update nyuu command

- Lecture de CMD_PARPAR depuis conf.sh
- Fallback sur valeurs par défaut si variable vide ou inexistante
- Valeurs par défaut: -s10M -S -m4096M -t16 -r20%
- Permet de personnaliser les options parpar sans modifier le script

.gitignore

@@ -0,0 +1 @@
+.specstory

autopost/conf.sh

@@ -27,5 +27,9 @@ MYSQL_USER=""
 MYSQL_PASS=""
 MYSQL_DB=""
 
+#CMD_parpar
+
+CMD_PARPAR="-s10M -S -m4096M -t16 -r20%"
+
 
 

autopost/config.js

@@ -36,5 +36,9 @@ module.exports = {
   auth: {
 	username: 'user',
 	password: 'pass'
-  }
+  },
+
+  // Configuration pour le renvoi vers le site principal
+  apiUrl: 'A NOUS DEMANDER SUR DISCORD',
+  apiKey: 'A RETROUVER DANS VOTRE PROFIL'
 };

autopost/posteur.sh

@@ -20,13 +20,11 @@ attente() {
 
 checkusenet(){
 	SERVICE="nyuu"
-	 if pgrep -x "$SERVICE" >/dev/null
+	while pgrep -x "$SERVICE" >/dev/null; do
-	 then
 		echo "$SERVICE EN COURS"
 		sleep 16
-	 else
+	done
 	echo "$SERVICE OK"
-	 fi
 }
 
 cd "${DOSSIER_GLOBAL}"
@@ -45,8 +43,13 @@ while true; do
 			LOG="${DOSSIER_LOGS}${FILESANSEXT}.log"
 	
 			echo -e "${VERT}DEBUT DE TRAITEMENT DE ${FILESANSEXT}${NORMAL}" | tee -a "$LOG"
+			if [ "$dbtype" = "mysql" ]; then
+				db_query "UPDATE \`$MYSQL_TABLE\` SET status = 4 WHERE id = ${id};"
+			fi
 			echo -e "${CYAN}CREATION DES PAR2${NORMAL}" | tee -a "$LOG"
-			parpar -s10M -S -m4096M -t16 -r20% -O -o "${FILESANSEXT}.par2" "${name}" \
+			# Utilise CMD_PARPAR si défini, sinon valeurs par défaut
+			PARPAR_OPTS="${CMD_PARPAR:--s10M -S -m4096M -t16 -r20%}"
+			parpar $PARPAR_OPTS -O -o "${FILESANSEXT}.par2" "${name}" \
 				> >(tee -a "$LOG") 2> >(tee -a "$LOG" >&2)
 			ret=$?
 			if [ $ret -ne 0 ]; then
@@ -66,7 +69,8 @@ while true; do
 					 --nzb-title '${FILESANSEXT}' \
 					 -f '{rand(14)} {rand(14)}@{rand(5)}.{rand(3)}' \
 					 --message-id '{rand(32)}@{rand(8)}.{rand(3)}' \
-					 --subject '{rand(32)}' --nzb-subject '{filename}' \
+					 --subject '{rand(32)}' \
+					 --nzb-subject '[{0filenum}/{files}] - \"{filename}\" yEnc ({part}/{parts})' \
 					 --obfuscate-articles ${files[*]} \
 					 --progress=stderr" \
 				/dev/null
@@ -75,11 +79,25 @@ while true; do
 					echo -e "${JAUNE}VERIF DU NZB${NORMAL}"
 					nzbsizebit=$(bash ${ANALYZER} "${DOSSIER_NZB_ATTENTE}${FILESANSEXT}.nzb" | jq '.Taillebit')
 					echo -e "NZB_SIZE : ${nzbsizebit}"
+					# Détermine si on est en mode "symlink" selon la conf
+					symlink_mode=0
+					case "${MOVE_CMD:-}" in
+					  "cp -rs"|"ln -s") symlink_mode=1 ;;
+					esac
+					
 					if [[ "${name}" =~ \.(iso)$ ]]; then
-						jsonsizebit=$(du -b -c "${name}" | grep total | awk '{ print $1 }')
+						if (( symlink_mode )); then
+							# Suivre le lien symbolique pour obtenir la taille réelle
+							jsonsizebit=$(du -Lb -c -- "${name}" | awk '/total/ {print $1}')
 						else
+							# Comportement inchangé
+							jsonsizebit=$(du -b -c -- "${name}" | awk '/total/ {print $1}')
+						fi
+					else
+						# Comportement inchangé
 						jsonsizebit=$(jq -r '.media.track[] | select(."@type" == "General") | .FileSize' "${DOSSIER_NFO}${FILESANSEXT}.json")
 					fi
+
 					echo -e "MEDIAINFO_SIZE : ${jsonsizebit}"
 	
