optimisation of workflows : Skiasharp deps already installed

BlogSpotService's constructor throws InvalidOperationException
("SiteSettings.Blog is not configured.") when IOptions<SiteSettings>.Blog
is null, so every request to BlogApiController 500'd resolving the
service — all 3 BlogApiMappedClaimsTests were failing with
InternalServerError.

The mapped-claims fixture never configured SiteSettings (the main
BlogsWebServerFixture does, pointing Blog at a per-run temp dir).
Mirror that: Configure<SiteSettings>(s => s.Blog = <temp dir>)
before AddScoped<BlogSpotService>(). These tests are JSON-only
(AttachFiles short-circuits), but the service must be constructible.

Verified: BlogApiMappedClaimsTests 3/3 green; full Yavsc.Blogs.Tests
37/37 green.

Co-Authored-By: Claude <noreply@anthropic.com>

.env.sample

@@ -15,7 +15,7 @@ POSTGRES_HOST=localhost
 POSTGRES_PORT=5432
 POSTGRES_DB=db
 POSTGRES_USER=pguser
-POSTGRES_PASSWORD=<your pg password>
+POSTGRES_PASSWORD=pgpassword
 
 ANTHROPIC_API_KEY=none
 ANTHROPIC_MAX_TOKENS=0

.forgejo/workflows/buildAndTest.yml

@@ -27,13 +27,13 @@ jobs:
   build:
     runs-on: docker
     container:
-      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v4
+      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v2
     steps:
     - name: Clone yavsc
       run: |
         set -e
         cd /src
-        git clone "${FORGEJO_SERVER_URL}/${FORGEJO_REPOSITORY}.git" _src
+        git clone https://forgejo.pschneider.fr/notazof/yavsc.git _src
         cd _src
         if [ -n "${GITHUB_REF:-}" ]; then
           git fetch origin "$GITHUB_REF"
@@ -44,7 +44,7 @@ jobs:
     - name: Secret scan
       run: |
         echo "🔍 Scanning for secrets..."
-        cd /src/_src && dotnet tool restore && dotnet picket git --verbose --redact --exit-code 1 --log-opts main..HEAD \
+        cd /src/_src && dotnet tool restore && dotnet picket git --verbose --redact --exit-code 1 --log-opts -n10 \
     - name: Build
       run: |
         echo "🏗️ Building the solution..."
@@ -53,14 +53,5 @@ jobs:
       run: |
         echo "🚀 Lancement des tests..."
         cd /src/_src && dotnet test \
-          --report-xunit \
-          --report-xunit-html \
-          --report-xunit-html-filename "test-results.html"
-        TEST_EXIT_CODE=$?
-        echo "Test exit code: $TEST_EXIT_CODE"
-        if [ $TEST_EXIT_CODE -ne 0 ]; then
-          echo "❌ Tests failed with exit code $TEST_EXIT_CODE"
-          exit $TEST_EXIT_CODE
-        else
-          echo "✅ All tests passed successfully."
-        fi
+          --verbosity normal \
+          --filter="Category!=Platform-Android"

.forgejo/workflows/release.yml

@@ -52,7 +52,7 @@ jobs:
   release:
     runs-on: docker
     container:
-      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v4
+      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v2
     steps:
       - name: Clone du repo au tag demandé
         env:
@@ -69,7 +69,7 @@ jobs:
           cd /src
 
           if [[ ! -d _src/.git ]]; then
-            git clone --depth=1 "${FORGEJO_SERVER_URL}/${FORGEJO_REPOSITORY}.git" _src
+            git clone --depth=1 https://forgejo.pschneider.fr/notazof/yavsc.git _src
           fi
 
           cd _src

.github/copilot-instructions.md

@@ -1,3 +0,0 @@
-# Conventions du projet
-
-- Par defaut, mettre a jour [CHANGELOG.md](../CHANGELOG.md) a chaque commit, en respectant sa structure existante et en documentant les changements du commit. Si aucune entree n'est pertinente, expliquer explicitement cette exception avant de committer.

.github/workflows/docker-publish-backend.yml

@@ -8,7 +8,8 @@ on:
 
 jobs:
   production-deploy:
-    runs-on: ubuntu-26.04
+    runs-on: ubuntu-latest
+
     steps:
       # 1. Récupération du code
       - name: Check out the repo
@@ -24,24 +25,8 @@ jobs:
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Set up .NET
-        uses: actions/setup-dotnet@v3
-        with:
-          dotnet-version: 10.0.x
-      - name: Workloads restore
-        run: dotnet workload restore
       - name: Test
-        env:
-          TEST_FAILED: ""
-        run: make test || export TEST_FAILED=$?
-      - uses: actions/upload-artifact@v7
-        with:
-          name: my-artifact
-          path: test-reports/**/*
-      - name: Fail if tests failed
-        if: ${{ env.TEST_FAILED != '' && env.TEST_FAILED != '0' }}
-        run: exit $TEST_FAILED
-
+        run: dotnet test --no-build --verbosity normal --filter="Category!=Platform-Android"
       # 4. Build et Push de l'image de production finale
       - name: Build and push production image
         uses: docker/build-push-action@v7

.gitignore

@@ -43,9 +43,3 @@ DataDir/
 
 *.log
 
-# gitleaks scan output (local secret-scan report, not for the repo)
-/gitleaks-report.json
-
-# Exclude test reports (local test report, not for the repo)
-/test-reports
-/doc/**/.*.md

.pre-commit-config.yaml

@@ -1,6 +0,0 @@
-repos:
-  - repo: https://github.com/gitleaks/gitleaks
-    rev: v8.24.2
-    hooks:
-      - id: gitleaks
-

.vscode/launch.json

@@ -22,9 +22,11 @@
     },
     {
       "name": "Android Debug",
-      "type": "maui",
-      "request": "launch",
-      "project": "${workspaceFolder}/src/PostIt/PostIt.Android/PostIt.Android.csproj"
+      "type": "mono",
+      "preLaunchTask": "run-debug-android",
+      "request": "attach",
+      "address": "localhost",
+      "port": 55555
     },
     {
       "name": "Android Attach - Debug",
@@ -41,15 +43,9 @@
     },
     {
       "name": "Yavsc Org",
-      "type": "coreclr",
+      "type": "dotnet",
       "request": "launch",
-      "program": "${workspaceFolder}/src/Yavsc.Org/bin/Debug/net10.0/Yavsc.Org.dll",
-      "env": {
-        "ASPNETCORE_ENVIRONMENT": "Development"
-      },
-      "cwd": "${workspaceFolder}/src/Yavsc.Org",
-      "preLaunchTask": "build-web-yavsc-org"
-
+      "projectPath": "${workspaceFolder}/src/Yavsc.Org/Yavsc.Org.csproj",
     },
     {
       "name": "Yavsc Blogs",

.vscode/settings.json

@@ -45,10 +45,5 @@
             ]
         }
     },
-    "dotnet.defaultSolution": "yavsc.sln",
-    "axaml.selectedSolution": "/home/paul/Workspace/yavsc/yavsc.sln",
-    "chat.tools.terminal.autoApprove": {
-        "dotnet build": true,
-        "dotnet test": true
-    }
+    "dotnet.defaultSolution": "yavsc.sln"
 }

.vscode/tasks.json

@@ -1,17 +1,27 @@
 {
   "version": "2.0.0",
   "isRoot": true,
-
+  "problemMatcher": [
+        {
+          "owner": "dotnet",
+          "fileLocation": ["relative", "${workspaceFolder}"],
+          "source": "dotnet",
+          "pattern": {
+            "regexp": "^\\s*(.*)\\((\\d+),(\\d+)\\):\\s+(error|warning) (.*)$",
+            "file": 1,
+            "line": 2,
+            "column": 3,
+            "severity": 4,
+            "code": 5,
+            "message": 6
+          }
+        }
+      ],
   "tasks": [
     {
-      "label": "build-debug-android",
+      "label": "run-debug-android",
       "command": "dotnet",
-      "detail": "Build the PostIt Android project in debug mode",
       "type": "shell",
-      "runOptions": {
-
-      },
-      "problemMatcher": ["$msCompile"],
       "options": {
         "cwd": "${workspaceFolder}/src/PostIt/PostIt.Android",
         "env": {
@@ -33,7 +43,6 @@
       "label": "build",
       "command": "dotnet",
       "type": "process",
-      "problemMatcher": ["$msCompile"],
       "args": ["build", "/property:GenerateFullPaths=true"],
       "group": "build",
       "isBuildCommand": true,
@@ -93,34 +102,6 @@
       },
       "isBackground": true
     },
-    {
-      "label": "build-web-yavsc-org",
-      "type": "process",
-      "problemMatcher": ["$msCompile"],
-      "command": "dotnet",
-      "args": ["build"],
-      "options": {
-        "cwd": "src/Yavsc.Org"
-      },
-      "group": {
-        "kind": "build"
-      },
-      "isBackground": true
-    },
-    {
-      "label": "build-web-yavsc-blogs",
-      "type": "process",
-      "problemMatcher": ["$msCompile"],
-      "command": "dotnet",
-      "args": ["build"],
-      "options": {
-        "cwd": "src/Yavsc.Blogs"
-      },
-      "group": {
-        "kind": "build"
-      },
-      "isBackground": true
-    },
     {
       "label": "dotnet: build-postit-desktop",
       "type": "process",
@@ -128,7 +109,6 @@
       "isTestCommand": false,
       "isBackground": true,
       "command": "dotnet",
-      "problemMatcher": ["$msCompile"],
       "args": ["build", "/property:GenerateFullPaths=true"],
       "options": {
         "cwd": "src/PostIt/PostIt.Desktop"

CHANGELOG.md

@@ -1,464 +1,5 @@
 # Changelog
 
-## [1.0.8-rc25] - unstable
-
-### Added
-
-* [Yavsc.Api] Notification du performer à la création d'un rendez-vous
-  depuis PostIt, selon ses préférences de contact, sans supprimer l'envoi Org.
-* [Yavsc.Api][Yavsc.Server] Notification du performer à la signature
-  client d'un devis (JSON ou image), enregistrée pour l'accueil PostIt
-  et transmise par e-mail et SignalR.
-* [Yavsc.Api] Nouveau point d'entrée `GET /api/v1/notifications/me`
-  pour exposer les notifications publiques et ciblées à PostIt sur la
-  Home page ; les notifications d'administration restent filtrées.
-* [PostIt] Affichage des notifications sur la page d'accueil, avec
-  actualisation, indicateur de chargement et message d'erreur. Les
-  notifications publiques sont accessibles sans connexion et la liste
-  est rechargée lors d'un changement de session.
-
-### Changed
-
-* [PostIt] Insertion des liens de fichiers dès leur ajout au brouillon ;
-  les liens provisoires des nouveaux billets sont résolus au premier
-  enregistrement. Save conserve l'édition ouverte et est mis en valeur
-  lorsque le titre, le corps ou les pièces jointes sont modifiés.
-
-* [Projet] Instructions Copilot persistantes : mise à jour du changelog
-  par défaut à chaque commit, avec justification explicite des exceptions.
-
-### Fixed
-
-* [PostIt.Tests] Les tests du bandeau de session utilisent le bandeau
-  réellement monté dans la fenêtre headless, au lieu d'un contrôle détaché.
-  Les fenêtres sont fermées après chaque test et les quatre boutons
-  de navigation sont vérifiés.
-
-* [PostIt] Les liens Markdown des pièces jointes utilisent désormais
-  le même filtre de nom que l'upload serveur, avant l'encodage URL.
-  Le libellé conserve le nom original, notamment ses accents.
-
-* [Yavsc.Abstract][Yavsc.Blogs] Encodage des caractères non supportés
-  dans les noms de fichiers téléversés avec `_` au lieu de `#`, pour
-  éviter les fragments d'URL et permettre le téléchargement via les
-  fichiers statiques, notamment pour les noms accentués.
-
-* [Yavsc.Api][Yavsc.Blogs] Les appels API et la bande passante sont
-  désormais enregistrés côté serveur pour les requêtes authentifiées :
-  le middleware de télémétrie est maintenant branché après
-  l'authentification, ce qui permet de comptabiliser `ApiCalls` et
-  `BandwidthMb` au lieu d'enregistrer des zéros.
-
-## [1.0.8-rc24] - unstable
-
-### Added
-
-* [PostIt] Reconnection automatique aux salons de discussion au reconnect
-
-### Changed
-
-* [PostIt] La liste des billets et l'éditeur Markdown se partagent
-  l'espace disponible et défilent séparément ; un séparateur permet
-  de redimensionner les deux zones.
-
-### Fixed
-
-* [PostIt] Défilement des articles longs en édition et en aperçu :
-  suppression de la limite de hauteur qui masquait le contenu Markdown
-  et du défilement imbriqué autour d'AvaloniaEdit. Six tests headless
-  couvrent les barres automatiques, le redimensionnement et le
-  défilement indépendant de la liste.
-
-## [1.0.8-rc23] - unstable
-
-### Added
-
-* [PostIt] Badge « Publié » à côté du titre des billets publiés dans la
-  liste, mis à jour lors de la publication ou du retour en brouillon.
-* [PostIt] Gestion native du compte inspirée de `/Manage` : modification
-  du nom d'utilisateur, du nom complet et de l'adresse, téléversement
-  d'avatar, confirmation e-mail, préférence de courriel mensuel,
-  création ou changement de mot de passe et activation/désactivation
-  de l'authentification à deux facteurs.
-* [PostIt][Yavsc.Api] Sélection d'un agenda Google, gestion séparée des
-  comptes bancaires, dissociation des connexions externes et suppression
-  du compte avec confirmation du nom d'utilisateur.
-* [PostIt] Configuration du profil professionnel et des activités,
-  navigation vers les cercles et les publications depuis le compte.
-* [PostIt][Yavsc.Api] Administration des utilisateurs avec recherche
-  dans les métadonnées du profil et consultation de la consommation
-  de ressources.
-* [Yavsc.Server][Yavsc.Api][Yavsc.Blogs] Suivi de la consommation de
-  ressources, API de synthèse et migration `ResourceUsageRecords`.
-* [Tests] Couverture des parcours profil et professionnel, de l'API de
-  consommation de ressources et du renouvellement des jetons :
-  rotation à usage unique, appels simultanés, réponses 401 concurrentes
-  et rejet d'un jeton de renouvellement révoqué.
-
-### Changed
-
-* [PostIt] Réorganisation de la page de compte en sections de profil,
-  sécurité et préférences ; actions de modification désactivées tant
-  que le profil n'est pas chargé ou qu'une opération est en cours.
-* [PostIt] Utilisation de `PlaceholderText` à la place de `Watermark`
-  dans les pages de profil et de configuration professionnelle.
-* [Yavsc.Api] `GET account/me` renvoie le DTO partagé attendu par
-  PostIt, avec l'état de sécurité, les connexions externes, les comptes
-  bancaires et les compteurs du compte.
-
-### Fixed
-
-* [Yavsc.Api] Enregistrement des services ASP.NET Identity et des stores
-  EF nécessaires à `UserManager<ApplicationUser>` : leur absence
-  empêchait l'activation du contrôleur de compte et provoquait une 500.
-* [Yavsc.Api] Chargement du profil : réponse adaptée lorsqu'un jeton
-  ne contient pas d'identifiant utilisateur ou que le compte n'existe
-  plus, au lieu d'une exception serveur.
-* [PostIt] Synchronisation de tous les chemins de renouvellement des
-  jetons, y compris après une 401 et au démarrage : les appels
-  concurrents ne réutilisent plus le même `refresh_token`. Un rejet
-  `invalid_grant` efface la session et invite à se reconnecter.
-* [PostIt] Effacement des informations obsolètes après un échec de
-  rechargement du profil et normalisation des valeurs de calendrier
-  lors de la sauvegarde.
-* [PostIt][Yavsc.Api] Préservation de l'identité du profil professionnel
-  lors de son enregistrement.
-* [Yavsc.Api] Les coordonnées bancaires ne sont plus modifiées à partir
-  d'un résumé agrégé : opérations dédiées avec contrôle de propriété
-  et validation de longueur des champs.
-
-### Known limitations
-
-* [PostIt] L'ajout d'un nouveau fournisseur OAuth et la gestion des
-  crédits ne sont pas encore disponibles dans l'interface native.
-
-## [1.0.8-rc22] - unstable
-
-### Fixed
-
-User experience login into PostIt
-
-## [1.0.8-rc21] - unstable
-
-### Fixed
-
-User experience editing the blog article.
-
-## [1.0.8-rc20] - unstable
-
-Chat SignalR fonctionnel de bout en bout (connexion, salons multiples,
-envoi/réception de messages), enregistreur audio et localisation dans
-PostIt, intégration Live.Avalonia démarrée, et reverse-proxy nginx
-apprêté pour WebSocket.
-
-### Added
-
-* [PostIt] Interface de chat : page `ChatPage` (connexion au hub,
-  saisie du nom de salon, liste des messages et des membres présents),
-  entrée depuis la page d'accueil.
-* [PostIt] Envoi de messages dans un salon joint : DTO `ChatMessage`
-  (Name/Room/Message) pour l'événement `ReceiveMessage`, saisie avec
-  envoi sur `Enter`, commande inactive tant qu'aucune salle n'est en
-  focus (le hub refuse l'envoi hors salon, `LabNoJoinNoSend`).
-* [PostIt] Modèle multi-salles côté client : `JoinedRooms`,
-  `SelectedRoom` (salle en focus), messages et utilisateurs indexés par
-  salle (`FocusedMessages`/`FocusedUsers`), ComboBox de choix de la
-  salle active ; un `Join` sur une salle déjà jointe ne fait que
-  changer le focus.
-* [PostIt] Enregistreur audio (`AudioRecorder`, interface
-  `IPCMProcessor`) et ressources de localisation
-  (`Resources.{resx,en-EN,pt-PT}`).
-* [PostIt][WIP] Début d'intégration Live.Avalonia (preview XAML à
-  chaud ; encore KO).
-* [contrib] Bloc `location /chathub` dans `template.vhost` : upgrade
-  WebSocket (`Upgrade`/`Connection`), `proxy_read_timeout 3600s` et
-  `proxy_buffering off` — sans quoi la connexion SignalR tombait au
-  premier silence ou l'upgrade échouait derrière nginx.
-
-### Changed
-
-* [PostIt] `StatusNotice` déplacé de `Models` vers `ViewModels` et
-  enrichi d'une commande d'action optionnelle (`CheckCommand` +
-  `CheckCommandLabel`, interface `IWithLabel`) : le bandeau de statut
-  propose désormais l'action contextuelle (Connecter / Déconnecter /
-  Reconnecter / Vérifier la connexion).
-* [PostIt] `ChatViewModel` suit le cycle de vie complet de la
-  connexion : handlers `Reconnecting` / `Reconnected` / `Closed` de
-  `WithAutomaticReconnect`, pour refléter l'état réel au lieu d'un
-  `IsConnected` optimiste.
-* [Yavsc.Api] `AddSignalR().AddJsonProtocol(IncludeFields = true)` :
-  `ChatRoomInfo` n'expose que des champs publics, que System.Text.Json
-  ne sérialise pas par défaut — le client recevait des objets vides
-  (`Name` null, `Users` vide) et la liste des salons joints n'était
-  jamais alimentée.
-* [Yavsc.Server] `IConnexionManager.OnConnected` prend le `userName`
-  en paramètre (résolu depuis les claims dans `ChatHub`) au lieu de le
-  relire depuis un dictionnaire jamais alimenté.
-* [PostIt.Android] `network_security_config.xml` déplacé sous
-  `Resources/xml/` (chemin canonique Android).
-
-### Fixed
-
-* [Yavsc.Server] `KeyNotFoundException` dans
-  `HubConnectionManager.OnConnected` à chaque connexion SignalR :
-  `ChatUserNames` (et `ChatCxIds`) n'étaient jamais alimentés — relique
-  d'un `SetUserName` disparu lors d'une refactorisation. L'exception
-  dans `OnConnectedAsync` faisait fermer la connexion par le hub, et
-  PostIt affichait « Déconnecté (The server closed the connection…) »
-  immédiatement après la connexion.
-* [PostIt] URL du hub SignalR : retrait du préfixe `/api/v1` de
-  `ApiUrl` avant d'apposer `Constants.ChatHubPath` (le hub est mappé à
-  la racine du service, pas sous le préfixe versionné).
-* [PostIt] La `StatusBar` de la page chat référençait `Grid.Row="4"`
-  sur une grille à 3 rangées (rangée hors limites, bandeau invisible).
-
-## [1.0.8-rc19] - unstable
-
-[PostIt] Blogs UX
-
-### Fixed
-
-La saisie du billet est maintenant plutôt possible,
-en petit écran.
-
-## [1.0.8-rc18] - unstable
-
-* [PostIt] Page "About" avec lines vers le dépôt et les issues Forgejo
-
-* Accès aux fichiers personnels PostIt rendu fonctionnel de bout en bout
-(arbre de stockage indexé par le login, pas par le `sub`), boutons
-d'action des listes réparés (binding `$parent`), revendication `name`
-enfin présente dans les access tokens (branchement du `ProfileService`),
-et négociation HTTP/3 côté client PostIt.
-
-
-### Added
-
-* [PostIt] Négociation HTTP/3 (QUIC) pour les appels API Yavsc :
-  `DefaultRequestVersion = 3.0`, `DefaultVersionPolicy =
-  RequestVersionOrLower` sur le `HttpClient` partagé de `YavscApiClient`,
-  avec repli h2/h1.1 où QUIC n'est pas disponible (WASM fetch, Android/
-  desktop sans libmsquic).
-* [Tests] `MyFilesPageHeadlessTests` : monte `MyFilesPage` via
-  `NavigationPage` + `Window.Show()` et vérifie que chaque bouton de
-  ligne (Télécharger / Supprimer) a sa `Command` liée, est armé
-  (`CanExecute`) et déclenche l'appel API au clic.
-* [Tests] `Remoting.PasswordToken_carries_name_claim_equal_to_login` :
-  mint un vrai JWT via le token endpoint IdentityServer (password grant,
-  `openid profile`) et asserte que l'access token porte `name`=login et
-  que `GetUserName()` résout vers ce login.
-* [Tests] `FileSystemApiTests.Get_fs_lists_files_stored_under_the_user_login` :
-  découple `sub` et login, téléverse sous le login, et asserte que
-  `GET /api/v1/fs` retourne le fichier (et que le répertoire nommé d'après
-  le `sub` n'existe pas).
-
-### Changed
-
-* [Yavsc.Org] Branchement du `ProfileService` custom
-  (`AddProfileService<ProfileService>()` après
-  `AddAspNetIdentity<ApplicationUser>()`). La classe était du code mort :
-  IdentityServer8 retombait sur son profile service par défaut, qui
-  n'émet que les claims listés dans les `UserClaims` des API resources.
-  `name` n'en faisait jamais partie, donc tout access token était sans
-  `name` et `GetUserName()` résolvait à `null` sur les hosts ressources
-  (Blogs/Api) — cause du 500 sur l'upload MyFiles et du
-  `User.Identity.Name` injoignable. Le service émet désormais
-  `name`=`user.UserName`, `email` et les rôles pour tout client dont
-  les `AllowedScopes` contiennent `profile`, indépendamment du caller.
-* [Yavsc.Server] `ServiceExtensions` : `NameClaimType =
-  JwtClaimTypes.Name`, `MapInboundClaims = false` (conserver les noms
-  courts de claims tels qu'émis).
-* [Yavsc.Blogs] `FileSystemHelpers.EnsureDestinationDirectory` utilise
-  `GetUserName()` (claim `name`) au lieu de `User.Identity.Name` pour
-  la racine de stockage par utilisateur.
-* [Tests] `WebServerFixture` : `AccessTokenType = 0` (Jwt dans IS8 ;
-  1 = Reference, l'inverse de Duende) ; `openid`+`profile` sur le client
-  de test ; réensemencement des identity resources openid/profile dans
-  `ReseedAuthTestData` (un `ResetAndMigrateDatabase` vide le store
-  in-memory partagé et les laissait absentes → `invalid_scope`).
-* [Tests] `TestTokenIssuer.Issue` gagne un paramètre `name` optionnel
-  (défaut = subject) pour refléter la forme production où
-  `sub` (GUID) ≠ `name` (login).
-* [Tests] `BillingServiceTests` : `[Collection("Yavsc Server")]` pour
-  sérialiser avec le build d'hôte qui mute les registres statiques
-  `BillingService`/`Config` (race parallèle pré-existante).
-
-### Fixed
-
-* [Yavsc.Blogs] La liste `GET /api/v1/fs` cherchait sous
-  `{Blog}/{sub-GUID}` (`User.GetUserId()`), alors que l'arbre de
-  stockage perso est indexé par le login partout ailleurs
-  (`EnsureDestinationDirectory` écrit sous `{Blog}/{name-claim}`,
-  le endpoint de téléchargement et les avatars utilisent
-  `user.UserName`). Une fois l'upload corrigé, les fichiers
-  atterrissaient sous `{Blog}/{login}` tandis que la liste cherchait
-  sous `{Blog}/{GUID}` — un arbre vide — d'où la page PostIt
-  « Mes fichiers » qui ne listait rien. `GetDir` résout désormais
-  l'utilisateur en base et liste sous `user.UserName`.
-  `UploadedFile.OwnerId` reste `sub`, donc `EnrichWithFileIds`
-  interpole toujours par `uid`.
-* [PostIt] Boutons d'action des lignes de liste grisés et inactifs au
-  clic (Télécharger / Supprimer / Joindre sur MyFiles ; download/detach
-  sur les listes de pièces jointes de `BillingQueryDetailsPage` et
-  `EstimateEditionPage`). Le binding `$parent[vm:XxxViewModel].Cmd`
-  cherchait un ancêtre CONTRÔLE de type `XxxViewModel` — un viewmodel,
-  pas un contrôle — donc résolvait à `null` et le `Button` restait
-  désactivé (grisé) et inerte au clic. Corrigé en
-  `$parent[ContentPage].((vm:XxxViewModel)DataContext).Cmd` (syntaxe
-  déjà en vigueur dans `CirclesPage` / `EstimateListPage`).
-* [PostIt] Les messages de la barre de statut (`StatusBar`) n'étaient
-  pas sélectionnables/copiables : le texte était un `TextBlock` (non
-  sélectionnable dans Avalonia). Remplacé par `SelectableTextBlock`.
-* [Yavsc.Blogs] La suppression d'un fichier (`DELETE api/v1/fs/{name}`)
-  renvoyait un 40x alors que le fichier était bien supprimé du disque.
-  `DeleteUserDirOrFile` (et `DeleteUserFile`) lisaient
-  `FileInfo.Length` **après** `fi.Delete()` ; or `FileInfo.Length`
-  lève `FileNotFoundException` une fois le fichier disparu — le `catch`
-  du contrôleur transformait cette exception en 400, d'où le message
-  perçu « le fichier n'existe pas sur le serveur » tandis que la
-  suppression avait réussi. La taille est désormais capturée avant la
-  suppression.
-* PostIt default settings
-
-## [1.0.8-rc17] - unstable
-
-Fichiers utilisateur et pièces jointes sur les devis/demandes (PostIt +
-API), système de génération `contrib` (vhosts nginx HTTP/3 edge +
-appsettings jq + QUIC logiciel Kestrel), et correction du bug de
-production où `IsPublished` disparaissait du payload de liste du blog API.
-
-### Added
-
-* [PostIt] Espace de stockage personnel (« MyFiles ») : page de gestion
-  des fichiers de l'utilisateur, entrée depuis la page d'accueil.
-* [PostIt] Pièces jointes aux devis et aux demandes : attachement depuis
-  le détail de demande et la page d'édition de devis.
-* [Yavsc.Api] Endpoints d'attachement de fichiers sur les devis
-  (`EstimateApiController`) et les demandes front-office
-  (`FrontOfficeApiController`).
-* [Yavsc.Api.Client] `UserFilesApiClient` + DTOs associés ; méthodes
-  d'attachement sur `EstimateApiClient` et `FrontOfficeApiClient`.
-* [Yavsc.Server] Modèles `EstimateAttachedFile`, `QueryAttachedFile`,
-  `BlogAttachedFile`, `AttachFileRequest` ; migration EF Core
-  `UserFileAttachments`.
-* [contrib] Système de génération `Makefile` : vhosts nginx HTTP/3 edge
-  (`template.vhost`, `QUIC_OPTS`), appsettings générés via jq
-  (`template.appsettings-{org,api,blogs}.json`, échappement JSON-safe des
-  secrets), QUIC logiciel Kestrel (`Http1AndHttp2AndHttp3`), et
-  `README.nginx.md`.
-* [Tests] Projet `Yavsc.Server.Tests` : tests du service
-  `BlogSpotService.Details` + `ServerServicesFixture` (SQLite `:memory:`
-  par défaut, Npgsql opt-in via `YAVSC_SERVER_TEST_DB_PROVIDER`).
-* [Tests] `IBlogPostWireShapeTests` (forme du wire blog),
-  `EstimateAttachmentsApiTests`, `FrontOfficeQueryAttachmentsApiTests`,
-  `FileSystemApiTests` (pièces jointes et stockage perso).
-* [CI] Intégration Gitleaks / analyse de secrets (`.pre-commit-config.yaml`).
-
-### Changed
-
-* [contrib] `QUIC_OPTS` (`reuseport`) désormais activé uniquement en
-  production sur le vhost Org. La preprod et la prod partageant la même
-  IP, `reuseport` — légal une seule fois par `addr:port` (443/udp) —
-  serait sinon en conflit entre preprod-Org et prod-Org et ferait refuser
-  la config par nginx.
-* [Yavsc.Api.Test] `ApiWebServerFixture` : la connexion admin PostgreSQL
-  provient de la variable d'environnement
-  `YAVSC_API_TEST_NPGSQL_ADMIN_CONNECTION` ; plus de mot de passe en
-  source.
-
-### Fixed
-
-* [Yavsc.Blogs] Bug de production : `IsPublished` était absent du payload
-  de la liste du blog API. Le endpoint `GetBlogspot` retourne
-  `IEnumerable<IBlogPost>` sérialisé par System.Text.Json d'après le type
-  déclaré (l'interface), qui omet les propriétés du type concret —
-  `IsPublished` vivait sur `BlogPost` / `BlogPostDto` mais pas sur
-  `IBlogPost`. PostIt lisait donc `IsPublished == false` pour tout billet,
-  y compris publiés (https://yavsc.pschneider.fr/BlogSpot/Details/13).
-  Corrigé en déclarant `IsPublished` sur `IBlogPost`.
-* [Yavsc.Org] Accès au Swagger UI : les actions MVC scaffoldées de
-  `CommentsController` (Index/Details/…) atterrissaient sur la même route
-  `POST api/v1/blogcomments` que l'action d'API `Post`, provoquant une
-  `SwaggerGeneratorException` (conflit method/path) au chargement de
-  `/swagger`. Corrigé par `[ApiExplorerSettings(IgnoreApi = true)]` sur
-  les actions scaffoldées.
-
-## [1.0.8-rc16] - unstable
-
-Flux de signature et de génération de devis : un devis peut désormais être
-signé par les deux parties (fournisseur et client) puis téléchargé en PDF
-ou TeX depuis PostIt, avec les signatures dessinées en vecteur.
-
-### Added
-
-* [PostIt] Pad de signature sur la page de validation d'un devis : on valide
-  ou on refuse en joignant une signature (côté fournisseur ou client), capturée
-  au format filaire PostIt (strokes) et envoyée sur l'acceptation.
-* [Yavsc.Api] Finalisation de `POST /api/v1/front/query/accept` et `.../reject` :
-  autorisation selon le rôle (fournisseur/client/admin), signature optionnelle
-  persistée sur l'estimate avec horodatage `ProviderValidationDate` /
-  `ClientValidationDate` selon le côté signataire.
-* [Yavsc.Api] `QueryStatus.Accepted` éclaté en `ProAccepted` / `ClientAccepted`
-  pour distinguer l'acceptation de chaque partie.
-* [Yavsc.Api] Endpoints de devis `GET /api/v1/front/query/{id}/estimate.tex` et
-  `estimate.pdf` (clé par id de query). Le flux de génération TeX/PDF est
-  rapatrié de Yavsc.Org vers Yavsc.Api (`TeXHelpers`, `PdfGenerationViewModel`,
-  `BillViewComponent`, modèles Bill/Estimate, `_ViewImports` ; `Program.cs`
-  câble `AddControllersWithViews` + `SiteSettings`).
-* [Yavsc.Api] Signatures du devis dessinées en TikZ vectoriel
-  (`TeXHelpers.SignatureToTikz`) en bas du document, fournisseur et client
-  côte à côte dans deux minipages ; plus de dépendance à un PNG de signature.
-* [Yavsc.Api.Client] `DownloadAsync` sur le client + `GetEstimateTexAsync` /
-  `GetEstimatePdfAsync` ; boutons « Télécharger PDF » / « Télécharger TeX »
-  dans PostIt sur la page de validation du devis et le détail de commande,
-  avec un helper `StorageProvider` d'enregistrement de fichier.
-* [PostIt] La liste des devis se rafraîchit au retour de navigation (pop-back),
-  de sorte qu'un devis validé quitte immédiatement la liste du signataire.
-* [PostIt] Renommage des titres de liste : « Devis en attente de signature
-  fournisseur » / « Devis en attente de signature client ».
-* [Yavsc.Abstract] `SignatureType` déplacé dans `Yavsc.Abstract.Billing`.
-* [CLI] Option `-c configuration-file.json` au lancement.
-* [Tests] `EstimatePdfGenerationTests` : tests unitaires du pipeline
-  signature → TikZ → PDF (devis signé des deux côtés), assertant que le PDF
-  existe au chemin de sortie attendu et que seul le PDF persiste (aux/log
-  nettoyés) ; skip propre si `lualatex` est absent.
-* [README] Dépendances système au runtime pour la génération PDF :
-  `texlive-binaries` (lualatex), `texlive-luatex` (luaotfload),
-  `texlive-pictures` (tikz), `texlive-fonts-extra` (bera).
-
-### Changed
-
-* [Yavsc.Api] `GetOngoingEstimatesAsProvider` filtre désormais sur
-  `ProviderValidationDate` : un devis signé par le fournisseur quitte sa liste
-  « en attente ».
-* [Yavsc.Api] La génération PDF compile via le `lualatex` système, le TeX fourni
-  sur l'entrée standard (`/dev/stdin`), le PDF écrit directement dans le
-  répertoire des factures (`Site.Bills`), les artefacts `.aux`/`.log` nettoyés
-  afin que seul le `.pdf` persiste.
-
-### Fixed
-
-* [Yavsc.Api] `Emergency stop` à la génération PDF : `lualatex` sans argument
-  fichier lit stdin en mode terminal et s'arrête après la première ligne d'un
-  document multi-lignes. Corrigé en passant `/dev/stdin` comme nom de fichier
-  d'entrée — stdin est alors traité comme un fichier régulier et le document
-  multi-lignes compile. C'était la cause racine de l'échec en production, pas
-  `bera` ni `luaotfload` (problèmes réels mais séparés, comblés côté paquets).
-* [Yavsc.Api] `I can't write on file 'estimate-1.log'` : le chemin relatif
-  `Site.Bills` (`"bills"`) était imbriqué quand il servait à la fois de
-  `-output-directory` et de répertoire de travail ; résolu en chemin absolu.
-* [Yavsc.Api] NRE dans `RenderViewToString` (RouteData / `ViewData.Model`
-  nuls) : reconstruit sur le `ControllerContext` du contrôleur ; `IViewEngine`
-  résolu via `IRazorViewEngine` (.NET 10 n'enregistre pas de `IViewEngine`
-  unique).
-* [Yavsc.Api] `Layout = "null"` (chaîne) dans les modèles TeX cherchait
-  `null.cshtml` ; corrigé en `Layout = null` (null C#).
-* [Yavsc.Api] `texi2pdf` (outil Texinfo, inadapté au LaTeX) remplacé par
-  `lualatex`.
-* [Yavsc.Api] Les diagnostics lualatex étaient perdus (écrits dans le `.log`
-  qu'on supprimait) ; stdout/stderr sont désormais capturés dans le message
-  d'erreur, et le `.log` est conservé en cas d'échec.
-
 ## [1.0.8-rc15] - unstable
 
 ### Added
@@ -828,10 +369,6 @@ the ACL now comes along with the article,
   the same user-visible switch without a schema change.
 
 [Unreleased]: https://forgejo.pschneider.fr/notazof/yavsc/compare/HEAD
-[1.0.8-rc16]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.8-rc15...1.0.8-rc16
-[1.0.8-rc17]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.8-rc16...1.0.8-rc17
-[1.0.8-rc18]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.8-rc17...1.0.8-rc18
-[1.0.8-rc15]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.8-rc14...1.0.8-rc15
 [1.0.8-rc1]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.7...1.0.8-rc1
 [1.0.7]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.6...1.0.7
 [1.0.6]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.5...1.0.6

Directory.Packages.props

@@ -4,71 +4,53 @@
     <IdentityServer8Version>8.1.0-pazofrc007</IdentityServer8Version>
   </PropertyGroup>
   <ItemGroup>
-    <PackageVersion Include="DotMarkdown" Version="0.3.0" />
-    <PackageVersion Include="Markdig" Version="1.3.2" />
-    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.12" />
+    <PackageVersion Include="System.Security.Cryptography.Pkcs" Version="10.0.9" />
+
     <PackageVersion Include="HigginsSoft.IdentityServer8" Version="$(IdentityServer8Version)" />
     <PackageVersion Include="HigginsSoft.IdentityServer8.AspNetIdentity" Version="$(IdentityServer8Version)" />
     <PackageVersion Include="HigginsSoft.IdentityServer8.EntityFramework" Version="$(IdentityServer8Version)" />
     <PackageVersion Include="HigginsSoft.IdentityServer8.EntityFramework.Storage" Version="$(IdentityServer8Version)" />
     <PackageVersion Include="HigginsSoft.IdentityServer8.Security" Version="$(IdentityServer8Version)" />
     <PackageVersion Include="HigginsSoft.IdentityServer8.Storage" Version="$(IdentityServer8Version)" />
-    <PackageVersion Include="BouncyCastle.Cryptography" Version="2.7.0" />
+
+    <PackageVersion Include="AsciiDocSharp" Version="0.1.0" />
+    <PackageVersion Include="AsciiDocSharp.Converters.Html" Version="0.1.0" />
+
+    <PackageVersion Include="BouncyCastle.Cryptography" Version="2.6.2" />
+
     <PackageVersion Include="Google.Apis.Compute.v1" Version="1.74.0.4138" />
+
     <PackageVersion Include="Microsoft.AspNetCore.Antiforgery" Version="2.3.11" />
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Google" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.SignalR" Version="1.2.13" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Hosting" Version="2.3.13" />
-    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Identity.UI" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Razor" Version="2.3.13" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.10.1" />
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.Google" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Diagnostics.EntityFrameworkCore" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Mvc.NewtonsoftJson" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.SignalR" Version="1.2.11" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Tools" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Hosting" Version="2.3.11" />
+    <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Identity.UI" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.AspNetCore.Razor" Version="2.3.0" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.InMemory" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.EntityFrameworkCore.Sqlite" Version="10.0.11" />
+    <PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
     <PackageVersion Include="Microsoft.VisualStudio.Web.CodeGeneration.Design" Version="10.0.2" />
-    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.23.0" />
-    <PackageVersion Include="Microsoft.Extensions.Caching.Memory" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.Extensions.Options" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.Extensions.Options.ConfigurationExtensions" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.AspNetCore.Razor.Language" Version="6.0.36" />
-    <PackageVersion Include="Microsoft.Extensions.CommandLineUtils" Version="1.1.1" />
-    <PackageVersion Include="Microsoft.Extensions.Configuration" Version="10.0.12" />
-    <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.12" />
-    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.3" />
+
+    <PackageVersion Include="Swashbuckle.AspNetCore" Version="10.2.2" />
+
     <PackageVersion Include="coverlet.collector" Version="10.0.1" />
+
     <PackageVersion Include="IdentityModel.OidcClient" Version="6.0.0" />
-    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.23.0" />
+
+    <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.IdentityModel.Tokens" Version="8.2.1" />
+    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.2.1" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
     <PackageVersion Include="xunit.v3" Version="3.2.2" />
     <PackageVersion Include="xunit.v3.common" Version="3.2.2" />
     <PackageVersion Include="xunit.v3.extensibility.core" Version="3.2.2" />
     <PackageVersion Include="YamlDotNet" Version="18.1.0" />
-
-
-    <PackageVersion Include="Anthropic.SDK" Version="5.10.0" />
-    <PackageVersion Include="Google.Apis.Calendar.v3" Version="1.75.0.4206" />
-    <PackageVersion Include="Magick.NET-Q8-AnyCPU" Version="14.17.1" />
-    <PackageVersion Include="MailKit" Version="4.18.0" />
-    <PackageVersion Include="Microsoft.AspNetCore.Http.Features" Version="5.0.17" />
-    <PackageVersion Include="Microsoft.AspNetCore.StaticFiles" Version="2.3.13" />
-    <PackageVersion Include="Microsoft.EntityFrameworkCore.SqlServer" Version="10.0.12" />
-
-
-    <PackageVersion Include="Microsoft.Testing.Platform.MSBuild" Version="2.4.1" />
-
-    <PackageVersion Include="MimeKit" Version="4.18.1" />
-    <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.3" />
-    <PackageVersion Include="PayPalMerchantSDK" Version="2.16.250" />
-    <PackageVersion Include="pazof.rules" Version="1.1.3" />
-    <PackageVersion Include="RazorEngine.NetCore" Version="3.1.1" />
-
-
-
   </ItemGroup>
 </Project>

Dockerfile

@@ -24,24 +24,41 @@
 # =====================================================================
 
 # syntax=docker/dockerfile:1.7
-ARG BUILD_ENV_TAG=debian13-dotnet10-android36-jdk21-v2
+ARG BUILD_ENV_TAG=debian12-dotnet10-android36-v1
 FROM pazof/yavsc-build-env:${BUILD_ENV_TAG} AS build-env
 WORKDIR /src
 
+# (1) Manifest + fichiers de projet pour le cache de restore
+COPY *.sln ./
+COPY Directory.*.props ./
+COPY src/Yavsc.Org/*.csproj ./src/Yavsc.Org/
+COPY src/Yavsc.Abstract/*.csproj ./src/Yavsc.Abstract/
+COPY src/Yavsc.Server/*.csproj ./src/Yavsc.Server/
+COPY src/Yavsc.Api/*.csproj ./src/Yavsc.Api/
+COPY src/Yavsc.Blogs/*.csproj ./src/Yavsc.Blogs/
+COPY src/cli/*.csproj ./src/cli/
+COPY src/Yavsc.Org.Tests/*.csproj ./src/Yavsc.Org.Tests/
+COPY src/PostIt/PostIt/*.csproj ./src/PostIt/PostIt/
+COPY src/PostIt/PostIt.Android/*.csproj ./src/PostIt/PostIt.Android/
+COPY src/PostIt/PostIt.Browser/*.csproj ./src/PostIt/PostIt.Browser/
+COPY src/PostIt/PostIt.Desktop/*.csproj ./src/PostIt/PostIt.Desktop/
+
+# (2) Tout le code source
 COPY . .
 
