chore(release): Kanbante 0.14.0 — branche depuis la carte, santé du flux

app/flow.py: séjours par colonne reconstruits du journal,
médianes, colonne la plus lente; zombies = aucune activité
(journal/Gitea) depuis KANBANTE_ZOMBIE_DAYS (30). Pages /health
et /health/{o}/{r} + actions rapides (commenter/backlog/fermer).

CHANGELOG.md

@@ -1,5 +1,59 @@
 # Changelog
 
+## 0.14.0 — 2026-10-11
+
+### Nouveautés
+- **Créer la branche depuis la carte** (issue #3) : le panneau
+  détail propose `issue-<n>-<slug du titre>` (slug ASCII, 40 car.
+  max, nom libre accepté après validation git-ref) et la crée
+  dans Gitea depuis la branche par défaut
+  (`POST /api/issues/{o}/{r}/{n}/branch`). La carte passe en
+  « En cours » (journalisé, source `branch`, étiquette synchronisée)
+  et la branche est aussitôt reconnue par le code lié (#1) et par
+  l'automatisation de fusion (#2). Réponse idempotente si la
+  branche existe déjà.
+- **Santé du flux** (issue #9) : `app/flow.py` reconstruit les
+  séjours par colonne depuis le journal (entrée → déplacement /
+  fermeture) : temps médian et moyen par colonne, colonne la plus
+  lente (goulot, ≥ 2 séjours). **Cartes zombies** : ouvertes sans
+  activité (journal ou Gitea) depuis `KANBANTE_ZOMBIE_DAYS`
+  (défaut 30). Pages `/health` (résumé global) et
+  `/health/{owner}/{repo}` (détail + actions rapides sur les
+  zombies : commenter « toujours pertinent ? », remettre au
+  Backlog, fermer — via les API existantes).
+
+8 tests ajoutés (165 au total). **La feuille de route
+« Différenciation » est complète : 15/15.**
+
+## 0.13.0 — 2026-10-11
+
+### Nouveautés
+- **Cartes liées au code** (issue #1) : `app/code_links.py` apparie
+  branches (`feature/12-x`, `issue-12`), PRs (références `#n` dans
+  titre/corps ou branche) et commits récents (références `#n`).
+  Badge `⑂` sur les cartes (board + fragments temps réel), section
+  « 🧬 Code lié » dans le panneau détail, endpoint
+  `GET /api/issues/{o}/{r}/{n}/code`.
+- **PR fusionnée → carte Terminé** (issue #2) : le webhook accepte
+  `pull_request` fermée + fusionnée ; les issues liées sont
+  fermées dans Gitea si besoin et leurs cartes passent en Terminé,
+  idempotent, journalisé source `webhook`.
+- **Standup automatique** (issue #6) : page `/standup` +
+  `/api/standup` — fermé/déplacé **hier** (journal, titres
+  résolus), focus **aujourd'hui**, **blocages** (cartes qui
+  vieillissent en QA/Révision) ; bouton copier ; inclusion
+  optionnelle au briefing ntfy (`KANBANTE_BRIEFING_INCLUDE_STANDUP=1`).
+- **Règles d'automatisation** (issue #8) : moteur déclaratif
+  `KANBANTE_RULES` (JSON, validé : conditions `column`,
+  `min_age_days`, `label`, `wip_over` ; actions `add_label`,
+  `notify`, `move_top`), évalué toutes les 15 min par le
+  planificateur et à la demande ; chaque action est journalisée
+  (événement `rule`, source `rule`) ; page `/rules` avec état et
+  dernière évaluation. Garde-fou : aucune action de fermeture
+  ou de déplacement entre colonnes.
+
+10 tests ajoutés (157 au total).
+
 ## 0.12.0 — 2026-10-11
 
 ### Nouveautés

README.md

@@ -19,6 +19,12 @@
 - 🌅 **Focus du jour** — `/today` : jusqu'à 3 cartes épinglées (bouton 📌 sur les cartes), candidates de l'encours, reprises d'hier non terminées, récapitulatif du soir ; intégrées au briefing
 - 🔮 **Prévisions** — débit réel du journal (fermetures/semaine), date d'épuisement du backlog et ETA des milestones en fourchette honnête, sur le dashboard, le bandeau milestone et `/forecast` (sparkline SVG)
 - 📖 **Récit de sprint** — le bilan markdown d'un milestone (livré, cycles, plus lentes, reporté) généré depuis le journal, page `/sprint/...` + copie/téléchargement en un clic
+- 🧬 **Code lié** — branches, PRs et commits référant `#n` sur la carte (badge `⑂`) et dans le panneau détail (section « Code lié »)
+- 🔀 **PR fusionnée → Terminé** — le webhook `pull_request` retrouve les issues liées (références `#n`, branche `issue-n-*`), les ferme et déplace leurs cartes, journalisé
+- 🗣️ **Standup automatique** — `/standup` : fermé/déplacé hier, focus du jour, blocages (QA/Révision qui vieillissent), copiable d'un clic ; ajout optionnel au briefing (`KANBANTE_BRIEFING_INCLUDE_STANDUP=1`)
+- ⚙️ **Règles d'automatisation** — moteur déclaratif `KANBANTE_RULES` (JSON) évalué toutes les 15 min : conditions colonne/âge/étiquette/WIP → étiquette, notification ntfy, tête de colonne ; jamais de fermeture par règle ; page `/rules`
+- 🌿 **Branche depuis la carte** — le panneau détail crée `issue-<n>-<slug>` dans Gitea depuis la branche par défaut, déplace la carte en « En cours » et journalise ; la PR qui en naîtra sera reconnue automatiquement
+- 🩺 **Santé du flux** — `/health` : temps médian par colonne (du journal), colonne la plus lente, et cartes zombies (aucune activité depuis `KANBANTE_ZOMBIE_DAYS`) avec actions rapides (commenter, remettre au backlog, fermer)
 - 📥 **Mode Triage** — `/triage` : le backlog se vide carte par carte, plein cadre, au clavier (`1-5` colonnes, `L` étiquettes, `A` s'assigner, `X` fermer, `Entrée` suivante, `Z` annuler), progression et résumé de session ; décisions via les mêmes API que le board
 - 🔄 **Board dynamique** — aucun refresh manuel : toute modification (autre session, Gitea, capture) est diffusée en SSE et appliquée **en place** avec animation des cartes (`/api/board/{owner}/{repo}` en JSON + fragments rendus serveur, diff DOM/FLIP) ; repli par sondage de 45 s sans webhooks ; drag local, filtres et panneau détail préservés
 - ⌨️ **Palette de commandes** — `Ctrl+K` (ou le bouton ⌨️) sur toutes les pages : actions, projets et recherche d'issues globale, 100 % clavier
@@ -123,6 +129,9 @@ sudo systemctl enable --now docker
 | `KANBANTE_CAPTURE_REPO` | *(vide)* | Dépôt par défaut de la capture éclair (`Proprietaire/depot`) |
 | `KANBANTE_CAPTURE_TOKEN` | *(vide)* | Jeton dédié de `POST /api/capture` ; vide = endpoint désactivé (503) |
 | `KANBANTE_CAPTURE_NTFY_TOPIC` | *(vide)* | Topic ntfy écouté : chaque message devient une issue dans `KANBANTE_CAPTURE_REPO` |
+| `KANBANTE_BRIEFING_INCLUDE_STANDUP` | `0` | `1` = le standup automatique est ajouté au briefing ntfy du matin |
+| `KANBANTE_RULES` | *(vide)* | Règles d'automatisation en JSON (voir `/rules`) : conditions colonne/âge/étiquette/WIP → add_label / notify / move_top |
+| `KANBANTE_ZOMBIE_DAYS` | `30` | Jours sans activité après lesquels une carte ouverte est « zombie » sur `/health` |
 | `KANBANTE_DIGEST_TIME` / `KANBANTE_DIGEST_WEEKDAY` | *(vide)* / `0` | Composition hebdo du digest (`HH:MM`, 0 = lundi) ; notification ntfy, jamais d'envoi automatique |
 | `KANBANTE_OBSIGATE_MCP_URL` / `_TOKEN` / `_TOOL` / `_ARGS` | *(vide)* | Serveur MCP d'ObsiGate : URL, jeton optionnel, outil de création de note, gabarit JSON d'arguments (`{title}`, `{content}`) |
 | `KANBANTE_DIGEST_WEBHOOK_URL` | *(vide)* | Webhook générique recevant le digest en JSON `{title, markdown, week}` |
@@ -174,6 +183,11 @@ kanbante/
 | GET | `/api/board/{owner}/{repo}` | Board en JSON + fragments HTML des cartes (base du board dynamique, `?milestone=` accepté) |
 | GET | `/triage` · `/triage/{owner}/{repo}` | Mode Triage : sélecteur de projet puis session clavier sur le backlog |
 | GET | `/today` | Focus du jour : les 3 cartes épinglées, candidates, reprises d'hier |
+| GET | `/api/issues/{o}/{r}/{n}/code` | Branches, PRs et commits liés à la carte |
+| GET | `/standup` · `/api/standup` | Standup automatique (hier / aujourd'hui / blocages) |
+| GET | `/rules` · POST `/api/rules/run` | Règles d'automatisation : état, dernière évaluation, lancement manuel |
+| POST | `/api/issues/{o}/{r}/{n}/branch` | Créer la branche de la carte (`issue-<n>-<slug>` ou nom libre validé) et la passer en « En cours » |
+| GET | `/health` · `/health/{o}/{r}` | Santé du flux : goulots (temps médian par colonne) et cartes zombies, global ou par projet |
 | POST | `/api/today/pin` · `/api/today/unpin` | Épingler / retirer une carte du Focus du jour (max 3) |
 | GET | `/forecast` | Prévisions : débit hebdo, ETA backlog et milestones par projet |
 | GET | `/sprint/{owner}/{repo}` · `/api/sprint/{owner}/{repo}` | Récit de sprint d'un milestone (`?milestone=`), page rendue ou JSON markdown |

app/briefing.py

@@ -16,6 +16,43 @@ def ntfy_configured(settings: Settings) -> bool:
     return bool(settings.ntfy_url and settings.ntfy_topic)
 
 
+def format_standup_text(data: dict) -> str:
+    """Automatic standup (issue #6): yesterday / today / blockers."""
+    lines = [f"🗣️ Standup — {data['today_label']}"]
+    closed = data["closed_yesterday"]
+    lines.append(
+        f"\n✅ Hier ({data['yesterday_label']}) : {len(closed)} fermée(s), "
+        f"{data['moved_yesterday']} déplacement(s)"
+    )
+    for item in closed[:8]:
+        lines.append(
+            f"  • {item['repo']} #{item['number']} « {item['title']} »"
+        )
+    lines.append("\n📌 Aujourd'hui :")
+    if data["picks"]:
+        for pick in data["picks"]:
+            lines.append(
+                f"  • {pick['repo']} #{pick['number']} « {pick['title']} »"
+                f" — {pick['column_label']}"
+            )
+    elif data["focus_titles"]:
+        for title in data["focus_titles"][:5]:
+            lines.append(f"  • {title}")
+        lines.append("  (aucun focus épinglé — pense à /today)")
+    else:
+        lines.append("  • Rien en cours. Journée libre ou triage à faire !")
+    lines.append("\n🚧 Blocages :")
+    if data["blockers"]:
+        for card in data["blockers"][:6]:
+            lines.append(
+                f"  • {card['repo']} #{card['number']} « {card['title']} »"
+                f" — {card['days']} j en {card['column_label']}"
+            )
+    else:
+        lines.append("  • Aucun blocage signalé. ✨")
+    return "\n".join(lines)
+
+
 def format_briefing_text(data: dict) -> str:
     """Plain-text briefing (ntfy body, also shown on /briefing)."""
     lines: list[str] = [f"📋 Kanbante — briefing du {data['date']}"]
@@ -67,6 +104,8 @@ def format_briefing_text(data: dict) -> str:
 
     if data["focus_total"] == 0 and not data["aging"]:
         lines.append("\n🎉 Rien d'urgent : aucun encours, aucune carte vieillissante.")
+    if data.get("standup"):
+        lines.append("\n" + data["standup"])
     return "\n".join(lines)
 