 					if [[ ${nzbsizebit} -le ${jsonsizebit} ]] || [[ ${nzbsizebit} = "NAN" ]]; then

autopost/public/autopost.js

@@ -0,0 +1,718 @@
+// === Autopost client script ===
+
+// --- CSRF global ---
+(function () {
+  const meta = document.querySelector('meta[name="csrf-token"]');
+  const CSRF_TOKEN = meta ? meta.content : (window.__BOOTSTRAP__ && window.__BOOTSTRAP__.csrf) || '';
+  if (window.jQuery) {
+	$.ajaxSetup({ headers: { 'x-csrf-token': CSRF_TOKEN } });
+  }
+})();
+
+// --- XSS escape côté client ---
+function esc(s) {
+  // ATTENTION: backtick échappé dans la classe de caractères: \`
+  return String(s).replace(/[&<>"'\`=]/g, c => ({
+	'&': '&amp;', '<': '&lt;', '>': '&gt;',
+	'"': '&quot;', "'": '&#39;', '\`': '&#96;', '=': '&#61;'
+  }[c]));
+}
+
+// --- Bootstrap values ---
+const INITIAL_PAGE       = (window.__BOOTSTRAP__ && window.__BOOTSTRAP__.page)       || 1;
+const INITIAL_TOTAL_PAGES= (window.__BOOTSTRAP__ && window.__BOOTSTRAP__.totalPages) || 1;
+const PAGE_LIMIT         = (window.__BOOTSTRAP__ && window.__BOOTSTRAP__.limit)      || 100;
+
+let currentPage = INITIAL_PAGE;
+let currentTotalPages = INITIAL_TOTAL_PAGES;
+let activeFilter = null;   // number | null
+let activeQuery  = '';     // string
+
+// --- Rendering: table ---
+function updateTable(rows) {
+  var tbody = $('table tbody');
+  tbody.empty();
+
+  rows.forEach(function(row) {
+	var statusText = '';
+	var statusClass = '';
+
+	switch (parseInt(row.status)) {
+	  case 0: statusText = 'EN ATTENTE';     statusClass = 'bg-cyan-500 text-black font-bold';   break;
+	  case 1: statusText = 'ENVOI TERMINÉ';  statusClass = 'bg-green-300 text-black font-bold';  break;
+	  case 2: statusText = 'ERREUR';         statusClass = 'bg-red-300 text-black font-bold';    break;
+	  case 3: statusText = 'DEJA DISPONIBLE';statusClass = 'bg-pink-300 text-black font-bold';   break;
+	  case 4: statusText = 'EN COURS';       statusClass = 'bg-yellow-300 text-black font-bold'; break;
+	  default: statusText = 'INCONNU';
+	}
+
+	var logLink = (parseInt(row.status) === 1 || parseInt(row.status) === 2 || parseInt(row.status) === 4)
+	  ? ' | <a href="#" class="log-link text-blue-400 hover:underline" data-filename="' + esc(row.nom) + '">Log</a>'
+	  : '';
+
+	var mediainfoLink = (parseInt(row.status) === 0 || parseInt(row.status) === 1 || parseInt(row.status) === 2)
+	  ? ' | <a href="#" class="mediainfo-link text-blue-400 hover:underline" data-filename="' + esc(row.nom) + '">Mediainfo</a>'
+	  : '';
+
+	var dlLink = (parseInt(row.status) === 1)
+	  ? ' | <a href="/autopost/dl?name=' + encodeURIComponent(row.nom) + '" class="dl-link text-blue-400 hover:underline">DL</a>'
+	  : '';
+
+	var resendLink = (parseInt(row.status) === 1)
+	  ? ' | <a href="#" class="resend-link text-green-400 hover:underline" data-id="' + row.id + '" data-filename="' + esc(row.nom) + '">Renvoyer</a>'
+	  : '';
+
+	var tr =
+	  '<tr id="row-' + row.id + '" data-status="' + row.status + '" class="odd:bg-gray-800 even:bg-gray-700">' +
+		'<td class="px-4 py-2 border border-gray-700 text-center">' +
+		  '<input type="checkbox" class="row-checkbox checkbox-custom" data-id="' + row.id + '" data-name="' + esc(row.nom) + '">' +
+		'</td>' +
+		'<td class="px-4 py-2 border border-gray-700 whitespace-nowrap">' + esc(row.nom) + '</td>' +
+		'<td class="px-4 py-2 border border-gray-700 status-text whitespace-nowrap ' + statusClass + '">' + statusText + '</td>' +
+		'<td class="px-4 py-2 border border-gray-700">' + row.id + '</td>' +
+		'<td class="px-4 py-2 border border-gray-700">' +
+		  '<a href="#" class="edit-link text-blue-400 hover:underline" data-id="' + row.id + '" data-status="' + row.status + '">Editer</a> | ' +
+		  '<a href="#" class="delete-link text-blue-400 hover:underline" data-id="' + row.id + '">Supprimer</a>' +
+		  logLink + mediainfoLink + dlLink + resendLink +
+		'</td>' +
+	  '</tr>';
+
+	tbody.append(tr);
+  });
+}
+
+// --- Rendering: pagination ---
+function renderPaginationHTML(page, totalPages) {
+  var prevDisabled = page <= 1;
+  var nextDisabled = page >= totalPages;
+
+  var h = '';
+  h += '<ul class="inline-flex items-center -space-x-px">';
+  h +=   '<li>';
+  if (prevDisabled) {
+	h += '<span class="px-3 py-2 ml-0 leading-tight text-gray-500 bg-gray-200 border border-gray-300 rounded-l-lg">Précédent</span>';
+  } else {
+	h += '<a href="/autopost/?page=' + (page - 1) + '" data-page="' + (page - 1) + '" class="px-3 py-2 ml-0 leading-tight text-gray-500 bg-white border border-gray-300 rounded-l-lg hover:bg-gray-100 hover:text-gray-700">Précédent</a>';
+  }
+  h +=   '</li>';
+  h +=   '<li><span class="px-4 py-2 leading-tight text-gray-700 bg-white border border-gray-300">Page ' + page + ' sur ' + totalPages + '</span></li>';
+  h +=   '<li>';
+  if (nextDisabled) {
+	h += '<span class="px-3 py-2 leading-tight text-gray-500 bg-gray-200 border border-gray-300 rounded-r-lg">Suivant</span>';
+  } else {
+	h += '<a href="/autopost/?page=' + (page + 1) + '" data-page="' + (page + 1) + '" class="px-3 py-2 leading-tight text-gray-500 bg-white border border-gray-300 rounded-r-lg hover:bg-gray-100 hover:text-gray-700">Suivant</a>';
+  }
+  h +=   '</li>';
+  h += '</ul>';
+
+  return h;
+}
+function updatePagination(page, totalPages) {
+  $('#pagination').html(renderPaginationHTML(page, totalPages));
+}
+
+// --- Data loading ---
+function loadPage(p) {
+  const targetPage = Math.max(1, parseInt(p, 10) || 1);
+
+  const isFilter = activeFilter !== null;
+  const url = isFilter ? '/autopost/filter' : '/autopost/search';
+  const data = isFilter
+	? { status: activeFilter, page: targetPage, limit: PAGE_LIMIT }
+	: { q: activeQuery || '', page: targetPage, limit: PAGE_LIMIT };
+
+  $.ajax({
+	url: url,
+	type: 'GET',
+	data: data,
+	dataType: 'json',
+	success: function(resp) {
+	  updateTable(resp.rows);
+	  currentPage = resp.page;
+	  currentTotalPages = resp.totalPages;
+	  updatePagination(currentPage, currentTotalPages);
+	  // Mettre à jour les actions en lot après le chargement des nouvelles données
+	  updateBulkActions();
+	},
+	error: function(jqXHR, textStatus, errorThrown) {
+	  if (textStatus !== 'abort') {
+		console.error('Erreur AJAX :', textStatus, errorThrown);
+		alert('Erreur lors du chargement de la page.');
+	  }
+	}
+  });
+}
+
+// --- Long polling: refresh table when new mediainfo/log apparaît ---
+(function () {
+  var lastVersion = null;
+
+  function poll() {
+	$.ajax({
+	  url: '/autopost/updates',
+	  type: 'GET',
+	  data: { since: lastVersion || 0 },
+	  timeout: 30000,
+	  success: function (resp) {
+		if (resp && typeof resp.version === 'number') {
+		  if (lastVersion === null) {
+			lastVersion = resp.version; // 1ère synchro: on se cale
+		  } else if (resp.version > lastVersion) {
+			lastVersion = resp.version;
+			if (typeof loadPage === 'function') loadPage(currentPage || 1);
+			if (typeof updateStatsUI === 'function') {
+			  $.getJSON('/autopost/stats', function (s) { if (s) updateStatsUI(s); });
+			}
+		  }
+		}
+		setTimeout(poll, 100);
+	  },
+	  error: function () {
+		setTimeout(poll, 2000);
+	  }
+	});
+  }
+
+  $(document).ready(poll);
+})();
+
+function updateStatsUI(s) {
+  $('.filter-card[data-status="0"] .tabular-nums').text(s.attente || 0);
+  $('.filter-card[data-status="1"] .tabular-nums').text(s.termine || 0);
+  $('.filter-card[data-status="2"] .tabular-nums').text(s.erreur || 0);
+  $('.filter-card[data-status="3"] .tabular-nums').text(s.deja || 0);
+}
+
+function refreshAfterChange() {
+  loadPage(currentPage || 1);
+  $.getJSON('/autopost/stats', function(s) { updateStatsUI(s); });
+}
+
+// --- DOM bindings ---
+$(document).ready(function() {
+  // Recherche
+  let searchTimer = null;
+  $('#searchInput').on('keyup', function() {
+	clearTimeout(searchTimer);
+	let q = $(this).val();
+
+	searchTimer = setTimeout(function() {
+	  activeQuery = q || '';
+	  activeFilter = null; // on sort du mode filtre
+	  $('.filter-card').removeClass('ring-4 ring-white/40');
+	  loadPage(1);         // charge page 1 avec pagination AJAX
+	  toggleShowAllButton();
+	}, 300);
+  });
+
+  // Pagination: intercepter et paginer en AJAX
+  $(document).on('click', '#pagination a[data-page]', function(e) {
+	e.preventDefault();
+	const p = parseInt($(this).data('page'), 10);
+	if (!isNaN(p)) loadPage(p);
+  });
+
+  // Affichage/masquage du bouton "Tout afficher"
+  function toggleShowAllButton() {
+	if ($('.filter-card.ring-4').length === 0) {
+	  $('#showAll').addClass('hidden');
+	} else {
+	  $('#showAll').removeClass('hidden');
+	}
+  }
+
+  // Filtrage par clic sur une card
+  $(document).on('click', '.filter-card', function() {
+	const status = parseInt($(this).data('status'), 10);
+
+	$('.filter-card').removeClass('ring-4 ring-white/40');
+	$(this).addClass('ring-4 ring-white/40');
+
+	activeFilter = status;
+	activeQuery = '';  // on sort du mode recherche
+	loadPage(1);       // page 1 du filtre
+	toggleShowAllButton();
+  });
+
+  // Bouton tout afficher
+  $(document).on('click', '#showAll', function() {
+	$('.filter-card').removeClass('ring-4 ring-white/40');
+	activeFilter = null;
+	activeQuery = $('#searchInput').val() || '';
+	loadPage(1);
+	toggleShowAllButton();
+  });
+
+  // Edition (ouvrir modale)
+  $(document).on('click', '.edit-link', function(e) {
+	e.preventDefault();
+	var releaseId = $(this).data('id');
+	var currentStatus = $(this).data('status');
+	$('#releaseId').val(releaseId);
+	$('#modalReleaseId').text(releaseId);
+	$('#statusSelect').val(currentStatus);
+	$('#editModal').removeClass('hidden').fadeIn();
+  });
+
+  // ---------- Confirmation de suppression (modale) ----------
+  var pendingDeleteId = null;
+
+  function openConfirmModal(id, name) {
+	pendingDeleteId = id;
+	$('#confirmItemName').text(name || ('ID ' + id));
+	$('#confirmDeleteModal').removeClass('hidden').fadeIn(120);
+  }
+
+  function closeConfirmModal() {
+	$('#confirmDeleteModal').fadeOut(120, function() {
+	  $(this).addClass('hidden');
+	});
+	pendingDeleteId = null;
+  }
+
+  // Fonctions pour la modal de renvoi
+  var pendingResendId = null;
+  var pendingResendFilename = null;
+
+  function openConfirmResendModal(id, filename) {
+	pendingResendId = id;
+	pendingResendFilename = filename;
+	$('#confirmResendItemName').text(filename || ('ID ' + id));
+	$('#confirmResendModal').removeClass('hidden').fadeIn(120);
+  }
+
+  function closeConfirmResendModal() {
+	$('#confirmResendModal').fadeOut(120, function() {
+	  $(this).addClass('hidden');
+	});
+	pendingResendId = null;
+	pendingResendFilename = null;
+  }
+
+  function showToast(msg) {
+	$('#toastMsg').text(msg || 'Opération effectuée');
+	$('#toast').removeClass('hidden').fadeIn(120);
+	setTimeout(function() {
+	  $('#toast').fadeOut(150, function() { $(this).addClass('hidden'); });
+	}, 1800);
+  }
+
+  // Ouvrir la modale au clic sur "Supprimer"
+  $(document).on('click', '.delete-link', function(e) {
+	e.preventDefault();
+	var releaseId = $(this).data('id');
+	var name = $(this).closest('tr').find('td:first').text().trim();
+	openConfirmModal(releaseId, name);
+  });
+
+  // Boutons de la modale
+  $('#cancelDeleteBtn, #confirmDeleteClose').on('click', function() {
+	closeConfirmModal();
+  });
+
+  // Clic sur l'overlay pour fermer
+  $('#confirmDeleteModal').on('click', function(e) {
+	if (e.target === this) { closeConfirmModal(); }
+  });
+
+  // Gestionnaires pour la modal de renvoi
+  $('#cancelResendBtn, #confirmResendClose').on('click', function() {
+	closeConfirmResendModal();
+  });
+
+  // Clic sur l'overlay pour fermer la modal de renvoi
+  $('#confirmResendModal').on('click', function(e) {
+	if (e.target === this) { closeConfirmResendModal(); }
+  });
+
+  // Accessibilité clavier: Esc = fermer, Enter = confirmer
+  $(document).on('keydown', function(e) {
+	var deleteModalVisible = !$('#confirmDeleteModal').hasClass('hidden');
+	var resendModalVisible = !$('#confirmResendModal').hasClass('hidden');
+	
+	if (deleteModalVisible) {
+	  if (e.key === 'Escape') { closeConfirmModal(); }
+	  if (e.key === 'Enter')  { $('#confirmDeleteBtn').click(); }
+	} else if (resendModalVisible) {
+	  if (e.key === 'Escape') { closeConfirmResendModal(); }
+	  if (e.key === 'Enter')  { $('#confirmResendBtn').click(); }
+	}
+  });
+
+  // Confirmer et supprimer via AJAX
+  $('#confirmDeleteBtn').on('click', function() {
+	if (!pendingDeleteId) return;
+	var releaseId = pendingDeleteId;
+
+	$.ajax({
+	  url: '/autopost/delete/' + releaseId,
+	  type: 'POST',
+	  success: function() {
+		$('#row-' + releaseId)
+		  .css('outline', '2px solid rgba(239,68,68,0.6)')
+		  .fadeOut('300', function(){ $(this).remove(); });
+		showToast('Enregistrement supprimé');
+	  },
+	  error: function() {
+		alert('Erreur lors de la suppression.');
+	  },
+	  complete: function() {
+		closeConfirmModal();
+	  }
+	});
+  });
+
+  // Confirmer et renvoyer via AJAX
+  $('#confirmResendBtn').on('click', function() {
+	if (!pendingResendId) return;
+	var releaseId = pendingResendId;
+	var filename = pendingResendFilename;
+
+	var $button = $(this);
+	var originalText = $button.text();
+	$button.text('Envoi...');
+
+	$.ajax({
+	  url: '/autopost/resend/' + releaseId,
+	  type: 'POST',
+	  success: function(data) {
+		showToast(data.message || 'Renvoi effectué avec succès');
+		console.log('Renvoi réussi pour', filename);
+	  },
+	  error: function(xhr) {
+		var errorMsg = 'Erreur lors du renvoi';
+		if (xhr.responseJSON && xhr.responseJSON.error) {
+		  errorMsg = xhr.responseJSON.error;
+		}
+		alert(errorMsg);
+		console.error('Erreur renvoi:', xhr.responseJSON);
+	  },
+	  complete: function() {
+		$button.text(originalText);
+		closeConfirmResendModal();
+	  }
+	});
+  });
+
+  // Affichage log
+  $(document).on('click', '.log-link', function(e) {
+	e.preventDefault();
+	var filename = $(this).data('filename');
+	$.ajax({
+	  url: '/autopost/log',
+	  type: 'GET',
+	  data: { name: filename },
+	  dataType: 'json',
+	  success: function(data) {
+		$('#logContent').html(data.content);
+		$('#logModal').removeClass('hidden').fadeIn();
+	  },
+	  error: function() {
+		alert('Erreur lors du chargement du fichier log.');
+	  }
+	});
+  });
+
+  // Affichage mediainfo
+  $(document).on('click', '.mediainfo-link', function(e) {
+	e.preventDefault();
+	var filename = $(this).data('filename');
+	$.ajax({
+	  url: '/autopost/mediainfo',
+	  type: 'GET',
+	  data: { name: filename },
+	  dataType: 'json',
+	  success: function(data) {
+		$('#mediainfoContent').text(data.content);
+		$('#mediainfoModal').removeClass('hidden').fadeIn();
+	  },
+	  error: function() {
+		alert('Erreur lors du chargement du fichier mediainfo.');
+	  }
+	});
+  });
+
+  // Fermeture modales (croix + clic overlay)
+  $('.close').click(function() {
+	$(this).closest('.fixed').fadeOut(function() {
+	  $(this).addClass('hidden');
+	});
+  });
+
+  $('.fixed').click(function(e) {
+	if (e.target === this) {
+	  $(this).fadeOut(function() {
+		$(this).addClass('hidden');
+	  });
+	}
+  });
+
+  // Edition: submit
+  $('#editForm').submit(function(e) {
+	e.preventDefault();
+	var releaseId = $('#releaseId').val();
+	var newStatus = $('#statusSelect').val();
+
+	$.ajax({
+	  url: '/autopost/edit/' + releaseId,
+	  type: 'POST',
+	  data: { status: newStatus },
+	  success: function() {
+		var statusText = '';
+		var statusClass = '';
+		switch (parseInt(newStatus)) {
+		  case 0: statusText = 'EN ATTENTE';     statusClass = 'bg-cyan-500 text-black font-bold';   break;
+		  case 1: statusText = 'ENVOI TERMINÉ';  statusClass = 'bg-green-300 text-black font-bold';  break;
+		  case 2: statusText = 'ERREUR';         statusClass = 'bg-red-300 text-black font-bold';    break;
+		  case 3: statusText = 'DEJA DISPONIBLE';statusClass = 'bg-pink-300 text-black font-bold';   break;
+		  case 4: statusText = 'EN COURS';       statusClass = 'bg-yellow-300 text-black font-bold'; break;
+		  default: statusText = 'INCONNU';
+		}
+
+		var row = $('#row-' + releaseId);
+		row.find('.status-text')
+		  .removeClass('bg-cyan-500 bg-green-300 bg-red-300 bg-pink-300 bg-yellow-300')
+		  .addClass(statusClass)
+		  .text(statusText);
+
+		$('#editModal').fadeOut(function() {
+		  $(this).addClass('hidden');
+		});
+	  },
+	  error: function() {
+		alert('Erreur lors de la mise à jour.');
+	  }
+	});
+  });
+
+  // Bouton copier Mediainfo
+  $('#copyMediainfoBtn').on('click', function() {
+	const content = document.getElementById('mediainfoContent').textContent;
+	navigator.clipboard.writeText(content).then(() => {
+	  this.textContent = '✅ Copié !';
+	  setTimeout(() => this.textContent = '📋 Copier JSON', 2000);
+	}).catch(function(err) {
+	  alert('Erreur lors de la copie : ' + err);
+	});
+  });
+
+  // Renvoi vers le site principal
+  $(document).on('click', '.resend-link', function(e) {
+	e.preventDefault();
+	var releaseId = $(this).data('id');
+	var filename = $(this).data('filename');
+	openConfirmResendModal(releaseId, filename);
+  });
+
+  // ==================== GESTION SÉLECTION MULTIPLE ====================
+  
+  function updateBulkActions() {
+	const selectedCheckboxes = $('.row-checkbox:checked');
+	const count = selectedCheckboxes.length;
+	
+	if (count > 0) {
+	  $('#bulkActions').removeClass('hidden');
+	  $('#selectedCount').text(count + ' élément' + (count > 1 ? 's' : '') + ' sélectionné' + (count > 1 ? 's' : ''));
+	} else {
+	  $('#bulkActions').addClass('hidden');
+	}
+	
+	// Mettre à jour la checkbox "Tout sélectionner"
+	const totalCheckboxes = $('.row-checkbox').length;
+	const allChecked = count === totalCheckboxes && totalCheckboxes > 0;
+	const someChecked = count > 0 && count < totalCheckboxes;
+	
+	$('#selectAll').prop('checked', allChecked);
+	$('#selectAll').prop('indeterminate', someChecked);
+  }
+
+  // Checkbox "Tout sélectionner"
+  $(document).on('click', '#selectAll', function() {
+	const isChecked = $(this).is(':checked');
+	$('.row-checkbox').prop('checked', isChecked);
+	updateBulkActions();
+  });
+
+  // Checkboxes individuelles
+  $(document).on('click', '.row-checkbox', function() {
+	updateBulkActions();
+  });
+
+  // Bouton "Éditer la sélection"
+  $(document).on('click', '#bulkEditBtn', function() {
+	const selectedCheckboxes = $('.row-checkbox:checked');
+	const count = selectedCheckboxes.length;
+	
+	if (count === 0) return;
+	
+	$('#bulkEditCount').text(count);
+	$('#bulkEditModal').removeClass('hidden').fadeIn(120);
+  });
+
+  // Bouton "Supprimer la sélection"
+  $(document).on('click', '#bulkDeleteBtn', function() {
+	const selectedCheckboxes = $('.row-checkbox:checked');
+	const count = selectedCheckboxes.length;
+	
+	if (count === 0) return;
+	
+	// Construire la liste des éléments à supprimer
+	let listHTML = '';
+	selectedCheckboxes.each(function() {
+	  const name = $(this).data('name');
+	  const id = $(this).data('id');
+	  listHTML += `<div class="text-sm text-gray-300 mb-1">• ${name} (ID: ${id})</div>`;
+	});
+	
+	$('#bulkDeleteCount').text(count);
+	$('#bulkDeleteList').html(listHTML);
+	$('#bulkDeleteModal').removeClass('hidden').fadeIn(120);
+  });
+
+  // Fermeture des modals en lot
+  $('#bulkEditClose, #bulkDeleteClose, #cancelBulkDeleteBtn').on('click', function() {
+	$('#bulkEditModal, #bulkDeleteModal').fadeOut(120, function() {
+	  $(this).addClass('hidden');
+	});
+  });
+
+  // Clic sur l'overlay pour fermer les modals en lot
+  $('#bulkEditModal, #bulkDeleteModal').on('click', function(e) {
+	if (e.target === this) {
+	  $(this).fadeOut(120, function() {
+		$(this).addClass('hidden');
+	  });
+	}
+  });
+
+  // Soumission du formulaire d'édition en lot
+  $('#bulkEditForm').on('submit', function(e) {
+	e.preventDefault();
+	
+	const selectedCheckboxes = $('.row-checkbox:checked');
+	const newStatus = $('#bulkStatusSelect').val();
+	const ids = [];
+	
+	selectedCheckboxes.each(function() {
+	  ids.push($(this).data('id'));
+	});
+	
+	if (ids.length === 0) return;
+	
+	const $submitBtn = $('#bulkEditForm button[type="submit"]');
+	const originalText = $submitBtn.text();
+	$submitBtn.text('Mise à jour...').prop('disabled', true);
+	
+	$.ajax({
+	  url: '/autopost/bulk-edit',
+	  type: 'POST',
+	  data: {
+		ids: ids,
+		status: newStatus,
+		_csrf: window.__BOOTSTRAP__.csrf
+	  },
+	  success: function(data) {
+		// Mettre à jour l'interface pour chaque ligne modifiée
+		ids.forEach(function(id) {
+		  updateRowStatus(id, newStatus);
+		});
+		
+		showToast(`${ids.length} élément(s) mis à jour`);
+		
+		// Fermer la modal et désélectionner
+		$('#bulkEditModal').fadeOut(120, function() {
+		  $(this).addClass('hidden');
+		});
+		$('.row-checkbox').prop('checked', false);
+		updateBulkActions();
+	  },
+	  error: function(xhr) {
+		let errorMsg = 'Erreur lors de la mise à jour en lot';
+		if (xhr.responseJSON && xhr.responseJSON.error) {
+		  errorMsg = xhr.responseJSON.error;
+		}
+		alert(errorMsg);
+	  },
+	  complete: function() {
+		$submitBtn.text(originalText).prop('disabled', false);
+	  }
+	});
+  });
+
+  // Confirmation de suppression en lot
+  $('#confirmBulkDeleteBtn').on('click', function() {
+	const selectedCheckboxes = $('.row-checkbox:checked');
+	const ids = [];
+	
+	selectedCheckboxes.each(function() {
+	  ids.push($(this).data('id'));
+	});
+	
+	if (ids.length === 0) return;
+	
+	const $button = $(this);
+	const originalText = $button.text();
+	$button.text('Suppression...').prop('disabled', true);
+	
+	$.ajax({
+	  url: '/autopost/bulk-delete',
+	  type: 'POST',
+	  data: {
+		ids: ids,
+		_csrf: window.__BOOTSTRAP__.csrf
+	  },
+	  success: function(data) {
+		showToast(`${ids.length} élément(s) supprimé(s)`);
+		
+		// Fermer la modal
+		$('#bulkDeleteModal').fadeOut(120, function() {
+		  $(this).addClass('hidden');
+		});
+		
+		// Décocher toutes les checkboxes AVANT de recharger
+		$('.row-checkbox').prop('checked', false);
+		$('#selectAll').prop('checked', false).prop('indeterminate', false);
+		$('#bulkActions').addClass('hidden');
+		
+		// Recharger les données de la page courante
+		loadPage(currentPage || 1);
+		
+		// Mettre à jour les statistiques
+		$.getJSON('/autopost/stats', function(s) { 
+		  if (s) updateStatsUI(s); 
+		});
+	  },
+	  error: function(xhr) {
+		let errorMsg = 'Erreur lors de la suppression en lot';
+		if (xhr.responseJSON && xhr.responseJSON.error) {
+		  errorMsg = xhr.responseJSON.error;
+		}
+		alert(errorMsg);
+	  },
+	  complete: function() {
+		$button.text(originalText).prop('disabled', false);
+	  }
+	});
+  });
+
+  // Fonction utilitaire pour mettre à jour le statut d'une ligne
+  function updateRowStatus(id, newStatus) {
+	const $row = $('#row-' + id);
+	const $statusCell = $row.find('.status-text');
+	
+	let statusText = '';
+	let statusClass = '';
+	switch (parseInt(newStatus)) {
+	  case 0: statusText = 'EN ATTENTE';      statusClass = 'bg-cyan-500 text-black font-bold';   break;
+	  case 1: statusText = 'ENVOI TERMINÉ';   statusClass = 'bg-green-300 text-black font-bold';  break;
+	  case 2: statusText = 'ERREUR';          statusClass = 'bg-red-300 text-black font-bold';    break;
+	  case 3: statusText = 'DEJA DISPONIBLE'; statusClass = 'bg-pink-300 text-black font-bold';   break;
+	  case 4: statusText = 'EN COURS';        statusClass = 'bg-yellow-300 text-black font-bold'; break;
+	  default: statusText = 'INCONNU';
+	}
+	
+	$statusCell.removeClass().addClass('px-4 py-2 border border-gray-700 status-text whitespace-nowrap ' + statusClass);
+	$statusCell.text(statusText);
+	$row.attr('data-status', newStatus);
+  }
+});

