diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 44781ffb..4af6d5f3 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -233,6 +233,7 @@ jobs:
         DATABASE_URL: postgres://test:testpassword@localhost:5432/kagibi_test
         REDIS_URL: redis://localhost:6379
         JWT_SECRET: test-secret-key-for-ci
+        EMAIL_ENCRYPTION_KEY: "0000000000000000000000000000000000000000000000000000000000000000"
         PORT: 8080
       run: |
         go build -o server .
diff --git a/.gitignore b/.gitignore
index 5afad250..78ca2492 100644
--- a/.gitignore
+++ b/.gitignore
@@ -29,6 +29,8 @@ docker/.ovhkeys
 docker/dump_inserts.sql
 frontend/.env
 
+scripts/k8s-rclone-cronjob.yaml
+
 # Dependencies
 node_modules/*
 frontend/node_modules/
diff --git a/README.md b/README.md
index dd59e091..d5d4f894 100644
--- a/README.md
+++ b/README.md
@@ -1,290 +1,81 @@
 # Kagibi
 
+**End-to-end encrypted cloud storage, without compromise.**  
 **Stockage cloud chiffré de bout en bout, sans compromis.**
 
-Kagibi est une plateforme de stockage cloud conçue autour d'un principe simple : **ce que vous stockez ne regarde que vous**. Le serveur ne peut pas lire vos fichiers. Pas parce que nous promettons de ne pas le faire — mais parce que nous n'en avons pas la capacité technique.
-Ce projet a été développé par [Buuuntyyy] avec l'aide d'intelligence artificielle pour certaines tâches de développement et de documentation. L'objectif est de fournir une solution de stockage sécurisée, respectueuse de la vie privée, et facile à utiliser, tout en étant transparente sur son fonctionnement interne.
-
----
-
-## Philosophie
-
-La plupart des solutions cloud chiffrent vos données *sur le serveur*, avec des clés que le fournisseur contrôle. En cas de faille, de réquisition judiciaire, ou d'abus interne, vos données sont exposées.
-
-Kagibi fonctionne différemment. Vos fichiers sont chiffrés **sur votre appareil**, avant d'être envoyés. Le serveur ne reçoit que des blocs opaques. Votre clé de déchiffrement ne quitte jamais votre machine.
-
-Ce modèle dit *zero-knowledge* a un coût : il n'est pas possible de récupérer vos fichiers si vous perdez votre mot de passe sans code de récupération. C'est un compromis assumé, pas un bug.
-
-Kagibi est publié sous licence **AGPLv3** : le code est auditable, le déploiement est autonome si vous le souhaitez.
-
----
-
-## Comment fonctionne le chiffrement
-
-### Dérivation des clés
-
-Quand vous créez un compte ou vous connectez, Kagibi dérive une **clé maître** (MasterKey) à partir de votre mot de passe :
-
-```
-Mot de passe + sel aléatoire (16 octets)
-        │
-        ▼
-   Argon2id (64 Mo mémoire, 4 passages)
-        │
-        ▼
-   KEK (Key Encryption Key) — reste en RAM, ne quitte jamais le navigateur
-        │
-        ▼
-   MasterKey — dérivée, stockée uniquement en RAM
-```
-
-La **MasterKey** chiffre ensuite tous vos fichiers et métadonnées. La **KEK** enveloppe la MasterKey pour la stocker côté serveur sous forme chiffrée (`EncryptedMasterKey`) — inutilisable sans votre mot de passe.
-
-### Chiffrement des fichiers (upload)
-
-Chaque fichier est découpé en **chunks de 10 Mo**, chiffrés individuellement avec **AES-256-GCM** :
-
-```
-Fichier original
-        │
-        ▼
-  Découpage en chunks de 10 Mo
-        │
-        ▼
-  Pour chaque chunk :
-    ├── Nonce unique (8 octets aléatoires + 4 octets compteur)
-    ├── AES-256-GCM encrypt
-    └── Format stocké : [Nonce 12B][Ciphertext][Tag 16B]
-        │
-        ▼
-  Upload direct vers S3 via URLs présignées (TTL 180s)
-  Le backend orchestre, mais ne touche jamais le contenu.
-```
-
-### Déchiffrement en streaming (téléchargement)
-
-Le téléchargement ne reconstitue jamais le fichier entier en mémoire :
-
-```
-URL présignée S3 (TTL 5 min)
-        │
-        ▼
-  ReadableStream (fetch)
-        │
-        ▼
-  TransformStream : parse [Nonce][Ciphertext][Tag] → AES-GCM decrypt
-        │
-        ▼
-  FileSystemWritableFileStream ou Blob
-  (jamais stocké déchiffré de façon temporaire)
-```
-
-### Ce que le serveur ne peut pas faire
-
-| Opération | Possible pour le serveur ? |
-|-----------|---------------------------|
-| Lire le contenu d'un fichier | Non — blobs opaques sur S3 |
-| Lire le nom d'un fichier | Non si l'option est activée — voir ci-dessous |
-| Déchiffrer les données d'un partage | Non — clés chiffrées avec RSA-OAEP |
-| Accéder à votre clé maître | Non — jamais transmise au backend |
-
-### Chiffrement des noms de fichiers (opt-in)
-
-Lors de l'inscription, il est possible d'activer le chiffrement des noms de fichiers et dossiers. Cette option est indépendante du chiffrement du contenu (toujours actif).
-
-**Quand l'option est désactivée (défaut)** : les noms sont stockés en clair en base de données et dans le bucket S3. La barre de recherche est fonctionnelle.
-
-**Quand l'option est activée** :
-
-```
-Nom du fichier (ex. "rapport.pdf")
-        │
-        ▼
-  AES-256-GCM avec la MasterKey
-  IV aléatoire (12 octets, CSPRNG)
-        │
-        ▼
-  Encodage base64url (pas de padding)
-  → "aB3xK7mQ..." (opaque, pas de caractère spécial)
-        │
-  ┌─────┴─────┐
-  │           │
-  PostgreSQL  S3 OVH
-  name = "aB3xK7..."   users/{id}/enc_path/aB3xK7...
-```
-
-- Le navigateur déchiffre les noms localement à chaque chargement de répertoire.
-- La barre de recherche est désactivée : les noms stockés étant des blobs opaques, une recherche `ILIKE` côté serveur est sans effet.
-- Le choix est permanent à la création du compte.
-
----
-
-## Les trois systèmes de partage
-
-### 1. Partage par lien
-
-Vous générez un lien public que n'importe qui peut ouvrir, sans compte.
-
-**Fonctionnement :**
-
-1. Kagibi génère une `ShareKey` aléatoire, puis chiffre la clé du fichier avec elle.
-2. Un token aléatoire (32 octets) est créé et associé au lien.
-3. Le lien peut être protégé par un mot de passe (haché en bcrypt) et/ou limité dans le temps (1 à 30 jours).
-4. Le destinataire visite le lien, Kagibi lui retourne le blob chiffré et la `ShareKey`.
-5. Son navigateur déchiffre le fichier localement.
-
-Le serveur stocke : le token, la clé chiffrée avec la ShareKey, le hash du mot de passe optionnel, la date d'expiration. Il ne peut pas lire le fichier.
-
 ---
 
-### 2. Partage avec un ami (utilisateur à utilisateur)
-
-Le partage direct entre comptes utilise la cryptographie asymétrique pour garantir que seul le destinataire peut déchiffrer.
-
-**Fonctionnement :**
-
-1. À la création de compte, chaque utilisateur génère une paire de clés **RSA-OAEP 4096 bits**.
-   - La clé publique est stockée en clair sur le serveur.
-   - La clé privée est chiffrée avec la MasterKey, puis stockée sur le serveur.
-
-2. Pour ajouter un ami, on utilise son **code ami** (8 caractères alphanumériques, ex. `#A7KD92XZ`), unique par compte.
-
-3. Pour partager un fichier :
-   - Kagibi récupère la clé publique RSA du destinataire.
-   - La `FileKey` (clé AES du fichier) est chiffrée avec cette clé publique.
-   - Le résultat chiffré est stocké en base, rattaché au partage.
-
-4. Quand le destinataire accède au fichier :
-   - Il récupère la `FileKey` chiffrée.
-   - Son navigateur la déchiffre avec sa clé privée RSA (déchiffrée elle-même avec sa MasterKey).
-   - Le fichier est déchiffré localement.
-
-Le serveur stocke : la `FileKey` chiffrée (inutilisable sans la clé privée du destinataire), les relations d'amitié, les permissions.
-
----
-
-### 3. Transfert P2P (appareil à appareil)
-
-Le transfert P2P envoie des fichiers directement d'un appareil à un autre, sans passer par le stockage serveur.
-**Toutefois, les réseaux internet modernes rendent souvent les connexions directes impossibles (NAT, pare-feu). Kagibi utilise un serveur TURN pour relayer les données quand nécessaire, mais le chiffrement de bout en bout est maintenu.**
-Concrètement, les appareils établissent une connexion WebRTC DataChannel, et les données sont chiffrées en AES-GCM avant d'être envoyées. Le serveur ne voit que des flux de données chiffrés, même lors du relais TURN.
-
-**Fonctionnement :**
-
-1. Les deux appareils établissent une connexion **WebRTC DataChannel** via un serveur de signalisation (WebSocket).
-2. Le backend relaie uniquement les messages de négociation WebRTC (offer/answer/ICE candidates), stockés temporairement dans la table `p2p_signals` pour livraison hors-ligne.
-3. Une fois la connexion pair-à-pair établie, les données transitent **directement** entre les appareils, chiffrées en AES-GCM par la couche applicative.
-4. Le serveur ne voit ni le contenu transféré, ni les métadonnées du fichier.
-
-Les transferts P2P sont comptabilisés par plan utilisateur (`p2p_max_exchanges`).
-
----
-
-## Ce qui est stocké sur le serveur
-
-### Données de compte
+Read the documentation in your language:
 
-| Donnée | Format | Pourquoi |
-|--------|--------|---------|
-| Adresse email | Clair | Authentification |
-| Nom d'affichage | Clair | Interface utilisateur |
-| Mot de passe | bcrypt (coût 12) | Vérification à la connexion |
-| Sel Argon2id | Aléatoire (16 octets) | Dérivation de la KEK côté client |
-| `EncryptedMasterKey` | Chiffré (KEK) | Restauration de la MasterKey à la connexion |
-| Clé publique RSA | Clair | Chiffrement des partages entrants |
-| `EncryptedPrivateKey` | Chiffré (MasterKey) | Déchiffrement des partages reçus |
-| Code de récupération | SHA-256 (hash) | Réinitialisation sans email |
-| Code ami | Clair | Recherche d'amis |
-
-### Métadonnées de fichiers
-
-| Donnée | Format |
-|--------|--------|
-| Nom du fichier | Clair (défaut) ou Chiffré AES-GCM si option activée à l'inscription |
-| Taille (octets) | Clair |
-| Type MIME | Clair |
-| Dates de création/modification | Clair |
-| Clé de fichier (`EncryptedKey`) | Chiffré (MasterKey) |
-
-### Données sociales et de partage
-
-- Liste d'amis et statut (en attente / accepté)
-- Partages actifs : identifiant de ressource + clé chiffrée + permissions
-- Liens publics : token + clé chiffrée + expiration + hash de mot de passe optionnel
-- Activités récentes (fichiers accédés — optionnel)
-
-### Ce qui n'est pas collecté
-
-- Contenu des fichiers (jamais en clair sur le serveur)
-- Historique de navigation ou de recherche
-- Adresses IP (sauf journalisation temporaire à des fins de sécurité/abus)
-- Données analytiques ou pixels de tracking
-- Informations sur l'appareil ou le navigateur
+- [English](./docs/README.en.md)
+- [Français](./docs/README.fr.md)
 
 ---
 
-## Récupération de compte
-
-Un code de récupération est généré à l'inscription. Il est distinct du mot de passe et permet de retrouver l'accès à la MasterKey si le mot de passe est perdu.
-
-```
-Code de récupération (8 caractères)
-        │
-        ├── SHA-256(code) → stocké comme RecoveryHash (vérification)
-        │
-        └── Argon2id(code, recovery_salt) → déchiffre EncryptedMasterKeyRecovery
-```
-
-Si le code de récupération est également perdu, les données sont **définitivement inaccessibles**. Ce n'est pas un bug — c'est la garantie zero-knowledge.
+## Features
+
+### Security & Privacy
+- **Zero-knowledge encryption** — files are encrypted on your device before upload; the server never sees plaintext content
+- **AES-256-GCM** file encryption, split into 10 MB chunks with unique nonces
+- **Argon2id** key derivation (64 MB memory, 4 iterations)
+- **RSA-OAEP 4096-bit** key pair per user for asymmetric sharing
+- **Optional filename encryption** — file and folder names can be encrypted client-side at registration
+- **MFA (TOTP)** two-factor authentication support
+- **Account recovery code** — password-independent recovery without server access to your keys
+
+### File Management
+- Upload, download, organize files and folders
+- Streaming decryption — large files are never fully loaded into memory
+- Recently opened files
+- File search (disabled when filename encryption is active)
+
+### Sharing
+- **P2P transfer** — direct device-to-device file transfer over WebRTC DataChannel, encrypted with AES-GCM; a TURN relay (**no intermediate storage**, only relay) is used when a direct connection is not possible, without compromising encryption.
+- **Public link sharing** — optional password protection and expiration (1–30 days)
+- **Friend sharing (user-to-user)** — end-to-end encrypted via RSA; only the recipient can decrypt
+
+### Social
+- Friend system via unique friend codes (e.g. `#A7KD92XZ`)
+- Real-time online presence
+- P2P transfer notifications with sound and browser push
+
+### Account & Settings
+- Light / dark theme
+- Multi-language interface (i18n)
+- Usage dashboard (storage, P2P quota)
+- GDPR-compliant data export and account deletion (30-day grace period)
 
 ---
 
-## Suppression des données
+## Roadmap
 
-- La suppression d'un compte déclenche une **suppression logique** immédiate (marquage `deleted_at`).
-- Un processus de nettoyage asynchrone effectue la **suppression physique définitive** au bout de 30 jours : lignes en base, blobs S3.
-- Conformité RGPD (articles 17 et 20) : droit à l'effacement et à la portabilité.
+> This section lists planned and considered features. It is not a commitment to a release date.
 
----
-
-## Stack technique
-
-| Composant | Technologie |
-|-----------|-------------|
-| Frontend | Vue 3.5, Vite 7, Pinia |
-| Backend | Go 1.21+, Gin |
-| Base de données | PostgreSQL 16+ |
-| Cache / rate-limit | Redis 7+ |
-| Stockage objet | OVH S3 (compatible AWS) |
-| Chiffrement | AES-256-GCM, RSA-OAEP 4096, Argon2id |
-| Authentification | JWT HS256, TOTP (MFA) |
-| P2P | WebRTC DataChannel, TURN/STUN (Coturn) |
-| Déploiement | Docker Compose (dev), Kubernetes / Rancher (prod) |
+<!-- Add roadmap items below. Example format:
+- [ ] Feature name — short description
+- [x] Already shipped feature
+-->
 
 ---
 
-## Démarrage rapide (développement)
-
-**Prérequis :** Docker, Docker Compose
+## Quick start
 
 ```bash
-git clone https://github.com/Buuuntyyy/SaferCloud.git
-cd SaferCloud
-
+git clone https://github.com/Buuuntyyy/Kagibi.git
+cd Kagibi
 cp backend/.env.example backend/.env
-# Renseigner les variables S3, JWT_SECRET, etc.
+cp frontend/.env.example frontend/.env
 
-docker compose up -d
-```
-
-Frontend : `http://localhost` — Backend : `http://localhost:8080`
-
-Pour la configuration détaillée (variables d'environnement, S3, Kubernetes), voir [`backend/README.md`](./backend/README.md).
+cd backend
+go run main.go
 
----
+cd frontend
+npm install
+npm run dev
+```
 
-## Licence
+Frontend: `http://localhost` — Backend: `http://localhost:8080`
 
-AGPLv3 — voir [`LICENSE`](./LICENSE).
+## License
 
-Toute modification du code, y compris dans un contexte SaaS, doit être publiée sous la même licence.
+AGPLv3 — see [`LICENSE`](./LICENSE).
diff --git a/backend/.env.example b/backend/.env.example
index 330321f3..d667e666 100644
--- a/backend/.env.example
+++ b/backend/.env.example
@@ -12,6 +12,13 @@ AUTH_PROVIDER=local
 # ===== JWT (required when AUTH_PROVIDER=local) =====
 JWT_SECRET=change-me-use-a-long-random-string
 
+# ===== EMAIL ENCRYPTION (required — all auth providers) =====
+# Server-side AES-256-GCM encryption of email addresses at rest.
+# A DB dump without this key cannot reveal any email address.
+# Generate with: openssl rand -hex 32
+# WARNING: changing this key requires re-encrypting all emails in the DB.
+EMAIL_ENCRYPTION_KEY=change-me-generate-with-openssl-rand-hex-32
+
 # ===== DATABASE =====
 DATABASE_URL=postgres://user:password@localhost:5432/safercloud?sslmode=disable
 
@@ -37,6 +44,14 @@ S3_REGION=eu-west-1
 AWS_ACCESS_KEY_ID=your-access-key
 AWS_SECRET_ACCESS_KEY=your-secret-key
 
+# ===== S3 BACKUP (réplication quotidienne à 01h00 Paris → bucket Infrequent Access) =====
+# Seul S3_BACKUP_BUCKET est obligatoire — les autres héritent des valeurs S3_* si omis.
+# S3_BACKUP_BUCKET=     # defaut : S3_BUCKET + "-backup"
+# S3_BACKUP_ENDPOINT=   # défaut : S3_ENDPOINT
+# S3_BACKUP_REGION=     # défaut : S3_REGION
+# S3_BACKUP_ACCESS_KEY= # défaut : S3_ACCESS_KEY
+# S3_BACKUP_SECRET_KEY= # défaut : S3_SECRET_KEY
+
 # ===== CORS =====
 ALLOWED_ORIGINS=http://localhost:5173,http://localhost:3000
 
diff --git a/backend/cmd/decrypt-email/main.go b/backend/cmd/decrypt-email/main.go
new file mode 100644
index 00000000..feb0022e
--- /dev/null
+++ b/backend/cmd/decrypt-email/main.go
@@ -0,0 +1,35 @@
+// Copyright (C) 2025-2026  Buuuntyyy
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+// decrypt-email is a diagnostic CLI tool that decrypts an email_encrypted value
+// from the database using the same emailcrypto package as the backend.
+//
+// Usage:
+//
+//	EMAIL_ENCRYPTION_KEY=<hex-key> go run ./cmd/decrypt-email <base64-ciphertext>
+package main
+
+import (
+	"fmt"
+	"os"
+
+	"kagibi/backend/pkg/emailcrypto"
+)
+
+func main() {
+	if len(os.Args) != 2 {
+		fmt.Fprintln(os.Stderr, "Usage: decrypt-email <base64-email-encrypted>")
+		fmt.Fprintln(os.Stderr, "       EMAIL_ENCRYPTION_KEY must be set in the environment")
+		os.Exit(1)
+	}
+
+	emailcrypto.Init()
+
+	plaintext, err := emailcrypto.Decrypt(os.Args[1])
+	if err != nil {
+		fmt.Fprintf(os.Stderr, "Error: decryption failed: %v\n", err)
+		os.Exit(1)
+	}
+
+	fmt.Println(plaintext)
+}
diff --git a/backend/go.mod b/backend/go.mod
index 279ebdb3..39a9be94 100644
--- a/backend/go.mod
+++ b/backend/go.mod
@@ -4,54 +4,54 @@ go 1.25.4
 
 require (
 	github.com/DATA-DOG/go-sqlmock v1.5.2
-	github.com/aws/aws-sdk-go-v2 v1.40.0
+	github.com/aws/aws-sdk-go-v2 v1.41.6
 	github.com/aws/aws-sdk-go-v2/config v1.32.2
 	github.com/aws/aws-sdk-go-v2/credentials v1.19.2
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.12
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.92.1
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1
 	github.com/gin-gonic/gin v1.11.0
 	github.com/go-redis/redismock/v8 v8.11.5
 	github.com/golang-jwt/jwt/v5 v5.3.0
 	github.com/google/uuid v1.6.0
+	github.com/gorilla/websocket v1.5.3
 	github.com/joho/godotenv v1.5.1
+	github.com/pquerna/otp v1.5.0
 	github.com/prometheus/client_golang v1.23.2
 	github.com/stretchr/testify v1.11.1
 	github.com/uptrace/bun v1.2.16
 	github.com/uptrace/bun/dialect/pgdialect v1.2.16
 	github.com/uptrace/bun/driver/pgdriver v1.2.16
-	golang.org/x/time v0.14.0
 )
 
 require (
-	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.3 // indirect
+	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9 // indirect
 	github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.14 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.14 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.14 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 // indirect
 	github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 // indirect
-	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.14 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.5 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.14 // indirect
-	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.14 // indirect
+	github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 // indirect
+	github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22 // indirect
 	github.com/aws/aws-sdk-go-v2/service/signin v1.0.2 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sso v1.30.5 // indirect
 	github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.10 // indirect
 	github.com/aws/aws-sdk-go-v2/service/sts v1.41.2 // indirect
-	github.com/aws/smithy-go v1.23.2 // indirect
+	github.com/aws/smithy-go v1.25.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc // indirect
 	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
 	github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
-	github.com/gorilla/websocket v1.5.3 // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/pquerna/otp v1.5.0 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
 	github.com/prometheus/common v0.66.1 // indirect
 	github.com/prometheus/procfs v0.16.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
+	golang.org/x/time v0.14.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
@@ -90,7 +90,7 @@ require (
 	go.opentelemetry.io/otel/trace v1.38.0 // indirect
 	go.uber.org/mock v0.6.0 // indirect
 	golang.org/x/arch v0.23.0 // indirect
-	golang.org/x/crypto v0.45.0 // indirect
+	golang.org/x/crypto v0.45.0
 	golang.org/x/net v0.47.0 // indirect
 	golang.org/x/sys v0.38.0 // indirect
 	golang.org/x/text v0.31.0 // indirect
diff --git a/backend/go.sum b/backend/go.sum
index f4fd203d..b2908e76 100644
--- a/backend/go.sum
+++ b/backend/go.sum
@@ -1,9 +1,9 @@
 github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7OputlJIzU=
 github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU=
-github.com/aws/aws-sdk-go-v2 v1.40.0 h1:/WMUA0kjhZExjOQN2z3oLALDREea1A7TobfuiBrKlwc=
-github.com/aws/aws-sdk-go-v2 v1.40.0/go.mod h1:c9pm7VwuW0UPxAEYGyTmyurVcNrbF6Rt/wixFqDhcjE=
-github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.3 h1:DHctwEM8P8iTXFxC/QK0MRjwEpWQeM9yzidCRjldUz0=
-github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.3/go.mod h1:xdCzcZEtnSTKVDOmUZs4l/j3pSV6rpo1WXl5ugNsL8Y=
+github.com/aws/aws-sdk-go-v2 v1.41.6 h1:1AX0AthnBQzMx1vbmir3Y4WsnJgiydmnJjiLu+LvXOg=
+github.com/aws/aws-sdk-go-v2 v1.41.6/go.mod h1:dy0UzBIfwSeot4grGvY1AqFWN5zgziMmWGzysDnHFcQ=
+github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9 h1:adBsCIIpLbLmYnkQU+nAChU5yhVTvu5PerROm+/Kq2A=
+github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.9/go.mod h1:uOYhgfgThm/ZyAuJGNQ5YgNyOlYfqnGpTHXvk3cpykg=
 github.com/aws/aws-sdk-go-v2/config v1.32.2 h1:4liUsdEpUUPZs5WVapsJLx5NPmQhQdez7nYFcovrytk=
 github.com/aws/aws-sdk-go-v2/config v1.32.2/go.mod h1:l0hs06IFz1eCT+jTacU/qZtC33nvcnLADAPL/XyrkZI=
 github.com/aws/aws-sdk-go-v2/credentials v1.19.2 h1:qZry8VUyTK4VIo5aEdUcBjPZHL2v4FyQ3QEOaWcFLu4=
@@ -12,24 +12,24 @@ github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.14 h1:WZVR5DbDgxzA0BJeudId89
 github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.14/go.mod h1:Dadl9QO0kHgbrH1GRqGiZdYtW5w+IXXaBNCHTIaheM4=
 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.12 h1:Zy6Tme1AA13kX8x3CnkHx5cqdGWGaj/anwOiWGnA0Xo=
 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.20.12/go.mod h1:ql4uXYKoTM9WUAUSmthY4AtPVrlTBZOvnBJTiCUdPxI=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.14 h1:PZHqQACxYb8mYgms4RZbhZG0a7dPW06xOjmaH0EJC/I=
-github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.14/go.mod h1:VymhrMJUWs69D8u0/lZ7jSB6WgaG/NqHi3gX0aYf6U0=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.14 h1:bOS19y6zlJwagBfHxs0ESzr1XCOU2KXJCWcq3E2vfjY=
-github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.14/go.mod h1:1ipeGBMAxZ0xcTm6y6paC2C/J6f6OO7LBODV9afuAyM=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22 h1:GmLa5Kw1ESqtFpXsx5MmC84QWa/ZrLZvlJGa2y+4kcQ=
+github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.22/go.mod h1:6sW9iWm9DK9YRpRGga/qzrzNLgKpT2cIxb7Vo2eNOp0=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22 h1:dY4kWZiSaXIzxnKlj17nHnBcXXBfac6UlsAx2qL6XrU=
+github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.22/go.mod h1:KIpEUx0JuRZLO7U6cbV204cWAEco2iC3l061IxlwLtI=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4 h1:WKuaxf++XKWlHWu9ECbMlha8WOEGm0OUEZqm4K/Gcfk=
 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4/go.mod h1:ZWy7j6v1vWGmPReu0iSGvRiise4YI5SkR3OHKTZ6Wuc=
-github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.14 h1:ITi7qiDSv/mSGDSWNpZ4k4Ve0DQR6Ug2SJQ8zEHoDXg=
-github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.14/go.mod h1:k1xtME53H1b6YpZt74YmwlONMWf4ecM+lut1WQLAF/U=
-github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3 h1:x2Ibm/Af8Fi+BH+Hsn9TXGdT+hKbDd5XOTZxTMxDk7o=
-github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.3/go.mod h1:IW1jwyrQgMdhisceG8fQLmQIydcT/jWY21rFhzgaKwo=
-github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.5 h1:Hjkh7kE6D81PgrHlE/m9gx+4TyyeLHuY8xJs7yXN5C4=
-github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.5/go.mod h1:nPRXgyCfAurhyaTMoBMwRBYBhaHI4lNPAnJmjM0Tslc=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.14 h1:FIouAnCE46kyYqyhs0XEBDFFSREtdnr8HQuLPQPLCrY=
-github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.14/go.mod h1:UTwDc5COa5+guonQU8qBikJo1ZJ4ln2r1MkF7Dqag1E=
-github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.14 h1:FzQE21lNtUor0Fb7QNgnEyiRCBlolLTX/Z1j65S7teM=
-github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.14/go.mod h1:s1ydyWG9pm3ZwmmYN21HKyG9WzAZhYVW85wMHs5FV6w=
-github.com/aws/aws-sdk-go-v2/service/s3 v1.92.1 h1:OgQy/+0+Kc3khtqiEOk23xQAglXi3Tj0y5doOxbi5tg=
-github.com/aws/aws-sdk-go-v2/service/s3 v1.92.1/go.mod h1:wYNqY3L02Z3IgRYxOBPH9I1zD9Cjh9hI5QOy/eOjQvw=
+github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23 h1:FPXsW9+gMuIeKmz7j6ENWcWtBGTe1kH8r9thNt5Uxx4=
+github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.23/go.mod h1:7J8iGMdRKk6lw2C+cMIphgAnT8uTwBwNOsGkyOCm80U=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8 h1:HtOTYcbVcGABLOVuPYaIihj6IlkqubBwFj10K5fxRek=
+github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.8/go.mod h1:VsK9abqQeGlzPgUr+isNWzPlK2vKe9INMLWnY65f5Xs=
+github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14 h1:xnvDEnw+pnj5mctWiYuFbigrEzSm35x7k4KS/ZkCANg=
+github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.14/go.mod h1:yS5rNogD8e0Wu9+l3MUwr6eENBzEeGejvINpN5PAYfY=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22 h1:PUmZeJU6Y1Lbvt9WFuJ0ugUK2xn6hIWUBBbKuOWF30s=
+github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.22/go.mod h1:nO6egFBoAaoXze24a2C0NjQCvdpk8OueRoYimvEB9jo=
+github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22 h1:SE+aQ4DEqG53RRCAIHlCf//B2ycxGH7jFkpnAh/kKPM=
+github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.22/go.mod h1:ES3ynECd7fYeJIL6+oax+uIEljmfps0S70BaQzbMd/o=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1 h1:kU/eBN5+MWNo/LcbNa4hWDdN76hdcd7hocU5kvu7IsU=
+github.com/aws/aws-sdk-go-v2/service/s3 v1.99.1/go.mod h1:Fw9aqhJicIVee1VytBBjH+l+5ov6/PhbtIK/u3rt/ls=
 github.com/aws/aws-sdk-go-v2/service/signin v1.0.2 h1:MxMBdKTYBjPQChlJhi4qlEueqB1p1KcbTEa7tD5aqPs=
 github.com/aws/aws-sdk-go-v2/service/signin v1.0.2/go.mod h1:iS6EPmNeqCsGo+xQmXv0jIMjyYtQfnwg36zl2FwEouk=
 github.com/aws/aws-sdk-go-v2/service/sso v1.30.5 h1:ksUT5KtgpZd3SAiFJNJ0AFEJVva3gjBmN7eXUZjzUwQ=
@@ -38,8 +38,8 @@ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.10 h1:GtsxyiF3Nd3JahRBJbxLCCd
 github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.10/go.mod h1:/j67Z5XBVDx8nZVp9EuFM9/BS5dvBznbqILGuu73hug=
 github.com/aws/aws-sdk-go-v2/service/sts v1.41.2 h1:a5UTtD4mHBU3t0o6aHQZFJTNKVfxFWfPX7J0Lr7G+uY=
 github.com/aws/aws-sdk-go-v2/service/sts v1.41.2/go.mod h1:6TxbXoDSgBQ225Qd8Q+MbxUxUh6TtNKwbRt/EPS9xso=
-github.com/aws/smithy-go v1.23.2 h1:Crv0eatJUQhaManss33hS5r40CG3ZFH+21XSkqMrIUM=
-github.com/aws/smithy-go v1.23.2/go.mod h1:LEj2LM3rBRQJxPZTB4KuzZkaZYnZPnvgIhb4pu07mx0=
+github.com/aws/smithy-go v1.25.0 h1:Sz/XJ64rwuiKtB6j98nDIPyYrV1nVNJ4YU74gttcl5U=
+github.com/aws/smithy-go v1.25.0/go.mod h1:YE2RhdIuDbA5E5bTdciG9KrW3+TiEONeUWCqxX9i1Fc=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
 github.com/beorn7/perks v1.0.1/go.mod h1:G2ZrVWU2WbWT9wwq4/hrbKbnv/1ERSJQ0ibhJ6rlkpw=
 github.com/boombuler/barcode v1.0.1-0.20190219062509-6c824513bacc h1:biVzkmvwrH8WK8raXaxBx6fRVTlJILwEwQGL1I/ByEI=
diff --git a/backend/handlers/auth/delete_account.go b/backend/handlers/auth/delete_account.go
index 14a49292..58c2b62c 100644
--- a/backend/handlers/auth/delete_account.go
+++ b/backend/handlers/auth/delete_account.go
@@ -57,6 +57,9 @@ func DeleteAccount(db *bun.DB, provider authprovider.AuthProvider) gin.HandlerFu
 			c.JSON(http.StatusNotFound, gin.H{"error": "Compte non trouvé"})
 			return
 		}
+		if decErr := pkg.DecryptUserEmail(&user); decErr != nil {
+			log.Printf("[RGPD] Could not decrypt email for user %s (continuing deletion): %v", userID, decErr)
+		}
 
 		log.Printf("[RGPD] Starting IMMEDIATE deletion for user: %s (email: %s, provider: %s)", userID, user.Email, provider.Name())
 
diff --git a/backend/handlers/auth/local_auth.go b/backend/handlers/auth/local_auth.go
index 73240a34..4afe97dc 100644
--- a/backend/handlers/auth/local_auth.go
+++ b/backend/handlers/auth/local_auth.go
@@ -5,14 +5,17 @@ package auth
 
 import (
 	"context"
+	"html"
 	"log"
 	"net/http"
+	"regexp"
 	"strconv"
 	"strings"
 	"time"
 
 	"kagibi/backend/pkg"
 	"kagibi/backend/pkg/authprovider"
+	"kagibi/backend/pkg/emailcrypto"
 	"kagibi/backend/pkg/monitoring"
 
 	"github.com/gin-gonic/gin"
@@ -36,6 +39,11 @@ type updateAuthPasswordRequest struct {
 	NewPassword string `json:"new_password" binding:"required,min=8"`
 }
 
+type updateAuthEmailRequest struct {
+	NewEmail string `json:"new_email" binding:"required,email"`
+	Password string `json:"password" binding:"required"`
+}
+
 func getLocalProvider(provider authprovider.AuthProvider) (*authprovider.LocalProvider, bool) {
 	lp, ok := provider.(*authprovider.LocalProvider)
 	return lp, ok
@@ -290,3 +298,102 @@ func LocalUpdatePasswordHandler(provider authprovider.AuthProvider, redisClient
 		c.JSON(http.StatusOK, gin.H{"message": "Mot de passe mis à jour avec succès"})
 	}
 }
+
+// LocalUpdateEmailHandler handles PUT /api/v1/auth/update-email (protected — JWT required).
+// Verifies the current password before updating the email in both auth_users and profiles tables,
+// then issues a fresh JWT embedding the new email.
+func LocalUpdateEmailHandler(provider authprovider.AuthProvider, db *bun.DB, redisClient *redis.Client) gin.HandlerFunc {
+	emailRe := regexp.MustCompile(`^[a-zA-Z0-9._%+\-]+@[a-zA-Z0-9.\-]+\.[a-zA-Z]{2,}$`)
+	return func(c *gin.Context) {
+		lp, ok := getLocalProvider(provider)
+		if !ok {
+			c.JSON(http.StatusNotImplemented, gin.H{"error": "Update email only available in local auth mode"})
+			return
+		}
+
+		userID := c.GetString("user_id")
+		if userID == "" {
+			c.JSON(http.StatusUnauthorized, gin.H{"error": "Non authentifié"})
+			return
+		}
+
+		var req updateAuthEmailRequest
+		if err := c.ShouldBindJSON(&req); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+
+		newEmail := strings.ToLower(strings.TrimSpace(req.NewEmail))
+		if !emailRe.MatchString(newEmail) {
+			c.JSON(http.StatusBadRequest, gin.H{"error": "Adresse email invalide"})
+			return
+		}
+		// Defense in depth: HTML-escape to neutralize any residual special chars
+		// (the regex already excludes < > " ' ; but we keep this for consistency with username handling)
+		newEmail = html.EscapeString(newEmail)
+
+		// Verify password and update auth_users.email
+		if err := lp.UpdateUserEmailWithVerification(userID, req.Password, newEmail); err != nil {
+			if err.Error() == "invalid current password" {
+				c.JSON(http.StatusUnauthorized, gin.H{"error": "Mot de passe incorrect"})
+				return
+			}
+			if strings.Contains(err.Error(), "unique") || strings.Contains(err.Error(), "duplicate") {
+				c.JSON(http.StatusConflict, gin.H{"error": "Cette adresse email est déjà utilisée"})
+				return
+			}
+			log.Printf("ERROR: Failed to update auth email for user %s: %v", userID, err)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur lors de la mise à jour de l'email"})
+			return
+		}
+
+		// Update profiles.email_hash and email_encrypted to keep tables in sync
+		newEmailHash := emailcrypto.Hash(newEmail)
+		newEmailEnc, encErr := emailcrypto.Encrypt(newEmail)
+		if encErr != nil {
+			log.Printf("ERROR: Failed to encrypt new email for user %s: %v", userID, encErr)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur lors de la mise à jour du profil"})
+			return
+		}
+		if _, err := db.NewUpdate().TableExpr("profiles").
+			Set("email_hash = ?, email_encrypted = ?", newEmailHash, newEmailEnc).
+			Where("id = ?", userID).
+			Exec(c.Request.Context()); err != nil {
+			log.Printf("ERROR: Failed to update profile email for user %s: %v", userID, err)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur lors de la mise à jour du profil"})
+			return
+		}
+
+		// Revoke old tokens and issue a fresh one with the new email
+		if redisClient != nil {
+			go func() {
+				ctx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
+				defer cancel()
+				redisClient.Set(ctx, "token_revoke:"+userID, strconv.FormatInt(time.Now().Unix(), 10), 7*24*time.Hour)
+			}()
+		}
+
+		// Fetch the current AAL from the old token claims so we preserve MFA state
+		aal := "aal1"
+		if authHeader := c.GetHeader("Authorization"); strings.HasPrefix(authHeader, "Bearer ") {
+			if claims, err := parseLocalToken(lp, strings.TrimPrefix(authHeader, "Bearer ")); err == nil {
+				if v, ok2 := claims["aal"].(string); ok2 && v != "" {
+					aal = v
+				}
+			}
+		}
+
+		newToken, err := lp.GenerateTokenWithAAL(userID, newEmail, aal)
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur lors de la génération du token"})
+			return
+		}
+
+		log.Printf("INFO: Email updated - UserID: %s, NewEmail: %s", userID, newEmail)
+		c.JSON(http.StatusOK, gin.H{
+			"message":      "Email mis à jour avec succès",
+			"email":        newEmail,
+			"access_token": newToken,
+		})
+	}
+}
diff --git a/backend/handlers/auth/register.go b/backend/handlers/auth/register.go
index 411bfc63..2fe64bad 100644
--- a/backend/handlers/auth/register.go
+++ b/backend/handlers/auth/register.go
@@ -7,6 +7,7 @@ import (
 	"crypto/rand"
 	"kagibi/backend/pkg"
 	"kagibi/backend/pkg/authprovider"
+	"kagibi/backend/pkg/emailcrypto"
 	"kagibi/backend/pkg/mailer"
 	"kagibi/backend/pkg/monitoring"
 	"log"
@@ -87,10 +88,19 @@ func RegisterHandler(c *gin.Context, db *bun.DB, provider authprovider.AuthProvi
 		return
 	}
 
+	emailHash := emailcrypto.Hash(req.Email)
+	emailEnc, err := emailcrypto.Encrypt(req.Email)
+	if err != nil {
+		log.Printf("[Register] Failed to encrypt email: %v", err)
+		c.JSON(http.StatusInternalServerError, gin.H{"error": "Erreur lors de la création du profil. Veuillez réessayer."})
+		return
+	}
+
 	user := &pkg.User{
 		ID:                         userID,
 		Name:                       req.Name,
-		Email:                      req.Email,
+		EmailHash:                  emailHash,
+		EmailEncrypted:             emailEnc,
 		AvatarURL:                  normalizeAvatarURL(req.AvatarURL),
 		Salt:                       req.Salt,
 		EncryptedMasterKey:         req.EncryptedMasterKey,
diff --git a/backend/handlers/billing/handlers.go b/backend/handlers/billing/handlers.go
index 8a1fd7b8..1c6ba4c4 100644
--- a/backend/handlers/billing/handlers.go
+++ b/backend/handlers/billing/handlers.go
@@ -153,6 +153,22 @@ func GetUsageHandler(db *bun.DB) gin.HandlerFunc {
 			c.JSON(http.StatusInternalServerError, gin.H{"error": errFailedGetUserPlan})
 			return
 		}
+
+		// Compute real storage from files table to avoid counter drift
+		var realUsage struct{ Sum int64 }
+		_ = db.NewSelect().TableExpr("files").
+			ColumnExpr("COALESCE(SUM(size), 0) AS sum").
+			Where("user_id = ? AND is_preview = false", userID).
+			Scan(c.Request.Context(), &realUsage)
+
+		// Sync the counter so quota checks stay accurate
+		if realUsage.Sum != planState.StorageUsed {
+			_, _ = db.NewUpdate().Model((*pkg.UserPlan)(nil)).
+				Set("storage_used = ?", realUsage.Sum).
+				Where("user_id = ?", userID).
+				Exec(c.Request.Context())
+		}
+
 		activeShares, _ := db.NewSelect().TableExpr("file_shares fs").
 			Join("JOIN files f ON f.id = fs.file_id").
 			Where("f.user_id = ?", userID).
@@ -162,8 +178,8 @@ func GetUsageHandler(db *bun.DB) gin.HandlerFunc {
 			Where("user_id = ?", userID).
 			Exec(c.Request.Context())
 		c.JSON(http.StatusOK, gin.H{
-			"storage_used_bytes": planState.StorageUsed,
-			"storage_used_gb":    float64(planState.StorageUsed) / (1024 * 1024 * 1024),
+			"storage_used_bytes": realUsage.Sum,
+			"storage_used_gb":    float64(realUsage.Sum) / (1024 * 1024 * 1024),
 			"storage_limit_gb":   float64(planState.StorageLimit) / (1024 * 1024 * 1024),
 			"p2p_shares_active":  activeShares,
 			"p2p_shares_limit":   planState.P2PMaxExchanges,
diff --git a/backend/handlers/files/multipart.go b/backend/handlers/files/multipart.go
index a494b911..c9feff9b 100644
--- a/backend/handlers/files/multipart.go
+++ b/backend/handlers/files/multipart.go
@@ -485,6 +485,7 @@ func GetPresignedDownloadHandler(c *gin.Context, db *bun.DB) {
 	}
 
 	log.Printf("Presigned streaming download URL generated - UserID: %s, FileID: %d, Size: %d", userID, fileID, file.Size)
+	monitoring.FileDownloadsTotal.Inc()
 
 	// Return URL with decryption metadata
 	c.JSON(http.StatusOK, gin.H{
diff --git a/backend/handlers/files/rename.go b/backend/handlers/files/rename.go
index 60547c9f..dd47570a 100644
--- a/backend/handlers/files/rename.go
+++ b/backend/handlers/files/rename.go
@@ -20,7 +20,9 @@ import (
 	"github.com/uptrace/bun"
 )
 
-var validNameRegex = regexp.MustCompile(`^[a-zA-Z0-9\s\-\._]+$`)
+// \p{L} matches any Unicode letter (covers accented and non-Latin characters).
+// \p{N} matches any Unicode number. The remaining chars are safe punctuation.
+var validNameRegex = regexp.MustCompile(`^[\p{L}\p{N}\s\-\._]+$`)
 
 type RenameRequest struct {
 	ID      int64  `json:"id" binding:"required"`
diff --git a/backend/handlers/folders/create.go b/backend/handlers/folders/create.go
index 6da91664..6f80b3d4 100644
--- a/backend/handlers/folders/create.go
+++ b/backend/handlers/folders/create.go
@@ -18,7 +18,9 @@ import (
 	"github.com/uptrace/bun"
 )
 
-var validNameRegex = regexp.MustCompile(`^[a-zA-Z0-9\s\-\._]+$`)
+// \p{L} matches any Unicode letter (covers accented and non-Latin characters).
+// \p{N} matches any Unicode number. The remaining chars are safe punctuation.
+var validNameRegex = regexp.MustCompile(`^[\p{L}\p{N}\s\-\._]+$`)
 
 type CreateFolderRequest struct {
 	Name string `json:"name" binding:"required" validate:"required,foldername"`
diff --git a/backend/handlers/p2p/invite.go b/backend/handlers/p2p/invite.go
new file mode 100644
index 00000000..ea6693c9
--- /dev/null
+++ b/backend/handlers/p2p/invite.go
@@ -0,0 +1,317 @@
+// Copyright (C) 2025-2026  Buuuntyyy
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+package p2p
+
+import (
+	"crypto/rand"
+	"encoding/base64"
+	"fmt"
+	"log"
+	"net/http"
+	"strings"
+	"time"
+
+	"kagibi/backend/pkg"
+	"kagibi/backend/pkg/authprovider"
+	"kagibi/backend/pkg/emailcrypto"
+	"kagibi/backend/pkg/mailer"
+
+	"github.com/gin-gonic/gin"
+	"github.com/uptrace/bun"
+)
+
+// guestTokenIssuer is satisfied by LocalProvider only.
+type guestTokenIssuer interface {
+	GenerateGuestToken(guestUserID string, expiresAt time.Time) (string, error)
+}
+
+// generateUUID generates a random RFC 4122 v4 UUID.
+func generateUUID() (string, error) {
+	b := make([]byte, 16)
+	if _, err := rand.Read(b); err != nil {
+		return "", err
+	}
+	b[6] = (b[6] & 0x0f) | 0x40
+	b[8] = (b[8] & 0x3f) | 0x80
+	return fmt.Sprintf("%x-%x-%x-%x-%x", b[0:4], b[4:6], b[6:8], b[8:10], b[10:]), nil
+}
+
+// CreateInviteHandler creates a P2P invite for an authenticated user.
+// The invite is always a guest invite — any user (with or without a Kagibi account)
+// can follow the link without registering. The optional recipient_email is used only
+// to send an email notification.
+//
+// POST /api/v1/p2p/invite
+func CreateInviteHandler(db *bun.DB) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		senderID, _ := c.Get("user_id")
+
+		var req struct {
+			RecipientEmail string `json:"recipient_email"`
+			FileName       string `json:"file_name" binding:"required"`
+			FileSize       int64  `json:"file_size" binding:"required"`
+			TransferID     string `json:"transfer_id" binding:"required"`
+			SendEmail      bool   `json:"send_email"`
+		}
+		if err := c.ShouldBindJSON(&req); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+
+		// Validate optional email format when provided
+		if req.RecipientEmail != "" {
+			req.RecipientEmail = strings.ToLower(strings.TrimSpace(req.RecipientEmail))
+		}
+
+		// Load sender profile for name + self-invite check
+		var sender pkg.User
+		if err := db.NewSelect().Model(&sender).Where("id = ?", senderID).Scan(c.Request.Context()); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to load sender profile"})
+			return
+		}
+		if err := pkg.DecryptUserEmail(&sender); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to load sender profile"})
+			return
+		}
+		if req.RecipientEmail != "" && strings.EqualFold(sender.Email, req.RecipientEmail) {
+			c.JSON(http.StatusBadRequest, gin.H{"error": "You cannot invite yourself"})
+			return
+		}
+
+		// Generate opaque invite token (32 bytes → 43 URL-safe chars)
+		raw := make([]byte, 32)
+		if _, err := rand.Read(raw); err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to generate token"})
+			return
+		}
+		token := base64.RawURLEncoding.EncodeToString(raw)
+
+		// Guest invite: auto-generate recipient UUID
+		guestID, err := generateUUID()
+		if err != nil {
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to generate guest ID"})
+			return
+		}
+
+		invite := &pkg.P2PInvite{
+			Token:       token,
+			SenderID:    senderID.(string),
+			SenderName:  sender.Name,
+			RecipientID: guestID,
+			TransferID:  req.TransferID,
+			FileName:    req.FileName,
+			FileSize:    req.FileSize,
+			IsGuest:     true,
+			ExpiresAt:   time.Now().Add(24 * time.Hour),
+		}
+		if req.RecipientEmail != "" {
+			enc, err := emailcrypto.Encrypt(req.RecipientEmail)
+			if err != nil {
+				c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to process recipient email"})
+				return
+			}
+			invite.RecipientEmailEncrypted = enc
+		}
+
+		if _, err := db.NewInsert().Model(invite).Exec(c.Request.Context()); err != nil {
+			log.Printf("[P2P] Failed to create invite sender=%s: %v", senderID, err)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to create invite"})
+			return
+		}
+
+		if req.SendEmail && req.RecipientEmail != "" {
+			go func() {
+				if err := mailer.SendP2PInvite(req.RecipientEmail, sender.Name, req.FileName, req.FileSize, token); err != nil {
+					log.Printf("[P2P] Invite email failed to %s: %v", req.RecipientEmail, err)
+				}
+			}()
+		}
+
+		c.JSON(http.StatusOK, gin.H{
+			"token":          token,
+			"recipient_id":   guestID,
+			"recipient_name": "Guest",
+			"expires_at":     invite.ExpiresAt,
+		})
+	}
+}
+
+// GuestAuthHandler issues a short-lived guest JWT for a P2P invite link recipient.
+// No prior account is required. The guest JWT authorises only the WebSocket + P2P
+// invite/accept endpoints for the duration of the invite.
+//
+// POST /api/v1/p2p/guest-auth  (public — no auth required)
+func GuestAuthHandler(db *bun.DB, provider authprovider.AuthProvider) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		issuer, ok := provider.(guestTokenIssuer)
+		if !ok {
+			c.JSON(http.StatusNotImplemented, gin.H{"error": "Guest auth is only supported with the local auth provider"})
+			return
+		}
+
+		var req struct {
+			Token string `json:"token" binding:"required"`
+		}
+		if err := c.ShouldBindJSON(&req); err != nil {
+			c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
+			return
+		}
+
+		var invite pkg.P2PInvite
+		if err := db.NewSelect().Model(&invite).Where("token = ?", req.Token).Scan(c.Request.Context()); err != nil {
+			c.JSON(http.StatusNotFound, gin.H{"error": "Invite not found"})
+			return
+		}
+		if time.Now().After(invite.ExpiresAt) {
+			c.JSON(http.StatusGone, gin.H{"error": "This invite has expired"})
+			return
+		}
+		if !invite.IsGuest {
+			c.JSON(http.StatusForbidden, gin.H{"error": "This invite is not a guest invite"})
+			return
+		}
+
+		// Atomic single-use claim: set guest_authed_at only if it is still NULL.
+		// This prevents a second caller (who intercepted the link) from obtaining
+		// a guest JWT after the legitimate recipient has already authenticated.
+		now := time.Now()
+		result, err := db.NewUpdate().
+			Model((*pkg.P2PInvite)(nil)).
+			Set("guest_authed_at = ?", now).
+			Where("token = ? AND guest_authed_at IS NULL", req.Token).
+			Exec(c.Request.Context())
+		if err != nil {
+			log.Printf("[P2P] guest_authed_at claim failed token=%s: %v", req.Token, err)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to claim invite"})
+			return
+		}
+		if rows, _ := result.RowsAffected(); rows == 0 {
+			c.JSON(http.StatusGone, gin.H{"error": "This invite has already been used"})
+			return
+		}
+
+		jwt, err := issuer.GenerateGuestToken(invite.RecipientID, invite.ExpiresAt)
+		if err != nil {
+			log.Printf("[P2P] Failed to generate guest token: %v", err)
+			c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to generate guest token"})
+			return
+		}
+
+		c.JSON(http.StatusOK, gin.H{
+			"jwt":           jwt,
+			"guest_user_id": invite.RecipientID,
+			"sender_name":   invite.SenderName,
+			"file_name":     invite.FileName,
+			"file_size":     invite.FileSize,
+			"expires_at":    invite.ExpiresAt,
+		})
+	}
+}
+
+// GetInviteHandler retrieves an invite. Requires the caller to be the intended
+// recipient (RecipientID == user_id from JWT — works for both regular and guest JWTs).
+//
+// GET /api/v1/p2p/invite/:token
+func GetInviteHandler(db *bun.DB) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		userID, _ := c.Get("user_id")
+		token := c.Param("token")
+
+		var invite pkg.P2PInvite
+		if err := db.NewSelect().Model(&invite).Where("token = ?", token).Scan(c.Request.Context()); err != nil {
+			c.JSON(http.StatusNotFound, gin.H{"error": "Invite not found"})
+			return
+		}
+
+		if time.Now().After(invite.ExpiresAt) {
+			c.JSON(http.StatusGone, gin.H{"error": "This invite has expired"})
+			return
+		}
+
+		if invite.RecipientID != userID.(string) {
+			c.JSON(http.StatusForbidden, gin.H{"error": "This invite is not for your account"})
+			return
+		}
+
+		c.JSON(http.StatusOK, gin.H{
+			"token":       invite.Token,
+			"sender_id":   invite.SenderID,
+			"sender_name": invite.SenderName,
+			"file_name":   invite.FileName,
+			"file_size":   invite.FileSize,
+			"transfer_id": invite.TransferID,
+			"expires_at":  invite.ExpiresAt,
+			"accepted":    invite.AcceptedAt != nil,
+			"is_guest":    invite.IsGuest,
+		})
+	}
+}
+
+// AcceptInviteHandler marks the invite as accepted and signals the sender via
+// the P2P WebSocket channel so they can initiate the WebRTC handshake.
+// For guest invites, the caller must provide their freshly-generated public_key
+// so the sender can encrypt the file key for the recipient.
+//
+// POST /api/v1/p2p/invite/:token/accept
+func AcceptInviteHandler(db *bun.DB, hub pkg.WSHub) gin.HandlerFunc {
+	return func(c *gin.Context) {
+		userID, _ := c.Get("user_id")
+		token := c.Param("token")
+
+		var body struct {
+			PublicKey string `json:"public_key"`
+		}
+		// Best-effort body parse — public_key is optional for non-guest invites
+		_ = c.ShouldBindJSON(&body)
+
+		var invite pkg.P2PInvite
+		if err := db.NewSelect().Model(&invite).Where("token = ?", token).Scan(c.Request.Context()); err != nil {
+			c.JSON(http.StatusNotFound, gin.H{"error": "Invite not found"})
+			return
+		}
+
+		if time.Now().After(invite.ExpiresAt) {
+			c.JSON(http.StatusGone, gin.H{"error": "This invite has expired"})
+			return
+		}
+
+		if invite.RecipientID != userID.(string) {
+			c.JSON(http.StatusForbidden, gin.H{"error": "This invite is not for your account"})
+			return
+		}
+
+		// Idempotent: already accepted invites are still OK
+		if invite.AcceptedAt == nil {
+			now := time.Now()
+			invite.AcceptedAt = &now
+			db.NewUpdate().Model(&invite).Column("accepted_at").Where("id = ?", invite.ID).Exec(c.Request.Context())
+		}
+
+		// Build signal payload — include public_key so sender can encrypt the file key
+		signalPayload := map[string]any{
+			"transfer_id":  invite.TransferID,
+			"invite_token": token,
+		}
+		if body.PublicKey != "" {
+			signalPayload["public_key"] = body.PublicKey
+		}
+
+		signal := &pkg.P2PSignal{
+			SenderID:   userID.(string),
+			TargetID:   invite.SenderID,
+			SignalType: "invite_accepted",
+			Payload:    signalPayload,
+		}
+		if _, err := db.NewInsert().Model(signal).Exec(c.Request.Context()); err != nil {
+			log.Printf("[P2P] Failed to store invite_accepted signal: %v", err)
+		}
+		hub.SendP2PSignalToUser(invite.SenderID, userID.(string), "invite_accepted", signal.ID, signalPayload)
+
+		c.JSON(http.StatusOK, gin.H{
+			"status":      "accepted",
+			"transfer_id": invite.TransferID,
+			"sender_id":   invite.SenderID,
+		})
+	}
+}
diff --git a/backend/handlers/users/me.go b/backend/handlers/users/me.go
index 91df9e70..052fd17c 100644
--- a/backend/handlers/users/me.go
+++ b/backend/handlers/users/me.go
@@ -30,6 +30,7 @@ type UserResponse struct {
 	FriendCode          string    `json:"friend_code"`
 	PublicKey           string    `json:"public_key"`
 	EncryptedPrivateKey string    `json:"encrypted_private_key"`
+	EncryptFilenames    bool      `json:"encrypt_filenames"`
 	CreatedAt           time.Time `json:"created_at"`
 }
 
@@ -88,6 +89,7 @@ func MeHandler(c *gin.Context, db *bun.DB) {
 		FriendCode:          user.FriendCode,
 		PublicKey:           user.PublicKey,
 		EncryptedPrivateKey: user.EncryptedPrivateKey,
+		EncryptFilenames:    user.EncryptFilenames,
 		CreatedAt:           user.CreatedAt,
 	}
 
diff --git a/backend/handlers/users/security_settings.go b/backend/handlers/users/security_settings.go
index c31f2c28..a60a7a62 100644
--- a/backend/handlers/users/security_settings.go
+++ b/backend/handlers/users/security_settings.go
@@ -21,6 +21,7 @@ type SecuritySettings struct {
 	RequireMFAOnLogin              bool   `bun:"require_mfa_on_login" json:"require_mfa_on_login"`
 	RequireMFAOnDestructiveActions bool   `bun:"require_mfa_on_destructive_actions" json:"require_mfa_on_destructive_actions"`
 	RequireMFAOnDownloads          bool   `bun:"require_mfa_on_downloads" json:"require_mfa_on_downloads"`
+	RequireMFAOnEmailChange        bool   `bun:"require_mfa_on_email_change" json:"require_mfa_on_email_change"`
 }
 
 // GetSecuritySettingsHandler retrieves user security settings
@@ -65,6 +66,7 @@ type UpdateSecuritySettingsRequest struct {
 	RequireMFAOnLogin              *bool `json:"require_mfa_on_login"`
 	RequireMFAOnDestructiveActions *bool `json:"require_mfa_on_destructive_actions"`
 	RequireMFAOnDownloads          *bool `json:"require_mfa_on_downloads"`
+	RequireMFAOnEmailChange        *bool `json:"require_mfa_on_email_change"`
 }
 
 // UpdateSecuritySettingsHandler updates user security settings
@@ -117,6 +119,9 @@ func UpdateSecuritySettingsHandler(c *gin.Context, db *bun.DB) {
 	if req.RequireMFAOnDownloads != nil {
 		settings.RequireMFAOnDownloads = *req.RequireMFAOnDownloads
 	}
+	if req.RequireMFAOnEmailChange != nil {
+		settings.RequireMFAOnEmailChange = *req.RequireMFAOnEmailChange
+	}
 
 	// Upsert settings
 	_, err = db.NewInsert().
@@ -127,6 +132,7 @@ func UpdateSecuritySettingsHandler(c *gin.Context, db *bun.DB) {
 		Set("require_mfa_on_login = EXCLUDED.require_mfa_on_login").
 		Set("require_mfa_on_destructive_actions = EXCLUDED.require_mfa_on_destructive_actions").
 		Set("require_mfa_on_downloads = EXCLUDED.require_mfa_on_downloads").
+		Set("require_mfa_on_email_change = EXCLUDED.require_mfa_on_email_change").
 		Exec(c.Request.Context())
 
 	if err != nil {
diff --git a/backend/handlers/ws/hub.go b/backend/handlers/ws/hub.go
index b464115f..2798bd6e 100644
--- a/backend/handlers/ws/hub.go
+++ b/backend/handlers/ws/hub.go
@@ -31,7 +31,9 @@ const (
 	redisPresencePrefix = "ws:presence:"
 	redisBroadcastChan  = "ws:broadcast"
 	// presenceTTL must outlive the grace period so a pod crash doesn't leave stale keys forever.
-	presenceTTL = presenceGracePeriod + 30*time.Second
+	// It must also be longer than pingPeriod (54 s) so the key is still alive when renewPresence
+	// is called from the pong handler. 5 minutes gives plenty of headroom.
+	presenceTTL = 5 * time.Minute
 )
 
 // Client represents a single WebSocket connection from an authenticated user.
@@ -52,6 +54,12 @@ type Hub struct {
 	mu      sync.RWMutex
 	clients map[string][]*Client // userID → local connections
 
+	// localPresence tracks users that are considered online in single-pod mode.
+	// It is set on first connect and cleared only when the grace-period timer fires,
+	// so IsConnected returns true during the reconnect grace window even though
+	// h.clients is temporarily empty after Unregister.
+	localPresence map[string]struct{}
+
 	// Redis fields — nil when running without Redis (single-pod / dev mode).
 	rdb        *redis.Client
 	pubsub     *redis.PubSub
@@ -61,7 +69,8 @@ type Hub struct {
 
 // GlobalHub is the singleton hub used throughout the application.
 var GlobalHub = &Hub{
-	clients: make(map[string][]*Client),
+	clients:       make(map[string][]*Client),
+	localPresence: make(map[string]struct{}),
 }
 
 // pendingDisconnects holds timers that fire the DisconnectHook after the grace period.
@@ -188,6 +197,19 @@ func (h *Hub) clearPresence(userID string) {
 	}
 }
 
+// renewPresence resets the TTL of the user's presence key so it doesn't expire
+// while the WebSocket connection is still alive. Called on every pong received.
+func (h *Hub) renewPresence(userID string) {
+	if h.rdb == nil {
+		return
+	}
+	ctx, cancel := context.WithTimeout(context.Background(), 2*time.Second)
+	defer cancel()
+	if err := h.rdb.Expire(ctx, redisPresencePrefix+userID, presenceTTL).Err(); err != nil {
+		log.Printf("[WS] Redis renewPresence failed for user=%s: %v", userID, err)
+	}
+}
+
 // Register adds a client to the hub.
 func (h *Hub) Register(c *Client) {
 	h.mu.Lock()
@@ -205,11 +227,15 @@ func (h *Hub) Register(c *Client) {
 		return
 	}
 
-	// Truly first connection: set up Redis subscription + presence, then fire hook.
+	// Truly first connection: set up presence, then fire hook.
 	if firstConn {
 		if h.rdb != nil {
 			h.subscribeUser(c.userID)
 			h.setPresence(c.userID)
+		} else {
+			h.mu.Lock()
+			h.localPresence[c.userID] = struct{}{}
+			h.mu.Unlock()
 		}
 		if ConnectHook != nil {
 			go ConnectHook(c.userID)
@@ -250,6 +276,10 @@ func (h *Hub) Unregister(c *Client) {
 		if useRedis {
 			h.unsubscribeUser(userID)
 			h.clearPresence(userID)
+		} else {
+			h.mu.Lock()
+			delete(h.localPresence, userID)
+			h.mu.Unlock()
 		}
 		if DisconnectHook != nil {
 			DisconnectHook(userID)
@@ -320,9 +350,13 @@ func (h *Hub) SendEventToUser(userID, eventType string, id int64, payload map[st
 }
 
 // SendP2PSignalToUser delivers a P2P signal over WebSocket.
-func (h *Hub) SendP2PSignalToUser(targetUserID, senderID, signalType string, payload map[string]any) {
+// signalID is the database ID of the signal — the frontend uses it to deduplicate
+// against the polling fallback so that a WS-delivered signal is not processed again
+// 2.5 s later when the polling loop also picks it up.
+func (h *Hub) SendP2PSignalToUser(targetUserID, senderID, signalType string, signalID int64, payload map[string]any) {
 	msg, err := json.Marshal(map[string]any{
 		"type":        "p2p_signal",
+		"id":          signalID,
 		"from":        senderID,
 		"signal_type": signalType,
 		"payload":     payload,
@@ -336,6 +370,8 @@ func (h *Hub) SendP2PSignalToUser(targetUserID, senderID, signalType string, pay
 
 // IsConnected returns true if the user has at least one active WebSocket connection
 // on any pod (Redis mode) or locally (single-pod mode).
+// In single-pod mode, returns true during the reconnect grace period even if
+// h.clients is temporarily empty after Unregister.
 func (h *Hub) IsConnected(userID string) bool {
 	if h.rdb != nil {
 		ctx, cancel := context.WithTimeout(context.Background(), time.Second)
@@ -348,7 +384,8 @@ func (h *Hub) IsConnected(userID string) bool {
 	}
 	h.mu.RLock()
 	defer h.mu.RUnlock()
-	return len(h.clients[userID]) > 0
+	_, present := h.localPresence[userID]
+	return present
 }
 
 // writePump pumps messages from the send channel to the WebSocket connection.
@@ -391,6 +428,7 @@ func (c *Client) readPump() {
 	c.conn.SetReadDeadline(time.Now().Add(pongWait))
 	c.conn.SetPongHandler(func(string) error {
 		c.conn.SetReadDeadline(time.Now().Add(pongWait))
+		c.hub.renewPresence(c.userID)
 		return nil
 	})
 
diff --git a/backend/main.go b/backend/main.go
index 1786a7d1..17e168aa 100644
--- a/backend/main.go
+++ b/backend/main.go
@@ -12,6 +12,7 @@ import (
 	"kagibi/backend/handlers/folders"
 	"kagibi/backend/handlers/friends"
 	"kagibi/backend/handlers/keys"
+	p2phandlers "kagibi/backend/handlers/p2p"
 	"kagibi/backend/handlers/security"
 	"kagibi/backend/handlers/shares"
 	"kagibi/backend/handlers/tags"
@@ -20,6 +21,7 @@ import (
 	"kagibi/backend/middleware"
 	"kagibi/backend/pkg"
 	"kagibi/backend/pkg/authprovider"
+	"kagibi/backend/pkg/emailcrypto"
 	"kagibi/backend/pkg/monitoring"
 	"kagibi/backend/pkg/s3storage"
 	"kagibi/backend/pkg/workers"
@@ -41,6 +43,7 @@ import (
 
 func main() {
 	loadEnv()
+	emailcrypto.Init()
 
 	// DB must be initialized before auth so LocalProvider can access auth_users
 	db := pkg.NewDB()
@@ -192,10 +195,11 @@ func registerRoutes(router *gin.Engine, db *bun.DB, redisClient *redis.Client, p
 	mfaGroup.POST("/verify", auth.MFAVerifyHandler(provider))
 	mfaGroup.DELETE("/unenroll", auth.MFAUnenrollHandler(provider, redisClient))
 
-	// Protected routes (JWT required)
+	// Protected routes (JWT required, guest tokens rejected)
 	authMW := middleware.AuthMiddleware(provider, redisClient)
 	protected := api.Group("")
 	protected.Use(authMW)
+	protected.Use(middleware.BlockGuest())
 
 	registerUserRoutes(protected, db, redisClient, provider)
 	registerFileRoutes(protected, db, redisClient)
@@ -206,6 +210,8 @@ func registerRoutes(router *gin.Engine, db *bun.DB, redisClient *redis.Client, p
 	registerSecurityRoutes(protected)
 	registerBillingRoutes(api, protected, authMW, db)
 	registerP2PRoutes(protected, db)
+	registerP2PGuestRoutes(api, db, authMW)
+	registerPublicP2PRoutes(api, db, provider)
 	registerEventRoutes(protected, db)
 
 	// WebSocket endpoint — authenticated via Authorization header or Sec-WebSocket-Protocol trick.
@@ -229,6 +235,7 @@ func registerUserRoutes(g *gin.RouterGroup, db *bun.DB, redisClient *redis.Clien
 	g.POST("/auth/logout", func(c *gin.Context) { auth.LogoutHandler(c, redisClient) })
 	g.POST("/auth/ws-token", auth.WsTokenHandler(redisClient))
 	g.POST("/auth/update-password", auth.LocalUpdatePasswordHandler(provider, redisClient))
+	g.PUT("/auth/update-email", auth.LocalUpdateEmailHandler(provider, db, redisClient))
 	g.DELETE("/auth/account", auth.DeleteAccount(db, provider))
 
 	usersG := g.Group("/users")
@@ -333,10 +340,34 @@ func p2pSignalHandler(db *bun.DB) gin.HandlerFunc {
 			Payload:    req.Payload,
 		}
 		if _, err := db.NewInsert().Model(signal).Exec(c.Request.Context()); err != nil {
-			c.JSON(500, gin.H{"error": "Failed to send signal"})
+			log.Printf("[P2P] Insert failed type=%s sender=%s target=%s: %v",
+				req.SignalType, userID.(string), req.TargetUserID, err)
+			// For reject signals, best-effort WS delivery even when the DB is unavailable:
+			// the initiator must learn about the refusal. Signal ID 0 is intentionally
+			// skipped by the frontend deduplication guard (only truthy IDs are tracked).
+			if req.SignalType == "reject" {
+				wshandler.GlobalHub.SendP2PSignalToUser(req.TargetUserID, userID.(string), req.SignalType, 0, req.Payload)
+				c.JSON(200, gin.H{"status": "sent", "signal_id": 0})
+			} else {
+				c.JSON(500, gin.H{"error": "Failed to send signal"})
+			}
 			return
 		}
-		wshandler.GlobalHub.SendP2PSignalToUser(req.TargetUserID, userID.(string), req.SignalType, req.Payload)
+		wshandler.GlobalHub.SendP2PSignalToUser(req.TargetUserID, userID.(string), req.SignalType, signal.ID, req.Payload)
+
+		// Only mark high-volume signals (offer/answer/candidate) consumed immediately
+		// when the target is connected via WS — this prevents the polling fallback from
+		// replaying them. For reject and p2p_ping the polling fallback is intentionally
+		// kept active as a reliability net: WS delivery is best-effort and these signals
+		// are critical to the user experience.
+		criticalForPolling := req.SignalType == "reject" || req.SignalType == "p2p_ping"
+		if !criticalForPolling && wshandler.GlobalHub.IsConnected(req.TargetUserID) {
+			db.NewUpdate().Model((*pkg.P2PSignal)(nil)).
+				Set("consumed = true").
+				Where("id = ?", signal.ID).
+				Exec(c.Request.Context())
+		}
+
 		c.JSON(200, gin.H{"status": "sent", "signal_id": signal.ID})
 	}
 }
@@ -347,7 +378,7 @@ func p2pFetchSignalsHandler(db *bun.DB) gin.HandlerFunc {
 		var signals []pkg.P2PSignal
 		if err := db.NewSelect().
 			Model(&signals).
-			Where("target_id = ? AND consumed = false", userID).
+			Where("target_id = ? AND consumed = false AND created_at > NOW() - INTERVAL '2 minutes'", userID).
 			Order("created_at ASC").
 			Scan(c.Request.Context()); err != nil {
 			c.JSON(500, gin.H{"error": "Failed to fetch signals"})
@@ -390,11 +421,28 @@ func p2pIceConfigHandler() gin.HandlerFunc {
 	}
 }
 
+// registerP2PRoutes registers endpoints that require a full (non-guest) auth session.
+// Creating an invite is restricted to registered users only.
 func registerP2PRoutes(g *gin.RouterGroup, db *bun.DB) {
 	p2pG := g.Group("/p2p")
+	p2pG.POST("/invite", p2phandlers.CreateInviteHandler(db))
+}
+
+// registerP2PGuestRoutes registers P2P endpoints that are accessible to both
+// regular users and ephemeral guest sessions (aal=guest).
+// These are mounted directly on the api group with authMW but without BlockGuest.
+func registerP2PGuestRoutes(api *gin.RouterGroup, db *bun.DB, authMW gin.HandlerFunc) {
+	p2pG := api.Group("/p2p")
+	p2pG.Use(authMW)
 	p2pG.POST("/signal", p2pSignalHandler(db))
 	p2pG.GET("/signals", p2pFetchSignalsHandler(db))
-	p2pG.GET("ice-config", p2pIceConfigHandler())
+	p2pG.GET("/ice-config", p2pIceConfigHandler())
+	p2pG.GET("/invite/:token", p2phandlers.GetInviteHandler(db))
+	p2pG.POST("/invite/:token/accept", p2phandlers.AcceptInviteHandler(db, wshandler.GlobalHub))
+}
+
+func registerPublicP2PRoutes(api *gin.RouterGroup, db *bun.DB, provider authprovider.AuthProvider) {
+	api.POST("/p2p/guest-auth", p2phandlers.GuestAuthHandler(db, provider))
 }
 
 // registerEventRoutes adds a polling endpoint for realtime events.
diff --git a/backend/middleware/auth.go b/backend/middleware/auth.go
index d1f44b78..4b18305e 100644
--- a/backend/middleware/auth.go
+++ b/backend/middleware/auth.go
@@ -124,9 +124,23 @@ func AuthMiddleware(provider authprovider.AuthProvider, redisClient *redis.Clien
 			aal = aalClaim
 		}
 		c.Set("aal", aal)
+		c.Set("is_guest", aal == "guest")
 
 		trackActiveSession(redisClient, userID)
 
 		c.Next()
 	}
 }
+
+// BlockGuest rejects requests that carry a guest JWT (aal=guest).
+// Apply this after AuthMiddleware on any route group that must be inaccessible
+// to ephemeral P2P guest sessions (file storage, account management, etc.).
+func BlockGuest() gin.HandlerFunc {
+	return func(c *gin.Context) {
+		if isGuest, _ := c.Get("is_guest"); isGuest == true {
+			c.AbortWithStatusJSON(403, gin.H{"error": "Guest sessions cannot access this resource"})
+			return
+		}
+		c.Next()
+	}
+}
diff --git a/backend/pkg/authprovider/local.go b/backend/pkg/authprovider/local.go
index 8234b955..e3a1ce27 100644
--- a/backend/pkg/authprovider/local.go
+++ b/backend/pkg/authprovider/local.go
@@ -6,12 +6,13 @@ package authprovider
 import (
 	"context"
 	"crypto/rand"
-	"encoding/hex"
 	"fmt"
 	"log"
 	"os"
 	"time"
 
+	"kagibi/backend/pkg/emailcrypto"
+
 	"github.com/golang-jwt/jwt/v5"
 	"github.com/pquerna/otp"
 	"github.com/pquerna/otp/totp"
@@ -25,7 +26,9 @@ const queryIDEq = "id = ?"
 type authUser struct {
 	bun.BaseModel      `bun:"table:auth_users,alias:au"`
 	ID                 string     `bun:"id,pk"`
-	Email              string     `bun:"email,unique,notnull"`
+	EmailHash          string     `bun:"email_hash,notnull"`
+	EmailEncrypted     string     `bun:"email_encrypted,notnull"`
+	Email              string     `bun:"-"` // virtual: decrypted from EmailEncrypted after load
 	PasswordHash       string     `bun:"password_hash,notnull"`
 	TOTPSecret         string     `bun:"totp_secret"`
 	TOTPEnabled        bool       `bun:"totp_enabled,notnull,default:false"`
@@ -48,10 +51,8 @@ type LocalProvider struct {
 func NewLocalProvider(db *bun.DB) *LocalProvider {
 	secret := os.Getenv("JWT_SECRET")
 	if secret == "" {
-		b := make([]byte, 32)
-		_, _ = rand.Read(b)
-		secret = hex.EncodeToString(b)
-		log.Printf("[LocalAuth] WARNING: JWT_SECRET not set — using random secret. Tokens will be invalidated on restart.")
+		log.Fatalf("[LocalAuth] FATAL: JWT_SECRET environment variable is not set. " +
+			"Set a stable secret (e.g. openssl rand -hex 32) so tokens survive restarts.")
 	}
 	return &LocalProvider{secret: []byte(secret), db: db}
 }
@@ -91,7 +92,7 @@ func (p *LocalProvider) CheckPassword(hash, password string) error {
 
 // CreateAuthUser inserts a new auth_users record and returns the generated UUID.
 func (p *LocalProvider) CreateAuthUser(email, password string) (string, error) {
-	hash, err := p.HashPassword(password)
+	pwHash, err := p.HashPassword(password)
 	if err != nil {
 		return "", fmt.Errorf("failed to hash password: %w", err)
 	}
@@ -105,10 +106,17 @@ func (p *LocalProvider) CreateAuthUser(email, password string) (string, error) {
 	userID := fmt.Sprintf("%x-%x-%x-%x-%x",
 		idBytes[0:4], idBytes[4:6], idBytes[6:8], idBytes[8:10], idBytes[10:16])
 
+	emailHash := emailcrypto.Hash(email)
+	emailEnc, err := emailcrypto.Encrypt(email)
+	if err != nil {
+		return "", fmt.Errorf("failed to encrypt email: %w", err)
+	}
+
 	au := &authUser{
-		ID:           userID,
-		Email:        email,
-		PasswordHash: hash,
+		ID:             userID,
+		EmailHash:      emailHash,
+		EmailEncrypted: emailEnc,
+		PasswordHash:   pwHash,
 	}
 	_, err = p.db.NewInsert().Model(au).Exec(context.Background())
 	if err != nil {
@@ -117,13 +125,19 @@ func (p *LocalProvider) CreateAuthUser(email, password string) (string, error) {
 	return userID, nil
 }
 
-// FindAuthUserByEmail looks up an auth_users record by email.
+// FindAuthUserByEmail looks up an auth_users record by email using the HMAC hash index.
 func (p *LocalProvider) FindAuthUserByEmail(email string) (*authUser, error) {
+	hash := emailcrypto.Hash(email)
 	var au authUser
-	err := p.db.NewSelect().Model(&au).Where("email = ?", email).Scan(context.Background())
+	err := p.db.NewSelect().Model(&au).Where("email_hash = ?", hash).Scan(context.Background())
 	if err != nil {
 		return nil, err
 	}
+	plain, err := emailcrypto.Decrypt(au.EmailEncrypted)
+	if err != nil {
+		return nil, fmt.Errorf("failed to decrypt auth user email: %w", err)
+	}
+	au.Email = plain
 	return &au, nil
 }
 
@@ -159,6 +173,28 @@ func (p *LocalProvider) UpdateUserPasswordWithVerification(userID, oldPassword,
 	return p.UpdateUserPassword(userID, newPassword)
 }
 
+// UpdateUserEmailWithVerification verifies the current password before updating the email.
+// Returns an error if the password is wrong or the new email is already taken.
+func (p *LocalProvider) UpdateUserEmailWithVerification(userID, password, newEmail string) error {
+	var au authUser
+	if err := p.db.NewSelect().Model(&au).Where(queryIDEq, userID).Scan(context.Background()); err != nil {
+		return fmt.Errorf("user not found")
+	}
+	if err := p.CheckPassword(au.PasswordHash, password); err != nil {
+		return fmt.Errorf("invalid current password")
+	}
+	newEmailHash := emailcrypto.Hash(newEmail)
+	newEmailEnc, err := emailcrypto.Encrypt(newEmail)
+	if err != nil {
+		return fmt.Errorf("failed to encrypt new email: %w", err)
+	}
+	_, err = p.db.NewUpdate().Model((*authUser)(nil)).
+		Set("email_hash = ?, email_encrypted = ?", newEmailHash, newEmailEnc).
+		Where(queryIDEq, userID).
+		Exec(context.Background())
+	return err
+}
+
 // ReissueToken verifies the password for the given email and, if correct, returns
 // the user ID and a fresh JWT. Used during orphan-signup recovery so the caller
 // never needs to access the unexported authUser type directly.
@@ -284,6 +320,20 @@ func (p *LocalProvider) SyncMFAStatus(userID string, enabled bool) error {
 	return err
 }
 
+// GenerateGuestToken issues a short-lived HS256 JWT for a P2P guest session.
+// The token expires at expiresAt (matches the invite expiry) and carries is_guest=true
+// so middleware can distinguish guest sessions from full accounts.
+func (p *LocalProvider) GenerateGuestToken(guestUserID string, expiresAt time.Time) (string, error) {
+	token := jwt.NewWithClaims(jwt.SigningMethodHS256, jwt.MapClaims{
+		"sub":      guestUserID,
+		"is_guest": true,
+		"aal":      "guest",
+		"exp":      expiresAt.Unix(),
+		"iat":      time.Now().Unix(),
+	})
+	return token.SignedString(p.secret)
+}
+
 // DisableTOTP removes all TOTP data for the user.
 func (p *LocalProvider) DisableTOTP(userID string) error {
 	_, err := p.db.NewUpdate().Model((*authUser)(nil)).
diff --git a/backend/pkg/database.go b/backend/pkg/database.go
index 0da1f5a9..6207b7bc 100644
--- a/backend/pkg/database.go
+++ b/backend/pkg/database.go
@@ -7,11 +7,14 @@ package pkg
 import (
 	"context"
 	"database/sql"
+	"fmt"
 	"log"
 	"os"
 	"sync"
 	"time"
 
+	"kagibi/backend/pkg/emailcrypto"
+
 	"github.com/uptrace/bun"
 	"github.com/uptrace/bun/dialect/pgdialect"
 	"github.com/uptrace/bun/driver/pgdriver"
@@ -68,11 +71,32 @@ func ListUsers(db *bun.DB) ([]User, error) {
 	return users, err
 }
 
+// DecryptUserEmail decrypts user.EmailEncrypted and stores the result in user.Email.
+// Must be called after any DB load that needs the plaintext email.
+func DecryptUserEmail(u *User) error {
+	if u.EmailEncrypted == "" {
+		return nil
+	}
+	plain, err := emailcrypto.Decrypt(u.EmailEncrypted)
+	if err != nil {
+		return fmt.Errorf("DecryptUserEmail: %w", err)
+	}
+	u.Email = plain
+	return nil
+}
+
 func FindUserByEmail(db *bun.DB, email string) (*User, error) {
 	ctx := context.Background()
 	var user User
-	err := db.NewSelect().Model(&user).Where("email = ?", email).Scan(ctx)
-	return &user, err
+	hash := emailcrypto.Hash(email)
+	err := db.NewSelect().Model(&user).Where("email_hash = ?", hash).Scan(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if err := DecryptUserEmail(&user); err != nil {
+		return nil, err
+	}
+	return &user, nil
 }
 
 func FindUserByID(db *bun.DB, userID string) (*User, error) {
@@ -81,6 +105,9 @@ func FindUserByID(db *bun.DB, userID string) (*User, error) {
 	if err != nil {
 		return nil, err
 	}
+	if err := DecryptUserEmail(&user); err != nil {
+		return nil, err
+	}
 	return &user, nil
 }
 
diff --git a/backend/pkg/emailcrypto/emailcrypto.go b/backend/pkg/emailcrypto/emailcrypto.go
new file mode 100644
index 00000000..072dbf3e
--- /dev/null
+++ b/backend/pkg/emailcrypto/emailcrypto.go
@@ -0,0 +1,109 @@
+// Copyright (C) 2025-2026  Buuuntyyy
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+// Package emailcrypto provides server-side email encryption at rest.
+//
+// Design:
+//   - Hash(email)    → HMAC-SHA256 of normalised email → used as a stable lookup index (deterministic)
+//   - Encrypt(email) → AES-256-GCM with a random nonce → stored in email_encrypted column
+//   - Decrypt(ct)    → recovers the plaintext email when the backend needs it
+//
+// A single EMAIL_ENCRYPTION_KEY (32-byte hex) is split into two independent subkeys so
+// that compromising one operation does not compromise the other.
+//
+// Protection: a DB dump alone (without the server secret) reveals no email addresses.
+// Limitation: a full server compromise (code + env vars + DB) defeats the encryption,
+// as with any server-side encryption scheme.
+package emailcrypto
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"encoding/hex"
+	"fmt"
+	"io"
+	"log"
+	"os"
+	"strings"
+)
+
+var hashKey []byte
+var encKey []byte
+
+// Init reads EMAIL_ENCRYPTION_KEY from the environment and derives two subkeys.
+// Must be called once at startup, before any Hash/Encrypt/Decrypt call.
+func Init() {
+	raw := os.Getenv("EMAIL_ENCRYPTION_KEY")
+	if raw == "" {
+		log.Fatal("[emailcrypto] EMAIL_ENCRYPTION_KEY is not set. Generate one with: openssl rand -hex 32")
+	}
+	keyBytes, err := hex.DecodeString(raw)
+	if err != nil || len(keyBytes) != 32 {
+		log.Fatalf("[emailcrypto] EMAIL_ENCRYPTION_KEY must be exactly 64 hex characters (32 bytes). Got len=%d, err=%v", len(raw)/2, err)
+	}
+	hashKey = deriveSubkey(keyBytes, "email-hash-v1")
+	encKey = deriveSubkey(keyBytes, "email-enc-v1")
+}
+
+func deriveSubkey(master []byte, context string) []byte {
+	mac := hmac.New(sha256.New, master)
+	mac.Write([]byte(context))
+	return mac.Sum(nil)
+}
+
+// Hash returns the HMAC-SHA256 of the lower-cased, trimmed email, encoded as 64 hex chars.
+// Deterministic — same input always yields the same output — safe to use as a UNIQUE index.
+func Hash(email string) string {
+	mac := hmac.New(sha256.New, hashKey)
+	mac.Write([]byte(strings.ToLower(strings.TrimSpace(email))))
+	return hex.EncodeToString(mac.Sum(nil))
+}
+
+// Encrypt encrypts the email with AES-256-GCM using a fresh random 12-byte nonce.
+// The returned string is base64(nonce || ciphertext || auth_tag).
+// Each call produces a different ciphertext even for the same input.
