390 changed files with 2562 additions and 2699 deletions
--- a/.forgejo/workflows/buildAndTest.yml
+++ b/.forgejo/workflows/buildAndTest.yml
@ -25,9 +25,9 @@ on:

 jobs:
  build:
+
    runs-on: docker
-    container:
-      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v1
+
    steps:
    - name: Clone yavsc
      run: |
@ -39,13 +39,10 @@ jobs:
          git checkout FETCH_HEAD
        fi
        git submodule update --init --recursive
-        echo "✅ Checked out at $(git rev-parse HEAD) on $(git branch --show-current 2>/dev/null || echo detached HEAD)"
-
+        echo "Checked out at $(git rev-parse HEAD) on $(git branch --show-current 2>/dev/null || echo detached HEAD)"
+    - name: Restore dependencies
+      run: cd /src/_src && dotnet restore
+    - name: Build
+      run: cd /src/_src && dotnet build --no-restore
    - name: Test
-      run: |
-        echo "🚀 Lancement des tests..."
-        cd /src/_src && dotnet test \
-          --verbosity normal \
-          --filter="Category!=Platform-Android" \
-          --logger "xunit;LogFileName=test-results.xml" \
-          && echo "✅ Success !" || echo "❌ Fail ($?)!"
+      run: cd /src/_src && dotnet test --no-build --verbosity normal
--- a/.forgejo/workflows/release.yml
+++ b/.forgejo/workflows/release.yml
@ -51,8 +51,6 @@ jobs:
  # via l'API REST Forgejo (pas d'actions tierces Node).
  release:
    runs-on: docker
-    container:
-      image: pazof/yavsc-build-env:debian13-dotnet10-android36-jdk21-v1
    steps:
      - name: Clone du repo au tag demandé
        env:
@ -68,8 +66,10 @@ jobs:
          # WORKDIR de l'image (cf. dotnet-android-build-image/Dockerfile).
          cd /src

+          # Clone unshallow pour que GitVersion.MsBuild ait l'historique
+          # et les tags (sinon MSB3073 sur la cible Android cf. PR #21).
          if [[ ! -d _src/.git ]]; then
-            git clone --depth=1 https://forgejo.pschneider.fr/notazof/yavsc.git _src
+            git clone https://forgejo.pschneider.fr/notazof/yavsc.git _src
          fi

          cd _src
@ -171,22 +171,37 @@ jobs:
          echo "EOF" >> "$GITHUB_ENV"
          echo "IS_PRERELEASE=$([ "$CHANNEL" = "stable" ] && echo false || echo true)" >> "$GITHUB_ENV"

-      - name: Restore
+      - name: Build des projets .NET (sans docker)
+        # L'image runner (pazof/yavsc-build-env) a le SDK .NET 10 + le
+        # workload Android, mais PAS le binaire `docker` ni de daemon
+        # Docker. On exécute donc les commandes dotnet directement
+        # au lieu de passer par `docker build`.
+        # Equivalent des stages build-env du Dockerfile (lignes
+        # restore + build Yavsc.Org + build Yavsc.Api + build
+        # Yavsc.Blogs + build PostIt.Android -r android-arm64).
        run: |
          cd /src/_src
          dotnet restore
+          dotnet build src/Yavsc.Org/Yavsc.Org.csproj -c Release --no-restore -clp:ErrorsOnly
+          dotnet build src/Yavsc.Api/Yavsc.Api.csproj -c Release --no-restore -clp:ErrorsOnly
+          dotnet build src/Yavsc.Blogs/Yavsc.Blogs.csproj -c Release --no-restore -clp:ErrorsOnly
+          dotnet build src/PostIt/PostIt.Android/PostIt.Android.csproj \
+            -c Release --no-restore -clp:ErrorsOnly -r android-arm64

-      - name: Build de PostIt.Android ARM64
+      - name: Copier l'APK signé vers un emplacement connu
+        # Le build Android avec -r android-arm64 produit l'APK dans
+        # bin/Release/net10.0-android/android-arm64/. On le copie à
+        # la racine du checkout pour que l'étape d'upload le trouve.
        run: |
          cd /src/_src
-          dotnet build src/PostIt/PostIt.Android/PostIt.Android.csproj \
-          -c Release -r android-arm64 --no-restore -clp:ErrorsOnly
-
-      - name: Build de PostIt.Android x64
-        run: |
-          cd /src/_src
-          dotnet build src/PostIt/PostIt.Android/PostIt.Android.csproj \
-          -c Release -r android-x64 --no-restore -clp:ErrorsOnly
+          APK=src/PostIt/PostIt.Android/bin/Release/net10.0-android/android-arm64/com.CompanyName.PostIt-Signed.apk
+          if [[ ! -f "$APK" ]]; then
+            echo "::error::APK not found at $APK"
+            ls -la src/PostIt/PostIt.Android/bin/Release/net10.0-android/ 2>/dev/null || true
+            exit 1
+          fi
+          cp "$APK" /src/_src/PostIt.Android.apk
+          ls -la /src/_src/PostIt.Android.apk

      - name: Publier la release Forgejo via l'API REST
        # Pas d'action tierce (pas de Node dans l'image runner).
@ -295,22 +310,21 @@ jobs:
          # sinon curl l'interprète comme un second fichier d'input
          # (un fichier nommé '?name=PostIt.Android.apk') et l'API
          # Forgejo renvoie 400 "Missing 'name' parameter".
-          echo "::group::Upload PostIt APK assets"
-          for MARCH in arm64 x64; do
-            HTTP=$(curl -sS -o /tmp/asset.json -w '%{http_code}' \
-              -X POST \
-              -H "Authorization: token $GITHUB_TOKEN" \
-              -H "Content-Type: application/octet-stream" \
-              -H "Accept: application/json" \
-              --data-binary "@/src/_src/src/PostIt/PostIt.Android/bin/Release/net10.0-android/android-$MARCH/fr.pschneider.postit-Signed.apk" \
-              "$API_BASE/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=PostIt.Android-$MARCH.apk")
-            echo "POST asset -> HTTP $HTTP"
-            if [[ "$HTTP" != "201" ]]; then
-              echo "::error::Asset upload failed (HTTP $HTTP):"
-              cat /tmp/asset.json
-              exit 1
-            fi
-          done
+          echo "::group::Upload APK asset"
+          HTTP=$(curl -sS -o /tmp/asset.json -w '%{http_code}' \
+            -X POST \
+            -H "Authorization: token $GITHUB_TOKEN" \
+            -H "Content-Type: application/octet-stream" \
+            -H "Accept: application/json" \
+            --data-binary "@/src/_src/PostIt.Android.apk" \
+            "$API_BASE/api/v1/repos/$GITHUB_REPOSITORY/releases/$RELEASE_ID/assets?name=PostIt.Android.apk")
+          echo "POST asset -> HTTP $HTTP"
          echo "::endgroup::"

-          echo "✅ Release publiée: $API_BASE/$GITHUB_REPOSITORY/releases/tag/$TAG"
+          if [[ "$HTTP" != "201" ]]; then
+            echo "::error::Asset upload failed (HTTP $HTTP):"
+            cat /tmp/asset.json
+            exit 1
+          fi
+
+          echo "Release publiée: $API_BASE/$GITHUB_REPOSITORY/releases/tag/$TAG"
--- a/.github/workflows/docker-publish-android.yml
+++ b/.github/workflows/docker-publish-android.yml
@ -0,0 +1,183 @@
+name: Build and Push Yavsc Apk
+
+on:
+  push:
+    branches:
+      - main
+    tags:
+      - '*'
+  workflow_dispatch:
+    inputs:
+      force_unstable:
+        description: 'Publier une release avec suffixe (ex. 1.0.0-rc1) malgré le fail-fast par défaut.'
+        required: false
+        type: boolean
+        default: false
+
+# softprops/action-gh-release a besoin de contents: write
+# pour publier une release + uploader un asset.
+permissions:
+  contents: write
+
+jobs:
+  apk-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout du code
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      # 1. Votre étape de build actuelle (on nomme l'image "postit-android")
+      #    --target build-env : on ne veut que le stage de build (qui
+      #    contient les artefacts .apk). Sans --target, Docker ciblerait
+      #    le DERNIER stage du Dockerfile (blogs-runtime, qui est une
+      #    image ASP.NET runtime sans aucun APK à extraire).
+      - name: Build de l'image Docker
+        run: docker build --build-arg ANDROID_TARGET_RID=android-arm64 --target build-env -t postit-android .
+      # 2. EXTRACTION : Créer un conteneur éphémère pour copier l'APK vers l'hôte GitHub
+      - name: Extraire l'APK du conteneur Docker
+        run: |
+          docker create --name extractor postit-android
+          docker cp extractor:/src/src/PostIt/PostIt.Android/bin/Release/net10.0-android/android-arm64/com.CompanyName.PostIt-Signed.apk ./PostIt.Android.apk
+          docker rm extractor
+
+      - name: Téléverser l'APK en tant qu'Artéfact GitHub
+        uses: actions/upload-artifact@v7
+        with:
+          name: application-apk-release
+          path: ./PostIt.Android.apk
+          retention-days: 7
+
+  # Job de validation : parse le tag, vérifie le format, applique la règle
+  # de parité du patch (pair=stable / impair=preview / suffixe=instable),
+  # et s'assure que CHANGELOG.md contient une section cohérente.
+  # Sans ce job, le job publish-release peut être bypassé (un attaquant
+  # qui contrôle un tag ne peut pas publier de release sans une section
+  # changelog cohérente).
+  validate-release:
+    if: startsWith(github.ref, 'refs/tags/')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout du code
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Valider le tag et la section CHANGELOG
+        env:
+          FORCE_UNSTABLE: ${{ inputs.force_unstable || github.event.inputs.force_unstable || 'false' }}
+        run: |
+          TAG="${GITHUB_REF_NAME}"
+
+          # Parse semver : MAJOR.MINOR.PATCH[-SUFFIX]
+          if [[ ! "$TAG" =~ ^([0-9]+)\.([0-9]+)\.([0-9]+)(-.*)?$ ]]; then
+            echo "::error::Tag '$TAG' does not match MAJOR.MINOR.PATCH[-SUFFIX] format."
+            exit 1
+          fi
+
+          MAJOR="${BASH_REMATCH[1]}"
+          MINOR="${BASH_REMATCH[2]}"
+          PATCH="${BASH_REMATCH[3]}"
+          SUFFIX="${BASH_REMATCH[4]}"
+
+          # Classification du canal par parité du patch.
+          # Patch pair + pas de suffixe -> stable.
+          # Patch impair + pas de suffixe -> preview.
+          # Suffixe présent -> instable.
+          if [[ -n "$SUFFIX" ]]; then
+            CHANNEL="unstable"
+          elif (( PATCH % 2 == 0 )); then
+            CHANNEL="stable"
+          else
+            CHANNEL="preview"
+          fi
+
+          echo "Tag $TAG classifié comme channel=$CHANNEL"
+
+          # Fail-fast sur instable sauf opt-in explicite via workflow_dispatch.
+          if [[ "$CHANNEL" == "unstable" && "$FORCE_UNSTABLE" != "true" ]]; then
+            echo "::error::Tag '$TAG' is unstable (suffix '$SUFFIX'). Refusing to publish."
+            echo "Set force_unstable=true via workflow_dispatch to override."
+            exit 1
+          fi
+
+          # Lecture du CHANGELOG.md (doit exister à la racine du repo).
+          if [[ ! -f CHANGELOG.md ]]; then
+            echo "::error::CHANGELOG.md not found at repo root."
+            exit 1
+          fi
+
+          # Extraction de la section [TAG]. On cherche la première ligne
+          # commençant par '## [' qui contient '[TAG]' (entre '## [' et
+          # la prochaine ligne '## [' ou fin de fichier). awk en mode
+          # paragraphe suffit et reste POSIX.
+          BODY=$(awk -v tag="[$TAG]" '
+            /^## \[/ {
+              if (in_section) exit
+              if (index($0, tag) > 0) in_section=1
+              next
+            }
+            in_section { print }
+          ' CHANGELOG.md)
+
+          if [[ -z "$BODY" ]]; then
+            echo "::error::No section matching '## [$TAG]' found in CHANGELOG.md."
+            echo "Add a '## [$TAG] - $CHANNEL' section before tagging."
+            exit 1
+          fi
+
+          # Vérification cohérence du canal déclaré dans le titre de section.
+          # Format attendu : "## [TAG] - stable" / "- preview" / "- unstable".
+          HEADER=$(grep -m1 "^## \[$TAG\]" CHANGELOG.md)
+          if [[ "$HEADER" != *" - $CHANNEL"* ]]; then
+            echo "::error::Section '## [$TAG]' must declare suffix '- $CHANNEL' to match tag parity."
+            echo "Current section header: $HEADER"
+            exit 1
+          fi
+
+          echo "Section CHANGELOG validée pour [$TAG] - $CHANNEL"
+
+          # Exposition aux étapes suivantes via $GITHUB_ENV.
+          # heredoc <<EOF pour le body multi-lignes (pattern GitHub Actions).
+          {
+            echo "RELEASE_BODY<<EOF"
+            echo "$BODY"
+            echo "EOF"
+            echo "RELEASE_CHANNEL=$CHANNEL"
+            if [[ "$CHANNEL" == "stable" ]]; then
+              echo "IS_PRERELEASE=false"
+            else
+              echo "IS_PRERELEASE=true"
+            fi
+          } >> "$GITHUB_ENV"
+
+  publish-release:
+    # Déclenché uniquement par un push de tag. Le job apk-deploy produit
+    # l'artefact ; validate-release garantit la cohérence du tag et du
+    # changelog avant publication.
+    if: startsWith(github.ref, 'refs/tags/')
+    needs: [apk-deploy, validate-release]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Récupérer l'APK depuis l'artefact
+        uses: actions/download-artifact@v7
+        with:
+          name: application-apk-release
+          path: ./
+
+      - name: Publier la release GitHub et uploader l'APK
+        uses: softprops/action-gh-release@v2
+        with:
+          # Le nom de fichier final dans la release. C'est ce qui
+          # apparaîtra dans l'asset et donc dans le permalink :
+          #   https://github.com/<owner>/<repo>/releases/latest/download/PostIt.Android.apk
+          files: ./PostIt.Android.apk
+          # Le body est extrait de la section CHANGELOG.md correspondant
+          # au tag, exposée par validate-release via $GITHUB_ENV.
+          body: ${{ env.RELEASE_BODY }}
+          # stable -> false (marque comme Latest).
+          # preview / unstable -> true (visible mais pas Latest).
+          prerelease: ${{ env.IS_PRERELEASE }}
--- a/.github/workflows/docker-publish-backend.yml
+++ b/.github/workflows/docker-publish-backend.yml
@ -26,7 +26,7 @@ jobs:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Test
-        run: dotnet test --no-build --verbosity normal --filter="Category!=Platform-Android"
+        run: dotnet test --no-build --verbosity normal
      # 4. Build et Push de l'image de production finale
      - name: Build and push production image
        uses: docker/build-push-action@v7
--- a/.gitignore
+++ b/.gitignore
@ -39,6 +39,3 @@ DataDir/

 *.tests.trx
 *.tests.html
-
-*.log
-
--- a/.vscode/launch.json
+++ b/.vscode/launch.json
@ -1,57 +1,33 @@
 {
-  // Utilisez IntelliSense pour en savoir plus sur les attributs possibles.
-  // Pointez pour afficher la description des attributs existants.
-  // Pour plus d'informations, visitez : https://go.microsoft.com/fwlink/?linkid=830387
-  "version": "0.2.0",
-  "configurations": [
-    {
-      "name": "Android Debug",
-      "type": "mono",
-      "preLaunchTask": "run-debug-android",
-      "request": "attach",
-      "address": "localhost",
-      "port": 55555
-    },
-    {
-      "name": "Android Attach - Debug",
-      "type": "mono",
-      "request": "attach",
-      "address": "localhost",
-      "port": 55555
-    },
-    {
-      "name": "API",
-      "type": "dotnet",
-      "request": "launch",
-      "projectPath": "${workspaceFolder}/src/Api/Api.csproj"
-    },
-    {
-      "name": "Yavsc Org",
-      "type": "dotnet",
-      "request": "launch",
-      "projectPath": "${workspaceFolder}/src/Yavsc.Org/Yavsc.Org.csproj",
-    },
-    {
-      "name": "Yavsc Blogs",
-      "type": "dotnet",
-      "request": "launch",
-      "projectPath": "${workspaceFolder}/src/Yavsc.Blogs/Yavsc.Blogs.csproj"
-    },
-    {
-      "name": "PostIt Desktop",
-      "type": "dotnet",
-      "request": "launch",
-      "projectPath": "${workspaceFolder}/src/PostIt/PostIt.Desktop/PostIt.Desktop.csproj",
-    },
-    {
-      "name": "Test PostIt.Android launch (Xamarin.UITest)",
-      "type": "coreclr",
-      "request": "launch",
-      "program": "${workspaceFolder}/src/PostIt/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests.dll",
-      "args": [],
-      "cwd": "${workspaceFolder}/src/PostIt/PostIt.Tests",
-      "console": "integratedTerminal",
-      "stopAtEntry": false
-    }
-  ]
+    // Utilisez IntelliSense pour en savoir plus sur les attributs possibles.
+    // Pointez pour afficher la description des attributs existants.
+    // Pour plus d'informations, visitez : https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": "API",
+            "type": "dotnet",
+            "request": "launch",
+            "projectPath": "${workspaceFolder}/src/Api/Api.csproj"
+        },
+        {
+            "name": "Yavsc.Org",
+            "type": "dotnet",
+            "request": "launch",
+            "projectPath": "${workspaceFolder}/src/Yavsc.Org/Yavsc.Org.csproj",
+        },
+        {
+            "name": "Yavsc.Blogs",
+            "type": "dotnet",
+            "request": "launch",
+            "projectPath": "${workspaceFolder}/src/Yavsc.Blogs/Yavsc.Blogs.csproj"
+        },
+        {
+            "name": "PostIt",
+            "type": "dotnet",
+            "request": "launch",
+            "projectPath": "${workspaceFolder}/src/PostIt/PostIt.Desktop/PostIt.Desktop.csproj",
+
+        }
+    ]
 }
--- a/.vscode/settings.json
+++ b/.vscode/settings.json
@ -2,31 +2,27 @@
    "dotnet-test-explorer.testProjectPath": "test/**/*Tests.csproj",

    "cSpell.words": [
-      "appsettings",
-      "asciidoctor",
-      "ASPNETCORE",
-      "Avalonia",
-      "blogspot",
-      "Configurabilité",
-      "Cratie",
-      "DESTDIR",
-      "dotnet",
-      "DOTNET",
-      "ecdsa",
-      "envsubst",
-      "Forgejo",
-      "Hsts",
-      "Newtonsoft",
-      "Npgsql",
-      "Oidc",
-      "PKCE",
-      "postit",
-      "pschneider",
-      "SLNDIR",
-      "validable",
-      "www-data",
-      "yavsc",
-      "Yavsc"
+        "appsettings",
+        "asciidoctor",
+        "ASPNETCORE",
+        "Configurabilité",
+        "Cratie",
+        "DESTDIR",
+        "dotnet",
+        "DOTNET",
+        "ecdsa",
+        "envsubst",
+        "Hsts",
+        "Newtonsoft",
+        "Npgsql",
+        "PKCE",
+        "postit",
+        "pschneider",
+        "SLNDIR",
+        "validable",
+        "www-data",
+        "yavsc",
+        "Yavsc"
    ],
    "cSpell.reportUnknownWords": true,
    "cSpell.language": "fr,en",
@ -44,6 +40,5 @@
                "copilotcli/gpt-5.3-codex"
            ]
        }
-    },
-    "dotnet.defaultSolution": "yavsc.sln"
+    }
 }
--- a/.vscode/tasks.json
+++ b/.vscode/tasks.json
@ -1,44 +1,6 @@
 {
  "version": "2.0.0",
-  "isRoot": true,
-  "problemMatcher": [
-        {
-          "owner": "dotnet",
-          "fileLocation": ["relative", "${workspaceFolder}"],
-          "source": "dotnet",
-          "pattern": {
-            "regexp": "^\\s+(.*)\\((\\d+),(\\d+)\\):\\s+(error|warning) (.+): (.*)$",
-            "file": 1,
-            "line": 2,
-            "column": 3,
-            "severity": 4,
-            "code": 5,
-            "message": 6
-          }
-        }
-      ],
  "tasks": [
-    {
-      "label": "run-debug-android",
-      "command": "dotnet",
-      "type": "shell",
-      "options": {
-        "cwd": "${workspaceFolder}/src/PostIt/PostIt.Android",
-        "env": {
-          "DOTNET_HOST_PATH": "/usr/share/dotnet",
-          "ANDROID_HOME": "/opt/android-sdk",
-          "JAVA_HOME": "/usr/lib/jvm/java-1.25.0-openjdk-amd64"
-        }
-      },
-      "args": [
-        "run",
-        "-p:TargetFramework=net10.0-android",
-        "-p:Configuration=Debug",
-        "-p:AndroidAttachDebugger=true",
-        "-p:AndroidSdbHostPort=55555",
-        "-p:AndroidSdbTargetPort=55555"
-      ]
-    },
    {
      "label": "build",
      "command": "dotnet",
@ -47,6 +9,7 @@
      "group": "build",
      "isBuildCommand": true,
      "isTestCommand": false,
+      "problemMatcher": ["$msCompile"],
      "isBackground": true
    },
    {
@ -76,6 +39,59 @@
        "kind": "build"
      },
      "isBackground": true
+    },
+    {
+      "label": "test blogs",
+      "type": "process",
+      "problemMatcher": ["$msCompile"],
+      "command": "dotnet",
+      "args": ["test"],
+      "runOptions": {
+        "instanceLimit": 1
+      },
+      "options": {
+        "cwd": "src/Yavsc.Blogs",
+        "env": {
+          "DOTNET_CLI_UI_LANGUAGE": "en-US",
+          "ASPNETCORE_ENVIRONMENT": "Development"
+        }
+      },
+      "group": {
+        "kind": "test"
+      },
+      "isBackground": true,
+      "presentation": {
+        "echo": true,
+        "reveal": "always",
+        "focus": false,
+        "panel": "shared",
+        "showReuseMessage": true,
+        "clear": false
+      }
+    },
+    {
+      "label": "publish",
+      "command": "dotnet",
+      "type": "process",
+      "args": [
+        "publish",
+        "/property:GenerateFullPaths=true",
+        "/consoleloggerparameters:NoSummary;ForceNoAlign"
+      ],
+      "problemMatcher": "$msCompile"
+    },
+    {
+      "label": "watch",
+      "command": "dotnet",
+      "type": "process",
+      "args": ["watch", "--project",
+      "src/Yavsc.Org/Yavsc.Org.csproj"
+    ],
+      "problemMatcher": "$msCompile",
+      "runOptions": {
+
+      }
+
    }
  ]
 }
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -1,68 +1,20 @@
 # Changelog

-## [1.0.8-rc9] - unstable
+Toutes les modifications notables de PostIt et de la plateforme Yavsc
+sont documentées dans ce fichier.

-### Added
+Le format suit [Keep a Changelog](https://keepachangelog.com/fr/1.1.0/),
+et ce projet adhère au [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

-nothing
+À noter : la **parité du numéro de patch** porte une signification de canal :

-### Changed
+- **patch pair** (ex. `1.0.0`, `1.0.2`) → **stable**
+- **patch impair** (ex. `1.0.1`, `1.0.3`) → **preview**
+- **suffixe** (ex. `1.0.0-rc1`, `1.0.0-alpha`) → **instable**

-masquage non-owner côté backend de l'ACL du billet
-
-### Fixed
-
-On a maintenant le comportement attendu bout en bout:
-
-ACL chargée depuis le BlogPostDto
-noms de cercles affichés dans le dialogue ACL côté PostIt
-
-## [1.0.8-rc8] - unstable
-
-### Added
-
-nothing
-
-### Changed
-
-nothing
-
-### Fixed
-
-The PostIt publish toggle button
-
-## [1.0.8-rc7] - unstable
-
-### Added
-
-* [PostIt] The search pattern now persists
-
-### Changed
-
-* The blog spot path is now `/api/v1/blogspot` (yet in last release)
-
-### Fixed
-
-* [Yavsc.Org] (Ticket #45) La forme de l'email de l'utilisateur est maintenant validée avant l'envoi du formulaire d'enregistrement
-
-## [1.0.8-rc6] - unstable
-
-### Added
-
-* a code cleanup,
-* a first Xamarin.UITest is successful, but disabled, because breaking the actual CI process,
-* Android app starts, the login process succeeds
-
-### Changed
-
-L'identifiant de l'application client Android a changé, il passe en minuscules :
-`fr.pschneider.postit`
-
-### Fixed
-
-a bug posting and retrieving ACL from the backend,
-the ACL now comes along with the article,
-[TODO][PostIt] keep ACL along with the article
+Cette convention est partagée avec le dépôt
+[`postit-debian`](https://forgejo.pschneider.fr/notazof/postit-debian)
+pour la production des paquets `.deb`.

 ## [1.0.8-rc1] - unstable

@ -217,10 +169,10 @@ the ACL now comes along with the article,
  migration, reverted in this release. The publish toggle covers
  the same user-visible switch without a schema change.

