build: Update dependencies and pre-commit hooks

Bump mypy to 2.3.1 and refresh all pre-commit hooks (ruff 0.16,
markdownlint 0.18). Fix issues surfaced by the new tooling:

- Use lowercase samesite cookie values (mypy 2.x)
- Remove no-op global declarations and address new ruff findings;
  ignore rules that would require behavior changes
- Add missing comma in AI system prompt (strings were concatenated)
- Wrap long README lines for MD013

.gitignore

@@ -3,7 +3,11 @@ myice.ini
 schedule.json
 .envrc
 cookies.txt
-# Byte-compiled / optimized / DLL files
+# Tailwind CSS generated artifacts
+style.css
+tailwindcss
+
+# Python bytecode
 __pycache__/
 *.py[cod]
 *$py.class
@@ -165,3 +169,4 @@ cython_debug/
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
 #.idea/
+strix_runs/*

.mdlrc

@@ -0,0 +1 @@
+style "#{File.dirname(__FILE__)}/mdl.rb"

.pre-commit-config.yaml

@@ -3,7 +3,7 @@
 ---
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v3.2.0
+    rev: v6.0.0
     hooks:
       - id: trailing-whitespace
       - id: check-case-conflict
@@ -15,7 +15,7 @@ repos:
       - id: detect-private-key
   - repo: https://github.com/astral-sh/ruff-pre-commit
     # Ruff version.
-    rev: v0.6.8
+    rev: v0.16.7
     hooks:
       # Run the linter.
       - id: ruff
@@ -24,26 +24,26 @@ repos:
       - id: ruff-format
         args: [--diff, --target-version, py312]
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.11.2
+    rev: v2.3.1
     hooks:
       - id: mypy
         exclude: ^(docs/|example-plugin/)
         args: [--ignore-missing-imports]
-        additional_dependencies: [types-requests]
+        additional_dependencies: [types-requests, pypdf]
   - repo: https://github.com/adrienverge/yamllint.git
-    rev: v1.35.1
+    rev: v1.38.0
     hooks:
       - id: yamllint
         args: [--strict]
 
   - repo: https://github.com/markdownlint/markdownlint
-    rev: v0.12.0
+    rev: v0.18.1
     hooks:
       - id: markdownlint
         exclude: "^.github|(^docs/_sidebar\\.md$)"
 
   - repo: https://github.com/shellcheck-py/shellcheck-py
-    rev: v0.10.0.1
+    rev: v0.11.0.1-1
     hooks:
       - id: shellcheck
         args: ["--severity=error"]
@@ -51,12 +51,12 @@ repos:
         files: "\\.sh$"
 
   - repo: https://github.com/golangci/misspell
-    rev: v0.6.0
+    rev: v0.8.0
     hooks:
       - id: misspell
         args: ["-i", "charactor"]
   - repo: https://github.com/python-poetry/poetry
-    rev: "1.8.0"
+    rev: "2.4.1"
     hooks:
       - id: poetry-check
       - id: poetry-lock

AGENTS.md

@@ -0,0 +1,136 @@
+# Development Guide for Agentic Coding Agents
+
+## Build/Lint/Test Commands
+
+### Setup
+
+```bash
+# Install dependencies with Poetry
+poetry install
+
+# Install pre-commit hooks
+pre-commit install
+```
+
+### Linting and Formatting
+
+```bash
+# Run all pre-commit checks (linting, formatting, type checking)
+pre-commit run --all-files
+
+# Run specific linters
+ruff check .                    # Python linting
+ruff format .                   # Python formatting
+mypy .                          # Type checking
+yamllint .                      # YAML linting
+markdownlint .                  # Markdown linting
+```
+
+### Running Tests
+
+```bash
+# Manual testing approach - run individual commands to test functionality
+# Test schedule fetching
+myice schedule --days 7
+
+# Test mobile login
+myice mobile-login
+
+# Test specific command help
+myice search --help
+
+# Test web API (run in background)
+poetry run fastapi run myice/webapi.py &
+
+# Run a single pre-commit hook on specific file
+pre-commit run ruff --files myice/myice.py
+pre-commit run ruff-format --files myice/webapi.py
+pre-commit run mypy --files myice/myice.py
+```
+
+### CSS/Frontend Build
+
+When modifying `index.html` or the Tailwind CSS setup:
+
+```bash
+# One-off build of style.css
+./build-css.sh
+
+# Watch mode for development
+./build-css.sh --watch
+
+# Or manually with the standalone CLI (if already downloaded)
+./tailwindcss -i ./style-input.css -o ./style.css --minify
+```
+
+### Running the Web API
+
+```bash
+# Run with poetry
+poetry run fastapi run myice/webapi.py --host 127.0.0.1
+
+# Run with uv (alternative)
+uv run fastapi run myice/webapi.py --host 127.0.0.1
+```
+
+## Code Style Guidelines
+
+### Imports
+
+- Standard library imports first, then third-party, then local imports
+- Use explicit imports rather than wildcard imports
+- Group imports logically with blank lines between groups
+
+### Formatting
+
+- Use ruff-format for automatic formatting
+- Follow PEP 8 style guide
+- Maximum line length: 88 characters (default ruff setting)
+- Use 4 spaces for indentation
+
+### Types
+
+- Use type hints for function parameters and return values
+- Prefer built-in types (str, int, list, dict) over typing aliases when possible
+- Use typing.Annotated for Typer command options
+
+### Naming Conventions
+
+- Variables and functions: snake_case
+- Classes: PascalCase
+- Constants: UPPER_SNAKE_CASE
+- Private members: prefixed with underscore (_private)
+
+### Error Handling
+
+- Use try/except blocks for expected exceptions
+- Raise appropriate HTTPException for API errors
+- Include descriptive error messages
+- Use sys.exit(1) for command-line tool errors
+
+### Frameworks and Libraries
+
+- Typer for CLI interface
+- FastAPI for web API
+- requests for HTTP requests
+- pypdf for PDF processing
+- Use rich for enhanced console output
+- Custom rl_ai_tools package for AI functionalities
+
+### Git Commit Messages
+
+- Use conventional commits format
+- Never mention Claude in commit messages
+- Be descriptive but concise
+- Use present tense ("add feature" not "added feature")
+
+### Additional Rules
+
+- Always use ddg-mcp to perform Web Search functionality
+- Follow the existing code patterns in myice/myice.py and myice/webapi.py
+- Maintain backward compatibility when modifying existing APIs
+- Document new features in README.md
+- Always run ruff format and ruff check after editing a python file
+- Use conventional commit messages
+- When fixing JSON parsing issues, follow the pattern established in
+  sanitize_json_response function

Dockerfile

@@ -0,0 +1,61 @@
+# Multi-stage build to create a minimal image
+FROM python:3.13-slim AS builder
+
+# Create working directory
+WORKDIR /app
+
+# Install tools needed for Tailwind CSS build
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+# Copy dependency files
+COPY requirements.txt ./
+
+# Install dependencies to a target directory
+RUN --mount=type=cache,target=/root/.cache/pip \
+    pip install --no-deps --disable-pip-version-check -r requirements.txt
+
+# Build Tailwind CSS
+COPY index.html style-input.css tailwind.config.js ./
+RUN curl -sL https://github.com/tailwindlabs/tailwindcss/releases/download/v3.4.17/tailwindcss-linux-x64 -o tailwindcss \
+    && chmod +x tailwindcss \
+    && ./tailwindcss -i ./style-input.css -o ./style.css --minify
+
+# Runtime stage
+FROM python:3.13-slim AS runtime
+
+# Create working directory
+WORKDIR /app
+
+# Install only runtime dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+# Create a non-root user for security
+RUN useradd --home-dir /app --no-create-home --uid 1000 myice
+
+# Copy installed packages from builder stage
+COPY --from=builder /usr/local/lib/python3.13/site-packages /usr/local/lib/python3.13/site-packages
+
+# Copy application code and compiled assets
+COPY index.html favicon.ico ./
+COPY --from=builder /app/style.css ./style.css
+COPY myice ./myice
+
+# Change ownership of copied files
+RUN chown -R myice:myice /app
+
+# Switch to non-root user
+USER myice
+
+# Bytecompile Python files for faster first load
+RUN python -m compileall -q ./myice
+
+# Expose port
+EXPOSE 8000
+
+# Run the application
+ENTRYPOINT ["python", "-m", "uvicorn", "myice.webapi:app", "--host", "0.0.0.0", "--port", "8000"]

README.md

@@ -1,16 +1,152 @@
 # myice
 
-## récupérer le schedule
+## introduction
+
+With this tool, you can fetch kids' schedules from MyIce and generate
+the PDFs you need.
+
+## install
+
+with [uv](https://docs.astral.sh/uv/getting-started/installation/):
+
+```shell
+uv tool install \
+--extra-index-url https://gitea.parano.ch/api/packages/herel/pypi/simple/ \
+myice
+```
+
+with [pipx](https://pipx.pypa.io/stable/installation/):
+
+```shell
+pipx install \
+--extra-index-url https://gitea.parano.ch/api/packages/herel/pypi/simple/ \
+myice
+```
+
+## configuration
+
+Create a `myice.ini` file with your credentials:
+
+```ini
+[default]
+username = your_email@example.com
+password = your_password
+userid = 12345
+token = your_api_token
+club_id = 172
+```
+
+You can also create multiple sections for different users:
+
+```ini
+[default]
+username = user1@example.com
+password = password1
+userid = 12345
+token = token1
+club_id = 172
+
+[second_kid]
+username = charlie@example.com
+password = password2
+userid = 67890
+token = token2
+club_id = 186
+```
+
+Note: The `userid`, `token`, and `club_id` fields are optional. If you don't
+have them, the tool can fetch them automatically using the mobile-login
+command (see below).
+
+To fetch the `token` and `club_id` using mobile-login:
+
+```shell
+myice mobile-login
+```
+
+This will output the necessary information that you can add to your
+`myice.ini` file.
+
+## web interface
+
+The tool includes a web interface that can be accessed by running the web
+API server:
+
+```shell
+uv run fastapi run myice/webapi.py
+```
+
+Then open your browser at `http://localhost:8000`. The web interface allows
+you to:
+
+- Select between different configured accounts
+- View upcoming games and practices
+- See detailed information about events including player rosters
+
+### Authentication
+
+The web interface supports two authentication methods:
+
+1. **Infomaniak OpenID Connect (Recommended)**: Click the "Se connecter avec
+   Infomaniak" button to authenticate using Infomaniak's OIDC provider. Only
+   users in the allowed list will be granted access.
+
+1. **Static API Key**: For development purposes, you can still use `abc` as
+   the token.
+
+### Environment Variables
+
+To configure OIDC authentication, set the following environment variables:
+
+- `CLIENT_ID`: Your OIDC client ID
+  (default: 8ea04fbb-4237-4b1d-a895-0b3575a3af3f)
+- `CLIENT_SECRET`: Your OIDC client secret
+- `REDIRECT_URI`: The redirect URI (default: `http://localhost:8000/callback`)
+- `ALLOWED_USERS`: Comma-separated list of allowed email addresses
+  (e.g., `"user1@example.com,user2@example.com"`)
+
+The web API provides the following endpoints:
+
+- `/schedule` - Get the schedule for a specific account
+- `/game/{game_id}` - Get details for a specific game
+- `/accounts` - Get a list of available accounts
+- `/health` - Health check endpoint
+- `/login` - Initiate OIDC login flow
+- `/callback` - Handle OIDC callback
+- `/userinfo` - Get user information
+
+All endpoints (except `/health`, `/login`, and `/callback`) require an
+Authorization header with a Bearer token.
+
+## mobile functions
+
+The tool includes several mobile API functions that interact with MyIce's
+mobile API:
+
+- `myice mobile-login` - Authenticate and get authentication tokens
+- `myice mobile` - Fetch game data using the mobile API
+- `myice mobile-game {game_id}` - Get detailed information about a specific game
+
+These functions can be useful for debugging or when the regular web
+interface is not available.
+
+## fetch schedule
 
 ```shell
 myice schedule -o schedule.json
 ```
 
