chore(dev): auto-seed conformity stats fixture on dev / alpha / local

Wire the `seed-conformite-stats.mjs` script into the app startup path
so /admin/stats/conformite has data to browse out of the box on every
environment where it is useful:

- `entrypoint.sh` runs the seed after Drizzle migrations when
  `EGAPRO_AUTO_SEED_CONFORMITE=true`. Failure is non-fatal — the app
  still boots; we just log a warning.
- `Dockerfile` copies the seed script next to the other runtime
  scripts (migrate, audit-cleanup) so it's available to the runner
  image.
- `.kontinuous/env/dev/values.yaml` turns the flag on. This covers
  review apps (including the alpha branch) but leaves preprod and prod
  untouched — they keep running on real data.
- Locally, `pnpm dev` chains the seed before `next dev` (idempotent
  upserts + `|| true` fallback so a missing DB never blocks the dev
  server).

Also fixes a leftover bug in the seed script where `CAMPAIGN_YEARS_BACK`
was referenced but not defined — restores the 4-year window.

Author: LucasCharrier

.kontinuous/env/dev/values.yaml

@@ -1,3 +1,8 @@
 app:
   annotations:
     oblik.socialgouv.io/min-limit-cpu: 2
+  vars:
+    # Seed the admin conformity-stats fixture at container startup so every
+    # review app (including alpha) has realistic numbers to browse. Gated
+    # here so preprod / prod never auto-seed — they ship with real data.
+    EGAPRO_AUTO_SEED_CONFORMITE: "true"

packages/app/Dockerfile

@@ -80,6 +80,9 @@ COPY --from=builder --chown=1000:1000 /app/packages/app/scripts/migrate.mjs ./pa
 # Standalone script invoked by the audit-cleanup CronJob (issue #3268 — direct
 # DB access replaces the former curl → /api/audit/cleanup HTTP trigger).
 COPY --from=builder --chown=1000:1000 /app/packages/app/scripts/audit-cleanup.mjs ./packages/app/scripts/audit-cleanup.mjs
+# Optional conformity-stats fixture seed (dev / alpha review apps only;
+# gated by EGAPRO_AUTO_SEED_CONFORMITE in entrypoint.sh).
+COPY --from=builder --chown=1000:1000 /app/packages/app/scripts/seed-conformite-stats.mjs ./packages/app/scripts/seed-conformite-stats.mjs
 
 USER 1000
 

packages/app/package.json

@@ -16,7 +16,7 @@
 		"db:migrate": "drizzle-kit migrate",
 		"db:push": "drizzle-kit push",
 		"db:studio": "drizzle-kit studio",
-		"dev": "node scripts/copy-dsfr.mjs && node scripts/copy-swagger-ui.mjs && next dev --turbo",
+		"dev": "node scripts/copy-dsfr.mjs && node scripts/copy-swagger-ui.mjs && (pnpm seed:conformite || true) && next dev --turbo",
 		"preview": "next build && next start",
 		"start": "next start",
 		"test": "vitest run",

packages/app/scripts/entrypoint.sh

@@ -5,5 +5,18 @@ echo "Running Drizzle migrations..."
 node packages/app/scripts/migrate.mjs
 echo "Migrations completed."
 
+# Opt-in fixture seeding for the admin conformity stats page. Enabled only
+# on dev/alpha review apps via .kontinuous/env/dev/values.yaml — never on
+# preprod or prod. Idempotent upserts, so re-running on every pod restart
+# is safe. Failure is treated as non-fatal: the app still boots.
+if [ "$EGAPRO_AUTO_SEED_CONFORMITE" = "true" ]; then
+  echo "Seeding admin conformity fixture (EGAPRO_AUTO_SEED_CONFORMITE=true)..."
+  if node packages/app/scripts/seed-conformite-stats.mjs; then
+    echo "Conformity fixture seeded."
+  else
+    echo "WARNING: conformity seed failed, continuing startup anyway." >&2
+  fi
+fi
+
 echo "Starting Next.js..."
 exec node packages/app/server.js

packages/app/scripts/seed-conformite-stats.mjs

@@ -37,12 +37,8 @@ const NAF_SAMPLE_CODES = [
 	"M70.10Z", // M — Activités spécialisées
 	"Q86.10Z", // Q — Santé humaine
 ];
-/**
- * Kept in sync with `FIRST_DECLARATION_YEAR` from `~/modules/domain` — the
- * year filter on `/admin/stats/conformite` goes from there to the current
- * year, so we seed every slot to avoid empty tiles on older selections.
- */
-const FIRST_SEED_YEAR = 2019;
+/** Number of most-recent campaign years to seed (current year + N-1 … N-3). */
+const CAMPAIGN_YEARS_BACK = 4;
 
 function getDatabaseUrl() {
 	if (process.env.DATABASE_URL) return process.env.DATABASE_URL;