+# (4) Restore
 RUN dotnet restore
 
-# Build des trois services web principaux
+# (5) Build des trois services web principaux
 RUN dotnet build src/Yavsc.Org/Yavsc.Org.csproj -c Release --no-restore -clp:ErrorsOnly
 RUN dotnet build src/Yavsc.Api/Yavsc.Api.csproj -c Release --no-restore -clp:ErrorsOnly
 RUN dotnet build src/Yavsc.Blogs/Yavsc.Blogs.csproj -c Release --no-restore -clp:ErrorsOnly
 
-# Build APK Android (utilisé par le workflow docker-publish-android).
+# (6) Build APK Android (utilisé par le workflow docker-publish-android).
 ARG ANDROID_TARGET_RID=android-arm64
 RUN dotnet build src/PostIt/PostIt.Android/PostIt.Android.csproj -c Release --no-restore -clp:ErrorsOnly -r ${ANDROID_TARGET_RID}
 
-# Publish des trois services web (les artifacts sont consommés par
+# (7) Publish des trois services web (les artifacts sont consommés par
 # les stages publish-org / publish-api / publish-blogs ci-dessous).
 RUN mkdir -p /app/publish
 RUN dotnet publish src/Yavsc.Org/Yavsc.Org.csproj -c Release --no-build -o /app/publish/Yavsc.Org

Dockerfile.backend

@@ -1,12 +1,36 @@
 # Utilisation de l'image globale pour le build et l'exécution
-FROM pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v4 AS build-env
+FROM pazof/yavsc-build-env:debian12-dotnet10-android36-v1 AS build-env
 WORKDIR /src
 
+
 # 1. Copie de la solution
+COPY *.sln ./
+COPY Directory.*.props ./
+
+# 2. Copie de l'intégralité des fichiers de projets (.csproj) pour la restauration
+COPY src/Yavsc.Org/*.csproj ./src/Yavsc.Org/
+COPY src/Yavsc.Abstract/*.csproj ./src/Yavsc.Abstract/
+COPY src/Yavsc.Server/*.csproj ./src/Yavsc.Server/
+COPY src/Yavsc.Api/*.csproj ./src/Yavsc.Api/
+COPY src/Yavsc.Blogs/*.csproj ./src/Yavsc.Blogs/
+COPY src/cli/*.csproj ./src/cli/
+COPY src/Yavsc.Org.Tests/*.csproj ./src/Yavsc.Org.Tests/
+
+# Projets associés à PostIt
+COPY src/PostIt/PostIt/*.csproj ./src/PostIt/PostIt/
+COPY src/PostIt/PostIt.Android/*.csproj ./src/PostIt/PostIt.Android/
+COPY src/PostIt/PostIt.Browser/*.csproj ./src/PostIt/PostIt.Browser/
+COPY src/PostIt/PostIt.Desktop/*.csproj ./src/PostIt/PostIt.Desktop/
+
+# 4. Copie de l'intégralité du code source
 COPY . .
-RUN dotnet workload restore
+
 # 4. Restauration des dépendances pour tous les projets
 RUN dotnet restore
+
+# 5. Copie de la totalité du code source (filtrée par votre .dockerignore)
+COPY . .
+
 # 6. Compilation du serveur Web principal
 RUN dotnet build src/Yavsc.Org/Yavsc.Org.csproj -c Release --no-restore -clp:ErrorsOnly
 

Makefile

@@ -5,43 +5,19 @@ DESTDIR=/tmp/yavsc
 APP_PATH=srv/www/yavsc
 APP_FULL_PATH=$(DESTDIR)/$(APP_PATH)
 
+include .env
+
 all:
 	dotnet build --nologo
 
 clean:
 	dotnet clean -c $(CONFIG)
 
-brutal_clean:
-	@find -name "obj" -exec rm -rf {} \;
-	@find -name "bin" -exec rm -rf {} \;
-
 src/Yavsc/bin/output/wwwroot:
 	dotnet --project src/Yavsc.Org/Yavsc.Org.csproj publish
 
 test:
-	ASPNETCORE_ENVIRONMENT=Development dotnet test --report-xunit \
-    --report-xunit-html \
-		--results-directory "test-reports"
-
-test-postit:
-	ASPNETCORE_ENVIRONMENT=Development dotnet test \
-	  --report-xunit \
-    --report-xunit-html \
-		--results-directory "test-reports" \
-    --report-xunit-html-filename "postit-test-results.html" \
-	  --project src/PostIt/PostIt.Tests/PostIt.Tests.csproj
-
-backend-tests: Blogs-backend-test Org-backend-test Api-backend-test
-Api-backend-test:
-Blogs-backend-test:
-Org-backend-test:
-%-backend-test:
-	ASPNETCORE_ENVIRONMENT=Development dotnet test \
-	  --report-xunit \
-    --report-xunit-html \
-		--results-directory "test-reports" \
-    --report-xunit-html-filename "$*-backend-test-results.html" \
-	  --project src/test/Yavsc.$*.Tests/Yavsc.$*.Tests.csproj
+	ASPNETCORE_ENVIRONMENT=Development dotnet test
 
 watch:
 	dotnet watch -p:Configuration=$(CONFIG) --project src/Yavsc/Yavsc.csproj

README.md

@@ -61,40 +61,9 @@ make test
 
 ### les services et l'API
 
-#### Dépendances système au runtime
-
-La génération des devis et factures en PDF (`/api/v1/front/query/{id}/estimate.pdf`,
-`BillingController` → `BillViewComponent`) compile un source LaTeX via la commande
-système `lualatex` : le TeX est fourni sur l'entrée standard et le PDF est écrit
-directement dans le répertoire des factures (`Site.Bills`). `lualatex` doit donc
-être installé et opérationnel sur l'hôte qui exécute l'API — typiquement le service
-systemd `yavscApi`.
-
-Sous Debian/Ubuntu :
-
-```bash
-sudo apt install texlive-binaries texlive-luatex texlive-pictures texlive-fonts-extra
-```
-
-- `texlive-binaries` fournit l'exécutable `lualatex` (collection basic).
-- `texlive-luatex` fournit les paquets de support chargés au démarrage de lualatex,
-  notamment `luaotfload`. Sans lui, lualatex démarre mais s'arrête sur
-  `module 'luaotfload-main' not found … Emergency stop` et ne produit aucun PDF.
-  (Sur les Debian récents, `luaotfload` a migré de `texlive-latex-extra` vers
-  `texlive-luatex` — avoir `texlive-latex-extra` seul ne suffit plus.)
-- `texlive-pictures` fournit `tikz`/`pgf`, utilisé pour dessiner les signatures
-  du client et du fournisseur en bas du devis (vecteur, pas de PNG).
-- `texlive-fonts-extra` fournit la fonte `bera` chargée par le modèle de devis.
-  Sans elle, lualatex s'arrête sur `! LaTeX Error: File 'bera.sty' not found`
-  (`Emergency stop`, aucun PDF).
-
-Sur un hôte sans `lualatex`, les endpoints PDF renvoient une erreur 500 « PDF
-generation failed » ; l'endpoint TeX (`estimate.tex`) reste utilisable et permet
-de compiler le document hors-ligne.
-
 ### La Prod
 
-`cd srv/Yavsc/contrib` : `make reinstall CONFIGURATION=Release APP_INSTALL_ENV=production`.
+`cd srv/Yavsc` : `make pushInProd CONFIGURATION=Release`.
 
 puis, pour une première installation
 `make install_service`.
@@ -232,12 +201,6 @@ L'impact de l'usage d'un nouveau nom d’environnement d'execution, à l'heure d
   * ~/Views/Home/Index.cshtml
   * ~/Views/Home/About.cshtml
 
-# 👥 Crédits & Co-auteurs
-
-Ce projet a été développé de manière hybride :
-- **Conception, architecture et revue de code :** Paul Schneider
-- **Assistance au code et optimisation :** IA générative (Gemini, Google, Claude (Anthropic), https://qoder.com/ (ex-Windsurf))
-
 # Remerciements
 
 Photo de <a href="https://unsplash.com/fr/@dewang?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText">Dewang Gupta</a>sur <a href="https://unsplash.com/fr/photos/homme-debout-pres-dun-arbre-Mu3T3DmvQQw?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText">Unsplash</a>

contrib/Makefile

@@ -1,32 +1,23 @@
-DESTDIR=
-DOTNET_FRAMEWORK=net10.0
 APP_PROJECT_NAMES=Org Blogs Api
 SLNDIR=..
-APP_INSTALL_ENV=preprod
-APP_INSTALL_PREFIX=preprod-
 
-include .$(APP_INSTALL_ENV).env
+include $(SLNDIR)/.env
+include .env
 
-reinstall: copy-binaries
-	@for project in $(APP_PROJECT_NAMES); do \
-		echo "🚀 Starting $(APP_INSTALL_PREFIX)yavsc$${project}" ; \
-		sudo systemctl start $(APP_INSTALL_PREFIX)yavsc$${project} ; done
-	@echo "💯 backend started"
+generated/:
+	@mkdir -p $@
 
-reinstall-prod:
-	make reinstall APP_INSTALL_PREFIX= APP_INSTALL_ENV=production
+generated/yavscOrg.service:
+generated/yavscBlogs.service:
+generated/yavscApi.service:
 
-generated/$(APP_INSTALL_PREFIX)yavscOrg.service:
-generated/$(APP_INSTALL_PREFIX)yavscBlogs.service:
-generated/$(APP_INSTALL_PREFIX)yavscApi.service:
-
-generated/$(APP_INSTALL_PREFIX)yavsc%.service: generated/ template.service $(SLNDIR)/.env
+generated/yavsc%.service: generated/ template.service $(SLNDIR)/.env
 	@cat template.service | APP_NAME="$*" \
 	DESTDIR="$(DESTDIR)" \
 	HTTP_HOST="$(HTTP_HOST)" \
-	HTTP_PORT="$($*_PORT)" \
-	APPDIR="$(APPDIR)" \
-	APP_SYSLOG_ID="$(APP_INSTALL_PREFIX)yavsc$*" \
+	HTTP_PORT="$*_$(HTTP_PORT)" \
+	BASEAPPDIR="$(BASEAPPDIR)" \
+	APP_SYSLOG_ID="yavsc$*" \
 	POSTGRES_HOST="$(POSTGRES_HOST)" \
 	POSTGRES_PORT="$(POSTGRES_PORT)" \
 	POSTGRES_DB="$(POSTGRES_DB)" \
@@ -43,83 +34,11 @@ generated/$(APP_INSTALL_PREFIX)yavsc%.service: generated/ template.service $(SLN
 	envsubst > $@
 	@echo Created service file: $@
 
-generate-service-units: generated/$(APP_INSTALL_PREFIX)yavscOrg.service generated/$(APP_INSTALL_PREFIX)yavscBlogs.service generated/$(APP_INSTALL_PREFIX)yavscApi.service
 
-# --- Vhosts nginx (générés par envsubst, à l'image des unités systemd) ---
-#   make generate-nginx                                      -> generated/nginx/preprod-yavsc{Org,Blogs,Api}
-#   make generate-nginx APP_INSTALL_ENV=production APP_INSTALL_PREFIX= -> prod (yavsc/api/blogs.pschneider.fr)
-#
-# HTTP/3 (QUIC) termine au edge nginx (plan contrib/quic.md). Requiert nginx
-# avec http_v3_module + UDP 443 ouvert. reuseport sur Org uniquement
-# (QUIC_OPTS). Les vhosts générés vont dans generated/nginx/ (gitignoré).
-NGINX_TEMPLATE := template.vhost
-NGINX_OUT_DIR  := generated/nginx
-NGINX_HOSTS    := Org Blogs Api
-DOMAIN_ROOT    ?= pschneider.fr
-# Schéma backend Kestrel : https en prod (Kestrel écoute HTTPS, cert Let's
-# Encrypt), http en preprod (Kestrel écoute HTTP simple, cf. .preprod.env).
-BACKEND_SCHEME ?= $(if $(filter production,$(APP_INSTALL_ENV)),https,http)
-# sous-domaine par hôte : Org -> yavsc, Api -> api, Blogs -> blogs
-nginx_subdomain = $(if $(filter Org,$1),yavsc,$(if $(filter Api,$1),api,$(if $(filter Blogs,$1),blogs,$1)))
-# domaine complet : <prefix><subdomain>.<DOMAIN_ROOT>
-#   prod    Org -> yavsc.pschneider.fr
-#   preprod Org -> preprod-yavsc.pschneider.fr
-nginx_domain = $(APP_INSTALL_PREFIX)$(call nginx_subdomain,$1).$(DOMAIN_ROOT)
-
-# QUIC_OPTS : "reuseport" n'est légal qu'une seule fois par addr:port
-# (443/udp). preprod et prod partagent aujourd'hui la même IP, donc on ne
-# l'active qu'en production, sur Org uniquement. En preprod, QUIC_OPTS est
-# vide sur tous les vhosts (sinon nginx refuse la config : duplicate
-# reuseport sur le même socket 443/udp entre preprod-Org et prod-Org).
-$(NGINX_OUT_DIR)/$(APP_INSTALL_PREFIX)yavsc%: $(NGINX_OUT_DIR) $(NGINX_TEMPLATE) .$(APP_INSTALL_ENV).env
-	@cat $(NGINX_TEMPLATE) \
-	  | DOMAIN="$(call nginx_domain,$*)" \
-	    BACKEND_SCHEME="$(BACKEND_SCHEME)" \
-	    HTTP_HOST="$(HTTP_HOST)" \
-	    BACKEND_PORT="$($*_PORT)" \
-	    QUIC_OPTS="$(if $(filter production,$(APP_INSTALL_ENV)),$(if $(filter Org,$*), reuseport,),)" \
-	  envsubst '$$DOMAIN $$BACKEND_SCHEME $$HTTP_HOST $$BACKEND_PORT $$QUIC_OPTS' > $@
-	@echo Created nginx vhost: $@
-
-generate-nginx: $(addprefix $(NGINX_OUT_DIR)/$(APP_INSTALL_PREFIX)yavsc,$(NGINX_HOSTS))
-
-generate-nginx-prod:
-	make generate-nginx APP_INSTALL_ENV=production APP_INSTALL_PREFIX=
-
-$(NGINX_OUT_DIR):
-	@mkdir -p $@
-
-# --- appsettings (générés depuis template.appsettings-*.json) ---
-#   make generate-appsettings -> generated/appsettings/appsettings-{org,api,blogs}.json
-#
-# Substitue $DOMAIN (racine du domaine, cf. DOMAIN_ROOT) dans toutes les
-# chaînes, et $SMTP_PASSWORD (secret du .env) dans Smtp.Password.
-# On utilise jq (et non envsubst) car envsubst n'échappe pas le JSON : un
-# secret contenant \ ou " casserait le JSON (le mot de passe SMTP actuel
-# contient un \). jq lit le secret depuis l'environnement (export) ->
-# échappement JSON correct, aucun shell-quoting ni exposition en ligne de cmd.
-# Les templates actuels sont issus de la preprod (préfixe preprod-, ports
-# 88-93) ; pour la prod il faudra un template prod (ports 82-87, sans préfixe).
-export ASPNETCORE_Smtp__Password
-APPSETTINGS_OUT_DIR := generated/appsettings
-APPSETTINGS_HOSTS   := org api blogs
-
-$(APPSETTINGS_OUT_DIR)/appsettings-%.json: $(APPSETTINGS_OUT_DIR) template.appsettings-%.json .$(APP_INSTALL_ENV).env
-	@jq --arg domain "$(DOMAIN_ROOT)" \
-	    'walk(if type=="string" then gsub("\\$$DOMAIN"; $$domain) else . end) | if has("Smtp") then .Smtp.Password = env["ASPNETCORE_Smtp__Password"] else . end' \
-	    template.appsettings-$*.json > $@
-	@echo Created appsettings: $@
-
-generate-appsettings: $(addprefix $(APPSETTINGS_OUT_DIR)/appsettings-,$(addsuffix .json,$(APPSETTINGS_HOSTS)))
-
-$(APPSETTINGS_OUT_DIR):
-	@mkdir -p $@
-
-install-service-%: /etc/systemd/system/$(APP_INSTALL_PREFIX)yavsc%.service
-	sudo systemctl daemon-reload
-	sudo systemctl enable $(APP_INSTALL_PREFIX)yavsc$*
-
-install-services: install-service-Org install-service-Blogs install-service-Api
+copy-services: copy-service-Org copy-service-Blogs copy-service-Api
+copy-service-Org: /etc/systemd/system/yavscOrg.service
+copy-service-Blogs: /etc/systemd/system/yavscBlogs.service
+copy-service-Api: /etc/systemd/system/yavscApi.service
 
 copy-binaries: build_publish_Org build_publish_Blogs build_publish_Api stop-services
 	@for project in $(APP_PROJECT_NAMES); \
@@ -133,36 +52,39 @@ copy-binaries: build_publish_Org build_publish_Blogs build_publish_Api stop-serv
 		rm -f $${BINDIR}/appsettings-$${LCAPI}.json ; \
 		sync ; \
 		ls $${BINDIR}/appsettings* 2>&1 ; \
-		sudo cp -a $${BINDIR}/* $(DESTDIR)$(APPDIR) ; \
+		sudo cp -a $${BINDIR}/* $(BASEAPPDIR) ; \
 	done
-	@sudo chown -R $(USER_AND_GROUP) $(DESTDIR)$(APPDIR)
-	@sync
+	@sudo chown -R $(USER_AND_GROUP) $(BASEAPPDIR)
 
-$(DESTDIR)/etc/systemd/system/$(APP_INSTALL_PREFIX)yavsc%.service:  generated/$(APP_INSTALL_PREFIX)yavsc%.service
+/etc/systemd/system/yavsc%.service: generated/yavsc%.service
 	sudo cp $^ $@
 	sudo chown root:root $@
 
 build_publish_%: clean_publish_dir_%
 	@ASPNETCORE_ENV=$(CONFIGURATION) dotnet publish $(SLNDIR)/src/Yavsc.$*/Yavsc.$*.csproj
 
+build_publish: build_publish_Org build_publish_Blogs build_publish_Api
+
 clean_publish_dir_%:
 	@rm -rf $(SLNDIR)/src/Yavsc.$*/bin/$(CONFIGURATION)/$(DOTNET_FRAMEWORK)/publish
 
-install: copy-binaries copy-services
+install: build_publish copy-binaries copy-services
 	@sudo systemctl daemon-reload
 	@for project in $(APP_PROJECT_NAMES); \
 	do \
-	  echo "🖒 enable $(APP_INSTALL_PREFIX)yavsc$${project}" ; \
-		sudo systemctl enable $(APP_INSTALL_PREFIX)yavsc$${project} ; \
-	  echo "🚀 start $(APP_INSTALL_PREFIX)yavsc$${project}" ; \
-		sudo systemctl start $(APP_INSTALL_PREFIX)yavsc$${project} ; \
+		sudo systemctl enable yavsc$${project} ; \
+		sudo systemctl start yavsc$${project} ; \
 	done
 
+reinstall: copy-binaries
+	@sync
+	@for project in $(APP_PROJECT_NAMES); do \
+		sudo systemctl start yavsc$${project} ; done
+
 stop-services:
 	@for project in $(APP_PROJECT_NAMES); \
 	do \
-	  echo "🔥 Stopping $(APP_INSTALL_PREFIX)yavsc$${project}" ; \
-		sudo systemctl stop $(APP_INSTALL_PREFIX)yavsc$${project} ; \
+		sudo systemctl stop yavsc$${project} ; \
 	done
 
 $(SLNDIR)/src/Yavsc.Org/bin/$(CONFIGURATION)/$(DOTNET_FRAMEWORK)/publish: build_publish
@@ -171,7 +93,7 @@ $(SLNDIR)/src/Yavsc.Api/bin/$(CONFIGURATION)/$(DOTNET_FRAMEWORK)/publish: build_
 
 showConfig:
 	@echo CONFIGURATION: $(CONFIGURATION)
-	@echo APPDIR: $(APPDIR)
+	@echo BASEAPPDIR: $(BASEAPPDIR)
 
 showApiLogs:
 	@sudo journalctl -u yavscApi.service -S "2 min ago" | tee yavscApi.log
@@ -185,5 +107,3 @@ showBlogsLogs:
 clean:
 	@rm -rf generated
 
-generated/:
-	@mkdir -p $@

contrib/README.nginx.md

@@ -1,134 +0,0 @@
-# Vhosts nginx — génération par `make generate-nginx`
-
-Les vhosts nginx sont **générés** à l'image des unités de service systemd
-(`template.service` + `envsubst` → `generated/*.service`) : un template
-unique `contrib/template.vhost` est substitué par `envsubst` vers
-`contrib/generated/nginx/`, qui est **gitignoré**.
-
-## Rôle de nginx : edge HTTP/3 (plan `contrib/quic.md`)
-
-nginx termine HTTP/3 (QUIC) au edge sur 443/udp, en coexistence avec
-h1/h2 sur 443/tcp. Kestrel reste backend h1/h2 (`proxy_http_version 1.1`).
-Le « QUIC logiciel » Kestrel (`Protocols: Http1AndHttp2AndHttp3` dans les
-`template.appsettings-*.json`) est une capacité complémentaire — non
-joignable par les clients derrière nginx (nginx OSS = upstream h1.1
-uniquement), mais disponible si Kestrel est un jour exposé en direct.
-
-Directives générées (par vhost) :
-```nginx
-listen 443 ssl;          listen [::]:443 ssl;          http2 on;
-listen 443 quic $QUIC_OPTS;   listen [::]:443 quic $QUIC_OPTS;   http3 on;
-add_header Alt-Svc 'h3=":443"; ma=86400' always;
-ssl_protocols TLSv1.3;
-```
-`$QUIC_OPTS = reuseport` sur **Org uniquement**, vide sur Api/Blogs (règle
-`contrib/quic.md` : `reuseport` une seule fois par addr:port, tous vhosts
-confondus).
-
-## Prérequis côté host
-
-1. **nginx avec `http_v3_module`** (≥ 1.25 ; la directive `http3 on;`
-   exige ≥ 1.27.4 — sur une version 1.25–1.27.3, retirer `http3 on;`,
-   `listen ... quic` suffit à activer h3) :
-   ```bash
-   nginx -V 2>&1 | grep -o 'http_v3_module'   # doit être non vide
-   ```
-   Debian 13 « trixie » fournit `nginx` avec `http_v3_module`. Sinon,
-   backports ou `nginx-full`.
-2. **UDP 443 ouvert** :
-   ```bash
-   sudo ufw allow 443/udp
-   sudo ufw status | grep '443/udp'           # → ALLOW
-   ```
-3. **IPv6** : le template émet `listen [::]:443 ...` (et `[::]:80`). Si le
-   host n'a pas d'IPv6, retirer/commenter ces lignes (sinon `nginx -t`
-   échoue sur le bind IPv6).
-4. Certbot / certs Let's Encrypt déjà en place (chemins
-   `/etc/letsencrypt/live/<domain>/{fullchain,privkey}.pem` référencés).
-5. (Optionnel, pour le QUIC logiciel Kestrel) `apt install libmsquic` —
-   sinon Kestrel désactive h3 silencieusement (fallback h1/h2 gracieux).
-
-## Génération
-
-```bash
-cd contrib
-
-# Preprod (défaut) -> generated/nginx/preprod-yavsc{Org,Blogs,Api}
-make generate-nginx
-
-# Production -> generated/nginx/yavsc{Org,Blogs,Api}
-make generate-nginx-prod
-# ou manuellement :
-make generate-nginx APP_INSTALL_ENV=production APP_INSTALL_PREFIX=
-```
-
-Ports backend et `HTTP_HOST` depuis `.preprod.env` / `.production.env`
-(prod Org=83, Api=87, Blogs=85 ; preprod 89/93/91). Schéma backend
-`https` en prod, `http` en preprod.
-
-| Hôte  | Sous-domaine | `reuseport` | Backend prod            | Backend preprod        |
-|-------|--------------|-------------|-------------------------|------------------------|
-| Org   | yavsc        | **oui**     | `https://localhost:83`  | `http://localhost:89`  |
-| Api   | api          | non         | `https://localhost:87`  | `http://localhost:93`  |
-| Blogs | blogs        | non         | `https://localhost:85`  | `http://localhost:91`  |
-
-Domaines : `<prefix><subdomain>.pschneider.fr`
-(prod `yavsc.pschneider.fr` ; preprod `preprod-yavsc.pschneider.fr`).
-
-## Déploiement sur le host
-
-```bash
-sudo cp generated/nginx/yavscOrg  /etc/nginx/sites-available/yavscOrg
-sudo ln -sf /etc/nginx/sites-available/yavscOrg /etc/nginx/sites-enabled/yavscOrg
-# (idem yavscApi, yavscBlogs)
-sudo nginx -t && sudo systemctl reload nginx
-```
-
-## Vérification (sur le host)
-
-```bash
-# 1. Module h3 présent
-nginx -V 2>&1 | grep -o 'http_v3_module'
-
-# 2. UDP 443 ouvert
-sudo ufw status | grep '443/udp'
-
-# 3. En-tête Alt-Svc annoncé
-curl -sI https://yavsc.pschneider.fr/ | grep -i alt-svc   # → h3=":443"
-
-# 4. Requête HTTP/3 effective (curl compilé avec HTTP/3)
-curl -v --http3 https://yavsc.pschneider.fr/ 2>&1 | grep -i 'HTTP/3'
-
-# 5. Fallback h2 et h1 toujours fonctionnels
-curl --http2   https://yavsc.pschneider.fr/ -o /dev/null -w '%{http_code}\n'
-curl --http1.1 https://yavsc.pschneider.fr/ -o /dev/null -w '%{http_code}\n'
-```
-Répéter 3-5 pour `api.pschneider.fr` et `blogs.pschneider.fr` (prod) et
-les trois domaines preprod. Sans curl HTTP/3, un navigateur : DevTools →
-Network → colonne « Protocole » → `h3` après mise à niveau.
-
-## Comment ça marche (template + envsubst)
-
-`contrib/template.vhost` contient les placeholders `$DOMAIN`,
-`$BACKEND_SCHEME`, `$HTTP_HOST`, `$BACKEND_PORT`, `$QUIC_OPTS`. La règle
-`generated/nginx/$(APP_INSTALL_PREFIX)yavsc%` du `Makefile` les substitue
-via `envsubst` avec une **allowlist** :
-
-```makefile
-envsubst '$DOMAIN $BACKEND_SCHEME $HTTP_HOST $BACKEND_PORT $QUIC_OPTS'
-```
-
-Cette allowlist limite la substitution aux 5 variables citées, de sorte
-que les variables nginx intrinsèques (`$host`, `$scheme`, `$remote_addr`,
-`$proxy_add_x_forwarded_for`, `$request_uri`) survivent intactes. Sans
-allowlist, `envsubst` détruirait ces variables nginx.
-
-## Hors périmètre
-
-- `docker-compose` / `Dockerfile` : non touchés (déploiement bare-metal
-  systemd + nginx).
-- Backend HTTP/2 vers Kestrel : nginx open-source ne supporte que
-  HTTP/1.1 en upstream ; on garde `proxy_http_version 1.1`.
-- `ssl_protocols TLSv1.3` (suivant `contrib/quic.md`) désactive TLS 1.2
-  côté TCP aussi. Pour conserver la compat TLS 1.2 sur le fallback TCP,
-  relâcher en `ssl_protocols TLSv1.2 TLSv1.3;` (QUIC reste en 1.3).

contrib/template.appsettings-api.json

@@ -1,33 +0,0 @@
-{
-  "Site": {
-    "Authority": "https://preprod-yavsc.$DOMAIN",
-    "Audience": ["api"],
-    "CorsAllowedOrigins": [
-      "https://preprod-blogs.$DOMAIN"
-    ],
-    "Bills": "bills",
-    "TempDir": "temp"
-  },
-  "Logging": {
-    "LogLevel": {
-      "Default": "Information",
-      "Microsoft": "Warning",
-      "Microsoft.Hosting.Lifetime": "Information"
-    }
-  },
-  "Kestrel": {
-    "Endpoints": {
-      "Http": {
-        "Url": "http://localhost:92"
-      },
-      "Https": {
-        "Url": "https://localhost:93",
-        "Certificate": {
-          "Path": "/etc/letsencrypt/live/preprod-api.$DOMAIN/fullchain.pem",
-          "KeyPath": "/etc/letsencrypt/live/preprod-api.$DOMAIN/privkey.pem"
-        },
-        "Protocols": "Http1AndHttp2AndHttp3"
-      }
-    }
-  }
-}

contrib/template.appsettings-blogs.json

@@ -1,40 +0,0 @@
-{
-  "Site": {
-    "Title": "Yavsc Blogs",
-    "Description": "A collection of blogs about software development, technology, and programming.",
-    "Keywords": "software development, technology, programming, coding, blogs",
-    "Authority": "https://preprod-yavsc.$DOMAIN",
-    "Audience": ["blogs"],
-    "CorsAllowedOrigins": [
-      "https://preprod-api.$DOMAIN"
-    ],
-    "UserFilesRoot": "files"
-  },
-  "ConnectionStrings": {
-    "YavscConnection": "Server=localhost;Port=5432;Database=lame-db-name;Username=lame-user-name;Password=lame-password;"
-  },
-  "Logging": {
-    "LogLevel": {
-      "Default": "Information",
-      "Microsoft": "Warning",
-      "Microsoft.Hosting.Lifetime": "Information",
-      "Microsoft.AspNetCore.Authentication": "Debug"
-    }
-  },
-  "AllowedHosts": "*",
-  "Kestrel": {
-    "Endpoints": {
-      "Http": {
-        "Url": "http://localhost:90"
-      },
-      "Https": {
-        "Url": "https://localhost:91",
-        "Certificate": {
-          "Path": "/etc/letsencrypt/live/preprod-blogs.$DOMAIN/fullchain.pem",
-          "KeyPath": "/etc/letsencrypt/live/preprod-blogs.$DOMAIN/privkey.pem"
-        },
-        "Protocols": "Http1AndHttp2AndHttp3"
-      }
-    }
-  }
-}

contrib/template.appsettings-org.json

@@ -1,74 +0,0 @@
-{
-  "Logging": {
-    "LogLevel": {
-      "Default": "Information"
-    }
-  },
-  "AllowedHosts": "*",
-  "Site": {
-    "Title": "yavsc",
-    "Slogan": "Yavsc!",
-    "StyleSheet": "/css/default.css",
-    "Authority": "https://preprod-yavsc.$DOMAIN",
-    "Audience": [
-      "blogs",
-      "api"
-    ],
-    "ExternalUrl": "https://preprod-yavsc.$DOMAIN",
-    "ApiUrl": "https://preprod-api.$DOMAIN",
-    "CorsAllowedOrigins": [
-      "https://preprod-blogs.$DOMAIN",
-      "https://preprod-api.$DOMAIN"
-    ],
-    "Banner": "/images/banner-dewang.jpg",
-    "Owner": {
-      "Name": "Paul Schneider",
-      "EMail": "paul@pschneider.fr"
-    },
-    "Admin": {
-      "Name": "Paul Schneider",
-      "EMail": "paul@pschneider.fr"
-    },
-    "Quota": 200000000,
-    "UserFilesRoot": "files",
-    "Avatars": "avatars",
-    "Bills": "bills",
-    "TempDir": "temp",
-    "DataDir": "data",
-    "GitRepository": "git"
-  },
-  "Smtp": {
-    "Host": "mercure.pschneider.fr",
-    "Port": 465,
-    "SenderName": "Paul Schneider",
-    "SenderEmail": "paul@pschneider.fr",
-    "UserName": "paul",
-    "Password": "$SMTP_PASSWORD"
-  },
-  "DataProtection": {
-    "Keys": {
-      "Dir": "DataProtection"
-    },
-    "RSAParamFile": "RSA-Params.json",
-    "ExpiresInHours": 168
-  },
-  "Moderation": {
-    "AutoApproveThreshold": 0.7,
-    "AutoRejectThreshold": 0.9
-  },
-  "Kestrel": {
-    "Endpoints": {
-      "Http": {
-        "Url": "http://localhost:88"
-      },
-      "Https": {
-        "Url": "https://localhost:89",
-        "Certificate": {
-          "Path": "/etc/letsencrypt/live/preprod-yavsc.$DOMAIN/fullchain.pem",
-          "KeyPath": "/etc/letsencrypt/live/preprod-yavsc.$DOMAIN/privkey.pem"
-        },
-        "Protocols": "Http1AndHttp2AndHttp3"
-      }
-    }
-  }
-}

contrib/template.service

@@ -10,10 +10,10 @@ RestartSec=5s
 Type=simple
 User=yavsc
 Group=yavsc
-WorkingDirectory=$APPDIR
-ExecStart=$APPDIR/Yavsc.$APP_NAME
+WorkingDirectory=$DESTDIR
+ExecStart=$DESTDIR/Yavsc.$APP_NAME
 Restart=always
-Environment="HOME=$APPDIR"
+Environment="HOME=$DESTDIR"
 Environment="ANTHROPIC_API_KEY=$ANTHROPIC_API_KEY"
 Environment="ANTHROPIC_MAX_TOKENS=$ANTHROPIC_MAX_TOKENS"
 Environment="ASPNETCORE_Environment=$ENV"
@@ -29,6 +29,8 @@ Environment="ASPNETCORE_Smtp__Password=\"$ASPNETCORE_Smtp__Password\""
 
 CapabilityBoundingSet=CAP_NET_BIND_SERVICE
 AmbientCapabilities=CAP_NET_BIND_SERVICE
+StandardOutput=syslog
+StandardError=syslog
 SyslogIdentifier=$APP_SYSLOG_ID
 
 [Install]

contrib/template.vhost

@@ -1,81 +0,0 @@
-# Généré depuis contrib/template.vhost par `make generate-nginx` — NE PAS ÉDITER.
-# Vhost $DOMAIN — backend $BACKEND_SCHEME://$HTTP_HOST:$BACKEND_PORT
-#
-# HTTP/3 (QUIC) termine au edge nginx (plan contrib/quic.md). Requiert un
-# nginx compilé avec http_v3_module (≥ 1.25 ; `http3 on` ≥ 1.27.4) + UDP 443
-# ouvert. Kestrel reste backend h1/h2 (mais configure aussi h3 côté logiciel,
-# cf. template.appsettings-*.json — capacité, non joignable derrière nginx).
-#
-# Variables substituées par envsubst (allowlist) :
-#   DOMAIN BACKEND_SCHEME HTTP_HOST BACKEND_PORT QUIC_OPTS
-# $QUIC_OPTS = "reuseport" sur un seul vhost (Org) ET en production
-# uniquement ; vide en preprod et sur les autres hôtes. Règle : reuseport
-# une seule fois par addr:port (443/udp) — or preprod et prod partagent la
-# même IP, donc seule la prod (Org) l'active.
-# Les variables nginx intrinsèques ($host, $scheme, $remote_addr, …) sont
-# préservées (hors allowlist).
-
-# Port 80 : redirection vers HTTPS. (Certbot/nginx-plugin gère les challenges
-# ACME ; ne pas servir l'app en HTTP clair.)
-server {
-    listen 80;
-    listen [::]:80;
-    server_name $DOMAIN;
-    return 301 https://$host$request_uri;
-}
-
-server {
-    # 1. TCP : HTTPS classique + HTTP/2
-    listen 443 ssl;
-    listen [::]:443 ssl;
-    http2 on;
-
-    # 2. UDP : HTTP/3 (QUIC). reuseport sur UN seul vhost (Org via QUIC_OPTS).
-    listen 443 quic$QUIC_OPTS;
-    listen [::]:443 quic$QUIC_OPTS;
-    http3 on;
-
-    server_name $DOMAIN;
-
-    # 3. Certificats Let's Encrypt (Certbot).
-    ssl_certificate     /etc/letsencrypt/live/$DOMAIN/fullchain.pem;   # managed by Certbot
-    ssl_certificate_key /etc/letsencrypt/live/$DOMAIN/privkey.pem;     # managed by Certbot
-    # QUIC exige TLS 1.3. (TLS 1.2 conservable pour le fallback TCP :
-    # `ssl_protocols TLSv1.2 TLSv1.3;` — QUIC reste en 1.3.)
-    ssl_protocols TLSv1.3;
-
-    # 4. Annonce h3 au navigateur sur 443/udp. `always` = émis même en erreur.
-    add_header Alt-Svc 'h3=":443"; ma=86400' always;
-
-    location / {
-        proxy_pass         $BACKEND_SCHEME://$HTTP_HOST:$BACKEND_PORT;
-        proxy_http_version 1.1;
-        proxy_set_header   Host $host;
-        proxy_set_header   X-Real-IP $remote_addr;
-        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header   X-Forwarded-Proto $scheme;
-        proxy_read_timeout 100s;
-        proxy_buffering off;
-    }
-
-    # SignalR (ChatHub) : WebSocket exige Upgrade/Connection et un timeout
-    # long, sinon la connexion tombe au premier silence ou l'upgrade échoue.
-    # Connection est fixé à "upgrade" (pas de map $connection_upgrade, qui
-    # exigerait une directive map {} globale hors de ce vhost) : SignalR
-    # négocie toujours un upgrade sur ce chemin, et la négociation initiale
-    # (POST /negotiate, sans en-tête Upgrade) n'est pas affectée par cet
-    # en-tête côté Kestrel.
-    location /chathub {
-        proxy_pass         $BACKEND_SCHEME://$HTTP_HOST:$BACKEND_PORT;
-        proxy_http_version 1.1;
-        proxy_set_header   Upgrade $http_upgrade;
-        proxy_set_header   Connection "upgrade";
-        proxy_set_header   Host $host;
-        proxy_set_header   X-Real-IP $remote_addr;
-        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header   X-Forwarded-Proto $scheme;
-        proxy_read_timeout 3600s;
-        proxy_buffering off;
-    }
-    include server-status.conf;
-}

contrib/yavsc-org

@@ -0,0 +1,54 @@
+
+
+server {
+    if ($host = yavsc.pschneider.fr) {
+        return 301 https://$host$request_uri;
+    } # managed by Certbot
+
+
+
+    listen        80;
+    server_name yavsc.pschneider.fr;
+    location / {
+		root /srv/www/yavsc/wwwroot;
+        dav_methods  PUT;
+
+        proxy_pass         http://127.0.0.1:3003;
+        proxy_http_version 1.1;
+        proxy_set_header   Upgrade $http_upgrade;
+        proxy_set_header   Connection keep-alive;
+        proxy_set_header   Host $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+    }
+
+}
+
+server {
+	listen 443 ssl;
+	server_name yavsc.pschneider.fr;
+    ssl_certificate /etc/letsencrypt/live/yavsc.pschneider.fr-0001/fullchain.pem; # managed by Certbot
+    ssl_certificate_key /etc/letsencrypt/live/yavsc.pschneider.fr-0001/privkey.pem; # managed by Certbot
+	# Configure the SignalR Endpoint
+	location / {
+		# App server url
+		proxy_pass http://localhost:3003;
+
+		proxy_cache off;
+		# WebSockets were implemented after http/1.0
+		proxy_http_version 1.1;
+
+		# Configuration for ServerSentEvents
+		proxy_buffering off;
+
+		# Configuration for LongPolling or if your KeepAliveInterval is longer than 60 seconds
+		proxy_read_timeout 100s;
+
+		proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header X-Forwarded-Proto $scheme;
+	}
+}
+

doc/architecture/postit.md

@@ -126,20 +126,6 @@ le DI est construit. Ordre, dans cet ordre :
 > à cette table, *ne pas* ajouter de registration pour
 > `Settings` ailleurs que la ligne `AddSingleton(settings)`.
 