+To use a specific configuration section:
+
+```shell
+myice schedule -o schedule.json --config-section isaac
+```
+
 ## data
 
 ### listing
 
-Pour récupérer les event des U13 Elite par exemple:
+To fetch events for U13 Elite for example:
 
 ```shell
 ❯ myice search "U13 (Elite)"
@@ -36,11 +172,11 @@ practice: On-Ice Patinoire des Vernets - Patinoire Extérieure
 game: Saison HC Ajoie
 ```
 
-Et on récupère la convoc du match:
+And we retrieve the match roster:
 
 ### match
 
-alors pour avoir la convocation du match contre Ajoie, l'id c'est 117015:
+To get the roster for the match against Ajoie, the ID is 117015:
 
 ```shell
 ❯ myice game 117015
@@ -48,12 +184,47 @@ Opening file game_117015.pdf
 
 ```
 
-### entraînement
+To use a specific configuration section:
 
-et pour la convoc d'un entraînement:
+```shell
+❯ myice game 117015 --config-section isaac
+```
+
+### practice
+
+And for a practice roster:
 
 ```shell
 ❯ myice practice 561855
 Opening file practice_561855.pdf
 
 ```
+
+To use a specific configuration section:
+
+```shell
+❯ myice practice 561855 --config-section isaac
+```
+
+### AI
+
+```text
+❯ myice ai
+> prochain match u13 top ?
+< Le prochain match de l'équipe U13 Top se déroulera le dimanche 10 novembre
+   2024 contre HC Ajoie à la Raffeisen Arena de Porrentruy. Le match débutera
+   à 14h00 et se terminera à 16h15.
+> et les u13 a ?
+< Le prochain match de l'équipe U13 A se déroulera le samedi 9 novembre 2024
+   contre HC Vallorbe à P. du Frézillon, 1337 Vallorbe VD. Le match débutera à
+   13h00 et se terminera à 15h00. Le prochain match à domicile de l'équipe
+   U13 A se déroulera le dimanche 10 novembre 2024 contre CP Meyrin à
+   Les Vernets, Glace extérieure, 1227 Les Acacias GE. Le match débutera
+   à 13h00 et se terminera à 15h00.
+```
+
+To use a specific configuration section:
+
+```shell
+❯ myice ai --config-section isaac
+```

build-css.sh

@@ -0,0 +1,41 @@
+#!/bin/bash
+set -euo pipefail
+
+# Build CSS using Tailwind CSS standalone CLI
+# For local development, run:
+#   ./build-css.sh        # one-off build
+#   ./build-css.sh --watch  # watch mode
+
+version="v3.4.17"
+os="$(uname -s)"
+arch="$(uname -m)"
+
+case "$os" in
+    Linux*)     platform="linux";;
+    Darwin*)    platform="macos";;
+    *)          echo "Unsupported OS: $os"; exit 1;;
+esac
+
+case "$arch" in
+    x86_64)     arch="x64";;
+    arm64)      arch="arm64";;
+    aarch64)    arch="arm64";;
+    *)          echo "Unsupported architecture: $arch"; exit 1;;
+esac
+
+binary="tailwindcss-${platform}-${arch}"
+url="https://github.com/tailwindlabs/tailwindcss/releases/download/${version}/${binary}"
+
+if [ ! -f "tailwindcss" ]; then
+    echo "Downloading Tailwind CSS standalone CLI (${version} ${platform}/${arch})..."
+    curl -sL "$url" -o tailwindcss
+    chmod +x tailwindcss
+fi
+
+if [ "${1:-}" == "--watch" ]; then
+    echo "Building CSS in watch mode..."
+    ./tailwindcss -i ./style-input.css -o ./style.css --watch
+else
+    echo "Building CSS..."
+    ./tailwindcss -i ./style-input.css -o ./style.css --minify
+fi

build-docker.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+
+set -e
+
+REGISTRY="harbor.cl1.parano.ch/library"
+IMAGE="myice"
+
+current_commit=$(git rev-parse HEAD)
+
+git_tag=$(git tag --points-at "$current_commit")
+
+if [[ -z $git_tag ]]; then
+    echo "Build only works on a git tag" >&2
+    exit 1
+fi
+
+docker build --platform linux/amd64 -t "$REGISTRY/$IMAGE:$git_tag" .
+docker push "$REGISTRY/$IMAGE:$git_tag"