-[Unreleased]: https://forgejo.pschneider.fr/notazof/yavsc/compare/HEAD
-[1.0.8-rc1]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.7...1.0.8-rc1
-[1.0.7]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.6...1.0.7
-[1.0.6]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.5...1.0.6
+[Unreleased]: https://github.com/pazof/yavsc/compare/HEAD
+[1.0.8-rc1]: https://github.com/pazof/yavsc/compare/1.0.7...1.0.8-rc1
+[1.0.7]: https://github.com/pazof/yavsc/compare/1.0.6...1.0.7
+[1.0.6]: https://github.com/pazof/yavsc/compare/1.0.5...1.0.6

 ## [1.0.6] - stable

@ -254,4 +206,4 @@ the ACL now comes along with the article,
  actual release id. Switched to `jq` for both body construction and
  field extraction.

-[1.0.6]: https://forgejo.pschneider.fr/notazof/yavsc/compare/1.0.5...1.0.6
+[1.0.6]: https://github.com/pazof/yavsc/compare/1.0.5...1.0.6
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@ -11,7 +11,7 @@
 ## Premier build

 ```bash
-git clone https://forgejo.pschneider.fr/notazof/yavsc.git
+git clone https://github.com/pazof/yavsc.git
 cd yavsc
 dotnet restore
 dotnet build
@ -49,26 +49,6 @@ Les tests sont répartis en :
  item « Tests d'intégration smoke par BC ».
 - `src/PostIt.Tests/` — tests unitaires du client desktop PostIt.

-## Le CHANGELOG.md
-
-Le `CHANGELOG.md` est un document de changement de version
-
-Toutes les modifications notables de PostIt et de la plateforme Yavsc
-sont documentées dans ce fichier.
-
-Le format suit [Keep a Changelog](https://keepachangelog.com/fr/1.1.0/),
-et ce projet adhère au [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
-
-À noter : la **parité du numéro de patch** porte une signification de canal :
-
- **patch pair** (ex. `1.0.0`, `1.0.2`) → **stable**
- **patch impair** (ex. `1.0.1`, `1.0.3`) → **preview**
- **suffixe** (ex. `1.0.0-rc1`, `1.0.0-alpha`) → **instable**
-
-Cette convention est partagée avec le dépôt
-[`postit-debian`](https://forgejo.pschneider.fr/notazof/postit-debian)
-pour la production des paquets `.deb`.
-
 ## Navigation (PostIt)

 La navigation est centralisée dans
--- a/Directory.Build.props
+++ b/Directory.Build.props
@ -1,6 +1,16 @@
 <Project>
  <PropertyGroup>
    <RootNamespace>Yavsc</RootNamespace>
-    <NoWarn>NU1701, NU1901, NU1902, NU1507</NoWarn>
+    <!--
+      GitVersion.MsBuild is referenced as a build-time package from
+      every csproj under src/. Setting UseProjectNamespaceForGitVersionInformation
+      here (in Directory.Build.props) means each assembly exposes a
+      GitVersionInformation type under its own namespace, e.g.
+      PostIt.GitVersionInformation, Yavsc.GitVersionInformation, so
+      the assembly metadata reflects the source tree it was built
+      from without conflicting names.
+    -->
+    <UseProjectNamespaceForGitVersionInformation>true</UseProjectNamespaceForGitVersionInformation>
+    <NoWarn>NU1701, NU1901, NU1902</NoWarn>
  </PropertyGroup>
 </Project>
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@ -4,6 +4,7 @@
  </PropertyGroup>
  <ItemGroup>
    <PackageVersion Include="coverlet.collector" Version="10.0.1" />
+    <PackageVersion Include="GitVersion.MsBuild" Version="6.8.1" />
    <PackageVersion Include="HigginsSoft.IdentityServer8" Version="8.1.0-alpha.171" />
    <PackageVersion Include="HigginsSoft.IdentityServer8.EntityFramework" Version="8.1.0-alpha.171" />
    <PackageVersion Include="IdentityModel.OidcClient" Version="6.0.0" />
--- a/7
+++ b/7
@ -77,6 +77,13 @@ release:
 		echo "  V : version semver (ex. 1.0.7-rc1) — sert à nommer la branche."; \
 		exit 1; \
 	fi
+	@CURRENT=$$(git branch --show-current); \
+	if [ "$$CURRENT" != "main" ]; then \
+		echo "Refus : la cible doit être lancée depuis main."; \
+		echo "  Branche courante : $$CURRENT"; \
+		echo "  Fais : git checkout main && git pull --ff-only origin main"; \
+		exit 1; \
+	fi
 	@if [ -n "$$(git status --porcelain)" ]; then \
 		echo "Working tree sale, refus de créer une branche release."; \
 		git status --short; \
--- a/README.md
+++ b/README.md
@ -16,10 +16,11 @@ https://forgejo.pschneider.fr/notazof/yavsc/actions?workflow=release.yml

 # Statut actuel des actions GitHub

-* [![CodeQL Advanced](https://github.com/pazof/yavsc/actions/workflows/codeql.yml/badge.svg)](https://github.com/pazof/yavsc/actions/workflows/codeql.yml)
+* [![Build and Push Yavsc Apk](https://github.com/pazof/yavsc/actions/workflows/docker-publish-android.yml/badge.svg)](https://github.com/pazof/yavsc/actions/workflows/docker-publish-android.yml)

 * [![Build and Push Yavsc Production Image](https://github.com/pazof/yavsc/actions/workflows/docker-publish-backend.yml/badge.svg)](https://github.com/pazof/yavsc/actions/workflows/docker-publish-backend.yml)

+* [![CodeQL Advanced](https://github.com/pazof/yavsc/actions/workflows/codeql.yml/badge.svg)](https://github.com/pazof/yavsc/actions/workflows/codeql.yml)

 # Documentation

--- a/external/dotnet-android-build-image
+++ b/external/dotnet-android-build-image
@ -0,0 +1 @@
+Subproject commit 0695a6c1fea6508f1a88f7ad0ad9cb93733aa52d
--- a/src/PostIt/PostIt.Tests/AddCircleMemberDialogTests.cs
+++ b/src/PostIt/PostIt.Tests/AddCircleMemberDialogTests.cs
@ -1,8 +1,8 @@

 using Avalonia;
+using Avalonia.Controls;
 using Avalonia.Headless.XUnit;
 using Microsoft.Extensions.DependencyInjection;
-using PostIt.Helpers;
 using PostIt.Services;
 using PostIt.ViewModels;
 using PostIt.Views;
@ -73,7 +73,7 @@ public class AddCircleMemberDialogTests
        return context;
    }
    /// <summary>
-    /// Mount a real <see cref="MainView"/>, build a minimal
+    /// Mount a real <see cref="MainWindow"/>, build a minimal
    /// DI graph, push <see cref="CirclesPage"/> then the
    /// <see cref="AddCircleMemberDialog"/> on top of it.
    /// Returns the stack size so the test can pin the delta.
@ -98,9 +98,12 @@ public class AddCircleMemberDialogTests
        services.AddTransient<AddCircleMemberDialogViewModel>();
        var sp = services.BuildServiceProvider();

-        context.Window = new MainView();
+        context.Window = new MainWindow();
        context.App = (PostIt.App)Application.Current!;
+        context.App.DataTemplates.Clear();
+        context.App.DataTemplates.Add(new ViewLocator(sp));
        context.App.AttachMainWindow(context.Window);
+        context.Window.Show();

        context.page = sp.GetRequiredService<CirclesPage>();
        context.Window.NavRoot.PushAsync(context.page).GetAwaiter().GetResult();
--- a/src/PostIt/PostIt.Tests/BearerScopeTests.cs
+++ b/src/PostIt/PostIt.Tests/BearerScopeTests.cs
@ -1,8 +1,18 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
 using System.Net;
+using System.Net.Http;
 using System.Text;
 using System.Text.Json;
+using System.Threading;
+using System.Threading.Tasks;
+using Yavsc.Blogspot;
 using Yavsc.Api.Client;
 using PostIt.Services;
+using PostIt.Services;
+using Xunit;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/BlogApiTestFakes.cs
+++ b/src/PostIt/PostIt.Tests/BlogApiTestFakes.cs
@ -1,6 +1,7 @@
 using Yavsc.Blogspot;
 using PostIt.Services;
 using PostIt.ViewModels;
+using Yavsc.Models;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/BlogPostAuthorDtoTests.cs
+++ b/src/PostIt/PostIt.Tests/BlogPostAuthorDtoTests.cs
@ -166,51 +166,4 @@ public class BlogPostAuthorDtoTests
        Assert.True(root.TryGetProperty("userName", out _));
        Assert.True(root.TryGetProperty("avatar", out _));
    }
-
-    [Fact]
-    public void BlogPostDto_deserialises_acl_from_detail_payload()
-    {
-        // Detail payload shape emitted by BlogApiController.GetBlog:
-        // ACL entries are included under "acl"/"ACL".
-        var json = """
-        {
-          "id": 99,
-          "title": "ACL test",
-          "authorId": "u-alice",
-          "acl": [
-            { "circleId": 12, "blogPostId": 99 },
-            { "circleId": 34, "blogPostId": 99 }
-          ]
-        }
-        """;
-
-        var post = JsonSerializer.Deserialize<BlogPostDto>(json, CaseInsensitiveJson);
-
-        Assert.NotNull(post);
-        var acl = post!.GetACL();
-        Assert.Equal(2, acl.Length);
-        Assert.Contains(acl, a => a.CircleId == 12);
-        Assert.Contains(acl, a => a.CircleId == 34);
-    }
-
-    [Fact]
-    public void BlogPostDto_does_not_emit_acl_when_serialized_for_write()
-    {
-        var post = new BlogPostDto
-        {
-            Id = 77,
-            Title = "Write payload"
-        };
-        post.AuthorizeCircle(11);
-
-        // The client should not send ACL through POST/PUT blog payloads.
-        // ACL mutations have their own dedicated /blogacl endpoint.
-        var json = JsonSerializer.Serialize(post,
-            new JsonSerializerOptions { PropertyNamingPolicy = JsonNamingPolicy.CamelCase });
-
-        using var doc = JsonDocument.Parse(json);
-        var root = doc.RootElement;
-        Assert.False(root.TryGetProperty("acl", out _));
-        Assert.False(root.TryGetProperty("wireAcl", out _));
-    }
 }
--- a/src/PostIt.Tests/Directory.Packages.props
+++ b/src/PostIt.Tests/Directory.Packages.props
@ -0,0 +1,10 @@
+<Project>
+  <!-- Pull in shared package versions from the repository root. -->
+  <Import Project="$([MSBuild]::GetPathOfFileAbove('Directory.Packages.props', '$(MSBuildThisFileDirectory)../'))" />
+
+  <!-- PostIt.Tests-specific versions -->
+  <ItemGroup>
+    <PackageVersion Include="Avalonia.Headless" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.Headless.XUnit" Version="12.0.4" />
+  </ItemGroup>
+</Project>
--- a/src/PostIt/PostIt.Tests/FakeAuthorizingBrowser.cs
+++ b/src/PostIt/PostIt.Tests/FakeAuthorizingBrowser.cs
@ -1,3 +1,6 @@
+using System;
+using System.Net.Http;
+using System.Threading.Tasks;
 using IdentityModel.OidcClient.Browser;

 namespace PostIt.Tests;
--- a/src/PostIt/PostIt.Tests/MainPageButtonsTests.cs
+++ b/src/PostIt/PostIt.Tests/MainPageButtonsTests.cs
@ -1,6 +1,9 @@
 using Avalonia;
 using Avalonia.Controls;
+using Avalonia.Headless;
 using Avalonia.Headless.XUnit;
+using Avalonia.Input;
+using Avalonia.Interactivity;
 using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
 using Yavsc.Api.Client;
@ -72,7 +75,7 @@ public class MainPageButtonsTests
        { }
    }

-    private static MainViewModel MakeViewModel(BlogPostDto? selectedPost = null)
+    private static MainPageViewModel MakeViewModel(BlogPostDto? selectedPost = null)
    {
        var api = new ThrowingApi();
        var blog = new BlogApiClient(api, "http://localhost/");
@ -93,13 +96,13 @@ public class MainPageButtonsTests
        services.AddTransient<SignaturePage>();
        services.AddTransient<CirclesPage>();
        services.AddTransient<PostAclDialog>();
-        var vm = new MainViewModel(blog, services: services.BuildServiceProvider());
+        var vm = new MainPageViewModel(blog, services: services.BuildServiceProvider());
        if (selectedPost is not null) vm.SelectedPost = selectedPost;
        return vm;
    }

    /// <summary>
-    /// Mount a real <see cref="MainView"/> (as
+    /// Mount a real <see cref="MainWindow"/> (as
    /// <c>SessionStatusBannerTests</c> does), push a
    /// <see cref="MainPage"/> with the given VM onto
    /// <c>NavRoot</c>. <c>PushAsync</c> is awaited (via
@ -109,12 +112,18 @@ public class MainPageButtonsTests
    /// realised and <c>KeyPressQwerty</c> has a real
    /// <see cref="TopLevel"/> to dispatch against.
    /// </summary>
-    private static (MainView window, MainPage page) MountMainPage(MainViewModel vm)
+    private static (MainWindow window, MainPage page) MountMainPage(MainPageViewModel vm)
    {
-        var window = new MainView();
+        var window = new MainWindow();
        var page = new MainPage { DataContext = vm };
        var app = (PostIt.App)Application.Current!;
+        if (vm.Services is not null)
+        {
+            app.DataTemplates.Clear();
+            app.DataTemplates.Add(new ViewLocator(vm.Services));
+        }
        app.AttachMainWindow(window);
+        window.Show();
        window.NavRoot.PushAsync(page).GetAwaiter().GetResult();
        return (window, page);
    }
@ -124,7 +133,7 @@ public class MainPageButtonsTests
    /// supported headless pattern (cf. CalculatorTests in the
    /// Avalonia.Samples repo). Returns the nav-stack count
    /// before the click so the caller can assert on the delta.
-    /// KeyPressQwerty is dispatched on the <see cref="MainView"/>
+    /// KeyPressQwerty is dispatched on the <see cref="MainWindow"/>
    /// itself — it is the <see cref="TopLevel"/> that owns the
    /// headless implementation, and routing the key through any
    /// descendant TopLevel (e.g. one obtained via
@ -133,7 +142,7 @@ public class MainPageButtonsTests
    /// because the descendant does not carry the
    /// <c>PlatformHandle</c> the harness expects.
    /// </summary>
-    private static int ClickAndCapture(MainView window, Button button)
+    private static int ClickAndCapture(MainWindow window, Button button)
    {
        var stackBefore = window.NavRoot.NavigationStack.Count;
        button.Command?.Execute(button.CommandParameter);
--- a/src/PostIt/PostIt.Tests/MainPageSaveTests.cs
+++ b/src/PostIt/PostIt.Tests/MainPageSaveTests.cs
@ -1,8 +1,10 @@
+using Avalonia;
 using Avalonia.Controls;
 using Avalonia.Headless.XUnit;
 using Avalonia.VisualTree;
 using Yavsc.Blogspot;
 using Yavsc.Api.Client;
+using PostIt.Services;
 using PostIt.ViewModels;
 using PostIt.Views;
 namespace PostIt.Tests;
@ -40,7 +42,7 @@ public class MainPageSaveTests
        var recorder = new CallRecorder();
        var api = new RecordingYavscApiClient(recorder);
        var blog = new BlogApiClient(api, "http://localhost/");
-        var viewModel = new MainViewModel(blog);
+        var viewModel = new MainPageViewModel(blog);

        var page = new MainPage { DataContext = viewModel };
        // MainPage is a ContentPage (a Page, not a Control), so it
@ -79,9 +81,9 @@ public class MainPageSaveTests
        // whose Title is exactly what the user typed. The bug
        // fails this assertion with Title == string.Empty.
        Assert.NotEmpty(recorder.Calls);
-        var (method, path, body) = recorder.Calls[1];
+        var (method, path, body) = recorder.FirstCall;
        Assert.Equal(HttpMethod.Post, method);
-        Assert.Equal("blogspot", path);
+        Assert.Equal("blog", path);
        var sent = Assert.IsType<BlogPostDto>(body);
        Assert.Equal(typed, sent.Title);
    }
--- a/src/PostIt/PostIt.Tests/OidcStubAuthority.cs
+++ b/src/PostIt/PostIt.Tests/OidcStubAuthority.cs
@ -1,8 +1,13 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
 using System.Net;
 using System.Net.Sockets;
 using System.Security.Cryptography;
 using System.Text;
 using System.Text.Json;
+using System.Threading;
+using System.Threading.Tasks;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/PostAclDialogTests.cs
+++ b/src/PostIt/PostIt.Tests/PostAclDialogTests.cs
@ -1,13 +1,19 @@
+using System;
+using System.Collections.Generic;
 using System.Net;
+using System.Net.Http;
 using System.Text;
 using System.Text.Json;
+using System.Threading;
+using System.Threading.Tasks;
 using Avalonia;
+using Avalonia.Controls;
 using Avalonia.Headless.XUnit;
 using Microsoft.Extensions.DependencyInjection;
-using PostIt.Helpers;
 using PostIt.Services;
 using PostIt.ViewModels;
 using PostIt.Views;
+using Yavsc.Abstract.Identity.Security;
 using Yavsc.Api.Client;
 using Yavsc.Api.Client.Dtos;
 using Yavsc.Blogspot;
@ -118,7 +124,7 @@ public class PostAclDialogTests
    /// rebinding the global DI mid-test would trample the
    /// Settings singleton the rest of the harness depends on.
    /// </summary>
-    private static (MainView window, BlogAclApiClient aclClient, CircleApiClient circleClient, CountingHttpHandler handler) Mount()
+    private static (MainWindow window, BlogAclApiClient aclClient, CircleApiClient circleClient, CountingHttpHandler handler) Mount()
    {
        var handler = new CountingHttpHandler();
        var settings = new Settings();
@ -139,9 +145,12 @@ public class PostAclDialogTests
        // CountingHttpHandler.
        GC.KeepAlive(sp);

-        var window = new MainView();
+        var window = new MainWindow();
        var app = (App)Application.Current!;
+        app.DataTemplates.Clear();
+        app.DataTemplates.Add(new ViewLocator(sp));
        app.AttachMainWindow(window);
+        window.Show();

        return (window, aclClient, circleClient, handler);
    }
@ -191,8 +200,9 @@ public class PostAclDialogTests
            await Task.Delay(20);
        }

-        // Assert: one GET went out (for /circle) from LoadAsync.
-        Assert.Equal(1, handler.RequestCount);
+        // Assert: exactly two GETs went out (one to /blogacl,
+        // one to /circle), both from the LoadAsync call.
+        Assert.Equal(2, handler.RequestCount);

        // And the VM's idempotency gate has flipped.
        Assert.True(vm.Loaded);
@ -218,58 +228,7 @@ public class PostAclDialogTests
        await vm.LoadAsync();

        // Assert: the second call short-circuited on _loaded.
-        Assert.Equal(1, handler.RequestCount);
+        Assert.Equal(2, handler.RequestCount);
        Assert.True(vm.Loaded);
    }
-
-    [Fact]
-    public async Task LoadAsync_keeps_acl_from_blogpostdto_and_only_loads_circles()
-    {
-        var post = new BlogPostDto { Id = 42, Title = "ACL hydration" };
-        post.AuthorizeCircle(12);
-        post.AuthorizeCircle(34);
-
-        var api = new StubAclApiClient();
-        var aclClient = new BlogAclApiClient(api, "http://localhost/");
-        var circleClient = new CircleApiClient(api, "http://localhost/");
-        var vm = new PostAclDialogViewModel(post, aclClient, circleClient);
-
-        await vm.LoadAsync();
-
-        Assert.Equal(1, api.CallCount);
-        Assert.Equal(2, vm.AclEntries.Count);
-        Assert.Contains(vm.AclEntries, a => a.CircleId == 12);
-        Assert.Contains(vm.AclEntries, a => a.CircleId == 34);
-    }
-
-    private sealed class StubAclApiClient : IYavscApiClient
-    {
-        public HttpClient Http { get; } = new();
-        public int CallCount { get; private set; }
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            CallCount++;
-
-            if (typeof(T) == typeof(List<CircleDto>))
-            {
-                var circles = new List<CircleDto>
-                {
-                    new() { Id = 12, Name = "A", OwnerId = "owner", Public = false },
-                    new() { Id = 34, Name = "B", OwnerId = "owner", Public = false },
-                };
-                return Task.FromResult((T)(object)circles);
-            }
-
-            return Task.FromResult(default(T)!);
-        }
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            CallCount++;
-            return Task.CompletedTask;
-        }
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
 }
--- a/src/PostIt/PostIt.Tests/PostIt.Tests.csproj
+++ b/src/PostIt/PostIt.Tests/PostIt.Tests.csproj
@ -8,12 +8,11 @@
    <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
    <AssemblyVersion>1.1.0.0</AssemblyVersion>
    <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-beta.1+183.Branch.release-1.0.8-rc8.Sha.6cff3db32ecf72c0d2d430b7002fa7816a34e070</InformationalVersion>
+    <InformationalVersion>1.1.0-beta.1+1.Branch.release-1.0.8-rc1.Sha.1167169aa89e1bf25290e9a152d27b357a500ab3</InformationalVersion>
    <Version>1.1.0-beta.1</Version>
  </PropertyGroup>
  <ItemGroup>
    <PackageReference Include="Microsoft.NET.Test.Sdk" />
-    <PackageReference Include="Xamarin.UITest" />
    <PackageReference Include="xunit.v3" />
    <PackageReference Include="xunit.runner.visualstudio" />
    <PackageReference Include="coverlet.collector" />
@ -21,10 +20,12 @@
    <PackageReference Include="Avalonia.Headless.XUnit" />
  </ItemGroup>
  <ItemGroup>
-    <ProjectReference Include="..\PostIt\PostIt.csproj" />
+    <ProjectReference Include="..\..\src\PostIt\PostIt\PostIt.csproj" />
  </ItemGroup>
  <ItemGroup>
    <Using Include="Xunit" />
  </ItemGroup>
-  <ItemGroup></ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="GitVersion.MsBuild" />
+  </ItemGroup>
 </Project>
--- a/src/PostIt/PostIt.Tests/PostItViewModelTests.cs
+++ b/src/PostIt/PostIt.Tests/PostItViewModelTests.cs
@ -16,7 +16,7 @@ public class PostItViewModelTests
        // throws on any call (we never call the API in this test).
        var fakeApi = new ThrowingYavscApiClient();
        var blog = new BlogApiClient(fakeApi, "http://localhost/");
-        var viewModel = new MainViewModel(blog);
+        var viewModel = new MainPageViewModel(blog);

        viewModel.Posts.Add(new BlogPostDto { Id = 1, Title = "First post", Article = "Hello world", AuthorId = "alice" });
        viewModel.Posts.Add(new BlogPostDto { Id = 2, Title = "Second post", Article = "Nothing here", AuthorId = "bob" });
@ -49,27 +49,12 @@ public class PostItViewModelTests
        var api = new StubYavscApiClient(expected);
        var blog = new BlogApiClient(api, "http://localhost/");

-        var posts = await blog.GetPostsAsync(ct: TestContext.Current.CancellationToken);
+        var posts = await blog.GetPostsAsync();

        Assert.Equal(2, posts.Count);
        Assert.Equal("Hello", posts[0].Title);
    }

-    [Fact]
-    public async Task TogglePublishCommand_uses_the_current_checked_state_without_inverting_it()
-    {
-        var api = new RecordingPublishApi();
-        var blog = new BlogApiClient(api, "http://localhost/");
-        var viewModel = new MainViewModel(blog);
-
-        viewModel.SelectedPost = new BlogPostDto { Id = 42, IsPublished = false };
-
-        await viewModel.SetPublishStateAsync(true);
-
-        Assert.True(api.LastPublishValue);
-        Assert.True(viewModel.DraftIsPublished);
-    }
-
    /// <summary>Test fake that always throws if the API is invoked.</summary>
    private sealed class ThrowingYavscApiClient : YavscApiClient
    {
@ -118,34 +103,4 @@ public class PostItViewModelTests
            return Task.FromResult(default(T)!);
        }
    }
-
-    private sealed class RecordingPublishApi : IYavscApiClient
-    {
-        public bool LastPublishValue { get; private set; }
-        public HttpClient Http { get; } = new();
-
-        public Task<T> CallAsync<T>(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            if (method == HttpMethod.Put && path.Contains("/publish", StringComparison.OrdinalIgnoreCase))
-            {
-                var publish = body?.GetType().GetProperty("publish")?.GetValue(body) is bool value && value;
-                LastPublishValue = publish;
-            }
-
-            return Task.FromResult(default(T)!);
-        }
-
-        public Task CallAsync(HttpMethod method, string path, object? body = null, CancellationToken ct = default)
-        {
-            if (method == HttpMethod.Put && path.Contains("/publish", StringComparison.OrdinalIgnoreCase))
-            {
-                var publish = body?.GetType().GetProperty("publish")?.GetValue(body) is bool value && value;
-                LastPublishValue = publish;
-            }
-
-            return Task.CompletedTask;
-        }
-
-        public ValueTask DisposeAsync() => ValueTask.CompletedTask;
-    }
 }
--- a/src/PostIt/PostIt.Tests/SchemeUrlDetectorTests.cs
+++ b/src/PostIt/PostIt.Tests/SchemeUrlDetectorTests.cs
@ -1,4 +1,5 @@
 using PostIt.Services;
+using Xunit;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/SessionStatusBannerTests.cs
+++ b/src/PostIt/PostIt.Tests/SessionStatusBannerTests.cs
@ -1,5 +1,7 @@
+using Avalonia;
 using Avalonia.Controls;
 using Avalonia.Headless.XUnit;
+using Avalonia.Media;
 using Avalonia.Styling;
 using Avalonia.VisualTree;
 using PostIt.ViewModels;
@ -9,7 +11,7 @@ namespace PostIt.Tests;

 /// <summary>
 /// UI tests for <see cref="SessionStatusBanner"/>. Mounted inside
