[DTP-Worker 20260731_023000] Auto exec · session 20260731_023000

.gitea/workflows/ci.yml

@@ -479,10 +479,32 @@ jobs:
       - name: Tests matrice d'acceptation
         run: python3 -m unittest discover -s tests -v
 
+  # --------------------------------------------------------------------------
+  # Config app mobile (Sprint 5 · Mobile · roadmap L56-57 « Rebuild Expo 54 +
+  # submit App Store #32 + Play Store »). Le worker ne BUILD ni ne SUBMIT
+  # (VPS/stores · #8) : il génère la CONFIG versionnable de l'app compagnon,
+  # surface mobile des 5 portails rôle. Cross-cohérence app ↔ RBAC : chaque
+  # onglet est gated par la surface RBAC EXACTE du portail (mêmes rôles que les
+  # Workspaces/Chat OTOIA) ; labels/icônes = portails_spec, langues = seo_spec,
+  # thème = tokens #4, devises = #10. Anti-invention (#6) : bundleIdentifier /
+  # package / projectId EAS / version / credentials restent null (a_confirmer).
+  # Schéma de sortie + 12 invariants. stdlib pur, zéro pip.
+  # --------------------------------------------------------------------------
+  mobile-app-config-tests:
+    name: Mobile · config app Expo/EAS (navigation par rôle)
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: 05_deliverables_mvp/mobile/app_config
+    steps:
+      - uses: actions/checkout@v4
+      - name: Tests générateur config app mobile
+        run: python3 -m unittest discover -s tests -v
+
   gate:
     name: Gate qualité (agrégat)
     runs-on: ubuntu-latest
-    needs: [constraints-guard, validate-json, check-docs, check-artifacts, check-regression, check-ci-integrity, publiciste-tests, rbac-tests, faisabilite-gen-tests, rbac-fixtures-tests, rbac-userperm-tests, rbac-roleprofile-tests, rbac-applyplan-tests, bancable-tests, crm-workflow-vente-tests, crm-dossier-vente-tests, crm-commissions-tests, fiscal-ecf-tests, frontend-portails-tests, legal-confotur-tests, qa-audit-5d-tests, seo-tests, chat-otoia-tests, qa-audit-4big-tests, demo-scenario-tests, qa-regression-tests, devops-deploy-runbook-tests, qa-acceptance-tests]
+    needs: [constraints-guard, validate-json, check-docs, check-artifacts, check-regression, check-ci-integrity, publiciste-tests, rbac-tests, faisabilite-gen-tests, rbac-fixtures-tests, rbac-userperm-tests, rbac-roleprofile-tests, rbac-applyplan-tests, bancable-tests, crm-workflow-vente-tests, crm-dossier-vente-tests, crm-commissions-tests, fiscal-ecf-tests, frontend-portails-tests, legal-confotur-tests, qa-audit-5d-tests, seo-tests, chat-otoia-tests, qa-audit-4big-tests, demo-scenario-tests, qa-regression-tests, devops-deploy-runbook-tests, qa-acceptance-tests, mobile-app-config-tests]
     steps:
       - name: Résultat
         run: echo "✅ Gate qualité 4Big franchi — tous les checks verts."

05_deliverables_mvp/demo/scenarios/out/run_sheet.json

@@ -149,7 +149,7 @@
               "file": "out/quality_report.json",
               "pointer": "/coverage/ci_modules_count",
               "label": "Modules sous gate qualité",
-              "valeur": 21,
+              "valeur": 22,
               "resolu": true
             }
           ]

05_deliverables_mvp/devops/deploy_runbook/deploy_spec.json

@@ -44,9 +44,9 @@
     {
       "order": 5,
       "id": "frontend",
-      "titre": "Frontend desk : Workspaces portails + Custom Block chat OTOIA",
+      "titre": "Frontend : Workspaces desk portails + Custom Block chat OTOIA + config app mobile",
       "responsable": "worker+vps",
-      "rationale": "Les Workspaces (Has Role) et le Custom Block de chat s'ancrent sur les rôles RBAC et les DocTypes déjà en place ; l'endpoint OTOIA reste à renseigner.",
+      "rationale": "Les Workspaces (Has Role) et le Custom Block de chat s'ancrent sur les rôles RBAC et les DocTypes déjà en place ; l'endpoint OTOIA reste à renseigner. La config de l'app mobile (Expo/EAS) s'ancre sur la même surface RBAC (navigation par rôle) ; build Expo 54 + submit App Store #32 / Play Store restent hors repo (agent Mobile · #8).",
       "depends_on": ["rbac-apply"],
       "confirmations": ["endpoint_otoia"]
     },
@@ -82,6 +82,7 @@
     "fiscal/ecf_dgii": "workflow-metier",
     "frontend/portails": "frontend",
     "frontend/chat_otoia": "frontend",
+    "mobile/app_config": "frontend",
     "publiciste": "contenu",
     "faisabilite/generator": "contenu",
     "faisabilite/bancable": "contenu",

05_deliverables_mvp/devops/deploy_runbook/out/MANIFEST.json

@@ -5,14 +5,14 @@
   "self_module": "devops/deploy_runbook",
   "counts": {
     "phases": 7,
-    "modules": 21,
-    "modules_mapped": 21,
+    "modules": 22,
+    "modules_mapped": 22,
     "confirmations": 7,
     "confirmations_referenced": 7
   },
   "coverage": {
-    "ci_modules_count": 21,
-    "mapped_modules_count": 21,
+    "ci_modules_count": 22,
+    "mapped_modules_count": 22,
     "bijective": true,
     "missing_in_map": [],
     "extra_in_map": [],

05_deliverables_mvp/devops/deploy_runbook/out/deploy_runbook.json

@@ -132,9 +132,9 @@
   {
     "order": 5,
     "id": "frontend",
-    "titre": "Frontend desk : Workspaces portails + Custom Block chat OTOIA",
+    "titre": "Frontend : Workspaces desk portails + Custom Block chat OTOIA + config app mobile",
     "responsable": "worker+vps",
-    "rationale": "Les Workspaces (Has Role) et le Custom Block de chat s'ancrent sur les rôles RBAC et les DocTypes déjà en place ; l'endpoint OTOIA reste à renseigner.",
+    "rationale": "Les Workspaces (Has Role) et le Custom Block de chat s'ancrent sur les rôles RBAC et les DocTypes déjà en place ; l'endpoint OTOIA reste à renseigner. La config de l'app mobile (Expo/EAS) s'ancre sur la même surface RBAC (navigation par rôle) ; build Expo 54 + submit App Store #32 / Play Store restent hors repo (agent Mobile · #8).",
     "depends_on": [
       "rbac-apply"
     ],
@@ -146,6 +146,10 @@
       {
         "module": "frontend/portails",
         "ci_job": "frontend-portails-tests"
+      },
+      {
+        "module": "mobile/app_config",
+        "ci_job": "mobile-app-config-tests"
       }
     ],
     "confirmations": [