 

app/code_links.py

@@ -0,0 +1,127 @@
+"""Code links (roadmap #1): what code belongs to a card?
+
+Pure matching helpers — a branch, pull request or commit is linked
+to an issue when it references the issue number the way developers
+actually write it: `#12` in a title/body/message, or the number as
+a token in a branch name (`feature/12-login`, `issue-12`, `12-fix`).
+"""
+
+import re
+import unicodedata
+
+_REF_RE = re.compile(r"(?<![\w#])#(\d+)\b")
+_BRANCH_TOKEN_RE = re.compile(r"(?:^|[-_/])(\d+)(?:[-_/]|$)")
+
+
+def extract_issue_refs(text: str | None) -> set[int]:
+    """All #n references in a text (titles, bodies, messages)."""
+    if not text:
+        return set()
+    return {int(m.group(1)) for m in _REF_RE.finditer(text)}
+
+
+def branch_issue_number(branch_name: str | None) -> int | None:
+    """The issue number encoded in a branch name, if any."""
+    if not branch_name:
+        return None
+    m = _BRANCH_TOKEN_RE.search(branch_name)
+    return int(m.group(1)) if m else None
+
+
+def slugify_title(title: str, max_len: int = 40) -> str:
+    """ASCII slug for a branch name: 'Créer la branche !' -> 'creer-la-branche'."""
+    normalized = unicodedata.normalize("NFKD", title or "")
+    ascii_text = normalized.encode("ascii", "ignore").decode("ascii")
+    slug = re.sub(r"[^a-z0-9]+", "-", ascii_text.lower()).strip("-")
+    slug = re.sub(r"-{2,}", "-", slug)
+    if len(slug) > max_len:
+        slug = slug[:max_len].rstrip("-")
+    return slug or "issue"
+
+
+def branch_name_for(number: int, title: str) -> str:
+    """The branch a card would create (issue #3): issue-<n>-<slug>.
+
+    The name is recognized back by branch_issue_number, which is
+    what links the future PR to this card (issue #2).
+    """
+    return f"issue-{number}-{slugify_title(title)}"
+
+
+def find_code_links(
+    branches: list[dict],
+    pulls: list[dict],
+    commits: list[dict],
+    number: int,
+) -> dict:
+    """Linked branches/PRs/commits for one issue number."""
+    linked_branches = [
+        b.get("name", "")
+        for b in branches
+        if branch_issue_number(b.get("name")) == number
+    ]
+    linked_pulls = []
+    for pr in pulls:
+        head_ref = ((pr.get("head") or {}).get("ref")) or ""
+        refs = extract_issue_refs(pr.get("title")) | extract_issue_refs(
+            pr.get("body")
+        )
+        if number in refs or branch_issue_number(head_ref) == number:
+            linked_pulls.append(
+                {
+                    "number": pr.get("number"),
+                    "title": pr.get("title", ""),
+                    "state": pr.get("state", "open"),
+                    "merged": bool(pr.get("merged")),
+                    "html_url": pr.get("html_url", ""),
+                    "branch": head_ref,
+                }
+            )
+    linked_commits = []
+    for commit in commits:
+        message = ((commit.get("commit") or {}).get("message")) or ""
+        if number in extract_issue_refs(message):
+            linked_commits.append(
+                {
+                    "sha": (commit.get("sha") or "")[:7],
+                    "message": message.splitlines()[0] if message else "",
+                    "html_url": commit.get("html_url", ""),
+                    "date": (
+                        ((commit.get("commit") or {}).get("author") or {}).get(
+                            "date", ""
+                        )
+                        or ""
+                    )[:10],
+                }
+            )
+    # Best PR to badge: a merged one beats an open one beats closed.
+    pr_badge = None
+    for wanted in ("merged", "open", "closed"):
+        for pr in linked_pulls:
+            state = (
+                "merged" if pr["merged"]
+                else "open" if pr["state"] == "open" else "closed"
+            )
+            if state == wanted:
+                pr_badge = {
+                    "number": pr["number"],
+                    "state": state,
+                    "label": {
+                        "merged": "fusionnée",
+                        "open": "ouverte",
+                        "closed": "fermée",
+                    }[state],
+                }
+                break
+        if pr_badge:
+            break
+    return {
+        "branches": linked_branches,
+        "pulls": linked_pulls,
+        "commits": linked_commits,
+        "summary": {
+            "branches": len(linked_branches),
+            "commits": len(linked_commits),
+            "pr": pr_badge,
+        },
+    }

app/config.py

@@ -68,6 +68,19 @@ Environment variables:
     KANBANTE_OBSIGATE_MCP_ARGS   JSON argument template for the tool;
                                  "{title}" and "{content}" placeholders
                                  are substituted (JSON-escaped).
+    KANBANTE_BRIEFING_INCLUDE_STANDUP
+                                 "1" appends the automatic standup
+                                 (issue #6) to the morning briefing.
+    KANBANTE_RULES               Automation rules (issue #8) as a JSON
+                                 array: [{"name": ..., "when":
+                                 {"column": "review", "min_age_days": 3},
+                                 "then": {"notify": true}}]. Conditions:
+                                 column, min_age_days, label, wip_over.
+                                 Actions: add_label, notify, move_top.
+                                 A rule can never close an issue.
+    KANBANTE_ZOMBIE_DAYS         Days without any activity after
+                                 which an open card is a "zombie"
+                                 on /health (issue #9). Default 30.
 """
 
 import os
@@ -76,7 +89,7 @@ from pathlib import Path
 
 BASE_DIR = Path(__file__).resolve().parent.parent
 
-APP_VERSION = "0.12.0"
+APP_VERSION = "0.14.0"
 
 
 def _env_bool(name: str, default: bool) -> bool:
@@ -142,6 +155,9 @@ class Settings:
     obsigate_mcp_token: str = ""
     obsigate_mcp_tool: str = ""
     obsigate_mcp_args: str = '{"title": "{title}", "content": "{content}"}'
+    briefing_include_standup: bool = False
+    rules_raw: str = ""
+    zombie_days: int = 30
 
     @property
     def auth_enabled(self) -> bool:
@@ -184,4 +200,7 @@ def get_settings() -> Settings:
             "KANBANTE_OBSIGATE_MCP_ARGS",
             '{"title": "{title}", "content": "{content}"}',
         ),
+        briefing_include_standup=_env_bool("KANBANTE_BRIEFING_INCLUDE_STANDUP", False),
+        rules_raw=os.getenv("KANBANTE_RULES", ""),
+        zombie_days=_env_int("KANBANTE_ZOMBIE_DAYS", 30),
     )

app/digest.py

@@ -143,7 +143,7 @@ async def _mcp_session(client: httpx.AsyncClient, url: str, token: str) -> None:
         {
             "protocolVersion": MCP_PROTOCOL_VERSION,
             "capabilities": {},
-            "clientInfo": {"name": "kanbante", "version": "0.12.0"},
+            "clientInfo": {"name": "kanbante", "version": "0.14.0"},
         },
         req_id=1,
     )

app/flow.py

@@ -0,0 +1,123 @@
+"""Flow health (roadmap #9): bottlenecks and zombie cards.
+
+Boards show state; this module reads the event journal for health:
+how long cards actually stay in each column (dwell samples are the
+intervals between an entry and the next move/close), and which
+open cards have had no activity for a long time (zombies).
+"""
+
+import statistics
+from datetime import datetime
+
+from app.models import KANBAN_COLUMNS
+
+
+def parse_ts(raw) -> datetime | None:
+    """Parse journal ('YYYY-MM-DD HH:MM:SS') and Gitea ISO stamps."""
+    text = str(raw or "").strip()
+    if not text:
+        return None
+    for fmt in ("%Y-%m-%d %H:%M:%S", "%Y-%m-%dT%H:%M:%S"):
+        try:
+            return datetime.strptime(text[:19], fmt)
+        except ValueError:
+            continue
+    try:
+        return datetime.strptime(text[:10], "%Y-%m-%d")
+    except ValueError:
+        return None
+
+
+def column_dwell(events: list[dict]) -> dict[str, list[float]]:
+    """Dwell samples (in days) per column, rebuilt from the journal.
+
+    A stay starts when a card enters a column (created / moved /
+    reopened) and ends at its next move or close. The first stay of
+    a card whose journal starts mid-flight is unknowable and is
+    simply not sampled.
+    """
+    by_issue: dict[tuple[str, int], list[dict]] = {}
+    for event in events:
+        by_issue.setdefault(
+            (event["repo_full_name"], event["issue_number"]), []
+        ).append(event)
+    dwell: dict[str, list[float]] = {}
+    for issue_events in by_issue.values():
+        ordered = sorted(
+            issue_events, key=lambda e: str(e.get("created_at") or "")
+        )
+        current: str | None = None
+        since: datetime | None = None
+        for event in ordered:
+            at = parse_ts(event.get("created_at"))
+            if at is None:
+                continue
+            kind = event["event_type"]
+            if kind == "created":
+                if current is None:
+                    current = event.get("to_column") or "backlog"
+                    since = at
+            elif kind == "moved":
+                if current is not None and since is not None:
+                    dwell.setdefault(current, []).append(
+                        (at - since).total_seconds() / 86400
+                    )
+                elif current is None and event.get("from_column"):
+                    # The stay in from_column began before the journal
+                    # window: only the new stay can be timed.
+                    pass
+                current = event.get("to_column") or current
+                since = at
+            elif kind == "closed":
+                if current is not None and since is not None:
+                    dwell.setdefault(current, []).append(
+                        (at - since).total_seconds() / 86400
+                    )
+                current = "done"
+                since = at
+            elif kind == "reopened":
+                current = event.get("to_column") or "backlog"
+                since = at
+    return dwell
+
+
+def summarize_dwell(dwell: dict[str, list[float]]) -> list[dict]:
+    """Median dwell per column, in board order."""
+    summary = []
+    for column in KANBAN_COLUMNS:
+        samples = dwell.get(column) or []
+        if not samples:
+            continue
+        summary.append(
+            {
+                "column": column,
+                "count": len(samples),
+                "median_days": round(statistics.median(samples), 1),
+                "avg_days": round(sum(samples) / len(samples), 1),
+            }
+        )
+    return summary
+
+
+def slowest_column(summary: list[dict], min_samples: int = 2) -> dict | None:
+    """The bottleneck: slowest column (done excluded) with data."""
+    candidates = [
+        row for row in summary
+        if row["column"] != "done" and row["count"] >= min_samples
+    ]
+    if not candidates:
+        return None
+    return max(candidates, key=lambda r: r["median_days"])
+
+
+def last_activity(events: list[dict]) -> dict[tuple[str, int], datetime]:
+    """Most recent journal timestamp per (repo, issue)."""
+    latest: dict[tuple[str, int], datetime] = {}
+    for event in events:
+        at = parse_ts(event.get("created_at"))
+        if at is None:
+            continue
+        key = (event["repo_full_name"], event["issue_number"])
+        if key not in latest or at > latest[key]:
+            latest[key] = at
+    return latest

app/gitea_client.py

@@ -341,6 +341,38 @@ class GiteaClient:
         self._cache_clear()
         return r.json()
 
