chore: formated tests

Add role_write permission to permissions table and update migrations.
Update e2e tests to use DB integration and seed permissions.
Add seedPermissions helper.

.dockerignore

@@ -0,0 +1,4 @@
+node_modules
+.git
+coverage
+.env

.gitea/workflows/deploy.yml

@@ -0,0 +1,44 @@
+name: "Build and push image"
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  check-code:
+    name: "Check Deno code"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Check formatting
+        run: deno fmt --check
+
+      - name: Check linting
+        run: deno lint
+
+  deploy:
+    name: "Build Docker image"
+    runs-on: ubuntu-latest
+    needs: check-code
+    steps:
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: registry.docker.polytech.djalim.fr
+          username: ${{ secrets.registry_login }}
+          password: ${{ secrets.registry_pass }}
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          tags: registry.docker.polytech.djalim.fr/polympr:latest

.gitea/workflows/lint.yml

@@ -4,6 +4,10 @@ on:
   pull_request:
     branches:
       - main
+      - develop
+  push:
+    branches:
+      - develop
 
 permissions:
   contents: read

.gitea/workflows/test.yml

@@ -0,0 +1,79 @@
+name: "Tests"
+
+on:
+  pull_request:
+    branches:
+      - main
+      - develop
+  push:
+    branches:
+      - develop
+
+jobs:
+  unit:
+    name: "Unit tests"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Install dependencies
+        run: deno install
+
+      - name: Run unit tests
+        run: deno task test:unit
+
+  integration:
+    name: "Integration tests"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Start postgres
+        run: |
+          sudo apt-get update -qq && sudo apt-get install -y -qq postgresql > /dev/null
+          PG_VER=$(ls /etc/postgresql/)
+          sudo sed -i "s/^#*listen_addresses\s*=.*/listen_addresses = '127.0.0.1'/" /etc/postgresql/$PG_VER/main/postgresql.conf
+          echo "host all all 127.0.0.1/32 md5" | sudo tee -a /etc/postgresql/$PG_VER/main/pg_hba.conf
+          sudo pg_ctlcluster $PG_VER main restart
+          until sudo -u postgres pg_isready -h 127.0.0.1; do sleep 1; done
+          sudo -u postgres psql -c "CREATE USER test WITH PASSWORD 'test';"
+          sudo -u postgres psql -c "CREATE DATABASE polympr_test OWNER test;"
+          sudo -u postgres psql -d polympr_test -c "GRANT ALL ON SCHEMA public TO test;"
+
+      - name: Apply migrations
+        run: |
+          sed 's/--> statement-breakpoint/;/g' databases/migrations/0000_square_jetstream.sql | \
+            PGPASSWORD=test psql -h 127.0.0.1 -U test -d polympr_test
+
+      - name: Install dependencies
+        run: npm install --ignore-scripts && deno install
+
+      - name: Run integration tests
+        env:
+          POSTGRES_HOST: 127.0.0.1
+          POSTGRES_PORT: 5432
+          POSTGRES_USER: test
+          POSTGRES_PASS: test
+          POSTGRES_DB: polympr_test
+        run: deno task test:integration
+
+      - name: Run e2e tests
+        env:
+          POSTGRES_HOST: 127.0.0.1
+          POSTGRES_PORT: 5432
+          POSTGRES_USER: test
+          POSTGRES_PASS: test
+          POSTGRES_DB: polympr_test
+        run: deno task test:e2e

.github/workflows/test.yml

@@ -0,0 +1,79 @@
+name: "Tests"
+
+on:
+  pull_request:
+    branches:
+      - main
+      - develop
+  push:
+    branches:
+      - develop
+
+jobs:
+  unit:
+    name: "Unit tests"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Install dependencies
+        run: deno install
+
+      - name: Run unit tests
+        run: deno task test:unit
+
+  integration:
+    name: "Integration tests"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - uses: denoland/setup-deno@v2
+        with:
+          deno-version: v2.x
+
+      - name: Start postgres
+        run: |
+          sudo apt-get update -qq && sudo apt-get install -y -qq postgresql > /dev/null
+          PG_VER=$(ls /etc/postgresql/)
+          sudo sed -i "s/^#*listen_addresses\s*=.*/listen_addresses = '127.0.0.1'/" /etc/postgresql/$PG_VER/main/postgresql.conf
+          echo "host all all 127.0.0.1/32 md5" | sudo tee -a /etc/postgresql/$PG_VER/main/pg_hba.conf
+          sudo pg_ctlcluster $PG_VER main restart
+          until sudo -u postgres pg_isready -h 127.0.0.1; do sleep 1; done
+          sudo -u postgres psql -c "CREATE USER test WITH PASSWORD 'test';"
+          sudo -u postgres psql -c "CREATE DATABASE polympr_test OWNER test;"
+          sudo -u postgres psql -d polympr_test -c "GRANT ALL ON SCHEMA public TO test;"
+
+      - name: Apply migrations
+        run: |
+          sed 's/--> statement-breakpoint/;/g' databases/migrations/0000_square_jetstream.sql | \
+            PGPASSWORD=test psql -h 127.0.0.1 -U test -d polympr_test
+
+      - name: Install dependencies
+        run: npm install --ignore-scripts && deno install
+
+      - name: Run integration tests
+        env:
+          POSTGRES_HOST: 127.0.0.1
+          POSTGRES_PORT: 5432
+          POSTGRES_USER: test
+          POSTGRES_PASS: test
+          POSTGRES_DB: polympr_test
+        run: deno task test:integration
+
+      - name: Run e2e tests
+        env:
+          POSTGRES_HOST: 127.0.0.1
+          POSTGRES_PORT: 5432
+          POSTGRES_USER: test
+          POSTGRES_PASS: test
+          POSTGRES_DB: polympr_test
+        run: deno task test:e2e

CLAUDE.md

@@ -0,0 +1,354 @@
+# PolyMPR - Claude Code Context
+
+## 📋 Project Overview
+
+**PolyMPR** (Poly Management Platform for Resources) is a modular HR management
+system built with **Deno + Fresh** framework. It's designed to help
+organizations manage HR, student records, notes, mobility programs, and
+role-based administration.
+
+### Stack
+
+- **Runtime**: Deno
+- **Framework**: Fresh (edge-ready web framework)
+- **Database**: PostgreSQL with Drizzle ORM
+- **Frontend**: Preact with signals
+- **Authentication**: JWT-based via cookies
+- **Testing**: Deno test framework with HappyDOM for DOM testing
+
+### Current Status
+
+🚧 **In Progress** - API layer largely complete, UI pages not yet built. The
+schema below is the **final/definitive schema** that guides all development.
+
+---
+
+## 🏗️ Architecture
+
+### Module Structure
+
+The application uses a **modulith architecture** with the following modules:
+
+```
+routes/(apps)/
+├── students/      - Student management & promotions
+├── notes/         - Grade management & academic records
+├── mobility/      - Mobility programs & exchanges
+└── admin/         - Role & permission management
+```
+
+### Key Directories
+
+- `/routes` - Fresh routes and components
+- `/databases` - Database connection, schema, and migrations
+- `/defaults` - Interfaces and shared types
+- `/tests` - Unit, integration, and E2E tests
+- `/static` - Public assets
+
+### Authentication Flow
+
+1. User authenticates via CAS (Polytech)
+2. JWT token stored in `sessionToken` cookie
+3. Middleware validates token on each request
+4. Public routes: `/`, `/login`, `/logout`, `/about`, `/contact`
+5. All other routes require authentication
+
+---
+
+## 📊 Database Schema (Final/Definitive)
+
+```mermaid
+erDiagram
+  USER {
+    string id PK
+    string nom
+    string prenom
+    int idRole FK
+  }
+  ROLE {
+    int id PK
+    string nom
+  }
+  PERMISSION {
+    int id PK
+    string nom
+  }
+  ROLE_PERMISSION {
+    int idRole PK,FK
+    int idPermission PK,FK
+  }
+  STUDENT {
+    int numEtud PK
+    string nom
+    string prenom
+    string idPromo FK
+  }
+  PROMOTION {
+    string idPromo PK
+    string annee
+  }
+  MODULE {
+    string id PK
+    string nom
+  }
+  ENSEIGNEMENT {
+    string idProf PK,FK
+    string idModule PK,FK
+    string idPromo PK,FK
+  }
+  UE {
+    int id PK
+    string nom
+  }
+  UE_MODULE {
+    string idModule PK,FK
+    int idUE PK,FK
+    string idPromo PK,FK
+    float coeff
+  }
+  NOTE {
+    int numEtud PK,FK
+    string idModule PK,FK
+    float note
+  }
+  AJUSTEMENT {
+    int numEtud PK,FK
+    int idUE PK,FK
+    float valeur
+  }
+
+  USER }o--|| ROLE : "a"
+  ROLE_PERMISSION }o--|| ROLE : "accorde"
+  ROLE_PERMISSION }o--|| PERMISSION : "inclut"
+  ENSEIGNEMENT }o--|| USER : "réalisé par"
+  ENSEIGNEMENT }o--|| MODULE : "porte sur"
+  ENSEIGNEMENT }o--|| PROMOTION : "concerne"
+  STUDENT }o--|| PROMOTION : "appartient à"
+  UE_MODULE }o--|| MODULE : "associe"
+  UE_MODULE }o--|| UE : "appartient à"
+  UE_MODULE }o--|| PROMOTION : "pour"
+  NOTE }o--|| STUDENT : "reçoit"
+  NOTE }o--|| MODULE : "dans"
+  AJUSTEMENT }o--|| STUDENT : "concerne"
+  AJUSTEMENT }o--|| UE : "dans"
+```
+
+### Current Schema
+
+The Drizzle ORM schema in `/databases/schema.ts` implements all tables: `roles`,
+`permissions`, `rolePermissions`, `users`, `promotions`, `students`, `modules`,
+`enseignements`, `ues`, `ueModules`, `notes`, `ajustements`, `mobility`.
+
+---
+
+## 🎯 Open Issues (69 total)
+
+### UI Pages
+
+**Catalog**
+
+- 📋 UI - Page Catalogue d'applications (#71)
+
+**Components**
+
+- 🎨 UI (composant) - Popup Résultats d'import (#75)
+
+**Students**
+
+- 📋 UI - Admin – Liste des élèves (#79)
+- 📋 UI - Admin – Gestion des promotions (#80)
+- 📋 UI - Admin – Import xlsx élèves (#81)
+- 📋 UI - Admin – Édition d'un élève (#82)
+
+**Notes**
+
+- 📋 UI - Page Élève – Mes Notes (#72)
+- 📋 UI - Admin – Consulter les notes (#73)
+- 📋 UI - Admin – Importer des notes (.xlsx) (#74)
+- 📋 UI - Admin – Édition notes d'un élève (#76)
+- 📋 UI - Admin – Récap notes élève / semestre (#77)
+- 📋 UI - Admin – Gestion des UEs (#78)
+
+**Administration**
+
+- 📋 UI - Gestion des utilisateurs (#83)
+- 📋 UI - Gestion des rôles (#84)
+- 📋 UI - Permissions d'un rôle (#85)
+- 📋 UI - Vue des permissions (#86)
+- 📋 UI - Gestion des modules (#87)
+- 📋 UI - Enseignements (Assignations) (#88)
+
+---
+
+### API Endpoints
+
+Legend: ✅ implemented & tested | 📋 not yet implemented
+
+**Students API**
+
+- ✅ GET `/students` (#7)
+- ✅ POST `/students` (#8)
+- ✅ POST `/students/import-csv` (#9)
+- ✅ GET `/students/{numEtud}` (#10)
+- ✅ PUT `/students/{numEtud}` (#11)
+- ✅ DELETE `/students/{numEtud}` (#12)
+- ✅ GET `/promotions` (#13)
+- ✅ POST `/promotions` (#14)
+- ✅ GET `/promotions/{idPromo}` (#15)
+- ✅ PUT `/promotions/{idPromo}` (#16)
+- ✅ DELETE `/promotions/{idPromo}` (#17)
+
+**Administration API - Modules & Enseignements**
+
+- ✅ GET `/modules` (#23)
+- ✅ POST `/modules` (#24)
+- ✅ GET `/modules/{idModule}` (#25)
+- ✅ PUT `/modules/{idModule}` (#26)
+- ✅ DELETE `/modules/{idModule}` (#27)
+- ✅ POST `/enseignements` (#29)
+- ✅ GET `/enseignements/{idProf}/{idModule}/{idPromo}` (#30)
+- ✅ DELETE `/enseignements/{idProf}/{idModule}/{idPromo}` (#31)
+
+**Notes API - UEs & UE-Modules**
+
+- ✅ GET `/ues` (#32)
+- ✅ POST `/ues` (#33)
+- ✅ GET `/ues/{idUE}` (#34)
+- ✅ PUT `/ues/{idUE}` (#35)
+- ✅ DELETE `/ues/{idUE}` (#36)
+- ✅ GET `/ue-modules` (#37)
+- ✅ POST `/ue-modules` (#38)
+- ✅ GET `/ue-modules/{idModule}/{idUE}/{idPromo}` (#39)
+- ✅ PUT `/ue-modules/{idModule}/{idUE}/{idPromo}` (#40)
+- ✅ DELETE `/ue-modules/{idModule}/{idUE}/{idPromo}` (#41)
+
+**Notes API - Notes & Ajustements**
+
+- ✅ GET `/notes` (#42)
+- ✅ POST `/notes` (#43)
+- 📋 POST `/notes/import-xlsx` (#44)
+- ✅ GET `/notes/{numEtud}/{idModule}` (#45)
+- ✅ PUT `/notes/{numEtud}/{idModule}` (#46)
+- ✅ DELETE `/notes/{numEtud}/{idModule}` (#47)
+- ✅ GET `/ajustements` (#48)
+- ✅ POST `/ajustements` (#49)
+- ✅ GET `/ajustements/{numEtud}/{idUE}` (#50)
+- ✅ PUT `/ajustements/{numEtud}/{idUE}` (#51)
+- ✅ DELETE `/ajustements/{numEtud}/{idUE}` (#52)
+
+**Administration API - Users, Roles & Permissions**
+
+- ✅ GET `/users` (#60)
+- ✅ POST `/users` (#61)
+- ✅ GET `/users/{id}` (#62)
+- ✅ PUT `/users/{id}` (#63)
+- ✅ DELETE `/users/{id}` (#64)
+- ✅ GET `/roles` (#65)
+- ✅ POST `/roles` (#66)
+- ✅ GET `/roles/{idRole}` (#67)
+- ✅ PUT `/roles/{idRole}` (#68)
+- ✅ DELETE `/roles/{idRole}` (#69)
+- ✅ GET `/permissions` (#70)
+
+---
+
+## 🎨 Design Reference
+
+**Figma Prototype**:
+https://www.figma.com/design/La79bsUsWnJCtMsrrt2zGd/Prototype?node-id=0-1
+
+This is the **final design specification** for the UI. All UI implementations
+should follow this design.
+
+---
+
+## 🚀 Development Guidelines
+
+### Getting Started
+
+```bash
+# Run tests
+deno task test
+
+# Start development server
+deno task start
+
+# Build for production
+deno task build
+
+# Format & lint
+deno task check
+```
+
+### Git Workflow
+
+1. Create branch: `git checkout -b PMPR-{ISSUE_ID}`
+2. Implement changes
+3. Run tests and linting
+4. Submit PR
+
+### Code Style
+
+- Format: Follow Deno defaults (enforced via `deno fmt`)
+- Linting: Fresh recommended rules
+- TypeScript strict mode enabled
+- Use Drizzle ORM for database operations
+
+### Testing
+
+3-level architecture — all 149 tests pass:
+
+- **Unit** (`tests/unit/`) — pure logic with mock DB + mock API, no real DB
+- **Integration** (`tests/integration/`) — Drizzle ORM direct on real DB
+- **E2E** (`tests/e2e/`) — Fresh handler + real DB (handler-level, not browser)
+
+Helpers in `tests/helpers/`:
+
+- `handler.ts` — builds fake Fresh contexts (`makeEmployeeContext`,
+  `makeJsonRequest`…)
+- `db_integration.ts` — seed functions + `truncateAll()` for test isolation
+- `db_mock.ts` / `api_mock.ts` — in-memory mocks for unit tests
+
+```bash
+deno task test                  # run all tests
+deno task test:coverage         # coverage report (terminal)
+deno task test:coverage:html    # coverage report (HTML → coverage/html/index.html)
+nix run nixpkgs#act -- -j unit --no-cache-server        # unit tests via GitHub Actions
+nix run nixpkgs#act -- -j integration --no-cache-server # integration + e2e via GitHub Actions
+```
+
+---
+
+## 📦 Key Dependencies
+
+- **fresh@1.7.3** - Web framework
+- **drizzle-orm@0.45.2** - ORM
+- **pg@8.20.0** - PostgreSQL driver
+- **@popov/jwt@1.0.1** - JWT utilities
+- **preact@10.22.0** - UI library
+- **happy-dom@16.0.0** - DOM testing
+
+---
+
+## 🔗 Related Resources
+
+- **Repository**: https://git.polytech.djalim.fr/djalim/PolyMPR
+- **Issue Tracker**: Gitea (via `tea` CLI)
+- **Wiki**: Check CONTRIBUTING.md for dev setup
+- **Database**: PostgreSQL (configured in `.env`)
+
+---
+
+## 💡 Important Notes
+
+1. **Only missing API**: `POST /notes/import-xlsx` (#44) — all other endpoints
+   are implemented.
+2. **Next priority**: UI pages (none built yet) — follow the Figma prototype.
+3. **Module Pattern**: Each module should follow the same pattern: routes, API
+   endpoints, components, and tests.
+4. **Permissions**: All admin operations should respect the ROLE_PERMISSION
+   system.
+5. **Fresh Conventions**: Routes use Fresh's file-based routing convention
+   (e.g., `routes/path/index.tsx`).
+6. **Drizzle `.where()` pitfall**: Always wrap multiple conditions with `and()`.
+   `.where(eq(a), eq(b))` silently ignores the second argument.

Dockerfile

@@ -1,9 +1,14 @@
 FROM denoland/deno:alpine
 
+RUN apk add --no-cache nodejs npm
+
 WORKDIR /app
 
+COPY package.json ./
+RUN npm install --omit=dev
+
 COPY . .
-RUN deno cache main.ts --allow-import flag
+RUN deno cache main.ts --allow-import
 RUN deno task build
 
 USER deno

bugs.md

@@ -0,0 +1,158 @@
+# Bug Report — PolyMPR
+
+> Généré le 2026-04-23
+
+---
+
+## 🔴 Critique
+
+### #1 — Schema mismatch : module mobility entièrement cassé
+
+**Fichier** : `routes/(apps)/mobility/api/insert_mobility.ts`
+
+Références à des colonnes inexistantes dans le schéma Drizzle :
+
+| Utilisé dans le code   | Colonne réelle     |
+| ---------------------- | ------------------ |
+| `students.userId`      | `students.numEtud` |
+| `students.firstName`   | `students.nom`     |
+| `students.lastName`    | `students.prenom`  |
+| `students.promotionId` | `students.idPromo` |
+| `promotions.endyear`   | `promotions.annee` |
+| `promotions.current`   | _(n'existe pas)_   |
+
+Le module crashe à l'exécution. À corriger en alignant les noms de colonnes avec
+le schéma.
+
+---
+
+### #2 — Auth manquante sur de nombreux endpoints
+
+Les endpoints suivants n'ont aucune vérification `eduPersonPrimaryAffiliation` :
+
+- `routes/(apps)/notes/api/notes.ts` (GET, POST)
+- `routes/(apps)/notes/api/ue-modules.ts` (GET, POST)
+- `routes/(apps)/notes/api/ues.ts` (GET, POST)
+- `routes/(apps)/notes/api/ues/[idUE].ts` (GET, PUT, DELETE)
+- `routes/(apps)/admin/api/users.ts` (GET, POST)
+- `routes/(apps)/admin/api/users/[id].ts` (GET, PUT, DELETE)
+- `routes/(apps)/admin/api/modules/[idModule].ts` (GET, PUT, DELETE)
+- `routes/(apps)/admin/api/roles.ts` (GET, POST)
+- `routes/(apps)/admin/api/roles/[idRole].ts` (GET, PUT, DELETE)
+- `routes/(apps)/admin/api/permissions.ts` (GET)
+- `routes/(apps)/mobility/api/insert_mobility.ts`
+
+Tous ces endpoints exposent des données sensibles sans vérifier les permissions.
+
+---
+
+## 🟠 Haut
+
+### #3 — Bug Drizzle ORM : `.where()` avec plusieurs `eq()` sans `and()`
+
+**Fichier** : `routes/(apps)/notes/api/ajustements/[numEtud]/[idUE].ts` — lignes
+34, 72, 100
+
+`.where()` n'accepte qu'un seul argument. Passer plusieurs `eq()` séparés par
+des virgules ne génère pas le SQL attendu (seule la première condition est prise
+en compte).
+
+```ts
+// ❌ Incorrect
+.where(eq(ajustements.numEtud, numEtud), eq(ajustements.idUE, idUE))
+
+// ✅ Correct
+.where(and(eq(ajustements.numEtud, numEtud), eq(ajustements.idUE, idUE)))
+```
+
+---
+
+### #4 — Bug Drizzle ORM : `.where()` à 3 conditions sans `and()`
+
+**Fichier** :
+`routes/(apps)/notes/api/ue-modules/[idModule]/[idUE]/[idPromo].ts` — handler
+GET (~ligne 41)
+
+Même problème que #3, mais avec 3 conditions. Les handlers PUT et DELETE ont
+déjà `and()`, seul le GET est affecté.
+
+```ts
+// ❌ Incorrect
+.where(
+  eq(ueModules.idModule, idModule),
+  eq(ueModules.idUE, idUE),
+  eq(ueModules.idPromo, idPromo),
+)
+
+// ✅ Correct
+.where(
+  and(
+    eq(ueModules.idModule, idModule),
+    eq(ueModules.idUE, idUE),
+    eq(ueModules.idPromo, idPromo),
+  ),
+)
+```
+
+---
+
+## 🟡 Moyen
+
+### #5 — `and()` passé avec des valeurs `undefined`
+
+**Fichier** : `routes/(apps)/notes/api/ue-modules.ts`
+
+```ts
+and(
+  idPromo ? eq(ueModules.idPromo, idPromo) : undefined,
+  idUE ? eq(ueModules.idUE, idUE) : undefined,
+);
+```
+
+Drizzle tolère les `undefined` dans `and()` dans certaines versions, mais ce
+n'est pas garanti. Mieux vaut construire les conditions dynamiquement avant de
+les passer.
+
+---
+
+### #6 — Validation `!numEtud` rejette faussement `0`
+
+**Fichier** : `routes/(apps)/notes/api/notes.ts` — handler POST
+
+```ts
+// ❌ Rejette numEtud = 0
+if (note === undefined || !numEtud || !idModule)
+
+// ✅ Correct
+if (note === undefined || numEtud === undefined || numEtud === null || !idModule)
+```
+
+---
+
+### #7 — `Number(idRole)` sans vérification `isNaN`
+
+**Fichier** : `routes/(apps)/admin/api/users.ts`
+
+Si `idRole` est une chaîne non numérique, `Number()` retourne `NaN` ce qui
+provoque une erreur SQL.
+
+```ts
+// ❌ Pas de vérification
+const rows = idRole
+  ? await db.select().from(users).where(eq(users.idRole, Number(idRole)))
+  : await db.select().from(users);
+
+// ✅ Valider avant usage
+const role = Number(idRole);
+if (isNaN(role)) return new Response(..., { status: 400 });
+```
+
+---
+
+### #8 — Réponses d'erreur en texte brut au lieu de JSON
+
+**Fichier** : `routes/(apps)/notes/api/notes.ts`
+
+Certaines réponses d'erreur retournent une string sans
+`content-type: application/json`, incohérent avec le reste de l'API qui retourne
+`{ error: "..." }`.