autopost/public/checkboxes.css

@@ -0,0 +1,141 @@
+/* Checkboxes personnalisées modernes */
+
+/* Style de base pour toutes les checkboxes */
+.checkbox-custom {
+  appearance: none;
+  -webkit-appearance: none;
+  -moz-appearance: none;
+  width: 18px;
+  height: 18px;
+  border: 2px solid #4b5563;
+  border-radius: 4px;
+  background: #1f2937;
+  position: relative;
+  cursor: pointer;
+  transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
+  outline: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+
+/* État hover */
+.checkbox-custom:hover {
+  border-color: #6b7280;
+  background: #374151;
+  transform: scale(1.05);
+  box-shadow: 0 0 0 3px rgba(59, 130, 246, 0.1);
+}
+
+/* État focus */
+.checkbox-custom:focus {
+  border-color: #3b82f6;
+  box-shadow: 0 0 0 3px rgba(59, 130, 246, 0.2);
+}
+
+/* État checked */
+.checkbox-custom:checked {
+  background: linear-gradient(135deg, #3b82f6, #1d4ed8);
+  border-color: #3b82f6;
+  transform: scale(1.05);
+  box-shadow: 0 0 0 3px rgba(59, 130, 246, 0.2);
+}
+
+/* Icône de validation */
+.checkbox-custom:checked::after {
+  content: '';
+  position: absolute;
+  width: 10px;
+  height: 6px;
+  border: 2px solid white;
+  border-top: none;
+  border-right: none;
+  transform: rotate(-45deg);
+  top: 3px;
+  left: 3px;
+  animation: checkmark 0.2s ease-in-out;
+}
+
+/* Animation de la coche */
+@keyframes checkmark {
+  0% {
+    transform: rotate(-45deg) scale(0);
+    opacity: 0;
+  }
+  50% {
+    transform: rotate(-45deg) scale(1.2);
+    opacity: 1;
+  }
+  100% {
+    transform: rotate(-45deg) scale(1);
+    opacity: 1;
+  }
+}
+
+/* État indéterminé pour "Tout sélectionner" */
+.checkbox-custom:indeterminate {
+  background: linear-gradient(135deg, #f59e0b, #d97706);
+  border-color: #f59e0b;
+  transform: scale(1.05);
+  box-shadow: 0 0 0 3px rgba(245, 158, 11, 0.2);
+}
+
+.checkbox-custom:indeterminate::after {
+  content: '';
+  position: absolute;
+  width: 8px;
+  height: 2px;
+  background: white;
+  top: 50%;
+  left: 50%;
+  transform: translate(-50%, -50%);
+  border-radius: 1px;
+  animation: indeterminate 0.2s ease-in-out;
+}
+
+/* Animation de l'état indéterminé */
+@keyframes indeterminate {
+  0% {
+    width: 0;
+    opacity: 0;
+  }
+  100% {
+    width: 8px;
+    opacity: 1;
+  }
+}
+
+/* Effet de selection pour les lignes avec checkbox cochée */
+tr:has(.checkbox-custom:checked) {
+  background-color: rgba(59, 130, 246, 0.05) !important;
+  border-left: 3px solid #3b82f6;
+}
+
+/* Animation d'apparition lors du chargement */
+.checkbox-custom {
+  animation: fadeIn 0.3s ease-in-out;
+}
+
+@keyframes fadeIn {
+  from {
+    opacity: 0;
+    transform: scale(0.8);
+  }
+  to {
+    opacity: 1;
+    transform: scale(1);
+  }
+}
+
+/* Amélioration pour les écrans tactiles */
+@media (hover: none) {
+  .checkbox-custom:hover {
+    transform: none;
+    box-shadow: none;
+  }
+  
+  .checkbox-custom:active {
+    transform: scale(0.95);
+  }
+}

