ci(sonar): déclenche l'analyse quand sonar-project.properties change

Le fichier pilote le périmètre, la classification des tests et les rapports de couverture, mais il ne figurait pas dans les paths du workflow : un commit qui ne touchait que lui laissait le quality gate figé sur son verdict précédent.
ci(sonar): classe tout apps/backend/tests comme test, pas les seuls test_*.py
2026-09-18 14:28:50 +02:00 · 2026-09-18 14:28:05 +02:00
193 changed files with 1162 additions and 15528 deletions
@@ -17,60 +17,3 @@ APP_LOG_LEVEL=INFO
 APP_SECRET_KEY=change_me
 APP_CORS_ORIGINS=http://localhost:4200
 BACKEND_PORT=8000
 FRONTEND_PORT=3000
 # Mailpit capture les courriels du backend, rien ne sort vers l'extérieur.
 MAILPIT_SMTP_PORT=1025
 MAILPIT_UI_PORT=8025
 # API Mock EnerVision
 APP_MOCK_API_BASE_URL=https://api-mock.charlieandre.fr
 APP_MOCK_API_USERNAME=change_me
 APP_MOCK_API_PASSWORD=change_me
 APP_MOCK_API_TIMEOUT_SECONDS=10
 # Airflow (api-server + scheduler + dag-processor, LocalExecutor). Base de métadonnées dédiée `airflow` dans le
 # même conteneur `db` (cf. db/init/120-airflow-database.sql), pas un conteneur de plus.
 AIRFLOW_PORT=8080
 # Chiffre les connexions/variables stockées par Airflow. Générer la vôtre :
 # python -c "from cryptography.fernet import Fernet; print(Fernet.generate_key().decode())"
 AIRFLOW_FERNET_KEY=change_me
 # Clé de session de l'api-server Airflow, distincte de la précédente. Générer la
 # vôtre : python -c "import secrets; print(secrets.token_urlsafe(48))"
 AIRFLOW_API_SECRET_KEY=change_me
 # Secret des jetons JWT entre scheduler, tâches et api-server (conteneurs distincts, le secret
 # doit être partagé). Même générateur que ci-dessus.
 AIRFLOW_JWT_SECRET=change_me
 AIRFLOW_ADMIN_USERNAME=admin
 # Compte Airflow créé au premier démarrage (service `airflow-init`), sans rapport avec les
 # comptes `app_user` d'EnerVision.
 AIRFLOW_ADMIN_PASSWORD=change_me
 AIRFLOW_ADMIN_EMAIL=admin@enervision.fr
 # `APP_SECRET_KEY` du backend, que le DAG `alertes` lance en sous-processus. Distincte de
 # celle de l'API : la détection ne signe aucun jeton, et Airflow exécute du code depuis son
 # interface (cf. ADR 0008). Générer la vôtre :
 # python -c "import secrets; print(secrets.token_urlsafe(48))"
 AIRFLOW_APP_SECRET_KEY=change_me
 # Stack complète derrière le reverse proxy (docker-compose.prod.yml).
 # PUBLIC_HOST alimente l'origine CORS, le lien de réinitialisation et le certificat.
 PUBLIC_HOST=enervision.local
 ACME_EMAIL=
 # Deux environnements sur la même machine (ADR 0009) : un dossier, un `.env` et un projet Compose
 # chacun. Le nom de projet préfixe volumes, réseau et conteneurs et l'emporte sur `name:`.
 # Vide sur un poste de développement : le projet reste `enervision`.
 COMPOSE_PROJECT_NAME=
 # Origine publique, avec le port si le proxy HTTPS n'écoute pas 443. Vide : https://PUBLIC_HOST.
 # Recette : PUBLIC_HOST=rec.enervision.local et PUBLIC_ORIGIN=https://rec.enervision.local:8443.
 PUBLIC_ORIGIN=
 # Ports publiés par le proxy. Vides : 80 et 443. Recette : PROXY_HTTPS_PORT=8443 et
 # PROXY_HTTP_PORT=127.0.0.1:8081, la redirection vers 443 n'ayant pas à être joignable de
 # l'extérieur. Décaler aussi POSTGRES_PORT, MAILPIT_UI_PORT et AIRFLOW_PORT (5434, 8026, 8082).
 PROXY_HTTP_PORT=
 PROXY_HTTPS_PORT=
 # Réglages mémoire de la stack déployée. Sans eux, timescaledb-tune réserve 25 % de la RAM de la
 # machine à chaque base au premier démarrage. L'api-server Airflow 3 n'a rien à régler ici : son
 # nombre de workers vaut 1 par défaut, contre 4 pour le webserver d'Airflow 2.
 TS_TUNE_MEMORY=2GB
 TS_TUNE_NUM_CPUS=2
@@ -10,15 +10,6 @@ updates:
      frontend-dependencies:
        patterns:
          - "*"
    ignore:
      # Pourquoi : @angular/build épingle typescript (>=6.0 <6.1) et vitest (^4). Une majeure
      # de l'un ou l'autre casse `npm ci` tant qu'Angular ne suit pas.
      - dependency-name: "typescript"
        update-types: ["version-update:semver-major"]
      - dependency-name: "vitest"
        update-types: ["version-update:semver-major"]
      - dependency-name: "@vitest/coverage-v8"
        update-types: ["version-update:semver-major"]
  # Backend — uv (lit pyproject.toml / uv.lock)
  - package-ecosystem: "uv"
@@ -47,9 +38,3 @@ updates:
    directory: "/apps/frontend"
    schedule:
      interval: "weekly"
  # Images du reverse proxy et du compagnon ACME, épinglées dans les fichiers Compose
  - package-ecosystem: "docker-compose"
    directory: "/"
    schedule:
      interval: "weekly"
@@ -1,104 +0,0 @@
 name: Airflow
 # Piège : la version de Python vient de etl/airflow/.python-version. C'est 3.12 et non 3.14
 # (contrairement à backend.yml et ml.yml) : celui de l'image apache/airflow retenue, et les tests
 # doivent tourner sur le même interpréteur qu'elle. Le 3.14 de ml/ ne vit que dans l'image
 # Docker, dans son propre environnement (cf. etl/airflow/Dockerfile).
 #
 # Piège : l'image COPY les fichiers de dépendances et le code de ml/ et de apps/backend/. Une
 # modification de l'un ou de l'autre peut donc casser sa construction, d'où ces chemins dans
 # les déclencheurs, alors même que ce workflow ne teste ni le modèle ni l'API.
 on:
  push:
    paths:
      - "etl/airflow/**"
      - "ml/pyproject.toml"
      - "ml/uv.lock"
      - "ml/enervision_ml/**"
      - "apps/backend/pyproject.toml"
      - "apps/backend/uv.lock"
      - "apps/backend/app/**"
      - ".github/workflows/airflow.yml"
  pull_request:
    paths:
      - "etl/airflow/**"
      - "ml/pyproject.toml"
      - "ml/uv.lock"
      - "ml/enervision_ml/**"
      - "apps/backend/pyproject.toml"
      - "apps/backend/uv.lock"
      - "apps/backend/app/**"
      - ".github/workflows/airflow.yml"
 permissions:
  contents: read
 concurrency:
  group: airflow-${{ github.ref }}
  cancel-in-progress: true
 jobs:
  verification:
    name: Lint et intégrité des DAGs
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: etl/airflow
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      - name: Installe uv
        uses: astral-sh/setup-uv@v7
        with:
          enable-cache: true
          cache-dependency-glob: etl/airflow/uv.lock
      - name: Installe l'interpréteur déclaré par .python-version
        run: uv python install
      - name: Synchronise les dépendances sans dévier du verrou
        run: uv sync --all-groups --frozen
      - name: Vérifie le formatage
        run: uv run ruff format --check .
      - name: Analyse statique
        run: uv run ruff check --output-format=github .
      # Aucun test ne lance de tâche ni de scheduler : DagBag charge les fichiers de dags/ et
      # vérifie import, planification, plafonds d'exécution et commande de chaque tâche.
      - name: Tests d'intégrité des DAGs
        run: uv run pytest
  image:
    name: Construction de l'image
    runs-on: ubuntu-latest
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      - name: Construit l'image (contexte à la racine, elle COPY ml/ et apps/backend/)
        run: docker build -f etl/airflow/Dockerfile -t enervision-airflow:ci .
      # Vérifie ce qui ne casse qu'à l'exécution, pas à la construction : libgomp1 absent
      # (`OSError: libgomp.so.1` au premier import) ou environnement ml/ non figé.
      - name: Vérifie que le pipeline ML s'importe sans réseau
        run: >
          docker run --rm --network none enervision-airflow:ci
          bash -c "cd /opt/ml && env -u VIRTUAL_ENV uv run --no-sync python -m enervision_ml.train --help"
      # `--help` sort par argparse avant `get_settings()` : ni base ni secret requis, et
      # l'import des modules prouve que l'environnement /opt/backend est complet.
      # Les commandes des DAGs `alertes`, historique et API Mock sont couvertes.
      - name: Vérifie que les quatre commandes backend s'importent sans réseau
        run: >
          docker run --rm --network none enervision-airflow:ci
          bash -c "cd /opt/backend
          && env -u VIRTUAL_ENV uv run --no-sync python -m app.detection.internal_alerts --help
          && env -u VIRTUAL_ENV uv run --no-sync python -m app.cli generate-recommendations --help
          && env -u VIRTUAL_ENV uv run --no-sync python -m app.etl.historical_import --help
          && env -u VIRTUAL_ENV uv run --no-sync python -m app.etl.mock_api_import --help"
@@ -30,10 +30,10 @@ jobs:
    steps:
      - name: Récupère le dépôt
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
@@ -90,10 +90,10 @@ jobs:
    steps:
      - name: Récupère le dépôt
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
@@ -126,10 +126,10 @@ jobs:
    steps:
      - name: Récupère le dépôt
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
@@ -140,29 +140,3 @@ jobs:
        # Piège : sans `shell: bash`, un échec de `uv export` serait masqué par le pipe.
        shell: bash
        run: uv export --frozen --no-dev --no-emit-project --no-hashes | uvx pip-audit --requirement /dev/stdin --no-deps
  sast:
    name: Analyse statique de sécurité
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: apps/backend
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      # Pourquoi : pas de cache ici. uvx n'installe pas le projet, le verrou n'alimente donc
      # aucune clé de cache ; la seule roue téléchargée est celle de Bandit.
      - name: Installe uv
        uses: astral-sh/setup-uv@v7
      # Pourquoi : le périmètre est `app`, le code livré. Les tests emploient légitimement des
      # secrets factices et des `assert` que Bandit signalerait sans qu'aucun n'atteigne la prod.
      - name: Analyse le code livré (bloquant à partir de MEDIUM)
        run: uvx bandit==1.9.4 --recursive app --severity-level medium --confidence-level medium
      # Piège : sans cette seconde passe, un constat LOW disparaîtrait du journal sans trace.
      - name: Rapport complet, tous niveaux
        continue-on-error: true
        run: uvx bandit==1.9.4 --recursive app
@@ -1,325 +0,0 @@
 name: DAST
 # Scan dynamique OWASP ZAP de l'API (issue #41). Il attaque une API qui tourne : le job démarre
 # la base et le backend sur le runner, sème un site et quelques relevés (sans ça le scan ne
 # frappe que des gestionnaires d'erreur), crée un compte `lecteur` jetable
 # (scripts/dast-token.sh), puis lance ZAP sur le contrat OpenAPI avec le jeton de ce compte.
 #
 # Non bloquant pour l'instant sur les alertes (`continue-on-error` sur la seule étape du scan) :
 # le volume d'un premier passage trié est inconnu. Deux étapes suivantes, elles, bloquent si le
 # scan n'a rien testé (import du contrat, absence de toute réponse de succès) : un job vert doit
 # vouloir dire qu'un scan a eu lieu.
 #
 # Piège : ce scan tape la configuration par défaut du backend (`APP_ENV=local`, pas de TLS, pas
 # de reverse proxy). Il ne dit rien des en-têtes ni du TLS posés par le proxy en production, et
 # remontera des alertes (HSTS absent...) qui n'existent pas derrière lui.
 on:
  workflow_dispatch:
  schedule:
    # Un scan actif est long : hebdomadaire plutôt qu'à chaque PR.
    - cron: "0 3 * * 1"
  pull_request:
    # Ne se lance sur une PR que si le scan lui-même change.
    paths:
      - ".github/workflows/dast.yml"
      - "scripts/dast-token.sh"
 permissions:
  contents: read
 concurrency:
  group: dast-${{ github.ref }}
  cancel-in-progress: true
 jobs:
  zap:
    name: Scan OWASP ZAP de l'API
    runs-on: ubuntu-latest
    # Généreux face aux ~2 minutes observées de bout en bout : le vrai plafond est
    # `scanner.maxScanDurationInMins` (étape Scan ZAP), sous le TTL du jeton. Une annulation par
    # ce timeout-ci n'exécute pas les étapes `always()` : mieux vaut ne jamais l'atteindre.
    timeout-minutes: 30
    # Même image que docker-compose.yml : la première migration refuse de s'appliquer sans
    # l'extension TimescaleDB (cf. backend.yml).
    services:
      db:
        image: timescale/timescaledb-ha:pg17
        env:
          POSTGRES_USER: enervision
          POSTGRES_PASSWORD: change_me
          POSTGRES_DB: enervision_dast
        ports:
          - "5433:5432"
        options: >-
          --health-cmd "pg_isready -U enervision -d enervision_dast"
          --health-interval 10s
          --health-timeout 5s
          --health-retries 12
          --health-start-period 40s
    env:
      # Base jetable : ZAP y écrira et le script y crée deux comptes.
      DATABASE_URL: postgresql+asyncpg://enervision:change_me@localhost:5433/enervision_dast
      APP_SECRET_KEY: secret-de-scan-assez-long-pour-le-validateur
      APP_ENV: local
      # Le jeton du lecteur doit survivre à toute la durée du scan (15 minutes par défaut).
      # 3600 est le plafond accepté par la configuration ; `scanner.maxScanDurationInMins`
      # (étape Scan ZAP) reste très en dessous, marge comprise pour les étapes qui l'entourent.
      APP_ACCESS_TOKEN_TTL_SECONDS: "3600"
      PGPASSWORD: change_me
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      - name: Installe uv
        # Épinglé sur le commit du tag v7 (règle Sonar githubactions:S7637 : dépendance tierce,
        # contrairement à actions/checkout ou actions/upload-artifact, premières parties).
        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
          # `prune-cache` vaut `true` par défaut (encore sur ce commit) : l'étape de post-job
          # « Pruning cache » est restée bloquée 5 minutes avant d'échouer (exit code 2) sur un
          # run où les 16 étapes précédentes passaient, sans lien avec le scan. Le prune n'est
          # qu'une optimisation de taille de cache entre deux runs, pas une garantie : le
          # désactiver retire le blocage sans rien changer au comportement du job.
          prune-cache: false
      - name: Installe l'interpréteur déclaré par .python-version
        run: uv python install
        working-directory: apps/backend
      # `--no-build` : aucune dépendance n'est construite depuis ses sources, donc aucun script de
      # build exécuté (règle Sonar S8541). Le projet lui-même n'est pas installé : il tourne depuis
      # `apps/backend`, comme dans son Dockerfile. Les `uv run` suivants portent `--frozen
      # --no-sync` pour ne rien résoudre ni reconstruire (règle S8544).
      - name: Synchronise les dépendances sans dévier du verrou
        run: uv sync --frozen --no-dev --no-install-project --no-build
        working-directory: apps/backend
      - name: Active TimescaleDB sur la base du scan
        run: psql -h localhost -p 5433 -U enervision -d enervision_dast -c "CREATE EXTENSION IF NOT EXISTS timescaledb"
      - name: Applique les migrations
        run: uv run --frozen --no-sync --no-build alembic upgrade head
        working-directory: apps/backend
      # Sans données, `GET /sites` rend `[]`, chaque `/{site_id}` rend 404 et le scan actif ne
      # frappe que des gestionnaires d'erreur plutôt que la logique métier. `db/seeds/` est vide
      # (pas encore d'outillage de jeu de données pour la CI) : un site et deux relevés à la main,
      # juste assez pour que les routes de lecture aient quelque chose à rendre.
      - name: Insère un site et des relevés minimaux pour le scan
        run: |
          psql -h localhost -p 5433 -U enervision -d enervision_dast <<'SQL'
          INSERT INTO site (site_id, site_name, site_type, location, capacity_kw, status)
          VALUES ('dast-site', 'Site du scan DAST', 'bureau', 'CI', 50, 'actif')
          ON CONFLICT (site_id) DO NOTHING;
          INSERT INTO reading (site_id, timestamp, source, consumption_kw, consumption_kwh, is_working_hours, data_quality, raw_data)
          VALUES
            ('dast-site', now() - interval '2 hours', 'api_current', 12.5, 12.5, true, 'good', '{}'),
            ('dast-site', now() - interval '1 hour',  'api_current', 13.0, 13.0, true, 'good', '{}')
          ON CONFLICT DO NOTHING;
          SQL
      - name: Démarre l'API
        run: |
          nohup uv run --frozen --no-sync --no-build uvicorn app.main:create_app --factory \
            --host 0.0.0.0 --port 8000 > "$RUNNER_TEMP/api.log" 2>&1 &
          for _ in $(seq 1 30); do
            curl -fsS http://localhost:8000/api/v1/health/ready >/dev/null 2>&1 && exit 0
            sleep 2
          done
          echo "L'API ne répond pas sur /health/ready" >&2
          cat "$RUNNER_TEMP/api.log" >&2
          exit 1
        working-directory: apps/backend
      - name: Crée le compte lecteur du scan
        id: jeton
        run: |
          jeton="$(../../scripts/dast-token.sh)"
          echo "::add-mask::$jeton"
          echo "jeton=$jeton" >> "$GITHUB_OUTPUT"
        working-directory: apps/backend
      # Étape distincte du scan lui-même, et sans `continue-on-error` : un `curl` qui échoue ici
      # (API tombée juste après la sonde de readiness, par exemple) doit rester un échec visible,
      # pas se travestir en « ZAP n'a importé aucune URL » à l'étape de garde suivante.
      - name: Prépare le contrat pour ZAP
        run: |
          mkdir -p zap-out zap-logs
          curl -fsS http://localhost:8000/openapi.json -o zap-out/openapi.json
          # Le dossier passe à l'uid 1000 (utilisateur du conteneur ZAP) : le runner n'y écrit
          # plus après ce chown, d'où `zap-logs/` (uid du runner) pour les journaux ci-dessous.
          # Pas de `chmod 777` (règle Sonar S2612).
          sudo chown -R 1000:1000 zap-out
      # `--network host` : ZAP atteint l'API sur le localhost du runner.
      #
      # Piège vécu : la clé du nom d'en-tête est `matchstr`, pas `matchstring`. ZAP accepte
      # n'importe quelle clé `-config` sans erreur ; avec la mauvaise, il ajoutait à TOUTES les
      # requêtes un en-tête au nom vide (`: Bearer <jeton>`), qu'uvicorn refuse par un 400
      # (« Invalid HTTP request received »), y compris sur les routes publiques.
      #
      # Le jeton ne passe ni par `${{ }}` dans ce script (il finirait en clair dans le fichier de
      # commande que GitHub écrit sur le disque du runner pour toute la durée de l'étape), ni par
      # l'argv de `docker run` (visible par `ps aux` et par `docker inspect zap` tant que le
      # conteneur existe) : il est écrit dans un fichier de configuration ZAP séparé, monté en
      # lecture seule hors de `/zap/wrk` pour ne jamais atterrir dans l'artefact publié.
      #
      # Les routes d'authentification qui changent l'état du compte du scan sont exclues : un
      # scan actif y déclencherait la limitation de débit du login, la réinitialisation de mots de
      # passe et la fermeture des sessions, sans rien apprendre de plus.
      #
      # `scanner.maxScanDurationInMins`/`maxRuleDurationInMins` bornent le scan actif, que `-T` ne
      # couvre pas (il ne borne que le démarrage et le scan passif) : sans ça, une règle qui
      # traîne peut dépasser le TTL du jeton (401 muets en fin de scan) ou le timeout du job (qui
      # annule sans exécuter les étapes `always()`, rapport et journaux perdus).
      - name: Scan ZAP
        id: zap
        continue-on-error: true
        env:
          JETON: ${{ steps.jeton.outputs.jeton }}
        run: |
          set -o pipefail
          printf 'replacer.full_list(0).description=auth\nreplacer.full_list(0).enabled=true\nreplacer.full_list(0).matchtype=REQ_HEADER\nreplacer.full_list(0).matchstr=Authorization\nreplacer.full_list(0).regex=false\nreplacer.full_list(0).replacement=Bearer %s\n' "$JETON" > "$RUNNER_TEMP/zap-auth.conf"
          # Piège vécu : `chmod 600` seul rend le fichier illisible pour le conteneur, qui lit un
          # montage bind avec son propre uid (1000), distinct de celui du runner qui l'a écrit.
          # ZAP échoue alors dès le lancement (« File not readable: /zap/auth.conf »), et
          # `zap-api-scan.py` attend `-T` minutes complètes avant d'abandonner : dix minutes qui
          # ressemblent à un scan actif, pour un daemon mort depuis le début.
          #
          # Piège vécu (numéro deux) : une fois le fichier passé à l'uid 1000 par `sudo chown`,
          # l'utilisateur du runner n'en est plus propriétaire et un `chmod` sans `sudo` échoue
          # (« Operation not permitted »). Avec le `-e` implicite de bash sur les étapes GitHub
          # Actions, cette erreur arrêtait toute l'étape avant même `docker run` : scan « réussi »
          # en une fraction de seconde, sans le moindre journal ni rapport produit.
          sudo chown 1000:1000 "$RUNNER_TEMP/zap-auth.conf"
          sudo chmod 644 "$RUNNER_TEMP/zap-auth.conf"
          docker run --name zap --network host \
            -v "$PWD/zap-out:/zap/wrk:rw" \
            -v "$RUNNER_TEMP/zap-auth.conf:/zap/auth.conf:ro" \
            ghcr.io/zaproxy/zaproxy:stable zap-api-scan.py \
            -t /zap/wrk/openapi.json -f openapi -O http://localhost:8000 \
            -T 10 \
            -r zap-report.html -J zap-report.json -w zap-report.md \
            -z "-configfile /zap/auth.conf \
                -config globalexcludeurl.url_list.url(0).description=auth-etat \
                -config globalexcludeurl.url_list.url(0).enabled=true \
                -config globalexcludeurl.url_list.url(0).regex='.*/api/v1/auth/(login|password|logout-all|forgot-password|reset-password).*' \
                -config scanner.maxScanDurationInMins=15 \
                -config scanner.maxRuleDurationInMins=5" \
            2>&1 | tee "$RUNNER_TEMP/zap-stdout.log"
      - name: Récupère les journaux de ZAP
        if: always()
        run: |
          mkdir -p zap-logs
          # ZAP journalise la valeur de chaque `-config`/`-configfile` chargé, y compris le jeton,
          # à un niveau visible sans `-d` : les copies publiées en artefact sont donc caviardées,
          # même si `::add-mask::` (posé à la création du jeton) protège déjà le journal du job.
          masque() { sed -E 's/(Bearer )[A-Za-z0-9._-]+/\1[MASQUE]/Ig'; }
          [ -f "$RUNNER_TEMP/zap-stdout.log" ] && masque < "$RUNNER_TEMP/zap-stdout.log" > zap-logs/zap-stdout.log
          docker cp zap:/home/zap/.ZAP/zap.log "$RUNNER_TEMP/zap-internal.log" 2>/dev/null || true
          [ -f "$RUNNER_TEMP/zap-internal.log" ] && masque < "$RUNNER_TEMP/zap-internal.log" > zap-logs/zap.log
          [ -f "$RUNNER_TEMP/api.log" ] && masque < "$RUNNER_TEMP/api.log" > zap-logs/api.log
          rm -f "$RUNNER_TEMP/zap-auth.conf"
          docker rm -f zap >/dev/null 2>&1 || true
      # `continue-on-error` sur le scan ne doit pas faire passer pour vert un scan qui n'a rien
      # testé. Constaté une première fois : 2 URL importées sur 26 opérations, ZAP n'avait envoyé
      # que des requêtes vouées au 404. Le seuil est dérivé du contrat plutôt que d'un nombre fixe
      # : un contrat qui grossit ne doit pas rendre la garde plus permissive qu'elle ne l'était.
      - name: Vérifie que le contrat a bien été importé
        run: |
          attendu="$(python3 -c "
          import json
          d = json.load(open('zap-out/openapi.json'))
          methodes = ('get', 'post', 'put', 'patch', 'delete', 'head', 'options')
          print(sum(1 for chemin in d['paths'].values() for m in chemin if m in methodes))
          ")"
          minimum=$((attendu * 80 / 100))
          importees="$(sed -n 's/.*Number of Imported URLs: \([0-9]*\).*/\1/p' "$RUNNER_TEMP/zap-stdout.log" | tail -1)"
          echo "URL importées depuis le contrat OpenAPI : ${importees:-aucune} (contrat : $attendu opérations, minimum accepté : $minimum)"
          if [ "${importees:-0}" -lt "$minimum" ]; then
            echo "::error::ZAP n'a importé que ${importees:-0} URL sur $attendu opérations du contrat OpenAPI (minimum attendu : $minimum, soit 80%). Le scan n'a pas testé l'API, voir zap-logs/zap.log dans l'artefact zap-report."
            exit 1
          fi
      # Deuxième garde-fou : le contrat peut être importé et ZAP n'obtenir que des erreurs
      # (constaté : base sans données, toutes les routes de site répondaient 404).
      #
      # Piège de conception, trouvé en répétant ce job en local avant de l'écrire ici : borner le
      # pourcentage de 4xx ne marche pas. Un scan actif fuzze délibérément un grand nombre
      # d'entrées invalides (identifiants inventés, méthodes non supportées...), donc même un scan
      # sain, contre l'API seedée juste au-dessus, reste à 98% de 4xx avec seulement 1% de 2xx :
      # c'est la forme normale d'un scan actif, pas un signe d'échec. Le signal qui distingue
      # vraiment un scan cassé (0% de 2xx, `insight.code.2xx` absent du rapport dans le premier
      # incident) d'un scan sain (2xx non nul, aussi faible soit-il) est donc l'absence de succès,
      # pas la part d'échecs. Dérivé de `zap-report.json` (champ structuré `insights[]`) plutôt
      # que du texte libre du rapport Markdown, qui aurait le même défaut de conception en plus
      # d'être fragile au format.
      - name: Vérifie que le scan a obtenu au moins une réponse de succès
        run: |
          python3 - <<'PY'
          import json
          import sys
          try:
              rapport = json.load(open("zap-out/zap-report.json"))
          except FileNotFoundError:
              print("::error::Aucun rapport ZAP produit : le scan n'a rien testé.")
              sys.exit(1)
          pourcentage_2xx = 0.0
          for insight in rapport.get("insights", []):
              if insight.get("key") == "insight.code.2xx":
                  pourcentage_2xx = float(insight.get("statistic", 0))
                  break
          print(f"Pourcentage de réponses 2xx : {pourcentage_2xx}%")
          if pourcentage_2xx <= 0:
              print(
                  "::error::Aucune réponse 2xx (succès) reçue : le scan n'a atteint aucune route "
                  "réelle de l'API. Voir zap-logs/api.log et zap-logs/zap.log dans l'artefact "
                  "zap-report."
              )
              sys.exit(1)
          PY
      # Uniquement la synthèse (jusqu'à « Alert Detail » exclu) : `$GITHUB_STEP_SUMMARY` est
      # limité à 1 Mio, et cette étape tourne sous `always()` - son échec ferait échouer le job
      # après le passage des deux garde-fous, pour une simple raison de mise en forme. Le rapport
      # complet reste dans l'artefact `zap-report`.
      - name: Publie le résumé
        if: always()
        run: |
          if [ -f zap-out/zap-report.md ]; then
            awk '/^## Alert Detail/{exit} {print}' zap-out/zap-report.md >> "$GITHUB_STEP_SUMMARY"
            echo "" >> "$GITHUB_STEP_SUMMARY"
            echo "Rapport complet (HTML/JSON/Markdown) dans l'artefact \`zap-report\`." >> "$GITHUB_STEP_SUMMARY"
          else
            echo "Aucun rapport ZAP produit, voir le journal du job." >> "$GITHUB_STEP_SUMMARY"
          fi
      - name: Publie les rapports
        if: always()
        uses: actions/upload-artifact@v7
        with:
          name: zap-report
          path: |
            zap-out/
            zap-logs/
          if-no-files-found: warn
      # Diagnostic de dernier recours : les journaux de l'API sont déjà dans l'artefact
      # (zap-logs/api.log) via l'étape « Récupère les journaux de ZAP » (always()), mais les
      # afficher directement dans le journal du job évite d'avoir à le télécharger pour un échec
      # évident (l'API n'a jamais démarré, par exemple).
      - name: Journal de l'API en cas d'échec
        if: failure() || steps.zap.outcome == 'failure'
        run: cat "$RUNNER_TEMP/api.log" || true
@@ -1,58 +0,0 @@
 # Pourquoi : le runner tourne sur la VM ENI, adresse privée que les runners hébergés par GitHub
 # ne joignent pas, et travaille dans un dossier stable par environnement plutôt que dans son
 # espace de travail : `.env`, certificats et volumes y survivent d'un déploiement à l'autre.
 # Piège : jamais de déclencheur `pull_request` ici. Sur un dépôt public, une PR de fork
 # exécuterait son code sur la machine de production (ADR 0009) - job deploy.
 name: Déploiement
 on:
  push:
    branches: [dev, main]
  workflow_dispatch:
 permissions:
  contents: read
 concurrency:
  group: deploy-${{ github.ref_name }}
  cancel-in-progress: false
 jobs:
  deploy:
    runs-on: [self-hosted, linux, eni-g3]
    timeout-minutes: 30
    environment:
      name: ${{ github.ref_name == 'main' && 'prod' || 'rec' }}
      url: ${{ github.ref_name == 'main' && 'https://enervision.local' || 'https://rec.enervision.local:8443' }}
    env:
      ENVIRONNEMENT: ${{ github.ref_name == 'main' && 'prod' || 'rec' }}
      PORT_HTTPS: ${{ github.ref_name == 'main' && '443' || '8443' }}
    steps:
      - name: Aligner le dossier de l'environnement sur la branche poussée
        run: |
          cd "/srv/enervision/${ENVIRONNEMENT}"
          git fetch --quiet origin "${GITHUB_REF_NAME}"
          git checkout --quiet "${GITHUB_REF_NAME}"
          git reset --quiet --hard "origin/${GITHUB_REF_NAME}"
          git log -1 --format='%h %s'
      - name: Reconstruire et redémarrer la stack
        run: |
          cd "/srv/enervision/${ENVIRONNEMENT}"
          make stack-up
      - name: Attendre que l'API réponde derrière le proxy
        run: |
          for tentative in $(seq 1 36); do
            if curl --fail --silent --insecure "https://localhost:${PORT_HTTPS}/api/v1/health/ready"; then
              exit 0
            fi
            sleep 5
          done
          echo "L'API ne répond pas après 3 minutes" >&2
          cd "/srv/enervision/${ENVIRONNEMENT}"
          compose="docker compose -f docker-compose.yml -f docker-compose.prod.yml"
          $compose ps
          $compose logs --tail=50 backend proxy
          exit 1
@@ -17,10 +17,10 @@ jobs:
  build:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v7
+      - uses: actions/setup-node@v6
        with:
-          node-version: 26
+          node-version: 24
          cache: npm
          cache-dependency-path: apps/frontend/package-lock.json
@@ -33,10 +33,10 @@ jobs:
    name: Audit des dépendances
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v7
+      - uses: actions/setup-node@v6
        with:
-          node-version: 26
+          node-version: 24
      # Seuil high : une vulnérabilité moderate de devDependency ne doit pas bloquer une livraison.
      - run: npm audit --audit-level=high --package-lock-only
        working-directory: apps/frontend
@@ -45,10 +45,10 @@ jobs:
    needs: build
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v7
+      - uses: actions/setup-node@v6
        with:
-          node-version: 26
+          node-version: 24
          cache: npm
          cache-dependency-path: apps/frontend/package-lock.json
      - name : Installation des dépendances (Front)
@@ -58,7 +58,7 @@ jobs:
        run: npm test --watch=false --code-coverage --coverageReporters=lcov
        working-directory: apps/frontend
      - name: Upload coverage
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v4
        with:
          name: frontend-coverage
          path: apps/frontend/coverage/frontend/lcov.info
@@ -1,52 +0,0 @@
 name: Infra
 # Pourquoi : le Terraform du dépôt est resté cassé sans que rien ne le dise, faute de job qui le
 # joue. Ce workflow n'applique rien : il vérifie le formatage et la validité de chaque racine.
 # Piège : la boucle parcourt `environments/*`, pour qu'une racine ajoutée soit couverte sans
 # toucher à ce fichier.
 on:
  push:
    paths:
      - "infra/terraform/**"
      - ".github/workflows/infra.yml"
  pull_request:
    paths:
      - "infra/terraform/**"
      - ".github/workflows/infra.yml"
 permissions:
  contents: read
 concurrency:
  group: infra-${{ github.ref }}
  cancel-in-progress: true
 jobs:
  terraform:
    name: Formatage et validation Terraform
    runs-on: ubuntu-latest
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      # Action tierce, donc epinglee sur un SHA de commit et pas sur un tag mobile : un tag se
      # redeplace, et ce workflow tourne avec les droits du depot (regle Sonar githubactions:S7637).
      - name: Installe Terraform
        uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4.0.1
        with:
          terraform_version: 1.16.3
          terraform_wrapper: false
      - name: Vérifie le formatage
        run: terraform fmt -check -recursive infra/terraform
      - name: Valide chaque racine
        run: |
          for racine in infra/terraform/environments/*/; do
            echo "::group::${racine}"
            terraform -chdir="${racine}" init -backend=false -input=false
            terraform -chdir="${racine}" validate
            echo "::endgroup::"
          done
@@ -30,10 +30,10 @@ jobs:
    steps:
      - name: Récupère le dépôt
-        uses: actions/checkout@v7
+        uses: actions/checkout@v4
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: ml/uv.lock
@@ -57,26 +57,3 @@ jobs:
      # synthetiques ou un magasin SQLite local jetable (cf. ml/tests/test_train.py).
      - name: Tests
        run: uv run pytest
  sast:
    name: Analyse statique de sécurité
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ml
    steps:
      - name: Récupère le dépôt
        uses: actions/checkout@v7
      # Pourquoi : pas de cache ici. uvx n'installe pas le projet, le verrou n'alimente donc
      # aucune clé de cache ; la seule roue téléchargée est celle de Bandit.
      - name: Installe uv
        uses: astral-sh/setup-uv@v7
      - name: Analyse le code livré (bloquant à partir de MEDIUM)
        run: uvx bandit==1.9.4 --recursive enervision_ml --severity-level medium --confidence-level medium
      - name: Rapport complet, tous niveaux
        continue-on-error: true
        run: uvx bandit==1.9.4 --recursive enervision_ml
@@ -5,16 +5,14 @@ on:
    paths:
      - "apps/frontend/**"
      - "apps/backend/**"
      - "ml/**"
      - "etl/airflow/**"
      - ".github/workflows/sonarqube.yml"
      - "sonar-project.properties"
  pull_request:
    paths:
      - "apps/frontend/**"
      - "apps/backend/**"
      - "ml/**"
      - "etl/airflow/**"
      - ".github/workflows/sonarqube.yml"
      - "sonar-project.properties"
 # Build l'ensemble du projet, puis lance les tests
@@ -24,10 +22,10 @@ jobs:
  build-front:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v7
+      - uses: actions/setup-node@v6
        with:
-          node-version: 26
+          node-version: 24
          cache: npm
          cache-dependency-path: apps/frontend/package-lock.json
@@ -40,10 +38,10 @@ jobs:
    needs: build-front
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v7
+      - uses: actions/setup-node@v6
        with:
-          node-version: 26
+          node-version: 24
          cache: npm
          cache-dependency-path: apps/frontend/package-lock.json
@@ -56,7 +54,7 @@ jobs:
        working-directory: apps/frontend
      - name: Upload coverage
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v4
        with:
          name: frontend-coverage
          path: apps/frontend/coverage/frontend/lcov.info
@@ -64,9 +62,9 @@ jobs:
  build-back:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
@@ -95,9 +93,9 @@ jobs:
    needs: build-back
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
      - name: Installe uv
-        uses: astral-sh/setup-uv@v7
+        uses: astral-sh/setup-uv@v5
        with:
          enable-cache: true
          cache-dependency-glob: apps/backend/uv.lock
@@ -107,65 +105,29 @@ jobs:
        working-directory: apps/backend
      - name: Upload coverage
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v4
        with:
          name: backend-coverage
          path: apps/backend/coverage.xml
  test-ml:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
      - name: Installe uv
        uses: astral-sh/setup-uv@v7
        with:
          enable-cache: true
          cache-dependency-glob: ml/uv.lock
      - name: Installe l'interpréteur déclaré par .python-version
        run: uv python install
        working-directory: ml
      - name: Synchronise les dépendances sans dévier du verrou
        run: uv sync --all-groups --frozen
        working-directory: ml
      - name: Lancement des tests et génération du rapport de couverture (ML)
        run: uv run pytest --cov-report=xml
        working-directory: ml
      - name: Upload coverage
        uses: actions/upload-artifact@v7
        with:
          name: ml-coverage
          path: ml/coverage.xml
  sonarqube:
-    needs: [build-front, build-back, test-front, test-back, test-ml]
+    needs: [build-front, build-back, test-front, test-back]
    name: SonarQube
    # Pourquoi : GitHub ne fournit pas les secrets aux workflows lancés par dependabot[bot].
    # Sans SONAR_TOKEN le scan échoue sans rien analyser ; build et tests restent joués.
    if: github.actor != 'dependabot[bot]'
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@v6
        with:
          fetch-depth: 0
      - name: Téléchargement du rapport de couverture (Front)
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
        with:
          name: frontend-coverage
          path: apps/frontend/coverage/frontend
      - name: Téléchargement du rapport de couverture (Back)
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v4
        with:
          name: backend-coverage
          path: apps/backend
      - name: Téléchargement du rapport de couverture (ML)
        uses: actions/download-artifact@v8
        with:
          name: ml-coverage
          path: ml
      - name: SonarQube Scan
        uses: SonarSource/sonarqube-scan-action@v8
        env:
@@ -40,6 +40,7 @@ kubeconfig
 # Airflow
 etl/airflow/logs/
 airflow.db
 airflow-webserver.pid
 standalone_admin_password.txt
 # Environnement et secrets
@@ -63,14 +64,7 @@ ml/models/*
 !ml/models/.gitkeep
 ml/mlruns/
 ml/mlartifacts/
-ml/mlflow.db*
+ml/mlflow.db
 ml/.env
 # Airflow : base sqlite locale generee par les tests d'integrite des DAGs (etl/airflow/tests)
 etl/airflow/tests/.airflow_home/
 # TLS : certificats du reverse proxy, générés par script ou par certbot
 infra/proxy/tls/*.pem
 # IDE et OS
 .idea/
@@ -1,50 +1,17 @@
 BACKEND := apps/backend
 FRONTEND := apps/frontend
 ML := ml
 AIRFLOW := etl/airflow
 COMPOSE_PROD := docker compose -f docker-compose.yml -f docker-compose.prod.yml
 # Piège : sans `export`, une valeur passée en ligne de commande n'atteindrait pas docker compose.
 # PUBLIC_HOST retombe sur le `.env`, que make ne lit pas, puis sur la valeur de `.env.example`.
 PUBLIC_HOST ?= $(shell sed -n 's/^PUBLIC_HOST=//p' .env 2>/dev/null | tail -1)
 PUBLIC_HOST := $(or $(strip $(PUBLIC_HOST)),enervision.local)
 export PUBLIC_HOST
 ifdef ACME_EMAIL
 export ACME_EMAIL
 endif
 # Piege : make ne lit pas `.env`, que seul docker compose interpole. Les cibles hors conteneur
 # (ml-*, demo-data, db-wait) joignent la base par le port publie et ont besoin de ces valeurs.
 env-val = $(shell sed -n 's/^$(1)=//p' .env 2>/dev/null | tail -1)
 PG_USER := $(or $(strip $(call env-val,POSTGRES_USER)),enervision)
 PG_PASSWORD := $(or $(strip $(call env-val,POSTGRES_PASSWORD)),change_me)
 PG_DB := $(or $(strip $(call env-val,POSTGRES_DB)),enervision)
 PG_PORT := $(or $(strip $(call env-val,POSTGRES_PORT)),5433)
 ml-env-val = $(shell sed -n 's/^$(1)=//p' ml/.env 2>/dev/null | tail -1)
 ML_ENV_DB_PASSWORD := $(call ml-env-val,MLFLOW_DB_PASSWORD)
 AIRFLOW_PORT := $(or $(strip $(call env-val,AIRFLOW_PORT)),8080)
 MAILPIT_UI_PORT := $(or $(strip $(call env-val,MAILPIT_UI_PORT)),8025)
 ML_DATABASE_URL ?= postgresql+psycopg://$(PG_USER):$(PG_PASSWORD)@localhost:$(PG_PORT)/$(PG_DB)
 export ML_DATABASE_URL
 # Le jeu historique s'arrete au 31/12/2024 : score et detection ancres a l'horloge reelle ne
 # verraient qu'un parc muet depuis des mois. Cf. `--now` de enervision_ml.score.
 DEMO_NOW ?= 2024-12-31T00:00:00Z
 .DEFAULT_GOAL := help
-.PHONY: help install install-backend install-frontend install-ml install-airflow \
+.PHONY: help install install-backend install-frontend install-ml dev dev-backend dev-frontend \
        dev dev-backend dev-frontend \
        lint format typecheck test test-cov test-integration check \
-        openapi docker-build db-up db-down db-reset db-logs db-psql db-wait db-ensure-airflow \
+        openapi docker-build db-up db-down db-reset db-logs db-psql migrate bootstrap-admin \
-        migrate bootstrap-admin services-up demo-data demo-data-force \
+        ml-lint ml-typecheck ml-test ml-check ml-train
        ml-lint ml-typecheck ml-test ml-check ml-train ml-score mlflow-up detect-alerts recommendations \
        airflow-lint airflow-test airflow-check airflow-up airflow-down airflow-logs \
        tls-selfsigned tls-acme tls-renew stack-up stack-down stack-logs
 help: ## Liste les cibles disponibles
 	@grep -E '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "  \033[36m%-16s\033[0m %s\n", $$1, $$2}'
-install: install-backend install-frontend install-ml install-airflow ## Installe les dépendances backend, frontend, ML et Airflow
+install: install-backend install-frontend install-ml ## Installe les dépendances backend, frontend et ML
 install-backend: ## Installe les dépendances du backend
 	cd $(BACKEND) && uv sync --all-groups
@@ -55,22 +22,12 @@ install-frontend: ## Installe les dépendances du frontend
 install-ml: ## Installe les dépendances du pipeline ML
 	cd $(ML) && uv sync --all-groups
-install-airflow: ## Installe les dépendances de lint/test des DAGs Airflow
+dev: ## Lance toute la stack (backend + frontend) en rechargement à chaud
 	cd $(AIRFLOW) && uv sync --all-groups
 dev: services-up migrate demo-data ## Lance toute la stack : base, Mailpit, Airflow, puis backend et frontend
 	@echo "airflow  -> http://localhost:$(AIRFLOW_PORT)  mailpit -> http://localhost:$(MAILPIT_UI_PORT)"
 	@trap 'kill 0' EXIT INT TERM; \
 	$(MAKE) --no-print-directory dev-backend & \
 	$(MAKE) --no-print-directory dev-frontend & \
 	wait
 services-up: ## Démarre les services conteneurisés dont `make dev` dépend (base, Mailpit, Airflow)
 	docker compose up -d db mailpit
 	@$(MAKE) --no-print-directory db-wait
 	@$(MAKE) --no-print-directory db-ensure-airflow
 	docker compose up -d airflow-init airflow-apiserver airflow-scheduler airflow-dag-processor
 dev-backend: ## Lance l'API seule en rechargement à chaud
 	@echo "backend  -> http://localhost:8000 (docs sur /docs)"
 	cd $(BACKEND) && uv run uvicorn app.main:create_app --factory --reload --host 0.0.0.0 --port 8000
@@ -117,76 +74,9 @@ ml-check: ml-lint ml-typecheck ml-test ## Chaîne de vérification complète du
 ml-train: ## Entraine le modele LightGBM. CSV=chemin optionnel, sinon lit ML_DATABASE_URL
 	cd $(ML) && uv run python -m enervision_ml.train $(if $(CSV),--csv $(CSV),)
 ml-score: ## Score le prochain pas horaire et l'ecrit dans `prediction`. CSV= et NOW= optionnels
 	cd $(ML) && uv run python -m enervision_ml.score $(if $(CSV),--csv $(CSV),) $(if $(NOW),--now $(NOW),)
 mlflow-up: ## Démarre le serveur MLflow (tracking + registry) en conteneur. ml/.env requis
 	@test -n "$(strip $(ML_ENV_DB_PASSWORD))" \
 		|| { echo "MLFLOW_DB_PASSWORD absente de ml/.env (copier ml/.env.example)"; exit 1; }
 	@echo "$(ML_ENV_DB_PASSWORD)" | grep -qE '^[A-Za-z0-9]+$$' \
 		|| { echo "MLFLOW_DB_PASSWORD doit contenir uniquement lettres et chiffres (interpolee dans l'URI postgresql://)"; exit 1; }
 	cd $(ML) && docker compose -f docker-compose.mlflow.yml up -d --build
 	@echo "mlflow   -> http://localhost:5000"
 detect-alerts: ## Détecte les alertes internes depuis les lectures en base. SITE= et NOW= optionnels
 	cd $(BACKEND) && uv run python -m app.detection.internal_alerts $(if $(SITE),--site-id $(SITE),) $(if $(NOW),--now $(NOW),)
 recommendations: ## Genere les recommandations depuis les alertes en base. SITE=identifiant optionnel
 	cd $(BACKEND) && uv run python -m app.cli generate-recommendations $(if $(SITE),--site-id $(SITE),)
 airflow-lint: ## Analyse statique des DAGs Airflow
 	cd $(AIRFLOW) && uv run ruff check .
