structure du projet + docker, back: mise en place BD et apps, front: début de dev pour le header et mise en place du thème et css global (override des variables bootstrap)

backend/api/core/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/core/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class CoreConfig(AppConfig):
+    name = 'api.core'

backend/api/core/migrations/0001_initial.py

@@ -0,0 +1,46 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='GDPR_Event',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('event_type', models.CharField(choices=[('DATA_EXPORT', 'Export de données'), ('DATA_ANONYMIZATION', 'Anonymisation de données'), ('CONSENT_WITHDRAWAL', 'Consentement retiré')], max_length=50, verbose_name="type d'événement")),
+                ('subject_reference', models.CharField(help_text="Objet concerné par l'événement : Class:id", max_length=255, verbose_name='objet concerné')),
+                ('fields_touched', models.JSONField(blank=True, help_text="Liste des champs affectés par l'événement.", verbose_name='champs affectés')),
+                ('reason', models.CharField(choices=[('USER_REQUEST', 'Demande utilisateur'), ('RETENTION_POLICY', 'Politique de conservation')], max_length=50, verbose_name='raison')),
+                ('done_at', models.DateTimeField(auto_now_add=True, verbose_name='date et heure')),
+            ],
+            options={
+                'verbose_name': 'Événement RGPD',
+                'verbose_name_plural': 'Événements RGPD',
+            },
+        ),
+        migrations.CreateModel(
+            name='GlobalVariable',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('key', models.CharField(max_length=255, unique=True, verbose_name='clé')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('value', models.JSONField(blank=True, null=True, verbose_name='valeur')),
+            ],
+            options={
+                'verbose_name': 'Paramètre global',
+                'verbose_name_plural': 'Paramètres globaux',
+            },
+        ),
+    ]

backend/api/core/migrations/0002_initial.py

@@ -0,0 +1,33 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('core', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='gdpr_event',
+            name='done_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='Effectué par'),
+        ),
+        migrations.AddField(
+            model_name='globalvariable',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='globalvariable',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+    ]

backend/api/core/models/__init__.py

@@ -0,0 +1,9 @@
+from .gdpr_event import GDPR_Event
+from .global_variable import GlobalVariable
+from .trackable_model import TrackableModel
+
+__all__ = [
+    "GDPR_Event",
+    "GlobalVariable",
+    "TrackableModel",
+]

backend/api/core/models/gdpr_event.py

@@ -0,0 +1,51 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class GDPR_Event(models.Model):
+    """
+    Model to log GDPR-related events for auditing purposes.
+    """
+
+    EVENT_TYPES = [
+        ("DATA_EXPORT", _("Export de données")),
+        ("DATA_ANONYMIZATION", _("Anonymisation de données")),
+        ("CONSENT_WITHDRAWAL", _("Consentement retiré")),
+    ]
+
+    EVENT_REASON = [
+        ("USER_REQUEST", _("Demande utilisateur")),
+        ("RETENTION_POLICY", _("Politique de conservation")),
+    ]
+
+    event_type = models.CharField(
+        max_length=50, choices=EVENT_TYPES, verbose_name=_("type d'événement")
+    )
+    subject_reference = models.CharField(
+        max_length=255,
+        verbose_name=_("objet concerné"),
+        help_text=_("Objet concerné par l'événement : Class:id"),
+    )
+    fields_touched = models.JSONField(
+        blank=True,
+        verbose_name=_("champs affectés"),
+        help_text=_("Liste des champs affectés par l'événement."),
+    )
+    reason = models.CharField(
+        max_length=50, verbose_name=_("raison"), choices=EVENT_REASON
+    )
+    done_at = models.DateTimeField(auto_now_add=True, verbose_name=_("date et heure"))
+    done_by = models.ForeignKey(
+        "users.User",
+        null=True,
+        blank=True,
+        on_delete=models.SET_NULL,
+        verbose_name=_("Effectué par"),
+    )
+
+    class Meta:
+        verbose_name = _("Événement RGPD")
+        verbose_name_plural = _("Événements RGPD")
+
+    def __str__(self):
+        return f"{self.get_event_type_display()} - {self.done_at} - {self.subject_reference}"

backend/api/core/models/global_variable.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class GlobalVariable(TrackableModel):
+    """
+    Model to store global key-value pairs for application-wide settings.
+    """
+
+    key = models.CharField(max_length=255, unique=True, verbose_name=_("clé"))
+    description = models.TextField(
+        blank=True, default="", verbose_name=_("description")
+    )
+    value = models.JSONField(verbose_name=_("valeur"), null=True, blank=True)
+
+    class Meta:
+        verbose_name = _("Paramètre global")
+        verbose_name_plural = _("Paramètres globaux")
+
+    def __str__(self):
+        return f"{self.key}: {self.value}"