+    async def create_branch(
+        self, owner: str, repo: str, new_branch: str, old_branch: str
+    ) -> dict:
+        """Create a branch from another one (issue #3)."""
+        return await self._request(
+            "POST",
+            f"/repos/{owner}/{repo}/branches",
+            json={
+                "new_branch_name": new_branch,
+                "old_branch_name": old_branch,
+            },
+        )
+
+    async def list_branches(self, owner: str, repo: str) -> list[dict]:
+        """All branches of a repo (code links, issue #1)."""
+        return await self._get_all_pages(f"/repos/{owner}/{repo}/branches")
+
+    async def list_pulls(
+        self, owner: str, repo: str, state: str = "all"
+    ) -> list[dict]:
+        """All pull requests of a repo (code links, issue #1)."""
+        return await self._get_all_pages(
+            f"/repos/{owner}/{repo}/pulls", state=state
+        )
+
+    async def list_commits(
+        self, owner: str, repo: str, limit: int = 75
+    ) -> list[dict]:
+        """Most recent commits of a repo (code links, issue #1)."""
+        data = await self._get(f"/repos/{owner}/{repo}/commits", limit=limit)
+        return data if isinstance(data, list) else []
+
     async def set_issue_assignees(
         self, owner: str, repo: str, issue_number: int, logins: list[str]
     ) -> dict:

app/main.py

@@ -35,10 +35,18 @@ from starlette.middleware.base import BaseHTTPMiddleware
 
 from app.config import APP_VERSION, get_settings
 from app.gitea_client import GiteaClient
+from app import code_links as code_links_service
 from app import digest as digest_service
+from app import flow as flow_service
 from app import forecast as forecast_service
+from app import rules as rules_service
 from app import sprint as sprint_service
-from app.briefing import format_briefing_text, ntfy_configured, send_ntfy
+from app.briefing import (
+    format_briefing_text,
+    format_standup_text,
+    ntfy_configured,
+    send_ntfy,
+)
 from app.capture import ntfy_capture_loop, parse_capture_text
 from app.models import (
     KANBAN_COLUMNS,
@@ -148,6 +156,7 @@ async def lifespan(app: FastAPI):
         )
     scheduler = asyncio.create_task(_briefing_scheduler())
     digest_task = asyncio.create_task(_digest_scheduler())
+    rules_task = asyncio.create_task(_rules_scheduler())
     capture_task = None
     if settings.capture_ntfy_topic and settings.ntfy_url:
         async def _capture_create(title: str, body: str) -> None:
@@ -171,6 +180,7 @@ async def lifespan(app: FastAPI):
     yield
     scheduler.cancel()
     digest_task.cancel()
+    rules_task.cancel()
     if capture_task is not None:
         capture_task.cancel()
     await gitea.aclose()
@@ -556,6 +566,7 @@ async def board(request: Request, owner: str, repo: str, milestone: str = ""):
 
     board_state = get_board_state(full_name)
     columns = _merge_issues_with_board(display_issues, board_state)
+    await _annotate_code(owner, repo, columns)
 
     labels: dict[str, dict] = {}
     for issue in open_issues:
@@ -633,6 +644,7 @@ async def api_board(owner: str, repo: str, milestone: str = ""):
     columns, display_issues, board_state = _board_columns_for(
         owner, repo, all_items, milestone
     )
+    await _annotate_code(owner, repo, columns)
     settings = get_settings()
     ages = _card_ages(full_name, display_issues, board_state)
     card_template = _tpl_env.get_template("_card.html")
@@ -1096,6 +1108,260 @@ async def sprint_page(request: Request, owner: str, repo: str, milestone: str =
     )
 
 
+async def _apply_rule_actions(
+    summary: dict, rule: dict, full_name: str, owner: str, repo: str,
+    issue: dict, column: str, columns: dict, ages: dict,
+) -> None:
+    """Execute one rule's actions on one card (issue #8)."""
+    then = rule["then"]
+    number = issue["number"]
+    acted: list[str] = []
+    if then.get("add_label"):
+        label = then["add_label"]
+        present = [
+            (lab or {}).get("name") for lab in issue.get("labels") or []
+        ]
+        if label not in present:
+            lab = await gitea.ensure_label(owner, repo, label, "fb8500")
+            await gitea.add_issue_label(owner, repo, number, lab["id"])
+            acted.append(f"étiquette « {label} » ajoutée")
+    if then.get("move_top"):
+        order = [c["number"] for c in columns.get(column, [])]
+        if order and order[0] != number:
+            set_column_order(
+                full_name, column,
+                [number] + [n for n in order if n != number],
+            )
+            acted.append("remontée en tête de colonne")
+    if then.get("notify"):
+        guard = (
+            f"rule_notified:{rule['name']}:{full_name}:{number}:{_today_str()}"
+        )
+        if not get_kv(guard):
+            age = (ages.get(number) or {}).get("days")
+            age_txt = f" depuis {age} j" if age is not None else ""
+            text = (
+                f"⚙️ Règle « {rule['name']} »\n"
+                f"{full_name} #{number} « {issue.get('title', '')} » — "
+                f"{COLUMN_LABELS[column]}{age_txt}"
+            )
+            if await send_ntfy(get_settings(), text):
+                set_kv(guard, "1")
+                acted.append("notification ntfy envoyée")
+    if acted:
+        log_event(
+            full_name, number, "rule",
+            from_column=column, to_column=column, source="rule",
+        )
+        summary["actions"].append(
+            {
+                "rule": rule["name"],
+                "repo": full_name,
+                "number": number,
+                "column": column,
+                "did": acted,
+            }
+        )
+
+
+async def _run_rules_once() -> dict:
+    """Evaluate every configured rule once (scheduler + manual run)."""
+    settings = get_settings()
+    rules, errors = rules_service.parse_rules(settings.rules_raw)
+    summary: dict = {
+        "at": datetime.now().strftime("%Y-%m-%d %H:%M"),
+        "rules": len(rules),
+        "errors": errors,
+        "actions": [],
+    }
+    if rules:
+        repos = await gitea.search_repos()
+        active, _inactive, _archived = classify_repos(repos)
+        for repo_info in active[:50]:
+            full_name = repo_info["full_name"]
+            owner, _, name = full_name.partition("/")
+            try:
+                all_items = await gitea.get_repo_issues(
+                    owner, name, state="all"
+                )
+            except Exception:
+                continue
+            columns, display_issues, board_state = _board_columns_for(
+                owner, name, all_items
+            )
+            ages = _card_ages(full_name, display_issues, board_state)
+            for rule in rules:
+                matches = rules_service.matching_cards(rule, columns, ages)
+                for issue, column in matches:
+                    if len(summary["actions"]) >= 50:
+                        break
+                    try:
+                        await _apply_rule_actions(
+                            summary, rule, full_name, owner, name,
+                            issue, column, columns, ages,
+                        )
+                    except Exception as exc:
+                        logger.warning(
+                            "Rule %s failed on %s#%s: %s",
+                            rule["name"], full_name, issue["number"], exc,
+                        )
+    set_kv("rules_last_run", json.dumps(summary, ensure_ascii=False))
+    return summary
+
+
+async def _rules_scheduler() -> None:
+    """Evaluate the automation rules every 15 minutes (issue #8)."""
+    while True:
+        try:
+            if get_settings().rules_raw.strip():
+                await _run_rules_once()
+        except asyncio.CancelledError:
+            raise
+        except Exception:
+            logger.exception("Rules evaluation failed")
+        await asyncio.sleep(900)
+
+
+@app.get("/rules", response_class=HTMLResponse)
+async def rules_page(request: Request):
+    """Automation rules: configuration status + last evaluation."""
+    settings = get_settings()
+    rules, errors = rules_service.parse_rules(settings.rules_raw)
+    last_run = None
+    raw = get_kv("rules_last_run")
+    if raw:
+        try:
+            last_run = json.loads(raw)
+        except ValueError:
+            last_run = None
+    return render(
+        request,
+        "rules.html",
+        rules=rules,
+        errors=errors,
+        configured=bool(settings.rules_raw.strip()),
+        last_run=last_run,
+    )
+
+
+@app.post("/api/rules/run")
+async def api_rules_run(request: Request, csrf_token: str = Form("")):
+    """Evaluate the rules right now (manual trigger)."""
+    if not _csrf_valid(request, csrf_token):
+        return _csrf_error()
+    summary = await _run_rules_once()
+    return {"ok": True, "summary": summary}
+
+
+async def _project_health(owner: str, repo: str) -> dict:
+    """Bottlenecks + zombies for one project (issue #9)."""
+    full_name = f"{owner}/{repo}"
+    settings = get_settings()
+    all_items = await gitea.get_repo_issues(owner, repo, state="all")
+    columns, display_issues, _bs = _board_columns_for(
+        owner, repo, all_items
+    )
+    events = get_events(repo_full_name=full_name, limit=2000)
+    dwell = flow_service.summarize_dwell(flow_service.column_dwell(events))
+    slowest = flow_service.slowest_column(dwell)
+    activity = flow_service.last_activity(events)
+    placement = {
+        issue["number"]: col
+        for col, cards in columns.items()
+        for issue in cards
+    }
+    now = datetime.now()
+    zombies = []
+    for issue in display_issues:
+        number = issue["number"]
+        candidates = [
+            ts for ts in (
+                activity.get((full_name, number)),
+                flow_service.parse_ts(issue.get("updated_at")),
+                flow_service.parse_ts(issue.get("created_at")),
+            )
+            if ts is not None
+        ]
+        if not candidates:
+            continue
+        days = (now - max(candidates)).days
+        if days >= settings.zombie_days:
+            column = placement.get(number, "backlog")
+            zombies.append(
+                {
+                    "number": number,
+                    "title": issue.get("title", ""),
+                    "column": column,
+                    "column_label": COLUMN_LABELS[column],
+                    "days_inactive": days,
+                    "html_url": issue.get("html_url", ""),
+                }
+            )
+    zombies.sort(key=lambda z: -z["days_inactive"])
+    return {
+        "full_name": full_name,
+        "dwell": dwell,
+        "slowest": slowest,
+        "zombies": zombies,
+        "zombie_days": settings.zombie_days,
+        "open_count": len(display_issues),
+        "column_labels": COLUMN_LABELS,
+    }
+
+
+@app.get("/health", response_class=HTMLResponse)
+async def health_index(request: Request):
+    """Flow health, global summary (issue #9)."""
+    repos = await gitea.search_repos()
+    active, _inactive, _archived = classify_repos(repos)
+    projects = []
+    for repo_info in active:
+        owner, _, name = repo_info["full_name"].partition("/")
+        try:
+            projects.append(await _project_health(owner, name))
+        except Exception as exc:
+            logger.warning("Health failed for %s: %s", repo_info["full_name"], exc)
+    return render(request, "health.html", projects=projects)
+
+
+@app.get("/health/{owner}/{repo}", response_class=HTMLResponse)
+async def health_project(request: Request, owner: str, repo: str):
+    """Flow health of one project: dwell per column + zombies."""
+    repos = await gitea.search_repos()
+    known = {r["full_name"] for r in repos}
+    if f"{owner}/{repo}" not in known:
+        return render(
+            request, "health_project.html",
+            health=None, full_name=f"{owner}/{repo}",
+        )
+    health = await _project_health(owner, repo)
+    return render(
+        request, "health_project.html",
+        health=health, full_name=f"{owner}/{repo}",
+    )
+
+
+@app.get("/api/standup")
+async def api_standup():
+    """The automatic standup as JSON text (issue #6)."""
+    data = await _briefing_data()
+    text = format_standup_text(await _standup_data(data))
+    return {"ok": True, "text": text}
+
+
+@app.get("/standup", response_class=HTMLResponse)
+async def standup_page(request: Request):
+    """Standup page: yesterday / today / blockers, copy in one click."""
+    data = await _briefing_data()
+    text = format_standup_text(await _standup_data(data))
+    return render(
+        request,
+        "standup.html",
+        text=text,
+        include_in_briefing=get_settings().briefing_include_standup,
+    )
+
+
 @app.get("/forecast", response_class=HTMLResponse)
 async def forecast_page(request: Request):
     """Forecasts (issue #7): real-pace ETAs per project + milestone."""
@@ -1425,7 +1691,7 @@ async def _briefing_data() -> dict:
         if enriched and enriched["state"] != "closed":
             carry_over.append(enriched)
 