index.html

@@ -0,0 +1,775 @@
+<!DOCTYPE html>
+<html lang="fr">
+
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>MyIce - Games</title>
+    <link rel="stylesheet" href="/style.css">
+    <link rel="icon" href="favicon.ico" type="image/x-icon">
+</head>
+
+<body class="bg-gradient-to-br from-blue-50 to-indigo-100 min-h-screen">
+    <!-- Connected User Panel -->
+    <div id="connectedUser" class="fixed top-4 right-4 bg-white bg-opacity-80 backdrop-blur-sm rounded-xl shadow-lg p-4 flex items-center hidden z-50">
+        <span class="text-indigo-700 font-medium">Connecté: <span id="userName" class="font-semibold"></span></span>
+        <button id="disconnect" class="ml-3 bg-rose-500 hover:bg-rose-600 text-white text-sm px-3 py-1 rounded-lg transition duration-200">Déco</button>
+    </div>
+
+    <!-- Login View -->
+    <div class="min-h-screen flex items-center justify-center p-4">
+        <div class="text-center">
+            <h1 id="loginTitle" class="text-4xl md:text-5xl font-bold text-indigo-800 mb-8">MyIce - Games</h1>
+
+            <div id="loginContainer" class="mb-6">
+                <div id="oidcLoginSection">
+                    <button id="oidcLoginBtn" class="bg-gradient-to-r from-indigo-500 to-purple-600 hover:from-indigo-600 hover:to-purple-700 text-white font-semibold text-lg px-8 py-4 rounded-2xl shadow-xl transform hover:scale-105 transition-all duration-300">
+                        Se connecter
+                    </button>
+                </div>
+            </div>
+
+            <div class="mt-8 max-w-md mx-auto">
+                <p class="text-gray-600 text-sm">
+                    Connectez-vous pour accéder aux événements et informations de votre équipe
+                </p>
+            </div>
+        </div>
+    </div>
+
+    <!-- Main Content -->
+    <div id="mainContent" class="container mx-auto px-4 py-6 hidden">
+        <!-- Filters Section -->
+        <div id="eventFilters" class="bg-white rounded-2xl shadow-lg p-6 mb-8 hidden">
+            <div class="grid grid-cols-1 md:grid-cols-4 gap-4">
+                <div>
+                    <label for="account" class="block text-sm font-medium text-gray-700 mb-1">Compte</label>
+                    <select id="account" class="w-full rounded-lg border border-gray-300 bg-white py-2 px-3 text-gray-700 focus:outline-none focus:ring-2 focus:ring-indigo-300">
+                        <option value="default">Défaut</option>
+                    </select>
+                </div>
+
+                <div>
+                    <label for="agegroup" class="block text-sm font-medium text-gray-700 mb-1">Âge</label>
+                    <select id="agegroup" class="w-full rounded-lg border border-gray-300 bg-white py-2 px-3 text-gray-700 focus:outline-none focus:ring-2 focus:ring-indigo-300">
+                        <option value="">Tous</option>
+                    </select>
+                </div>
+
+                <div>
+                    <label for="subgroup" class="block text-sm font-medium text-gray-700 mb-1">Sous-groupe</label>
+                    <select id="subgroup" class="w-full rounded-lg border border-gray-300 bg-white py-2 px-3 text-gray-700 focus:outline-none focus:ring-2 focus:ring-indigo-300">
+                        <option value="">Tous</option>
+                    </select>
+                </div>
+
+                <div class="flex items-end">
+                    <button id="fetchEvents" class="w-full bg-indigo-500 hover:bg-indigo-600 text-white font-medium py-2 px-4 rounded-lg transition duration-200">
+                        Charger
+                    </button>
+                </div>
+            </div>
+        </div>
+
+        <!-- Loading Indicator -->
+        <div id="loadingIndicator" class="text-center py-12 hidden">
+            <div class="inline-block animate-spin rounded-full h-12 w-12 border-t-2 border-b-2 border-indigo-500 mb-4"></div>
+            <p class="text-indigo-700 font-medium">Chargement des événements...</p>
+        </div>
+
+        <!-- Events List -->
+        <div id="eventList" class="grid grid-cols-1 md:grid-cols-2 lg:grid-cols-3 gap-6"></div>
+    </div>
+
+    <!-- Event Details Modal -->
+    <div id="eventDetailsModal" class="fixed inset-0 bg-black bg-opacity-50 flex items-center justify-center p-4 z-50 hidden">
+        <div class="bg-white rounded-2xl shadow-2xl w-full max-w-2xl max-h-[90vh] overflow-y-auto">
+            <div class="border-b border-gray-200 p-6 flex justify-between items-center">
+                <h5 id="eventDetailsLabel" class="text-2xl font-bold text-gray-800">Détails de l'événement</h5>
+                <button id="closeModal" class="text-gray-500 hover:text-gray-700">
+                    <svg xmlns="http://www.w3.org/2000/svg" class="h-6 w-6" fill="none" viewBox="0 0 24 24" stroke="currentColor">
+                        <path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M6 18L18 6M6 6l12 12" />
+                    </svg>
+                </button>
+            </div>
+            <div id="eventDetailsContent" class="p-6">
+                Chargement...
+            </div>
+        </div>
+    </div>
+
+    <script>
+        document.addEventListener("DOMContentLoaded", function () {
+            const loginContainer = document.getElementById("loginContainer");
+            const oidcLoginSection = document.getElementById("oidcLoginSection");
+            const connectedUser = document.getElementById("connectedUser");
+            const eventFilters = document.getElementById("eventFilters");
+            const accountSelect = document.getElementById("account");
+            const agegroupSelect = document.getElementById("agegroup");
+            const subgroupSelect = document.getElementById("subgroup");
+            const eventList = document.getElementById("eventList");
+            const fetchButton = document.getElementById("fetchEvents");
+            const eventDetailsContent = document.getElementById("eventDetailsContent");
+            const eventDetailsModal = document.getElementById("eventDetailsModal");
+            const closeModal = document.getElementById("closeModal");
+            const apiBaseUrl = window.location.origin;
+
+            let storedApiKey = localStorage.getItem("apikey");
+            let lastFetchedEvents = [];
+            let storedAccount = localStorage.getItem("account") || "default";
+            let userInfo = JSON.parse(localStorage.getItem("userInfo") || "null");
+
+            // Close modal when close button is clicked
+            closeModal.addEventListener("click", () => {
+                eventDetailsModal.classList.add("hidden");
+            });
+
+            // Close modal when clicking outside the content
+            eventDetailsModal.addEventListener("click", (e) => {
+                if (e.target === eventDetailsModal) {
+                    eventDetailsModal.classList.add("hidden");
+                }
+            });
+
+            // Close modal when pressing ESC key
+            document.addEventListener("keydown", (e) => {
+                if (e.key === "Escape" && !eventDetailsModal.classList.contains("hidden")) {
+                    eventDetailsModal.classList.add("hidden");
+                }
+            });
+
+            // If we have an API key but no userInfo, fetch it from the server
+            if (storedApiKey && !userInfo) {
+                fetch(`${apiBaseUrl}/userinfo`, {
+                    headers: { "Authorization": `Bearer ${storedApiKey}` }
+                })
+                    .then(response => response.json())
+                    .then(userData => {
+                        userInfo = { email: userData.email || "Utilisateur connecté" };
+                        localStorage.setItem("userInfo", JSON.stringify(userInfo));
+                        renderLoginSection();
+                    })
+                    .catch(e => {
+                        console.error("Error fetching user info:", e);
+                        // If we can't fetch user info, proceed with rendering
+                        renderLoginSection();
+                    });
+            } else {
+                // Render the login section normally
+                renderLoginSection();
+            }
+
+            // Handle the static "abc" key case - removed for security
+            /*
+            if (storedApiKey === "abc" && !userInfo) {
+                userInfo = {email: "utilisateur@example.com"};
+                localStorage.setItem("userInfo", JSON.stringify(userInfo));
+            }
+            */
+
+            // Handle OIDC callback
+            const urlParams = new URLSearchParams(window.location.search);
+            const error = urlParams.get('error');
+            const hashParams = new URLSearchParams(window.location.hash.substring(1));
+            const accessToken = hashParams.get('access_token');
+
+            // Display error message if present
+            if (error) {
+                alert("Erreur d'authentification: " + decodeURIComponent(error));
+                // Remove error from URL
+                window.history.replaceState({}, document.title, "/");
+            }
+
+            // Handle access token in URL fragment
+            if (accessToken) {
+                // Store the access token
+                localStorage.setItem("apikey", accessToken);
+                storedApiKey = accessToken;
+
+                // Get user info from the userinfo endpoint
+                fetch(`${apiBaseUrl}/userinfo`, {
+                    headers: { "Authorization": `Bearer ${accessToken}` }
+                })
+                    .then(response => response.json())
+                    .then(userData => {
+                        userInfo = { email: userData.email || "Utilisateur connecté" };
+                        localStorage.setItem("userInfo", JSON.stringify(userInfo));
+
+                        // Update UI
+                        renderLoginSection();
+                    })
+                    .catch(e => {
+                        console.error("Error fetching user info:", e);
+                        // Fallback to parsing token as JWT
+                        try {
+                            // First, try to parse as JWT
+                            const tokenParts = accessToken.split('.');
+                            let userData = {};
+
+                            if (tokenParts.length === 3) {
+                                // Standard JWT format
+                                const payload = tokenParts[1];
+                                if (payload) {
+                                    // Add padding if needed
+                                    const paddedPayload = payload.padEnd(payload.length + (4 - payload.length % 4) % 4, '=');
+                                    const decodedPayload = atob(paddedPayload);
+                                    userData = JSON.parse(decodedPayload);
+                                }
+                            } else {
+                                // Non-JWT token, treat as opaque token
+                                console.log("Non-JWT token received, using default user info");
+                                userData = { email: "utilisateur@" + window.location.hostname };
+                            }
+
+                            userInfo = { email: userData.email || "Utilisateur connecté" };
+                            localStorage.setItem("userInfo", JSON.stringify(userInfo));
+                        } catch (parseError) {
+                            console.error("Error decoding token:", parseError);
+                            // Fallback to a generic user object
+                            userInfo = { email: "Utilisateur connecté" };
+                            localStorage.setItem("userInfo", JSON.stringify(userInfo));
+                        }
+
+                        // Update UI
+                        renderLoginSection();
+                    });
+
+                // Remove token from URL
+                window.history.replaceState({}, document.title, "/");
+            }
+
+            function renderLoginSection() {
+                const mainContent = document.getElementById("mainContent");
+                const loginView = document.querySelector(".min-h-screen.flex");
+                const connectedUser = document.getElementById("connectedUser");
+                const loginTitle = document.getElementById("loginTitle");
+
+                if (storedApiKey || userInfo) {
+                    // User is logged in
+                    loginView.classList.add("hidden");
+                    mainContent.classList.remove("hidden");
+                    loginTitle.classList.add("hidden");
+
+                    connectedUser.classList.remove("hidden");
+                    oidcLoginSection.classList.add("hidden");
+
+                    const userNameElement = document.getElementById("userName");
+                    if (userInfo && userInfo.email) {
+                        userNameElement.textContent = userInfo.email;
+                    } else {
+                        userNameElement.textContent = "Utilisateur";
+                    }
+
+                    eventFilters.classList.remove("hidden");
+                    updateAccountOptionsAndLoadEvents();
+                } else {
+                    // User is not logged in
+                    loginView.classList.remove("hidden");
+                    mainContent.classList.add("hidden");
+                    loginTitle.classList.remove("hidden");
+
+                    connectedUser.classList.add("hidden");
+                    oidcLoginSection.classList.remove("hidden");
+                    eventFilters.classList.add("hidden");
+
+                    // Remove any existing event listeners to prevent duplicates
+                    const oidcLoginBtn = document.getElementById("oidcLoginBtn");
+                    const newOidcLoginBtn = oidcLoginBtn.cloneNode(true);
+                    oidcLoginBtn.parentNode.replaceChild(newOidcLoginBtn, oidcLoginBtn);
+
+                    newOidcLoginBtn.addEventListener("click", initiateOIDCLogin);
+                }
+
+                // Add disconnect handler
+                const disconnectBtn = document.getElementById("disconnect");
+                if (disconnectBtn) {
+                    // Remove any existing event listeners to prevent duplicates
+                    const newDisconnectBtn = disconnectBtn.cloneNode(true);
+                    disconnectBtn.parentNode.replaceChild(newDisconnectBtn, disconnectBtn);
+                    newDisconnectBtn.addEventListener("click", logout);
+                }
+            }
+
+            function initiateOIDCLogin() {
+                // Redirect to backend login endpoint
+                window.location.href = `${apiBaseUrl}/login`;
+            }
+
+            function logout() {
+                localStorage.removeItem("apikey");
+                localStorage.removeItem("account");
+                localStorage.removeItem("userInfo");
+                storedApiKey = null;
+                userInfo = null;
+                location.reload();
+            }
+
+            function updateAccountOptionsAndLoadEvents() {
+                // Fetch available accounts from the server
+                fetch(`${apiBaseUrl}/accounts`, {
+                    headers: { "Authorization": `Bearer ${storedApiKey}` }
+                })
+                    .then(response => {
+                        if (!response.ok) {
+                            return response.json().then(errorData => {
+                                console.error("Accounts error response:", errorData);
+                                throw new Error(`HTTP error! status: ${response.status}, message: ${errorData.detail || 'Unknown error'}`);
+                            });
+                        }
+                        return response.json();
+                    })
+                    .then(accounts => {
+                        // Check if accounts is actually an array
+                        if (!Array.isArray(accounts)) {
+                            console.error("Accounts data is not an array:", accounts);
+                            throw new Error("Invalid accounts data format");
+                        }
+
+                        accountSelect.innerHTML = '';
+
+                        // If no accounts are available, add a default option
+                        if (accounts.length === 0) {
+                            const option = document.createElement("option");
+                            option.value = "default";
+                            option.textContent = "Default";
+                            accountSelect.appendChild(option);
+                            return;
+                        }
+
+                        // Add all available accounts
+                        accounts.forEach(account => {
+                            const option = document.createElement("option");
+                            option.value = account.name;
+                            option.textContent = account.label;
+                            accountSelect.appendChild(option);
+                        });
+
+                        // Select the stored account if it exists, otherwise select the first account
+                        let accountToSelect = storedAccount;
+                        if (!accounts.some(account => account.name === storedAccount)) {
+                            accountToSelect = accounts[0].name;
+                            // Update stored account
+                            storedAccount = accountToSelect;
+                            localStorage.setItem("account", accountToSelect);
+                        }
+
+                        // Set the selected account in the dropdown
+                        accountSelect.value = accountToSelect;
+
+                        // Automatically fetch events for the selected account
+                        fetchEvents(storedApiKey, accountToSelect);
+                    })
+                    .catch(error => {
+                        console.error("Erreur lors du chargement des comptes:", error);
+                        alert("Accès refusé. Vous n'êtes pas autorisé à accéder à cette application. Veuillez contacter l'administrateur.");
+                        logout();
+                    });
+            }
+
+            renderLoginSection();
+
+            accountSelect.addEventListener("change", () => {
+                const selectedAccount = accountSelect.value;
+                localStorage.setItem("account", selectedAccount);
+                if (storedApiKey) {
+                    fetchEvents(storedApiKey, selectedAccount);
+                }
+            });
+
+            fetchButton.addEventListener("click", () => {
+                if (!storedApiKey) {
+                    alert("Veuillez vous connecter");
+                    return;
+                }
+                const selectedAccount = accountSelect.value;
+                fetchEvents(storedApiKey, selectedAccount);
+            });
+
+            agegroupSelect.addEventListener("change", () => {
+                // Update subgroup options based on selected agegroup
+                updateSubgroupOptions(agegroupSelect.value, lastFetchedEvents);
+                displayEvents(lastFetchedEvents);
+            });
+
+            subgroupSelect.addEventListener("change", () => {
+                displayEvents(lastFetchedEvents);
+            });
+
+            function fetchEvents(apiKey, account) {
+                // Show loading indicator
+                const loadingIndicator = document.getElementById("loadingIndicator");
+                const eventList = document.getElementById("eventList");
+                loadingIndicator.classList.remove("hidden");
+                eventList.innerHTML = ""; // Clear previous events
+
+                fetch(`${apiBaseUrl}/schedule?account=${account}`, {
+                    headers: { "Authorization": `Bearer ${apiKey}` }
+                })
+                    .then(response => {
+                        if (response.status === 401) {
+                            // Token expired or invalid
+                            alert("Votre session a expiré. Veuillez vous reconnecter.");
+                            logout();
+                            return;
+                        }
+                        if (!response.ok) {
+                            // Try to parse error response as JSON, but handle plain text as well
+                            return response.text().then(errorText => {
+                                let errorMessage = 'Unknown error';