autopost/views/autopost.html

@@ -0,0 +1,269 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+  <meta charset="UTF-8">
+  <title>{{TITLE}}</title>
+  <meta name="csrf-token" content="{{CSRF_TOKEN}}">
+  <link rel="icon" href="/autopost/favicon.ico" type="image/svg+xml">
+  <link rel="stylesheet" href="checkboxes.css" type="text/css">
+  <script src="js/index.global.js" type="application/javascript"></script>
+  <script src="jquery/jquery.min.js" type="application/javascript"></script>
+  <link href="https://fonts.googleapis.com/css?family=Roboto:400,700&display=swap" rel="stylesheet">
+</head>
+<body class="bg-{{BACKGROUND_CLASS}} text-white font-sans p-4">
+  <div class="w-full px-4">
+	<!-- Header -->
+	<div class="mb-6">
+	  <div class="flex items-center justify-between">
+		<h1 class="text-2xl md:text-3xl font-extrabold tracking-tight bg-clip-text text-transparent bg-gradient-to-r from-blue-400 to-cyan-300">
+		  Suivi Autopost {{APP_NAME}}
+		</h1>
+		<a href="/autopost/logout"
+		   class="inline-flex items-center gap-2 px-3 py-2 rounded-xl bg-red-600/90 hover:bg-red-600 text-white shadow-lg shadow-red-900/20 transition">
+		  <svg class="w-4 h-4" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+				  d="M17 16l4-4m0 0l-4-4m4 4H7m6 4v1a2 2 0 01-2 2H6a2 2 0 01-2-2V7a2 2 0 012-2h5a2 2 0 012 2v1"/>
+		  </svg>
+		  Déconnexion
+		</a>
+	  </div>
+	  <p class="mt-1 text-sm text-gray-400">Vue d’ensemble des traitements en cours et de l’état des envois.</p>
+	</div>
+
+	<!-- Stat cards -->
+	<div class="grid grid-cols-2 md:grid-cols-4 gap-4 mb-6">
+	  <!-- En attente -->
+	  <div class="group rounded-2xl p-3 md:p-5 bg-gradient-to-br from-cyan-500 to-cyan-400 text-black shadow-xl ring-1 ring-white/10 transition transform hover:-translate-y-0.5 hover:shadow-2xl cursor-pointer filter-card" data-status="0">
+		<div class="flex items-center gap-3">
+		  <div class="rounded-xl bg-black/10 p-2">
+			<svg class="w-5 h-5" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+					d="M12 6v6l4 2"/>
+			</svg>
+		  </div>
+		  <div class="text-sm/5 font-medium">En attente</div>
+		</div>
+		<div class="mt-3 text-3xl font-extrabold tabular-nums">{{STAT_ATTENTE}}</div>
+	  </div>
+
+	  <!-- Terminé -->
+	  <div class="group rounded-2xl p-4 md:p-5 bg-gradient-to-br from-green-300 to-emerald-300 text-black shadow-xl ring-1 ring-white/10 transition transform hover:-translate-y-0.5 hover:shadow-2xl cursor-pointer filter-card" data-status="1">
+		<div class="flex items-center gap-3">
+		  <div class="rounded-xl bg-black/10 p-2">
+			<svg class="w-5 h-5" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+					d="M5 13l4 4L19 7"/>
+			</svg>
+		  </div>
+		  <div class="text-sm/5 font-medium">Terminé</div>
+		</div>
+		<div class="mt-3 text-3xl font-extrabold tabular-nums">{{STAT_TERMINE}}</div>
+	  </div>
+
+	  <!-- Erreur -->
+	  <div class="group rounded-2xl p-4 md:p-5 bg-gradient-to-br from-rose-300 to-red-300 text-black shadow-xl ring-1 ring-white/10 transition transform hover:-translate-y-0.5 hover:shadow-2xl cursor-pointer filter-card" data-status="2">
+		<div class="flex items-center gap-3">
+		  <div class="rounded-xl bg-black/10 p-2">
+			<svg class="w-5 h-5" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+					d="M12 9v3m0 4h.01M10.29 3.86L1.82 18a2 2 0 001.71 3h16.94a2 2 0 001.71-3L13.71 3.86a2 2 0 00-3.42 0z"/>
+			</svg>
+		  </div>
+		  <div class="text-sm/5 font-medium">Erreur</div>
+		</div>
+		<div class="mt-3 text-3xl font-extrabold tabular-nums">{{STAT_ERREUR}}</div>
+	  </div>
+
+	  <!-- Déjà dispo -->
+	  <div class="group rounded-2xl p-4 md:p-5 bg-gradient-to-br from-pink-300 to-fuchsia-300 text-black shadow-xl ring-1 ring-white/10 transition transform hover:-translate-y-0.5 hover:shadow-2xl cursor-pointer filter-card" data-status="3">
+		<div class="flex items-center gap-3">
+		  <div class="rounded-xl bg-black/10 p-2">
+			<svg class="w-5 h-5" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			  <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+					d="M8 7h8M8 11h8M8 15h6"/>
+			</svg>
+		  </div>
+		  <div class="text-sm/5 font-medium">Déjà dispo</div>
+		</div>
+		<div class="mt-3 text-3xl font-extrabold tabular-nums">{{STAT_DEJA}}</div>
+	  </div>
+	</div>
+
+	<!-- Bouton réinitialiser -->
+	<div class="mb-4 text-center">
+	  <button id="showAll"
+			  class="hidden px-5 py-2 rounded-xl bg-gradient-to-br from-gray-600 to-gray-800 text-white font-semibold shadow-lg hover:from-gray-500 hover:to-gray-700 transition transform hover:-translate-y-0.5">
+		Tout afficher
+	  </button>
+	</div>
+
+	<!-- Search -->
+	<div class="mb-4">
+	  <label for="searchInput" class="sr-only">Rechercher</label>
+	  <div class="relative">
+		<span class="pointer-events-none absolute inset-y-0 left-0 flex items-center pl-3">
+		  <svg class="w-5 h-5 text-gray-400" viewBox="0 0 24 24" fill="none" stroke="currentColor">
+			<path stroke-linecap="round" stroke-linejoin="round" stroke-width="2"
+				  d="M21 21l-4.35-4.35M10 18a8 8 0 1 1 0-16 8 8 0 0 1 0 16z"/>
+		  </svg>
+		</span>
+		<input id="searchInput" type="text" placeholder="Rechercher…"
+			   class="w-full pl-10 pr-3 py-2 rounded-xl bg-gray-800/80 border border-gray-700 focus:border-blue-500 focus:ring-4 focus:ring-blue-500/20 outline-none transition placeholder:text-gray-400" />
+	  </div>
+	</div>
+
+	<nav id="pagination" aria-label="Page navigation" class="mb-4">
+	  {{PAGINATION_HTML}}
+	</nav>
+
+	<!-- Boutons d'actions en lot -->
+	<div id="bulkActions" class="hidden mb-4 p-4 bg-gray-800 rounded-lg border border-gray-600">
+	  <div class="flex items-center justify-between flex-wrap gap-3">
+		<span id="selectedCount" class="text-gray-300 font-medium">0 élément sélectionné</span>
+		<div class="flex gap-2">
+		  <button id="bulkEditBtn" class="px-4 py-2 bg-blue-600 hover:bg-blue-700 text-white rounded-lg font-semibold transition">
+			✏️ Éditer la sélection
+		  </button>
+		  <button id="bulkDeleteBtn" class="px-4 py-2 bg-red-600 hover:bg-red-700 text-white rounded-lg font-semibold transition">
+			🗑️ Supprimer la sélection
+		  </button>
+		</div>
+	  </div>
+	</div>
+
+	<div class="overflow-x-auto">
+	  <table class="min-w-full border border-gray-700 shadow-lg rounded-lg overflow-hidden">
+		<thead class="bg-gray-900 text-gray-300 uppercase text-sm">
+		  <tr>
+			<th class="px-4 py-2">
+			  <input type="checkbox" id="selectAll" class="checkbox-custom">
+			</th>
+			<th class="px-4 py-2">Name</th>
+			<th class="px-4 py-2">Status</th>
+			<th class="px-4 py-2">ID</th>
+			<th class="px-4 py-2">Actions</th>
+		  </tr>
+		</thead>
+		<tbody class="divide-y divide-gray-700">
+		  {{TABLE_ROWS}}
+		</tbody>
+	  </table>
+	</div>
+  </div>
+
+  <!-- Modales + Toast (inchangés) -->
+  <!-- Modale d'édition -->
+  <div id="editModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-md transform transition-all scale-95">
+	  <button type="button" class="absolute top-4 right-4 text-gray-400 hover:text-white text-2xl font-bold close">&times;</button>
+	  <h2 class="text-2xl font-bold mb-6 text-center text-white">✏️ Éditer Release <span id="modalReleaseId" class="text-blue-400"></span></h2>
+	  <form id="editForm">
+		<label for="statusSelect" class="block mb-2 text-gray-300 font-medium">Status :</label>
+		<select id="statusSelect" name="status"
+		  class="w-full p-3 mb-6 rounded-lg border border-gray-700 bg-gray-800 text-white focus:ring-2 focus:ring-blue-500 focus:outline-none">
+		  <option value="0" class="text-cyan-400">EN ATTENTE</option>
+		  <option value="1" class="text-green-400">ENVOI TERMINÉ</option>
+		  <option value="2" class="text-red-400">ERREUR</option>
+		  <option value="3" class="text-pink-400">DEJA DISPONIBLE</option>
+		  <option value="4" class="text-yellow-400">EN COURS</option>
+		</select>
+		<input type="hidden" id="releaseId" name="id" value=""/>
+		<button type="submit" class="w-full p-3 bg-gradient-to-r from-blue-600 to-blue-500 text-white font-semibold rounded-lg shadow hover:from-blue-500 hover:to-blue-400 transform hover:-translate-y-0.5 transition">💾 Mettre à jour</button>
+	  </form>
+	</div>
+  </div>
+
+  <!-- Modale log -->
+  <div id="logModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-7xl relative">
+	  <button type="button" class="absolute top-4 right-4 text-gray-400 hover:text-white text-2xl font-bold close log-close">&times;</button>
+	  <h2 class="text-2xl font-bold mb-6 text-center text-white">📄 Contenu du log</h2>
+	  <pre id="logContent" class="max-h-[90vh] overflow-y-auto p-6 rounded-lg bg-gray-800 text-green-400 font-mono text-sm leading-relaxed border border-gray-700 shadow-inner whitespace-pre-wrap"></pre>
+	</div>
+  </div>
+
+  <!-- Modale mediainfo -->
+  <div id="mediainfoModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-6xl relative">
+	  <button type="button" class="absolute top-4 right-4 text-gray-400 hover:text-white text-2xl font-bold close mediainfo-close" title="Fermer">&times;</button>
+	  <h2 class="text-2xl font-bold text-white mb-4 pr-16">📄 Contenu du mediainfo</h2>
+	  <div class="mb-6">
+		<button id="copyMediainfoBtn" class="bg-blue-600 hover:bg-blue-700 text-white px-4 py-2 rounded-lg text-sm font-semibold shadow-md transition">📋 Copier JSON</button>
+	  </div>
+	  <pre id="mediainfoContent" class="max-h-[80vh] overflow-y-auto p-4 rounded-lg bg-gray-800 text-yellow-300 font-mono text-sm leading-relaxed border border-gray-700 shadow-inner whitespace-pre-wrap"></pre>
+	</div>
+  </div>
+
+  <!-- Modale confirmation suppression -->
+  <div id="confirmDeleteModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-3xl md:max-w-4xl relative">
+	  <button type="button" class="absolute top-3 right-3 text-gray-400 hover:text-white text-xl font-bold" id="confirmDeleteClose" aria-label="Fermer">&times;</button>
+	  <h3 class="text-xl font-bold text-white mb-2">Supprimer cet enregistrement ?</h3>
+	  <p class="text-gray-300 text-sm mb-6">Vous êtes sur le point de supprimer <span id="confirmItemName" class="text-white font-semibold"></span>. Cette action est irréversible.</p>
+	  <div class="flex justify-end gap-3">
+		<button type="button" id="cancelDeleteBtn" class="px-4 py-2 rounded-lg bg-gray-700 hover:bg-gray-600 text-white">Annuler</button>
+		<button type="button" id="confirmDeleteBtn" class="px-4 py-2 rounded-lg bg-red-600 hover:bg-red-700 text-white font-semibold">Supprimer</button>
+	  </div>
+	</div>
+  </div>
+
+  <!-- Modal de confirmation de renvoi -->
+  <div id="confirmResendModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-3xl md:max-w-4xl relative">
+	  <button type="button" class="absolute top-3 right-3 text-gray-400 hover:text-white text-xl font-bold" id="confirmResendClose" aria-label="Fermer">&times;</button>
+	  <h3 class="text-xl font-bold text-white mb-2">Renvoyer cet enregistrement ?</h3>
+	  <p class="text-gray-300 text-sm mb-6">Vous êtes sur le point de renvoyer <span id="confirmResendItemName" class="text-white font-semibold"></span> vers le site principal.</p>
+	  <div class="flex justify-end gap-3">
+		<button type="button" id="cancelResendBtn" class="px-4 py-2 rounded-lg bg-gray-700 hover:bg-gray-600 text-white">Annuler</button>
+		<button type="button" id="confirmResendBtn" class="px-4 py-2 rounded-lg bg-green-600 hover:bg-green-700 text-white font-semibold">Renvoyer</button>
+	  </div>
+	</div>
+  </div>
+
+  <!-- Modal d'édition en lot -->
+  <div id="bulkEditModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-md relative">
+	  <button type="button" class="absolute top-4 right-4 text-gray-400 hover:text-white text-2xl font-bold" id="bulkEditClose">&times;</button>
+	  <h2 class="text-2xl font-bold mb-6 text-center text-white">✏️ Éditer la sélection</h2>
+	  <p class="text-gray-300 text-sm mb-4">Modifier le statut de <span id="bulkEditCount" class="text-white font-semibold">0</span> élément(s) sélectionné(s).</p>
+	  <form id="bulkEditForm">
+		<label for="bulkStatusSelect" class="block mb-2 text-gray-300 font-medium">Nouveau statut :</label>
+		<select id="bulkStatusSelect" name="status"
+		  class="w-full p-3 mb-6 rounded-lg border border-gray-700 bg-gray-800 text-white focus:ring-2 focus:ring-blue-500 focus:outline-none">
+		  <option value="0" class="text-cyan-400">EN ATTENTE</option>
+		  <option value="1" class="text-green-400">ENVOI TERMINÉ</option>
+		  <option value="2" class="text-red-400">ERREUR</option>
+		  <option value="3" class="text-pink-400">DEJA DISPONIBLE</option>
+		  <option value="4" class="text-yellow-400">EN COURS</option>
+		</select>
+		<button type="submit" class="w-full p-3 bg-gradient-to-r from-blue-600 to-blue-500 text-white font-semibold rounded-lg shadow hover:from-blue-500 hover:to-blue-400 transform hover:-translate-y-0.5 transition">💾 Mettre à jour la sélection</button>
+	  </form>
+	</div>
+  </div>
+
+  <!-- Modal de confirmation de suppression en lot -->
+  <div id="bulkDeleteModal" class="hidden fixed inset-0 bg-black bg-opacity-60 backdrop-blur-sm flex items-center justify-center z-50">
+	<div class="bg-gray-900 p-6 rounded-2xl shadow-2xl w-full max-w-3xl md:max-w-4xl relative">
+	  <button type="button" class="absolute top-3 right-3 text-gray-400 hover:text-white text-xl font-bold" id="bulkDeleteClose" aria-label="Fermer">&times;</button>
+	  <h3 class="text-xl font-bold text-white mb-2">Supprimer ces enregistrements ?</h3>
+	  <p class="text-gray-300 text-sm mb-4">Vous êtes sur le point de supprimer <span id="bulkDeleteCount" class="text-white font-semibold">0</span> élément(s) sélectionné(s).</p>
+	  <div id="bulkDeleteList" class="max-h-40 overflow-y-auto mb-6 p-3 bg-gray-800 rounded-lg border border-gray-700">
+		<!-- Liste des éléments à supprimer -->
+	  </div>
+	  <div class="flex justify-end gap-3">
+		<button type="button" id="cancelBulkDeleteBtn" class="px-4 py-2 rounded-lg bg-gray-700 hover:bg-gray-600 text-white">Annuler</button>
+		<button type="button" id="confirmBulkDeleteBtn" class="px-4 py-2 rounded-lg bg-red-600 hover:bg-red-700 text-white font-semibold">Supprimer tout</button>
+	  </div>
+	</div>
+  </div>
+
+  <!-- Toast -->
+  <div id="toast" class="hidden fixed bottom-6 left-1/2 -translate-x-1/2 px-4 py-2 rounded-lg bg-gray-900/95 text-white shadow-lg z-[60]">
+	<span id="toastMsg">Supprimé.</span>
+  </div>
+
+  <!-- Bootstrap côté client (données initiales) -->
+  <script>window.__BOOTSTRAP__ = {{BOOTSTRAP_JSON}};</script>
+  <script src="autopost.js" defer></script>
+</body>
+</html>

bin/postauto

@@ -120,9 +120,11 @@ do_add() {
 do_check() {
 	release_path="$2"
 	release_name=$(basename "$release_path")
-	release_without_ext="${release_name%.*}"
+	if [[ "${release_name}" =~ \.(mkv|mp4|iso)$ ]]; then
+		release_name="${release_name%.*}"
+	fi
 
-	response=$(curl -s "${URL_API}${APIKEY}&check=${release_without_ext}")
+	response=$(curl -s "${URL_API}${APIKEY}&check=${release_name}")
 	code=$(echo "$response" | jq -r '.code')
 	explain=$(echo "$response" | jq -r '.Explain')
 

install.sh

@@ -47,10 +47,35 @@ install_bin() { # install_bin <src> <dst>
 	install -m 755 "$1" "$2"
 }
 
+# ========= Downloader (curl→wget fallback) =========
+download() {
+	local url="$1" out="$2"
+	[ -z "$url" ] || [ -z "$out" ] && { echo "download: usage: download <url> <outfile>" >&2; return 2; }
+	mkdir -p -- "$(dirname -- "$out")"
+	local tmp="${out}.dl.$$"
+	local curl_opts=(--fail --silent --show-error --location --retry 5 --retry-all-errors --retry-delay 2 --connect-timeout 15)
+	local wget_opts=(--quiet --https-only --tries=5 --waitretry=2 --retry-connrefused)
+
+	if command -v curl >/dev/null 2>&1; then
+		if curl --http1.1 -4 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+		if env -u http_proxy -u https_proxy -u all_proxy \
+			 curl --http1.1 -4 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+		if curl --http1.1 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+	fi
+	if command -v wget >/dev/null 2>&1; then
+		if wget --inet4-only "${wget_opts[@]}" -O "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+		if wget "${wget_opts[@]}" -O "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+	fi
+	rm -f -- "$tmp" 2>/dev/null || true
+	return 1
+}
+
 # ========= Start =========
 log "Initialisation des dossiers"
 ensure_dir "$BIN_DIR"
 ensure_dir "$AUTOPOST_DIR"
+ensure_dir "$AUTOPOST_DIR"/public
+ensure_dir "$AUTOPOST_DIR"/views
 ensure_dir "$BASH_COMPLETION_DIR"
 
 # Ensure PATH contains $HOME/bin for this session & future shells
@@ -68,7 +93,6 @@ MISSING=()
 for c in wget curl tar xz; do
 	has_cmd "$c" || MISSING+=("$c")
 done
-# unzip est requis plus bas
 has_cmd unzip || MISSING+=("unzip")
 if [ "${#MISSING[@]}" -gt 0 ]; then
 	warn "Installation des prérequis manquants: ${MISSING[*]}"
@@ -81,7 +105,7 @@ if [ "${#MISSING[@]}" -gt 0 ]; then
 fi
 
 # ========= Packages list check (array usage) =========
-REQUIRED_CMDS=(curl basename php screen)
+REQUIRED_CMDS=(curl basename screen)
 
