Merge branch 'master' of git.boulier.lan:lisa/Eiro

.env.example

@@ -0,0 +1,21 @@
+DJANGO_SETTINGS_MODULE=project.settings.xxx
+
+# Django
+DJANGO_SECRET_KEY=dev-secret-key
+DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1
+
+# Postgres
+POSTGRES_DB=
+POSTGRES_USER=
+POSTGRES_PASSWORD=
+POSTGRES_HOST=db
+POSTGRES_PORT=5432
+
+# Mail
+EMAIL_HOST=
+EMAIL_USE_TLS=True
+EMAIL_PORT=
+EMAIL_HOST_USER=
+EMAIL_HOST_PASSWORD=
+DEFAULT_FROM_EMAIL=
+SERVER_EMAIL=

.gitignore

@@ -0,0 +1,14 @@
+*.pyc
+__pycache__
+*.log
+files/
+.env*
+example.env.prod
+!.env.example
+docker-compose.prod.yml
+frontend/deploy/nginx/*
+!frontend/deploy/nginx/nginx.conf
+!frontend/deploy/nginx/nginx-default.conf
+frontend/node_modules
+backend/media
+backend/staticfiles

Makefile

@@ -0,0 +1,359 @@
+# Makefile
+
+.PHONY: help dev prod build logs shell clean migrate test lint format
+
+# Variables
+COMPOSE_FILE_DEV := docker-compose.yml
+COMPOSE_FILE_PROD := docker-compose.prod.yml
+DOCKER_COMPOSE_DEV := docker compose -f $(COMPOSE_FILE_DEV)
+DOCKER_COMPOSE_PROD := docker compose -f $(COMPOSE_FILE_PROD)
+BACKEND_CONTAINER_DEV := eiro-backend
+BACKEND_CONTAINER_PROD := eiro-backend-prod
+FRONTEND_CONTAINER_DEV := eiro-frontend
+FRONTEND_CONTAINER_PROD := eiro-frontend-prod
+POSTGRES_CONTAINER_DEV := eiro-postgres
+POSTGRES_CONTAINER_PROD := eiro-postgres-prod
+
+# Colors
+CYAN := \033[0;36m
+GREEN := \033[0;32m
+YELLOW := \033[0;33m
+RED := \033[0;31m
+NC := \033[0m # No Color
+
+## ============ HELP ============
+help:
+	@echo "$(CYAN)╔════════════════════════════════════════════════════════════╗$(NC)"
+	@echo "$(CYAN)║                  Eiro - Make Commands                      ║$(NC)"
+	@echo "$(CYAN)╚════════════════════════════════════════════════════════════╝$(NC)"
+	@echo ""
+	@echo "$(GREEN)GENERAL$(NC)"
+	@echo "  $(YELLOW)make help$(NC)                 - Affiche cette aide"
+	@echo ""
+	@echo "$(GREEN)🚀 DEVELOPMENT$(NC)"
+	@echo "  $(YELLOW)make dev-up$(NC)               - Démarrer l'env dev"
+	@echo "  $(YELLOW)make dev-down$(NC)             - Arrêter l'env dev"
+	@echo "  $(YELLOW)make dev-restart$(NC)          - Restart l'env dev"
+	@echo "  $(YELLOW)make dev-build$(NC)            - Build l'env dev"
+	@echo "  $(YELLOW)make dev-logs$(NC)             - Afficher les logs dev"
+	@echo "  $(YELLOW)make dev-logs-backend$(NC)     - Logs du backend seulement"
+	@echo "  $(YELLOW)make dev-logs-frontend$(NC)    - Logs du frontend seulement"
+	@echo "  $(YELLOW)make dev-shell-backend$(NC)    - Shell Django dans le backend"
+	@echo "  $(YELLOW)make dev-shell-frontend$(NC)   - Shell du frontend"
+	@echo ""
+	@echo "$(GREEN)🏗️  MIGRATION & DB (Dev)$(NC)"
+	@echo "  $(YELLOW)make dev-migrate$(NC)          - Exécuter les migrations"
+	@echo "  $(YELLOW)make dev-makemigrations$(NC)   - Créer les migrations"
+	@echo "  $(YELLOW)make dev-createsuperuser$(NC)  - Créer un superuser"
+	@echo "  $(YELLOW)make dev-fresh-db$(NC)         - Réinitialiser la BD (destructif)"
+	@echo "  $(YELLOW)make dev-dumpdata$(NC)         - Faire un dump des données"
+	@echo "  $(YELLOW)make dev-loaddata$(NC)         - Charger les données"
+	@echo "  $(YELLOW)make dev-db-backup$(NC)        - Backup BD de dev"
+	@echo ""
+	@echo "$(GREEN)🧪 TESTING & QUALITY (Dev)$(NC)"
+	@echo "  $(YELLOW)make dev-test$(NC)             - Lancer les tests"
+	@echo "  $(YELLOW)make dev-test-backend$(NC)     - Tests du backend seulement"
+	@echo "  $(YELLOW)make dev-test-frontend$(NC)    - Tests du frontend seulement"
+	@echo "  $(YELLOW)make dev-coverage$(NC)         - Coverage report"
+	@echo "  $(YELLOW)make dev-lint$(NC)             - Linter le code (pylint, eslint)"
+	@echo "  $(YELLOW)make dev-format$(NC)           - Formater le code (black, prettier)"
+# 	@echo ""
+# 	@echo "$(GREEN)🔒 PRODUCTION$(NC)"
+# 	@echo "  $(YELLOW)make prod-build$(NC)           - Construire les images prod"
+# 	@echo "  $(YELLOW)make prod-up$(NC)              - Démarrer l'env prod"
+# 	@echo "  $(YELLOW)make prod-down$(NC)            - Arrêter l'env prod"
+# 	@echo "  $(YELLOW)make prod-logs$(NC)            - Afficher les logs prod"
+# 	@echo "  $(YELLOW)make prod-migrate$(NC)         - Migrations en production"
+# 	@echo "  $(YELLOW)make prod-backup$(NC)          - Backup la BD prod"
+# 	@echo "  $(YELLOW)make prod-restore$(NC)         - Restore depuis un backup"
+	@echo ""
+	@echo "$(GREEN)🐳 DOCKER$(NC)"
+	@echo "  $(YELLOW)make docker-clean$(NC)         - Nettoyer images/volumes/containers inutilisés"
+	@echo "  $(YELLOW)make docker-prune$(NC)         - Prune agressif (attention!)"
+# 	@echo ""
+# 	@echo "$(GREEN)📦 BUILD$(NC)"
+# 	@echo "  $(YELLOW)make build-backend$(NC)        - Builder le backend"
+# 	@echo "  $(YELLOW)make build-frontend$(NC)       - Builder le frontend"
+# 	@echo "  $(YELLOW)make build-all$(NC)            - Builder tout"
+# 	@echo ""
+# 	@echo "$(GREEN)🚀 DEPLOYMENT$(NC)"
+# 	@echo "  $(YELLOW)make deploy-staging$(NC)       - Déployer en staging"
+# 	@echo "  $(YELLOW)make deploy-prod$(NC)          - Déployer en production"
+# 	@echo "  $(YELLOW)make deploy-rollback$(NC)      - Rollback version précédente"
+	@echo ""
+
+## ============ DEVELOPMENT ============
+
+dev-up:
+	@echo "$(GREEN)▶ Démarrage de l'environnement de développement...$(NC)"
+	$(DOCKER_COMPOSE_DEV) up -d
+	@echo "$(GREEN)✓ Environnement démarré$(NC)"
+	@echo "  Backend:  http://localhost:8000"
+	@echo "  Frontend: http://localhost:3000"
+	@echo "  API:      http://localhost:8000/api/v1/"
+	@echo "  Admin:    http://localhost:8000/admin"
+
+dev-down:
+	@echo "$(GREEN)▶ Arrêt de l'environnement de développement...$(NC)"
+	$(DOCKER_COMPOSE_DEV) down
+	@echo "$(GREEN)✓ Environnement arrêté$(NC)"
+
+dev-restart:
+	$(DOCKER_COMPOSE_DEV) down && $(DOCKER_COMPOSE_DEV) up --build
+	@echo "$(GREEN)✓ Environnement redémarré$(NC)"
+
+dev-build:
+	$(DOCKER_COMPOSE_DEV) up --build -d
+	@echo "$(GREEN)✓ Environnement buildé$(NC)"
+
+dev-logs:
+	$(DOCKER_COMPOSE_DEV) logs -f
+
+dev-logs-backend:
+	$(DOCKER_COMPOSE_DEV) logs -f $(BACKEND_CONTAINER_DEV)
+
+dev-logs-frontend:
+	$(DOCKER_COMPOSE_DEV) logs -f $(FRONTEND_CONTAINER_DEV)
+
+dev-logs-postgres:
+	$(DOCKER_COMPOSE_DEV) logs -f $(POSTGRES_CONTAINER_DEV)
+
+dev-shell-backend:
+	@echo "$(CYAN)Ouverture d'un shell Django...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec $(BACKEND_CONTAINER_DEV) python manage.py shell
+
+dev-shell-frontend:
+	@echo "$(CYAN)Ouverture d'un shell dans le frontend...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec $(FRONTEND_CONTAINER_DEV) sh
+
+dev-bash-backend:
+	$(DOCKER_COMPOSE_DEV) exec $(BACKEND_CONTAINER_DEV) bash
+
+dev-bash-frontend:
+	$(DOCKER_COMPOSE_DEV) exec $(FRONTEND_CONTAINER_DEV) bash
+
+## ============ DATABASE & MIGRATIONS (DEV) ============
+
+dev-migrate:
+	@echo "$(GREEN)▶ Exécution des migrations...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py migrate
+	@echo "$(GREEN)✓ Migrations complétées$(NC)"
+
+dev-makemigrations:
+	@echo "$(GREEN)▶ Création des migrations...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py makemigrations
+	@echo "$(GREEN)✓ Migrations créées$(NC)"
+
+dev-createsuperuser:
+	@echo "$(GREEN)▶ Création d'un superuser...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec $(BACKEND_CONTAINER_DEV) python manage.py createsuperuser
+
+dev-fresh-db:
+	@echo "$(RED)⚠ ATTENTION: Cela va SUPPRIMER toute la BD!$(NC)"
+	@read -p "Êtes-vous sûr? (y/N) " -n 1 -r; \
+	echo; \
+	if [[ $$REPLY =~ ^[Yy]$$ ]]; then \
+		echo "$(GREEN)▶ Suppression et recréation de la BD...$(NC)"; \
+		$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py flush --noinput; \
+		$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py migrate; \
+		echo "$(GREEN)✓ BD réinitialisée$(NC)"; \
+	else \
+		echo "$(YELLOW)Annulé$(NC)"; \
+	fi
+
+dev-dumpdata:
+	@echo "$(GREEN)▶ Création du dump...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py dumpdata database/initial_data.json
+	@echo "$(GREEN)✓ Dump créé$(NC)"
+
+dev-loaddata:
+	@echo "$(GREEN)▶ Chargement des données initiales...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py loaddata database/initial_data.json
+	@echo "$(GREEN)✓ BD chargée$(NC)"
+
+dev-db-backup:
+	@echo "$(GREEN)▶ Backup de la BD de dev...$(NC)"
+	@mkdir -p ./backups
+	$(DOCKER_COMPOSE_DEV) exec -T $(POSTGRES_CONTAINER_DEV) pg_dump -U eiro eiro > ./backups/dev-backup-$$(date +%Y%m%d-%H%M%S).sql
+	@echo "$(GREEN)✓ Backup créé$(NC)"
+
+## ============ TESTING & QUALITY (DEV) ============
+
+dev-test:
+	@echo "$(GREEN)▶ Lancement des tests...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py test --verbosity=2
+	$(DOCKER_COMPOSE_DEV) exec -T $(FRONTEND_CONTAINER_DEV) npm test
+	@echo "$(GREEN)✓ Tests complétés$(NC)"
+
+dev-test-backend:
+	@echo "$(GREEN)▶ Tests du backend...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) python manage.py test --verbosity=2
+	@echo "$(GREEN)✓ Tests du backend complétés$(NC)"
+
+dev-test-frontend:
+	@echo "$(GREEN)▶ Tests du frontend...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(FRONTEND_CONTAINER_DEV) npm test
+	@echo "$(GREEN)✓ Tests du frontend complétés$(NC)"
+
+dev-coverage:
+	@echo "$(GREEN)▶ Calcul du coverage...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) coverage run --source='.' manage.py test
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) coverage report
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) coverage html
+	@echo "$(GREEN)✓ Rapport coverage généré (htmlcov/index.html)$(NC)"
+
+dev-lint:
+	@echo "$(GREEN)▶ Linting du code...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) pylint backend/
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) flake8 backend/
+	$(DOCKER_COMPOSE_DEV) exec -T $(FRONTEND_CONTAINER_DEV) npm run lint
+	@echo "$(GREEN)✓ Linting complété$(NC)"
+
+dev-format:
+	@echo "$(GREEN)▶ Formatage du code...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) black .
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) isort .
+	$(DOCKER_COMPOSE_DEV) exec -T $(FRONTEND_CONTAINER_DEV) npm run format
+	@echo "$(GREEN)✓ Formatage complété$(NC)"
+
+dev-mypy:
+	@echo "$(GREEN)▶ Type checking avec mypy...$(NC)"
+	$(DOCKER_COMPOSE_DEV) exec -T $(BACKEND_CONTAINER_DEV) mypy .
+	@echo "$(GREEN)✓ Type checking complété$(NC)"
+
+## ============ PRODUCTION ============
+
+prod-build:
+	@echo "$(GREEN)▶ Construction des images production...$(NC)"
+	docker-compose -f $(COMPOSE_FILE_PROD) build --no-cache
+	@echo "$(GREEN)✓ Images construites$(NC)"
+
+prod-up:
+	@echo "$(GREEN)▶ Démarrage de la production...$(NC)"
+	docker-compose -f $(COMPOSE_FILE_PROD) up -d
+	@echo "$(GREEN)✓ Production démarrée$(NC)"
+	@echo "  App: https://$$(grep APP_DOMAIN .env.prod | cut -d'=' -f2)"
+
+prod-down:
+	@echo "$(GREEN)▶ Arrêt de la production...$(NC)"
+	docker-compose -f $(COMPOSE_FILE_PROD) down
+	@echo "$(GREEN)✓ Production arrêtée$(NC)"
+
+prod-restart: prod-down prod-up
+	@echo "$(GREEN)✓ Production redémarrée$(NC)"
+
+prod-logs:
+	docker-compose -f $(COMPOSE_FILE_PROD) logs -f --tail=100
+
+prod-logs-backend:
+	docker-compose -f $(COMPOSE_FILE_PROD) logs -f $(BACKEND_CONTAINER_PROD)
+
+prod-logs-traefik:
+	docker-compose -f $(COMPOSE_FILE_PROD) logs -f traefik
+
+prod-migrate:
+	@echo "$(GREEN)▶ Migrations en production...$(NC)"
+	docker-compose -f $(COMPOSE_FILE_PROD) exec -T $(BACKEND_CONTAINER_PROD) python manage.py migrate
+	@echo "$(GREEN)✓ Migrations complétées$(NC)"
+
+prod-backup:
+	@echo "$(GREEN)▶ Backup de la BD production...$(NC)"
+	@mkdir -p ./backups
+	docker-compose -f $(COMPOSE_FILE_PROD) exec -T $(POSTGRES_CONTAINER_PROD) pg_dump -U $$(grep DB_USER .env.prod | cut -d'=' -f2) $$(grep DB_NAME .env.prod | cut -d'=' -f2) > ./backups/prod-backup-$$(date +%Y%m%d-%H%M%S).sql
+	@echo "$(GREEN)✓ Backup créé: ./backups/prod-backup-*.sql$(NC)"
+
+prod-restore:
+	@echo "$(YELLOW)Fichiers de backup disponibles:$(NC)"
+	@ls -lh ./backups/prod-backup-*.sql 2>/dev/null || echo "  Aucun backup trouvé"
+	@read -p "Entrer le chemin du fichier (ou laisser vide pour annuler): " backup_file; \
+	if [ -n "$$backup_file" ] && [ -f "$$backup_file" ]; then \
+		echo "$(RED)⚠ ATTENTION: Cela va RESTAURER une ancienne BD!$(NC)"; \
+		read -p "Êtes-vous sûr? (y/N) " -n 1 -r; \
+		echo; \
+		if [[ $$REPLY =~ ^[Yy]$$ ]]; then \
+			echo "$(GREEN)▶ Restore en cours...$(NC)"; \
+			docker-compose -f $(COMPOSE_FILE_PROD) exec -T $(POSTGRES_CONTAINER_PROD) psql -U $$(grep DB_USER .env.prod | cut -d'=' -f2) $$(grep DB_NAME .env.prod | cut -d'=' -f2) < $$backup_file; \
+			echo "$(GREEN)✓ Restore complété$(NC)"; \
+		else \
+			echo "$(YELLOW)Annulé$(NC)"; \
+		fi; \
+	else \
+		echo "$(YELLOW)Fichier invalide ou annulé$(NC)"; \
+	fi
+
+prod-shell-backend:
+	docker-compose -f $(COMPOSE_FILE_PROD) exec $(BACKEND_CONTAINER_PROD) bash
+
+## ============ BUILD ============
+
+build-backend:
+	@echo "$(GREEN)▶ Construction du backend...$(NC)"
+	docker build -t eiro-backend:latest -f backend.Dockerfile ./backend
+	@echo "$(GREEN)✓ Backend construit$(NC)"
+
+build-frontend:
+	@echo "$(GREEN)▶ Construction du frontend...$(NC)"
+	docker build -t eiro-frontend:latest -f frontend.Dockerfile ./frontend
+	@echo "$(GREEN)✓ Frontend construit$(NC)"
+
+build-all: build-backend build-frontend
+	@echo "$(GREEN)✓ Tous les services construits$(NC)"
+
+## ============ DOCKER CLEANUP ============
+
+docker-clean:
+	@echo "$(GREEN)▶ Nettoyage Docker...$(NC)"
+	docker system prune -f
+	@echo "$(GREEN)✓ Nettoyage complété$(NC)"
+
+docker-clean-volumes:
+	@echo "$(RED)⚠ Attention: Cela va supprimer les volumes!$(NC)"
+	@read -p "Êtes-vous sûr? (y/N) " -r REPLY; \
+	echo; \
+	if [ "$$REPLY" = "Y" ] || [ "$$REPLY" = "y" ]; then \
+		docker system prune -f --volumes; \
+		echo "$(GREEN)✓ Volumes supprimés$(NC)"; \
+	else \
+		echo "$(YELLOW)Annulé$(NC)"; \
+	fi
+
+docker-prune:
+	@echo "$(RED)⚠ Prune AGRESSIF - Cela va supprimer beaucoup de choses!$(NC)"
+	@read -p "Êtes-vous sûr? (y/N) " -r REPLY; \
+	echo; \
+	if [ "$$REPLY" = "Y" ] || [ "$$REPLY" = "y" ]; then \
+		docker system prune -a -f --volumes; \
+		echo "$(GREEN)✓ Prune complété$(NC)"; \
+	else \
+		echo "$(YELLOW)Annulé$(NC)"; \
+	fi
+
+## ============ UTILS ============
+
+status:
+	@echo "$(CYAN)╔════════════════════════════════════════════════════════════╗$(NC)"
+	@echo "$(CYAN)║           Eiro - Status Services                   ║$(NC)"
+	@echo "$(CYAN)╚════════════════════════════════════════════════════════════╝$(NC)"
+	@echo ""
+	@echo "$(GREEN)Development:$(NC)"
+	@$(DOCKER_COMPOSE_DEV) ps
+	@echo ""
+
+version:
+	@echo "Eiro v1.0.0"
+	@echo "Docker: $$(docker --version)"
+	@echo "Docker Compose: $$(docker-compose --version)"
+
+## ============ SHORTCUTS ============
+
+up: dev-up
+down: dev-down
+restart: dev-restart
+build: dev-build
+logs: dev-logs
+test: dev-test
+migrate: dev-migrate
+fresh: dev-fresh-db
+lint: dev-lint
+format: dev-format
+shell: dev-shell-backend