-/// a real <see cref="MainView"/> via the headless Avalonia
+/// a real <see cref="MainWindow"/> via the headless Avalonia
 /// platform declared in <c>TestApp.cs</c>.
 ///
 /// <para>The pattern is the one that <c>UnitTest1.MainPage_Should_Load</c>
@ -34,10 +36,11 @@ public class SessionStatusBannerTests
    [AvaloniaFact]
    public void Banner_renders_three_buttons_in_the_visual_tree()
    {
-        MainWindow window = new MainWindow();
+        var window = new MainWindow();
+        window.SessionBanner.DataContext = new SessionStatusViewModel();
        window.Show();

-        var buttons = window.GetVisualDescendants()
+        var buttons = window.SessionBanner.GetVisualDescendants()
            .OfType<Button>()
            .ToList();

@ -45,7 +48,7 @@ public class SessionStatusBannerTests
        // déconnecter, Se connecter, Paramètres. If any one is
        // missing, the user has no way to trigger the
        // corresponding navigation event.
-        Assert.Equal(4, buttons.Count);
+        Assert.Equal(3, buttons.Count);
        Assert.Contains(buttons, b => b.Content as string == "Se déconnecter");
        Assert.Contains(buttons, b => b.Content as string == "Se connecter");
        Assert.Contains(buttons, b => b.Content as string == "Paramètres");
@ -54,10 +57,13 @@ public class SessionStatusBannerTests
    [AvaloniaFact]
    public void Banner_login_button_is_visible_when_logged_out()
    {
-        MainWindow window = new MainWindow();
+        var window = new MainWindow();
+        var vm = new SessionStatusViewModel();
+        Assert.True(vm.IsLoggedOut);  // VM default
+        window.SessionBanner.DataContext = vm;
        window.Show();

-        var login = window.GetVisualDescendants()
+        var login = window.SessionBanner.GetVisualDescendants()
            .OfType<Button>()
            .Single(b => b.Content as string == "Se connecter");

@ -69,13 +75,13 @@ public class SessionStatusBannerTests
    [AvaloniaFact]
    public void Banner_logout_button_is_hidden_when_logged_out()
    {
-       SessionStatusBanner banner = CreateBanner();
+        var window = new MainWindow();
+        var vm = new SessionStatusViewModel();
+        Assert.False(vm.IsLoggedIn);  // VM default
+        window.SessionBanner.DataContext = vm;
+        window.Show();

-        Assert.False((banner.DataContext as SessionStatusViewModel)!
-        .IsLoggedIn);  // VM default
-
-
-        var logout = banner.GetVisualDescendants()
+        var logout = window.SessionBanner.GetVisualDescendants()
            .OfType<Button>()
            .Single(b => b.Content as string == "Se déconnecter");

@ -85,9 +91,11 @@ public class SessionStatusBannerTests
    [AvaloniaFact]
    public void Banner_settings_button_is_visible_regardless_of_session()
    {
-        SessionStatusBanner banner = CreateBanner();
+        var window = new MainWindow();
+        window.SessionBanner.DataContext = new SessionStatusViewModel();
+        window.Show();

-        var settings = banner.GetVisualDescendants()
+        var settings = window.SessionBanner.GetVisualDescendants()
            .OfType<Button>()
            .Single(b => b.Content as string == "Paramètres");

@ -97,21 +105,14 @@ public class SessionStatusBannerTests
        Assert.True(settings.IsVisible);
    }

-    private static SessionStatusBanner CreateBanner()
-    {
-        MainWindow window = new MainWindow();
-        window.Show();
-        var banner = window.MainView.SessionBanner;
-        var status = new SessionStatusViewModel();
-        banner.DataContext = status;
-        return banner;
-    }
-
    [AvaloniaFact]
    public void Banner_session_label_reflects_DataContext()
    {
-        SessionStatusBanner banner = CreateBanner();
-        var label = banner.GetVisualDescendants()
+        var window = new MainWindow();
+        window.SessionBanner.DataContext = new SessionStatusViewModel();
+        window.Show();
+
+        var label = window.SessionBanner.GetVisualDescendants()
            .OfType<TextBlock>()
            .First(t => t.Text == "Déconnecté" || t.Text == "Connecté");

--- a/src/PostIt/PostIt.Tests/SettingsLoadTests.cs
+++ b/src/PostIt/PostIt.Tests/SettingsLoadTests.cs
@ -1,4 +1,8 @@
-using System.Text.Json;
+using System;
+using System.IO;
+using System.Threading;
+using System.Threading.Tasks;
+using Xunit;

 namespace PostIt.Tests;

@ -87,7 +91,7 @@ public class SettingsLoadTests
                        bool flip = ((workerId + i) & 1) == 0;
                        settings.DarkMode = flip;
                        settings.Authentication.RedirectUri =
-                            global::AuthenticationSettings.DesktopRedirectUri;
+                            global::AuthenticationSettings.DefaultDesktopRedirectUri;

                        settings.BusinessApiUrl = flip
                            ? "https://a.example.test/api/v1/"
@ -105,7 +109,7 @@ public class SettingsLoadTests
                {
                    failures.Add(ex);
                }
-            }, TestContext.Current.CancellationToken);
+            });
        }
        await Task.WhenAll(tasks);

@ -125,7 +129,7 @@ public class SettingsLoadTests
    /// and checking that Loaded flips exactly once (no torn reads).
    /// </summary>
    [Fact]
-    public async Task Load_is_idempotent_under_concurrent_calls()
+    public void Load_is_idempotent_under_concurrent_calls()
    {
        var settings = new PostIt.ViewModels.Settings
        {
@ -145,32 +149,10 @@ public class SettingsLoadTests
            {
                barrier.SignalAndWait();
                settings.Load();
-            }, TestContext.Current.CancellationToken);
+            });
        }
-        await Task.WhenAll(tasks);
+        Task.WaitAll(tasks);

        Assert.True(settings.Loaded);
    }
-
-    [Fact]
-    public void SearchText_is_serialized_in_settings_and_round_trips()
-    {
-        var settings = new PostIt.ViewModels.Settings
-        {
-            Authentication = new AuthenticationSettings
-            {
-                Authority = "https://example.test/",
-                ClientId = "postit-tests",
-                Scopes = new[] { "openid" }
-            }
-        };
-
-        settings.SearchText = "bonjour";
-
-        var json = JsonSerializer.Serialize(settings);
-        var roundTrip = JsonSerializer.Deserialize<PostIt.ViewModels.Settings>(json);
-
-        Assert.NotNull(roundTrip);
-        Assert.Equal("bonjour", roundTrip.SearchText);
-    }
 }
--- a/src/PostIt/PostIt.Tests/SignaturePadControlTests.cs
+++ b/src/PostIt/PostIt.Tests/SignaturePadControlTests.cs
@ -1,5 +1,8 @@
+using System;
+using System.Linq;
 using PostIt.Controls;
 using PostIt.Models;
+using Xunit;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/SignaturePageViewModelTests.cs
+++ b/src/PostIt/PostIt.Tests/SignaturePageViewModelTests.cs
@ -1,6 +1,10 @@
+using System;
+using System.IO;
 using System.Text.Json;
+using System.Threading.Tasks;
 using PostIt.Controls;
 using PostIt.ViewModels;
+using Xunit;

 namespace PostIt.Tests;

--- a/src/PostIt/PostIt.Tests/TestApp.cs
+++ b/src/PostIt/PostIt.Tests/TestApp.cs
--- a/src/PostIt/PostIt.Tests/TestAppContext.cs
+++ b/src/PostIt/PostIt.Tests/TestAppContext.cs
@ -4,7 +4,7 @@ namespace PostIt.Tests;

 internal class TestAppContext
 {
-    public MainView? Window {get; set; }
+    public MainWindow? Window {get; set; }
    public CirclesPage? page {get; set; }
    public AddCircleMemberDialog? dialog { get; set; }
    public App? App { get; internal set; }
--- a/src/PostIt/PostIt.Tests/UnitTest1.cs
+++ b/src/PostIt/PostIt.Tests/UnitTest1.cs
@ -1,4 +1,5 @@
 using Avalonia.Headless.XUnit;
+using Avalonia.Controls;
 using PostIt.Views;

 namespace PostIt.Tests;
@ -8,7 +9,8 @@ public class MainPageTests
    [AvaloniaFact]
    public void MainPage_Should_Load()
    {
-        var window = new MainView();
+        var window = new MainWindow();
+        window.Show();
        Assert.NotNull(window);
    }
-}
+}
--- a/src/PostIt/PostIt.Tests/YavscApiClientTests.cs
+++ b/src/PostIt/PostIt.Tests/YavscApiClientTests.cs
@ -1,10 +1,22 @@
+using System;
+using System.Collections.Generic;
+using System.IO;
+using System.Linq;
 using System.Net;
+using System.Net.Http;
 using System.Net.Sockets;
 using System.Text;
 using System.Text.Json;
+using System.Threading;
+using Yavsc.Blogspot;
+using Yavsc.Api.Client;
 using PostIt.Services;
+using System.Threading.Tasks;
+using IdentityModel.OidcClient;
 using IdentityModel.OidcClient.Browser;
+using PostIt.Services;
 using PostIt.ViewModels;
+using Xunit;

 namespace PostIt.Tests;

--- a/src/PostIt.Tests/pslist
+++ b/src/PostIt.Tests/pslist
@ -0,0 +1,94 @@
+UID          PID    PPID  C STIME TTY          TIME CMD
+paul        1155       1  0 13:18 ?        00:00:00 /usr/lib/systemd/systemd --user
+paul        1168    1155  0 13:18 ?        00:00:00 (sd-pam)
+paul        1361    1155  0 13:18 ?        00:00:00 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation --syslog-only
+paul        1364    1155  1 13:18 ?        00:01:19 /home/paul/.nvm/versions/node/v22.23.0/bin/node /home/paul/.nvm/versions/node/v22.23.0/lib/node_modules/openclaw/dist/index.js gateway --port 18789
+paul        1367    1155  0 13:18 ?        00:00:00 /usr/bin/pipewire
+paul        1372    1155  0 13:18 ?        00:00:00 /usr/bin/pipewire -c filter-chain.conf
+paul        1373    1155  0 13:18 ?        00:00:00 /usr/bin/wireplumber
+paul        1374    1155  0 13:18 ?        00:00:00 /usr/bin/pipewire-pulse
+paul        1444    1155  0 13:18 ?        00:00:00 /usr/bin/mpris-proxy
+paul        2593    1155  0 13:19 ?        00:00:00 /usr/bin/gnome-keyring-daemon --foreground --components=pkcs11,secrets --control-directory=/run/user/1000/keyring
+paul        2608    2487  0 13:19 tty2     00:00:00 /usr/libexec/gdm-x-session --run-script /usr/bin/gnome-session
+paul        2617    2608  1 13:19 tty2     00:01:12 /usr/lib/xorg/Xorg vt2 -displayfd 3 -auth /run/user/1000/gdm/Xauthority -nolisten tcp -background none -noreset -keeptty -novtswitch -verbose 3
+paul        2647    2608  0 13:19 tty2     00:00:00 /usr/libexec/gnome-session-binary
+paul        2785    1155  0 13:19 ?        00:00:00 /usr/libexec/at-spi-bus-launcher
+paul        2792    2785  0 13:19 ?        00:00:00 /usr/bin/dbus-daemon --config-file=/usr/share/defaults/at-spi2/accessibility.conf --nofork --print-address 11 --address=unix:path=/run/user/1000/at-spi/bus_1
+paul        2802    1155  0 13:19 ?        00:00:00 /usr/libexec/gcr-ssh-agent --base-dir /run/user/1000/gcr
+paul        2803    1155  0 13:19 ?        00:00:00 /usr/libexec/gnome-session-ctl --monitor
+paul        2804    1155  0 13:19 ?        00:00:00 /usr/bin/ssh-agent -D
+paul        2814    1155  0 13:19 ?        00:00:00 /usr/libexec/gvfsd
+paul        2828    1155  0 13:19 ?        00:00:00 /usr/libexec/gvfsd-fuse /run/user/1000/gvfs -f
+paul        2838    1155  0 13:19 ?        00:00:00 /usr/libexec/gnome-session-binary --systemd-service --session=gnome
+paul        2874    1155  3 13:19 ?        00:02:13 /usr/bin/gnome-shell
+paul        2896    2874  0 13:19 ?        00:00:01 /usr/libexec/mutter-x11-frames
+paul        2902    1155  0 13:19 ?        00:00:00 /usr/libexec/at-spi2-registryd --use-gnome-session
+paul        2918    1155  0 13:19 ?        00:00:00 /usr/libexec/xdg-desktop-portal
+paul        2933    1155  0 13:19 ?        00:00:00 /usr/libexec/xdg-permission-store
+paul        2938    1155  0 13:19 ?        00:00:00 /usr/libexec/xdg-document-portal
+paul        2971    1155  0 13:19 ?        00:00:00 /usr/libexec/gnome-shell-calendar-server
+paul        2976    1155  0 13:19 ?        00:00:00 /usr/libexec/dconf-service
+paul        2992    1155  0 13:19 ?        00:00:00 /usr/libexec/evolution-source-registry
+paul        2994    1155  0 13:19 ?        00:00:00 /usr/bin/gjs -m /usr/share/gnome-shell/org.gnome.Shell.Notifications
+paul        3012    1155  0 13:19 ?        00:00:12 /usr/bin/ibus-daemon --panel disable --xim
+paul        3013    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-a11y-settings
+paul        3014    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-color
+paul        3015    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-datetime
+paul        3016    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-housekeeping
+paul        3018    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-keyboard
+paul        3024    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-media-keys
+paul        3025    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-power
+paul        3027    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-print-notifications
+paul        3029    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-rfkill
+paul        3030    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-screensaver-proxy
+paul        3035    2838  0 13:19 ?        00:00:05 /usr/bin/gnome-software --gapplication-service
+paul        3037    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-sharing
+paul        3042    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-smartcard
+paul        3048    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-sound
+paul        3054    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-usb-protection
+paul        3057    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-wacom
+paul        3058    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-xsettings
+paul        3059    2838  0 13:19 ?        00:00:00 /usr/libexec/evolution-data-server/evolution-alarm-notify
+paul        3064    2838  0 13:19 ?        00:00:00 /usr/bin/kalendarac
+paul        3070    2838  0 13:19 ?        00:00:00 /usr/libexec/gsd-disk-utility-notify
+paul        3088    2838  0 13:19 ?        00:00:00 /usr/bin/kdeconnectd
+paul        3168    1155  0 13:19 ?        00:00:00 /usr/bin/gjs -m /usr/share/gnome-shell/org.gnome.ScreenSaver
+paul        3172    1155  0 13:19 ?        00:00:00 /usr/libexec/gsd-printer
+paul        3207    3012  0 13:19 ?        00:00:00 /usr/libexec/ibus-memconf
+paul        3208    3012  0 13:19 ?        00:00:06 /usr/libexec/ibus-extension-gtk3
+paul        3214    1155  0 13:19 ?        00:00:00 /usr/libexec/ibus-x11 --kill-daemon
+paul        3216    1155  0 13:19 ?        00:00:00 /usr/libexec/ibus-portal
+paul        3218    1155  0 13:19 ?        00:00:00 /usr/libexec/localsearch-3
+paul        3219    1155  0 13:19 ?        00:00:00 /usr/libexec/xdg-desktop-portal-gnome
+paul        3241    1155  0 13:19 ?        00:00:00 /usr/libexec/gvfs-udisks2-volume-monitor
+paul        3251    1155  0 13:19 ?        00:00:00 /usr/libexec/gvfs-mtp-volume-monitor
+paul        3259    1155  0 13:19 ?        00:00:00 /usr/libexec/gvfs-gphoto2-volume-monitor
+paul        3265    1155  0 13:20 ?        00:00:00 /usr/libexec/gvfs-goa-volume-monitor
+paul        3271    1155  0 13:20 ?        00:00:00 /usr/libexec/goa-daemon
+paul        3280    1155  0 13:20 ?        00:00:00 /usr/libexec/goa-identity-service
+paul        3287    1155  0 13:20 ?        00:00:00 /usr/libexec/gvfs-afc-volume-monitor
+paul        3303    3012  0 13:20 ?        00:00:02 /usr/libexec/ibus-engine-simple
+paul        3372    1155  0 13:20 ?        00:00:00 /usr/libexec/xdg-desktop-portal-gtk
+paul        3441    1155  0 13:20 ?        00:00:00 /usr/libexec/gvfsd-metadata
+paul        3453    1155  0 13:20 ?        00:00:00 /usr/libexec/evolution-calendar-factory
+paul        3495    1155  0 13:20 ?        00:00:00 /usr/libexec/evolution-addressbook-factory
+paul        4798    1155  0 13:26 ?        00:00:09 /usr/libexec/gnome-terminal-server
+paul        4810    4798  0 13:26 pts/0    00:00:00 bash
+paul        8614    1155  0 13:29 ?        00:00:01 /usr/bin/speech-dispatcher -s -t 0
+paul        8656    8614  0 13:29 ?        00:00:00 [sd_espeak-ng-mb] <defunct>
+paul        8709    8614  0 13:29 ?        00:00:00 /usr/lib/speech-dispatcher-modules/sd_espeak-ng /etc/speech-dispatcher/modules/espeak-ng.conf
+paul        8785    8614  0 13:29 ?        00:00:00 /usr/lib/speech-dispatcher-modules/sd_dummy /etc/speech-dispatcher/modules/dummy.conf
+paul        8799    8614  0 13:29 ?        00:00:00 /usr/lib/speech-dispatcher-modules/sd_espeak-ng /etc/speech-dispatcher/modules/
+paul       10028    1155  0 13:31 ?        00:00:00 adb -L tcp:5037 fork-server server --reply-fd 4
+paul       69578    2814  0 13:53 ?        00:00:00 /usr/libexec/gvfsd-http --spawner :1.22 /org/gtk/gvfs/exec_spaw/0
+paul      108341    1155  3 14:06 ?        00:00:48 /home/paul/.nvm/versions/node/v22.23.0/bin/node /home/paul/.nvm/versions/node/v22.23.0/lib/node_modules/acpx/dist/cli.js __queue-owner
+paul      108416  108341  0 14:06 ?        00:00:00 openclaw
+paul      108458  108416  2 14:06 ?        00:00:37 openclaw-acp
+paul      143553    1155  0 14:19 ?        00:00:05 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpI2JxLw.tmp
+paul      149205    1155  0 14:21 ?        00:00:05 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpitRyQG.tmp
+paul      151724    1155  0 14:22 ?        00:00:04 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpJEsOZV.tmp
+paul      157447    1155  1 14:24 ?        00:00:05 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpyM92DV.tmp
+paul      165231    1155  0 14:26 ?        00:00:01 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmp5CKC19.tmp
+paul      168472    1155  4 14:27 ?        00:00:09 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpuRJsnQ.tmp
+paul      172147    1155  4 14:29 pts/0    00:00:05 /home/paul/Workspace/yavsc/src/PostIt.Tests/bin/Debug/net10.0/PostIt.Tests @@ /tmp/tmpxT8nje.tmp
+paul      172435    4810 99 14:31 pts/0    00:00:00 ps -fu paul
--- a/src/PostIt/Directory.Packages.props
+++ b/src/PostIt/Directory.Packages.props
@ -1,33 +1,21 @@
 <Project>
-  <Import
-    Project="$([MSBuild]::GetPathOfFileAbove('Directory.Packages.props', '$(MSBuildThisFileDirectory)../'))" />
+  <!-- Pull in shared package versions from the repository root. -->
+  <Import Project="$([MSBuild]::GetPathOfFileAbove('Directory.Packages.props', '$(MSBuildThisFileDirectory)../'))" />
  <!-- PostIt-product-specific versions -->
-  <!-- https://learn.microsoft.com/en-us/nuget/consume-packages/central-package-management -->
-    <PropertyGroup>
-        <ManagePackageVersionsCentrally>true</ManagePackageVersionsCentrally>
-        <AvaloniaVersionBase>12.1.1</AvaloniaVersionBase>
-    </PropertyGroup>
-    <ItemGroup>
-        <PackageVersion Include="Avalonia" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Themes.Fluent" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Desktop" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Browser" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Android" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Headless" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Headless.Xunit" Version="$(AvaloniaVersionBase)" />
-        <PackageVersion Include="Avalonia.Fonts.Inter" Version="$(AvaloniaVersionBase)" />
-
-        <PackageVersion Include="Material.Avalonia" Version="3.19.0" />
-        <PackageVersion Include="AvaloniaUI.DiagnosticsSupport" Version="2.2.3" />
-        <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
-
-        <PackageVersion Include="Xamarin.AndroidX.Browser" Version="1.10.0.1" />
-        <PackageVersion Include="Xamarin.AndroidX.Core.SplashScreen" Version="1.2.0" />
-        <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Runtime" Version="2.10.0.1" />
-        <PackageVersion Include="Xamarin.AndroidX.Lifecycle.Common" Version="2.10.0.1" />
-        <PackageVersion Include="Xamarin.UITest" Version="4.4.2" />
-
-        <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.11" />
-
-    </ItemGroup>
+  <ItemGroup>
+    <PackageVersion Include="Avalonia" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.Android" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.AvaloniaEdit" Version="12.0.0" />
+    <PackageVersion Include="Avalonia.Browser" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.Desktop" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.Fonts.Inter" Version="12.0.4" />
+    <PackageVersion Include="Avalonia.Themes.Fluent" Version="12.0.4" />
+    <PackageVersion Include="AvaloniaUI.DiagnosticsSupport" Version="2.2.2" />
+    <PackageVersion Include="CommunityToolkit.Mvvm" Version="8.4.2" />
+    <PackageVersion Include="Material.Avalonia" Version="3.17.0" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.9" />
+    <PackageVersion Include="Microsoft.Maui.Essentials" Version="10.0.90" />
+    <PackageVersion Include="Xamarin.AndroidX.Browser" Version="1.8.0.11" />
+    <PackageVersion Include="Xamarin.AndroidX.Core.SplashScreen" Version="1.2.0" />
+  </ItemGroup>
 </Project>
--- a/src/PostIt/Makefile
+++ b/src/PostIt/Makefile
@ -1,178 +0,0 @@
-
-# Cibles pour installer PostIt.Android en Debug sur l'AVD qemu.
-#
-# Usage typique :
-#   make qemu            # lance l'AVD, attend le boot, build l'APK, l'installe
-#   make android-install # (re)build l'APK et l'installe (AVD doit tourner)
-#   make android-build   # build l'APK seul (sans install)
-#   make qemu-run        # démarre l'AVD en background
-#   make qemu-stop       # arrête l'émulateur
-#   make qemu-wait-boot  # attend que l'AVD ait fini de booter
-#
-# Variables surchargeables (make VAR=valeur) :
-#   AVD_NAME        default: postit_test_avd
-#                    (l'AVD doit être listé par `avdmanager list avd`)
-#   ADB_SERIAL      default: emulator-5554
-#                    (port standard du premier émulateur lancé)
-#   ANDROID_HOME    default: /opt/android-sdk
-#                    (le SDK Android local; doit contenir
-#                    emulator/emulator et platform-tools/adb)
-#   POSTIT_RID      default: android-x64
-#                    (doit matcher l'ABI de l'AVD; `avdmanager list avd`
-#                    affiche la ligne Tag/ABI)
-#   EMU_HEADLESS    default: 0
-#                    (1 = lancer l'émulateur sans fenêtre, pour scripter)
-#   CONFIG          surcharge la variable CONFIG globale (Debug par
-#                    défaut dans ce Makefile). Passer à Release pour
-#                    un APK optimisé et signé release.
-#   LOGCAT_LINES    default: 200
-#                    (nombre de lignes dumpées par `make qemu-logcat`)
-#   LOGCAT_FOLLOW   default: 0
-#                    (1 = stream live via `make logcat`,
-#                    sinon dump one-shot des N dernières lignes)
-#   LOGCAT_BOOT_WAIT default: 30
-#                    (secondes d'attente entre le clear du buffer,
-#                    le `am start`, et le dump final dans
-#                    `make qemu-logcat-boot`)
-AVD_NAME ?= postit_test_avd
-ADB_SERIAL ?= emulator-5554
-ANDROID_HOME ?= /opt/android-sdk
-POSTIT_RID ?= android-x64
-EMU_HEADLESS ?= 0
-LOGCAT_LINES ?= 600
-LOGCAT_FOLLOW ?= 0
-LOGCAT_BOOT_WAIT ?= 30
-
-ANDROID_PACKAGE_NAME = fr.pschneider.postit
-POSTIT_ANDROID_CSPROJ := PostIt.Android/PostIt.Android.csproj
-POSTIT_APK_DIR := PostIt.Android/bin/$(CONFIG)/net10.0-android/$(POSTIT_RID)
-POSTIT_APK := $(POSTIT_APK_DIR)/$(ANDROID_PACKAGE_NAME)-Signed.apk
-
-clean: clean-PostIt clean-PostIt.Android clean-PostIt.Desktop
-
-clean-%:
-	rm -rf $*/obj $*/bin
-
-qemu-run:
-	@echo "  Starting AVD $(AVD_NAME) on $(ADB_SERIAL)..."
-	@mkdir -p /tmp/yavsc-emu
-	@EMU_ARGS=""; \
-	if [ "$(EMU_HEADLESS)" = "1" ]; then EMU_ARGS="-no-window -no-audio"; fi; \
-	$(ANDROID_HOME)/emulator/emulator -avd $(AVD_NAME) $$EMU_ARGS \
-	    >/tmp/yavsc-emu/$(AVD_NAME).log 2>&1 & \
-	echo "  ✅ Started emulator PID: $$!"
-
-qemu-stop:
-	adb -s $(ADB_SERIAL) emu kill
-	echo "  ✅ Stopped emulator"
-
-qemu-wait-boot:
-	@echo "  Waiting for $(ADB_SERIAL) to finish booting..."
