feat(plan5): page /creation stepper 4 étapes + lien nav + fix TS shopifyMetafields

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.dockerignore

@@ -0,0 +1,10 @@
+node_modules
+.next
+.env
+.env.local
+.env.production
+.env.development
+data/
+*.db
+.git
+README.md

.env.example

@@ -0,0 +1,18 @@
+# Auth
+NEXTAUTH_URL=https://gestion.materiaux-destock.fr
+NEXTAUTH_SECRET=<générer avec: openssl rand -base64 32>
+
+# Shopify (remplir lors du Plan 2)
+SHOPIFY_STORE_DOMAIN=materiaux-destock.myshopify.com
+SHOPIFY_ADMIN_API_TOKEN=shpat_...
+
+# Google Sheets (remplir lors du Plan 3)
+GOOGLE_SERVICE_ACCOUNT_EMAIL=...@....iam.gserviceaccount.com
+GOOGLE_PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----\n..."
+GOOGLE_SHEETS_ID=
+
+# Base de données
+DATABASE_URL="file:./data/app.db"
+
+# Seed (premier déploiement uniquement)
+SEED_ADMIN_PASSWORD=

.gitignore

@@ -28,9 +28,18 @@ yarn-error.log*
 # local env files
 .env*.local
 
+# prisma env (contains DATABASE_URL)
+.env
+
+# database files
+/data/
+
 # vercel
 .vercel
 
 # typescript
 *.tsbuildinfo
 next-env.d.ts
+
+/src/generated/prisma
+.env.production

Dockerfile

@@ -0,0 +1,59 @@
+# Étape 1 : dépendances complètes (dev incluses pour le build)
+FROM node:20-alpine AS deps
+WORKDIR /app
+RUN apk add --no-cache python3 make g++
+COPY package*.json ./
+RUN npm ci
+
+# Étape 2 : build Next.js
+FROM node:20-alpine AS builder
+WORKDIR /app
+RUN apk add --no-cache python3 make g++
+COPY --from=deps /app/node_modules ./node_modules
+COPY . .
+ENV DATABASE_URL="file:./data/app.db"
+RUN npx prisma generate
+RUN npm run build
+
+# Étape 3 : image de production
+FROM node:20-alpine AS runner
+WORKDIR /app
+ENV NODE_ENV=production
+
+# Outils natifs requis pour better-sqlite3
+RUN apk add --no-cache python3 make g++
+
+RUN addgroup --system --gid 1001 nodejs \
+ && adduser --system --uid 1001 nextjs
+
+# Installer uniquement les dépendances de production
+# (résout automatiquement toutes les dépendances transitives : effect, dotenv, etc.)
+COPY package*.json ./
+RUN npm ci --omit=dev
+
+# Ajouter le CLI Prisma (devDependency → non installé par --omit=dev)
+COPY --from=builder /app/node_modules/prisma ./node_modules/prisma
+RUN ln -sf /app/node_modules/prisma/build/index.js /app/node_modules/.bin/prisma
+
+# Client Prisma généré (spécifique à la plateforme linux/alpine)
+COPY --from=builder /app/node_modules/.prisma ./node_modules/.prisma
+
+# Artifacts du build Next.js
+COPY --from=builder /app/public ./public
+COPY --from=builder /app/.next/standalone ./
+COPY --from=builder /app/.next/static ./.next/static
+
+# Schema + migrations Prisma
+COPY --from=builder /app/prisma ./prisma
+COPY --from=builder /app/prisma.config.ts ./prisma.config.ts
+
+COPY scripts/start.sh ./start.sh
+
+RUN mkdir -p data && chown -R nextjs:nodejs data . && chmod +x start.sh
+
+USER nextjs
+EXPOSE 3000
+ENV PORT=3000
+ENV HOSTNAME="0.0.0.0"
+
+CMD ["sh", "start.sh"]

docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  app:
+    build: .
+    image: gestion-materiaux-destock:latest
+    restart: unless-stopped
+    env_file:
+      - .env
+    volumes:
+      - ./data:/app/data
+    networks:
+      - web
+
+networks:
+  web:
+    external: true

jest.config.ts

@@ -7,6 +7,9 @@ const config: Config = {
   coverageProvider: 'v8',
   testEnvironment: 'node',
   setupFilesAfterEnv: ['<rootDir>/jest.setup.ts'],
+  moduleNameMapper: {
+    '^@/(.*)$': '<rootDir>/src/$1',
+  },
 }
 
 export default createJestConfig(config)

next.config.mjs

@@ -1,4 +1,6 @@
 /** @type {import('next').NextConfig} */
-const nextConfig = {};
+const nextConfig = {
+  output: 'standalone',
+};
 
 export default nextConfig;

package.json

@@ -6,11 +6,20 @@
     "dev": "next dev",
     "build": "next build",
     "start": "next start",
-    "lint": "next lint"
+    "lint": "next lint",
+    "db:seed": "ts-node --compiler-options '{\"module\":\"CommonJS\"}' prisma/seed.ts"
+  },
+  "prisma": {
+    "seed": "ts-node --compiler-options '{\"module\":\"CommonJS\"}' prisma/seed.ts"
   },
   "dependencies": {
+    "@prisma/adapter-better-sqlite3": "^7.8.0",
     "@prisma/client": "^7.8.0",
     "bcryptjs": "^3.0.3",
+    "better-sqlite3": "^12.10.0",
+    "googleapis": "^173.0.0",
+    "heic2any": "^0.0.4",
+    "jszip": "^3.10.1",
     "next": "14.2.35",
     "next-auth": "^4.24.14",
     "react": "^18",
@@ -32,6 +41,7 @@
     "prisma": "^7.8.0",
     "tailwindcss": "^3.4.1",
     "ts-jest": "^29.4.11",
+    "ts-node": "^10.9.2",
     "typescript": "^5"
   }
 }

prisma.config.ts

@@ -0,0 +1,14 @@
+// This file was generated by Prisma, and assumes you have installed the following:
+// npm install --save-dev prisma dotenv
+import "dotenv/config";
+import { defineConfig } from "prisma/config";
+
+export default defineConfig({
+  schema: "prisma/schema.prisma",
+  migrations: {
+    path: "prisma/migrations",
+  },
+  datasource: {
+    url: process.env["DATABASE_URL"],
+  },
+});

prisma/migrations/20260606142603_init/migration.sql

@@ -0,0 +1,26 @@
+-- CreateTable
+CREATE TABLE "User" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "email" TEXT NOT NULL,
+    "name" TEXT NOT NULL,
+    "password" TEXT NOT NULL,
+    "role" TEXT NOT NULL DEFAULT 'gestionnaire',
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP
+);
+
+-- CreateTable
+CREATE TABLE "SyncRun" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "userId" TEXT NOT NULL,
+    "status" TEXT NOT NULL,
+    "created" INTEGER NOT NULL DEFAULT 0,
+    "updated" INTEGER NOT NULL DEFAULT 0,
+    "deactivated" INTEGER NOT NULL DEFAULT 0,
+    "errors" INTEGER NOT NULL DEFAULT 0,
+    "log" TEXT NOT NULL DEFAULT '[]',
+    CONSTRAINT "SyncRun_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);
+
+-- CreateIndex
+CREATE UNIQUE INDEX "User_email_key" ON "User"("email");

prisma/migrations/20260609073303_add_product_creation/migration.sql

@@ -0,0 +1,14 @@
+-- CreateTable
+CREATE TABLE "ProductCreation" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "userId" TEXT NOT NULL,
+    "sheetTab" TEXT NOT NULL,
+    "sheetRow" INTEGER NOT NULL,
+    "shopifyId" TEXT NOT NULL,
+    "sku" TEXT NOT NULL,
+    "title" TEXT NOT NULL,
+    "status" TEXT NOT NULL DEFAULT 'success',
+    "errorMessage" TEXT NOT NULL DEFAULT '',
+    CONSTRAINT "ProductCreation_userId_fkey" FOREIGN KEY ("userId") REFERENCES "User" ("id") ON DELETE RESTRICT ON UPDATE CASCADE
+);

prisma/migrations/migration_lock.toml

@@ -0,0 +1,3 @@
+# Please do not edit this file manually
+# It should be added in your version-control system (e.g., Git)
+provider = "sqlite"

prisma/schema.prisma

@@ -0,0 +1,45 @@
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "sqlite"
+}
+
+model User {
+  id                 String              @id @default(cuid())
+  email              String              @unique
+  name               String
+  password           String
+  role               String              @default("gestionnaire")
+  createdAt          DateTime            @default(now())
+  syncRuns           SyncRun[]
+  productCreations   ProductCreation[]
+}
+
+model SyncRun {
+  id          String   @id @default(cuid())
+  createdAt   DateTime @default(now())
+  userId      String
+  user        User     @relation(fields: [userId], references: [id])
+  status      String
+  created     Int      @default(0)
+  updated     Int      @default(0)
+  deactivated Int      @default(0)
+  errors      Int      @default(0)
+  log         String   @default("[]")
+}
+
+model ProductCreation {
+  id           String   @id @default(cuid())
+  createdAt    DateTime @default(now())
+  userId       String
+  user         User     @relation(fields: [userId], references: [id])
+  sheetTab     String
+  sheetRow     Int
+  shopifyId    String
+  sku          String
+  title        String
+  status       String   @default("success")
+  errorMessage String   @default("")
+}

prisma/seed.mjs

@@ -0,0 +1,31 @@
+import { PrismaClient } from '@prisma/client'
+import { PrismaBetterSqlite3 } from '@prisma/adapter-better-sqlite3'
+import { hash } from 'bcryptjs'
+import path from 'path'
+
+const password = process.env.SEED_ADMIN_PASSWORD
+if (!password) {
+  console.error('SEED_ADMIN_PASSWORD requis')
+  process.exit(1)
+}
+
+const dbUrl  = process.env.DATABASE_URL ?? 'file:./data/app.db'
+const dbPath = dbUrl.startsWith('file:')
+  ? path.resolve(process.cwd(), dbUrl.slice('file:'.length))
+  : dbUrl
+
+const adapter = new PrismaBetterSqlite3({ url: dbPath })
+const prisma  = new PrismaClient({ adapter })
+
+await prisma.user.upsert({
+  where: { email: 'mathieu.fort@gmail.com' },
+  update: {},
+  create: {
+    email:    'mathieu.fort@gmail.com',
+    name:     'Mathieu',
+    password: await hash(password, 12),
+    role:     'admin',
+  },
+})
+console.log('✅ Compte admin créé : mathieu.fort@gmail.com')
+await prisma.$disconnect()

prisma/seed.ts

@@ -0,0 +1,33 @@
+import { PrismaClient } from '@prisma/client'
+import { PrismaBetterSqlite3 } from '@prisma/adapter-better-sqlite3'
+import { hash } from 'bcryptjs'
+import path from 'path'
+
+const dbUrl = process.env.DATABASE_URL ?? 'file:./data/dev.db'
+const dbPath = dbUrl.startsWith('file:')
+  ? path.resolve(process.cwd(), dbUrl.slice('file:'.length))
+  : dbUrl
+
+const adapter = new PrismaBetterSqlite3({ url: dbPath })
+const prisma = new PrismaClient({ adapter } as any)
+
+async function main() {
+  const password = process.env.SEED_ADMIN_PASSWORD
+  if (!password) throw new Error('SEED_ADMIN_PASSWORD env var requis')
+
+  await prisma.user.upsert({
+    where: { email: 'mathieu.fort@gmail.com' },
+    update: {},
+    create: {
+      email: 'mathieu.fort@gmail.com',
+      name: 'Mathieu',
+      password: await hash(password, 12),
+      role: 'admin',
+    },
+  })
+  console.log('✅ Compte admin créé : mathieu.fort@gmail.com')
+}
+
+main()
+  .catch(console.error)
+  .finally(() => prisma.$disconnect())

scripts/start.sh

@@ -0,0 +1,6 @@
+#!/bin/sh
+set -e
+echo "▶ Migration base de données…"
+node_modules/.bin/prisma migrate deploy
+echo "▶ Démarrage du serveur…"
+exec node server.js

src/__tests__/api/images/upload.test.ts

@@ -0,0 +1,75 @@
+import { POST } from '@/app/api/images/upload/route'
+import { NextRequest } from 'next/server'
+
+jest.mock('@/lib/shopify', () => ({
+  uploadProductImage: jest.fn(),
+}))
+
+import { uploadProductImage } from '@/lib/shopify'
+const mockUpload = uploadProductImage as jest.Mock
+
+describe('POST /api/images/upload', () => {
+  beforeEach(() => jest.clearAllMocks())
+
+  it('retourne 400 si shopifyProductId manquant', async () => {
+    const req = new NextRequest('http://localhost/api/images/upload', {
+      method: 'POST',
+      body: JSON.stringify({ imageBase64: 'abc', filename: 'test.jpg' }),
+      headers: { 'Content-Type': 'application/json' },
+    })
+    const res = await POST(req)
+    expect(res.status).toBe(400)
+  })
+
+  it('retourne 400 si imageBase64 manquant', async () => {
+    const req = new NextRequest('http://localhost/api/images/upload', {
+      method: 'POST',
+      body: JSON.stringify({ shopifyProductId: '123', filename: 'test.jpg' }),
+      headers: { 'Content-Type': 'application/json' },
+    })
+    const res = await POST(req)
+    expect(res.status).toBe(400)
+  })
+
+  it('retourne 400 si filename manquant', async () => {
+    const req = new NextRequest('http://localhost/api/images/upload', {
+      method: 'POST',
+      body: JSON.stringify({ shopifyProductId: '123', imageBase64: 'abc' }),
+      headers: { 'Content-Type': 'application/json' },
+    })
+    const res = await POST(req)
+    expect(res.status).toBe(400)
+  })
+
+  it('retourne l\'URL après upload réussi', async () => {
+    mockUpload.mockResolvedValue({ url: 'https://cdn.shopify.com/image.jpg' })
+    const req = new NextRequest('http://localhost/api/images/upload', {
+      method: 'POST',
+      body: JSON.stringify({
+        shopifyProductId: '123456',
+        imageBase64: 'base64data==',
+        filename: 'REF-1042.jpg',
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    })
+    const res = await POST(req)
+    expect(res.status).toBe(200)
+    expect(await res.json()).toEqual({ url: 'https://cdn.shopify.com/image.jpg' })
+    expect(mockUpload).toHaveBeenCalledWith('123456', 'base64data==', 'REF-1042.jpg')
+  })
+
+  it('retourne 500 en cas d\'erreur Shopify', async () => {
+    mockUpload.mockRejectedValue(new Error('Shopify upload error: 422'))
+    const req = new NextRequest('http://localhost/api/images/upload', {
+      method: 'POST',
+      body: JSON.stringify({
+        shopifyProductId: '123',
+        imageBase64: 'abc',
+        filename: 'test.jpg',
+      }),
+      headers: { 'Content-Type': 'application/json' },
+    })
+    const res = await POST(req)
+    expect(res.status).toBe(500)
+  })
+})

src/__tests__/api/products/search.test.ts

@@ -0,0 +1,53 @@
+import { GET } from '@/app/api/products/search/route'
+import { NextRequest } from 'next/server'
+
+jest.mock('@/lib/shopify', () => ({
+  searchProductByRef: jest.fn(),
+}))
+
+import { searchProductByRef } from '@/lib/shopify'
+const mockSearch = searchProductByRef as jest.Mock
+
+describe('GET /api/products/search', () => {
+  beforeEach(() => jest.clearAllMocks())
+
+  it('retourne 400 si le paramètre ref est absent', async () => {
+    const req = new NextRequest('http://localhost/api/products/search')
+    const res = await GET(req)
+    expect(res.status).toBe(400)
+    const data = await res.json()
+    expect(data.error).toMatch(/ref/)
+  })
+
+  it('retourne 400 si ref est une chaîne vide', async () => {
+    const req = new NextRequest('http://localhost/api/products/search?ref=')
+    const res = await GET(req)
+    expect(res.status).toBe(400)
+  })
+
+  it('retourne { found: false } si produit introuvable', async () => {
+    mockSearch.mockResolvedValue({ found: false })
+    const req = new NextRequest('http://localhost/api/products/search?ref=REF-9999')
+    const res = await GET(req)
+    expect(res.status).toBe(200)
+    expect(await res.json()).toEqual({ found: false })
+    expect(mockSearch).toHaveBeenCalledWith('REF-9999')
+  })
+
+  it('retourne le produit trouvé', async () => {
+    mockSearch.mockResolvedValue({ found: true, shopifyId: '123456', title: 'Carrelage REF-1042' })
+    const req = new NextRequest('http://localhost/api/products/search?ref=REF-1042')
+    const res = await GET(req)
+    expect(res.status).toBe(200)
+    expect(await res.json()).toEqual({ found: true, shopifyId: '123456', title: 'Carrelage REF-1042' })
+  })
+
+  it('retourne 500 en cas d\'erreur Shopify', async () => {
+    mockSearch.mockRejectedValue(new Error('Shopify API error: 503'))
+    const req = new NextRequest('http://localhost/api/products/search?ref=REF-1042')
+    const res = await GET(req)
+    expect(res.status).toBe(500)
+    const data = await res.json()
+    expect(data.error).toBeTruthy()
+  })
+})

src/__tests__/api/sync/history.test.ts

@@ -0,0 +1,61 @@
+import { GET } from '@/app/api/sync/history/route'
+import { NextRequest } from 'next/server'
+
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    syncRun: {
+      findMany: jest.fn(),
+    },
+  },
+}))
+
+import { prisma } from '@/lib/prisma'
+const mockFindMany = prisma.syncRun.findMany as jest.Mock
+
+describe('GET /api/sync/history', () => {
+  beforeEach(() => jest.clearAllMocks())
+
+  it('retourne une liste vide si aucun SyncRun', async () => {
+    mockFindMany.mockResolvedValue([])
+    const req = new NextRequest('http://localhost/api/sync/history')
+    const res = await GET(req)
+    expect(res.status).toBe(200)
+    expect(await res.json()).toEqual([])
+  })
+
+  it('retourne les syncs formatées', async () => {
+    const fakeRun = {
+      id: 'clid1',
+      createdAt: new Date('2026-06-08T10:00:00Z'),
+      status: 'success',
+      created: 3,
+      updated: 1,
+      deactivated: 0,
+      errors: 0,
+      log: JSON.stringify([{ ref: 'REF-1', action: 'create', status: 'success', message: '✓ REF-1 créé' }]),
+      user: { name: 'Mathieu' },
+    }
+    mockFindMany.mockResolvedValue([fakeRun])
+
+    const req = new NextRequest('http://localhost/api/sync/history')
+    const res = await GET(req)
+    expect(res.status).toBe(200)
+
+    const data = await res.json()
+    expect(data).toHaveLength(1)
+    expect(data[0].id).toBe('clid1')
+    expect(data[0].userName).toBe('Mathieu')
+    expect(data[0].status).toBe('success')
+    expect(data[0].created).toBe(3)
+    expect(data[0].log).toHaveLength(1)
+    expect(data[0].log[0].ref).toBe('REF-1')
+    expect(data[0].createdAt).toBe('2026-06-08T10:00:00.000Z')
+  })
+
+  it('retourne 500 si Prisma échoue', async () => {
+    mockFindMany.mockRejectedValue(new Error('DB error'))
+    const req = new NextRequest('http://localhost/api/sync/history')
+    const res = await GET(req)
+    expect(res.status).toBe(500)
+  })
+})

src/__tests__/api/sync/preview.test.ts

@@ -0,0 +1,64 @@
+import { GET } from '@/app/api/sync/preview/route'
+import { NextRequest } from 'next/server'
+import type { SyncProduct, ShopifyProductFull } from '@/types/sync'
+
+jest.mock('@/lib/googleSheets', () => ({
+  readSheetProducts: jest.fn(),
+}))
+jest.mock('@/lib/shopifySync', () => ({
+  fetchAllShopifyProducts: jest.fn(),
+}))
+jest.mock('@/lib/syncDiff', () => ({
+  computeDiff: jest.fn(),
+}))
+
+import { readSheetProducts } from '@/lib/googleSheets'
+import { fetchAllShopifyProducts } from '@/lib/shopifySync'
+import { computeDiff } from '@/lib/syncDiff'
+
+const mockSheets = readSheetProducts as jest.Mock
+const mockShopify = fetchAllShopifyProducts as jest.Mock
+const mockDiff = computeDiff as jest.Mock
+
+describe('GET /api/sync/preview', () => {
+  beforeEach(() => jest.clearAllMocks())
+
+  it('retourne le DiffResult complet', async () => {
+    const fakeSheetProducts: SyncProduct[] = [{ ref: 'REF-1', handle: 'ref-1', title: 'T', description: '', price: '10.00', stock: 1, status: 'active' }]
+    const fakeShopifyProducts: ShopifyProductFull[] = []
+    const fakeDiff = {
+      changes: [{ type: 'create', ref: 'REF-1', sheetProduct: fakeSheetProducts[0] }],
+      summary: { create: 1, update: 0, deactivate: 0, unchanged: 0 },
+    }
+
+    mockSheets.mockResolvedValue(fakeSheetProducts)
+    mockShopify.mockResolvedValue(fakeShopifyProducts)
+    mockDiff.mockReturnValue(fakeDiff)
+
+    const req = new NextRequest('http://localhost/api/sync/preview')
+    const res = await GET(req)
+
+    expect(res.status).toBe(200)
+    const data = await res.json()
+    expect(data.summary.create).toBe(1)
+    expect(data.changes).toHaveLength(1)
+    expect(mockDiff).toHaveBeenCalledWith(fakeSheetProducts, fakeShopifyProducts)
+  })
+
+  it('retourne 500 si Google Sheets échoue', async () => {
+    mockSheets.mockRejectedValue(new Error('Google Auth error'))
+    const req = new NextRequest('http://localhost/api/sync/preview')
+    const res = await GET(req)
+    expect(res.status).toBe(500)
+    const data = await res.json()
+    expect(data.error).toBeTruthy()
+  })
+
+  it('retourne 500 si Shopify échoue', async () => {
+    mockSheets.mockResolvedValue([])
+    mockShopify.mockRejectedValue(new Error('Shopify error'))
+    const req = new NextRequest('http://localhost/api/sync/preview')
+    const res = await GET(req)
+    expect(res.status).toBe(500)
+  })
+})

src/__tests__/lib/auth.test.ts

@@ -0,0 +1,69 @@
+import { authOptions } from '@/lib/auth'
+
+// Mock Prisma
+jest.mock('@/lib/prisma', () => ({
+  prisma: {
+    user: {
+      findUnique: jest.fn(),
+    },
+  },
+}))
+
+// Mock rate-limit
+jest.mock('@/lib/rate-limit', () => ({
+  checkRateLimit: jest.fn(() => true),
+  recordFailedAttempt: jest.fn(),
+  clearAttempts: jest.fn(),
+}))
+
+import { prisma } from '@/lib/prisma'
+import { checkRateLimit, recordFailedAttempt, clearAttempts } from '@/lib/rate-limit'
+
+const mockFindUnique = prisma.user.findUnique as jest.Mock
+
+describe('NextAuth authorize', () => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  const authorize = (authOptions.providers[0] as any).options.authorize
+
+  beforeEach(() => jest.clearAllMocks())
+
+  it('retourne null si credentials manquants', async () => {
+    const result = await authorize({ email: '', password: '' }, {})
+    expect(result).toBeNull()
+  })
+
+  it('retourne null si utilisateur introuvable', async () => {
+    mockFindUnique.mockResolvedValue(null)
+    const result = await authorize(
+      { email: 'a@b.com', password: 'wrong' },
+      { headers: {} }
+    )
+    expect(result).toBeNull()
+    expect(recordFailedAttempt).toHaveBeenCalled()
+  })
+
+  it('retourne l\'utilisateur si mot de passe correct', async () => {
+    const { hash } = await import('bcryptjs')
+    const hashedPwd = await hash('correct', 12)
+    mockFindUnique.mockResolvedValue({
+      id: 'user1',
+      email: 'a@b.com',
+      name: 'Alice',
+      role: 'gestionnaire',
+      password: hashedPwd,
+    })
+    const result = await authorize(
+      { email: 'a@b.com', password: 'correct' },
+      { headers: {} }
+    )
+    expect(result).toEqual({ id: 'user1', email: 'a@b.com', name: 'Alice', role: 'gestionnaire' })
+    expect(clearAttempts).toHaveBeenCalled()
+  })
+
+  it('lève RATE_LIMITED si bloqué', async () => {
+    ;(checkRateLimit as jest.Mock).mockReturnValue(false)
+    await expect(
+      authorize({ email: 'a@b.com', password: 'x' }, { headers: {} })
+    ).rejects.toThrow('RATE_LIMITED')
+  })
+})

src/__tests__/lib/googleSheets.test.ts

@@ -0,0 +1,62 @@
+import { parseSheetRows } from '@/lib/googleSheets'
+
+describe('parseSheetRows', () => {
+  it('parse une ligne complète', () => {
+    const rows = [['REF-1042', 'Carrelage sol', 'Beau carrelage', '29.99', '15', 'actif']]
+    const result = parseSheetRows(rows)
+    expect(result).toHaveLength(1)
+    expect(result[0]).toEqual({
+      ref: 'REF-1042',
+      handle: 'ref-1042',
+      title: 'Carrelage sol',
+      description: 'Beau carrelage',
+      price: '29.99',
+      stock: 15,
+      status: 'active',
+    })
+  })
+
+  it('normalise le handle en minuscules avec tirets', () => {
+    const rows = [['ART 001/B', 'Produit', '', '10.00', '0', 'actif']]
+    const [p] = parseSheetRows(rows)
+    expect(p.handle).toBe('art-001-b')
+  })
+
+  it('ignore les lignes sans référence', () => {
+    const rows = [['', 'Titre vide', '', '0', '0', ''], ['REF-1', 'OK', '', '5.00', '1', 'actif']]
+    expect(parseSheetRows(rows)).toHaveLength(1)
+  })
+
+  it('gère un prix avec virgule (format français)', () => {
+    const rows = [['REF-2', 'Test', '', '19,99', '0', 'actif']]
+    expect(parseSheetRows(rows)[0].price).toBe('19.99')
+  })
+
+  it('marque comme draft si la colonne statut contient "inac"', () => {
+    const rows = [
+      ['REF-3', 'A', '', '1.00', '0', 'Inactif'],
+      ['REF-4', 'B', '', '1.00', '0', 'inactif'],
+      ['REF-5', 'C', '', '1.00', '0', 'actif'],
+      ['REF-6', 'D', '', '1.00', '0', ''],
+    ]
+    const results = parseSheetRows(rows)
+    expect(results[0].status).toBe('draft')
+    expect(results[1].status).toBe('draft')
+    expect(results[2].status).toBe('active')
+    expect(results[3].status).toBe('active')
+  })
+
+  it('utilise la référence comme titre si le titre est vide', () => {
+    const rows = [['REF-7', '', '', '5.00', '0', 'actif']]
+    expect(parseSheetRows(rows)[0].title).toBe('REF-7')
+  })
+
+  it('accepte des lignes avec colonnes manquantes', () => {
+    const rows = [['REF-8']]
+    const [p] = parseSheetRows(rows)
+    expect(p.ref).toBe('REF-8')
+    expect(p.price).toBe('0.00')
+    expect(p.stock).toBe(0)
+    expect(p.status).toBe('active')
+  })
+})