+func Encrypt(email string) (string, error) {
+	block, err := aes.NewCipher(encKey)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: create cipher: %w", err)
+	}
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: create GCM: %w", err)
+	}
+	nonce := make([]byte, gcm.NonceSize())
+	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
+		return "", fmt.Errorf("emailcrypto: generate nonce: %w", err)
+	}
+	ct := gcm.Seal(nonce, nonce, []byte(email), nil)
+	return base64.StdEncoding.EncodeToString(ct), nil
+}
+
+// Decrypt decrypts a ciphertext previously produced by Encrypt.
+func Decrypt(ciphertext string) (string, error) {
+	data, err := base64.StdEncoding.DecodeString(ciphertext)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: base64 decode: %w", err)
+	}
+	block, err := aes.NewCipher(encKey)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: create cipher: %w", err)
+	}
+	gcm, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: create GCM: %w", err)
+	}
+	if len(data) < gcm.NonceSize() {
+		return "", fmt.Errorf("emailcrypto: ciphertext too short")
+	}
+	nonce, ct := data[:gcm.NonceSize()], data[gcm.NonceSize():]
+	plain, err := gcm.Open(nil, nonce, ct, nil)
+	if err != nil {
+		return "", fmt.Errorf("emailcrypto: decrypt failed (wrong key or corrupted data): %w", err)
+	}
+	return string(plain), nil
+}
diff --git a/backend/pkg/mailer/templates.go b/backend/pkg/mailer/templates.go
index 0c026848..e454a8b9 100644
--- a/backend/pkg/mailer/templates.go
+++ b/backend/pkg/mailer/templates.go
@@ -4,6 +4,7 @@
 package mailer
 
 import (
+	"fmt"
 	"log"
 )
 
@@ -23,6 +24,47 @@ func SendWelcome(toEmail, name string) {
 	}()
 }
 
+// SendP2PInvite notifies a registered user that someone wants to send them a file.
+func SendP2PInvite(toEmail, senderName, fileName string, fileSize int64, token string) error {
+	return Send(Message{
+		To:      toEmail,
+		Subject: senderName + " wants to send you a file on Kagibi",
+		Body:    p2pInviteBody(toEmail, senderName, fileName, fileSize, token),
+	})
+}
+
+func p2pInviteBody(toEmail, senderName, fileName string, fileSize int64, token string) string {
+	sizeStr := formatBytes(fileSize)
+	link := "https://kagibi.cloud/p2p?invite=" + token
+	return "Hello,\n\n" +
+		senderName + " wants to send you a file securely via Kagibi:\n\n" +
+		"  File: " + fileName + " (" + sizeStr + ")\n\n" +
+		"Click the link below to receive it. You will need to be logged in to your Kagibi account:\n\n" +
+		"  " + link + "\n\n" +
+		"This link expires in 24 hours. Once you open it, " + senderName + " will need to be online\n" +
+		"to start the transfer — the file is sent directly between your browsers (P2P).\n\n" +
+		"Kagibi never sees the content of your files.\n\n" +
+		"---\n" +
+		"The Kagibi team\n" +
+		"https://kagibi.cloud\n\n" +
+		"---\n" +
+		"You received this email because " + senderName + " used your address (" + toEmail + ") to send a file invite.\n" +
+		"If you were not expecting this, you can safely ignore it.\n"
+}
+
+func formatBytes(b int64) string {
+	const unit = 1024
+	if b < unit {
+		return fmt.Sprintf("%d B", b)
+	}
+	div, exp := int64(unit), 0
+	for n := b / unit; n >= unit; n /= unit {
+		div *= unit
+		exp++
+	}
+	return fmt.Sprintf("%.1f %cB", float64(b)/float64(div), "KMGTPE"[exp])
+}
+
 func welcomeBody(name string) string {
 	return "Bonjour " + name + ",\n\n" +
 		"Bienvenue sur Kagibi — le cloud 100% opensource où personne ne peut lire vos données.\n\n" +
diff --git a/backend/pkg/migrate.go b/backend/pkg/migrate.go
index 044db74d..695b4077 100644
--- a/backend/pkg/migrate.go
+++ b/backend/pkg/migrate.go
@@ -9,6 +9,8 @@ import (
 	"fmt"
 	"log"
 
+	"kagibi/backend/pkg/emailcrypto"
+
 	"github.com/uptrace/bun"
 )
 
@@ -33,6 +35,9 @@ func Migrate(db *bun.DB) error {
 	if err := migrateUserSettings(ctx, db); err != nil {
 		return err
 	}
+	if err := migrateEmailEncryption(ctx, db); err != nil {
+		return err
+	}
 
 	return nil
 }
@@ -89,6 +94,7 @@ func migrateCoreModels(ctx context.Context, db *bun.DB) error {
 		(*FolderFolderKey)(nil),
 		(*RecentActivity)(nil),
 		(*P2PSignal)(nil),
+		(*P2PInvite)(nil),
 		(*RealtimeEvent)(nil),
 	}
 
@@ -153,6 +159,32 @@ func migrateSchemaAlterations(ctx context.Context, db *bun.DB) error {
 	if err != nil {
 		return fmt.Errorf("failed to update existing paths in share_links: %w", err)
 	}
+
+	// Guest invite columns — added when the invite flow was extended to support
+	// users without a Kagibi account (guest auto-auth via ephemeral JWT).
+	for _, col := range []string{
+		`ALTER TABLE "p2p_invites" ADD COLUMN IF NOT EXISTS "is_guest" BOOLEAN NOT NULL DEFAULT false`,
+		`ALTER TABLE "p2p_invites" ALTER COLUMN "recipient_email" DROP NOT NULL`,
+		// Single-use guard: set atomically on first guest-auth call to prevent token reuse.
+		`ALTER TABLE "p2p_invites" ADD COLUMN IF NOT EXISTS "guest_authed_at" TIMESTAMPTZ`,
+	} {
+		if _, err := db.ExecContext(ctx, col); err != nil {
+			log.Printf("Warning: failed to apply p2p_invites guest column: %v", err)
+		}
+	}
+
+	// The original p2p_signals_signal_type_check constraint omitted 'reject' and 'p2p_ping'.
+	// Drop it and replace with the full allowed set so reject signals can be stored.
+	_, err = db.ExecContext(ctx, `ALTER TABLE "p2p_signals" DROP CONSTRAINT IF EXISTS "p2p_signals_signal_type_check"`)
+	if err != nil {
+		log.Printf("Warning: failed to drop p2p_signals_signal_type_check: %v", err)
+	}
+	_, err = db.ExecContext(ctx, `ALTER TABLE "p2p_signals" ADD CONSTRAINT "p2p_signals_signal_type_check"
+		CHECK (signal_type IN ('offer', 'answer', 'candidate', 'reject', 'p2p_ping', 'invite_accepted'))`)
+	if err != nil {
+		log.Printf("Warning: failed to recreate p2p_signals_signal_type_check: %v", err)
+	}
+
 	return nil
 }
 
@@ -298,6 +330,18 @@ func migrateBillingTables(ctx context.Context, db *bun.DB) error {
 		log.Printf("Warning: failed to create webhook_events table: %v", err)
 	}
 
+	// Colonnes ajoutées après la création initiale des tables — idempotentes via IF NOT EXISTS.
+	// stripe_customers.kagibi_user_id : absent des déploiements antérieurs au schéma courant.
+	// webhook_events.kagibi_user_id  : idem.
+	for _, alteration := range []string{
+		`ALTER TABLE "stripe_customers" ADD COLUMN IF NOT EXISTS "kagibi_user_id" TEXT`,
+		`ALTER TABLE "webhook_events"   ADD COLUMN IF NOT EXISTS "kagibi_user_id" TEXT`,
+	} {
+		if _, err := db.ExecContext(ctx, alteration); err != nil {
+			log.Printf("Warning: failed to alter billing table: %v", err)
+		}
+	}
+
 	// Stripe-related indices
 	for _, idx := range []string{
 		`CREATE INDEX IF NOT EXISTS idx_billing_invoices_user           ON billing_invoices (user_id)`,
@@ -400,3 +444,131 @@ func migrateUserSettings(ctx context.Context, db *bun.DB) error {
 
 	return nil
 }
+
+// migrateEmailEncryption adds email_hash / email_encrypted columns, migrates existing
+// plaintext emails from auth_users and profiles, adds UNIQUE indexes on the hash
+// columns, then nullifies the legacy plaintext email columns.
+//
+// Idempotent: safe to run on every startup. Rows that already have email_hash set
+// are skipped. The old email column is kept (nullable) for rollback convenience.
+func migrateEmailEncryption(ctx context.Context, db *bun.DB) error {
+	// 1. Add new columns (nullable so existing rows don't immediately violate NOT NULL).
+	for _, stmt := range []string{
+		`ALTER TABLE "auth_users" ADD COLUMN IF NOT EXISTS "email_hash"      VARCHAR(64)`,
+		`ALTER TABLE "auth_users" ADD COLUMN IF NOT EXISTS "email_encrypted" TEXT`,
+		`ALTER TABLE "profiles"   ADD COLUMN IF NOT EXISTS "email_hash"      VARCHAR(64)`,
+		`ALTER TABLE "profiles"   ADD COLUMN IF NOT EXISTS "email_encrypted" TEXT`,
+		`ALTER TABLE "p2p_invites" ADD COLUMN IF NOT EXISTS "recipient_email_encrypted" TEXT`,
+	} {
+		if _, err := db.ExecContext(ctx, stmt); err != nil {
+			log.Printf("Warning: migrateEmailEncryption add column: %v", err)
+		}
+	}
+
+	// 2. Migrate existing plaintext emails to hash + encrypted form.
+	migrateEmailRows(ctx, db, "auth_users")
+	migrateEmailRows(ctx, db, "profiles")
+	migrateP2PInviteEmails(ctx, db)
+
+	// 3. Add partial UNIQUE indexes on email_hash (partial so NULL rows are not indexed).
+	for _, stmt := range []string{
+		`CREATE UNIQUE INDEX IF NOT EXISTS idx_auth_users_email_hash ON auth_users (email_hash) WHERE email_hash IS NOT NULL`,
+		`CREATE UNIQUE INDEX IF NOT EXISTS idx_profiles_email_hash   ON profiles   (email_hash) WHERE email_hash IS NOT NULL`,
+	} {
+		if _, err := db.ExecContext(ctx, stmt); err != nil {
+			log.Printf("Warning: migrateEmailEncryption create index: %v", err)
+		}
+	}
+
+	// 4. Relax legacy email column constraints so Go code can INSERT without the old column.
+	//    These are best-effort: fail silently if the column/constraint doesn't exist (new installs).
+	for _, stmt := range []string{
+		`ALTER TABLE "auth_users" ALTER COLUMN "email" DROP NOT NULL`,
+		`ALTER TABLE "auth_users" DROP CONSTRAINT IF EXISTS "auth_users_email_key"`,
+		`DROP INDEX IF EXISTS idx_auth_users_email`,
+		`ALTER TABLE "profiles"   ALTER COLUMN "email" DROP NOT NULL`,
+		`ALTER TABLE "profiles"   DROP CONSTRAINT IF EXISTS "profiles_email_key"`,
+	} {
+		if _, err := db.ExecContext(ctx, stmt); err != nil {
+			log.Printf("Warning: migrateEmailEncryption relax constraints: %v", err)
+		}
+	}
+
+	// 5. Nullify plaintext email data for rows that have been encrypted successfully.
+	for _, stmt := range []string{
+		`UPDATE "auth_users"  SET "email" = NULL WHERE "email_hash" IS NOT NULL AND "email" IS NOT NULL`,
+		`UPDATE "profiles"    SET "email" = NULL WHERE "email_hash" IS NOT NULL AND "email" IS NOT NULL`,
+		`UPDATE "p2p_invites" SET "recipient_email" = NULL WHERE "recipient_email_encrypted" IS NOT NULL AND "recipient_email" IS NOT NULL`,
+	} {
+		if _, err := db.ExecContext(ctx, stmt); err != nil {
+			log.Printf("Warning: migrateEmailEncryption nullify plaintext: %v", err)
+		}
+	}
+
+	return nil
+}
+
+// migrateEmailRows encrypts plaintext emails in the given table (auth_users or profiles).
+// Only rows where email_hash IS NULL and email IS NOT NULL are processed.
+func migrateEmailRows(ctx context.Context, db *bun.DB, table string) {
+	type row struct {
+		ID    string `bun:"id"`
+		Email string `bun:"email"`
+	}
+	var rows []row
+	if err := db.NewSelect().TableExpr(table).
+		Column("id", "email").
+		Where("email IS NOT NULL AND email_hash IS NULL").
+		Scan(ctx, &rows); err != nil {
+		log.Printf("Warning: migrateEmailRows fetch %s: %v", table, err)
+		return
+	}
+	if len(rows) == 0 {
+		return
+	}
+	log.Printf("[migrate] Encrypting %d email(s) in %s…", len(rows), table)
+	for _, r := range rows {
+		h := emailcrypto.Hash(r.Email)
+		enc, err := emailcrypto.Encrypt(r.Email)
+		if err != nil {
+			log.Printf("Warning: migrateEmailRows encrypt %s id=%s: %v", table, r.ID, err)
+			continue
+		}
+		q := fmt.Sprintf(`UPDATE "%s" SET email_hash = ?, email_encrypted = ? WHERE id = ?`, table)
+		if _, err := db.ExecContext(ctx, q, h, enc, r.ID); err != nil {
+			log.Printf("Warning: migrateEmailRows update %s id=%s: %v", table, r.ID, err)
+		}
+	}
+}
+
+// migrateP2PInviteEmails encrypts plaintext recipient_email in p2p_invites.
+func migrateP2PInviteEmails(ctx context.Context, db *bun.DB) {
+	type row struct {
+		ID             int64  `bun:"id"`
+		RecipientEmail string `bun:"recipient_email"`
+	}
+	var rows []row
+	if err := db.NewSelect().TableExpr("p2p_invites").
+		Column("id", "recipient_email").
+		Where("recipient_email IS NOT NULL AND recipient_email_encrypted IS NULL").
+		Scan(ctx, &rows); err != nil {
+		log.Printf("Warning: migrateP2PInviteEmails fetch: %v", err)
+		return
+	}
+	if len(rows) == 0 {
+		return
+	}
+	log.Printf("[migrate] Encrypting %d P2P invite recipient email(s)…", len(rows))
+	for _, r := range rows {
+		enc, err := emailcrypto.Encrypt(r.RecipientEmail)
+		if err != nil {
+			log.Printf("Warning: migrateP2PInviteEmails encrypt id=%d: %v", r.ID, err)
+			continue
+		}
+		if _, err := db.ExecContext(ctx,
+			`UPDATE "p2p_invites" SET recipient_email_encrypted = ? WHERE id = ?`, enc, r.ID,
+		); err != nil {
+			log.Printf("Warning: migrateP2PInviteEmails update id=%d: %v", r.ID, err)
+		}
+	}
+}
diff --git a/backend/pkg/models.go b/backend/pkg/models.go
index fab6ce14..11ede933 100644
--- a/backend/pkg/models.go
+++ b/backend/pkg/models.go
@@ -15,7 +15,7 @@ import (
 // It is set at startup by main.go to avoid an import cycle.
 type WSHub interface {
 	SendEventToUser(userID, eventType string, id int64, payload map[string]any)
-	SendP2PSignalToUser(targetUserID, senderID, signalType string, payload map[string]any)
+	SendP2PSignalToUser(targetUserID, senderID, signalType string, signalID int64, payload map[string]any)
 }
 
 // wsHub is the global hub instance injected at startup.
@@ -27,10 +27,12 @@ func SetWSHub(h WSHub) { wsHub = h }
 type User struct {
 	bun.BaseModel `bun:"table:profiles,alias:p"`
 
-	ID        string `bun:"id,pk"`
-	Name      string `bun:"name,notnull"`
-	Email     string `bun:"email,unique,notnull"`
-	AvatarURL string `bun:"avatar_url,notnull,default:'/avatars/default.png'" json:"avatar_url"`
+	ID             string `bun:"id,pk"`
+	Name           string `bun:"name,notnull"`
+	EmailHash      string `bun:"email_hash,notnull" json:"-"`
+	EmailEncrypted string `bun:"email_encrypted,notnull" json:"-"`
+	Email          string `bun:"-" json:"email"` // virtual: populated by DecryptUserEmail after any DB load
+	AvatarURL      string `bun:"avatar_url,notnull,default:'/avatars/default.png'" json:"avatar_url"`
 	// PasswordHash removed as it is handled by Supabase
 	Salt                       string     `bun:"salt,notnull" json:"salt"`
 	EncryptedMasterKey         string     `bun:"encrypted_master_key,notnull" json:"encrypted_master_key"`
@@ -60,7 +62,7 @@ type UserPlan struct {
 	Plan             string    `bun:"plan,notnull,default:'free'" json:"plan"`
 	StorageLimit     int64     `bun:"storage_limit,notnull,default:21474836480" json:"storage_limit"`
 	StorageUsed      int64     `bun:"storage_used,notnull,default:0" json:"storage_used"`
-	P2PMaxExchanges  int       `bun:"p2p_max_exchanges,notnull,default:5" json:"p2p_max_exchanges"`
+	P2PMaxExchanges  int       `bun:"p2p_max_exchanges,notnull,default:-1" json:"p2p_max_exchanges"`
 	P2PExchangesUsed int       `bun:"p2p_exchanges_used,notnull,default:0" json:"p2p_exchanges_used"`
 	CreatedAt        time.Time `bun:"created_at,nullzero,notnull,default:current_timestamp" json:"created_at"`
 	UpdatedAt        time.Time `bun:"updated_at,nullzero,notnull,default:current_timestamp" json:"updated_at"`
@@ -216,6 +218,30 @@ type RealtimeEvent struct {
 	CreatedAt time.Time      `bun:"created_at,nullzero,notnull,default:current_timestamp"`
 }
 
+// P2PInvite is a time-limited token that lets an authenticated user invite
+// anyone (guest or registered) to a P2P transfer without both being online simultaneously.
+// RecipientEmail is optional — used only for notification; RecipientID is a guest UUID for
+// guest invites (IsGuest=true) or the registered user ID for account-based invites.
+type P2PInvite struct {
+	bun.BaseModel `bun:"table:p2p_invites"`
+
+	ID                      int64      `bun:"id,pk,autoincrement" json:"id"`
+	Token                   string     `bun:"token,unique,notnull" json:"token"`
+	SenderID                string     `bun:"sender_id,notnull" json:"sender_id"`
+	SenderName              string     `bun:"sender_name,notnull" json:"sender_name"`
+	RecipientEmailEncrypted string     `bun:"recipient_email_encrypted" json:"-"` // AES-256-GCM encrypted, nullable
+	RecipientEmail          string     `bun:"-" json:"recipient_email"`           // virtual: decrypted from RecipientEmailEncrypted
+	RecipientID             string     `bun:"recipient_id,notnull" json:"recipient_id"`
+	TransferID              string     `bun:"transfer_id,notnull" json:"transfer_id"`
+	FileName                string     `bun:"file_name,notnull" json:"file_name"`
+	FileSize                int64      `bun:"file_size,notnull" json:"file_size"`
+	IsGuest                 bool       `bun:"is_guest,notnull,default:false" json:"is_guest"`
+	ExpiresAt               time.Time  `bun:"expires_at,notnull" json:"expires_at"`
+	GuestAuthedAt           *time.Time `bun:"guest_authed_at" json:"guest_authed_at,omitempty"`
+	AcceptedAt              *time.Time `bun:"accepted_at" json:"accepted_at,omitempty"`
+	CreatedAt               time.Time  `bun:"created_at,nullzero,notnull,default:current_timestamp" json:"created_at"`
+}
+
 // P2PSignal represents a WebRTC signaling message
 type P2PSignal struct {
 	bun.BaseModel `bun:"table:p2p_signals"`
diff --git a/backend/pkg/monitoring/metrics.go b/backend/pkg/monitoring/metrics.go
index 6730e4cb..8c59022d 100644
--- a/backend/pkg/monitoring/metrics.go
+++ b/backend/pkg/monitoring/metrics.go
@@ -220,6 +220,58 @@ var (
 			Help: "Nombre de connexions WebSocket actives",
 		},
 	)
+
+	// --- Métriques de réplication S3 (backup) ---
+
+	// Counter: Nombre de runs de réplication (label status: "success" / "failure")
+	BackupReplicationRunsTotal = promauto.NewCounterVec(
+		prometheus.CounterOpts{
+			Name: "kagibi_backup_replication_runs_total",
+			Help: "Nombre total de réplications du bucket principal vers le bucket de sauvegarde IA",
+		},
+		[]string{"status"},
+	)
+
+	// Histogram: Durée des runs de réplication
+	BackupReplicationDuration = promauto.NewHistogram(
+		prometheus.HistogramOpts{
+			Name:    "kagibi_backup_replication_duration_seconds",
+			Help:    "Durée des runs de réplication S3 en secondes",
+			Buckets: []float64{30, 60, 120, 300, 600, 1200, 1800, 3600},
+		},
+	)
+
+	// Gauge: Timestamp Unix du dernier run (permet un calcul d'ancienneté dans Grafana)
+	BackupLastRunTimestamp = promauto.NewGauge(
+		prometheus.GaugeOpts{
+			Name: "kagibi_backup_last_run_timestamp_seconds",
+			Help: "Timestamp Unix de la dernière exécution de réplication",
+		},
+	)
+
+	// Gauge: Statut du dernier run (1 = succès, 0 = échec)
+	BackupLastRunStatus = promauto.NewGauge(
+		prometheus.GaugeOpts{
+			Name: "kagibi_backup_last_run_status",
+			Help: "Statut de la dernière réplication (1 = succès, 0 = échec)",
+		},
+	)
+
+	// Gauge: Nombre d'objets copiés lors du dernier run
+	BackupObjectsReplicated = promauto.NewGauge(
+		prometheus.GaugeOpts{
+			Name: "kagibi_backup_objects_replicated",
+			Help: "Nombre d'objets S3 copiés lors de la dernière réplication",
+		},
+	)
+
+	// Gauge: Nombre de versions de sauvegarde actuellement stockées dans le bucket IA
+	BackupVersionsCount = promauto.NewGauge(
+		prometheus.GaugeOpts{
+			Name: "kagibi_backup_versions_count",
+			Help: "Nombre de snapshots de sauvegarde actuellement stockés dans le bucket IA",
+		},
+	)
 )
 
 // RecordRequestMetrics enregistre les métriques pour une requête HTTP
@@ -334,3 +386,18 @@ func IncrementActiveConnections() {
 func DecrementActiveConnections() {
 	ActiveConnections.Dec()
 }
+
+// RecordBackupReplication enregistre le résultat d'un run de réplication S3.
+func RecordBackupReplication(success bool, duration time.Duration, objectCount int) {
+	status := "failure"
+	statusValue := float64(0)
+	if success {
+		status = "success"
+		statusValue = 1
+	}
+	BackupReplicationRunsTotal.WithLabelValues(status).Inc()
+	BackupReplicationDuration.Observe(duration.Seconds())
+	BackupLastRunTimestamp.SetToCurrentTime()
+	BackupLastRunStatus.Set(statusValue)
+	BackupObjectsReplicated.Set(float64(objectCount))
+}
diff --git a/backend/pkg/plans.go b/backend/pkg/plans.go
index c447ac1d..d4e13fe6 100644
--- a/backend/pkg/plans.go
+++ b/backend/pkg/plans.go
@@ -18,10 +18,11 @@ const (
 )
 
 // P2P share limits (max simultaneous active shares)
+// -1 means unlimited
 const (
-	P2PLimitFree     = 5
-	P2PLimitPro      = 50
-	P2PLimitBusiness = 200
+	P2PLimitFree     = -1
+	P2PLimitPro      = -1
+	P2PLimitBusiness = -1
 )
 
 // Pricing in euro cents
diff --git a/docs/README.en.md b/docs/README.en.md
new file mode 100644
index 00000000..dc5dcfd2
--- /dev/null
+++ b/docs/README.en.md
@@ -0,0 +1,294 @@
+# Kagibi
+
+**End-to-end encrypted cloud storage, without compromise.**
+
+Kagibi is a cloud storage platform built around a simple principle: **what you store is yours alone**. The server cannot read your files — not because we promise not to, but because we are technically incapable of doing so.
+This project was developed by [Buuuntyyy] with the assistance of AI for certain development and documentation tasks. The goal is to provide a secure, privacy-respecting, easy-to-use storage solution while being fully transparent about how it works internally.
+
+---
+
+## Philosophy
+
+Most cloud solutions encrypt your data *on the server*, using keys the provider controls. In the event of a breach, a legal request, or internal abuse, your data is exposed.
+
+Kagibi works differently. Your files are encrypted **on your device**, before being sent. The server only receives opaque blobs. Your decryption key never leaves your machine.
+
+This *zero-knowledge* model comes with a trade-off: if you lose your password without a recovery code, your files cannot be recovered. This is an intentional design decision, not a bug.
+
+Kagibi is released under the **AGPLv3** license: the code is auditable, and self-hosting is fully supported.
+
+---
+
+## How Encryption Works
+
+### Key Derivation
+
+When you create an account or log in, Kagibi derives a **master key** (MasterKey) from your password:
+
+```
+Password + random salt (16 bytes)
+        │
+        ▼
+   Argon2id (64 MB memory, 4 iterations)
+        │
+        ▼
+   KEK (Key Encryption Key) — stays in RAM, never leaves the browser
+        │
+        ▼
+   MasterKey — derived, stored in RAM only
+```
+
+The **MasterKey** then encrypts all your files and metadata. The **KEK** wraps the MasterKey so it can be stored server-side in encrypted form (`EncryptedMasterKey`) — unusable without your password.
+
+### File Encryption (upload)
+
+Each file is split into **10 MB chunks**, each individually encrypted with **AES-256-GCM**:
+
+```
+Original file
+        │
+        ▼
+  Split into 10 MB chunks
+        │
+        ▼
+  For each chunk:
+    ├── Unique nonce (8 random bytes + 4 counter bytes)
+    ├── AES-256-GCM encrypt
+    └── Stored format: [Nonce 12B][Ciphertext][Tag 16B]
+        │
+        ▼
+  Direct upload to S3 via pre-signed URLs (TTL 180s)
+  The backend orchestrates, but never touches the content.
+```
+
+### Streaming Decryption (download)
+
+Downloads never reconstruct the entire file in memory:
+
+```
+Pre-signed S3 URL (TTL 5 min)
+        │
+        ▼
+  ReadableStream (fetch)
+        │
+        ▼
+  TransformStream: parse [Nonce][Ciphertext][Tag] → AES-GCM decrypt
+        │
+        ▼
+  FileSystemWritableFileStream or Blob
+  (never temporarily stored in decrypted form)
+```
+
+### What the Server Cannot Do
+
+| Operation | Possible for the server? |
+|-----------|--------------------------|
+| Read file content | No — opaque blobs on S3 |
+| Read a file name | No if the option is enabled — see below |
+| Decrypt share data | No — keys encrypted with RSA-OAEP |
+| Access your master key | No — never transmitted to the backend |
+
+### Filename Encryption (opt-in)
+
+At registration, you can enable encryption of file and folder names. This option is independent of content encryption (always active).
+
+**When disabled (default)**: names are stored in plaintext in the database and S3 bucket. The search bar is functional.
+
+**When enabled**:
+
+```
+Filename (e.g. "report.pdf")
+        │
+        ▼
+  AES-256-GCM with MasterKey
+  Random IV (12 bytes, CSPRNG)
+        │
+        ▼
+  base64url encoding (no padding)
+  → "aB3xK7mQ..." (opaque, no special characters)
+        │
+  ┌─────┴─────┐
+  │           │
+  PostgreSQL  OVH S3
+  name = "aB3xK7..."   users/{id}/enc_path/aB3xK7...
+```
+
+- The browser decrypts names locally on every directory load.
+- The search bar is disabled: since stored names are opaque blobs, a server-side `ILIKE` search has no effect.
+- This choice is permanent and set at account creation.
+
+---
+
+## The Three Sharing Systems
+
+### 1. Link Sharing
+
+You generate a public link that anyone can open, without an account.
+
+**How it works:**
+
+1. Kagibi generates a random `ShareKey`, then encrypts the file key with it.
+2. A random token (32 bytes) is created and associated with the link.
+3. The link can be protected by a password (bcrypt-hashed) and/or time-limited (1 to 30 days).
+4. The recipient visits the link; Kagibi returns the encrypted blob and the `ShareKey`.
+5. Their browser decrypts the file locally.
+
+The server stores: the token, the ShareKey-encrypted file key, the optional password hash, and the expiration date. It cannot read the file.
+
+---
+
+### 2. Friend Sharing (user-to-user)
+
+Direct sharing between accounts uses asymmetric cryptography to ensure only the recipient can decrypt.
+
+**How it works:**
+
+1. At account creation, each user generates a **4096-bit RSA-OAEP** key pair.
+   - The public key is stored in plaintext on the server.
+   - The private key is encrypted with the MasterKey, then stored on the server.
+
+2. To add a friend, you use their **friend code** (8 alphanumeric characters, e.g. `#A7KD92XZ`), unique per account.
+
+3. To share a file:
+   - Kagibi retrieves the recipient's RSA public key.
+   - The `FileKey` (the file's AES key) is encrypted with that public key.
+   - The encrypted result is stored in the database, linked to the share.
+
+4. When the recipient accesses the file:
+   - They retrieve the encrypted `FileKey`.
+   - Their browser decrypts it using their RSA private key (itself decrypted with their MasterKey).
+   - The file is decrypted locally.
+
+The server stores: the encrypted `FileKey` (unusable without the recipient's private key), friendship relations, and permissions.
+
+---
+
+### 3. P2P Transfer (device-to-device)
+
+P2P transfer sends files directly from one device to another, bypassing server storage.
+**However, modern internet networks often make direct connections impossible (NAT, firewalls). Kagibi uses a TURN server to relay data when necessary, while maintaining end-to-end encryption.**
+In practice, devices establish a WebRTC DataChannel connection, and data is encrypted with AES-GCM before being sent. The server only sees encrypted data streams, even during TURN relay.
+
+**How it works:**
+
+1. Both devices establish a **WebRTC DataChannel** connection via a signaling server (WebSocket).
+2. The backend relays only WebRTC negotiation messages (offer/answer/ICE candidates), temporarily stored in the `p2p_signals` table for offline delivery.
+3. Once the peer-to-peer connection is established, data flows **directly** between devices, encrypted at the application layer with AES-GCM.
+4. The server sees neither the transferred content nor the file metadata.
+
+P2P transfers count against the user's plan (`p2p_max_exchanges`).
+
+---
+
+## What Is Stored on the Server
+
+### Account Data
+
+| Data | Format | Why |
+|------|--------|-----|
+| Email address | Plaintext | Authentication |
+| Display name | Plaintext | User interface |
+| Password | bcrypt (cost 12) | Login verification |
+| Argon2id salt | Random (16 bytes) | Client-side KEK derivation |
+| `EncryptedMasterKey` | Encrypted (KEK) | MasterKey restoration at login |
+| RSA public key | Plaintext | Encrypting incoming shares |
+| `EncryptedPrivateKey` | Encrypted (MasterKey) | Decrypting received shares |
+| Recovery code | SHA-256 (hash) | Password-less reset |
+| Friend code | Plaintext | Friend discovery |
+
+### File Metadata
+
+| Data | Format |
+|------|--------|
+| Filename | Plaintext (default) or AES-GCM encrypted if enabled at registration |
+| Size (bytes) | Plaintext |
+| MIME type | Plaintext |
+| Creation/modification dates | Plaintext |
+| File key (`EncryptedKey`) | Encrypted (MasterKey) |
+
+### Social and Sharing Data
+
+- Friend list and status (pending / accepted)
+- Active shares: resource identifier + encrypted key + permissions
+- Public links: token + encrypted key + expiration + optional password hash
+- Recent activity (accessed files — optional)
+
+### What Is Not Collected
+
+- File content (never in plaintext on the server)
+- Browsing or search history
+- IP addresses (except temporary logging for security/abuse purposes)
+- Analytics or tracking pixels
+- Device or browser information
+
+---
+
+## Account Recovery
+
+A recovery code is generated at registration. It is separate from the password and allows regaining access to the MasterKey if the password is lost.
+
+```
+Recovery code (8 characters)
+        │
+        ├── SHA-256(code) → stored as RecoveryHash (verification)
+        │
+        └── Argon2id(code, recovery_salt) → decrypts EncryptedMasterKeyRecovery
+```
+
+If the recovery code is also lost, the data is **permanently inaccessible**. This is not a bug — it is the zero-knowledge guarantee.
+
+---
+
+## Data Deletion
+
+- Account deletion triggers an immediate **logical deletion** (marking `deleted_at`).
+- An asynchronous cleanup process performs **permanent physical deletion** after 30 days: database rows, S3 blobs.
+- GDPR compliance (Articles 17 and 20): right to erasure and data portability.
+
+---
+
+## Tech Stack
+
+| Component | Technology |
+|-----------|------------|
+| Frontend | Vue 3.5, Vite 7, Pinia |
+| Backend | Go 1.21+, Gin |
+| Database | PostgreSQL 16+ |
+| Cache / rate-limiting | Redis 7+ |
+| Object storage | OVH S3 (AWS-compatible) |
+| Encryption | AES-256-GCM, RSA-OAEP 4096, Argon2id |
+| Authentication | JWT HS256, TOTP (MFA) |
+| P2P | WebRTC DataChannel, TURN/STUN (Coturn) |
+| Deployment | Docker Compose (dev), Kubernetes / Rancher (prod) |
+
+---
+
+## Quick Start (development)
+
+**Prerequisites:** Docker, Docker Compose
+
+```bash
+git clone https://github.com/Buuuntyyy/Kagibi.git
+cd Kagibi
+cp backend/.env.example backend/.env # Fill in S3 variables, JWT_SECRET, etc.
+cp frontend/.env.example frontend/.env # Fill in VITE_BACKEND_URL=http://localhost:8080
+
+cd backend
+go run main.go
+
+cd frontend
+npm install
+npm run dev
+```
+
+Frontend: `http://localhost` — Backend: `http://localhost:8080`
+
+For detailed configuration (environment variables, S3, Kubernetes), see [`backend/README.md`](../backend/README.md).
+
+---
+
+## License
+
+AGPLv3 — see [`LICENSE`](../LICENSE).
+
+Any modification of the code, including in a SaaS context, must be published under the same license.
diff --git a/docs/README.fr.md b/docs/README.fr.md
new file mode 100644
index 00000000..64608ff7
--- /dev/null
+++ b/docs/README.fr.md
@@ -0,0 +1,294 @@
+# Kagibi
+
+**Stockage cloud chiffré de bout en bout, sans compromis.**
+
+Kagibi est une plateforme de stockage cloud conçue autour d'un principe simple : **ce que vous stockez ne regarde que vous**. Le serveur ne peut pas lire vos fichiers. Pas parce que nous promettons de ne pas le faire — mais parce que nous n'en avons pas la capacité technique.
+Ce projet a été développé par [Buuuntyyy] avec l'aide d'intelligence artificielle pour certaines tâches de développement et de documentation. L'objectif est de fournir une solution de stockage sécurisée, respectueuse de la vie privée, et facile à utiliser, tout en étant transparente sur son fonctionnement interne.
+
+---
+
+## Philosophie
+
+La plupart des solutions cloud chiffrent vos données *sur le serveur*, avec des clés que le fournisseur contrôle. En cas de faille, de réquisition judiciaire, ou d'abus interne, vos données sont exposées.
+
+Kagibi fonctionne différemment. Vos fichiers sont chiffrés **sur votre appareil**, avant d'être envoyés. Le serveur ne reçoit que des blocs opaques. Votre clé de déchiffrement ne quitte jamais votre machine.
+
+Ce modèle dit *zero-knowledge* a un coût : il n'est pas possible de récupérer vos fichiers si vous perdez votre mot de passe sans code de récupération. C'est un compromis assumé, pas un bug.
+
+Kagibi est publié sous licence **AGPLv3** : le code est auditable, le déploiement est autonome si vous le souhaitez.
+
+---
+
+## Comment fonctionne le chiffrement
+
+### Dérivation des clés
+
+Quand vous créez un compte ou vous connectez, Kagibi dérive une **clé maître** (MasterKey) à partir de votre mot de passe :
+
+```
+Mot de passe + sel aléatoire (16 octets)
+        │
+        ▼
+   Argon2id (64 Mo mémoire, 4 passages)
+        │
+        ▼
+   KEK (Key Encryption Key) — reste en RAM, ne quitte jamais le navigateur
+        │
+        ▼
+   MasterKey — dérivée, stockée uniquement en RAM
+```
+
+La **MasterKey** chiffre ensuite tous vos fichiers et métadonnées. La **KEK** enveloppe la MasterKey pour la stocker côté serveur sous forme chiffrée (`EncryptedMasterKey`) — inutilisable sans votre mot de passe.
+
+### Chiffrement des fichiers (upload)
+
+Chaque fichier est découpé en **chunks de 10 Mo**, chiffrés individuellement avec **AES-256-GCM** :
+
+```
+Fichier original
+        │
+        ▼
+  Découpage en chunks de 10 Mo
+        │
+        ▼
+  Pour chaque chunk :
+    ├── Nonce unique (8 octets aléatoires + 4 octets compteur)
+    ├── AES-256-GCM encrypt
+    └── Format stocké : [Nonce 12B][Ciphertext][Tag 16B]
+        │
+        ▼
+  Upload direct vers S3 via URLs présignées (TTL 180s)
+  Le backend orchestre, mais ne touche jamais le contenu.
+```
+
+### Déchiffrement en streaming (téléchargement)
+
+Le téléchargement ne reconstitue jamais le fichier entier en mémoire :
+
+```
+URL présignée S3 (TTL 5 min)
+        │
+        ▼
+  ReadableStream (fetch)
+        │
+        ▼
+  TransformStream : parse [Nonce][Ciphertext][Tag] → AES-GCM decrypt
+        │
+        ▼
+  FileSystemWritableFileStream ou Blob
+  (jamais stocké déchiffré de façon temporaire)
+```
+
+### Ce que le serveur ne peut pas faire
+
+| Opération | Possible pour le serveur ? |
+|-----------|---------------------------|
+| Lire le contenu d'un fichier | Non — blobs opaques sur S3 |
+| Lire le nom d'un fichier | Non si l'option est activée — voir ci-dessous |
+| Déchiffrer les données d'un partage | Non — clés chiffrées avec RSA-OAEP |
+| Accéder à votre clé maître | Non — jamais transmise au backend |
+
+### Chiffrement des noms de fichiers (opt-in)
+
+Lors de l'inscription, il est possible d'activer le chiffrement des noms de fichiers et dossiers. Cette option est indépendante du chiffrement du contenu (toujours actif).
+
+**Quand l'option est désactivée (défaut)** : les noms sont stockés en clair en base de données et dans le bucket S3. La barre de recherche est fonctionnelle.
+
+**Quand l'option est activée** :
+
+```
+Nom du fichier (ex. "rapport.pdf")
+        │
+        ▼
+  AES-256-GCM avec la MasterKey
+  IV aléatoire (12 octets, CSPRNG)
+        │
+        ▼
+  Encodage base64url (pas de padding)
+  → "aB3xK7mQ..." (opaque, pas de caractère spécial)
+        │
+  ┌─────┴─────┐
+  │           │
+  PostgreSQL  S3 OVH
+  name = "aB3xK7..."   users/{id}/enc_path/aB3xK7...
+```
+
+- Le navigateur déchiffre les noms localement à chaque chargement de répertoire.
+- La barre de recherche est désactivée : les noms stockés étant des blobs opaques, une recherche `ILIKE` côté serveur est sans effet.
+- Le choix est permanent à la création du compte.
+
+---
+
+## Les trois systèmes de partage
+
+### 1. Partage par lien
+
+Vous générez un lien public que n'importe qui peut ouvrir, sans compte.
+
+**Fonctionnement :**
+
+1. Kagibi génère une `ShareKey` aléatoire, puis chiffre la clé du fichier avec elle.
+2. Un token aléatoire (32 octets) est créé et associé au lien.
+3. Le lien peut être protégé par un mot de passe (haché en bcrypt) et/ou limité dans le temps (1 à 30 jours).
+4. Le destinataire visite le lien, Kagibi lui retourne le blob chiffré et la `ShareKey`.
+5. Son navigateur déchiffre le fichier localement.
+
+Le serveur stocke : le token, la clé chiffrée avec la ShareKey, le hash du mot de passe optionnel, la date d'expiration. Il ne peut pas lire le fichier.
+
+---
+
+### 2. Partage avec un ami (utilisateur à utilisateur)
+
+Le partage direct entre comptes utilise la cryptographie asymétrique pour garantir que seul le destinataire peut déchiffrer.
+
+**Fonctionnement :**
+
+1. À la création de compte, chaque utilisateur génère une paire de clés **RSA-OAEP 4096 bits**.
+   - La clé publique est stockée en clair sur le serveur.
+   - La clé privée est chiffrée avec la MasterKey, puis stockée sur le serveur.
+
+2. Pour ajouter un ami, on utilise son **code ami** (8 caractères alphanumériques, ex. `#A7KD92XZ`), unique par compte.
+
+3. Pour partager un fichier :
+   - Kagibi récupère la clé publique RSA du destinataire.
+   - La `FileKey` (clé AES du fichier) est chiffrée avec cette clé publique.
+   - Le résultat chiffré est stocké en base, rattaché au partage.
+
+4. Quand le destinataire accède au fichier :
+   - Il récupère la `FileKey` chiffrée.
+   - Son navigateur la déchiffre avec sa clé privée RSA (déchiffrée elle-même avec sa MasterKey).
+   - Le fichier est déchiffré localement.
+
+Le serveur stocke : la `FileKey` chiffrée (inutilisable sans la clé privée du destinataire), les relations d'amitié, les permissions.
+
+---
+
+### 3. Transfert P2P (appareil à appareil)
+
+Le transfert P2P envoie des fichiers directement d'un appareil à un autre, sans passer par le stockage serveur.
+**Toutefois, les réseaux internet modernes rendent souvent les connexions directes impossibles (NAT, pare-feu). Kagibi utilise un serveur TURN pour relayer les données quand nécessaire, mais le chiffrement de bout en bout est maintenu.**
+Concrètement, les appareils établissent une connexion WebRTC DataChannel, et les données sont chiffrées en AES-GCM avant d'être envoyées. Le serveur ne voit que des flux de données chiffrés, même lors du relais TURN.
+
+**Fonctionnement :**
+
+1. Les deux appareils établissent une connexion **WebRTC DataChannel** via un serveur de signalisation (WebSocket).
+2. Le backend relaie uniquement les messages de négociation WebRTC (offer/answer/ICE candidates), stockés temporairement dans la table `p2p_signals` pour livraison hors-ligne.
+3. Une fois la connexion pair-à-pair établie, les données transitent **directement** entre les appareils, chiffrées en AES-GCM par la couche applicative.
+4. Le serveur ne voit ni le contenu transféré, ni les métadonnées du fichier.
+
+Les transferts P2P sont comptabilisés par plan utilisateur (`p2p_max_exchanges`).
+
+---
+
+## Ce qui est stocké sur le serveur
+
+### Données de compte
+
+| Donnée | Format | Pourquoi |
+|--------|--------|---------|
+| Adresse email | Clair | Authentification |
+| Nom d'affichage | Clair | Interface utilisateur |
+| Mot de passe | bcrypt (coût 12) | Vérification à la connexion |
+| Sel Argon2id | Aléatoire (16 octets) | Dérivation de la KEK côté client |
+| `EncryptedMasterKey` | Chiffré (KEK) | Restauration de la MasterKey à la connexion |
+| Clé publique RSA | Clair | Chiffrement des partages entrants |
+| `EncryptedPrivateKey` | Chiffré (MasterKey) | Déchiffrement des partages reçus |
+| Code de récupération | SHA-256 (hash) | Réinitialisation sans email |
+| Code ami | Clair | Recherche d'amis |
+
+### Métadonnées de fichiers
+
+| Donnée | Format |
+|--------|--------|
+| Nom du fichier | Clair (défaut) ou Chiffré AES-GCM si option activée à l'inscription |
+| Taille (octets) | Clair |
+| Type MIME | Clair |
+| Dates de création/modification | Clair |
+| Clé de fichier (`EncryptedKey`) | Chiffré (MasterKey) |
+
+### Données sociales et de partage
+
+- Liste d'amis et statut (en attente / accepté)
+- Partages actifs : identifiant de ressource + clé chiffrée + permissions
+- Liens publics : token + clé chiffrée + expiration + hash de mot de passe optionnel
+- Activités récentes (fichiers accédés — optionnel)
+
+### Ce qui n'est pas collecté
+
+- Contenu des fichiers (jamais en clair sur le serveur)
+- Historique de navigation ou de recherche
+- Adresses IP (sauf journalisation temporaire à des fins de sécurité/abus)
+- Données analytiques ou pixels de tracking
+- Informations sur l'appareil ou le navigateur
+
+---
+
+## Récupération de compte
+
+Un code de récupération est généré à l'inscription. Il est distinct du mot de passe et permet de retrouver l'accès à la MasterKey si le mot de passe est perdu.
+
+```
+Code de récupération (8 caractères)
+        │
+        ├── SHA-256(code) → stocké comme RecoveryHash (vérification)
+        │
+        └── Argon2id(code, recovery_salt) → déchiffre EncryptedMasterKeyRecovery
+```
+
+Si le code de récupération est également perdu, les données sont **définitivement inaccessibles**. Ce n'est pas un bug — c'est la garantie zero-knowledge.
+
+---
+
+## Suppression des données
+
+- La suppression d'un compte déclenche une **suppression logique** immédiate (marquage `deleted_at`).
+- Un processus de nettoyage asynchrone effectue la **suppression physique définitive** au bout de 30 jours : lignes en base, blobs S3.
+- Conformité RGPD (articles 17 et 20) : droit à l'effacement et à la portabilité.
+
+---
+
+## Stack technique
+
+| Composant | Technologie |
+|-----------|-------------|
+| Frontend | Vue 3.5, Vite 7, Pinia |
+| Backend | Go 1.21+, Gin |
+| Base de données | PostgreSQL 16+ |
+| Cache / rate-limit | Redis 7+ |
+| Stockage objet | OVH S3 (compatible AWS) |
+| Chiffrement | AES-256-GCM, RSA-OAEP 4096, Argon2id |
+| Authentification | JWT HS256, TOTP (MFA) |
+| P2P | WebRTC DataChannel, TURN/STUN (Coturn) |
+| Déploiement | Docker Compose (dev), Kubernetes / Rancher (prod) |
+
+---
+
+## Démarrage rapide (développement)
+
+**Prérequis :** Docker, Docker Compose
+
+```bash
+git clone https://github.com/Buuuntyyy/Kagibi.git
+cd Kagibi
+cp backend/.env.example backend/.env # Configurer les variables d'environnement (voir backend/README.md)
+cp frontend/.env.example frontend/.env # Configurer les variables d'environnement (voir frontend/README.md)
+
+cd backend
+go run main.go
+
+cd frontend
+npm install
+npm run dev
+```
+
+Frontend : `http://localhost` — Backend : `http://localhost:8080`
+
+Pour la configuration détaillée (variables d'environnement, S3, Kubernetes), voir [`backend/README.md`](../backend/README.md).
+
+---
+
+## Licence
+
+AGPLv3 — voir [`LICENSE`](../LICENSE).
+
+Toute modification du code, y compris dans un contexte SaaS, doit être publiée sous la même licence.
diff --git a/frontend/default.conf b/frontend/default.conf
index a3a59f2c..89679df7 100644
--- a/frontend/default.conf
+++ b/frontend/default.conf
@@ -22,12 +22,17 @@ server {
         add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
     }
 
-    # Runtime environment variables
+    # Runtime environment variables (never cache)
     location = /env.js {
         expires -1;
         add_header Cache-Control "no-store, no-cache, must-revalidate";
     }
 
+    location = /config.js {
+        expires -1;
+        add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0";
+    }
+
     # Vue Router - redirect all to index.html
     location / {
         try_files $uri $uri/ /index.html;
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index 5c9a4e5f..dd5cb661 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -9,10 +9,10 @@
       "version": "0.0.0",
       "dependencies": {
         "@supabase/supabase-js": "^2.90.1",
-        "axios": "^1.13.2",
+        "axios": "^1.15.1",
         "fflate": "^0.8.2",
         "libsodium-wrappers-sumo": "^0.7.15",
-        "lodash": "^4.17.21",
+        "lodash": "^4.18.1",
         "lucide-vue-next": "^1.0.0",
         "pdfjs-dist": "^5.4.530",
         "pinia": "^3.0.4",
@@ -25,26 +25,12 @@
         "vue-router": "^4.6.3"
       },
       "devDependencies": {
-        "@vitejs/plugin-vue": "^6.0.2",
-        "@vitest/coverage-v8": "^1.6.1",
+        "@vitejs/plugin-vue": "^6.0.6",
+        "@vitest/coverage-v8": "^4.1.4",
         "@vue/test-utils": "^2.4.3",
         "jsdom": "^23.0.0",
-        "vite": "^7.2.4",
-        "vitest": "^1.6.1"
-      }
-    },
-    "node_modules/@ampproject/remapping": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/@ampproject/remapping/-/remapping-2.3.0.tgz",
-      "integrity": "sha512-30iZtAPgz+LTIYoeivqYo853f02jBYSd5uGnGpkFV0M3xOt9aN73erkgYAmZU43x4VfqcnLxW9Kpg3R5LC4YYw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@jridgewell/gen-mapping": "^0.3.5",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      },
-      "engines": {
-        "node": ">=6.0.0"
+        "vite": "^8.0.9",
+        "vitest": "^4.1.4"
       }
     },
     "node_modules/@asamuzakjp/css-color": {
@@ -92,12 +78,12 @@
       }
     },
     "node_modules/@babel/parser": {
-      "version": "7.28.5",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.5.tgz",
-      "integrity": "sha512-KKBU1VGYR7ORr3At5HAtUQ+TV3SzRCXmA/8OdDZiLDBIZxVyzXuztPjfLd3BV1PRAQGCMWWSHYhL0F8d5uHBDQ==",
+      "version": "7.29.2",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.29.2.tgz",
+      "integrity": "sha512-4GgRzy/+fsBa72/RZVJmGKPmZu9Byn8o4MoLpmNe1m8ZfYnz5emHLQz3U4gLud6Zwl0RZIcgiLD7Uq7ySFuDLA==",
       "license": "MIT",
       "dependencies": {
-        "@babel/types": "^7.28.5"
+        "@babel/types": "^7.29.0"
       },
       "bin": {
         "parser": "bin/babel-parser.js"
@@ -107,9 +93,9 @@
       }
     },
     "node_modules/@babel/types": {
-      "version": "7.28.5",
-      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.28.5.tgz",
-      "integrity": "sha512-qQ5m48eI/MFLQ5PxQj4PFaprjyCTLI37ElWMmNs0K8Lk3dVeOdNpB3ks8jc7yM5CDmVC73eMVk/trk3fgmrUpA==",
+      "version": "7.29.0",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.29.0.tgz",
+      "integrity": "sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==",
       "license": "MIT",
       "dependencies": {
         "@babel/helper-string-parser": "^7.27.1",
@@ -120,11 +106,14 @@
       }
     },
     "node_modules/@bcoe/v8-coverage": {
-      "version": "0.2.3",
-      "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz",
-      "integrity": "sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==",
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@bcoe/v8-coverage/-/v8-coverage-1.0.2.tgz",
+      "integrity": "sha512-6zABk/ECA/QYSCQ1NGiVwwbQerUCZ+TQbp64Q3AgmfNvurHH0j8TtXa1qbShXA6qqkpAj4V5W8pP6mLe1mcMqA==",
       "dev": true,
-      "license": "MIT"
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
     },
     "node_modules/@csstools/color-helpers": {
       "version": "5.1.0",
@@ -241,10 +230,44 @@
         "node": ">=18"
       }
     },
+    "node_modules/@emnapi/core": {
+      "version": "1.9.2",
+      "resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.9.2.tgz",
+      "integrity": "sha512-UC+ZhH3XtczQYfOlu3lNEkdW/p4dsJ1r/bP7H8+rhao3TTTMO1ATq/4DdIi23XuGoFY+Cz0JmCbdVl0hz9jZcA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/wasi-threads": "1.2.1",
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.9.2",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.9.2.tgz",
+      "integrity": "sha512-3U4+MIWHImeyu1wnmVygh5WlgfYDtyf0k8AbLhMFxOipihf6nrWC4syIm/SwEeec0mNSafiiNnMJwbza/Is6Lw==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@emnapi/wasi-threads": {
+      "version": "1.2.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz",
+      "integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@esbuild/aix-ppc64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz",
-      "integrity": "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.28.0.tgz",
+      "integrity": "sha512-lhRUCeuOyJQURhTxl4WkpFTjIsbDayJHih5kZC1giwE+MhIzAb7mEsQMqMf18rHLsrb5qI1tafG20mLxEWcWlA==",
       "cpu": [
         "ppc64"
       ],
@@ -254,14 +277,15 @@
       "os": [
         "aix"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/android-arm": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.25.12.tgz",
-      "integrity": "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.28.0.tgz",
+      "integrity": "sha512-wqh0ByljabXLKHeWXYLqoJ5jKC4XBaw6Hk08OfMrCRd2nP2ZQ5eleDZC41XHyCNgktBGYMbqnrJKq/K/lzPMSQ==",
       "cpu": [
         "arm"
       ],
@@ -271,14 +295,15 @@
       "os": [
         "android"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/android-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.25.12.tgz",
-      "integrity": "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.28.0.tgz",
+      "integrity": "sha512-+WzIXQOSaGs33tLEgYPYe/yQHf0WTU0X42Jca3y8NWMbUVhp7rUnw+vAsRC/QiDrdD31IszMrZy+qwPOPjd+rw==",
       "cpu": [
         "arm64"
       ],
@@ -288,14 +313,15 @@
       "os": [
         "android"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/android-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.25.12.tgz",
-      "integrity": "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.28.0.tgz",
+      "integrity": "sha512-+VJggoaKhk2VNNqVL7f6S189UzShHC/mR9EE8rDdSkdpN0KflSwWY/gWjDrNxxisg8Fp1ZCD9jLMo4m0OUfeUA==",
       "cpu": [
         "x64"
       ],
@@ -305,14 +331,15 @@
       "os": [
         "android"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/darwin-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.25.12.tgz",
-      "integrity": "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.28.0.tgz",
+      "integrity": "sha512-0T+A9WZm+bZ84nZBtk1ckYsOvyA3x7e2Acj1KdVfV4/2tdG4fzUp91YHx+GArWLtwqp77pBXVCPn2We7Letr0Q==",
       "cpu": [
         "arm64"
       ],
@@ -322,14 +349,15 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/darwin-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.25.12.tgz",
-      "integrity": "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.28.0.tgz",
+      "integrity": "sha512-fyzLm/DLDl/84OCfp2f/XQ4flmORsjU7VKt8HLjvIXChJoFFOIL6pLJPH4Yhd1n1gGFF9mPwtlN5Wf82DZs+LQ==",
       "cpu": [
         "x64"
       ],
@@ -339,14 +367,15 @@
       "os": [
         "darwin"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/freebsd-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.25.12.tgz",
-      "integrity": "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.28.0.tgz",
+      "integrity": "sha512-l9GeW5UZBT9k9brBYI+0WDffcRxgHQD8ShN2Ur4xWq/NFzUKm3k5lsH4PdaRgb2w7mI9u61nr2gI2mLI27Nh3Q==",
       "cpu": [
         "arm64"
       ],
@@ -356,14 +385,15 @@
       "os": [
         "freebsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/freebsd-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.25.12.tgz",
-      "integrity": "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.28.0.tgz",
+      "integrity": "sha512-BXoQai/A0wPO6Es3yFJ7APCiKGc1tdAEOgeTNy3SsB491S3aHn4S4r3e976eUnPdU+NbdtmBuLncYir2tMU9Nw==",
       "cpu": [
         "x64"
       ],
@@ -373,14 +403,15 @@
       "os": [
         "freebsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-arm": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.25.12.tgz",
-      "integrity": "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.28.0.tgz",
+      "integrity": "sha512-CjaaREJagqJp7iTaNQjjidaNbCKYcd4IDkzbwwxtSvjI7NZm79qiHc8HqciMddQ6CKvJT6aBd8lO9kN/ZudLlw==",
       "cpu": [
         "arm"
       ],
@@ -390,14 +421,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.25.12.tgz",
-      "integrity": "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.28.0.tgz",
+      "integrity": "sha512-RVyzfb3FWsGA55n6WY0MEIEPURL1FcbhFE6BffZEMEekfCzCIMtB5yyDcFnVbTnwk+CLAgTujmV/Lgvih56W+A==",
       "cpu": [
         "arm64"
       ],
@@ -407,14 +439,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-ia32": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.25.12.tgz",
-      "integrity": "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.28.0.tgz",
+      "integrity": "sha512-KBnSTt1kxl9x70q+ydterVdl+Cn0H18ngRMRCEQfrbqdUuntQQ0LoMZv47uB97NljZFzY6HcfqEZ2SAyIUTQBQ==",
       "cpu": [
         "ia32"
       ],
@@ -424,14 +457,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-loong64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.25.12.tgz",
-      "integrity": "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.28.0.tgz",
+      "integrity": "sha512-zpSlUce1mnxzgBADvxKXX5sl8aYQHo2ezvMNI8I0lbblJtp8V4odlm3Yzlj7gPyt3T8ReksE6bK+pT3WD+aJRg==",
       "cpu": [
         "loong64"
       ],
@@ -441,14 +475,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-mips64el": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.25.12.tgz",
-      "integrity": "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.28.0.tgz",
+      "integrity": "sha512-2jIfP6mmjkdmeTlsX/9vmdmhBmKADrWqN7zcdtHIeNSCH1SqIoNI63cYsjQR8J+wGa4Y5izRcSHSm8K3QWmk3w==",
       "cpu": [
         "mips64el"
       ],
@@ -458,14 +493,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-ppc64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.25.12.tgz",
-      "integrity": "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.28.0.tgz",
+      "integrity": "sha512-bc0FE9wWeC0WBm49IQMPSPILRocGTQt3j5KPCA8os6VprfuJ7KD+5PzESSrJ6GmPIPJK965ZJHTUlSA6GNYEhg==",
       "cpu": [
         "ppc64"
       ],
@@ -475,14 +511,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-riscv64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.25.12.tgz",
-      "integrity": "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.28.0.tgz",
+      "integrity": "sha512-SQPZOwoTTT/HXFXQJG/vBX8sOFagGqvZyXcgLA3NhIqcBv1BJU1d46c0rGcrij2B56Z2rNiSLaZOYW5cUk7yLQ==",
       "cpu": [
         "riscv64"
       ],
@@ -492,14 +529,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-s390x": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.25.12.tgz",
-      "integrity": "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.28.0.tgz",
+      "integrity": "sha512-SCfR0HN8CEEjnYnySJTd2cw0k9OHB/YFzt5zgJEwa+wL/T/raGWYMBqwDNAC6dqFKmJYZoQBRfHjgwLHGSrn3Q==",
       "cpu": [
         "s390x"
       ],
@@ -509,14 +547,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/linux-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.25.12.tgz",
-      "integrity": "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.28.0.tgz",
+      "integrity": "sha512-us0dSb9iFxIi8srnpl931Nvs65it/Jd2a2K3qs7fz2WfGPHqzfzZTfec7oxZJRNPXPnNYZtanmRc4AL/JwVzHQ==",
       "cpu": [
         "x64"
       ],
@@ -526,14 +565,15 @@
       "os": [
         "linux"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/netbsd-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.25.12.tgz",
-      "integrity": "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.28.0.tgz",
+      "integrity": "sha512-CR/RYotgtCKwtftMwJlUU7xCVNg3lMYZ0RzTmAHSfLCXw3NtZtNpswLEj/Kkf6kEL3Gw+BpOekRX0BYCtklhUw==",
       "cpu": [
         "arm64"
       ],
@@ -543,14 +583,15 @@
       "os": [
         "netbsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/netbsd-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.25.12.tgz",
-      "integrity": "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.28.0.tgz",
+      "integrity": "sha512-nU1yhmYutL+fQ71Kxnhg8uEOdC0pwEW9entHykTgEbna2pw2dkbFSMeqjjyHZoCmt8SBkOSvV+yNmm94aUrrqw==",
       "cpu": [
         "x64"
       ],
@@ -560,14 +601,15 @@
       "os": [
         "netbsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/openbsd-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.25.12.tgz",
-      "integrity": "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.28.0.tgz",
+      "integrity": "sha512-cXb5vApOsRsxsEl4mcZ1XY3D4DzcoMxR/nnc4IyqYs0rTI8ZKmW6kyyg+11Z8yvgMfAEldKzP7AdP64HnSC/6g==",
       "cpu": [
         "arm64"
       ],
@@ -577,14 +619,15 @@
       "os": [
         "openbsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/openbsd-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.25.12.tgz",
-      "integrity": "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.28.0.tgz",
+      "integrity": "sha512-8wZM2qqtv9UP3mzy7HiGYNH/zjTA355mpeuA+859TyR+e+Tc08IHYpLJuMsfpDJwoLo1ikIJI8jC3GFjnRClzA==",
       "cpu": [
         "x64"
       ],
@@ -594,14 +637,15 @@
       "os": [
         "openbsd"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/openharmony-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.25.12.tgz",
-      "integrity": "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.28.0.tgz",
+      "integrity": "sha512-FLGfyizszcef5C3YtoyQDACyg95+dndv79i2EekILBofh5wpCa1KuBqOWKrEHZg3zrL3t5ouE5jgr94vA+Wb2w==",
       "cpu": [
         "arm64"
       ],
@@ -611,14 +655,15 @@
       "os": [
         "openharmony"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/sunos-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.25.12.tgz",
-      "integrity": "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.28.0.tgz",
+      "integrity": "sha512-1ZgjUoEdHZZl/YlV76TSCz9Hqj9h9YmMGAgAPYd+q4SicWNX3G5GCyx9uhQWSLcbvPW8Ni7lj4gDa1T40akdlw==",
       "cpu": [
         "x64"
       ],
@@ -628,14 +673,15 @@
       "os": [
         "sunos"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/win32-arm64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.25.12.tgz",
-      "integrity": "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.28.0.tgz",
+      "integrity": "sha512-Q9StnDmQ/enxnpxCCLSg0oo4+34B9TdXpuyPeTedN/6+iXBJ4J+zwfQI28u/Jl40nOYAxGoNi7mFP40RUtkmUA==",
       "cpu": [
         "arm64"
       ],
@@ -645,14 +691,15 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/win32-ia32": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.25.12.tgz",
-      "integrity": "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.28.0.tgz",
+      "integrity": "sha512-zF3ag/gfiCe6U2iczcRzSYJKH1DCI+ByzSENHlM2FcDbEeo5Zd2C86Aq0tKUYAJJ1obRP84ymxIAksZUcdztHA==",
       "cpu": [
         "ia32"
       ],
@@ -662,14 +709,15 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
     },
     "node_modules/@esbuild/win32-x64": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.25.12.tgz",
-      "integrity": "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.28.0.tgz",
+      "integrity": "sha512-pEl1bO9mfAmIC+tW5btTmrKaujg3zGtUmWNdCw/xs70FBjwAL3o9OEKNHvNmnyylD6ubxUERiEhdsL0xBQ9efw==",
       "cpu": [
         "x64"
       ],
@@ -679,6 +727,7 @@
       "os": [
         "win32"
       ],
+      "peer": true,
       "engines": {
         "node": ">=18"
       }
@@ -745,40 +794,6 @@
         "node": ">=12"
       }
     },
-    "node_modules/@istanbuljs/schema": {
-      "version": "0.1.3",
-      "resolved": "https://registry.npmjs.org/@istanbuljs/schema/-/schema-0.1.3.tgz",
-      "integrity": "sha512-ZXRY4jNvVgSVQ8DL3LTcakaAtXwTVUxE81hslsyD2AtoXW/wVob10HkOJ1X/pAlcI7D+2YoZKg5do8G/w6RYgA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/@jest/schemas": {
-      "version": "29.6.3",
-      "resolved": "https://registry.npmjs.org/@jest/schemas/-/schemas-29.6.3.tgz",
-      "integrity": "sha512-mo5j5X+jIZmJQveBKeS/clAueipV7KgiX1vMgCxam1RNYiqE1w62n0/tJJnHtjW8ZHcQco5gY85jA3mi0L+nSA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@sinclair/typebox": "^0.27.8"
-      },
-      "engines": {
-        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
-      }
-    },
-    "node_modules/@jridgewell/gen-mapping": {
-      "version": "0.3.13",
-      "resolved": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
-      "integrity": "sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.0",
-        "@jridgewell/trace-mapping": "^0.3.24"
-      }
-    },
     "node_modules/@jridgewell/resolve-uri": {
       "version": "3.1.2",
       "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
@@ -1056,6 +1071,25 @@
         "url": "https://github.com/sponsors/Brooooooklyn"
       }
     },
+    "node_modules/@napi-rs/wasm-runtime": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz",
+      "integrity": "sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "@tybys/wasm-util": "^0.10.1"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/Brooooooklyn"
+      },
+      "peerDependencies": {
+        "@emnapi/core": "^1.7.1",
+        "@emnapi/runtime": "^1.7.1"
+      }
+    },
     "node_modules/@one-ini/wasm": {
       "version": "0.1.1",
       "resolved": "https://registry.npmjs.org/@one-ini/wasm/-/wasm-0.1.1.tgz",
@@ -1063,6 +1097,16 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@oxc-project/types": {
+      "version": "0.126.0",
+      "resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.126.0.tgz",
+      "integrity": "sha512-oGfVtjAgwQVVpfBrbtk4e1XDyWHRFta6BS3GWVzrF8xYBT2VGQAk39yJS/wFSMrZqoiCU4oghT3Ch0HaHGIHcQ==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      }
+    },
     "node_modules/@pkgjs/parseargs": {
       "version": "0.11.0",
       "resolved": "https://registry.npmjs.org/@pkgjs/parseargs/-/parseargs-0.11.0.tgz",
@@ -1133,31 +1177,10 @@
         "node": ">=12.11.0"
       }
     },
-    "node_modules/@rolldown/pluginutils": {
-      "version": "1.0.0-beta.50",
-      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-beta.50.tgz",
-      "integrity": "sha512-5e76wQiQVeL1ICOZVUg4LSOVYg9jyhGCin+icYozhsUzM+fHE7kddi1bdiE0jwVqTfkjba3jUFbEkoC9WkdvyA==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/@rollup/rollup-android-arm-eabi": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.53.3.tgz",
-      "integrity": "sha512-mRSi+4cBjrRLoaal2PnqH82Wqyb+d3HsPUN/W+WslCXsZsyHa9ZeQQX/pQsZaVIWDkPcpV6jJ+3KLbTbgnwv8w==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ]
-    },
-    "node_modules/@rollup/rollup-android-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm64/-/rollup-android-arm64-4.53.3.tgz",
-      "integrity": "sha512-CbDGaMpdE9sh7sCmTrTUyllhrg65t6SwhjlMJsLr+J8YjFuPmCEjbBSx4Z/e4SmDyH3aB5hGaJUP2ltV/vcs4w==",
+    "node_modules/@rolldown/binding-android-arm64": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.0-rc.16.tgz",
+      "integrity": "sha512-rhY3k7Bsae9qQfOtph2Pm2jZEA+s8Gmjoz4hhmx70K9iMQ/ddeae+xhRQcM5IuVx5ry1+bGfkvMn7D6MJggVSA==",
       "cpu": [
         "arm64"
       ],
@@ -1166,12 +1189,15 @@
       "optional": true,
       "os": [
         "android"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-darwin-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-arm64/-/rollup-darwin-arm64-4.53.3.tgz",
-      "integrity": "sha512-Nr7SlQeqIBpOV6BHHGZgYBuSdanCXuw09hon14MGOLGmXAFYjx1wNvquVPmpZnl0tLjg25dEdr4IQ6GgyToCUA==",
+    "node_modules/@rolldown/binding-darwin-arm64": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.0-rc.16.tgz",
+      "integrity": "sha512-rNz0yK078yrNn3DrdgN+PKiMOW8HfQ92jQiXxwX8yW899ayV00MLVdaCNeVBhG/TbH3ouYVObo8/yrkiectkcQ==",
       "cpu": [
         "arm64"
       ],
@@ -1180,12 +1206,15 @@
       "optional": true,
       "os": [
         "darwin"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-darwin-x64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-darwin-x64/-/rollup-darwin-x64-4.53.3.tgz",
-      "integrity": "sha512-DZ8N4CSNfl965CmPktJ8oBnfYr3F8dTTNBQkRlffnUarJ2ohudQD17sZBa097J8xhQ26AwhHJ5mvUyQW8ddTsQ==",
+    "node_modules/@rolldown/binding-darwin-x64": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.0-rc.16.tgz",
+      "integrity": "sha512-r/OmdR00HmD4i79Z//xO06uEPOq5hRXdhw7nzkxQxwSavs3PSHa1ijntdpOiZ2mzOQ3fVVu8C1M19FoNM+dMUQ==",
       "cpu": [
         "x64"
       ],
@@ -1194,26 +1223,15 @@
       "optional": true,
       "os": [
         "darwin"
-      ]
-    },
-    "node_modules/@rollup/rollup-freebsd-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-arm64/-/rollup-freebsd-arm64-4.53.3.tgz",
-      "integrity": "sha512-yMTrCrK92aGyi7GuDNtGn2sNW+Gdb4vErx4t3Gv/Tr+1zRb8ax4z8GWVRfr3Jw8zJWvpGHNpss3vVlbF58DZ4w==",
-      "cpu": [
-        "arm64"
       ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ]
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-freebsd-x64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-freebsd-x64/-/rollup-freebsd-x64-4.53.3.tgz",
-      "integrity": "sha512-lMfF8X7QhdQzseM6XaX0vbno2m3hlyZFhwcndRMw8fbAGUGL3WFMBdK0hbUBIUYcEcMhVLr1SIamDeuLBnXS+Q==",
+    "node_modules/@rolldown/binding-freebsd-x64": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.0-rc.16.tgz",
+      "integrity": "sha512-KcRE5w8h0OnjUatG8pldyD14/CQ5Phs1oxfR+3pKDjboHRo9+MkqQaiIZlZRpsxC15paeXme/I127tUa9TXJ6g==",
       "cpu": [
         "x64"
       ],
@@ -1222,26 +1240,15 @@
       "optional": true,
       "os": [
         "freebsd"
-      ]
-    },
-    "node_modules/@rollup/rollup-linux-arm-gnueabihf": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-gnueabihf/-/rollup-linux-arm-gnueabihf-4.53.3.tgz",
-      "integrity": "sha512-k9oD15soC/Ln6d2Wv/JOFPzZXIAIFLp6B+i14KhxAfnq76ajt0EhYc5YPeX6W1xJkAdItcVT+JhKl1QZh44/qw==",
-      "cpu": [
-        "arm"
       ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-arm-musleabihf": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm-musleabihf/-/rollup-linux-arm-musleabihf-4.53.3.tgz",
-      "integrity": "sha512-vTNlKq+N6CK/8UktsrFuc+/7NlEYVxgaEgRXVUVK258Z5ymho29skzW1sutgYjqNnquGwVUObAaxae8rZ6YMhg==",
+    "node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.0-rc.16.tgz",
+      "integrity": "sha512-bT0guA1bpxEJ/ZhTRniQf7rNF8ybvXOuWbNIeLABaV5NGjx4EtOWBTSRGWFU9ZWVkPOZ+HNFP8RMcBokBiZ0Kg==",
       "cpu": [
         "arm"
       ],
@@ -1250,12 +1257,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-arm64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-gnu/-/rollup-linux-arm64-gnu-4.53.3.tgz",
-      "integrity": "sha512-RGrFLWgMhSxRs/EWJMIFM1O5Mzuz3Xy3/mnxJp/5cVhZ2XoCAxJnmNsEyeMJtpK+wu0FJFWz+QF4mjCA7AUQ3w==",
+    "node_modules/@rolldown/binding-linux-arm64-gnu": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.0-rc.16.tgz",
+      "integrity": "sha512-+tHktCHWV8BDQSjemUqm/Jl/TPk3QObCTIjmdDy/nlupcujZghmKK2962LYrqFpWu+ai01AN/REOH3NEpqvYQg==",
       "cpu": [
         "arm64"
       ],
@@ -1264,12 +1274,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-arm64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-arm64-musl/-/rollup-linux-arm64-musl-4.53.3.tgz",
-      "integrity": "sha512-kASyvfBEWYPEwe0Qv4nfu6pNkITLTb32p4yTgzFCocHnJLAHs+9LjUu9ONIhvfT/5lv4YS5muBHyuV84epBo/A==",
+    "node_modules/@rolldown/binding-linux-arm64-musl": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.0-rc.16.tgz",
+      "integrity": "sha512-3fPzdREH806oRLxpTWW1Gt4tQHs0TitZFOECB2xzCFLPKnSOy90gwA7P29cksYilFO6XVRY1kzga0cL2nRjKPg==",
       "cpu": [
         "arm64"
       ],
@@ -1278,26 +1291,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
-    },
-    "node_modules/@rollup/rollup-linux-loong64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-loong64-gnu/-/rollup-linux-loong64-gnu-4.53.3.tgz",
-      "integrity": "sha512-JiuKcp2teLJwQ7vkJ95EwESWkNRFJD7TQgYmCnrPtlu50b4XvT5MOmurWNrCj3IFdyjBQ5p9vnrX4JM6I8OE7g==",
-      "cpu": [
-        "loong64"
       ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-ppc64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-ppc64-gnu/-/rollup-linux-ppc64-gnu-4.53.3.tgz",
-      "integrity": "sha512-EoGSa8nd6d3T7zLuqdojxC20oBfNT8nexBbB/rkxgKj5T5vhpAQKKnD+h3UkoMuTyXkP5jTjK/ccNRmQrPNDuw==",
+    "node_modules/@rolldown/binding-linux-ppc64-gnu": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.0-rc.16.tgz",
+      "integrity": "sha512-EKwI1tSrLs7YVw+JPJT/G2dJQ1jl9qlTTTEG0V2Ok/RdOenRfBw2PQdLPyjhIu58ocdBfP7vIRN/pvMsPxs/AQ==",
       "cpu": [
         "ppc64"
       ],
@@ -1306,40 +1308,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
-    },
-    "node_modules/@rollup/rollup-linux-riscv64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-gnu/-/rollup-linux-riscv64-gnu-4.53.3.tgz",
-      "integrity": "sha512-4s+Wped2IHXHPnAEbIB0YWBv7SDohqxobiiPA1FIWZpX+w9o2i4LezzH/NkFUl8LRci/8udci6cLq+jJQlh+0g==",
-      "cpu": [
-        "riscv64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
-    },
-    "node_modules/@rollup/rollup-linux-riscv64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-riscv64-musl/-/rollup-linux-riscv64-musl-4.53.3.tgz",
-      "integrity": "sha512-68k2g7+0vs2u9CxDt5ktXTngsxOQkSEV/xBbwlqYcUrAVh6P9EgMZvFsnHy4SEiUl46Xf0IObWVbMvPrr2gw8A==",
-      "cpu": [
-        "riscv64"
       ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ]
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-s390x-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-s390x-gnu/-/rollup-linux-s390x-gnu-4.53.3.tgz",
-      "integrity": "sha512-VYsFMpULAz87ZW6BVYw3I6sWesGpsP9OPcyKe8ofdg9LHxSbRMd7zrVrr5xi/3kMZtpWL/wC+UIJWJYVX5uTKg==",
+    "node_modules/@rolldown/binding-linux-s390x-gnu": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.0-rc.16.tgz",
+      "integrity": "sha512-Uknladnb3Sxqu6SEcqBldQyJUpk8NleooZEc0MbRBJ4inEhRYWZX0NJu12vNf2mqAq7gsofAxHrGghiUYjhaLQ==",
       "cpu": [
         "s390x"
       ],
@@ -1348,12 +1325,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-x64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-gnu/-/rollup-linux-x64-gnu-4.53.3.tgz",
-      "integrity": "sha512-3EhFi1FU6YL8HTUJZ51imGJWEX//ajQPfqWLI3BQq4TlvHy4X0MOr5q3D2Zof/ka0d5FNdPwZXm3Yyib/UEd+w==",
+    "node_modules/@rolldown/binding-linux-x64-gnu": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.0-rc.16.tgz",
+      "integrity": "sha512-FIb8+uG49sZBtLTn+zt1AJ20TqVcqWeSIyoVt0or7uAWesgKaHbiBh6OpA/k9v0LTt+PTrb1Lao133kP4uVxkg==",
       "cpu": [
         "x64"
       ],
@@ -1362,12 +1342,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-linux-x64-musl": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-linux-x64-musl/-/rollup-linux-x64-musl-4.53.3.tgz",
-      "integrity": "sha512-eoROhjcc6HbZCJr+tvVT8X4fW3/5g/WkGvvmwz/88sDtSJzO7r/blvoBDgISDiCjDRZmHpwud7h+6Q9JxFwq1Q==",
+    "node_modules/@rolldown/binding-linux-x64-musl": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.0-rc.16.tgz",
+      "integrity": "sha512-RuERhF9/EgWxZEXYWCOaViUWHIboceK4/ivdtQ3R0T44NjLkIIlGIAVAuCddFxsZ7vnRHtNQUrt2vR2n2slB2w==",
       "cpu": [
         "x64"
       ],
@@ -1376,12 +1359,15 @@
       "optional": true,
       "os": [
         "linux"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-openharmony-arm64": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-openharmony-arm64/-/rollup-openharmony-arm64-4.53.3.tgz",
-      "integrity": "sha512-OueLAWgrNSPGAdUdIjSWXw+u/02BRTcnfw9PN41D2vq/JSEPnJnVuBgw18VkN8wcd4fjUs+jFHVM4t9+kBSNLw==",
+    "node_modules/@rolldown/binding-openharmony-arm64": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.0-rc.16.tgz",
+      "integrity": "sha512-mXcXnvd9GpazCxeUCCnZ2+YF7nut+ZOEbE4GtaiPtyY6AkhZWbK70y1KK3j+RDhjVq5+U8FySkKRb/+w0EeUwA==",
       "cpu": [
         "arm64"
       ],
@@ -1390,40 +1376,51 @@
       "optional": true,
       "os": [
         "openharmony"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-win32-arm64-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-arm64-msvc/-/rollup-win32-arm64-msvc-4.53.3.tgz",
-      "integrity": "sha512-GOFuKpsxR/whszbF/bzydebLiXIHSgsEUp6M0JI8dWvi+fFa1TD6YQa4aSZHtpmh2/uAlj/Dy+nmby3TJ3pkTw==",
+    "node_modules/@rolldown/binding-wasm32-wasi": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.0-rc.16.tgz",
+      "integrity": "sha512-3Q2KQxnC8IJOLqXmUMoYwyIPZU9hzRbnHaoV3Euz+VVnjZKcY8ktnNP8T9R4/GGQtb27C/UYKABxesKWb8lsvQ==",
       "cpu": [
-        "arm64"
+        "wasm32"
       ],
       "dev": true,
       "license": "MIT",
       "optional": true,
-      "os": [
-        "win32"
-      ]
+      "dependencies": {
+        "@emnapi/core": "1.9.2",
+        "@emnapi/runtime": "1.9.2",
+        "@napi-rs/wasm-runtime": "^1.1.4"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-win32-ia32-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-ia32-msvc/-/rollup-win32-ia32-msvc-4.53.3.tgz",
-      "integrity": "sha512-iah+THLcBJdpfZ1TstDFbKNznlzoxa8fmnFYK4V67HvmuNYkVdAywJSoteUszvBQ9/HqN2+9AZghbajMsFT+oA==",
+    "node_modules/@rolldown/binding-win32-arm64-msvc": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.0-rc.16.tgz",
+      "integrity": "sha512-tj7XRemQcOcFwv7qhpUxMTBbI5mWMlE4c1Omhg5+h8GuLXzyj8HviYgR+bB2DMDgRqUE+jiDleqSCRjx4aYk/Q==",
       "cpu": [
-        "ia32"
+        "arm64"
       ],
       "dev": true,
       "license": "MIT",
       "optional": true,
       "os": [
         "win32"
-      ]
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
     },
-    "node_modules/@rollup/rollup-win32-x64-gnu": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-gnu/-/rollup-win32-x64-gnu-4.53.3.tgz",
-      "integrity": "sha512-J9QDiOIZlZLdcot5NXEepDkstocktoVjkaKUtqzgzpt2yWjGlbYiKyp05rWwk4nypbYUNoFAztEgixoLaSETkg==",
+    "node_modules/@rolldown/binding-win32-x64-msvc": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.0-rc.16.tgz",
+      "integrity": "sha512-PH5DRZT+F4f2PTXRXR8uJxnBq2po/xFtddyabTJVJs/ZYVHqXPEgNIr35IHTEa6bpa0Q8Awg+ymkTaGnKITw4g==",
       "cpu": [
         "x64"
       ],
@@ -1432,26 +1429,22 @@
       "optional": true,
       "os": [
         "win32"
-      ]
-    },
-    "node_modules/@rollup/rollup-win32-x64-msvc": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/@rollup/rollup-win32-x64-msvc/-/rollup-win32-x64-msvc-4.53.3.tgz",
-      "integrity": "sha512-UhTd8u31dXadv0MopwGgNOBpUVROFKWVQgAg5N1ESyCz8AuBcMqm4AuTjrwgQKGDfoFuz02EuMRHQIw/frmYKQ==",
-      "cpu": [
-        "x64"
       ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@rolldown/pluginutils": {
+      "version": "1.0.0-rc.13",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.13.tgz",
+      "integrity": "sha512-3ngTAv6F/Py35BsYbeeLeecvhMKdsKm4AoOETVhAA+Qc8nrA2I0kF7oa93mE9qnIurngOSpMnQ0x2nQY2FPviA==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ]
+      "license": "MIT"
     },
-    "node_modules/@sinclair/typebox": {
-      "version": "0.27.8",
-      "resolved": "https://registry.npmjs.org/@sinclair/typebox/-/typebox-0.27.8.tgz",
-      "integrity": "sha512-+Fj43pSMwJs4KRrH/938Uf+uAELIgVBmQzg/q1YG10djyfA3TnrU8N8XzqCh/okZdszqBQTZf96idMfE5lnwTA==",
+    "node_modules/@standard-schema/spec": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
+      "integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
       "dev": true,
       "license": "MIT"
     },
@@ -1541,6 +1534,35 @@
         "node": ">=20.0.0"
       }
     },
+    "node_modules/@tybys/wasm-util": {
+      "version": "0.10.1",
+      "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz",
+      "integrity": "sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@types/chai": {
+      "version": "5.2.3",
+      "resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
+      "integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/deep-eql": "*",
+        "assertion-error": "^2.0.1"
+      }
+    },
+    "node_modules/@types/deep-eql": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+      "integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/estree": {
       "version": "1.0.8",
       "resolved": "https://registry.npmjs.org/@types/estree/-/estree-1.0.8.tgz",
@@ -1567,136 +1589,178 @@
       }
     },
     "node_modules/@vitejs/plugin-vue": {
-      "version": "6.0.2",
-      "resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-6.0.2.tgz",
-      "integrity": "sha512-iHmwV3QcVGGvSC1BG5bZ4z6iwa1SOpAPWmnjOErd4Ske+lZua5K9TtAVdx0gMBClJ28DViCbSmZitjWZsWO3LA==",
+      "version": "6.0.6",
+      "resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-6.0.6.tgz",
+      "integrity": "sha512-u9HHgfrq3AjXlysn0eINFnWQOJQLO9WN6VprZ8FXl7A2bYisv3Hui9Ij+7QZ41F/WYWarHjwBbXtD7dKg3uxbg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@rolldown/pluginutils": "1.0.0-beta.50"
+        "@rolldown/pluginutils": "1.0.0-rc.13"
       },
       "engines": {
         "node": "^20.19.0 || >=22.12.0"
       },
       "peerDependencies": {
-        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0",
+        "vite": "^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0",
         "vue": "^3.2.25"
       }
     },
     "node_modules/@vitest/coverage-v8": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-1.6.1.tgz",
-      "integrity": "sha512-6YeRZwuO4oTGKxD3bijok756oktHSIm3eczVVzNe3scqzuhLwltIF3S9ZL/vwOVIpURmU6SnZhziXXAfw8/Qlw==",
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/coverage-v8/-/coverage-v8-4.1.4.tgz",
+      "integrity": "sha512-x7FptB5oDruxNPDNY2+S8tCh0pcq7ymCe1gTHcsp733jYjrJl8V1gMUlVysuCD9Kz46Xz9t1akkv08dPcYDs1w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@ampproject/remapping": "^2.2.1",
-        "@bcoe/v8-coverage": "^0.2.3",
-        "debug": "^4.3.4",
+        "@bcoe/v8-coverage": "^1.0.2",
+        "@vitest/utils": "4.1.4",
+        "ast-v8-to-istanbul": "^1.0.0",
         "istanbul-lib-coverage": "^3.2.2",
         "istanbul-lib-report": "^3.0.1",
-        "istanbul-lib-source-maps": "^5.0.4",
-        "istanbul-reports": "^3.1.6",
-        "magic-string": "^0.30.5",
-        "magicast": "^0.3.3",
-        "picocolors": "^1.0.0",
-        "std-env": "^3.5.0",
-        "strip-literal": "^2.0.0",
-        "test-exclude": "^6.0.0"
+        "istanbul-reports": "^3.2.0",
+        "magicast": "^0.5.2",
+        "obug": "^2.1.1",
+        "std-env": "^4.0.0-rc.1",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       },
       "peerDependencies": {
-        "vitest": "1.6.1"
+        "@vitest/browser": "4.1.4",
+        "vitest": "4.1.4"
+      },
+      "peerDependenciesMeta": {
+        "@vitest/browser": {
+          "optional": true
+        }
       }
     },
     "node_modules/@vitest/expect": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-1.6.1.tgz",
-      "integrity": "sha512-jXL+9+ZNIJKruofqXuuTClf44eSpcHlgj3CiuNihUF3Ioujtmc0zIa3UJOW5RjDK1YLBJZnWBlPuqhYycLioog==",
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.4.tgz",
+      "integrity": "sha512-iPBpra+VDuXmBFI3FMKHSFXp3Gx5HfmSCE8X67Dn+bwephCnQCaB7qWK2ldHa+8ncN8hJU8VTMcxjPpyMkUjww==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/spy": "1.6.1",
-        "@vitest/utils": "1.6.1",
-        "chai": "^4.3.10"
+        "@standard-schema/spec": "^1.1.0",
+        "@types/chai": "^5.2.2",
+        "@vitest/spy": "4.1.4",
+        "@vitest/utils": "4.1.4",
+        "chai": "^6.2.2",
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
-    "node_modules/@vitest/runner": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-1.6.1.tgz",
-      "integrity": "sha512-3nSnYXkVkf3mXFfE7vVyPmi3Sazhb/2cfZGGs0JRzFsPFvAMBEcrweV1V1GsrstdXeKCTXlJbvnQwGWgEIHmOA==",
+    "node_modules/@vitest/mocker": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.4.tgz",
+      "integrity": "sha512-R9HTZBhW6yCSGbGQnDnH3QHfJxokKN4KB+Yvk9Q1le7eQNYwiCyKxmLmurSpFy6BzJanSLuEUDrD+j97Q+ZLPg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@vitest/utils": "1.6.1",
-        "p-limit": "^5.0.0",
-        "pathe": "^1.1.1"
+        "@vitest/spy": "4.1.4",
+        "estree-walker": "^3.0.3",
+        "magic-string": "^0.30.21"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "msw": "^2.4.9",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "msw": {
+          "optional": true
+        },
+        "vite": {
+          "optional": true
+        }
       }
     },
-    "node_modules/@vitest/snapshot": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-1.6.1.tgz",
-      "integrity": "sha512-WvidQuWAzU2p95u8GAKlRMqMyN1yOJkGHnx3M1PL9Raf7AQ1kwLKg04ADlCa3+OXUZE7BceOhVZiuWAbzCKcUQ==",
+    "node_modules/@vitest/mocker/node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "magic-string": "^0.30.5",
-        "pathe": "^1.1.1",
-        "pretty-format": "^29.7.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
+        "@types/estree": "^1.0.0"
       }
     },
-    "node_modules/@vitest/spy": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-1.6.1.tgz",
-      "integrity": "sha512-MGcMmpGkZebsMZhbQKkAf9CX5zGvjkBTqf8Zx3ApYWXr3wG+QvEu2eXWfnIIWYSJExIp4V9FCKDEeygzkYrXMw==",
+    "node_modules/@vitest/pretty-format": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.4.tgz",
+      "integrity": "sha512-ddmDHU0gjEUyEVLxtZa7xamrpIefdEETu3nZjWtHeZX4QxqJ7tRxSteHVXJOcr8jhiLoGAhkK4WJ3WqBpjx42A==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "tinyspy": "^2.2.0"
+        "tinyrainbow": "^3.1.0"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
-    "node_modules/@vitest/utils": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-1.6.1.tgz",
-      "integrity": "sha512-jOrrUvXM4Av9ZWiG1EajNto0u96kWAhJ1LmPmJhXXQx/32MecEKd10pOLYgS2BQx1TgkGhloPU1ArDW2vvaY6g==",
+    "node_modules/@vitest/runner": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.4.tgz",
+      "integrity": "sha512-xTp7VZ5aXP5ZJrn15UtJUWlx6qXLnGtF6jNxHepdPHpMfz/aVPx+htHtgcAL2mDXJgKhpoo2e9/hVJsIeFbytQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "diff-sequences": "^29.6.3",
-        "estree-walker": "^3.0.3",
-        "loupe": "^2.3.7",
-        "pretty-format": "^29.7.0"
+        "@vitest/utils": "4.1.4",
+        "pathe": "^2.0.3"
       },
       "funding": {
         "url": "https://opencollective.com/vitest"
       }
     },
-    "node_modules/@vitest/utils/node_modules/estree-walker": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
-      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+    "node_modules/@vitest/snapshot": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.4.tgz",
+      "integrity": "sha512-MCjCFgaS8aZz+m5nTcEcgk/xhWv0rEH4Yl53PPlMXOZ1/Ka2VcZU6CJ+MgYCZbcJvzGhQRjVrGQNZqkGPttIKw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/estree": "^1.0.0"
+        "@vitest/pretty-format": "4.1.4",
+        "@vitest/utils": "4.1.4",
+        "magic-string": "^0.30.21",
