feat(frontend): filtres, création d'issues, vue Focus, CDN vendorés

- vendor: HTMX/Alpine/SortableJS servis depuis /static/vendor (M3)
- board.js: jeton CSRF, ordres source/destination envoyés, carte
  replacée + toast rouge en cas d'échec (M8), filtres texte/étiquette,
  formulaire de création d'issue
- dashboard: 3 onglets Actifs/Inactifs/Archivés, recherche via
  data-search échappé au lieu d'une interpolation JS (M9)
- board: cartes liées vers l'issue Gitea, méta CSRF, notes protégées
- nouvelles pages focus.html et error.html
- CSS: fond des badges en color-mix, l'ancien var(--accent)20 était
  invalide (M1); styles toolbar/focus/erreur/toast erreur

static/css/style.css

@@ -56,7 +56,7 @@ nav { display: flex; gap: 10px; align-items: center; }
     padding: 4px 12px;
     border-radius: 20px;
     font-size: 0.8rem;
-    background: var(--accent)20;
+    background: color-mix(in srgb, var(--accent) 15%, transparent);
     color: var(--accent);
 }
 .badge.secondary { background: var(--surface2); color: var(--text2); }
@@ -329,6 +329,59 @@ footer {
 ::-webkit-scrollbar-thumb { background: var(--border); border-radius: 3px; }
 ::-webkit-scrollbar-thumb:hover { background: var(--text2); }
 
+/* Toast error variant */
+.toast.error { background: var(--red); }
+
+/* Board toolbar (filters + create) */
+.board-toolbar {
+    display: flex;
+    gap: 10px;
+    align-items: center;
+    flex-wrap: wrap;
+    padding: 12px 24px;
+    background: var(--surface);
+    border-bottom: 1px solid var(--border);
+}
+.board-toolbar input[type="text"],
+.board-toolbar select {
+    padding: 9px 14px;
+    border-radius: 8px;
+    border: 1px solid var(--border);
+    background: var(--bg);
+    color: var(--text);
+    font-size: 0.9rem;
+    outline: none;
+}
+.board-toolbar input[type="text"]:focus,
+.board-toolbar select:focus { border-color: var(--accent); }
+.board-toolbar form { display: flex; gap: 8px; flex: 1; min-width: 260px; }
+.board-toolbar form input { flex: 1; }
+.btn-inline { margin-top: 0; padding: 9px 18px; }
+.card-id a { color: var(--text2); }
+.card-id a:hover { color: var(--accent2); }
+
+/* Focus view */
+.focus-main { padding: 24px; max-width: 1100px; width: 100%; margin: 0 auto; }
+.focus-intro { color: var(--text2); margin-bottom: 20px; }
+.focus-empty { font-size: 1.05rem; padding: 32px 0; }
+.focus-group { margin-bottom: 28px; }
+.focus-group h2 { font-size: 1.05rem; margin-bottom: 12px; display: flex; gap: 10px; align-items: center; }
+.focus-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 12px; }
+.focus-card { margin-bottom: 0; cursor: default; }
+
+/* Error page */
+.error-main { flex: 1; display: flex; align-items: center; justify-content: center; padding: 24px; }
+.error-box {
+    background: var(--surface);
+    border: 1px solid var(--border);
+    border-radius: var(--radius);
+    padding: 32px;
+    max-width: 560px;
+    text-align: center;
+}
+.error-box h2 { margin-bottom: 12px; }
+.error-box p { color: var(--text2); margin-bottom: 16px; line-height: 1.5; }
+
 /* Responsive */
 @media (max-width: 768px) {
     .board-container { flex-direction: column; }

static/js/board.js

@@ -1,59 +1,126 @@
 /**
- * Kanbante — Kanban board drag & drop
+ * Kanbante — Kanban board: drag & drop with persisted order,
+ * filters, and issue creation.
+ *
+ * Failure contract: if the server rejects a move (HTTP error, network
+ * error, or ok:false), the card is put back where it came from and an
+ * error (red) toast is shown — the UI never claims a move that the
+ * backend did not record.
  */
 document.addEventListener('DOMContentLoaded', () => {
-    const columns = document.querySelectorAll('.column-cards');
+    const csrfToken = document.querySelector('meta[name="csrf-token"]')?.content || '';
+    const repoFullName = document.querySelector('.kanban-card')?.dataset.repo
+        || document.querySelector('footer span')?.textContent || '';
 