src/__tests__/lib/rate-limit.test.ts

@@ -0,0 +1,36 @@
+import {
+  checkRateLimit,
+  recordFailedAttempt,
+  clearAttempts,
+  _resetForTests,
+} from '@/lib/rate-limit'
+
+beforeEach(() => _resetForTests())
+
+describe('checkRateLimit', () => {
+  it('autorise une nouvelle clé', () => {
+    expect(checkRateLimit('ip:user@test.com')).toBe(true)
+  })
+
+  it('autorise après moins de 5 tentatives', () => {
+    const key = 'ip:user@test.com'
+    recordFailedAttempt(key)
+    recordFailedAttempt(key)
+    recordFailedAttempt(key)
+    recordFailedAttempt(key)
+    expect(checkRateLimit(key)).toBe(true)
+  })
+
+  it('bloque après 5 tentatives', () => {
+    const key = 'ip:user@test.com'
+    for (let i = 0; i < 5; i++) recordFailedAttempt(key)
+    expect(checkRateLimit(key)).toBe(false)
+  })
+
+  it('débloque après clearAttempts', () => {
+    const key = 'ip:user@test.com'
+    for (let i = 0; i < 5; i++) recordFailedAttempt(key)
+    clearAttempts(key)
+    expect(checkRateLimit(key)).toBe(true)
+  })
+})

src/__tests__/lib/syncDiff.test.ts

@@ -0,0 +1,97 @@
+import { computeDiff } from '@/lib/syncDiff'
+import type { SyncProduct, ShopifyProductFull } from '@/types/sync'
+
+const sheet = (ref: string, overrides: Partial<SyncProduct> = {}): SyncProduct => ({
+  ref,
+  handle: ref.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, ''),
+  title: `Produit ${ref}`,
+  description: 'Desc',
+  price: '10.00',
+  stock: 5,
+  status: 'active',
+  ...overrides,
+})
+
+const shopify = (ref: string, shopifyId = '111', overrides: Partial<ShopifyProductFull> = {}): ShopifyProductFull => ({
+  shopifyId,
+  ...sheet(ref, overrides),
+  ...overrides,
+})
+
+describe('computeDiff', () => {
+  it('retourne vide si aucun produit des deux côtés', () => {
+    const { changes, summary } = computeDiff([], [])
+    expect(changes).toHaveLength(0)
+    expect(summary).toEqual({ create: 0, update: 0, deactivate: 0, unchanged: 0 })
+  })
+
+  it('marque comme create si produit présent dans Sheets mais absent de Shopify', () => {
+    const { changes, summary } = computeDiff([sheet('REF-1')], [])
+    expect(changes).toHaveLength(1)
+    expect(changes[0].type).toBe('create')
+    expect(changes[0].ref).toBe('REF-1')
+    expect(summary.create).toBe(1)
+  })
+
+  it('marque comme unchanged si produits identiques', () => {
+    const s = sheet('REF-2')
+    const sp = shopify('REF-2')
+    const { changes, summary } = computeDiff([s], [sp])
+    expect(changes[0].type).toBe('unchanged')
+    expect(summary.unchanged).toBe(1)
+  })
+
+  it('marque comme update si le titre diffère', () => {
+    const s = sheet('REF-3', { title: 'Nouveau titre' })
+    const sp = shopify('REF-3', '222', { title: 'Ancien titre' })
+    const { changes } = computeDiff([s], [sp])
+    expect(changes[0].type).toBe('update')
+    expect(changes[0].changedFields).toContainEqual({
+      field: 'title',
+      from: 'Ancien titre',
+      to: 'Nouveau titre',
+    })
+  })
+
+  it('marque comme update si le prix diffère', () => {
+    const s = sheet('REF-4', { price: '25.00' })
+    const sp = shopify('REF-4', '333', { price: '20.00' })
+    const { changes } = computeDiff([s], [sp])
+    expect(changes[0].type).toBe('update')
+    expect(changes[0].changedFields).toContainEqual({ field: 'price', from: '20.00', to: '25.00' })
+  })
+
+  it('marque comme update si le statut diffère', () => {
+    const s = sheet('REF-5', { status: 'draft' })
+    const sp = shopify('REF-5', '444', { status: 'active' })
+    const { changes } = computeDiff([s], [sp])
+    expect(changes[0].type).toBe('update')
+  })
+
+  it('marque comme deactivate si produit ACTIF dans Shopify absent des Sheets', () => {
+    const sp = shopify('REF-6', '555', { status: 'active' })
+    const { changes, summary } = computeDiff([], [sp])
+    expect(changes[0].type).toBe('deactivate')
+    expect(summary.deactivate).toBe(1)
+  })
+
+  it("ne marque PAS comme deactivate si le produit Shopify est déjà draft", () => {
+    const sp = shopify('REF-7', '666', { status: 'draft' })
+    const { changes } = computeDiff([], [sp])
+    expect(changes).toHaveLength(0)
+  })
+
+  it('calcule le résumé correctement sur un mix de changements', () => {
+    const sheetProducts = [sheet('REF-A'), sheet('REF-B', { title: 'Modifié' }), sheet('REF-C')]
+    const shopifyProducts = [
+      shopify('REF-B', '10', { title: 'Original' }),
+      shopify('REF-C', '11'),
+      shopify('REF-D', '12', { status: 'active' }),
+    ]
+    const { summary } = computeDiff(sheetProducts, shopifyProducts)
+    expect(summary.create).toBe(1)    // REF-A
+    expect(summary.update).toBe(1)    // REF-B
+    expect(summary.unchanged).toBe(1) // REF-C
+    expect(summary.deactivate).toBe(1) // REF-D
+  })
+})

src/app/(auth)/login/page.tsx

@@ -0,0 +1,97 @@
+'use client'
+import { signIn } from 'next-auth/react'
+import { useState, FormEvent } from 'react'
+import { useRouter } from 'next/navigation'
+
+export default function LoginPage() {
+  const [email, setEmail]       = useState('')
+  const [password, setPassword] = useState('')
+  const [error, setError]       = useState('')
+  const [loading, setLoading]   = useState(false)
+  const router = useRouter()
+
+  async function handleSubmit(e: FormEvent) {
+    e.preventDefault()
+    setLoading(true)
+    setError('')
+
+    const result = await signIn('credentials', {
+      email,
+      password,
+      redirect: false,
+    })
+
+    setLoading(false)
+
+    if (result?.error === 'RATE_LIMITED') {
+      setError('Trop de tentatives. Réessayez dans 15 minutes.')
+    } else if (result?.error) {
+      setError('Email ou mot de passe incorrect.')
+    } else {
+      router.push('/')
+      router.refresh()
+    }
+  }
+
+  return (
+    <div className="min-h-screen bg-slate-950 flex items-center justify-center p-4">
+      <div className="w-full max-w-sm">
+        <div className="text-center mb-8">
+          <h1 className="text-2xl font-extrabold text-white">
+            Matériaux<span className="text-indigo-400">Destock</span>
+          </h1>
+          <p className="text-slate-400 text-sm mt-1">Interface de gestion</p>
+        </div>
+
+        <form
+          onSubmit={handleSubmit}
+          className="bg-slate-900 rounded-xl p-6 space-y-4 border border-slate-800"
+        >
+          {error && (
+            <div className="bg-red-950 border border-red-800 text-red-300 text-sm rounded-lg px-3 py-2">
+              {error}
+            </div>
+          )}
+
+          <div>
+            <label className="block text-xs font-semibold text-slate-400 mb-1 uppercase tracking-wide">
+              Email
+            </label>
+            <input
+              type="email"
+              value={email}
+              onChange={e => setEmail(e.target.value)}
+              required
+              autoComplete="email"
+              className="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2.5 text-sm text-white placeholder-slate-500 focus:outline-none focus:border-indigo-500 transition-colors"
+              placeholder="vous@example.com"
+            />
+          </div>
+
+          <div>
+            <label className="block text-xs font-semibold text-slate-400 mb-1 uppercase tracking-wide">
+              Mot de passe
+            </label>
+            <input
+              type="password"
+              value={password}
+              onChange={e => setPassword(e.target.value)}
+              required
+              autoComplete="current-password"
+              className="w-full bg-slate-800 border border-slate-700 rounded-lg px-3 py-2.5 text-sm text-white placeholder-slate-500 focus:outline-none focus:border-indigo-500 transition-colors"
+              placeholder="••••••••"
+            />
+          </div>
+
+          <button
+            type="submit"
+            disabled={loading}
+            className="w-full bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white font-semibold py-2.5 rounded-lg text-sm transition-colors"
+          >
+            {loading ? 'Connexion…' : 'Se connecter'}
+          </button>
+        </form>
+      </div>
+    </div>
+  )
+}

src/app/(dashboard)/creation/page.tsx

@@ -0,0 +1,166 @@
+'use client'
+import { useState, useCallback } from 'react'
+import { Header } from '@/components/layout/Header'
+import { PendingRowsTable } from '@/components/creation/PendingRowsTable'
+import { MetafieldResolver } from '@/components/creation/MetafieldResolver'
+import { CreationProgress } from '@/components/creation/CreationProgress'
+import type { PendingProduct, MetafieldResolution, CreationStreamEvent } from '@/types/creation'
+
+type Step = 'analyse' | 'metafields' | 'confirmation' | 'execution'
+
+export default function CreationPage() {
+  const [step, setStep] = useState<Step>('analyse')
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+  const [byTab, setByTab] = useState<Record<string, PendingProduct[]>>({})
+  const [total, setTotal] = useState(0)
+  const [specificColumns, setSpecificColumns] = useState<string[]>([])
+  const [resolutions, setResolutions] = useState<MetafieldResolution[]>([])
+  const [events, setEvents] = useState<CreationStreamEvent[]>([])
+  const [done, setDone] = useState(false)
+
+  const analyse = async () => {
+    setLoading(true)
+    setError(null)
+    try {
+      const res = await fetch('/api/creation/preview')
+      const data = await res.json()
+      if (data.error) throw new Error(data.error)
+      setByTab(data.byTab)
+      setTotal(data.total)
+      setSpecificColumns(data.specificColumns)
+      setStep('metafields')
+    } catch (e) {
+      setError(e instanceof Error ? e.message : 'Erreur')
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  const handleResolved = useCallback((r: MetafieldResolution[]) => { setResolutions(r) }, [])
+
+  const execute = async () => {
+    setStep('execution')
+    setEvents([])
+    setDone(false)
+    const res = await fetch('/api/creation/execute', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ resolutions }),
+    })
+    if (!res.body) return
+    const reader = res.body.getReader()
+    const decoder = new TextDecoder()
+    let buffer = ''
+    while (true) {
+      const { done: readerDone, value } = await reader.read()
+      if (readerDone) break
+      buffer += decoder.decode(value, { stream: true })
+      const lines = buffer.split('\n')
+      buffer = lines.pop() ?? ''
+      for (const line of lines) {
+        if (!line.trim()) continue
+        try {
+          const event = JSON.parse(line) as CreationStreamEvent
+          setEvents(prev => [...prev, event])
+          if (event.type === 'done') setDone(true)
+        } catch { /* ligne incomplète */ }
+      }
+    }
+    setDone(true)
+  }
+
+  const STEPS: { id: Step; label: string }[] = [
+    { id: 'analyse', label: 'Analyse' },
+    { id: 'metafields', label: 'Métachamps' },
+    { id: 'confirmation', label: 'Confirmation' },
+    { id: 'execution', label: 'Exécution' },
+  ]
+  const currentIdx = STEPS.findIndex(s => s.id === step)
+
+  return (
+    <>
+      <Header title="Création produits" />
+      <div className="p-6 space-y-6">
+        <div className="flex gap-2">
+          {STEPS.map((s, i) => (
+            <div key={s.id} className="flex items-center gap-2">
+              <span className={`px-3 py-1 rounded-full text-xs font-medium ${step === s.id ? 'bg-indigo-600 text-white' : i < currentIdx ? 'bg-green-700 text-white' : 'bg-slate-700 text-gray-400'}`}>
+                {i + 1}. {s.label}
+              </span>
+              {i < STEPS.length - 1 && <span className="text-gray-600">→</span>}
+            </div>
+          ))}
+        </div>
+
+        <div className="bg-slate-800 rounded-xl p-6">
+          {error && <div className="mb-4 p-3 bg-red-900/30 border border-red-700 rounded-lg text-red-300 text-sm">{error}</div>}
+
+          {step === 'analyse' && (
+            <div className="space-y-4">
+              <p className="text-gray-300 text-sm">
+                Lit tous les onglets du Google Sheets et détecte les lignes où <code className="text-indigo-300">Publié=1</code> et <code className="text-indigo-300">ID vide</code>.
+              </p>
+              <button onClick={analyse} disabled={loading}
+                className="px-4 py-2 bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white rounded-lg text-sm font-medium transition-colors">
+                {loading ? 'Analyse en cours…' : 'Analyser le Sheets'}
+              </button>
+            </div>
+          )}
+
+          {step === 'metafields' && (
+            <div className="space-y-6">
+              <PendingRowsTable byTab={byTab} total={total} />
+              {total > 0 && (
+                <>
+                  <hr className="border-slate-700" />
+                  <div>
+                    <h2 className="text-base font-semibold text-white mb-3">Résolution des métachamps</h2>
+                    <MetafieldResolver specificColumns={specificColumns} onResolved={handleResolved} />
+                  </div>
+                  <button onClick={() => setStep('confirmation')}
+                    className="px-4 py-2 bg-indigo-600 hover:bg-indigo-700 text-white rounded-lg text-sm font-medium transition-colors">
+                    Continuer →
+                  </button>
+                </>
+              )}
+            </div>
+          )}
+
+          {step === 'confirmation' && (
+            <div className="space-y-4">
+              <div className="space-y-2 text-sm">
+                <p className="text-gray-300"><span className="text-white font-medium">{total} produit{total > 1 ? 's' : ''}</span> à créer dans Shopify</p>
+                <p className="text-gray-300"><span className="text-white font-medium">{resolutions.filter(r => r.action !== 'skip').length}</span> type{resolutions.filter(r => r.action !== 'skip').length > 1 ? 's' : ''} de métachamps à assigner</p>
+                <p className="text-gray-300"><span className="text-white font-medium">{resolutions.filter(r => r.action === 'create').length}</span> nouvelle{resolutions.filter(r => r.action === 'create').length > 1 ? 's' : ''} définition{resolutions.filter(r => r.action === 'create').length > 1 ? 's' : ''} à créer dans Shopify</p>
+                <p className="text-yellow-300 text-xs mt-2">⚠ Les descriptions seront générées par OpenAI GPT-4o (~0.01$ par produit)</p>
+              </div>
+              <div className="flex gap-3">
+                <button onClick={() => setStep('metafields')}
+                  className="px-4 py-2 bg-slate-700 hover:bg-slate-600 text-gray-300 rounded-lg text-sm font-medium transition-colors">
+                  ← Retour
+                </button>
+                <button onClick={execute}
+                  className="px-4 py-2 bg-green-700 hover:bg-green-600 text-white rounded-lg text-sm font-medium transition-colors">
+                  Lancer la création ({total} produits)
+                </button>
+              </div>
+            </div>
+          )}
+
+          {step === 'execution' && (
+            <div className="space-y-4">
+              <CreationProgress events={events} done={done} />
+              {done && (
+                <button onClick={() => { setStep('analyse'); setEvents([]); setDone(false); setByTab({}); setTotal(0) }}
+                  className="px-4 py-2 bg-indigo-600 hover:bg-indigo-700 text-white rounded-lg text-sm font-medium transition-colors">
+                  Nouvelle session
+                </button>
+              )}
+            </div>
+          )}
+        </div>
+      </div>
+    </>
+  )
+}

src/app/(dashboard)/images/page.tsx

@@ -0,0 +1,61 @@
+'use client'
+import { useState } from 'react'
+import { Header } from '@/components/layout/Header'
+import { DropZone } from '@/components/images/DropZone'
+import { ImageCard } from '@/components/images/ImageCard'
+import { Lightbox } from '@/components/images/Lightbox'
+import { GlobalActions } from '@/components/images/GlobalActions'
+import { useImages } from '@/hooks/useImages'
+import type { ImageItem } from '@/types/images'
+
+export default function ImagesPage() {
+  const { items, addFiles, setFeather, rotate, uploadOne, uploadAll, removeItem } = useImages()
+  const [lightboxItem, setLightboxItem] = useState<ImageItem | null>(null)
+
+  return (
+    <>
+      <Header
+        title="🖼️ Images"
+        actions={
+          <span className="text-xs text-slate-500">
+            {items.length > 0 ? `${items.length} image${items.length > 1 ? 's' : ''}` : ''}
+          </span>
+        }
+      />
+
+      <div className="p-6 flex flex-col gap-4 flex-1 overflow-y-auto">
+        <DropZone onFiles={addFiles} />
+
+        {items.length > 0 && (
+          <GlobalActions items={items} onUploadAll={uploadAll} />
+        )}
+
+        {items.length > 0 && (
+          <div className="grid grid-cols-2 md:grid-cols-3 lg:grid-cols-4 xl:grid-cols-5 gap-4">
+            {items.map((item) => (
+              <ImageCard
+                key={item.id}
+                item={item}
+                onFeatherChange={setFeather}
+                onRotate={rotate}
+                onUpload={uploadOne}
+                onRemove={removeItem}
+                onOpenLightbox={setLightboxItem}
+              />
+            ))}
+          </div>
+        )}
+
+        {items.length === 0 && (
+          <div className="text-center py-12 text-slate-600">
+            <p className="text-4xl mb-3">📂</p>
+            <p className="text-sm">Déposez des images pour commencer</p>
+            <p className="text-xs mt-1">Le nom du fichier (sans extension) doit correspondre à une référence produit Shopify</p>
+          </div>
+        )}
+      </div>
+
+      <Lightbox item={lightboxItem} onClose={() => setLightboxItem(null)} />
+    </>
+  )
+}

src/app/(dashboard)/layout.tsx

@@ -0,0 +1,10 @@
+import { Sidebar } from '@/components/layout/Sidebar'
+
+export default function DashboardLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <div className="flex min-h-screen bg-gray-50">
+      <Sidebar />
+      <main className="flex-1 flex flex-col overflow-hidden">{children}</main>
+    </div>
+  )
+}

src/app/(dashboard)/page.tsx

@@ -0,0 +1,9 @@
+import { Header } from '@/components/layout/Header'
+export default function DashboardPage() {
+  return (
+    <>
+      <Header title="📊 Dashboard" />
+      <div className="p-6"><p className="text-gray-400 text-sm">Dashboard — à implémenter (Plan 4)</p></div>
+    </>
+  )
+}

src/app/(dashboard)/parametres/page.tsx

@@ -0,0 +1,41 @@
+'use client'
+import { useState } from 'react'
+import { useSession } from 'next-auth/react'
+import { Header } from '@/components/layout/Header'
+import { UsersManager } from '@/components/settings/UsersManager'
+import { ConnectionStatus } from '@/components/settings/ConnectionStatus'
+
+type Tab = 'connexions' | 'utilisateurs'
+
+export default function ParametresPage() {
+  const { data: session } = useSession()
+  const isAdmin = session?.user?.role === 'admin'
+  const [tab, setTab] = useState<Tab>('connexions')
+
+  return (
+    <>
+      <Header title="Paramètres" />
+      <div className="p-6 space-y-6">
+        {isAdmin && (
+          <div className="flex gap-2">
+            {(['connexions', 'utilisateurs'] as Tab[]).map((t) => (
+              <button
+                key={t}
+                onClick={() => setTab(t)}
+                className={`px-4 py-2 rounded-lg text-sm font-medium transition-colors ${
+                  tab === t
+                    ? 'bg-indigo-600 text-white'
+                    : 'bg-slate-700 text-gray-300 hover:bg-slate-600'
+                }`}
+              >
+                {t === 'connexions' ? 'Connexions' : 'Utilisateurs'}
+              </button>
+            ))}
+          </div>
+        )}
+        {(!isAdmin || tab === 'connexions') && <ConnectionStatus />}
+        {isAdmin && tab === 'utilisateurs' && <UsersManager />}
+      </div>
+    </>
+  )
+}

src/app/(dashboard)/produits/page.tsx

@@ -0,0 +1,56 @@
+'use client'
+import { useState, useEffect, useMemo } from 'react'
+import { Header } from '@/components/layout/Header'
+import { ProductFiltersBar } from '@/components/products/ProductFiltersBar'
+import { ProductTable } from '@/components/products/ProductTable'
+import type { CatalogProduct, ProductFilters } from '@/types/products'
+
+export default function ProduitsPage() {
+  const [allProducts, setAllProducts] = useState<CatalogProduct[]>([])
+  const [loading, setLoading] = useState(true)
+  const [error, setError] = useState<string | null>(null)
+  const [filters, setFilters] = useState<ProductFilters>({ status: 'all', search: '' })
+
+  useEffect(() => {
+    setLoading(true)
+    setError(null)
+    const params = filters.status !== 'all' ? `?status=${filters.status}` : ''
+    fetch(`/api/products/list${params}`)
+      .then((r) => r.json())
+      .then((data) => {
+        if (data.error) throw new Error(data.error)
+        setAllProducts(data.products)
+      })
+      .catch((e: Error) => setError(e.message))
+      .finally(() => setLoading(false))
+  }, [filters.status])
+
+  const displayed = useMemo(() => {
+    if (!filters.search.trim()) return allProducts
+    const q = filters.search.toLowerCase()
+    return allProducts.filter(
+      (p) => p.title.toLowerCase().includes(q) || p.ref.toLowerCase().includes(q),
+    )
+  }, [allProducts, filters.search])
+
+  return (
+    <>
+      <Header title="Produits" />
+      <div className="p-6">
+        <div className="bg-slate-800 rounded-xl p-6">
+          <ProductFiltersBar
+            filters={filters}
+            total={displayed.length}
+            onChange={(f) => setFilters((prev) => ({ ...prev, ...f }))}
+          />
+          {error && (
+            <div className="mb-4 p-3 bg-red-900/30 border border-red-700 rounded-lg text-red-300 text-sm">
+              {error}
+            </div>
+          )}
+          <ProductTable products={displayed} loading={loading} />
+        </div>
+      </div>
+    </>
+  )
+}