bun.lock

@@ -0,0 +1,233 @@
+{
+  "lockfileVersion": 1,
+  "configVersion": 1,
+  "workspaces": {
+    "": {
+      "dependencies": {
+        "dotenv": "^17.4.0",
+        "drizzle-orm": "^0.45.2",
+        "pg": "^8.20.0",
+      },
+      "devDependencies": {
+        "@types/pg": "^8.20.0",
+        "drizzle-kit": "^0.31.10",
+        "tsx": "^4.21.0",
+      },
+    },
+  },
+  "packages": {
+    "@drizzle-team/brocli": ["@drizzle-team/brocli@0.10.2", "", {}, "sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w=="],
+
+    "@esbuild-kit/core-utils": ["@esbuild-kit/core-utils@3.3.2", "", { "dependencies": { "esbuild": "~0.18.20", "source-map-support": "^0.5.21" } }, "sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ=="],
+
+    "@esbuild-kit/esm-loader": ["@esbuild-kit/esm-loader@2.6.5", "", { "dependencies": { "@esbuild-kit/core-utils": "^3.3.2", "get-tsconfig": "^4.7.0" } }, "sha512-FxEMIkJKnodyA1OaCUoEvbYRkoZlLZ4d/eXFu9Fh8CbBBgP5EmZxrfTRyN0qpXZ4vOvqnE5YdRdcrmUUXuU+dA=="],
+
+    "@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.25.12", "", { "os": "aix", "cpu": "ppc64" }, "sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA=="],
+
+    "@esbuild/android-arm": ["@esbuild/android-arm@0.25.12", "", { "os": "android", "cpu": "arm" }, "sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg=="],
+
+    "@esbuild/android-arm64": ["@esbuild/android-arm64@0.25.12", "", { "os": "android", "cpu": "arm64" }, "sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg=="],
+
+    "@esbuild/android-x64": ["@esbuild/android-x64@0.25.12", "", { "os": "android", "cpu": "x64" }, "sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg=="],
+
+    "@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.25.12", "", { "os": "darwin", "cpu": "arm64" }, "sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg=="],
+
+    "@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.25.12", "", { "os": "darwin", "cpu": "x64" }, "sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA=="],
+
+    "@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.25.12", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg=="],
+
+    "@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.25.12", "", { "os": "freebsd", "cpu": "x64" }, "sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ=="],
+
+    "@esbuild/linux-arm": ["@esbuild/linux-arm@0.25.12", "", { "os": "linux", "cpu": "arm" }, "sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw=="],
+
+    "@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.25.12", "", { "os": "linux", "cpu": "arm64" }, "sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ=="],
+
+    "@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.25.12", "", { "os": "linux", "cpu": "ia32" }, "sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA=="],
+
+    "@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng=="],
+
+    "@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw=="],
+
+    "@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.25.12", "", { "os": "linux", "cpu": "ppc64" }, "sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA=="],
+
+    "@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.25.12", "", { "os": "linux", "cpu": "none" }, "sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w=="],
+
+    "@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.25.12", "", { "os": "linux", "cpu": "s390x" }, "sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg=="],
+
+    "@esbuild/linux-x64": ["@esbuild/linux-x64@0.25.12", "", { "os": "linux", "cpu": "x64" }, "sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw=="],
+
+    "@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg=="],
+
+    "@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.25.12", "", { "os": "none", "cpu": "x64" }, "sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ=="],
+
+    "@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.25.12", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A=="],
+
+    "@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.25.12", "", { "os": "openbsd", "cpu": "x64" }, "sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw=="],
+
+    "@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.25.12", "", { "os": "none", "cpu": "arm64" }, "sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg=="],
+
+    "@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.25.12", "", { "os": "sunos", "cpu": "x64" }, "sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w=="],
+
+    "@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.25.12", "", { "os": "win32", "cpu": "arm64" }, "sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg=="],
+
+    "@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.25.12", "", { "os": "win32", "cpu": "ia32" }, "sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ=="],
+
+    "@esbuild/win32-x64": ["@esbuild/win32-x64@0.25.12", "", { "os": "win32", "cpu": "x64" }, "sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA=="],
+
+    "@types/node": ["@types/node@25.5.0", "", { "dependencies": { "undici-types": "~7.18.0" } }, "sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw=="],
+
+    "@types/pg": ["@types/pg@8.20.0", "", { "dependencies": { "@types/node": "*", "pg-protocol": "*", "pg-types": "^2.2.0" } }, "sha512-bEPFOaMAHTEP1EzpvHTbmwR8UsFyHSKsRisLIHVMXnpNefSbGA1bD6CVy+qKjGSqmZqNqBDV2azOBo8TgkcVow=="],
+
+    "buffer-from": ["buffer-from@1.1.2", "", {}, "sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ=="],
+
+    "dotenv": ["dotenv@17.4.0", "", {}, "sha512-kCKF62fwtzwYm0IGBNjRUjtJgMfGapII+FslMHIjMR5KTnwEmBmWLDRSnc3XSNP8bNy34tekgQyDT0hr7pERRQ=="],
+
+    "drizzle-kit": ["drizzle-kit@0.31.10", "", { "dependencies": { "@drizzle-team/brocli": "^0.10.2", "@esbuild-kit/esm-loader": "^2.5.5", "esbuild": "^0.25.4", "tsx": "^4.21.0" }, "bin": { "drizzle-kit": "bin.cjs" } }, "sha512-7OZcmQUrdGI+DUNNsKBn1aW8qSoKuTH7d0mYgSP8bAzdFzKoovxEFnoGQp2dVs82EOJeYycqRtciopszwUf8bw=="],
+
+    "drizzle-orm": ["drizzle-orm@0.45.2", "", { "peerDependencies": { "@aws-sdk/client-rds-data": ">=3", "@cloudflare/workers-types": ">=4", "@electric-sql/pglite": ">=0.2.0", "@libsql/client": ">=0.10.0", "@libsql/client-wasm": ">=0.10.0", "@neondatabase/serverless": ">=0.10.0", "@op-engineering/op-sqlite": ">=2", "@opentelemetry/api": "^1.4.1", "@planetscale/database": ">=1.13", "@prisma/client": "*", "@tidbcloud/serverless": "*", "@types/better-sqlite3": "*", "@types/pg": "*", "@types/sql.js": "*", "@upstash/redis": ">=1.34.7", "@vercel/postgres": ">=0.8.0", "@xata.io/client": "*", "better-sqlite3": ">=7", "bun-types": "*", "expo-sqlite": ">=14.0.0", "gel": ">=2", "knex": "*", "kysely": "*", "mysql2": ">=2", "pg": ">=8", "postgres": ">=3", "sql.js": ">=1", "sqlite3": ">=5" }, "optionalPeers": ["@aws-sdk/client-rds-data", "@cloudflare/workers-types", "@electric-sql/pglite", "@libsql/client", "@libsql/client-wasm", "@neondatabase/serverless", "@op-engineering/op-sqlite", "@opentelemetry/api", "@planetscale/database", "@prisma/client", "@tidbcloud/serverless", "@types/better-sqlite3", "@types/pg", "@types/sql.js", "@upstash/redis", "@vercel/postgres", "@xata.io/client", "better-sqlite3", "bun-types", "expo-sqlite", "gel", "knex", "kysely", "mysql2", "pg", "postgres", "sql.js", "sqlite3"] }, "sha512-kY0BSaTNYWnoDMVoyY8uxmyHjpJW1geOmBMdSSicKo9CIIWkSxMIj2rkeSR51b8KAPB7m+qysjuHme5nKP+E5Q=="],
+
+    "esbuild": ["esbuild@0.25.12", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.25.12", "@esbuild/android-arm": "0.25.12", "@esbuild/android-arm64": "0.25.12", "@esbuild/android-x64": "0.25.12", "@esbuild/darwin-arm64": "0.25.12", "@esbuild/darwin-x64": "0.25.12", "@esbuild/freebsd-arm64": "0.25.12", "@esbuild/freebsd-x64": "0.25.12", "@esbuild/linux-arm": "0.25.12", "@esbuild/linux-arm64": "0.25.12", "@esbuild/linux-ia32": "0.25.12", "@esbuild/linux-loong64": "0.25.12", "@esbuild/linux-mips64el": "0.25.12", "@esbuild/linux-ppc64": "0.25.12", "@esbuild/linux-riscv64": "0.25.12", "@esbuild/linux-s390x": "0.25.12", "@esbuild/linux-x64": "0.25.12", "@esbuild/netbsd-arm64": "0.25.12", "@esbuild/netbsd-x64": "0.25.12", "@esbuild/openbsd-arm64": "0.25.12", "@esbuild/openbsd-x64": "0.25.12", "@esbuild/openharmony-arm64": "0.25.12", "@esbuild/sunos-x64": "0.25.12", "@esbuild/win32-arm64": "0.25.12", "@esbuild/win32-ia32": "0.25.12", "@esbuild/win32-x64": "0.25.12" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg=="],
+
+    "fsevents": ["fsevents@2.3.3", "", { "os": "darwin" }, "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw=="],
+
+    "get-tsconfig": ["get-tsconfig@4.13.7", "", { "dependencies": { "resolve-pkg-maps": "^1.0.0" } }, "sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q=="],
+
+    "pg": ["pg@8.20.0", "", { "dependencies": { "pg-connection-string": "^2.12.0", "pg-pool": "^3.13.0", "pg-protocol": "^1.13.0", "pg-types": "2.2.0", "pgpass": "1.0.5" }, "optionalDependencies": { "pg-cloudflare": "^1.3.0" }, "peerDependencies": { "pg-native": ">=3.0.1" }, "optionalPeers": ["pg-native"] }, "sha512-ldhMxz2r8fl/6QkXnBD3CR9/xg694oT6DZQ2s6c/RI28OjtSOpxnPrUCGOBJ46RCUxcWdx3p6kw/xnDHjKvaRA=="],
+
+    "pg-cloudflare": ["pg-cloudflare@1.3.0", "", {}, "sha512-6lswVVSztmHiRtD6I8hw4qP/nDm1EJbKMRhf3HCYaqud7frGysPv7FYJ5noZQdhQtN2xJnimfMtvQq21pdbzyQ=="],
+
+    "pg-connection-string": ["pg-connection-string@2.12.0", "", {}, "sha512-U7qg+bpswf3Cs5xLzRqbXbQl85ng0mfSV/J0nnA31MCLgvEaAo7CIhmeyrmJpOr7o+zm0rXK+hNnT5l9RHkCkQ=="],
+
+    "pg-int8": ["pg-int8@1.0.1", "", {}, "sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw=="],
+
+    "pg-pool": ["pg-pool@3.13.0", "", { "peerDependencies": { "pg": ">=8.0" } }, "sha512-gB+R+Xud1gLFuRD/QgOIgGOBE2KCQPaPwkzBBGC9oG69pHTkhQeIuejVIk3/cnDyX39av2AxomQiyPT13WKHQA=="],
+
+    "pg-protocol": ["pg-protocol@1.13.0", "", {}, "sha512-zzdvXfS6v89r6v7OcFCHfHlyG/wvry1ALxZo4LqgUoy7W9xhBDMaqOuMiF3qEV45VqsN6rdlcehHrfDtlCPc8w=="],
+
+    "pg-types": ["pg-types@2.2.0", "", { "dependencies": { "pg-int8": "1.0.1", "postgres-array": "~2.0.0", "postgres-bytea": "~1.0.0", "postgres-date": "~1.0.4", "postgres-interval": "^1.1.0" } }, "sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA=="],
+
+    "pgpass": ["pgpass@1.0.5", "", { "dependencies": { "split2": "^4.1.0" } }, "sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug=="],
+
+    "postgres-array": ["postgres-array@2.0.0", "", {}, "sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA=="],
+
+    "postgres-bytea": ["postgres-bytea@1.0.1", "", {}, "sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ=="],
+
+    "postgres-date": ["postgres-date@1.0.7", "", {}, "sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q=="],
+
+    "postgres-interval": ["postgres-interval@1.2.0", "", { "dependencies": { "xtend": "^4.0.0" } }, "sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ=="],
+
+    "resolve-pkg-maps": ["resolve-pkg-maps@1.0.0", "", {}, "sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw=="],
+
+    "source-map": ["source-map@0.6.1", "", {}, "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g=="],
+
+    "source-map-support": ["source-map-support@0.5.21", "", { "dependencies": { "buffer-from": "^1.0.0", "source-map": "^0.6.0" } }, "sha512-uBHU3L3czsIyYXKX88fdrGovxdSCoTGDRZ6SYXtSRxLZUzHg5P/66Ht6uoUlHu9EZod+inXhKo3qQgwXUT/y1w=="],
+
+    "split2": ["split2@4.2.0", "", {}, "sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg=="],
+
+    "tsx": ["tsx@4.21.0", "", { "dependencies": { "esbuild": "~0.27.0", "get-tsconfig": "^4.7.5" }, "optionalDependencies": { "fsevents": "~2.3.3" }, "bin": { "tsx": "dist/cli.mjs" } }, "sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw=="],
+
+    "undici-types": ["undici-types@7.18.2", "", {}, "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w=="],
+
+    "xtend": ["xtend@4.0.2", "", {}, "sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ=="],
+
+    "@esbuild-kit/core-utils/esbuild": ["esbuild@0.18.20", "", { "optionalDependencies": { "@esbuild/android-arm": "0.18.20", "@esbuild/android-arm64": "0.18.20", "@esbuild/android-x64": "0.18.20", "@esbuild/darwin-arm64": "0.18.20", "@esbuild/darwin-x64": "0.18.20", "@esbuild/freebsd-arm64": "0.18.20", "@esbuild/freebsd-x64": "0.18.20", "@esbuild/linux-arm": "0.18.20", "@esbuild/linux-arm64": "0.18.20", "@esbuild/linux-ia32": "0.18.20", "@esbuild/linux-loong64": "0.18.20", "@esbuild/linux-mips64el": "0.18.20", "@esbuild/linux-ppc64": "0.18.20", "@esbuild/linux-riscv64": "0.18.20", "@esbuild/linux-s390x": "0.18.20", "@esbuild/linux-x64": "0.18.20", "@esbuild/netbsd-x64": "0.18.20", "@esbuild/openbsd-x64": "0.18.20", "@esbuild/sunos-x64": "0.18.20", "@esbuild/win32-arm64": "0.18.20", "@esbuild/win32-ia32": "0.18.20", "@esbuild/win32-x64": "0.18.20" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-ceqxoedUrcayh7Y7ZX6NdbbDzGROiyVBgC4PriJThBKSVPWnnFHZAkfI1lJT8QFkOwH4qOS2SJkS4wvpGl8BpA=="],
+
+    "tsx/esbuild": ["esbuild@0.27.7", "", { "optionalDependencies": { "@esbuild/aix-ppc64": "0.27.7", "@esbuild/android-arm": "0.27.7", "@esbuild/android-arm64": "0.27.7", "@esbuild/android-x64": "0.27.7", "@esbuild/darwin-arm64": "0.27.7", "@esbuild/darwin-x64": "0.27.7", "@esbuild/freebsd-arm64": "0.27.7", "@esbuild/freebsd-x64": "0.27.7", "@esbuild/linux-arm": "0.27.7", "@esbuild/linux-arm64": "0.27.7", "@esbuild/linux-ia32": "0.27.7", "@esbuild/linux-loong64": "0.27.7", "@esbuild/linux-mips64el": "0.27.7", "@esbuild/linux-ppc64": "0.27.7", "@esbuild/linux-riscv64": "0.27.7", "@esbuild/linux-s390x": "0.27.7", "@esbuild/linux-x64": "0.27.7", "@esbuild/netbsd-arm64": "0.27.7", "@esbuild/netbsd-x64": "0.27.7", "@esbuild/openbsd-arm64": "0.27.7", "@esbuild/openbsd-x64": "0.27.7", "@esbuild/openharmony-arm64": "0.27.7", "@esbuild/sunos-x64": "0.27.7", "@esbuild/win32-arm64": "0.27.7", "@esbuild/win32-ia32": "0.27.7", "@esbuild/win32-x64": "0.27.7" }, "bin": { "esbuild": "bin/esbuild" } }, "sha512-IxpibTjyVnmrIQo5aqNpCgoACA/dTKLTlhMHihVHhdkxKyPO1uBBthumT0rdHmcsk9uMonIWS0m4FljWzILh3w=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.18.20", "", { "os": "android", "cpu": "arm" }, "sha512-fyi7TDI/ijKKNZTUJAQqiG5T7YjJXgnzkURqmGj13C6dCqckZBLdl4h7bkhHt/t0WP+zO9/zwroDvANaOqO5Sw=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.18.20", "", { "os": "android", "cpu": "arm64" }, "sha512-Nz4rJcchGDtENV0eMKUNa6L12zz2zBDXuhj/Vjh18zGqB44Bi7MBMSXjgunJgjRhCmKOjnPuZp4Mb6OKqtMHLQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.18.20", "", { "os": "android", "cpu": "x64" }, "sha512-8GDdlePJA8D6zlZYJV/jnrRAi6rOiNaCC/JclcXpB+KIuvfBN4owLtgzY2bsxnx666XjJx2kDPUmnTtR8qKQUg=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.18.20", "", { "os": "darwin", "cpu": "arm64" }, "sha512-bxRHW5kHU38zS2lPTPOyuyTm+S+eobPUnTNkdJEfAddYgEcll4xkT8DB9d2008DtTbl7uJag2HuE5NZAZgnNEA=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.18.20", "", { "os": "darwin", "cpu": "x64" }, "sha512-pc5gxlMDxzm513qPGbCbDukOdsGtKhfxD1zJKXjCCcU7ju50O7MeAZ8c4krSJcOIJGFR+qx21yMMVYwiQvyTyQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.18.20", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-yqDQHy4QHevpMAaxhhIwYPMv1NECwOvIpGCZkECn8w2WFHXjEwrBn3CeNIYsibZ/iZEUemj++M26W3cNR5h+Tw=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.18.20", "", { "os": "freebsd", "cpu": "x64" }, "sha512-tgWRPPuQsd3RmBZwarGVHZQvtzfEBOreNuxEMKFcd5DaDn2PbBxfwLcj4+aenoh7ctXcbXmOQIn8HI6mCSw5MQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.18.20", "", { "os": "linux", "cpu": "arm" }, "sha512-/5bHkMWnq1EgKr1V+Ybz3s1hWXok7mDFUMQ4cG10AfW3wL02PSZi5kFpYKrptDsgb2WAJIvRcDm+qIvXf/apvg=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.18.20", "", { "os": "linux", "cpu": "arm64" }, "sha512-2YbscF+UL7SQAVIpnWvYwM+3LskyDmPhe31pE7/aoTMFKKzIc9lLbyGUpmmb8a8AixOL61sQ/mFh3jEjHYFvdA=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.18.20", "", { "os": "linux", "cpu": "ia32" }, "sha512-P4etWwq6IsReT0E1KHU40bOnzMHoH73aXp96Fs8TIT6z9Hu8G6+0SHSw9i2isWrD2nbx2qo5yUqACgdfVGx7TA=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-nXW8nqBTrOpDLPgPY9uV+/1DjxoQ7DoB2N8eocyq8I9XuqJ7BiAMDMf9n1xZM9TgW0J8zrquIb/A7s3BJv7rjg=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-d5NeaXZcHp8PzYy5VnXV3VSd2D328Zb+9dEq5HE6bw6+N86JVPExrA6O68OPwobntbNJ0pzCpUFZTo3w0GyetQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.18.20", "", { "os": "linux", "cpu": "ppc64" }, "sha512-WHPyeScRNcmANnLQkq6AfyXRFr5D6N2sKgkFo2FqguP44Nw2eyDlbTdZwd9GYk98DZG9QItIiTlFLHJHjxP3FA=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.18.20", "", { "os": "linux", "cpu": "none" }, "sha512-WSxo6h5ecI5XH34KC7w5veNnKkju3zBRLEQNY7mv5mtBmrP/MjNBCAlsM2u5hDBlS3NGcTQpoBvRzqBcRtpq1A=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.18.20", "", { "os": "linux", "cpu": "s390x" }, "sha512-+8231GMs3mAEth6Ja1iK0a1sQ3ohfcpzpRLH8uuc5/KVDFneH6jtAJLFGafpzpMRO6DzJ6AvXKze9LfFMrIHVQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.18.20", "", { "os": "linux", "cpu": "x64" }, "sha512-UYqiqemphJcNsFEskc73jQ7B9jgwjWrSayxawS6UVFZGWrAAtkzjxSqnoclCXxWtfwLdzU+vTpcNYhpn43uP1w=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.18.20", "", { "os": "none", "cpu": "x64" }, "sha512-iO1c++VP6xUBUmltHZoMtCUdPlnPGdBom6IrO4gyKPFFVBKioIImVooR5I83nTew5UOYrk3gIJhbZh8X44y06A=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.18.20", "", { "os": "openbsd", "cpu": "x64" }, "sha512-e5e4YSsuQfX4cxcygw/UCPIEP6wbIL+se3sxPdCiMbFLBWu0eiZOJ7WoD+ptCLrmjZBK1Wk7I6D/I3NglUGOxg=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.18.20", "", { "os": "sunos", "cpu": "x64" }, "sha512-kDbFRFp0YpTQVVrqUd5FTYmWo45zGaXe0X8E1G/LKFC0v8x0vWrhOWSLITcCn63lmZIxfOMXtCfti/RxN/0wnQ=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.18.20", "", { "os": "win32", "cpu": "arm64" }, "sha512-ddYFR6ItYgoaq4v4JmQQaAI5s7npztfV4Ag6NrhiaW0RrnOXqBkgwZLofVTlq1daVTQNhtI5oieTvkRPfZrePg=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.18.20", "", { "os": "win32", "cpu": "ia32" }, "sha512-Wv7QBi3ID/rROT08SABTS7eV4hX26sVduqDOTe1MvGMjNd3EjOz4b7zeexIR62GTIEKrfJXKL9LFxTYgkyeu7g=="],
+
+    "@esbuild-kit/core-utils/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.18.20", "", { "os": "win32", "cpu": "x64" }, "sha512-kTdfRcSiDfQca/y9QIkng02avJ+NCaQvrMejlsB3RRv5sE9rRoeBPISaZpKxHELzRxZyLvNts1P27W3wV+8geQ=="],
+
+    "tsx/esbuild/@esbuild/aix-ppc64": ["@esbuild/aix-ppc64@0.27.7", "", { "os": "aix", "cpu": "ppc64" }, "sha512-EKX3Qwmhz1eMdEJokhALr0YiD0lhQNwDqkPYyPhiSwKrh7/4KRjQc04sZ8db+5DVVnZ1LmbNDI1uAMPEUBnQPg=="],
+
+    "tsx/esbuild/@esbuild/android-arm": ["@esbuild/android-arm@0.27.7", "", { "os": "android", "cpu": "arm" }, "sha512-jbPXvB4Yj2yBV7HUfE2KHe4GJX51QplCN1pGbYjvsyCZbQmies29EoJbkEc+vYuU5o45AfQn37vZlyXy4YJ8RQ=="],
+
+    "tsx/esbuild/@esbuild/android-arm64": ["@esbuild/android-arm64@0.27.7", "", { "os": "android", "cpu": "arm64" }, "sha512-62dPZHpIXzvChfvfLJow3q5dDtiNMkwiRzPylSCfriLvZeq0a1bWChrGx/BbUbPwOrsWKMn8idSllklzBy+dgQ=="],
+
+    "tsx/esbuild/@esbuild/android-x64": ["@esbuild/android-x64@0.27.7", "", { "os": "android", "cpu": "x64" }, "sha512-x5VpMODneVDb70PYV2VQOmIUUiBtY3D3mPBG8NxVk5CogneYhkR7MmM3yR/uMdITLrC1ml/NV1rj4bMJuy9MCg=="],
+
+    "tsx/esbuild/@esbuild/darwin-arm64": ["@esbuild/darwin-arm64@0.27.7", "", { "os": "darwin", "cpu": "arm64" }, "sha512-5lckdqeuBPlKUwvoCXIgI2D9/ABmPq3Rdp7IfL70393YgaASt7tbju3Ac+ePVi3KDH6N2RqePfHnXkaDtY9fkw=="],
+
+    "tsx/esbuild/@esbuild/darwin-x64": ["@esbuild/darwin-x64@0.27.7", "", { "os": "darwin", "cpu": "x64" }, "sha512-rYnXrKcXuT7Z+WL5K980jVFdvVKhCHhUwid+dDYQpH+qu+TefcomiMAJpIiC2EM3Rjtq0sO3StMV/+3w3MyyqQ=="],
+
+    "tsx/esbuild/@esbuild/freebsd-arm64": ["@esbuild/freebsd-arm64@0.27.7", "", { "os": "freebsd", "cpu": "arm64" }, "sha512-B48PqeCsEgOtzME2GbNM2roU29AMTuOIN91dsMO30t+Ydis3z/3Ngoj5hhnsOSSwNzS+6JppqWsuhTp6E82l2w=="],
+
+    "tsx/esbuild/@esbuild/freebsd-x64": ["@esbuild/freebsd-x64@0.27.7", "", { "os": "freebsd", "cpu": "x64" }, "sha512-jOBDK5XEjA4m5IJK3bpAQF9/Lelu/Z9ZcdhTRLf4cajlB+8VEhFFRjWgfy3M1O4rO2GQ/b2dLwCUGpiF/eATNQ=="],
+
+    "tsx/esbuild/@esbuild/linux-arm": ["@esbuild/linux-arm@0.27.7", "", { "os": "linux", "cpu": "arm" }, "sha512-RkT/YXYBTSULo3+af8Ib0ykH8u2MBh57o7q/DAs3lTJlyVQkgQvlrPTnjIzzRPQyavxtPtfg0EopvDyIt0j1rA=="],
+
+    "tsx/esbuild/@esbuild/linux-arm64": ["@esbuild/linux-arm64@0.27.7", "", { "os": "linux", "cpu": "arm64" }, "sha512-RZPHBoxXuNnPQO9rvjh5jdkRmVizktkT7TCDkDmQ0W2SwHInKCAV95GRuvdSvA7w4VMwfCjUiPwDi0ZO6Nfe9A=="],
+
+    "tsx/esbuild/@esbuild/linux-ia32": ["@esbuild/linux-ia32@0.27.7", "", { "os": "linux", "cpu": "ia32" }, "sha512-GA48aKNkyQDbd3KtkplYWT102C5sn/EZTY4XROkxONgruHPU72l+gW+FfF8tf2cFjeHaRbWpOYa/uRBz/Xq1Pg=="],
+
+    "tsx/esbuild/@esbuild/linux-loong64": ["@esbuild/linux-loong64@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-a4POruNM2oWsD4WKvBSEKGIiWQF8fZOAsycHOt6JBpZ+JN2n2JH9WAv56SOyu9X5IqAjqSIPTaJkqN8F7XOQ5Q=="],
+
+    "tsx/esbuild/@esbuild/linux-mips64el": ["@esbuild/linux-mips64el@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-KabT5I6StirGfIz0FMgl1I+R1H73Gp0ofL9A3nG3i/cYFJzKHhouBV5VWK1CSgKvVaG4q1RNpCTR2LuTVB3fIw=="],
+
+    "tsx/esbuild/@esbuild/linux-ppc64": ["@esbuild/linux-ppc64@0.27.7", "", { "os": "linux", "cpu": "ppc64" }, "sha512-gRsL4x6wsGHGRqhtI+ifpN/vpOFTQtnbsupUF5R5YTAg+y/lKelYR1hXbnBdzDjGbMYjVJLJTd2OFmMewAgwlQ=="],
+
+    "tsx/esbuild/@esbuild/linux-riscv64": ["@esbuild/linux-riscv64@0.27.7", "", { "os": "linux", "cpu": "none" }, "sha512-hL25LbxO1QOngGzu2U5xeXtxXcW+/GvMN3ejANqXkxZ/opySAZMrc+9LY/WyjAan41unrR3YrmtTsUpwT66InQ=="],
+
+    "tsx/esbuild/@esbuild/linux-s390x": ["@esbuild/linux-s390x@0.27.7", "", { "os": "linux", "cpu": "s390x" }, "sha512-2k8go8Ycu1Kb46vEelhu1vqEP+UeRVj2zY1pSuPdgvbd5ykAw82Lrro28vXUrRmzEsUV0NzCf54yARIK8r0fdw=="],
+
+    "tsx/esbuild/@esbuild/linux-x64": ["@esbuild/linux-x64@0.27.7", "", { "os": "linux", "cpu": "x64" }, "sha512-hzznmADPt+OmsYzw1EE33ccA+HPdIqiCRq7cQeL1Jlq2gb1+OyWBkMCrYGBJ+sxVzve2ZJEVeePbLM2iEIZSxA=="],
+
+    "tsx/esbuild/@esbuild/netbsd-arm64": ["@esbuild/netbsd-arm64@0.27.7", "", { "os": "none", "cpu": "arm64" }, "sha512-b6pqtrQdigZBwZxAn1UpazEisvwaIDvdbMbmrly7cDTMFnw/+3lVxxCTGOrkPVnsYIosJJXAsILG9XcQS+Yu6w=="],
+
+    "tsx/esbuild/@esbuild/netbsd-x64": ["@esbuild/netbsd-x64@0.27.7", "", { "os": "none", "cpu": "x64" }, "sha512-OfatkLojr6U+WN5EDYuoQhtM+1xco+/6FSzJJnuWiUw5eVcicbyK3dq5EeV/QHT1uy6GoDhGbFpprUiHUYggrw=="],
+
+    "tsx/esbuild/@esbuild/openbsd-arm64": ["@esbuild/openbsd-arm64@0.27.7", "", { "os": "openbsd", "cpu": "arm64" }, "sha512-AFuojMQTxAz75Fo8idVcqoQWEHIXFRbOc1TrVcFSgCZtQfSdc1RXgB3tjOn/krRHENUB4j00bfGjyl2mJrU37A=="],
+
+    "tsx/esbuild/@esbuild/openbsd-x64": ["@esbuild/openbsd-x64@0.27.7", "", { "os": "openbsd", "cpu": "x64" }, "sha512-+A1NJmfM8WNDv5CLVQYJ5PshuRm/4cI6WMZRg1by1GwPIQPCTs1GLEUHwiiQGT5zDdyLiRM/l1G0Pv54gvtKIg=="],
+
+    "tsx/esbuild/@esbuild/openharmony-arm64": ["@esbuild/openharmony-arm64@0.27.7", "", { "os": "none", "cpu": "arm64" }, "sha512-+KrvYb/C8zA9CU/g0sR6w2RBw7IGc5J2BPnc3dYc5VJxHCSF1yNMxTV5LQ7GuKteQXZtspjFbiuW5/dOj7H4Yw=="],
+
+    "tsx/esbuild/@esbuild/sunos-x64": ["@esbuild/sunos-x64@0.27.7", "", { "os": "sunos", "cpu": "x64" }, "sha512-ikktIhFBzQNt/QDyOL580ti9+5mL/YZeUPKU2ivGtGjdTYoqz6jObj6nOMfhASpS4GU4Q/Clh1QtxWAvcYKamA=="],
+
+    "tsx/esbuild/@esbuild/win32-arm64": ["@esbuild/win32-arm64@0.27.7", "", { "os": "win32", "cpu": "arm64" }, "sha512-7yRhbHvPqSpRUV7Q20VuDwbjW5kIMwTHpptuUzV+AA46kiPze5Z7qgt6CLCK3pWFrHeNfDd1VKgyP4O+ng17CA=="],
+
+    "tsx/esbuild/@esbuild/win32-ia32": ["@esbuild/win32-ia32@0.27.7", "", { "os": "win32", "cpu": "ia32" }, "sha512-SmwKXe6VHIyZYbBLJrhOoCJRB/Z1tckzmgTLfFYOfpMAx63BJEaL9ExI8x7v0oAO3Zh6D/Oi1gVxEYr5oUCFhw=="],
+
+    "tsx/esbuild/@esbuild/win32-x64": ["@esbuild/win32-x64@0.27.7", "", { "os": "win32", "cpu": "x64" }, "sha512-56hiAJPhwQ1R4i+21FVF7V8kSD5zZTdHcVuRFMW0hn753vVfQN8xlx4uOPT4xoGH0Z/oVATuR82AiqSTDIpaHg=="],
+  }
+}

compose.prod.yml

@@ -0,0 +1,38 @@
+services:
+  db:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_PASSWORD: ${POSTGRES_PASS}
+      POSTGRES_USER: ${POSTGRES_USER:-postgres}
+      POSTGRES_DB: ${POSTGRES_DB:-polympr}
+    volumes:
+      - db_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-postgres}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  migrate:
+    image: registry.docker.polytech.djalim.fr/polympr:latest
+    working_dir: /app
+    restart: "no"
+    command: ["node", "node_modules/.bin/drizzle-kit", "migrate"]
+    env_file: .env
+    depends_on:
+      db:
+        condition: service_healthy
+
+  app:
+    image: registry.docker.polytech.djalim.fr/polympr:latest
+    restart: unless-stopped
+    ports:
+      - "4430:443"
+    env_file: .env
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+
+volumes:
+  db_data:

compose.test.yml

@@ -0,0 +1,56 @@
+services:
+  db:
+    image: postgres:17-alpine
+    restart: unless-stopped
+    environment:
+      POSTGRES_PASSWORD: testpass
+      POSTGRES_USER: postgres
+      POSTGRES_DB: polympr_test
+    volumes:
+      - db_data_test:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U postgres"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+  migrate:
+    image: node:alpine
+    working_dir: /app
+    restart: "no"
+    volumes:
+      - .:/app
+    command: node_modules/.bin/drizzle-kit migrate
+    environment:
+      POSTGRES_HOST: db
+      POSTGRES_PORT: "5432"
+      POSTGRES_USER: postgres
+      POSTGRES_PASS: testpass
+      POSTGRES_DB: polympr_test
+    depends_on:
+      db:
+        condition: service_healthy
+
+  app:
+    image: denoland/deno:alpine
+    working_dir: /app
+    volumes:
+      - .:/app
+      - deno_cache:/deno-dir
+    command: run -A --unstable-ffi main.ts
+    ports:
+      - "4430:443"
+    environment:
+      POSTGRES_HOST: db
+      POSTGRES_PORT: "5432"
+      POSTGRES_USER: postgres
+      POSTGRES_PASS: testpass
+      POSTGRES_DB: polympr_test
+      LOCAL: "true"
+    depends_on:
+      migrate:
+        condition: service_completed_successfully
+
+volumes:
+  db_data_test:
+  deno_cache:

compose.yml

@@ -1,10 +1,24 @@
 services:
   app:
-    container_name: deno_fresh_app
+    image: registry.docker.polytech.djalim.fr/polympr:latest
-    build: .
     ports:
-      - "80:80"
+      - "8008:80"
-      - "443:443"
+      - "4430:443"
     volumes:
-      - .:/app
+      - /home/kevin/PolyMPR/:/app
     command: deno run -A main.ts
+    deploy:
+      replicas: 1
+      placement:
+        constraints: [node.role == manager]
+
+  db:
+    image: postgres
+    restart: always
+    shm_size: 128mb
+    environment:
+      POSTGRES_PASSWORD: ${POSTGRES_PASS}
+    deploy:
+      replicas: 1
+      placement:
+        constraints: [node.role == manager]

databases/db.ts

@@ -0,0 +1,14 @@
+import { drizzle } from "npm:drizzle-orm@0.45.2/node-postgres";
+import pg from "npm:pg@8.20.0";
+
+const { Pool } = pg;
+
+const pool = new Pool({
+  host: Deno.env.get("POSTGRES_HOST"),
+  port: Number(Deno.env.get("POSTGRES_PORT") ?? 5432),
+  user: Deno.env.get("POSTGRES_USER"),
+  password: Deno.env.get("POSTGRES_PASS"),
+  database: Deno.env.get("POSTGRES_DB"),
+});
+
+export const db = drizzle(pool);

databases/docker-init.sh

@@ -0,0 +1,10 @@
+#!/bin/sh
+# Applied by postgres on first container startup via /docker-entrypoint-initdb.d.
+# drizzle-kit migration files use "--> statement-breakpoint" markers which are
+# not valid SQL — strip them before applying.
+set -e
+for f in /migrations/*.sql; do
+  echo "Applying $f..."
+  sed '/^-->/d' "$f" | psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB"
+done
+echo "All migrations applied."

