feat: finalisation éditeur Forge + mode hors-ligne PWA + consolidation roadmap

- Forge: Tab indent, Ctrl+K, auto-focus, AI status, messages erreur FR
- Forge: slash commands clean, cache-bust iframe, preview serveur
- Forge: iframe 82vh, hauteur auto, table inline, sélecteur langage
- PWA hors-ligne: IndexedDB (offline-db.js + offline.js)
- Mermaid: thème dark complet, highlight.js preview
- Backend: màj CSP, rename chain, bookmarks/history/shares
- Roadmap: consolidation dans docs/ROADMAP.md (75 items)
- Infra: docker-compose.podman.yml, suppression test-vault
- .gitignore: exclusion odysseus/

backend/ai.py

@@ -5,7 +5,9 @@ Configured via environment variables.
 """
 
 import os
+import json
 import logging
+from pathlib import Path
 import httpx
 from typing import Optional, Literal
 
@@ -13,27 +15,48 @@ logger = logging.getLogger("obsigate.ai")
 
 ProviderName = Literal["deepseek", "openrouter", "gemini"]
 
-# Provider configurations
-PROVIDERS = {
-    "deepseek": {
-        "api_key": os.getenv("DEEPSEEK_API_KEY", "").strip(),
-        "base_url": "https://api.deepseek.com/v1",
-        "model": os.getenv("DEEPSEEK_MODEL", "deepseek-chat"),
-        "auth_header": "Bearer {api_key}",
-    },
-    "openrouter": {
-        "api_key": os.getenv("OPENROUTER_API_KEY", "").strip(),
-        "base_url": "https://openrouter.ai/api/v1",
-        "model": os.getenv("OPENROUTER_MODEL", "openai/gpt-4o-mini"),
-        "auth_header": "Bearer {api_key}",
-    },
-    "gemini": {
-        "api_key": os.getenv("GEMINI_API_KEY", "").strip(),
-        "base_url": "https://generativelanguage.googleapis.com/v1beta",
-        "model": os.getenv("GEMINI_MODEL", "gemini-2.0-flash"),
-        "auth_header": None,  # Uses query param ?key=
-    },
-}
+# Provider configurations — keys loaded from file or .env
+AI_KEYS_FILE = Path("data/api_keys.json")
+
+def _read_ai_keys() -> dict:
+    if not AI_KEYS_FILE.exists():
+        return {}
+    try:
+        return json.loads(AI_KEYS_FILE.read_text(encoding="utf-8"))
+    except Exception:
+        return {}
+
+def get_ai_key(env_name: str) -> str:
+    """Get AI key: stored file first, then .env fallback."""
+    keys = _read_ai_keys()
+    if env_name in keys and keys[env_name]:
+        return keys[env_name]
+    return os.getenv(env_name, "").strip()
+
+def _load_provider_keys():
+    """Load AI keys from stored file, falling back to .env."""
+    return {
+        "deepseek": {
+            "api_key": get_ai_key("DEEPSEEK_API_KEY"),
+            "base_url": "https://api.deepseek.com/v1",
+            "model": os.getenv("DEEPSEEK_MODEL", "deepseek-chat"),
+            "auth_header": "Bearer {api_key}",
+        },
+        "openrouter": {
+            "api_key": get_ai_key("OPENROUTER_API_KEY"),
+            "base_url": "https://openrouter.ai/api/v1",
+            "model": os.getenv("OPENROUTER_MODEL", "openai/gpt-4o-mini"),
+            "auth_header": "Bearer {api_key}",
+        },
+        "gemini": {
+            "api_key": get_ai_key("GEMINI_API_KEY"),
+            "base_url": "https://generativelanguage.googleapis.com/v1beta",
+            "model": os.getenv("GEMINI_MODEL", "gemini-2.0-flash"),
+            "auth_header": None,
+        },
+    }
+
+PROVIDERS = _load_provider_keys()
 
 DEFAULT_PROVIDER: ProviderName = os.getenv("AI_DEFAULT_PROVIDER", "deepseek")  # type: ignore