-	adb -s $(ADB_SERIAL) wait-for-device
-	@for i in $$(seq 1 180); do \
-	    BOOTED=$$(adb -s $(ADB_SERIAL) shell getprop sys.boot_completed 2>/dev/null | tr -d '\r\n'); \
-	    if [ "$$BOOTED" = "1" ]; then \
-	        echo "  ✓ booted in $${i}s"; \
-	        exit 0; \
-	    fi; \
-	    sleep 1; \
-	done; \
-	echo "  👿  ERROR: device did not boot within 180s." >&2; \
-	echo "  Logs: /tmp/yavsc-emu/$(AVD_NAME).log" >&2; \
-	exit 1
-
-android-build:
-	# EmbedAssembliesIntoApk=true: without this, the Debug APK ships
-	# without the managed assemblies in it (they are pushed at runtime
-	# via `adb push`, "Fast Deployment"). On the qemu emulator, the
-	# runtime cannot find them in `files/.__override__/<rid>/` and
-	# aborts at startup with "No assemblies found in '.__override__'"
-	# (monodroid-glue.cc:757, SIGABRT). Forcing this property on
-	# packages the .dlls into the APK as `assemblies/<rid>/` so the
-	# runtime reads them directly.
-	#
-	# The Xamarin.Android SDK property is `EmbedAssembliesIntoApk`,
-	# not `AndroidEnableFastDeployment` (which exists in older
-	# templates but is a no-op in the .NET 10 SDK).
-	dotnet build $(POSTIT_ANDROID_CSPROJ) \
-	    -c $(CONFIG) \
-	    -p:RuntimeIdentifier=$(POSTIT_RID) \
-	    -p:EmbedAssembliesIntoApk=true \
-	    --nologo
-	@if [ ! -f "$(POSTIT_APK)" ]; then \
-	    echo "  APK not found at $(POSTIT_APK)." >&2; \
-	    echo "  Files in $(POSTIT_APK_DIR):" >&2; \
-	    ls -la "$(POSTIT_APK_DIR)" 2>/dev/null || echo "  (directory does not exist)" >&2; \
-	    exit 1; \
-	fi
-
-
-android-install: android-build
-	@echo "  Installing $(POSTIT_APK) on $(ADB_SERIAL)..."
-	adb -s $(ADB_SERIAL) install -r "$(POSTIT_APK)" -r
-	@echo "  ✅ PostIt.Android installed on $(ADB_SERIAL)"
-
-qemu-uninstall:
-	adb -s $(ADB_SERIAL) uninstall $(ANDROID_PACKAGE_NAME)
-
-# Dump recent logcat output for the running PostIt.Android process.
-# By default, prints the last $(LOGCAT_LINES) lines (one-shot, with
-# `-d`). Set LOGCAT_FOLLOW=1 to follow the stream live instead.
-# Filtering is by PID (pidof $(ANDROID_PACKAGE_NAME)), not by tag,
-# because Mono/Xamarin can emit logs under several tags
-# (mono, PostIt.Android, Avalonia.Android) and tag-based filtering
-# would miss the ones not matching. PID-based filtering is exact.
-# If the app is not running, pidof returns empty and logcat exits
-# silently with no output; that is the expected behaviour for
-# "no logs yet".
-logcat:
-	@PID=$$(adb -s $(ADB_SERIAL) shell pidof $(ANDROID_PACKAGE_NAME) 2>/dev/null | tr -d '\r\n'); \
-	if [ -z "$$PID" ]; then \
-	    echo "  $(ANDROID_PACKAGE_NAME) is not running on $(ADB_SERIAL)."; \
-	    echo "  Start the app first (am start -n $(ANDROID_PACKAGE_NAME)/PostIt.Android.PostItMainActivity)"; \
-	    exit 1; \
-	fi; \
-	echo "  Following PID $$PID (LOGCAT_FOLLOW=$(LOGCAT_FOLLOW), LOGCAT_LINES=$(LOGCAT_LINES))"; \
-	if [ "$(LOGCAT_FOLLOW)" = "1" ]; then \
-	    adb -s $(ADB_SERIAL) logcat -v time --pid=$$PID $(ANDROID_PACKAGE_NAME); \
-	else \
-	    adb -s $(ADB_SERIAL) logcat -d -v time -t $(LOGCAT_LINES) --pid=$$PID $(ANDROID_PACKAGE_NAME); \
-	fi
-
-# Clear logcat, launch PostIt.Android, then dump everything that was
-# emitted during the startup window. Targets the "démarrage KO" case
-# where the process starts but Avalonia never renders a frame — the
-# logcat trace from process start to first frame is what diagnoses it.
-#
-# Override LOGCAT_BOOT_WAIT to extend the post-launch wait
-# (default 15s; raise to 30+ if the device is slow to boot Avalonia).
-LOGCAT_BOOT_WAIT ?= 15
-
-
-android-start:
-	@echo "  Clearing logcat buffer..."
-	adb -s $(ADB_SERIAL) logcat -c
-	@echo "  Launching $(ANDROID_PACKAGE_NAME)..."
-	adb -s $(ADB_SERIAL) shell am start \
-	    -n $(ANDROID_PACKAGE_NAME)/PostIt.Android.PostItMainActivity
-	@echo "  ✅ $(ANDROID_PACKAGE_NAME) started on $(ADB_SERIAL)"
-
-qemu-logcat-boot: android-start
-	@echo "  Waiting $(LOGCAT_BOOT_WAIT)s for the app to start rendering..."
-	@sleep $(LOGCAT_BOOT_WAIT)
-
-	@echo "  Dumping logcat (PostIt PID + system buffer):"
-	@PID=$$(adb -s $(ADB_SERIAL) shell pidof $(ANDROID_PACKAGE_NAME) 2>/dev/null | tr -d '\r\n'); \
-	if [ -n "$$PID" ]; then \
-	    echo " ✅ (PID $$PID at dump time)"; \
-			sleep 10; \
-	    adb -s $(ADB_SERIAL) logcat -d -v time -t $(LOGCAT_LINES) --pid=$$PID; \
-	else \
-	    echo " 👿 (PostIt process not running at dump time — dumping last $(LOGCAT_LINES) lines unfiltered)"; \
-	    adb -s $(ADB_SERIAL) logcat -d -v time -t $(LOGCAT_LINES); \
-			exit 1; \
-	fi
-
-qemu: qemu-run qemu-wait-boot android-install
-
-.PHONY: clean qemu qemu-run qemu-stop qemu-wait-boot android-build android-install logcat qemu-logcat-boot
--- a/src/PostIt/PostIt.Android/Application.cs
+++ b/src/PostIt/PostIt.Android/Application.cs
@ -2,12 +2,6 @@
 using Android.Runtime;
 using Avalonia;
 using Avalonia.Android;
-using System.Linq;
-using System.Threading.Tasks;
-using Microsoft.Extensions.DependencyInjection;
-using Avalonia.Controls;
-using Avalonia.Styling;
-using Yavsc.Api.Client;

 namespace PostIt.Android
 {
--- a/src/PostIt/PostIt.Android/MainActivity.cs
+++ b/src/PostIt/PostIt.Android/MainActivity.cs
@ -1,11 +1,8 @@
-
 using Android.App;
-using Android.Content;
 using Android.Content.PM;
-using AndroidX.Core.Provider;
-using AndroidX.Emoji2.Text;
+using Android.Content;
+using Avalonia;
 using Avalonia.Android;
-using PostIt.Droid.Services;

 namespace PostIt.Android;

@ -15,28 +12,26 @@ namespace PostIt.Android;
    Theme = "@style/MyTheme.NoActionBar",
    Icon = "@drawable/icon",
    MainLauncher = true,
+    LaunchMode = LaunchMode.SingleTask,
    ConfigurationChanges = ConfigChanges.Orientation | ConfigChanges.ScreenSize | ConfigChanges.UiMode)]
 public class MainActivity : AvaloniaMainActivity
 {
    /// <summary>
-    /// The current MainActivity instance.
+    /// Strongly-typed handle to the current MainActivity instance, set in
+    /// <see cref="OnCreate"/> and consumed by platform services such as
+    /// <see cref="Services.AndroidSystemBrowser"/> which need to launch
+    /// Chrome Custom Tabs.
    /// </summary>
    public static MainActivity? Current { get; private set; }

    protected override void OnCreate(global::Android.OS.Bundle? savedInstanceState)
    {
-        FontRequest fontRequest = new FontRequest(
-                "com.google.android.gms.fonts",
-                "com.google.android.gms",
-                "Noto Color Emoji Compat",
-                Yavsc.Resource.Array.com_google_android_gms_fonts_certs); //com_google_android_gms_fonts_certs
-        EmojiCompat.Config config = new FontRequestEmojiCompatConfig(this, fontRequest);
-        EmojiCompat.Init(config);
-        PlatformBootstrap.InitPlatform();
        base.OnCreate(savedInstanceState);
+        PlatformBootstrap.EnsureInitialized();
        Current = this;
    }
-     /// <summary>
+
+    /// <summary>
    /// Receives the deep-link Intent fired by the system browser after the
    /// user completes the OIDC login on https://yavsc.pschneider.fr. The
    /// Intent URI has the shape <c>android://postit-signin?code=...&amp;state=...</c>.
@ -48,13 +43,7 @@ public class MainActivity : AvaloniaMainActivity
    protected override void OnNewIntent(Intent? intent)
    {
        base.OnNewIntent(intent);
-
-         var url = intent?.DataString;
-        if (!string.IsNullOrEmpty(url) && url.StartsWith("postit://callback"))
-        {
-            OidcCallbackManager.SetResult(url);
-        }
-
+        if (intent is not null) AndroidOidcCallbackSink.Handle(intent);
    }

    internal static class AndroidOidcCallbackSink
@ -74,4 +63,4 @@ public class MainActivity : AvaloniaMainActivity
            tcs?.TrySetResult(intent?.Data?.ToString() ?? string.Empty);
        }
    }
-}
+}
--- a/src/PostIt/PostIt.Android/PlatformBootstrap.cs
+++ b/src/PostIt/PostIt.Android/PlatformBootstrap.cs
@ -12,9 +12,14 @@ namespace PostIt.Android;
 /// </summary>
 internal static class PlatformBootstrap
 {
-    internal static void InitPlatform()
-    {
+    private static int _initialized;

+    internal static void EnsureInitialized()
+    {
+        if (System.Threading.Interlocked.Exchange(ref _initialized, 1) != 0)
+            return;
+
+        Platform.DefaultRedirectUri = ViewModels.Settings.AndroidRedirectUri;
        Platform.CreateBrowser = () =>
        {
            var activity = MainActivity.Current;
--- a/src/PostIt/PostIt.Android/PostIt.Android.csproj
+++ b/src/PostIt/PostIt.Android/PostIt.Android.csproj
@ -2,16 +2,19 @@
  <PropertyGroup>
    <OutputType>Exe</OutputType>
    <TargetFramework>net10.0-android</TargetFramework>
-    <SupportedOSPlatformVersion>23</SupportedOSPlatformVersion>
+    <!-- FORCE LES ARCHITECTURES ANDROID VALIDES -->
+    <RuntimeIdentifiers>android-arm64;android-x64</RuntimeIdentifiers>
+    <SupportedOSPlatformVersion>23.0.0</SupportedOSPlatformVersion>
    <Nullable>enable</Nullable>
-    <ApplicationId>fr.pschneider.postit</ApplicationId>
+    <ApplicationId>com.CompanyName.PostIt</ApplicationId>
    <ApplicationVersion>1</ApplicationVersion>
    <ApplicationDisplayVersion>1.0</ApplicationDisplayVersion>
    <AndroidPackageFormat>apk</AndroidPackageFormat>
    <AndroidEnableProfiledAot>false</AndroidEnableProfiledAot>
+    <RuntimeIdentifiers Condition="$([MSBuild]::GetTargetPlatformIdentifier('$(TargetFramework)')) == 'android'">android-arm;android-arm64;android-x86;android-x64</RuntimeIdentifiers>
    <AssemblyVersion>1.1.0.0</AssemblyVersion>
    <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-beta.1+183.Branch.release-1.0.8-rc8.Sha.6cff3db32ecf72c0d2d430b7002fa7816a34e070</InformationalVersion>
+    <InformationalVersion>1.1.0-beta.1+1.Branch.release-1.0.8-rc1.Sha.1167169aa89e1bf25290e9a152d27b357a500ab3</InformationalVersion>
    <Version>1.1.0-beta.1</Version>
  </PropertyGroup>
  <ItemGroup>
@ -27,4 +30,7 @@
  <ItemGroup>
    <ProjectReference Include="..\PostIt\PostIt.csproj" />
  </ItemGroup>
-</Project>
+  <ItemGroup>
+    <PackageReference Include="Microsoft.Maui.Essentials" />
+  </ItemGroup>
+</Project>
--- a/src/PostIt/PostIt.Android/Properties/AndroidManifest.xml
+++ b/src/PostIt/PostIt.Android/Properties/AndroidManifest.xml
@ -1,6 +1,32 @@
-<?xml version="1.0" encoding="utf-8"?>
+<?xml version="1.0" encoding="utf-8"?>
 <manifest xmlns:android="http://schemas.android.com/apk/res/android" android:installLocation="auto">
 	<uses-permission android:name="android.permission.INTERNET" />
-		<application android:label="PostIt" android:icon="@drawable/Icon">
+	<application android:label="PostIt" android:icon="@drawable/Icon">
+
+		<!--
+			Deep-link receiver for the OIDC Authorization Code + PKCE flow.
+			After the user authenticates in the system browser, the OP
+			redirects to android://postit-signin?... and Android forwards
+			the Intent to the MainActivity (configured SingleTask so the
+			existing instance receives OnNewIntent rather than spawning a
+			new one).
+
+			The host value (postit-signin) MUST match the
+			AndroidRedirectUri constant in PostIt/Settings/Settings.cs and
+			the corresponding RedirectUri registered for the 'postit'
+			client in IdentityServer (Yavsc.Org ConfigurationDb).
+		-->
+		<activity-alias
+			android:name="PostIt.Android.OidcCallbackActivity"
+			android:targetActivity="PostIt.Android.PostItMainActivity"
+			android:exported="true"
+			android:launchMode="singleTask">
+			<intent-filter>
+				<action android:name="android.intent.action.VIEW" />
+				<category android:name="android.intent.category.DEFAULT" />
+				<category android:name="android.intent.category.BROWSABLE" />
+				<data android:scheme="android" android:host="postit-signin" />
+			</intent-filter>
+		</activity-alias>
 	</application>
-</manifest>
+</manifest>
--- a/src/PostIt/PostIt.Android/Resources/values/font_certs.xml
+++ b/src/PostIt/PostIt.Android/Resources/values/font_certs.xml
@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<resources>
-    <array name="com_google_android_gms_fonts_certs">
-        <item>@array/com_google_android_gms_fonts_certs_dev</item>
-        <item>@array/com_google_android_gms_fonts_certs_prod</item>
-    </array>
-    <string-array name="com_google_android_gms_fonts_certs_dev">
-        <item>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</item>
-    </string-array>
-    <string-array name="com_google_android_gms_fonts_certs_prod">
-        <item>MIIEQzCCAyugAwIBAgIJAMLgh0ZgXpYOMA0GCSqGSIb3DQEBBQUAMHQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRQwEgYDVQQKEwtHb29nbGUgSW5jLjEQMA4GA1UECxMHQW5kcm9pZDEQMA4GA1UEAxMHQW5kcm9pZDAeFw0wODA4MjEyMzEzMzRaFw0zNjAxMDcyMzEzMzRaMHQxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRQwEgYDVQQKEwtHb29nbGUgSW5jLjEQMA4GA1UECxMHQW5kcm9pZDEQMA4GA1UEAxMHQW5kcm9pZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKKvSkUIXm+t9M8rXj2V</item>
-    </string-array>
-</resources>
--- a/src/PostIt/PostIt.Android/Services/AndroidSystemBrowser.cs
+++ b/src/PostIt/PostIt.Android/Services/AndroidSystemBrowser.cs
@ -1,9 +1,9 @@
 using System;
 using System.Threading.Tasks;
 using Android.App;
+using Android.Content;
 using AndroidX.Browser.CustomTabs;
 using IdentityModel.OidcClient.Browser;
-using PostIt.Droid.Services;

 namespace PostIt.Android.Services;

@ -36,19 +36,14 @@ public sealed class AndroidSystemBrowser : IBrowser
            };
        }

-        // 1. Enregistrez la tâche avant de lancer le Custom Tab
-        var callbackTask = OidcCallbackManager.RegisterCallback(cancellationToken);
-
-        // 2. LANCEZ VOTRE CUSTOM TAB ICI (via AndroidX.Browser.CustomTabs)
-        // ... code pour ouvrir l'URL d'authentification ...
-
-
        var uri = global::Android.Net.Uri.Parse(options.StartUrl)!;

+        var callbackTask = MainActivity.AndroidOidcCallbackSink.AwaitNextCallbackAsync();
+
        var tabsIntent = new CustomTabsIntent.Builder()
-            .SetShowTitle(true)!
+            .SetShowTitle(true)
            .Build();
-        tabsIntent!.LaunchUrl(_activity, uri);
+        tabsIntent.LaunchUrl(_activity, uri);

        string responseUri;
        try
@ -85,4 +80,4 @@ public sealed class AndroidSystemBrowser : IBrowser
            Response = responseUri
        };
    }
-}
+}
--- a/src/PostIt/PostIt.Android/Services/ContactService.Mobile.cs
+++ b/src/PostIt/PostIt.Android/Services/ContactService.Mobile.cs
@ -0,0 +1,84 @@
+#if ANDROID || IOS
+using System;
+using System.Collections.Generic;
+using System.Threading;
+using System.Threading.Tasks;
+using Microsoft.Maui.ApplicationModel.Communication;
+using Microsoft.Maui.ApplicationModel;
+using Microsoft.Maui.Devices;
+using PostIt.Services;
+using System.Linq;
+
+namespace PostIt.Android.Services;
+
+/// <summary>
+/// Mobile implementation backed by MAUI Essentials
+/// <c>Contacts.Default</c>.
+///
+/// <para>Compiled only for ANDROID and IOS. On desktop targets,
+/// see <c>ContactService.Desktop.cs</c> (the stub that wins at
+/// compile time).</para>
+///
+/// <para>Note: at runtime, this class throws
+/// <c>NotImplementedInReferenceAssemblyException</c> unless
+/// the host application project also references the
+/// platform-specific Microsoft.Maui.Essentials implementation
+/// (typically <c>PostIt.Android</c>). On iOS the same is
+/// required via <c>PostIt.iOS</c>. On desktop the stub is used
+/// and this file is excluded.</para>
+/// </summary>
+public sealed class ContactService : IContactService
+{
+    public async Task<IReadOnlyList<ContactDto>> GetDeviceContactsAsync(CancellationToken ct = default)
+    {
+        if (DeviceInfo.Current.Platform == DevicePlatform.Unknown)
+            return Array.Empty<ContactDto>();
+
+        try
+        {
+            var status = await Permissions.RequestAsync<Permissions.ContactsRead>();
+            if (status != PermissionStatus.Granted)
+                return Array.Empty<ContactDto>();
+
+            var contacts = await Contacts.Default.GetAllAsync();
+            if (contacts is null) return Array.Empty<ContactDto>();
+
+            // Carry the per-contact email list as-is. A real
+            // device contact can carry several addresses (home /
+            // work / other); the UI use case ("invite / add to a
+            // circle") can then decide which address to use, or
+            // let the user pick. The platform-neutral ContactDto
+            // shape is intentionally richer than the Yavsc
+            // directory's single-Email shape — the two flows
+            // answer different questions.
+            var result = new List<ContactDto>(contacts.Count());
+            foreach (var c in contacts)
+            {
+                var emails = ExtractEmails(c.Emails);
+                result.Add(new ContactDto(
+                    c.Id,
+                    c.DisplayName ?? string.Empty,
+                    emails));
+            }
+            return result;
+        }
+        catch (Exception ex)
+        {
+            System.Diagnostics.Debug.WriteLine($"ContactService: {ex.Message}");
+            return Array.Empty<ContactDto>();
+        }
+    }
+
+    private static IReadOnlyList<string> ExtractEmails(IEnumerable<ContactEmail>? emails)
+    {
+        if (emails is null) return Array.Empty<string>();
+        var list = new List<string>();
+        foreach (var e in emails)
+        {
+            if (!string.IsNullOrEmpty(e.EmailAddress))
+                list.Add(e.EmailAddress);
+        }
+        return list;
+    }
+}
+#endif
--- a/src/PostIt/PostIt.Android/Services/OidcCallbackManager.cs
+++ b/src/PostIt/PostIt.Android/Services/OidcCallbackManager.cs
@ -1,21 +0,0 @@
-using System.Threading;
-using System.Threading.Tasks;
-
-namespace PostIt.Droid.Services;
-
-public static class OidcCallbackManager
-{
-    private static TaskCompletionSource<string>? _tcs;
-
-    public static Task<string> RegisterCallback(CancellationToken cancellationToken)
-    {
-        _tcs = new TaskCompletionSource<string>();
-        cancellationToken.Register(() => _tcs.TrySetCanceled());
-        return _tcs.Task;
-    }
-
-    public static void SetResult(string url)
-    {
-        _tcs?.TrySetResult(url);
-    }
-}
--- a/src/PostIt/PostIt.Android/WebAuthenticationCallbackActivity.cs
+++ b/src/PostIt/PostIt.Android/WebAuthenticationCallbackActivity.cs
@ -1,35 +0,0 @@
-using Android.App;
-using Android.Content;
-using Android.Content.PM;
-using Android.OS;
-using PostIt.Droid.Services;
-
-namespace PostIt.Android;
-
-[Activity(NoHistory = true, LaunchMode = LaunchMode.SingleTop, Exported = true)]
-[IntentFilter(new[] { Intent.ActionView },
-    Categories = new[] { Intent.CategoryDefault, Intent.CategoryBrowsable },
-    DataScheme = "postit", // Remplacez par votre schéma personnalisé (ex: yavsc ou postit)
-    DataHost = "callback")] // Correspond à postit://callback
-public class WebAuthenticationCallbackActivity : Activity
-{
-    protected override void OnCreate(Bundle? savedInstanceState)
-    {
-        base.OnCreate(savedInstanceState);
-
-        // Capturer l'URL de redirection OIDC
-        var url = Intent?.DataString;
-
-        if (!string.IsNullOrEmpty(url))
-        {
-            // Transmettre l'URL au gestionnaire partagé pour compléter la Task
-            OidcCallbackManager.SetResult(url);
-        }
-
-        // Fermer cette activité transparente et ramener l'application au premier plan
-        var intent = new Intent(this, typeof(MainActivity));
-        intent.AddFlags(ActivityFlags.ClearTop | ActivityFlags.SingleTop);
-        StartActivity(intent);
-        Finish();
-    }
-}
--- a/src/PostIt/PostIt.Browser/PostIt.Browser.csproj
+++ b/src/PostIt/PostIt.Browser/PostIt.Browser.csproj
@ -6,7 +6,7 @@
    <Nullable>enable</Nullable>
    <AssemblyVersion>1.1.0.0</AssemblyVersion>
    <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-beta.1+183.Branch.release-1.0.8-rc8.Sha.6cff3db32ecf72c0d2d430b7002fa7816a34e070</InformationalVersion>
+    <InformationalVersion>1.1.0-beta.1+1.Branch.release-1.0.8-rc1.Sha.1167169aa89e1bf25290e9a152d27b357a500ab3</InformationalVersion>
    <Version>1.1.0-beta.1</Version>
  </PropertyGroup>
  <ItemGroup>
@ -15,4 +15,7 @@
  <ItemGroup>
    <ProjectReference Include="..\PostIt\PostIt.csproj" />
  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="GitVersion.MsBuild" />
+  </ItemGroup>
 </Project>
--- a/src/PostIt/PostIt.Browser/Program.cs
+++ b/src/PostIt/PostIt.Browser/Program.cs
@ -1,4 +1,5 @@
-using System.Threading.Tasks;
+using System.Runtime.Versioning;
+using System.Threading.Tasks;
 using Avalonia;
 using Avalonia.Browser;
 using PostIt;
@ -14,4 +15,4 @@ internal sealed partial class Program

    public static AppBuilder BuildAvaloniaApp()
        => AppBuilder.Configure<App>();
-}
+}
--- a/src/PostIt/PostIt.Desktop/PlatformBootstrap.cs
+++ b/src/PostIt/PostIt.Desktop/PlatformBootstrap.cs
@ -0,0 +1,30 @@
+using IdentityModel.OidcClient.Browser;
+using PostIt.Services;
+
+namespace PostIt.Desktop;
+
+/// <summary>
+/// One-shot platform bootstrap. Called from <c>Program.Main</c> so that
+/// the shared OIDC login path sees a working <c>IBrowser</c> — the
+/// custom-scheme browser that hands the OIDC callback off to the
+/// running instance through the named pipe. Desktop builds do NOT use
+/// a loopback HTTP listener: the <c>postit://</c> scheme is registered
+/// with the OS at install time and the browser is whatever the user
+/// has configured to open it.
+/// </summary>
+internal static class PlatformBootstrap
+{
+    private static int _initialized;
+
+    internal static void EnsureInitialized()
+    {
+        if (System.Threading.Interlocked.Exchange(ref _initialized, 1) != 0)
+            return;
+
+        // Use the custom-scheme redirect on Desktop. Loopback is only
+        // a fallback for platforms that cannot register postit://
+        // (see Settings.DefaultLoopbackRedirectUri for that path).
+        Platform.DefaultRedirectUri = AuthenticationSettings.DefaultDesktopRedirectUri;
+        Platform.CustomScheme = "postit";
+    }
+}
--- a/src/PostIt/PostIt.Desktop/PostIt.Desktop.csproj
+++ b/src/PostIt/PostIt.Desktop/PostIt.Desktop.csproj
@ -7,7 +7,7 @@
    <Nullable>enable</Nullable>
    <AssemblyVersion>1.1.0.0</AssemblyVersion>
    <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-beta.1+183.Branch.release-1.0.8-rc8.Sha.6cff3db32ecf72c0d2d430b7002fa7816a34e070</InformationalVersion>
+    <InformationalVersion>1.1.0-beta.1+1.Branch.release-1.0.8-rc1.Sha.1167169aa89e1bf25290e9a152d27b357a500ab3</InformationalVersion>
    <Version>1.1.0-beta.1</Version>
  </PropertyGroup>
  <PropertyGroup>
@ -24,4 +24,7 @@
  <ItemGroup>
    <ProjectReference Include="..\PostIt\PostIt.csproj" />
  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="GitVersion.MsBuild" />
+  </ItemGroup>
 </Project>
--- a/src/PostIt/PostIt.Desktop/Program.cs
+++ b/src/PostIt/PostIt.Desktop/Program.cs
@ -1,4 +1,5 @@
 using System;
+using System.Threading;
 using Avalonia;
 using PostIt.Services;

@ -12,6 +13,8 @@ sealed class Program
    [STAThread]
    public static void Main(string[] args)
    {
+        PlatformBootstrap.EnsureInitialized();
+
        // Short-circuit 2nd-instance launches (OS handing us the
        // postit://callback URL) BEFORE Avalonia spins up a window.
        // If we let Avalonia initialise, the new MainWindow flashes
@ -66,6 +69,9 @@ sealed class Program
    public static AppBuilder BuildAvaloniaApp()
        => AppBuilder.Configure<App>()
            .UsePlatformDetect()
+#if DEBUG
+            .WithDeveloperTools()
+#endif
            .WithInterFont()
            .LogToTrace();
-}
+}
--- a/src/PostIt/PostIt.Tests/AndroidAppLaunchTests.cs
+++ b/src/PostIt/PostIt.Tests/AndroidAppLaunchTests.cs
@ -1,73 +0,0 @@
-using System.Diagnostics;
-using Xamarin.UITest;
-
-namespace PostIt.Tests;
-
-/// <summary>
-/// Smoke test: launches the installed PostIt.Android app on the running