 # ========= mediainfo =========
 if has_cmd mediainfo; then
@@ -99,14 +123,18 @@ else
 				"https://mediaarea.net/download/binary/mediainfo/25.04/mediainfo_25.04-1_amd64.Debian_12.deb"
 			)
 			pushd "$TMP_DIR" >/dev/null
-			for u in "${DEBS[@]}"; do wget -q "$u"; done
+			for u in "${DEBS[@]}"; do
+				f="$(basename "$u")"
+				download "$u" "$f" || die "Téléchargement échoué: $u"
+			done
 			run_root dpkg -i ./*.deb || run_root apt-get -f -y install
 			popd >/dev/null
 		fi
 	else
 		# AppImage fallback
 		APP="$BIN_DIR/mediainfo"
-		curl -fsSL -o "$APP" "https://mediaarea.net/download/binary/mediainfo/20.09/mediainfo-20.09.glibc2.3-x86_64.AppImage"
+		download "https://mediaarea.net/download/binary/mediainfo/20.09/mediainfo-20.09.glibc2.3-x86_64.AppImage" "$APP" \
+			|| die "Téléchargement mediainfo AppImage"
 		install -m 755 "$APP" "$APP"
 		ok "mediainfo AppImage installé dans $BIN_DIR"
 	fi
@@ -127,9 +155,9 @@ select BDD in "SQLite" "MySQL"; do
 				else
 					warn "apt absent → installation binaire sqlite3"
 					pushd "$TMP_DIR" >/dev/null
-					curl -fsSL -o sqlite-tools.zip "https://www.sqlite.org/2024/sqlite-tools-linux-x64-3470000.zip"
+					download "https://www.sqlite.org/2024/sqlite-tools-linux-x64-3470000.zip" "$TMP_DIR/sqlite-tools.zip" \
-					unzip -q sqlite-tools.zip
+						|| die "Téléchargement sqlite-tools"
-					# trouve sqlite3
+					unzip -q "$TMP_DIR/sqlite-tools.zip"
 					SQLITE_BIN="$(find . -type f -name sqlite3 -perm -u+x | head -n1)"
 					[ -n "$SQLITE_BIN" ] || die "sqlite3 introuvable dans l’archive"
 					install_bin "$SQLITE_BIN" "$BIN_DIR/sqlite3"
@@ -151,8 +179,9 @@ select BDD in "SQLite" "MySQL"; do
 					run_root apt-get install -y sqlite3
 				else
 					pushd "$TMP_DIR" >/dev/null
-					curl -fsSL -o sqlite-tools.zip "https://www.sqlite.org/2024/sqlite-tools-linux-x64-3470000.zip"
+					download "https://www.sqlite.org/2024/sqlite-tools-linux-x64-3470000.zip" "$TMP_DIR/sqlite-tools.zip" \
-					unzip -q sqlite-tools.zip
+						|| die "Téléchargement sqlite-tools"
+					unzip -q "$TMP_DIR/sqlite-tools.zip"
 					SQLITE_BIN="$(find . -type f -name sqlite3 -perm -u+x | head -n1)"
 					[ -n "$SQLITE_BIN" ] || die "sqlite3 introuvable dans l’archive"
 					install_bin "$SQLITE_BIN" "$BIN_DIR/sqlite3"
@@ -174,7 +203,8 @@ else
 	if has_cmd apt-get; then
 		run_root apt-get install -y jq
 	else
-		curl -fsSL -o "$TMP_DIR/jq" "https://github.com/jqlang/jq/releases/download/jq-1.7.1/jq-linux-amd64"
+		download "https://github.com/jqlang/jq/releases/download/jq-1.7.1/jq-linux-amd64" "$TMP_DIR/jq" \
+			|| die "Téléchargement jq"
 		install_bin "$TMP_DIR/jq" "$BIN_DIR/jq"
 	fi
 fi
@@ -187,9 +217,8 @@ else
 	log "Installation de 7z (binaire standalone)"
 	pushd "$TMP_DIR" >/dev/null
 	Z_URL="https://7-zip.org/a/7z2409-linux-x64.tar.xz"
-	wget -q -O 7z.tar.xz "$Z_URL"
+	download "$Z_URL" "$TMP_DIR/7z.tar.xz" || die "Téléchargement 7z"
-	tar -xJf 7z.tar.xz
+	tar -xJf "$TMP_DIR/7z.tar.xz"
-	# Cherche 7zz* exécutable
 	Z_BIN="$(find . -maxdepth 1 -type f -name '7zz*' -perm -u+x | head -n1)"
 	[ -n "$Z_BIN" ] || die "binaire 7z introuvable"
 	install_bin "$Z_BIN" "$BIN_DIR/7z"
@@ -200,14 +229,16 @@ REQUIRED_CMDS+=(7z)
 # ========= BDInfo & Substractor =========
 log "Installation BDInfo"
 pushd "$TMP_DIR" >/dev/null
-curl -fsSL -o bdinfo.zip "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfo_linux_v2.0.6.zip"
+download "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfo_linux_v2.0.6.zip" "$TMP_DIR/bdinfo.zip" \
-unzip -q bdinfo.zip
+	|| die "Téléchargement BDInfo"
+unzip -q "$TMP_DIR/bdinfo.zip"
 BDINFO_BIN="$(find . -type f -name BDInfo -perm -u+x | head -n1)"
 [ -n "$BDINFO_BIN" ] || die "BDInfo introuvable"
 install_bin "$BDINFO_BIN" "$BIN_DIR/BDInfo"
 
-curl -fsSL -o substractor.zip "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfodatasubstractor_linux_v2.0.6.zip"
+download "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfodatasubstractor_linux_v2.0.6.zip" "$TMP_DIR/substractor.zip" \
-unzip -q substractor.zip
+	|| die "Téléchargement BDInfoDataSubstractor"
+unzip -q "$TMP_DIR/substractor.zip"
 SUB_BIN="$(find . -type f -name BDInfoDataSubstractor -perm -u+x | head -n1)"
 [ -n "$SUB_BIN" ] || die "BDInfoDataSubstractor introuvable"
 install_bin "$SUB_BIN" "$BIN_DIR/BDInfoDataSubstractor"
@@ -218,8 +249,8 @@ REQUIRED_CMDS+=(BDInfo BDInfoDataSubstractor)
 log "Installation Nyuu"
 pushd "$TMP_DIR" >/dev/null
 NYUU_URL="https://github.com/Antidote2151/Nyuu-Obfuscation/releases/download/v0.4.2-Obfuscate1.3/nyuu-v0.4.2-Obfuscate1.3-linux-amd64.tar.xz"
-wget -q -O nyuu.tar.xz "$NYUU_URL"
+download "$NYUU_URL" "$TMP_DIR/nyuu.tar.xz" || die "Téléchargement nyuu"
-tar -xJf nyuu.tar.xz
+tar -xJf "$TMP_DIR/nyuu.tar.xz"
 NYUU_BIN="$(find . -type f -name nyuu -perm -u+x | head -n1)"
 [ -n "$NYUU_BIN" ] || die "nyuu introuvable dans l’archive"
 install_bin "$NYUU_BIN" "$BIN_DIR/nyuu"
@@ -230,21 +261,21 @@ REQUIRED_CMDS+=(nyuu)
 log "Installation ParPar"
 pushd "$TMP_DIR" >/dev/null
 PARPAR_URL="https://github.com/animetosho/ParPar/releases/download/v0.4.5/parpar-v0.4.5-linux-static-amd64.xz"
-wget -q -O parpar.xz "$PARPAR_URL"
+download "$PARPAR_URL" "$TMP_DIR/parpar-v0.4.5-linux-static-amd64.xz" || die "Téléchargement parpar"
-xz -d parpar.xz
+xz -d "$TMP_DIR/parpar-v0.4.5-linux-static-amd64.xz"
-PARPAR_BIN="$(find . -maxdepth 1 -type f -name 'parpar-*' -perm -u+x | head -n1)"
+PARPAR_BIN="$(find . -maxdepth 1 -type f -name 'parpar-*' | head -n1)"
 [ -n "$PARPAR_BIN" ] || die "parpar introuvable"
 install_bin "$PARPAR_BIN" "$BIN_DIR/parpar"
-popd >/devnull
+popd >/dev/null
 REQUIRED_CMDS+=(parpar)
 
 # ========= Téléchargement scripts autopost =========
 log "Téléchargement des scripts autopost"
-wget -q -O "$AUTOPOST_DIR/analyzer.sh" "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/analyzer.sh"
+download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/analyzer.sh" "$AUTOPOST_DIR/analyzer.sh" || die "analyzer.sh"
-wget -q -O "$AUTOPOST_DIR/common.sh"   "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/common.sh"
+download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/common.sh"   "$AUTOPOST_DIR/common.sh"   || die "common.sh"
-wget -q -O "$AUTOPOST_DIR/posteur.sh"  "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/posteur.sh"
+download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/posteur.sh"  "$AUTOPOST_DIR/posteur.sh"  || die "posteur.sh"
-wget -q -O "$BIN_DIR/postauto"         "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/bin/postauto"
+download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/bin/postauto"         "$BIN_DIR/postauto"         || die "postauto"
-[ -f "$AUTOPOST_DIR/conf.sh" ] || wget -q -O "$AUTOPOST_DIR/conf.sh" "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/conf.sh"
+[ -f "$AUTOPOST_DIR/conf.sh" ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/conf.sh" "$AUTOPOST_DIR/conf.sh"
 
 chmod 755 "$BIN_DIR/postauto"
 chmod -R 755 "$AUTOPOST_DIR"
@@ -252,7 +283,7 @@ chmod -R 755 "$AUTOPOST_DIR"
 # ========= Bash completion (fichier dédié) =========
 COMP_FILE="$BASH_COMPLETION_DIR/postauto"
 if [ ! -s "$COMP_FILE" ]; then
-	cat > "$COMP_FILE" <<'EOF'
+cat > "$COMP_FILE" <<'EOF'
 # completion postauto
 _autopost_completion() {
 	local cur prev opts
@@ -272,7 +303,6 @@ _autopost_completion() {
 complete -F _autopost_completion postauto
 EOF
 	ok "Completion bash installée dans $COMP_FILE"
-	# source automatique depuis .bashrc si pas déjà présent
 	if ! grep -q 'bash_completion.d' "$BASHRC_FILE" 2>/dev/null; then
 		echo '[ -f "$HOME/.bash_completion.d/postauto" ] && . "$HOME/.bash_completion.d/postauto"' >> "$BASHRC_FILE"
 	fi
@@ -287,7 +317,10 @@ if [ -s "$NVM_DIR/nvm.sh" ]; then
 	. "$NVM_DIR/nvm.sh"
 else
 	log "Installation de nvm"
-	curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.3/install.sh | bash
+	tmp_nvm="$TMP_DIR/install_nvm.sh"
+	download "https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.3/install.sh" "$tmp_nvm" \
+		|| die "Téléchargement nvm install.sh"
+	bash "$tmp_nvm"
 	. "$NVM_DIR/nvm.sh"
 fi
 
@@ -311,7 +344,7 @@ fi
 log "Vérification modules npm"
 pushd "$AUTOPOST_DIR" >/dev/null
 [ -f package.json ] || npm init -y >/dev/null 2>&1 || true
-modules=(express express-session sqlite3 ansi-to-html @tailwindcss/browser autoprefixer jquery mysql2 session-file-store chokidar)
+modules=(express express-session sqlite3 ansi-to-html @tailwindcss/browser autoprefixer jquery mysql2 session-file-store chokidar argon2)
 missing=()
 for m in "${modules[@]}"; do
 	npm list "$m" --depth=0 >/dev/null 2>&1 || missing+=("$m")
@@ -326,10 +359,13 @@ popd >/dev/null
 
 # ========= Fichiers Node (server.js, db.js, config.js) =========
 log "Vérification fichiers Node"
-[ -f "$AUTOPOST_DIR/server.js" ] || wget -q -O "$AUTOPOST_DIR/server.js" "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/server.js"
+[ -f "$AUTOPOST_DIR/server.js" ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/server.js" "$AUTOPOST_DIR/server.js"
-[ -f "$AUTOPOST_DIR/db.js"     ] || wget -q -O "$AUTOPOST_DIR/db.js"     "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/db.js"
+[ -f "$AUTOPOST_DIR/db.js"     ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/db.js"     "$AUTOPOST_DIR/db.js"
+[ -f "$AUTOPOST_DIR/public/autopost.js" ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/public/autopost.js" "$AUTOPOST_DIR/public/autopost.js"
+[ -f "$AUTOPOST_DIR/public/checkboxes.css" ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/public/checkboxes.css" "$AUTOPOST_DIR/public/checkboxes.css"
+[ -f "$AUTOPOST_DIR/views/autopost.html" ] || download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/views/autopost.html" "$AUTOPOST_DIR/views/autopost.html"
 if [ ! -f "$AUTOPOST_DIR/config.js" ]; then
-	wget -q -O "$AUTOPOST_DIR/config.js" "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/config.js"
+	download "https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/config.js" "$AUTOPOST_DIR/config.js"
 	ok "Installation terminée. Configurez $AUTOPOST_DIR/config.js."
 fi
 
@@ -338,7 +374,6 @@ log "Vérification finale des binaires requis"
 missing_final=()
 for cmd in "${REQUIRED_CMDS[@]}"; do
 	if ! command -v "$cmd" >/dev/null 2>&1; then
-		# autoriser chemin absolu
 		if [[ "$cmd" == */* ]]; then
 			[ -x "$cmd" ] || missing_final+=("$cmd")
 		else

readme.md

@@ -1,83 +1,90 @@
-## Postauto
+# Postauto
-### Pour poster automatiquement avec une simple commande depuis un VPS , serveur dédié ou seedbox.
+### Poster automatiquement via une simple commande depuis un VPS, dédié ou seedbox
 
-Postauto est un script permettant via une simple commande d'ajouter un fichier à traiter dans une base de données. 
+**Postauto** est un ensemble de scripts (bash + une petite UI web Node.js) qui :
-Une fois votre fichier ajouté il sera traité automatiquement.
+- génèrent les **PAR2**
+- postent via **Nyuu** (avec **obfuscation**)
+- envoient automatiquement sur le site (MediaInfo/BDInfo inclus)
+- proposent un **suivi sur une page web**
 
-#### Possibilités.
+## Sommaire
+- [Prérequis](#prérequis)
+- [Installation](#installation)
+- [Configuration (bash)](#configuration-bash--homeuserautopostconfsh)
+- [Configuration (UI web)](#configuration-ui-web--homeuserautopostconfigjs)
+- [Création de la base](#création-de-la-base)
+- [Commandes CLI](#commandes-cli)
+- [Interface web](#interface-web)
+  - [Configuration Nginx](#configuration-nginx)
+- [Mise à jour](#mise-à-jour)
+  - [Automatique](#automatique)
+  - [Manuellement](#manuellement)
+- [Désinstallation](#désinstallation)
+- [Limitations](#limitations)
+- [Dépannage](#dépannage)
 
-- Création des PAR2
+## Prérequis
-- Post via NYUU ( obfuscation totale)
+- Linux (script bash)
-- ✨Envoi automatique sur le site✨ (avec MediaInfo/BDInfo directement ajouté)
+- Accès **SSH** (sur `/home/$USER`)
-- Suivi sur une page web
+- Outils de base : `basename`, `curl`, `screen`, `nginx` (pour l’UI web)
+- Testé avec :  
+  - VPS / dédiés ✅  
+  - Seedbox : Ultra.cc ✅, Whatbox ✅, Dediseedbox ❌ (limitations)
 
-#### Limitations.
+> L’installateur installe/emballe tout le reste (mediainfo, sqlite3 si besoin, 7z, BDInfo, Nyuu, ParPar, Node v22, modules npm…).
 