-## Défilement de la page des billets
-
-La page `BlogsPage` utilise une grille à hauteur contrainte : l'en-tête
-et les commandes restent visibles, tandis que la liste des billets et
-l'éditeur se partagent l'espace disponible. Un `GridSplitter` permet
-de modifier cette répartition. La liste et l'article défilent séparément.
-
-Dans `MarkdownEditorControl`, AvaloniaEdit gère son propre défilement ;
-l'aperçu Markdown est placé dans un `ScrollViewer`. Ne pas limiter
-la hauteur du `MarkdownViewer` lui-même : son contenu doit pouvoir
-dépasser le viewport pour que les barres automatiques s'activent.
-Ne pas placer cette grille dans un `StackPanel` vertical ou un
-`ScrollViewer` de page, qui lui donnerait une hauteur de mesure illimitée.
-
 ## Navigation
 
 Le host de navigation est un `NavigationPage x:Name="NavRoot"`

docker-compose.yaml

@@ -26,7 +26,7 @@ services:
       dockerfile: Dockerfile
       target: web-runtime
       args:
-        BUILD_ENV_TAG: debian13-dotnet10-android36-jdk21-v2
+        BUILD_ENV_TAG: debian12-dotnet10-android36-v1
       secrets:
         - source: yavsc_appsettings
           target: yavsc_appsettings
@@ -53,7 +53,9 @@ services:
     depends_on:
       db:
         condition: service_healthy
-    network_mode: host
+    networks:
+      - yavsc-internal
+      - yavsc-public
     # volumes:
     #   # Indispensable pour que Yavsc.Org (IdentityServer8) démarre.
     #   # Sans ce montage, 'docker compose up' échoue côté web avec
@@ -71,7 +73,7 @@ services:
       dockerfile: Dockerfile
       target: api-runtime
       args:
-        BUILD_ENV_TAG: debian13-dotnet10-android36-jdk21-v2
+        BUILD_ENV_TAG: debian12-dotnet10-android36-v1
       secrets:
         - source: yavsc_appsettings
           target: yavsc_appsettings
@@ -88,7 +90,9 @@ services:
     depends_on:
       db:
         condition: service_healthy
-    network_mode: host
+    networks:
+      - yavsc-internal
+      - yavsc-public
     # volumes:
     #   - /etc/letsencrypt:/etc/letsencrypt:ro
 
@@ -101,7 +105,7 @@ services:
       dockerfile: Dockerfile
       target: blogs-runtime
       args:
-        BUILD_ENV_TAG: debian13-dotnet10-android36-jdk21-v2
+        BUILD_ENV_TAG: debian12-dotnet10-android36-v1
       secrets:
         - source: yavsc_appsettings
           target: yavsc_appsettings
@@ -118,7 +122,9 @@ services:
     depends_on:
       db:
         condition: service_healthy
-    network_mode: host
+    networks:
+      - yavsc-internal
+      - yavsc-public
     # volumes:
     #   - /etc/letsencrypt:/etc/letsencrypt:ro
 

global.json

@@ -1,5 +0,0 @@
-{
-    "test": {
-        "runner": "Microsoft.Testing.Platform"
-    }
-}

src/PostIt/Directory.Packages.props

@@ -4,36 +4,28 @@
   <!-- https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management -->
   <PropertyGroup>
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
-    <AvaloniaVersionBase>12.1.3</AvaloniaVersionBase>
+    <AvaloniaVersionBase>12.1.1</AvaloniaVersionBase>
   </PropertyGroup>
   <ItemGroup>
     <PackageVersion Include="Avalonia" Version="$(AvaloniaVersionBase)" />
-    <PackageVersion Include="Avalonia.AvaloniaEdit" Version="12.0.0" />
     <PackageVersion Include="Avalonia.Themes.Fluent" Version="$(AvaloniaVersionBase)" />
     <PackageVersion Include="Avalonia.Desktop" Version="$(AvaloniaVersionBase)" />
     <PackageVersion Include="Avalonia.Browser" Version="$(AvaloniaVersionBase)" />
     <PackageVersion Include="Avalonia.Android" Version="$(AvaloniaVersionBase)" />
-    <PackageVersion Include="Avalonia.Headless" Version="12.1.3" />
+    <PackageVersion Include="Avalonia.Headless" Version="$(AvaloniaVersionBase)" />
     <PackageVersion Include="Avalonia.Headless.Xunit" Version="$(AvaloniaVersionBase)" />
     <PackageVersion Include="Avalonia.Fonts.Inter" Version="$(AvaloniaVersionBase)" />
-    <PackageVersion Include="LibVLCSharp.Avalonia" Version="3.10.1" />
-    <PackageVersion Include="Live.Avalonia" Version="1.4.2" />
     <PackageVersion Include="Mapsui" Version="5.1.0" />
     <PackageVersion Include="Mapsui.Avalonia12" Version="5.1.0" />
-    <PackageVersion Include="MarkdownViewer.Core" Version="1.0.6-47" />
-    <PackageVersion Include="Material.Avalonia" Version="3.21.0" />
+    <PackageVersion Include="MarkdownViewer.Core" Version="1.0.5" />
+    <PackageVersion Include="Material.Avalonia" Version="3.19.0" />
     <PackageVersion Include="AvaloniaUI.DiagnosticsSupport" Version="2.2.3" />
     <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
-    <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.12" />
-    <PackageVersion Include="Mono.Options" Version="6.12.0.148" />
-    <PackageVersion Include="PvRecorder" Version="1.2.13" />
-    <PackageVersion Include="Silk.NET.OpenAL" Version="2.23.0" />
     <PackageVersion Include="Xamarin.AndroidX.Browser" Version="1.10.0.1" />
-    <PackageVersion Include="Xamarin.AndroidX.Core.SplashScreen" Version="1.2.0.3" />
-    <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Runtime" Version="2.11.0.1" />
-    <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Common" Version="2.11.0.1" />
-    <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Process" Version="2.11.0.1" />
+    <PackageVersion Include="Xamarin.AndroidX.Core.SplashScreen" Version="1.2.0" />
+    <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Runtime" Version="2.10.0.1" />
+    <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Common" Version="2.10.0.1" />
     <PackageVersion Include="Xamarin.UITest" Version="4.4.2" />
-    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.12" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.11" />
   </ItemGroup>
-</Project>
+</Project>

src/PostIt/PostIt.Android/MainActivity.cs

@@ -2,7 +2,6 @@
 using Android.App;
 using Android.Content;
 using Android.Content.PM;
-using Android.Views;
 using AndroidX.Core.Provider;
 using AndroidX.Emoji2.Text;
 using Avalonia.Android;
@@ -16,9 +15,7 @@ namespace PostIt.Android;
     Theme = "@style/MyTheme.NoActionBar",
     Icon = "@drawable/icon",
     MainLauncher = true,
-    WindowSoftInputMode = SoftInput.AdjustResize,
-    ConfigurationChanges = ConfigChanges.Orientation | ConfigChanges.ScreenSize | ConfigChanges.UiMode)
-    ]
+    ConfigurationChanges = ConfigChanges.Orientation | ConfigChanges.ScreenSize | ConfigChanges.UiMode)]
 public class MainActivity : AvaloniaMainActivity
 {
     /// <summary>

src/PostIt/PostIt.Android/PostIt.Android.csproj

@@ -11,8 +11,8 @@
     <AndroidEnableProfiledAot>false</AndroidEnableProfiledAot>
     <AssemblyVersion>1.1.0.0</AssemblyVersion>
     <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-estimate.1+364.Branch.feature-estimate.Sha.3d6ab6e72f9ba4ccfa250a1cce154b550281405e</InformationalVersion>
-    <Version>1.1.0-estimate.1</Version>
+    <InformationalVersion>1.1.0-feat-sign-estimate.1+306.Branch.feat-sign-estimate.Sha.e9a33695b38154859729b61d1280e596f1597acf</InformationalVersion>
+    <Version>1.1.0-feat-sign-estimate.1</Version>
   </PropertyGroup>
   <ItemGroup>
     <AndroidResource Include="Icon.png">
@@ -27,14 +27,4 @@
   <ItemGroup>
     <ProjectReference Include="..\PostIt\PostIt.csproj" />
   </ItemGroup>
-  <!-- This is an Avalonia app, not a MAUI app: exclude the .NET MAUI VS Code
-       extension's injected HotReload agent (references Microsoft.Maui.*).
-       The agent file is added via CustomAfterMicrosoftCommonTargets, i.e. after
-       this file's item groups, so the removal must run in a target. -->
-  <Target Name="ExcludeMauiDeployHotReloadAgent" BeforeTargets="CoreCompile"
-          Condition="'$(MauiDeployHotReloadAgentSource)' != ''">
-    <ItemGroup>
-      <Compile Remove="$(MauiDeployHotReloadAgentSource)" />
-    </ItemGroup>
-  </Target>
-</Project>
+</Project>

src/PostIt/PostIt.Android/Properties/AndroidManifest.xml

@@ -1,10 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <manifest xmlns:android="http://schemas.android.com/apk/res/android" android:installLocation="auto">
 	<uses-permission android:name="android.permission.INTERNET" />
-		<application
-      android:label="PostIt"
-      android:icon="@drawable/Icon"
-			android:networkSecurityConfig="@xml/network_security_config"
-			android:hardwareAccelerated="true">
+		<application android:label="PostIt" android:icon="@drawable/Icon">
 	</application>
 </manifest>

src/PostIt/PostIt.Android/Resources/xml/network_security_config.xml

@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<network-security-config>
-  <domain-config cleartextTrafficPermitted="true">
-    <domain includeSubdomains="true">10.0.2.2</domain> <!-- Debug address -->
-  </domain-config>
-</network-security-config>

src/PostIt/PostIt.Browser/PostIt.Browser.csproj

@@ -6,8 +6,8 @@
     <Nullable>enable</Nullable>
     <AssemblyVersion>1.1.0.0</AssemblyVersion>
     <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-estimate.1+364.Branch.feature-estimate.Sha.3d6ab6e72f9ba4ccfa250a1cce154b550281405e</InformationalVersion>
-    <Version>1.1.0-estimate.1</Version>
+    <InformationalVersion>1.1.0-feat-sign-estimate.1+306.Branch.feat-sign-estimate.Sha.e9a33695b38154859729b61d1280e596f1597acf</InformationalVersion>
+    <Version>1.1.0-feat-sign-estimate.1</Version>
   </PropertyGroup>
   <ItemGroup>
     <PackageReference Include="Avalonia.Browser" />

src/PostIt/PostIt.Desktop/PostIt.Desktop.csproj

@@ -7,8 +7,8 @@
     <Nullable>enable</Nullable>
     <AssemblyVersion>1.1.0.0</AssemblyVersion>
     <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-estimate.1+364.Branch.feature-estimate.Sha.3d6ab6e72f9ba4ccfa250a1cce154b550281405e</InformationalVersion>
-    <Version>1.1.0-estimate.1</Version>
+    <InformationalVersion>1.1.0-feat-sign-estimate.1+306.Branch.feat-sign-estimate.Sha.e9a33695b38154859729b61d1280e596f1597acf</InformationalVersion>
+    <Version>1.1.0-feat-sign-estimate.1</Version>
   </PropertyGroup>
   <PropertyGroup>
     <ApplicationManifest>app.manifest</ApplicationManifest>

src/PostIt/PostIt.Desktop/Program.cs

@@ -1,7 +1,6 @@
 using System;
 using Avalonia;
 using PostIt.Services;
-using PostIt.CLIOptions;
 
 namespace PostIt.Desktop;
 
@@ -13,8 +12,6 @@ sealed class Program
     [STAThread]
     public static void Main(string[] args)
     {
-        CLIOptionHandler.HandleArgs(args);
-
         // Short-circuit 2nd-instance launches (OS handing us the
         // postit://callback URL) BEFORE Avalonia spins up a window.
         // If we let Avalonia initialise, the new MainWindow flashes

src/PostIt/PostIt.Tests/BlogApiTestFakes.cs

@@ -73,14 +73,6 @@ internal sealed class RecordingYavscApiClient : YavscApiClient
     public override Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
     {
         _recorder.Calls.Add((method, path, contentFactory));
-        if (typeof(T) == typeof(BlogPostDto))
-            return Task.FromResult((T)(object)new BlogPostDto
-            {
-                Id = 42,
-                Title = "Mon premier billet",
-                AuthorId = "tester",
-                Article = "Contenu du billet de test.",
-            });
         return Task.FromResult(default(T)!);
     }
 }

src/PostIt/PostIt.Tests/BlogAttachmentLinkTests.cs

@@ -20,13 +20,8 @@ namespace PostIt.Tests;
 /// </summary>
 public class BlogAttachmentLinkTests
 {
-    [Theory]
-    [InlineData("note.txt", "note.txt")]
-    [InlineData("INSC_E03686381_SCHNEIDER_000113378AA__Troisi\u00e8me__.PDF",
-        "INSC_E03686381_SCHNEIDER_000113378AA__Troisi_232me__.PDF")]
-    [InlineData("rapport final.pdf", "rapport%20final.pdf")]
-    public async Task Save_with_attachment_appends_absolute_link_derived_from_the_oidc_authority(
-        string originalName, string urlName)
+    [Fact]
+    public async Task Save_with_attachment_appends_absolute_link_derived_from_the_oidc_authority()
     {
         const string authority = "https://idp.example.test";
 
@@ -58,59 +53,27 @@ public class BlogAttachmentLinkTests
         vm.DraftTitle = "Après";
         vm.DraftArticle = "Contenu modifié.";
         vm.DraftAttachments.Add(new BlogUploadFile(
-            originalName,
+            "note.txt",
             System.Text.Encoding.UTF8.GetBytes("payload test"),
             "text/plain"));
 
-        var expectedUrl = $"{authority}/files/tester/blogs/42/{urlName}";
-        Assert.Contains($"- [{originalName}]({expectedUrl})", vm.DraftArticle);
-        Assert.Empty(recorder.Calls);
-        var draftBeforeSave = vm.DraftArticle;
-
         await vm.SaveAsync();
 
-        var linkPut = Assert.Single(recorder.Calls, c => c.method == HttpMethod.Put);
+        // The update branch issues two PUTs: the multipart one
+        // carrying the file, then — because TryAppendAttachmentLinks
+        // appended a link — a JSON one carrying the final article.
+        var linkPut = recorder.Calls.LastOrDefault(
+            c => c.method == HttpMethod.Put);
         Assert.NotEqual(default, linkPut);
         var sent = Assert.IsType<System.Func<HttpContent>>(linkPut.body);
         var multipartContent = Assert.IsType<MultipartFormDataContent>(sent());
 
-        var sentStringContent = Assert.IsType<StringContent>(multipartContent.First());
+        var expectedUrl = $"{authority}/files/tester/blogs/42/note.txt";
+        var sentStringContent =  multipartContent.First() as StringContent ;
 
         var sentString = await sentStringContent.ReadAsStringAsync(TestContext.Current.CancellationToken);
-        using var document = System.Text.Json.JsonDocument.Parse(sentString);
-        var article = document.RootElement.GetProperty("article").GetString();
-        Assert.Contains($"- [{originalName}]({expectedUrl})", article);
+        Assert.Contains($"- [note.txt]({expectedUrl})", sentString);
         // The regression shape: a relative, authority-less link.
-        Assert.DoesNotContain("](/files/", article);
-        Assert.Equal(draftBeforeSave, vm.DraftArticle);
-        Assert.NotNull(vm.SelectedPost);
-        Assert.False(vm.IsDraftModified);
-    }
-
-    [Fact]
-    public async Task New_post_resolves_only_the_provisional_link_at_first_save()
-    {
-        var recorder = new CallRecorder();
-        var api = new RecordingYavscApiClient(recorder);
-        var vm = new BlogsViewModel(new BlogApiClient(api, "https://blogs.example.test/api/v1/"),
-            new Settings { Authentication = new AuthenticationSettings { Authority = "https://idp.example.test" } });
-        vm.DraftTitle = "Nouveau billet";
-        vm.DraftArticle = "Texte conservé.";
-        vm.DraftAttachments.Add(new BlogUploadFile("Troisi\u00e8me.PDF", new byte[] { 1 }));
-
-        Assert.Contains("postit-attachment:", vm.DraftArticle);
-        Assert.Empty(recorder.Calls);
-        await vm.SaveAsync();
-
-        Assert.Equal("Nouveau billet", vm.DraftTitle);
-        Assert.Contains("Texte conservé.", vm.DraftArticle);
-        Assert.Contains("- [Troisi\u00e8me.PDF](https://idp.example.test/files/tester/blogs/42/Troisi_232me.PDF)",
-            vm.DraftArticle);
-        Assert.DoesNotContain("postit-attachment:", vm.DraftArticle);
-        Assert.Equal(42, vm.SelectedPost?.Id);
-        Assert.Empty(vm.DraftAttachments);
-        Assert.False(vm.IsDraftModified);
-        Assert.Single(recorder.Calls, c => c.method == HttpMethod.Post);
-        Assert.Single(recorder.Calls, c => c.method == HttpMethod.Put);
+        Assert.DoesNotContain("](/files/", sentString);
     }
 }

src/PostIt/PostIt.Tests/EstimateEditionPageViewModelTests.cs

@@ -1,5 +1,4 @@
 using System.Net.Http;
-using PostIt.Models;
 using PostIt.ViewModels;
 using Yavsc;
 using Yavsc.Api.Client;
@@ -23,8 +22,7 @@ public class EstimateEditionPageViewModelTests
     private static EstimateEditionPageViewModel CreateViewModel(StubEstimateApi api, BillingQuerySummaryDto? query = null)
     {
         var client = new EstimateApiClient(api, "https://business.example/api/v1/");
-        var fsClient = new UserFilesApiClient(api, "https://blogs.example/api/v1/");
-        return new EstimateEditionPageViewModel(query ?? SampleQuery(), client, fsClient);
+        return new EstimateEditionPageViewModel(query ?? SampleQuery(), client);
     }
 
     [Fact]
@@ -145,8 +143,10 @@ public class EstimateEditionPageViewModelTests
 
         await vm.SendCommand.ExecuteAsync(null);
 
-        var postCall = Assert.Single(api.Calls, c => c.Method == HttpMethod.Post && c.Path == "https://business.example/api/v1/estimate");
-        var payload = Assert.IsType<EstimateDto>(postCall.Body);
+        Assert.Equal("https://business.example/api/v1/estimate", api.LastPath);
+        Assert.Equal(HttpMethod.Post, api.LastMethod);
+
+        var payload = Assert.IsType<EstimateDto>(api.LastBody);
         Assert.Equal(42, payload.CommandId);
         Assert.Equal("cli-1", payload.ClientId);
         Assert.Equal("Brush", payload.CommandType);
@@ -216,8 +216,7 @@ public class EstimateEditionPageViewModelTests
 
         await vm.SendCommand.ExecuteAsync(null);
 
-        var postCall = Assert.Single(api.Calls, c => c.Method == HttpMethod.Post && c.Path == "https://business.example/api/v1/estimate");
-        var payload = Assert.IsType<EstimateDto>(postCall.Body);
+        var payload = Assert.IsType<EstimateDto>(api.LastBody);
         Assert.Equal(2, payload.Bill.Count);
         Assert.Equal(-5m, payload.Bill[1].UnitaryCost);
         Assert.True(vm.HasSent);
@@ -231,20 +230,11 @@ public class EstimateEditionPageViewModelTests
         public object? LastBody { get; private set; }
         public Exception? Failure { get; init; }
 
-        /// <summary>Historique complet des appels (le plus récent en dernier).</summary>
-        public List<(HttpMethod Method, string Path, object? Body)> Calls { get; } = new();
-
-        private void Record(HttpMethod method, string path, object? body)
+        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
         {
             LastMethod = method;
             LastPath = path;
             LastBody = body;
-            Calls.Add((method, path, body));
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            Record(method, path, body);
 
             if (Failure is not null)
             {
@@ -263,7 +253,9 @@ public class EstimateEditionPageViewModelTests
 
         public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
         {
-            Record(method, path, body);
+            LastMethod = method;
+            LastPath = path;
+            LastBody = body;
             return Task.CompletedTask;
         }
 
@@ -273,12 +265,6 @@ public class EstimateEditionPageViewModelTests
         public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
             => CallAsync(method, path, (object?)null, ct);
 
-        public Task<byte[]> DownloadAsync(HttpMethod method, string path, CancellationToken ct = default)
-        {
-            Record(method, path, null);
-            return Task.FromResult(Array.Empty<byte>());
-        }
-
         public ValueTask DisposeAsync() => ValueTask.CompletedTask;
     }
 }

src/PostIt/PostIt.Tests/EstimateListPageViewModelTests.cs

@@ -11,13 +11,12 @@ public class EstimateListPageViewModelTests
     {
         var api = new StubEstimateListApi();
         var client = new EstimateApiClient(api, "https://business.example/api/v1/");
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Client, front);
+        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Client);
 
         await vm.InitializeAsync();
 
         Assert.Contains("https://business.example/api/v1/estimate/asclient", api.Paths);
-        Assert.Equal("Devis en attente de signature client", vm.Title);
+        Assert.Equal("Mes devis à valider", vm.Title);
         Assert.Equal(2, vm.Estimates.Count);
         // Most recent first
         Assert.Equal(2, vm.Estimates[0].Id);
@@ -29,13 +28,12 @@ public class EstimateListPageViewModelTests
     {
         var api = new StubEstimateListApi();
         var client = new EstimateApiClient(api, "https://business.example/api/v1/");
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Provider, front);
+        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Provider);
 
         await vm.InitializeAsync();
 
         Assert.Contains("https://business.example/api/v1/estimate/asprovider", api.Paths);
-        Assert.Equal("Devis en attente de signature fournisseur", vm.Title);
+        Assert.Equal("Mes devis en attente", vm.Title);
         Assert.Equal(2, vm.Estimates.Count);
     }
 
@@ -44,8 +42,7 @@ public class EstimateListPageViewModelTests
     {
         var api = new StubEstimateListApi();
         var client = new EstimateApiClient(api, "https://business.example/api/v1/");
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Provider, front);
+        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Provider);
 
         await vm.InitializeAsync();
 
@@ -66,8 +63,7 @@ public class EstimateListPageViewModelTests
     {
         var api = new StubEstimateListApi { Empty = true };
         var client = new EstimateApiClient(api, "https://business.example/api/v1/");
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Client, front);
+        var vm = new EstimateListPageViewModel(client, EstimateListPerspective.Client);
 
         await vm.InitializeAsync();
 

src/PostIt/PostIt.Tests/EstimateValidationPageViewModelTests.cs

@@ -1,255 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Net.Http;
-using PostIt.Controls;
-using PostIt.ViewModels;
-using Yavsc.Api.Client;
-using Yavsc.Models.Billing;
-
-namespace PostIt.Tests;
-
-/// <summary>
-/// Verifies <see cref="EstimateValidationPageViewModel"/> wires the two
-/// signature pads (provider + client) into the right
-/// <see cref="FrontOfficeApiClient"/> call. The view (XAML, rendering)
-/// is not tested here; the VM is driven through the same
-/// <see cref="SignaturePadControl"/> test hooks the signature tests use,
-/// and the API client through a recording fake
-/// <see cref="IYavscApiClient"/>. The test host's
-/// <c>TestApp</c> makes <c>GoBackAsync</c> a no-op, so the success paths
-/// run to completion without navigation side effects.
-/// </summary>
-public class EstimateValidationPageViewModelTests
-{
-    private static EstimateDto SampleEstimate(long? commandId = 42) => new()
-    {
-        Id = 7,
-        CommandId = commandId,
-        CommandType = "Rdv",
-        Title = "Devis plomberie",
-        Description = "Réparation",
-        ClientId = "bob",
-        OwnerId = "alice",
-    };
-
-    private static void DrawOneStroke(SignaturePadControl pad)
-    {
-        pad.AppendPointForTest(100, 200);
-        pad.AppendPointForTest(300, 400);
-        pad.SealStrokeForTest();
-    }
-
-    [Fact]
-    public async Task Validate_calls_accept_with_strokes_and_command_id()
-    {
-        var api = new RecordingApi();
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Provider, front);
-
-        var proPad = new SignaturePadControl();
-        var clientPad = new SignaturePadControl();
-        vm.Attach(proPad, clientPad);
-        DrawOneStroke(proPad); // provider signs on their writable pad
-
-        await vm.ValidateAsync();
-
-        Assert.Equal(HttpMethod.Post, api.LastMethod);
-        Assert.Contains("front/query/accept", api.LastPath);
-        Assert.Contains("billingCode=Rdv", api.LastPath);
-        Assert.Contains("queryId=42", api.LastPath);
-        var body = Assert.IsType<QueryAcceptanceRequestDto>(api.LastBody);
-        Assert.NotNull(body.Strokes);
-        Assert.NotEmpty(body.Strokes);
-        Assert.Equal(10_000, body.CoordinateMax);
-        // The provider perspective declares the Pro side, so the
-        // server stores the signature under the provider's author
-        // regardless of role inference.
-        Assert.Equal(SignatureType.Pro, body.SignatureType);
-    }
-
-    [Fact]
-    public async Task Validate_from_client_perspective_declares_client_side()
-    {
-        var api = new RecordingApi();
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Client, front);
-
-        var cliPad = new SignaturePadControl();
-        vm.Attach(new SignaturePadControl(), cliPad);
-        DrawOneStroke(cliPad); // client signs on their writable pad
-
-        await vm.ValidateAsync();
-
-        var body = Assert.IsType<QueryAcceptanceRequestDto>(api.LastBody);
-        Assert.Equal(SignatureType.Client, body.SignatureType); // Client side
-    }
-
-    [Fact]
-    public async Task Reject_calls_reject_endpoint_with_no_body()
-    {
-        var api = new RecordingApi();
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Client, front);
-
-        vm.Attach(new SignaturePadControl(), new SignaturePadControl());
-
-        await vm.RejectAsync();
-
-        Assert.Equal(HttpMethod.Post, api.LastMethod);
-        Assert.Contains("front/query/reject", api.LastPath);
-        Assert.Contains("queryId=42", api.LastPath);
-        Assert.Null(api.LastBody);
-    }
-
-    [Fact]
-    public async Task Validate_without_signature_warns_and_does_not_call()
-    {
-        var api = new RecordingApi();
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Provider, front);
-
-        vm.Attach(new SignaturePadControl(), new SignaturePadControl()); // empty pads
-
-        await vm.ValidateAsync(); // no throw: returns before GoBack
-
-        Assert.Null(api.LastMethod);
-        Assert.Contains("signer", vm.StatusMessage, StringComparison.OrdinalIgnoreCase);
-    }
-
-    [Fact]
-    public void Validate_command_gates_on_signature_and_command()
-    {
-        var api = new RecordingApi();
-        var front = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-        var vm = new EstimateValidationPageViewModel(
-            SampleEstimate(commandId: null), EstimateListPerspective.Provider, front);
-
-        var proPad = new SignaturePadControl();
-        vm.Attach(proPad, new SignaturePadControl());
-
-        // No CommandId ⇒ cannot validate even after signing.
-        DrawOneStroke(proPad);
-        Assert.False(vm.ValidateCommand.CanExecute(null));
-
-        var vm2 = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Provider, front);
-        var proPad2 = new SignaturePadControl();
-        vm2.Attach(proPad2, new SignaturePadControl());
-        Assert.False(vm2.ValidateCommand.CanExecute(null)); // no signature yet
-        DrawOneStroke(proPad2);
-        Assert.True(vm2.ValidateCommand.CanExecute(null));
-    }
-
-    [Fact]
-    public void RoleLabel_reflects_perspective()
-    {
-        var front = new FrontOfficeApiClient(new RecordingApi(), "https://business.example/api/v1/");
-        var pro = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Provider, front);
-        var cli = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Client, front);
-
-        Assert.Contains("prestataire", pro.RoleLabel, StringComparison.OrdinalIgnoreCase);
-        Assert.Contains("client", cli.RoleLabel, StringComparison.OrdinalIgnoreCase);
-    }
-
-    [Fact]
-    public void Only_the_author_pad_is_writable()
-    {
-        var front = new FrontOfficeApiClient(new RecordingApi(), "https://business.example/api/v1/");
-
-        var proVm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Provider, front);
-        var proPad = new SignaturePadControl();
-        var cliPad = new SignaturePadControl();
-        proVm.Attach(proPad, cliPad);
-        Assert.False(proPad.IsReadOnly);  // provider writes the Pro pad
-        Assert.True(cliPad.IsReadOnly);
-
-        var cliVm = new EstimateValidationPageViewModel(
-            SampleEstimate(), EstimateListPerspective.Client, front);
-        var proPad2 = new SignaturePadControl();
-        var cliPad2 = new SignaturePadControl();
-        cliVm.Attach(proPad2, cliPad2);
-        Assert.True(proPad2.IsReadOnly);
-        Assert.False(cliPad2.IsReadOnly); // client writes the Client pad
-    }
-
-    [Fact]
-    public void Load_existing_signatures_renders_both_sides_in_their_pads()
-    {
-        var proStrokes = new[] { 1, 1000, 1000 };
-        var cliStrokes = new[] { 1, 9000, 9000 };
-        var front = new FrontOfficeApiClient(new RecordingApi(), "https://business.example/api/v1/");
-        var estimate = SampleEstimate();
-        estimate.SignaturePro = new EstimateSignatureDto { Strokes = proStrokes };
-        estimate.SignatureClient = new EstimateSignatureDto { Strokes = cliStrokes };
-
-        // Client perspective: both pads show the stored signatures, but
-        // only the client pad is writable.
-        var vm = new EstimateValidationPageViewModel(estimate, EstimateListPerspective.Client, front);
-        var proPad = new SignaturePadControl();
-        var cliPad = new SignaturePadControl();
-        vm.Attach(proPad, cliPad);
-
-        Assert.Equal(proStrokes, proPad.Snapshot().Strokes);
-        Assert.Equal(cliStrokes, cliPad.Snapshot().Strokes);
-        Assert.True(vm.HasProSignature);
-        Assert.True(vm.HasClientSignature);
-    }
-
-    [Fact]
-    public void Load_existing_pro_signature_renders_in_pro_pad_only()
-    {
-        var strokes = new[] { 1, 5000, 5000 };
-        var front = new FrontOfficeApiClient(new RecordingApi(), "https://business.example/api/v1/");
-        var estimate = SampleEstimate();
-        estimate.SignaturePro = new EstimateSignatureDto { Strokes = strokes, CoordinateMax = 10_000 };
-        var vm = new EstimateValidationPageViewModel(estimate, EstimateListPerspective.Provider, front);
-
-        var proPad = new SignaturePadControl();
-        var cliPad = new SignaturePadControl();
-        vm.Attach(proPad, cliPad);
-
-        Assert.Equal(strokes, proPad.Snapshot().Strokes);
-        Assert.True(cliPad.Snapshot().IsEmpty);
-        Assert.True(vm.HasProSignature);
-        Assert.False(vm.HasClientSignature);
-    }
-
-    private sealed class RecordingApi : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-        public HttpMethod? LastMethod { get; private set; }
-        public string? LastPath { get; private set; }
-        public object? LastBody { get; private set; }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            LastMethod = method;
-            LastPath = path;
-            LastBody = body;
-            return Task.FromResult(default(T)!);
-        }
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            LastMethod = method;
-            LastPath = path;
-            LastBody = body;
-            return Task.CompletedTask;
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync<T>(method, path, (object?)null, ct);
-
-        public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync(method, path, (object?)null, ct);
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
-}

src/PostIt/PostIt.Tests/FrontOfficeApiClientTests.cs

@@ -1,157 +0,0 @@
-using System.Net.Http;
-using Yavsc.Api.Client;
-
-namespace PostIt.Tests;
-
-/// <summary>
-/// Verifies <see cref="FrontOfficeApiClient"/> issues the right
-/// <c>api/v1/front/query/accept</c> / <c>.../reject</c> requests with
-/// the PostIt signature payload, using a recording fake
-/// <see cref="IYavscApiClient"/> (no network).
-/// </summary>
-public class FrontOfficeApiClientTests
-{
-    private static QueryAcceptanceRequestDto SampleBody() => new()
-    {
-        Strokes = new[] { 2, 100, 200, 300, 400 },
-        CoordinateMax = 10_000,
-        CapturedAtUtc = new DateTime(2026, 9, 21, 12, 0, 0, DateTimeKind.Utc),
-    };
-
-    [Fact]
-    public async Task Accept_posts_to_accept_endpoint_with_signature_body()
-    {
-        var api = new RecordingApi();
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        var body = SampleBody();
-        await client.AcceptQueryAsync("Rdv", 42, body);
-
-        Assert.Equal(HttpMethod.Post, api.LastMethod);
-        Assert.Equal(
-            "https://business.example/api/v1/front/query/accept?billingCode=Rdv&queryId=42",
-            api.LastPath);
-        Assert.Same(body, api.LastBody);
-    }
-
-    [Fact]
-    public async Task Reject_posts_to_reject_endpoint_with_no_body()
-    {
-        var api = new RecordingApi();
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        await client.RejectQueryAsync("Rdv", 42);
-
-        Assert.Equal(HttpMethod.Post, api.LastMethod);
-        Assert.Equal(
-            "https://business.example/api/v1/front/query/reject?billingCode=Rdv&queryId=42",
-            api.LastPath);
-        Assert.Null(api.LastBody);
-    }
-
-    [Fact]
-    public async Task Accept_returns_deserialized_response()
-    {
-        var api = new RecordingApi
-        {
-            Response = new QueryAcceptanceResponseDto
-            {
-                QueryId = 42,
-                Status = "Accepted",
-                Signature = new QuerySignatureRefDto { Id = 9, EstimateId = 5, Type = "Pro" },
-            },
-        };
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        var response = await client.AcceptQueryAsync("Rdv", 42, SampleBody());
-
-        Assert.Equal(42, response.QueryId);
-        Assert.Equal("Accepted", response.Status);
-        Assert.NotNull(response.Signature);
-        Assert.Equal("Pro", response.Signature!.Type);
-    }
-
-    [Fact]
-    public async Task Accept_rejects_invalid_arguments()
-    {
-        var api = new RecordingApi();
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        await Assert.ThrowsAsync<ArgumentException>(() => client.AcceptQueryAsync("", 42, SampleBody()));
-        await Assert.ThrowsAsync<ArgumentOutOfRangeException>(() => client.AcceptQueryAsync("Rdv", 0, SampleBody()));
-        await Assert.ThrowsAsync<ArgumentNullException>(() => client.AcceptQueryAsync("Rdv", 42, null!));
-        await Assert.ThrowsAsync<ArgumentException>(() => client.RejectQueryAsync("", 42));
-        await Assert.ThrowsAsync<ArgumentOutOfRangeException>(() => client.RejectQueryAsync("Rdv", 0));
-    }
-
-    [Fact]
-    public async Task GetEstimatePdf_gets_estimate_pdf_endpoint()
-    {
-        var api = new RecordingApi();
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        await client.GetEstimatePdfAsync(42);
-
-        Assert.Equal(HttpMethod.Get, api.LastMethod);
-        Assert.Equal(
-            "https://business.example/api/v1/front/query/42/estimate.pdf",
-            api.LastPath);
-    }
-
-    [Fact]
-    public async Task GetEstimateTex_gets_estimate_tex_endpoint()
-    {
-        var api = new RecordingApi();
-        var client = new FrontOfficeApiClient(api, "https://business.example/api/v1/");
-
-        await client.GetEstimateTexAsync(42);
-
-        Assert.Equal(HttpMethod.Get, api.LastMethod);
-        Assert.Equal(
-            "https://business.example/api/v1/front/query/42/estimate.tex",
-            api.LastPath);
-    }
-
-    private sealed class RecordingApi : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-        public HttpMethod? LastMethod { get; private set; }
-        public string? LastPath { get; private set; }
-        public object? LastBody { get; private set; }
-        public QueryAcceptanceResponseDto? Response { get; set; }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            LastMethod = method;
-            LastPath = path;
-            LastBody = body;
-
-            var response = Response ?? new QueryAcceptanceResponseDto();
-            return Task.FromResult((T)(object)response);
-        }
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            LastMethod = method;
-            LastPath = path;
-            LastBody = body;
-            return Task.CompletedTask;
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync<T>(method, path, (object?)null, ct);
-
-        public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync(method, path, (object?)null, ct);
-
-        public Task<byte[]> DownloadAsync(HttpMethod method, string path, CancellationToken ct = default)
-        {
-            LastMethod = method;
-            LastPath = path;
-            LastBody = null;
-            return Task.FromResult(Array.Empty<byte>());
-        }
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
-}