backend.Dockerfile

@@ -0,0 +1,19 @@
+FROM python:3.13-slim
+
+ENV PYTHONDONTWRITEBYTECODE=1
+ENV PYTHONUNBUFFERED=1
+ENV LANG=C.UTF-8
+ENV LC_ALL=C.UTF-8
+
+# deps système
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    libpq-dev \
+    gcc \
+    && rm -rf /var/cache/apt/archives /var/lib/apt/lists/*
+
+
+WORKDIR /app
+COPY . .
+RUN pip install --upgrade pip
+RUN pip install --no-cache-dir -r /app/requirements.txt

backend/api/core/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/core/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class CoreConfig(AppConfig):
+    name = 'api.core'

backend/api/core/migrations/0001_initial.py

@@ -0,0 +1,46 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='GDPR_Event',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('event_type', models.CharField(choices=[('DATA_EXPORT', 'Export de données'), ('DATA_ANONYMIZATION', 'Anonymisation de données'), ('CONSENT_WITHDRAWAL', 'Consentement retiré')], max_length=50, verbose_name="type d'événement")),
+                ('subject_reference', models.CharField(help_text="Objet concerné par l'événement : Class:id", max_length=255, verbose_name='objet concerné')),
+                ('fields_touched', models.JSONField(blank=True, help_text="Liste des champs affectés par l'événement.", verbose_name='champs affectés')),
+                ('reason', models.CharField(choices=[('USER_REQUEST', 'Demande utilisateur'), ('RETENTION_POLICY', 'Politique de conservation')], max_length=50, verbose_name='raison')),
+                ('done_at', models.DateTimeField(auto_now_add=True, verbose_name='date et heure')),
+            ],
+            options={
+                'verbose_name': 'Événement RGPD',
+                'verbose_name_plural': 'Événements RGPD',
+            },
+        ),
+        migrations.CreateModel(
+            name='GlobalVariable',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('key', models.CharField(max_length=255, unique=True, verbose_name='clé')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('value', models.JSONField(blank=True, null=True, verbose_name='valeur')),
+            ],
+            options={
+                'verbose_name': 'Paramètre global',
+                'verbose_name_plural': 'Paramètres globaux',
+            },
+        ),
+    ]

backend/api/core/migrations/0002_initial.py

@@ -0,0 +1,33 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('core', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='gdpr_event',
+            name='done_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='Effectué par'),
+        ),
+        migrations.AddField(
+            model_name='globalvariable',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='globalvariable',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+    ]

backend/api/core/models/__init__.py

@@ -0,0 +1,9 @@
+from .gdpr_event import GDPR_Event
+from .global_variable import GlobalVariable
+from .trackable_model import TrackableModel
+
+__all__ = [
+    "GDPR_Event",
+    "GlobalVariable",
+    "TrackableModel",
+]

backend/api/core/models/gdpr_event.py

@@ -0,0 +1,51 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class GDPR_Event(models.Model):
+    """
+    Model to log GDPR-related events for auditing purposes.
+    """
+
+    EVENT_TYPES = [
+        ("DATA_EXPORT", _("Export de données")),
+        ("DATA_ANONYMIZATION", _("Anonymisation de données")),
+        ("CONSENT_WITHDRAWAL", _("Consentement retiré")),
+    ]
+
+    EVENT_REASON = [
+        ("USER_REQUEST", _("Demande utilisateur")),
+        ("RETENTION_POLICY", _("Politique de conservation")),
+    ]
+
+    event_type = models.CharField(
+        max_length=50, choices=EVENT_TYPES, verbose_name=_("type d'événement")
+    )
+    subject_reference = models.CharField(
+        max_length=255,
+        verbose_name=_("objet concerné"),
+        help_text=_("Objet concerné par l'événement : Class:id"),
+    )
+    fields_touched = models.JSONField(
+        blank=True,
+        verbose_name=_("champs affectés"),
+        help_text=_("Liste des champs affectés par l'événement."),
+    )
+    reason = models.CharField(
+        max_length=50, verbose_name=_("raison"), choices=EVENT_REASON
+    )
+    done_at = models.DateTimeField(auto_now_add=True, verbose_name=_("date et heure"))
+    done_by = models.ForeignKey(
+        "users.User",
+        null=True,
+        blank=True,
+        on_delete=models.SET_NULL,
+        verbose_name=_("Effectué par"),
+    )
+
+    class Meta:
+        verbose_name = _("Événement RGPD")
+        verbose_name_plural = _("Événements RGPD")
+
+    def __str__(self):
+        return f"{self.get_event_type_display()} - {self.done_at} - {self.subject_reference}"

backend/api/core/models/global_variable.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class GlobalVariable(TrackableModel):
+    """
+    Model to store global key-value pairs for application-wide settings.
+    """
+
+    key = models.CharField(max_length=255, unique=True, verbose_name=_("clé"))
+    description = models.TextField(
+        blank=True, default="", verbose_name=_("description")
+    )
+    value = models.JSONField(verbose_name=_("valeur"), null=True, blank=True)
+
+    class Meta:
+        verbose_name = _("Paramètre global")
+        verbose_name_plural = _("Paramètres globaux")
+
+    def __str__(self):
+        return f"{self.key}: {self.value}"

