Migration modular monolith DDD (0.1 → 3.3) (#17)

## Migration modular monolith DDD — Lesstime (0.1 → 3.3) Cette MR regroupe l'intégralité de la refonte en monolithe modulaire (strangler progressif, additif). Elle remplace les MR stackées de Phase 1 (#12–#16), désormais incluses ici. **Ne pas merger avant validation fonctionnelle** : branche destinée à être testée telle quelle. ### Périmètre — 9 modules sous `src/Module/` | Phase | Module | Contenu | |------|--------|---------| | 0.1 | (socle) | infrastructure modulaire, `ModuleInterface`, mapping Doctrine par module | | 0.2 | (socle front) | auto-détection des layers Nuxt sous `frontend/modules/*` | | 1.1 | **Core** | Identité (User/Auth), Notifications, Notifier | | 1.2 | Core | RBAC fin (permissions `module.resource.action`, sidebar gated) | | 1.3 | Core | Audit log (`#[Auditable]`, listener, provider DBAL) | | 2.1 | **TimeTracking** | TimeEntry + MCP + export | | 2.2 | **ProjectManagement** | cœur métier Projets/Tâches + 38 MCP tools | | 2.3 | **Absence** | demandes, soldes, policies, justificatifs | | 2.4 | **Directory** | Clients (migrés) + **Prospects** (nouveau, conversion → Client) | | 2.5 | **Mail** | intégration IMAP OVH + liens tâches | | 2.6 | **Integration** | Gitea / BookStack / Zimbra / Share | | 3.1 | **Reporting** | rapports transverses (DBAL read-only, 0 import inter-module) | | 3.2 | **ClientPortal** | portail client (ROLE_CLIENT cloisonné, tickets, notifications) | | 3.3 | (finition) | nettoyage legacy — `src/Entity` vide, app 100% modulaire | ### Architecture - Découplage inter-modules par **contrats** (`UserInterface`, `ProjectInterface`, `TaskInterface`, `TaskTagInterface`, `ClientInterface`, `ClientTicketInterface`, `LeaveProfileInterface`) + `resolve_target_entities` 100% modulaire (aucune cible legacy). - Repositories : interface `Domain/Repository` + implémentation `Infrastructure/Doctrine`, bindées. - Reporting en DBAL read-only pur (aucun import d'entité d'un autre module). - Chaque migration de module : déplacement à comportement préservé (API publique et noms d'outils MCP inchangés), migrations **additives** uniquement (zéro destructif). ### Sécurité - ROLE_CLIENT cloisonné : un utilisateur client n'accède qu'à `/portal` et à ses propres tickets (filtrés par `allowedProjects`), interdit sur toute l'API interne. - Correctif : interdiction pour un client de créer un lien vers le partage SMB (upload uniquement). ### QA non-régression (branche reconstruite from scratch) - Migrations from scratch + fixtures : OK. - Compilation dev + prod : OK. - **180 tests PHPUnit verts**, php-cs-fixer clean, ~96 routes, **66 outils MCP** tous sous `App\Module\*`. - Smoke test runtime multi-rôles (admin / ROLE_USER / ROLE_CLIENT) : 44 vérifications HTTP, **0 écart**, cloisonnement client étanche. - Build Nuxt OK, 9 layers, 0 import legacy résiduel. ### Points à arbitrer (hors périmètre de cette migration) - Durcissement MCP/IDOR pré-existant (`userId` explicite sans scoping sur certains tools TimeTracking/Absence/TaskDocument) — ticket dédié recommandé. - Validation fonctionnelle de **Prospect** et **ClientPortal** (conçus depuis les specs disque). - **Harmonisation visuelle Malio finale** (3.3) — finition esthétique inter-modules laissée au PO. --- ## ⚠️ Déploiement / migration des données — à ne pas oublier ### 1. Resynchroniser les séquences PostgreSQL après tout import/restore de dump Si la prod (ou tout environnement) est **montée depuis un dump** (`pg_restore` / `COPY`), les lignes sont chargées avec leurs `id` explicites **sans avancer les séquences** → au premier `INSERT` : `duplicate key value violates unique constraint "..._pkey"` (constaté en local sur `notification`, `task`, `time_entry`…). À lancer **juste après chaque restore/import** : ```sql DO $$ DECLARE r RECORD; maxid BIGINT; seq TEXT; BEGIN FOR r IN SELECT table_name, column_name FROM information_schema.columns WHERE