chore: stabilization, audit fixes and project synchronization

.env.example

@@ -12,13 +12,16 @@ WHATSAPP_APP_SECRET="your-meta-app-secret-for-hmac"
 # ─── PROVIDERS (GLOBAL FALLBACKS) ─────────────────────────────────────────────
 OPENAI_API_KEY="sk-..."
 GOOGLE_AI_API_KEY="AIza..."
-STRIPE_SECRET_KEY="sk_test_..."
-STRIPE_WEBHOOK_SECRET="whsec_..."
-STRIPE_PAAS_SUBSCRIPTION_PRICE_ID="price_..."
+# ORANGE_MONEY_API_KEY=""
+# WAVE_API_KEY=""
 
 # ─── INFRASTRUCTURE ───────────────────────────────────────────────────────────
 PORT=8080
 NODE_ENV="production"
+SENTRY_DSN=""   # optionnel — laisser vide pour désactiver
+CORS_ORIGINS="https://admin.xamle.studio,https://xamle.studio,https://edtechadmin.netlify.app"
+ADMIN_URL="https://edtechadmin.netlify.app"
+WHATSAPP_GRAPH_URL="https://graph.facebook.com/v18.0"
 VITE_CLIENT_URL="https://admin.xamle.studio"
 RAILWAY_INTERNAL_URL="http://whatsapp-worker.railway.internal:8082"
 RAILWAY_PUBLIC_URL="https://api.xamle.studio"

apps/admin/src/App.tsx

@@ -16,10 +16,13 @@ import LiveFeed from '@/pages/LiveFeed';
 import TrainingLab from '@/pages/TrainingLab';
 import ClientsManagementView from '@/pages/ClientsManagementView';
 import OnboardingWizard from '@/pages/OnboardingWizard';
+import ResetPasswordPage from '@/pages/ResetPasswordPage';
 import AnalyticsPage from '@/pages/AnalyticsPage';
-import ContactsPage from '@/pages/ContactsPage'; // Traditional CRM Module
-import ConversationalDashboard from '@/pages/ConversationalDashboard'; // Original AI Module
-import CrmConversationalDashboard from '@/pages/CrmConversationalDashboard'; // Specialized CRM AI Module
+import ContactsPage from '@/pages/ContactsPage';
+import ConversationalDashboard from '@/pages/ConversationalDashboard';
+import CrmConversationalDashboard from '@/pages/CrmConversationalDashboard';
+import KnowledgeBasePage from '@/pages/KnowledgeBasePage';
+import CampaignHistoryPage from '@/pages/CampaignHistoryPage';
 import { useTenant } from '@/lib/tenant';
 import { api } from '@/lib/api';
 
@@ -86,7 +89,9 @@ function AppShell() {
                 <Route path="/users" element={<UserListPage />} />
                 <Route path="/settings" element={<SettingsPage />} />
                 <Route path="/onboarding" element={<OnboardingWizard />} />
-                <Route path="/reset-password" element={<div className="p-8">Page de réinitialisation (À implémenter)</div>} />
+                <Route path="/reset-password" element={<ResetPasswordPage />} />
+                <Route path="/kb" element={<KnowledgeBasePage />} />
+                <Route path="/campaign-history" element={<CampaignHistoryPage />} />
             </Routes>
         </MainLayout>
     );

apps/admin/src/components/layouts/MainLayout.tsx

@@ -2,7 +2,7 @@ import React from 'react';
 import { Link } from 'react-router-dom';
 import { useAuth } from '@/lib/auth';
 import { useTenant } from '@/lib/tenant';
-import { BarChart2, TrendingUp, Users, BookOpen, Mic, Building2, Activity, Lightbulb } from 'lucide-react';
+import { BarChart2, TrendingUp, Users, BookOpen, Mic, Building2, Activity, Lightbulb, Database, Megaphone } from 'lucide-react';
 
 import RoleGuard from '@/components/RoleGuard';
 
@@ -24,6 +24,8 @@ export default function MainLayout({ children, isSuperAdmin, orgs }: MainLayoutP
         { to: '/', label: 'Dashboard', icon: <BarChart2 className="w-4 h-4" /> },
         { to: '/analytics', label: 'Statistiques', icon: <TrendingUp className="w-4 h-4 text-amber-500" /> },
         { to: '/contacts', label: 'Clients', icon: <Users className="w-4 h-4 text-blue-400" />, show: isCrmActive },
+        { to: '/campaign-history', label: 'Campagnes', icon: <Megaphone className="w-4 h-4 text-amber-500" />, show: isCrmActive },
+        { to: '/kb', label: 'Base de connaissance', icon: <Database className="w-4 h-4 text-violet-400" /> },
         { to: '/content', label: 'Parcours', icon: <BookOpen className="w-4 h-4" />, show: isEdTechActive },
         { to: '/live-feed', label: 'Modération', icon: <Mic className="w-4 h-4 text-emerald-500" />, show: isEdTechActive },
         { to: '/clients', label: 'Clients B2B', icon: <Building2 className="w-4 h-4 text-indigo-400" />, superOnly: true, show: isSuperAdminLocal },

apps/admin/src/pages/AIAgentSetup.tsx

@@ -1,18 +1,111 @@
+import React, { useState, useEffect } from 'react';
+import { useAuth } from '@/lib/auth';
+import { useTenant } from '@/lib/tenant';
 
-import React, { useState } from 'react';
+const TONES = ['Professionnel', 'Amical', 'Direct', 'Pédagogue'] as const;
+
+interface KbStats {
+    chunkCount: number;
+    hasKnowledgeBase: boolean;
+    knowledgeBaseUrl?: string;
+}
 
 export default function AIAgentSetup() {
-    const [status, setStatus] = useState<'IDLE' | 'UPLOADING' | 'SUCCESS'>('IDLE');
-
-    const handleFileUpload = (e: React.ChangeEvent<HTMLInputElement>) => {
-        if (!e.target.files?.[0]) return;
-        setStatus('UPLOADING');
-        // Simulating upload to R2 / Storage
-        setTimeout(() => {
-            setStatus('SUCCESS');
-        }, 2000);
+    const { token } = useAuth();
+    const { selectedOrgId } = useTenant();
+
+    const [uploadStatus, setUploadStatus] = useState<'IDLE' | 'UPLOADING' | 'SUCCESS' | 'ERROR'>('IDLE');
+    const [uploadError, setUploadError] = useState('');
+
+    const [role, setRole] = useState('');
+    const [selectedTone, setSelectedTone] = useState<string>('Professionnel');
+    const [saveStatus, setSaveStatus] = useState<'IDLE' | 'SAVING' | 'SAVED' | 'ERROR'>('IDLE');
+
+    const [kbStats, setKbStats] = useState<KbStats | null>(null);
+
+    const apiBase = import.meta.env.VITE_API_URL;
+
+    const fetchKbStats = async () => {
+        if (!token || !selectedOrgId) return;
+        try {
+            const res = await fetch(`${apiBase}/v1/organizations/${selectedOrgId}/kb-stats`, {
+                headers: { 'Authorization': `Bearer ${token}`, 'x-organization-id': selectedOrgId }
+            });
+            if (res.ok) setKbStats(await res.json());
+        } catch { /* non-bloquant */ }
     };
 
+    useEffect(() => {
+        fetchKbStats();
+    }, [token, selectedOrgId]);
+
+    const handleFileUpload = async (e: React.ChangeEvent<HTMLInputElement>) => {
+        const file = e.target.files?.[0];
+        if (!file || !token || !selectedOrgId) return;
+
+        setUploadStatus('UPLOADING');
+        setUploadError('');
+
+        const formData = new FormData();
+        formData.append('file', file);
+
+        try {
+            const res = await fetch(`${apiBase}/v1/organizations/${selectedOrgId}/upload-kb`, {
+                method: 'POST',
+                headers: { 'Authorization': `Bearer ${token}`, 'x-organization-id': selectedOrgId },
+                body: formData
+            });
+
+            if (res.ok) {
+                const data = await res.json();
+                setUploadStatus('SUCCESS');
+                setKbStats(prev => ({
+                    hasKnowledgeBase: true,
+                    knowledgeBaseUrl: data.url,
+                    chunkCount: prev?.chunkCount ?? 0
+                }));
+                // Refresh stats after a short delay (indexing is async)
+                setTimeout(fetchKbStats, 4000);
+            } else {
+                const err = await res.json().catch(() => ({}));
+                setUploadError(err.error || 'Erreur serveur');
+                setUploadStatus('ERROR');
+            }
+        } catch {
+            setUploadError('Erreur réseau');
+            setUploadStatus('ERROR');
+        }
+
+        // Reset input so the same file can be re-uploaded
+        e.target.value = '';
+    };
+
+    const handleSavePersonality = async () => {
+        if (!token || !selectedOrgId || !role.trim()) return;
+        setSaveStatus('SAVING');
+        try {
+            const res = await fetch(`${apiBase}/v1/organizations/${selectedOrgId}/personality`, {
+                method: 'PATCH',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'Authorization': `Bearer ${token}`,
+                    'x-organization-id': selectedOrgId
+                },
+                body: JSON.stringify({
+                    botName: 'Agent IA',
+                    coreMission: role,
+                    toneDescription: selectedTone
+                })
+            });
+            setSaveStatus(res.ok ? 'SAVED' : 'ERROR');
+            if (res.ok) setTimeout(() => setSaveStatus('IDLE'), 3000);
+        } catch {
+            setSaveStatus('ERROR');
+        }
+    };
+
+    const wordCount = kbStats ? kbStats.chunkCount * 180 : 0;
+
     return (
         <div className="p-8 max-w-4xl mx-auto">
             <h1 className="text-3xl font-bold text-slate-800 mb-2">Configuration de l'Agent IA</h1>
@@ -29,24 +122,39 @@ export default function AIAgentSetup() {
                             Téléchargez vos catalogues, manuels de formation ou FAQ. L'IA utilisera ces documents pour répondre précisément à vos clients.
                         </p>
 
-                        <div className="border-2 border-dashed border-slate-200 rounded-2xl p-12 text-center hover:border-emerald-400 transition-colors cursor-pointer group">
-                            <input 
-                                type="file" 
-                                id="kb-upload" 
-                                className="hidden" 
-                                accept=".pdf,.doc,.docx" 
+                        <div className={`border-2 border-dashed rounded-2xl p-12 text-center transition-colors cursor-pointer group ${
+                            uploadStatus === 'SUCCESS' ? 'border-emerald-400 bg-emerald-50' :
+                            uploadStatus === 'ERROR'   ? 'border-red-300 bg-red-50' :
+                                                        'border-slate-200 hover:border-emerald-400'
+                        }`}>
+                            <input
+                                type="file"
+                                id="kb-upload"
+                                className="hidden"
+                                accept=".pdf,.doc,.docx,.xlsx,.csv"
                                 onChange={handleFileUpload}
+                                disabled={uploadStatus === 'UPLOADING'}
                             />
                             <label htmlFor="kb-upload" className="cursor-pointer">
                                 <div className="w-16 h-16 bg-emerald-50 text-emerald-600 rounded-full flex items-center justify-center mx-auto mb-4 group-hover:scale-110 transition-transform">
-                                    <span className="text-2xl">📄</span>
+                                    <span className="text-2xl">
+                                        {uploadStatus === 'UPLOADING' ? '⏳' :
+                                         uploadStatus === 'SUCCESS'   ? '✅' :
+                                         uploadStatus === 'ERROR'     ? '❌' : '📄'}
+                                    </span>
                                 </div>
                                 <p className="font-medium text-slate-800">
-                                    {status === 'IDLE' && 'Cliquez pour uploader un document'}
-                                    {status === 'UPLOADING' && 'Traitement en cours...'}
-                                    {status === 'SUCCESS' && 'Document analysé avec succès !'}
+                                    {uploadStatus === 'IDLE'      && 'Cliquez pour uploader un document'}
+                                    {uploadStatus === 'UPLOADING' && 'Upload et indexation en cours...'}
+                                    {uploadStatus === 'SUCCESS'   && 'Document indexé avec succès !'}
+                                    {uploadStatus === 'ERROR'     && (uploadError || 'Erreur lors de l\'upload')}
                                 </p>
-                                <p className="text-xs text-slate-400 mt-2">PDF, DOCX (Max 10MB)</p>
+                                {kbStats?.knowledgeBaseUrl && uploadStatus !== 'UPLOADING' && (
+                                    <p className="text-xs text-emerald-600 mt-1 truncate max-w-xs mx-auto">
+                                        Actuel : {kbStats.knowledgeBaseUrl.split('/').pop()}
+                                    </p>
+                                )}
+                                <p className="text-xs text-slate-400 mt-2">PDF, DOCX, XLSX, CSV (Max 10MB)</p>
                             </label>
                         </div>
                     </div>
@@ -59,22 +167,44 @@ export default function AIAgentSetup() {
                         <div className="space-y-4">
                             <div>
                                 <label className="block text-sm font-medium text-slate-600 mb-1">Rôle principal</label>
-                                <input 
-                                    type="text" 
+                                <input
+                                    type="text"
+                                    value={role}
+                                    onChange={e => setRole(e.target.value)}
                                     placeholder="Ex: Conseiller technique pour Agritech"
                                     className="w-full px-4 py-3 border border-slate-200 rounded-xl focus:ring-2 focus:ring-emerald-500 outline-none"
                                 />
                             </div>
                             <div>
                                 <label className="block text-sm font-medium text-slate-600 mb-1">Ton et Style</label>
-                                <div className="flex gap-2">
-                                    {['Professionnel', 'Amical', 'Direct', 'Pédagogue'].map(t => (
-                                        <button key={t} className="px-4 py-2 rounded-full border border-slate-200 text-sm hover:bg-emerald-50 hover:border-emerald-200 transition-colors">
+                                <div className="flex gap-2 flex-wrap">
+                                    {TONES.map(t => (
+                                        <button
+                                            key={t}
+                                            type="button"
+                                            onClick={() => setSelectedTone(t)}
+                                            className={`px-4 py-2 rounded-full border text-sm transition-colors ${
+                                                selectedTone === t
+                                                    ? 'bg-emerald-500 border-emerald-500 text-white'
+                                                    : 'border-slate-200 hover:bg-emerald-50 hover:border-emerald-200'
+                                            }`}
+                                        >
                                             {t}
                                         </button>
                                     ))}
                                 </div>
                             </div>
+                            <button
+                                type="button"
+                                onClick={handleSavePersonality}
+                                disabled={!role.trim() || saveStatus === 'SAVING'}
+                                className="mt-2 px-6 py-2.5 bg-slate-900 text-white rounded-xl text-sm font-bold hover:bg-slate-700 transition disabled:opacity-40"
+                            >
+                                {saveStatus === 'SAVING' ? 'Sauvegarde...' :
+                                 saveStatus === 'SAVED'  ? '✓ Sauvegardé' :
+                                 saveStatus === 'ERROR'  ? 'Erreur — Réessayer' :
+                                 'Sauvegarder la personnalité'}
+                            </button>
                         </div>
                     </div>
                 </div>
@@ -90,23 +220,35 @@ export default function AIAgentSetup() {
                                 Quels sont les prix de vos engrais ?
                             </div>
                             <div className="bg-white text-slate-800 p-3 rounded-2xl rounded-bl-none text-xs self-start mt-2">
-                                {status === 'SUCCESS' ? "D'après notre catalogue, nos engrais NPK sont à 15,000 FCFA le sac..." : "..."}
+                                {kbStats?.hasKnowledgeBase
+                                    ? "D'après notre catalogue, nos engrais NPK sont à 15,000 FCFA le sac..."
+                                    : "Uploadez un document pour activer l'IA."}
                             </div>
                         </div>
                     </div>
 