-    return {
+    data = {
         "date": datetime.now().strftime("%d/%m/%Y"),
         "today_picks": today_picks,
         "carry_over": carry_over,
@@ -1445,6 +1711,66 @@ async def _briefing_data() -> dict:
             "avg_cycle_days": metrics_30d["avg_cycle_days"],
         },
     }
+    if get_settings().briefing_include_standup:
+        data["standup"] = format_standup_text(await _standup_data(data))
+    return data
+
+
+async def _standup_data(briefing_data: dict) -> dict:
+    """Yesterday / today / blockers for the automatic standup (#6)."""
+    yesterday = datetime.now() - timedelta(days=1)
+    y_str = yesterday.strftime("%Y-%m-%d")
+    events = [
+        e for e in get_events(limit=1000)
+        if str(e.get("created_at") or "").startswith(y_str)
+    ]
+    closed_keys: list[tuple[str, int]] = []
+    seen: set[tuple[str, int]] = set()
+    moved = 0
+    for event in events:
+        if event["event_type"] == "closed":
+            key = (event["repo_full_name"], event["issue_number"])
+            if key not in seen:
+                seen.add(key)
+                closed_keys.append(key)
+        elif event["event_type"] == "moved":
+            moved += 1
+    titles: dict[tuple[str, int], str] = {}
+    for repo_name in {repo for repo, _ in closed_keys}:
+        owner, _, name = repo_name.partition("/")
+        try:
+            items = await gitea.get_repo_issues(owner, name, state="all")
+        except Exception:
+            continue
+        for item in items:
+            if _is_issue(item):
+                titles[(repo_name, item["number"])] = item.get("title", "")
+    blockers = [
+        card for card in briefing_data.get("aging", [])
+        if "Révision" in card.get("column_label", "")
+        or "QA" in card.get("column_label", "")
+    ]
+    focus_titles = [
+        f"{g['full_name']} — {title}"
+        for g in briefing_data.get("focus_groups", [])
+        for title in g.get("titles", [])[:2]
+    ]
+    return {
+        "today_label": datetime.now().strftime("%A %d %B %Y"),
+        "yesterday_label": yesterday.strftime("%A %d %B"),
+        "closed_yesterday": [
+            {
+                "repo": repo,
+                "number": number,
+                "title": titles.get((repo, number), ""),
+            }
+            for repo, number in closed_keys
+        ],
+        "moved_yesterday": moved,
+        "picks": briefing_data.get("today_picks", []),
+        "focus_titles": focus_titles,
+        "blockers": blockers,
+    }
 
 
 @app.get("/briefing", response_class=HTMLResponse)
@@ -1527,6 +1853,60 @@ def _apply_external_transition(
     return event_type
 
 
+async def _apply_pr_merged(full_name: str, pr: dict) -> list[str]:
+    """A merged PR sends its linked cards to done (issue #2).
+
+    Links come from #n references in the PR title/body and from the
+    head branch name (issue-n-*). The issue is closed in Gitea when
+    it is not already (a plain reference does not auto-close), the
+    card is moved idempotently, and the journal records the webhook
+    as the source.
+    """
+    refs = code_links_service.extract_issue_refs(
+        pr.get("title")
+    ) | code_links_service.extract_issue_refs(pr.get("body"))
+    branch_number = code_links_service.branch_issue_number(
+        (pr.get("head") or {}).get("ref")
+    )
+    if branch_number is not None:
+        refs.add(branch_number)
+    owner, _, repo = full_name.partition("/")
+    results: list[str] = []
+    for number in sorted(refs):
+        try:
+            issue = await gitea.get_issue(owner, repo, number)
+        except Exception:
+            results.append(f"#{number}:unknown")
+            continue
+        if not _is_issue(issue):
+            results.append(f"#{number}:not-issue")
+            continue
+        if issue.get("state") != "closed":
+            try:
+                await gitea.set_issue_state(owner, repo, number, "closed")
+            except Exception as exc:
+                logger.warning(
+                    "PR merge: closing %s#%s failed: %s", full_name, number, exc
+                )
+        outcome = _apply_external_transition(full_name, number, "done", "closed")
+        if outcome == "noop":
+            board = get_board_state(full_name)
+            placed = any(
+                c["issue_number"] == number
+                for cards in board.values()
+                for c in cards
+            )
+            if not placed:
+                move_issue(full_name, number, "done")
+                log_event(
+                    full_name, number, "closed",
+                    to_column="done", source="webhook",
+                )
+                outcome = "closed"
+        results.append(f"#{number}:{outcome}")
+    return results
+
+
 @app.post("/webhooks/gitea")
 async def gitea_webhook(request: Request):
     """Receive Gitea webhooks: verify HMAC, apply external close/reopen,
@@ -1564,6 +1944,11 @@ async def gitea_webhook(request: Request):
             handled = _apply_external_transition(
                 full_name, number, "backlog", "reopened"
             )
+    elif event == "pull_request" and action == "closed" and full_name:
+        pr = payload.get("pull_request") or {}
+        if pr.get("merged"):
+            results = await _apply_pr_merged(full_name, pr)
+            handled = "pr-merged:" + (",".join(results) if results else "none")
 
     gitea.invalidate_cache()
     await hub.broadcast(
@@ -2158,6 +2543,184 @@ def _comment_payload(comment: dict) -> dict:
     }
 
 
+async def _fetch_code_sources(owner: str, repo: str):
+    """Branches + PRs + recent commits of a repo (best effort each)."""
+    async def _safe(coro):
+        try:
+            return await coro
+        except Exception as exc:
+            logger.debug("code links source failed for %s/%s: %s", owner, repo, exc)
+            return []
+
+    branches, pulls, commits = await asyncio.gather(
+        _safe(gitea.list_branches(owner, repo)),
+        _safe(gitea.list_pulls(owner, repo)),
+        _safe(gitea.list_commits(owner, repo)),
+    )
+    return branches, pulls, commits
+
+
+async def _annotate_code(owner: str, repo: str, columns: dict) -> None:
+    """Attach a compact _code summary to each card issue (issue #1)."""
+    branches, pulls, commits = await _fetch_code_sources(owner, repo)
+    if not (branches or pulls or commits):
+        return
+    for cards in columns.values():
+        for issue in cards:
+            links = code_links_service.find_code_links(
+                branches, pulls, commits, issue["number"]
+            )
+            if links["branches"] or links["pulls"] or links["commits"]:
+                issue["_code"] = links["summary"]
+
+
+@app.get("/api/issues/{owner}/{repo}/{number}/code")
+async def api_issue_code(owner: str, repo: str, number: int):
+    """Branches, PRs and commits linked to a card (issue #1)."""
+    branches, pulls, commits = await _fetch_code_sources(owner, repo)
+    links = code_links_service.find_code_links(branches, pulls, commits, number)
+    suggested = f"issue-{number}"
+    try:
+        issue = await gitea.get_issue(owner, repo, number)
+        suggested = code_links_service.branch_name_for(
+            number, issue.get("title", "")
+        )
+    except Exception:
+        pass
+    return {"ok": True, "suggested_branch": suggested, **links}
+
+
+_BRANCH_NAME_RE = re.compile(r"^[A-Za-z0-9][A-Za-z0-9._/-]*$")
+
+
+async def _sync_kanban_label(
+    owner: str, repo: str, number: int, column: str
+) -> None:
+    """Mirror a column on the issue's kanban:* label (best effort)."""
+    if not get_settings().sync_labels:
+        return
+    try:
+        desired = (
+            f"kanban:{column}" if column in LABELLED_COLUMNS else None
+        )
+        issue = await gitea.get_issue(owner, repo, number)
+        current = [
+            label for label in issue.get("labels") or []
+            if str(label.get("name", "")).startswith("kanban:")
+        ]
+        for label in current:
+            if label.get("name") != desired:
+                await gitea.remove_issue_label(
+                    owner, repo, number, label["id"]
+                )
+        if desired and all(l.get("name") != desired for l in current):
+            label = await gitea.ensure_label(
+                owner, repo, desired, COLUMN_COLORS[column]
+            )
+            await gitea.add_issue_label(owner, repo, number, label["id"])
+    except Exception as exc:
+        logger.warning(
+            "Label sync failed for %s/%s#%s: %s", owner, repo, number, exc
+        )
+
+
+@app.post("/api/issues/{owner}/{repo}/{number}/branch")
+async def api_create_branch(
+    owner: str,
+    repo: str,
+    number: int,
+    request: Request,
+    name: str = Form(""),
+    csrf_token: str = Form(""),
+):
+    """Create the card's branch in Gitea (issue #3), then start the card.
+
+    Default name: issue-<n>-<slug of the title> — the convention the
+    merged-PR automation (issue #2) recognizes. Creating the branch
+    moves the card to In Progress and journals it.
+    """
+    if not _csrf_valid(request, csrf_token):
+        return _csrf_error()
+    try:
+        issue = await gitea.get_issue(owner, repo, number)
+    except Exception:
+        return JSONResponse(
+            {"ok": False, "error": "Issue introuvable"}, status_code=404
+        )
+    if not _is_issue(issue):
+        return JSONResponse(
+            {"ok": False, "error": "Pas une issue"}, status_code=400
+        )
+    branch = (name or "").strip() or code_links_service.branch_name_for(
+        number, issue.get("title", "")
+    )
+    if (
+        not _BRANCH_NAME_RE.match(branch)
+        or ".." in branch
+        or branch.endswith("/")
+        or branch.endswith(".lock")
+    ):
+        return JSONResponse(
+            {"ok": False, "error": f"Nom de branche invalide : {branch}"},
+            status_code=400,
+        )
+    repo_info = {}
+    try:
+        repo_info = await gitea.get_repo(owner, repo)
+    except Exception:
+        pass
+    base_url = repo_info.get("html_url", "")
+    branch_url = f"{base_url}/src/branch/{branch}" if base_url else ""
+    existing = await _safe_list_branches(owner, repo)
+    if branch in existing:
+        return {
+            "ok": True, "branch": branch, "exists": True,
+            "url": branch_url, "moved": False,
+        }
+    default_branch = repo_info.get("default_branch") or "main"
+    try:
+        await gitea.create_branch(owner, repo, branch, default_branch)
+    except Exception as exc:
+        return JSONResponse(
+            {"ok": False, "error": f"Création impossible : {exc}"},
+            status_code=502,
+        )
+    gitea.invalidate_cache()
+
+    full_name = f"{owner}/{repo}"
+    moved = False
+    if issue.get("state") == "open":
+        board = get_board_state(full_name)
+        current = next(
+            (
+                col for col, cards in board.items()
+                if any(c["issue_number"] == number for c in cards)
+            ),
+            "backlog",
+        )
+        if current != "in_progress":
+            move_issue(full_name, number, "in_progress")
+            log_event(
+                full_name, number, "moved",
+                from_column=current, to_column="in_progress",
+                source="branch",
+            )
+            await _sync_kanban_label(owner, repo, number, "in_progress")
+            moved = True
+    await _publish_board_changed(full_name)
+    return {
+        "ok": True, "branch": branch, "from": default_branch,
+        "url": branch_url, "moved": moved,
+    }
+
+
+async def _safe_list_branches(owner: str, repo: str) -> list[str]:
+    try:
+        return [b.get("name", "") for b in await gitea.list_branches(owner, repo)]
+    except Exception:
+        return []
+
+
 @app.get("/api/issues/{owner}/{repo}/{number}")
 async def api_issue_detail(owner: str, repo: str, number: int):
     """Issue detail + comments for the card panel (proxied from Gitea)."""

app/models.py

@@ -294,7 +294,7 @@ def set_kv(key: str, value: str) -> None:
 