src/app/(dashboard)/sync/page.tsx

@@ -0,0 +1,222 @@
+'use client'
+import { useState, useCallback } from 'react'
+import { Header } from '@/components/layout/Header'
+import { SyncStepper } from '@/components/sync/SyncStepper'
+import { DiffTable } from '@/components/sync/DiffTable'
+import { SyncProgress } from '@/components/sync/SyncProgress'
+import { SyncHistory } from '@/components/sync/SyncHistory'
+import type { DiffResult, SyncChange, SyncHistoryEntry } from '@/types/sync'
+
+type Step = 1 | 2 | 3 | 4
+
+export default function SyncPage() {
+  const [step, setStep] = useState<Step>(1)
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+  const [diff, setDiff] = useState<DiffResult | null>(null)
+  const [history, setHistory] = useState<SyncHistoryEntry[]>([])
+  const [historyLoaded, setHistoryLoaded] = useState(false)
+
+  // Log streaming state
+  const [log, setLog] = useState<string[]>([])
+  const [progress, setProgress] = useState<{ current: number; total: number } | null>(null)
+  const [summary, setSummary] = useState<{
+    created: number; updated: number; deactivated: number; errors: number; status: string
+  } | null>(null)
+
+  // Étape 1 → 2 : lancer le preview
+  const handleAnalyze = useCallback(async () => {
+    setLoading(true)
+    setError(null)
+    try {
+      const res = await fetch('/api/sync/preview')
+      const data = await res.json()
+      if (!res.ok) throw new Error(data.error || `HTTP ${res.status}`)
+      setDiff(data)
+      setStep(2)
+    } catch (err) {
+      setError((err as Error).message)
+    } finally {
+      setLoading(false)
+    }
+  }, [])
+
+  // Étape 3 → 4 : lancer la sync en streaming
+  const handleExecute = useCallback(async () => {
+    if (!diff) return
+    setStep(4)
+    setLog([])
+    setProgress(null)
+    setSummary(null)
+
+    const actionableChanges: SyncChange[] = diff.changes.filter((c) => c.type !== 'unchanged')
+
+    try {
+      const res = await fetch('/api/sync/execute', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ changes: actionableChanges }),
+      })
+
+      if (!res.ok) {
+        const data = await res.json()
+        throw new Error(data.error || `HTTP ${res.status}`)
+      }
+
+      const reader = res.body!.getReader()
+      const decoder = new TextDecoder()
+      let buffer = ''
+
+      while (true) {
+        const { done, value } = await reader.read()
+        if (done) break
+        buffer += decoder.decode(value, { stream: true })
+        const lines = buffer.split('\n')
+        buffer = lines.pop() ?? ''
+
+        for (const line of lines.filter(Boolean)) {
+          try {
+            const event = JSON.parse(line)
+            if (event.type === 'progress') {
+              setProgress({ current: event.current, total: event.total })
+              setLog((prev) => [...prev, event.message])
+            } else if (event.type === 'done') {
+              setSummary(event.summary)
+              setHistoryLoaded(false) // force reload history
+            }
+          } catch { /* ligne incomplète */ }
+        }
+      }
+    } catch (err) {
+      setLog((prev) => [...prev, `❌ Erreur : ${(err as Error).message}`])
+    }
+  }, [diff])
+
+  // Charger l'historique au besoin
+  const loadHistory = useCallback(async () => {
+    if (historyLoaded) return
+    try {
+      const res = await fetch('/api/sync/history')
+      if (res.ok) {
+        setHistory(await res.json())
+        setHistoryLoaded(true)
+      }
+    } catch { /* silencieux */ }
+  }, [historyLoaded])
+
+  const actionableCount = diff
+    ? diff.summary.create + diff.summary.update + diff.summary.deactivate
+    : 0
+
+  return (
+    <>
+      <Header title="🔄 Sync Sheets" />
+
+      <div className="p-6 flex flex-col gap-6 flex-1 overflow-y-auto">
+        {/* Stepper */}
+        <SyncStepper currentStep={step} />
+
+        {/* Étape 1 — Analyser */}
+        {step === 1 && (
+          <div className="flex flex-col items-center gap-4 py-8">
+            <p className="text-slate-400 text-sm text-center max-w-md">
+              Lit Google Sheets et compare avec le catalogue Shopify actuel pour générer l&apos;aperçu des changements.
+            </p>
+            {error && (
+              <div className="bg-red-950 border border-red-800 text-red-300 text-sm rounded-lg px-4 py-2 max-w-md">
+                {error}
+              </div>
+            )}
+            <button
+              onClick={handleAnalyze}
+              disabled={loading}
+              className="bg-indigo-600 hover:bg-indigo-500 disabled:opacity-50 text-white font-semibold px-6 py-3 rounded-xl text-sm transition-colors"
+            >
+              {loading ? '⏳ Analyse en cours…' : '🔍 Analyser le Sheets'}
+            </button>
+          </div>
+        )}
+
+        {/* Étape 2 — Aperçu diff */}
+        {step === 2 && diff && (
+          <div className="flex flex-col gap-4">
+            <DiffTable diff={diff} />
+            <div className="flex gap-3 justify-end">
+              <button
+                onClick={() => { setStep(1); setDiff(null) }}
+                className="px-4 py-2 text-sm bg-slate-800 hover:bg-slate-700 text-slate-300 rounded-lg"
+              >
+                ← Relancer l&apos;analyse
+              </button>
+              <button
+                onClick={() => setStep(3)}
+                disabled={actionableCount === 0}
+                className="px-4 py-2 text-sm bg-indigo-600 hover:bg-indigo-500 disabled:opacity-40 text-white font-semibold rounded-lg"
+              >
+                Confirmer →
+              </button>
+            </div>
+          </div>
+        )}
+
+        {/* Étape 3 — Confirmation */}
+        {step === 3 && diff && (
+          <div className="flex flex-col items-center gap-6 py-8">
+            <div className="bg-slate-900 border border-slate-700 rounded-xl p-6 text-center max-w-sm">
+              <p className="text-lg font-semibold text-white mb-2">
+                {actionableCount} changement{actionableCount > 1 ? 's' : ''} vont être appliqués à Shopify
+              </p>
+              <p className="text-sm text-slate-400">
+                {diff.summary.create > 0 && `${diff.summary.create} créations · `}
+                {diff.summary.update > 0 && `${diff.summary.update} mises à jour · `}
+                {diff.summary.deactivate > 0 && `${diff.summary.deactivate} désactivations`}
+              </p>
+            </div>
+            <div className="flex gap-3">
+              <button
+                onClick={() => setStep(2)}
+                className="px-4 py-2 text-sm bg-slate-800 hover:bg-slate-700 text-slate-300 rounded-lg"
+              >
+                Annuler
+              </button>
+              <button
+                onClick={handleExecute}
+                className="px-6 py-2 text-sm bg-indigo-600 hover:bg-indigo-500 text-white font-semibold rounded-lg"
+              >
+                ✅ Confirmer et synchroniser
+              </button>
+            </div>
+          </div>
+        )}
+
+        {/* Étape 4 — Progression */}
+        {step === 4 && (
+          <div className="flex flex-col gap-4">
+            <SyncProgress log={log} progress={progress} summary={summary} />
+            {summary && (
+              <div className="flex gap-3 justify-end">
+                <button
+                  onClick={() => { setStep(1); setDiff(null); setSummary(null); setLog([]) }}
+                  className="px-4 py-2 text-sm bg-indigo-600 hover:bg-indigo-500 text-white font-semibold rounded-lg"
+                >
+                  ↺ Nouvelle sync
+                </button>
+              </div>
+            )}
+          </div>
+        )}
+
+        {/* Historique */}
+        <div className="mt-4">
+          <button
+            onClick={loadHistory}
+            className="text-sm text-slate-500 hover:text-slate-300 mb-3"
+          >
+            {historyLoaded ? '📋 Historique des syncs' : '📋 Charger l\'historique'}
+          </button>
+          {historyLoaded && <SyncHistory entries={history} />}
+        </div>
+      </div>
+    </>
+  )
+}

src/app/api/admin/connections/test/route.ts

@@ -0,0 +1,45 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+
+async function testShopify(): Promise<{ ok: boolean; message: string }> {
+  const domain = process.env.SHOPIFY_STORE_DOMAIN
+  const token = process.env.SHOPIFY_ADMIN_API_TOKEN
+  if (!domain || !token) return { ok: false, message: 'Variables manquantes' }
+  try {
+    const res = await fetch(`https://${domain}/admin/api/2024-01/shop.json`, {
+      headers: { 'X-Shopify-Access-Token': token },
+    })
+    if (!res.ok) return { ok: false, message: `HTTP ${res.status}` }
+    const data = await res.json()
+    return { ok: true, message: `Boutique : ${data.shop?.name ?? domain}` }
+  } catch (e) {
+    return { ok: false, message: e instanceof Error ? e.message : 'Erreur réseau' }
+  }
+}
+
+async function testSheets(): Promise<{ ok: boolean; message: string }> {
+  const apiKey = process.env.GOOGLE_API_KEY
+  const sheetId = process.env.GOOGLE_SHEETS_ID
+  if (!apiKey || !sheetId) return { ok: false, message: 'Variables manquantes' }
+  try {
+    const url = `https://sheets.googleapis.com/v4/spreadsheets/${sheetId}?key=${apiKey}&fields=properties.title`
+    const res = await fetch(url)
+    if (!res.ok) return { ok: false, message: `HTTP ${res.status}` }
+    const data = await res.json()
+    return { ok: true, message: `Feuille : ${data.properties?.title ?? sheetId}` }
+  } catch (e) {
+    return { ok: false, message: e instanceof Error ? e.message : 'Erreur réseau' }
+  }
+}
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+export async function GET(_req: NextRequest) {
+  const session = await getServerSession(authOptions)
+  if (!session || session.user.role !== 'admin') {
+    return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+  }
+
+  const [shopify, sheets] = await Promise.all([testShopify(), testSheets()])
+  return NextResponse.json({ shopify, sheets })
+}

src/app/api/admin/users/[id]/route.ts

@@ -0,0 +1,47 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { prisma } from '@/lib/prisma'
+import bcrypt from 'bcryptjs'
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions)
+  if (!session || session.user.role !== 'admin') return null
+  return session
+}
+
+export async function PUT(req: NextRequest, { params }: { params: { id: string } }) {
+  const session = await requireAdmin()
+  if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+
+  const body = await req.json().catch(() => ({}))
+  const { name, role, password } = body as Record<string, string>
+
+  const data: Record<string, string> = {}
+  if (name) data.name = name
+  if (role) data.role = role
+  if (password) data.password = await bcrypt.hash(password, 12)
+
+  if (Object.keys(data).length === 0) {
+    return NextResponse.json({ error: 'Aucun champ à mettre à jour' }, { status: 400 })
+  }
+
+  const user = await prisma.user.update({
+    where: { id: params.id },
+    data,
+    select: { id: true, email: true, name: true, role: true, createdAt: true },
+  })
+  return NextResponse.json(user)
+}
+
+export async function DELETE(req: NextRequest, { params }: { params: { id: string } }) {
+  const session = await requireAdmin()
+  if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+
+  if (params.id === session.user.id) {
+    return NextResponse.json({ error: 'Impossible de se supprimer soi-même' }, { status: 400 })
+  }
+
+  await prisma.user.delete({ where: { id: params.id } })
+  return NextResponse.json({ ok: true })
+}

src/app/api/admin/users/route.test.ts

@@ -0,0 +1,61 @@
+import { GET, POST } from './route'
+import { getServerSession } from 'next-auth'
+import { prisma } from '@/lib/prisma'
+import bcrypt from 'bcryptjs'
+
+jest.mock('next-auth')
+jest.mock('@/lib/prisma', () => ({ prisma: { user: { findMany: jest.fn(), create: jest.fn() } } }))
+jest.mock('bcryptjs')
+
+const mockSession = getServerSession as jest.MockedFunction<typeof getServerSession>
+const mockFindMany = prisma.user.findMany as jest.MockedFunction<typeof prisma.user.findMany>
+const mockCreate = prisma.user.create as jest.MockedFunction<typeof prisma.user.create>
+const mockHash = bcrypt.hash as jest.MockedFunction<typeof bcrypt.hash>
+
+const adminSession = { user: { id: 'admin-id', role: 'admin' } }
+const gestSession = { user: { id: 'gest-id', role: 'gestionnaire' } }
+
+describe('GET /api/admin/users', () => {
+  it('retourne 403 si non admin', async () => {
+    mockSession.mockResolvedValue(gestSession as never)
+    const res = await GET(new Request('http://localhost') as never)
+    expect(res.status).toBe(403)
+  })
+
+  it('retourne la liste des utilisateurs', async () => {
+    mockSession.mockResolvedValue(adminSession as never)
+    mockFindMany.mockResolvedValue([
+      { id: '1', email: 'a@b.com', name: 'Alice', role: 'admin', createdAt: new Date() } as never,
+    ])
+    const res = await GET(new Request('http://localhost') as never)
+    const body = await res.json()
+    expect(body).toHaveLength(1)
+    expect(body[0].email).toBe('a@b.com')
+    expect(body[0].password).toBeUndefined()
+  })
+})
+
+describe('POST /api/admin/users', () => {
+  it('retourne 403 si non admin', async () => {
+    mockSession.mockResolvedValue(gestSession as never)
+    const res = await POST(new Request('http://localhost', { method: 'POST', body: '{}' }) as never)
+    expect(res.status).toBe(403)
+  })
+
+  it('crée un utilisateur avec mot de passe hashé', async () => {
+    mockSession.mockResolvedValue(adminSession as never)
+    mockHash.mockResolvedValue('hashed' as never)
+    mockCreate.mockResolvedValue({ id: 'new', email: 'b@c.com', name: 'Bob', role: 'gestionnaire', createdAt: new Date() } as never)
+    const body = JSON.stringify({ email: 'b@c.com', name: 'Bob', password: 'pass123', role: 'gestionnaire' })
+    const res = await POST(new Request('http://localhost', { method: 'POST', body, headers: { 'Content-Type': 'application/json' } }) as never)
+    expect(res.status).toBe(201)
+    expect(mockHash).toHaveBeenCalledWith('pass123', 12)
+  })
+
+  it('retourne 400 si champs manquants', async () => {
+    mockSession.mockResolvedValue(adminSession as never)
+    const body = JSON.stringify({ email: 'b@c.com' })
+    const res = await POST(new Request('http://localhost', { method: 'POST', body, headers: { 'Content-Type': 'application/json' } }) as never)
+    expect(res.status).toBe(400)
+  })
+})

src/app/api/admin/users/route.ts

@@ -0,0 +1,42 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { prisma } from '@/lib/prisma'
+import bcrypt from 'bcryptjs'
+
+async function requireAdmin() {
+  const session = await getServerSession(authOptions)
+  if (!session || session.user.role !== 'admin') return null
+  return session
+}
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+export async function GET(_req: NextRequest) {
+  const session = await requireAdmin()
+  if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+
+  const users = await prisma.user.findMany({
+    orderBy: { createdAt: 'asc' },
+    select: { id: true, email: true, name: true, role: true, createdAt: true },
+  })
+  return NextResponse.json(users)
+}
+
+export async function POST(req: NextRequest) {
+  const session = await requireAdmin()
+  if (!session) return NextResponse.json({ error: 'Forbidden' }, { status: 403 })
+
+  const body = await req.json().catch(() => ({}))
+  const { email, name, password, role } = body as Record<string, string>
+
+  if (!email || !name || !password || !role) {
+    return NextResponse.json({ error: 'email, name, password et role requis' }, { status: 400 })
+  }
+
+  const hashed = await bcrypt.hash(password, 12)
+  const user = await prisma.user.create({
+    data: { email, name, password: hashed, role },
+    select: { id: true, email: true, name: true, role: true, createdAt: true },
+  })
+  return NextResponse.json(user, { status: 201 })
+}

src/app/api/auth/[...nextauth]/route.ts

@@ -0,0 +1,5 @@
+import NextAuth from 'next-auth'
+import { authOptions } from '@/lib/auth'
+
+const handler = NextAuth(authOptions)
+export { handler as GET, handler as POST }

src/app/api/creation/execute/route.ts

@@ -0,0 +1,107 @@
+import { NextRequest } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { fetchPendingProducts } from '@/lib/creationSheets'
+import { generateDescriptions } from '@/lib/openaiClient'
+import { ensureMetafieldDefinition, setProductMetafield } from '@/lib/shopifyMetafields'
+import { addProductToCollection } from '@/lib/shopifyCollections'
+import { createShopifyProduct } from '@/lib/shopifySync'
+import { prisma } from '@/lib/prisma'
+import type { MetafieldResolution, CreationStreamEvent } from '@/types/creation'
+
+function encode(event: CreationStreamEvent): string {
+  return JSON.stringify(event) + '\n'
+}
+
+export async function POST(req: NextRequest) {
+  const session = await getServerSession(authOptions)
+  if (!session) {
+    return new Response(JSON.stringify({ error: 'Non authentifié' }), { status: 401 })
+  }
+
+  const userId = (session.user as { id: string }).id
+  const body = await req.json().catch(() => ({})) as { resolutions?: MetafieldResolution[] }
+  const resolutions: MetafieldResolution[] = body.resolutions ?? []
+  const resolutionMap = new Map<string, MetafieldResolution>(resolutions.map(r => [r.columnHeader, r]))
+
+  const stream = new ReadableStream({
+    async start(controller) {
+      const send = (event: CreationStreamEvent) => controller.enqueue(encode(event))
+      try {
+        const existing = await prisma.productCreation.findMany({ select: { sheetTab: true, sheetRow: true } })
+        const alreadyCreated = new Set(existing.map(e => `${e.sheetTab}:${e.sheetRow}`))
+        const pending = await fetchPendingProducts(alreadyCreated)
+        const total = pending.length
+
+        if (total === 0) {
+          send({ type: 'done', summary: { created: 0, errors: 0, status: 'success' } })
+          controller.close()
+          return
+        }
+
+        // Crée les définitions manquantes en amont
+        for (const resolution of resolutions) {
+          if (resolution.action === 'create') await ensureMetafieldDefinition(resolution)
+        }
+
+        let created = 0
+        let errors = 0
+
+        for (let i = 0; i < pending.length; i++) {
+          const product = pending[i]
+          send({ type: 'progress', current: i + 1, total, tab: product.tab, title: product.title, step: 'Génération descriptions…' })
+          try {
+            const { longDesc } = await generateDescriptions({
+              title: product.title,
+              rawDescription: '',
+              comment: product.comment,
+              vendor: product.vendor,
+              famille: product.famille,
+            })
+            send({ type: 'progress', current: i + 1, total, tab: product.tab, title: product.title, step: 'Création produit Shopify…' })
+            const shopifyId = await createShopifyProduct({
+              ref: product.sku,
+              handle: product.sku.toLowerCase().replace(/[^a-z0-9]+/g, '-'),
+              title: product.title,
+              description: longDesc,
+              price: product.priceActual || '0.00',
+              stock: product.stock,
+              status: 'active',
+            })
+            if (product.collectionId) await addProductToCollection(shopifyId, product.collectionId)
+            if (product.subCollectionId) await addProductToCollection(shopifyId, product.subCollectionId)
+            send({ type: 'progress', current: i + 1, total, tab: product.tab, title: product.title, step: 'Métachamps…' })
+            for (const [colHeader, value] of Object.entries(product.specificFields)) {
+              const resolution = resolutionMap.get(colHeader)
+              if (!resolution || resolution.action === 'skip') continue
+              await setProductMetafield(shopifyId, resolution, value)
+            }
+            await prisma.productCreation.create({
+              data: { userId, sheetTab: product.tab, sheetRow: product.rowNumber, shopifyId, sku: product.sku, title: product.title, status: 'success' },
+            })
+            created++
+          } catch (err) {
+            const message = err instanceof Error ? err.message : 'Erreur inconnue'
+            send({ type: 'error', title: product.title, message })
+            await prisma.productCreation.create({
+              data: { userId, sheetTab: product.tab, sheetRow: product.rowNumber, shopifyId: '', sku: product.sku, title: product.title, status: 'error', errorMessage: message },
+            })
+            errors++
+          }
+        }
+        const status = errors === 0 ? 'success' : created === 0 ? 'error' : 'partial'
+        send({ type: 'done', summary: { created, errors, status } })
+      } catch (err) {
+        const message = err instanceof Error ? err.message : 'Erreur inconnue'
+        send({ type: 'done', summary: { created: 0, errors: 1, status: 'error' } })
+        console.error('[creation/execute]', message)
+      } finally {
+        controller.close()
+      }
+    },
+  })
+
+  return new Response(stream, {
+    headers: { 'Content-Type': 'application/x-ndjson', 'Transfer-Encoding': 'chunked' },
+  })
+}

src/app/api/creation/metafields/route.test.ts

@@ -0,0 +1,37 @@
+import { GET } from './route'
+import * as shopifyMetafields from '@/lib/shopifyMetafields'
+import { getServerSession } from 'next-auth'
+
+jest.mock('next-auth')
+jest.mock('@/lib/shopifyMetafields')
+
+const mockSession = getServerSession as jest.MockedFunction<typeof getServerSession>
+const mockFetchDefs = shopifyMetafields.fetchMetafieldDefinitions as jest.MockedFunction<typeof shopifyMetafields.fetchMetafieldDefinitions>
+const mockMatch = shopifyMetafields.matchMetafields as jest.MockedFunction<typeof shopifyMetafields.matchMetafields>
+
+describe('GET /api/creation/metafields', () => {
+  beforeEach(() => {
+    mockSession.mockResolvedValue({ user: { id: 'u1', role: 'admin' } } as never)
+    mockFetchDefs.mockResolvedValue([
+      { id: '1', namespace: 'custom', key: 'puissance', name: 'Puissance', type: 'single_line_text_field' },
+    ])
+    mockMatch.mockReturnValue({
+      matched: { 'Puissance (AN)': { columnHeader: 'Puissance (AN)', action: 'map', namespace: 'custom', key: 'puissance', existingDefinitionId: '1' } },
+      unmatched: ['Batterie (AP)'],
+    })
+  })
+
+  it('retourne 401 sans session', async () => {
+    mockSession.mockResolvedValue(null)
+    const res = await GET(new Request('http://localhost/api/creation/metafields?columns=Puissance') as never)
+    expect(res.status).toBe(401)
+  })
+
+  it('retourne définitions + matching', async () => {
+    const res = await GET(new Request('http://localhost/api/creation/metafields?columns=Puissance+%28AN%29%2CBatterie+%28AP%29') as never)
+    const body = await res.json()
+    expect(body.definitions).toHaveLength(1)
+    expect(body.matched['Puissance (AN)'].key).toBe('puissance')
+    expect(body.unmatched).toContain('Batterie (AP)')
+  })
+})

src/app/api/creation/metafields/route.ts

@@ -0,0 +1,20 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { fetchMetafieldDefinitions, matchMetafields } from '@/lib/shopifyMetafields'
+
+export async function GET(req: NextRequest) {
+  const session = await getServerSession(authOptions)
+  if (!session) return NextResponse.json({ error: 'Non authentifié' }, { status: 401 })
+  try {
+    const { searchParams } = new URL(req.url)
+    const columnsParam = searchParams.get('columns') ?? ''
+    const columns = columnsParam ? columnsParam.split(',').map(c => c.trim()).filter(Boolean) : []
+    const definitions = await fetchMetafieldDefinitions()
+    const { matched, unmatched } = matchMetafields(columns, definitions)
+    return NextResponse.json({ definitions, matched, unmatched })
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/creation/preview/route.test.ts

@@ -0,0 +1,50 @@
+import { GET } from './route'
+import * as creationSheets from '@/lib/creationSheets'
+import { getServerSession } from 'next-auth'
+
+jest.mock('next-auth')
+jest.mock('@/lib/creationSheets')
+jest.mock('@/lib/prisma', () => ({
+  prisma: { productCreation: { findMany: jest.fn().mockResolvedValue([]) } },
+}))
+
+const mockSession = getServerSession as jest.MockedFunction<typeof getServerSession>
+const mockFetch = creationSheets.fetchPendingProducts as jest.MockedFunction<typeof creationSheets.fetchPendingProducts>
+
+const makePending = (tab: string, row: number, specific: Record<string, string> = {}) => ({
+  tab, rowNumber: row, sku: `SKU-${row}`, title: `Produit ${row}`,
+  priceMarket: '99', priceActual: '79', stock: 5, weightKg: 2,
+  vendor: 'BOSCH', famille: tab, sousFamille: '', comment: '',
+  collectionId: '10', subCollectionId: '', hasPhoto: false,
+  specificFields: specific,
+})
+
+describe('GET /api/creation/preview', () => {
+  beforeEach(() => {
+    mockSession.mockResolvedValue({ user: { id: 'u1', role: 'admin' } } as never)
+    mockFetch.mockResolvedValue([
+      makePending('OUTILLAGE', 2, { 'Puissance (AN)': '1500W' }),
+      makePending('CARRELAGE', 3),
+    ])
+  })
+
+  it('retourne 401 sans session', async () => {
+    mockSession.mockResolvedValue(null)
+    const res = await GET(new Request('http://localhost') as never)
+    expect(res.status).toBe(401)
+  })
+
+  it('retourne les produits groupés par onglet', async () => {
+    const res = await GET(new Request('http://localhost') as never)
+    const body = await res.json()
+    expect(body.byTab['OUTILLAGE']).toHaveLength(1)
+    expect(body.byTab['CARRELAGE']).toHaveLength(1)
+    expect(body.total).toBe(2)
+  })
+
+  it('liste les colonnes spécifiques uniques', async () => {
+    const res = await GET(new Request('http://localhost') as never)
+    const body = await res.json()
+    expect(body.specificColumns).toContain('Puissance (AN)')
+  })
+})

src/app/api/creation/preview/route.ts

@@ -0,0 +1,28 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { fetchPendingProducts } from '@/lib/creationSheets'
+import { prisma } from '@/lib/prisma'
+import type { PendingProduct } from '@/types/creation'
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+export async function GET(_req: NextRequest) {
+  const session = await getServerSession(authOptions)
+  if (!session) return NextResponse.json({ error: 'Non authentifié' }, { status: 401 })
+  try {
+    const existing = await prisma.productCreation.findMany({ select: { sheetTab: true, sheetRow: true } })
+    const alreadyCreated = new Set(existing.map(e => `${e.sheetTab}:${e.sheetRow}`))
+    const pending = await fetchPendingProducts(alreadyCreated)
+    const byTab: Record<string, PendingProduct[]> = {}
+    const specificColumns = new Set<string>()
+    for (const p of pending) {
+      if (!byTab[p.tab]) byTab[p.tab] = []
+      byTab[p.tab].push(p)
+      Object.keys(p.specificFields).forEach(k => specificColumns.add(k))
+    }
+    return NextResponse.json({ byTab, total: pending.length, specificColumns: Array.from(specificColumns).sort() })
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/images/upload/route.ts

@@ -0,0 +1,31 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { uploadProductImage } from '@/lib/shopify'
+
+export async function POST(req: NextRequest) {
+  let body: Record<string, unknown>
+  try {
+    body = await req.json()
+  } catch {
+    return NextResponse.json({ error: 'Corps JSON invalide' }, { status: 400 })
+  }
+
+  const { shopifyProductId, imageBase64, filename } = body
+
+  if (!shopifyProductId || typeof shopifyProductId !== 'string') {
+    return NextResponse.json({ error: 'shopifyProductId requis' }, { status: 400 })
+  }
+  if (!imageBase64 || typeof imageBase64 !== 'string') {
+    return NextResponse.json({ error: 'imageBase64 requis' }, { status: 400 })
+  }
+  if (!filename || typeof filename !== 'string') {
+    return NextResponse.json({ error: 'filename requis' }, { status: 400 })
+  }
+
+  try {
+    const result = await uploadProductImage(shopifyProductId, imageBase64, filename)
+    return NextResponse.json(result)
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/products/list/route.test.ts

