultDashboardLayout())
+  const layoutJson = layout as unknown as Prisma.InputJsonValue
+
+  await prisma.userAISettings.upsert({
+    where: { userId: session.user.id },
+    create: { userId: session.user.id, dashboardLayout: layoutJson },
+    update: { dashboardLayout: layoutJson },
+  })
+
+  return NextResponse.json({ layout, ok: true })
+}

memento-note/app/api/graph/route.ts

@@ -56,6 +56,8 @@ export async function GET(request: NextRequest) {
       labelRelations: { select: { id: true } },
       notebook: { select: { id: true, name: true } },
     },
+    take: 500,
+    orderBy: { updatedAt: 'desc' },
   })
 
   if (notes.length === 0) return NextResponse.json({ nodes: [], edges: [] })

memento-note/app/api/integrations/gmail/callback/route.ts

@@ -0,0 +1,38 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getGoogleOAuthCredentials, readIntegrationMeta, writeIntegrationMeta } from '@/lib/integrations/google-integration-tokens'
+
+export async function GET(req: NextRequest) {
+  const url = new URL(req.url)
+  const code = url.searchParams.get('code')
+  const userId = url.searchParams.get('state')
+  const error = url.searchParams.get('error')
+
+  if (error || !code || !userId) {
+    return NextResponse.redirect(`${url.origin}/settings/integrations?error=gmail_auth_failed`)
+  }
+
+  const { clientId, clientSecret } = getGoogleOAuthCredentials()
+  const tokenRes = await fetch('https://oauth2.googleapis.com/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+    body: new URLSearchParams({
+      client_id: clientId,
+      client_secret: clientSecret,
+      code,
+      redirect_uri: `${url.origin}/api/integrations/gmail/callback`,
+      grant_type: 'authorization_code',
+    }),
+  })
+
+  const tokenData = await tokenRes.json()
+  if (!tokenData.access_token) {
+    return NextResponse.redirect(`${url.origin}/settings/integrations?error=gmail_token_failed`)
+  }
+
+  const meta = await readIntegrationMeta(userId)
+  meta.gmailAccessToken = tokenData.access_token
+  if (tokenData.refresh_token) meta.gmailRefreshToken = tokenData.refresh_token
+  await writeIntegrationMeta(userId, meta)
+
+  return NextResponse.redirect(`${url.origin}/settings/integrations?connected=gmail`)
+}

memento-note/app/api/integrations/gmail/route.ts

@@ -0,0 +1,67 @@
+/**
+ * Google Gmail Integration (OAuth + scan trigger)
+ */
+
+import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import {
+  getGoogleOAuthCredentials,
+  getGoogleTokens,
+  readIntegrationMeta,
+  writeIntegrationMeta,
+} from '@/lib/integrations/google-integration-tokens'
+import { gmailScannerService } from '@/lib/integrations/gmail-scanner.service'
+
+const GMAIL_SCOPE = 'https://www.googleapis.com/auth/gmail.readonly'
+const GOOGLE_AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth'
+
+function redirectUri(origin: string) {
+  return `${origin}/api/integrations/gmail/callback`
+}
+
+export async function GET(req: NextRequest) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const url = new URL(req.url)
+  const userId = session.user.id
+
+  if (url.searchParams.get('connect') === '1') {
+    const { clientId } = getGoogleOAuthCredentials()
+    if (!clientId) {
+      return NextResponse.json({ error: 'Google OAuth not configured' }, { status: 503 })
+    }
+    const authUrl = new URL(GOOGLE_AUTH_URL)
+    authUrl.searchParams.set('client_id', clientId)
+    authUrl.searchParams.set('redirect_uri', redirectUri(url.origin))
+    authUrl.searchParams.set('response_type', 'code')
+    authUrl.searchParams.set('scope', GMAIL_SCOPE)
+    authUrl.searchParams.set('access_type', 'offline')
+    authUrl.searchParams.set('prompt', 'consent')
+    authUrl.searchParams.set('state', userId)
+    return NextResponse.redirect(authUrl.toString())
+  }
+
+  if (url.searchParams.get('scan') === '1') {
+    const result = await gmailScannerService.scanUser(userId)
+    return NextResponse.json(result)
+  }
+
+  const status = await gmailScannerService.getStatus(userId)
+  return NextResponse.json(status)
+}
+
+export async function DELETE() {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
+  const meta = await readIntegrationMeta(session.user.id)
+  delete meta.gmailAccessToken
+  delete meta.gmailRefreshToken
+  await writeIntegrationMeta(session.user.id, meta)
+  return NextResponse.json({ success: true })
+}