backend/api/core/models/trackable_model.py

@@ -0,0 +1,95 @@
+from django.utils import timezone
+from django.db import models
+from django.conf import settings
+from django.utils.translation import gettext_lazy as _
+
+
+class TrackableModel(models.Model):
+    created_at = models.DateTimeField(auto_now_add=True, verbose_name=_("créé le"))
+    created_by = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+        related_name="+",
+        verbose_name=_("créé par"),
+    )
+    updated_at = models.DateTimeField(auto_now=True, verbose_name=_("modifié le"))
+    updated_by = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+        related_name="+",
+        verbose_name=_("modifié par"),
+    )
+    obsolete = models.BooleanField(default=False, verbose_name=_("obsolète"))
+    obsolete_at = models.DateTimeField(
+        null=True, blank=True, verbose_name=_("obsolète le")
+    )
+
+    class Meta:
+        abstract = True
+
+    def soft_delete(self, cascade_m2m=True):
+        """
+        Soft delete of trackable models. Objct becomes obsolete and obsolescence date is indicated.
+        """
+        if cascade_m2m:
+            self._cascade_soft_delete_m2m()
+
+        self.obsolete = True
+        self.obsolete_at = timezone.now()
+        self.save(update_fields=["obsolete", "obsolete_at"])
+
+    def _cascade_soft_delete_m2m(self):
+        """
+        Propagation of soft delete to M2M fields.
+        """
+        for field in self._meta.get_fields():
+            if field.many_to_many and not field.auto_created:
+                through_model = field.remote_field.through
+
+                if issubclass(through_model, TrackableModel):
+                    field_name = None
+                    for through_field in through_model._meta.get_fields():
+                        if through_field.related_model == self.__class__:
+                            field_name = through_field.name
+                            break
+
+                    if field_name:
+                        filter_kwargs = {field_name: self}
+                        for relation in through_model.objects.filter(
+                            **filter_kwargs, obsolete=False
+                        ):
+                            relation.soft_delete(cascade_m2m=False)
+
+    def restore(self, cascade_m2m=True):
+        """
+        Restore an object that was soft deleted.
+        """
+        if cascade_m2m:
+            self._cascade_restore_m2m()
+
+        self.obsolete = False
+        self.obsolete_at = None
+        self.save(update_fields=["obsolete", "obsolete_at"])
+
+    def _cascade_restore_m2m(self):
+        for field in self._meta.get_fields():
+            if field.many_to_many and not field.auto_created:
+                through_model = field.remote_field.through
+
+                if issubclass(through_model, TrackableModel):
+                    field_name = None
+                    for through_field in through_model._meta.get_fields():
+                        if through_field.related_model == self.__class__:
+                            field_name = through_field.name
+                            break
+
+                    if field_name:
+                        filter_kwargs = {field_name: self}
+                        for relation in through_model.objects.filter(
+                            **filter_kwargs, obsolete=True
+                        ):
+                            relation.restore(cascade_m2m=False)

backend/api/core/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path, include
+
+urlpatterns = [
+    
+]

backend/api/core/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.

backend/api/lead_explorer/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/lead_explorer/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A1LeadExplorerConfig(AppConfig):
+    name = 'api.lead_explorer'

backend/api/lead_explorer/migrations/0001_initial.py

@@ -0,0 +1,41 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='BrutCompany',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('first_name', models.CharField(blank=True, max_length=100, verbose_name='prénom')),
+                ('last_name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+                ('company_name', models.CharField(blank=True, max_length=200, verbose_name='nom de société')),
+                ('entity_type', models.CharField(choices=[('COMPANY', 'Société'), ('PERSON', 'Personne')], help_text="Si c'est une personne, le ContactPerson est automatiquement créé lorsque la société passe en prospection", max_length=20, verbose_name='type')),
+                ('lat', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True, verbose_name='latitude')),
+                ('long', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True, verbose_name='longitude')),
+                ('address', models.CharField(blank=True, max_length=150, verbose_name='adresse')),
+                ('postal_code', models.CharField(blank=True, max_length=20, verbose_name='code postal')),
+                ('city', models.CharField(blank=True, max_length=30, verbose_name='ville')),
+                ('siren', models.CharField(blank=True, max_length=9, verbose_name='numéro siren')),
+                ('siret', models.CharField(blank=True, max_length=14, verbose_name='numéro siret')),
+                ('processed', models.BooleanField(default=False, verbose_name='traité')),
+                ('processed_at', models.DateTimeField(blank=True, null=True, verbose_name='traité le')),
+            ],
+            options={
+                'verbose_name': 'Entreprise',
+                'verbose_name_plural': 'Entreprises',
+            },
+        ),
+    ]

backend/api/lead_explorer/migrations/0002_initial.py

@@ -0,0 +1,33 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('lead_explorer', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='brutcompany',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='brutcompany',
+            name='processed_by',
+            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='processed_companies', to=settings.AUTH_USER_MODEL, verbose_name='traité par'),
+        ),
+        migrations.AddField(
+            model_name='brutcompany',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+    ]

backend/api/lead_explorer/models/__init__.py

@@ -0,0 +1,5 @@
+from .brut_company import BrutCompany
+
+__all__ = [
+    'BrutCompany',
+]