 airflow-test: ## Verifie que les DAGs s'importent sans erreur et ont la structure attendue
 	cd $(AIRFLOW) && uv run pytest
 airflow-check: airflow-lint airflow-test ## Chaîne de vérification complète des DAGs Airflow
 airflow-up: db-ensure-airflow ## Démarre Airflow (api-server + scheduler + dag-processor, LocalExecutor). db-up requis avant.
 	docker compose up -d airflow-init airflow-apiserver airflow-scheduler airflow-dag-processor
 	@echo "airflow  -> http://localhost:$${AIRFLOW_PORT:-8080}"
 airflow-down: ## Arrête l'api-server, le scheduler et le dag-processor Airflow
 	docker compose stop airflow-apiserver airflow-scheduler airflow-dag-processor
 airflow-logs: ## Suit les journaux du scheduler Airflow (où tournent les tâches, LocalExecutor)
 	docker compose logs -f airflow-scheduler
 docker-build: ## Construit l'image du backend
 	docker build -t enervision-backend:local $(BACKEND)
 tls-selfsigned: ## Génère le certificat de démonstration. PUBLIC_HOST=..., FORCE=1 pour écraser
 	./scripts/tls-selfsigned.sh $(if $(FORCE),--force,)
 # Piège : l'image backend ne migre pas au démarrage, et `/health/ready` ne teste que la connexion
 # et l'extension. Sans `alembic upgrade head`, la stack démarre verte sur une base sans schéma.
 stack-up: ## Démarre la stack derrière le reverse proxy, puis migre la base. PUBLIC_HOST=... au besoin
 	@test -f infra/proxy/tls/fullchain.pem \
 		|| { echo "Aucun certificat dans infra/proxy/tls. Lancer d'abord make tls-selfsigned"; exit 1; }
 	@openssl x509 -in infra/proxy/tls/fullchain.pem -noout -checkhost "$(PUBLIC_HOST)" >/dev/null \
 		|| { echo "Le certificat ne couvre pas $(PUBLIC_HOST). Relancer make tls-selfsigned PUBLIC_HOST=$(PUBLIC_HOST) FORCE=1"; exit 1; }
 	$(COMPOSE_PROD) up -d --build
 	$(COMPOSE_PROD) exec -T backend alembic upgrade head
 stack-down: ## Arrête la stack complète en conservant les données
 	$(COMPOSE_PROD) stop
 stack-logs: ## Suit les journaux du reverse proxy
 	$(COMPOSE_PROD) logs -f proxy
 tls-acme: ## Demande un certificat Let's Encrypt. PUBLIC_HOST public et ACME_EMAIL requis
 	@test "$(PUBLIC_HOST)" != enervision.local \
 		|| { echo "PUBLIC_HOST doit être un domaine public résolvable, pas le nom de démonstration"; exit 1; }
 	$(COMPOSE_PROD) --profile acme run --rm certbot certonly --webroot -w /var/www/certbot \
 		-d $(PUBLIC_HOST) \
 		--email $${ACME_EMAIL:?ACME_EMAIL=... requis} \
 		--agree-tos --no-eff-email --deploy-hook /deploy-hook.sh
 	$(COMPOSE_PROD) exec proxy nginx -s reload
 tls-renew: ## Renouvelle les certificats Let's Encrypt et recharge le proxy
 	$(COMPOSE_PROD) --profile acme run --rm certbot renew --deploy-hook /deploy-hook.sh
 	$(COMPOSE_PROD) exec proxy nginx -s reload
 db-up: ## Démarre la base PostgreSQL TimescaleDB
 	docker compose up -d db
@@ -202,36 +92,8 @@ db-logs: ## Suit les journaux de la base
 db-psql: ## Ouvre une session psql sur la base applicative
 	docker compose exec db psql -U $${POSTGRES_USER:-enervision} -d $${POSTGRES_DB:-enervision}
 db-wait: ## Attend que la base accepte les connexions
 	@for _ in $$(seq 1 60); do \
 		docker compose exec -T db pg_isready -U $(PG_USER) -d $(PG_DB) >/dev/null 2>&1 && exit 0; \
 		sleep 1; \
 	done; \
 	echo "La base n'accepte toujours pas de connexion apres 60s"; exit 1
 # Piege : db/init ne rejoue qu'a la premiere initialisation du volume. Un `pgdata` cree avant
 # db/init/120-airflow-database.sql n'a pas de base `airflow`, et airflow-init boucle dessus.
 db-ensure-airflow: ## Crée la base de métadonnées Airflow si le volume pgdata est antérieur à db/init/120
 	@docker compose exec -T db psql -U $(PG_USER) -d postgres -tAc \
 		"SELECT 1 FROM pg_database WHERE datname = 'airflow'" | grep -q 1 \
 		|| docker compose exec -T db psql -U $(PG_USER) -d postgres -c "CREATE DATABASE airflow"
 migrate: ## Applique les migrations Alembic
 	cd $(BACKEND) && uv run alembic upgrade head
 bootstrap-admin: ## Crée le premier administrateur, mot de passe saisi au clavier
 	cd $(BACKEND) && uv run python -m app.cli create-admin --email $${EMAIL:?EMAIL=... requis}
 demo-data: ## Renseigne prédictions, alertes et recommandations si elles manquent. NOW= optionnel
 	@nombre=$$(docker compose exec -T db psql -U $(PG_USER) -d $(PG_DB) -tAc 'SELECT count(*) FROM alert') \
 		|| { echo "demo-data : base injoignable ou migrations non appliquees"; exit 1; }; \
 	if [ "$$nombre" = 0 ]; then \
 		$(MAKE) --no-print-directory demo-data-force; \
 	else \
 		echo "demo-data : $$nombre alerte(s) deja en base (make demo-data-force pour rejouer)"; \
 	fi
 demo-data-force: ## Rejoue le peuplement sans regarder l'existant. Les trois etapes sont idempotentes
 	$(MAKE) --no-print-directory ml-score NOW=$(DEMO_NOW)
 	$(MAKE) --no-print-directory detect-alerts NOW=$(DEMO_NOW)
 	$(MAKE) --no-print-directory recommendations
@@ -9,10 +9,8 @@ series temporelles energetiques, deployee sur une machine on-premise.
 |-------|----------------------------------------------------------|
 | J1    | Valider la préparation de l'environnement et du repo     |
 | J2    | Valider le périmètre retenu et les choix technologiques  |
-| J3    | Ingestion & backend                                      |
+| J3    | Valider l'architecture et la gestion de la sécurité      |
-| J4    | Architecture, sécurité & frontend                        |
+| J4    | Valider la robustesse et assurer les livrables           |
 | J5    | Valider la robustesse et assurer les livrables           |
 | J6    | Amélioration possible                                    |
 Ce que la documentation apporte à chacun : [docs/architecture/00-vue-ensemble.md](docs/architecture/00-vue-ensemble.md).
@@ -20,15 +18,14 @@ Ce que la documentation apporte à chacun : [docs/architecture/00-vue-ensemble.m
 | Domaine    | Technologie                         | Emplacement         | Etat          |
 |------------|-------------------------------------|---------------------|---------------|
-| Backend    | FastAPI, Python 3.14                | `apps/backend`      | En place    |
+| Backend    | FastAPI, Python 3.14                | `apps/backend`      | Initialise    |
-| Frontend   | Angular 22, Node 26                 | `apps/frontend`     | En place |
+| Frontend   | Angular 22, Node 24 LTS             | `apps/frontend`     | Tableau de bord |
-| Base       | PostgreSQL 17 + TimescaleDB         | `db`                | En place    |
+| Base       | PostgreSQL 17 + TimescaleDB         | `db`                | Initialise    |
-| ETL        | Apache Airflow                      | `etl/airflow`       | Cinq DAGs     |
+| ETL        | Apache Airflow                      | `etl/airflow`       | A initialiser |
 | Infra      | Terraform (k3s single-node)         | `infra/terraform`   | Initialise    |
-| Reverse proxy | Nginx, TLS                       | `infra/proxy`       | En place      |
+| CI/CD      | GitHub Actions                      | `.github/workflows` | Backend en place |
 | CI/CD      | GitHub Actions                      | `.github/workflows` | En place |
 | Monitoring | Prometheus, Grafana, Alertmanager   | `monitoring`        | A initialiser |
-| ML         | LightGBM, MLflow                    | `ml`                | En place |
+| ML         | LightGBM, MLflow                    | `ml`                | Entrainement initialise |
 Le backend, la base et l'infrastructure (Terraform/k3s) sont initialises a ce stade. Le frontend
 sert un tableau de bord sur `/dashboard`, dont les données proviennent de fixtures : les endpoints
@@ -50,15 +47,13 @@ L'etat detaille de chaque brique et les vues d'architecture sont dans
 │   ├── migrations/     Migrations SQL versionnees
 │   └── seeds/          Jeux de donnees de reference
 ├── etl/airflow/
-│   ├── dags/           DAGs d'orchestration (pipeline ML, alertes, imports historique et API Mock)
+│   ├── dags/           DAGs d'ingestion et d'agregation
 │   ├── plugins/        Operateurs et hooks maison
 │   ├── include/        Requetes SQL et ressources des DAGs
 │   └── tests/          Tests d'integrite des DAGs
-├── infra/
+├── infra/terraform/
-│   ├── proxy/          Reverse proxy Nginx : terminaison TLS et routage
+│   ├── modules/        Modules reutilisables
-│   └── terraform/
+│   └── environments/   Racines Terraform, une par environnement
 │       ├── modules/        Modules reutilisables
 │       └── environments/   Racines Terraform, une par environnement
 ├── ml/                 Pipeline d'entrainement LightGBM, suivi MLflow
 ├── monitoring/
 │   ├── prometheus/     Collecte et regles d'alerte
@@ -77,53 +72,25 @@ Prerequis : uv, Docker, Node 24 LTS (npm fourni). Le poste doit disposer de Pyth
 cp .env.example .env                               # variables de docker-compose
 cp apps/backend/.env.example apps/backend/.env     # variables du backend hors conteneur
-make install   # dependances du backend, du frontend, du ML et des DAGs
+make db-up     # PostgreSQL + TimescaleDB, publie sur le port 5433
-make dev       # toute la stack, voir ci-dessous
+make install   # dependances du backend et du frontend
 make migrate   # applique les migrations Alembic
 make dev       # backend sur http://localhost:8000 (docs sur /docs), frontend sur http://localhost:4200
 make check     # lint + typage + tests
 ```
 `make dev` enchaine tout : demarrage des services conteneurises (base sur le port 5433, Mailpit,
 Airflow), migrations Alembic, peuplement de demonstration si les alertes manquent, puis backend
 et frontend en rechargement a chaud sur le poste.
 | Service | Adresse |
 |---|---|
 | Backend | <http://localhost:8000> (documentation sur `/docs`) |
 | Frontend | <http://localhost:4200> |
 | Airflow | <http://localhost:8080> (`AIRFLOW_ADMIN_USERNAME` / `AIRFLOW_ADMIN_PASSWORD` du `.env`) |
 | Mailpit | <http://localhost:8025> |
 Le `.env` doit porter les cles Airflow avant le premier `make dev` : `AIRFLOW_FERNET_KEY`,
 `AIRFLOW_API_SECRET_KEY`, `AIRFLOW_JWT_SECRET`, `AIRFLOW_APP_SECRET_KEY` et
 `AIRFLOW_ADMIN_PASSWORD`. Sans elles `airflow-init` refuse de demarrer, et `airflow-apiserver`,
 `airflow-scheduler` et `airflow-dag-processor` avec lui.
 Les cibles d'origine restent disponibles pour ne demarrer qu'une partie : `make db-up`,
 `make airflow-up`, `make dev-backend`, `make dev-frontend`.
 `make help` liste les cibles disponibles.
 Deux fichiers d'environnement, deux usages : `.env` a la racine alimente `docker-compose.yml`,
 `apps/backend/.env` alimente le backend lance sur le poste. Le port 5433 est publie plutot que
 5432, souvent deja pris par une autre base.
-Le backend et le frontend tournent sur le poste, lances ensemble par `make dev` (logs
+La boucle de developpement est `make db-up` puis `make dev` : seule la base tourne en
-entrelaces dans le meme terminal, Ctrl+C arrete les deux) ; la base, Mailpit et Airflow tournent
+conteneur, le backend et le frontend tournent tous les deux sur le poste, lances ensemble par
-en conteneur. Le service `backend` du `docker-compose.yml` sert la stack complete et la recette,
+`make dev` (logs entrelaces dans le meme terminal, Ctrl+C arrete les deux). `make dev-backend`
-et n'embarque pas le source, donc toute modification y demande un
+et `make dev-frontend` restent disponibles pour lancer un seul des deux. Le service `backend`
-`docker compose up -d --build backend`.
+du `docker-compose.yml` sert la stack complete et la recette, et n'embarque pas le source, donc
-
+toute modification y demande un `docker compose up -d --build backend`.
 ### Donnees de demonstration
 Le jeu historique s'arrete au 31/12/2024. `make demo-data` renseigne les tables que les vues
 alertes, recommandations et previsions lisent, en ancrant le scoring et la detection a cette
 date (`DEMO_NOW`) plutot qu'a l'horloge reelle, qui ne verrait qu'un parc muet depuis des mois.
 La cible ne fait rien si des alertes existent deja ; `make demo-data-force` rejoue les trois
 etapes, toutes idempotentes en base.
 Un volume `pgdata` cree avant `db/init/120-airflow-database.sql` n'a pas de base `airflow` :
 `db/init` ne rejoue qu'a la premiere initialisation. `make db-ensure-airflow`, appelee par
 `make dev` et `make airflow-up`, la cree au besoin, sans detruire les donnees applicatives.
 Verifier que la base repond et que l'extension est chargee :
@@ -131,27 +98,6 @@ Verifier que la base repond et que l'extension est chargee :
 curl -s localhost:8000/api/v1/health/ready
 ```
 ## Stack complète derrière le reverse proxy
 Pour servir l'application comme sur la machine cible, en HTTPS et sous une seule origine.
 L'overlay emploie `!override` et `!reset`, donc **Docker Compose 2.24.4 ou plus récent** :
 ```bash
 make tls-selfsigned PUBLIC_HOST=enervision.local   # certificat de démonstration
 make stack-up PUBLIC_HOST=enervision.local         # nginx en 80/443, rien d'autre n'est publié
 ```
 Le navigateur avertit d'un émetteur inconnu : Let's Encrypt reste hors d'atteinte tant qu'aucun
 nom de domaine public ne résout vers la machine. Routage, mode ACME et renouvellement dans
 [`infra/proxy/README.md`](infra/proxy/README.md) ; la décision et ses motifs dans
 [l'ADR 0007](docs/adr/0007-terminaison-tls-et-reverse-proxy-nginx.md).
 Sur la VM ENI, deux environnements cohabitent, recette sur `dev` et production sur `main`,
 chacun dans son dossier et son projet Compose : `scripts/provision-host.sh` les prépare, le
 workflow `deploy.yml` les redéploie à chaque push par un runner auto-hébergé. Ports, noms
 d'hôte et garde-fous dans [`docs/architecture/10-infra.md`](docs/architecture/10-infra.md) et
 [l'ADR 0009](docs/adr/0009-deux-environnements-compose-sur-la-vm-eni.md).
 ## Conventions
 - Branches : `feat/`, `fix/`, `chore/`, `docs/`, `test/` suivi d'un libelle court.
@@ -18,7 +18,3 @@ APP_SMTP_HOST=localhost
 APP_SMTP_PORT=1025
 APP_SMTP_USE_TLS=false
 APP_SMTP_FROM_ADDRESS=no-reply@enervision.fr
 APP_MOCK_API_BASE_URL=https://api-mock.charlieandre.fr
 APP_MOCK_API_USERNAME=change_me
 APP_MOCK_API_PASSWORD=change_me
 APP_MOCK_API_TIMEOUT_SECONDS=10
@@ -11,14 +11,13 @@ WORKDIR /app
 RUN --mount=type=cache,target=/root/.cache/uv \
    --mount=type=bind,source=uv.lock,target=uv.lock \
    --mount=type=bind,source=pyproject.toml,target=pyproject.toml \
-    uv sync --locked --no-install-project --no-dev --no-build
+    uv sync --locked --no-install-project --no-dev
 # Le projet lui-meme n'est pas installe (pas de second `uv sync`) : il tourne depuis /app, le
 # repertoire de travail, et rien ne lit ses metadonnees. L'installer imposerait de le construire
 # (backend hatchling), donc de retirer `--no-build` de l'etape ci-dessus, qui garantit que
 # l'installation des dependances n'execute aucun script de build (regle Sonar docker:S8541).
 COPY . /app
 RUN --mount=type=cache,target=/root/.cache/uv \
    uv sync --locked --no-dev
 FROM python:3.14-slim AS runtime
@@ -113,7 +113,6 @@ Le sens de dependance est unique : `endpoints` vers `services` vers `repositorie
 | `/api/v1/sites/{site_id}` | Décrit un site | `lecteur` |
 | `/api/v1/recommendations` | Liste les recommandations | `lecteur` |
 | `/api/v1/recommendations/{recommendation_id}` | Décrit une recommandation | `lecteur` |
 | `/api/v1/recommendations/generate` | Génère les recommandations depuis les alertes (POST) | `admin` |
 | `/metrics` | Métriques au format Prometheus | jeton si `APP_METRICS_TOKEN` |
 | `/docs`, `/openapi.json` | Documentation, fermée en `staging` et `prod` | public sinon |
@@ -27,7 +27,6 @@ from app.repositories.audit_log import AuditLogRepository
 from app.repositories.login_attempt import LoginAttemptRepository
 from app.repositories.password_reset_attempt import PasswordResetAttemptRepository
 from app.repositories.password_reset_token import PasswordResetTokenRepository
 from app.repositories.prediction import PredictionRepository
 from app.repositories.reading import ReadingRepository
 from app.repositories.recommendation import RecommendationRepository
 from app.repositories.refresh_token import RefreshTokenRepository
@@ -35,7 +34,6 @@ from app.repositories.site import SiteRepository
 from app.repositories.user import UserRepository
 from app.services.alert import AlertService
 from app.services.auth import AuthService, LoginPolicy, PasswordResetPolicy
 from app.services.prediction import PredictionService
 from app.services.reading import ReadingService
 from app.services.recommendation import RecommendationService
 from app.services.sensor import SensorService
@@ -48,9 +46,7 @@ SettingsDep = Annotated[Settings, Depends(get_settings)]
 CODE_CHANGEMENT_REQUIS = "password_change_required"
-# Nom ASCII : un outillage tiers (ZAP, cf. .github/workflows/dast.yml) peut mal analyser un nom
+_porteur = HTTPBearer(auto_error=False, scheme_name="Jeton d'accès")
 # de schéma accentué dans le contrat OpenAPI. Piège vécu, pas anticipé.
 _porteur = HTTPBearer(auto_error=False, scheme_name="JetonAcces")
 CredentialsDep = Annotated[HTTPAuthorizationCredentials | None, Depends(_porteur)]
@@ -182,23 +178,14 @@ SiteServiceDep = Annotated[SiteService, Depends(get_site_service)]
 def get_alert_service(session: SessionDep) -> AlertService:
-    return AlertService(
+    return AlertService(alerts=AlertRepository(session))
        alerts=AlertRepository(session),
        readings=ReadingRepository(session),
        predictions=PredictionRepository(session),
        sites=SiteRepository(session),
    )
 AlertServiceDep = Annotated[AlertService, Depends(get_alert_service)]
 def get_recommendation_service(session: SessionDep) -> RecommendationService:
-    return RecommendationService(
+    return RecommendationService(recommendations=RecommendationRepository(session))
        recommendations=RecommendationRepository(session),
        alerts=AlertRepository(session),
        transaction=session,
    )
 RecommendationServiceDep = Annotated[RecommendationService, Depends(get_recommendation_service)]
@@ -225,15 +212,6 @@ def get_sensor_service(session: SessionDep) -> SensorService:
 SensorServiceDep = Annotated[SensorService, Depends(get_sensor_service)]
 def get_prediction_service(session: SessionDep) -> PredictionService:
    return PredictionService(
        sites=SiteRepository(session), predictions=PredictionRepository(session)
    )
 PredictionServiceDep = Annotated[PredictionService, Depends(get_prediction_service)]
 async def get_current_principal(
    credentials: CredentialsDep,
    session: SessionDep,
@@ -63,7 +63,7 @@ TAGS: Final[list[dict[str, Any]]] = [
        "name": "recommendations",
        "description": (
            "Consultation des recommandations issues des alertes. Accessible à partir du rôle "
-            "`lecteur`. Leur génération par le moteur de règles est réservée au rôle `admin`."
+            "`lecteur`."
        ),
    },
    {
@@ -83,20 +83,11 @@ TAGS: Final[list[dict[str, Any]]] = [
        "name": "sensors",
        "description": "État de santé des capteurs par site. Réservé au rôle `admin`.",
    },
    {
        "name": "predictions",
        "description": (
            "Dernière prévision de consommation par site, calculée hors ligne par le pipeline "
            "de scoring (`ml/`) et simplement lue ici. Accessible à partir du rôle `lecteur`."
        ),
    },
 ]
 cookie_de_rafraichissement = APIKeyCookie(
    name=REFRESH_COOKIE_DEFAUT,
-    # Nom ASCII : un outillage tiers (ZAP, cf. .github/workflows/dast.yml) peut mal analyser un
+    scheme_name="Cookie de rafraîchissement",
    # nom de schéma accentué dans le contrat OpenAPI. Piège vécu, pas anticipé.
    scheme_name="CookieRafraichissement",
    description=(
        "Cookie `HttpOnly` posé par `/auth/login` et tourné par `/auth/refresh`. Il prend le "
        "préfixe `__Secure-` dès que l'API tourne derrière TLS, et n'est émis que vers "
@@ -1,18 +0,0 @@
 from fastapi import APIRouter
 from app.api.deps import LecteurDep, PredictionServiceDep
 from app.schemas.prediction import PredictionSummaryResponse
 router = APIRouter()
@router.get(
    "",
    response_model=PredictionSummaryResponse,
    summary="Dernière prédiction de consommation par site",
 )
 async def get_predictions(
    _: LecteurDep, service: PredictionServiceDep
 ) -> PredictionSummaryResponse:
    resume = await service.summary()
    return PredictionSummaryResponse.model_validate(resume)
@@ -1,18 +1,13 @@
 from fastapi import APIRouter, HTTPException, status
-from app.api.deps import AdminDep, LecteurDep, RecommendationServiceDep
+from app.api.deps import LecteurDep, RecommendationServiceDep
-from app.api.openapi import REPONSE_VALIDATION, REPONSES_ADMIN, Reponses
+from app.api.openapi import REPONSE_VALIDATION, Reponses
 from app.schemas.errors import ErrorResponse
-from app.schemas.recommendation import (
+from app.schemas.recommendation import RecommendationResponse
    RecommendationGenerationResponse,
    RecommendationResponse,
 )
 from app.services.recommendation import RecommendationNotFoundError
 router = APIRouter()
 REPONSES_GENERATION: Reponses = {**REPONSES_ADMIN, **REPONSE_VALIDATION}
 REPONSES_INTROUVABLE: Reponses = {
    **REPONSE_VALIDATION,
    404: {"model": ErrorResponse, "description": "Aucune recommandation ne porte cet identifiant."},
@@ -43,22 +38,3 @@ async def get_recommendation(
            status_code=status.HTTP_404_NOT_FOUND, detail="Recommandation introuvable"
        ) from erreur
    return RecommendationResponse.model_validate(recommendation)
@router.post(
    "/generate",
    response_model=RecommendationGenerationResponse,
    summary="Génère les recommandations à partir des alertes",
    responses=REPONSES_GENERATION,
 )
 async def generate_recommendations(
    _: AdminDep,
    service: RecommendationServiceDep,
    site_id: str | None = None,
 ) -> RecommendationGenerationResponse:
    rapport = await service.generate(site_id=site_id)
    return RecommendationGenerationResponse(
        alerts_examined=rapport.alertes_examinees,
        recommendations_created=rapport.recommandations_creees,
        already_present=rapport.deja_presentes,
    )
@@ -5,7 +5,6 @@ from app.api.v1.endpoints import (
    alerts,
    auth,
    health,
    predictions,
    readings,
    recommendations,
    sensors,
@@ -35,6 +34,3 @@ api_router.include_router(
 api_router.include_router(
    sensors.router, prefix="/sensors", tags=["sensors"], responses=REPONSES_ADMIN
 )
 api_router.include_router(
    predictions.router, prefix="/predictions", tags=["predictions"], responses=REPONSES_LECTEUR
 )
@@ -22,11 +22,8 @@ from app.core.hashing import build_hasher
 from app.core.roles import Role
 from app.db.session import get_session_factory
 from app.main import create_app
 from app.repositories.alert import AlertRepository
 from app.repositories.recommendation import RecommendationRepository
 from app.repositories.user import UserRepository
 from app.schemas.auth import PASSWORD_MIN_LENGTH, SPECIAL_CHARACTERS, valide_complexite
 from app.services.recommendation import RecommendationService
 LONGUEUR_MOT_DE_PASSE_GENERE = 24
 CHEMIN_CONTRAT = Path(__file__).resolve().parent.parent / "openapi.json"
@@ -66,22 +63,6 @@ async def create_admin(
    )
 async def generate_recommendations(*, site_id: str | None) -> str:
    async with get_session_factory()() as session:
        service = RecommendationService(
            recommendations=RecommendationRepository(session),
            alerts=AlertRepository(session),
            transaction=session,
        )
        rapport = await service.generate(site_id=site_id)
    return (
        f"{rapport.alertes_examinees} alerte(s) examinée(s), "
        f"{rapport.recommandations_creees} recommandation(s) créée(s), "
        f"{rapport.deja_presentes} déjà présente(s)"
    )
 # Piège : le schéma ne doit dépendre ni du `.env` du poste ni des variables `APP_*`, sinon le
 # fichier versionné changerait de machine en machine et le test de dérive deviendrait un oracle
 # de configuration locale. Tout ce qui atteint le schéma est donc posé ici, `_env_file` compris.
@@ -128,14 +109,6 @@ def build_parser() -> argparse.ArgumentParser:
        "export-openapi", help="Écrit le contrat OpenAPI sur disque"
    )
    contrat.add_argument("--output", default=str(CHEMIN_CONTRAT))
    recommandations = sous_commandes.add_parser(
        "generate-recommendations",
        help="Applique le moteur de règles aux alertes en base",
    )
    recommandations.add_argument(
        "--site-id", default=None, help="Limite le traitement aux alertes d'un site"
    )
    return parser
@@ -179,10 +152,6 @@ def main(argv: list[str] | None = None) -> int:
        print(export_openapi(Path(arguments.output)))
        return 0
    if arguments.commande == "generate-recommendations":
        print(asyncio.run(generate_recommendations(site_id=arguments.site_id)))
        return 0
    mot_de_passe = read_password(generate=arguments.generate)
    succes, message = asyncio.run(
@@ -34,11 +34,6 @@ class Settings(BaseSettings):
    database_pool_size: int = 5
    database_max_overflow: int = 10
    mock_api_base_url: str = "https://api-mock.charlieandre.fr"
    mock_api_username: str | None = None
    mock_api_password: SecretStr | None = None
    mock_api_timeout_seconds: float = Field(default=10.0, gt=0)
    jwt_issuer: str = "enervision-api"
    jwt_audience: str = "enervision-web"
    access_token_ttl_seconds: int = Field(default=900, ge=60, le=3600)
@@ -1,68 +0,0 @@
 # Détection d'alertes internes EnerVision (issue #104) : script lancé à la main pour l'instant,
 # comme `enervision_ml.score` côté ML, sans automatisation Airflow pour l'ordonnancer.
 from __future__ import annotations
 import argparse
 import asyncio
 import sys
 from datetime import UTC, datetime
 from app.core.config import get_settings
 from app.db.session import get_session_factory
 from app.repositories.alert import AlertRepository
 from app.repositories.prediction import PredictionRepository
 from app.repositories.reading import ReadingRepository
 from app.repositories.site import SiteRepository
 from app.services.alert import AlertService
 async def run_detection(*, now: datetime | None = None, site_id: str | None = None) -> int:
    """Exécute les cinq règles de détection et enregistre les nouvelles alertes. Rend le nombre de
    lignes effectivement insérées (les doublons de `source_alert_id` sont silencieusement
    ignorés)."""
    async with get_session_factory()() as session:
        service = AlertService(
            alerts=AlertRepository(session),
            readings=ReadingRepository(session),
            predictions=PredictionRepository(session),
            sites=SiteRepository(session),
        )
        nouvelles = await service.detect(now=now, site_id=site_id)
        await session.commit()
    return len(nouvelles)
 def _parse_instant(valeur: str) -> datetime:
    instant = datetime.fromisoformat(valeur)
    return instant if instant.tzinfo is not None else instant.replace(tzinfo=UTC)
 def parse_args(argv: list[str] | None = None) -> argparse.Namespace:
    parser = argparse.ArgumentParser(
        prog="python -m app.detection.internal_alerts",
        description="Détection d'alertes internes EnerVision",
    )
    parser.add_argument("--site-id", default=None, help="Limite la détection à un seul site.")
    parser.add_argument(
        "--now",
        type=_parse_instant,
        default=None,
        help=(
            "Instant de référence (ISO 8601, UTC si le fuseau est omis). Défaut : l'heure courante."
        ),
    )
    return parser.parse_args(argv)
 def main(argv: list[str] | None = None) -> int:
    args = parse_args(argv)
    # Échoue tôt si `APP_SECRET_KEY`/`DATABASE_URL` manquent, avant toute requête à la base.
    get_settings()
    nombre = asyncio.run(run_detection(now=args.now, site_id=args.site_id))
    print(f"{nombre} nouvelle(s) alerte(s) enregistrée(s).")
    return 0
 if __name__ == "__main__":  # pragma: no cover
    sys.exit(main())
@@ -1,420 +0,0 @@
 # Contrainte : la réponse de l'API Mock est une entrée hostile, pas une source de confiance.
 # Voir OWASP API10 dans docs/architecture/owasp-traceabilite.md. Rien de ce qu'elle renvoie
 # n'atteint la base sans passer par build_site_row() ou build_reading_row() : seuls les champs
 # attendus sont recopiés, les grandeurs physiques sont bornées par PHYSICAL_BOUNDS et la taille
 # des tableaux est plafonnée par MAX_SITES et par --limit. Une valeur hors bornes devient NULL
 # et laisse sa trace dans null_reasons plutôt que de lever : le mock émet des anomalies par
 # construction, et raw_data conserve de toute façon la réponse d'origine intacte.
 from __future__ import annotations
 import argparse
 import asyncio
 import json
 from datetime import datetime
 from typing import Any
 import httpx
 from sqlalchemy import text
 from sqlalchemy.ext.asyncio import AsyncConnection, create_async_engine
 from app.core.config import get_settings
 SOURCE_HISTORY = "api_history"
 MAX_SITES = 100
 MAX_LIMIT = 1000
 # Les quatre seules valeurs que la contrainte ck_reading_quality accepte.
 ACCEPTED_QUALITIES = frozenset({"good", "partial", "degraded", "critical"})
 PHYSICAL_BOUNDS: dict[str, tuple[float, float]] = {
    "consumption_kw": (0.0, 100_000.0),
    "consumption_kwh": (0.0, 100_000.0),
    "voltage_v": (0.0, 1_000.0),
    "current_a": (0.0, 10_000.0),
    "power_factor": (0.0, 1.0),
    "temperature_celsius": (-90.0, 60.0),
    "humidity_percent": (0.0, 100.0),
 }
 CAPACITY_BOUNDS = (0.0, 100_000.0)
 def create_mock_api_client() -> httpx.AsyncClient:
    settings = get_settings()
    username = settings.mock_api_username
    password = (
        settings.mock_api_password.get_secret_value()
        if settings.mock_api_password is not None
        else None
    )
    if not username or not username.strip() or not password or not password.strip():
        raise ValueError("Les identifiants de l'API Mock ne sont pas configurés.")
    return httpx.AsyncClient(
        base_url=settings.mock_api_base_url.rstrip("/"),
        auth=(username, password),
        timeout=settings.mock_api_timeout_seconds,
    )
 def read_text(payload: dict[str, Any], key: str) -> str:
    value = payload.get(key)
    if not isinstance(value, str) or not value:
        raise ValueError(f"Champ {key} absent ou invalide dans la réponse de l'API Mock.")
    return value
 def optional_text(value: Any) -> str | None:
    return value if isinstance(value, str) else None
 def coerce_measure(
    value: Any,
    bounds: tuple[float, float],
 ) -> float | None:
    if isinstance(value, bool) or not isinstance(value, int | float):
        return None
    lower, upper = bounds
    # Écarte aussi NaN et les infinis, qu'aucune comparaison de bornes ne retient.
    return float(value) if lower <= value <= upper else None
 def resolve_quality(
    value: Any,
    rejected: list[str],
 ) -> str | None:
    quality = value if isinstance(value, str) and value in ACCEPTED_QUALITIES else None
    if rejected:
        return "critical" if quality == "critical" else "degraded"
    return quality
 def resolve_null_reasons(
    value: Any,
    rejected: list[str],
 ) -> list[str]:
    reported = [str(reason) for reason in value] if isinstance(value, list) else []
    return reported + rejected
 async def fetch_sites(
    client: httpx.AsyncClient,
 ) -> list[dict[str, Any]]:
    response = await client.get("/api/v1/sites")
    response.raise_for_status()
    payload = response.json()
    if not isinstance(payload, list):
        raise ValueError("La réponse /api/v1/sites doit être une liste.")
    if len(payload) > MAX_SITES:
        raise ValueError(f"La réponse /api/v1/sites dépasse le plafond de {MAX_SITES} sites.")
    return payload
 def build_site_row(
    site: dict[str, Any],
 ) -> dict[str, Any]:
    return {
        "site_id": read_text(site, "site_id"),
        "site_type": read_text(site, "site_type"),
        "site_name": read_text(site, "site_name"),
        "location": optional_text(site.get("location")),
        "capacity_kw": coerce_measure(site.get("capacity_kw"), CAPACITY_BOUNDS),
        "status": optional_text(site.get("status")),
    }
 async def upsert_sites(
    connection: AsyncConnection,
    sites: list[dict[str, Any]],
 ) -> None:
    rows = [build_site_row(site) for site in sites]
    if not rows:
        return
    await connection.execute(
        text(
            """
            INSERT INTO site (
                site_id,
                site_type,
                site_name,
                location,
                capacity_kw,
                status
            )
            VALUES (
                :site_id,
                :site_type,
                :site_name,
                :location,
                :capacity_kw,
                :status
            )
            ON CONFLICT (site_id)
            DO UPDATE SET
                site_type = EXCLUDED.site_type,
                site_name = EXCLUDED.site_name,
                location = EXCLUDED.location,
                capacity_kw = EXCLUDED.capacity_kw,
                status = EXCLUDED.status
            """
        ),
        rows,
    )
 async def fetch_readings(
    client: httpx.AsyncClient,
    site_id: str,
    start_time: datetime,
    end_time: datetime,
    limit: int = MAX_LIMIT,
 ) -> list[dict[str, Any]]:
    response = await client.get(
        "/api/v1/readings",
        params={
            "site_id": site_id,
            "start_time": start_time.isoformat(),
            "end_time": end_time.isoformat(),
            "limit": limit,
        },
    )
    response.raise_for_status()
    payload = response.json()
    if not isinstance(payload, list):
        raise ValueError("La réponse /api/v1/readings doit être une liste.")
    if len(payload) > limit:
        raise ValueError(f"La réponse /api/v1/readings dépasse la limite demandée de {limit}.")
    return payload
 def build_reading_row(
    reading: dict[str, Any],
 ) -> dict[str, Any]:
    measures: dict[str, float | None] = {}
    rejected: list[str] = []
    for name, bounds in PHYSICAL_BOUNDS.items():
        received = reading.get(name)
        measures[name] = coerce_measure(received, bounds)
        if received is not None and measures[name] is None:
            rejected.append(f"out_of_physical_bounds:{name}")
    return {
        "site_id": read_text(reading, "site_id"),
        "timestamp": parse_datetime(read_text(reading, "timestamp")),
        "source": SOURCE_HISTORY,
        "dataset_id": None,
        **measures,
        "consumption_euros": None,
        "solar_irradiance_wm2": None,
        "is_working_hours": None,
        "data_quality": resolve_quality(reading.get("data_quality"), rejected),
        "null_reasons": resolve_null_reasons(reading.get("null_reasons"), rejected),
        "imputed_values": None,
        "imputation_method": None,
        "raw_data": json.dumps(
            reading,
            ensure_ascii=False,
        ),
    }
 # Le conflit vise l'index unique uq_reading_source plutôt que la table entière : sans cible
 # nommée, DO NOTHING avalerait aussi une violation de clé primaire.
 READING_INSERT = text(
    """
    INSERT INTO reading (
        site_id,
        timestamp,
        source,
        dataset_id,
        consumption_kw,
        consumption_kwh,
        consumption_euros,
        voltage_v,
        current_a,
        power_factor,
        temperature_celsius,
        humidity_percent,
        solar_irradiance_wm2,
        is_working_hours,
        data_quality,
        null_reasons,
        imputed_values,
        imputation_method,
        raw_data
    )
    VALUES (
        :site_id,
        :timestamp,
        :source,
        :dataset_id,
        :consumption_kw,
        :consumption_kwh,
        :consumption_euros,
        :voltage_v,
        :current_a,
        :power_factor,
        :temperature_celsius,
        :humidity_percent,
        :solar_irradiance_wm2,
        :is_working_hours,
        :data_quality,
        :null_reasons,
        CAST(:imputed_values AS jsonb),
        :imputation_method,
        CAST(:raw_data AS jsonb)
    )
    ON CONFLICT (site_id, timestamp, source, (coalesce(dataset_id, 0)))
    DO NOTHING
    """
 )
 def build_reading_batch(
    readings: list[dict[str, Any]],
 ) -> list[dict[str, Any]]:
    return [build_reading_row(reading) for reading in readings]
 async def import_mock_api_history(
    start_time: datetime,
    end_time: datetime,
    limit: int,
    dry_run: bool,
 ) -> None:
    settings = get_settings()
    async with create_mock_api_client() as client:
        sites = await fetch_sites(client)
        print(f"Sites récupérés : {len(sites)}")
        all_readings: list[dict[str, Any]] = []
        for site in sites:
            site_id = read_text(site, "site_id")
            readings = await fetch_readings(
                client=client,
                site_id=site_id,
                start_time=start_time,
                end_time=end_time,
                limit=limit,
            )
            print(f"{site_id}: {len(readings)} lectures")
            all_readings.extend(readings)
    print(f"Lectures récupérées : {len(all_readings)}")
    if dry_run:
        print("Dry-run terminé : aucune donnée écrite.")
        return
    engine = create_async_engine(
        str(settings.database_url),
        pool_pre_ping=True,
    )
    try:
        async with engine.begin() as connection:
            await upsert_sites(
                connection,
                sites,
            )
            rows = build_reading_batch(all_readings)
            if rows:
                await connection.execute(
                    READING_INSERT,
                    rows,
                )
    finally:
        await engine.dispose()
    print("Import API Mock terminé.")
 def parse_datetime(value: str) -> datetime:
    return datetime.fromisoformat(value.replace("Z", "+00:00"))
 def parse_args() -> argparse.Namespace:
    parser = argparse.ArgumentParser(description=("Import historique depuis l'API Mock EnerVision"))
    parser.add_argument(
        "--start-time",
        required=True,
        type=parse_datetime,
    )
    parser.add_argument(
        "--end-time",
        required=True,
        type=parse_datetime,
    )
    parser.add_argument(
        "--limit",
        type=int,
        default=MAX_LIMIT,
    )
    parser.add_argument(
        "--dry-run",
        action="store_true",
    )
    return parser.parse_args()
 def main() -> None:
    args = parse_args()
    if args.limit < 1 or args.limit > MAX_LIMIT:
        raise ValueError(f"--limit doit être compris entre 1 et {MAX_LIMIT}.")
    if args.start_time >= args.end_time:
        raise ValueError("--start-time doit être antérieur à --end-time.")