 # ── Event journal ──────────────────────────────────────────
 
-EVENT_TYPES = ("created", "moved", "closed", "reopened", "commented")
+EVENT_TYPES = ("created", "moved", "closed", "reopened", "commented", "rule")
 
 
 def log_event(

app/rules.py

@@ -0,0 +1,111 @@
+"""Automation rules (roadmap #8): small declarative IFTTT for the board.
+
+Rules live in KANBANTE_RULES (JSON array) — deliberately boring:
+
+    [{"name": "Relance révision",
+      "when": {"column": "review", "min_age_days": 3},
+      "then": {"notify": true}},
+     {"name": "Urgent qui vieillit",
+      "when": {"column": "in_progress", "min_age_days": 7},
+      "then": {"add_label": "urgent"}}]
+
+Conditions: column, min_age_days (time in the current column),
+label (present on the card), wip_over (column holds MORE cards
+than N — then every card of the column matches).
+Actions: add_label, notify (ntfy), move_top (of its column).
+
+Guardrail, by design: there is NO close/delete/move action — a
+rule can never close an issue or move a card between columns.
+"""
+
+import json
+
+from app.models import KANBAN_COLUMNS
+
+CONDITION_KEYS = {"column", "min_age_days", "label", "wip_over"}
+ACTION_KEYS = {"add_label", "notify", "move_top"}
+
+
+def parse_rules(raw: str) -> tuple[list[dict], list[str]]:
+    """Validate KANBANTE_RULES; returns (rules, human errors)."""
+    if not raw or not raw.strip():
+        return [], []
+    try:
+        data = json.loads(raw)
+    except ValueError as exc:
+        return [], [f"JSON invalide : {exc}"]
+    if not isinstance(data, list):
+        return [], ["KANBANTE_RULES doit être un tableau JSON de règles"]
+    rules: list[dict] = []
+    errors: list[str] = []
+    for i, item in enumerate(data):
+        label = f"règle #{i + 1}"
+        if not isinstance(item, dict):
+            errors.append(f"{label} : pas un objet")
+            continue
+        name = str(item.get("name") or label)
+        when = item.get("when")
+        then = item.get("then")
+        if not isinstance(when, dict) or not isinstance(then, dict):
+            errors.append(f"{name} : 'when' et 'then' (objets) sont requis")
+            continue
+        bad_when = set(when) - CONDITION_KEYS
+        bad_then = set(then) - ACTION_KEYS
+        if bad_when:
+            errors.append(f"{name} : conditions inconnues {sorted(bad_when)}")
+            continue
+        if bad_then:
+            errors.append(
+                f"{name} : actions inconnues {sorted(bad_then)} "
+                "(fermer/déplacer une carte par règle est interdit en v1)"
+            )
+            continue
+        if "column" in when and when["column"] not in KANBAN_COLUMNS:
+            errors.append(f"{name} : colonne inconnue « {when['column']} »")
+            continue
+        if "min_age_days" in when and (
+            not isinstance(when["min_age_days"], int) or when["min_age_days"] < 0
+        ):
+            errors.append(f"{name} : min_age_days doit être un entier ≥ 0")
+            continue
+        if "wip_over" in when and (
+            not isinstance(when["wip_over"], int) or when["wip_over"] < 1
+        ):
+            errors.append(f"{name} : wip_over doit être un entier ≥ 1")
+            continue
+        if "add_label" in then and (
+            not isinstance(then["add_label"], str) or not then["add_label"].strip()
+        ):
+            errors.append(f"{name} : add_label doit être un nom d'étiquette")
+            continue
+        if not then:
+            errors.append(f"{name} : aucune action")
+            continue
+        rules.append({"name": name, "when": when, "then": then})
+    return rules, errors
+
+
+def matching_cards(
+    rule: dict,
+    columns: dict[str, list[dict]],
+    ages: dict[int, dict],
+) -> list[tuple[dict, str]]:
+    """Cards of `columns` (merged board) matched by the rule."""
+    when = rule["when"]
+    targets = [when["column"]] if "column" in when else list(columns)
+    matches: list[tuple[dict, str]] = []
+    for column in targets:
+        cards = columns.get(column, [])
+        if "wip_over" in when and len(cards) <= when["wip_over"]:
+            continue
+        for issue in cards:
+            if "label" in when and when["label"] not in [
+                (lab or {}).get("name") for lab in issue.get("labels") or []
+            ]:
+                continue
+            if "min_age_days" in when:
+                age = ages.get(issue["number"]) or {}
+                if (age.get("days") or 0) < when["min_age_days"]:
+                    continue
+            matches.append((issue, column))
+    return matches

app/templates/_card.html

@@ -19,6 +19,9 @@
                             {% endfor %}
                         </div>
                         {% endif %}
+                        {% if issue._code %}
+                        <div class="card-code">⑂{% if issue._code.branches %} 🌿 {{ issue._code.branches }}{% endif %}{% if issue._code.commits %} · {{ issue._code.commits }} commit{{ 's' if issue._code.commits > 1 }}{% endif %}{% if issue._code.pr %} · PR #{{ issue._code.pr.number }} {{ issue._code.pr.label }}{% endif %}</div>
+                        {% endif %}
                         <div class="card-meta">
                             {% if issue.assignee %}
                             <img src="{{ issue.assignee.avatar_url }}" class="avatar" alt="{{ issue.assignee.login }}">

app/templates/activity.html

@@ -20,10 +20,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill active">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/board.html

@@ -27,6 +27,8 @@
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
             {% if repo_info.html_url %}
@@ -164,6 +166,7 @@
             <span class="notes-hint">Étiquettes de l'issue — cliquez pour ajouter / retirer :</span>
             <div id="detail-label-toggles" class="label-toggles"></div>
         </div>
+        <div id="detail-code" class="detail-code"></div>
         <div id="detail-body" class="detail-body"></div>
         <h3 class="detail-comments-title">💬 Commentaires</h3>
         <div id="detail-comments"></div>

app/templates/briefing.html

@@ -24,6 +24,8 @@
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/capture.html

@@ -17,10 +17,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill active">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/dashboard.html

@@ -20,10 +20,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/digest.html

@@ -17,6 +17,7 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill active">🧠 Digest</a>

app/templates/focus.html

@@ -19,10 +19,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
             <span class="badge">{{ groups|map(attribute='cards')|map('length')|sum }} cartes en cours</span>

app/templates/forecast.html

@@ -17,6 +17,7 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>

app/templates/health.html

@@ -0,0 +1,53 @@
+<!DOCTYPE html>
+<html lang="fr" data-theme="dark">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="csrf-token" content="{{ csrf_token }}">
+    <title>Santé du flux — Kanbante</title>
+    <link rel="stylesheet" href="/static/css/style.css">
+</head>
+<body>
+    <header class="app-header">
+        <a href="/" class="logo">📋 Kanbante</a>
+        <nav class="nav-pills">
+            <a href="/" class="nav-pill">🏠 Projets</a>
+            <a href="/focus" class="nav-pill">🎯 Focus</a>
+            <a href="/today" class="nav-pill">🌅 Aujourd'hui</a>
+            <a href="/activity" class="nav-pill">📰 Activité</a>
+            <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill active">🩺 Santé</a>
+            <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
+        </nav>
+    </header>
+
+    <main class="focus-main">
+        <section class="briefing-card">
+            <h1>🩺 Santé du flux</h1>
+            <p>Les boards montrent l'état ; cette page montre la <strong>santé</strong> : quelle colonne accumule (temps médian passé dans chaque colonne, d'après le journal) et quelles cartes sont devenues des <strong>zombies</strong> (aucune activité depuis le seuil configuré).</p>
+        </section>
+
+        {% for project in projects %}
+        <section class="briefing-card forecast-card">
+            <h2>📂 {{ project.full_name }} <small>({{ project.open_count }} ouverte(s))</small></h2>
+            {% if project.slowest %}
+            <p>🐌 Colonne la plus lente : <strong>{{ project.column_labels[project.slowest.column] }}</strong> — médiane {{ project.slowest.median_days }} j ({{ project.slowest.count }} séjours mesurés)</p>
+            {% else %}
+            <p>🐌 Pas encore assez de séjours mesurés pour nommer un goulot.</p>
+            {% endif %}
+            <p>🧟 Zombies (≥ {{ project.zombie_days }} j sans activité) : <strong>{{ project.zombies|length }}</strong>
+            — <a href="/health/{{ project.full_name }}">voir le détail et agir →</a></p>
+        </section>
+        {% else %}
+        <div class="briefing-card"><p>Aucun projet actif.</p></div>
+        {% endfor %}
+    </main>
+    <footer>
+        <span>Kanbante v{{ version }} · l'hygiène du flux, mesurée sur le journal — pas au feeling</span>
+    </footer>
+    {% include "_palette.html" %}
+    <script src="/static/js/palette.js" defer></script>
+    <script src="/static/js/live.js" defer></script>
+</body>
+</html>

app/templates/health_project.html

@@ -0,0 +1,82 @@
+<!DOCTYPE html>
+<html lang="fr" data-theme="dark">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="csrf-token" content="{{ csrf_token }}">
+    <title>Santé — {{ full_name }} — Kanbante</title>
+    <link rel="stylesheet" href="/static/css/style.css">
+</head>
+<body>
+    <header class="app-header">
+        <a href="/" class="logo">📋 Kanbante</a>
+        <nav class="nav-pills">
+            <a href="/board/{{ full_name }}" class="nav-pill">📋 Board</a>
+            <a href="/health" class="nav-pill active">🩺 Santé</a>
+            <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
+        </nav>
+    </header>
+
+    <main class="focus-main">
+        {% if health is none %}
+        <section class="briefing-card">
+            <h1>🩺 {{ full_name }}</h1>
+            <p>Projet introuvable.</p>
+        </section>
+        {% else %}
+        <section class="briefing-card">
+            <h1>🩺 {{ full_name }}</h1>
+            <h2>⏱️ Temps passé par colonne (journal)</h2>
+            {% if health.dwell %}
+            <table class="health-table">
+                <thead><tr><th>Colonne</th><th>Séjours mesurés</th><th>Médiane</th><th>Moyenne</th></tr></thead>
+                <tbody>
+                {% for row in health.dwell %}
+                <tr{% if health.slowest and row.column == health.slowest.column %} class="health-slowest"{% endif %}>
+                    <td>{{ health.column_labels[row.column] }}{% if health.slowest and row.column == health.slowest.column %} 🐌{% endif %}</td>
+                    <td>{{ row.count }}</td>
+                    <td>{{ row.median_days }} j</td>
+                    <td>{{ row.avg_days }} j</td>
+                </tr>
+                {% endfor %}
+                </tbody>
+            </table>
+            {% if health.slowest %}
+            <p>🐌 <strong>Goulot : {{ health.column_labels[health.slowest.column] }}</strong> — c'est là que les cartes dorment le plus longtemps (médiane {{ health.slowest.median_days }} j).</p>
+            {% endif %}
+            {% else %}
+            <p>Pas encore de séjours mesurables dans le journal de ce projet — il faut des déplacements journalisés pour calculer les temps de colonne.</p>
+            {% endif %}
+        </section>
+
+        <section class="briefing-card">
+            <h2>🧟 Cartes zombies — aucune activité depuis ≥ {{ health.zombie_days }} jours</h2>
+            {% if health.zombies %}
+            <ul class="today-list">
+                {% for z in health.zombies %}
+                <li>
+                    <span>#{{ z.number }} — {{ z.title }} <em>({{ z.column_label }} · inactive depuis {{ z.days_inactive }} j)</em></span>
+                    <span class="zombie-actions">
+                        <button type="button" class="btn-sm" data-zombie="comment" data-repo="{{ full_name }}" data-number="{{ z.number }}" data-column="{{ z.column }}">💬 Toujours pertinent ?</button>
+                        <button type="button" class="btn-sm" data-zombie="backlog" data-repo="{{ full_name }}" data-number="{{ z.number }}" data-column="{{ z.column }}">↩️ Backlog</button>
+                        <button type="button" class="btn-sm" data-zombie="close" data-repo="{{ full_name }}" data-number="{{ z.number }}" data-column="{{ z.column }}">✅ Fermer</button>
+                    </span>
+                </li>
+                {% endfor %}
+            </ul>
+            <p class="notes-hint">« Fermer » déplace la carte en Terminé (l'issue est fermée dans Gitea par la synchro habituelle). « Toujours pertinent ? » poste un commentaire du même texte sur l'issue.</p>
+            {% else %}
+            <p>Aucune carte zombie. Le flux est propre. ✨</p>
+            {% endif %}
+        </section>
+        {% endif %}
+    </main>
+    <footer>
+        <span>Kanbante v{{ version }} · seuil zombie : KANBANTE_ZOMBIE_DAYS</span>
+    </footer>
+    {% include "_palette.html" %}
+    <script src="/static/js/palette.js" defer></script>
+    <script src="/static/js/health.js" defer></script>
+</body>
+</html>

app/templates/my.html

@@ -23,6 +23,8 @@
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/rules.html