databases/migrations/0000_square_jetstream.sql

@@ -0,0 +1,100 @@
+CREATE TABLE "ajustements" (
+	"numEtud" integer NOT NULL,
+	"idUE" integer NOT NULL,
+	"valeur" double precision NOT NULL,
+	CONSTRAINT "ajustements_numEtud_idUE_pk" PRIMARY KEY("numEtud","idUE")
+);
+--> statement-breakpoint
+CREATE TABLE "enseignements" (
+	"idProf" text NOT NULL,
+	"idModule" text NOT NULL,
+	"idPromo" text NOT NULL,
+	CONSTRAINT "enseignements_idProf_idModule_idPromo_pk" PRIMARY KEY("idProf","idModule","idPromo")
+);
+--> statement-breakpoint
+CREATE TABLE "mobility" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"studentId" integer,
+	"startDate" date,
+	"endDate" date,
+	"weeksCount" integer,
+	"destinationCountry" text,
+	"destinationName" text,
+	"mobilityStatus" text DEFAULT 'N/A'
+);
+--> statement-breakpoint
+CREATE TABLE "modules" (
+	"id" text PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "notes" (
+	"numEtud" integer NOT NULL,
+	"idModule" text NOT NULL,
+	"note" double precision NOT NULL,
+	CONSTRAINT "notes_numEtud_idModule_pk" PRIMARY KEY("numEtud","idModule")
+);
+--> statement-breakpoint
+CREATE TABLE "permissions" (
+	"id" text PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "promotions" (
+	"idPromo" text PRIMARY KEY NOT NULL,
+	"annee" text
+);
+--> statement-breakpoint
+CREATE TABLE "role_permissions" (
+	"idRole" integer NOT NULL,
+	"idPermission" text NOT NULL,
+	CONSTRAINT "role_permissions_idRole_idPermission_pk" PRIMARY KEY("idRole","idPermission")
+);
+--> statement-breakpoint
+CREATE TABLE "roles" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "students" (
+	"numEtud" serial PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL,
+	"prenom" text NOT NULL,
+	"idPromo" text
+);
+--> statement-breakpoint
+CREATE TABLE "ue_modules" (
+	"idModule" text NOT NULL,
+	"idUE" integer NOT NULL,
+	"idPromo" text NOT NULL,
+	"coeff" double precision NOT NULL,
+	CONSTRAINT "ue_modules_idModule_idUE_idPromo_pk" PRIMARY KEY("idModule","idUE","idPromo")
+);
+--> statement-breakpoint
+CREATE TABLE "ues" (
+	"id" serial PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL
+);
+--> statement-breakpoint
+CREATE TABLE "users" (
+	"id" text PRIMARY KEY NOT NULL,
+	"nom" text NOT NULL,
+	"prenom" text NOT NULL,
+	"idRole" integer
+);
+--> statement-breakpoint
+ALTER TABLE "ajustements" ADD CONSTRAINT "ajustements_numEtud_students_numEtud_fk" FOREIGN KEY ("numEtud") REFERENCES "public"."students"("numEtud") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ajustements" ADD CONSTRAINT "ajustements_idUE_ues_id_fk" FOREIGN KEY ("idUE") REFERENCES "public"."ues"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "enseignements" ADD CONSTRAINT "enseignements_idProf_users_id_fk" FOREIGN KEY ("idProf") REFERENCES "public"."users"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "enseignements" ADD CONSTRAINT "enseignements_idModule_modules_id_fk" FOREIGN KEY ("idModule") REFERENCES "public"."modules"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "enseignements" ADD CONSTRAINT "enseignements_idPromo_promotions_idPromo_fk" FOREIGN KEY ("idPromo") REFERENCES "public"."promotions"("idPromo") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "mobility" ADD CONSTRAINT "mobility_studentId_students_numEtud_fk" FOREIGN KEY ("studentId") REFERENCES "public"."students"("numEtud") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notes" ADD CONSTRAINT "notes_numEtud_students_numEtud_fk" FOREIGN KEY ("numEtud") REFERENCES "public"."students"("numEtud") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "notes" ADD CONSTRAINT "notes_idModule_modules_id_fk" FOREIGN KEY ("idModule") REFERENCES "public"."modules"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_idRole_roles_id_fk" FOREIGN KEY ("idRole") REFERENCES "public"."roles"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "role_permissions" ADD CONSTRAINT "role_permissions_idPermission_permissions_id_fk" FOREIGN KEY ("idPermission") REFERENCES "public"."permissions"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "students" ADD CONSTRAINT "students_idPromo_promotions_idPromo_fk" FOREIGN KEY ("idPromo") REFERENCES "public"."promotions"("idPromo") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ue_modules" ADD CONSTRAINT "ue_modules_idModule_modules_id_fk" FOREIGN KEY ("idModule") REFERENCES "public"."modules"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ue_modules" ADD CONSTRAINT "ue_modules_idUE_ues_id_fk" FOREIGN KEY ("idUE") REFERENCES "public"."ues"("id") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "ue_modules" ADD CONSTRAINT "ue_modules_idPromo_promotions_idPromo_fk" FOREIGN KEY ("idPromo") REFERENCES "public"."promotions"("idPromo") ON DELETE no action ON UPDATE no action;--> statement-breakpoint
+ALTER TABLE "users" ADD CONSTRAINT "users_idRole_roles_id_fk" FOREIGN KEY ("idRole") REFERENCES "public"."roles"("id") ON DELETE no action ON UPDATE no action;

databases/migrations/0001_seed_permissions.sql

@@ -0,0 +1,11 @@
+--> statement-breakpoint
+INSERT INTO "permissions" ("id", "nom") VALUES
+  ('note_read',    'Consulter les notes des étudiants'),
+  ('note_write',   'Saisir et modifier les notes'),
+  ('student_read', 'Consulter la liste des étudiants'),
+  ('student_write','Gérer les étudiants (ajout, modification, suppression)'),
+  ('module_read',  'Consulter les modules et enseignements'),
+  ('module_write', 'Gérer les modules et enseignements'),
+  ('user_read',    'Consulter les utilisateurs et leurs rôles'),
+  ('user_write',   'Gérer les utilisateurs et leurs rôles'),
+  ('role_write',   'Gérer les rôles et leurs permissions');

databases/migrations/0002_update_permission_names.sql

@@ -0,0 +1,14 @@
+-- Update permission names to French
+-- This migration inserts or updates the permission labels used by the API.
+--> statement-breakpoint
+INSERT INTO "permissions" ("id", "nom") VALUES
+  ('note_read',    'Consulter les notes des étudiants'),
+  ('note_write',   'Saisir et modifier les notes'),
+  ('student_read', 'Consulter la liste des étudiants'),
+  ('student_write','Gérer les étudiants (ajout, modification, suppression)'),
+  ('module_read',  'Consulter les modules et enseignements'),
+  ('module_write', 'Gérer les modules et enseignements'),
+  ('user_read',    'Consulter les utilisateurs et leurs rôles'),
+  ('user_write',   'Gérer les utilisateurs et leurs rôles'),
+  ('role_write',   'Gérer les rôles et leurs permissions')
+ON CONFLICT ("id") DO UPDATE SET "nom" = EXCLUDED."nom";

databases/migrations/meta/0000_snapshot.json

@@ -0,0 +1,680 @@
+{
+  "id": "bd317b68-1c46-4e83-b4d3-a14f68751afb",
+  "prevId": "00000000-0000-0000-0000-000000000000",
+  "version": "7",
+  "dialect": "postgresql",
+  "tables": {
+    "public.ajustements": {
+      "name": "ajustements",
+      "schema": "",
+      "columns": {
+        "numEtud": {
+          "name": "numEtud",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idUE": {
+          "name": "idUE",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "valeur": {
+          "name": "valeur",
+          "type": "double precision",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ajustements_numEtud_students_numEtud_fk": {
+          "name": "ajustements_numEtud_students_numEtud_fk",
+          "tableFrom": "ajustements",
+          "tableTo": "students",
+          "columnsFrom": [
+            "numEtud"
+          ],
+          "columnsTo": [
+            "numEtud"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "ajustements_idUE_ues_id_fk": {
+          "name": "ajustements_idUE_ues_id_fk",
+          "tableFrom": "ajustements",
+          "tableTo": "ues",
+          "columnsFrom": [
+            "idUE"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ajustements_numEtud_idUE_pk": {
+          "name": "ajustements_numEtud_idUE_pk",
+          "columns": [
+            "numEtud",
+            "idUE"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.enseignements": {
+      "name": "enseignements",
+      "schema": "",
+      "columns": {
+        "idProf": {
+          "name": "idProf",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idModule": {
+          "name": "idModule",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idPromo": {
+          "name": "idPromo",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "enseignements_idProf_users_id_fk": {
+          "name": "enseignements_idProf_users_id_fk",
+          "tableFrom": "enseignements",
+          "tableTo": "users",
+          "columnsFrom": [
+            "idProf"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "enseignements_idModule_modules_id_fk": {
+          "name": "enseignements_idModule_modules_id_fk",
+          "tableFrom": "enseignements",
+          "tableTo": "modules",
+          "columnsFrom": [
+            "idModule"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "enseignements_idPromo_promotions_idPromo_fk": {
+          "name": "enseignements_idPromo_promotions_idPromo_fk",
+          "tableFrom": "enseignements",
+          "tableTo": "promotions",
+          "columnsFrom": [
+            "idPromo"
+          ],
+          "columnsTo": [
+            "idPromo"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "enseignements_idProf_idModule_idPromo_pk": {
+          "name": "enseignements_idProf_idModule_idPromo_pk",
+          "columns": [
+            "idProf",
+            "idModule",
+            "idPromo"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.mobility": {
+      "name": "mobility",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "studentId": {
+          "name": "studentId",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "startDate": {
+          "name": "startDate",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "endDate": {
+          "name": "endDate",
+          "type": "date",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "weeksCount": {
+          "name": "weeksCount",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "destinationCountry": {
+          "name": "destinationCountry",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "destinationName": {
+          "name": "destinationName",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        },
+        "mobilityStatus": {
+          "name": "mobilityStatus",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false,
+          "default": "'N/A'"
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "mobility_studentId_students_numEtud_fk": {
+          "name": "mobility_studentId_students_numEtud_fk",
+          "tableFrom": "mobility",
+          "tableTo": "students",
+          "columnsFrom": [
+            "studentId"
+          ],
+          "columnsTo": [
+            "numEtud"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.modules": {
+      "name": "modules",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.notes": {
+      "name": "notes",
+      "schema": "",
+      "columns": {
+        "numEtud": {
+          "name": "numEtud",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idModule": {
+          "name": "idModule",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "note": {
+          "name": "note",
+          "type": "double precision",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "notes_numEtud_students_numEtud_fk": {
+          "name": "notes_numEtud_students_numEtud_fk",
+          "tableFrom": "notes",
+          "tableTo": "students",
+          "columnsFrom": [
+            "numEtud"
+          ],
+          "columnsTo": [
+            "numEtud"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "notes_idModule_modules_id_fk": {
+          "name": "notes_idModule_modules_id_fk",
+          "tableFrom": "notes",
+          "tableTo": "modules",
+          "columnsFrom": [
+            "idModule"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "notes_numEtud_idModule_pk": {
+          "name": "notes_numEtud_idModule_pk",
+          "columns": [
+            "numEtud",
+            "idModule"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.permissions": {
+      "name": "permissions",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.promotions": {
+      "name": "promotions",
+      "schema": "",
+      "columns": {
+        "idPromo": {
+          "name": "idPromo",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "annee": {
+          "name": "annee",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.role_permissions": {
+      "name": "role_permissions",
+      "schema": "",
+      "columns": {
+        "idRole": {
+          "name": "idRole",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idPermission": {
+          "name": "idPermission",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "role_permissions_idRole_roles_id_fk": {
+          "name": "role_permissions_idRole_roles_id_fk",
+          "tableFrom": "role_permissions",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "idRole"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "role_permissions_idPermission_permissions_id_fk": {
+          "name": "role_permissions_idPermission_permissions_id_fk",
+          "tableFrom": "role_permissions",
+          "tableTo": "permissions",
+          "columnsFrom": [
+            "idPermission"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "role_permissions_idRole_idPermission_pk": {
+          "name": "role_permissions_idRole_idPermission_pk",
+          "columns": [
+            "idRole",
+            "idPermission"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.roles": {
+      "name": "roles",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.students": {
+      "name": "students",
+      "schema": "",
+      "columns": {
+        "numEtud": {
+          "name": "numEtud",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "prenom": {
+          "name": "prenom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idPromo": {
+          "name": "idPromo",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "students_idPromo_promotions_idPromo_fk": {
+          "name": "students_idPromo_promotions_idPromo_fk",
+          "tableFrom": "students",
+          "tableTo": "promotions",
+          "columnsFrom": [
+            "idPromo"
+          ],
+          "columnsTo": [
+            "idPromo"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ue_modules": {
+      "name": "ue_modules",
+      "schema": "",
+      "columns": {
+        "idModule": {
+          "name": "idModule",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idUE": {
+          "name": "idUE",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idPromo": {
+          "name": "idPromo",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "coeff": {
+          "name": "coeff",
+          "type": "double precision",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "ue_modules_idModule_modules_id_fk": {
+          "name": "ue_modules_idModule_modules_id_fk",
+          "tableFrom": "ue_modules",
+          "tableTo": "modules",
+          "columnsFrom": [
+            "idModule"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "ue_modules_idUE_ues_id_fk": {
+          "name": "ue_modules_idUE_ues_id_fk",
+          "tableFrom": "ue_modules",
+          "tableTo": "ues",
+          "columnsFrom": [
+            "idUE"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        },
+        "ue_modules_idPromo_promotions_idPromo_fk": {
+          "name": "ue_modules_idPromo_promotions_idPromo_fk",
+          "tableFrom": "ue_modules",
+          "tableTo": "promotions",
+          "columnsFrom": [
+            "idPromo"
+          ],
+          "columnsTo": [
+            "idPromo"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {
+        "ue_modules_idModule_idUE_idPromo_pk": {
+          "name": "ue_modules_idModule_idUE_idPromo_pk",
+          "columns": [
+            "idModule",
+            "idUE",
+            "idPromo"
+          ]
+        }
+      },
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.ues": {
+      "name": "ues",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "serial",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {},
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    },
+    "public.users": {
+      "name": "users",
+      "schema": "",
+      "columns": {
+        "id": {
+          "name": "id",
+          "type": "text",
+          "primaryKey": true,
+          "notNull": true
+        },
+        "nom": {
+          "name": "nom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "prenom": {
+          "name": "prenom",
+          "type": "text",
+          "primaryKey": false,
+          "notNull": true
+        },
+        "idRole": {
+          "name": "idRole",
+          "type": "integer",
+          "primaryKey": false,
+          "notNull": false
+        }
+      },
+      "indexes": {},
+      "foreignKeys": {
+        "users_idRole_roles_id_fk": {
+          "name": "users_idRole_roles_id_fk",
+          "tableFrom": "users",
+          "tableTo": "roles",
+          "columnsFrom": [
+            "idRole"
+          ],
+          "columnsTo": [
+            "id"
+          ],
+          "onDelete": "no action",
+          "onUpdate": "no action"
+        }
+      },
+      "compositePrimaryKeys": {},
+      "uniqueConstraints": {},
+      "policies": {},
+      "checkConstraints": {},
+      "isRLSEnabled": false
+    }
+  },
+  "enums": {},
+  "schemas": {},
+  "sequences": {},
+  "roles": {},
+  "policies": {},
+  "views": {},
+  "_meta": {
+    "columns": {},
+    "schemas": {},
+    "tables": {}
+  }
+}

databases/migrations/meta/_journal.json

@@ -0,0 +1,27 @@
+{
+  "version": "7",
+  "dialect": "postgresql",
+  "entries": [
+    {
+      "idx": 0,
+      "version": "7",
+      "when": 1777155028708,
+      "tag": "0000_square_jetstream",
+      "breakpoints": true
+    },
+    {
+      "idx": 1,
+      "version": "7",
+      "when": 1777155028709,
+      "tag": "0001_seed_permissions",
+      "breakpoints": true
+    },
+    {
+      "idx": 2,
+      "version": "7",
+      "when": 1777155028710,
+      "tag": "0002_update_permission_names",
+      "breakpoints": true
+    }
+  ]
+}

databases/schema.kit.ts

@@ -0,0 +1,99 @@
+import {
+  date,
+  doublePrecision,
+  integer,
+  pgTable,
+  primaryKey,
+  serial,
+  text,
+} from "drizzle-orm/pg-core";
+
+export const roles = pgTable("roles", {
+  id: serial("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const permissions = pgTable("permissions", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const rolePermissions = pgTable("role_permissions", {
+  idRole: integer("idRole").notNull().references(() => roles.id),
+  idPermission: text("idPermission").notNull().references(() => permissions.id),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idRole, t.idPermission] }),
+}));
+
+export const users = pgTable("users", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+  prenom: text("prenom").notNull(),
+  idRole: integer("idRole").references(() => roles.id),
+});
+
+export const promotions = pgTable("promotions", {
+  id: text("idPromo").primaryKey(),
+  annee: text("annee"),
+});
+
+export const students = pgTable("students", {
+  numEtud: serial("numEtud").primaryKey(),
+  nom: text("nom").notNull(),
+  prenom: text("prenom").notNull(),
+  idPromo: text("idPromo").references(() => promotions.id),
+});
+
+export const modules = pgTable("modules", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const enseignements = pgTable("enseignements", {
+  idProf: text("idProf").notNull().references(() => users.id),
+  idModule: text("idModule").notNull().references(() => modules.id),
+  idPromo: text("idPromo").notNull().references(() => promotions.id),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idProf, t.idModule, t.idPromo] }),
+}));
+
+export const ues = pgTable("ues", {
+  id: serial("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const ueModules = pgTable("ue_modules", {
+  idModule: text("idModule").notNull().references(() => modules.id),
+  idUE: integer("idUE").notNull().references(() => ues.id),
+  idPromo: text("idPromo").notNull().references(() => promotions.id),
+  coeff: doublePrecision("coeff").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idModule, t.idUE, t.idPromo] }),
+}));
+
+export const notes = pgTable("notes", {
+  numEtud: integer("numEtud").notNull().references(() => students.numEtud),
+  idModule: text("idModule").notNull().references(() => modules.id),
+  note: doublePrecision("note").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.numEtud, t.idModule] }),
+}));
+
+export const ajustements = pgTable("ajustements", {
+  numEtud: integer("numEtud").notNull().references(() => students.numEtud),
+  idUE: integer("idUE").notNull().references(() => ues.id),
+  valeur: doublePrecision("valeur").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.numEtud, t.idUE] }),
+}));
+
+export const mobility = pgTable("mobility", {
+  id: serial("id").primaryKey(),
+  studentId: integer("studentId").references(() => students.numEtud),
+  startDate: date("startDate"),
+  endDate: date("endDate"),
+  weeksCount: integer("weeksCount"),
+  destinationCountry: text("destinationCountry"),
+  destinationName: text("destinationName"),
+  mobilityStatus: text("mobilityStatus").default("N/A"),
+});

databases/schema.ts

@@ -0,0 +1,99 @@
+import {
+  date,
+  doublePrecision,
+  integer,
+  pgTable,
+  primaryKey,
+  serial,
+  text,
+} from "npm:drizzle-orm@0.45.2/pg-core";
+
+export const roles = pgTable("roles", {
+  id: serial("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const permissions = pgTable("permissions", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const rolePermissions = pgTable("role_permissions", {
+  idRole: integer("idRole").notNull().references(() => roles.id),
+  idPermission: text("idPermission").notNull().references(() => permissions.id),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idRole, t.idPermission] }),
+}));
+
+export const users = pgTable("users", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+  prenom: text("prenom").notNull(),
+  idRole: integer("idRole").references(() => roles.id),
+});
+
+export const promotions = pgTable("promotions", {
+  id: text("idPromo").primaryKey(),
+  annee: text("annee"),
+});
+
+export const students = pgTable("students", {
+  numEtud: serial("numEtud").primaryKey(),
+  nom: text("nom").notNull(),
+  prenom: text("prenom").notNull(),
+  idPromo: text("idPromo").references(() => promotions.id),
+});
+
+export const modules = pgTable("modules", {
+  id: text("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const enseignements = pgTable("enseignements", {
+  idProf: text("idProf").notNull().references(() => users.id),
+  idModule: text("idModule").notNull().references(() => modules.id),
+  idPromo: text("idPromo").notNull().references(() => promotions.id),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idProf, t.idModule, t.idPromo] }),
+}));
+
+export const ues = pgTable("ues", {
+  id: serial("id").primaryKey(),
+  nom: text("nom").notNull(),
+});
+
+export const ueModules = pgTable("ue_modules", {
+  idModule: text("idModule").notNull().references(() => modules.id),
+  idUE: integer("idUE").notNull().references(() => ues.id),
+  idPromo: text("idPromo").notNull().references(() => promotions.id),
+  coeff: doublePrecision("coeff").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.idModule, t.idUE, t.idPromo] }),
+}));
+
+export const notes = pgTable("notes", {
+  numEtud: integer("numEtud").notNull().references(() => students.numEtud),
+  idModule: text("idModule").notNull().references(() => modules.id),
+  note: doublePrecision("note").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.numEtud, t.idModule] }),
+}));
+
+export const ajustements = pgTable("ajustements", {
+  numEtud: integer("numEtud").notNull().references(() => students.numEtud),
+  idUE: integer("idUE").notNull().references(() => ues.id),
+  valeur: doublePrecision("valeur").notNull(),
+}, (t) => ({
+  pk: primaryKey({ columns: [t.numEtud, t.idUE] }),
+}));
+
+export const mobility = pgTable("mobility", {
+  id: serial("id").primaryKey(),
+  studentId: integer("studentId").references(() => students.numEtud),
+  startDate: date("startDate"),
+  endDate: date("endDate"),
+  weeksCount: integer("weeksCount"),
+  destinationCountry: text("destinationCountry"),
+  destinationName: text("destinationName"),
+  mobilityStatus: text("mobilityStatus").default("N/A"),
+});

defaults/interfaces.ts

@@ -3,16 +3,12 @@ import { AsyncRoute } from "$fresh/src/server/types.ts";
 
 export interface AuthenticatedState {
   isAuthenticated: true;
-  isFromPolytech: boolean;
+  session: CasContent;
-  role: "etudiant" | "professeur" | "administration" | "autre";
-  displayName: string;
-  uid: string;
   availablePages: Record<string, string>;
 }
 
 interface UnauthenticatedState {
   isAuthenticated: false;
-  isFromPolytech: false;
   session: undefined;
 }
 

deno.json

@@ -9,7 +9,14 @@
     "start": "deno run -A --unstable-ffi --watch=static/,routes/ dev.ts",
     "build": "deno run -A --unstable-ffi dev.ts build",
     "preview": "deno run -A --unstable-ffi main.ts",
-    "update": "deno run -A -r https://fresh.deno.dev/update ."
+    "update": "deno run -A -r https://fresh.deno.dev/update .",
+    "test": "deno test -A --no-check tests/",
+    "test:unit": "deno test -A --no-check tests/unit/",
+    "test:integration": "deno test -A --no-check tests/integration/",
+    "test:e2e": "deno test -A --no-check tests/e2e/",
+    "test:coverage": "deno test -A --no-check --coverage=coverage tests/ && deno coverage coverage --exclude=tests/",
+    "test:coverage:html": "deno test -A --no-check --coverage=coverage tests/ && deno coverage coverage --exclude=tests/ --html",
+    "migrate": "node_modules/.bin/drizzle-kit migrate"
   },
   "lint": {
     "rules": {
@@ -35,6 +42,9 @@
     "@preact/signals": "https://esm.sh/*@preact/signals@1.2.2",
     "@preact/signals-core": "https://esm.sh/*@preact/signals-core@1.5.1",
     "$std/": "https://deno.land/std@0.216.0/",
+    "@std/assert": "jsr:@std/assert@^1.0.0",
+    "@std/testing": "jsr:@std/testing@^1.0.0",
+    "happy-dom": "npm:happy-dom@^16.0.0",
     "$root/": "./",
     "$apps/": "./routes/(apps)/"
   },

drizzle.config.ts

@@ -0,0 +1,17 @@
+import { defineConfig } from "drizzle-kit";
+import process from "node:process";
+
+const url = process.env.DATABASE_URL ??
+  `postgresql://${process.env.POSTGRES_USER}:${process.env.POSTGRES_PASS}@${
+    process.env.POSTGRES_HOST ?? "localhost"
+  }:${process.env.POSTGRES_PORT ?? 5432}/${process.env.POSTGRES_DB}`;
+
+export default defineConfig({
+  dialect: "postgresql",
+  schema: "./databases/schema.kit.ts",
+  out: "./databases/migrations",
+  dbCredentials: {
+    url,
+    ssl: false,
+  },
+});

env.template

@@ -0,0 +1,8 @@
+#Local mode, set to true to access admin pages with any users
+LOCAL=false
+
+POSTGRES_HOST = db
+POSTGRES_PORT = 5432
+POSTGRES_PASS = astrongpass
+POSTGRES_USER = postgres
+POSTGRES_DB = polympr

flake.lock

@@ -0,0 +1,61 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1776548001,
+        "narHash": "sha256-ZSK0NL4a1BwVbbTBoSnWgbJy9HeZFXLYQizjb2DPF24=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "b12141ef619e0a9c1c84dc8c684040326f27cdcc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

flake.nix

@@ -0,0 +1,62 @@
+{
+  description = "PolyMPR CLI - A tool for managing PolyMPR modules";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    flake-utils.url = "github:numtide/flake-utils";
+  };
+
+  outputs = { self, nixpkgs, flake-utils }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = nixpkgs.legacyPackages.${system};
+      in
+      {
+        packages.pmpr = pkgs.stdenv.mkDerivation {
+          pname = "pmpr";
+          version = "0.1.0";
+          src = ./.;
+
+          nativeBuildInputs = [
+            pkgs.deno
+            pkgs.autoPatchelfHook
+          ];
+
+          buildInputs = [
+            pkgs.stdenv.cc.cc.lib
+          ];
+
+          buildPhase = ''
+            export HOME=$TMPDIR
+            deno cache toolbox/cli.ts
+            deno compile -A --output pmpr toolbox/cli.ts
+          '';
+
+          installPhase = ''
+            mkdir -p $out/bin
+            cp pmpr $out/bin/pmpr
+          '';
+        };
+
+        packages.default = self.packages.${system}.pmpr;
+
+        devShells.default = pkgs.mkShell {
+          nativeBuildInputs = [
+            pkgs.deno
+            pkgs.patchelf
+          ];
+
+          buildInputs = [
+            pkgs.stdenv.cc.cc.lib
+          ];
+
+          shellHook = ''
+            export LD_LIBRARY_PATH="${pkgs.stdenv.cc.cc.lib}/lib:$LD_LIBRARY_PATH"
+            export NIX_LD_INTERPRETER=$(cat ${pkgs.stdenv.cc}/nix-support/dynamic-linker)
+            echo "Welcome to PolyMPR development shell!"
+            echo "Use 'deno task compile' to build the CLI."
+          '';
+        };
+      }
+    );
+}

fresh.config.ts

@@ -2,7 +2,7 @@ import { defineConfig } from "$fresh/server.ts";
 import ensureDatabases from "$root/databases/ensure.ts";
 import { load } from "@std/dotenv";
 
-await load({ envPath: "./.env.development.local", export: true });
+await load({ envPath: "./.env", export: true });
 await ensureDatabases();
 export default defineConfig({
   server: {

fresh.gen.ts

@@ -4,35 +4,81 @@
 
 import * as $_apps_layout from "./routes/(apps)/_layout.tsx";
 import * as $_apps_middleware from "./routes/(apps)/_middleware.ts";
+import * as $_apps_admin_api_enseignements from "./routes/(apps)/admin/api/enseignements.ts";
+import * as $_apps_admin_api_enseignements_idProf_idModule_idPromo_ from "./routes/(apps)/admin/api/enseignements/[idProf]/[idModule]/[idPromo].ts";
+import * as $_apps_admin_api_example from "./routes/(apps)/admin/api/example.ts";
+import * as $_apps_admin_api_modules from "./routes/(apps)/admin/api/modules.ts";
+import * as $_apps_admin_api_modules_idModule_ from "./routes/(apps)/admin/api/modules/[idModule].ts";
+import * as $_apps_admin_api_permissions from "./routes/(apps)/admin/api/permissions.ts";
+import * as $_apps_admin_api_roles from "./routes/(apps)/admin/api/roles.ts";
+import * as $_apps_admin_api_roles_idRole_ from "./routes/(apps)/admin/api/roles/[idRole].ts";
+import * as $_apps_admin_api_users from "./routes/(apps)/admin/api/users.ts";
+import * as $_apps_admin_api_users_id_ from "./routes/(apps)/admin/api/users/[id].ts";
+import * as $_apps_admin_index from "./routes/(apps)/admin/index.tsx";
+import * as $_apps_admin_partials_enseignements from "./routes/(apps)/admin/partials/enseignements.tsx";
+import * as $_apps_admin_partials_index from "./routes/(apps)/admin/partials/index.tsx";
+import * as $_apps_admin_partials_modules from "./routes/(apps)/admin/partials/modules.tsx";
+import * as $_apps_admin_partials_permissions from "./routes/(apps)/admin/partials/permissions.tsx";
+import * as $_apps_admin_partials_roles from "./routes/(apps)/admin/partials/roles.tsx";
+import * as $_apps_admin_partials_users from "./routes/(apps)/admin/partials/users.tsx";
 import * as $_apps_mobility_api_insert_mobility from "./routes/(apps)/mobility/api/insert_mobility.ts";
 import * as $_apps_mobility_index from "./routes/(apps)/mobility/index.tsx";
 import * as $_apps_mobility_partials_admin_edit_mobility from "./routes/(apps)/mobility/partials/(admin)/edit_mobility.tsx";
 import * as $_apps_mobility_partials_index from "./routes/(apps)/mobility/partials/index.tsx";
 import * as $_apps_mobility_partials_overview from "./routes/(apps)/mobility/partials/overview.tsx";
+import * as $_apps_notes_api_ajustements from "./routes/(apps)/notes/api/ajustements.ts";
+import * as $_apps_notes_api_ajustements_numEtud_idUE_ from "./routes/(apps)/notes/api/ajustements/[numEtud]/[idUE].ts";
+import * as $_apps_notes_api_notes from "./routes/(apps)/notes/api/notes.ts";
+import * as $_apps_notes_api_notes_numEtud_idModule_ from "./routes/(apps)/notes/api/notes/[numEtud]/[idModule].ts";
+import * as $_apps_notes_api_ue_modules from "./routes/(apps)/notes/api/ue-modules.ts";
+import * as $_apps_notes_api_ue_modules_idModule_idUE_idPromo_ from "./routes/(apps)/notes/api/ue-modules/[idModule]/[idUE]/[idPromo].ts";
+import * as $_apps_notes_api_ues from "./routes/(apps)/notes/api/ues.ts";
+import * as $_apps_notes_api_ues_idUE_ from "./routes/(apps)/notes/api/ues/[idUE].ts";
+import * as $_apps_notes_edition_numEtud_ from "./routes/(apps)/notes/edition/[numEtud].tsx";
 import * as $_apps_notes_index from "./routes/(apps)/notes/index.tsx";
+import * as $_apps_notes_recap_numEtud_ from "./routes/(apps)/notes/recap/[numEtud].tsx";
 import * as $_apps_notes_partials_admin_courses from "./routes/(apps)/notes/partials/(admin)/courses.tsx";
+import * as $_apps_notes_partials_admin_import from "./routes/(apps)/notes/partials/(admin)/import.tsx";
+import * as $_apps_notes_partials_admin_ues from "./routes/(apps)/notes/partials/(admin)/ues.tsx";
 import * as $_apps_notes_partials_index from "./routes/(apps)/notes/partials/index.tsx";
 import * as $_apps_notes_partials_notes from "./routes/(apps)/notes/partials/notes.tsx";
+import * as $_apps_students_api_promotions from "./routes/(apps)/students/api/promotions.ts";
+import * as $_apps_students_api_promotions_idPromo_ from "./routes/(apps)/students/api/promotions/[idPromo].ts";
 import * as $_apps_students_api_students from "./routes/(apps)/students/api/students.ts";
+import * as $_apps_students_api_students_numEtud_ from "./routes/(apps)/students/api/students/[numEtud].ts";
+import * as $_apps_students_api_students_import_csv from "./routes/(apps)/students/api/students/import-csv.ts";
+import * as $_apps_students_edit_numEtud_ from "./routes/(apps)/students/edit/[numEtud].tsx";
 import * as $_apps_students_index from "./routes/(apps)/students/index.tsx";
 import * as $_apps_students_partials_admin_consult from "./routes/(apps)/students/partials/(admin)/consult.tsx";
+import * as $_apps_students_partials_admin_promotions from "./routes/(apps)/students/partials/(admin)/promotions.tsx";
 import * as $_apps_students_partials_admin_upload from "./routes/(apps)/students/partials/(admin)/upload.tsx";
 import * as $_apps_students_partials_index from "./routes/(apps)/students/partials/index.tsx";
 import * as $_apps_students_types_d from "./routes/(apps)/students/types.d.ts";
-import * as $_403 from "./routes/_403.tsx";
 import * as $_404 from "./routes/_404.tsx";
 import * as $_app from "./routes/_app.tsx";
 import * as $_middleware from "./routes/_middleware.ts";
 import * as $about from "./routes/about.tsx";
 import * as $apps from "./routes/apps.tsx";
+import * as $dev_login from "./routes/dev-login.ts";
 import * as $index from "./routes/index.tsx";
 import * as $login from "./routes/login.tsx";
 import * as $logout from "./routes/logout.tsx";
 import * as $_islands_AppNavigator from "./routes/(_islands)/AppNavigator.tsx";
 import * as $_islands_Navbar from "./routes/(_islands)/Navbar.tsx";
+import * as $_apps_admin_islands_AdminEnseignements from "./routes/(apps)/admin/(_islands)/AdminEnseignements.tsx";
+import * as $_apps_admin_islands_AdminModules from "./routes/(apps)/admin/(_islands)/AdminModules.tsx";
+import * as $_apps_admin_islands_AdminPermissions from "./routes/(apps)/admin/(_islands)/AdminPermissions.tsx";
+import * as $_apps_admin_islands_AdminRoles from "./routes/(apps)/admin/(_islands)/AdminRoles.tsx";
+import * as $_apps_admin_islands_AdminUsers from "./routes/(apps)/admin/(_islands)/AdminUsers.tsx";
 import * as $_apps_mobility_islands_ConsultMobility from "./routes/(apps)/mobility/(_islands)/ConsultMobility.tsx";
 import * as $_apps_mobility_islands_EditMobility from "./routes/(apps)/mobility/(_islands)/EditMobility.tsx";
 import * as $_apps_mobility_islands_ImportFile from "./routes/(apps)/mobility/(_islands)/ImportFile.tsx";
+import * as $_apps_notes_islands_AdminConsultNotes from "./routes/(apps)/notes/(_islands)/AdminConsultNotes.tsx";
+import * as $_apps_notes_islands_AdminUEs from "./routes/(apps)/notes/(_islands)/AdminUEs.tsx";
+import * as $_apps_notes_islands_ImportNotes from "./routes/(apps)/notes/(_islands)/ImportNotes.tsx";
+import * as $_apps_notes_islands_NoteRecap from "./routes/(apps)/notes/(_islands)/NoteRecap.tsx";
+import * as $_apps_notes_islands_NotesView from "./routes/(apps)/notes/(_islands)/NotesView.tsx";
+import * as $_apps_students_islands_AdminPromotions from "./routes/(apps)/students/(_islands)/AdminPromotions.tsx";
 import * as $_apps_students_islands_ConsultStudents from "./routes/(apps)/students/(_islands)/ConsultStudents.tsx";
 import * as $_apps_students_islands_EditStudents from "./routes/(apps)/students/(_islands)/EditStudents.tsx";
 import * as $_apps_students_islands_UploadStudents from "./routes/(apps)/students/(_islands)/UploadStudents.tsx";
@@ -42,6 +88,29 @@ const manifest = {
   routes: {
     "./routes/(apps)/_layout.tsx": $_apps_layout,
     "./routes/(apps)/_middleware.ts": $_apps_middleware,
+    "./routes/(apps)/admin/api/enseignements.ts":
+      $_apps_admin_api_enseignements,
+    "./routes/(apps)/admin/api/enseignements/[idProf]/[idModule]/[idPromo].ts":
+      $_apps_admin_api_enseignements_idProf_idModule_idPromo_,
+    "./routes/(apps)/admin/api/example.ts": $_apps_admin_api_example,
+    "./routes/(apps)/admin/api/modules.ts": $_apps_admin_api_modules,
+    "./routes/(apps)/admin/api/modules/[idModule].ts":
+      $_apps_admin_api_modules_idModule_,
+    "./routes/(apps)/admin/api/permissions.ts": $_apps_admin_api_permissions,
+    "./routes/(apps)/admin/api/roles.ts": $_apps_admin_api_roles,
+    "./routes/(apps)/admin/api/roles/[idRole].ts":
+      $_apps_admin_api_roles_idRole_,
+    "./routes/(apps)/admin/api/users.ts": $_apps_admin_api_users,
+    "./routes/(apps)/admin/api/users/[id].ts": $_apps_admin_api_users_id_,
+    "./routes/(apps)/admin/index.tsx": $_apps_admin_index,
+    "./routes/(apps)/admin/partials/enseignements.tsx":
+      $_apps_admin_partials_enseignements,
+    "./routes/(apps)/admin/partials/index.tsx": $_apps_admin_partials_index,
+    "./routes/(apps)/admin/partials/modules.tsx": $_apps_admin_partials_modules,
+    "./routes/(apps)/admin/partials/permissions.tsx":
+      $_apps_admin_partials_permissions,
+    "./routes/(apps)/admin/partials/roles.tsx": $_apps_admin_partials_roles,
+    "./routes/(apps)/admin/partials/users.tsx": $_apps_admin_partials_users,
     "./routes/(apps)/mobility/api/insert_mobility.ts":
       $_apps_mobility_api_insert_mobility,
     "./routes/(apps)/mobility/index.tsx": $_apps_mobility_index,
@@ -51,26 +120,56 @@ const manifest = {
       $_apps_mobility_partials_index,
     "./routes/(apps)/mobility/partials/overview.tsx":
       $_apps_mobility_partials_overview,
+    "./routes/(apps)/notes/api/ajustements.ts": $_apps_notes_api_ajustements,
+    "./routes/(apps)/notes/api/ajustements/[numEtud]/[idUE].ts":
+      $_apps_notes_api_ajustements_numEtud_idUE_,
+    "./routes/(apps)/notes/api/notes.ts": $_apps_notes_api_notes,
+    "./routes/(apps)/notes/api/notes/[numEtud]/[idModule].ts":
+      $_apps_notes_api_notes_numEtud_idModule_,
+    "./routes/(apps)/notes/api/ue-modules.ts": $_apps_notes_api_ue_modules,
+    "./routes/(apps)/notes/api/ue-modules/[idModule]/[idUE]/[idPromo].ts":
+      $_apps_notes_api_ue_modules_idModule_idUE_idPromo_,
+    "./routes/(apps)/notes/api/ues.ts": $_apps_notes_api_ues,
+    "./routes/(apps)/notes/api/ues/[idUE].ts": $_apps_notes_api_ues_idUE_,
+    "./routes/(apps)/notes/edition/[numEtud].tsx":
+      $_apps_notes_edition_numEtud_,
     "./routes/(apps)/notes/index.tsx": $_apps_notes_index,
+    "./routes/(apps)/notes/recap/[numEtud].tsx": $_apps_notes_recap_numEtud_,
     "./routes/(apps)/notes/partials/(admin)/courses.tsx":
       $_apps_notes_partials_admin_courses,
+    "./routes/(apps)/notes/partials/(admin)/import.tsx":
+      $_apps_notes_partials_admin_import,
+    "./routes/(apps)/notes/partials/(admin)/ues.tsx":
+      $_apps_notes_partials_admin_ues,
     "./routes/(apps)/notes/partials/index.tsx": $_apps_notes_partials_index,
     "./routes/(apps)/notes/partials/notes.tsx": $_apps_notes_partials_notes,
+    "./routes/(apps)/students/api/promotions.ts":
+      $_apps_students_api_promotions,
+    "./routes/(apps)/students/api/promotions/[idPromo].ts":
+      $_apps_students_api_promotions_idPromo_,
     "./routes/(apps)/students/api/students.ts": $_apps_students_api_students,
+    "./routes/(apps)/students/api/students/[numEtud].ts":
+      $_apps_students_api_students_numEtud_,
+    "./routes/(apps)/students/api/students/import-csv.ts":
+      $_apps_students_api_students_import_csv,
+    "./routes/(apps)/students/edit/[numEtud].tsx":
+      $_apps_students_edit_numEtud_,
     "./routes/(apps)/students/index.tsx": $_apps_students_index,
     "./routes/(apps)/students/partials/(admin)/consult.tsx":
       $_apps_students_partials_admin_consult,
+    "./routes/(apps)/students/partials/(admin)/promotions.tsx":
+      $_apps_students_partials_admin_promotions,
     "./routes/(apps)/students/partials/(admin)/upload.tsx":
       $_apps_students_partials_admin_upload,
     "./routes/(apps)/students/partials/index.tsx":
       $_apps_students_partials_index,
     "./routes/(apps)/students/types.d.ts": $_apps_students_types_d,
-    "./routes/_403.tsx": $_403,
     "./routes/_404.tsx": $_404,
     "./routes/_app.tsx": $_app,
     "./routes/_middleware.ts": $_middleware,
     "./routes/about.tsx": $about,
     "./routes/apps.tsx": $apps,
+    "./routes/dev-login.ts": $dev_login,
     "./routes/index.tsx": $index,
     "./routes/login.tsx": $login,
     "./routes/logout.tsx": $logout,
@@ -78,12 +177,34 @@ const manifest = {
   islands: {
     "./routes/(_islands)/AppNavigator.tsx": $_islands_AppNavigator,
     "./routes/(_islands)/Navbar.tsx": $_islands_Navbar,
+    "./routes/(apps)/admin/(_islands)/AdminEnseignements.tsx":
+      $_apps_admin_islands_AdminEnseignements,
+    "./routes/(apps)/admin/(_islands)/AdminModules.tsx":
+      $_apps_admin_islands_AdminModules,
+    "./routes/(apps)/admin/(_islands)/AdminPermissions.tsx":
+      $_apps_admin_islands_AdminPermissions,
+    "./routes/(apps)/admin/(_islands)/AdminRoles.tsx":
+      $_apps_admin_islands_AdminRoles,
+    "./routes/(apps)/admin/(_islands)/AdminUsers.tsx":
+      $_apps_admin_islands_AdminUsers,
     "./routes/(apps)/mobility/(_islands)/ConsultMobility.tsx":
       $_apps_mobility_islands_ConsultMobility,
     "./routes/(apps)/mobility/(_islands)/EditMobility.tsx":
       $_apps_mobility_islands_EditMobility,
     "./routes/(apps)/mobility/(_islands)/ImportFile.tsx":
       $_apps_mobility_islands_ImportFile,
+    "./routes/(apps)/notes/(_islands)/AdminConsultNotes.tsx":
+      $_apps_notes_islands_AdminConsultNotes,
+    "./routes/(apps)/notes/(_islands)/AdminUEs.tsx":
+      $_apps_notes_islands_AdminUEs,
+    "./routes/(apps)/notes/(_islands)/ImportNotes.tsx":
+      $_apps_notes_islands_ImportNotes,
+    "./routes/(apps)/notes/(_islands)/NoteRecap.tsx":
+      $_apps_notes_islands_NoteRecap,
+    "./routes/(apps)/notes/(_islands)/NotesView.tsx":
+      $_apps_notes_islands_NotesView,
+    "./routes/(apps)/students/(_islands)/AdminPromotions.tsx":
+      $_apps_students_islands_AdminPromotions,
     "./routes/(apps)/students/(_islands)/ConsultStudents.tsx":
       $_apps_students_islands_ConsultStudents,
     "./routes/(apps)/students/(_islands)/EditStudents.tsx":