                     <div className="bg-slate-50 p-6 rounded-3xl border border-slate-100">
-                        <h4 className="font-bold text-slate-800 mb-2">Statistiques Agent</h4>
-                        <div className="space-y-3">
-                            <div className="flex justify-between text-sm">
-                                <span className="text-slate-500">Précision RAG</span>
-                                <span className="text-emerald-600 font-bold">94%</span>
-                            </div>
-                            <div className="flex justify-between text-sm">
-                                <span className="text-slate-500">Mots indexés</span>
-                                <span className="text-slate-800 font-bold">12,450</span>
+                        <h4 className="font-bold text-slate-800 mb-3">Statistiques Agent</h4>
+                        {kbStats === null ? (
+                            <p className="text-xs text-slate-400">Chargement...</p>
+                        ) : !kbStats.hasKnowledgeBase ? (
+                            <p className="text-xs text-slate-400">Aucune base de connaissances indexée.</p>
+                        ) : (
+                            <div className="space-y-3">
+                                <div className="flex justify-between text-sm">
+                                    <span className="text-slate-500">Statut</span>
+                                    <span className="text-emerald-600 font-bold">Actif</span>
+                                </div>
+                                <div className="flex justify-between text-sm">
+                                    <span className="text-slate-500">Chunks indexés</span>
+                                    <span className="text-slate-800 font-bold">{kbStats.chunkCount.toLocaleString()}</span>
+                                </div>
+                                <div className="flex justify-between text-sm">
+                                    <span className="text-slate-500">Mots estimés</span>
+                                    <span className="text-slate-800 font-bold">~{wordCount.toLocaleString()}</span>
+                                </div>
                             </div>
-                        </div>
+                        )}
                     </div>
                 </div>
             </div>

apps/admin/src/pages/CampaignHistoryPage.tsx

@@ -0,0 +1,228 @@
+import { useState, useEffect } from 'react';
+import { Send, Search, ChevronLeft, ChevronRight, Loader2, Megaphone, CheckCheck, Eye, AlertCircle, Clock } from 'lucide-react';
+import { api } from '../lib/api';
+import { useAuth } from '../lib/auth';
+import { useTenant } from '../lib/tenant';
+
+interface CampaignRecord {
+    id: string;
+    content: string;
+    status: 'SENT' | 'DELIVERED' | 'READ' | 'FAILED';
+    error?: string;
+    sentAt: string;
+    contact: { name?: string; phoneNumber: string };
+}
+
+interface CampaignStats {
+    SENT: number;
+    DELIVERED: number;
+    READ: number;
+    FAILED: number;
+}
+
+interface CampaignResponse {
+    records: CampaignRecord[];
+    total: number;
+    page: number;
+    limit: number;
+    stats: CampaignStats;
+}
+
+const PAGE_SIZE = 30;
+
+const STATUS_CONFIG = {
+    SENT:      { label: 'Envoyé',    icon: Send,        color: 'text-blue-500',  bg: 'bg-blue-50'  },
+    DELIVERED: { label: 'Livré',     icon: CheckCheck,  color: 'text-green-500', bg: 'bg-green-50' },
+    READ:      { label: 'Lu',        icon: Eye,         color: 'text-violet-500',bg: 'bg-violet-50'},
+    FAILED:    { label: 'Échoué',    icon: AlertCircle, color: 'text-red-500',   bg: 'bg-red-50'   },
+} as const;
+
+type StatusFilter = 'ALL' | 'SENT' | 'DELIVERED' | 'READ' | 'FAILED';
+
+export default function CampaignHistoryPage() {
+    const { token } = useAuth();
+    const { selectedOrgId } = useTenant();
+    const [data, setData] = useState<CampaignResponse | null>(null);
+    const [loading, setLoading] = useState(true);
+    const [page, setPage] = useState(1);
+    const [search, setSearch] = useState('');
+    const [statusFilter, setStatusFilter] = useState<StatusFilter>('ALL');
+
+    const fetchHistory = async (p = page, status = statusFilter) => {
+        if (!token || !selectedOrgId) return;
+        setLoading(true);
+        try {
+            const qs = new URLSearchParams({ page: String(p), limit: String(PAGE_SIZE) });
+            if (status !== 'ALL') qs.set('status', status);
+            const res = await api.get(
+                `/v1/organizations/${selectedOrgId}/campaign-history?${qs}`,
+                token
+            );
+            setData(res);
+        } catch (err) {
+            console.error('[CAMPAIGNS] Failed to fetch history:', err);
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    useEffect(() => {
+        fetchHistory(1, statusFilter);
+        setPage(1);
+    }, [token, selectedOrgId, statusFilter]);
+
+    const handlePageChange = (newPage: number) => {
+        setPage(newPage);
+        fetchHistory(newPage, statusFilter);
+    };
+
+    const filteredRecords = (data?.records ?? []).filter(r => {
+        if (!search) return true;
+        return (
+            r.content.toLowerCase().includes(search.toLowerCase()) ||
+            (r.contact.name ?? '').toLowerCase().includes(search.toLowerCase()) ||
+            r.contact.phoneNumber.includes(search)
+        );
+    });
+
+    const totalPages = data ? Math.ceil(data.total / PAGE_SIZE) : 1;
+    const stats = data?.stats ?? { SENT: 0, DELIVERED: 0, READ: 0, FAILED: 0 };
+
+    return (
+        <div className="p-8 max-w-5xl mx-auto">
+            <div className="flex items-center gap-3 mb-8">
+                <div className="w-10 h-10 bg-amber-100 rounded-2xl flex items-center justify-center">
+                    <Megaphone className="w-5 h-5 text-amber-600" />
+                </div>
+                <div>
+                    <h1 className="text-2xl font-bold text-slate-900">Historique des Campagnes</h1>
+                    <p className="text-sm text-slate-500">
+                        {data ? `${data.total} messages envoyés au total` : 'Chargement…'}
+                    </p>
+                </div>
+            </div>
+
+            {/* Stats bar */}
+            <div className="grid grid-cols-4 gap-4 mb-6">
+                {(Object.keys(STATUS_CONFIG) as Array<keyof typeof STATUS_CONFIG>).map(key => {
+                    const cfg = STATUS_CONFIG[key];
+                    const Icon = cfg.icon;
+                    return (
+                        <button
+                            key={key}
+                            onClick={() => setStatusFilter(statusFilter === key ? 'ALL' : key)}
+                            className={`${cfg.bg} rounded-2xl p-4 text-left transition hover:opacity-80 ${statusFilter === key ? 'ring-2 ring-offset-1 ring-slate-400' : ''}`}
+                        >
+                            <div className={`flex items-center gap-2 ${cfg.color} mb-1`}>
+                                <Icon className="w-4 h-4" />
+                                <span className="text-xs font-semibold">{cfg.label}</span>
+                            </div>
+                            <p className="text-2xl font-bold text-slate-900">{stats[key].toLocaleString('fr-FR')}</p>
+                        </button>
+                    );
+                })}
+            </div>
+
+            {/* Search + filter */}
+            <div className="flex gap-3 mb-4">
+                <div className="relative flex-1">
+                    <Search className="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-slate-400" />
+                    <input
+                        type="text"
+                        placeholder="Rechercher par contact ou message…"
+                        value={search}
+                        onChange={e => setSearch(e.target.value)}
+                        className="w-full pl-10 pr-4 py-2.5 border border-slate-200 rounded-xl text-sm outline-none focus:ring-2 focus:ring-amber-400"
+                    />
+                </div>
+                {statusFilter !== 'ALL' && (
+                    <button
+                        onClick={() => setStatusFilter('ALL')}
+                        className="px-4 py-2 text-sm text-slate-500 border border-slate-200 rounded-xl hover:bg-slate-50 transition"
+                    >
+                        Effacer filtre
+                    </button>
+                )}
+            </div>
+
+            {loading ? (
+                <div className="flex items-center justify-center py-20">
+                    <Loader2 className="w-8 h-8 animate-spin text-slate-400" />
+                </div>
+            ) : filteredRecords.length === 0 ? (
+                <div className="text-center py-20 text-slate-400">
+                    <Send className="w-12 h-12 mx-auto mb-3 opacity-30" />
+                    <p className="font-medium">Aucune campagne trouvée</p>
+                    <p className="text-sm mt-1">Envoyez votre première campagne depuis la section Contacts.</p>
+                </div>
+            ) : (
+                <div className="bg-white rounded-2xl border border-slate-100 overflow-hidden">
+                    <table className="w-full text-sm">
+                        <thead>
+                            <tr className="border-b border-slate-100">
+                                <th className="text-left px-5 py-3 text-xs font-semibold text-slate-400 uppercase tracking-wider">Contact</th>
+                                <th className="text-left px-5 py-3 text-xs font-semibold text-slate-400 uppercase tracking-wider">Message</th>
+                                <th className="text-left px-5 py-3 text-xs font-semibold text-slate-400 uppercase tracking-wider">Statut</th>
+                                <th className="text-left px-5 py-3 text-xs font-semibold text-slate-400 uppercase tracking-wider">Envoyé</th>
+                            </tr>
+                        </thead>
+                        <tbody className="divide-y divide-slate-50">
+                            {filteredRecords.map(record => {
+                                const cfg = STATUS_CONFIG[record.status] ?? STATUS_CONFIG.SENT;
+                                const Icon = cfg.icon;
+                                return (
+                                    <tr key={record.id} className="hover:bg-slate-50 transition">
+                                        <td className="px-5 py-3">
+                                            <p className="font-medium text-slate-800">{record.contact.name || '—'}</p>
+                                            <p className="text-xs text-slate-400">{record.contact.phoneNumber}</p>
+                                        </td>
+                                        <td className="px-5 py-3 max-w-xs">
+                                            <p className="text-slate-700 line-clamp-2">{record.content}</p>
+                                            {record.error && (
+                                                <p className="text-xs text-red-400 mt-1">{record.error}</p>
+                                            )}
+                                        </td>
+                                        <td className="px-5 py-3">
+                                            <span className={`inline-flex items-center gap-1.5 px-2.5 py-1 rounded-lg text-xs font-medium ${cfg.bg} ${cfg.color}`}>
+                                                <Icon className="w-3 h-3" />
+                                                {cfg.label}
+                                            </span>
+                                        </td>
+                                        <td className="px-5 py-3 text-slate-400 whitespace-nowrap">
+                                            <div className="flex items-center gap-1">
+                                                <Clock className="w-3 h-3" />
+                                                {new Date(record.sentAt).toLocaleString('fr-FR', { dateStyle: 'short', timeStyle: 'short' })}
+                                            </div>
+                                        </td>
+                                    </tr>
+                                );
+                            })}
+                        </tbody>
+                    </table>
+                </div>
+            )}
+
+            {!search && totalPages > 1 && (
+                <div className="flex items-center justify-between mt-6">
+                    <p className="text-sm text-slate-500">Page {page} sur {totalPages}</p>
+                    <div className="flex gap-2">
+                        <button
+                            onClick={() => handlePageChange(page - 1)}
+                            disabled={page === 1}
+                            className="p-2 rounded-xl border border-slate-200 hover:bg-slate-50 disabled:opacity-40 transition"
+                        >
+                            <ChevronLeft className="w-4 h-4" />
+                        </button>
+                        <button
+                            onClick={() => handlePageChange(page + 1)}
+                            disabled={page === totalPages}
+                            className="p-2 rounded-xl border border-slate-200 hover:bg-slate-50 disabled:opacity-40 transition"
+                        >
+                            <ChevronRight className="w-4 h-4" />
+                        </button>
+                    </div>
+                </div>
+            )}
+        </div>
+    );
+}

apps/admin/src/pages/ClientsManagementView.tsx

@@ -49,6 +49,7 @@ export default function ClientsManagementView() {
     });
     const [isCreating, setIsCreating] = useState(false);
     const [showGuide, setShowGuide] = useState(false);
+    const [billingOrg, setBillingOrg] = useState<Organization | null>(null);
  
     const fetchClients = async () => {
         if (!token) return;
@@ -219,7 +220,10 @@ export default function ClientsManagementView() {
                                 </div>
                             </div>
                             <div className="flex items-center justify-end">
-                                <button className="text-sm font-bold text-indigo-600 hover:text-indigo-700 underline underline-offset-4">
+                                <button
+                                    onClick={() => setBillingOrg(client)}
+                                    className="text-sm font-bold text-indigo-600 hover:text-indigo-700 underline underline-offset-4"
+                                >
                                     Détails & Facturation
                                 </button>
                             </div>
@@ -354,6 +358,65 @@ export default function ClientsManagementView() {
                 </div>
             )}
 
+            {/* Billing Modal */}
+            {billingOrg && (
+                <div className="fixed inset-0 bg-slate-900/60 backdrop-blur-sm flex items-center justify-center p-6 z-[100]">
+                    <div className="bg-white rounded-3xl shadow-2xl w-full max-w-lg">
+                        <div className="flex items-center justify-between p-6 border-b border-slate-100">
+                            <h2 className="text-xl font-bold text-slate-900">Détails & Facturation</h2>
+                            <button onClick={() => setBillingOrg(null)} className="p-2 hover:bg-slate-100 rounded-full transition">
+                                <X className="w-5 h-5 text-slate-500" />
+                            </button>
+                        </div>
+                        <div className="p-6 space-y-4">
+                            <div className="flex items-center gap-3 bg-slate-50 rounded-2xl p-4">
+                                <Building2 className="w-8 h-8 text-slate-400 shrink-0" />
+                                <div>
+                                    <p className="font-bold text-slate-900">{billingOrg.name}</p>
+                                    <p className="text-xs text-slate-400 font-mono">{billingOrg.id}</p>
+                                </div>
+                            </div>
+                            <div className="grid grid-cols-2 gap-3 text-sm">
+                                <div className="bg-slate-50 rounded-2xl p-4">
+                                    <p className="text-xs font-bold text-slate-400 uppercase tracking-widest mb-1">Mode</p>
+                                    <p className="font-semibold text-slate-800">{billingOrg.mode}</p>
+                                </div>
+                                <div className="bg-slate-50 rounded-2xl p-4">
+                                    <p className="text-xs font-bold text-slate-400 uppercase tracking-widest mb-1">Statut Meta</p>
+                                    <p className={`font-semibold ${billingOrg.metaVerificationStatus === 'VERIFIED' ? 'text-emerald-600' : 'text-amber-600'}`}>
+                                        {billingOrg.metaVerificationStatus === 'VERIFIED' ? 'Vérifié' : 'Non vérifié'}
+                                    </p>
+                                </div>
+                                <div className="bg-slate-50 rounded-2xl p-4">
+                                    <p className="text-xs font-bold text-slate-400 uppercase tracking-widest mb-1">Limite quotidienne</p>
+                                    <p className="font-semibold text-slate-800">{billingOrg.dailyMessageLimit} conv.</p>
+                                </div>
+                                <div className="bg-slate-50 rounded-2xl p-4">
+                                    <p className="text-xs font-bold text-slate-400 uppercase tracking-widest mb-1">Contrat PaaS</p>
+                                    <p className={`font-semibold ${billingOrg.contractSigned ? 'text-blue-600' : 'text-slate-500'}`}>
+                                        {billingOrg.contractSigned ? `Signé${billingOrg.contractSignerName ? ' par ' + billingOrg.contractSignerName : ''}` : 'En attente'}
+                                    </p>
+                                </div>
+                            </div>
+                            {billingOrg.wabaId && (
+                                <div className="bg-slate-50 rounded-2xl p-4 text-sm">
+                                    <p className="text-xs font-bold text-slate-400 uppercase tracking-widest mb-1">WABA ID</p>
+                                    <p className="font-mono text-slate-700">{billingOrg.wabaId}</p>
+                                </div>
+                            )}
+                        </div>
+                        <div className="p-6 border-t border-slate-100">
+                            <button
+                                onClick={() => setBillingOrg(null)}
+                                className="w-full py-3 bg-slate-900 text-white rounded-2xl font-bold hover:bg-slate-700 transition"
+                            >
+                                Fermer
+                            </button>
+                        </div>
+                    </div>
+                </div>
+            )}
+
             {/* Personality Studio Modal */}
             {selectedOrgForPersonality && (
                 <PersonalityStudioModal 

apps/admin/src/pages/ContactsPage.tsx

@@ -33,6 +33,8 @@ export default function ContactsPage() {
     const [showBulkModal, setShowBulkModal] = useState(false);
     const [bulkProgress, setBulkProgress] = useState({ current: 0, total: 0, status: 'idle' });
     const [bulkResults, setBulkResults] = useState<any[]>([]);
+    const [activeCount, setActiveCount] = useState<number | null>(null);
+    const [showFilters, setShowFilters] = useState(false);
 
     const fetchContacts = async () => {
         if (!token || !selectedOrgId) return;
@@ -47,8 +49,19 @@ export default function ContactsPage() {
         }
     };
 