@@ -0,0 +1,59 @@
+import { GET } from './route'
+import * as shopifySync from '@/lib/shopifySync'
+import type { ShopifyProductFull } from '@/types/sync'
+
+jest.mock('@/lib/shopifySync')
+const mockFetch = shopifySync.fetchAllShopifyProducts as jest.MockedFunction<typeof shopifySync.fetchAllShopifyProducts>
+
+const PRODUCTS: ShopifyProductFull[] = [
+  { shopifyId: '1', ref: 'REF-001', handle: 'ref-001', title: 'Brique rouge', description: '', price: '12.50', stock: 100, status: 'active' },
+  { shopifyId: '2', ref: 'REF-002', handle: 'ref-002', title: 'Parpaing', description: '', price: '5.00', stock: 0, status: 'draft' },
+  { shopifyId: '3', ref: 'REF-003', handle: 'ref-003', title: 'Ardoise', description: '', price: '80.00', stock: 20, status: 'active' },
+]
+
+describe('GET /api/products/list', () => {
+  beforeEach(() => {
+    process.env.SHOPIFY_STORE_DOMAIN = 'test.myshopify.com'
+    process.env.SHOPIFY_ADMIN_API_TOKEN = 'token'
+    mockFetch.mockResolvedValue(PRODUCTS)
+  })
+  afterEach(() => jest.clearAllMocks())
+
+  it('retourne tous les produits sans filtre', async () => {
+    const req = new Request('http://localhost/api/products/list')
+    const res = await GET(req as never)
+    const body = await res.json()
+    expect(body.total).toBe(3)
+    expect(body.products).toHaveLength(3)
+  })
+
+  it('filtre par status=active', async () => {
+    const req = new Request('http://localhost/api/products/list?status=active')
+    const res = await GET(req as never)
+    const body = await res.json()
+    expect(body.total).toBe(2)
+    body.products.forEach((p: { status: string }) => expect(p.status).toBe('active'))
+  })
+
+  it('filtre par status=draft', async () => {
+    const req = new Request('http://localhost/api/products/list?status=draft')
+    const res = await GET(req as never)
+    const body = await res.json()
+    expect(body.total).toBe(1)
+    expect(body.products[0].ref).toBe('REF-002')
+  })
+
+  it('retourne shopifyUrl pour chaque produit', async () => {
+    const req = new Request('http://localhost/api/products/list')
+    const res = await GET(req as never)
+    const body = await res.json()
+    expect(body.products[0].shopifyUrl).toContain('test.myshopify.com/admin/products/1')
+  })
+
+  it('retourne 500 si Shopify inaccessible', async () => {
+    mockFetch.mockRejectedValue(new Error('network error'))
+    const req = new Request('http://localhost/api/products/list')
+    const res = await GET(req as never)
+    expect(res.status).toBe(500)
+  })
+})

src/app/api/products/list/route.ts

@@ -0,0 +1,33 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { fetchAllShopifyProducts } from '@/lib/shopifySync'
+import type { CatalogProduct, ProductListResponse } from '@/types/products'
+
+export async function GET(req: NextRequest): Promise<NextResponse<ProductListResponse | { error: string }>> {
+  try {
+    const { searchParams } = new URL(req.url)
+    const statusFilter = searchParams.get('status') ?? 'all'
+
+    const domain = process.env.SHOPIFY_STORE_DOMAIN ?? ''
+    const shopifyProducts = await fetchAllShopifyProducts()
+
+    let products: CatalogProduct[] = shopifyProducts.map((p) => ({
+      shopifyId: p.shopifyId,
+      ref: p.ref,
+      handle: p.handle,
+      title: p.title,
+      price: p.price,
+      stock: p.stock,
+      status: p.status as CatalogProduct['status'],
+      shopifyUrl: `https://${domain}/admin/products/${p.shopifyId}`,
+    }))
+
+    if (statusFilter !== 'all') {
+      products = products.filter((p) => p.status === statusFilter)
+    }
+
+    return NextResponse.json({ products, total: products.length })
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/products/search/route.ts

@@ -0,0 +1,18 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { searchProductByRef } from '@/lib/shopify'
+
+export async function GET(req: NextRequest) {
+  const ref = req.nextUrl.searchParams.get('ref')
+
+  if (!ref || ref.trim() === '') {
+    return NextResponse.json({ error: 'Paramètre ref requis' }, { status: 400 })
+  }
+
+  try {
+    const result = await searchProductByRef(ref.trim())
+    return NextResponse.json(result)
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/sync/execute/route.ts

@@ -0,0 +1,113 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { getServerSession } from 'next-auth'
+import { authOptions } from '@/lib/auth'
+import { prisma } from '@/lib/prisma'
+import {
+  createShopifyProduct,
+  updateShopifyProduct,
+  deactivateShopifyProduct,
+  getFirstVariantId,
+} from '@/lib/shopifySync'
+import type { SyncChange, SyncLogEntry, SyncStreamEvent } from '@/types/sync'
+
+export async function POST(req: NextRequest) {
+  const session = await getServerSession(authOptions)
+  if (!session?.user) {
+    return NextResponse.json({ error: 'Non authentifié' }, { status: 401 })
+  }
+
+  let changes: SyncChange[]
+  try {
+    const body = await req.json()
+    changes = body.changes
+  } catch {
+    return NextResponse.json({ error: 'Corps JSON invalide' }, { status: 400 })
+  }
+
+  if (!Array.isArray(changes) || changes.length === 0) {
+    return NextResponse.json({ error: 'Aucun changement à appliquer' }, { status: 400 })
+  }
+
+  const userId = (session.user as { id: string }).id
+  const encoder = new TextEncoder()
+
+  const stream = new ReadableStream({
+    async start(controller) {
+      const send = (event: SyncStreamEvent) => {
+        controller.enqueue(encoder.encode(JSON.stringify(event) + '\n'))
+      }
+
+      const log: SyncLogEntry[] = []
+      let created = 0, updated = 0, deactivated = 0, errors = 0
+      const total = changes.filter((c) => c.type !== 'unchanged').length
+      let current = 0
+
+      for (const change of changes) {
+        if (change.type === 'unchanged') continue
+        current++
+
+        try {
+          if (change.type === 'create') {
+            await createShopifyProduct(change.sheetProduct!)
+            created++
+            const msg = `✓ ${change.ref} créé`
+            log.push({ ref: change.ref, action: 'create', status: 'success', message: msg })
+            send({ type: 'progress', current, total, message: msg })
+
+          } else if (change.type === 'update') {
+            const variantId = await getFirstVariantId(change.shopifyProduct!.shopifyId)
+            await updateShopifyProduct(
+              change.shopifyProduct!.shopifyId,
+              change.sheetProduct!,
+              variantId,
+            )
+            updated++
+            const fields = change.changedFields?.map((f) => f.field).join(', ') ?? ''
+            const msg = `✓ ${change.ref} mis à jour (${fields})`
+            log.push({ ref: change.ref, action: 'update', status: 'success', message: msg })
+            send({ type: 'progress', current, total, message: msg })
+
+          } else if (change.type === 'deactivate') {
+            await deactivateShopifyProduct(change.shopifyProduct!.shopifyId)
+            deactivated++
+            const msg = `✓ ${change.ref} désactivé`
+            log.push({ ref: change.ref, action: 'deactivate', status: 'success', message: msg })
+            send({ type: 'progress', current, total, message: msg })
+          }
+        } catch (err) {
+          errors++
+          const msg = `✗ ${change.ref} : ${(err as Error).message}`
+          log.push({ ref: change.ref, action: change.type as SyncLogEntry['action'], status: 'error', message: msg })
+          send({ type: 'progress', current, total, message: msg })
+        }
+      }
+
+      const syncStatus = errors === 0 ? 'success' : errors === total ? 'error' : 'partial'
+      try {
+        await prisma.syncRun.create({
+          data: {
+            userId,
+            status: syncStatus,
+            created,
+            updated,
+            deactivated,
+            errors,
+            log: JSON.stringify(log),
+          },
+        })
+      } catch (dbErr) {
+        console.error('Erreur sauvegarde SyncRun:', dbErr)
+      }
+
+      send({
+        type: 'done',
+        summary: { created, updated, deactivated, errors, status: syncStatus },
+      })
+      controller.close()
+    },
+  })
+
+  return new Response(stream, {
+    headers: { 'Content-Type': 'application/x-ndjson; charset=utf-8' },
+  })
+}

src/app/api/sync/history/route.ts

@@ -0,0 +1,33 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { prisma } from '@/lib/prisma'
+import type { SyncHistoryEntry, SyncLogEntry } from '@/types/sync'
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+export async function GET(_req: NextRequest) {
+  try {
+    const runs = await prisma.syncRun.findMany({
+      orderBy: { createdAt: 'desc' },
+      take: 20,
+      include: { user: { select: { name: true } } },
+    })
+
+    const entries: SyncHistoryEntry[] = runs.map((run) => ({
+      id: run.id,
+      createdAt: run.createdAt.toISOString(),
+      userName: run.user.name,
+      status: run.status as SyncHistoryEntry['status'],
+      created: run.created,
+      updated: run.updated,
+      deactivated: run.deactivated,
+      errors: run.errors,
+      log: (() => {
+        try { return JSON.parse(run.log) as SyncLogEntry[] } catch { return [] }
+      })(),
+    }))
+
+    return NextResponse.json(entries)
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/api/sync/preview/route.ts

@@ -0,0 +1,20 @@
+import { NextRequest, NextResponse } from 'next/server'
+import { readSheetProducts } from '@/lib/googleSheets'
+import { fetchAllShopifyProducts } from '@/lib/shopifySync'
+import { computeDiff } from '@/lib/syncDiff'
+
+// eslint-disable-next-line @typescript-eslint/no-unused-vars
+export async function GET(_req: NextRequest) {
+  try {
+    const [sheetProducts, shopifyProducts] = await Promise.all([
+      readSheetProducts(),
+      fetchAllShopifyProducts(),
+    ])
+
+    const diff = computeDiff(sheetProducts, shopifyProducts)
+    return NextResponse.json(diff)
+  } catch (err) {
+    const message = err instanceof Error ? err.message : 'Erreur inconnue'
+    return NextResponse.json({ error: message }, { status: 500 })
+  }
+}

src/app/layout.tsx

@@ -1,6 +1,7 @@
 import type { Metadata } from 'next'
 import { Inter } from 'next/font/google'
 import './globals.css'
+import { SessionProvider } from '@/components/providers/SessionProvider'
 
 const inter = Inter({ subsets: ['latin'] })
 
@@ -12,7 +13,9 @@ export const metadata: Metadata = {
 export default function RootLayout({ children }: { children: React.ReactNode }) {
   return (
     <html lang="fr">
-      <body className={inter.className}>{children}</body>
+      <body className={inter.className}>
+        <SessionProvider>{children}</SessionProvider>
+      </body>
     </html>
   )
 }

src/app/page.tsx

@@ -1,101 +0,0 @@
-import Image from "next/image";
-
-export default function Home() {
-  return (
-    <div className="grid grid-rows-[20px_1fr_20px] items-center justify-items-center min-h-screen p-8 pb-20 gap-16 sm:p-20 font-[family-name:var(--font-geist-sans)]">
-      <main className="flex flex-col gap-8 row-start-2 items-center sm:items-start">
-        <Image
-          className="dark:invert"
-          src="https://nextjs.org/icons/next.svg"
-          alt="Next.js logo"
-          width={180}
-          height={38}
-          priority
-        />
-        <ol className="list-inside list-decimal text-sm text-center sm:text-left font-[family-name:var(--font-geist-mono)]">
-          <li className="mb-2">
-            Get started by editing{" "}
-            <code className="bg-black/[.05] dark:bg-white/[.06] px-1 py-0.5 rounded font-semibold">
-              src/app/page.tsx
-            </code>
-            .
-          </li>
-          <li>Save and see your changes instantly.</li>
-        </ol>
-
-        <div className="flex gap-4 items-center flex-col sm:flex-row">
-          <a
-            className="rounded-full border border-solid border-transparent transition-colors flex items-center justify-center bg-foreground text-background gap-2 hover:bg-[#383838] dark:hover:bg-[#ccc] text-sm sm:text-base h-10 sm:h-12 px-4 sm:px-5"
-            href="https://vercel.com/new?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            <Image
-              className="dark:invert"
-              src="https://nextjs.org/icons/vercel.svg"
-              alt="Vercel logomark"
-              width={20}
-              height={20}
-            />
-            Deploy now
-          </a>
-          <a
-            className="rounded-full border border-solid border-black/[.08] dark:border-white/[.145] transition-colors flex items-center justify-center hover:bg-[#f2f2f2] dark:hover:bg-[#1a1a1a] hover:border-transparent text-sm sm:text-base h-10 sm:h-12 px-4 sm:px-5 sm:min-w-44"
-            href="https://nextjs.org/docs?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-            target="_blank"
-            rel="noopener noreferrer"
-          >
-            Read our docs
-          </a>
-        </div>
-      </main>
-      <footer className="row-start-3 flex gap-6 flex-wrap items-center justify-center">
-        <a
-          className="flex items-center gap-2 hover:underline hover:underline-offset-4"
-          href="https://nextjs.org/learn?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-          target="_blank"
-          rel="noopener noreferrer"
-        >
-          <Image
-            aria-hidden
-            src="https://nextjs.org/icons/file.svg"
-            alt="File icon"
-            width={16}
-            height={16}
-          />
-          Learn
-        </a>
-        <a
-          className="flex items-center gap-2 hover:underline hover:underline-offset-4"
-          href="https://vercel.com/templates?framework=next.js&utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-          target="_blank"
-          rel="noopener noreferrer"
-        >
-          <Image
-            aria-hidden
-            src="https://nextjs.org/icons/window.svg"
-            alt="Window icon"
-            width={16}
-            height={16}
-          />
-          Examples
-        </a>
-        <a
-          className="flex items-center gap-2 hover:underline hover:underline-offset-4"
-          href="https://nextjs.org?utm_source=create-next-app&utm_medium=appdir-template-tw&utm_campaign=create-next-app"
-          target="_blank"
-          rel="noopener noreferrer"
-        >
-          <Image
-            aria-hidden
-            src="https://nextjs.org/icons/globe.svg"
-            alt="Globe icon"
-            width={16}
-            height={16}
-          />
-          Go to nextjs.org →
-        </a>
-      </footer>
-    </div>
-  );
-}

src/components/creation/CreationProgress.tsx

@@ -0,0 +1,53 @@
+'use client'
+import type { CreationStreamEvent } from '@/types/creation'
+
+interface Props {
+  events: CreationStreamEvent[]
+  done: boolean
+}
+
+export function CreationProgress({ events, done }: Props) {
+  const lastProgress = [...events].reverse().find(e => e.type === 'progress') as Extract<CreationStreamEvent, { type: 'progress' }> | undefined
+  const doneEvent = events.find(e => e.type === 'done') as Extract<CreationStreamEvent, { type: 'done' }> | undefined
+  const errors = events.filter(e => e.type === 'error') as Array<Extract<CreationStreamEvent, { type: 'error' }>>
+
+  return (
+    <div className="space-y-4">
+      {lastProgress && !done && (
+        <div>
+          <div className="flex justify-between text-sm text-gray-300 mb-1">
+            <span>{lastProgress.step}</span>
+            <span>{lastProgress.current}/{lastProgress.total}</span>
+          </div>
+          <div className="w-full bg-slate-700 rounded-full h-2">
+            <div className="bg-indigo-600 h-2 rounded-full transition-all"
+              style={{ width: `${(lastProgress.current / lastProgress.total) * 100}%` }} />
+          </div>
+          <p className="text-xs text-gray-400 mt-1 truncate">{lastProgress.tab} — {lastProgress.title}</p>
+        </div>
+      )}
+      {errors.length > 0 && (
+        <div className="space-y-1">
+          {errors.map((e, i) => (
+            <div key={i} className="flex gap-2 p-2 bg-red-900/30 rounded text-xs text-red-300">
+              <span className="font-medium">{e.title}</span>
+              <span className="text-red-400">— {e.message}</span>
+            </div>
+          ))}
+        </div>
+      )}
+      {doneEvent && (
+        <div className={`p-4 rounded-lg ${doneEvent.summary.status === 'success' ? 'bg-green-900/30 border border-green-700' : doneEvent.summary.status === 'partial' ? 'bg-yellow-900/30 border border-yellow-700' : 'bg-red-900/30 border border-red-700'}`}>
+          <p className={`font-semibold ${doneEvent.summary.status === 'success' ? 'text-green-300' : doneEvent.summary.status === 'partial' ? 'text-yellow-300' : 'text-red-300'}`}>
+            {doneEvent.summary.status === 'success' ? '✓ Terminé' : doneEvent.summary.status === 'partial' ? '⚠ Partiel' : '✗ Erreur'}
+          </p>
+          <p className="text-sm text-gray-300 mt-1">
+            {doneEvent.summary.created} créé{doneEvent.summary.created > 1 ? 's' : ''}
+            {doneEvent.summary.errors > 0 && ` — ${doneEvent.summary.errors} erreur${doneEvent.summary.errors > 1 ? 's' : ''}`}
+          </p>
+        </div>
+      )}
+      {!done && !lastProgress && <p className="text-gray-400 text-sm">Démarrage…</p>}
+    </div>
+  )
+}

src/components/creation/MetafieldResolver.tsx

@@ -0,0 +1,117 @@
+'use client'
+import { useState, useEffect } from 'react'
+import type { MetafieldDefinition, MetafieldResolution } from '@/types/creation'
+import { normalizeMetafieldKey } from '@/lib/shopifyMetafields'
+
+interface Props {
+  specificColumns: string[]
+  onResolved: (resolutions: MetafieldResolution[]) => void
+}
+
+export function MetafieldResolver({ specificColumns, onResolved }: Props) {
+  const [definitions, setDefinitions] = useState<MetafieldDefinition[]>([])
+  const [matched, setMatched] = useState<Record<string, MetafieldResolution>>({})
+  const [unmatched, setUnmatched] = useState<string[]>([])
+  const [resolutions, setResolutions] = useState<Record<string, MetafieldResolution>>({})
+  const [loading, setLoading] = useState(true)
+  const [error, setError] = useState<string | null>(null)
+
+  useEffect(() => {
+    if (specificColumns.length === 0) { setLoading(false); onResolved([]); return }
+    const params = specificColumns.map(c => encodeURIComponent(c)).join(',')
+    fetch(`/api/creation/metafields?columns=${params}`)
+      .then(r => r.json())
+      .then(data => {
+        if (data.error) throw new Error(data.error)
+        setDefinitions(data.definitions)
+        setMatched(data.matched)
+        setUnmatched(data.unmatched)
+        const init: Record<string, MetafieldResolution> = { ...data.matched }
+        data.unmatched.forEach((col: string) => {
+          init[col] = { columnHeader: col, action: 'create', namespace: 'custom', key: normalizeMetafieldKey(col) }
+        })
+        setResolutions(init)
+      })
+      .catch(e => setError(e.message))
+      .finally(() => setLoading(false))
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [specificColumns.join(',')])
+
+  useEffect(() => {
+    if (!loading) onResolved(Object.values(resolutions))
+  // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [resolutions, loading])
+
+  const updateResolution = (col: string, partial: Partial<MetafieldResolution>) => {
+    setResolutions(prev => ({ ...prev, [col]: { ...prev[col], ...partial } }))
+  }
+
+  if (loading) return <p className="text-gray-400 text-sm">Analyse des métachamps Shopify…</p>
+  if (error) return <p className="text-red-400 text-sm">{error}</p>
+  if (specificColumns.length === 0) return <p className="text-gray-400 text-sm">Aucune colonne spécifique détectée.</p>
+
+  return (
+    <div className="space-y-4">
+      {Object.entries(matched).length > 0 && (
+        <div>
+          <h3 className="text-sm font-medium text-green-400 mb-2">
+            ✓ {Object.entries(matched).length} colonne{Object.entries(matched).length > 1 ? 's' : ''} avec correspondance automatique
+          </h3>
+          <div className="space-y-1">
+            {Object.entries(matched).map(([col, res]) => (
+              <div key={col} className="flex items-center gap-3 px-3 py-2 bg-slate-700/50 rounded text-sm">
+                <span className="text-gray-300 flex-1">{col}</span>
+                <span className="text-green-400 text-xs">→ {res.namespace}.{res.key}</span>
+              </div>
+            ))}
+          </div>
+        </div>
+      )}
+      {unmatched.length > 0 && (
+        <div>
+          <h3 className="text-sm font-medium text-yellow-400 mb-2">
+            ⚠ {unmatched.length} colonne{unmatched.length > 1 ? 's' : ''} sans correspondance — action requise
+          </h3>
+          <div className="space-y-2">
+            {unmatched.map(col => {
+              const res = resolutions[col]
+              if (!res) return null
+              return (
+                <div key={col} className="p-3 bg-slate-700 rounded-lg space-y-2">
+                  <p className="text-sm text-white font-medium">{col}</p>
+                  <div className="flex gap-2">
+                    {(['create', 'map', 'skip'] as const).map(action => (
+                      <button
+                        key={action}
+                        onClick={() => updateResolution(col, { action })}
+                        className={`px-3 py-1 rounded text-xs font-medium transition-colors ${res.action === action ? 'bg-indigo-600 text-white' : 'bg-slate-600 text-gray-300 hover:bg-slate-500'}`}
+                      >
+                        {action === 'create' ? 'Créer nouveau' : action === 'map' ? 'Associer existant' : 'Ignorer'}
+                      </button>
+                    ))}
+                  </div>
+                  {res.action === 'create' && (
+                    <div className="flex gap-2">
+                      <input value={res.key} onChange={e => updateResolution(col, { key: e.target.value })} placeholder="clé (ex: puissance)"
+                        className="flex-1 bg-slate-600 border border-slate-500 rounded px-2 py-1 text-xs text-white" />
+                      <input value={res.namespace} onChange={e => updateResolution(col, { namespace: e.target.value })} placeholder="namespace"
+                        className="w-24 bg-slate-600 border border-slate-500 rounded px-2 py-1 text-xs text-white" />
+                    </div>
+                  )}
+                  {res.action === 'map' && (
+                    <select value={res.existingDefinitionId ?? ''}
+                      onChange={e => { const def = definitions.find(d => d.id === e.target.value); if (def) updateResolution(col, { existingDefinitionId: def.id, key: def.key, namespace: def.namespace }) }}
+                      className="w-full bg-slate-600 border border-slate-500 rounded px-2 py-1 text-xs text-white">
+                      <option value="">-- Choisir un métachamp existant --</option>
+                      {definitions.map(d => <option key={d.id} value={d.id}>{d.name} ({d.namespace}.{d.key})</option>)}
+                    </select>
+                  )}
+                </div>
+              )
+            })}
+          </div>
+        </div>
+      )}
+    </div>
+  )
+}

src/components/creation/PendingRowsTable.tsx

@@ -0,0 +1,54 @@
+'use client'
+import type { PendingProduct } from '@/types/creation'
+
+interface Props {
+  byTab: Record<string, PendingProduct[]>
+  total: number
+}
+
+export function PendingRowsTable({ byTab, total }: Props) {
+  if (total === 0) {
+    return (
+      <div className="text-center py-12 text-gray-400 text-sm">
+        Aucun produit en attente (Publié=1 et ID vide).
+      </div>
+    )
+  }
+  return (
+    <div className="space-y-6">
+      {Object.entries(byTab).map(([tab, products]) => (
+        <div key={tab}>
+          <h3 className="text-sm font-semibold text-indigo-300 mb-2 uppercase tracking-wide">
+            {tab} — {products.length} produit{products.length > 1 ? 's' : ''}
+          </h3>
+          <div className="overflow-x-auto">
+            <table className="w-full text-sm">
+              <thead>
+                <tr className="text-left text-gray-400 border-b border-slate-700">
+                  <th className="pb-2 pr-4 font-medium">SKU</th>
+                  <th className="pb-2 pr-4 font-medium">Titre</th>
+                  <th className="pb-2 pr-4 font-medium">Prix</th>
+                  <th className="pb-2 pr-4 font-medium">Stock</th>
+                  <th className="pb-2 font-medium">Métachamps</th>
+                </tr>
+              </thead>
+              <tbody>
+                {products.map((p) => (
+                  <tr key={`${p.tab}-${p.rowNumber}`} className="border-b border-slate-700/50">
+                    <td className="py-2 pr-4 font-mono text-indigo-300 text-xs">{p.sku}</td>
+                    <td className="py-2 pr-4 text-white">{p.title}</td>
+                    <td className="py-2 pr-4 text-gray-300">{p.priceActual} €</td>
+                    <td className="py-2 pr-4 text-gray-300">{p.stock}</td>
+                    <td className="py-2 text-gray-400 text-xs">
+                      {Object.keys(p.specificFields).length} champ{Object.keys(p.specificFields).length > 1 ? 's' : ''}
+                    </td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        </div>
+      ))}
+    </div>
+  )
+}

src/components/images/DropZone.tsx

@@ -0,0 +1,73 @@
+'use client'
+import { useCallback, useRef, useState } from 'react'
+
+interface DropZoneProps {
+  onFiles: (files: File[]) => void
+  disabled?: boolean
+}
+
+const ACCEPTED_TYPES = ['.heic', '.heif', '.jpg', '.jpeg', '.png', '.zip']
+const ACCEPT_ATTR = ACCEPTED_TYPES.join(',')
+
+export function DropZone({ onFiles, disabled = false }: DropZoneProps) {
+  const [isDragging, setIsDragging] = useState(false)
+  const inputRef = useRef<HTMLInputElement>(null)
+
+  const handleFiles = useCallback(
+    (fileList: FileList | null) => {
+      if (!fileList) return
+      const files = Array.from(fileList).filter((f) => {
+        const ext = '.' + f.name.split('.').pop()?.toLowerCase()
+        return ACCEPTED_TYPES.includes(ext)
+      })
+      if (files.length > 0) onFiles(files)
+    },
+    [onFiles],
+  )
+
+  const onDragOver = (e: React.DragEvent) => {
+    e.preventDefault()
+    if (!disabled) setIsDragging(true)
+  }
+
+  const onDragLeave = () => setIsDragging(false)
+
+  const onDrop = (e: React.DragEvent) => {
+    e.preventDefault()
+    setIsDragging(false)
+    if (!disabled) handleFiles(e.dataTransfer.files)
+  }
+
+  return (
+    <div
+      onDragOver={onDragOver}
+      onDragLeave={onDragLeave}
+      onDrop={onDrop}
+      onClick={() => !disabled && inputRef.current?.click()}
+      className={`border-2 border-dashed rounded-xl p-8 text-center cursor-pointer transition-colors ${
+        isDragging
+          ? 'border-indigo-400 bg-indigo-950/30'
+          : disabled
+            ? 'border-slate-700 bg-slate-800/20 cursor-not-allowed'
+            : 'border-slate-600 bg-slate-800/10 hover:border-indigo-500 hover:bg-indigo-950/20'
+      }`}
+    >
+      <div className="text-3xl mb-2">🖼️</div>
+      <p className="text-sm font-semibold text-slate-300">
+        Déposez vos images ici ou cliquez pour parcourir
+      </p>
+      <p className="text-xs text-slate-500 mt-1">
+        HEIC, JPG, PNG, ZIP — le nom du fichier = référence produit
+      </p>
+      <input
+        ref={inputRef}
+        type="file"
+        multiple
+        accept={ACCEPT_ATTR}
+        className="hidden"
+        onChange={(e) => handleFiles(e.target.files)}
+        disabled={disabled}
+      />
+    </div>
+  )
+}