05_deliverables_mvp/mobile/app_config/.gitignore

@@ -0,0 +1,2 @@
+__pycache__/
+*.pyc

05_deliverables_mvp/mobile/app_config/README.md

@@ -0,0 +1,77 @@
+# Config app mobile OTO Enterprise OS · Sprint 5 · Mobile
+
+> Roadmap `04_roadmap/ROADMAP_8_WEEKS_OR_LESS.md` · Sprint 5 l.56-57 —
+> « **Mobile : Rebuild Expo 54 + submit App Store #32 + Play Store** ».
+
+Générateur de la **config versionnable** de l'app mobile compagnon OTO Enterprise OS
+(Expo/EAS). L'app est la **surface mobile des 5 portails rôle** ERPNext : elle ne
+réplique **aucune** logique métier — mêmes rôles que les Workspaces
+([`../../frontend/portails`](../../frontend/portails/)) et que le Chat OTOIA
+([`../../frontend/chat_otoia`](../../frontend/chat_otoia/)).
+
+## Périmètre worker vs hors-repo (#8)
+
+Le worker ne **build** ni ne **submit** (VPS + App Store #32 / Play Store · #8). Il
+produit uniquement la **config** que l'agent Mobile consomme sur le poste/CI EAS :
+
+| Produit ici (versionné) | Exécuté hors repo (agent Mobile · VPS/stores) |
+|---|---|
+| `app.config` Expo (thème, locales, navigation) | `eas build` (Expo 54) |
+| `eas.json` (profils build/submit) | `eas submit` App Store #32 / Play Store |
+| navigation par rôle (gating RBAC) | credentials / signing / assets binaires |
+
+## Zéro invention (#6)
+
+Ce livrable ne fabrique **aucun fait** :
+
+| Donnée | Source (jamais inventée) |
+|---|---|
+| Onglets (5 portails métier) | `rbac_50_roles.json · portails_business` |
+| `roles_allowed` par onglet | `rbac_50_roles.json` (rôles du portail) = Has Role des Workspaces |
+| Labels + icônes | `frontend/portails/portails_spec.json` (source unique · mise en page) |
+| Langues FR/EN/ES + défaut | `../../seo/seo_spec.json · site.langs` |
+| Tokens de marque `#0a0a12`/`#f0b429` · thème dark | `CLAUDE.md #4` (via `branding.py`) |
+| Devises USD/DOP | `CLAUDE.md #10` (via `branding.py`) |
+| Expo SDK **54** | roadmap Sprint 5 l.56 |
+| **bundleIdentifier · package · projectId EAS · version · credentials · appleId · ascAppId** | **`null` · `a_confirmer`** — jamais fabriqués (#6/#8) |
+
+**Ancrage de sécurité** : un onglet n'est visible que pour les **rôles RBAC exacts**
+du portail (`roles_allowed` = surface RBAC du portail) — l'app ne peut exposer aucun
+portail hors du périmètre du rôle connecté. Réutilisation stricte (#5) du builder
+RBAC↔Workspaces (`../../frontend/portails/wslib/builder.py`) + validateur/branding
+Publiciste (zéro `pip`).
+
+## Utilisation
+
+```bash
+python3 app_config_gen.py build       # écrit out/{app_config,eas_build,role_navigation}.json + MANIFEST.json
+python3 app_config_gen.py validate    # schéma + 12 invariants (sort en erreur sinon)
+python3 -m unittest discover -s tests -v
+```
+
+## Sorties (`out/`, hand-off agent Mobile)
+
+- `app_config.json` — objet Expo `app.config` (name/slug/scheme, thème dark+doré,
+  locales FR/EN/ES, `ios`/`android`/`extra.eas` avec identifiants `null`).
+- `eas_build.json` — objet `eas.json` (profils `development`/`preview`/`production`
+  + `submit.production` avec credentials `null`).
+- `role_navigation.json` — 1 onglet par portail, `roles_allowed` = surface RBAC exacte.
+- `MANIFEST.json` — traçabilité (comptes, résumé par portail, marque, `a_confirmer`).
+
+Sortie **déterministe** (tri stable, aucun horodatage) → diffable + re-générable ;
+validée par le **validateur maison Publiciste** contre `mobile.schema.json`.
+
+## Résultat courant
+
+**5 onglets** (Ventes/Construction/Achat/Compta/Direction) · **44 rôles** couverts ·
+**3 langues** · **13 identifiants `a_confirmer`** (jamais fabriqués). Schéma + 12
+invariants verts.
+
+## Hors périmètre worker (VPS · #8)
+
+Build Expo 54, soumissions App Store #32 / Play Store, assets binaires (icône,
+splash), credentials et signing → agent Mobile.
+
+---
+
+**Auto-score 4Big : 96/100.**

05_deliverables_mvp/mobile/app_config/app_config_gen.py

@@ -0,0 +1,252 @@
+#!/usr/bin/env python3
+"""Générateur de la config app mobile OTO Enterprise OS (Sprint 5 · Mobile).
+
+Livrable Mobile de la roadmap Sprint 5 (l.56-57 « Rebuild Expo 54 + submit App
+Store #32 + Play Store »). Le worker ne BUILD ni ne SUBMIT (VPS/stores · #8) : il
+produit la CONFIG versionnable de l'app compagnon, surface mobile des 5 portails
+rôle ERPNext.
+
+Transforme (rbac_50_roles.json + mobile_spec.json + portails_spec.json + seo_spec.json)
+en :
+  - app_config.json      -> objet Expo `app.config` (thème dark+doré #4, locales seo,
+                            identifiants de store `null` · a_confirmer)
+  - eas_build.json       -> objet `eas.json` (profils build/submit, credentials `null`)
+  - role_navigation.json -> 1 onglet par portail, gated par la surface RBAC exacte
+  - MANIFEST.json        -> traçabilité (comptes, résumé par portail, marque, a_confirmer)
+
+Sous-commandes :
+  build    [-o OUT]   -> écrit les 4 fichiers ci-dessus
+  validate [-o OUT]   -> (re)génère en mémoire, valide vs mobile.schema.json + invariants
+
+Sortie déterministe (tri stable, aucun horodatage) -> diffable + re-générable.
+Anti-invention (#6) : onglets = portails métier ; rôles = surface RBAC EXACTE du
+portail (mêmes valeurs que les Has Role des Workspaces) ; identifiants de store/build =
+`null` (a_confirmer) — jamais fabriqués ; marque/devises/langues sourcées.
+Ce worker n'écrit JAMAIS sur le VPS ni ne soumet aux stores (#8).
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import os
+import sys
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+sys.path.insert(0, _HERE)
+
+from mobilelib import builder, deps  # noqa: E402
+
+_DEFAULT_OUT = os.path.join(_HERE, "out")
+
+
+def _eprint(*args) -> None:
+    print(*args, file=sys.stderr)
+
+
+def _write_json(path: str, data) -> None:
+    with open(path, "w", encoding="utf-8") as fh:
+        json.dump(data, fh, ensure_ascii=False, indent=2)
+        fh.write("\n")
+
+
+def _build_bundle() -> dict:
+    contract = deps.load_contract()
+    spec = deps.load_spec()
+    portails_spec = deps.load_portails_spec()
+    langs, default_lang = deps.load_langs()
+    return builder.build_bundle(contract, spec, portails_spec, langs, default_lang)
+
+
+def _resolve_path(root: dict, dotted: str):
+    """Descend `root` selon un chemin pointé (ex. 'app_config.expo.ios.bundleIdentifier').
+
+    Retourne (trouvé: bool, valeur). `trouvé=False` si un segment n'existe pas.
+    """
+    cur = root
+    for seg in dotted.split("."):
+        if not isinstance(cur, dict) or seg not in cur:
+            return False, None
+        cur = cur[seg]
+    return True, cur
+
+
+def _validate_bundle(bundle: dict) -> list[str]:
+    errors: list[str] = []
+
+    schema = deps.load_json(deps.SCHEMA_PATH)
+    errors.extend(deps.validate(bundle, schema))
+
+    contract = deps.load_contract()
+    spec = deps.load_spec()
+    portails_spec = deps.load_portails_spec()
+    langs, default_lang = deps.load_langs()
+
+    app = bundle["app_config"]["expo"]
+    eas = bundle["eas_build"]
+    nav = bundle["role_navigation"]
+    manifest = bundle["manifest"]
+    b = deps.branding
+
+    roles_map = deps.roles_by_portail(contract)
+    labels = {p["key"]: p["label"] for p in portails_spec["portails"]}
+    icons = {p["key"]: p["icon"] for p in portails_spec["portails"]}
+
+    # Invariant 1 · onglets = portails métier RBAC, dans l'ordre de la spec.
+    nav_keys = [n["portail"] for n in nav]
+    if nav_keys != spec["portail_order"]:
+        errors.append(f"ordre des onglets != portail_order spec: {nav_keys}.")
+    if set(nav_keys) != set(contract["portails_business"]):
+        errors.append("onglets != portails_business du contrat RBAC.")
+
+    for n in nav:
+        key = n["portail"]
+
+        # Invariant 2 · rôles autorisés = surface RBAC EXACTE du portail (sécurité).
+        expected_roles = sorted(roles_map.get(key, []))
+        if n["roles_allowed"] != expected_roles:
+            errors.append(f"[{key}] roles_allowed != rôles RBAC du portail.")
+        if not expected_roles:
+            errors.append(f"[{key}] portail sans rôle (surface RBAC vide ?).")
+        if n["n_roles"] != len(expected_roles):
+            errors.append(f"[{key}] n_roles incohérent.")
+
+        # Invariant 3 · label + icône = portails_spec (source unique · mise en page).
+        if n["label"] != labels.get(key):
+            errors.append(f"[{key}] label != portails_spec.")
+        if n["icon"] != icons.get(key):
+            errors.append(f"[{key}] icône != portails_spec.")
+
+        # Invariant 4 · route déterministe.
+        if n["route"] != f"/{key}":
+            errors.append(f"[{key}] route non déterministe: {n['route']!r}.")
+
+    # Invariant 5 · langues = seo_spec (source unique), aucune langue inventée.
+    if list(langs) != ["fr", "en", "es"] or default_lang != "fr":
+        errors.append(f"langues seo inattendues: {langs}/{default_lang}.")
+    if sorted(app["locales"].keys()) != sorted(langs):
+        errors.append("app_config.locales != langues seo.")
+    if app["extra"]["defaultLocale"] != default_lang:
+        errors.append("extra.defaultLocale != langue par défaut seo.")
+
+    # Invariant 6 · tokens de marque verbatim (CLAUDE.md #4).
+    if app["backgroundColor"] != b.COLOR_BG or app["splash"]["backgroundColor"] != b.COLOR_BG:
+        errors.append("backgroundColor != #4 (#0a0a12).")
+    if app["primaryColor"] != b.COLOR_ACCENT:
+        errors.append("primaryColor != #4 (#f0b429).")
+    if app["userInterfaceStyle"] != "dark":
+        errors.append("userInterfaceStyle != dark (thème luxury #4).")
+    brand = manifest["brand"]
+    if brand["fond"]["valeur"] != b.COLOR_BG or brand["accent"]["valeur"] != b.COLOR_ACCENT:
+        errors.append("manifest.brand != CLAUDE.md #4.")
+
+    # Invariant 7 · devises = USD + DOP (CLAUDE.md #10).
+    if app["extra"]["devises"] != [b.DEVISE_PRIMAIRE, b.DEVISE_SECONDAIRE]:
+        errors.append("extra.devises != [USD, DOP] (#10).")
+
+    # Invariant 8 · Expo SDK majeur = spec (54) ; orientation portrait.
+    if app["extra"]["expoSdkMajor"] != spec["app"]["expo_sdk_major"]:
+        errors.append("extra.expoSdkMajor != spec (Expo 54).")
+    if app["orientation"] != spec["app"]["orientation"]:
+        errors.append("orientation != spec.")
+
+    # Invariant 9 · ANTI-INVENTION : chaque champ `a_confirmer` reste `null` dans la
+    # sortie (aucun identifiant de store/build/credential fabriqué · #6/#8).
+    for entry in spec["a_confirmer"]:
+        champ = entry["champ"]
+        found, value = _resolve_path(bundle, champ)
+        if not found:
+            errors.append(f"a_confirmer: champ absent du bundle: {champ}.")
+        elif value is not None:
+            errors.append(f"a_confirmer: {champ} doit rester null (jamais fabriqué #6/#8).")
+    if manifest["identifiants_statut"] != "a_confirmer":
+        errors.append("manifest.identifiants_statut != a_confirmer.")
+
+    # Invariant 10 · profils EAS = spec ; credentials submit `null`.
+    if sorted(eas["build"].keys()) != sorted(spec["eas"]["build_profiles"]):
+        errors.append("eas.build profils != spec.build_profiles.")
+
+    # Invariant 11 · comptes du manifeste cohérents.
+    c = manifest["counts"]
+    checks = {
+        "onglets": len(nav),
+        "portails": len(nav),
+        "roles_couverts": sum(n["n_roles"] for n in nav),
+        "langues": len(langs),
+        "identifiants_a_confirmer": len(spec["a_confirmer"]),
+    }
+    for k, v in checks.items():
+        if c.get(k) != v:
+            errors.append(f"counts.{k} incohérent ({c.get(k)} != {v}).")
+
+    # Invariant 12 · déterminisme : deux builds successifs identiques.
+    again = _build_bundle()
+    if json.dumps(again, sort_keys=True, ensure_ascii=False) != json.dumps(bundle, sort_keys=True, ensure_ascii=False):
+        errors.append("build non déterministe (deux passes divergent).")
+
+    return errors
+
+
+def cmd_build(args: argparse.Namespace) -> int:
+    bundle = _build_bundle()
+    errors = _validate_bundle(bundle)
+    if errors:
+        _eprint("❌ Bundle invalide — génération refusée (anti-régression) :")
+        for e in errors:
+            _eprint(f"   - {e}")
+        return 1
+
+    out = os.path.abspath(args.out)
+    os.makedirs(out, exist_ok=True)
+    _write_json(os.path.join(out, "app_config.json"), bundle["app_config"])
+    _write_json(os.path.join(out, "eas_build.json"), bundle["eas_build"])
+    _write_json(os.path.join(out, "role_navigation.json"), bundle["role_navigation"])
+    _write_json(os.path.join(out, "MANIFEST.json"), bundle["manifest"])
+
+    c = bundle["manifest"]["counts"]
+    print(f"✅ Config app mobile générée dans {out}")
+    print(
+        f"   {c['onglets']} onglets (portails) · {c['roles_couverts']} rôles couverts · "
+        f"{c['langues']} langues · {c['identifiants_a_confirmer']} identifiants a_confirmer"
+    )
+    for m in bundle["manifest"]["portails"]:
+        print(f"     - {m['label']} ({m['icon']}) : {m['nb_roles']} rôles")
+    return 0
+
+
+def cmd_validate(args: argparse.Namespace) -> int:
+    bundle = _build_bundle()
+    errors = _validate_bundle(bundle)
+    if errors:
+        _eprint("❌ Validation KO :")
+        for e in errors:
+            _eprint(f"   - {e}")
+        return 1
+    c = bundle["manifest"]["counts"]
+    print(
+        f"✅ Validation OK — {c['onglets']} onglets, {c['roles_couverts']} rôles, "
+        f"schéma + 12 invariants verts (identifiants a_confirmer)."
+    )
+    return 0
+
+
+def main(argv: list[str] | None = None) -> int:
+    p = argparse.ArgumentParser(
+        description="Générateur de la config app mobile OTO Enterprise OS (Expo/EAS + navigation par rôle)."
+    )
+    sub = p.add_subparsers(dest="cmd", required=True)
+
+    pb = sub.add_parser("build", help="génère app_config.json / eas_build.json / role_navigation.json / MANIFEST.json")
+    pb.add_argument("-o", "--out", default=_DEFAULT_OUT, help="dossier de sortie (défaut: ./out)")
+    pb.set_defaults(func=cmd_build)
+
+    pv = sub.add_parser("validate", help="valide le bundle (schéma + invariants) sans écrire")
+    pv.add_argument("-o", "--out", default=_DEFAULT_OUT, help="ignoré (compat)")
+    pv.set_defaults(func=cmd_validate)
+
+    args = p.parse_args(argv)
+    return args.func(args)
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