    asyncio.run(
        import_mock_api_history(
            start_time=args.start_time,
            end_time=args.end_time,
            limit=args.limit,
            dry_run=args.dry_run,
        )
    )
 if __name__ == "__main__":
    main()
@@ -1,15 +1,10 @@
 from collections.abc import Sequence
 from sqlalchemy import select
 from sqlalchemy.dialects.postgresql import insert
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Alert
 # Douze colonnes par alerte, contre quatre pour une recommandation : le plafond asyncpg de
 # 32 767 parametres tombe a 2 730 lignes, d'ou un lot plus petit que `recommendation.py`.
 TAILLE_DE_LOT = 1000
 class AlertRepository:
    def __init__(self, session: AsyncSession) -> None:
@@ -24,41 +19,3 @@ class AlertRepository:
        if severity is not None:
            requete = requete.where(Alert.severity == severity)
        return (await self._session.scalars(requete)).all()
    async def create_many(self, alerts: Sequence[Alert]) -> Sequence[Alert]:
        # `ON CONFLICT DO NOTHING` sur `uq_alert_source_reference` : rejouer la détection sur une
        # fenêtre qui recouvre une exécution précédente ne doit pas dupliquer une alerte déjà
        # enregistrée. `RETURNING` ne renvoie donc que les lignes effectivement insérées.
        if not alerts:
            return []
        valeurs = [
            {
                "source_alert_id": alerte.source_alert_id,
                "site_id": alerte.site_id,
                "source": alerte.source,
                "timestamp": alerte.timestamp,
                "type": alerte.type,
                "severity": alerte.severity,
                "message": alerte.message,
                "value": alerte.value,
                "threshold": alerte.threshold,
                "metric": alerte.metric,
                "prediction_id": alerte.prediction_id,
                "raw_data": alerte.raw_data,
            }
            for alerte in alerts
        ]
        creees: list[Alert] = []
        # Piège : asyncpg plafonne une requête à 32 767 paramètres. Une détection sur une fenêtre
        # chargée dépasse ce seuil, et l'`INSERT` d'un seul tenant échouerait.
        for debut in range(0, len(valeurs), TAILLE_DE_LOT):
            requete = (
                insert(Alert)
                .values(valeurs[debut : debut + TAILLE_DE_LOT])
                .on_conflict_do_nothing(constraint="uq_alert_source_reference")
                .returning(Alert)
            )
            resultat = await self._session.execute(requete)
            creees.extend(resultat.scalars().all())
        await self._session.flush()
        return creees
@@ -1,49 +0,0 @@
 from collections.abc import Sequence
 from datetime import datetime
 from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Prediction
 class PredictionRepository:
    def __init__(self, session: AsyncSession) -> None:
        self._session = session
    async def list_since(
        self, *, since: datetime, site_id: str | None = None
    ) -> Sequence[Prediction]:
        # Restreint à `available` : une prévision `insufficient_data`/`error` n'a pas de
        # `predicted_value` à comparer à une lecture réelle (détection d'anomalie).
        # Piège : `prediction` n'a pas d'unicité sur `(site_id, target_at)` (cf.
        # `enervision_ml.score`, qui insère toujours une nouvelle ligne plutôt que d'écraser la
        # précédente). `prediction_id` en dernier départage donc les égalités de `target_at` par
        # ordre croissant : `_detect_anomaly` construit un dict qui garde le dernier rencontré,
        # c'est-à-dire le run le plus récent plutôt qu'une ligne choisie au hasard par le plan
        # d'exécution.
        requete = (
            select(Prediction)
            .where(Prediction.target_at >= since, Prediction.status == "available")
            .order_by(Prediction.site_id, Prediction.target_at, Prediction.prediction_id)
        )
        if site_id is not None:
            requete = requete.where(Prediction.site_id == site_id)
        return (await self._session.scalars(requete)).all()
    async def latest_by_site(self) -> Sequence[Prediction]:
        # `.distinct(site_id)` compile en `DISTINCT ON (site_id)` sous PostgreSQL : une seule
        # ligne par site, la plus récente grâce à l'ordre composite qui suit. Même mécanisme que
        # `ReadingRepository.latest_by_site`. Trié sur `target_at` (couvert par
        # `ix_prediction_site_target`) plutôt que `created_at` : c'est la prévision la plus
        # récente qui compte pour un tableau de bord, pas forcément le dernier run de scoring.
        requete = (
            select(Prediction)
            .distinct(Prediction.site_id)
            .order_by(
                Prediction.site_id,
                Prediction.target_at.desc(),
                Prediction.prediction_id.desc(),
            )
        )
        return (await self._session.scalars(requete)).all()
@@ -34,21 +34,6 @@ class ReadingRepository:
        lecture: Reading | None = await self._session.scalar(requete)
        return lecture
    async def list_since(self, *, since: datetime, site_id: str | None = None) -> Sequence[Reading]:
        # Trié par site puis par heure croissante : la détection d'alertes (spike) a besoin de
        # comparer chaque lecture à celle qui la précède immédiatement pour le même site.
        # `reading_id` en dernier départage : `uq_reading_source` autorise deux lignes au même
        # `site_id`+`timestamp` quand la `source` diffère (même piège que `latest_for_site`), sans
        # quoi l'ordre entre elles ne serait pas garanti d'un appel à l'autre.
        requete = (
            select(Reading)
            .where(Reading.timestamp >= since)
            .order_by(Reading.site_id, Reading.timestamp, Reading.reading_id)
        )
        if site_id is not None:
            requete = requete.where(Reading.site_id == site_id)
        return (await self._session.scalars(requete)).all()
    async def list_history(
        self,
        *,
@@ -1,24 +1,11 @@
 from collections.abc import Sequence
 from dataclasses import asdict, dataclass
 from sqlalchemy import select
 from sqlalchemy.dialects.postgresql import insert
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Recommendation
@dataclass(frozen=True, slots=True)
 class NouvelleRecommandation:
    alert_id: int
    action: str
    explanation: str
    rule_reference: str
 TAILLE_DE_LOT = 1000
 class RecommendationRepository:
    def __init__(self, session: AsyncSession) -> None:
        self._session = session
@@ -33,19 +20,3 @@ class RecommendationRepository:
        )
        recommendation: Recommendation | None = await self._session.scalar(requete)
        return recommendation
    # Pourquoi : l'idempotence est déléguée à `uq_recommendation_alert_rule` plutôt qu'à une
    # lecture préalable, qui laisserait une fenêtre entre le contrôle et l'insertion.
    async def create_missing(self, nouvelles: Sequence[NouvelleRecommandation]) -> int:
        creees = 0
        # Piège : asyncpg plafonne une requête à 32 767 paramètres, soit 8 191 lignes de quatre
        # colonnes. Au-delà de ce seuil un `INSERT` d'un seul tenant échouerait.
        for debut in range(0, len(nouvelles), TAILLE_DE_LOT):
            requete = (
                insert(Recommendation)
                .values([asdict(nouvelle) for nouvelle in nouvelles[debut : debut + TAILLE_DE_LOT]])
                .on_conflict_do_nothing(constraint="uq_recommendation_alert_rule")
                .returning(Recommendation.recommendation_id)
            )
            creees += len((await self._session.scalars(requete)).all())
        return creees
@@ -1,43 +0,0 @@
 from datetime import datetime
 from enum import StrEnum
 from pydantic import BaseModel, ConfigDict
 class PredictionTargetMetric(StrEnum):
    CONSUMPTION_KWH = "consumption_kwh"
    CONSUMPTION_KW = "consumption_kw"
 class PredictionStatus(StrEnum):
    AVAILABLE = "available"
    INSUFFICIENT_DATA = "insufficient_data"
    ERROR = "error"
 class SitePredictionResponse(BaseModel):
    model_config = ConfigDict(from_attributes=True)
    target_at: datetime
    target_metric: PredictionTargetMetric
    period_minutes: int | None
    predicted_value: float | None
    status: PredictionStatus
    failure_reason: str | None
    model_reference: str
    created_at: datetime
 class SitePredictionSummaryResponse(BaseModel):
    model_config = ConfigDict(from_attributes=True)
    site_id: str
    site_name: str
    prediction: SitePredictionResponse | None
 class PredictionSummaryResponse(BaseModel):
    model_config = ConfigDict(from_attributes=True)
    timestamp: datetime
    sites: list[SitePredictionSummaryResponse]
@@ -12,9 +12,3 @@ class RecommendationResponse(BaseModel):
    explanation: str
    rule_reference: str
    created_at: datetime
 class RecommendationGenerationResponse(BaseModel):
    alerts_examined: int
    recommendations_created: int
    already_present: int
@@ -1,323 +1,14 @@
 from collections.abc import Sequence
 from datetime import UTC, datetime, timedelta
-from app.models.energy import Alert, Prediction, Reading, Site
+from app.models.energy import Alert
 from app.repositories.alert import AlertRepository
 from app.repositories.prediction import PredictionRepository
 from app.repositories.reading import ReadingRepository
 from app.repositories.site import SiteRepository
 # Fenêtre de lectures/prédictions analysée à chaque exécution : assez large pour couvrir une paire
 # de lectures consécutives (spike) et une coupure prolongée (outage), sans réanalyser tout
 # l'historique à chaque lancement manuel du script de détection.
 LOOKBACK = timedelta(hours=48)
 # Cadence nominale d'une lecture : le CSV historique comme l'API Mock livrent un pas horaire.
 EXPECTED_INTERVAL = timedelta(hours=1)
 # Au-delà de trois pas manqués, on parle de coupure plutôt que d'un simple retard d'ingestion.
 OUTAGE_THRESHOLD = EXPECTED_INTERVAL * 3
 # +/-50% entre deux lectures consécutives du même site.
 SPIKE_RELATIVE_THRESHOLD = 0.5
 # 30% d'écart entre la consommation réelle et la prévision du même site/instant.
 ANOMALY_RELATIVE_THRESHOLD = 0.3
 # Une prévision quasi nulle rend l'écart relatif ininterprétable ; on l'ignore plutôt.
 ANOMALY_MINIMUM_PREDICTED_VALUE = 1e-6
 THRESHOLD_METRIC = "consumption_kw"
 ANOMALY_METRIC = "consumption_kwh"
 # `data_quality` -> sévérité du capteur défaillant. `good` est volontairement absent : il ne
 # déclenche jamais d'alerte.
 QUALITE_VERS_SEVERITE: dict[str, str] = {
    "partial": "low",
    "degraded": "medium",
    "critical": "critical",
 }
 class AlertService:
-    def __init__(
+    def __init__(self, *, alerts: AlertRepository) -> None:
        self,
        *,
        alerts: AlertRepository,
        readings: ReadingRepository,
        predictions: PredictionRepository,
        sites: SiteRepository,
    ) -> None:
        self._alerts = alerts
        self._readings = readings
        self._predictions = predictions
        self._sites = sites
    async def list_all(
        self, *, site_id: str | None = None, severity: str | None = None
    ) -> Sequence[Alert]:
        return await self._alerts.list_all(site_id=site_id, severity=severity)
    async def detect(
        self, *, now: datetime | None = None, site_id: str | None = None
    ) -> Sequence[Alert]:
        """Compare les lectures/prévisions récentes aux cinq règles internes et enregistre les
        alertes déclenchées (`source='enervision'`). Idempotent grâce à `source_alert_id` :
        rejouer sur une fenêtre déjà analysée ne recrée pas les mêmes lignes."""
        instant = now or datetime.now(UTC)
        depuis = instant - LOOKBACK
        sites = await self._sites.list_all()
        if site_id is not None:
            sites = [site for site in sites if site.site_id == site_id]
        sites_par_id = {site.site_id: site for site in sites}
        if not sites_par_id:
            return []
        lectures = [
            lecture
            for lecture in await self._readings.list_since(since=depuis, site_id=site_id)
            if lecture.site_id in sites_par_id
        ]
        predictions = [
            prediction
            for prediction in await self._predictions.list_since(since=depuis, site_id=site_id)
            if prediction.site_id in sites_par_id
        ]
        dernieres_lectures = {
            lecture.site_id: lecture
            for lecture in await self._readings.latest_by_site()
            if lecture.site_id in sites_par_id
        }
        candidates = [
            *_detect_threshold(lectures, sites_par_id),
            *_detect_spike(lectures),
            *_detect_anomaly(lectures, predictions),
            *_detect_outage(sites, dernieres_lectures, instant),
            *_detect_sensor(lectures),
        ]
        if not candidates:
            return []
        return await self._alerts.create_many(candidates)
 def _severity_from_ratio(ratio: float) -> str:
    if ratio >= 2.0:
        return "critical"
    if ratio >= 1.5:
        return "high"
    if ratio >= 1.2:
        return "medium"
    return "low"
 def _detect_threshold(lectures: Sequence[Reading], sites_par_id: dict[str, Site]) -> list[Alert]:
    # Seuil fixe = la capacité déclarée du site : dépasser `capacity_kw` est un dépassement
    # matériel, pas une simple variation, et évite un seuil arbitraire non fourni par le domaine.
    alertes = []
    for lecture in lectures:
        site = sites_par_id[lecture.site_id]
        valeur = lecture.consumption_kw
        if site.capacity_kw is None or site.capacity_kw <= 0 or valeur is None:
            continue
        if valeur <= site.capacity_kw:
            continue
        alertes.append(
            Alert(
                source_alert_id=f"threshold:{THRESHOLD_METRIC}:{lecture.timestamp.isoformat()}",
                site_id=lecture.site_id,
                source="enervision",
                timestamp=lecture.timestamp,
                type="threshold",
                severity=_severity_from_ratio(valeur / site.capacity_kw),
                message=(
                    f"Puissance appelée {valeur:.1f} kW au-dessus de la capacité du site "
                    f"({site.capacity_kw:.1f} kW)"
                ),
                value=valeur,
                threshold=site.capacity_kw,
                metric=THRESHOLD_METRIC,
                prediction_id=None,
                raw_data={},
            )
        )
    return alertes
 def _detect_spike(lectures: Sequence[Reading]) -> list[Alert]:
    # `lectures` est triée par site, heure puis `reading_id` (cf. `ReadingRepository.list_since`) :
    # deux lignes consécutives du même site sont donc deux mesures consécutives dans le temps,
    # sauf lorsqu'elles partagent le même horodatage (deux `source` différentes pour le même
    # instant, permises par `uq_reading_source`) : ce n'est alors pas une variation réelle, on
    # l'ignore plutôt que de générer une fausse alerte figée par son `source_alert_id`.
    alertes = []
    precedente: Reading | None = None
    for lecture in lectures:
        if (
            precedente is None
            or precedente.site_id != lecture.site_id
            or precedente.timestamp == lecture.timestamp
        ):
            precedente = lecture
            continue
        avant, apres = precedente.consumption_kw, lecture.consumption_kw
        precedente = lecture
        if avant is None or apres is None:
            continue
        if avant == 0:
            # Une variation relative n'a pas de sens depuis zéro, mais un redémarrage direct à
            # une consommation positive reste le signal le plus alarmant du lot : `critical`
            # plutôt qu'un ratio indéfini.
            if apres > 0:
                alertes.append(_spike_alert(lecture, avant, apres, severity="critical"))
            continue
        variation = abs(apres - avant) / abs(avant)
        if variation < SPIKE_RELATIVE_THRESHOLD:
            continue
        alertes.append(
            _spike_alert(
                lecture,
                avant,
                apres,
                severity=_severity_from_ratio(variation / SPIKE_RELATIVE_THRESHOLD),
            )
        )
    return alertes
 def _spike_alert(lecture: Reading, avant: float, apres: float, *, severity: str) -> Alert:
    return Alert(
        source_alert_id=f"spike:{THRESHOLD_METRIC}:{lecture.timestamp.isoformat()}",
        site_id=lecture.site_id,
        source="enervision",
        timestamp=lecture.timestamp,
        type="spike",
        severity=severity,
        message=(
            f"Variation brutale entre deux lectures consécutives ({avant:.1f} kW -> {apres:.1f} kW)"
        ),
        value=apres,
        threshold=avant,
        metric=THRESHOLD_METRIC,
        prediction_id=None,
        raw_data={},
    )
 def _detect_anomaly(lectures: Sequence[Reading], predictions: Sequence[Prediction]) -> list[Alert]:
    # Alignement strict (site_id, target_at == timestamp) : `enervision_ml.score` produit une
    # cible à l'heure pile suivant la dernière lecture, sur la même grille horaire que `reading`.
    predictions_par_cle = {
        (prediction.site_id, prediction.target_at): prediction
        for prediction in predictions
        if prediction.target_metric == ANOMALY_METRIC
    }
    alertes = []
    for lecture in lectures:
        prediction = predictions_par_cle.get((lecture.site_id, lecture.timestamp))
        reel = lecture.consumption_kwh
        if prediction is None or reel is None or prediction.predicted_value is None:
            continue
        predite = prediction.predicted_value
        if abs(predite) < ANOMALY_MINIMUM_PREDICTED_VALUE:
            continue
        ecart = abs(reel - predite) / abs(predite)
        if ecart < ANOMALY_RELATIVE_THRESHOLD:
            continue
        alertes.append(
            Alert(
                source_alert_id=f"anomaly:{ANOMALY_METRIC}:{lecture.timestamp.isoformat()}",
                site_id=lecture.site_id,
                source="enervision",
                timestamp=lecture.timestamp,
                type="anomaly",
                severity=_severity_from_ratio(ecart / ANOMALY_RELATIVE_THRESHOLD),
                message=(
                    f"Écart de {ecart * 100:.0f}% entre la consommation mesurée ({reel:.1f} kWh) "
                    f"et la prévision ({predite:.1f} kWh)"
                ),
                value=reel,
                threshold=predite,
                metric=ANOMALY_METRIC,
                prediction_id=prediction.prediction_id,
                raw_data={},
            )
        )
    return alertes
 def _detect_outage(
    sites: Sequence[Site], dernieres_lectures: dict[str, Reading], now: datetime
 ) -> list[Alert]:
    alertes = []
    for site in sites:
        derniere = dernieres_lectures.get(site.site_id)
        if derniere is None:
            alertes.append(
                _outage_alert(
                    site.site_id,
                    now,
                    reference=None,
                    message="Aucune lecture n'a jamais été reçue pour ce site",
                    severity="critical",
                )
            )
            continue
        absence = now - derniere.timestamp
        if absence < OUTAGE_THRESHOLD:
            continue
        alertes.append(
            _outage_alert(
                site.site_id,
                now,
                reference=derniere.timestamp,
                message=(
                    f"Aucune lecture depuis {absence} (dernière lecture : "
                    f"{derniere.timestamp.isoformat()})"
                ),
                severity=_severity_from_ratio(absence / OUTAGE_THRESHOLD),
            )
        )
    return alertes
 def _outage_alert(
    site_id: str, now: datetime, *, reference: datetime | None, message: str, severity: str
 ) -> Alert:
    return Alert(
        source_alert_id=f"outage:{reference.isoformat() if reference is not None else 'jamais'}",
        site_id=site_id,
        source="enervision",
        timestamp=now,
        type="outage",
        severity=severity,
        message=message,
        value=None,
        threshold=None,
        metric=None,
        prediction_id=None,
        raw_data={},
    )
 def _detect_sensor(lectures: Sequence[Reading]) -> list[Alert]:
    alertes = []
    for lecture in lectures:
        severite = QUALITE_VERS_SEVERITE.get(lecture.data_quality or "")
        if severite is None:
            continue
        raisons = ", ".join(lecture.null_reasons or []) or "raison non précisée"
        alertes.append(
            Alert(
                source_alert_id=f"sensor:{lecture.timestamp.isoformat()}",
                site_id=lecture.site_id,
                source="enervision",
                timestamp=lecture.timestamp,
                type="sensor",
                severity=severite,
                message=f"Qualité de mesure {lecture.data_quality} ({raisons})",
                value=None,
                threshold=None,
                metric=None,
                prediction_id=None,
                raw_data={},
            )
        )
    return alertes
@@ -1,68 +0,0 @@
 from dataclasses import dataclass
 from datetime import UTC, datetime
 from app.models.energy import Prediction, Site
 from app.repositories.prediction import PredictionRepository
 from app.repositories.site import SiteRepository
@dataclass(frozen=True, slots=True)
 class SitePrediction:
    target_at: datetime
    target_metric: str
    period_minutes: int | None
    predicted_value: float | None
    status: str
    failure_reason: str | None
    model_reference: str
    created_at: datetime
@dataclass(frozen=True, slots=True)
 class SitePredictionSummary:
    site_id: str
    site_name: str
    prediction: SitePrediction | None
@dataclass(frozen=True, slots=True)
 class PredictionSummary:
    timestamp: datetime
    sites: list[SitePredictionSummary]
 class PredictionService:
    def __init__(self, sites: SiteRepository, predictions: PredictionRepository) -> None:
        self._sites = sites
        self._predictions = predictions
    async def summary(self) -> PredictionSummary:
        sites = await self._sites.list_all()
        dernieres = {p.site_id: p for p in await self._predictions.latest_by_site()}
        return PredictionSummary(
            timestamp=datetime.now(UTC),
            sites=[_resume_site(site, dernieres.get(site.site_id)) for site in sites],
        )
 def _resume_site(site: Site, derniere: Prediction | None) -> SitePredictionSummary:
    # Piège : l'absence de ligne signifie « jamais scoré », pas une valeur pseudo-statut, qui
    # n'existe pas dans la contrainte de la table. `prediction` reste `None` plutôt que de
    # fabriquer un statut absent du domaine `available`/`insufficient_data`/`error`.
    prediction = None
    if derniere is not None:
        prediction = SitePrediction(
            target_at=derniere.target_at,
            target_metric=derniere.target_metric,
            period_minutes=derniere.period_minutes,
            predicted_value=derniere.predicted_value,
            status=derniere.status,
            failure_reason=derniere.failure_reason,
            model_reference=derniere.model_reference,
            created_at=derniere.created_at,
        )
    return SitePredictionSummary(
        site_id=site.site_id, site_name=site.site_name, prediction=prediction
    )
@@ -1,15 +1,7 @@
 from collections.abc import Sequence
 from dataclasses import dataclass
 from typing import Protocol
 from app.models.energy import Recommendation
 from app.repositories.alert import AlertRepository
 from app.repositories.recommendation import RecommendationRepository
 from app.services.recommendation_rules import applique_les_regles
 class Transaction(Protocol):
    async def commit(self) -> None: ...
 class RecommendationError(Exception):
@@ -20,24 +12,9 @@ class RecommendationNotFoundError(RecommendationError):
    pass
@dataclass(frozen=True, slots=True)
 class RapportGeneration:
    alertes_examinees: int
    recommandations_creees: int
    deja_presentes: int
 class RecommendationService:
-    def __init__(
+    def __init__(self, *, recommendations: RecommendationRepository) -> None:
        self,
        *,
        recommendations: RecommendationRepository,
        alerts: AlertRepository,
        transaction: Transaction,
    ) -> None:
        self._recommendations = recommendations
        self._alerts = alerts
        self._transaction = transaction
    async def list_all(self) -> Sequence[Recommendation]:
        return await self._recommendations.list_all()
@@ -47,16 +24,3 @@ class RecommendationService:
        if recommendation is None:
            raise RecommendationNotFoundError(recommendation_id)
        return recommendation
    async def generate(self, *, site_id: str | None = None) -> RapportGeneration:
        alertes = await self._alerts.list_all(site_id=site_id)
        nouvelles = [nouvelle for alerte in alertes for nouvelle in applique_les_regles(alerte)]
        creees = await self._recommendations.create_missing(nouvelles)
        await self._transaction.commit()
        return RapportGeneration(
            alertes_examinees=len(alertes),
            recommandations_creees=creees,
            deja_presentes=len(nouvelles) - creees,
        )
@@ -1,117 +0,0 @@
 # Piège : `rule_reference` est la clé d'idempotence en base, portée par la contrainte
 # `uq_recommendation_alert_rule`. Renommer une référence déjà livrée ne remplace pas les
 # recommandations existantes, il en crée de nouvelles à côté. Une règle qui change de sens
 # prend donc une référence suffixée `-v2` - REGLES.
 from collections.abc import Callable
 from dataclasses import dataclass
 from typing import Final
 from app.models.energy import Alert
 from app.repositories.recommendation import NouvelleRecommandation
 from app.schemas.alert import AlertSeverity, AlertType
 FACTEUR_DEPASSEMENT_MAJEUR: Final = 1.2
 POURCENTAGE_DEPASSEMENT_MAJEUR: Final = round((FACTEUR_DEPASSEMENT_MAJEUR - 1) * 100)
@dataclass(frozen=True, slots=True)
 class Regle:
    reference: str
    action: str
    declencheur: Callable[[Alert], bool]
    motif: Callable[[Alert], str]
 def _du_type(attendu: AlertType) -> Callable[[Alert], bool]:
    return lambda alerte: alerte.type == attendu
 def _de_severite(attendue: AlertSeverity) -> Callable[[Alert], bool]:
    return lambda alerte: alerte.severity == attendue
 # Un seuil nul ou négatif rendrait le rapport `value / threshold` arbitraire : l'alerte ne
 # renseigne alors aucun dépassement exploitable, et la règle ne se déclenche pas.
 def _depasse_largement_le_seuil(alerte: Alert) -> bool:
    if alerte.value is None or alerte.threshold is None or alerte.threshold <= 0:
        return False
    return alerte.value >= alerte.threshold * FACTEUR_DEPASSEMENT_MAJEUR
 REGLES: Final[tuple[Regle, ...]] = (
    Regle(
        reference="spike-delestage-v1",
        action="Délester les équipements non prioritaires sur le créneau du pic",
        declencheur=_du_type(AlertType.SPIKE),
        motif=lambda alerte: f"Pic de consommation signalé sur le site {alerte.site_id}",
    ),
    Regle(
        reference="threshold-reduction-v1",
        action="Ramener la puissance appelée sous le seuil contractuel",
        declencheur=_du_type(AlertType.THRESHOLD),
        motif=lambda alerte: f"Seuil de consommation dépassé sur le site {alerte.site_id}",
    ),
    Regle(
        reference="outage-secours-v1",
        action="Basculer sur l'alimentation de secours et prévenir l'exploitant",
        declencheur=_du_type(AlertType.OUTAGE),
        motif=lambda alerte: (
            f"Risque de surcharge ou de coupure imminente sur le site {alerte.site_id}"
        ),
    ),
    Regle(
        reference="sensor-maintenance-v1",
        action="Planifier une intervention de maintenance sur le capteur",
        declencheur=_du_type(AlertType.SENSOR),
        motif=lambda alerte: (
            f"Capteur défaillant sur le site {alerte.site_id}, les mesures ne sont plus fiables"
        ),
    ),
    Regle(
        reference="anomaly-verification-v1",
        action="Confronter la mesure à la prévision et vérifier le paramétrage du site",
        declencheur=_du_type(AlertType.ANOMALY),
        motif=lambda alerte: (
            f"Écart anormal entre la mesure et le comportement attendu du site {alerte.site_id}"
        ),
    ),
    Regle(
        reference="escalade-astreinte-v1",
        action="Escalader à l'astreinte sous une heure",
        declencheur=_de_severite(AlertSeverity.CRITICAL),
        motif=lambda alerte: f"Alerte de sévérité critique sur le site {alerte.site_id}",
    ),
    Regle(
        reference="contrat-puissance-v1",
        action="Réévaluer la puissance souscrite au contrat",
        declencheur=_depasse_largement_le_seuil,
        motif=lambda alerte: (
            f"Dépassement d'au moins {POURCENTAGE_DEPASSEMENT_MAJEUR} % du seuil "
            f"sur le site {alerte.site_id}"
        ),
    ),
 )
 def applique_les_regles(alerte: Alert) -> list[NouvelleRecommandation]:
    contexte = _contexte_de_mesure(alerte)
    return [
        NouvelleRecommandation(
            alert_id=alerte.alert_id,
            action=regle.action,
            explanation=f"{regle.motif(alerte)}{contexte}.",
            rule_reference=regle.reference,
        )
        for regle in REGLES
        if regle.declencheur(alerte)
    ]
 def _contexte_de_mesure(alerte: Alert) -> str:
    if alerte.value is None:
        return ""
    grandeur = alerte.metric or "valeur"
    if alerte.threshold is None:
        return f" ({grandeur} mesurée à {alerte.value})"
    return f" ({grandeur} mesurée à {alerte.value}, seuil {alerte.threshold})"
@@ -213,7 +213,7 @@
        },
        "security": [
          {
-            "CookieRafraichissement": []
+            "Cookie de rafraîchissement": []
          }
        ]
      }
@@ -252,7 +252,7 @@
        },
        "security": [
          {
-            "CookieRafraichissement": []
+            "Cookie de rafraîchissement": []
          }
        ]
      }
@@ -301,7 +301,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -347,7 +347,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -423,7 +423,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -673,7 +673,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      },
@@ -757,7 +757,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -771,7 +771,7 @@
        "operationId": "update_user_api_v1_users__user_id__patch",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -889,7 +889,7 @@
        "operationId": "reset_password_api_v1_users__user_id__password_reset_post",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1023,7 +1023,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -1037,7 +1037,7 @@
        "operationId": "get_site_api_v1_sites__site_id__get",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1124,7 +1124,7 @@
        "operationId": "get_current_api_v1_sites__site_id__current_get",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1211,7 +1211,7 @@
        "operationId": "list_alerts_api_v1_alerts_get",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1361,7 +1361,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -1375,7 +1375,7 @@
        "operationId": "get_recommendation_api_v1_recommendations__recommendation_id__get",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1453,90 +1453,6 @@
        }
      }
    },
    "/api/v1/recommendations/generate": {
      "post": {
        "tags": [
          "recommendations"
        ],
        "summary": "Génère les recommandations à partir des alertes",
        "operationId": "generate_recommendations_api_v1_recommendations_generate_post",
        "security": [
          {
            "JetonAcces": []
          }
        ],
        "parameters": [
          {
            "name": "site_id",
            "in": "query",
            "required": false,
            "schema": {
              "anyOf": [
                {
                  "type": "string"
                },
                {
                  "type": "null"
                }
              ],
              "title": "Site Id"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/RecommendationGenerationResponse"
                }
              }
            }
          },
          "500": {
            "description": "Erreur interne. `correlation` identifie la trace côté serveur, qui n'est pas renvoyée au client.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InternalErrorResponse"
                }
              }
            }
          },
          "401": {
            "description": "Jeton absent, illisible, périmé, ou rendu caduc par un changement de rôle ou une désactivation. L'en-tête `WWW-Authenticate` porte la cause dans `error=`.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          },
          "403": {
            "description": "Droits insuffisants, ou mot de passe provisoire à changer quand `detail` vaut `password_change_required`.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          },
          "422": {
            "description": "Corps invalide. Le détail nomme le champ fautif et le type d'erreur, jamais la valeur envoyée.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ValidationErrorResponse"
                }
              }
            }
          }
        }
      }
    },
    "/api/v1/stats/summary": {
      "get": {
        "tags": [
@@ -1588,7 +1504,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
@@ -1602,7 +1518,7 @@
        "operationId": "list_readings_api_v1_readings_get",
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ],
        "parameters": [
@@ -1799,63 +1715,7 @@
        },
        "security": [
          {
-            "JetonAcces": []
+            "Jeton d'accès": []
          }
        ]
      }
    },
    "/api/v1/predictions": {
      "get": {
        "tags": [
          "predictions"
        ],
        "summary": "Dernière prédiction de consommation par site",
        "operationId": "get_predictions_api_v1_predictions_get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/PredictionSummaryResponse"
                }
              }
            }
          },
          "500": {
            "description": "Erreur interne. `correlation` identifie la trace côté serveur, qui n'est pas renvoyée au client.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/InternalErrorResponse"
                }
              }
            }
          },
          "401": {
            "description": "Jeton absent, illisible, périmé, ou rendu caduc par un changement de rôle ou une désactivation. L'en-tête `WWW-Authenticate` porte la cause dans `error=`.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          },
          "403": {
            "description": "Mot de passe provisoire à changer (`detail` vaut `password_change_required`).",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          }
        },
        "security": [
          {
            "JetonAcces": []
          }
        ]
      }
@@ -2112,45 +1972,6 @@
        ],
        "title": "PasswordChangeRequest"
      },
      "PredictionStatus": {
        "type": "string",
        "enum": [
          "available",
          "insufficient_data",
          "error"
        ],
        "title": "PredictionStatus"
      },
      "PredictionSummaryResponse": {
        "properties": {
          "timestamp": {
            "type": "string",
            "format": "date-time",
            "title": "Timestamp"
          },
          "sites": {
            "items": {
              "$ref": "#/components/schemas/SitePredictionSummaryResponse"
            },
            "type": "array",
            "title": "Sites"
          }
        },
        "type": "object",
        "required": [
          "timestamp",
          "sites"
        ],
        "title": "PredictionSummaryResponse"
      },
      "PredictionTargetMetric": {
        "type": "string",
        "enum": [
          "consumption_kwh",
          "consumption_kw"
        ],
        "title": "PredictionTargetMetric"
      },
      "PrincipalResponse": {
        "properties": {
          "id": {
@@ -2428,29 +2249,6 @@
        ],
        "title": "ReadingSource"
      },
      "RecommendationGenerationResponse": {
        "properties": {
          "alerts_examined": {
            "type": "integer",
            "title": "Alerts Examined"
          },
          "recommendations_created": {
            "type": "integer",
            "title": "Recommendations Created"
          },
          "already_present": {
            "type": "integer",
            "title": "Already Present"
          }
        },
        "type": "object",
        "required": [
          "alerts_examined",
          "recommendations_created",
          "already_present"
        ],
        "title": "RecommendationGenerationResponse"
      },
      "RecommendationResponse": {
        "properties": {
          "recommendation_id": {
@@ -2720,104 +2518,6 @@
        ],
        "title": "SiteCurrentResponse"
      },
      "SitePredictionResponse": {
        "properties": {
          "target_at": {
            "type": "string",
            "format": "date-time",
            "title": "Target At"
          },
          "target_metric": {
            "$ref": "#/components/schemas/PredictionTargetMetric"
          },
          "period_minutes": {
            "anyOf": [
              {
                "type": "integer"
              },
              {
                "type": "null"
              }
            ],
            "title": "Period Minutes"
          },
          "predicted_value": {
            "anyOf": [
              {
                "type": "number"
              },
              {
                "type": "null"
              }
            ],
            "title": "Predicted Value"
          },
          "status": {
            "$ref": "#/components/schemas/PredictionStatus"
          },
          "failure_reason": {
            "anyOf": [
              {
                "type": "string"
              },
              {
                "type": "null"
              }
            ],
            "title": "Failure Reason"
          },
          "model_reference": {
            "type": "string",
            "title": "Model Reference"
          },
          "created_at": {
            "type": "string",
            "format": "date-time",
            "title": "Created At"
          }
        },
        "type": "object",
        "required": [
          "target_at",
          "target_metric",
          "period_minutes",
          "predicted_value",
          "status",
          "failure_reason",
          "model_reference",
          "created_at"
        ],
        "title": "SitePredictionResponse"
      },
      "SitePredictionSummaryResponse": {
        "properties": {
          "site_id": {
            "type": "string",
            "title": "Site Id"
          },
          "site_name": {
            "type": "string",
            "title": "Site Name"
          },
          "prediction": {
            "anyOf": [
              {
                "$ref": "#/components/schemas/SitePredictionResponse"
              },
              {
                "type": "null"
              }
            ]
          }
        },
        "type": "object",
        "required": [
          "site_id",
          "site_name",
          "prediction"
        ],
        "title": "SitePredictionSummaryResponse"
      },
      "SiteResponse": {
        "properties": {
          "site_id": {
@@ -3225,13 +2925,13 @@
      }
    },
    "securitySchemes": {
-      "CookieRafraichissement": {
+      "Cookie de rafraîchissement": {
        "type": "apiKey",
        "description": "Cookie `HttpOnly` posé par `/auth/login` et tourné par `/auth/refresh`. Il prend le préfixe `__Secure-` dès que l'API tourne derrière TLS, et n'est émis que vers `/api/v1/auth`.",
        "in": "cookie",
        "name": "ev_refresh"
      },
-      "JetonAcces": {
+      "Jeton d'accès": {
        "type": "http",
        "scheme": "bearer"
      }
@@ -3260,7 +2960,7 @@
    },
    {
      "name": "recommendations",
-      "description": "Consultation des recommandations issues des alertes. Accessible à partir du rôle `lecteur`. Leur génération par le moteur de règles est réservée au rôle `admin`."
+      "description": "Consultation des recommandations issues des alertes. Accessible à partir du rôle `lecteur`."
    },
    {
      "name": "stats",
@@ -3273,10 +2973,6 @@
    {
      "name": "sensors",
      "description": "État de santé des capteurs par site. Réservé au rôle `admin`."
    },
    {
      "name": "predictions",
      "description": "Dernière prévision de consommation par site, calculée hors ligne par le pipeline de scoring (`ml/`) et simplement lue ici. Accessible à partir du rôle `lecteur`."
    }
  ]
 }
@@ -17,7 +17,6 @@ dependencies = [
    "argon2-cffi>=23.1",
    "anyio>=4.0",
    "aiosmtplib>=5.1.3",
    "httpx>=0.28.1",
    "pandas>=3.0.5",
 ]
@@ -28,6 +27,7 @@ dev = [
    "pytest>=9.1.1",
    "pytest-asyncio>=1.4.0",
    "pytest-cov>=7.1.0",
    "httpx>=0.28.1",
    "pandas-stubs>=3.0.5.260914",
 ]
@@ -51,10 +51,8 @@ ROLE_MINIMUM: Final[dict[Route, Role]] = {
    ("GET", "/api/v1/alerts"): Role.LECTEUR,
    ("GET", "/api/v1/recommendations"): Role.LECTEUR,
    ("GET", "/api/v1/recommendations/{recommendation_id}"): Role.LECTEUR,
    ("POST", "/api/v1/recommendations/generate"): Role.ADMIN,
    ("GET", "/api/v1/stats/summary"): Role.LECTEUR,
    ("GET", "/api/v1/readings"): Role.LECTEUR,
    ("GET", "/api/v1/predictions"): Role.LECTEUR,
    ("GET", "/api/v1/sensors/status"): Role.ADMIN,
    ("GET", "/api/v1/users"): Role.ADMIN,
    ("POST", "/api/v1/users"): Role.ADMIN,
@@ -104,8 +104,8 @@ def test_the_rate_limit_documents_the_delay_header(schema: dict[str, Any]) -> No
 def test_the_refresh_cookie_appears_in_the_security_schemes(schema: dict[str, Any]) -> None:
    schemes = schema["components"]["securitySchemes"]
-    assert schemes["CookieRafraichissement"]["in"] == "cookie"
+    assert schemes["Cookie de rafraîchissement"]["in"] == "cookie"
-    assert schemes["CookieRafraichissement"]["name"] == "ev_refresh"
+    assert schemes["Cookie de rafraîchissement"]["name"] == "ev_refresh"
 def test_each_tag_used_by_a_route_is_described(schema: dict[str, Any]) -> None:
@@ -1,85 +0,0 @@
 from collections.abc import Callable, Iterator
 from datetime import UTC, datetime
 from uuid import uuid4
 import pytest
 from fastapi import FastAPI
 from httpx import AsyncClient
 from app.api.deps import get_current_principal, get_prediction_service
 from app.core.principal import Principal
 from app.core.roles import AccountKind, Role
 from app.services.prediction import PredictionSummary, SitePrediction, SitePredictionSummary
 TARGET_AT = datetime(2026, 9, 16, 13, 0, tzinfo=UTC)
 CREATED_AT = datetime(2026, 9, 16, 12, 0, tzinfo=UTC)
 def lecteur() -> Principal:
    # Le garde-fou de rôle (`lecteur` minimum) est déjà couvert par l'ensemble `ROUTES_A_ROLE`
    # de `tests/api/test_openapi.py` : pas besoin ici d'un paramètre de rôle jamais appelé avec
    # autre chose que sa valeur par défaut.
    return Principal(
        id=uuid4(),
        email="lecteur@enervision.fr",
        role=Role.LECTEUR,
        kind=AccountKind.HUMAIN,
        must_change_password=False,
    )
 class FauxService:
    def __init__(self) -> None:
        self.resume = PredictionSummary(
            timestamp=datetime.now(UTC),
            sites=[
                SitePredictionSummary(
                    site_id="SITE001",
                    site_name="Bureau Paris La Défense",
                    prediction=SitePrediction(
                        target_at=TARGET_AT,
                        target_metric="consumption_kwh",
                        period_minutes=60,
                        predicted_value=812.5,
                        status="available",
                        failure_reason=None,
                        model_reference="lightgbm-abc123",
                        created_at=CREATED_AT,
                    ),
                ),
                SitePredictionSummary(site_id="SITE002", site_name="Usine Lyon", prediction=None),
            ],
        )
    async def summary(self) -> PredictionSummary:
        return self.resume
@pytest.fixture
 def servi(app: FastAPI) -> Iterator[Callable[[], FauxService]]:
    def installe() -> FauxService:
        service = FauxService()
        app.dependency_overrides[get_prediction_service] = lambda: service
        app.dependency_overrides[get_current_principal] = lambda: lecteur()
        return service
    yield installe
    app.dependency_overrides.pop(get_prediction_service, None)
    app.dependency_overrides.pop(get_current_principal, None)
 async def test_get_predictions_returns_the_service_result(
    servi: Callable[[], FauxService], client: AsyncClient
 ) -> None:
    servi()
    response = await client.get("/api/v1/predictions")
    assert response.status_code == 200
    corps = response.json()
    premier, second = corps["sites"]
    assert premier["site_id"] == "SITE001"
    assert premier["prediction"]["predicted_value"] == 812.5
    assert premier["prediction"]["status"] == "available"
    assert second["site_id"] == "SITE002"
    assert second["prediction"] is None
@@ -10,7 +10,7 @@ from app.api.deps import get_current_principal, get_recommendation_service
 from app.core.principal import Principal
 from app.core.roles import AccountKind, Role
 from app.models.energy import Recommendation
-from app.services.recommendation import RapportGeneration, RecommendationNotFoundError
+from app.services.recommendation import RecommendationNotFoundError
 MOMENT = datetime(2024, 1, 1, tzinfo=UTC)
@@ -40,7 +40,6 @@ class FauxService:
    def __init__(self, erreur: Exception | None = None) -> None:
        self._erreur = erreur
        self.recommendation = recommendation()
        self.site_demande: str | None = None
    async def list_all(self) -> list[Recommendation]:
        return [self.recommendation]
@@ -50,10 +49,6 @@ class FauxService:
            raise self._erreur
        return self.recommendation
    async def generate(self, *, site_id: str | None = None) -> RapportGeneration:
        self.site_demande = site_id
        return RapportGeneration(alertes_examinees=2, recommandations_creees=3, deja_presentes=1)
@pytest.fixture
 def lecteur_connecte(app: FastAPI) -> Iterator[None]:
@@ -147,56 +142,3 @@ async def test_get_recommendation_returns_404_when_the_session_finds_nothing(
    response = await client.get("/api/v1/recommendations/404")
    assert response.status_code == 404
@pytest.fixture
 def admin_connecte(app: FastAPI) -> Iterator[None]:
    app.dependency_overrides[get_current_principal] = lambda: principal(Role.ADMIN)
    yield
    app.dependency_overrides.pop(get_current_principal, None)
@pytest.fixture
 def servi_en_admin(app: FastAPI, admin_connecte: None) -> Iterator[Callable[[], FauxService]]:
    def installe() -> FauxService:
        service = FauxService()
        app.dependency_overrides[get_recommendation_service] = lambda: service
        return service
    yield installe
    app.dependency_overrides.pop(get_recommendation_service, None)
 async def test_generate_recommendations_returns_the_generation_report(
    servi_en_admin: Callable[[], FauxService], client: AsyncClient
 ) -> None:
    servi_en_admin()
    response = await client.post("/api/v1/recommendations/generate")
    assert response.status_code == 200
    assert response.json() == {
        "alerts_examined": 2,
        "recommendations_created": 3,
        "already_present": 1,
    }
 async def test_generate_recommendations_forwards_the_requested_site(
    servi_en_admin: Callable[[], FauxService], client: AsyncClient
 ) -> None:
    service = servi_en_admin()
    await client.post("/api/v1/recommendations/generate", params={"site_id": "SITE002"})
    assert service.site_demande == "SITE002"
 async def test_generate_recommendations_refuses_a_reader(
    servi: Callable[..., FauxService], client: AsyncClient
 ) -> None:
    servi()
    response = await client.post("/api/v1/recommendations/generate")
    assert response.status_code == 403
@@ -112,10 +112,8 @@ async def test_duplicate_reading_is_rejected_when_key_matches(
    )
    await data_connection.execute(statement)
    savepoint = data_connection.begin_nested()
    with pytest.raises(IntegrityError):
-        async with savepoint:
+        async with data_connection.begin_nested():
            await data_connection.execute(statement)
@@ -149,12 +147,9 @@ async def test_invalid_reading_is_rejected_when_constraints_fail(
    }
    values.update(changes)
    statement = insert(Reading).values(**values)
    savepoint = data_connection.begin_nested()
    with pytest.raises(IntegrityError):
-        async with savepoint:
+        async with data_connection.begin_nested():
-            await data_connection.execute(statement)
+            await data_connection.execute(insert(Reading).values(**values))
 async def test_prediction_requires_period_when_energy_is_predicted(
@@ -169,10 +164,8 @@ async def test_prediction_requires_period_when_energy_is_predicted(
        model_reference="test-model/1",
    )
    savepoint = data_connection.begin_nested()
    with pytest.raises(IntegrityError):
-        async with savepoint:
+        async with data_connection.begin_nested():
            await data_connection.execute(statement)
@@ -219,22 +212,21 @@ async def test_alert_rejects_prediction_when_site_differs(
        )
    ).scalar_one()
    statement = insert(Alert).values(
        source_alert_id=str(uuid4()),
        site_id=other_site,
        source="enervision",
        timestamp=MOMENT,
        type="spike",
        severity="high",
        message="Test",
        prediction_id=prediction_id,
        raw_data={},
    )
    savepoint = data_connection.begin_nested()
    with pytest.raises(IntegrityError):
-        async with savepoint:
+        async with data_connection.begin_nested():
-            await data_connection.execute(statement)
+            await data_connection.execute(
                insert(Alert).values(
                    source_alert_id=str(uuid4()),
                    site_id=other_site,
                    source="enervision",
                    timestamp=MOMENT,
                    type="spike",
                    severity="high",
                    message="Test",
                    prediction_id=prediction_id,
                    raw_data={},
                )
            )
 async def test_recommendation_is_unique_when_alert_and_rule_match(
@@ -264,8 +256,6 @@ async def test_recommendation_is_unique_when_alert_and_rule_match(
    )
    await data_connection.execute(statement)
    savepoint = data_connection.begin_nested()
    with pytest.raises(IntegrityError):
-        async with savepoint:
+        async with data_connection.begin_nested():
            await data_connection.execute(statement)
@@ -106,15 +106,13 @@ def test_validate_source_accepts_valid_dataset():
 def test_validate_source_rejects_missing_column():
    frame = make_dataframe().drop(columns=["consumption_kwh"])
    metadata = make_metadata()
    with pytest.raises(
        ValueError,
        match="Colonnes obligatoires absentes",
    ):
        validate_source(
            frame,
-            metadata,
+            make_metadata(),
        )
@@ -126,15 +124,13 @@ def test_validate_source_rejects_duplicates():
        "timestamp",
    ]
    metadata = make_metadata()
    with pytest.raises(
        ValueError,
        match="doublons",
    ):
        validate_source(
            frame,
-            metadata,
+            make_metadata(),
        )
@@ -143,15 +139,13 @@ def test_validate_source_rejects_unknown_site():
    frame.loc[1, "site_id"] = "SITE999"
    metadata = make_metadata()
    with pytest.raises(
        ValueError,
        match="Sites incohérents",
    ):
        validate_source(
            frame,
-            metadata,
+            make_metadata(),
        )
@@ -1,869 +0,0 @@
 import json
 import sys
 from datetime import datetime
 from types import SimpleNamespace
 from typing import Any
 from unittest.mock import AsyncMock, MagicMock
 import httpx
 import pytest
 from httpx import AsyncClient, MockTransport, Request, Response
 from sqlalchemy import text
 from sqlalchemy.ext.asyncio import AsyncSession
 import app.etl.mock_api_import as mock_api_import
 from app.etl.mock_api_import import (
    MAX_SITES,
    READING_INSERT,
    SOURCE_HISTORY,
    build_reading_batch,
    build_reading_row,
    build_site_row,
    fetch_readings,
    fetch_sites,
    upsert_sites,
 )
 def make_site() -> dict[str, Any]:
    return {
        "site_id": "SITE001",
        "site_type": "office",
        "site_name": "Bureau Paris La Défense",
        "location": "Paris, France",
        "capacity_kw": 200,
        "status": "active",
    }
 def make_reading() -> dict[str, Any]:
    return {
        "timestamp": "2024-06-15T12:00:00Z",
        "site_id": "SITE001",
        "site_type": "office",
        "consumption_kw": 87.34,
        "consumption_kwh": 87.34,
        "voltage_v": 401.2,
        "current_a": 132.5,
        "power_factor": 0.923,
        "temperature_celsius": 22.1,
        "humidity_percent": 58.4,
        "null_reasons": [],
        "data_quality": "good",
    }
 async def test_fetch_sites_returns_sites() -> None:
    def handler(request: Request) -> Response:
        assert request.url.path == "/api/v1/sites"
        return Response(
            status_code=200,
            json=[make_site()],
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        sites = await fetch_sites(client)
    assert len(sites) == 1
    assert sites[0]["site_id"] == "SITE001"
    assert sites[0]["site_type"] == "office"
 async def test_fetch_sites_rejects_non_list_response() -> None:
    def handler(request: Request) -> Response:
        return Response(
            status_code=200,
            json={"unexpected": "payload"},
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        with pytest.raises(
            ValueError,
            match="La réponse /api/v1/sites doit être une liste",
        ):
            await fetch_sites(client)
 async def test_fetch_readings_sends_expected_query_parameters() -> None:
    captured_params: dict[str, str] = {}
    def handler(request: Request) -> Response:
        nonlocal captured_params
        captured_params = dict(request.url.params)
        return Response(
            status_code=200,
            json=[make_reading()],
        )
    transport = MockTransport(handler)
    start_time = datetime.fromisoformat("2024-06-15T12:00:00")
    end_time = datetime.fromisoformat("2024-06-15T13:00:00")
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        readings = await fetch_readings(
            client=client,
            site_id="SITE001",
            start_time=start_time,
            end_time=end_time,
            limit=60,
        )
    assert len(readings) == 1
    assert captured_params["site_id"] == "SITE001"
    assert captured_params["start_time"] == "2024-06-15T12:00:00"
    assert captured_params["end_time"] == "2024-06-15T13:00:00"
    assert captured_params["limit"] == "60"
 async def test_fetch_readings_rejects_non_list_response() -> None:
    def handler(request: Request) -> Response:
        return Response(
            status_code=200,
            json={"unexpected": "payload"},
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        with pytest.raises(
            ValueError,
            match="La réponse /api/v1/readings doit être une liste",
        ):
            await fetch_readings(
                client=client,
                site_id="SITE001",
                start_time=datetime.fromisoformat("2024-06-15T12:00:00"),
                end_time=datetime.fromisoformat("2024-06-15T13:00:00"),
                limit=60,
            )
 async def test_fetch_readings_raises_on_http_error() -> None:
    def handler(request: Request) -> Response:
        return Response(
            status_code=404,
            json={"detail": "Site non trouvé"},
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        with pytest.raises(httpx.HTTPStatusError):
            await fetch_readings(
                client=client,
                site_id="SITE999",
                start_time=datetime.fromisoformat("2024-06-15T12:00:00"),
                end_time=datetime.fromisoformat("2024-06-15T13:00:00"),
                limit=60,
            )
 def test_build_reading_row_respects_database_contract() -> None:
    reading = make_reading()
    row = build_reading_row(reading)
    assert row["site_id"] == "SITE001"
    assert row["source"] == SOURCE_HISTORY
    assert row["source"] == "api_history"
    assert row["dataset_id"] is None
    assert row["timestamp"] == datetime.fromisoformat("2024-06-15T12:00:00+00:00")
    assert row["consumption_kw"] == 87.34
    assert row["consumption_kwh"] == 87.34
    assert row["data_quality"] == "good"
    assert row["null_reasons"] == []
    assert row["imputed_values"] is None
    assert row["imputation_method"] is None
 def test_build_reading_row_keeps_null_values_and_quality() -> None:
    reading = make_reading()
    reading["consumption_kw"] = None
    reading["consumption_kwh"] = None
    reading["voltage_v"] = None
    reading["current_a"] = None
    reading["power_factor"] = None
    reading["data_quality"] = "degraded"
    reading["null_reasons"] = [
        "consumption_sensor_failure",
        "electrical_sensor_failure",
    ]
    row = build_reading_row(reading)
    assert row["consumption_kw"] is None
    assert row["consumption_kwh"] is None
    assert row["voltage_v"] is None
    assert row["current_a"] is None
    assert row["power_factor"] is None
    assert row["data_quality"] == "degraded"
    assert row["null_reasons"] == [
        "consumption_sensor_failure",
        "electrical_sensor_failure",
    ]
    assert row["imputed_values"] is None
    assert row["imputation_method"] is None
 def test_build_reading_row_keeps_raw_source_data() -> None:
    reading = make_reading()
    row = build_reading_row(reading)
    raw_data = json.loads(row["raw_data"])
    assert raw_data == reading
 def test_build_reading_batch_transforms_all_readings() -> None:
    first = make_reading()
    second = make_reading()
    second["timestamp"] = "2024-06-15T12:01:00Z"
    second["consumption_kw"] = 90.5
    rows = build_reading_batch([first, second])
    assert len(rows) == 2
    assert rows[0]["site_id"] == "SITE001"
    assert rows[0]["consumption_kw"] == 87.34
    assert rows[1]["site_id"] == "SITE001"
    assert rows[1]["consumption_kw"] == 90.5
 def test_create_mock_api_client_requires_credentials(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    settings = SimpleNamespace(
        mock_api_username=None,
        mock_api_password=None,
    )
    monkeypatch.setattr(
        mock_api_import,
        "get_settings",
        lambda: settings,
    )
    with pytest.raises(
        ValueError,
        match="Les identifiants de l'API Mock ne sont pas configurés",
    ):
        mock_api_import.create_mock_api_client()
@pytest.mark.parametrize(
    ("username", "password_value"),
    [
        ("", "test-password"),
        ("test-user", ""),
        ("   ", "test-password"),
        ("test-user", "   "),
    ],
 )
 def test_create_mock_api_client_rejects_empty_credentials(
    monkeypatch: pytest.MonkeyPatch,
    username: str,
    password_value: str,
 ) -> None:
    password = MagicMock()
    password.get_secret_value.return_value = password_value
    settings = SimpleNamespace(
        mock_api_username=username,
        mock_api_password=password,
    )
    monkeypatch.setattr(
        mock_api_import,
        "get_settings",
        lambda: settings,
    )
    with pytest.raises(
        ValueError,
        match="Les identifiants de l'API Mock ne sont pas configurés",
    ):
        mock_api_import.create_mock_api_client()
 async def test_create_mock_api_client_uses_configuration(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    password = MagicMock()
    password.get_secret_value.return_value = "test-password"
    settings = SimpleNamespace(
        mock_api_base_url="https://mock.test/",
        mock_api_username="test-user",
        mock_api_password=password,
        mock_api_timeout_seconds=10.0,
    )
    monkeypatch.setattr(
        mock_api_import,
        "get_settings",
        lambda: settings,
    )
    client = mock_api_import.create_mock_api_client()
    try:
        assert str(client.base_url) == "https://mock.test"
        assert client.timeout.connect == 10.0
    finally:
        await client.aclose()
 async def test_upsert_sites_with_empty_list_does_nothing() -> None:
    connection = AsyncMock()
    await upsert_sites(
        connection,
        [],
    )
    connection.execute.assert_not_awaited()
 async def test_import_mock_api_history_dry_run_does_not_write(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    def handler(request: Request) -> Response:
        if request.url.path == "/api/v1/sites":
            return Response(
                status_code=200,
                json=[make_site()],
            )
        if request.url.path == "/api/v1/readings":
            return Response(
                status_code=200,
                json=[make_reading()],
            )
        return Response(status_code=404)
    transport = MockTransport(handler)
    client = AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    )
    monkeypatch.setattr(
        mock_api_import,
        "create_mock_api_client",
        lambda: client,
    )
    monkeypatch.setattr(
        mock_api_import,
        "get_settings",
        lambda: SimpleNamespace(
            database_url="postgresql+asyncpg://unused",
        ),
    )
    create_engine_mock = MagicMock()
    monkeypatch.setattr(
        mock_api_import,
        "create_async_engine",
        create_engine_mock,
    )
    await mock_api_import.import_mock_api_history(
        start_time=datetime.fromisoformat("2024-06-15T12:00:00"),
        end_time=datetime.fromisoformat("2024-06-15T13:00:00"),
        limit=60,
        dry_run=True,
    )
    create_engine_mock.assert_not_called()
 async def test_import_mock_api_history_loads_data(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    def handler(request: Request) -> Response:
        if request.url.path == "/api/v1/sites":
            return Response(
                status_code=200,
                json=[make_site()],
            )
        if request.url.path == "/api/v1/readings":
            return Response(
                status_code=200,
                json=[make_reading()],
            )
        return Response(status_code=404)
    transport = MockTransport(handler)
    client = AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    )
    monkeypatch.setattr(
        mock_api_import,
        "create_mock_api_client",
        lambda: client,
    )
    monkeypatch.setattr(
        mock_api_import,
        "get_settings",
        lambda: SimpleNamespace(
            database_url="postgresql+asyncpg://test:test@localhost/test",
        ),
    )
    connection = AsyncMock()
    transaction_context = MagicMock()
    transaction_context.__aenter__ = AsyncMock(
        return_value=connection,
    )
    transaction_context.__aexit__ = AsyncMock(
        return_value=None,
    )
    engine = MagicMock()
    engine.begin.return_value = transaction_context
    engine.dispose = AsyncMock()
    create_engine_mock = MagicMock(
        return_value=engine,
    )
    upsert_sites_mock = AsyncMock()
    monkeypatch.setattr(
        mock_api_import,
        "create_async_engine",
        create_engine_mock,
    )
    monkeypatch.setattr(
        mock_api_import,
        "upsert_sites",
        upsert_sites_mock,
    )
    await mock_api_import.import_mock_api_history(
        start_time=datetime.fromisoformat("2024-06-15T12:00:00"),
        end_time=datetime.fromisoformat("2024-06-15T13:00:00"),
        limit=60,
        dry_run=False,
    )
    create_engine_mock.assert_called_once_with(
        "postgresql+asyncpg://test:test@localhost/test",
        pool_pre_ping=True,
    )
    upsert_sites_mock.assert_awaited_once_with(
        connection,
        [make_site()],
    )
    connection.execute.assert_awaited_once()
    engine.dispose.assert_awaited_once()
 def test_parse_datetime_accepts_z_suffix() -> None:
    result = mock_api_import.parse_datetime(
        "2024-06-15T12:00:00Z",
    )
    assert result == datetime.fromisoformat(
        "2024-06-15T12:00:00+00:00",
    )
 def test_parse_args_reads_cli_parameters(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    monkeypatch.setattr(
        sys,
        "argv",
        [
            "mock_api_import",
            "--start-time",
            "2024-06-15T12:00:00Z",
            "--end-time",
            "2024-06-15T13:00:00Z",
            "--limit",
            "60",
            "--dry-run",
        ],
    )
    args = mock_api_import.parse_args()
    assert args.start_time == datetime.fromisoformat(
        "2024-06-15T12:00:00+00:00",
    )
    assert args.end_time == datetime.fromisoformat(
        "2024-06-15T13:00:00+00:00",
    )
    assert args.limit == 60
    assert args.dry_run is True
 def test_main_rejects_limit_out_of_bounds(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    monkeypatch.setattr(
        sys,
        "argv",
        [
            "mock_api_import",
            "--start-time",
            "2024-06-15T12:00:00Z",
            "--end-time",
            "2024-06-15T13:00:00Z",
            "--limit",
            "0",
        ],
    )
    with pytest.raises(
        ValueError,
        match="--limit doit être compris entre 1 et 1000",
    ):
        mock_api_import.main()
 def test_main_rejects_invalid_period(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    monkeypatch.setattr(
        sys,
        "argv",
        [
            "mock_api_import",
            "--start-time",
            "2024-06-15T14:00:00Z",
            "--end-time",
            "2024-06-15T13:00:00Z",
            "--limit",
            "60",
        ],
    )
    with pytest.raises(
        ValueError,
        match="--start-time doit être antérieur à --end-time",
    ):
        mock_api_import.main()
 def test_main_runs_import(
    monkeypatch: pytest.MonkeyPatch,
 ) -> None:
    start_time = datetime.fromisoformat(
        "2024-06-15T12:00:00+00:00",
    )
    end_time = datetime.fromisoformat(
        "2024-06-15T13:00:00+00:00",
    )
    import_mock = AsyncMock()
    monkeypatch.setattr(
        mock_api_import,
        "parse_args",
        lambda: SimpleNamespace(
            start_time=start_time,
            end_time=end_time,
            limit=60,
            dry_run=True,
        ),
    )
    monkeypatch.setattr(
        mock_api_import,
        "import_mock_api_history",
        import_mock,
    )
    mock_api_import.main()
    import_mock.assert_awaited_once_with(
        start_time=start_time,
        end_time=end_time,
        limit=60,
        dry_run=True,
    )
 async def test_fetch_sites_rejects_a_response_above_the_cap() -> None:
    def handler(request: Request) -> Response:
        return Response(
            status_code=200,
            json=[make_site() for _ in range(MAX_SITES + 1)],
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        with pytest.raises(
            ValueError,
            match=f"dépasse le plafond de {MAX_SITES} sites",
        ):
            await fetch_sites(client)
 async def test_fetch_readings_rejects_a_response_above_the_requested_limit() -> None:
    def handler(request: Request) -> Response:
        return Response(
            status_code=200,
            json=[make_reading(), make_reading(), make_reading()],
        )
    transport = MockTransport(handler)
    async with AsyncClient(
        transport=transport,
        base_url="https://mock.test",
    ) as client:
        with pytest.raises(
            ValueError,
            match="dépasse la limite demandée de 2",
        ):
            await fetch_readings(
                client=client,
                site_id="SITE001",
                start_time=datetime.fromisoformat("2024-06-15T12:00:00"),
                end_time=datetime.fromisoformat("2024-06-15T13:00:00"),
                limit=2,
            )
 def test_build_reading_row_neutralises_values_outside_physical_bounds() -> None:
    reading = make_reading()
    reading["power_factor"] = 42.0
    reading["temperature_celsius"] = 1e30
    reading["humidity_percent"] = -1.0
    row = build_reading_row(reading)
    assert row["power_factor"] is None
    assert row["temperature_celsius"] is None
    assert row["humidity_percent"] is None
    assert row["null_reasons"] == [
        "out_of_physical_bounds:power_factor",
        "out_of_physical_bounds:temperature_celsius",
        "out_of_physical_bounds:humidity_percent",
    ]
    assert row["data_quality"] == "degraded"
    assert json.loads(row["raw_data"])["power_factor"] == 42.0
 def test_build_reading_row_rejects_a_measure_that_is_not_a_number() -> None:
    reading = make_reading()
    reading["consumption_kw"] = "87.34"
    row = build_reading_row(reading)
    assert row["consumption_kw"] is None
    assert "out_of_physical_bounds:consumption_kw" in row["null_reasons"]
 def test_build_reading_row_drops_a_quality_the_database_refuses() -> None:
    reading = make_reading()
    reading["data_quality"] = "unknown"
    row = build_reading_row(reading)
    assert row["data_quality"] is None
 def test_build_reading_row_requires_an_identifier() -> None:
    reading = make_reading()
    del reading["site_id"]
    with pytest.raises(
        ValueError,
        match="Champ site_id absent ou invalide",
    ):
        build_reading_row(reading)
 def test_build_site_row_keeps_only_the_expected_columns() -> None:
    site = make_site()
    site["unexpected"] = "valeur hostile"
    site["capacity_kw"] = -5.0
    site["status"] = 12
    row = build_site_row(site)
    assert set(row) == {
        "site_id",
        "site_type",
        "site_name",
        "location",
        "capacity_kw",
        "status",
    }
    assert row["capacity_kw"] is None
    assert row["status"] is None
 async def test_upsert_sites_sends_only_the_expected_columns() -> None:
    connection = AsyncMock()
    site = make_site()
    site["unexpected"] = "valeur hostile"
    await upsert_sites(
        connection,
        [site],
    )
    rows = connection.execute.await_args.args[1]
    assert "unexpected" not in rows[0]
    assert rows[0]["site_id"] == "SITE001"
@pytest.mark.integration
 async def test_reading_insert_is_idempotent(
    session: AsyncSession,
 ) -> None:
    reading = make_reading()
    row = build_reading_row(reading)
    connection = await session.connection()
    await upsert_sites(
        connection,
        [make_site()],
    )
    await session.execute(
        READING_INSERT,
        [row],
    )
    await session.execute(
        READING_INSERT,
        [row],
    )
    result = await session.execute(
        text(
            """
            SELECT COUNT(*)
            FROM reading
            WHERE site_id = :site_id
              AND timestamp = :timestamp
              AND source = :source
            """
        ),
        {
            "site_id": row["site_id"],
            "timestamp": row["timestamp"],
            "source": row["source"],
        },
    )
    assert result.scalar_one() == 1
    await session.rollback()
@pytest.mark.integration
 async def test_out_of_bounds_reading_is_stored_neutralised(
    session: AsyncSession,
 ) -> None:
    reading = make_reading()
    reading["power_factor"] = 42.0
    row = build_reading_row(reading)
    connection = await session.connection()
    await upsert_sites(
        connection,
        [make_site()],
    )
    await session.execute(
        READING_INSERT,
        [row],
    )
    result = await session.execute(
        text(
            """
            SELECT power_factor, data_quality, null_reasons, raw_data ->> 'power_factor'
            FROM reading
            WHERE site_id = :site_id
              AND timestamp = :timestamp
              AND source = :source
            """
        ),
        {
            "site_id": row["site_id"],
            "timestamp": row["timestamp"],
            "source": row["source"],
        },
    )
    stored = result.one()
    await session.rollback()
    assert stored[0] is None
    assert stored[1] == "degraded"
    assert stored[2] == ["out_of_physical_bounds:power_factor"]
    assert stored[3] == "42.0"
@@ -5,7 +5,6 @@ import pytest
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Alert
 from app.repositories import alert as module_alert
 from app.repositories.alert import AlertRepository
 from app.schemas.alert import AlertSeverity
 from tests.repositories.test_site import creer as creer_site
@@ -90,77 +89,3 @@ async def test_list_all_returns_an_empty_list_when_there_is_nothing(
    alertes = await depot.list_all(site_id=identifiant_site())
    assert list(alertes) == []
 def _alerte_a_inserer(*, site_id: str, source_alert_id: str) -> Alert:
    return Alert(
        source_alert_id=source_alert_id,
        site_id=site_id,
        source="enervision",
        timestamp=datetime(2026, 9, 16, tzinfo=UTC),
        type="threshold",
        severity="high",
        message="Dépassement du seuil configuré",
        value=812.5,
        threshold=720.0,
        metric="consumption_kw",
        prediction_id=None,
        raw_data={},
    )
 async def test_create_many_inserts_every_alert(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = AlertRepository(session)
    creees = await depot.create_many(
        [
            _alerte_a_inserer(site_id=site.site_id, source_alert_id="threshold:a"),
            _alerte_a_inserer(site_id=site.site_id, source_alert_id="threshold:b"),
        ]
    )
    identifiants = [a.alert_id for a in creees]
    await session.rollback()
    assert len(identifiants) == 2
    assert all(identifiant is not None for identifiant in identifiants)
 async def test_create_many_skips_a_duplicate_source_alert_id(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = AlertRepository(session)
    await depot.create_many(
        [_alerte_a_inserer(site_id=site.site_id, source_alert_id="threshold:rejouee")]
    )
    rejouees = await depot.create_many(
        [_alerte_a_inserer(site_id=site.site_id, source_alert_id="threshold:rejouee")]
    )
    await session.rollback()
    assert rejouees == []
 async def test_create_many_does_nothing_for_an_empty_list(session: AsyncSession) -> None:
    depot = AlertRepository(session)
    creees = await depot.create_many([])
    assert creees == []
 async def test_create_many_inserts_every_alert_across_several_batches(
    session: AsyncSession, monkeypatch: pytest.MonkeyPatch
 ) -> None:
    monkeypatch.setattr(module_alert, "TAILLE_DE_LOT", 2)
    site = await creer_site(session)
    depot = AlertRepository(session)
    a_inserer = [
        _alerte_a_inserer(site_id=site.site_id, source_alert_id=f"threshold:lot-{index}")
        for index in range(5)
    ]
    creees = await depot.create_many(a_inserer)
    await session.rollback()
    assert len(creees) == 5
@@ -49,10 +49,8 @@ async def test_the_database_refuses_to_mutate_the_audit_log(
 ) -> None:
    await une_ligne(session)
    requete = text(instruction)
    with pytest.raises(DBAPIError, match="ajout seul"):
-        await session.execute(requete)
+        await session.execute(text(instruction))
    await session.rollback()
@@ -131,14 +131,11 @@ async def test_the_database_refuses_two_tokens_sharing_a_fingerprint(
        user_agent=None,
    )
    empreinte = fingerprint_refresh(secret)
    expiration = datetime.now(UTC) + DUREE
    with pytest.raises(IntegrityError):
        await depot.create(
            user_id=compte,
-            token_hash=empreinte,
+            token_hash=fingerprint_refresh(secret),
-            expires_at=expiration,
+            expires_at=datetime.now(UTC) + DUREE,
            client_ip=None,
            user_agent=None,
        )
@@ -1,171 +0,0 @@
 from datetime import UTC, datetime
 import pytest
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Prediction
 from app.repositories.prediction import PredictionRepository
 from tests.repositories.test_site import creer as creer_site
 from tests.repositories.test_site import identifiant as identifiant_site
 pytestmark = pytest.mark.integration
 async def creer_prediction(
    session: AsyncSession, *, site_id: str, **overrides: object
 ) -> Prediction:
    prediction = Prediction(
        site_id=site_id,
        target_at=overrides.get("target_at", datetime(2026, 9, 16, tzinfo=UTC)),
        target_metric=overrides.get("target_metric", "consumption_kwh"),
        period_minutes=overrides.get("period_minutes", 60),
        predicted_value=overrides.get("predicted_value", 42.0),
        model_reference=overrides.get("model_reference", "lightgbm-test"),
        status=overrides.get("status", "available"),
        failure_reason=overrides.get("failure_reason"),
    )
    session.add(prediction)
    await session.flush()
    return prediction
 async def test_list_since_excludes_predictions_before_the_cutoff(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = PredictionRepository(session)
    dedans = await creer_prediction(
        session, site_id=site.site_id, target_at=datetime(2026, 9, 16, tzinfo=UTC)
    )
    await creer_prediction(
        session, site_id=site.site_id, target_at=datetime(2026, 9, 1, tzinfo=UTC)
    )
    resultats = await depot.list_since(
        since=datetime(2026, 9, 10, tzinfo=UTC), site_id=site.site_id
    )
    identifiants = [p.prediction_id for p in resultats]
    await session.rollback()
    assert identifiants == [dedans.prediction_id]
 async def test_list_since_excludes_predictions_that_are_not_available(
    session: AsyncSession,
 ) -> None:
    site = await creer_site(session)
    depot = PredictionRepository(session)
    await creer_prediction(
        session,
        site_id=site.site_id,
        target_at=datetime(2026, 9, 16, tzinfo=UTC),
        status="insufficient_data",
        predicted_value=None,
        failure_reason="pas assez d'historique",
    )
    resultats = await depot.list_since(since=datetime(2026, 9, 1, tzinfo=UTC), site_id=site.site_id)
    await session.rollback()
    assert list(resultats) == []
 async def test_list_since_breaks_a_target_at_tie_by_ascending_prediction_id(
    session: AsyncSession,
 ) -> None:
    # `prediction` n'a pas d'unicité sur `(site_id, target_at)` : deux runs de scoring sans
    # nouvelle lecture entre-temps produisent deux lignes `available` à la même cible. Sans ce
    # départage, `_detect_anomaly` retiendrait une ligne au hasard plutôt que le run le plus
    # récent.
    site = await creer_site(session)
    depot = PredictionRepository(session)
    cible = datetime(2026, 9, 16, tzinfo=UTC)
    premier_run = await creer_prediction(
        session, site_id=site.site_id, target_at=cible, predicted_value=10.0
    )
    second_run = await creer_prediction(
        session, site_id=site.site_id, target_at=cible, predicted_value=20.0
    )
    resultats = await depot.list_since(since=datetime(2026, 9, 1, tzinfo=UTC), site_id=site.site_id)
    identifiants = [p.prediction_id for p in resultats]
    await session.rollback()
    assert identifiants == [premier_run.prediction_id, second_run.prediction_id]
 async def test_list_since_filters_by_site_id(session: AsyncSession) -> None:
    premier = await creer_site(session)
    second = await creer_site(session)
    depot = PredictionRepository(session)
    voulue = await creer_prediction(session, site_id=premier.site_id)
    await creer_prediction(session, site_id=second.site_id)
    resultats = await depot.list_since(
        since=datetime(2026, 8, 1, tzinfo=UTC), site_id=premier.site_id
    )
    identifiants = [p.prediction_id for p in resultats]
    await session.rollback()
    assert identifiants == [voulue.prediction_id]
 async def test_latest_by_site_keeps_only_the_most_recent_target(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = PredictionRepository(session)
    ancienne = await creer_prediction(
        session, site_id=site.site_id, target_at=datetime(2026, 9, 1, tzinfo=UTC)
    )
    recente = await creer_prediction(
        session, site_id=site.site_id, target_at=datetime(2026, 9, 15, tzinfo=UTC)
    )
    resultats = await depot.latest_by_site()
    identifiants = [
        p.prediction_id
        for p in resultats
        if p.prediction_id in (ancienne.prediction_id, recente.prediction_id)
    ]
    await session.rollback()
    assert identifiants == [recente.prediction_id]
 async def test_latest_by_site_returns_one_row_per_site(session: AsyncSession) -> None:
    premier = await creer_site(session)
    second = await creer_site(session)
    depot = PredictionRepository(session)
    voulue_premier = await creer_prediction(session, site_id=premier.site_id)
    voulue_second = await creer_prediction(session, site_id=second.site_id)
    resultats = await depot.latest_by_site()
    identifiants = {p.site_id for p in resultats if p.site_id in (premier.site_id, second.site_id)}
    await session.rollback()
    assert identifiants == {voulue_premier.site_id, voulue_second.site_id}
 async def test_latest_by_site_keeps_an_insufficient_data_prediction(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = PredictionRepository(session)
    voulue = await creer_prediction(
        session,
        site_id=site.site_id,
        status="insufficient_data",
        predicted_value=None,
        failure_reason="pas assez d'historique",
    )
    resultats = await depot.latest_by_site()
    identifiants = [p.prediction_id for p in resultats if p.site_id == site.site_id]
    await session.rollback()
    assert identifiants == [voulue.prediction_id]
 async def test_latest_by_site_returns_an_empty_list_when_there_is_nothing(
    session: AsyncSession,
 ) -> None:
    depot = PredictionRepository(session)
    resultats = [p for p in await depot.latest_by_site() if p.site_id == identifiant_site()]
    assert resultats == []
@@ -155,79 +155,6 @@ async def test_latest_for_site_ignores_the_readings_of_the_other_sites(
    assert trouvee is None
 async def test_list_since_orders_by_site_then_by_time_ascending(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = ReadingRepository(session)
    plus_recente = await creer_lecture(
        session, site_id=site.site_id, timestamp=datetime(2026, 9, 16, tzinfo=UTC)
    )
    plus_ancienne = await creer_lecture(
        session, site_id=site.site_id, timestamp=datetime(2026, 9, 15, tzinfo=UTC)
    )
    resultats = await depot.list_since(since=datetime(2026, 9, 1, tzinfo=UTC), site_id=site.site_id)
    identifiants = [r.reading_id for r in resultats]
    await session.rollback()
    assert identifiants == [plus_ancienne.reading_id, plus_recente.reading_id]
 async def test_list_since_excludes_readings_before_the_cutoff(session: AsyncSession) -> None:
    site = await creer_site(session)
    depot = ReadingRepository(session)
    dedans = await creer_lecture(
        session, site_id=site.site_id, timestamp=datetime(2026, 9, 16, tzinfo=UTC)
    )
    await creer_lecture(session, site_id=site.site_id, timestamp=datetime(2026, 9, 1, tzinfo=UTC))
    resultats = await depot.list_since(
        since=datetime(2026, 9, 10, tzinfo=UTC), site_id=site.site_id
    )
    identifiants = [r.reading_id for r in resultats]
    await session.rollback()
    assert identifiants == [dedans.reading_id]
 async def test_list_since_breaks_a_timestamp_tie_by_ascending_reading_id(
    session: AsyncSession,
 ) -> None:
    # `uq_reading_source` autorise deux lignes au même `site_id`+`timestamp` quand la `source`
    # diffère (même piège que `latest_for_site`). Sans ce départage, `_detect_spike` traiterait
    # cette paire comme une variation réelle selon un ordre non garanti par le plan d'exécution.
    site = await creer_site(session)
    depot = ReadingRepository(session)
    horodatage = datetime(2026, 9, 16, tzinfo=UTC)
    premiere = await creer_lecture(
        session, site_id=site.site_id, timestamp=horodatage, source="api_history", consumption_kw=10
    )
    seconde = await creer_lecture(
        session, site_id=site.site_id, timestamp=horodatage, source="api_current", consumption_kw=42
    )
    resultats = await depot.list_since(since=datetime(2026, 9, 1, tzinfo=UTC), site_id=site.site_id)
    identifiants = [r.reading_id for r in resultats]
    await session.rollback()
    assert identifiants == [premiere.reading_id, seconde.reading_id]
 async def test_list_since_filters_by_site_id(session: AsyncSession) -> None:
    premier = await creer_site(session)
    second = await creer_site(session)
    depot = ReadingRepository(session)
    voulue = await creer_lecture(session, site_id=premier.site_id)
    await creer_lecture(session, site_id=second.site_id)
    resultats = await depot.list_since(
        since=datetime(2026, 8, 1, tzinfo=UTC), site_id=premier.site_id
    )
    identifiants = [r.reading_id for r in resultats]
    await session.rollback()
    assert identifiants == [voulue.reading_id]
 async def test_list_history_orders_the_readings_by_timestamp_descending(
    session: AsyncSession,
 ) -> None:
@@ -5,8 +5,7 @@ import pytest
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.models.energy import Alert, Recommendation, Site
-from app.repositories import recommendation as module_recommendation
+from app.repositories.recommendation import RecommendationRepository
 from app.repositories.recommendation import NouvelleRecommandation, RecommendationRepository
 pytestmark = pytest.mark.integration
@@ -84,59 +83,3 @@ async def test_list_all_returns_the_recommendations_sorted_by_identifier(
    await session.rollback()
    assert identifiants == sorted(identifiants)
 def nouvelle(alert_id: int, reference: str = "spike-delestage-v1") -> NouvelleRecommandation:
    return NouvelleRecommandation(
        alert_id=alert_id,
        action="Délester les équipements non prioritaires",
        explanation="Pic de consommation signalé.",
        rule_reference=reference,
    )
 async def test_create_missing_inserts_the_proposals(session: AsyncSession) -> None:
    depot = RecommendationRepository(session)
    alert_id = await creer_alerte(session)
    creees = await depot.create_missing(
        [nouvelle(alert_id), nouvelle(alert_id, "escalade-astreinte-v1")]
    )
    await session.rollback()
    assert creees == 2
 async def test_create_missing_ignores_a_rule_already_held_for_the_alert(
    session: AsyncSession,
 ) -> None:
    depot = RecommendationRepository(session)
    alert_id = await creer_alerte(session)
    await depot.create_missing([nouvelle(alert_id)])
    creees = await depot.create_missing([nouvelle(alert_id)])
    await session.rollback()
    assert creees == 0
 async def test_create_missing_returns_zero_without_any_proposal(session: AsyncSession) -> None:
    creees = await RecommendationRepository(session).create_missing([])
    assert creees == 0
 async def test_create_missing_inserts_every_proposal_across_several_batches(
    session: AsyncSession, monkeypatch: pytest.MonkeyPatch
 ) -> None:
    monkeypatch.setattr(module_recommendation, "TAILLE_DE_LOT", 2)
    depot = RecommendationRepository(session)
    alert_id = await creer_alerte(session)
    propositions = [nouvelle(alert_id, f"regle-{index}-v1") for index in range(5)]
    creees = await depot.create_missing(propositions)
    enregistrees = [r for r in await depot.list_all() if r.alert_id == alert_id]
    await session.rollback()
    assert creees == 5
    assert len(enregistrees) == 5
@@ -178,16 +178,12 @@ async def test_the_database_refuses_two_tokens_sharing_a_fingerprint(
        user_agent=None,
    )
    famille = uuid.uuid4()
    empreinte = fingerprint_refresh(secret)
    expiration = datetime.now(UTC) + DUREE
    with pytest.raises(IntegrityError):
        await depot.create(
            user_id=compte,
-            family_id=famille,
+            family_id=uuid.uuid4(),
-            token_hash=empreinte,
+            token_hash=fingerprint_refresh(secret),
-            expires_at=expiration,
+            expires_at=datetime.now(UTC) + DUREE,
            client_ip=None,
            user_agent=None,
        )
@@ -31,12 +31,14 @@ async def test_the_database_refuses_an_email_written_in_upper_case(
 ) -> None:
    saisie = adresse().upper()
    requete = text(
        "insert into app_user (email, password_hash, role) values (:e, '$argon2id$x', 'lecteur')"
    )
    with pytest.raises(IntegrityError):
-        await session.execute(requete, {"e": saisie})
+        await session.execute(
            text(
                "insert into app_user (email, password_hash, role) "
                "values (:e, '$argon2id$x', 'lecteur')"
            ),
            {"e": saisie},
        )
    await session.rollback()
@@ -1,10 +1,7 @@
-from dataclasses import dataclass, field
+from datetime import UTC, datetime
 from datetime import UTC, datetime, timedelta
 from app.models.energy import Alert
-from app.services.alert import OUTAGE_THRESHOLD, AlertService, _severity_from_ratio
+from app.services.alert import AlertService
 NOW = datetime(2026, 9, 16, 12, 0, tzinfo=UTC)
 def alert(
@@ -29,36 +26,10 @@ def alert(
    )
@dataclass
 class FauxSite:
    site_id: str
    capacity_kw: float | None = None
@dataclass
 class FauxLecture:
    site_id: str
    timestamp: datetime
    consumption_kw: float | None = None
    consumption_kwh: float | None = None
    data_quality: str | None = None
    null_reasons: list[str] | None = None
@dataclass
 class FauxPrediction:
    site_id: str
    target_at: datetime
    predicted_value: float | None
    target_metric: str = "consumption_kwh"
    prediction_id: int = 1
 class FakeRepository:
    def __init__(self, alerts: list[Alert]) -> None:
        self._alerts = alerts
        self.appels: list[tuple[str | None, str | None]] = []
        self.crees: list[Alert] = []
    async def list_all(
        self, *, site_id: str | None = None, severity: str | None = None
@@ -66,392 +37,19 @@ class FakeRepository:
        self.appels.append((site_id, severity))
        return self._alerts
    async def create_many(self, alerts: list[Alert]) -> list[Alert]:
        self.crees = list(alerts)
        return self.crees
@dataclass
 class FauxDepotLectures:
    depuis: list[FauxLecture] = field(default_factory=list)
    dernieres: list[FauxLecture] = field(default_factory=list)
    async def list_since(self, *, since: datetime, site_id: str | None = None) -> list[FauxLecture]:
        return [lecture for lecture in self.depuis if site_id is None or lecture.site_id == site_id]
    async def latest_by_site(self) -> list[FauxLecture]:
        return self.dernieres
@dataclass
 class FauxDepotPredictions:
    predictions: list[FauxPrediction] = field(default_factory=list)
    async def list_since(
        self, *, since: datetime, site_id: str | None = None
    ) -> list[FauxPrediction]:
        return [p for p in self.predictions if site_id is None or p.site_id == site_id]
@dataclass
 class FauxDepotSites:
    sites: list[FauxSite]
    async def list_all(self) -> list[FauxSite]:
        return self.sites
 def service(
    *,
    sites: list[FauxSite],
    lectures: list[FauxLecture] | None = None,
    dernieres: list[FauxLecture] | None = None,
    predictions: list[FauxPrediction] | None = None,
    alerts: FakeRepository | None = None,
 ) -> tuple[AlertService, FakeRepository]:
    depot_alertes = alerts or FakeRepository([])
    dernieres_lectures = dernieres if dernieres is not None else (lectures or [])
    return (
        AlertService(
            alerts=depot_alertes,  # type: ignore[arg-type]
            readings=FauxDepotLectures(depuis=lectures or [], dernieres=dernieres_lectures),  # type: ignore[arg-type]
            predictions=FauxDepotPredictions(predictions or []),  # type: ignore[arg-type]
            sites=FauxDepotSites(sites),  # type: ignore[arg-type]
        ),
        depot_alertes,
    )
 async def test_list_all_returns_the_repository_alerts() -> None:
-    svc, _ = service(sites=[], alerts=FakeRepository([alert(1), alert(2)]))
+    service = AlertService(alerts=FakeRepository([alert(1), alert(2)]))
-    alertes = await svc.list_all()
+    alertes = await service.list_all()
    assert [a.alert_id for a in alertes] == [1, 2]
 async def test_list_all_relays_the_filters_to_the_repository() -> None:
    depot = FakeRepository([])
-    svc, _ = service(sites=[], alerts=depot)
+    service = AlertService(alerts=depot)
-    await svc.list_all(site_id="site-1", severity="critical")
+    await service.list_all(site_id="site-1", severity="critical")
    assert depot.appels == [("site-1", "critical")]
 async def test_detect_raises_a_threshold_alert_above_site_capacity() -> None:
    svc, depot = service(
        sites=[FauxSite("A", capacity_kw=100.0)],
        lectures=[FauxLecture("A", NOW, consumption_kw=150.0)],
    )
    await svc.detect(now=NOW)
    (candidate,) = depot.crees
    assert candidate.type == "threshold"
    assert candidate.severity == "high"
    assert candidate.value == 150.0
    assert candidate.threshold == 100.0
    assert candidate.metric == "consumption_kw"
 async def test_detect_ignores_a_reading_within_capacity() -> None:
    svc, depot = service(
        sites=[FauxSite("A", capacity_kw=100.0)],
        lectures=[FauxLecture("A", NOW, consumption_kw=80.0)],
    )
    await svc.detect(now=NOW)
    assert depot.crees == []
 async def test_detect_ignores_threshold_when_the_site_has_no_declared_capacity() -> None:
    svc, depot = service(
        sites=[FauxSite("A", capacity_kw=None)],
        lectures=[FauxLecture("A", NOW, consumption_kw=9999.0)],
    )
    await svc.detect(now=NOW)
    assert depot.crees == []
 async def test_detect_raises_a_spike_alert_on_a_brutal_consecutive_variation() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=100.0),
            FauxLecture("A", NOW, consumption_kw=160.0),
        ],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "spike"]
    assert candidate.value == 160.0
    assert candidate.threshold == 100.0
    assert candidate.timestamp == NOW
 async def test_detect_ignores_a_moderate_consecutive_variation() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=100.0),
            FauxLecture("A", NOW, consumption_kw=110.0),
        ],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "spike"] == []
 async def test_detect_never_compares_consecutive_readings_across_two_sites() -> None:
    svc, depot = service(
        sites=[FauxSite("A"), FauxSite("B")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=10.0),
            FauxLecture("B", NOW, consumption_kw=1000.0),
        ],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "spike"] == []
 async def test_detect_raises_an_anomaly_alert_far_from_the_matching_prediction() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, consumption_kwh=100.0)],
        predictions=[FauxPrediction("A", target_at=NOW, predicted_value=70.0)],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "anomaly"]
    assert candidate.value == 100.0
    assert candidate.threshold == 70.0
    assert candidate.metric == "consumption_kwh"
    assert candidate.prediction_id == 1
 async def test_detect_ignores_a_reading_close_to_its_prediction() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, consumption_kwh=100.0)],
        predictions=[FauxPrediction("A", target_at=NOW, predicted_value=95.0)],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "anomaly"] == []
 async def test_detect_ignores_a_prediction_whose_target_at_does_not_match_the_reading() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, consumption_kwh=100.0)],
        predictions=[FauxPrediction("A", target_at=NOW - timedelta(hours=1), predicted_value=1.0)],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "anomaly"] == []
 async def test_detect_keeps_the_most_recent_run_when_two_predictions_share_the_same_target() -> (
    None
 ):