-    columns.forEach(col => {
+    function orderOf(columnEl) {
+        return Array.from(columnEl.querySelectorAll('.kanban-card'))
+            .map(card => card.dataset.issue).join(',');
+    }
+
+    function revert(evt) {
+        const from = evt.from;
+        const ref = from.children[evt.oldIndex] || null;
+        from.insertBefore(evt.item, ref);
+        updateCounts();
+    }
+
+    document.querySelectorAll('.column-cards').forEach(col => {
         new Sortable(col, {
             group: 'kanban',
             animation: 200,
             ghostClass: 'dragging',
             dragClass: 'dragging',
-            onEnd: function(evt) {
+            onEnd: function (evt) {
+                if (evt.from === evt.to && evt.oldIndex === evt.newIndex) return;
                 const card = evt.item;
-                const toColumn = evt.to.dataset.column;
-                const issueNumber = card.dataset.issue;
-                const repoFullName = card.dataset.repo;
-
-                // Update column count
-                updateCounts();
-
-                // Save to backend
                 const formData = new FormData();
-                formData.append('repo_full_name', repoFullName);
-                formData.append('issue_number', issueNumber);
-                formData.append('to_column', toColumn);
+                formData.append('repo_full_name', card.dataset.repo);
+                formData.append('issue_number', card.dataset.issue);
+                formData.append('to_column', evt.to.dataset.column);
+                formData.append('from_column', evt.from.dataset.column);
+                formData.append('to_order', orderOf(evt.to));
+                formData.append('from_order', orderOf(evt.from));
+                formData.append('csrf_token', csrfToken);
 
-                fetch('/api/move', {
-                    method: 'POST',
-                    body: formData,
-                }).then(r => r.json()).then(data => {
-                    if (data.ok) {
-                        showToast('✅ Déplacé vers ' + toColumn.replace('_', ' '));
-                    }
-                }).catch(err => {
-                    console.error('Move failed:', err);
-                    showToast('❌ Erreur de déplacement');
-                });
+                fetch('/api/move', { method: 'POST', body: formData })
+                    .then(async r => {
+                        const data = await r.json().catch(() => ({}));
+                        if (!r.ok || !data.ok) throw new Error(data.error || ('HTTP ' + r.status));
+                        return data;
+                    })
+                    .then(data => {
+                        updateCounts();
+                        let msg = '✅ Déplacé vers ' + evt.to.dataset.column.replace('_', ' ');
+                        if (data.gitea_sync === 'closed') msg += ' · issue fermée dans Gitea';
+                        if (data.gitea_sync === 'reopened') msg += ' · issue rouverte dans Gitea';
+                        if (data.gitea_sync === 'failed') {
+                            showToast('⚠️ Déplacé localement, mais la synchro Gitea a échoué', true);
+                            return;
+                        }
+                        showToast(msg);
+                    })
+                    .catch(err => {
+                        console.error('Move failed:', err);
+                        revert(evt);
+                        showToast('❌ Échec du déplacement — carte replacée', true);
+                    });
             }
         });
     });
 
+    // ── Filters (text + label), client-side ────────────────
+    const textFilter = document.getElementById('card-filter');
+    const labelFilter = document.getElementById('label-filter');
+    function applyFilters() {
+        const q = (textFilter?.value || '').toLowerCase();
+        const label = (labelFilter?.value || '').toLowerCase();
+        document.querySelectorAll('.kanban-card').forEach(card => {
+            const matchesText = !q || (card.dataset.title || '').includes(q);
+            const matchesLabel = !label || (card.dataset.labels || '').split(',').includes(label);
+            card.style.display = (matchesText && matchesLabel) ? '' : 'none';
+        });
+        updateCounts();
+    }
+    textFilter?.addEventListener('input', applyFilters);
+    labelFilter?.addEventListener('change', applyFilters);
+
+    // ── Create issue (goes to Gitea, card lands in Backlog) ─
+    const createForm = document.getElementById('create-issue-form');
+    createForm?.addEventListener('submit', async (e) => {
+        e.preventDefault();
+        const titleInput = document.getElementById('new-issue-title');
+        const title = titleInput.value.trim();
+        if (!title || !repoFullName) return;
+        const formData = new FormData();
+        formData.append('repo_full_name', repoFullName);
+        formData.append('title', title);
+        formData.append('column', 'backlog');
+        formData.append('csrf_token', csrfToken);
+        try {
+            const r = await fetch('/api/issues', { method: 'POST', body: formData });
+            const data = await r.json().catch(() => ({}));
+            if (!r.ok || !data.ok) throw new Error(data.error || ('HTTP ' + r.status));
+            showToast('✅ Issue #' + data.issue.number + ' créée');
+            setTimeout(() => location.reload(), 600);
+        } catch (err) {
+            console.error('Create failed:', err);
+            showToast('❌ Échec de la création : ' + err.message, true);
+        }
+    });
+
     function updateCounts() {
         document.querySelectorAll('.kanban-column').forEach(col => {
-            const colName = col.querySelector('.column-cards').dataset.column;
             const count = col.querySelectorAll('.kanban-card').length;
             const badge = col.querySelector('.column-count');
             if (badge) badge.textContent = count;
         });
     }
 
-    function showToast(msg) {
+    function showToast(msg, isError = false) {
         const toast = document.createElement('div');
-        toast.className = 'toast';
+        toast.className = 'toast' + (isError ? ' error' : '');
         toast.textContent = msg;
         document.body.appendChild(toast);
-        setTimeout(() => toast.remove(), 2500);
+        setTimeout(() => toast.remove(), 3000);
     }
 });