backend/api/core/models/trackable_model.py

@@ -0,0 +1,95 @@
+from django.utils import timezone
+from django.db import models
+from django.conf import settings
+from django.utils.translation import gettext_lazy as _
+
+
+class TrackableModel(models.Model):
+    created_at = models.DateTimeField(auto_now_add=True, verbose_name=_("créé le"))
+    created_by = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+        related_name="+",
+        verbose_name=_("créé par"),
+    )
+    updated_at = models.DateTimeField(auto_now=True, verbose_name=_("modifié le"))
+    updated_by = models.ForeignKey(
+        settings.AUTH_USER_MODEL,
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+        related_name="+",
+        verbose_name=_("modifié par"),
+    )
+    obsolete = models.BooleanField(default=False, verbose_name=_("obsolète"))
+    obsolete_at = models.DateTimeField(
+        null=True, blank=True, verbose_name=_("obsolète le")
+    )
+
+    class Meta:
+        abstract = True
+
+    def soft_delete(self, cascade_m2m=True):
+        """
+        Soft delete of trackable models. Objct becomes obsolete and obsolescence date is indicated.
+        """
+        if cascade_m2m:
+            self._cascade_soft_delete_m2m()
+
+        self.obsolete = True
+        self.obsolete_at = timezone.now()
+        self.save(update_fields=["obsolete", "obsolete_at"])
+
+    def _cascade_soft_delete_m2m(self):
+        """
+        Propagation of soft delete to M2M fields.
+        """
+        for field in self._meta.get_fields():
+            if field.many_to_many and not field.auto_created:
+                through_model = field.remote_field.through
+
+                if issubclass(through_model, TrackableModel):
+                    field_name = None
+                    for through_field in through_model._meta.get_fields():
+                        if through_field.related_model == self.__class__:
+                            field_name = through_field.name
+                            break
+
+                    if field_name:
+                        filter_kwargs = {field_name: self}
+                        for relation in through_model.objects.filter(
+                            **filter_kwargs, obsolete=False
+                        ):
+                            relation.soft_delete(cascade_m2m=False)
+
+    def restore(self, cascade_m2m=True):
+        """
+        Restore an object that was soft deleted.
+        """
+        if cascade_m2m:
+            self._cascade_restore_m2m()
+
+        self.obsolete = False
+        self.obsolete_at = None
+        self.save(update_fields=["obsolete", "obsolete_at"])
+
+    def _cascade_restore_m2m(self):
+        for field in self._meta.get_fields():
+            if field.many_to_many and not field.auto_created:
+                through_model = field.remote_field.through
+
+                if issubclass(through_model, TrackableModel):
+                    field_name = None
+                    for through_field in through_model._meta.get_fields():
+                        if through_field.related_model == self.__class__:
+                            field_name = through_field.name
+                            break
+
+                    if field_name:
+                        filter_kwargs = {field_name: self}
+                        for relation in through_model.objects.filter(
+                            **filter_kwargs, obsolete=True
+                        ):
+                            relation.restore(cascade_m2m=False)

backend/api/core/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path, include
+
+urlpatterns = [
+    
+]

backend/api/core/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.

backend/api/lead_explorer/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/lead_explorer/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A1LeadExplorerConfig(AppConfig):
+    name = 'api.lead_explorer'

backend/api/lead_explorer/migrations/0001_initial.py

@@ -0,0 +1,41 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='BrutCompany',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('first_name', models.CharField(blank=True, max_length=100, verbose_name='prénom')),
+                ('last_name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+                ('company_name', models.CharField(blank=True, max_length=200, verbose_name='nom de société')),
+                ('entity_type', models.CharField(choices=[('COMPANY', 'Société'), ('PERSON', 'Personne')], help_text="Si c'est une personne, le ContactPerson est automatiquement créé lorsque la société passe en prospection", max_length=20, verbose_name='type')),
+                ('lat', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True, verbose_name='latitude')),
+                ('long', models.DecimalField(blank=True, decimal_places=6, max_digits=9, null=True, verbose_name='longitude')),
+                ('address', models.CharField(blank=True, max_length=150, verbose_name='adresse')),
+                ('postal_code', models.CharField(blank=True, max_length=20, verbose_name='code postal')),
+                ('city', models.CharField(blank=True, max_length=30, verbose_name='ville')),
+                ('siren', models.CharField(blank=True, max_length=9, verbose_name='numéro siren')),
+                ('siret', models.CharField(blank=True, max_length=14, verbose_name='numéro siret')),
+                ('processed', models.BooleanField(default=False, verbose_name='traité')),
+                ('processed_at', models.DateTimeField(blank=True, null=True, verbose_name='traité le')),
+            ],
+            options={
+                'verbose_name': 'Entreprise',
+                'verbose_name_plural': 'Entreprises',
+            },
+        ),
+    ]

backend/api/lead_explorer/migrations/0002_initial.py

@@ -0,0 +1,33 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('lead_explorer', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='brutcompany',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='brutcompany',
+            name='processed_by',
+            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='processed_companies', to=settings.AUTH_USER_MODEL, verbose_name='traité par'),
+        ),
+        migrations.AddField(
+            model_name='brutcompany',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+    ]

backend/api/lead_explorer/models/__init__.py

@@ -0,0 +1,5 @@
+from .brut_company import BrutCompany
+
+__all__ = [
+    'BrutCompany',
+]

backend/api/lead_explorer/models/brut_company.py

@@ -0,0 +1,65 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class BrutCompany(TrackableModel):
+    """
+    Model representing the brut information from a company.
+    """
+
+    ENTITY_TYPE = [
+        ("COMPANY", _("Société")),
+        ("PERSON", _("Personne")),
+    ]
+
+    first_name = models.CharField(verbose_name=_("prénom"), max_length=100, blank=True)
+    last_name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    company_name = models.CharField(
+        verbose_name=_("nom de société"), max_length=200, blank=True
+    )  # unique=True ?
+    entity_type = models.CharField(
+        verbose_name=_("type"),
+        max_length=20,
+        choices=ENTITY_TYPE,
+        help_text=_(
+            "Si c'est une personne, le ContactPerson est automatiquement créé lorsque la société passe en prospection"
+        ),
+    )
+    lat = models.DecimalField(
+        verbose_name=_("latitude"),
+        max_digits=9,
+        decimal_places=6,
+        blank=True,
+        null=True,
+    )
+    long = models.DecimalField(
+        verbose_name=_("longitude"),
+        max_digits=9,
+        decimal_places=6,
+        blank=True,
+        null=True,
+    )
+    address = models.CharField(verbose_name=_("adresse"), max_length=150, blank=True)
+    postal_code = models.CharField(
+        verbose_name=_("code postal"), max_length=20, blank=True
+    )
+    city = models.CharField(verbose_name=_("ville"), max_length=30, blank=True)
+    siren = models.CharField(verbose_name=_("numéro siren"), max_length=9, blank=True)
+    siret = models.CharField(verbose_name=_("numéro siret"), max_length=14, blank=True)
+    processed = models.BooleanField(verbose_name=_("traité"), default=False)
+    processed_at = models.DateTimeField(
+        verbose_name=_("traité le"), blank=True, null=True
+    )
+    processed_by = models.ForeignKey(
+        "users.User",
+        verbose_name=_("traité par"),
+        null=True,
+        on_delete=models.SET_NULL,
+        related_name="processed_companies",
+    )
+
+    class Meta:
+        verbose_name = _("Entreprise")
+        verbose_name_plural = _("Entreprises")

backend/api/lead_explorer/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path
+
+app_name = "lead_explorer"
+urlpatterns = [
+]

backend/api/lead_explorer/views.py

@@ -0,0 +1,2 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _

backend/api/prospect_flow/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/prospect_flow/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A2ProspectFlowConfig(AppConfig):
+    name = 'api.prospect_flow'

backend/api/prospect_flow/migrations/0001_initial.py

@@ -0,0 +1,204 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='ContactMethod',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+                ('anonymization_template', models.CharField(choices=[('email_invalid', 'EMAIL_INVALID'), ('phone_e164_zero', 'PHONE_E164_ZERO'), ('redacted_id', 'REDACTED_ID'), ('hashed', 'HASHED')], default='redacted_id', max_length=32)),
+            ],
+            options={
+                'verbose_name': 'Moyen de contact',
+                'verbose_name_plural': 'Moyens de contact',
+            },
+        ),
+        migrations.CreateModel(
+            name='ContactPerson',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('first_name', models.CharField(blank=True, max_length=50, verbose_name='prénom')),
+                ('last_name', models.CharField(blank=True, max_length=50, verbose_name='nom')),
+                ('function', models.CharField(blank=True, max_length=100, verbose_name='fonction')),
+                ('deciding', models.BooleanField(default=False, verbose_name='décideur')),
+                ('preferred_contact_days_hours', models.TextField(blank=True, default='', verbose_name='Jours et heures de contact préférés')),
+            ],
+            options={
+                'verbose_name': 'Contact',
+                'verbose_name_plural': 'Contacts',
+            },
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectSellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectTypeSellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_ProspectTypeTemplate',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='M2M_TemplateStep',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('order', models.IntegerField(verbose_name='ordre')),
+                ('default_notes', models.TextField(blank=True, default='', verbose_name='notes par défaut')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Prospect',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('decision_making', models.TextField(blank=True, default='', verbose_name='prise de décision')),
+                ('decided', models.BooleanField(default=False, verbose_name='décidé')),
+                ('decided_at', models.DateTimeField(blank=True, null=True, verbose_name='a décidé le')),
+            ],
+            options={
+                'verbose_name': 'Prospect',
+                'verbose_name_plural': 'Prospects',
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectContactMethod',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('label', models.CharField(blank=True, max_length=100, verbose_name='label')),
+                ('value', models.CharField(max_length=255, verbose_name='valeur')),
+                ('preferred', models.BooleanField(default=False)),
+            ],
+            options={
+                'verbose_name': 'Moyen de contact',
+                'verbose_name_plural': 'Moyens de contact',
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectStep',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('order', models.PositiveIntegerField()),
+                ('notes', models.TextField(blank=True)),
+                ('done', models.BooleanField(default=False)),
+                ('done_datetime', models.DateTimeField(blank=True, null=True)),
+            ],
+            options={
+                'verbose_name': 'Étape de prospection du prospect',
+                'verbose_name_plural': 'Étapes de prospection du prospect',
+                'ordering': ['prospect_id', 'order'],
+            },
+        ),
+        migrations.CreateModel(
+            name='ProspectType',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Type de prospect',
+                'verbose_name_plural': 'Types de prospects',
+            },
+        ),
+        migrations.CreateModel(
+            name='SellingArgument',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(blank=True, max_length=100, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Argument de vente',
+                'verbose_name_plural': 'Arguments de vente',
+            },
+        ),
+        migrations.CreateModel(
+            name='StepType',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=150, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': "Type d'étape de prospection",
+                'verbose_name_plural': "Types d'étape de prospection",
+            },
+        ),
+        migrations.CreateModel(
+            name='Template',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=150, verbose_name='nom')),
+            ],
+            options={
+                'verbose_name': 'Modèle de prospection',
+                'verbose_name_plural': 'Modèles de prospection',
+            },
+        ),
+    ]