@@ -0,0 +1,97 @@
+<!DOCTYPE html>
+<html lang="fr" data-theme="dark">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="csrf-token" content="{{ csrf_token }}">
+    <title>Règles d'automatisation — Kanbante</title>
+    <link rel="stylesheet" href="/static/css/style.css">
+</head>
+<body>
+    <header class="app-header">
+        <a href="/" class="logo">📋 Kanbante</a>
+        <nav class="nav-pills">
+            <a href="/" class="nav-pill">🏠 Projets</a>
+            <a href="/focus" class="nav-pill">🎯 Focus</a>
+            <a href="/today" class="nav-pill">🌅 Aujourd'hui</a>
+            <a href="/activity" class="nav-pill">📰 Activité</a>
+            <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill active">⚙️ Règles</a>
+            <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
+        </nav>
+    </header>
+
+    <main class="focus-main">
+        <section class="briefing-card">
+            <h1>⚙️ Règles d'automatisation</h1>
+            <p>Des réflexes déclaratifs, évalués toutes les 15 minutes par le planificateur (et à la demande ci-dessous). Chaque action est journalisée comme événement <code>rule</code>. <strong>Garde-fou v1 : une règle ne peut ni fermer ni déplacer une carte entre colonnes</strong> — seulement étiqueter, notifier (ntfy) et remonter en tête de colonne.</p>
+            {% if not configured %}
+            <p>Aucune règle configurée. Définis <code>KANBANTE_RULES</code> en JSON, par exemple :</p>
+            <pre class="briefing-text">[{"name": "Relance révision",
+  "when": {"column": "review", "min_age_days": 3},
+  "then": {"notify": true}},
+ {"name": "Urgent qui vieillit",
+  "when": {"column": "in_progress", "min_age_days": 7},
+  "then": {"add_label": "urgent"}}]</pre>
+            <p class="notes-hint">Conditions : <code>column</code>, <code>min_age_days</code> (temps dans la colonne), <code>label</code> (présente), <code>wip_over</code> (colonne au-delà de N cartes). Actions : <code>add_label</code>, <code>notify</code>, <code>move_top</code>.</p>
+            {% endif %}
+            {% for err in errors %}
+            <p class="chip-warn">⚠️ {{ err }}</p>
+            {% endfor %}
+            <p><button type="button" class="btn-save btn-inline" id="rules-run">▶️ Évaluer maintenant</button>
+            <span id="rules-run-result" class="notes-hint"></span></p>
+        </section>
+
+        {% if rules %}
+        <section class="briefing-card">
+            <h2>📜 Règles actives ({{ rules|length }})</h2>
+            <ul class="forecast-milestones">
+                {% for rule in rules %}
+                <li><strong>{{ rule.name }}</strong> — quand
+                    {% for k, v in rule.when.items() %}<code>{{ k }} = {{ v }}</code>{% if not loop.last %}, {% endif %}{% endfor %}
+                    → {% for k, v in rule.then.items() %}<code>{{ k }}{% if v is not boolean %} = {{ v }}{% endif %}</code>{% if not loop.last %}, {% endif %}{% endfor %}</li>
+                {% endfor %}
+            </ul>
+        </section>
+        {% endif %}
+
+        {% if last_run %}
+        <section class="briefing-card">
+            <h2>🕐 Dernière évaluation — {{ last_run.at }}</h2>
+            {% if last_run.actions %}
+            <ul class="forecast-milestones">
+                {% for action in last_run.actions %}
+                <li><strong>{{ action.rule }}</strong> : {{ action.repo }} #{{ action.number }} ({{ action.column }}) — {{ action.did|join(', ') }}</li>
+                {% endfor %}
+            </ul>
+            {% else %}
+            <p>Aucune action déclenchée.</p>
+            {% endif %}
+        </section>
+        {% endif %}
+    </main>
+    <footer>
+        <span>Kanbante v{{ version }} · l'automatisation maison, près des données, jamais destructive</span>
+    </footer>
+    {% include "_palette.html" %}
+    <script src="/static/js/palette.js" defer></script>
+    <script>
+        document.getElementById('rules-run').addEventListener('click', async () => {
+            const out = document.getElementById('rules-run-result');
+            out.textContent = 'Évaluation en cours…';
+            const csrf = document.querySelector('meta[name="csrf-token"]').content;
+            const data = new FormData();
+            data.append('csrf_token', csrf);
+            try {
+                const r = await fetch('/api/rules/run', { method: 'POST', body: data });
+                const body = await r.json();
+                if (!r.ok || !body.ok) throw new Error((body && body.error) || ('HTTP ' + r.status));
+                out.textContent = '✔ ' + body.summary.actions.length + ' action(s) — rechargement…';
+                setTimeout(() => location.reload(), 700);
+            } catch (e) {
+                out.textContent = '❌ ' + e.message;
+            }
+        });
+    </script>
+</body>
+</html>

app/templates/search.html

@@ -23,6 +23,8 @@
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/sprint.html

@@ -16,6 +16,8 @@
             <a href="/board/{{ full_name }}" class="nav-pill">📋 Board</a>
             <a href="/today" class="nav-pill">🌅 Aujourd'hui</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>
     </header>

app/templates/standup.html

@@ -0,0 +1,55 @@
+<!DOCTYPE html>
+<html lang="fr" data-theme="dark">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta name="csrf-token" content="{{ csrf_token }}">
+    <title>Standup — Kanbante</title>
+    <link rel="stylesheet" href="/static/css/style.css">
+</head>
+<body>
+    <header class="app-header">
+        <a href="/" class="logo">📋 Kanbante</a>
+        <nav class="nav-pills">
+            <a href="/" class="nav-pill">🏠 Projets</a>
+            <a href="/focus" class="nav-pill">🎯 Focus</a>
+            <a href="/today" class="nav-pill">🌅 Aujourd'hui</a>
+            <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
+            <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
+        </nav>
+    </header>
+
+    <main class="focus-main">
+        <section class="briefing-card">
+            <h1>🗣️ Standup automatique</h1>
+            <p>Écrit par le journal, pas par la mémoire : fermé/déplacé <strong>hier</strong>, focus <strong>aujourd'hui</strong>, cartes qui vieillissent en QA/Révision en <strong>blocages</strong>.</p>
+            <p>
+                <button type="button" class="btn-save btn-inline" id="standup-copy">📋 Copier le standup</button>
+                {% if include_in_briefing %}
+                <span class="chip-ok">Inclus dans le briefing ntfy du matin ✔</span>
+                {% else %}
+                <span class="notes-hint">Astuce : <code>KANBANTE_BRIEFING_INCLUDE_STANDUP=1</code> l'ajoute au briefing ntfy du matin.</span>
+                {% endif %}
+            </p>
+        </section>
+        <section class="briefing-card">
+            <pre class="briefing-text" id="standup-text">{{ text }}</pre>
+        </section>
+    </main>
+    <footer>
+        <span>Kanbante v{{ version }} · zéro saisie, toujours factuel, daté</span>
+    </footer>
+    {% include "_palette.html" %}
+    <script src="/static/js/palette.js" defer></script>
+    <script>
+        document.getElementById('standup-copy').addEventListener('click', async () => {
+            const text = document.getElementById('standup-text').textContent;
+            try {
+                await navigator.clipboard.writeText(text);
+                document.getElementById('standup-copy').textContent = '✅ Copié !';
+            } catch (e) { alert('Copie impossible : ' + e); }
+        });
+    </script>
+</body>
+</html>

app/templates/today.html

@@ -17,10 +17,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

app/templates/triage.html

@@ -17,10 +17,13 @@
             <a href="/my" class="nav-pill">👤 Mes issues</a>
             <a href="/activity" class="nav-pill">📰 Activité</a>
             <a href="/briefing" class="nav-pill">📊 Briefing</a>
+            <a href="/standup" class="nav-pill">🗣️ Standup</a>
             <a href="/search" class="nav-pill">🔍 Recherche</a>
             <a href="/capture" class="nav-pill">⚡ Capture</a>
             <a href="/digest" class="nav-pill">🧠 Digest</a>
             <a href="/forecast" class="nav-pill">🔮 Prévisions</a>
+            <a href="/rules" class="nav-pill">⚙️ Règles</a>
+            <a href="/health" class="nav-pill">🩺 Santé</a>
             <a href="/wall" class="nav-pill">🖥️ Wallboard</a>
             <button type="button" class="nav-pill palette-trigger" title="Palette de commandes (Ctrl+K)">⌨️ Ctrl K</button>
         </nav>

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "kanbante"
-version = "0.12.0"
+version = "0.14.0"
 description = "Kanban project manager integrated with Gitea"
 requires-python = ">=3.11"
 dependencies = [

static/css/style.css

@@ -1144,3 +1144,23 @@ footer {
 .sprint-render h1 { font-size: 1.5rem; }
 .sprint-render h2 { font-size: 1.15rem; margin-top: 22px; }
 .sprint-render a { color: var(--accent, #58a6ff); }
+
+/* ── Code lié (0.13.0, #1) ── */
+.card-code { font-size: 0.78rem; color: var(--accent, #58a6ff); margin-top: 5px; }
+.detail-code { margin: 10px 0; }
+.code-line { padding: 3px 0; font-size: 0.9rem; color: var(--text-2, #b6c2d2); }
+.code-line a { color: var(--accent, #58a6ff); text-decoration: none; }
+.code-line code { background: var(--surface-3, #1d2942); border-radius: 4px; padding: 0 5px; }
+
+/* ── Branche depuis la carte (0.14.0, #3) ── */
+.branch-input {
+    background: var(--surface-3, #1d2942); color: var(--text-1);
+    border: 1px solid var(--border, #22304a); border-radius: 6px;
+    padding: 3px 8px; font-family: monospace; font-size: 0.85rem;
+}
+
+/* ── Santé du flux (0.14.0, #9) ── */
+.health-table { width: 100%; border-collapse: collapse; margin: 10px 0; }
+.health-table th, .health-table td { text-align: left; padding: 6px 10px; border-bottom: 1px solid var(--border, #22304a); }
+.health-slowest td { color: var(--warn, #e8a33d); font-weight: 600; }
+.zombie-actions { display: flex; gap: 6px; flex-shrink: 0; }

static/js/board.js

@@ -369,12 +369,68 @@ document.addEventListener('DOMContentLoaded', () => {
             const data = await r.json().catch(() => ({}));
             if (!r.ok || !data.ok) throw new Error(data.error || ('HTTP ' + r.status));
             fillDetail(data.issue, data.comments);
+            loadCodeLinks(repoFull, number);
         } catch (err) {
             document.getElementById('detail-title').textContent = 'Erreur de chargement';
             showToast('❌ Détail indisponible : ' + err.message, true);
         }
     }
 