table_schema='public' LOOP seq := pg_get_serial_sequence(quote_ident(r.table_name), r.column_name); IF seq IS NOT NULL THEN EXECUTE format('SELECT COALESCE(MAX(%I),0) FROM %I', r.column_name, r.table_name) INTO maxid; PERFORM setval(seq, GREATEST(maxid,1), maxid > 0); END IF; END LOOP; END $$; ``` > Ne concerne **pas** une prod qui tourne déjà (séquences avancées organiquement) — uniquement le cas restore/import. Idempotent, sans risque. ### 2. Fix dénormalisation des collections typées-contrat (code, inclus dans la branche) Les relations **to-many** typées par une interface `Shared\Domain\Contract\*` (`TimeEntry::tags` → `TaskTagInterface`, `Task::collaborators` → `UserInterface`) étaient **indénormalisables par API Platform** (mono-valué OK via IRI, collection KO) → **tout POST/PATCH portant une telle collection renvoyait 400/500**. Corrigé par un dénormaliseur générique `ContractRelationDenormalizer` (réutilise `resolve_target_entities`, zéro couplage par-entité) + test fonctionnel de non-régression. --------- Co-authored-by: Matthieu <contact@malio.fr> Reviewed-on: #17
2026-06-23 13:50:42 +00:00
parent d0a49322e1
commit 8313c759c6
622 changed files with 24802 additions and 2864 deletions
@@ -0,0 +1,33 @@
+import type { Client } from '~/modules/directory/services/dto/client'
+import type { Workflow } from './workflow'
+
+export type Project = {
+    id: number
+    '@id'?: string
+    code: string
+    name: string
+    description: string | null
+    color: string
+    client: Client | null
+    workflow: Workflow
+    giteaOwner: string | null
+    giteaRepo: string | null
+    bookstackShelfId: number | null
+    bookstackShelfName: string | null
+    archived: boolean
+    taskCount: number
+}
+
+export type ProjectWrite = {
+    code?: string
+    name: string
+    description: string | null
+    color: string
+    client: string | null  // IRI : "/api/clients/1" ou null
+    workflow?: string      // IRI : "/api/workflows/1"
+    giteaOwner?: string | null
+    giteaRepo?: string | null
+    bookstackShelfId?: number | null
+    bookstackShelfName?: string | null
+    archived?: boolean
+}
@@ -0,0 +1,14 @@
+import type { UserData } from '~/services/dto/user-data'
+
+export type TaskDocument = {
+    '@id'?: string
+    id: number
+    task: string
+    originalName: string
+    fileName?: string | null
+    sharePath?: string | null
+    mimeType: string
+    size: number
+    createdAt: string
+    uploadedBy: UserData | null
+}
@@ -0,0 +1,9 @@
+export type TaskEffort = {
+    id: number
+    '@id'?: string
+    label: string
+}
+
+export type TaskEffortWrite = {
+    label: string
+}
@@ -0,0 +1,19 @@
+import type { Project } from './project'
+
+export type TaskGroup = {
+    id: number
+    '@id'?: string
+    title: string
+    description: string | null
+    color: string
+    project: Project | null
+    archived: boolean
+}
+
+export type TaskGroupWrite = {
+    title: string
+    description: string | null
+    color: string
+    project: string
+    archived?: boolean
+}
@@ -0,0 +1,11 @@
+export type TaskPriority = {
+    id: number
+    '@id'?: string
+    label: string
+    color: string
+}
+
+export type TaskPriorityWrite = {
+    label: string
+    color: string
+}
@@ -0,0 +1,22 @@
+export type TaskRecurrence = {
+    id: number
+    '@id'?: string
+    type: 'daily' | 'weekly' | 'monthly' | 'yearly'
+    interval: number
+    daysOfWeek: string[] | null
+    dayOfMonth: number | null
+    weekOfMonth: number | null
+    endDate: string | null
+    maxOccurrences: number | null
+    occurrenceCount: number
+}
+
+export type TaskRecurrenceWrite = {
+    type: 'daily' | 'weekly' | 'monthly' | 'yearly'
+    interval: number
+    daysOfWeek?: string[] | null
+    dayOfMonth?: number | null
+    weekOfMonth?: number | null
+    endDate?: string | null
+    maxOccurrences?: number | null
+}
@@ -0,0 +1,21 @@
+import type { StatusCategory } from './workflow'