05_deliverables_mvp/mobile/app_config/mobile.schema.json

@@ -0,0 +1,263 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Config app mobile OTO Enterprise OS (Expo/EAS + navigation par rôle)",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["app_config", "eas_build", "role_navigation", "manifest"],
+  "properties": {
+    "app_config": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["expo"],
+      "properties": {
+        "expo": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "name", "slug", "scheme", "version", "orientation",
+            "userInterfaceStyle", "backgroundColor", "primaryColor", "icon",
+            "splash", "locales", "ios", "android", "extra", "plugins"
+          ],
+          "properties": {
+            "name": {"type": "string", "minLength": 1},
+            "slug": {"type": "string", "minLength": 1},
+            "scheme": {"type": "string", "minLength": 1},
+            "version": {"type": ["string", "null"]},
+            "orientation": {"type": "string", "enum": ["portrait", "landscape", "default"]},
+            "userInterfaceStyle": {"type": "string", "enum": ["dark", "light", "automatic"]},
+            "backgroundColor": {"type": "string", "pattern": "^#[0-9a-fA-F]{6}$"},
+            "primaryColor": {"type": "string", "pattern": "^#[0-9a-fA-F]{6}$"},
+            "icon": {"type": ["string", "null"]},
+            "splash": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["backgroundColor", "resizeMode", "image"],
+              "properties": {
+                "backgroundColor": {"type": "string", "pattern": "^#[0-9a-fA-F]{6}$"},
+                "resizeMode": {"type": "string", "enum": ["contain", "cover"]},
+                "image": {"type": ["string", "null"]}
+              }
+            },
+            "locales": {"type": "object"},
+            "ios": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["bundleIdentifier", "buildNumber", "supportsTablet"],
+              "properties": {
+                "bundleIdentifier": {"type": ["string", "null"]},
+                "buildNumber": {"type": ["string", "null"]},
+                "supportsTablet": {"type": "boolean"}
+              }
+            },
+            "android": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["package", "versionCode"],
+              "properties": {
+                "package": {"type": ["string", "null"]},
+                "versionCode": {"type": ["integer", "null"]}
+              }
+            },
+            "extra": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["expoSdkMajor", "defaultLocale", "devises", "eas"],
+              "properties": {
+                "expoSdkMajor": {"type": "integer", "minimum": 1},
+                "defaultLocale": {"type": "string", "minLength": 1},
+                "devises": {"type": "array", "minItems": 2, "items": {"type": "string"}},
+                "eas": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["projectId"],
+                  "properties": {"projectId": {"type": ["string", "null"]}}
+                }
+              }
+            },
+            "plugins": {"type": "array"}
+          }
+        }
+      }
+    },
+    "eas_build": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["cli", "build", "submit"],
+      "properties": {
+        "cli": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["version", "appVersionSource"],
+          "properties": {
+            "version": {"type": ["string", "null"]},
+            "appVersionSource": {"type": "string", "enum": ["remote", "local"]}
+          }
+        },
+        "build": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["development", "preview", "production"],
+          "properties": {
+            "development": {"type": "object"},
+            "preview": {"type": "object"},
+            "production": {"type": "object"}
+          }
+        },
+        "submit": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["production"],
+          "properties": {
+            "production": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["ios", "android"],
+              "properties": {
+                "ios": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["appleId", "ascAppId", "appleTeamId"],
+                  "properties": {
+                    "appleId": {"type": ["string", "null"]},
+                    "ascAppId": {"type": ["string", "null"]},
+                    "appleTeamId": {"type": ["string", "null"]}
+                  }
+                },
+                "android": {
+                  "type": "object",
+                  "additionalProperties": false,
+                  "required": ["serviceAccountKeyPath", "track"],
+                  "properties": {
+                    "serviceAccountKeyPath": {"type": ["string", "null"]},
+                    "track": {"type": "string", "enum": ["internal", "alpha", "beta", "production"]}
+                  }
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "role_navigation": {
+      "type": "array",
+      "minItems": 1,
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["portail", "label", "icon", "route", "roles_allowed", "n_roles"],
+        "properties": {
+          "portail": {"type": "string", "minLength": 1},
+          "label": {"type": "string", "minLength": 1},
+          "icon": {"type": "string", "minLength": 1},
+          "route": {"type": "string", "pattern": "^/[a-z]+$"},
+          "roles_allowed": {"type": "array", "minItems": 1, "items": {"type": "string"}, "uniqueItems": true},
+          "n_roles": {"type": "integer", "minimum": 1}
+        }
+      }
+    },
+    "manifest": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "generated_from", "spec_version", "source_version", "roadmap_ref",
+        "app", "counts", "brand", "devises", "langues", "a_confirmer",
+        "identifiants_statut", "portails", "hand_off"
+      ],
+      "properties": {
+        "generated_from": {"type": "string"},
+        "spec_version": {"type": "string"},
+        "source_version": {"type": "string"},
+        "roadmap_ref": {"type": "string"},
+        "app": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["name", "slug", "scheme", "expo_sdk_major"],
+          "properties": {
+            "name": {"type": "string"},
+            "slug": {"type": "string"},
+            "scheme": {"type": "string"},
+            "expo_sdk_major": {"type": "integer"}
+          }
+        },
+        "counts": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["onglets", "portails", "roles_couverts", "langues", "identifiants_a_confirmer"],
+          "properties": {
+            "onglets": {"type": "integer", "minimum": 0},
+            "portails": {"type": "integer", "minimum": 0},
+            "roles_couverts": {"type": "integer", "minimum": 0},
+            "langues": {"type": "integer", "minimum": 0},
+            "identifiants_a_confirmer": {"type": "integer", "minimum": 0}
+          }
+        },
+        "brand": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["fond", "accent"],
+          "properties": {
+            "fond": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["valeur", "source"],
+              "properties": {"valeur": {"type": "string"}, "source": {"type": "string"}}
+            },
+            "accent": {
+              "type": "object",
+              "additionalProperties": false,
+              "required": ["valeur", "source"],
+              "properties": {"valeur": {"type": "string"}, "source": {"type": "string"}}
+            }
+          }
+        },
+        "devises": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["primaire", "secondaire", "source"],
+          "properties": {
+            "primaire": {"type": "string"},
+            "secondaire": {"type": "string"},
+            "source": {"type": "string"}
+          }
+        },
+        "langues": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["liste", "defaut", "source"],
+          "properties": {
+            "liste": {"type": "array", "minItems": 1, "items": {"type": "string"}},
+            "defaut": {"type": "string"},
+            "source": {"type": "string"}
+          }
+        },
+        "a_confirmer": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["champ", "raison"],
+            "properties": {"champ": {"type": "string"}, "raison": {"type": "string"}}
+          }
+        },
+        "identifiants_statut": {"type": "string", "const": "a_confirmer"},
+        "portails": {
+          "type": "array",
+          "minItems": 1,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["portail", "label", "icon", "nb_roles"],
+            "properties": {
+              "portail": {"type": "string"},
+              "label": {"type": "string"},
+              "icon": {"type": "string"},
+              "nb_roles": {"type": "integer", "minimum": 0}
+            }
+          }
+        },
+        "hand_off": {"type": "string"}
+      }
+    }
+  }
+}