package.json

@@ -0,0 +1,12 @@
+{
+  "dependencies": {
+    "dotenv": "^17.4.0",
+    "drizzle-kit": "^0.31.10",
+    "drizzle-orm": "^0.45.2",
+    "pg": "^8.20.0"
+  },
+  "devDependencies": {
+    "@types/pg": "^8.20.0",
+    "tsx": "^4.21.0"
+  }
+}

routes/(apps)/_middleware.ts

@@ -23,7 +23,7 @@ export const handler: MiddlewareHandler<AuthenticatedState>[] = [
 
     context.state.availablePages = properties.pages;
     if (
-      context.state.role == "etudiant" &&
+      context.state.session.eduPersonPrimaryAffiliation == "student" &&
       Deno.env.get("LOCAL") != "true"
     ) {
       properties.adminOnly.forEach((page) =>

routes/(apps)/admin/(_islands)/AdminEnseignements.tsx

@@ -0,0 +1,292 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Enseignement = { idProf: string; idModule: string; idPromo: string };
+type Module = { id: string; nom: string };
+type Promo = { id: string; annee: string };
+
+export default function AdminEnseignements() {
+  const [enseignements, setEnseignements] = useState<Enseignement[]>([]);
+  const [modules, setModules] = useState<Module[]>([]);
+  const [promos, setPromos] = useState<Promo[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  // Filters
+  const [filterPromo, setFilterPromo] = useState("");
+  const [filterModule, setFilterModule] = useState("");
+  const [filterEnseignant, setFilterEnseignant] = useState("");
+
+  // Add form
+  const [showAdd, setShowAdd] = useState(false);
+  const [addPromo, setAddPromo] = useState("");
+  const [addModule, setAddModule] = useState("");
+  const [addProf, setAddProf] = useState("");
+  const [adding, setAdding] = useState(false);
+  const [addError, setAddError] = useState<string | null>(null);
+
+  async function load() {
+    try {
+      const [eRes, mRes, pRes] = await Promise.all([
+        fetch("/admin/api/enseignements"),
+        fetch("/admin/api/modules"),
+        fetch("/students/api/promotions"),
+      ]);
+      if (!eRes.ok) throw new Error("Impossible de charger les enseignements");
+      setEnseignements(await eRes.json());
+      if (mRes.ok) setModules(await mRes.json());
+      if (pRes.ok) setPromos(await pRes.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function deleteEnseignement(
+    idProf: string,
+    idModule: string,
+    idPromo: string,
+  ) {
+    if (
+      !confirm(
+        `Supprimer l'assignation ${idProf} → ${idModule} / ${idPromo} ?`,
+      )
+    ) return;
+    try {
+      const res = await fetch(
+        `/admin/api/enseignements/${encodeURIComponent(idProf)}/${
+          encodeURIComponent(idModule)
+        }/${encodeURIComponent(idPromo)}`,
+        { method: "DELETE" },
+      );
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  async function addEnseignement() {
+    if (!addProf.trim() || !addModule || !addPromo) {
+      setAddError("Tous les champs sont requis");
+      return;
+    }
+    setAdding(true);
+    setAddError(null);
+    try {
+      const res = await fetch("/admin/api/enseignements", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          idProf: addProf.trim(),
+          idModule: addModule,
+          idPromo: addPromo,
+        }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setAddProf("");
+      setAddModule("");
+      setAddPromo("");
+      setShowAdd(false);
+      await load();
+    } catch (e) {
+      setAddError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setAdding(false);
+    }
+  }
+
+  const moduleMap = Object.fromEntries(modules.map((m) => [m.id, m]));
+
+  const filtered = enseignements.filter((e) => {
+    const matchPromo = !filterPromo || e.idPromo === filterPromo;
+    const matchModule = !filterModule || e.idModule === filterModule;
+    const matchEns = !filterEnseignant ||
+      e.idProf.toLowerCase().includes(filterEnseignant.toLowerCase());
+    return matchPromo && matchModule && matchEns;
+  });
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Assignations Enseignant → Module / Promo</h2>
+
+      {error && <p class="state-error">{error}</p>}
+
+      <div class="filters">
+        <select
+          class="filter-select"
+          value={filterPromo}
+          onChange={(e) =>
+            setFilterPromo((e.target as HTMLSelectElement).value)}
+        >
+          <option value="">Promo ▾</option>
+          {promos.map((p) => <option key={p.id} value={p.id}>{p.id}</option>)}
+        </select>
+        <select
+          class="filter-select"
+          value={filterModule}
+          onChange={(e) =>
+            setFilterModule((e.target as HTMLSelectElement).value)}
+        >
+          <option value="">Module ▾</option>
+          {modules.map((m) => (
+            <option key={m.id} value={m.id}>{m.id} – {m.nom}</option>
+          ))}
+        </select>
+        <input
+          class="filter-input"
+          placeholder="Enseignant ▾"
+          value={filterEnseignant}
+          onInput={(e) =>
+            setFilterEnseignant((e.target as HTMLInputElement).value)}
+        />
+        <button
+          type="button"
+          class="btn btn-secondary"
+          onClick={() => {
+            setFilterPromo("");
+            setFilterModule("");
+            setFilterEnseignant("");
+          }}
+        >
+          Filtrer
+        </button>
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={() => setShowAdd((v) => !v)}
+          style="margin-left: auto"
+        >
+          + Assigner
+        </button>
+      </div>
+
+      {showAdd && (
+        <div class="form-row" style="margin-bottom: 1.25rem">
+          {addError && (
+            <span class="state-error" style="padding: 0.3rem 0.5rem">
+              {addError}
+            </span>
+          )}
+          <select
+            class="filter-select"
+            value={addPromo}
+            onChange={(e) => setAddPromo((e.target as HTMLSelectElement).value)}
+            style="min-width: 10rem"
+          >
+            <option value="">Promo…</option>
+            {promos.map((p) => <option key={p.id} value={p.id}>{p.id}</option>)}
+          </select>
+          <select
+            class="filter-select"
+            value={addModule}
+            onChange={(e) =>
+              setAddModule((e.target as HTMLSelectElement).value)}
+            style="min-width: 14rem"
+          >
+            <option value="">Module…</option>
+            {modules.map((m) => (
+              <option key={m.id} value={m.id}>{m.id} – {m.nom}</option>
+            ))}
+          </select>
+          <input
+            class="form-input"
+            placeholder="User ID enseignant…"
+            value={addProf}
+            onInput={(e) => setAddProf((e.target as HTMLInputElement).value)}
+            style="min-width: 10rem"
+          />
+          <button
+            type="button"
+            class="btn btn-primary"
+            onClick={addEnseignement}
+            disabled={adding}
+          >
+            {adding ? "…" : "Créer"}
+          </button>
+          <button
+            type="button"
+            class="btn btn-secondary"
+            onClick={() => setShowAdd(false)}
+          >
+            Annuler
+          </button>
+        </div>
+      )}
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>Promo</th>
+                  <th>Module</th>
+                  <th>Enseignant (User.id)</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {filtered.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={4} class="state-empty">
+                        Aucun enseignement trouvé
+                      </td>
+                    </tr>
+                  )
+                  : filtered.map((e) => {
+                    const mod = moduleMap[e.idModule];
+                    return (
+                      <tr key={`${e.idProf}-${e.idModule}-${e.idPromo}`}>
+                        <td>
+                          <span class="promo-chip">{e.idPromo}</span>
+                        </td>
+                        <td class="col-promo">
+                          {mod ? `${mod.id} – ${mod.nom}` : e.idModule}
+                        </td>
+                        <td>{e.idProf}</td>
+                        <td>
+                          <div class="col-actions">
+                            <button
+                              type="button"
+                              class="btn btn-sm btn-danger"
+                              onClick={() =>
+                                deleteEnseignement(
+                                  e.idProf,
+                                  e.idModule,
+                                  e.idPromo,
+                                )}
+                            >
+                              🗑
+                            </button>
+                          </div>
+                        </td>
+                      </tr>
+                    );
+                  })}
+              </tbody>
+            </table>
+          </div>
+        )}
+
+      <div class="info-note">
+        <p>
+          Un même module peut être enseigné par plusieurs utilisateurs sur une
+          même promo.
+        </p>
+        <p class="info-note-dim">
+          Clé composite = idProf (User.Id) + idModule + idPromo
+        </p>
+      </div>
+    </div>
+  );
+}

routes/(apps)/admin/(_islands)/AdminModules.tsx

@@ -0,0 +1,204 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Module = { id: string; nom: string };
+
+export default function AdminModules() {
+  const [modules, setModules] = useState<Module[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [newId, setNewId] = useState("");
+  const [newNom, setNewNom] = useState("");
+  const [creating, setCreating] = useState(false);
+  const [editId, setEditId] = useState<string | null>(null);
+  const [editNom, setEditNom] = useState("");
+
+  async function load() {
+    try {
+      const res = await fetch("/admin/api/modules");
+      if (!res.ok) throw new Error("Impossible de charger les modules");
+      setModules(await res.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function createModule() {
+    if (!newId.trim() || !newNom.trim()) return;
+    setCreating(true);
+    try {
+      const res = await fetch("/admin/api/modules", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ id: newId.trim(), nom: newNom.trim() }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setNewId("");
+      setNewNom("");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setCreating(false);
+    }
+  }
+
+  async function saveEdit(id: string) {
+    try {
+      const res = await fetch(`/admin/api/modules/${encodeURIComponent(id)}`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ nom: editNom.trim() }),
+      });
+      if (!res.ok) throw new Error("Modification échouée");
+      setEditId(null);
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  async function deleteModule(id: string) {
+    if (!confirm(`Supprimer le module ${id} ?`)) return;
+    try {
+      const res = await fetch(
+        `/admin/api/modules/${encodeURIComponent(id)}`,
+        { method: "DELETE" },
+      );
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Gestion des Modules</h2>
+
+      {error && <p class="state-error">{error}</p>}
+
+      <div class="form-row">
+        <input
+          class="form-input"
+          placeholder="Identifiant (ex: JIA3)"
+          value={newId}
+          onInput={(e) => setNewId((e.target as HTMLInputElement).value)}
+          style="min-width: 10rem"
+        />
+        <input
+          class="form-input"
+          placeholder="Nom du module"
+          value={newNom}
+          onInput={(e) => setNewNom((e.target as HTMLInputElement).value)}
+        />
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={createModule}
+          disabled={creating}
+        >
+          + Ajouter
+        </button>
+      </div>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>Identifiant</th>
+                  <th>Nom</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {modules.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={3} class="state-empty">
+                        Aucun module enregistré
+                      </td>
+                    </tr>
+                  )
+                  : modules.map((m) => (
+                    <tr key={m.id}>
+                      <td class="col-dim">{m.id}</td>
+                      <td>
+                        {editId === m.id
+                          ? (
+                            <input
+                              class="form-input"
+                              value={editNom}
+                              onInput={(e) =>
+                                setEditNom(
+                                  (e.target as HTMLInputElement).value,
+                                )}
+                              style="min-width: 0; width: 100%"
+                            />
+                          )
+                          : m.nom}
+                      </td>
+                      <td>
+                        <div class="col-actions">
+                          {editId === m.id
+                            ? (
+                              <>
+                                <button
+                                  type="button"
+                                  class="btn btn-sm btn-primary"
+                                  onClick={() => saveEdit(m.id)}
+                                >
+                                  ✓
+                                </button>
+                                <button
+                                  type="button"
+                                  class="btn btn-sm btn-secondary"
+                                  onClick={() => setEditId(null)}
+                                >
+                                  ✕
+                                </button>
+                              </>
+                            )
+                            : (
+                              <>
+                                <button
+                                  type="button"
+                                  class="btn btn-sm btn-secondary"
+                                  onClick={() => {
+                                    setEditId(m.id);
+                                    setEditNom(m.nom);
+                                  }}
+                                >
+                                  ✏
+                                </button>
+                                <button
+                                  type="button"
+                                  class="btn btn-sm btn-danger"
+                                  onClick={() => deleteModule(m.id)}
+                                >
+                                  🗑
+                                </button>
+                              </>
+                            )}
+                        </div>
+                      </td>
+                    </tr>
+                  ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/admin/(_islands)/AdminPermissions.tsx

@@ -0,0 +1,107 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Perm = { id: string; nom: string };
+type Role = { id: number; nom: string; permissions: string[] };
+
+export default function AdminPermissions() {
+  const [permissions, setPermissions] = useState<Perm[]>([]);
+  const [roles, setRoles] = useState<Role[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    async function load() {
+      try {
+        const [pRes, rRes] = await Promise.all([
+          fetch("/admin/api/permissions"),
+          fetch("/admin/api/roles"),
+        ]);
+        if (!pRes.ok) throw new Error("Impossible de charger les permissions");
+        setPermissions(await pRes.json());
+        if (rRes.ok) setRoles(await rRes.json());
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Erreur");
+      } finally {
+        setLoading(false);
+      }
+    }
+    load();
+  }, []);
+
+  function rolesForPerm(permId: string): Role[] {
+    return roles.filter((r) => r.permissions.includes(permId));
+  }
+
+  const MAX_ROLE_CHIPS = 2;
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Permissions</h2>
+
+      <div class="info-note" style="margin-top: 0; margin-bottom: 1.25rem">
+        <p>
+          Les permissions sont définies statiquement par le serveur.
+        </p>
+        <p class="info-note-dim">
+          Elles ne peuvent pas être créées ou supprimées via l'API.
+        </p>
+      </div>
+
+      {error && <p class="state-error">{error}</p>}
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>idPermission</th>
+                  <th>nomPermission</th>
+                  <th>Rôles associés</th>
+                </tr>
+              </thead>
+              <tbody>
+                {permissions.map((p) => {
+                  const associated = rolesForPerm(p.id);
+                  const shown = associated.slice(0, MAX_ROLE_CHIPS);
+                  const overflow = associated.length - MAX_ROLE_CHIPS;
+                  return (
+                    <tr key={p.id}>
+                      <td>
+                        <span
+                          class="col-promo"
+                          style="font-family: monospace"
+                        >
+                          {p.id}
+                        </span>
+                      </td>
+                      <td>{p.nom}</td>
+                      <td>
+                        <div style="display: flex; flex-wrap: wrap; align-items: center; gap: 0.1rem">
+                          {shown.map((r) => (
+                            <span key={r.id} class="role-chip">{r.nom}</span>
+                          ))}
+                          {overflow > 0 && (
+                            <span
+                              class="col-dim"
+                              style="font-size: 0.72rem; margin-left: 0.2rem"
+                            >
+                              +{overflow}
+                            </span>
+                          )}
+                          {associated.length === 0 && (
+                            <span class="col-dim">—</span>
+                          )}
+                        </div>
+                      </td>
+                    </tr>
+                  );
+                })}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/admin/(_islands)/AdminRoles.tsx

@@ -0,0 +1,294 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Role = { id: number; nom: string; permissions: string[] };
+type Perm = { id: string; nom: string };
+
+const MAX_CHIPS = 3;
+
+export default function AdminRoles() {
+  const [roles, setRoles] = useState<Role[]>([]);
+  const [permissions, setPermissions] = useState<Perm[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [newNom, setNewNom] = useState("");
+  const [creating, setCreating] = useState(false);
+
+  // Manage-perms sub-view
+  const [managingRole, setManagingRole] = useState<Role | null>(null);
+  const [editPerms, setEditPerms] = useState<Set<string>>(new Set());
+  const [saving, setSaving] = useState(false);
+  const [saveError, setSaveError] = useState<string | null>(null);
+
+  async function load() {
+    try {
+      const [rRes, pRes] = await Promise.all([
+        fetch("/admin/api/roles"),
+        fetch("/admin/api/permissions"),
+      ]);
+      if (!rRes.ok) throw new Error("Impossible de charger les rôles");
+      setRoles(await rRes.json());
+      if (pRes.ok) setPermissions(await pRes.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function createRole() {
+    if (!newNom.trim()) return;
+    setCreating(true);
+    try {
+      const res = await fetch("/admin/api/roles", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ nom: newNom.trim() }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setNewNom("");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setCreating(false);
+    }
+  }
+
+  async function deleteRole(id: number) {
+    if (!confirm("Supprimer ce rôle ?")) return;
+    try {
+      const res = await fetch(`/admin/api/roles/${id}`, { method: "DELETE" });
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  function openManage(role: Role) {
+    setManagingRole(role);
+    setEditPerms(new Set(role.permissions));
+    setSaveError(null);
+  }
+
+  function togglePerm(permId: string) {
+    setEditPerms((prev) => {
+      const next = new Set(prev);
+      if (next.has(permId)) next.delete(permId);
+      else next.add(permId);
+      return next;
+    });
+  }
+
+  async function savePerms() {
+    if (!managingRole) return;
+    setSaving(true);
+    setSaveError(null);
+    try {
+      const res = await fetch(`/admin/api/roles/${managingRole.id}`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          nom: managingRole.nom,
+          permissions: [...editPerms],
+        }),
+      });
+      if (!res.ok) throw new Error("Enregistrement échoué");
+      await load();
+      setManagingRole(null);
+    } catch (e) {
+      setSaveError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setSaving(false);
+    }
+  }
+
+  // ---- Manage-perms view ----
+  if (managingRole) {
+    const activeCount = editPerms.size;
+    return (
+      <div class="page-content">
+        <a
+          class="back-link"
+          href="#"
+          onClick={(e) => {
+            e.preventDefault();
+            setManagingRole(null);
+          }}
+        >
+          ← Retour à la liste des rôles
+        </a>
+        <h2 class="page-title">
+          Permissions du rôle – {managingRole.nom}
+        </h2>
+
+        {saveError && <p class="state-error">{saveError}</p>}
+
+        <div
+          class="toolbar"
+          style="margin-bottom: 1.25rem; align-items: center"
+        >
+          <div style="display: flex; align-items: center; gap: 0.6rem">
+            <span class="numEtud-chip">idRole : {managingRole.id}</span>
+            <span style="font-weight: var(--font-weight-bold); font-size: 0.9rem">
+              {managingRole.nom}
+            </span>
+            <span style="font-size: 0.8rem; color: light-dark(var(--light-foreground-dim), var(--dark-foreground-dim))">
+              {activeCount} permission{activeCount !== 1 ? "s" : ""} active
+              {activeCount !== 1 ? "s" : ""}
+            </span>
+          </div>
+          <button
+            type="button"
+            class="btn btn-primary"
+            onClick={savePerms}
+            disabled={saving}
+          >
+            {saving ? "…" : "Enregistrer"}
+          </button>
+        </div>
+
+        <div style="margin-bottom: 0.5rem; display: flex; justify-content: space-between">
+          <span style="font-size: 0.78rem; font-weight: var(--font-weight-bold)">
+            Permissions disponibles
+          </span>
+          <span style="font-size: 0.72rem; color: light-dark(var(--light-foreground-dim), var(--dark-foreground-dim))">
+            Activer = inclure dans le rôle
+          </span>
+        </div>
+
+        <div class="perm-toggle-grid">
+          {permissions.map((p) => {
+            const active = editPerms.has(p.id);
+            return (
+              <label
+                key={p.id}
+                class={`perm-toggle-card${active ? " active" : ""}`}
+              >
+                <div class="perm-toggle-label">
+                  <span class="perm-toggle-id">{p.id}</span>
+                  <span class="perm-toggle-nom">{p.nom}</span>
+                </div>
+                <span class="toggle-switch">
+                  <input
+                    type="checkbox"
+                    checked={active}
+                    onChange={() => togglePerm(p.id)}
+                  />
+                  <span class="toggle-slider" />
+                </span>
+              </label>
+            );
+          })}
+        </div>
+      </div>
+    );
+  }
+
+  // ---- Main list view ----
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Gestion des Rôles</h2>
+
+      {error && <p class="state-error">{error}</p>}
+
+      <div class="toolbar">
+        <input
+          class="form-input"
+          placeholder="Nom du rôle…"
+          value={newNom}
+          onInput={(e) => setNewNom((e.target as HTMLInputElement).value)}
+          onKeyDown={(e) => e.key === "Enter" && createRole()}
+          style="min-width: 14rem"
+        />
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={createRole}
+          disabled={creating}
+        >
+          + Créer rôle
+        </button>
+      </div>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>idRole</th>
+                  <th>Nom du rôle</th>
+                  <th>Permissions</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {roles.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={4} class="state-empty">
+                        Aucun rôle enregistré
+                      </td>
+                    </tr>
+                  )
+                  : roles.map((r) => {
+                    const shown = r.permissions.slice(0, MAX_CHIPS);
+                    const overflow = r.permissions.length - MAX_CHIPS;
+                    return (
+                      <tr key={r.id}>
+                        <td class="col-dim">{r.id}</td>
+                        <td style="font-weight: var(--font-weight-bold)">
+                          {r.nom}
+                        </td>
+                        <td>
+                          <div style="display: flex; flex-wrap: wrap; align-items: center; gap: 0.1rem">
+                            {shown.map((p) => (
+                              <span key={p} class="perm-chip">{p}</span>
+                            ))}
+                            {overflow > 0 && (
+                              <span
+                                class="col-dim"
+                                style="font-size: 0.72rem; margin-left: 0.2rem"
+                              >
+                                +{overflow}
+                              </span>
+                            )}
+                          </div>
+                        </td>
+                        <td>
+                          <div class="col-actions">
+                            <button
+                              type="button"
+                              class="btn btn-sm btn-secondary"
+                              onClick={() => openManage(r)}
+                            >
+                              ⚙ Gérer perms
+                            </button>
+                            <button
+                              type="button"
+                              class="btn btn-sm btn-danger"
+                              onClick={() => deleteRole(r.id)}
+                            >
+                              🗑
+                            </button>
+                          </div>
+                        </td>
+                      </tr>
+                    );
+                  })}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/admin/(_islands)/AdminUsers.tsx