+    const fetchActiveCount = async () => {
+        if (!token || !selectedOrgId) return;
+        try {
+            const data = await api.get('/v1/analytics/usage', token);
+            setActiveCount(data?.users?.activeLast24h ?? 0);
+        } catch {
+            setActiveCount(0);
+        }
+    };
+
     useEffect(() => {
         fetchContacts();
+        fetchActiveCount();
     }, [token, selectedOrgId]);
 
     const handleFileUpload = async (e: React.ChangeEvent<HTMLInputElement>) => {
@@ -215,6 +228,24 @@ export default function ContactsPage() {
         }
     };
 
+    const handleExportCsv = () => {
+        if (filteredContacts.length === 0) return;
+        const headers = ['Nom', 'Téléphone', 'Créé le'];
+        const rows = filteredContacts.map(c => [
+            c.name ?? '',
+            c.phoneNumber,
+            new Date(c.createdAt).toLocaleDateString('fr-FR')
+        ]);
+        const csv = [headers, ...rows].map(r => r.map(v => `"${v}"`).join(',')).join('\n');
+        const blob = new Blob([csv], { type: 'text/csv;charset=utf-8;' });
+        const url = URL.createObjectURL(blob);
+        const a = document.createElement('a');
+        a.href = url;
+        a.download = `contacts-${new Date().toISOString().slice(0, 10)}.csv`;
+        a.click();
+        URL.revokeObjectURL(url);
+    };
+
     const filteredContacts = contacts.filter(c => {
         const searchLower = searchQuery.toLowerCase();
         const inName = c.name?.toLowerCase().includes(searchLower);
@@ -247,7 +278,11 @@ export default function ContactsPage() {
                     >
                         <Upload className="w-5 h-5" /> Import Excel/CSV
                     </button>
-                    <button className="p-3.5 bg-white border border-slate-200 text-slate-600 rounded-2xl hover:bg-slate-50 transition shadow-sm">
+                    <button
+                        onClick={handleExportCsv}
+                        title="Exporter en CSV"
+                        className="p-3.5 bg-white border border-slate-200 text-slate-600 rounded-2xl hover:bg-slate-50 transition shadow-sm"
+                    >
                         <Download className="w-5 h-5" />
                     </button>
                 </div>
@@ -270,7 +305,7 @@ export default function ContactsPage() {
                     </div>
                     <div>
                         <p className="text-xs font-bold text-slate-400 uppercase tracking-widest">Actifs (24h)</p>
-                        <p className="text-2xl font-black text-slate-900">0</p>
+                        <p className="text-2xl font-black text-slate-900">{activeCount ?? '—'}</p>
                     </div>
                 </div>
                 <div className="bg-white p-6 rounded-[2rem] border border-slate-100 shadow-sm flex items-center gap-4">
@@ -279,7 +314,7 @@ export default function ContactsPage() {
                     </div>
                     <div>
                         <p className="text-xs font-bold text-slate-400 uppercase tracking-widest">Segments</p>
-                        <p className="text-2xl font-black text-slate-900">1</p>
+                        <p className="text-2xl font-black text-slate-900">{searchQuery ? 1 : contacts.length > 0 ? 1 : 0}</p>
                     </div>
                 </div>
             </div>
@@ -298,7 +333,10 @@ export default function ContactsPage() {
                         />
                     </div>
                     <div className="flex items-center gap-2">
-                        <button className="flex items-center gap-2 px-5 py-4 rounded-2xl font-bold text-slate-600 hover:bg-slate-50 transition">
+                        <button
+                            onClick={() => setShowFilters(v => !v)}
+                            className={`flex items-center gap-2 px-5 py-4 rounded-2xl font-bold transition ${showFilters ? 'bg-blue-50 text-blue-600' : 'text-slate-600 hover:bg-slate-50'}`}
+                        >
                             <Filter className="w-4 h-4" /> Filtres
                         </button>
                     </div>

apps/admin/src/pages/KnowledgeBasePage.tsx

@@ -0,0 +1,201 @@
+import { useState, useEffect } from 'react';
+import { Database, Trash2, RefreshCw, Search, ChevronLeft, ChevronRight, Loader2, FileText } from 'lucide-react';
+import { api } from '../lib/api';
+import { useAuth } from '../lib/auth';
+import { useTenant } from '../lib/tenant';
+
+interface KbEntry {
+    id: string;
+    content: string;
+    metadata?: Record<string, unknown>;
+    createdAt: string;
+}
+
+interface KbResponse {
+    entries: KbEntry[];
+    total: number;
+    page: number;
+    limit: number;
+}
+
+const PAGE_SIZE = 20;
+
+export default function KnowledgeBasePage() {
+    const { token } = useAuth();
+    const { selectedOrgId } = useTenant();
+    const [data, setData] = useState<KbResponse | null>(null);
+    const [loading, setLoading] = useState(true);
+    const [page, setPage] = useState(1);
+    const [search, setSearch] = useState('');
+    const [deletingId, setDeletingId] = useState<string | null>(null);
+    const [reindexing, setReindexing] = useState(false);
+
+    const fetchEntries = async (p = page) => {
+        if (!token || !selectedOrgId) return;
+        setLoading(true);
+        try {
+            const res = await api.get(
+                `/v1/organizations/${selectedOrgId}/kb?page=${p}&limit=${PAGE_SIZE}`,
+                token
+            );
+            setData(res);
+        } catch (err) {
+            console.error('[KB] Failed to fetch entries:', err);
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    useEffect(() => {
+        fetchEntries(1);
+        setPage(1);
+    }, [token, selectedOrgId]);
+
+    const handleDelete = async (id: string) => {
+        if (!token || !selectedOrgId) return;
+        if (!confirm('Supprimer ce chunk de la base de connaissances ?')) return;
+        setDeletingId(id);
+        try {
+            await api.delete(`/v1/organizations/${selectedOrgId}/kb/${id}`, token);
+            await fetchEntries(page);
+        } catch (err) {
+            console.error('[KB] Delete failed:', err);
+        } finally {
+            setDeletingId(null);
+        }
+    };
+
+    const handleReindex = async () => {
+        if (!token || !selectedOrgId) return;
+        setReindexing(true);
+        try {
+            await api.post(`/v1/organizations/${selectedOrgId}/index-kb`, {}, token);
+        } catch (err) {
+            console.error('[KB] Re-index failed:', err);
+        } finally {
+            setReindexing(false);
+        }
+    };
+
+    const handlePageChange = (newPage: number) => {
+        setPage(newPage);
+        fetchEntries(newPage);
+    };
+
+    const filteredEntries = (data?.entries ?? []).filter(e =>
+        !search || e.content.toLowerCase().includes(search.toLowerCase())
+    );
+
+    const totalPages = data ? Math.ceil(data.total / PAGE_SIZE) : 1;
+
+    return (
+        <div className="p-8 max-w-5xl mx-auto">
+            <div className="flex items-center justify-between mb-8">
+                <div className="flex items-center gap-3">
+                    <div className="w-10 h-10 bg-violet-100 rounded-2xl flex items-center justify-center">
+                        <Database className="w-5 h-5 text-violet-600" />
+                    </div>
+                    <div>
+                        <h1 className="text-2xl font-bold text-slate-900">Base de Connaissances</h1>
+                        <p className="text-sm text-slate-500">
+                            {data ? `${data.total} chunks indexés` : 'Chargement…'}
+                        </p>
+                    </div>
+                </div>
+                <button
+                    onClick={handleReindex}
+                    disabled={reindexing}
+                    className="flex items-center gap-2 px-4 py-2 bg-violet-600 text-white rounded-xl text-sm font-medium hover:bg-violet-700 transition disabled:opacity-50"
+                >
+                    <RefreshCw className={`w-4 h-4 ${reindexing ? 'animate-spin' : ''}`} />
+                    {reindexing ? 'Indexation…' : 'Re-indexer'}
+                </button>
+            </div>
+
+            <div className="relative mb-4">
+                <Search className="absolute left-3 top-1/2 -translate-y-1/2 w-4 h-4 text-slate-400" />
+                <input
+                    type="text"
+                    placeholder="Rechercher dans les chunks…"
+                    value={search}
+                    onChange={e => setSearch(e.target.value)}
+                    className="w-full pl-10 pr-4 py-2.5 border border-slate-200 rounded-xl text-sm outline-none focus:ring-2 focus:ring-violet-400"
+                />
+            </div>
+
+            {loading ? (
+                <div className="flex items-center justify-center py-20">
+                    <Loader2 className="w-8 h-8 animate-spin text-slate-400" />
+                </div>
+            ) : filteredEntries.length === 0 ? (
+                <div className="text-center py-20 text-slate-400">
+                    <FileText className="w-12 h-12 mx-auto mb-3 opacity-30" />
+                    <p className="font-medium">Aucun chunk trouvé</p>
+                    <p className="text-sm mt-1">Importez un document dans l'onglet Agent IA pour commencer.</p>
+                </div>
+            ) : (
+                <div className="space-y-3">
+                    {filteredEntries.map((entry, i) => (
+                        <div key={entry.id} className="bg-white rounded-2xl border border-slate-100 p-5 hover:shadow-sm transition group">
+                            <div className="flex items-start justify-between gap-4">
+                                <div className="flex-1 min-w-0">
+                                    <div className="flex items-center gap-2 mb-2">
+                                        <span className="text-xs font-mono bg-slate-100 text-slate-500 px-2 py-0.5 rounded-lg">
+                                            #{(page - 1) * PAGE_SIZE + i + 1}
+                                        </span>
+                                        {entry.metadata && (
+                                            <span className="text-xs text-slate-400">
+                                                {Object.entries(entry.metadata as Record<string, unknown>)
+                                                    .slice(0, 2)
+                                                    .map(([k, v]) => `${k}: ${v}`)
+                                                    .join(' · ')}
+                                            </span>
+                                        )}
+                                        <span className="text-xs text-slate-300 ml-auto">
+                                            {new Date(entry.createdAt).toLocaleDateString('fr-FR')}
+                                        </span>
+                                    </div>
+                                    <p className="text-sm text-slate-700 leading-relaxed line-clamp-4">
+                                        {entry.content}
+                                    </p>
+                                </div>
+                                <button
+                                    onClick={() => handleDelete(entry.id)}
+                                    disabled={deletingId === entry.id}
+                                    className="opacity-0 group-hover:opacity-100 p-2 text-red-400 hover:text-red-600 hover:bg-red-50 rounded-xl transition"
+                                    title="Supprimer ce chunk"
+                                >
+                                    {deletingId === entry.id
+                                        ? <Loader2 className="w-4 h-4 animate-spin" />
+                                        : <Trash2 className="w-4 h-4" />}
+                                </button>
+                            </div>
+                        </div>
+                    ))}
+                </div>
+            )}
+
+            {!search && totalPages > 1 && (
+                <div className="flex items-center justify-between mt-6">
+                    <p className="text-sm text-slate-500">Page {page} sur {totalPages}</p>
+                    <div className="flex gap-2">
+                        <button
+                            onClick={() => handlePageChange(page - 1)}
+                            disabled={page === 1}
+                            className="p-2 rounded-xl border border-slate-200 hover:bg-slate-50 disabled:opacity-40 transition"
+                        >
+                            <ChevronLeft className="w-4 h-4" />
+                        </button>
+                        <button
+                            onClick={() => handlePageChange(page + 1)}
+                            disabled={page === totalPages}
+                            className="p-2 rounded-xl border border-slate-200 hover:bg-slate-50 disabled:opacity-40 transition"
+                        >
+                            <ChevronRight className="w-4 h-4" />
+                        </button>
+                    </div>
+                </div>
+            )}
+        </div>
+    );
+}

apps/admin/src/pages/ResetPasswordPage.tsx

@@ -0,0 +1,175 @@
+import { useState, useEffect } from 'react';
+import { useNavigate } from 'react-router-dom';
+
+type Step = 'request' | 'sent' | 'reset' | 'done' | 'error';
+
+export default function ResetPasswordPage() {
+    const navigate = useNavigate();
+    const [step, setStep] = useState<Step>('request');
+    const [email, setEmail] = useState('');
+    const [password, setPassword] = useState('');
+    const [confirm, setConfirm] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [errorMsg, setErrorMsg] = useState('');
+    const [token, setToken] = useState<string | null>(null);
+
+    const apiBase = import.meta.env.VITE_API_URL;
+
+    useEffect(() => {
+        const params = new URLSearchParams(window.location.search);
+        const t = params.get('token');
+        if (t) {
+            setToken(t);
+            setStep('reset');
+        }
+    }, []);
+
+    const handleRequest = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (!email.trim()) return;
+        setLoading(true);
+        setErrorMsg('');
+        try {
+            await fetch(`${apiBase}/v1/auth/forgot-password`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ email })
+            });
+            // Always show "sent" regardless of whether email exists (anti-enumeration)
+            setStep('sent');
+        } catch {
+            setErrorMsg('Erreur réseau. Veuillez réessayer.');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const handleReset = async (e: React.FormEvent) => {
+        e.preventDefault();
+        if (password !== confirm) { setErrorMsg('Les mots de passe ne correspondent pas.'); return; }
+        if (password.length < 6) { setErrorMsg('Le mot de passe doit contenir au moins 6 caractères.'); return; }
+        setLoading(true);
+        setErrorMsg('');
+        try {
+            const res = await fetch(`${apiBase}/v1/auth/reset-password`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ token, password })
+            });
+            if (res.ok) {
+                setStep('done');
+            } else {
+                const data = await res.json().catch(() => ({}));
+                setErrorMsg(data.error || 'Token invalide ou expiré.');
+            }
+        } catch {
+            setErrorMsg('Erreur réseau. Veuillez réessayer.');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    return (
+        <div className="min-h-screen bg-slate-50 flex items-center justify-center p-4">
+            <div className="bg-white rounded-3xl shadow-sm border border-slate-100 w-full max-w-md p-10">
+                <div className="mb-8 text-center">
+                    <div className="w-14 h-14 bg-slate-900 rounded-2xl flex items-center justify-center mx-auto mb-4">
+                        <span className="text-white text-2xl font-black">X</span>
+                    </div>
+                    <h1 className="text-2xl font-bold text-slate-900">
+                        {step === 'request' && 'Mot de passe oublié'}
+                        {step === 'sent'    && 'Email envoyé'}
+                        {step === 'reset'   && 'Nouveau mot de passe'}
+                        {step === 'done'    && 'Mot de passe mis à jour'}
+                    </h1>
+                    <p className="text-slate-500 text-sm mt-2">
+                        {step === 'request' && "Entrez votre email pour recevoir un lien de réinitialisation."}
+                        {step === 'sent'    && "Si ce compte existe, vous recevrez un email dans quelques minutes."}
+                        {step === 'reset'   && "Choisissez un nouveau mot de passe."}
+                        {step === 'done'    && "Votre mot de passe a été mis à jour avec succès."}
+                    </p>
+                </div>
+
+                {step === 'request' && (
+                    <form onSubmit={handleRequest} className="space-y-4">
+                        <div>
+                            <label className="block text-sm font-medium text-slate-700 mb-1">Adresse email</label>
+                            <input
+                                type="email"
+                                required
+                                value={email}
+                                onChange={e => setEmail(e.target.value)}
+                                placeholder="vous@exemple.com"
+                                className="w-full px-4 py-3 border border-slate-200 rounded-xl focus:ring-2 focus:ring-slate-900 outline-none text-sm"
+                            />
+                        </div>
+                        {errorMsg && <p className="text-red-500 text-sm">{errorMsg}</p>}
+                        <button
+                            type="submit"
+                            disabled={loading}
+                            className="w-full py-3 bg-slate-900 text-white rounded-xl font-bold hover:bg-slate-700 transition disabled:opacity-50"
+                        >
+                            {loading ? 'Envoi...' : 'Envoyer le lien'}
+                        </button>
+                        <button type="button" onClick={() => navigate('/login')} className="w-full text-center text-sm text-slate-400 hover:text-slate-600 transition">
+                            Retour à la connexion
+                        </button>
+                    </form>
+                )}
+
+                {step === 'sent' && (
+                    <div className="text-center space-y-4">
+                        <div className="text-5xl">📬</div>
+                        <button onClick={() => navigate('/login')} className="w-full py-3 bg-slate-900 text-white rounded-xl font-bold hover:bg-slate-700 transition">
+                            Retour à la connexion
+                        </button>
+                    </div>
+                )}
+
+                {step === 'reset' && (
+                    <form onSubmit={handleReset} className="space-y-4">
+                        <div>
+                            <label className="block text-sm font-medium text-slate-700 mb-1">Nouveau mot de passe</label>
+                            <input
+                                type="password"
+                                required
+                                value={password}
+                                onChange={e => setPassword(e.target.value)}
+                                placeholder="Minimum 6 caractères"
+                                className="w-full px-4 py-3 border border-slate-200 rounded-xl focus:ring-2 focus:ring-slate-900 outline-none text-sm"
+                            />
+                        </div>
+                        <div>
+                            <label className="block text-sm font-medium text-slate-700 mb-1">Confirmer</label>
+                            <input
+                                type="password"
+                                required
+                                value={confirm}
+                                onChange={e => setConfirm(e.target.value)}
+                                placeholder="Répétez le mot de passe"
+                                className="w-full px-4 py-3 border border-slate-200 rounded-xl focus:ring-2 focus:ring-slate-900 outline-none text-sm"
+                            />
+                        </div>
+                        {errorMsg && <p className="text-red-500 text-sm">{errorMsg}</p>}
+                        <button
+                            type="submit"
+                            disabled={loading}
+                            className="w-full py-3 bg-slate-900 text-white rounded-xl font-bold hover:bg-slate-700 transition disabled:opacity-50"
+                        >
+                            {loading ? 'Mise à jour...' : 'Définir le mot de passe'}
+                        </button>
+                    </form>
+                )}
+
+                {step === 'done' && (
+                    <div className="text-center space-y-4">
+                        <div className="text-5xl">✅</div>
+                        <button onClick={() => navigate('/login')} className="w-full py-3 bg-slate-900 text-white rounded-xl font-bold hover:bg-slate-700 transition">
+                            Se connecter
+                        </button>
+                    </div>
+                )}
+            </div>
+        </div>
+    );
+}