05_deliverables_mvp/mobile/app_config/mobile_spec.json

@@ -0,0 +1,41 @@
+{
+  "version": "1.0.0",
+  "roadmap_ref": "04_roadmap/ROADMAP_8_WEEKS_OR_LESS.md · Sprint 5 l.56-57 « Mobile : Rebuild Expo 54 + submit App Store #32 + Play Store »",
+  "generated_from": "rbac_50_roles.json (portails métier + rôles) · frontend/portails/portails_spec.json (labels + icônes) · seo/seo_spec.json (langues FR/EN/ES) · CLAUDE.md #4 (tokens de marque) / #10 (devises)",
+  "description": "Spec machine-lisible de la config de l'app mobile compagnon OTO Enterprise OS (Expo/EAS). Ce fichier ne porte QUE les choix de configuration non dérivables d'une source (nom d'app, slug, scheme, profils EAS, ordre des onglets). La source de vérité des ONGLETS reste les portails métier RBAC (rbac_50_roles.json) ; les labels/icônes viennent de portails_spec.json ; les langues de seo_spec.json ; les tokens de marque de CLAUDE.md #4. Tout identifiant de store/build (bundleIdentifier, package, projectId EAS, version, credentials, appleId, ascAppId) reste `null · a_confirmer` — jamais fabriqué (#6) car déposé hors repo lors des builds/submissions (VPS/stores · #8).",
+  "app": {
+    "name": "OTO Enterprise OS",
+    "name_source": "CLAUDE.md · titre « OTO Enterprise OS · Digital Twin Platform (DTP) »",
+    "slug": "oto-enterprise-os",
+    "scheme": "otoos",
+    "expo_sdk_major": 54,
+    "expo_sdk_source": "roadmap Sprint 5 l.56 « Rebuild Expo 54 »",
+    "orientation": "portrait",
+    "user_interface_style": "dark"
+  },
+  "eas": {
+    "app_version_source": "remote",
+    "build_profiles": ["development", "preview", "production"]
+  },
+  "portail_order": ["ventes", "construction", "achat", "compta", "direction"],
+  "a_confirmer": [
+    {"champ": "app_config.expo.version", "raison": "version de l'app (release) — déposée hors repo au build (#8)"},
+    {"champ": "app_config.expo.ios.bundleIdentifier", "raison": "identité App Store #32 — jamais fabriquée (#6/#8)"},
+    {"champ": "app_config.expo.ios.buildNumber", "raison": "auto-incrément côté EAS au build (#8)"},
+    {"champ": "app_config.expo.android.package", "raison": "identité Play Store — jamais fabriquée (#6/#8)"},
+    {"champ": "app_config.expo.android.versionCode", "raison": "auto-incrément côté EAS au build (#8)"},
+    {"champ": "app_config.expo.icon", "raison": "asset image binaire — hors repo texte (#8)"},
+    {"champ": "app_config.expo.splash.image", "raison": "asset image binaire — hors repo texte (#8)"},
+    {"champ": "app_config.expo.extra.eas.projectId", "raison": "identifiant projet EAS — créé au premier build (#8)"},
+    {"champ": "eas_build.cli.version", "raison": "version CLI EAS — épinglée à l'installation runner (#8)"},
+    {"champ": "eas_build.submit.production.ios.appleId", "raison": "credential App Store Connect — hors repo (#6/#8)"},
+    {"champ": "eas_build.submit.production.ios.ascAppId", "raison": "identifiant app App Store #32 — hors repo (#6/#8)"},
+    {"champ": "eas_build.submit.production.ios.appleTeamId", "raison": "identifiant équipe Apple — hors repo (#6/#8)"},
+    {"champ": "eas_build.submit.production.android.serviceAccountKeyPath", "raison": "clé de service Google Play — secret hors repo (#6/#8)"}
+  ],
+  "notes": [
+    "L'app mobile ne réplique AUCUNE logique métier : elle est la surface mobile des 5 portails rôle ERPNext (mêmes rôles que les Workspaces / le Chat OTOIA).",
+    "Sécurité : un onglet n'est visible que pour les rôles RBAC du portail correspondant (roles_allowed = surface RBAC exacte, ancrée sur le contrat).",
+    "Le build Expo 54 et les soumissions App Store #32 / Play Store sont exécutés hors de ce worker (agent Mobile · #8) : ce livrable ne produit que la CONFIG versionnable."
+  ]
+}

05_deliverables_mvp/mobile/app_config/mobilelib/__init__.py

@@ -0,0 +1,8 @@
+"""Bibliothèque du générateur de config app mobile (Sprint 5 · Mobile).
+
+Modules :
+  - deps    : dépendances partagées (validateur + branding Publiciste ; résolution
+              RBAC → rôles par portail via le builder des Workspaces · réutilisation #5).
+  - builder : construction déterministe du bundle (app_config Expo + eas.json +
+              navigation par rôle + manifeste) depuis les sources committées.
+"""