+
+export type TaskStatus = {
+    id: number
+    '@id'?: string
+    label: string
+    color: string
+    position: number
+    isFinal: boolean
+    category: StatusCategory
+    workflow?: { '@id': string, id: number } | string
+}
+
+export type TaskStatusWrite = {
+    label: string
+    color: string
+    position: number
+    isFinal: boolean
+    category: StatusCategory
+    workflow?: string
+}
@@ -0,0 +1,11 @@
+export type TaskTag = {
+    id: number
+    '@id'?: string
+    label: string
+    color: string
+}
+
+export type TaskTagWrite = {
+    label: string
+    color: string
+}
@@ -0,0 +1,62 @@
+import type { TaskStatus } from './task-status'
+import type { TaskEffort } from './task-effort'
+import type { TaskPriority } from './task-priority'
+import type { TaskTag } from './task-tag'
+import type { TaskGroup } from './task-group'
+import type { UserData } from '~/services/dto/user-data'
+import type { Project } from './project'
+import type { TaskDocument } from './task-document'
+
+export type Task = {
+    id: number
+    '@id'?: string
+    number: number
+    title: string
+    description: string | null
+    status: TaskStatus | null
+    effort: TaskEffort | null
+    priority: TaskPriority | null
+    assignee: UserData | null
+    collaborators: UserData[]
+    group: TaskGroup | null
+    project: Project | null
+    tags: TaskTag[]
+    documents: TaskDocument[]
+    archived: boolean
+    scheduledStart: string | null
+    scheduledEnd: string | null
+    deadline: string | null
+    syncToCalendar: boolean
+    calendarSyncError: string | null
+    recurrence: {
+        id: number
+        '@id'?: string
+        type: 'daily' | 'weekly' | 'monthly' | 'yearly'
+        interval: number
+        daysOfWeek: string[] | null
+        dayOfMonth: number | null
+        weekOfMonth: number | null
+        endDate: string | null
+        maxOccurrences: number | null
+        occurrenceCount: number
+    } | null
+}
+
+export type TaskWrite = {
+    title: string
+    description: string | null
+    status: string | null
+    effort: string | null
+    priority: string | null
+    assignee: string | null
+    collaborators?: string[]
+    group: string | null
+    project: string
+    tags: string[]
+    archived?: boolean
+    scheduledStart?: string | null
+    scheduledEnd?: string | null
+    deadline?: string | null
+    syncToCalendar?: boolean
+    recurrence?: string | null
+}
@@ -0,0 +1,46 @@
+import type { TaskStatus, TaskStatusWrite } from './task-status'
+
+export type StatusCategory = 'todo' | 'in_progress' | 'blocked' | 'review' | 'done'
+
+export const STATUS_CATEGORY_LABEL: Record<StatusCategory, string> = {
+    todo: 'À faire',
+    in_progress: 'En cours',
+    blocked: 'Bloqué',
+    review: 'En validation',
+    done: 'Terminé',
+}
+
+/** Palette canonique des catégories (couleurs « classiques »), indépendante des workflows. */
+export const STATUS_CATEGORY_COLOR: Record<StatusCategory, string> = {
+    todo: '#222783',
+    in_progress: '#4A90D9',
+    blocked: '#C62828',
+    review: '#FF8F00',
+    done: '#26A69A',
+}
+
+/** Renvoie '#1f2937' (foncé) ou '#ffffff' (blanc) selon la luminance du fond, pour rester lisible. */
+export function contrastText(hex: string): string {
+    const c = hex.replace('#', '')
+    const r = parseInt(c.slice(0, 2), 16)
+    const g = parseInt(c.slice(2, 4), 16)
+    const b = parseInt(c.slice(4, 6), 16)
+    const lum = (0.299 * r + 0.587 * g + 0.114 * b) / 255
+    return lum > 0.6 ? '#1f2937' : '#ffffff'
+}
+
+export type Workflow = {
+    id: number
+    '@id'?: string
+    name: string
+    isDefault: boolean
+    position: number
+    statuses: TaskStatus[]
+}
+
+export type WorkflowWrite = {
+    name: string
+    isDefault: boolean
+    position: number
+    statuses?: TaskStatusWrite[]
+}
@@ -0,0 +1,37 @@