src/PostIt/PostIt.Tests/HomePageNotificationsTests.cs

@@ -1,199 +0,0 @@
-using System.Net.Http;
-using Avalonia.Controls;
-using Avalonia.Headless.XUnit;
-using Avalonia.VisualTree;
-using PostIt.Services;
-using PostIt.ViewModels;
-using PostIt.Views;
-using Yavsc.Abstract.Models.Messaging;
-using Yavsc.Api.Client;
-
-namespace PostIt.Tests;
-
-public class HomePageNotificationsTests
-{
-    [Fact]
-    public async Task Refresh_loads_public_notifications_from_the_business_host()
-    {
-        var transport = new NotificationTransport();
-        var vm = CreateViewModel(transport);
-        transport.Response = Task.FromResult(new List<Notification> { Note(1, "Information") });
-
-        await vm.RefreshNotificationsAsync();
-
-        Assert.Equal("https://business.example/api/v1/notifications", transport.LastPath);
-        Assert.True(transport.WasAnonymous);
-        Assert.Equal("Information", Assert.Single(vm.Notifications).title);
-        Assert.False(vm.IsLoadingNotifications);
-        Assert.False(vm.HasNoNotifications);
-        Assert.Null(vm.NotificationsError);
-    }
-
-    [Fact]
-    public async Task Refresh_replaces_notifications_and_distinguishes_empty_from_failed()
-    {
-        var transport = new NotificationTransport();
-        var vm = CreateViewModel(transport);
-        vm.Notifications.Add(Note(1, "Old"));
-        await vm.RefreshNotificationsAsync();
-
-        Assert.Empty(vm.Notifications);
-        Assert.True(vm.HasNoNotifications);
-
-        transport.Response = Task.FromException<List<Notification>>(new HttpRequestException("Server unavailable"));
-        await vm.RefreshNotificationsAsync();
-
-        Assert.Empty(vm.Notifications);
-        Assert.False(vm.HasNoNotifications);
-        Assert.Contains("Server unavailable", vm.NotificationsError);
-        Assert.False(vm.IsLoadingNotifications);
-
-        transport.Response = Task.FromResult(new List<Notification> { Note(2, "Recovered") });
-        await vm.RefreshNotificationsAsync();
-        Assert.Null(vm.NotificationsError);
-        Assert.Equal(2, Assert.Single(vm.Notifications).Id);
-    }
-
-    [Fact]
-    public async Task Refresh_ignores_an_older_response_after_a_newer_refresh()
-    {
-        var transport = new NotificationTransport();
-        var vm = CreateViewModel(transport);
-        var oldResponse = new TaskCompletionSource<List<Notification>>();
-        transport.Response = oldResponse.Task;
-        var oldLoad = vm.RefreshNotificationsAsync();
-        Assert.True(vm.IsLoadingNotifications);
-
-        transport.Response = Task.FromResult(new List<Notification> { Note(2, "Current") });
-        await vm.RefreshNotificationsAsync();
-        oldResponse.SetResult(new List<Notification> { Note(1, "Stale") });
-        await oldLoad;
-
-        Assert.Equal(2, Assert.Single(vm.Notifications).Id);
-        Assert.False(vm.IsLoadingNotifications);
-    }
-
-    [AvaloniaFact]
-    public async Task Login_and_logout_reload_notifications_and_discard_in_flight_private_data()
-    {
-        var tokenPath = Path.Combine(Path.GetTempPath(), $"postit-notifications-{Guid.NewGuid():N}.json");
-        var settings = new Settings();
-        var store = new TokenStore(tokenPath);
-        store.Save(new RefreshTokenRecord("test-access-token", "test-refresh-token",
-            DateTimeOffset.UtcNow.AddHours(1), null));
-        await using var api = new YavscApiClient(settings, store);
-        try
-        {
-            var session = new SessionStatusViewModel { Api = api };
-            var transport = new NotificationTransport();
-            var vm = CreateViewModel(transport, session);
-            session.Refresh();
-            Assert.False(transport.WasAnonymous);
-            Assert.EndsWith("/notifications/me", transport.LastPath);
-            var privateResponse = new TaskCompletionSource<List<Notification>>();
-            transport.Response = privateResponse.Task;
-            var privateLoad = vm.RefreshNotificationsAsync();
-            Assert.False(transport.WasAnonymous);
-            Assert.EndsWith("/notifications/me", transport.LastPath);
-
-            vm.Notifications.Add(Note(9, "Private"));
-            transport.Response = Task.FromResult(new List<Notification> { Note(2, "Public") });
-            session.SetError("Disconnected");
-            Assert.Equal(2, Assert.Single(vm.Notifications).Id);
-            Assert.True(transport.WasAnonymous);
-
-            privateResponse.SetResult(new List<Notification> { Note(1, "Late private data") });
-            await privateLoad;
-            Assert.Equal(2, Assert.Single(vm.Notifications).Id);
-        }
-        finally
-        {
-            File.Delete(tokenPath);
-        }
-    }
-
-    [AvaloniaFact]
-    public async Task Home_page_loads_on_navigation_and_renders_wrapped_titles_and_bodies()
-    {
-        var transport = new NotificationTransport
-        {
-            Response = Task.FromResult(new List<Notification> { Note(1, "Notification title") })
-        };
-        var vm = CreateViewModel(transport);
-        var page = new HomePage { DataContext = vm };
-        var nav = new NavigationPage();
-        var window = new Window { Content = nav, Width = 320, Height = 450 };
-        try
-        {
-            window.Show();
-            await nav.PushAsync(page);
-            window.UpdateLayout();
-
-            Assert.Single(vm.Notifications);
-            var texts = page.GetVisualDescendants().OfType<TextBlock>().ToArray();
-            Assert.Contains(texts, t => t.Text == "Notification title"
-                && t.TextWrapping == Avalonia.Media.TextWrapping.Wrap);
-            Assert.Contains(texts, t => t.Text == "Notification body"
-                && t.TextWrapping == Avalonia.Media.TextWrapping.Wrap);
-            var refresh = Assert.Single(page.GetVisualDescendants().OfType<Button>(),
-                b => b.Command == vm.RefreshNotificationsCommand);
-            Assert.True(refresh.IsEnabled);
-            Assert.Contains(page.GetVisualDescendants().OfType<ScrollViewer>(),
-                s => s.Extent.Height > s.Viewport.Height);
-
-            await nav.PushAsync(new ContentPage());
-            transport.Response = Task.FromResult(new List<Notification> { Note(2, "Updated title") });
-            await nav.PopAsync();
-            Assert.Equal(2, Assert.Single(vm.Notifications).Id);
-        }
-        finally
-        {
-            window.Close();
-        }
-    }
-
-    private static HomePageViewModel CreateViewModel(NotificationTransport transport,
-        SessionStatusViewModel? session = null)
-        => new(null!, new Settings(), session ?? new SessionStatusViewModel(),
-            new NotificationsApiClient(transport, "https://business.example/api/v1/"));
-
-    private static Notification Note(long id, string title)
-        => new() { Id = id, title = title, body = "Notification body", click_action = "Close" };
-
-    private sealed class NotificationTransport : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-        public string? LastPath { get; private set; }
-        public bool WasAnonymous { get; private set; }
-        public Task<List<Notification>> Response { get; set; } = Task.FromResult(new List<Notification>());
-
-        public Task<T> GetAnonymousAsync<T>(string path, CancellationToken ct = default)
-            => ReadAsync<T>(path, true);
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null,
-            CancellationToken ct = default)
-        {
-            Assert.Equal(HttpMethod.Get, method);
-            return ReadAsync<T>(path, false);
-        }
-
-        private async Task<T> ReadAsync<T>(string path, bool anonymous)
-        {
-            LastPath = path;
-            WasAnonymous = anonymous;
-            return (T)(object)await Response;
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory,
-            CancellationToken ct = default) => throw new NotSupportedException();
-        public Task CallAsync(HttpMethod method, string path, object? body = null,
-            CancellationToken ct = default) => throw new NotSupportedException();
-        public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory,
-            CancellationToken ct = default) => throw new NotSupportedException();
-        public ValueTask DisposeAsync()
-        {
-            Http.Dispose();
-            return ValueTask.CompletedTask;
-        }
-    }
-}

src/PostIt/PostIt.Tests/HomePageProviderFlowTests.cs

@@ -1,4 +1,3 @@
-using Yavsc.Abstract.Identity;
 using PostIt.ViewModels;
 
 namespace PostIt.Tests;
@@ -13,170 +12,4 @@ public class HomePageProviderFlowTests
         Assert.NotNull(vm.OpenProviderRequests);
         Assert.True(vm.OpenProviderRequests.CanExecute(null));
     }
-
-    [Fact]
-    public void HomePage_exposes_profile_command()
-    {
-        var vm = new HomePageViewModel();
-
-        Assert.NotNull(vm.OpenProfile);
-        Assert.True(vm.OpenProfile.CanExecute(null));
-    }
-
-    [Fact]
-    public void HomePage_exposes_performer_configuration_command()
-    {
-        var vm = new HomePageViewModel();
-
-        Assert.NotNull(vm.OpenPerformerConfiguration);
-        Assert.True(vm.OpenPerformerConfiguration.CanExecute(null));
-    }
-
-    [Fact]
-    public void HomePage_exposes_administration_command()
-    {
-        var vm = new HomePageViewModel();
-
-        Assert.NotNull(vm.OpenAdministration);
-        Assert.True(vm.OpenAdministration.CanExecute(null));
-    }
-
-    [Fact]
-    public void Administration_page_filters_users_by_search_text()
-    {
-        var vm = new AdministrationPageViewModel();
-        vm.Users.Add(new Yavsc.Abstract.Identity.UserInfo { UserId = "1", UserName = "alice", FullName = "Alice Example" });
-        vm.Users.Add(new Yavsc.Abstract.Identity.UserInfo { UserId = "2", UserName = "bob", FullName = "Bob Jones" });
-        vm.Users.Add(new Yavsc.Abstract.Identity.UserInfo { UserId = "3", UserName = "carol", FullName = "Carol Smith" });
-
-        vm.SearchText = "ali";
-
-        Assert.Single(vm.FilteredUsers);
-        Assert.Equal("alice", vm.FilteredUsers[0].UserName);
-    }
-
-    [Fact]
-    public void Administration_page_filters_users_by_full_name()
-    {
-        var vm = new AdministrationPageViewModel();
-        vm.Users.Add(new Yavsc.Abstract.Identity.UserInfo { UserId = "1", UserName = "alice", FullName = "Alice Example" });
-        vm.Users.Add(new Yavsc.Abstract.Identity.UserInfo { UserId = "2", UserName = "bob", FullName = "Bob Jones" });
-
-        vm.SearchText = "example";
-
-        Assert.Single(vm.FilteredUsers);
-        Assert.Equal("alice", vm.FilteredUsers[0].UserName);
-    }
-
-    [Fact]
-    public void Administration_page_tracks_selected_user()
-    {
-        var vm = new AdministrationPageViewModel();
-        var user = new Yavsc.Abstract.Identity.UserInfo { UserId = "1", UserName = "alice", FullName = "Alice Example", Email = "alice@example.com", DedicatedGoogleCalendar = "calendar-123" };
-
-        vm.Users.Add(user);
-        vm.SelectedUser = user;
-
-        Assert.Same(user, vm.SelectedUser);
-        Assert.Equal("alice", vm.SelectedUser?.UserName);
-    }
-
-    [Fact]
-    public void UserProfilePage_exposes_full_name_and_address_fields()
-    {
-        var vm = new UserProfilePageViewModel();
-
-        Assert.Equal("—", vm.FullName);
-        Assert.Equal("—", vm.Address);
-        Assert.Equal("Non configuré", vm.DedicatedGoogleCalendar);
-        Assert.Equal("Aucune information bancaire", vm.BankInfoSummary);
-        Assert.NotNull(vm.RefreshCommand);
-    }
-
-    [Fact]
-    public void ProfileUpdateRequest_allows_username_updates()
-    {
-        var request = new ProfileUpdateRequest
-        {
-            UserName = "alice.new"
-        };
-
-        Assert.Equal("alice.new", request.UserName);
-    }
-
-    [Fact]
-    public void UserProfilePage_can_save_profile_values()
-    {
-        var vm = new UserProfilePageViewModel
-        {
-            UserName = "alice.new",
-            FullName = "Alice Example",
-            Address = "14 rue de l’Érable",
-            DedicatedGoogleCalendar = "calendar-123",
-            BankInfoSummary = "FR14 2004 1010 0505 0001 3M02 606"
-        };
-
-        Assert.NotNull(vm.SaveProfileCommand);
-        Assert.False(vm.SaveProfileCommand.CanExecute(null));
-    }
-
-    [Fact]
-    public void UserProfilePage_builds_profile_payload_for_calendar_and_bank_values()
-    {
-        var vm = new UserProfilePageViewModel
-        {
-            UserName = "alice.new",
-            FullName = "Alice Example",
-            Address = "14 rue de l’Érable",
-            DedicatedGoogleCalendar = "calendar-123",
-            BankInfoSummary = "FR14 2004 1010 0505 0001 3M02 606"
-        };
-
-        var payload = vm.BuildProfileUpdateRequest();
-
-        Assert.Equal("alice.new", payload.UserName);
-        Assert.Equal("calendar-123", payload.GoogleCalendarId);
-        Assert.Null(payload.BankInfoSummary);
-    }
-
-    [Fact]
-    public void UserProfilePage_turns_placeholder_values_into_empty_payload_fields()
-    {
-        var vm = new UserProfilePageViewModel
-        {
-            UserName = "alice.new",
-            FullName = "Alice Example",
-            Address = "14 rue de l’Érable",
-            DedicatedGoogleCalendar = "Non configuré",
-            BankInfoSummary = "Aucune information bancaire"
-        };
-
-        var payload = vm.BuildProfileUpdateRequest();
-
-        Assert.Equal(string.Empty, payload.GoogleCalendarId);
-        Assert.Null(payload.BankInfoSummary);
-    }
-
-    [Fact]
-    public void PerformerConfigurationPage_preserves_current_user_id_in_save_payload()
-    {
-        var vm = new PerformerConfigurationPageViewModel
-        {
-            PerformerId = "user-42",
-            UserName = "alice",
-            ExerciseCountryCode = "fr",
-            SIREN = "123456789",
-            Website = "https://example.com",
-            Active = true,
-            AcceptNotifications = true,
-            AcceptPublicContact = true,
-            UseGeoLocalizationToReduceDistanceWithClients = true
-        };
-
-        var payload = vm.BuildPerformerProfileSettings();
-
-        Assert.Equal("user-42", payload.PerformerId);
-        Assert.Equal("alice", payload.UserName);
-        Assert.Equal("fr", payload.ExerciseCountryCode);
-    }
 }

src/PostIt/PostIt.Tests/MD/le-chant-1.md

@@ -1,34 +0,0 @@
-
-    Loin vers l'infini s'étendent
-    Les grands prés marécageux .
-    Pas un seul oiseau ne chante
-    Sur les arbres secs et creux !
-
-*(Refrain)*
-
-    Ô terre de détresse,
-    Où nous devons sans cesse,
-    Piocher, piocher .
-
-    Dans ce camp morne et sauvage
-    Entouré de murs de fer,
-    Il nous semble vivre en cage
-    Au milieu d'un grand désert .
-
-    Bruit des pas et bruit des armes,
-    Sentinelles jours et nuits,
-    Et du sang, et des cris, des larmes,
-    La mort pour celui qui fuit .
-
-    Mais un jour dans notre vie,
-    Le printemps refleurira .
-    Liberté, liberté chérie
-    Je dirai : « Tu es à moi ! »
-
-*(Dernier refrain)*
-
-    Ô terre d'allégresse,
-    Où nous pourrons sans cesse,
-    Aimer, aimer !
-
-[audio : Mario Hacquard - Youtube](https://www.youtube.com/watch?v=ogw_mgk1pFs)

src/PostIt/PostIt.Tests/MarkdownEditorScrollTests.cs

@@ -1,143 +0,0 @@
-using Avalonia;
-using Avalonia.Controls;
-using Avalonia.Controls.Primitives;
-using Avalonia.Headless.XUnit;
-using Avalonia.LogicalTree;
-using Avalonia.Threading;
-using Avalonia.VisualTree;
-using AvaloniaEdit;
-using PostIt.Controls;
-using PostIt.Views.Blogs;
-
-namespace PostIt.Tests;
-
-public class MarkdownEditorScrollTests
-{
-    private static readonly string LongArticle =
-        string.Join("\n\n", Enumerable.Range(1, 100).Select(i => $"Paragraph {i}: article content."));
-
-    [AvaloniaTheory]
-    [InlineData(false)]
-    [InlineData(true)]
-    public void Long_article_scrolls_to_the_end_and_adapts_to_resizing(bool preview)
-    {
-        var editor = new MarkdownEditorControl
-        {
-            MarkdownText = LongArticle,
-            IsPreviewVisible = preview
-        };
-        var window = new Window { Width = 600, Height = 400, Content = editor };
-        try
-        {
-            window.Show();
-            Dispatcher.UIThread.RunJobs();
-            window.UpdateLayout();
-
-            var scroller = FindArticleScroller(editor, preview);
-            AssertScrollable(scroller);
-            var initialViewport = scroller.Viewport.Height;
-
-            window.Height = 300;
-            Dispatcher.UIThread.RunJobs();
-            window.UpdateLayout();
-
-            Assert.True(scroller.Viewport.Height < initialViewport);
-            AssertScrollable(scroller);
-        }
-        finally
-        {
-            CloseWindow(window, editor);
-        }
-    }
-
-    [AvaloniaTheory]
-    [InlineData(false)]
-    [InlineData(true)]
-    public void Blog_page_bounds_the_article_viewport(bool preview)
-    {
-        var page = new BlogsPage();
-        var editor = page.GetLogicalDescendants().OfType<MarkdownEditorControl>().Single();
-        editor.MarkdownText = LongArticle;
-        editor.IsPreviewVisible = preview;
-        var posts = page.FindControl<ListBox>("PostsListBox")!;
-        posts.ItemsSource = Enumerable.Range(1, 50)
-            .Select(i => new Yavsc.Blogspot.BlogPostDto { Title = $"Post {i}" }).ToArray();
-        var navigation = new NavigationPage();
-        navigation.PushAsync(page).GetAwaiter().GetResult();
-        var window = new Window { Width = 800, Height = 700, Content = navigation };
-        try
-        {
-            window.Show();
-            Dispatcher.UIThread.RunJobs();
-            window.UpdateLayout();
-
-            var scroller = FindArticleScroller(editor, preview);
-            Assert.InRange(scroller.Viewport.Height, 1, window.ClientSize.Height);
-            AssertScrollable(scroller);
-            AssertScrollable(posts.GetVisualDescendants().OfType<ScrollViewer>().Single());
-            var editorBottom = editor.TranslatePoint(new Point(0, editor.Bounds.Height), window);
-            Assert.NotNull(editorBottom);
-            Assert.InRange(editorBottom.Value.Y, 1, window.ClientSize.Height);
-        }
-        finally
-        {
-            CloseWindow(window, editor);
-        }
-    }
-
-    [AvaloniaTheory]
-    [InlineData(false)]
-    [InlineData(true)]
-    public void Short_article_needs_no_vertical_scrollbar(bool preview)
-    {
-        var editor = new MarkdownEditorControl
-        {
-            MarkdownText = "Short article",
-            IsPreviewVisible = preview
-        };
-        var window = new Window { Width = 600, Height = 400, Content = editor };
-        try
-        {
-            window.Show();
-            Dispatcher.UIThread.RunJobs();
-            window.UpdateLayout();
-
-            var scroller = FindArticleScroller(editor, preview);
-            Assert.True(scroller.Extent.Height <= scroller.Viewport.Height);
-            Assert.DoesNotContain(scroller.GetVisualDescendants().OfType<ScrollBar>(),
-                bar => bar.Orientation == Avalonia.Layout.Orientation.Vertical && bar.IsVisible);
-        }
-        finally
-        {
-            CloseWindow(window, editor);
-        }
-    }
-
-    private static void CloseWindow(Window window, MarkdownEditorControl editor)
-    {
-        // The package's shared renderer caches the visual; detach it between headless applications.
-        editor.FindControl<MarkdownViewer.Core.Controls.MarkdownViewer>("PreviewViewer")!.Content = null;
-        window.UpdateLayout();
-        window.Close();
-    }
-
-    private static ScrollViewer FindArticleScroller(MarkdownEditorControl editor, bool preview)
-    {
-        if (!preview)
-            return editor.GetVisualDescendants().OfType<TextEditor>().Single()
-                .GetVisualDescendants().OfType<ScrollViewer>().Single();
-
-        return editor.FindControl<ScrollViewer>("PreviewScrollViewer")!;
-    }
-
-    private static void AssertScrollable(ScrollViewer scroller)
-    {
-        Assert.True(scroller.Extent.Height > scroller.Viewport.Height,
-            $"Expected overflow, but extent={scroller.Extent.Height}, viewport={scroller.Viewport.Height}.");
-        Assert.Contains(scroller.GetVisualDescendants().OfType<ScrollBar>(),
-            bar => bar.Orientation == Avalonia.Layout.Orientation.Vertical && bar.IsVisible);
-        scroller.ScrollToEnd();
-        Assert.True(scroller.Offset.Y > 0);
-        Assert.Equal(scroller.Extent.Height - scroller.Viewport.Height, scroller.Offset.Y, 1);
-    }
-}

src/PostIt/PostIt.Tests/MyFilesPageHeadlessTests.cs

@@ -1,208 +0,0 @@
-using System.Net.Http;
-using Avalonia;
-using Avalonia.Controls;
-using Avalonia.Headless.XUnit;
-using Avalonia.VisualTree;
-using CommunityToolkit.Mvvm.Input;
-using PostIt.ViewModels;
-using PostIt.Views;
-using Yavsc.Api.Client;
-
-namespace PostIt.Tests;
-
-/// <summary>
-/// Headless UI coverage for the "Mes fichiers" page
-/// (<see cref="MyFilesPage"/>). The user reported that once a file
-/// is listed, "l'item est inerte au click, et ses boutons restent
-/// grisés, désactivés" — neither the row nor its action buttons
-/// (Télécharger / Supprimer) respond to a click.
-///
-/// <para>These tests mount a real <see cref="MyFilesPage"/> under
-/// the Avalonia headless platform with a stub
-/// <see cref="IYavscApiClient"/> that lists one file, then walk the
-/// realised visual tree to find the row's action buttons and
-/// assert the two things that would silently break and reproduce
-/// the "grayed / inert" symptom:</para>
-/// <list type="number">
-///   <item><description>The <c>Command</c> binding
-///   (<c>$parent[vm:MyFilesViewModel].DownloadFileCommand</c>)
-///   resolved to a non-null command — a null command leaves the
-///   button disabled (grayed) and click-silent.</description></item>
-///   <item><description>The command is <b>armed</b>
-///   (<c>CanExecute</c> true) for the listed file — an
-///   <c>AsyncRelayCommand</c> with
-///   <c>AllowConcurrentExecutions=false</c> (the
-///   <see cref="CommunityToolkit.Mvvm.Input.RelayCommandAttribute"/>
-///   default) disables itself while running; a button stuck
-///   "running" is exactly the grayed-and-inert report.</description></item>
-///   <item><description>Executing the command actually invokes the
-///   file download / delete on the API client — the row
-///   "activates" on click instead of being inert.</description></item>
-/// </list>
-/// <para>The OS save picker is absent under headless, so
-/// <c>FileSaveHelpers.SaveAsync</c> throws or cancels and the
-/// download command's <c>catch</c> sets an error status — but the
-/// API download is awaited <em>before</em> the picker, so the call
-/// is recorded regardless. We do not <c>await</c> the command's
-/// <c>ExecutionTask</c> to completion, to avoid blocking on the
-/// (platform-dependent) picker.</para>
-/// </summary>
-public class MyFilesPageHeadlessTests
-{
-    private static (MyFilesPage page, MyFilesViewModel vm, StubFsApi api) CreatePage()
-    {
-        var api = new StubFsApi();
-        var fsClient = new UserFilesApiClient(api, "https://blogs.example/api/v1/");
-        var vm = new MyFilesViewModel(fsClient);
-        var page = new MyFilesPage { DataContext = vm };
-        return (page, vm, api);
-    }
-
-    /// <summary>
-    /// Mount the page the way the app does — pushed onto a
-    /// <see cref="NavigationPage"/> shown in a <see cref="Window"/>
-    /// (a <see cref="ContentPage"/> realizes its content template via
-    /// the navigation host, cf. <c>RdvPageHeadlessTests</c>) — after
-    /// listing a single file by awaiting
-    /// <see cref="MyFilesViewModel.InitializeAsync"/>. Populating
-    /// <see cref="MyFilesViewModel.Files"/> before the first layout
-    /// pass lets the <c>ItemsControl</c> realise its item templates
-    /// under headless.
-    /// </summary>
-    private static async Task<(MyFilesPage page, MyFilesViewModel vm, StubFsApi api)> MountAsync()
-    {
-        var (page, vm, api) = CreatePage();
-        await vm.InitializeAsync();
-        var nav = new NavigationPage();
-        nav.PushAsync(page).GetAwaiter().GetResult();
-        var window = new Window { Content = nav };
-        window.Show();
-        // Let bindings / the ItemsControl item templates apply.
-        await Task.Delay(50);
-        return (page, vm, api);
-    }
-
-    /// <summary>
-    /// Find the first action button in a file row whose content
-    /// matches <paramref name="content"/>. The file rows live in an
-    /// <c>ItemsControl</c> DataTemplate (no <c>x:Name</c>), so we
-    /// walk the visual tree.
-    /// </summary>
-    private static Button? FindRowButton(MyFilesPage page, string content)
-        => page.GetVisualDescendants()
-            .OfType<Button>()
-            .FirstOrDefault(b => b.Content is string s && s == content);
-
-    [AvaloniaFact]
-    public async Task Download_button_on_a_file_row_is_bound_armed_and_fires_on_click()
-    {
-        var (page, vm, api) = await MountAsync();
-
-        // Sanity: the listing populated a file row.
-        Assert.NotEmpty(vm.Files);
-        Assert.NotNull(vm.Files[0].Id);
-
-        var downloadBtn = FindRowButton(page, "Télécharger");
-        Assert.NotNull(downloadBtn);
-        Assert.NotNull(downloadBtn!.Command);               // binding resolved (not grayed-via-null)
-        var param = downloadBtn.CommandParameter;
-        Assert.True(downloadBtn.Command!.CanExecute(param), // armed (not stuck running)
-            "Télécharger must be armed (CanExecute true) for a listed file.");
-
-        // Act: click → fire the command.
-        downloadBtn.Command.Execute(param);
-
-        // Assert: the row activated — the API download was invoked
-        // (it is awaited before the headless-absent save picker).
-        var recorded = false;
-        for (int i = 0; i < 40; i++)
-        {
-            if (api.Calls.Any(c => c.Method == HttpMethod.Get && c.Path == "fs/file/42"))
-            {
-                recorded = true;
-                break;
-            }
-            await Task.Delay(25);
-        }
-        Assert.True(recorded,
-            "Clicking Télécharger must invoke GET fs/file/{id} on the API client.");
-    }
-
-    [AvaloniaFact]
-    public async Task Delete_button_on_a_file_row_is_bound_armed_and_fires_on_click()
-    {
-        var (page, vm, api) = await MountAsync();
-
-        Assert.NotEmpty(vm.Files);
-
-        var deleteBtn = FindRowButton(page, "Supprimer");
-        Assert.NotNull(deleteBtn);
-        Assert.NotNull(deleteBtn!.Command);
-        var param = deleteBtn.CommandParameter;
-        Assert.True(deleteBtn.Command!.CanExecute(param),
-            "Supprimer must be armed (CanExecute true) for a listed file.");
-
-        deleteBtn.Command.Execute(param);
-
-        var recorded = false;
-        for (int i = 0; i < 40; i++)
-        {
-            if (api.Calls.Any(c => c.Method == HttpMethod.Delete))
-            {
-                recorded = true;
-                break;
-            }
-            await Task.Delay(25);
-        }
-        Assert.True(recorded,
-            "Clicking Supprimer must invoke DELETE fs/{path} on the API client.");
-    }
-
-    private sealed class StubFsApi : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-
-        public List<(HttpMethod Method, string Path, object? Body)> Calls { get; } = new();
-
-        private void Record(HttpMethod method, string path, object? body)
-            => Calls.Add((method, path, body));
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            Record(method, path, body);
-            if (typeof(T) == typeof(UserDirectoryDto))
-            {
-                var dir = new UserDirectoryDto
-                {
-                    UserName = "alice",
-                    Files = new[]
-                    {
-                        new FileEntryDto { Id = 42, Name = "note.txt", Size = 4 }
-                    }
-                };
-                return Task.FromResult((T)(object)dir);
-            }
-            return Task.FromResult(default(T)!);
-        }
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            Record(method, path, body);
-            return Task.CompletedTask;
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync<T>(method, path, (object?)null, ct);
-
-        public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => CallAsync(method, path, (object?)null, ct);
-
-        public Task<byte[]> DownloadAsync(HttpMethod method, string path, CancellationToken ct = default)
-        {
-            Record(method, path, null);
-            return Task.FromResult(new byte[] { 1, 2, 3, 4 });
-        }
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
-}

src/PostIt/PostIt.Tests/OidcStubAuthority.cs

@@ -21,11 +21,9 @@ public sealed class OIDCStubAuthority : IAsyncDisposable, IDisposable
     private readonly RSA _rsa;
     private readonly string _kid;
     private readonly CancellationTokenSource _cts = new();
-    private readonly HashSet<string> _refreshTokens = new(StringComparer.Ordinal);
 
     public string Issuer { get; }
     public string LoopbackRedirectUri { get; }
-    public int RefreshRequestCount { get; private set; }
 
     private OIDCStubAuthority(HttpListener listener, RSA rsa, string kid, string issuer, string loopback)
     {
@@ -102,7 +100,7 @@ public sealed class OIDCStubAuthority : IAsyncDisposable, IDisposable
         ["response_types_supported"] = new[] { "code" },
         ["subject_types_supported"] = new[] { "public" },
         ["id_token_signing_alg_values_supported"] = new[] { "RS256" },
-        ["grant_types_supported"] = new[] { "authorization_code", "refresh_token" },
+        ["grant_types_supported"] = new[] { "authorization_code" },
         ["code_challenge_methods_supported"] = new[] { "S256" },
     };
 
@@ -134,16 +132,6 @@ public sealed class OIDCStubAuthority : IAsyncDisposable, IDisposable
             body = await reader.ReadToEndAsync();
 
         var form = ParseForm(body);
-        if (form.TryGetValue("grant_type", out var grantType) && grantType == "refresh_token")
-        {
-            RefreshRequestCount++;
-            if (!form.TryGetValue("refresh_token", out var suppliedToken)
-                || !_refreshTokens.Remove(suppliedToken))
-            {
-                await WriteJsonAsync(ctx.Response, new { error = "invalid_grant" }, 400);
-                return;
-            }
-        }
         // We accept any code and don't validate PKCE on the stub side;
         // the OidcClient itself validates the redirect_uri match.
         var now = DateTimeOffset.UtcNow.ToUnixTimeSeconds();
@@ -154,13 +142,11 @@ public sealed class OIDCStubAuthority : IAsyncDisposable, IDisposable
             ["aud"] = form.TryGetValue("client_id", out var cid) ? cid : "postit-tests",
             ["exp"] = now + 600,
             ["iat"] = now,
-            ["jti"] = Guid.NewGuid().ToString("N"),
         };
 
         var accessToken = SignJwt(claims);
         var refreshToken = Convert.ToBase64String(System.Security.Cryptography.RandomNumberGenerator.GetBytes(32))
             .TrimEnd('=').Replace('+', '-').Replace('/', '_');
-        _refreshTokens.Add(refreshToken);
         var response = new
         {
             access_token = accessToken,
@@ -207,10 +193,10 @@ public sealed class OIDCStubAuthority : IAsyncDisposable, IDisposable
         return dict;
     }
 
-    private static async Task WriteJsonAsync(HttpListenerResponse response, object payload, int statusCode = 200)
+    private static async Task WriteJsonAsync(HttpListenerResponse response, object payload)
     {
         response.ContentType = "application/json";
-        response.StatusCode = statusCode;
+        response.StatusCode = 200;
         var bytes = Encoding.UTF8.GetBytes(JsonSerializer.Serialize(payload));
         await response.OutputStream.WriteAsync(bytes);
         response.Close();

src/PostIt/PostIt.Tests/PostIt.Tests.csproj

@@ -8,13 +8,14 @@
     <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
     <AssemblyVersion>1.1.0.0</AssemblyVersion>
     <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-estimate.1+364.Branch.feature-estimate.Sha.3d6ab6e72f9ba4ccfa250a1cce154b550281405e</InformationalVersion>
-    <Version>1.1.0-estimate.1</Version>
+    <InformationalVersion>1.1.0-feat-sign-estimate.1+306.Branch.feat-sign-estimate.Sha.e9a33695b38154859729b61d1280e596f1597acf</InformationalVersion>
+    <Version>1.1.0-feat-sign-estimate.1</Version>
   </PropertyGroup>
   <ItemGroup>
     <PackageReference Include="Microsoft.NET.Test.Sdk" />
     <PackageReference Include="Xamarin.UITest" />
     <PackageReference Include="xunit.v3" />
+    <PackageReference Include="xunit.runner.visualstudio" />
     <PackageReference Include="coverlet.collector" />
     <PackageReference Include="Avalonia.Headless" />
     <PackageReference Include="Avalonia.Headless.XUnit" />

src/PostIt/PostIt.Tests/PostItViewModelTests.cs

@@ -1,132 +1,12 @@
-using Avalonia.Controls;
-using Avalonia.Headless.XUnit;
-using Avalonia.Threading;
-using Avalonia.VisualTree;
 using Yavsc.Blogspot;
 using Yavsc.Api.Client;
 using PostIt.Services;
 using PostIt.ViewModels;
-using PostIt.Views.Blogs;
 
 namespace PostIt.Tests;
 
 public class PostItViewModelTests
 {
-    [Fact]
-    public void Draft_modified_tracks_title_body_and_attachments_not_publication()
-    {
-        var vm = new BlogsViewModel(new BlogApiClient(new ThrowingYavscApiClient(), "http://localhost/"));
-        vm.SelectedPost = new BlogPostDto { Id = 42, AuthorId = "tester", Title = "Titre", Article = "Corps" };
-        Assert.False(vm.IsDraftModified);
-        vm.DraftIsPublished = true;
-        Assert.False(vm.IsDraftModified);
-        vm.DraftTitle = "Autre";
-        Assert.True(vm.IsDraftModified);
-        vm.DraftTitle = "Titre";
-        Assert.False(vm.IsDraftModified);
-        vm.DraftArticleDocument!.Insert(0, "Edit ");
-        Assert.True(vm.IsDraftModified);
-        vm.DraftArticle = "Corps";
-        Assert.False(vm.IsDraftModified);
-        vm.DraftAttachments.Add(new BlogUploadFile("note.txt", new byte[] { 1 }));
-        Assert.True(vm.IsDraftModified);
-    }
-
-    [AvaloniaFact]
-    public async Task Save_keeps_selection_and_editor_open_and_resets_highlight()
-    {
-        var recorder = new CallRecorder();
-        var vm = new BlogsViewModel(new BlogApiClient(new RecordingYavscApiClient(recorder),
-            "https://blogs.example.test/api/v1/"));
-        var selected = new BlogPostDto { Id = 42, AuthorId = "tester", Title = "Titre", Article = "Corps" };
-        vm.Posts.Add(selected);
-        vm.SearchText = "";
-        vm.SelectedPost = selected;
-        var page = new BlogsPage { DataContext = vm };
-        var navigation = new NavigationPage();
-        await navigation.PushAsync(page);
-        var window = new Window { Content = navigation };
-        try
-        {
-            window.Show();
-            Dispatcher.UIThread.RunJobs();
-            selected = Assert.Single(vm.FilteredPosts);
-            selected.AuthorId = "tester";
-            selected.Title = "Titre";
-            selected.Article = "Corps";
-            page.PostsListBox.SelectedItem = selected;
-            Dispatcher.UIThread.RunJobs();
-            Assert.Same(selected, page.PostsListBox.SelectedItem);
-            Assert.Same(selected, vm.SelectedPost);
-            Assert.DoesNotContain("modified", page.SaveButton.Classes);
-            vm.DraftTitle = "Titre modifié";
-            Dispatcher.UIThread.RunJobs();
-            Assert.Contains("modified", page.SaveButton.Classes);
-            Assert.Equal(Avalonia.Media.FontWeight.Bold, page.SaveButton.FontWeight);
-            Assert.Same(vm.SaveCommand, page.SaveButton.Command);
-            await vm.SaveAsync();
-            Dispatcher.UIThread.RunJobs();
-            Assert.Same(page, navigation.NavigationStack.Last());
-            Assert.Same(selected, vm.SelectedPost);
-            Assert.Same(selected, page.PostsListBox.SelectedItem);
-            Assert.Equal("Titre modifié", vm.DraftTitle);
-            Assert.Equal("Corps", vm.DraftArticle);
-            Assert.DoesNotContain("modified", page.SaveButton.Classes);
-        }
-        finally
-        {
-            window.Close();
-        }
-    }
-
-    [Fact]
-    public async Task Failed_save_preserves_draft_attachments_and_modified_state()
-    {
-        var vm = new BlogsViewModel(new BlogApiClient(new ThrowingYavscApiClient(), "http://localhost/"));
-        var post = new BlogPostDto { Id = 42, AuthorId = "tester", Title = "Titre", Article = "Corps" };
-        vm.SelectedPost = post;
-        vm.DraftTitle = "Titre modifié";
-        vm.DraftAttachments.Add(new BlogUploadFile("note.txt", new byte[] { 1 }));
-        var article = vm.DraftArticle;
-        await vm.SaveAsync();
-        Assert.Same(post, vm.SelectedPost);
-        Assert.Equal("Titre modifié", vm.DraftTitle);
-        Assert.Equal(article, vm.DraftArticle);
-        Assert.Single(vm.DraftAttachments);
-        Assert.True(vm.IsDraftModified);
-        Assert.False(vm.IsBusy);
-    }
-
-    [AvaloniaFact]
-    public void Published_badge_tracks_post_publication_state()
-    {
-        var post = new BlogPostDto { Id = 42, Title = "Test post", IsPublished = true };
-        var page = new BlogsPage();
-        var row = page.PostsListBox.ItemTemplate!.Build(post)!;
-        row.DataContext = post;
-        var window = new Window { Content = row };
-        try
-        {
-            window.Show();
-            Dispatcher.UIThread.RunJobs();
-            var badge = Assert.Single(row.GetVisualDescendants().OfType<Border>(),
-                border => border.Name == "PublishedBadge");
-
-            Assert.True(badge.IsVisible);
-
-            post.IsPublished = false;
-            Dispatcher.UIThread.RunJobs();
-            Assert.False(badge.IsVisible);
-
-            post.IsPublished = true;
-            Dispatcher.UIThread.RunJobs();
-            Assert.True(badge.IsVisible);
-        }
-        finally
-        {
-            window.Close();
-        }
-    }
 
     [Fact]
     public void SearchCommand_filters_posts_by_title_article_or_author()
@@ -181,22 +61,11 @@ public class PostItViewModelTests
         var viewModel = new BlogsViewModel(blog);
 
         viewModel.SelectedPost = new BlogPostDto { Id = 42, IsPublished = false };
-        var changes = new List<string?>();
-        viewModel.SelectedPost.PropertyChanged += (_, args) => changes.Add(args.PropertyName);
 
         await viewModel.SetPublishStateAsync(true);
 
         Assert.True(api.LastPublishValue);
         Assert.True(viewModel.DraftIsPublished);
-        Assert.True(viewModel.SelectedPost.IsPublished);
-        Assert.Equal(new[] { nameof(BlogPostDto.IsPublished) }, changes);
-
-        await viewModel.SetPublishStateAsync(false);
-
-        Assert.False(api.LastPublishValue);
-        Assert.False(viewModel.DraftIsPublished);
-        Assert.False(viewModel.SelectedPost.IsPublished);
-        Assert.Equal(new[] { nameof(BlogPostDto.IsPublished), nameof(BlogPostDto.IsPublished) }, changes);
     }
 
     /// <summary>Test fake that always throws if the API is invoked.</summary>

src/PostIt/PostIt.Tests/ResourceUsageApiClientTests.cs

@@ -1,117 +0,0 @@
-using System.Net.Http;
-using System.Text.Json;
-using Yavsc.Abstract.Resources;
-using Yavsc.Api.Client;
-
-namespace PostIt.Tests;
-
-public class ResourceUsageApiClientTests
-{
-    [Fact]
-    public async Task GetCurrentAsync_calls_user_usage_endpoint()
-    {
-        var fake = new FakeYavscApiClient();
-        var client = new ResourceUsageApiClient(fake, "https://example.invalid/api/v1/");
-
-        var usage = await client.GetCurrentAsync();
-
-        Assert.Equal("https://example.invalid/api/v1/resource-usage/me", fake.LastPath);
-        Assert.Equal("GET", fake.LastMethod);
-        Assert.Equal(12.5m, usage.ApiCalls);
-        Assert.Equal(3.2m, usage.CpuSeconds);
-    }
-
-    [Fact]
-    public async Task GetAdminOverviewAsync_calls_admin_usage_endpoint()
-    {
-        var fake = new FakeYavscApiClient();
-        var client = new ResourceUsageApiClient(fake, "https://example.invalid/api/v1/");
-
-        var usage = await client.GetAdminOverviewAsync();
-
-        Assert.Equal("https://example.invalid/api/v1/resource-usage/admin", fake.LastPath);
-        Assert.Equal("GET", fake.LastMethod);
-        Assert.Equal(2, usage.Count);
-        Assert.Equal("administrator", usage[0].UserName);
-    }
-
-    private sealed class FakeYavscApiClient : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-        public string? LastPath { get; private set; }
-        public string? LastMethod { get; private set; }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            LastMethod = method.Method;
-            LastPath = path;
-
-            if (typeof(T) == typeof(ResourceUsageSummary))
-            {
-                var summary = new ResourceUsageSummary
-                {
-                    UserId = "user-42",
-                    UserName = "alice",
-                    ApiCalls = 12.5m,
-                    CpuSeconds = 3.2m,
-                    BandwidthMb = 18.4m,
-                    StorageMb = 51.2m,
-                    EstimatedCompensation = 4.9m,
-                    Currency = "EUR",
-                    RecordedAtUtc = DateTimeOffset.UtcNow
-                };
-
-                return Task.FromResult((T)(object)summary);
-            }
-
-            if (typeof(T) == typeof(List<ResourceUsageSummary>))
-            {
-                var list = new List<ResourceUsageSummary>
-                {
-                    new()
-                    {
-                        UserId = "admin-user",
-                        UserName = "administrator",
-                        ApiCalls = 90m,
-                        CpuSeconds = 14m,
-                        BandwidthMb = 500m,
-                        StorageMb = 2048m,
-                        EstimatedCompensation = 32m,
-                        Currency = "EUR",
-                        RecordedAtUtc = DateTimeOffset.UtcNow
-                    },
-                    new()
-                    {
-                        UserId = "user-99",
-                        UserName = "bob",
-                        ApiCalls = 40m,
-                        CpuSeconds = 7m,
-                        BandwidthMb = 120m,
-                        StorageMb = 600m,
-                        EstimatedCompensation = 15m,
-                        Currency = "EUR",
-                        RecordedAtUtc = DateTimeOffset.UtcNow
-                    }
-                };
-
-                return Task.FromResult((T)(object)list);
-            }
-
-            throw new NotSupportedException($"Unsupported type: {typeof(T).FullName}");
-        }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => throw new NotSupportedException();
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-            => Task.CompletedTask;
-
-        public Task CallAsync(HttpMethod method, string path, Func<HttpContent> contentFactory, CancellationToken ct = default)
-            => Task.CompletedTask;
-
-        public Task<byte[]> DownloadAsync(HttpMethod method, string path, CancellationToken ct = default)
-            => Task.FromResult(Array.Empty<byte>());
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
-}

src/PostIt/PostIt.Tests/SessionStatusBannerTests.cs

@@ -1,5 +1,6 @@
 using Avalonia.Controls;
 using Avalonia.Headless.XUnit;
+using Avalonia.Styling;
 using Avalonia.VisualTree;
 using PostIt.ViewModels;
 using PostIt.Views;
@@ -22,36 +23,41 @@ namespace PostIt.Tests;
 /// <c>new Window().Show()</c> throws because the harness has not
 /// been initialised for that thread.</para>
 ///
-/// <para>These tests set the DataContext directly on the banner
-/// mounted in the window. The production code path is exercised
+/// <para>The session banner's <c>DataContext</c> is not wired in
+/// these tests: <c>App.OnFrameworkInitializationCompleted</c> is
+/// not called in a unit test, so we set the DataContext on the
+/// banner directly. The production code path is exercised
 /// end-to-end by the manual launch, not here.</para>
 /// </summary>
-public class SessionStatusBannerTests : IDisposable
+public class SessionStatusBannerTests
 {
-    private MainWindow? _window;
-
     [AvaloniaFact]
-    public void Banner_renders_four_buttons_in_the_visual_tree()
+    public void Banner_renders_three_buttons_in_the_visual_tree()
     {
-        SessionStatusBanner banner = CreateBanner();
+        MainWindow window = new MainWindow();
+        window.Show();
 