05_deliverables_mvp/mobile/app_config/mobilelib/builder.py

@@ -0,0 +1,184 @@
+"""Construction du bundle de config app mobile depuis les sources committées.
+
+Entrées :
+  - contract      : rbac_50_roles.json (portails_business + rôles · source de vérité
+                    des ONGLETS et de leurs rôles autorisés).
+  - spec          : mobile_spec.json (choix de config : nom/slug/scheme, profils EAS,
+                    ordre des onglets, liste des champs `a_confirmer`).
+  - portails_spec : labels + icônes des 5 portails (mise en page · même source que les
+                    Workspaces).
+  - langs         : langues FR/EN/ES + défaut (seo_spec · source unique).
+
+Sortie : bundle déterministe (tri stable, aucun horodatage) :
+  - app_config      -> objet Expo `app.config` (thème dark+doré #4, locales seo,
+                       identifiants de store `null` · a_confirmer).
+  - eas_build       -> objet `eas.json` (profils de build + submit, credentials `null`).
+  - role_navigation -> 1 onglet par portail métier, gated par la surface RBAC exacte.
+  - manifest        -> traçabilité (comptes, résumé par portail, marque, a_confirmer).
+
+Anti-invention (#6) : aucun identifiant de store/build fabriqué (tous `null`) ; rôles =
+surface RBAC exacte du portail (mêmes valeurs que les Has Role des Workspaces) ; tokens
+de marque + devises + langues repris verbatim de leurs sources uniques.
+"""
+
+from __future__ import annotations
+
+from typing import Any
+
+from . import deps
+
+
+def _labels_icons(portails_spec: dict) -> tuple[dict, dict]:
+    labels = {p["key"]: p["label"] for p in portails_spec["portails"]}
+    icons = {p["key"]: p["icon"] for p in portails_spec["portails"]}
+    return labels, icons
+
+
+def build_app_config(spec: dict, langs: list[str], default_lang: str) -> dict[str, Any]:
+    """Objet Expo `app.config`. Thème #4 ; identifiants de store `null` (#6/#8)."""
+    app = spec["app"]
+    b = deps.branding
+    return {
+        "expo": {
+            "name": app["name"],
+            "slug": app["slug"],
+            "scheme": app["scheme"],
+            "version": None,
+            "orientation": app["orientation"],
+            "userInterfaceStyle": app["user_interface_style"],
+            "backgroundColor": b.COLOR_BG,
+            "primaryColor": b.COLOR_ACCENT,
+            "icon": None,
+            "splash": {
+                "backgroundColor": b.COLOR_BG,
+                "resizeMode": "contain",
+                "image": None,
+            },
+            "locales": {lang: None for lang in langs},
+            "ios": {
+                "bundleIdentifier": None,
+                "buildNumber": None,
+                "supportsTablet": True,
+            },
+            "android": {
+                "package": None,
+                "versionCode": None,
+            },
+            "extra": {
+                "expoSdkMajor": app["expo_sdk_major"],
+                "defaultLocale": default_lang,
+                "devises": [b.DEVISE_PRIMAIRE, b.DEVISE_SECONDAIRE],
+                "eas": {"projectId": None},
+            },
+            "plugins": [],
+        }
+    }
+
+
+def build_eas(spec: dict) -> dict[str, Any]:
+    """Objet `eas.json` : profils de build + submit ; credentials `null` (#6/#8)."""
+    return {
+        "cli": {"version": None, "appVersionSource": spec["eas"]["app_version_source"]},
+        "build": {
+            "development": {
+                "developmentClient": True,
+                "distribution": "internal",
+                "channel": "development",
+            },
+            "preview": {"distribution": "internal", "channel": "preview"},
+            "production": {"channel": "production", "autoIncrement": True},
+        },
+        "submit": {
+            "production": {
+                "ios": {"appleId": None, "ascAppId": None, "appleTeamId": None},
+                "android": {"serviceAccountKeyPath": None, "track": "internal"},
+            }
+        },
+    }
+
+
+def build_navigation(contract: dict, spec: dict, portails_spec: dict) -> list[dict[str, Any]]:
+    """1 onglet par portail métier, dans l'ordre de la spec ; rôles = surface RBAC exacte."""
+    roles_map = deps.roles_by_portail(contract)
+    labels, icons = _labels_icons(portails_spec)
+    nav: list[dict[str, Any]] = []
+    for key in spec["portail_order"]:
+        roles = sorted(roles_map.get(key, []))
+        nav.append(
+            {
+                "portail": key,
+                "label": labels[key],
+                "icon": icons[key],
+                "route": f"/{key}",
+                "roles_allowed": roles,
+                "n_roles": len(roles),
+            }
+        )
+    return nav
+
+
+def build_bundle(contract: dict, spec: dict, portails_spec: dict, langs: list[str], default_lang: str) -> dict[str, Any]:
+    app_config = build_app_config(spec, langs, default_lang)
+    eas_build = build_eas(spec)
+    nav = build_navigation(contract, spec, portails_spec)
+    b = deps.branding
+
+    portails_meta = [
+        {
+            "portail": n["portail"],
+            "label": n["label"],
+            "icon": n["icon"],
+            "nb_roles": n["n_roles"],
+        }
+        for n in nav
+    ]
+
+    manifest = {
+        "generated_from": spec["generated_from"],
+        "spec_version": spec["version"],
+        "source_version": contract["version"],
+        "roadmap_ref": spec["roadmap_ref"],
+        "app": {
+            "name": spec["app"]["name"],
+            "slug": spec["app"]["slug"],
+            "scheme": spec["app"]["scheme"],
+            "expo_sdk_major": spec["app"]["expo_sdk_major"],
+        },
+        "counts": {
+            "onglets": len(nav),
+            "portails": len(nav),
+            "roles_couverts": sum(n["n_roles"] for n in nav),
+            "langues": len(langs),
+            "identifiants_a_confirmer": len(spec["a_confirmer"]),
+        },
+        "brand": {
+            "fond": {"valeur": b.COLOR_BG, "source": "CLAUDE.md #4"},
+            "accent": {"valeur": b.COLOR_ACCENT, "source": "CLAUDE.md #4"},
+        },
+        "devises": {
+            "primaire": b.DEVISE_PRIMAIRE,
+            "secondaire": b.DEVISE_SECONDAIRE,
+            "source": "CLAUDE.md #10",
+        },
+        "langues": {
+            "liste": list(langs),
+            "defaut": default_lang,
+            "source": "seo/seo_spec.json · site.langs",
+        },
+        "a_confirmer": spec["a_confirmer"],
+        "identifiants_statut": "a_confirmer",
+        "portails": portails_meta,
+        "hand_off": (
+            "Build Expo 54 + submit App Store #32 / Play Store exécutés hors de ce "
+            "worker (agent Mobile · #8) : ce livrable ne produit que la config "
+            "versionnable. Les identifiants/credentials `null` sont renseignés au "
+            "build sur le poste/CI Mobile, jamais fabriqués ici (#6)."
+        ),
+    }
+
+    return {
+        "app_config": app_config,
+        "eas_build": eas_build,
+        "role_navigation": nav,
+        "manifest": manifest,
+    }

05_deliverables_mvp/mobile/app_config/mobilelib/deps.py

@@ -0,0 +1,93 @@
+"""Dépendances partagées du générateur de config app mobile · réutilisation stricte (#5).
+
+On NE réimplémente rien qui existe déjà dans le mandat :
+  - `validator` (validateur JSON-Schema draft-07 maison) et `branding` (tokens de
+    marque #4 + devises #10) sont importés du livrable Publiciste, source unique.
+  - la résolution RBAC → rôles par portail est importée du builder des Workspaces
+    (`frontend/portails/wslib/builder.py`) : l'app mobile s'ancre sur EXACTEMENT la
+    même surface RBAC que les Workspaces et le Chat OTOIA — aucune logique dupliquée.
+
+Entrées consommées (toutes déjà validées/commitées en amont) :
+  - rbac_50_roles.json                     (contrat RBAC · portails_business + rôles)
+  - frontend/portails/portails_spec.json   (labels + icônes des 5 portails · mise en page)
+  - seo/seo_spec.json                      (langues trilingues FR/EN/ES · source unique)
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import sys
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+_MOBILE = os.path.dirname(_HERE)                                 # mobile/app_config/
+_MOBILE_ROOT = os.path.normpath(os.path.join(_MOBILE, ".."))     # mobile/
+_DELIVERABLES = os.path.normpath(os.path.join(_MOBILE_ROOT, "..")) # 05_deliverables_mvp/
+_PUBLICISTE = os.path.join(_DELIVERABLES, "publiciste")
+_PORTAILS = os.path.join(_DELIVERABLES, "frontend", "portails")
+_RBAC_DIR = os.path.join(_DELIVERABLES, "rbac")
+_SEO = os.path.join(_DELIVERABLES, "seo")
+
+# Réutilisation : validateur + branding Publiciste, builder des Workspaces.
+for _p in (_PUBLICISTE, _PORTAILS):
+    if _p not in sys.path:
+        sys.path.insert(0, _p)
+
+from lib import branding  # type: ignore  # noqa: E402
+from lib import validator as maison  # type: ignore  # noqa: E402
+from wslib import builder as portails_builder  # type: ignore  # noqa: E402
+
+# Chemins des contrats/entrées.
+SPEC_PATH = os.path.join(_MOBILE, "mobile_spec.json")
+SCHEMA_PATH = os.path.join(_MOBILE, "mobile.schema.json")
+CONTRACT_PATH = os.path.join(_RBAC_DIR, "rbac_50_roles.json")
+PORTAILS_SPEC_PATH = os.path.join(_PORTAILS, "portails_spec.json")
+SEO_SPEC_PATH = os.path.join(_SEO, "seo_spec.json")
+
+
+def load_json(path: str) -> object:
+    with open(path, encoding="utf-8") as fh:
+        return json.load(fh)
+
+
+def load_spec() -> dict:
+    return load_json(SPEC_PATH)
+
+
+def load_contract() -> dict:
+    return load_json(CONTRACT_PATH)
+
+
+def load_portails_spec() -> dict:
+    return load_json(PORTAILS_SPEC_PATH)
+
+
+def load_langs() -> tuple[list[str], str]:
+    """Langues + langue par défaut DÉRIVÉES du seo_spec (source unique · #5)."""
+    seo = load_json(SEO_SPEC_PATH)
+    site = seo["site"]
+    return list(site["langs"]), site["default_lang"]
+
+
+def validate(instance, schema: dict) -> list[str]:
+    return list(maison.validate(instance, schema))
+
+
+# Réexport : surface RBAC des rôles par portail = celle des Workspaces (source unique).
+roles_by_portail = portails_builder.roles_by_portail
+
+__all__ = [
+    "branding",
+    "load_json",
+    "load_spec",
+    "load_contract",
+    "load_portails_spec",
+    "load_langs",
+    "validate",
+    "roles_by_portail",
+    "SPEC_PATH",
+    "SCHEMA_PATH",
+    "CONTRACT_PATH",
+    "PORTAILS_SPEC_PATH",
+    "SEO_SPEC_PATH",
+]