+        "pathe": "^2.0.3"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
       }
     },
-    "node_modules/@vue/compiler-core": {
-      "version": "3.5.24",
+    "node_modules/@vitest/spy": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.4.tgz",
+      "integrity": "sha512-XxNdAsKW7C+FLydqFJLb5KhJtl3PGCMmYwFRfhvIgxJvLSXhhVI1zM8f1qD3Zg7RCjTSzDVyct6sghs9UEgBEQ==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vitest/utils": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.4.tgz",
+      "integrity": "sha512-13QMT+eysM5uVGa1rG4kegGYNp6cnQcsTc67ELFbhNLQO+vgsygtYJx2khvdt4gVQqSSpC/KT5FZZxUpP3Oatw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/pretty-format": "4.1.4",
+        "convert-source-map": "^2.0.0",
+        "tinyrainbow": "^3.1.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      }
+    },
+    "node_modules/@vue/compiler-core": {
+      "version": "3.5.24",
       "resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.24.tgz",
       "integrity": "sha512-eDl5H57AOpNakGNAkFDH+y7kTqrQpJkZFXhWZQGyx/5Wh7B1uQYvcWkvZi11BDhscPgj8N7XV3oRwiPnx1Vrig==",
       "license": "MIT",
@@ -1849,32 +1913,6 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
-    "node_modules/acorn": {
-      "version": "8.15.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.15.0.tgz",
-      "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==",
-      "dev": true,
-      "license": "MIT",
-      "bin": {
-        "acorn": "bin/acorn"
-      },
-      "engines": {
-        "node": ">=0.4.0"
-      }
-    },
-    "node_modules/acorn-walk": {
-      "version": "8.3.4",
-      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.4.tgz",
-      "integrity": "sha512-ueEepnujpqee2o5aIYnvHU6C0A42MNdsIDeqy5BydrkuC5R1ZuUFnm27EeFJGoEHJQgn3uleRvmTXaJgfXbt4g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "acorn": "^8.11.0"
-      },
-      "engines": {
-        "node": ">=0.4.0"
-      }
-    },
     "node_modules/agent-base": {
       "version": "7.1.4",
       "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-7.1.4.tgz",
@@ -1898,27 +1936,36 @@
         "url": "https://github.com/chalk/ansi-regex?sponsor=1"
       }
     },
-    "node_modules/ansi-styles": {
-      "version": "5.2.0",
-      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-5.2.0.tgz",
-      "integrity": "sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==",
+    "node_modules/assertion-error": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
+      "integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
       "dev": true,
       "license": "MIT",
       "engines": {
-        "node": ">=10"
-      },
-      "funding": {
-        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+        "node": ">=12"
       }
     },
-    "node_modules/assertion-error": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-1.1.0.tgz",
-      "integrity": "sha512-jgsaNduz+ndvGyFt3uSuWqvy4lCnIJiovtouQN5JZHOKCS2QuhEdbcQHFhVksz2N2U9hXJo8odG7ETyWlEeuDw==",
+    "node_modules/ast-v8-to-istanbul": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/ast-v8-to-istanbul/-/ast-v8-to-istanbul-1.0.0.tgz",
+      "integrity": "sha512-1fSfIwuDICFA4LKkCzRPO7F0hzFf0B7+Xqrl27ynQaa+Rh0e1Es0v6kWHPott3lU10AyAr7oKHa65OppjLn3Rg==",
       "dev": true,
       "license": "MIT",
-      "engines": {
-        "node": "*"
+      "dependencies": {
+        "@jridgewell/trace-mapping": "^0.3.31",
+        "estree-walker": "^3.0.3",
+        "js-tokens": "^10.0.0"
+      }
+    },
+    "node_modules/ast-v8-to-istanbul/node_modules/estree-walker": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
+      "integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/estree": "^1.0.0"
       }
     },
     "node_modules/asynckit": {
@@ -1928,14 +1975,14 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.13.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.2.tgz",
-      "integrity": "sha512-VPk9ebNqPcy5lRGuSlKx752IlDatOjT9paPlm8A7yOuW2Fbvp4X3JznJtT4f0GzGLLiWE9W8onz51SqLYwzGaA==",
+      "version": "1.15.1",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.15.1.tgz",
+      "integrity": "sha512-WOG+Jj8ZOvR0a3rAn+Tuf1UQJRxw5venr6DgdbJzngJE3qG7X0kL83CZGpdHMxEm+ZK3seAbvFsw4FfOfP9vxg==",
       "license": "MIT",
       "dependencies": {
-        "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.4",
-        "proxy-from-env": "^1.1.0"
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
+        "proxy-from-env": "^2.1.0"
       }
     },
     "node_modules/balanced-match": {
@@ -1965,25 +2012,15 @@
       }
     },
     "node_modules/brace-expansion": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.0.2.tgz",
-      "integrity": "sha512-Jt0vHyM+jmUBqojB7E1NIYadt0vI0Qxjxd2TErW94wDz+E2LAm5vKMXXwg6ZZBTHPuUlDgQHKXvjGBdfcF1ZDQ==",
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.0.tgz",
+      "integrity": "sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "balanced-match": "^1.0.0"
       }
     },
-    "node_modules/cac": {
-      "version": "6.7.14",
-      "resolved": "https://registry.npmjs.org/cac/-/cac-6.7.14.tgz",
-      "integrity": "sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/call-bind-apply-helpers": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -2007,35 +2044,13 @@
       }
     },
     "node_modules/chai": {
-      "version": "4.5.0",
-      "resolved": "https://registry.npmjs.org/chai/-/chai-4.5.0.tgz",
-      "integrity": "sha512-RITGBfijLkBddZvnn8jdqoTypxvqbOLYQkGGxXzeFjVHvudaPw0HNFD9x928/eUwYWd2dPCugVqspGALTZZQKw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "assertion-error": "^1.1.0",
-        "check-error": "^1.0.3",
-        "deep-eql": "^4.1.3",
-        "get-func-name": "^2.0.2",
-        "loupe": "^2.3.6",
-        "pathval": "^1.1.1",
-        "type-detect": "^4.1.0"
-      },
-      "engines": {
-        "node": ">=4"
-      }
-    },
-    "node_modules/check-error": {
-      "version": "1.0.3",
-      "resolved": "https://registry.npmjs.org/check-error/-/check-error-1.0.3.tgz",
-      "integrity": "sha512-iKEoDYaRmd1mxM90a2OEfWhjsjPpYPuQ+lMYsoxB126+t8fw7ySEO48nmDg5COTjxDI65/Y2OWpeEHk3ZOe8zg==",
+      "version": "6.2.2",
+      "resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
+      "integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
       "dev": true,
       "license": "MIT",
-      "dependencies": {
-        "get-func-name": "^2.0.2"
-      },
       "engines": {
-        "node": "*"
+        "node": ">=18"
       }
     },
     "node_modules/cliui": {
@@ -2159,20 +2174,6 @@
         "node": ">=14"
       }
     },
-    "node_modules/concat-map": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
-      "integrity": "sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/confbox": {
-      "version": "0.1.8",
-      "resolved": "https://registry.npmjs.org/confbox/-/confbox-0.1.8.tgz",
-      "integrity": "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/config-chain": {
       "version": "1.1.13",
       "resolved": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.13.tgz",
@@ -2184,6 +2185,13 @@
         "proto-list": "~1.2.1"
       }
     },
+    "node_modules/convert-source-map": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
+      "integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/copy-anything": {
       "version": "4.0.5",
       "resolved": "https://registry.npmjs.org/copy-anything/-/copy-anything-4.0.5.tgz",
@@ -2303,19 +2311,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/deep-eql": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/deep-eql/-/deep-eql-4.1.4.tgz",
-      "integrity": "sha512-SUwdGfqdKOwxCPeVYjwSyRpJ7Z+fhpwIAtmCUdZIWZ/YP5R9WAsyuSgpLVDi9bjWoN2LXHNss/dk3urXtdQxGg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "type-detect": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=6"
-      }
-    },
     "node_modules/delayed-stream": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
@@ -2325,14 +2320,14 @@
         "node": ">=0.4.0"
       }
     },
-    "node_modules/diff-sequences": {
-      "version": "29.6.3",
-      "resolved": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-29.6.3.tgz",
-      "integrity": "sha512-EjePK1srD3P08o2j4f0ExnylqRs5B9tJjcp9t1krH2qRi8CCdsYfwe9JgSLurFBWwq4uOlipzfk5fHNvwFKr8Q==",
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
       "dev": true,
-      "license": "MIT",
+      "license": "Apache-2.0",
       "engines": {
-        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
+        "node": ">=8"
       }
     },
     "node_modules/dijkstrajs": {
@@ -2363,15 +2358,15 @@
       "license": "MIT"
     },
     "node_modules/editorconfig": {
-      "version": "1.0.4",
-      "resolved": "https://registry.npmjs.org/editorconfig/-/editorconfig-1.0.4.tgz",
-      "integrity": "sha512-L9Qe08KWTlqYMVvMcTIvMAdl1cDUubzRNYL+WfA4bLDMHe4nemKkpmYzkznE1FwLKu0EEmy6obgQKzMJrg4x9Q==",
+      "version": "1.0.7",
+      "resolved": "https://registry.npmjs.org/editorconfig/-/editorconfig-1.0.7.tgz",
+      "integrity": "sha512-e0GOtq/aTQhVdNyDU9e02+wz9oDDM+SIOQxWME2QRjzRX5yyLAuHDE+0aE8vHb9XRC8XD37eO2u57+F09JqFhw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "@one-ini/wasm": "0.1.1",
         "commander": "^10.0.0",
-        "minimatch": "9.0.1",
+        "minimatch": "^9.0.1",
         "semver": "^7.5.3"
       },
       "bin": {
@@ -2418,6 +2413,13 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/es-module-lexer": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz",
+      "integrity": "sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/es-object-atoms": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
@@ -2446,12 +2448,14 @@
       }
     },
     "node_modules/esbuild": {
-      "version": "0.25.12",
-      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.25.12.tgz",
-      "integrity": "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==",
+      "version": "0.28.0",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.0.tgz",
+      "integrity": "sha512-sNR9MHpXSUV/XB4zmsFKN+QgVG82Cc7+/aaxJ8Adi8hyOac+EXptIp45QBPaVyX3N70664wRbTcLTOemCAnyqw==",
       "dev": true,
       "hasInstallScript": true,
       "license": "MIT",
+      "optional": true,
+      "peer": true,
       "bin": {
         "esbuild": "bin/esbuild"
       },
@@ -2459,32 +2463,32 @@
         "node": ">=18"
       },
       "optionalDependencies": {
-        "@esbuild/aix-ppc64": "0.25.12",
-        "@esbuild/android-arm": "0.25.12",
-        "@esbuild/android-arm64": "0.25.12",
-        "@esbuild/android-x64": "0.25.12",
-        "@esbuild/darwin-arm64": "0.25.12",
-        "@esbuild/darwin-x64": "0.25.12",
-        "@esbuild/freebsd-arm64": "0.25.12",
-        "@esbuild/freebsd-x64": "0.25.12",
-        "@esbuild/linux-arm": "0.25.12",
-        "@esbuild/linux-arm64": "0.25.12",
-        "@esbuild/linux-ia32": "0.25.12",
-        "@esbuild/linux-loong64": "0.25.12",
-        "@esbuild/linux-mips64el": "0.25.12",
-        "@esbuild/linux-ppc64": "0.25.12",
-        "@esbuild/linux-riscv64": "0.25.12",
-        "@esbuild/linux-s390x": "0.25.12",
-        "@esbuild/linux-x64": "0.25.12",
-        "@esbuild/netbsd-arm64": "0.25.12",
-        "@esbuild/netbsd-x64": "0.25.12",
-        "@esbuild/openbsd-arm64": "0.25.12",
-        "@esbuild/openbsd-x64": "0.25.12",
-        "@esbuild/openharmony-arm64": "0.25.12",
-        "@esbuild/sunos-x64": "0.25.12",
-        "@esbuild/win32-arm64": "0.25.12",
-        "@esbuild/win32-ia32": "0.25.12",
-        "@esbuild/win32-x64": "0.25.12"
+        "@esbuild/aix-ppc64": "0.28.0",
+        "@esbuild/android-arm": "0.28.0",
+        "@esbuild/android-arm64": "0.28.0",
+        "@esbuild/android-x64": "0.28.0",
+        "@esbuild/darwin-arm64": "0.28.0",
+        "@esbuild/darwin-x64": "0.28.0",
+        "@esbuild/freebsd-arm64": "0.28.0",
+        "@esbuild/freebsd-x64": "0.28.0",
+        "@esbuild/linux-arm": "0.28.0",
+        "@esbuild/linux-arm64": "0.28.0",
+        "@esbuild/linux-ia32": "0.28.0",
+        "@esbuild/linux-loong64": "0.28.0",
+        "@esbuild/linux-mips64el": "0.28.0",
+        "@esbuild/linux-ppc64": "0.28.0",
+        "@esbuild/linux-riscv64": "0.28.0",
+        "@esbuild/linux-s390x": "0.28.0",
+        "@esbuild/linux-x64": "0.28.0",
+        "@esbuild/netbsd-arm64": "0.28.0",
+        "@esbuild/netbsd-x64": "0.28.0",
+        "@esbuild/openbsd-arm64": "0.28.0",
+        "@esbuild/openbsd-x64": "0.28.0",
+        "@esbuild/openharmony-arm64": "0.28.0",
+        "@esbuild/sunos-x64": "0.28.0",
+        "@esbuild/win32-arm64": "0.28.0",
+        "@esbuild/win32-ia32": "0.28.0",
+        "@esbuild/win32-x64": "0.28.0"
       }
     },
     "node_modules/estree-walker": {
@@ -2493,28 +2497,14 @@
       "integrity": "sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==",
       "license": "MIT"
     },
-    "node_modules/execa": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/execa/-/execa-8.0.1.tgz",
-      "integrity": "sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg==",
+    "node_modules/expect-type": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
+      "integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
       "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cross-spawn": "^7.0.3",
-        "get-stream": "^8.0.1",
-        "human-signals": "^5.0.0",
-        "is-stream": "^3.0.0",
-        "merge-stream": "^2.0.0",
-        "npm-run-path": "^5.1.0",
-        "onetime": "^6.0.0",
-        "signal-exit": "^4.1.0",
-        "strip-final-newline": "^3.0.0"
-      },
+      "license": "Apache-2.0",
       "engines": {
-        "node": ">=16.17"
-      },
-      "funding": {
-        "url": "https://github.com/sindresorhus/execa?sponsor=1"
+        "node": ">=12.0.0"
       }
     },
     "node_modules/fdir": {
@@ -2555,9 +2545,9 @@
       }
     },
     "node_modules/follow-redirects": {
-      "version": "1.15.11",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
-      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
+      "version": "1.16.0",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
+      "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
       "funding": [
         {
           "type": "individual",
@@ -2607,13 +2597,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/fs.realpath": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
-      "integrity": "sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/fsevents": {
       "version": "2.3.3",
       "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
@@ -2647,16 +2630,6 @@
         "node": "6.* || 8.* || >= 10.*"
       }
     },
-    "node_modules/get-func-name": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/get-func-name/-/get-func-name-2.0.2.tgz",
-      "integrity": "sha512-8vXOvuE167CtIc3OyItco7N/dpRtBbYOsPsXCz7X/PMnlGjYjSGuZJgM1Y7mmew7BKf9BqvLX2tnOVy1BBUsxQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/get-intrinsic": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
@@ -2694,19 +2667,6 @@
         "node": ">= 0.4"
       }
     },
-    "node_modules/get-stream": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/get-stream/-/get-stream-8.0.1.tgz",
-      "integrity": "sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=16"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/glob": {
       "version": "10.5.0",
       "resolved": "https://registry.npmjs.org/glob/-/glob-10.5.0.tgz",
@@ -2728,22 +2688,6 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
-    "node_modules/glob/node_modules/minimatch": {
-      "version": "9.0.5",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.5.tgz",
-      "integrity": "sha512-G6T0ZX48xgozx7587koeX9Ys2NYy6Gmv//P89sEte9V9whIapMNF4idKxnW2QtCcLiTWlb/wfCabAtAFWhhBow==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "brace-expansion": "^2.0.1"
-      },
-      "engines": {
-        "node": ">=16 || 14 >=14.17"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
     "node_modules/gopd": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
@@ -2859,16 +2803,6 @@
         "node": ">= 14"
       }
     },
-    "node_modules/human-signals": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/human-signals/-/human-signals-5.0.0.tgz",
-      "integrity": "sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=16.17.0"
-      }
-    },
     "node_modules/iceberg-js": {
       "version": "0.8.1",
       "resolved": "https://registry.npmjs.org/iceberg-js/-/iceberg-js-0.8.1.tgz",
@@ -2891,25 +2825,6 @@
         "node": ">=0.10.0"
       }
     },
-    "node_modules/inflight": {
-      "version": "1.0.6",
-      "resolved": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
-      "integrity": "sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==",
-      "deprecated": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "once": "^1.3.0",
-        "wrappy": "1"
-      }
-    },
-    "node_modules/inherits": {
-      "version": "2.0.4",
-      "resolved": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
-      "integrity": "sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/ini": {
       "version": "1.3.8",
       "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
@@ -2933,19 +2848,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/is-stream": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/is-stream/-/is-stream-3.0.0.tgz",
-      "integrity": "sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/is-what": {
       "version": "5.5.0",
       "resolved": "https://registry.npmjs.org/is-what/-/is-what-5.5.0.tgz",
@@ -2990,21 +2892,6 @@
         "node": ">=10"
       }
     },
-    "node_modules/istanbul-lib-source-maps": {
-      "version": "5.0.6",
-      "resolved": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-5.0.6.tgz",
-      "integrity": "sha512-yg2d+Em4KizZC5niWhQaIomgf5WlL4vOOjZ5xGCmF8SnPE/mDWWXgvRExdcpCgh9lLRRa1/fSYp2ymmbJ1pI+A==",
-      "dev": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "@jridgewell/trace-mapping": "^0.3.23",
-        "debug": "^4.1.1",
-        "istanbul-lib-coverage": "^3.0.0"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/istanbul-reports": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-3.2.0.tgz",
@@ -3068,9 +2955,9 @@
       }
     },
     "node_modules/js-tokens": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-9.0.1.tgz",
-      "integrity": "sha512-mxa9E9ITFOt0ban3j6L5MpjwegGz6lBQmM1IJkWeBZGcMxto50+eWdjC/52xDbS2vy0k7vIMK0Fe2wfL9OQSpQ==",
+      "version": "10.0.0",
+      "resolved": "https://registry.npmjs.org/js-tokens/-/js-tokens-10.0.0.tgz",
+      "integrity": "sha512-lM/UBzQmfJRo9ABXbPWemivdCW8V2G8FHaHdypQaIy523snUjog0W71ayWXTjiR+ixeMyVHN2XcpnTd/liPg/Q==",
       "dev": true,
       "license": "MIT"
     },
@@ -3130,86 +3017,320 @@
         "libsodium-sumo": "^0.7.15"
       }
     },
-    "node_modules/local-pkg": {
-      "version": "0.5.1",
-      "resolved": "https://registry.npmjs.org/local-pkg/-/local-pkg-0.5.1.tgz",
-      "integrity": "sha512-9rrA30MRRP3gBD3HTGnC6cDFpaE1kVDWxWgqWJUN0RvDNAo+Nz/9GxB+nHOH0ifbVFy0hSA1V6vFDvnx54lTEQ==",
+    "node_modules/lightningcss": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
+      "integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
       "dev": true,
-      "license": "MIT",
+      "license": "MPL-2.0",
       "dependencies": {
-        "mlly": "^1.7.3",
-        "pkg-types": "^1.2.1"
+        "detect-libc": "^2.0.3"
       },
       "engines": {
-        "node": ">=14"
+        "node": ">= 12.0.0"
       },
       "funding": {
-        "url": "https://github.com/sponsors/antfu"
-      }
-    },
-    "node_modules/locate-path": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
-      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
-      "license": "MIT",
-      "dependencies": {
-        "p-locate": "^4.1.0"
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       },
+      "optionalDependencies": {
+        "lightningcss-android-arm64": "1.32.0",
+        "lightningcss-darwin-arm64": "1.32.0",
+        "lightningcss-darwin-x64": "1.32.0",
+        "lightningcss-freebsd-x64": "1.32.0",
+        "lightningcss-linux-arm-gnueabihf": "1.32.0",
+        "lightningcss-linux-arm64-gnu": "1.32.0",
+        "lightningcss-linux-arm64-musl": "1.32.0",
+        "lightningcss-linux-x64-gnu": "1.32.0",
+        "lightningcss-linux-x64-musl": "1.32.0",
+        "lightningcss-win32-arm64-msvc": "1.32.0",
+        "lightningcss-win32-x64-msvc": "1.32.0"
+      }
+    },
+    "node_modules/lightningcss-android-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+      "integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "android"
+      ],
       "engines": {
-        "node": ">=8"
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/lodash": {
-      "version": "4.17.21",
-      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
-      "integrity": "sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==",
-      "license": "MIT"
-    },
-    "node_modules/loupe": {
-      "version": "2.3.7",
-      "resolved": "https://registry.npmjs.org/loupe/-/loupe-2.3.7.tgz",
-      "integrity": "sha512-zSMINGVYkdpYSOBmLi0D1Uo7JU9nVdQKrHxC8eYlV+9YKK9WePqAlL7lSlorG/U2Fw1w0hTBmaa/jrQ3UbPHtA==",
+    "node_modules/lightningcss-darwin-arm64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
+      "integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+      "cpu": [
+        "arm64"
+      ],
       "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "get-func-name": "^2.0.1"
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/lru-cache": {
-      "version": "10.4.3",
-      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
-      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
+    "node_modules/lightningcss-darwin-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+      "integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+      "cpu": [
+        "x64"
+      ],
       "dev": true,
-      "license": "ISC"
-    },
-    "node_modules/lucide-vue-next": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/lucide-vue-next/-/lucide-vue-next-1.0.0.tgz",
-      "integrity": "sha512-V6SPvx1IHTj/UY+FrIYWV5faISsPSb8BnWSFDxAtezWKvWc9ZZ40PDrdu1/Qb5vg4lHWr1hs1BAMGVGm6V1Xdg==",
-      "license": "ISC",
-      "peerDependencies": {
-        "vue": ">=3.0.1"
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
       }
     },
-    "node_modules/magic-string": {
-      "version": "0.30.21",
-      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
-      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@jridgewell/sourcemap-codec": "^1.5.5"
+    "node_modules/lightningcss-freebsd-x64": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+      "integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm-gnueabihf": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+      "integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+      "integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-arm64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+      "integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-gnu": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+      "integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-linux-x64-musl": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+      "integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-arm64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+      "integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/lightningcss-win32-x64-msvc": {
+      "version": "1.32.0",
+      "resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+      "integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MPL-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">= 12.0.0"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/parcel"
+      }
+    },
+    "node_modules/locate-path": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
+      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
+      "license": "MIT",
+      "dependencies": {
+        "p-locate": "^4.1.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "license": "MIT"
+    },
+    "node_modules/lru-cache": {
+      "version": "10.4.3",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-10.4.3.tgz",
+      "integrity": "sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==",
+      "dev": true,
+      "license": "ISC"
+    },
+    "node_modules/lucide-vue-next": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/lucide-vue-next/-/lucide-vue-next-1.0.0.tgz",
+      "integrity": "sha512-V6SPvx1IHTj/UY+FrIYWV5faISsPSb8BnWSFDxAtezWKvWc9ZZ40PDrdu1/Qb5vg4lHWr1hs1BAMGVGm6V1Xdg==",
+      "license": "ISC",
+      "peerDependencies": {
+        "vue": ">=3.0.1"
+      }
+    },
+    "node_modules/magic-string": {
+      "version": "0.30.21",
+      "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-0.30.21.tgz",
+      "integrity": "sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/sourcemap-codec": "^1.5.5"
       }
     },
     "node_modules/magicast": {
-      "version": "0.3.5",
-      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.3.5.tgz",
-      "integrity": "sha512-L0WhttDl+2BOsybvEOLK7fW3UA0OQ0IQ2d6Zl2x/a6vVRs3bAY0ECOSHHeL5jD+SbOpOCUEi0y1DgHEn9Qn1AQ==",
+      "version": "0.5.2",
+      "resolved": "https://registry.npmjs.org/magicast/-/magicast-0.5.2.tgz",
+      "integrity": "sha512-E3ZJh4J3S9KfwdjZhe2afj6R9lGIN5Pher1pF39UGrXRqq/VDaGVIGN13BjHd2u8B61hArAGOnso7nBOouW3TQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@babel/parser": "^7.25.4",
-        "@babel/types": "^7.25.4",
-        "source-map-js": "^1.2.0"
+        "@babel/parser": "^7.29.0",
+        "@babel/types": "^7.29.0",
+        "source-map-js": "^1.2.1"
       }
     },
     "node_modules/make-dir": {
@@ -3244,13 +3365,6 @@
       "dev": true,
       "license": "CC0-1.0"
     },
-    "node_modules/merge-stream": {
-      "version": "2.0.0",
-      "resolved": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz",
-      "integrity": "sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/mime-db": {
       "version": "1.52.0",
       "resolved": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
@@ -3272,27 +3386,14 @@
         "node": ">= 0.6"
       }
     },
-    "node_modules/mimic-fn": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-4.0.0.tgz",
-      "integrity": "sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
     "node_modules/minimatch": {
-      "version": "9.0.1",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.1.tgz",
-      "integrity": "sha512-0jWhJpD/MdhPXwPuiRkCbfYfSKp2qnn2eOc279qI7f+osl/l+prKSrvhg157zSYvx/1nmgn2NqdT6k2Z7zSH9w==",
+      "version": "9.0.9",
+      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-9.0.9.tgz",
+      "integrity": "sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==",
       "dev": true,
       "license": "ISC",
       "dependencies": {
-        "brace-expansion": "^2.0.1"
+        "brace-expansion": "^2.0.2"
       },
       "engines": {
         "node": ">=16 || 14 >=14.17"
@@ -3317,26 +3418,6 @@
       "integrity": "sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==",
       "license": "MIT"
     },
-    "node_modules/mlly": {
-      "version": "1.8.0",
-      "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.8.0.tgz",
-      "integrity": "sha512-l8D9ODSRWLe2KHJSifWGwBqpTZXIXTeo8mlKjY+E2HAakaTeNpqAyBZ8GSqLzHgw4XmHmC8whvpjJNMbFZN7/g==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "acorn": "^8.15.0",
-        "pathe": "^2.0.3",
-        "pkg-types": "^1.3.1",
-        "ufo": "^1.6.1"
-      }
-    },
-    "node_modules/mlly/node_modules/pathe": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
-      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/ms": {
       "version": "2.1.3",
       "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
@@ -3378,76 +3459,16 @@
         "node": "^14.17.0 || ^16.13.0 || >=18.0.0"
       }
     },
-    "node_modules/npm-run-path": {
-      "version": "5.3.0",
-      "resolved": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-5.3.0.tgz",
-      "integrity": "sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "path-key": "^4.0.0"
-      },
-      "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/npm-run-path/node_modules/path-key": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/path-key/-/path-key-4.0.0.tgz",
-      "integrity": "sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/once": {
-      "version": "1.4.0",
-      "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
-      "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "wrappy": "1"
-      }
-    },
-    "node_modules/onetime": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/onetime/-/onetime-6.0.0.tgz",
-      "integrity": "sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "mimic-fn": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/p-limit": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-5.0.0.tgz",
-      "integrity": "sha512-/Eaoq+QyLSiXQ4lyYV23f14mZRQcXnxfHrN0vCai+ak9G0pp9iEQukIIZq5NccEvwRB8PUnZT0KsOoDCINS1qQ==",
+    "node_modules/obug": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
+      "integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
       "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "yocto-queue": "^1.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
+      "funding": [
+        "https://github.com/sponsors/sxzz",
+        "https://opencollective.com/debug"
+      ],
+      "license": "MIT"
     },
     "node_modules/p-locate": {
       "version": "4.1.0",
@@ -3527,16 +3548,6 @@
         "node": ">=8"
       }
     },
-    "node_modules/path-is-absolute": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
-      "integrity": "sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/path-key": {
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/path-key/-/path-key-3.1.1.tgz",
@@ -3565,22 +3576,12 @@
       }
     },
     "node_modules/pathe": {
-      "version": "1.1.2",
-      "resolved": "https://registry.npmjs.org/pathe/-/pathe-1.1.2.tgz",
-      "integrity": "sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==",
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/pathval": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/pathval/-/pathval-1.1.1.tgz",
-      "integrity": "sha512-Dp6zGqpTdETdR63lehJYPeIOqpiNBNtc7BpWSLrOje7UaIsE5aY92r/AunQA7rsXvet3lrJ3JnZX29UPTKXyKQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": "*"
-      }
-    },
     "node_modules/pdfjs-dist": {
       "version": "5.4.530",
       "resolved": "https://registry.npmjs.org/pdfjs-dist/-/pdfjs-dist-5.4.530.tgz",
@@ -3606,9 +3607,9 @@
       "license": "ISC"
     },
     "node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -3639,25 +3640,6 @@
         }
       }
     },
-    "node_modules/pkg-types": {
-      "version": "1.3.1",
-      "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz",
-      "integrity": "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "confbox": "^0.1.8",
-        "mlly": "^1.7.4",
-        "pathe": "^2.0.1"
-      }
-    },
-    "node_modules/pkg-types/node_modules/pathe": {
-      "version": "2.0.3",
-      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
-      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/pngjs": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
@@ -3668,9 +3650,9 @@
       }
     },
     "node_modules/postcss": {
-      "version": "8.5.6",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.6.tgz",
-      "integrity": "sha512-3Ybi1tAuwAP9s0r1UQ2J4n5Y0G05bJkpUIO0/bI9MhwmD70S5aTWbXGBwxHrelT+XM1k6dM0pk+SwNkpTRN7Pg==",
+      "version": "8.5.10",
+      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.10.tgz",
+      "integrity": "sha512-pMMHxBOZKFU6HgAZ4eyGnwXF/EvPGGqUr0MnZ5+99485wwW41kW91A4LOGxSHhgugZmSChL5AlElNdwlNgcnLQ==",
       "funding": [
         {
           "type": "opencollective",
@@ -3695,21 +3677,6 @@
         "node": "^10 || ^12 || >=14"
       }
     },
-    "node_modules/pretty-format": {
-      "version": "29.7.0",
-      "resolved": "https://registry.npmjs.org/pretty-format/-/pretty-format-29.7.0.tgz",
-      "integrity": "sha512-Pdlw/oPxN+aXdmM9R00JVC9WVFoCLTKJvDVLgmJ+qAffBMxsV85l/Lu7sNx4zSzPyoL2euImuEwHhOXdEgNFZQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@jest/schemas": "^29.6.3",
-        "ansi-styles": "^5.0.0",
-        "react-is": "^18.0.0"
-      },
-      "engines": {
-        "node": "^14.15.0 || ^16.10.0 || >=18.0.0"
-      }
-    },
     "node_modules/primeicons": {
       "version": "7.0.0",
       "resolved": "https://registry.npmjs.org/primeicons/-/primeicons-7.0.0.tgz",
@@ -3740,10 +3707,13 @@
       "license": "ISC"
     },
     "node_modules/proxy-from-env": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
-      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
-      "license": "MIT"
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
+      "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
     },
     "node_modules/psl": {
       "version": "1.15.0",
@@ -3792,13 +3762,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/react-is": {
-      "version": "18.3.1",
-      "resolved": "https://registry.npmjs.org/react-is/-/react-is-18.3.1.tgz",
-      "integrity": "sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/require-directory": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
@@ -3837,47 +3800,46 @@
       "integrity": "sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==",
       "license": "MIT"
     },
-    "node_modules/rollup": {
-      "version": "4.53.3",
-      "resolved": "https://registry.npmjs.org/rollup/-/rollup-4.53.3.tgz",
-      "integrity": "sha512-w8GmOxZfBmKknvdXU1sdM9NHcoQejwF/4mNgj2JuEEdRaHwwF12K7e9eXn1nLZ07ad+du76mkVsyeb2rKGllsA==",
+    "node_modules/rolldown": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.0-rc.16.tgz",
+      "integrity": "sha512-rzi5WqKzEZw3SooTt7cgm4eqIoujPIyGcJNGFL7iPEuajQw7vxMHUkXylu4/vhCkJGXsgRmxqMKXUpT6FEgl0g==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/estree": "1.0.8"
+        "@oxc-project/types": "=0.126.0",
+        "@rolldown/pluginutils": "1.0.0-rc.16"
       },
       "bin": {
-        "rollup": "dist/bin/rollup"
+        "rolldown": "bin/cli.mjs"
       },
       "engines": {
-        "node": ">=18.0.0",
-        "npm": ">=8.0.0"
+        "node": "^20.19.0 || >=22.12.0"
       },
       "optionalDependencies": {
-        "@rollup/rollup-android-arm-eabi": "4.53.3",
-        "@rollup/rollup-android-arm64": "4.53.3",
-        "@rollup/rollup-darwin-arm64": "4.53.3",
-        "@rollup/rollup-darwin-x64": "4.53.3",
-        "@rollup/rollup-freebsd-arm64": "4.53.3",
-        "@rollup/rollup-freebsd-x64": "4.53.3",
-        "@rollup/rollup-linux-arm-gnueabihf": "4.53.3",
-        "@rollup/rollup-linux-arm-musleabihf": "4.53.3",
-        "@rollup/rollup-linux-arm64-gnu": "4.53.3",
-        "@rollup/rollup-linux-arm64-musl": "4.53.3",
-        "@rollup/rollup-linux-loong64-gnu": "4.53.3",
-        "@rollup/rollup-linux-ppc64-gnu": "4.53.3",
-        "@rollup/rollup-linux-riscv64-gnu": "4.53.3",
-        "@rollup/rollup-linux-riscv64-musl": "4.53.3",
-        "@rollup/rollup-linux-s390x-gnu": "4.53.3",
-        "@rollup/rollup-linux-x64-gnu": "4.53.3",
-        "@rollup/rollup-linux-x64-musl": "4.53.3",
-        "@rollup/rollup-openharmony-arm64": "4.53.3",
-        "@rollup/rollup-win32-arm64-msvc": "4.53.3",
-        "@rollup/rollup-win32-ia32-msvc": "4.53.3",
-        "@rollup/rollup-win32-x64-gnu": "4.53.3",
-        "@rollup/rollup-win32-x64-msvc": "4.53.3",
-        "fsevents": "~2.3.2"
-      }
+        "@rolldown/binding-android-arm64": "1.0.0-rc.16",
+        "@rolldown/binding-darwin-arm64": "1.0.0-rc.16",
+        "@rolldown/binding-darwin-x64": "1.0.0-rc.16",
+        "@rolldown/binding-freebsd-x64": "1.0.0-rc.16",
+        "@rolldown/binding-linux-arm-gnueabihf": "1.0.0-rc.16",
+        "@rolldown/binding-linux-arm64-gnu": "1.0.0-rc.16",
+        "@rolldown/binding-linux-arm64-musl": "1.0.0-rc.16",
+        "@rolldown/binding-linux-ppc64-gnu": "1.0.0-rc.16",
+        "@rolldown/binding-linux-s390x-gnu": "1.0.0-rc.16",
+        "@rolldown/binding-linux-x64-gnu": "1.0.0-rc.16",
+        "@rolldown/binding-linux-x64-musl": "1.0.0-rc.16",
+        "@rolldown/binding-openharmony-arm64": "1.0.0-rc.16",
+        "@rolldown/binding-wasm32-wasi": "1.0.0-rc.16",
+        "@rolldown/binding-win32-arm64-msvc": "1.0.0-rc.16",
+        "@rolldown/binding-win32-x64-msvc": "1.0.0-rc.16"
+      }
+    },
+    "node_modules/rolldown/node_modules/@rolldown/pluginutils": {
+      "version": "1.0.0-rc.16",
+      "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.16.tgz",
+      "integrity": "sha512-45+YtqxLYKDWQouLKCrpIZhke+nXxhsw+qAHVzHDVwttyBlHNBVs2K25rDXrZzhpTp9w1FlAlvweV1H++fdZoA==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/rrweb-cssom": {
       "version": "0.6.0",
@@ -3994,9 +3956,9 @@
       "license": "MIT"
     },
     "node_modules/std-env": {
-      "version": "3.10.0",
-      "resolved": "https://registry.npmjs.org/std-env/-/std-env-3.10.0.tgz",
-      "integrity": "sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==",
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
+      "integrity": "sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==",
       "dev": true,
       "license": "MIT"
     },
@@ -4104,1348 +4066,162 @@
         "node": ">=8"
       }
     },
-    "node_modules/strip-final-newline": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/strip-final-newline/-/strip-final-newline-3.0.0.tgz",
-      "integrity": "sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
-    },
-    "node_modules/strip-literal": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/strip-literal/-/strip-literal-2.1.1.tgz",
-      "integrity": "sha512-631UJ6O00eNGfMiWG78ck80dfBab8X6IVFB51jZK5Icd7XAs60Z5y7QdSd/wGIklnWvRbUNloVzhOKKmutxQ6Q==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "js-tokens": "^9.0.1"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/antfu"
-      }
-    },
     "node_modules/superjson": {
       "version": "2.2.5",
       "resolved": "https://registry.npmjs.org/superjson/-/superjson-2.2.5.tgz",
       "integrity": "sha512-zWPTX96LVsA/eVYnqOM2+ofcdPqdS1dAF1LN4TS2/MWuUpfitd9ctTa87wt4xrYnZnkLtS69xpBdSxVBP5Rm6w==",
       "license": "MIT",
-      "dependencies": {
-        "copy-anything": "^4"
-      },
-      "engines": {
-        "node": ">=16"
-      }
-    },
-    "node_modules/supports-color": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
-      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "has-flag": "^4.0.0"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/symbol-tree": {
-      "version": "3.2.4",
-      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
-      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/test-exclude": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/test-exclude/-/test-exclude-6.0.0.tgz",
-      "integrity": "sha512-cAGWPIyOHU6zlmg88jwm7VRyXnMN7iV68OGAbYDk/Mh/xC/pzVPlQtY6ngoIH/5/tciuhGfvESU8GrHrcxD56w==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "@istanbuljs/schema": "^0.1.2",
-        "glob": "^7.1.4",
-        "minimatch": "^3.0.4"
-      },
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/test-exclude/node_modules/brace-expansion": {
-      "version": "1.1.12",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
-      "integrity": "sha512-9T9UjW3r0UW5c1Q7GTwllptXwhvYmEzFhzMfZ9H7FQWt+uZePjZPjBP/W1ZEyZ1twGWom5/56TF4lPcqjnDHcg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "balanced-match": "^1.0.0",
-        "concat-map": "0.0.1"
-      }
-    },
-    "node_modules/test-exclude/node_modules/glob": {
-      "version": "7.2.3",
-      "resolved": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
-      "integrity": "sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==",
-      "deprecated": "Glob versions prior to v9 are no longer supported",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "fs.realpath": "^1.0.0",
-        "inflight": "^1.0.4",
-        "inherits": "2",
-        "minimatch": "^3.1.1",
-        "once": "^1.3.0",
-        "path-is-absolute": "^1.0.0"
-      },
-      "engines": {
-        "node": "*"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/isaacs"
-      }
-    },
-    "node_modules/test-exclude/node_modules/minimatch": {
-      "version": "3.1.2",
-      "resolved": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
-      "integrity": "sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==",
-      "dev": true,
-      "license": "ISC",
-      "dependencies": {
-        "brace-expansion": "^1.1.7"
-      },
-      "engines": {
-        "node": "*"
-      }
-    },
-    "node_modules/tinybench": {
-      "version": "2.9.0",
-      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
-      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/tinyglobby": {
-      "version": "0.2.15",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
-      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "fdir": "^6.5.0",
-        "picomatch": "^4.0.3"
-      },
-      "engines": {
-        "node": ">=12.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/SuperchupuDev"
-      }
-    },
-    "node_modules/tinypool": {
-      "version": "0.8.4",
-      "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-0.8.4.tgz",
-      "integrity": "sha512-i11VH5gS6IFeLY3gMBQ00/MmLncVP7JLXOw1vlgkytLmJK7QnEr7NXf0LBdxfmNPAeyetukOk0bOYrJrFGjYJQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
-    "node_modules/tinyspy": {
-      "version": "2.2.1",
-      "resolved": "https://registry.npmjs.org/tinyspy/-/tinyspy-2.2.1.tgz",
-      "integrity": "sha512-KYad6Vy5VDWV4GH3fjpseMQ/XU2BhIYP7Vzd0LG44qRWm/Yt2WCOTicFdvmgo6gWaqooMQCawTtILVQJupKu7A==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.0.0"
-      }
-    },
-    "node_modules/tough-cookie": {
-      "version": "4.1.4",
-      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.1.4.tgz",
-      "integrity": "sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==",
-      "dev": true,
-      "license": "BSD-3-Clause",
-      "dependencies": {
-        "psl": "^1.1.33",
-        "punycode": "^2.1.1",
-        "universalify": "^0.2.0",
-        "url-parse": "^1.5.3"
-      },
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/tr46": {
-      "version": "5.1.1",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
-      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "punycode": "^2.3.1"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tslib": {
-      "version": "2.8.1",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
-      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
-      "license": "0BSD"
-    },
-    "node_modules/type-detect": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/type-detect/-/type-detect-4.1.0.tgz",
-      "integrity": "sha512-Acylog8/luQ8L7il+geoSxhEkazvkslg7PSNKOX59mbB9cOveP5aq9h74Y7YU8yDpJwetzQQrfIwtf4Wp4LKcw==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=4"
-      }
-    },
-    "node_modules/ufo": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.1.tgz",
-      "integrity": "sha512-9a4/uxlTWJ4+a5i0ooc1rU7C7YOw3wT+UGqdeNNHWnOF9qcMBgLRS+4IYUqbczewFx4mLEig6gawh7X6mFlEkA==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/undici-types": {
-      "version": "7.16.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
-      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
-      "license": "MIT"
-    },
-    "node_modules/universalify": {
-      "version": "0.2.0",
-      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.2.0.tgz",
-      "integrity": "sha512-CJ1QgKmNg3CwvAv/kOFmtnEN05f0D/cn9QntgNOQlQF9dgvVTHj3t+8JPdjqawCHk7V/KA+fbUqzZ9XWhcqPUg==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">= 4.0.0"
-      }
-    },
-    "node_modules/url-parse": {
-      "version": "1.5.10",
-      "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz",
-      "integrity": "sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "querystringify": "^2.1.1",
-        "requires-port": "^1.0.0"
-      }
-    },
-    "node_modules/vite": {
-      "version": "7.2.4",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-7.2.4.tgz",
-      "integrity": "sha512-NL8jTlbo0Tn4dUEXEsUg8KeyG/Lkmc4Fnzb8JXN/Ykm9G4HNImjtABMJgkQoVjOBN/j2WAwDTRytdqJbZsah7w==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "esbuild": "^0.25.0",
-        "fdir": "^6.5.0",
-        "picomatch": "^4.0.3",
-        "postcss": "^8.5.6",
-        "rollup": "^4.43.0",
-        "tinyglobby": "^0.2.15"
-      },
-      "bin": {
-        "vite": "bin/vite.js"
-      },
-      "engines": {
-        "node": "^20.19.0 || >=22.12.0"
-      },
-      "funding": {
-        "url": "https://github.com/vitejs/vite?sponsor=1"
-      },
-      "optionalDependencies": {
-        "fsevents": "~2.3.3"
-      },
-      "peerDependencies": {
-        "@types/node": "^20.19.0 || >=22.12.0",
-        "jiti": ">=1.21.0",
-        "less": "^4.0.0",
-        "lightningcss": "^1.21.0",
-        "sass": "^1.70.0",
-        "sass-embedded": "^1.70.0",
-        "stylus": ">=0.54.8",
-        "sugarss": "^5.0.0",
-        "terser": "^5.16.0",
-        "tsx": "^4.8.1",
-        "yaml": "^2.4.2"
-      },
-      "peerDependenciesMeta": {
-        "@types/node": {
-          "optional": true
-        },
-        "jiti": {
-          "optional": true
-        },
-        "less": {
-          "optional": true
-        },
-        "lightningcss": {
-          "optional": true
-        },
-        "sass": {
-          "optional": true
-        },
-        "sass-embedded": {
-          "optional": true
-        },
-        "stylus": {
-          "optional": true
-        },
-        "sugarss": {
-          "optional": true
-        },
-        "terser": {
-          "optional": true
-        },
-        "tsx": {
-          "optional": true
-        },
-        "yaml": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/vite-node": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/vite-node/-/vite-node-1.6.1.tgz",
-      "integrity": "sha512-YAXkfvGtuTzwWbDSACdJSg4A4DZiAqckWe90Zapc/sEX3XvHcw1NdurM/6od8J207tSDqNbSsgdCacBgvJKFuA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "cac": "^6.7.14",
-        "debug": "^4.3.4",
-        "pathe": "^1.1.1",
-        "picocolors": "^1.0.0",
-        "vite": "^5.0.0"
-      },
-      "bin": {
-        "vite-node": "vite-node.mjs"
-      },
-      "engines": {
-        "node": "^18.0.0 || >=20.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/aix-ppc64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.21.5.tgz",
-      "integrity": "sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "aix"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/android-arm": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.21.5.tgz",
-      "integrity": "sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/android-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.21.5.tgz",
-      "integrity": "sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/android-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.21.5.tgz",
-      "integrity": "sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/darwin-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.21.5.tgz",
-      "integrity": "sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/darwin-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.21.5.tgz",
-      "integrity": "sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/freebsd-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.21.5.tgz",
-      "integrity": "sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/freebsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.21.5.tgz",
-      "integrity": "sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-arm": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.21.5.tgz",
-      "integrity": "sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.21.5.tgz",
-      "integrity": "sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-ia32": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.21.5.tgz",
-      "integrity": "sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==",
-      "cpu": [
-        "ia32"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-loong64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.21.5.tgz",
-      "integrity": "sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg==",
-      "cpu": [
-        "loong64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-mips64el": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.21.5.tgz",
-      "integrity": "sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==",
-      "cpu": [
-        "mips64el"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-ppc64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.21.5.tgz",
-      "integrity": "sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-riscv64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.21.5.tgz",
-      "integrity": "sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==",
-      "cpu": [
-        "riscv64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-s390x": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.21.5.tgz",
-      "integrity": "sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==",
-      "cpu": [
-        "s390x"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/linux-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.21.5.tgz",
-      "integrity": "sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/netbsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.21.5.tgz",
-      "integrity": "sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "netbsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/openbsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.21.5.tgz",
-      "integrity": "sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "openbsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/sunos-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.21.5.tgz",
-      "integrity": "sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "sunos"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/win32-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.21.5.tgz",
-      "integrity": "sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/win32-ia32": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.21.5.tgz",
-      "integrity": "sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==",
-      "cpu": [
-        "ia32"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/@esbuild/win32-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.21.5.tgz",
-      "integrity": "sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vite-node/node_modules/esbuild": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.21.5.tgz",
-      "integrity": "sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw==",
-      "dev": true,
-      "hasInstallScript": true,
-      "license": "MIT",
-      "bin": {
-        "esbuild": "bin/esbuild"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "optionalDependencies": {
-        "@esbuild/aix-ppc64": "0.21.5",
-        "@esbuild/android-arm": "0.21.5",
-        "@esbuild/android-arm64": "0.21.5",
-        "@esbuild/android-x64": "0.21.5",
-        "@esbuild/darwin-arm64": "0.21.5",
-        "@esbuild/darwin-x64": "0.21.5",
-        "@esbuild/freebsd-arm64": "0.21.5",
-        "@esbuild/freebsd-x64": "0.21.5",
-        "@esbuild/linux-arm": "0.21.5",
-        "@esbuild/linux-arm64": "0.21.5",
-        "@esbuild/linux-ia32": "0.21.5",
-        "@esbuild/linux-loong64": "0.21.5",
-        "@esbuild/linux-mips64el": "0.21.5",
-        "@esbuild/linux-ppc64": "0.21.5",
-        "@esbuild/linux-riscv64": "0.21.5",
-        "@esbuild/linux-s390x": "0.21.5",
-        "@esbuild/linux-x64": "0.21.5",
-        "@esbuild/netbsd-x64": "0.21.5",
-        "@esbuild/openbsd-x64": "0.21.5",
-        "@esbuild/sunos-x64": "0.21.5",
-        "@esbuild/win32-arm64": "0.21.5",
-        "@esbuild/win32-ia32": "0.21.5",
-        "@esbuild/win32-x64": "0.21.5"
-      }
-    },
-    "node_modules/vite-node/node_modules/vite": {
-      "version": "5.4.21",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.21.tgz",
-      "integrity": "sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "esbuild": "^0.21.3",
-        "postcss": "^8.4.43",
-        "rollup": "^4.20.0"
-      },
-      "bin": {
-        "vite": "bin/vite.js"
-      },
-      "engines": {
-        "node": "^18.0.0 || >=20.0.0"
-      },
-      "funding": {
-        "url": "https://github.com/vitejs/vite?sponsor=1"
-      },
-      "optionalDependencies": {
-        "fsevents": "~2.3.3"
-      },
-      "peerDependencies": {
-        "@types/node": "^18.0.0 || >=20.0.0",
-        "less": "*",
-        "lightningcss": "^1.21.0",
-        "sass": "*",
-        "sass-embedded": "*",
-        "stylus": "*",
-        "sugarss": "*",
-        "terser": "^5.4.0"
-      },
-      "peerDependenciesMeta": {
-        "@types/node": {
-          "optional": true
-        },
-        "less": {
-          "optional": true
-        },
-        "lightningcss": {
-          "optional": true
-        },
-        "sass": {
-          "optional": true
-        },
-        "sass-embedded": {
-          "optional": true
-        },
-        "stylus": {
-          "optional": true
-        },
-        "sugarss": {
-          "optional": true
-        },
-        "terser": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/vitest": {
-      "version": "1.6.1",
-      "resolved": "https://registry.npmjs.org/vitest/-/vitest-1.6.1.tgz",
-      "integrity": "sha512-Ljb1cnSJSivGN0LqXd/zmDbWEM0RNNg2t1QW/XUhYl/qPqyu7CsqeWtqQXHVaJsecLPuDoak2oJcZN2QoRIOag==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@vitest/expect": "1.6.1",
-        "@vitest/runner": "1.6.1",
-        "@vitest/snapshot": "1.6.1",
-        "@vitest/spy": "1.6.1",
-        "@vitest/utils": "1.6.1",
-        "acorn-walk": "^8.3.2",
-        "chai": "^4.3.10",
-        "debug": "^4.3.4",
-        "execa": "^8.0.1",
-        "local-pkg": "^0.5.0",
-        "magic-string": "^0.30.5",
-        "pathe": "^1.1.1",
-        "picocolors": "^1.0.0",
-        "std-env": "^3.5.0",
-        "strip-literal": "^2.0.0",
-        "tinybench": "^2.5.1",
-        "tinypool": "^0.8.3",
-        "vite": "^5.0.0",
-        "vite-node": "1.6.1",
-        "why-is-node-running": "^2.2.2"
-      },
-      "bin": {
-        "vitest": "vitest.mjs"
-      },
-      "engines": {
-        "node": "^18.0.0 || >=20.0.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/vitest"
-      },
-      "peerDependencies": {
-        "@edge-runtime/vm": "*",
-        "@types/node": "^18.0.0 || >=20.0.0",
-        "@vitest/browser": "1.6.1",
-        "@vitest/ui": "1.6.1",
-        "happy-dom": "*",
-        "jsdom": "*"
-      },
-      "peerDependenciesMeta": {
-        "@edge-runtime/vm": {
-          "optional": true
-        },
-        "@types/node": {
-          "optional": true
-        },
-        "@vitest/browser": {
-          "optional": true
-        },
-        "@vitest/ui": {
-          "optional": true
-        },
-        "happy-dom": {
-          "optional": true
-        },
-        "jsdom": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/aix-ppc64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.21.5.tgz",
-      "integrity": "sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "aix"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/android-arm": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.21.5.tgz",
-      "integrity": "sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/android-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.21.5.tgz",
-      "integrity": "sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/android-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.21.5.tgz",
-      "integrity": "sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "android"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/darwin-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.21.5.tgz",
-      "integrity": "sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/darwin-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.21.5.tgz",
-      "integrity": "sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/freebsd-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.21.5.tgz",
-      "integrity": "sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/freebsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.21.5.tgz",
-      "integrity": "sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==",
-      "cpu": [
-        "x64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-arm": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.21.5.tgz",
-      "integrity": "sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==",
-      "cpu": [
-        "arm"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.21.5.tgz",
-      "integrity": "sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-ia32": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.21.5.tgz",
-      "integrity": "sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==",
-      "cpu": [
-        "ia32"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-loong64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.21.5.tgz",
-      "integrity": "sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg==",
-      "cpu": [
-        "loong64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-mips64el": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.21.5.tgz",
-      "integrity": "sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==",
-      "cpu": [
-        "mips64el"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/vitest/node_modules/@esbuild/linux-ppc64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.21.5.tgz",
-      "integrity": "sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==",
-      "cpu": [
-        "ppc64"
-      ],
-      "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
+      "dependencies": {
+        "copy-anything": "^4"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=16"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/linux-riscv64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.21.5.tgz",
-      "integrity": "sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==",
-      "cpu": [
-        "riscv64"
-      ],
+    "node_modules/supports-color": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-7.2.0.tgz",
+      "integrity": "sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
+      "dependencies": {
+        "has-flag": "^4.0.0"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=8"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/linux-s390x": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.21.5.tgz",
-      "integrity": "sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==",
-      "cpu": [
-        "s390x"
-      ],
+    "node_modules/symbol-tree": {
+      "version": "3.2.4",
+      "resolved": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
+      "integrity": "sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=12"
-      }
+      "license": "MIT"
     },
-    "node_modules/vitest/node_modules/@esbuild/linux-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.21.5.tgz",
-      "integrity": "sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/tinybench": {
+      "version": "2.9.0",
+      "resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
+      "integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/tinyexec": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.1.1.tgz",
+      "integrity": "sha512-VKS/ZaQhhkKFMANmAOhhXVoIfBXblQxGX1myCQ2faQrfmobMftXeJPcZGp0gS07ocvGJWDLZGyOZDadDBqYIJg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
       "engines": {
-        "node": ">=12"
+        "node": ">=18"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/netbsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.21.5.tgz",
-      "integrity": "sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/tinyglobby": {
+      "version": "0.2.16",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz",
+      "integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "netbsd"
-      ],
+      "dependencies": {
+        "fdir": "^6.5.0",
+        "picomatch": "^4.0.4"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=12.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/SuperchupuDev"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/openbsd-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.21.5.tgz",
-      "integrity": "sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/tinyrainbow": {
+      "version": "3.1.0",
+      "resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
+      "integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "openbsd"
-      ],
       "engines": {
-        "node": ">=12"
+        "node": ">=14.0.0"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/sunos-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.21.5.tgz",
-      "integrity": "sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/tough-cookie": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-4.1.4.tgz",
+      "integrity": "sha512-Loo5UUvLD9ScZ6jh8beX1T6sO1w2/MpCRpEP7V280GKMVUQ0Jzar2U3UJPsrdbziLEMMhu3Ujnq//rhiFuIeag==",
       "dev": true,
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "sunos"
-      ],
+      "license": "BSD-3-Clause",
+      "dependencies": {
+        "psl": "^1.1.33",
+        "punycode": "^2.1.1",
+        "universalify": "^0.2.0",
+        "url-parse": "^1.5.3"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=6"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/win32-arm64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.21.5.tgz",
-      "integrity": "sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==",
-      "cpu": [
-        "arm64"
-      ],
+    "node_modules/tr46": {
+      "version": "5.1.1",
+      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
+      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
+      "dependencies": {
+        "punycode": "^2.3.1"
+      },
       "engines": {
-        "node": ">=12"
+        "node": ">=18"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/win32-ia32": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.21.5.tgz",
-      "integrity": "sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==",
-      "cpu": [
-        "ia32"
-      ],
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "license": "0BSD"
+    },
+    "node_modules/undici-types": {
+      "version": "7.16.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
+      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
+      "license": "MIT"
+    },
+    "node_modules/universalify": {
+      "version": "0.2.0",
+      "resolved": "https://registry.npmjs.org/universalify/-/universalify-0.2.0.tgz",
+      "integrity": "sha512-CJ1QgKmNg3CwvAv/kOFmtnEN05f0D/cn9QntgNOQlQF9dgvVTHj3t+8JPdjqawCHk7V/KA+fbUqzZ9XWhcqPUg==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
       "engines": {
-        "node": ">=12"
+        "node": ">= 4.0.0"
       }
     },
-    "node_modules/vitest/node_modules/@esbuild/win32-x64": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.21.5.tgz",
-      "integrity": "sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==",
-      "cpu": [
-        "x64"
-      ],
+    "node_modules/url-parse": {
+      "version": "1.5.10",
+      "resolved": "https://registry.npmjs.org/url-parse/-/url-parse-1.5.10.tgz",
+      "integrity": "sha512-WypcfiRhfeUP9vvF0j6rw0J3hrWrw6iZv3+22h6iRMJ/8z1Tj6XfLP4DsUix5MhMPnXpiHDoKyoZ/bdCkwBCiQ==",
       "dev": true,
       "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=12"
+      "dependencies": {
+        "querystringify": "^2.1.1",
+        "requires-port": "^1.0.0"
       }
     },
-    "node_modules/vitest/node_modules/esbuild": {
-      "version": "0.21.5",
-      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.21.5.tgz",
-      "integrity": "sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw==",
+    "node_modules/vite": {
+      "version": "8.0.9",
+      "resolved": "https://registry.npmjs.org/vite/-/vite-8.0.9.tgz",
+      "integrity": "sha512-t7g7GVRpMXjNpa67HaVWI/8BWtdVIQPCL2WoozXXA7LBGEFK4AkkKkHx2hAQf5x1GZSlcmEDPkVLSGahxnEEZw==",
       "dev": true,
-      "hasInstallScript": true,
       "license": "MIT",
-      "bin": {
-        "esbuild": "bin/esbuild"
-      },
-      "engines": {
-        "node": ">=12"
-      },
-      "optionalDependencies": {
-        "@esbuild/aix-ppc64": "0.21.5",
-        "@esbuild/android-arm": "0.21.5",
-        "@esbuild/android-arm64": "0.21.5",
-        "@esbuild/android-x64": "0.21.5",
-        "@esbuild/darwin-arm64": "0.21.5",
-        "@esbuild/darwin-x64": "0.21.5",
-        "@esbuild/freebsd-arm64": "0.21.5",
-        "@esbuild/freebsd-x64": "0.21.5",
-        "@esbuild/linux-arm": "0.21.5",
-        "@esbuild/linux-arm64": "0.21.5",
-        "@esbuild/linux-ia32": "0.21.5",
-        "@esbuild/linux-loong64": "0.21.5",
-        "@esbuild/linux-mips64el": "0.21.5",
-        "@esbuild/linux-ppc64": "0.21.5",
-        "@esbuild/linux-riscv64": "0.21.5",
-        "@esbuild/linux-s390x": "0.21.5",
-        "@esbuild/linux-x64": "0.21.5",
-        "@esbuild/netbsd-x64": "0.21.5",
-        "@esbuild/openbsd-x64": "0.21.5",
-        "@esbuild/sunos-x64": "0.21.5",
-        "@esbuild/win32-arm64": "0.21.5",
-        "@esbuild/win32-ia32": "0.21.5",
-        "@esbuild/win32-x64": "0.21.5"
-      }
-    },
-    "node_modules/vitest/node_modules/vite": {
-      "version": "5.4.21",
-      "resolved": "https://registry.npmjs.org/vite/-/vite-5.4.21.tgz",
-      "integrity": "sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "esbuild": "^0.21.3",
-        "postcss": "^8.4.43",
-        "rollup": "^4.20.0"
+      "dependencies": {
+        "lightningcss": "^1.32.0",
+        "picomatch": "^4.0.4",
+        "postcss": "^8.5.10",
+        "rolldown": "1.0.0-rc.16",
+        "tinyglobby": "^0.2.16"
       },
       "bin": {
         "vite": "bin/vite.js"
       },
       "engines": {
-        "node": "^18.0.0 || >=20.0.0"
+        "node": "^20.19.0 || >=22.12.0"
       },
       "funding": {
         "url": "https://github.com/vitejs/vite?sponsor=1"
@@ -5454,23 +4230,33 @@
         "fsevents": "~2.3.3"
       },
       "peerDependencies": {
-        "@types/node": "^18.0.0 || >=20.0.0",
-        "less": "*",
-        "lightningcss": "^1.21.0",
-        "sass": "*",
-        "sass-embedded": "*",
-        "stylus": "*",
-        "sugarss": "*",
-        "terser": "^5.4.0"
+        "@types/node": "^20.19.0 || >=22.12.0",
+        "@vitejs/devtools": "^0.1.0",
+        "esbuild": "^0.27.0 || ^0.28.0",
+        "jiti": ">=1.21.0",
+        "less": "^4.0.0",
+        "sass": "^1.70.0",
+        "sass-embedded": "^1.70.0",
+        "stylus": ">=0.54.8",
+        "sugarss": "^5.0.0",
+        "terser": "^5.16.0",
+        "tsx": "^4.8.1",
+        "yaml": "^2.4.2"
       },
       "peerDependenciesMeta": {
         "@types/node": {
           "optional": true
         },
-        "less": {
+        "@vitejs/devtools": {
+          "optional": true
+        },
+        "esbuild": {
+          "optional": true
+        },
+        "jiti": {
           "optional": true
         },
-        "lightningcss": {
+        "less": {
           "optional": true
         },
         "sass": {
@@ -5487,6 +4273,102 @@
         },
         "terser": {
           "optional": true
+        },
+        "tsx": {
+          "optional": true
+        },
+        "yaml": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/vitest": {
+      "version": "4.1.4",
+      "resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.4.tgz",
+      "integrity": "sha512-tFuJqTxKb8AvfyqMfnavXdzfy3h3sWZRWwfluGbkeR7n0HUev+FmNgZ8SDrRBTVrVCjgH5cA21qGbCffMNtWvg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@vitest/expect": "4.1.4",
+        "@vitest/mocker": "4.1.4",
+        "@vitest/pretty-format": "4.1.4",
+        "@vitest/runner": "4.1.4",
+        "@vitest/snapshot": "4.1.4",
+        "@vitest/spy": "4.1.4",
+        "@vitest/utils": "4.1.4",
+        "es-module-lexer": "^2.0.0",
+        "expect-type": "^1.3.0",
+        "magic-string": "^0.30.21",
+        "obug": "^2.1.1",
+        "pathe": "^2.0.3",
+        "picomatch": "^4.0.3",
+        "std-env": "^4.0.0-rc.1",
+        "tinybench": "^2.9.0",
+        "tinyexec": "^1.0.2",
+        "tinyglobby": "^0.2.15",
+        "tinyrainbow": "^3.1.0",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
+        "why-is-node-running": "^2.3.0"
+      },
+      "bin": {
+        "vitest": "vitest.mjs"
+      },
+      "engines": {
+        "node": "^20.0.0 || ^22.0.0 || >=24.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/vitest"
+      },
+      "peerDependencies": {
+        "@edge-runtime/vm": "*",
+        "@opentelemetry/api": "^1.9.0",
+        "@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+        "@vitest/browser-playwright": "4.1.4",
+        "@vitest/browser-preview": "4.1.4",
+        "@vitest/browser-webdriverio": "4.1.4",
+        "@vitest/coverage-istanbul": "4.1.4",
+        "@vitest/coverage-v8": "4.1.4",
+        "@vitest/ui": "4.1.4",
+        "happy-dom": "*",
+        "jsdom": "*",
+        "vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+      },
+      "peerDependenciesMeta": {
+        "@edge-runtime/vm": {
+          "optional": true
+        },
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@types/node": {
+          "optional": true
+        },
+        "@vitest/browser-playwright": {
+          "optional": true
+        },
+        "@vitest/browser-preview": {
+          "optional": true
+        },
+        "@vitest/browser-webdriverio": {
+          "optional": true
+        },
+        "@vitest/coverage-istanbul": {
+          "optional": true
+        },
+        "@vitest/coverage-v8": {
+          "optional": true
+        },
+        "@vitest/ui": {
+          "optional": true
+        },
+        "happy-dom": {
+          "optional": true
+        },
+        "jsdom": {
+          "optional": true
+        },
+        "vite": {
+          "optional": false
         }
       }
     },
@@ -5801,13 +4683,6 @@
         "url": "https://github.com/chalk/ansi-styles?sponsor=1"
       }
     },
-    "node_modules/wrappy": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
-      "dev": true,
-      "license": "ISC"
-    },
     "node_modules/ws": {
       "version": "8.18.3",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.3.tgz",
@@ -5927,19 +4802,6 @@
       "engines": {
         "node": ">=8"
       }
-    },
-    "node_modules/yocto-queue": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/yocto-queue/-/yocto-queue-1.2.2.tgz",
-      "integrity": "sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==",
-      "dev": true,
-      "license": "MIT",
-      "engines": {
-        "node": ">=12.20"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/sindresorhus"
-      }
     }
   }
 }
diff --git a/frontend/package.json b/frontend/package.json
index f06d0dcf..230489fc 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -11,10 +11,10 @@
   },
   "dependencies": {
     "@supabase/supabase-js": "^2.90.1",
-    "axios": "^1.13.2",
+    "axios": "^1.15.1",
     "fflate": "^0.8.2",
     "libsodium-wrappers-sumo": "^0.7.15",
-    "lodash": "^4.17.21",
+    "lodash": "^4.18.1",
     "lucide-vue-next": "^1.0.0",
     "pdfjs-dist": "^5.4.530",
     "pinia": "^3.0.4",
@@ -27,11 +27,11 @@
     "vue-router": "^4.6.3"
   },
   "devDependencies": {
-    "@vitejs/plugin-vue": "^6.0.2",
-    "@vitest/coverage-v8": "^1.6.1",
+    "@vitejs/plugin-vue": "^6.0.6",
+    "@vitest/coverage-v8": "^4.1.4",
     "@vue/test-utils": "^2.4.3",
     "jsdom": "^23.0.0",
-    "vite": "^7.2.4",
-    "vitest": "^1.6.1"
+    "vite": "^8.0.9",
+    "vitest": "^4.1.4"
   }
 }
diff --git a/frontend/src/App.vue b/frontend/src/App.vue
index dcf53f38..69c94498 100644
--- a/frontend/src/App.vue
+++ b/frontend/src/App.vue
@@ -3,15 +3,22 @@
 
 <template>
   <div class="app-container">
-    <Navbar v-if="!isLandingPage" />
-    <main :class="isLandingPage ? 'landing-content' : 'content'">
-      <router-view />
-    </main>
-    <P2PTransferDialog v-if="!isLandingPage" />
-    <WarnDialog v-if="!isLandingPage" />
-    <DeleteConfirmDialog v-if="!isLandingPage" />
-    <UploadManager v-if="!isLandingPage" />
-    <DownloadManager v-if="!isLandingPage" />
+    <template v-if="!isP2PSubdomain">
+      <Navbar v-if="!isLandingPage" />
+      <main :class="isLandingPage ? 'landing-content' : 'content'">
+        <router-view />
+      </main>
+      <P2PTransferDialog v-if="!isLandingPage" />
+      <WarnDialog v-if="!isLandingPage" />
+      <DeleteConfirmDialog v-if="!isLandingPage" />
+      <UploadManager v-if="!isLandingPage" />
+      <DownloadManager v-if="!isLandingPage" />
+    </template>
+    <template v-else>
+      <main class="landing-content">
+        <router-view />
+      </main>
+    </template>
   </div>
 </template>
 
@@ -28,6 +35,7 @@ import { useBillingStore } from './stores/billing'
 import { useRealtimeStore } from './stores/realtime'
 import { watch, computed, onMounted } from 'vue'
 import { useRoute } from 'vue-router'
+import { isP2PSubdomain } from './composables/useSubdomain'
 
 const themeStore = useThemeStore()
 const authStore = useAuthStore()
@@ -37,7 +45,7 @@ const route = useRoute()
 
 // Check if current route is a landing page
 const isLandingPage = computed(() => {
-  return ['LandingHome', 'Pricing', 'Transfer', 'Compare'].includes(route.name)
+  return ['LandingHome', 'Pricing', 'Transfer', 'Compare', 'Security'].includes(route.name)
 })
 
 // Connect Supabase Realtime and fetch billing status when authenticated.
@@ -97,4 +105,17 @@ body {
   min-height: 100vh;
   width: 100%;
 }
+
+/* Global mobile resets */
+@media (max-width: 768px) {
+  /* Prevent iOS from zooming on input focus — requires font-size >= 16px */
+  input[type="text"],
+  input[type="email"],
+  input[type="password"],
+  input[type="search"],
+  textarea,
+  select {
+    font-size: 16px !important;
+  }
+}
 </style>
diff --git a/frontend/src/auth-client.js b/frontend/src/auth-client.js
index 7032e9a6..2aae9e11 100644
--- a/frontend/src/auth-client.js
+++ b/frontend/src/auth-client.js
@@ -23,6 +23,11 @@ const _apiBase = (() => {
   return url.replace(/\/$/, '')
 })()
 
+// ── Guest token (in-memory, never persisted) ──────────────────────────────────
+// Set during a P2P guest session. Takes priority over localStorage token.
+
+let _guestToken = null
+
 // ── Token storage ─────────────────────────────────────────────────────────────
 
 const LOCAL_TOKEN_KEY = 'kagibi_local_token'
@@ -32,11 +37,18 @@ function _localSaveToken(token) {
   else localStorage.removeItem(LOCAL_TOKEN_KEY)
 }
 
+function _b64urlDecode(str) {
+  // JWT uses base64url: replace URL-safe chars and restore padding
+  const b64 = str.replace(/-/g, '+').replace(/_/g, '/')
+  const pad = (4 - b64.length % 4) % 4
+  return atob(b64 + '='.repeat(pad))
+}
+
 function _localGetToken() {
   const token = localStorage.getItem(LOCAL_TOKEN_KEY)
   if (!token) return null
   try {
-    const payload = JSON.parse(atob(token.split('.')[1]))
+    const payload = JSON.parse(_b64urlDecode(token.split('.')[1]))
     if (payload.exp * 1000 < Date.now()) {
       localStorage.removeItem(LOCAL_TOKEN_KEY)
       return null
@@ -50,7 +62,7 @@ function _localGetToken() {
 
 function _localDecodeUser(token) {
   try {
-    const payload = JSON.parse(atob(token.split('.')[1]))
+    const payload = JSON.parse(_b64urlDecode(token.split('.')[1]))
     return { id: payload.sub, email: payload.email, aal: payload.aal || 'aal1' }
   } catch {
     return null
@@ -161,7 +173,7 @@ export const authClient = {
   },
 
   async getSession() {
-    const token = _localGetToken()
+    const token = _guestToken || _localGetToken()
     if (!token) return { data: { session: null } }
     const user = _localDecodeUser(token)
     return {
@@ -175,9 +187,22 @@ export const authClient = {
   },
 
   async getToken() {
+    if (_guestToken) return _guestToken
     return _localGetToken()
   },
 
+  setGuestToken(token) {
+    _guestToken = token
+  },
+
+  clearGuestToken() {
+    _guestToken = null
+  },
+
+  isGuestSession() {
+    return _guestToken !== null
+  },
+
   async updateUser(updates) {
     if (updates.password) {
       const token = _localGetToken()
@@ -190,6 +215,21 @@ export const authClient = {
     return {}
   },
 
+  async updateEmail(newEmail, password) {
+    const token = _localGetToken()
+    const headers = { 'Content-Type': 'application/json' }
+    if (token) headers['Authorization'] = `Bearer ${token}`
+    const res = await fetch(`${_apiBase}/auth/update-email`, {
+      method: 'PUT',
+      headers,
+      body: JSON.stringify({ new_email: newEmail, password }),
+    })
+    const data = await res.json()
+    if (!res.ok) throw new Error(data.error || `HTTP ${res.status}`)
+    if (data.access_token) _localSaveToken(data.access_token)
+    return data
+  },
+
   async refreshSession() {
     const token = _localGetToken()
     if (!token) return false
diff --git a/frontend/src/components/InputDialog.vue b/frontend/src/components/InputDialog.vue
index 541032e4..57f2451c 100644
--- a/frontend/src/components/InputDialog.vue
+++ b/frontend/src/components/InputDialog.vue
@@ -5,24 +5,25 @@
   <div v-if="isOpen" class="modal-overlay" @click.self="cancel">
     <div class="modal-content">
       <h3>{{ title }}</h3>
-      <input 
+      <input
         ref="inputRef"
-        v-model="inputValue" 
-        :placeholder="placeholder" 
+        v-model="inputValue"
+        :placeholder="placeholder"
+        :class="['modal-input', { 'input-error': validationError }]"
         @keyup.enter="confirm"
         @keyup.esc="cancel"
-        class="modal-input"
       />
+      <p v-if="validationError" class="error-label">{{ validationError }}</p>
       <div class="modal-actions">
         <button @click="cancel" class="btn-cancel">{{ t('common.cancel') }}</button>
-        <button @click="confirm" class="btn-confirm">{{ t('common.confirm') }}</button>
+        <button @click="confirm" class="btn-confirm" :disabled="!!validationError">{{ t('common.confirm') }}</button>
       </div>
     </div>
   </div>
 </template>
 
 <script setup>
-import { ref, watch, nextTick } from 'vue'
+import { ref, computed, watch, nextTick } from 'vue'
 import { useI18n } from 'vue-i18n'
 
 const props = defineProps({
@@ -38,6 +39,17 @@ const { t } = useI18n()
 const inputValue = ref('')
 const inputRef = ref(null)
 
+// Mirrors the backend regex: Unicode letters, numbers, spaces, - . _
+// The `u` flag enables Unicode property escapes (\p{L}, \p{N}).
+const VALID_NAME_RE = /^[\p{L}\p{N}\s\-\._]+$/u
+
+const validationError = computed(() => {
+  const v = inputValue.value
+  if (!v.trim()) return null // empty is handled by backend required binding
+  if (!VALID_NAME_RE.test(v)) return t('dialogs.rename.invalidName')
+  return null
+})
+
 watch(() => props.isOpen, (newVal) => {
   if (newVal) {
     inputValue.value = props.defaultValue || ''
@@ -49,6 +61,7 @@ watch(() => props.isOpen, (newVal) => {
 })
 
 const confirm = () => {
+  if (validationError.value) return
   emit('confirm', inputValue.value)
   emit('update:isOpen', false)
 }
@@ -90,11 +103,24 @@ h3 {
 .modal-input {
   width: 100%;
   padding: 10px;
-  margin-bottom: 20px;
+  margin-bottom: 6px;
   border: 1px solid #ccc;
   border-radius: 4px;
   box-sizing: border-box;
   font-size: 1rem;
+  transition: border-color 0.2s;
+}
+
+.modal-input.input-error {
+  border-color: #e53935;
+  outline-color: #e53935;
+}
+
+.error-label {
+  margin: 0 0 14px 0;
+  font-size: 0.82rem;
+  color: #e53935;
+  line-height: 1.4;
 }
 
 .modal-actions {
@@ -125,7 +151,12 @@ button {
   color: white;
 }
 
-.btn-confirm:hover {
+.btn-confirm:hover:not(:disabled) {
   background-color: #3aa876;
 }
+
+.btn-confirm:disabled {
+  background-color: #a5d6bc;
+  cursor: not-allowed;
+}
 </style>
diff --git a/frontend/src/components/MFAChallengeModal.vue b/frontend/src/components/MFAChallengeModal.vue
index 7a64877c..8c169797 100644
--- a/frontend/src/components/MFAChallengeModal.vue
+++ b/frontend/src/components/MFAChallengeModal.vue
@@ -57,7 +57,7 @@ const props = defineProps({
   context: {
     type: String,
     default: 'general',
-    validator: (value) => ['login', 'destructive', 'download', 'general'].includes(value)
+    validator: (value) => ['login', 'destructive', 'download', 'email_change', 'general'].includes(value)
   }
 })
 
@@ -75,6 +75,7 @@ const contextMessages = {
   login: 'Entrez votre code MFA pour vous connecter.',
   destructive: 'Cette action nécessite une vérification MFA pour des raisons de sécurité.',
   download: 'L\'accès à ce fichier nécessite une vérification MFA.',
+  email_change: 'La modification de l\'adresse email nécessite une vérification MFA.',
   general: 'Veuillez entrer votre code MFA pour continuer.'