-        var buttons = banner.GetVisualDescendants()
+        var buttons = window.GetVisualDescendants()
             .OfType<Button>()
             .ToList();
 
+        // Three buttons, named by their content text: Se
+        // déconnecter, Se connecter, Paramètres. If any one is
+        // missing, the user has no way to trigger the
+        // corresponding navigation event.
         Assert.Equal(4, buttons.Count);
         Assert.Contains(buttons, b => b.Content as string == "Se déconnecter");
         Assert.Contains(buttons, b => b.Content as string == "Se connecter");
         Assert.Contains(buttons, b => b.Content as string == "Paramètres");
-        Assert.Contains(buttons, b => b.Content as string == "À propos");
     }
 
     [AvaloniaFact]
     public void Banner_login_button_is_visible_when_logged_out()
     {
-        SessionStatusBanner banner = CreateBanner();
+        MainWindow window = new MainWindow();
+        window.Show();
 
-        var login = banner.GetVisualDescendants()
+        var login = window.GetVisualDescendants()
             .OfType<Button>()
             .Single(b => b.Content as string == "Se connecter");
 
@@ -63,9 +69,12 @@ public class SessionStatusBannerTests : IDisposable
     [AvaloniaFact]
     public void Banner_logout_button_is_hidden_when_logged_out()
     {
-        SessionStatusBanner banner = CreateBanner();
+       SessionStatusBanner banner = CreateBanner();
+
+        Assert.False((banner.DataContext as SessionStatusViewModel)!
+        .IsLoggedIn);  // VM default
+
 
-        Assert.False(Assert.IsType<SessionStatusViewModel>(banner.DataContext).IsLoggedIn);
         var logout = banner.GetVisualDescendants()
             .OfType<Button>()
             .Single(b => b.Content as string == "Se déconnecter");
@@ -82,23 +91,22 @@ public class SessionStatusBannerTests : IDisposable
             .OfType<Button>()
             .Single(b => b.Content as string == "Paramètres");
 
-        // Paramètres has no IsVisible binding and is always shown.
+        // Paramètres is the only button with no IsVisible
+        // binding — always shown. The user's only path to the
+        // settings page goes through this button.
         Assert.True(settings.IsVisible);
     }
 
-    private SessionStatusBanner CreateBanner()
+    private static SessionStatusBanner CreateBanner()
     {
-        _window = new MainWindow();
-        _window.Show();
-        var banner = _window.GetVisualDescendants()
-            .OfType<SessionStatusBanner>()
-            .Single();
-        banner.DataContext = new SessionStatusViewModel();
+        MainWindow window = new MainWindow();
+        window.Show();
+        var banner = window.MainView.SessionBanner;
+        var status = new SessionStatusViewModel();
+        banner.DataContext = status;
         return banner;
     }
 
-    public void Dispose() => _window?.Close();
-
     [AvaloniaFact]
     public void Banner_session_label_reflects_DataContext()
     {

src/PostIt/PostIt.Tests/StatusBarTests.cs

@@ -1,38 +0,0 @@
-using Avalonia.Controls;
-using Avalonia.Headless.XUnit;
-using Avalonia.VisualTree;
-using PostIt.Controls;
-using PostIt.Models;
-using PostIt.ViewModels;
-
-namespace PostIt.Tests;
-
-/// <summary>
-/// The <see cref="StatusBar"/> surfaces the page's action status
-/// (success / warning / error message). The user reported being
-/// unable to copy these messages — the status text was a
-/// <c>TextBlock</c>, which Avalonia does not make selectable. It is
-/// now a <see cref="SelectableTextBlock"/> so the message can be
-/// selected and copied (Ctrl+C / context menu). This test pins that:
-/// if the message control regresses to a plain <c>TextBlock</c>,
-/// selectability is lost and the test fails.
-/// </summary>
-public class StatusBarTests
-{
-    [AvaloniaFact]
-    public void Status_message_is_rendered_by_a_SelectableTextBlock()
-    {
-        var bar = new StatusBar {
-            DataContext =
-            StatusNotice.Error("Échec de la suppression : boom") };
-        var window = new Window { Content = bar };
-        window.Show();
-
-        var message = bar.GetVisualDescendants()
-            .OfType<SelectableTextBlock>()
-            .FirstOrDefault();
-
-        Assert.NotNull(message);
-        Assert.Equal("Échec de la suppression : boom", message!.Text);
-    }
-}

src/PostIt/PostIt.Tests/YavscApiClientTests.cs

@@ -17,56 +17,6 @@ namespace PostIt.Tests;
 /// </summary>
 public class YavscApiClientTests
 {
-    [Fact]
-    public async Task GetAnonymousAsync_surfaces_http_errors_without_attempting_login_or_retry()
-    {
-        using var apiServer = new StubApiServer(forceFirstRequest: true);
-        await apiServer.StartAsync();
-        var tokensPath = TokensPath();
-        try
-        {
-            await using var client = new YavscApiClient(new Settings(), new TokenStore(tokensPath));
-            await Assert.ThrowsAsync<HttpRequestException>(() =>
-                client.GetAnonymousAsync<List<StubApiServer.Post>>(
-                    apiServer.BaseUrl + "/posts", TestContext.Current.CancellationToken));
-            Assert.Equal(1, apiServer.RequestCount);
-            Assert.Empty(apiServer.SeenBearers);
-        }
-        finally
-        {
-            File.Delete(tokensPath);
-        }
-    }
-
-    [Theory]
-    [InlineData(false)]
-    [InlineData(true)]
-    public async Task GetAnonymousAsync_does_not_require_or_send_session_credentials(bool hasSession)
-    {
-        using var apiServer = new StubApiServer();
-        await apiServer.StartAsync();
-        var tokensPath = TokensPath();
-        try
-        {
-            var store = new TokenStore(tokensPath);
-            if (hasSession)
-                store.Save(new RefreshTokenRecord("test-access-token", "test-refresh-token",
-                    DateTimeOffset.UtcNow.AddHours(1), null));
-            await using var client = new YavscApiClient(new Settings(), store);
-
-            var posts = await client.GetAnonymousAsync<List<StubApiServer.Post>>(
-                apiServer.BaseUrl + "/posts", TestContext.Current.CancellationToken);
-
-            Assert.Equal(2, posts.Count);
-            Assert.Equal(1, apiServer.RequestCount);
-            Assert.Empty(apiServer.SeenBearers);
-        }
-        finally
-        {
-            File.Delete(tokensPath);
-        }
-    }
-
     private static int GetFreePort()
     {
         var l = new TcpListener(IPAddress.Loopback, 0);
@@ -420,105 +370,20 @@ public class YavscApiClientTests
         }
     }
 
-    [Fact]
-    public async Task Concurrent_silent_login_and_api_calls_share_one_refresh()
-    {
-        using var authority = await OIDCStubAuthority.StartAsync();
-        using var apiServer = new StubApiServer();
-        await apiServer.StartAsync();
-        var settings = BuildSettings(authority, apiServer.BaseUrl);
-        var tokensPath = TokensPath();
-        try
-        {
-            await using var original = await LoginAndPersistAsync(settings, authority, tokensPath);
-            ExpireCachedAccessToken(tokensPath);
-            var store = new TokenStore(tokensPath);
-            var previousRefreshToken = store.Load()!.RefreshToken;
-            await using var client = new YavscApiClient(settings, store);
-            client.Http.BaseAddress = new Uri(settings.ApiUrl);
-            var ct = TestContext.Current.CancellationToken;
-
-            var silentLogins = Enumerable.Range(0, 8)
-                .Select(_ => client.TrySilentLoginAsync(null, ct)).ToArray();
-            var calls = Enumerable.Range(0, 8)
-                .Select(_ => client.CallAsync<List<StubApiServer.Post>>(HttpMethod.Get, "posts", ct)).ToArray();
-            await Task.WhenAll(silentLogins.Cast<Task>().Concat(calls));
-
-            Assert.All(silentLogins, login => Assert.True(login.Result));
-            Assert.All(calls, call => Assert.NotEmpty(call.Result));
-            Assert.Equal(1, authority.RefreshRequestCount);
-            Assert.NotEqual(previousRefreshToken, store.Load()!.RefreshToken);
-            Assert.True(client.HasValidSession);
-        }
-        finally
-        {
-            if (File.Exists(tokensPath)) File.Delete(tokensPath);
-        }
-    }
-
-    [Fact]
-    public async Task Concurrent_401_responses_share_one_refresh()
-    {
-        using var authority = await OIDCStubAuthority.StartAsync();
-        using var apiServer = new StubApiServer();
-        await apiServer.StartAsync();
-        var settings = BuildSettings(authority, apiServer.BaseUrl);
-        var tokensPath = TokensPath();
-        try
-        {
-            await using var client = await LoginAndPersistAsync(settings, authority, tokensPath);
-            apiServer.RejectedBearer = $"Bearer {client.CurrentAccessToken}";
-            var ct = TestContext.Current.CancellationToken;
-
-            var calls = Enumerable.Range(0, 8)
-                .Select(_ => client.CallAsync<List<StubApiServer.Post>>(HttpMethod.Get, "posts", ct)).ToArray();
-            await Task.WhenAll(calls);
-
-            Assert.All(calls, call => Assert.NotEmpty(call.Result));
-            Assert.Equal(1, authority.RefreshRequestCount);
-            Assert.True(client.HasValidSession);
-        }
-        finally
-        {
-            if (File.Exists(tokensPath)) File.Delete(tokensPath);
-        }
-    }
-
-    [Fact]
-    public async Task CallAsync_reports_expired_session_and_clears_rejected_refresh_token()
-    {
-        using var authority = await OIDCStubAuthority.StartAsync();
-        using var apiServer = new StubApiServer();
-        await apiServer.StartAsync();
-        var settings = BuildSettings(authority, apiServer.BaseUrl);
-        var tokensPath = TokensPath();
-        try
-        {
-            await using var original = await LoginAndPersistAsync(settings, authority, tokensPath);
-            var store = new TokenStore(tokensPath);
-            var tokens = store.Load()!;
-            store.Save(tokens with
-            {
-                RefreshToken = "revoked-refresh-token",
-                AccessTokenExpiresAt = DateTimeOffset.UtcNow.AddMinutes(-5)
-            });
-            await using var client = new YavscApiClient(settings, store);
-            client.Http.BaseAddress = new Uri(settings.ApiUrl);
-
-            var error = await Assert.ThrowsAsync<RefreshFailedException>(() =>
-                client.CallAsync<JsonElement>(HttpMethod.Get, "posts", TestContext.Current.CancellationToken));
-
-            Assert.True(error.IsPermanent);
-            Assert.Contains("reconnecter", error.Message);
-            Assert.False(client.HasValidSession);
-            Assert.Null(store.Load());
-            Assert.Equal(0, apiServer.RequestCount);
-        }
-        finally
-        {
-            if (File.Exists(tokensPath)) File.Delete(tokensPath);
-        }
-    }
+    // SKIPPED — see comment.
+    //
+    // We can't cover "TrySilentLoginAsync purges the store when the
+    // refresh token is rejected" with OidcStubAuthority: the stub's
+    // /connect/token endpoint is unconditional and hands out a fresh
+    // refresh token regardless of what the caller sends. To exercise
+    // the RefreshFailedException path we'd need an authority option
+    // to fail on a specific refresh-token string; until then the
+    // production refresh-failure path is covered manually (and by
+    // the structural guarantee that _store.Clear() runs in the catch
+    // block of ForceRefreshAsync when result.IsError).
+    //
+    // [Fact]
+    // public async Task TrySilentLoginAsync_purges_store_when_refresh_fails_permanently() { ... }
 
     private static T Last<T>(System.Collections.Generic.List<T> list)
     {
@@ -602,7 +467,6 @@ internal sealed class StubApiServer : IAsyncDisposable, IDisposable
     public string BaseUrl { get; private set; } = string.Empty;
     public List<string> SeenBearers { get; } = new();
     public int RequestCount => _requestCount;
-    public string? RejectedBearer { get; set; }
 
     public StubApiServer(bool forceFirstRequest = false)
     {
@@ -635,8 +499,7 @@ internal sealed class StubApiServer : IAsyncDisposable, IDisposable
             if (!string.IsNullOrEmpty(auth))
                 SeenBearers.Add(auth!);
 
-            if ((_forceFirstRequest && _requestCount == 1)
-                || (RejectedBearer is not null && auth == RejectedBearer))
+            if (_forceFirstRequest && _requestCount == 1)
             {
                 ctx.Response.StatusCode = 401;
                 ctx.Response.Close();

src/PostIt/PostIt/App.axaml

@@ -11,6 +11,5 @@
 
      <Application.Styles>
         <FluentTheme />
-         <StyleInclude Source="avares://AvaloniaEdit/Themes/Fluent/AvaloniaEdit.xaml" />
     </Application.Styles>
 </Application>

src/PostIt/PostIt/App.axaml.cs

@@ -6,26 +6,17 @@ using Avalonia.Controls;
 using Avalonia.Controls.ApplicationLifetimes;
 using Avalonia.Markup.Xaml;
 using Avalonia.Styling;
-using Avalonia.Threading;
 using Microsoft.Extensions.DependencyInjection;
 using PostIt.Services;
 using PostIt.ViewModels;
 using PostIt.Views;
 using PostIt.Helpers;
-using System.Globalization;
-using Live.Avalonia;
-using System.Diagnostics;
-using System.Linq;
-using ReactiveUI;
-using System.Reactive;
 
 namespace PostIt;
 
-public partial class App : Application, ILiveView, IVMPusherApp
+public partial class App : Application
 {
-    public static bool LiveMode { get; private set; }
     private int _bootStarted;
-    public static string? CliConfigFileSpecification { get; private set; }
 
     /// <summary>
     /// DI container the platform entry points hand to ViewModels so
@@ -50,122 +41,30 @@ public partial class App : Application, ILiveView, IVMPusherApp
     {
         if (TryHandOffCustomSchemeUrl()) return;
 
-        this.ServiceProvider = new ServiceCollection().BuildPostItServices();
+        this.ServiceProvider = new ServiceCollection().BuildServices();
         var settings = ServiceProvider.GetRequiredService<Settings>();
 
-        if (!LiveMode)
+        if (ApplicationLifetime is IClassicDesktopStyleApplicationLifetime desktop)
         {
-            // Debugging requires pdb loading etc, so we disable live reloading
-            // during a test run with an attached debugger.
-
-            if (ApplicationLifetime is IClassicDesktopStyleApplicationLifetime desktop)
-            {
-                InitializeClassicDesktopLifetime(settings, desktop);
-            }
-            else if (ApplicationLifetime is IActivityApplicationLifetime singleViewFactoryApplicationLifetime)
-            {
-                InitializeActivityLifetime(settings, singleViewFactoryApplicationLifetime);
-            }
-            else if (ApplicationLifetime is ISingleViewApplicationLifetime singleViewPlatform)
-            {
-                InitializeSingleViewLifetime(settings, singleViewPlatform);
-            }
+            InitializeClassicDesktopLifetime(settings, desktop);
         }
-        else
+        else if (ApplicationLifetime is IActivityApplicationLifetime singleViewFactoryApplicationLifetime)
         {
-            // Here, we create a new LiveViewHost, located in the 'Live.Avalonia'
-            // namespace, and pass an ILiveView implementation to it. The ILiveView
-            // implementation should have a parameterless constructor! Next, we
-            // start listening for any changes in the source files. And then, we
-            // show the LiveViewHost window. Simple enough, huh?
-            var window = new LiveViewHost(this, Console.WriteLine);
-            var view = ServiceProvider!.GetRequiredService<MainView>();
-
-            if (ApplicationLifetime is IClassicDesktopStyleApplicationLifetime desktop)
-            {
-                InitializeClassicDesktopLifetime(window, view, settings, desktop);
-            }
-            else if (ApplicationLifetime is IActivityApplicationLifetime singleViewFactoryApplicationLifetime)
-            {
-                InitializeActivityLifetime(settings, singleViewFactoryApplicationLifetime);
-            }
-            else if (ApplicationLifetime is ISingleViewApplicationLifetime singleViewPlatform)
-            {
-                InitializeSingleViewLifetime(settings, singleViewPlatform);
-            }
-
-            window.StartWatchingSourceFilesForHotReloading();
-            Console.WriteLine("LiveViewHost started for hot reloading.");
-            window.Show();
+            InitializeActivityLifetime(settings, singleViewFactoryApplicationLifetime);
+        }
+        else if (ApplicationLifetime is ISingleViewApplicationLifetime singleViewPlatform)
+        {
+            InitializeSingleViewLifetime(settings, singleViewPlatform);
         }
-
-
-#if DEBUG
-        // Here we subscribe to ReactiveUI default exception handler to avoid app
-        // termination in case if we do something wrong in our view models. See:
-        // https://www.reactiveui.net/docs/handbook/default-exception-handler/
-        //
-        // In case if you are using another MV* framework, please refer to its
-        // documentation explaining global exception handling.
-        Console.WriteLine("Debug mode: ReactiveUI default exception handler is set.");
-        RxApp.DefaultExceptionHandler = Observer.Create<Exception>(Console.WriteLine);
-#endif
 
         base.OnFrameworkInitializationCompleted();
     }
 
-    private bool IsProduction()
-    {
-#if DEBUG
-        return false;
-#else
-    return true;
-#endif
-    }
-
-    public async Task<Page> PushPageAsync(ViewModelBase viewModel)
-    {
-        var template = DataTemplates.FirstOrDefault(t => t.Match(viewModel));
-        if (template is null)
-        {
-            throw new InvalidOperationException($"No IDataTemplate found for {viewModel.GetType().Name}.");
-        }
-
-        Control? view = template.Build(viewModel) ;
-        if (view is null)
-        {
-            throw new InvalidOperationException(
-                $"Template for {viewModel.GetType().Name} returned <null>.");
-        }
-
-        var page = view as Page;
-        if (page is null)
-        {
-            // NavigationPage expects Page instances. Wrap any fallback control
-            // (e.g. ViewLocator error TextBlock) into a ContentPage so it can render.
-            page = new ContentPage { Content = view };
-        }
-
-        page.DataContext = viewModel;
-
-        MainView? mainView = (Current as App).View;
-
-        // Avoid stacking the same singleton page twice (e.g. SettingsPage).
-        var stack = mainView.NavRoot.NavigationStack;
-        if (stack.Count > 0 && ReferenceEquals(stack[stack.Count - 1], page))
-        {
-            return page;
-        }
-
-        await mainView.NavRoot.PushAsync(page);
-        return page;
-    }
-
     public void InitializeSingleViewLifetime(Settings settings, ISingleViewApplicationLifetime singleViewPlatform)
     {
         singleViewPlatform.MainView = View = ServiceProvider!.GetRequiredService<MainView>();
         ConfigureRootView(View);
-        ApplyStettings(settings);
+        ApplyDarkMode(settings);
     }
 
     public void InitializeActivityLifetime(Settings settings, IActivityApplicationLifetime singleViewFactoryApplicationLifetime)
@@ -174,7 +73,7 @@ public partial class App : Application, ILiveView, IVMPusherApp
                         () =>
                         {
                             this.ConfigureRootView(ServiceProvider!.GetRequiredService<MainView>());
-                            ApplyStettings(settings);
+                            ApplyDarkMode(settings);
                             return View!;
                         };
     }
@@ -182,35 +81,37 @@ public partial class App : Application, ILiveView, IVMPusherApp
     public void InitializeClassicDesktopLifetime(Settings settings, IClassicDesktopStyleApplicationLifetime desktop)
     {
         var window = ServiceProvider!.GetRequiredService<MainWindow>();
-        var mainView = (MainView)CreateView(window);
-        InitializeClassicDesktopLifetime(window, mainView, settings, desktop);
-    }
-
-    public void InitializeClassicDesktopLifetime(Window window, MainView mainView,  Settings settings, IClassicDesktopStyleApplicationLifetime desktop)
-    {
-        this.ConfigureRootView(mainView);
-        ApplyStettings(settings);
         desktop.MainWindow = window;
-        window.Content = mainView;
-        window.Show();
+        this.ConfigureRootView(window.MainView);
+
+        ApplyDarkMode(settings);
     }
 
     public void ConfigureRootView(MainView rootView)
+{
+    // Déclencher le Boot une seule fois lors du chargement du contrôle à l'écran.
+    rootView.AttachedToVisualTree += async (_, _) => await BootOnceAsync();
+
+    var sessionStatus = ServiceProvider!.GetRequiredService<SessionStatusViewModel>();
+    sessionStatus.LogoutCompleted += () =>
     {
-        rootView.AttachedToVisualTree += (_, _) =>
-            Dispatcher.UIThread.Post(() => _ = BootOnceAsync());
+        // Remplacer Window.NavRoot par rootView.NavRoot
+        rootView.NavRoot.PopToRootAsync();
+    };
 
-        var sessionStatus = ServiceProvider!.GetRequiredService<SessionStatusViewModel>();
-        sessionStatus.LogoutCompleted += () =>
+    rootView.SessionBanner.DataContext = sessionStatus;
+    this.View = rootView;
+}
+
+    private async Task BootOnceAsync()
+    {
+        if (Interlocked.Exchange(ref _bootStarted, 1) == 1)
         {
-            // Remplacer Window.NavRoot par rootView.NavRoot
-            rootView.NavRoot.PopToRootAsync();
-        };
-        if (rootView.DataContext==null)
-            rootView.DataContext = ServiceProvider!.GetRequiredService<HomePageViewModel>();
+            return;
+        }
 
-        rootView.SessionBanner.DataContext = sessionStatus;
-        this.View = rootView;
+        var api = ServiceProvider!.GetRequiredService<YavscApiClient>();
+        await BootAsync(this.ServiceProvider!, api);
     }
 
     /// <summary>
@@ -224,24 +125,10 @@ public partial class App : Application, ILiveView, IVMPusherApp
         View = mainView ?? throw new ArgumentNullException(nameof(mainView));
     }
 
-    private static void ApplyStettings(Settings settings)
+    private static void ApplyDarkMode(Settings settings)
     {
-        if (!string.IsNullOrWhiteSpace(settings.SelectedLanguage))
-            Yavsc.Lang.Resources.Culture = new CultureInfo(settings.SelectedLanguage);
-        Current!.RequestedThemeVariant =
-            settings.DarkMode ? ThemeVariant.Dark : ThemeVariant.Light;
-    }
-
-
-    private async Task BootOnceAsync()
-    {
-        if (Interlocked.Exchange(ref _bootStarted, 1) == 1)
-        {
-            return;
-        }
-
-        var api = ServiceProvider!.GetRequiredService<YavscApiClient>();
-        await BootAsync(this.ServiceProvider!, api);
+        Application.Current!.RequestedThemeVariant =
+                            settings.DarkMode ? ThemeVariant.Dark : ThemeVariant.Light;
     }
 
     /// <summary>
@@ -259,9 +146,9 @@ public partial class App : Application, ILiveView, IVMPusherApp
         var refreshed = await api.TrySilentLoginAsync().ConfigureAwait(true);
         var sessionStatus = provider.GetRequiredService<SessionStatusViewModel>();
         sessionStatus.Refresh();
-        var homePageVm = provider.GetRequiredService<HomePageViewModel>();
+        var homePage = provider.GetRequiredService<HomePageViewModel>();
         var app = (App)Current!;
-        await app.PushPageAsync(homePageVm);
+        await app.PushPageAsync(homePage);
     }
 
     /// <summary>
@@ -316,32 +203,4 @@ public partial class App : Application, ILiveView, IVMPusherApp
     {
         await View!.NavRoot.PopAsync();
     }
-
-    internal static void UseConfigFileWhenLoading(string configFile)
-    {
-        CliConfigFileSpecification = configFile;
-    }
-
-    internal static void EnableLiveMode()
-    {
-        LiveMode = true;
-    }
-
-    public object CreateView(Window window)
-    {
-        if (this.ServiceProvider == null)
-        {
-            var serviceCollection = new ServiceCollection();
-            this.ServiceProvider = serviceCollection.BuildPostItServices();
-        }
-        if (window.DataContext == null)
-            window.DataContext = ServiceProvider!.GetRequiredService<HomePageViewModel>();
-
-        // The AppView class will inherit the DataContext
-        // of the window. The AppView class can be a
-        // UserControl, a Grid, a TextBlock, whatever.
-        this.View = ServiceProvider!.GetRequiredService<MainView>();
-        this.ConfigureRootView(this.View);
-        return this.View;
-    }
 }

src/PostIt/PostIt/CLIOptions/CLIOptions.cs

@@ -1,42 +0,0 @@
-using System;
-using System.Collections.Generic;
-using Mono.Options;
-using PostIt;
-using PostIt.ViewModels;
-
-namespace PostIt.CLIOptions;
-
-public static class CLIOptionHandler
-{
-    public static void HandleArgs(string[] args)
-    {
-        bool showHelp = false;
-        string configFile = null;
-        bool liveMode = false;
-
-        var options = new OptionSet {
-            { "c|configuration=", "Configuration file to load", (string v) => configFile = v },
-            { "l|live", "Enable live mode", v => liveMode = true },
-            { "v|version", "Show the application version", v => Console.WriteLine("PostIt version "
-               + typeof(App).Assembly.GetName().Version?.ToString()) },
-            { "h|help", "Show this message and exit", v => showHelp = true }
-        };
-
-        List<string> extra = options.Parse(args);
-
-        if (showHelp)
-        {
-            Console.WriteLine("Usage: app [OPTIONS]+");
-            options.WriteOptionDescriptions(Console.Out);
-            return;
-        }
-        if (configFile != null)
-        {
-            App.UseConfigFileWhenLoading(configFile);
-        }
-        if (liveMode)
-        {
-            App.EnableLiveMode();
-        }
-    }
-}

src/PostIt/PostIt/Controls/MarkdownEditorControl.axaml

@@ -1,56 +0,0 @@
-<UserControl
-    x:Class="PostIt.Controls.MarkdownEditorControl"
-    xmlns="https://github.com/avaloniaui"
-    xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
-    xmlns:AvaloniaEdit="clr-namespace:AvaloniaEdit;assembly=AvaloniaEdit"
-    xmlns:md="using:MarkdownViewer.Core.Controls"
-    x:Name="Root"
-    HorizontalAlignment="Stretch"
-    VerticalAlignment="Stretch">
-    <Grid HorizontalAlignment="Stretch" VerticalAlignment="Stretch">
-        <Border
-            BorderBrush="LightGray"
-            BorderThickness="1"
-            CornerRadius="5"
-            IsVisible="{Binding !IsPreviewVisible, ElementName=Root}"
-            Padding="0">
-            <AvaloniaEdit:TextEditor
-                x:Name="SourceEditor"
-                Document="{Binding Document, ElementName=Root, Mode=TwoWay}"
-                FontFamily="Cascadia Code,Consolas,Menlo,Monospace"
-                ShowLineNumbers="True"
-                WordWrap="True"
-                BorderThickness="0"
-                Padding="5,5,5,15"
-                HorizontalAlignment="Stretch"
-                VerticalAlignment="Stretch"
-                HorizontalScrollBarVisibility="Disabled"
-                VerticalScrollBarVisibility="Auto"
-                TextInputOptions.Multiline="True"
-                TextInputOptions.ReturnKeyType="Default" />
-        </Border>
-
-        <Border
-            BorderBrush="LightGray"
-            BorderThickness="1"
-            CornerRadius="5"
-            IsVisible="{Binding IsPreviewVisible, ElementName=Root}"
-            Padding="8">
-            <ScrollViewer
-                x:Name="PreviewScrollViewer"
-                BringIntoViewOnFocusChange="False"
-                VerticalScrollBarVisibility="Auto"
-                HorizontalAlignment="Stretch"
-                VerticalAlignment="Stretch"
-                HorizontalScrollBarVisibility="Auto">
-                <md:MarkdownViewer
-                    x:Name="PreviewViewer"
-                    HorizontalContentAlignment="Stretch"
-                    VerticalAlignment="Top"
-                    ClipToBounds="False"
-                    UseLayoutRounding="True"
-                    MarkdownText="{Binding MarkdownText, ElementName=Root}" />
-            </ScrollViewer>
-        </Border>
-    </Grid>
-</UserControl>

src/PostIt/PostIt/Controls/MarkdownEditorControl.axaml.cs

@@ -1,63 +0,0 @@
-using System;
-using Avalonia;
-using Avalonia.Controls;
-using AvaloniaEdit.Document;
-
-namespace PostIt.Controls;
-
-public partial class MarkdownEditorControl : UserControl
-{
-    public static readonly StyledProperty<string?> MarkdownTextProperty =
-        AvaloniaProperty.Register<MarkdownEditorControl, string?>(nameof(MarkdownText));
-
-    public static readonly StyledProperty<TextDocument?> DocumentProperty =
-        AvaloniaProperty.Register<MarkdownEditorControl, TextDocument?>(nameof(Document));
-
-    public static readonly StyledProperty<bool> IsPreviewVisibleProperty =
-        AvaloniaProperty.Register<MarkdownEditorControl, bool>(nameof(IsPreviewVisible), false);
-
-    public string? MarkdownText
-    {
-        get => GetValue(MarkdownTextProperty);
-        set => SetValue(MarkdownTextProperty, value);
-    }
-
-    public TextDocument? Document
-    {
-        get => GetValue(DocumentProperty);
-        set => SetValue(DocumentProperty, value);
-    }
-
-    public bool IsPreviewVisible
-    {
-        get => GetValue(IsPreviewVisibleProperty);
-        set => SetValue(IsPreviewVisibleProperty, value);
-    }
-
-    public MarkdownEditorControl()
-    {
-        InitializeComponent();
-        PropertyChanged += OnPropertyChanged;
-    }
-
-    private void OnPropertyChanged(object? sender, AvaloniaPropertyChangedEventArgs e)
-    {
-        if (e.Property == MarkdownTextProperty)
-        {
-            var text = e.NewValue as string ?? string.Empty;
-            if (Document is null || !string.Equals(Document.Text, text, StringComparison.Ordinal))
-            {
-                Document = new TextDocument(text);
-            }
-        }
-        else if (e.Property == DocumentProperty)
-        {
-            var newDocument = e.NewValue as TextDocument;
-            var text = newDocument?.Text ?? string.Empty;
-            if (!string.Equals(MarkdownText, text, StringComparison.Ordinal))
-            {
-                MarkdownText = text;
-            }
-        }
-    }
-}

src/PostIt/PostIt/Controls/SignaturePadControl.cs

@@ -46,21 +46,6 @@ public class SignaturePadControl : TemplatedControl
         set => SetValue(CaptureAreaProperty, value);
     }
 
-    /// <summary>
-    /// When true the control ignores pointer input — it only displays
-    /// strokes loaded into its buffer (e.g. the other party's
-    /// signature, which must be shown but not editable). <see cref="Load"/>
-    /// and <see cref="Clear"/> still work.
-    /// </summary>
-    public static readonly StyledProperty<bool> IsReadOnlyProperty =
-        AvaloniaProperty.Register<SignaturePadControl, bool>(nameof(IsReadOnly));
-
-    public bool IsReadOnly
-    {
-        get => GetValue(IsReadOnlyProperty);
-        set => SetValue(IsReadOnlyProperty, value);
-    }
-
     /// <summary>
     /// Captured strokes in wire form. Exposed as a read-only view
     /// over the internal buffer. The buffer only mutates on the UI
@@ -124,7 +109,6 @@ public class SignaturePadControl : TemplatedControl
 
     private void OnCapturePressed(object? sender, PointerPressedEventArgs e)
     {
-        if (IsReadOnly) return;
         if (!e.GetCurrentPoint(CaptureArea).Properties.IsLeftButtonPressed) return;
         e.Pointer.Capture(CaptureArea);
         _capturing = true;
@@ -197,38 +181,6 @@ public class SignaturePadControl : TemplatedControl
         RedrawRequested?.Invoke(this, EventArgs.Empty);
     }
 
-    /// <summary>
-    /// Replace the buffer with the given wire-format strokes — e.g. a
-    /// signature loaded back from the server — and raise
-    /// <see cref="RedrawRequested"/> so the host view repaints the ink.
-    /// Loaded strokes are all sealed (there is no pending stroke).
-    /// Malformed input (a non-positive length prefix, or a stroke that
-    /// runs past the end of the array) is truncated at the offending
-    /// point so the buffer never holds an inconsistent state.
-    /// </summary>
-    public void Load(int[] strokes)
-    {
-        if (strokes is null) throw new ArgumentNullException(nameof(strokes));
-
-        _strokes.Clear();
-        _pendingPoints = 0;
-        _capturing = false;
-
-        int i = 0;
-        while (i < strokes.Length)
-        {
-            int k = strokes[i];
-            if (k <= 0) break;
-            if (i + 1 + 2 * k > strokes.Length) break;
-            _strokes.Add(k);
-            for (int p = 0; p < 2 * k; p++)
-                _strokes.Add(strokes[i + 1 + p]);
-            i += 1 + 2 * k;
-        }
-
-        RedrawRequested?.Invoke(this, EventArgs.Empty);
-    }
-
     /// <summary>
     /// Defensive copy of the current buffer wrapped in a
     /// <see cref="SignaturePadData"/>. Cheap; call only when the

src/PostIt/PostIt/Controls/SignaturePadView.axaml

@@ -1,28 +0,0 @@
-<UserControl xmlns="https://github.com/avaloniaui"
-             xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
-             xmlns:controls="using:PostIt.Controls"
-             x:Class="PostIt.Controls.SignaturePadView"
-             HorizontalAlignment="Stretch"
-             VerticalAlignment="Stretch">
-    <!--
-        Capture surface. The SignaturePadControl is render-agnostic,
-        so we host it inside a Border that is the capture area, and
-        overlay a Canvas for the visual feedback. The code-behind
-        repaints the canvas on every RedrawRequested. The Border size
-        is driven by the CaptureWidth / CaptureHeight styled properties.
-    -->
-    <Border x:Name="PadFrame"
-            BorderBrush="Black"
-            BorderThickness="1"
-            Background="White"
-            HorizontalAlignment="Left"
-            VerticalAlignment="Top"
-            ClipToBounds="True">
-        <Grid>
-            <controls:SignaturePadControl x:Name="InnerPad" />
-            <Canvas x:Name="InkLayer"
-                    Background="Transparent"
-                    IsHitTestVisible="False" />
-        </Grid>
-    </Border>
-</UserControl>

src/PostIt/PostIt/Controls/SignaturePadView.axaml.cs

@@ -1,206 +0,0 @@
-using System;
-using System.Collections.Generic;
-using Avalonia;
-using Avalonia.Controls;
-using Avalonia.Controls.Shapes;
-using Avalonia.Media;
-using PostIt.Models;
-
-namespace PostIt.Controls;
-
-/// <summary>
-/// Reusable signature-capture surface: wraps the render-agnostic
-/// <see cref="SignaturePadControl"/> in a sized <see cref="Border"/>
-/// (the hit-test region) with an overlay <see cref="Canvas"/> that
-/// the code-behind repaints from the control's stroke buffer. Owns
-/// the ink-rendering logic so every page that captures a signature
-/// (the dev-only <c>SignaturePage</c>, the estimate validation page,
-/// ...) shares one implementation.
-///
-/// Hosts bind <see cref="CaptureWidth"/>/<see cref="CaptureHeight"/>
-/// (DIPs, defaults 600×200) to size the surface. View models attach
-/// to the inner <see cref="SignaturePad"/> control (exposed here) to
-/// read snapshots, drive <c>Clear</c>, and subscribe to
-/// <see cref="SignaturePadControl.StrokeCompleted"/> /
-/// <see cref="SignaturePadControl.RedrawRequested"/> — the same
-/// contract the headless tests use, since a <see cref="UserControl"/>
-/// needs its XAML loaded to be drivable.
-/// </summary>
-public partial class SignaturePadView : UserControl
-{
-    private static readonly IBrush StrokeBrush = new SolidColorBrush(Color.FromRgb(0x10, 0x10, 0x10));
-    private const double StrokeThickness = 2.0;
-    private const double CoordinateMax = 10_000.0;
-
-    // Last size the ink layer was painted at. LayoutUpdated repaints
-    // only when this changes, so adding/removing polyline children
-    // (which invalidates layout) does not loop.
-    private Size _lastPaintedSize;
-
-    public static readonly StyledProperty<double> CaptureWidthProperty =
-        AvaloniaProperty.Register<SignaturePadView, double>(nameof(CaptureWidth), 600);
-
-    public static readonly StyledProperty<double> CaptureHeightProperty =
-        AvaloniaProperty.Register<SignaturePadView, double>(nameof(CaptureHeight), 200);
-
-    public double CaptureWidth
-    {
-        get => GetValue(CaptureWidthProperty);
-        set => SetValue(CaptureWidthProperty, value);
-    }
-
-    public double CaptureHeight
-    {
-        get => GetValue(CaptureHeightProperty);
-        set => SetValue(CaptureHeightProperty, value);
-    }
-
-    /// <summary>
-    /// The underlying capture control. View models attach to this to
-    /// read <see cref="SignaturePadControl.Snapshot"/> / call
-    /// <see cref="SignaturePadControl.Clear"/> and subscribe to its
-    /// events; this view repaints the ink layer from the same buffer.
-    /// </summary>
-    public SignaturePadControl SignaturePad => InnerPad;
-
-    public SignaturePadView()
-    {
-        InitializeComponent();
-
-        // Wire the capture area: the Pad is the control, the
-        // surrounding Border (PadFrame) is the hit-test region. For an
-        // inline control with no template, capture wiring happens on
-        // first measure, which is guaranteed before the user can
-        // interact, so attaching here is safe.
-        InnerPad.CaptureArea = PadFrame;
-        ApplyFrameSize();
-
-        InnerPad.RedrawRequested += OnPadRedrawRequested;
-        // Repaint once layout completes so an ink buffer loaded before
-        // the first arrange (e.g. an existing signature on reopen)
-        // still renders without waiting for a pointer event. The
-        // handler repaints only on a size change to avoid a layout
-        // loop (child changes invalidate layout → LayoutUpdated).
-        LayoutUpdated += OnLayoutUpdated;
-    }
-
-    private void OnLayoutUpdated(object? sender, EventArgs e)
-    {
-        var size = EffectivePadSize();
-        if (size != _lastPaintedSize)
-            Repaint();
-    }
-
-    protected override void OnPropertyChanged(AvaloniaPropertyChangedEventArgs change)
-    {
-        base.OnPropertyChanged(change);
-        if (change.Property == CaptureWidthProperty || change.Property == CaptureHeightProperty)
-        {
-            ApplyFrameSize();
-            Repaint();
-        }
-    }
-
-    private void ApplyFrameSize()
-    {
-        if (PadFrame is null) return;
-        PadFrame.Width = Math.Max(1, CaptureWidth);
-        PadFrame.Height = Math.Max(1, CaptureHeight);
-    }
-
-    private void OnPadRedrawRequested(object? sender, EventArgs e) => Repaint();
-
-    /// <summary>Defensive copy of the current buffer.</summary>
-    public SignaturePadData Snapshot() => InnerPad.Snapshot();
-
-    /// <summary>Forget every captured stroke.</summary>
-    public void Clear() => InnerPad.Clear();
-
-    /// <summary>Wire-format strokes, forwarded from the inner control.</summary>
-    public IReadOnlyList<int> Strokes => InnerPad.Strokes;
-
-    /// <summary>
-    /// The effective ink surface size: the arranged bounds when
-    /// available, otherwise the explicitly sized
-    /// <see cref="CaptureWidth"/>/<see cref="CaptureHeight"/>. The
-    /// latter covers a repaint triggered before the first layout pass
-    /// (e.g. loading an existing signature on reopen), when Bounds is
-    /// still empty.
-    /// </summary>
-    private Size EffectivePadSize()
-    {
-        var w = PadFrame.Bounds.Width > 0 ? PadFrame.Bounds.Width : PadFrame.Width;
-        var h = PadFrame.Bounds.Height > 0 ? PadFrame.Bounds.Height : PadFrame.Height;
-        if (w <= 0 || double.IsNaN(w) || h <= 0 || double.IsNaN(h))
-            return default;
-        return new Size(w, h);
-    }
-
-    private void Repaint()
-    {
-        if (InkLayer is null) return;
-
-        var size = EffectivePadSize();
-        if (size == default) return;
-        _lastPaintedSize = size;
-
-        InkLayer.Children.Clear();
-        var w = size.Width;
-        var h = size.Height;
-
-        var pending = InnerPad.PendingStroke;
-        var strokes = InnerPad.Strokes;
-        int sealedCount = strokes.Count - pending.Count;
-        if (sealedCount < 0)
-        {
-            sealedCount = 0;
-        }
-
-        int i = 0;
-        while (i < sealedCount)
-        {
-            int k = strokes[i];
-            if (k <= 0) break;
-            i++; // skip the length prefix
-
-            var poly = new Polyline
-            {
-                Stroke = StrokeBrush,
-                StrokeThickness = StrokeThickness,
-                StrokeLineCap = PenLineCap.Round,
-                StrokeJoin = PenLineJoin.Round,
-            };
-            var pts = new List<Point>(k);
-            for (int p = 0; p < k; p++)
-            {
-                int nx = strokes[i++];
-                int ny = strokes[i++];
-                pts.Add(new Point(nx / CoordinateMax * w, ny / CoordinateMax * h));
-            }
-            poly.Points = pts;
-            InkLayer.Children.Add(poly);
-        }
-
-        if (pending.Count > 0)
-        {
-            var poly = new Polyline
-            {
-                Stroke = StrokeBrush,
-                StrokeThickness = StrokeThickness,
-                StrokeLineCap = PenLineCap.Round,
-                StrokeJoin = PenLineJoin.Round,
-            };
-
-            var pts = new List<Point>(pending.Count / 2);
-            for (int p = 0; p < pending.Count; p += 2)
-            {
-                int nx = pending[p];
-                int ny = pending[p + 1];
-                pts.Add(new Point(nx / CoordinateMax * w, ny / CoordinateMax * h));
-            }
-
-            poly.Points = pts;
-            InkLayer.Children.Add(poly);
-        }
-    }
-}