- - [ ] Le script est écrit en bash il ne tourne donc que sous linux.
+## Installation
- - [ ] Il faut impérativement un accès SSH sur /home/$USER
-- VPS et Dédié pas de souci de ce coté.
-- Seedbox nous avons testé via ultracc whatbox et dediseedbox ( ultracc et whatbox ok, dediseedbox pas ok).
- - [ ] Il faut avoir les applications suivantes de disponibles.
 
-| Commande | README |
+### Avec droits sudo (recommandé)
-| ------ | ------ |
+Installe mediainfo/sqlite via paquets Debian (meilleure compatibilité) :
-| basename | Normalement installé par défaut |
+```bash
-| curl | à installer si nécessaire |
+wget -qO install.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/install.sh \
-| screen | à installer si nécessaire |
+  && chmod +x install.sh \
-| nginx | à installer si vous désirez utiliser l'interface de suivi |
+  && sudo --preserve-env=HOME ./install.sh
-
-#### Installation.
-##### 2 solutions possible
-
-- vous disposez des droits sudo :
-
-```sh
-wget -qO install.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/install.sh && chmod +x install.sh && sudo --preserve-env=HOME ./install.sh
-```
-> Cela installera via les paquets debian sqlite et mediinfo (meilleur compatibilité)
-
-- vous ne disposez pas des droits sudo :
-
-```sh
-wget -qO install.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/install.sh && chmod +x install.sh && ./install.sh
 ```
 
-#### Update
+### Sans sudo
-
+Utilise des binaires « standalone » dans `~/bin` :
-```sh
+```bash
-postauto stop && wget -qO update.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/update.sh && chmod +x update.sh && ./update.sh
+wget -qO install.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/install.sh \
+  && chmod +x install.sh \
+  && ./install.sh
 ```
 
-##### Update passage EN 7z (12/03/2024)
+## Configuration (bash) — `/home/$USER/autopost/conf.sh`
 
-```sh
+> Variables **obligatoires** (placeholders à remplacer), + règles **sqlite/mysql**.
-cd autopost 
-wget -qO compress.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/compress.sh && chmod +x compress.sh && ./compress.sh
-```
 
-#### Configuration.
+```bash
-Éditer le fichier /home/$USER/autopost/conf.sh
-```sh
 #!/bin/bash
-#CONFIG A MODIF
+# CONFIG À MODIFIER
 URL_API="A NOUS DEMANDER SUR DISCORD"
 APIKEY="A RETROUVER DANS VOTRE PROFIL"
-DB_FILE="/home/$USER/autopost/base_autopost.db"
+
 DOSSIER_GLOBAL="/home/$USER/"
 DOSSIER_NFO="/home/$USER/autopost/mediainfo/"
 DOSSIER_LOGS="/home/$USER/autopost/logs/"
-DOSSIER_NZB_ATTENTE="/home/$USER/ATTENTE/"
+DOSSIER_NZB_ATTENTE="/home/$USER/autopost/ATTENTE/"
-DOSSIER_NZB_FINAL="/home/$USER/FINIS/"
+DOSSIER_NZB_FINAL="/home/$USER/autopost/FINIS/"
 
-#CONFIG FOURNISSEUR USENET DE POST
+# cp -rl | cp -rs | ln -s | mv | cp
+MOVE_CMD="cp -rl"
+
+# CONFIG FOURNISSEUR USENET DE POST (requis)
 NG_HOST=""
 NG_PORT=""
 NG_USER=""
 NG_PASS=""
 NG_NBR_CONN=""
 
+# Base de données
 dbtype="sqlite"            # ou "mysql"
+MYSQL_TABLE="release"      # OBLIGATOIRE
+
+# sqlite -> DB_FILE requis, champs MySQL facultatifs
 DB_FILE="/home/$USER/autopost/base_autopost.db"
+
+# mysql -> champs MySQL requis, DB_FILE facultatif
 MYSQL_HOST=""
 MYSQL_PORT=
 MYSQL_USER=""
@@ -85,61 +92,50 @@ MYSQL_PASS=""
 MYSQL_DB=""
 ```
 
-#### Création du fichier de base de données.
+**Rappels :**
-```sh
+- Si `dbtype="sqlite"` → **`DB_FILE` requis** ; `MYSQL_*` facultatifs.  
-postauto createdb
+- Si `dbtype="mysql"` → **`MYSQL_HOST/PORT/USER/PASS/DB` requis** ; `DB_FILE` facultatif.  
-```
+- Les dossiers `DOSSIER_*` doivent **exister**.
 
-#### Commande
+## Configuration (UI web) — `/home/$USER/autopost/config.js`
 
-| commande | README |
+> Champs **obligatoires** + règles **sqlite/mysql** + proxy/HTTPS.
-| ------ | ------ |
-| start | Permet de démarrer le script. |
-| stop | Permet d'arrêter le script. |
-| restart | Permet de redémarrer le script. |
-| show | Permet de rentrer dans la fenêtre d'exécution du script (ctrl a+d pour en sortir). |
-| status | Voir les 500 derniers enregistrements du fichier DB avec leur status (Attente, Echec, Succès) (Attente, Echec, Succès). |
-| add | Ajouté un fichier MKV à traiter dans la base (doit être suivi du chemin complet de votre fichier). |
-| createdb | Permet de créer la DB (si vous souhaitez écraser la DB une confirmation vous sera demandé). |
-| log | Permet de voir le log de ppost d'un fichier précis. |
-| check | Permet de vérifier la présence d'un fichier sur le site. |
-| update | Permet d'updater le script. |
 
-
-#### interface web
-
-Une interface est disponible, il vous faut nginx pour que celle-ci fonctionne
-
-#### Configuration de l'interface web.
-Éditer le fichier /home/$USER/autopost/config.js
 ```js
 const path = require('path');
 
 module.exports = {
-  // Port sur lequel le serveur écoute
+  // Réseau
-  // Attention si vous êtes sur une seedbox de bien choisir un port laisser libre par votre hébergeur
+  port: 3000,                 // ⚠️ Choisissez un port autorisé par votre hébergeur (Ultra.cc: `app-ports free`)
-  // chez ultracc par exemple la commande est app-ports free
+  name: 'NomDuNoeud',         // Nom affiché dans l’UI
-  port: Voir indications ci dessus,
+  background_color: 'slate-900', // Tailwind color: https://tailwindcss.com/docs/colors
 
-  // Chemin vers le fichier de base de données SQLite
+  // Base de données
+  dbtype: 'sqlite',           // 'sqlite' ou 'mysql'
+
+  // sqlite -> dbFile requis
   dbFile: path.join(__dirname, 'base_autopost.db'),
 
-  //MySQL
+  // mysql -> champs requis
   DB_HOST: '',
-  DB_PORT: ,
+  DB_PORT: 3306,
   DB_USER: '',
   DB_PASSWORD: '',
   DB_DATABASE: '',
+  DB_TABLE: 'release',
 
-  // Chemins personnalisables pour les dossiers
+  // Dossiers
   finishdirectory: path.join(__dirname, 'FINIS'),
   logdirectory:    path.join(__dirname, 'logs'),
   infodirectory:   path.join(__dirname, 'mediainfo'),
 
-  // Secret pour la configuration des sessions "curl -L pw.vdx.sh/w/32"
+  // Sessions (générer un secret : `curl -L pw.vdx.sh/w/32`)
-  sessionSecret: 'Voir commande ci dessus',
+  sessionSecret: 'collez-ici-le-secret-généré',
+  trustProxy: 0,              // 0 = pas de proxy, 1 = Nginx, 2 = Cloudflare->Nginx, etc.
+  cookieSecure: false,        // true si HTTPS bout-à-bout (reverse proxy compris)
+  sessionStorePath: './sessions',
 
-  // Informations d'authentification
+  // Auth UI (à changer !)
   auth: {
     username: 'user',
     password: 'pass'
@@ -147,37 +143,133 @@ module.exports = {
 };
 ```
 
-##### Configuration de nginx
+**Rappels :**
+- `dbtype: 'sqlite'` → **`dbFile` requis** ; `DB_*` facultatifs.  
+- `dbtype: 'mysql'` → **`DB_HOST/PORT/USER/PASSWORD/DATABASE` requis** ; `dbFile` facultatif.  
+- Si vous êtes derrière Nginx/Cloudflare, ajustez **`trustProxy`** et **`cookieSecure`**.  
+- Les dossiers `finishdirectory`, `logdirectory`, `infodirectory` doivent **exister**.
 
-Ajouter ce bloc dans la configuration de votre nom de domaine
+## Création de la base
+```bash
+postauto createdb
+```
+
+## Commandes CLI
+
+| Commande  | Description |
+|-----------|-------------|
+| `start`   | Démarre le script principal. |
+| `stop`    | Arrête le script. |
+| `restart` | Redémarre le script. |
+| `show`    | Entre dans la session `screen` (Ctrl+A puis D pour détacher). |
+| `status`  | Affiche les 500 derniers enregistrements avec leur statut (Attente / Échec / Succès). |
+| `add`     | Ajoute un **fichier MKV** à traiter (chemin complet requis). |
+| `createdb`| Crée (ou recrée, avec confirmation) la base de données. |
+| `log`     | Affiche le log de post pour un fichier donné. |
+| `check`   | Vérifie la présence d’un fichier sur le site. |
+| `update`  | Met à jour les scripts. |
+
+> Autocomplétion bash fournie (install/update l’activent automatiquement).
+
+## Interface web
+
+- L’installateur installe **Node v22** (via `nvm`) et tous les modules requis.
+- Lancer l’UI (ex. en arrière-plan) :
+  ```bash
+  postauto restart
+  ```
+  (ou configurez un service systemd / `pm2` selon vos préférences)
+
+### Configuration Nginx
+
+> **Important :** les routes statiques sont servies sous **`/autopost`**.
 
 ```nginx
+# Remplacez 127.0.0.1:3000 par le host:port de votre UI (voir config.js: port)
 location /autopost/ {
-    proxy_pass              http://127.0.0.1:XXXXX;
+    proxy_pass         http://127.0.0.1:3000;
     proxy_http_version 1.1;
-    proxy_set_header        X-Forwarded-Host        $http_host;
+    proxy_set_header   Host               $host;
+    proxy_set_header   X-Forwarded-Host   $host;
+    proxy_set_header   X-Forwarded-Proto  $scheme;
+    proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
+    proxy_set_header   X-Real-IP          $remote_addr;
 }
+
 location /js/ {
-    proxy_pass              http://127.0.0.1:XXXXX;
+    proxy_pass         http://127.0.0.1:3000;
     proxy_http_version 1.1;
-    proxy_set_header        X-Forwarded-Host        $http_host;
+    proxy_set_header   Host               $host;
+    proxy_set_header   X-Forwarded-Host   $host;
+    proxy_set_header   X-Forwarded-Proto  $scheme;
+    proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
+    proxy_set_header   X-Real-IP          $remote_addr;
 }
+
 location /jquery/ {
-    proxy_pass              http://127.0.0.1:XXXXX;
+    proxy_pass         http://127.0.0.1:3000;
     proxy_http_version 1.1;
-    proxy_set_header        X-Forwarded-Host        $http_host;
+    proxy_set_header   Host               $host;
+    proxy_set_header   X-Forwarded-Host   $host;
+    proxy_set_header   X-Forwarded-Proto  $scheme;
+    proxy_set_header   X-Forwarded-For    $proxy_add_x_forwarded_for;
+    proxy_set_header   X-Real-IP          $remote_addr;
 }
 ```
 
-> Pensez à bien remplacer XXXXX par le port que vous avez mis dans votre config.js
+> Réglez **`trustProxy`** (1 pour Nginx, 2 pour Cloudflare→Nginx) et mettez **`cookieSecure: true`** si le site est servi en **HTTPS**.
 
-
+## Mise à jour
-#### Désinstallation.
+### Automatique
-
+```bash
-```sh
+postauto restart
-wget -qO uninstall.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/uninstall.sh && chmod +x uninstall.sh && ./uninstall.sh
+```
+ou
+```bash
+postauto stop
+postauto update
 ```
 
-#### Dévelopement.
+### Manuellement
+```bash
+postauto stop \
+  && wget -qO update.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/update.sh \
+  && chmod +x update.sh \
+  && ./update.sh
+```
 