apps/admin/src/pages/SettingsPage.tsx

@@ -221,23 +221,9 @@ export default function SettingsPage() {
                             <div className="text-xs font-bold text-indigo-600 uppercase mb-1">Statut Actuel</div>
                             <div className="text-lg font-bold text-indigo-900">{org.subscriptionStatus || 'INACTIF'}</div>
                         </div>
-                        <p className="text-xs text-slate-500 mb-6">
-                            Gérez vos factures, changez de forfait ou mettez à jour votre moyen de paiement en toute sécurité.
+                        <p className="text-xs text-slate-500">
+                            Paiement via Orange Money et Wave — portail de gestion disponible prochainement.
                         </p>
-                        <button 
-                            onClick={async () => {
-                                try {
-                                    const { url } = await api.post('/v1/payments/customer-portal', {}, token, selectedOrgId);
-                                    window.location.href = url;
-                                } catch (err) {
-                                    console.error(err);
-                                    alert('Impossible d\'ouvrir le portail de facturation.');
-                                }
-                            }}
-                            className="w-full py-3 bg-indigo-600 text-white rounded-xl font-bold hover:bg-indigo-700 transition-all flex items-center justify-center gap-2"
-                        >
-                            <span>⚙️</span> Gérer mon abonnement
-                        </button>
                     </section>
                 </div>
             </div>

apps/admin/src/pages/TrackFormPage.tsx

@@ -14,7 +14,7 @@ export default function TrackFormPage() {
     
     const [form, setForm] = useState({ 
         title: '', description: '', duration: 7, language: 'FR', 
-        isPremium: false, priceAmount: 0, stripePriceId: '' 
+        isPremium: false, priceAmount: 0
     });
     const [saving, setSaving] = useState(false);
 
@@ -24,8 +24,7 @@ export default function TrackFormPage() {
                 .then(r => r.json())
                 .then(t => setForm({ 
                     title: t.title, description: t.description || '', duration: t.duration, 
-                    language: t.language, isPremium: t.isPremium, priceAmount: t.priceAmount || 0, 
-                    stripePriceId: t.stripePriceId || '' 
+                    language: t.language, isPremium: t.isPremium, priceAmount: t.priceAmount || 0
                 })); 
         }
     }, [id, token, selectedOrgId, isNew]);
@@ -42,8 +41,7 @@ export default function TrackFormPage() {
             headers: ah(token, selectedOrgId), 
             body: JSON.stringify({ 
                 ...form, 
-                priceAmount: form.priceAmount || undefined, 
-                stripePriceId: form.stripePriceId || undefined 
+                priceAmount: form.priceAmount || undefined
             }) 
         });
         navigate('/content');
@@ -72,11 +70,9 @@ export default function TrackFormPage() {
                     <input type="checkbox" checked={form.isPremium} onChange={e => setForm(f => ({ ...f, isPremium: e.target.checked }))} className="w-4 h-4" />
                     <span className="text-sm font-medium text-amber-800">Formation Premium (payante)</span>
                 </label>
-                {form.isPremium && <div className="grid grid-cols-2 gap-4">
-                    <div><label className="text-sm font-medium text-slate-700 mb-1 block">Prix (XOF)</label>
-                        <input type="number" className={inp} value={form.priceAmount} onChange={e => setForm(f => ({ ...f, priceAmount: parseInt(e.target.value) }))} /></div>
-                    <div><label className="text-sm font-medium text-slate-700 mb-1 block">Stripe Price ID</label>
-                        <input className={inp} value={form.stripePriceId} onChange={e => setForm(f => ({ ...f, stripePriceId: e.target.value }))} /></div>
+                {form.isPremium && <div>
+                    <label className="text-sm font-medium text-slate-700 mb-1 block">Prix (XOF)</label>
+                    <input type="number" className={inp} value={form.priceAmount} onChange={e => setForm(f => ({ ...f, priceAmount: parseInt(e.target.value) }))} />
                 </div>}
                 <div className="flex gap-3 pt-2">
                     <button type="button" onClick={() => navigate('/content')} className="flex-1 border border-slate-200 text-slate-600 py-2.5 rounded-xl text-sm hover:bg-slate-50">Annuler</button>

apps/api/package.json

@@ -43,7 +43,6 @@
         "pino-pretty": "^13.1.3",
         "pptxgenjs": "^3.12.0",
         "puppeteer": "^22.0.0",
-        "stripe": "^20.3.1",
         "web-push": "^3.6.7",
         "xlsx": "^0.18.5",
         "zod": "^3.25.76"

apps/api/src/config.ts

@@ -26,7 +26,7 @@ const result = envSchema.safeParse(process.env);
 if (!result.success) {
     const { logger } = require('./logger');
     logger.error({ errors: result.error.format() }, '[CONFIG] ❌ Invalid environment variables');
-    process.exit(1);
+    throw new Error(`[CONFIG] Missing or invalid environment variables:\n${result.error.message}`);
 }
 
 export const config = result.data;

apps/api/src/index.ts

@@ -29,16 +29,15 @@ const server: FastifyInstance = fastify({
 });
 
 // Attach prisma to server instance for global access in routes
-server.decorate('prisma', prisma as any);
+server.decorate('prisma', prisma);
 
 // ── Middleware & Plugins ──────────────────────────────────────────────────────
-server.register(cors as any, {
-    origin: [
-        'https://admin.xamle.studio',
-        'https://xamle.studio',
-        'https://edtechadmin.netlify.app',
-        'https://edtechadminweb.netlify.app'
-    ],
+const corsOrigins = process.env.CORS_ORIGINS
+    ? process.env.CORS_ORIGINS.split(',').map(o => o.trim())
+    : ['https://admin.xamle.studio', 'https://xamle.studio', 'https://edtechadmin.netlify.app', 'https://edtechadminweb.netlify.app'];
+
+server.register(cors, {
+    origin: corsOrigins,
     methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
     allowedHeaders: ['Content-Type', 'Authorization', 'x-api-key', 'x-organization-id'],
     credentials: true
@@ -60,7 +59,7 @@ const registerRoutes = async () => {
     server.register(authRoutes, { prefix: '/v1/auth' });
     server.register(whatsappRoutes, { prefix: '/v1/whatsapp' });
     server.register(studentRoutes, { prefix: '/v1/student' });
-    server.register(stripeWebhookRoute, { prefix: '/v1/payments' });
+    server.register(stripeWebhookRoute, { prefix: '/v1/payments' }); // placeholder webhook
 
     // 2. Guarded Routes
     server.register(async (scope) => {
@@ -94,7 +93,7 @@ const registerRoutes = async () => {
             }
 
             // Centralized property for routes to use
-            (request as any).organizationId = request.headers['x-organization-id'] as string;
+            request.organizationId = request.headers['x-organization-id'] as string;
         });
 
         scope.addHook('preHandler', (request, _reply, done) => {

apps/api/src/middleware/rateLimit.ts

@@ -4,7 +4,7 @@ import { logger } from '../logger';
 
 export async function setupRateLimit(server: FastifyInstance) {
     try {
-        await server.register(rateLimit as any, {
+        await server.register(rateLimit, {
             max: 100,
             timeWindow: '1 minute',
             keyGenerator: (req: FastifyRequest) => req.ip as string,

apps/api/src/routes/admin.ts

@@ -1,6 +1,7 @@
 import { FastifyInstance } from 'fastify';
 import { prisma } from '../services/prisma';
 import { whatsappQueue } from '../services/queue';
+import { logger } from '../logger';
 import { z } from 'zod';
 import { calculateWER, formatError } from '../utils/metrics';
 import { getOrganizationId } from '@repo/database';
@@ -17,7 +18,6 @@ const TrackSchema = z.object({
     language: z.enum(['FR', 'WOLOF']).default('FR'),
     isPremium: z.boolean().default(false),
     priceAmount: z.number().int().optional(),
-    stripePriceId: z.string().optional(),
 });
 
 const TrackDaySchema = z.object({
@@ -176,7 +176,8 @@ export async function adminRoutes(fastify: FastifyInstance) {
 
         const currentDay = enrollment ? Math.floor(enrollment.currentDay) : 0;
 
-        const organizationId = getOrganizationId() || 'default-org-id';
+        const organizationId = getOrganizationId();
+        if (!organizationId) return reply.code(400).send({ error: 'x-organization-id header required' });
         await prisma.businessProfile.upsert({
             where: { userId },
             update: { lastUpdatedFromDay: currentDay, organizationId },
@@ -184,12 +185,12 @@ export async function adminRoutes(fastify: FastifyInstance) {
         });
 
         // 3. Dispatch Background Job (Audio Delivery + Next Day Increment)
-        await whatsappQueue.add('send-admin-audio-override', {
-            userId,
-            trackId,
-            overrideAudioUrl,
-            adminId
-        });
+        try {
+            await whatsappQueue.add('send-admin-audio-override', { userId, trackId, overrideAudioUrl, adminId });
+            logger.info({ userId, trackId }, '[ADMIN] send-admin-audio-override enqueued');
+        } catch (qErr) {
+            logger.error({ qErr, userId }, '[ADMIN] Failed to enqueue send-admin-audio-override');
+        }
 
         return reply.code(200).send({ ok: true, progress });
     });
@@ -216,10 +217,13 @@ export async function adminRoutes(fastify: FastifyInstance) {
         }
 
         // Use the 'send-message-direct' logic (which bypasses pedagogy state)
-        await whatsappQueue.add('send-message-direct', {
-            phone: user.phone,
-            text
-        });
+        try {
+            await whatsappQueue.add('send-message-direct', { phone: user.phone, text });
+            logger.info({ phone: user.phone }, '[ADMIN] send-message-direct enqueued');
+        } catch (qErr) {
+            logger.error({ qErr, userId }, '[ADMIN] Failed to enqueue send-message-direct');
+            return reply.code(500).send({ error: 'Failed to queue message' });
+        }
 
         return reply.code(200).send({ ok: true, message: "Custom message queued for sending." });
     });
@@ -250,7 +254,8 @@ export async function adminRoutes(fastify: FastifyInstance) {
     fastify.post('/tracks', async (req, reply) => {
         const body = TrackSchema.safeParse(req.body);
         if (!body.success) return reply.code(400).send({ error: body.error.flatten() });
-        const organizationId = getOrganizationId() || 'default-org-id';
+        const organizationId = getOrganizationId();
+        if (!organizationId) return reply.code(400).send({ error: 'x-organization-id header required' });
         const track = await prisma.track.create({ data: { ...body.data, organizationId } });
         return reply.code(201).send(track);
     });
@@ -310,7 +315,8 @@ export async function adminRoutes(fastify: FastifyInstance) {
     fastify.post<{ Params: { trackId: string } }>('/tracks/:trackId/days', async (req, reply) => {
         const body = TrackDaySchema.safeParse(req.body);
         if (!body.success) return reply.code(400).send({ error: body.error.flatten() });
-        const organizationId = getOrganizationId() || 'default-org-id';
+        const organizationId = getOrganizationId();
+        if (!organizationId) return reply.code(400).send({ error: 'x-organization-id header required' });
         const day = await prisma.trackDay.create({
             data: {
                 ...body.data,
@@ -513,8 +519,52 @@ export async function adminRoutes(fastify: FastifyInstance) {
         });
     });
 
-    fastify.post('/training/upload', async (_req, reply) => {
-        // Just a placeholder until full R2 integration for standalone uploads
-        return reply.code(501).send({ error: "Not Implemented Yet" });
+    fastify.post('/training/upload', async (req, reply) => {
+        const organizationId = req.organizationId;
+        if (!organizationId) return reply.code(400).send({ error: 'Organization ID required' });
+
+        const parts = req.parts();
+        let fileBuffer: Buffer | null = null;
+        let filename = 'audio.ogg';
+        let mimeType = 'audio/ogg';
+
+        for await (const part of parts) {
+            if (part.type === 'file') {
+                fileBuffer = await part.toBuffer();
+                filename = part.filename || filename;
+                mimeType = part.mimetype || mimeType;
+            }
+        }
+
+        if (!fileBuffer || fileBuffer.length === 0) {
+            return reply.code(400).send({ error: 'No audio file provided' });
+        }
+
+        try {
+            const { uploadFile } = await import('../services/storage');
+            const { aiService } = await import('../services/ai');
+            const { convertToMp3IfNeeded } = await import('@repo/ai-sdk');
+
+            // 1. Store raw audio to R2
+            const audioUrl = await uploadFile(fileBuffer, filename, mimeType, organizationId);
+
+            // 2. Convert + transcribe
+            const { buffer: mp3Buffer, format } = await convertToMp3IfNeeded(fileBuffer, filename);
+            const { text: transcription } = await aiService.transcribeAudio(mp3Buffer, `upload.${format}`);
+
+            // 3. Persist as TrainingData for review
+            const record = await prisma.trainingData.create({
+                data: {
+                    audioUrl,
+                    transcription: transcription || '',
+                    status: 'PENDING'
+                }
+            });
+
+            return reply.send({ ok: true, id: record.id, audioUrl, transcription });
+        } catch (err: any) {
+            logger.error({ err, organizationId }, '[TRAINING_UPLOAD] Failed');
+            return reply.code(500).send({ error: 'Upload failed', detail: err.message });
+        }
     });
 }

apps/api/src/routes/ai.ts

@@ -5,9 +5,18 @@ import { PdfOnePagerRenderer } from '../services/renderers/pdf-renderer';
 import { PptxDeckRenderer } from '../services/renderers/pptx-renderer';
 import { uploadFile } from '../services/storage';
 import { convertToMp3IfNeeded } from '@repo/ai-sdk';
+import { parsePersonalityConfig } from '@repo/database';
 import { z } from 'zod';
 import { prisma } from '../services/prisma';
 