backend/api/lead_explorer/models/brut_company.py

@@ -0,0 +1,65 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class BrutCompany(TrackableModel):
+    """
+    Model representing the brut information from a company.
+    """
+
+    ENTITY_TYPE = [
+        ("COMPANY", _("Société")),
+        ("PERSON", _("Personne")),
+    ]
+
+    first_name = models.CharField(verbose_name=_("prénom"), max_length=100, blank=True)
+    last_name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    company_name = models.CharField(
+        verbose_name=_("nom de société"), max_length=200, blank=True
+    )  # unique=True ?
+    entity_type = models.CharField(
+        verbose_name=_("type"),
+        max_length=20,
+        choices=ENTITY_TYPE,
+        help_text=_(
+            "Si c'est une personne, le ContactPerson est automatiquement créé lorsque la société passe en prospection"
+        ),
+    )
+    lat = models.DecimalField(
+        verbose_name=_("latitude"),
+        max_digits=9,
+        decimal_places=6,
+        blank=True,
+        null=True,
+    )
+    long = models.DecimalField(
+        verbose_name=_("longitude"),
+        max_digits=9,
+        decimal_places=6,
+        blank=True,
+        null=True,
+    )
+    address = models.CharField(verbose_name=_("adresse"), max_length=150, blank=True)
+    postal_code = models.CharField(
+        verbose_name=_("code postal"), max_length=20, blank=True
+    )
+    city = models.CharField(verbose_name=_("ville"), max_length=30, blank=True)
+    siren = models.CharField(verbose_name=_("numéro siren"), max_length=9, blank=True)
+    siret = models.CharField(verbose_name=_("numéro siret"), max_length=14, blank=True)
+    processed = models.BooleanField(verbose_name=_("traité"), default=False)
+    processed_at = models.DateTimeField(
+        verbose_name=_("traité le"), blank=True, null=True
+    )
+    processed_by = models.ForeignKey(
+        "users.User",
+        verbose_name=_("traité par"),
+        null=True,
+        on_delete=models.SET_NULL,
+        related_name="processed_companies",
+    )
+
+    class Meta:
+        verbose_name = _("Entreprise")
+        verbose_name_plural = _("Entreprises")

backend/api/lead_explorer/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path
+
+app_name = "lead_explorer"
+urlpatterns = [
+]

backend/api/lead_explorer/views.py

@@ -0,0 +1,2 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _

backend/api/prospect_flow/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/prospect_flow/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A2ProspectFlowConfig(AppConfig):
+    name = 'api.prospect_flow'

backend/api/prospect_flow/migrations/0001_initial.py

@@ -0,0 +1,204 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='ContactMethod',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+                ('anonymization_template', models.CharField(choices=[('email_invalid', 'EMAIL_INVALID'), ('phone_e164_zero', 'PHONE_E164_ZERO'), ('redacted_id', 'REDACTED_ID'), ('hashed', 'HASHED')], default='redacted_id', max_length=32)),
+            ],
+            options={
+                'verbose_name': 'Moyen de contact',
+                'verbose_name_plural': 'Moyens de contact',
+            },
+        ),
+        migrations.CreateModel(
+            name='ContactPerson',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('first_name', models.CharField(blank=True, max_length=50, verbose_name='prénom')),
+                ('last_name', models.CharField(blank=True, max_length=50, verbose_name='nom')),
+                ('function', models.CharField(blank=True, max_length=100, verbose_name='fonction')),
+                ('deciding', models.BooleanField(default=False, verbose_name='décideur')),
+                ('preferred_contact_days_hours', models.TextField(blank=True, default='', verbose_name='Jours et heures de contact préférés')),
+            ],
+            options={
+                'verbose_name': 'Contact',
+                'verbose_name_plural': 'Contacts',
+            },
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectSellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectTypeSellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectTypeTemplate',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_TemplateStep',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('order', models.IntegerField(verbose_name='ordre')),
+                ('default_notes', models.TextField(blank=True, default='', verbose_name='notes par défaut')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Prospect',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('decision_making', models.TextField(blank=True, default='', verbose_name='prise de décision')),
+                ('decided', models.BooleanField(default=False, verbose_name='décidé')),
+                ('decided_at', models.DateTimeField(blank=True, null=True, verbose_name='a décidé le')),
+            ],
+            options={
+                'verbose_name': 'Prospect',
+                'verbose_name_plural': 'Prospects',
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectContactMethod',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('label', models.CharField(blank=True, max_length=100, verbose_name='label')),
+                ('value', models.CharField(max_length=255, verbose_name='valeur')),
+                ('preferred', models.BooleanField(default=False)),
+            ],
+            options={
+                'verbose_name': 'Moyen de contact',
+                'verbose_name_plural': 'Moyens de contact',
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectStep',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('order', models.PositiveIntegerField()),
+                ('notes', models.TextField(blank=True)),
+                ('done', models.BooleanField(default=False)),
+                ('done_datetime', models.DateTimeField(blank=True, null=True)),
+            ],
+            options={
+                'verbose_name': 'Étape de prospection du prospect',
+                'verbose_name_plural': 'Étapes de prospection du prospect',
+                'ordering': ['prospect_id', 'order'],
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectType',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Type de prospect',
+                'verbose_name_plural': 'Types de prospects',
+            },
+        ),
+        migrations.CreateModel(
+            name='SellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Argument de vente',
+                'verbose_name_plural': 'Arguments de vente',
+            },
+        ),
+        migrations.CreateModel(
+            name='StepType',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=150, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': "Type d'étape de prospection",
+                'verbose_name_plural': "Types d'étape de prospection",
+            },
+        ),
+        migrations.CreateModel(
+            name='Template',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=150, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Modèle de prospection',
+                'verbose_name_plural': 'Modèles de prospection',
+            },
+        ),
+    ]