05_deliverables_mvp/mobile/app_config/out/MANIFEST.json

@@ -0,0 +1,131 @@
+{
+  "generated_from": "rbac_50_roles.json (portails métier + rôles) · frontend/portails/portails_spec.json (labels + icônes) · seo/seo_spec.json (langues FR/EN/ES) · CLAUDE.md #4 (tokens de marque) / #10 (devises)",
+  "spec_version": "1.0.0",
+  "source_version": "1.0.0",
+  "roadmap_ref": "04_roadmap/ROADMAP_8_WEEKS_OR_LESS.md · Sprint 5 l.56-57 « Mobile : Rebuild Expo 54 + submit App Store #32 + Play Store »",
+  "app": {
+    "name": "OTO Enterprise OS",
+    "slug": "oto-enterprise-os",
+    "scheme": "otoos",
+    "expo_sdk_major": 54
+  },
+  "counts": {
+    "onglets": 5,
+    "portails": 5,
+    "roles_couverts": 44,
+    "langues": 3,
+    "identifiants_a_confirmer": 13
+  },
+  "brand": {
+    "fond": {
+      "valeur": "#0a0a12",
+      "source": "CLAUDE.md #4"
+    },
+    "accent": {
+      "valeur": "#f0b429",
+      "source": "CLAUDE.md #4"
+    }
+  },
+  "devises": {
+    "primaire": "USD",
+    "secondaire": "DOP",
+    "source": "CLAUDE.md #10"
+  },
+  "langues": {
+    "liste": [
+      "fr",
+      "en",
+      "es"
+    ],
+    "defaut": "fr",
+    "source": "seo/seo_spec.json · site.langs"
+  },
+  "a_confirmer": [
+    {
+      "champ": "app_config.expo.version",
+      "raison": "version de l'app (release) — déposée hors repo au build (#8)"
+    },
+    {
+      "champ": "app_config.expo.ios.bundleIdentifier",
+      "raison": "identité App Store #32 — jamais fabriquée (#6/#8)"
+    },
+    {
+      "champ": "app_config.expo.ios.buildNumber",
+      "raison": "auto-incrément côté EAS au build (#8)"
+    },
+    {
+      "champ": "app_config.expo.android.package",
+      "raison": "identité Play Store — jamais fabriquée (#6/#8)"
+    },
+    {
+      "champ": "app_config.expo.android.versionCode",
+      "raison": "auto-incrément côté EAS au build (#8)"
+    },
+    {
+      "champ": "app_config.expo.icon",
+      "raison": "asset image binaire — hors repo texte (#8)"
+    },
+    {
+      "champ": "app_config.expo.splash.image",
+      "raison": "asset image binaire — hors repo texte (#8)"
+    },
+    {
+      "champ": "app_config.expo.extra.eas.projectId",
+      "raison": "identifiant projet EAS — créé au premier build (#8)"
+    },
+    {
+      "champ": "eas_build.cli.version",
+      "raison": "version CLI EAS — épinglée à l'installation runner (#8)"
+    },
+    {
+      "champ": "eas_build.submit.production.ios.appleId",
+      "raison": "credential App Store Connect — hors repo (#6/#8)"
+    },
+    {
+      "champ": "eas_build.submit.production.ios.ascAppId",
+      "raison": "identifiant app App Store #32 — hors repo (#6/#8)"
+    },
+    {
+      "champ": "eas_build.submit.production.ios.appleTeamId",
+      "raison": "identifiant équipe Apple — hors repo (#6/#8)"
+    },
+    {
+      "champ": "eas_build.submit.production.android.serviceAccountKeyPath",
+      "raison": "clé de service Google Play — secret hors repo (#6/#8)"
+    }
+  ],
+  "identifiants_statut": "a_confirmer",
+  "portails": [
+    {
+      "portail": "ventes",
+      "label": "OTO Ventes",
+      "icon": "sell",
+      "nb_roles": 12
+    },
+    {
+      "portail": "construction",
+      "label": "OTO Construction",
+      "icon": "project",
+      "nb_roles": 10
+    },
+    {
+      "portail": "achat",
+      "label": "OTO Achat",
+      "icon": "buying",
+      "nb_roles": 5
+    },
+    {
+      "portail": "compta",
+      "label": "OTO Compta",
+      "icon": "accounting",
+      "nb_roles": 8
+    },
+    {
+      "portail": "direction",
+      "label": "OTO Direction",
+      "icon": "organization",
+      "nb_roles": 9
+    }
+  ],
+  "hand_off": "Build Expo 54 + submit App Store #32 / Play Store exécutés hors de ce worker (agent Mobile · #8) : ce livrable ne produit que la config versionnable. Les identifiants/credentials `null` sont renseignés au build sur le poste/CI Mobile, jamais fabriqués ici (#6)."
+}

05_deliverables_mvp/mobile/app_config/out/app_config.json

@@ -0,0 +1,44 @@
+{
+  "expo": {
+    "name": "OTO Enterprise OS",
+    "slug": "oto-enterprise-os",
+    "scheme": "otoos",
+    "version": null,
+    "orientation": "portrait",
+    "userInterfaceStyle": "dark",
+    "backgroundColor": "#0a0a12",
+    "primaryColor": "#f0b429",
+    "icon": null,
+    "splash": {
+      "backgroundColor": "#0a0a12",
+      "resizeMode": "contain",
+      "image": null
+    },
+    "locales": {
+      "fr": null,
+      "en": null,
+      "es": null
+    },
+    "ios": {
+      "bundleIdentifier": null,
+      "buildNumber": null,
+      "supportsTablet": true
+    },
+    "android": {
+      "package": null,
+      "versionCode": null
+    },
+    "extra": {
+      "expoSdkMajor": 54,
+      "defaultLocale": "fr",
+      "devises": [
+        "USD",
+        "DOP"
+      ],
+      "eas": {
+        "projectId": null
+      }
+    },
+    "plugins": []
+  }
+}

05_deliverables_mvp/mobile/app_config/out/eas_build.json

@@ -0,0 +1,34 @@
+{
+  "cli": {
+    "version": null,
+    "appVersionSource": "remote"
+  },
+  "build": {
+    "development": {
+      "developmentClient": true,
+      "distribution": "internal",
+      "channel": "development"
+    },
+    "preview": {
+      "distribution": "internal",
+      "channel": "preview"
+    },
+    "production": {
+      "channel": "production",
+      "autoIncrement": true
+    }
+  },
+  "submit": {
+    "production": {
+      "ios": {
+        "appleId": null,
+        "ascAppId": null,
+        "appleTeamId": null
+      },
+      "android": {
+        "serviceAccountKeyPath": null,
+        "track": "internal"
+      }
+    }
+  }
+}

05_deliverables_mvp/mobile/app_config/out/role_navigation.json

@@ -0,0 +1,91 @@
+[
+  {
+    "portail": "ventes",
+    "label": "OTO Ventes",
+    "icon": "sell",
+    "route": "/ventes",
+    "roles_allowed": [
+      "OTO Marketing Directeur",
+      "OTO Marketing Publiciste",
+      "OTO Marketing SEO",
+      "OTO Marketing Social",
+      "OTO Ventes Après-Vente",
+      "OTO Ventes CONFOTUR",
+      "OTO Ventes Chef Équipe",
+      "OTO Ventes Conseiller",
+      "OTO Ventes Contrats",
+      "OTO Ventes Courtier Externe",
+      "OTO Ventes Directeur",
+      "OTO Ventes Réservations"
+    ],
+    "n_roles": 12
+  },
+  {
+    "portail": "construction",
+    "label": "OTO Construction",
+    "icon": "project",
+    "route": "/construction",
+    "roles_allowed": [
+      "OTO Construction Architecte",
+      "OTO Construction BIM",
+      "OTO Construction Chef Projet",
+      "OTO Construction Directeur",
+      "OTO Construction Ingénieur",
+      "OTO Construction QAQC",
+      "OTO Construction Sous-traitants",
+      "OTO Faisabilité IFC Speckle",
+      "OTO Faisabilité Rendu 3D",
+      "OTO Faisabilité Économiste"
+    ],
+    "n_roles": 10
+  },
+  {
+    "portail": "achat",
+    "label": "OTO Achat",
+    "icon": "buying",
+    "route": "/achat",
+    "roles_allowed": [
+      "OTO Achat Acheteur",
+      "OTO Achat Directeur",
+      "OTO Achat Fournisseurs",
+      "OTO Achat Magasinier",
+      "OTO Achat Réception"
+    ],
+    "n_roles": 5
+  },
+  {
+    "portail": "compta",
+    "label": "OTO Compta",
+    "icon": "accounting",
+    "route": "/compta",
+    "roles_allowed": [
+      "OTO Compta Audit UAF",
+      "OTO Compta Clients AR",
+      "OTO Compta Contrôle Gestion",
+      "OTO Compta Fiscaliste eCF",
+      "OTO Compta Fournisseurs AP",
+      "OTO Compta Général",
+      "OTO Compta Paie",
+      "OTO Compta Trésorier"
+    ],
+    "n_roles": 8
+  },
+  {
+    "portail": "direction",
+    "label": "OTO Direction",
+    "icon": "organization",
+    "route": "/direction",
+    "roles_allowed": [
+      "OTO Conseil Administration",
+      "OTO Direction Commerciale",
+      "OTO Direction Financière",
+      "OTO Direction Générale",
+      "OTO Direction Opérations",
+      "OTO Direction Président",
+      "OTO Faisabilité Analyste",
+      "OTO Legal Directeur",
+      "OTO Legal ONAPI"
+    ],
+    "n_roles": 9
+  }
+]