backend/api/prospect_flow/migrations/0002_initial.py

@@ -0,0 +1,288 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('lead_explorer', '0002_initial'),
+        ('prospect_flow', '0001_initial'),
+        migrations.swappable_dependency(settings.AUTH_USER_MODEL),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='contactmethod',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='contactmethod',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='brut_company',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='lead_explorer.brutcompany', verbose_name='informations de la société'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospect'),
+        ),
+        migrations.AddField(
+            model_name='contactperson',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='contact_method',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactmethod', verbose_name='moyen de contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='contact_person',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactperson', verbose_name='contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='prospect',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectcontactmethod',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='contact_method',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactmethod'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='contact_person',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.contactperson', verbose_name='contact'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='prospect',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospect', verbose_name='prospect'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='source_template_step',
+            field=models.ForeignKey(null=True, on_delete=django.db.models.deletion.SET_NULL, to='prospect_flow.m2m_templatestep', verbose_name='étape source'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='prospect_type',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.prospecttype', verbose_name='type de prospect'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='prospect_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospecttype'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='prospect_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.prospecttype'),
+        ),
+        migrations.AddField(
+            model_name='sellingargument',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='sellingargument',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='selling_arguments',
+            field=models.ManyToManyField(blank=True, related_name='prospect_types', through='prospect_flow.M2M_ProspectTypeSellingArgument', to='prospect_flow.sellingargument', verbose_name='arguments de vente'),
+        ),
+        migrations.AddField(
+            model_name='prospect',
+            name='selling_arguments',
+            field=models.ManyToManyField(blank=True, through='prospect_flow.M2M_ProspectSellingArgument', to='prospect_flow.sellingargument', verbose_name='arguments de vente'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypesellingargument',
+            name='selling_argument',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.sellingargument'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospectsellingargument',
+            name='selling_argument',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.sellingargument'),
+        ),
+        migrations.AddField(
+            model_name='steptype',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='steptype',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospectstep',
+            name='step_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.PROTECT, to='prospect_flow.steptype'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='step_type',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.steptype'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='created_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='steps',
+            field=models.ManyToManyField(blank=True, related_name='templates', through='prospect_flow.M2M_TemplateStep', to='prospect_flow.steptype', verbose_name='étapes de prospection'),
+        ),
+        migrations.AddField(
+            model_name='template',
+            name='updated_by',
+            field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par'),
+        ),
+        migrations.AddField(
+            model_name='prospecttype',
+            name='templates',
+            field=models.ManyToManyField(blank=True, related_name='prospect_types', through='prospect_flow.M2M_ProspectTypeTemplate', to='prospect_flow.template', verbose_name='modèles de prospection'),
+        ),
+        migrations.AddField(
+            model_name='m2m_templatestep',
+            name='template',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.template'),
+        ),
+        migrations.AddField(
+            model_name='m2m_prospecttypetemplate',
+            name='template',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='prospect_flow.template'),
+        ),
+        migrations.AddConstraint(
+            model_name='prospectcontactmethod',
+            constraint=models.CheckConstraint(condition=models.Q(models.Q(('contact_person__isnull', True), ('prospect__isnull', False)), models.Q(('contact_person__isnull', False), ('prospect__isnull', True)), _connector='OR'), name='prospect_flow_prospectcontactmethod_exactly_one_owner', violation_error_message='Un moyen de contact doit être lié soit à un prospect, soit à un contact, mais pas les deux.'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospecttypesellingargument',
+            constraint=models.UniqueConstraint(fields=('selling_argument', 'prospect_type'), name='unique_selling_argument_prospect_type'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospectsellingargument',
+            constraint=models.UniqueConstraint(fields=('selling_argument', 'prospect'), name='unique_selling_argument_prospect'),
+        ),
+        migrations.AddConstraint(
+            model_name='prospectstep',
+            constraint=models.UniqueConstraint(fields=('prospect', 'order'), name='uniq_prospect_step_order'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_templatestep',
+            constraint=models.UniqueConstraint(fields=('template', 'order'), name='unique_template_order'),
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_prospecttypetemplate',
+            constraint=models.UniqueConstraint(fields=('template', 'prospect_type'), name='unique_template_prospect_type'),
+        ),
+    ]

backend/api/prospect_flow/models/__init__.py

@@ -0,0 +1,29 @@
+from .contact_method import ContactMethod
+from .contact_person import ContactPerson
+from .m2m_prospect_selling_argument import M2M_ProspectSellingArgument
+from .m2m_prospect_type_selling_argument import M2M_ProspectTypeSellingArgument
+from .m2m_prospect_type_template import M2M_ProspectTypeTemplate
+from .m2m_template_step import M2M_TemplateStep
+from .prospect_contact_method import ProspectContactMethod
+from .prospect_step import ProspectStep
+from .prospect_type import ProspectType
+from .prospect import Prospect
+from .selling_argument import SellingArgument
+from .step_type import StepType
+from .template import Template
+
+__all__ = [
+    "ContactMethod",
+    "ContactPerson",
+    "M2M_ProspectSellingArgument",
+    "M2M_ProspectTypeSellingArgument",
+    "M2M_ProspectTypeTemplate",
+    "M2M_TemplateStep",
+    "ProspectContactMethod",
+    "ProspectStep",
+    "ProspectType",
+    "Prospect",
+    "SellingArgument",
+    "StepType",
+    "Template",
+]

backend/api/prospect_flow/models/contact_method.py

@@ -0,0 +1,22 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+from gdpr.anonymizers import AnonymizationTemplate
+
+
+class ContactMethod(TrackableModel):
+    """
+    Model representing a contact method.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    anonymization_template = models.CharField(
+        max_length=32,
+        choices=[(s.value, s.name) for s in AnonymizationTemplate],
+        default=AnonymizationTemplate.REDACTED_ID.value,
+    )
+
+    class Meta:
+        verbose_name = _("Moyen de contact")
+        verbose_name_plural = _("Moyens de contact")

backend/api/prospect_flow/models/contact_person.py

@@ -0,0 +1,25 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ContactPerson(TrackableModel):
+    """
+    Model representing a contact person linked to a prospect.
+    """
+
+    prospect = models.ForeignKey(
+        "Prospect", verbose_name=_("prospect"), on_delete=models.PROTECT
+    )
+    first_name = models.CharField(verbose_name=_("prénom"), max_length=50, blank=True)
+    last_name = models.CharField(verbose_name=_("nom"), max_length=50, blank=True)
+    function = models.CharField(verbose_name=_("fonction"), max_length=100, blank=True)
+    deciding = models.BooleanField(verbose_name=_("décideur"), default=False)
+    preferred_contact_days_hours = models.TextField(
+        verbose_name=_("Jours et heures de contact préférés"), blank=True, default=""
+    )
+
+    class Meta:
+        verbose_name = _("Contact")
+        verbose_name_plural = _("Contacts")

backend/api/prospect_flow/models/m2m_prospect_selling_argument.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectSellingArgument(TrackableModel):
+    """
+    Many to Many table for selling arguments and prospects.
+    """
+
+    selling_argument = models.ForeignKey("SellingArgument", on_delete=models.CASCADE)
+    prospect = models.ForeignKey("Prospect", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["selling_argument", "prospect"],
+                name="unique_selling_argument_prospect",
+            )
+        ]

backend/api/prospect_flow/models/m2m_prospect_type_selling_argument.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectTypeSellingArgument(TrackableModel):
+    """
+    Many to Many table for selling arguments and prospect types.
+    """
+
+    selling_argument = models.ForeignKey("SellingArgument", on_delete=models.CASCADE)
+    prospect_type = models.ForeignKey("ProspectType", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["selling_argument", "prospect_type"],
+                name="unique_selling_argument_prospect_type",
+            )
+        ]

backend/api/prospect_flow/models/m2m_prospect_type_template.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_ProspectTypeTemplate(TrackableModel):
+    """
+    Many to Many table for templates and prospect types.
+    """
+
+    template = models.ForeignKey("Template", on_delete=models.CASCADE)
+    prospect_type = models.ForeignKey("ProspectType", on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["template", "prospect_type"],
+                name="unique_template_prospect_type",
+            )
+        ]

backend/api/prospect_flow/models/m2m_template_step.py

@@ -0,0 +1,26 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class M2M_TemplateStep(TrackableModel):
+    """
+    Many to Many table for templates and steps (identified by the step type).
+    A template can have the same step type multiple times, but there can't be two entries with the same order for one template.
+    """
+
+    template = models.ForeignKey("Template", on_delete=models.CASCADE)
+    step_type = models.ForeignKey("StepType", on_delete=models.CASCADE)
+    order = models.IntegerField(verbose_name=_("ordre"))
+    default_notes = models.TextField(
+        verbose_name=_("notes par défaut"), blank=True, default=""
+    )
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["template", "order"],
+                name="unique_template_order",
+            )
+        ]

backend/api/prospect_flow/models/prospect.py

@@ -0,0 +1,39 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.lead_explorer.models.brut_company import BrutCompany
+from api.core.models.trackable_model import TrackableModel
+
+
+class Prospect(TrackableModel):
+    """
+    Model representing a prospect.
+    """
+
+    brut_company = models.ForeignKey(
+        BrutCompany,
+        verbose_name=_("informations de la société"),
+        on_delete=models.PROTECT,
+    )
+    prospect_type = models.ForeignKey(
+        "ProspectType",
+        verbose_name=_("type de prospect"),
+        on_delete=models.PROTECT,
+        blank=True,
+        null=True,
+    )
+    selling_arguments = models.ManyToManyField(
+        "SellingArgument",
+        verbose_name=_("arguments de vente"),
+        blank=True,
+        through="M2M_ProspectSellingArgument",
+    )
+    decision_making = models.TextField(
+        verbose_name=_("prise de décision"), blank=True, default=""
+    )
+    decided = models.BooleanField(verbose_name=_("décidé"), default=False)
+    decided_at = models.DateTimeField(_("a décidé le"), blank=True, null=True)
+
+    class Meta:
+        verbose_name = _("Prospect")
+        verbose_name_plural = _("Prospects")

backend/api/prospect_flow/models/prospect_contact_method.py

@@ -0,0 +1,56 @@
+from django.db import models
+from django.core.exceptions import ValidationError
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectContactMethod(TrackableModel):
+    prospect = models.ForeignKey(
+        "Prospect",
+        verbose_name=_("prospect"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_person = models.ForeignKey(
+        "ContactPerson",
+        verbose_name=_("contact"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_method = models.ForeignKey(
+        "ContactMethod", verbose_name=_("moyen de contact"), on_delete=models.PROTECT
+    )
+    label = models.CharField(verbose_name=_("label"), max_length=100, blank=True)
+    value = models.CharField(verbose_name=_("valeur"), max_length=255)
+    preferred = models.BooleanField(default=False)
+
+    def clean(self):
+        super().clean()
+        if bool(self.prospect) == bool(self.contact_person):
+            raise ValidationError(
+                _("Renseigne soit un prospect soit un contact (exactement un).")
+            )
+
+    def save(self, *args, **kwargs):
+        """Validation before saving"""
+        self.full_clean()
+        super().save(*args, **kwargs)
+
+    class Meta:
+        verbose_name = _("Moyen de contact")
+        verbose_name_plural = _("Moyens de contact")
+        constraints = [
+            models.CheckConstraint(
+                name="%(app_label)s_%(class)s_exactly_one_owner",
+                condition=(
+                    models.Q(prospect__isnull=False, contact_person__isnull=True)
+                    | models.Q(prospect__isnull=True, contact_person__isnull=False)
+                ),
+                violation_error_message=_(
+                    "Un moyen de contact doit être lié soit à un prospect, soit à un contact, mais pas les deux."
+                ),
+            ),
+        ]

backend/api/prospect_flow/models/prospect_step.py

@@ -0,0 +1,54 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectStep(TrackableModel):
+    """
+    Model representing the prospection steps for a prospect.
+    """
+
+    source_template_step = models.ForeignKey(
+        "M2M_TemplateStep",
+        verbose_name=_("étape source"),
+        null=True,
+        on_delete=models.SET_NULL,
+    )
+    prospect = models.ForeignKey(
+        "Prospect",
+        verbose_name=_("prospect"),
+        on_delete=models.PROTECT,
+    )
+    contact_person = models.ForeignKey(
+        "ContactPerson",
+        verbose_name=_("contact"),
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    contact_method = models.ForeignKey(
+        "ContactMethod",
+        null=True,
+        blank=True,
+        on_delete=models.PROTECT,
+    )
+    step_type = models.ForeignKey(
+        "StepType",
+        on_delete=models.PROTECT,
+    )
+    order = models.PositiveIntegerField()
+    notes = models.TextField(blank=True)
+    done = models.BooleanField(default=False)
+    done_datetime = models.DateTimeField(null=True, blank=True)
+
+    class Meta:
+        verbose_name = _("Étape de prospection du prospect")
+        verbose_name_plural = _("Étapes de prospection du prospect")
+        constraints = [
+            models.UniqueConstraint(
+                fields=["prospect", "order"],
+                name="uniq_prospect_step_order",
+            ),
+        ]
+        ordering = ["prospect_id", "order"]

backend/api/prospect_flow/models/prospect_type.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class ProspectType(TrackableModel):
+    """
+    Model representing a prospect type.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+    selling_arguments = models.ManyToManyField(
+        "SellingArgument",
+        verbose_name=_("arguments de vente"),
+        blank=True,
+        related_name="prospect_types",
+        through="M2M_ProspectTypeSellingArgument",
+    )
+    templates = models.ManyToManyField(
+        "Template",
+        verbose_name=_("modèles de prospection"),
+        blank=True,
+        related_name="prospect_types",
+        through="M2M_ProspectTypeTemplate",
+    )
+
+    class Meta:
+        verbose_name = _("Type de prospect")
+        verbose_name_plural = _("Types de prospects")

backend/api/prospect_flow/models/selling_argument.py

@@ -0,0 +1,16 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class SellingArgument(TrackableModel):
+    """
+    Model representing a selling argument.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, blank=True)
+
+    class Meta:
+        verbose_name = _("Argument de vente")
+        verbose_name_plural = _("Arguments de vente")

backend/api/prospect_flow/models/step_type.py

@@ -0,0 +1,16 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class StepType(TrackableModel):
+    """
+    Model representing a prospection step type
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=150)
+
+    class Meta:
+        verbose_name = _("Type d'étape de prospection")
+        verbose_name_plural = _("Types d'étape de prospection")

backend/api/prospect_flow/models/template.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Template(TrackableModel):
+    """
+    Model representing a prospection template
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=150)
+    steps = models.ManyToManyField(
+        "StepType",
+        verbose_name=_("étapes de prospection"),
+        blank=True,
+        related_name="templates",
+        through="M2M_TemplateStep",
+    )
+
+    class Meta:
+        verbose_name = _("Modèle de prospection")
+        verbose_name_plural = _("Modèles de prospection")

backend/api/prospect_flow/urls.py

@@ -0,0 +1,6 @@
+from django.urls import path
+
+app_name = "prospect_flow"
+urlpatterns = [
+    
+]

backend/api/prospect_flow/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _
+

backend/api/prospect_on_the_go/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/prospect_on_the_go/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class A3ProspectOnTheGoConfig(AppConfig):
+    name = "api.prospect_on_the_go"

backend/api/prospect_on_the_go/urls.py

@@ -0,0 +1,6 @@
+from django.urls import path
+
+app_name = "prospect_on_the_go"
+urlpatterns = [
+
+]

backend/api/prospect_on_the_go/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+from django.utils.translation import gettext_lazy as _
+

backend/api/users/admin.py

@@ -0,0 +1,3 @@
+from django.contrib import admin
+
+# Register your models here.