 }
 
diff --git a/frontend/src/components/MFASettings.vue b/frontend/src/components/MFASettings.vue
index 6b781853..8c5b17a6 100644
--- a/frontend/src/components/MFASettings.vue
+++ b/frontend/src/components/MFASettings.vue
@@ -121,7 +121,7 @@
 
       <div class="restriction-list">
         <!-- Login Restriction -->
-        <div class="restriction-item">
+        <div class="restriction-item" :class="localSettings.require_mfa_on_login ? 'item-on' : 'item-off'">
           <div class="restriction-info">
             <div class="restriction-icon">
               <svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor" stroke-width="2">
@@ -145,7 +145,7 @@
         </div>
 
         <!-- Destructive Actions Restriction -->
-        <div class="restriction-item">
+        <div class="restriction-item" :class="localSettings.require_mfa_on_destructive_actions ? 'item-on' : 'item-off'">
           <div class="restriction-info">
             <div class="restriction-icon">
               <svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor" stroke-width="2">
@@ -169,7 +169,7 @@
         </div>
 
         <!-- Download Restriction -->
-        <div class="restriction-item">
+        <div class="restriction-item" :class="localSettings.require_mfa_on_downloads ? 'item-on' : 'item-off'">
           <div class="restriction-info">
             <div class="restriction-icon">
               <svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor" stroke-width="2">
@@ -192,6 +192,30 @@
             <span class="slider"></span>
           </label>
         </div>
+
+        <!-- Email Change Restriction -->
+        <div class="restriction-item" :class="localSettings.require_mfa_on_email_change ? 'item-on' : 'item-off'">
+          <div class="restriction-info">
+            <div class="restriction-icon">
+              <svg viewBox="0 0 24 24" width="20" height="20" fill="none" stroke="currentColor" stroke-width="2">
+                <path d="M4 4h16c1.1 0 2 .9 2 2v12c0 1.1-.9 2-2 2H4c-1.1 0-2-.9-2-2V6c0-1.1.9-2 2-2z"></path>
+                <polyline points="22,6 12,13 2,6"></polyline>
+              </svg>
+            </div>
+            <div class="restriction-text">
+              <span class="restriction-title">Modification de l'email</span>
+              <span class="restriction-desc">Exige le MFA avant de changer l'adresse email du compte</span>
+            </div>
+          </div>
+          <label class="toggle-switch">
+            <input
+              type="checkbox"
+              v-model="localSettings.require_mfa_on_email_change"
+              @change="saveRestriction('require_mfa_on_email_change')"
+            >
+            <span class="slider"></span>
+          </label>
+        </div>
       </div>
 
       <!-- Disable MFA -->
@@ -268,7 +292,8 @@ const qrCanvas = ref(null)
 const localSettings = ref({
   require_mfa_on_login: false,
   require_mfa_on_destructive_actions: false,
-  require_mfa_on_downloads: false
+  require_mfa_on_downloads: false,
+  require_mfa_on_email_change: false
 })
 
 // Sync local settings with fetched settings
@@ -276,7 +301,8 @@ watch(securitySettings, (newSettings) => {
   localSettings.value = {
     require_mfa_on_login: newSettings.require_mfa_on_login,
     require_mfa_on_destructive_actions: newSettings.require_mfa_on_destructive_actions,
-    require_mfa_on_downloads: newSettings.require_mfa_on_downloads
+    require_mfa_on_downloads: newSettings.require_mfa_on_downloads,
+    require_mfa_on_email_change: newSettings.require_mfa_on_email_change
   }
 }, { deep: true, immediate: true })
 
@@ -444,20 +470,15 @@ function filterNumericInput(event) {
   align-items: center;
   gap: 1rem;
   padding: 1.5rem;
-  background: var(--hover-background-color);
+  background: rgba(233, 168, 39, 0.06);
   border-radius: 12px;
-  border: 1px solid var(--border-color);
+  border: 1px solid rgba(233, 168, 39, 0.35);
   transition: all 0.3s ease;
 }
 
 .mfa-status-header.active {
-  background: rgba(34, 197, 94, 0.08);
-  border-color: rgba(34, 197, 94, 0.3);
-}
-
-.mfa-status-header.active .status-indicator {
-  background: rgba(34, 197, 94, 0.15);
-  color: rgb(22, 163, 74);
+  background: rgba(42, 157, 143, 0.08);
+  border-color: rgba(42, 157, 143, 0.35);
 }
 
 .status-indicator {
@@ -467,14 +488,14 @@ function filterNumericInput(event) {
   display: flex;
   align-items: center;
   justify-content: center;
-  background: var(--border-color);
-  color: var(--secondary-text-color);
+  background: rgba(233, 168, 39, 0.15);
+  color: var(--warning-color);
   flex-shrink: 0;
 }
 
 .status-indicator.active {
-  background: var(--success-color);
-  color: white;
+  background: rgba(42, 157, 143, 0.18);
+  color: var(--success-color);
 }
 
 .status-text {
@@ -487,6 +508,10 @@ function filterNumericInput(event) {
   color: var(--main-text-color);
 }
 
+.mfa-status-header.active .status-text h4 {
+  color: var(--success-color);
+}
+
 .status-desc {
   margin: 0;
   font-size: 0.9rem;
@@ -802,9 +827,19 @@ function filterNumericInput(event) {
   align-items: center;
   justify-content: space-between;
   padding: 1.25rem;
-  background: var(--hover-background-color);
   border-radius: 8px;
-  border: 1px solid var(--border-color);
+  border: 1px solid transparent;
+  transition: background 0.25s ease, border-color 0.25s ease;
+}
+
+.restriction-item.item-on {
+  background: rgba(34, 197, 94, 0.09);
+  border-color: rgba(34, 197, 94, 0.28);
+}
+
+.restriction-item.item-off {
+  background: rgba(239, 68, 68, 0.07);
+  border-color: rgba(239, 68, 68, 0.22);
 }
 
 .restriction-info {
@@ -818,12 +853,20 @@ function filterNumericInput(event) {
   width: 40px;
   height: 40px;
   border-radius: 8px;
-  background: var(--primary-color);
-  color: white;
   display: flex;
   align-items: center;
   justify-content: center;
   flex-shrink: 0;
+  transition: background 0.25s ease, color 0.25s ease;
+  color: var(--main-text-color);
+}
+
+.item-on .restriction-icon {
+  background: rgba(34, 197, 94, 0.18);
+}
+
+.item-off .restriction-icon {
+  background: rgba(239, 68, 68, 0.14);
 }
 
 .restriction-text {
@@ -882,7 +925,7 @@ function filterNumericInput(event) {
 }
 
 input:checked + .slider {
-  background-color: var(--primary-color);
+  background-color: #22c55e;
 }
 
 input:checked + .slider:before {
diff --git a/frontend/src/components/MoveDialog.vue b/frontend/src/components/MoveDialog.vue
index fd2b4900..7e230259 100644
--- a/frontend/src/components/MoveDialog.vue
+++ b/frontend/src/components/MoveDialog.vue
@@ -2,7 +2,7 @@
 <!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
 
 <template>
-  <div v-if="isOpen" class="modal-overlay" @click.self="close">
+  <div class="modal-overlay" @click.self="close">
     <div class="modal-content">
       <div class="modal-header">
         <h3>{{ t('dialogs.move.title') }}</h3>
@@ -18,7 +18,10 @@
           <div v-if="loading" class="loading-spinner">Chargement...</div>
           <div v-else-if="folders.length === 0 && currentPath !== '/'">Aucun sous-dossier.</div>
           <div v-for="folder in folders" :key="folder.ID" class="folder-item" @click="navigateTo(folder.Name)">
-            📁 {{ folder.Name }}
+            <svg class="folder-icon" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
+              <path d="M10 4H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2h-8l-2-2z" fill="#5f6368"/>
+            </svg>
+            {{ folder.Name }}
           </div>
         </div>
       </div>
@@ -31,26 +34,27 @@
 </template>
 
 <script setup>
-import { ref, watch } from 'vue';
+import { ref, onMounted } from 'vue';
 import { useI18n } from 'vue-i18n';
 import api from '../api';
 
 const { t } = useI18n();
 
-const props = defineProps({
-  isOpen: Boolean,
-});
-
 const emit = defineEmits(['close', 'move-to']);
 
 const loading = ref(false);
 const currentPath = ref('/');
 const folders = ref([]);
 
+// Encode each path segment independently so accented characters and spaces
+// are properly percent-encoded in the URL, while the slash separators are preserved.
+const encodePath = (path) =>
+  path.split('/').map(seg => encodeURIComponent(seg)).join('/');
+
 const fetchFolders = async (path) => {
   loading.value = true;
   try {
-    const response = await api.get(`/files/list${path}`);
+    const response = await api.get(`/files/list${encodePath(path)}`);
     folders.value = response.data.folders || [];
   } catch (error) {
     console.error('Error fetching folders:', error);
@@ -60,11 +64,11 @@ const fetchFolders = async (path) => {
   }
 };
 
-watch(() => props.isOpen, (newVal) => {
-  if (newVal) {
-    currentPath.value = '/';
-    fetchFolders('/');
-  }
+// The component is mounted by v-if in the parent, so onMounted fires exactly
+// when the dialog opens — no prop watcher needed.
+onMounted(() => {
+  currentPath.value = '/';
+  fetchFolders('/');
 });
 
 const navigateTo = (folderName) => {
@@ -173,6 +177,15 @@ const close = () => {
   padding: 8px;
   cursor: pointer;
   border-radius: 4px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.folder-icon {
+  width: 20px;
+  height: 20px;
+  flex-shrink: 0;
 }
 
 .folder-item:hover {
diff --git a/frontend/src/components/P2PTransferDialog.vue b/frontend/src/components/P2PTransferDialog.vue
index 516559c3..cded5653 100644
--- a/frontend/src/components/P2PTransferDialog.vue
+++ b/frontend/src/components/P2PTransferDialog.vue
@@ -2,20 +2,33 @@
 <!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
 
 <template>
-  <div v-if='visible' class='p2p-notification-container'>
-    <div class='p2p-card'>
-      <div class='card-header'>
+  <div v-if='visible' class='p2p-notification-container' :class="{ minimized: isMinimized }">
+    <div class='p2p-card' :class="{ shaking: shakeCard }">
+      <div class='card-header' @click.self="isMinimized && (isMinimized = false)">
         <h3 class='header-title'>
           <svg xmlns='http://www.w3.org/2000/svg' width='18' height='18' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><circle cx='12' cy='12' r='10'></circle><line x1='2' y1='12' x2='22' y2='12'></line><path d='M12 2a15.3 15.3 0 0 1 4 10 15.3 15.3 0 0 1-4 10 15.3 15.3 0 0 1-4-10 15.3 15.3 0 0 1 4-10z'></path></svg>
           {{ t('p2p.title') }}
+          <!-- Compact progress shown when minimized -->
+          <span v-if="isMinimized && p2pStore.activeTransfer" class="mini-progress">
+            {{ p2pStore.activeTransfer.progress }}%
+          </span>
         </h3>
-        <button v-if='canClose' @click='close' class='close-icon'>&times;</button>
+        <div class="header-actions">
+          <button class='minimize-icon' @click='isMinimized = !isMinimized' :title="isMinimized ? 'Agrandir' : 'Réduire'">
+            <svg v-if="isMinimized" xmlns='http://www.w3.org/2000/svg' width='16' height='16' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2.5' stroke-linecap='round' stroke-linejoin='round'><polyline points='18 15 12 9 6 15'></polyline></svg>
+            <svg v-else xmlns='http://www.w3.org/2000/svg' width='16' height='16' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2.5' stroke-linecap='round' stroke-linejoin='round'><polyline points='6 9 12 15 18 9'></polyline></svg>
+          </button>
+          <button v-if='canClose' @click='close' class='close-icon'>&times;</button>
+        </div>
       </div>
       
+      <!-- Card body hidden when minimized -->
+      <template v-if="!isMinimized">
+
       <!-- INCOMING REQUEST -->
       <div v-if='p2pStore.incomingOffer' class='notification-body'>
          <p class='request-text'>
-            {{ t('p2p.incomingRequest', { sender: p2pStore.incomingOffer.senderId.substring(0,8) }) }}
+            {{ t('p2p.incomingRequest', { sender: senderName }) }}
          </p>
          <div class='file-preview'>
             <div class='file-icon-box'>
@@ -32,6 +45,20 @@
          </div>
       </div>
 
+      <!-- REJECTED BY RECIPIENT (or timed out) -->
+      <div v-else-if='p2pStore.rejectedTransfer' class='notification-body'>
+        <div class='rejected-notice'>
+          <svg xmlns='http://www.w3.org/2000/svg' width='20' height='20' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><circle cx='12' cy='12' r='10'></circle><line x1='15' y1='9' x2='9' y2='15'></line><line x1='9' y1='9' x2='15' y2='15'></line></svg>
+          <div>
+            <p class='rejected-title'>{{ p2pStore.rejectedTransfer.timedOut ? t('p2p.transferTimedOut') : t('p2p.transferRejected') }}</p>
+            <p class='rejected-file'>{{ p2pStore.rejectedTransfer.fileName }}</p>
+          </div>
+        </div>
+        <div class='actions-grid single'>
+          <button @click='p2pStore.rejectedTransfer = null' class='btn btn-secondary'>{{ t('common.close') }}</button>
+        </div>
+      </div>
+
       <!-- ACTIVE TRANSFER -->
       <div v-else-if='p2pStore.activeTransfer' class='notification-body'>
          <div class='status-header'>
@@ -43,6 +70,12 @@
          </div>
          <p class='filename-display' :title='p2pStore.activeTransfer.fileName'>{{ p2pStore.activeTransfer.fileName }}</p>
          
+         <!-- Keep window active warning -->
+         <div v-if='!isDone' class='keep-active-notice'>
+           <svg xmlns='http://www.w3.org/2000/svg' width='14' height='14' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><path d='M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z'></path><line x1='12' y1='9' x2='12' y2='13'></line><line x1='12' y1='17' x2='12.01' y2='17'></line></svg>
+           {{ t('p2p.keepWindowActive') }}
+         </div>
+
          <!-- Connection Info -->
          <div v-if='p2pStore.activeTransfer.connectionInfo' class='connection-info'>
              <div class='info-row'>
@@ -63,29 +96,151 @@
          <div class='actions-grid single' v-else>
              <button @click='cancel' class='btn btn-danger-text'>{{ t('common.cancel') }}</button>
          </div>
+
+         <!-- Re-notify while waiting for acceptance -->
+         <div v-if='isWaitingForAcceptance' class='renotify-section'>
+             <button
+                 class='btn btn-renotify'
+                 @click='sendPing'
+                 :disabled='!canPing'
+             >
+                 <svg xmlns='http://www.w3.org/2000/svg' width='14' height='14' viewBox='0 0 24 24' fill='none' stroke='currentColor' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'><path d='M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9'/><path d='M13.73 21a2 2 0 0 1-3.46 0'/></svg>
+                 {{ pingBtnText }}
+             </button>
+             <span class='ping-count'>{{ t('p2p.pingsLeft', { count: pingsLeft }) }}</span>
+         </div>
       </div>
+
+      </template><!-- end v-if="!isMinimized" -->
     </div>
   </div>
 </template>
 
 <script setup>
-import { computed } from 'vue';
+import { computed, ref, watch, onMounted, onUnmounted, nextTick } from 'vue';
 import { useI18n } from 'vue-i18n';
 import { useP2PStore } from '../stores/p2p';
+import { useFriendStore } from '../stores/friends';
 
 const { t } = useI18n();
 
 const p2pStore = useP2PStore();
+const friendStore = useFriendStore();
+
+const senderName = computed(() => {
+    const offer = p2pStore.incomingOffer;
+    if (!offer) return '';
+    const friend = friendStore.friends.find(f => f.id === offer.senderId);
+    return friend?.name || offer.senderId.substring(0, 8);
+});
 
-const visible = computed(() => !!p2pStore.incomingOffer || !!p2pStore.activeTransfer);
+const visible = computed(() => !!p2pStore.incomingOffer || !!p2pStore.activeTransfer || !!p2pStore.rejectedTransfer);
 const isDone = computed(() => p2pStore.activeTransfer?.status === 'Done' || p2pStore.activeTransfer?.status === 'Complete');
-const canClose = computed(() => isDone.value || !!p2pStore.incomingOffer);
+const canClose = computed(() => isDone.value || !!p2pStore.incomingOffer || !!p2pStore.rejectedTransfer);
+const isWaitingForAcceptance = computed(() =>
+    p2pStore.activeTransfer?.type === 'send' && p2pStore.activeTransfer?.status === 'Connecting...'
+);
 
 const statusText = computed(() => {
     if (!p2pStore.activeTransfer) return '';
     return p2pStore.activeTransfer.status;
 });
 
+const isMinimized = ref(false);
+
+// --- Shake card ---
+const shakeCard = ref(false);
+function triggerShake() {
+    shakeCard.value = false;
+    nextTick(() => {
+        shakeCard.value = true;
+        setTimeout(() => { shakeCard.value = false; }, 700);
+    });
+}
+
+// --- Sound ---
+function playPingSound() {
+    try {
+        const ctx = new (window.AudioContext || window.webkitAudioContext)();
+        const oscillator = ctx.createOscillator();
+        const gainNode = ctx.createGain();
+        oscillator.connect(gainNode);
+        gainNode.connect(ctx.destination);
+        oscillator.type = 'sine';
+        oscillator.frequency.setValueAtTime(880, ctx.currentTime);
+        oscillator.frequency.exponentialRampToValueAtTime(440, ctx.currentTime + 0.3);
+        gainNode.gain.setValueAtTime(0.3, ctx.currentTime);
+        gainNode.gain.exponentialRampToValueAtTime(0.001, ctx.currentTime + 0.5);
+        oscillator.start(ctx.currentTime);
+        oscillator.stop(ctx.currentTime + 0.5);
+    } catch (_) { /* Audio not supported */ }
+}
+
+// --- Browser notifications ---
+function requestNotificationPermission() {
+    if ('Notification' in window && Notification.permission === 'default') {
+        Notification.requestPermission();
+    }
+}
+function showBrowserNotification(title, body) {
+    if ('Notification' in window && Notification.permission === 'granted') {
+        new Notification(title, { body, icon: '/Logo.png' });
+    }
+}
+
+// Trigger on incoming offer
+watch(() => p2pStore.incomingOffer, (offer) => {
+    if (offer) {
+        isMinimized.value = false; // Always expand on new offer
+        playPingSound();
+        showBrowserNotification(t('p2p.title'), t('p2p.incomingRequest', { sender: senderName.value }));
+        setTimeout(triggerShake, 300);
+    }
+});
+
+// Trigger on p2p_ping signal from sender — pingSeq increments on every ping,
+// so the watcher always fires regardless of any previous state.
+watch(() => p2pStore.pingSeq, (seq) => {
+    if (seq === 0) return; // initial mount, not an actual ping
+    triggerShake();
+    playPingSound();
+    if (p2pStore.incomingOffer) {
+        showBrowserNotification(t('p2p.pingNotification'), t('p2p.pingNotificationBody'));
+    }
+});
+
+// --- Re-notify cooldown timer ---
+const now = ref(Date.now());
+let nowInterval = null;
+onMounted(() => {
+    nowInterval = setInterval(() => { now.value = Date.now(); }, 1000);
+    requestNotificationPermission();
+});
+onUnmounted(() => {
+    if (nowInterval) clearInterval(nowInterval);
+});
+
+const canPing = computed(() => {
+    if (p2pStore.pingCount >= 3) return false;
+    if (p2pStore.pingCooldownUntil && now.value < p2pStore.pingCooldownUntil) return false;
+    return true;
+});
+const pingsLeft = computed(() => Math.max(0, 3 - p2pStore.pingCount));
+const cooldownSecondsLeft = computed(() => {
+    if (!p2pStore.pingCooldownUntil) return 0;
+    return Math.max(0, Math.ceil((p2pStore.pingCooldownUntil - now.value) / 1000));
+});
+const pingBtnText = computed(() => {
+    if (p2pStore.pingCount >= 3) return t('p2p.pingLimitReached');
+    if (cooldownSecondsLeft.value > 0) return `${t('p2p.pingNotify')} (${cooldownSecondsLeft.value}s)`;
+    return t('p2p.pingNotify');
+});
+
+function sendPing() {
+    if (!p2pStore.activeTransfer) return;
+    p2pStore.sendPing(p2pStore.activeTransfer.friendId, p2pStore.activeTransfer.transferId);
+}
+
 const formatSize = (bytes) => {
     if (bytes === 0) return '0 B';
     const k = 1024;
@@ -99,8 +254,9 @@ const reject = () => p2pStore.rejectTransfer();
 const cancel = () => p2pStore.cancelTransfer();
 const close = () => {
     if(p2pStore.incomingOffer) p2pStore.rejectTransfer();
+    else if(p2pStore.rejectedTransfer) p2pStore.rejectedTransfer = null;
     else if(p2pStore.activeTransfer && isDone.value) p2pStore.activeTransfer = null;
-    else p2pStore.cancelTransfer(); 
+    else p2pStore.cancelTransfer();
 };
 </script>
 
@@ -131,6 +287,16 @@ const close = () => {
     to { transform: translateY(0); opacity: 1; }
 }
 
+@keyframes shake {
+    0%, 100% { transform: translateX(0); }
+    15%, 45%, 75% { transform: translateX(-6px); }
+    30%, 60%, 90% { transform: translateX(6px); }
+}
+
+.p2p-card.shaking {
+    animation: shake 0.65s cubic-bezier(.36,.07,.19,.97) both;
+}
+
 .card-header {
     background: var(--background-color, #f8f9fa);
     padding: 12px 16px;
@@ -313,4 +479,137 @@ const close = () => {
 .info-value.turn-relay {
     color: var(--warning-color, #f39c12);
 }
+
+.rejected-notice {
+    display: flex;
+    align-items: flex-start;
+    gap: 12px;
+    background: var(--error-bg-color, #fdf0f0);
+    border: 1px solid var(--error-color, #e74c3c);
+    border-radius: 8px;
+    padding: 12px;
+    margin-bottom: 16px;
+    color: var(--error-color, #e74c3c);
+}
+.rejected-notice svg { flex-shrink: 0; margin-top: 2px; }
+.rejected-title {
+    margin: 0 0 4px 0;
+    font-weight: 600;
+    font-size: 0.9rem;
+}
+.rejected-file {
+    margin: 0;
+    font-size: 0.8rem;
+    color: var(--secondary-text-color, #888);
+    white-space: nowrap;
+    overflow: hidden;
+    text-overflow: ellipsis;
+    max-width: 240px;
+}
+
+.renotify-section {
+    display: flex;
+    align-items: center;
+    gap: 10px;
+    margin-top: 10px;
+    padding-top: 10px;
+    border-top: 1px solid var(--border-color, #eee);
+}
+
+.btn-renotify {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    padding: 6px 12px;
+    background: transparent;
+    border: 1px solid var(--primary-color, #3498db);
+    color: var(--primary-color, #3498db);
+    border-radius: 6px;
+    cursor: pointer;
+    font-size: 0.82rem;
+    font-weight: 600;
+    transition: all 0.2s;
+    white-space: nowrap;
+}
+.btn-renotify:hover:not(:disabled) {
+    background: var(--primary-color, #3498db);
+    color: white;
+}
+.btn-renotify:disabled {
+    opacity: 0.45;
+    cursor: not-allowed;
+}
+
+.ping-count {
+    font-size: 0.78rem;
+    color: var(--secondary-text-color, #888);
+    white-space: nowrap;
+}
+
+.keep-active-notice {
+    display: flex;
+    align-items: center;
+    gap: 6px;
+    font-size: 0.78rem;
+    color: var(--warning-color, #f39c12);
+    background: var(--warning-bg-color, #fffbf0);
+    border: 1px solid var(--warning-color, #f39c12);
+    border-radius: 6px;
+    padding: 6px 10px;
+    margin-bottom: 10px;
+}
+
+.header-actions {
+    display: flex;
+    align-items: center;
+    gap: 4px;
+}
+
+.minimize-icon {
+    background: none;
+    border: none;
+    cursor: pointer;
+    color: var(--secondary-text-color, #888);
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    padding: 2px 4px;
+    border-radius: 4px;
+}
+.minimize-icon:hover { color: var(--main-text-color, #333); }
+
+.mini-progress {
+    font-size: 0.78rem;
+    font-weight: 700;
+    color: var(--primary-color, #3498db);
+    margin-left: 8px;
+}
+
+@media (max-width: 768px) {
+    .p2p-notification-container {
+        bottom: 72px; /* above mobile nav */
+        right: 8px;
+        left: 8px;
+    }
+
+    .p2p-card {
+        width: 100%;
+    }
+
+    /* Minimized: just a compact pill at bottom-right */
+    .p2p-notification-container.minimized {
+        left: auto;
+        right: 8px;
+        width: auto;
+    }
+
+    .p2p-notification-container.minimized .p2p-card {
+        width: auto;
+        min-width: 160px;
+    }
+
+    .p2p-notification-container.minimized .card-header {
+        cursor: pointer;
+    }
+}
 </style>
diff --git a/frontend/src/components/auth/loginComponent.vue b/frontend/src/components/auth/loginComponent.vue
index 6bc71310..d124642f 100644
--- a/frontend/src/components/auth/loginComponent.vue
+++ b/frontend/src/components/auth/loginComponent.vue
@@ -48,6 +48,9 @@ import { ref } from 'vue'
 import { useAuthStore } from '../../stores/auth'
 import { useRouter } from 'vue-router'
 import MFAChallengeModal from '../MFAChallengeModal.vue'
+import { isP2PSubdomain } from '../../composables/useSubdomain'
+
+const postLoginRoute = isP2PSubdomain ? '/' : { name: 'Home' }
 
 const email = ref('')
 const password = ref('')
@@ -69,7 +72,7 @@ const login = async () => {
       showMFAChallenge.value = true
     } else if (result) {
       // Login successful without MFA
-      router.push({ name: 'Home' })
+      router.push(postLoginRoute)
     } else {
       error.value = 'Identifiants invalides'
     }
@@ -89,7 +92,7 @@ const login = async () => {
 const onMFAVerified = () => {
   // MFA verified successfully, redirect to Home
   authStore.pendingMFAVerification = false
-  router.push({ name: 'Home' })
+  router.push(postLoginRoute)
 }
 
 const onMFACancelled = () => {
diff --git a/frontend/src/components/auth/registerComponent.vue b/frontend/src/components/auth/registerComponent.vue
index c9d1d76a..467fea2f 100644
--- a/frontend/src/components/auth/registerComponent.vue
+++ b/frontend/src/components/auth/registerComponent.vue
@@ -786,4 +786,23 @@ label,
     }
   }
 }
+
+@media (max-width: 600px) {
+  .form-row-top {
+    flex-direction: column;
+    align-items: center;
+  }
+
+  .avatar-sidebar {
+    align-items: center;
+  }
+
+  .identity-fields {
+    width: 100%;
+  }
+
+  .form-control {
+    font-size: 16px; /* prevent iOS zoom on focus */
+  }
+}
 </style>
diff --git a/frontend/src/components/bar/MobileBottomNav.vue b/frontend/src/components/bar/MobileBottomNav.vue
new file mode 100644
index 00000000..7ff4c477
--- /dev/null
+++ b/frontend/src/components/bar/MobileBottomNav.vue
@@ -0,0 +1,257 @@
+<!-- Copyright (C) 2025-2026  Buuuntyyy -->
+<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
+
+<template>
+  <nav class="mobile-bottom-nav">
+    <button class="mobile-nav-item" :class="{ active: isActive('/dashboard/home') }" @click="navigateTo('/dashboard/home')">
+      <svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" class="mobile-nav-icon">
+        <path d="M10 20v-6h4v6h5v-8h3L12 3 2 12h3v8z" fill="currentColor"/>
+      </svg>
+      <span>Accueil</span>
+    </button>
+    <button class="mobile-nav-item" :class="{ active: isActive('/dashboard/files') }" @click="navigateTo('/dashboard/files')">
+      <svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" class="mobile-nav-icon">
+        <path d="M20 6h-8l-2-2H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2zm0 12H4V8h16v10z" fill="currentColor"/>
+      </svg>
+      <span>Fichiers</span>
+    </button>
+
+    <!-- FAB -->
+    <button class="mobile-nav-fab" @click="toggleFabMenu">
+      <svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" width="28" height="28"
+           :style="{ transform: showFabMenu ? 'rotate(45deg)' : 'none', transition: 'transform 0.2s' }">
+        <path d="M19 13h-6v6h-2v-6H5v-2h6V5h2v6h6v2z" fill="currentColor"/>
+      </svg>
+    </button>
+
+    <button class="mobile-nav-item" :class="{ active: isActive('/dashboard/shares') }" @click="navigateTo('/dashboard/shares')">
+      <svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" class="mobile-nav-icon">
+        <path d="M15 8c0-1.42-.5-2.73-1.33-3.76.42-.14.86-.24 1.33-.24 2.21 0 4 1.79 4 4s-1.79 4-4 4c-.43 0-.84-.09-1.23-.21-.03-.01-.06-.02-.1-.03A5.98 5.98 0 0 0 15 8zm1.66 5.13C18.03 14.06 19 15.32 19 17v3h4v-3c0-2.18-3.57-3.47-6.34-3.87zM9 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2m0 9c-2.7 0-5.8 1.29-6 4.02V21h12v-1.98c-.2-2.72-3.3-4.02-6-4.02z" fill="currentColor"/>
+      </svg>
+      <span>Partages</span>
+    </button>
+    <button class="mobile-nav-item" :class="{ active: isActive('/dashboard/friends') }" @click="navigateTo('/dashboard/friends')">
+      <svg viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg" class="mobile-nav-icon">
+        <path d="M16 11c1.66 0 2.99-1.34 2.99-3S17.66 5 16 5c-1.66 0-3 1.34-3 3s1.34 3 3 3zm-8 0c1.66 0 2.99-1.34 2.99-3S9.66 5 8 5C6.34 5 5 6.34 5 8s1.34 3 3 3zm0 2c-2.33 0-7 1.17-7 3.5V19h14v-2.5c0-2.33-4.67-3.5-7-3.5zm8 0c-.29 0-.62.02-.97.05 1.16.84 1.97 1.97 1.97 3.45V19h6v-2.5c0-2.33-4.67-3.5-7-3.5z" fill="currentColor"/>
+      </svg>
+      <span>Amis</span>
+    </button>
+
+    <!-- FAB backdrop -->
+    <Transition name="fab-backdrop">
+      <div v-if="showFabMenu" class="fab-backdrop" @click="showFabMenu = false" />
+    </Transition>
+
+    <!-- FAB menu -->
+    <Transition name="fab-menu">
+      <div v-if="showFabMenu" class="fab-menu">
+        <button class="fab-menu-item" @click="triggerUpload">
+          <div class="fab-menu-icon upload-icon">
+            <svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor">
+              <path d="M19.35 10.04A7.49 7.49 0 0 0 12 4C9.11 4 6.6 5.64 5.35 8.04A5.994 5.994 0 0 0 0 14c0 3.31 2.69 6 6 6h13c2.76 0 5-2.24 5-5 0-2.64-2.05-4.78-4.65-4.96zM14 13v4h-4v-4H7l5-5 5 5h-3z"/>
+            </svg>
+          </div>
+          <span>Importer un fichier</span>
+        </button>
+        <button class="fab-menu-item" @click="triggerCreateFolder">
+          <div class="fab-menu-icon folder-icon">
+            <svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor">
+              <path d="M20 6h-8l-2-2H4c-1.1 0-2 .9-2 2v12c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2zm-1 8h-3v3h-2v-3h-3v-2h3V9h2v3h3v2z"/>
+            </svg>
+          </div>
+          <span>Créer un dossier</span>
+        </button>
+      </div>
+    </Transition>
+  </nav>
+</template>
+
+<script setup>
+import { ref } from 'vue'
+import { useRouter, useRoute } from 'vue-router'
+import { useUIStore } from '../../stores/ui'
+
+const router = useRouter()
+const route = useRoute()
+const uiStore = useUIStore()
+
+const showFabMenu = ref(false)
+
+const navigateTo = (path) => router.push(path)
+const isActive = (path) => route.path.startsWith(path)
+
+const toggleFabMenu = () => {
+  showFabMenu.value = !showFabMenu.value
+}
+
+const triggerUpload = async () => {
+  showFabMenu.value = false
+  if (!route.path.startsWith('/dashboard/files')) {
+    await router.push('/dashboard/files')
+  }
+  uiStore.pendingMobileAction = 'upload'
+}
+
+const triggerCreateFolder = async () => {
+  showFabMenu.value = false
+  if (!route.path.startsWith('/dashboard/files')) {
+    await router.push('/dashboard/files')
+  }
+  uiStore.pendingMobileAction = 'createFolder'
+}
+</script>
+
+<style scoped>
+.mobile-bottom-nav {
+  display: none;
+}
+
+@media (max-width: 768px) {
+  .mobile-bottom-nav {
+    display: flex;
+    align-items: center;
+    justify-content: space-around;
+    position: fixed;
+    bottom: 0;
+    left: 0;
+    right: 0;
+    height: 64px;
+    background: var(--card-color);
+    border-top: 1px solid var(--border-color);
+    z-index: 900;
+    padding: 0 0.25rem;
+    box-shadow: 0 -2px 12px rgba(0,0,0,0.08);
+  }
+
+  .mobile-nav-item {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    justify-content: center;
+    gap: 2px;
+    background: none;
+    border: none;
+    cursor: pointer;
+    color: var(--secondary-text-color);
+    font-size: 0.65rem;
+    font-weight: 500;
+    padding: 0.4rem 0.75rem;
+    border-radius: 12px;
+    transition: color 0.2s;
+    flex: 1;
+  }
+
+  .mobile-nav-item.active {
+    color: var(--primary-color);
+  }
+
+  .mobile-nav-icon {
+    width: 22px;
+    height: 22px;
+  }
+
+  .mobile-nav-fab {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    width: 52px;
+    height: 52px;
+    border-radius: 50%;
+    background: var(--primary-color);
+    color: white;
+    border: none;
+    cursor: pointer;
+    box-shadow: 0 4px 12px rgba(0, 80, 255, 0.35);
+    margin-bottom: 8px;
+    flex-shrink: 0;
+    transition: transform 0.2s, box-shadow 0.2s;
+    z-index: 910;
+    position: relative;
+  }
+
+  .mobile-nav-fab:active {
+    transform: scale(0.95);
+  }
+
+  /* Backdrop */
+  .fab-backdrop {
+    position: fixed;
+    inset: 0;
+    background: rgba(0, 0, 0, 0.35);
+    z-index: 905;
+  }
+
+  .fab-backdrop-enter-active,
+  .fab-backdrop-leave-active {
+    transition: opacity 0.2s;
+  }
+  .fab-backdrop-enter-from,
+  .fab-backdrop-leave-to {
+    opacity: 0;
+  }
+
+  /* FAB menu */
+  .fab-menu {
+    position: fixed;
+    bottom: 80px;
+    left: 50%;
+    transform: translateX(-50%);
+    display: flex;
+    flex-direction: column;
+    gap: 12px;
+    z-index: 910;
+    width: 220px;
+  }
+
+  .fab-menu-enter-active,
+  .fab-menu-leave-active {
+    transition: opacity 0.2s, transform 0.2s;
+  }
+  .fab-menu-enter-from,
+  .fab-menu-leave-to {
+    opacity: 0;
+    transform: translateX(-50%) translateY(16px);
+  }
+
+  .fab-menu-item {
+    display: flex;
+    align-items: center;
+    gap: 14px;
+    background: var(--card-color);
+    border: 1px solid var(--border-color);
+    border-radius: 14px;
+    padding: 14px 18px;
+    cursor: pointer;
+    font-size: 0.92rem;
+    font-weight: 600;
+    color: var(--main-text-color);
+    box-shadow: 0 4px 16px rgba(0,0,0,0.12);
+    transition: background 0.15s;
+    text-align: left;
+  }
+
+  .fab-menu-item:active {
+    background: var(--hover-background-color);
+  }
+
+  .fab-menu-icon {
+    width: 42px;
+    height: 42px;
+    border-radius: 12px;
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    flex-shrink: 0;
+  }
+
+  .upload-icon {
+    background: rgba(99, 102, 241, 0.12);
+    color: var(--primary-color);
+  }
+
+  .folder-icon {
+    background: rgba(245, 158, 11, 0.12);
+    color: #f59e0b;
+  }
+}
+</style>
diff --git a/frontend/src/components/bar/leftBar.vue b/frontend/src/components/bar/leftBar.vue
index 3a5c18d6..a59ca96c 100644
--- a/frontend/src/components/bar/leftBar.vue
+++ b/frontend/src/components/bar/leftBar.vue
@@ -182,6 +182,18 @@ const newFriendId = ref('')
 const showLeftInfo = ref(false)
 const isCollapsed = ref(false)
 
+const isTablet = () => window.innerWidth >= 769 && window.innerWidth <= 1024
+
+const syncCollapsedState = () => {
+  if (isTablet()) {
+    isCollapsed.value = true
+  } else if (window.innerWidth > 1024 && isCollapsed.value) {
+    // Only auto-expand if it was auto-collapsed (not manually collapsed)
+    // We can't distinguish, so only restore if we're back to desktop range
+    isCollapsed.value = false
+  }
+}
+
 const closeAddFriendMenu = () => {
     if (showAddFriendMenu.value) {
         showAddFriendMenu.value = false
@@ -204,10 +216,13 @@ const toggleAddFriendMenu = () => {
 
 onMounted(() => {
     window.addEventListener('click', closeAddFriendMenu)
+    syncCollapsedState()
+    window.addEventListener('resize', syncCollapsedState)
 })
 
 onUnmounted(() => {
     window.removeEventListener('click', closeAddFriendMenu)
+    window.removeEventListener('resize', syncCollapsedState)
 })
 
 const addFriend = async () => {
@@ -815,4 +830,50 @@ const storageLimitGB = computed(() => {
 .left-bar.collapsed .storage-bar {
     display: none;
 }
+
+/* Hide sidebar entirely on mobile — replaced by bottom nav */
+@media (max-width: 768px) {
+  .left-bar-container {
+    display: none;
+  }
+}
+
+/* On tablets, auto-collapse the sidebar */
+@media (max-width: 1024px) and (min-width: 769px) {
+  .left-bar {
+    width: 72px;
+    padding: 8px;
+  }
+
+  .left-bar .btn-new span,
+  .left-bar .menu-item span,
+  .left-bar .arrow-icon,
+  .left-bar .accordion-content,
+  .left-bar .storage-info {
+    display: none;
+  }
+
+  .left-bar .btn-new {
+    padding: 0;
+    justify-content: center;
+  }
+
+  .left-bar .plus-icon { margin: 0; }
+
+  .left-bar .menu-item {
+    justify-content: center;
+    padding: 0;
+  }
+
+  .left-bar .icon-svg { margin: 0; }
+
+  .left-bar .storage-section {
+    padding: 6px;
+  }
+
+  /* Hide the manual toggle — sidebar is auto-collapsed by breakpoint */
+  .collapse-toggle {
+    display: none;
+  }
+}
 </style>
diff --git a/frontend/src/components/bar/searchBar.vue b/frontend/src/components/bar/searchBar.vue
index ad25aaec..46f41ab1 100644
--- a/frontend/src/components/bar/searchBar.vue
+++ b/frontend/src/components/bar/searchBar.vue
@@ -3,28 +3,26 @@
 
 <template>
   <div class="search-bar" ref="searchBarRef">
-    <!-- Disabled state when filename encryption is active -->
-    <div v-if="filenamesAreEncrypted" class="search-wrapper search-wrapper--disabled" :title="t('search.encryptedDisabledTooltip', 'La recherche est désactivée car les noms de fichiers sont chiffrés')">
+    <!-- Disabled: filename encryption active -->
+    <div v-if="filenamesAreEncrypted"
+         class="search-wrapper search-wrapper--disabled"
+         :title="t('search.encryptedDisabledTooltip', 'La recherche est désactivée car les noms de fichiers sont chiffrés')">
       <div class="icon-wrapper search-icon">
-        <svg focusable="false" viewBox="0 0 24 24" height="24px" width="24px" fill="#5f6368">
-          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"></path>
+        <svg focusable="false" viewBox="0 0 24 24" height="22px" width="22px" fill="currentColor">
+          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/>
         </svg>
       </div>
       <span class="search-disabled-label">{{ t('search.encryptedDisabled', 'Recherche désactivée (noms chiffrés)') }}</span>
-      <div class="icon-wrapper filter-icon">
-        <svg focusable="false" viewBox="0 0 24 24" height="24px" width="24px" fill="#5f6368">
-          <path d="M12 1L3 5v6c0 5.55 3.84 10.74 9 12 5.16-1.26 9-6.45 9-12V5l-9-4zm0 10.99h7c-.53 4.12-3.28 7.79-7 8.94V12H5V6.3l7-3.11v8.8z"/>
-        </svg>
-      </div>
     </div>
 
     <!-- Normal search -->
     <div v-else class="search-wrapper" :class="{ focused: isFocused || showDropdown }">
       <div class="icon-wrapper search-icon">
-        <svg focusable="false" viewBox="0 0 24 24" height="24px" width="24px" fill="#5f6368">
-          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"></path>
+        <svg focusable="false" viewBox="0 0 24 24" height="22px" width="22px" fill="currentColor">
+          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/>
         </svg>
       </div>
+
       <input
         type="text"
         v-model="searchQuery"
@@ -33,251 +31,516 @@
         @focus="handleFocus"
         @keydown.down.prevent="navigateResults(1)"
         @keydown.up.prevent="navigateResults(-1)"
-        @keydown.enter.prevent="openSelectedResult"
+        @keydown.enter.prevent="handleEnter"
       />
-      <div class="icon-wrapper filter-icon" v-if="searchQuery" @click="clearSearch">
-        <svg focusable="false" viewBox="0 0 24 24" height="24px" width="24px" fill="#5f6368">
-          <path d="M19 6.41L17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"></path>
+
+      <!-- Active filters pill (visible when query + filters) -->
+      <button
+        v-if="searchQuery && activeFilterCount > 0"
+        class="active-filters-pill"
+        @click.stop="clearAllFilters"
+        title="Effacer les filtres"
+      >
+        <span class="active-filters-dot" />
+        {{ activeFilterCount }} filtre{{ activeFilterCount > 1 ? 's' : '' }}
+        <svg viewBox="0 0 24 24" width="12" height="12" fill="currentColor"><path d="M19 6.41L17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/></svg>
+      </button>
+
+      <!-- Clear search -->
+      <div v-if="searchQuery" class="icon-wrapper clear-icon" @click="clearSearch" title="Effacer">
+        <svg focusable="false" viewBox="0 0 24 24" height="20px" width="20px" fill="currentColor">
+          <path d="M19 6.41L17.59 5 12 10.59 6.41 5 5 6.41 10.59 12 5 17.59 6.41 19 12 13.41 17.59 19 19 17.59 13.41 12z"/>
         </svg>
       </div>
-      <div class="icon-wrapper filter-icon" v-else>
-        <svg focusable="false" viewBox="0 0 24 24" height="24px" width="24px" fill="#5f6368">
-          <path d="M3 17v2h6v-2H3zM3 5v2h10V5H3zm10 16v-2h8v-2h-8v-2h-2v6h2zM7 9v2H3v2h4v2h2V9H7zm14 4v-2H11v2h10zm-6-4h2V7h4V5h-4V3h-2v6z"></path>
+    </div>
+
+    <!-- Committed filter bar: shown after pressing Enter (dropdown closed) -->
+    <div
+      class="committed-filter-bar"
+      v-if="searchCommitted && searchQuery && !showDropdown && (searchResults.files.length > 0 || searchResults.folders.length > 0)"
+    >
+      <!-- Type chips -->
+      <button
+        class="filter-chip"
+        :class="{ active: fileStore.searchFilterType === 'file' }"
+        @click.stop="toggleType('file')"
+      >
+        <svg viewBox="0 0 24 24" width="13" height="13" fill="currentColor" style="flex-shrink:0">
+          <path d="M14 2H6c-1.1 0-1.99.9-1.99 2L4 20c0 1.1.89 2 1.99 2H18c1.1 0 2-.9 2-2V8l-6-6zm-1 7V3.5L18.5 9H13z"/>
         </svg>
-      </div>
+        Fichiers <span class="chip-count">{{ searchResults.files.length }}</span>
+      </button>
+      <button
+        class="filter-chip"
+        :class="{ active: fileStore.searchFilterType === 'folder' }"
+        @click.stop="toggleType('folder')"
+      >
+        <svg viewBox="0 0 24 24" width="13" height="13" fill="currentColor" style="flex-shrink:0">
+          <path d="M10 4H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2h-8l-2-2z"/>
+        </svg>
+        Répertoires <span class="chip-count">{{ searchResults.folders.length }}</span>
+      </button>
+
+      <span v-if="availableExtensions.length > 0" class="strip-divider" />
+
+      <!-- Extensions -->
+      <button
+        v-for="{ ext, count } in availableExtensions"
+        :key="'ext-' + ext"
+        class="filter-chip"
+        :class="{ active: fileStore.searchFilterExtensions.includes(ext) }"
+        @click.stop="toggleExtension(ext)"
+      >.{{ ext }} <span class="chip-count">{{ count }}</span></button>
+
+      <span v-if="availableExtensions.length > 0 && availableTags.length > 0" class="strip-divider" />
+
+      <!-- Tags -->
+      <button
+        v-for="tag in availableTags"
+        :key="'tag-' + tag.name"
+        class="filter-chip tag-chip"
+        :class="{ active: fileStore.searchFilterTags.includes(tag.name) }"
+        :style="fileStore.searchFilterTags.includes(tag.name)
+          ? { background: tag.color, borderColor: tag.color, color: '#fff' }
+          : { borderColor: tag.color, color: tag.color }"
+        @click.stop="toggleTag(tag.name)"
+      >
+        <span class="tag-dot" :style="{ background: fileStore.searchFilterTags.includes(tag.name) ? '#fff' : tag.color }" />
+        {{ tag.name }}
+      </button>
     </div>
 
-    <!-- Dropdown Results -->
-    <div class="search-dropdown" v-if="showDropdown && hasResults">
-      <div v-if="searchResults.folders.length > 0" class="result-group">
-        <div class="group-title">{{ t('file.folders') }}</div>
-        <div 
-          v-for="(folder, index) in searchResults.folders" 
-          :key="'folder-' + folder.ID"
-          class="result-item"
-          :class="{ active: activeIndex === index }"
-          @click="openItem(folder, 'folder')"
-          @mouseenter="activeIndex = index"
+    <!-- Unified dropdown: filters + results -->
+    <div class="search-dropdown" v-if="showDropdown && searchResults.files.length + searchResults.folders.length > 0">
+
+      <!-- ── Filter strip ─────────────────────────────────────────── -->
+      <div
+        class="filter-strip"
+        v-if="availableExtensions.length > 0 || availableTags.length > 0 || searchResults.files.length > 0 || searchResults.folders.length > 0"
+      >
+        <!-- Type chips -->
+        <button
+          class="filter-chip"
+          :class="{ active: fileStore.searchFilterType === 'file' }"
+          @click.stop="toggleType('file')"
         >
-          <div class="item-icon">
-            <svg viewBox="0 0 24 24" width="20" height="20" fill="#5f6368"><path d="M10 4H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2h-8l-2-2z"/></svg>
-          </div>
-          <div class="item-details">
-            <span class="item-name">{{ folder.Name }}</span>
-            <span class="item-path">{{ folder.Path }}</span>
-          </div>
-        </div>
+          <svg viewBox="0 0 24 24" width="13" height="13" fill="currentColor" style="flex-shrink:0">
+            <path d="M14 2H6c-1.1 0-1.99.9-1.99 2L4 20c0 1.1.89 2 1.99 2H18c1.1 0 2-.9 2-2V8l-6-6zm-1 7V3.5L18.5 9H13z"/>
+          </svg>
+          Fichiers <span class="chip-count">{{ searchResults.files.length }}</span>
+        </button>
+        <button
+          class="filter-chip"
+          :class="{ active: fileStore.searchFilterType === 'folder' }"
+          @click.stop="toggleType('folder')"
+        >
+          <svg viewBox="0 0 24 24" width="13" height="13" fill="currentColor" style="flex-shrink:0">
+            <path d="M10 4H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2h-8l-2-2z"/>
+          </svg>
+          Répertoires <span class="chip-count">{{ searchResults.folders.length }}</span>
+        </button>
+
+        <!-- Divider between type and extensions -->
+        <span
+          v-if="availableExtensions.length > 0"
+          class="strip-divider"
+        />
+
+        <!-- Extensions -->
+        <button
+          v-for="{ ext, count } in availableExtensions"
+          :key="'ext-' + ext"
+          class="filter-chip"
+          :class="{ active: fileStore.searchFilterExtensions.includes(ext) }"
+          @click.stop="toggleExtension(ext)"
+        >.{{ ext }} <span class="chip-count">{{ count }}</span></button>
+
+        <!-- Divider between extensions and tags -->
+        <span
+          v-if="availableExtensions.length > 0 && availableTags.length > 0"
+          class="strip-divider"
+        />
+
+        <!-- Tags -->
+        <button
+          v-for="tag in availableTags"
+          :key="'tag-' + tag.name"
+          class="filter-chip tag-chip"
+          :class="{ active: fileStore.searchFilterTags.includes(tag.name) }"
+          :style="fileStore.searchFilterTags.includes(tag.name)
+            ? { background: tag.color, borderColor: tag.color, color: '#fff' }
+            : { borderColor: tag.color, color: tag.color }"
+          @click.stop="toggleTag(tag.name)"
+        >
+          <span class="tag-dot" :style="{ background: fileStore.searchFilterTags.includes(tag.name) ? '#fff' : tag.color }" />
+          {{ tag.name }}
+        </button>
       </div>
 
-      <div v-if="searchResults.files.length > 0" class="result-group">
-        <div class="group-title">{{ t('file.files') }}</div>
-        <div 
-          v-for="(file, index) in searchResults.files" 
-          :key="'file-' + file.ID"
-          class="result-item"
-          :class="{ active: activeIndex === (searchResults.folders.length + index) }"
-          @click="openItem(file, 'file')"
-          @mouseenter="activeIndex = searchResults.folders.length + index"
-        >
-          <div class="item-icon">
-            <svg viewBox="0 0 24 24" width="20" height="20" fill="#5f6368"><path d="M14 2H6c-1.1 0-1.99.9-1.99 2L4 20c0 1.1.89 2 1.99 2H18c1.1 0 2-.9 2-2V8l-6-6zm2 16H8v-2h8v2zm0-4H8v-2h8v2zm-3-5V3.5L18.5 9H13z"/></svg>
+      <!-- ── Results ──────────────────────────────────────────────── -->
+      <template v-if="hasFilteredResults">
+        <!-- Folders -->
+        <div v-if="filteredFolders.length > 0" class="result-group">
+          <div class="group-title">{{ t('file.folders') }}</div>
+          <div
+            v-for="(folder, index) in filteredFolders"
+            :key="'folder-' + folder.ID"
+            class="result-item"
+            :class="{ active: activeIndex === index }"
+            @click="openItem(folder, 'folder')"
+            @mouseenter="activeIndex = index"
+          >
+            <div class="item-icon">
+              <svg viewBox="0 0 24 24" width="20" height="20" fill="#5f6368">
+                <path d="M10 4H4c-1.1 0-1.99.9-1.99 2L2 18c0 1.1.9 2 2 2h16c1.1 0 2-.9 2-2V8c0-1.1-.9-2-2-2h-8l-2-2z"/>
+              </svg>
+            </div>
+            <div class="item-details">
+              <span class="item-name">{{ folder.Name }}</span>
+              <span class="item-path">{{ folder.Path }}</span>
+            </div>
           </div>
-          <div class="item-details">
-            <span class="item-name">{{ file.Name }}</span>
-            <span class="item-path">{{ file.Path }}</span>
+        </div>
+
+        <!-- Files -->
+        <div v-if="filteredFiles.length > 0" class="result-group">
+          <div class="group-title">
+            {{ t('file.files') }}
+            <span
+              v-if="activeFilterCount > 0 && filteredFiles.length < searchResults.files.length"
+              class="results-count-badge"
+            >{{ filteredFiles.length }} / {{ searchResults.files.length }}</span>
           </div>
-          <div class="item-actions">
-            <button 
-              class="action-btn preview-btn" 
-              @click.stop="previewFile(file)"
-              title="Visualiser"
-            >
-              <svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor">
-                <path d="M12 4.5C7 4.5 2.73 7.61 1 12c1.73 4.39 6 7.5 11 7.5s9.27-3.11 11-7.5c-1.73-4.39-6-7.5-11-7.5zM12 17c-2.76 0-5-2.24-5-5s2.24-5 5-5 5 2.24 5 5-2.24 5-5 5zm0-8c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/>
-              </svg>
-            </button>
-            <button 
-              class="action-btn download-btn" 
-              @click.stop="downloadFile(file)"
-              title="Télécharger"
-            >
-              <svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor">
-                <path d="M19 9h-4V3H9v6H5l7 7 7-7zM5 18v2h14v-2H5z"/>
+          <div
+            v-for="(file, index) in filteredFiles"
+            :key="'file-' + file.ID"
+            class="result-item"
+            :class="{ active: activeIndex === (filteredFolders.length + index) }"
+            @click="openItem(file, 'file')"
+            @mouseenter="activeIndex = filteredFolders.length + index"
+          >
+            <div class="item-icon">
+              <svg viewBox="0 0 24 24" width="20" height="20" fill="#5f6368">
+                <path d="M14 2H6c-1.1 0-1.99.9-1.99 2L4 20c0 1.1.89 2 1.99 2H18c1.1 0 2-.9 2-2V8l-6-6zm2 16H8v-2h8v2zm0-4H8v-2h8v2zm-3-5V3.5L18.5 9H13z"/>
               </svg>
-            </button>
+            </div>
+            <div class="item-details">
+              <span class="item-name">{{ file.Name }}</span>
+              <span class="item-path">{{ file.Path }}</span>
+            </div>
+            <div class="item-actions">
+              <button class="action-btn preview-btn" @click.stop="previewFile(file)" title="Visualiser">
+                <svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor">
+                  <path d="M12 4.5C7 4.5 2.73 7.61 1 12c1.73 4.39 6 7.5 11 7.5s9.27-3.11 11-7.5c-1.73-4.39-6-7.5-11-7.5zM12 17c-2.76 0-5-2.24-5-5s2.24-5 5-5 5 2.24 5 5-2.24 5-5 5zm0-8c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/>
+                </svg>
+              </button>
+              <button class="action-btn download-btn" @click.stop="downloadFile(file)" title="Télécharger">
+                <svg viewBox="0 0 24 24" width="18" height="18" fill="currentColor">
+                  <path d="M19 9h-4V3H9v6H5l7 7 7-7zM5 18v2h14v-2H5z"/>
+                </svg>
+              </button>
+            </div>
           </div>
         </div>
+      </template>
+
+      <!-- No results after filtering -->
+      <div v-else class="no-results">
+        <svg viewBox="0 0 24 24" width="32" height="32" fill="currentColor" style="opacity:.25;margin-bottom:6px">
+          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/>
+        </svg>
+        <span>Aucun résultat pour ces filtres</span>
+        <button class="no-results-reset" @click.stop="clearAllFilters">Réinitialiser les filtres</button>
       </div>
     </div>
   </div>
 </template>
 
 <script setup>
-import { ref, computed, onMounted, onUnmounted } from 'vue'
+import { ref, computed, watch, onMounted, onUnmounted } from 'vue'
 import { useRouter } from 'vue-router'
+import { useI18n } from 'vue-i18n'
 import { useFileStore } from '../../stores/files'
 import { useAuthStore } from '../../stores/auth'
+import { useTagStore } from '../../stores/tags'
 import api from '../../api'
-import { debounce } from 'lodash';
+import { debounce } from 'lodash'
+
+const { t } = useI18n()
+const router = useRouter()
+const fileStore = useFileStore()
+const authStore = useAuthStore()
+const tagStore = useTagStore()
+
+const searchQuery = ref('')
+const isFocused = ref(false)
+const searchResults = ref({ folders: [], files: [] })
+const showDropdown = ref(false)
+const activeIndex = ref(-1)
+const searchBarRef = ref(null)
+const searchCommitted = ref(false)
+
+const filenamesAreEncrypted = computed(() => authStore.user?.encrypt_filenames === true)
+
+// ── Filters ──────────────────────────────────────────────────────────────────
+
+const activeFilterCount = computed(
+  () =>
+    fileStore.searchFilterExtensions.length +
+    fileStore.searchFilterTags.length +
+    (fileStore.searchFilterType ? 1 : 0)
+)
+
+const toggleExtension = (ext) => {
+  const idx = fileStore.searchFilterExtensions.indexOf(ext)
+  if (idx >= 0) fileStore.searchFilterExtensions.splice(idx, 1)
+  else fileStore.searchFilterExtensions.push(ext)
+}
 
-const router = useRouter();
-const fileStore = useFileStore();
-const authStore = useAuthStore();
-const searchQuery = ref('');
-const isFocused = ref(false);
+const toggleTag = (name) => {
+  const idx = fileStore.searchFilterTags.indexOf(name)
+  if (idx >= 0) fileStore.searchFilterTags.splice(idx, 1)
+  else fileStore.searchFilterTags.push(name)
+}
 
-// Search is disabled when the user opted into client-side filename encryption.
-const filenamesAreEncrypted = computed(() => authStore.user?.encrypt_filenames === true);
-const searchResults = ref({ folders: [], files: [] });
-const showDropdown = ref(false);
-const activeIndex = ref(-1);
-const searchBarRef = ref(null);
+const toggleType = (type) => {
+  fileStore.searchFilterType = fileStore.searchFilterType === type ? null : type
+}
 
-const hasResults = computed(() => searchResults.value.folders.length > 0 || searchResults.value.files.length > 0);
+const clearAllFilters = () => {
+  fileStore.searchFilterExtensions = []
+  fileStore.searchFilterTags = []
+  fileStore.searchFilterType = null
+}
 
-// Debounce pour éviter de spammer l'API à chaque frappe
-const debouncedSearch = debounce(async (query) => {
-  if (!query || query.trim() === '') {
-    searchResults.value = { folders: [], files: [] };
-    showDropdown.value = false;
-    return;
+// Extensions present in the current search results
+const availableExtensions = computed(() => {
+  const counts = {}
+  for (const file of searchResults.value.files) {
+    const name = file.Name || file.name || ''
+    const dot = name.lastIndexOf('.')
+    if (dot > 0) {
+      const ext = name.slice(dot + 1).toLowerCase()
+      counts[ext] = (counts[ext] || 0) + 1
+    }
+  }
+  return Object.entries(counts)
+    .sort(([a], [b]) => a.localeCompare(b))
+    .map(([ext, count]) => ({ ext, count }))
+})
+
+// Tags present in the current search results (matched against tagStore for colors)
+const availableTags = computed(() => {
+  const nameSet = new Set()
+  for (const file of searchResults.value.files) {
+    if (file.Tags) file.Tags.forEach(t => nameSet.add(t))
+  }
+  for (const folder of searchResults.value.folders) {
+    if (folder.Tags) folder.Tags.forEach(t => nameSet.add(t))
+  }
+  if (!nameSet.size) return []
+  return [...nameSet]
+    .map(name => tagStore.tags.find(t => t.name === name) || { name, color: 'var(--secondary-text-color)' })
+    .sort((a, b) => a.name.localeCompare(b.name))
+})
+
+// Filtered results for display in the dropdown
+const filteredFiles = computed(() => {
+  if (fileStore.searchFilterType === 'folder') return []
+  let files = searchResults.value.files
+  if (fileStore.searchFilterExtensions.length > 0) {
+    files = files.filter(file => {
+      const name = file.Name || file.name || ''
+      const dot = name.lastIndexOf('.')
+      const ext = dot > 0 ? name.slice(dot + 1).toLowerCase() : ''
+      return fileStore.searchFilterExtensions.includes(ext)
+    })
+  }
+  if (fileStore.searchFilterTags.length > 0) {
+    files = files.filter(file => {
+      const tags = file.Tags || []
+      return fileStore.searchFilterTags.every(t => tags.includes(t))
+    })
   }
+  return files
+})
+
+const filteredFolders = computed(() => {
+  if (fileStore.searchFilterType === 'file') return []
+  let folders = searchResults.value.folders
+  if (fileStore.searchFilterTags.length > 0) {
+    folders = folders.filter(folder => {
+      const tags = folder.Tags || []
+      return fileStore.searchFilterTags.every(t => tags.includes(t))
+    })
+  }
+  return folders
+})
+
+const hasFilteredResults = computed(
+  () => filteredFolders.value.length > 0 || filteredFiles.value.length > 0
+)
+
+// ── Path helpers ─────────────────────────────────────────────────────────────
+
+// file.Path = "/dir/file.txt" → "/dir/"
+// folder.Path = "/dir/sub" → "/dir/"
+const getParentPath = (path) => {
+  if (!path || path === '/') return '/'
+  const p = path.replace(/\/$/, '')
+  const idx = p.lastIndexOf('/')
+  return idx <= 0 ? '/' : p.slice(0, idx + 1)
+}
+
+// ── Search ────────────────────────────────────────────────────────────────────
 
+const debouncedSearch = debounce(async (query) => {
+  if (!query?.trim()) {
+    searchResults.value = { folders: [], files: [] }
+    showDropdown.value = false
+    return
+  }
   try {
-    // Recherche globale via API (découplée de la vue actuelle)
-    const response = await api.get('/files/search', { params: { q: query } });
-    const data = response.data;
-    
-    // Adaptation selon la structure de réponse (supposée { folders: [], files: [] })
-    searchResults.value = {
-      folders: data.folders || [],
-      files: data.files || []
-    };
-    
-    showDropdown.value = true;
-    activeIndex.value = -1; // Reset selection
-  } catch (error) {
-    console.error("Erreur de recherche:", error);
-    searchResults.value = { folders: [], files: [] };
+    const { data } = await api.get('/files/search', { params: { q: query } })
+    searchResults.value = { folders: data.folders || [], files: data.files || [] }
+    showDropdown.value = true
+    activeIndex.value = -1
+  } catch {
+    searchResults.value = { folders: [], files: [] }
   }
-}, 300);
+}, 300)
 
 const handleInput = () => {
-  debouncedSearch(searchQuery.value);
-};
+  searchCommitted.value = false
+  debouncedSearch(searchQuery.value)
+  fileStore.setSearchQuery(searchQuery.value)
+}
 
 const handleFocus = () => {
-  isFocused.value = true;
-  if (searchQuery.value && hasResults.value) {
-    showDropdown.value = true;
+  isFocused.value = true
+  if (searchQuery.value && (searchResults.value.folders.length || searchResults.value.files.length)) {
+    showDropdown.value = true
+    searchCommitted.value = false
   }
-};
+}
 
 const clearSearch = () => {
-  searchQuery.value = '';
-  searchResults.value = { folders: [], files: [] };
-  showDropdown.value = false;
-};
+  searchQuery.value = ''
+  searchResults.value = { folders: [], files: [] }
+  showDropdown.value = false
+  searchCommitted.value = false
+  fileStore.setSearchQuery('')
+}
+
+// ── Navigation ────────────────────────────────────────────────────────────────
 
 const navigateResults = (direction) => {
-  if (!showDropdown.value) return;
-  const total = searchResults.value.folders.length + searchResults.value.files.length;
-  activeIndex.value = (activeIndex.value + direction + total) % total;
-};
-
-const openSelectedResult = () => {
-  if (activeIndex.value === -1) return;
-  
-  const folders = searchResults.value.folders;
-  const files = searchResults.value.files;
-  
-  if (activeIndex.value < folders.length) {
-    openItem(folders[activeIndex.value], 'folder');
+  if (!showDropdown.value) return
+  const total = filteredFolders.value.length + filteredFiles.value.length
+  if (!total) return
+  activeIndex.value = (activeIndex.value + direction + total) % total
+}
+
+const handleEnter = () => {
+  if (activeIndex.value !== -1) {
+    // An item is highlighted: open it
+    const fLen = filteredFolders.value.length
+    if (activeIndex.value < fLen) openItem(filteredFolders.value[activeIndex.value], 'folder')
+    else openItem(filteredFiles.value[activeIndex.value - fLen], 'file')
   } else {
-    openItem(files[activeIndex.value - folders.length], 'file');
+    // No item selected: commit search, close dropdown, show filter bar
+    showDropdown.value = false
+    searchCommitted.value = true
   }
-};
-
-const openItem = (item, type) => {
-  if (type === 'folder') {
-    // Navigation vers le dossier
-    fileStore.pendingNavigatePath = item.Path || item.path;
-    if (router.currentRoute.value.name !== 'MyFiles') {
-      router.push({ name: 'MyFiles' });
-    } else {
-      fileStore.fetchItems(item.Path || item.path);
-    }
+}
+
+const openItem = (item, type = 'file') => {
+  const parentPath = getParentPath(item.Path || item.path)
+  fileStore.pendingHighlight = { id: item.ID || item.id, type }
+  fileStore.clearSearch()
+  if (router.currentRoute.value.name !== 'MyFiles') {
+    fileStore.pendingNavigatePath = parentPath
+    router.push({ name: 'MyFiles' })
   } else {
-    // Ouverture/Aperçu du fichier
-    const fileId = item.ID || item.id;
-    const fileName = item.Name || item.name;
-    const mimeType = item.MimeType || item.mime_type || 'application/octet-stream';
-    const encryptedKey = item.EncryptedKey || item.encrypted_key;
-    
-    fileStore.downloadFile(fileId, fileName, mimeType, true, encryptedKey);
+    fileStore.fetchItems(parentPath)
   }
-  showDropdown.value = false;
-  searchQuery.value = '';
-};
+  showDropdown.value = false
+  searchCommitted.value = false
+  searchQuery.value = ''
+}
 
 const previewFile = (file) => {
-  const fileId = file.ID || file.id;
-  const fileName = file.Name || file.name;
-  const mimeType = file.MimeType || file.mime_type || 'application/octet-stream';
-  const encryptedKey = file.EncryptedKey || file.encrypted_key;
-  
-  fileStore.downloadFile(fileId, fileName, mimeType, true, encryptedKey);
-  showDropdown.value = false;
-  searchQuery.value = '';
-};
+  fileStore.downloadFile(
+    file.ID || file.id, file.Name || file.name,
+    file.MimeType || file.mime_type || 'application/octet-stream',
+    true, file.EncryptedKey || file.encrypted_key
+  )
+  showDropdown.value = false
+  searchCommitted.value = false
+  searchQuery.value = ''
+}
 
 const downloadFile = (file) => {
-  const fileId = file.ID || file.id;
-  const fileName = file.Name || file.name;
-  const mimeType = file.MimeType || file.mime_type || 'application/octet-stream';
-  const encryptedKey = file.EncryptedKey || file.encrypted_key;
-  
-  fileStore.downloadFile(fileId, fileName, mimeType, false, encryptedKey);
-  showDropdown.value = false;
-  searchQuery.value = '';
-};
-
-const handleClickOutside = (event) => {
-  if (searchBarRef.value && !searchBarRef.value.contains(event.target)) {
-    showDropdown.value = false;
+  fileStore.downloadFile(
+    file.ID || file.id, file.Name || file.name,
+    file.MimeType || file.mime_type || 'application/octet-stream',
+    false, file.EncryptedKey || file.encrypted_key
+  )
+  showDropdown.value = false
+  searchCommitted.value = false
+  searchQuery.value = ''
+}
+
+// Sync local input when search is cleared externally (e.g. from fileList navigation)
+watch(() => fileStore.searchQuery, (val) => {
+  if (!val && searchQuery.value) {
+    searchQuery.value = ''
+    searchCommitted.value = false
+    searchResults.value = { folders: [], files: [] }
+    showDropdown.value = false
   }
-};
+})
 
-onMounted(() => {
-  document.addEventListener('click', handleClickOutside);
-});
+// ── Click outside ─────────────────────────────────────────────────────────────
+
+const handleClickOutside = (e) => {
+  if (searchBarRef.value && !searchBarRef.value.contains(e.target)) {
+    showDropdown.value = false
+    isFocused.value = false
+  }
+}
 
-onUnmounted(() => {
-  document.removeEventListener('click', handleClickOutside);
-});
+onMounted(() => {
+  document.addEventListener('click', handleClickOutside)
+  tagStore.fetchTags()
+})
+onUnmounted(() => document.removeEventListener('click', handleClickOutside))
 </script>
 
 <style scoped>
 .search-bar {
-  flex-grow: 1;
+  flex: 1 1 0;
+  min-width: 0;
   display: flex;
   justify-content: center;
   margin: 0 2rem;
   max-width: 720px;
-  width: 100%;
-  position: relative; /* Pour le positionnement du dropdown */
+  position: relative;
 }
 
+/* ── Search wrapper ───────────────────────────────────────────── */
 .search-wrapper {
   display: flex;
   align-items: center;
   background-color: var(--hover-background-color);
+  border: 1px solid var(--border-color);
   border-radius: 24px;
   padding: 0 8px;
   width: 100%;
   max-width: 700px;
-  transition: background-color 0.1s, box-shadow 0.1s;
+  transition: background-color 0.1s, box-shadow 0.1s, border-color 0.1s;
   height: 40px;
+  gap: 2px;
 }
 
 .search-wrapper--disabled {
@@ -286,20 +549,11 @@ onUnmounted(() => {
   pointer-events: none;
 }
 
-.search-disabled-label {
-  flex-grow: 1;
-  padding: 0 8px;
-  font-size: 14px;
-  color: var(--secondary-text-color);
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-}
-
 .search-wrapper.focused,
 .search-wrapper:focus-within {
   background-color: var(--card-color);
-  box-shadow: 0 1px 1px 0 rgba(65,69,73,0.3), 0 1px 3px 1px rgba(65,69,73,0.15);
+  border-color: var(--primary-color);
+  box-shadow: 0 1px 1px 0 rgba(65,69,73,.3), 0 1px 3px 1px rgba(65,69,73,.15);
 }
 
 .icon-wrapper {
@@ -309,62 +563,194 @@ onUnmounted(() => {
   padding: 8px;
   border-radius: 50%;
   cursor: pointer;
+  flex-shrink: 0;
+  color: var(--secondary-text-color);
 }
+.icon-wrapper:hover { background-color: var(--hover-background-color); }
 
-.icon-wrapper:hover {
-  background-color: var(--hover-background-color);
-}
-
-.search-icon {
-  margin-left: 4px;
-}
+.search-icon { margin-left: 4px; }
+.clear-icon  { margin-right: 2px; }
+.clear-icon:hover { color: var(--main-text-color); }
 
-.filter-icon {
-  margin-right: 4px;
+.search-disabled-label {
+  flex-grow: 1;
+  padding: 0 8px;
+  font-size: 14px;
+  color: var(--secondary-text-color);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
 }
 
 .search-bar input {
   flex-grow: 1;
   border: none;
   background: transparent;
-  padding: 0 8px;
-  font-size: 16px;
+  padding: 0 4px;
+  font-size: 15px;
   color: var(--main-text-color);
   outline: none;
   height: 100%;
+  min-width: 0;
 }
+.search-bar input::placeholder { color: var(--secondary-text-color); }
 
-.search-bar input::placeholder {
-  color: var(--secondary-text-color);
+/* Active filters pill inside the input row */
+.active-filters-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 2px 8px;
+  border-radius: 999px;
+  background: color-mix(in srgb, var(--primary-color) 15%, transparent);
+  border: 1px solid color-mix(in srgb, var(--primary-color) 40%, transparent);
+  color: var(--primary-color);
+  font-size: 0.72rem;
+  font-weight: 600;
+  white-space: nowrap;
+  cursor: pointer;
+  flex-shrink: 0;
+  transition: background 0.15s;
+}
+.active-filters-pill:hover {
+  background: color-mix(in srgb, var(--primary-color) 25%, transparent);
+}
+.active-filters-dot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: var(--primary-color);
+  flex-shrink: 0;
+}
+
+/* ── Committed filter bar ─────────────────────────────────────── */
+.committed-filter-bar {
+  position: absolute;
+  top: calc(100% + 4px);
+  left: 0;
+  right: 0;
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 4px;
+  padding: 6px 10px;
+  background: var(--card-color);
+  border-radius: 8px;
+  box-shadow: 0 4px 12px rgba(32,33,36,.14), 0 1px 4px rgba(32,33,36,.08);
+  border: 1px solid var(--border-color);
+  z-index: 2000;
+}
+
+.committed-filter-bar .filter-chip {
+  font-size: 0.72rem;
+  padding: 3px 8px;
+}
+
+.committed-filter-bar .strip-divider {
+  height: 14px;
 }
 
-/* Dropdown Styles */
+/* ── Dropdown ─────────────────────────────────────────────────── */
 .search-dropdown {
   position: absolute;
-  top: 100%;
+  top: calc(100% + 4px);
   left: 0;
   right: 0;
   background: var(--card-color);
-  border-radius: 0 0 8px 8px;
-  margin-top: 2px;
-  box-shadow: 0 4px 6px rgba(32,33,36,0.28);
+  border-radius: 12px;
+  box-shadow: 0 8px 24px rgba(32,33,36,.18), 0 2px 6px rgba(32,33,36,.1);
+  border: 1px solid var(--border-color);
   z-index: 2000;
-  max-height: 400px;
-  overflow-y: auto;
-  padding: 8px 0;
-  border-top: 1px solid var(--border-color);
+  overflow: hidden;
+}
+
+/* ── Filter strip ─────────────────────────────────────────────── */
+.filter-strip {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 6px;
+  padding: 10px 14px;
+  border-bottom: 1px solid var(--border-color);
+  background: var(--hover-background-color);
+}
+
+.filter-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 4px 10px;
+  border-radius: 999px;
+  border: 1px solid var(--border-color);
+  background: var(--card-color);
+  color: var(--secondary-text-color);
+  font-size: 0.78rem;
+  font-weight: 500;
+  cursor: pointer;
+  transition: border-color 0.15s, background 0.15s, color 0.15s;
+  white-space: nowrap;
+  line-height: 1.4;
+}
+.filter-chip:hover {
+  border-color: var(--primary-color);
+  color: var(--primary-color);
 }
+.filter-chip.active {
+  background: var(--primary-color);
+  border-color: var(--primary-color);
+  color: #fff;
+}
+.filter-chip.active .chip-count { opacity: 0.75; }
 
-.result-group {
-  padding-bottom: 8px;
+.chip-count {
+  font-size: 0.7rem;
+  opacity: 0.6;
+}
+
+.strip-divider {
+  width: 1px;
+  height: 18px;
+  background: var(--border-color);
+  flex-shrink: 0;
+  margin: 0 2px;
+}
+
+.tag-chip { font-weight: 500; }
+.tag-dot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  flex-shrink: 0;
+}
+
+/* ── Results ──────────────────────────────────────────────────── */
+.result-group { padding: 6px 0; }
+
+.result-group:not(:first-child) {
+  border-top: 1px solid var(--border-color);
 }
 
 .group-title {
-  padding: 8px 16px 4px;
-  font-size: 0.8rem;
-  font-weight: 600;
+  padding: 6px 16px 4px;
+  font-size: 0.75rem;
+  font-weight: 700;
   color: var(--secondary-text-color);
   text-transform: uppercase;
+  letter-spacing: .04em;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.results-count-badge {
+  background: color-mix(in srgb, var(--primary-color) 15%, transparent);
+  color: var(--primary-color);
+  font-size: 0.7rem;
+  font-weight: 700;
+  padding: 1px 7px;
+  border-radius: 999px;
+  text-transform: none;
+  letter-spacing: 0;
 }
 
 .result-item {
@@ -375,21 +761,14 @@ onUnmounted(() => {
   transition: background-color 0.1s;
   position: relative;
 }
-
-.result-item:hover, .result-item.active {
-  background-color: var(--hover-background-color);
-}
-
+.result-item:hover,
+.result-item.active { background-color: var(--hover-background-color); }
 .result-item:hover .item-actions {
   opacity: 1;
   visibility: visible;
 }
 
-.item-icon {
-  margin-right: 12px;
-  display: flex;
-  align-items: center;
-}
+.item-icon { margin-right: 12px; display: flex; align-items: center; }
 
 .item-details {
   display: flex;
@@ -397,7 +776,6 @@ onUnmounted(() => {
   overflow: hidden;
   flex: 1;
 }
-
 .item-name {
   font-size: 0.9rem;
   color: var(--main-text-color);
@@ -405,7 +783,6 @@ onUnmounted(() => {
   overflow: hidden;
   text-overflow: ellipsis;
 }
-
 .item-path {
   font-size: 0.75rem;
   color: var(--secondary-text-color);
@@ -414,7 +791,6 @@ onUnmounted(() => {
   text-overflow: ellipsis;
 }
 
-/* Action Buttons */
 .item-actions {
   display: flex;
   gap: 4px;
@@ -423,13 +799,12 @@ onUnmounted(() => {
   visibility: hidden;
   transition: opacity 0.2s, visibility 0.2s;
 }
-
 .action-btn {
   display: flex;
   align-items: center;
   justify-content: center;
-  width: 32px;
-  height: 32px;
+  width: 30px;
+  height: 30px;
   border: none;
   background: transparent;
   border-radius: 50%;
@@ -438,21 +813,31 @@ onUnmounted(() => {
   transition: background-color 0.2s, color 0.2s;
   padding: 0;
 }
+.action-btn:hover   { background-color: var(--hover-background-color); }
+.preview-btn:hover  { color: #1a73e8; }
+.download-btn:hover { color: #34a853; }
+.action-btn:active  { transform: scale(0.95); }
 
-.action-btn:hover {
-  background-color: var(--hover-background-color);
-  color: var(--main-text-color);
-}
-
-.preview-btn:hover {
-  color: #1a73e8;
-}
-
-.download-btn:hover {
-  color: #34a853;
+/* ── No results ───────────────────────────────────────────────── */
+.no-results {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  padding: 24px 16px;
+  color: var(--secondary-text-color);
+  font-size: 0.85rem;
+  gap: 8px;
 }
-
-.action-btn:active {
-  transform: scale(0.95);
+.no-results-reset {
+  background: none;
+  border: 1px solid var(--border-color);
+  border-radius: 999px;
+  padding: 4px 14px;
+  font-size: 0.8rem;
+  font-weight: 600;
+  color: var(--primary-color);
+  cursor: pointer;
+  transition: background 0.15s;
 }
+.no-results-reset:hover { background: var(--hover-background-color); }
 </style>
diff --git a/frontend/src/components/file/FileTable.vue b/frontend/src/components/file/FileTable.vue
index 8bf97437..fd7005af 100644
--- a/frontend/src/components/file/FileTable.vue
+++ b/frontend/src/components/file/FileTable.vue
@@ -23,8 +23,9 @@
       </thead>
       <tbody>
         <!-- Folders -->
-        <tr v-for="folder in folders" :key="folder.ID" 
-             class="list-item folder-item" 
+        <tr v-for="folder in folders" :key="folder.ID"
+             :data-item-id="folder.ID"
+             class="list-item folder-item"
              :class="{ selected: isSelected(folder, 'folder') }"
              @click.stop="$emit('select-item', folder, 'folder', $event)"
              @dblclick="$emit('open-folder', folder)"
@@ -108,7 +109,8 @@
         </tr>
 
         <!-- Files -->
-        <tr v-for="file in files" :key="file.ID" 
+        <tr v-for="file in files" :key="file.ID"
+            :data-item-id="file.ID"
             class="list-item"
             :class="{ selected: isSelected(file, 'file') }"
             @click.stop="$emit('select-item', file, 'file', $event)"
@@ -571,4 +573,44 @@ input[type="checkbox"] {
 input[type="checkbox"]:hover {
   transform: scale(1.1);
 }
+
+@media (max-width: 768px) {
+  .table-responsive {
+    overflow-x: auto;
+    -webkit-overflow-scrolling: touch;
+  }
+
+  .files-table {
+    font-size: 0.82rem;
+    min-width: 480px;
+  }
+
+  .name-wrapper {
+    max-width: 160px;
+  }
+
+  /* Hide less important columns on mobile */
+  th.col-path, td.col-path,
+  th.col-tags, td.col-tags,
+  th.col-created, td.col-created,
+  th.col-updated, td.col-updated {
+    display: none;
+  }
+}
+
+@media (max-width: 480px) {
+  .files-table {
+    font-size: 0.78rem;
+    min-width: 360px;
+  }
+
+  .name-wrapper {
+    max-width: 120px;
+  }
+
+  .icon-svg {
+    width: 16px;
+    height: 16px;
+  }
+}
 </style>
\ No newline at end of file
diff --git a/frontend/src/components/file/fileList.vue b/frontend/src/components/file/fileList.vue
index 235933a6..2370d274 100644
--- a/frontend/src/components/file/fileList.vue
+++ b/frontend/src/components/file/fileList.vue
@@ -54,9 +54,9 @@
 
     <!-- Selection Action Bar / Security Tip Bar -->
     <div class="selection-gap" :class="{ 'has-content': selectedItems.length > 0 || (!loadingSecuritySettings && !mfaSettings.mfa_enabled) }">
-      <Transition name="selection-bar">
+      <Transition name="selection-bar" mode="out-in">
         <!-- Selection Actions -->
-        <div v-if="selectedItems.length > 0" class="selection-action-bar">
+        <div v-if="selectedItems.length > 0" key="selection-bar" class="selection-action-bar">
           <div class="selection-actions">
             <button class="action-btn download-action" @click.stop="downloadSelectedFiles" :title="t('file.download')">
             <svg xmlns="http://www.w3.org/2000/svg" height="20px" viewBox="0 0 24 24" width="20px" fill="currentColor"><path d="M0 0h24v24H0V0z" fill="none"/><path d="M19 9h-4V3H9v6H5l7 7 7-7zm-8 2V5h2v6h1.17L12 13.17 9.83 11H11zm-6 7h14v2H5v-2z"/></svg>
@@ -75,7 +75,7 @@
         </div>
 
         <!-- Security Tip Bar (shown when no items selected) -->
-        <div v-else-if="!loadingSecuritySettings && !mfaSettings.mfa_enabled" class="security-tip-bar" @click="navigateToSecurity">
+        <div v-else-if="!loadingSecuritySettings && !mfaSettings.mfa_enabled" key="tip-warning" class="security-tip-bar" @click="navigateToSecurity">
           <div class="tip-content">
             <svg class="tip-icon" xmlns="http://www.w3.org/2000/svg" height="20px" viewBox="0 0 24 24" width="20px" fill="currentColor">
               <path d="M0 0h24v24H0V0z" fill="none"/>
@@ -89,7 +89,7 @@
           </svg>
         </div>
 
-        <div v-else-if="!loadingSecuritySettings && mfaSettings.mfa_enabled" class="security-tip-bar success">
+        <div v-else-if="!loadingSecuritySettings && mfaSettings.mfa_enabled" key="tip-success" class="security-tip-bar success">
           <div class="tip-content">
             <svg class="tip-icon" xmlns="http://www.w3.org/2000/svg" height="20px" viewBox="0 0 24 24" width="20px" fill="currentColor">
               <path d="M0 0h24v24H0V0z" fill="none"/>
@@ -124,6 +124,43 @@
         </div>
       </div>
     </div>
+    <!-- Filter chips bar (extensions + tags) -->
+    <div class="ext-filter-bar" v-if="availableExtensions.length >= 2 || availableTags.length >= 1">
+      <!-- Extensions group -->
+      <template v-if="availableExtensions.length >= 2">
+        <button
+          class="ext-chip"
+          :class="{ active: activeExtensions.length === 0 }"
+          @click.stop="activeExtensions = []"
+        >Tous</button>
+        <button
+          v-for="{ ext, count } in availableExtensions"
+          :key="'ext-' + ext"
+          class="ext-chip"
+          :class="{ active: activeExtensions.includes(ext) }"
+          @click.stop="toggleExtension(ext)"
+        >.{{ ext }} <span class="ext-count">{{ count }}</span></button>
+      </template>
+
+      <!-- Separator -->
+      <span v-if="availableExtensions.length >= 2 && availableTags.length >= 1" class="filter-separator" />
+
+      <!-- Tags group -->
+      <template v-if="availableTags.length >= 1">
+        <button
+          v-for="tag in availableTags"
+          :key="'tag-' + tag.name"
+          class="ext-chip tag-chip"
+          :class="{ active: activeTags.includes(tag.name) }"
+          :style="activeTags.includes(tag.name) ? { background: tag.color, borderColor: tag.color } : { borderColor: tag.color, color: tag.color }"
+          @click.stop="toggleTag(tag.name)"
+        >
+          <span class="tag-dot" :style="{ background: activeTags.includes(tag.name) ? '#fff' : tag.color }" />
+          {{ tag.name }}
+        </button>
+      </template>
+    </div>
+
     <FileTable
       :folders="filteredFolders"
       :files="filteredFiles"
@@ -293,6 +330,16 @@ watch(
   }
 )
 
+watch(
+  () => uiStore.pendingMobileAction,
+  (action) => {
+    if (!action) return
+    uiStore.pendingMobileAction = null
+    if (action === 'upload') triggerFileInput()
+    else if (action === 'createFolder') createNewFolder()
+  }
+)
+
 const deselectAll = () => {
     selectedItems.value = [];
     lastClickedIndex.value = -1;
@@ -301,6 +348,57 @@ const deselectAll = () => {
 const currentSortKey = ref('name');
 const currentSortDirection = ref('asc');
 
+// Extension filter
+const activeExtensions = ref([])
+
+const availableExtensions = computed(() => {
+  const counts = {}
+  for (const file of fileStore.files) {
+    const name = file.Name || ''
+    const dot = name.lastIndexOf('.')
