@@ -0,0 +1,19 @@
+# Generated by Django 5.0.11 on 2025-05-16 21:22
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('authentication', '0016_alter_customusermodel_is_confirmed'),
+        ('ml_model', '0050_remove_modeltag_color'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='businessuserhost',
+            name='private_models',
+            field=models.ManyToManyField(blank=True, related_name='private_models_hosts', to='ml_model.neuronmodel', verbose_name='Private models'),
+        ),
+    ]
@@ -11,6 +11,7 @@ from authentication.models.business_group import BusinessGroup
 from authentication.models.choices import BusinessSector, UsageIntensity
 from authentication.models.whitelist import CompanyIPWhitelist
 from core.models import BaseModel
+from ml_model.models import NeuronModel
 
 
 class BusinessUserHost(BaseModel):
@@ -78,9 +79,14 @@ class BusinessUserHost(BaseModel):
     allowed_models = ArrayField(
         models.CharField(max_length=64, blank=True),
         default=list,
+        blank=True,
         verbose_name=_('Allowed models'),
     )
 
+    private_models = models.ManyToManyField(
+        NeuronModel, blank=True, verbose_name=_('Private models'), related_name='private_models_hosts'
+    )
+
     is_log_history_enabled = models.BooleanField(default=False, verbose_name=_('Log history enabled'))
 
     @property
@@ -74,6 +74,8 @@ class BusinessAccountService:
             self.reject()
         else:
             raise Exception(_('Invited account can either accept or reject an invitation'))
+        self.account.user.is_confirmed = True
+        self.account.user.save()
         return self.account
 
     def accept(self):
@@ -105,6 +107,9 @@ class BusinessAccountService:
         if self.account.user.account_type not in ('business_account', 'business_security'):
             raise Exception(_("You do not have sufficient rights to perform this action"))
 
+        if self.account.acceptance_status != InvitationStatus.ACCEPTED:
+            raise Exception(_('You cannot change the password of an unconfirmed e-mail user.'))
+
         self.account.user.set_password(serializer.validated_data['password_1'])
         self.account.user.save()
 
@@ -68,7 +68,6 @@ class BusinessHostService:
         username = f'{self.user.host_account.company_name}_{random_with_N_digits(6)}'
         password = generate_token(15)
         user = CustomUserModel.objects.create_user(username=username, email=email, password=password)
-        user.is_confirmed = True
         user.save()
 
         PaymentPlanService(user).subscribe_user_to_plan(PaymentPlan.objects.get(price=0, is_corporate=False))
@@ -76,7 +75,6 @@ class BusinessHostService:
         account_service = BusinessAccountService.create(
             user,
             self.user.host_account,
-            status=InvitationStatus.ACCEPTED,
             account_privileges=account_privileges,
         )
         if token_limit is not None:
@@ -123,24 +123,25 @@ class EmailService:
     def send_corporate_greeting_email(self, account: BusinessAccount, password: str | None = None):
         if self.user.host_account is None:
             raise Exception(_('Regular users cannot send introductory letters'))
-        message = f"""
-            Добро пожаловать на платформу AIR!
-            Этот аккаунт был создан для вас {self.user.host_account.company_name} в рабочих целях.
-            Вы можете использовать все ресурсы корпоративного аккаунта - оплачивать
-            подписку нет необходимости.
-
-            Ваши данные для входа:
-
-            email: {account.user.email}
-            password: {password}
-        """
-        mail = EmailMessage(
+        token = EmailTokenService(account.user).generate_user_token()
+        try:
+            template = get_template('authentication/corporate_greeting_email.html')
+            html_message = template.render(context={
+                'company_name': self.user.host_account.company_name,
+                'invitation_url': settings.INVITATION_RESPONSE_URL,
+                'token': token.key,
+                'email': account.user.email,
+                'password': password
+            })
+        except TemplateDoesNotExist:
+            raise LetterNotFound
+        except Exception as exc:
+            raise LetterUnknownException from exc
+        self.send_email(
             subject='Ваш аккаунт на платформе AIR',
-            body=message,
-            from_email=settings.EMAIL_HOST_USER,
-            to=(account.user.email,),
+            message=html_message,
+            user_email=account.user.email
         )
-        mail.send(fail_silently=True)
 