-/// emulator and waits for the first Avalonia frame to render. Reveals the
-/// "démarrage KO" bug — the test fails if Avalonia never draws a frame
-/// within the timeout.
-///
-/// Skip conditions: the package is not installed on the connected device,
-/// or no device is connected via adb.
-/// </summary>
-[Trait("Category", "Platform-Android")]
-public class AndroidAppLaunchTests
-{
-    private const string PackageName = "fr.pschneider.postit";
-
-    private readonly ITestOutputHelper _output;
-
-    public AndroidAppLaunchTests(ITestOutputHelper output)
-    {
-        _output = output;
-    }
-
-    // TODO https://twosixtech.com/blog/integrating-docker-and-adb/
-    [Fact]
-    public void PostIt_starts_and_draws_a_first_frame_on_the_emulator()
-    {
-        if (!IsPackageInstalledOnAnyDevice())
-        {
-            _output.WriteLine($"[skip] {PackageName} not installed on any device");
-            return;
-        }
-
-        _output.WriteLine($"[step] configuring app via InstalledApp({PackageName})");
-        var app = ConfigureApp.Android
-            .InstalledApp(PackageName)
-            .StartApp(Xamarin.UITest.Configuration.AppDataMode.DoNotClear);
-        _output.WriteLine("[step] app.StartApp returned, waiting for first frame");
-
-        app.WaitForElement(
-            e => e.Class("android.view.View"),
-            timeout: TimeSpan.FromSeconds(30));
-        _output.WriteLine("[step] first frame observed");
-    }
-
-    private static bool IsPackageInstalledOnAnyDevice()
-    {
-        try
-        {
-            var startInfo = new ProcessStartInfo("adb", "shell pm list packages")
-            {
-                RedirectStandardOutput = true,
-                RedirectStandardError = true,
-                UseShellExecute = false,
-                CreateNoWindow = true,
-            };
-            using var proc = Process.Start(startInfo);
-            if (proc is null) return false;
-            var stdout = proc.StandardOutput.ReadToEnd();
-            proc.WaitForExit(5000);
-            return stdout
-                .Split('\n', StringSplitOptions.RemoveEmptyEntries)
-                .Any(line => line.Trim().Equals($"package:{PackageName}", StringComparison.Ordinal));
-        }
-        catch
-        {
-            return false;
-        }
-    }
-}
--- a/src/PostIt/PostIt/App.axaml
+++ b/src/PostIt/PostIt/App.axaml
@ -1,15 +1,13 @@
 <Application xmlns="https://github.com/avaloniaui"
             xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
             xmlns:local="using:PostIt"
-             x:Class="PostIt.App"
-             RequestedThemeVariant="Default">
-             <!-- "Default" ThemeVariant follows system theme variant. "Dark" or "Light" are other available options. -->
+             x:Class="PostIt.App">

-    <Application.DataTemplates>
-        <local:ViewLocator />
-    </Application.DataTemplates>
+    <!-- ViewLocator is registered in App.axaml.cs with the real DI container. -->

-     <Application.Styles>
+    <Application.Styles>
        <FluentTheme />
+            <StyleInclude Source="avares://AvaloniaEdit/Themes/Fluent/AvaloniaEdit.xaml" />
+
    </Application.Styles>
 </Application>
--- a/src/PostIt/PostIt/App.axaml.cs
+++ b/src/PostIt/PostIt/App.axaml.cs
@ -1,23 +1,21 @@
 using System;
-using System.Threading;
+using System.Linq;
 using System.Threading.Tasks;
+using Microsoft.Extensions.DependencyInjection;
 using Avalonia;
 using Avalonia.Controls;
 using Avalonia.Controls.ApplicationLifetimes;
 using Avalonia.Markup.Xaml;
 using Avalonia.Styling;
-using Microsoft.Extensions.DependencyInjection;
 using PostIt.Services;
+using Yavsc.Api.Client;
 using PostIt.ViewModels;
 using PostIt.Views;
-using PostIt.Helpers;

 namespace PostIt;

 public partial class App : Application
 {
-    private int _bootStarted;
-
    /// <summary>
    /// DI container the platform entry points hand to ViewModels so
    /// they can resolve the canonical <see cref="Settings"/> singleton
@ -29,8 +27,10 @@ public partial class App : Application
    /// <c>DataValidationErrors.SetErrors</c>.
    /// </summary>
    public IServiceProvider? ServiceProvider { get; private set; }
-
-    public MainView? View { get; private set; }
+    private MainWindow window;
+    public App()
+    {
+    }

    public override void Initialize()
    {
@ -39,81 +39,197 @@ public partial class App : Application

    public override void OnFrameworkInitializationCompleted()
    {
+        // Belt-and-braces 2nd-instance guard. The primary check now
+        // lives in PostIt.Desktop.Program.Main and exits before
+        // Avalonia boots — preventing a flash of the MainWindow on
+        // every postit://callback launch. This block is kept for any
+        // entry point that bypasses Program.Main (PostIt.Browser,
+        // PostIt.Android's process lifecycle, ad-hoc tests that build
+        // App directly) and as defence-in-depth in case the Desktop
+        // build is ever reconfigured to skip the early check.
        if (TryHandOffCustomSchemeUrl()) return;

-        this.ServiceProvider = new ServiceCollection().BuildServices();
+        this.ServiceProvider = BuildServices(new ServiceCollection());
+        AttachServiceProvider(ServiceProvider);
        var settings = ServiceProvider.GetRequiredService<Settings>();
+        var sessionStatus = ServiceProvider.GetRequiredService<SessionStatusViewModel>();
+        var api = ServiceProvider.GetRequiredService<YavscApiClient>();
+
+        DataTemplates.Clear();
+        DataTemplates.Add(new ViewLocator(ServiceProvider));
+
+        // Wire the Settings singleton onto the SettingsPage singleton
+        // once, at composition time. The page is registered as a
+        // singleton (see above) precisely so this binding is stable
+        // for the lifetime of the app: every push to / pop from the
+        // navigation stack finds the same ContentPage with the same
+        // DataContext, and the TwoWay bindings inside the page keep
+        // mutating the same in-memory Settings instance that the rest
+        // of the app reads (OidcClientOptions construction, etc.).
+        ServiceProvider.GetRequiredService<SettingsPage>().DataContext = settings;
+
+        // Settings.DarkMode was previously a dead field: it round-
+        // tripped through the settings file and the SettingsPage
+        // CheckBox, but no consumer ever read it. Wire it here to
+        // Application.RequestedThemeVariant so the toggle takes
+        // effect immediately, and seed the initial theme from the
+        // value Load() just populated (so a dark-mode user lands on
+        // a dark window on first launch, not on a default-light
+        // window that flips after the user touches the toggle).
+        ApplyDarkMode(settings);
+        settings.PropertyChanged += (_, e) =>
+        {
+            if (e.PropertyName == nameof(Settings.DarkMode))
+            {
+                ApplyDarkMode(settings);
+            }
+        };

        if (ApplicationLifetime is IClassicDesktopStyleApplicationLifetime desktop)
        {
-            var window = ServiceProvider.GetRequiredService<MainWindow>();
+            var homeVm = ServiceProvider.GetRequiredService<HomePageViewModel>();
+
+            window = new MainWindow();
+            window.SessionBanner.DataContext = sessionStatus;
+
+            // Build the navigation stack from scratch: HomePage is the
+            // root in both cases. App.BootAsync will push MainPage on
+            // top if the silent refresh succeeds.
            desktop.MainWindow = window;
-            View = window.MainView;
-            this.ConfigureRootView(window.MainView);
+            _ = PushPageAsync(homeVm);

-            ApplyDarkMode(settings);
+            // When the user logs out, route back to HomePage. We
+            // ReplaceAsync the current top so we don't grow the stack
+            // on every logout — otherwise repeated login/logout would
+            // eventually balloon the back history.
+            sessionStatus.LogoutCompleted += () =>
+            {
+                var w = (MainWindow)((IClassicDesktopStyleApplicationLifetime)ApplicationLifetime!).MainWindow!;
+                var nav = w.NavRoot;
+                _ = nav.PopToRootAsync();
+            };
+
+            // When the user signs in interactively (Login button on
+            // the session banner), push MainPage on top of HomePage.
+            sessionStatus.LoginSucceeded += () =>
+            {
+                var w = (MainWindow)((IClassicDesktopStyleApplicationLifetime)ApplicationLifetime!).MainWindow!;
+                _ = PushMainPageAsync();
+            };
+
+            window.Opened += async (_, _) => await BootAsync(this.ServiceProvider, api);
        }
-        else if (ApplicationLifetime is IActivityApplicationLifetime singleViewFactoryApplicationLifetime)
+        else if (ApplicationLifetime is ISingleViewApplicationLifetime singleView)
        {
-            singleViewFactoryApplicationLifetime.MainViewFactory =
-                () =>
-                {
-                    View = ServiceProvider.GetRequiredService<MainView>();
-                    this.ConfigureRootView(View);
-                    ApplyDarkMode(settings);
-                    return View;
-                };
+            singleView.MainView = new MainWindow
+            {
+                DataContext = ServiceProvider.GetRequiredService<HomePageViewModel>()
+            };
        }
-        else if (ApplicationLifetime is ISingleViewApplicationLifetime singleViewPlatform)
-        {
-            singleViewPlatform.MainView = View = ServiceProvider.GetRequiredService<MainView>();
-            ConfigureRootView(View);
-            ApplyDarkMode(settings);
-        }
-
-        base.OnFrameworkInitializationCompleted();
-    }
-
-private void ConfigureRootView(MainView rootView)
-{
-    // Déclencher le Boot une seule fois lors du chargement du contrôle à l'écran.
-    rootView.AttachedToVisualTree += async (_, _) => await BootOnceAsync();
-
-    var sessionStatus = ServiceProvider!.GetRequiredService<SessionStatusViewModel>();
-    sessionStatus.LogoutCompleted += () =>
-    {
-        // Remplacer Window.NavRoot par rootView.NavRoot
-        rootView.NavRoot.PopToRootAsync();
-    };
-
-    sessionStatus.LoginSucceeded += async () =>
-    {
-        await PushMainPageAsync();
-    };
-
-    rootView.SessionBanner.DataContext = sessionStatus;
-}
-
-    private async Task BootOnceAsync()
-    {
-        if (Interlocked.Exchange(ref _bootStarted, 1) == 1)
-        {
-            return;
-        }
-
-        var api = ServiceProvider!.GetRequiredService<YavscApiClient>();
-        await BootAsync(this.ServiceProvider!, api);
    }

    /// <summary>
-    /// Test-only hook: bind a concrete <see cref="MainView"/> so
+    /// Build the DI container the app uses. Pulled out of
+    /// <see cref="OnFrameworkInitializationCompleted"/> so headless
+    /// tests can construct the same container at <c>TestApp</c> boot
+    /// without going through the full Avalonia desktop lifetime
+    /// (which never runs in a unit test). The container returned is
+    /// the exact one production uses — no test-only fakes, no
+    /// trimmed service list — so a test that exercises a VM, page,
+    /// or service resolves through the same wiring the real app
+    /// does, and a green test is a green contract for prod.
+    /// </summary>
+    internal static IServiceProvider BuildServices(ServiceCollection services)
+    {
+        var settings = new Settings();
+        settings.Load();
+
+        var tokenStore = new TokenStore(System.IO.Path.Combine(
+            System.Environment.GetFolderPath(System.Environment.SpecialFolder.ApplicationData),
+            "PostIt", "tokens.json"));
+
+        var api = new YavscApiClient(settings, tokenStore);
+        var client = new BlogApiClient(api, settings.BlogsApiUrl);
+        var circleClient = new CircleApiClient(api, settings.BlogsApiUrl);
+        var blogAclClient = new BlogAclApiClient(api, settings.BlogsApiUrl);
+        var userSearchClient = new UserSearchClient(api, settings.BlogsApiUrl);
+        var contactService = new ContactService();
+        var userDirectory = new UserDirectory(userSearchClient);
+
+
+        // Vues
+        services.AddTransient<MainPage>();
+        // SettingsPage is a singleton: there must be one and only one
+        // instance of the settings UI for the lifetime of the app.
+        // This guarantees that (a) the bindings always reflect the
+        // current in-memory Settings state, (b) the page already has
+        // its DataContext wired up at composition-root time (see
+        // below), and (c) PushPageAsync's anti-empilement guard sees
+        // the same instance across pushes, so a second Settings tap
+        // is a no-op rather than re-pushing the page. Transient would
+        // let the user accumulate stale SettingsPage instances on
+        // the navigation stack, each bound to a fresh
+        // SettingsViewModel and missing any in-flight edits.
+        services.AddSingleton<SettingsPage>();
+        services.AddTransient<HomePage>();
+        services.AddTransient<SignaturePage>();
+        services.AddTransient<CirclesPage>();
+        // Dialogs (modal-light pages): the ViewLocator resolves
+        // them when a caller pushes a PostAclDialogViewModel or
+        // AddCircleMemberDialogViewModel via App.PushPageAsync.
+        // App.PushPageAsync overwrites the page's DataContext with
+        // the caller-built VM, so the parameterless ctor is enough
+        // here — the parametrised ctors stay for direct test wiring.
+        services.AddTransient<PostAclDialog>();
+        services.AddTransient<AddCircleMemberDialog>();
+        // ViewModels
+        services.AddSingleton(settings);
+        services.AddSingleton<YavscApiClient>(api);
+        services.AddSingleton<IYavscApiClient>(api);
+        services.AddSingleton(client);
+        services.AddSingleton(circleClient);
+        services.AddSingleton(blogAclClient);
+        services.AddSingleton(userSearchClient);
+        services.AddSingleton<IContactService>(contactService);
+        services.AddSingleton<IUserDirectory>(userDirectory);
+        services.AddTransient<MainPageViewModel>();
+        services.AddTransient<HomePageViewModel>();
+        services.AddTransient<SignaturePageViewModel>();
+        services.AddTransient<CirclesPageViewModel>();
+
+        // Persistent session banner: one instance for the lifetime of
+        // the app so the same VM survives page navigation.
+        var sessionStatus = new SessionStatusViewModel { Api = api };
+        sessionStatus.Refresh();
+        services.AddSingleton(sessionStatus);
+        services.AddTransient<SessionStatusBanner>();
+
+        return services.BuildServiceProvider();
+    }
+
+    /// <summary>
+    /// Attach a pre-built DI container to this <see cref="App"/>
+    /// instance. Used by headless tests after
+    /// <see cref="BuildServices"/>; in production this happens
+    /// implicitly via <see cref="OnFrameworkInitializationCompleted"/>.
+    /// Idempotent w.r.t. <see cref="Settings.BindToServiceProvider"/>:
+    /// re-binding from a second App boot is a no-op.
+    /// </summary>
+    internal void AttachServiceProvider(IServiceProvider sp)
+    {
+        ServiceProvider = sp;
+        Settings.BindToServiceProvider(sp);
+    }
+
+    /// <summary>
+    /// Test-only hook: bind a concrete <see cref="MainWindow"/> so
    /// command-driven navigation paths (<see cref="PushPage"/>) can
    /// push onto a real <see cref="NavigationPage"/> in headless
    /// fixtures that do not run the full desktop lifetime bootstrap.
    /// </summary>
-    internal void AttachMainWindow(MainView mainView)
+    internal void AttachMainWindow(MainWindow mainWindow)
    {
-        View = mainView ?? throw new ArgumentNullException(nameof(mainView));
+        window = mainWindow ?? throw new ArgumentNullException(nameof(mainWindow));
    }

    private static void ApplyDarkMode(Settings settings)
@ -137,9 +253,6 @@ private void ConfigureRootView(MainView rootView)
        var refreshed = await api.TrySilentLoginAsync().ConfigureAwait(true);
        var sessionStatus = provider.GetRequiredService<SessionStatusViewModel>();
        sessionStatus.Refresh();
-        var homePage = provider.GetRequiredService<HomePageViewModel>();
-        var app = (App)Current!;
-        await app.PushPageAsync(homePage);
        if (!refreshed) return;

        await PushMainPageAsync().ConfigureAwait(true);
@ -153,12 +266,11 @@ private void ConfigureRootView(MainView rootView)
    /// (interactive login from the banner). Pulled out as a helper so
    /// the two callers can't drift apart.
    /// </summary>
-    public static async Task PushMainPageAsync()
+    public static Task PushMainPageAsync()
    {
-        var app = (App)Current!;
-        var mainVm = app.ServiceProvider!.GetRequiredService<MainViewModel>();
-        await mainVm.InitializeAsync();
-        await app.PushPageAsync(mainVm);
+        var app = (App)Current;
+        var mainVm = app.ServiceProvider.GetRequiredService<MainPageViewModel>();
+        return app.PushPageAsync(mainVm);
    }

    private bool TryHandOffCustomSchemeUrl()
@ -193,8 +305,53 @@ private void ConfigureRootView(MainView rootView)
        return true;
    }

+    internal void PushPage(ViewModelBase vm)
+    {
+        _ = PushPageAsync(vm);
+    }
+
+    internal Task PushPageAsync(ViewModelBase vm)
+    {
+        if (window is null)
+        {
+            throw new InvalidOperationException("MainWindow is not initialized yet.");
+        }
+
+        var template = DataTemplates.FirstOrDefault(t => t.Match(vm));
+        if (template is null)
+        {
+            throw new InvalidOperationException($"No IDataTemplate found for {vm.GetType().Name}.");
+        }
+
+        var view = template.Build(vm);
+        if (view is null)
+        {
+            throw new InvalidOperationException(
+                $"Template for {vm.GetType().Name} returned <null>.");
+        }
+
+        var page = view as Page;
+        if (page is null)
+        {
+            // NavigationPage expects Page instances. Wrap any fallback control
+            // (e.g. ViewLocator error TextBlock) into a ContentPage so it can render.
+            page = new ContentPage { Content = view };
+        }
+
+        page.DataContext = vm;
+
+        // Avoid stacking the same singleton page twice (e.g. SettingsPage).
+        var stack = window.NavRoot.NavigationStack;
+        if (stack.Count > 0 && ReferenceEquals(stack[stack.Count - 1], page))
+        {
+            return Task.CompletedTask;
+        }
+
+        return window.NavRoot.PushAsync(page);
+    }
+
    internal async Task GoBackAsync()
    {
-        await View!.NavRoot.PopAsync();
+        await window.NavRoot.PopAsync();
    }
 }
--- a/src/PostIt/PostIt/Assets/avalonia-logo.ico
+++ b/src/PostIt/PostIt/Assets/avalonia-logo.ico
--- a/src/PostIt/PostIt/Helpers/ServiceCollectionHelpers.cs
+++ b/src/PostIt/PostIt/Helpers/ServiceCollectionHelpers.cs
@ -1,77 +0,0 @@
-using System;
-using Microsoft.Extensions.DependencyInjection;
-using PostIt.Services;
-using PostIt.ViewModels;
-using PostIt.Views;
-using Yavsc.Api.Client;
-
-namespace PostIt.Helpers;
-
-public static class ServiceCollectionHelpers
-{
-    public static IServiceProvider BuildServices(this ServiceCollection services)
-    {
-        var settings = new Settings();
-        settings.Load();
-
-        var tokenStore = new TokenStore(System.IO.Path.Combine(
-            System.Environment.GetFolderPath(System.Environment.SpecialFolder.ApplicationData),
-            "PostIt", "tokens.json"));
-
-        var api = new YavscApiClient(settings, tokenStore);
-        var client = new BlogApiClient(api, settings.BlogsApiUrl);
-        var circleClient = new CircleApiClient(api, settings.BlogsApiUrl);
-        var blogAclClient = new BlogAclApiClient(api, settings.BlogsApiUrl);
-        var userSearchClient = new UserSearchClient(api, settings.BlogsApiUrl);
-        var userDirectory = new UserDirectory(userSearchClient);
-
-        // Vues
-        services.AddSingleton<MainView>();
-        services.AddSingleton<MainPage>();
-        services.AddSingleton<MainWindow>();
-
-        // SettingsPage is a singleton: there must be one and only one
-        // instance of the settings UI for the lifetime of the app.
-        // This guarantees that (a) the bindings always reflect the
-        // current in-memory Settings state, (b) the page already has
-        // its DataContext wired up at composition-root time (see
-        // below), and (c) PushPageAsync's anti-empilement guard sees
-        // the same instance across pushes, so a second Settings tap
-        // is a no-op rather than re-pushing the page. Transient would
-        // let the user accumulate stale SettingsPage instances on
-        // the navigation stack, each bound to a fresh
-        // SettingsViewModel and missing any in-flight edits.
-        services.AddSingleton<SettingsPage>();
-        services.AddSingleton<HomePage>();
-        services.AddSingleton<SignaturePage>();
-        services.AddSingleton<CirclesPage>();
-        // ViewModels
-        services.AddSingleton(settings);
-        services.AddSingleton<YavscApiClient>(api);
-        services.AddSingleton(client);
-        services.AddSingleton(circleClient);
-        services.AddSingleton(blogAclClient);
-        services.AddSingleton(userSearchClient);
-        services.AddSingleton<IUserDirectory>(userDirectory);
-        services.AddSingleton<HomePageViewModel>();
-        services.AddSingleton<SignaturePageViewModel>();
-        services.AddSingleton<CirclesPageViewModel>();
-
-        // Dialogs (modal-light pages): the ViewLocator resolves
-        // them when a caller pushes a PostAclDialogViewModel or
-        // AddCircleMemberDialogViewModel via App.PushPageAsync.
-        // App.PushPageAsync overwrites the page's DataContext with
-        // the caller-built VM, so the parameterless ctor is enough
-        // here — the parametrised ctors stay for direct test wiring.
-        services.AddTransient<PostAclDialog>();
-        services.AddTransient<AddCircleMemberDialog>();
-        // Persistent session banner: one instance for the lifetime of
-        // the app so the same VM survives page navigation.
-        var sessionStatus = new SessionStatusViewModel { Api = api };
-        sessionStatus.Refresh();
-        services.AddSingleton(sessionStatus);
-        services.AddSingleton<SessionStatusBanner>();
-        services.AddSingleton<MainViewModel>();
-        return services.BuildServiceProvider();
-    }
-}
--- a/src/PostIt/PostIt/Helpers/ViewModelBaseHelpers.cs
+++ b/src/PostIt/PostIt/Helpers/ViewModelBaseHelpers.cs
@ -1,51 +0,0 @@
-using System;
-using System.Linq;
-using System.Threading.Tasks;
-using Avalonia.Controls;
-using PostIt.ViewModels;
-
-namespace PostIt.Helpers;
-
-public static class ViewModelBaseHelpers
-{
-    public static async Task PushPageAsync(this App app, ViewModelBase vm)
-    {
-        var window = app.View;
-        if (window is null)
-        {
-            throw new InvalidOperationException("MainWindow is not initialized yet.");
-        }
-
-        var template = app.DataTemplates.FirstOrDefault(t => t.Match(vm));
-        if (template is null)
-        {
-            throw new InvalidOperationException($"No IDataTemplate found for {vm.GetType().Name}.");
-        }
-
-        var view = template.Build(vm);
-        if (view is null)
-        {
-            throw new InvalidOperationException(
-                $"Template for {vm.GetType().Name} returned <null>.");