+    if (dot > 0) {
+      const ext = name.slice(dot + 1).toLowerCase()
+      counts[ext] = (counts[ext] || 0) + 1
+    }
+  }
+  return Object.entries(counts)
+    .sort(([a], [b]) => a.localeCompare(b))
+    .map(([ext, count]) => ({ ext, count }))
+})
+
+const toggleExtension = (ext) => {
+  const idx = activeExtensions.value.indexOf(ext)
+  if (idx >= 0) activeExtensions.value.splice(idx, 1)
+  else activeExtensions.value.push(ext)
+}
+
+// Tag filter
+const activeTags = ref([])
+
+const availableTags = computed(() => {
+  const nameSet = new Set()
+  for (const file of fileStore.files) {
+    if (file.Tags) file.Tags.forEach(t => nameSet.add(t))
+  }
+  for (const folder of fileStore.folders) {
+    if (folder.Tags) folder.Tags.forEach(t => nameSet.add(t))
+  }
+  return [...nameSet]
+    .map(name => tagStore.tags.find(t => t.name === name) || { name, color: 'var(--secondary-text-color)' })
+    .sort((a, b) => a.name.localeCompare(b.name))
+})
+
+const toggleTag = (name) => {
+  const idx = activeTags.value.indexOf(name)
+  if (idx >= 0) activeTags.value.splice(idx, 1)
+  else activeTags.value.push(name)
+}
+
+watch(() => fileStore.currentPath, () => {
+  activeExtensions.value = []
+  activeTags.value = []
+})
+
 const handleSortChange = (key) => {
   if (currentSortKey.value === key) {
     currentSortDirection.value = currentSortDirection.value === 'asc' ? 'desc' : 'asc';
@@ -357,10 +455,10 @@ const columns = computed(() => {
   }
 
   cols.push(
-    { key: 'tags', label: t('file.tags') },
-    { key: 'created', label: t('file.columnCreated') },
-    { key: 'updated', label: t('file.columnUpdated') },
-    { key: 'size', label: t('file.columnSize') }
+    { key: 'tags', label: t('file.tags'), headerClass: 'col-tags', cellClass: 'col-tags' },
+    { key: 'created', label: t('file.columnCreated'), headerClass: 'col-created', cellClass: 'col-created' },
+    { key: 'updated', label: t('file.columnUpdated'), headerClass: 'col-updated', cellClass: 'col-updated' },
+    { key: 'size', label: t('file.columnSize'), headerClass: 'col-size', cellClass: 'col-size' }
   );
   return cols;
 })
@@ -370,6 +468,21 @@ const filteredFolders = computed(() => {
   if (fileStore.searchQuery) {
     const query = fileStore.searchQuery.toLowerCase()
     folders = folders.filter(folder => folder.Name.toLowerCase().includes(query))
+    // Search-specific tag filter
+    if (fileStore.searchFilterTags.length > 0) {
+      folders = folders.filter(folder => {
+        const tags = folder.Tags || []
+        return fileStore.searchFilterTags.every(t => tags.includes(t))
+      })
+    }
+  } else {
+    // Per-folder tag filter (non-search mode)
+    if (activeTags.value.length > 0) {
+      folders = folders.filter(folder => {
+        const tags = folder.Tags || []
+        return activeTags.value.every(t => tags.includes(t))
+      })
+    }
   }
   return sortItems(folders);
 })
@@ -379,6 +492,38 @@ const filteredFiles = computed(() => {
   if (fileStore.searchQuery) {
     const query = fileStore.searchQuery.toLowerCase()
     files = files.filter(file => file.Name.toLowerCase().includes(query))
+    // Search-specific extension filter
+    if (fileStore.searchFilterExtensions.length > 0) {
+      files = files.filter(file => {
+        const name = file.Name || ''
+        const dot = name.lastIndexOf('.')
+        const ext = dot > 0 ? name.slice(dot + 1).toLowerCase() : ''
+        return fileStore.searchFilterExtensions.includes(ext)
+      })
+    }
+    // Search-specific tag filter
+    if (fileStore.searchFilterTags.length > 0) {
+      files = files.filter(file => {
+        const tags = file.Tags || []
+        return fileStore.searchFilterTags.every(t => tags.includes(t))
+      })
+    }
+  } else {
+    // Per-folder filters (non-search mode)
+    if (activeExtensions.value.length > 0) {
+      files = files.filter(file => {
+        const name = file.Name || ''
+        const dot = name.lastIndexOf('.')
+        const ext = dot > 0 ? name.slice(dot + 1).toLowerCase() : ''
+        return activeExtensions.value.includes(ext)
+      })
+    }
+    if (activeTags.value.length > 0) {
+      files = files.filter(file => {
+        const tags = file.Tags || []
+        return activeTags.value.every(t => tags.includes(t))
+      })
+    }
   }
   return sortItems(files);
 })
@@ -634,8 +779,21 @@ const navigateToSecurity = () => {
   router.push({ name: 'Account' })
 }
 
-watch(() => fileStore.currentPath, () => {
+watch(() => fileStore.currentPath, async () => {
   selectedItems.value = []
+  if (!fileStore.pendingHighlight) return
+  const { id, type } = fileStore.pendingHighlight
+  fileStore.pendingHighlight = null
+  await nextTick()
+  const item = type === 'folder'
+    ? fileStore.folders.find(f => f.ID === id)
+    : fileStore.files.find(f => f.ID === id)
+  if (!item) return
+  selectedItems.value = [{ ...item, type }]
+  nextTick(() => {
+    const row = document.querySelector(`[data-item-id="${id}"]`)
+    if (row) row.scrollIntoView({ behavior: 'smooth', block: 'center' })
+  })
 })
 
 onUnmounted(() => {
@@ -895,9 +1053,24 @@ const isSelected = (item, type) => {
   return selectedItems.value.some(i => i.ID === item.ID && i.type === type);
 }
 
+const getParentPath = (path) => {
+  if (!path || path === '/') return '/'
+  const p = path.replace(/\/$/, '')
+  const idx = p.lastIndexOf('/')
+  return idx <= 0 ? '/' : p.slice(0, idx + 1)
+}
+
 const openFolder = (folder) => {
   const folderName = folder.Name || folder.name;
 
+  if (fileStore.searchQuery) {
+    const parentPath = getParentPath(folder.Path || folder.path)
+    fileStore.pendingHighlight = { id: folder.ID, type: 'folder' }
+    fileStore.clearSearch()
+    fileStore.fetchItems(parentPath)
+    return
+  }
+
   if (fileStore.viewMode === 'shared') {
       fileStore.navigateShared(folder.ID, folderName);
       selectedItems.value = [];
@@ -1085,6 +1258,14 @@ const updateTags = async () => {
 }
 
 const downloadFile = async (file) => {
+  if (fileStore.searchQuery) {
+    const parentPath = getParentPath(file.Path || file.path)
+    fileStore.pendingHighlight = { id: file.ID, type: 'file' }
+    fileStore.clearSearch()
+    fileStore.fetchItems(parentPath)
+    return
+  }
+
   fileStore.addToHistory({ ...file, type: 'file' });
 
   const previewTypes = [
@@ -1848,37 +2029,131 @@ button {
 }
 
 /* Selection Bar Animation */
-.selection-bar-enter-active {
-  animation: slideDown 0.2s ease-out;
+.selection-bar-enter-active,
+.selection-bar-leave-active {
+  transition: opacity 0.18s ease, transform 0.18s ease;
 }
 
-.selection-bar-leave-active {
-  animation: slideUp 0.15s ease-in;
+.selection-bar-enter-from,
+.selection-bar-leave-to {
+  opacity: 0;
+  transform: translateY(-8px);
+}
+
+.selection-bar-enter-to,
+.selection-bar-leave-from {
+  opacity: 1;
+  transform: translateY(0);
 }
 
-@keyframes slideDown {
-  from {
-    opacity: 0;
-    transform: translateY(-10px);
-    max-height: 0;
+@media (max-width: 768px) {
+  .toolbar {
+    flex-direction: column;
+    gap: 0.5rem;
+    padding: 0.5rem;
+  }
+
+  .toolbar-left,
+  .toolbar-right {
+    width: 100%;
+    flex-wrap: wrap;
+    gap: 0.4rem;
+  }
+
+  .btn-add-file,
+  .btn-rename,
+  .btn-download,
+  .btn-delete {
+    font-size: 0.8rem;
+    padding: 0.4rem 0.75rem;
+    flex: 1;
+    min-width: 80px;
+  }
+
+  .breadcrumbs {
+    font-size: 0.85rem;
+    flex-wrap: wrap;
   }
-  to {
-    opacity: 1;
-    transform: translateY(0);
-    max-height: 60px;
+
+  .selection-action-bar {
+    flex-wrap: wrap;
+    gap: 0.4rem;
+    padding: 0.5rem;
   }
 }
 
-@keyframes slideUp {
-  from {
-    opacity: 1;
-    transform: translateY(0);
-    max-height: 60px;
+@media (max-width: 480px) {
+  .path-banner {
+    padding: 0.5rem;
   }
-  to {
-    opacity: 0;
-    transform: translateY(-10px);
-    max-height: 0;
+
+  .breadcrumb-link {
+    font-size: 0.8rem;
   }
 }
+
+/* ===== Extension filter bar ===== */
+.ext-filter-bar {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 6px;
+  padding: 0 1rem 0.6rem;
+  align-items: center;
+}
+
+.ext-chip {
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  padding: 3px 10px;
+  border-radius: 999px;
+  border: 1px solid var(--border-color);
+  background: var(--hover-background-color);
+  color: var(--secondary-text-color);
+  font-size: 0.78rem;
+  font-weight: 500;
+  cursor: pointer;
+  transition: background 0.15s, color 0.15s, border-color 0.15s;
+  white-space: nowrap;
+}
+
+.ext-chip:hover {
+  background: var(--card-color);
+  border-color: var(--primary-color);
+  color: var(--main-text-color);
+}
+
+.ext-chip.active {
+  background: var(--primary-color);
+  border-color: var(--primary-color);
+  color: #fff;
+}
+
+.ext-chip.active .ext-count {
+  opacity: 0.8;
+}
+
+.ext-count {
+  font-size: 0.72rem;
+  opacity: 0.65;
+}
+
+.filter-separator {
+  width: 1px;
+  height: 18px;
+  background: var(--border-color);
+  margin: 0 4px;
+  flex-shrink: 0;
+}
+
+.tag-chip {
+  font-weight: 500;
+}
+
+.tag-dot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  flex-shrink: 0;
+}
 </style>
diff --git a/frontend/src/components/landing/LandingNav.vue b/frontend/src/components/landing/LandingNav.vue
index c6acfdaa..88336552 100644
--- a/frontend/src/components/landing/LandingNav.vue
+++ b/frontend/src/components/landing/LandingNav.vue
@@ -10,10 +10,12 @@
       </router-link>
       
       <div class="nav-links">
-        <router-link to="/" class="nav-link">Accueil</router-link>
-        <router-link to="/transfer" class="nav-link">Transfert P2P</router-link>
-        <router-link to="/compare" class="nav-link">Comparatif</router-link>
-        <router-link to="/login" class="nav-btn">Connexion</router-link>
+        <router-link to="/" class="nav-link">{{ t('landing.nav.home') }}</router-link>
+        <router-link to="/transfer" class="nav-link">{{ t('landing.nav.transfer') }}</router-link>
+        <router-link to="/compare" class="nav-link">{{ t('landing.nav.compare') }}</router-link>
+        <router-link to="/security" class="nav-link">{{ t('landing.nav.security') }}</router-link>
+        <router-link to="/login" class="nav-btn">{{ t('landing.nav.login') }}</router-link>
+        <LanguageSwitcher />
       </div>
 
       <!-- Mobile Menu Button -->
@@ -32,17 +34,22 @@
 
     <!-- Mobile Menu -->
     <div class="mobile-menu" :class="{ open: isMenuOpen }">
-      <router-link to="/" class="mobile-link" @click="closeMenu">Accueil</router-link>
-      <router-link to="/transfer" class="mobile-link" @click="closeMenu">Transfert P2P</router-link>
-      <router-link to="/compare" class="mobile-link" @click="closeMenu">Comparatif</router-link>
-      <router-link to="/login" class="mobile-btn" @click="closeMenu">Connexion</router-link>
+      <router-link to="/" class="mobile-link" @click="closeMenu">{{ t('landing.nav.home') }}</router-link>
+      <router-link to="/transfer" class="mobile-link" @click="closeMenu">{{ t('landing.nav.transfer') }}</router-link>
+      <router-link to="/compare" class="mobile-link" @click="closeMenu">{{ t('landing.nav.compare') }}</router-link>
+      <router-link to="/security" class="mobile-link" @click="closeMenu">{{ t('landing.nav.security') }}</router-link>
+      <router-link to="/login" class="mobile-btn" @click="closeMenu">{{ t('landing.nav.login') }}</router-link>
+      <LanguageSwitcher />
     </div>
   </nav>
 </template>
 
 <script setup>
 import { ref } from 'vue'
+import { useI18n } from 'vue-i18n'
+import LanguageSwitcher from '../LanguageSwitcher.vue'
 
+const { t } = useI18n()
 const isMenuOpen = ref(false)
 
 const toggleMenu = () => {
@@ -162,16 +169,17 @@ const closeMenu = () => {
   display: none;
   flex-direction: column;
   gap: 0.5rem;
-  padding: 1rem 2rem;
+  padding: 0 2rem;
   background: var(--card-color);
-  border-top: 1px solid var(--border-color);
   max-height: 0;
   overflow: hidden;
-  transition: max-height 0.3s ease;
+  transition: max-height 0.3s ease, padding 0.3s ease;
 }
 
 .mobile-menu.open {
   max-height: 300px;
+  padding: 1rem 2rem;
+  border-top: 1px solid var(--border-color);
 }
 
 .mobile-link {
diff --git a/frontend/src/components/landing/P2PNav.vue b/frontend/src/components/landing/P2PNav.vue
new file mode 100644
index 00000000..26b1affc
--- /dev/null
+++ b/frontend/src/components/landing/P2PNav.vue
@@ -0,0 +1,282 @@
+<!-- Copyright (C) 2025-2026  Buuuntyyy -->
+<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
+
+<template>
+  <nav class="landing-nav">
+    <div class="nav-container">
+      <a href="https://kagibi.cloud" class="nav-logo">
+        <img src="/Logo.png" alt="Kagibi Logo" width="40rem"/>
+        <span>Kagibi</span>
+      </a>
+
+      <div class="nav-links">
+        <a href="https://kagibi.cloud" class="nav-link">{{ t('nav.home') }}</a>
+        <a href="https://kagibi.cloud/transfer" class="nav-link">{{ t('nav.transfer') }}</a>
+        <a href="https://kagibi.cloud/security" class="nav-link">{{ t('nav.security') }}</a>
+
+        <template v-if="authStore.isAuthenticated">
+          <a :href="driveUrl" class="nav-btn">{{ t('nav.myDrive') }}</a>
+          <router-link to="/account" class="user-avatar-link" :title="authStore.user?.name || t('nav.myAccount')">
+            <div class="user-avatar">
+              <img
+                v-if="authStore.user?.avatar_url"
+                :src="authStore.user.avatar_url"
+                :alt="authStore.user?.name"
+                class="avatar-image"
+                @error="(e) => e.target.style.display = 'none'"
+              />
+              <div v-else class="avatar-fallback">
+                {{ getInitials(authStore.user?.name) }}
+              </div>
+            </div>
+          </router-link>
+          <a href="#" class="nav-link" @click.prevent="logout">{{ t('nav.logout') }}</a>
+        </template>
+        <template v-else>
+          <router-link to="/login" class="nav-btn">{{ t('nav.login') }}</router-link>
+        </template>
+      </div>
+
+      <!-- Mobile Menu Button -->
+      <button class="mobile-menu-btn" @click="toggleMenu">
+        <svg v-if="!isMenuOpen" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+          <line x1="3" y1="12" x2="21" y2="12"></line>
+          <line x1="3" y1="6" x2="21" y2="6"></line>
+          <line x1="3" y1="18" x2="21" y2="18"></line>
+        </svg>
+        <svg v-else viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+          <line x1="18" y1="6" x2="6" y2="18"></line>
+          <line x1="6" y1="6" x2="18" y2="18"></line>
+        </svg>
+      </button>
+    </div>
+
+    <!-- Mobile Menu -->
+    <div class="mobile-menu" :class="{ open: isMenuOpen }">
+      <a href="https://kagibi.cloud" class="mobile-link" @click="closeMenu">{{ t('nav.home') }}</a>
+      <a href="https://kagibi.cloud/transfer" class="mobile-link" @click="closeMenu">{{ t('nav.transfer') }}</a>
+      <a href="https://kagibi.cloud/security" class="mobile-link" @click="closeMenu">{{ t('nav.security') }}</a>
+      <template v-if="authStore.isAuthenticated">
+        <a :href="driveUrl" class="mobile-btn" @click="closeMenu">{{ t('nav.myDrive') }}</a>
+        <router-link to="/account" class="mobile-link" @click="closeMenu">{{ t('nav.myAccount') }}</router-link>
+        <a href="#" class="mobile-link" @click.prevent="logout; closeMenu()">{{ t('nav.logout') }}</a>
+      </template>
+      <template v-else>
+        <router-link to="/login" class="mobile-btn" @click="closeMenu">{{ t('nav.login') }}</router-link>
+      </template>
+    </div>
+  </nav>
+</template>
+
+<script setup>
+import { ref, computed } from 'vue'
+import { useI18n } from 'vue-i18n'
+import { useAuthStore } from '../../stores/auth'
+import { useRouter } from 'vue-router'
+import { driveBaseUrl } from '../../composables/useSubdomain'
+
+const { t } = useI18n()
+const authStore = useAuthStore()
+const router = useRouter()
+const isMenuOpen = ref(false)
+
+// Redirect to the Drive domain; fall back to the local router path when not on a P2P subdomain
+const driveUrl = computed(() =>
+  driveBaseUrl ? `${driveBaseUrl}/dashboard/home` : '/dashboard/home'
+)
+
+const toggleMenu = () => { isMenuOpen.value = !isMenuOpen.value }
+const closeMenu = () => { isMenuOpen.value = false }
+
+const getInitials = (name) => {
+  if (!name) return '?'
+  return name.substring(0, 2).toUpperCase()
+}
+
+const logout = async () => {
+  await authStore.logout()
+  router.push('/login')
+}
+</script>
+
+<style scoped>
+.landing-nav {
+  position: sticky;
+  top: 0;
+  background: var(--card-color);
+  backdrop-filter: blur(10px);
+  border-bottom: 1px solid var(--border-color);
+  z-index: 1000;
+  opacity: 0.98;
+}
+
+.nav-container {
+  max-width: 1200px;
+  margin: 0 auto;
+  padding: 1rem 2rem;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+}
+
+.nav-logo {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  text-decoration: none;
+  color: var(--main-text-color);
+  font-weight: 700;
+  font-size: 1.25rem;
+  transition: opacity 0.3s ease;
+}
+
+.nav-logo:hover {
+  opacity: 0.7;
+}
+
+.nav-links {
+  display: flex;
+  align-items: center;
+  gap: 2rem;
+}
+
+.nav-link {
+  text-decoration: none;
+  color: var(--secondary-text-color);
+  font-weight: 500;
+  font-size: 0.95rem;
+  transition: color 0.3s ease;
+  cursor: pointer;
+}
+
+.nav-link:hover {
+  color: var(--primary-color);
+}
+
+.nav-btn {
+  padding: 0.5rem 1.5rem;
+  background: var(--primary-color);
+  color: var(--card-color);
+  text-decoration: none;
+  border-radius: 8px;
+  font-weight: 600;
+  font-size: 0.95rem;
+  transition: all 0.3s ease;
+}
+
+.nav-btn:hover {
+  background: var(--accent-color);
+  transform: translateY(-1px);
+}
+
+.user-avatar-link {
+  text-decoration: none;
+}
+
+.user-avatar {
+  width: 36px;
+  height: 36px;
+  border-radius: 50%;
+  overflow: hidden;
+  border: 2px solid var(--border-color);
+  cursor: pointer;
+  transition: border-color 0.2s;
+}
+
+.user-avatar:hover {
+  border-color: var(--primary-color);
+}
+
+.avatar-image {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+
+.avatar-fallback {
+  width: 100%;
+  height: 100%;
+  background: var(--primary-color);
+  color: white;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.75rem;
+  font-weight: 700;
+}
+
+.mobile-menu-btn {
+  display: none;
+  background: none;
+  border: none;
+  cursor: pointer;
+  padding: 0.5rem;
+  color: var(--main-text-color);
+}
+
+.mobile-menu-btn svg {
+  width: 24px;
+  height: 24px;
+}
+
+.mobile-menu {
+  display: none;
+  flex-direction: column;
+  gap: 0.5rem;
+  padding: 0 2rem;
+  background: var(--card-color);
+  max-height: 0;
+  overflow: hidden;
+  transition: max-height 0.3s ease, padding 0.3s ease;
+}
+
+.mobile-menu.open {
+  max-height: 300px;
+  padding: 1rem 2rem;
+  border-top: 1px solid var(--border-color);
+}
+
+.mobile-link {
+  padding: 0.75rem;
+  text-decoration: none;
+  color: var(--secondary-text-color);
+  font-weight: 500;
+  border-radius: 8px;
+  transition: all 0.3s ease;
+  cursor: pointer;
+}
+
+.mobile-link:hover {
+  color: var(--primary-color);
+  background: var(--hover-background-color);
+}
+
+.mobile-btn {
+  padding: 0.75rem;
+  background: var(--primary-color);
+  color: var(--card-color);
+  text-decoration: none;
+  border-radius: 8px;
+  font-weight: 600;
+  text-align: center;
+  transition: background 0.3s ease;
+}
+
+.mobile-btn:hover {
+  background: #0040CC;
+}
+
+@media (max-width: 768px) {
+  .nav-links {
+    display: none;
+  }
+
+  .mobile-menu-btn {
+    display: block;
+  }
+
+  .mobile-menu {
+    display: flex;
+  }
+}
+</style>
diff --git a/frontend/src/components/layout/navbar.vue b/frontend/src/components/layout/navbar.vue
index 1bc3e187..763852bc 100644
--- a/frontend/src/components/layout/navbar.vue
+++ b/frontend/src/components/layout/navbar.vue
@@ -2,13 +2,24 @@
 <!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
 
 <template>
-  <nav>
-    <router-link to="/dashboard" class="brand">
+  <nav :class="{ 'mobile-search-open': mobileSearchOpen }">
+    <router-link v-show="!mobileSearchOpen" :to="authStore.isAuthenticated ? '/dashboard' : '/'" class="brand">
       <img src="/Logo.png" alt="Kagibi Logo" class="brand-logo"/>
       <span>Kagibi</span>
     </router-link>
-    <SearchBar v-if="authStore.isAuthenticated || !!authStore.user" />
-    <div class="nav-links">
+    <div class="search-wrap">
+      <SearchBar v-if="authStore.isAuthenticated" />
+    </div>
+    <!-- Mobile search overlay -->
+    <div v-if="mobileSearchOpen" class="mobile-search-overlay">
+      <button class="mobile-search-back" @click="mobileSearchOpen = false" aria-label="Fermer la recherche">
+        <svg viewBox="0 0 24 24" width="24" height="24" fill="currentColor">
+          <path d="M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.41L7.83 13H20v-2z"/>
+        </svg>
+      </button>
+      <SearchBar v-if="authStore.isAuthenticated" class="mobile-search-bar" />
+    </div>
+    <div class="nav-links" v-show="!mobileSearchOpen">
       <a
         v-if="buyMeACoffeeUrl"
         :href="buyMeACoffeeUrl"
@@ -18,10 +29,14 @@
       >
         {{ t('file.supportProject') }}
       </a>
-      <button @click="showHelpDialog = true" class="theme-toggle" title="Aide & Support">
-        <HelpCircle class="icon-svg" :size="24" :stroke-width="2" />
-      </button>
-      <LanguageSwitcher />
+      <span class="help-wrap">
+        <button @click="showHelpDialog = true" class="theme-toggle" title="Aide & Support">
+          <HelpCircle class="icon-svg" :size="24" :stroke-width="2" />
+        </button>
+      </span>
+      <span class="lang-wrap">
+        <LanguageSwitcher />
+      </span>
       <button @click="themeStore.toggleTheme" class="theme-toggle" :title="themeStore.theme === 'light' ? t('nav.darkMode') : t('nav.lightMode')">
         <svg v-if="themeStore.theme === 'light'" class="icon-svg" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
           <path d="M12 3c-4.97 0-9 4.03-9 9s4.03 9 9 9 9-4.03 9-9c0-.46-.04-.92-.1-1.36-.98 1.37-2.58 2.26-4.4 2.26-2.98 0-5.4-2.42-5.4-5.4 0-1.81.89-3.42 2.26-4.4-.44-.02-.9-.02-1.36-.02z" fill="currentColor"/>
@@ -46,8 +61,14 @@
             </div>
           </div>
         </router-link>
-        <a @click.prevent="logout" href="#">{{ t('nav.logout') }}</a>
+        <a @click.prevent="logout" href="#" class="logout-link">{{ t('nav.logout') }}</a>
       </template>
+      <!-- Search icon for mobile (only shown when not in search mode) -->
+      <button v-if="authStore.isAuthenticated" class="mobile-search-btn" @click="mobileSearchOpen = true" aria-label="Rechercher">
+        <svg viewBox="0 0 24 24" width="22" height="22" fill="currentColor">
+          <path d="M15.5 14h-.79l-.28-.27A6.471 6.471 0 0 0 16 9.5 6.5 6.5 0 1 0 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/>
+        </svg>
+      </button>
     </div>
     <HelpDialog v-model:isOpen="showHelpDialog" />
   </nav>
@@ -71,8 +92,9 @@ const themeStore = useThemeStore()
 const router = useRouter()
 
 const showHelpDialog = ref(false)
+const mobileSearchOpen = ref(false)
 
-const buyMeACoffeeUrl = computed(() => {
+const ACoffeeUrl = computed(() => {
   const runtimeUrl = typeof window !== 'undefined' ? window.__APP_CONFIG__?.buyMeACoffeeUrl : ''
   return runtimeUrl || import.meta.env.VITE_BUY_ME_A_COFFEE_URL || ''
 })
@@ -238,4 +260,102 @@ nav {
   background: linear-gradient(135deg, var(--primary-color, #6B7FD7) 0%, var(--secondary-color, #9370DB) 100%);
   border-radius: 50%;
 }
+
+.search-wrap {
+  flex: 1;
+  min-width: 0;
+  display: flex;
+  align-items: center;
+}
+
+/* Mobile search button — hidden on desktop */
+.mobile-search-btn {
+  display: none;
+}
+
+@media (max-width: 768px) {
+  .brand {
+    width: auto;
+    padding: 8px;
+    margin-left: 0;
+  }
+
+  /* Hide desktop search bar on mobile (replaced by overlay) */
+  .search-wrap {
+    display: none;
+  }
+
+  /* Hide logout text — user can logout from account page via avatar */
+  .logout-link {
+    display: none !important;
+  }
+
+  .support-link {
+    display: none;
+  }
+
+  .nav-links {
+    gap: 0.25rem;
+  }
+
+  .mobile-search-btn {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    background: none;
+    border: none;
+    cursor: pointer;
+    color: var(--main-text-color);
+    padding: 8px;
+    border-radius: 50%;
+  }
+
+  .mobile-search-btn:hover {
+    background: var(--hover-background-color);
+  }
+
+  /* Full-width search overlay inside navbar */
+  .mobile-search-overlay {
+    display: flex;
+    align-items: center;
+    gap: 4px;
+    flex: 1;
+    padding: 0 8px;
+  }
+
+  .mobile-search-back {
+    display: flex;
+    align-items: center;
+    justify-content: center;
+    background: none;
+    border: none;
+    cursor: pointer;
+    color: var(--main-text-color);
+    padding: 8px;
+    border-radius: 50%;
+    flex-shrink: 0;
+  }
+
+  .mobile-search-bar {
+    flex: 1;
+    margin: 0 !important;
+    max-width: none !important;
+  }
+}
+
+@media (max-width: 480px) {
+  .brand span {
+    display: none;
+  }
+
+  .theme-toggle {
+    padding: 6px;
+  }
+
+  /* On very small screens, hide language switcher and help button */
+  .lang-wrap,
+  .help-wrap {
+    display: none;
+  }
+}
 </style>
diff --git a/frontend/src/components/p2p/P2PInviteDialog.vue b/frontend/src/components/p2p/P2PInviteDialog.vue
new file mode 100644
index 00000000..a2c61f23
--- /dev/null
+++ b/frontend/src/components/p2p/P2PInviteDialog.vue
@@ -0,0 +1,479 @@
+<!-- Copyright (C) 2025-2026  Buuuntyyy -->
+<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
+
+<template>
+  <Teleport to="body">
+    <div v-if="visible" class="invite-overlay" @click.self="close">
+      <div class="invite-dialog">
+
+        <!-- Step 1: email + options -->
+        <template v-if="step === 'form'">
+          <h3 class="invite-title">{{ t('p2p.invite.title') }}</h3>
+          <p class="invite-sub">{{ t('p2p.invite.subtitle') }}</p>
+
+          <div class="invite-field">
+            <label>{{ t('p2p.invite.recipientEmail') }} <span class="optional-tag">{{ t('common.optional') }}</span></label>
+            <input
+              v-model="email"
+              type="email"
+              :placeholder="t('p2p.invite.emailPlaceholder')"
+              class="invite-input"
+              @keyup.enter="create"
+            />
+            <p class="field-hint">{{ t('p2p.invite.emailHint') }}</p>
+          </div>
+
+          <div class="invite-field">
+            <label>{{ t('p2p.invite.file') }}</label>
+            <div class="file-summary">
+              <svg xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"/><polyline points="13 2 13 9 20 9"/></svg>
+              <span class="file-name">{{ props.file?.name }}</span>
+              <span class="file-size">{{ formatSize(props.file?.size) }}</span>
+            </div>
+          </div>
+
+          <label class="send-email-toggle">
+            <input type="checkbox" v-model="sendEmailOption" />
+            <span>{{ t('p2p.invite.sendEmailOption') }}</span>
+          </label>
+
+          <label class="legal-consent-toggle">
+            <input type="checkbox" v-model="legalConsent" />
+            <span>
+              Je certifie que le fichier partagé est légal, ne contient pas de contenu illicite, et j'accepte d'en être seul responsable conformément aux <router-link to="/terms" target="_blank" class="legal-link">CGU</router-link>.
+            </span>
+          </label>
+
+          <p v-if="error" class="invite-error">{{ error }}</p>
+
+          <div class="invite-actions">
+            <button class="btn-secondary" @click="close" :disabled="loading">{{ t('common.cancel') }}</button>
+            <button class="btn-primary" @click="create" :disabled="loading || !legalConsent">
+              <span v-if="loading" class="spinner"></span>
+              {{ loading ? t('common.loading') : t('p2p.invite.generate') }}
+            </button>
+          </div>
+        </template>
+
+        <!-- Step 2: link ready -->
+        <template v-else-if="step === 'ready'">
+          <h3 class="invite-title">{{ t('p2p.invite.readyTitle') }}</h3>
+          <p class="invite-sub">{{ t('p2p.invite.readyDesc', { name: recipientName }) }}</p>
+
+          <div class="link-box">
+            <input class="link-input" :value="inviteUrl" readonly @click="copyLink" />
+            <button class="copy-btn" @click="copyLink">
+              <svg v-if="!copied" xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="9" y="9" width="13" height="13" rx="2" ry="2"/><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"/></svg>
+              <svg v-else xmlns="http://www.w3.org/2000/svg" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><polyline points="20 6 9 17 4 12"/></svg>
+              {{ copied ? t('common.copied') : t('common.copy') }}
+            </button>
+          </div>
+
+          <p v-if="emailSent" class="email-sent-notice">
+            <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><polyline points="20 6 9 17 4 12"/></svg>
+            {{ t('p2p.invite.emailSent') }}
+          </p>
+
+          <div class="waiting-notice">
+            <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="10"/><polyline points="12 6 12 12 16 14"/></svg>
+            {{ t('p2p.invite.waitingNotice') }}
+          </div>
+
+          <div class="invite-actions" style="justify-content: flex-end">
+            <button class="btn-secondary" @click="close">{{ t('common.close') }}</button>
+          </div>
+        </template>
+
+      </div>
+    </div>
+  </Teleport>
+</template>
+
+<script setup>
+import { ref, computed } from 'vue'
+import { useI18n } from 'vue-i18n'
+import { authClient } from '../../auth-client'
+import { API_BASE_URL } from '../../api'
+import { useP2PStore } from '../../stores/p2p'
+import { generateMasterKey } from '../../utils/crypto'
+
+const { t } = useI18n()
+const p2pStore = useP2PStore()
+
+const props = defineProps({
+  visible: { type: Boolean, default: false },
+  file: { type: File, default: null },
+  transferId: { type: String, default: '' },
+})
+
+const emit = defineEmits(['close', 'invited'])
+
+const step = ref('form')
+const email = ref('')
+const error = ref('')
+const loading = ref(false)
+const copied = ref(false)
+const emailSent = ref(false)
+const sendEmailOption = ref(false)
+const legalConsent = ref(false)
+
+const inviteToken = ref('')
+const recipientName = ref('')
+const recipientId = ref('')
+const recipientPublicKey = ref('')
+
+const inviteUrl = computed(() => {
+  if (!inviteToken.value) return ''
+  const base = window.location.origin
+  // Invite recipients land on the root path of the P2P subdomain (P2PSubdomainView),
+  // not on /p2p which is the main-domain P2PView.
+  return `${base}/?invite=${inviteToken.value}`
+})
+
+function formatSize(bytes) {
+  if (!bytes) return ''
+  if (bytes < 1024) return `${bytes} B`
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`
+  if (bytes < 1024 * 1024 * 1024) return `${(bytes / (1024 * 1024)).toFixed(1)} MB`
+  return `${(bytes / (1024 * 1024 * 1024)).toFixed(2)} GB`
+}
+
+async function create() {
+  if (!props.file) return
+  error.value = ''
+  loading.value = true
+  let _step = 'init'
+  try {
+    _step = 'getToken'
+    const token = await authClient.getToken()
+    console.log('[Invite] token present:', !!token)
+
+    _step = 'fetch'
+    const res = await fetch(`${API_BASE_URL}p2p/invite`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${token}` },
+      body: JSON.stringify({
+        recipient_email: email.value.trim(),
+        file_name: props.file.name,
+        file_size: props.file.size,
+        transfer_id: props.transferId,
+        send_email: sendEmailOption.value,
+      }),
+    })
+
+    _step = 'json'
+    let data
+    try { data = await res.json() } catch (je) {
+      console.error('[Invite] JSON parse failed:', je)
+      data = {}
+    }
+    console.log('[Invite] HTTP', res.status, data)
+
+    if (!res.ok) {
+      error.value = data.error || t('p2p.invite.createError')
+      return
+    }
+
+    _step = 'storeFields'
+    inviteToken.value = data.token
+    recipientName.value = data.recipient_name || 'Guest'
+    recipientId.value = data.recipient_id
+    recipientPublicKey.value = data.recipient_public_key || null
+
+    _step = 'generateKey'
+    const fileKey = await generateMasterKey()
+
+    _step = 'setPendingInvite'
+    p2pStore.setPendingInvite({
+      transferId: props.transferId,
+      file: props.file,
+      fileKey,
+      recipientId: data.recipient_id,
+      recipientPublicKey: data.recipient_public_key || null,
+      recipientName: data.recipient_name || 'Guest',
+    })
+
+    emailSent.value = sendEmailOption.value
+    step.value = 'ready'
+    emit('invited', { token: data.token, recipientId: data.recipient_id })
+  } catch (e) {
+    console.error(`[Invite] create failed at step="${_step}":`, e.name, e.message, e)
+    error.value = `[${_step}] ${e.message}`
+  } finally {
+    loading.value = false
+  }
+}
+
+async function copyLink() {
+  try {
+    await navigator.clipboard.writeText(inviteUrl.value)
+    copied.value = true
+    setTimeout(() => { copied.value = false }, 2000)
+  } catch {
+    // fallback: select input
+  }
+}
+
+function close() {
+  if (step.value === 'form') {
+    step.value = 'form'
+    email.value = ''
+    error.value = ''
+  }
+  emit('close')
+}
+</script>
+
+<style scoped>
+.invite-overlay {
+  position: fixed;
+  inset: 0;
+  background: rgba(0,0,0,0.45);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 1000;
+}
+
+.invite-dialog {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 14px;
+  padding: 2rem;
+  width: 440px;
+  max-width: calc(100vw - 2rem);
+  box-shadow: 0 8px 40px rgba(0,0,0,0.15);
+}
+
+.invite-title {
+  margin: 0 0 0.4rem;
+  font-size: 1.1rem;
+  font-weight: 600;
+  color: var(--text-color);
+}
+
+.invite-sub {
+  margin: 0 0 1.4rem;
+  color: var(--text-secondary);
+  font-size: 0.88rem;
+}
+
+.invite-field {
+  margin-bottom: 1.1rem;
+}
+
+.invite-field label {
+  display: block;
+  font-size: 0.82rem;
+  font-weight: 500;
+  color: var(--text-secondary);
+  margin-bottom: 0.4rem;
+}
+
+.optional-tag {
+  font-weight: 400;
+  font-size: 0.75rem;
+  color: var(--text-secondary);
+  opacity: 0.7;
+  margin-left: 0.3rem;
+}
+
+.field-hint {
+  font-size: 0.75rem;
+  color: var(--text-secondary);
+  margin: 0.3rem 0 0;
+  opacity: 0.8;
+}
+
+.invite-input {
+  width: 100%;
+  box-sizing: border-box;
+  padding: 0.6rem 0.8rem;
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  background: var(--background-color);
+  color: var(--text-color);
+  font-size: 0.9rem;
+}
+
+.invite-input:focus {
+  outline: none;
+  border-color: var(--primary-color);
+}
+
+.file-summary {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.5rem 0.8rem;
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  font-size: 0.88rem;
+  color: var(--text-color);
+}
+
+.file-name {
+  flex: 1;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.file-size {
+  color: var(--text-secondary);
+  white-space: nowrap;
+}
+
+.invite-error {
+  color: var(--error-color, #ef4444);
+  font-size: 0.85rem;
+  margin: -0.5rem 0 0.8rem;
+}
+
+.invite-actions {
+  display: flex;
+  gap: 0.6rem;
+  justify-content: flex-end;
+  margin-top: 1.2rem;
+}
+
+.btn-primary {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  padding: 0.55rem 1.1rem;
+  background: var(--primary-color);
+  color: #fff;
+  border: none;
+  border-radius: 8px;
+  font-size: 0.88rem;
+  font-weight: 500;
+  cursor: pointer;
+}
+
+.btn-primary:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.btn-secondary {
+  padding: 0.55rem 1.1rem;
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-color);
+  border-radius: 8px;
+  font-size: 0.88rem;
+  cursor: pointer;
+}
+
+.link-box {
+  display: flex;
+  gap: 0.5rem;
+  margin-bottom: 1rem;
+}
+
+.link-input {
+  flex: 1;
+  padding: 0.55rem 0.8rem;
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  background: var(--background-color);
+  color: var(--text-color);
+  font-size: 0.82rem;
+  cursor: pointer;
+}
+
+.copy-btn {
+  display: flex;
+  align-items: center;
+  gap: 0.35rem;
+  padding: 0.55rem 0.9rem;
+  background: var(--primary-color);
+  color: #fff;
+  border: none;
+  border-radius: 8px;
+  font-size: 0.82rem;
+  cursor: pointer;
+  white-space: nowrap;
+}
+
+.send-email-toggle {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  font-size: 0.85rem;
+  color: var(--text-secondary);
+  cursor: pointer;
+  margin-bottom: 1rem;
+  user-select: none;
+}
+
+.send-email-toggle input[type="checkbox"] {
+  width: 15px;
+  height: 15px;
+  cursor: pointer;
+  accent-color: var(--primary-color);
+}
+
+.legal-consent-toggle {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.5rem;
+  font-size: 0.82rem;
+  color: var(--text-secondary);
+  cursor: pointer;
+  margin-bottom: 1rem;
+  user-select: none;
+  line-height: 1.4;
+  padding: 0.6rem 0.8rem;
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+}
+
+.legal-consent-toggle input[type="checkbox"] {
+  width: 15px;
+  height: 15px;
+  cursor: pointer;
+  accent-color: var(--primary-color);
+  flex-shrink: 0;
+  margin-top: 0.15rem;
+}
+
+.legal-link {
+  color: var(--primary-color);
+  text-decoration: underline;
+}
+
+.email-sent-notice {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  font-size: 0.82rem;
+  color: var(--success-color, #27ae60);
+  margin-bottom: 0.75rem;
+}
+
+.waiting-notice {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  font-size: 0.8rem;
+  color: var(--text-secondary);
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  padding: 0.6rem 0.8rem;
+  margin-bottom: 0.5rem;
+}
+
+.spinner {
+  display: inline-block;
+  width: 12px;
+  height: 12px;
+  border: 2px solid rgba(255,255,255,0.3);
+  border-top-color: #fff;
+  border-radius: 50%;
+  animation: spin 0.6s linear infinite;
+}
+
+@keyframes spin { to { transform: rotate(360deg); } }
+</style>
diff --git a/frontend/src/components/usage/UsageDashboard.vue b/frontend/src/components/usage/UsageDashboard.vue
index 1e0df247..43e0d997 100644
--- a/frontend/src/components/usage/UsageDashboard.vue
+++ b/frontend/src/components/usage/UsageDashboard.vue
@@ -13,7 +13,7 @@
         </button>
         <h1>Mon Utilisation</h1>
       </div>
-      <p class="subtitle">Consultez en temps réel l'utilisation de votre espace et vos transferts P2P.</p>
+      <p class="subtitle">Consultez l'utilisation de votre espace de stockage.</p>
     </div>
 
     <!-- Loading State -->
@@ -46,33 +46,6 @@
                       </div>
                   </div>
                   
-                  <div class="stat-card">
-                       <div class="stat-icon">
-                          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
-                              <path d="M12 2L2 7l10 5 10-5-10-5z"/>
-                              <path d="M2 17l10 5 10-5"/>
-                              <path d="M2 12l10 5 10-5"/>
-                          </svg>
-                      </div>
-                      <div class="stat-info">
-                          <span class="stat-label">Bande passante consommée</span>
-                          <span class="stat-value">{{ billingStore.bandwidthUsageGB.toFixed(2) }} <small>Go</small></span>
-                      </div>
-                  </div>
-
-                  <div class="stat-card">
-                       <div class="stat-icon">
-                          <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
-                              <polyline points="16 16 12 12 8 16"></polyline>
-                              <line x1="12" y1="12" x2="12" y2="21"></line>
-                              <path d="M20.39 18.39A5 5 0 0 0 18 9h-1.26A8 8 0 1 0 3 16.3"></path>
-                          </svg>
-                      </div>
-                      <div class="stat-info">
-                          <span class="stat-label">Taille max par fichier (+ Partages)</span>
-                          <span class="stat-value">{{ maxFileSizeText }} </span>
-                      </div>
-                  </div>
               </div>
           </div>
       </section>
@@ -95,12 +68,6 @@ const maxStorageGB = computed(() => {
   return currentPlan.value?.storage_limit_gb || Number(import.meta.env.VITE_DEFAULT_STORAGE_GB) || 20;
 })
 
-const maxFileSizeText = computed(() => {
-   const val = currentPlan.value?.features?.max_file_size_mb || 1024;
-   if(val >= 1024) return (val/1024) + ' Go';
-   return val + ' Mo';
-})
-
 const storagePercent = computed(() => {
   const limit = maxStorageGB.value
   const used = billingStore.storageUsageGB
@@ -183,4 +150,36 @@ onMounted(async () => {
 .stat-bar-fill.bar-warning { background: var(--warning-color); }
 .stat-bar-fill.bar-danger { background: var(--error-color); }
 
+@media (max-width: 768px) {
+  .account-page {
+    padding: 1.5rem 1rem;
+  }
+
+  .page-header h1 {
+    font-size: 1.5rem;
+  }
+
+  .usage-stats {
+    grid-template-columns: 1fr;
+  }
+
+  .section-body {
+    padding: 16px;
+  }
+
+  .section-header {
+    padding: 14px 16px;
+  }
+}
+
+@media (max-width: 480px) {
+  .account-page {
+    padding: 1rem 0.75rem;
+  }
+
+  .stat-card {
+    flex-direction: column;
+  }
+}
+
 </style>
diff --git a/frontend/src/composables/useSubdomain.js b/frontend/src/composables/useSubdomain.js
new file mode 100644
index 00000000..d293e869
--- /dev/null
+++ b/frontend/src/composables/useSubdomain.js
@@ -0,0 +1,28 @@
+// Copyright (C) 2025-2026  Buuuntyyy
+// SPDX-License-Identifier: AGPL-3.0-or-later
+
+const hostname = window.location.hostname
+
+export const isP2PSubdomain =
+  hostname === 'send.kagibi.cloud' ||
+  hostname === 'send-dev.kagibi.cloud'
+
+// Base URL of the Drive app — used to redirect out of the P2P subdomain
+const DRIVE_BASE_URLS = {
+  'send.kagibi.cloud':     'https://kagibi.cloud',
+  'send-dev.kagibi.cloud': 'https://dev.kagibi.cloud',
+}
+
+export const driveBaseUrl = DRIVE_BASE_URLS[hostname] ?? null
+
+// Base URL of the P2P send app — used to redirect to it from the main domain
+const SEND_BASE_URLS = {
+  'kagibi.cloud':     'https://send.kagibi.cloud',
+  'dev.kagibi.cloud': 'https://send-dev.kagibi.cloud',
+}
+
+export const sendBaseUrl = SEND_BASE_URLS[hostname] ?? 'https://send.kagibi.cloud'
+
+export function useSubdomain() {
+  return { isP2PSubdomain, driveBaseUrl, sendBaseUrl }
+}
diff --git a/frontend/src/locales/en.json b/frontend/src/locales/en.json
index 35ddcfec..78076f88 100644
--- a/frontend/src/locales/en.json
+++ b/frontend/src/locales/en.json
@@ -20,7 +20,10 @@
     "myFriends": "My Friends",
     "addFriend": "Add friend",
     "storage": "Storage",
-    "billing": "Billing"
+    "billing": "Billing",
+    "home": "Home",
+    "transfer": "P2P Transfer",
+    "myDrive": "My Drive"
   },
   "file": {
     "upload": "Upload file",
@@ -81,7 +84,14 @@
     "zeroKnowledge": "Zero-Knowledge",
     "zeroKnowledgeDesc": "We only know your email address, username and avatar. No ads, no cookies, no tracking.",
     "secureSharing": "Secure, Direct and Confidential Sharing",
-    "secureSharingDesc": "Exchange your files in encrypted P2P, without intermediate server, with access control and expiration."
+    "secureSharingDesc": "Exchange your files in encrypted P2P, without intermediate server, with access control and expiration.",
+    "p2pTagline": "Send files directly, with no intermediate server.",
+    "p2pFeature1": "Direct transfer",
+    "p2pFeature1Desc": "Files travel directly from your browser to the recipient's. No intermediate storage.",
+    "p2pFeature2": "End-to-end encryption",
+    "p2pFeature2Desc": "The file is encrypted before sending. Neither we nor anyone else can read its content.",
+    "p2pFeature3": "Friends only",
+    "p2pFeature3Desc": "You can only transfer to approved contacts. No public links, no accidental leaks."
   },
   "common": {
     "cancel": "Cancel",
@@ -118,7 +128,8 @@
     "refuse": "Refuse",
     "accept": "Accept",
     "state": "State",
-    "type": "Type"
+    "type": "Type",
+    "optional": "optional"
   },
   "share": {
     "shareWith": "Share with",
@@ -227,7 +238,46 @@
     "noOnlineFriends": "No online friends",
     "addFriends": "Add friends to exchange files",
     "sendFile": "Send file",
-    "selectFriendAndFile": "Select a friend and a file"
+    "selectFriendAndFile": "Select a friend and a file",
+    "transferRejected": "Transfer declined by your friend",
+    "transferTimedOut": "No response — the transfer request has expired.",
+    "keepWindowActive": "Keep this window active during the transfer, don't refresh or close the tab.",
+    "pingNotify": "Re-notify",
+    "pingLimitReached": "Limit reached",
+    "pingsLeft": "{count} ping(s) left",
+    "pingNotification": "P2P transfer reminder",
+    "pingNotificationBody": "Your friend is nudging you about the pending file transfer.",
+    "invite": {
+      "title": "Invite by link",
+      "subtitle": "Anyone who receives this link can receive the file — no account required.",
+      "recipientEmail": "Recipient email",
+      "emailPlaceholder": "friend{'@'}example.com",
+      "emailHint": "Optional — used only to send a notification email with the link.",
+      "file": "File to send",
+      "generate": "Generate link",
+      "readyTitle": "Link ready",
+      "readyDesc": "Share this link with {name}. The transfer will start automatically when they open it.",
+      "sendEmailOption": "Send a notification email with the link",
+      "emailSent": "Notification email sent",
+      "waitingNotice": "Waiting for the recipient to open the link…",
+      "createError": "Failed to create invite. Please try again.",
+      "incomingTitle": "File transfer invitation",
+      "incomingDesc": "{sender} wants to send you {fileName} ({size})",
+      "accept": "Accept",
+      "decline": "Decline",
+      "expired": "This invitation has expired.",
+      "notForYou": "This invitation is not valid.",
+      "accepted": "Connected — waiting for the transfer to start…",
+      "guest": {
+        "authenticating": "Establishing secure connection…",
+        "generatingKeys": "Generating encryption keys…",
+        "connecting": "Connecting to the network…",
+        "waiting": "Waiting for the sender to start the transfer…",
+        "transferring": "Transfer in progress…",
+        "done": "Transfer complete! Redirecting…",
+        "error": "An error occurred. Please try the link again."
+      }
+    }
   },
   "home": {
     "welcome": "Welcome to your Secured Storage",
@@ -245,7 +295,12 @@
     "username": "Username",
     "updating": "Updating...",
     "updatingPassword": "Updating...",
+    "updatingEmail": "Updating...",
     "modify": "Modify",
+    "email": "Email address",
+    "newEmail": "New email address",
+    "currentPasswordForEmail": "Current password (confirmation)",
+    "updateEmail": "Update email",
     "security": "Security",
     "currentPassword": "Current password",
     "newPassword": "New password",
@@ -387,7 +442,8 @@
       "title": "Enter the new name:",
       "placeholder": "New name",
       "newFolderTitle": "Enter the name of the new folder:",
-      "newFolderPlaceholder": "Folder name"
+      "newFolderPlaceholder": "Folder name",
+      "invalidName": "Only letters, numbers, spaces, hyphens ( - ), dots ( . ) and underscores ( _ ) are allowed."
     },
     "tag": {
       "title": "Manage tags",
@@ -433,5 +489,361 @@
       "deleteButton": "Permanently delete my account",
       "deleting": "Deleting..."
     }
+  },
+  "landing": {
+    "nav": {
+      "home": "Home",
+      "transfer": "P2P Transfer",
+      "compare": "Compare",
+      "security": "Zero-Knowledge",
+      "login": "Sign in"
+    },
+    "home": {
+      "eyebrow": "Sovereign Cloud · Open Source · France",
+      "titleLine1": "The cloud that",
+      "titleHighlight": "cannot read your data",
+      "subtitle": "Kagibi encrypts your files on your device before any upload. Neither us nor anyone else can access them — mathematically. Hosted in France, GDPR-compliant, immune to the Cloud Act.",
+      "ctaDrive": "Open My Drive",
+      "ctaP2P": "Instant P2P Transfer",
+      "badgeFrance": "Hosted in France",
+      "badgeOpenSource": "Open Source AGPLv3",
+      "badgeZK": "Zero-Knowledge",
+      "badgeCloudAct": "Cloud Act immune",
+      "howTitle": "How it works",
+      "howSubtitle": "Three steps, zero privacy compromises.",
+      "step1Title": "Local encryption",
+      "step1Desc": "Your files are encrypted with AES-256-GCM directly in your browser. The key never leaves your device.",
+      "step2Title": "Secure storage",
+      "step2Desc": "Only the encrypted stream reaches our servers in France. Even with full infrastructure access, no one can decrypt your files.",
+      "step3Title": "Exclusive access",
+      "step3Desc": "Only you can decrypt and read your data. Share securely via encrypted links or direct P2P transfer.",
+      "featTitle": "Everything you need",
+      "featSubtitle": "A complete platform built on solid cryptographic foundations.",
+      "feat1Title": "Guaranteed Zero-Knowledge",
+      "feat1Desc": "Client-side AES-256-GCM encryption. Your keys never leave your device. Our servers only see encrypted noise — impossible otherwise.",
+      "feat2Title": "P2P Transfer up to 10 GB",
+      "feat2Desc": "Send large files directly, browser to browser. No intermediate storage, maximum speed, no trace on our servers.",
+      "feat3Title": "Digital sovereignty",
+      "feat3Desc": "100% OVH France infrastructure (Gravelines). Outside US jurisdiction. Strict GDPR compliance. Your data never leaves Europe.",
+      "feat4Title": "100% verifiable",
+      "feat4Desc": "Source code fully published under the AGPLv3 license. Audit yourself what Kagibi does with your data. Trust should not be blind.",
+      "ossTitle": "A 100% open source project",
+      "ossPara1": "Kagibi is published under the GNU AGPLv3 license — the strongest copyleft license. Any modification deployed in production must be shared publicly. No hidden proprietary version, no possible backdoor.",
+      "ossPara2": "The code is freely auditable, forkable and improvable by everyone. Contribute to security, report bugs, suggest features — every Pull Request is welcome.",
+      "ossViewCode": "View source code",
+      "ossLicenceLabel": "License",
+      "ossContribLabel": "Contributions",
+      "ossContribValue": "Open",
+      "ossPlatformLabel": "Platform",
+      "ctaTitle": "Ready to take back control?",
+      "ctaSubtitle": "Join Kagibi and store your files without ever compromising your privacy.",
+      "ctaCreate": "Create my account for free",
+      "ctaTryP2P": "Try P2P transfer"
+    },
+    "transfer": {
+      "heroTitle": "Ultra-Fast P2P Transfer",
+      "heroSubtitle": "Send up to 10 GB directly, no upload. Maximum speed, zero trace.",
+      "howTitle": "How does it work?",
+      "step1Title": "Select your files",
+      "step1Desc": "Choose the files to send (10 GB max)",
+      "step2Title": "Get a unique link",
+      "step2Desc": "A secure link is generated instantly",
+      "step3Title": "Share and transfer",
+      "step3Desc": "Direct P2P connection via TURN server",
+      "feat1Title": "Maximum Speed",
+      "feat1Desc": "No server upload, direct P2P transfer at full bandwidth",
+      "feat2Title": "E2E Encryption",
+      "feat2Desc": "Your files are encrypted end-to-end during the transfer",
+      "feat3Title": "Zero-Trace",
+      "feat3Desc": "No file is stored on our servers, absolute peace of mind",
+      "feat4Title": "Available 24/7",
+      "feat4Desc": "Service available at all times, no usage limits",
+      "ctaTitle": "Ready to transfer?",
+      "ctaSubtitle": "Sign in to start using instant P2P transfer",
+      "ctaBtn": "Go to transfer",
+      "ctaNote": "Free and unlimited for all users",
+      "techTitle": "WebRTC & TURN Technology",
+      "tech1Title": "WebRTC",
+      "tech1Desc": "Peer-to-peer communication protocol standardized by the W3C. Enables a direct connection between browsers without intermediary.",
+      "tech2Title": "TURN Server",
+      "tech2Desc": "Relay infrastructure for connections that cannot be made directly. Guarantees a successful transfer even behind a strict NAT.",
+      "tech3Title": "AES Encryption",
+      "tech3Desc": "Client-side encryption before transfer. Keys are exchanged via secure signaling, never stored."
+    },
+    "compare": {
+      "eyebrow": "Comparison",
+      "title": "Kagibi vs. other solutions",
+      "subtitle": "Not all cloud storage solutions are equal. Here is why client-side encryption changes everything.",
+      "tableFeature": "Feature",
+      "inDev": "In dev.",
+      "disclaimer": "Information collected publicly from official websites and vendor documentation. Last updated: April 2026.",
+      "techTitle": "In-depth technical comparison",
+      "techSubtitle": "Algorithms, architecture and cryptographic guarantees.",
+      "legendColorGreen": "Green",
+      "legendColorYellow": "Orange",
+      "legendColorRed": "Red",
+      "legendColorGray": "Gray",
+      "legendAdvantage": "Advantage / best practice",
+      "legendPartial": "Partial / depends on configuration",
+      "legendRisk": "Risk / negative point",
+      "legendNeutral": "Neutral information",
+      "ctaTitle": "The solution that mathematically cannot read your data",
+      "ctaSubtitle": "Client-side encryption is not an option — it is the foundation.",
+      "ctaCreate": "Create my account for free",
+      "ctaMore": "Learn more",
+      "r1": "Client-side encryption (Zero-Knowledge)",
+      "r1tip": "Your files are encrypted on your device before sending — the server only sees noise.",
+      "r2": "Encrypted P2P transfer",
+      "r2tip": "Direct browser-to-browser transfer, no intermediate storage.",
+      "r3": "Open Source",
+      "r4": "Hosted in France / Europe",
+      "r5": "Cloud Act immune (USA)",
+      "r5tip": "Servers outside US jurisdiction cannot be compelled to hand over data.",
+      "r6": "Encrypted link sharing",
+      "r7": "Strict GDPR compliance",
+      "r8": "Self-hostable",
+      "r8tip": "Deploy your own instance on your infrastructure.",
+      "r9": "Copyleft license (AGPLv3)",
+      "r9tip": "Prohibits proprietary forks — any modification must remain public.",
+      "r10": "Access without subscription",
+      "r11": "Native mobile app",
+      "r12": "Desktop app (Windows / Linux)",
+      "r13": "Filename encryption",
+      "r14": "No provider access to data",
+      "techKagibi1": "Client-side file encryption",
+      "techKagibi2": "Key exchange for sharing",
+      "techKagibi3": "Key derivation from password",
+      "techKagibi4": "Native browser cryptographic operations",
+      "techKagibi5": "Encrypted keys transmitted to server",
+      "techKagibi6": "End-to-end encrypted P2P transfer",
+      "techKagibi7": "Fully auditable source code",
+      "techKagibi8": "Stateless sessions, instant revocation",
+      "techKagibi9": "Two-factor authentication supported",
+      "techProton1": "Client-side encryption",
+      "techProton2": "Key and metadata encryption",
+      "techProton3": "Authentication without password transmission",
+      "techProton4": "Proton cannot read your files",
+      "techProton5": "Part of the source code is closed",
+      "techProton6": "Swiss jurisdiction (outside EU)",
+      "techProton7": "No direct peer-to-peer transfer",
+      "techNextcloud1": "Server-side encryption (optional)",
+      "techNextcloud2": "Keys managed by server administrator",
+      "techNextcloud3": "AGPLv3 source code available",
+      "techNextcloud4": "Full infrastructure control",
+      "techNextcloud5": "Experimental E2EE module, not enabled by default",
+      "techNextcloud6": "GDPR compliance varies by instance",
+      "techNextcloud7": "No direct peer-to-peer transfer",
+      "techOpencloud1": "Server-side encryption",
+      "techOpencloud2": "Keys held by operator",
+      "techOpencloud3": "Fork of ownCloud, Apache 2.0 license",
+      "techOpencloud4": "Deployment on own infrastructure",
+      "techOpencloud5": "No native client-side encryption",
+      "techOpencloud6": "Typically DACH-hosted",
+      "techOpencloud7": "No direct peer-to-peer transfer",
+      "techGoogle1": "Encryption in transit and at rest",
+      "techGoogle2": "Google holds and manages all keys",
+      "techGoogle3": "No independent audit possible",
+      "techGoogle4": "Subject to US authority requests",
+      "techGoogle5": "Content used to train AI models",
+      "techGoogle6": "Servers under US jurisdiction",
+      "techGoogle7": "No direct peer-to-peer transfer"
+    },
+    "security": {
+      "eyebrow": "Zero-Knowledge Architecture",
+      "title1": "Why Kagibi",
+      "titleHighlight": "cannot read your data",
+      "heroSub": "This is not a marketing promise — it is a mathematical constraint. Here is, concretely, what happens on your device and what the server never sees.",
+      "toc": "Contents",
+      "toc01": "The principle",
+      "toc02": "Key hierarchy",
+      "toc03": "Registration flow",
+      "toc04": "File encryption",
+      "toc05": "RSA sharing",
+      "toc06": "Session protection",
+      "toc07": "What the server sees",
+      "sec1Label": "The principle",
+      "sec1Title": "The server stores data it cannot read",
+      "sec1Sub": "Every time you encrypt a file, all the cryptography happens in your browser, never on the server. The server only receives encrypted bytes. Without your password — which it does not know — it cannot do anything with them.",
+      "cmpBadCloud": "Classic cloud (Google Drive, etc.)",
+      "cmpBadNote": "The server encrypts itself → it holds the key → it can read everything, hand it to authorities, get hacked.",
+      "cmpGoodCloud": "Kagibi — Zero-Knowledge",
+      "cmpGoodNote": "The server only receives encrypted data. Without your password, it is mathematically incapable of decrypting.",
+      "cmpFilePlain": "Plaintext file",
+      "cmpOpaqueBytes": "Opaque bytes",
+      "cmpLocalEnc": "Local encryption",
+      "cmpServerBad": "Server",
+      "cmpServerBadSub": "(reads everything)",
+      "cmpServerGood": "Server",
+      "cmpServerGoodSub": "(sees nothing)",
+      "cmpStorage": "Storage",
+      "cmpYourFile": "Your file",
+      "cmpEncrypted": "🔒 Encrypted",
+      "sec2Label": "Architecture",
+      "sec2Title": "The key hierarchy",
+      "sec2Sub": "All your data is protected by a chain of nested keys. Each key encrypts another — only your password can unlock everything.",
+      "sec3Label": "Flow 1 · Registration",
+      "sec3Title": "What happens when you create an account",
+      "sec3Sub": "All the cryptography is performed in your browser before a single byte is sent.",
+      "regPrev": "← Previous",
+      "regNext": "Next →",
+      "regStep1Title": "Key derivation (KEK)",
+      "regStep1Desc": "Your password is passed to Argon2id in a Web Worker. The result (KEK) never leaves the browser.",
+      "regStep2Title": "Master Key generation",
+      "regStep2Desc": "A random AES-256 key is generated via CSPRNG. It will be stored in the Service Worker with extractable: false.",
+      "regStep3Title": "Master Key wrapping",
+      "regStep3Desc": "The Master Key is encrypted (wrapped) with the KEK via AES-GCM. This ciphertext is sent to the server.",
+      "regStep4Title": "RSA key pair",
+      "regStep4Desc": "A 4096-bit RSA-OAEP key pair is generated. The public key goes to the server. The private key is encrypted by the Master Key.",
+      "regStep5Title": "Recovery code",
+      "regStep5Desc": "32 random bytes. A SHA-256 hash goes to the server for verification. The Master Key is also wrapped with this code.",
+      "regStep6Title": "What is sent to the server",
+      "regStep6Desc": "Only encrypted or public data. Never your password, the KEK, or the Master Key in plaintext.",
+      "sec4Label": "Flow 2 · Upload",
+      "sec4Title": "Encrypting a file in chunks",
+      "sec4Sub": "Files are split into 10 MB blocks, each encrypted independently with a unique nonce (deterministic by chunk number). Never any plaintext on the network.",
+      "uploadWaiting": "Waiting",
+      "uploadEncrypting": "AES-GCM encryption",
+      "uploadEncrypted": "Encrypted",
+      "uploadUploaded": "Uploaded to S3",
+      "uploadLocalRead": "Local read",
+      "uploadWorker": "Web Worker",
+      "uploadOvh": "Encrypted bytes only",
+      "uploadChunkDetail": "Encrypted chunk {n} structure",
+      "uploadReset": "Reset",
+      "uploadEncProgress": "AES-256-GCM encryption in progress…",
+      "uploadS3Progress": "uploading to OVH S3…",
+      "uploadDone": "✓ {n} chunks encrypted and uploaded — no plaintext byte was transmitted",
+      "uploadStart": "▶ Start",
+      "uploadSendS3": "→ Send to S3",
+      "uploadNextChunk": "→ Next chunk",
+      "uploadFinish": "→ Finish",
+      "uploadComplete": "✓ Complete",
+      "sec5Label": "Flow 3 · Sharing",
+      "sec5Title": "Sharing a file without the server seeing the key",
+      "sec5Sub": "When Alice shares a file with Bob, the file key is encrypted with Bob's RSA public key. The server cannot decrypt it — only Bob, with his private key, can.",
+      "sharePrev": "← Previous",
+      "shareNext": "Next →",
+      "actorAlice": "👩 Alice",
+      "actorServer": "🖥️ Server",
+      "actorBob": "👨 Bob",
+      "actorBrowser": "His browser",
+      "shareStep1Action": "Retrieves her file key from memory",
+      "shareStep1Data": "fileKey (AES-256) — non-extractable in the SW",
+      "shareStep2Action": "Returns Bob's RSA public key",
+      "shareStep2Data": "bob_public_key (RSA-OAEP 4096-bit, stored in plaintext)",
+      "shareStep3Action": "Encrypts the file key with Bob's public key",
+      "shareStep3Data": "RSA-OAEP.encrypt(fileKey, bob_public_key) → encrypted_file_key_for_bob",
+      "shareStep4Action": "Stores the RSA-encrypted key",
+      "shareStep4Data": "Cannot decrypt it (no Bob's private key)",
+      "shareStep5Action": "Decrypts the file key with his RSA private key",
+      "shareStep5Data": "RSA-OAEP.decrypt(encrypted_key, bob_private_key) → fileKey → decrypts the file",
+      "svFileCrypted": "File (encrypted)",
+      "svAliceKey": "Alice's file key",
+      "svAliceKeyMem": "AES-256 · in memory",
+      "svServer": "Server",
+      "svBobPubKey": "Bob's public key",
+      "svFileKey": "File key",
+      "svEncForBob": "Key encrypted for Bob",
+      "svEncForBobSub": "Only Bob can decrypt",
+      "svServerStores": "Server stores",
+      "svServerStoresSub": "RSA-encrypted key\n+ AES-encrypted file",
+      "svServerNote": "The server cannot decrypt anything — it holds neither Bob's private key nor Alice's Master Key.",
+      "svEncRsa": "RSA-encrypted key",
+      "svBobDecrypts": "File key recovered",
+      "svBobDecryptsSub": "Bob decrypts the file ✓",
+      "sec6Label": "Session protection",
+      "sec6Title": "The Master Key is never exposed to JavaScript",
+      "sec6Sub": "Even if a malicious extension or an XSS vulnerability injects JavaScript into the page, it cannot steal your Master Key. Here is why.",
+      "swPageZone": "Page (normal JS context)",
+      "swAppCode": "Application code",
+      "swExtensions": "⚠️ Browser extensions",
+      "swXss": "⚠️ Potential XSS",
+      "swRequest": "Request: \"give me the Master Key\"",
+      "swBarrier": "Service Worker boundary",
+      "swWorkerZone": "Service Worker (isolated context)",
+      "swWorkerResponse": "✓ Uses the key to encrypt/decrypt\n✗ NEVER exports it",
+      "swTimeout": "⏱️ 30 min timeout → key erased",
+      "swProp1Title": "Non-extractable",
+      "swProp1Desc": "The WebCrypto API forbids key export. crypto.subtle.exportKey() returns an error.",
+      "swProp2Title": "Inactivity timeout",
+      "swProp2Desc": "30 minutes of inactivity → Master Key erased from the Service Worker → automatic logout.",
+      "swProp3Title": "XSS detection",
+      "swProp3Desc": "A MutationObserver watches for scripts injected into the DOM. onerror handlers are blocked.",
+      "sec7Label": "Summary",
+      "sec7Title": "What the server sees — and does not see",
+      "seesTitle": "What the server sees",
+      "sees1": "Email / identifier",
+      "sees2": "Argon2 salt (public by nature)",
+      "sees3": "encrypted_master_key (encrypted, unusable)",
+      "sees4": "encrypted_private_key (encrypted)",
+      "sees5": "RSA public key (public)",
+      "sees6": "recovery_hash (SHA-256, irreversible)",
+      "sees7": "File metadata (name encrypted if enabled, size, MIME)",
+      "sees8": "AES-256-GCM encrypted files",
+      "sees9": "Encrypted file keys",
+      "neverTitle": "What the server never sees",
+      "never1": "🚫 Your password",
+      "never2": "🚫 The derived KEK",
+      "never3": "🚫 The Master Key in plaintext",
+      "never4": "🚫 The RSA private key in plaintext",
+      "never5": "🚫 The recovery code",
+      "never6": "🚫 Folder / file keys in plaintext",
+      "never7": "🚫 Your file content",
+      "never8": "🚫 Filenames (if encryption enabled)",
+      "ctaTitle": "An audited architecture, open code",
+      "ctaSubtitle": "The full source code is available under the AGPLv3 license. Everything can be verified, audited, forked.",
+      "ctaViewCode": "View source code",
+      "ctaCreate": "Create an account",
+      "khPasswordLabel": "Password",
+      "khPasswordSub": "Never sent to the server",
+      "khPasswordTooltipBody": "Passed to Argon2id in a separate Web Worker, it is never serialized, never sent to the server. The produced hash is the KEK.",
+      "khKekSub": "Key Encryption Key · 256 bits",
+      "khKekTooltipBody": "Derived from your password via Argon2id (64 MB RAM, 4 passes). It is used solely to encrypt/decrypt the Master Key. It is never stored.",
+      "khMasterSub": "AES-256 · Randomly generated · Service Worker",
+      "khMasterTooltipBody1": "AES-256 key randomly generated at registration. Stored encrypted (by the KEK) on the server. In session in the Service Worker with ",
+      "khMasterTooltipBody2": " — JS cannot export it.",
+      "khRsaLabel": "RSA Private Key",
+      "khRsaSub1": "RSA-OAEP 4096-bit",
+      "khRsaSub2": "For sharing",
+      "khRsaTooltipTitle": "RSA-OAEP 4096 Private Key",
+      "khRsaTooltipBody": "Generated at registration, encrypted by the Master Key before being sent to the server. Used for sharing: the sender encrypts a file key with your public key.",
+      "khFolderLabel": "Folder Key",
+      "khFolderSub1": "AES-256 per folder",
+      "khFolderSub2": "Encrypted by the Master Key",
+      "khFolderTooltipTitle": "Folder Key",
+      "khFolderTooltipBody": "Each folder has its own AES-256 key, encrypted by the Master Key. Sharing a folder = sharing this key encrypted with the recipient's RSA public key.",
+      "khFileLabel": "File Key",
+      "khFileSub1": "AES-256 per file",
+      "khFileSub2": "Encrypted by the folder key",
+      "khFileTooltipTitle": "File Key",
+      "khFileTooltipBody": "Each file has its own AES-256 key, encrypted by the folder key. Enables key rotation and granular per-file revocation.",
+      "rfInputLabel": "password",
+      "rfInputSub": "Entered in the browser",
+      "rfKekSub": "256 bits · in memory only",
+      "rfMkGenLine1": "Random generation",
+      "rfMkSub": "AES-256-GCM · Service Worker",
+      "rfEncMkSub": "Stored on the server · unusable without KEK",
+      "rfPubKeyLabel": "Public Key",
+      "rfPubKeySub": "→ server (plaintext)",
+      "rfPrivKeyLabel": "Private Key",
+      "rfPrivKeySub1": "→ encrypted by Master Key",
+      "rfPrivKeySub2": "→ server",
+      "rfRecoveryLabel": "Recovery Code",
+      "rfRecoverySub": "32 random bytes",
+      "rfRecoveryHashSub": "→ server for verification",
+      "rfRecoveryEncSub": "→ server · unlockable by the code",
+      "rfSaltLabel": "Argon2 salt (public)",
+      "rfNeverPassword": "password → NEVER",
+      "rfNeverMk": "Master Key in plaintext → NEVER",
+      "rfNeverKek": "KEK → NEVER",
+      "rfServerLabel": "Kagibi Server",
+      "rfServerNote1": "Stores ciphertexts.",
+      "rfServerNote2": "Cannot decrypt anything.",
+      "uploadNonceSize": "12 bytes",
+      "uploadCipherSize": "~10 MB",
+      "uploadTagSize": "16 bytes",
+      "uploadChunkProgress": "Chunk {n} / {total} —",
+      "rfArgonSalt": "salt 16 bytes (CSPRNG)"
+    }
   }
 }
diff --git a/frontend/src/locales/fr.json b/frontend/src/locales/fr.json
index 01dcee40..5a0236de 100644
--- a/frontend/src/locales/fr.json
+++ b/frontend/src/locales/fr.json
@@ -20,7 +20,10 @@
     "myFriends": "Mes Amis",
     "addFriend": "Ajouter un ami",
     "storage": "Stockage",
-    "billing": "Facturation"
+    "billing": "Facturation",
+    "home": "Accueil",
+    "transfer": "Transfert P2P",
+    "myDrive": "Mon Drive"
   },
   "file": {
     "upload": "Ajouter un fichier",
@@ -81,7 +84,14 @@
     "zeroKnowledge": "Zero-Knowledge",
     "zeroKnowledgeDesc": "Nous ne connaissons que votre adresse email, votre pseudo et votre avatar. Aucune pub, aucun cookie, aucun suivi.",
     "secureSharing": "Partages Sécurisés, Directs et Confidentiels",
-    "secureSharingDesc": "Échangez vos fichiers en P2P chiffré, sans serveur intermédiaire, avec contrôle d'accès et expiration."
+    "secureSharingDesc": "Échangez vos fichiers en P2P chiffré, sans serveur intermédiaire, avec contrôle d'accès et expiration.",
+    "p2pTagline": "Envoyez vos fichiers directement, sans serveur intermédiaire.",
+    "p2pFeature1": "Transfert direct",
+    "p2pFeature1Desc": "Vos fichiers transitent directement de votre navigateur à celui du destinataire. Aucun stockage intermédiaire.",
+    "p2pFeature2": "Chiffrement de bout en bout",
+    "p2pFeature2Desc": "Le fichier est chiffré avant l'envoi. Ni nous, ni personne d'autre ne peut en lire le contenu.",
+    "p2pFeature3": "Entre amis uniquement",
+    "p2pFeature3Desc": "Vous ne pouvez transférer qu'à vos contacts approuvés. Aucun lien public, aucune fuite accidentelle."
   },
   "common": {
     "cancel": "Annuler",
@@ -118,7 +128,8 @@
     "refuse": "Refuser",
     "accept": "Accepter",
     "state": "Etat",
-    "type": "Type"
+    "type": "Type",
+    "optional": "optionnel"
   },
   "share": {
     "shareWith": "Partager avec",
@@ -227,7 +238,46 @@
     "noOnlineFriends": "Aucun ami en ligne",
     "addFriends": "Ajoutez des amis pour pouvoir échanger des fichiers",
     "sendFile": "Envoyer le fichier",
-    "selectFriendAndFile": "Sélectionnez un ami et un fichier"
+    "selectFriendAndFile": "Sélectionnez un ami et un fichier",
+    "transferRejected": "Transfert refusé par votre ami",
+    "transferTimedOut": "Aucune réponse — le transfert a expiré.",
+    "keepWindowActive": "Gardez cette fenêtre active pendant le transfert, ne rafraîchissez pas et ne fermez pas l'onglet.",
+    "pingNotify": "Re-notifier",
+    "pingLimitReached": "Limite atteinte",
+    "pingsLeft": "{count} ping(s) restant(s)",
+    "pingNotification": "Rappel de transfert P2P",
+    "pingNotificationBody": "Votre ami vous relance pour le transfert de fichier en attente.",
+    "invite": {
+      "title": "Inviter par lien",
+      "subtitle": "N'importe qui peut recevoir le fichier via ce lien — aucun compte n'est requis.",
+      "recipientEmail": "E-mail du destinataire",
+      "emailPlaceholder": "ami{'@'}example.com",
+      "emailHint": "Optionnel — utilisé uniquement pour envoyer un e-mail de notification avec le lien.",
+      "file": "Fichier à envoyer",
+      "generate": "Générer le lien",
+      "readyTitle": "Lien prêt",
+      "readyDesc": "Partagez ce lien avec {name}. Le transfert démarrera automatiquement quand il l'ouvrira.",
+      "sendEmailOption": "Envoyer un e-mail de notification avec le lien",
+      "emailSent": "E-mail de notification envoyé",
+      "waitingNotice": "En attente que le destinataire ouvre le lien…",
+      "createError": "Impossible de créer l'invitation. Veuillez réessayer.",
+      "incomingTitle": "Invitation de transfert de fichier",
+      "incomingDesc": "{sender} souhaite vous envoyer {fileName} ({size})",
+      "accept": "Accepter",
+      "decline": "Refuser",
+      "expired": "Cette invitation a expiré.",
+      "notForYou": "Cette invitation n'est pas valide.",
+      "accepted": "Connecté — en attente du démarrage du transfert…",
+      "guest": {
+        "authenticating": "Établissement de la connexion sécurisée…",
+        "generatingKeys": "Génération des clés de chiffrement…",
+        "connecting": "Connexion au réseau…",
+        "waiting": "En attente que l'expéditeur démarre le transfert…",
+        "transferring": "Transfert en cours…",
+        "done": "Transfert terminé ! Redirection…",
+        "error": "Une erreur est survenue. Veuillez réessayer via le lien."
+      }
+    }
   },
   "home": {
     "welcome": "Bienvenue sur votre Stockage Sécurisé",
@@ -245,7 +295,12 @@
     "username": "Nom d'utilisateur",
     "updating": "Mise à jour...",
     "updatingPassword": "Mise à jour...",
+    "updatingEmail": "Mise à jour...",
     "modify": "Modifier",
+    "email": "Adresse email",
+    "newEmail": "Nouvelle adresse email",
+    "currentPasswordForEmail": "Mot de passe actuel (confirmation)",
+    "updateEmail": "Mettre à jour l'email",
     "security": "Sécurité",
     "currentPassword": "Mot de passe actuel",
     "newPassword": "Nouveau mot de passe",
@@ -387,7 +442,8 @@
       "title": "Entrez le nouveau nom :",
       "placeholder": "Nouveau nom",
       "newFolderTitle": "Entrez le nom du nouveau dossier :",
-      "newFolderPlaceholder": "Nom du dossier"
+      "newFolderPlaceholder": "Nom du dossier",
+      "invalidName": "Seuls les lettres, chiffres, espaces, tirets ( - ), points ( . ) et underscores ( _ ) sont autorisés."
     },
     "tag": {
       "title": "Gérer les tags",
@@ -433,5 +489,361 @@
       "deleteButton": "Supprimer définitivement mon compte",
       "deleting": "Suppression en cours..."
     }
+  },
+  "landing": {
+    "nav": {
+      "home": "Accueil",
+      "transfer": "Transfert P2P",
+      "compare": "Comparatif",
+      "security": "Zéro-knowledge",
+      "login": "Connexion"
+    },
+    "home": {
+      "eyebrow": "Cloud souverain · Open Source · Français",
+      "titleLine1": "Le cloud qui",
+      "titleHighlight": "ne peut pas lire vos données",
+      "subtitle": "Kagibi chiffre vos fichiers sur votre appareil avant tout envoi. Ni nous, ni personne ne peut y accéder — mathématiquement. Hébergé en France, conforme RGPD, immunisé au Cloud Act.",
+      "ctaDrive": "Accéder au Drive",
+      "ctaP2P": "Transfert P2P instantané",
+      "badgeFrance": "Hébergé en France",
+      "badgeOpenSource": "Open Source AGPLv3",
+      "badgeZK": "Zero-Knowledge",
+      "badgeCloudAct": "Immunisé Cloud Act",
+      "howTitle": "Comment ça fonctionne ?",
+      "howSubtitle": "Trois étapes, zéro compromis sur la vie privée.",
+      "step1Title": "Chiffrement local",
+      "step1Desc": "Vos fichiers sont chiffrés avec AES-256-GCM directement dans votre navigateur. La clé ne quitte jamais votre appareil.",
+      "step2Title": "Stockage sécurisé",
+      "step2Desc": "Seul le flux chiffré arrive sur nos serveurs en France. Même avec un accès complet à l'infrastructure, personne ne peut déchiffrer vos fichiers.",
+      "step3Title": "Accès exclusif",
+      "step3Desc": "Seul vous pouvez déchiffrer et lire vos données. Partagez en toute sécurité via liens chiffrés ou transfert P2P direct.",
+      "featTitle": "Tout ce dont vous avez besoin",
+      "featSubtitle": "Une plateforme complète, construite sur des fondations cryptographiques solides.",
+      "feat1Title": "Zero-Knowledge garanti",
+      "feat1Desc": "Chiffrement AES-256-GCM côté client. Vos clés ne quittent jamais votre appareil. Nos serveurs ne voient que du bruit chiffré — impossible autrement.",
+      "feat2Title": "Transfert P2P jusqu'à 10 Go",
+      "feat2Desc": "Envoyez de gros fichiers en direct, de navigateur à navigateur. Aucun stockage intermédiaire, vitesse maximale, aucune trace sur nos serveurs.",
+      "feat3Title": "Souveraineté numérique",
+      "feat3Desc": "Infrastructure 100% OVH France (Gravelines). Hors juridiction américaine. Conformité RGPD stricte. Vos données ne quittent jamais l'Europe.",
+      "feat4Title": "100% vérifiable",
+      "feat4Desc": "Code source intégralement publié sous licence AGPLv3. Auditez vous-même ce que fait Kagibi de vos données. La confiance ne devrait pas être aveugle.",
+      "ossTitle": "Un projet 100% open source",
+      "ossPara1": "Kagibi est publié sous licence GNU AGPLv3 — la licence copyleft la plus forte. Toute modification déployée en production doit être partagée publiquement. Aucune version propriétaire cachée, aucun backdoor possible.",
+      "ossPara2": "Le code est librement auditable, forçable et améliorable par tous. Contribuez à la sécurité, signalez des bugs, proposez des fonctionnalités — chaque Pull Request est la bienvenue.",
+      "ossViewCode": "Voir le code source",
+      "ossLicenceLabel": "Licence",
+      "ossContribLabel": "Contributions",
+      "ossContribValue": "Ouvertes",
+      "ossPlatformLabel": "Plateforme",
+      "ctaTitle": "Prêt à reprendre le contrôle ?",
+      "ctaSubtitle": "Rejoignez Kagibi et stockez vos fichiers sans jamais compromettre votre vie privée.",
+      "ctaCreate": "Créer mon compte gratuitement",
+      "ctaTryP2P": "Essayer le transfert P2P"
+    },
+    "transfer": {
+      "heroTitle": "Transfert P2P Ultra-Rapide",
+      "heroSubtitle": "Envoyez jusqu'à 10 Go en direct, sans upload. Vitesse maximale, zéro trace.",
+      "howTitle": "Comment ça fonctionne ?",
+      "step1Title": "Sélectionnez vos fichiers",
+      "step1Desc": "Choisissez les fichiers à envoyer (10 Go max)",
+      "step2Title": "Obtenez un lien unique",
+      "step2Desc": "Un lien sécurisé est généré instantanément",
+      "step3Title": "Partagez et transférez",
+      "step3Desc": "Connexion P2P directe via serveur TURN",
+      "feat1Title": "Vitesse Maximale",
+      "feat1Desc": "Pas d'upload serveur, transfert direct P2P à pleine bande passante",
+      "feat2Title": "Chiffrement E2E",
+      "feat2Desc": "Vos fichiers sont chiffrés de bout en bout pendant le transfert",
+      "feat3Title": "Zero-Trace",
+      "feat3Desc": "Aucun fichier n'est stocké sur nos serveurs, tranquillité absolue",
+      "feat4Title": "Disponible 24/7",
+      "feat4Desc": "Service disponible en permanence, aucune limite d'utilisation",
+      "ctaTitle": "Prêt à transférer ?",
+      "ctaSubtitle": "Connectez-vous pour commencer à utiliser le transfert P2P instantané",
+      "ctaBtn": "Accéder au transfert",
+      "ctaNote": "Gratuit et illimité pour tous les utilisateurs",
+      "techTitle": "Technologie WebRTC & TURN",
+      "tech1Title": "WebRTC",
+      "tech1Desc": "Protocole de communication peer-to-peer standardisé par le W3C. Permet une connexion directe entre navigateurs sans intermédiaire.",
+      "tech2Title": "Serveur TURN",
+      "tech2Desc": "Infrastructure de relais pour les connexions impossibles en direct. Garantit un transfert réussi même derrière un NAT strict.",
+      "tech3Title": "Chiffrement AES",
+      "tech3Desc": "Chiffrement côté client avant transfert. Les clés sont échangées via signaling sécurisé, jamais stockées."