@@ -0,0 +1,201 @@
+import { useEffect, useState } from "preact/hooks";
+
+type User = { id: string; nom: string; prenom: string; idRole: number | null };
+type Role = { id: number; nom: string };
+
+export default function AdminUsers() {
+  const [users, setUsers] = useState<User[]>([]);
+  const [roles, setRoles] = useState<Role[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [newId, setNewId] = useState("");
+  const [newNom, setNewNom] = useState("");
+  const [newPrenom, setNewPrenom] = useState("");
+  const [newIdRole, setNewIdRole] = useState("");
+  const [creating, setCreating] = useState(false);
+
+  const [filterNom, setFilterNom] = useState("");
+
+  async function load() {
+    try {
+      const [uRes, rRes] = await Promise.all([
+        fetch("/admin/api/users"),
+        fetch("/admin/api/roles"),
+      ]);
+      if (!uRes.ok) throw new Error("Impossible de charger les utilisateurs");
+      setUsers(await uRes.json());
+      if (rRes.ok) setRoles(await rRes.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function createUser() {
+    if (!newId.trim() || !newNom.trim() || !newPrenom.trim()) return;
+    setCreating(true);
+    try {
+      const res = await fetch("/admin/api/users", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          id: newId.trim(),
+          nom: newNom.trim(),
+          prenom: newPrenom.trim(),
+          idRole: newIdRole ? Number(newIdRole) : null,
+        }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setNewId("");
+      setNewNom("");
+      setNewPrenom("");
+      setNewIdRole("");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setCreating(false);
+    }
+  }
+
+  async function deleteUser(id: string) {
+    if (!confirm(`Supprimer l'utilisateur ${id} ?`)) return;
+    try {
+      const res = await fetch(`/admin/api/users/${encodeURIComponent(id)}`, {
+        method: "DELETE",
+      });
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  const roleMap = Object.fromEntries(roles.map((r) => [r.id, r.nom]));
+
+  const filtered = users.filter((u) =>
+    !filterNom ||
+    `${u.nom} ${u.prenom} ${u.id}`.toLowerCase().includes(
+      filterNom.toLowerCase(),
+    )
+  );
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Gestion des Utilisateurs</h2>
+
+      {error && <p class="state-error">{error}</p>}
+
+      <div class="form-row">
+        <input
+          class="form-input"
+          placeholder="Login (uid)"
+          value={newId}
+          onInput={(e) => setNewId((e.target as HTMLInputElement).value)}
+          style="min-width: 9rem"
+        />
+        <input
+          class="form-input"
+          placeholder="Nom"
+          value={newNom}
+          onInput={(e) => setNewNom((e.target as HTMLInputElement).value)}
+        />
+        <input
+          class="form-input"
+          placeholder="Prénom"
+          value={newPrenom}
+          onInput={(e) => setNewPrenom((e.target as HTMLInputElement).value)}
+        />
+        <select
+          class="filter-select"
+          value={newIdRole}
+          onChange={(e) => setNewIdRole((e.target as HTMLSelectElement).value)}
+        >
+          <option value="">Aucun rôle</option>
+          {roles.map((r) => <option key={r.id} value={r.id}>{r.nom}</option>)}
+        </select>
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={createUser}
+          disabled={creating}
+        >
+          + Ajouter
+        </button>
+      </div>
+
+      <div class="filters">
+        <input
+          class="filter-input"
+          placeholder="Rechercher…"
+          value={filterNom}
+          onInput={(e) => setFilterNom((e.target as HTMLInputElement).value)}
+        />
+      </div>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>Login</th>
+                  <th>Nom</th>
+                  <th>Prénom</th>
+                  <th>Rôle</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {filtered.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={5} class="state-empty">
+                        Aucun utilisateur trouvé
+                      </td>
+                    </tr>
+                  )
+                  : filtered.map((u) => (
+                    <tr key={u.id}>
+                      <td class="col-dim">{u.id}</td>
+                      <td>{u.nom}</td>
+                      <td>{u.prenom}</td>
+                      <td>
+                        {u.idRole ? (roleMap[u.idRole] ?? `#${u.idRole}`) : "—"}
+                      </td>
+                      <td>
+                        <div class="col-actions">
+                          <a
+                            class="btn btn-sm btn-secondary"
+                            href={`/admin/users/${encodeURIComponent(u.id)}`}
+                            f-client-nav={false}
+                          >
+                            ✏
+                          </a>
+                          <button
+                            type="button"
+                            class="btn btn-sm btn-danger"
+                            onClick={() => deleteUser(u.id)}
+                          >
+                            🗑
+                          </button>
+                        </div>
+                      </td>
+                    </tr>
+                  ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/admin/(_props)/props.ts

@@ -0,0 +1,18 @@
+import { AppProperties } from "$root/defaults/interfaces.ts";
+
+const properties: AppProperties = {
+  name: "Admin",
+  icon: "school",
+  pages: {
+    index: "Accueil",
+    users: "Utilisateurs",
+    roles: "Rôles",
+    permissions: "Permissions",
+    modules: "Modules",
+    enseignements: "Enseignements",
+  },
+  adminOnly: ["users", "roles", "permissions", "modules", "enseignements"],
+  hint: "PolyMPR module",
+};
+
+export default properties;

routes/(apps)/admin/api/enseignements.ts

@@ -0,0 +1,87 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { enseignements } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+const _NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+const CONFLICT = new Response(
+  JSON.stringify({ error: "Cet enseignement existe déjà." }),
+  { status: 409, headers: { "content-type": "application/json" } },
+);
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // GET /enseignements
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(JSON.stringify([]), {
+        headers: { "content-type": "application/json" },
+      });
+    }
+    const rows = await db.select().from(enseignements);
+    return new Response(JSON.stringify(rows), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #29 POST /enseignements
+  async POST(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    let body: { idProf: string; idModule: string; idPromo: string };
+    try {
+      body = await request.json();
+    } catch {
+      return new Response(null, { status: 500 });
+    }
+
+    if (!body.idProf || !body.idModule || !body.idPromo) {
+      return new Response(null, { status: 400 });
+    }
+
+    // Check if enseignement already exists
+    const existing = await db
+      .select()
+      .from(enseignements)
+      .where(
+        and(
+          eq(enseignements.idProf, body.idProf),
+          eq(enseignements.idModule, body.idModule),
+          eq(enseignements.idPromo, body.idPromo),
+        ),
+      )
+      .then((rows) => rows[0] ?? null);
+
+    if (existing) {
+      return CONFLICT;
+    }
+
+    const [created] = await db
+      .insert(enseignements)
+      .values({
+        idProf: body.idProf,
+        idModule: body.idModule,
+        idPromo: body.idPromo,
+      })
+      .returning();
+
+    return new Response(JSON.stringify(created), {
+      status: 201,
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/admin/api/enseignements/[idProf]/[idModule]/[idPromo].ts

@@ -0,0 +1,75 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { enseignements } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #30 GET /enseignements/{idProf}/{idModule}/{idPromo}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const idProf = context.params.idProf;
+    const idModule = context.params.idModule;
+    const idPromo = context.params.idPromo;
+
+    const enseignement = await db
+      .select()
+      .from(enseignements)
+      .where(
+        and(
+          eq(enseignements.idProf, idProf),
+          eq(enseignements.idModule, idModule),
+          eq(enseignements.idPromo, idPromo),
+        ),
+      )
+      .then((rows) => rows[0] ?? null);
+
+    if (!enseignement) return NOT_FOUND;
+
+    return new Response(JSON.stringify(enseignement), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #31 DELETE /enseignements/{idProf}/{idModule}/{idPromo}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const idProf = context.params.idProf;
+    const idModule = context.params.idModule;
+    const idPromo = context.params.idPromo;
+
+    const [deleted] = await db
+      .delete(enseignements)
+      .where(
+        and(
+          eq(enseignements.idProf, idProf),
+          eq(enseignements.idModule, idModule),
+          eq(enseignements.idPromo, idPromo),
+        ),
+      )
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/admin/api/example.ts

@@ -0,0 +1,22 @@
+import { Handlers } from "$fresh/server.ts";
+
+export const handler: Handlers = {
+  async POST(request, context) {
+    if (request.headers.get("content-type") != "application/json") {
+      return new Response(null, {
+        status: 400,
+      });
+    }
+
+    const responseBody = {
+      requestBody: await request.json(),
+      context,
+    };
+
+    return new Response(JSON.stringify(responseBody), {
+      headers: {
+        "content-type": "application/json",
+      },
+    });
+  },
+};

routes/(apps)/admin/api/modules.ts

@@ -0,0 +1,68 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { modules } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #23 GET /modules
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(JSON.stringify([]), {
+        headers: { "content-type": "application/json" },
+      });
+    }
+
+    const rows = await db.select().from(modules);
+    return new Response(JSON.stringify(rows), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #24 POST /modules
+  async POST(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(null, { status: 403 });
+    }
+
+    let body: { id: string; nom: string };
+    try {
+      body = await request.json();
+    } catch {
+      return new Response(null, { status: 500 });
+    }
+
+    if (!body.id || !body.id.trim() || !body.nom || !body.nom.trim()) {
+      return new Response(null, { status: 400 });
+    }
+
+    const existing = await db
+      .select()
+      .from(modules)
+      .where(eq(modules.id, body.id))
+      .then((rows) => rows[0] ?? null);
+
+    if (existing) {
+      return new Response(
+        JSON.stringify({ error: "Un module avec cet identifiant existe déjà" }),
+        { status: 409, headers: { "content-type": "application/json" } },
+      );
+    }
+
+    const [created] = await db
+      .insert(modules)
+      .values({ id: body.id, nom: body.nom })
+      .returning();
+
+    return new Response(JSON.stringify(created), {
+      status: 201,
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/admin/api/modules/[idModule].ts

@@ -0,0 +1,74 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { modules } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #25 GET /modules/{idModule}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const module = await db
+      .select()
+      .from(modules)
+      .where(eq(modules.id, context.params.idModule))
+      .then((rows) => rows[0] ?? null);
+
+    if (!module) return NOT_FOUND;
+
+    return new Response(JSON.stringify(module), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #26 PUT /modules/{idModule}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    let body: { nom: string };
+    try {
+      body = await request.json();
+    } catch {
+      return new Response(null, { status: 500 });
+    }
+
+    if (typeof body.nom !== "string") {
+      return new Response(null, { status: 400 });
+    }
+
+    const [updated] = await db
+      .update(modules)
+      .set({ nom: body.nom })
+      .where(eq(modules.id, context.params.idModule))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(JSON.stringify(updated), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #27 DELETE /modules/{idModule}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const [deleted] = await db
+      .delete(modules)
+      .where(eq(modules.id, context.params.idModule))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/admin/api/permissions.ts

@@ -0,0 +1,16 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { permissions } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  async GET(
+    _request: Request,
+    _context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const result = await db.select().from(permissions);
+    return new Response(JSON.stringify(result), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/admin/api/roles.ts

@@ -0,0 +1,68 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { rolePermissions, roles } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+async function getRoleWithPermissions(
+  id: number,
+): Promise<{ id: number; nom: string; permissions: string[] } | null> {
+  const role = await db
+    .select()
+    .from(roles)
+    .where(eq(roles.id, id))
+    .then((rows) => rows[0] ?? null);
+
+  if (!role) return null;
+
+  const perms = await db
+    .select({ idPermission: rolePermissions.idPermission })
+    .from(rolePermissions)
+    .where(eq(rolePermissions.idRole, id));
+
+  return {
+    id: role.id,
+    nom: role.nom,
+    permissions: perms.map((p) => p.idPermission),
+  };
+}
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #65 GET /roles
+  async GET(
+    _request: Request,
+    _context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const allRoles = await db.select().from(roles);
+
+    const result = await Promise.all(
+      allRoles.map((r) => getRoleWithPermissions(r.id)),
+    );
+
+    return new Response(JSON.stringify(result), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #66 POST /roles
+  async POST(
+    request: Request,
+    _context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const body: { nom: string } = await request.json();
+
+    if (!body.nom) {
+      return new Response(null, { status: 400 });
+    }
+
+    const [created] = await db
+      .insert(roles)
+      .values({ nom: body.nom })
+      .returning();
+
+    return new Response(
+      JSON.stringify({ id: created.id, nom: created.nom, permissions: [] }),
+      { status: 201, headers: { "content-type": "application/json" } },
+    );
+  },
+};

routes/(apps)/admin/api/roles/[idRole].ts

@@ -0,0 +1,101 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { rolePermissions, roles } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+async function getRoleWithPermissions(
+  id: number,
+): Promise<{ id: number; nom: string; permissions: string[] } | null> {
+  const role = await db
+    .select()
+    .from(roles)
+    .where(eq(roles.id, id))
+    .then((rows) => rows[0] ?? null);
+
+  if (!role) return null;
+
+  const perms = await db
+    .select({ idPermission: rolePermissions.idPermission })
+    .from(rolePermissions)
+    .where(eq(rolePermissions.idRole, id));
+
+  return {
+    id: role.id,
+    nom: role.nom,
+    permissions: perms.map((p) => p.idPermission),
+  };
+}
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #67 GET /roles/{idRole}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const id = Number(context.params.idRole);
+    const role = await getRoleWithPermissions(id);
+
+    if (!role) return NOT_FOUND;
+
+    return new Response(JSON.stringify(role), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #68 PUT /roles/{idRole}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const id = Number(context.params.idRole);
+    const body: { nom: string; permissions: string[] } = await request.json();
+
+    const [updated] = await db
+      .update(roles)
+      .set({ nom: body.nom })
+      .where(eq(roles.id, id))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    // Reset permissions
+    await db.delete(rolePermissions).where(eq(rolePermissions.idRole, id));
+
+    if (body.permissions?.length) {
+      await db.insert(rolePermissions).values(
+        body.permissions.map((p) => ({ idRole: id, idPermission: p })),
+      );
+    }
+
+    const role = await getRoleWithPermissions(id);
+    return new Response(JSON.stringify(role), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #69 DELETE /roles/{idRole}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const id = Number(context.params.idRole);
+
+    // Cascade delete role_permissions first
+    await db.delete(rolePermissions).where(eq(rolePermissions.idRole, id));
+
+    const [deleted] = await db
+      .delete(roles)
+      .where(eq(roles.id, id))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/admin/api/users.ts

@@ -0,0 +1,74 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { users } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #60 GET /users
+  async GET(
+    request: Request,
+    _context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const url = new URL(request.url);
+    const idRole = url.searchParams.get("idRole");
+
+    const rows = idRole
+      ? await db.select().from(users).where(eq(users.idRole, Number(idRole)))
+      : await db.select().from(users);
+
+    return new Response(JSON.stringify(rows), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #61 POST /users
+  async POST(
+    request: Request,
+    _context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    let body: { id: string; nom: string; prenom: string; idRole: number };
+    try {
+      body = await request.json();
+    } catch {
+      return new Response(null, { status: 500 });
+    }
+
+    if (
+      !body.id || !body.id.trim() || !body.nom || !body.nom.trim() ||
+      !body.prenom || !body.prenom.trim()
+    ) {
+      return new Response(null, { status: 400 });
+    }
+
+    const existing = await db
+      .select()
+      .from(users)
+      .where(eq(users.id, body.id))
+      .then((rows) => rows[0] ?? null);
+
+    if (existing) {
+      return new Response(
+        JSON.stringify({
+          error: "Un utilisateur avec cet identifiant existe déjà",
+        }),
+        { status: 409, headers: { "content-type": "application/json" } },
+      );
+    }
+
+    const [created] = await db
+      .insert(users)
+      .values({
+        id: body.id,
+        nom: body.nom,
+        prenom: body.prenom,
+        idRole: body.idRole,
+      })
+      .returning();
+
+    return new Response(JSON.stringify(created), {
+      status: 201,
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/admin/api/users/[id].ts

@@ -0,0 +1,66 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { users } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #62 GET /users/{id}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const user = await db
+      .select()
+      .from(users)
+      .where(eq(users.id, context.params.id))
+      .then((rows) => rows[0] ?? null);
+
+    if (!user) return NOT_FOUND;
+
+    return new Response(JSON.stringify(user), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #63 PUT /users/{id}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const body: { nom: string; prenom: string; idRole: number } = await request
+      .json();
+
+    const [updated] = await db
+      .update(users)
+      .set({ nom: body.nom, prenom: body.prenom, idRole: body.idRole })
+      .where(eq(users.id, context.params.id))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(JSON.stringify(updated), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #64 DELETE /users/{id}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    const [deleted] = await db
+      .delete(users)
+      .where(eq(users.id, context.params.id))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/admin/index.tsx

@@ -0,0 +1,2 @@
+import makeIndex from "$root/defaults/makeIndex.ts";
+export default makeIndex(import.meta.dirname!);

routes/(apps)/admin/partials/enseignements.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminEnseignements from "../(_islands)/AdminEnseignements.tsx";
+
+// deno-lint-ignore require-await
+async function Enseignements(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminEnseignements />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Enseignements);

routes/(apps)/admin/partials/index.tsx

@@ -0,0 +1,44 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+
+// deno-lint-ignore require-await
+export async function Index(
+  _request: Request,
+  context: FreshContext<State>,
+) {
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Administration</h2>
+      <p>
+        Bienvenue{" "}
+        <strong>
+          {(context.state as unknown as { session: Record<string, string> })
+            .session.displayName}
+        </strong>
+        .
+      </p>
+      <p>
+        Gérez les{" "}
+        <a href="/admin/modules" f-partial="/admin/partials/modules">
+          modules
+        </a>
+        ,{" "}
+        <a href="/admin/users" f-partial="/admin/partials/users">
+          utilisateurs
+        </a>
+        ,{" "}
+        <a href="/admin/roles" f-partial="/admin/partials/roles">
+          rôles
+        </a>{" "}
+        depuis la barre de navigation.
+      </p>
+    </div>
+  );
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Index);

routes/(apps)/admin/partials/modules.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminModules from "../(_islands)/AdminModules.tsx";
+
+// deno-lint-ignore require-await
+async function Modules(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminModules />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Modules);

routes/(apps)/admin/partials/permissions.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminPermissions from "../(_islands)/AdminPermissions.tsx";
+
+// deno-lint-ignore require-await
+async function Permissions(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminPermissions />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Permissions);

routes/(apps)/admin/partials/roles.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminRoles from "../(_islands)/AdminRoles.tsx";
+
+// deno-lint-ignore require-await
+async function Roles(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminRoles />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Roles);

routes/(apps)/admin/partials/users.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminUsers from "../(_islands)/AdminUsers.tsx";
+
+// deno-lint-ignore require-await
+async function Users(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminUsers />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Users);

routes/(apps)/mobility/(_islands)/EditMobility.tsx

@@ -240,7 +240,7 @@ export default function EditMobility() {
           </table>
         </div>
       ))}
-      <button onClick={handleSave} disabled={isSaving}>
+      <button type="button" onClick={handleSave} disabled={isSaving}>
         {isSaving ? "Saving..." : "Confirm"}
       </button>
     </section>

routes/(apps)/mobility/api/insert_mobility.ts

@@ -1,55 +1,40 @@
 import { Handlers } from "$fresh/server.ts";
-import { Database } from "@db/sqlite";
+import { db } from "$root/databases/db.ts";
+import { mobility, promotions, students } from "$root/databases/schema.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
 
 export const handler: Handlers = {
-  // deno-lint-ignore require-await
   async GET() {
     try {
-      console.log("Connecting to mobility database...");
+      const studentRows = await db
-      const connection = new Database("databases/data/mobility.db", {
+        .select({
-        create: false,
+          id: students.userId,
-      });
+          firstName: students.firstName,
-      connection.run(
+          lastName: students.lastName,
-        "ATTACH DATABASE 'databases/data/students.db' AS students",
+          promotionId: students.promotionId,
-      );
+          endyear: promotions.endyear,
-      console.log("Connected to databases.");
+          current: promotions.current,
+        })
+        .from(students)
+        .leftJoin(promotions, eq(students.promotionId, promotions.id));
 
-      const students = connection.prepare(
+      const mobilityRows = await db.select().from(mobility);
-        `SELECT 
-          students.userId AS id, 
-          students.firstName, 
-          students.lastName, 
-          students.promotionId AS promotionId, 
-          promotions.name AS promotionName
-         FROM students.students
-         LEFT JOIN students.promotions ON students.promotionId = promotions.id`,
-      ).all();
 
-      const mobilities = connection.prepare(
+      const promotionRows = await db
-        `SELECT 
+        .select({
-          mobility.id, 
+          id: promotions.id,
-          mobility.studentId, 
+          endyear: promotions.endyear,
-          mobility.startDate, 
+          current: promotions.current,
-          mobility.endDate, 
+        })
-          mobility.weeksCount, 
+        .from(promotions);
-          mobility.destinationCountry, 
-          mobility.destinationName, 
-          mobility.mobilityStatus 
-        FROM mobility`,
-      ).all();
-
-      const promotions = connection.prepare(
-        `SELECT id, name FROM students.promotions`,
-      ).all();
-
-      connection.close();
 
       return new Response(
-        JSON.stringify({ mobilities, students, promotions }),
+        JSON.stringify({
-        {
+          mobilities: mobilityRows,
-          status: 200,
+          students: studentRows,
-          headers: { "Content-Type": "application/json" },
+          promotions: promotionRows,
-        },
+        }),
+        { status: 200, headers: { "Content-Type": "application/json" } },
       );
     } catch (error) {
       console.error("Error fetching mobility data:", error);
@@ -58,8 +43,6 @@ export const handler: Handlers = {
   },
 
   async POST(request) {
-    console.log("API /mobility/api/insert_mobility POST called");
-
     try {
       const body = await request.json();
       const { data } = body;
@@ -67,32 +50,8 @@ export const handler: Handlers = {
       if (!Array.isArray(data)) {
         throw new Error("Invalid request body");
       }
-      console.log("Connecting to mobility database...");
-      const connection = new Database("databases/data/mobility.db", {
-        create: false,
-      });
 
-      console.log("Attaching students database...");
+      for (const entry of data) {
-      connection.run(
-        "ATTACH DATABASE 'databases/data/students.db' AS students",
-      );
-      console.log("Students database attached successfully.");
-
-      const insertQuery = connection.prepare(
-        `INSERT INTO mobility (
-          id, studentId, startDate, endDate, weeksCount, destinationCountry, destinationName, mobilityStatus
-        )
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?)
-        ON CONFLICT(id) DO UPDATE SET
-          startDate = excluded.startDate,
-          endDate = excluded.endDate,
-          weeksCount = excluded.weeksCount,
-          destinationCountry = excluded.destinationCountry,
-          destinationName = excluded.destinationName,
-          mobilityStatus = excluded.mobilityStatus`,
-      );
-
-      for (const mobility of data) {
         const {
           id,
           studentId,
@@ -102,19 +61,16 @@ export const handler: Handlers = {
           destinationCountry,
           destinationName,
           mobilityStatus = "N/A",
-        } = mobility;
+        } = entry;
 
-        console.log("Processing mobility data:", mobility);
+        const studentExists = await db
+          .select({ userId: students.userId })
+          .from(students)
+          .where(eq(students.userId, studentId))
+          .limit(1)
+          .then((rows) => rows.length > 0);
 
-        const studentExists = connection
+        if (!studentExists) {
-          .prepare(
-            `SELECT COUNT(*) AS count FROM students.students WHERE userId = ?`,
-          )
-          .get(studentId);
-
-        console.log(`Student ${studentId} exists:`, studentExists.count > 0);
-
-        if (studentExists.count === 0) {
           console.warn(`Skipping mobility for unknown studentId: ${studentId}`);
           continue;
         }
@@ -123,40 +79,38 @@ export const handler: Handlers = {
         if (startDate && endDate) {
           const start = new Date(startDate);
           const end = new Date(endDate);
-          if (start <= end) {
+          calculatedWeeksCount = start <= end
-            calculatedWeeksCount = Math.ceil(
+            ? Math.ceil(
               (end.getTime() - start.getTime()) / (7 * 24 * 60 * 60 * 1000),
-            );
+            )
-          } else {
+            : null;
-            calculatedWeeksCount = null;
-          }
         }
 
-        console.log("Executing SQL insert/update query for:", {
+        await db
-          id,
+          .insert(mobility)
-          studentId,
+          .values({
-          startDate,
+            id,
-          endDate,
+            studentId,
-          calculatedWeeksCount,
+            startDate,
-          destinationCountry,
+            endDate,
-          destinationName,
+            weeksCount: calculatedWeeksCount,
-          mobilityStatus,
+            destinationCountry,
-        });
+            destinationName,
-
+            mobilityStatus,
-        insertQuery.run(
+          })
-          id,
+          .onConflictDoUpdate({
-          studentId,
+            target: mobility.id,
-          startDate,
+            set: {
-          endDate,
+              startDate,
-          calculatedWeeksCount,
+              endDate,
-          destinationCountry,
+              weeksCount: calculatedWeeksCount,
-          destinationName,
+              destinationCountry,
-          mobilityStatus,
+              destinationName,
-        );
+              mobilityStatus,
+            },
+          });
       }
 
-      connection.close();
-      console.log("Mobility data inserted/updated successfully.");
       return new Response("Data inserted/updated successfully", {
         status: 200,
       });

routes/(apps)/mobility/partials/index.tsx

@@ -7,7 +7,7 @@ import { State } from "$root/routes/_middleware.ts";
 
 // deno-lint-ignore require-await
 export async function Index(_request: Request, context: FreshContext<State>) {
-  return <h2>Welcome to {context.state.displayName || 'Guest'}.</h2>;
+  return <h2>Welcome to {context.state.session?.displayName}.</h2>;
 }
 
 export const config = getPartialsConfig();

routes/(apps)/notes/(_islands)/AdminConsultNotes.tsx

@@ -0,0 +1,145 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Student = {
+  numEtud: number;
+  nom: string;
+  prenom: string;
+  idPromo: string;
+};
+type Promotion = { id: string; annee: string | null };
+
+export default function AdminConsultNotes() {
+  const [students, setStudents] = useState<Student[]>([]);
+  const [promos, setPromos] = useState<Promotion[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const [filterPromo, setFilterPromo] = useState("");
+  const [filterNom, setFilterNom] = useState("");
+  const [filterPrenom, setFilterPrenom] = useState("");
+  const [applied, setApplied] = useState({
+    promo: "",
+    nom: "",
+    prenom: "",
+  });
+
+  useEffect(() => {
+    async function load() {
+      try {
+        const [sRes, pRes] = await Promise.all([
+          fetch("/students/api/students"),
+          fetch("/students/api/promotions"),
+        ]);
+        if (!sRes.ok) throw new Error("Impossible de charger les étudiants");
+        setStudents(await sRes.json());
+        if (pRes.ok) setPromos(await pRes.json());
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Erreur");
+      } finally {
+        setLoading(false);
+      }
+    }
+    load();
+  }, []);
+
+  const filtered = students.filter((s) => {
+    if (applied.promo && s.idPromo !== applied.promo) return false;
+    if (
+      applied.nom &&
+      !s.nom.toLowerCase().includes(applied.nom.toLowerCase())
+    ) return false;
+    if (
+      applied.prenom &&
+      !s.prenom.toLowerCase().includes(applied.prenom.toLowerCase())
+    ) return false;
+    return true;
+  });
+
+  function applyFilters() {
+    setApplied({ promo: filterPromo, nom: filterNom, prenom: filterPrenom });
+  }
+
+  return (
+    <div class="page-content">
+      <div class="toolbar">
+        <h2 class="page-title">Consulter les Notes</h2>
+      </div>
+
+      {error && <p class="state-error">{error}</p>}
+
+      <div class="filters">
+        <select
+          class="filter-select"
+          value={filterPromo}
+          onChange={(e) =>
+            setFilterPromo((e.target as HTMLSelectElement).value)}
+        >
+          <option value="">Toutes les promos</option>
+          {promos.map((p) => <option key={p.id} value={p.id}>{p.id}</option>)}
+        </select>
+        <input
+          class="filter-input"
+          placeholder="Nom"
+          value={filterNom}
+          onInput={(e) => setFilterNom((e.target as HTMLInputElement).value)}
+        />
+        <input
+          class="filter-input"
+          placeholder="Prénom"
+          value={filterPrenom}
+          onInput={(e) => setFilterPrenom((e.target as HTMLInputElement).value)}
+        />
+        <button type="button" class="btn btn-primary" onClick={applyFilters}>
+          Filtrer
+        </button>
+      </div>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>Promo</th>
+                  <th>Nom</th>
+                  <th>Prénom</th>
+                  <th>N° Étudiant</th>
+                  <th>Action</th>
+                </tr>
+              </thead>
+              <tbody>
+                {filtered.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={5} class="state-empty">
+                        Aucun étudiant trouvé
+                      </td>
+                    </tr>
+                  )
+                  : filtered.map((s) => (
+                    <tr key={s.numEtud}>
+                      <td class="col-promo">{s.idPromo}</td>
+                      <td>{s.nom}</td>
+                      <td>{s.prenom}</td>
+                      <td class="col-dim">{s.numEtud}</td>
+                      <td>
+                        <div class="col-actions">
+                          <a
+                            class="btn btn-sm btn-secondary"
+                            href={`/notes/edition/${s.numEtud}`}
+                            f-client-nav={false}
+                          >
+                            ✏ édit
+                          </a>
+                        </div>
+                      </td>
+                    </tr>
+                  ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/notes/(_islands)/AdminUEs.tsx

@@ -0,0 +1,347 @@
+import { useEffect, useState } from "preact/hooks";
+
+type UE = { id: number; nom: string };
+type UEModule = {
+  idModule: string;
+  idUE: number;
+  idPromo: string;
+  coeff: number;
+};
+type Module = { id: string; nom: string };
+type Promo = { id: string; annee: string };
+
+export default function AdminUEs() {
+  const [ues, setUes] = useState<UE[]>([]);
+  const [ueModules, setUeModules] = useState<UEModule[]>([]);
+  const [modules, setModules] = useState<Module[]>([]);
+  const [promos, setPromos] = useState<Promo[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  const [selectedUe, setSelectedUe] = useState<UE | null>(null);
+
+  // New UE form
+  const [newUeNom, setNewUeNom] = useState("");
+  const [creatingUe, setCreatingUe] = useState(false);
+
+  // Add UE-module form
+  const [addModuleId, setAddModuleId] = useState("");
+  const [addPromoId, setAddPromoId] = useState("");
+  const [addCoeff, setAddCoeff] = useState("1");
+  const [adding, setAdding] = useState(false);
+  const [addError, setAddError] = useState<string | null>(null);
+
+  async function load() {
+    try {
+      const [uRes, umRes, mRes, pRes] = await Promise.all([
+        fetch("/notes/api/ues"),
+        fetch("/notes/api/ue-modules"),
+        fetch("/admin/api/modules"),
+        fetch("/students/api/promotions"),
+      ]);
+      if (!uRes.ok) throw new Error("Impossible de charger les UEs");
+      const uesData: UE[] = await uRes.json();
+      setUes(uesData);
+      if (umRes.ok) setUeModules(await umRes.json());
+      if (mRes.ok) setModules(await mRes.json());
+      if (pRes.ok) setPromos(await pRes.json());
+      // Keep selection in sync
+      setSelectedUe((prev) =>
+        prev ? uesData.find((u) => u.id === prev.id) ?? null : null
+      );
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function createUE() {
+    if (!newUeNom.trim()) return;
+    setCreatingUe(true);
+    try {
+      const res = await fetch("/notes/api/ues", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ nom: newUeNom.trim() }),
+      });
+      if (!res.ok) throw new Error("Création échouée");
+      setNewUeNom("");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setCreatingUe(false);
+    }
+  }
+
+  async function deleteUeModule(
+    idModule: string,
+    idUE: number,
+    idPromo: string,
+  ) {
+    if (!confirm("Supprimer ce module de la UE ?")) return;
+    try {
+      const res = await fetch(
+        `/notes/api/ue-modules/${encodeURIComponent(idModule)}/${idUE}/${
+          encodeURIComponent(idPromo)
+        }`,
+        { method: "DELETE" },
+      );
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  async function addUeModule() {
+    if (!selectedUe || !addModuleId || !addPromoId) {
+      setAddError("Module et Promo sont requis");
+      return;
+    }
+    const coeff = parseFloat(addCoeff);
+    if (isNaN(coeff) || coeff <= 0) {
+      setAddError("Coefficient invalide");
+      return;
+    }
+    setAdding(true);
+    setAddError(null);
+    try {
+      const res = await fetch("/notes/api/ue-modules", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          idModule: addModuleId,
+          idUE: selectedUe.id,
+          idPromo: addPromoId,
+          coeff,
+        }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setAddModuleId("");
+      setAddPromoId("");
+      setAddCoeff("1");
+      await load();
+    } catch (e) {
+      setAddError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setAdding(false);
+    }
+  }
+
+  const moduleMap = Object.fromEntries(modules.map((m) => [m.id, m]));
+
+  const selectedUeModules = selectedUe
+    ? ueModules.filter((um) => um.idUE === selectedUe.id)
+    : [];
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Gestion des UEs</h2>
+      <p
+        class="col-dim"
+        style="font-size: 0.78rem; margin: -0.5rem 0 1rem"
+      >
+        UE = Unité d'Enseignement regroupant plusieurs modules
+      </p>
+
+      {error && <p class="state-error">{error}</p>}
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="ue-split">
+            {/* Left panel – UE list */}
+            <div class="ue-panel-left">
+              <div class="panel-box">
+                <p class="panel-box-title">UEs existantes</p>
+                <div class="form-row" style="margin-bottom: 0.75rem">
+                  <input
+                    class="form-input"
+                    placeholder="Nom de la nouvelle UE…"
+                    value={newUeNom}
+                    onInput={(e) =>
+                      setNewUeNom((e.target as HTMLInputElement).value)}
+                    onKeyDown={(e) => e.key === "Enter" && createUE()}
+                    style="min-width: 0; flex: 1"
+                  />
+                </div>
+                <button
+                  type="button"
+                  class="btn btn-primary"
+                  onClick={createUE}
+                  disabled={creatingUe}
+                  style="width: 100%; justify-content: center; margin-bottom: 0.5rem"
+                >
+                  + Nouvelle UE
+                </button>
+                <div>
+                  {ues.map((ue) => (
+                    <div
+                      key={ue.id}
+                      class={`ue-list-item${
+                        selectedUe?.id === ue.id ? " active" : ""
+                      }`}
+                      onClick={() => {
+                        setSelectedUe(ue);
+                        setAddError(null);
+                      }}
+                    >
+                      {ue.nom}
+                    </div>
+                  ))}
+                  {ues.length === 0 && (
+                    <p class="state-empty" style="padding: 1rem 0">
+                      Aucune UE
+                    </p>
+                  )}
+                </div>
+              </div>
+            </div>
+
+            {/* Right panel – UE detail */}
+            <div class="ue-panel-right">
+              {selectedUe
+                ? (
+                  <div class="panel-box">
+                    <p class="panel-box-title">{selectedUe.nom}</p>
+                    <p style="font-size: 0.78rem; font-weight: var(--font-weight-bold); margin: 0 0 0.5rem">
+                      Modules assignés (UE_Module)
+                    </p>
+                    <div class="data-table-wrap" style="margin-bottom: 1rem">
+                      <table class="data-table">
+                        <thead>
+                          <tr>
+                            <th>Module</th>
+                            <th>Promo</th>
+                            <th>Coeff</th>
+                            <th>Actions</th>
+                          </tr>
+                        </thead>
+                        <tbody>
+                          {selectedUeModules.length === 0
+                            ? (
+                              <tr>
+                                <td colspan={4} class="state-empty">
+                                  Aucun module assigné
+                                </td>
+                              </tr>
+                            )
+                            : selectedUeModules.map((um) => {
+                              const mod = moduleMap[um.idModule];
+                              return (
+                                <tr
+                                  key={`${um.idModule}-${um.idPromo}`}
+                                >
+                                  <td class="col-promo">
+                                    {mod
+                                      ? `${mod.id} – ${mod.nom}`
+                                      : um.idModule}
+                                  </td>
+                                  <td>
+                                    <span class="promo-chip">{um.idPromo}</span>
+                                  </td>
+                                  <td>{um.coeff}</td>
+                                  <td>
+                                    <button
+                                      type="button"
+                                      class="btn btn-sm btn-danger"
+                                      onClick={() =>
+                                        deleteUeModule(
+                                          um.idModule,
+                                          um.idUE,
+                                          um.idPromo,
+                                        )}
+                                    >
+                                      🗑
+                                    </button>
+                                  </td>
+                                </tr>
+                              );
+                            })}
+                        </tbody>
+                      </table>
+                    </div>
+
+                    <p style="font-size: 0.78rem; font-weight: var(--font-weight-bold); margin: 0 0 0.5rem">
+                      Ajouter un module à cette UE
+                    </p>
+                    {addError && (
+                      <p class="state-error" style="padding: 0.3rem 0.5rem">
+                        {addError}
+                      </p>
+                    )}
+                    <div class="form-row">
+                      <select
+                        class="filter-select"
+                        value={addModuleId}
+                        onChange={(e) =>
+                          setAddModuleId(
+                            (e.target as HTMLSelectElement).value,
+                          )}
+                        style="min-width: 12rem"
+                      >
+                        <option value="">Module ▾</option>
+                        {modules.map((m) => (
+                          <option key={m.id} value={m.id}>
+                            {m.id} – {m.nom}
+                          </option>
+                        ))}
+                      </select>
+                      <select
+                        class="filter-select"
+                        value={addPromoId}
+                        onChange={(e) =>
+                          setAddPromoId(
+                            (e.target as HTMLSelectElement).value,
+                          )}
+                        style="min-width: 9rem"
+                      >
+                        <option value="">Promo ▾</option>
+                        {promos.map((p) => (
+                          <option key={p.id} value={p.id}>{p.id}</option>
+                        ))}
+                      </select>
+                      <input
+                        type="number"
+                        class="form-input"
+                        placeholder="Coeff"
+                        value={addCoeff}
+                        min="0.1"
+                        step="0.5"
+                        onInput={(e) =>
+                          setAddCoeff((e.target as HTMLInputElement).value)}
+                        style="min-width: 5rem; max-width: 6rem"
+                      />
+                      <button
+                        type="button"
+                        class="btn btn-primary"
+                        onClick={addUeModule}
+                        disabled={adding}
+                      >
+                        {adding ? "…" : "+ Ajouter"}
+                      </button>
+                    </div>
+                  </div>
+                )
+                : (
+                  <div class="panel-box">
+                    <p class="state-empty" style="padding: 2rem 0">
+                      Sélectionnez une UE pour voir ses modules
+                    </p>
+                  </div>
+                )}
+            </div>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/notes/(_islands)/ImportNotes.tsx