src/components/images/GlobalActions.tsx

@@ -0,0 +1,37 @@
+'use client'
+import type { ImageItem } from '@/types/images'
+
+interface GlobalActionsProps {
+  items: ImageItem[]
+  onUploadAll: () => void
+}
+
+export function GlobalActions({ items, onUploadAll }: GlobalActionsProps) {
+  if (items.length === 0) return null
+
+  const ready     = items.filter((i) => i.status === 'ready').length
+  const processing = items.filter((i) => ['pending', 'converting', 'processing', 'searching', 'uploading'].includes(i.status)).length
+  const notFound  = items.filter((i) => i.status === 'not_found').length
+  const uploaded  = items.filter((i) => i.status === 'uploaded').length
+  const errors    = items.filter((i) => i.status === 'error').length
+
+  return (
+    <div className="bg-slate-900 border border-slate-700 rounded-xl px-4 py-3 flex items-center gap-6 flex-wrap">
+      <div className="flex gap-4 text-xs text-slate-400 flex-1 flex-wrap">
+        {processing > 0 && <span>⏳ {processing} en traitement</span>}
+        {ready      > 0 && <span className="text-green-400 font-semibold">✓ {ready} prêtes</span>}
+        {notFound   > 0 && <span className="text-red-400">❌ {notFound} introuvables</span>}
+        {errors     > 0 && <span className="text-red-400">⚠️ {errors} erreurs</span>}
+        {uploaded   > 0 && <span className="text-slate-500">✅ {uploaded} uploadées</span>}
+      </div>
+      {ready > 0 && (
+        <button
+          onClick={onUploadAll}
+          className="bg-indigo-600 hover:bg-indigo-500 text-white text-sm font-semibold px-4 py-2 rounded-lg transition-colors"
+        >
+          ⬆️ Tout uploader ({ready})
+        </button>
+      )}
+    </div>
+  )
+}

src/components/images/ImageCard.tsx

@@ -0,0 +1,146 @@
+'use client'
+import { useEffect, useState } from 'react'
+import type { ImageItem } from '@/types/images'
+
+interface ImageCardProps {
+  item: ImageItem
+  onFeatherChange: (id: string, value: number) => void
+  onRotate: (id: string, direction: 'cw' | 'ccw') => void
+  onUpload: (id: string) => void
+  onRemove: (id: string) => void
+  onOpenLightbox: (item: ImageItem) => void
+}
+
+const STATUS_LABELS: Record<string, { label: string; color: string }> = {
+  pending:    { label: '⏳ En attente',      color: 'text-slate-400' },
+  converting: { label: '🔄 Conversion HEIC', color: 'text-yellow-400' },
+  processing: { label: '🤖 Détourage IA',    color: 'text-blue-400' },
+  searching:  { label: '🔍 Recherche…',      color: 'text-purple-400' },
+  ready:      { label: '✓ Prêt',             color: 'text-green-400' },
+  uploading:  { label: '⬆️ Upload…',         color: 'text-blue-400' },
+  uploaded:   { label: '✅ Uploadé',         color: 'text-green-500' },
+  not_found:  { label: '❌ Réf. introuvable', color: 'text-red-400' },
+  error:      { label: '❌ Erreur',           color: 'text-red-400' },
+}
+
+function BlobThumbnail({ blob, alt }: { blob: Blob; alt: string }) {
+  const [url, setUrl] = useState<string | null>(null)
+
+  useEffect(() => {
+    const objectUrl = URL.createObjectURL(blob)
+    setUrl(objectUrl)
+    return () => URL.revokeObjectURL(objectUrl)
+  }, [blob])
+
+  if (!url) return <div className="w-full h-full bg-slate-700 animate-pulse" />
+  return <img src={url} alt={alt} className="w-full h-full object-contain" />
+}
+
+export function ImageCard({
+  item,
+  onFeatherChange,
+  onRotate,
+  onUpload,
+  onRemove,
+  onOpenLightbox,
+}: ImageCardProps) {
+  const statusInfo = STATUS_LABELS[item.status] ?? { label: item.status, color: 'text-slate-400' }
+  const isProcessing = ['pending', 'converting', 'processing', 'searching', 'uploading'].includes(item.status)
+  const canAdjust = !!item.rawPngBlob && !isProcessing
+
+  return (
+    <div className="bg-slate-900 border border-slate-700 rounded-xl overflow-hidden flex flex-col">
+      {/* Miniatures avant / après */}
+      <div
+        className="relative h-40 bg-slate-800 cursor-pointer"
+        onClick={() => onOpenLightbox(item)}
+      >
+        <div className="absolute inset-0">
+          <BlobThumbnail blob={item.originalBlob} alt="Original" />
+        </div>
+        {item.processedBlob && (
+          <div className="absolute inset-0 border-l-2 border-indigo-500 left-1/2 w-1/2">
+            <BlobThumbnail blob={item.processedBlob} alt="Traité" />
+          </div>
+        )}
+        {/* Barre de progression pendant l'IA */}
+        {item.status === 'processing' && item.progress && (
+          <div className="absolute bottom-0 inset-x-0 bg-black/60 px-2 py-1">
+            <div className="h-1 bg-slate-700 rounded">
+              <div
+                className="h-1 bg-indigo-500 rounded transition-all"
+                style={{ width: `${item.progress.percent}%` }}
+              />
+            </div>
+            <p className="text-xs text-slate-400 mt-0.5">{item.progress.key} — {item.progress.percent}%</p>
+          </div>
+        )}
+      </div>
+
+      {/* Infos */}
+      <div className="p-3 flex flex-col gap-2 flex-1">
+        <div>
+          <p className="text-xs font-mono text-slate-300 truncate">{item.ref}</p>
+          {item.shopifyProductTitle && (
+            <p className="text-xs text-slate-500 truncate">{item.shopifyProductTitle}</p>
+          )}
+          <p className={`text-xs font-semibold mt-0.5 ${statusInfo.color}`}>{statusInfo.label}</p>
+          {item.error && <p className="text-xs text-red-400 mt-0.5 truncate" title={item.error}>{item.error}</p>}
+        </div>
+
+        {/* Contrôles feather + rotation */}
+        <div className={canAdjust ? '' : 'opacity-40 pointer-events-none'}>
+          <label className="block text-xs text-slate-500 mb-1">
+            Bords : {item.feather} px
+          </label>
+          <input
+            type="range"
+            min={0}
+            max={5}
+            step={1}
+            value={item.feather}
+            onChange={(e) => onFeatherChange(item.id, Number(e.target.value))}
+            className="w-full accent-indigo-500"
+          />
+
+          <div className="flex gap-1 mt-2">
+            <button
+              onClick={() => onRotate(item.id, 'ccw')}
+              className="flex-1 py-1 text-xs bg-slate-800 hover:bg-slate-700 rounded text-slate-300"
+            >↺ -90°</button>
+            <button
+              onClick={() => onRotate(item.id, 'cw')}
+              className="flex-1 py-1 text-xs bg-slate-800 hover:bg-slate-700 rounded text-slate-300"
+            >↻ +90°</button>
+          </div>
+        </div>
+
+        {/* Boutons d'action */}
+        <div className="flex gap-2 mt-auto pt-1">
+          {item.status === 'ready' && (
+            <button
+              onClick={() => onUpload(item.id)}
+              className="flex-1 py-1.5 text-xs bg-indigo-600 hover:bg-indigo-500 text-white font-semibold rounded"
+            >
+              ⬆️ Uploader
+            </button>
+          )}
+          {item.status === 'uploaded' && item.uploadedUrl && (
+            <a
+              href={item.uploadedUrl}
+              target="_blank"
+              rel="noopener noreferrer"
+              className="flex-1 py-1.5 text-xs bg-green-800 hover:bg-green-700 text-white font-semibold rounded text-center"
+            >
+              Voir sur Shopify →
+            </a>
+          )}
+          <button
+            onClick={() => onRemove(item.id)}
+            className="py-1.5 px-2 text-xs bg-slate-800 hover:bg-red-900 text-slate-400 hover:text-red-300 rounded"
+          >✕</button>
+        </div>
+      </div>
+    </div>
+  )
+}

src/components/images/Lightbox.tsx

@@ -0,0 +1,70 @@
+'use client'
+import { useEffect, useState } from 'react'
+import type { ImageItem } from '@/types/images'
+
+interface LightboxProps {
+  item: ImageItem | null
+  onClose: () => void
+}
+
+function BlobImg({ blob, alt }: { blob: Blob; alt: string }) {
+  const [url, setUrl] = useState<string | null>(null)
+
+  useEffect(() => {
+    const u = URL.createObjectURL(blob)
+    setUrl(u)
+    return () => URL.revokeObjectURL(u)
+  }, [blob])
+
+  if (!url) return null
+  return <img src={url} alt={alt} className="max-h-full max-w-full object-contain" />
+}
+
+export function Lightbox({ item, onClose }: LightboxProps) {
+  useEffect(() => {
+    const onKey = (e: KeyboardEvent) => { if (e.key === 'Escape') onClose() }
+    document.addEventListener('keydown', onKey)
+    return () => document.removeEventListener('keydown', onKey)
+  }, [onClose])
+
+  if (!item) return null
+
+  return (
+    <div
+      className="fixed inset-0 z-50 bg-black/90 flex items-center justify-center p-4"
+      onClick={onClose}
+    >
+      <div
+        className="bg-slate-900 rounded-xl max-w-5xl w-full max-h-[90vh] overflow-hidden flex flex-col"
+        onClick={(e) => e.stopPropagation()}
+      >
+        <div className="flex items-center justify-between px-4 py-3 border-b border-slate-700">
+          <div>
+            <span className="text-sm font-mono text-slate-300">{item.ref}</span>
+            {item.shopifyProductTitle && (
+              <span className="text-xs text-slate-500 ml-2">{item.shopifyProductTitle}</span>
+            )}
+          </div>
+          <button
+            onClick={onClose}
+            className="text-slate-400 hover:text-white text-xl leading-none"
+          >✕</button>
+        </div>
+
+        <div className="flex flex-1 overflow-hidden min-h-0">
+          <div className="flex-1 flex flex-col items-center justify-center p-4 bg-slate-950 border-r border-slate-700">
+            <p className="text-xs text-slate-500 mb-2">Avant</p>
+            <BlobImg blob={item.originalBlob} alt="Avant" />
+          </div>
+          <div className="flex-1 flex flex-col items-center justify-center p-4 bg-white/5">
+            <p className="text-xs text-slate-500 mb-2">Après</p>
+            {item.processedBlob
+              ? <BlobImg blob={item.processedBlob} alt="Après" />
+              : <p className="text-slate-600 text-sm">Traitement en cours…</p>
+            }
+          </div>
+        </div>
+      </div>
+    </div>
+  )
+}

src/components/layout/Header.tsx

@@ -0,0 +1,13 @@
+interface HeaderProps {
+  title: string
+  actions?: React.ReactNode
+}
+
+export function Header({ title, actions }: HeaderProps) {
+  return (
+    <div className="bg-white border-b border-gray-200 px-6 py-4 flex items-center justify-between">
+      <h1 className="text-base font-bold text-gray-900">{title}</h1>
+      {actions && <div className="flex items-center gap-3">{actions}</div>}
+    </div>
+  )
+}

src/components/layout/Sidebar.tsx

@@ -0,0 +1,73 @@
+'use client'
+import Link from 'next/link'
+import { usePathname } from 'next/navigation'
+import { signOut, useSession } from 'next-auth/react'
+
+type NavItem = {
+  href: string
+  label: string
+  icon: string
+  adminOnly?: boolean
+}
+
+const NAV_ITEMS: NavItem[] = [
+  { href: '/',           label: 'Dashboard',    icon: '📊' },
+  { href: '/produits',   label: 'Produits',     icon: '📦' },
+  { href: '/images',     label: 'Images',       icon: '🖼️' },
+  { href: '/sync',       label: 'Sync Sheets',  icon: '🔄' },
+  { href: '/creation',   label: 'Création',     icon: '✨' },
+  { href: '/parametres', label: 'Paramètres',   icon: '⚙️', adminOnly: true },
+]
+
+export function Sidebar() {
+  const pathname = usePathname()
+  const { data: session } = useSession()
+  const isAdmin = session?.user?.role === 'admin'
+
+  const visible = NAV_ITEMS.filter(item => !item.adminOnly || isAdmin)
+
+  return (
+    <aside className="w-48 bg-slate-900 flex flex-col h-screen sticky top-0 border-r border-slate-800">
+      {/* Logo */}
+      <div className="px-4 py-4 border-b border-slate-800">
+        <span className="text-sm font-extrabold text-white tracking-tight">
+          Matériaux<span className="text-indigo-400">Destock</span>
+        </span>
+      </div>
+
+      {/* Navigation */}
+      <nav className="flex-1 py-3 overflow-y-auto">
+        {visible.map(item => {
+          const isActive =
+            item.href === '/' ? pathname === '/' : pathname.startsWith(item.href)
+          return (
+            <Link
+              key={item.href}
+              href={item.href}
+              className={`flex items-center gap-2.5 px-4 py-2 text-xs border-l-2 transition-colors ${
+                isActive
+                  ? 'bg-slate-800 text-white border-indigo-500 font-semibold'
+                  : 'text-slate-400 border-transparent hover:text-slate-200 hover:bg-slate-800/50'
+              }`}
+            >
+              <span className="text-sm">{item.icon}</span>
+              {item.label}
+            </Link>
+          )
+        })}
+      </nav>
+
+      {/* User */}
+      <div className="px-4 py-3 border-t border-slate-800">
+        <p className="text-xs text-slate-400 truncate mb-1">{session?.user?.name}</p>
+        <p className="text-xs text-slate-600 truncate mb-2">{session?.user?.email}</p>
+        <button
+          onClick={() => signOut({ callbackUrl: '/login' })}
+          className="text-xs text-slate-500 hover:text-slate-300 transition-colors"
+        >
+          Déconnexion →
+        </button>
+      </div>
+    </aside>
+  )
+}

src/components/products/ProductFiltersBar.tsx

@@ -0,0 +1,38 @@
+'use client'
+import type { ProductFilters } from '@/types/products'
+
+interface Props {
+  filters: ProductFilters
+  total: number
+  onChange: (f: Partial<ProductFilters>) => void
+}
+
+export function ProductFiltersBar({ filters, total, onChange }: Props) {
+  return (
+    <div className="flex flex-wrap gap-3 items-center mb-4">
+      <input
+        type="text"
+        placeholder="Rechercher ref ou titre..."
+        value={filters.search}
+        onChange={(e) => onChange({ search: e.target.value })}
+        className="flex-1 min-w-48 bg-slate-700 border border-slate-600 rounded-lg px-3 py-2 text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-indigo-500"
+      />
+      <div className="flex gap-2">
+        {(['all', 'active', 'draft'] as const).map((s) => (
+          <button
+            key={s}
+            onClick={() => onChange({ status: s })}
+            className={`px-3 py-2 rounded-lg text-sm font-medium transition-colors ${
+              filters.status === s
+                ? 'bg-indigo-600 text-white'
+                : 'bg-slate-700 text-gray-300 hover:bg-slate-600'
+            }`}
+          >
+            {s === 'all' ? 'Tous' : s === 'active' ? 'Actifs' : 'Inactifs'}
+          </button>
+        ))}
+      </div>
+      <span className="text-sm text-gray-400 ml-auto">{total} produit{total > 1 ? 's' : ''}</span>
+    </div>
+  )
+}

src/components/products/ProductTable.tsx

@@ -0,0 +1,80 @@
+'use client'
+import type { CatalogProduct } from '@/types/products'
+
+interface Props {
+  products: CatalogProduct[]
+  loading: boolean
+}
+
+const PAGE_SIZE = 50
+
+export function ProductTable({ products, loading }: Props) {
+  if (loading) {
+    return (
+      <div className="flex items-center justify-center py-20 text-gray-400">
+        Chargement des produits…
+      </div>
+    )
+  }
+
+  if (products.length === 0) {
+    return (
+      <div className="text-center py-20 text-gray-400 text-sm">
+        Aucun produit trouvé.
+      </div>
+    )
+  }
+
+  const displayed = products.slice(0, PAGE_SIZE)
+
+  return (
+    <div className="overflow-x-auto">
+      <table className="w-full text-sm">
+        <thead>
+          <tr className="text-left text-gray-400 border-b border-slate-700">
+            <th className="pb-3 pr-4 font-medium">Référence</th>
+            <th className="pb-3 pr-4 font-medium">Titre</th>
+            <th className="pb-3 pr-4 font-medium">Prix</th>
+            <th className="pb-3 pr-4 font-medium">Stock</th>
+            <th className="pb-3 pr-4 font-medium">Statut</th>
+            <th className="pb-3 font-medium">Lien</th>
+          </tr>
+        </thead>
+        <tbody>
+          {displayed.map((p) => (
+            <tr key={p.shopifyId} className="border-b border-slate-700/50 hover:bg-slate-700/30 transition-colors">
+              <td className="py-3 pr-4 font-mono text-indigo-300">{p.ref}</td>
+              <td className="py-3 pr-4 text-white">{p.title}</td>
+              <td className="py-3 pr-4 text-gray-300">{p.price} €</td>
+              <td className="py-3 pr-4 text-gray-300">{p.stock}</td>
+              <td className="py-3 pr-4">
+                <span className={`inline-flex items-center px-2 py-0.5 rounded text-xs font-medium ${
+                  p.status === 'active'
+                    ? 'bg-green-900/50 text-green-300'
+                    : 'bg-gray-700 text-gray-400'
+                }`}>
+                  {p.status === 'active' ? 'Actif' : 'Inactif'}
+                </span>
+              </td>
+              <td className="py-3">
+                <a
+                  href={p.shopifyUrl}
+                  target="_blank"
+                  rel="noopener noreferrer"
+                  className="text-indigo-400 hover:text-indigo-300 text-xs underline"
+                >
+                  Shopify ↗
+                </a>
+              </td>
+            </tr>
+          ))}
+        </tbody>
+      </table>
+      {products.length > PAGE_SIZE && (
+        <p className="text-center text-gray-400 text-xs mt-4">
+          Affichage des {PAGE_SIZE} premiers résultats sur {products.length}.
+        </p>
+      )}
+    </div>
+  )
+}

src/components/providers/SessionProvider.tsx

@@ -0,0 +1,6 @@
+'use client'
+import { SessionProvider as NextAuthSessionProvider } from 'next-auth/react'
+
+export function SessionProvider({ children }: { children: React.ReactNode }) {
+  return <NextAuthSessionProvider>{children}</NextAuthSessionProvider>
+}

src/components/settings/ConnectionStatus.tsx

@@ -0,0 +1,66 @@
+'use client'
+import { useState } from 'react'
+
+interface TestResult {
+  ok: boolean
+  message: string
+}
+
+interface Results {
+  shopify: TestResult
+  sheets: TestResult
+}
+
+export function ConnectionStatus() {
+  const [results, setResults] = useState<Results | null>(null)
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+
+  const runTest = async () => {
+    setLoading(true)
+    setError(null)
+    try {
+      const res = await fetch('/api/admin/connections/test')
+      if (!res.ok) throw new Error('Accès refusé')
+      setResults(await res.json())
+    } catch (e) {
+      setError(e instanceof Error ? e.message : 'Erreur')
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div className="bg-slate-800 rounded-xl p-6">
+      <h2 className="text-lg font-semibold text-white mb-4">Test des connexions</h2>
+      <button
+        onClick={runTest}
+        disabled={loading}
+        className="px-4 py-2 bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white rounded-lg text-sm font-medium transition-colors mb-4"
+      >
+        {loading ? 'Test en cours…' : 'Tester les connexions'}
+      </button>
+      {error && <p className="text-red-400 text-sm mb-4">{error}</p>}
+      {results && (
+        <div className="space-y-3">
+          {(
+            [
+              { key: 'shopify', label: 'Shopify Admin API' },
+              { key: 'sheets', label: 'Google Sheets API' },
+            ] as const
+          ).map(({ key, label }) => (
+            <div key={key} className="flex items-center gap-3 p-3 bg-slate-700 rounded-lg">
+              <span className={`text-lg ${results[key].ok ? 'text-green-400' : 'text-red-400'}`}>
+                {results[key].ok ? '✓' : '✗'}
+              </span>
+              <div>
+                <p className="text-sm font-medium text-white">{label}</p>
+                <p className="text-xs text-gray-400">{results[key].message}</p>
+              </div>
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}

src/components/settings/UsersManager.tsx

@@ -0,0 +1,151 @@
+'use client'
+import { useState, useEffect } from 'react'
+
+interface User {
+  id: string
+  email: string
+  name: string
+  role: string
+  createdAt: string
+}
+
+interface FormData {
+  email: string
+  name: string
+  password: string
+  role: 'admin' | 'gestionnaire'
+}
+
+const EMPTY_FORM: FormData = { email: '', name: '', password: '', role: 'gestionnaire' }
+
+export function UsersManager() {
+  const [users, setUsers] = useState<User[]>([])
+  const [loading, setLoading] = useState(true)
+  const [form, setForm] = useState<FormData>(EMPTY_FORM)
+  const [submitting, setSubmitting] = useState(false)
+  const [error, setError] = useState<string | null>(null)
+  const [success, setSuccess] = useState<string | null>(null)
+
+  const load = () => {
+    setLoading(true)
+    fetch('/api/admin/users')
+      .then((r) => r.json())
+      .then(setUsers)
+      .catch(() => setError('Impossible de charger les utilisateurs'))
+      .finally(() => setLoading(false))
+  }
+
+  useEffect(load, [])
+
+  const handleCreate = async (e: React.FormEvent) => {
+    e.preventDefault()
+    setSubmitting(true)
+    setError(null)
+    setSuccess(null)
+    try {
+      const res = await fetch('/api/admin/users', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(form),
+      })
+      const data = await res.json()
+      if (!res.ok) throw new Error(data.error)
+      setSuccess(`Utilisateur ${data.name} créé.`)
+      setForm(EMPTY_FORM)
+      load()
+    } catch (e) {
+      setError(e instanceof Error ? e.message : 'Erreur')
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  const handleDelete = async (id: string, name: string) => {
+    if (!confirm(`Supprimer ${name} ?`)) return
+    try {
+      const res = await fetch(`/api/admin/users/${id}`, { method: 'DELETE' })
+      const data = await res.json()
+      if (!res.ok) throw new Error(data.error)
+      load()
+    } catch (e) {
+      setError(e instanceof Error ? e.message : 'Erreur suppression')
+    }
+  }
+
+  return (
+    <div className="bg-slate-800 rounded-xl p-6">
+      <h2 className="text-lg font-semibold text-white mb-4">Gestion des utilisateurs</h2>
+
+      {/* Liste */}
+      {loading ? (
+        <p className="text-gray-400 text-sm mb-6">Chargement…</p>
+      ) : (
+        <div className="mb-6 space-y-2">
+          {users.map((u) => (
+            <div key={u.id} className="flex items-center justify-between p-3 bg-slate-700 rounded-lg">
+              <div>
+                <p className="text-sm font-medium text-white">{u.name}</p>
+                <p className="text-xs text-gray-400">{u.email} — <span className="capitalize">{u.role}</span></p>
+              </div>
+              <button
+                onClick={() => handleDelete(u.id, u.name)}
+                className="text-red-400 hover:text-red-300 text-xs px-2 py-1 rounded hover:bg-red-900/30 transition-colors"
+              >
+                Supprimer
+              </button>
+            </div>
+          ))}
+          {users.length === 0 && <p className="text-gray-400 text-sm">Aucun utilisateur.</p>}
+        </div>
+      )}
+
+      {/* Formulaire création */}
+      <form onSubmit={handleCreate} className="space-y-3">
+        <h3 className="text-sm font-medium text-gray-300">Nouvel utilisateur</h3>
+        <div className="grid grid-cols-2 gap-3">
+          <input
+            required
+            type="email"
+            placeholder="Email"
+            value={form.email}
+            onChange={(e) => setForm((f) => ({ ...f, email: e.target.value }))}
+            className="bg-slate-700 border border-slate-600 rounded-lg px-3 py-2 text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-indigo-500"
+          />
+          <input
+            required
+            type="text"
+            placeholder="Nom"
+            value={form.name}
+            onChange={(e) => setForm((f) => ({ ...f, name: e.target.value }))}
+            className="bg-slate-700 border border-slate-600 rounded-lg px-3 py-2 text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-indigo-500"
+          />
+          <input
+            required
+            type="password"
+            placeholder="Mot de passe"
+            value={form.password}
+            onChange={(e) => setForm((f) => ({ ...f, password: e.target.value }))}
+            className="bg-slate-700 border border-slate-600 rounded-lg px-3 py-2 text-sm text-white placeholder-gray-400 focus:outline-none focus:ring-2 focus:ring-indigo-500"
+          />
+          <select
+            value={form.role}
+            onChange={(e) => setForm((f) => ({ ...f, role: e.target.value as FormData['role'] }))}
+            className="bg-slate-700 border border-slate-600 rounded-lg px-3 py-2 text-sm text-white focus:outline-none focus:ring-2 focus:ring-indigo-500"
+          >
+            <option value="gestionnaire">Gestionnaire</option>
+            <option value="admin">Admin</option>
+          </select>
+        </div>
+        {error && <p className="text-red-400 text-sm">{error}</p>}
+        {success && <p className="text-green-400 text-sm">{success}</p>}
+        <button
+          type="submit"
+          disabled={submitting}
+          className="px-4 py-2 bg-indigo-600 hover:bg-indigo-700 disabled:opacity-50 text-white rounded-lg text-sm font-medium transition-colors"
+        >
+          {submitting ? 'Création…' : "Créer l'utilisateur"}
+        </button>
+      </form>
+    </div>
+  )
+}