src/PostIt/PostIt/Controls/StatusBar.axaml

@@ -10,19 +10,13 @@
             Padding="8">
         <StackPanel Orientation="Horizontal" Spacing="8">
             <TextBlock Text="{Binding Glyph}"
-              FontWeight="Bold"
-              Foreground="{Binding Foreground}"
-              VerticalAlignment="Top"/>
-            <SelectableTextBlock Text="{Binding Message}"
-              Foreground="{Binding Foreground}"
-              TextWrapping="Wrap"
-              VerticalAlignment="Center"/>
-            <Button Content="{Binding CheckCommandLabel}"
-                Foreground="{Binding Foreground}"
-                    VerticalAlignment="Center"
-                    IsVisible="{Binding HasCheckCommand}"
-                    Command="{Binding CheckCommand}"
-                    />
+                       FontWeight="Bold"
+                       Foreground="{Binding Foreground}"
+                       VerticalAlignment="Top"/>
+            <TextBlock Text="{Binding Message}"
+                       Foreground="{Binding Foreground}"
+                       TextWrapping="Wrap"
+                       VerticalAlignment="Center"/>
         </StackPanel>
     </Border>
 </UserControl>

src/PostIt/PostIt/Helpers/FileSaveHelpers.cs

@@ -1,61 +0,0 @@
-using System;
-using System.Threading;
-using System.Threading.Tasks;
-using Avalonia;
-using Avalonia.Controls;
-using Avalonia.Platform.Storage;
-
-namespace PostIt.Helpers;
-
-/// <summary>
-/// Saves a downloaded byte payload to a file chosen by the user through
-/// the platform save picker. This is the first file-save (as opposed to
-/// file-open) helper in PostIt; the open picker is already used for blog
-/// attachment and avatar uploads
-/// (<see cref="Views.Blogs.BlogsPage"/>, <see cref="Views.Layout.SettingsPage"/>).
-///
-/// <para>The <c>TopLevel</c> hosting the picker is resolved from the
-/// application's root <c>MainView</c> (<c>App.View</c>), which works for
-/// both the desktop and single-view lifetimes.</para>
-/// </summary>
-public static class FileSaveHelpers
-{
-    /// <summary>
-    /// Prompt the user to choose a destination and write
-    /// <paramref name="content"/> to it. Returns false when the user
-    /// cancels the picker; throws on IO/platform errors so the caller
-    /// can surface them.
-    /// </summary>
-    public static async Task<bool> SaveAsync(
-        string suggestedName,
-        string defaultExtension,
-        byte[] content,
-        CancellationToken ct = default)
-    {
-        var view = (Application.Current as App)?.View;
-        var topLevel = view is null ? null : TopLevel.GetTopLevel(view);
-        if (topLevel is null)
-            throw new InvalidOperationException("Aucune fenêtre active pour enregistrer le fichier.");
-
-        var file = await topLevel.StorageProvider.SaveFilePickerAsync(new FilePickerSaveOptions
-        {
-            Title = "Enregistrer sous",
-            DefaultExtension = defaultExtension,
-            SuggestedFileName = suggestedName,
-            FileTypeChoices = new[]
-            {
-                new FilePickerFileType($"{defaultExtension.ToUpper()} file")
-                {
-                    Patterns = new[] { $"*.{defaultExtension}" }
-                }
-            }
-        }).ConfigureAwait(true);
-
-        if (file is null)
-            return false; // user cancelled
-
-        await using var stream = await file.OpenWriteAsync().ConfigureAwait(true);
-        await stream.WriteAsync(content, ct).ConfigureAwait(true);
-        return true;
-    }
-}

src/PostIt/PostIt/Helpers/ServiceCollectionHelpers.cs

@@ -2,10 +2,8 @@ using System;
 using Microsoft.Extensions.DependencyInjection;
 using PostIt.Services;
 using PostIt.ViewModels;
-using PostIt.ViewModels.Chat;
 using PostIt.Views;
 using PostIt.Views.Blogs;
-using PostIt.Views.Chat;
 using PostIt.Views.Commands;
 using Yavsc.Api.Client;
 
@@ -13,7 +11,7 @@ namespace PostIt.Helpers;
 
 public static class ServiceCollectionHelpers
 {
-    public static IServiceProvider BuildPostItServices(this ServiceCollection services)
+    public static IServiceProvider BuildServices(this ServiceCollection services)
     {
         var settings = new Settings();
         settings.Load();
@@ -24,7 +22,6 @@ public static class ServiceCollectionHelpers
 
         var api = new YavscApiClient(settings, tokenStore);
         var client = new BlogApiClient(api, settings.BlogsApiUrl);
-        var userFilesClient = new UserFilesApiClient(api, settings.BlogsApiUrl);
         var circleClient = new CircleApiClient(api, settings.BlogsApiUrl);
         var blogAclClient = new BlogAclApiClient(api, settings.BlogsApiUrl);
         var userSearchClient = new UserSearchClient(api, settings.BlogsApiUrl);
@@ -34,20 +31,13 @@ public static class ServiceCollectionHelpers
             () => settings.Authentication?.Authority);
         var billingClient = new BillingApiClient(api, () => settings.ApiUrl);
         var estimateClient = new EstimateApiClient(api, () => settings.ApiUrl);
-        var frontClient = new FrontOfficeApiClient(api, () => settings.ApiUrl);
-        var resourceUsageClient = new ResourceUsageApiClient(api, () => settings.ApiUrl);
-        var notificationsClient = new NotificationsApiClient(api, () => settings.ApiUrl);
         var userDirectory = new UserDirectory(userSearchClient);
         var reverseGeocoding = new NominatimReverseGeocodingService();
 
         // Vues
-        services.AddTransient<MainWindow>();
-        services.AddTransient<MainView>();
-        services.AddTransient<BlogsPage>();
-
-
-        // Models
-        services.AddSingleton<ChatViewModel>();
+        services.AddSingleton<MainView>();
+        services.AddSingleton<BlogsPage>();
+        services.AddSingleton<MainWindow>();
 
         // SettingsPage is a singleton: there must be one and only one
         // instance of the settings UI for the lifetime of the app.
@@ -61,13 +51,11 @@ public static class ServiceCollectionHelpers
         // the navigation stack, each bound to a fresh
         // SettingsViewModel and missing any in-flight edits.
         services.AddSingleton<SettingsPage>();
-        services.AddSingleton<AboutPage>();
         services.AddSingleton<HomePage>();
         services.AddSingleton<SignaturePage>();
         services.AddSingleton<CirclesPage>();
         services.AddSingleton<ActivitiesPage>();
         services.AddTransient<CommandFormsPage>();
-        services.AddTransient<ChatPage>();
         services.AddTransient<RdvPage>();
         services.AddTransient<BrushPage>();
         services.AddTransient<BillingQueriesPage>();
@@ -75,12 +63,6 @@ public static class ServiceCollectionHelpers
         services.AddTransient<ProviderOngoingRequestsPage>();
         services.AddTransient<EstimateEditionPage>();
         services.AddTransient<EstimateListPage>();
-        services.AddTransient<EstimateValidationPage>();
-        services.AddTransient<MyFilesPage>();
-        services.AddTransient<UserProfilePage>();
-        services.AddTransient<PerformerConfigurationPage>();
-        services.AddTransient<AdministrationPage>();
-        services.AddTransient<ResourceUsagePage>();
 
         // ViewModels
         services.AddSingleton(settings);
@@ -92,17 +74,9 @@ public static class ServiceCollectionHelpers
         services.AddSingleton(activityClient);
         services.AddSingleton(billingClient);
         services.AddSingleton(estimateClient);
-        services.AddSingleton(frontClient);
-        services.AddSingleton(resourceUsageClient);
-        services.AddSingleton(notificationsClient);
-        services.AddSingleton(userFilesClient);
         services.AddSingleton<IReverseGeocodingService>(reverseGeocoding);
         services.AddSingleton<IUserDirectory>(userDirectory);
-        services.AddSingleton<AboutPageViewModel>();
         services.AddSingleton<HomePageViewModel>();
-        services.AddTransient<UserProfilePageViewModel>();
-        services.AddTransient<PerformerConfigurationPageViewModel>();
-        services.AddTransient<AdministrationPageViewModel>();
         services.AddSingleton<SignaturePageViewModel>();
         services.AddSingleton<CirclesPageViewModel>();
         services.AddSingleton<ActivitiesPageViewModel>();

src/PostIt/PostIt/Helpers/ViewModelBaseHelpers.cs

@@ -0,0 +1,53 @@
+using System;
+using System.Linq;
+using System.Threading.Tasks;
+using Avalonia.Controls;
+using PostIt.ViewModels;
+
+namespace PostIt.Helpers;
+
+public static class ViewModelBaseHelpers
+{
+    public static async Task<Page> PushPageAsync(this App app, ViewModelBase vm)
+    {
+        var window = app.View;
+        if (window is null)
+        {
+            throw new InvalidOperationException("MainWindow is not initialized yet.");
+        }
+
+        var template = app.DataTemplates.FirstOrDefault(t => t.Match(vm));
+        if (template is null)
+        {
+            throw new InvalidOperationException($"No IDataTemplate found for {vm.GetType().Name}.");
+        }
+
+        var view = template.Build(vm);
+        if (view is null)
+        {
+            throw new InvalidOperationException(
+                $"Template for {vm.GetType().Name} returned <null>.");
+        }
+
+        var page = view as Page;
+        if (page is null)
+        {
+            // NavigationPage expects Page instances. Wrap any fallback control
+            // (e.g. ViewLocator error TextBlock) into a ContentPage so it can render.
+            page = new ContentPage { Content = view };
+        }
+
+        page.DataContext = vm;
+
+        // Avoid stacking the same singleton page twice (e.g. SettingsPage).
+        var stack = window.NavRoot.NavigationStack;
+        if (stack.Count > 0 && ReferenceEquals(stack[stack.Count - 1], page))
+        {
+            return page;
+        }
+
+        await window.NavRoot.PushAsync(page);
+
+        return page;
+    }
+}

src/PostIt/PostIt/IVMPusherApp.cs

@@ -1,10 +0,0 @@
-using System.Threading.Tasks;
-using PostIt.ViewModels;
-using Avalonia.Controls;
-
-namespace PostIt;
-
-internal interface IVMPusherApp
-{
-    Task<Page> PushPageAsync(ViewModelBase viewModel);
-}

src/PostIt/PostIt/Interfaces/IPCMProcessor.cs

@@ -1,6 +0,0 @@
-using System;
-
-public interface IPCMProcessor : IDisposable
-{
-    void Process(short[] audioFrame);
-}

src/PostIt/PostIt/Lang/Resources.Designer.cs

@@ -1,72 +0,0 @@
-//------------------------------------------------------------------------------
-// <auto-generated>
-//     This code was generated by a tool.
-//     Runtime Version:4.0.30319.42000
-//
-//     Changes to this file may cause incorrect behavior and will be lost if
-//     the code is regenerated.
-// </auto-generated>
-//------------------------------------------------------------------------------
-
-namespace Yavsc.Lang {
-    using System;
-    
-    
-    /// <summary>
-    ///   A strongly-typed resource class, for looking up localized strings, etc.
-    /// </summary>
-    // This class was auto-generated by the StronglyTypedResourceBuilder
-    // class via a tool like ResGen or Visual Studio.
-    // To add or remove a member, edit your .ResX file then rerun ResGen
-    // with the /str option, or rebuild your VS project.
-    [global::System.CodeDom.Compiler.GeneratedCodeAttribute("System.Resources.Tools.StronglyTypedResourceBuilder", "17.0.0.0")]
-    [global::System.Diagnostics.DebuggerNonUserCodeAttribute()]
-    [global::System.Runtime.CompilerServices.CompilerGeneratedAttribute()]
-    public class Resources {
-        
-        private static global::System.Resources.ResourceManager resourceMan;
-        
-        private static global::System.Globalization.CultureInfo resourceCulture;
-        
-        [global::System.Diagnostics.CodeAnalysis.SuppressMessageAttribute("Microsoft.Performance", "CA1811:AvoidUncalledPrivateCode")]
-        public Resources() {
-        }
-        
-        /// <summary>
-        ///   Returns the cached ResourceManager instance used by this class.
-        /// </summary>
-        [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
-        public static global::System.Resources.ResourceManager ResourceManager {
-            get {
-                if (object.ReferenceEquals(resourceMan, null)) {
-                    global::System.Resources.ResourceManager temp = new global::System.Resources.ResourceManager("Yavsc.Lang.Resources", typeof(Resources).Assembly);
-                    resourceMan = temp;
-                }
-                return resourceMan;
-            }
-        }
-        
-        /// <summary>
-        ///   Overrides the current thread's CurrentUICulture property for all
-        ///   resource lookups using this strongly typed resource class.
-        /// </summary>
-        [global::System.ComponentModel.EditorBrowsableAttribute(global::System.ComponentModel.EditorBrowsableState.Advanced)]
-        public static global::System.Globalization.CultureInfo Culture {
-            get {
-                return resourceCulture;
-            }
-            set {
-                resourceCulture = value;
-            }
-        }
-        
-        /// <summary>
-        ///   Looks up a localized string similar to Bienvenue dans PostIt !!!.
-        /// </summary>
-        public static string GreetingText {
-            get {
-                return ResourceManager.GetString("GreetingText", resourceCulture);
-            }
-        }
-    }
-}

src/PostIt/PostIt/Lang/Resources.en-EN.resx

@@ -1,5 +0,0 @@
-<root>
-    <data name="GreetingText">
-        <value>Welcome to PostIt!</value>
-    </data>
-</root>

src/PostIt/PostIt/Lang/Resources.pt-PT.resx

@@ -1,5 +0,0 @@
-<root>
-    <data name="GreetingText">
-        <value>Bemvindo em PostIt!</value>
-    </data>
-</root>

src/PostIt/PostIt/Lang/Resources.resx

@@ -1,5 +0,0 @@
-<root>
-    <data name="GreetingText">
-        <value>Bienvenue dans PostIt !!!</value>
-    </data>
-</root>

src/PostIt/PostIt/Models/ChatMessage.cs

@@ -1,15 +0,0 @@
-namespace PostIt.ViewModels.Chat
-{
-    /// <summary>
-    /// DTO de message de salon, calqué sur la charge envoyée par
-    /// <c>ChatHub.Send</c> côté serveur ({ Name, Room, Message }).
-    /// Le protocole JSON de SignalR sérialise en camelCase ; la
-    /// désérialisation est insensible à la casse par défaut.
-    /// </summary>
-    public class ChatMessage
-    {
-        public string? Name { get; set; }
-        public string? Room { get; set; }
-        public string? Message { get; set; }
-    }
-}

src/PostIt/PostIt/Models/ChatMessageDto.cs

@@ -1,14 +0,0 @@
-namespace PostIt.ViewModels.Chat
-{
-    /// <summary>
-    /// DTO minimal calqué sur l'objet anonyme émis par le hub
-    /// (<c>{ Name, Room, Message }</c>) via l'événement
-    /// <c>ReceiveMessage</c>.
-    /// </summary>
-    public class ChatMessageDto
-    {
-        public string? Name { get; set; }
-        public string? Room { get; set; }
-        public string? Message { get; set; }
-    }
-}

src/PostIt/PostIt/Models/ChatRoomInfo.cs

@@ -1,11 +0,0 @@
-using System.Collections.Generic;
-
-namespace PostIt.ViewModels.Chat
-{
-    // DTO minimal calqué sur votre logique serveur ChatRoomInfo
-    public class ChatRoomInfo
-    {
-        public string? Name { get; set; }
-        public List<string> Users { get; set; } = new();
-    }
-}

src/PostIt/PostIt/Models/IWithLabel.cs

@@ -1,6 +0,0 @@
-namespace PostIt.ViewModels;
-
-internal interface IWithLabel
-{
-    string Label { get; }
-}

src/PostIt/PostIt/Models/StatusSeverity.cs

@@ -1,8 +0,0 @@
-namespace PostIt.Models;
-
-public enum StatusSeverity
-{
-    Info,
-    Warning,
-    Error
-}

src/PostIt/PostIt/PostIt.csproj

@@ -5,10 +5,8 @@
     <LangVersion>latest</LangVersion>
     <AssemblyVersion>1.1.0.0</AssemblyVersion>
     <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-estimate.1+364.Branch.feature-estimate.Sha.3d6ab6e72f9ba4ccfa250a1cce154b550281405e</InformationalVersion>
-    <Version>1.1.0-estimate.1</Version>
-    <AllowUnsafeBlocks>true</AllowUnsafeBlocks>
-
+    <InformationalVersion>1.1.0-feat-sign-estimate.1+306.Branch.feat-sign-estimate.Sha.e9a33695b38154859729b61d1280e596f1597acf</InformationalVersion>
+    <Version>1.1.0-feat-sign-estimate.1</Version>
   </PropertyGroup>
   <ItemGroup>
     <AvaloniaResource Include="Assets\**" />
@@ -25,43 +23,21 @@
   </ItemGroup>
   <ItemGroup>
     <PackageReference Include="Avalonia" />
-    <PackageReference Include="Avalonia.AvaloniaEdit" />
     <PackageReference Include="Avalonia.Themes.Fluent" />
     <PackageReference Include="Avalonia.Fonts.Inter" />
     <PackageReference Include="AvaloniaUI.DiagnosticsSupport">
       <IncludeAssets Condition="'$(Configuration)' != 'Debug'">None</IncludeAssets>
       <PrivateAssets Condition="'$(Configuration)' != 'Debug'">All</PrivateAssets>
     </PackageReference>
-    <PackageReference Include="LibVLCSharp.Avalonia" />
-    <PackageReference Include="Live.Avalonia" />
     <PackageReference Include="Mapsui" />
     <PackageReference Include="Mapsui.Avalonia12" />
     <PackageReference Include="CommunityToolkit.Mvvm" />
     <PackageReference Include="IdentityModel.OidcClient" />
     <PackageReference Include="MarkdownViewer.Core" />
-    <PackageReference Include="Microsoft.AspNetCore.SignalR.Client" />
     <PackageReference Include="Microsoft.Extensions.DependencyInjection" />
-    <PackageReference Include="Mono.Options" />
-    <PackageReference Include="PvRecorder" />
-    <PackageReference Include="Silk.NET.OpenAL" />
   </ItemGroup>
   <ItemGroup>
     <ProjectReference Include="../../Yavsc.Abstract/Yavsc.Abstract.csproj" />
     <ProjectReference Include="../../Yavsc.Api.Client/Yavsc.Api.Client.csproj" />
   </ItemGroup>
-  <ItemGroup>
-  <EmbeddedResource Update="Lang/Resources.resx">
-      <Generator>PublicResXFileCodeGenerator</Generator>
-      <LastGenOutput>Resources.Designer.cs</LastGenOutput>
-    </EmbeddedResource>
-  </ItemGroup>
-
-  <ItemGroup>
-    <Compile Update="Lang/Resources.Designer.cs">
-      <DesignTime>True</DesignTime>
-      <AutoGen>True</AutoGen>
-      <DependentUpon>Lang/Resources.resx</DependentUpon>
-    </Compile>
-    <Watch Include="**\*.xaml" />
-  </ItemGroup>
-</Project>
+</Project>

src/PostIt/PostIt/Services/AudioRecorder.cs

@@ -1,67 +0,0 @@
-using System;
-using System.Threading;
-using Pv;
-
-public class AudioRecorder : IDisposable
-{
-    private int frameLength;
-    PvRecorder recorder;
-
-    Thread thread;
-    short[] audioFrame;
-    IPCMProcessor processor;
-
-    public bool processing { get; private set; }
-
-    public AudioRecorder(IPCMProcessor processor, int frameLength=512, int deviceIndex = -1)
-    {
-        this.frameLength = frameLength;
-        this.recorder = PvRecorder.Create(frameLength: frameLength, deviceIndex: deviceIndex);
-        this.audioFrame = new short[frameLength];
-        this.processor=processor;
-    }
-
-    public static string [] GetAvailableDevices()
-    {
-        return PvRecorder.GetAvailableDevices();
-    }
-
-    public void Start()
-    {
-        recorder.Start();
-        thread = new Thread(ThreadLoop);
-        thread.Start();
-    }
-
-    public void ThreadLoop()
-    {
-        while (recorder.IsRecording)
-        {
-            if (thread.ThreadState != ThreadState.Running)
-            {
-                break;
-            }
-            if (processing)
-            {
-                Thread.Sleep(10);
-                continue;
-            }
-            processing = true;
-            audioFrame = recorder.Read();
-            processor.Process(audioFrame);
-            processing = false;
-        }
-    }
-
-    public void Stop()
-    {
-        thread.Interrupt();
-        thread.Join();
-        recorder.Stop();
-        thread = null;
-    }
-    public void Dispose()
-    {
-        recorder.Dispose();
-    }
-}

src/PostIt/PostIt/Services/YavscApiClient.cs

@@ -39,16 +39,6 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
     private readonly SemaphoreSlim _refreshGate = new(1, 1);
 
     private RefreshTokenRecord? _tokens;
-    private static readonly HttpRequestOptionsKey<bool> AnonymousRequest = new("PostIt.AnonymousRequest");
-
-    public virtual async Task<T> GetAnonymousAsync<T>(string path, CancellationToken ct = default)
-    {
-        using var request = new HttpRequestMessage(HttpMethod.Get, path);
-        request.Options.Set(AnonymousRequest, true);
-        using var response = await Http.SendAsync(request, ct).ConfigureAwait(false);
-        await EnsureSuccessOrThrowAsync(response, ct).ConfigureAwait(false);
-        return await ReadJsonAsync<T>(response, ct).ConfigureAwait(false);
-    }
 
     public YavscApiClient(Settings settings, TokenStore store, OidcClient? oidc = null)
     {
@@ -59,16 +49,6 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         _bearer = new BearerTokenHandler(this);
         Http = new HttpClient(_bearer, disposeHandler: true);
 
-        // HTTP/3 (QUIC) vers les APIs Yavsc : le edge nginx termine h3 sur
-        // tous les vhosts (listen 443 quic ; http3 on ; Alt-Svc h3=":443").
-        // RequestVersionOrLower négocie h3 quand le serveur ET la plateforme
-        // le permettent (Desktop avec libmsquic), et retombe sur h2/h1.1
-        // sinon — notamment WASM, où le navigateur n'expose pas QUIC au
-        // fetch, et Android si libmsquic n'est pas disponible. Tous les
-        // clients Yavsc.Api.Client partagent cette même instance `Http`.
-        Http.DefaultRequestVersion = new Version(3, 0);
-        Http.DefaultVersionPolicy = HttpVersionPolicy.RequestVersionOrLower;
-
         _tokens = store.Load();
     }
 
@@ -324,7 +304,7 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
             // Server rejected: could be revocation, clock skew, audience mismatch.
             // Force a refresh and retry exactly once.
             response.Dispose();
-            await ForceRefreshAsync(ct, req.Headers.Authorization?.Parameter).ConfigureAwait(false);
+            await ForceRefreshAsync(ct).ConfigureAwait(false);
 
             using var retry = new HttpRequestMessage(method, path);
             if (contentFactory is not null)
@@ -389,46 +369,13 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         if (_tokens.AccessTokenExpiresAt - DateTimeOffset.UtcNow > RefreshSkew)
             return;
 
-        await ForceRefreshAsync(ct).ConfigureAwait(false);
-    }
-
-    private async Task ForceRefreshAsync(CancellationToken ct, string? rejectedAccessToken = null)
-    {
         await _refreshGate.WaitAsync(ct).ConfigureAwait(false);
         try
         {
-            var tokens = _tokens;
-            if (tokens is null || string.IsNullOrEmpty(tokens.RefreshToken))
-                throw new InvalidOperationException("Session expirée. Veuillez vous reconnecter.");
-
-            if (rejectedAccessToken is null
-                ? tokens.AccessTokenExpiresAt - DateTimeOffset.UtcNow > RefreshSkew
-                : !string.Equals(tokens.AccessToken, rejectedAccessToken, StringComparison.Ordinal))
+            if (_tokens.AccessTokenExpiresAt - DateTimeOffset.UtcNow > RefreshSkew)
                 return;
 
-            var result = await _oidc.RefreshTokenAsync(tokens.RefreshToken, cancellationToken: ct).ConfigureAwait(false);
-            if (result.IsError)
-            {
-                var isPermanent = result.Error is "invalid_grant" or "invalid_client";
-                if (isPermanent)
-                {
-                    _store.Clear();
-                    _tokens = null;
-                }
-                throw new RefreshFailedException(
-                    isPermanent
-                        ? $"Session expirée. Veuillez vous reconnecter ({result.Error})."
-                        : $"Impossible de renouveler la session : {result.Error ?? "refresh failed"}.",
-                    isPermanent);
-            }
-
-            _tokens = new RefreshTokenRecord(
-                AccessToken: result.AccessToken!,
-                RefreshToken: result.RefreshToken ?? tokens.RefreshToken,
-                AccessTokenExpiresAt: ComputeExpiry(result.AccessTokenExpiration, result.AccessToken),
-                IdToken: result.IdentityToken ?? tokens.IdToken);
-
-            _store.Save(_tokens);
+            await ForceRefreshAsync(ct).ConfigureAwait(false);
         }
         finally
         {
@@ -436,6 +383,30 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         }
     }
 
+    private async Task ForceRefreshAsync(CancellationToken ct)
+    {
+        if (_tokens is null || string.IsNullOrEmpty(_tokens.RefreshToken))
+            throw new InvalidOperationException("No refresh token available.");
+
+        var result = await _oidc.RefreshTokenAsync(_tokens.RefreshToken, cancellationToken: ct).ConfigureAwait(false);
+        if (result.IsError)
+        {
+            // Refresh token dead: revoked, expired, or rotation-theft
+            // detected. Purge and force an interactive re-login.
+            _store.Clear();
+            _tokens = null;
+            throw new RefreshFailedException(result.Error ?? "refresh failed", isPermanent: true);
+        }
+
+        _tokens = new RefreshTokenRecord(
+            AccessToken: result.AccessToken!,
+            RefreshToken: result.RefreshToken ?? _tokens.RefreshToken,
+            AccessTokenExpiresAt: ComputeExpiry(result.AccessTokenExpiration, result.AccessToken),
+            IdToken: result.IdentityToken ?? _tokens.IdToken);
+
+        _store.Save(_tokens);
+    }
+
     /// <summary>
     /// Upload a user avatar to the Yavsc API. The server expects a
     /// single multipart file named <c>file</c> and validates the image
@@ -478,9 +449,8 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         var response = await attemptUpload().ConfigureAwait(false);
         if (response.StatusCode == HttpStatusCode.Unauthorized)
         {
-            var rejectedAccessToken = response.RequestMessage?.Headers.Authorization?.Parameter;
             response.Dispose();
-            await ForceRefreshAsync(ct, rejectedAccessToken).ConfigureAwait(false);
+            await ForceRefreshAsync(ct).ConfigureAwait(false);
             response = await attemptUpload().ConfigureAwait(false);
         }
 
@@ -508,42 +478,6 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         return "Avatar mis à jour.";
     }
 
-    /// <summary>
-    /// Download a binary resource (PDF, TeX, …) from the API. Unlike
-    /// <see cref="CallAsync{T}(HttpMethod, string, object?, CancellationToken)"/>,
-    /// which JSON-decodes the response, this returns the raw response
-    /// bytes. Reuses the same Bearer-token attach + 401-refresh-retry-once
-    /// contract as <see cref="SetAvatarAsync"/>.
-    /// </summary>
-    public virtual async Task<byte[]> DownloadAsync(
-        HttpMethod method,
-        string path,
-        CancellationToken ct = default)
-    {
-        if (_tokens is null)
-            throw new InvalidOperationException("Not logged in. Call LoginInteractiveAsync first.");
-
-        await EnsureFreshTokenAsync(ct).ConfigureAwait(false);
-
-        var sendOnce = async () =>
-        {
-            using var request = new HttpRequestMessage(method, path);
-            return await Http.SendAsync(request, ct).ConfigureAwait(false);
-        };
-
-        var response = await sendOnce().ConfigureAwait(false);
-        if (response.StatusCode == HttpStatusCode.Unauthorized)
-        {
-            var rejectedAccessToken = response.RequestMessage?.Headers.Authorization?.Parameter;
-            response.Dispose();
-            await ForceRefreshAsync(ct, rejectedAccessToken).ConfigureAwait(false);
-            response = await sendOnce().ConfigureAwait(false);
-        }
-
-        await EnsureSuccessOrThrowAsync(response, ct).ConfigureAwait(false);
-        return await response.Content.ReadAsByteArrayAsync(ct).ConfigureAwait(false);
-    }
-
     public async Task LogoutAsync()
     {
         _store.Clear();
@@ -624,8 +558,7 @@ public class YavscApiClient : IYavscApiClient, IAsyncDisposable
         protected override Task<HttpResponseMessage> SendAsync(
             HttpRequestMessage request, CancellationToken cancellationToken)
         {
-            if (_owner._tokens is not null
-                && !(request.Options.TryGetValue(AnonymousRequest, out var anonymous) && anonymous))
+            if (_owner._tokens is not null)
                 request.Headers.Authorization = new AuthenticationHeaderValue(
                     "Bearer", _owner._tokens.AccessToken);
             return base.SendAsync(request, cancellationToken);

src/PostIt/PostIt/ViewLocator.cs

@@ -5,10 +5,8 @@ using Avalonia.Controls.Templates;
 using Microsoft.Extensions.DependencyInjection;
 using PostIt.ViewModels;
 using PostIt.ViewModels.Commands;
-using PostIt.ViewModels.Chat;
 using PostIt.Views;
 using PostIt.Views.Blogs;
-using PostIt.Views.Chat;
 using PostIt.Views.Commands;
 
 namespace PostIt;
@@ -43,7 +41,6 @@ public class ViewLocator : IDataTemplate
         {
             BlogsViewModel => services.GetRequiredService<BlogsPage>(),
             Settings => services.GetRequiredService<SettingsPage>(),
-            AboutPageViewModel => services.GetRequiredService<AboutPage>(),
             HomePageViewModel => services.GetRequiredService<HomePage>(),
             ActivitiesPageViewModel => services.GetRequiredService<ActivitiesPage>(),
             CommandFormsPageViewModel => services.GetRequiredService<CommandFormsPage>(),
@@ -58,13 +55,6 @@ public class ViewLocator : IDataTemplate
             ProviderOngoingRequestsPageViewModel => services.GetRequiredService<ProviderOngoingRequestsPage>(),
             EstimateEditionPageViewModel => services.GetRequiredService<EstimateEditionPage>(),
             EstimateListPageViewModel => services.GetRequiredService<EstimateListPage>(),
-            EstimateValidationPageViewModel => services.GetRequiredService<EstimateValidationPage>(),
-            MyFilesViewModel => services.GetRequiredService<MyFilesPage>(),
-            UserProfilePageViewModel => services.GetRequiredService<UserProfilePage>(),
-            PerformerConfigurationPageViewModel => services.GetRequiredService<PerformerConfigurationPage>(),
-            AdministrationPageViewModel => services.GetRequiredService<AdministrationPage>(),
-            ResourceUsagePageViewModel => services.GetRequiredService<ResourceUsagePage>(),
-            ChatViewModel => services.GetRequiredService<ChatPage>(),
             null => new TextBlock { Text = "No view for <null>" },
             _ => new TextBlock { Text = $"No view for {data.GetType().Name}" }
         };

src/PostIt/PostIt/ViewModels/ACL/CirclesPageViewModel.cs

@@ -5,7 +5,7 @@ using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
-using PostIt.Models;
+using PostIt.Helpers;
 using PostIt.Services;
 using Yavsc.Api.Client;
 using Yavsc.Api.Client.Dtos;

src/PostIt/PostIt/ViewModels/ACL/PostAclDialogViewModel.cs

@@ -12,7 +12,6 @@ using Yavsc.Api.Client.Dtos;
 using Yavsc.Abstract.BlogSpot;
 using Yavsc.Abstract.Identity.Security;
 using System.Net.Http;
-using PostIt.Models;
 
 namespace PostIt.ViewModels;
 

src/PostIt/PostIt/ViewModels/Activity/ActivitiesPageViewModel.cs

@@ -8,7 +8,6 @@ using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using PostIt.Helpers;
-using PostIt.Models;
 using Yavsc.Abstract.Workflow;
 using Yavsc.Api.Client;
 

src/PostIt/PostIt/ViewModels/Activity/BillingQueriesPageViewModel.cs

@@ -7,12 +7,10 @@ using System.Threading.Tasks;
 using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
-using Microsoft.Extensions.DependencyInjection;
 using PostIt.Helpers;
 using Yavsc;
 using Yavsc.Api.Client;
 using Yavsc.Abstract.Workflow;
-using PostIt.Models;
 
 namespace PostIt.ViewModels;
 
@@ -132,19 +130,13 @@ public partial class BillingQueriesPageViewModel : ViewModelBase, IActionStatusV
         try
         {
             var details = await _billingClient.GetQueryAsync(Form.ActionName, SelectedQuery.Id).ConfigureAwait(true);
-            var frontClient = app.ServiceProvider?.GetRequiredService<FrontOfficeApiClient>();
-            var fsClient = app.ServiceProvider?.GetRequiredService<UserFilesApiClient>();
             var vm = new BillingQueryDetailsPageViewModel(
                 Activity,
                 Performer,
                 Form,
                 _billingClient,
-                frontClient,
-                fsClient,
                 details,
-                IsReadOnly,
-                canAttach: !IsReadOnly);
-            await vm.InitializeAsync().ConfigureAwait(true);
+                IsReadOnly);
             await app.PushPageAsync(vm).ConfigureAwait(true);
         }
         catch (HttpRequestException ex) when (ex.StatusCode is HttpStatusCode.Unauthorized or HttpStatusCode.Forbidden)
@@ -179,9 +171,5 @@ public partial class BillingQueriesPageViewModel : ViewModelBase, IActionStatusV
     }
 
     private static bool IsOngoingStatus(QueryStatus status)
-        => status is QueryStatus.Inserted
-            or QueryStatus.Accepted
-            or QueryStatus.ProAccepted
-            or QueryStatus.ClientAccepted
-            or QueryStatus.InProgress;
+        => status is QueryStatus.Inserted or QueryStatus.Accepted or QueryStatus.InProgress;
 }

src/PostIt/PostIt/ViewModels/Activity/BillingQueryDetailsPageViewModel.cs

@@ -1,5 +1,4 @@
 using System;
-using System.Collections.ObjectModel;
 using System.Linq;
 using System.Threading.Tasks;
 using Avalonia;
@@ -15,18 +14,8 @@ namespace PostIt.ViewModels;
 public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionStatusViewModel
 {
     private readonly BillingApiClient _billingClient;
-    private readonly FrontOfficeApiClient _frontClient;
-    private readonly UserFilesApiClient _fsClient;
     private readonly BillingQueryDetailsDto _details;
 
-    /// <summary>
-    /// Vrai lorsque l'utilisateur courant est le client de la demande
-    /// et peut y attacher/détacher des fichiers de son espace perso.
-    /// Le fournisseur consulte et télécharge les pièces mais n'attache
-    /// pas (il joint ses documents au devis, côté <c>EstimateEditionPage</c>).
-    /// </summary>
-    public bool CanAttach { get; }
-
     public ActivityInfo Activity { get; }
     public ActivityUserDisplayItem Performer { get; }
     public CommandFormSummary Form { get; }
@@ -62,10 +51,6 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
     [ObservableProperty]
     public partial StatusNotice ActionStatus { get; set; } = StatusNotice.Info("Pret.");
 
-    /// <summary>Pièces jointes rattachées à la demande (par référence).</summary>
-    [ObservableProperty]
-    public partial ObservableCollection<AttachmentDto> Attachments { get; set; } = new();
-
     public override bool CanNavigateNext
     {
         get => false;
@@ -83,28 +68,19 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         ActivityUserDisplayItem performer,
         CommandFormSummary form,
         BillingApiClient billingClient,
-        FrontOfficeApiClient frontClient,
-        UserFilesApiClient fsClient,
         BillingQueryDetailsDto details,
-        bool isReadOnly,
-        bool canAttach)
+        bool isReadOnly)
     {
         Activity = activity ?? throw new ArgumentNullException(nameof(activity));
         Performer = performer ?? throw new ArgumentNullException(nameof(performer));
         Form = form ?? throw new ArgumentNullException(nameof(form));
         _billingClient = billingClient ?? throw new ArgumentNullException(nameof(billingClient));
-        _frontClient = frontClient ?? throw new ArgumentNullException(nameof(frontClient));
-        _fsClient = fsClient ?? throw new ArgumentNullException(nameof(fsClient));
         _details = details ?? throw new ArgumentNullException(nameof(details));
         IsReadOnly = isReadOnly;
-        CanAttach = canAttach;
 
         this.SetInfoStatus("Details de commande charges.");
     }
 
-    /// <summary>Constructeur pour le designer Avalonia.</summary>
-    public BillingQueryDetailsPageViewModel() : this(null!, null!, null!, null!, null!, null!, null!, false, false) { }
-
     [RelayCommand]
     private async Task OpenEditorAsync()
     {
@@ -155,157 +131,6 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         await app.GoBackAsync().ConfigureAwait(true);
     }
 