+                                try {
+                                    const errorData = JSON.parse(errorText);
+                                    errorMessage = errorData.detail || errorData.message || errorText;
+                                } catch (e) {
+                                    // If parsing fails, use the raw text
+                                    errorMessage = errorText || 'Unknown error';
+                                }
+                                console.error("Schedule error response:", errorText);
+                                throw new Error(`HTTP error! status: ${response.status}, message: ${errorMessage}`);
+                            });
+                        }
+                        return response.text().then(text => {
+                            try {
+                                return JSON.parse(text);
+                            } catch (e) {
+                                console.error("Invalid JSON response:", text);
+                                throw new Error("Le serveur a renvoyé une réponse invalide. Veuillez réessayer.");
+                            }
+                        });
+                    })
+                    .then(data => {
+                        // Hide loading indicator
+                        loadingIndicator.classList.add("hidden");
+
+                        if (data) {
+                            // Check if data is an array
+                            if (!Array.isArray(data)) {
+                                console.error("Schedule data is not an array:", data);
+                                throw new Error("Invalid schedule data format");
+                            }
+
+                            lastFetchedEvents = data.filter(event => event.event === "Jeu");
+                            updateAgeGroupOptions(lastFetchedEvents);
+                            displayEvents(lastFetchedEvents);
+                        }
+                    })
+                    .catch(error => {
+                        // Hide loading indicator on error
+                        loadingIndicator.classList.add("hidden");
+
+                        console.error("Erreur lors du chargement des événements:", error);
+                        alert("Erreur lors du chargement des événements: " + error.message);
+                    });
+            }
+
+            function updateAgeGroupOptions(events) {
+                let agegroups = new Set(events.map(event => event.agegroup));
+                agegroupSelect.innerHTML = '<option value="">Tous</option>';
+                Array.from(agegroups).sort().forEach(group => {
+                    const option = document.createElement("option");
+                    option.value = group;
+                    option.textContent = group;
+                    agegroupSelect.appendChild(option);
+                });
+
+                // Reset subgroup selector
+                subgroupSelect.innerHTML = '<option value="">Tous</option>';
+            }
+
+            function extractSubgroup(name) {
+                // Extract subgroup from name by removing opponent part after " - "
+                if (!name) return "";
+                const parts = name.split(" - ");
+                if (parts.length > 1) {
+                    parts.pop(); // Remove opponent
+                    return parts.join(" - ");
+                }
+                return name;
+            }
+
+            function updateSubgroupOptions(selectedAgegroup, events) {
+                // Reset subgroup options
+                subgroupSelect.innerHTML = '<option value="">Tous</option>';
+
+                if (selectedAgegroup === "") {
+                    // If no agegroup is selected, disable subgroup selector
+                    subgroupSelect.disabled = true;
+                    return;
+                }
+
+                // Enable subgroup selector
+                subgroupSelect.disabled = false;
+
+                // Extract subgroups from events matching the selected agegroup
+                let subgroups = new Set();
+                events
+                    .filter(event => event.agegroup === selectedAgegroup)
+                    .forEach(event => {
+                        // Extract subgroup from event.name by removing opponent
+                        if (event.name && event.name !== selectedAgegroup) {
+                            subgroups.add(extractSubgroup(event.name));
+                        }
+                    });
+
+                // Add subgroups to the selector
+                Array.from(subgroups).sort().forEach(subgroup => {
+                    const option = document.createElement("option");
+                    option.value = subgroup;
+                    option.textContent = subgroup;
+                    subgroupSelect.appendChild(option);
+                });
+            }
+
+            function displayEvents(events) {
+                eventList.innerHTML = "";
+                let selectedAgegroup = agegroupSelect.value;
+                let selectedSubgroup = subgroupSelect.value;
+                let filteredEvents = events.filter(event => {
+                    // Filter by event type
+                    if (event.event !== "Jeu") return false;
+
+                    // Filter by agegroup
+                    if (selectedAgegroup !== "" && event.agegroup !== selectedAgegroup) return false;
+
+                    // Filter by subgroup
+                    let eventSubgroup = extractSubgroup(event.name);
+                    if (selectedSubgroup !== "" && eventSubgroup !== selectedSubgroup) return false;
+
+                    return true;
+                });
+
+                if (filteredEvents.length === 0) {
+                    eventList.innerHTML = "<p class='text-gray-500 text-center py-8'>Aucun événement 'Jeu' trouvé.</p>";
+                    return;
+                }
+
+                filteredEvents.forEach(event => {
+                    const eventCard = document.createElement("div");
+                    eventCard.className = "bg-white rounded-2xl shadow-lg overflow-hidden transform hover:scale-105 transition-all duration-300 cursor-pointer";
+
+                    const card = document.createElement("div");
+                    card.className = "p-6 border-l-4";
+                    card.style.borderColor = event.color || "#818cf8";
+
+                    const inner = document.createElement("div");
+                    inner.className = "flex justify-between items-start";
+
+                    const innerDiv = document.createElement("div");
+                    const h3 = document.createElement("h3");
+                    h3.className = "text-xl font-bold text-gray-800";
+                    h3.textContent = event.agegroup + " - " + event.name;
+                    const subtitle = document.createElement("p");
+                    subtitle.className = "text-gray-600 mt-1";
+                    subtitle.textContent = event.title;
+                    innerDiv.appendChild(h3);
+                    innerDiv.appendChild(subtitle);
+                    inner.appendChild(innerDiv);
+                    card.appendChild(inner);
+
+                    const detailsDiv = document.createElement("div");
+                    detailsDiv.className = "mt-4 space-y-2";
+
+                    const p1 = document.createElement("p");
+                    p1.className = "flex items-center text-gray-700";
+                    p1.innerHTML = '<svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5 mr-2 text-indigo-500" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M17 20h5v-2a3 3 0 00-5.356-1.857M17 20H7m10 0v-2c0-.656-.126-1.283-.356-1.857M7 20H2v-2a3 3 0 015.356-1.857M7 20v-2c0-.656.126-1.283.356-1.857m0 0a5.002 5.002 0 019.288 0M15 7a3 3 0 11-6 0 3 3 0 016 0zm6 3a2 2 0 11-4 0 2 2 0 014 0zM7 10a2 2 0 11-4 0 2 2 0 014 0z" /></svg><strong>Adversaire:</strong> ';
+                    p1.appendChild(document.createTextNode(event.opponent));
+                    detailsDiv.appendChild(p1);
+
+                    const p2 = document.createElement("p");
+                    p2.className = "flex items-center text-gray-700";
+                    p2.innerHTML = '<svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5 mr-2 text-indigo-500" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M17.657 16.657L13.414 20.9a1.998 1.998 0 01-2.827 0l-4.244-4.243a8 8 0 1111.314 0z" /><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M15 11a3 3 0 11-6 0 3 3 0 016 0z" /></svg><strong>Lieu:</strong> ';
+                    p2.appendChild(document.createTextNode(event.place));
+                    detailsDiv.appendChild(p2);
+
+                    const p3 = document.createElement("p");
+                    p3.className = "flex items-center text-gray-700";
+                    p3.innerHTML = '<svg xmlns="http://www.w3.org/2000/svg" class="h-5 w-5 mr-2 text-indigo-500" fill="none" viewBox="0 0 24 24" stroke="currentColor"><path stroke-linecap="round" stroke-linejoin="round" stroke-width="2" d="M12 8v4l3 3m6-3a9 9 0 11-18 0 9 9 0 0118 0z" /></svg><strong>Heure:</strong> ';
+                    p3.appendChild(document.createTextNode(event.start + " - " + event.end));
+                    detailsDiv.appendChild(p3);
+
+                    card.appendChild(detailsDiv);
+                    eventCard.appendChild(card);
+                    eventCard.addEventListener("click", () => fetchEventDetails(event.id_event));
+                    eventList.appendChild(eventCard);
+                });
+            }
+
+            function fetchEventDetails(eventId) {
+                const selectedAccount = accountSelect.value;
+                fetch(`${apiBaseUrl}/game/${eventId}?account=${selectedAccount}`, {
+                    headers: { "Authorization": `Bearer ${storedApiKey}` }
+                })
+                    .then(response => response.json())
+                .then(data => {
+                    const availablePlayers = data.convocation.available || [];
+                    const sortedPlayers = availablePlayers
+                        .sort((a, b) => (a.number || 0) - (b.number || 0));
+
+                    const totalPlayers = sortedPlayers.length;
+                    const positionCount = {};
+                    sortedPlayers.forEach(player => {
+                        const position = player.position || "N/A";
+                        positionCount[position] = (positionCount[position] || 0) + 1;
+                    });
+
+                    const positionBreakdown = Object.entries(positionCount)
+                        .map(([position, count]) => position + ": " + count)
+                        .join(", ");
+
+                    const playersByPosition = [...sortedPlayers].sort((a, b) => {
+                        const positionA = a.position || "ZZZ";
+                        const positionB = b.position || "ZZZ";
+                        if (positionA !== positionB) {
+                            return positionA.localeCompare(positionB);
+                        }
+                        const numA = parseInt(a.number) || 0;
+                        const numB = parseInt(b.number) || 0;
+                        return numA - numB;
+                    });
+
+                    const staffList = data.convocation.staff || [];
+                    const totalStaff = staffList.length;
+
+                    eventDetailsContent.innerHTML = "";
+
+                    if (totalPlayers === 0 && totalStaff === 0) {
+                        const wrapper = document.createElement("div");
+                        wrapper.className = "rounded-xl border border-amber-300 bg-amber-50 p-6";
+                        const centerDiv = document.createElement("div");
+                        centerDiv.className = "text-center";
+                        const h5 = document.createElement("h5");
+                        h5.className = "text-2xl font-bold text-gray-800 mb-4";
+                        h5.textContent = data.title;
+                        centerDiv.appendChild(h5);
+
+                        const infoDiv = document.createElement("div");
+                        infoDiv.className = "space-y-2 text-gray-700 mb-6";
+                        const pType = document.createElement("p");
+                        pType.innerHTML = "<strong>Type:</strong> ";
+                        pType.appendChild(document.createTextNode(data.type));
+                        infoDiv.appendChild(pType);
+                        const pLieu = document.createElement("p");
+                        pLieu.innerHTML = "<strong>Lieu:</strong> ";
+                        pLieu.appendChild(document.createTextNode(data.place));
+                        infoDiv.appendChild(pLieu);
+                        const pHeure = document.createElement("p");
+                        pHeure.innerHTML = "<strong>Heure:</strong> ";
+                        pHeure.appendChild(document.createTextNode(data.time_start + " - " + data.time_end));
+                        infoDiv.appendChild(pHeure);
+                        centerDiv.appendChild(infoDiv);
+
+                        const msgDiv = document.createElement("div");
+                        msgDiv.className = "bg-amber-100 border border-amber-300 text-amber-800 px-4 py-3 rounded-lg";
+                        const msgH6 = document.createElement("h6");
+                        msgH6.className = "font-bold text-lg mb-1";
+                        msgH6.textContent = "Aucun joueur ni personnel convoqué";
+                        msgDiv.appendChild(msgH6);
+                        const msgP = document.createElement("p");
+                        msgP.textContent = "Il n'y a actuellement aucun joueur ni personnel convoqué pour ce match.";
+                        msgDiv.appendChild(msgP);
+                        centerDiv.appendChild(msgDiv);
+                        wrapper.appendChild(centerDiv);
+                        eventDetailsContent.appendChild(wrapper);
+                    } else {
+                        const container = document.createElement("div");
+                        const h5 = document.createElement("h5");
+                        h5.className = "text-2xl font-bold text-gray-800 mb-4";
+                        h5.textContent = data.title;
+                        container.appendChild(h5);
+
+                        const infoDiv = document.createElement("div");
+                        infoDiv.className = "space-y-2 text-gray-700 mb-6";
+                        const pType = document.createElement("p");
+                        pType.innerHTML = "<strong>Type:</strong> ";
+                        pType.appendChild(document.createTextNode(data.type));
+                        infoDiv.appendChild(pType);
+                        const pLieu = document.createElement("p");
+                        pLieu.innerHTML = "<strong>Lieu:</strong> ";
+                        pLieu.appendChild(document.createTextNode(data.place));
+                        infoDiv.appendChild(pLieu);
+                        const pHeure = document.createElement("p");
+                        pHeure.innerHTML = "<strong>Heure:</strong> ";
+                        pHeure.appendChild(document.createTextNode(data.time_start + " - " + data.time_end));
+                        infoDiv.appendChild(pHeure);
+                        container.appendChild(infoDiv);
+
+                        if (totalPlayers === 0) {
+                            const noPlayersDiv = document.createElement("div");
+                            noPlayersDiv.className = "bg-amber-100 border border-amber-300 text-amber-800 px-4 py-3 rounded-lg";
+                            const noPlayersH6 = document.createElement("h6");
+                            noPlayersH6.className = "font-bold mb-1";
+                            noPlayersH6.textContent = "Aucun joueur convoqué";
+                            noPlayersDiv.appendChild(noPlayersH6);
+                            const noPlayersP = document.createElement("p");
+                            noPlayersP.textContent = "Il n'y a actuellement aucun joueur convoqué pour ce match.";
+                            noPlayersDiv.appendChild(noPlayersP);
+                            container.appendChild(noPlayersDiv);
+                        } else {
+                            const playersP = document.createElement("p");
+                            playersP.innerHTML = "<strong>Joueurs convoqués:</strong> ";
+                            playersP.appendChild(document.createTextNode(totalPlayers + " joueur" + (totalPlayers > 1 ? "s" : "") + " (" + positionBreakdown + ")"));
+                            infoDiv.appendChild(playersP);
+
+                            const playersDiv = document.createElement("div");
+                            const playersH6 = document.createElement("h6");
+                            playersH6.className = "text-xl font-semibold text-gray-800 mb-3";
+                            playersH6.textContent = "Liste des joueurs:";
+                            playersDiv.appendChild(playersH6);
+                            const playersUl = document.createElement("ul");
+                            playersUl.className = "grid grid-cols-1 md:grid-cols-2 gap-3";
+                            playersByPosition.forEach(player => {
+                                const li = document.createElement("li");
+                                li.className = "bg-indigo-50 rounded-lg p-3";
+                                const number = player.number ? player.number : "N/A";
+                                const position = player.position ? player.position : "N/A";
+                                li.textContent = "[" + position + "] " + number + " - " + player.fname + " " + player.lname + " (" + player.dob + ")";
+                                playersUl.appendChild(li);
+                            });
+                            playersDiv.appendChild(playersUl);
+                            container.appendChild(playersDiv);
+                        }
+
+                        if (totalStaff > 0) {
+                            const staffDiv = document.createElement("div");
+                            staffDiv.className = "mt-6";
+                            const staffH6 = document.createElement("h6");
+                            staffH6.className = "text-xl font-semibold text-gray-800 mb-3";
+                            staffH6.textContent = "Personnel (" + totalStaff + "):";
+                            staffDiv.appendChild(staffH6);
+                            const staffUl = document.createElement("ul");
+                            staffUl.className = "space-y-2";
+                            staffList.forEach(staff => {
+                                const li = document.createElement("li");
+                                li.className = "flex items-center";
+                                const roleSpan = document.createElement("span");
+                                roleSpan.className = "font-medium w-32";
+                                roleSpan.textContent = staff.role + ":";
+                                li.appendChild(roleSpan);
+                                li.appendChild(document.createTextNode(" " + staff.fname + " " + staff.lname));
+                                staffUl.appendChild(li);
+                            });
+                            staffDiv.appendChild(staffUl);
+                            container.appendChild(staffDiv);
+                        } else {
+                            const noStaffDiv = document.createElement("div");
+                            noStaffDiv.className = "mt-6 bg-blue-50 border border-blue-200 text-blue-800 px-4 py-3 rounded-lg";
+                            const noStaffH6 = document.createElement("h6");
+                            noStaffH6.className = "font-bold mb-1";
+                            noStaffH6.textContent = "Aucun personnel convoqué";
+                            noStaffDiv.appendChild(noStaffH6);
+                            const noStaffP = document.createElement("p");
+                            noStaffP.textContent = "Il n'y a actuellement aucun personnel convoqué pour ce match.";
+                            noStaffDiv.appendChild(noStaffP);
+                            container.appendChild(noStaffDiv);
+                        }
+
+                        eventDetailsContent.appendChild(container);
+                    }
+                    eventDetailsModal.classList.remove("hidden");
+                })
+                    .catch(error => console.error("Erreur lors du chargement des détails de l'événement:", error));
+            }
+        });
+    </script>
+</body>
+
+</html>