-Comme toujours vos idées et axes d'amélioration sont les bienvenus.
+### Passage en 7z (12/03/2024)
+```bash
+cd ~/autopost
+wget -qO compress.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/compress.sh \
+  && chmod +x compress.sh \
+  && ./compress.sh
+```
+
+## Désinstallation
+
+```bash
+wget -qO uninstall.sh https://tig.unfr.pw/UNFR/postauto/raw/branch/main/uninstall.sh \
+  && chmod +x uninstall.sh \
+  && ./uninstall.sh
+```
+
+- Propose d’arrêter `postauto`, de supprimer la conf, la base, les NZB, et les fichiers Node.
+- Nettoie l’autocomplétion (`~/.bash_completion.d/postauto`) et l’ancien bloc éventuel dans `~/.bashrc`.
+
+## Limitations
+- Bash → Linux uniquement.
+- Accès SSH requis sur `/home/$USER`.
+- Les seedbox peuvent restreindre les ports et/ou l’exécution de services persistants (voir hébergeur).
+
+## Dépannage
+
+- **Port refusé** : choisissez un port autorisé (Ultra.cc : `app-ports free`).  
+- **Node manquant** : relancez `install.sh` (il installe `nvm` + Node v22).  
+- **MediaInfo/sqlite** : avec sudo, installés via apt ; sans sudo, binaires fournis dans `~/bin`.  
+- **Erreur GLIBC** sur sqlite ou autre binaire : utilisez la version embarquée par l’installateur (dans `~/bin`).  
+- **Sessions** derrière Nginx : mettez `trustProxy` à `1` (ou `2` via Cloudflare→Nginx) et `cookieSecure: true` si HTTPS.  
+- **Dossiers manquants** : créez/ajustez `DOSSIER_*` (bash) et `*directory` (UI).
+
+## Développement
+Vos idées et axes d’amélioration sont les bienvenus — PRs et issues appréciés 🙂

update.sh

@@ -1,5 +1,16 @@
 #!/usr/bin/env bash
+
+# exiger bash, bloquer le "source"
+[ -n "${BASH_VERSION:-}" ] || exec bash "$0" "$@"
+(return 0 2>/dev/null) && { echo "❌ Ne source pas ce script, exécute-le: ./$0"; return 1; }
+
+# chemin canonique du script (robuste: ./script.sh, bash script.sh, via PATH, symlink…)
+SCRIPT_SOURCE="${BASH_SOURCE[0]}"
+SCRIPT_DIR="$(cd -- "$(dirname -- "$SCRIPT_SOURCE")" && pwd -P)"
+SCRIPT_FILE="$SCRIPT_DIR/$(basename -- "$SCRIPT_SOURCE")"
+
 set -Eeuo pipefail
+trap 'echo "❌ ERREUR ligne $LINENO: $BASH_COMMAND" >&2' ERR
 
 # ────────── Helpers & couleurs ──────────
 if [ -t 1 ]; then
@@ -15,6 +26,64 @@ die()  { err "$*"; exit 1; }
 
 install_bin(){ install -m 755 "$1" "$2"; }
 
+# ========= Downloader (curl→wget fallback) =========
+download() {
+  local url="$1" out="$2"
+  [ -z "$url" ] || [ -z "$out" ] && { echo "download: usage: download <url> <outfile>" >&2; return 2; }
+  mkdir -p -- "$(dirname -- "$out")"
+  local tmp="${out}.dl.$$"
+  local curl_opts=(--fail --silent --show-error --location --retry 5 --retry-all-errors --retry-delay 2 --connect-timeout 15)
+  local wget_opts=(--quiet --https-only --tries=5 --waitretry=2 --retry-connrefused)
+
+  if command -v curl >/dev/null 2>&1; then
+    if curl --http1.1 -4 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+    if env -u http_proxy -u https_proxy -u all_proxy \
+         curl --http1.1 -4 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+    if curl --http1.1 "${curl_opts[@]}" -o "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+  fi
+  if command -v wget >/dev/null 2>&1; then
+    if wget --inet4-only "${wget_opts[@]}" -O "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+    if wget "${wget_opts[@]}" -O "$tmp" "$url"; then mv -f -- "$tmp" "$out"; return 0; fi
+  fi
+  rm -f -- "$tmp" 2>/dev/null || true
+  return 1
+}
+
+# --- lire une clé JS (ligne "clé: valeur") sans exécuter ---
+parse_js_raw() {
+  local key="$1"
+  sed -n -E "s/^[[:space:]]*['\"]?${key}['\"]?[[:space:]]*:[[:space:]]*(.*)$/\1/p" "$CFG_JS" \
+    | head -n1 | sed -E "s/[[:space:]]*(,)?[[:space:]]*$//"
+}
+
+# --- normaliser une valeur JS simple ---
+normalize_js_value() {
+  local raw="$1"
+  raw="$(printf '%s' "$raw" | sed -E 's@[[:space:]]//.*$@@')"   # retire commentaire inline
+  raw="$(printf '%s' "$raw" | sed -E 's/,[[:space:]]*$//')"      # retire virgule
+  raw="$(printf '%s' "$raw" | sed -E 's/^[[:space:]]+//; s/[[:space:]]+$//')" # trim
+  if [[ "$raw" =~ ^\"(.*)\"$ ]]; then printf '%s\n' "${BASH_REMATCH[1]}"; return; fi
+  if [[ "$raw" =~ ^\'(.*)\'$ ]]; then printf '%s\n' "${BASH_REMATCH[1]}"; return; fi
+  printf '%s\n' "$raw"
+}
+
+# placeholders à refuser (vides, “Voir…”, “CHANGEME…”, etc.)
+is_placeholder() {
+  local v="$1"
+  [[ -z "$v" ]] && return 0
+  [[ "$v" =~ ^(Voir|voir|Nom|change|CHANGE|changeme|CHANGEME|todo|TODO|example|your|/path/to|A[[:space:]]*NOUS|A[[:space:]]*RETROUVER) ]] && return 0
+  return 1
+}
+
+# entier (>=0)
+is_int() { [[ "$1" =~ ^[0-9]+$ ]]; }
+
+# booléen JS (true/false)
+is_bool_literal() {
+  local v="$(echo "$1" | tr '[:upper:]' '[:lower:]')"
+  [[ "$v" == "true" || "$v" == "false" ]]
+}
+
 # ────────── Paths ──────────
 BIN_DIR="$HOME/bin"
 AUTOPOST_DIR="$HOME/autopost"
@@ -23,7 +92,7 @@ BASH_COMPLETION_DIR="$HOME/.bash_completion.d"
 CONF_SH="$AUTOPOST_DIR/conf.sh"
 CFG_JS="$AUTOPOST_DIR/config.js"
 
-mkdir -p "$BIN_DIR" "$AUTOPOST_DIR" "$BASH_COMPLETION_DIR"
+mkdir -p "$BIN_DIR" "$AUTOPOST_DIR" "$BASH_COMPLETION_DIR" "$AUTOPOST_DIR/views" "$AUTOPOST_DIR/public"
 
 TMP_DIR="$(mktemp -d)"
 cleanup(){ rm -rf "$TMP_DIR"; }
@@ -39,18 +108,21 @@ FILES["$AUTOPOST_DIR/posteur.sh"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/
 FILES["$AUTOPOST_DIR/common.sh"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/common.sh"
 FILES["$BIN_DIR/postauto"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/bin/postauto"
 FILES["$AUTOPOST_DIR/server.js"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/server.js"
+FILES["$AUTOPOST_DIR/public/autopost.js"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/public/autopost.js"
+FILES["$AUTOPOST_DIR/public/checkboxes.css"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/public/checkboxes.css"
+FILES["$AUTOPOST_DIR/views/autopost.html"]="https://tig.unfr.pw/UNFR/postauto/raw/branch/main/autopost/views/autopost.html"
 
 log "Vérification/MAJ des fichiers…"
 for LOCAL in "${!FILES[@]}"; do
   URL="${FILES[$LOCAL]}"
-  TMP="$TMP_DIR/$(basename "$LOCAL").dl"
+  TMPF="$TMP_DIR/$(basename "$LOCAL").dl"
-  curl -fsSL "$URL" -o "$TMP" || die "Téléchargement échoué: $URL"
+  download "$URL" "$TMPF" || die "Téléchargement échoué: $URL"
 
-  if [ ! -f "$LOCAL" ] || ! cmp -s "$LOCAL" "$TMP"; then
+  if [ ! -f "$LOCAL" ] || ! cmp -s "$LOCAL" "$TMPF"; then
     cp -f "$LOCAL" "$LOCAL.bak" 2>/dev/null || true
     case "$LOCAL" in
-	  *postauto|*.sh) install_bin "$TMP" "$LOCAL" ;;
+      *postauto|*.sh) install_bin "$TMPF" "$LOCAL" ;;
-	  *)               install -m 644 "$TMP" "$LOCAL" ;;
+      *)               install -m 644 "$TMPF" "$LOCAL" ;;
     esac
     ok "Mise à jour: $LOCAL"
     updated=1
@@ -70,7 +142,7 @@ if [ -f "$BASHRC_FILE" ] && grep -q "$DEBUT_MARKER" "$BASHRC_FILE"; then
 fi
 
 COMP_FILE="$BASH_COMPLETION_DIR/postauto"
-read -r -d '' COMPLETION_CODE <<'EOF'
+COMPLETION_CODE=$(cat <<'EOF'
 # completion postauto
 _autopost_completion() {
   local cur prev opts
@@ -87,11 +159,11 @@ _autopost_completion() {
 }
 complete -F _autopost_completion postauto
 EOF
+)
 
 if [ ! -s "$COMP_FILE" ] || ! cmp -s <(printf "%s" "$COMPLETION_CODE") "$COMP_FILE"; then
   printf "%s" "$COMPLETION_CODE" > "$COMP_FILE"
   ok "Completion installée: $COMP_FILE"
-  # hook .bashrc si pas déjà présent
   grep -q '\.bash_completion.d/postauto' "$BASHRC_FILE" 2>/dev/null || \
     echo '[ -f "$HOME/.bash_completion.d/postauto" ] && . "$HOME/.bash_completion.d/postauto"' >> "$BASHRC_FILE"
   updated=1
@@ -103,8 +175,8 @@ ensure_cmd(){ command -v "$1" >/dev/null 2>&1; }
 if ! ensure_cmd 7z; then
   log "Installation 7z…"
   pushd "$TMP_DIR" >/dev/null
-  wget -q -o /dev/null -O 7z.tar.xz "https://7-zip.org/a/7z2409-linux-x64.tar.xz"
+  download "https://7-zip.org/a/7z2409-linux-x64.tar.xz" "$TMP_DIR/7z.tar.xz" || die "Téléchargement 7z"
-  tar -xJf 7z.tar.xz
+  tar -xJf "$TMP_DIR/7z.tar.xz"
   ZBIN="$(find . -maxdepth 1 -type f -name '7zz*' -perm -u+x | head -n1)"
   [ -n "$ZBIN" ] || die "Binaire 7z introuvable"
   install_bin "$ZBIN" "$BIN_DIR/7z"
@@ -114,8 +186,9 @@ fi
 if ! ensure_cmd BDInfo; then
   log "Installation BDInfo…"
   pushd "$TMP_DIR" >/dev/null
-  curl -fsSL -o bdinfo.zip "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfo_linux_v2.0.6.zip"
+  download "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfo_linux_v2.0.6.zip" "$TMP_DIR/bdinfo.zip" \
-  unzip -q bdinfo.zip
+    || die "Téléchargement BDInfo"
+  unzip -q "$TMP_DIR/bdinfo.zip"
   BDBIN="$(find . -type f -name BDInfo -perm -u+x | head -n1)"
   [ -n "$BDBIN" ] || die "BDInfo introuvable"
   install_bin "$BDBIN" "$BIN_DIR/BDInfo"
@@ -125,23 +198,39 @@ fi
 if ! ensure_cmd BDInfoDataSubstractor; then
   log "Installation BDInfoDataSubstractor…"
   pushd "$TMP_DIR" >/dev/null
-  curl -fsSL -o substractor.zip "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfodatasubstractor_linux_v2.0.6.zip"
+  download "https://github.com/dotnetcorecorner/BDInfo/releases/download/linux-2.0.6/bdinfodatasubstractor_linux_v2.0.6.zip" "$TMP_DIR/substractor.zip" \
-  unzip -q substractor.zip
+    || die "Téléchargement BDInfoDataSubstractor"
+  unzip -q "$TMP_DIR/substractor.zip"
   SBBIN="$(find . -type f -name BDInfoDataSubstractor -perm -u+x | head -n1)"
   [ -n "$SBBIN" ] || die "BDInfoDataSubstractor introuvable"
   install_bin "$SBBIN" "$BIN_DIR/BDInfoDataSubstractor"
   popd >/dev/null
 fi
 
-# ────────── VALIDATION conf.sh (sans exécuter) ──────────
+# Modules npm locaux dans $AUTOPOST_DIR
-placeholder_re='^(|A[[:space:]]*NOUS|A[[:space:]]*RETROUVER|CHANGE|CHANGEME|TODO|example|your|/path/to|Nom)$'
+log "Vérification modules npm"
+pushd "$AUTOPOST_DIR" >/dev/null
+[ -f package.json ] || npm init -y >/dev/null 2>&1 || true
+modules=(express express-session sqlite3 ansi-to-html @tailwindcss/browser autoprefixer jquery mysql2 session-file-store chokidar)
+missing=()
+for m in "${modules[@]}"; do
+  npm list "$m" --depth=0 >/dev/null 2>&1 || missing+=("$m")
+done
+if [ "${#missing[@]}" -gt 0 ]; then
+  log "Installation modules: ${missing[*]}"
+  npm install "${missing[@]}"
+else
+  ok "Tous les modules npm sont présents"
+fi
+popd >/dev/null
 
+# ────────── VALIDATION conf.sh (sans exécuter) ──────────
 check_conf() {
-  local file="$1"
+  local file="$CONF_SH"
   [[ -f "$file" ]] || { err "Manquant: $file"; errors=$((errors+1)); return; }
 
-  log "Validation de $file…"
+  log "Validation déclarative de $file…"
-  # parse simple: NAME=VALUE (ignore commentaires)
+
   declare -A V=()
   while IFS= read -r line; do
     [[ "$line" =~ ^[[:space:]]*# ]] && continue
@@ -151,149 +240,138 @@ check_conf() {
       name="${BASH_REMATCH[1]}"
       val="${BASH_REMATCH[2]}"
       val="${val%%#*}"; val="${val%%;*}"
-	  val="$(echo -n "$val" | sed -E "s/^[[:space:]]*//; s/[[:space:]]*$//")"
+      val="$(echo -n "$val" | sed -E "s/^[[:space:]]*['\"]?//; s/['\"]?[[:space:]]*$//")"
-	  val="$(echo -n "$val" | sed -E "s/^['\"]//; s/['\"]$//")"
       V["$name"]="$val"
     fi
   done < "$file"
 