@@ -0,0 +1,150 @@
+// @deno-types="https://cdn.sheetjs.com/xlsx-0.20.3/package/types/index.d.ts"
+import * as XLSX from "https://cdn.sheetjs.com/xlsx-0.20.3/package/xlsx.mjs";
+import { useRef } from "preact/hooks";
+import { useSignal } from "@preact/signals";
+
+export default function ImportNotes() {
+  const file = useSignal<File | null>(null);
+  const dragging = useSignal(false);
+  const uploading = useSignal(false);
+  const error = useSignal<string | null>(null);
+  const success = useSignal<string | null>(null);
+  const inputRef = useRef<HTMLInputElement>(null);
+
+  function pickFile(f: File) {
+    if (!f.name.match(/\.xlsx?$/i)) {
+      error.value = "Fichier invalide — format attendu : .xlsx";
+      return;
+    }
+    file.value = f;
+    error.value = null;
+    success.value = null;
+  }
+
+  function onDragOver(e: DragEvent) {
+    e.preventDefault();
+    dragging.value = true;
+  }
+
+  function onDragLeave() {
+    dragging.value = false;
+  }
+
+  function onDrop(e: DragEvent) {
+    e.preventDefault();
+    dragging.value = false;
+    const f = e.dataTransfer?.files?.[0];
+    if (f) pickFile(f);
+  }
+
+  function onInputChange(e: Event) {
+    const f = (e.target as HTMLInputElement).files?.[0];
+    if (f) pickFile(f);
+  }
+
+  async function doImport() {
+    if (!file.value) return;
+    uploading.value = true;
+    error.value = null;
+    success.value = null;
+
+    try {
+      const arrayBuffer = await file.value.arrayBuffer();
+      const workbook = XLSX.read(arrayBuffer, { type: "array" });
+      let imported = 0;
+      let failed = 0;
+
+      for (const sheetName of workbook.SheetNames) {
+        const sheet = workbook.Sheets[sheetName];
+        const rows = XLSX.utils.sheet_to_json<{
+          numEtud: number;
+          idModule: string;
+          note: number;
+        }>(sheet, { header: ["numEtud", "idModule", "note"], range: 1 });
+
+        for (const row of rows) {
+          const res = await fetch("/notes/api/notes", {
+            method: "POST",
+            headers: { "content-type": "application/json" },
+            body: JSON.stringify(row),
+          });
+          if (res.ok) imported++;
+          else failed++;
+        }
+      }
+
+      success.value = `Import terminé — ${imported} ajouté${
+        imported !== 1 ? "s" : ""
+      }${failed > 0 ? `, ${failed} erreur${failed !== 1 ? "s" : ""}` : ""}`;
+    } catch {
+      error.value = "Erreur lors de la lecture du fichier.";
+    } finally {
+      uploading.value = false;
+    }
+  }
+
+  function downloadTemplate() {
+    const wb = XLSX.utils.book_new();
+    const ws = XLSX.utils.aoa_to_sheet([["numEtud", "idModule", "note"]]);
+    XLSX.utils.book_append_sheet(wb, ws, "Notes");
+    XLSX.writeFile(wb, "modele_notes.xlsx");
+  }
+
+  return (
+    <div>
+      <input
+        ref={inputRef}
+        type="file"
+        accept=".xlsx,.xls"
+        style="display:none"
+        onChange={onInputChange}
+      />
+
+      <div
+        class={`drop-zone${dragging.value ? " dragging" : ""}`}
+        onDragOver={onDragOver}
+        onDragLeave={onDragLeave}
+        onDrop={onDrop}
+        onClick={() => inputRef.current?.click()}
+      >
+        <span class="drop-zone-icon">⬇</span>
+        {file.value ? <span class="drop-zone-file">{file.value.name}</span> : (
+          <>
+            <span class="drop-zone-text">Glisser le fichier .xlsx ici</span>
+            <span class="drop-zone-hint">ou cliquer pour parcourir</span>
+          </>
+        )}
+      </div>
+
+      {error.value && <p class="state-error">{error.value}</p>}
+      {success.value && (
+        <p style="font-size:0.82rem; color: light-dark(var(--light-accent-color), var(--dark-accent-color)); margin-bottom: 0.75rem">
+          {success.value}
+        </p>
+      )}
+
+      <div class="upload-actions">
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={doImport}
+          disabled={!file.value || uploading.value}
+        >
+          {uploading.value ? "…" : "⊕ Importer"}
+        </button>
+        <button
+          type="button"
+          class="btn btn-secondary"
+          onClick={downloadTemplate}
+        >
+          ⊕ Télécharger Modèle
+        </button>
+      </div>
+
+      <p class="upload-format">
+        Format : <strong>numEtud</strong> | <strong>idModule</strong> |{" "}
+        <strong>note</strong>
+      </p>
+    </div>
+  );
+}

routes/(apps)/notes/(_islands)/NoteRecap.tsx

@@ -0,0 +1,391 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Student = {
+  numEtud: number;
+  nom: string;
+  prenom: string;
+  idPromo: string;
+};
+type UE = { id: number; nom: string };
+type UEModule = {
+  idModule: string;
+  idUE: number;
+  idPromo: string;
+  coeff: number;
+};
+type Module = { id: string; nom: string };
+type Note = { numEtud: number; idModule: string; note: number };
+type Ajustement = { numEtud: number; idUE: number; valeur: number };
+
+type Props = { numEtud: number };
+
+function fmt(n: number): string {
+  return `${Math.round(n * 10) / 10}/20`;
+}
+
+function noteClass(n: number): string {
+  return n >= 10 ? "note-chip note-chip--ok" : "note-chip note-chip--fail";
+}
+
+export default function NoteRecap({ numEtud }: Props) {
+  const [student, setStudent] = useState<Student | null>(null);
+  const [ueList, setUeList] = useState<UE[]>([]);
+  const [ueModules, setUeModules] = useState<UEModule[]>([]);
+  const [moduleMap, setModuleMap] = useState<Map<string, string>>(new Map());
+  const [noteMap, setNoteMap] = useState<Map<string, number>>(new Map());
+  const [ajustements, setAjustements] = useState<Ajustement[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [editingNote, setEditingNote] = useState<
+    { idModule: string; value: string } | null
+  >(null);
+  const [ajustInputs, setAjustInputs] = useState<Record<number, string>>({});
+
+  async function load() {
+    try {
+      const sRes = await fetch(`/students/api/students/${numEtud}`);
+      if (!sRes.ok) throw new Error("Élève introuvable");
+      const s: Student = await sRes.json();
+      setStudent(s);
+
+      const [uesRes, umRes, mRes, notesRes, ajustRes] = await Promise.all([
+        fetch("/notes/api/ues"),
+        fetch(
+          `/notes/api/ue-modules?idPromo=${encodeURIComponent(s.idPromo)}`,
+        ),
+        fetch("/admin/api/modules"),
+        fetch(`/notes/api/notes?numEtud=${numEtud}`),
+        fetch(`/notes/api/ajustements?numEtud=${numEtud}`),
+      ]);
+
+      if (uesRes.ok) setUeList(await uesRes.json());
+      if (umRes.ok) setUeModules(await umRes.json());
+      if (mRes.ok) {
+        const mods: Module[] = await mRes.json();
+        setModuleMap(new Map(mods.map((m) => [m.id, m.nom])));
+      }
+      if (notesRes.ok) {
+        const ns: Note[] = await notesRes.json();
+        setNoteMap(new Map(ns.map((n) => [n.idModule, n.note])));
+      }
+      if (ajustRes.ok) {
+        const aj: Ajustement[] = await ajustRes.json();
+        setAjustements(aj);
+        const inputs: Record<number, string> = {};
+        for (const a of aj) inputs[a.idUE] = String(a.valeur);
+        setAjustInputs(inputs);
+      }
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, [numEtud]);
+
+  function calcAvg(ueMods: UEModule[]): number | null {
+    let total = 0, coeff = 0;
+    for (const um of ueMods) {
+      const n = noteMap.get(um.idModule);
+      if (n === undefined) return null;
+      total += n * um.coeff;
+      coeff += um.coeff;
+    }
+    return coeff > 0 ? total / coeff : null;
+  }
+
+  async function saveNote(idModule: string, value: string) {
+    const note = parseFloat(value.replace(",", "."));
+    if (isNaN(note) || note < 0 || note > 20) {
+      setEditingNote(null);
+      return;
+    }
+    const res = await fetch(
+      `/notes/api/notes/${numEtud}/${encodeURIComponent(idModule)}`,
+      {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ note }),
+      },
+    );
+    if (res.ok) {
+      const updated: Note = await res.json();
+      setNoteMap((prev) => new Map(prev).set(idModule, updated.note));
+    }
+    setEditingNote(null);
+  }
+
+  async function applyAjust(idUE: number) {
+    const val = parseFloat((ajustInputs[idUE] ?? "").replace(",", "."));
+    if (isNaN(val) || val < 0 || val > 20) return;
+    const existing = ajustements.find((a) => a.idUE === idUE);
+    const res = existing
+      ? await fetch(`/notes/api/ajustements/${numEtud}/${idUE}`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ valeur: val }),
+      })
+      : await fetch("/notes/api/ajustements", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ numEtud, idUE, valeur: val }),
+      });
+    if (res.ok) {
+      const updated: Ajustement = await res.json();
+      setAjustements((prev) =>
+        existing
+          ? prev.map((a) => a.idUE === idUE ? updated : a)
+          : [...prev, updated]
+      );
+    }
+  }
+
+  async function resetAjust(idUE: number) {
+    const res = await fetch(`/notes/api/ajustements/${numEtud}/${idUE}`, {
+      method: "DELETE",
+    });
+    if (res.ok) {
+      setAjustements((prev) => prev.filter((a) => a.idUE !== idUE));
+      setAjustInputs((prev) => {
+        const c = { ...prev };
+        delete c[idUE];
+        return c;
+      });
+    }
+  }
+
+  if (loading) {
+    return (
+      <div class="page-content">
+        <p class="state-loading">Chargement…</p>
+      </div>
+    );
+  }
+  if (error && !student) {
+    return (
+      <div class="page-content">
+        <p class="state-error">{error}</p>
+      </div>
+    );
+  }
+  if (!student) return null;
+
+  return (
+    <div class="page-content">
+      <a
+        class="back-link"
+        href="/notes/courses"
+        f-partial="/notes/partials/courses"
+      >
+        ← Retour à la liste
+      </a>
+
+      <h2
+        class="page-title"
+        style="border-bottom: none; margin-bottom: 0.5rem"
+      >
+        Récap notes – {student.prenom} {student.nom}
+      </h2>
+
+      <div class="info-bar" style="margin-bottom: 1.25rem">
+        <span class="numEtud-chip">{student.numEtud}</span>
+        <span style="font-weight: 600">{student.prenom} {student.nom}</span>
+        <span class="note-chip note-chip--promo">{student.idPromo}</span>
+      </div>
+
+      {error && <p class="state-error">{error}</p>}
+
+      {ueList.length === 0
+        ? (
+          <p class="state-empty">
+            Aucune UE configurée pour cette promotion.
+          </p>
+        )
+        : ueList.map((ue) => {
+          const ueMods = ueModules.filter((um) => um.idUE === ue.id);
+          const avg = calcAvg(ueMods);
+          const ajust = ajustements.find((a) => a.idUE === ue.id);
+
+          return (
+            <div key={ue.id} class="edit-section">
+              {/* UE header */}
+              <div style="display: flex; align-items: center; gap: 0.75rem; margin-bottom: 0.75rem; flex-wrap: wrap">
+                <p class="edit-section-title" style="margin: 0">{ue.nom}</p>
+                {avg !== null && (
+                  <span class={noteClass(avg)} style="font-size: 0.78rem">
+                    Moy. calculée : {fmt(avg)}
+                  </span>
+                )}
+                {ajust && (
+                  <span
+                    class="note-chip note-chip--ajust"
+                    style="font-size: 0.78rem"
+                  >
+                    ⚡ Ajust. actif : {fmt(ajust.valeur)}
+                  </span>
+                )}
+              </div>
+
+              {/* Module rows */}
+              {ueMods.length === 0
+                ? (
+                  <p
+                    class="col-dim"
+                    style="font-size: 0.8rem; padding: 0.25rem 0; margin-bottom: 0.75rem"
+                  >
+                    Aucun module associé à cette UE pour cette promotion.
+                  </p>
+                )
+                : (
+                  <div style="margin-bottom: 0.75rem">
+                    {ueMods.map((um) => {
+                      const noteVal = noteMap.get(um.idModule);
+                      const nomMod = moduleMap.get(um.idModule) ?? um.idModule;
+                      const isEditing = editingNote?.idModule === um.idModule;
+
+                      return (
+                        <div
+                          key={um.idModule}
+                          class="note-row"
+                        >
+                          <span class="note-row-label">
+                            <span class="numEtud-chip note-row-chip">
+                              {um.idModule}
+                            </span>
+                            {nomMod}
+                          </span>
+                          <span class="col-dim note-row-coef">
+                            coef {um.coeff}
+                          </span>
+                          {isEditing
+                            ? (
+                              <div style="display: flex; align-items: center; gap: 0.25rem">
+                                <input
+                                  class="form-input"
+                                  style="width: 5rem; text-align: center; font-size: 0.85rem"
+                                  value={editingNote!.value}
+                                  autoFocus
+                                  onInput={(e) =>
+                                    setEditingNote({
+                                      idModule: um.idModule,
+                                      value:
+                                        (e.target as HTMLInputElement).value,
+                                    })}
+                                  onKeyDown={(e) => {
+                                    if (e.key === "Enter") {
+                                      saveNote(
+                                        um.idModule,
+                                        editingNote!.value,
+                                      );
+                                    }
+                                    if (e.key === "Escape") {
+                                      setEditingNote(null);
+                                    }
+                                  }}
+                                  onBlur={() =>
+                                    saveNote(um.idModule, editingNote!.value)}
+                                />
+                                <span
+                                  class="col-dim"
+                                  style="font-size: 0.75rem"
+                                >
+                                  /20
+                                </span>
+                              </div>
+                            )
+                            : (
+                              <span
+                                class={noteVal !== undefined
+                                  ? noteClass(noteVal)
+                                  : "note-chip note-chip--none"}
+                                style="font-size: 0.78rem; cursor: pointer"
+                                title="Cliquer pour modifier"
+                                onClick={() =>
+                                  setEditingNote({
+                                    idModule: um.idModule,
+                                    value: noteVal !== undefined
+                                      ? String(noteVal)
+                                      : "",
+                                  })}
+                              >
+                                {noteVal !== undefined ? fmt(noteVal) : "—/20"}
+                              </span>
+                            )}
+                          <button
+                            type="button"
+                            class="btn btn-sm btn-secondary"
+                            style="font-size: 0.75rem"
+                            onClick={() =>
+                              setEditingNote({
+                                idModule: um.idModule,
+                                value: noteVal !== undefined
+                                  ? String(noteVal)
+                                  : "",
+                              })}
+                          >
+                            ✏ note
+                          </button>
+                        </div>
+                      );
+                    })}
+                  </div>
+                )}
+
+              {/* Ajustement */}
+              <div class="ajust-section">
+                <p class="ajust-title">Ajustement de la moyenne UE</p>
+                <p class="ajust-hint">
+                  Override ponctuel – laisser vide pour utiliser la moy.
+                  calculée
+                </p>
+                <div style="display: flex; align-items: center; gap: 0.5rem; flex-wrap: wrap">
+                  <div style="display: flex; align-items: center; gap: 0.25rem">
+                    <input
+                      class="form-input"
+                      style="width: 4.5rem; text-align: center"
+                      placeholder="—"
+                      value={ajustInputs[ue.id] ?? ""}
+                      onInput={(e) =>
+                        setAjustInputs((prev) => ({
+                          ...prev,
+                          [ue.id]: (e.target as HTMLInputElement).value,
+                        }))}
+                    />
+                    <span class="col-dim" style="font-size: 0.8rem">/20</span>
+                  </div>
+                  <button
+                    type="button"
+                    class="btn btn-sm btn-primary"
+                    onClick={() => applyAjust(ue.id)}
+                  >
+                    ✓ Appliquer
+                  </button>
+                  {ajust && (
+                    <>
+                      <button
+                        type="button"
+                        class="btn btn-sm btn-secondary"
+                        onClick={() => resetAjust(ue.id)}
+                      >
+                        ✕ Réinitialiser
+                      </button>
+                      <span
+                        class="col-dim"
+                        style="font-size: 0.75rem; font-family: monospace"
+                      >
+                        Affiché à l'élève : {fmt(ajust.valeur)}
+                        {avg !== null ? ` (calculée : ${fmt(avg)})` : ""}
+                      </span>
+                    </>
+                  )}
+                </div>
+              </div>
+            </div>
+          );
+        })}
+    </div>
+  );
+}

routes/(apps)/notes/(_islands)/NotesView.tsx

@@ -0,0 +1,223 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Note = { numEtud: number; idModule: string; note: number };
+type UE = { id: number; nom: string };
+type UEModule = {
+  idModule: string;
+  idUE: number;
+  idPromo: string;
+  coeff: number;
+};
+type Module = { id: string; nom: string };
+type Ajustement = { numEtud: number; idUE: number; valeur: number };
+
+type Props = {
+  numEtud: number | null;
+  prenom: string;
+};
+
+function scoreClass(score: number | null): string {
+  if (score === null) return "score-none";
+  return score >= 10 ? "score-good" : "score-warn";
+}
+
+function avgClass(avg: number | null): string {
+  if (avg === null) return "";
+  return avg >= 10 ? "avg-good" : "avg-warn";
+}
+
+export default function NotesView({ numEtud, prenom }: Props) {
+  const [notes, setNotes] = useState<Note[]>([]);
+  const [ues, setUes] = useState<UE[]>([]);
+  const [ueModules, setUeModules] = useState<UEModule[]>([]);
+  const [modules, setModules] = useState<Module[]>([]);
+  const [ajustements, setAjustements] = useState<Ajustement[]>([]);
+  const [promos, setPromos] = useState<string[]>([]);
+  const [activePromo, setActivePromo] = useState<string | null>(null);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (numEtud === null) {
+      setLoading(false);
+      return;
+    }
+
+    async function load() {
+      try {
+        const [notesRes, uesRes, ueModRes, modRes, ajRes] = await Promise.all([
+          fetch(`/notes/api/notes?numEtud=${numEtud}`),
+          fetch("/notes/api/ues"),
+          fetch("/notes/api/ue-modules"),
+          fetch("/admin/api/modules"),
+          fetch(`/notes/api/ajustements?numEtud=${numEtud}`),
+        ]);
+
+        if (!notesRes.ok || !uesRes.ok || !ueModRes.ok) {
+          throw new Error("Erreur lors du chargement");
+        }
+
+        const [notesData, uesData, ueModData, modData, ajData] = await Promise
+          .all([
+            notesRes.json(),
+            uesRes.json(),
+            ueModRes.json(),
+            modRes.ok ? modRes.json() : [],
+            ajRes.ok ? ajRes.json() : [],
+          ]);
+
+        setNotes(notesData);
+        setUes(uesData);
+        setUeModules(ueModData);
+        setModules(modData);
+        setAjustements(ajData);
+
+        // Derive promos from UE-modules for this student's notes
+        const noteModuleIds = new Set(notesData.map((n: Note) => n.idModule));
+        const relevantPromos = [
+          ...new Set(
+            ueModData
+              .filter((um: UEModule) => noteModuleIds.has(um.idModule))
+              .map((um: UEModule) => um.idPromo),
+          ),
+        ] as string[];
+
+        setPromos(relevantPromos);
+        if (relevantPromos.length > 0) setActivePromo(relevantPromos[0]);
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Erreur inconnue");
+      } finally {
+        setLoading(false);
+      }
+    }
+
+    load();
+  }, [numEtud]);
+
+  if (numEtud === null) {
+    return (
+      <div class="page-content">
+        <p class="state-empty">
+          Bonjour {prenom}{" "}
+          — aucun dossier étudiant n'est associé à votre compte.
+        </p>
+      </div>
+    );
+  }
+
+  if (loading) {
+    return (
+      <div class="page-content">
+        <p class="state-loading">Chargement…</p>
+      </div>
+    );
+  }
+
+  if (error) {
+    return (
+      <div class="page-content">
+        <p class="state-error">{error}</p>
+      </div>
+    );
+  }
+
+  // Filter UE-modules by active promo
+  const filteredUeModules = activePromo
+    ? ueModules.filter((um) => um.idPromo === activePromo)
+    : ueModules;
+
+  // Group UE-modules by UE
+  const ueIds = [...new Set(filteredUeModules.map((um) => um.idUE))];
+
+  const moduleMap = Object.fromEntries(modules.map((m) => [m.id, m]));
+  const noteMap = Object.fromEntries(
+    notes.map((n) => [n.idModule, n.note]),
+  );
+  const ajMap = Object.fromEntries(
+    ajustements.map((a) => [a.idUE, a.valeur]),
+  );
+
+  return (
+    <div class="page-content">
+      {promos.length > 1 && (
+        <div class="tabs">
+          {promos.map((p) => (
+            <button
+              type="button"
+              key={p}
+              class={`tab-btn${activePromo === p ? " active" : ""}`}
+              onClick={() => setActivePromo(p)}
+            >
+              {p}
+            </button>
+          ))}
+        </div>
+      )}
+
+      {ueIds.length === 0 && (
+        <p class="state-empty">Aucune note disponible pour cette période.</p>
+      )}
+
+      {ueIds.map((ueId) => {
+        const ue = ues.find((u) => u.id === ueId);
+        if (!ue) return null;
+
+        const ueModsForUE = filteredUeModules.filter((um) => um.idUE === ueId);
+        let weightedSum = 0;
+        let coveredCoeff = 0;
+        ueModsForUE.forEach((um) => {
+          const note = noteMap[um.idModule];
+          if (note !== undefined) {
+            weightedSum += note * um.coeff;
+            coveredCoeff += um.coeff;
+          }
+        });
+
+        const avg = coveredCoeff > 0 ? weightedSum / coveredCoeff : null;
+        const ajustement = ajMap[ueId] ?? null;
+        const finalAvg = avg !== null && ajustement !== null
+          ? avg + ajustement
+          : avg;
+
+        return (
+          <div key={ueId} class="ue-card">
+            <div class="ue-card-header">
+              <p class="ue-card-title">UE : {ue.nom}</p>
+              {finalAvg !== null && (
+                <p class={`ue-card-avg ${avgClass(finalAvg)}`}>
+                  Moyenne : {finalAvg.toFixed(2)}/20
+                  {ajustement !== null && ajustement !== 0 && (
+                    <span>
+                      {" "}
+                      (ajustement : {ajustement > 0 ? "+" : ""}
+                      {ajustement})
+                    </span>
+                  )}
+                </p>
+              )}
+              {finalAvg === null && (
+                <p class="ue-card-avg avg-warn">Notes non disponibles</p>
+              )}
+            </div>
+
+            {ueModsForUE.map((um) => {
+              const mod = moduleMap[um.idModule];
+              const note = noteMap[um.idModule] ?? null;
+              return (
+                <div key={um.idModule} class="ue-module-row">
+                  <span class="ue-module-name">
+                    {mod ? mod.id : um.idModule} —{" "}
+                    {mod ? mod.nom : "Module inconnu"} (coef {um.coeff})
+                  </span>
+                  <span class={`score-chip ${scoreClass(note)}`}>
+                    {note !== null ? `${note}/20` : "—"}
+                  </span>
+                </div>
+              );
+            })}
+          </div>
+        );
+      })}
+    </div>
+  );
+}

routes/(apps)/notes/(_props)/props.ts

@@ -4,11 +4,13 @@ const properties: AppProperties = {
   name: "PolyNotes",
   icon: "school",
   pages: {
-    index: "Homepage",
+    index: "Accueil",
-    notes: "Notes",
+    notes: "Mes notes",
-    courses: "Courses management",
+    courses: "Consulter",
+    ues: "UEs",
+    import: "Import xlsx",
   },
-  adminOnly: ["courses", "students"],
+  adminOnly: ["courses", "ues", "import"],
   hint: "Student grading management",
 };
 

routes/(apps)/notes/api/ajustements.ts

@@ -0,0 +1,83 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { ajustements } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #48 GET /ajustements
+  async GET(request) {
+    try {
+      const url = new URL(request.url);
+      const numEtudParam = url.searchParams.get("numEtud");
+      const idUEParam = url.searchParams.get("idUE");
+
+      let query = db.select().from(ajustements).$dynamic();
+
+      if (numEtudParam) {
+        const numEtud = parseInt(numEtudParam);
+        if (isNaN(numEtud)) {
+          return new Response("Paramètre numEtud invalide", { status: 400 });
+        }
+        query = query.where(eq(ajustements.numEtud, numEtud));
+      }
+
+      if (idUEParam) {
+        const idUE = parseInt(idUEParam);
+        if (isNaN(idUE)) {
+          return new Response("Paramètre idUE invalide", { status: 400 });
+        }
+        query = query.where(eq(ajustements.idUE, idUE));
+      }
+
+      const result = await query;
+
+      return new Response(JSON.stringify(result), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching ajustements:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #49 POST /ajustements
+  async POST(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(null, { status: 403 });
+    }
+
+    try {
+      const body: { numEtud: number; idUE: number; valeur: number } =
+        await request.json();
+
+      if (!body.numEtud || !body.idUE || body.valeur === undefined) {
+        return new Response(
+          JSON.stringify({ error: "Champs requis: numEtud, idUE, valeur" }),
+          { status: 400, headers: { "content-type": "application/json" } },
+        );
+      }
+
+      const [created] = await db
+        .insert(ajustements)
+        .values({
+          numEtud: body.numEtud,
+          idUE: body.idUE,
+          valeur: body.valeur,
+        })
+        .returning();
+
+      return new Response(JSON.stringify(created), {
+        status: 201,
+        headers: { "content-type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error creating ajustement:", error);
+      return new Response("Failed to create ajustement", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/api/ajustements/[numEtud]/[idUE].ts

@@ -0,0 +1,107 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { ajustements } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ajustement introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #50 GET /ajustements/{numEtud}/{idUE}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const idUE = Number(context.params.idUE);
+
+    if (isNaN(numEtud) || isNaN(idUE)) {
+      return new Response("Paramètres invalides", { status: 400 });
+    }
+
+    const ajustement = await db
+      .select()
+      .from(ajustements)
+      .where(and(eq(ajustements.numEtud, numEtud), eq(ajustements.idUE, idUE)))
+      .then((rows) => rows[0] ?? null);
+
+    if (!ajustement) return NOT_FOUND;
+
+    return new Response(JSON.stringify(ajustement), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #51 PUT /ajustements/{numEtud}/{idUE}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const idUE = Number(context.params.idUE);
+
+    if (isNaN(numEtud) || isNaN(idUE)) {
+      return new Response("Paramètres invalides", { status: 400 });
+    }
+
+    const body: { valeur: number } = await request.json();
+
+    if (body.valeur === undefined) {
+      return new Response(JSON.stringify({ error: "Champ requis: valeur" }), {
+        status: 400,
+        headers: { "content-type": "application/json" },
+      });
+    }
+
+    const [updated] = await db
+      .update(ajustements)
+      .set({ valeur: body.valeur })
+      .where(and(eq(ajustements.numEtud, numEtud), eq(ajustements.idUE, idUE)))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(JSON.stringify(updated), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #52 DELETE /ajustements/{numEtud}/{idUE}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const idUE = Number(context.params.idUE);
+
+    if (isNaN(numEtud) || isNaN(idUE)) {
+      return new Response("Paramètres invalides", { status: 400 });
+    }
+
+    const [deleted] = await db
+      .delete(ajustements)
+      .where(and(eq(ajustements.numEtud, numEtud), eq(ajustements.idUE, idUE)))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/notes/api/notes.ts

