fix: side peek des bases repasse en vanilla JS + largeur 1100px standard (v7.49.0)

- Panneau peek: les bindings Alpine (x-data absent du conteneur) rendaient
  loovverture et le redimensionnement inoperants -> cblage direct sur le document.
- Helper unique window.fdWirePeekResize (app.js): pointer capture, 300px-90vw,
  clic=fermer, largeur persiste fd_peek_width partagee entre les 4 peeks.
- database-table-container margin:0 (tableau colle a gauche, marge Library).
- .lib-container remonte dans app.css (trash etait pleine largeur), .db-index 1100px.
- ObsiGate verifie sans code: creation .xlsx OK (openpyxl, #186).

app/routers/collections/crud.py

@@ -8,10 +8,11 @@ import json
 import logging
 
 from fastapi import APIRouter, Body, HTTPException, Request
-from fastapi.responses import HTMLResponse
 
 from app.db import get_conn
+from app.routers.dashboard._common import _get_active_workspace
 from app.services.automations import fire_event, run_event_sync
+from app.services.collection_lifecycle import delete_collections
 from app.services.db_templates import materialize_properties
 from app.services.permission_manager import PermissionManager
 
@@ -24,22 +25,10 @@ router = APIRouter(tags=["collections"], prefix="/db")
 
 
 # ── API: List & Create (no path params) ──
-
-
-@router.get("", response_class=HTMLResponse)
-def list_collections(request: Request):
-    """Page listing all collections in the workspace."""
-    with get_conn() as conn:
-        rows = conn.execute(
-            "SELECT * FROM collections ORDER BY name"
-        ).fetchall()
-        collections = [dict(r) for r in rows]
-    return HTMLResponse(
-        f"<div class='collections-list'>"
-        f"<h2>Collections ({len(collections)})</h2>"
-        f"<pre>{json.dumps(collections, indent=2, default=str)}</pre>"
-        f"</div>"
-    )
+#
+# `GET /db` (la page HTML) vit dans `index_page.py` : elle était auparavant
+# un dump JSON de debug, sans layout — alors qu'elle sert de destination au
+# bouton « Ouvrir mes bases » de My Tasks.
 
 
 
@@ -71,6 +60,24 @@ def create_collection_api(request: Request, body: dict = Body(default={})):
     schema = body.get("schema", [])
     is_locked = body.get("is_locked", False)
 
+    # Workspace d'appartenance : celui du body si fourni et autorisé, sinon le
+    # workspace actif de l'utilisateur. Sans cela la collection reste orpheline
+    # et n'apparaît dans aucune vue scopée (ex. /my-tasks).
+    user = _session_user(request)
+    workspace_id = body.get("workspace_id")
+    if workspace_id is not None:
+        try:
+            workspace_id = int(workspace_id)
+        except (TypeError, ValueError):
+            raise HTTPException(status_code=400, detail="workspace_id must be an integer") from None
+        with get_conn() as conn:
+            exists = conn.execute("SELECT 1 FROM workspaces WHERE id=?", (workspace_id,)).fetchone()
+        if not exists:
+            raise HTTPException(status_code=400, detail="workspace_id does not exist")
+    else:
+        active = _get_active_workspace(request, (user or {}).get("id"))
+        workspace_id = active["id"] if active else None
+
     with get_conn() as conn:
         # Apply a template if requested (provides schema + icon).
         tpl = _apply_template(conn, body.get("template"))
@@ -88,9 +95,11 @@ def create_collection_api(request: Request, body: dict = Body(default={})):
 
         cur = conn.execute(
             """INSERT INTO collections
-               (name, description, icon, schema_json, gitea_owner, gitea_repo, is_locked)
-               VALUES (?, ?, ?, ?, ?, ?, ?)""",
-            (name, description, icon, schema_json, gitea_owner, gitea_repo, int(is_locked)),
+               (name, description, icon, schema_json, gitea_owner, gitea_repo, is_locked,
+                workspace_id)
+               VALUES (?, ?, ?, ?, ?, ?, ?, ?)""",
+            (name, description, icon, schema_json, gitea_owner, gitea_repo, int(is_locked),
+             workspace_id),
         )
         collection_id = cur.lastrowid
 
@@ -171,7 +180,11 @@ def delete_collection_api(request: Request, collection_id: int):
         if not existing:
             raise HTTPException(status_code=404, detail="Collection not found")
 
-        conn.execute("DELETE FROM collections WHERE id=?", (collection_id,))
+        # `delete_collections` détache la page hôte et les vues liées avant la
+        # suppression : `pages.collection_id` et
+        # `collection_data_sources.source_collection_id` sont en NO ACTION, la
+        # suppression brute levait un IntegrityError.
+        delete_collections(conn, [collection_id])
         conn.commit()
 
     run_event_sync(fire_event("collection.deleted", {"collection_id": collection_id,