    # `PredictionRepository.list_since` départage les égalités de `target_at` par `prediction_id`
    # croissant : le repository fait donc déjà passer le run le plus récent en dernier dans la
    # liste, et c'est ce dernier que le dict de `_detect_anomaly` doit retenir.
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, consumption_kwh=100.0)],
        predictions=[
            FauxPrediction("A", target_at=NOW, predicted_value=100.0, prediction_id=1),
            FauxPrediction("A", target_at=NOW, predicted_value=70.0, prediction_id=2),
        ],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "anomaly"]
    assert candidate.threshold == 70.0
    assert candidate.prediction_id == 2
 async def test_detect_raises_an_outage_alert_past_the_threshold() -> None:
    derniere = NOW - OUTAGE_THRESHOLD - timedelta(minutes=1)
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[],
        dernieres=[FauxLecture("A", derniere)],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "outage"]
    assert candidate.severity in {"low", "medium", "high", "critical"}
 async def test_detect_ignores_a_site_still_within_the_outage_threshold() -> None:
    derniere = NOW - OUTAGE_THRESHOLD + timedelta(minutes=1)
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[],
        dernieres=[FauxLecture("A", derniere)],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "outage"] == []
 async def test_detect_raises_a_critical_outage_alert_for_a_site_never_read() -> None:
    svc, depot = service(sites=[FauxSite("A")], lectures=[], dernieres=[])
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "outage"]
    assert candidate.severity == "critical"
    assert candidate.source_alert_id == "outage:jamais"
 async def test_detect_raises_a_sensor_alert_on_a_degraded_reading() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, data_quality="critical", null_reasons=["missing:x"])],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "sensor"]
    assert candidate.severity == "critical"
 async def test_detect_ignores_a_good_quality_reading_for_the_sensor_rule() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, data_quality="good")],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "sensor"] == []
 async def test_detect_scopes_to_a_single_site_when_asked() -> None:
    svc, depot = service(
        sites=[FauxSite("A", capacity_kw=100.0), FauxSite("B", capacity_kw=100.0)],
        lectures=[
            FauxLecture("A", NOW, consumption_kw=150.0),
            FauxLecture("B", NOW, consumption_kw=150.0),
        ],
    )
    await svc.detect(now=NOW, site_id="A")
    assert {a.site_id for a in depot.crees} == {"A"}
 async def test_detect_returns_early_when_there_is_no_site() -> None:
    svc, depot = service(sites=[])
    resultat = await svc.detect(now=NOW)
    assert resultat == []
    assert depot.crees == []
 async def test_detect_ignores_a_spike_pair_with_a_missing_measurement() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=None),
            FauxLecture("A", NOW, consumption_kw=160.0),
        ],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "spike"] == []
 async def test_detect_ignores_a_reading_still_at_zero_after_a_previous_zero() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=0.0),
            FauxLecture("A", NOW, consumption_kw=0.0),
        ],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "spike"] == []
 async def test_detect_raises_a_critical_spike_when_a_site_restarts_from_zero() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW - timedelta(hours=1), consumption_kw=0.0),
            FauxLecture("A", NOW, consumption_kw=50.0),
        ],
    )
    await svc.detect(now=NOW)
    (candidate,) = [a for a in depot.crees if a.type == "spike"]
    assert candidate.severity == "critical"
    assert candidate.value == 50.0
    assert candidate.threshold == 0.0
 async def test_detect_ignores_a_spike_pair_sharing_the_same_timestamp() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[
            FauxLecture("A", NOW, consumption_kw=100.0),
            FauxLecture("A", NOW, consumption_kw=160.0),
        ],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "spike"] == []
 async def test_detect_ignores_an_anomaly_when_the_prediction_is_near_zero() -> None:
    svc, depot = service(
        sites=[FauxSite("A")],
        lectures=[FauxLecture("A", NOW, consumption_kwh=5.0)],
        predictions=[FauxPrediction("A", target_at=NOW, predicted_value=0.0)],
    )
    await svc.detect(now=NOW)
    assert [a for a in depot.crees if a.type == "anomaly"] == []
 def test_severity_from_ratio_covers_every_band() -> None:
    assert _severity_from_ratio(1.0) == "low"
    assert _severity_from_ratio(1.2) == "medium"
    assert _severity_from_ratio(1.5) == "high"
    assert _severity_from_ratio(2.0) == "critical"
 async def test_detect_does_not_call_create_many_when_nothing_triggers() -> None:
    svc, depot = service(
        sites=[FauxSite("A", capacity_kw=100.0)],
        lectures=[FauxLecture("A", NOW, consumption_kw=10.0, data_quality="good")],
    )
    resultat = await svc.detect(now=NOW)
    assert resultat == []
    assert depot.crees == []
@@ -1,121 +0,0 @@
 from dataclasses import dataclass
 from datetime import UTC, datetime
 from app.services.prediction import PredictionService
 TARGET_AT = datetime(2026, 9, 16, 13, 0, tzinfo=UTC)
 CREATED_AT = datetime(2026, 9, 16, 12, 0, tzinfo=UTC)
@dataclass
 class FauxSite:
    site_id: str
    site_name: str
@dataclass
 class FauxPrediction:
    site_id: str
    target_at: datetime
    target_metric: str
    period_minutes: int | None
    predicted_value: float | None
    status: str
    failure_reason: str | None
    model_reference: str
    created_at: datetime
 class FauxDepotSites:
    def __init__(self, sites: list[FauxSite]) -> None:
        self._sites = sites
    async def list_all(self) -> list[FauxSite]:
        return self._sites
 class FauxDepotPredictions:
    def __init__(self, predictions: list[FauxPrediction]) -> None:
        self._predictions = predictions
    async def latest_by_site(self) -> list[FauxPrediction]:
        return self._predictions
 def prediction_disponible(site_id: str = "A") -> FauxPrediction:
    return FauxPrediction(
        site_id=site_id,
        target_at=TARGET_AT,
        target_metric="consumption_kwh",
        period_minutes=60,
        predicted_value=812.5,
        status="available",
        failure_reason=None,
        model_reference="lightgbm-abc123",
        created_at=CREATED_AT,
    )
 async def test_summary_attaches_the_latest_prediction_to_its_site() -> None:
    service = PredictionService(
        sites=FauxDepotSites([FauxSite("A", "Site A")]),  # type: ignore[arg-type]
        predictions=FauxDepotPredictions([prediction_disponible("A")]),  # type: ignore[arg-type]
    )
    resume = await service.summary()
    site = resume.sites[0]
    assert site.site_id == "A"
    assert site.prediction is not None
    assert site.prediction.predicted_value == 812.5
    assert site.prediction.status == "available"
 async def test_summary_leaves_prediction_none_for_a_site_never_scored() -> None:
    service = PredictionService(
        sites=FauxDepotSites([FauxSite("A", "Site A")]),  # type: ignore[arg-type]
        predictions=FauxDepotPredictions([]),  # type: ignore[arg-type]
    )
    resume = await service.summary()
    assert resume.sites[0].prediction is None
 async def test_summary_carries_an_insufficient_data_prediction_without_a_value() -> None:
    insuffisante = FauxPrediction(
        site_id="A",
        target_at=TARGET_AT,
        target_metric="consumption_kwh",
        period_minutes=60,
        predicted_value=None,
        status="insufficient_data",
        failure_reason="pas assez d'historique",
        model_reference="lightgbm-abc123",
        created_at=CREATED_AT,
    )
    service = PredictionService(
        sites=FauxDepotSites([FauxSite("A", "Site A")]),  # type: ignore[arg-type]
        predictions=FauxDepotPredictions([insuffisante]),  # type: ignore[arg-type]
    )
    resume = await service.summary()
    site = resume.sites[0]
    assert site.prediction is not None
    assert site.prediction.status == "insufficient_data"
    assert site.prediction.predicted_value is None
    assert site.prediction.failure_reason == "pas assez d'historique"
 async def test_summary_covers_every_site_even_with_a_single_prediction_in_the_repository() -> None:
    service = PredictionService(
        sites=FauxDepotSites([FauxSite("A", "Site A"), FauxSite("B", "Site B")]),  # type: ignore[arg-type]
        predictions=FauxDepotPredictions([prediction_disponible("A")]),  # type: ignore[arg-type]
    )
    resume = await service.summary()
    par_site = {site.site_id: site for site in resume.sites}
    assert par_site["A"].prediction is not None
    assert par_site["B"].prediction is None
@@ -116,11 +116,13 @@ async def test_list_history_normalizes_naive_datetimes_to_utc() -> None:
 async def test_list_history_raises_when_start_is_after_end() -> None:
    service = ReadingService(readings=FakeRepository([]))
    debut = datetime(2026, 9, 2, tzinfo=UTC)
    fin = datetime(2026, 9, 1, tzinfo=UTC)
    with pytest.raises(FenetreInverseeError):
-        await service.list_history(start=debut, end=fin, limit=500, offset=0)
+        await service.list_history(
            start=datetime(2026, 9, 2, tzinfo=UTC),
            end=datetime(2026, 9, 1, tzinfo=UTC),
            limit=500,
            offset=0,
        )
 async def test_list_history_raises_when_start_equals_end() -> None:
@@ -1,14 +1,10 @@
 from collections.abc import Sequence
 from datetime import UTC, datetime
 import pytest
-from app.models.energy import Alert, Recommendation
+from app.models.energy import Recommendation
 from app.repositories.recommendation import NouvelleRecommandation
 from app.services.recommendation import RecommendationNotFoundError, RecommendationService
 MOMENT = datetime(2024, 1, 1, tzinfo=UTC)
 def recommendation(recommendation_id: int = 1) -> Recommendation:
    return Recommendation(
@@ -17,33 +13,13 @@ def recommendation(recommendation_id: int = 1) -> Recommendation:
        action="Vérifier la consommation",
        explanation="Pic détecté",
        rule_reference="spike-v1",
-        created_at=MOMENT,
+        created_at=datetime(2024, 1, 1, tzinfo=UTC),
    )
 def alerte(alert_id: int = 1, site_id: str = "SITE001", severity: str = "high") -> Alert:
    return Alert(
        alert_id=alert_id,
        source_alert_id=f"ALR-{alert_id}",
        site_id=site_id,
        source="api_mock",
        timestamp=MOMENT,
        type="spike",
        severity=severity,
        message="Pic de consommation",
        value=None,
        threshold=None,
        metric=None,
        prediction_id=None,
        raw_data={},
    )
 class FakeRepository:
-    def __init__(self, recommendations: list[Recommendation], creees: int | None = None) -> None:
+    def __init__(self, recommendations: list[Recommendation]) -> None:
        self._recommendations = recommendations
        self._creees = creees
        self.recues: list[NouvelleRecommandation] = []
    async def list_all(self) -> list[Recommendation]:
        return self._recommendations
@@ -53,111 +29,27 @@ class FakeRepository:
            (r for r in self._recommendations if r.recommendation_id == recommendation_id), None
        )
    async def create_missing(self, nouvelles: Sequence[NouvelleRecommandation]) -> int:
        self.recues = list(nouvelles)
        return len(self.recues) if self._creees is None else self._creees
 class FakeAlertRepository:
    def __init__(self, alertes: list[Alert]) -> None:
        self._alertes = alertes
        self.site_demande: str | None = None
    async def list_all(
        self, *, site_id: str | None = None, severity: str | None = None
    ) -> list[Alert]:
        self.site_demande = site_id
        if site_id is None:
            return self._alertes
        return [a for a in self._alertes if a.site_id == site_id]
 class FakeTransaction:
    def __init__(self) -> None:
        self.commits = 0
    async def commit(self) -> None:
        self.commits += 1
 def service(
    recommendations: FakeRepository | None = None,
    alerts: FakeAlertRepository | None = None,
    transaction: FakeTransaction | None = None,
 ) -> RecommendationService:
    return RecommendationService(
        recommendations=recommendations or FakeRepository([]),
        alerts=alerts or FakeAlertRepository([]),
        transaction=transaction or FakeTransaction(),
    )
 async def test_list_all_returns_the_repository_recommendations() -> None:
-    depot = FakeRepository([recommendation(1), recommendation(2)])
+    service = RecommendationService(
        recommendations=FakeRepository([recommendation(1), recommendation(2)])
    )
-    recommendations = await service(recommendations=depot).list_all()
+    recommendations = await service.list_all()
    assert [r.recommendation_id for r in recommendations] == [1, 2]
 async def test_get_by_id_returns_the_matching_recommendation() -> None:
-    trouve = await service(recommendations=FakeRepository([recommendation(1)])).get_by_id(1)
+    service = RecommendationService(recommendations=FakeRepository([recommendation(1)]))
    trouve = await service.get_by_id(1)
    assert trouve.recommendation_id == 1
 async def test_get_by_id_raises_when_the_recommendation_is_unknown() -> None:
    service = RecommendationService(recommendations=FakeRepository([]))
    with pytest.raises(RecommendationNotFoundError):
-        await service().get_by_id(404)
+        await service.get_by_id(404)
 async def test_generate_persists_one_proposal_per_triggered_rule() -> None:
    depot = FakeRepository([])
    rapport = await service(
        recommendations=depot, alerts=FakeAlertRepository([alerte(severity="critical")])
    ).generate()
    assert {n.rule_reference for n in depot.recues} == {
        "spike-delestage-v1",
        "escalade-astreinte-v1",
    }
    assert rapport.recommandations_creees == 2
 async def test_generate_commits_once() -> None:
    transaction = FakeTransaction()
    await service(alerts=FakeAlertRepository([alerte()]), transaction=transaction).generate()
    assert transaction.commits == 1
 async def test_generate_restricts_the_alerts_to_the_requested_site() -> None:
    alertes = FakeAlertRepository([alerte(1, site_id="SITE001"), alerte(2, site_id="SITE002")])
    depot = FakeRepository([])
    rapport = await service(recommendations=depot, alerts=alertes).generate(site_id="SITE002")
    assert alertes.site_demande == "SITE002"
    assert rapport.alertes_examinees == 1
    assert {n.alert_id for n in depot.recues} == {2}
 async def test_generate_reports_nothing_when_no_alert_matches() -> None:
    rapport = await service().generate()
    assert rapport.alertes_examinees == 0
    assert rapport.recommandations_creees == 0
    assert rapport.deja_presentes == 0
 async def test_generate_counts_the_proposals_the_database_already_held() -> None:
    depot = FakeRepository([], creees=0)
    rapport = await service(
        recommendations=depot, alerts=FakeAlertRepository([alerte()])
    ).generate()
    assert rapport.recommandations_creees == 0
    assert rapport.deja_presentes == 1
@@ -1,142 +0,0 @@
 from datetime import UTC, datetime
 import pytest
 from app.models.energy import Alert
 from app.services.recommendation_rules import FACTEUR_DEPASSEMENT_MAJEUR, applique_les_regles
 MOMENT = datetime(2024, 1, 1, tzinfo=UTC)
 def alerte(
    *,
    alert_id: int = 1,
    type_alerte: str = "spike",
    severity: str = "high",
    value: float | None = None,
    threshold: float | None = None,
    metric: str | None = None,
    site_id: str = "SITE001",
 ) -> Alert:
    return Alert(
        alert_id=alert_id,
        source_alert_id=f"ALR-{alert_id}",
        site_id=site_id,
        source="api_mock",
        timestamp=MOMENT,
        type=type_alerte,
        severity=severity,
        message="Alerte de test",
        value=value,
        threshold=threshold,
        metric=metric,
        prediction_id=None,
        raw_data={},
    )
@pytest.mark.parametrize(
    ("type_alerte", "attendue"),
    [
        ("spike", "spike-delestage-v1"),
        ("threshold", "threshold-reduction-v1"),
        ("outage", "outage-secours-v1"),
        ("sensor", "sensor-maintenance-v1"),
        ("anomaly", "anomaly-verification-v1"),
    ],
    ids=["pic", "seuil", "coupure", "capteur", "anomalie"],
 )
 def test_each_alert_type_yields_its_own_rule(type_alerte: str, attendue: str) -> None:
    proposees = applique_les_regles(alerte(type_alerte=type_alerte))
    assert [p.rule_reference for p in proposees] == [attendue]
 def test_a_critical_alert_adds_the_escalation_rule() -> None:
    proposees = applique_les_regles(alerte(severity="critical"))
    assert "escalade-astreinte-v1" in {p.rule_reference for p in proposees}
@pytest.mark.parametrize("severity", ["low", "medium", "high"], ids=["faible", "moyenne", "haute"])
 def test_a_non_critical_alert_does_not_escalate(severity: str) -> None:
    proposees = applique_les_regles(alerte(severity=severity))
    assert "escalade-astreinte-v1" not in {p.rule_reference for p in proposees}
 def test_a_large_overshoot_adds_the_contract_rule() -> None:
    proposees = applique_les_regles(
        alerte(value=720.0 * FACTEUR_DEPASSEMENT_MAJEUR, threshold=720.0)
    )
    assert "contrat-puissance-v1" in {p.rule_reference for p in proposees}
 def test_an_overshoot_below_the_factor_does_not_add_the_contract_rule() -> None:
    proposees = applique_les_regles(alerte(value=800.0, threshold=720.0))
    assert "contrat-puissance-v1" not in {p.rule_reference for p in proposees}
@pytest.mark.parametrize(
    ("value", "threshold"),
    [(None, 720.0), (900.0, None), (900.0, 0.0), (900.0, -10.0)],
    ids=["sans mesure", "sans seuil", "seuil nul", "seuil negatif"],
 )
 def test_the_contract_rule_stays_silent_without_an_exploitable_threshold(
    value: float | None, threshold: float | None
 ) -> None:
    proposees = applique_les_regles(alerte(value=value, threshold=threshold))
    assert "contrat-puissance-v1" not in {p.rule_reference for p in proposees}
 def test_the_explanation_quotes_the_measure_and_the_threshold() -> None:
    proposees = applique_les_regles(alerte(value=812.5, threshold=720.0, metric="consumption_kw"))
    assert "(consumption_kw mesurée à 812.5, seuil 720.0)" in proposees[0].explanation
 def test_the_explanation_quotes_the_measure_alone_when_no_threshold_is_known() -> None:
    proposees = applique_les_regles(alerte(value=812.5, metric="consumption_kw"))
    assert "(consumption_kw mesurée à 812.5)" in proposees[0].explanation
 def test_the_explanation_omits_the_measure_when_the_alert_carries_none() -> None:
    proposees = applique_les_regles(alerte())
    assert "(" not in proposees[0].explanation
 def test_the_explanation_names_the_site() -> None:
    proposees = applique_les_regles(alerte(site_id="SITE042"))
    assert "SITE042" in proposees[0].explanation
 def test_every_proposal_carries_the_alert_identifier() -> None:
    proposees = applique_les_regles(alerte(alert_id=77, severity="critical"))
    assert {p.alert_id for p in proposees} == {77}
 def test_an_alert_never_yields_the_same_rule_twice() -> None:
    proposees = applique_les_regles(
        alerte(severity="critical", value=900.0, threshold=720.0, metric="consumption_kw")
    )
    assert len(proposees) == len({p.rule_reference for p in proposees})
 def test_a_critical_alert_over_the_threshold_yields_the_three_rules() -> None:
    proposees = applique_les_regles(
        alerte(severity="critical", value=900.0, threshold=720.0, metric="consumption_kw")
    )
    assert {p.rule_reference for p in proposees} == {
        "spike-delestage-v1",
        "escalade-astreinte-v1",
        "contrat-puissance-v1",
    }
@@ -235,7 +235,5 @@ async def test_every_operation_refuses_an_unknown_account(action: str) -> None:
    if action == "set_active":
        arguments["is_active"] = False
    methode = getattr(attirail.service, action)
    with pytest.raises(UserNotFoundError):
-        await methode(**arguments)
+        await getattr(attirail.service, action)(**arguments)
@@ -19,17 +19,13 @@ def test_build_parser_reads_the_create_admin_arguments() -> None:
 def test_build_parser_requires_a_subcommand() -> None:
    parser = cli.build_parser()
    with pytest.raises(SystemExit):
-        parser.parse_args([])
+        cli.build_parser().parse_args([])
 def test_build_parser_requires_an_email() -> None:
    parser = cli.build_parser()
    with pytest.raises(SystemExit):
-        parser.parse_args(["create-admin"])
+        cli.build_parser().parse_args(["create-admin"])
 def test_read_password_generates_a_long_secret_when_asked(
@@ -122,30 +118,3 @@ def test_main_exports_the_contract_without_asking_for_a_password(
    assert code == 0
    assert destination.exists()
    assert str(destination) in capsys.readouterr().out
 def test_build_parser_reads_the_generate_recommendations_arguments() -> None:
    arguments = cli.build_parser().parse_args(["generate-recommendations", "--site-id", "SITE002"])
    assert arguments.commande == "generate-recommendations"
    assert arguments.site_id == "SITE002"
 def test_build_parser_defaults_the_generation_to_every_site() -> None:
    arguments = cli.build_parser().parse_args(["generate-recommendations"])
    assert arguments.site_id is None
 def test_main_generates_the_recommendations_without_asking_for_a_password(
    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str]
 ) -> None:
    async def fausse_generation(*, site_id: str | None) -> str:
        return f"génération lancée pour {site_id}"
    monkeypatch.setattr(cli, "generate_recommendations", fausse_generation)
    code = cli.main(["generate-recommendations", "--site-id", "SITE002"])
    assert code == 0
    assert "SITE002" in capsys.readouterr().out
@@ -1,87 +0,0 @@
 from datetime import UTC, datetime
 import pytest
 from sqlalchemy import text
 from sqlalchemy.ext.asyncio import AsyncSession
 from app.db.session import get_session_factory
 from app.detection import internal_alerts
 from app.repositories.alert import AlertRepository
 from tests.repositories.test_reading import creer_lecture
 from tests.repositories.test_site import creer as creer_site
 def test_parse_args_defaults_to_no_site_and_no_instant() -> None:
    arguments = internal_alerts.parse_args([])
    assert arguments.site_id is None
    assert arguments.now is None
 def test_parse_args_reads_the_site_id() -> None:
    arguments = internal_alerts.parse_args(["--site-id", "site-1"])
    assert arguments.site_id == "site-1"
 def test_parse_args_parses_the_instant_option() -> None:
    arguments = internal_alerts.parse_args(["--now", "2026-09-16T12:00:00+00:00"])
    assert arguments.now == datetime(2026, 9, 16, 12, tzinfo=UTC)
 def test_parse_instant_treats_a_naive_datetime_as_utc() -> None:
    assert internal_alerts._parse_instant("2026-09-16T12:00:00") == datetime(
        2026, 9, 16, 12, tzinfo=UTC
    )
 def test_main_prints_how_many_alerts_were_recorded(
    monkeypatch: pytest.MonkeyPatch, capsys: pytest.CaptureFixture[str]
 ) -> None:
    async def fausse_execution(*, now: datetime | None, site_id: str | None) -> int:
        return 3
    monkeypatch.setattr(internal_alerts, "run_detection", fausse_execution)
    code = internal_alerts.main([])
    assert code == 0
    assert "3 nouvelle" in capsys.readouterr().out
@pytest.mark.integration
 async def test_run_detection_writes_a_threshold_alert_end_to_end(session: AsyncSession) -> None:
    # `run_detection` ouvre sa propre session et commite : `session.rollback()` seul ne défait
    # rien ici (contrairement au reste de la suite), d'où le nettoyage explicite ci-dessous, sur
    # le modèle de `tests/api/test_matrice_acces.py`.
    site = await creer_site(session, capacity_kw=100.0)
    site_id = site.site_id
    instant = datetime(2026, 9, 16, 12, tzinfo=UTC)
    await creer_lecture(session, site_id=site_id, timestamp=instant, consumption_kw=150.0)
    await session.commit()
    try:
        nombre = await internal_alerts.run_detection(now=instant, site_id=site_id)
        alertes = await AlertRepository(session).list_all(site_id=site_id)
        types = [a.type for a in alertes]
        await session.rollback()
        assert nombre == 1
        assert types == ["threshold"]
    finally:
        # `site.site_id` n'est plus sûr après `session.rollback()` : le rollback expire tous les
        # objets de la session (indépendamment d'`expire_on_commit`), et y accéder ici relance une
        # requête hors contexte async. D'où `site_id`, capturé avant.
        async with get_session_factory()() as nettoyage:
            await nettoyage.execute(
                text("delete from alert where site_id = :site_id"), {"site_id": site_id}
            )
            await nettoyage.execute(
                text("delete from reading where site_id = :site_id"), {"site_id": site_id}
            )
            await nettoyage.execute(
                text("delete from site where site_id = :site_id"), {"site_id": site_id}
            )
            await nettoyage.commit()
@@ -326,7 +326,6 @@ dependencies = [
    { name = "argon2-cffi" },
    { name = "asyncpg" },
    { name = "fastapi" },
    { name = "httpx" },
    { name = "pandas" },
    { name = "prometheus-fastapi-instrumentator" },
    { name = "pydantic", extra = ["email"] },
@@ -339,6 +338,7 @@ dependencies = [
 [package.dev-dependencies]
 dev = [
    { name = "httpx" },
    { name = "mypy" },
    { name = "pandas-stubs" },
    { name = "pytest" },
@@ -355,7 +355,6 @@ requires-dist = [
    { name = "argon2-cffi", specifier = ">=23.1" },
    { name = "asyncpg", specifier = ">=0.31.0" },
    { name = "fastapi", specifier = ">=0.141.1" },
    { name = "httpx", specifier = ">=0.28.1" },
    { name = "pandas", specifier = ">=3.0.5" },
    { name = "prometheus-fastapi-instrumentator", specifier = ">=8.1.0" },
    { name = "pydantic", extras = ["email"], specifier = ">=2.13.5" },
@@ -368,6 +367,7 @@ requires-dist = [
 [package.metadata.requires-dev]
 dev = [
    { name = "httpx", specifier = ">=0.28.1" },
    { name = "mypy", specifier = ">=2.3.1" },
    { name = "pandas-stubs", specifier = ">=3.0.5.260914" },
    { name = "pytest", specifier = ">=9.1.1" },
@@ -655,31 +655,31 @@ wheels = [
 [[package]]
 name = "pandas"
-version = "3.0.6"
+version = "3.0.5"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
    { name = "numpy" },
    { name = "python-dateutil" },
    { name = "tzdata", marker = "sys_platform == 'emscripten' or sys_platform == 'win32'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/e2/17/d7b106e05bfa642e8694451e7d3d759c6a241c5386a5d962e4f66c047e06/pandas-3.0.6.tar.gz", hash = "sha256:66b07ef7315a31bfe1089cd3d71a7de781c9dca986762d0b4fe7c0ef17465d10", size = 4667686, upload-time = "2026-09-17T23:23:18.345Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/be/4f/5f3422a2afec5ffc46308b79e53291365a93748b498ac2e58bead0197916/pandas-3.0.5.tar.gz", hash = "sha256:dca3734d6ab7c906e6730f0788b0a1dbb9f2467731f9711f77995c8e9d62d712", size = 4658219, upload-time = "2026-07-22T22:19:28.819Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/75/55/1a8875395b05ccd572cbca0b9255dcd2db6e6508e632a558c1a6884b39ad/pandas-3.0.6-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:ee913a91669056c1de1a6b733fbfeab711de9e54e3bee2dfa5fe79d9457247d1", size = 10492213, upload-time = "2026-09-17T23:21:40.746Z" },
+    { url = "https://files.pythonhosted.org/packages/51/2f/cf6aae281264f4463f0875bcbb15fd2bb6d291cc535187dad1732475e4a9/pandas-3.0.5-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:2f264fc46911cc8131a7322a16199bbf8e353d27c10bb211f5bd0c814324dc36", size = 10390034, upload-time = "2026-07-22T22:18:49.818Z" },
-    { url = "https://files.pythonhosted.org/packages/35/61/47ae13476995cc8a40cd609e93e7cf11f273d8692925c2903cb6d38aa0d1/pandas-3.0.6-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:ff51a4459ed036e93d1eb1bb5e6e7b28685d3cb6b7c12b91c05b31024e234729", size = 10156618, upload-time = "2026-09-17T23:21:44.142Z" },
+    { url = "https://files.pythonhosted.org/packages/06/ec/5189518c7a7659c4bdcc6b1eb32c46c6f3c86b0661ffd84143d1112c7732/pandas-3.0.5-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:53730687fcd161883b24e10411c06d6a4c0f2275d2faf3bb2bc25deb4ba8007c", size = 9980065, upload-time = "2026-07-22T22:18:52.249Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/f2/cc5f2adb8d6e86a85d9fb5128f8cf205a61189336f70d1f7faf0d1b53ec9/pandas-3.0.6-cp314-cp314-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:654aae059295dbba6ecd2328ca12712a2cf1676214c8699f1c29213f7ccf9c34", size = 10375479, upload-time = "2026-09-17T23:21:47.159Z" },
+    { url = "https://files.pythonhosted.org/packages/ea/f1/598503ce8d7e3c35601e0747ba288c7864baae66380725bc12f13f884dfe/pandas-3.0.5-cp314-cp314-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:960d3ebcf249f75206899fcd2c6de53f736b7265759ced0d3e559df0b8b709b0", size = 10545532, upload-time = "2026-07-22T22:18:54.813Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/ba/ffdcb19be4ff6bfe7d969e7cef2c567c633df5a3a1cc1053394ad053bca8/pandas-3.0.6-cp314-cp314-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:62f51d7f651c8054c5e82a69265c98082e795d1442df7ca6edc3a545d61214b1", size = 10783244, upload-time = "2026-09-17T23:21:50.367Z" },
+    { url = "https://files.pythonhosted.org/packages/fa/de/ceae2adf7034e07e9910299fe412e1819c4f0dd520700a888bcb03625448/pandas-3.0.5-cp314-cp314-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:9e94c2c5ca43bd3ca32bf64d32308887b65e5f9bfd8023ea52755107a999f93b", size = 10963120, upload-time = "2026-07-22T22:18:57.42Z" },
-    { url = "https://files.pythonhosted.org/packages/77/5b/e150075b2c6eb69fae896f2d9239bc6ed07db97735971d53d66de6553460/pandas-3.0.6-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:22172a92e7ee678ec0140c7af4fc9366b55413834a1cd86af78b3caa0b0574de", size = 11382223, upload-time = "2026-09-17T23:21:53.355Z" },
+    { url = "https://files.pythonhosted.org/packages/66/25/86e0f4451874eb79e688deeebe3c451fec4557f8952005818d800ee8ac7e/pandas-3.0.5-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:e819dd5f62966b481a8cb649d3299ebd886a1ea91ed5a99bf7ce77c98d18ab94", size = 11563178, upload-time = "2026-07-22T22:18:59.729Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/8a/b441c587dc7355bf6e1f68a91b4f76a6c29740f0c23be3acc5d4ebbeea6d/pandas-3.0.6-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:583be68728a31d0d750d5b8d9e00f02b153df0d4655f858bde93cb84cfc4227c", size = 11854881, upload-time = "2026-09-17T23:21:56.342Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/45/8643daa3b4147e433adfcccefdd0380d3aad79d86b15d8999730fe1944d5/pandas-3.0.5-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:3c5ed2e7c06e91d340dfd091d7934f9bc82e4a36b95f647f090b9d1c9ac649da", size = 12028708, upload-time = "2026-07-22T22:19:02.164Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/e9/f43410fada510b43fec09993c08f552086c3d247d3ee801a678f3cb10ea5/pandas-3.0.6-cp314-cp314-win_amd64.whl", hash = "sha256:77ccbe5057aece6fc172b9b77f19c04335af6882bc2e10c8f3ee4e6bfb3da553", size = 9791672, upload-time = "2026-09-17T23:21:59.332Z" },
+    { url = "https://files.pythonhosted.org/packages/96/58/ad979ae617615576e8aafd569c9d4b62f1191d896e38f51d66ba06f3b89a/pandas-3.0.5-cp314-cp314-win_amd64.whl", hash = "sha256:cd8f7c6dc98527058ee6264219343f5392240a6f1bfa654fc5d79023020d0c92", size = 9951806, upload-time = "2026-07-22T22:19:04.596Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/9e/db14c059c21f9baa1907d436f8bf30e0c76c6288225c5e8b79a08ba8b2c5/pandas-3.0.6-cp314-cp314-win_arm64.whl", hash = "sha256:fb625f426b375bcc96e3a04c5d5d266cd7be6ae5d6866e0e703382ab5164068c", size = 9121246, upload-time = "2026-09-17T23:22:02.123Z" },
+    { url = "https://files.pythonhosted.org/packages/69/32/7ac03886b304049a9d2625ee88f59af760d8a93bd30ed9239bce7b9869a8/pandas-3.0.5-cp314-cp314-win_arm64.whl", hash = "sha256:5183427f5a8156d480f30333777bc978be93650a49a7c01db26adffe95b31e85", size = 9238297, upload-time = "2026-07-22T22:19:06.836Z" },
-    { url = "https://files.pythonhosted.org/packages/67/ba/bad0f8dac020ab38a8637fddab01a57a82da7a496a6e6f19590aad53ab62/pandas-3.0.6-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:9e492cd4bdba6778de4fe0df7f4590c012161ebcf9902dce01b01dc683105514", size = 10920612, upload-time = "2026-09-17T23:22:05.404Z" },
+    { url = "https://files.pythonhosted.org/packages/be/ed/1d1f2ee5547d5167face2376d11c8b2a4c7bfff5a416ee7a9046891fab1e/pandas-3.0.5-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:303da736987d481074ca720ada325f8bd80c64ebc2d45ed79b29df3aaa4a26ca", size = 10849690, upload-time = "2026-07-22T22:19:09.391Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/a9/b500982e9aac6d52a58da4ad3f11e14168a315b06906b3f397c427878065/pandas-3.0.6-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:d7dcd21238cbb4828ff148481ba01cac8946dc5121457b5aeba28636f8f99a60", size = 10570213, upload-time = "2026-09-17T23:22:08.44Z" },
+    { url = "https://files.pythonhosted.org/packages/57/55/17e17152e98fbb0c4b1e562bc65387a2f20a80db0f4a86bf8d3a0e4248d4/pandas-3.0.5-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:3b2801bbb049d0136f6c213eae02b5fca969384fc2064dd728d8620552aa49da", size = 10509945, upload-time = "2026-07-22T22:19:11.773Z" },
-    { url = "https://files.pythonhosted.org/packages/4b/fa/e6ecd0073c98be8f840ac3125b955272835d7d9fd69f5944383b164deb5e/pandas-3.0.6-cp314-cp314t-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:6ff482fa91fa2bafd92e8fe66ce3645c851824310f295c1f0a2f96e928fc4541", size = 10252356, upload-time = "2026-09-17T23:22:11.302Z" },
+    { url = "https://files.pythonhosted.org/packages/88/90/817d44dbf83facf9556f33576d9af0a241981e7bb5c00606c0bcb5df8dda/pandas-3.0.5-cp314-cp314t-manylinux_2_24_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:cce3a9d11d2b1f82c69a27ec1f4948a170e2c403c4bbfa8cca62e3fdebe2ef3a", size = 10392197, upload-time = "2026-07-22T22:19:14.024Z" },
-    { url = "https://files.pythonhosted.org/packages/04/f5/001e230a7a7803590d9275a1a3f7e1bb605e3a495cfe5e8d3a532090621b/pandas-3.0.6-cp314-cp314t-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:db7ec631f26223beee8e5c9e0b8f23c24d8197bbd1d982421d4e3188bea51965", size = 10655952, upload-time = "2026-09-17T23:22:14.283Z" },
+    { url = "https://files.pythonhosted.org/packages/f1/da/889f00c0a6f5aa1545add70abbf01502dff87ab577adb855bd631c54d2f2/pandas-3.0.5-cp314-cp314t-manylinux_2_24_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:ef01af4d8dc6cd2c8d6c7736f149574ef93fe043811eeb5e445f2647154b5040", size = 10862726, upload-time = "2026-07-22T22:19:16.351Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/ab/bab587148a3852c96aae26c4b5f9e04ce2221801ad94e166b4fbf969ede0/pandas-3.0.6-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:bd75ed0c840f709fc2ae26ddd9534ac77ca1a48ac0cce521a74acaa85f3340a7", size = 11274177, upload-time = "2026-09-17T23:22:17.352Z" },
+    { url = "https://files.pythonhosted.org/packages/bc/98/f1e934fb3c98fce859c6147c6785816c7b5b9ab7821115c5d8c4de9842b9/pandas-3.0.5-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:e2759e890db96dfcffdbd9b86c3c2cb6afaf58def482820317e06163ec1066cd", size = 11414864, upload-time = "2026-07-22T22:19:18.981Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/32/74b48d87df2b80892d713c149abfe36d5db4de41b4eccb042a2bc07dafc1/pandas-3.0.6-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:ef738d71d1059245b6bb03e312be06d8b3821326a83486c1ad03b9aba3710e44", size = 11719041, upload-time = "2026-09-17T23:22:20.227Z" },
+    { url = "https://files.pythonhosted.org/packages/fe/be/d448af7d657d82e1888dd8551f79c6d6fb161080b5b9752d84d910ec2319/pandas-3.0.5-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:b58b1b39d46a5862e3fb18f50d1a201398619d16a0f9f73f57eea5583cf0e63c", size = 11925105, upload-time = "2026-07-22T22:19:21.515Z" },
-    { url = "https://files.pythonhosted.org/packages/f6/c6/d64b72d64d7eb0fad9fe424d34138e45dee70ddbea1360dcd0adf30e28f6/pandas-3.0.6-cp314-cp314t-win_amd64.whl", hash = "sha256:429d9df32731ab01383ed98f2baa7a60368090d1a94fc06019a12062510e8630", size = 10191388, upload-time = "2026-09-17T23:22:23.524Z" },
+    { url = "https://files.pythonhosted.org/packages/29/c1/ccb4238212c8c4f496c584f3044d94e0c030ed8e1d68999db46c91c2242f/pandas-3.0.5-cp314-cp314t-win_amd64.whl", hash = "sha256:1c10461f6eeb35d8f05b6184c65c8b9991663b66c46b1d559b682cb34ae7c6ea", size = 10387612, upload-time = "2026-07-22T22:19:24.257Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/30/5e5b2ccabeca73ae2b03fc82bca3eabb7466cf43737f05ac08d591665d47/pandas-3.0.6-cp314-cp314t-win_arm64.whl", hash = "sha256:a4dbd4dc65cbe645b92b8785d0f96dd7311010dc6606cf620e51b07b8788a12a", size = 9387796, upload-time = "2026-09-17T23:22:26.64Z" },
+    { url = "https://files.pythonhosted.org/packages/d2/cf/6a51b2c38980e04c279fd2fa908a1b0982064e860444acfca4ec2e2c8359/pandas-3.0.5-cp314-cp314t-win_arm64.whl", hash = "sha256:3c5015fd1730fbf883647e88068176c839c102cea883ba1769a6f4593bfc1f8c", size = 9509776, upload-time = "2026-07-22T22:19:26.694Z" },
 ]
 [[package]]
@@ -936,27 +936,27 @@ wheels = [
 [[package]]
 name = "ruff"
-version = "0.16.8"
+version = "0.16.7"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ba/78/449cb84790bd5cc3823b2652ee405a4558856e5c4195aee3a16bf7b3eb5d/ruff-0.16.8.tar.gz", hash = "sha256:9247bf92b5f04d825c8639a4fe423ec2e4222acd9222e58412b0dab7e442798b", size = 4938814, upload-time = "2026-09-16T15:54:46.688Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/82/bb/5a449b9162e49b139d72f61672bd3ac1d790221f796d3304e2241fff4c58/ruff-0.16.7.tar.gz", hash = "sha256:5f71d004ac1263b22fa39462ac5ae618a4b77d58981af2cc79bf79a29c12b1a6", size = 4924184, upload-time = "2026-09-10T18:04:06.336Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/ac/25/6071aabc530e9be7e2c195e8fe3f7aea2735405b6cf447212832d7811831/ruff-0.16.8-py3-none-linux_armv6l.whl", hash = "sha256:6ffbd6d87383c1edf5f6fa890f10200950240d7c1a16052a19a09d3a2307dd38", size = 10048966, upload-time = "2026-09-16T15:53:57.605Z" },
+    { url = "https://files.pythonhosted.org/packages/e3/b2/c80aeeb7f9e469c0d63a85d2f1ab6e1ebfbe10ea7a8d2438b7e09e3ff09e/ruff-0.16.7-py3-none-linux_armv6l.whl", hash = "sha256:727307773e7c7f9181d3ed3a2484186e56c1fa1874255911c74585eb2c7c19f9", size = 10048917, upload-time = "2026-09-10T18:03:30.28Z" },
-    { url = "https://files.pythonhosted.org/packages/54/98/07f90ecbc74dd5fb5764f11f2bc774d6a7cffef92d2ff5f5b4e9e23c754e/ruff-0.16.8-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:42ed6b878ed61e3acca92f2730a17acff39286944ea82398544696366a6f925e", size = 10165498, upload-time = "2026-09-16T15:54:01.14Z" },
+    { url = "https://files.pythonhosted.org/packages/7b/96/20bb7bcae008004df52afcb7ac83432d4a467f2c17b672fe46d26be231c5/ruff-0.16.7-py3-none-macosx_10_12_x86_64.whl", hash = "sha256:9d61c258deabf58f34c67bd4bb4d939c7f2e6b5f0e59c1cdd1cf771b11cde929", size = 10242929, upload-time = "2026-09-10T18:03:32.706Z" },
-    { url = "https://files.pythonhosted.org/packages/fe/1f/e6a712e3b47cad4a40600134105ed193cb773f618a42eb7ba323cb812cc0/ruff-0.16.8-py3-none-macosx_11_0_arm64.whl", hash = "sha256:7ea781c7f2afba8c6a505ea0fb3f994020249e0c450635f5381286fea6b46170", size = 9830004, upload-time = "2026-09-16T15:54:03.998Z" },
+    { url = "https://files.pythonhosted.org/packages/90/b2/f184b0d5abec02db69cfd7e49b688ae0237554528ca777136c613bf36bee/ruff-0.16.7-py3-none-macosx_11_0_arm64.whl", hash = "sha256:7ab81118df8945e0193d0240712aa4496573595b75185c3636ed825592a0f728", size = 9847245, upload-time = "2026-09-10T18:03:34.509Z" },
-    { url = "https://files.pythonhosted.org/packages/23/f2/311a08776d75d81c7676e20b6b020ae63cbe881fcdc7a8dd64e6e18bdd93/ruff-0.16.8-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:8efeae3bbe414a5efefda11a792dfb51ef90ac48d50c4830de2f644caf3e8659", size = 9986558, upload-time = "2026-09-16T15:54:06.804Z" },
+    { url = "https://files.pythonhosted.org/packages/eb/2d/db1633a641866ed801e34cc6b60ef236c5e16f9b2124ab1d49cc24a5fe4f/ruff-0.16.7-py3-none-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4c196c968874fc8019da8e7163de7a1a370f111e2309b4b7dfea0fce950198d0", size = 9961780, upload-time = "2026-09-10T18:03:36.618Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/ed/37b6cb3d3ba8c73e68ae3eb1d502383beb5aa05a582bb7bb3a922f929f54/ruff-0.16.8-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:3a79b795469fef7fc6e908b218eed2eb17332afd85031db6480dc864560e69b2", size = 9877332, upload-time = "2026-09-16T15:54:09.552Z" },
+    { url = "https://files.pythonhosted.org/packages/4d/98/edea21e1a3e38dbbc3bf6bb068b863b3b06184cf8533a4c7dbbe208a89d5/ruff-0.16.7-py3-none-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:ac8c3bd0a7e10ad31e6ce51e7a99f3cb772e69aecdd6b9ea7e99b362f62a62c0", size = 9866337, upload-time = "2026-09-10T18:03:38.805Z" },
-    { url = "https://files.pythonhosted.org/packages/22/cc/40873a8f36ad084cc540d55fcca7077264d5b13b24659e9180c176fb2b08/ruff-0.16.8-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:3fdc5563cdc50555e6fba39322850860e9267c1b3d12c26a74729d8604c3c812", size = 10507125, upload-time = "2026-09-16T15:54:12.152Z" },
+    { url = "https://files.pythonhosted.org/packages/0b/11/a15e60d4c87b214646f116ca9d204475bf993ee1047459bc9a360fd4d6d1/ruff-0.16.7-py3-none-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:398d3988edde000b5c75dc1b3f584708da9bc990de069c18909142580fec1af9", size = 10562512, upload-time = "2026-09-10T18:03:40.71Z" },
-    { url = "https://files.pythonhosted.org/packages/c3/e4/fc91a642b78ccbab6b9477720f3644ae7a10a9bcce69a934679cd64f62bc/ruff-0.16.8-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:34508983c70665578dab88f5223d8e6228307e1135398ca8bfc8b7e9501e282b", size = 11336694, upload-time = "2026-09-16T15:54:15.489Z" },
+    { url = "https://files.pythonhosted.org/packages/29/42/eaff4c9b6d0c7cdf56df313a17e89ae854f5bbc0b0c8f9cce19be0ab7a8f/ruff-0.16.7-py3-none-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:ce05b62b770a8217c4646a9c4139fca00efe8fe5d71f87df2b243ff20d4584d1", size = 11302938, upload-time = "2026-09-10T18:03:42.607Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/3d/bbd2a9a600a4e73dc3e7548a249c8d1671273464b55822c6fae50f602dff/ruff-0.16.8-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:644bb578569e0ffc575741232bd385dacdd6fbe123f1a729e7a225f54aa3957f", size = 10774448, upload-time = "2026-09-16T15:54:18.16Z" },
+    { url = "https://files.pythonhosted.org/packages/5d/43/c75aa59a4ec181fe2ec06cab30e198c1c6d107229a9f008ae3a7c16cabd8/ruff-0.16.7-py3-none-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:af1b576fddb9d9ef2ececfb5fadcd6a624b25070ed85e3cfcfe449fc3ff6a7b9", size = 10840857, upload-time = "2026-09-10T18:03:44.604Z" },
-    { url = "https://files.pythonhosted.org/packages/1a/41/d83af9879a7b6e8bf5fe16b1da0b134049d2f5d3afac12defb0897cb84bd/ruff-0.16.8-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:15e7d226246961db9235098333caa13063906d3851136b84c2900b82f5daa1df", size = 10323796, upload-time = "2026-09-16T15:54:20.743Z" },
+    { url = "https://files.pythonhosted.org/packages/21/33/81f3da371942ea031105ba679d8d6e28ec1660ccd690a45f42d381161356/ruff-0.16.7-py3-none-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:9ce7f8f22df67c93ed96c717f9128eadb797144ac2bad475cf536f31d6100c55", size = 10370001, upload-time = "2026-09-10T18:03:46.706Z" },
-    { url = "https://files.pythonhosted.org/packages/f5/2c/cefd07bfe914b84943ea769ade8d607bd22750b965d3228eefd7cebd15d0/ruff-0.16.8-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:a2bf6bc3e9ebdd4449abc6f06cf64b98051a2c61cf94d2fe9596518c881f1a1e", size = 10514115, upload-time = "2026-09-16T15:54:23.497Z" },
+    { url = "https://files.pythonhosted.org/packages/fa/0b/6345fb4dbf6dd0ed1cfe5d18391dc9c3f59cc81622a7b0a65b84b3e730ba/ruff-0.16.7-py3-none-manylinux_2_31_riscv64.whl", hash = "sha256:06d0e93d04f392996435ebd600c153f65b47d73fbec2415aa99c5ee5756b3a5f", size = 10548735, upload-time = "2026-09-10T18:03:48.658Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/9d/76a2e26c79a23be6e6e3664c57bec9e9fc8de155cfb9e4b67ea91b64f9d7/ruff-0.16.8-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:6ca111ba0849539165e9e59d2b442542f3c1e8060ebbdea82494f1ffbccb1e1f", size = 10072582, upload-time = "2026-09-16T15:54:26.185Z" },
+    { url = "https://files.pythonhosted.org/packages/3f/4d/c5576adf511f92a328e5569dda190ecdd430da51f1a649f3a4a2fd73e21e/ruff-0.16.7-py3-none-musllinux_1_2_aarch64.whl", hash = "sha256:142151a5e7b93c1b11111337142f89dd2fbfee92161225c99a97222f22e32656", size = 10108496, upload-time = "2026-09-10T18:03:50.563Z" },
-    { url = "https://files.pythonhosted.org/packages/2e/d4/f42edddb39668af1a559ceafa3823aedd65633a48dc9768e775485faa2c1/ruff-0.16.8-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:359a1e5b495448ee1e91018064382ebc86f90e8aac2fed222c7d0e4e8df85fd2", size = 9879644, upload-time = "2026-09-16T15:54:29.278Z" },
+    { url = "https://files.pythonhosted.org/packages/ff/8c/667d83c16199a17a56adc6b0bd4c3beb5b767a2babcd16a56f76f9be7fd6/ruff-0.16.7-py3-none-musllinux_1_2_armv7l.whl", hash = "sha256:e6651f97a342d8b35d54d8991544ca22169b86dc54111cb604666940c431b750", size = 9860136, upload-time = "2026-09-10T18:03:52.621Z" },
-    { url = "https://files.pythonhosted.org/packages/f8/d4/913e3195d95e0378786c6656945c865f534a3560e29139da4882aff630d1/ruff-0.16.8-py3-none-musllinux_1_2_i686.whl", hash = "sha256:59e8f5681349474110b24d62e93cfda6593f5fa3473446ca3705200cac1a08b9", size = 10231569, upload-time = "2026-09-16T15:54:32.036Z" },
+    { url = "https://files.pythonhosted.org/packages/99/75/78d401106731999a1dd20cc5a6961e37e1eb9397a3b589f73f3a5ce146a3/ruff-0.16.7-py3-none-musllinux_1_2_i686.whl", hash = "sha256:ef140c6eb935fa9a84c9c607dfb2cb1b85843c192e79265b0c54f35f557ea8e5", size = 10286290, upload-time = "2026-09-10T18:03:55.207Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/c4/8aa6ea0bdcedbd1bf87397e2fc4ed8406448ea5842f8660bc6e5f163039d/ruff-0.16.8-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:efa3e7a16d1baaa79957888dfdf8be9ef2e44db81cb032af06d76632ab59e773", size = 10663666, upload-time = "2026-09-16T15:54:34.838Z" },
+    { url = "https://files.pythonhosted.org/packages/68/49/56f9c3a8b755df93a0ad318b2147bf4ef5dae9a7e5ec61c460109c67957f/ruff-0.16.7-py3-none-musllinux_1_2_x86_64.whl", hash = "sha256:53e39506a730fadeee0d998ed5946f30671f0db240c6c7c73bdabbe33604bb6f", size = 10745048, upload-time = "2026-09-10T18:03:57.299Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/02/7f10ef4700bc223c30a3fdd10631a29830c45524b810a3c7ed947af64591/ruff-0.16.8-py3-none-win32.whl", hash = "sha256:55793ba85c69921e89be061426d91a78652d6e50317c962240922747a4eb713f", size = 10093472, upload-time = "2026-09-16T15:54:37.47Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/ea/7f9b938a63ece4bec677ad7f9f7fa02df3383db1949ed93a382441c09a87/ruff-0.16.7-py3-none-win32.whl", hash = "sha256:2ea3470fcebcbc5df2fb0c6f3b90333fa9084c534e0111c038fa4a6ab9f1c4b7", size = 10059082, upload-time = "2026-09-10T18:03:59.632Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/5d/a509c07d714b6da88f2c518b4637cf6f1d46b074be8f0f1e5fb9ff5126fe/ruff-0.16.8-py3-none-win_amd64.whl", hash = "sha256:a6b85621fd3c81e31fc5f5add09c9c078b430db3595ca632efafdec9e64ebfaa", size = 10586899, upload-time = "2026-09-16T15:54:40.488Z" },
+    { url = "https://files.pythonhosted.org/packages/39/11/480a6973a927aa653e1cead6a6416008640e03a99d05b34c0434b8c6c366/ruff-0.16.7-py3-none-win_amd64.whl", hash = "sha256:7ac26aca826e9e21d0f1cb25b54ac660760a9fdd094d3e4df9848232be98cfc6", size = 10593368, upload-time = "2026-09-10T18:04:01.999Z" },
-    { url = "https://files.pythonhosted.org/packages/fe/a0/50787329e4f20bf9dc9f6230015d46ec69c51a97ace5bc202dae4755365d/ruff-0.16.8-py3-none-win_arm64.whl", hash = "sha256:d075e820af612102ce217f07cc93e69f9490b10ec13ea85fa87bd03d996cef8a", size = 10386316, upload-time = "2026-09-16T15:54:43.332Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/4b/51327018d056f0dad2c2238f26d1fb0f53707a9d91b75dea6d1b3039f136/ruff-0.16.7-py3-none-win_arm64.whl", hash = "sha256:aab7f39e2c9df6c596216070f98eef1207b94f8516cca20c808826974971855b", size = 10412401, upload-time = "2026-09-10T18:04:04.098Z" },
 ]
 [[package]]
@@ -3,7 +3,7 @@
 # ==================
 # Image pour frontend
-FROM node:26-alpine3.22 AS builder
+FROM node:24-alpine3.22 AS builder
 WORKDIR /app
@@ -23,7 +23,7 @@ RUN npm run build
 # ==================
-FROM nginx:1.31-alpine AS runner
+FROM dhi.io/nginx:1.28.0-alpine3.21-dev AS runner
 # Copie de la configuration de nginx
 COPY --chown=root:root --chmod=755 nginx.conf /etc/nginx/nginx.conf
@@ -1,4 +1,4 @@
-# Conventions de tests unitaires : Frontend
+# Conventions de tests unitaires — Frontend
 ## Outil
 Vitest (intégré nativement à Angular CLI, pas d'installation à faire).