memento-note/app/api/link-preview/route.ts

@@ -1,17 +1,64 @@
 import { NextRequest, NextResponse } from 'next/server'
+import { auth } from '@/auth'
+import { redis } from '@/lib/redis'
 
 export async function GET(req: NextRequest) {
+  const session = await auth()
+  if (!session?.user?.id) {
+    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+  }
+
   const url = req.nextUrl.searchParams.get('url')
   if (!url) {
     return NextResponse.json({ error: 'Missing url' }, { status: 400 })
   }
 
+  const cacheKey = `linkpreview:${session.user.id}:${Buffer.from(url).toString('base64url').slice(0, 80)}`
+  try {
+    const cached = await redis.get(cacheKey)
+    if (cached) {
+      return NextResponse.json(JSON.parse(cached), {
+        headers: { 'Cache-Control': 'public, s-maxage=86400' },
+      })
+    }
+  } catch {}
+
   try {
     const parsed = new URL(url)
     if (!['http:', 'https:'].includes(parsed.protocol)) {
       return NextResponse.json({ error: 'Invalid protocol' }, { status: 400 })
     }
 
+    const hostname = parsed.hostname
+    if (
+      hostname === 'localhost' ||
+      hostname === '127.0.0.1' ||
+      hostname.startsWith('10.') ||
+      hostname.startsWith('192.168.') ||
+      hostname.startsWith('169.254.') ||
+      hostname.startsWith('172.16.') ||
+      hostname.startsWith('172.17.') ||
+      hostname.startsWith('172.18.') ||
+      hostname.startsWith('172.19.') ||
+      hostname.startsWith('172.20.') ||
+      hostname.startsWith('172.21.') ||
+      hostname.startsWith('172.22.') ||
+      hostname.startsWith('172.23.') ||
+      hostname.startsWith('172.24.') ||
+      hostname.startsWith('172.25.') ||
+      hostname.startsWith('172.26.') ||
+      hostname.startsWith('172.27.') ||
+      hostname.startsWith('172.28.') ||
+      hostname.startsWith('172.29.') ||
+      hostname.startsWith('172.30.') ||
+      hostname.startsWith('172.31.') ||
+      hostname === '0.0.0.0' ||
+      hostname.endsWith('.local') ||
+      hostname.endsWith('.internal')
+    ) {
+      return NextResponse.json({ error: 'Blocked' }, { status: 403 })
+    }
+
     const controller = new AbortController()
     const timeout = setTimeout(() => controller.abort(), 8000)
 
@@ -33,6 +80,8 @@ export async function GET(req: NextRequest) {
     const html = await res.text()
     const data = extractMetadata(html, parsed)
 
+    try { await redis.setex(cacheKey, 300, JSON.stringify(data)) } catch {}
+
     return NextResponse.json(data, {
       headers: { 'Cache-Control': 'public, s-maxage=86400' },
     })

memento-note/app/api/metrics/route.ts

@@ -7,13 +7,14 @@ export const dynamic = 'force-dynamic'
 export async function GET(req: Request) {
   // Secure endpoint with bearer token (METRICS_TOKEN env var)
   const metricsToken = process.env.METRICS_TOKEN
-  if (metricsToken) {
+  if (!metricsToken) {
+    return new NextResponse('Unauthorized', { status: 401 })
+  }
   const authHeader = req.headers.get('authorization') ?? ''
   const token = authHeader.startsWith('Bearer ') ? authHeader.slice(7) : ''
   if (token !== metricsToken) {
     return new NextResponse('Unauthorized', { status: 401 })
   }
-  }
 
   const lines: string[] = []
 

memento-note/app/api/mobile/ai/improve/route.ts

@@ -11,7 +11,7 @@ const MODE_MAP: Record<string, 'clarify' | 'shorten' | 'improveStyle' | 'fix_gra
 }
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { text, mode = 'improve' } = await req.json().catch(() => ({}))

memento-note/app/api/mobile/ai/title/route.ts

@@ -5,7 +5,7 @@ import { getSystemConfig } from '@/lib/config'
 import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { content } = await req.json().catch(() => ({}))

memento-note/app/api/mobile/ai/transcribe/route.ts

@@ -1,9 +1,10 @@
 import { NextRequest, NextResponse } from 'next/server'
 import { getMobileUserId } from '@/lib/mobile-auth'
 import { getSystemConfig } from '@/lib/config'
+import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const formData = await req.formData().catch(() => null)
@@ -18,6 +19,15 @@ export async function POST(req: NextRequest) {
   const apiKey = config.OPENAI_API_KEY
   if (!apiKey) return NextResponse.json({ error: 'Service non disponible' }, { status: 503 })
 