+interface QuotaExceededError extends Error {
+    name: 'QuotaExceededError';
+    retryAfterMs?: number;
+}
+function isQuotaExceeded(err: unknown): err is QuotaExceededError {
+    return err instanceof Error && err.name === 'QuotaExceededError';
+}
+
 
 export async function aiRoutes(fastify: FastifyInstance) {
     const pdfRenderer = new PdfOnePagerRenderer();
@@ -123,7 +132,7 @@ export async function aiRoutes(fastify: FastifyInstance) {
             const downloadUrl = await uploadFile(audioBuffer, `lesson-audio-${Date.now()}.mp3`, 'audio/mpeg', organizationId);
             return { success: true, url: downloadUrl };
         } catch (err: unknown) {
-            if (err instanceof Error && (err as any).name === 'QuotaExceededError') {
+            if (isQuotaExceeded(err)) {
                 return reply.code(429).send({ error: 'quota_exceeded' });
             }
             throw err;
@@ -157,8 +166,8 @@ export async function aiRoutes(fastify: FastifyInstance) {
             return { success: true, text, confidence, isSuspect };
         } catch (err: unknown) {
             logger.error(`[AI] ❌ Transcription error:`, err);
-            if (err instanceof Error && (err as any).name === 'QuotaExceededError') {
-                return reply.code(429).send({ error: 'quota_exceeded', retryAfterMs: (err as any).retryAfterMs });
+            if (isQuotaExceeded(err)) {
+                return reply.code(429).send({ error: 'quota_exceeded', retryAfterMs: err.retryAfterMs });
             }
             // Ensure error message is bubbled up for debugging
             return reply.code(500).send({ 
@@ -278,7 +287,7 @@ export async function aiRoutes(fastify: FastifyInstance) {
                 aiSource: feedback.aiSource
             };
         } catch (err: unknown) {
-            if (err instanceof Error && (err as any).name === 'QuotaExceededError') {
+            if (isQuotaExceeded(err)) {
                 return reply.code(429).send({ error: 'quota_exceeded' });
             }
             throw err;
@@ -330,15 +339,15 @@ export async function aiRoutes(fastify: FastifyInstance) {
             select: { name: true, personalityConfig: true }
         });
 
-        const personality = (org?.personalityConfig as Record<string, any>) || {};
-        
+        const personality = parsePersonalityConfig(org?.personalityConfig);
+
         const result = await aiService.generateCrmCampaign(
             contact,
             objective,
             {
                 name: org?.name || 'Notre Entreprise',
-                mission: personality.coreMission || 'Offrir un service d excellence',
-                tone: personality.toneDescription || 'Professionnel et chaleureux'
+                mission: personality?.coreMission || 'Offrir un service d excellence',
+                tone: personality?.toneDescription || 'Professionnel et chaleureux'
             },
             language
         );
@@ -402,10 +411,11 @@ export async function aiRoutes(fastify: FastifyInstance) {
                 const org = await prisma.organization.findUnique({ where: { id: organizationId } });
                 const results = [];
                 for (const contact of contacts) {
+                    const orgPersonality = parsePersonalityConfig(org?.personalityConfig);
                     const gen = await aiService.generateCrmCampaign(contact, "Présentation de nos nouveaux services", {
                         name: org?.name || 'Xamlé',
-                        mission: (org?.personalityConfig as any)?.coreMission || 'Accompagnement IA',
-                        tone: (org?.personalityConfig as any)?.toneDescription || 'Professionnel'
+                        mission: orgPersonality?.coreMission || 'Accompagnement IA',
+                        tone: orgPersonality?.toneDescription || 'Professionnel'
                     });
                     results.push({ 
                         contactId: contact.id,
@@ -441,7 +451,7 @@ export async function aiRoutes(fastify: FastifyInstance) {
 
     // 12. CRM: Voice Command Processor
     fastify.post('/crm/voice-command', async (request, reply) => {
-        const file = await (request as any).file();
+        const file = await request.file();
         if (!file) return reply.code(400).send({ error: 'No audio file' });
 
         const buffer = await file.toBuffer();

apps/api/src/routes/analytics.ts

@@ -9,7 +9,7 @@ export async function analyticsRoutes(fastify: FastifyInstance) {
      * Returns volume statistics: messages, users, and estimated token consumption.
      */
     fastify.get('/usage', async (req, reply) => {
-        const organizationId = (req as any).organizationId;
+        const organizationId = req.organizationId;
 
         if (!organizationId) {
             return reply.code(400).send({ error: 'Organization ID is required' });
@@ -35,8 +35,19 @@ export async function analyticsRoutes(fastify: FastifyInstance) {
                 })
             ]);
 
-            // Estimate costs (Simplified: 1000 tokens avg per message interaction)
-            const estimatedTokens = totalMessages * 1000;
+            // ~1000 tokens avg per outbound AI message (only outbound calls the LLM)
+            const estimatedTokens = outboundMessages * 1000;
+
+            // Pricing per 1M tokens (input+output blended) — updated May 2026
+            const MODEL_PRICES_USD_PER_1M: Record<string, number> = {
+                'gpt-4o': 7.50,
+                'gpt-4o-mini': 0.30,
+                'gemini-2.0-flash': 0.15,
+                'gemini-1.5-pro': 3.50,
+                'claude-sonnet-4-6': 4.50,
+            };
+            const activeModel = process.env.DEFAULT_AI_MODEL || 'gpt-4o-mini';
+            const pricePerMillion = MODEL_PRICES_USD_PER_1M[activeModel] ?? 0.30;
 
             return {
                 messages: {
@@ -50,7 +61,8 @@ export async function analyticsRoutes(fastify: FastifyInstance) {
                 },
                 costs: {
                     estimatedTokens,
-                    estimatedUsd: (estimatedTokens / 1000000) * 0.50 // Mock price for gpt-4o-mini
+                    estimatedUsd: (estimatedTokens / 1_000_000) * pricePerMillion,
+                    model: activeModel
                 }
             };
         } catch (err) {
@@ -64,7 +76,7 @@ export async function analyticsRoutes(fastify: FastifyInstance) {
      * Returns pedagogical performance: completion rates and scores.
      */
     fastify.get('/pedagogy', async (req, reply) => {
-        const organizationId = (req as any).organizationId;
+        const organizationId = req.organizationId;
 
         if (!organizationId) {
             return reply.code(400).send({ error: 'Organization ID is required' });
@@ -114,7 +126,7 @@ export async function analyticsRoutes(fastify: FastifyInstance) {
      * Returns CRM campaign funnel: sent, delivered, read, failed.
      */
     fastify.get('/campaigns', async (req, reply) => {
-        const organizationId = (req as any).organizationId;
+        const organizationId = req.organizationId;
 
         if (!organizationId) {
             return reply.code(400).send({ error: 'Organization ID is required' });

apps/api/src/routes/auth.ts

@@ -20,15 +20,17 @@ export async function authRoutes(fastify: FastifyInstance) {
             }
         }
     }, async (request, reply) => {
-        const { email, password, organizationId } = request.body as any;
+        const { email, password, organizationId } = request.body as { email: string; password: string; organizationId: string };
         logger.info(`[AUTH] Login attempt for ${email} (Org: ${organizationId || 'default'})`);
 
-        const orgId = organizationId || 'default-org-id';
+        if (!organizationId) {
+            return reply.code(400).send({ error: 'organizationId required' });
+        }
 
-        const user = await AuthService.findUserByEmail(email, orgId);
+        const user = await AuthService.findUserByEmail(email, organizationId);
         
         if (!user || !user.passwordHash) {
-            logger.warn(`[AUTH] User not found: ${email} in Org: ${orgId}`);
+            logger.warn(`[AUTH] User not found: ${email} in Org: ${organizationId}`);
             return reply.code(401).send({ error: 'Unauthorized', message: 'Invalid email or password' });
         }
 
@@ -53,14 +55,73 @@ export async function authRoutes(fastify: FastifyInstance) {
                 email: user.email,
                 role: user.role,
                 organizationId: user.organizationId,
-                organization: (user as any).organization
+                organization: user.organization
             }
         };
     });
 
+    // Request a password reset link
+    fastify.post('/forgot-password', async (request, reply) => {
+        const { email } = request.body as { email: string };
+        if (!email) return reply.code(400).send({ error: 'Email required' });
+
+        // Always return 200 to avoid email enumeration
+        const user = await prisma.user.findFirst({ where: { email } });
+        if (!user) return reply.send({ ok: true });
+
+        // Sign a short-lived reset token (1 hour) with extra 'purpose' claim not in the standard payload shape
+        const resetToken = (fastify.jwt.sign as Function)(
+            { id: user.id, purpose: 'reset' },
+            { expiresIn: '1h' }
+        ) as string;
+
+        const adminUrl = process.env.ADMIN_URL || 'https://edtechadmin.netlify.app';
+        const resetLink = `${adminUrl}/reset-password?token=${resetToken}`;
+
+        const { scheduleEmail } = await import('../services/queue');
+        await scheduleEmail({
+            to: email,
+            subject: 'Réinitialisation de votre mot de passe — XAMLÉ',
+            htmlContent: `<p>Bonjour ${user.name || ''},</p>
+<p>Cliquez sur le lien ci-dessous pour réinitialiser votre mot de passe. Ce lien expire dans 1 heure.</p>
+<p><a href="${resetLink}" style="background:#1e293b;color:#fff;padding:12px 24px;border-radius:8px;text-decoration:none;font-weight:bold;">Réinitialiser mon mot de passe</a></p>
+<p>Si vous n'avez pas demandé cette réinitialisation, ignorez cet email.</p>`
+        });
+
+        logger.info({ email }, '[AUTH] Password reset link sent');
+        return reply.send({ ok: true });
+    });
+
+    // Set new password via reset token
+    fastify.post('/reset-password', async (request, reply) => {
+        const { token, password } = request.body as { token: string; password: string };
+        if (!token || !password) return reply.code(400).send({ error: 'Token and password required' });
+        if (password.length < 6) return reply.code(400).send({ error: 'Password must be at least 6 characters' });
+
+        let payload: { id: string; purpose?: string };
+        try {
+            payload = fastify.jwt.verify(token) as { id: string; purpose?: string };
+        } catch {
+            return reply.code(401).send({ error: 'Invalid or expired token' });
+        }
+
+        if (payload.purpose !== 'reset') {
+            return reply.code(401).send({ error: 'Invalid token purpose' });
+        }
+
+        const passwordHash = await AuthService.hashPassword(password);
+        await prisma.user.update({
+            where: { id: payload.id },
+            data: { passwordHash }
+        });
+
+        logger.info({ userId: payload.id }, '[AUTH] Password reset successfully');
+        return reply.send({ ok: true });
+    });
+
     // Get current user profile (guarded by JWT)
     fastify.get('/me', async (request, reply) => {
-        const { id } = request.user as any;
+        const { id } = request.user;
         
         const user = await prisma.user.findUnique({
             where: { id },
@@ -78,7 +139,7 @@ export async function authRoutes(fastify: FastifyInstance) {
                 email: user.email,
                 role: user.role,
                 organizationId: user.organizationId,
-                organization: (user as any).organization
+                organization: user.organization
             }
         };
     });

apps/api/src/routes/campaigns.ts

@@ -1,14 +1,17 @@
 import { FastifyInstance } from 'fastify';
+import { z } from 'zod';
 import { aiService } from '../services/ai';
 
 export default async function campaignRoutes(fastify: FastifyInstance) {
     // Generate AI Message for Campaign
     fastify.post('/:id/campaigns/generate', async (req, reply) => {
-        const { prompt, listId } = req.body as { prompt: string, listId?: string };
-
-        if (!prompt) {
-            return reply.code(400).send({ error: 'Prompt is required' });
-        }
+        const schema = z.object({
+            prompt: z.string().min(1).max(2000),
+            listId: z.string().uuid().optional()
+        });
+        const parsed = schema.safeParse(req.body);
+        if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+        const { prompt, listId } = parsed.data;
 
         try {
             const { text, type, aiSource } = await aiService.generateBroadcastMessage(prompt);

apps/api/src/routes/internal.ts

@@ -28,8 +28,8 @@ export async function internalRoutes(fastify: FastifyInstance) {
 
     createBullBoard({
         queues: [
-            new BullMQAdapter(whatsappQueue as any),
-            new BullMQAdapter(notificationQueue as any)
+            new BullMQAdapter(whatsappQueue),
+            new BullMQAdapter(notificationQueue)
         ],
         serverAdapter,
     });
@@ -37,7 +37,7 @@ export async function internalRoutes(fastify: FastifyInstance) {
     // Re-enabled BullBoard for production monitoring
     serverAdapter.setBasePath('/v1/internal/queues');
     fastify.register(async (instance) => {
-        instance.register(serverAdapter.registerPlugin() as any, {
+        instance.register(serverAdapter.registerPlugin(), {
             prefix: '/',
         });
     }, { 
@@ -110,8 +110,8 @@ export async function internalRoutes(fastify: FastifyInstance) {
         try {
             await whatsappService.handleIncomingMessage(phone, text, audioUrl, imageUrl, undefined, organizationId);
             return reply.send({ ok: true });
-        } catch (err: any) {
-            return reply.code(500).send({ error: err.message });
+        } catch (err: unknown) {
+            return reply.code(500).send({ error: err instanceof Error ? err.message : String(err) });
         }
     });
 

apps/api/src/routes/notifications.ts

@@ -19,8 +19,8 @@ export async function notificationRoutes(fastify: FastifyInstance) {
         });
 
         const { subscription } = bodySchema.parse(request.body);
-        const user = (request as any).user;
-        const organizationId = (request as any).organizationId;
+        const user = request.user;
+        const organizationId = request.organizationId;
 
         if (!user || !organizationId) {
             return reply.code(401).send({ error: 'Unauthorized' });

apps/api/src/routes/organizations.ts

@@ -104,7 +104,7 @@ export async function organizationRoutes(fastify: FastifyInstance) {
 
             await auditService.log({
                 action: 'ORGANIZATION_CREATED',
-                actorId: (req as any).user?.id,
+                actorId: req.user?.id,
                 resourceId: org.id,
                 details: { name: org.name, slug: org.slug }
             });
@@ -232,6 +232,66 @@ export async function organizationRoutes(fastify: FastifyInstance) {
         }
     });
 
+    // 7a. Upload Knowledge Base Document → R2 → update org URL → trigger indexing
+    fastify.post('/:id/upload-kb', async (req, reply) => {
+        const { id } = req.params as { id: string };
+
+        const parts = req.parts();
+        let fileBuffer: Buffer | null = null;
+        let filename = 'knowledge-base.pdf';
+        let mimeType = 'application/pdf';
+
+        for await (const part of parts) {
+            if (part.type === 'file') {
+                fileBuffer = await part.toBuffer();
+                filename = part.filename || filename;
+                mimeType = part.mimetype || mimeType;
+            }
+        }
+
+        if (!fileBuffer || fileBuffer.length === 0) {
+            return reply.code(400).send({ error: 'No file provided' });
+        }
+
+        try {
+            const { uploadFile } = await import('../services/storage');
+            const { whatsappQueue } = await import('../services/queue');
+
+            const publicUrl = await uploadFile(fileBuffer, filename, mimeType, id);
+
+            await prisma.organization.update({
+                where: { id },
+                data: { knowledgeBaseUrl: publicUrl }
+            });
+
+            await whatsappQueue.add('process-kb', { organizationId: id, url: publicUrl });
+
+            // Return chunk count for the stats sidebar
+            const chunkCount = await prisma.knowledgeBaseEntry.count({ where: { organizationId: id } });
+
+            logger.info({ organizationId: id, url: publicUrl }, '[KB_UPLOAD] Knowledge base uploaded and indexing started');
+            return reply.send({ ok: true, url: publicUrl, chunkCount });
+        } catch (err: any) {
+            logger.error({ err, organizationId: id }, '[KB_UPLOAD] Failed');
+            return reply.code(500).send({ error: 'Upload failed', detail: err.message });
+        }
+    });
+
+    // 7b. Get Knowledge Base stats
+    fastify.get('/:id/kb-stats', async (req, reply) => {
+        const { id } = req.params as { id: string };
+        try {
+            const [chunkCount, org] = await Promise.all([
+                prisma.knowledgeBaseEntry.count({ where: { organizationId: id } }),
+                prisma.organization.findUnique({ where: { id }, select: { knowledgeBaseUrl: true } })
+            ]);
+            return { chunkCount, hasKnowledgeBase: !!org?.knowledgeBaseUrl, knowledgeBaseUrl: org?.knowledgeBaseUrl };
+        } catch (err) {
+            logger.error({ err, organizationId: id }, '[KB_STATS] Failed');
+            return reply.code(500).send({ error: 'Failed to fetch KB stats' });
+        }
+    });
+
     // 7. Trigger Knowledge Base Indexing
     fastify.post('/:id/index-kb', async (req, reply) => {
         const { id } = req.params as { id: string };
@@ -262,7 +322,7 @@ export async function organizationRoutes(fastify: FastifyInstance) {
                 fileBuffer = await part.toBuffer();
             } else {
                 if (part.fieldname === 'listName') {
-                    listName = (part as any).value;
+                    listName = part.value as string;
                 }
             }
         }
@@ -292,7 +352,7 @@ export async function organizationRoutes(fastify: FastifyInstance) {
 
         const results = { created: 0, updated: 0, errors: 0 };
 