@@ -83,6 +83,3 @@ describe('MonComposant', () => {
 ## Lancer les tests
 - Développement (mode watch) : `npm test`
 - Rapport de couverture (CI) : `npm run test:ci -- --coverage`, puis ouvrir `coverage/index.html`
 - Un fichier ou un dossier seulement :
  `npx ng test --watch=false --coverage=false --include=src/app/core/services/alerts.service.spec.ts`
  (répéter `--include` pour plusieurs cibles ; un dossier joue tous ses specs)
@@ -34,11 +34,6 @@
          },
          "configurations": {
            "production": {
              "optimization": {
                "styles": {
                  "inlineCritical": false
                }
              },
              "budgets": [
                {
                  "type": "initial",
@@ -8,12 +8,12 @@
      "name": "frontend",
      "version": "0.0.0",
      "dependencies": {
-        "@angular/common": "^22.1.7",
+        "@angular/common": "^22.1.0",
-        "@angular/compiler": "^22.1.7",
+        "@angular/compiler": "^22.1.0",
-        "@angular/core": "^22.1.7",
+        "@angular/core": "^22.1.0",
-        "@angular/forms": "^22.1.7",
+        "@angular/forms": "^22.1.0",
-        "@angular/platform-browser": "^22.1.7",
+        "@angular/platform-browser": "^22.1.0",
-        "@angular/router": "^22.1.7",
+        "@angular/router": "^22.1.0",
        "chart.js": "^4.5.1",
        "rxjs": "~7.8.0",
        "tslib": "^2.3.0"
@@ -21,14 +21,21 @@
      "devDependencies": {
        "@angular/build": "^22.1.8",
        "@angular/cli": "^22.1.8",
-        "@angular/compiler-cli": "^22.1.7",
+        "@angular/compiler-cli": "^22.1.0",
        "@vitest/coverage-v8": "^4.1.11",
-        "jsdom": "^30.1.0",
+        "jsdom": "^28.0.0",
-        "prettier": "^3.9.8",
+        "prettier": "^3.8.1",
        "typescript": "~6.0.2",
-        "vitest": "^4.1.11"
+        "vitest": "^4.0.8"
      }
    },
    "node_modules/@acemir/cssom": {
      "version": "0.9.31",
      "resolved": "https://registry.npmjs.org/@acemir/cssom/-/cssom-0.9.31.tgz",
      "integrity": "sha512-ZnR3GSaH+/vJ0YlHau21FjfLYjMpYVIzTD8M8vIEQvIGxeOXyXdzCI140rrCY862p/C/BbzWsjc1dgnM9mkoTA==",
      "dev": true,
      "license": "MIT"
    },
    "node_modules/@ampproject/remapping": {
      "version": "2.3.0",
      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
@@ -248,9 +255,9 @@
      }
    },
    "node_modules/@angular/common": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/common/-/common-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/common/-/common-22.1.6.tgz",
-      "integrity": "sha512-SLW4AdH2Y8G9SM/iFRNpCQtkmvq55RcIQWsADT9ypZ7FxxcnJRsr4Q/WnbUBbuCslsCkrgzU1i9WDiW0m7gcnw==",
+      "integrity": "sha512-giuH+jJvo6YbBxbKofJCXvq6k8g1Z/xCAvh4piNFSSS6/toXTLCeZ+snr6Stw5b2wRbArM5Q5nDeuto3NqVPnQ==",
      "license": "MIT",
      "dependencies": {
        "tslib": "^2.3.0"
@@ -259,14 +266,14 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/core": "22.1.7",
+        "@angular/core": "22.1.6",
        "rxjs": "^6.5.3 || ^7.4.0"
      }
    },
    "node_modules/@angular/compiler": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/compiler/-/compiler-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/compiler/-/compiler-22.1.6.tgz",
-      "integrity": "sha512-qhoHAByh805nT4Xy4Wd2kE5FvkTc7wcg8Qps+EH6+z4KRfwGiL5cwdgooGWjTAldFCeqTgJ0BO/0dB6GHZjdkQ==",
+      "integrity": "sha512-JjOUm/qD338+fGfZvxSNn/vTUiVqNwOiPzacInVUq1eVp7Jev+cnvEwXA2cFJkYZoy3Imz6wHoMvTUZNN8cbKQ==",
      "license": "MIT",
      "dependencies": {
        "tslib": "^2.3.0"
@@ -276,9 +283,9 @@
      }
    },
    "node_modules/@angular/compiler-cli": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/compiler-cli/-/compiler-cli-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/compiler-cli/-/compiler-cli-22.1.6.tgz",
-      "integrity": "sha512-VGg8Kyt0YymQfnUUFk79vFaM+x5xmIMHy+BZh3P2Lh/uxqCXTWhJJH8kOHKtIGGH5/wKhBEmSy2CezdcIuM9xg==",
+      "integrity": "sha512-C1fQuaSLnibhfbb7Im/vurdBEcfQk+/GqPkY4+dgEKd4EPleO0xWlD+k5DwyNFX8a9w7HebWfo0Zl66HuaEwOQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
@@ -299,7 +306,7 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/compiler": "22.1.7",
+        "@angular/compiler": "22.1.6",
        "typescript": ">=6.0 <6.1"
      },
      "peerDependenciesMeta": {
@@ -309,9 +316,9 @@
      }
    },
    "node_modules/@angular/core": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/core/-/core-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/core/-/core-22.1.6.tgz",
-      "integrity": "sha512-T9bt1PIgoN7n+TxGHTUgu0EsomlGMQ84YMXbMB+N6HhD8C1qZxn0uCbnAtCUjcecg1am8ioKxNTO0eII9ouioQ==",
+      "integrity": "sha512-3Ln9YYOhsaU2vPufnpcu6C4dlmX4e/nJTlggVcKMT7bGZH5KlEtw3h0uh9YfANv8YhQCEk1AcuRI7KpBnh5ing==",
      "license": "MIT",
      "dependencies": {
        "tslib": "^2.3.0"
@@ -320,7 +327,7 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/compiler": "22.1.7",
+        "@angular/compiler": "22.1.6",
        "rxjs": "^6.5.3 || ^7.4.0",
        "zone.js": "~0.15.0 || ~0.16.0"
      },
@@ -334,9 +341,9 @@
      }
    },
    "node_modules/@angular/forms": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/forms/-/forms-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/forms/-/forms-22.1.6.tgz",
-      "integrity": "sha512-oc0DT39C3ZboJpDx8xKUCltgn56LHi0kbv+ThNK/dCSZLgjF2nd+muMMRYF+amdljQp2q7+hm2ORmhON3CNFog==",
+      "integrity": "sha512-rfV4G4UB4l69yXSRvhaHPzTMIruvBlRO+ak9NtTcYMnsoj8O5ZCyPv0ledGIrLTBwGSI3X1j4nr9aoV+Rj/n+Q==",
      "license": "MIT",
      "dependencies": {
        "@standard-schema/spec": "^1.0.0",
@@ -347,16 +354,16 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/common": "22.1.7",
+        "@angular/common": "22.1.6",
-        "@angular/core": "22.1.7",
+        "@angular/core": "22.1.6",
-        "@angular/platform-browser": "22.1.7",
+        "@angular/platform-browser": "22.1.6",
        "rxjs": "^6.5.3 || ^7.4.0"
      }
    },
    "node_modules/@angular/platform-browser": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/platform-browser/-/platform-browser-22.1.6.tgz",
-      "integrity": "sha512-4dT3qGw3ZHVQUcHKALzMx9MTo+pxAMzHIPxc8HUESklqXfq6GRaIIfFMvE0RsquI9iqu6admD6lOAEzLWS8DxA==",
+      "integrity": "sha512-jrRi6zpdz+jOle5l0OW7QL0a8xPgdnxWT5FrJabbiNKfYzQfqKcaAu02l8uJoJxtGb8fLQ8pbjkPpZEvKO2z+w==",
      "license": "MIT",
      "dependencies": {
        "tslib": "^2.3.0"
@@ -365,9 +372,9 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/animations": "22.1.7",
+        "@angular/animations": "22.1.6",
-        "@angular/common": "22.1.7",
+        "@angular/common": "22.1.6",
-        "@angular/core": "22.1.7"
+        "@angular/core": "22.1.6"
      },
      "peerDependenciesMeta": {
        "@angular/animations": {
@@ -376,9 +383,9 @@
      }
    },
    "node_modules/@angular/router": {
-      "version": "22.1.7",
+      "version": "22.1.6",
-      "resolved": "https://registry.npmjs.org/@angular/router/-/router-22.1.7.tgz",
+      "resolved": "https://registry.npmjs.org/@angular/router/-/router-22.1.6.tgz",
-      "integrity": "sha512-CxYa2Ym5L0WmqToHU2I0Z4VEpocdryLlvx5svLfo9M3uOaP3/9icB/gjS/vXPbbQxV8/GZ59E/7/LF14anIoRg==",
+      "integrity": "sha512-ex0vrkcVyJJdn7NzZXun+5ctaPPLTZJ/gE7A3g1dun7BM3g4Z6zT738mODFeJgtPtJNf4bTs2gpgvyegvzWH7w==",
      "license": "MIT",
      "dependencies": {
        "tslib": "^2.3.0"
@@ -387,45 +394,60 @@
        "node": "^22.22.3 || ^24.15.0 || >=26.0.0"
      },
      "peerDependencies": {
-        "@angular/common": "22.1.7",
+        "@angular/common": "22.1.6",
-        "@angular/core": "22.1.7",
+        "@angular/core": "22.1.6",
-        "@angular/platform-browser": "22.1.7",
+        "@angular/platform-browser": "22.1.6",
        "rxjs": "^6.5.3 || ^7.4.0"
      }
    },
    "node_modules/@asamuzakjp/css-color": {
-      "version": "7.0.0",
+      "version": "5.1.11",
-      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-7.0.0.tgz",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/css-color/-/css-color-5.1.11.tgz",
-      "integrity": "sha512-IxddtGnnoidVSO6O/aiTueptbTThHvi2qGHu9/AWuD1J7i86Ox+jl+Y5SXcDH1RixzQlP2cjH/PjnlImZiAurQ==",
+      "integrity": "sha512-KVw6qIiCTUQhByfTd78h2yD1/00waTmm9uy/R7Ck/ctUyAPj+AEDLkQIdJW0T8+qGgj3j5bpNKK7Q3G+LedJWg==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@csstools/css-calc": "^3.3.0",
+        "@asamuzakjp/generational-cache": "^1.0.1",
-        "@csstools/css-color-parser": "^4.2.0",
+        "@csstools/css-calc": "^3.2.0",
        "@csstools/css-color-parser": "^4.1.0",
        "@csstools/css-parser-algorithms": "^4.0.0",
-        "@csstools/css-tokenizer": "^4.0.0",
+        "@csstools/css-tokenizer": "^4.0.0"
        "lru-cache": "^11.5.2"
      },
      "engines": {
-        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
      }
    },
    "node_modules/@asamuzakjp/dom-selector": {
-      "version": "9.1.4",
+      "version": "6.8.1",
-      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-9.1.4.tgz",
+      "resolved": "https://registry.npmjs.org/@asamuzakjp/dom-selector/-/dom-selector-6.8.1.tgz",
-      "integrity": "sha512-ynDE7RDZM1z+YuSU+iGhRp8WcSXHqK9+G32ZEzsL35TKSoy72fYR7VfrJCQkWe3ciiIWGSTAIBc9XB5jVpqyTw==",
+      "integrity": "sha512-MvRz1nCqW0fsy8Qz4dnLIvhOlMzqDVBabZx6lH+YywFDdjXhMY37SmpV1XFX3JzG5GWHn63j6HX6QPr3lZXHvQ==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "bidi-js": "^1.1.0",
+        "@asamuzakjp/nwsapi": "^2.3.9",
-        "css-tree": "^3.2.1",
+        "bidi-js": "^1.0.3",
        "css-tree": "^3.1.0",
        "is-potential-custom-element-name": "^1.0.1",
-        "lru-cache": "^11.5.2"
+        "lru-cache": "^11.2.6"
      },
      "engines": {
        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
      }
    },
    "node_modules/@asamuzakjp/generational-cache": {
      "version": "1.0.1",
      "resolved": "https://registry.npmjs.org/@asamuzakjp/generational-cache/-/generational-cache-1.0.1.tgz",
      "integrity": "sha512-wajfB8KqzMCN2KGNFdLkReeHncd0AslUSrvHVvvYWuU8ghncRJoA50kT3zP9MVL0+9g4/67H+cdvBskj9THPzg==",
      "dev": true,
      "license": "MIT",
      "engines": {
        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
      }
    },
    "node_modules/@asamuzakjp/nwsapi": {
      "version": "2.3.9",
      "resolved": "https://registry.npmjs.org/@asamuzakjp/nwsapi/-/nwsapi-2.3.9.tgz",
      "integrity": "sha512-n8GuYSrI9bF7FFZ/SjhwevlHc8xaVlb/7HmHelnc/PZXBD2ZR49NnN9sMMuDdEGPeeRQ5d0hqlSlEpgCX3Wl0Q==",
      "dev": true,
      "license": "MIT"
    },
    "node_modules/@babel/code-frame": {
      "version": "8.0.0",
      "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-8.0.0.tgz",
@@ -832,9 +854,9 @@
      }
    },
    "node_modules/@csstools/css-syntax-patches-for-csstree": {
-      "version": "1.1.14",
+      "version": "1.1.13",
-      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.14.tgz",
+      "resolved": "https://registry.npmjs.org/@csstools/css-syntax-patches-for-csstree/-/css-syntax-patches-for-csstree-1.1.13.tgz",
-      "integrity": "sha512-HpbVXyrofRXpHpgkNIjU/3EWR4WJvOkO3emNK/L6X/mTJU7bGUI3AkkpoTNXznQLp0KRjLHELTGeKI5dIkI9JQ==",
+      "integrity": "sha512-i9ZylF5QNhmNfPA9l0vHAWK4kPrbIp6g9lKgaiIFsIBz2F/WNB7OLrzlNNcCOm+h42bkaSD2v1PG+IBPHhc3ZA==",
      "dev": true,
      "funding": [
        {
@@ -857,9 +879,9 @@
      }
    },
    "node_modules/@csstools/css-tokenizer": {
-      "version": "4.0.1",
+      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.1.tgz",
+      "resolved": "https://registry.npmjs.org/@csstools/css-tokenizer/-/css-tokenizer-4.0.0.tgz",
-      "integrity": "sha512-bPlN9S9O1A0euCpEWE4qnvB5YDuyYVsUTrxSgmAM1Is0j4tICHoVyOVAXfWMP/kS9ZrjvyIXWV2PmomiAXXqOw==",
+      "integrity": "sha512-QxULHAm7cNu72w97JUNCBFODFaXpbDg+dP8b/oWFAZ2MTRppA3U00Y2L1HqaS4J6yBqxwa/Y3nMBaxVKbB/NsA==",
      "dev": true,
      "funding": [
        {
@@ -4468,6 +4490,22 @@
        "url": "https://github.com/sponsors/fb55"
      }
    },
    "node_modules/cssstyle": {
      "version": "6.2.0",
      "resolved": "https://registry.npmjs.org/cssstyle/-/cssstyle-6.2.0.tgz",
      "integrity": "sha512-Fm5NvhYathRnXNVndkUsCCuR63DCLVVwGOOwQw782coXFi5HhkXdu289l59HlXZBawsyNccXfWRYvLzcDCdDig==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "@asamuzakjp/css-color": "^5.0.1",
        "@csstools/css-syntax-patches-for-csstree": "^1.0.28",
        "css-tree": "^3.1.0",
        "lru-cache": "^11.2.6"
      },
      "engines": {
        "node": ">=20"
      }
    },
    "node_modules/data-urls": {
      "version": "7.0.0",
      "resolved": "https://registry.npmjs.org/data-urls/-/data-urls-7.0.0.tgz",
@@ -5245,6 +5283,30 @@
        "url": "https://opencollective.com/express"
      }
    },
    "node_modules/http-proxy-agent": {
      "version": "7.0.2",
      "resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
      "integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
        "agent-base": "^7.1.0",
        "debug": "^4.3.4"
      },
      "engines": {
        "node": ">= 14"
      }
    },
    "node_modules/http-proxy-agent/node_modules/agent-base": {
      "version": "7.1.4",
      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
      "dev": true,
      "license": "MIT",
      "engines": {
        "node": ">= 14"
      }
    },
    "node_modules/https-proxy-agent": {
      "version": "9.1.0",
      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-9.1.0.tgz",
@@ -5467,38 +5529,39 @@
      "license": "MIT"
    },
    "node_modules/jsdom": {
-      "version": "30.1.0",
+      "version": "28.1.0",
-      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-30.1.0.tgz",
+      "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-28.1.0.tgz",
-      "integrity": "sha512-h/Q+H+KmlGf49ITw3TrykSVbg04S75S2O7ZtJc9gMGOWBrQRZmx5AJIKLtJ01e6Kszl+/tpFthCVqxNifxhoqg==",
+      "integrity": "sha512-0+MoQNYyr2rBHqO1xilltfDjV9G7ymYGlAUazgcDLQaUf8JDHbuGwsxN6U9qWaElZ4w1B2r7yEGIL3GdeW3Rug==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@asamuzakjp/css-color": "^7.0.0",
+        "@acemir/cssom": "^0.9.31",
-        "@asamuzakjp/dom-selector": "^9.1.2",
+        "@asamuzakjp/dom-selector": "^6.8.1",
        "@bramus/specificity": "^2.4.2",
-        "@csstools/css-syntax-patches-for-csstree": "^1.1.13",
+        "@exodus/bytes": "^1.11.0",
-        "@exodus/bytes": "^1.15.1",
+        "cssstyle": "^6.0.1",
        "css-tree": "^3.2.1",
        "data-urls": "^7.0.0",
        "decimal.js": "^10.6.0",
        "html-encoding-sniffer": "^6.0.0",
        "http-proxy-agent": "^7.0.2",
        "https-proxy-agent": "^7.0.6",
        "is-potential-custom-element-name": "^1.0.1",
-        "lru-cache": "^11.5.2",
+        "parse5": "^8.0.0",
        "parse5": "^8.0.1",
        "saxes": "^6.0.0",
-        "tough-cookie": "^6.0.2",
+        "symbol-tree": "^3.2.4",
-        "undici": "^8.10.2",
+        "tough-cookie": "^6.0.0",
        "undici": "^7.21.0",
        "w3c-xmlserializer": "^5.0.0",
        "webidl-conversions": "^8.0.1",
        "whatwg-mimetype": "^5.0.0",
-        "whatwg-url": "^17.1.1",
+        "whatwg-url": "^16.0.0",
        "xml-name-validator": "^5.0.0"
      },
      "engines": {
-        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
+        "node": "^20.19.0 || ^22.12.0 || >=24.0.0"
      },
      "peerDependencies": {
-        "canvas": "^3.2.3"
+        "canvas": "^3.0.0"
      },
      "peerDependenciesMeta": {
        "canvas": {
@@ -5506,19 +5569,28 @@
        }
      }
    },
-    "node_modules/jsdom/node_modules/whatwg-url": {
+    "node_modules/jsdom/node_modules/agent-base": {
-      "version": "17.1.1",
+      "version": "7.1.4",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-17.1.1.tgz",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
-      "integrity": "sha512-ohjk1mdUebJVadRt3bAhQhx8lSnISq+GDttK79LFl8EHQkAPvzwctoasC4hs8tBt6kLAncBWWyq1N52qEfKvDw==",
+      "integrity": "sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==",
      "dev": true,
      "license": "MIT",
      "engines": {
        "node": ">= 14"
      }
    },
    "node_modules/jsdom/node_modules/https-proxy-agent": {
      "version": "7.0.6",
      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
      "integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
      "dev": true,
      "license": "MIT",
      "dependencies": {
-        "@exodus/bytes": "^1.15.1",
+        "agent-base": "^7.1.2",
-        "tr46": "^6.0.0",
+        "debug": "4"
        "webidl-conversions": "^8.0.1"
      },
      "engines": {
-        "node": "^22.14.0 || >=24.0.0"
+        "node": ">= 14"
      }
    },
    "node_modules/jsesc": {
@@ -6636,9 +6708,9 @@
      }
    },
    "node_modules/prettier": {
-      "version": "3.9.8",
+      "version": "3.9.6",
-      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.8.tgz",
+      "resolved": "https://registry.npmjs.org/prettier/-/prettier-3.9.6.tgz",
-      "integrity": "sha512-WRFq3Wn3WId7LLROfMLdH7xaFr2jR62wU8nLO6rQUOLOxNZUviyJQs1M0iIhLexSFy+L+w0ch66wtoO2jRjG0A==",
+      "integrity": "sha512-OpN0zzVdiaiAhxpuuj5efpIS4sY9j7bY6uR5mnj5yPzGkdkjNKSJeUThPb60Jw29QuAZgA4o+/iB49kFiaBX6g==",
      "dev": true,
      "license": "MIT",
      "bin": {
@@ -7236,6 +7308,13 @@
        "node": ">=8"
      }
    },
    "node_modules/symbol-tree": {
      "version": "3.2.4",
      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
      "dev": true,
      "license": "MIT"
    },
    "node_modules/tinybench": {
      "version": "2.9.0",
      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
@@ -7390,13 +7469,13 @@
      }
    },
    "node_modules/undici": {
-      "version": "8.10.2",
+      "version": "7.29.1",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-8.10.2.tgz",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.29.1.tgz",
-      "integrity": "sha512-/y4/bH9YNU5hi9NIrpOuvGXFcxrj3CMrV+/AYpowAYTpHn8gX/XPFjNy766FPoYY0miQhdW977JFWKGNhBdwyQ==",
+      "integrity": "sha512-RYONW2MeafgYlkVOKYKkA/Ag7BmXqgIWCa8t1m0JcxrQg9pI9lEqRhAOruOBCbAohOa/gkCF+iPi9hrgvTzu6Q==",
      "dev": true,
      "license": "MIT",
      "engines": {
-        "node": ">=22.19.0"
+        "node": ">=20.18.1"
      }
    },
    "node_modules/unpipe": {
@@ -12,12 +12,12 @@
  "private": true,
  "packageManager": "npm@11.19.0",
  "dependencies": {
-    "@angular/common": "^22.1.7",
+    "@angular/common": "^22.1.0",
-    "@angular/compiler": "^22.1.7",
+    "@angular/compiler": "^22.1.0",
-    "@angular/core": "^22.1.7",
+    "@angular/core": "^22.1.0",
-    "@angular/forms": "^22.1.7",
+    "@angular/forms": "^22.1.0",
-    "@angular/platform-browser": "^22.1.7",
+    "@angular/platform-browser": "^22.1.0",
-    "@angular/router": "^22.1.7",
+    "@angular/router": "^22.1.0",
    "chart.js": "^4.5.1",
    "rxjs": "~7.8.0",
    "tslib": "^2.3.0"
@@ -25,11 +25,11 @@
  "devDependencies": {
    "@angular/build": "^22.1.8",
    "@angular/cli": "^22.1.8",
-    "@angular/compiler-cli": "^22.1.7",
+    "@angular/compiler-cli": "^22.1.0",
    "@vitest/coverage-v8": "^4.1.11",
-    "jsdom": "^30.1.0",
+    "jsdom": "^28.0.0",
-    "prettier": "^3.9.8",
+    "prettier": "^3.8.1",
    "typescript": "~6.0.2",
-    "vitest": "^4.1.11"
+    "vitest": "^4.0.8"
  }
 }
@@ -1,36 +1,21 @@
 import { Routes } from '@angular/router';
-import { authGuard } from './core/guards/auth-guard';
+import {authGuard} from './core/guards/auth-guard';
 export const routes: Routes = [
  { path: '', redirectTo: 'dashboard', pathMatch: 'full' },
-  {
+  { path: 'login', loadComponent: () => import('./features/auth/login/login').then(m => m.Login) },
-    path: 'login',
+  { path: 'change-password', loadComponent: () => import('./features/auth/change-password/change-password').then(m => m.ChangePassword) },
-    loadComponent: () => import('./features/auth/login/login').then((m) => m.Login),
+  { path: 'forgot-password', loadComponent: () => import('./features/auth/forgot-password/forgot-password').then(m => m.ForgotPassword) },
-  },
+  { path: 'reset-password', loadComponent: () => import('./features/auth/reset-password/reset-password').then(m => m.ResetPassword) },
  {
    path: 'change-password',
    loadComponent: () =>
      import('./features/auth/change-password/change-password').then((m) => m.ChangePassword),
  },
  {
    path: 'forgot-password',
    loadComponent: () =>
      import('./features/auth/forgot-password/forgot-password').then((m) => m.ForgotPassword),
  },
  {
    path: 'reset-password',
    loadComponent: () =>
      import('./features/auth/reset-password/reset-password').then((m) => m.ResetPassword),
  },
  {
    path: 'dashboard',
    canActivate: [authGuard],
-    loadComponent: () => import('./features/dashboard/dashboard').then((m) => m.Dashboard),
+    loadComponent: () => import('./features/dashboard/dashboard').then(m => m.Dashboard),
  },
  {
    path: 'sites',
    canActivate: [authGuard],
-    loadComponent: () => import('./features/sites/site-list/site-list').then((m) => m.SiteList),
+    loadComponent: () => import('./features/sites/site-list/site-list').then(m => m.SiteList),
  },
  {
    path: 'sites/:siteId',
@@ -38,17 +23,4 @@ export const routes: Routes = [
    loadComponent: () =>
      import('./features/sites/site-detail/site-detail').then((m) => m.SiteDetail),
  },
  {
    path: 'recommendations',
    canActivate: [authGuard],
    loadComponent: () =>
      import('./features/recommendations/recommendations').then((m) => m.RecommendationsView),
  },
  {
    path: 'monitoring/sensors',
    canActivate: [authGuard],
    data: { role: 'admin' },
    loadComponent: () =>
      import('./features/monitoring/sensor-status/sensor-status').then((m) => m.SensorStatusView),
  },
 ];
@@ -8,10 +8,8 @@ import { STATS_SUMMARY_FIXTURE } from '../mocks/stats-summary.fixture';
 describe('mockApiInterceptor', () => {
  let http: HttpClient;
  let httpMock: HttpTestingController;
  let useMockFixturesInitial: boolean;
  beforeEach(() => {
    useMockFixturesInitial = environment.useMockFixtures;
    TestBed.configureTestingModule({
      providers: [
        provideHttpClient(withInterceptors([mockApiInterceptor])),
@@ -23,7 +21,7 @@ describe('mockApiInterceptor', () => {
  });
  afterEach(() => {
-    environment.useMockFixtures = useMockFixturesInitial;
+    environment.useMockFixtures = true;
    httpMock.verify();
  });
@@ -66,13 +64,4 @@ describe('mockApiInterceptor', () => {
    httpMock.expectNone(`${environment.apiUrl}/alerts`);
    expect((result as unknown[]).length).toBeGreaterThan(0);
  });
  it('laisse toujours passer /predictions vers le réseau, même avec useMockFixtures activé', () => {
    environment.useMockFixtures = true;
    http.get(`${environment.apiUrl}/predictions`).subscribe();
    const req = httpMock.expectOne(`${environment.apiUrl}/predictions`);
    req.flush({ timestamp: '2026-09-18T09:00:00Z', sites: [] });
  });
 });
@@ -26,7 +26,5 @@ export const mockApiInterceptor: HttpInterceptorFn = (req, next) => {
  if (req.url.endsWith(`${environment.apiUrl}/alerts`)) {
    return of(new HttpResponse({ status: 200, body: ALERTS_FIXTURE }));
  }
  // Volontairement jamais mocké, contrairement à `stats`/`alerts` : les prévisions sont servies
  // par l'API réelle dès maintenant (au même titre que `/auth/*`, déjà toujours réel).