+    },
+    "compare": {
+      "eyebrow": "Comparatif",
+      "title": "Kagibi face aux autres solutions",
+      "subtitle": "Toutes les solutions de stockage cloud ne se valent pas. Voici pourquoi le chiffrement côté client change tout.",
+      "tableFeature": "Fonctionnalité",
+      "inDev": "En dev.",
+      "disclaimer": "Informations collectées publiquement sur les sites officiels et documentations des éditeurs. Dernière mise à jour : avril 2026.",
+      "techTitle": "Comparaison technique approfondie",
+      "techSubtitle": "Algorithmes, architecture et garanties cryptographiques.",
+      "legendColorGreen": "Vert",
+      "legendColorYellow": "Orange",
+      "legendColorRed": "Rouge",
+      "legendColorGray": "Gris",
+      "legendAdvantage": "Avantage / bonne pratique",
+      "legendPartial": "Partiel / dépend de la configuration",
+      "legendRisk": "Risque / point négatif",
+      "legendNeutral": "Information neutre",
+      "ctaTitle": "La solution qui ne peut mathématiquement pas lire vos données",
+      "ctaSubtitle": "Le chiffrement côté client n'est pas une option — c'est la fondation.",
+      "ctaCreate": "Créer mon compte gratuitement",
+      "ctaMore": "En savoir plus",
+      "r1": "Chiffrement côté client (Zero-Knowledge)",
+      "r1tip": "Vos fichiers sont chiffrés sur votre appareil avant envoi — le serveur ne voit que du bruit.",
+      "r2": "Transfert P2P chiffré",
+      "r2tip": "Envoi direct de navigateur à navigateur, sans stockage intermédiaire.",
+      "r3": "Open Source",
+      "r4": "Hébergé en France / Europe",
+      "r5": "Immunisé Cloud Act (USA)",
+      "r5tip": "Les serveurs hors juridiction américaine ne peuvent pas être contraints à livrer des données.",
+      "r6": "Partage via lien chiffré",
+      "r7": "Conformité RGPD stricte",
+      "r8": "Auto-hébergeable",
+      "r8tip": "Déployer votre propre instance sur votre infrastructure.",
+      "r9": "Licence copyleft (AGPLv3)",
+      "r9tip": "Interdit les forks propriétaires — toute modification doit rester publique.",
+      "r10": "Accès sans abonnement",
+      "r11": "Application mobile native",
+      "r12": "Application desktop (Windows / Linux)",
+      "r13": "Chiffrement des noms de fichiers",
+      "r14": "Aucun accès fournisseur aux données",
+      "techKagibi1": "Chiffrement des fichiers côté client",
+      "techKagibi2": "Échange de clés pour le partage",
+      "techKagibi3": "Dérivation de clé depuis le mot de passe",
+      "techKagibi4": "Opérations cryptographiques natives du navigateur",
+      "techKagibi5": "Clés chiffrées transmises au serveur",
+      "techKagibi6": "Transfert P2P chiffré de bout en bout",
+      "techKagibi7": "Code source intégralement auditable",
+      "techKagibi8": "Sessions sans état, révocation instantanée",
+      "techKagibi9": "Double authentification supportée",
+      "techProton1": "Chiffrement côté client",
+      "techProton2": "Chiffrement des clés et des métadonnées",
+      "techProton3": "Authentification sans transmission du mot de passe",
+      "techProton4": "Proton ne peut pas lire vos fichiers",
+      "techProton5": "Partie du code source fermée",
+      "techProton6": "Juridiction helvétique (hors EU)",
+      "techProton7": "Pas de transfert direct entre pairs",
+      "techNextcloud1": "Chiffrement côté serveur (optionnel)",
+      "techNextcloud2": "Clés gérées par l'administrateur serveur",
+      "techNextcloud3": "Code source AGPLv3 disponible",
+      "techNextcloud4": "Contrôle total de l'infrastructure",
+      "techNextcloud5": "Module E2EE peu mature, non activé par défaut",
+      "techNextcloud6": "Conformité RGPD variable selon l'instance",
+      "techNextcloud7": "Pas de transfert direct entre pairs",
+      "techOpencloud1": "Chiffrement côté serveur",
+      "techOpencloud2": "Clés détenues par l'opérateur",
+      "techOpencloud3": "Fork d'ownCloud, licence Apache 2.0",
+      "techOpencloud4": "Déploiement sur infrastructure propre",
+      "techOpencloud5": "Aucun chiffrement côté client intégré",
+      "techOpencloud6": "Hébergement typiquement DACH",
+      "techOpencloud7": "Pas de transfert direct entre pairs",
+      "techGoogle1": "Chiffrement en transit et au repos",
+      "techGoogle2": "Google détient et gère toutes les clés",
+      "techGoogle3": "Aucun audit indépendant possible",
+      "techGoogle4": "Soumis aux injonctions des autorités américaines",
+      "techGoogle5": "Contenu utilisé pour entraîner des modèles IA",
+      "techGoogle6": "Serveurs sous juridiction américaine",
+      "techGoogle7": "Pas de transfert direct entre pairs"
+    },
+    "security": {
+      "eyebrow": "Architecture Zero-Knowledge",
+      "title1": "Pourquoi Kagibi",
+      "titleHighlight": "ne peut pas lire vos données",
+      "heroSub": "Ce n'est pas une promesse commerciale — c'est une contrainte mathématique. Voici, concrètement, ce qui se passe sur votre appareil et ce que le serveur ne voit jamais.",
+      "toc": "Sommaire",
+      "toc01": "Le principe",
+      "toc02": "Hiérarchie des clés",
+      "toc03": "Flux inscription",
+      "toc04": "Chiffrement fichier",
+      "toc05": "Partage RSA",
+      "toc06": "Protection session",
+      "toc07": "Ce que voit le serveur",
+      "sec1Label": "Le principe",
+      "sec1Title": "Le serveur stocke des données qu'il ne peut pas lire",
+      "sec1Sub": "Chaque fois que vous chiffrez un fichier, toute la cryptographie se passe dans votre navigateur, jamais côté serveur. Le serveur reçoit uniquement des octets chiffrés. Sans votre mot de passe — qu'il ne connaît pas — il ne peut rien en faire.",
+      "cmpBadCloud": "Cloud classique (Google Drive, etc.)",
+      "cmpBadNote": "Le serveur chiffre lui-même → il détient la clé → il peut tout lire, tout livrer à la justice, tout pirater.",
+      "cmpGoodCloud": "Kagibi — Zero-Knowledge",
+      "cmpGoodNote": "Le serveur ne reçoit que du chiffré. Sans votre mot de passe, il est mathématiquement incapable de déchiffrer.",
+      "cmpFilePlain": "Fichier en clair",
+      "cmpOpaqueBytes": "Octets opaques",
+      "cmpLocalEnc": "Chiffrement local",
+      "cmpServerBad": "Serveur",
+      "cmpServerBadSub": "(lit tout)",
+      "cmpServerGood": "Serveur",
+      "cmpServerGoodSub": "(ne voit rien)",
+      "cmpStorage": "Stockage",
+      "cmpYourFile": "Votre fichier",
+      "cmpEncrypted": "🔒 Chiffré",
+      "sec2Label": "Architecture",
+      "sec2Title": "La hiérarchie des clés",
+      "sec2Sub": "Toutes vos données sont protégées par une chaîne de clés imbriquées. Chaque clé en chiffre une autre — seul votre mot de passe permet de tout débloquer.",
+      "sec3Label": "Flux 1 · Inscription",
+      "sec3Title": "Ce qui se passe quand vous créez un compte",
+      "sec3Sub": "Toute la cryptographie est réalisée dans votre navigateur avant qu'un seul octet soit envoyé.",
+      "regPrev": "← Précédent",
+      "regNext": "Suivant →",
+      "regStep1Title": "Dérivation de clé (KEK)",
+      "regStep1Desc": "Votre mot de passe est passé à Argon2id dans un Web Worker. Le résultat (KEK) ne quitte jamais le navigateur.",
+      "regStep2Title": "Génération de la Master Key",
+      "regStep2Desc": "Une clé AES-256 aléatoire est générée via CSPRNG. Elle sera stockée dans le Service Worker avec extractable: false.",
+      "regStep3Title": "Wrapping de la Master Key",
+      "regStep3Desc": "La Master Key est chiffrée (wrapped) avec la KEK via AES-GCM. Ce chiffré est envoyé au serveur.",
+      "regStep4Title": "Paire de clés RSA",
+      "regStep4Desc": "Une paire RSA-OAEP 4096 bits est générée. La clé publique va au serveur. La clé privée est chiffrée par la Master Key.",
+      "regStep5Title": "Code de récupération",
+      "regStep5Desc": "32 octets aléatoires. Un hash SHA-256 va au serveur pour vérification. La Master Key est aussi wrapped avec ce code.",
+      "regStep6Title": "Ce qui est envoyé au serveur",
+      "regStep6Desc": "Uniquement des données chiffrées ou publiques. Jamais votre mot de passe, la KEK ou la Master Key en clair.",
+      "sec4Label": "Flux 2 · Upload",
+      "sec4Title": "Chiffrement d'un fichier en chunks",
+      "sec4Sub": "Les fichiers sont découpés en blocs de 10 Mo, chaque bloc est chiffré indépendamment avec un nonce unique (déterministe par numéro de chunk). Jamais de texte clair sur le réseau.",
+      "uploadWaiting": "En attente",
+      "uploadEncrypting": "Chiffrement AES-GCM",
+      "uploadEncrypted": "Chiffré",
+      "uploadUploaded": "Uploadé sur S3",
+      "uploadLocalRead": "Lecture locale",
+      "uploadWorker": "Web Worker",
+      "uploadOvh": "Octets chiffrés uniquement",
+      "uploadChunkDetail": "Structure du chunk {n} chiffré",
+      "uploadReset": "Réinitialiser",
+      "uploadEncProgress": "chiffrement AES-256-GCM en cours…",
+      "uploadS3Progress": "upload vers OVH S3…",
+      "uploadDone": "✓ {n} chunks chiffrés et uploadés — aucun octet en clair n'a transité",
+      "uploadStart": "▶ Démarrer",
+      "uploadSendS3": "→ Envoyer vers S3",
+      "uploadNextChunk": "→ Chunk suivant",
+      "uploadFinish": "→ Terminer",
+      "uploadComplete": "✓ Terminé",
+      "sec5Label": "Flux 3 · Partage",
+      "sec5Title": "Partager un fichier sans que le serveur voit la clé",
+      "sec5Sub": "Quand Alice partage un fichier avec Bob, la clé de fichier est chiffrée avec la clé publique RSA de Bob. Le serveur ne peut pas la déchiffrer — seul Bob, avec sa clé privée, peut le faire.",
+      "sharePrev": "← Précédent",
+      "shareNext": "Suivant →",
+      "actorAlice": "👩 Alice",
+      "actorServer": "🖥️ Serveur",
+      "actorBob": "👨 Bob",
+      "actorBrowser": "Son navigateur",
+      "shareStep1Action": "Récupère sa clé de fichier en mémoire",
+      "shareStep1Data": "fileKey (AES-256) — non-extractable dans le SW",
+      "shareStep2Action": "Retourne la clé publique RSA de Bob",
+      "shareStep2Data": "bob_public_key (RSA-OAEP 4096 bits, stockée en clair)",
+      "shareStep3Action": "Chiffre la clé de fichier avec la clé publique de Bob",
+      "shareStep3Data": "RSA-OAEP.encrypt(fileKey, bob_public_key) → encrypted_file_key_for_bob",
+      "shareStep4Action": "Stocke la clé chiffrée RSA",
+      "shareStep4Data": "Ne peut pas la déchiffrer (pas de clé privée de Bob)",
+      "shareStep5Action": "Déchiffre la clé de fichier avec sa clé privée RSA",
+      "shareStep5Data": "RSA-OAEP.decrypt(encrypted_key, bob_private_key) → fileKey → déchiffre le fichier",
+      "svFileCrypted": "Fichier (chiffré)",
+      "svAliceKey": "Clé de fichier d'Alice",
+      "svAliceKeyMem": "AES-256 · en mémoire",
+      "svServer": "Serveur",
+      "svBobPubKey": "Clé publique de Bob",
+      "svFileKey": "Clé de fichier",
+      "svEncForBob": "Clé chiffrée pour Bob",
+      "svEncForBobSub": "Seul Bob peut déchiffrer",
+      "svServerStores": "Serveur stocke",
+      "svServerStoresSub": "Clé chiffrée RSA\n+ Fichier chiffré AES",
+      "svServerNote": "Le serveur ne peut rien déchiffrer — il ne détient ni la clé privée de Bob, ni la Master Key d'Alice.",
+      "svEncRsa": "Clé chiffrée RSA",
+      "svBobDecrypts": "Clé de fichier récupérée",
+      "svBobDecryptsSub": "Bob déchiffre le fichier ✓",
+      "sec6Label": "Protection en session",
+      "sec6Title": "La Master Key n'est jamais exposée au JavaScript",
+      "sec6Sub": "Même si une extension malveillante ou une faille XSS injecte du JavaScript dans la page, elle ne peut pas voler votre Master Key. Voici pourquoi.",
+      "swPageZone": "Page (contexte JS normal)",
+      "swAppCode": "Code de l'application",
+      "swExtensions": "⚠️ Extensions navigateur",
+      "swXss": "⚠️ Potentiel XSS",
+      "swRequest": "Demande : \"donne-moi la Master Key\"",
+      "swBarrier": "Frontière Service Worker",
+      "swWorkerZone": "Service Worker (contexte isolé)",
+      "swWorkerResponse": "✓ Utilise la clé pour chiffrer/déchiffrer\n✗ Ne l'exporte JAMAIS",
+      "swTimeout": "⏱️ Timeout 30 min → clé effacée",
+      "swProp1Title": "Non-extractable",
+      "swProp1Desc": "La WebCrypto API interdit l'export de la clé. crypto.subtle.exportKey() retourne une erreur.",
+      "swProp2Title": "Timeout d'inactivité",
+      "swProp2Desc": "30 minutes sans activité → Master Key effacée du Service Worker → déconnexion automatique.",
+      "swProp3Title": "Détection XSS",
+      "swProp3Desc": "Un MutationObserver surveille les scripts injectés dans le DOM. Les handlers onerror sont bloqués.",
+      "sec7Label": "Résumé",
+      "sec7Title": "Ce que le serveur voit — et ne voit pas",
+      "seesTitle": "Ce que le serveur voit",
+      "sees1": "Email / identifiant",
+      "sees2": "Salt Argon2 (public par nature)",
+      "sees3": "encrypted_master_key (chiffré, inutilisable)",
+      "sees4": "encrypted_private_key (chiffré)",
+      "sees5": "Clé publique RSA (publique)",
+      "sees6": "recovery_hash (SHA-256, irréversible)",
+      "sees7": "Métadonnées fichier (nom chiffré si activé, taille, MIME)",
+      "sees8": "Fichiers chiffrés AES-256-GCM",
+      "sees9": "Clés de fichier chiffrées",
+      "neverTitle": "Ce que le serveur ne voit jamais",
+      "never1": "🚫 Votre mot de passe",
+      "never2": "🚫 La KEK dérivée",
+      "never3": "🚫 La Master Key en clair",
+      "never4": "🚫 La clé privée RSA en clair",
+      "never5": "🚫 Le code de récupération",
+      "never6": "🚫 Les clés de dossier / fichier en clair",
+      "never7": "🚫 Le contenu de vos fichiers",
+      "never8": "🚫 Les noms de fichiers (si chiffrement activé)",
+      "ctaTitle": "Une architecture auditée, un code ouvert",
+      "ctaSubtitle": "Le code source complet est disponible sous licence AGPLv3. Tout peut être vérifié, audité, forké.",
+      "ctaViewCode": "Voir le code source",
+      "ctaCreate": "Créer un compte",
+      "khPasswordLabel": "Mot de passe",
+      "khPasswordSub": "Jamais envoyé au serveur",
+      "khPasswordTooltipBody": "Passé à Argon2id dans un Web Worker séparé, il n'est jamais sérialisé, jamais envoyé au serveur. Le hash produit est la KEK.",
+      "khKekSub": "Key Encryption Key · 256 bits",
+      "khKekTooltipBody": "Dérivée de votre mot de passe via Argon2id (64 MB RAM, 4 passes). Elle sert uniquement à chiffrer/déchiffrer la Master Key. Elle n'est jamais stockée.",
+      "khMasterSub": "AES-256 · Générée aléatoirement · Service Worker",
+      "khMasterTooltipBody1": "Clé AES-256 générée aléatoirement à l'inscription. Stockée chiffrée (par la KEK) sur le serveur. En session dans le Service Worker avec ",
+      "khMasterTooltipBody2": " — le JS ne peut pas l'exporter.",
+      "khRsaLabel": "Clé privée RSA",
+      "khRsaSub1": "RSA-OAEP 4096 bits",
+      "khRsaSub2": "Pour le partage",
+      "khRsaTooltipTitle": "Clé privée RSA-OAEP 4096",
+      "khRsaTooltipBody": "Générée à l'inscription, chiffrée par la Master Key avant envoi au serveur. Utilisée pour le partage : l'expéditeur chiffre une clé de fichier avec votre clé publique.",
+      "khFolderLabel": "Clé de dossier",
+      "khFolderSub1": "AES-256 par dossier",
+      "khFolderSub2": "Chiffrée par la Master Key",
+      "khFolderTooltipTitle": "Clé de dossier",
+      "khFolderTooltipBody": "Chaque dossier a sa propre clé AES-256, chiffrée par la Master Key. Partager un dossier = partager cette clé chiffrée par la clé publique RSA du destinataire.",
+      "khFileLabel": "Clé de fichier",
+      "khFileSub1": "AES-256 par fichier",
+      "khFileSub2": "Chiffrée par la clé dossier",
+      "khFileTooltipTitle": "Clé de fichier",
+      "khFileTooltipBody": "Chaque fichier a sa propre clé AES-256, chiffrée par la clé de dossier. Permet la rotation des clés et la révocation granulaire par fichier.",
+      "rfInputLabel": "mot_de_passe",
+      "rfInputSub": "Saisi dans le navigateur",
+      "rfKekSub": "256 bits · en mémoire seulement",
+      "rfMkGenLine1": "Génération aléatoire",
+      "rfMkSub": "AES-256-GCM · Service Worker",
+      "rfEncMkSub": "Stocké sur le serveur · inutilisable sans KEK",
+      "rfPubKeyLabel": "Clé publique",
+      "rfPubKeySub": "→ serveur (en clair)",
+      "rfPrivKeyLabel": "Clé privée",
+      "rfPrivKeySub1": "→ chiffrée par Master Key",
+      "rfPrivKeySub2": "→ serveur",
+      "rfRecoveryLabel": "Code de récupération",
+      "rfRecoverySub": "32 octets aléatoires",
+      "rfRecoveryHashSub": "→ serveur pour vérification",
+      "rfRecoveryEncSub": "→ serveur · déverrouillable par le code",
+      "rfSaltLabel": "sel Argon2 (public)",
+      "rfNeverPassword": "mot de passe → JAMAIS",
+      "rfNeverMk": "Master Key en clair → JAMAIS",
+      "rfNeverKek": "KEK → JAMAIS",
+      "rfServerLabel": "Serveur Kagibi",
+      "rfServerNote1": "Stocke des chiffrés.",
+      "rfServerNote2": "Ne peut rien déchiffrer.",
+      "uploadNonceSize": "12 octets",
+      "uploadCipherSize": "~10 Mo",
+      "uploadTagSize": "16 octets",
+      "uploadChunkProgress": "Chunk {n} / {total} —",
+      "rfArgonSalt": "sel 16 octets (CSPRNG)"
+    }
   }
 }
diff --git a/frontend/src/main.js b/frontend/src/main.js
index a4b0412b..6b65daad 100644
--- a/frontend/src/main.js
+++ b/frontend/src/main.js
@@ -54,19 +54,21 @@ realtimeStore.onEvent('p2p_signal', (payload) => {
   });
 });
 
-// Watch presence changes and update friend online status
+// Sync presenceState → friend.online, but ONLY for users we have received
+// a WS presence update for. Never override with the default false when
+// presenceState has no entry — that would clobber the correct value from
+// the initial HTTP /friends response before the WS bootstrap arrives.
 setInterval(() => {
   const friendStore = useFriendStore(pinia);
   if (friendStore.friends.length > 0) {
     friendStore.friends.forEach(friend => {
-      const wasOnline = friend.online;
-      const isOnline = realtimeStore.isUserOnline(friend.id);
-      if (wasOnline !== isOnline) {
-        friend.online = isOnline;
+      const entry = realtimeStore.presenceState[friend.id];
+      if (entry !== undefined && friend.online !== entry.online) {
+        friend.online = entry.online;
       }
     });
   }
-}, 2000); // Check every 2 seconds
+}, 2000);
 
 // Initialiser le monitoring de sécurité
 initSecurityMonitoring();
diff --git a/frontend/src/router/index.js b/frontend/src/router/index.js
index 3761ff9b..3a8654d0 100644
--- a/frontend/src/router/index.js
+++ b/frontend/src/router/index.js
@@ -16,7 +16,9 @@ import UsageDashboard from '../components/usage/UsageDashboard.vue'
 import LandingHome from '../views/landing/HomeView.vue'
 import LandingPricing from '../views/landing/PricingView.vue'
 import LandingTransfer from '../views/landing/TransferView.vue'
+import LandingSecurity from '../views/landing/SecurityView.vue'
 import { useAuthStore } from '../stores/auth'
+import { isP2PSubdomain } from '../composables/useSubdomain'
 
 const isLocalAuthBypassEnabled =
   import.meta.env.DEV && String(import.meta.env.VITE_LOCAL_BYPASS_AUTH).toLowerCase() === 'true'
@@ -25,7 +27,10 @@ const routes = [
   {
     path: '/',
     name: 'LandingHome',
-    component: LandingHome,
+    component: isP2PSubdomain
+      ? () => import('../views/p2p/P2PSubdomainView.vue')
+      : LandingHome,
+    meta: isP2PSubdomain ? { requiresAuth: true } : {},
   },
   {
     path: '/pricing',
@@ -42,6 +47,11 @@ const routes = [
     name: 'Compare',
     component: () => import('../views/landing/CompareView.vue'),
   },
+  {
+    path: '/security',
+    name: 'Security',
+    component: LandingSecurity,
+  },
   {
     path: '/login',
     name: 'Login',
@@ -121,10 +131,7 @@ const routes = [
     name: 'PublicBrowse',
     component: PublicBrowse,
   },
-  {
-    path: '/',
-    redirect: '/dashboard/home',
-  },
+  ...(!isP2PSubdomain ? [{ path: '/', redirect: '/dashboard/home' }] : []),
 ]
 
 const router = createRouter({
@@ -150,12 +157,19 @@ router.beforeEach(async (to, from, next) => {
     return
   }
 
+  // Guest P2P invite links carry ?invite=TOKEN and self-authenticate on mount —
+  // skip the auth gate so the view can run its guest-auth flow.
+  if (isP2PSubdomain && to.query.invite) {
+    next()
+    return
+  }
+
   const isAuthenticated = await authStore.checkAuth()
 
   if (to.meta.requiresAuth && !isAuthenticated) {
     next('/login')
   } else if (to.name === 'Login' && isAuthenticated) {
-    next('/dashboard/home')
+    next(isP2PSubdomain ? '/' : '/dashboard/home')
   } else {
     next()
   }
diff --git a/frontend/src/stores/auth.js b/frontend/src/stores/auth.js
index c338e20b..9ac28202 100644
--- a/frontend/src/stores/auth.js
+++ b/frontend/src/stores/auth.js
@@ -2,6 +2,7 @@ import { defineStore } from 'pinia'
 import api from '../api'
 import router from '../router'
 import { authClient, IS_POCKETBASE } from '../auth-client'
+import { isP2PSubdomain } from '../composables/useSubdomain'
 import { useFriendStore } from './friends'
 import {
   deriveKeyFromPassword, generateSalt, wrapMasterKey, unwrapMasterKey,
@@ -22,7 +23,7 @@ const localDevBypassUser = {
   storage_used: 0,
   storage_limit: 20 * 1024 * 1024 * 1024,
   plan: 'free',
-  p2p_max_exchanges: 5,
+  p2p_max_exchanges: -1,
   p2p_exchanges_used: 0,
 }
 
@@ -124,7 +125,7 @@ export const useAuthStore = defineStore('auth', {
           }
         }
 
-        router.push({ name: 'Home' })
+        router.push(isP2PSubdomain ? '/' : { name: 'Home' })
         return true
       } catch (error) {
         console.error('Login failed:', error)
@@ -463,6 +464,20 @@ export const useAuthStore = defineStore('auth', {
         console.error('Failed to update avatar:', error)
         throw error
       }
+    },
+
+    async updateEmail(newEmail, password) {
+      try {
+        const data = await authClient.updateEmail(newEmail, password)
+        if (this.user) {
+          this.user.email = data.email
+          this.persistUserToStorage()
+        }
+        return data
+      } catch (error) {
+        console.error('Email update failed:', error)
+        throw error
+      }
     }
   },
 })
diff --git a/frontend/src/stores/files.js b/frontend/src/stores/files.js
index 2596f484..41c176e4 100644
--- a/frontend/src/stores/files.js
+++ b/frontend/src/stores/files.js
@@ -228,11 +228,15 @@ export const useFileStore = defineStore('files', {
     },
 
     searchQuery: '',
+    searchFilterExtensions: [], // active extension filters during search
+    searchFilterTags: [],       // active tag filters during search
+    searchFilterType: null,     // 'file', 'folder', or null for all
     shareUpdateTrigger: 0,
     recentFolders: [],
     recentFiles: [],
     // Used to coordinate navigation from Suggestions
     pendingNavigatePath: null,
+    pendingHighlight: null,     // { id, type } — item to select after navigation
     // Maps encrypted folder path → decrypted display name (populated when encrypt_filenames=true)
     folderNameCache: {},
   }),
@@ -321,8 +325,19 @@ export const useFileStore = defineStore('files', {
     
         setSearchQuery(query) {
         this.searchQuery = query;
+        if (!query) {
+            this.searchFilterExtensions = [];
+            this.searchFilterTags = [];
+            this.searchFilterType = null;
+        }
         this.searchFiles(query);
     },
+    clearSearch() {
+        this.searchQuery = '';
+        this.searchFilterExtensions = [];
+        this.searchFilterTags = [];
+        this.searchFilterType = null;
+    },
     async fetchItems(path) {
       const preferenceStore = usePreferencesStore()
         // If a pending navigation is set, consume it and use that path
diff --git a/frontend/src/stores/p2p.js b/frontend/src/stores/p2p.js
index 00998e8b..c946a0bb 100644
--- a/frontend/src/stores/p2p.js
+++ b/frontend/src/stores/p2p.js
@@ -39,10 +39,18 @@ async function fetchICEConfig() {
 
 export const useP2PStore = defineStore('p2p', {
   state: () => ({
-    incomingOffer: null, 
-    activeTransfer: null, 
+    incomingOffer: null,
+    activeTransfer: null,
+    rejectedTransfer: null, // Info shown to initiator when recipient rejects
     candidateQueue: [], // Store candidates that arrive before acceptance
-    heartbeatInterval: null // Interval for session maintenance
+    heartbeatInterval: null, // Interval for session maintenance
+    pingCount: 0, // Number of pings sent for current transfer
+    pingCooldownUntil: null, // Timestamp until which pings are throttled
+    pingSeq: 0, // Incremented on every received ping — watcher always fires
+    connectingTimeout: null, // Timeout that dismisses a stuck Connecting... state
+    // Invite system: sender keeps the file + key in memory while waiting for the recipient
+    pendingInvite: null, // { transferId, file, fileKey, recipientId, recipientPublicKey, recipientName }
+    inviteReady: false,  // true once the recipient accepted → sender can start transfer
   }),
   actions: {
     startHeartbeat() {
@@ -57,8 +65,8 @@ export const useP2PStore = defineStore('p2p', {
             }
             
             try {
-                const token = localStorage.getItem('token');
-                await axios.get(`${API_BASE_URL}/heartbeat`, {
+                const token = await authClient.getToken();
+                await axios.get(`${API_BASE_URL}heartbeat`, {
                     headers: { Authorization: `Bearer ${token}` }
                 });
                 //console.log('[P2P] Session heartbeat sent');
@@ -83,20 +91,42 @@ export const useP2PStore = defineStore('p2p', {
                 this.activeTransfer.connectionInfo.iceState = pc.iceConnectionState;
                 if (pc.iceConnectionState === 'checking') {
                     this.activeTransfer.connectionInfo.stage = 'Négociation de la connexion...';
-                } else if (pc.iceConnectionState === 'connected') {
-                    this.activeTransfer.connectionInfo.stage = 'Connecté';
-                    this.detectConnectionType(pc, transferId);
+                } else if (pc.iceConnectionState === 'connected' || pc.iceConnectionState === 'completed') {
+                    this._clearConnectingTimeout(); // Connection established — no longer waiting
+                    this.activeTransfer.connectionInfo.wasConnected = true;
+                    if (pc.iceConnectionState === 'connected') {
+                        this.activeTransfer.connectionInfo.stage = 'Connecté';
+                        this.detectConnectionType(pc, transferId);
+                    }
                 }
             }
-            if (pc.iceConnectionState === 'failed' || pc.iceConnectionState === 'disconnected') {
+            if (pc.iceConnectionState === 'disconnected') {
+                // 'disconnected' is a transient state — WebRTC may recover automatically.
+                // Only update the stage label; never show an error dialog here.
+                if (this.activeTransfer && this.activeTransfer.transferId === transferId) {
+                    const isDone = this.activeTransfer.status === 'Done' || this.activeTransfer.status === 'Complete';
+                    if (!isDone) {
+                        this.activeTransfer.connectionInfo.stage = 'Reconnexion en cours...';
+                    }
+                }
+            } else if (pc.iceConnectionState === 'failed') {
                 if (this.activeTransfer && this.activeTransfer.transferId === transferId) {
                     const isDone = this.activeTransfer.status === 'Done' || this.activeTransfer.status === 'Complete';
                     if (!isDone) {
-                        console.error('ICE Connection Failed/Disconnected during active transfer');
-                        uiStore.showError(
-                            "La connexion P2P a échoué (ICE Failed). Un serveur TURN est nécessaire pour traverser les pare-feux et NAT stricts.",
-                            'Échec de Connexion'
-                        );
+                        const wasConnected = this.activeTransfer.connectionInfo.wasConnected;
+                        if (wasConnected) {
+                            console.error('ICE Connection Failed — remote peer likely disconnected');
+                            uiStore.showError(
+                                "Le contact distant s'est déconnecté pendant le transfert. Le fichier n'a pas été transféré complètement.",
+                                'Contact déconnecté'
+                            );
+                        } else {
+                            console.error('ICE Connection Failed — could not establish connection');
+                            uiStore.showError(
+                                "La connexion P2P a échoué (ICE Failed). Un serveur TURN est nécessaire pour traverser les pare-feux et NAT stricts.",
+                                'Échec de Connexion'
+                            );
+                        }
                         this.activeTransfer.status = 'Error';
                         this.activeTransfer.connectionInfo.stage = 'Échec de connexion';
                     }
@@ -110,6 +140,20 @@ export const useP2PStore = defineStore('p2p', {
         this.candidateQueue = [];
     },
 
+    _handlePingSignal() {
+        this.pingSeq++;
+    },
+
+    sendPing(friendId, transferId) {
+        const now = Date.now();
+        if (this.pingCount >= 3) return;
+        if (this.pingCooldownUntil && now < this.pingCooldownUntil) return;
+        const realtimeStore = useRealtimeStore();
+        realtimeStore.sendP2PSignal(friendId, 'p2p_ping', { transferId });
+        this.pingCount++;
+        this.pingCooldownUntil = now + 30000;
+    },
+
     async _handleAnswerSignal(sender_id, data) {
         if (!this.activeTransfer || this.activeTransfer.friendId !== sender_id) return;
         if (data.transferId && this.activeTransfer.transferId && data.transferId !== this.activeTransfer.transferId) {
@@ -143,6 +187,37 @@ export const useP2PStore = defineStore('p2p', {
         }
     },
 
+    _clearConnectingTimeout() {
+        if (this.connectingTimeout) { clearTimeout(this.connectingTimeout); this.connectingTimeout = null; }
+    },
+
+    _handleRejectSignal(sender_id, data) {
+        // Only the sender side has type='send'; the receiver has no activeTransfer yet.
+        if (!this.activeTransfer || this.activeTransfer.type !== 'send') return;
+        // If both sides carry a transferId it must match — prevents stale/wrong-session signals.
+        if (data?.transferId && this.activeTransfer.transferId && data.transferId !== this.activeTransfer.transferId) return;
+        // Sender must be our intended recipient
+        if (this.activeTransfer.friendId !== sender_id) {
+            console.warn('[P2P] Reject signal ignored — sender_id mismatch:', sender_id, 'expected:', this.activeTransfer.friendId);
+            return;
+        }
+
+        const fileName = this.activeTransfer.fileName;
+        // Null out all handlers before closing to prevent stale callbacks
+        const pc = this.activeTransfer.pc;
+        pc.onicecandidate = null;
+        pc.oniceconnectionstatechange = null;
+        pc.ondatachannel = null;
+        pc.close();
+        this._clearConnectingTimeout();
+        this.activeTransfer = null;
+        this.stopHeartbeat();
+
+        this.rejectedTransfer = { friendId: sender_id, fileName };
+        // Auto-dismiss after 6 seconds
+        setTimeout(() => { this.rejectedTransfer = null; }, 6000);
+    },
+
     async handleSignal(payload) {
         const { sender_id, type, data } = payload;
         if (type === 'offer') {
@@ -151,18 +226,59 @@ export const useP2PStore = defineStore('p2p', {
             await this._handleAnswerSignal(sender_id, data);
         } else if (type === 'candidate') {
             await this._handleCandidateSignal(sender_id, data);
+        } else if (type === 'reject') {
+            this._handleRejectSignal(sender_id, data);
+        } else if (type === 'p2p_ping') {
+            this._handlePingSignal();
+        } else if (type === 'invite_accepted') {
+            await this._handleInviteAcceptedSignal(sender_id, data);
         }
     },
 
-    async startTransfer(friend, file) {
+    // Called when the recipient opens the invite link and accepts.
+    // If the pendingInvite matches the transfer_id, kick off the WebRTC handshake.
+    async _handleInviteAcceptedSignal(sender_id, data) {
+        if (!this.pendingInvite) return;
+        if (data?.transfer_id && data.transfer_id !== this.pendingInvite.transferId) return;
+        if (sender_id !== this.pendingInvite.recipientId) return;
+
+        this.inviteReady = true;
+        const { file, fileKey, recipientId, recipientName } = this.pendingInvite;
+
+        // For guest invites, public_key comes from the signal payload (generated by the guest browser).
+        // For account-based invites, fall back to the key stored at invite creation time.
+        const publicKey = data?.public_key || this.pendingInvite.recipientPublicKey;
+
+        const pseudoFriend = {
+            id: recipientId,
+            name: recipientName,
+            public_key: publicKey,
+        };
+        await this.startTransfer(pseudoFriend, file, fileKey);
+    },
+
+    // Prepare an invite-based pending transfer. The file and pre-generated key are
+    // held in memory until the recipient accepts (up to 24 h, page must stay open).
+    setPendingInvite({ transferId, file, fileKey, recipientId, recipientPublicKey, recipientName }) {
+        this.pendingInvite = { transferId, file, fileKey, recipientId, recipientPublicKey, recipientName };
+        this.inviteReady = false;
+    },
+
+    clearPendingInvite() {
+        this.pendingInvite = null;
+        this.inviteReady = false;
+    },
+
+    // preGeneratedKey: optional CryptoKey already created (invite flow).
+    async startTransfer(friend, file, preGeneratedKey = null) {
          await sodium.ready;
-         
+
          if (!friend.public_key) {
-             alert("L'ami n'a pas de clé publique (Il doit se reconnecter une fois pour la publier)."); 
+             alert("L'ami n'a pas de clé publique (Il doit se reconnecter une fois pour la publier).");
              return;
          }
 
-         const fileKey = await generateMasterKey();
+         const fileKey = preGeneratedKey ?? await generateMasterKey();
          const fileKeyRaw = await window.crypto.subtle.exportKey("raw", fileKey);
          
          const publicKey = await importKeyFromPEM(friend.public_key);
@@ -193,6 +309,10 @@ export const useP2PStore = defineStore('p2p', {
          dc.binaryType = "arraybuffer";
          dc.onopen = () => this.sendFileData(file, fileKey, dc);
          
+         this.pingCount = 0;
+         this.pingCooldownUntil = null;
+         if (this.connectingTimeout) { clearTimeout(this.connectingTimeout); this.connectingTimeout = null; }
+
          this.activeTransfer = {
              friendId: friend.id,
              type: 'send',
@@ -205,10 +325,11 @@ export const useP2PStore = defineStore('p2p', {
                  stage: 'Initialisation...',
                  iceState: 'new',
                  connectionType: null,
-                 usingTurn: false
+                 usingTurn: false,
+                 wasConnected: false
              }
          };
-         
+
          // Start heartbeat to prevent session timeout
          this.startHeartbeat();
 
@@ -225,6 +346,19 @@ export const useP2PStore = defineStore('p2p', {
                  fileKeyEncrypted: keyEncryptedBase64
              }
          });
+
+         // Auto-dismiss the waiting state after 3 minutes with no response
+         this.connectingTimeout = setTimeout(() => {
+             if (this.activeTransfer && this.activeTransfer.status === 'Connecting...') {
+                 const pc = this.activeTransfer.pc;
+                 if (pc) { pc.onicecandidate = null; pc.oniceconnectionstatechange = null; pc.close(); }
+                 this.activeTransfer = null;
+                 this.stopHeartbeat();
+                 this.rejectedTransfer = { friendId: friend.id, fileName: file.name, timedOut: true };
+                 setTimeout(() => { this.rejectedTransfer = null; }, 8000);
+             }
+             this.connectingTimeout = null;
+         }, 3 * 60 * 1000);
     },
 
     async acceptTransfer() {
@@ -301,10 +435,11 @@ export const useP2PStore = defineStore('p2p', {
                  stage: 'Initialisation...',
                  iceState: 'new',
                  connectionType: null,
-                 usingTurn: false
+                 usingTurn: false,
+                 wasConnected: false
              }
         };
-        
+
         // Start heartbeat to prevent session timeout
         this.startHeartbeat();
 
@@ -338,12 +473,24 @@ export const useP2PStore = defineStore('p2p', {
         });
     },
 
-    rejectTransfer() {
+    async rejectTransfer() {
+        if (!this.incomingOffer) return;
+        const realtimeStore = useRealtimeStore();
+        const senderId = this.incomingOffer.senderId;
+        const transferId = this.incomingOffer.transferId;
+        // Clear local state immediately so the UI updates right away
         this.incomingOffer = null;
-        // Should send 'reject' signal ideally
+        this.candidateQueue = [];
+        // Send the reject signal — best-effort, errors are logged but don't block the UI
+        try {
+            await realtimeStore.sendP2PSignal(senderId, 'reject', { transferId });
+        } catch (err) {
+            console.error('[P2P] Failed to send reject signal:', err);
+        }
     },
 
     cancelTransfer() {
+        this._clearConnectingTimeout();
         if (this.activeTransfer) {
             this.activeTransfer.pc.close();
             this.activeTransfer = null;
diff --git a/frontend/src/stores/realtime.js b/frontend/src/stores/realtime.js
index dd461ba1..35b2d359 100644
--- a/frontend/src/stores/realtime.js
+++ b/frontend/src/stores/realtime.js
@@ -186,7 +186,11 @@ export const useRealtimeStore = defineStore('realtime', () => {
       const token = await authClient.getToken()
       if (!token) return []
 
-      const response = await fetch('/api/v1/p2p/signals', {
+      const apiBase = (
+        typeof window !== 'undefined' && window.__APP_CONFIG__?.apiUrl
+      ) ? window.__APP_CONFIG__.apiUrl.replace(/\/$/, '') : (import.meta.env.VITE_API_URL || 'http://localhost:8080/api/v1').replace(/\/$/, '')
+
+      const response = await fetch(`${apiBase}/p2p/signals`, {
         headers: { Authorization: `Bearer ${token}` }
       })
       if (!response.ok) return []
@@ -224,9 +228,14 @@ export const useRealtimeStore = defineStore('realtime', () => {
 
     _connectWS()
 
-    // P2P polling fallback — catches signals during WS reconnect gaps
+    // P2P polling — runs always as a delivery fallback.
+    // When WS is connected, most signals arrive via WS; polling deduplicates via
+    // _seenSignalIds so signals are never processed twice. When WS is down,
+    // polling is the only delivery path.
     if (!_pollP2PTimer) {
-      _pollP2PTimer = setInterval(() => pollP2PSignals(), 2500)
+      _pollP2PTimer = setInterval(() => {
+        pollP2PSignals()
+      }, 5000)
     }
   }
 
@@ -244,7 +253,10 @@ export const useRealtimeStore = defineStore('realtime', () => {
   async function sendP2PSignal(targetUserId, signalType, payload) {
     try {
       const token = await authClient.getToken()
-      const response = await fetch('/api/v1/p2p/signal', {
+      const apiBase = (
+        typeof window !== 'undefined' && window.__APP_CONFIG__?.apiUrl
+      ) ? window.__APP_CONFIG__.apiUrl.replace(/\/$/, '') : (import.meta.env.VITE_API_URL || 'http://localhost:8080/api/v1').replace(/\/$/, '')
+      const response = await fetch(`${apiBase}/p2p/signal`, {
         method: 'POST',
         headers: {
           'Content-Type': 'application/json',
diff --git a/frontend/src/stores/ui.js b/frontend/src/stores/ui.js
index 6ecce710..764fffce 100644
--- a/frontend/src/stores/ui.js
+++ b/frontend/src/stores/ui.js
@@ -2,6 +2,8 @@ import { defineStore } from 'pinia'
 import { ref } from 'vue'
 
 export const useUIStore = defineStore('ui', () => {
+    const pendingMobileAction = ref(null) // 'upload' | 'createFolder' | null
+
     const alert = ref({
         visible: false,
         title: '',
@@ -68,6 +70,7 @@ export const useUIStore = defineStore('ui', () => {
 
     return {
         alert,
+        pendingMobileAction,
         deleteDialog, // Export state
         showError,
         showWarning,
diff --git a/frontend/src/utils/useMFA.js b/frontend/src/utils/useMFA.js
index 9d3133d1..fefc0b36 100644
--- a/frontend/src/utils/useMFA.js
+++ b/frontend/src/utils/useMFA.js
@@ -27,7 +27,8 @@ export function useMFA() {
     mfa_verified: false,
     require_mfa_on_login: false,
     require_mfa_on_destructive_actions: false,
-    require_mfa_on_downloads: false
+    require_mfa_on_downloads: false,
+    require_mfa_on_email_change: false
   })
 
   const error = ref(null)
@@ -293,6 +294,7 @@ export function useMFA() {
       case 'login': return securitySettings.value.require_mfa_on_login
       case 'destructive': return securitySettings.value.require_mfa_on_destructive_actions
       case 'download': return securitySettings.value.require_mfa_on_downloads
+      case 'email_change': return securitySettings.value.require_mfa_on_email_change
       default: return false
     }
   }
diff --git a/frontend/src/views/FriendsView.vue b/frontend/src/views/FriendsView.vue
index 2c5f9bba..03a4edff 100644
--- a/frontend/src/views/FriendsView.vue
+++ b/frontend/src/views/FriendsView.vue
@@ -604,4 +604,77 @@ const confirmRemove = (friend) => {
   border-style: solid;
   border-color: transparent transparent #333 transparent;
 }
+
+@media (max-width: 768px) {
+  .friends-container {
+    padding: 1rem;
+  }
+
+  .friends-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .add-form {
+    flex-direction: column;
+  }
+
+  .add-form input {
+    width: 100%;
+  }
+
+  .info-tooltip {
+    width: min(260px, 80vw);
+    left: auto;
+    right: 0;
+    transform: none;
+  }
+
+  /* Code box wraps on narrow screens */
+  .my-code-box {
+    flex-wrap: wrap;
+    justify-content: center;
+    gap: 0.75rem;
+  }
+
+  .code {
+    font-size: 1.1rem;
+    letter-spacing: 1px;
+    word-break: break-all;
+    text-align: center;
+  }
+
+  /* Tabs more compact */
+  .tabs {
+    gap: 0;
+  }
+
+  .tabs button {
+    padding: 0.7rem 0.9rem;
+    font-size: 0.88rem;
+    flex: 1;
+    justify-content: center;
+  }
+
+  /* Request items stack on small screens */
+  .request-item {
+    flex-direction: column;
+    align-items: flex-start;
+    gap: 0.75rem;
+  }
+}
+
+@media (max-width: 480px) {
+  .friends-container {
+    padding: 0.75rem;
+  }
+
+  .tabs button {
+    padding: 0.6rem 0.5rem;
+    font-size: 0.8rem;
+  }
+
+  .header h2 {
+    font-size: 1.4rem;
+  }
+}
 </style>
diff --git a/frontend/src/views/Login.vue b/frontend/src/views/Login.vue
index 2e9bc259..ffcb5d26 100644
--- a/frontend/src/views/Login.vue
+++ b/frontend/src/views/Login.vue
@@ -7,55 +7,104 @@
       <!-- Left Column: Branding & Value Proposition -->
       <div class="auth-branding">
         <div class="brand-header">
-          <div class="logo-placeholder">
-            <svg viewBox="0 0 24 24" fill="none" class="logo-icon" stroke="currentColor" stroke-width="2">
+          <div class="logo-placeholder" :class="{ 'logo-p2p': isP2PSubdomain }">
+            <svg v-if="!isP2PSubdomain" viewBox="0 0 24 24" fill="none" class="logo-icon" stroke="currentColor" stroke-width="2">
               <path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4" />
               <polyline points="7 10 12 15 17 10" />
               <line x1="12" y1="15" x2="12" y2="3" />
             </svg>
+            <svg v-else viewBox="0 0 24 24" fill="none" class="logo-icon" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
+              <line x1="22" y1="2" x2="11" y2="13"></line>
+              <polygon points="22 2 15 22 11 13 2 9 22 2"></polygon>
+            </svg>
+          </div>
+          <div class="brand-title">
+            <h1>Kagibi<span v-if="isP2PSubdomain" class="brand-suffix"> Send</span></h1>
+            <span v-if="isP2PSubdomain" class="brand-badge">Transfert P2P</span>
           </div>
-          <h1>Kagibi</h1>
         </div>
 
-        <h2 class="auth-tagline"> {{ t('auth.tagline') }} </h2>
+        <h2 class="auth-tagline">{{ isP2PSubdomain ? t('auth.p2pTagline') : t('auth.tagline') }}</h2>
 
         <div class="features-grid">
-          <div class="feature-item">
-            <div class="feature-icon">
-              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
-                <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
-                <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
-              </svg>
+          <template v-if="!isP2PSubdomain">
+            <div class="feature-item">
+              <div class="feature-icon">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+                  <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.e2eEncryption') }}</h3>
+                <p>{{ t('auth.e2eDesc') }}</p>
+              </div>
             </div>
-            <div class="feature-text">
-              <h3>{{ t('auth.e2eEncryption') }}</h3>
-              <p>{{ t('auth.e2eDesc') }}</p>
+            <div class="feature-item">
+              <div class="feature-icon">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
+                  <line x1="1" y1="1" x2="23" y2="23"></line>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.zeroKnowledge') }}</h3>
+                <p>{{ t('auth.zeroKnowledgeDesc') }}</p>
+              </div>
             </div>
-          </div>
-          <div class="feature-item">
-            <div class="feature-icon">
-              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
-                <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"></path>
-                <line x1="1" y1="1" x2="23" y2="23"></line>
-              </svg>
+            <div class="feature-item">
+              <div class="feature-icon">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <line x1="22" y1="2" x2="11" y2="13"></line>
+                  <polygon points="22 2 15 22 11 13 2 9 22 2"></polygon>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.secureSharing') }}</h3>
+                <p>{{ t('auth.secureSharingDesc') }}</p>
+              </div>
             </div>
-            <div class="feature-text">
-              <h3>{{ t('auth.zeroKnowledge') }}</h3>
-              <p>{{ t('auth.zeroKnowledgeDesc') }}</p>
+          </template>
+          <template v-else>
+            <div class="feature-item">
+              <div class="feature-icon feature-icon-p2p">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <polyline points="5 12 19 12"></polyline>
+                  <polyline points="13 6 19 12 13 18"></polyline>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.p2pFeature1') }}</h3>
+                <p>{{ t('auth.p2pFeature1Desc') }}</p>
+              </div>
             </div>
-          </div>
-          <div class="feature-item">
-            <div class="feature-icon">
-              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
-                <line x1="22" y1="2" x2="11" y2="13"></line>
-                <polygon points="22 2 15 22 11 13 2 9 22 2"></polygon>
-              </svg>
+            <div class="feature-item">
+              <div class="feature-icon feature-icon-p2p">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
+                  <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.p2pFeature2') }}</h3>
+                <p>{{ t('auth.p2pFeature2Desc') }}</p>
+              </div>
             </div>
-            <div class="feature-text">
-              <h3>{{ t('auth.secureSharing') }}</h3>
-              <p>{{ t('auth.secureSharingDesc') }}</p>
+            <div class="feature-item">
+              <div class="feature-icon feature-icon-p2p">
+                <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" class="icon-svg">
+                  <path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"></path>
+                  <circle cx="9" cy="7" r="4"></circle>
+                  <path d="M23 21v-2a4 4 0 0 0-3-3.87"></path>
+                  <path d="M16 3.13a4 4 0 0 1 0 7.75"></path>
+                </svg>
+              </div>
+              <div class="feature-text">
+                <h3>{{ t('auth.p2pFeature3') }}</h3>
+                <p>{{ t('auth.p2pFeature3Desc') }}</p>
+              </div>
             </div>
-          </div>
+          </template>
         </div>
       </div>
 
@@ -64,7 +113,10 @@
         <Transition name="fade-slide" mode="out-in">
           <div v-if="mode === 'login'" key="login" class="auth-form-container">
             <div class="form-header">
-              <h2>{{ t('auth.login') }}</h2>
+              <div class="form-header-titles">
+                <h2>{{ t('auth.login') }}</h2>
+                <a href="#" class="header-register-link" @click.prevent="mode = 'register'">{{ t('auth.register') }}</a>
+              </div>
               <p>{{ t('auth.welcomeBack') }}</p>
             </div>
 
@@ -95,7 +147,10 @@
 
           <div v-else-if="mode === 'register'" key="register" class="auth-form-container">
             <div class="form-header">
-              <h2>{{ t('auth.register') }}</h2>
+              <div class="form-header-titles">
+                <a href="#" class="header-register-link" @click.prevent="mode = 'login'">{{ t('auth.login') }}</a>
+                <h2>{{ t('auth.register') }}</h2>
+              </div>
               <p>{{ t('auth.startSecuring') }}</p>
             </div>
 
@@ -141,6 +196,7 @@ import RegisterComponent from '../components/auth/registerComponent.vue'
 import RecoveryComponent from '../components/auth/recoveryComponent.vue'
 import { useFileStore } from '../stores/files'
 import { useAuthStore } from '../stores/auth'
+import { isP2PSubdomain } from '../composables/useSubdomain'
 
 const { t } = useI18n()
 
@@ -202,6 +258,37 @@ onMounted(() => {
   gap: 1rem;
 }
 
+.brand-title {
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+
+.brand-suffix {
+  color: var(--primary-color);
+}
+
+.brand-badge {
+  display: inline-block;
+  font-size: 0.75rem;
+  font-weight: 600;
+  padding: 0.2rem 0.6rem;
+  background: rgba(0, 80, 255, 0.12);
+  color: var(--primary-color);
+  border-radius: 20px;
+  letter-spacing: 0.05em;
+  width: fit-content;
+}
+
+.logo-p2p {
+  background: linear-gradient(135deg, #0050FF, #00b4d8);
+}
+
+.feature-icon-p2p {
+  background-color: rgba(0, 80, 255, 0.08);
+  color: var(--primary-color);
+}
+
 .logo-placeholder {
   width: 48px;
   height: 48px;
@@ -317,12 +404,31 @@ onMounted(() => {
   gap: 1.5rem;
 }
 
+.form-header-titles {
+  display: flex;
+  align-items: baseline;
+  gap: 1rem;
+  margin-bottom: 0.5rem;
+}
+
 .form-header h2 {
   font-size: 2rem;
-  margin: 0 0 0.5rem 0;
+  margin: 0;
   color: var(--main-text-color);
 }
 
+.header-register-link {
+  font-size: 1.2rem; /* 2rem * 0.6 = 40% smaller */
+  color: var(--secondary-text-color);
+  text-decoration: none;
+  font-weight: 600;
+  transition: color 0.2s;
+}
+
+.header-register-link:hover {
+  color: var(--primary-color);
+}
+
 .form-header p {
   margin: 0;
   color: var(--secondary-text-color);
@@ -455,11 +561,58 @@ onMounted(() => {
   }
 
   .feature-item {
-    text-align: left; /* Keep features readable */
+    text-align: left;
   }
 
   .auth-interaction {
     margin: 0 auto;
   }
 }
+
+@media (max-width: 600px) {
+  .auth-layout {
+    max-width: 100%;
+    padding: 1.5rem 1rem;
+    gap: 2rem;
+  }
+
+  .auth-branding h1 {
+    font-size: clamp(1.6rem, 6vw, 2.5rem);
+  }
+
+  .auth-tagline {
+    font-size: clamp(1.1rem, 4vw, 2rem);
+  }
+
+  .auth-branding {
+    gap: 1rem;
+  }
+
+  .features-grid {
+    gap: 0.75rem;
+    margin-top: 0.75rem;
+  }
+
+  .feature-item {
+    padding: 0.75rem;
+    gap: 0.75rem;
+  }
+
+  .feature-icon {
+    width: 36px;
+    height: 36px;
+    flex-shrink: 0;
+  }
+}
+
+@media (max-width: 400px) {
+  .auth-layout {
+    padding: 1rem 0.75rem;
+  }
+
+  .logo-placeholder {
+    width: 36px;
+    height: 36px;
+  }
+}
 </style>
diff --git a/frontend/src/views/P2PView.vue b/frontend/src/views/P2PView.vue
index bd47c52b..85e767e0 100644
--- a/frontend/src/views/P2PView.vue
+++ b/frontend/src/views/P2PView.vue
@@ -6,6 +6,34 @@
     <LeftBar />
     <div class="main-content">
       <div class="p2p-page">
+
+        <!-- Incoming invite banner -->
+        <div v-if="incomingInvite || inviteError || inviteLoading" class="invite-banner-wrap">
+          <div class="invite-banner">
+            <template v-if="inviteLoading">
+              <span class="invite-banner-text">{{ t('common.loading') }}</span>
+            </template>
+            <template v-else-if="inviteError">
+              <span class="invite-banner-error">{{ inviteError }}</span>
+            </template>
+            <template v-else-if="inviteAccepted">
+              <span class="invite-banner-text">{{ t('p2p.invite.accepted') }}</span>
+            </template>
+            <template v-else-if="incomingInvite">
+              <div class="invite-banner-content">
+                <div class="invite-banner-info">
+                  <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"/><polyline points="13 2 13 9 20 9"/></svg>
+                  <span>{{ t('p2p.invite.incomingDesc', { sender: incomingInvite.sender_name, fileName: incomingInvite.file_name, size: formatSize(incomingInvite.file_size) }) }}</span>
+                </div>
+                <div class="invite-banner-actions">
+                  <button class="invite-btn-decline" @click="incomingInvite = null" :disabled="inviteLoading">{{ t('p2p.invite.decline') }}</button>
+                  <button class="invite-btn-accept" @click="acceptInvite" :disabled="inviteLoading">{{ t('p2p.invite.accept') }}</button>
+                </div>
+              </div>
+            </template>
+          </div>
+        </div>
+
         <div class="p2p-container">
           <div class="main-card">
         <div class="card-header">
@@ -15,51 +43,61 @@
 
         <div class="transfer-flow">
             <!-- STEP 1: DESTINATAIRE -->
-            <div class="flow-step" :class="{ active: !selectedFriend, completed: selectedFriend }">
+            <div class="flow-step" :class="{ active: !selectedFriend && !inviteMode, completed: selectedFriend || inviteMode }">
                 <div class="step-icon">1</div>
                 <div class="step-content">
                     <h3>{{ t('p2p.selectFriend') }}</h3>
-                    <div v-if="!selectedFriend">
+
+                    <!-- Selection not made yet -->
+                    <div v-if="!selectedFriend && !inviteMode">
                         <p class="secondary-text">{{ t('p2p.selectFriendDesc') }}</p>
-                        <div class="friend-selector">
-                           <div v-if="onlineFriends.length === 0" class="no-friends">
-                               {{ t('p2p.noOnlineFriends') }}
-                           </div>
-                           <div v-else class="friends-grid">
-                               <div
-                                  v-for="friend in onlineFriends"
-                                  :key="friend.id"
-                                  class="friend-chip"
-                                  @click="selectedFriend = friend"
-                               >
-                                  <div class="avatar-mini-wrapper">
-                                      <div class="avatar-mini">
-                                          <img
-                                            v-if="normalizeAvatarUrl(friend.avatar_url)"
-                                            :src="normalizeAvatarUrl(friend.avatar_url)"
-                                            :alt="friend.name"
-                                            class="avatar-image"
-                                            @error="(e) => e.target.style.display = 'none'"
-                                          />
-                                          <span v-else class="avatar-initials-mini">{{ getInitials(friend.name) }}</span>
-                                      </div>
-                                      <span class="status-dot-mini"></span>
-                                  </div>
-                                  <span>{{ friend.name }}</span>
-                               </div>
-                           </div>
+                        <div class="recipient-options">
+                            <div class="friends-grid">
+                                <div v-if="onlineFriends.length === 0" class="no-friends">
+                                    {{ t('p2p.noOnlineFriends') }}
+                                </div>
+                                <template v-else>
+                                    <div
+                                        v-for="friend in onlineFriends"
+                                        :key="friend.id"
+                                        class="friend-chip"
+                                        @click="selectedFriend = friend"
+                                    >
+                                        <div class="avatar-mini-wrapper">
+                                            <div class="avatar-mini">
+                                                <img
+                                                    v-if="normalizeAvatarUrl(friend.avatar_url)"
+                                                    :src="normalizeAvatarUrl(friend.avatar_url)"
+                                                    :alt="friend.name"
+                                                    class="avatar-image"
+                                                    @error="(e) => e.target.style.display = 'none'"
+                                                />
+                                                <span v-else class="avatar-initials-mini">{{ getInitials(friend.name) }}</span>
+                                            </div>
+                                            <span class="status-dot-mini"></span>
+                                        </div>
+                                        <span>{{ friend.name }}</span>
+                                    </div>
+                                </template>
+                            </div>
+                            <div class="invite-option-chip" @click="inviteMode = true">
+                                <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                                {{ t('p2p.invite.title') }}
+                            </div>
                         </div>
                     </div>
-                    <div v-else class="selected-friend-display" style="width: fit-content">
+
+                    <!-- Friend selected -->
+                    <div v-else-if="selectedFriend" class="selected-friend-display" style="width: fit-content">
                         <div class="friend-chip selected">
                             <div class="avatar-mini-wrapper">
                                 <div class="avatar-mini">
                                     <img
-                                      v-if="normalizeAvatarUrl(selectedFriend.avatar_url)"
-                                      :src="normalizeAvatarUrl(selectedFriend.avatar_url)"
-                                      :alt="selectedFriend.name"
-                                      class="avatar-image"
-                                      @error="(e) => e.target.style.display = 'none'"
+                                        v-if="normalizeAvatarUrl(selectedFriend.avatar_url)"
+                                        :src="normalizeAvatarUrl(selectedFriend.avatar_url)"
+                                        :alt="selectedFriend.name"
+                                        class="avatar-image"
+                                        @error="(e) => e.target.style.display = 'none'"
                                     />
                                     <span v-else class="avatar-initials-mini">{{ getInitials(selectedFriend.name) }}</span>
                                 </div>
@@ -69,25 +107,33 @@
                             <button class="close-btn" @click="selectedFriend = null">×</button>
                         </div>
                     </div>
+
+                    <!-- Invite mode selected -->
+                    <div v-else class="invite-mode-display">
+                        <div class="invite-option-chip selected">
+                            <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                            {{ t('p2p.invite.title') }}
+                        </div>
+                        <button class="close-mode-btn" @click="inviteMode = false">×</button>
+                    </div>
+
                 </div>
             </div>
 
             <!-- STEP 2: FICHIER -->
-            <div class="flow-step" :class="{ active: selectedFriend && !selectedFile, completed: selectedFile, disabled: !selectedFriend }">
+            <div class="flow-step" :class="{ active: !selectedFile, completed: selectedFile }">
                 <div class="step-icon">2</div>
                 <div class="step-content">
                     <h3>{{ t('p2p.selectFile') }}</h3>
                     <input type="file" id="p2p-file-input" @change="handleFileSelect" style="display: none" />
 
                     <div v-if="!selectedFile"
-                         class="drop-area"
-                         :class="{ 'pulse': selectedFriend && !selectedFile }"
-                         @click="selectedFriend && triggerFileSelect()"
+                         class="drop-area pulse"
+                         @click="triggerFileSelect()"
                          @dragover.prevent
                          @drop.prevent="handleDrop"
                     >
-                        <span v-if="!selectedFriend">{{ t('p2p.selectFriendDesc') }}</span>
-                        <span v-else>{{ t('p2p.dropFile') }}</span>
+                        <span>{{ t('p2p.dropFile') }}</span>
                     </div>
 
                     <div v-else class="file-display">
@@ -105,48 +151,142 @@
 
             <!-- STEP 3: ACTION -->
             <div class="flow-step action-step">
-                <button class="send-big-btn" :disabled="!canSend" @click="startTransfer">
+                <!-- Legal consent for direct transfer -->
+                <label v-if="!inviteMode && selectedFriend && selectedFile" class="direct-consent-toggle">
+                  <input type="checkbox" v-model="directLegalConsent" />
+                  <span>
+                    Je certifie que ce fichier est légal et j'en assume l'entière responsabilité conformément aux <router-link to="/terms" target="_blank">CGU</router-link>.
+                  </span>
+                </label>
+                <!-- Direct transfer mode -->
+                <button v-if="!inviteMode" class="send-big-btn" :disabled="!canSend" @click="startTransfer">
                     <span v-if="!canSend">{{ t('p2p.selectFriendAndFile') }}</span>
                     <span v-else>
                         {{ t('p2p.sendFile') }}
                         <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="margin-left:8px;"><line x1="22" y1="2" x2="11" y2="13"></line><polygon points="22 2 15 22 11 13 2 9 22 2"></polygon></svg>
                     </span>
                 </button>
+                <!-- Invite mode -->
+                <button v-else class="send-big-btn invite-send-btn" :disabled="!selectedFile" @click="openInviteDialog">
+                    <span v-if="!selectedFile">{{ t('p2p.selectFile') }}</span>
+                    <span v-else>
+                        {{ t('p2p.invite.generate') }}
+                        <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="margin-left:8px;"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                    </span>
+                </button>
             </div>
         </div>
       </div>
     </div>
     </div>
     </div>
+    <!-- Mobile Bottom Navigation -->
+    <MobileBottomNav />
   </div>
+
+  <P2PInviteDialog
+    :visible="showInviteDialog"
+    :file="selectedFile"
+    :transfer-id="inviteTransferId"
+    @close="showInviteDialog = false"
+  />
 </template>
 
 <script setup>
-import { ref, computed, onMounted } from 'vue'
+import { ref, computed, onMounted, watch } from 'vue'
+import { useRoute } from 'vue-router'
 import { useI18n } from 'vue-i18n'
 import { useFriendStore } from '../stores/friends'
 import { useAuthStore } from '../stores/auth'
 import { useP2PStore } from '../stores/p2p'
+import { authClient } from '../auth-client'
+import { API_BASE_URL } from '../api'
 import LeftBar from '../components/bar/leftBar.vue'
+import MobileBottomNav from '../components/bar/MobileBottomNav.vue'
+import P2PInviteDialog from '../components/p2p/P2PInviteDialog.vue'
 
 const { t } = useI18n()
+const route = useRoute()
 const friendStore = useFriendStore()
 const authStore = useAuthStore()
 const p2pStore = useP2PStore()
 
 const selectedFriend = ref(null)
 const selectedFile = ref(null)
+const inviteMode = ref(false)
+const showInviteDialog = ref(false)
+const inviteTransferId = ref('')
+
+// Invite acceptance state
+const incomingInvite = ref(null)
+const inviteError = ref('')
+const inviteAccepted = ref(false)
+const inviteLoading = ref(false)
 
 const onlineFriends = computed(() => {
   return friendStore.acceptedFriends.filter(f => f.online)
 })
 
-const canSend = computed(() => !!selectedFriend.value && !!selectedFile.value)
+const directLegalConsent = ref(false)
+const canSend = computed(() => !!selectedFriend.value && !!selectedFile.value && !inviteMode.value && directLegalConsent.value)
 
-onMounted(() => {
+watch(() => p2pStore.inviteReady, (ready) => {
+  if (ready && showInviteDialog.value) showInviteDialog.value = false
+})
+
+onMounted(async () => {
     friendStore.fetchFriends()
+    const token = route.query.invite
+    if (token) {
+      await loadInvite(token)
+    }
 })
 
+async function loadInvite(token) {
+  inviteLoading.value = true
+  inviteError.value = ''
+  try {
+    const jwt = await authClient.getToken()
+    const res = await fetch(`${API_BASE_URL}p2p/invite/${token}`, {
+      headers: { Authorization: `Bearer ${jwt}` },
+    })
+    const data = await res.json()
+    if (res.status === 410) { inviteError.value = t('p2p.invite.expired'); return }
+    if (res.status === 403) { inviteError.value = t('p2p.invite.notForYou'); return }
+    if (!res.ok) { inviteError.value = data.error || t('p2p.invite.createError'); return }
+    incomingInvite.value = { ...data, token }
+  } catch {
+    inviteError.value = t('p2p.invite.createError')
+  } finally {
+    inviteLoading.value = false
+  }
+}
+
+async function acceptInvite() {
+  if (!incomingInvite.value) return
+  inviteLoading.value = true
+  inviteError.value = ''
+  try {
+    const jwt = await authClient.getToken()
+    const res = await fetch(`${API_BASE_URL}p2p/invite/${incomingInvite.value.token}/accept`, {
+      method: 'POST',
+      headers: { Authorization: `Bearer ${jwt}` },
+    })
+    const data = await res.json()
+    if (!res.ok) { inviteError.value = data.error || t('p2p.invite.createError'); return }
+    inviteAccepted.value = true
+  } catch {
+    inviteError.value = t('p2p.invite.createError')
+  } finally {
+    inviteLoading.value = false
+  }
+}
+
+function openInviteDialog() {
+  inviteTransferId.value = crypto.randomUUID()
+  showInviteDialog.value = true
+}
+
 const getInitials = (name) => {
     if (!name) return '?'