backend/api/prospect_flow/migrations/0002_initial.py

@@ -0,0 +1,288 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('lead_explorer', '0002_initial'),
+        ('prospect_flow', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='contactmethod',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='contactmethod',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='brut_company',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='lead_explorer.brutcompany', verbose_name='informations de la société'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospect'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='contact_method',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactmethod', verbose_name='moyen de contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='contact_person',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactperson', verbose_name='contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='prospect',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='contact_method',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactmethod'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='contact_person',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactperson', verbose_name='contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='source_template_step',
+            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, to='prospect_flow.m2m_templatestep', verbose_name='étape source'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='prospect_type',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospecttype', verbose_name='type de prospect'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='prospect_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospecttype'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='prospect_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospecttype'),
+        ),
+        migrations.AddField(
+            model_name='sellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='sellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='selling_arguments',
+            field=models.ManyToManyField(blank=True, related_name='prospect_types', through='prospect_flow.M2M_ProspectTypeSellingArgument', to='prospect_flow.sellingargument', verbose_name='arguments de vente'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='selling_arguments',
+            field=models.ManyToManyField(blank=True, through='prospect_flow.M2M_ProspectSellingArgument', to='prospect_flow.sellingargument', verbose_name='arguments de vente'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='selling_argument',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.sellingargument'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='selling_argument',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.sellingargument'),
+        ),
+        migrations.AddField(
+            model_name='steptype',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='steptype',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='step_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.steptype'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='step_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.steptype'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='steps',
+            field=models.ManyToManyField(blank=True, related_name='templates', through='prospect_flow.M2M_TemplateStep', to='prospect_flow.steptype', verbose_name='étapes de prospection'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='templates',
+            field=models.ManyToManyField(blank=True, related_name='prospect_types', through='prospect_flow.M2M_ProspectTypeTemplate', to='prospect_flow.template', verbose_name='modèles de prospection'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='template',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.template'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='template',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.template'),
+        ),
+        migrations.AddConstraint(
+            model_name='prospectcontactmethod',
+            constraint=models.CheckConstraint(condition=models.Q(models.Q(('contact_person__isnull', True), ('prospect__isnull', False)), models.Q(('contact_person__isnull', False), ('prospect__isnull', True)), _connector='OR'), name='prospect_flow_prospectcontactmethod_exactly_one_owner', violation_error_message='Un moyen de contact doit être lié soit à un prospect, soit à un contact, mais pas les deux.'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospecttypesellingargument',
+            constraint=models.UniqueConstraint(fields=('selling_argument', 'prospect_type'), name='unique_selling_argument_prospect_type'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospectsellingargument',
+            constraint=models.UniqueConstraint(fields=('selling_argument', 'prospect'), name='unique_selling_argument_prospect'),
+        ),
+        migrations.AddConstraint(
+            model_name='prospectstep',
+            constraint=models.UniqueConstraint(fields=('prospect', 'order'), name='uniq_prospect_step_order'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_templatestep',
+            constraint=models.UniqueConstraint(fields=('template', 'order'), name='unique_template_order'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospecttypetemplate',
+            constraint=models.UniqueConstraint(fields=('template', 'prospect_type'), name='unique_template_prospect_type'),
+        ),
+    ]

backend/api/prospect_flow/models/__init__.py

@@ -0,0 +1,29 @@
+from .contact_method import ContactMethod
+from .contact_person import ContactPerson
+from .m2m_prospect_selling_argument import M2M_ProspectSellingArgument
+from .m2m_prospect_type_selling_argument import M2M_ProspectTypeSellingArgument
+from .m2m_prospect_type_template import M2M_ProspectTypeTemplate
+from .m2m_template_step import M2M_TemplateStep
+from .prospect_contact_method import ProspectContactMethod
+from .prospect_step import ProspectStep
+from .prospect_type import ProspectType
+from .prospect import Prospect
+from .selling_argument import SellingArgument
+from .step_type import StepType
+from .template import Template
+
+__all__ = [
+    "ContactMethod",
+    "ContactPerson",
+    "M2M_ProspectSellingArgument",
+    "M2M_ProspectTypeSellingArgument",
+    "M2M_ProspectTypeTemplate",
+    "M2M_TemplateStep",
+    "ProspectContactMethod",
+    "ProspectStep",
+    "ProspectType",
+    "Prospect",
+    "SellingArgument",
+    "StepType",
+    "Template",
+]

backend/api/prospect_flow/models/contact_method.py

@@ -0,0 +1,22 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+from gdpr.anonymizers import AnonymizationTemplate
+
+
+class ContactMethod(TrackableModel):
+    """
+    Model representing a contact method.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    anonymization_template = models.CharField(
+        max_length=32,
+        choices=[(s.value, s.name) for s in AnonymizationTemplate],
+        default=AnonymizationTemplate.REDACTED_ID.value,
+    )
+
+    class Meta:
+        verbose_name = _("Moyen de contact")
+        verbose_name_plural = _("Moyens de contact")