backend/api/users/apps.py

@@ -0,0 +1,5 @@
+from django.apps import AppConfig
+
+
+class UsersConfig(AppConfig):
+    name = 'api.users'

backend/api/users/migrations/0001_initial.py

@@ -0,0 +1,146 @@
+# Generated by Django 6.0.5 on 2026-05-28 15:03
+
+import django.contrib.auth.models
+import django.contrib.auth.validators
+import django.db.models.deletion
+import django.utils.timezone
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    initial = True
+
+    dependencies = [
+        ('auth', '0012_alter_user_first_name_max_length'),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name='User',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('password', models.CharField(max_length=128, verbose_name='password')),
+                ('last_login', models.DateTimeField(blank=True, null=True, verbose_name='last login')),
+                ('is_superuser', models.BooleanField(default=False, help_text='Designates that this user has all permissions without explicitly assigning them.', verbose_name='superuser status')),
+                ('username', models.CharField(error_messages={'unique': 'A user with that username already exists.'}, help_text='Required. 150 characters or fewer. Letters, digits and @/./+/-/_ only.', max_length=150, unique=True, validators=[django.contrib.auth.validators.UnicodeUsernameValidator()], verbose_name='username')),
+                ('first_name', models.CharField(blank=True, max_length=150, verbose_name='first name')),
+                ('last_name', models.CharField(blank=True, max_length=150, verbose_name='last name')),
+                ('is_staff', models.BooleanField(default=False, help_text='Designates whether the user can log into this admin site.', verbose_name='staff status')),
+                ('is_active', models.BooleanField(default=True, help_text='Designates whether this user should be treated as active. Unselect this instead of deleting accounts.', verbose_name='active')),
+                ('date_joined', models.DateTimeField(default=django.utils.timezone.now, verbose_name='date joined')),
+                ('email', models.EmailField(max_length=254, unique=True, verbose_name='email')),
+                ('initials', models.CharField(blank=True, max_length=5, verbose_name='initiales')),
+                ('color', models.CharField(blank=True, max_length=7, verbose_name='couleur')),
+                ('image', models.ImageField(blank=True, null=True, upload_to='user_images/', verbose_name='image')),
+                ('phone_number', models.CharField(blank=True, max_length=20, verbose_name='numéro de téléphone')),
+                ('c2c_extension', models.CharField(blank=True, max_length=10, verbose_name='extension click to call')),
+                ('groups', models.ManyToManyField(blank=True, help_text='The groups this user belongs to. A user will get all permissions granted to each of their groups.', related_name='user_set', related_query_name='user', to='auth.group', verbose_name='groups')),
+                ('user_permissions', models.ManyToManyField(blank=True, help_text='Specific permissions for this user.', related_name='user_set', related_query_name='user', to='auth.permission', verbose_name='user permissions')),
+            ],
+            options={
+                'verbose_name': 'user',
+                'verbose_name_plural': 'users',
+            },
+            managers=[
+                ('objects', django.contrib.auth.models.UserManager()),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Authorization',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=100, unique=True, verbose_name='nom')),
+                ('code', models.CharField(max_length=100, unique=True, verbose_name='code')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'Authorization',
+                'verbose_name_plural': 'Authorizations',
+            },
+        ),
+        migrations.CreateModel(
+            name='M2M_RoleAuthorizations',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('authorization', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='users.authorization')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+        ),
+        migrations.CreateModel(
+            name='Role',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=100, unique=True, verbose_name='nom')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('authorizations', models.ManyToManyField(blank=True, related_name='roles', through='users.M2M_RoleAuthorizations', to='users.authorization', verbose_name='authorisations')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'role',
+                'verbose_name_plural': 'roles',
+            },
+        ),
+        migrations.AddField(
+            model_name='m2m_roleauthorizations',
+            name='role',
+            field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='users.role'),
+        ),
+        migrations.CreateModel(
+            name='Team',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('name', models.CharField(max_length=255, unique=True, verbose_name='nom')),
+                ('description', models.TextField(blank=True, default='', verbose_name='description')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+            ],
+            options={
+                'verbose_name': 'Team',
+                'verbose_name_plural': 'Teams',
+            },
+        ),
+        migrations.CreateModel(
+            name='UserTeamRole',
+            fields=[
+                ('id', models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')),
+                ('created_at', models.DateTimeField(auto_now_add=True, verbose_name='créé le')),
+                ('updated_at', models.DateTimeField(auto_now=True, verbose_name='modifié le')),
+                ('obsolete', models.BooleanField(default=False, verbose_name='obsolète')),
+                ('obsolete_at', models.DateTimeField(blank=True, null=True, verbose_name='obsolète le')),
+                ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='créé par')),
+                ('role', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_teams', to='users.role', verbose_name='rôle')),
+                ('team', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='user_roles', to='users.team', verbose_name='équipe')),
+                ('updated_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.PROTECT, related_name='+', to=settings.AUTH_USER_MODEL, verbose_name='modifié par')),
+                ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='team_roles', to=settings.AUTH_USER_MODEL, verbose_name='utilisateur')),
+            ],
+            options={
+                'abstract': False,
+            },
+        ),
+        migrations.AddConstraint(
+            model_name='m2m_roleauthorizations',
+            constraint=models.UniqueConstraint(fields=('role', 'authorization'), name='unique_role_authorization'),
+        ),
+    ]

backend/api/users/models/__init__.py

@@ -0,0 +1,15 @@
+from .user import User
+from .role import Role
+from .team import Team
+from .authorization import Authorization
+from .user_team_role import UserTeamRole
+from .m2m_role_authorization import M2M_RoleAuthorizations
+
+__all__ = [
+    "User",
+    "Role",
+    "Team",
+    "Authorization",
+    "UserTeamRole",
+    "M2M_RoleAuthorizations",
+]

backend/api/users/models/authorization.py

@@ -0,0 +1,21 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Authorization(TrackableModel):
+    """
+    Model representing authorizations within the user account system.
+    These authorizations can be assigned to roles to control access permissions.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, unique=True)
+    code = models.CharField(verbose_name=_("code"), max_length=100, unique=True)
+    description = models.TextField(
+        verbose_name=_("description"), blank=True, default=""
+    )
+
+    class Meta:
+        verbose_name = _("Authorization")
+        verbose_name_plural = _("Authorizations")

backend/api/users/models/m2m_role_authorization.py

@@ -0,0 +1,22 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+from api.users.models.authorization import Authorization
+from api.users.models.role import Role
+
+
+class M2M_RoleAuthorizations(TrackableModel):
+    """
+    Many to Many table for roles and authorizations.
+    """
+
+    role = models.ForeignKey(Role, on_delete=models.CASCADE)
+    authorization = models.ForeignKey(Authorization, on_delete=models.CASCADE)
+
+    class Meta:
+        constraints = [
+            models.UniqueConstraint(
+                fields=["role", "authorization"], name="unique_role_authorization"
+            )
+        ]

backend/api/users/models/role.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Role(TrackableModel):
+    """
+    Model representing a role that can be assigned to users within teams.
+    A user can have a different role in each team they are part of.
+    """
+
+    name = models.CharField(verbose_name=_("nom"), max_length=100, unique=True)
+    description = models.TextField(
+        verbose_name=_("description"), blank=True, default=""
+    )
+    authorizations = models.ManyToManyField(
+        "users.Authorization",
+        verbose_name=_("authorisations"),
+        blank=True,
+        related_name="roles",
+        through="M2M_RoleAuthorizations",
+    )
+
+    class Meta:
+        verbose_name = _("role")
+        verbose_name_plural = _("roles")
+
+    def __str__(self):
+        return self.name

backend/api/users/models/team.py

@@ -0,0 +1,23 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class Team(TrackableModel):
+    """
+    Model representing a team within the user account system.
+    A team can contain multiple users that are linked together for collaboration.
+    """
+
+    name = models.CharField(max_length=255, unique=True, verbose_name=_("nom"))
+    description = models.TextField(
+        blank=True, verbose_name=_("description"), default=""
+    )
+
+    class Meta:
+        verbose_name = _("Team")
+        verbose_name_plural = _("Teams")
+
+    def __str__(self):
+        return self.name

backend/api/users/models/user.py

@@ -0,0 +1,34 @@
+from django.contrib.auth.models import AbstractUser
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+
+class User(AbstractUser):
+    """
+    Custom user model for the project.
+    Inherits from Django's AbstractUser to leverage built-in authentication features.
+    Additional fields can be added here as needed.
+    """
+
+    email = models.EmailField(verbose_name=_("email"), unique=True)
+    initials = models.CharField(verbose_name=_("initiales"), max_length=5, blank=True)
+    color = models.CharField(verbose_name=_("couleur"), max_length=7, blank=True)  # hex
+    image = models.ImageField(
+        verbose_name=_("image"), upload_to="user_images/", blank=True, null=True
+    )
+    phone_number = models.CharField(
+        verbose_name=_("numéro de téléphone"), max_length=20, blank=True
+    )
+    c2c_extension = models.CharField(
+        verbose_name=_("extension click to call"), max_length=10, blank=True
+    )
+
+    USERNAME_FIELD = "email"
+    REQUIRED_FIELDS = ["username"]
+
+    class Meta:
+        verbose_name = _("user")
+        verbose_name_plural = _("users")
+
+    def __str__(self):
+        return f"{self.first_name} {self.last_name}"

backend/api/users/models/user_team_role.py

@@ -0,0 +1,30 @@
+from django.db import models
+from django.utils.translation import gettext_lazy as _
+
+from api.core.models.trackable_model import TrackableModel
+
+
+class UserTeamRole(TrackableModel):
+    """
+    Model representing the association of users, teams, and roles within the user account system.
+    This model links a user to a specific team with a designated role.
+    """
+
+    user = models.ForeignKey(
+        "users.User",
+        on_delete=models.CASCADE,
+        related_name="team_roles",
+        verbose_name=_("utilisateur"),
+    )
+    team = models.ForeignKey(
+        "users.Team",
+        on_delete=models.CASCADE,
+        related_name="user_roles",
+        verbose_name=_("équipe"),
+    )
+    role = models.ForeignKey(
+        "users.Role",
+        on_delete=models.CASCADE,
+        related_name="user_teams",
+        verbose_name=_("rôle"),
+    )

backend/api/users/services/authorizations_control.py

@@ -0,0 +1,22 @@
+from api.users.models import *
+
+def has_authorization(*, user, code: str, team=None) -> bool:
+    if not user.is_authenticated:
+        return False
+
+    qs = Authorization.objects.filter(code=code)
+
+    memberships = UserTeamRole.objects.filter(user=user)
+
+    if team is not None:
+        memberships = memberships.filter(team=team)
+
+    return qs.filter(roleauthorization__role__teammembership__in=memberships).exists()
+
+
+class NotAuthorized(Exception):
+    pass
+
+def require_authorization(*, user, code: str, team=None):
+    if not has_authorization(user=user, code=code, team=team):
+        raise NotAuthorized(f"Missing authorization: {code}")