src/components/sync/DiffTable.tsx

@@ -0,0 +1,118 @@
+'use client'
+import { useState } from 'react'
+import type { SyncChangeType, DiffResult } from '@/types/sync'
+
+interface DiffTableProps {
+  diff: DiffResult
+}
+
+const TYPE_CONFIG: Record<SyncChangeType, { label: string; color: string; bg: string }> = {
+  create:     { label: '🟢 Nouveau',       color: 'text-green-400',  bg: 'bg-green-950/30' },
+  update:     { label: '🔵 Mis à jour',    color: 'text-blue-400',   bg: 'bg-blue-950/30' },
+  deactivate: { label: '🔴 Désactivé',     color: 'text-red-400',    bg: 'bg-red-950/30' },
+  unchanged:  { label: '⚫ Inchangé',      color: 'text-slate-500',  bg: '' },
+}
+
+const PAGE_SIZE = 20
+
+export function DiffTable({ diff }: DiffTableProps) {
+  const [filter, setFilter] = useState<SyncChangeType | 'all'>('all')
+  const [page, setPage] = useState(0)
+
+  const visible = diff.changes.filter((c) => c.type !== 'unchanged')
+  const filtered = filter === 'all' ? visible : visible.filter((c) => c.type === filter)
+  const paginated = filtered.slice(page * PAGE_SIZE, (page + 1) * PAGE_SIZE)
+  const totalPages = Math.ceil(filtered.length / PAGE_SIZE)
+
+  return (
+    <div className="flex flex-col gap-3">
+      {/* Résumé */}
+      <div className="flex gap-4 flex-wrap text-sm">
+        {(['create', 'update', 'deactivate', 'unchanged'] as SyncChangeType[]).map((type) => (
+          <span key={type} className={TYPE_CONFIG[type].color}>
+            {TYPE_CONFIG[type].label} : {diff.summary[type]}
+          </span>
+        ))}
+      </div>
+
+      {/* Filtres */}
+      <div className="flex gap-2 flex-wrap">
+        {(['all', 'create', 'update', 'deactivate'] as const).map((f) => (
+          <button
+            key={f}
+            onClick={() => { setFilter(f); setPage(0) }}
+            className={`px-3 py-1 text-xs rounded-full border transition-colors ${
+              filter === f
+                ? 'bg-indigo-600 border-indigo-500 text-white'
+                : 'border-slate-700 text-slate-400 hover:text-slate-200'
+            }`}
+          >
+            {f === 'all' ? 'Tous' : TYPE_CONFIG[f].label}
+          </button>
+        ))}
+      </div>
+
+      {/* Tableau */}
+      {paginated.length === 0 ? (
+        <p className="text-slate-600 text-sm py-4 text-center">Aucun changement dans cette catégorie.</p>
+      ) : (
+        <div className="border border-slate-700 rounded-xl overflow-hidden">
+          <table className="w-full text-xs">
+            <thead className="bg-slate-800 text-slate-400">
+              <tr>
+                <th className="px-3 py-2 text-left">Ref</th>
+                <th className="px-3 py-2 text-left">Type</th>
+                <th className="px-3 py-2 text-left">Champs modifiés</th>
+              </tr>
+            </thead>
+            <tbody>
+              {paginated.map((change) => (
+                <tr key={change.ref} className={`border-t border-slate-800 ${TYPE_CONFIG[change.type].bg}`}>
+                  <td className="px-3 py-2 font-mono text-slate-300">{change.ref}</td>
+                  <td className={`px-3 py-2 font-semibold ${TYPE_CONFIG[change.type].color}`}>
+                    {TYPE_CONFIG[change.type].label}
+                  </td>
+                  <td className="px-3 py-2 text-slate-400">
+                    {change.type === 'update' && change.changedFields?.map((f) => (
+                      <span key={f.field} className="inline-block mr-2">
+                        <span className="text-slate-500">{f.field} : </span>
+                        <span className="line-through text-red-400">{f.from}</span>
+                        <span className="text-slate-400"> → </span>
+                        <span className="text-green-400">{f.to}</span>
+                      </span>
+                    ))}
+                    {change.type === 'create' && (
+                      <span className="text-green-400">{change.sheetProduct?.title}</span>
+                    )}
+                    {change.type === 'deactivate' && (
+                      <span className="text-red-400">{change.shopifyProduct?.title}</span>
+                    )}
+                  </td>
+                </tr>
+              ))}
+            </tbody>
+          </table>
+        </div>
+      )}
+
+      {/* Pagination */}
+      {totalPages > 1 && (
+        <div className="flex gap-2 justify-end">
+          <button
+            onClick={() => setPage((p) => Math.max(0, p - 1))}
+            disabled={page === 0}
+            className="px-3 py-1 text-xs bg-slate-800 rounded disabled:opacity-40 text-slate-300"
+          >← Préc</button>
+          <span className="text-xs text-slate-500 self-center">
+            {page + 1} / {totalPages}
+          </span>
+          <button
+            onClick={() => setPage((p) => Math.min(totalPages - 1, p + 1))}
+            disabled={page >= totalPages - 1}
+            className="px-3 py-1 text-xs bg-slate-800 rounded disabled:opacity-40 text-slate-300"
+          >Suiv →</button>
+        </div>
+      )}
+    </div>
+  )
+}

src/components/sync/SyncHistory.tsx

@@ -0,0 +1,78 @@
+'use client'
+import { useState } from 'react'
+import React from 'react'
+import type { SyncHistoryEntry } from '@/types/sync'
+
+interface SyncHistoryProps {
+  entries: SyncHistoryEntry[]
+}
+
+const STATUS_STYLE = {
+  success: 'text-green-400',
+  partial: 'text-yellow-400',
+  error:   'text-red-400',
+}
+
+export function SyncHistory({ entries }: SyncHistoryProps) {
+  const [expandedId, setExpandedId] = useState<string | null>(null)
+
+  if (entries.length === 0) {
+    return <p className="text-slate-600 text-sm text-center py-6">Aucune synchronisation effectuée.</p>
+  }
+
+  return (
+    <div className="border border-slate-700 rounded-xl overflow-hidden">
+      <table className="w-full text-xs">
+        <thead className="bg-slate-800 text-slate-400">
+          <tr>
+            <th className="px-3 py-2 text-left">Date</th>
+            <th className="px-3 py-2 text-left">Utilisateur</th>
+            <th className="px-3 py-2 text-right">Créés</th>
+            <th className="px-3 py-2 text-right">MàJ</th>
+            <th className="px-3 py-2 text-right">Désactivés</th>
+            <th className="px-3 py-2 text-right">Erreurs</th>
+            <th className="px-3 py-2 text-left">Statut</th>
+          </tr>
+        </thead>
+        <tbody>
+          {entries.map((entry) => (
+            <React.Fragment key={entry.id}>
+              <tr
+                onClick={() => setExpandedId(expandedId === entry.id ? null : entry.id)}
+                className="border-t border-slate-800 hover:bg-slate-800/50 cursor-pointer"
+              >
+                <td className="px-3 py-2 text-slate-400">
+                  {new Date(entry.createdAt).toLocaleString('fr-FR', {
+                    day: '2-digit', month: '2-digit', year: '2-digit',
+                    hour: '2-digit', minute: '2-digit',
+                  })}
+                </td>
+                <td className="px-3 py-2 text-slate-300">{entry.userName}</td>
+                <td className="px-3 py-2 text-right text-green-400">{entry.created}</td>
+                <td className="px-3 py-2 text-right text-blue-400">{entry.updated}</td>
+                <td className="px-3 py-2 text-right text-red-400">{entry.deactivated}</td>
+                <td className="px-3 py-2 text-right text-yellow-400">{entry.errors || '—'}</td>
+                <td className={`px-3 py-2 font-semibold ${STATUS_STYLE[entry.status]}`}>
+                  {entry.status}
+                </td>
+              </tr>
+              {expandedId === entry.id && (
+                <tr className="border-t border-slate-800 bg-slate-950">
+                  <td colSpan={7} className="px-3 py-3">
+                    <div className="font-mono text-xs max-h-32 overflow-y-auto space-y-0.5">
+                      {entry.log.map((l, i) => (
+                        <p key={i} className={l.status === 'error' ? 'text-red-400' : 'text-slate-400'}>
+                          {l.message}
+                        </p>
+                      ))}
+                    </div>
+                  </td>
+                </tr>
+              )}
+            </React.Fragment>
+          ))}
+        </tbody>
+      </table>
+    </div>
+  )
+}

src/components/sync/SyncProgress.tsx

@@ -0,0 +1,65 @@
+'use client'
+
+interface SyncProgressProps {
+  log: string[]
+  progress: { current: number; total: number } | null
+  summary: { created: number; updated: number; deactivated: number; errors: number; status: string } | null
+}
+
+export function SyncProgress({ log, progress, summary }: SyncProgressProps) {
+  const percent = progress && progress.total > 0
+    ? Math.round((progress.current / progress.total) * 100)
+    : 0
+
+  return (
+    <div className="flex flex-col gap-4">
+      {/* Barre de progression */}
+      {progress && (
+        <div>
+          <div className="flex justify-between text-xs text-slate-400 mb-1">
+            <span>{progress.current} / {progress.total} produits</span>
+            <span>{percent}%</span>
+          </div>
+          <div className="h-2 bg-slate-800 rounded-full overflow-hidden">
+            <div
+              className="h-2 bg-indigo-500 rounded-full transition-all duration-300"
+              style={{ width: `${percent}%` }}
+            />
+          </div>
+        </div>
+      )}
+
+      {/* Log */}
+      <div className="bg-slate-950 rounded-xl border border-slate-800 p-3 h-48 overflow-y-auto font-mono text-xs">
+        {log.length === 0 && (
+          <p className="text-slate-600">Démarrage de la synchronisation…</p>
+        )}
+        {log.map((line, i) => (
+          <p
+            key={i}
+            className={line.startsWith('✗') ? 'text-red-400' : 'text-green-400'}
+          >
+            {line}
+          </p>
+        ))}
+      </div>
+
+      {/* Résultat final */}
+      {summary && (
+        <div className={`rounded-xl p-4 text-sm font-semibold border ${
+          summary.status === 'success'
+            ? 'bg-green-950/30 border-green-800 text-green-300'
+            : summary.status === 'partial'
+              ? 'bg-yellow-950/30 border-yellow-800 text-yellow-300'
+              : 'bg-red-950/30 border-red-800 text-red-300'
+        }`}>
+          {summary.status === 'success' && '✅ '}
+          {summary.status === 'partial' && '⚠️ '}
+          {summary.status === 'error' && '❌ '}
+          Sync terminée — {summary.created} créés, {summary.updated} mis à jour,{' '}
+          {summary.deactivated} désactivés, {summary.errors} erreur{summary.errors > 1 ? 's' : ''}
+        </div>
+      )}
+    </div>
+  )
+}

src/components/sync/SyncStepper.tsx

@@ -0,0 +1,46 @@
+'use client'
+
+const STEPS = [
+  { id: 1, label: 'Analyse Sheets' },
+  { id: 2, label: 'Aperçu diff' },
+  { id: 3, label: 'Confirmation' },
+  { id: 4, label: 'Synchronisation' },
+]
+
+interface SyncStepperProps {
+  currentStep: number  // 1–4
+}
+
+export function SyncStepper({ currentStep }: SyncStepperProps) {
+  return (
+    <div className="flex items-center gap-0">
+      {STEPS.map((step, i) => {
+        const done = currentStep > step.id
+        const active = currentStep === step.id
+        return (
+          <div key={step.id} className="flex items-center">
+            {i > 0 && (
+              <div className={`h-0.5 w-12 ${done ? 'bg-indigo-500' : 'bg-slate-700'}`} />
+            )}
+            <div className="flex flex-col items-center gap-1">
+              <div
+                className={`w-8 h-8 rounded-full flex items-center justify-center text-xs font-bold transition-colors ${
+                  done
+                    ? 'bg-indigo-500 text-white'
+                    : active
+                      ? 'bg-indigo-600 text-white ring-2 ring-indigo-400'
+                      : 'bg-slate-800 text-slate-500 border border-slate-700'
+                }`}
+              >
+                {done ? '✓' : step.id}
+              </div>
+              <span className={`text-xs ${active ? 'text-slate-200 font-semibold' : 'text-slate-500'}`}>
+                {step.label}
+              </span>
+            </div>
+          </div>
+        )
+      })}
+    </div>
+  )
+}

src/hooks/useImages.ts

@@ -0,0 +1,246 @@
+'use client'
+import { useReducer, useCallback } from 'react'
+import type { ImageItem, ImageStatus } from '@/types/images'
+
+// ── Reducer ───────────────────────────────────────────────────────────────────
+
+type Action =
+  | { type: 'ADD'; items: ImageItem[] }
+  | { type: 'UPDATE'; id: string; patch: Partial<ImageItem> }
+  | { type: 'REMOVE'; id: string }
+
+function reducer(state: ImageItem[], action: Action): ImageItem[] {
+  switch (action.type) {
+    case 'ADD':
+      return [...state, ...action.items]
+    case 'UPDATE':
+      return state.map((item) =>
+        item.id === action.id ? { ...item, ...action.patch } : item,
+      )
+    case 'REMOVE':
+      return state.filter((item) => item.id !== action.id)
+  }
+}
+
+// ── Helpers ───────────────────────────────────────────────────────────────────
+
+function refFromFilename(filename: string): string {
+  const dot = filename.lastIndexOf('.')
+  return dot === -1 ? filename : filename.slice(0, dot)
+}
+
+function blobToBase64(blob: Blob): Promise<string> {
+  return new Promise((resolve, reject) => {
+    const reader = new FileReader()
+    reader.onload = () => {
+      const result = reader.result as string
+      // Supprimer le préfixe "data:image/jpeg;base64,"
+      const base64 = result.split(',')[1]
+      resolve(base64)
+    }
+    reader.onerror = () => reject(new Error('FileReader error'))
+    reader.readAsDataURL(blob)
+  })
+}
+
+// ── Hook ──────────────────────────────────────────────────────────────────────
+
+export function useImages() {
+  const [items, dispatch] = useReducer(reducer, [])
+
+  const update = useCallback((id: string, patch: Partial<ImageItem>) => {
+    dispatch({ type: 'UPDATE', id, patch })
+  }, [])
+
+  // Recherche produit Shopify
+  const searchProduct = useCallback(
+    async (id: string, ref: string) => {
+      update(id, { status: 'searching' })
+      try {
+        const res = await fetch(`/api/products/search?ref=${encodeURIComponent(ref)}`)
+        const data = await res.json()
+        if (data.found) {
+          update(id, {
+            status: 'ready',
+            shopifyProductId: data.shopifyId,
+            shopifyProductTitle: data.title,
+          })
+        } else {
+          update(id, { status: 'not_found' })
+        }
+      } catch (err) {
+        update(id, { status: 'error', error: `Recherche produit : ${(err as Error).message}` })
+      }
+    },
+    [update],
+  )
+
+  // Pipeline complet pour un item (avec ref)
+  const runPipeline = useCallback(
+    async (id: string, blob: Blob, ref: string, feather: number, rotation: number) => {
+      const { convertHeicToJpeg } = await import('@/lib/client/heicConverter')
+      const { removeBackgroundRaw, compositeOnWhite } = await import('@/lib/client/bgRemover')
+      const { rotateBlob } = await import('@/lib/client/imageRotator')
+
+      let jpegBlob = blob
+
+      if (blob.type === 'image/heic' || blob.type === 'image/heif' || blob.type === '') {
+        try {
+          update(id, { status: 'converting' })
+          jpegBlob = await convertHeicToJpeg(blob)
+        } catch (err) {
+          update(id, { status: 'error', error: `Conversion HEIC : ${(err as Error).message}` })
+          return
+        }
+      }
+
+      let rawPng: Blob
+      try {
+        update(id, { status: 'processing', progress: null })
+        rawPng = await removeBackgroundRaw(jpegBlob, (p) => update(id, { progress: p }))
+      } catch (err) {
+        update(id, { status: 'error', error: `Détourage IA : ${(err as Error).message}` })
+        return
+      }
+
+      let finalBlob: Blob
+      try {
+        const composited = await compositeOnWhite(rawPng, feather)
+        finalBlob = await rotateBlob(composited, rotation)
+      } catch (err) {
+        update(id, { status: 'error', error: `Post-traitement : ${(err as Error).message}` })
+        return
+      }
+
+      update(id, { rawPngBlob: rawPng, processedBlob: finalBlob })
+      await searchProduct(id, ref)
+    },
+    [update, searchProduct],
+  )
+
+  // Recomposite rapide (feather ou rotation changés) — ne relance pas l'IA
+  const recomposite = useCallback(
+    async (id: string, rawPngBlob: Blob, feather: number, rotation: number) => {
+      const { compositeOnWhite } = await import('@/lib/client/bgRemover')
+      const { rotateBlob } = await import('@/lib/client/imageRotator')
+      try {
+        const composited = await compositeOnWhite(rawPngBlob, feather)
+        const finalBlob = await rotateBlob(composited, rotation)
+        update(id, { processedBlob: finalBlob, feather, rotation })
+      } catch (err) {
+        update(id, { status: 'error', error: `Retraitement : ${(err as Error).message}` })
+      }
+    },
+    [update],
+  )
+
+  // ── Actions exposées ───────────────────────────────────────────────────────
+
+  const addFiles = useCallback(
+    async (files: File[]) => {
+      const { readImagesFromZip } = await import('@/lib/client/zipImporter')
+
+      for (const file of files) {
+        if (file.name.toLowerCase().endsWith('.zip')) {
+          const entries = await readImagesFromZip(file)
+          const newItems: ImageItem[] = entries.map((entry) => ({
+            id: crypto.randomUUID(),
+            filename: `${entry.folder}/${entry.filename}.${entry.ext}`,
+            ref: entry.folder,
+            originalBlob: entry.blob,
+            rawPngBlob: null,
+            processedBlob: null,
+            rotation: 0,
+            feather: 2,
+            shopifyProductId: null,
+            shopifyProductTitle: null,
+            uploadedUrl: null,
+            status: 'pending' as ImageStatus,
+            error: null,
+            progress: null,
+          }))
+          dispatch({ type: 'ADD', items: newItems })
+          for (const item of newItems) {
+            runPipeline(item.id, item.originalBlob, item.ref, item.feather, item.rotation)
+          }
+        } else {
+          const ref = refFromFilename(file.name)
+          const newItem: ImageItem = {
+            id: crypto.randomUUID(),
+            filename: file.name,
+            ref,
+            originalBlob: file,
+            rawPngBlob: null,
+            processedBlob: null,
+            rotation: 0,
+            feather: 2,
+            shopifyProductId: null,
+            shopifyProductTitle: null,
+            uploadedUrl: null,
+            status: 'pending',
+            error: null,
+            progress: null,
+          }
+          dispatch({ type: 'ADD', items: [newItem] })
+          runPipeline(newItem.id, newItem.originalBlob, newItem.ref, newItem.feather, newItem.rotation)
+        }
+      }
+    },
+    [runPipeline],
+  )
+
+  const setFeather = useCallback(
+    (id: string, value: number) => {
+      const item = items.find((i) => i.id === id)
+      if (!item || !item.rawPngBlob) return
+      recomposite(id, item.rawPngBlob, value, item.rotation)
+    },
+    [items, recomposite],
+  )
+
+  const rotate = useCallback(
+    (id: string, direction: 'cw' | 'ccw') => {
+      const item = items.find((i) => i.id === id)
+      if (!item || !item.rawPngBlob) return
+      const delta = direction === 'cw' ? 90 : -90
+      const newRotation = ((item.rotation + delta) % 360 + 360) % 360
+      recomposite(id, item.rawPngBlob, item.feather, newRotation)
+    },
+    [items, recomposite],
+  )
+
+  const uploadOne = useCallback(
+    async (id: string) => {
+      const item = items.find((i) => i.id === id)
+      if (!item || item.status !== 'ready' || !item.processedBlob || !item.shopifyProductId) return
+
+      update(id, { status: 'uploading' })
+
+      try {
+        const base64 = await blobToBase64(item.processedBlob)
+        const filename = `${item.ref}.jpg`
+        const res = await fetch('/api/images/upload', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ shopifyProductId: item.shopifyProductId, imageBase64: base64, filename }),
+        })
+        const data = await res.json()
+        if (!res.ok) throw new Error(data.error || `HTTP ${res.status}`)
+        update(id, { status: 'uploaded', uploadedUrl: data.url })
+      } catch (err) {
+        update(id, { status: 'error', error: `Upload : ${(err as Error).message}` })
+      }
+    },
+    [items, update],
+  )
+
+  const uploadAll = useCallback(() => {
+    items.filter((i) => i.status === 'ready').forEach((i) => uploadOne(i.id))
+  }, [items, uploadOne])
+
+  const removeItem = useCallback((id: string) => {
+    dispatch({ type: 'REMOVE', id })
+  }, [])
+
+  return { items, addFiles, setFeather, rotate, uploadOne, uploadAll, removeItem }
+}

src/lib/auth.ts

@@ -0,0 +1,70 @@
+import type { NextAuthOptions } from 'next-auth'
+import CredentialsProvider from 'next-auth/providers/credentials'
+import { compare } from 'bcryptjs'
+import { prisma } from './prisma'
+import { checkRateLimit, recordFailedAttempt, clearAttempts } from './rate-limit'
+
+export const authOptions: NextAuthOptions = {
+  session: {
+    strategy: 'jwt',
+    maxAge: 8 * 60 * 60, // 8 heures
+  },
+  pages: {
+    signIn: '/login',
+  },
+  callbacks: {
+    async jwt({ token, user }) {
+      if (user) {
+        // NextAuth v4 : les types de base n'incluent pas les champs custom.
+        // Le module augmentation dans next-auth.d.ts couvre le type Session/JWT
+        // mais pas le paramètre `user` du callback jwt. Cast nécessaire.
+        const u = user as typeof user & { role: string }
+        token.role = u.role
+        token.id = u.id
+      }
+      return token
+    },
+    async session({ session, token }) {
+      if (session.user) {
+        // session.user est déjà augmenté via next-auth.d.ts (id + role)
+        session.user.id   = token.id   as string
+        session.user.role = token.role as string
+      }
+      return session
+    },
+  },
+  providers: [
+    CredentialsProvider({
+      name: 'Credentials',
+      credentials: {
+        email: { label: 'Email', type: 'email' },
+        password: { label: 'Mot de passe', type: 'password' },
+      },
+      async authorize(credentials, req) {
+        if (!credentials?.email || !credentials?.password) return null
+
+        // NextAuth v4 : req est un RequestInternal partiel sans typings complets.
+        // Le cast est nécessaire pour accéder à x-forwarded-for.
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const ip = (req as any)?.headers?.['x-forwarded-for']?.split(',')[0]?.trim() ?? 'unknown'
+        const key = `${ip}:${credentials.email}`
+
+        if (!checkRateLimit(key)) {
+          throw new Error('RATE_LIMITED')
+        }
+
+        const user = await prisma.user.findUnique({
+          where: { email: credentials.email },
+        })
+
+        if (!user || !(await compare(credentials.password, user.password))) {
+          recordFailedAttempt(key)
+          return null
+        }
+
+        clearAttempts(key)
+        return { id: user.id, email: user.email, name: user.name, role: user.role }
+      },
+    }),
+  ],
+}

src/lib/client/bgRemover.ts

@@ -0,0 +1,89 @@
+const CDN_VERSION = '1.7.0'
+const CDN_URL = `https://cdn.jsdelivr.net/npm/@imgly/background-removal@${CDN_VERSION}/dist/index.mjs`
+
+let _removeBg: ((blob: Blob, opts: Record<string, unknown>) => Promise<Blob>) | null = null
+
+async function loadLib() {
+  if (_removeBg) return _removeBg
+  const mod = await import(/* webpackIgnore: true */ CDN_URL)
+  _removeBg = mod.removeBackground
+  return _removeBg!
+}
+
+export interface ProgressEvent {
+  key: string
+  percent: number
+}
+
+/**
+ * Supprime le fond d'un Blob image via @imgly IA.
+ * Retourne un PNG avec fond transparent (à combiner avec compositeOnWhite).
+ */
+export async function removeBackgroundRaw(
+  blob: Blob,
+  onProgress?: (e: ProgressEvent) => void,
+): Promise<Blob> {
+  const removeBg = await loadLib()
+
+  return removeBg(blob, {
+    output: { format: 'image/png', type: 'foreground', quality: 1 },
+    progress: (key: string, current: number, total: number) => {
+      if (onProgress && total > 0) {
+        onProgress({ key, percent: Math.round((current / total) * 100) })
+      }
+    },
+  })
+}
+
+/**
+ * Composite un PNG transparent sur fond blanc avec feather optionnel.
+ * @param pngBlob — PNG avec transparence (résultat de removeBackgroundRaw)
+ * @param feather — récupération des bords en px (0 = strict, 5 = doux)
+ */
+export function compositeOnWhite(pngBlob: Blob, feather: number): Promise<Blob> {
+  const objectUrl = URL.createObjectURL(pngBlob)
+
+  return new Promise((resolve, reject) => {
+    const img = new Image()
+
+    img.onload = () => {
+      const { width, height } = img
+
+      const fgCanvas = document.createElement('canvas')
+      fgCanvas.width = width
+      fgCanvas.height = height
+      const fgCtx = fgCanvas.getContext('2d')!
+
+      fgCtx.drawImage(img, 0, 0)
+
+      if (feather > 0) {
+        fgCtx.globalCompositeOperation = 'destination-over'
+        fgCtx.filter = `blur(${feather}px)`
+        fgCtx.drawImage(img, 0, 0)
+        fgCtx.filter = 'none'
+        fgCtx.globalCompositeOperation = 'source-over'
+      }
+
+      const out = document.createElement('canvas')
+      out.width = width
+      out.height = height
+      const ctx = out.getContext('2d')!
+      ctx.fillStyle = '#ffffff'
+      ctx.fillRect(0, 0, width, height)
+      ctx.drawImage(fgCanvas, 0, 0)
+
+      URL.revokeObjectURL(objectUrl)
+      out.toBlob(
+        (b) => (b ? resolve(b) : reject(new Error('canvas.toBlob a retourné null'))),
+        'image/jpeg',
+        0.92,
+      )
+    }
+
+    img.onerror = () => {
+      URL.revokeObjectURL(objectUrl)
+      reject(new Error('Impossible de charger le PNG'))
+    }
+    img.src = objectUrl
+  })
+}