     return name.substring(0, 2).toUpperCase()
@@ -179,7 +319,6 @@ const handleFileSelect = (e) => {
 }
 
 const handleDrop = (e) => {
-    if (!selectedFriend.value) return
     if (e.dataTransfer.files.length > 0) {
         selectedFile.value = e.dataTransfer.files[0]
     }
@@ -408,6 +547,31 @@ const startTransfer = async () => {
 .change-file-btn { font-size: 0.8rem; padding: 0.2rem 0.6rem; }
 .close-btn { background:transparent; border:none; color:white; font-size:1.2rem; margin-left:0.5rem; cursor:pointer;}
 
+.direct-consent-toggle {
+    display: flex;
+    align-items: flex-start;
+    gap: 0.5rem;
+    font-size: 0.82rem;
+    color: var(--text-secondary);
+    cursor: pointer;
+    user-select: none;
+    line-height: 1.4;
+    padding: 0.6rem 0.8rem;
+    background: var(--background-color);
+    border: 1px solid var(--border-color);
+    border-radius: 8px;
+    margin-bottom: 0.75rem;
+}
+
+.direct-consent-toggle input[type="checkbox"] {
+    width: 15px;
+    height: 15px;
+    cursor: pointer;
+    accent-color: var(--primary-color);
+    flex-shrink: 0;
+    margin-top: 0.15rem;
+}
+
 .send-big-btn {
     width: 100%;
     padding: 1rem;
@@ -430,4 +594,165 @@ const startTransfer = async () => {
     cursor: not-allowed;
     color: var(--secondary-text-color);
 }
+
+@media (max-width: 768px) {
+  .main-card {
+    width: 100%;
+    max-width: 100%;
+    padding: 1.5rem 1rem;
+  }
+
+  .p2p-container {
+    padding: 1rem;
+  }
+
+  .friends-grid {
+    flex-wrap: wrap;
+    gap: 0.5rem;
+  }
+
+  .drop-area {
+    padding: 1.5rem 1rem;
+  }
+}
+
+@media (max-width: 768px) {
+  .dashboard-container {
+    padding-bottom: 64px; /* space for bottom nav */
+  }
+}
+
+@media (max-width: 480px) {
+  .p2p-page {
+    padding-bottom: 0;
+  }
+
+  .card-header h2 {
+    font-size: 1.2rem;
+  }
+
+  .friend-chip {
+    font-size: 0.8rem;
+    padding: 0.3rem 0.6rem;
+  }
+}
+
+.recipient-options {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 0.5rem;
+  margin-top: 0.5rem;
+}
+
+.invite-option-chip {
+  display: flex;
+  align-items: center;
+  gap: 0.45rem;
+  padding: 0.4rem 0.8rem;
+  background: var(--hover-background-color);
+  border: 1px dashed var(--border-color);
+  border-radius: 20px;
+  font-size: 0.85rem;
+  color: var(--secondary-text-color);
+  cursor: pointer;
+  transition: all 0.2s;
+}
+.invite-option-chip:hover { border-color: var(--primary-color); color: var(--primary-color); }
+.invite-option-chip.selected {
+  background: var(--primary-color);
+  color: #fff;
+  border-style: solid;
+  border-color: var(--primary-color);
+}
+
+.invite-mode-display {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.close-mode-btn {
+  background: transparent;
+  border: none;
+  color: var(--secondary-text-color);
+  font-size: 1.2rem;
+  cursor: pointer;
+  padding: 0 0.2rem;
+  line-height: 1;
+}
+
+.invite-send-btn {
+  background: var(--primary-color) !important;
+  box-shadow: 0 4px 10px rgba(52, 152, 219, 0.3) !important;
+}
+
+.invite-banner-wrap {
+  padding: 0.75rem 1rem 0;
+  display: flex;
+  justify-content: center;
+}
+
+.invite-banner {
+  width: 600px;
+  max-width: 100%;
+  background: var(--card-color);
+  border: 1px solid var(--primary-color);
+  border-radius: 12px;
+  padding: 1rem 1.2rem;
+}
+
+.invite-banner-content {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+  flex-wrap: wrap;
+}
+
+.invite-banner-info {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  font-size: 0.9rem;
+  color: var(--text-color);
+}
+
+.invite-banner-actions {
+  display: flex;
+  gap: 0.5rem;
+  flex-shrink: 0;
+}
+
+.invite-btn-accept {
+  padding: 0.4rem 1rem;
+  background: var(--primary-color);
+  color: #fff;
+  border: none;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  cursor: pointer;
+}
+.invite-btn-accept:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.invite-btn-decline {
+  padding: 0.4rem 1rem;
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-color);
+  border-radius: 8px;
+  font-size: 0.85rem;
+  cursor: pointer;
+}
+.invite-btn-decline:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.invite-banner-text {
+  font-size: 0.9rem;
+  color: var(--text-secondary);
+}
+
+.invite-banner-error {
+  font-size: 0.9rem;
+  color: var(--error-color, #ef4444);
+}
 </style>
diff --git a/frontend/src/views/PrivacyPolicy.vue b/frontend/src/views/PrivacyPolicy.vue
index 05564fc5..3ce11ce9 100644
--- a/frontend/src/views/PrivacyPolicy.vue
+++ b/frontend/src/views/PrivacyPolicy.vue
@@ -5,26 +5,29 @@
   <div class="legal-container">
     <div class="legal-content">
       <h1>Politique de Confidentialité</h1>
-      <p class="last-updated">Dernière mise à jour : 8 Janvier 2026</p>
+      <p class="last-updated">Dernière mise à jour : 20 Avril 2026</p>
 
       <section>
         <h2>1. Introduction</h2>
         <p>Dans le cadre de son activité, Kagibi est amené à traiter des informations vous concernant. La présente Politique de Confidentialité vous informe de la manière dont nous recueillons et traitons vos données personnelles. Nous vous invitons à la lire attentivement.</p>
-        <p>Nous attachons la plus grande importance au respect de la vie privée et des données individuelles de nos utilisateurs. Nous nous engageons à respecter les dispositions de la loi n°78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés modifiée et au Règlement (UE) 2016/679 du Parlement européen et du Conseil du 27 avril 2016 dit « <em>RGPD</em> ».</p>
+        <p>Nous attachons la plus grande importance au respect de la vie privée et des données individuelles de nos utilisateurs. Nous nous engageons à respecter les dispositions de la loi n°78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés modifiée, du Règlement (UE) 2016/679 du 27 avril 2016 (<em>RGPD</em>), et de la loi n°2004-575 du 21 juin 2004 pour la confiance dans l'économie numérique (<em>LCEN</em>).</p>
       </section>
 
       <section>
         <h2>2. Responsable de traitement</h2>
-        <p>Le responsable du traitement des données est Buuuntyyy, joignable à l'adresse suivante par email : contact@kagibi.cloud.</p>
+        <p>Le responsable du traitement des données est Buuuntyyy, joignable par email : contact@kagibi.cloud.</p>
       </section>
 
       <section>
         <h2>3. Données collectées</h2>
         <p>Nous collectons et traitons les données suivantes :</p>
         <ul>
-          <li><strong>Données d'identification :</strong> Nom d'utilisateur, adresse email.</li>
-          <li><strong>Données techniques :</strong> Logs de connexion, adresse IP, type de navigateur (à des fins de sécurité).</li>
-          <li><strong>Contenu utilisateur :</strong> Fichiers et dossiers que vous stockez sur le service. Ces fichiers sont chiffrés.</li>
+          <li><strong>Données d'identification :</strong> Nom d'utilisateur, adresse email, identifiant unique de compte.</li>
+          <li><strong>Données de connexion :</strong> Adresse IP source, date et heure de connexion, type de navigateur et d'appareil. Ces données sont collectées en application de l'obligation légale prévue par l'article 6 II de la LCEN et le décret n°2021-1363.</li>
+          <li><strong>Contenu chiffré :</strong> Métadonnées des fichiers et dossiers (nom, taille, date de modification). <strong>Le contenu des fichiers est chiffré côté client et Kagibi n'y a aucun accès.</strong></li>
+          <li><strong>Données de signalisation P2P :</strong> Lors d'un transfert P2P, Kagibi enregistre temporairement les métadonnées nécessaires à la mise en relation technique : identifiant de l'expéditeur, email ou identifiant du destinataire (si renseigné), nom et taille du fichier, jeton d'invitation.</li>
+          <li><strong>Flux TURN :</strong> Lorsque la connexion directe entre appareils n'est pas possible, le flux de données chiffré transite par le serveur TURN de Kagibi. Ce flux n'est <strong>jamais stocké</strong> : il est commuté en mémoire en temps réel entre les deux parties. Le contenu des fichiers reste chiffré de bout en bout (AES-256-GCM) et Kagibi ne dispose d'aucune clé permettant de le déchiffrer.</li>
+          <li><strong>Données de facturation :</strong> En cas d'abonnement payant, les données de paiement sont traitées par notre prestataire Stripe (Stripe Inc.) et ne sont pas stockées par Kagibi.</li>
         </ul>
       </section>
 
@@ -32,49 +35,66 @@
         <h2>4. Finalités du traitement</h2>
         <p>Vos données sont collectées pour les finalités suivantes :</p>
         <ul>
-          <li>Fourniture et gestion du service Kagibi (création de compte, stockage, partage).</li>
+          <li>Fourniture et gestion du service Kagibi (création de compte, stockage, partage, transferts P2P).</li>
           <li>Sécurité du service et prévention de la fraude.</li>
           <li>Communication avec les utilisateurs (support technique, notifications importantes).</li>
-          <li>Respect des obligations légales et réglementaires.</li>
+          <li>Respect des obligations légales et réglementaires, notamment la conservation des données de connexion imposée par la LCEN.</li>
         </ul>
       </section>
 
       <section>
         <h2>5. Destinataires des données</h2>
-        <p>Les données collectées sont destinées aux équipes techniques de Kagibi. Elles peuvent être transmises aux sous-traitants auxquels Kagibi fait appel dans le cadre de l'exécution de ses services (ex: hébergeur).</p>
+        <p>Les données collectées sont destinées aux équipes techniques de Kagibi. Elles peuvent être transmises aux sous-traitants auxquels Kagibi fait appel dans le cadre de l'exécution de ses services (hébergeur OVH France, prestataire de paiement Stripe).</p>
+        <p>Les données de connexion (logs, adresses IP) peuvent être communiquées aux autorités judiciaires ou administratives compétentes sur réquisition légale, conformément à la LCEN et au Code de procédure pénale.</p>
         <p>Kagibi ne vend ni ne loue vos données personnelles à des tiers à des fins de marketing.</p>
       </section>
 
       <section>
         <h2>6. Durée de conservation</h2>
-        <p>Vos données sont conservées pendant toute la durée de l'utilisation du service (tant que votre compte est actif).</p>
-        <p>En cas de suppression de compte, vos données personnelles et fichiers seront supprimés de nos serveurs actifs sous un délai de 30 jours. Certaines données (logs) peuvent être conservées plus longtemps pour répondre à des obligations légales, pour une durée n'excédant pas celle prévue par la loi.</p>
+        <p>Les durées de conservation sont les suivantes :</p>
+        <ul>
+          <li><strong>Données de connexion (logs, adresses IP) :</strong> 1 an à compter de la date d'enregistrement, conformément à l'obligation légale prévue par l'article 6 II de la LCEN et le décret n°2021-1363 du 24 novembre 2021.</li>
+          <li><strong>Données de compte et contenu chiffré :</strong> Conservés pendant toute la durée d'activité du compte, puis supprimés des serveurs actifs dans un délai de 30 jours suivant la suppression du compte.</li>
+          <li><strong>Métadonnées P2P (invitations, signaux de signalisation) :</strong> Les invitations P2P expirent automatiquement après 24 heures. Les métadonnées résiduelles (nom de fichier, taille, identifiants) sont supprimées dans un délai de 30 jours suivant la complétion ou l'expiration du transfert. Les signaux WebRTC sont supprimés immédiatement après consommation.</li>
+          <li><strong>Données de facturation :</strong> Conservées conformément aux obligations comptables (10 ans) pour les factures, durée réduite pour les autres données de facturation.</li>
+        </ul>
+      </section>
+
+      <section>
+        <h2>7. Ce que Kagibi ne peut pas accéder</h2>
+        <p>En raison de l'architecture de chiffrement de bout en bout de Kagibi :</p>
+        <ul>
+          <li>Kagibi ne peut pas lire le contenu de vos fichiers stockés (chiffrés côté client avec vos propres clés) ;</li>
+          <li>Kagibi ne peut pas accéder au contenu des fichiers transférés via P2P, qu'ils transitent directement entre appareils ou par le serveur TURN de relais — le flux est chiffré de bout en bout et n'est jamais stocké ;</li>
+          <li>Kagibi ne conserve aucune clé de déchiffrement de vos données.</li>
+        </ul>
+        <p>Cette architecture implique que la perte de vos clés de chiffrement peut entraîner la perte définitive d'accès à vos données. Kagibi ne peut être tenu responsable de cette perte.</p>
       </section>
 
       <section>
-        <h2>7. Vos droits</h2>
+        <h2>8. Vos droits</h2>
         <p>Conformément à la réglementation applicable, vous disposez des droits suivants :</p>
         <ul>
           <li><strong>Droit d'accès :</strong> Vous pouvez demander l'accès à vos données personnelles.</li>
           <li><strong>Droit de rectification :</strong> Vous pouvez demander la correction de données inexactes ou incomplètes.</li>
-          <li><strong>Droit à l'effacement :</strong> Vous pouvez demander la suppression de votre compte et de vos données ("droit à l'oubli").</li>
+          <li><strong>Droit à l'effacement :</strong> Vous pouvez demander la suppression de votre compte et de vos données ("droit à l'oubli"), sous réserve des obligations légales de conservation.</li>
           <li><strong>Droit à la limitation du traitement :</strong> Vous pouvez demander de geler l'utilisation de vos données.</li>
           <li><strong>Droit à la portabilité :</strong> Vous pouvez récupérer vos données dans un format structuré.</li>
           <li><strong>Droit d'opposition :</strong> Vous pouvez vous opposer au traitement de vos données pour des motifs légitimes.</li>
           <li><strong>Sort des données après la mort :</strong> Conformément à la loi "Informatique et Libertés", vous pouvez définir des directives relatives à la conservation, à l'effacement et à la communication de vos données après votre décès.</li>
         </ul>
-        <p>Pour exercer ces droits, vous pouvez nous contacter à l'adresse : contact@kagibi.cloud.</p>
-        <p>Si vous estimez, après nous avoir contactés, que vos droits "Informatique et Libertés" ne sont pas respectés, vous pouvez adresser une réclamation à la CNIL.</p>
+        <p>Pour exercer ces droits, contactez-nous à : contact@kagibi.cloud.</p>
+        <p>Si vous estimez, après nous avoir contactés, que vos droits "Informatique et Libertés" ne sont pas respectés, vous pouvez adresser une réclamation à la CNIL (www.cnil.fr).</p>
       </section>
 
       <section>
-        <h2>8. Sécurité des données</h2>
-        <p>Kagibi met en œuvre des mesures techniques et organisationnelles appropriées pour protéger vos données contre l'accès non autorisé, la modification, la divulgation ou la destruction.</p>
+        <h2>9. Sécurité des données</h2>
+        <p>Kagibi met en œuvre des mesures techniques et organisationnelles appropriées pour protéger vos données contre l'accès non autorisé, la modification, la divulgation ou la destruction, notamment : chiffrement AES-256-GCM des fichiers, chiffrement RSA-4096 des clés, communication via HTTPS/WSS, et authentification à deux facteurs disponible.</p>
       </section>
 
       <section>
-        <h2>9. Cookies</h2>
-        <p>Le site utilise des cookies techniques strictement nécessaires au fonctionnement du service (maintien de la session connecté). Ces cookies ne nécessitent pas de consentement préalable.</p>
+        <h2>10. Cookies</h2>
+        <p>Le site utilise des cookies techniques strictement nécessaires au fonctionnement du service (maintien de la session connectée). Ces cookies ne nécessitent pas de consentement préalable au sens de la directive ePrivacy.</p>
       </section>
       
       <button @click="$router.go(-1)" class="btn-back">Retour</button>
@@ -150,4 +170,22 @@ ul {
 .btn-back:hover {
   opacity: 0.9;
 }
+
+@media (max-width: 600px) {
+  .legal-container {
+    padding: 20px 12px;
+  }
+
+  .legal-content {
+    padding: 20px 16px;
+  }
+
+  h1 {
+    font-size: 1.5rem;
+  }
+
+  h2 {
+    font-size: 1.15rem;
+  }
+}
 </style>
diff --git a/frontend/src/views/PublicBrowse.vue b/frontend/src/views/PublicBrowse.vue
index 2eddb379..faf4d481 100644
--- a/frontend/src/views/PublicBrowse.vue
+++ b/frontend/src/views/PublicBrowse.vue
@@ -193,5 +193,24 @@ onMounted(() => {
     align-items: flex-start;
     gap: 12px;
   }
+
+  .content-title {
+    font-size: clamp(1.2rem, 4vw, 2rem);
+  }
+}
+
+@media (max-width: 480px) {
+  .public-header {
+    padding: 0 12px;
+  }
+
+  .share-info-card {
+    padding: 12px;
+  }
+
+  .download-all-btn {
+    width: 100%;
+    justify-content: center;
+  }
 }
 </style>
diff --git a/frontend/src/views/PublicShare.vue b/frontend/src/views/PublicShare.vue
index 401c6b9a..b3930d23 100644
--- a/frontend/src/views/PublicShare.vue
+++ b/frontend/src/views/PublicShare.vue
@@ -354,4 +354,33 @@ const downloadFile = async () => {
 .error-state svg {
   margin-bottom: 20px;
 }
+
+@media (max-width: 640px) {
+  .share-page-container {
+    padding: 16px;
+  }
+
+  .share-card {
+    padding: 24px 20px;
+    max-width: 100%;
+  }
+
+  .share-header {
+    padding: 16px 20px;
+  }
+
+  .share-header h2 {
+    font-size: 1.2rem;
+  }
+
+  .public-footer {
+    padding: 16px;
+  }
+}
+
+@media (max-width: 400px) {
+  .share-card {
+    padding: 16px;
+  }
+}
 </style>
diff --git a/frontend/src/views/TermsOfService.vue b/frontend/src/views/TermsOfService.vue
index 5ce884f5..39b46759 100644
--- a/frontend/src/views/TermsOfService.vue
+++ b/frontend/src/views/TermsOfService.vue
@@ -5,7 +5,7 @@
   <div class="legal-container">
     <div class="legal-content">
       <h1>Conditions Générales d'Utilisation (CGU)</h1>
-      <p class="last-updated">Dernière mise à jour : 8 Janvier 2026</p>
+      <p class="last-updated">Dernière mise à jour : 20 Avril 2026</p>
 
       <section>
         <h2>1. Objet</h2>
@@ -21,48 +21,87 @@
 
       <section>
         <h2>3. Accès au Service</h2>
-        <p>Le Service permet à l'Utilisateur un accès gratuit aux services suivants :</p>
+        <p>Le Service permet à l'Utilisateur un accès aux services suivants :</p>
         <ul>
-          <li>Stockage de fichiers en ligne (Cloud) ;</li>
+          <li>Stockage de fichiers en ligne (Cloud) avec chiffrement de bout en bout ;</li>
           <li>Partage de fichiers et de dossiers via des liens sécurisés ;</li>
-          <li>Chiffrement des données.</li>
+          <li>Transferts directs de fichiers entre utilisateurs (fonctionnalité P2P) via WebRTC chiffré.</li>
         </ul>
-        <p>Le Service est accessible gratuitement en tout lieu à tout Utilisateur ayant un accès à Internet. Tous les frais supportés pour l'accès au Service (matériel informatique, logiciels, connexion Internet, etc.) sont à la charge de l'Utilisateur.</p>
+        <p>Le Service est accessible en tout lieu à tout Utilisateur ayant un accès à Internet. Tous les frais supportés pour l'accès au Service (matériel informatique, logiciels, connexion Internet, etc.) sont à la charge de l'Utilisateur.</p>
       </section>
 
       <section>
         <h2>4. Responsabilité de l'Utilisateur</h2>
-        <p>L'Utilisateur est responsable des risques liés à l'utilisation de son identifiant de connexion et de son mot de passe. Le mot de passe de l'Utilisateur doit rester secret. En cas de divulgation de mot de passe, l'Éditeur décline toute responsabilité.</p>
-        <p>L'Utilisateur assume l'entière responsabilité de l'utilisation qu'il fait des informations et contenus présents sur le site Kagibi.</p>
-        <p>Tout usage du service par l'Utilisateur ayant directement ou indirectement pour conséquence des dommages doit faire l'objet d'une indemnisation au profit du site.</p>
-        <p>Le membre s'engage à ne pas mettre en ligne de contenus pouvant porter atteinte aux intérêts de tierces personnes. L'Utilisateur s'interdit de stocker ou partager des fichiers illégaux, contrefaits, ou contraires aux bonnes mœurs.</p>
+        <p>L'Utilisateur est seul responsable des risques liés à l'utilisation de ses identifiants de connexion et de son mot de passe. En cas de divulgation de son mot de passe, l'Éditeur décline toute responsabilité.</p>
+        <p>L'Utilisateur assume l'entière et exclusive responsabilité de l'utilisation qu'il fait du Service, ainsi que du contenu qu'il stocke, envoie ou reçoit via le Service.</p>
+        <p>Il est formellement interdit à l'Utilisateur de stocker, partager ou transférer via le Service :</p>
+        <ul>
+          <li>Tout contenu illicite au regard de la législation française ou européenne ;</li>
+          <li>Tout contenu portant atteinte aux droits de propriété intellectuelle de tiers ;</li>
+          <li>Tout contenu à caractère pédopornographique, incitant à la haine ou à la violence ;</li>
+          <li>Tout logiciel malveillant, virus ou tout autre programme informatique nuisible ;</li>
+          <li>Tout contenu contrefait ou portant atteinte aux intérêts de tierces personnes.</li>
+        </ul>
+        <p>Tout manquement à ces obligations engage la responsabilité exclusive de l'Utilisateur et pourra entraîner la suspension ou la résiliation de son compte, sans préjudice de toute action judiciaire.</p>
+        <p>Tout usage du Service par l'Utilisateur ayant directement ou indirectement pour conséquence des dommages causés à l'Éditeur ou à des tiers doit faire l'objet d'une indemnisation au profit de la partie lésée.</p>
       </section>
 
       <section>
         <h2>5. Responsabilité de l'Éditeur</h2>
-        <p>Tout dysfonctionnement du serveur ou du réseau ne peut engager la responsabilité de l'Éditeur.</p>
-        <p>De même, la responsabilité du site ne peut être engagée en cas de force majeure ou du fait imprévisible et insurmontable d'un tiers.</p>
-        <p>Le site Kagibi s'engage à mettre en œuvre tous les moyens nécessaires pour garantir la sécurité et la confidentialité des données. Toutefois, il ne peut garantir une sécurité absolue.</p>
+        <p>Tout dysfonctionnement du serveur ou du réseau ne peut engager la responsabilité de l'Éditeur. De même, la responsabilité de l'Éditeur ne peut être engagée en cas de force majeure ou du fait imprévisible et insurmontable d'un tiers.</p>
+        <p>Le Service Kagibi s'engage à mettre en œuvre tous les moyens nécessaires pour garantir la sécurité et la confidentialité des données. Toutefois, il ne peut garantir une sécurité absolue.</p>
+      </section>
+
+      <section>
+        <h2>6. Stockage Chiffré — Limitation de Responsabilité</h2>
+        <p>Les fichiers déposés sur le Service sont chiffrés de bout en bout, côté client, avant tout transfert vers les serveurs de Kagibi. Les clés de chiffrement sont générées et gérées exclusivement par l'Utilisateur sur son appareil.</p>
+        <p><strong>Kagibi ne dispose d'aucune clé de déchiffrement et n'a techniquement aucun accès au contenu des fichiers stockés.</strong> En conséquence :</p>
+        <ul>
+          <li>L'Éditeur ne peut pas contrôler, modérer, ni vérifier la nature du contenu stocké ;</li>
+          <li>L'Éditeur ne peut pas être tenu responsable du contenu stocké par l'Utilisateur ;</li>
+          <li>L'Utilisateur est seul responsable de la licéité du contenu qu'il stocke.</li>
+        </ul>
+        <p>Nonobstant ce qui précède, l'Éditeur se réserve le droit de suspendre ou supprimer tout compte faisant l'objet d'un signalement d'activité illicite par les autorités compétentes, et coopérera pleinement avec toute réquisition judiciaire ou administrative dans le cadre de la législation applicable (notamment la LCEN et le Code de procédure pénale).</p>
+        <p>Conformément à l'article 6 de la loi n°2004-575 du 21 juin 2004 pour la confiance dans l'économie numérique (LCEN), l'Éditeur agit en qualité d'hébergeur pour les fichiers stockés et bénéficie du régime de responsabilité limitée prévu par ce texte.</p>
+      </section>
+
+      <section>
+        <h2>7. Transferts P2P — Responsabilité et Rôle de l'Éditeur</h2>
+        <p>La fonctionnalité de transfert de fichiers en pair-à-pair (P2P) repose sur la technologie WebRTC. Dans ce cadre, Kagibi intervient en tant qu'intermédiaire technique selon deux modalités :</p>
+        <ul>
+          <li><strong>Signalisation :</strong> Kagibi facilite l'établissement de la connexion entre les appareils des utilisateurs (échange d'offres, réponses et candidats ICE). Ce trafic de signalisation ne contient aucun contenu de fichier.</li>
+          <li><strong>Relais TURN :</strong> Lorsque la configuration réseau des utilisateurs (NAT, pare-feu) ne permet pas d'établir une connexion directe, le flux de données transite par un serveur TURN opéré par Kagibi. Ce serveur assure une <strong>commutation technique du flux sans aucun stockage</strong> : les données entrent et sortent en temps réel sans être écrites sur disque.</li>
+        </ul>
+        <p><strong>Dans tous les cas, le contenu des fichiers est chiffré de bout en bout (AES-256-GCM) avant d'être transmis.</strong> Le serveur TURN, comme les serveurs de signalisation, ne dispose d'aucune clé de déchiffrement et ne peut donc pas accéder au contenu des fichiers transférés.</p>
+        <p>En conséquence :</p>
+        <ul>
+          <li>L'Éditeur ne peut pas lire, contrôler, modérer ni stocker le contenu des transferts P2P, qu'ils soient directs ou relayés ;</li>
+          <li>L'Éditeur ne peut pas être tenu responsable du contenu transféré entre utilisateurs via la fonctionnalité P2P ;</li>
+          <li>L'Éditeur agit en qualité de simple transporteur au sens de l'article 12 de la directive 2000/31/CE et de l'article 6 de la LCEN, et bénéficie du régime d'exonération de responsabilité correspondant.</li>
+        </ul>
+        <p><strong>L'Utilisateur expéditeur est seul et entièrement responsable du contenu qu'il transfère</strong>, notamment de sa licéité, de l'absence de violation de droits de tiers, et du consentement du destinataire.</p>
+        <p>Avant tout transfert P2P, l'Utilisateur doit confirmer explicitement que le fichier qu'il souhaite transférer est légal et conforme aux présentes CGU. Cette confirmation constitue une déclaration sur l'honneur engageant la responsabilité civile et pénale de l'Utilisateur.</p>
+        <p>Seules les métadonnées nécessaires à la signalisation (identifiant expéditeur, identifiant ou email destinataire, nom et taille du fichier, jeton d'invitation à durée limitée) sont temporairement enregistrées par Kagibi aux fins de mise en relation technique. Ces métadonnées sont supprimées dans les délais prévus par la Politique de Confidentialité.</p>
       </section>
 
       <section>
-        <h2>6. Propriété Intellectuelle</h2>
+        <h2>8. Propriété Intellectuelle</h2>
         <p>Les marques, logos, signes ainsi que tous les contenus du site (textes, images, son...) font l'objet d'une protection par le Code de la propriété intellectuelle et plus particulièrement par le droit d'auteur.</p>
         <p>L'Utilisateur doit solliciter l'autorisation préalable du site pour toute reproduction, publication, copie des différents contenus. Il s'engage à une utilisation des contenus du site dans un cadre strictement privé, toute utilisation à des fins commerciales et publicitaires est strictement interdite.</p>
       </section>
 
-       <section>
-        <h2>7. Données Personnelles</h2>
+      <section>
+        <h2>9. Données Personnelles</h2>
         <p>L'Utilisateur dispose de droits d'opposition, d'accès, de rectification et de suppression portant sur les données personnelles le concernant, conformément à la Politique de Confidentialité du site.</p>
       </section>
 
       <section>
-        <h2>8. Évolution des CGU</h2>
-        <p>Le site Kagibi se réserve le droit de modifier les clauses de ces conditions générales d'utilisation à tout moment et sans justification.</p>
+        <h2>10. Évolution des CGU</h2>
+        <p>Le site Kagibi se réserve le droit de modifier les clauses de ces conditions générales d'utilisation à tout moment. En cas de modification substantielle, l'Utilisateur sera informé par notification ou par email. La poursuite de l'utilisation du Service après modification vaut acceptation des nouvelles CGU.</p>
       </section>
 
       <section>
-        <h2>9. Droit applicable, médiation et juridiction compétente</h2>
+        <h2>11. Droit applicable, médiation et juridiction compétente</h2>
         <p>La législation française s'applique au présent contrat. En cas d'absence de résolution amiable d'un litige né entre les parties, les tribunaux français seront seuls compétents pour en connaître.</p>
         <p>Pour tout litige de consommation qui n'aurait pu être résolu directement avec l'Éditeur, le consommateur peut recourir gratuitement à un médiateur de la consommation en vue de la résolution amiable du litige (Code de la consommation art. L.612-1). Les coordonnées du médiateur de référence sont : [NOM ET COORDONNÉES DU MÉDIATEUR].</p>
         <p>La Commission Européenne met à disposition une plateforme de règlement en ligne des litiges (RLL) : <a href="https://ec.europa.eu/consumers/odr" target="_blank">https://ec.europa.eu/consumers/odr</a>.</p>
@@ -141,4 +180,22 @@ ul {
 .btn-back:hover {
   opacity: 0.9;
 }
+
+@media (max-width: 600px) {
+  .legal-container {
+    padding: 20px 12px;
+  }
+
+  .legal-content {
+    padding: 20px 16px;
+  }
+
+  h1 {
+    font-size: 1.5rem;
+  }
+
+  h2 {
+    font-size: 1.15rem;
+  }
+}
 </style>
diff --git a/frontend/src/views/account.vue b/frontend/src/views/account.vue
index f291545b..e3ee4d38 100644
--- a/frontend/src/views/account.vue
+++ b/frontend/src/views/account.vue
@@ -5,7 +5,7 @@
   <div class="account-page">
     <div class="page-header">
       <div class="header-content">
-        <button class="btn-back" @click="router.push('/dashboard')">
+        <button class="btn-back" @click="router.go(-1)">
           <svg viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="2">
             <path d="M19 12H5M12 19l-7-7 7-7"/>
           </svg>
@@ -73,6 +73,49 @@
                 {{ updatingUsername ? t('account.updating') : t('account.modify') }}
               </button>
             </div>
+            <div class="form-divider"></div>
+            <div class="form-row">
+              <div class="input-group">
+                <label>
+                  {{ t('account.newEmail') }}
+                  <input
+                    type="email"
+                    v-model="emailForm.newEmail"
+                    :placeholder="authStore.user?.email"
+                  />
+                </label>
+              </div>
+              <div class="input-group">
+                <label>
+                  {{ t('account.currentPasswordForEmail') }}
+                  <div class="password-input-wrapper">
+                    <input
+                      :type="showEmailPassword ? 'text' : 'password'"
+                      v-model="emailForm.password"
+                      placeholder="••••••••"
+                    />
+                    <button
+                      type="button"
+                      class="toggle-password-btn"
+                      @click="showEmailPassword = !showEmailPassword"
+                      :title="t('account.showHide')"
+                    >
+                      <svg v-if="!showEmailPassword" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/>
+                        <circle cx="12" cy="12" r="3"/>
+                      </svg>
+                      <svg v-else viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
+                        <path d="M17.94 17.94A10.07 10.07 0 0 1 12 20c-7 0-11-8-11-8a18.45 18.45 0 0 1 5.06-5.94M9.9 4.24A9.12 9.12 0 0 1 12 4c7 0 11 8 11 8a18.5 18.5 0 0 1-2.16 3.19m-6.72-1.07a3 3 0 1 1-4.24-4.24"/>
+                        <line x1="1" y1="1" x2="23" y2="23"/>
+                      </svg>
+                    </button>
+                  </div>
+                </label>
+              </div>
+              <button class="btn-secondary" @click="handleUpdateEmail" :disabled="updatingEmail">
+                {{ updatingEmail ? t('account.updatingEmail') : t('account.updateEmail') }}
+              </button>
+            </div>
           </div>
         </section>
 
@@ -447,6 +490,11 @@ const usernameForm = ref({
   newName: ''
 })
 
+const emailForm = ref({
+  newEmail: '',
+  password: ''
+})
+
 const passwordForm = ref({
   current: '',
   new: '',
@@ -456,8 +504,10 @@ const passwordForm = ref({
 const showCurrentPassword = ref(false)
 const showNewPassword = ref(false)
 const showConfirmPassword = ref(false)
+const showEmailPassword = ref(false)
 
 const updatingUsername = ref(false)
+const updatingEmail = ref(false)
 const updatingPassword = ref(false)
 
 const errorModal = ref({
@@ -629,6 +679,57 @@ const handleUpdateUsername = async () => {
   }
 }
 
+const executeEmailUpdate = async () => {
+  const newEmail = emailForm.value.newEmail.trim()
+  updatingEmail.value = true
+  try {
+    await authStore.updateEmail(newEmail, emailForm.value.password)
+    showSuccess('Succès', 'Votre adresse email a été mise à jour avec succès.')
+    emailForm.value.newEmail = ''
+    emailForm.value.password = ''
+    showEmailPassword.value = false
+  } catch (error) {
+    console.error('Failed to update email:', error)
+    const errorMessage = error.message || 'Erreur lors de la mise à jour de l\'email.'
+    showError('Erreur', errorMessage)
+  } finally {
+    updatingEmail.value = false
+  }
+}
+
+const handleUpdateEmail = async () => {
+  const newEmail = emailForm.value.newEmail.trim()
+  if (!newEmail) {
+    showError('Erreur', 'Veuillez entrer une nouvelle adresse email.')
+    return
+  }
+
+  if (newEmail === authStore.user?.email) {
+    showError('Erreur', 'Veuillez entrer une adresse email différente de l\'adresse actuelle.')
+    return
+  }
+
+  if (!emailForm.value.password) {
+    showError('Erreur', 'Veuillez entrer votre mot de passe pour confirmer.')
+    return
+  }
+
+  // Check if MFA is required for email change
+  try {
+    const mfaRequired = await isMFARequired('email_change')
+    if (mfaRequired) {
+      pendingAction.value = async () => { await executeEmailUpdate() }
+      mfaChallengeContext.value = 'email_change'
+      showMFAChallenge.value = true
+      return
+    }
+  } catch (err) {
+    console.error('Error checking MFA requirement:', err)
+  }
+
+  await executeEmailUpdate()
+}
+
 const handleUpdatePassword = async () => {
   if (passwordForm.value.new !== passwordForm.value.confirm) {
     showError('Erreur', 'Les nouveaux mots de passe ne correspondent pas.')
@@ -943,6 +1044,45 @@ const executeDeleteAccount = async () => {
   .content-grid {
     grid-template-columns: 1fr;
   }
+
+  .user-card {
+    position: static;
+  }
+}
+
+@media (max-width: 600px) {
+  .account-page {
+    padding: 1rem;
+  }
+
+  .page-header {
+    margin-bottom: 1.25rem;
+  }
+
+  .header-content h1 {
+    font-size: 1.4rem;
+  }
+
+  .content-grid {
+    gap: 1rem;
+  }
+
+  .user-card {
+    padding: 1.25rem;
+  }
+
+  .form-row {
+    flex-direction: column;
+    gap: 0.75rem;
+  }
+
+  .form-row button {
+    width: 100%;
+  }
+
+  .password-form {
+    gap: 0.75rem;
+  }
 }
 
 /* User Card */
@@ -1049,6 +1189,12 @@ const executeDeleteAccount = async () => {
   align-items: flex-end;
 }
 
+.form-divider {
+  border: none;
+  border-top: 1px solid var(--border-color, #e2e8f0);
+  margin: 1rem 0;
+}
+
 .password-row {
   display: flex;
   gap: 1rem;
diff --git a/frontend/src/views/dashboard.vue b/frontend/src/views/dashboard.vue
index dbada115..525d7df2 100644
--- a/frontend/src/views/dashboard.vue
+++ b/frontend/src/views/dashboard.vue
@@ -17,11 +17,15 @@
       :status="fileStore.preview.status"
       @close="fileStore.preview.show = false"
     />
+
+    <!-- Mobile Bottom Navigation -->
+    <MobileBottomNav />
   </div>
 </template>
 
 <script setup>
 import LeftBar from '../components/bar/leftBar.vue'
+import MobileBottomNav from '../components/bar/MobileBottomNav.vue'
 import FilePreview from '../components/file/FilePreview.vue'
 import { useFileStore } from '../stores/files'
 
@@ -37,33 +41,6 @@ const fileStore = useFileStore()
   background-color: var(--background-color);
 }
 
-.friends-wrapper {
-  overflow: hidden;
-  flex-shrink: 0;
-  position: relative;
-  display: flex;
-}
-
-.friends-wrapper.show {
-  /* width handled by style binding */
-}
-
-.resizer {
-  width: 5px;
-  cursor: ew-resize;
-  background-color: transparent;
-  position: absolute;
-  right: 0;
-  top: 0;
-  bottom: 0;
-  z-index: 10;
-  transition: background-color 0.2s;
-}
-
-.resizer:hover, .friends-wrapper.resizing .resizer {
-  background-color: var(--primary-color);
-}
-
 .main-content {
   flex-grow: 1;
   overflow: hidden;
@@ -72,4 +49,17 @@ const fileStore = useFileStore()
   border-top-left-radius: 30px;
   background-color: var(--card-color);
 }
+
+@media (max-width: 768px) {
+  .dashboard-container {
+    flex-direction: column;
+    padding-bottom: 64px; /* space for bottom nav */
+  }
+
+  .main-content {
+    border-top-left-radius: 0;
+    border-radius: 0;
+    overflow-y: auto;
+  }
+}
 </style>
diff --git a/frontend/src/views/landing/CompareView.vue b/frontend/src/views/landing/CompareView.vue
index 6486483e..a209c972 100644
--- a/frontend/src/views/landing/CompareView.vue
+++ b/frontend/src/views/landing/CompareView.vue
@@ -7,12 +7,9 @@
 
     <section class="compare-hero">
       <div class="container">
-        <div class="hero-eyebrow">Comparatif</div>
-        <h1>Kagibi face aux autres solutions</h1>
-        <p class="hero-subtitle">
-          Toutes les solutions de stockage cloud ne se valent pas.
-          Voici pourquoi le chiffrement côté client change tout.
-        </p>
+        <div class="hero-eyebrow">{{ t('landing.compare.eyebrow') }}</div>
+        <h1>{{ t('landing.compare.title') }}</h1>
+        <p class="hero-subtitle">{{ t('landing.compare.subtitle') }}</p>
       </div>
     </section>
 
@@ -22,7 +19,7 @@
           <table class="compare-table">
             <thead>
               <tr>
-                <th class="feature-col">Fonctionnalité</th>
+                <th class="feature-col">{{ t('landing.compare.tableFeature') }}</th>
                 <th class="kagibi-col">
                   <div class="th-brand kagibi">
                     <img src="/Logo.png" alt="Kagibi" width="24" />
@@ -61,9 +58,7 @@
           </table>
         </div>
 
-        <p class="disclaimer">
-          Informations collectées publiquement sur les sites officiels et documentations des éditeurs. Dernière mise à jour : avril 2026.
-        </p>
+        <p class="disclaimer">{{ t('landing.compare.disclaimer') }}</p>
       </div>
     </section>
 
@@ -73,16 +68,16 @@
         <div class="tech-header">
           <span class="tech-badge">+</span>
           <div>
-            <h2>Comparaison technique approfondie</h2>
-            <p class="tech-subtitle">Algorithmes, architecture et garanties cryptographiques.</p>
+            <h2>{{ t('landing.compare.techTitle') }}</h2>
+            <p class="tech-subtitle">{{ t('landing.compare.techSubtitle') }}</p>
           </div>
         </div>
 
         <div class="tech-legend">
-          <span class="tag green">Vert</span> Avantage / bonne pratique
-          <span class="tag yellow">Orange</span> Partiel / dépend de la configuration
-          <span class="tag red">Rouge</span> Risque / point négatif
-          <span class="tag gray">Gris</span> Information neutre
+          <span class="tag green">{{ t('landing.compare.legendColorGreen') }}</span> {{ t('landing.compare.legendAdvantage') }}
+          <span class="tag yellow">{{ t('landing.compare.legendColorYellow') }}</span> {{ t('landing.compare.legendPartial') }}
+          <span class="tag red">{{ t('landing.compare.legendColorRed') }}</span> {{ t('landing.compare.legendRisk') }}
+          <span class="tag gray">{{ t('landing.compare.legendColorGray') }}</span> {{ t('landing.compare.legendNeutral') }}
         </div>
 
         <div class="tech-grid">
@@ -93,15 +88,15 @@
               <span>Kagibi</span>
             </div>
             <ul class="tech-list">
-              <li><span class="tag green">AES-256-GCM</span> Chiffrement des fichiers côté client</li>
-              <li><span class="tag green">RSA-OAEP / ECDH</span> Échange de clés pour le partage</li>
-              <li><span class="tag green">PBKDF2 / Argon2</span> Dérivation de clé depuis le mot de passe</li>
-              <li><span class="tag green">WebCrypto API</span> Opérations cryptographiques natives du navigateur</li>
-              <li><span class="tag green">Zero-Knowledge</span> Clés chiffrées transmises au serveur</li>
-              <li><span class="tag green">WebRTC DataChannel</span> Transfert P2P chiffré de bout en bout</li>
-              <li><span class="tag green">AGPLv3</span> Code source intégralement auditable</li>
-              <li><span class="tag yellow">JWT + Redis</span> Sessions sans état, révocation instantanée</li>
-              <li><span class="tag yellow">MFA TOTP</span> Double authentification supportée</li>
+              <li><span class="tag green">AES-256-GCM</span> {{ t('landing.compare.techKagibi1') }}</li>
+              <li><span class="tag green">RSA-OAEP / ECDH</span> {{ t('landing.compare.techKagibi2') }}</li>
+              <li><span class="tag green">PBKDF2 / Argon2</span> {{ t('landing.compare.techKagibi3') }}</li>
+              <li><span class="tag green">WebCrypto API</span> {{ t('landing.compare.techKagibi4') }}</li>
+              <li><span class="tag green">Zero-Knowledge</span> {{ t('landing.compare.techKagibi5') }}</li>
+              <li><span class="tag green">WebRTC DataChannel</span> {{ t('landing.compare.techKagibi6') }}</li>
+              <li><span class="tag green">AGPLv3</span> {{ t('landing.compare.techKagibi7') }}</li>
+              <li><span class="tag yellow">JWT + Redis</span> {{ t('landing.compare.techKagibi8') }}</li>
+              <li><span class="tag yellow">MFA TOTP</span> {{ t('landing.compare.techKagibi9') }}</li>
             </ul>
           </div>
 
@@ -110,13 +105,13 @@
               <span>Proton Drive</span>
             </div>
             <ul class="tech-list">
-              <li><span class="tag green">AES-256</span> Chiffrement côté client</li>
-              <li><span class="tag green">OpenPGP</span> Chiffrement des clés et des métadonnées</li>
-              <li><span class="tag green">SRP</span> Authentification sans transmission du mot de passe</li>
-              <li><span class="tag green">Zero-Knowledge</span> Proton ne peut pas lire vos fichiers</li>
-              <li><span class="tag gray">Propriétaire</span> Partie du code source fermée</li>
-              <li><span class="tag gray">Suisse</span> Juridiction helvétique (hors EU)</li>
-              <li><span class="tag gray">Pas de P2P</span> Pas de transfert direct entre pairs</li>
+              <li><span class="tag green">AES-256</span> {{ t('landing.compare.techProton1') }}</li>
+              <li><span class="tag green">OpenPGP</span> {{ t('landing.compare.techProton2') }}</li>
+              <li><span class="tag green">SRP</span> {{ t('landing.compare.techProton3') }}</li>
+              <li><span class="tag green">Zero-Knowledge</span> {{ t('landing.compare.techProton4') }}</li>
+              <li><span class="tag gray">Propriétaire</span> {{ t('landing.compare.techProton5') }}</li>
+              <li><span class="tag gray">Suisse</span> {{ t('landing.compare.techProton6') }}</li>
+              <li><span class="tag gray">Pas de P2P</span> {{ t('landing.compare.techProton7') }}</li>
             </ul>
           </div>
 
@@ -125,13 +120,13 @@
               <span>Nextcloud</span>
             </div>
             <ul class="tech-list">
-              <li><span class="tag yellow">AES-128/256</span> Chiffrement côté serveur (optionnel)</li>
-              <li><span class="tag red">Côté serveur</span> Clés gérées par l'administrateur serveur</li>
-              <li><span class="tag green">Open Source</span> Code source AGPLv3 disponible</li>
-              <li><span class="tag green">Auto-hébergeable</span> Contrôle total de l'infrastructure</li>
-              <li><span class="tag gray">E2EE expérimental</span> Module E2EE peu mature, non activé par défaut</li>
-              <li><span class="tag gray">Dépend de l'hébergeur</span> Conformité RGPD variable selon l'instance</li>
-              <li><span class="tag gray">Pas de P2P</span> Pas de transfert direct entre pairs</li>
+              <li><span class="tag yellow">AES-128/256</span> {{ t('landing.compare.techNextcloud1') }}</li>
+              <li><span class="tag red">Côté serveur</span> {{ t('landing.compare.techNextcloud2') }}</li>
+              <li><span class="tag green">Open Source</span> {{ t('landing.compare.techNextcloud3') }}</li>
+              <li><span class="tag green">Auto-hébergeable</span> {{ t('landing.compare.techNextcloud4') }}</li>
+              <li><span class="tag gray">E2EE expérimental</span> {{ t('landing.compare.techNextcloud5') }}</li>
+              <li><span class="tag gray">Dépend de l'hébergeur</span> {{ t('landing.compare.techNextcloud6') }}</li>
+              <li><span class="tag gray">Pas de P2P</span> {{ t('landing.compare.techNextcloud7') }}</li>
             </ul>
           </div>
 
@@ -140,13 +135,13 @@
               <span>OpenCloud</span>
             </div>
             <ul class="tech-list">
-              <li><span class="tag yellow">AES-256</span> Chiffrement côté serveur</li>
-              <li><span class="tag red">Côté serveur</span> Clés détenues par l'opérateur</li>
-              <li><span class="tag green">Open Source</span> Fork d'ownCloud, licence Apache 2.0</li>
-              <li><span class="tag green">Auto-hébergeable</span> Déploiement sur infrastructure propre</li>
-              <li><span class="tag gray">Pas d'E2EE natif</span> Aucun chiffrement côté client intégré</li>
-              <li><span class="tag gray">Allemagne</span> Hébergement typiquement DACH</li>
-              <li><span class="tag gray">Pas de P2P</span> Pas de transfert direct entre pairs</li>
+              <li><span class="tag yellow">AES-256</span> {{ t('landing.compare.techOpencloud1') }}</li>
+              <li><span class="tag red">Côté serveur</span> {{ t('landing.compare.techOpencloud2') }}</li>
+              <li><span class="tag green">Open Source</span> {{ t('landing.compare.techOpencloud3') }}</li>
+              <li><span class="tag green">Auto-hébergeable</span> {{ t('landing.compare.techOpencloud4') }}</li>
+              <li><span class="tag gray">Pas d'E2EE natif</span> {{ t('landing.compare.techOpencloud5') }}</li>
+              <li><span class="tag gray">Allemagne</span> {{ t('landing.compare.techOpencloud6') }}</li>
+              <li><span class="tag gray">Pas de P2P</span> {{ t('landing.compare.techOpencloud7') }}</li>
             </ul>
           </div>
 
@@ -155,13 +150,13 @@
               <span>Google Drive</span>
             </div>
             <ul class="tech-list">
-              <li><span class="tag yellow">AES-256</span> Chiffrement en transit et au repos</li>
-              <li><span class="tag red">Côté serveur</span> Google détient et gère toutes les clés</li>
-              <li><span class="tag red">Code fermé</span> Aucun audit indépendant possible</li>
-              <li><span class="tag red">Cloud Act</span> Soumis aux injonctions des autorités américaines</li>
-              <li><span class="tag red">Analyse des données</span> Contenu utilisé pour entraîner des modèles IA</li>
-              <li><span class="tag red">USA</span> Serveurs sous juridiction américaine</li>
-              <li><span class="tag gray">Pas de P2P</span> Pas de transfert direct entre pairs</li>
+              <li><span class="tag yellow">AES-256</span> {{ t('landing.compare.techGoogle1') }}</li>
+              <li><span class="tag red">Côté serveur</span> {{ t('landing.compare.techGoogle2') }}</li>
+              <li><span class="tag red">Code fermé</span> {{ t('landing.compare.techGoogle3') }}</li>
+              <li><span class="tag red">Cloud Act</span> {{ t('landing.compare.techGoogle4') }}</li>
+              <li><span class="tag red">Analyse des données</span> {{ t('landing.compare.techGoogle5') }}</li>
+              <li><span class="tag red">USA</span> {{ t('landing.compare.techGoogle6') }}</li>
+              <li><span class="tag gray">Pas de P2P</span> {{ t('landing.compare.techGoogle7') }}</li>
             </ul>
           </div>
 
@@ -171,14 +166,14 @@
 
     <section class="compare-cta">
       <div class="container">
-        <h2>La solution qui ne peut mathématiquement pas lire vos données</h2>
-        <p>Le chiffrement côté client n'est pas une option — c'est la fondation.</p>
+        <h2>{{ t('landing.compare.ctaTitle') }}</h2>
+        <p>{{ t('landing.compare.ctaSubtitle') }}</p>
         <div class="cta-buttons">
           <router-link to="/login" class="btn btn-primary btn-large">
-            Créer mon compte gratuitement
+            {{ t('landing.compare.ctaCreate') }}
           </router-link>
           <router-link to="/" class="btn btn-outline btn-large">
-            En savoir plus
+            {{ t('landing.compare.ctaMore') }}
           </router-link>
         </div>
       </div>
@@ -187,8 +182,12 @@
 </template>
 
 <script setup>
+import { computed } from 'vue'
+import { useI18n } from 'vue-i18n'
 import LandingNav from '../../components/landing/LandingNav.vue'
 
+const { t } = useI18n()
+
 function cellClass(v) {
   if (v === true)       return 'cell yes'
   if (v === false)      return 'cell no'
@@ -201,75 +200,75 @@ function cellText(v) {
   if (v === true)       return '✓'
   if (v === false)      return '✗'
   if (v === 'partial')  return '~'
-  if (v === 'roadmap')  return 'En dev.'
+  if (v === 'roadmap')  return t('landing.compare.inDev')
   return v
 }
 
-const rows = [
+const rows = computed(() => [
   {
-    feature: 'Chiffrement côté client (Zero-Knowledge)',
-    tooltip: 'Vos fichiers sont chiffrés sur votre appareil avant envoi — le serveur ne voit que du bruit.',
+    feature: t('landing.compare.r1'),
+    tooltip: t('landing.compare.r1tip'),
     highlight: true,
     kagibi: true, proton: true, nextcloud: false, opencloud: false, google: false,
   },
   {
-    feature: 'Transfert P2P chiffré',
-    tooltip: 'Envoi direct de navigateur à navigateur, sans stockage intermédiaire.',
+    feature: t('landing.compare.r2'),
+    tooltip: t('landing.compare.r2tip'),
     kagibi: true, proton: false, nextcloud: false, opencloud: false, google: false,
   },
   {
-    feature: 'Open Source',
+    feature: t('landing.compare.r3'),
     kagibi: true, proton: 'partial', nextcloud: true, opencloud: true, google: false,
   },
   {
-    feature: 'Hébergé en France / Europe',
+    feature: t('landing.compare.r4'),
     kagibi: true, proton: true, nextcloud: 'partial', opencloud: 'partial', google: false,
   },
   {
-    feature: 'Immunisé Cloud Act (USA)',
-    tooltip: 'Les serveurs hors juridiction américaine ne peuvent pas être contraints à livrer des données.',
+    feature: t('landing.compare.r5'),
+    tooltip: t('landing.compare.r5tip'),
     kagibi: true, proton: true, nextcloud: 'partial', opencloud: 'partial', google: false,
   },
   {
-    feature: 'Partage via lien chiffré',
+    feature: t('landing.compare.r6'),
     kagibi: true, proton: true, nextcloud: true, opencloud: true, google: 'partial',
   },
   {
-    feature: 'Conformité RGPD stricte',
+    feature: t('landing.compare.r7'),
     kagibi: true, proton: true, nextcloud: true, opencloud: true, google: 'partial',
   },
   {
-    feature: 'Auto-hébergeable',
-    tooltip: 'Déployer votre propre instance sur votre infrastructure.',
+    feature: t('landing.compare.r8'),
+    tooltip: t('landing.compare.r8tip'),
     kagibi: 'roadmap', proton: false, nextcloud: true, opencloud: true, google: false,
   },
   {
-    feature: 'Licence copyleft (AGPLv3)',
-    tooltip: 'Interdit les forks propriétaires — toute modification doit rester publique.',
+    feature: t('landing.compare.r9'),
+    tooltip: t('landing.compare.r9tip'),
     kagibi: true, proton: false, nextcloud: 'partial', opencloud: 'partial', google: false,
   },
   {
-    feature: 'Accès sans abonnement',
+    feature: t('landing.compare.r10'),
     kagibi: true, proton: true, nextcloud: true, opencloud: true, google: true,
   },
   {
-    feature: 'Application mobile native',
+    feature: t('landing.compare.r11'),
     kagibi: false, proton: true, nextcloud: true, opencloud: true, google: true,
   },
   {
-    feature: 'Application desktop (Windows / Linux)',
+    feature: t('landing.compare.r12'),
     kagibi: 'roadmap', proton: true, nextcloud: true, opencloud: true, google: true,
   },
   {
-    feature: 'Chiffrement des noms de fichiers',
+    feature: t('landing.compare.r13'),
     kagibi: true, proton: true, nextcloud: false, opencloud: false, google: false,
   },
   {
-    feature: 'Aucun accès fournisseur aux données',
+    feature: t('landing.compare.r14'),
     highlight: true,
     kagibi: true, proton: true, nextcloud: false, opencloud: false, google: false,
   },
-]
+])
 </script>
 
 <style scoped>
@@ -675,6 +674,28 @@ const rows = [
     padding: 4rem 0 2rem;
   }
 
+  .compare-hero h1 {
+    font-size: clamp(1.6rem, 5vw, 2.5rem);
+  }
+
+  .table-wrapper {
+    border-radius: 8px;
+  }
+
+  .compare-table th,
+  .compare-table td {
+    padding: 10px 8px;
+    font-size: 0.82rem;
+  }
+
+  .feature-cell {
+    min-width: 120px;
+  }
+
+  .tech-grid {
+    grid-template-columns: 1fr;
+  }
+
   .cta-buttons {
     flex-direction: column;
     align-items: center;
@@ -685,4 +706,24 @@ const rows = [
     justify-content: center;
   }
 }
+
+@media (max-width: 480px) {
+  .container {
+    padding: 0 1rem;
+  }
+
+  .compare-table th,
+  .compare-table td {
+    padding: 8px 6px;
+    font-size: 0.75rem;
+  }
+
+  .th-brand {
+    font-size: 0.75rem;
+  }
+
+  .feature-hint {
+    display: none; /* hide tooltips on very small screens to save space */
+  }
+}
 </style>
diff --git a/frontend/src/views/landing/HomeView.vue b/frontend/src/views/landing/HomeView.vue
index 524350b3..19ae40dd 100644
--- a/frontend/src/views/landing/HomeView.vue
+++ b/frontend/src/views/landing/HomeView.vue
@@ -9,50 +9,46 @@
     <section class="hero">
       <div class="container">
         <div class="hero-content">
-          <div class="hero-eyebrow">Cloud souverain · Open Source · Français</div>
+          <div class="hero-eyebrow">{{ t('landing.home.eyebrow') }}</div>
           <h1 class="hero-title">
-            Le cloud qui<br>
-            <span class="highlight">ne peut pas lire vos données</span>
+            {{ t('landing.home.titleLine1') }}<br>
+            <span class="highlight">{{ t('landing.home.titleHighlight') }}</span>
           </h1>
-          <p class="hero-subtitle">
-            Kagibi chiffre vos fichiers sur votre appareil avant tout envoi.
-            Ni nous, ni personne ne peut y accéder — mathématiquement.
-            Hébergé en France, conforme RGPD, immunisé au Cloud Act.
-          </p>
+          <p class="hero-subtitle">{{ t('landing.home.subtitle') }}</p>
           <div class="hero-cta">
             <router-link to="/dashboard" class="btn btn-primary">
-              Accéder au Drive
-            </router-link>
-            <router-link to="/transfer" class="btn btn-secondary">
-              Transfert P2P instantané
+              {{ t('landing.home.ctaDrive') }}
             </router-link>
+            <a :href="sendBaseUrl" class="btn btn-secondary">
+              {{ t('landing.home.ctaP2P') }}
+            </a>
           </div>
           <div class="trust-badges">
             <div class="badge">
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <path d="M21 10c0 7-9 13-9 13s-9-6-9-13a9 9 0 0 1 18 0z"></path>
               </svg>
-              Hébergé en France
+              {{ t('landing.home.badgeFrance') }}
             </div>
             <div class="badge">
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <polyline points="16 18 22 12 16 6"></polyline>
                 <polyline points="8 6 2 12 8 18"></polyline>
               </svg>
-              Open Source AGPLv3
+              {{ t('landing.home.badgeOpenSource') }}
             </div>
             <div class="badge">
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
                 <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
               </svg>
-              Zero-Knowledge
+              {{ t('landing.home.badgeZK') }}
             </div>
             <div class="badge">
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"></path>
               </svg>
-              Immunisé Cloud Act
+              {{ t('landing.home.badgeCloudAct') }}
             </div>
           </div>
         </div>
@@ -65,17 +61,9 @@
         <div class="opensource-inner">
           <div class="opensource-text">
             <div class="license-pill">AGPLv3</div>
-            <h2>Un projet 100% open source</h2>
-            <p>
-              Kagibi est publié sous licence <strong>GNU AGPLv3</strong> — la licence copyleft la plus forte.
-              Toute modification déployée en production doit être partagée publiquement.
-              Aucune version propriétaire cachée, aucun backdoor possible.
-            </p>
-            <p>
-              Le code est librement auditable, forçable et améliorable par tous.
-              Contribuez à la sécurité, signalez des bugs, proposez des fonctionnalités —
-              chaque Pull Request est la bienvenue.
-            </p>
+            <h2>{{ t('landing.home.ossTitle') }}</h2>
+            <p>{{ t('landing.home.ossPara1') }}</p>
+            <p>{{ t('landing.home.ossPara2') }}</p>
             <div class="opensource-actions">
               <a
                 href="https://github.com/Buuuntyyy/Kagibi"
@@ -86,7 +74,7 @@
                 <svg viewBox="0 0 24 24" fill="currentColor">
                   <path d="M12 0C5.37 0 0 5.37 0 12c0 5.31 3.435 9.795 8.205 11.385.6.105.825-.255.825-.57 0-.285-.015-1.23-.015-2.235-3.015.555-3.795-.735-4.035-1.41-.135-.345-.72-1.41-1.23-1.695-.42-.225-1.02-.78-.015-.795.945-.015 1.62.87 1.845 1.23 1.08 1.815 2.805 1.305 3.495.99.105-.78.42-1.305.765-1.605-2.67-.3-5.46-1.335-5.46-5.925 0-1.305.465-2.385 1.23-3.225-.12-.3-.54-1.53.12-3.18 0 0 1.005-.315 3.3 1.23.96-.27 1.98-.405 3-.405s2.04.135 3 .405c2.295-1.56 3.3-1.23 3.3-1.23.66 1.65.24 2.88.12 3.18.765.84 1.23 1.905 1.23 3.225 0 4.605-2.805 5.625-5.475 5.925.435.375.81 1.095.81 2.22 0 1.605-.015 2.895-.015 3.3 0 .315.225.69.825.57A12.02 12.02 0 0 0 24 12c0-6.63-5.37-12-12-12z"/>
                 </svg>
-                Voir le code source
+                {{ t('landing.home.ossViewCode') }}
               </a>
               <a
                 href="https://github.com/Buuuntyyy/Kagibi"
@@ -109,7 +97,7 @@
                   <polyline points="8 6 2 12 8 18"></polyline>
                 </svg>
               </div>
-              <div class="stat-label">Licence</div>
+              <div class="stat-label">{{ t('landing.home.ossLicenceLabel') }}</div>
               <div class="stat-value">AGPLv3</div>
             </div>
             <div class="stat-card">
@@ -120,8 +108,8 @@
                   <path d="M2 12h2M20 12h2M12 2v2M12 20v2"></path>
                 </svg>
               </div>
-              <div class="stat-label">Contributions</div>
-              <div class="stat-value">Ouvertes</div>
+              <div class="stat-label">{{ t('landing.home.ossContribLabel') }}</div>
+              <div class="stat-value">{{ t('landing.home.ossContribValue') }}</div>
             </div>
             <div class="stat-card">
               <div class="stat-icon">
@@ -129,7 +117,7 @@
                   <path d="M9 19c-5 1.5-5-2.5-7-3m14 6v-3.87a3.37 3.37 0 0 0-.94-2.61c3.14-.35 6.44-1.54 6.44-7A5.44 5.44 0 0 0 20 4.77 5.07 5.07 0 0 0 19.91 1S18.73.65 16 2.48a13.38 13.38 0 0 0-7 0C6.27.65 5.09 1 5.09 1A5.07 5.07 0 0 0 5 4.77a5.44 5.44 0 0 0-1.5 3.78c0 5.42 3.3 6.61 6.44 7A3.37 3.37 0 0 0 9 18.13V22"></path>
                 </svg>
               </div>
-              <div class="stat-label">Plateforme</div>
+              <div class="stat-label">{{ t('landing.home.ossPlatformLabel') }}</div>
               <div class="stat-value">GitHub</div>
             </div>
           </div>
@@ -140,13 +128,13 @@
     <!-- How it works -->
     <section class="how-it-works">
       <div class="container">
-        <h2 class="section-title">Comment ça fonctionne ?</h2>
-        <p class="section-subtitle">Trois étapes, zéro compromis sur la vie privée.</p>
+        <h2 class="section-title">{{ t('landing.home.howTitle') }}</h2>
+        <p class="section-subtitle">{{ t('landing.home.howSubtitle') }}</p>
         <div class="steps-grid">
           <div class="step">
             <div class="step-number">1</div>
-            <h3>Chiffrement local</h3>
-            <p>Vos fichiers sont chiffrés avec AES-256-GCM directement dans votre navigateur. La clé ne quitte jamais votre appareil.</p>
+            <h3>{{ t('landing.home.step1Title') }}</h3>
+            <p>{{ t('landing.home.step1Desc') }}</p>
           </div>
           <div class="step-arrow">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
@@ -156,8 +144,8 @@
           </div>
           <div class="step">
             <div class="step-number">2</div>
-            <h3>Stockage sécurisé</h3>
-            <p>Seul le flux chiffré arrive sur nos serveurs en France. Même avec un accès complet à l'infrastructure, personne ne peut déchiffrer vos fichiers.</p>
+            <h3>{{ t('landing.home.step2Title') }}</h3>
+            <p>{{ t('landing.home.step2Desc') }}</p>
           </div>
           <div class="step-arrow">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
@@ -167,8 +155,8 @@
           </div>
           <div class="step">
             <div class="step-number">3</div>
-            <h3>Accès exclusif</h3>
-            <p>Seul vous pouvez déchiffrer et lire vos données. Partagez en toute sécurité via liens chiffrés ou transfert P2P direct.</p>
+            <h3>{{ t('landing.home.step3Title') }}</h3>
+            <p>{{ t('landing.home.step3Desc') }}</p>
           </div>
         </div>
       </div>
@@ -177,8 +165,8 @@
     <!-- Features Section -->
     <section class="features">
       <div class="container">
-        <h2 class="section-title">Tout ce dont vous avez besoin</h2>
-        <p class="section-subtitle">Une plateforme complète, construite sur des fondations cryptographiques solides.</p>
+        <h2 class="section-title">{{ t('landing.home.featTitle') }}</h2>
+        <p class="section-subtitle">{{ t('landing.home.featSubtitle') }}</p>
         <div class="features-grid">
           <div class="feature-card">
             <div class="feature-icon">
@@ -187,11 +175,8 @@
                 <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
               </svg>
             </div>
-            <h3>Zero-Knowledge garanti</h3>
-            <p>
-              Chiffrement AES-256-GCM côté client. Vos clés ne quittent jamais votre appareil.
-              Nos serveurs ne voient que du bruit chiffré — impossible autrement.
-            </p>
+            <h3>{{ t('landing.home.feat1Title') }}</h3>
+            <p>{{ t('landing.home.feat1Desc') }}</p>
           </div>
 
           <div class="feature-card">
@@ -201,11 +186,8 @@
                 <polygon points="22 2 15 22 11 13 2 9 22 2"></polygon>
               </svg>
             </div>
-            <h3>Transfert P2P jusqu'à 10 Go</h3>
-            <p>
-              Envoyez de gros fichiers en direct, de navigateur à navigateur.
-              Aucun stockage intermédiaire, vitesse maximale, aucune trace sur nos serveurs.
-            </p>
+            <h3>{{ t('landing.home.feat2Title') }}</h3>
+            <p>{{ t('landing.home.feat2Desc') }}</p>
           </div>
 
           <div class="feature-card">
@@ -214,11 +196,8 @@
                 <path d="M21 10c0 7-9 13-9 13s-9-6-9-13a9 9 0 0 1 18 0z"></path>
               </svg>
             </div>
-            <h3>Souveraineté numérique</h3>
-            <p>
-              Infrastructure 100% OVH France (Gravelines). Hors juridiction américaine.
-              Conformité RGPD stricte. Vos données ne quittent jamais l'Europe.
-            </p>
+            <h3>{{ t('landing.home.feat3Title') }}</h3>
+            <p>{{ t('landing.home.feat3Desc') }}</p>
           </div>
 
           <div class="feature-card">
@@ -228,12 +207,8 @@
                 <polyline points="8 6 2 12 8 18"></polyline>
               </svg>
             </div>
-            <h3>100% vérifiable</h3>
-            <p>
-              Code source intégralement publié sous licence AGPLv3.
-              Auditez vous-même ce que fait Kagibi de vos données.
-              La confiance ne devrait pas être aveugle.
-            </p>
+            <h3>{{ t('landing.home.feat4Title') }}</h3>
+            <p>{{ t('landing.home.feat4Desc') }}</p>
           </div>
         </div>
       </div>
@@ -242,15 +217,15 @@
     <!-- Final CTA -->
     <section class="final-cta">
       <div class="container">
-        <h2>Prêt à reprendre le contrôle ?</h2>
-        <p>Rejoignez Kagibi et stockez vos fichiers sans jamais compromettre votre vie privée.</p>
+        <h2>{{ t('landing.home.ctaTitle') }}</h2>
+        <p>{{ t('landing.home.ctaSubtitle') }}</p>
         <div class="cta-buttons">
           <router-link to="/login" class="btn btn-primary btn-large">
-            Créer mon compte gratuitement
-          </router-link>
-          <router-link to="/transfer" class="btn btn-outline btn-large">
-            Essayer le transfert P2P
+            {{ t('landing.home.ctaCreate') }}
           </router-link>
+          <a :href="sendBaseUrl" class="btn btn-outline btn-large">
+            {{ t('landing.home.ctaTryP2P') }}
+          </a>
         </div>
       </div>
     </section>
@@ -259,7 +234,11 @@
 
 <script setup>
 import { onMounted } from 'vue'
+import { useI18n } from 'vue-i18n'
 import LandingNav from '../../components/landing/LandingNav.vue'
+import { sendBaseUrl } from '../../composables/useSubdomain'
+
+const { t } = useI18n()
 
 onMounted(() => {
   const observerOptions = {
@@ -829,8 +808,8 @@ onMounted(() => {
   }
 
   .stat-card {
-    min-width: 140px;
-    flex: 1;
+    min-width: 0;
+    flex: 1 1 140px;
   }
 
   .steps-grid {
@@ -842,4 +821,43 @@ onMounted(() => {
     transform: rotate(90deg);
   }
 }
+
+@media (max-width: 480px) {
+  .hero-title {
+    font-size: clamp(1.6rem, 7vw, 2.2rem);
+  }
+
+  .container {
+    padding: 0 1rem;
+  }
+
+  .hero-section {
+    padding: 4rem 0 2rem;
+  }
+
+  .step {
+    min-width: 0;
+    width: 100%;
+    padding: 1.25rem 1rem;
+  }
+
+  .opensource-stats {
+    flex-direction: column;
+  }
+
+  .stat-card {
+    min-width: 0;
+    width: 100%;
+    flex: none;
+  }
+
+  .cta-section {
+    padding: 3rem 0;
+  }
+
+  .features-grid,
+  .opensource-inner {
+    gap: 1rem;
+  }
+}
 </style>
diff --git a/frontend/src/views/landing/PricingView.vue b/frontend/src/views/landing/PricingView.vue
index 78129056..4d14041d 100644
--- a/frontend/src/views/landing/PricingView.vue
+++ b/frontend/src/views/landing/PricingView.vue
@@ -443,5 +443,31 @@ import LandingNav from '../../components/landing/LandingNav.vue'
   .pricing-grid-full {
     grid-template-columns: 1fr;
   }
+
+  .pricing-hero {
+    padding: 3rem 1rem;
+  }
+
+  .pricing-hero h1 {
+    font-size: clamp(1.6rem, 5vw, 3rem);
+  }
+
+  .pricing-hero p {
+    font-size: 1rem;
+  }
+}
+
+@media (max-width: 480px) {
+  .pricing-hero {
+    padding: 2rem 1rem;
+  }
+
+  .plan-card {
+    padding: 1.25rem;
+  }
+
+  .plan-price {
+    font-size: clamp(1.8rem, 7vw, 3rem);
+  }
 }
 </style>
diff --git a/frontend/src/views/landing/SecurityView.vue b/frontend/src/views/landing/SecurityView.vue
new file mode 100644
index 00000000..0691ddf1
--- /dev/null
+++ b/frontend/src/views/landing/SecurityView.vue
@@ -0,0 +1,2166 @@
+<!-- Copyright (C) 2025-2026  Buuuntyyy -->
+<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
+
+<template>
+  <div class="security-page">
+    <LandingNav />
+
+    <!-- Hero -->
+    <section class="sec-hero">
+      <div class="container">
+        <div class="hero-eyebrow">{{ t('landing.security.eyebrow') }}</div>
+        <h1>
+          {{ t('landing.security.title1') }}<br>
+          <span class="highlight">{{ t('landing.security.titleHighlight') }}</span>
+        </h1>
+        <p class="hero-sub">{{ t('landing.security.heroSub') }}</p>
+        <div class="hero-pill-row">
+          <span class="pill green">AES-256-GCM</span>
+          <span class="pill blue">Argon2id</span>
+          <span class="pill purple">RSA-OAEP 4096</span>
+          <span class="pill orange">WebCrypto API</span>
+          <span class="pill teal">Service Worker</span>
+        </div>
+      </div>
+    </section>
+
+    <!-- Sommaire flottant -->
+    <aside class="toc-sidebar">
+      <div class="toc-panel" :class="{ folded: !tocNavOpen }">
+        <div class="toc-title" @click="tocNavOpen = !tocNavOpen">
+          {{ t('landing.security.toc') }}
+          <svg class="toc-chevron" :class="{ open: tocNavOpen }" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5"><polyline points="6 9 12 15 18 9"/></svg>
+        </div>
+        <div class="toc-nav-wrapper" :class="{ hidden: !tocNavOpen }">
+          <nav>
+            <a
+              v-for="item in tocItems"
+              :key="item.id"
+              class="toc-item"
+              :class="{ active: activeSection === item.id }"
+              @click="scrollTo(item.id)"
+            >
+              <span class="toc-num">{{ item.num }}</span>
+              <span class="toc-label">{{ item.label }}</span>
+            </a>
+          </nav>
+        </div>
+      </div>
+    </aside>
+
+    <!-- Principe ZK -->
+    <section id="principe" class="section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec1Label') }}</div>
+        <h2>{{ t('landing.security.sec1Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec1Sub') }}</p>
+
+        <div class="zk-comparison">
+          <div class="cmp-card bad">
+            <div class="cmp-header">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10.29 3.86L1.82 18a2 2 0 001.71 3h16.94a2 2 0 001.71-3L13.71 3.86a2 2 0 00-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>
+              {{ t('landing.security.cmpBadCloud') }}
+            </div>
+            <div class="cmp-flow">
+              <div class="cmp-node user-node">{{ t('landing.security.cmpYourFile') }}</div>
+              <div class="cmp-arrow bad-arrow">
+                <span class="arrow-label">{{ t('landing.security.cmpFilePlain') }}</span>
+                <svg viewBox="0 0 60 20"><path d="M0 10 L50 10" stroke="#ef4444" stroke-width="2"/><polygon points="50,5 60,10 50,15" fill="#ef4444"/></svg>
+              </div>
+              <div class="cmp-node server-bad">{{ t('landing.security.cmpServerBad') }}<br><small>{{ t('landing.security.cmpServerBadSub') }}</small></div>
+              <div class="cmp-arrow bad-arrow">
+                <svg viewBox="0 0 60 20"><path d="M0 10 L50 10" stroke="#ef4444" stroke-width="2"/><polygon points="50,5 60,10 50,15" fill="#ef4444"/></svg>
+              </div>
+              <div class="cmp-node">{{ t('landing.security.cmpStorage') }}</div>
+            </div>
+            <p class="cmp-note">{{ t('landing.security.cmpBadNote') }}</p>
+          </div>
+
+          <div class="cmp-card good">
+            <div class="cmp-header">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M22 11.08V12a10 10 0 11-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>
+              {{ t('landing.security.cmpGoodCloud') }}
+            </div>
+            <div class="cmp-flow">
+              <div class="cmp-node user-node">{{ t('landing.security.cmpYourFile') }}</div>
+              <div class="cmp-arrow good-arrow">
+                <span class="arrow-label arrow-label-top">{{ t('landing.security.cmpLocalEnc') }}</span>
+                <svg viewBox="0 0 60 20"><path d="M0 10 L50 10" stroke="#22c55e" stroke-width="2"/><polygon points="50,5 60,10 50,15" fill="#22c55e"/></svg>
+              </div>
+              <div class="cmp-node encrypted-node">{{ t('landing.security.cmpEncrypted') }}<br><small>(AES-256)</small></div>
+              <div class="cmp-arrow good-arrow">
+                <span class="arrow-label">{{ t('landing.security.cmpOpaqueBytes') }}</span>
+                <svg viewBox="0 0 60 20"><path d="M0 10 L50 10" stroke="#22c55e" stroke-width="2"/><polygon points="50,5 60,10 50,15" fill="#22c55e"/></svg>
+              </div>
+              <div class="cmp-node server-good">{{ t('landing.security.cmpServerGood') }}<br><small>{{ t('landing.security.cmpServerGoodSub') }}</small></div>
+            </div>
+            <p class="cmp-note">{{ t('landing.security.cmpGoodNote') }}</p>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Hiérarchie des clés -->
+    <section id="hierarchie" class="section dark-section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec2Label') }}</div>
+        <h2>{{ t('landing.security.sec2Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec2Sub') }}</p>
+
+        <div class="key-hierarchy">
+          <!-- Niveau 0: Mot de passe -->
+          <div class="kh-level">
+            <div class="kh-node kh-password" :class="{ active: activeKey === 'password' }" @mouseenter="activeKey = 'password'" @mouseleave="activeKey = null">
+              <div class="kh-icon">🔑</div>
+              <div class="kh-label">{{ t('landing.security.khPasswordLabel') }}</div>
+              <div class="kh-sub">{{ t('landing.security.khPasswordSub') }}</div>
+              <div class="kh-tooltip">
+                <strong>{{ t('landing.security.khPasswordLabel') }}</strong> — {{ t('landing.security.khPasswordTooltipBody') }}
+              </div>
+            </div>
+            <div class="kh-connector">
+              <div class="kh-algo-badge">Argon2id · 64 MB · 4 passes</div>
+              <div class="kh-line animated-line"></div>
+            </div>
+          </div>
+
+          <!-- Niveau 1: KEK -->
+          <div class="kh-level">
+            <div class="kh-node kh-kek" :class="{ active: activeKey === 'kek' }" @mouseenter="activeKey = 'kek'" @mouseleave="activeKey = null">
+              <div class="kh-icon">🗝️</div>
+              <div class="kh-label">KEK</div>
+              <div class="kh-sub">{{ t('landing.security.khKekSub') }}</div>
+              <div class="kh-tooltip">
+                <strong>KEK (Key Encryption Key)</strong> — {{ t('landing.security.khKekTooltipBody') }}
+              </div>
+            </div>
+            <div class="kh-connector">
+              <div class="kh-algo-badge">AES-256-GCM (unwrap)</div>
+              <div class="kh-line animated-line"></div>
+            </div>
+          </div>
+
+          <!-- Niveau 2: Master Key -->
+          <div class="kh-level">
+            <div class="kh-node kh-master" :class="{ active: activeKey === 'master' }" @mouseenter="activeKey = 'master'" @mouseleave="activeKey = null">
+              <div class="kh-icon">🏛️</div>
+              <div class="kh-label">Master Key</div>
+              <div class="kh-sub">{{ t('landing.security.khMasterSub') }}</div>
+              <div class="kh-tooltip">
+                <strong>Master Key</strong> — {{ t('landing.security.khMasterTooltipBody1') }}<code>extractable: false</code>{{ t('landing.security.khMasterTooltipBody2') }}
+              </div>
+            </div>
+            <div class="kh-branches">
+              <div class="kh-branch-line"></div>
+              <div class="kh-branch-row">
+                <div class="kh-branch-col">
+                  <div class="kh-algo-badge small">AES-GCM wrap</div>
+                  <div class="kh-line-short animated-line"></div>
+                  <div class="kh-node kh-rsa" :class="{ active: activeKey === 'rsa' }" @mouseenter="activeKey = 'rsa'" @mouseleave="activeKey = null">
+                    <div class="kh-icon small">🔐</div>
+                    <div class="kh-label small">{{ t('landing.security.khRsaLabel') }}</div>
+                    <div class="kh-sub">{{ t('landing.security.khRsaSub1') }}<br>{{ t('landing.security.khRsaSub2') }}</div>
+                    <div class="kh-tooltip kh-tooltip-left">
+                      <strong>{{ t('landing.security.khRsaTooltipTitle') }}</strong> — {{ t('landing.security.khRsaTooltipBody') }}
+                    </div>
+                  </div>
+                </div>
+                <div class="kh-branch-col">
+                  <div class="kh-algo-badge small">AES-GCM wrap</div>
+                  <div class="kh-line-short animated-line"></div>
+                  <div class="kh-node kh-folder" :class="{ active: activeKey === 'folder' }" @mouseenter="activeKey = 'folder'" @mouseleave="activeKey = null">
+                    <div class="kh-icon small">📁</div>
+                    <div class="kh-label small">{{ t('landing.security.khFolderLabel') }}</div>
+                    <div class="kh-sub">{{ t('landing.security.khFolderSub1') }}<br>{{ t('landing.security.khFolderSub2') }}</div>
+                    <div class="kh-tooltip">
+                      <strong>{{ t('landing.security.khFolderTooltipTitle') }}</strong> — {{ t('landing.security.khFolderTooltipBody') }}
+                    </div>
+                  </div>
+                  <div class="kh-line-short animated-line"></div>
+                  <div class="kh-node kh-file" :class="{ active: activeKey === 'file' }" @mouseenter="activeKey = 'file'" @mouseleave="activeKey = null">
+                    <div class="kh-icon small">📄</div>
+                    <div class="kh-label small">{{ t('landing.security.khFileLabel') }}</div>
+                    <div class="kh-sub">{{ t('landing.security.khFileSub1') }}<br>{{ t('landing.security.khFileSub2') }}</div>
+                    <div class="kh-tooltip">
+                      <strong>{{ t('landing.security.khFileTooltipTitle') }}</strong> — {{ t('landing.security.khFileTooltipBody') }}
+                    </div>
+                  </div>
+                </div>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Inscription animée -->
+    <section id="inscription" class="section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec3Label') }}</div>
+        <h2>{{ t('landing.security.sec3Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec3Sub') }}</p>
+
+        <div class="flow-container">
+          <div class="flow-steps">
+            <div
+              v-for="(step, i) in registrationSteps"
+              :key="i"
+              class="flow-step"
+              :class="{ active: regStep === i, done: regStep > i }"
+              @click="regStep = i"
+            >
+              <div class="step-num">{{ i + 1 }}</div>
+              <div class="step-content">
+                <div class="step-title">{{ step.title }}</div>
+                <div class="step-desc">{{ step.desc }}</div>
+              </div>
+            </div>
+          </div>
+
+          <div class="flow-visual">
+            <!-- Step 0: password → argon2 -->
+            <div v-if="regStep === 0" class="anim-scene">
+              <div class="anim-node input-node">
+                <div class="node-icon">⌨️</div>
+                <div class="node-label">{{ t('landing.security.rfInputLabel') }}</div>
+                <div class="node-sub">{{ t('landing.security.rfInputSub') }}</div>
+              </div>
+              <div class="anim-pipe">
+                <div class="pipe-label">Web Worker</div>
+                <div class="anim-packet pw-packet" :class="{ flowing: regStep === 0 }">pw</div>
+                <div class="pipe-algo">Argon2id<br>64 MB · 4 passes<br>{{ t('landing.security.rfArgonSalt') }}</div>
+              </div>
+              <div class="anim-node kek-node">
+                <div class="node-icon">🗝️</div>
+                <div class="node-label">KEK</div>
+                <div class="node-sub">{{ t('landing.security.rfKekSub') }}</div>
+              </div>
+            </div>
+
+            <!-- Step 1: generate master key -->
+            <div v-if="regStep === 1" class="anim-scene">
+              <div class="anim-node rng-node">
+                <div class="node-icon">🎲</div>
+                <div class="node-label">CSPRNG</div>
+                <div class="node-sub">crypto.getRandomValues()</div>
+              </div>
+              <div class="anim-pipe">
+                <div class="anim-packet mk-packet" :class="{ flowing: regStep === 1 }">256b</div>
+                <div class="pipe-algo">{{ t('landing.security.rfMkGenLine1') }}<br>non-extractable</div>
+              </div>
+              <div class="anim-node master-node">
+                <div class="node-icon">🏛️</div>
+                <div class="node-label">Master Key</div>
+                <div class="node-sub">{{ t('landing.security.rfMkSub') }}</div>
+              </div>
+            </div>
+
+            <!-- Step 2: wrap master key -->
+            <div v-if="regStep === 2" class="anim-scene wrap-scene">
+              <div class="wrap-inputs">
+                <div class="anim-node small-node kek-node">
+                  <div class="node-icon">🗝️</div>
+                  <div class="node-label">KEK</div>
+                </div>
+                <div class="anim-node small-node master-node">
+                  <div class="node-icon">🏛️</div>
+                  <div class="node-label">Master Key</div>
+                </div>
+              </div>
+              <div class="wrap-arrow">
+                <div class="anim-packet enc-packet" :class="{ flowing: regStep === 2 }">AES-GCM<br>wrap</div>
+                <svg viewBox="0 0 80 40" class="wrap-svg"><path d="M0 20 Q40 5 80 20" stroke="var(--primary-color)" stroke-width="2" fill="none" stroke-dasharray="4 2"/></svg>
+              </div>
+              <div class="anim-node encrypted-master-node">
+                <div class="node-icon">🔒</div>
+                <div class="node-label">encrypted_master_key</div>
+                <div class="node-sub">{{ t('landing.security.rfEncMkSub') }}</div>
+              </div>
+            </div>
+
+            <!-- Step 3: RSA pair -->
+            <div v-if="regStep === 3" class="anim-scene">
+              <div class="anim-node rng-node">
+                <div class="node-icon">🎲</div>
+                <div class="node-label">CSPRNG</div>
+              </div>
+              <div class="anim-pipe">
+                <div class="anim-packet rsa-packet" :class="{ flowing: regStep === 3 }">4096b</div>
+                <div class="pipe-algo">RSA-OAEP<br>SHA-256</div>
+              </div>
+              <div class="rsa-split">
+                <div class="anim-node pub-node">
+                  <div class="node-icon">🔓</div>
+                  <div class="node-label">{{ t('landing.security.rfPubKeyLabel') }}</div>
+                  <div class="node-sub">{{ t('landing.security.rfPubKeySub') }}</div>
+                </div>
+                <div class="anim-node priv-node">
+                  <div class="node-icon">🔐</div>
+                  <div class="node-label">{{ t('landing.security.rfPrivKeyLabel') }}</div>
+                  <div class="node-sub">{{ t('landing.security.rfPrivKeySub1') }}<br>{{ t('landing.security.rfPrivKeySub2') }}</div>
+                </div>
+              </div>
+            </div>
+
+            <!-- Step 4: recovery -->
+            <div v-if="regStep === 4" class="anim-scene">
+              <div class="anim-node rng-node">
+                <div class="node-icon">🎲</div>
+                <div class="node-label">{{ t('landing.security.rfRecoveryLabel') }}</div>
+                <div class="node-sub">{{ t('landing.security.rfRecoverySub') }}</div>
+              </div>
+              <div class="recovery-split">
+                <div class="rec-branch">
+                  <div class="branch-label">SHA-256 (hash)</div>
+                  <div class="anim-node hash-node">
+                    <div class="node-icon">🔏</div>
+                    <div class="node-label">recovery_hash</div>
+                    <div class="node-sub">{{ t('landing.security.rfRecoveryHashSub') }}</div>
+                  </div>
+                </div>
+                <div class="rec-branch">
+                  <div class="branch-label">Argon2id → KEK recovery → AES-GCM wrap</div>
+                  <div class="anim-node enc-rec-node">
+                    <div class="node-icon">🔒</div>
+                    <div class="node-label">encrypted_master_key_recovery</div>
+                    <div class="node-sub">{{ t('landing.security.rfRecoveryEncSub') }}</div>
+                  </div>
+                </div>
+              </div>
+            </div>
+
+            <!-- Step 5: what goes to server -->
+            <div v-if="regStep === 5" class="anim-scene server-scene">
+              <div class="server-sends">
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>email</span>
+                </div>
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>{{ t('landing.security.rfSaltLabel') }}</span>
+                </div>
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>encrypted_master_key</span>
+                </div>
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>public_key RSA (public)</span>
+                </div>
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>encrypted_private_key</span>
+                </div>
+                <div class="send-item safe">
+                  <span class="send-icon">✅</span>
+                  <span>recovery_hash</span>
+                </div>
+                <div class="send-item never">
+                  <span class="send-icon">🚫</span>
+                  <span>{{ t('landing.security.rfNeverPassword') }}</span>
+                </div>
+                <div class="send-item never">
+                  <span class="send-icon">🚫</span>
+                  <span>{{ t('landing.security.rfNeverMk') }}</span>
+                </div>
+                <div class="send-item never">
+                  <span class="send-icon">🚫</span>
+                  <span>{{ t('landing.security.rfNeverKek') }}</span>
+                </div>
+              </div>
+              <div class="server-box">
+                <div class="server-icon">🖥️</div>
+                <div class="server-label">{{ t('landing.security.rfServerLabel') }}</div>
+                <div class="server-note">{{ t('landing.security.rfServerNote1') }}<br>{{ t('landing.security.rfServerNote2') }}</div>
+              </div>
+            </div>
+          </div>
+        </div>
+
+        <div class="step-nav">
+          <button class="step-btn" @click="regStep = Math.max(0, regStep - 1)" :disabled="regStep === 0">{{ t('landing.security.regPrev') }}</button>
+          <span class="step-counter">{{ regStep + 1 }} / {{ registrationSteps.length }}</span>
+          <button class="step-btn" @click="regStep = Math.min(registrationSteps.length - 1, regStep + 1)" :disabled="regStep === registrationSteps.length - 1">{{ t('landing.security.regNext') }}</button>
+        </div>
+      </div>
+    </section>
+
+    <!-- Upload fichier animé -->
+    <section id="upload" class="section dark-section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec4Label') }}</div>
+        <h2>{{ t('landing.security.sec4Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec4Sub') }}</p>
+
+        <div class="upload-demo">
+          <div class="upload-file-bar">
+            <div class="file-icon">📄</div>
+            <div class="file-info">
+              <div class="file-name">document.pdf <span class="file-size">35 Mo</span></div>
+              <div class="chunk-bar">
+                <div
+                  v-for="(chunk, i) in chunks"
+                  :key="i"
+                  class="chunk"
+                  :class="{ encrypting: uploadStep === i && uploadPhase === 'encrypting', encrypted: uploadStep === i && uploadPhase === 'uploading', uploaded: uploadedChunks.includes(i) }"
+                >
+                  <span class="chunk-num">{{ i + 1 }}</span>
+                </div>
+              </div>
+              <div class="chunk-legend">
+                <span class="legend-dot plain"></span>{{ t('landing.security.uploadWaiting') }}
+                <span class="legend-dot encrypting"></span>{{ t('landing.security.uploadEncrypting') }}
+                <span class="legend-dot encrypted"></span>{{ t('landing.security.uploadEncrypted') }}
+                <span class="legend-dot uploaded"></span>{{ t('landing.security.uploadUploaded') }}
+              </div>
+            </div>
+          </div>
+
+          <div class="upload-pipeline">
+            <div class="pipeline-stage" :class="{ active: uploadPhase === 'reading' || uploadPhase === 'encrypting' }">
+              <div class="stage-icon">💾</div>