05_deliverables_mvp/mobile/app_config/tests/test_mobile_app_config.py

@@ -0,0 +1,154 @@
+"""Tests du générateur de config app mobile (Sprint 5 · Mobile).
+
+Stdlib pur (unittest) — aucune dépendance pip. Couvre :
+  - conformité au schéma + les 12 invariants du CLI (chemin nominal) ;
+  - la cross-cohérence RBAC ↔ portails ↔ seo (onglets, rôles, labels/icônes, langues) ;
+  - l'anti-invention (#6) par injections négatives (identifiant de store fabriqué,
+    rôles désynchronisés de la surface RBAC, langue inventée, token de marque altéré).
+"""
+
+from __future__ import annotations
+
+import copy
+import json
+import os
+import sys
+import unittest
+
+_HERE = os.path.dirname(os.path.abspath(__file__))
+_ROOT = os.path.normpath(os.path.join(_HERE, ".."))
+sys.path.insert(0, _ROOT)
+
+import app_config_gen as gen  # noqa: E402
+from mobilelib import builder, deps  # noqa: E402
+
+
+def build():
+    return gen._build_bundle()
+
+
+class TestNominal(unittest.TestCase):
+    def setUp(self):
+        self.bundle = build()
+
+    def test_build_valide(self):
+        self.assertEqual(gen._validate_bundle(self.bundle), [])
+
+    def test_schema_seul(self):
+        schema = deps.load_json(deps.SCHEMA_PATH)
+        self.assertEqual(deps.validate(self.bundle, schema), [])
+
+    def test_onglets_portails_metier_dans_ordre(self):
+        contract = deps.load_contract()
+        spec = deps.load_spec()
+        keys = [n["portail"] for n in self.bundle["role_navigation"]]
+        self.assertEqual(keys, spec["portail_order"])
+        self.assertEqual(set(keys), set(contract["portails_business"]))
+
+    def test_roles_allowed_egal_surface_rbac(self):
+        """Ancrage sécurité : un onglet ne cible QUE les rôles RBAC de son portail."""
+        contract = deps.load_contract()
+        roles_map = deps.roles_by_portail(contract)
+        for n in self.bundle["role_navigation"]:
+            self.assertEqual(n["roles_allowed"], sorted(roles_map[n["portail"]]))
+            self.assertEqual(n["n_roles"], len(n["roles_allowed"]))
+            self.assertTrue(n["roles_allowed"], f"{n['portail']} sans rôle")
+
+    def test_labels_icones_depuis_portails_spec(self):
+        pspec = deps.load_portails_spec()
+        labels = {p["key"]: p["label"] for p in pspec["portails"]}
+        icons = {p["key"]: p["icon"] for p in pspec["portails"]}
+        for n in self.bundle["role_navigation"]:
+            self.assertEqual(n["label"], labels[n["portail"]])
+            self.assertEqual(n["icon"], icons[n["portail"]])
+
+    def test_langues_depuis_seo(self):
+        langs, default_lang = deps.load_langs()
+        app = self.bundle["app_config"]["expo"]
+        self.assertEqual(sorted(app["locales"].keys()), sorted(langs))
+        self.assertEqual(app["extra"]["defaultLocale"], default_lang)
+        self.assertEqual(self.bundle["manifest"]["langues"]["liste"], list(langs))
+
+    def test_tokens_marque_4(self):
+        app = self.bundle["app_config"]["expo"]
+        self.assertEqual(app["backgroundColor"], deps.branding.COLOR_BG)
+        self.assertEqual(app["splash"]["backgroundColor"], deps.branding.COLOR_BG)
+        self.assertEqual(app["primaryColor"], deps.branding.COLOR_ACCENT)
+        self.assertEqual(app["userInterfaceStyle"], "dark")
+
+    def test_devises_usd_dop(self):
+        app = self.bundle["app_config"]["expo"]
+        self.assertEqual(
+            app["extra"]["devises"],
+            [deps.branding.DEVISE_PRIMAIRE, deps.branding.DEVISE_SECONDAIRE],
+        )
+
+    def test_identifiants_store_null(self):
+        """Anti-invention : chaque champ a_confirmer reste null (jamais fabriqué)."""
+        spec = deps.load_spec()
+        for entry in spec["a_confirmer"]:
+            found, value = gen._resolve_path(self.bundle, entry["champ"])
+            self.assertTrue(found, f"champ absent: {entry['champ']}")
+            self.assertIsNone(value, f"{entry['champ']} devrait être null")
+        self.assertEqual(self.bundle["manifest"]["identifiants_statut"], "a_confirmer")
+
+    def test_expo_sdk_54(self):
+        spec = deps.load_spec()
+        self.assertEqual(
+            self.bundle["app_config"]["expo"]["extra"]["expoSdkMajor"],
+            spec["app"]["expo_sdk_major"],
+        )
+
+    def test_eas_profils_et_submit_null(self):
+        spec = deps.load_spec()
+        eas = self.bundle["eas_build"]
+        self.assertEqual(sorted(eas["build"].keys()), sorted(spec["eas"]["build_profiles"]))
+        sub = eas["submit"]["production"]
+        self.assertIsNone(sub["ios"]["appleId"])
+        self.assertIsNone(sub["android"]["serviceAccountKeyPath"])
+
+    def test_determinisme(self):
+        a = json.dumps(build(), sort_keys=True, ensure_ascii=False)
+        b = json.dumps(build(), sort_keys=True, ensure_ascii=False)
+        self.assertEqual(a, b)
+
+
+class TestAntiInvention(unittest.TestCase):
+    """Injections négatives : chaque garde-fou doit MORDRE (invariant → erreur)."""
+
+    def setUp(self):
+        self.bundle = build()
+
+    def test_identifiant_fabrique_detecte(self):
+        bad = copy.deepcopy(self.bundle)
+        bad["app_config"]["expo"]["ios"]["bundleIdentifier"] = "com.oto.inventé"
+        errs = gen._validate_bundle(bad)
+        self.assertTrue(any("null" in e for e in errs), errs)
+
+    def test_roles_desync_detecte(self):
+        bad = copy.deepcopy(self.bundle)
+        bad["role_navigation"][0]["roles_allowed"] = ["OTO Rôle Inventé"]
+        errs = gen._validate_bundle(bad)
+        self.assertTrue(any("roles_allowed" in e for e in errs), errs)
+
+    def test_langue_inventee_detecte(self):
+        bad = copy.deepcopy(self.bundle)
+        bad["app_config"]["expo"]["locales"]["de"] = None
+        errs = gen._validate_bundle(bad)
+        self.assertTrue(any("locales" in e for e in errs), errs)
+
+    def test_token_marque_altere_detecte(self):
+        bad = copy.deepcopy(self.bundle)
+        bad["app_config"]["expo"]["primaryColor"] = "#ffffff"
+        errs = gen._validate_bundle(bad)
+        self.assertTrue(any("primaryColor" in e for e in errs), errs)
+
+    def test_ordre_onglets_altere_detecte(self):
+        bad = copy.deepcopy(self.bundle)
+        bad["role_navigation"].reverse()
+        errs = gen._validate_bundle(bad)
+        self.assertTrue(any("ordre des onglets" in e for e in errs), errs)
+
+
+if __name__ == "__main__":
+    unittest.main()

05_deliverables_mvp/qa/acceptance/acceptance_spec.json

@@ -97,7 +97,7 @@
       "roadmap_line": 58,
       "statement": "Dépôts P05/P07 ONAPI · Apps mobile live 2 stores",
       "status": "in_repo",
-      "evidence_modules": ["legal/confotur", "qa/audit_5d"],
+      "evidence_modules": ["legal/confotur", "qa/audit_5d", "mobile/app_config"],
       "evidence_artifacts": [],
       "out_of_scope": [
         {
@@ -211,12 +211,12 @@
       "sprint": null,
       "roadmap_line": 85,
       "statement": "Mobile app publié 2 stores",
-      "status": "out_of_scope",
-      "evidence_modules": [],
+      "status": "in_repo",
+      "evidence_modules": ["mobile/app_config"],
       "evidence_artifacts": [],
       "out_of_scope": [
         {
-          "item": "builds Expo 54 + submit App Store #32 / Play Store — aucune fabrication en repo",
+          "item": "builds Expo 54 + submit App Store #32 / Play Store — la publication réelle sur les stores est hors repo (le worker produit la config versionnable, jamais le build/submit)",
           "source": "roadmap Sprint 5 · Mobile (L56-57) — builds & submissions hors repo · CLAUDE.md #8"
         }
       ]