-        }
-
-        var page = view as Page;
-        if (page is null)
-        {
-            // NavigationPage expects Page instances. Wrap any fallback control
-            // (e.g. ViewLocator error TextBlock) into a ContentPage so it can render.
-            page = new ContentPage { Content = view };
-        }
-
-        page.DataContext = vm;
-
-        // Avoid stacking the same singleton page twice (e.g. SettingsPage).
-        var stack = window.NavRoot.NavigationStack;
-        if (stack.Count > 0 && ReferenceEquals(stack[stack.Count - 1], page))
-        {
-            return;
-        }
-
-        await window.NavRoot.PushAsync(page);
-    }
-}
--- a/src/PostIt/PostIt/PostIt.csproj
+++ b/src/PostIt/PostIt/PostIt.csproj
@ -3,14 +3,30 @@
    <TargetFramework>net10.0</TargetFramework>
    <Nullable>enable</Nullable>
    <LangVersion>latest</LangVersion>
+    <AvaloniaUseCompiledBindingsByDefault>true</AvaloniaUseCompiledBindingsByDefault>
    <AssemblyVersion>1.1.0.0</AssemblyVersion>
    <FileVersion>1.1.0.0</FileVersion>
-    <InformationalVersion>1.1.0-beta.1+183.Branch.release-1.0.8-rc8.Sha.6cff3db32ecf72c0d2d430b7002fa7816a34e070</InformationalVersion>
+    <InformationalVersion>1.1.0-beta.1+1.Branch.release-1.0.8-rc1.Sha.1167169aa89e1bf25290e9a152d27b357a500ab3</InformationalVersion>
    <Version>1.1.0-beta.1</Version>
  </PropertyGroup>
  <ItemGroup>
    <AvaloniaResource Include="Assets\**" />
  </ItemGroup>
+  <ItemGroup>
+    <PackageReference Include="Avalonia" />
+    <PackageReference Include="Avalonia.Themes.Fluent" />
+    <PackageReference Include="Avalonia.Fonts.Inter" />
+    <PackageReference Include="Avalonia.AvaloniaEdit" />
+    <PackageReference Include="AvaloniaUI.DiagnosticsSupport">
+      <IncludeAssets Condition="'$(Configuration)' != 'Debug'">None</IncludeAssets>
+      <PrivateAssets Condition="'$(Configuration)' != 'Debug'">All</PrivateAssets>
+    </PackageReference>
+    <PackageReference Include="CommunityToolkit.Mvvm" />
+    <PackageReference Include="IdentityModel.OidcClient" />
+    <PackageReference Include="Microsoft.Extensions.DependencyInjection" />
+    <ProjectReference Include="../../Yavsc.Abstract/Yavsc.Abstract.csproj" />
+    <ProjectReference Include="../../Yavsc.Api.Client/Yavsc.Api.Client.csproj" />
+  </ItemGroup>
  <ItemGroup>
    <Content Include="postit-settings.json">
      <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
@ -22,19 +38,6 @@
    </EmbeddedResource>
  </ItemGroup>
  <ItemGroup>
-    <PackageReference Include="Avalonia" />
-    <PackageReference Include="Avalonia.Themes.Fluent" />
-    <PackageReference Include="Avalonia.Fonts.Inter" />
-    <PackageReference Include="AvaloniaUI.DiagnosticsSupport">
-      <IncludeAssets Condition="'$(Configuration)' != 'Debug'">None</IncludeAssets>
-      <PrivateAssets Condition="'$(Configuration)' != 'Debug'">All</PrivateAssets>
-    </PackageReference>
-    <PackageReference Include="CommunityToolkit.Mvvm" />
-    <PackageReference Include="IdentityModel.OidcClient" />
-    <PackageReference Include="Microsoft.Extensions.DependencyInjection" />
-  </ItemGroup>
-  <ItemGroup>
-    <ProjectReference Include="../../Yavsc.Abstract/Yavsc.Abstract.csproj" />
-    <ProjectReference Include="../../Yavsc.Api.Client/Yavsc.Api.Client.csproj" />
+    <PackageReference Include="GitVersion.MsBuild" />
  </ItemGroup>
 </Project>
--- a/src/PostIt/PostIt/Services/ContactService.Desktop.cs
+++ b/src/PostIt/PostIt/Services/ContactService.Desktop.cs
@ -0,0 +1,36 @@
+#if !ANDROID && !IOS
+using System;
+using System.Collections.Generic;
+using System.Threading;
+using System.Threading.Tasks;
+
+namespace PostIt.Services;
+
+/// <summary>
+/// Desktop stub for <see cref="IContactService"/>.
+///
+/// <para>The desktop has no equivalent of the mobile address
+/// book (no <c>Contacts.Default</c>, no CardDAV out of the
+/// box). Rather than synthesise a list from a different
+/// source, this provider returns an empty list and lets the
+/// UI render an honest "no local contacts on this platform"
+/// message.</para>
+///
+/// <para>If desktop users want to invite people who aren't
+/// Yavsc members, that flow goes through a separate path
+/// (manual email entry + invitation endpoint) — not through
+/// <see cref="IContactService"/>. Finding existing Yavsc
+/// members is <see cref="IUserDirectory"/>'s job, not this
+/// one's.</para>
+///
+/// <para>Future CardDAV / Google Contacts / Exchange
+/// providers can plug in here as additional
+/// <see cref="IContactService"/> implementations selected
+/// from DI by configuration.</para>
+/// </summary>
+public sealed class ContactService : IContactService
+{
+    public Task<IReadOnlyList<ContactDto>> GetDeviceContactsAsync(CancellationToken ct = default)
+        => Task.FromResult<IReadOnlyList<ContactDto>>(Array.Empty<ContactDto>());
+}
+#endif
--- a/src/PostIt/PostIt/Services/Platform.cs
+++ b/src/PostIt/PostIt/Services/Platform.cs
@ -21,14 +21,14 @@ public static class Platform
    /// override this property at startup (e.g. PostIt.Android sets
    /// it to <c>android://postit-signin</c>).
    /// </summary>
-    public const string RedirectUri = "postit://callback";
+    public static string DefaultRedirectUri { get; set; } = "postit://callback";

    /// <summary>
    /// Scheme prefix the <see cref="CustomSchemeBrowser"/> matches
    /// against <c>BrowserOptions.EndUrl</c>. Overridable for apps
    /// that want to register their own scheme.
    /// </summary>
-    public const string CustomScheme = "postit";
+    public static string CustomScheme { get; set; } = "postit";

    /// <summary>
    /// Constructs a fresh <see cref="IBrowser"/> for the running platform.
@ -37,4 +37,4 @@ public static class Platform
    /// </summary>
    public static System.Func<IBrowser?>? CreateBrowser { get; set; } =
        () => new CustomSchemeBrowser(CustomScheme);
-}
+}
--- a/src/PostIt/PostIt/Services/UiDispatcher.cs
+++ b/src/PostIt/PostIt/Services/UiDispatcher.cs
@ -0,0 +1,72 @@
+using System;
+using System.Threading.Tasks;
+using Avalonia.Threading;
+
+namespace PostIt.Services;
+
+/// <summary>
+/// Tiny marshalling helper around <see cref="Dispatcher.UIThread"/> so
+/// the rest of the codebase does not have to import Avalonia.Threading
+/// directly. We want exactly one place that decides "is the current
+/// thread the Avalonia UI thread, and if not, post there" so that
+/// <see cref="ObservableObject"/>-derived types (Settings, the various
+/// ViewModels) can fire <c>PropertyChanged</c> safely from background
+/// work — which is exactly the cross-thread case that previously blew
+/// up inside <c>DataValidationErrors.SetErrors</c> on Avalonia 11.
+///
+/// The helper is intentionally tiny: a sync post when we are off the
+/// UI thread, a no-op when we are already on it, and an async fire-
+/// and-forget variant for places where awaiting would deadlock the
+/// caller (e.g. <c>Settings.Load</c> continuation paths).
+/// </summary>
+public static class UiDispatcher
+{
+    /// <summary>
+    /// True when the calling thread is the Avalonia UI thread. Property
+    /// setters that touch bindings should check this before mutating
+    /// state; the safe path is <see cref="InvokeIfNeeded"/>.
+    /// </summary>
+    public static bool IsOnUiThread => Dispatcher.UIThread.CheckAccess();
+
+    /// <summary>
+    /// Run <paramref name="action"/> on the UI thread. If the caller is
+    /// already on the UI thread, run synchronously to preserve stack
+    /// traces and ordering; otherwise post to the dispatcher and wait.
+    /// Never throws on shutdown — a missing dispatcher is treated as
+    /// "best-effort skipped", matching Avalonia's own behaviour when
+    /// the application lifetime has been torn down.
+    /// </summary>
+    public static void InvokeIfNeeded(Action action)
+    {
+        if (action is null) return;
+        if (IsOnUiThread) { action(); return; }
+        try { Dispatcher.UIThread.Post(action, DispatcherPriority.Normal); }
+        catch (InvalidOperationException) { /* dispatcher gone, nothing to do */ }
+    }
+
+    /// <summary>
+    /// Fire-and-forget variant: schedules <paramref name="action"/> on
+    /// the UI thread but does not block the caller. Use this from
+    /// background workers (OIDC discovery, HTTP callbacks, file I/O)
+    /// where awaiting the dispatcher would deadlock the calling sync
+    /// context.
+    /// </summary>
+    public static void Post(Action action)
+    {
+        if (action is null) return;
+        try { Dispatcher.UIThread.Post(action, DispatcherPriority.Normal); }
+        catch (InvalidOperationException) { /* dispatcher gone */ }
+    }
+
+    /// <summary>
+    /// Awaitable variant. Useful inside <c>async</c> ViewModel methods
+    /// that must touch bindings only after the dispatcher has processed
+    /// a queued update (e.g. "load file then refresh observable state").
+    /// </summary>
+    public static Task InvokeAsync(Action action)
+    {
+        if (action is null) return Task.CompletedTask;
+        if (IsOnUiThread) { action(); return Task.CompletedTask; }
+        return Dispatcher.UIThread.InvokeAsync(action, DispatcherPriority.Normal).GetTask();
+    }
+}
--- a/src/PostIt/PostIt/Services/YavscApiClient.cs
+++ b/src/PostIt/PostIt/Services/YavscApiClient.cs
@ -3,6 +3,7 @@ using System.Net;
 using System.Net.Http;
 using System.Net.Http.Headers;
 using System.Net.Http.Json;
+using System.Text;
 using System.Text.Json;
 using System.Threading;
 using System.Threading.Tasks;
--- a/src/PostIt/PostIt/ViewModels/Settings/AuthenticationSettings.cs
+++ b/src/PostIt/PostIt/ViewModels/Settings/AuthenticationSettings.cs
@ -10,7 +10,7 @@ public partial class AuthenticationSettings : ObservableObject
    /// hand-off in <see cref="PostIt.Services.SingleInstance"/>
    /// (RFC 8252 §7.1). Production Desktop builds use this.
    /// </summary>
-    public const string DesktopRedirectUri = "postit://callback";
+    public const string DefaultDesktopRedirectUri = "postit://callback";

    /// <summary>
    /// Redirect URI used by the Android app. The corresponding IntentFilter
@ -18,12 +18,9 @@ public partial class AuthenticationSettings : ObservableObject
    /// </summary>
    public const string AndroidRedirectUri = "android://postit-signin";

-    public const string DefaultAuthority  = "https://yavsc.pschneider.fr";
-
-    public const string DefaultClientId  = "postit";
-
-    public static readonly string[] DefaultScopes  = { "blogs" };
+    public static string DefaultAuthority { get; internal set; } = "https://yavsc.pschneider.fr";

+    public static string DefaultClientId { get; internal set; } = "postit";
    [ObservableProperty]
    public partial string Authority { get; set; }

@ -34,19 +31,15 @@ public partial class AuthenticationSettings : ObservableObject
    [ObservableProperty]
    public partial string[] Scopes { get; set; }

+
    /// <summary>
-    /// OAuth redirect URI. Defaults to <see cref="DesktopRedirectUri"/>
+    /// OAuth redirect URI. Defaults to <see cref="DefaultDesktopRedirectUri"/>
    /// (custom URI scheme) which is the right answer for desktop
    /// production builds. Mobile platforms must set this to
    /// <see cref="AndroidRedirectUri"/> before calling <c>LoginAsync</c>.
    /// </summary>
    [ObservableProperty]
-    public partial string RedirectUri { get; set; }
-#if ANDROID
-    = AndroidRedirectUri;
-#else
-    = DesktopRedirectUri;
-#endif
+    public partial string RedirectUri { get; set; } = DefaultDesktopRedirectUri;

    /// <summary>
    /// Space-separated view of <see cref="Scopes"/>. Exists for the
--- a/src/PostIt/PostIt/ViewLocator.cs
+++ b/src/PostIt/PostIt/ViewLocator.cs
@ -1,5 +1,4 @@
 using System;
-using System.Diagnostics.CodeAnalysis;
 using Avalonia.Controls;
 using Avalonia.Controls.Templates;
 using Microsoft.Extensions.DependencyInjection;
@ -11,13 +10,17 @@ namespace PostIt;
 /// <summary>
 /// Given a view model, returns the corresponding view if possible.
 /// </summary>
-[RequiresUnreferencedCode(
-    "Default implementation of ViewLocator involves reflection which may be trimmed away.",
-    Url = "https://docs.avaloniaui.net/docs/concepts/view-locator")]
+
 public class ViewLocator : IDataTemplate
 {
+     private readonly IServiceProvider _services;

-     public Control Build(object? data)
+    public ViewLocator(IServiceProvider services)
+    {
+        _services = services;
+    }
+
+    public Control Build(object? data)
    {
        try
        {
@ -29,24 +32,21 @@ public class ViewLocator : IDataTemplate
        }
    }

-
    private Control BuildCore(object? data)
    {
-        var app = App.Current as App;
-        var services = app!.ServiceProvider!;
        return data switch
        {
-            MainViewModel => services.GetRequiredService<MainPage>(),
-            Settings => services.GetRequiredService<SettingsPage>(),
-            HomePageViewModel => services.GetRequiredService<HomePage>(),
-            SignaturePageViewModel => services.GetRequiredService<SignaturePage>(),
-            AddCircleMemberDialogViewModel => services.GetRequiredService<AddCircleMemberDialog>(),
-            CirclesPageViewModel => services.GetRequiredService<CirclesPage>(),
-            PostAclDialogViewModel => services.GetRequiredService<PostAclDialog>(),
+            MainPageViewModel => _services.GetRequiredService<MainPage>(),
+            Settings => _services.GetRequiredService<SettingsPage>(),
+            HomePageViewModel => _services.GetRequiredService<HomePage>(),
+            SignaturePageViewModel => _services.GetRequiredService<SignaturePage>(),
+            AddCircleMemberDialogViewModel => _services.GetRequiredService<AddCircleMemberDialog>(),
+            CirclesPageViewModel => _services.GetRequiredService<CirclesPage>(),
+            PostAclDialogViewModel => _services.GetRequiredService<PostAclDialog>(),
            null => new TextBlock { Text = "No view for <null>" },
            _ => new TextBlock { Text = $"No view for {data.GetType().Name}" }
        };
    }

-     public bool Match(object? data) => data is ViewModelBase;
+    public bool Match(object? data) => data is ViewModelBase;
 }
--- a/src/PostIt/PostIt/ViewModels/AddCircleMemberDialogViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/AddCircleMemberDialogViewModel.cs
@ -5,6 +5,7 @@ using System.Threading.Tasks;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using PostIt.Services;
+using PostIt.Views;
 using Yavsc.Api.Client;

 namespace PostIt.ViewModels;
--- a/src/PostIt/PostIt/ViewModels/CirclesPageViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/CirclesPageViewModel.cs
@ -5,7 +5,6 @@ using Avalonia;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
-using PostIt.Helpers;
 using PostIt.Services;
 using Yavsc.Api.Client;
 using Yavsc.Api.Client.Dtos;
--- a/src/PostIt/PostIt/ViewModels/HomePageViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/HomePageViewModel.cs
@ -1,4 +1,6 @@
 using CommunityToolkit.Mvvm.Input;
+using Microsoft.Extensions.DependencyInjection;
+using PostIt;
 using PostIt.Services;
 namespace PostIt.ViewModels;

--- a/src/PostIt/PostIt/ViewModels/MainPageViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/MainPageViewModel.cs
@ -8,11 +8,12 @@ using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
 using Yavsc.Blogspot;
 using Yavsc.Api.Client;
-using PostIt.Helpers;
+using PostIt.Services;
+using PostIt.Views;

 namespace PostIt.ViewModels;

-public partial class MainViewModel : ViewModelBase
+public partial class MainPageViewModel : ViewModelBase
 {
    /// <summary>Window/tab title. Cosmetic — bound by
    /// <c>MainPage.axaml</c> if at all. Not the post title.</summary>
@ -48,7 +49,7 @@ public partial class MainViewModel : ViewModelBase
    /// mutable field. Toggling is its own action.</summary>
    [ObservableProperty]
    public partial bool DraftIsPublished { get; set; }
-    public bool IsLoaded { get; private set; }
+
    public Settings SettingsModel { get; }

    [ObservableProperty]
@ -72,218 +73,6 @@ public partial class MainViewModel : ViewModelBase
    [ObservableProperty]
    public partial Settings Settings { get; private set; }

-    [RelayCommand]
-    internal async Task RefreshAsync()
-    {
-        await ExecuteAsync(async () =>
-        {
-            var posts = await BlogClient!.GetPostsAsync();
-            Posts.Clear();
-            foreach (var post in posts.OrderByDescending(p => p.DateModified))
-            {
-                Posts.Add(post);
-            }
-            ApplyFilter();
-            StatusMessage = $"Loaded {Posts.Count} posts.";
-        });
-    }
-
-    [RelayCommand]
-    internal async Task SearchAsync() {
-        await RefreshAsync();
-        ApplyFilter();
-    }
-
-    [RelayCommand]
-    internal async Task SaveAsync()
-    {
-        // The button is already disabled when the title is empty
-        // (see CanSave), but the test path (and any programmatic
-        // ICommand.Execute) bypasses CanExecute, so we still
-        // guard here. Better to no-op with a status message
-        // than to send a request the server will reject.
-        if (string.IsNullOrWhiteSpace(DraftTitle))
-        {
-            StatusMessage = "Title is required.";
-            return;
-        }
-
-        await ExecuteAsync(async () =>
-        {
-            // Build a fresh BlogPostDto from the editor buffer on
-            // every Save — we no longer mutate SelectedPost in
-            // place. The previous behaviour copied the buffer
-            // (which was a no-op when SelectedPost was null)
-            // back onto the model and relied on a
-            // [Required] violation to surface the missing
-            // input; the new shape keeps the editor buffer as
-            // the single source of truth for outgoing payloads
-            // and the selected post as a read-only hint for
-            // the update path.
-            if (SelectedPost is null || SelectedPost.Id == 0)
-            {
-                var draft = new BlogPostDto
-                {
-                    Title = DraftTitle,
-                    Article = DraftArticle ?? string.Empty,
-                    DateCreated = DateTime.UtcNow,
-                    DateModified = DateTime.UtcNow,
-                    IsPublished = DraftIsPublished
-                };
-                var created = await BlogClient!.CreatePostAsync(draft);
-                if (created is not null)
-                {
-                    SelectedPost = created;
-                    StatusMessage = $"Created post {created.Id}.";
-                }
-            }
-            else
-            {
-                var update = new BlogPostDto
-                {
-                    Id = SelectedPost.Id,
-                    AuthorId = SelectedPost.AuthorId,
-                    Photo = SelectedPost.Photo,
-                    Title = DraftTitle,
-                    Article = DraftArticle ?? string.Empty,
-                    DateCreated = SelectedPost.DateCreated,
-                    DateModified = DateTime.UtcNow,
-                };
-                await BlogClient!.UpdatePostAsync(SelectedPost.Id, update);
-                StatusMessage = $"Saved post {SelectedPost.Id}.";
-            }
-
-            await RefreshPostsAsync();
-        });
-    }
-
-    [RelayCommand]
-    internal async Task DeleteAsync()
-    {
-        if (SelectedPost is null || SelectedPost.Id == 0)
-        {
-            StatusMessage = "Select an existing post before deleting.";
-            return;
-        }
-
-        await ExecuteAsync(async () =>
-        {
-            await BlogClient!.DeletePostAsync(SelectedPost.Id);
-            StatusMessage = $"Deleted post {SelectedPost.Id}.";
-            SelectedPost = null;
-            await RefreshPostsAsync();
-        });
-    }
-
-    /// <summary>
-    /// Toggle the publication state of the currently selected
-    /// post. Pushes the new state to
-    /// <c>PUT /api/BlogApi/{id}/publish</c> and reflects it
-    /// locally in <see cref="DraftIsPublished"/> + the
-    /// selected post so the UI updates without a full
-    /// refresh.
-    ///
-    /// <para>The toggle is its own action — separate from Save
-    /// — because <c>Publish</c> is not part of the
-    /// <c>BlogPostDto</c> payload. Bundling it into Save
-    /// would require a wire-shape change and a second server
-    /// overload; the dedicated endpoint keeps the wire
-    /// contract clean.</para>
-    /// </summary>
-    public async Task SetPublishStateAsync(bool publish)
-    {
-        if (SelectedPost is null || SelectedPost.Id == 0)
-        {
-            StatusMessage = "Sélectionnez un billet existant pour changer sa publication.";
-            return;
-        }
-
-        await ExecuteAsync(async () =>
-        {
-            // The checkbox updates DraftIsPublished before the command is
-            // executed. Using the current bound value avoids the
-            // double-toggle bug in which the UI has already flipped the
-            // state and the command flips it again.
-            await BlogClient!.SetPublishAsync(SelectedPost.Id, publish);
-            DraftIsPublished = publish;
-            // Mirror into the selected post so a subsequent
-            // RefreshPostsAsync() doesn't blow away the
-            // locally flipped state until the round-trip
-            // re-hydrates it.
-            SelectedPost.IsPublished = publish;
-            StatusMessage = publish
-                ? $"Billet {SelectedPost.Id} publié."
-                : $"Billet {SelectedPost.Id} remis en brouillon.";
-        });
-    }
-
-    [RelayCommand]
-    internal async Task TogglePublishAsync()
-    {
-        await SetPublishStateAsync(DraftIsPublished);
-    }
-
-    /// <summary>
-    /// DEV ONLY: open the signature capture page. The production
-    /// entry point is a SignalR push from Yavsc.Org ("devis
-    /// received, sign here"); this command is the dev-time
-    /// shortcut to reach the page without that infrastructure.
-    /// Aligned on the same VM-first navigation pattern as
-    /// <see cref="OpenSettings"/>: the VM resolves the target VM
-    /// through <see cref="Services"/>, the <c>ViewLocator</c> picks
-    /// the matching <c>Control</c> at bind time. No
-    /// <c>Click</code> handler, no <c>App.ServiceProvider</c>
-    /// access from the view layer.
-    /// </summary>
-    [RelayCommand]
-    internal async Task OpenSignatureDevAsync()
-    {
-        await ((App)App.Current!).PushPageAsync(SignatureModel).ConfigureAwait(true);
-    }
-
-
-    [RelayCommand(CanExecute = nameof(CanManageAcl))]
-    public async Task ManageAclAsync()
-    {
-        if (SelectedPost is null)
-        {
-            StatusMessage = "Select an existing post before managing ACL.";
-            return;
-        }
-
-        var postForAcl = SelectedPost;
-        try
-        {
-            var detailed = await BlogClient!.GetPostAsync(SelectedPost.Id).ConfigureAwait(true);
-            if (detailed is not null)
-            {
-                postForAcl = detailed;
-                SelectedPost = detailed;
-            }
-        }
-        catch
-        {
-            // Keep the dialog usable even if the detail refresh fails.
-        }
-
-        await ((App)App.Current!).PushPageAsync(GetACLViewModel(postForAcl)).ConfigureAwait(true);
-    }
-
-    [RelayCommand]
-    public async Task OpenCirclesAsync()
-    {
-        var circlesVm = ResolveServices().GetRequiredService<CirclesPageViewModel>();
-        await ((App)App.Current!).PushPageAsync(circlesVm).ConfigureAwait(true);
-    }
-
-    private ViewModelBase GetACLViewModel(BlogPostDto selectedPost)
-    {
-        var sp = ResolveServices();