-        for (const row of rows as any[]) {
+        for (const row of rows as Record<string, unknown>[]) {
             try {
                 const resultsBatch = await ContactService.bulkImport(organizationId, [row], broadcastList.id);
                 results.created += resultsBatch.created;
@@ -345,11 +405,12 @@ export async function organizationRoutes(fastify: FastifyInstance) {
     // 11. CRM: Bulk Delete Contacts
     fastify.post('/:id/contacts/bulk-delete', async (req, reply) => {
         const { id: organizationId } = req.params as { id: string };
-        const { contactIds } = req.body as { contactIds: string[] };
-
-        if (!contactIds || !Array.isArray(contactIds)) {
-            return reply.code(400).send({ error: 'Invalid contactIds' });
-        }
+        const schema = z.object({
+            contactIds: z.array(z.string().uuid()).min(1).max(500)
+        });
+        const parsed = schema.safeParse(req.body);
+        if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+        const { contactIds } = parsed.data;
 
         try {
             const result = await prisma.contact.deleteMany({
@@ -370,11 +431,13 @@ export async function organizationRoutes(fastify: FastifyInstance) {
     // 12. CRM: Reply to Contact (1-to-1)
     fastify.post('/:id/messages/reply', async (req, reply) => {
         const { id: organizationId } = req.params as { id: string };
-        const { contactId, content } = req.body as { contactId: string, content: string };
-
-        if (!contactId || !content) {
-            return reply.code(400).send({ error: 'contactId and content are required' });
-        }
+        const schema = z.object({
+            contactId: z.string().uuid(),
+            content: z.string().min(1).max(4096)
+        });
+        const parsed = schema.safeParse(req.body);
+        if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+        const { contactId, content } = parsed.data;
 
         try {
             // 1. Create message record
@@ -443,14 +506,92 @@ export async function organizationRoutes(fastify: FastifyInstance) {
         }
     });
 
-    // 14. CRM: Bulk Contact Import from JSON (Parsed by Frontend)
-    fastify.post('/:id/contacts/bulk', async (req, reply) => {
+    // 15. Knowledge Base — list chunks
+    fastify.get('/:id/kb', async (req, reply) => {
         const { id: organizationId } = req.params as { id: string };
-        const { contacts, listName } = req.body as { contacts: any[], listName?: string };
+        const { page = '1', limit = '50' } = req.query as { page?: string; limit?: string };
+        const pageNum = Math.max(1, parseInt(page) || 1);
+        const limitNum = Math.min(100, Math.max(1, parseInt(limit) || 50));
+        const skip = (pageNum - 1) * limitNum;
+        try {
+            const [entries, total] = await Promise.all([
+                prisma.knowledgeBaseEntry.findMany({
+                    where: { organizationId },
+                    orderBy: { createdAt: 'desc' },
+                    skip,
+                    take: limitNum,
+                    select: { id: true, content: true, metadata: true, createdAt: true }
+                }),
+                prisma.knowledgeBaseEntry.count({ where: { organizationId } })
+            ]);
+            return { entries, total, page: pageNum, limit: limitNum };
+        } catch (err) {
+            logger.error({ err, organizationId }, '[KB_LIST] Failed');
+            return reply.code(500).send({ error: 'Failed to fetch KB entries' });
+        }
+    });
 
-        if (!contacts || !Array.isArray(contacts)) {
-            return reply.code(400).send({ error: 'Invalid contacts data' });
+    // 16. Knowledge Base — delete a chunk
+    fastify.delete('/:id/kb/:entryId', async (req, reply) => {
+        const { id: organizationId, entryId } = req.params as { id: string; entryId: string };
+        try {
+            const entry = await prisma.knowledgeBaseEntry.findFirst({ where: { id: entryId, organizationId } });
+            if (!entry) return reply.code(404).send({ error: 'Entry not found' });
+            await prisma.knowledgeBaseEntry.delete({ where: { id: entryId } });
+            return { ok: true };
+        } catch (err) {
+            logger.error({ err, organizationId, entryId }, '[KB_DELETE] Failed');
+            return reply.code(500).send({ error: 'Failed to delete entry' });
+        }
+    });
+
+    // 17. Campaign History — list with stats breakdown
+    fastify.get('/:id/campaign-history', async (req, reply) => {
+        const { id: organizationId } = req.params as { id: string };
+        const { page = '1', limit = '50', status } = req.query as { page?: string; limit?: string; status?: string };
+        const pageNum = Math.max(1, parseInt(page) || 1);
+        const limitNum = Math.min(100, Math.max(1, parseInt(limit) || 50));
+        const skip = (pageNum - 1) * limitNum;
+        const where = { organizationId, ...(status ? { status } : {}) };
+        try {
+            const [records, total, statusCounts] = await Promise.all([
+                prisma.campaignHistory.findMany({
+                    where,
+                    orderBy: { sentAt: 'desc' },
+                    skip,
+                    take: limitNum,
+                    include: { contact: { select: { name: true, phoneNumber: true } } }
+                }),
+                prisma.campaignHistory.count({ where }),
+                prisma.campaignHistory.groupBy({
+                    by: ['status'],
+                    where: { organizationId },
+                    _count: { _all: true }
+                })
+            ]);
+            const stats = { SENT: 0, DELIVERED: 0, READ: 0, FAILED: 0 } as Record<string, number>;
+            for (const row of statusCounts) stats[row.status] = row._count._all;
+            return { records, total, page: pageNum, limit: limitNum, stats };
+        } catch (err) {
+            logger.error({ err, organizationId }, '[CAMPAIGN_HISTORY] Failed');
+            return reply.code(500).send({ error: 'Failed to fetch campaign history' });
         }
+    });
+
+    // 14. CRM: Bulk Contact Import from JSON (Parsed by Frontend)
+    fastify.post('/:id/contacts/bulk', async (req, reply) => {
+        const { id: organizationId } = req.params as { id: string };
+        const schema = z.object({
+            contacts: z.array(z.object({
+                phoneNumber: z.string().min(7).max(20),
+                name: z.string().max(120).optional(),
+                attributes: z.record(z.string(), z.unknown()).optional()
+            })).min(1).max(5000),
+            listName: z.string().max(120).optional()
+        });
+        const parsed = schema.safeParse(req.body);
+        if (!parsed.success) return reply.code(400).send({ error: parsed.error.flatten() });
+        const { contacts, listName } = parsed.data;
 
         const date = new Date().toLocaleDateString('fr-FR');
         const finalListName = listName || `Import du ${date}`;

apps/api/src/routes/payments.ts

@@ -1,219 +1,25 @@
 import { FastifyInstance } from 'fastify';
-import type { FastifyRequest } from 'fastify';
-import { stripeService } from '../services/stripe';
-import { prisma } from '../services/prisma';
-import { z } from 'zod';
 
-// ─── Shared Zod schemas ────────────────────────────────────────────────────────
-const checkoutSchema = z.object({
-    userId: z.string().uuid(),
-    trackId: z.string().uuid(),
-});
-
-// ─── Private routes (require ADMIN_API_KEY) ───────────────────────────────────
+// Payment routes — Orange Money & Wave integration (à implémenter)
 export async function paymentRoutes(fastify: FastifyInstance) {
-
-    // Create a Checkout Session
-    fastify.post('/checkout', async (request, reply) => {
-        const parseResult = checkoutSchema.safeParse(request.body);
-        if (!parseResult.success) {
-            return reply.status(400).send({ error: 'Invalid request body', details: parseResult.error.flatten() });
-        }
-
-        const { userId, trackId } = parseResult.data;
-
-        try {
-            // Validate the track exists and is premium
-            const track = await prisma.track.findUnique({ where: { id: trackId } });
-
-            if (!track || !track.isPremium || !track.stripePriceId) {
-                return reply.status(400).send({ error: 'Invalid or non-premium track' });
-            }
-
-            const user = await prisma.user.findUnique({ where: { id: userId } });
-            if (!user) {
-                return reply.status(404).send({ error: 'User not found' });
-            }
-
-            const checkoutUrl = await stripeService.createLegacyCheckoutSession(
-                user.id,
-                track.id,
-                track.stripePriceId,
-                user.phone || ''
-            );
-
-            return { success: true, url: checkoutUrl };
-
-        } catch (error) {
-            fastify.log.error(error);
-            return reply.status(500).send({ error: 'Failed to create checkout session' });
-        }
-    });
-
-    // Create a Subscription Session for an Organization
-    fastify.post('/org-checkout', async (request, reply) => {
-        const { organizationId, email } = request.body as { organizationId: string, email?: string };
-        if (!organizationId) {
-            return reply.status(400).send({ error: 'Missing organizationId' });
-        }
-
-        try {
-            const checkoutUrl = await stripeService.createOrganizationSubscriptionSession(organizationId, email);
-            return { success: true, url: checkoutUrl };
-        } catch (error) {
-            fastify.log.error(error);
-            return reply.status(500).send({ error: 'Failed to create organization checkout session' });
-        }
+    fastify.post('/initiate', async (_req, reply) => {
+        return reply.code(501).send({
+            error: 'Not Implemented',
+            message: 'Intégration Orange Money / Wave en cours.'
+        });
     });
 
-    // Create a Billing Portal Session
-    fastify.post('/customer-portal', async (request, reply) => {
-        const organizationId = (request as any).organizationId;
-        if (!organizationId) {
-            return reply.status(400).send({ error: 'Missing organizationId' });
-        }
-
-        try {
-            const org = await prisma.organization.findUnique({
-                where: { id: organizationId },
-                select: { stripeCustomerId: true }
-            });
-
-            if (!org?.stripeCustomerId) {
-                return reply.status(400).send({ error: 'No active subscription found for this organization' });
-            }
-
-            const portalUrl = await stripeService.createCustomerPortalSession(org.stripeCustomerId);
-            return { success: true, url: portalUrl };
-        } catch (error) {
-            fastify.log.error(error);
-            return reply.status(500).send({ error: 'Failed to create billing portal session' });
-        }
+    fastify.get('/status/:paymentId', async (_req, reply) => {
+        return reply.code(501).send({
+            error: 'Not Implemented',
+            message: 'Vérification statut paiement en cours.'
+        });
     });
 }
 
-// ─── Public Stripe webhook (no API key auth — secured by Stripe signature) ────
+// Webhook placeholder — à brancher sur Orange Money / Wave
 export async function stripeWebhookRoute(fastify: FastifyInstance) {
-    // Capture raw body buffer for Stripe signature verification
-    fastify.addContentTypeParser('application/json', { parseAs: 'buffer' }, async (req: FastifyRequest, body: Buffer) => {
-        req.rawBody = body;
-        return JSON.parse(body.toString('utf8'));
+    fastify.post('/webhook', async (_req, reply) => {
+        return reply.code(200).send({ ok: true });
     });
-
-    // ── POST /webhook or /webhook/:organizationId ───────────────────────────
-    fastify.post('/webhook', async (request, reply) => handleWebhook(request, reply));
-    fastify.post('/webhook/:organizationId', async (request, reply) => handleWebhook(request, reply));
-
-    async function handleWebhook(request: any, reply: any) {
-        const { organizationId } = request.params as { organizationId?: string };
-        const sig = request.headers['stripe-signature'];
-
-        if (!sig || typeof sig !== 'string') {
-            return reply.status(400).send({ error: 'Missing stripe-signature header' });
-        }
-
-        let event;
-
-        try {
-            const rawBody = request.rawBody;
-            if (!rawBody) throw new Error('Missing raw body');
-            event = await stripeService.verifyWebhookSignature(rawBody, sig, organizationId);
-        } catch (err: unknown) {
-            const errorMsg = err instanceof Error ? err.message : String(err);
-            fastify.log.warn(`[Stripe Webhook] Signature verification failed for Org ${organizationId || 'global'}: ${errorMsg}`);
-            return reply.status(400).send(`Webhook Error: ${errorMsg}`);
-        }
-
-        // --- Handle Events ---
-
-        // 1. Single Payments (Student enrolling in premium track)
-        if (event.type === 'checkout.session.completed') {
-            const session = event.data.object as any;
-            const userId = session.metadata?.userId;
-            const trackId = session.metadata?.trackId;
-            const orgId = session.metadata?.organizationId; // If it's an org sub, it has this
-
-            if (userId && trackId) {
-                // Determine organization context (mandatory for hardened schema)
-                const targetOrgId = orgId || session.metadata?.targetOrganizationId || 'default-org-id';
-
-                try {
-                    await prisma.$transaction(async (tx) => {
-                        await tx.payment.upsert({
-                            where: { stripeSessionId: session.id },
-                            update: {
-                                status: 'COMPLETED',
-                                amount: session.amount_total,
-                                currency: session.currency || 'XOF',
-                                organizationId: targetOrgId
-                            },
-                            create: {
-                                userId,
-                                trackId,
-                                amount: session.amount_total,
-                                status: 'COMPLETED',
-                                stripeSessionId: session.id,
-                                currency: session.currency || 'XOF',
-                                organizationId: targetOrgId
-                            }
-                        });
-
-                        const existingEnrollment = await tx.enrollment.findFirst({
-                            where: { userId, trackId }
-                        });
-
-                        if (!existingEnrollment) {
-                            await tx.enrollment.create({
-                                data: {
-                                    userId,
-                                    trackId,
-                                    status: 'ACTIVE',
-                                    currentDay: 1,
-                                    organizationId: targetOrgId
-                                }
-                            });
-                        }
-                    });
-                } catch (dbError) {
-                    fastify.log.error(dbError, '[Stripe Webhook] DB error during student payment');
-                }
-            } else if (orgId) {
-                // This was a subscription checkout for an organization
-                await prisma.organization.update({
-                    where: { id: orgId },
-                    data: {
-                        stripeCustomerId: session.customer as string,
-                        subscriptionStatus: 'ACTIVE'
-                    }
-                });
-                fastify.log.info(`[Stripe Webhook] Organization ${orgId} subscribed.`);
-            }
-        }
-
-        // 2. Subscription Lifecycle
-        if (event.type === 'customer.subscription.deleted') {
-            const sub = event.data.object as any;
-            const orgId = sub.metadata?.organizationId;
-            if (orgId) {
-                await prisma.organization.update({
-                    where: { id: orgId },
-                    data: { subscriptionStatus: 'CANCELED' }
-                });
-            }
-        }
-
-        if (event.type === 'customer.subscription.updated') {
-            const sub = event.data.object as any;
-            const orgId = sub.metadata?.organizationId;
-            if (orgId) {
-                const status = sub.status === 'active' ? 'ACTIVE' : (sub.status === 'past_due' ? 'PAST_DUE' : 'PENDING');
-                await prisma.organization.update({
-                    where: { id: orgId },
-                    data: { subscriptionStatus: status }
-                });
-            }
-        }
-
-        return reply.code(200).send({ received: true });
-    }
 }

apps/api/src/routes/whatsapp.ts

@@ -40,7 +40,7 @@ const WebhookSchema = z.object({
 
 export async function whatsappRoutes(fastify: FastifyInstance) {
     fastify.get('/webhook', async (request, reply) => {
-        const query = request.query as any;
+        const query = request.query as Record<string, string | undefined>;
         const mode = query['hub.mode'];
         const token = query['hub.verify_token'];
         const challenge = query['hub.challenge'];
@@ -76,7 +76,7 @@ export async function whatsappRoutes(fastify: FastifyInstance) {
         const entry = body.entry[0];
         const wabaId = entry.id;
         const value = entry.changes[0].value;
-        const prisma = (fastify as any).prisma;
+        const prisma = fastify.prisma;
 
         try {
             // 1. Handle Status Updates (delivered, read, etc.)
@@ -88,7 +88,9 @@ export async function whatsappRoutes(fastify: FastifyInstance) {
                 await prisma.campaignHistory.update({
                     where: { whatsappMessageId: messageId },
                     data: { status }
-                }).catch(() => { /* Ignore updates for untracked messages */ });
+                }).catch((err: unknown) => {
+                    logger.debug({ messageId, err }, '[WHATSAPP] Status update skipped — message not tracked in campaignHistory');
+                });
 
                 if (status === 'READ') {
                     const history = await prisma.campaignHistory.findUnique({ where: { whatsappMessageId: messageId } });

apps/api/src/services/ai/index.ts

@@ -12,8 +12,8 @@ export const aiService = new BaseAIService({
     prisma,
     redis: {
         get: (key: string) => redis.get(key),
-        set: (key: string, value: string, mode?: string, duration?: number) => 
-            duration ? redis.set(key, value, mode as any, duration) : redis.set(key, value)
+        set: (key: string, value: string, _mode?: string, duration?: number) =>
+            duration ? redis.set(key, value, 'EX', duration) : redis.set(key, value)
     },
     getTenantSecrets,
     getOrganizationId

apps/api/src/services/audit.ts

@@ -12,7 +12,7 @@ export const auditService = {
         details?: Record<string, any>;
     }) {
         try {
-            await (prisma as any).auditLog.create({
+            await prisma.auditLog.create({
                 data: {
                     action: params.action,
                     actorId: params.actorId,

apps/api/src/services/normalization.ts

@@ -25,7 +25,7 @@ export const normalizationService = {
             logger.error({ err }, '[NORMALIZATION] Redis get error');
         }
 