+
+    async function loadCodeLinks(repoFull, number) {
+        const box = document.getElementById('detail-code');
+        if (!box) return;
+        box.innerHTML = '';
+        const [owner, repo] = repoFull.split('/', 2);
+        try {
+            const r = await fetch(`/api/issues/${owner}/${repo}/${number}/code`);
+            const data = await r.json().catch(() => ({}));
+            if (!r.ok || !data.ok) return;
+            const parts = [];
+            if ((data.branches || []).length) {
+                parts.push('🌿 Branches : ' + data.branches.map(b => `<code>${b}</code>`).join(', '));
+            }
+            for (const pr of data.pulls || []) {
+                const state = pr.merged ? 'fusionnée' : (pr.state === 'open' ? 'ouverte' : 'fermée');
+                parts.push(`🔀 <a href="${pr.html_url}" target="_blank" rel="noopener">PR #${pr.number}</a> ${pr.title} — ${state}`);
+            }
+            for (const c of (data.commits || []).slice(0, 8)) {
+                parts.push(`⑂ <a href="${c.html_url}" target="_blank" rel="noopener"><code>${c.sha}</code></a> ${c.message}${c.date ? ' · ' + c.date : ''}`);
+            }
+            const hasBranch = (data.branches || []).length > 0;
+            if (!hasBranch && data.suggested_branch) {
+                parts.push(`🌿 <input id="branch-name" class="branch-input" value="${data.suggested_branch}" size="36" spellcheck="false"> <button type="button" class="btn-sm" id="branch-create">Créer la branche</button>`);
+            }
+            box.innerHTML = '<h3 class="detail-comments-title">🧬 Code lié</h3>' + (
+                parts.length
+                    ? parts.map(p => `<div class="code-line">${p}</div>`).join('')
+                    : '<div class="code-line">Aucun élément lié pour l\'instant.</div>'
+            );
+            const createBtn = document.getElementById('branch-create');
+            if (createBtn) {
+                createBtn.addEventListener('click', async () => {
+                    const name = (document.getElementById('branch-name') || {}).value || '';
+                    const form = new FormData();
+                    form.append('name', name);
+                    form.append('csrf_token', csrfToken);
+                    createBtn.disabled = true;
+                    try {
+                        const r2 = await fetch(`/api/issues/${owner}/${repo}/${number}/branch`, { method: 'POST', body: form });
+                        const body = await r2.json().catch(() => ({}));
+                        if (!r2.ok || !body.ok) throw new Error(body.error || ('HTTP ' + r2.status));
+                        showToast(body.exists
+                            ? `🌿 La branche ${body.branch} existait déjà`
+                            : `🌿 Branche ${body.branch} créée depuis ${body.from} — carte en « En cours »`);
+                        loadCodeLinks(repoFull, number);
+                    } catch (err) {
+                        createBtn.disabled = false;
+                        showToast('❌ Branche non créée : ' + err.message, true);
+                    }
+                });
+            }
+        } catch (err) { /* le code est un bonus, jamais bloquant */ }
+    }
+
     function fillDetail(issue, comments) {
         document.getElementById('detail-title').textContent = issue.title;
         const stateChip = document.getElementById('detail-state');

static/js/health.js

@@ -0,0 +1,45 @@
+/**
+ * Kanbante — Flow health (issue #9): quick actions on zombie cards.
+ * Close/backlog reuse /api/move; the nudge reuses the comments API.
+ */
+(function () {
+    var csrf = (document.querySelector('meta[name="csrf-token"]') || {}).content || '';
+
+    function post(url, fields) {
+        var data = new FormData();
+        Object.keys(fields).forEach(function (k) { data.append(k, fields[k]); });
+        data.append('csrf_token', csrf);
+        return fetch(url, { method: 'POST', body: data }).then(function (r) {
+            return r.json().catch(function () { return {}; }).then(function (body) {
+                if (!r.ok || body.ok === false) throw new Error(body.error || ('HTTP ' + r.status));
+                return body;
+            });
+        });
+    }
+
+    document.addEventListener('click', function (e) {
+        var btn = e.target.closest('[data-zombie]');
+        if (!btn) return;
+        var repo = btn.getAttribute('data-repo');
+        var number = btn.getAttribute('data-number');
+        var column = btn.getAttribute('data-column');
+        var action = btn.getAttribute('data-zombie');
+        var parts = repo.split('/');
+        btn.disabled = true;
+        var done = function () { location.reload(); };
+        var fail = function (err) { btn.disabled = false; alert(err.message); };
+        if (action === 'comment') {
+            post('/api/issues/' + parts[0] + '/' + parts[1] + '/' + number + '/comments', {
+                body: '🧟 Cette carte est inactive depuis un moment — toujours pertinent ?'
+            }).then(done).catch(fail);
+        } else {
+            post('/api/move', {
+                repo_full_name: repo,
+                issue_number: number,
+                from_column: column,
+                to_column: action === 'close' ? 'done' : 'backlog',
+                to_order: number
+            }).then(done).catch(fail);
+        }
+    });
+})();

static/js/palette.js

@@ -15,6 +15,9 @@
         { icon: '🎯', label: 'Focus — en cours, QA, révision', href: '/focus' },
         { icon: '🌅', label: "Focus du jour — les 3 cartes d'aujourd'hui", href: '/today' },
         { icon: '🔮', label: 'Prévisions — on finit quand ?', href: '/forecast' },
+        { icon: '🗣️', label: 'Standup automatique — hier, aujourd\'hui, blocages', href: '/standup' },
+        { icon: '⚙️', label: 'Règles d\'automatisation', href: '/rules' },
+        { icon: '🩺', label: 'Santé du flux — goulots et zombies', href: '/health' },
         { icon: '👤', label: 'Mes issues', href: '/my' },
         { icon: '📰', label: 'Activité — journal des événements', href: '/activity' },
         { icon: '📊', label: 'Briefing quotidien', href: '/briefing' },

tests/conftest.py

@@ -38,6 +38,7 @@ def _repo(name: str, updated: datetime, archived: bool = False) -> dict:
         "owner": {"login": "Projets"},
         "archived": archived,
         "html_url": f"http://gitea.test/Projets/{name}",
+        "default_branch": "main",
     }
 
 
@@ -72,6 +73,7 @@ class FakeGitea:
             _repo("vieux", now - timedelta(days=800)),
             _repo("archive", now - timedelta(days=1), archived=True),
         ]
+        self.branches = ["main", "feature/1-tache-un", "issue-5-focus"]
         self.issues = {
             "Projets/demo": [
                 _issue(1, "Tâche un"),
@@ -223,6 +225,51 @@ class FakeGitea:
         for label in removed:
             self.label_ops.append(("remove", number, label["name"]))
 
+    async def list_branches(self, owner, repo):
+        return [{"name": n} for n in self.branches]
+
+    async def create_branch(self, owner, repo, new_branch, old_branch):
+        if new_branch in self.branches:
+            raise RuntimeError("branch exists")
+        self.branches.append(new_branch)
+        return {"name": new_branch}
+
+    async def list_pulls(self, owner, repo, state="all"):
+        return [
+            {
+                "number": 16, "title": "Corrige la tâche un",
+                "body": "Fixes #1", "state": "open", "merged": False,
+                "html_url": "http://gitea.test/pr/16",
+                "head": {"ref": "feature/1-tache-un"},
+            },
+            {
+                "number": 17, "title": "Focus", "body": "",
+                "state": "closed", "merged": True,
+                "html_url": "http://gitea.test/pr/17",
+                "head": {"ref": "issue-5-focus"},
+            },
+        ]
+
+    async def list_commits(self, owner, repo, limit=75):
+        return [
+            {
+                "sha": "abcdef1234567890",
+                "html_url": "http://gitea.test/c/abcdef1",
+                "commit": {
+                    "message": "Début de la tâche #1\n\nDétails",
+                    "author": {"date": "2026-10-10T10:00:00Z"},
+                },
+            },
+            {
+                "sha": "1234567abcdef",
+                "html_url": "http://gitea.test/c/1234567",
+                "commit": {
+                    "message": "Commit sans rapport",
+                    "author": {"date": "2026-10-09T10:00:00Z"},
+                },
+            },
+        ]
+
     async def get_milestones(self, owner, repo, state="open"):
         return [
             {