+import type { Project, ProjectWrite } from './dto/project'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useProjectService() {
+    const api = useApi()
+
+    async function getAll(params?: { archived?: boolean }): Promise<Project[]> {
+        const query = params?.archived !== undefined ? `?archived=${params.archived}` : ''
+        const data = await api.get<HydraCollection<Project>>(`/projects${query}`)
+        return extractHydraMembers(data)
+    }
+
+    async function getById(id: number): Promise<Project> {
+        return api.get<Project>(`/projects/${id}`)
+    }
+
+    async function create(payload: ProjectWrite): Promise<Project> {
+        return api.post<Project>('/projects', payload as Record<string, unknown>, {
+            toastSuccessKey: 'projects.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<ProjectWrite>, options?: { toastSuccessKey?: string }): Promise<Project> {
+        return api.patch<Project>(`/projects/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: options?.toastSuccessKey ?? 'projects.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/projects/${id}`, {}, {
+            toastSuccessKey: 'projects.deleted',
+        })
+    }
+
+    return { getAll, getById, create, update, remove }
+}
@@ -0,0 +1,62 @@
+import type { TaskDocument } from './dto/task-document'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+import { $fetch } from 'ofetch'
+
+export function useTaskDocumentService() {
+    const api = useApi()
+    const config = useRuntimeConfig()
+    const baseURL = config.public.apiBase || '/api'
+
+    async function getByTask(taskId: number): Promise<TaskDocument[]> {
+        const data = await api.get<HydraCollection<TaskDocument>>('/task_documents', {
+            task: `/api/tasks/${taskId}`,
+        })
+        return extractHydraMembers(data)
+    }
+
+    async function uploadWithRelation(relationField: string, relationIri: string, file: File): Promise<TaskDocument> {
+        const formData = new FormData()
+        formData.append('file', file)
+        formData.append(relationField, relationIri)
+
+        return $fetch<TaskDocument>(`${baseURL}/task_documents`, {
+            method: 'POST',
+            body: formData,
+            credentials: 'include',
+        })
+    }
+
+    async function upload(taskId: number, file: File): Promise<TaskDocument> {
+        return uploadWithRelation('task', `/api/tasks/${taskId}`, file)
+    }
+
+    async function linkShare(taskId: number, sharePath: string): Promise<TaskDocument> {
+        return $fetch<TaskDocument>(`${baseURL}/task_documents`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ task: `/api/tasks/${taskId}`, sharePath }),
+            credentials: 'include',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_documents/${id}`, {}, {
+            toastSuccessKey: 'taskDocuments.deleted',
+        })
+    }
+
+    function getDownloadUrl(id: number): string {
+        return `${baseURL}/task_documents/${id}/download`
+    }
+
+    async function getContent(id: number): Promise<string> {
+        const response = await fetch(`${baseURL}/task_documents/${id}/download`, {
+            credentials: 'include',
+        })
+
+        return response.text()
+    }
+
+    return { getByTask, upload, linkShare, remove, getDownloadUrl, getContent }
+}
@@ -0,0 +1,32 @@
+import type { TaskEffort, TaskEffortWrite } from './dto/task-effort'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskEffortService() {
+    const api = useApi()
+
+    async function getAll(): Promise<TaskEffort[]> {
+        const data = await api.get<HydraCollection<TaskEffort>>('/task_efforts')
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskEffortWrite): Promise<TaskEffort> {
+        return api.post<TaskEffort>('/task_efforts', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskEfforts.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskEffortWrite>): Promise<TaskEffort> {