+              <div class="stage-label">{{ t('landing.security.uploadLocalRead') }}</div>
+              <div class="stage-sub">FileReader API</div>
+            </div>
+            <div class="pipeline-arrow" :class="{ active: uploadPhase === 'encrypting' }">→</div>
+            <div class="pipeline-stage" :class="{ active: uploadPhase === 'encrypting' }">
+              <div class="stage-icon">⚙️</div>
+              <div class="stage-label">{{ t('landing.security.uploadWorker') }}</div>
+              <div class="stage-sub">crypto.worker.js</div>
+              <div class="nonce-box" v-if="uploadPhase === 'encrypting'">
+                <span class="nonce-label">Nonce chunk {{ uploadStep + 1 }}</span>
+                <span class="nonce-val">{{ currentNonce }}</span>
+              </div>
+            </div>
+            <div class="pipeline-arrow" :class="{ active: uploadPhase === 'upload' }">→</div>
+            <div class="pipeline-stage" :class="{ active: uploadPhase === 'upload' }">
+              <div class="stage-icon">☁️</div>
+              <div class="stage-label">OVH S3</div>
+              <div class="stage-sub">{{ t('landing.security.uploadOvh') }}</div>
+            </div>
+          </div>
+
+          <div class="chunk-detail" v-if="uploadPhase === 'encrypting'">
+            <div class="chunk-detail-title">{{ t('landing.security.uploadChunkDetail', { n: uploadStep + 1 }) }}</div>
+            <div class="chunk-bytes">
+              <div class="byte-block nonce-block">Nonce<br>{{ t('landing.security.uploadNonceSize') }}</div>
+              <div class="byte-block cipher-block">Ciphertext AES-256-GCM<br>{{ t('landing.security.uploadCipherSize') }}</div>
+              <div class="byte-block tag-block">Auth Tag<br>{{ t('landing.security.uploadTagSize') }}</div>
+            </div>
+          </div>
+
+          <div class="upload-controls">
+            <button class="step-btn primary" @click="advanceUpload" :disabled="uploadPhase === 'done'">
+              {{ uploadBtnLabel }}
+            </button>
+            <button class="step-btn" @click="resetUpload" :disabled="uploadPhase === 'idle'">{{ t('landing.security.uploadReset') }}</button>
+          </div>
+          <div class="upload-progress-hint" v-if="uploadPhase !== 'idle' && uploadPhase !== 'done'">
+            {{ t('landing.security.uploadChunkProgress', { n: uploadStep + 1, total: chunks.length }) }}
+            <span v-if="uploadPhase === 'encrypting'">{{ t('landing.security.uploadEncProgress') }}</span>
+            <span v-else>{{ t('landing.security.uploadS3Progress') }}</span>
+          </div>
+          <div class="upload-done-msg" v-if="uploadPhase === 'done'">
+            {{ t('landing.security.uploadDone', { n: chunks.length }) }}
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Partage RSA -->
+    <section id="partage" class="section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec5Label') }}</div>
+        <h2>{{ t('landing.security.sec5Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec5Sub') }}</p>
+
+        <div class="share-flow">
+          <div class="share-actor alice">
+            <div class="actor-avatar">👩</div>
+            <div class="actor-name">Alice</div>
+            <div class="actor-device">{{ t('landing.security.actorBrowser') }}</div>
+          </div>
+
+          <div class="share-steps-col">
+            <div
+              v-for="(step, i) in shareSteps"
+              :key="i"
+              class="share-step"
+              :class="{ active: shareStep === i, done: shareStep > i }"
+            >
+              <div class="share-step-num">{{ i + 1 }}</div>
+              <div class="share-step-body">
+                <div class="share-step-actor" :class="step.actor">{{ step.actor === 'alice' ? t('landing.security.actorAlice') : step.actor === 'server' ? t('landing.security.actorServer') : t('landing.security.actorBob') }}</div>
+                <div class="share-step-action">{{ step.action }}</div>
+                <div class="share-step-data">{{ step.data }}</div>
+              </div>
+            </div>
+
+            <div class="share-nav">
+              <button class="step-btn" @click="shareStep = Math.max(0, shareStep - 1)" :disabled="shareStep === 0">{{ t('landing.security.sharePrev') }}</button>
+              <span class="step-counter">{{ shareStep + 1 }} / {{ shareSteps.length }}</span>
+              <button class="step-btn" @click="shareStep = Math.min(shareSteps.length - 1, shareStep + 1)" :disabled="shareStep === shareSteps.length - 1">{{ t('landing.security.shareNext') }}</button>
+            </div>
+          </div>
+
+          <div class="share-actor bob">
+            <div class="actor-avatar">👨</div>
+            <div class="actor-name">Bob</div>
+            <div class="actor-device">{{ t('landing.security.actorBrowser') }}</div>
+          </div>
+        </div>
+
+        <div class="share-visual-box">
+          <div class="share-visual" v-if="shareStep === 0">
+            <div class="sv-node">
+              <div class="sv-icon">📄</div>
+              <div class="sv-label">{{ t('landing.security.svFileCrypted') }}</div>
+            </div>
+            <div class="sv-plus">+</div>
+            <div class="sv-node highlight-node">
+              <div class="sv-icon">🔑</div>
+              <div class="sv-label">{{ t('landing.security.svAliceKey') }}</div>
+              <div class="sv-sub">{{ t('landing.security.svAliceKeyMem') }}</div>
+            </div>
+          </div>
+          <div class="share-visual" v-else-if="shareStep === 1">
+            <div class="sv-node">
+              <div class="sv-icon">🖥️</div>
+              <div class="sv-label">{{ t('landing.security.svServer') }}</div>
+            </div>
+            <div class="sv-arrow">→</div>
+            <div class="sv-node highlight-node">
+              <div class="sv-icon">🔓</div>
+              <div class="sv-label">{{ t('landing.security.svBobPubKey') }}</div>
+              <div class="sv-sub">RSA-OAEP 4096 bits</div>
+            </div>
+          </div>
+          <div class="share-visual" v-else-if="shareStep === 2">
+            <div class="sv-node">
+              <div class="sv-icon">🔑</div>
+              <div class="sv-label">{{ t('landing.security.svFileKey') }}</div>
+            </div>
+            <div class="sv-pipe">
+              <div class="sv-algo">RSA-OAEP encrypt<br>avec clé publique Bob</div>
+              <div class="sv-packet rsa-anim"></div>
+            </div>
+            <div class="sv-node highlight-node">
+              <div class="sv-icon">🔒</div>
+              <div class="sv-label">{{ t('landing.security.svEncForBob') }}</div>
+              <div class="sv-sub">{{ t('landing.security.svEncForBobSub') }}</div>
+            </div>
+          </div>
+          <div class="share-visual" v-else-if="shareStep === 3">
+            <div class="sv-node">
+              <div class="sv-icon">🖥️</div>
+              <div class="sv-label">{{ t('landing.security.svServerStores') }}</div>
+              <div class="sv-sub">{{ t('landing.security.svServerStoresSub') }}</div>
+            </div>
+            <div class="sv-note">{{ t('landing.security.svServerNote') }}</div>
+          </div>
+          <div class="share-visual" v-else-if="shareStep === 4">
+            <div class="sv-node">
+              <div class="sv-icon">🔒</div>
+              <div class="sv-label">{{ t('landing.security.svEncRsa') }}</div>
+            </div>
+            <div class="sv-pipe">
+              <div class="sv-algo">RSA-OAEP decrypt<br>clé privée de Bob</div>
+              <div class="sv-packet rsa-anim blue-anim"></div>
+            </div>
+            <div class="sv-node highlight-node success-node">
+              <div class="sv-icon">🔑</div>
+              <div class="sv-label">{{ t('landing.security.svBobDecrypts') }}</div>
+              <div class="sv-sub">{{ t('landing.security.svBobDecryptsSub') }}</div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Service Worker -->
+    <section id="session" class="section dark-section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec6Label') }}</div>
+        <h2>{{ t('landing.security.sec6Title') }}</h2>
+        <p class="section-sub">{{ t('landing.security.sec6Sub') }}</p>
+
+        <div class="sw-diagram">
+          <div class="sw-zone page-zone">
+            <div class="sw-zone-label">{{ t('landing.security.swPageZone') }}</div>
+            <div class="sw-items">
+              <div class="sw-item">{{ t('landing.security.swAppCode') }}</div>
+              <div class="sw-item bad-item">{{ t('landing.security.swExtensions') }}</div>
+              <div class="sw-item bad-item">{{ t('landing.security.swXss') }}</div>
+              <div class="sw-item">
+                <div class="sw-request">{{ t('landing.security.swRequest') }}</div>
+              </div>
+            </div>
+          </div>
+
+          <div class="sw-barrier">
+            <div class="barrier-line"></div>
+            <div class="barrier-label">{{ t('landing.security.swBarrier') }}</div>
+            <div class="barrier-line"></div>
+          </div>
+
+          <div class="sw-zone worker-zone">
+            <div class="sw-zone-label">{{ t('landing.security.swWorkerZone') }}</div>
+            <div class="sw-items">
+              <div class="sw-item key-item">
+                🏛️ Master Key
+                <div class="sw-badge">extractable: false</div>
+              </div>
+              <div class="sw-item">
+                <div class="sw-response">{{ t('landing.security.swWorkerResponse') }}</div>
+              </div>
+              <div class="sw-item timeout-item">
+                {{ t('landing.security.swTimeout') }}
+              </div>
+            </div>
+          </div>
+        </div>
+
+        <div class="sw-props">
+          <div class="sw-prop">
+            <div class="prop-icon">🔒</div>
+            <div class="prop-title">{{ t('landing.security.swProp1Title') }}</div>
+            <div class="prop-desc">{{ t('landing.security.swProp1Desc') }}</div>
+          </div>
+          <div class="sw-prop">
+            <div class="prop-icon">⏱️</div>
+            <div class="prop-title">{{ t('landing.security.swProp2Title') }}</div>
+            <div class="prop-desc">{{ t('landing.security.swProp2Desc') }}</div>
+          </div>
+          <div class="sw-prop">
+            <div class="prop-icon">👁️</div>
+            <div class="prop-title">{{ t('landing.security.swProp3Title') }}</div>
+            <div class="prop-desc">{{ t('landing.security.swProp3Desc') }}</div>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Ce que le serveur voit/ne voit pas -->
+    <section id="serveur" class="section">
+      <div class="container">
+        <div class="section-label">{{ t('landing.security.sec7Label') }}</div>
+        <h2>{{ t('landing.security.sec7Title') }}</h2>
+
+        <div class="visibility-grid">
+          <div class="vis-col vis-sees">
+            <div class="vis-header sees-header">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M1 12s4-8 11-8 11 8 11 8-4 8-11 8-11-8-11-8z"/><circle cx="12" cy="12" r="3"/></svg>
+              {{ t('landing.security.seesTitle') }}
+            </div>
+            <div class="vis-items">
+              <div class="vis-item neutral">{{ t('landing.security.sees1') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees2') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees3') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees4') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees5') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees6') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees7') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees8') }}</div>
+              <div class="vis-item neutral">{{ t('landing.security.sees9') }}</div>
+            </div>
+          </div>
+
+          <div class="vis-col vis-not">
+            <div class="vis-header not-header">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M17.94 17.94A10.07 10.07 0 0112 20c-7 0-11-8-11-8a18.45 18.45 0 015.06-5.94M9.9 4.24A9.12 9.12 0 0112 4c7 0 11 8 11 8a18.5 18.5 0 01-2.16 3.19m-6.72-1.07a3 3 0 11-4.24-4.24"/><line x1="1" y1="1" x2="23" y2="23"/></svg>
+              {{ t('landing.security.neverTitle') }}
+            </div>
+            <div class="vis-items">
+              <div class="vis-item never-item">{{ t('landing.security.never1') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never2') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never3') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never4') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never5') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never6') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never7') }}</div>
+              <div class="vis-item never-item">{{ t('landing.security.never8') }}</div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </section>
+
+    <!-- Footer CTA -->
+    <section class="sec-cta">
+      <div class="container">
+        <h2>{{ t('landing.security.ctaTitle') }}</h2>
+        <p>{{ t('landing.security.ctaSubtitle') }}</p>
+        <div class="cta-row">
+          <a href="https://github.com/Bunnntyyy/SaferCloud" target="_blank" rel="noopener" class="btn btn-primary">
+            <svg viewBox="0 0 24 24" fill="currentColor" width="18"><path d="M12 .297c-6.63 0-12 5.373-12 12 0 5.303 3.438 9.8 8.205 11.385.6.113.82-.258.82-.577 0-.285-.01-1.04-.015-2.04-3.338.724-4.042-1.61-4.042-1.61C4.422 18.07 3.633 17.7 3.633 17.7c-1.087-.744.084-.729.084-.729 1.205.084 1.838 1.236 1.838 1.236 1.07 1.835 2.809 1.305 3.495.998.108-.776.417-1.305.76-1.605-2.665-.3-5.466-1.332-5.466-5.93 0-1.31.465-2.38 1.235-3.22-.135-.303-.54-1.523.105-3.176 0 0 1.005-.322 3.3 1.23.96-.267 1.98-.399 3-.405 1.02.006 2.04.138 3 .405 2.28-1.552 3.285-1.23 3.285-1.23.645 1.653.24 2.873.12 3.176.765.84 1.23 1.91 1.23 3.22 0 4.61-2.805 5.625-5.475 5.92.42.36.81 1.096.81 2.22 0 1.606-.015 2.896-.015 3.286 0 .315.21.69.825.57C20.565 22.092 24 17.592 24 12.297c0-6.627-5.373-12-12-12"/></svg>
+            {{ t('landing.security.ctaViewCode') }}
+          </a>
+          <router-link to="/dashboard" class="btn btn-secondary">{{ t('landing.security.ctaCreate') }}</router-link>
+        </div>
+      </div>
+    </section>
+  </div>
+</template>
+
+<script setup>
+import { ref, computed, onMounted, onUnmounted } from 'vue'
+import { useI18n } from 'vue-i18n'
+import LandingNav from '../../components/landing/LandingNav.vue'
+
+const { t } = useI18n()
+
+// ── TOC ────────────────────────────────────────────────────────────
+const tocNavOpen = ref(true)
+const activeSection = ref('')
+
+const tocItems = computed(() => [
+  { id: 'principe',   num: '01', label: t('landing.security.toc01') },
+  { id: 'hierarchie', num: '02', label: t('landing.security.toc02') },
+  { id: 'inscription',num: '03', label: t('landing.security.toc03') },
+  { id: 'upload',     num: '04', label: t('landing.security.toc04') },
+  { id: 'partage',    num: '05', label: t('landing.security.toc05') },
+  { id: 'session',    num: '06', label: t('landing.security.toc06') },
+  { id: 'serveur',    num: '07', label: t('landing.security.toc07') },
+])
+
+function scrollTo(id) {
+  const el = document.getElementById(id)
+  if (!el) return
+  const page = document.querySelector('.security-page')
+  if (page) {
+    page.scrollTo({ top: el.offsetTop - 80, behavior: 'smooth' })
+  }
+}
+
+let observer = null
+
+onMounted(() => {
+  observer = new IntersectionObserver(
+    entries => {
+      for (const entry of entries) {
+        if (entry.isIntersecting) {
+          activeSection.value = entry.target.id
+        }
+      }
+    },
+    { root: document.querySelector('.security-page'), rootMargin: '-30% 0px -60% 0px', threshold: 0 }
+  )
+  tocItems.value.forEach(item => {
+    const el = document.getElementById(item.id)
+    if (el) observer.observe(el)
+  })
+})
+
+onUnmounted(() => {
+  if (observer) observer.disconnect()
+})
+
+const activeKey = ref(null)
+const regStep = ref(0)
+const shareStep = ref(0)
+
+const registrationSteps = computed(() => [
+  { title: t('landing.security.regStep1Title'), desc: t('landing.security.regStep1Desc') },
+  { title: t('landing.security.regStep2Title'), desc: t('landing.security.regStep2Desc') },
+  { title: t('landing.security.regStep3Title'), desc: t('landing.security.regStep3Desc') },
+  { title: t('landing.security.regStep4Title'), desc: t('landing.security.regStep4Desc') },
+  { title: t('landing.security.regStep5Title'), desc: t('landing.security.regStep5Desc') },
+  { title: t('landing.security.regStep6Title'), desc: t('landing.security.regStep6Desc') },
+])
+
+const shareSteps = computed(() => [
+  { actor: 'alice', action: t('landing.security.shareStep1Action'), data: t('landing.security.shareStep1Data') },
+  { actor: 'server', action: t('landing.security.shareStep2Action'), data: t('landing.security.shareStep2Data') },
+  { actor: 'alice', action: t('landing.security.shareStep3Action'), data: t('landing.security.shareStep3Data') },
+  { actor: 'server', action: t('landing.security.shareStep4Action'), data: t('landing.security.shareStep4Data') },
+  { actor: 'bob', action: t('landing.security.shareStep5Action'), data: t('landing.security.shareStep5Data') },
+])
+
+// Upload demo — step by step
+const chunks = ref(Array(4).fill(null).map((_, i) => ({ id: i })))
+const uploadStep = ref(-1)
+const uploadPhase = ref('idle')   // 'idle' | 'encrypting' | 'uploading' | 'done'
+const uploadedChunks = ref([])
+const currentNonce = ref('')
+
+function generateNonce(chunkIndex) {
+  const base = 'a3f8c2d1e5'
+  return `${base}${String(chunkIndex).padStart(8, '0')}`
+}
+
+const uploadBtnLabel = computed(() => {
+  if (uploadPhase.value === 'idle') return t('landing.security.uploadStart')
+  if (uploadPhase.value === 'encrypting') return t('landing.security.uploadSendS3')
+  if (uploadPhase.value === 'uploading') return uploadStep.value < chunks.value.length - 1 ? t('landing.security.uploadNextChunk') : t('landing.security.uploadFinish')
+  return t('landing.security.uploadComplete')
+})
+
+function advanceUpload() {
+  if (uploadPhase.value === 'idle') {
+    uploadStep.value = 0
+    uploadPhase.value = 'encrypting'
+    currentNonce.value = generateNonce(0)
+    return
+  }
+  if (uploadPhase.value === 'encrypting') {
+    uploadPhase.value = 'uploading'
+    return
+  }
+  if (uploadPhase.value === 'uploading') {
+    uploadedChunks.value.push(uploadStep.value)
+    const next = uploadStep.value + 1
+    if (next < chunks.value.length) {
+      uploadStep.value = next
+      uploadPhase.value = 'encrypting'
+      currentNonce.value = generateNonce(next)
+    } else {
+      uploadStep.value = -1
+      uploadPhase.value = 'done'
+    }
+  }
+}
+
+function resetUpload() {
+  uploadStep.value = -1
+  uploadPhase.value = 'idle'
+  uploadedChunks.value = []
+  currentNonce.value = ''
+}
+</script>
+
+<style scoped>
+/* ── Global layout ─────────────────────────────────────────────────── */
+.security-page {
+  height: 100vh;
+  overflow-y: auto;
+  background: var(--background-color);
+}
+
+.container {
+  max-width: 1100px;
+  margin: 0 auto;
+  padding: 0 2rem;
+}
+
+.section {
+  padding: 5rem 0;
+}
+
+.dark-section {
+  background: var(--card-color);
+}
+
+.section-label {
+  font-size: 0.75rem;
+  font-weight: 700;
+  letter-spacing: 0.12em;
+  text-transform: uppercase;
+  color: var(--primary-color);
+  margin-bottom: 0.75rem;
+}
+
+.section-sub {
+  color: var(--secondary-text-color);
+  font-size: 1.05rem;
+  max-width: 680px;
+  line-height: 1.7;
+  margin-bottom: 2.5rem;
+}
+
+/* ── TOC sidebar flottant ─────────────────────────────────────────── */
+.toc-sidebar {
+  position: fixed;
+  left: 1.25rem;
+  top: 50%;
+  transform: translateY(-50%);
+  z-index: 200;
+}
+
+.toc-panel {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 12px;
+  padding: 0.75rem 0.75rem;
+  box-shadow: 0 4px 20px rgba(0,0,0,0.2);
+  overflow: hidden;
+  max-width: 210px;
+  max-height: 80vh;
+  transition: max-width 0.25s ease;
+}
+
+.toc-panel.folded {
+  max-width: 115px;
+}
+
+.toc-title {
+  font-size: 0.65rem;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.1em;
+  color: var(--secondary-text-color);
+  margin-bottom: 0.5rem;
+  white-space: nowrap;
+  padding: 0 0.25rem;
+  display: flex;
+  align-items: center;
+  gap: 0.35rem;
+  cursor: pointer;
+  user-select: none;
+}
+
+.toc-title:hover {
+  color: var(--primary-color);
+}
+
+.toc-chevron {
+  width: 12px;
+  height: 12px;
+  flex-shrink: 0;
+  transition: transform 0.2s ease;
+  transform: rotate(-90deg);
+}
+
+.toc-chevron.open {
+  transform: rotate(0deg);
+}
+
+.toc-nav-wrapper {
+  overflow: hidden;
+  max-height: 500px;
+  transition: max-height 0.25s ease, opacity 0.2s ease;
+  opacity: 1;
+}
+
+.toc-nav-wrapper.hidden {
+  max-height: 0;
+  opacity: 0;
+}
+
+.toc-item {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.4rem 0.5rem;
+  border-radius: 6px;
+  cursor: pointer;
+  transition: all 0.15s;
+  margin-bottom: 2px;
+  white-space: nowrap;
+}
+
+.toc-item:hover {
+  background: var(--hover-background-color);
+  color: var(--primary-color);
+}
+
+.toc-item.active {
+  background: rgba(250, 114, 104, 0.12);
+  color: var(--primary-color);
+}
+
+.toc-item .toc-num {
+  font-size: 0.6rem;
+  font-weight: 700;
+  font-family: monospace;
+  color: var(--primary-color);
+  opacity: 0.6;
+  flex-shrink: 0;
+}
+
+.toc-item.active .toc-num {
+  opacity: 1;
+}
+
+.toc-label {
+  font-size: 0.78rem;
+  font-weight: 500;
+  color: var(--secondary-text-color);
+}
+
+.toc-item:hover .toc-label,
+.toc-item.active .toc-label {
+  color: var(--primary-color);
+}
+
+@media (max-width: 1100px) {
+  .toc-sidebar { display: none; }
+}
+
+/* ── Hero ─────────────────────────────────────────────────────────── */
+.sec-hero {
+  padding: 7rem 0 4rem;
+  text-align: center;
+}
+
+.hero-eyebrow {
+  font-size: 0.75rem;
+  font-weight: 700;
+  letter-spacing: 0.12em;
+  text-transform: uppercase;
+  color: var(--primary-color);
+  margin-bottom: 1rem;
+}
+
+.sec-hero h1 {
+  font-size: clamp(2rem, 5vw, 3.5rem);
+  line-height: 1.15;
+  margin-bottom: 1.5rem;
+}
+
+.highlight {
+  background: linear-gradient(135deg, var(--primary-color), var(--secondary-color));
+  -webkit-background-clip: text;
+  -webkit-text-fill-color: transparent;
+  background-clip: text;
+}
+
+.hero-sub {
+  color: var(--secondary-text-color);
+  font-size: 1.1rem;
+  max-width: 600px;
+  margin: 0 auto 2rem;
+  line-height: 1.7;
+}
+
+.hero-pill-row {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.5rem;
+  justify-content: center;
+}
+
+.pill {
+  padding: 0.3rem 0.9rem;
+  border-radius: 999px;
+  font-size: 0.78rem;
+  font-weight: 600;
+  font-family: monospace;
+}
+
+.pill.green { background: rgba(34,197,94,0.15); color: #22c55e; border: 1px solid rgba(34,197,94,0.3); }
+.pill.blue { background: rgba(59,130,246,0.15); color: #60a5fa; border: 1px solid rgba(59,130,246,0.3); }
+.pill.purple { background: rgba(168,85,247,0.15); color: #c084fc; border: 1px solid rgba(168,85,247,0.3); }
+.pill.orange { background: rgba(249,115,22,0.15); color: #fb923c; border: 1px solid rgba(249,115,22,0.3); }
+.pill.teal { background: rgba(20,184,166,0.15); color: #2dd4bf; border: 1px solid rgba(20,184,166,0.3); }
+
+/* ── ZK Comparison ────────────────────────────────────────────────── */
+.zk-comparison {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1.5rem;
+}
+
+@media (max-width: 768px) {
+  .zk-comparison { grid-template-columns: 1fr; }
+}
+
+.cmp-card {
+  border-radius: 16px;
+  padding: 1.5rem;
+  border: 1px solid var(--border-color);
+}
+
+.cmp-card.bad { border-color: rgba(239,68,68,0.3); background: rgba(239,68,68,0.04); }
+.cmp-card.good { border-color: rgba(34,197,94,0.3); background: rgba(34,197,94,0.04); }
+
+.cmp-header {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  font-weight: 600;
+  margin-bottom: 1.25rem;
+  font-size: 0.95rem;
+}
+
+.cmp-card.bad .cmp-header { color: #ef4444; }
+.cmp-card.good .cmp-header { color: #22c55e; }
+.cmp-header svg { width: 18px; height: 18px; flex-shrink: 0; }
+
+.cmp-flow {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+  margin-bottom: 1rem;
+}
+
+.cmp-node {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  padding: 0.5rem 0.75rem;
+  font-size: 0.78rem;
+  text-align: center;
+  min-width: 70px;
+}
+
+.user-node { border-color: var(--primary-color); color: var(--primary-color); }
+.server-bad { border-color: #ef4444; background: rgba(239,68,68,0.1); color: #ef4444; }
+.server-good { border-color: #22c55e; background: rgba(34,197,94,0.1); color: #22c55e; }
+.encrypted-node { border-color: #3b82f6; color: #60a5fa; }
+
+.cmp-arrow {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 2px;
+  flex: 1;
+  min-width: 50px;
+}
+
+.arrow-label {
+  font-size: 0.65rem;
+  color: var(--secondary-text-color);
+  white-space: nowrap;
+}
+
+.arrow-label-top { margin-bottom: 2px; }
+
+.cmp-arrow svg { width: 100%; height: 20px; }
+
+.cmp-note {
+  font-size: 0.82rem;
+  color: var(--secondary-text-color);
+  line-height: 1.5;
+  margin: 0;
+}
+
+/* ── Key Hierarchy ────────────────────────────────────────────────── */
+.key-hierarchy {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0;
+  margin: 2.5rem 0 1rem;
+}
+
+.kh-level {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  width: 100%;
+}
+
+.kh-node {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  padding: 1rem 1.5rem;
+  border-radius: 14px;
+  border: 2px solid var(--border-color);
+  background: var(--background-color);
+  cursor: pointer;
+  transition: all 0.2s ease;
+  text-align: center;
+  min-width: 220px;
+}
+
+.kh-node:hover, .kh-node.active {
+  transform: scale(1.04);
+  box-shadow: 0 0 0 3px var(--primary-color);
+}
+
+.kh-password { border-color: var(--primary-color); }
+.kh-kek { border-color: #f59e0b; }
+.kh-master { border-color: #3b82f6; }
+.kh-rsa { border-color: #8b5cf6; }
+.kh-folder { border-color: #f59e0b; }
+.kh-file { border-color: #22c55e; }
+
+.kh-node.active.kh-password { background: rgba(250,114,104,0.1); }
+.kh-node.active.kh-kek { background: rgba(245,158,11,0.1); }
+.kh-node.active.kh-master { background: rgba(59,130,246,0.1); }
+.kh-node.active.kh-rsa { background: rgba(139,92,246,0.1); }
+.kh-node.active.kh-folder { background: rgba(245,158,11,0.1); }
+.kh-node.active.kh-file { background: rgba(34,197,94,0.1); }
+
+.kh-icon { font-size: 1.8rem; margin-bottom: 0.3rem; }
+.kh-icon.small { font-size: 1.3rem; }
+.kh-label { font-weight: 700; font-size: 1rem; }
+.kh-label.small { font-size: 0.85rem; }
+.kh-sub { font-size: 0.72rem; color: var(--secondary-text-color); margin-top: 0.2rem; }
+
+.kh-connector {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.3rem;
+  padding: 0.4rem 0;
+}
+
+.kh-algo-badge {
+  font-size: 0.68rem;
+  color: var(--secondary-text-color);
+  background: var(--hover-background-color);
+  padding: 0.2rem 0.6rem;
+  border-radius: 4px;
+  font-family: monospace;
+  white-space: nowrap;
+}
+
+.kh-algo-badge.small { font-size: 0.62rem; }
+
+.kh-line {
+  width: 2px;
+  height: 30px;
+  background: linear-gradient(to bottom, var(--primary-color), var(--border-color));
+  position: relative;
+  overflow: hidden;
+}
+
+.kh-line-short {
+  width: 2px;
+  height: 20px;
+  background: linear-gradient(to bottom, var(--primary-color), var(--border-color));
+  position: relative;
+  overflow: hidden;
+  margin: 0 auto;
+}
+
+.animated-line::after {
+  content: '';
+  position: absolute;
+  top: -100%;
+  left: 0;
+  width: 100%;
+  height: 50%;
+  background: var(--primary-color);
+  animation: flow-down 1.5s linear infinite;
+}
+
+@keyframes flow-down {
+  to { top: 200%; }
+}
+
+.kh-branches {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  width: 100%;
+}
+
+.kh-branch-line {
+  width: 2px;
+  height: 20px;
+  background: var(--border-color);
+  margin: 0 auto;
+}
+
+.kh-branch-row {
+  display: flex;
+  gap: 4rem;
+  justify-content: center;
+  position: relative;
+}
+
+.kh-branch-row::before {
+  content: '';
+  position: absolute;
+  top: 0;
+  left: calc(50% - 2rem);
+  width: calc(4rem + 4px);
+  height: 2px;
+  background: var(--border-color);
+}
+
+.kh-branch-col {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0;
+}
+
+.kh-node {
+  position: relative;
+}
+
+.kh-tooltip {
+  position: absolute;
+  left: calc(100% + 14px);
+  top: 50%;
+  transform: translateY(-50%);
+  width: 240px;
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  padding: 0.75rem 1rem;
+  font-size: 0.82rem;
+  line-height: 1.55;
+  color: var(--main-text-color);
+  box-shadow: 0 6px 24px rgba(0,0,0,0.2);
+  opacity: 0;
+  pointer-events: none;
+  transition: opacity 0.18s ease, transform 0.18s ease;
+  transform: translateY(-50%) translateX(-4px);
+  z-index: 100;
+}
+
+.kh-tooltip::before {
+  content: '';
+  position: absolute;
+  right: 100%;
+  top: 50%;
+  transform: translateY(-50%);
+  border: 6px solid transparent;
+  border-right-color: var(--border-color);
+}
+
+.kh-tooltip::after {
+  content: '';
+  position: absolute;
+  right: calc(100% - 1px);
+  top: 50%;
+  transform: translateY(-50%);
+  border: 6px solid transparent;
+  border-right-color: var(--card-color);
+}
+
+.kh-tooltip-left {
+  left: auto;
+  right: calc(100% + 14px);
+  transform: translateY(-50%) translateX(4px);
+}
+
+.kh-tooltip-left::before {
+  right: auto;
+  left: 100%;
+  border-right-color: transparent;
+  border-left-color: var(--border-color);
+}
+
+.kh-tooltip-left::after {
+  right: auto;
+  left: calc(100% - 1px);
+  border-right-color: transparent;
+  border-left-color: var(--card-color);
+}
+
+.kh-node:hover .kh-tooltip {
+  opacity: 1;
+  transform: translateY(-50%) translateX(0);
+  pointer-events: auto;
+}
+
+.kh-node:hover .kh-tooltip-left {
+  transform: translateY(-50%) translateX(0);
+}
+
+.kh-tooltip strong {
+  display: block;
+  margin-bottom: 0.3rem;
+  color: var(--primary-color);
+  font-size: 0.8rem;
+}
+
+.kh-tooltip code {
+  background: var(--hover-background-color);
+  padding: 0.1rem 0.35rem;
+  border-radius: 4px;
+  font-size: 0.78rem;
+}
+
+/* ── Registration flow ────────────────────────────────────────────── */
+.flow-container {
+  display: grid;
+  grid-template-columns: 280px 1fr;
+  gap: 2rem;
+  align-items: start;
+}
+
+@media (max-width: 768px) {
+  .flow-container { grid-template-columns: 1fr; }
+}
+
+.flow-steps {
+  display: flex;
+  flex-direction: column;
+  gap: 0.5rem;
+}
+
+.flow-step {
+  display: flex;
+  gap: 0.75rem;
+  padding: 0.75rem;
+  border-radius: 10px;
+  border: 1px solid var(--border-color);
+  cursor: pointer;
+  transition: all 0.2s;
+  opacity: 0.6;
+}
+
+.flow-step:hover { opacity: 0.8; background: var(--hover-background-color); }
+.flow-step.active { opacity: 1; border-color: var(--primary-color); background: rgba(250,114,104,0.08); }
+.flow-step.done { opacity: 0.7; border-color: #22c55e; }
+
+.step-num {
+  width: 24px;
+  height: 24px;
+  border-radius: 50%;
+  background: var(--border-color);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.72rem;
+  font-weight: 700;
+  flex-shrink: 0;
+}
+
+.flow-step.active .step-num { background: var(--primary-color); color: white; }
+.flow-step.done .step-num { background: #22c55e; color: white; }
+
+.step-title { font-weight: 600; font-size: 0.85rem; margin-bottom: 0.2rem; }
+.step-desc { font-size: 0.75rem; color: var(--secondary-text-color); line-height: 1.4; }
+
+.flow-visual {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 14px;
+  padding: 2rem;
+  min-height: 220px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+/* Animation nodes */
+.anim-scene {
+  display: flex;
+  align-items: center;
+  gap: 1.5rem;
+  flex-wrap: wrap;
+  justify-content: center;
+  width: 100%;
+  animation: scene-in 0.3s ease;
+}
+
+@keyframes scene-in {
+  from { opacity: 0; transform: translateY(8px); }
+  to { opacity: 1; transform: translateY(0); }
+}
+
+.anim-node {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  padding: 1rem 1.25rem;
+  border-radius: 12px;
+  border: 1px solid var(--border-color);
+  background: var(--background-color);
+  text-align: center;
+  min-width: 110px;
+}
+
+.anim-node.small-node { min-width: 80px; padding: 0.6rem 0.8rem; }
+
+.node-icon { font-size: 1.5rem; margin-bottom: 0.3rem; }
+.node-label { font-weight: 600; font-size: 0.82rem; }
+.node-sub { font-size: 0.68rem; color: var(--secondary-text-color); margin-top: 0.2rem; }
+
+.input-node { border-color: var(--primary-color); }
+.kek-node { border-color: #f59e0b; }
+.master-node { border-color: #3b82f6; }
+.rng-node { border-color: #8b5cf6; }
+.encrypted-master-node { border-color: #22c55e; }
+.pub-node { border-color: #22c55e; }
+.priv-node { border-color: #8b5cf6; }
+.hash-node { border-color: #f59e0b; }
+.enc-rec-node { border-color: #22c55e; }
+
+.anim-pipe {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.5rem;
+  flex: 1;
+  min-width: 100px;
+}
+
+.pipe-label {
+  font-size: 0.65rem;
+  color: var(--secondary-text-color);
+  background: var(--hover-background-color);
+  padding: 0.15rem 0.5rem;
+  border-radius: 4px;
+}
+
+.pipe-algo {
+  font-size: 0.7rem;
+  color: var(--secondary-text-color);
+  text-align: center;
+  line-height: 1.4;
+}
+
+.anim-packet {
+  padding: 0.3rem 0.75rem;
+  border-radius: 6px;
+  font-size: 0.72rem;
+  font-weight: 700;
+  font-family: monospace;
+  animation: none;
+}
+
+.anim-packet.flowing {
+  animation: packet-flow 1s ease-in-out infinite alternate;
+}
+
+.pw-packet { background: rgba(250,114,104,0.2); color: var(--primary-color); }
+.mk-packet { background: rgba(59,130,246,0.2); color: #60a5fa; }
+.enc-packet { background: rgba(34,197,94,0.2); color: #22c55e; }
+.rsa-packet { background: rgba(139,92,246,0.2); color: #c084fc; }
+
+@keyframes packet-flow {
+  from { transform: translateX(-8px); opacity: 0.7; }
+  to { transform: translateX(8px); opacity: 1; }
+}
+
+/* Wrap scene */
+.wrap-scene { flex-direction: column; }
+.wrap-inputs { display: flex; gap: 1rem; justify-content: center; }
+.wrap-arrow { display: flex; flex-direction: column; align-items: center; gap: 0.3rem; }
+.wrap-svg { width: 80px; height: 40px; }
+
+/* RSA split */
+.rsa-split {
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+}
+
+/* Recovery split */
+.recovery-split { display: flex; gap: 1.5rem; flex-wrap: wrap; justify-content: center; }
+.rec-branch { display: flex; flex-direction: column; align-items: center; gap: 0.5rem; }
+.branch-label { font-size: 0.65rem; color: var(--secondary-text-color); text-align: center; font-family: monospace; }
+
+/* Server scene */
+.server-scene { flex-direction: row; align-items: flex-start; gap: 2rem; flex-wrap: wrap; }
+.server-sends { display: flex; flex-direction: column; gap: 0.4rem; flex: 1; min-width: 200px; }
+.send-item { display: flex; align-items: center; gap: 0.5rem; font-size: 0.8rem; padding: 0.3rem 0.6rem; border-radius: 6px; }
+.send-item.safe { background: rgba(34,197,94,0.1); color: #22c55e; }
+.send-item.never { background: rgba(239,68,68,0.1); color: #ef4444; }
+.send-icon { font-size: 0.9rem; flex-shrink: 0; }
+
+.server-box {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  padding: 1.5rem;
+  border-radius: 12px;
+  border: 1px solid var(--border-color);
+  background: var(--background-color);
+  min-width: 150px;
+}
+
+.server-icon { font-size: 2rem; margin-bottom: 0.5rem; }
+.server-label { font-weight: 700; font-size: 0.9rem; }
+.server-note { font-size: 0.72rem; color: var(--secondary-text-color); text-align: center; margin-top: 0.4rem; line-height: 1.4; }
+
+/* Step nav */
+.step-nav {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 1.5rem;
+  margin-top: 1.5rem;
+}
+
+.step-counter { font-size: 0.85rem; color: var(--secondary-text-color); }
+
+.step-btn {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  color: var(--main-text-color);
+  padding: 0.5rem 1.25rem;
+  border-radius: 8px;
+  cursor: pointer;
+  font-size: 0.85rem;
+  transition: all 0.2s;
+}
+
+.step-btn:hover:not(:disabled) { border-color: var(--primary-color); color: var(--primary-color); }
+.step-btn:disabled { opacity: 0.4; cursor: not-allowed; }
+.step-btn.primary { background: var(--primary-color); color: white; border-color: var(--primary-color); }
+.step-btn.primary:hover:not(:disabled) { opacity: 0.9; }
+
+/* ── Upload demo ──────────────────────────────────────────────────── */
+.upload-demo {
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  padding: 2rem;
+}
+
+.upload-file-bar {
+  display: flex;
+  align-items: flex-start;
+  gap: 1rem;
+  margin-bottom: 2rem;
+}
+
+.file-icon { font-size: 2.5rem; }
+
+.file-info { flex: 1; }
+
+.file-name { font-weight: 600; font-size: 0.95rem; margin-bottom: 0.75rem; }
+.file-size { color: var(--secondary-text-color); font-weight: 400; margin-left: 0.5rem; }
+
+.chunk-bar {
+  display: flex;
+  gap: 6px;
+  flex-wrap: wrap;
+  margin-bottom: 0.5rem;
+}
+
+.chunk {
+  width: 60px;
+  height: 40px;
+  border-radius: 6px;
+  border: 2px solid var(--border-color);
+  background: var(--hover-background-color);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.75rem;
+  font-weight: 700;
+  color: var(--secondary-text-color);
+  transition: all 0.3s ease;
+  position: relative;
+  overflow: hidden;
+}
+
+.chunk.encrypting {
+  border-color: var(--primary-color);
+  background: rgba(250,114,104,0.15);
+  color: var(--primary-color);
+  animation: encrypting-pulse 0.6s ease infinite alternate;
+}
+
+.chunk.encrypted {
+  border-color: #f59e0b;
+  background: rgba(245,158,11,0.1);
+  color: #f59e0b;
+}
+
+.chunk.uploaded {
+  border-color: #22c55e;
+  background: rgba(34,197,94,0.1);
+  color: #22c55e;
+}
+
+@keyframes encrypting-pulse {
+  from { box-shadow: 0 0 0 0 rgba(250,114,104,0.4); }
+  to { box-shadow: 0 0 0 6px rgba(250,114,104,0); }
+}
+
+.chunk-legend {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  font-size: 0.72rem;
+  color: var(--secondary-text-color);
+  flex-wrap: wrap;
+}
+
+.legend-dot {
+  display: inline-block;
+  width: 10px;
+  height: 10px;
+  border-radius: 2px;
+  border: 2px solid var(--border-color);
+  margin-right: 2px;
+}
+
+.legend-dot.plain { background: var(--hover-background-color); }
+.legend-dot.encrypting { background: rgba(250,114,104,0.3); border-color: var(--primary-color); }
+.legend-dot.encrypted { background: rgba(245,158,11,0.2); border-color: #f59e0b; }
+.legend-dot.uploaded { background: rgba(34,197,94,0.2); border-color: #22c55e; }
+
+.upload-pipeline {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  margin-bottom: 1.5rem;
+  flex-wrap: wrap;
+}
+
+.pipeline-stage {
+  flex: 1;
+  min-width: 120px;
+  padding: 0.75rem 1rem;
+  border-radius: 10px;
+  border: 1px solid var(--border-color);
+  background: var(--card-color);
+  text-align: center;
+  transition: all 0.3s;
+  opacity: 0.5;
+}
+
+.pipeline-stage.active {
+  opacity: 1;
+  border-color: var(--primary-color);
+  box-shadow: 0 0 12px rgba(250,114,104,0.2);
+}
+
+.stage-icon { font-size: 1.5rem; margin-bottom: 0.25rem; }
+.stage-label { font-weight: 600; font-size: 0.82rem; }
+.stage-sub { font-size: 0.7rem; color: var(--secondary-text-color); margin-top: 0.15rem; }
+
+.pipeline-arrow {
+  font-size: 1.5rem;
+  color: var(--border-color);
+  transition: color 0.3s;
+}
+
+.pipeline-arrow.active { color: var(--primary-color); }
+
+.nonce-box {
+  margin-top: 0.5rem;
+  background: var(--hover-background-color);
+  border-radius: 4px;
+  padding: 0.2rem 0.4rem;
+  font-size: 0.62rem;
+  font-family: monospace;
+}
+
+.nonce-label { color: var(--secondary-text-color); margin-right: 0.3rem; }
+.nonce-val { color: var(--primary-color); }
+
+.chunk-detail {
+  background: var(--hover-background-color);
+  border-radius: 10px;
+  padding: 1rem 1.25rem;
+  margin-bottom: 1.5rem;
+  animation: scene-in 0.2s ease;
+}
+
+.chunk-detail-title {
+  font-size: 0.8rem;
+  font-weight: 600;
+  margin-bottom: 0.75rem;
+  color: var(--secondary-text-color);
+}
+
+.chunk-bytes {
+  display: flex;
+  gap: 4px;
+  align-items: stretch;
+  height: 50px;
+  border-radius: 6px;
+  overflow: hidden;
+}
+
+.byte-block {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.65rem;
+  font-weight: 600;
+  text-align: center;
+  line-height: 1.3;
+  padding: 0 0.5rem;
+}
+
+.nonce-block { background: rgba(139,92,246,0.3); color: #c084fc; width: 80px; flex-shrink: 0; }
+.cipher-block { background: rgba(59,130,246,0.2); color: #60a5fa; flex: 1; }
+.tag-block { background: rgba(34,197,94,0.2); color: #22c55e; width: 80px; flex-shrink: 0; }
+
+.upload-controls {
+  display: flex;
+  gap: 1rem;
+  justify-content: center;
+}
+
+.upload-progress-hint {
+  text-align: center;
+  margin-top: 0.75rem;
+  font-size: 0.8rem;
+  color: var(--secondary-text-color);
+}
+
+.upload-progress-hint span { color: var(--primary-color); font-weight: 600; }
+
+.upload-done-msg {
+  text-align: center;
+  margin-top: 0.75rem;
+  font-size: 0.85rem;
+  font-weight: 600;
+  color: #22c55e;
+  padding: 0.5rem 1rem;
+  background: rgba(34,197,94,0.1);
+  border-radius: 8px;
+  border: 1px solid rgba(34,197,94,0.25);
+}
+
+/* ── Share flow ───────────────────────────────────────────────────── */
+.share-flow {
+  display: grid;
+  grid-template-columns: 120px 1fr 120px;
+  gap: 1.5rem;
+  align-items: start;
+  margin-bottom: 2rem;
+}
+
+@media (max-width: 768px) {
+  .share-flow { grid-template-columns: 1fr; }
+  .share-actor { flex-direction: row; justify-content: center; gap: 1rem; }
+}
+
+.share-actor {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.4rem;
+  padding: 1rem 0.5rem;
+  border-radius: 14px;
+  border: 1px solid var(--border-color);
+  text-align: center;
+  position: sticky;
+  top: 2rem;
+}
+
+.actor-avatar { font-size: 2rem; }
+.actor-name { font-weight: 700; font-size: 0.9rem; }
+.actor-device { font-size: 0.7rem; color: var(--secondary-text-color); }
+
+.share-steps-col { display: flex; flex-direction: column; gap: 0.75rem; }
+
+.share-step {
+  display: flex;
+  gap: 0.75rem;
+  padding: 0.75rem 1rem;
+  border-radius: 10px;
+  border: 1px solid var(--border-color);
+  opacity: 0.55;
+  cursor: pointer;
+  transition: all 0.2s;
+}
+
+.share-step:hover { opacity: 0.75; }
+.share-step.active { opacity: 1; border-color: var(--primary-color); background: rgba(250,114,104,0.06); }
+.share-step.done { opacity: 0.7; border-color: #22c55e; }
+
+.share-step-num {
+  width: 22px;
+  height: 22px;
+  border-radius: 50%;
+  background: var(--border-color);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.7rem;
+  font-weight: 700;
+  flex-shrink: 0;
+}
+
+.share-step.active .share-step-num { background: var(--primary-color); color: white; }
+.share-step.done .share-step-num { background: #22c55e; color: white; }
+
+.share-step-actor {
+  font-size: 0.7rem;
+  font-weight: 700;
+  padding: 0.1rem 0.4rem;
+  border-radius: 4px;
+  display: inline-block;
+  margin-bottom: 0.2rem;
+}
+
+.share-step-actor.alice { background: rgba(250,114,104,0.15); color: var(--primary-color); }
+.share-step-actor.server { background: rgba(59,130,246,0.15); color: #60a5fa; }
+.share-step-actor.bob { background: rgba(34,197,94,0.15); color: #22c55e; }
+
+.share-step-action { font-weight: 600; font-size: 0.83rem; margin-bottom: 0.2rem; }
+.share-step-data { font-size: 0.72rem; color: var(--secondary-text-color); font-family: monospace; line-height: 1.4; }
+
+.share-nav {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  justify-content: center;
+  margin-top: 0.5rem;
+}
+
+.share-visual-box {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 14px;
+  padding: 2rem;
+  min-height: 130px;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.share-visual {
+  display: flex;
+  align-items: center;
+  gap: 1.25rem;
+  flex-wrap: wrap;
+  justify-content: center;
+  animation: scene-in 0.25s ease;
+}
+
+.sv-node {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  padding: 0.75rem 1.25rem;
+  border-radius: 10px;
+  border: 1px solid var(--border-color);
+  background: var(--background-color);
+  text-align: center;
+  min-width: 120px;
+}
+
+.sv-node.highlight-node { border-color: var(--primary-color); }
+.sv-node.success-node { border-color: #22c55e; background: rgba(34,197,94,0.08); }
+
+.sv-icon { font-size: 1.4rem; margin-bottom: 0.25rem; }
+.sv-label { font-weight: 600; font-size: 0.82rem; }
+.sv-sub { font-size: 0.68rem; color: var(--secondary-text-color); margin-top: 0.2rem; line-height: 1.4; }
+
+.sv-arrow { font-size: 1.5rem; color: var(--secondary-text-color); }
+.sv-plus { font-size: 1.5rem; color: var(--secondary-text-color); }
+
+.sv-note {
+  font-size: 0.8rem;
+  color: var(--secondary-text-color);
+  background: var(--hover-background-color);
+  padding: 0.75rem 1rem;
+  border-radius: 8px;
+  max-width: 320px;
+  text-align: center;
+  line-height: 1.5;
+}
+
+.sv-pipe {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.4rem;
+  flex: 1;
+  min-width: 120px;
+}
+
+.sv-algo {
+  font-size: 0.68rem;
+  color: var(--secondary-text-color);
+  text-align: center;
+  line-height: 1.4;
+  font-family: monospace;
+}
+
+.sv-packet {
+  width: 40px;
+  height: 12px;
+  border-radius: 6px;
+  background: var(--primary-color);
+  animation: sv-flow 1s ease infinite alternate;
+}
+
+.sv-packet.blue-anim { background: #22c55e; }
+
+@keyframes sv-flow {
+  from { transform: translateX(-15px); opacity: 0.5; }
+  to { transform: translateX(15px); opacity: 1; }
+}
+
+/* ── Service Worker diagram ───────────────────────────────────────── */
+.sw-diagram {
+  display: grid;
+  grid-template-columns: 1fr auto 1fr;
+  gap: 1rem;
+  align-items: center;
+  margin-bottom: 2.5rem;
+}
+
+@media (max-width: 768px) {
+  .sw-diagram { grid-template-columns: 1fr; }
+  .sw-barrier { flex-direction: row; }
+}
+
+.sw-zone {
+  border-radius: 14px;
+  padding: 1.5rem;
+  border: 1px solid var(--border-color);
+}
+
+.page-zone { border-color: #f59e0b; background: rgba(245,158,11,0.04); }
+.worker-zone { border-color: #22c55e; background: rgba(34,197,94,0.04); }
+
+.sw-zone-label {
+  font-size: 0.72rem;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  margin-bottom: 1rem;
+}
+
+.page-zone .sw-zone-label { color: #f59e0b; }
+.worker-zone .sw-zone-label { color: #22c55e; }
+
+.sw-items { display: flex; flex-direction: column; gap: 0.6rem; }
+
+.sw-item {
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  padding: 0.5rem 0.75rem;
+  font-size: 0.8rem;
+}
+
+.bad-item { border-color: rgba(239,68,68,0.4); background: rgba(239,68,68,0.06); color: #f87171; }
+.key-item { border-color: #22c55e; background: rgba(34,197,94,0.1); color: #22c55e; font-weight: 600; }
+.timeout-item { border-color: #f59e0b; background: rgba(245,158,11,0.08); color: #f59e0b; font-size: 0.78rem; }
+
+.sw-request {
+  font-size: 0.72rem;
+  color: var(--secondary-text-color);
+  font-family: monospace;
+}
+
+.sw-response {
+  font-size: 0.72rem;
+  line-height: 1.5;
+}
+
+.sw-badge {
+  display: inline-block;
+  background: rgba(34,197,94,0.2);
+  color: #22c55e;
+  font-size: 0.6rem;
+  padding: 0.1rem 0.4rem;
+  border-radius: 4px;
+  font-family: monospace;
+  margin-top: 0.3rem;
+}
+
+.sw-barrier {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.barrier-line {
+  width: 2px;
+  height: 40px;
+  background: linear-gradient(to bottom, transparent, var(--primary-color), transparent);
+}
+
+.barrier-label {
+  font-size: 0.65rem;
+  color: var(--primary-color);
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.06em;
+  writing-mode: vertical-rl;
+  text-orientation: mixed;
+  transform: rotate(180deg);
+}
+
+@media (max-width: 768px) {
+  .barrier-line { width: 40px; height: 2px; }
+  .barrier-label { writing-mode: horizontal-tb; transform: none; }
+}
+
+.sw-props {
+  display: grid;
+  grid-template-columns: repeat(3, 1fr);
+  gap: 1rem;
+}
+
+@media (max-width: 768px) {
+  .sw-props { grid-template-columns: 1fr; }
+}
+
+.sw-prop {
+  background: var(--background-color);
+  border: 1px solid var(--border-color);
+  border-radius: 12px;
+  padding: 1.25rem;
+}
+
+.prop-icon { font-size: 1.5rem; margin-bottom: 0.5rem; }
+.prop-title { font-weight: 700; font-size: 0.9rem; margin-bottom: 0.4rem; }
+.prop-desc { font-size: 0.78rem; color: var(--secondary-text-color); line-height: 1.5; }
+.prop-desc code { background: var(--card-color); padding: 0.1rem 0.3rem; border-radius: 3px; font-size: 0.75rem; }
+
+/* ── Visibility grid ──────────────────────────────────────────────── */
+.visibility-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 1.5rem;
+}
+
+@media (max-width: 768px) {
+  .visibility-grid { grid-template-columns: 1fr; }
+}
+
+.vis-col {
+  border-radius: 16px;
+  border: 1px solid var(--border-color);
+  overflow: hidden;
+}
+
+.vis-header {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  padding: 1rem 1.25rem;
+  font-size: 0.9rem;
+}
+
+.vis-header svg { width: 18px; height: 18px; flex-shrink: 0; }
+.sees-header { background: rgba(59,130,246,0.08); border-bottom: 1px solid rgba(59,130,246,0.2); color: #60a5fa; }
+.not-header { background: rgba(239,68,68,0.08); border-bottom: 1px solid rgba(239,68,68,0.2); color: #f87171; }
+
+.vis-items { padding: 0.75rem; display: flex; flex-direction: column; gap: 0.4rem; }
+
+.vis-item {
+  padding: 0.5rem 0.75rem;
+  border-radius: 7px;
+  font-size: 0.8rem;
+}
+
+.vis-item.neutral { background: var(--hover-background-color); color: var(--main-text-color); }
+.vis-item.never-item { background: rgba(239,68,68,0.08); color: #f87171; font-weight: 500; }
+
+/* ── CTA ──────────────────────────────────────────────────────────── */
+.sec-cta {
+  padding: 5rem 0;
+  text-align: center;
+  background: var(--card-color);
+}
+
+.sec-cta h2 { margin-bottom: 1rem; }
+.sec-cta p { color: var(--secondary-text-color); font-size: 1rem; margin-bottom: 2rem; }
+
+.cta-row { display: flex; gap: 1rem; justify-content: center; flex-wrap: wrap; }
+
+.btn {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.75rem 1.75rem;
+  border-radius: 10px;
+  font-weight: 600;
+  font-size: 0.9rem;
+  text-decoration: none;
+  transition: all 0.2s;
+}
+
+.btn-primary {
+  background: var(--primary-color);
+  color: white;
+}
+
+.btn-primary:hover { opacity: 0.9; transform: translateY(-1px); }
+
+.btn-secondary {
+  background: transparent;
+  color: var(--main-text-color);
+  border: 1px solid var(--border-color);
+}
+
+.btn-secondary:hover { border-color: var(--primary-color); color: var(--primary-color); }
+</style>
diff --git a/frontend/src/views/landing/TransferView.vue b/frontend/src/views/landing/TransferView.vue
index 15c73992..b548f60b 100644
--- a/frontend/src/views/landing/TransferView.vue
+++ b/frontend/src/views/landing/TransferView.vue
@@ -6,8 +6,8 @@
     <LandingNav />
     <section class="transfer-hero">
       <div class="container">
-        <h1>Transfert P2P Ultra-Rapide</h1>
-        <p>Envoyez jusqu'à 10 Go en direct, sans upload. Vitesse maximale, zéro trace.</p>
+        <h1>{{ t('landing.transfer.heroTitle') }}</h1>
+        <p>{{ t('landing.transfer.heroSubtitle') }}</p>
       </div>
     </section>
 
@@ -22,27 +22,27 @@
                 <polygon points="22 2 15 22 11 13 2 9 22 2"></polygon>
               </svg>
             </div>
-            <h2>Comment ça fonctionne ?</h2>
+            <h2>{{ t('landing.transfer.howTitle') }}</h2>
             <div class="steps">
               <div class="step">
                 <div class="step-number">1</div>
                 <div class="step-content">
-                  <h4>Sélectionnez vos fichiers</h4>
-                  <p>Choisissez les fichiers à envoyer (10 Go max)</p>
+                  <h4>{{ t('landing.transfer.step1Title') }}</h4>
+                  <p>{{ t('landing.transfer.step1Desc') }}</p>
                 </div>
               </div>
               <div class="step">
                 <div class="step-number">2</div>
                 <div class="step-content">
-                  <h4>Obtenez un lien unique</h4>
-                  <p>Un lien sécurisé est généré instantanément</p>
+                  <h4>{{ t('landing.transfer.step2Title') }}</h4>
+                  <p>{{ t('landing.transfer.step2Desc') }}</p>
                 </div>
               </div>
               <div class="step">
                 <div class="step-number">3</div>
                 <div class="step-content">
-                  <h4>Partagez et transférez</h4>
-                  <p>Connexion P2P directe via serveur TURN</p>
+                  <h4>{{ t('landing.transfer.step3Title') }}</h4>
+                  <p>{{ t('landing.transfer.step3Desc') }}</p>
                 </div>
               </div>
             </div>
@@ -54,8 +54,8 @@
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <path d="M13 2L3 14h9l-1 8 10-12h-9l1-8z"></path>
               </svg>
-              <h4>Vitesse Maximale</h4>
-              <p>Pas d'upload serveur, transfert direct P2P à pleine bande passante</p>
+              <h4>{{ t('landing.transfer.feat1Title') }}</h4>
+              <p>{{ t('landing.transfer.feat1Desc') }}</p>
             </div>
 
             <div class="feature-box">
@@ -63,16 +63,16 @@
                 <rect x="3" y="11" width="18" height="11" rx="2" ry="2"></rect>
                 <path d="M7 11V7a5 5 0 0 1 10 0v4"></path>
               </svg>
-              <h4>Chiffrement E2E</h4>
-              <p>Vos fichiers sont chiffrés de bout en bout pendant le transfert</p>
+              <h4>{{ t('landing.transfer.feat2Title') }}</h4>
+              <p>{{ t('landing.transfer.feat2Desc') }}</p>
             </div>
 
             <div class="feature-box">
               <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
                 <polyline points="22 12 18 12 15 21 9 3 6 12 2 12"></polyline>
               </svg>
-              <h4>Zero-Trace</h4>
-              <p>Aucun fichier n'est stocké sur nos serveurs, tranquillité absolue</p>
+              <h4>{{ t('landing.transfer.feat3Title') }}</h4>
+              <p>{{ t('landing.transfer.feat3Desc') }}</p>
             </div>
 
             <div class="feature-box">
@@ -80,20 +80,20 @@
                 <circle cx="12" cy="12" r="10"></circle>
                 <polyline points="12 6 12 12 16 14"></polyline>
               </svg>
-              <h4>Disponible 24/7</h4>
-              <p>Service disponible en permanence, aucune limite d'utilisation</p>
+              <h4>{{ t('landing.transfer.feat4Title') }}</h4>
+              <p>{{ t('landing.transfer.feat4Desc') }}</p>
             </div>
           </div>
 
           <!-- CTA Card -->
           <div class="cta-card">
-            <h3>Prêt à transférer ?</h3>
-            <p>Connectez-vous pour commencer à utiliser le transfert P2P instantané</p>
+            <h3>{{ t('landing.transfer.ctaTitle') }}</h3>
+            <p>{{ t('landing.transfer.ctaSubtitle') }}</p>
             <router-link to="/login" class="btn btn-primary btn-large">
-              Accéder au transfert
+              {{ t('landing.transfer.ctaBtn') }}
             </router-link>
             <div class="cta-note">
-              Gratuit et illimité pour tous les utilisateurs
+              {{ t('landing.transfer.ctaNote') }}
             </div>
           </div>
         </div>
@@ -103,28 +103,19 @@
     <!-- Technical Details -->
     <section class="tech-section">
       <div class="container">
-        <h2>Technologie WebRTC & TURN</h2>
+        <h2>{{ t('landing.transfer.techTitle') }}</h2>
         <div class="tech-grid">
           <div class="tech-card">
-            <h4>WebRTC</h4>
-            <p>
-              Protocole de communication peer-to-peer standardisé par le W3C. 
-              Permet une connexion directe entre navigateurs sans intermédiaire.
-            </p>
+            <h4>{{ t('landing.transfer.tech1Title') }}</h4>
+            <p>{{ t('landing.transfer.tech1Desc') }}</p>
           </div>
           <div class="tech-card">
-            <h4>Serveur TURN</h4>
-            <p>
-              Infrastructure de relais pour les connexions impossibles en direct. 
-              Garantit un transfert réussi même derrière un NAT strict.
-            </p>
+            <h4>{{ t('landing.transfer.tech2Title') }}</h4>
+            <p>{{ t('landing.transfer.tech2Desc') }}</p>
           </div>
           <div class="tech-card">
-            <h4>Chiffrement AES</h4>
-            <p>
-              Chiffrement côté client avant transfert. Les clés sont échangées via 
-              signaling sécurisé, jamais stockées.
-            </p>
+            <h4>{{ t('landing.transfer.tech3Title') }}</h4>
+            <p>{{ t('landing.transfer.tech3Desc') }}</p>
           </div>
         </div>
       </div>
@@ -133,7 +124,10 @@
 </template>
 
 <script setup>
+import { useI18n } from 'vue-i18n'
 import LandingNav from '../../components/landing/LandingNav.vue'
+
+const { t } = useI18n()
 </script>
 
 <style scoped>
@@ -389,5 +383,31 @@ import LandingNav from '../../components/landing/LandingNav.vue'
   .cta-card {
     padding: 3rem 2rem;
   }
+
+  .transfer-hero {
+    padding: 3rem 1rem 2rem;
+  }
+
+  .transfer-hero h1 {
+    font-size: clamp(1.6rem, 5vw, 3rem);
+  }
+
+  .info-card {
+    padding: 1.5rem;
+  }
+}
+
+@media (max-width: 480px) {
+  .transfer-hero {
+    padding: 2rem 1rem;
+  }
+
+  .cta-card {
+    padding: 2rem 1rem;
+  }
+
+  .container {
+    padding: 0 1rem;
+  }
 }
 </style>
diff --git a/frontend/src/views/p2p/P2PSubdomainView.vue b/frontend/src/views/p2p/P2PSubdomainView.vue
new file mode 100644
index 00000000..845675ef
--- /dev/null
+++ b/frontend/src/views/p2p/P2PSubdomainView.vue
@@ -0,0 +1,1002 @@
+<!-- Copyright (C) 2025-2026  Buuuntyyy -->
+<!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
+
+<template>
+  <div class="p2p-subdomain">
+    <P2PNav />
+
+    <main class="p2p-main">
+
+      <!-- Guest mode overlay — shown when arriving via an invite link -->
+      <div v-if="isGuestMode" class="guest-overlay">
+        <div class="guest-card">
+
+          <!-- Consent screen — shown before auth starts -->
+          <template v-if="guestState === 'consent'">
+            <div class="guest-consent-header">
+              <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5"><path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"/><polyline points="13 2 13 9 20 9"/></svg>
+              <div>
+                <p class="guest-consent-title">Réception d'un fichier</p>
+                <p class="guest-consent-subtitle">Quelqu'un souhaite vous envoyer un fichier via Kagibi P2P</p>
+              </div>
+            </div>
+
+            <div class="guest-consent-info">
+              <p>Le fichier sera transféré <strong>directement</strong> entre les appareils, chiffré de bout en bout. Kagibi n'a aucun accès au contenu.</p>
+            </div>
+
+            <label class="guest-consent-check">
+              <input type="checkbox" v-model="guestLegalConsent" />
+              <span>
+                Je confirme que la réception de ce fichier est légale et j'accepte les
+                <a href="/terms" target="_blank" class="guest-legal-link">Conditions d'Utilisation</a>.
+              </span>
+            </label>
+
+            <button class="guest-accept-btn" :disabled="!guestLegalConsent" @click="startGuestAuth">
+              Accepter et télécharger
+            </button>
+            <button class="guest-decline-btn" @click="isGuestMode = false">
+              Refuser
+            </button>
+
+            <p class="guest-privacy-note">
+              <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>
+              End-to-end encrypted · No account required · Powered by Kagibi
+            </p>
+          </template>
+
+          <!-- Transfer in progress -->
+          <template v-else>
+            <!-- File info header -->
+            <div v-if="guestInviteInfo" class="guest-file-info">
+              <svg xmlns="http://www.w3.org/2000/svg" width="28" height="28" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"/><polyline points="13 2 13 9 20 9"/></svg>
+              <div>
+                <p class="guest-filename">{{ guestInviteInfo.file_name }}</p>
+                <p class="guest-filesender">{{ t('p2p.invite.incomingDesc', { sender: guestInviteInfo.sender_name, fileName: '', size: formatSize(guestInviteInfo.file_size) }).trim() }}</p>
+              </div>
+            </div>
+
+            <!-- State indicator -->
+            <div class="guest-state" :class="{ 'is-error': guestState === 'error', 'is-done': guestState === 'done' }">
+              <div v-if="guestState !== 'error' && guestState !== 'done'" class="guest-spinner"></div>
+              <svg v-else-if="guestState === 'done'" xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><polyline points="20 6 9 17 4 12"/></svg>
+              <svg v-else xmlns="http://www.w3.org/2000/svg" width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="12" cy="12" r="10"/><line x1="15" y1="9" x2="9" y2="15"/><line x1="9" y1="9" x2="15" y2="15"/></svg>
+              <span>{{ guestStateLabel }}</span>
+            </div>
+
+            <!-- Progress bar while transferring -->
+            <div v-if="guestState === 'transferring' && p2pStore.activeTransfer" class="guest-progress-wrap">
+              <div class="guest-progress-track">
+                <div class="guest-progress-fill" :style="{ width: p2pStore.activeTransfer.progress + '%' }"></div>
+              </div>
+              <span class="guest-pct">{{ p2pStore.activeTransfer.progress }}%</span>
+            </div>
+
+            <p class="guest-privacy-note">
+              <svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><rect x="3" y="11" width="18" height="11" rx="2" ry="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/></svg>
+              End-to-end encrypted · No account required · Powered by Kagibi
+            </p>
+          </template>
+
+        </div>
+      </div>
+
+      <div v-else class="p2p-container">
+        <div class="main-card">
+          <div class="card-header">
+            <h2>{{ t('p2p.pageTitle') }}</h2>
+            <p>{{ t('p2p.pageDesc') }}</p>
+          </div>
+
+          <div class="transfer-flow">
+            <!-- STEP 1: DESTINATAIRE -->
+            <div class="flow-step" :class="{ active: !selectedFriend && !inviteMode, completed: selectedFriend || inviteMode }">
+              <div class="step-icon">1</div>
+              <div class="step-content">
+                <h3>{{ t('p2p.selectFriend') }}</h3>
+
+                <!-- Selection not made yet: show friends + invite option -->
+                <div v-if="!selectedFriend && !inviteMode">
+                  <p class="secondary-text">{{ t('p2p.selectFriendDesc') }}</p>
+                  <div class="recipient-options">
+                    <!-- Online friends -->
+                    <div class="friends-grid">
+                      <div v-if="onlineFriends.length === 0" class="no-friends">
+                        {{ t('p2p.noOnlineFriends') }}
+                      </div>
+                      <template v-else>
+                        <div
+                          v-for="friend in onlineFriends"
+                          :key="friend.id"
+                          class="friend-chip"
+                          @click="selectedFriend = friend"
+                        >
+                          <div class="avatar-mini-wrapper">
+                            <div class="avatar-mini">
+                              <img
+                                v-if="normalizeAvatarUrl(friend.avatar_url)"
+                                :src="normalizeAvatarUrl(friend.avatar_url)"
+                                :alt="friend.name"
+                                class="avatar-image"
+                                @error="(e) => e.target.style.display = 'none'"
+                              />
+                              <span v-else class="avatar-initials-mini">{{ getInitials(friend.name) }}</span>
+                            </div>
+                            <span class="status-dot-mini"></span>
+                          </div>
+                          <span>{{ friend.name }}</span>
+                        </div>
+                      </template>
+                    </div>
+
+                    <!-- Invite option -->
+                    <div class="invite-option-chip" @click="inviteMode = true">
+                      <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                      {{ t('p2p.invite.title') }}
+                    </div>
+                  </div>
+                </div>
+
+                <!-- Friend selected -->
+                <div v-else-if="selectedFriend" class="selected-friend-display" style="width: fit-content">
+                  <div class="friend-chip selected">
+                    <div class="avatar-mini-wrapper">
+                      <div class="avatar-mini">
+                        <img
+                          v-if="normalizeAvatarUrl(selectedFriend.avatar_url)"
+                          :src="normalizeAvatarUrl(selectedFriend.avatar_url)"
+                          :alt="selectedFriend.name"
+                          class="avatar-image"
+                          @error="(e) => e.target.style.display = 'none'"
+                        />
+                        <span v-else class="avatar-initials-mini">{{ getInitials(selectedFriend.name) }}</span>
+                      </div>
+                      <span class="status-dot-mini"></span>
+                    </div>
+                    <span>{{ selectedFriend.name }}</span>
+                    <button class="close-btn" @click="selectedFriend = null">×</button>
+                  </div>
+                </div>
+
+                <!-- Invite mode selected -->
+                <div v-else class="invite-mode-display">
+                  <div class="invite-option-chip selected">
+                    <svg xmlns="http://www.w3.org/2000/svg" width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                    {{ t('p2p.invite.title') }}
+                  </div>
+                  <button class="close-mode-btn" @click="inviteMode = false">×</button>
+                </div>
+
+              </div>
+            </div>
+
+            <!-- STEP 2: FICHIER -->
+            <div class="flow-step" :class="{ active: !selectedFile, completed: selectedFile }">
+              <div class="step-icon">2</div>
+              <div class="step-content">
+                <h3>{{ t('p2p.selectFile') }}</h3>
+                <input type="file" id="p2p-file-input" @change="handleFileSelect" style="display: none" />
+
+                <div v-if="!selectedFile"
+                     class="drop-area pulse"
+                     @click="triggerFileSelect()"
+                     @dragover.prevent
+                     @drop.prevent="handleDrop"
+                >
+                  <span>{{ t('p2p.dropFile') }}</span>
+                </div>
+
+                <div v-else class="file-display">
+                  <div class="file-icon">
+                    <svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M13 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V9z"></path><polyline points="13 2 13 9 20 9"></polyline></svg>
+                  </div>
+                  <div class="file-meta">
+                    <span class="fname" :title="selectedFile.name">{{ selectedFile.name }}</span>
+                    <span class="fsize">{{ formatSize(selectedFile.size) }}</span>
+                  </div>
+                  <button class="change-file-btn" @click="selectedFile = null">{{ t('p2p.changeFile') }}</button>
+                </div>
+              </div>
+            </div>
+
+            <!-- STEP 3: ACTION -->
+            <div class="flow-step action-step">
+              <!-- Direct transfer mode -->
+              <button v-if="!inviteMode" class="send-big-btn" :disabled="!canSend" @click="startTransfer">
+                <span v-if="!canSend">{{ t('p2p.selectFriendAndFile') }}</span>
+                <span v-else>
+                  {{ t('p2p.sendFile') }}
+                  <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="margin-left:8px;"><line x1="22" y1="2" x2="11" y2="13"></line><polygon points="22 2 15 22 11 13 2 9 22 2"></polygon></svg>
+                </span>
+              </button>
+              <!-- Invite mode -->
+              <button v-else class="send-big-btn invite-send-btn" :disabled="!selectedFile" @click="openInviteDialog">
+                <span v-if="!selectedFile">{{ t('p2p.selectFile') }}</span>
+                <span v-else>
+                  {{ t('p2p.invite.generate') }}
+                  <svg xmlns="http://www.w3.org/2000/svg" width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" style="margin-left:8px;"><path d="M10 13a5 5 0 0 0 7.54.54l3-3a5 5 0 0 0-7.07-7.07l-1.72 1.71"/><path d="M14 11a5 5 0 0 0-7.54-.54l-3 3a5 5 0 0 0 7.07 7.07l1.71-1.71"/></svg>
+                </span>
+              </button>
+            </div>
+          </div>
+        </div>
+      </div>
+    </main>
+
+    <P2PTransferDialog />
+    <P2PInviteDialog
+      :visible="showInviteDialog"
+      :file="selectedFile"
+      :transfer-id="inviteTransferId"
+      @close="showInviteDialog = false"
+    />
+  </div>
+</template>
+
+<script setup>
+import { ref, computed, onMounted, watch } from 'vue'
+import { useRoute } from 'vue-router'
+import { useI18n } from 'vue-i18n'
+import { useFriendStore } from '../../stores/friends'
+import { useP2PStore } from '../../stores/p2p'
+import { useRealtimeStore } from '../../stores/realtime'
+import { useAuthStore } from '../../stores/auth'
+import { authClient } from '../../auth-client'
+import { API_BASE_URL } from '../../api'
+import { generateRSAKeyPair, exportKeyToPEM } from '../../utils/crypto'
+import P2PNav from '../../components/landing/P2PNav.vue'
+import P2PTransferDialog from '../../components/P2PTransferDialog.vue'
+import P2PInviteDialog from '../../components/p2p/P2PInviteDialog.vue'
+
+const { t } = useI18n()
+const route = useRoute()
+const friendStore = useFriendStore()
+const p2pStore = useP2PStore()
+const realtimeStore = useRealtimeStore()
+const authStore = useAuthStore()
+
+const selectedFriend = ref(null)
+const selectedFile = ref(null)
+const inviteMode = ref(false)
+const showInviteDialog = ref(false)
+const inviteTransferId = ref('')
+
+// Guest flow state
+const isGuestMode = ref(false)
+const guestState = ref('') // 'consent' | 'authenticating' | 'generating-keys' | 'connecting' | 'waiting' | 'transferring' | 'done' | 'error'
+const guestError = ref('')
+const guestInviteInfo = ref(null) // { sender_name, file_name, file_size }
+const guestLegalConsent = ref(false)
+let pendingGuestToken = ''
+
+// Non-guest invite acceptance state (kept for backward compat)
+const incomingInvite = ref(null)
+const inviteError = ref('')
+const inviteAccepted = ref(false)
+const inviteLoading = ref(false)
+
+const onlineFriends = computed(() => {
+  return friendStore.acceptedFriends.filter(f => f.online)
+})
+
+const canSend = computed(() => !!selectedFriend.value && !!selectedFile.value && !inviteMode.value)
+
+const guestStateLabel = computed(() => {
+  switch (guestState.value) {
+    case 'consent':           return ''
+    case 'authenticating':    return t('p2p.invite.guest.authenticating')
+    case 'generating-keys':   return t('p2p.invite.guest.generatingKeys')
+    case 'connecting':        return t('p2p.invite.guest.connecting')
+    case 'waiting':           return t('p2p.invite.guest.waiting')
+    case 'transferring':      return t('p2p.invite.guest.transferring')
+    case 'done':              return t('p2p.invite.guest.done')
+    case 'error':             return guestError.value || t('p2p.invite.guest.error')
+    default:                  return t('common.loading')
+  }
+})
+
+onMounted(async () => {
+  const inviteToken = route.query.invite
+  if (inviteToken) {
+    isGuestMode.value = true
+    pendingGuestToken = inviteToken
+    guestState.value = 'consent'
+  } else {
+    friendStore.fetchFriends()
+  }
+})
+
+async function startGuestAuth() {
+  if (!guestLegalConsent.value || !pendingGuestToken) return
+  await guestAutoAuth(pendingGuestToken)
+}
+
+// Close invite dialog automatically when the recipient accepted and transfer started
+watch(() => p2pStore.inviteReady, (ready) => {
+  if (ready && showInviteDialog.value) showInviteDialog.value = false
+})
+
+// Watch for active transfer starting (guest flow: auto-accept offer)
+watch(() => p2pStore.incomingOffer, async (offer) => {
+  if (!isGuestMode.value || !offer) return
+  guestState.value = 'transferring'
+  await p2pStore.acceptTransfer()
+})
+
+// Watch for transfer completing (guest flow: redirect)
+watch(() => p2pStore.activeTransfer?.status, (status) => {
+  if (!isGuestMode.value) return
+  if (status === 'Complete' || status === 'Done') {
+    guestState.value = 'done'
+    setTimeout(() => {
+      authClient.clearGuestToken()
+      window.location.href = 'https://kagibi.cloud'
+    }, 3000)
+  }
+})
+
+async function guestAutoAuth(inviteToken) {
+  guestError.value = ''
+  try {
+    // Step 1: Get guest JWT
+    guestState.value = 'authenticating'
+    const authRes = await fetch(`${API_BASE_URL}p2p/guest-auth`, {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ token: inviteToken }),
+    })
+    let authData
+    try { authData = await authRes.json() } catch { authData = {} }
+    if (!authRes.ok) {
+      guestError.value = authRes.status === 410 ? t('p2p.invite.expired') : (authData.error || t('p2p.invite.guest.error'))
+      guestState.value = 'error'
+      return
+    }
+    authClient.setGuestToken(authData.jwt)
+    guestInviteInfo.value = {
+      sender_name: authData.sender_name,
+      file_name: authData.file_name,
+      file_size: authData.file_size,
+    }
+
+    // Step 2: Generate RSA keypair for this session
+    guestState.value = 'generating-keys'
+    const keyPair = await generateRSAKeyPair()
+    const publicKeyPEM = await exportKeyToPEM(keyPair.publicKey, 'spki')
+    // Inject private key into auth store so p2pStore.acceptTransfer() can decrypt the file key
+    authStore.privateKey = keyPair.privateKey
+
+    // Step 3: Connect WebSocket with guest JWT
+    guestState.value = 'connecting'
+    await realtimeStore.connect()
+
+    // Step 4: Accept the invite, send public key
+    const acceptRes = await fetch(`${API_BASE_URL}p2p/invite/${inviteToken}/accept`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${authData.jwt}`,
+      },
+      body: JSON.stringify({ public_key: publicKeyPEM }),
+    })
+    let acceptData
+    try { acceptData = await acceptRes.json() } catch { acceptData = {} }
+    if (!acceptRes.ok) {
+      guestError.value = acceptData.error || t('p2p.invite.guest.error')
+      guestState.value = 'error'
+      return
+    }
+
+    // Step 5: Wait for sender to start the transfer (handled by watch above)
+    guestState.value = 'waiting'
+  } catch (e) {
+    console.error('[Guest] Auto-auth failed:', e)
+    guestError.value = e.message || t('p2p.invite.guest.error')
+    guestState.value = 'error'
+  }
+}
+
+async function openInviteDialog() {
+  inviteTransferId.value = crypto.randomUUID()
+  showInviteDialog.value = true
+}
+
+const getInitials = (name) => {
+  if (!name) return '?'
+  return name.substring(0, 2).toUpperCase()
+}
+
+const normalizeAvatarUrl = (url) => {
+  if (!url) return null
+  if (url.startsWith('http')) return url
+  if (url.startsWith('/avatars/')) return url
+  const cleanUrl = url.startsWith('/') ? url.substring(1) : url
+  return `/avatars/${cleanUrl}`
+}
+
+const formatSize = (bytes) => {
+  if (bytes === 0) return '0 B'
+  const k = 1024
+  const sizes = ['B', 'KB', 'MB', 'GB', 'TB']
+  const i = Math.floor(Math.log(bytes) / Math.log(k))
+  return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i]
+}
+
+const triggerFileSelect = () => {
+  document.getElementById('p2p-file-input').click()
+}
+
+const handleFileSelect = (e) => {
+  if (e.target.files.length > 0) {
+    selectedFile.value = e.target.files[0]
+  }
+}
+
+const handleDrop = (e) => {
+  if (e.dataTransfer.files.length > 0) {
+    selectedFile.value = e.dataTransfer.files[0]
+  }
+}
+
+const startTransfer = async () => {
+  if (!canSend.value) return
+  try {
+    await p2pStore.startTransfer(selectedFriend.value, selectedFile.value)
+  } catch (e) {
+    console.error('Transfer failed', e)
+  }
+}
+</script>
+
+<style scoped>
+.p2p-subdomain {
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+  background-color: var(--background-color);
+}
+
+.p2p-main {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+}
+
+.p2p-container {
+  flex: 1;
+  display: flex;
+  justify-content: center;
+  align-items: flex-start;
+  padding: 3rem 1rem;
+}
+
+.main-card {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  width: 600px;
+  max-width: 100%;
+  padding: 2.5rem;
+  box-shadow: 0 4px 20px rgba(0,0,0,0.04);
+}
+
+.card-header {
+  text-align: center;
+  margin-bottom: 3rem;
+}
+.card-header h2 { margin: 0 0 0.5rem 0; color: var(--main-text-color); }
+.card-header p { margin: 0; color: var(--secondary-text-color); }
+
+.transfer-flow {
+  display: flex;
+  flex-direction: column;
+  gap: 2rem;
+}
+
+.flow-step {
+  display: flex;
+  gap: 1.5rem;
+  padding-bottom: 2rem;
+  border-bottom: 1px dashed var(--border-color);
+}
+.flow-step:last-child {
+  border-bottom: none;
+  padding-bottom: 0;
+}
+.flow-step.disabled {
+  opacity: 0.5;
+  pointer-events: none;
+}
+
+.step-icon {
+  width: 40px; height: 40px;
+  background: var(--border-color);
+  color: var(--secondary-text-color);
+  font-weight: 700;
+  border-radius: 50%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+}
+
+.flow-step.active .step-icon {
+  background: var(--primary-color);
+  color: white;
+  box-shadow: 0 0 0 4px rgba(52, 152, 219, 0.2);
+}
+
+.flow-step.completed .step-icon {
+  background: var(--success-color);
+  color: white;
+}
+
+.step-content {
+  flex: 1;
+  min-width: 0;
+}
+.step-content h3 {
+  margin: 0 0 0.5rem 0;
+  font-size: 1.1rem;
+  font-weight: 600;
+}
+
+.secondary-text {
+  font-size: 0.9rem;
+  color: var(--secondary-text-color);
+  margin-bottom: 0.5rem;
+}
+
+.friends-grid {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.5rem;
+}
+
+.friend-chip {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.4rem 0.8rem;
+  background: var(--hover-background-color);
+  border-radius: 20px;
+  cursor: pointer;
+  border: 1px solid transparent;
+  transition: all 0.2s;
+}
+.friend-chip:hover { border-color: var(--primary-color); }
+.friend-chip.selected { background: var(--primary-color); color: white; }
+
+.avatar-mini {
+  width: 24px; height: 24px;
+  background: rgba(255,255,255,0.3);
+  border-radius: 50%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  font-size: 0.7rem;
+  overflow: hidden;
+  position: relative;
+}
+
+.avatar-mini-wrapper {
+  position: relative;
+  display: inline-block;
+}
+
+.avatar-image {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+  border-radius: 50%;
+}
+
+.avatar-initials-mini {
+  color: #5f6368;
+  font-size: 0.7rem;
+  font-weight: 500;
+}
+
+.status-dot-mini {
+  position: absolute;
+  bottom: -2px;
+  right: -2px;
+  width: 8px; height: 8px;
+  background-color: #34a853;
+  border-radius: 50%;
+  border: 2px solid white;
+  z-index: 1;
+}
+
+.drop-area {
+  border: 2px dashed var(--border-color);
+  border-radius: 8px;
+  padding: 2rem;
+  text-align: center;
+  color: var(--secondary-text-color);
+  cursor: pointer;
+  transition: all 0.2s;
+}
+.drop-area:hover, .drop-area.pulse {
+  border-color: var(--primary-color);
+  background: var(--hover-background-color);
+  color: var(--primary-color);
+}
+
+.file-display {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  background: var(--hover-background-color);
+  padding: 1rem;
+  border-radius: 8px;
+  border-left: 4px solid var(--primary-color);
+}
+.file-icon { font-size: 1.5rem; }
+.file-meta { flex: 1; display: flex; flex-direction: column; overflow: hidden; min-width: 0; }
+.fname { font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.fsize { font-size: 0.85rem; color: var(--secondary-text-color); }
+.change-file-btn { font-size: 0.8rem; padding: 0.2rem 0.6rem; }
+.close-btn { background: transparent; border: none; color: white; font-size: 1.2rem; margin-left: 0.5rem; cursor: pointer; }
+
+.send-big-btn {
+  width: 100%;
+  padding: 1rem;
+  font-size: 1.1rem;
+  background: var(--success-color);
+  color: white;
+  border: none;
+  border-radius: 12px;
+  font-weight: 700;
+  cursor: pointer;
+  box-shadow: 0 4px 10px rgba(39, 174, 96, 0.3);
+  transition: transform 0.1s;
+}
+.send-big-btn:hover:not(:disabled) { transform: translateY(-2px); }
+.send-big-btn:disabled {
+  background: var(--border-color);
+  box-shadow: none;
+  cursor: not-allowed;
+  color: var(--secondary-text-color);
+}
+
+.recipient-options {
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  gap: 0.5rem;
+  margin-top: 0.5rem;
+}
+
+.invite-option-chip {
+  display: flex;
+  align-items: center;
+  gap: 0.45rem;
+  padding: 0.4rem 0.8rem;
+  background: var(--hover-background-color);
+  border: 1px dashed var(--border-color);
+  border-radius: 20px;
+  font-size: 0.85rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+  cursor: pointer;
+  transition: all 0.2s;
+}
+.invite-option-chip:hover { border-color: var(--primary-color); color: var(--primary-color); }
+.invite-option-chip.selected {
+  background: var(--primary-color);
+  color: #fff;
+  border-style: solid;
+  border-color: var(--primary-color);
+}
+
+.invite-mode-display {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+.close-mode-btn {
+  background: transparent;
+  border: none;
+  color: var(--secondary-text-color);
+  font-size: 1.2rem;
+  cursor: pointer;
+  padding: 0 0.2rem;
+  line-height: 1;
+}
+
+.invite-send-btn {
+  background: var(--primary-color) !important;
+  box-shadow: 0 4px 10px rgba(52, 152, 219, 0.3) !important;
+}
+
+.invite-banner-wrap {
+  padding: 0.75rem 1rem;
+}
+
+.invite-banner {
+  max-width: 600px;
+  margin: 0 auto;
+  background: var(--card-color);
+  border: 1px solid var(--primary-color);
+  border-radius: 12px;
+  padding: 1rem 1.2rem;
+}
+
+.invite-banner-content {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 1rem;
+  flex-wrap: wrap;
+}
+
+.invite-banner-info {
+  display: flex;
+  align-items: center;
+  gap: 0.6rem;
+  font-size: 0.9rem;
+  color: var(--text-color);
+}
+
+.invite-banner-actions {
+  display: flex;
+  gap: 0.5rem;
+  flex-shrink: 0;
+}
+
+.invite-btn-accept {
+  padding: 0.4rem 1rem;
+  background: var(--primary-color);
+  color: #fff;
+  border: none;
+  border-radius: 8px;
+  font-size: 0.85rem;
+  cursor: pointer;
+}
+.invite-btn-accept:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.invite-btn-decline {
+  padding: 0.4rem 1rem;
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-color);
+  border-radius: 8px;
+  font-size: 0.85rem;
+  cursor: pointer;
+}
+.invite-btn-decline:disabled { opacity: 0.6; cursor: not-allowed; }
+
+.invite-banner-text {
+  font-size: 0.9rem;
+  color: var(--text-secondary);
+}
+
+.invite-banner-error {
+  font-size: 0.9rem;
+  color: var(--error-color, #ef4444);
+}
+
+.guest-overlay {
+  flex: 1;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 2rem 1rem;
+}
+
+.guest-card {
+  background: var(--card-color);
+  border: 1px solid var(--border-color);
+  border-radius: 16px;
+  padding: 2.5rem 2rem;
+  width: 440px;
+  max-width: 100%;
+  box-shadow: 0 4px 20px rgba(0,0,0,0.06);
+  display: flex;
+  flex-direction: column;
+  gap: 1.5rem;
+}
+
+.guest-file-info {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  color: var(--text-color);
+}
+
+.guest-filename {
+  margin: 0;
+  font-weight: 600;
+  font-size: 1rem;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  max-width: 300px;
+}
+
+.guest-filesender {
+  margin: 0.2rem 0 0;
+  font-size: 0.85rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+}
+
+.guest-state {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  font-size: 0.95rem;
+  color: var(--text-color);
+  background: var(--hover-background-color, var(--background-color));
+  border: 1px solid var(--border-color);
+  border-radius: 10px;
+  padding: 0.9rem 1rem;
+}
+
+.guest-state.is-error {
+  color: var(--error-color, #ef4444);
+  border-color: var(--error-color, #ef4444);
+}
+
+.guest-state.is-done {
+  color: var(--success-color, #27ae60);
+  border-color: var(--success-color, #27ae60);
+}
+
+.guest-spinner {
+  width: 18px;
+  height: 18px;
+  border: 2.5px solid var(--border-color);
+  border-top-color: var(--primary-color);
+  border-radius: 50%;
+  animation: spin 0.8s linear infinite;
+  flex-shrink: 0;
+}
+
+.guest-progress-wrap {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+}
+
+.guest-progress-track {
+  flex: 1;
+  height: 6px;
+  background: var(--border-color);
+  border-radius: 3px;
+  overflow: hidden;
+}
+
+.guest-progress-fill {
+  height: 100%;
+  background: var(--primary-color);
+  border-radius: 3px;
+  transition: width 0.3s ease;
+}
+
+.guest-pct {
+  font-size: 0.85rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+  min-width: 36px;
+  text-align: right;
+}
+
+.guest-privacy-note {
+  display: flex;
+  align-items: center;
+  gap: 0.4rem;
+  font-size: 0.72rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+  margin: 0;
+  opacity: 0.7;
+}
+
+.guest-consent-header {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  color: var(--text-color);
+}
+
+.guest-consent-title {
+  margin: 0;
+  font-weight: 600;
+  font-size: 1rem;
+}
+
+.guest-consent-subtitle {
+  margin: 0.2rem 0 0;
+  font-size: 0.85rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+}
+
+.guest-consent-info {
+  font-size: 0.88rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+  background: var(--hover-background-color, var(--background-color));
+  border: 1px solid var(--border-color);
+  border-radius: 8px;
+  padding: 0.75rem 1rem;
+  line-height: 1.5;
+}
+
+.guest-consent-check {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.5rem;
+  font-size: 0.82rem;
+  color: var(--text-secondary, var(--secondary-text-color));
+  cursor: pointer;
+  user-select: none;
+  line-height: 1.4;
+}
+
+.guest-consent-check input[type="checkbox"] {
+  width: 15px;
+  height: 15px;
+  flex-shrink: 0;
+  margin-top: 0.15rem;
+  cursor: pointer;
+  accent-color: var(--primary-color);
+}
+
+.guest-legal-link {
+  color: var(--primary-color);
+  text-decoration: underline;
+}
+
+.guest-accept-btn {
+  width: 100%;
+  padding: 0.75rem;
+  background: var(--primary-color);
+  color: #fff;
+  border: none;
+  border-radius: 10px;
+  font-size: 0.95rem;
+  font-weight: 600;
+  cursor: pointer;
+  transition: opacity 0.2s;
+}
+
+.guest-accept-btn:disabled {
+  opacity: 0.4;
+  cursor: not-allowed;
+}
+
+.guest-decline-btn {
+  width: 100%;
+  padding: 0.6rem;
+  background: transparent;
+  border: 1px solid var(--border-color);
+  color: var(--text-secondary, var(--secondary-text-color));
+  border-radius: 10px;
+  font-size: 0.88rem;
+  cursor: pointer;
+}
+
+@keyframes spin { to { transform: rotate(360deg); } }
+
+@media (max-width: 768px) {
+  .p2p-subdomain {
+    height: 100dvh;
+    height: 100svh; /* fallback for older Safari */
+    overflow-y: auto;
+    -webkit-overflow-scrolling: touch;
+  }
+  .p2p-main {
+    overflow-y: auto;
+    -webkit-overflow-scrolling: touch;
+    flex: none;
+    min-height: 0;
+  }
+  .p2p-container {
+    padding: 1rem 1rem 2rem;
+    align-items: flex-start;
+    flex: none;
+  }
+  .main-card { padding: 1.5rem 1rem; }
+  .invite-banner-content { flex-direction: column; align-items: flex-start; }
+  .guest-card { padding: 1.5rem 1rem; }
+}
+</style>
diff --git a/frontend/vite.config.js b/frontend/vite.config.js
index 95d58efb..07ea3091 100644
--- a/frontend/vite.config.js
+++ b/frontend/vite.config.js
@@ -14,8 +14,8 @@ export default defineConfig({
     sourcemap: false,
     rollupOptions: {
       output: {
-        manualChunks: {
-          'libsodium': ['libsodium-wrappers-sumo'],
+        manualChunks: (id) => {
+          if (id.includes('libsodium-wrappers-sumo')) return 'libsodium'
         },
       },
     },
diff --git a/scripts/rclone-backup.conf b/scripts/rclone-backup.conf
new file mode 100644
index 00000000..bd85bccc
--- /dev/null
+++ b/scripts/rclone-backup.conf
@@ -0,0 +1,25 @@
+# Configuration rclone pour la réplication OVH → Scaleway
+# Ce fichier est monté depuis un K8s Secret (ne jamais committer avec les vraies clés).
+# Utilise les variables d'environnement à la place en production (voir CronJob YAML).
+
+[ovh]
+type = s3
+provider = Other
+env_auth = false
+access_key_id     = ${S3_ACCESS_KEY}
+secret_access_key = ${S3_SECRET_KEY}
+endpoint          = ${S3_ENDPOINT}
+region            = ${S3_REGION}
+acl               = private
+
+[scaleway]
+type = s3
+provider = Scaleway
+env_auth = false
+access_key_id     = ${S3_BACKUP_ACCESS_KEY}
+secret_access_key = ${S3_BACKUP_SECRET_KEY}
+endpoint          = ${S3_BACKUP_ENDPOINT}
+region            = ${S3_BACKUP_REGION}
+acl               = private
+# Classe de stockage : STANDARD (1 zone), ONEZONE_IA, ou GLACIER selon le bucket
+storage_class     = STANDARD