tests/test_palier10.py

@@ -0,0 +1,202 @@
+"""Palier 10 (0.13.0): code lié (#1), PR fusionnée (#2),
+standup automatique (#6), règles d'automatisation (#8)."""
+
+import json
+from datetime import datetime, timedelta
+
+from app import code_links as cl
+from app import models
+from app import rules as rules_mod
+from tests.conftest import csrf_from
+
+
+# ── #1 Code lié : fonctions pures ─────────────────────────────────
+
+
+def test_extract_refs_and_branch_numbers():
+    assert cl.extract_issue_refs("Fixes #12 et rapport #3, pas #x") == {12, 3}
+    assert cl.extract_issue_refs("a#b #12") == {12}
+    assert cl.extract_issue_refs(None) == set()
+    assert cl.branch_issue_number("feature/12-login") == 12
+    assert cl.branch_issue_number("issue-7") == 7
+    assert cl.branch_issue_number("42") == 42
+    assert cl.branch_issue_number("release-2026") == 2026
+    assert cl.branch_issue_number("main") is None
+    assert cl.branch_issue_number("hotfix/no-number") is None
+
+
+def test_code_endpoint(client, fake_gitea):
+    r = client.get("/api/issues/Projets/demo/1/code")
+    assert r.status_code == 200
+    data = r.json()
+    assert data["branches"] == ["feature/1-tache-un"]
+    assert [p["number"] for p in data["pulls"]] == [16]
+    assert [c["sha"] for c in data["commits"]] == ["abcdef1"]
+    assert data["summary"]["pr"]["label"] == "ouverte"
+    board = client.get("/board/Projets/demo")
+    assert "PR #16 ouverte" in board.text
+    assert "1 commit" in board.text
+
+
+# ── #2 PR fusionnée → carte Terminé ───────────────────────────────
+
+
+def _pr_payload(merged=True, title="Corrige tout", body="Fixes #1",
+                ref="feature/1-tache-un"):
+    return {
+        "action": "closed",
+        "repository": {"full_name": "Projets/demo"},
+        "pull_request": {
+            "number": 16, "title": title, "body": body,
+            "merged": merged, "head": {"ref": ref},
+        },
+    }
+
+
+def _post_webhook(client, payload, event="pull_request"):
+    return client.post(
+        "/webhooks/gitea", json=payload, headers={"X-Gitea-Event": event}
+    )
+
+
+def test_pr_merged_moves_card_and_closes_issue(client, fake_gitea):
+    token = csrf_from(client)
+    client.post("/api/move", data={
+        "repo_full_name": "Projets/demo", "issue_number": 1,
+        "from_column": "backlog", "to_column": "in_progress",
+        "to_order": "1", "csrf_token": token,
+    })
+    r = _post_webhook(client, _pr_payload())
+    assert r.status_code == 200
+    assert r.json()["handled"] == "pr-merged:#1:closed"
+    assert ("Projets", "demo", 1, "closed") in fake_gitea.state_changes
+    board = models.get_board_state("Projets/demo")
+    assert 1 in [c["issue_number"] for c in board["done"]]
+    events = models.get_events(repo_full_name="Projets/demo")
+    assert any(
+        e["event_type"] == "closed" and e["source"] == "webhook"
+        for e in events
+    )
+
+
+def test_pr_merged_by_branch_only_and_idempotent(client, fake_gitea):
+    payload = _pr_payload(title="Sans référence", body="", ref="issue-5-focus")
+    r = _post_webhook(client, payload)
+    assert "#5:closed" in r.json()["handled"]
+    r2 = _post_webhook(client, payload)  # echo: no double journal entry
+    closed_events = [
+        e for e in models.get_events(repo_full_name="Projets/demo")
+        if e["event_type"] == "closed" and e["issue_number"] == 5
+    ]
+    assert len(closed_events) == 1
+    assert r2.json()["handled"] in ("pr-merged:#5:noop", "pr-merged:#5:closed")
+
+
+def test_pr_not_merged_ignored(client, fake_gitea):
+    r = _post_webhook(client, _pr_payload(merged=False))
+    assert r.json()["handled"] == "ignored"
+    assert models.get_events(repo_full_name="Projets/demo") == []
+
+
+# ── #6 Standup ────────────────────────────────────────────────────
+
+
+def test_standup_from_journal(client, fake_gitea):
+    yesterday = (datetime.now() - timedelta(days=1)).strftime("%Y-%m-%d %H:%M:%S")
+    models.log_event("Projets/demo", 3, "closed", to_column="done")
+    with models.get_db() as conn:
+        conn.execute(
+            "UPDATE board_events SET created_at = ? WHERE issue_number = 3",
+            (yesterday,),
+        )
+    r = client.get("/api/standup")
+    assert r.status_code == 200
+    text = r.json()["text"]
+    assert "Standup" in text
+    assert "1 fermée(s)" in text
+    assert "Ancienne tâche" in text
+    page = client.get("/standup")
+    assert page.status_code == 200
+    assert "Copier le standup" in page.text
+
+
+# ── #8 Règles ─────────────────────────────────────────────────────
+
+
+def test_parse_rules_validation():
+    rules, errors = rules_mod.parse_rules(
+        '[{"name": "ok", "when": {"column": "review"}, "then": {"notify": true}}]'
+    )
+    assert errors == [] and rules[0]["name"] == "ok"
+    _r, errors = rules_mod.parse_rules("{pas json")
+    assert errors and "JSON invalide" in errors[0]
+    _r, errors = rules_mod.parse_rules(
+        '[{"when": {"column": "review"}, "then": {"close_issue": true}}]'
+    )
+    assert errors and "interdit" in errors[0]
+    _r, errors = rules_mod.parse_rules(
+        '[{"when": {"column": "nope"}, "then": {"notify": true}}]'
+    )
+    assert errors and "colonne inconnue" in errors[0]
+
+
+def test_matching_cards_conditions():
+    columns = {
+        "review": [
+            {"number": 1, "labels": [{"name": "bloqué"}]},
+            {"number": 2, "labels": []},
+        ],
+        "in_progress": [{"number": 3, "labels": []}],
+    }
+    ages = {1: {"days": 5}, 2: {"days": 1}, 3: {"days": 9}}
+    rule = {"name": "r", "when": {"column": "review", "min_age_days": 3},
+            "then": {"notify": True}}
+    assert [i["number"] for i, _ in rules_mod.matching_cards(rule, columns, ages)] == [1]
+    rule2 = {"name": "r2", "when": {"column": "review", "label": "bloqué"},
+             "then": {"notify": True}}
+    assert [i["number"] for i, _ in rules_mod.matching_cards(rule2, columns, ages)] == [1]
+    rule3 = {"name": "r3", "when": {"column": "review", "wip_over": 1},
+             "then": {"notify": True}}
+    assert len(rules_mod.matching_cards(rule3, columns, ages)) == 2
+    rule4 = {"name": "r4", "when": {"column": "in_progress", "wip_over": 3},
+             "then": {"notify": True}}
+    assert rules_mod.matching_cards(rule4, columns, ages) == []
+
+
+def test_rules_run_end_to_end(client, fake_gitea, monkeypatch):
+    monkeypatch.setenv(
+        "KANBANTE_RULES",
+        json.dumps([{
+            "name": "Marque le focus",
+            "when": {"column": "in_progress"},
+            "then": {"add_label": "urgent"},
+        }]),
+    )
+    token = csrf_from(client)
+    client.post("/api/move", data={
+        "repo_full_name": "Projets/demo", "issue_number": 5,
+        "from_column": "backlog", "to_column": "in_progress",
+        "to_order": "5", "csrf_token": token,
+    })
+    r = client.post("/api/rules/run", data={"csrf_token": token})
+    assert r.status_code == 200
+    actions = r.json()["summary"]["actions"]
+    assert len(actions) == 1
+    assert actions[0]["number"] == 5
+    assert "urgent" in actions[0]["did"][0]
+    detail = client.get("/api/issues/Projets/demo/5")
+    assert "urgent" in [l["name"] for l in detail.json()["issue"]["labels"]]
+    events = models.get_events(repo_full_name="Projets/demo")
+    assert any(e["event_type"] == "rule" for e in events)
+    # Second run: label already present -> no new action.
+    r2 = client.post("/api/rules/run", data={"csrf_token": token})
+    assert r2.json()["summary"]["actions"] == []
+    page = client.get("/rules")
+    assert page.status_code == 200
+    assert "Marque le focus" in page.text
+
+
+def test_rules_page_unconfigured(client, fake_gitea):
+    page = client.get("/rules")
+    assert page.status_code == 200
+    assert "KANBANTE_RULES" in page.text

tests/test_palier11.py

@@ -0,0 +1,159 @@
+"""Palier 11 (0.14.0): branche depuis la carte (#3), santé du flux (#9)."""
+
+from datetime import datetime, timedelta
+
+from app import code_links as cl
+from app import flow
+from app import models
+from tests.conftest import csrf_from
+
+
+# ── #3 Branche depuis la carte ────────────────────────────────────
+
+
+def test_slugify_and_branch_name():
+    assert cl.slugify_title("Créer la branche depuis la carte") == \
+        "creer-la-branche-depuis-la-carte"
+    assert cl.slugify_title("Fix: l'été indien (urgent!)") == \
+        "fix-l-ete-indien-urgent"
+    assert cl.slugify_title("Un titre vraiment très long qui dépasse" * 3)
+    assert len(cl.slugify_title("x" * 100)) == 40
+    assert cl.slugify_title("!!!") == "issue"
+    assert cl.branch_name_for(12, "Capture éclair") == "issue-12-capture-eclair"
+    # La convention est reconnue par l'appariement (#1/#2).
+    assert cl.branch_issue_number(cl.branch_name_for(12, "Capture")) == 12
+
+
+def test_create_branch_endpoint(client, fake_gitea):
+    token = csrf_from(client)
+    r = client.post("/api/issues/Projets/demo/5/branch",
+                    data={"csrf_token": token})
+    assert r.status_code == 200
+    data = r.json()
+    assert data["branch"] == "issue-5-tache-focus"
+    assert data["from"] == "main"
+    assert data["moved"] is True
+    assert "issue-5-tache-focus" in fake_gitea.branches
+    board = models.get_board_state("Projets/demo")
+    assert 5 in [c["issue_number"] for c in board["in_progress"]]
+    events = models.get_events(repo_full_name="Projets/demo")
+    assert any(
+        e["event_type"] == "moved" and e["source"] == "branch"
+        for e in events
+    )
+    # Deuxième appel : la branche existe déjà, pas de doublon.
+    r2 = client.post("/api/issues/Projets/demo/5/branch",
+                     data={"csrf_token": token})
+    assert r2.json()["exists"] is True
+
+
+def test_create_branch_custom_name_and_validation(client, fake_gitea):
+    token = csrf_from(client)
+    r = client.post("/api/issues/Projets/demo/1/branch",
+                    data={"csrf_token": token, "name": "feature/super-truc"})
+    assert r.status_code == 200
+    assert r.json()["branch"] == "feature/super-truc"
+    r = client.post("/api/issues/Projets/demo/1/branch",
+                    data={"csrf_token": token, "name": "mauvais nom.."})
+    assert r.status_code == 400
+
+
+def test_code_endpoint_suggests_branch(client, fake_gitea):
+    r = client.get("/api/issues/Projets/demo/3/code")
+    assert r.json()["suggested_branch"] == "issue-3-ancienne-tache"
+
+
+# ── #9 Santé du flux : fonctions pures ────────────────────────────
+
+
+def _ev(day_offset: float, kind: str, frm=None, to=None, number=1):
+    at = (datetime(2026, 9, 1) + timedelta(days=day_offset)).strftime(
+        "%Y-%m-%d %H:%M:%S"
+    )
+    return {
+        "repo_full_name": "Projets/demo", "issue_number": number,
+        "event_type": kind, "from_column": frm, "to_column": to,
+        "created_at": at,
+    }
+
+
+def test_column_dwell_reconstruction():
+    events = [
+        _ev(0, "created", to="backlog"),
+        _ev(4, "moved", frm="backlog", to="in_progress"),
+        _ev(10, "closed", frm="in_progress", to="done"),
+        _ev(1, "created", to="backlog", number=2),
+        _ev(3, "moved", frm="backlog", to="review", number=2),
+    ]
+    dwell = flow.column_dwell(events)
+    assert dwell["backlog"] == [4.0, 2.0]
+    assert dwell["in_progress"] == [6.0]
+    summary = flow.summarize_dwell(dwell)
+    by_col = {row["column"]: row for row in summary}
+    assert by_col["backlog"]["median_days"] == 3.0
+    assert by_col["backlog"]["count"] == 2
+    # backlog a 2 échantillons (médiane 3 j) : c'est le seul goulot
+    # nommable à ce stade (in_progress n'a qu'un séjour mesuré).
+    slowest = flow.slowest_column(summary)
+    assert slowest["column"] == "backlog"
+    events.append(_ev(20, "moved", frm="review", to="done", number=2))
+    events += [
+        _ev(0, "created", to="backlog", number=3),
+        _ev(2, "moved", frm="backlog", to="review", number=3),
+        _ev(19, "moved", frm="review", to="done", number=3),
+    ]
+    dwell = flow.column_dwell(events)
+    summary = flow.summarize_dwell(dwell)
+    slowest = flow.slowest_column(summary)
+    assert slowest["column"] == "review"
+    assert slowest["median_days"] == 17.0
+
+
+def test_last_activity():
+    events = [_ev(0, "created", to="backlog"), _ev(5, "moved", to="todo")]
+    latest = flow.last_activity(events)
+    assert latest[("Projets/demo", 1)] == datetime(2026, 9, 6)
+
+
+# ── #9 Pages santé ────────────────────────────────────────────────
+
+
+def _seed_stay(number: int, days_ago_start: int, days_ago_end: int,
+               frm="backlog", to="review"):
+    models.log_event("Projets/demo", number, "created", to_column="backlog")
+    models.log_event("Projets/demo", number, "moved",
+                     from_column=frm, to_column=to)
+    now = datetime.now()
+    with models.get_db() as conn:
+        conn.execute(
+            "UPDATE board_events SET created_at = ? "
+            "WHERE issue_number = ? AND event_type = 'created'",
+            ((now - timedelta(days=days_ago_start)).strftime("%Y-%m-%d %H:%M:%S"), number),
+        )
+        conn.execute(
+            "UPDATE board_events SET created_at = ? "
+            "WHERE issue_number = ? AND event_type = 'moved'",
+            ((now - timedelta(days=days_ago_end)).strftime("%Y-%m-%d %H:%M:%S"), number),
+        )
+
+
+def test_health_pages_and_bottleneck(client, fake_gitea):
+    _seed_stay(1, 40, 10)   # 30 j en backlog
+    _seed_stay(5, 35, 5)    # 30 j en backlog aussi
+    page = client.get("/health/Projets/demo")
+    assert page.status_code == 200
+    assert "backlog" in page.text.lower()
+    index = client.get("/health")
+    assert index.status_code == 200
+    assert "Projets/demo" in index.text
+
+
+def test_health_zombies_threshold(client, fake_gitea, monkeypatch):
+    # Les issues du faux datent du 2026-09-02 : ~39 j d'inactivité,
+    # donc zombies au seuil par défaut de 30 j.
+    page = client.get("/health/Projets/demo")
+    assert "Tâche un" in page.text
+    assert 'data-zombie="close"' in page.text
+    monkeypatch.setenv("KANBANTE_ZOMBIE_DAYS", "10000")
+    page = client.get("/health/Projets/demo")
+    assert "Aucune carte zombie" in page.text