backend/api/prospect_flow/models/contact_person.py

@@ -0,0 +1,25 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ContactPerson(TrackableModel):
+    """
+    Model representing a contact person linked to a prospect.
+    """
+
+    prospect = models.ForeignKey(
+        "Prospect", verbose_name=_("prospect"), on_delete=models.PROTECT
+    )
+    first_name = models.CharField(verbose_name=_("prénom"), max_length=50, blank=True)
+    last_name = models.CharField(verbose_name=_("nom"), max_length=50, blank=True)
+    function = models.CharField(verbose_name=_("fonction"), max_length=100, blank=True)
+    deciding = models.BooleanField(verbose_name=_("décideur"), default=False)
+    preferred_contact_days_hours = models.TextField(
+        verbose_name=_("Jours et heures de contact préférés"), blank=True, default=""
+    )
+
+    class Meta:
+        verbose_name = _("Contact")
+        verbose_name_plural = _("Contacts")

backend/api/prospect_flow/models/m2m_prospect_selling_argument.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectSellingArgument(TrackableModel):
+    """
+    Many to Many table for selling arguments and prospects.
+    """
+
+    selling_argument = models.ForeignKey("SellingArgument", on_delete=models.CASCADE)
+    prospect = models.ForeignKey("Prospect", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["selling_argument", "prospect"],
+                name="unique_selling_argument_prospect",
+            )
+        ]

backend/api/prospect_flow/models/m2m_prospect_type_selling_argument.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectTypeSellingArgument(TrackableModel):
+    """
+    Many to Many table for selling arguments and prospect types.
+    """
+
+    selling_argument = models.ForeignKey("SellingArgument", on_delete=models.CASCADE)
+    prospect_type = models.ForeignKey("ProspectType", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["selling_argument", "prospect_type"],
+                name="unique_selling_argument_prospect_type",
+            )
+        ]

backend/api/prospect_flow/models/m2m_prospect_type_template.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectTypeTemplate(TrackableModel):
+    """
+    Many to Many table for templates and prospect types.
+    """
+
+    template = models.ForeignKey("Template", on_delete=models.CASCADE)
+    prospect_type = models.ForeignKey("ProspectType", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["template", "prospect_type"],
+                name="unique_template_prospect_type",
+            )
+        ]

backend/api/prospect_flow/models/m2m_template_step.py

@@ -0,0 +1,26 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_TemplateStep(TrackableModel):
+    """
+    Many to Many table for templates and steps (identified by the step type).
+    A template can have the same step type multiple times, but there can't be two entries with the same order for one template.
+    """
+
+    template = models.ForeignKey("Template", on_delete=models.CASCADE)
+    step_type = models.ForeignKey("StepType", on_delete=models.CASCADE)
+    order = models.IntegerField(verbose_name=_("ordre"))
+    default_notes = models.TextField(
+        verbose_name=_("notes par défaut"), blank=True, default=""
+    )
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["template", "order"],
+                name="unique_template_order",
+            )
+        ]

backend/api/prospect_flow/models/prospect.py

@@ -0,0 +1,39 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.lead_explorer.models.brut_company import BrutCompany
+from api.core.models.trackable_model import TrackableModel
+
+
+class Prospect(TrackableModel):
+    """
+    Model representing a prospect.
+    """
+
+    brut_company = models.ForeignKey(
+        BrutCompany,
+        verbose_name=_("informations de la société"),
+        on_delete=models.PROTECT,
+    )
+    prospect_type = models.ForeignKey(
+        "ProspectType",
+        verbose_name=_("type de prospect"),
+        on_delete=models.PROTECT,
+        blank=True,
+        null=True,
+    )
+    selling_arguments = models.ManyToManyField(
+        "SellingArgument",
+        verbose_name=_("arguments de vente"),
+        blank=True,
+        through="M2M_ProspectSellingArgument",
+    )
+    decision_making = models.TextField(
+        verbose_name=_("prise de décision"), blank=True, default=""
+    )
+    decided = models.BooleanField(verbose_name=_("décidé"), default=False)
+    decided_at = models.DateTimeField(_("a décidé le"), blank=True, null=True)
+
+    class Meta:
+        verbose_name = _("Prospect")
+        verbose_name_plural = _("Prospects")

backend/api/prospect_flow/models/prospect_contact_method.py

@@ -0,0 +1,56 @@
+from django.db import models
+from django.core.exceptions import ValidationError
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectContactMethod(TrackableModel):
+    prospect = models.ForeignKey(
+        "Prospect",
+        verbose_name=_("prospect"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_person = models.ForeignKey(
+        "ContactPerson",
+        verbose_name=_("contact"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_method = models.ForeignKey(
+        "ContactMethod", verbose_name=_("moyen de contact"), on_delete=models.PROTECT
+    )
+    label = models.CharField(verbose_name=_("label"), max_length=100, blank=True)
+    value = models.CharField(verbose_name=_("valeur"), max_length=255)
+    preferred = models.BooleanField(default=False)
+
+    def clean(self):
+        super().clean()
+        if bool(self.prospect) == bool(self.contact_person):
+            raise ValidationError(
+                _("Renseigne soit un prospect soit un contact (exactement un).")
+            )
+
+    def save(self, *args, **kwargs):
+        """Validation before saving"""
+        self.full_clean()
+        super().save(*args, **kwargs)
+
+    class Meta:
+        verbose_name = _("Moyen de contact")
+        verbose_name_plural = _("Moyens de contact")
+        constraints = [
+            models.CheckConstraint(
+                name="%(app_label)s_%(class)s_exactly_one_owner",
+                condition=(
+                    models.Q(prospect__isnull=False, contact_person__isnull=True)
+                    | models.Q(prospect__isnull=True, contact_person__isnull=False)
+                ),
+                violation_error_message=_(
+                    "Un moyen de contact doit être lié soit à un prospect, soit à un contact, mais pas les deux."
+                ),
+            ),
+        ]