-    /// <summary>Charge les pièces jointes de la demande.</summary>
-    public async Task InitializeAsync()
-    {
-        await LoadQueryAttachmentsAsync().ConfigureAwait(true);
-    }
-
-    [RelayCommand]
-    private async Task LoadQueryAttachmentsAsync()
-    {
-        try
-        {
-            var list = await _frontClient
-                .GetQueryAttachmentsAsync(BillingCode, Id)
-                .ConfigureAwait(true);
-            Attachments.Clear();
-            if (list is not null)
-                foreach (var a in list) Attachments.Add(a);
-        }
-        catch (Exception ex)
-        {
-            // Non bloquant : les pièces jointes sont un complément.
-            this.SetWarningStatus($"Pièces jointes indisponibles : {ex.Message}");
-        }
-    }
-
-    /// <summary>
-    /// Ouvre la page « My Files » en mode sélecteur ; le fichier choisi
-    /// est rattaché à la demande par référence via
-    /// <c>POST front/query/{id}/attachments</c>. Réservé au client
-    /// (<see cref="CanAttach"/>).
-    /// </summary>
-    [RelayCommand]
-    private async Task AddQueryAttachmentAsync()
-    {
-        if (!CanAttach) return;
-
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var billingCode = BillingCode;
-        var queryId = Id;
-        var picker = new MyFilesViewModel(_fsClient, async fileId =>
-        {
-            try
-            {
-                await _frontClient.AttachQueryFileAsync(billingCode, queryId, fileId).ConfigureAwait(true);
-                await LoadQueryAttachmentsAsync().ConfigureAwait(true);
-                this.SetInfoStatus("Pièce jointe ajoutée à la demande.");
-            }
-            catch (Exception ex)
-            {
-                this.SetErrorStatus($"Échec de l'attachement : {ex.Message}");
-            }
-        });
-        await picker.InitializeAsync().ConfigureAwait(true);
-        await app.PushPageAsync(picker).ConfigureAwait(true);
-    }
-
-    [RelayCommand]
-    private async Task DetachQueryFileAsync(AttachmentDto? attachment)
-    {
-        if (attachment is null || !CanAttach) return;
-        IsBusy = true;
-        try
-        {
-            await _frontClient.DetachQueryFileAsync(BillingCode, Id, attachment.FileId).ConfigureAwait(true);
-            Attachments.Remove(attachment);
-            this.SetInfoStatus("Pièce jointe détachée de la demande.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du détachement : {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    [RelayCommand]
-    private async Task DownloadQueryAttachmentAsync(AttachmentDto? attachment)
-    {
-        if (attachment is null) return;
-        IsBusy = true;
-        try
-        {
-            var bytes = await _fsClient.DownloadFileAsync(attachment.FileId).ConfigureAwait(true);
-            var name = System.IO.Path.GetFileName(attachment.Path ?? "file");
-            var saved = await FileSaveHelpers.SaveAsync(name, "bin", bytes).ConfigureAwait(true);
-            this.SetInfoStatus(saved ? "Fichier enregistré." : "Téléchargement annulé.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du téléchargement : {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    /// <summary>
-    /// Download the estimate linked to this command as a LaTeX source
-    /// (<c>GET api/v1/front/query/{Id}/estimate.tex</c>). The estimate is
-    /// resolved server-side from <c>Estimate.CommandId == query Id</c>.
-    /// </summary>
-    [RelayCommand]
-    public async Task DownloadTexAsync()
-    {
-        await DownloadAsync(
-            () => _frontClient.GetEstimateTexAsync(_details.Id),
-            $"devis-{_details.Id}", "tex").ConfigureAwait(true);
-    }
-
-    /// <summary>
-    /// Download the estimate linked to this command as a compiled PDF
-    /// (<c>GET api/v1/front/query/{Id}/estimate.pdf</c>). Requires
-    /// <c>texi2pdf</c> on the server host.
-    /// </summary>
-    [RelayCommand]
-    public async Task DownloadPdfAsync()
-    {
-        await DownloadAsync(
-            () => _frontClient.GetEstimatePdfAsync(_details.Id),
-            $"devis-{_details.Id}", "pdf").ConfigureAwait(true);
-    }
-
-    private async Task DownloadAsync(Func<Task<byte[]>> fetch, string fileName, string ext)
-    {
-        IsBusy = true;
-        try
-        {
-            var bytes = await fetch().ConfigureAwait(true);
-            var saved = await FileSaveHelpers.SaveAsync(fileName, ext, bytes).ConfigureAwait(true);
-            this.SetInfoStatus(saved
-                ? $"Fichier .{ext} enregistré."
-                : "Téléchargement annulé.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du téléchargement: {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
     private static string EmptyAsPlaceholder(string? value, string placeholder)
         => string.IsNullOrWhiteSpace(value) ? placeholder : value;
 
@@ -341,8 +166,6 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         => status switch
         {
             QueryStatus.Accepted => "#E6F7EC",
-            QueryStatus.ProAccepted => "#E6F7EC",
-            QueryStatus.ClientAccepted => "#E1F5FE",
             QueryStatus.InProgress => "#FFF4D6",
             QueryStatus.Rejected => "#FDECEA",
             QueryStatus.Failed => "#ECEFF1",
@@ -354,8 +177,6 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         => status switch
         {
             QueryStatus.Accepted => "#2E7D32",
-            QueryStatus.ProAccepted => "#2E7D32",
-            QueryStatus.ClientAccepted => "#1565C0",
             QueryStatus.InProgress => "#B26A00",
             QueryStatus.Rejected => "#C62828",
             QueryStatus.Failed => "#607D8B",
@@ -367,8 +188,6 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         => status switch
         {
             QueryStatus.Accepted => "#1B5E20",
-            QueryStatus.ProAccepted => "#1B5E20",
-            QueryStatus.ClientAccepted => "#0D47A1",
             QueryStatus.InProgress => "#7A4A00",
             QueryStatus.Rejected => "#8E0000",
             QueryStatus.Failed => "#37474F",
@@ -380,12 +199,10 @@ public partial class BillingQueryDetailsPageViewModel : ViewModelBase, IActionSt
         => status switch
         {
             QueryStatus.Accepted => "OK",
-            QueryStatus.ProAccepted => "P",
-            QueryStatus.ClientAccepted => "C",
             QueryStatus.InProgress => "~",
             QueryStatus.Rejected => "!",
             QueryStatus.Failed => "X",
             QueryStatus.Success => "V",
             _ => "i",
         };
-}
+}

src/PostIt/PostIt/ViewModels/Activity/CommandFormsPageViewModel.cs

@@ -6,7 +6,6 @@ using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using PostIt.Helpers;
-using PostIt.Models;
 using Yavsc.Abstract.Workflow;
 using Yavsc.Api.Client;
 

src/PostIt/PostIt/ViewModels/Activity/EstimateEditionPageViewModel.cs

@@ -10,7 +10,6 @@ using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using PostIt.Helpers;
-using PostIt.Models;
 using Yavsc.Api.Client;
 
 namespace PostIt.ViewModels;
@@ -26,7 +25,6 @@ namespace PostIt.ViewModels;
 public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatusViewModel
 {
     private readonly EstimateApiClient _estimateClient;
-    private readonly UserFilesApiClient _fsClient;
     private readonly BillingQuerySummaryDto _query;
 
     public long QueryId => _query.Id;
@@ -70,14 +68,6 @@ public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatus
     [ObservableProperty]
     public partial StatusNotice ActionStatus { get; set; } = StatusNotice.Info("Prêt.");
 
-    /// <summary>Identifiant du devis, renseigné après l'envoi.</summary>
-    [ObservableProperty, NotifyCanExecuteChangedFor(nameof(AddAttachmentCommand))]
-    public partial long? EstimateId { get; set; }
-
-    /// <summary>Pièces jointes rattachées au devis (par référence).</summary>
-    [ObservableProperty]
-    public partial ObservableCollection<AttachmentDto> Attachments { get; set; } = new();
-
     public decimal Total => Lines.Sum(line => line.LineTotal);
 
     public string TotalLabel => $"{Total:0.00} {Lines.FirstOrDefault()?.Currency ?? "EUR"}";
@@ -96,14 +86,10 @@ public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatus
         protected set { _ = value; }
     }
 
-    public EstimateEditionPageViewModel(
-        BillingQuerySummaryDto query,
-        EstimateApiClient estimateClient,
-        UserFilesApiClient fsClient)
+    public EstimateEditionPageViewModel(BillingQuerySummaryDto query, EstimateApiClient estimateClient)
     {
         _query = query ?? throw new ArgumentNullException(nameof(query));
         _estimateClient = estimateClient ?? throw new ArgumentNullException(nameof(estimateClient));
-        _fsClient = fsClient ?? throw new ArgumentNullException(nameof(fsClient));
 
         EstimateDescription = query.Description ?? string.Empty;
         Lines.CollectionChanged += OnLinesCollectionChanged;
@@ -112,9 +98,6 @@ public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatus
         this.SetInfoStatus("Complétez le devis puis envoyez-le. La demande associée sera validée.");
     }
 
-    /// <summary>Constructeur pour le designer Avalonia.</summary>
-    public EstimateEditionPageViewModel() : this(null!, null!, null!) { }
-
     [RelayCommand]
     private void AddLine()
     {
@@ -158,11 +141,9 @@ public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatus
             var created = await _estimateClient.CreateAsync(payload).ConfigureAwait(true);
 
             HasSent = true;
-            EstimateId = created.Id;
             OnPropertyChanged(nameof(SendLabel));
             this.SetInfoStatus(
                 $"Devis #{created.Id} envoyé ({created.Bill.Count} ligne(s)). La demande #{QueryId} est validée.");
-            await LoadAttachmentsAsync().ConfigureAwait(true);
         }
         catch (HttpRequestException ex) when (ex.StatusCode is HttpStatusCode.Unauthorized or HttpStatusCode.Forbidden)
         {
@@ -190,106 +171,6 @@ public partial class EstimateEditionPageViewModel : ViewModelBase, IActionStatus
         await app.GoBackAsync().ConfigureAwait(true);
     }
 
-    /// <summary>
-    /// Charge les pièces jointes rattachées au devis courant
-    /// (<c>GET estimate/{id}/attachments</c>).
-    /// </summary>
-    [RelayCommand]
-    private async Task LoadAttachmentsAsync()
-    {
-        if (EstimateId is null || _estimateClient is null) return;
-        try
-        {
-            var list = await _estimateClient.GetAttachmentsAsync(EstimateId.Value).ConfigureAwait(true);
-            Attachments.Clear();
-            if (list is not null)
-                foreach (var a in list) Attachments.Add(a);
-        }
-        catch (Exception ex)
-        {
-            this.SetWarningStatus($"Impossible de charger les pièces jointes : {ex.Message}");
-        }
-    }
-
-    private bool CanAddAttachment() => EstimateId is not null && !IsBusy;
-
-    /// <summary>
-    /// Ouvre la page « My Files » en mode sélecteur ; le fichier choisi
-    /// est rattaché au devis par référence via
-    /// <c>POST estimate/{id}/attachments</c>.
-    /// </summary>
-    [RelayCommand(CanExecute = nameof(CanAddAttachment))]
-    private async Task AddAttachmentAsync()
-    {
-        if (EstimateId is null) return;
-
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var estimateId = EstimateId.Value;
-        var picker = new MyFilesViewModel(_fsClient, async fileId =>
-        {
-            try
-            {
-                await _estimateClient.AttachFileAsync(estimateId, fileId).ConfigureAwait(true);
-                await LoadAttachmentsAsync().ConfigureAwait(true);
-                this.SetInfoStatus("Pièce jointe ajoutée au devis.");
-            }
-            catch (Exception ex)
-            {
-                this.SetErrorStatus($"Échec de l'attachement : {ex.Message}");
-            }
-        });
-        await picker.InitializeAsync().ConfigureAwait(true);
-        await app.PushPageAsync(picker).ConfigureAwait(true);
-    }
-
-    [RelayCommand]
-    private async Task DetachFileAsync(AttachmentDto? attachment)
-    {
-        if (attachment is null || EstimateId is null) return;
-        IsBusy = true;
-        try
-        {
-            await _estimateClient.DetachFileAsync(EstimateId.Value, attachment.FileId).ConfigureAwait(true);
-            Attachments.Remove(attachment);
-            this.SetInfoStatus("Pièce jointe détachée du devis.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du détachement : {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    [RelayCommand]
-    private async Task DownloadAttachmentAsync(AttachmentDto? attachment)
-    {
-        if (attachment is null) return;
-        IsBusy = true;
-        try
-        {
-            var bytes = await _fsClient.DownloadFileAsync(attachment.FileId).ConfigureAwait(true);
-            var name = System.IO.Path.GetFileName(attachment.Path ?? "file");
-            var saved = await FileSaveHelpers.SaveAsync(name, "bin", bytes).ConfigureAwait(true);
-            this.SetInfoStatus(saved ? "Fichier enregistré." : "Téléchargement annulé.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du téléchargement : {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
     internal EstimateDto BuildPayload()
     {
         return new EstimateDto

src/PostIt/PostIt/ViewModels/Activity/EstimateListPageViewModel.cs

@@ -5,11 +5,9 @@ using System.Linq;
 using System.Net;
 using System.Net.Http;
 using System.Threading.Tasks;
-using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using PostIt.Helpers;
-using PostIt.Models;
 using Yavsc.Api.Client;
 
 namespace PostIt.ViewModels;
@@ -20,10 +18,10 @@ namespace PostIt.ViewModels;
 /// </summary>
 public enum EstimateListPerspective
 {
-    /// <summary>« Devis en attente de signature client » — l'utilisateur courant est le client.</summary>
+    /// <summary>« Mes devis à valider » — l'utilisateur courant est le client.</summary>
     Client,
 
-    /// <summary>« Devis en attente de signature fournisseur » — l'utilisateur courant est le fournisseur.</summary>
+    /// <summary>« Mes devis en attente » — l'utilisateur courant est le fournisseur.</summary>
     Provider,
 }
 
@@ -34,15 +32,14 @@ public enum EstimateListPerspective
 public partial class EstimateListPageViewModel : ViewModelBase, IActionStatusViewModel
 {
     private readonly EstimateApiClient _estimateClient;
-    private readonly FrontOfficeApiClient _frontClient;
     private readonly EstimateListPerspective _perspective;
     private List<EstimateDto> _allEstimates = new();
 
     public EstimateListPerspective Perspective => _perspective;
 
     public string Title => _perspective == EstimateListPerspective.Client
-        ? "Devis en attente de signature client"
-        : "Devis en attente de signature fournisseur";
+        ? "Mes devis à valider"
+        : "Mes devis en attente";
 
     public string Subtitle => _perspective == EstimateListPerspective.Client
         ? "Point de vue client"
@@ -86,14 +83,10 @@ public partial class EstimateListPageViewModel : ViewModelBase, IActionStatusVie
         protected set { _ = value; }
     }
 
-    public EstimateListPageViewModel(
-        EstimateApiClient estimateClient,
-        EstimateListPerspective perspective,
-        FrontOfficeApiClient frontClient)
+    public EstimateListPageViewModel(EstimateApiClient estimateClient, EstimateListPerspective perspective)
     {
         _estimateClient = estimateClient ?? throw new ArgumentNullException(nameof(estimateClient));
         _perspective = perspective;
-        _frontClient = frontClient ?? throw new ArgumentNullException(nameof(frontClient));
     }
 
     public Task InitializeAsync() => RefreshAsync();
@@ -160,25 +153,4 @@ public partial class EstimateListPageViewModel : ViewModelBase, IActionStatusVie
     private static bool ContainsInsensitive(string? value, string query)
         => !string.IsNullOrWhiteSpace(value)
            && value.Contains(query, StringComparison.OrdinalIgnoreCase);
-
-    /// <summary>
-    /// Open the estimate validation (accept/reject with signature)
-    /// page for a specific estimate. The perspective the list was
-    /// opened in is forwarded as the actor-role UI hint; the server
-    /// independently enforces the real authorization.
-    /// </summary>
-    [RelayCommand]
-    private async Task OpenEstimateAsync(EstimateDto? estimate)
-    {
-        if (estimate is null) return;
-
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var vm = new EstimateValidationPageViewModel(estimate, _perspective, _frontClient);
-        await app.PushPageAsync(vm).ConfigureAwait(true);
-    }
 }

src/PostIt/PostIt/ViewModels/Activity/EstimateValidationPageViewModel.cs

@@ -1,399 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Linq;
-using System.Net.Http;
-using System.Threading.Tasks;
-using Avalonia;
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-using PostIt.Controls;
-using PostIt.Helpers;
-using PostIt.Models;
-using Yavsc.Api.Client;
-using Yavsc.Models.Billing;
-
-namespace PostIt.ViewModels;
-
-/// <summary>
-/// Validation (accept / reject) of a single estimate, with optional
-/// signatures. Backs the estimate validation page opened from
-/// <see cref="EstimateListPageViewModel"/> for either perspective.
-///
-/// <para>Two signatures are shown, each in its own pad: the provider's
-/// (Pro) and the client's (Client). Both are rendered from the estimate
-/// payload when present, so reopening a partly-signed estimate shows
-/// what was already captured. Only the pad matching the current
-/// <see cref="EstimateListPerspective"/> is writable — the server
-/// (<c>POST api/v1/front/query/accept</c>) independently enforces the
-/// same rule (it resolves the caller's role from the authenticated user
-/// vs the query's <c>PerformerId</c>/<c>ClientId</c>), and the UI marks
-/// the other pad read-only. The billing code sent to the server is the
-/// estimate's <see cref="EstimateDto.CommandType"/> and the query id is
-/// its <see cref="EstimateDto.CommandId"/>.</para>
-/// </summary>
-public partial class EstimateValidationPageViewModel : ViewModelBase, IActionStatusViewModel
-{
-    private readonly EstimateDto _estimate;
-    private readonly EstimateListPerspective _perspective;
-    private readonly FrontOfficeApiClient _frontClient;
-    private SignaturePadControl? _proPad;
-    private SignaturePadControl? _clientPad;
-
-    public string Title => _estimate.Title;
-    public string Description => _estimate.Description;
-    public long EstimateId => _estimate.Id;
-    public string CommandType => _estimate.CommandType;
-    public IReadOnlyList<EstimateLineDto> Bill => _estimate.Bill;
-    public DateTime ProviderValidationDate => _estimate.ProviderValidationDate;
-    public DateTime ClientValidationDate => _estimate.ClientValidationDate;
-
-    public string RoleLabel => _perspective == EstimateListPerspective.Provider
-        ? "Vous validez en tant que prestataire"
-        : "Vous validez en tant que client";
-
-    /// <summary>
-    /// True when the current user may sign the provider's signature
-    /// (i.e. they opened the list as the provider). The other party's
-    /// pad is read-only.
-    /// </summary>
-    public bool CanWritePro => _perspective == EstimateListPerspective.Provider;
-
-    /// <summary>
-    /// True when the current user may sign the client's signature
-    /// (i.e. they opened the list as the client).
-    /// </summary>
-    public bool CanWriteClient => _perspective == EstimateListPerspective.Client;
-
-    /// <summary>
-    /// Human-readable summary of who has already validated this
-    /// estimate, shown above the signature pads.
-    /// </summary>
-    public string ValidationStateText
-    {
-        get
-        {
-            var parts = new List<string>();
-            if (ProviderValidationDate != default)
-                parts.Add($"Prestataire validé le {ProviderValidationDate.ToLocalTime():g}");
-            if (ClientValidationDate != default)
-                parts.Add($"Client validé le {ClientValidationDate.ToLocalTime():g}");
-            return parts.Count == 0 ? "Devis en attente de validation." : string.Join(" · ", parts);
-        }
-    }
-
-    /// <summary>
-    /// True when the estimate has a linked query to accept/reject.
-    /// Estimates without a <see cref="EstimateDto.CommandId"/> are
-    /// templates and cannot be validated through the front-office
-    /// endpoint.
-    /// </summary>
-    public bool HasCommand => _estimate.CommandId is not null;
-
-    [ObservableProperty]
-    public partial bool IsBusy { get; set; }
-
-    [ObservableProperty]
-    public partial string StatusMessage { get; set; } = "Prêt.";
-
-    [ObservableProperty]
-    public partial StatusNotice ActionStatus { get; set; } = StatusNotice.Info("Prêt.");
-
-    /// <summary>Stroke/point counts for the writable pad.</summary>
-    [ObservableProperty]
-    public partial int StrokeCount { get; set; }
-
-    [ObservableProperty]
-    public partial int PointCount { get; set; }
-
-    /// <summary>True when the writable pad holds a signature.</summary>
-    [ObservableProperty]
-    public partial bool HasSignature { get; set; }
-
-    [ObservableProperty]
-    public partial bool HasProSignature { get; set; }
-
-    [ObservableProperty]
-    public partial bool HasClientSignature { get; set; }
-
-    [ObservableProperty]
-    public partial string ProSignatureHint { get; set; } = string.Empty;
-
-    [ObservableProperty]
-    public partial string ClientSignatureHint { get; set; } = string.Empty;
-
-    public override bool CanNavigateNext
-    {
-        get => false;
-        protected set { _ = value; }
-    }
-
-    public override bool CanNavigatePrevious
-    {
-        get => true;
-        protected set { _ = value; }
-    }
-
-    public EstimateValidationPageViewModel(
-        EstimateDto estimate,
-        EstimateListPerspective perspective,
-        FrontOfficeApiClient frontClient)
-    {
-        _estimate = estimate ?? throw new ArgumentNullException(nameof(estimate));
-        _perspective = perspective;
-        _frontClient = frontClient ?? throw new ArgumentNullException(nameof(frontClient));
-    }
-
-    /// <summary>
-    /// Bind the page's two signature pads (the inner controls of the
-    /// page's <see cref="SignaturePadView"/>s): the provider's pad and
-    /// the client's pad. Called from the view's code-behind once the
-    /// view is in the visual tree. Marks the non-author pad read-only,
-    /// then renders any signatures already carried on the estimate
-    /// payload.
-    /// </summary>
-    public void Attach(SignaturePadControl proPad, SignaturePadControl clientPad)
-    {
-        if (proPad is null) throw new ArgumentNullException(nameof(proPad));
-        if (clientPad is null) throw new ArgumentNullException(nameof(clientPad));
-        Detach();
-        _proPad = proPad;
-        _clientPad = clientPad;
-        _proPad.IsReadOnly = !CanWritePro;
-        _clientPad.IsReadOnly = !CanWriteClient;
-        _proPad.RedrawRequested += OnPadRedraw;
-        _clientPad.RedrawRequested += OnPadRedraw;
-        LoadExistingSignatures();
-        RefreshFromPad();
-    }
-
-    public void Detach()
-    {
-        if (_proPad is not null)
-            _proPad.RedrawRequested -= OnPadRedraw;
-        if (_clientPad is not null)
-            _clientPad.RedrawRequested -= OnPadRedraw;
-        _proPad = null;
-        _clientPad = null;
-    }
-
-    private void OnPadRedraw(object? sender, EventArgs e) => RefreshFromPad();
-
-    /// <summary>The pad the current user may sign in.</summary>
-    private SignaturePadControl? WritablePad => CanWritePro ? _proPad : _clientPad;
-
-    /// <summary>
-    /// Render the signatures already stored for this estimate back into
-    /// their pads. The strokes are carried on the estimate payload as
-    /// two dedicated slots — <see cref="EstimateDto.SignaturePro"/> and
-    /// <see cref="EstimateDto.SignatureClient"/> — so each pad loads
-    /// its own side directly, in the same wire format PostIt captured.
-    /// No network round-trip.
-    /// </summary>
-    public void LoadExistingSignatures()
-    {
-        LoadSide(_proPad, _estimate.SignaturePro);
-        LoadSide(_clientPad, _estimate.SignatureClient);
-        RefreshFromPad();
-    }
-
-    private static void LoadSide(SignaturePadControl? pad, EstimateSignatureDto? sig)
-    {
-        if (pad is null || sig is null) return;
-        if (sig.Strokes is { Length: > 0 } strokes)
-            pad.Load(strokes);
-    }
-
-    private void RefreshFromPad()
-    {
-        HasProSignature = _proPad?.Snapshot().IsEmpty == false;
-        HasClientSignature = _clientPad?.Snapshot().IsEmpty == false;
-
-        ProSignatureHint = CanWritePro
-            ? (HasProSignature ? "Signé — dessinez pour remplacer" : "Signez ici en tant que prestataire")
-            : (HasProSignature ? "Signature du prestataire (lecture seule)" : "En attente de signature du prestataire");
-        ClientSignatureHint = CanWriteClient
-            ? (HasClientSignature ? "Signé — dessinez pour remplacer" : "Signez ici en tant que client")
-            : (HasClientSignature ? "Signature du client (lecture seule)" : "En attente de signature du client");
-
-        var pad = WritablePad;
-        if (pad is null) return;
-        var snap = pad.Snapshot();
-        StrokeCount = snap.StrokeCount;
-        PointCount = snap.PointCount;
-        HasSignature = !snap.IsEmpty;
-    }
-
-    partial void OnIsBusyChanged(bool value)
-    {
-        ValidateCommand.NotifyCanExecuteChanged();
-        RejectCommand.NotifyCanExecuteChanged();
-    }
-
-    partial void OnHasSignatureChanged(bool value)
-        => ValidateCommand.NotifyCanExecuteChanged();
-
-    private bool CanValidate => !IsBusy && HasSignature && HasCommand;
-
-    private bool CanReject => !IsBusy && HasCommand;
-
-    [RelayCommand(CanExecute = nameof(CanValidate))]
-    public async Task ValidateAsync()
-    {
-        if (_estimate.CommandId is not long queryId)
-        {
-            this.SetWarningStatus("Ce devis n'est pas lié à une demande et ne peut être validé.");
-            return;
-        }
-        var pad = WritablePad;
-        if (pad is null || pad.Snapshot().IsEmpty)
-        {
-            this.SetWarningStatus("Veuillez signer avant de valider.");
-            return;
-        }
-
-        var snap = pad.Snapshot();
-        IsBusy = true;
-        try
-        {
-            var body = new QueryAcceptanceRequestDto
-            {
-                Strokes = snap.Strokes,
-                CoordinateMax = SignaturePadData.CoordinateMax,
-                CapturedAtUtc = DateTime.UtcNow,
-                // Declare which side the caller is signing as, so the
-                // server stores the signature under the right author
-                // (Pro/Client) even when one user is both parties.
-                SignatureType = CanWritePro ? SignatureType.Pro : SignatureType.Client,
-            };
-
-            await _frontClient.AcceptQueryAsync(_estimate.CommandType, queryId, body)
-                .ConfigureAwait(true);
-
-            this.SetInfoStatus("Devis validé.");
-            await GoBackAsync().ConfigureAwait(true);
-        }
-        catch (HttpRequestException ex) when (ex.StatusCode is System.Net.HttpStatusCode.Forbidden)
-        {
-            this.SetWarningStatus("Vous n'êtes pas partie à ce devis.");
-        }
-        catch (HttpRequestException ex) when (ex.StatusCode is System.Net.HttpStatusCode.BadRequest)
-        {
-            this.SetWarningStatus($"Validation refusée: {ex.Message}");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Erreur: {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    [RelayCommand(CanExecute = nameof(CanReject))]
-    public async Task RejectAsync()
-    {
-        if (_estimate.CommandId is not long queryId)
-        {
-            this.SetWarningStatus("Ce devis n'est pas lié à une demande et ne peut être refusé.");
-            return;
-        }
-
-        IsBusy = true;
-        try
-        {
-            await _frontClient.RejectQueryAsync(_estimate.CommandType, queryId)
-                .ConfigureAwait(true);
-
-            this.SetInfoStatus("Devis refusé.");
-            await GoBackAsync().ConfigureAwait(true);
-        }
-        catch (HttpRequestException ex) when (ex.StatusCode is System.Net.HttpStatusCode.Forbidden)
-        {
-            this.SetWarningStatus("Vous n'êtes pas partie à ce devis.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Erreur: {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    [RelayCommand]
-    public void ClearSignature()
-    {
-        WritablePad?.Clear();
-        RefreshFromPad();
-    }
-
-    /// <summary>
-    /// Download the estimate as a LaTeX source document. The server
-    /// renders the Estimate_tex template to a <c>.tex</c> byte stream
-    /// (<c>GET api/v1/front/query/{CommandId}/estimate.tex</c>); the
-    /// user picks a destination via the platform save picker.
-    /// </summary>
-    [RelayCommand]
-    public async Task DownloadTexAsync()
-    {
-        await DownloadAsync(
-            () => _frontClient.GetEstimateTexAsync(_estimate.CommandId!.Value),
-            $"devis-{EstimateId}", "tex").ConfigureAwait(true);
-    }
-
-    /// <summary>
-    /// Download the estimate as a compiled PDF
-    /// (<c>GET api/v1/front/query/{CommandId}/estimate.pdf</c>).
-    /// Requires <c>texi2pdf</c> on the server host; a failure is
-    /// surfaced as a status message.
-    /// </summary>
-    [RelayCommand]
-    public async Task DownloadPdfAsync()
-    {
-        await DownloadAsync(
-            () => _frontClient.GetEstimatePdfAsync(_estimate.CommandId!.Value),
-            $"devis-{EstimateId}", "pdf").ConfigureAwait(true);
-    }
-
-    private async Task DownloadAsync(Func<Task<byte[]>> fetch, string fileName, string ext)
-    {
-        if (_estimate.CommandId is not long)
-        {
-            this.SetWarningStatus("Ce devis n'est pas lié à une demande.");
-            return;
-        }
-
-        IsBusy = true;
-        try
-        {
-            var bytes = await fetch().ConfigureAwait(true);
-            var saved = await FileSaveHelpers.SaveAsync(fileName, ext, bytes).ConfigureAwait(true);
-            this.SetInfoStatus(saved
-                ? $"Fichier .{ext} enregistré."
-                : "Téléchargement annulé.");
-        }
-        catch (Exception ex)
-        {
-            this.SetErrorStatus($"Échec du téléchargement: {ex.Message}");
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-
-    [RelayCommand]
-    private async Task BackAsync() => await GoBackAsync().ConfigureAwait(true);
-
-    private static async Task GoBackAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-        await app.GoBackAsync().ConfigureAwait(true);
-    }
-}

src/PostIt/PostIt/ViewModels/Activity/ProviderOngoingRequestsPageViewModel.cs

@@ -8,12 +8,10 @@ using System.Threading.Tasks;
 using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
-using Microsoft.Extensions.DependencyInjection;
 using PostIt.Helpers;
 using Yavsc;
 using Yavsc.Abstract.Workflow;
 using Yavsc.Api.Client;
-using PostIt.Models;
 
 namespace PostIt.ViewModels;
 
@@ -155,21 +153,15 @@ public partial class ProviderOngoingRequestsPageViewModel : ViewModelBase, IActi
                 .GetQueryAsync(SelectedQuery.BillingCode, SelectedQuery.Id)
                 .ConfigureAwait(true);
             var (activity, performer, form) = BuildNavigationContext(SelectedQuery);
-            var frontClient = app.ServiceProvider?.GetRequiredService<FrontOfficeApiClient>();
-            var fsClient = app.ServiceProvider?.GetRequiredService<UserFilesApiClient>();
 
             var vm = new BillingQueryDetailsPageViewModel(
                 activity,
                 performer,
                 form,
                 _billingClient,
-                frontClient,
-                fsClient,
                 details,
-                isReadOnly: false,
-                canAttach: false);
+                isReadOnly: false);
 
-            await vm.InitializeAsync().ConfigureAwait(true);
             await app.PushPageAsync(vm).ConfigureAwait(true);
         }
         catch (Exception ex)
@@ -248,13 +240,7 @@ public partial class ProviderOngoingRequestsPageViewModel : ViewModelBase, IActi
             throw new InvalidOperationException("Application PostIt indisponible.");
         }
 
-        var fsClient = app.ServiceProvider?.GetRequiredService<UserFilesApiClient>();
-        if (fsClient is null)
-        {
-            throw new InvalidOperationException("Client fichiers indisponible.");
-        }
-
-        var vm = new EstimateEditionPageViewModel(SelectedQuery, _estimateClient, fsClient);
+        var vm = new EstimateEditionPageViewModel(SelectedQuery, _estimateClient);
         await app.PushPageAsync(vm).ConfigureAwait(true);
     }
 
@@ -358,13 +344,11 @@ public partial class ProviderOngoingRequestsPageViewModel : ViewModelBase, IActi
         => status switch
         {
             QueryStatus.InProgress => 0,
-            QueryStatus.ClientAccepted => 1,
-            QueryStatus.ProAccepted => 2,
-            QueryStatus.Accepted => 2,
-            QueryStatus.Inserted => 3,
-            QueryStatus.Success => 4,
-            QueryStatus.Rejected => 5,
-            QueryStatus.Failed => 6,
+            QueryStatus.Accepted => 1,
+            QueryStatus.Inserted => 2,
+            QueryStatus.Success => 3,
+            QueryStatus.Rejected => 4,
+            QueryStatus.Failed => 5,
             _ => 99,
         };
 

src/PostIt/PostIt/ViewModels/AdministrationPageViewModel.cs

@@ -1,99 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Collections.ObjectModel;
-using System.Linq;
-using System.Net.Http;
-using System.Threading.Tasks;
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-using PostIt.Services;
-using Yavsc.Abstract.Identity;
-
-namespace PostIt.ViewModels;
-
-public partial class AdministrationPageViewModel : ViewModelBase
-{
-    private readonly YavscApiClient? _api;
-
-    [ObservableProperty]
-    public partial bool IsBusy { get; set; }
-
-    [ObservableProperty]
-    public partial ObservableCollection<UserInfo> Users { get; set; } = new();
-
-    [ObservableProperty]
-    public partial string SearchText { get; set; } = string.Empty;
-
-    [ObservableProperty]
-    public partial string StatusMessage { get; set; } = "Chargement…";
-
-    [ObservableProperty]
-    public partial UserInfo? SelectedUser { get; set; }
-
-    public IReadOnlyList<UserInfo> FilteredUsers =>
-        string.IsNullOrWhiteSpace(SearchText)
-            ? Users.ToList()
-            : Users.Where(user =>
-                    (user.UserName ?? string.Empty).Contains(SearchText, StringComparison.OrdinalIgnoreCase)
-                 || (user.FullName ?? string.Empty).Contains(SearchText, StringComparison.OrdinalIgnoreCase)
-                 || (user.Email ?? string.Empty).Contains(SearchText, StringComparison.OrdinalIgnoreCase)
-                 || (user.UserId ?? string.Empty).Contains(SearchText, StringComparison.OrdinalIgnoreCase))
-                .ToList();
-
-    public override bool CanNavigateNext { get => false; protected set { _ = value; } }
-    public override bool CanNavigatePrevious { get => true; protected set { _ = value; } }
-
-    public AdministrationPageViewModel(YavscApiClient? api)
-    {
-        _api = api;
-    }
-
-    public AdministrationPageViewModel() : this(null) { }
-
-    public Task InitializeAsync() => RefreshAsync();
-
-    partial void OnSearchTextChanged(string value)
-    {
-        OnPropertyChanged(nameof(FilteredUsers));
-    }
-
-    [RelayCommand]
-    public async Task RefreshAsync()
-    {
-        if (_api is null)
-        {
-            StatusMessage = "Client API d’administration indisponible.";
-            return;
-        }
-
-        IsBusy = true;
-        try
-        {
-            var query = SearchText.Trim();
-            var usersEndpoint = string.IsNullOrWhiteSpace(query)
-                ? new Uri(new Uri(_api.Settings.ApiUrl.TrimEnd('/') + "/", UriKind.Absolute), "users").ToString()
-                : new Uri(new Uri(_api.Settings.ApiUrl.TrimEnd('/') + "/", UriKind.Absolute), $"users/search/{Uri.EscapeDataString(query)}").ToString();
-
-            var users = await _api.CallAsync<List<UserInfo>>(HttpMethod.Get, usersEndpoint).ConfigureAwait(true);
-
-            Users.Clear();
-            foreach (var user in users ?? [])
-            {
-                Users.Add(user);
-            }
-
-            OnPropertyChanged(nameof(FilteredUsers));
-            StatusMessage = Users.Count > 0 ? $"{Users.Count} utilisateur(s) chargé(s)." : "Aucun utilisateur trouvé.";
-        }
-        catch (Exception ex)
-        {
-            Users.Clear();
-            OnPropertyChanged(nameof(FilteredUsers));
-            StatusMessage = $"Accès administration refusé ou indisponible : {ex.Message}";
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-}

src/PostIt/PostIt/ViewModels/Blogs/BlogsViewModel.cs

@@ -1,7 +1,6 @@
 using System;
 using System.Collections.ObjectModel;
 using System.Collections.Generic;
-using System.Collections.Specialized;
 using System.Linq;
 using System.Threading.Tasks;
 using Avalonia;
@@ -11,8 +10,7 @@ using Microsoft.Extensions.DependencyInjection;
 using Yavsc.Blogspot;
 using Yavsc.Api.Client;
 using Yavsc.Abstract.Files;
-using Yavsc.Server.Helpers;
-using AvaloniaEdit.Document;
+using PostIt.Helpers;
 
 namespace PostIt.ViewModels;
 
@@ -38,67 +36,8 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
 
     /// <summary>Editor buffer for the post body. Same pattern as
     /// <see cref="DraftTitle"/>.</summary>
-
-    public string? DraftArticle
-     {
-        get => DraftArticleDocument?.Text ?? null;
-        set
-        {
-            var currentText = DraftArticleDocument?.Text;
-            if (string.Equals(currentText, value, StringComparison.Ordinal))
-            {
-                OnPropertyChanged(nameof(DraftArticle));
-                return;
-            }
-
-            OnPropertyChanging(nameof(DraftArticle));
-            try
-            {
-                DraftArticleDocument = value is not null ? new TextDocument(value) : null;
-            }
-            catch (Exception ex)
-            {
-                StatusMessage = $"Error setting DraftArticleDocument: {ex.Message}";
-                // Handle any exceptions that might occur when setting the DraftArticleDocument
-            }
-            OnPropertyChanged(nameof(DraftArticle));
-        }
-     }
-
-    private TextDocument? _draftArticleDocument;
-
-    public TextDocument? DraftArticleDocument
-    {
-        get => _draftArticleDocument;
-        set
-        {
-            if (ReferenceEquals(_draftArticleDocument, value))
-            {
-                return;
-            }
-
-            if (_draftArticleDocument is not null)
-            {
-                _draftArticleDocument.TextChanged -= DraftArticleDocument_TextChanged;
-            }
-
-            _draftArticleDocument = value;
-
-            if (_draftArticleDocument is not null)
-            {
-                _draftArticleDocument.TextChanged += DraftArticleDocument_TextChanged;
-            }
-
-            OnPropertyChanged(nameof(DraftArticleDocument));
-            UpdateDraftModified();
-        }
-    }
-
-    private void DraftArticleDocument_TextChanged(object? sender, EventArgs e)
-    {
-        OnPropertyChanged(nameof(DraftArticle));
-        UpdateDraftModified();
-    }
+    [ObservableProperty]
+    public partial string DraftArticle { get; set; }
 
     /// <summary>Editor buffer for the post's publication state.
     /// Reflects the server-side <c>IsPublished</c> flag (the
@@ -111,14 +50,6 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
     /// mutable field. Toggling is its own action.</summary>
     [ObservableProperty]
     public partial bool DraftIsPublished { get; set; }
-
-    [ObservableProperty]
-    public partial bool IsDraftModified { get; private set; }
-
-    private bool _preserveDraft;
-    private string _savedTitle = string.Empty;
-    private string _savedArticle = string.Empty;
-    private readonly Dictionary<string, string> _pendingAttachmentLinks = new();
     public bool IsLoaded { get; private set; }
     public Settings SettingsModel { get; }
 
@@ -168,7 +99,7 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         });
     }
 
-    [RelayCommand(CanExecute = nameof(CanSave))]
+    [RelayCommand]
     internal async Task SaveAsync()
     {
         // The button is already disabled when the title is empty
@@ -186,6 +117,16 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         {
             var attachments = DraftAttachments.ToArray();
 
+            // Build a fresh BlogPostDto from the editor buffer on
+            // every Save — we no longer mutate SelectedPost in
+            // place. The previous behavior copied the buffer
+            // (which was a no-op when SelectedPost was null)
+            // back onto the model and relied on a
+            // [Required] violation to surface the missing
+            // input; the new shape keeps the editor buffer as
+            // the single source of truth for outgoing payloads
+            // and the selected post as a read-only hint for
+            // the update path.
             if (SelectedPost is null || SelectedPost.Id == 0)
             {
                 var draft = new BlogPostDto
@@ -196,22 +137,12 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
                     DateModified = DateTime.UtcNow,
                     IsPublished = DraftIsPublished
                 };
-                var savedTitle = draft.Title;
-                var savedArticle = draft.Article;
                 var created = await BlogClient!.CreatePostAsync(draft, attachments);
                 if (created is not null)
                 {
-                    _preserveDraft = true;
-                    try
-                    {
-                        SelectedPost = created;
-                    }
-                    finally
-                    {
-                        _preserveDraft = false;
-                    }
+                    SelectedPost = created;
 