     def send_reinvited_email(self, account: BusinessAccount, password: str | None = None) -> None:
         try:
@@ -0,0 +1,25 @@
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <title>Ваш аккаунт на платформе AIR</title>
+</head>
+<body>
+    <p><strong>Добро пожаловать на платформу AIR!</strong></p>
+    <p>
+        Этот аккаунт был создан для вас <strong>{{ company_name }}</strong> в рабочих целях.<br>
+        Вы можете использовать все ресурсы корпоративного аккаунта — оплачивать
+        подписку нет необходимости.
+    </p>
+    <p>
+        Чтобы ответить на приглашение — перейдите по ссылке ниже:<br>
+        <a href="{{ invitation_url }}?token={{ token }}">[Нажмите для подтверждения]</a><br>
+        Если ссылка не открывается по кнопке, попробуйте вставить ссылку в адресную строку:<br>
+        {{ invitation_url }}?token={{ token }}
+    </p>
+    <p><strong>Ваши данные для входа:</strong><br>
+    E-mail: {{ email }}<br>
+    Пароль: {{ password }}</p>
+    <p>Всегда с вами, команда AIR</p>
+</body>
+</html>
@@ -363,6 +363,7 @@ class BusinessUserHostAdmin(admin.ModelAdmin):
     verbose_name_plural = 'Бизнес-аккаунты-хосты'
     raw_id_fields = ['user', 'affiliated_by']
     actions = ['show_balance_for_all', 'hide_balance_for_all']
+    filter_horizontal = ('private_models',)
 
     @admin.action(description='Показать баланс всем сотрудникам выбранных компаний')
     def show_balance_for_all(self, request, qs: QuerySet[BusinessUserHost]):
@@ -330,6 +330,7 @@ GOOGLE_API_KEY = env.str('GOOGLE_API_KEY', default='defaultapikey')
 SERPER_API_KEY = env.str('SERPER_API_KEY', 'defaultapikey')
 FLUX_API_KEY = env.str('FLUX_API_KEY', 'defaultapikey')
 OPENROUTER_API_KEY = env.str('OPENROUTER_API_KEY', 'defaultapikey')
+FAL_API_KEY = env.str('FAL_API_KEY', 'defaultapikey')
 
 OPENAI_PROXY_HOST = env.str('OPENAI_PROXY_HOST', 'neuron-proxy:8080')
 UPSCALE_MULTIPLIER_HOST = env.str('UPSCALE_MULTIPLIER_HOST', 'packet:8080')
@@ -250,6 +250,10 @@ msgstr "IT"
 msgid "Finance"
 msgstr "Финансы"
 
+#: authentication/models/business_host.py:86
+msgid "Private models"
+msgstr "Приватные модели"
+
 #: authentication/models/choices.py:9
 msgid "Tourism"
 msgstr "Туризм"
@@ -1132,4 +1136,7 @@ msgid "Letter template not found"
 msgstr "Шаблон письма не найден"
 
 msgid "There was an unknown error while sending an email"
-msgstr "При отправке письма произошла неизвестная ошибка"
\ No newline at end of file
+msgstr "При отправке письма произошла неизвестная ошибка"
+
+msgid "You cannot change the password of an unconfirmed e-mail user."
+msgstr "Вы не можете изменить пароль неподтвержденного по e-mail пользователя."
@@ -1,6 +1,6 @@
 from uuid import UUID
 