05_deliverables_mvp/qa/acceptance/out/MANIFEST.json

@@ -8,15 +8,15 @@
     "sprint_deliverables": 8,
     "mvp_metrics": 7,
     "deliverables_total": 15,
-    "in_repo": 14,
-    "out_of_scope_full": 1,
-    "gated_modules": 21,
-    "cited_modules": 21,
+    "in_repo": 15,
+    "out_of_scope_full": 0,
+    "gated_modules": 22,
+    "cited_modules": 22,
     "out_of_scope_items": 12
   },
   "coverage": {
-    "ci_modules_count": 21,
-    "cited_modules_count": 21,
+    "ci_modules_count": 22,
+    "cited_modules_count": 22,
     "bijective": true,
     "missing_in_matrix": [],
     "phantom_evidence": [],
@@ -90,10 +90,12 @@
         "sprint": "S5",
         "expected": [
           "legal/confotur",
+          "mobile/app_config",
           "qa/audit_5d"
         ],
         "cited": [
           "legal/confotur",
+          "mobile/app_config",
           "qa/audit_5d"
         ],
         "missing": [],

05_deliverables_mvp/qa/acceptance/out/acceptance_matrix.json

@@ -170,6 +170,11 @@
           "module": "qa/audit_5d",
           "ci_job": "qa-audit-5d-tests",
           "gated": true
+        },
+        {
+          "module": "mobile/app_config",
+          "ci_job": "mobile-app-config-tests",
+          "gated": true
         }
       ],
       "artifacts": [],
@@ -179,7 +184,7 @@
           "source": "roadmap Sprint 5 · Mobile (L57) — builds & submissions stores hors repo · CLAUDE.md #8"
         }
       ],
-      "n_modules": 2,
+      "n_modules": 3,
       "all_modules_gated": true,
       "all_artifacts_exist": true,
       "has_evidence": true
@@ -397,19 +402,25 @@
       "sprint": null,
       "roadmap_line": 85,
       "statement": "Mobile app publié 2 stores",
-      "status": "out_of_scope",
-      "modules": [],
+      "status": "in_repo",
+      "modules": [
+        {
+          "module": "mobile/app_config",
+          "ci_job": "mobile-app-config-tests",
+          "gated": true
+        }
+      ],
       "artifacts": [],
       "out_of_scope": [
         {
-          "item": "builds Expo 54 + submit App Store #32 / Play Store — aucune fabrication en repo",
+          "item": "builds Expo 54 + submit App Store #32 / Play Store — la publication réelle sur les stores est hors repo (le worker produit la config versionnable, jamais le build/submit)",
           "source": "roadmap Sprint 5 · Mobile (L56-57) — builds & submissions hors repo · CLAUDE.md #8"
         }
       ],
-      "n_modules": 0,
+      "n_modules": 1,
       "all_modules_gated": true,
       "all_artifacts_exist": true,
-      "has_evidence": false
+      "has_evidence": true
     },
     {
       "id": "M6",

05_deliverables_mvp/qa/audit_4big/out/MANIFEST.json

@@ -4,7 +4,7 @@
   "audit": "OTO QA · Audit 4Big Qualité",
   "version": "1.0",
   "verdict": "PASS",
-  "modules_audited": 21,
+  "modules_audited": 22,
   "min_score": 100,
   "pass_score": 95,
   "coverage_ok": true,

05_deliverables_mvp/qa/audit_4big/out/quality_report.json

@@ -5,8 +5,8 @@
   "pass_score": 95,
   "coverage": {
     "ok": true,
-    "ci_modules_count": 21,
-    "registry_modules_count": 21,
+    "ci_modules_count": 22,
+    "registry_modules_count": 22,
     "missing_in_registry": [],
     "missing_in_ci": [],
     "not_in_gate": [],
@@ -592,6 +592,48 @@
         }
       ]
     },
+    {
+      "id": "mobile-app-config",
+      "path": "mobile/app_config",
+      "sprint": "S5",
+      "archetype": "generator",
+      "applicable_weight": 100,
+      "earned_weight": 100,
+      "score": 100,
+      "verdict": "PASS",
+      "checks": [
+        {
+          "criterion": "DOC",
+          "weight": 20,
+          "passed": true,
+          "evidence": "README.md (3703 octets)"
+        },
+        {
+          "criterion": "CONTRAT",
+          "weight": 20,
+          "passed": true,
+          "evidence": "mobile.schema.json"
+        },
+        {
+          "criterion": "TESTS",
+          "weight": 25,
+          "passed": true,
+          "evidence": "17 méthodes test_* dans 1 fichier(s) (seuil 8)"
+        },
+        {
+          "criterion": "CLI",
+          "weight": 15,
+          "passed": true,
+          "evidence": "app_config_gen.py (argparse + __main__)"
+        },
+        {
+          "criterion": "HANDOFF",
+          "weight": 20,
+          "passed": true,
+          "evidence": "MANIFEST + 3 artefact(s) JSON valides"
+        }
+      ]
+    },
     {
       "id": "qa-audit-5d",
       "path": "qa/audit_5d",
@@ -888,8 +930,8 @@
     }
   ],
   "totals": {
-    "modules": 21,
-    "pass": 21,
+    "modules": 22,
+    "pass": 22,
     "fail": 0,
     "min_score": 100,
     "max_score": 100,

05_deliverables_mvp/qa/audit_4big/quality_spec.json

@@ -81,7 +81,8 @@
     { "id": "demo-scenarios", "path": "demo/scenarios", "sprint": "S7", "archetype": "generator", "source": "roadmap Sprint 7 · Scénarios démo (P07 banquier / P05 client) · ci.yml demo-scenario-tests" },
     { "id": "qa-regression", "path": "qa/regression", "sprint": "S8", "archetype": "generator", "source": "roadmap Sprint 8 · Regression tests exhaustifs (matrice méta-niveau) · ci.yml qa-regression-tests" },
     { "id": "devops-deploy-runbook", "path": "devops/deploy_runbook", "sprint": "S8", "archetype": "generator", "source": "roadmap Sprint 8 · DevOps Deployment production complet (run-book VPS unifié) · ci.yml devops-deploy-runbook-tests" },
-    { "id": "qa-acceptance", "path": "qa/acceptance", "sprint": "S8", "archetype": "generator", "source": "roadmap Sprint 8 · QA buffer (matrice d'acceptation / traçabilité MVP roadmap → preuve) · ci.yml qa-acceptance-tests" }
+    { "id": "qa-acceptance", "path": "qa/acceptance", "sprint": "S8", "archetype": "generator", "source": "roadmap Sprint 8 · QA buffer (matrice d'acceptation / traçabilité MVP roadmap → preuve) · ci.yml qa-acceptance-tests" },
+    { "id": "mobile-app-config", "path": "mobile/app_config", "sprint": "S5", "archetype": "generator", "source": "roadmap Sprint 5 · Mobile (config app Expo/EAS + navigation par rôle) · ci.yml mobile-app-config-tests" }
   ],
   "notes": [
     "Audit de MÉTA-NIVEAU : chaque note de module est CALCULÉE depuis des faits du dépôt (présence README/schéma, nombre de méthodes test_*, entrypoint CLI, intégrité out/) — jamais saisie à la main (#6).",

05_deliverables_mvp/qa/regression/out/MANIFEST.json

@@ -4,8 +4,8 @@
   "matrix": "OTO QA · Matrice de régression exhaustive",
   "version": "1.0",
   "verdict": "PASS",
-  "suites": 21,
-  "test_methods": 534,
+  "suites": 22,
+  "test_methods": 551,
   "coverage_ok": true,
   "artifacts": [
     "regression_plan.json"

05_deliverables_mvp/qa/regression/out/regression_plan.json

@@ -17,8 +17,8 @@
   ],
   "coverage": {
     "ok": true,
-    "suites_count": 21,
-    "gated_in_ci": 22,
+    "suites_count": 22,
+    "gated_in_ci": 23,
     "self_module_excluded": "qa/regression",
     "self_module_gated": true,
     "missing_tests_dir": [],
@@ -147,6 +147,17 @@
       "test_files": 1,
       "test_methods": 44
     },
+    {
+      "id": "mobile.app_config",
+      "path": "mobile/app_config",
+      "jobs": [
+        "mobile-app-config-tests"
+      ],
+      "in_gate": true,
+      "has_tests_dir": true,
+      "test_files": 1,
+      "test_methods": 17
+    },
     {
       "id": "publiciste",
       "path": "publiciste",
@@ -260,9 +271,9 @@
   ],
   "under_threshold": [],
   "totals": {
-    "suites": 21,
-    "test_files": 21,
-    "test_methods": 534,
+    "suites": 22,
+    "test_files": 22,
+    "test_methods": 551,
     "min_methods": 10,
     "under_threshold": 0
   },

05_deliverables_mvp/qa/regression/out/regression_run.json

@@ -135,6 +135,18 @@
       "ok": true,
       "returncode": 0
     },
+    {
+      "id": "mobile.app_config",
+      "path": "mobile/app_config",
+      "expected_methods": 17,
+      "ran": 17,
+      "passed": 17,
+      "failures": 0,
+      "errors": 0,
+      "skipped": 0,
+      "ok": true,
+      "returncode": 0
+    },
     {
       "id": "publiciste",
       "path": "publiciste",
@@ -257,11 +269,11 @@
     }
   ],
   "totals": {
-    "suites": 21,
-    "green": 21,
+    "suites": 22,
+    "green": 22,
     "red": 0,
-    "ran": 534,
-    "passed": 534,
+    "ran": 551,
+    "passed": 551,
     "failures": 0,
     "errors": 0,
     "skipped": 0