mdl.rb

@@ -0,0 +1,2 @@
+all
+rule 'MD013', :ignore_code_blocks => true

myice/myice.py

@@ -9,26 +9,185 @@ import json
 import os
 import re
 import sys
+import tempfile
 from enum import Enum
 from pathlib import Path
 from typing import Annotated
+
+import pypdf
 import requests
 import typer
+from rich import print
+from rl_ai_tools import utils  # type: ignore
 
 user_agent = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:131.0) Gecko/20100101 Firefox/131.0"
 
+
+def sanitize_json_response(text):
+    """Sanitize JSON response from MyIce API using our proven fix_schedule_json.py approach"""
+    try:
+        # First, try to parse as-is
+        data = json.loads(text)
+        return json.dumps(data, ensure_ascii=False, indent=2, separators=(",", ": "))
+    except json.JSONDecodeError:
+        # Use the exact same approach as our working fix_schedule_json.py script
+        # but implemented directly in code
+
+        # Split into lines to process
+        lines = text.split("\n")
+
+        # Fix line issues (remove line numbers if present)
+        fixed_lines = []
+        for line in lines:
+            # Remove line numbers prefix if present (from cat -n format)
+            line = re.sub(r"^\s*\d+\|\s*", "", line)
+            fixed_lines.append(line)
+
+        # Join all lines back together
+        content = "".join(fixed_lines)
+
+        # Apply comprehensive sanitization that we know works
+        # 1. Escape literal newlines, carriage returns, and tabs everywhere
+        content = content.replace("\n", "\\n")
+        content = content.replace("\r", "\\r")
+        content = content.replace("\t", "\\t")
+
+        # 2. Find the main JSON array structure
+        start = content.find("[")
+        end = content.rfind("]")
+
+        if start != -1 and end != -1 and end > start:
+            array_content = content[start : end + 1]
+        else:
+            # Fallback: try to reconstruct a valid array
+            array_content = "[" + content + "]"
+
+        # 3. Fix common JSON formatting issues
+        # Remove trailing commas before closing brackets/braces
+        array_content = re.sub(r",(\s*[}\]])", r"\1", array_content)
+
+        # 4. Try to parse the sanitized content
+        try:
+            data = json.loads(array_content)
+            return json.dumps(
+                data, ensure_ascii=False, indent=2, separators=(",", ": ")
+            )
+        except json.JSONDecodeError:
+            # If parsing still fails, try one more aggressive approach
+            # Remove any remaining control characters that might be causing issues
+            # This is the key fix - we need to escape control characters rather than remove them
+            def escape_control_chars(match):
+                char = match.group(0)
+                # Handle specific control characters that might cause issues
+                if char == "\n":
+                    return "\\n"
+                elif char == "\r":
+                    return "\\r"
+                elif char == "\t":
+                    return "\\t"
+                else:
+                    # For other control characters, use Unicode escape
+                    return f"\\u{ord(char):04x}"
+
+            # More aggressive approach: escape ALL control characters
+            # This handles the case where line breaks occur within JSON string values
+            # We need to escape them before they break the JSON structure
+
+            # First, let's try to detect if there are line breaks within quoted strings
+            # and escape them properly
+
+            # Simple approach: escape all control characters
+            array_content = re.sub(r"[\x00-\x1f]", escape_control_chars, array_content)
+
+            try:
+                data = json.loads(array_content)
+                return json.dumps(
+                    data, ensure_ascii=False, indent=2, separators=(",", ": ")
+                )
+            except json.JSONDecodeError:
+                # Final fallback - return a minimal valid JSON array
+                return json.dumps(
+                    [], ensure_ascii=False, indent=2, separators=(",", ": ")
+                )
+
+
 app = typer.Typer(no_args_is_help=True)
-session: requests.Session
+session = requests.Session()
-userid: int
+userid: int = 0
+global_config_section: str = "default"
+
+
+# Add global option for config section
+@app.callback()
+def main(
+    config_section: Annotated[
+        str,
+        typer.Option(
+            "--config-section", "-c", help="Configuration section to use from INI file"
+        ),
+    ] = "default",
+):
+    """My Ice Hockey schedule tool"""
+    # Store the config_section in a global variable so it can be accessed by commands
+    global global_config_section
+    global_config_section = config_section
 
 
 class AgeGroup(str, Enum):
+    u111 = "U11 (1)"
     u13e = "U13 (Elite)"
     u13t = "U13 (Top)"
     u13a = "U13 (A)"
     u13p = "U13 (Prép)"
+    u14ev = "U14 (Elite Vernets)"
+    u14sae = "U14 (Groupe SAE)"
+    u14esmv = "U14 (Elite Sous-Moulin/Vergers)"
     u15t = "U15 (Top)"
     u15a = "U15 (A)"
+    u16e = "U16 (Elit)"
+    u16t = "U16 (Top GS Ass)"
+    u18e = "U18 (Elit)"
+    u21e = "U21 (Elit)"
+    u14t = "U14 (Top)"
+    u14t1 = "U14 (Top1)"
+    u14t2 = "U14 (Top2)"
+
+
+def normalize_age_group(value: str) -> AgeGroup | None:
+    """Normalize age group string to handle case and spelling variations."""
+    import re
+
+    if not isinstance(value, str):
+        return None
+
+    def normalize_spelling(text: str) -> str:
+        """Normalize spelling variations of 'elit' to 'elite'."""
+        # Replace accented versions first
+        text = text.replace("élit", "elite")
+        # Use regex to replace "elit" with "elite" only when it's a complete word
+        # This avoids replacing "elit" within "elite"
+        text = re.sub(r"\belit\b", "elite", text)
+        return text
+
+    # Convert to lowercase for case-insensitive comparison
+    input_lower = value.lower()
+    input_normalized = normalize_spelling(input_lower)
+
+    for member in AgeGroup:
+        # Convert enum value to lowercase and normalize
+        member_lower = member.value.lower()
+        member_normalized = normalize_spelling(member_lower)
+
+        # Check for match
+        if member_normalized == input_normalized:
+            return member
+
+    return None
+
+
+class EventType(str, Enum):
+    game = "game"
+    practice = "practice"
 
 
 def load_cookies(file: str = "cookies.txt") -> requests.cookies.RequestsCookieJar:
@@ -40,12 +199,16 @@ def load_cookies(file: str = "cookies.txt") -> requests.cookies.RequestsCookieJa
     return requests.cookies.cookiejar_from_dict(cj_dict)
 
 
-def save_cookies():
+def save_cookies(file: str = "cookies.txt"):
-    with open("cookies.txt", "w") as f:
+    cookie_jar_file = Path(file)
+    with cookie_jar_file.open("w") as f:
         f.write(json.dumps(requests.utils.dict_from_cookiejar(session.cookies)))
 
 
-def get_login(local_file: str = "myice.ini") -> tuple[str, str, int]:
+def get_login(
+    local_file: str = "myice.ini",
+    config_section: str = "default",
+) -> tuple[str, str, int | None, str | None, int | None]:
     config = configparser.ConfigParser()
     config.read(
         [
@@ -54,25 +217,49 @@ def get_login(local_file: str = "myice.ini") -> tuple[str, str, int]:
             local_file,
         ]
     )
-    if "default" in config.sections():
+    if config_section in config.sections():
-        default_config = config["default"]
+        selected_config = config[config_section]
-
+    elif "default" in config.sections():
-        username = default_config.get("username")
+        # Fallback to default section if specified section doesn't exist
-        password = default_config.get("password")
+        selected_config = config["default"]
-        userid = default_config.getint("userid")
+        print(
-        if not username or not password:
+            f"Warning: Section '{config_section}' not found, using 'default' section",
-            print("Error: please configure username/password in ini file")
+            file=sys.stderr,
-            sys.exit(1)
+        )
     else:
-        print("Error: please configure username/password in ini file")
+        print("Error: please configure username/password in ini file", file=sys.stderr)
         sys.exit(1)
-    return username, password, userid
+
+    username = selected_config.get("username")
+    password = selected_config.get("password")
+    userid = selected_config.getint("userid", fallback=None)
+    token = selected_config.get("token", fallback=None)
+    club_id = selected_config.getint("club_id", fallback=None)
+
+    if not username or not password:
+        print("Error: please configure username/password in ini file", file=sys.stderr)
+        sys.exit(1)
+
+    return username, password, userid, token, club_id
 