-        var aclClient = sp.GetRequiredService<BlogAclApiClient>();
-        var circleClient = sp.GetRequiredService<CircleApiClient>();
-        return new PostAclDialogViewModel(selectedPost, aclClient, circleClient);
-    }
-
    /// <summary>
    /// API surface that hits the Yavsc.Blogs deployment at
    /// <see cref="Settings.ApiUrl"/>. Owned and constructed by
@ -333,27 +122,21 @@ public partial class MainViewModel : ViewModelBase
    }


-    public MainViewModel()
+    public MainPageViewModel()
    {
+        Init(null);
        SettingsModel = new Settings();
-        Init(SettingsModel);
        BlogClient = null;
    }

    private void Init(Settings? settings)
    {
+        SearchText = string.Empty;
        Posts = new ObservableCollection<BlogPostDto>();
        FilteredPosts = new ObservableCollection<BlogPostDto>();
        SelectedPost = null;
        IsBusy = false;
        StatusMessage = "Ready";
-        Settings = settings ?? new Settings();
-        SearchText = Settings.SearchText;
-        WindowTitle = "PostIt";
-        DraftTitle = string.Empty;
-        DraftArticle = string.Empty;
-        DraftIsPublished = false;
-        IsLoaded = false;
        // Production path: DI injects the canonical Settings singleton
        // and we use it as-is. Test path: tests call this constructor
        // without a Settings argument; we fall back to a fresh
@ -364,16 +147,11 @@ public partial class MainViewModel : ViewModelBase
        // sink; that crash is fixed in Settings.OnPropertyChanged
        // (thread-safe dispatcher marshalling) so the duplicate
        // instance is now merely wasteful, not dangerous.
-
-        Settings.PropertyChanged += (s, e) =>
-        {
-            if (e.PropertyName == nameof(Settings.SearchText))
-            {
-                SearchText = Settings.SearchText;
-                ApplyFilter();
-            }
-        };
-
+        Settings = settings ?? new Settings();
+        WindowTitle = "PostIt";
+        DraftTitle = string.Empty;
+        DraftArticle = string.Empty;
+        DraftIsPublished = false;
    }

    /// <summary>Save is enabled as soon as the user has typed
@ -393,22 +171,16 @@ public partial class MainViewModel : ViewModelBase
    /// <see cref="BlogApiClient"/>. Production code uses the
    /// (Settings, BlogApiClient) overload below.
    /// </summary>
-    public MainViewModel(BlogApiClient blogClient, Settings? settings = null, IServiceProvider? services = null)
+    public MainPageViewModel(BlogApiClient blogClient, Settings? settings = null, IServiceProvider? services = null)
    {
        SettingsModel = new Settings();
        BlogClient = blogClient ?? throw new ArgumentNullException(nameof(blogClient)); ;
        Services = services;
+
        Init(settings);
    }

-    partial void OnSearchTextChanged(string value)
-    {
-        if (Settings is not null && Settings.SearchText != value)
-        {
-            Settings.SearchText = value;
-        }
-        ApplyFilter();
-    }
+    partial void OnSearchTextChanged(string value) => ApplyFilter();

    partial void OnSelectedPostChanged(BlogPostDto? value)
    {
@ -435,10 +207,174 @@ public partial class MainViewModel : ViewModelBase
    partial void OnDraftTitleChanged(string value) => SaveCommand.NotifyCanExecuteChanged();
    partial void OnDraftArticleChanged(string value) => SaveCommand.NotifyCanExecuteChanged();

+    [RelayCommand]
+    internal async Task LoadPosts()
+    {
+        await ExecuteAsync(async () =>
+        {
+            var posts = await BlogClient.GetPostsAsync();
+            Posts.Clear();
+            foreach (var post in posts.OrderByDescending(p => p.DateModified))
+            {
+                Posts.Add(post);
+            }
+            ApplyFilter();
+            StatusMessage = $"Loaded {Posts.Count} posts.";
+        });
+    }
+
+    [RelayCommand]
+    internal void Search() => ApplyFilter();
+
+    [RelayCommand]
+    internal async Task Save()
+    {
+        // The button is already disabled when the title is empty
+        // (see CanSave), but the test path (and any programmatic
+        // ICommand.Execute) bypasses CanExecute, so we still
+        // guard here. Better to no-op with a status message
+        // than to send a request the server will reject.
+        if (string.IsNullOrWhiteSpace(DraftTitle))
+        {
+            StatusMessage = "Title is required.";
+            return;
+        }
+
+        await ExecuteAsync(async () =>
+        {
+            // Build a fresh BlogPostDto from the editor buffer on
+            // every Save — we no longer mutate SelectedPost in
+            // place. The previous behaviour copied the buffer
+            // (which was a no-op when SelectedPost was null)
+            // back onto the model and relied on a
+            // [Required] violation to surface the missing
+            // input; the new shape keeps the editor buffer as
+            // the single source of truth for outgoing payloads
+            // and the selected post as a read-only hint for
+            // the update path.
+            if (SelectedPost is null || SelectedPost.Id == 0)
+            {
+                var draft = new BlogPostDto
+                {
+                    Title = DraftTitle,
+                    Article = DraftArticle ?? string.Empty,
+                    DateCreated = DateTime.UtcNow,
+                    DateModified = DateTime.UtcNow,
+                };
+                var created = await BlogClient.CreatePostAsync(draft);
+                if (created is not null)
+                {
+                    SelectedPost = created;
+                    StatusMessage = $"Created post {created.Id}.";
+                }
+            }
+            else
+            {
+                var update = new BlogPostDto
+                {
+                    Id = SelectedPost.Id,
+                    AuthorId = SelectedPost.AuthorId,
+                    Photo = SelectedPost.Photo,
+                    Title = DraftTitle,
+                    Article = DraftArticle ?? string.Empty,
+                    DateCreated = SelectedPost.DateCreated,
+                    DateModified = DateTime.UtcNow,
+                };
+                await BlogClient.UpdatePostAsync(SelectedPost.Id, update);
+                StatusMessage = $"Saved post {SelectedPost.Id}.";
+            }
+
+            await RefreshPostsAsync();
+        });
+    }
+
+    [RelayCommand]
+    internal async Task Delete()
+    {
+        if (SelectedPost is null || SelectedPost.Id == 0)
+        {
+            StatusMessage = "Select an existing post before deleting.";
+            return;
+        }
+
+        await ExecuteAsync(async () =>
+        {
+            await BlogClient.DeletePostAsync(SelectedPost.Id);
+            StatusMessage = $"Deleted post {SelectedPost.Id}.";
+            SelectedPost = null;
+            await RefreshPostsAsync();
+        });
+    }
+
+    /// <summary>
+    /// Toggle the publication state of the currently selected
+    /// post. Pushes the new state to
+    /// <c>PUT /api/BlogApi/{id}/publish</c> and reflects it
+    /// locally in <see cref="DraftIsPublished"/> + the
+    /// selected post so the UI updates without a full
+    /// refresh.
+    ///
+    /// <para>The toggle is its own action — separate from Save
+    /// — because <c>Publish</c> is not part of the
+    /// <c>BlogPostDto</c> payload. Bundling it into Save
+    /// would require a wire-shape change and a second server
+    /// overload; the dedicated endpoint keeps the wire
+    /// contract clean.</para>
+    /// </summary>
+    [RelayCommand]
+    internal async Task TogglePublish()
+    {
+        if (SelectedPost is null || SelectedPost.Id == 0)
+        {
+            StatusMessage = "Sélectionnez un billet existant pour changer sa publication.";
+            return;
+        }
+
+        await ExecuteAsync(async () =>
+        {
+            var desired = !DraftIsPublished;
+            await BlogClient.SetPublishAsync(SelectedPost.Id, desired);
+            DraftIsPublished = desired;
+            // Mirror into the selected post so a subsequent
+            // RefreshPostsAsync() doesn't blow away the
+            // locally flipped state until the round-trip
+            // re-hydrates it.
+            SelectedPost.IsPublished = desired;
+            StatusMessage = desired
+                ? $"Billet {SelectedPost.Id} publié."
+                : $"Billet {SelectedPost.Id} remis en brouillon.";
+        });
+    }
+
+    /// <summary>
+    /// DEV ONLY: open the signature capture page. The production
+    /// entry point is a SignalR push from Yavsc.Org ("devis
+    /// received, sign here"); this command is the dev-time
+    /// shortcut to reach the page without that infrastructure.
+    /// Aligned on the same VM-first navigation pattern as
+    /// <see cref="OpenSettings"/>: the VM resolves the target VM
+    /// through <see cref="Services"/>, the <c>ViewLocator</c> picks
+    /// the matching <c>Control</c> at bind time. No
+    /// <c>Click</code> handler, no <c>App.ServiceProvider</c>
+    /// access from the view layer.
+    /// </summary>
+    [RelayCommand]
+    internal async Task OpenSignatureDev()
+    {
+        await ((App)App.Current!).PushPageAsync(SignatureModel).ConfigureAwait(true);
+    }
+
+    private ViewModelBase GetACLViewModel(BlogPostDto selectedPost)
+    {
+        var sp = ResolveServices();
+        var aclClient = sp.GetRequiredService<BlogAclApiClient>();
+        var circleClient = sp.GetRequiredService<CircleApiClient>();
+        return new PostAclDialogViewModel(selectedPost, aclClient, circleClient);
+    }

    private async Task RefreshPostsAsync()
    {
-        var posts = await BlogClient!.GetPostsAsync();
+        var posts = await BlogClient.GetPostsAsync();
        Posts.Clear();
        foreach (var post in posts.OrderByDescending(p => p.DateModified))
        {
@ -491,18 +427,28 @@ public partial class MainViewModel : ViewModelBase

    private void UpdateCommandStates()
    {
-        RefreshCommand.NotifyCanExecuteChanged();
+        LoadPostsCommand.NotifyCanExecuteChanged();
        SaveCommand.NotifyCanExecuteChanged();
        DeleteCommand.NotifyCanExecuteChanged();
    }


-    internal async Task InitializeAsync()
+
+    [RelayCommand(CanExecute = nameof(CanManageAcl))]
+    public async Task ManageAcl()
    {
-        if (!IsLoaded)
+        if (SelectedPost is null)
        {
-            await RefreshAsync();
-            IsLoaded = true;
+            StatusMessage = "Select an existing post before managing ACL.";
+            return;
        }
+        await ((App)App.Current!).PushPageAsync(GetACLViewModel(SelectedPost)).ConfigureAwait(true);
+    }
+
+    [RelayCommand]
+    public async Task OpenCircles()
+    {
+        var circlesVm = ResolveServices().GetRequiredService<CirclesPageViewModel>();
+        await ((App)App.Current!).PushPageAsync(circlesVm).ConfigureAwait(true);
    }
 }
--- a/src/PostIt/PostIt/ViewModels/PostAclDialogViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/PostAclDialogViewModel.cs
@ -1,8 +1,6 @@
 using System;
 using System.Collections.Generic;
 using System.Collections.ObjectModel;
-using System.Linq;
-using System.Net;
 using System.Threading.Tasks;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
@ -10,17 +8,9 @@ using Yavsc.Blogspot;
 using Yavsc.Api.Client;
 using Yavsc.Api.Client.Dtos;
 using Yavsc.Abstract.BlogSpot;
-using Yavsc.Abstract.Identity.Security;
-using System.Net.Http;

 namespace PostIt.ViewModels;

-public sealed class PostAclEntry
-{
-    public long CircleId { get; init; }
-    public string CircleName { get; init; } = string.Empty;
-}
-
 /// <summary>
 /// View model for the "Gérer l'ACL" modal of a single blog post.
 ///
@ -51,7 +41,7 @@ public partial class PostAclDialogViewModel : ViewModelBase
    MyCircles { get; set; } = new();

    [ObservableProperty]
-    public partial ObservableCollection<PostAclEntry>
+    public partial ObservableCollection<PostAccessControlRulePayload>
    AclEntries { get; set; } = new();

    [ObservableProperty]
@ -87,9 +77,6 @@ public partial class PostAclDialogViewModel : ViewModelBase
        Post = post ?? throw new ArgumentNullException(nameof(post));
        _aclClient = aclClient ?? throw new ArgumentNullException(nameof(aclClient));
        _circleClient = circleClient ?? throw new ArgumentNullException(nameof(circleClient));
-
-        AclEntries = new ObservableCollection<PostAclEntry>(post.GetACL().Select(a => ToAclEntry(a.CircleId)));
-        SelectedCircleToAdd = null;
    }

    public override bool CanNavigateNext { get => throw new NotImplementedException(); protected set => throw new NotImplementedException(); }
@ -103,17 +90,16 @@ public partial class PostAclDialogViewModel : ViewModelBase
        IsBusy = true;
        try
        {
-            // Load circles for the picker. ACL entries come from the
-            // BlogPostDto detail payload (source of truth for initial state).
+            // Load circles and ACL entries in parallel — both are
+            // independent reads on the same host. The caller's uid
+            // is implicit in both endpoints.
            var circlesTask = _circleClient.GetMyCirclesAsync();
-            await Task.WhenAll(circlesTask);
+            var aclTask = _aclClient.GetMyAclAsync();
+            await Task.WhenAll(circlesTask, aclTask);

            var circles = circlesTask.Result ?? new List<CircleDto>();
            MyCircles = new ObservableCollection<CircleDto>(circles);

-            // Resolve labels now that circles are available.
-            AclEntries = new ObservableCollection<PostAclEntry>(AclEntries.Select(a => ToAclEntry(a.CircleId)));
-

            StatusMessage = $"{AclEntries.Count} autorisation(s)";
            _loaded = true;
@ -140,20 +126,14 @@ public partial class PostAclDialogViewModel : ViewModelBase
        IsBusy = true;
        try
        {
-            if (AclEntries.Any(a => a.CircleId == SelectedCircleToAdd.Id))
-            {
-                StatusMessage = $"Cercle « {SelectedCircleToAdd.Name} » déjà autorisé";
-                return;
-            }
-
-            var created = await _aclClient.GrantAsync(new PostAccessControlRulePayload
+            var created = await _aclClient.GrantAsync(new Yavsc.Abstract.BlogSpot.PostAccessControlRulePayload
            {
                CircleId = SelectedCircleToAdd.Id,
                BlogPostId = Post.Id
            });
            if (created is not null)
            {
-                AclEntries.Add(ToAclEntry(created.CircleId));
+                AclEntries.Add(created);
                StatusMessage = $"Cercle « {SelectedCircleToAdd.Name} » autorisé";
            }
            else
@ -161,13 +141,6 @@ public partial class PostAclDialogViewModel : ViewModelBase
                StatusMessage = "Autorisation refusée par le serveur";
            }
        }
-        catch (HttpRequestException ex) when (ex.StatusCode == HttpStatusCode.Conflict)
-        {
-            // Conflict means the link already exists in backend. Resync
-            // from the dedicated ACL API so the UI reflects server truth.
-            await ReloadAclEntriesFromServerAsync();
-            StatusMessage = $"Cercle « {SelectedCircleToAdd.Name} » déjà autorisé";
-        }
        catch (Exception ex)
        {
            StatusMessage = $"Erreur: {ex.Message}";
@ -179,16 +152,14 @@ public partial class PostAclDialogViewModel : ViewModelBase
    }

    [RelayCommand]
-    public async Task RevokeAsync(PostAclEntry? acl)
+    public async Task RevokeAsync(PostAccessControlRulePayload? acl)
    {
        if (acl is null) return;
        IsBusy = true;
        try
        {
            await _aclClient.RevokeAsync(acl.CircleId);
-            var existing = AclEntries.FirstOrDefault(e => e.CircleId == acl.CircleId);
-            if (existing is not null)
-                AclEntries.Remove(existing);
+            AclEntries.Remove(acl);
            StatusMessage = "Autorisation révoquée";
        }
        catch (Exception ex)
@ -200,26 +171,4 @@ public partial class PostAclDialogViewModel : ViewModelBase
            IsBusy = false;
        }
    }
-
-    private async Task ReloadAclEntriesFromServerAsync()
-    {
-        var allAcl = await _aclClient.GetMyAclAsync();
-        var currentPostAcl = (allAcl ?? new List<PostAccessControlRulePayload>())
-            .Where(a => a.BlogPostId == Post.Id)
-            .Select(a => ToAclEntry(a.CircleId))
-            .GroupBy(a => a.CircleId)
-            .Select(g => g.First())
-            .ToList();
-        AclEntries = new ObservableCollection<PostAclEntry>(currentPostAcl);
-    }
-
-    private PostAclEntry ToAclEntry(long circleId)
-    {
-        var circleName = MyCircles.FirstOrDefault(c => c.Id == circleId)?.Name;
-        return new PostAclEntry
-        {
-            CircleId = circleId,
-            CircleName = string.IsNullOrWhiteSpace(circleName) ? $"Cercle #{circleId}" : circleName
-        };
-    }
 }
--- a/src/PostIt/PostIt/ViewModels/SessionStatusViewModel.cs
+++ b/src/PostIt/PostIt/ViewModels/SessionStatusViewModel.cs
@ -3,7 +3,6 @@ using System.Threading.Tasks;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using Microsoft.Extensions.DependencyInjection;
-using PostIt.Helpers;
 using PostIt.Services;

 namespace PostIt.ViewModels;
@ -140,7 +139,7 @@ public partial class SessionStatusViewModel : ViewModelBase
    internal async Task OpenSettings()
    {
        var app = (App)App.Current!;
-        await app.PushPageAsync(app.ServiceProvider!.GetRequiredService<Settings>()).ConfigureAwait(true);
+        await app.PushPageAsync(app.ServiceProvider.GetRequiredService<Settings>()).ConfigureAwait(true);
    }

 }
--- a/src/PostIt/PostIt/ViewModels/Settings/Settings.cs
+++ b/src/PostIt/PostIt/ViewModels/Settings/Settings.cs
@ -2,11 +2,13 @@ using System.Runtime.CompilerServices;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
 using IdentityModel.OidcClient;
+using Microsoft.Extensions.DependencyInjection;
 using System;
 using System.Collections.Generic;
 using System.IO;
 using System.Net.Http;
 using System.Text.Json;
+using System.Threading;

 [assembly: InternalsVisibleTo("PostIt.Tests")]

@ -16,6 +18,70 @@ public partial class Settings : ViewModelBase
 {
    const string SettingsFileName = "postit-settings.json";

+    /// <summary>
+    /// Redirect URI used by the Android app. The corresponding IntentFilter
+    /// in <c>PostIt.Android/Properties/AndroidManifest.xml</c> must match.
+    /// </summary>
+    public const string AndroidRedirectUri = "android://postit-signin";
+
+
+
+    /// <summary>
+    /// Process-wide canonical <see cref="Settings"/> instance, wired up
+    /// at application boot by <see cref="App.OnFrameworkInitializationCompleted"/>
+    /// through <see cref="BindToServiceProvider"/>. The hybrid pattern:
+    /// <list type="bullet">
+    ///   <item><description>The static <c>Current</c> reference gives
+    ///   ViewModels a non-DI way to reach the same instance (and lets
+    ///   the framework bindings push notifications through one stable
+    ///   <see cref="ObservableObject"/>).</description></item>
+    ///   <item><description>Tests that want to exercise a clean
+    ///   instance still call <c>new Settings()</c>; <c>Current</c>
+    ///   stays null in those contexts because <see cref="BindToServiceProvider"/>
+    ///   is never invoked.</description></item>
+    ///   <item><description>Reads (<see cref="GetCurrent"/>) are
+    ///   thread-safe and never allocate; mutations always go through
+    ///   the DI-resolved singleton so two threads cannot each register
+    ///   a different "current" Settings.</description></item>
+    /// </list>
+    /// </summary>
+    private static Settings? s_current;
+
+    /// <summary>
+    /// Wire the canonical Settings instance to a DI container. Called
+    /// exactly once from <c>App.axaml.cs</c> after the singleton has
+    /// been registered. Subsequent calls are no-ops: the DI container
+    /// owns the instance lifetime and we don't want a stray
+    /// <c>BindToServiceProvider</c> in a test fixture to silently
+    /// rebind the production instance.
+    /// </summary>
+    public static void BindToServiceProvider(IServiceProvider services)
+    {
+        if (services is null) throw new ArgumentNullException(nameof(services));
+        Interlocked.CompareExchange(ref s_current,
+            services.GetService<Settings>() ?? throw new InvalidOperationException(
+                "Settings is not registered in the DI container."),
+            null);
+    }
+
+    /// <summary>
+    /// Returns the canonical Settings instance previously bound through
+    /// <see cref="BindToServiceProvider"/>, or <c>null</c> when called
+    /// outside a running Avalonia application (tests, CLI tools).
+    /// </summary>
+    public static Settings? GetCurrent() => Volatile.Read(ref s_current);
+
+    /// <summary>
+    /// Resolve the canonical Settings instance or throw. Use this in
+    /// production code paths that must not silently fall back to a
+    /// freshly-constructed <see cref="Settings"/> (which used to be
+    /// the root cause of the postit://callback crash: two Settings
+    /// instances racing on PropertyChanged from different threads).
+    /// </summary>
+    public static Settings RequireCurrent() =>
+        GetCurrent() ?? throw new InvalidOperationException(
+            "Settings.Current is not bound. Call App.OnFrameworkInitializationCompleted first.");
+
    [ObservableProperty]
    public partial AuthenticationSettings Authentication { get; set; } = new();

@ -28,15 +94,12 @@ public partial class Settings : ViewModelBase
    [ObservableProperty]
    public partial string BusinessApiUrl { get; set; } = "https://business.pschneider.fr/api/v1/";

-    [ObservableProperty]
-    public partial string SearchText { get; set; } = string.Empty;
-
    /// <summary>
    /// Catch top-level mutations: the four ObservableProperty
    /// setters above all funnel through here, and we flip
    /// <see cref="IsDirty"/> in lock-step. Sub-property mutations
    /// (e.g. <c>Authentication.Authority</c>) are caught by the
-    /// subscription wired up in
+    /// subscription wired up in <see cref="OnAuthenticationChanged"/>
    /// below. <see cref="ApplyJson"/> disables the flag during bulk
    /// hydration so the disk load itself does not count as a user
    /// edit.
@ -46,7 +109,6 @@ public partial class Settings : ViewModelBase
    partial void OnDarkModeChanged(bool value) => MarkDirty();
    partial void OnBlogsApiUrlChanged(string value) => MarkDirty();
    partial void OnBusinessApiUrlChanged(string value) => MarkDirty();
-    partial void OnSearchTextChanged(string value) => MarkDirty();

    /// <summary>
    /// Authentication can be reassigned wholesale by
@ -288,18 +350,18 @@ public partial class Settings : ViewModelBase
            var settings = JsonSerializer.Deserialize<Settings>(json);
            if (settings is null)
            {
-                UseDefaultSettings();
+                Console.Error.WriteLine($"🩎 Settings payload is invalid (source: {source}).");
+                return;
            }
            // Apply under the gate so concurrent Load() callers cannot
            // see half the new values / half the old ones. The actual
            // PropertyChanged fan-out is handled by [ObservableProperty]'s
            // setters which we route through SetProperty → OnPropertyChanged
            // → our overridden dispatcher-safe marshaller below.
-            else lock (_mutationGate)
+            lock (_mutationGate)
            {
                this.Authentication = settings.Authentication;
                this.DarkMode = settings.DarkMode;