src/lib/client/heicConverter.ts

@@ -0,0 +1,31 @@
+/**
+ * Convertit un Blob HEIC/HEIF en Blob JPEG via heic2any.
+ * À utiliser uniquement côté client (navigateur).
+ */
+export async function convertHeicToJpeg(blob: Blob): Promise<Blob> {
+  if (!(blob instanceof Blob)) {
+    throw new TypeError('L\'entrée doit être un Blob')
+  }
+
+  const type = blob.type.toLowerCase()
+  if (type !== '' && !['image/heic', 'image/heif'].includes(type)) {
+    throw new TypeError(`Format attendu : HEIC/HEIF. Reçu : ${blob.type || '(vide)'}`)
+  }
+
+  const heic2any = (await import('heic2any')).default
+
+  const timeout = new Promise<never>((_, reject) =>
+    setTimeout(() => reject(new Error('Timeout conversion HEIC (120s)')), 120_000),
+  )
+
+  const conversion = heic2any({ blob, toType: 'image/jpeg', quality: 0.92 })
+
+  const result = await Promise.race([conversion, timeout])
+  const output = Array.isArray(result) ? result[0] : result
+
+  if (!(output instanceof Blob)) {
+    throw new Error("heic2any n'a pas retourné un Blob")
+  }
+
+  return output
+}

src/lib/client/imageRotator.ts

@@ -0,0 +1,44 @@
+/**
+ * Pivote un Blob JPEG via Canvas.
+ * @param blob — image source (JPEG)
+ * @param degrees — angle en degrés (0, 90, 180, 270)
+ * @returns Blob JPEG pivoté, ou le blob original si degrees === 0
+ */
+export function rotateBlob(blob: Blob, degrees: number): Promise<Blob> {
+  const norm = ((degrees % 360) + 360) % 360
+  if (norm === 0) return Promise.resolve(blob)
+
+  const url = URL.createObjectURL(blob)
+
+  return new Promise((resolve, reject) => {
+    const img = new Image()
+
+    img.onload = () => {
+      const swap = norm === 90 || norm === 270
+      const w = swap ? img.naturalHeight : img.naturalWidth
+      const h = swap ? img.naturalWidth : img.naturalHeight
+
+      const canvas = document.createElement('canvas')
+      canvas.width = w
+      canvas.height = h
+      const ctx = canvas.getContext('2d')!
+
+      ctx.translate(w / 2, h / 2)
+      ctx.rotate((norm * Math.PI) / 180)
+      ctx.drawImage(img, -img.naturalWidth / 2, -img.naturalHeight / 2)
+
+      URL.revokeObjectURL(url)
+      canvas.toBlob(
+        (b) => (b ? resolve(b) : reject(new Error('rotateBlob : toBlob a retourné null'))),
+        'image/jpeg',
+        0.92,
+      )
+    }
+
+    img.onerror = () => {
+      URL.revokeObjectURL(url)
+      reject(new Error('rotateBlob : impossible de charger le blob'))
+    }
+    img.src = url
+  })
+}

src/lib/client/zipImporter.ts

@@ -0,0 +1,47 @@
+import JSZip from 'jszip'
+import type { ZipEntry } from '@/types/images'
+
+const IMAGE_EXTS = new Set(['heic', 'heif', 'jpg', 'jpeg', 'png'])
+
+/**
+ * Extrait toutes les images d'un fichier ZIP.
+ * Structure attendue : dossier-ref/image.ext (le nom du dossier = référence produit).
+ */
+export async function readImagesFromZip(file: File): Promise<ZipEntry[]> {
+  const zip = await JSZip.loadAsync(file)
+
+  const entries: Array<{ relativePath: string; entry: JSZip.JSZipObject }> = []
+  zip.forEach((relativePath, entry) => {
+    if (!entry.dir) entries.push({ relativePath, entry })
+  })
+
+  const results: ZipEntry[] = []
+
+  for (const { relativePath, entry } of entries) {
+    if (relativePath.startsWith('__MACOSX/')) continue
+
+    const parts = relativePath.split('/').filter((p) => p.length > 0)
+    const filename = parts[parts.length - 1]
+    if (filename.startsWith('.')) continue
+
+    const dotIdx = filename.lastIndexOf('.')
+    if (dotIdx === -1) continue
+    const ext = filename.slice(dotIdx + 1).toLowerCase()
+    if (!IMAGE_EXTS.has(ext)) continue
+
+    const folder = parts.length > 1 ? parts[0] : filename.slice(0, dotIdx)
+    const isHeic = ext === 'heic' || ext === 'heif'
+    const mimeType = isHeic
+      ? 'image/heic'
+      : ext === 'jpg' || ext === 'jpeg'
+        ? 'image/jpeg'
+        : 'image/png'
+
+    const rawBlob = await entry.async('blob')
+    const blob = new Blob([rawBlob], { type: mimeType })
+
+    results.push({ folder, filename: filename.slice(0, dotIdx), ext, blob, isHeic })
+  }
+
+  return results
+}

src/lib/creationSheets.test.ts

@@ -0,0 +1,103 @@
+import { parseTabRows, findColIndex, extractSpecificFields } from './creationSheets'
+
+const HEADERS = [
+  'ID', 'Type', 'UGS', 'Nom', 'Publié', 'Mis en avant ?',
+  'Description courte', 'Description longue',
+  'Date de début de promo', 'Date de fin de promo',
+  'État de la TVA', 'Classe de TVA', 'En stock ?',
+  'Stock (en pièce)', 'Vendre individuellement ?',
+  'Prix marché', 'Prix remisé', 'Code ecopart', 'Ecopart montant',
+  'Famille', 'Sous famille',
+  "Classe d'expédition (en retrait, livraison)",
+  'Conditionnement', 'Surface (m2)', 'Poids (kg) fonction unité',
+  'Images', 'Unité', 'Marque', 'Neuf ?',
+  "Commentaire\nexemple : Modèle d'expo (lègères rayures)",
+  'Longueur (cm)', 'Largeur (cm)', 'Hauteur (cm)', 'Épaisseur (cm)',
+  'Poids par carton', 'Stock conditionné (en carton)',
+  'Fabrication', 'Garantie', 'Coloris',
+  'Puissance (AN)', 'Batterie (AP)', 'Couple (AQ)',
+  'PHOTO ?', 'ID FAMILLE', 'ID SOUS FAMILLE',
+]
+
+const makeRow = (overrides: Record<number, string> = {}): string[] => {
+  const base: Record<number, string> = {
+    0: '',          // ID vide = à créer
+    2: 'SKU-001',   // UGS
+    3: 'Perceuse Test',
+    4: '1',         // Publié
+    13: '5',        // Stock
+    15: '99.99',    // Prix marché
+    16: '79.99',    // Prix remisé
+    19: 'OUTILLAGE',
+    24: '2.5',      // Poids
+    27: 'BOSCH',    // Marque
+    39: '1500W',    // Puissance
+    40: 'Li-Ion',   // Batterie
+    // Couple (index 41) laissé vide
+    [HEADERS.length - 2]: '10',   // ID FAMILLE
+    [HEADERS.length - 1]: '20',   // ID SOUS FAMILLE
+  }
+  return HEADERS.map((_, i) => overrides[i] ?? base[i] ?? '')
+}
+
+describe('findColIndex', () => {
+  it('trouve un en-tête exact', () => {
+    expect(findColIndex(HEADERS, 'UGS')).toBe(2)
+  })
+  it('trouve un en-tête commençant par Commentaire', () => {
+    const idx = findColIndex(HEADERS, 'Commentaire')
+    expect(idx).toBeGreaterThan(-1)
+  })
+  it('retourne -1 si non trouvé', () => {
+    expect(findColIndex(HEADERS, 'Inexistant')).toBe(-1)
+  })
+})
+
+describe('extractSpecificFields', () => {
+  it('exclut les colonnes communes', () => {
+    const row = makeRow()
+    const specific = extractSpecificFields(HEADERS, row)
+    expect(Object.keys(specific)).not.toContain('Nom')
+    expect(Object.keys(specific)).not.toContain('UGS')
+  })
+  it('inclut les colonnes spécifiques non vides', () => {
+    const row = makeRow()
+    const specific = extractSpecificFields(HEADERS, row)
+    expect(specific['Puissance (AN)']).toBe('1500W')
+    expect(specific['Batterie (AP)']).toBe('Li-Ion')
+  })
+  it('exclut les colonnes spécifiques vides', () => {
+    const row = makeRow()
+    const specific = extractSpecificFields(HEADERS, row)
+    expect(Object.keys(specific)).not.toContain('Couple (AQ)')
+  })
+})
+
+describe('parseTabRows', () => {
+  it('ignore les lignes avec ID déjà rempli', () => {
+    const row = makeRow({ 0: '12345' })
+    const result = parseTabRows('OUTILLAGE', HEADERS, [row])
+    expect(result).toHaveLength(0)
+  })
+  it('ignore les lignes avec Publié ≠ 1', () => {
+    const row = makeRow({ 4: '0' })
+    const result = parseTabRows('OUTILLAGE', HEADERS, [row])
+    expect(result).toHaveLength(0)
+  })
+  it('retourne un PendingProduct pour une ligne valide', () => {
+    const row = makeRow()
+    const result = parseTabRows('OUTILLAGE', HEADERS, [row])
+    expect(result).toHaveLength(1)
+    expect(result[0].sku).toBe('SKU-001')
+    expect(result[0].title).toBe('Perceuse Test')
+    expect(result[0].priceActual).toBe('79.99')
+    expect(result[0].collectionId).toBe('10')
+    expect(result[0].specificFields['Puissance (AN)']).toBe('1500W')
+  })
+  it('attribue le bon numéro de ligne (1-indexé depuis row 2)', () => {
+    const rows = [makeRow(), makeRow({ 3: 'Deuxième' })]
+    const result = parseTabRows('OUTILLAGE', HEADERS, rows)
+    expect(result[0].rowNumber).toBe(2)
+    expect(result[1].rowNumber).toBe(3)
+  })
+})

src/lib/creationSheets.ts

@@ -0,0 +1,116 @@
+import type { PendingProduct } from '@/types/creation'
+
+const COMMON_HEADERS = new Set([
+  'ID', 'Type', 'UGS', 'Nom', 'Publié', 'Mis en avant ?',
+  'Description courte', 'Description longue',
+  'Date de début de promo', 'Date de fin de promo',
+  'État de la TVA', 'Classe de TVA', 'En stock ?',
+  'Stock (en pièce)', 'Vendre individuellement ?',
+  'Prix marché', 'Prix remisé', 'Code ecopart', 'Ecopart montant',
+  'Famille', 'Sous famille',
+  "Classe d'expédition (en retrait, livraison)",
+  'Conditionnement', 'Surface (m2)', 'Poids (kg) fonction unité',
+  'Images', 'Unité', 'Marque', 'Neuf ?', 'PHOTO ?',
+  'ID FAMILLE', 'ID SOUS FAMILLE',
+])
+
+export function findColIndex(headers: string[], search: string): number {
+  const exact = headers.findIndex(h => h === search)
+  if (exact !== -1) return exact
+  return headers.findIndex(h => h.startsWith(search))
+}
+
+export function extractSpecificFields(headers: string[], row: string[]): Record<string, string> {
+  const result: Record<string, string> = {}
+  headers.forEach((header, i) => {
+    if (!header) return
+    const isCommon = COMMON_HEADERS.has(header) || header.startsWith('Commentaire')
+    if (isCommon) return
+    const val = (row[i] ?? '').trim()
+    if (val) result[header] = val
+  })
+  return result
+}
+
+export function parseTabRows(tab: string, headers: string[], rows: string[][]): PendingProduct[] {
+  const idx = {
+    id:              findColIndex(headers, 'ID'),
+    sku:             findColIndex(headers, 'UGS'),
+    nom:             findColIndex(headers, 'Nom'),
+    publie:          findColIndex(headers, 'Publié'),
+    stock:           findColIndex(headers, 'Stock (en pièce)'),
+    prixMarche:      findColIndex(headers, 'Prix marché'),
+    prixRemise:      findColIndex(headers, 'Prix remisé'),
+    poids:           findColIndex(headers, 'Poids (kg) fonction unité'),
+    marque:          findColIndex(headers, 'Marque'),
+    famille:         findColIndex(headers, 'Famille'),
+    sousFamille:     findColIndex(headers, 'Sous famille'),
+    commentaire:     findColIndex(headers, 'Commentaire'),
+    photo:           findColIndex(headers, 'PHOTO ?'),
+    collectionId:    findColIndex(headers, 'ID FAMILLE'),
+    subCollectionId: findColIndex(headers, 'ID SOUS FAMILLE'),
+  }
+
+  const get = (row: string[], i: number) => (i >= 0 ? (row[i] ?? '').trim() : '')
+
+  return rows
+    .map((row, rowIdx): PendingProduct | null => {
+      const id = get(row, idx.id)
+      const publie = get(row, idx.publie)
+      if (id !== '' || publie !== '1') return null
+      return {
+        tab,
+        rowNumber: rowIdx + 2,
+        sku: get(row, idx.sku),
+        title: get(row, idx.nom),
+        priceMarket: get(row, idx.prixMarche).replace(',', '.'),
+        priceActual: get(row, idx.prixRemise).replace(',', '.'),
+        stock: parseInt(get(row, idx.stock) || '0', 10) || 0,
+        weightKg: parseFloat(get(row, idx.poids).replace(',', '.') || '0') || 0,
+        vendor: get(row, idx.marque),
+        famille: get(row, idx.famille),
+        sousFamille: get(row, idx.sousFamille),
+        comment: get(row, idx.commentaire),
+        collectionId: get(row, idx.collectionId),
+        subCollectionId: get(row, idx.subCollectionId),
+        hasPhoto: get(row, idx.photo) !== '',
+        specificFields: extractSpecificFields(headers, row),
+      }
+    })
+    .filter((p): p is PendingProduct => p !== null)
+}
+
+export async function fetchPendingProducts(
+  alreadyCreatedRows: Set<string>,
+): Promise<PendingProduct[]> {
+  const apiKey = process.env.GOOGLE_API_KEY
+  const sheetId = process.env.GOOGLE_SHEETS_ID
+  if (!apiKey || !sheetId) throw new Error('GOOGLE_API_KEY et GOOGLE_SHEETS_ID requis')
+
+  const metaRes = await fetch(
+    `https://sheets.googleapis.com/v4/spreadsheets/${sheetId}?key=${apiKey}&fields=sheets.properties.title`,
+  )
+  if (!metaRes.ok) throw new Error(`Sheets metadata error: ${metaRes.status}`)
+  const meta = await metaRes.json()
+  const tabs: string[] = (meta.sheets as Array<{ properties: { title: string } }>).map(
+    s => s.properties.title,
+  )
+
+  const all: PendingProduct[] = []
+  for (const tab of tabs) {
+    const range = encodeURIComponent(`${tab}!A1:BZ`)
+    const res = await fetch(
+      `https://sheets.googleapis.com/v4/spreadsheets/${sheetId}/values/${range}?key=${apiKey}`,
+    )
+    if (!res.ok) continue
+    const data = await res.json()
+    const rows = (data.values ?? []) as string[][]
+    if (rows.length < 2) continue
+    const [headers, ...dataRows] = rows
+    const pending = parseTabRows(tab, headers, dataRows).filter(
+      p => !alreadyCreatedRows.has(`${p.tab}:${p.rowNumber}`),
+    )
+    all.push(...pending)
+  }
+  return all
+}

src/lib/googleSheets.ts

@@ -0,0 +1,84 @@
+import type { SyncProduct } from '@/types/sync'
+
+function normalizeHandle(ref: string): string {
+  return ref
+    .toLowerCase()
+    .replace(/[^a-z0-9]+/g, '-')
+    .replace(/^-+|-+$/g, '')
+}
+
+/**
+ * Parse des lignes brutes Google Sheets en SyncProduct[].
+ * Colonnes : A=Référence, B=Nom, C=Description, D=Prix, E=Stock, F=Statut
+ * Exporté pour les tests unitaires.
+ */
+export function parseSheetRows(rows: string[][]): SyncProduct[] {
+  return rows
+    .map((row): SyncProduct | null => {
+      const ref = row[0]?.trim()
+      if (!ref) return null
+
+      const rawPrice = (row[3] ?? '').replace(',', '.').trim()
+      const price = parseFloat(rawPrice || '0')
+
+      return {
+        ref,
+        handle: normalizeHandle(ref),
+        title: row[1]?.trim() || ref,
+        description: row[2]?.trim() || '',
+        price: isNaN(price) ? '0.00' : price.toFixed(2),
+        stock: parseInt(row[4] ?? '0', 10) || 0,
+        status: (row[5] ?? '').toLowerCase().includes('inac') ? 'draft' : 'active',
+      }
+    })
+    .filter((p): p is SyncProduct => p !== null)
+}
+
+/**
+ * Lit tous les produits depuis Google Sheets via l'API v4 (API Key publique).
+ * Si GOOGLE_SHEETS_TAB est défini, lit uniquement cet onglet.
+ * Sinon, lit tous les onglets du fichier et combine les produits.
+ * Le fichier Sheets doit être partagé en lecture ("Toute personne avec le lien").
+ */
+export async function readSheetProducts(): Promise<SyncProduct[]> {
+  const apiKey = process.env.GOOGLE_API_KEY
+  const sheetId = process.env.GOOGLE_SHEETS_ID
+  const singleTab = process.env.GOOGLE_SHEETS_TAB
+
+  if (!apiKey || !sheetId) {
+    throw new Error('Variables GOOGLE_API_KEY et GOOGLE_SHEETS_ID requises')
+  }
+
+  const sheetNames = singleTab ? [singleTab] : await listSheetTabs(sheetId, apiKey)
+
+  const results = await Promise.all(
+    sheetNames.map((name) => readOneTab(sheetId, apiKey, name)),
+  )
+
+  return results.flat()
+}
+
+async function listSheetTabs(sheetId: string, apiKey: string): Promise<string[]> {
+  const url = `https://sheets.googleapis.com/v4/spreadsheets/${sheetId}?key=${apiKey}&fields=sheets.properties.title`
+  const res = await fetch(url)
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Google Sheets API error: ${res.status} — ${err}`)
+  }
+  const data = await res.json()
+  return (data.sheets as Array<{ properties: { title: string } }>).map(
+    (s) => s.properties.title,
+  )
+}
+
+async function readOneTab(sheetId: string, apiKey: string, sheetName: string): Promise<SyncProduct[]> {
+  const range = encodeURIComponent(`${sheetName}!A2:F`)
+  const url = `https://sheets.googleapis.com/v4/spreadsheets/${sheetId}/values/${range}?key=${apiKey}`
+  const res = await fetch(url)
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Google Sheets API error (onglet "${sheetName}"): ${res.status} — ${err}`)
+  }
+  const data = await res.json()
+  return parseSheetRows((data.values ?? []) as string[][])
+}

src/lib/openaiClient.test.ts

@@ -0,0 +1,46 @@
+import { generateDescriptions } from './openaiClient'
+
+const mockFetch = jest.fn()
+global.fetch = mockFetch
+
+const mockResponse = (content: string) => ({
+  ok: true,
+  json: async () => ({ choices: [{ message: { content } }] }),
+})
+
+describe('generateDescriptions', () => {
+  beforeEach(() => {
+    process.env.OPENAI_API_KEY = 'sk-test'
+    mockFetch.mockReset()
+  })
+
+  it('retourne shortDesc et longDesc depuis OpenAI', async () => {
+    mockFetch
+      .mockResolvedValueOnce(mockResponse('<p>Description courte</p>'))
+      .mockResolvedValueOnce(mockResponse('<p>Description longue</p>'))
+    const result = await generateDescriptions({
+      title: 'Perceuse', rawDescription: 'Une perceuse', comment: '', vendor: 'BOSCH', famille: 'OUTILLAGE',
+    })
+    expect(result.shortDesc).toBe('<p>Description courte</p>')
+    expect(result.longDesc).toBe('<p>Description longue</p>')
+    expect(mockFetch).toHaveBeenCalledTimes(2)
+  })
+
+  it('lance les deux requêtes en parallèle', async () => {
+    mockFetch.mockResolvedValue(mockResponse('<p>ok</p>'))
+    await generateDescriptions({ title: 'T', rawDescription: '', comment: '', vendor: '', famille: '' })
+    expect(mockFetch).toHaveBeenCalledTimes(2)
+  })
+
+  it('lance une erreur si OPENAI_API_KEY manquant', async () => {
+    delete process.env.OPENAI_API_KEY
+    await expect(generateDescriptions({ title: 'T', rawDescription: '', comment: '', vendor: '', famille: '' }))
+      .rejects.toThrow('OPENAI_API_KEY')
+  })
+
+  it('lance une erreur si la réponse OpenAI est non-ok', async () => {
+    mockFetch.mockResolvedValue({ ok: false, status: 429, text: async () => 'rate limited' })
+    await expect(generateDescriptions({ title: 'T', rawDescription: '', comment: '', vendor: '', famille: '' }))
+      .rejects.toThrow('429')
+  })
+})

src/lib/openaiClient.ts

@@ -0,0 +1,46 @@
+interface DescriptionInput {
+  title: string
+  rawDescription: string
+  comment: string
+  vendor: string
+  famille: string
+}
+
+interface Descriptions {
+  shortDesc: string
+  longDesc: string
+}
+
+async function callOpenAI(prompt: string): Promise<string> {
+  const apiKey = process.env.OPENAI_API_KEY
+  if (!apiKey) throw new Error('OPENAI_API_KEY requis')
+  const res = await fetch('https://api.openai.com/v1/chat/completions', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${apiKey}` },
+    body: JSON.stringify({ model: 'gpt-4o', messages: [{ role: 'user', content: prompt }], temperature: 0.7 }),
+  })
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`OpenAI API error: ${res.status} — ${err}`)
+  }
+  const data = await res.json()
+  return (data.choices?.[0]?.message?.content ?? '').trim()
+}
+
+function buildPrompt(input: DescriptionInput, length: number): string {
+  return `A partir des caractéristiques suivantes, crée un texte descriptif de ${length} caractères en faisant attention au SEO pour qu'il soit en rapport avec la catégorie ${input.famille} et le produit ${input.title} :
+Nom = ${input.title}
+Description : ${input.rawDescription}
+Commentaire : ${input.comment}
+Marque : ${input.vendor}
+Formate ce texte en HTML.
+Ta réponse doit commencer directement par une balise HTML (comme <p> ou <h1>), sans bloc \`\`\`html, sans aucun mot ou encadré autour.`
+}
+
+export async function generateDescriptions(input: DescriptionInput): Promise<Descriptions> {
+  const [shortDesc, longDesc] = await Promise.all([
+    callOpenAI(buildPrompt(input, 400)),
+    callOpenAI(buildPrompt(input, 1000)),
+  ])
+  return { shortDesc, longDesc }
+}

src/lib/prisma.ts

@@ -0,0 +1,23 @@
+import { PrismaClient } from '@prisma/client'
+import { PrismaBetterSqlite3 } from '@prisma/adapter-better-sqlite3'
+import path from 'path'
+
+function createPrismaClient() {
+  const dbUrl = process.env.DATABASE_URL ?? 'file:./data/dev.db'
+  // Parse the file path from "file:./data/dev.db" format
+  const dbPath = dbUrl.startsWith('file:')
+    ? path.resolve(process.cwd(), dbUrl.slice('file:'.length))
+    : dbUrl
+
+  const adapter = new PrismaBetterSqlite3({ url: dbPath })
+  return new PrismaClient({
+    adapter,
+    log: process.env.NODE_ENV === 'development' ? ['error'] : [],
+  })
+}
+
+const globalForPrisma = globalThis as unknown as { prisma: PrismaClient }
+
+export const prisma = globalForPrisma.prisma ?? createPrismaClient()
+
+if (process.env.NODE_ENV !== 'production') globalForPrisma.prisma = prisma

src/lib/rate-limit.ts

@@ -0,0 +1,32 @@
+const MAX_ATTEMPTS = 5
+const BLOCK_DURATION_MS = 15 * 60 * 1000 // 15 minutes
+
+type Entry = { count: number; blockedAt: number | null }
+let attempts = new Map<string, Entry>()
+
+export function checkRateLimit(key: string): boolean {
+  const now = Date.now()
+  const entry = attempts.get(key)
+  if (!entry) return true
+  if (entry.blockedAt !== null) {
+    if (now - entry.blockedAt < BLOCK_DURATION_MS) return false
+    attempts.delete(key)
+  }
+  return true
+}
+
+export function recordFailedAttempt(key: string): void {
+  const entry = attempts.get(key) ?? { count: 0, blockedAt: null }
+  entry.count += 1
+  if (entry.count >= MAX_ATTEMPTS) entry.blockedAt = Date.now()
+  attempts.set(key, entry)
+}
+
+export function clearAttempts(key: string): void {
+  attempts.delete(key)
+}
+
+/** Réinitialisation pour les tests uniquement */
+export function _resetForTests(): void {
+  attempts = new Map()
+}