 
-def do_login():
+def select_club(club_id: int = 172):
-    global session
+    """Select a club by ID after login."""
+    r = session.get(
+        f"https://app.myice.hockey/?cl={club_id}", headers={"User-Agent": user_agent}
+    )
+    r.raise_for_status()
+
+
+def do_login(config_section: str | None = None):
     global userid
-    username, password, userid = get_login()
+
+    # Use provided config_section, or fall back to global one
+    section = config_section if config_section is not None else global_config_section
+
+    username, password, userid_tmp, _token, club_id = get_login(config_section=section)
+    if userid_tmp is not None:
+        userid = userid_tmp
     r = session.get("https://app.myice.hockey/", headers={"User-Agent": user_agent})
     r.raise_for_status()
     form_data = {
@@ -91,10 +278,12 @@ def do_login():
         },
     )
     r.raise_for_status()
+    # select the club we want
+    if club_id:
+        select_club(club_id)
 
 
 def get_userid():
-    global session
     r = session.get(
         "https://app.myice.hockey/players/clubschedule/",
         headers={
@@ -114,30 +303,33 @@ def get_userid():
 def wrapper_session(func):
     def wrapper(*args, **kwargs):
         global session, userid
+        # Use the global config_section
+        config_section = global_config_section
+
         session = requests.Session()
+        # session.verify = False
         session.cookies = load_cookies()
         session.cookies.clear_expired_cookies()
         if not session.cookies.get("mih_v3_cookname"):
-            print("login...")
+            print("login...", file=sys.stderr)
-            do_login()
+            do_login(config_section=None)  # Use global config_section
             save_cookies()
-        _, _, userid = get_login()
+        _, _, userid, _, _ = get_login(config_section=config_section)
         if not userid:
-            print("get userid...")
+            print("get userid...", file=sys.stderr)
             userid = get_userid()
+            print(f"{userid=}", file=sys.stderr)
         return func(*args, **kwargs)
 
     return wrapper
 
 
 @wrapper_session
-def get_schedule() -> str:
+def get_schedule(num_days: int) -> str:
-    global session
-    global userid
     assert session and userid
     now = datetime.datetime.now()
-    date_start = now + datetime.timedelta(days=1)
+    date_start = now.replace(hour=0, minute=0, second=0, microsecond=0)
-    date_end = date_start + datetime.timedelta(days=7)
+    date_end = date_start + datetime.timedelta(days=num_days)
     r = session.post(
         "https://app.myice.hockey/inc/processclubplanning.php",
         data={
@@ -150,15 +342,19 @@ def get_schedule() -> str:
         headers={
             "User-Agent": user_agent,
             "Referer": "https://app.myice.hockey/players/clubschedule/",
+            "Accept": "application/json, text/javascript, */*; q=0.01",
+            "X-Requested-With": "XMLHttpRequest",
         },
     )
     r.raise_for_status()
-    return r.text
+    # Debug: Save raw response to file for analysis
+    # with open("raw_response.txt", "w") as f:
+    #     f.write(r.text)
+    return json.loads(sanitize_json_response(r.text))
 
 
 @wrapper_session
 def game_pdf(gameid: int, outfile: Path):
-    global session, userid
     assert session and userid
     r = session.get(
         f"https://app.myice.hockey/pdfexports/playerplatgamepdfgenerator.php?id={gameid}",
@@ -175,7 +371,6 @@ def game_pdf(gameid: int, outfile: Path):
 
 @wrapper_session
 def practice_pdf(gameid: int, outfile: Path):
-    global session, userid
     assert session and userid
     r = session.get(
         f"https://app.myice.hockey/pdfexports/playerplatpracticepdf.php?practice={gameid}",
@@ -198,37 +393,69 @@ def schedule(
             "--outfile", "-o", help="file to write result to, or stdout if none"
         ),
     ] = None,
+    num_days: Annotated[int, typer.Option("--days")] = 7,
 ):
     """
     Fetch schedule as json
     """
-    schedule = get_schedule()
+    schedule = get_schedule(num_days)
     if outfile:
         with outfile.open("w") as f:
-            f.write(schedule)
+            f.write(json.dumps(schedule))
     else:
-        print("Schedule:", file=sys.stderr)
+        import builtins
-        print(schedule)
+
+        builtins.print(json.dumps(schedule, indent=2))
 
 
-def open(file: str) -> None:
+def os_open(file: str) -> None:
+    import subprocess
+
     if os.uname().sysname == "Linux":
-        os.system(f"xdg-open {file}")
+        subprocess.run(["xdg-open", file])
     else:
         print(f"Opening file {file}", file=sys.stderr)
-        os.system(f"open {file}")
+        subprocess.run(["open", file])
+
+
+def extract_players(pdf_file: Path) -> list[str]:
+    reader = pypdf.PdfReader(pdf_file)
+    page = reader.pages[0]
+
+    players = []
+
+    def visitor_body(text, cm, tm, fontDict, fontSize):
+        global last_text
+        if text:
+            last_text = text
+        (x, y) = (tm[4], tm[5])
+        if x > 79 and x < 80 and y < 741.93:
+            # and y < 741.93 and y > 741.93 - 585.18:
+            players.append(last_text.strip())
+
+    page.extract_text(visitor_text=visitor_body, extraction_mode="plain")
+    return players
 
 
 @app.command("game")
 def get_game_pdf(
     game_id: Annotated[int, typer.Argument(help="ID of game to gen pdf for")],
+    open_file: Annotated[bool, typer.Option("--open", "-o")] = False,
 ):
     """
     Genate the pdf for the game invitation
     """
+    if open_file:
         output_filename = f"game_{game_id}.pdf"
+    else:
+        output_filename = tempfile.NamedTemporaryFile().name
     game_pdf(game_id, Path(output_filename))
-    open(output_filename)
+    if open_file:
+        os_open(output_filename)
+    else:
+        players = extract_players(Path(output_filename))
+        print("Players:")
+        print("\n".join(players))
 
 
 @app.command("practice")
@@ -240,12 +467,16 @@ def get_practice_pdf(
     """
     output_filename = f"practice_{game_id}.pdf"
     practice_pdf(game_id, Path(output_filename))
-    open(output_filename)
+    os_open(output_filename)
 
 
 @app.command("search")
 def parse_schedule(
-    age_group: Annotated[AgeGroup, typer.Argument(...)],
+    age_group: Annotated[AgeGroup | None, typer.Option()] = None,
+    event_type_filter: Annotated[
+        EventType | None,
+        typer.Option("--type", help="Only display events of this type"),
+    ] = None,
     schedule_file: Annotated[
         Path, typer.Option(help="schedule json file to parse")
     ] = Path("schedule.json"),
@@ -253,11 +484,31 @@ def parse_schedule(
     """
     Parse schedule.json to look for specific games or practices
     """
+    try:
         with schedule_file.open("r") as f:
             data = json.load(f)
-    for event in [x for x in data if x["agegroup"] == age_group]:
+    except json.JSONDecodeError:
-        # print(json.dumps(event, indent=2))
+        # If JSON is malformed, try to sanitize it first
+        with schedule_file.open("r") as f:
+            content = f.read()
+        sanitized_content = sanitize_json_response(content)
+        data = json.loads(sanitized_content)
+    # age_group filter
+    if age_group:
+        events = [x for x in data if normalize_age_group(x["agegroup"]) == age_group]
+    else:
+        events = [x for x in data if normalize_age_group(x["agegroup"]) is not None]
+    # event_type filter
+    if event_type_filter:
+        if event_type_filter.value == EventType.game:
+            events = [x for x in events if "event" in x and x["event"] == "Jeu"]
+        else:
+            events = [x for x in events if "event" not in x or x["event"] == "Jeu"]
+    for event in events:
+        if age_group:
             raw_title = event["title"].removeprefix(age_group + "\n")
+        else:
+            raw_title = event["title"]
         title = " ".join(raw_title.split("\n"))
         start = datetime.datetime.fromisoformat(event["start"])
         start_fmt = start.strftime("%H:%M")
@@ -273,5 +524,270 @@ def parse_schedule(
         print(f"{event_type}: {title}\n")
 
 
+@app.command("ai")
+def check_with_ai(
+    schedule_file: Annotated[
+        Path, typer.Option(help="schedule json file to parse")
+    ] = Path("schedule.json"),
+):
+    """
+    Search through the schedule with natural language using Infomaniak LLM API
+    """
+    if not utils.init():
+        sys.exit(1)
+    with schedule_file.open("r") as f:
+        schedule_data = json.load(f)
+    schedule_data = [
+        x for x in schedule_data if normalize_age_group(x["agegroup"]) is not None
+    ]
+    for event in schedule_data:
+        event["team"] = event["agegroup"].replace("(", "").replace(")", "")
+        del event["agegroup"]
+    when = datetime.datetime.now().strftime("%d-%m-%Y et il est %H:%M")
+    system = "\n".join(
+        [
+            "Tu es une IA connaissant bien les données suivantes, qui décrivent les match et entraînements d'équipes de hockey sur glace.",
+            f"aujourd'hui, nous sommes le {when}",
+            "attention: ce qu'il y a entre parenthèse après la catégorie est une catégorie à part entière, example, u13 a = U13 (A) et ça correspond aux agegroup",
+            "assure-toi de ne pas confondre les catégories d'age dans tes réponses. ne donne pas une réponse pour la mauvaise équipe",
+            "ne confond pas top, elite, a, prép",
+            "```json",
+            json.dumps(schedule_data),
+            "```",
+        ],
+    )
+    history: list[tuple[str, str]] = []
+    while True:
+        try:
+            question = input("> ")
+        except EOFError:
+            break
+        answer = utils.llm_inference(
+            question, history, system=system, model="mixtral8x22b"
+        )
+        print("<", answer)
+        history.append((question, answer))
+
+
+mobile_headers = {
+    "Accept": "application/json, text/plain, */*",
+    "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148",
+    "Sec-Fetch-Site": "cross-site",
+    "Accept-Language": "fr-FR,fr;q=0.9",
+    "Sec-Fetch-Mode": "cors",
+    "Origin": "null",
+    "Sec-Fetch-Dest": "empty",
+    "Content-Type": "application/x-www-form-urlencoded",
+}
+
+
+# def curl_for_mobile_login(username: str, password: str) -> str:
+#     """Generate curl command to replicate mobile_login request."""
+#     import base64
+
+#     headers_str = " ".join([f"-H '{k}: {v}'" for k, v in mobile_headers.items()])
+#     encoded_username = base64.b64encode(username.encode()).decode()
+#     encoded_password = base64.b64encode(password.encode()).decode()
+#     return f"""curl -X POST "https://app.myice.hockey/api/mobilerest/login" \
+# {headers_str} \
+# -d 'login_email={encoded_username}&login_password={encoded_password}&language=FR&v=2'"""
+
+
+def mobile_login(config_section: str | None = None):
+    import base64
+
+    # Use provided config_section, or fall back to global one
+    section = config_section if config_section is not None else global_config_section
+
+    username, password, _, token, club_id = get_login(config_section=section)
+    if token and club_id:
+        return {"id": 0, "token": token, "id_club": club_id}
+
+    print("Requesting token", file=sys.stderr)
+    # Print curl equivalent for debugging
+    # print(curl_for_mobile_login(username, password), file=sys.stderr)
+    with requests.post(
+        "https://app.myice.hockey/api/mobilerest/login",
+        headers=mobile_headers,
+        data=f"login_email={base64.b64encode(username.encode()).decode()}&login_password={base64.b64encode(password.encode()).decode()}&language=FR&v=2",
+        timeout=(5, 30),
+        # verify=False,
+    ) as r:
+        r.raise_for_status()
+        return {
+            "id": 0,
+            "token": r.json()["userinfo"]["token"],
+            "id_club": club_id
+            or r.json()["userinfo"]["id_club"],  # Use configured club_id if available
+        }
+
+
+userdata = {
+    "id": 0,
+    "id_club": 0,
+    "token": "",
+}
+
+
+# def curl_for_refresh_data(token: str, club_id: int) -> str:
+#     """Generate curl command to replicate refresh_data request."""
+#     headers_str = " ".join([f"-H '{k}: {v}'" for k, v in mobile_headers.items()])
+#     return f"""curl -X POST "https://app.myice.hockey/api/mobilerest/refreshdata" \
+# {headers_str} \
+# -d 'token={token}&id_club={club_id}&language=FR'"""
+
+
+def refresh_data(user_data=None):
+    # Use provided user_data or fall back to global userdata for backward compatibility
+    if user_data is None:
+        user_data = userdata
+    # Print curl equivalent for debugging
+    # print(
+    #     curl_for_refresh_data(user_data["token"], user_data["id_club"]), file=sys.stderr
+    # )
+    with requests.post(
+        "https://app.myice.hockey/api/mobilerest/refreshdata",
+        headers=mobile_headers,
+        data=f"token={user_data['token']}&id_club={user_data['id_club']}&language=FR",
+        # verify=False,
+    ) as r:
+        r.raise_for_status()
+        # Since the API returns valid JSON, we don't need to sanitize it
+        # Just parse it directly
+        try:
+            return r.json()
+        except json.JSONDecodeError:
+            # If direct parsing fails, try with sanitization
+            sanitized = sanitize_json_response(r.text)
+            try:
+                return json.loads(sanitized)
+            except json.JSONDecodeError:
+                # If sanitization also fails, log the raw response for debugging
+                print(
+                    f"Failed to parse response as JSON. Raw response: {r.text[:500]}..."
+                )
+                # Return an empty dict to avoid breaking the API
+                return {}
+
+
+@app.command("mobile-login")
+def do_mobile_login():
+    global userdata
+    userdata = mobile_login(config_section=global_config_section)
+    print(json.dumps(userdata, indent=2))
+
+
+@app.command("mobile")
+def mobile():
+    global userdata
+    userdata = mobile_login(config_section=global_config_section)
+    games = [x for x in refresh_data().get("club_games")]
+    # Use built-in print to avoid rich formatting issues
+    import builtins
+
+    builtins.print(json.dumps(games, indent=2, ensure_ascii=False))
+
+
+@app.command("mobile-all")
+def mobile_all():
+    global userdata
+    userdata = mobile_login(config_section=global_config_section)
+    # Use built-in print to avoid rich formatting issues
+    import builtins
+
+    builtins.print(json.dumps(refresh_data(), indent=2, ensure_ascii=False))
+
+
+@app.command("mobile-game")
+def mobile_game(
+    game_id: Annotated[int, typer.Argument(help="game id")],
+    raw: Annotated[bool, typer.Option(help="display raw output")] = False,
+):
+    global userdata
+    userdata = mobile_login(config_section=global_config_section)
+
+    with requests.post(
+        "https://app.myice.hockey/api/mobilerest/getevent",
+        headers=mobile_headers,
+        data="&".join(
+            [
+                f"token={userdata['token']}",
+                f"id_event={game_id}",
+                "type=games",
+                f"id_player={userdata['id']}",
+                f"id_club={userdata['id_club']}",
+                "language=FR",
+            ]
+        ),
+        # verify=False,
+    ) as r:
+        try:
+            data = json.loads(sanitize_json_response(r.text))["eventData"]
+
+            players = data["convocation"]["available"]
+            if raw:
+                print(data)
+            print(
+                f"Game {game_id}: {data['title']} ({data['type']}, {data['is_away']}) at {data['time_start']}"
+            )
+            print(f"{len(players)} players")
+            for player in sorted(
+                players,
+                key=lambda x: (
+                    x["position"] if x["position"] else "none",
+                    x["dob"],
+                ),
+            ):
+                print(
+                    f"[{player['position']}] {player['fname']} {player['lname']} ({player['dob']})"
+                )
+        except KeyError:
+            print(sanitize_json_response(r.text))
+
+
+@app.command("mobile-practice")
+def mobile_practice(
+    game_id: Annotated[int, typer.Argument(help="game id")],
+    raw: Annotated[bool, typer.Option(help="display raw output")] = False,
+):
+    global userdata
+    userdata = mobile_login(config_section=global_config_section)
+
+    with requests.post(
+        "https://app.myice.hockey/api/mobilerest/getevent",
+        headers=mobile_headers,
+        data="&".join(
+            [
+                f"token={userdata['token']}",
+                f"id_event={game_id}",
+                "type=practices",
+                f"id_player={userdata['id']}",
+                f"id_club={userdata['id_club']}",
+                "language=FR",
+            ]
+        ),
+        # verify=False,
+    ) as r:
+        data = json.loads(sanitize_json_response(r.text))["eventData"]
+
+        players = data["convocation"]["available"]
+        if raw:
+            print(data)
+        print(
+            f"Game {game_id}: {data['title']} ({data['type']}, {data.get('is_away')}) at {data['time_start']}"
+        )
+        print(f"{len(players)} players")
+        for player in sorted(
+            players,
+            key=lambda x: (
+                x["position"] if x["position"] else "none",
+                x["dob"],
+            ),
+        ):
+            print(
+                f"[{player['position']}] {player['fname']} {player['lname']} ({player['dob']})"
+            )
+
+
 if __name__ == "__main__":
     app()