@@ -0,0 +1,70 @@
+import { Handlers } from "$fresh/server.ts";
+import { db } from "../../../../databases/db.ts";
+import { notes } from "../../../../databases/schema.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers = {
+  // #42 GET /notes
+  async GET(request) {
+    try {
+      const url = new URL(request.url);
+      const numEtudParam = url.searchParams.get("numEtud");
+      const idModule = url.searchParams.get("idModule");
+
+      let query = db.select().from(notes).$dynamic();
+
+      if (numEtudParam) {
+        const numEtud = parseInt(numEtudParam);
+        if (isNaN(numEtud)) {
+          return new Response("Paramètre numEtud invalide", { status: 400 });
+        }
+        query = query.where(eq(notes.numEtud, numEtud));
+      }
+
+      if (idModule) {
+        query = query.where(eq(notes.idModule, idModule));
+      }
+
+      const result = await query;
+
+      return new Response(JSON.stringify(result), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching notes:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #43 POST /notes
+  async POST(request) {
+    try {
+      const body = await request.json();
+      const { note, numEtud, idModule } = body;
+
+      if (note === undefined || !numEtud || !idModule) {
+        return new Response("Champs 'note', 'numEtud' et 'idModule' requis", {
+          status: 400,
+        });
+      }
+
+      if (typeof note !== "number" || note < 0 || note > 20) {
+        return new Response("Champ 'note' doit être un nombre entre 0 et 20", {
+          status: 400,
+        });
+      }
+
+      const result = await db.insert(notes).values({ note, numEtud, idModule })
+        .returning();
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 201,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error creating note:", error);
+      return new Response("Failed to create note", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/api/notes/[numEtud]/[idModule].ts

@@ -0,0 +1,139 @@
+import { Handlers } from "$fresh/server.ts";
+import { db } from "../../../../../../databases/db.ts";
+import { notes } from "../../../../../../databases/schema.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers = {
+  // #45 GET /notes/:numEtud/:idModule
+  async GET(_request, context) {
+    try {
+      const numEtud = parseInt(context.params.numEtud);
+      const { idModule } = context.params;
+
+      if (isNaN(numEtud)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre numEtud invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const result = await db.select().from(notes).where(
+        and(
+          eq(notes.numEtud, numEtud),
+          eq(notes.idModule, idModule),
+        ),
+      );
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching note:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #46 PUT /notes/:numEtud/:idModule
+  async PUT(request, context) {
+    try {
+      const numEtud = parseInt(context.params.numEtud);
+      const { idModule } = context.params;
+
+      if (isNaN(numEtud)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre numEtud invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const body = await request.json();
+      const { note } = body;
+
+      if (note === undefined) {
+        return new Response("Champ 'note' manquant", { status: 400 });
+      }
+
+      const result = await db.update(notes).set({ note }).where(
+        and(
+          eq(notes.numEtud, numEtud),
+          eq(notes.idModule, idModule),
+        ),
+      ).returning();
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error updating note:", error);
+      return new Response("Failed to update note", { status: 500 });
+    }
+  },
+
+  // #47 DELETE /notes/:numEtud/:idModule
+  async DELETE(_request, context) {
+    try {
+      const numEtud = parseInt(context.params.numEtud);
+      const { idModule } = context.params;
+
+      if (isNaN(numEtud)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre numEtud invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const result = await db.delete(notes).where(
+        and(
+          eq(notes.numEtud, numEtud),
+          eq(notes.idModule, idModule),
+        ),
+      ).returning();
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(null, { status: 204 });
+    } catch (error) {
+      console.error("Error deleting note:", error);
+      return new Response("Failed to delete note", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/api/ue-modules.ts

@@ -0,0 +1,72 @@
+import { Handlers } from "$fresh/server.ts";
+import { db } from "../../../../databases/db.ts";
+import { ueModules } from "../../../../databases/schema.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers = {
+  // #37 GET /ue-modules
+  async GET(request) {
+    try {
+      const url = new URL(request.url);
+      const idPromo = url.searchParams.get("idPromo");
+      const idUEParam = url.searchParams.get("idUE");
+
+      const idUE = idUEParam ? parseInt(idUEParam) : null;
+
+      if (idUEParam && isNaN(idUE!)) {
+        return new Response("Paramètre idUE invalide", { status: 400 });
+      }
+
+      const result = await db.select().from(ueModules).where(
+        and(
+          idPromo ? eq(ueModules.idPromo, idPromo) : undefined,
+          idUE ? eq(ueModules.idUE, idUE) : undefined,
+        ),
+      );
+
+      return new Response(JSON.stringify(result), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching UE-modules:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #38 POST /ue-modules
+  async POST(request) {
+    try {
+      const body = await request.json();
+      const { idModule, idUE, idPromo, coeff } = body;
+
+      if (!idModule || !idUE || !idPromo || coeff === undefined) {
+        return new Response(
+          "Champs 'idModule', 'idUE', 'idPromo' et 'coeff' requis",
+          { status: 400 },
+        );
+      }
+
+      if (typeof coeff !== "number" || coeff < 0) {
+        return new Response("Champ 'coeff' doit être un nombre >= 0", {
+          status: 400,
+        });
+      }
+
+      const result = await db.insert(ueModules).values({
+        idModule,
+        idUE,
+        idPromo,
+        coeff,
+      }).returning();
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 201,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error creating UE-module:", error);
+      return new Response("Failed to create UE-module", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/api/ue-modules/[idModule]/[idUE]/[idPromo].ts

@@ -0,0 +1,139 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { ueModules } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Association UE-Module introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+const BAD_REQUEST = new Response(
+  JSON.stringify({ error: "Paramètres invalides" }),
+  { status: 400, headers: { "content-type": "application/json" } },
+);
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #39 GET /ue-modules/{idModule}/{idUE}/{idPromo}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const idModule = context.params.idModule;
+    const idUE = Number(context.params.idUE);
+    const idPromo = context.params.idPromo;
+
+    if (isNaN(idUE)) {
+      return BAD_REQUEST;
+    }
+
+    const ueModuleAssociation = await db
+      .select()
+      .from(ueModules)
+      .where(
+        eq(ueModules.idModule, idModule),
+        eq(ueModules.idUE, idUE),
+        eq(ueModules.idPromo, idPromo),
+      )
+      .then((rows) => rows[0] ?? null);
+
+    if (!ueModuleAssociation) return NOT_FOUND;
+
+    return new Response(JSON.stringify(ueModuleAssociation), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #40 PUT /ue-modules/{idModule}/{idUE}/{idPromo}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const idModule = context.params.idModule;
+    const idUE = Number(context.params.idUE);
+    const idPromo = context.params.idPromo;
+
+    if (isNaN(idUE)) {
+      return BAD_REQUEST;
+    }
+
+    const body: { coeff: number } = await request.json();
+
+    if (typeof body.coeff !== "number") {
+      return new Response(
+        JSON.stringify({ error: "Le champ 'coeff' doit être un nombre" }),
+        { status: 400, headers: { "content-type": "application/json" } },
+      );
+    }
+
+    const [updated] = await db
+      .update(ueModules)
+      .set({ coeff: body.coeff })
+      .where(
+        and(
+          eq(ueModules.idModule, idModule),
+          eq(ueModules.idUE, idUE),
+          eq(ueModules.idPromo, idPromo),
+        ),
+      )
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(
+      JSON.stringify({
+        idModule: updated.idModule,
+        idUE: updated.idUE,
+        idPromo: updated.idPromo,
+        coeff: updated.coeff,
+      }),
+      {
+        headers: { "content-type": "application/json" },
+      },
+    );
+  },
+
+  // #41 DELETE /ue-modules/{idModule}/{idUE}/{idPromo}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const idModule = context.params.idModule;
+    const idUE = Number(context.params.idUE);
+    const idPromo = context.params.idPromo;
+
+    if (isNaN(idUE)) {
+      return BAD_REQUEST;
+    }
+
+    const [deleted] = await db
+      .delete(ueModules)
+      .where(
+        and(
+          eq(ueModules.idModule, idModule),
+          eq(ueModules.idUE, idUE),
+          eq(ueModules.idPromo, idPromo),
+        ),
+      )
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/notes/api/ues.ts

@@ -0,0 +1,42 @@
+import { Handlers } from "$fresh/server.ts";
+import { db } from "../../../../databases/db.ts";
+import { ues } from "../../../../databases/schema.ts";
+
+export const handler: Handlers = {
+  // #32 GET /ues
+  async GET() {
+    try {
+      const result = await db.select().from(ues);
+
+      return new Response(JSON.stringify(result), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching UEs:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #33 POST /ues
+  async POST(request) {
+    try {
+      const body = await request.json();
+      const { nom } = body;
+
+      if (!nom || !nom.trim()) {
+        return new Response("Champ 'nom' manquant", { status: 400 });
+      }
+
+      const result = await db.insert(ues).values({ nom }).returning();
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 201,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error creating UE:", error);
+      return new Response("Failed to create UE", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/api/ues/[idUE].ts

@@ -0,0 +1,122 @@
+import { Handlers } from "$fresh/server.ts";
+import { db } from "../../../../../databases/db.ts";
+import { ues } from "../../../../../databases/schema.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+export const handler: Handlers = {
+  // # 34 GET /ues/:idUE
+  async GET(_request, context) {
+    try {
+      const idUE = parseInt(context.params.idUE);
+
+      if (isNaN(idUE)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre idUE invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const result = await db.select().from(ues).where(eq(ues.id, idUE));
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error fetching UE:", error);
+      return new Response("Failed to fetch data", { status: 500 });
+    }
+  },
+
+  // #35 PUT /ues/:idUE
+  async PUT(request, context) {
+    try {
+      const idUE = parseInt(context.params.idUE);
+
+      if (isNaN(idUE)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre idUE invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const body = await request.json();
+      const { nom } = body;
+
+      if (!nom) {
+        return new Response("Champ 'nom' manquant", { status: 400 });
+      }
+
+      const result = await db.update(ues).set({ nom }).where(eq(ues.id, idUE))
+        .returning();
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(JSON.stringify(result[0]), {
+        status: 200,
+        headers: { "Content-Type": "application/json" },
+      });
+    } catch (error) {
+      console.error("Error updating UE:", error);
+      return new Response("Failed to update UE", { status: 500 });
+    }
+  },
+
+  // #36 DELETE /ues/:idUE
+  async DELETE(_request, context) {
+    try {
+      const idUE = parseInt(context.params.idUE);
+
+      if (isNaN(idUE)) {
+        return new Response(
+          JSON.stringify({ error: "Paramètre idUE invalide" }),
+          {
+            status: 400,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      const result = await db.delete(ues).where(eq(ues.id, idUE)).returning();
+
+      if (result.length === 0) {
+        return new Response(
+          JSON.stringify({ error: "Ressource introuvable" }),
+          {
+            status: 404,
+            headers: { "Content-Type": "application/json" },
+          },
+        );
+      }
+
+      return new Response(null, { status: 204 });
+    } catch (error) {
+      console.error("Error deleting UE:", error);
+      return new Response("Failed to delete UE", { status: 500 });
+    }
+  },
+};

routes/(apps)/notes/edition/[numEtud].tsx

@@ -0,0 +1,12 @@
+import { FreshContext } from "$fresh/server.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import NoteRecap from "../(_islands)/NoteRecap.tsx";
+
+// deno-lint-ignore require-await
+export default async function EditionPage(
+  _request: Request,
+  context: FreshContext<AuthenticatedState>,
+) {
+  const numEtud = Number(context.params.numEtud);
+  return <NoteRecap numEtud={numEtud} />;
+}

routes/(apps)/notes/partials/(admin)/courses.tsx

@@ -3,11 +3,12 @@ import {
   makePartials,
 } from "$root/defaults/makePartials.tsx";
 import { FreshContext } from "$fresh/server.ts";
-import { State } from "$root/routes/_middleware.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminConsultNotes from "../../(_islands)/AdminConsultNotes.tsx";
 
 // deno-lint-ignore require-await
-async function Courses(_request: Request, context: FreshContext<State>) {
+async function Courses(_request: Request, _context: FreshContext<State>) {
-  return <h2>Welcome to {context.state.displayName || 'Guest'}.</h2>;
+  return <AdminConsultNotes />;
 }
 
 export const config = getPartialsConfig();

routes/(apps)/notes/partials/(admin)/import.tsx

@@ -0,0 +1,29 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import ImportNotes from "../../(_islands)/ImportNotes.tsx";
+
+// deno-lint-ignore require-await
+async function ImportNotesPage(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Importer des Notes</h2>
+      <p
+        class="upload-format"
+        style="margin-bottom: 1.25rem"
+      >
+        POST /notes/api/notes
+      </p>
+      <ImportNotes />
+    </div>
+  );
+}
+
+export const config = getPartialsConfig();
+export default makePartials(ImportNotesPage);

routes/(apps)/notes/partials/(admin)/ues.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminUEs from "../../(_islands)/AdminUEs.tsx";
+
+// deno-lint-ignore require-await
+async function UEs(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminUEs />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(UEs);

routes/(apps)/notes/partials/index.tsx

@@ -3,11 +3,53 @@ import {
   makePartials,
 } from "$root/defaults/makePartials.tsx";
 import { FreshContext } from "$fresh/server.ts";
-import { State } from "$root/routes/_middleware.ts";
+import { State } from "$root/defaults/interfaces.ts";
 
 // deno-lint-ignore require-await
-export async function Index(_request: Request, context: FreshContext<State>) {
+export async function Index(
-  return <h2>Welcome to {context.state.displayName || 'Guest'}.</h2>;
+  _request: Request,
+  context: FreshContext<State>,
+) {
+  const isEmployee =
+    (context.state as unknown as { session: Record<string, string> }).session
+      .eduPersonPrimaryAffiliation === "employee";
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">PolyNotes</h2>
+      <p>
+        Bienvenue{" "}
+        <strong>
+          {(context.state as unknown as { session: Record<string, string> })
+            .session.displayName}
+        </strong>
+        .
+      </p>
+      {isEmployee
+        ? (
+          <p>
+            Consultez les{" "}
+            <a href="/notes/courses" f-partial="/notes/partials/courses">
+              notes des élèves
+            </a>{" "}
+            ou gérez les{" "}
+            <a href="/notes/ues" f-partial="/notes/partials/ues">
+              UEs
+            </a>
+            .
+          </p>
+        )
+        : (
+          <p>
+            Consultez vos{" "}
+            <a href="/notes/notes" f-partial="/notes/partials/notes">
+              notes
+            </a>
+            .
+          </p>
+        )}
+    </div>
+  );
 }
 
 export const config = getPartialsConfig();

routes/(apps)/notes/partials/notes.tsx

@@ -1,13 +1,36 @@
+import { FreshContext } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { students } from "$root/databases/schema.ts";
+import { and, eq } from "npm:drizzle-orm@0.45.2";
 import {
   getPartialsConfig,
   makePartials,
 } from "$root/defaults/makePartials.tsx";
-import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
-import { State } from "$root/routes/_middleware.ts";
+import NotesView from "../(_islands)/NotesView.tsx";
 
-// deno-lint-ignore require-await
+async function Notes(
-async function Notes(_request: Request, context: FreshContext<State>) {
+  _request: Request,
-  return <h2>Welcome to {context.state.displayName || 'Guest'}.</h2>;
+  context: FreshContext<State>,
+) {
+  const session =
+    (context.state as unknown as { session: { sn: string; givenName: string } })
+      .session;
+  const { sn, givenName } = session;
+
+  let numEtud: number | null = null;
+  try {
+    const student = await db
+      .select()
+      .from(students)
+      .where(and(eq(students.nom, sn), eq(students.prenom, givenName)))
+      .then((rows) => rows[0] ?? null);
+    numEtud = student?.numEtud ?? null;
+  } catch {
+    // DB lookup failed — island will show fallback message
+  }
+
+  return <NotesView numEtud={numEtud} prenom={session.givenName} />;
 }
 
 export const config = getPartialsConfig();

routes/(apps)/notes/recap/[numEtud].tsx

@@ -0,0 +1,12 @@
+import { FreshContext } from "$fresh/server.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import NoteRecap from "../(_islands)/NoteRecap.tsx";
+
+// deno-lint-ignore require-await
+export default async function RecapPage(
+  _request: Request,
+  context: FreshContext<AuthenticatedState>,
+) {
+  const numEtud = Number(context.params.numEtud);
+  return <NoteRecap numEtud={numEtud} />;
+}

routes/(apps)/students/(_components)/Promotion.tsx

@@ -22,7 +22,7 @@ export default function Promotion(props: PromotionProps) {
         <tbody>
           {props.students
             .filter((student) => student.promotionId === props.promo.id)
-            .map((student) => <Student student={student} />)}
+            .map((student) => <Student key={student.id} student={student} />)}
         </tbody>
       </table>
     </div>

routes/(apps)/students/(_islands)/AdminPromotions.tsx

@@ -0,0 +1,235 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Promotion = { id: string; annee: string | null };
+type Student = { numEtud: number; idPromo: string };
+
+function parsePromo(id: string) {
+  const m = id.match(/^(\d+A)(FISE|FISA)(.+)$/);
+  if (!m) return { annee: id, filiere: "?", anneeSco: "?" };
+  return { annee: m[1], filiere: m[2], anneeSco: m[3] };
+}
+
+const ANNEES = ["3A", "4A", "5A"];
+const FILIERES = ["FISE", "FISA"];
+
+export default function AdminPromotions() {
+  const [promos, setPromos] = useState<Promotion[]>([]);
+  const [students, setStudents] = useState<Student[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [creating, setCreating] = useState(false);
+
+  // PromoBuilder state
+  const [selectedAnnee, setSelectedAnnee] = useState("4A");
+  const [selectedFiliere, setSelectedFiliere] = useState("FISE");
+  const [anneeSco, setAnneeSco] = useState("");
+
+  const generatedId = anneeSco.trim()
+    ? `${selectedAnnee}${selectedFiliere}${anneeSco.trim()}`
+    : "";
+
+  async function load() {
+    try {
+      const [pRes, sRes] = await Promise.all([
+        fetch("/students/api/promotions"),
+        fetch("/students/api/students"),
+      ]);
+      if (!pRes.ok) throw new Error("Impossible de charger les promotions");
+      setPromos(await pRes.json());
+      if (sRes.ok) setStudents(await sRes.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
+
+  useEffect(() => {
+    load();
+  }, []);
+
+  async function createPromo() {
+    if (!generatedId) return;
+    setCreating(true);
+    try {
+      const res = await fetch("/students/api/promotions", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          idPromo: generatedId,
+          annee: selectedAnnee,
+        }),
+      });
+      if (!res.ok) {
+        const body = await res.json().catch(() => ({}));
+        throw new Error(body.error ?? "Création échouée");
+      }
+      setAnneeSco("");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setCreating(false);
+    }
+  }
+
+  async function deletePromo(id: string) {
+    if (!confirm(`Supprimer la promotion ${id} ?`)) return;
+    try {
+      const res = await fetch(
+        `/students/api/promotions/${encodeURIComponent(id)}`,
+        { method: "DELETE" },
+      );
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  function studentCount(idPromo: string) {
+    return students.filter((s) => s.idPromo === idPromo).length;
+  }
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Gestion des Promotions</h2>
+
+      {error && <p class="state-error">{error}</p>}
+
+      {/* PromoBuilder */}
+      <div class="promo-builder">
+        <p class="promo-builder-title">Créer une promotion</p>
+        <p class="promo-builder-subtitle">
+          POST /promotions – idPromo est généré automatiquement
+        </p>
+
+        <div class="promo-builder-row">
+          <div class="promo-builder-field">
+            <label>Année</label>
+            <div class="pill-group">
+              {ANNEES.map((a) => (
+                <button
+                  key={a}
+                  type="button"
+                  class={`pill-btn${selectedAnnee === a ? " active" : ""}`}
+                  onClick={() => setSelectedAnnee(a)}
+                >
+                  {a}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          <div class="promo-builder-field">
+            <label>Filière</label>
+            <div class="pill-group">
+              {FILIERES.map((f) => (
+                <button
+                  key={f}
+                  type="button"
+                  class={`pill-btn${selectedFiliere === f ? " active" : ""}`}
+                  onClick={() => setSelectedFiliere(f)}
+                >
+                  {f}
+                </button>
+              ))}
+            </div>
+          </div>
+
+          <div class="promo-builder-field">
+            <label>Année scolaire</label>
+            <input
+              class="form-input"
+              placeholder="ex: 25/26, 24/27…"
+              value={anneeSco}
+              onInput={(e) => setAnneeSco((e.target as HTMLInputElement).value)}
+              style="min-width: 9rem"
+            />
+          </div>
+        </div>
+
+        <div style="display: flex; align-items: center; gap: 1rem; flex-wrap: wrap">
+          <div style="display: flex; align-items: center; gap: 0.5rem">
+            <span style="font-size: 0.78rem; color: light-dark(var(--light-foreground-dim), var(--dark-foreground-dim))">
+              idPromo généré :
+            </span>
+            <span class="promo-id-preview">
+              {generatedId || "—"}
+            </span>
+          </div>
+          <button
+            type="button"
+            class="btn btn-primary"
+            onClick={createPromo}
+            disabled={creating || !generatedId}
+          >
+            {creating ? "…" : "+ Créer la promo"}
+          </button>
+        </div>
+      </div>
+
+      {/* Existing promotions table */}
+      <p style="font-size: 0.82rem; font-weight: var(--font-weight-bold); margin-bottom: 0.5rem">
+        Promotions existantes
+      </p>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>idPromo</th>
+                  <th>Année</th>
+                  <th>Filière</th>
+                  <th>Année sco.</th>
+                  <th>Nb étudiants</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {promos.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={6} class="state-empty">
+                        Aucune promotion enregistrée
+                      </td>
+                    </tr>
+                  )
+                  : promos.map((p) => {
+                    const parsed = parsePromo(p.id);
+                    const count = studentCount(p.id);
+                    return (
+                      <tr key={p.id}>
+                        <td>
+                          <span class="promo-chip">{p.id}</span>
+                        </td>
+                        <td>{parsed.annee}</td>
+                        <td>
+                          <span class="filiere-chip">{parsed.filiere}</span>
+                        </td>
+                        <td>{parsed.anneeSco}</td>
+                        <td class="col-dim">
+                          {count} étudiant{count !== 1 ? "s" : ""}
+                        </td>
+                        <td>
+                          <button
+                            type="button"
+                            class="btn btn-sm btn-danger"
+                            onClick={() => deletePromo(p.id)}
+                          >
+                            🗑
+                          </button>
+                        </td>
+                      </tr>
+                    );
+                  })}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
+  );
+}

routes/(apps)/students/(_islands)/ConsultStudents.tsx

@@ -1,45 +1,150 @@
 import { useEffect, useState } from "preact/hooks";
-import Promotion from "$root/routes/(apps)/students/(_components)/Promotion.tsx";
 
-type SingleUserResponse = { promo: Promotion; student: Student };
+type Student = {
-type ManyUsersResponse = { promos: Promotion[]; students: Student[] };
+  numEtud: number;
-
+  nom: string;
-type APIResponse = SingleUserResponse | ManyUsersResponse;
+  prenom: string;
+  idPromo: string;
+};
+type Promotion = { id: string; annee: string };
 
 export default function ConsultStudents() {
-  const [data, setData] = useState<APIResponse | null>(null);
+  const [students, setStudents] = useState<Student[]>([]);
+  const [promos, setPromos] = useState<Promotion[]>([]);
+  const [loading, setLoading] = useState(true);
   const [error, setError] = useState<string | null>(null);
+  const [filterPromo, setFilterPromo] = useState("");
+  const [filterNom, setFilterNom] = useState("");
+
+  async function load() {
+    try {
+      const [sRes, pRes] = await Promise.all([
+        fetch("/students/api/students"),
+        fetch("/students/api/promotions"),
+      ]);
+      if (!sRes.ok) throw new Error("Impossible de charger les élèves");
+      setStudents(await sRes.json());
+      if (pRes.ok) setPromos(await pRes.json());
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setLoading(false);
+    }
+  }
 
   useEffect(() => {
-    const fetchData = async () => {
+    load();
-      const response = await fetch("/students/api/students");
-      if (!response.ok) {
-        setError("Failed to load data. Please try again later.");
-      }
-
-      const result: APIResponse = await response.json();
-      setData(result);
-    };
-
-    fetchData();
   }, []);
 
+  async function deleteStudent(numEtud: number) {
+    if (!confirm(`Supprimer l'élève #${numEtud} ?`)) return;
+    try {
+      const res = await fetch(`/students/api/students/${numEtud}`, {
+        method: "DELETE",
+      });
+      if (!res.ok) throw new Error("Suppression échouée");
+      await load();
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  const filtered = students.filter((s) => {
+    const matchPromo = !filterPromo || s.idPromo === filterPromo;
+    const matchNom = !filterNom ||
+      `${s.nom} ${s.prenom}`.toLowerCase().includes(filterNom.toLowerCase());
+    return matchPromo && matchNom;
+  });
+
   return (
-    <>
+    <div class="page-content">
-      {error && <p className="error">{error}</p>}
+      <h2 class="page-title">Gestion des Élèves</h2>
-      {data && ((Object.hasOwn(data, "student"))
+
-        ? (
+      {error && <p class="state-error">{error}</p>}
-          <Promotion
+
-            students={[(data as SingleUserResponse).student]}
+      <div class="toolbar">
-            promo={(data as SingleUserResponse).promo}
+        <a
-          />
+          class="btn btn-primary"
-        )
+          href="/students/upload"
-        : (data as ManyUsersResponse).promos.map((promo) => (
+          f-partial="/students/partials/upload"
-          <Promotion
+        >
-            students={(data as ManyUsersResponse).students}
+          Importer xlsx
-            promo={promo}
+        </a>
-          />
+      </div>
-        )))}
+
-    </>
+      <div class="filters">
+        <select
+          class="filter-select"
+          value={filterPromo}
+          onChange={(e) =>
+            setFilterPromo((e.target as HTMLSelectElement).value)}
+        >
+          <option value="">Toutes les promos</option>
+          {promos.map((p) => (
+            <option key={p.id} value={p.id}>{p.id} — {p.annee}</option>
+          ))}
+        </select>
+        <input
+          class="filter-input"
+          placeholder="Rechercher par nom…"
+          value={filterNom}
+          onInput={(e) => setFilterNom((e.target as HTMLInputElement).value)}
+        />
+      </div>
+
+      {loading
+        ? <p class="state-loading">Chargement…</p>
+        : (
+          <div class="data-table-wrap">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>N° étud.</th>
+                  <th>Nom</th>
+                  <th>Prénom</th>
+                  <th>Promo</th>
+                  <th>Actions</th>
+                </tr>
+              </thead>
+              <tbody>
+                {filtered.length === 0
+                  ? (
+                    <tr>
+                      <td colspan={5} class="state-empty">
+                        Aucun élève trouvé
+                      </td>
+                    </tr>
+                  )
+                  : filtered.map((s) => (
+                    <tr key={s.numEtud}>
+                      <td class="col-dim">{s.numEtud}</td>
+                      <td>{s.nom}</td>
+                      <td>{s.prenom}</td>
+                      <td>{s.idPromo}</td>
+                      <td>
+                        <div class="col-actions">
+                          <a
+                            class="btn btn-sm btn-secondary"
+                            href={`/students/edit/${s.numEtud}`}
+                            f-client-nav={false}
+                          >
+                            ✏
+                          </a>
+                          <button
+                            type="button"
+                            class="btn btn-sm btn-danger"
+                            onClick={() => deleteStudent(s.numEtud)}
+                          >
+                            🗑
+                          </button>
+                        </div>
+                      </td>
+                    </tr>
+                  ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+    </div>
   );
 }

routes/(apps)/students/(_islands)/EditStudents.tsx

@@ -0,0 +1,247 @@
+import { useEffect, useState } from "preact/hooks";
+
+type Student = {
+  numEtud: number;
+  nom: string;
+  prenom: string;
+  idPromo: string;
+};
+type Promo = { id: string; annee: string };
+type Module = { id: string; nom: string };
+
+type Props = { numEtud: number };
+
+function anneeLabel(idPromo: string): string {
+  const m = idPromo.match(/^(\d+)A/);
+  if (!m) return "";
+  const n = m[1];
+  if (n === "3") return "3ème année";
+  if (n === "4") return "4ème année";
+  if (n === "5") return "5ème année";
+  return `${n}ème année`;
+}
+
+export default function EditStudents({ numEtud }: Props) {
+  const [student, setStudent] = useState<Student | null>(null);
+  const [promos, setPromos] = useState<Promo[]>([]);
+  const [_modules, setModules] = useState<Module[]>([]);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [saveMsg, setSaveMsg] = useState<string | null>(null);
+  const [saving, setSaving] = useState(false);
+
+  // Edit form state
+  const [nom, setNom] = useState("");
+  const [prenom, setPrenom] = useState("");
+  const [idPromo, setIdPromo] = useState("");
+
+  useEffect(() => {
+    async function load() {
+      try {
+        const [sRes, pRes, mRes] = await Promise.all([
+          fetch(`/students/api/students/${numEtud}`),
+          fetch("/students/api/promotions"),
+          fetch("/admin/api/modules"),
+        ]);
+        if (!sRes.ok) throw new Error("Élève introuvable");
+        const s: Student = await sRes.json();
+        setStudent(s);
+        setNom(s.nom);
+        setPrenom(s.prenom);
+        setIdPromo(s.idPromo);
+        if (pRes.ok) setPromos(await pRes.json());
+        if (mRes.ok) setModules(await mRes.json());
+      } catch (e) {
+        setError(e instanceof Error ? e.message : "Erreur");
+      } finally {
+        setLoading(false);
+      }
+    }
+    load();
+  }, [numEtud]);
+
+  async function saveInfos() {
+    if (!student) return;
+    setSaving(true);
+    setSaveMsg(null);
+    try {
+      const res = await fetch(`/students/api/students/${numEtud}`, {
+        method: "PUT",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          nom: nom.trim(),
+          prenom: prenom.trim(),
+          idPromo,
+        }),
+      });
+      if (!res.ok) throw new Error("Modification échouée");
+      const updated: Student = await res.json();
+      setStudent(updated);
+      setSaveMsg("Informations enregistrées.");
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    } finally {
+      setSaving(false);
+    }
+  }
+
+  async function deleteStudent() {
+    if (!confirm(`Supprimer définitivement l'élève #${numEtud} ?`)) return;
+    try {
+      const res = await fetch(`/students/api/students/${numEtud}`, {
+        method: "DELETE",
+      });
+      if (!res.ok) throw new Error("Suppression échouée");
+      globalThis.location.href = "/students/consult";
+    } catch (e) {
+      setError(e instanceof Error ? e.message : "Erreur");
+    }
+  }
+
+  if (loading) {
+    return (
+      <div class="page-content">
+        <p class="state-loading">Chargement…</p>
+      </div>
+    );
+  }
+
+  if (error && !student) {
+    return (
+      <div class="page-content">
+        <p class="state-error">{error}</p>
+      </div>
+    );
+  }
+
+  if (!student) return null;
+
+  return (
+    <div class="page-content">
+      <a
+        class="back-link"
+        href="/students/consult"
+        f-partial="/students/partials/consult"
+      >
+        ← Retour à la liste
+      </a>
+
+      <h2 class="page-title" style="border-bottom: none; margin-bottom: 0.5rem">
+        Édition – {student.prenom} {student.nom}
+      </h2>
+
+      {/* Info bar */}
+      <div class="info-bar">
+        <span class="numEtud-chip">{student.numEtud}</span>
+        <span>{student.idPromo}</span>
+        <span class="col-dim">{anneeLabel(student.idPromo)}</span>
+      </div>
+
+      {error && <p class="state-error">{error}</p>}
+      {saveMsg && (
+        <p style="font-size: 0.82rem; color: light-dark(var(--light-accent-color), var(--dark-accent-color)); margin-bottom: 0.5rem">
+          {saveMsg}
+        </p>
+      )}
+
+      {/* Section 1: Informations générales */}
+      <div class="edit-section">
+        <p class="edit-section-title">Informations générales</p>
+        <p class="edit-section-subtitle">PUT /students/{"{numEtud}"}</p>
+
+        <div class="form-grid">
+          <div class="form-field">
+            <label>Nom</label>
+            <input
+              class="form-input"
+              value={nom}
+              onInput={(e) => setNom((e.target as HTMLInputElement).value)}
+            />
+          </div>
+          <div class="form-field">
+            <label>Prénom</label>
+            <input
+              class="form-input"
+              value={prenom}
+              onInput={(e) => setPrenom((e.target as HTMLInputElement).value)}
+            />
+          </div>
+          <div class="form-field">
+            <label>N° Étudiant</label>
+            <input
+              class="form-input"
+              value={student.numEtud}
+              disabled
+              style="opacity: 0.6"
+            />
+          </div>
+          <div class="form-field">
+            <label>Promo</label>
+            <select
+              class="filter-select"
+              value={idPromo}
+              onChange={(e) =>
+                setIdPromo((e.target as HTMLSelectElement).value)}
+              style="min-width: 0"
+            >
+              {promos.map((p) => <option key={p.id} value={p.id}>{p.id}
+              </option>)}
+            </select>
+          </div>
+        </div>
+
+        <div style="display: flex; gap: 0.5rem; justify-content: space-between; flex-wrap: wrap">
+          <button
+            type="button"
+            class="btn btn-primary"
+            onClick={saveInfos}
+            disabled={saving}
+          >
+            {saving ? "…" : "Enregistrer infos"}
+          </button>
+          <button
+            type="button"
+            class="btn btn-danger"
+            onClick={deleteStudent}
+          >
+            Supprimer l'élève
+          </button>
+        </div>
+      </div>
+
+      {/* Section 2: Spécialisations */}
+      <div class="edit-section">
+        <p class="edit-section-title">Spécialisations</p>
+        <p class="edit-section-subtitle">
+          GET·POST·DELETE /spe5a – plusieurs modules possibles
+        </p>
+        <p
+          class="state-empty"
+          style="padding: 1rem 0; text-align: left"
+        >
+          Fonctionnalité non disponible (endpoint non implémenté).
+        </p>
+      </div>
+
+      {/* Section 3: Notes lecture seule */}
+      <div class="edit-section">
+        <p class="edit-section-title">Notes (lecture seule)</p>
+        <p class="edit-section-subtitle">
+          GET /students/{"{numEtud}"}/notes – voir récap complet
+        </p>
+        <div style="display: flex; align-items: center; justify-content: space-between; gap: 1rem; flex-wrap: wrap">
+          <span class="col-dim" style="font-size: 0.82rem">
+            Voir le récap complet des notes et moyennes de cet étudiant →
+          </span>
+          <a
+            class="btn btn-secondary"
+            href={`/notes/recap/${numEtud}`}
+            f-client-nav={false}
+          >
+            Récap notes
+          </a>
+        </div>
+      </div>
+    </div>
+  );
+}

routes/(apps)/students/(_islands)/UploadStudents.tsx

@@ -1,111 +1,151 @@
 // @deno-types="https://cdn.sheetjs.com/xlsx-0.20.3/package/types/index.d.ts"
 import * as XLSX from "https://cdn.sheetjs.com/xlsx-0.20.3/package/xlsx.mjs";
-import { Signal, useSignal } from "@preact/signals";
+import { useRef } from "preact/hooks";
+import { useSignal } from "@preact/signals";
 