-  # requis absolus
+  for k in URL_API APIKEY DOSSIER_GLOBAL DOSSIER_NFO DOSSIER_LOGS DOSSIER_NZB_ATTENTE DOSSIER_NZB_FINAL MOVE_CMD MYSQL_TABLE dbtype; do
-  req=(URL_API APIKEY DOSSIER_GLOBAL DOSSIER_NFO DOSSIER_LOGS DOSSIER_NZB_ATTENTE DOSSIER_NZB_FINAL MOVE_CMD MYSQL_TABLE dbtype)
-  for k in "${req[@]}"; do
     v="${V[$k]:-}"
-	if [[ "$v" =~ $placeholder_re ]]; then
+    if is_placeholder "$v"; then
-	  err "conf.sh: '$k' non renseigné (valeur='$v')"; errors=$((errors+1))
-	fi
-  done
-
-  # MOVE_CMD autorisé
-  case "${V[MOVE_CMD]:-}" in
-	"cp -rl"|"cp -rs"|"ln -s"|"mv"|"cp") : ;;
-	*) err "conf.sh: MOVE_CMD invalide ('${V[MOVE_CMD]:-}'). Choix: cp -rl | cp -rs | ln -s | mv | cp"; errors=$((errors+1));;
-  esac
-
-  # répertoires existants (on ne les crée pas ici, on alerte)
-  dirs=(DOSSIER_GLOBAL DOSSIER_NFO DOSSIER_LOGS DOSSIER_NZB_ATTENTE DOSSIER_NZB_FINAL)
-  for k in "${dirs[@]}"; do
-	p="${V[$k]:-}"
-	if [[ -z "$p" || ! -d "$p" ]]; then
-	  err "conf.sh: dossier '$k' introuvable: $p"; errors=$((errors+1))
-	fi
-  done
-
-  # bloc provider Usenet requis
-  for k in NG_HOST NG_PORT NG_USER NG_PASS NG_NBR_CONN; do
-	v="${V[$k]:-}"
-	if [[ "$v" =~ $placeholder_re ]]; then
       err "conf.sh: '$k' non renseigné"; errors=$((errors+1))
     fi
   done
-  # types numériques
-  [[ "${V[NG_PORT]:-}" =~ ^[0-9]+$ ]]     || { err "conf.sh: NG_PORT doit être numérique"; errors=$((errors+1)); }
-  [[ "${V[NG_NBR_CONN]:-}" =~ ^[0-9]+$ ]] || { err "conf.sh: NG_NBR_CONN doit être numérique"; errors=$((errors+1)); }
 
-  # DB: règles conditionnelles
+  case "${V[MOVE_CMD]:-}" in
+    "cp -rl"|"cp -rs"|"ln -s"|"mv"|"cp") : ;;
+    *)
+      err "conf.sh: MOVE_CMD invalide ('${V[MOVE_CMD]:-}'), attendus: cp -rl|cp -rs|ln -s|mv|cp"
+      errors=$((errors+1))
+      ;;
+  esac
+
+  for k in NG_HOST NG_USER NG_PASS; do
+    if is_placeholder "${V[$k]:-}"; then
+      err "conf.sh: '$k' non renseigné"; errors=$((errors+1))
+    fi
+  done
+  if ! [[ "${V[NG_PORT]:-}" =~ ^[0-9]+$ ]]; then
+    err "conf.sh: NG_PORT doit être numérique"; errors=$((errors+1))
+  fi
+  if ! [[ "${V[NG_NBR_CONN]:-}" =~ ^[0-9]+$ ]]; then
+    err "conf.sh: NG_NBR_CONN doit être numérique"; errors=$((errors+1))
+  fi
+
   case "${V[dbtype]:-}" in
     sqlite)
-	  # DB_FILE requis, MySQL* facultatifs
+      if is_placeholder "${V[DB_FILE]:-}"; then
-	  if [[ -z "${V[DB_FILE]:-}" || "${V[DB_FILE]}" =~ $placeholder_re ]]; then
         err "conf.sh: DB_FILE requis en mode sqlite"; errors=$((errors+1))
-	  else
-		dbdir="$(dirname -- "${V[DB_FILE]}")"
-		[[ -d "$dbdir" ]] || { err "conf.sh: dossier DB_FILE inexistant: $dbdir"; errors=$((errors+1)); }
       fi
       ;;
     mysql)
-	  # champs MySQL requis, DB_FILE facultatif
+      for k in MYSQL_HOST MYSQL_USER MYSQL_PASS MYSQL_DB; do
-	  for k in MYSQL_HOST MYSQL_PORT MYSQL_USER MYSQL_PASS MYSQL_DB; do
+        if is_placeholder "${V[$k]:-}"; then
-		v="${V[$k]:-}"
-		if [[ "$v" =~ $placeholder_re ]]; then
           err "conf.sh: '$k' requis en mode mysql"; errors=$((errors+1))
         fi
       done
-	  [[ "${V[MYSQL_PORT]:-}" =~ ^[0-9]+$ ]] || { err "conf.sh: MYSQL_PORT doit être numérique"; errors=$((errors+1)); }
+      if ! [[ "${V[MYSQL_PORT]:-}" =~ ^[0-9]+$ ]]; then
+        err "conf.sh: MYSQL_PORT doit être numérique"; errors=$((errors+1))
+      fi
       ;;
     *)
-	  err "conf.sh: dbtype doit être 'sqlite' ou 'mysql' (actuel='${V[dbtype]:-}')"; errors=$((errors+1))
+      err "conf.sh: dbtype doit être 'sqlite' ou 'mysql' (actuel='${V[dbtype]:-}')"
+      errors=$((errors+1))
+      ;;
+  esac
+}
+
+# ────────── VALIDATION config.js (avec Node) ──────────
+validate_config_js() {
+  [[ -f "$CFG_JS" ]] || { err "Manquant: $CFG_JS"; errors=$((errors+1)); return; }
+  log "Validation déclarative de $CFG_JS…"
+
+  local dbtype port name secret table
+  dbtype="$(normalize_js_value "$(parse_js_raw dbtype)")"
+  port="$(normalize_js_value "$(parse_js_raw port)")"
+  name="$(normalize_js_value "$(parse_js_raw name)")"
+  secret="$(normalize_js_value "$(parse_js_raw sessionSecret)")"
+  table="$(normalize_js_value "$(parse_js_raw DB_TABLE)")"
+
+  if ! is_int "$port" || (( port < 1 || port > 65535 )); then
+    err "config.js: 'port' invalide ($port)"; errors=$((errors+1))
+  fi
+  if is_placeholder "$name";   then err "config.js: 'name' non renseigné"; errors=$((errors+1)); fi
+  if is_placeholder "$secret"; then err "config.js: 'sessionSecret' non renseigné"; errors=$((errors+1)); fi
+  if is_placeholder "$table";  then err "config.js: 'DB_TABLE' non renseigné"; errors=$((errors+1)); fi
+
+  for key in finishdirectory logdirectory infodirectory; do
+    val="$(normalize_js_value "$(parse_js_raw "$key")")"
+    if is_placeholder "$val"; then
+      err "config.js: '$key' non renseigné"; errors=$((errors+1))
+    fi
+  done
+
+  local tp cs ssp
+  tp="$(normalize_js_value "$(parse_js_raw trustProxy)")"
+  cs="$(normalize_js_value "$(parse_js_raw cookieSecure)")"
+  ssp="$(normalize_js_value "$(parse_js_raw sessionStorePath)")"
+
+  if is_placeholder "$tp"; then
+    err "config.js: 'trustProxy' non renseigné"; errors=$((errors+1))
+  else
+    if is_int "$tp"; then
+      if (( tp < 0 )); then
+        err "config.js: 'trustProxy' doit être >= 0 (valeur=$tp)"; errors=$((errors+1))
+      fi
+    fi
+  fi
+
+  if ! is_bool_literal "$cs"; then
+    err "config.js: 'cookieSecure' doit être true ou false (valeur='$cs')"; errors=$((errors+1))
+  fi
+
+  if is_placeholder "$ssp"; then
+    err "config.js: 'sessionStorePath' non renseigné"; errors=$((errors+1))
+  fi
+
+  case "$dbtype" in
+    sqlite)
+      val="$(normalize_js_value "$(parse_js_raw dbFile)")"
+      if is_placeholder "$val"; then
+        err "config.js: 'dbFile' requis (sqlite)"; errors=$((errors+1))
+      fi
+      ;;
+    mysql)
+      local H P U PW DB
+      H="$(normalize_js_value "$(parse_js_raw DB_HOST)")"
+      P="$(normalize_js_value "$(parse_js_raw DB_PORT)")"
+      U="$(normalize_js_value "$(parse_js_raw DB_USER)")"
+      PW="$(normalize_js_value "$(parse_js_raw DB_PASSWORD)")"
+      DB="$(normalize_js_value "$(parse_js_raw DB_DATABASE)")"
+      if is_placeholder "$H";  then err "config.js: 'DB_HOST' requis (mysql)"; errors=$((errors+1)); fi
+      if ! is_int "$P";        then err "config.js: 'DB_PORT' entier requis (mysql)"; errors=$((errors+1)); fi
+      if is_placeholder "$U";  then err "config.js: 'DB_USER' requis (mysql)"; errors=$((errors+1)); fi
+      if is_placeholder "$PW"; then err "config.js: 'DB_PASSWORD' requis (mysql)"; errors=$((errors+1)); fi
+      if is_placeholder "$DB"; then err "config.js: 'DB_DATABASE' requis (mysql)"; errors=$((errors+1)); fi
+      ;;
+    *)
+      err "config.js: 'dbtype' doit être 'sqlite' ou 'mysql' (actuel='$dbtype')"
+      errors=$((errors+1))
       ;;
   esac
 }
 
 check_conf "$CONF_SH"
-
-# ────────── VALIDATION config.js (avec Node) ──────────
-validate_config_js() {
-  [[ -f "$CFG_JS" ]] || { err "Manquant: $CFG_JS"; errors=$((errors+1)); return; }
-
-  log "Validation de $CFG_JS…"
-  local CHECK="$TMP_DIR/check_config.js"
-  cat > "$CHECK" <<'JS'
-const fs = require('fs');
-const path = process.argv[2];
-function isEmptyOrPlaceholder(v){
-  if (v == null) return true;
-  if (typeof v === 'string') {
-	const s = v.trim();
-	if (!s) return true;
-	const P = [/^voir/i, /^change/i, /^changeme/i, /^todo/i, /^example/i, /^your/i, /^\/path\/to/i];
-	if (P.some(rx => rx.test(s))) return true;
-  }
-  return false;
-}
-try {
-  const cfg = require(path);
-  let errs = [];
-
-  // requis généraux
-  if (!Number.isInteger(cfg.port) || cfg.port < 1 || cfg.port > 65535)
-	errs.push("config.js: 'port' doit être un entier 1-65535");
-  if (isEmptyOrPlaceholder(cfg.name)) errs.push("config.js: 'name' non renseigné");
-  if (isEmptyOrPlaceholder(cfg.sessionSecret)) errs.push("config.js: 'sessionSecret' non renseigné");
-  if (typeof cfg.trustProxy === 'undefined') errs.push("config.js: 'trustProxy' manquant");
-  if (typeof cfg.cookieSecure === 'undefined') errs.push("config.js: 'cookieSecure' manquant");
-  if (isEmptyOrPlaceholder(cfg.DB_TABLE)) errs.push("config.js: 'DB_TABLE' non renseigné");
-
-  // chemins
-  const pathKeys = ['finishdirectory', 'logdirectory', 'infodirectory', 'sessionStorePath'];
-  for (const k of pathKeys) {
-	if (typeof cfg[k] === 'string' && cfg[k].trim()) {
-	  try { if (!fs.existsSync(cfg[k])) errs.push(`config.js: chemin inexistant pour '${k}': ${cfg[k]}`); }
-	  catch {}
-	} else if (k !== 'sessionStorePath') {
-	  errs.push(`config.js: '${k}' non renseigné`);
-	}
-  }
-
-  // règles conditionnelles dbtype
-  if (!cfg.dbtype || !['sqlite','mysql'].includes(cfg.dbtype)) {
-	errs.push("config.js: 'dbtype' doit être 'sqlite' ou 'mysql'");
-  } else if (cfg.dbtype === 'sqlite') {
-	if (isEmptyOrPlaceholder(cfg.dbFile)) {
-	  errs.push("config.js: 'dbFile' requis en mode sqlite");
-	} else {
-	  const dir = require('path').dirname(cfg.dbFile);
-	  if (!fs.existsSync(dir)) errs.push(`config.js: dossier de 'dbFile' inexistant: ${dir}`);
-	}
-	// champs MySQL facultatifs → ne rien exiger
-  } else if (cfg.dbtype === 'mysql') {
-	// dbFile facultatif → ne rien exiger
-	if (isEmptyOrPlaceholder(cfg.DB_HOST)) errs.push("config.js: 'DB_HOST' requis en mode mysql");
-	if (!Number.isInteger(cfg.DB_PORT)) errs.push("config.js: 'DB_PORT' entier requis en mode mysql");
-	if (isEmptyOrPlaceholder(cfg.DB_USER)) errs.push("config.js: 'DB_USER' requis en mode mysql");
-	if (isEmptyOrPlaceholder(cfg.DB_PASSWORD)) errs.push("config.js: 'DB_PASSWORD' requis en mode mysql");
-	if (isEmptyOrPlaceholder(cfg.DB_DATABASE)) errs.push("config.js: 'DB_DATABASE' requis en mode mysql");
-  }
-
-  if (errs.length) { console.error(errs.join('\n')); process.exit(2); }
-} catch (e) {
-  console.error(`Impossible de charger ${path}: ${e.message}`);
-  process.exit(2);
-}
-JS
-  if ! node "$CHECK" "$CFG_JS"; then
-	errors=$((errors+1))
-  fi
-}
 validate_config_js
 
 # ────────── Résumé & exit codes ──────────
@@ -308,5 +386,11 @@ else
   ok "Configuration OK."
 fi
 
-# (optionnel) auto-suppression
+# auto-suppression (désactivable via SKIP_SELF_DELETE=1)
-rm -- "$0" 2>/dev/null || true
+if [ -z "${SKIP_SELF_DELETE:-}" ] && [ -f "$SCRIPT_FILE" ]; then
+  if rm -f -- "$SCRIPT_FILE"; then
+    ok "Script supprimé: $SCRIPT_FILE"
+  else
+    warn "Impossible de supprimer $SCRIPT_FILE (droits sur le dossier ?)"
+  fi
+fi