feat(api,web): Vinted wardrobe sync, import prefill, and API service renames

Made-with: Cursor

Author: Leoglme

api/.env.example

@@ -20,4 +20,8 @@ VINTED_BROWSER_DISCREET_X=-2400
 VINTED_BROWSER_DISCREET_Y=0
 VINTED_BROWSER_DISCREET_MINIMIZE=true
 VINTED_CHROME_EXECUTABLE=
+# Profil Chromium persistant (session Vinted). Vide = %LOCALAPPDATA%\GoupixDex\vinted-nodriver-profile (Windows).
+# VINTED_USER_DATA_DIR=
+# true = profil jetable à chaque lancement (comportement ancien).
+# VINTED_BROWSER_EPHEMERAL=false
 CORS_ORIGINS=*

api/.gitignore

@@ -6,3 +6,5 @@ ebayBuilder.ts
 __pycache__/
 *.pyc
 uploads/
+# Fichiers générés pour les annonces Vinted (listing_<id>_<hash>.<ext>)
+images/listing_*

api/config.py

@@ -44,25 +44,29 @@ class AppSettings(BaseSettings):
     supabase_storage_bucket: str | None = None
     usd_to_eur: float = 0.92
     cors_origins: str = "*"
-    #: Marge initiale (table ``settings``) à la création d'un compte et pour le margin_seeder.
+    #: Initial margin (``settings`` table) when creating an account and for ``margin_seeder``.
     seed_margin_percent: int = Field(default=60, ge=0, le=500)
-    #: Base PokéWallet ou URL du proxy (ex. https://goupixdex-proxy.dibodev.fr).
+    #: PokéWallet base URL or proxy URL (e.g. https://goupixdex-proxy.dibodev.fr).
     poke_wallet_base_url: str = "https://api.pokewallet.io"
-    #: Si défini, envoi de ``X-Proxy-Secret`` ; la clé API peut rester uniquement sur le proxy.
+    #: When set, sends ``X-Proxy-Secret``; the API key can stay only on the proxy.
     poke_wallet_proxy_secret: str | None = None
     poke_wallet_user_agent: str = "GoupixDex/1.0 (+https://goupixdex.dibodev.fr)"
-    #: Sur le VPS : ``true`` (navigateur sans fenêtre). En local : laisser ``false`` ou absent.
+    #: On the VPS: ``true`` (headless browser). Locally: leave ``false`` or unset.
     vinted_browser_headless: bool = False
-    #: Si ``headless`` est ``false`` : fenêtre hors écran (Chrome réel, moins bloqué par Vinted que le vrai headless).
-    #: Mettre ``false`` pour retrouver ``--start-maximized`` (ex. Xvfb plein écran).
+    #: When ``headless`` is ``false``: off-screen window (real Chrome; often less blocked by Vinted than true headless).
+    #: Set ``false`` to use ``--start-maximized`` (e.g. full-screen Xvfb).
     vinted_browser_discreet: bool = True
-    #: Position initiale (coords écran). Valeurs négatives : souvent hors du moniteur principal (Windows / macOS).
+    #: Initial window position (screen coords). Negative values: often off the primary monitor (Windows / macOS).
     vinted_browser_discreet_x: int = -2400
     vinted_browser_discreet_y: int = 0
-    #: En mode discret, minimise la fenêtre juste après ouverture (peut être désactivé en cas de souci UI).
+    #: In discreet mode, minimize the window right after open (can be disabled if UI glitches).
     vinted_browser_discreet_minimize: bool = True
-    #: Chemin explicite vers Chromium/Chrome (ex. ``/usr/bin/chromium`` sur Debian après ``apt install chromium``).
+    #: Explicit path to Chromium/Chrome (e.g. ``/usr/bin/chromium`` on Debian after ``apt install chromium``).
     vinted_chrome_executable: str | None = None
+    #: Persistent nodriver Chrome profile (Vinted session). Empty = default folder under user local data.
+    vinted_user_data_dir: str | None = None
+    #: When ``true``: no ``user_data_dir`` (throwaway profile each launch, as before).
+    vinted_browser_ephemeral: bool = False
 
 
 @lru_cache

api/core/deps.py

@@ -18,9 +18,9 @@
 
 def get_bearer_or_query_token(
     credentials: Annotated[HTTPAuthorizationCredentials | None, Depends(security)],
-    token: Annotated[str | None, Query(description="JWT pour EventSource (sans header Authorization)")] = None,
+    token: Annotated[str | None, Query(description="JWT for EventSource (when Authorization header is unavailable)")] = None,
 ) -> str:
-    """JWT depuis ``Authorization: Bearer`` ou ``?token=`` (SSE / EventSource)."""
+    """JWT from ``Authorization: Bearer`` or ``?token=`` (SSE / EventSource)."""
     if credentials is not None:
         return credentials.credentials
     if token and token.strip():
@@ -32,7 +32,7 @@ def get_current_user_from_token_str(
     raw_token: Annotated[str, Depends(get_bearer_or_query_token)],
     db: Annotated[Session, Depends(get_db)],
 ) -> User:
-    """Utilisateur courant à partir du jeton Bearer ou query."""
+    """Current user resolved from Bearer token or query string."""
     try:
         sub = get_sub_from_token(raw_token)
         user_id = int(sub)

api/core/nodriver_uvicorn_loop.py

@@ -1,17 +1,17 @@
-"""Boucle asyncio pour uvicorn + nodriver sous Windows.
+"""Asyncio event loop for uvicorn + nodriver on Windows.
 
-Avec ``--reload``, uvicorn peut sélectionner ``SelectorEventLoop``, incompatible avec
+With ``--reload``, uvicorn may pick ``SelectorEventLoop``, which is incompatible with
 ``create_subprocess_exec`` (Chrome / nodriver).
 
-Pour un ``--loop`` **personnalisé**, uvicorn importe **un seul** objet et le passe à
-``asyncio.Runner`` : ce doit être la **classe** de boucle (ex. ``ProactorEventLoop``),
-appelée sans argument pour créer l'instance — **pas** une fonction du type
-``lambda use_subprocess: ProactorEventLoop`` (voir ``uvicorn.config.Config.get_loop_factory``).
+For a **custom** ``--loop``, uvicorn imports **one** object and passes it to
+``asyncio.Runner``: it must be the **loop class** (e.g. ``ProactorEventLoop``),
+instantiated with no arguments — **not** a factory like
+``lambda: ProactorEventLoop()`` (see ``uvicorn.config.Config.get_loop_factory``).
 
-Référence à passer à ``uvicorn --loop`` sur Windows :
+Value to pass to ``uvicorn --loop`` on Windows:
 """
 
 from __future__ import annotations
 
-# Classe d'event loop du stdlib (importable uniquement sous Windows).
+# Stdlib event-loop class (importable only on Windows).
 UVICORN_WINDOWS_NODRIVER_LOOP = "asyncio.windows_events:ProactorEventLoop"

api/core/win32_asyncio.py

@@ -1,5 +1,5 @@
-"""Windows: politique Proactor (utile hors uvicorn). Avec ``uvicorn --reload``, préférer
-``python run_dev.py`` ou ``--loop core.nodriver_uvicorn_loop:loop_factory`` (voir README).
+"""Windows: Proactor event-loop policy (useful outside uvicorn). With ``uvicorn --reload``, prefer
+``python run_dev.py`` or ``--loop core.nodriver_uvicorn_loop:...`` (see README).
 """
 
 from __future__ import annotations