src/lib/shopify.ts

@@ -0,0 +1,83 @@
+const API_VERSION = '2024-01'
+
+function getConfig() {
+  const domain = process.env.SHOPIFY_STORE_DOMAIN
+  const token = process.env.SHOPIFY_ADMIN_API_TOKEN
+  if (!domain || !token) {
+    throw new Error('SHOPIFY_STORE_DOMAIN et SHOPIFY_ADMIN_API_TOKEN requis')
+  }
+  return {
+    baseUrl: `https://${domain}/admin/api/${API_VERSION}`,
+    headers: {
+      'X-Shopify-Access-Token': token,
+      'Content-Type': 'application/json',
+    },
+  }
+}
+
+export type ShopifyProductResult =
+  | { found: false }
+  | { found: true; shopifyId: string; title: string }
+
+/**
+ * Recherche un produit Shopify par sa référence.
+ * Tente d'abord par handle (ex: "ref-1042"), puis par titre exact.
+ */
+export async function searchProductByRef(ref: string): Promise<ShopifyProductResult> {
+  const { baseUrl, headers } = getConfig()
+
+  // Normalise la référence en handle Shopify (minuscules, tirets)
+  const handle = ref.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '')
+
+  const tryFetch = async (params: string) => {
+    const res = await fetch(`${baseUrl}/products.json?${params}&fields=id,title,handle&limit=1`, { headers })
+    if (!res.ok) throw new Error(`Shopify API error: ${res.status}`)
+    const data = await res.json()
+    return (data.products ?? []) as Array<{ id: number; title: string; handle: string }>
+  }
+
+  let products = await tryFetch(`handle=${encodeURIComponent(handle)}`)
+
+  if (products.length === 0) {
+    products = await tryFetch(`title=${encodeURIComponent(ref)}`)
+  }
+
+  if (products.length === 0) return { found: false }
+
+  return {
+    found: true,
+    shopifyId: String(products[0].id),
+    title: products[0].title,
+  }
+}
+
+/**
+ * Upload une image (base64) vers un produit Shopify via l'API REST.
+ * @param shopifyProductId — ID numérique du produit (string)
+ * @param imageBase64 — contenu JPEG encodé en base64 (sans le préfixe data:)
+ * @param filename — nom de fichier avec extension (ex: "REF-1042.jpg")
+ */
+export async function uploadProductImage(
+  shopifyProductId: string,
+  imageBase64: string,
+  filename: string,
+): Promise<{ url: string }> {
+  const { baseUrl, headers } = getConfig()
+
+  const res = await fetch(`${baseUrl}/products/${shopifyProductId}/images.json`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({ image: { attachment: imageBase64, filename } }),
+  })
+
+  if (!res.ok) {
+    const body = await res.text()
+    throw new Error(`Shopify upload error: ${res.status} — ${body}`)
+  }
+
+  const data = await res.json()
+  if (!data.image?.src) {
+    throw new Error('Shopify response invalide : champ image.src manquant')
+  }
+  return { url: data.image.src as string }
+}

src/lib/shopifyCollections.ts

@@ -0,0 +1,27 @@
+const API_VERSION = '2024-01'
+
+function getConfig() {
+  const domain = process.env.SHOPIFY_STORE_DOMAIN
+  const token = process.env.SHOPIFY_ADMIN_API_TOKEN
+  if (!domain || !token) throw new Error('SHOPIFY_STORE_DOMAIN et SHOPIFY_ADMIN_API_TOKEN requis')
+  return {
+    baseUrl: `https://${domain}/admin/api/${API_VERSION}`,
+    headers: { 'X-Shopify-Access-Token': token, 'Content-Type': 'application/json' },
+  }
+}
+
+export async function addProductToCollection(shopifyProductId: string, collectionId: string): Promise<void> {
+  if (!collectionId?.trim()) return
+  const { baseUrl, headers } = getConfig()
+  const res = await fetch(`${baseUrl}/collects.json`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({ collect: { product_id: shopifyProductId, collection_id: collectionId } }),
+  })
+  if (!res.ok) {
+    const err = await res.text()
+    if (!err.includes('already') && !err.includes('taken')) {
+      throw new Error(`Shopify addToCollection error: ${res.status} — ${err}`)
+    }
+  }
+}

src/lib/shopifyMetafields.test.ts

@@ -0,0 +1,40 @@
+import { normalizeMetafieldKey, matchMetafields } from './shopifyMetafields'
+import type { MetafieldDefinition } from '@/types/creation'
+
+describe('normalizeMetafieldKey', () => {
+  it('minuscules + accents retirés', () => {
+    expect(normalizeMetafieldKey('Éclairage LED')).toBe('eclairage_led')
+  })
+  it('parenthèses et espaces → underscore', () => {
+    expect(normalizeMetafieldKey('Puissance (AN)')).toBe('puissance_an')
+  })
+  it('limité à 30 caractères', () => {
+    const long = 'a'.repeat(40)
+    expect(normalizeMetafieldKey(long)).toHaveLength(30)
+  })
+  it('underscores multiples réduits à un', () => {
+    expect(normalizeMetafieldKey('Poids  par  carton')).toBe('poids_par_carton')
+  })
+})
+
+describe('matchMetafields', () => {
+  const definitions: MetafieldDefinition[] = [
+    { id: '1', namespace: 'custom', key: 'puissance_an', name: 'Puissance (AN)', type: 'single_line_text_field' },
+    { id: '2', namespace: 'custom', key: 'coloris', name: 'Coloris', type: 'single_line_text_field' },
+  ]
+
+  it('trouve une correspondance exacte sur la clé normalisée', () => {
+    const result = matchMetafields(['Puissance (AN)', 'Batterie (AP)'], definitions)
+    expect(result.matched['Puissance (AN)'].existingDefinitionId).toBe('1')
+  })
+
+  it('met les colonnes sans correspondance dans unmatched', () => {
+    const result = matchMetafields(['Puissance (AN)', 'Batterie (AP)'], definitions)
+    expect(result.unmatched).toContain('Batterie (AP)')
+  })
+
+  it('ne met pas en unmatched les colonnes qui ont un match', () => {
+    const result = matchMetafields(['Puissance (AN)'], definitions)
+    expect(result.unmatched).not.toContain('Puissance (AN)')
+  })
+})

src/lib/shopifyMetafields.ts

@@ -0,0 +1,104 @@
+import type { MetafieldDefinition, MetafieldResolution } from '@/types/creation'
+
+const API_VERSION = '2024-01'
+
+function getConfig() {
+  const domain = process.env.SHOPIFY_STORE_DOMAIN
+  const token = process.env.SHOPIFY_ADMIN_API_TOKEN
+  if (!domain || !token) throw new Error('SHOPIFY_STORE_DOMAIN et SHOPIFY_ADMIN_API_TOKEN requis')
+  return {
+    baseUrl: `https://${domain}/admin/api/${API_VERSION}`,
+    headers: { 'X-Shopify-Access-Token': token, 'Content-Type': 'application/json' },
+  }
+}
+
+export function normalizeMetafieldKey(header: string): string {
+  return header
+    .toLowerCase()
+    .normalize('NFD')
+    .replace(/[̀-ͯ]/g, '')  // retire les accents
+    .replace(/[^a-z0-9]+/g, '_')
+    .replace(/^_+|_+$/g, '')
+    .replace(/_+/g, '_')
+    .substring(0, 30)
+}
+
+export interface MatchResult {
+  matched: Record<string, MetafieldResolution>
+  unmatched: string[]
+}
+
+export function matchMetafields(columnHeaders: string[], definitions: MetafieldDefinition[]): MatchResult {
+  const matched: Record<string, MetafieldResolution> = {}
+  const unmatched: string[] = []
+  for (const header of columnHeaders) {
+    const key = normalizeMetafieldKey(header)
+    const def = definitions.find(d => d.key === key)
+    if (def) {
+      matched[header] = { columnHeader: header, action: 'map', namespace: def.namespace, key: def.key, existingDefinitionId: def.id }
+    } else {
+      unmatched.push(header)
+    }
+  }
+  return { matched, unmatched }
+}
+
+export async function fetchMetafieldDefinitions(): Promise<MetafieldDefinition[]> {
+  const { baseUrl, headers } = getConfig()
+  const res = await fetch(`${baseUrl}/metafield_definitions.json?owner_type=PRODUCT&limit=250`, { headers })
+  if (!res.ok) throw new Error(`Shopify metafield definitions error: ${res.status}`)
+  const data = await res.json()
+  return (data.metafield_definitions ?? []).map((d: {
+    id: string | number; namespace: string; key: string; name: string; type: { name: string } | string
+  }) => ({
+    id: String(d.id),
+    namespace: d.namespace,
+    key: d.key,
+    name: d.name,
+    type: typeof d.type === 'string' ? d.type : d.type?.name ?? 'single_line_text_field',
+  }))
+}
+
+export async function ensureMetafieldDefinition(resolution: MetafieldResolution): Promise<void> {
+  if (resolution.action !== 'create') return
+  const { baseUrl, headers } = getConfig()
+  const res = await fetch(`${baseUrl}/metafield_definitions.json`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({
+      metafield_definition: {
+        namespace: resolution.namespace,
+        key: resolution.key,
+        name: resolution.columnHeader,
+        type: 'single_line_text_field',
+        owner_type: 'PRODUCT',
+      },
+    }),
+  })
+  if (!res.ok) {
+    const err = await res.text()
+    if (!err.includes('taken') && !err.includes('already')) {
+      throw new Error(`Shopify create metafield definition error: ${res.status} — ${err}`)
+    }
+  }
+}
+
+export async function setProductMetafield(
+  shopifyProductId: string,
+  resolution: MetafieldResolution,
+  value: string,
+): Promise<void> {
+  if (resolution.action === 'skip' || !value.trim()) return
+  const { baseUrl, headers } = getConfig()
+  const res = await fetch(`${baseUrl}/products/${shopifyProductId}/metafields.json`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({
+      metafield: { namespace: resolution.namespace, key: resolution.key, value, type: 'single_line_text_field' },
+    }),
+  })
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Shopify set metafield error: ${res.status} — ${err}`)
+  }
+}

src/lib/shopifySync.ts

@@ -0,0 +1,179 @@
+import type { ShopifyProductFull, SyncProduct } from '@/types/sync'
+
+const API_VERSION = '2024-01'
+
+function getConfig() {
+  const domain = process.env.SHOPIFY_STORE_DOMAIN
+  const token = process.env.SHOPIFY_ADMIN_API_TOKEN
+  if (!domain || !token) {
+    throw new Error('SHOPIFY_STORE_DOMAIN et SHOPIFY_ADMIN_API_TOKEN requis')
+  }
+  return {
+    baseUrl: `https://${domain}/admin/api/${API_VERSION}`,
+    headers: {
+      'X-Shopify-Access-Token': token,
+      'Content-Type': 'application/json',
+    },
+  }
+}
+
+interface ShopifyVariant {
+  id: number
+  price: string
+  sku: string
+  inventory_quantity: number
+}
+
+interface ShopifyAPIProduct {
+  id: number
+  title: string
+  handle: string
+  body_html: string
+  status: string
+  variants: ShopifyVariant[]
+}
+
+function toSyncProduct(p: ShopifyAPIProduct): ShopifyProductFull {
+  return {
+    shopifyId: String(p.id),
+    ref: p.variants[0]?.sku || p.handle,
+    handle: p.handle,
+    title: p.title,
+    description: p.body_html ?? '',
+    price: p.variants[0]?.price ?? '0.00',
+    stock: p.variants[0]?.inventory_quantity ?? 0,
+    status: p.status === 'active' ? 'active' : 'draft',
+  }
+}
+
+function extractNextUrl(linkHeader: string | null): string | null {
+  if (!linkHeader) return null
+  const match = linkHeader.match(/<([^>]+)>;\s*rel="next"/)
+  return match ? match[1] : null
+}
+
+/**
+ * Récupère tous les produits Shopify (actifs + drafts), en paginant.
+ * L'API REST ne supporte pas status=any — on fait deux passes (active + draft).
+ */
+export async function fetchAllShopifyProducts(): Promise<ShopifyProductFull[]> {
+  const [active, draft] = await Promise.all([
+    fetchByStatus('active'),
+    fetchByStatus('draft'),
+  ])
+  return [...active, ...draft]
+}
+
+async function fetchByStatus(status: 'active' | 'draft'): Promise<ShopifyProductFull[]> {
+  const { baseUrl, headers } = getConfig()
+  const all: ShopifyProductFull[] = []
+
+  let url: string | null =
+    `${baseUrl}/products.json?limit=250&fields=id,title,handle,status,body_html,variants&status=${status}`
+
+  while (url) {
+    const res = await fetch(url, { headers })
+    if (!res.ok) throw new Error(`Shopify fetch error (${status}): ${res.status}`)
+    const data = await res.json()
+    all.push(...(data.products as ShopifyAPIProduct[]).map(toSyncProduct))
+    url = extractNextUrl(res.headers.get('Link'))
+  }
+
+  return all
+}
+
+/**
+ * Crée un nouveau produit Shopify depuis un SyncProduct.
+ * Retourne l'ID Shopify créé.
+ */
+export async function createShopifyProduct(product: SyncProduct): Promise<string> {
+  const { baseUrl, headers } = getConfig()
+
+  const body = {
+    product: {
+      title: product.title,
+      body_html: product.description,
+      handle: product.handle,
+      status: product.status,
+      variants: [{ price: product.price, sku: product.ref }],
+    },
+  }
+
+  const res = await fetch(`${baseUrl}/products.json`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify(body),
+  })
+
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Shopify createProduct error: ${res.status} — ${err}`)
+  }
+
+  const data = await res.json()
+  return String(data.product.id)
+}
+
+/**
+ * Met à jour un produit Shopify existant (titre, description, prix, statut).
+ */
+export async function updateShopifyProduct(
+  shopifyId: string,
+  product: SyncProduct,
+  variantId: string,
+): Promise<void> {
+  const { baseUrl, headers } = getConfig()
+
+  const body = {
+    product: {
+      id: shopifyId,
+      title: product.title,
+      body_html: product.description,
+      status: product.status,
+      variants: [{ id: variantId, price: product.price }],
+    },
+  }
+
+  const res = await fetch(`${baseUrl}/products/${shopifyId}.json`, {
+    method: 'PUT',
+    headers,
+    body: JSON.stringify(body),
+  })
+
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Shopify updateProduct error: ${res.status} — ${err}`)
+  }
+}
+
+/**
+ * Passe un produit Shopify en draft (désactivation — jamais de suppression).
+ */
+export async function deactivateShopifyProduct(shopifyId: string): Promise<void> {
+  const { baseUrl, headers } = getConfig()
+
+  const res = await fetch(`${baseUrl}/products/${shopifyId}.json`, {
+    method: 'PUT',
+    headers,
+    body: JSON.stringify({ product: { id: shopifyId, status: 'draft' } }),
+  })
+
+  if (!res.ok) {
+    const err = await res.text()
+    throw new Error(`Shopify deactivateProduct error: ${res.status} — ${err}`)
+  }
+}
+
+/**
+ * Récupère l'ID de la première variante d'un produit Shopify.
+ * Nécessaire pour mettre à jour le prix (update variant).
+ */
+export async function getFirstVariantId(shopifyId: string): Promise<string> {
+  const { baseUrl, headers } = getConfig()
+  const res = await fetch(`${baseUrl}/products/${shopifyId}/variants.json?limit=1`, { headers })
+  if (!res.ok) throw new Error(`Shopify getVariants error: ${res.status}`)
+  const data = await res.json()
+  const variant = data.variants?.[0]
+  if (!variant) throw new Error(`Aucune variante pour le produit ${shopifyId}`)
+  return String(variant.id)
+}

src/lib/syncDiff.ts

@@ -0,0 +1,65 @@
+import type { SyncProduct, ShopifyProductFull, SyncChange, DiffResult } from '@/types/sync'
+
+const COMPARABLE_FIELDS = ['title', 'description', 'price', 'status'] as const
+
+function getChangedFields(
+  sheet: SyncProduct,
+  shopify: ShopifyProductFull,
+): Array<{ field: string; from: string; to: string }> {
+  return COMPARABLE_FIELDS
+    .filter((field) => sheet[field] !== shopify[field])
+    .map((field) => ({
+      field,
+      from: String(shopify[field]),
+      to: String(sheet[field]),
+    }))
+}
+
+/**
+ * Calcule le diff entre les produits Sheets et Shopify.
+ * Matching par handle (ref normalisée).
+ */
+export function computeDiff(
+  sheetProducts: SyncProduct[],
+  shopifyProducts: ShopifyProductFull[],
+): DiffResult {
+  const shopifyMap = new Map(shopifyProducts.map((p) => [p.handle, p]))
+  const sheetHandles = new Set(sheetProducts.map((p) => p.handle))
+
+  const changes: SyncChange[] = []
+
+  for (const sheet of sheetProducts) {
+    const shopify = shopifyMap.get(sheet.handle)
+    if (!shopify) {
+      changes.push({ type: 'create', ref: sheet.ref, sheetProduct: sheet })
+    } else {
+      const changedFields = getChangedFields(sheet, shopify)
+      if (changedFields.length > 0) {
+        changes.push({
+          type: 'update',
+          ref: sheet.ref,
+          sheetProduct: sheet,
+          shopifyProduct: shopify,
+          changedFields,
+        })
+      } else {
+        changes.push({ type: 'unchanged', ref: sheet.ref, sheetProduct: sheet, shopifyProduct: shopify })
+      }
+    }
+  }
+
+  for (const shopify of shopifyProducts) {
+    if (shopify.status === 'active' && !sheetHandles.has(shopify.handle)) {
+      changes.push({ type: 'deactivate', ref: shopify.ref, shopifyProduct: shopify })
+    }
+  }
+
+  const summary = {
+    create: changes.filter((c) => c.type === 'create').length,
+    update: changes.filter((c) => c.type === 'update').length,
+    deactivate: changes.filter((c) => c.type === 'deactivate').length,
+    unchanged: changes.filter((c) => c.type === 'unchanged').length,
+  }
+
+  return { changes, summary }
+}

src/middleware.ts

@@ -0,0 +1,27 @@
+import { withAuth } from 'next-auth/middleware'
+import { NextResponse } from 'next/server'
+
+export default withAuth(
+  function middleware(req) {
+    const { token } = req.nextauth
+    const { pathname } = req.nextUrl
+
+    // Seuls les admins accèdent à /parametres
+    if (pathname.startsWith('/parametres') && token?.role !== 'admin') {
+      return NextResponse.redirect(new URL('/', req.url))
+    }
+
+    return NextResponse.next()
+  },
+  {
+    callbacks: {
+      authorized: ({ token }) => !!token,
+    },
+  }
+)
+
+export const config = {
+  matcher: [
+    '/((?!login|api/auth|_next/static|_next/image|favicon\\.ico).*)',
+  ],
+}

src/types/creation.ts

@@ -0,0 +1,57 @@
+/** Un produit en attente de création, extrait d'un onglet Sheets */
+export interface PendingProduct {
+  tab: string           // nom de l'onglet (famille)
+  rowNumber: number     // numéro de ligne 1-indexé dans le sheet
+  sku: string           // UGS
+  title: string         // Nom
+  priceMarket: string   // Prix marché (compare_at_price), ex: "29.99"
+  priceActual: string   // Prix remisé (price), ex: "19.99"
+  stock: number
+  weightKg: number
+  vendor: string        // Marque
+  famille: string       // Famille (contexte IA)
+  sousFamille: string
+  comment: string       // Commentaire
+  collectionId: string  // ID FAMILLE → collection Shopify
+  subCollectionId: string // ID SOUS FAMILLE
+  hasPhoto: boolean
+  specificFields: Record<string, string> // header → valeur pour les métachamps
+}
+
+/** Définition de métachamp existante dans Shopify */
+export interface MetafieldDefinition {
+  id: string            // ex: "123"
+  namespace: string     // ex: "custom"
+  key: string           // ex: "puissance"
+  name: string          // ex: "Puissance"
+  type: string          // ex: "single_line_text_field"
+}
+
+/** Résolution d'une colonne spécifique vers un métachamp */
+export interface MetafieldResolution {
+  columnHeader: string            // en-tête colonne Sheets, ex: "Puissance (AN)"
+  action: 'create' | 'map' | 'skip'
+  namespace: string               // "custom" par défaut
+  key: string                     // clé normalisée
+  existingDefinitionId?: string   // si action === 'map'
+}
+
+/** Événement streamé par /api/creation/execute */
+export type CreationStreamEvent =
+  | { type: 'progress'; current: number; total: number; tab: string; title: string; step: string }
+  | { type: 'error'; title: string; message: string }
+  | { type: 'done'; summary: { created: number; errors: number; status: 'success' | 'partial' | 'error' } }
+
+/** Résumé d'une création (stocké en DB) */
+export interface CreationRecord {
+  id: string
+  createdAt: string
+  userName: string
+  sheetTab: string
+  sheetRow: number
+  shopifyId: string
+  sku: string
+  title: string
+  status: 'success' | 'error'
+  errorMessage?: string
+}

src/types/images.ts

@@ -0,0 +1,40 @@
+export type ImageStatus =
+  | 'pending'      // ajouté, pas encore traité
+  | 'converting'   // HEIC → JPEG en cours
+  | 'processing'   // détourage IA en cours
+  | 'searching'    // recherche produit Shopify en cours
+  | 'ready'        // prêt à uploader
+  | 'uploading'    // upload Shopify en cours
+  | 'uploaded'     // uploadé avec succès
+  | 'not_found'    // référence produit introuvable dans Shopify
+  | 'error'        // erreur à n'importe quelle étape
+
+export interface ImageProgress {
+  key: string
+  percent: number
+}
+
+export interface ImageItem {
+  id: string
+  filename: string             // nom de fichier original (ex: "REF-1042.heic")
+  ref: string                  // référence produit extraite (ex: "REF-1042")
+  originalBlob: Blob           // image originale (pour la vue "avant")
+  rawPngBlob: Blob | null      // PNG transparent issu du détourage IA (cache pour feather)
+  processedBlob: Blob | null   // JPEG final sur fond blanc, pivoté (pour upload + vue "après")
+  rotation: number             // 0, 90, 180, 270
+  feather: number              // 0–5, défaut 2
+  shopifyProductId: string | null
+  shopifyProductTitle: string | null
+  uploadedUrl: string | null
+  status: ImageStatus
+  error: string | null
+  progress: ImageProgress | null
+}
+
+export interface ZipEntry {
+  folder: string    // nom du dossier = référence produit
+  filename: string  // nom de fichier dans le dossier
+  ext: string       // extension sans point, en minuscules
+  blob: Blob        // blob avec type MIME correct
+  isHeic: boolean
+}

src/types/next-auth.d.ts

@@ -0,0 +1,17 @@
+import type { DefaultSession, DefaultJWT } from 'next-auth'
+
+declare module 'next-auth' {
+  interface Session {
+    user: DefaultSession['user'] & {
+      id: string
+      role: string
+    }
+  }
+}
+
+declare module 'next-auth/jwt' {
+  interface JWT extends DefaultJWT {
+    id: string
+    role: string
+  }
+}

src/types/products.ts

@@ -0,0 +1,25 @@
+// src/types/products.ts
+
+/** Produit Shopify simplifié pour affichage catalogue */
+export interface CatalogProduct {
+  shopifyId: string
+  ref: string        // SKU de la première variante
+  handle: string
+  title: string
+  price: string      // "29.99"
+  stock: number      // inventory_quantity variante 1
+  status: 'active' | 'draft' | 'archived'
+  shopifyUrl: string // https://materiaux-destock.myshopify.com/admin/products/<id>
+}
+
+/** Filtres appliqués à la liste */
+export interface ProductFilters {
+  status: 'all' | 'active' | 'draft'
+  search: string     // filtre titre ou ref (côté client)
+}
+
+/** Réponse de l'API /api/products/list */
+export interface ProductListResponse {
+  products: CatalogProduct[]
+  total: number
+}

src/types/sync.ts

@@ -0,0 +1,67 @@
+export type SyncChangeType = 'create' | 'update' | 'deactivate' | 'unchanged'
+
+/** Produit normalisé depuis Google Sheets */
+export interface SyncProduct {
+  ref: string          // ex: "REF-1042" (colonne A telle quelle)
+  handle: string       // ref normalisée en handle Shopify: "ref-1042"
+  title: string        // colonne B
+  description: string  // colonne C (texte brut, stocké en body_html)
+  price: string        // colonne D — "29.99" (2 décimales)
+  stock: number        // colonne E — info affichage uniquement (non synchronisé)
+  status: 'active' | 'draft'  // colonne F : "inactif"/"inactif" → draft, tout autre → active
+}
+
+/** Produit Shopify enrichi pour la comparaison */
+export interface ShopifyProductFull extends SyncProduct {
+  shopifyId: string    // ID numérique Shopify (string)
+}
+
+/** Un changement unitaire calculé par computeDiff */
+export interface SyncChange {
+  type: SyncChangeType
+  ref: string
+  sheetProduct?: SyncProduct           // présent pour create + update
+  shopifyProduct?: ShopifyProductFull  // présent pour update + deactivate
+  changedFields?: Array<{              // présent pour update uniquement
+    field: string
+    from: string
+    to: string
+  }>
+}
+
+/** Résultat complet du diff */
+export interface DiffResult {
+  changes: SyncChange[]
+  summary: {
+    create: number
+    update: number
+    deactivate: number
+    unchanged: number
+  }
+}
+
+/** Une entrée du log d'exécution */
+export interface SyncLogEntry {
+  ref: string
+  action: 'create' | 'update' | 'deactivate'
+  status: 'success' | 'error'
+  message: string
+}
+
+/** Un événement NDJSON streamé par /api/sync/execute */
+export type SyncStreamEvent =
+  | { type: 'progress'; current: number; total: number; message: string }
+  | { type: 'done'; summary: { created: number; updated: number; deactivated: number; errors: number; status: 'success' | 'partial' | 'error' } }
+
+/** Une entrée d'historique (depuis SyncRun Prisma) */
+export interface SyncHistoryEntry {
+  id: string
+  createdAt: string     // ISO string
+  userName: string
+  status: 'success' | 'partial' | 'error'
+  created: number
+  updated: number
+  deactivated: number
+  errors: number
+  log: SyncLogEntry[]
+}