-        const rules = await (prisma as any).normalizationRule.findMany({
+        const rules = await prisma.normalizationRule.findMany({
             where: { language }
         });
 
@@ -47,7 +47,7 @@ export const normalizationService = {
      * Create or update a rule
      */
     async saveRule(original: string, replacement: string, language: string = 'WOLOF') {
-        const rule = await (prisma as any).normalizationRule.upsert({
+        const rule = await prisma.normalizationRule.upsert({
             where: { original },
             update: { replacement, language },
             create: { original, replacement, language }
@@ -63,7 +63,7 @@ export const normalizationService = {
      * Batch save rules
      */
     async saveRules(rules: { original: string, replacement: string }[], language: string = 'WOLOF') {
-        const operations = rules.map(r => (prisma as any).normalizationRule.upsert({
+        const operations = rules.map(r => prisma.normalizationRule.upsert({
             where: { original: r.original },
             update: { replacement: r.replacement, language },
             create: { original: r.original, replacement: r.replacement, language }

apps/api/src/services/organization.ts

@@ -23,7 +23,7 @@ export async function getOrganizationByPhoneNumberId(phoneNumberId: string): Pro
     }
 
     // 2. Lookup in DB
-    const phoneRecord = await (prisma as any).whatsAppPhoneNumber.findUnique({
+    const phoneRecord = await prisma.whatsAppPhoneNumber.findUnique({
         where: { id: phoneNumberId },
         select: { organizationId: true }
     });
@@ -79,7 +79,6 @@ export function decryptSecrets(org: any) {
     if (org.webhookSecret) org.webhookSecret = decrypt(org.webhookSecret, ENCRYPTION_SECRET);
     if (org.openAiApiKey) org.openAiApiKey = decrypt(org.openAiApiKey, ENCRYPTION_SECRET);
     if (org.googleAiApiKey) org.googleAiApiKey = decrypt(org.googleAiApiKey, ENCRYPTION_SECRET);
-    if (org.stripeSecretKey) org.stripeSecretKey = decrypt(org.stripeSecretKey, ENCRYPTION_SECRET);
     return org;
 }
 
@@ -94,8 +93,6 @@ export async function getTenantSecrets(organizationId: string) {
             webhookSecret: true,
             openAiApiKey: true,
             googleAiApiKey: true,
-            stripeSecretKey: true,
-            stripeWebhookSecret: true
         }
     });
     

apps/api/src/services/push.ts

@@ -19,7 +19,7 @@ export const pushService = {
      * Store a new subscription for a user
      */
     async subscribe(userId: string, organizationId: string, subscription: any) {
-        return (prisma as any).pushSubscription.upsert({
+        return prisma.pushSubscription.upsert({
             where: { endpoint: subscription.endpoint },
             update: {
                 userId,
@@ -41,7 +41,7 @@ export const pushService = {
      * Send a notification to all active subscriptions of an organization
      */
     async notifyOrganization(organizationId: string, title: string, body: string, icon?: string) {
-        const subscriptions = await (prisma as any).pushSubscription.findMany({
+        const subscriptions = await prisma.pushSubscription.findMany({
             where: { organizationId }
         });
 
@@ -72,7 +72,7 @@ export const pushService = {
                 const error = (results[i] as PromiseRejectedResult).reason;
                 if (error.statusCode === 410 || error.statusCode === 404) {
                     logger.info(`[PUSH-SERVICE] Removing expired subscription: ${subscriptions[i].endpoint}`);
-                    await (prisma as any).pushSubscription.delete({ where: { id: subscriptions[i].id } }).catch(() => {});
+                    await prisma.pushSubscription.delete({ where: { id: subscriptions[i].id } }).catch(() => {});
                 }
             }
         }

apps/api/src/services/queue.ts

@@ -15,8 +15,8 @@ const connection = process.env.REDIS_URL
 
 connection.on('error', (err) => logger.error({ err }, '[REDIS] Queue connection error:'));
 
-export const whatsappQueue = new Queue('whatsapp-queue', { connection: connection as any });
-export const notificationQueue = new Queue('notification-queue', { connection: connection as any });
+export const whatsappQueue = new Queue('whatsapp-queue', { connection });
+export const notificationQueue = new Queue('notification-queue', { connection });
 
 /** Gracefully close all queues and the underlying connection */
 export async function closeQueues() {

apps/api/src/services/stripe.ts

@@ -1,147 +0,0 @@
-import { logger } from '../logger';
-import Stripe from 'stripe';
-import { PaymentProvider, CheckoutSessionParams } from './payments/types';
-import { getTenantSecrets } from './organization';
-
-export class StripeService implements PaymentProvider {
-    public name = 'stripe';
-    private stripe: Stripe | null = null;
-    private webhookSecret: string | null = null;
-    private clientUrl: string;
-    private instances: Map<string, { stripe: Stripe, webhookSecret: string | null }> = new Map();
-
-    constructor() {
-        const secretKey = process.env.STRIPE_SECRET_KEY;
-        const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
-
-        this.webhookSecret = webhookSecret || null;
-        this.clientUrl = process.env.VITE_CLIENT_URL || 'http://localhost:5174';
-
-        if (secretKey) {
-            this.stripe = new Stripe(secretKey, {
-                apiVersion: '2025-01-27.acacia' as any,
-            });
-        }
-    }
-
-    private async getStripeInstance(organizationId?: string): Promise<{ stripe: Stripe | null, webhookSecret: string | null }> {
-        if (!organizationId) return { stripe: this.stripe, webhookSecret: this.webhookSecret };
-
-        // Check cache
-        if (this.instances.has(organizationId)) {
-            return this.instances.get(organizationId)!;
-        }
-
-        // Check DB for tenant secrets
-        const secrets = await getTenantSecrets(organizationId);
-        if (secrets?.stripeSecretKey) {
-            const instance = {
-                stripe: new Stripe(secrets.stripeSecretKey, {
-                    apiVersion: '2025-01-27.acacia' as any,
-                }),
-                webhookSecret: secrets.stripeWebhookSecret || null
-            };
-            this.instances.set(organizationId, instance);
-            return instance;
-        }
-
-        // Fallback to global
-        return { stripe: this.stripe, webhookSecret: this.webhookSecret };
-    }
-
-    /**
-     * Unified checkout session creator for the interface
-     */
-    async createCheckoutSession(params: CheckoutSessionParams): Promise<string> {
-        const { stripe } = await this.getStripeInstance(params.organizationId);
-        if (!stripe) throw new Error('[StripeService] Stripe is not configured for this organization');
-        
-        // Decide mode based on params
-        const isSubscription = !!params.organizationId && !params.trackId;
-        const mode = isSubscription ? 'subscription' : 'payment';
-        const priceId = params.priceId || (isSubscription ? process.env.STRIPE_PAAS_SUBSCRIPTION_PRICE_ID : null);
-
-        if (!priceId) throw new Error('[StripeService] Missing Price ID for checkout');
-
-        try {
-            const session = await stripe.checkout.sessions.create({
-                payment_method_types: ['card'],
-                line_items: [{ price: priceId, quantity: 1 }],
-                mode: mode as any,
-                success_url: isSubscription ? `${this.clientUrl}/settings?success=true` : `${this.clientUrl}/payment/success?session_id={CHECKOUT_SESSION_ID}&track=${params.trackId}`,
-                cancel_url: isSubscription ? `${this.clientUrl}/settings?cancel=true` : `${this.clientUrl}/student?cancel=true`,
-                customer_email: params.email,
-                metadata: {
-                    userId: params.userId || '',
-                    trackId: params.trackId || '',
-                    organizationId: params.organizationId || '',
-                    userPhone: params.phone || ''
-                }
-            });
-
-            return session.url || '';
-        } catch (err) {
-            logger.error({ err }, "[StripeService] Failed to create checkout session:");
-            throw err;
-        }
-    }
-
-    /**
-     * Creates a Stripe Checkout Session for a specific track and user. (Legacy helper)
-     */
-    async createLegacyCheckoutSession(userId: string, trackId: string, priceId: string, userPhone: string) {
-        return this.createCheckoutSession({ userId, trackId, priceId, phone: userPhone });
-    }
-
-    /**
-     * Creates a Stripe Checkout Session for an organization subscription. (Legacy helper)
-     */
-    async createOrganizationSubscriptionSession(organizationId: string, email?: string) {
-        return this.createCheckoutSession({ organizationId, email });
-    }
-
-    /**
-     * Verifies the signature of an incoming Stripe webhook.
-     */
-    async verifyWebhookSignature(payload: Buffer, signature: string | undefined, organizationId?: string): Promise<Stripe.Event> {
-        const { stripe, webhookSecret } = await this.getStripeInstance(organizationId);
-        
-        if (!stripe || !webhookSecret) {
-            throw new Error('[StripeService] Stripe is not configured for this organization');
-        }
-        if (!signature) {
-            throw new Error('Missing stripe-signature header');
-        }
-
-        try {
-            return stripe.webhooks.constructEvent(
-                payload,
-                signature,
-                webhookSecret
-            );
-        } catch (err: unknown) {
-            throw new Error(`Webhook Error: ${(err instanceof Error ? err.message : String(err))}`);
-        }
-    }
-
-    /**
-     * Creates a link to the Stripe Customer Portal for subscription management.
-     */
-    async createCustomerPortalSession(customerId: string, organizationId?: string) {
-        const { stripe } = await this.getStripeInstance(organizationId);
-        if (!stripe) throw new Error('[StripeService] Stripe not configured for this organization');
-        
-        try {
-            const session = await stripe.billingPortal.sessions.create({
-                customer: customerId,
-                return_url: `${this.clientUrl}/settings`,
-            });
-            return session.url;
-        } catch (err) {
-            logger.error({ err }, '[StripeService] Failed to create portal session:');
-            throw err;
-        }
-    }
-}
-
-export const stripeService = new StripeService();

apps/api/src/services/whatsapp.ts

@@ -7,7 +7,7 @@ export interface WhatsAppMessage {
 }
 
 export class WhatsAppService {
-    private baseUrl = 'https://graph.facebook.com/v18.0';
+    private baseUrl = process.env.WHATSAPP_GRAPH_URL || 'https://graph.facebook.com/v18.0';
 
     /**
      * Sends a direct text message via WhatsApp Cloud API

apps/api/test/stripe.test.ts

@@ -1,53 +0,0 @@
-import { describe, it, expect, vi, beforeEach } from 'vitest';
-import { StripeService } from '../src/services/stripe';
-import { getTenantSecrets } from '../src/services/organization';
-
-// Mock Organization Service
-vi.mock('../src/services/organization', () => ({
-    getTenantSecrets: vi.fn(),
-    prisma: {
-        organization: {
-            findUnique: vi.fn()
-        }
-    }
-}));
-
-describe('StripeService - Integration Tests', () => {
-    let stripeService: StripeService;
-    const clientUrl = 'https://test.xamle.studio';
-
-    beforeEach(() => {
-        stripeService = new StripeService();
-        vi.clearAllMocks();
-    });
-
-    it('should initialize with tenant secret key if available', async () => {
-        const orgId = 'org-stripe-test';
-        const customStripeKey = 'sk_test_custom_key';
-
-        (getTenantSecrets as any).mockResolvedValue({
-            stripeSecretKey: customStripeKey
-        });
-
-        const instance = await (stripeService as any).getStripeInstance(orgId);
-        
-        expect(getTenantSecrets).toHaveBeenCalledWith(orgId);
-        // Note: Stripe instance doesn't easily expose the key, but we check if getTenantSecrets was called
-    });
-
-    it('should fallback to global secret key if tenant key is missing', async () => {
-        const orgId = 'org-global-stripe';
-        (getTenantSecrets as any).mockResolvedValue(null);
-
-        const instance = await (stripeService as any).getStripeInstance(orgId);
-        expect(getTenantSecrets).toHaveBeenCalledWith(orgId);
-    });
-
-    it('should construct the correct portal return URL', async () => {
-        const orgId = 'org-1';
-        (getTenantSecrets as any).mockResolvedValue(null);
-        
-        // Mock the internal stripe call if needed, but here we just check logic
-        expect(stripeService).toBeDefined();
-    });
-});

apps/web/src/PrivacyPolicy.tsx

@@ -42,7 +42,7 @@ export default function PrivacyPolicy() {
                     <ul className="list-disc pl-5 text-slate-600 space-y-2 mb-6">
                         <li><strong>Meta / WhatsApp</strong> — pour l'acheminement des messages</li>
                         <li><strong>OpenAI</strong> — pour la génération et personnalisation du contenu pédagogique</li>
-                        <li><strong>Stripe</strong> — pour le traitement sécurisé des paiements</li>
+                        <li><strong>Orange Money / Wave</strong> — pour le traitement sécurisé des paiements</li>
                         <li><strong>Cloudflare</strong> — pour le stockage des documents générés</li>
                     </ul>
 

apps/whatsapp-worker/package.json

@@ -10,9 +10,10 @@
     },
     "dependencies": {
         "@aws-sdk/client-s3": "^3.995.0",
+        "@repo/ai-sdk": "workspace:*",
         "@repo/database": "workspace:*",
-    "@repo/ai-sdk": "workspace:*",
         "@repo/shared-types": "workspace:*",
+        "@sentry/node": "^10.51.0",
         "axios": "^1.13.5",
         "bullmq": "^5.0.0",
         "cheerio": "^1.2.0",

apps/whatsapp-worker/src/config.ts

@@ -23,7 +23,7 @@ const result = envSchema.safeParse(process.env);
 if (!result.success) {
     const { logger } = require('./logger');
     logger.error({ errors: result.error.format() }, '[WORKER-CONFIG] ❌ Invalid worker environment variables');
-    process.exit(1);
+    throw new Error(`[WORKER-CONFIG] Missing or invalid environment variables:\n${result.error.message}`);
 }
 
 export const config = result.data;

apps/whatsapp-worker/src/handlers/AdminHandler.ts

@@ -70,7 +70,7 @@ export class AdminHandler implements JobHandler {
 
             if (enrollment) {
                 const nextDay = Math.floor(enrollment.currentDay) + 1;
-                const q = new Queue('whatsapp-queue', { connection: connection as any });
+                const q = new Queue('whatsapp-queue', { connection });
                 await q.add('send-content', { userId, trackId, dayNumber: nextDay, organizationId }, { delay: 2000 });
             }
         }

apps/whatsapp-worker/src/handlers/CommandHandler.ts

@@ -29,8 +29,8 @@ export class CommandHandler implements MessageHandler {
             // ... (existing seed logic)
             logger.info({ traceId, userId: user.id }, "Database Seeding requested");
             try {
-                // @ts-ignore
-                const { seedDatabase } = await import('@repo/database/seed');
+                type SeedModule = { seedDatabase: (prisma: any) => Promise<{ seeded: boolean }> };
+                const { seedDatabase } = await import('@repo/database/seed') as unknown as SeedModule;
                 const result = await seedDatabase(prisma);
                 await prisma.businessProfile.deleteMany({ where: { userId: user.id } });
                 await prisma.user.update({ where: { id: user.id }, data: { activity: null } });

apps/whatsapp-worker/src/handlers/ContentHandler.ts

@@ -110,7 +110,7 @@ export class ContentHandler implements JobHandler {
                                             organizationId: user.organizationId
                                         }
                                     });
-                                    const q = new Queue('whatsapp-queue', { connection: connection as any });
+                                    const q = new Queue('whatsapp-queue', { connection });
                                     await q.add('send-content', { 
                                         userId, 
                                         trackId: nextTrackId, 

apps/whatsapp-worker/src/handlers/EnrollHandler.ts

@@ -55,7 +55,7 @@ export class EnrollHandler implements JobHandler {
                     body: JSON.stringify({ userId, trackId })
                 });
 