myice/webapi.py

@@ -0,0 +1,459 @@
+import base64
+import hashlib
+import logging
+import os
+from typing import Annotated
+
+import requests
+from fastapi import FastAPI, Header, HTTPException, Request, status
+from fastapi.middleware.cors import CORSMiddleware
+from fastapi.responses import FileResponse, RedirectResponse
+from pydantic import BaseModel
+
+from . import myice
+
+# OIDC Configuration
+CLIENT_ID = os.environ.get("CLIENT_ID", "8ea04fbb-4237-4b1d-a895-0b3575a3af3f")
+CLIENT_SECRET = os.environ.get("CLIENT_SECRET")
+if not CLIENT_SECRET:
+    raise RuntimeError("CLIENT_SECRET environment variable must be set")
+REDIRECT_URI = os.environ.get("REDIRECT_URI", "http://localhost:8000/callback")
+SECRET_KEY = os.environ.get("SECRET_KEY", "change_me_in_production")
+AUTHORIZATION_ENDPOINT = "https://login.infomaniak.com/authorize"
+TOKEN_ENDPOINT = "https://login.infomaniak.com/token"
+USERINFO_ENDPOINT = "https://login.infomaniak.com/oauth2/userinfo"
+JWKS_URI = "https://login.infomaniak.com/oauth2/jwks"
+
+# Allowed users (based on email claim)
+ALLOWED_USERS = (
+    os.environ.get("ALLOWED_USERS", "").split(",")
+    if os.environ.get("ALLOWED_USERS")
+    else []
+)
+
+origins = (
+    os.environ.get("ALLOWED_ORIGINS", "").split(",")
+    if os.environ.get("ALLOWED_ORIGINS")
+    else []
+)
+logger = logging.getLogger(__name__)
+app = FastAPI()
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=origins,
+    allow_credentials=True,
+    allow_methods=["GET", "POST"],
+    allow_headers=["Authorization", "Content-Type"],
+)
+
+block_endpoints = ["/health"]
+
+
+class LogFilter(logging.Filter):
+    def filter(self, record):
+        return not (
+            record.args and len(record.args) >= 3 and record.args[2] in block_endpoints
+        )
+
+
+uvicorn_logger = logging.getLogger("uvicorn.access")
+uvicorn_logger.addFilter(LogFilter())
+
+
+class AuthHeaders(BaseModel):
+    Authorization: str
+
+    def token(self) -> str:
+        parts = self.Authorization.split(" ")
+        if len(parts) == 2:
+            return parts[1]
+        return ""
+
+    def authorized(self) -> bool:
+        token = self.token()
+        if not token:
+            return False
+
+        # No static key fallback; only valid OIDC tokens are accepted
+        return self.validate_oidc_token()
+
+    def validate_oidc_token(self) -> bool:
+        try:
+            token = self.token()
+            if not token:
+                return False
+
+            # Try JWT validation first (for id_token-style tokens)
+            if token.count(".") == 2:
+                import jwt
+                from jwt import PyJWKClient
+
+                jwks_client = PyJWKClient(JWKS_URI)
+                signing_key = jwks_client.get_signing_key_from_jwt(token)
+                payload_data = jwt.decode(
+                    token,
+                    signing_key.key,
+                    algorithms=["RS256"],
+                    audience=CLIENT_ID,
+                    issuer="https://login.infomaniak.com/",
+                )
+                user_email = payload_data.get("email")
+                return not (
+                    ALLOWED_USERS and user_email and user_email not in ALLOWED_USERS
+                )
+
+            # Fallback: validate opaque tokens by calling userinfo endpoint
+            userinfo_response = requests.get(
+                USERINFO_ENDPOINT, headers={"Authorization": f"Bearer {token}"}
+            )
+            if userinfo_response.status_code != 200:
+                return False
+
+            userinfo = userinfo_response.json()
+            user_email = userinfo.get("email")
+            return not (
+                ALLOWED_USERS and user_email and user_email not in ALLOWED_USERS
+            )
+        except Exception:
+            return False
+
+
+class HealthCheck(BaseModel):
+    """Response model to validate and return when performing a health check."""
+
+    status: str = "OK"
+
+
+@app.get("/")
+async def home():
+    return FileResponse("index.html")
+
+
+@app.get(
+    "/health",
+    response_model=HealthCheck,
+    status_code=status.HTTP_200_OK,
+)
+def get_health() -> HealthCheck:
+    return HealthCheck(status="OK")
+
+
+@app.get("/style.css")
+async def style_css():
+    return FileResponse("style.css")
+
+
+@app.get("/favicon.ico")
+async def favico():
+    return FileResponse("favicon.ico")
+
+
+@app.get("/login")
+async def login(request: Request):
+    """Redirect to Infomaniak OIDC login"""
+    import secrets
+    import urllib.parse
+
+    state = secrets.token_urlsafe(32)
+    nonce = secrets.token_urlsafe(32)
+
+    # Generate PKCE parameters for public clients / Infomaniak requirement
+    code_verifier = secrets.token_urlsafe(32)
+    code_challenge = (
+        base64.urlsafe_b64encode(hashlib.sha256(code_verifier.encode("ascii")).digest())
+        .decode("ascii")
+        .rstrip("=")
+    )
+
+    auth_url = (
+        f"{AUTHORIZATION_ENDPOINT}"
+        f"?client_id={CLIENT_ID}"
+        f"&redirect_uri={urllib.parse.quote(REDIRECT_URI)}"
+        f"&response_type=code"
+        f"&scope=openid email profile"
+        f"&state={state}"
+        f"&nonce={nonce}"
+        f"&code_challenge={code_challenge}"
+        f"&code_challenge_method=S256"
+    )
+
+    response = RedirectResponse(auth_url)
+    # Store state and nonce in secure http-only cookies for validation on callback
+    response.set_cookie(
+        "oidc_state", state, httponly=True, secure=True, samesite="lax", max_age=300
+    )
+    response.set_cookie(
+        "oidc_nonce", nonce, httponly=True, secure=True, samesite="lax", max_age=300
+    )
+    response.set_cookie(
+        "oidc_verifier",
+        code_verifier,
+        httponly=True,
+        secure=True,
+        samesite="lax",
+        max_age=300,
+    )
+    return response
+
+
+@app.get("/callback")
+async def callback(request: Request, code: str, state: str):
+    """Handle OIDC callback and exchange code for token"""
+    expected_state = request.cookies.get("oidc_state")
+    code_verifier = request.cookies.get("oidc_verifier")
+    # We should also delete state/nonce cookies once read
+    if not expected_state or state != expected_state:
+        response = RedirectResponse("/?error=Invalid state parameter")
+        response.delete_cookie("oidc_state")
+        response.delete_cookie("oidc_nonce")
+        response.delete_cookie("oidc_verifier")
+        return response
+    # Exchange authorization code for access token
+    token_data = {
+        "grant_type": "authorization_code",
+        "client_id": CLIENT_ID,
+        "client_secret": CLIENT_SECRET,
+        "code": code,
+        "redirect_uri": REDIRECT_URI,
+        "code_verifier": code_verifier,
+    }
+
+    token_response = requests.post(TOKEN_ENDPOINT, data=token_data).json()
+
+    if "access_token" not in token_response:
+        # Log the error for debugging
+        logger.error("Token exchange failed: %s", token_response)
+        # Redirect back to frontend with error
+        frontend_url = os.environ.get("FRONTEND_URL", "/")
+        error_detail = token_response.get(
+            "error_description", "Failed to obtain access token"
+        )
+        error_response = RedirectResponse(f"{frontend_url}?error={error_detail}")
+        error_response.delete_cookie("oidc_state")
+        error_response.delete_cookie("oidc_nonce")
+        error_response.delete_cookie("oidc_verifier")
+        return error_response
+
+    access_token = token_response["access_token"]
+
+    # Get user info
+    userinfo_response = requests.get(
+        USERINFO_ENDPOINT, headers={"Authorization": f"Bearer {access_token}"}
+    )
+
+    userinfo = userinfo_response.json()
+
+    # Check if user is in allowed list
+    user_email = userinfo.get("email")
+    if ALLOWED_USERS and user_email not in ALLOWED_USERS:
+        # Redirect back to frontend with error
+        frontend_url = os.environ.get("FRONTEND_URL", "/")
+        response = RedirectResponse(f"{frontend_url}?error=User not authorized")
+        response.delete_cookie("oidc_state")
+        response.delete_cookie("oidc_nonce")
+        response.delete_cookie("oidc_verifier")
+        return response
+
+    # Redirect back to frontend with access token and user info
+    frontend_url = os.environ.get("FRONTEND_URL", "/")
+    response = RedirectResponse(f"{frontend_url}#access_token={access_token}")
+    response.delete_cookie("oidc_state")
+    response.delete_cookie("oidc_nonce")
+    response.delete_cookie("oidc_verifier")
+    return response
+
+
+@app.get("/exchange-token")
+async def exchange_token(
+    request: Request,
+    code: str,
+    headers: Annotated[AuthHeaders, Header()],
+):
+    """Exchange authorization code for access token"""
+    if not headers.authorized():
+        raise HTTPException(401, detail="get out")
+
+    code_verifier = request.cookies.get("oidc_verifier")
+    # Exchange authorization code for access token
+    token_data = {
+        "grant_type": "authorization_code",
+        "client_id": CLIENT_ID,
+        "client_secret": CLIENT_SECRET,
+        "code": code,
+        "redirect_uri": REDIRECT_URI,
+        "code_verifier": code_verifier,
+    }
+
+    response = requests.post(TOKEN_ENDPOINT, data=token_data)
+    token_response = response.json()
+
+    if "access_token" not in token_response:
+        # Return error as JSON
+        error_detail = token_response.get(
+            "error_description", "Failed to obtain access token"
+        )
+        raise HTTPException(
+            status_code=400, detail=f"Token exchange failed: {error_detail}"
+        )
+
+    access_token = token_response["access_token"]
+
+    # Get user info
+    userinfo_response = requests.get(
+        USERINFO_ENDPOINT, headers={"Authorization": f"Bearer {access_token}"}
+    )
+
+    userinfo = userinfo_response.json()
+
+    # Check if user is in allowed list
+    user_email = userinfo.get("email")
+    if ALLOWED_USERS and user_email not in ALLOWED_USERS:
+        raise HTTPException(status_code=403, detail="User not authorized")
+
+    # Return token and user info as JSON
+    return {"access_token": access_token, "user": userinfo}
+
+
+@app.get("/userinfo")
+async def userinfo(headers: Annotated[AuthHeaders, Header()]):
+    """Get user info from access token"""
+    if not headers.authorized():
+        raise HTTPException(401, detail="get out")
+
+    access_token = headers.token()
+
+    userinfo_response = requests.get(
+        USERINFO_ENDPOINT, headers={"Authorization": f"Bearer {access_token}"}
+    )
+
+    return userinfo_response.json()
+
+
+@app.get("/schedule")
+async def schedule(
+    headers: Annotated[AuthHeaders, Header()],
+    account: str = "default",
+):
+    if not headers.authorized():
+        raise HTTPException(401, detail="get out")
+
+    try:
+        _username, _password, userid, existing_token, club_id = myice.get_login(
+            config_section=account
+        )
+    except Exception as e:
+        raise HTTPException(
+            400,
+            detail=f"Configuration error: {e!s}. Available accounts: isaac, leonard",
+        )
+
+    try:
+        if existing_token:
+            user_data = {
+                "id": userid,
+                "id_club": club_id or 186,
+                "token": existing_token,
+            }
+        else:
+            user_data = myice.mobile_login(config_section=account)
+
+        data = myice.refresh_data(user_data=user_data)
+        if "club_games" in data:
+            return data["club_games"]
+        else:
+            # Return empty array if no games data found
+            return []
+    except Exception as e:
+        print(f"Error fetching schedule: {e}")
+        import traceback
+
+        traceback.print_exc()
+        # Return empty array instead of throwing an error
+        return []
+
+
+@app.get("/accounts")
+async def accounts(
+    headers: Annotated[AuthHeaders, Header()],
+):
+    if not headers.authorized():
+        raise HTTPException(401, detail="get out")
+
+    # Import configparser to read the available sections
+    import configparser
+    from pathlib import Path
+
+    config = configparser.ConfigParser()
+    config_files = [
+        Path("~/.config/myice.ini").expanduser(),
+        Path("myice.ini"),
+    ]
+
+    # Read all config files
+    for config_file in config_files:
+        if config_file.exists():
+            try:
+                config.read(config_file, encoding="utf-8")
+            except Exception:
+                # Try without specifying encoding
+                config.read(config_file)
+
+    # Get all sections (accounts) from the config
+    accounts = []
+    for section in config.sections():
+        if section != "DEFAULT":  # Skip DEFAULT section
+            # Capitalize first letter for display
+            label = (
+                section[0].upper() + section[1:]
+                if len(section) > 1
+                else section.upper()
+            )
+            accounts.append({"name": section, "label": label})
+
+    # If no accounts found, return default
+    if not accounts:
+        accounts = [{"name": "default", "label": "Default"}]
+
+    return accounts
+
+
+@app.get("/game/{game_id}")
+async def game(
+    headers: Annotated[AuthHeaders, Header()],
+    game_id: int,
+    account: str = "default",
+):
+    if not headers.authorized():
+        raise HTTPException(401, detail="get out")
+
+    _username, _password, userid, existing_token, club_id = myice.get_login(
+        config_section=account
+    )
+    if existing_token:
+        user_data = {
+            "id": userid,
+            "id_club": club_id or 186,
+            "token": existing_token,
+        }
+    else:
+        user_data = myice.mobile_login(config_section=account)
+
+    # data = refresh_data()
+    with requests.post(
+        "https://app.myice.hockey/api/mobilerest/getevent",
+        headers=myice.mobile_headers,
+        data="&".join(
+            [
+                f"token={user_data['token']}",
+                f"id_event={game_id}",
+                "type=games",
+                f"id_player={user_data['id']}",
+                f"id_club={user_data['id_club']}",
+                "language=FR",
+            ]
+        ),
+        # verify=False,
+    ) as r:
+        data = r.json()["eventData"]
+        return data