-/**
+export default function UploadStudents() {
- * Create a new handler for file change that displays
+  const file = useSignal<File | null>(null);
- * messages in statusMessage and gets file data in fileData.
+  const dragging = useSignal(false);
- * @param statusMessage The status message signal.
+  const uploading = useSignal(false);
- * @param fileData The file data signal.
+  const error = useSignal<string | null>(null);
- * @returns The file change handler.
+  const success = useSignal<string | null>(null);
- */
+  const inputRef = useRef<HTMLInputElement>(null);
-function getFileChangeHandler(
-  statusMessage: Signal<string>,
-  fileData: Signal<File | null>,
-): (event: Event) => void {
-  /**
-   * Handle file change.
-   * @param event The file change event.
-   */
-  return (event: Event) => {
-    const input = event.target as HTMLInputElement;
-    if (input.files && input.files.length > 0) {
-      fileData.value = input.files[0];
-      statusMessage.value = `File selected: ${input.files[0].name}`;
-    } else {
-      fileData.value = null;
-      statusMessage.value = "No file selected";
-    }
-  };
-}
 
-/**
+  function pickFile(f: File) {
- * Create a new handler that sends data file to server.
+    if (!f.name.match(/\.xlsx?$/i)) {
- * @param statusMessage The status message signal.
+      error.value = "Fichier invalide — format attendu : .xlsx";
- * @param fileData The file data signal.
- * @returns The file confirmation handler.
- */
-function getUploadConfirmationFunction(
-  statusMessage: Signal<string>,
-  fileData: Signal<File | null>,
-): () => void {
-  /**
-   * Add students to database.
-   * @returns Confirm upload of students.
-   */
-  return () => {
-    if (!fileData.value) {
-      statusMessage.value = "Please select a file before confirming upload.";
       return;
     }
+    file.value = f;
+    error.value = null;
+    success.value = null;
+  }
 
-    const reader = new FileReader();
+  function onDragOver(e: DragEvent) {
+    e.preventDefault();
+    dragging.value = true;
+  }
 
-    /**
+  function onDragLeave() {
-     * Send all data to the server.
+    dragging.value = false;
-     * @param event The finished progress event.
+  }
-     */
+
-    reader.onload = async (event: ProgressEvent<FileReader>) => {
+  function onDrop(e: DragEvent) {
-      const arrayBuffer = event.target!.result as ArrayBuffer;
+    e.preventDefault();
+    dragging.value = false;
+    const f = e.dataTransfer?.files?.[0];
+    if (f) pickFile(f);
+  }
+
+  function onInputChange(e: Event) {
+    const f = (e.target as HTMLInputElement).files?.[0];
+    if (f) pickFile(f);
+  }
+
+  async function doImport() {
+    if (!file.value) return;
+    uploading.value = true;
+    error.value = null;
+    success.value = null;
+
+    try {
+      const arrayBuffer = await file.value.arrayBuffer();
       const workbook = XLSX.read(arrayBuffer, { type: "array" });
-      let allOK = true;
+      let imported = 0;
+      let failed = 0;
 
       for (const sheetName of workbook.SheetNames) {
         const sheet = workbook.Sheets[sheetName];
-        const data = XLSX.utils.sheet_to_json(sheet, {
+        const rows = XLSX.utils.sheet_to_json<{
-          header: ["userId", "lastName", "firstName", "mail"],
+          numEtud: number;
-          range: 1,
+          nom: string;
-        });
+          prenom: string;
+        }>(sheet, { header: ["numEtud", "nom", "prenom"], range: 1 });
 
-        const response = await fetch("/students/api/students", {
+        for (const row of rows) {
-          method: "POST",
+          const res = await fetch("/students/api/students", {
-          headers: { "Content-Type": "application/json" },
+            method: "POST",
-          body: JSON.stringify({ promoName: sheetName, data }),
+            headers: { "content-type": "application/json" },
-        });
+            body: JSON.stringify({ ...row, idPromo: sheetName }),
-
+          });
-        if (!response.ok) {
+          if (res.ok) imported++;
-          allOK = false;
+          else failed++;
         }
       }
 
-      statusMessage.value = allOK
+      success.value = `Import terminé — ${imported} ajouté${
-        ? "Failed to insert all data."
+        imported !== 1 ? "s" : ""
-        : "Data uploaded and inserted successfully!";
+      }${failed > 0 ? `, ${failed} erreur${failed !== 1 ? "s" : ""}` : ""}`;
-    };
+    } catch {
+      error.value = "Erreur lors de la lecture du fichier.";
+    } finally {
+      uploading.value = false;
+    }
+  }
 
-    /**
+  function downloadTemplate() {
-     * Display error message if any.
+    const wb = XLSX.utils.book_new();
-     */
+    const ws = XLSX.utils.aoa_to_sheet([["numEtud", "nom", "prenom"]]);
-    reader.onerror = () => {
+    XLSX.utils.book_append_sheet(wb, ws, "4A22");
-      statusMessage.value = "Error reading the file.";
+    XLSX.writeFile(wb, "modele_etudiants.xlsx");
-    };
+  }
-
-    reader.readAsArrayBuffer(fileData.value);
-  };
-}
-
-export default function UploadStudents() {
-  const statusMessage = useSignal<string>("");
-  const fileData = useSignal<File | null>(null);
-
-  const handleFileChange = getFileChangeHandler(statusMessage, fileData);
-  const confirmUpload = getUploadConfirmationFunction(statusMessage, fileData);
 
   return (
-    <>
+    <div>
-      <input type="file" accept=".xlsx, .xls" onChange={handleFileChange} />
+      <input
-      <button onClick={confirmUpload}>Confirm Upload</button>
+        ref={inputRef}
-      <p>{statusMessage.value}</p>
+        type="file"
-    </>
+        accept=".xlsx,.xls"
+        style="display:none"
+        onChange={onInputChange}
+      />
+
+      <div
+        class={`drop-zone${dragging.value ? " dragging" : ""}`}
+        onDragOver={onDragOver}
+        onDragLeave={onDragLeave}
+        onDrop={onDrop}
+        onClick={() => inputRef.current?.click()}
+      >
+        <span class="drop-zone-icon">⬇</span>
+        {file.value ? <span class="drop-zone-file">{file.value.name}</span> : (
+          <>
+            <span class="drop-zone-text">Glisser le fichier .xlsx ici</span>
+            <span class="drop-zone-hint">ou cliquer pour parcourir</span>
+          </>
+        )}
+      </div>
+
+      {error.value && <p class="state-error">{error.value}</p>}
+      {success.value && (
+        <p style="font-size:0.82rem; color: light-dark(var(--light-accent-color), var(--dark-accent-color)); margin-bottom: 0.75rem">
+          {success.value}
+        </p>
+      )}
+
+      <div class="upload-actions">
+        <button
+          type="button"
+          class="btn btn-primary"
+          onClick={doImport}
+          disabled={!file.value || uploading.value}
+        >
+          {uploading.value ? "…" : "⊕ Importer"}
+        </button>
+        <button
+          type="button"
+          class="btn btn-secondary"
+          onClick={downloadTemplate}
+        >
+          ⊕ Télécharger Modèle
+        </button>
+      </div>
+
+      <p class="upload-format">
+        Format : <strong>promo</strong> (nom de la feuille) |{" "}
+        <strong>numEtud</strong> | <strong>nom</strong> |{" "}
+        <strong>prénom</strong>
+      </p>
+    </div>
   );
 }

routes/(apps)/students/(_props)/props.ts

@@ -4,11 +4,12 @@ const properties: AppProperties = {
   name: "Students",
   icon: "badge",
   pages: {
-    index: "Homepage",
+    index: "Accueil",
-    upload: "Upload students",
+    consult: "Élèves",
-    consult: "Consult students",
+    promotions: "Promotions",
+    upload: "Import xlsx",
   },
-  adminOnly: ["upload", "consult"],
+  adminOnly: ["consult", "promotions", "upload"],
   hint: "Create students promotion and see informations",
 };
 

routes/(apps)/students/api/promotions.ts

@@ -0,0 +1,49 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { promotions } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #13 GET /promotions
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(JSON.stringify([]), {
+        headers: { "content-type": "application/json" },
+      });
+    }
+
+    const rows = await db.select().from(promotions);
+    return new Response(JSON.stringify(rows), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #14 POST /promotions
+  async POST(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(null, { status: 403 });
+    }
+
+    const body: { idPromo: string; annee: string } = await request.json();
+
+    if (!body.idPromo || !body.annee) {
+      return new Response(null, { status: 400 });
+    }
+
+    const [created] = await db
+      .insert(promotions)
+      .values({ id: body.idPromo, annee: body.annee })
+      .returning();
+
+    return new Response(JSON.stringify(created), {
+      status: 201,
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/students/api/promotions/[idPromo].ts

@@ -0,0 +1,79 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { promotions } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #15 GET /promotions/{idPromo}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const promo = await db
+      .select()
+      .from(promotions)
+      .where(eq(promotions.id, context.params.idPromo))
+      .then((rows) => rows[0] ?? null);
+
+    if (!promo) return NOT_FOUND;
+
+    return new Response(JSON.stringify(promo), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #16 PUT /promotions/{idPromo}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const body: { annee: string } = await request.json();
+
+    const [updated] = await db
+      .update(promotions)
+      .set({ annee: body.annee })
+      .where(eq(promotions.id, context.params.idPromo))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(JSON.stringify(updated), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #17 DELETE /promotions/{idPromo}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const [deleted] = await db
+      .delete(promotions)
+      .where(eq(promotions.id, context.params.idPromo))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/students/api/students.ts

@@ -1,151 +1,61 @@
 import { FreshContext, Handlers } from "$fresh/server.ts";
-import connect from "$root/databases/connect.ts";
+import { db } from "$root/databases/db.ts";
+import { students } from "$root/databases/schema.ts";
 import { AuthenticatedState } from "$root/defaults/interfaces.ts";
-import { Database } from "@db/sqlite";
+import { eq } from "npm:drizzle-orm@0.45.2";
-
-/**
- * Gets itself from the database.
- * @param database The database connection
- * @param userId The user ID.
- * @returns Itself from the database.
- */
-function getItself(
-  database: Database,
-  userId: string,
-): { student: Student | null; promo: Promotion | null } {
-  const studentQuery = "select * from students where userId = ?";
-  const student: Student | undefined = database.prepare(studentQuery).get(
-    userId,
-  );
-
-  if (!student) {
-    return { student: null, promo: null };
-  }
-
-  const promoQuery = "select * from promotions where id = ?";
-  const promo: Promotion | undefined = database.prepare(promoQuery).get(
-    student.promotionId,
-  );
-
-  return { student, promo: promo ?? null };
-}
-
-/**
- * Gets itself from the database.
- * @param database The database connexion
- * @param userId The user ID.
- * @returns Itself from the database.
- */
-function getAll(
-  database: Database,
-): { students: Student[]; promos: Promotion[] } {
-  const studentsQuery = `
-    select userId, firstName, lastName, mail, promotionId
-    from students inner join promotions
-    on students.promotionId = promotions.id
-    where promotions.current < 6`;
-  const students: Student[] = database.prepare(studentsQuery).all();
-
-  const promosQuery = "select * from promotions where promotions.current < 6";
-  const promos: Promotion[] | undefined = database.prepare(promosQuery).all();
-
-  return { students, promos };
-}
-
-/**
- * Add users to the database.
- * @param database The database connexion
- * @param students The students to add
- * @param promoId The promotion id.
- */
-function addStudents(database: Database, students: Student[], promoId: string) {
-  const query = `
-    INSERT INTO students
-    (userId, firstName, lastName, mail, promotionId)
-    VALUES (?, ?, ?, ?, ?)`;
-
-  const statement = database.prepare(query);
-
-  for (const student of students) {
-    statement.run(
-      student.userId,
-      student.firstName,
-      student.lastName,
-      student.mail,
-      promoId,
-    );
-  }
-}
 
 export const handler: Handlers<null, AuthenticatedState> = {
-  /**
+  // #7 GET /students
-   * The students the user can see.
-   * @param _request The HTTP request.
-   * @param _context The context with authenticated state.
-   * @returns All students our user can see.
-   */
-  // deno-lint-ignore require-await
   async GET(
-    _request: Request,
+    request: Request,
     context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    using connection = connect("students");
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
-    const database = connection.database;
+      return new Response(JSON.stringify([]), {
-
+        headers: { "content-type": "application/json" },
-    if (context.state.role == "etudiant") {
+      });
-      return new Response(
-        JSON.stringify(getItself(database, context.state.uid)),
-        {
-          headers: {
-            "content-type": "application/json",
-          },
-        },
-      );
     }
 
-    return new Response(
+    const url = new URL(request.url);
-      JSON.stringify(getAll(database)),
+    const idPromo = url.searchParams.get("idPromo");
-      {
+
-        headers: {
+    const rows = idPromo
-          "content-type": "application/json",
+      ? await db.select().from(students).where(eq(students.idPromo, idPromo))
-        },
+      : await db.select().from(students);
-      },
+
-    );
+    return new Response(JSON.stringify(rows), {
+      headers: { "content-type": "application/json" },
+    });
   },
-  /**
+
-   * Add students in the database.
+  // #8 POST /students
-   * @param request The HTTP request.
-   * @param _context The Fresh context.
-   * @returns HTTP 201 on successful insert.
-   */
   async POST(
     request: Request,
-    _context: FreshContext<AuthenticatedState>,
+    context: FreshContext<AuthenticatedState>,
   ): Promise<Response> {
-    const { students, promo }: { students: Student[]; promo: string } =
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
-      await request.json();
+      return new Response(null, { status: 403 });
+    }
 
-    if (!promo || !promo.match(/^\d{4}-\dA$/) || !Array.isArray(students)) {
+    const body: {
+      numEtud: number;
+      nom: string;
+      prenom: string;
+      idPromo: string;
+    } = await request.json();
+
+    if (!body.nom || !body.prenom || !body.idPromo) {
       return new Response(null, { status: 400 });
     }
 
-    using connection = connect("students");
+    const [created] = await db
-    const database = connection.database;
+      .insert(students)
+      .values({ nom: body.nom, prenom: body.prenom, idPromo: body.idPromo })
+      .returning();
 
-    const { endyear, current } = promo.match(
+    return new Response(JSON.stringify(created), {
-      /^(?<endyear>\d{4})-(?<current>\d)A$/,
+      status: 201,
-    )?.groups!;
+      headers: { "content-type": "application/json" },
-
+    });
-    database.prepare(
-      "insert or ignore into promotions (endyear, current) values (?, ?)",
-    ).run(endyear, current);
-
-    const { id: promoId }: { id: string } = database
-      .prepare("select id from promotions where endyear = ? and current = ?")
-      .get(endyear, current)!;
-
-    addStudents(database, students, promoId);
-
-    return new Response(null, { status: 201 });
   },
 };

routes/(apps)/students/api/students/[numEtud].ts

@@ -0,0 +1,83 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { students } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import { eq } from "npm:drizzle-orm@0.45.2";
+
+const NOT_FOUND = new Response(
+  JSON.stringify({ error: "Ressource introuvable" }),
+  { status: 404, headers: { "content-type": "application/json" } },
+);
+
+const FORBIDDEN = new Response(null, { status: 403 });
+
+export const handler: Handlers<null, AuthenticatedState> = {
+  // #10 GET /students/{numEtud}
+  async GET(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const student = await db
+      .select()
+      .from(students)
+      .where(eq(students.numEtud, numEtud))
+      .then((rows) => rows[0] ?? null);
+
+    if (!student) return NOT_FOUND;
+
+    return new Response(JSON.stringify(student), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #11 PUT /students/{numEtud}
+  async PUT(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const body: { nom: string; prenom: string; idPromo: string } = await request
+      .json();
+
+    const [updated] = await db
+      .update(students)
+      .set({ nom: body.nom, prenom: body.prenom, idPromo: body.idPromo })
+      .where(eq(students.numEtud, numEtud))
+      .returning();
+
+    if (!updated) return NOT_FOUND;
+
+    return new Response(JSON.stringify(updated), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+
+  // #12 DELETE /students/{numEtud}
+  async DELETE(
+    _request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return FORBIDDEN;
+    }
+
+    const numEtud = Number(context.params.numEtud);
+    const [deleted] = await db
+      .delete(students)
+      .where(eq(students.numEtud, numEtud))
+      .returning();
+
+    if (!deleted) return NOT_FOUND;
+
+    return new Response(null, { status: 204 });
+  },
+};

routes/(apps)/students/api/students/import-csv.ts

@@ -0,0 +1,64 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { db } from "$root/databases/db.ts";
+import { students } from "$root/databases/schema.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+
+// #9 POST /students/import-csv
+export const handler: Handlers<null, AuthenticatedState> = {
+  async POST(
+    request: Request,
+    context: FreshContext<AuthenticatedState>,
+  ): Promise<Response> {
+    if (context.state.session.eduPersonPrimaryAffiliation !== "employee") {
+      return new Response(null, { status: 403 });
+    }
+
+    const formData = await request.formData();
+    const file = formData.get("file") as File | null;
+    const idPromo = formData.get("idPromo") as string | null;
+
+    if (!file || !idPromo) {
+      return new Response(null, { status: 400 });
+    }
+
+    const text = await file.text();
+    const lines = text.trim().split("\n");
+
+    let imported = 0;
+    const errors: { line: number; message: string }[] = [];
+
+    for (let i = 0; i < lines.length; i++) {
+      const lineNum = i + 1;
+      const cols = lines[i].split(",").map((c) => c.trim());
+
+      const [numEtudStr, nom, prenom] = cols;
+
+      if (!numEtudStr) {
+        errors.push({ line: lineNum, message: "Numéro étudiant manquant" });
+        continue;
+      }
+
+      const numEtud = Number(numEtudStr);
+      if (isNaN(numEtud)) {
+        errors.push({ line: lineNum, message: "Numéro étudiant invalide" });
+        continue;
+      }
+
+      if (!nom || !prenom) {
+        errors.push({ line: lineNum, message: "Nom ou prénom manquant" });
+        continue;
+      }
+
+      await db
+        .insert(students)
+        .values({ nom, prenom, idPromo })
+        .onConflictDoNothing();
+
+      imported++;
+    }
+
+    return new Response(JSON.stringify({ imported, errors }), {
+      headers: { "content-type": "application/json" },
+    });
+  },
+};

routes/(apps)/students/edit/[numEtud].tsx

@@ -0,0 +1,12 @@
+import { FreshContext } from "$fresh/server.ts";
+import { AuthenticatedState } from "$root/defaults/interfaces.ts";
+import EditStudents from "../(_islands)/EditStudents.tsx";
+
+// deno-lint-ignore require-await
+export default async function EditPage(
+  _request: Request,
+  context: FreshContext<AuthenticatedState>,
+) {
+  const numEtud = Number(context.params.numEtud);
+  return <EditStudents numEtud={numEtud} />;
+}

routes/(apps)/students/partials/(admin)/consult.tsx

@@ -8,12 +8,7 @@ import { State } from "$root/defaults/interfaces.ts";
 
 // deno-lint-ignore require-await
 async function Students(_request: Request, _context: FreshContext<State>) {
-  return (
+  return <ConsultStudents />;
-    <>
-      <h2>Consult students</h2>
-      <ConsultStudents />
-    </>
-  );
 }
 
 export const config = getPartialsConfig();

routes/(apps)/students/partials/(admin)/promotions.tsx

@@ -0,0 +1,18 @@
+import {
+  getPartialsConfig,
+  makePartials,
+} from "$root/defaults/makePartials.tsx";
+import { FreshContext } from "$fresh/server.ts";
+import { State } from "$root/defaults/interfaces.ts";
+import AdminPromotions from "../../(_islands)/AdminPromotions.tsx";
+
+// deno-lint-ignore require-await
+async function Promotions(
+  _request: Request,
+  _context: FreshContext<State>,
+) {
+  return <AdminPromotions />;
+}
+
+export const config = getPartialsConfig();
+export default makePartials(Promotions);

routes/(apps)/students/partials/(admin)/upload.tsx

@@ -9,10 +9,16 @@ import { State } from "$root/defaults/interfaces.ts";
 // deno-lint-ignore require-await
 async function Students(_request: Request, _context: FreshContext<State>) {
   return (
-    <>
+    <div class="page-content">
-      <h2>Upload Students</h2>
+      <h2 class="page-title">Importer des Élèves</h2>
+      <p
+        class="upload-format"
+        style="margin-bottom: 1.25rem"
+      >
+        POST /students/api/students/import-csv
+      </p>
       <UploadStudents />
-    </>
+    </div>
   );
 }
 

routes/(apps)/students/partials/index.tsx

@@ -4,11 +4,45 @@ import {
 } from "$root/defaults/makePartials.tsx";
 import { FreshContext } from "$fresh/server.ts";
 import { State } from "$root/defaults/interfaces.ts";
-import SelfPortrait from "$root/routes/(apps)/students/(_components)/SelfPortrait.tsx";
 
 // deno-lint-ignore require-await
-export async function Index(_request: Request, context: FreshContext<State>) {
+export async function Index(
-  return <h2>Welcome {context.state.displayName || 'Guest'}!</h2>;
+  _request: Request,
+  context: FreshContext<State>,
+) {
+  const isEmployee =
+    (context.state as unknown as { session: Record<string, string> }).session
+      .eduPersonPrimaryAffiliation === "employee";
+
+  return (
+    <div class="page-content">
+      <h2 class="page-title">Étudiants</h2>
+      <p>
+        Bienvenue{" "}
+        <strong>
+          {(context.state as unknown as { session: Record<string, string> })
+            .session.displayName}
+        </strong>
+        .
+      </p>
+      {isEmployee && (
+        <p>
+          Consultez la{" "}
+          <a href="/students/consult" f-partial="/students/partials/consult">
+            liste des élèves
+          </a>{" "}
+          ou gérez les{" "}
+          <a
+            href="/students/promotions"
+            f-partial="/students/partials/promotions"
+          >
+            promotions
+          </a>
+          .
+        </p>
+      )}
+    </div>
+  );
 }
 
 export const config = getPartialsConfig();

routes/_403.tsx

@@ -1,12 +0,0 @@
-import { Head } from "$fresh/runtime.ts";
-
-export default function Error403() {
-  return (
-    <>
-      <Head>
-        <title>403 - Forbidden</title>
-      </Head>
-      <p>403</p>
-    </>
-  );
-}

routes/_app.tsx

@@ -26,8 +26,9 @@ export default async function App(
         />
         <link rel="stylesheet" href="/styles/main.css" />
         <link rel="stylesheet" href="/styles/app.css" />
-        <link rel="stylesheet" href="styles/app-cards.css" />
+        <link rel="stylesheet" href="/styles/app-cards.css" />
-        <link rel="stylesheet" href="styles/students.css" />
+        <link rel="stylesheet" href="/styles/students.css" />
+        <link rel="stylesheet" href="/styles/ui.css" />
       </head>
       <body f-client-nav>
         <Header link={link} />

routes/_middleware.ts

@@ -10,6 +10,7 @@ const PUBLIC_ROUTES = [
   "/about",
   "/partials/about",
   "/contact",
+  "/dev-login",
 ];
 
 const jwtKeyCache: Record<string, string> = {};
@@ -44,7 +45,6 @@ export function getKey(user: string): string {
 export const handler: MiddlewareHandler<State>[] = [
   /**
    * Check if user is authenticated and add session to context accordingly.
-   * Only authenticated users who are members of Polytech are allowed.
    * @param request The HTTP incomming request.
    * @param context The Fresh context object with custom `State`.
    * @returns The response from the next middleware.
@@ -56,7 +56,6 @@ export const handler: MiddlewareHandler<State>[] = [
     const cookies = getCookies(request.headers);
     if (!cookies["sessionToken"]) {
       context.state.isAuthenticated = false;
-      context.state.isFromPolytech = false;
       return await context.next();
     }
 
@@ -69,27 +68,9 @@ export const handler: MiddlewareHandler<State>[] = [
     );
 
     if (context.state.isAuthenticated) {
-
       const session: CasContent =
         (getJwtPayload(cookies["sessionToken"]) as LoginJWT).user;
-
+      context.state.session = session;
-      const isFromPolytech = session.amuComposante.includes("polytech");
-      context.state.isFromPolytech = isFromPolytech;
-
-      if (isFromPolytech) {
-        context.state.displayName = session.displayName;
-        context.state.uid = session.uid;
-
-        if (session.eduPersonPrimaryAffiliation == "faculty") {
-          context.state.role = "professeur"
-        } else if (session.eduPersonPrimaryAffiliation == "employee") {
-          context.state.role = "administration"
-        } else if (session.eduPersonPrimaryAffiliation == "student") {
-          context.state.role = "etudiant";
-        } else {
-          context.state.role = "autre";
-        }
-      }
     }
 
     return await context.next();
@@ -107,24 +88,13 @@ export const handler: MiddlewareHandler<State>[] = [
   ): Promise<Response> {
     const url = new URL(request.url);
 
-    if (!isRoutePublic(url.pathname)) {
+    if (!isRoutePublic(url.pathname) && !context.state.isAuthenticated) {
-      if (!context.state.isAuthenticated) {
+      return new Response(null, {
-        return new Response(null, {
+        status: 302,
-          status: 302,
+        headers: {
-          headers: {
+          Location: "/login",
-            Location: "/login",
+        },
-          },
+      });
-        });
-      }
-
-      if (!context.state.isFromPolytech) {
-        return new Response(null, {
-          status: 403,
-          headers: {
-            Location: "/403",
-          },
-        });
-      }
     }
 
     return await context.next();

routes/dev-login.ts

@@ -0,0 +1,48 @@
+import { FreshContext, Handlers } from "$fresh/server.ts";
+import { CasContent, LoginJWT, State } from "$root/defaults/interfaces.ts";
+import { createJwt } from "@popov/jwt";
+import { setCookie } from "$std/http/cookie.ts";
+import { getKey } from "$root/routes/_middleware.ts";
+
+const FAKE_ADMIN: CasContent = {
+  amuCampus: "local",
+  amuComposante: "local",
+  amuDateValidation: "",
+  coGroup: "",
+  eduPersonPrimaryAffiliation: "employee",
+  eduPersonPrincipalName: "admin@local",
+  mail: "admin@local",
+  displayName: "Admin Local",
+  givenName: "Admin",
+  memberOf: [],
+  sn: "Local",
+  supannCivilite: "",
+  supannEntiteAffectation: "",
+  supannEtuAnneeInscription: "",
+  supannEtuEtape: "",
+  uid: "admin-local",
+};
+
+export const handler: Handlers<null, State> = {
+  async GET(_request: Request, _context: FreshContext<State, null>) {
+    if (Deno.env.get("LOCAL") !== "true") {
+      return new Response("Not available outside LOCAL mode.", { status: 403 });
+    }
+
+    const now = Math.floor(Date.now() / 1000);
+    const payload: LoginJWT = {
+      iss: "PolyMPR",
+      iat: now,
+      exp: now + 0xe10,
+      aud: "PolyMPR",
+      user: FAKE_ADMIN,
+    };
+
+    const token = await createJwt(payload, getKey(FAKE_ADMIN.uid));
+    const headers = new Headers();
+    setCookie(headers, { name: "sessionToken", value: token });
+    headers.set("Location", "/apps");
+
+    return new Response(null, { status: 302, headers });
+  },
+};

shell.nix

@@ -0,0 +1,23 @@
+{ pkgs ? import <nixpkgs> {} }:
+
+pkgs.mkShell {
+  name = "polympr-dev";
+  nativeBuildInputs = [
+    pkgs.deno
+    pkgs.patchelf
+    pkgs.tea
+  ];
+
+  buildInputs = [
+    pkgs.stdenv.cc.cc.lib
+  ];
+
+  shellHook = ''
+    export LD_LIBRARY_PATH="${pkgs.stdenv.cc.cc.lib}/lib:$LD_LIBRARY_PATH"
+    # Find the dynamic linker
+    export NIX_LD_INTERPRETER=$(cat ${pkgs.stdenv.cc}/nix-support/dynamic-linker)
+    echo "Welcome to PolyMPR development shell!"
+    echo "Use 'deno task compile' to build the CLI."
+    echo "If on NixOS, it will be automatically patched."
+  '';
+}

static/styles/main.css

@@ -29,6 +29,10 @@
   font-family: var(--font-family-text);
 }
 
+html {
+  font-size: 130%; /* scale up from browser default 16px → ~20.8px */
+}
+
 html, body {
   margin: 0;
   padding: 0;