-from django.db.models import Prefetch
+from django.db.models import Prefetch, Q
 from django.utils.translation import gettext_lazy as _
 
 from authentication.models.choices import InvitationStatus
@@ -43,11 +43,14 @@ class NeuronModelSelector:
         hidden: bool = False,
     ):
         models = NeuronModel.objects.prefetch_related(Prefetch('model_modelstats')).all()
-        if category:
-            models = models.filter(category__slug=category)
         if self.user.is_anonymous:
             return NeuronModelsSerializer(models, many=True)
         user_type = UserSelector(self.user).check_account_type()
+        models = NeuronModel.objects.filter(
+            Q(private_models_hosts__isnull=True)
+            | Q(private_models_hosts__accounts__user=self.user)
+            | Q(private_models_hosts__user=self.user)
+        )
         if (
             user_type == 'business_account'
             and self.user.business_account.acceptance_status == InvitationStatus.ACCEPTED
@@ -57,6 +60,9 @@ class NeuronModelSelector:
             allowed_models = None
         if allowed_models is not None:
             models = models.filter(title__in=allowed_models)
+        if category:
+            models = models.filter(category__slug=category)
+        models = models.distinct()
         if serialize:
             return NeuronModelsSerializer(models, many=True)
         return models
@@ -8,6 +8,7 @@ from ml_model.services.djourney import Djourney
 from ml_model.services.epicphotogasm import Epicphotogasm
 from ml_model.services.flux import Flux
 from ml_model.services.fluxproultra import Fluxproultra
+from ml_model.services.fluxlorafast import Fluxlorafast
 from ml_model.services.gemini import Gemini
 from ml_model.services.granite import Granite
 from ml_model.services.grok import Grok
@@ -0,0 +1,83 @@
+import time
+import httpx
+
+from backend import settings
+from decimal import Decimal
+from datetime import timedelta
+from io import BytesIO
+from typing import Any
+
+from django.core.files import File
+
+from messages.models import Message
+
+from ml_model.models import ModelInput
+from ml_model.services.base import SimpleService
+
+
+class Fluxlorafast(SimpleService):
+    TOKENS_COST = {
+        'flux-lora': {
+            'input_imgs': Decimal('17.5'),
+        },
+    }
+
+    def calculate_price(self, input_message: Message, version: str) -> Decimal:
+        price_map = self.TOKENS_COST[version]
+        price = price_map['input_imgs']
+        if image_count := input_message.info.get('num_outputs'):
+            price = price * image_count
+        return price.quantize(Decimal('0.1'), rounding='ROUND_UP')
+
+    def save_results(
+        self,
+        prompt: str,
+        images: list[dict[str, Any]],
+        time: timedelta,
+        save: bool = True,
+    ) -> list[Message]:
+        messages: list[Message] = []
+        for image in images:
+            messages.append(
+                Message(
+                    content_object=self.store,
+                    elapsed_time=time,
+                    content=prompt,
+                    file=File(BytesIO(httpx.get(image).content), '.png'),
+                )
+            )
+        if save:
+            return Message.objects.bulk_create(messages)
+        return messages
+
+    def make(self, input_message: Message, save: bool = True) -> list[Message]:
+        start_time = time.time()
+        version = input_message.info.get('version')
+        translated_prompt = self.translate_prompt(input_message.content)
+        callback_data = dict(
+            {
+                'prompt': translated_prompt,
+                'model_version': 'fb90c17a-d410-41e7-9961-dc7c687bc627',
+                **input_message.info,
+            }
+        )
+        client = httpx.Client(
+            base_url="https://queue.fal.run",
+            headers={"Authorization": f"Key {settings.FAL_API_KEY}"},
+            timeout=600,
+        )
+        result = client.post(
+            f'fal-ai/{version}',
+            json={'prompt': input_message.content, **callback_data},
+        ).json()
+        while True:
+            status = client.get(result['status_url']).json()
+            if status.get('status') == 'COMPLETED':
+                break
+            time.sleep(1/3)
+        process_time = timedelta(seconds=(time.time() - start_time))
+        final_result = client.get(result['response_url']).json()
+        images = [img['url'] for img in final_result['images']]
+        self.handle_invoice(input_message.content_object.model, input_message=input_message, version=version)
+        msgs = self.save_results(input_message.content, images, process_time, save)
+        return msgs
@@ -127,7 +127,7 @@ def openrouter_run(version: str, messages: list, callback_data: dict, model_name
         ) as client:
             resp = client.post(
                 'chat/completions',
-                json={'model': version, 'messages': messages, **callback_data},
+                json={'model': version, 'messages': messages, 'transforms': ['middle-out'],**callback_data},
             )
             if (
                 (data := resp.json())
@@ -15,16 +15,28 @@ services:
         python manage.py compilemessages
         python -m uvicorn --host 0.0.0.0 --workers 1 --timeout-keep-alive 300 --ws wsproto --loop uvloop --http httptools --lifespan off --log-level info backend.asgi:application
     labels:
-      - traefik.enable=true
-      - traefik.docker.network=infrastructure
-      - traefik.http.routers.backend.rule=Host(`$DOMAIN`)
-      - traefik.http.routers.backend.entrypoints=web,websecure
-      - traefik.http.routers.backend.tls=true
-      - traefik.http.routers.backend.tls.certresolver=defaultresolver
-      - traefik.http.routers.backend.service=backend
-      - traefik.http.services.backend.loadbalancer.server.port=8000
-      - traefik.http.middlewares.backend.redirectscheme.scheme=https
-      - traefik.http.middlewares.backend.redirectscheme.permanent=true
+        - traefik.enable=true
+        - traefik.docker.network=infrastructure
+        
+        - traefik.http.routers.backend.rule=Host(`$DOMAIN`)
+        - traefik.http.routers.backend.entrypoints=web,websecure
+        - traefik.http.routers.backend.tls=true
+        - traefik.http.routers.backend.tls.certresolver=defaultresolver
+        - traefik.http.routers.backend.service=backend
+
+        - traefik.http.routers.backend-admin-http.rule=Host(`$DOMAIN`) && PathPrefix(`/djangoadmin`)
+        - traefik.http.routers.backend-admin-http.entrypoints=web
+        - traefik.http.routers.backend-admin-http.tls=false
+        - traefik.http.routers.backend-admin-http.service=backend
+        - traefik.http.routers.backend-admin-http.middlewares=sts-header@file,https-redirect@file
+
+        - traefik.http.routers.backend-admin-https.rule=Host(`$DOMAIN`) && PathPrefix(`/djangoadmin`)
+        - traefik.http.routers.backend-admin-https.entrypoints=websecure
+        - traefik.http.routers.backend-admin-https.service=backend
+        - traefik.http.routers.backend-admin-https.tls=true
+        - traefik.http.routers.backend-admin-https.tls.certresolver=defaultresolver
+
+        - traefik.http.services.backend.loadbalancer.server.port=8000
     env_file:
       - $ENV
     depends_on:
@@ -42,7 +42,7 @@ services:
           - node.role == worker
       labels:
         - traefik.enable=true
-        - traefik.docker.network=infrastructure
+        - traefik.swarm.network=infrastructure
         
         - traefik.http.routers.backend.rule=Host(`$DOMAIN`)
         - traefik.http.routers.backend.entrypoints=web,websecure
@@ -54,7 +54,7 @@ services:
         - traefik.http.routers.backend-admin-http.entrypoints=web
         - traefik.http.routers.backend-admin-http.tls=false
         - traefik.http.routers.backend-admin-http.service=backend
-        - traefik.http.routers.backend-admin-http.middlewares=sts-header@swarm,https-redirect@swarm
+        - traefik.http.routers.backend-admin-http.middlewares=sts-header@file,https-redirect@file
 
         - traefik.http.routers.backend-admin-https.rule=Host(`$DOMAIN`) && PathPrefix(`/djangoadmin`)
         - traefik.http.routers.backend-admin-https.entrypoints=websecure