backend/api/prospect_flow/models/prospect_step.py

@@ -0,0 +1,54 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectStep(TrackableModel):
+    """
+    Model representing the prospection steps for a prospect.
+    """
+
+    source_template_step = models.ForeignKey(
+        "M2M_TemplateStep",
+        verbose_name=_("étape source"),
+        null=True,
+        on_delete=models.SET_NULL,
+    )
+    prospect = models.ForeignKey(
+        "Prospect",
+        verbose_name=_("prospect"),
+        on_delete=models.PROTECT,
+    )
+    contact_person = models.ForeignKey(
+        "ContactPerson",
+        verbose_name=_("contact"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_method = models.ForeignKey(
+        "ContactMethod",
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    step_type = models.ForeignKey(
+        "StepType",
+        on_delete=models.PROTECT,
+    )
+    order = models.PositiveIntegerField()
+    notes = models.TextField(blank=True)
+    done = models.BooleanField(default=False)
+    done_datetime = models.DateTimeField(null=True, blank=True)
+
+    class Meta:
+        verbose_name = _("Étape de prospection du prospect")
+        verbose_name_plural = _("Étapes de prospection du prospect")
+        constraints = [
+            models.UniqueConstraint(
+                fields=["prospect", "order"],
+                name="uniq_prospect_step_order",
+            ),
+        ]
+        ordering = ["prospect_id", "order"]

backend/api/prospect_flow/models/prospect_type.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectType(TrackableModel):
+    """
+    Model representing a prospect type.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    selling_arguments = models.ManyToManyField(
+        "SellingArgument",
+        verbose_name=_("arguments de vente"),
+        blank=True,
+        related_name="prospect_types",
+        through="M2M_ProspectTypeSellingArgument",
+    )
+    templates = models.ManyToManyField(
+        "Template",
+        verbose_name=_("modèles de prospection"),
+        blank=True,
+        related_name="prospect_types",
+        through="M2M_ProspectTypeTemplate",
+    )
+
+    class Meta:
+        verbose_name = _("Type de prospect")
+        verbose_name_plural = _("Types de prospects")

backend/api/prospect_flow/models/selling_argument.py

@@ -0,0 +1,16 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class SellingArgument(TrackableModel):
+    """
+    Model representing a selling argument.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+
+    class Meta:
+        verbose_name = _("Argument de vente")
+        verbose_name_plural = _("Arguments de vente")

backend/api/prospect_flow/models/step_type.py

@@ -0,0 +1,16 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class StepType(TrackableModel):
+    """
+    Model representing a prospection step type
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=150)
+
+    class Meta:
+        verbose_name = _("Type d'étape de prospection")
+        verbose_name_plural = _("Types d'étape de prospection")

backend/api/prospect_flow/models/template.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Template(TrackableModel):
+    """
+    Model representing a prospection template
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=150)
+    steps = models.ManyToManyField(
+        "StepType",
+        verbose_name=_("étapes de prospection"),
+        blank=True,
+        related_name="templates",
+        through="M2M_TemplateStep",
+    )
+
+    class Meta:
+        verbose_name = _("Modèle de prospection")
+        verbose_name_plural = _("Modèles de prospection")

backend/api/prospect_flow/urls.py

@@ -0,0 +1,6 @@
+from django.urls import path
+
+app_name = "prospect_flow"
+urlpatterns = [
+    
+]

backend/api/prospect_flow/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _
+

backend/api/prospect_on_the_go/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/prospect_on_the_go/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A3ProspectOnTheGoConfig(AppConfig):
+    name = "api.prospect_on_the_go"

backend/api/prospect_on_the_go/urls.py

@@ -0,0 +1,6 @@
+from django.urls import path
+
+app_name = "prospect_on_the_go"
+urlpatterns = [
+
+]

backend/api/prospect_on_the_go/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _
+

backend/api/users/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/users/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class UsersConfig(AppConfig):
+    name = 'api.users'

