fix: comprehensive repo audit — 15 issues fixed

fix: self-audit — 7 issues found and corrected

feat: Sprint 7 — integration test, export limit, French accents

fix: Sprint 6 — CLAUDE.md endpoint sync, UncertaintyConfig validator, annotation docs

feat: Sprint 4 — indexed search + job rate limiting

refactor: Sprint 3b — remove dead code, non-functional provider, unused fields

fix: Sprint 3a — updated_at onupdate, RetroMenuBar unique keys

perf: Sprint 2a — caching, parallel pipeline, async I/O, tests

fix: Sprint 1b — null deref, supports_vision, empty response logging, test

fix(security): Sprint 1 — path traversal, SSRF, Docker hardening, error exposure

fix: robust JSON parser for VLM responses (extra data, trailing commas, bad escapes)

fix: "error [object Object]" on API validation errors + SQLite migration

refactor: use API-reported supports_vision instead of hardcoded model names

fix: recognize mistral-small-latest as multimodal (vision-capable)

fix: IIIF image fetch performance — retry with backoff, request size reduction, cursor warning

feat: IIIF-native Sprints 4-5-6 — tiled zoom, exports, cleanup

feat(pipeline): IIIF-native Sprint 3 — in-memory image fetch for AI analysis

feat(ingest): IIIF-native Sprint 2 — detect IIIF Image Service at ingestion

feat(schemas): IIIF-native Sprint 1 — schema evolution for streaming architecture

fix: page IDs with trailing dots, Reader profile handling, Editor 404 UX

docs: Sprint Fix 5 — sync README, CLAUDE.md, add conftest.py

fix(backend): Sprint Fix 2 — data integrity, error handling, robustness

fix(security+infra): Sprint Fix 1 — path traversal, docker-compose, CORS

fix(test): align test_prompt_loader with implementation (ValueError on unresolved vars)

rename: Scriptorium AI → IIIF Studio across entire codebase

fix(sprint-f4-f5): tests faux-positifs, frontend bugs, Dockerfile unique

fix(sprint-f3): conformité spec — IIIF langue, ai_raw.json, prompts génériques

fix(sprint-f2): fiabilité — error handling, async I/O, pagination, cache, prompts

fix(sprint-f1): sécurité — path traversal, SSRF, CORS, validation inputs

fix(sprint-f0): fondations — lazy imports, schémas conformes, pydantic-settings

fix(docker): synchroniser le Dockerfile racine avec infra/Dockerfile

fix(providers): désactiver vertex_api_key + ajouter OCR Mistral dédié

fix(vertex): corriger le routing API pour VERTEX_API_KEY — ajouter vertexai=True

fix(mistral): refactoring structurel complet du provider Mistral

fix(mistralai): detect v0.x package + force pip --upgrade in Dockerfile

fix: 3 production bugs — mistralai import, page ID collision, provider logging

fix(ingest): add User-Agent and headers to httpx requests to fix Gallica 403

fix(api): guard catch-all against /api/* paths in production + refactor Admin UI

feat: multi-provider dynamique — ajout Mistral/Pixtral, détection auto des providers

feat: supprimer la saisie de clé API dans l'UI — les clés viennent des secrets HF

fix(paths): analyse systémique et correction exhaustive des chemins en production

fix(profiles): add explicit PROFILES_DIR/PROMPTS_DIR env vars in Dockerfiles

fix(profiles): resolve __file__ to absolute path before parent traversal

feat(sprint6-B): validation éditoriale + recherche plein texte

fix(backend): add response_model=None to SPA catch-all (FastAPI union type error)

feat(sprint5): frontend React minimal — visionneuse + 4 couches

fix: root redirect /docs + Node.js 24 dans la CI

feat(sprint4-session-c): branchement pipeline réel sur les jobs + tests job_runner

feat(sprint4-session-b): endpoints jobs, ingestion et modèles IA

feat(sprint4-session-a): API FastAPI — structure de base + endpoints lecture et export