backend/api/users/signals.py

@@ -0,0 +1,65 @@
+# users/signals.py
+import io
+import random
+from PIL import Image, ImageDraw, ImageFont
+
+from django.conf import settings
+from django.core.files.base import ContentFile
+from django.db.models.signals import post_save
+from django.dispatch import receiver
+
+from .models import User
+
+PALETTE = ["#34344A", "#845A6D", "#D47386", "#C89B7B", "#32746D"]
+
+def initials_for(user: User) -> str:
+    if getattr(user, "initials", None):
+        return user.initials[:2].upper()
+
+    first = (user.first_name or "").strip()
+    last = (user.last_name or "").strip()
+
+    if first and last:
+        return (first[0] + last[0]).upper()
+    if first:
+        return first[:2].upper()
+    # fallback: email
+    return (user.email or "U")[:2].upper()
+
+def generate_avatar_png(text: str, bg_hex: str, size: int = 256) -> bytes:
+    img = Image.new("RGBA", (size, size), bg_hex)
+    draw = ImageDraw.Draw(img)
+
+    font_path = getattr(settings, "AVATAR_FONT_PATH", None)
+    if font_path:
+        font = ImageFont.truetype(font_path, int(size * 0.42))
+    else:
+        font = ImageFont.load_default()
+
+    bbox = draw.textbbox((0, 0), text, font=font)
+    tw, th = bbox[2] - bbox[0], bbox[3] - bbox[1]
+    x = (size - tw) / 2
+    y = (size - th) / 2 - (size * 0.05)
+
+    draw.text((x, y), text, font=font, fill="white")
+
+    out = io.BytesIO()
+    img.save(out, format="PNG", optimize=True)
+    return out.getvalue()
+
+@receiver(post_save, sender=User)
+def set_default_avatar(sender, instance: User, created: bool, **kwargs):
+    if not created:
+        return
+    if instance.image:
+        return
+
+    text = initials_for(instance)
+    bg = random.choice(PALETTE)
+
+    png_bytes = generate_avatar_png(text=text, bg_hex=bg, size=256)
+    filename = f"user_{instance.pk}_avatar.png"
+    instance.image.save(filename, ContentFile(png_bytes), save=False)
+    User.objects.filter(pk=instance.pk).update(
+        image=instance.image.name,
+    )

backend/api/users/urls.py

@@ -0,0 +1,5 @@
+from django.urls import path, include
+
+urlpatterns = [
+    
+]

backend/api/users/views.py

@@ -0,0 +1,3 @@
+from django.shortcuts import render
+
+# Create your views here.

backend/manage.py

@@ -0,0 +1,22 @@
+#!/usr/bin/env python
+"""Django's command-line utility for administrative tasks."""
+import os
+import sys
+
+
+def main():
+    """Run administrative tasks."""
+    os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'project.settings.dev')
+    try:
+        from django.core.management import execute_from_command_line
+    except ImportError as exc:
+        raise ImportError(
+            "Couldn't import Django. Are you sure it's installed and "
+            "available on your PYTHONPATH environment variable? Did you "
+            "forget to activate a virtual environment?"
+        ) from exc
+    execute_from_command_line(sys.argv)
+
+
+if __name__ == '__main__':
+    main()

backend/project/asgi.py

@@ -0,0 +1,27 @@
+"""
+ASGI config for project project.
+
+It exposes the ASGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/asgi/
+"""
+
+import os
+
+from django.core.asgi import get_asgi_application
+from channels.routing import ProtocolTypeRouter, URLRouter
+from channels.auth import AuthMiddlewareStack
+
+import project.routing
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'project.settings.base')
+
+django_asgi_app = get_asgi_application()
+
+application = ProtocolTypeRouter({
+    "http": django_asgi_app,
+    "websocket": AuthMiddlewareStack(
+        URLRouter(project.routing.websocket_urlpatterns)
+    ),
+})

backend/project/settings/base.py

@@ -0,0 +1,205 @@
+"""
+Django settings for project project.
+
+Generated by 'django-admin startproject' using Django 6.0.1.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/topics/settings/
+
+For the full list of settings and their values, see
+https://docs.djangoproject.com/en/6.0/ref/settings/
+"""
+
+from pathlib import Path
+import os
+import logging
+
+BASE_DIR = Path(__file__).resolve().parent.parent.parent
+SECRET_KEY = os.getenv("DJANGO_SECRET_KEY", "django-insecure-change-me")
+DEBUG = False
+ALLOWED_HOSTS = os.getenv("DJANGO_ALLOWED_HOSTS", "127.0.0.1,localhost").split(",")
+CORS_ALLOWED_ORIGINS = os.getenv("CORS_ALLOWED_ORIGINS", "http://localhost:3000,http://localhost:5173,http://frontend:3000").split(",")
+# LOGIN_REDIRECT_URL = "home"
+# LOGOUT_REDIRECT_URL = "login"
+
+# Application definition
+
+INSTALLED_APPS = [
+    "api.users",
+    "django.contrib.admin",
+    "django.contrib.auth",
+    "django.contrib.contenttypes",
+    "django.contrib.sessions",
+    "django.contrib.messages",
+    "django.contrib.staticfiles",
+    "django_cleanup.apps.CleanupConfig",
+    "channels",
+    "api.core",
+    "api.lead_explorer",
+    "api.prospect_flow",
+    "api.prospect_on_the_go",
+]
+
+MIDDLEWARE = [
+    "django.middleware.security.SecurityMiddleware",
+    "django.contrib.sessions.middleware.SessionMiddleware",
+    "django.middleware.locale.LocaleMiddleware",
+    "django.middleware.common.CommonMiddleware",
+    "django.middleware.csrf.CsrfViewMiddleware",
+    "django.contrib.auth.middleware.AuthenticationMiddleware",
+    "django.contrib.messages.middleware.MessageMiddleware",
+    "django.middleware.clickjacking.XFrameOptionsMiddleware",
+]
+
+ROOT_URLCONF = "project.urls"
+
+TEMPLATES = [
+    {
+        "BACKEND": "django.template.backends.django.DjangoTemplates",
+        "DIRS": [],
+        "APP_DIRS": True,
+        "OPTIONS": {
+            "context_processors": [
+                "django.template.context_processors.debug",
+                "django.template.context_processors.request",
+                "django.contrib.auth.context_processors.auth",
+                "django.contrib.messages.context_processors.messages",
+            ],
+            "libraries": {},
+        },
+    },
+]
+
+
+# ASGI - websockets support
+
+ASGI_APPLICATION = "project.asgi.application"
+# WSGI_APPLICATION = 'project.wsgi.application'
+
+CHANNEL_LAYERS = {
+    "default": {
+        "BACKEND": "channels_redis.core.RedisChannelLayer",
+        "CONFIG": {
+            "hosts": [("redis", 6379)],
+        },
+    }
+}
+
+# Database
+# https://docs.djangoproject.com/en/6.0/ref/settings/#databases
+
+DATABASES = {
+    "default": {
+        "ENGINE": os.getenv("DB_ENGINE"),
+        "NAME": os.getenv("DB_NAME"),
+        "USER": os.getenv("DB_USER"),
+        "PASSWORD": os.getenv("DB_PASSWORD"),
+        "HOST": os.getenv("DB_HOST", "db"),
+        "PORT": os.getenv("DB_PORT", "5432"),
+    }
+}
+
+
+# Email configuration
+# EMAIL_BACKEND = str(os.getenv("EMAIL_BACKEND"))
+# EMAIL_HOST = str(os.getenv("EMAIL_HOST"))
+# EMAIL_USE_TLS = os.getenv("EMAIL_USE_TLS", "true").lower() in ("true", "1", "yes")
+# EMAIL_USE_SSL = os.getenv("EMAIL_USE_SSL", "false").lower() in ("true", "1", "yes")
+# EMAIL_PORT = int(os.getenv("EMAIL_PORT", 587))
+# EMAIL_HOST_USER = str(os.getenv("EMAIL_HOST_USER"))
+# EMAIL_HOST_PASSWORD = str(os.getenv("EMAIL_HOST_PASSWORD"))
+# DEFAULT_FROM_EMAIL = os.getenv("DEFAULT_FROM_EMAIL", EMAIL_HOST_USER)
+# SERVER_EMAIL = os.getenv("SERVER_EMAIL", DEFAULT_FROM_EMAIL)
+
+
+# Password validation
+# https://docs.djangoproject.com/en/6.0/ref/settings/#auth-password-validators
+AUTH_USER_MODEL = "users.User"
+
+AUTH_PASSWORD_VALIDATORS = [
+    {
+        "NAME": "django.contrib.auth.password_validation.UserAttributeSimilarityValidator",
+    },
+    {
+        "NAME": "django.contrib.auth.password_validation.MinimumLengthValidator",
+    },
+    {
+        "NAME": "django.contrib.auth.password_validation.CommonPasswordValidator",
+    },
+    {
+        "NAME": "django.contrib.auth.password_validation.NumericPasswordValidator",
+    },
+]
+
+
+# Internationalization
+# https://docs.djangoproject.com/en/6.0/topics/i18n/
+
+LANGUAGE_CODE = "fr-fr"
+TIME_ZONE = os.getenv("DJANGO_TIME_ZONE", "UTC")
+USE_I18N = True
+USE_TZ = True
+
+LOCALE_PATHS = [BASE_DIR / "locale"]
+
+
+# Static files (CSS, JavaScript, Images)
+# https://docs.djangoproject.com/en/6.0/howto/static-files/
+
+STATIC_URL = "/static/"
+STATICFILES_DIRS = [BASE_DIR / "static"]
+STATIC_ROOT = BASE_DIR / "staticfiles"
+
+MEDIA_URL = "/media/"
+MEDIA_ROOT = BASE_DIR / "media"
+
+AVATAR_FONT_PATH = BASE_DIR / "static" / "fonts" / "Roboto-Regular.ttf"
+
+# GDPR
+
+GDPR_ANONYMIZATION_SALT = os.getenv("GDPR_ANONYMIZATION_SALT", default=SECRET_KEY)
+GDPR_AUDIT_SINK = os.getenv("GDPR_AUDIT_SINK", default="log")
+GDPR_EXPORT_FORMAT = os.getenv("GDPR_EXPORT_FORMAT", default="json")
+
+# Logging
+
+LOG_LEVEL = os.getenv("LOG_LEVEL", logging.INFO)
+LOG_DIR = BASE_DIR / "log"
+LOG_DIR.mkdir(parents=True, exist_ok=True)
+
+LOGGING = {
+    "version": 1,
+    "disable_existing_loggers": False,
+    "formatters": {
+        "verbose": {
+            "format": "%(asctime)s [%(levelname)s] %(name)s (%(filename)s:%(lineno)d) - %(message)s",
+            "datefmt": "%Y-%m-%d %H:%M:%S",
+        },
+        "simple": {
+            "format": "[%(levelname)s] %(message)s",
+        },
+    },
+    "handlers": {
+        "console": {
+            "class": "logging.StreamHandler",
+            "formatter": "verbose",
+        },
+        "file": {
+            "class": "logging.FileHandler",
+            "filename": str(LOG_DIR / "global.log"),
+            "level": LOG_LEVEL,
+            "formatter": "verbose",
+        },
+        "null": {"level": "DEBUG", "class": "logging.NullHandler"},
+    },
+    "loggers": {
+        "": {
+            "handlers": ["console", "file"],
+            "level": LOG_LEVEL,
+        },
+        "django.security.DisallowedHost": {
+            "handlers": ["null"],
+            "propagate": False,
+        },
+    },
+}

backend/project/settings/dev.py

@@ -0,0 +1,20 @@
+import sys
+from .base import *
+
+DEBUG = True
+ALLOWED_HOSTS = ["127.0.0.1", "localhost"]
+
+# Optionnel: cookies moins stricts en dev, etc.
+# CSRF_COOKIE_SECURE = False
+# SESSION_COOKIE_SECURE = False
+
+LOG_LEVEL = os.getenv("LOG_LEVEL", "DEBUG")
+LOGGING["loggers"][""]["level"] = LOG_LEVEL
+
+if "test" in sys.argv:
+    DATABASES = {
+        "default": {
+            "ENGINE": "django.db.backends.sqlite3",
+            "NAME": ":memory:",
+        }
+    }

backend/project/urls.py

@@ -0,0 +1,31 @@
+"""
+URL configuration for project project.
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+    https://docs.djangoproject.com/en/6.0/topics/http/urls/
+Examples:
+Function views
+    1. Add an import:  from my_app import views
+    2. Add a URL to urlpatterns:  path('', views.home, name='home')
+Class-based views
+    1. Add an import:  from other_app.views import Home
+    2. Add a URL to urlpatterns:  path('', Home.as_view(), name='home')
+Including another URLconf
+    1. Import the include() function: from django.urls import include, path
+    2. Add a URL to urlpatterns:  path('blog/', include('blog.urls'))
+"""
+from django.contrib import admin
+from django.urls import path, include
+from django.conf import settings
+from django.conf.urls.static import static
+from rest_framework_simplejwt.views import TokenObtainPairView, TokenRefreshView
+
+urlpatterns = [
+    path('admin/', admin.site.urls),
+    path('api/v1/', include('api.urls')),
+    path('api/v1/auth/login/', TokenObtainPairView.as_view(), name='token_obtain_pair'),
+    path('api/v1/auth/refresh/', TokenRefreshView.as_view(), name='token_refresh'),
+]
+
+if settings.DEBUG:
+    urlpatterns += static(settings.MEDIA_URL, document_root=settings.MEDIA_ROOT)