+  try {
+    await reserveUsageOrThrow(userId, 'voice_transcribe')
+  } catch (err) {
+    if (err instanceof QuotaExceededError) {
+      return NextResponse.json(err.toJSON(), { status: 429 })
+    }
+    throw err
+  }
+
   const whisperForm = new FormData()
   whisperForm.append('file', file, 'audio.m4a')
   whisperForm.append('model', 'whisper-1')

memento-note/app/api/mobile/auth/logout/route.ts

@@ -0,0 +1,19 @@
+import { NextResponse } from 'next/server'
+import { getMobileUserId } from '@/lib/mobile-auth'
+import { redis } from '@/lib/redis'
+
+export async function POST(req: Request) {
+  const userId = await getMobileUserId(req)
+  if (!userId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+  const auth = req.headers.get('Authorization') ?? ''
+  const token = auth.startsWith('Bearer ') ? auth.slice(7) : ''
+
+  if (token) {
+    try {
+      await redis.setex(`mobile:revoked:${token}`, 90 * 24 * 60 * 60, '1')
+    } catch {}
+  }
+
+  return NextResponse.json({ success: true })
+}

memento-note/app/api/mobile/auth/me/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const user = await prisma.user.findUnique({

memento-note/app/api/mobile/flashcards/decks/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
 
   const now = new Date()

memento-note/app/api/mobile/flashcards/generate/route.ts

@@ -6,7 +6,7 @@ import { stripHtmlToText } from '@/lib/flashcards/deck-utils'
 import { reserveUsageOrThrow, QuotaExceededError } from '@/lib/entitlements'
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const body = await req.json().catch(() => ({}))

memento-note/app/api/mobile/flashcards/review/route.ts

@@ -4,7 +4,7 @@ import { getMobileUserId } from '@/lib/mobile-auth'
 import { computeSm2Update } from '@/lib/flashcards/sm2'
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
 
   const body = await req.json()

memento-note/app/api/mobile/flashcards/session/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
 
   const { searchParams } = new URL(req.url)

memento-note/app/api/mobile/notebooks/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const notebooks = await prisma.notebook.findMany({

memento-note/app/api/mobile/notes/[id]/route.ts

@@ -6,7 +6,7 @@ export async function GET(
   req: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { id } = await params
@@ -33,7 +33,7 @@ export async function PUT(
   req: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { id } = await params
@@ -61,7 +61,7 @@ export async function DELETE(
   req: NextRequest,
   { params }: { params: Promise<{ id: string }> }
 ) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { id } = await params

memento-note/app/api/mobile/notes/daily/route.ts

@@ -19,7 +19,7 @@ function getTodayContent(title: string): string {
 }
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const todayKey = getTodayKey()

memento-note/app/api/mobile/notes/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { searchParams } = new URL(req.url)
@@ -43,7 +43,7 @@ export async function GET(req: NextRequest) {
 }
 
 export async function POST(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { title, content, notebookId } = await req.json().catch(() => ({}))

memento-note/app/api/mobile/search/route.ts

@@ -3,7 +3,7 @@ import prisma from '@/lib/prisma'
 import { getMobileUserId } from '@/lib/mobile-auth'
 
 export async function GET(req: NextRequest) {
-  const userId = getMobileUserId(req)
+  const userId = await getMobileUserId(req)
   if (!userId) return NextResponse.json({ error: 'Non autorisé' }, { status: 401 })
 
   const { searchParams } = new URL(req.url)

memento-note/app/api/notebooks/[id]/route.ts

@@ -91,7 +91,7 @@ export async function PATCH(
     if (color !== undefined) updateData.color = color
     if (order !== undefined) updateData.order = order
     if (trashedAt !== undefined) updateData.trashedAt = trashedAt ? new Date(trashedAt) : null
-    if (parentId !== undefined) updateData.parentId = parentId
+    if (parentId !== undefined) updateData.parent = parentId ? { connect: { id: parentId } } : { disconnect: true }
 
     if (trashedAt !== undefined) {
       const descendantIds = await getDescendantIds(id)