  return next(req);
 };
@@ -2,63 +2,53 @@ import { Alert } from '../../shared/models/alert.model';
 export const ALERTS_FIXTURE: Alert[] = [
  {
-    alert_id: 5,
+    alert_id: 'ALR-SITE002-1718458320',
    timestamp: '2026-09-15T11:12:00',
    site_id: 'SITE002',
    timestamp: '2026-09-15T11:12:00Z',
    type: 'threshold',
    severity: 'critical',
-    message: 'Puissance appelée 812.5 kW au-dessus de la capacité du site (720.0 kW)',
+    type: 'outage',
    message: 'Risque de surcharge sur Usine Lyon Vénissieux',
    value: 812.5,
    threshold: 720.0,
    metric: 'consumption_kw',
    prediction_id: null,
  },
  {
-    alert_id: 4,
+    alert_id: 'ALR-SITE003-1718458321',
    timestamp: '2026-09-15T11:05:00',
    site_id: 'SITE003',
    timestamp: '2026-09-15T11:05:00Z',
    type: 'outage',
    severity: 'critical',
    message: 'Aucune lecture depuis 5:00:00 (dernière lecture : 2026-09-15T06:05:00+00:00)',
    value: null,
    threshold: null,
    metric: null,
    prediction_id: null,
  },
  {
    alert_id: 3,
    site_id: 'SITE005',
    timestamp: '2026-09-15T10:47:00Z',
    type: 'spike',
    severity: 'high',
    message: 'Variation brutale entre deux lectures consécutives (260.0 kW -> 410.0 kW)',
    value: 410.0,
    threshold: 260.0,
    metric: 'consumption_kw',
    prediction_id: null,
  },
  {
    alert_id: 2,
    site_id: 'SITE006',
    timestamp: '2026-09-15T10:30:00Z',
    type: 'sensor',
-    severity: 'medium',
+    message: 'Perte réseau totale sur Data Center Marseille',
-    message: 'Qualité de mesure degraded (capteur hors ligne, valeur nulle)',
+    value: 0,
-    value: null,
+    threshold: 0,
    threshold: null,
    metric: null,
    prediction_id: null,
  },
  {
-    alert_id: 1,
+    alert_id: 'ALR-SITE005-1718458322',
    timestamp: '2026-09-15T10:47:00',
    site_id: 'SITE005',
    severity: 'high',
    type: 'threshold',
    message: 'Usine Toulouse approche de son seuil de capacité',
    value: 410.0,
    threshold: 480.0,
  },
  {
    alert_id: 'ALR-SITE006-1718458323',
    timestamp: '2026-09-15T10:30:00',
    site_id: 'SITE006',
    severity: 'medium',
    type: 'sensor',
    message: 'Capteur de température défaillant sur Bureau Lille',
    value: 0,
    threshold: 0,
  },
  {
    alert_id: 'ALR-SITE004-1718458324',
    timestamp: '2026-09-15T09:58:00',
    site_id: 'SITE004',
    timestamp: '2026-09-15T09:58:00Z',
    type: 'anomaly',
    severity: 'low',
-    message: 'Écart de 13% entre la consommation mesurée (62.0 kWh) et la prévision (55.0 kWh)',
+    type: 'anomaly',
    message: 'Comportement de consommation inhabituel sur Bureau Bordeaux',
    value: 62.0,
    threshold: 55.0,
    metric: 'consumption_kwh',
    prediction_id: 42,
  },
 ];
@@ -3,20 +3,6 @@ import { provideHttpClient } from '@angular/common/http';
 import { provideHttpClientTesting, HttpTestingController } from '@angular/common/http/testing';
 import { AlertsService } from './alerts.service';
 import { environment } from '../../../environments/environment';
 import { Alert } from '../../shared/models/alert.model';
 const ALERT_API: Alert = {
  alert_id: 1,
  site_id: 'site-1',
  timestamp: '2026-09-16T00:00:00Z',
  type: 'threshold',
  severity: 'high',
  message: 'Dépassement du seuil configuré',
  value: 812.5,
  threshold: 720.0,
  metric: 'consumption_kw',
  prediction_id: null,
 };
 describe('AlertsService', () => {
  let service: AlertsService;
@@ -32,35 +18,26 @@ describe('AlertsService', () => {
  afterEach(() => httpMock.verify());
-  it("appelle le bon endpoint sans paramètre et retourne un tableau d'alertes", () => {
+  it("appelle le bon endpoint et retourne un tableau d'alertes", () => {
-    let result: Alert[] = [];
+    let result: unknown;
    service.getAlerts().subscribe((r) => (result = r));
-    const req = httpMock.expectOne(
+    const req = httpMock.expectOne(`${environment.apiUrl}/alerts`);
-      (r) => r.url === `${environment.apiUrl}/alerts` && r.method === 'GET',
+    expect(req.request.method).toBe('GET');
    );
    expect(req.request.params.keys()).toEqual([]);
    req.flush([ALERT_API]);
-    expect(result.length).toBe(1);
+    req.flush([
-    expect(result[0].alert_id).toBe(1);
+      {
-    expect(result[0].prediction_id).toBeNull();
+        alert_id: 'ALR-TEST-1',
-  });
+        timestamp: '2026-09-15T12:00:00',
        site_id: 'SITE001',
        severity: 'high',
        type: 'threshold',
        message: 'Test',
        value: 100,
        threshold: 90,
      },
    ]);
-  it('transmet les filtres site_id et severity en paramètres de requête', () => {
+    expect((result as unknown[]).length).toBe(1);
    service.getAlerts({ site_id: 'SITE001', severity: 'high' }).subscribe();
    const req = httpMock.expectOne((r) => r.url === `${environment.apiUrl}/alerts`);
    expect(req.request.params.get('site_id')).toBe('SITE001');
    expect(req.request.params.get('severity')).toBe('high');
    req.flush([]);
  });
  it('ne pose pas de paramètre pour un filtre omis', () => {
    service.getAlerts({ site_id: 'SITE001' }).subscribe();
    const req = httpMock.expectOne((r) => r.url === `${environment.apiUrl}/alerts`);
    expect(req.request.params.has('severity')).toBe(false);
    req.flush([]);
  });
 });
@@ -1,25 +1,13 @@
 import { Service, inject } from '@angular/core';
-import { HttpClient, HttpParams } from '@angular/common/http';
+import { HttpClient } from '@angular/common/http';
 import { environment } from '../../../environments/environment';
-import { Alert, AlertSeverity } from '../../shared/models/alert.model';
+import { Alert } from '../../shared/models/alert.model';
 export interface AlertFilters {
  site_id?: string;
  severity?: AlertSeverity;
 }
@Service()
 export class AlertsService {
  private http = inject(HttpClient);
-  getAlerts(filters: AlertFilters = {}) {
+  getAlerts() {
-    let params = new HttpParams();
+    return this.http.get<Alert[]>(`${environment.apiUrl}/alerts`);
    if (filters.site_id) {
      params = params.set('site_id', filters.site_id);
    }
    if (filters.severity) {
      params = params.set('severity', filters.severity);
    }
    return this.http.get<Alert[]>(`${environment.apiUrl}/alerts`, { params });
  }
 }
@@ -1,35 +0,0 @@
 import { TestBed } from '@angular/core/testing';
 import { provideHttpClient } from '@angular/common/http';
 import { provideHttpClientTesting, HttpTestingController } from '@angular/common/http/testing';
 import { PredictionsService } from './predictions.service';
 import { environment } from '../../../environments/environment';
 describe('PredictionsService', () => {
  let service: PredictionsService;
  let httpMock: HttpTestingController;
  beforeEach(() => {
    TestBed.configureTestingModule({
      providers: [provideHttpClient(), provideHttpClientTesting()],
    });
    service = TestBed.inject(PredictionsService);
    httpMock = TestBed.inject(HttpTestingController);
  });
  afterEach(() => httpMock.verify());
  it('appelle le bon endpoint et retourne un résumé de prévisions', () => {
    let result: unknown;
    service.getPredictions().subscribe((r) => (result = r));
    const req = httpMock.expectOne(`${environment.apiUrl}/predictions`);
    expect(req.request.method).toBe('GET');
    req.flush({
      timestamp: '2026-09-18T09:00:00Z',
      sites: [{ site_id: 'SITE001', site_name: 'Test', prediction: null }],
    });
    expect((result as { sites: unknown[] }).sites.length).toBe(1);
  });
 });
@@ -1,13 +0,0 @@
 import { Service, inject } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { environment } from '../../../environments/environment';
 import { PredictionSummary } from '../../shared/models/prediction.model';
@Service()
 export class PredictionsService {
  private http = inject(HttpClient);
  getPredictions() {
    return this.http.get<PredictionSummary>(`${environment.apiUrl}/predictions`);
  }
 }
@@ -1,74 +0,0 @@
 import { TestBed } from '@angular/core/testing';
 import { provideHttpClient } from '@angular/common/http';
 import { provideHttpClientTesting, HttpTestingController } from '@angular/common/http/testing';
 import { RecommendationsService } from './recommendations.service';
 import { environment } from '../../../environments/environment';
 import { Recommendation } from '../../shared/models/recommendation.model';
 const RECOMMANDATION_API: Recommendation = {
  recommendation_id: 1,
  alert_id: 1,
  action: 'Vérifier la consommation',
  explanation: 'Pic détecté',
  rule_reference: 'spike-v1',
  created_at: '2024-01-01T00:00:00Z',
 };
 describe('RecommendationsService', () => {
  let service: RecommendationsService;
  let httpMock: HttpTestingController;
  beforeEach(() => {
    TestBed.configureTestingModule({
      providers: [provideHttpClient(), provideHttpClientTesting()],
    });
    service = TestBed.inject(RecommendationsService);
    httpMock = TestBed.inject(HttpTestingController);
  });
  afterEach(() => httpMock.verify());
  it('liste les recommandations depuis le bon endpoint', () => {
    let result: Recommendation[] = [];
    service.getRecommendations().subscribe((r) => (result = r));
    const req = httpMock.expectOne(`${environment.apiUrl}/recommendations`);
    expect(req.request.method).toBe('GET');
    req.flush([RECOMMANDATION_API]);
    expect(result.length).toBe(1);
    expect(result[0].alert_id).toBe(1);
  });
  it('décrit une recommandation par son identifiant', () => {
    service.getRecommendation(42).subscribe();
    const req = httpMock.expectOne(`${environment.apiUrl}/recommendations/42`);
    expect(req.request.method).toBe('GET');
    req.flush({ ...RECOMMANDATION_API, recommendation_id: 42 });
  });
  it('déclenche la génération en POST avec le site en paramètre de requête', () => {
    let result: unknown;
    service.generate('SITE001').subscribe((r) => (result = r));
    const req = httpMock.expectOne(
      (r) => r.url === `${environment.apiUrl}/recommendations/generate` && r.method === 'POST',
    );
    expect(req.request.params.get('site_id')).toBe('SITE001');
    expect(req.request.body).toBeNull();
    req.flush({ alerts_examined: 2, recommendations_created: 3, already_present: 1 });
    expect(result).toEqual({ alerts_examined: 2, recommendations_created: 3, already_present: 1 });
  });
  it('génère pour tout le parc quand aucun site n’est donné', () => {
    service.generate().subscribe();
    const req = httpMock.expectOne(
      (r) => r.url === `${environment.apiUrl}/recommendations/generate` && r.method === 'POST',
    );
    expect(req.request.params.has('site_id')).toBe(false);
    req.flush({ alerts_examined: 0, recommendations_created: 0, already_present: 0 });
  });
 });
@@ -1,34 +0,0 @@
 import { Service, inject } from '@angular/core';
 import { HttpClient, HttpParams } from '@angular/common/http';
 import { environment } from '../../../environments/environment';
 import {
  Recommendation,
  RecommendationGenerationReport,
 } from '../../shared/models/recommendation.model';
@Service()
 export class RecommendationsService {
  private http = inject(HttpClient);
  getRecommendations() {
    return this.http.get<Recommendation[]>(`${environment.apiUrl}/recommendations`);
  }
  getRecommendation(recommendationId: number) {
    return this.http.get<Recommendation>(
      `${environment.apiUrl}/recommendations/${recommendationId}`,
    );
  }
  generate(siteId?: string) {
    let params = new HttpParams();
    if (siteId) {
      params = params.set('site_id', siteId);
    }
    return this.http.post<RecommendationGenerationReport>(
      `${environment.apiUrl}/recommendations/generate`,
      null,
      { params },
    );
  }
 }
@@ -1,48 +0,0 @@
 import { TestBed } from '@angular/core/testing';
 import { provideHttpClient } from '@angular/common/http';
 import { provideHttpClientTesting, HttpTestingController } from '@angular/common/http/testing';
 import { SensorsService } from './sensors.service';
 import { environment } from '../../../environments/environment';
 describe('SensorsService', () => {
  let service: SensorsService;
  let httpMock: HttpTestingController;
  beforeEach(() => {
    TestBed.configureTestingModule({
      providers: [provideHttpClient(), provideHttpClientTesting()],
    });
    service = TestBed.inject(SensorsService);
    httpMock = TestBed.inject(HttpTestingController);
  });
  afterEach(() => httpMock.verify());
  it("appelle l'endpoint /sensors/status et retourne la réponse", () => {
    let result: unknown;
    service.getStatus().subscribe((r) => (result = r));
    const req = httpMock.expectOne(`${environment.apiUrl}/sensors/status`);
    expect(req.request.method).toBe('GET');
    req.flush({
      timestamp: '2026-09-18T08:00:00',
      sites: [
        {
          site_id: 'SITE001',
          site_name: 'Test',
          overall: 'ok',
          sensors: {
            consumption: { status: 'ok', since: null },
            electrical: { status: 'ok', since: null },
            temperature: { status: 'ok', since: null },
            humidity: { status: 'ok', since: null },
            network: { status: 'ok', since: null },
          },
        },
      ],
    });
    expect((result as { sites: unknown[] }).sites.length).toBe(1);
  });
 });
@@ -1,13 +0,0 @@
 import { Service, inject } from '@angular/core';
 import { HttpClient } from '@angular/common/http';
 import { environment } from '../../../environments/environment';
 import {SensorStatusResponse} from '../../shared/models/sensor-status.model';
@Service()
 export class SensorsService {
  private http = inject(HttpClient);
  getStatus() {
    return this.http.get<SensorStatusResponse>(`${environment.apiUrl}/sensors/status`);
  }
 }
@@ -10,11 +10,7 @@
      </div>
    </div>
    <div class="dashboard__actions">
      @if (auth.principal()?.role === 'admin') {
        <a routerLink="/monitoring/sensors" class="ev-link">Supervision des capteurs</a>
      }
      <a routerLink="/sites" class="ev-link">Voir les sites</a>
      <a routerLink="/recommendations" class="ev-link">Recommandations</a>
      <ev-button
        class="logout-button"
        variant="secondary"
@@ -25,123 +21,55 @@
    </div>
  </header>
-  @if (statsError(); as message) {
+  @if (error(); as message) {
    <ev-alert severity="danger" class="banner-error">{{ message }}</ev-alert>
  }
  @if (predictionsError(); as message) {
    <ev-alert severity="danger" class="banner-error">{{ message }}</ev-alert>
  }
  @if (stats(); as s) {
-    <p class="dashboard__status">
+    <section class="overview">
-      <span class="dashboard__pulse" aria-hidden="true"></span>
+      <ev-card class="card card--gauge">
-      Actualisé à {{ s.timestamp | date: 'HH:mm:ss' }} · {{ s.total_sites }} sites suivis
+        <span class="card__label">Consommation vs capacité</span>
    </p>
    <section class="overview" aria-label="Indicateurs du parc">
      <ev-card class="kpi kpi--gauge">
        <span class="kpi__label">Consommation vs capacité</span>
        <app-consumption-gauge
          [consumption]="s.total_consumption_kw"
          [capacity]="s.total_capacity_kw"
        />
-        <span class="kpi__value">
+        <span class="card__value"
-          {{ s.total_consumption_kw | number: '1.0-1' }}
+          >{{ s.total_consumption_kw | number: '1.0-1' }} /
-          <small>/ {{ s.total_capacity_kw | number }} kW</small>
+          {{ s.total_capacity_kw | number }} kW</span
-        </span>
+        >
      </ev-card>
-      <ev-card class="kpi">
+      <ev-card class="card">
-        <span class="kpi__label">Charge moyenne du parc</span>
+        <span class="card__label">Charge moyenne du parc</span>
-        <span class="kpi__value"
+        <span class="card__value">{{ s.average_load_percent }} %</span>
-          >{{ s.average_load_percent | number: '1.0-0' }} <small>%</small></span
+        <div class="progress-bar">
-        >
+          <div class="progress-bar__fill" [style.width.%]="s.average_load_percent"></div>
        <div
          class="progress-bar"
          role="progressbar"
          aria-valuemin="0"
          aria-valuemax="100"
          [attr.aria-valuenow]="s.average_load_percent"
        >
          <div
            class="progress-bar__fill"
            [class]="'progress-bar__fill--' + loadTone(s.average_load_percent)"
            [style.width.%]="s.average_load_percent"
          ></div>
        </div>
        <span class="kpi__hint">{{ loadHint(s.average_load_percent) }}</span>
      </ev-card>
-      <ev-card class="kpi">
+      <ev-card class="card">
-        <span class="kpi__label">Sites suivis</span>
+        <span class="card__label">Sites suivis</span>
-        <span class="kpi__value">{{ s.total_sites }}</span>
+        <span class="card__value">{{ s.total_sites }}</span>
        <a routerLink="/sites" class="ev-link kpi__link">Voir la liste des sites</a>
      </ev-card>
    </section>
    <section class="chart-section">
      <h2>Charge et alerte visuelle par site</h2>
      <app-site-load-chart [sites]="s.sites" />
    </section>
  }
-  <div class="dashboard__grid">
+  @if (alerts().length > 0) {
-    <div class="dashboard__main">
+    <section class="alerts-section">
-      @if (stats(); as s) {
+      <h2>Alertes actives</h2>
-        <section class="chart-section">
+      <ul class="alerts-list">
-          <h2>Charge par site</h2>
+        @for (alert of alerts(); track alert.alert_id) {
-          <ev-card class="chart-card">
+          <li class="alert-item">
-            <app-site-load-chart [sites]="s.sites" />
+            <ev-badge [tone]="badgeToneForSeverity(alert.severity)">{{ alert.severity }}</ev-badge>
-          </ev-card>
+            <span class="alert-item__message">{{ alert.message }}</span>
-        </section>
+          </li>
      }
      <section class="predictions-section">
        <h2>Prévisions de consommation</h2>
        @if (predictions().length > 0) {
          <ev-card class="ev-table-card">
            <table class="ev-table">
              <thead>
                <tr>
                  <th>Site</th>
                  <th>Prévision</th>
                  <th>Échéance</th>
                  <th></th>
                </tr>
              </thead>
              <tbody>
                @for (site of predictions(); track site.site_id) {
                  <tr>
                    <td>{{ site.site_name }}</td>
                    @if (site.prediction; as prediction) {
                      @if (prediction.status === 'available') {
                        <td class="ev-table__number">
                          {{ prediction.predicted_value | number: '1.0-1' }} kWh
                        </td>
                        <td>{{ prediction.target_at | date: "dd/MM 'à' HH:mm" }}</td>
                      } @else {
                        <td>
                          <ev-badge [tone]="badgeToneForPredictionStatus(prediction.status)">{{
                            prediction.status === 'insufficient_data'
                              ? 'Historique insuffisant'
                              : 'Erreur'
                          }}</ev-badge>
                        </td>
                        <td class="ev-table__muted">-</td>
                      }
                    } @else {
                      <td><ev-badge tone="neutral">Pas encore de prévision</ev-badge></td>
                      <td class="ev-table__muted">-</td>
                    }
                    <td><a [routerLink]="['/sites', site.site_id]" class="ev-link">Détail</a></td>
                  </tr>
                }
              </tbody>
            </table>
          </ev-card>
        } @else if (!predictionsError()) {
          <p class="dashboard__empty">Aucune prévision disponible pour le moment.</p>
        }
-      </section>
+      </ul>
-    </div>
+    </section>
-
+  }
    <aside class="dashboard__side" aria-label="Alertes actives">
      <app-alert-feed />
    </aside>
  </div>
 </div>
@@ -8,11 +8,9 @@
 .dashboard__header {
  display: flex;
  flex-wrap: wrap;
  align-items: flex-start;
  justify-content: space-between;
-  gap: var(--space-3);
+  margin-bottom: 2rem;
  margin-bottom: var(--space-3);
 }
 .dashboard__brand {
@@ -22,9 +20,8 @@
  h1 {
    margin: 0;
-    font-size: var(--font-size-xl);
+    font-size: 1.75rem;
    font-weight: 700;
    letter-spacing: -0.01em;
  }
 }
@@ -34,69 +31,19 @@
 .dashboard__subtitle {
  margin: 0.25rem 0 0;
  font-size: var(--font-size-sm);
  color: var(--color-text-muted);
 }
 .dashboard__actions {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
-  gap: var(--space-2);
+  gap: 1rem;
  .ev-link {
    padding: 0.45rem 0.9rem;
    border-radius: var(--radius-pill);
    background: var(--color-primary-light);
    color: var(--color-primary-hover);
    font-size: var(--font-size-sm);
    transition: background 0.15s ease;
    &:hover {
      background: var(--color-primary);
      color: var(--color-text-inverse);
      text-decoration: none;
    }
  }
 }
 .dashboard__status {
  display: flex;
  align-items: center;
  gap: var(--space-2);
  margin: 0 0 var(--space-4);
  font-size: var(--font-size-sm);
  color: var(--color-text-muted);
 }
 .dashboard__pulse {
  width: 0.6rem;
  height: 0.6rem;
  border-radius: 50%;
  background: var(--color-success);
  animation: pulse 2s ease-out infinite;
 }
@keyframes pulse {
  0% {
    box-shadow: 0 0 0 0 rgba(22, 163, 74, 0.45);
  }
  100% {
    box-shadow: 0 0 0 8px rgba(22, 163, 74, 0);
  }
 }
@media (prefers-reduced-motion: reduce) {
  .dashboard__pulse {
    animation: none;
  }
 }
 h2 {
-  margin: 0 0 var(--space-3);
+  font-size: 1.1rem;
  font-size: var(--font-size-lg);
  font-weight: 600;
  margin: 0 0 1rem;
 }
 .banner-error {
@@ -107,124 +54,70 @@ h2 {
 .overview {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
-  gap: var(--space-3);
+  gap: 1rem;
-  margin-bottom: var(--space-5);
+  margin-bottom: 2.5rem;
 }
-.kpi {
+.card {
-  position: relative;
+  padding: 1.25rem;
-  overflow: hidden;
+  gap: 0.35rem;
  padding: var(--space-4);
  gap: var(--space-1);
  transition:
    box-shadow 0.15s ease,
    transform 0.15s ease;
  &::before {
    content: '';
    position: absolute;
    inset: 0 0 auto 0;
    height: 3px;
    background: var(--color-primary);
  }
  &:hover {
    box-shadow: var(--shadow-card-hover);
    transform: translateY(-1px);
  }
 }
-.kpi--gauge {
+.card--gauge {
  align-items: center;
  text-align: center;
 }
-.kpi__label {
+.card__label {
-  font-size: var(--font-size-xs);
+  font-size: 0.8rem;
  font-weight: 600;
  color: var(--color-text-muted);
  text-transform: uppercase;
-  letter-spacing: 0.06em;
+  letter-spacing: 0.02em;
 }
-.kpi__value {
+.card__value {
-  font-size: var(--font-size-2xl);
+  font-size: 1.6rem;
  font-weight: 700;
  line-height: 1.1;
  font-variant-numeric: tabular-nums;
  small {
    font-size: var(--font-size-sm);
    font-weight: 500;
    color: var(--color-text-muted);
  }
 }
 .kpi__hint {
  font-size: var(--font-size-xs);
  color: var(--color-text-muted);
 }
 .kpi__link {
  margin-top: auto;
  font-size: var(--font-size-sm);
 }
 .progress-bar {
-  height: 8px;
+  height: 6px;
  margin: var(--space-1) 0;
  background: var(--color-border-light);
  border-radius: var(--radius-pill);
  overflow: hidden;
  margin-top: 0.25rem;
 }
 .progress-bar__fill {
  height: 100%;
  background: var(--color-primary);
  border-radius: var(--radius-pill);
  background: var(--color-success);
  transition: width 0.3s ease;
 }
 .progress-bar__fill--warning {
  background: var(--color-warning);
 }
 .progress-bar__fill--danger {
  background: var(--color-danger);
 }
 .dashboard__grid {
  display: grid;
  grid-template-columns: minmax(0, 1fr) minmax(320px, 380px);
  gap: var(--space-4);
  align-items: start;
 }
 .dashboard__side {
  position: sticky;
  top: var(--space-3);
 }
 .chart-section {
-  margin-bottom: var(--space-5);
+  margin-bottom: 2.5rem;
 }
-.chart-card {
+.alerts-list {
-  padding: var(--space-3);
+  list-style: none;
 }
 .dashboard__empty {
  margin: 0;
-  font-size: var(--font-size-sm);
+  padding: 0;
-  color: var(--color-text-muted);
+  display: flex;
  flex-direction: column;
  gap: 0.5rem;
 }
-@media (max-width: 900px) {
+.alert-item {
-  .dashboard__grid {
+  display: flex;
-    grid-template-columns: 1fr;
+  align-items: center;
-  }
+  gap: 0.75rem;
-
+  padding: 0.7rem 1rem;
-  .dashboard__side {
+  border-radius: var(--radius-md);
-    position: static;
+  background: var(--color-danger-bg);
-  }
+  border: 1px solid var(--color-danger-border);
 }
 .alert-item__message {
  font-size: 0.9rem;
 }
@@ -1,13 +1,11 @@
 import { TestBed } from '@angular/core/testing';
 import { vi } from 'vitest';
-import { Observable, of, throwError } from 'rxjs';
+import { of, throwError } from 'rxjs';
 import { Router, provideRouter } from '@angular/router';
 import { Dashboard } from './dashboard';
 import { StatsService } from '../../core/services/stats.service';
 import { AlertsService } from '../../core/services/alerts.service';
-import { SitesService } from '../../core/services/sites.service';
+import {AuthService} from '../../core/services/auth.service';
-import { PredictionsService } from '../../core/services/predictions.service';
+import {Router, provideRouter} from '@angular/router';
 import { AuthService } from '../../core/services/auth.service';
 vi.mock('chart.js', () => {
  class ChartMock {
@@ -19,219 +17,166 @@ vi.mock('chart.js', () => {
  return { Chart: ChartMock, registerables: [] };
 });
 const STATS = { total_sites: 7, sites: [] };
 function predictionsMock(sites: unknown[] = []) {
  return {
    getPredictions: vi.fn().mockReturnValue(of({ timestamp: '2026-09-18T09:00:00Z', sites })),
  };
 }
 function setup(
  options: {
    stats?: Observable<unknown>;
    predictions?: { getPredictions: ReturnType<typeof vi.fn> };
    auth?: Record<string, unknown>;
  } = {},
 ) {
  const statsMock = { getSummary: vi.fn().mockReturnValue(options.stats ?? of(STATS)) };
  const predictions = options.predictions ?? predictionsMock();
  TestBed.configureTestingModule({
    imports: [Dashboard],
    providers: [
      { provide: StatsService, useValue: statsMock },
      { provide: AlertsService, useValue: { getAlerts: vi.fn().mockReturnValue(of([])) } },
      { provide: SitesService, useValue: { getSites: vi.fn().mockReturnValue(of([])) } },
      { provide: PredictionsService, useValue: predictions },
      ...(options.auth ? [{ provide: AuthService, useValue: options.auth }] : []),
      provideRouter([]),
    ],
  });
  return { fixture: TestBed.createComponent(Dashboard), statsMock, predictions };
 }
 describe('Dashboard', () => {
  afterEach(() => vi.useRealTimers());
-  it('charge les stats et les prévisions au démarrage', async () => {
+  it('charge les stats et les alertes au démarrage', async () => {
-    const { fixture, statsMock, predictions } = setup({
+    const statsMock = { getSummary: vi.fn().mockReturnValue(of({ total_sites: 7, sites: [] })) };
-      predictions: predictionsMock([{ site_id: 'SITE001', site_name: 'Test', prediction: null }]),
+    const alertsMock = { getAlerts: vi.fn().mockReturnValue(of([{ alert_id: 'A1' }])) };
    TestBed.configureTestingModule({
      imports: [Dashboard],
      providers: [
        { provide: StatsService, useValue: statsMock },
        { provide: AlertsService, useValue: alertsMock },
        provideRouter([]),
      ],
    });
    const fixture = TestBed.createComponent(Dashboard);
    fixture.detectChanges();
    // laisse le timer(0, ...) se déclencher avant de vérifier
    await new Promise((resolve) => setTimeout(resolve, 0));
    fixture.detectChanges();
    expect(statsMock.getSummary).toHaveBeenCalled();
-    expect(predictions.getPredictions).toHaveBeenCalled();
+    expect(alertsMock.getAlerts).toHaveBeenCalled();
-    expect(fixture.componentInstance.predictions().length).toBe(1);
+    expect(fixture.componentInstance.alerts().length).toBe(1);
-    expect(fixture.componentInstance.statsError()).toBeNull();
+    expect(fixture.componentInstance.error()).toBeNull();
    expect(fixture.componentInstance.predictionsError()).toBeNull();
  });
  it('délègue les alertes au widget app-alert-feed', () => {
    const { fixture } = setup();
    fixture.detectChanges();
    expect(fixture.nativeElement.querySelector('app-alert-feed')).not.toBeNull();
  });
  it("signale l'indisponibilité puis repart au rafraîchissement suivant", () => {
    vi.useFakeTimers();
-    const { fixture, statsMock } = setup({
+    const statsMock = {
-      stats: throwError(() => new Error('API injoignable')),
+      getSummary: vi
-    });
+        .fn()
-    statsMock.getSummary
+        .mockReturnValueOnce(throwError(() => new Error('API injoignable')))
-      .mockReturnValueOnce(throwError(() => new Error('API injoignable')))
+        .mockReturnValue(of({ total_sites: 7, sites: [] })),
-      .mockReturnValue(of(STATS));
+    };
    const alertsMock = { getAlerts: vi.fn().mockReturnValue(of([])) };
    TestBed.configureTestingModule({
      imports: [Dashboard],
      providers: [
        { provide: StatsService, useValue: statsMock },
        { provide: AlertsService, useValue: alertsMock },
        provideRouter([]),
      ],
    });
    const fixture = TestBed.createComponent(Dashboard);
    fixture.detectChanges();
    vi.advanceTimersByTime(1);
    expect(statsMock.getSummary).toHaveBeenCalledTimes(1);
-    expect(fixture.componentInstance.statsError()).not.toBeNull();
+    expect(fixture.componentInstance.error()).not.toBeNull();
    expect(fixture.componentInstance.stats()).toBeNull();
    vi.advanceTimersByTime(10000);
    expect(statsMock.getSummary).toHaveBeenCalledTimes(2);
    expect(fixture.componentInstance.stats()).not.toBeNull();
-    expect(fixture.componentInstance.statsError()).toBeNull();
+    expect(fixture.componentInstance.error()).toBeNull();
  });
-  it("n'interrompt pas la page quand le chargement des prévisions échoue", () => {
+  it("n'interrompt pas la page quand le chargement des alertes échoue", () => {
-    const { fixture } = setup({
+    const statsMock = { getSummary: vi.fn().mockReturnValue(of({ total_sites: 7, sites: [] })) };
-      predictions: { getPredictions: vi.fn().mockReturnValue(throwError(() => new Error('nope'))) },
+    const alertsMock = { getAlerts: vi.fn().mockReturnValue(throwError(() => new Error('nope'))) };
    TestBed.configureTestingModule({
      imports: [Dashboard],
      providers: [
        { provide: StatsService, useValue: statsMock },
        { provide: AlertsService, useValue: alertsMock },
        provideRouter([]),
      ],
    });
    const fixture = TestBed.createComponent(Dashboard);
    fixture.detectChanges();
-    expect(fixture.componentInstance.predictions().length).toBe(0);
+    expect(fixture.componentInstance.alerts().length).toBe(0);
    expect(fixture.componentInstance.predictionsError()).not.toBeNull();
  });
  it("un rafraîchissement de stats n'efface pas une erreur de prévisions en attente", () => {
    vi.useFakeTimers();
    const { fixture } = setup({
      predictions: { getPredictions: vi.fn().mockReturnValue(throwError(() => new Error('nope'))) },
    });
    fixture.detectChanges();
    expect(fixture.componentInstance.predictionsError()).not.toBeNull();
    // Plusieurs cycles de `timer(0, 10_000)` (stats) plus tard, l'erreur des prévisions doit
    // toujours être visible : rien ne vient la rafraîchir tant que la section n'est pas rechargée.
    vi.advanceTimersByTime(30000);
    expect(fixture.componentInstance.predictionsError()).not.toBeNull();
    expect(fixture.componentInstance.statsError()).toBeNull();
  });
  it('appelle logout et redirige vers /login au clic sur le bouton de déconnexion', () => {
-    const authMock = {
+  const statsMock = { getSummary: vi.fn().mockReturnValue(of({ total_sites: 7, sites: [] })) };
-      logout: vi.fn().mockReturnValue(of(undefined)),
+  const alertsMock = { getAlerts: vi.fn().mockReturnValue(of([])) };
-      clearSession: vi.fn(),
+  const authMock = { logout: vi.fn().mockReturnValue(of(undefined)), clearSession: vi.fn() };
      principal: vi.fn().mockReturnValue({ role: 'admin' }),
    };
    const { fixture } = setup({ auth: authMock });
    fixture.detectChanges();
    const router = TestBed.inject(Router);
    const navigateSpy = vi.spyOn(router, 'navigate').mockResolvedValue(true);
-    fixture.nativeElement.querySelector('.logout-button').click();
+  TestBed.configureTestingModule({
-
+    imports: [Dashboard],
-    expect(authMock.logout).toHaveBeenCalled();
+    providers: [
-    expect(navigateSpy).toHaveBeenCalledWith(['/login']);
+      { provide: StatsService, useValue: statsMock },
      { provide: AlertsService, useValue: alertsMock },
      { provide: AuthService, useValue: authMock },
      provideRouter([]),
    ],
  });
  const fixture = TestBed.createComponent(Dashboard);
  fixture.detectChanges();
  const router = TestBed.inject(Router);
  const navigateSpy = vi.spyOn(router, 'navigate').mockResolvedValue(true);
  const button = fixture.nativeElement.querySelector('.logout-button');
  button.click();
  expect(authMock.logout).toHaveBeenCalled();
  expect(navigateSpy).toHaveBeenCalledWith(['/login']);
  });
  it('déconnecte localement et redirige vers /login même si logout échoue côté réseau', () => {
-    const authMock = {
+  const statsMock = { getSummary: vi.fn().mockReturnValue(of({ total_sites: 7, sites: [] })) };
-      logout: vi.fn().mockReturnValue(throwError(() => new Error('réseau indisponible'))),
+  const alertsMock = { getAlerts: vi.fn().mockReturnValue(of([])) };
-      clearSession: vi.fn(),
+  const authMock = {
-      principal: vi.fn().mockReturnValue({ role: 'admin' }),
+    logout: vi.fn().mockReturnValue(throwError(() => new Error('réseau indisponible'))),
-    };
+    clearSession: vi.fn(),
-    const { fixture } = setup({ auth: authMock });
+  };
-    fixture.detectChanges();
+  TestBed.configureTestingModule({
-    const router = TestBed.inject(Router);
+    imports: [Dashboard],
-    const navigateSpy = vi.spyOn(router, 'navigate').mockResolvedValue(true);
+    providers: [
-
+      { provide: StatsService, useValue: statsMock },
-    fixture.nativeElement.querySelector('.logout-button').click();
+      { provide: AlertsService, useValue: alertsMock },
-
+      { provide: AuthService, useValue: authMock },
-    expect(authMock.clearSession).toHaveBeenCalled();
+      provideRouter([]),
-    expect(navigateSpy).toHaveBeenCalledWith(['/login']);
+    ],
  });
-  it('affiche l’heure du dernier relevé et les indicateurs du parc', () => {
+  const fixture = TestBed.createComponent(Dashboard);
-    vi.useFakeTimers();
+  fixture.detectChanges();
-    const { fixture } = setup({
+
-      stats: of({
+  const router = TestBed.inject(Router);
-        timestamp: '2026-09-18T09:00:00Z',
+  const navigateSpy = vi.spyOn(router, 'navigate').mockResolvedValue(true);
-        total_sites: 7,
+
-        total_consumption_kw: 1234.5,
+  const button = fixture.nativeElement.querySelector('.logout-button');
-        total_capacity_kw: 5000,
+  button.click();
-        average_load_percent: 24.7,
+
-        sites: [],
+  expect(authMock.clearSession).toHaveBeenCalled();
-      }),
+  expect(navigateSpy).toHaveBeenCalledWith(['/login']);
 });
  it('distingue le ton des sévérités high et critical', () => {
    const statsMock = { getSummary: vi.fn().mockReturnValue(of({ total_sites: 7, sites: [] })) };
    const alertsMock = { getAlerts: vi.fn().mockReturnValue(of([])) };
    TestBed.configureTestingModule({
      imports: [Dashboard],
      providers: [
        { provide: StatsService, useValue: statsMock },
        { provide: AlertsService, useValue: alertsMock },
        provideRouter([]),
      ],
    });
-    fixture.detectChanges();
+    const fixture = TestBed.createComponent(Dashboard);
    vi.advanceTimersByTime(1);
    fixture.detectChanges();
    const texte = fixture.nativeElement.textContent as string;
    expect(texte).toContain('Actualisé à');
    expect(texte).toContain('7 sites suivis');
    expect(texte).toContain('Marge confortable');
    expect(fixture.nativeElement.querySelector('.progress-bar__fill--success')).not.toBeNull();
  });
  it('présente les prévisions en tableau avec un lien vers chaque site', () => {
    const { fixture } = setup({
      predictions: predictionsMock([
        {
          site_id: 'SITE001',
          site_name: 'Usine Nantes',
          prediction: {
            target_at: '2026-09-18T10:00:00Z',
            target_metric: 'consumption_kwh',
            period_minutes: 60,
            predicted_value: 118.4,
            status: 'available',
            failure_reason: null,
            model_reference: 'lightgbm-v1',
            created_at: '2026-09-18T09:00:00Z',
          },
        },
        { site_id: 'SITE002', site_name: 'Bureau Lille', prediction: null },
      ]),
    });
    fixture.detectChanges();
    const table = fixture.nativeElement.querySelector('table.ev-table');
    expect(table).not.toBeNull();
    expect(table.textContent).toContain('118.4 kWh');
    expect(table.textContent).toContain('Pas encore de prévision');
    expect(fixture.nativeElement.querySelector('a[href="/sites/SITE001"]')).not.toBeNull();
  });
  it('colore la charge moyenne selon les seuils 70 % et 90 %', () => {
    const { fixture } = setup();
    const dashboard = fixture.componentInstance;
-    expect(dashboard.loadTone(69.9)).toBe('success');
+    expect(dashboard.badgeToneForSeverity('low')).toBe('success');
-    expect(dashboard.loadTone(70)).toBe('warning');
+    expect(dashboard.badgeToneForSeverity('medium')).toBe('warning');
-    expect(dashboard.loadTone(89.9)).toBe('warning');
+    expect(dashboard.badgeToneForSeverity('high')).toBe('danger');
-    expect(dashboard.loadTone(90)).toBe('danger');
+    expect(dashboard.badgeToneForSeverity('critical')).toBe('critical');
-    expect(dashboard.loadHint(95)).toBe('Proche de la capacité du parc');
+    expect(dashboard.badgeToneForSeverity('high')).not.toBe(
-  });
+      dashboard.badgeToneForSeverity('critical'),
-
+    );
  it('distingue le ton des statuts de prévision', () => {
    const { fixture } = setup();
    const dashboard = fixture.componentInstance;
    expect(dashboard.badgeToneForPredictionStatus('available')).toBe('success');
    expect(dashboard.badgeToneForPredictionStatus('insufficient_data')).toBe('warning');
    expect(dashboard.badgeToneForPredictionStatus('error')).toBe('danger');
  });
 });
@@ -1,16 +1,15 @@
-import { Component, OnInit, inject, signal, DestroyRef, WritableSignal } from '@angular/core';
+import { Component, OnInit, inject, signal, DestroyRef } from '@angular/core';
 import { takeUntilDestroyed } from '@angular/core/rxjs-interop';
 import { timer, switchMap, catchError, EMPTY, Observable } from 'rxjs';
-import { DecimalPipe, DatePipe } from '@angular/common';
+import { DecimalPipe } from '@angular/common';
 import { Router, RouterLink } from '@angular/router';
 import { StatsService } from '../../core/services/stats.service';
 import { ConsumptionGauge } from '../../shared/components/consumption-gauge/consumption-gauge';
 import { SiteLoadChart } from '../../shared/components/site-load-chart/site-load-chart';
-import { AlertFeed } from '../../shared/components/alert-feed/alert-feed';
+import { AlertsService } from '../../core/services/alerts.service';
 import { PredictionsService } from '../../core/services/predictions.service';
 import { AuthService } from '../../core/services/auth.service';
 import { StatsSummary } from '../../shared/models/stats.model';
-import { PredictionStatus, SitePredictionSummary } from '../../shared/models/prediction.model';
+import { Alert, AlertSeverity } from '../../shared/models/alert.model';
 import { Card } from '../../shared/components/ui/card/card';
 import { Alert as EvAlert } from '../../shared/components/ui/alert/alert';
 import { Badge, BadgeTone } from '../../shared/components/ui/badge/badge';
@@ -21,29 +20,21 @@ const REFRESH_INTERVAL_MS = 10000;
 const UNAVAILABLE_MESSAGE =
  'Données indisponibles, les valeurs affichées datent du dernier relevé.';
-// `error` n'a pas encore de précédent côté API mais figure dans `ck_prediction_status` :
+const TON_PAR_SEVERITE: Record<AlertSeverity, BadgeTone> = {
-// mieux vaut un ton défini que `undefined` le jour où ce statut apparaît.
+  low: 'success',
-const TON_PAR_STATUT_PREDICTION: Record<PredictionStatus, BadgeTone> = {
+  medium: 'warning',
-  available: 'success',
+  high: 'danger',
-  insufficient_data: 'warning',
+  critical: 'critical',
  error: 'danger',
 };
 const SEUIL_CHARGE_SOUTENUE = 70;
 const SEUIL_CHARGE_CRITIQUE = 90;
 export type LoadTone = 'success' | 'warning' | 'danger';
@Component({
  selector: 'app-dashboard',
  standalone: true,
  imports: [
    DecimalPipe,
    DatePipe,
    RouterLink,
    ConsumptionGauge,
    SiteLoadChart,
    AlertFeed,
    Card,
    EvAlert,
    Badge,
@@ -55,67 +46,38 @@ export type LoadTone = 'success' | 'warning' | 'danger';
 })
 export class Dashboard implements OnInit {
  private statsService = inject(StatsService);
-  public auth = inject(AuthService);
+  private alertsService = inject(AlertsService);
-  private predictionsService = inject(PredictionsService);
+  private auth = inject(AuthService);
  private router = inject(Router);
  private destroyRef = inject(DestroyRef);
  stats = signal<StatsSummary | null>(null);
-  predictions = signal<SitePredictionSummary[]>([]);
+  alerts = signal<Alert[]>([]);
-
+  error = signal<string | null>(null);
  // Piège : un signal d'erreur par flux, sinon le tick suivant de `timer` (stats) efface en
  // silence l'échec des prévisions après 10 s au plus, sans retry ni indication à l'utilisateur.
  statsError = signal<string | null>(null);
  predictionsError = signal<string | null>(null);
  ngOnInit(): void {
-    // Les prévisions viennent d'un scoring hors ligne, pas d'un calcul à la demande : un seul
+    this.alertsService
-    // chargement au démarrage suffit, pas besoin du rafraîchissement périodique de `stats`.