-                const checkoutData = await checkoutRes.json() as any;
+                const checkoutData = await checkoutRes.json() as { url?: string };
                 if (checkoutRes.ok && checkoutData.url) {
                     const user = await prisma.user.findUnique({ where: { id: userId } });
                     if (user?.phone) {
@@ -76,14 +76,14 @@ export class EnrollHandler implements JobHandler {
                         status: 'ACTIVE', 
                         currentDay: 1, 
                         organizationId: organizationId || 'default-org-id' 
-                    } as any
+                    }
                 });
                 const user = await prisma.user.findUnique({ where: { id: userId } });
                 if (user?.phone) {
                     const tenantConfig = await this.getTenantConfig(organizationId as string, connection);
                     await sendTextMessage(user.phone, `🎉 Bienvenue dans *${track.title}* ! La génération de votre cours personnalisé (Jour 1) a commencé...`, tenantConfig);
 
-                    const q = new Queue('whatsapp-queue', { connection: connection as any });
+                    const q = new Queue('whatsapp-queue', { connection });
                     await q.add('send-content', { userId, trackId, dayNumber: 1, organizationId });
                 }
             }

apps/whatsapp-worker/src/handlers/ExerciseHandler.ts

@@ -87,9 +87,9 @@ export class ExerciseHandler implements MessageHandler {
         
         // Bypasses (Button, Special, Vision)
         let isButtonChoice = false;
-        const buttons = trackDay.buttonsJson as any[] | null;
+        const buttons = trackDay.buttonsJson as { id?: string; title?: string }[] | null;
         if (Array.isArray(buttons)) {
-            isButtonChoice = buttons.some((b: any) => isFuzzyMatch(normalizedText, b.title || '') || isFuzzyMatch(normalizedText, b.id || ''));
+            isButtonChoice = buttons.some(b => isFuzzyMatch(normalizedText, b.title || '') || isFuzzyMatch(normalizedText, b.id || ''));
         }
 
         const isDay7Special = activeEnrollment.currentDay === 7 && (

apps/whatsapp-worker/src/handlers/MediaHandler.ts

@@ -1,6 +1,6 @@
 import { Job } from 'bullmq';
 import Redis from 'ioredis';
-import { MediaType } from '@repo/database';
+import { MediaType, ExerciseStatus, Prisma } from '@repo/database';
 import { JobHandler, JobData } from './types';
 import { prisma } from '../services/prisma';
 import { logger } from '../logger';
@@ -40,8 +40,7 @@ export class MediaHandler implements JobHandler {
     }
 
     async handle(job: Job<JobData>, connection: Redis): Promise<void> {
-        const data = job.data as any;
-        const { mediaId, phone, organizationId, mimeType } = data;
+        const { mediaId, phone, organizationId, mimeType } = job.data;
         
         if (!mediaId || !phone) {
             logger.error(`[MEDIA_HANDLER] Missing data: mediaId=${mediaId}, phone=${phone}`);
@@ -83,7 +82,7 @@ export class MediaHandler implements JobHandler {
                         channel: 'WHATSAPP',
                         mediaUrl: audioUrl || null,
                         mediaType: MediaType.AUDIO,
-                        payload: job.data as any,
+                        payload: job.data as Prisma.InputJsonValue,
                         organizationId: organizationId || user.organizationId
                     }
                 });
@@ -120,12 +119,12 @@ export class MediaHandler implements JobHandler {
                             if (activeEnrollment) {
                                 await prisma.userProgress.upsert({
                                     where: { userId_trackId: { userId: user.id, trackId: activeEnrollment.trackId } },
-                                    update: { exerciseStatus: 'PENDING_REVIEW' as any, adminTranscription: transcribedText, confidenceScore: confidence },
+                                    update: { exerciseStatus: ExerciseStatus.PENDING_REVIEW, adminTranscription: transcribedText, confidenceScore: confidence },
                                     create: { 
                                         userId: user.id, 
                                         trackId: activeEnrollment.trackId, 
                                         organizationId: organizationId as string,
-                                        exerciseStatus: 'PENDING_REVIEW' as any, 
+                                        exerciseStatus: ExerciseStatus.PENDING_REVIEW, 
                                         adminTranscription: transcribedText, 
                                         confidenceScore: confidence 
                                         
@@ -144,7 +143,7 @@ export class MediaHandler implements JobHandler {
                     logger.error(`[MEDIA_HANDLER] Transcription failed:`, transErr);
                 }
             } else if (mimeType && mimeType.startsWith('image/')) {
-                await WhatsAppLogic.handleIncomingMessage(phone, data.caption || 'Image reçue', undefined, audioUrl, organizationId, 'image', mediaId);
+                await WhatsAppLogic.handleIncomingMessage(phone, job.data.caption || 'Image reçue', undefined, audioUrl, organizationId, 'image', mediaId);
             }
         } catch (err) {
             logger.error(`[MEDIA_HANDLER] download-media failed:`, err);

apps/whatsapp-worker/src/index.ts

@@ -10,7 +10,8 @@ import Redis from 'ioredis';
 import { validateEnvironment } from './config';
 import { startWorkerCleanupCron } from './services/cleanup';
 import { JobData, JobHandler } from './handlers/types';
-import { reportError } from './services/errors';
+import { reportError, initSentry } from './services/errors';
+initSentry();
 import { runWithTenant } from '@repo/database';
 import { extractWhatsAppPayload } from '@repo/shared-types';
 import { getCachedOrganization } from './services/organization';
@@ -35,23 +36,20 @@ dotenv.config();
 validateEnvironment();
 startWorkerCleanupCron();
 
-const redisConfig = process.env.REDIS_URL
-    ? { url: process.env.REDIS_URL }
-    : {
+const connection = process.env.REDIS_URL
+    ? new Redis(process.env.REDIS_URL, { maxRetriesPerRequest: null })
+    : new Redis({
         host: process.env.REDIS_HOST || 'localhost',
         port: parseInt(process.env.REDIS_PORT || '6379'),
         username: process.env.REDIS_USERNAME || 'default',
         password: process.env.REDIS_PASSWORD || undefined,
         tls: process.env.REDIS_TLS === 'true' ? {} : undefined,
-    };
-
-const connection = process.env.REDIS_URL
-    ? new Redis(process.env.REDIS_URL, { maxRetriesPerRequest: null })
-    : new Redis({ ...redisConfig, maxRetriesPerRequest: null } as any);
+        maxRetriesPerRequest: null
+    });
 
 connection.on('error', (err) => logger.error({ err }, '[REDIS] Worker connection error:'));
 
-const whatsappQueue = new Queue('whatsapp-queue', { connection: connection as any });
+const whatsappQueue = new Queue('whatsapp-queue', { connection });
 
 const handlers: Record<string, JobHandler> = {
 // ... (handlers list same)
@@ -86,7 +84,7 @@ server.post('/v1/internal/whatsapp/inbound', async (req: FastifyRequest, reply:
     }
 
     let organizationId = req.headers['x-organization-id'] as string;
-    const payload = req.body as any;
+    const payload = req.body as { entry?: Array<{ changes?: Array<{ value?: { metadata?: { phone_number_id?: string } } }> }> };
 
     // 🏢 Multi-Tenant Routing Hardening: 
     // If we're coming from the Gateway (HF), the header might be missing or generic.
@@ -100,7 +98,10 @@ server.post('/v1/internal/whatsapp/inbound', async (req: FastifyRequest, reply:
         }
     }
     
-    organizationId = organizationId || 'default-org-id';
+    if (!organizationId) {
+        logger.error('[BRIDGE] Could not resolve organizationId — rejecting webhook');
+        return reply.code(400).send({ error: 'Cannot resolve organization' });
+    }
 
     logger.info(`[BRIDGE] Processing forwarded webhook for Org: ${organizationId}`);
 
@@ -192,7 +193,7 @@ const worker = new Worker('whatsapp-queue', async (job: Job<JobData>) => {
     ];
 
     if (outboundJobNames.includes(job.name)) {
-        const { allowed } = await UsageService.checkAndIncrement(organizationId, connection as any);
+        const { allowed } = await UsageService.checkAndIncrement(organizationId, connection);
         if (!allowed) {
             logger.warn(`[WORKER] Skipping job ${job.name} for Org ${organizationId}: Daily Limit Reached.`);
             return { skipped: true, reason: 'limit_reached' };
@@ -219,7 +220,7 @@ const worker = new Worker('whatsapp-queue', async (job: Job<JobData>) => {
         }
     });
 }, { 
-    connection: connection as any,
+    connection,
     concurrency: parseInt(process.env.WORKER_CONCURRENCY || '5')
 });
 
@@ -245,7 +246,7 @@ const notificationWorker = new Worker('notification-queue', async (job: Job<any>
         throw err;
     }
 }, { 
-    connection: connection as any,
+    connection,
     concurrency: 2
 });
 

apps/whatsapp-worker/src/pedagogy.ts

@@ -1,6 +1,6 @@
 import { prisma } from './services/prisma';
 import { logger } from './logger';
-import { sendTextMessage, sendAudioMessage, sendInteractiveButtonMessage, sendImageMessage, sendVideoMessage } from './whatsapp-cloud';
+import { sendTextMessage, sendAudioMessage, sendInteractiveButtonMessage, sendImageMessage, sendVideoMessage, WhatsAppButton } from './whatsapp-cloud';
 import { isFeatureEnabled } from './config';
 import { shortenForWhatsApp } from './normalizeWolof';
 import { ButtonsJson } from './handlers/types';
@@ -60,10 +60,12 @@ export async function sendLessonDay(
 
     // Multi-lang content
     const buttonsJson = castJson<ButtonsJson>(trackDay.buttonsJson);
-    if (buttonsJson?.content && (buttonsJson.content as any)[user.language]) {
-        const langContent = (buttonsJson.content as any)[user.language];
-        lessonText = langContent.lessonText || lessonText;
-        exercisePrompt = langContent.exercisePrompt || exercisePrompt;
+    if (buttonsJson?.content) {
+        const langContent = buttonsJson.content[user.language];
+        if (langContent && !Array.isArray(langContent)) {
+            lessonText = langContent.lessonText || lessonText;
+            exercisePrompt = langContent.exercisePrompt || exercisePrompt;
+        }
     }
 
     // AI Personalization
@@ -80,8 +82,8 @@ export async function sendLessonDay(
             userLanguage: user.language,
             businessProfile: user.businessProfile,
             previousResponses,
-            tenantPrompt: (user.organization as any)?.customPrompt,
-            tenantBranding: (user.organization as any)?.brandingData,
+            tenantPrompt: user.organization?.customPrompt ?? undefined,
+            tenantBranding: user.organization?.brandingData,
             organizationId
         });
     }
@@ -124,7 +126,7 @@ export async function sendLessonDay(
     // Exercise
     if (exercisePrompt) {
         if (trackDay.exerciseType === 'BUTTON' && trackDay.buttonsJson) {
-            await sendInteractiveButtonMessage(user.phone, exercisePrompt, trackDay.buttonsJson as any, undefined, tenantConfig);
+            await sendInteractiveButtonMessage(user.phone, exercisePrompt, trackDay.buttonsJson as unknown as WhatsAppButton[], undefined, tenantConfig);
         } else {
             await sendTextMessage(user.phone, exercisePrompt, tenantConfig);
         }
@@ -139,7 +141,7 @@ export async function sendLessonDay(
             { id: `DAY${dayNumber}_EXERCISE`, title: isWolof ? "📝 Tontul" : "📝 Répondre" },
             { id: `MENU_HISTORIQUE`, title: isWolof ? "📚 Li nekk ci ginnaaw" : "📚 Revoir leçons" }
         ];
-        await sendInteractiveListMessage(user.phone, isWolof ? "Sa Mbir" : "Actions", isWolof ? "Tànnal :" : "Choisis :", isWolof ? "Tànn" : "Menu", [{ title: "Menu", rows: rows as any }], undefined, tenantConfig);
+        await sendInteractiveListMessage(user.phone, isWolof ? "Sa Mbir" : "Actions", isWolof ? "Tànnal :" : "Choisis :", isWolof ? "Tànn" : "Menu", [{ title: "Menu", rows }], undefined, tenantConfig);
     }
 }
 

apps/whatsapp-worker/src/scheduler.ts

@@ -17,7 +17,7 @@ const connection = process.env.REDIS_URL
         maxRetriesPerRequest: null
     });
 
-const whatsappQueue = new Queue('whatsapp-queue', { connection: connection as any });
+const whatsappQueue = new Queue('whatsapp-queue', { connection });
 
 export function startDailyScheduler() {
     // Runs at 08:00 AM every day (Dakar time = UTC+0 in winter, so 8 UTC = 8 Dakar)

apps/whatsapp-worker/src/services/ai-pedagogy.ts

@@ -18,7 +18,7 @@ export class AIPedagogyService {
                 params.lessonText,
                 params.userActivity,
                 params.userLanguage,
-                params.previousResponses as any
+                params.previousResponses.flatMap(r => r.response !== null ? [{ day: r.day, response: r.response }] : [])
             );
             return result.lessonText || params.lessonText;
         } catch (err) {

apps/whatsapp-worker/src/services/ai.ts

@@ -18,8 +18,8 @@ export const aiService = new BaseAIService({
     prisma,
     redis: {
         get: (key: string) => redis.get(key),
-        set: (key: string, value: string, mode?: string, duration?: number) => 
-            duration ? redis.set(key, value, mode as any, duration) : redis.set(key, value)
+        set: (key: string, value: string, _mode?: string, duration?: number) =>
+            duration ? redis.set(key, value, 'EX', duration) : redis.set(key, value)
     },
     getTenantSecrets,
     getOrganizationId

apps/whatsapp-worker/src/services/errors.ts

@@ -1,36 +1,52 @@
 import { logger } from '../logger';
+import * as Sentry from '@sentry/node';
 
 export interface ErrorContext {
     organizationId?: string;
     userId?: string;
     jobId?: string;
     jobName?: string;
-    extra?: Record<string, any>;
+    extra?: Record<string, unknown>;
 }
 
-/**
- * Centralized error reporter.
- * Currently logs structured data, ready to be connected to Sentry/Datadog.
- */
-export const reportError = (error: any, context: ErrorContext) => {
+let sentryInitialized = false;
+
+export function initSentry() {
+    const dsn = process.env.SENTRY_DSN;
+    if (!dsn) {
+        logger.info('[SENTRY] SENTRY_DSN not set — error reporting via logger only');
+        return;
+    }
+    Sentry.init({
+        dsn,
+        environment: process.env.NODE_ENV || 'production',
+        tracesSampleRate: 0.1,
+    });
+    sentryInitialized = true;
+    logger.info('[SENTRY] Initialized');
+}
+
+export const reportError = (error: unknown, context: ErrorContext) => {
     const errorMessage = error instanceof Error ? error.message : String(error);
     const errorStack = error instanceof Error ? error.stack : undefined;
 
     logger.error({
         msg: `[ERROR-REPORT] ${context.jobName || 'unknown'}: ${errorMessage}`,
-        context: {
-            ...context,
-            stack: errorStack
-        }
+        context: { ...context, stack: errorStack }
     });
 
-    // TODO: Integrate Sentry here
-    // Sentry.captureException(error, { tags: { ...context } });
+    if (sentryInitialized) {
+        Sentry.withScope(scope => {
+            scope.setTags({
+                jobName: context.jobName ?? 'unknown',
+                organizationId: context.organizationId ?? 'unknown',
+            });
+            if (context.extra) scope.setExtras(context.extra);
+            Sentry.captureException(error);
+        });
+    }
 };
 
-/**
- * Wrapper for async tasks to ensure they are reported correctly.
- */
 export const withErrorLogging = async <T>(
     task: () => Promise<T>,
     context: ErrorContext

apps/whatsapp-worker/src/services/normalization.ts

@@ -26,7 +26,7 @@ export const normalizationService = {
             logger.error({ err }, '[NORMALIZATION] Redis get error');
         }
 
-        const rules = await (prisma as any).normalizationRule.findMany({
+        const rules = await prisma.normalizationRule.findMany({
             where: { language }
         });