-                this.SearchText = settings.SearchText ?? string.Empty;
                if (!(settings.Authentication is null))
                {
                    this.Authentication = new AuthenticationSettings();
@ -308,13 +370,8 @@ public partial class Settings : ViewModelBase
                    this.Authentication.ClientId = string.IsNullOrWhiteSpace(settings.Authentication.ClientId) ?
                     AuthenticationSettings.DefaultClientId : settings.Authentication.ClientId;
                    this.Authentication.RedirectUri = string.IsNullOrWhiteSpace(settings.Authentication.RedirectUri) ?
-                     AuthenticationSettings.DesktopRedirectUri : settings.Authentication.RedirectUri;
-                    if (settings.Authentication.Scopes is null || settings.Authentication.Scopes.Length == 0)
-                    {
-                        settings.Authentication.Scopes = AuthenticationSettings.DefaultScopes;
-                    }
-                    else
-                        this.Authentication.Scopes = settings.Authentication.Scopes;
+                     AuthenticationSettings.DefaultDesktopRedirectUri : settings.Authentication.RedirectUri;
+                    this.Authentication.Scopes = settings.Authentication.Scopes;
                }
            }
            // A disk load (or an embedded-resource fallback) is the
@ -343,19 +400,6 @@ public partial class Settings : ViewModelBase
        }
    }

-    private void UseDefaultSettings()
-    {
-        this.Authentication = new AuthenticationSettings
-        {
-            Authority = AuthenticationSettings.DefaultAuthority,
-            ClientId = AuthenticationSettings.DefaultClientId,
-            RedirectUri = AuthenticationSettings.DesktopRedirectUri,
-            Scopes = AuthenticationSettings.DefaultScopes
-        };
-        this.DarkMode = false;
-        this.SearchText = string.Empty;
-    }
-
    /// <summary>
    /// Persist the current in-memory state to
    /// <c>~/.config/PostIt/postit-settings.json</c> (Linux) /
--- a/src/PostIt/PostIt/ViewModels/ViewModelBase.cs
+++ b/src/PostIt/PostIt/ViewModels/ViewModelBase.cs
@ -1,10 +1,12 @@
-using CommunityToolkit.Mvvm.ComponentModel;
+using Avalonia.Styling;
+using CommunityToolkit.Mvvm.ComponentModel;

 namespace PostIt.ViewModels;

 public abstract partial class ViewModelBase : ObservableObject
 {
-     /// <summary>
+    
+    /// <summary>
    /// Gets if the user can navigate to the next page
    /// </summary>
    public abstract bool CanNavigateNext { get; protected set; }
--- a/src/PostIt/PostIt/Views/AddCircleMemberDialog.axaml.cs
+++ b/src/PostIt/PostIt/Views/AddCircleMemberDialog.axaml.cs
@ -1,10 +1,9 @@
-
+using Avalonia.Controls;
 using Avalonia.Markup.Xaml;
 using Avalonia.Interactivity;
 using Avalonia.VisualTree;
 using PostIt.Services;
 using PostIt.ViewModels;
-using System.Threading.Tasks;

 namespace PostIt.Views;

@ -20,7 +19,7 @@ namespace PostIt.Views;
 /// circle id. The dialog itself does not know the circle id
 /// by design.</para>
 /// </summary>
-public partial class AddCircleMemberDialog : Avalonia.Controls.ContentPage
+public partial class AddCircleMemberDialog : ContentPage
 {
    public AddCircleMemberDialog()
    {
@ -42,9 +41,10 @@ public partial class AddCircleMemberDialog : Avalonia.Controls.ContentPage
    public AddCircleMemberDialogViewModel? ViewModel
        => DataContext as AddCircleMemberDialogViewModel;

-    private async Task OnCloseClicked(object? sender, RoutedEventArgs e)
+    private void OnCloseClicked(object? sender, RoutedEventArgs e)
    {
-        App app = App.Current! as App;
-        await app!.GoBackAsync();
+        var nav = this.FindAncestorOfType<NavigationPage>();
+        if (nav is not null)
+            _ = nav.PopAsync();
    }
 }
--- a/src/PostIt/PostIt/Views/CirclesPage.axaml.cs
+++ b/src/PostIt/PostIt/Views/CirclesPage.axaml.cs
@ -1,5 +1,10 @@
+using System;
+using Avalonia;
 using Avalonia.Controls;
 using Avalonia.Markup.Xaml;
+using Microsoft.Extensions.DependencyInjection;
+using PostIt.Services;
+using PostIt.ViewModels;

 namespace PostIt.Views;

--- a/src/PostIt/PostIt/Views/MainPage.axaml
+++ b/src/PostIt/PostIt/Views/MainPage.axaml
@ -8,11 +8,11 @@
             xmlns:AvaloniaEdit="clr-namespace:AvaloniaEdit;assembly=AvaloniaEdit"
             mc:Ignorable="d"
             x:Class="PostIt.Views.MainPage"
-             x:DataType="vm:MainViewModel"
+             x:DataType="vm:MainPageViewModel"
             HorizontalAlignment="Stretch"
             VerticalAlignment="Stretch">
    <Design.DataContext>
-        <vm:MainViewModel />
+        <vm:MainPageViewModel />
    </Design.DataContext>

    <Grid Margin="12" RowSpacing="12"
@ -29,15 +29,15 @@
                    VerticalAlignment="Top">

            <StackPanel Orientation="Horizontal" Spacing="8">
-                <Button Command="{Binding RefreshAsync}" Content="Refresh" />
-                <Button Command="{Binding SearchAsync}" Content="Filter" />
-                <Button Command="{Binding SaveAsync}" Content="Save" />
-                <Button Command="{Binding DeleteAsync}" Content="Delete" />
+                <Button Command="{Binding LoadPosts}" Content="Load posts" />
+                <Button Command="{Binding Search}" Content="Filter" />
+                <Button Command="{Binding Save}" Content="Save" />
+                <Button Command="{Binding Delete}" Content="Delete" />
                <Button x:Name="ManageAclButton"
-                        Command="{Binding ManageAclAsync}"
+                        Command="{Binding ManageAcl}"
                        Content="ACL" />
                <Button x:Name="OpenCirclesButton"
-                        Command="{Binding OpenCirclesAsync}"
+                        Command="{Binding OpenCircles}"
                        Content="Mes cercles" />
                <!-- Publication toggle: a CheckBox wired to
                     DraftIsPublished. Clicking it fires
@ -49,7 +49,7 @@
                     and the buffer in sync. -->
                <CheckBox Content="Publié"
                          IsChecked="{Binding DraftIsPublished, Mode=TwoWay}"
-                          Command="{Binding TogglePublishAsync}"
+                          Command="{Binding TogglePublishCommand}"
                          VerticalAlignment="Center"/>
                <!--
                    DEV ONLY: temporary shortcut to open the signature
@ -59,7 +59,7 @@
                    MainPage.axaml.cs once the SignalR handler lands.
                -->
                <Button x:Name="OpenSignatureDevButton"
-                        Command="{Binding OpenSignatureDevAsync}"
+                        Command="{Binding OpenSignatureDev}"
                        Content="[DEV] Signature"
                        ToolTip.Tip="DEV ONLY — to remove when SignalR handler lands" />
            </StackPanel>
@ -97,15 +97,16 @@

                <TextBlock Grid.Row="0" Text="Post detail" FontWeight="SemiBold" />
                <TextBox Grid.Row="1" Text="{Binding DraftTitle, Mode=TwoWay}" PlaceholderText="Title" />
-               <TextBox Grid.Row="2" PlaceholderText="Write something here !"
-                  Text="{Binding DraftArticle, Mode=TwoWay}"
-                  MinHeight="320"
-                  HorizontalAlignment="Stretch"
-                  VerticalAlignment="Stretch">
-                </TextBox>
-
+                <AvaloniaEdit:TextEditor Grid.Row="2"
+                    views:TextEditorBinding.Text="{Binding DraftArticle, Mode=TwoWay}"
+                    ShowLineNumbers="True"
+                    FontFamily="Cascadia Code, Consolas, Menlo, Monospace"
+                    MinHeight="320"
+                    HorizontalAlignment="Stretch"
+                    VerticalAlignment="Stretch"
+                    VerticalScrollBarVisibility="Auto"
+                    HorizontalScrollBarVisibility="Auto" />
                <TextBlock Grid.Row="3" Text="{Binding StatusMessage}" Foreground="Gray" />
-
            </Grid>
        </Border>
    </Grid>
--- a/src/PostIt/PostIt/Views/MainPage.axaml.cs
+++ b/src/PostIt/PostIt/Views/MainPage.axaml.cs
@ -1,6 +1,4 @@
-using System;
 using Avalonia.Controls;
-using Avalonia.Controls.Primitives;

 namespace PostIt.Views;

@ -10,16 +8,4 @@ public partial class MainPage : ContentPage
    {
        InitializeComponent();
    }
-
-    protected override void OnApplyTemplate(TemplateAppliedEventArgs e)
-    {
-        base.OnApplyTemplate(e);
-        if (DataContext is ViewModels.MainViewModel vm)
-        {
-            if (!vm.IsLoaded)
-            {
-                vm.RefreshAsync().Wait();
-            }
-        }
-    }
-}
+}
--- a/src/PostIt/PostIt/Views/MainView.axaml
+++ b/src/PostIt/PostIt/Views/MainView.axaml
@ -1,22 +0,0 @@
-<UserControl xmlns="https://github.com/avaloniaui"
-             xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
-             xmlns:vm="using:PostIt.ViewModels"
-             xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
-             xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
-             xmlns:views="using:PostIt.Views"
-             mc:Ignorable="d" d:DesignWidth="800" d:DesignHeight="450"
-             x:Class="PostIt.Views.MainView"
-             x:DataType="vm:MainViewModel">
-  <Design.DataContext>
-    <!-- This only sets the DataContext for the previewer in an IDE,
-    to set the actual DataContext for runtime, set the DataContext property in code (look at App.axaml.cs) -->
-    <vm:MainViewModel />
-  </Design.DataContext>
-
-  <DockPanel LastChildFill="True">
-    <views:SessionStatusBanner
-      x:Name="SessionBanner"
-      DockPanel.Dock="Bottom"/>
-    <NavigationPage x:Name="NavRoot"/>
-  </DockPanel>
-</UserControl>
--- a/src/PostIt/PostIt/Views/MainView.axaml.cs
+++ b/src/PostIt/PostIt/Views/MainView.axaml.cs
@ -1,24 +0,0 @@
-using System;
-using Avalonia.Controls;
-
-namespace PostIt.Views;
-
-public partial class MainView : UserControl
-{
-    public MainView()
-    {
-        InitializeComponent();
-    }
-
-    protected override void OnDataContextChanged(EventArgs e)
-    {
-        base.OnDataContextChanged(e);
-        if (DataContext is ViewModels.MainViewModel vm)
-        {
-            if (!vm.IsLoaded)
-            {
-                vm.RefreshAsync().Wait();
-            }
-        }
-    }
-}
--- a/src/PostIt/PostIt/Views/MainWindow.axaml
+++ b/src/PostIt/PostIt/Views/MainWindow.axaml
@ -1,12 +1,27 @@
 <Window xmlns="https://github.com/avaloniaui"
        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
        xmlns:vm="using:PostIt.ViewModels"
-        xmlns:d="http://schemas.microsoft.com/expression/blend/2008"
-        xmlns:mc="http://schemas.openxmlformats.org/markup-compatibility/2006"
        xmlns:views="using:PostIt.Views"
-        mc:Ignorable="d" d:DesignWidth="800" d:DesignHeight="450"
+        x:DataType="vm:MainPageViewModel"
        x:Class="PostIt.Views.MainWindow"
-        Icon="/Assets/avalonia-logo.ico"
-        Title="PostIt">
-        <views:MainView x:Name="MainView" />
+        >
+
+    <!--
+        Root layout: persistent session banner on top, navigation
+        surface below. The banner is the single source of truth for
+        "Connecté / Déconnecté" and the logout button — visible on
+        every page (HomePage, MainPage) so the user never has to dig
+        through a menu to find their session state.
+
+        The navigation stack is built programmatically in
+        App.OnFrameworkInitializationCompleted: HomePage is the
+        root, MainPage is pushed on top when the silent refresh
+        succeeds at boot or after a fresh login from HomePage.
+    -->
+    <DockPanel LastChildFill="True">
+        <views:SessionStatusBanner x:Name="SessionBanner"
+                                   DockPanel.Dock="Bottom"/>
+        <NavigationPage x:Name="NavRoot"/>
+    </DockPanel>
+
 </Window>
--- a/src/PostIt/PostIt/Views/MainWindow.axaml.cs
+++ b/src/PostIt/PostIt/Views/MainWindow.axaml.cs
@ -8,4 +8,4 @@ public partial class MainWindow : Window
    {
        InitializeComponent();
    }
-}
+}
--- a/src/PostIt/PostIt/Views/PostAclDialog.axaml
+++ b/src/PostIt/PostIt/Views/PostAclDialog.axaml
@ -3,7 +3,8 @@
        xmlns:x="http://schemas.microsoft.com/winfx/2006/xaml"
        x:Class="PostIt.Views.PostAclDialog"
        xmlns:vm="using:PostIt.ViewModels"
-                xmlns:dtos="using:Yavsc.Api.Client.Dtos"
+        xmlns:dtos="using:Yavsc.Api.Client.Dtos"
+        xmlns:yabst="using:Yavsc.Abstract.Identity.Security"
        x:DataType="vm:PostAclDialogViewModel"
      >
    <Grid RowDefinitions="Auto,*,Auto,Auto" Margin="12">
@ -31,10 +32,10 @@
        <ListBox Grid.Row="1"
                 ItemsSource="{Binding AclEntries}">
            <ListBox.ItemTemplate>
-                <DataTemplate x:DataType="vm:PostAclEntry">
+                <DataTemplate x:DataType="yabst:CircleAuthorization">
                    <Grid ColumnDefinitions="*,Auto">
                        <StackPanel Grid.Column="0" Spacing="2">
-                            <TextBlock Text="{Binding CircleName}"
+                            <TextBlock Text="{Binding CircleId, StringFormat='Cercle #{0}'}"
                                       FontWeight="Bold"/>
                        </StackPanel>
                        <Button Grid.Column="1" Content="Révoquer"
--- a/src/PostIt/PostIt/Views/SessionStatusBanner.axaml.cs
+++ b/src/PostIt/PostIt/Views/SessionStatusBanner.axaml.cs
@ -1,4 +1,5 @@
 using Avalonia.Controls;
+using Avalonia.Markup.Xaml;

 namespace PostIt.Views;

--- a/src/PostIt/PostIt/Views/TextEditorBinding.cs
+++ b/src/PostIt/PostIt/Views/TextEditorBinding.cs
@ -0,0 +1,51 @@
+using Avalonia;
+using Avalonia.Data;
+using AvaloniaEdit;
+
+namespace PostIt.Views;
+
+public sealed class TextEditorBinding
+{
+    public static readonly AttachedProperty<string?> TextProperty =
+        AvaloniaProperty.RegisterAttached<TextEditorBinding, TextEditor, string?>(
+            "Text",
+            defaultBindingMode: BindingMode.TwoWay);
+
+    private static readonly AttachedProperty<bool> IsTextChangeSubscribedProperty =
+        AvaloniaProperty.RegisterAttached<TextEditorBinding, TextEditor, bool>("IsTextChangeSubscribed");
+
+    static TextEditorBinding()
+    {
+        TextProperty.Changed.AddClassHandler<TextEditor>((editor, args) =>
+        {
+            EnsureTextChangeSubscribed(editor);
+
+            var text = args.GetNewValue<string?>() ?? string.Empty;
+            if (editor.Text != text)
+            {
+                editor.Text = text;
+            }
+        });
+    }
+
+    public static string? GetText(TextEditor editor) => editor.GetValue(TextProperty);
+
+    public static void SetText(TextEditor editor, string? value) => editor.SetValue(TextProperty, value);
+
+    private static void EnsureTextChangeSubscribed(TextEditor editor)
+    {
+        if (editor.GetValue(IsTextChangeSubscribedProperty))
+        {
+            return;
+        }
+
+        editor.SetValue(IsTextChangeSubscribedProperty, true);
+        editor.TextChanged += (_, _) =>
+        {
+            if (editor.Text != GetText(editor))
+            {
+                SetText(editor, editor.Text);
+            }
+        };
+    }
+}
--- a/src/Yavsc.Abstract/Attributes/ActivityBillingAttribute.cs
+++ b/src/Yavsc.Abstract/Attributes/ActivityBillingAttribute.cs
@ -1,3 +1,5 @@
+using System;
+
 namespace Yavsc.Attributes
 {
    public class ActivityBillingAttribute : Attribute
--- a/src/Yavsc.Abstract/Attributes/ActivitySettingsAttribute.cs
+++ b/src/Yavsc.Abstract/Attributes/ActivitySettingsAttribute.cs
@ -1,3 +1,5 @@
+using System;
+
 namespace Yavsc.Attributes
 {
    public class ActivitySettingsAttribute : Attribute
--- a/src/Yavsc.Abstract/Attributes/Validation/ValidRemoteUserDirAttribute.cs
+++ b/src/Yavsc.Abstract/Attributes/Validation/ValidRemoteUserDirAttribute.cs
@ -1,8 +1,10 @@
+
+using System;
 using System.ComponentModel.DataAnnotations;
 using Yavsc.Server.Helpers;

 namespace Yavsc.Attributes.Validation
-{
+{ 
    /// <summary>
    /// Valid Remote User Dir Attribute
    /// </summary>
@ -16,7 +18,7 @@ namespace Yavsc.Attributes.Validation
        {
            if (ErrorMessageResourceType==null)  {
                ErrorMessageResourceType = typeof(Yavsc.Attributes.Validation.Resources);
-                ErrorMessageResourceName = "InvalidPath";
+                ErrorMessageResourceName = "InvalidPath"; 
            }
        }

--- a/src/Yavsc.Abstract/Attributes/Validation/YaRegularExpression.cs
+++ b/src/Yavsc.Abstract/Attributes/Validation/YaRegularExpression.cs
@ -1,12 +1,14 @@
+
+using System;
 using System.Reflection;

 namespace Yavsc.Attributes.Validation
 {
-    public class YaRegularExpression : System.ComponentModel.DataAnnotations.RegularExpressionAttribute {
+    public class YaRegularExpression : System.ComponentModel.DataAnnotations.RegularExpressionAttribute { 
        public YaRegularExpression(string pattern): base (pattern)
        {
            this.ErrorMessage = "RegularExpression: "+ pattern;
-
+            
        }

        public override string FormatErrorMessage(string name)
@ -18,4 +20,4 @@ namespace Yavsc.Attributes.Validation

        }
    }
-}
+}
--- a/src/Yavsc.Abstract/Attributes/Validation/YaRequiredAttribute.cs
+++ b/src/Yavsc.Abstract/Attributes/Validation/YaRequiredAttribute.cs
@ -1,3 +1,5 @@
+using System;
+
 namespace Yavsc.Attributes.Validation
 {
    [AttributeUsage(AttributeTargets.Property | AttributeTargets.Field | AttributeTargets.Parameter, AllowMultiple = false)]
@ -11,13 +13,13 @@ namespace Yavsc.Attributes.Validation
         public YaRequiredAttribute (string msg) : base(msg)
         {
             ErrorMessage = msg;
-         }
+         } 
        public YaRequiredAttribute () : base("Required Field")
        {
            ErrorMessageResourceType = typeof(Yavsc.Attributes.Validation.Resources);
            ErrorMessageResourceName = "FieldRequired";
        }
-
+        
        public override bool IsValid(object value) {
            if (value == null) {
                return false;
@ -32,5 +34,5 @@ namespace Yavsc.Attributes.Validation
            return true;
        }
    }
-
-}
+    
+}
--- a/src/Yavsc.Abstract/Attributes/Validation/YaStringLength.cs
+++ b/src/Yavsc.Abstract/Attributes/Validation/YaStringLength.cs
@ -1,3 +1,5 @@
+using System;
+
 namespace Yavsc.Attributes.Validation
 {
    public partial class YaStringLength: YaValidationAttribute
@ -19,15 +21,15 @@ namespace Yavsc.Attributes.Validation
        {
            if (ErrorMessageResourceType==null)  {
                ErrorMessageResourceType = typeof(Yavsc.Attributes.Validation.Resources);
-                ErrorMessageResourceName = "InvalidStringLength";
+                ErrorMessageResourceName = "InvalidStringLength"; 
            }
        }

        public override bool IsValid(object value) {
-
+            
            string stringValue = value as string;
            if (stringValue==null) return MinimumLength <= 0;
-            if (MinimumLength>=0)
+            if (MinimumLength>=0) 
                {
                    if (stringValue.Length< MinimumLength) {
                        return false;
--- a/src/Yavsc.Abstract/Attributes/Validation/YaValidationAttribute.cs
+++ b/src/Yavsc.Abstract/Attributes/Validation/YaValidationAttribute.cs
@ -1,3 +1,6 @@
+using System;
+using System.Reflection;
+
 namespace Yavsc.Attributes.Validation
 {
    public class YaValidationAttribute : System.ComponentModel.DataAnnotations.ValidationAttribute
@ -6,7 +9,7 @@ namespace Yavsc.Attributes.Validation
        {

        }
-
+        
        public YaValidationAttribute(Func<string> acr): base(acr)
        {

@ -42,4 +45,4 @@ namespace Yavsc.Attributes.Validation
            return GetResourceString(ErrorMessageResourceName);
        }
    }
-}
+}
--- a/src/Yavsc.Abstract/Authentication/RegisterModel.cs
+++ b/src/Yavsc.Abstract/Authentication/RegisterModel.cs
@ -1,4 +1,7 @@
 using System.ComponentModel.DataAnnotations;
+using Yavsc.Attributes.Validation;
+using Yavsc.Abstract;
+    using Yavsc;

 namespace Yavsc.ViewModels.Account
 {
@ -12,8 +15,8 @@ namespace Yavsc.ViewModels.Account
        public string UserName { get; set; }

        [Required()]
-        [StringLength(maximumLength: 102, MinimumLength = 5)]
-        [EmailAddress(ErrorMessage = "L'adresse e-mail n'est pas valide.")]
+        [StringLength( maximumLength:102, MinimumLength = 5)]
+   //    [EmailAddress]
        [Display(Name = "Email", Description = "E-Mail")]
        public string Email { get; set; }

--- a/src/Yavsc.Abstract/Billing/IBillable.cs
+++ b/src/Yavsc.Abstract/Billing/IBillable.cs
@ -1,3 +1,5 @@
+using System;
+using System.Collections.Generic;
 using Yavsc.Services;

 namespace Yavsc.Billing
--- a/src/Yavsc.Abstract/Blogspot/BlogPostDto.cs
+++ b/src/Yavsc.Abstract/Blogspot/BlogPostDto.cs
@ -1,5 +1,4 @@
 using Yavsc.Abstract.Identity.Security;
-using System.Text.Json.Serialization;

 namespace Yavsc.Blogspot;

@ -36,26 +35,11 @@ public class BlogPostDto : IBlogPost
        return true;
    }

-    public ICollection<CircleAuthorization> ACL = new List<CircleAuthorization>();
-
-    /// <summary>
-    /// Wire-only ACL bridge for System.Text.Json: accepts the
-    /// <c>acl</c>/<c>ACL</c> payload from GET detail responses,
-    /// but is never emitted on POST/PUT from the client.
-    /// </summary>
-    [JsonPropertyName("acl")]
-    [JsonIgnore(Condition = JsonIgnoreCondition.WhenWritingDefault)]
-    public List<CircleAuthorization>? WireAcl
-    {
-        get => null;
-        set => ACL = value ?? new List<CircleAuthorization>();
-    }
+    private List<CircleAuthorization> ACL { get; set; } = new List<CircleAuthorization>();

    public string[] Tags { get; set; }

-    ICollection<CircleAuthorization> ICircleAuthorized.ACL => this.ACL;
-
    public string[] GetTags() => Tags;

-    public CircleAuthorization[] GetACL() => ACL.ToArray();
+    public ICircleAuthorization[] GetACL() => ACL.ToArray();
 }
--- a/src/Yavsc.Abstract/Blogspot/IBlogPost.cs
+++ b/src/Yavsc.Abstract/Blogspot/IBlogPost.cs
@ -2,6 +2,7 @@


 using Yavsc.Abstract.Identity.Security;
+using Yavsc.Interfaces;

 namespace Yavsc.Blogspot
 {
--- a/src/Yavsc.Abstract/Blogspot/PostAccessControlRulePayload.cs
+++ b/src/Yavsc.Abstract/Blogspot/PostAccessControlRulePayload.cs
@ -3,7 +3,8 @@ using Yavsc.Abstract.Identity.Security;

 namespace Yavsc.Abstract.BlogSpot;

-public class PostAccessControlRulePayload : CircleAuthorization
+public class PostAccessControlRulePayload : ICircleAuthorization
 {
+      public long CircleId { get; set; }
      public long BlogPostId { get; set; }
 }
--- a/src/Yavsc.Abstract/Chat/IChatRoom.cs
+++ b/src/Yavsc.Abstract/Chat/IChatRoom.cs
@ -1,3 +1,4 @@
+using System.Collections.Generic;
 using System.ComponentModel.DataAnnotations;

 namespace Yavsc.Abstract.Chat
@ -14,4 +15,4 @@ namespace Yavsc.Abstract.Chat

        List<TMod> Moderation { get; }
    }
-}
+}
--- a/src/Yavsc.Abstract/Constants.cs
+++ b/src/Yavsc.Abstract/Constants.cs
@ -7,13 +7,6 @@ namespace Yavsc
    {

        public const string APIPrefix = "api/v1";
-
-        public const string BlogSpotPath = "blogspot";
-        public const string BlogAclPath = "blogacl";
-        public const string BlogTagPath = "blogtag";
-        public const string CirclePath = "circle";
-        public const string CommentsPath = "blogcomments";
-
        public static readonly Scope[] SiteScopes = {
            new Scope { Id = "profile", Description = "Your profile informations" },
            new Scope { Id = "book" , Description ="Your booking interface"},
--- a/Show more
+++ b/Show more
				`@ -0,0 +1 @@`
				`Subproject commit 0695a6c1fea6508f1a88f7ad0ad9cb93733aa52d`