backend/project/wsgi.py

@@ -0,0 +1,16 @@
+"""
+WSGI config for project project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/6.0/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'project.settings')
+
+application = get_wsgi_application()

backend/requirements.txt

@@ -0,0 +1,34 @@
+asgiref==3.11.1
+attrs==26.1.0
+autobahn==25.12.2
+Automat==25.4.16
+cbor2==6.1.1
+cffi==2.0.0
+channels==4.3.2
+constantly==23.10.4
+cryptography==48.0.0
+daphne==4.2.1
+Django==6.0.5
+django-cleanup==9.0.0
+djangorestframework==3.17.1
+djangorestframework_simplejwt==5.5.1
+hyperlink==21.0.0
+idna==3.16
+Incremental==24.11.0
+msgpack==1.1.2
+packaging==26.2
+pillow==12.2.0
+psycopg2==2.9.11
+py-ubjson==0.16.1
+pyasn1==0.6.3
+pyasn1_modules==0.4.2
+pycparser==3.0
+PyJWT==2.13.0
+pyOpenSSL==26.2.0
+service-identity==24.2.0
+sqlparse==0.5.5
+Twisted==26.4.0
+txaio==25.12.2
+typing_extensions==4.15.0
+ujson==5.12.1
+zope.interface==8.5

docker-compose.yml

@@ -0,0 +1,102 @@
+services:
+  # DB POSTGRESQL
+  db:
+    image: postgres:17
+    container_name: eiro-postgres
+    restart: unless-stopped
+    environment:
+      POSTGRES_DB: ${DB_NAME}
+      POSTGRES_USER: ${DB_USER}
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
+      POSTGRES_INITDB_ARGS: "--locale=fr_FR.UTF-8"
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+      # - ./backend/init-db.sql:/docker-entrypoint-initdb.d/init.sql:ro
+    ports:
+      - "5432:5432"
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $${POSTGRES_USER} -d $${POSTGRES_DB}"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  #  REDIS
+  redis:
+    image: redis:7-alpine
+    container_name: eiro-redis
+    restart: unless-stopped
+    volumes: 
+      - redis_data:/data
+    ports:
+      - "6379:6379"
+    healthcheck:
+      test: ["CMD", "redis-cli", "ping"]
+      interval: 5s
+      timeout: 3s
+      retries: 20
+
+  # BACKEND DJANGO
+  backend:
+    build:
+      context: ./backend
+      dockerfile: ../backend.Dockerfile
+    container_name: eiro-backend
+    restart: unless-stopped
+    env_file: .env
+    volumes:
+      - ./backend:/app
+      - staticfiles:/app/staticfiles
+      - media:/app/media
+    expose:
+      - "8000"
+    depends_on:
+      db:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8000/api/v1/health/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 40s
+    command: >
+      sh -c "
+      ls -al /app &&
+      python manage.py migrate &&
+      python manage.py collectstatic --noinput &&
+      python manage.py runserver 0.0.0.0:8000
+      "
+
+
+  # NGINX
+  nginx:
+    image: nginx:1.25-alpine
+    build:
+      dockerfile: nginx.Dockerfile
+    container_name: eiro-nginx
+    restart: unless-stopped
+    volumes:
+      - ./frontend/deploy/nginx/nginx.conf:/etc/nginx/nginx.conf
+      - ./frontend/deploy/nginx/nginx-default.conf:/etc/nginx/conf.d/default.conf
+      - staticfiles:/var/www/html/static:ro
+      - media:/var/www/html/media:ro
+      #   - ./certbot/conf:/etc/letsencrypt:ro
+      #   - ./certbot/www:/var/www/certbot:ro
+    ports:
+      - "8000:80"
+      # - "443:443"
+    depends_on:
+      - backend
+    healthcheck:
+      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://localhost:3000/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+    
+
+volumes:
+  postgres_data:
+  redis_data:
+  staticfiles:
+  media:

frontend/.gitignore

@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?

frontend/deploy/nginx/nginx-default.conf

@@ -0,0 +1,68 @@
+server {
+    listen 80;
+    listen [::]:80;
+
+    server_name _;
+
+    location /static/ {
+        alias /var/www/html/static/;
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        access_log off;
+    }
+
+    location /media/ {
+        alias /var/www/html/media/;
+        expires 30d;
+        add_header Cache-Control "public";
+    }
+
+    location /assets {
+        root /usr/share/nginx/html;
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+    }
+
+    location /api/ {
+        proxy_pass http://backend:8000;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection 'upgrade';
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_cache_bypass $http_upgrade;
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    location / {
+        root /usr/share/nginx/html;
+        index index.html
+        try_files $uri $uri/ /index.html;
+        
+        # Cache busting pour index.html
+        add_header Cache-Control "public, max-age=0, must-revalidate";
+    }
+
+    location ~ /\. {
+        deny all;
+        access_log off;
+        log_not_found off;
+    }
+
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    add_header Referrer-Policy "no-referrer-when-downgrade" always;
+    add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
+
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss;
+    gzip_min_length 1000;
+
+    error_page 404 /index.html;
+    error_page 500 502 503 504 /50x.html;
+}

frontend/deploy/nginx/nginx.conf

@@ -0,0 +1,39 @@
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log warn;
+pid /var/run/nginx.pid;
+
+events {
+    worker_connections 1024;
+    use epoll;
+}
+
+http {
+    include /etc/nginx/mime.types;
+    default_type application/octet-stream;
+
+    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
+                    '$status $body_bytes_sent "$http_referer" '
+                    '"$http_user_agent" "$http_x_forwarded_for"';
+
+    access_log /var/log/nginx/access.log main;
+
+    sendfile on;
+    tcp_nopush on;
+    tcp_nodelay on;
+    keepalive_timeout 65;
+    types_hash_max_size 2048;
+    client_max_body_size 20M;
+
+    # Gzip compression
+    gzip on;
+    gzip_vary on;
+    gzip_proxied any;
+    gzip_comp_level 6;
+    gzip_types text/plain text/css text/xml text/javascript 
+               application/json application/javascript application/xml+rss 
+               application/rss+xml font/truetype font/opentype 
+               application/vnd.ms-fontobject image/svg+xml;
+
+    include /etc/nginx/conf.d/*.conf;
+}

frontend/eslint.config.js

@@ -0,0 +1,21 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{js,jsx}'],
+    extends: [
+      js.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      globals: globals.browser,
+      parserOptions: { ecmaFeatures: { jsx: true } },
+    },
+  },
+])

frontend/index.html

@@ -0,0 +1,17 @@
+<!doctype html>
+<html lang="en">
+
+<head>
+  <meta charset="UTF-8" />
+  <link rel="icon" type="image/svg+xml" href="/favicon.png" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <meta name="theme-color" content="#5d6367">
+  <title>Eiro</title>
+</head>
+
+<body>
+  <div id="root"></div>
+  <script type="module" src="/src/main.jsx"></script>
+</body>
+
+</html>

frontend/package.json

@@ -0,0 +1,31 @@
+{
+  "name": "frontend",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "lint": "eslint .",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "bootstrap": "^5.3.8",
+    "react": "^19.2.6",
+    "react-bootstrap": "^2.10.10",
+    "react-dom": "^19.2.6",
+    "react-icons": "^5.6.0",
+    "sass": "^1.100.0"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^10.3.0",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.6.0",
+    "vite": "^8.0.12"
+  }
+}

frontend/src/App.jsx

@@ -0,0 +1,12 @@
+import { useState } from 'react'
+import Header from './components/Header/Header'
+
+function App() {
+  return (
+    <>
+      <Header />
+    </>
+  )
+}
+
+export default App

frontend/src/assets/css/bootstrap-override.css

@@ -0,0 +1,182 @@
+:root {
+   /* ============================
+     Base
+  ============================ */
+
+   --bs-body-bg: #FEF6F4;
+   --bs-body-color: #34344A;
+
+   --bs-light: #FEF6F4;
+   --bs-light-rgb: 254, 246, 244;
+
+   --bs-dark: #34344A;
+   --bs-dark-rgb: 52, 52, 74;
+
+
+   /* ============================
+     Semantic colors
+  ============================ */
+
+   --bs-primary: #845A6D;
+   --bs-primary-rgb: 132, 90, 109;
+
+   --bs-secondary: #C89B7B;
+   --bs-secondary-rgb: 200, 155, 123;
+
+   --bs-success: #32746D;
+   --bs-success-rgb: 50, 116, 109;
+
+   --bs-info: #9A7284;
+   --bs-info-rgb: 154, 114, 132;
+
+   --bs-warning: #C89B7B;
+   --bs-warning-rgb: 200, 155, 123;
+
+   --bs-danger: #D47386;
+   --bs-danger-rgb: 212, 115, 134;
+
+
+   /* ============================
+     Links
+  ============================ */
+
+   --bs-link-color: var(--bs-primary);
+   --bs-link-color-rgb: 132, 90, 109;
+
+   /* Hover = primary + dark */
+   --bs-link-hover-color: color-mix(in srgb, var(--bs-primary) 80%, var(--bs-dark));
+   --bs-link-hover-color-rgb: 118, 86, 102;
+
+
+   /* ============================
+     Subtle UI backgrounds
+  ============================ */
+
+   --bs-border-color: color-mix(in srgb, var(--bs-dark) 15%, var(--bs-light));
+   --bs-border-color-rgb: 223, 214, 214;
+
+   --bs-primary-bg-subtle: color-mix(in srgb, var(--bs-primary) 12%, var(--bs-light));
+   --bs-primary-bg-subtle-rgb: 243, 229, 233;
+
+   --bs-success-bg-subtle: color-mix(in srgb, var(--bs-success) 12%, var(--bs-light));
+   --bs-success-bg-subtle-rgb: 229, 238, 237;
+
+   --bs-danger-bg-subtle: color-mix(in srgb, var(--bs-danger) 12%, var(--bs-light));
+   --bs-danger-bg-subtle-rgb: 245, 224, 229;
+
+   --bs-secondary-bg: color-mix(in srgb, var(--bs-secondary) 10%, var(--bs-light));
+   --bs-secondary-bg-rgb: 246, 236, 230;
+
+
+   /* ============================
+     Focus ring
+  ============================ */
+
+   --bs-focus-ring-color: rgba(132, 90, 109, 0.25);
+
+
+   /* ============================
+     Typography polish
+  ============================ */
+
+   --bs-heading-color: var(--bs-dark);
+
+   --bs-secondary-color: color-mix(in srgb, var(--bs-dark) 65%, var(--bs-light));
+   --bs-secondary-color-rgb: 120, 120, 135;
+}
+
+
+/* =========================================
+   DARK MODE
+   Trigger: <html data-bs-theme="dark">
+========================================= */
+
+[data-bs-theme="dark"] {
+
+   /* ============================
+     Base background + text
+  ============================ */
+
+   --bs-body-bg: #1B1B24;
+   --bs-body-color: #FEF6F4;
+
+   --bs-light: #2A2A36;
+   --bs-light-rgb: 42, 42, 54;
+
+   --bs-dark: #FEF6F4;
+   --bs-dark-rgb: 254, 246, 244;
+
+
+   /* ============================
+     Semantic colors
+  ============================ */
+
+   --bs-primary: #B08A9C;
+   --bs-primary-rgb: 176, 138, 156;
+
+   --bs-secondary: #C89B7B;
+   --bs-secondary-rgb: 200, 155, 123;
+
+   --bs-success: #4AA89E;
+   --bs-success-rgb: 74, 168, 158;
+
+   --bs-info: #9A7284;
+   --bs-info-rgb: 154, 114, 132;
+
+   --bs-warning: #E2B48E;
+   --bs-warning-rgb: 226, 180, 142;
+
+   --bs-danger: #E08A9C;
+   --bs-danger-rgb: 224, 138, 156;
+
+
+   /* ============================
+     Links
+  ============================ */
+
+   --bs-link-color: rgb(var(--bs-primary-rgb));
+   --bs-link-hover-color: color-mix(in srgb, var(--bs-primary) 85%, white);
+
+
+   /* ============================
+     Borders + surfaces
+  ============================ */
+
+   --bs-border-color: rgba(255, 255, 255, 0.10);
+
+   --bs-secondary-bg: rgba(var(--bs-primary-rgb), 0.08);
+   --bs-tertiary-bg: rgba(255, 255, 255, 0.04);
+
+   --bs-primary-bg-subtle: rgba(var(--bs-primary-rgb), 0.12);
+   --bs-success-bg-subtle: rgba(var(--bs-success-rgb), 0.12);
+   --bs-danger-bg-subtle: rgba(var(--bs-danger-rgb), 0.12);
+
+
+   /* ============================
+     Focus ring
+  ============================ */
+
+   --bs-focus-ring-color: rgba(var(--bs-primary-rgb), 0.35);
+
+
+   /* ============================
+     Typography polish
+  ============================ */
+
+   --bs-heading-color: #FEF6F4;
+   --bs-secondary-color: rgba(254, 246, 244, 0.70);
+}
+
+
+
+/* =========================================
+   OTHER VARIABLES
+========================================= */
+
+:root {
+   --bs-border-radius: 0.6rem;
+
+   .toast-container>:not(:last-child) {
+      --bs-toast-spacing: 0.6rem;
+   }
+}