pyproject.toml

@@ -1,23 +1,51 @@
-[tool.poetry]
+[project]
 name = "myice"
-version = "0.1.0"
+version = "v0.6.1"
 description = "myice parsing"
-authors = ["Rene Luria <rene@luria.ch>"]
+authors = [
+    { name = "Rene Luria", "email" = "<rene@luria.ch>"},
+]
 license = "MIT"
 readme = "README.md"
+requires-python = ">=3.13"
+
+dependencies = [
+    "requests (>=2.34.2)",
+    "typer (>=0.27.2)",
+    "pypdf (>=6.19.0)",
+    "rl-ai-tools >=1.17.3",
+    "fastapi[standard] (>=0.141.1)",
+    "pyjwt[crypto] (>=2.14.0)",
+]
 
 [tool.poetry.dependencies]
-python = "^3.12"
+rl-ai-tools = { source = "infomaniak" }
-requests = "^2.32.3"
-typer = {extras = ["all"], version = "^0.12.5"}
-
 
 [tool.poetry.group.dev.dependencies]
-ipykernel = "^6.29.5"
+types-requests = "^2.33.0.20260906"
+mypy = "^2.3.1"
+
+
+[[tool.poetry.source]]
+name = "infomaniak"
+url = "https://pypi.purple.infomaniak.ch"
+priority = "supplemental"
+
+[tool.ruff.lint]
+ignore = [
+    "ASYNC210",
+    "BLE001",
+    "DTZ005",
+    "PLW1510",
+    "SIM115",
+]
 
 [build-system]
 requires = ["poetry-core"]
 build-backend = "poetry.core.masonry.api"
 
-[tool.poetry.scripts]
+[project.scripts]
 myice = 'myice.myice:app'
+
+[tool.poetry.requires-plugins]
+poetry-plugin-export = ">=1.8"

requirements.txt

@@ -0,0 +1,55 @@
+--extra-index-url https://pypi.purple.infomaniak.ch
+
+agent-detector==2.0.0 ; python_version >= "3.13"
+annotated-doc==0.0.5 ; python_version >= "3.13"
+annotated-types==0.8.0 ; python_version >= "3.13"
+anyio==4.15.1 ; python_version >= "3.13"
+certifi==2026.7.22 ; python_version >= "3.13"
+cffi==2.1.1 ; python_version >= "3.13" and platform_python_implementation != "PyPy"
+charset-normalizer==3.5.1 ; python_version >= "3.13"
+click==8.5.0 ; python_version >= "3.13"
+colorama==0.4.6 ; python_version >= "3.13" and platform_system == "Windows"
+cryptography==50.0.1 ; python_version >= "3.13"
+detect-installer==0.2.1 ; python_version >= "3.13"
+dnspython==2.8.0 ; python_version >= "3.13"
+email-validator==2.3.0 ; python_version >= "3.13"
+fastapi-cli==0.0.32 ; python_version >= "3.13"
+fastapi-cloud-cli==0.26.0 ; python_version >= "3.13"
+fastapi==0.141.1 ; python_version >= "3.13"
+fastar==0.12.0 ; python_version >= "3.13"
+h11==0.16.0 ; python_version >= "3.13"
+httpcore==1.0.9 ; python_version >= "3.13"
+httptools==0.8.0 ; python_version >= "3.13"
+httpx==0.28.1 ; python_version >= "3.13"
+idna==3.19 ; python_version >= "3.13"
+jinja2==3.1.6 ; python_version >= "3.13"
+markdown-it-py==4.2.0 ; python_version >= "3.13"
+markupsafe==3.0.3 ; python_version >= "3.13"
+mdurl==0.1.2 ; python_version >= "3.13"
+pycparser==3.0 ; implementation_name != "PyPy" and platform_python_implementation != "PyPy" and python_version >= "3.13"
+pydantic-core==2.46.5 ; python_version >= "3.13"
+pydantic-extra-types==2.11.1 ; python_version >= "3.13"
+pydantic-settings==2.15.0 ; python_version >= "3.13"
+pydantic==2.13.5 ; python_version >= "3.13"
+pygments==2.21.0 ; python_version >= "3.13"
+pyjwt==2.14.0 ; python_version >= "3.13"
+pypdf==6.19.0 ; python_version >= "3.13"
+python-dotenv==1.2.3 ; python_version >= "3.13"
+python-multipart==0.0.32 ; python_version >= "3.13"
+pyyaml==6.0.3 ; python_version >= "3.13"
+requests==2.34.2 ; python_version >= "3.13"
+rich-toolkit==0.20.5 ; python_version >= "3.13"
+rich==15.0.0 ; python_version >= "3.13"
+rignore==0.8.1 ; python_version >= "3.13"
+rl-ai-tools==1.17.3 ; python_version >= "3.13"
+sentry-sdk==2.69.2 ; python_version >= "3.13"
+shellingham==1.5.4 ; python_version >= "3.13"
+starlette==1.6.0 ; python_version >= "3.13"
+typer==0.27.2 ; python_version >= "3.13"
+typing-extensions==4.16.0 ; python_version >= "3.13"
+typing-inspection==0.4.4 ; python_version >= "3.13"
+urllib3==2.8.0 ; python_version >= "3.13"
+uvicorn==0.53.0 ; python_version >= "3.13"
+uvloop==0.22.1 ; platform_python_implementation != "PyPy" and sys_platform != "win32" and sys_platform != "cygwin" and python_version >= "3.13"
+watchfiles==1.2.0 ; python_version >= "3.13"
+websockets==17.1 ; python_version >= "3.13"

style-input.css

@@ -0,0 +1,3 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;

tailwind.config.js

@@ -0,0 +1,8 @@
+/** @type {import('tailwindcss').Config} */
+module.exports = {
+  content: ["./index.html"],
+  theme: {
+    extend: {},
+  },
+  plugins: [],
+}