backend/api/users/migrations/0001_initial.py

@@ -0,0 +1,146 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.contrib.auth.models
+import django.contrib.auth.validators
+import django.db.models.deletion
+import django.utils.timezone
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('auth', '0012_alter_user_first_name_max_length'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='User',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
+                ('username', models.CharField(error_messages={'unique': 'A user with that username already exists.'}, help_text='Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.', max_length=150, unique=True, validators=[django.contrib.auth.validators.UnicodeUsernameValidator()], verbose_name='username')),
+                ('first_name', models.CharField(blank=True, max_length=150, verbose_name='first name')),
+                ('last_name', models.CharField(blank=True, max_length=150, verbose_name='last name')),
+                ('is_staff', models.BooleanField(default=False, help_text='Designates whether the user can log into this admin site.', verbose_name='staff status')),
+                ('is_active', models.BooleanField(default=True, help_text='Designates whether this user should be treated as active. Unselect this instead of deleting accounts.', verbose_name='active')),
+                ('date_joined', models.DateTimeField(default=django.utils.timezone.now, verbose_name='date joined')),
+                ('email', models.EmailField(max_length=254, unique=True, verbose_name='email')),
+                ('initials', models.CharField(blank=True, max_length=5, verbose_name='initiales')),
+                ('color', models.CharField(blank=True, max_length=7, verbose_name='couleur')),
+                ('image', models.ImageField(blank=True, null=True, upload_to='user_images/', verbose_name='image')),
+                ('phone_number', models.CharField(blank=True, max_length=20, verbose_name='numéro de téléphone')),
+                ('c2c_extension', models.CharField(blank=True, max_length=10, verbose_name='extension click to call')),
+                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
+                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
+            ],
+            options={
+                'verbose_name': 'user',
+                'verbose_name_plural': 'users',
+            },
+            managers=[
+                ('objects', django.contrib.auth.models.UserManager()),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Authorization',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=100, unique=True, verbose_name='nom')),
+                ('code', models.CharField(max_length=100, unique=True, verbose_name='code')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'Authorization',
+                'verbose_name_plural': 'Authorizations',
+            },
+        ),
+        migrations.CreateModel(
+            name='M2M_RoleAuthorizations',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('authorization', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='users.authorization')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Role',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=100, unique=True, verbose_name='nom')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('authorizations', models.ManyToManyField(blank=True, related_name='roles', through='users.M2M_RoleAuthorizations', to='users.authorization', verbose_name='authorisations')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'role',
+                'verbose_name_plural': 'roles',
+            },
+        ),
+        migrations.AddField(
+            model_name='m2m_roleauthorizations',
+            name='role',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='users.role'),
+        ),
+        migrations.CreateModel(
+            name='Team',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=255, unique=True, verbose_name='nom')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'Team',
+                'verbose_name_plural': 'Teams',
+            },
+        ),
+        migrations.CreateModel(
+            name='UserTeamRole',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('role', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_teams', to='users.role', verbose_name='rôle')),
+                ('team', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_roles', to='users.team', verbose_name='équipe')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='team_roles', to=settings.AUTH_USER_MODEL, verbose_name='utilisateur')),
+            ],
+            options={
+                'abstract': False,
+            },
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_roleauthorizations',
+            constraint=models.UniqueConstraint(fields=('role', 'authorization'), name='unique_role_authorization'),
+        ),
+    ]

backend/api/users/models/__init__.py

@@ -0,0 +1,15 @@
+from .user import User
+from .role import Role
+from .team import Team
+from .authorization import Authorization
+from .user_team_role import UserTeamRole
+from .m2m_role_authorization import M2M_RoleAuthorizations
+
+__all__ = [
+    "User",
+    "Role",
+    "Team",
+    "Authorization",
+    "UserTeamRole",
+    "M2M_RoleAuthorizations",
+]

backend/api/users/models/authorization.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Authorization(TrackableModel):
+    """
+    Model representing authorizations within the user account system.
+    These authorizations can be assigned to roles to control access permissions.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, unique=True)
+    code = models.CharField(verbose_name=_("code"), max_length=100, unique=True)
+    description = models.TextField(
+        verbose_name=_("description"), blank=True, default=""
+    )
+
+    class Meta:
+        verbose_name = _("Authorization")
+        verbose_name_plural = _("Authorizations")

backend/api/users/models/m2m_role_authorization.py

@@ -0,0 +1,22 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+from api.users.models.authorization import Authorization
+from api.users.models.role import Role
+
+
+class M2M_RoleAuthorizations(TrackableModel):
+    """
+    Many to Many table for roles and authorizations.
+    """
+
+    role = models.ForeignKey(Role, on_delete=models.CASCADE)
+    authorization = models.ForeignKey(Authorization, on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["role", "authorization"], name="unique_role_authorization"
+            )
+        ]

backend/api/users/models/role.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Role(TrackableModel):
+    """
+    Model representing a role that can be assigned to users within teams.
+    A user can have a different role in each team they are part of.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, unique=True)
+    description = models.TextField(
+        verbose_name=_("description"), blank=True, default=""
+    )
+    authorizations = models.ManyToManyField(
+        "users.Authorization",
+        verbose_name=_("authorisations"),
+        blank=True,
+        related_name="roles",
+        through="M2M_RoleAuthorizations",
+    )
+
+    class Meta:
+        verbose_name = _("role")
+        verbose_name_plural = _("roles")
+
+    def __str__(self):
+        return self.name

backend/api/users/models/team.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Team(TrackableModel):
+    """
+    Model representing a team within the user account system.
+    A team can contain multiple users that are linked together for collaboration.
+    """
+
+    name = models.CharField(max_length=255, unique=True, verbose_name=_("nom"))
+    description = models.TextField(
+        blank=True, verbose_name=_("description"), default=""
+    )
+
+    class Meta:
+        verbose_name = _("Team")
+        verbose_name_plural = _("Teams")
+
+    def __str__(self):
+        return self.name