-                    if (ResolvePendingAttachmentLinks(created))
+                    if (TryAppendAttachmentLinks(created, attachments))
                     {
                         var linkUpdate = new BlogPostDto
                         {
@@ -223,22 +154,16 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
                             DateCreated = created.DateCreated,
                             DateModified = DateTime.UtcNow,
                         };
-                        savedTitle = linkUpdate.Title;
-                        savedArticle = linkUpdate.Article;
                         await BlogClient.UpdatePostAsync(created.Id, linkUpdate);
                     }
 
-                    created.Title = savedTitle;
-                    created.Article = savedArticle;
                     this.SetInfoStatus($"Billet {created.Id} créé.");
                     DraftAttachments.Clear();
-                    MarkDraftSaved(savedTitle, savedArticle);
                 }
-                else
-                    throw new InvalidOperationException("Le serveur n'a pas retourné le billet créé.");
             }
             else
             {
+                TryAppendAttachmentLinks(SelectedPost, attachments);
                 var update = new BlogPostDto
                 {
                     Id = SelectedPost.Id,
@@ -250,11 +175,8 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
                     DateModified = DateTime.UtcNow,
                 };
                 await BlogClient!.UpdatePostAsync(SelectedPost.Id, update, attachments);
-                SelectedPost.Title = update.Title;
-                SelectedPost.Article = update.Article;
                 this.SetInfoStatus($"Billet {SelectedPost.Id} enregistré.");
                 DraftAttachments.Clear();
-                MarkDraftSaved(update.Title, update.Article);
             }
 
             await RefreshPostsAsync();
@@ -450,7 +372,6 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         Posts = new ObservableCollection<BlogPostDto>();
         FilteredPosts = new ObservableCollection<BlogPostDto>();
         DraftAttachments = new ObservableCollection<BlogUploadFile>();
-        DraftAttachments.CollectionChanged += DraftAttachments_CollectionChanged;
         SelectedPost = null;
         IsBusy = false;
         this.SetInfoStatus("Prêt.");
@@ -460,9 +381,7 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         WindowTitle = "PostIt";
         DraftTitle = string.Empty;
         DraftArticle = string.Empty;
-
         DraftIsPublished = false;
-        MarkDraftSaved();
         IsLoaded = false;
         // Production path: DI injects the canonical Settings singleton
         // and we use it as-is. Test path: tests call this constructor
@@ -523,7 +442,6 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
 
     partial void OnSelectedPostChanged(BlogPostDto? value)
     {
-        if (_preserveDraft) return;
         // Mirror the selection into the editor buffer so the
         // XAML-bound TextBox/TextEditor show the right content
         // when the user clicks a post in the list. When the
@@ -537,8 +455,6 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         // null selection so a fresh draft starts unpublished.
         DraftIsPublished = value?.IsPublished ?? false;
         DraftAttachments.Clear();
-        _pendingAttachmentLinks.Clear();
-        MarkDraftSaved();
         UpdateCommandStates();
     }
 
@@ -547,28 +463,8 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
     // Save's CanExecute depends on the buffer: the button must
     // enable as soon as the user has typed a non-whitespace
     // title, regardless of whether a post is selected.
-    partial void OnDraftTitleChanged(string value)
-    {
-        SaveCommand.NotifyCanExecuteChanged();
-        UpdateDraftModified();
-    }
-
-    private void UpdateDraftModified()
-    {
-        IsDraftModified = !string.Equals(DraftTitle ?? string.Empty, _savedTitle, StringComparison.Ordinal)
-            || !string.Equals(DraftArticle ?? string.Empty, _savedArticle, StringComparison.Ordinal)
-            || (DraftAttachments?.Count ?? 0) > 0;
-    }
-
-    private void MarkDraftSaved()
-        => MarkDraftSaved(DraftTitle, DraftArticle);
-
-    private void MarkDraftSaved(string? title, string? article)
-    {
-        _savedTitle = title ?? string.Empty;
-        _savedArticle = article ?? string.Empty;
-        UpdateDraftModified();
-    }
+    partial void OnDraftTitleChanged(string value) => SaveCommand.NotifyCanExecuteChanged();
+    partial void OnDraftArticleChanged(string value) => SaveCommand.NotifyCanExecuteChanged();
 
 
     private async Task RefreshPostsAsync()
@@ -581,6 +477,10 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         }
         ApplyFilter();
 
+        if (SelectedPost is not null)
+        {
+            SelectedPost = Posts.FirstOrDefault(post => post.Id == SelectedPost.Id) ?? SelectedPost;
+        }
     }
 
     private void ApplyFilter()
@@ -595,29 +495,10 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
                 || p.AuthorId?.Contains(query, StringComparison.OrdinalIgnoreCase) == true)
                 .OrderByDescending(p => p.DateModified);
 
-        var selection = SelectedPost;
-        var visiblePosts = filtered.Select(post => post.Id == selection?.Id ? selection : post).ToArray();
-        _preserveDraft = true;
-        try
+        FilteredPosts.Clear();
+        foreach (var post in filtered)
         {
-            for (var i = FilteredPosts.Count - 1; i >= 0; i--)
-            {
-                if (!visiblePosts.Contains(FilteredPosts[i]))
-                    FilteredPosts.RemoveAt(i);
-            }
-            for (var i = 0; i < visiblePosts.Length; i++)
-            {
-                var previousIndex = FilteredPosts.IndexOf(visiblePosts[i]);
-                if (previousIndex < 0)
-                    FilteredPosts.Insert(i, visiblePosts[i]);
-                else if (previousIndex != i)
-                    FilteredPosts.Move(previousIndex, i);
-            }
-            SelectedPost = selection;
-        }
-        finally
-        {
-            _preserveDraft = false;
+            FilteredPosts.Add(post);
         }
     }
 
@@ -656,53 +537,40 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         }
     }
 
-    private void DraftAttachments_CollectionChanged(object? sender, NotifyCollectionChangedEventArgs e)
+    private bool TryAppendAttachmentLinks(BlogPostDto post, IReadOnlyCollection<BlogUploadFile> attachments)
     {
-        if (e.NewItems is not null)
-        {
-            foreach (BlogUploadFile attachment in e.NewItems)
-            {
-                var storedName = AbstractFileSystemHelpers.FilterFileName(attachment.FileName);
-                string fileUrl;
-                if (SelectedPost is { Id: > 0 } post)
-                    fileUrl = AttachmentUrl(post, storedName);
-                else
-                {
-                    fileUrl = $"postit-attachment:{Guid.NewGuid():N}";
-                    _pendingAttachmentLinks.Add(fileUrl, storedName);
-                }
-                var article = DraftArticle ?? string.Empty;
-                var markdownLine = $"- [{attachment.FileName}]({fileUrl})";
-                if (!article.Contains(markdownLine, StringComparison.Ordinal))
-                {
-                    var prefix = article.Length == 0 ? ""
-                        : (article.EndsWith("\n", StringComparison.Ordinal) ? "\n" : "\n\n");
-                    DraftArticle = article + prefix + markdownLine;
-                }
-            }
-        }
-        UpdateDraftModified();
-    }
+        if (attachments.Count == 0)
+            return false;
 
-    private string AttachmentUrl(BlogPostDto post, string storedName)
-    {
-        var owner = post.Author?.UserName ?? post.AuthorId;
-        if (string.IsNullOrWhiteSpace(owner))
-            throw new InvalidOperationException("Le propriétaire du billet est nécessaire au lien du fichier.");
-        return ResolveUserFileUrl(
-            $"{EscapePathSegment(owner)}/blogs/{post.Id}/{EscapePathSegment(storedName)}");
-    }
+        var ownerSegment = post.Author?.UserName;
+        if (string.IsNullOrWhiteSpace(ownerSegment))
+            ownerSegment = post.AuthorId;
+
+        if (string.IsNullOrWhiteSpace(ownerSegment))
+            return false;
 
-    private bool ResolvePendingAttachmentLinks(BlogPostDto post)
-    {
         var article = DraftArticle ?? string.Empty;
-        foreach (var link in _pendingAttachmentLinks)
-            article = article.Replace($"({link.Key})", $"({AttachmentUrl(post, link.Value)})",
-                StringComparison.Ordinal);
-        var changed = article != DraftArticle;
-        if (changed) DraftArticle = article;
-        _pendingAttachmentLinks.Clear();
-        return changed;
+        var links = new List<string>();
+
+        foreach (var attachment in attachments)
+        {
+            var relativePath = $"{EscapePathSegment(ownerSegment)}/blogs/{post.Id}/{EscapePathSegment(attachment.FileName)}";
+            var fileUrl = ResolveUserFileUrl(relativePath);
+            var markdownLine = $"- [{attachment.FileName}]({fileUrl})";
+
+            if (!article.Contains(markdownLine, StringComparison.Ordinal))
+                links.Add(markdownLine);
+        }
+
+        if (links.Count == 0)
+            return false;
+
+        var prefix = article.Length == 0
+            ? ""
+            : (article.EndsWith("\n", StringComparison.Ordinal) ? "\n" : "\n\n");
+
+        DraftArticle = article + prefix + string.Join("\n", links);
+        return true;
     }
 
     private string ResolveUserFileUrl(string relativePath)
@@ -711,7 +579,7 @@ public partial class BlogsViewModel : ViewModelBase, IActionStatusViewModel
         if (!string.IsNullOrWhiteSpace(authority)
             && Uri.TryCreate(authority, UriKind.Absolute, out var baseUri))
         {
-            return FileServerUrlHelpers.GetUserFilesUri(baseUri, relativePath).AbsoluteUri;
+            return FileServerUrlHelpers.GetUserFilesUri(baseUri, relativePath).ToString();
         }
 
         return $"{Yavsc.Constants.UserFilesPath}/{relativePath}";

src/PostIt/PostIt/ViewModels/Chat/ChatViewModel.cs

@@ -1,357 +0,0 @@
-using System;
-using System.Collections.Generic;
-using System.Collections.ObjectModel;
-using System.Threading.Tasks;
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-using Microsoft.AspNetCore.SignalR.Client;
-using Microsoft.Extensions.DependencyInjection;
-using PostIt.Models;
-using PostIt.Services;
-using Yavsc;
-
-namespace PostIt.ViewModels.Chat
-{
-    /// <summary>
-    /// ViewModel pour la gestion du chat,
-    /// incluant la connexion au Hub SignalR,
-    /// la gestion des salons et des utilisateurs connectés.
-    /// </summary>
-
-    public partial class ChatViewModel : ViewModelBase
-    {
-        private readonly Settings _settings;
-        private readonly YavscApiClient? _api;
-
-        // Le paramètre optionnel permet l'instanciation design-time
-        // (Design.DataContext dans ChatPage.axaml) sans conteneur DI.
-        public ChatViewModel(YavscApiClient? api = null)
-        {
-            var app = App.Current as App;
-            _settings = app!.ServiceProvider!.GetRequiredService<Settings>(); // Assurez-vous que _settings est initialisé avant utilisation.
-            _api = api;
-            Status = new StatusNotice("Déconnecté", StatusSeverity.Info,
-            new RelayCheckCommand("Connecter", async () => await ConnectAsync()));
-            FocusedMessages = _systemMessages;
-        }
-
-        private HubConnection? _connection;
-
-        [ObservableProperty]
-        public partial string CurrentRoom { get; set; } =  "General";
-
-        [ObservableProperty]
-        public partial string NickName { get; set; } = "";
-
-        [ObservableProperty]
-        public partial StatusNotice Status { get; set; }
-
-        [ObservableProperty]
-        [NotifyCanExecuteChangedFor(nameof(SendMessageCommand))]
-        public partial bool IsConnected { get; set; } = false;
-
-        [ObservableProperty]
-        [NotifyCanExecuteChangedFor(nameof(SendMessageCommand))]
-        public partial string MessageToSend { get; set; } = "";
-
-        // Salles jointes (choix de la salle en focus dans la vue).
-        public ObservableCollection<string> JoinedRooms { get; } = new();
-
-        // Salle en focus ; null = aucune salle, le journal affiche
-        // alors les notifications système.
-        [ObservableProperty]
-        [NotifyCanExecuteChangedFor(nameof(SendMessageCommand))]
-        public partial string? SelectedRoom { get; set; }
-
-        // Notifications globales (connexion, erreurs de join, ...)
-        private readonly ObservableCollection<string> _systemMessages = new();
-
-        // Messages et utilisateurs présents, indexés par salle.
-        private readonly Dictionary<string, ObservableCollection<string>> _messagesByRoom = new();
-        private readonly Dictionary<string, ObservableCollection<string>> _usersByRoom = new();
-        private static readonly ObservableCollection<string> _noUsers = new();
-
-        // Vues "focus" exposées à la page : pointent vers la salle
-        // sélectionnée, ou vers le journal système / une liste vide.
-        [ObservableProperty]
-        public partial ObservableCollection<string> FocusedMessages { get; set; }
-
-        [ObservableProperty]
-        public partial ObservableCollection<string> FocusedUsers { get; set; } = _noUsers;
-
-        partial void OnSelectedRoomChanged(string? value)
-        {
-            FocusedMessages = value != null && _messagesByRoom.TryGetValue(value, out var msgs)
-                ? msgs : _systemMessages;
-            FocusedUsers = value != null && _usersByRoom.TryGetValue(value, out var users)
-                ? users : _noUsers;
-        }
-
-        // Trace une notification système dans la vue courante
-        // (et dans le journal global pour consultation ultérieure).
-        private void Log(string line)
-        {
-            _systemMessages.Add(line);
-            if (!ReferenceEquals(FocusedMessages, _systemMessages))
-                FocusedMessages.Add(line);
-        }
-
-        // Commandes pour les boutons
-        [RelayCommand]
-        public async Task ConnectCommand() => await ConnectAsync();
-
-        [RelayCommand]
-        public async Task JoinRoomCommand() => await JoinRoomAsync();
-
-        // Le serveur (ChatHub.Send) refuse tout message d'un utilisateur
-        // qui n'a pas joint le salon ("NoJoinNoSend") : on garde la
-        // commande inactive tant qu'aucune salle n'est en focus.
-        private bool CanSendMessage() =>
-            IsConnected && SelectedRoom != null && !string.IsNullOrWhiteSpace(MessageToSend);
-
-        [RelayCommand(CanExecute = nameof(CanSendMessage))]
-        private async Task SendMessageAsync()
-        {
-            if (_connection == null || SelectedRoom == null) return;
-            var text = MessageToSend.Trim();
-            try
-            {
-                await _connection.InvokeAsync("Send", SelectedRoom, text);
-                MessageToSend = string.Empty;
-            }
-            catch (Exception ex)
-            {
-                Log($"Erreur d'envoi : {ex.Message}");
-            }
-        }
-
-        public override bool CanNavigateNext { get; protected set; } = false;
-        public override bool CanNavigatePrevious { get; protected set; } = true;
-
-        private async Task DisconnectAsync()
-        {
-            if (_connection != null)
-            {
-                await _connection.StopAsync();
-                await _connection.DisposeAsync();
-                _connection = null;
-            }
-            IsConnected = false;
-            SelectedRoom = null;
-            JoinedRooms.Clear();
-            _messagesByRoom.Clear();
-            _usersByRoom.Clear();
-            _systemMessages.Clear();
-            Status = new StatusNotice("Déconnecté", StatusSeverity.Info,
-             new RelayCheckCommand("Connecter", async () => await ConnectAsync()));
-        }
-
-        private async Task ConnectAsync()
-        {
-            try
-            {
-                Status = new StatusNotice("Connexion en cours...", StatusSeverity.Info,
-                 new RelayCheckCommand("Vérifier la connexion", async () => await CheckConnectionAsync()));
-
-                if (_api == null || !_api.HasValidSession)
-                {
-                    Status = new StatusNotice("Session expirée : reconnectez-vous avant d'ouvrir le chat.", StatusSeverity.Error,
-                    new RelayCheckCommand("Reconnecter", async () => await ConnectAsync()));
-                    return;
-                }
-
-                // Le hub est mappé à la racine du service ("/chathub"),
-                // pas sous le préfixe versionné "/api/v1" : on le retire.
-                var hubBase = _settings.ApiUrl.TrimEnd('/');
-                if (hubBase.EndsWith("/api/v1", StringComparison.OrdinalIgnoreCase))
-                    hubBase = hubBase[..^"/api/v1".Length];
-                var hubUrl = hubBase + "/" + Constants.ChatHubPath;
-
-                _connection = new HubConnectionBuilder()
-                    .WithUrl(hubUrl,
-
-                    options =>
-                    {
-                        // Le hub est [Authorize] : on attache le Bearer OIDC.
-                        // AccessTokenProvider est rappelé à chaque reconnexion,
-                        // donc on tente un refresh silencieux à chaque appel.
-                        // Un refresh mort (invalid_grant) ne doit pas faire
-                        // échouer StartAsync avec une exception interne : on
-                        // renvoie le token courant (éventuellement expiré) et
-                        // le serveur répondra un 401 propre, surfacé à l'UI.
-                        options.AccessTokenProvider = async () =>
-                        {
-                            await _api.TrySilentLoginAsync();
-                            return _api.CurrentAccessToken;
-                        };
-                    })
-                    .WithAutomaticReconnect()
-                    .Build();
-
-                // 1. Ecoute des notifications globales (notifyUser)
-                _connection.On<string, string, string>("notifyUser", (type, user, msg) =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                        Log($"[{type}] {user}: {msg}"));
-                });
-
-                // 2. Ecoute des notifications de salon (notifyRoom)
-                _connection.On<string, string, string>("notifyRoom", (type, room, user) =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                    {
-                        if (_messagesByRoom.TryGetValue(room, out var roomLog))
-                            roomLog.Add($"*{user} a interagi avec le salon {room} (Action: {type})");
-                        else
-                            Log($"*{user} a interagi avec le salon {room} (Action: {type})");
-                        if (type == "UserJoin" && _usersByRoom.TryGetValue(room, out var users)
-                            && !users.Contains(user))
-                            users.Add(user);
-                    });
-                });
-
-                // 3. Réception de l'état complet suite au Join réussi (joint)
-                _connection.On<ChatRoomInfo>("joint", (roomInfo) =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() => OnRoomJoined(roomInfo));
-                });
-
-                // 4. Réception des messages de salon (diffusés par ChatHub.Send)
-                _connection.On<ChatMessage>("ReceiveMessage", (msg) =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                    {
-                        var room = msg.Room ?? "?";
-                        if (!_messagesByRoom.TryGetValue(room, out var roomLog))
-                            roomLog = _messagesByRoom[room] = new();
-                        roomLog.Add($"{msg.Name} : {msg.Message}");
-                    });
-                });
-
-                await _connection.StartAsync();
-                IsConnected = true;
-                Status = new StatusNotice("Connecté au Hub SignalR", StatusSeverity.Info, new RelayCheckCommand("Déconnecter", async () => await DisconnectAsync()));
-
-                // WithAutomaticReconnect ne lève pas d'exception en cas de
-                // perte réseau : l'état passe par Reconnecting/Closed. Sans
-                // ces handlers, IsConnected resterait optimiste et Join()
-                // échouerait avec "connection is not active".
-                _connection.Reconnecting += error =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                    {
-                        IsConnected = false;
-                        Status = new StatusNotice($"Connexion perdue ({error?.Message ?? "réseau"}), reconnexion...", StatusSeverity.Error,
-                            new RelayCheckCommand("Déconnecter", async () => await DisconnectAsync()));
-                    });
-                    return Task.CompletedTask;
-                };
-                _connection.Reconnected += async _ =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                    {
-                        IsConnected = true;
-                        Status = new StatusNotice("Reconnecté au Hub SignalR", StatusSeverity.Info,
-                            new RelayCheckCommand("Déconnecter", async () => await DisconnectAsync()));
-                    });
-                    // La reconnexion crée une nouvelle ConnectionId côté
-                    // serveur : l'appartenance aux salons est perdue, il
-                    // faut rejoindre à nouveau le salon courant.
-                    if (!string.IsNullOrWhiteSpace(CurrentRoom))
-                        await JoinRoomAsync();
-                };
-                _connection.Closed += error =>
-                {
-                    Avalonia.Threading.Dispatcher.UIThread.Post(() =>
-                    {
-                        IsConnected = false;
-                        Status = new StatusNotice($"Déconnecté ({error?.Message ?? "fin de connexion"})", StatusSeverity.Info,
-                            new RelayCheckCommand("Connecter", async () => await ConnectAsync()));
-                    });
-                    return Task.CompletedTask;
-                };
-            }
-            catch (Exception ex)
-            {
-                Status = new StatusNotice($"Erreur : {ex.Message}", StatusSeverity.Error, new RelayCheckCommand("Reconnecter", async () => await ConnectAsync()));
-                IsConnected = false;
-            }
-        }
-
-        // Alimente JoinedRooms et les collections par salle à partir
-        // du ChatRoomInfo renvoyé par le hub (valeur de retour du Join
-        // et/ou événement "joint"). Idempotent.
-        private void OnRoomJoined(ChatRoomInfo roomInfo)
-        {
-            // ChatHub.Join renseigne toujours Name (salle existante ou
-            // créée) ; un Name nul signalerait un payload inattendu.
-            var roomName = roomInfo.Name ?? CurrentRoom;
-            if (roomInfo.Name == null)
-                Log("OnRoomJoined : nom de salle absent du payload, repli sur la salle demandée.");
-            if (!_messagesByRoom.TryGetValue(roomName, out var roomLog))
-                roomLog = _messagesByRoom[roomName] = new();
-            roomLog.Add($"Salon rejoint avec succès : {roomName}");
-            var users = _usersByRoom[roomName] = new();
-            foreach (var u in roomInfo.Users) users.Add(u);
-            if (!JoinedRooms.Contains(roomName))
-                JoinedRooms.Add(roomName);
-            SelectedRoom = roomName;
-        }
-
-        private Task CheckConnectionAsync()
-        {
-            var state = _connection?.State.ToString() ?? "aucune connexion";
-            Log($"État de la connexion : {state}");
-            return Task.CompletedTask;
-        }
-
-        private async Task JoinRoomAsync()
-        {
-            if (_connection == null || string.IsNullOrWhiteSpace(CurrentRoom)) return;
-
-            // Salle déjà jointe : on se contente de la mettre en focus.
-            if (JoinedRooms.Contains(CurrentRoom))
-            {
-                SelectedRoom = CurrentRoom;
-                return;
-            }
-
-            // InvokeCoreAsync exige une connexion active : avec la
-            // reconnexion automatique, l'état peut être Reconnecting au
-            // moment de l'appel. On tente une (re)connexion si nécessaire.
-            if (_connection.State != HubConnectionState.Connected)
-            {
-                Log($"Connexion non active ({_connection.State}), tentative de reconnexion...");
-                try
-                {
-                    await _connection.StartAsync();
-                }
-                catch (Exception ex)
-                {
-                    Log($"Reconnexion impossible : {ex.Message}");
-                    return;
-                }
-            }
-
-            try
-            {
-                // Appel de la méthode publique 'Join' du Hub (renvoie un ChatRoomInfo)
-                var info = await _connection.InvokeAsync<ChatRoomInfo>("Join", CurrentRoom);
-                if (info == null)
-                {
-                    Log("Erreur lors de la validation du salon par le serveur.");
-                }
-                else
-                {
-                    // On alimente le modèle depuis la valeur de retour,
-                    // sans attendre l'événement "joint".
-                    OnRoomJoined(info);
-                }
-            }
-            catch (Exception ex)
-            {
-                Log($"Erreur Join: {ex.Message}");
-            }
-        }
-    }
-}

src/PostIt/PostIt/ViewModels/Chat/RelayCheckCommand.cs

@@ -1,33 +0,0 @@
-using System;
-using System.Threading.Tasks;
-using System.Windows.Input;
-
-namespace PostIt.ViewModels.Chat
-{
-    internal class RelayCheckCommand : ICommand, IWithLabel
-    {
-        public string Label { get; }
-        private Func<Task> value;
-
-        public RelayCheckCommand(string v, Func<Task> value)
-        {
-            this.Label = v;
-            this.value = value;
-        }
-
-        public event EventHandler? CanExecuteChanged;
-
-        public bool CanExecute(object? parameter)
-        {
-            return value != null;
-        }
-
-        public void Execute(object? parameter)
-        {
-            if (value != null)
-            {
-                _ = value();
-            }
-        }
-    }
-}

src/PostIt/PostIt/ViewModels/Commands/BillingCommandPageViewModel.cs

@@ -2,7 +2,6 @@ using System;
 using System.Threading.Tasks;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
-using PostIt.Models;
 using Yavsc;
 using Yavsc.Abstract.Workflow;
 using Yavsc.Api.Client;

src/PostIt/PostIt/ViewModels/Commands/BrushViewModel.cs

@@ -6,7 +6,6 @@ using System.Net;
 using System.Net.Http;
 using System.Threading.Tasks;
 using CommunityToolkit.Mvvm.ComponentModel;
-using PostIt.Models;
 using Yavsc.Abstract.Workflow;
 using Yavsc.Api.Client;
 using Yavsc.Models.Billing;

src/PostIt/PostIt/ViewModels/Layout/AboutPageViewModel.cs

@@ -1,77 +0,0 @@
-using System;
-using System.Reflection;
-using System.Threading.Tasks;
-using Avalonia.Controls;
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-
-namespace PostIt.ViewModels;
-
-/// <summary>
-/// ViewModel de la page « À propos de PostIt ». Page statique :
-/// version de l'application, description, licence et liens vers le
-/// dépôt Forgejo et son suivi de tickets.
-/// </summary>
-public partial class AboutPageViewModel : ViewModelBase
-{
-    public const string RepositoryUrl = "https://forgejo.pschneider.fr/notazof/yavsc";
-    public const string IssuesUrl = RepositoryUrl + "/issues";
-
-    public AboutPageViewModel()
-    {
-        Version = ReadVersion();
-    }
-
-    public string Version { get; }
-
-    public string Description { get; } =
-        "PostIt est le client de la plateforme Yavsc : blog, devis, " +
-        "demandes de prestations et fichiers personnels.";
-
-    public string License { get; } =
-        "Licence WTFPL — Do What The Fuck You Want To Public License, version 2";
-
-    public override bool CanNavigateNext
-    {
-        get => false;
-        protected set => throw new NotImplementedException();
-    }
-
-    public override bool CanNavigatePrevious
-    {
-        get => true;
-        protected set => throw new NotImplementedException();
-    }
-
-    [RelayCommand]
-    private Task OpenRepository() => OpenUrlAsync(RepositoryUrl);
-
-    [RelayCommand]
-    private Task OpenIssues() => OpenUrlAsync(IssuesUrl);
-
-    private static async Task OpenUrlAsync(string url)
-    {
-        var app = (App)App.Current!;
-        var topLevel = TopLevel.GetTopLevel(app.View);
-        if (topLevel is not null)
-        {
-            await topLevel.Launcher.LaunchUriAsync(new Uri(url)).ConfigureAwait(true);
-        }
-    }
-
-    private static string ReadVersion()
-    {
-        var assembly = typeof(AboutPageViewModel).Assembly;
-        var info = assembly
-            .GetCustomAttribute<AssemblyInformationalVersionAttribute>()
-            ?.InformationalVersion;
-        if (!string.IsNullOrEmpty(info))
-        {
-            // "1.1.0-estimate.1+364.Branch.x.Sha.y" → "1.1.0-estimate.1"
-            var plus = info.IndexOf('+');
-            return plus > 0 ? info[..plus] : info;
-        }
-
-        return assembly.GetName().Version?.ToString() ?? "inconnue";
-    }
-}

src/PostIt/PostIt/ViewModels/Layout/ActionStatusViewModelExtensions.cs

@@ -1,5 +1,3 @@
-using PostIt.Models;
-
 namespace PostIt.ViewModels;
 
 public interface IActionStatusViewModel
@@ -31,4 +29,4 @@ public static class ActionStatusViewModelExtensions
             _ => StatusNotice.Info(normalizedMessage),
         };
     }
-}
+}

src/PostIt/PostIt/ViewModels/Layout/HomePageViewModel.cs

@@ -1,16 +1,11 @@
 using System;
-using System.Collections.ObjectModel;
-using System.ComponentModel;
 using System.Threading.Tasks;
 using Avalonia;
-using Avalonia.Threading;
 using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
+using PostIt.Helpers;
 using PostIt.Services;
-using PostIt.ViewModels.Chat;
-using Yavsc.Abstract.Models.Messaging;
 using Yavsc.Api.Client;
-
 namespace PostIt.ViewModels;
 
 public class HomePageViewModel : ViewModelBase
@@ -18,26 +13,6 @@ public class HomePageViewModel : ViewModelBase
     public YavscApiClient Api { get; }
     public Settings Settings { get; }
     public SessionStatusViewModel SessionStatus { get; }
-    public ObservableCollection<Notification> Notifications { get; } = new();
-    private readonly NotificationsApiClient? _notificationsClient;
-    private int _notificationsLoadVersion;
-    private bool _isLoadingNotifications;
-    private string? _notificationsError;
-    private bool _notificationsLoaded;
-
-    public bool IsLoadingNotifications
-    {
-        get => _isLoadingNotifications;
-        private set => SetProperty(ref _isLoadingNotifications, value);
-    }
-
-    public string? NotificationsError
-    {
-        get => _notificationsError;
-        private set => SetProperty(ref _notificationsError, value);
-    }
-
-    public bool HasNoNotifications => _notificationsLoaded && Notifications.Count == 0;
 
     private string _welcomeText = "Welcome to PostIt!";
     public string WelcomeText
@@ -49,95 +24,23 @@ public class HomePageViewModel : ViewModelBase
     public override bool CanNavigateNext { get => true; protected set => throw new System.NotImplementedException(); }
     public override bool CanNavigatePrevious { get => false; protected set => throw new System.NotImplementedException(); }
 
-    public HomePageViewModel(YavscApiClient api, Settings settings, SessionStatusViewModel sessionStatus,
-        NotificationsApiClient notificationsClient)
+    public HomePageViewModel(YavscApiClient api, Settings settings, SessionStatusViewModel sessionStatus)
     {
         Api = api;
         Settings = settings;
         SessionStatus = sessionStatus;
-        _notificationsClient = notificationsClient;
-        SessionStatus.PropertyChanged += OnSessionStatusChanged;
-        RefreshNotificationsCommand = new AsyncRelayCommand(RefreshNotificationsAsync,
-            () => _notificationsClient is not null);
 
         OpenActivities = new AsyncRelayCommand(OpenActivitiesAsync);
         OpenProviderRequests = new AsyncRelayCommand(OpenProviderRequestsAsync);
         OpenClientEstimates = new AsyncRelayCommand(() => OpenEstimateListAsync(EstimateListPerspective.Client));
         OpenProviderEstimates = new AsyncRelayCommand(() => OpenEstimateListAsync(EstimateListPerspective.Provider));
         OpenBlogs = new AsyncRelayCommand(App.PushBlogsPageAsync);
-        OpenMyFiles = new AsyncRelayCommand(OpenMyFilesAsync);
-        OpenProfile = new AsyncRelayCommand(OpenProfileAsync);
-        OpenPerformerConfiguration = new AsyncRelayCommand(OpenPerformerConfigurationAsync);
-        OpenAdministration = new AsyncRelayCommand(OpenAdministrationAsync);
-        OpenResourceUsage = new AsyncRelayCommand(OpenResourceUsageAsync);
-        OpenChat = new AsyncRelayCommand(OpenChatAsync);
     }
-
-
-    public IAsyncRelayCommand OpenChat { get; }
     public IAsyncRelayCommand OpenBlogs { get; }
-    public IAsyncRelayCommand OpenProfile { get; }
-    public IAsyncRelayCommand OpenPerformerConfiguration { get; }
-    public IAsyncRelayCommand OpenAdministration { get; }
-    public IAsyncRelayCommand OpenResourceUsage { get; }
     public IAsyncRelayCommand OpenActivities { get; }
     public IAsyncRelayCommand OpenProviderRequests { get; }
     public IAsyncRelayCommand OpenClientEstimates { get; }
     public IAsyncRelayCommand OpenProviderEstimates { get; }
-    public IAsyncRelayCommand OpenMyFiles { get; }
-    public IAsyncRelayCommand RefreshNotificationsCommand { get; }
-
-    public async Task RefreshNotificationsAsync()
-    {
-        if (_notificationsClient is null)
-            throw new InvalidOperationException("Notifications client is not available.");
-
-        var version = ++_notificationsLoadVersion;
-        Notifications.Clear();
-        NotificationsError = null;
-        _notificationsLoaded = false;
-        OnPropertyChanged(nameof(HasNoNotifications));
-        IsLoadingNotifications = true;
-        try
-        {
-            var notifications = SessionStatus.IsLoggedIn
-                ? await _notificationsClient.GetCurrentAsync()
-                : await _notificationsClient.GetPublicAsync();
-            if (version != _notificationsLoadVersion)
-                return;
-            if (notifications is null)
-                throw new InvalidOperationException("The notifications response is empty.");
-
-            foreach (var notification in notifications)
-                Notifications.Add(notification);
-            _notificationsLoaded = true;
-        }
-        catch (Exception ex)
-        {
-            if (version == _notificationsLoadVersion)
-                NotificationsError = $"Impossible de charger les notifications : {ex.Message}";
-        }
-        finally
-        {
-            if (version == _notificationsLoadVersion)
-            {
-                IsLoadingNotifications = false;
-                OnPropertyChanged(nameof(HasNoNotifications));
-            }
-        }
-    }
-
-    private void OnSessionStatusChanged(object? sender, PropertyChangedEventArgs e)
-    {
-        if (e.PropertyName != nameof(SessionStatusViewModel.IsLoggedIn) || _notificationsClient is null)
-            return;
-
-        // Logout can complete on a worker thread; collections and bindings belong to the UI thread.
-        if (Dispatcher.UIThread.CheckAccess())
-            _ = RefreshNotificationsAsync();
-        else
-            Dispatcher.UIThread.Post(() => _ = RefreshNotificationsAsync());
-    }
 
     private async Task OpenActivitiesAsync()
     {
@@ -187,117 +90,7 @@ public class HomePageViewModel : ViewModelBase
             throw new InvalidOperationException("Client devis indisponible.");
         }
 
-        var frontClient = app.ServiceProvider?.GetRequiredService<FrontOfficeApiClient>();
-        if (frontClient is null)
-        {
-            throw new InvalidOperationException("Client front-office indisponible.");
-        }
-
-        var vm = new EstimateListPageViewModel(estimateClient, perspective, frontClient);
-        await vm.InitializeAsync();
-        await app.PushPageAsync(vm);
-    }
-
-    private async Task OpenChatAsync()
-    {
-        var app = (App?)Application.Current;
-        var vm = app!.ServiceProvider?.GetRequiredService<ChatViewModel>();
-        await app.PushPageAsync(vm!);
-
-    }
-
-    /// <summary>
-    /// Ouvre la page « Mes fichiers » (espace de stockage personnel),
-    /// servie par le host Blogs via <c>api/v1/fs</c>.
-    /// </summary>
-    private async Task OpenMyFilesAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var fsClient = app.ServiceProvider?.GetRequiredService<Yavsc.Api.Client.UserFilesApiClient>();
-        if (fsClient is null)
-        {
-            throw new InvalidOperationException("Client fichiers indisponible.");
-        }
-
-        var vm = new MyFilesViewModel(fsClient);
-        await vm.InitializeAsync();
-        await app.PushPageAsync(vm);
-    }
-
-    private async Task OpenProfileAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var vm = app.ServiceProvider?.GetRequiredService<UserProfilePageViewModel>();
-        if (vm is null)
-        {
-            throw new InvalidOperationException("Page profil indisponible.");
-        }
-
-        await vm.InitializeAsync();
-        await app.PushPageAsync(vm);
-    }
-
-    private async Task OpenPerformerConfigurationAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var vm = app.ServiceProvider?.GetRequiredService<PerformerConfigurationPageViewModel>();
-        if (vm is null)
-        {
-            throw new InvalidOperationException("Page performer indisponible.");
-        }
-
-        await vm.InitializeAsync();
-        await app.PushPageAsync(vm);
-    }
-
-    private async Task OpenAdministrationAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var vm = app.ServiceProvider?.GetRequiredService<AdministrationPageViewModel>();
-        if (vm is null)
-        {
-            throw new InvalidOperationException("Page administration indisponible.");
-        }
-
-        await vm.InitializeAsync();
-        await app.PushPageAsync(vm);
-    }
-
-    private async Task OpenResourceUsageAsync()
-    {
-        var app = (App?)Application.Current;
-        if (app is null)
-        {
-            throw new InvalidOperationException("Application PostIt indisponible.");
-        }
-
-        var resourceUsageClient = app.ServiceProvider?.GetRequiredService<ResourceUsageApiClient>();
-        if (resourceUsageClient is null)
-        {
-            throw new InvalidOperationException("Client usage indisponible.");
-        }
-
-        var vm = new ResourceUsagePageViewModel(resourceUsageClient);
+        var vm = new EstimateListPageViewModel(estimateClient, perspective);
         await vm.InitializeAsync();
         await app.PushPageAsync(vm);
     }
@@ -311,7 +104,7 @@ public class HomePageViewModel : ViewModelBase
     /// (thread-safe dispatcher marshalling on PropertyChanged) — a
     /// designer-only duplicate instance is therefore harmless.
     /// </summary>
-    public HomePageViewModel() : this(null!, new Settings(), new SessionStatusViewModel(), null!)
+    public HomePageViewModel() : this(null!, new Settings(), new SessionStatusViewModel())
     {
 
     }

src/PostIt/PostIt/ViewModels/Layout/ResourceUsagePageViewModel.cs

@@ -1,90 +0,0 @@
-using System;
-using System.Collections.ObjectModel;
-using System.Threading.Tasks;
-using CommunityToolkit.Mvvm.ComponentModel;
-using CommunityToolkit.Mvvm.Input;
-using Yavsc.Abstract.Resources;
-using Yavsc.Api.Client;
-
-namespace PostIt.ViewModels;
-
-public partial class ResourceUsagePageViewModel : ViewModelBase
-{
-    private readonly ResourceUsageApiClient _client;
-
-    [ObservableProperty]
-    public partial bool IsBusy { get; set; }
-
-    [ObservableProperty]
-    public partial bool IsAdminView { get; set; }
-
-    [ObservableProperty]
-    public partial ResourceUsageSummary? CurrentSummary { get; set; }
-
-    [ObservableProperty]
-    public partial ObservableCollection<ResourceUsageSummary> Overview { get; set; } = new();
-
-    public string Heading => IsAdminView ? "Vue d'administration des usages" : "Mon usage des ressources";
-
-    public override bool CanNavigateNext { get => false; protected set { _ = value; } }
-    public override bool CanNavigatePrevious { get => true; protected set { _ = value; } }
-
-    public ResourceUsagePageViewModel(ResourceUsageApiClient client)
-    {
-        _client = client ?? throw new ArgumentNullException(nameof(client));
-    }
-
-    public Task InitializeAsync() => RefreshAsync();
-
-    [RelayCommand]
-    public async Task RefreshAsync()
-    {
-        IsBusy = true;
-        try
-        {
-            Overview.Clear();
-
-            try
-            {
-                var adminOverview = await _client.GetAdminOverviewAsync().ConfigureAwait(true);
-                if (adminOverview is { Count: > 0 })
-                {
-                    foreach (var item in adminOverview)
-                    {
-                        Overview.Add(item);
-                    }
-
-                    CurrentSummary = adminOverview[0];
-                    IsAdminView = true;
-                    return;
-                }
-            }
-            catch (Exception)
-            {
-                // Non-admin users are not allowed on the admin route; fall back
-                // to the current-user summary below.
-            }
-
-            var current = await _client.GetCurrentAsync().ConfigureAwait(true);
-            CurrentSummary = current;
-            if (current is not null)
-            {
-                Overview.Clear();
-                Overview.Add(current);
-            }
-
-            IsAdminView = false;
-        }
-        catch (Exception ex)
-        {
-            CurrentSummary = null;
-            Overview.Clear();
-            IsAdminView = false;
-            throw new InvalidOperationException($"Impossible de charger l'usage des ressources : {ex.Message}", ex);
-        }
-        finally
-        {
-            IsBusy = false;
-        }
-    }
-}