+      .getAlerts()
-    this.predictionsService
+      .pipe(catchError(() => this.reportUnavailable()))
-      .getPredictions()
+      .subscribe((alerts) => this.alerts.set(alerts));
      .pipe(catchError(() => this.reportUnavailable(this.predictionsError)))
      .subscribe((summary) => {
        this.predictionsError.set(null);
        this.predictions.set(summary.sites);
      });
    // Piège : le catchError porte sur l'observable interne. Sur le flux externe il
    // terminerait le timer, et le rafraîchissement ne repartirait jamais.
    timer(0, REFRESH_INTERVAL_MS)
      .pipe(
        switchMap(() =>
-          this.statsService
+          this.statsService.getSummary().pipe(catchError(() => this.reportUnavailable())),
            .getSummary()
            .pipe(catchError(() => this.reportUnavailable(this.statsError))),
        ),
        takeUntilDestroyed(this.destroyRef),
      )
      .subscribe((stats) => {
-        this.statsError.set(null);
+        this.error.set(null);
        this.stats.set(stats);
      });
  }
-  badgeToneForPredictionStatus(status: PredictionStatus): BadgeTone {
+  badgeToneForSeverity(severity: AlertSeverity): BadgeTone {
-    return TON_PAR_STATUT_PREDICTION[status];
+    return TON_PAR_SEVERITE[severity];
  }
  loadTone(percent: number): LoadTone {
    if (percent >= SEUIL_CHARGE_CRITIQUE) {
      return 'danger';
    }
    return percent >= SEUIL_CHARGE_SOUTENUE ? 'warning' : 'success';
  }
  loadHint(percent: number): string {
    switch (this.loadTone(percent)) {
      case 'danger':
        return 'Proche de la capacité du parc';
      case 'warning':
        return 'Charge soutenue';
      default:
        return 'Marge confortable';
    }
  }
  onLogout(): void {
@@ -129,8 +91,8 @@ export class Dashboard implements OnInit {
    });
  }
-  private reportUnavailable(target: WritableSignal<string | null>): Observable<never> {
+  private reportUnavailable(): Observable<never> {
-    target.set(UNAVAILABLE_MESSAGE);
+    this.error.set(UNAVAILABLE_MESSAGE);
    return EMPTY;
  }
 }
@@ -1,51 +0,0 @@
 <div class="sensor-status">
  <nav class="ev-breadcrumb">
    <a routerLink="/dashboard">Tableau de bord</a>
  </nav>
  <header class="sensor-status__header">
    <a routerLink="/dashboard" class="ev-brand-link">
      <ev-brand class="sensor-status__logo" />
    </a>
    <div>
      <h1>Supervision des capteurs</h1>
      <p class="sensor-status__subtitle">État de santé par capteur et par site</p>
    </div>
  </header>
  @if (error(); as message) {
    <ev-alert severity="danger" class="banner-error">{{ message }}</ev-alert>
  }
  @if (data(); as d) {
    <div class="sites-grid">
      @for (site of d.sites; track site.site_id) {
        <ev-card class="site-card">
          <div class="site-card__header">
            <span class="site-card__name">{{ site.site_name }}</span>
            <ev-badge [tone]="badgeToneForOverall(site.overall)">{{ site.overall }}</ev-badge>
          </div>
          <ul class="sensor-list">
            @for (entry of sensorEntries; track entry[0]) {
              @let diagnostic = sensorOf(site.sensors, entry[0]);
              <li class="sensor-item">
                <span class="sensor-dot" [class]="'sensor-dot--' + diagnostic.status"></span>
                <span class="sensor-item__label">{{ entry[1] }}</span>
                @if (diagnostic.status === 'failing') {
                  <span class="sensor-item__since">
                    @if (diagnostic.since; as since) {
                      dernière lecture le {{ since | date: 'dd/MM/yyyy HH:mm' }}
                    } @else {
                      aucune lecture reçue
                    }
                  </span>
                }
              </li>
            }
          </ul>
        </ev-card>
      }
    </div>
  }
 </div>
@@ -1,90 +0,0 @@
 :host {
  display: block;
  color: var(--color-text);
  padding: 2.5rem 2rem;
  max-width: 1100px;
  margin: 0 auto;
 }
 .sensor-status__header {
  display: flex;
  align-items: center;
  gap: 0.85rem;
  margin-bottom: 2rem;
  h1 {
    margin: 0;
    font-size: 1.75rem;
    font-weight: 700;
  }
 }
 .sensor-status__logo {
  font-size: 1.3rem;
 }
 .sensor-status__subtitle {
  margin: 0.25rem 0 0;
  color: var(--color-text-muted);
 }
 .banner-error {
  display: block;
  margin: 0 0 1.5rem;
 }
 .sites-grid {
  display: grid;
  grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
  gap: 1rem;
 }
 .site-card__header {
  display: flex;
  align-items: center;
  justify-content: space-between;
  margin-bottom: 0.75rem;
 }
 .site-card__name {
  font-weight: 600;
 }
 .sensor-list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: 0.5rem;
 }
 .sensor-item {
  display: flex;
  align-items: center;
  gap: 0.5rem;
  font-size: 0.85rem;
 }
 .sensor-dot {
  width: 8px;
  height: 8px;
  border-radius: 50%;
  flex-shrink: 0;
  &--ok {
    background: var(--color-success);
  }
  &--failing {
    background: var(--color-danger);
  }
 }
 .sensor-item__label {
  flex: 1;
 }
 .sensor-item__since {
  color: var(--color-text-muted);
  font-size: 0.75rem;
 }
@@ -1,122 +0,0 @@
 import { TestBed } from '@angular/core/testing';
 import { of, throwError } from 'rxjs';
 import { vi } from 'vitest';
 import { SensorStatusView } from './sensor-status';
 import { SensorsService } from '../../../core/services/sensors.service';
 import { SiteSensors } from '../../../shared/models/sensor-status.model';
 import {provideRouter} from '@angular/router';
 const OK_SENSORS: SiteSensors = {
  consumption: { status: 'ok', since: null },
  electrical: { status: 'ok', since: null },
  temperature: { status: 'ok', since: null },
  humidity: { status: 'ok', since: null },
  network: { status: 'ok', since: null },
 };
 describe('SensorStatusView', () => {
  let sensorsMock: { getStatus: ReturnType<typeof vi.fn> };
  beforeEach(() => {
    sensorsMock = { getStatus: vi.fn() };
    TestBed.configureTestingModule({
      imports: [SensorStatusView],
      providers: [
        { provide: SensorsService, useValue: sensorsMock },
        provideRouter([]),
      ],
    });
  });
  it('charge et affiche les données au démarrage', () => {
    sensorsMock.getStatus.mockReturnValue(
      of({
        timestamp: '2026-09-18T08:00:00',
        sites: [
          { site_id: 'SITE001', site_name: 'Bureau Test', overall: 'ok', sensors: OK_SENSORS },
        ],
      })
    );
    const fixture = TestBed.createComponent(SensorStatusView);
    fixture.detectChanges();
    expect(fixture.componentInstance.data()?.sites.length).toBe(1);
    expect(fixture.componentInstance.error()).toBeNull();
    expect(fixture.nativeElement.textContent).toContain('Bureau Test');
  });
  it("affiche un message d'erreur si l'appel échoue", () => {
    sensorsMock.getStatus.mockReturnValue(throwError(() => new Error('boom')));
    const fixture = TestBed.createComponent(SensorStatusView);
    fixture.detectChanges();
    expect(fixture.componentInstance.error()).toBe(
      'État des capteurs indisponible, réessayez plus tard.'
    );
    expect(fixture.componentInstance.data()).toBeNull();
    expect(fixture.nativeElement.textContent).toContain('État des capteurs indisponible');
  });
  it('associe le bon ton de badge à chaque statut global', () => {
    sensorsMock.getStatus.mockReturnValue(of({ timestamp: '2026-09-18T08:00:00', sites: [] }));
    const fixture = TestBed.createComponent(SensorStatusView);
    const component = fixture.componentInstance;
    expect(component.badgeToneForOverall('ok')).toBe('success');
    expect(component.badgeToneForOverall('degraded')).toBe('warning');
    expect(component.badgeToneForOverall('critical')).toBe('critical');
    expect(component.badgeToneForOverall('inconnu')).toBe('neutral');
  });
  it('retourne le bon diagnostic via sensorOf', () => {
    sensorsMock.getStatus.mockReturnValue(of({ timestamp: '2026-09-18T08:00:00', sites: [] }));
    const fixture = TestBed.createComponent(SensorStatusView);
    const component = fixture.componentInstance;
    expect(component.sensorOf(OK_SENSORS, 'temperature')).toEqual({ status: 'ok', since: null });
  });
  it('affiche la date de la dernière lecture reçue pour un capteur en panne', () => {
    const sensors: SiteSensors = {
      ...OK_SENSORS,
      temperature: { status: 'failing', since: '2026-09-18T08:00:00' },
    };
    sensorsMock.getStatus.mockReturnValue(
      of({
        timestamp: '2026-09-18T08:00:00',
        sites: [{ site_id: 'SITE001', site_name: 'Bureau Test', overall: 'degraded', sensors }],
      })
    );
    const fixture = TestBed.createComponent(SensorStatusView);
    fixture.detectChanges();
    expect(fixture.nativeElement.textContent).toContain('dernière lecture le');
    expect(fixture.nativeElement.textContent).toContain('18/09/2026 08:00');
  });
  it("annonce l'absence de lecture quand un site n'en a jamais reçu", () => {
    const sensors: SiteSensors = {
      consumption: { status: 'failing', since: null },
      electrical: { status: 'failing', since: null },
      temperature: { status: 'failing', since: null },
      humidity: { status: 'failing', since: null },
      network: { status: 'failing', since: null },
    };
    sensorsMock.getStatus.mockReturnValue(
      of({
        timestamp: '2026-09-18T08:00:00',
        sites: [{ site_id: 'SITE001', site_name: 'Bureau Test', overall: 'critical', sensors }],
      })
    );
    const fixture = TestBed.createComponent(SensorStatusView);
    fixture.detectChanges();
    expect(fixture.nativeElement.textContent).toContain('aucune lecture reçue');
    expect(fixture.nativeElement.textContent).not.toContain('dernière lecture le');
  });
 });
@@ -1,65 +0,0 @@
 import { Component, OnInit, inject, signal } from '@angular/core';
 import { RouterLink } from '@angular/router';
 import { catchError, EMPTY, Observable } from 'rxjs';
 import {Badge, BadgeTone} from '../../../shared/components/ui/badge/badge';
 import {Card} from '../../../shared/components/ui/card/card';
 import {Alert} from '../../../shared/components/ui/alert/alert';
 import {Brand} from '../../../shared/components/ui/brand/brand';
 import {SensorsService} from '../../../core/services/sensors.service';
 import {SensorDiagnostic, SensorStatusResponse} from '../../../shared/models/sensor-status.model';
 import { DatePipe } from '@angular/common';
 const UNAVAILABLE_MESSAGE = 'État des capteurs indisponible, réessayez plus tard.';
 const SENSOR_LABELS: Record<string, string> = {
  consumption: 'Consommation',
  electrical: 'Électrique',
  temperature: 'Température',
  humidity: 'Humidité',
  network: 'Réseau',
 };
 const TON_PAR_OVERALL: Record<string, BadgeTone> = {
  ok: 'success',
  degraded: 'warning',
  critical: 'critical',
 };
@Component({
  selector: 'app-sensor-status',
  standalone: true,
  imports: [RouterLink, Card, Alert, Badge, Brand, DatePipe],
  templateUrl: './sensor-status.html',
  styleUrl: './sensor-status.scss',
 })
 export class SensorStatusView implements OnInit {
  private sensorsService = inject(SensorsService);
  data = signal<SensorStatusResponse | null>(null);
  error = signal<string | null>(null);
  readonly sensorEntries = Object.entries(SENSOR_LABELS);
  ngOnInit(): void {
    this.sensorsService
      .getStatus()
      .pipe(catchError(() => this.reportUnavailable()))
      .subscribe((response) => {
        this.error.set(null);
        this.data.set(response);
      });
  }
  sensorOf(sensors: Record<string, SensorDiagnostic>, key: string): SensorDiagnostic {
    return sensors[key];
  }
  badgeToneForOverall(overall: string): BadgeTone {
    return TON_PAR_OVERALL[overall] ?? 'neutral';
  }
  private reportUnavailable(): Observable<never> {
    this.error.set(UNAVAILABLE_MESSAGE);
    return EMPTY;
  }
 }
@@ -1,58 +0,0 @@
 <div class="recommendations">
  <nav class="ev-breadcrumb">
    <a routerLink="/dashboard">Tableau de bord</a>
  </nav>
  <header class="recommendations__header">
    <a routerLink="/dashboard" class="ev-brand-link">
      <ev-brand class="recommendations__logo" />
    </a>
    <div>
      <h1>Recommandations</h1>
      <p class="recommendations__subtitle">
        Actions proposées par le moteur de règles à partir des alertes
      </p>
    </div>
  </header>
  <div class="recommendations__toolbar">
    <label class="recommendations__filter">
      <span class="form-label">Site</span>
      <select class="form-select" data-testid="site-filter" (change)="onSiteChange($event)">
        <option value="" [selected]="!siteFilter()">Tous les sites</option>
        @for (site of sites(); track site.site_id) {
          <option [value]="site.site_id" [selected]="site.site_id === siteFilter()">
            {{ site.site_name }}
          </option>
        }
      </select>
    </label>
    @if (isAdmin()) {
      <ev-button
        variant="secondary"
        [fullWidth]="false"
        [disabled]="generating()"
        data-testid="generate"
        (click)="onGenerate()"
      >
        {{ generating() ? 'Génération en cours…' : 'Générer les recommandations' }}
      </ev-button>
    }
  </div>
  @if (generationReport(); as report) {
    <ev-alert severity="success" class="recommendations__banner">{{ bilan(report) }}.</ev-alert>
  }
  @if (generationError(); as message) {
    <ev-alert severity="danger" class="recommendations__banner">{{ message }}</ev-alert>
  }
  @if (alertId(); as id) {
    <p class="recommendations__focus">
      Alerte n° {{ id }} ·
      <a routerLink="/recommendations" class="ev-link">Toutes les recommandations</a>
    </p>
  }
  <app-recommendation-list [siteId]="siteFilter()" [alertId]="alertId()" [sites]="sites()" />
 </div>
@@ -1,59 +0,0 @@
 :host {
  display: block;
  color: var(--color-text);
  padding: 2.5rem 2rem;
  max-width: 1100px;
  margin: 0 auto;
 }
 .recommendations__header {
  display: flex;
  align-items: center;
  gap: 0.85rem;
  margin-bottom: 2rem;
  h1 {
    margin: 0;
    font-size: 1.75rem;
    font-weight: 700;
  }
 }
 .recommendations__logo {
  font-size: 1.3rem;
 }
 .recommendations__subtitle {
  margin: 0.25rem 0 0;
  color: var(--color-text-muted);
 }
 .recommendations__toolbar {
  display: flex;
  flex-wrap: wrap;
  align-items: flex-end;
  justify-content: space-between;
  gap: var(--space-3);
  margin-bottom: var(--space-4);
 }
 .recommendations__filter {
  display: flex;
  flex-direction: column;
  min-width: 14rem;
  .form-label {
    margin-top: 0;
  }
 }
 .recommendations__banner {
  display: block;
  margin-bottom: var(--space-3);
 }
 .recommendations__focus {
  margin: 0 0 var(--space-3);
  font-size: 0.9rem;
  color: var(--color-text-muted);
 }
@@ -1,169 +0,0 @@
 import { TestBed } from '@angular/core/testing';
 import { By } from '@angular/platform-browser';
 import { ActivatedRoute, convertToParamMap, provideRouter } from '@angular/router';
 import { vi } from 'vitest';
 import { BehaviorSubject, of, throwError } from 'rxjs';
 import { RecommendationsView, parseAlertId } from './recommendations';
 import { RecommendationList } from '../../shared/components/recommendation-list/recommendation-list';
 import { SitesService } from '../../core/services/sites.service';
 import { AlertsService } from '../../core/services/alerts.service';
 import { RecommendationsService } from '../../core/services/recommendations.service';
 import { AuthService } from '../../core/services/auth.service';
 const SITES = [
  {
    site_id: 'SITE001',
    site_name: 'Usine Nantes',
    site_type: 'industriel',
    location: 'Nantes',
    capacity_kw: 500,
    status: 'actif',
  },
 ];
 const BILAN = { alerts_examined: 2, recommendations_created: 3, already_present: 1 };
 function setup(options: { query?: Record<string, string>; role?: string } = {}) {
  const query = options.query ?? {};
  const queryParamMap = new BehaviorSubject(convertToParamMap(query));
  const generate = vi.fn().mockReturnValue(of(BILAN));
  const getRecommendations = vi.fn().mockReturnValue(of([]));
  const getAlerts = vi.fn().mockReturnValue(of([]));
  TestBed.configureTestingModule({
    imports: [RecommendationsView],
    providers: [
      provideRouter([]),
      {
        provide: ActivatedRoute,
        useValue: { queryParamMap, snapshot: { queryParamMap: convertToParamMap(query) } },
      },
      { provide: SitesService, useValue: { getSites: vi.fn().mockReturnValue(of(SITES)) } },
      { provide: AlertsService, useValue: { getAlerts } },
      { provide: RecommendationsService, useValue: { getRecommendations, generate } },
      {
        provide: AuthService,
        useValue: { principal: vi.fn().mockReturnValue({ role: options.role ?? 'lecteur' }) },
      },
    ],
  });
  const fixture = TestBed.createComponent(RecommendationsView);
  fixture.detectChanges();
  fixture.detectChanges();
  return { fixture, queryParamMap, generate, getRecommendations, getAlerts };
 }
 function listeEnfant(fixture: ReturnType<typeof setup>['fixture']): RecommendationList {
  return fixture.debugElement.query(By.directive(RecommendationList)).componentInstance;
 }
 describe('parseAlertId', () => {
  it("n'accepte qu'un entier strictement positif", () => {
    expect(parseAlertId('12')).toBe(12);
    expect(parseAlertId('0')).toBeNull();
    expect(parseAlertId('-3')).toBeNull();
    expect(parseAlertId('abc')).toBeNull();
    expect(parseAlertId('12abc')).toBeNull();
    expect(parseAlertId(null)).toBeNull();
  });
 });
 describe('RecommendationsView', () => {
  it("cible l'alerte donnée par ?alert= et la transmet à la liste", () => {
    const { fixture } = setup({ query: { alert: '12' } });
    expect(fixture.componentInstance.alertId()).toBe(12);
    expect(listeEnfant(fixture).alertId()).toBe(12);
    expect(fixture.nativeElement.textContent).toContain('Alerte n° 12');
    expect(fixture.nativeElement.querySelector('a[href="/recommendations"]')).not.toBeNull();
  });
  it('ignore un paramètre alert invalide', () => {
    const { fixture } = setup({ query: { alert: 'abc' } });
    expect(fixture.componentInstance.alertId()).toBeNull();
    expect(fixture.nativeElement.textContent).not.toContain('Alerte n°');
  });
  it('applique le site donné par ?site= au filtre et à la liste', () => {
    const { fixture, getAlerts } = setup({ query: { site: 'SITE001' } });
    expect(getAlerts).toHaveBeenCalledWith({ site_id: 'SITE001' });
    const option = fixture.nativeElement.querySelector(
      'option[value="SITE001"]',
    ) as HTMLOptionElement;
    expect(option.selected).toBe(true);
  });
  it('relance la liste sur le site choisi dans le filtre', () => {
    const { fixture, getAlerts } = setup();
    const select = fixture.nativeElement.querySelector(
      '[data-testid="site-filter"]',
    ) as HTMLSelectElement;
    select.value = 'SITE001';
    select.dispatchEvent(new Event('change'));
    fixture.detectChanges();
    fixture.detectChanges();
    expect(getAlerts).toHaveBeenLastCalledWith({ site_id: 'SITE001' });
    expect(listeEnfant(fixture).siteId()).toBe('SITE001');
  });
  it('cache le bouton de génération aux lecteurs', () => {
    const { fixture } = setup({ role: 'lecteur' });
    expect(fixture.nativeElement.querySelector('[data-testid="generate"]')).toBeNull();
  });
  it('permet à un admin de générer pour le site filtré, affiche le bilan et recharge la liste', () => {
    const { fixture, generate, getRecommendations } = setup({
      role: 'admin',
      query: { site: 'SITE001' },
    });
    fixture.nativeElement.querySelector('[data-testid="generate"]').click();
    fixture.detectChanges();
    fixture.detectChanges();
    expect(generate).toHaveBeenCalledWith('SITE001');
    expect(fixture.nativeElement.textContent).toContain(
      '3 recommandations créées, 1 déjà présente, 2 alertes examinées.',
    );
    expect(getRecommendations).toHaveBeenCalledTimes(2);
    expect(fixture.componentInstance.generating()).toBe(false);
  });
  it('génère pour tout le parc quand aucun site n’est filtré', () => {
    const { fixture, generate } = setup({ role: 'admin' });
    fixture.componentInstance.onGenerate();
    expect(generate).toHaveBeenCalledWith(undefined);
  });
  it("signale l'échec de la génération sans casser la page", () => {
    const { fixture, generate } = setup({ role: 'admin' });
    generate.mockReturnValue(throwError(() => new Error('403')));
    fixture.componentInstance.onGenerate();
    fixture.detectChanges();
    expect(fixture.componentInstance.generationError()).not.toBeNull();
    expect(fixture.nativeElement.textContent).toContain(
      'La génération des recommandations a échoué',
    );
    expect(fixture.componentInstance.generating()).toBe(false);
  });
  it('accorde le bilan au singulier', () => {
    const { fixture } = setup();
    expect(
      fixture.componentInstance.bilan({
        alerts_examined: 1,
        recommendations_created: 1,
        already_present: 0,
      }),
    ).toBe('1 recommandation créée, 0 déjà présente, 1 alerte examinée');
  });
 });
@@ -1,85 +0,0 @@
 import { Component, computed, inject, signal, viewChild } from '@angular/core';
 import { toSignal } from '@angular/core/rxjs-interop';
 import { ActivatedRoute, RouterLink } from '@angular/router';
 import { catchError, map, of } from 'rxjs';
 import { SitesService } from '../../core/services/sites.service';
 import { RecommendationsService } from '../../core/services/recommendations.service';
 import { AuthService } from '../../core/services/auth.service';
 import { Site } from '../../shared/models/site.model';
 import { RecommendationGenerationReport } from '../../shared/models/recommendation.model';
 import { RecommendationList } from '../../shared/components/recommendation-list/recommendation-list';
 import { Alert as EvAlert } from '../../shared/components/ui/alert/alert';
 import { Brand } from '../../shared/components/ui/brand/brand';
 import { Button } from '../../shared/components/ui/button/button';
 const GENERATION_FAILED_MESSAGE =
  'La génération des recommandations a échoué, réessayez plus tard.';
 export function parseAlertId(raw: string | null): number | null {
  return raw !== null && /^[1-9]\d*$/.test(raw) ? Number(raw) : null;
 }
 function pluriel(nombre: number, singulier: string, plurielForme: string): string {
  return `${nombre} ${nombre > 1 ? plurielForme : singulier}`;
 }
@Component({
  selector: 'app-recommendations',
  standalone: true,
  imports: [RouterLink, RecommendationList, EvAlert, Brand, Button],
  templateUrl: './recommendations.html',
  styleUrl: './recommendations.scss',
 })
 export class RecommendationsView {
  private route = inject(ActivatedRoute);
  private sitesService = inject(SitesService);
  private recommendationsService = inject(RecommendationsService);
  private auth = inject(AuthService);
  alertId = toSignal(
    this.route.queryParamMap.pipe(map((params) => parseAlertId(params.get('alert')))),
    { initialValue: null },
  );
  siteFilter = signal<string | null>(this.route.snapshot.queryParamMap.get('site'));
  sites = toSignal(this.sitesService.getSites().pipe(catchError(() => of([] as Site[]))), {
    initialValue: [] as Site[],
  });
  list = viewChild.required(RecommendationList);
  isAdmin = computed(() => this.auth.principal()?.role === 'admin');
  generating = signal(false);
  generationReport = signal<RecommendationGenerationReport | null>(null);
  generationError = signal<string | null>(null);
  onSiteChange(event: Event): void {
    this.siteFilter.set((event.target as HTMLSelectElement).value || null);
  }
  onGenerate(): void {
    if (this.generating()) {
      return;
    }
    this.generating.set(true);
    this.generationError.set(null);
    this.recommendationsService.generate(this.siteFilter() ?? undefined).subscribe({
      next: (report) => {
        this.generating.set(false);
        this.generationReport.set(report);
        this.list().reload();
      },
      error: () => {
        this.generating.set(false);
        this.generationError.set(GENERATION_FAILED_MESSAGE);
      },
    });
  }
  bilan(report: RecommendationGenerationReport): string {
    return [
      pluriel(report.recommendations_created, 'recommandation créée', 'recommandations créées'),
      pluriel(report.already_present, 'déjà présente', 'déjà présentes'),
      pluriel(report.alerts_examined, 'alerte examinée', 'alertes examinées'),
    ].join(', ');
  }
 }
@@ -81,16 +81,5 @@
    }
  }
  <section class="recommendations-section">
    <h2>Recommandations</h2>
    <app-recommendation-list [siteId]="siteId() ?? null" [sites]="siteAsList()" />
    <a
      routerLink="/recommendations"
      [queryParams]="{ site: siteId() }"
      class="ev-link recommendations-section__link"
      >Voir dans la vue recommandations</a
    >
  </section>
  <a routerLink="/sites" class="ev-link">Retour aux sites</a>
 </div>
@@ -117,12 +117,3 @@ h2 {
 .chart-section {
  margin-bottom: 2rem;
 }
 .recommendations-section {
  margin: 2.5rem 0 1.5rem;
 }
 .recommendations-section__link {
  display: inline-block;
  margin-top: 1rem;
 }
@@ -5,8 +5,6 @@ import { BehaviorSubject, of, throwError } from 'rxjs';
 import { SiteDetail } from './site-detail';
 import { SitesService } from '../../../core/services/sites.service';
 import { ReadingsService } from '../../../core/services/readings.service';
 import { AlertsService } from '../../../core/services/alerts.service';
 import { RecommendationsService } from '../../../core/services/recommendations.service';
 const SITE = {
  site_id: 'SITE001',
@@ -71,7 +69,6 @@ function setup(
  readingsMock: Partial<ReadingsService>,
 ) {
  const paramMap = new BehaviorSubject(convertToParamMap({ siteId }));
  const getAlerts = vi.fn().mockReturnValue(of([]));
  TestBed.configureTestingModule({
    imports: [SiteDetail],
    providers: [
@@ -79,14 +76,9 @@ function setup(
      { provide: ActivatedRoute, useValue: { paramMap } },
      { provide: SitesService, useValue: sitesMock },
      { provide: ReadingsService, useValue: readingsMock },
      { provide: AlertsService, useValue: { getAlerts } },
      {
        provide: RecommendationsService,
        useValue: { getRecommendations: vi.fn().mockReturnValue(of([])) },
      },
    ],
  });
-  return { fixture: TestBed.createComponent(SiteDetail), paramMap, getAlerts };
+  return { fixture: TestBed.createComponent(SiteDetail), paramMap };
 }
 describe('SiteDetail', () => {
@@ -269,27 +261,6 @@ describe('SiteDetail', () => {
    );
  });
  it('demande les recommandations du site consulté à travers ses alertes', () => {
    const { fixture, getAlerts } = setup(
      'SITE001',
      {
        getSite: vi.fn().mockReturnValue(of(SITE)),
        getCurrent: vi.fn().mockReturnValue(of(CURRENT_COMPLET)),
      },
      { getHistory: vi.fn().mockReturnValue(of([])) },
    );
    fixture.detectChanges();
    fixture.detectChanges();
    expect(getAlerts).toHaveBeenCalledWith({ site_id: 'SITE001' });
    expect(fixture.nativeElement.querySelector('app-recommendation-list')).not.toBeNull();
    expect(fixture.nativeElement.textContent).toContain('Recommandations');
    expect(
      fixture.nativeElement.querySelector('a[href="/recommendations?site=SITE001"]'),
    ).not.toBeNull();
  });
  it("annonce l'absence de mesure sans interroger l'historique quand timestamp est null", () => {
    const getHistory = vi.fn().mockReturnValue(of([]));
    const { fixture } = setup(
@@ -13,7 +13,6 @@ import { Badge, BadgeTone } from '../../../shared/components/ui/badge/badge';
 import { Brand } from '../../../shared/components/ui/brand/brand';
 import { ConsumptionGauge } from '../../../shared/components/consumption-gauge/consumption-gauge';
 import { ReadingHistoryChart } from '../../../shared/components/reading-history-chart/reading-history-chart';
 import { RecommendationList } from '../../../shared/components/recommendation-list/recommendation-list';
 const UNAVAILABLE_MESSAGE = 'Détail du site indisponible, réessayez plus tard.';
 const NO_MEASUREMENT_MESSAGE = 'Aucune mesure remontée pour ce site.';
@@ -97,16 +96,7 @@ export interface MetricView {
@Component({
  selector: 'app-site-detail',
  standalone: true,
-  imports: [
+  imports: [RouterLink, Card, Alert, Badge, Brand, ConsumptionGauge, ReadingHistoryChart],
    RouterLink,
    Card,
    Alert,
    Badge,
    Brand,
    ConsumptionGauge,
    ReadingHistoryChart,
    RecommendationList,
  ],
  templateUrl: './site-detail.html',
  styleUrl: './site-detail.scss',
 })
@@ -127,11 +117,6 @@ export class SiteDetail {
  hasMeasurement = computed(() => this.current()?.timestamp != null);
  siteAsList = computed<Site[]>(() => {
    const site = this.site();
    return site ? [site] : [];
  });
  consumptionKw = computed(() => this.current()?.consumption_kw ?? null);
  consumptionLabel = computed(() => {
@@ -17,8 +17,8 @@
    <ev-alert severity="danger" class="banner-error">{{ message }}</ev-alert>
  }
-  <ev-card class="ev-table-card">
+  <ev-card class="table-card">
-    <table class="ev-table">
+    <table class="sites-table">
      <thead>
        <tr>
          <th>Nom</th>
@@ -36,9 +36,7 @@
            <td>{{ site.site_type }}</td>
            <td>{{ site.location || '-' }}</td>
            <td>{{ site.capacity_kw ?? '-' }}</td>
-            <td>
+            <td><ev-badge [tone]="badgeToneForStatus(site.status)">{{ site.status ?? '-' }}</ev-badge></td>
              <ev-badge [tone]="badgeToneForStatus(site.status)">{{ site.status ?? '-' }}</ev-badge>
            </td>
            <td><a [routerLink]="['/sites', site.site_id]" class="ev-link">Détail</a></td>
          </tr>
        }
@@ -32,3 +32,32 @@
  display: block;
  margin: 0 0 1.5rem;
 }
 .table-card {
  padding: 0;
  overflow: hidden;
 }
 .sites-table {
  width: 100%;
  border-collapse: collapse;
  th,
  td {
    padding: 0.85rem 1.25rem;
    text-align: left;
    border-bottom: 1px solid var(--color-border-light);
  }
  th {
    font-size: 0.8rem;
    color: var(--color-text-muted);
    text-transform: uppercase;
    letter-spacing: 0.02em;
    font-weight: 600;
  }
  tr:last-child td {
    border-bottom: none;
  }
 }
@@ -1,95 +0,0 @@
 <section class="alert-feed">
  <header class="alert-feed__header">
    <div>
      <h2 class="alert-feed__title">Alertes actives</h2>
      @if (!loading() || alerts().length > 0) {
        <p class="alert-feed__count">
          {{ alerts().length }} {{ alerts().length > 1 ? 'alertes' : 'alerte' }}
        </p>
      }
    </div>
    <div class="alert-feed__filters">
      @if (!siteId()) {
        <label class="alert-feed__filter">
          <span class="form-label">Site</span>
          <select class="form-select" data-testid="site-filter" (change)="onSiteChange($event)">
            <option value="">Tous les sites</option>
            @for (site of sites(); track site.site_id) {
              <option [value]="site.site_id">{{ site.site_name }}</option>
            }
          </select>
        </label>
      }
      <label class="alert-feed__filter">
        <span class="form-label">Sévérité</span>
        <select
          class="form-select"
          data-testid="severity-filter"
          (change)="onSeverityChange($event)"
        >
          <option value="">Toutes</option>
          @for (severite of severites; track severite) {
            <option [value]="severite">{{ severityLabel(severite) }}</option>
          }
        </select>
      </label>
    </div>
  </header>
  @if (error(); as message) {
    <ev-alert severity="danger" class="alert-feed__banner">{{ message }}</ev-alert>
  }
  @if (loading() && alerts().length === 0 && !error()) {
    <p class="alert-feed__state" aria-live="polite">Chargement des alertes…</p>
  } @else if (alerts().length === 0 && !error()) {
    <ev-alert severity="success" class="alert-feed__banner"
      >Aucune alerte pour ces critères.</ev-alert
    >
  }
  <ul class="alert-feed__list" [attr.aria-busy]="loading()">
    @for (alert of visibleAlerts(); track alert.alert_id) {
      <li class="alert-feed__item" [class]="'alert-feed__item--' + alert.severity">
        <span class="alert-feed__icon">
          <ev-icon [name]="alert.type" [label]="typeLabel(alert.type)" />
        </span>
        <div class="alert-feed__body">
          <div class="alert-feed__meta">
            <ev-badge [tone]="toneFor(alert.severity)">{{
              severityLabel(alert.severity)
            }}</ev-badge>
            <span class="alert-feed__type">{{ typeLabel(alert.type) }}</span>
            <span class="alert-feed__site">{{ siteName(alert.site_id) }}</span>
            <time class="alert-feed__time" [attr.datetime]="alert.timestamp">
              {{ alert.timestamp | date: 'dd/MM/yyyy HH:mm' }}
            </time>
          </div>
          <p class="alert-feed__message">{{ alert.message }}</p>
          @if (alert.value !== null) {
            <p class="alert-feed__values">
              <strong>{{ alert.value | number: '1.0-1' }} {{ unitFor(alert.metric) }}</strong>
              @if (alert.threshold !== null) {
                <span
                  >seuil {{ alert.threshold | number: '1.0-1' }} {{ unitFor(alert.metric) }}</span
                >
              }
            </p>
          }
        </div>
      </li>
    }
  </ul>
  @if (hiddenCount() > 0) {
    <ev-button
      variant="secondary"
      [fullWidth]="false"
      class="alert-feed__more"
      data-testid="show-more"
      (click)="showMore()"
    >
      Afficher plus ({{ hiddenCount() }} restantes)
    </ev-button>
  }
 </section>
@@ -1,154 +0,0 @@
 :host {
  display: block;
 }
 .alert-feed__header {
  display: flex;
  flex-wrap: wrap;
  align-items: flex-end;
  justify-content: space-between;
  gap: var(--space-3);
  margin-bottom: var(--space-3);
 }
 .alert-feed__title {
  margin: 0;
  font-size: var(--font-size-lg);
  font-weight: 600;
 }
 .alert-feed__count {
  margin: 0.15rem 0 0;
  font-size: var(--font-size-sm);
  color: var(--color-text-muted);
 }
 .alert-feed__filters {
  display: flex;
  flex-wrap: wrap;
  gap: var(--space-2);
 }
 .alert-feed__filter {
  display: flex;
  flex-direction: column;
  min-width: 10rem;
  .form-label {
    margin-top: 0;
  }
 }
 .alert-feed__banner {
  display: block;
  margin-bottom: var(--space-3);
 }
 .alert-feed__state {
  margin: 0 0 var(--space-3);
  font-size: var(--font-size-sm);
  color: var(--color-text-muted);
 }
 .alert-feed__list {
  list-style: none;
  margin: 0;
  padding: 0;
  display: flex;
  flex-direction: column;
  gap: var(--space-2);
 }
 .alert-feed__item {
  display: flex;
  gap: var(--space-3);
  padding: var(--space-2) var(--space-3);
  border-radius: var(--radius-md);
  background: var(--color-surface);
  border: 1px solid var(--color-border-light);
  border-left: 4px solid var(--color-border);
 }
 .alert-feed__item--medium {
  border-left-color: var(--color-warning);
  background: var(--color-warning-bg);
  .alert-feed__icon {
    color: var(--color-warning-text);
  }
 }
 .alert-feed__item--high {
  border-left-color: var(--color-danger);
  background: var(--color-danger-bg);
  .alert-feed__icon {
    color: var(--color-danger);
  }
 }
 .alert-feed__item--critical {
  border-left-color: var(--color-critical);
  background: var(--color-danger-bg);
  .alert-feed__icon {
    color: var(--color-critical);
  }
 }
 .alert-feed__icon {
  display: inline-flex;
  align-items: center;
  justify-content: center;
  flex-shrink: 0;
  width: 2.25rem;
  height: 2.25rem;
  border-radius: 50%;
  background: var(--color-surface);
  color: var(--color-text-muted);
  font-size: var(--font-size-lg);
  box-shadow: var(--shadow-card);
 }
 .alert-feed__body {
  display: flex;
  flex-direction: column;
  gap: 0.25rem;
  min-width: 0;
 }
 .alert-feed__meta {
  display: flex;
  flex-wrap: wrap;
  align-items: center;
  gap: var(--space-2);
  font-size: var(--font-size-xs);
  color: var(--color-text-muted);
 }
 .alert-feed__type {
  font-weight: 600;
  color: var(--color-text);
 }
 .alert-feed__message {
  margin: 0;
  font-size: var(--font-size-sm);
 }
 .alert-feed__values {
  display: flex;
  gap: var(--space-2);
  margin: 0;
  font-size: var(--font-size-xs);
  color: var(--color-text-muted);
  strong {
    color: var(--color-text);
  }
 }
 .alert-feed__more {
  display: inline-block;
  margin-top: var(--space-3);
 }
@@ -1,218 +0,0 @@
 import { ComponentFixture, TestBed } from '@angular/core/testing';
 import { vi } from 'vitest';
 import { of, throwError } from 'rxjs';
 import { AlertFeed } from './alert-feed';
 import { AlertsService } from '../../../core/services/alerts.service';
 import { SitesService } from '../../../core/services/sites.service';
 import { Alert } from '../../models/alert.model';
 import { Site } from '../../models/site.model';
 const SITES: Site[] = [
  {
    site_id: 'SITE001',
    site_name: 'Usine Nantes',
    site_type: 'industriel',
    location: 'Nantes',
    capacity_kw: 500,
    status: 'actif',
  },
 ];
 function alerte(surcharges: Partial<Alert> = {}): Alert {
  return {
    alert_id: 1,
    site_id: 'SITE001',
    timestamp: '2026-09-15T11:12:00Z',
    type: 'spike',
    severity: 'critical',
    message: 'Variation brutale entre deux lectures consécutives',
    value: 812.5,
    threshold: 400,
    metric: 'consumption_kw',
    prediction_id: null,
    ...surcharges,
  };
 }
 function setup(
  alertsMock: { getAlerts: ReturnType<typeof vi.fn> },
  sitesMock: { getSites: ReturnType<typeof vi.fn> } = {
    getSites: vi.fn().mockReturnValue(of(SITES)),
  },
 ) {
  TestBed.configureTestingModule({
    imports: [AlertFeed],
    providers: [
      { provide: AlertsService, useValue: alertsMock },
      { provide: SitesService, useValue: sitesMock },
    ],
  });
  return TestBed.createComponent(AlertFeed);
 }
 function premierChargement(fixture: ComponentFixture<AlertFeed>) {
  fixture.detectChanges();
  vi.advanceTimersByTime(1);
  fixture.detectChanges();
 }
 function texte(fixture: ComponentFixture<AlertFeed>): string {
  return (fixture.nativeElement as HTMLElement).textContent ?? '';
 }
 function choisir(fixture: ComponentFixture<AlertFeed>, testId: string, value: string) {
  const select = fixture.nativeElement.querySelector(
    `[data-testid="${testId}"]`,
  ) as HTMLSelectElement;
  select.value = value;
  select.dispatchEvent(new Event('change'));
  fixture.detectChanges();
  vi.advanceTimersByTime(1);
  fixture.detectChanges();
 }
 describe('AlertFeed', () => {
  beforeEach(() => vi.useFakeTimers());
  afterEach(() => vi.useRealTimers());
  it('charge les alertes au démarrage sans filtre et les affiche avec leur contexte', () => {
    const getAlerts = vi.fn().mockReturnValue(of([alerte()]));
    const fixture = setup({ getAlerts });
    premierChargement(fixture);
    expect(getAlerts).toHaveBeenCalledTimes(1);
    expect(getAlerts.mock.calls[0][0]).toEqual({});
    const contenu = texte(fixture);
    expect(contenu).toContain('Usine Nantes');
    expect(contenu).toContain('Critique');
    expect(contenu).toContain('Pic de consommation');
    expect(contenu).toContain('15/09/2026');
    expect(contenu).toContain('812.5 kW');
    expect(contenu).toContain('seuil 400 kW');
    expect(fixture.nativeElement.querySelector('ev-icon svg')).not.toBeNull();
    expect(fixture.nativeElement.querySelector('.alert-feed__item--critical')).not.toBeNull();
  });
  it('annonce le chargement avant la première réponse', () => {
    const fixture = setup({ getAlerts: vi.fn().mockReturnValue(of([])) });
    fixture.detectChanges();
    expect(fixture.componentInstance.loading()).toBe(true);
    expect(texte(fixture)).toContain('Chargement des alertes');
  });
  it("annonce l'absence d'alerte pour les critères choisis", () => {
    const fixture = setup({ getAlerts: vi.fn().mockReturnValue(of([])) });
    premierChargement(fixture);
    expect(texte(fixture)).toContain('Aucune alerte pour ces critères.');
    expect(fixture.nativeElement.querySelectorAll('li').length).toBe(0);
  });
  it('relance la requête avec la sévérité choisie et revient à la première page', () => {
    const getAlerts = vi.fn().mockReturnValue(of([alerte()]));
    const fixture = setup({ getAlerts });
    premierChargement(fixture);
    fixture.componentInstance.showMore();
    choisir(fixture, 'severity-filter', 'high');
    expect(getAlerts).toHaveBeenCalledTimes(2);
    expect(getAlerts.mock.calls[1][0]).toEqual({ severity: 'high' });
    expect(fixture.componentInstance.visibleCount()).toBe(10);
  });
  it('relance la requête avec le site choisi dans le filtre', () => {
    const getAlerts = vi.fn().mockReturnValue(of([]));
    const fixture = setup({ getAlerts });
    premierChargement(fixture);
    choisir(fixture, 'site-filter', 'SITE001');
    expect(getAlerts.mock.calls[1][0]).toEqual({ site_id: 'SITE001' });
  });
  it('masque le filtre site et force site_id quand le parent fixe le site', () => {
    const getAlerts = vi.fn().mockReturnValue(of([]));
    const fixture = setup({ getAlerts });
    fixture.componentRef.setInput('siteId', 'SITE001');
    premierChargement(fixture);
    expect(getAlerts.mock.calls[0][0]).toEqual({ site_id: 'SITE001' });
    expect(fixture.nativeElement.querySelector('[data-testid="site-filter"]')).toBeNull();
    expect(fixture.nativeElement.querySelector('[data-testid="severity-filter"]')).not.toBeNull();
  });
  it("signale l'indisponibilité en gardant la liste, puis repart au rafraîchissement suivant", () => {
    const getAlerts = vi
      .fn()
      .mockReturnValueOnce(of([alerte()]))
      .mockReturnValueOnce(throwError(() => new Error('API injoignable')))
      .mockReturnValue(of([alerte(), alerte({ alert_id: 2 })]));
    const fixture = setup({ getAlerts });
    premierChargement(fixture);
    vi.advanceTimersByTime(60_000);
    fixture.detectChanges();
    expect(getAlerts).toHaveBeenCalledTimes(2);
    expect(fixture.componentInstance.error()).not.toBeNull();
    expect(fixture.componentInstance.alerts().length).toBe(1);
    expect(texte(fixture)).toContain('Alertes indisponibles');
    vi.advanceTimersByTime(60_000);
    fixture.detectChanges();
    expect(getAlerts).toHaveBeenCalledTimes(3);
    expect(fixture.componentInstance.error()).toBeNull();
    expect(fixture.componentInstance.alerts().length).toBe(2);
  });
  it('pagine côté client par dix et dévoile le reste à la demande', () => {
    const alertes = Array.from({ length: 25 }, (_, i) => alerte({ alert_id: i + 1 }));
    const fixture = setup({ getAlerts: vi.fn().mockReturnValue(of(alertes)) });
    premierChargement(fixture);
    expect(fixture.nativeElement.querySelectorAll('li').length).toBe(10);
    expect(texte(fixture)).toContain('Afficher plus (15 restantes)');
    fixture.nativeElement.querySelector('[data-testid="show-more"]').click();
    fixture.detectChanges();
    expect(fixture.nativeElement.querySelectorAll('li').length).toBe(20);
    fixture.nativeElement.querySelector('[data-testid="show-more"]').click();
    fixture.detectChanges();
    expect(fixture.nativeElement.querySelectorAll('li').length).toBe(25);
    expect(fixture.nativeElement.querySelector('[data-testid="show-more"]')).toBeNull();
  });
  it("replie sur l'identifiant quand le site est inconnu ou que la liste des sites échoue", () => {
    const fixture = setup(
      { getAlerts: vi.fn().mockReturnValue(of([alerte({ site_id: 'SITE999' })])) },
      { getSites: vi.fn().mockReturnValue(throwError(() => new Error('nope'))) },
    );
    premierChargement(fixture);
    expect(texte(fixture)).toContain('SITE999');
  });
  it("n'affiche pas de mesure pour une alerte sans valeur", () => {
    const fixture = setup({
      getAlerts: vi
        .fn()
        .mockReturnValue(
          of([alerte({ type: 'outage', value: null, threshold: null, metric: null })]),
        ),
    });
    premierChargement(fixture);
    expect(fixture.nativeElement.querySelector('.alert-feed__values')).toBeNull();
    expect(texte(fixture)).toContain('Coupure');
  });
 });
--- a/Show More
+++ b/Show More