backend/api/users/models/user.py

@@ -0,0 +1,34 @@
+from django.contrib.auth.models import AbstractUser
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class User(AbstractUser):
+    """
+    Custom user model for the project.
+    Inherits from Django's AbstractUser to leverage built-in authentication features.
+    Additional fields can be added here as needed.
+    """
+
+    email = models.EmailField(verbose_name=_("email"), unique=True)
+    initials = models.CharField(verbose_name=_("initiales"), max_length=5, blank=True)
+    color = models.CharField(verbose_name=_("couleur"), max_length=7, blank=True)  # hex
+    image = models.ImageField(
+        verbose_name=_("image"), upload_to="user_images/", blank=True, null=True
+    )
+    phone_number = models.CharField(
+        verbose_name=_("numéro de téléphone"), max_length=20, blank=True
+    )
+    c2c_extension = models.CharField(
+        verbose_name=_("extension click to call"), max_length=10, blank=True
+    )
+
+    USERNAME_FIELD = "email"
+    REQUIRED_FIELDS = ["username"]
+
+    class Meta:
+        verbose_name = _("user")
+        verbose_name_plural = _("users")
+
+    def __str__(self):
+        return f"{self.first_name} {self.last_name}"

backend/api/users/models/user_team_role.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class UserTeamRole(TrackableModel):
+    """
+    Model representing the association of users, teams, and roles within the user account system.
+    This model links a user to a specific team with a designated role.
+    """
+
+    user = models.ForeignKey(
+        "users.User",
+        on_delete=models.CASCADE,
+        related_name="team_roles",
+        verbose_name=_("utilisateur"),
+    )
+    team = models.ForeignKey(
+        "users.Team",
+        on_delete=models.CASCADE,
+        related_name="user_roles",
+        verbose_name=_("équipe"),
+    )
+    role = models.ForeignKey(
+        "users.Role",
+        on_delete=models.CASCADE,
+        related_name="user_teams",
+        verbose_name=_("rôle"),
+    )

backend/api/users/services/authorizations_control.py

@@ -0,0 +1,22 @@
+from api.users.models import *
+
+def has_authorization(*, user, code: str, team=None) -> bool:
+    if not user.is_authenticated:
+        return False
+
+    qs = Authorization.objects.filter(code=code)
+
+    memberships = UserTeamRole.objects.filter(user=user)
+
+    if team is not None:
+        memberships = memberships.filter(team=team)
+
+    return qs.filter(roleauthorization__role__teammembership__in=memberships).exists()
+
+
+class NotAuthorized(Exception):
+    pass
+
+def require_authorization(*, user, code: str, team=None):
+    if not has_authorization(user=user, code=code, team=team):
+        raise NotAuthorized(f"Missing authorization: {code}")

backend/api/users/signals.py

@@ -0,0 +1,65 @@
+# users/signals.py
+import io
+import random
+from PIL import Image, ImageDraw, ImageFont
+
+from django.conf import settings
+from django.core.files.base import ContentFile
+from django.db.models.signals import post_save
+from django.dispatch import receiver
+
+from .models import User
+
+PALETTE = ["#34344A", "#845A6D", "#D47386", "#C89B7B", "#32746D"]
+
+def initials_for(user: User) -> str:
+    if getattr(user, "initials", None):
+        return user.initials[:2].upper()
+
+    first = (user.first_name or "").strip()
+    last = (user.last_name or "").strip()
+
+    if first and last:
+        return (first[0] + last[0]).upper()
+    if first:
+        return first[:2].upper()
+    # fallback: email
+    return (user.email or "U")[:2].upper()
+
+def generate_avatar_png(text: str, bg_hex: str, size: int = 256) -> bytes:
+    img = Image.new("RGBA", (size, size), bg_hex)
+    draw = ImageDraw.Draw(img)
+
+    font_path = getattr(settings, "AVATAR_FONT_PATH", None)
+    if font_path:
+        font = ImageFont.truetype(font_path, int(size * 0.42))
+    else:
+        font = ImageFont.load_default()
+
+    bbox = draw.textbbox((0, 0), text, font=font)
+    tw, th = bbox[2] - bbox[0], bbox[3] - bbox[1]
+    x = (size - tw) / 2
+    y = (size - th) / 2 - (size * 0.05)
+
+    draw.text((x, y), text, font=font, fill="white")
+
+    out = io.BytesIO()
+    img.save(out, format="PNG", optimize=True)
+    return out.getvalue()
+
+@receiver(post_save, sender=User)
+def set_default_avatar(sender, instance: User, created: bool, **kwargs):
+    if not created:
+        return
+    if instance.image:
+        return
+
+    text = initials_for(instance)
+    bg = random.choice(PALETTE)
+
+    png_bytes = generate_avatar_png(text=text, bg_hex=bg, size=256)
+    filename = f"user_{instance.pk}_avatar.png"
+    instance.image.save(filename, ContentFile(png_bytes), save=False)
+    User.objects.filter(pk=instance.pk).update(
+        image=instance.image.name,
+    )

backend/api/users/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path, include
+
+urlpatterns = [
+    
+]

backend/api/users/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.