frontend/src/assets/css/theme.css

@@ -0,0 +1,354 @@
+@font-face {
+  font-family: "Salin";
+  src: url("../fonts/salin.otf") format("opentype");
+  font-weight: 400;
+  font-style: normal;
+  font-display: swap;
+}
+
+* {
+  margin: 0;
+  padding: 0;
+}
+
+h1,
+h2,
+h3,
+h4,
+h5 {
+  color: var(--bs-heading-color);
+  letter-spacing: -0.01em;
+}
+
+a {
+  text-decoration-thickness: 1px;
+  text-underline-offset: 0.15em;
+}
+
+a:hover {
+  text-decoration-thickness: 2px;
+}
+
+a {
+  color: var(--bs-link-color);
+}
+
+a:hover {
+  color: var(--bs-link-hover-color);
+}
+
+/* ---------------------------------------
+   Navbar
+---------------------------------------- */
+
+.navbar {
+  border-bottom: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  background: color-mix(in srgb, var(--bs-light) 92%, var(--bs-primary));
+}
+
+.navbar .navbar-brand {
+  letter-spacing: 0.03em;
+  color: var(--bs-dark);
+  font-family: "Salin";
+}
+
+.logo-text {
+  letter-spacing: 0.03em;
+  color: var(--bs-dark);
+  font-family: "Salin";
+}
+
+.logo-img {
+  max-height: 10vh;
+}
+
+.navbar .nav-link {
+  color: rgba(var(--bs-dark-rgb), 0.78);
+  border-radius: 999px;
+  padding: 0.4rem 0.75rem;
+}
+
+.navbar .nav-link:hover,
+.navbar .nav-link:focus {
+  color: var(--bs-dark);
+  background: rgba(var(--bs-primary-rgb), 0.08);
+}
+
+.navbar .nav-link.active {
+  color: var(--bs-dark);
+  background: rgba(var(--bs-primary-rgb), 0.14);
+}
+
+/* ---------------------------------------
+   Buttons
+---------------------------------------- */
+
+.btn {
+  font-weight: 600;
+  letter-spacing: -0.005em;
+  box-shadow: 0 1px 0 rgba(var(--bs-dark-rgb), 0.04);
+}
+
+.btn-primary {
+  border-color: rgba(var(--bs-primary-rgb), 0.65);
+  --bs-btn-bg: var(--bs-primary);
+  --bs-btn-border-color: var(--bs-primary);
+
+  --bs-btn-hover-bg: color-mix(in srgb, var(--bs-primary) 85%, black);
+  --bs-btn-hover-border-color: color-mix(in srgb, var(--bs-primary) 85%, black);
+
+  --bs-btn-active-bg: color-mix(in srgb, var(--bs-primary) 75%, black);
+  --bs-btn-active-border-color: color-mix(in srgb, var(--bs-primary) 75%, black);
+
+  --bs-btn-focus-shadow-rgb: var(--bs-primary-rgb);
+  color: rgb(var(--bs-light-rgb)) !important;
+}
+
+.btn-primary:hover,
+.btn-primary:focus {
+  filter: brightness(0.98);
+  box-shadow:
+    0 0 0 0.2rem rgba(var(--bs-primary-rgb), 0.18),
+    0 6px 16px rgba(var(--bs-dark-rgb), 0.08);
+}
+
+.btn-success {
+  --bs-btn-bg: var(--bs-success);
+  --bs-btn-border-color: var(--bs-success);
+  --bs-btn-focus-shadow-rgb: var(--bs-success-rgb);
+}
+
+.btn-success:hover,
+.btn-success:focus {
+  box-shadow:
+    0 0 0 0.2rem rgba(var(--bs-success-rgb), 0.18),
+    0 6px 16px rgba(var(--bs-dark-rgb), 0.08);
+}
+
+.btn-outline-primary {
+  --bs-btn-color: var(--bs-primary);
+  --bs-btn-border-color: rgba(var(--bs-primary-rgb), .45);
+  --bs-btn-hover-bg: rgba(var(--bs-primary-rgb), .10);
+  --bs-btn-hover-border-color: rgba(var(--bs-primary-rgb), .45);
+  --bs-btn-active-bg: rgba(var(--bs-primary-rgb), .16);
+  --bs-btn-active-border-color: rgba(var(--bs-primary-rgb), .45);
+  --bs-btn-focus-shadow-rgb: var(--bs-primary-rgb);
+}
+
+.btn-outline-primary:hover,
+.btn-outline-primary:focus {
+  background: rgba(var(--bs-primary-rgb), 0.10);
+  color: rgb(var(--bs-primary-rgb));
+  box-shadow:
+    0 0 0 0.2rem rgba(var(--bs-primary-rgb), 0.12);
+}
+
+/* Icon buttons */
+.btn.btn-icon {
+  width: 2.5rem;
+  height: 2.5rem;
+  padding: 0;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 999px;
+  box-shadow: 0 0 transparent;
+}
+
+.btn.btn-icon:hover,
+.btn.btn-icon:focus {
+  color: var(--bs-dark);
+  background: rgba(var(--bs-primary-rgb), 0.08);
+}
+
+
+/* ---------------------------------------
+   Dropdowns
+---------------------------------------- */
+
+.dropdown-menu .dropdown-item:hover {
+  background: rgba(var(--bs-primary-rgb), .08);
+}
+
+/* ---------------------------------------
+   Cards / containers
+---------------------------------------- */
+
+.card {
+  border-radius: 1.25rem;
+  border: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  background: rgba(var(--bs-light-rgb), 0.85);
+  box-shadow: 0 2px 10px rgba(var(--bs-dark-rgb), 0.04);
+  padding: 1rem;
+}
+
+.card-header {
+  border-bottom: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  background: rgba(var(--bs-light-rgb), 0.94);
+}
+
+.card-body {
+  --bs-card-spacer-y: 0.5rem;
+  --bs-card-spacer-x: 0.5rem;
+}
+
+.card-footer {
+  /* border-top: 1px solid rgba(var(--bs-border-color-rgb), 1); */
+  border-top: none;
+  background: rgba(var(--bs-light-rgb), 0.94);
+}
+
+/* ---------------------------------------
+   Badges
+---------------------------------------- */
+
+.badge {
+  border-radius: 999px;
+  font-weight: 600;
+  padding: 0.4em 0.7em;
+}
+
+.badge.text-bg-primary {
+  background: var(--bs-primary) !important;
+  color: rgb(var(--bs-light-rgb)) !important;
+  border: 1px solid rgba(var(--bs-primary-rgb), 0.20);
+}
+
+.badge.text-bg-success {
+  background: rgba(var(--bs-success-rgb), 0.14) !important;
+  color: rgb(var(--bs-success-rgb)) !important;
+  border: 1px solid rgba(var(--bs-success-rgb), 0.20);
+}
+
+.badge.text-bg-danger {
+  background: rgba(var(--bs-danger-rgb), 0.14) !important;
+  color: rgb(var(--bs-danger-rgb)) !important;
+  border: 1px solid rgba(var(--bs-danger-rgb), 0.20);
+}
+
+.badge.text-bg-warning {
+  background: rgba(var(--bs-warning-rgb), 0.18) !important;
+  color: rgb(var(--bs-dark-rgb)) !important;
+  border: 1px solid rgba(var(--bs-warning-rgb), 0.22);
+}
+
+/* ---------------------------------------
+   Forms
+---------------------------------------- */
+
+.form-control,
+.form-select {
+  border-color: rgba(var(--bs-border-color-rgb), 1);
+  background: rgba(var(--bs-light-rgb), 0.95);
+}
+
+.form-control:focus,
+.form-select:focus {
+  border-color: rgba(var(--bs-primary-rgb), 0.45);
+  box-shadow: 0 0 0 0.2rem rgba(var(--bs-primary-rgb), 0.18);
+}
+
+/* Checkboxes/switches */
+.form-check-input:focus {
+  box-shadow: 0 0 0 0.2rem rgba(var(--bs-primary-rgb), 0.18);
+}
+
+.form-check-input:checked {
+  background-color: rgb(var(--bs-primary-rgb));
+  border-color: rgb(var(--bs-primary-rgb));
+}
+
+/* ---------------------------------------
+   Alerts (soft)
+---------------------------------------- */
+
+.alert {
+  border-radius: 1rem;
+  border: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  background: rgba(var(--bs-light-rgb), 0.90);
+}
+
+.alert-primary {
+  --bs-toast-max-width: 33vw;
+  border-color: rgba(var(--bs-primary-rgb), 0.25);
+  background: rgba(var(--bs-primary-rgb), 0.20);
+  color: rgb(var(--bs-dark-rgb));
+}
+
+.alert-success {
+  --bs-toast-max-width: 33vw;
+  border-color: rgba(var(--bs-success-rgb), 0.25);
+  background: rgba(var(--bs-success-rgb), 0.20);
+  color: rgb(var(--bs-dark-rgb));
+}
+
+.alert-danger {
+  --bs-toast-max-width: 33vw;
+  border-color: rgba(var(--bs-danger-rgb), 0.25);
+  background: rgba(var(--bs-danger-rgb), 0.30);
+  color: rgb(var(--bs-dark-rgb));
+}
+
+.alert-warning {
+  --bs-toast-max-width: 33vw;
+  border-color: rgba(var(--bs-warning-rgb), 0.28);
+  background: rgba(var(--bs-warning-rgb), 0.2);
+  color: rgb(var(--bs-dark-rgb));
+}
+
+.alert-icon {
+  font-size: 1rem;
+}
+
+/* ---------------------------------------
+   Tables (soft rows)
+---------------------------------------- */
+
+.table {
+  --bs-table-bg: transparent;
+}
+
+.table thead th {
+  color: rgba(var(--bs-dark-rgb), 0.75);
+  font-weight: 700;
+  border-bottom: 1px solid rgba(var(--bs-border-color-rgb), 1);
+}
+
+.table tbody tr {
+  border-bottom: 1px solid rgba(var(--bs-border-color-rgb), 1);
+}
+
+.table-hover tbody tr:hover {
+  background: rgba(var(--bs-primary-rgb), 0.06);
+}
+
+/* ---------------------------------------
+   Toasts / Modals
+---------------------------------------- */
+
+.modal-content {
+  border-radius: 1.25rem;
+  border: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  box-shadow: 0 18px 50px rgba(var(--bs-dark-rgb), 0.18);
+}
+
+/* ---------------------------------------
+   Utility: “pill” chips (nice for filters)
+---------------------------------------- */
+
+.chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.4rem;
+  padding: 0.35rem 0.75rem;
+  border-radius: 999px;
+  border: 1px solid rgba(var(--bs-border-color-rgb), 1);
+  background: rgba(var(--bs-light-rgb), 0.85);
+  color: rgba(var(--bs-dark-rgb), 0.8);
+  font-weight: 600;
+}
+
+.chip:hover {
+  background: rgba(var(--bs-primary-rgb), 0.08);
+  color: var(--bs-dark);
+}

frontend/src/assets/images/avatar_default.svg

@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Uploaded to: SVG Repo, www.svgrepo.com, Generator: SVG Repo Mixer Tools -->
+<svg width="800px" height="800px" viewBox="0 0 16 16" xmlns="http://www.w3.org/2000/svg">
+    <path d="m 8 1 c -1.65625 0 -3 1.34375 -3 3 s 1.34375 3 3 3 s 3 -1.34375 3 -3 s -1.34375 -3 -3 -3 z m -1.5 7 c -2.492188 0 -4.5 2.007812 -4.5 4.5 v 0.5 c 0 1.109375 0.890625 2 2 2 h 8 c 1.109375 0 2 -0.890625 2 -2 v -0.5 c 0 -2.492188 -2.007812 -4.5 -4.5 -4.5 z m 0 0" fill="#2e3436"/>
+</svg>