+        return api.patch<TaskEffort>(`/task_efforts/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskEfforts.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_efforts/${id}`, {}, {
+            toastSuccessKey: 'taskEfforts.deleted',
+        })
+    }
+
+    return { getAll, create, update, remove }
+}
@@ -0,0 +1,39 @@
+import type { TaskGroup, TaskGroupWrite } from './dto/task-group'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskGroupService() {
+    const api = useApi()
+
+    async function getAll(): Promise<TaskGroup[]> {
+        const data = await api.get<HydraCollection<TaskGroup>>('/task_groups')
+        return extractHydraMembers(data)
+    }
+
+    async function getByProject(projectId: number): Promise<TaskGroup[]> {
+        const data = await api.get<HydraCollection<TaskGroup>>('/task_groups', {
+            project: `/api/projects/${projectId}`,
+        })
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskGroupWrite): Promise<TaskGroup> {
+        return api.post<TaskGroup>('/task_groups', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskGroups.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskGroupWrite>): Promise<TaskGroup> {
+        return api.patch<TaskGroup>(`/task_groups/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskGroups.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_groups/${id}`, {}, {
+            toastSuccessKey: 'taskGroups.deleted',
+        })
+    }
+
+    return { getAll, getByProject, create, update, remove }
+}
@@ -0,0 +1,32 @@
+import type { TaskPriority, TaskPriorityWrite } from './dto/task-priority'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskPriorityService() {
+    const api = useApi()
+
+    async function getAll(): Promise<TaskPriority[]> {
+        const data = await api.get<HydraCollection<TaskPriority>>('/task_priorities')
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskPriorityWrite): Promise<TaskPriority> {
+        return api.post<TaskPriority>('/task_priorities', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskPriorities.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskPriorityWrite>): Promise<TaskPriority> {
+        return api.patch<TaskPriority>(`/task_priorities/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskPriorities.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_priorities/${id}`, {}, {
+            toastSuccessKey: 'taskPriorities.deleted',
+        })
+    }
+
+    return { getAll, create, update, remove }
+}
@@ -0,0 +1,25 @@
+import type { TaskRecurrence, TaskRecurrenceWrite } from './dto/task-recurrence'
+
+export function useTaskRecurrenceService() {
+    const api = useApi()
+
+    async function create(payload: TaskRecurrenceWrite): Promise<TaskRecurrence> {
+        return api.post<TaskRecurrence>('/task_recurrences', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskRecurrence.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskRecurrenceWrite>): Promise<TaskRecurrence> {
+        return api.patch<TaskRecurrence>(`/task_recurrences/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskRecurrence.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_recurrences/${id}`, {}, {
+            toastSuccessKey: 'taskRecurrence.deleted',
+        })
+    }
+
+    return { create, update, remove }
+}
@@ -0,0 +1,32 @@
+import type { TaskStatus, TaskStatusWrite } from './dto/task-status'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskStatusService() {
+    const api = useApi()
+
+    async function getAll(): Promise<TaskStatus[]> {
+        const data = await api.get<HydraCollection<TaskStatus>>('/task_statuses')
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskStatusWrite): Promise<TaskStatus> {
+        return api.post<TaskStatus>('/task_statuses', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskStatuses.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskStatusWrite>): Promise<TaskStatus> {
+        return api.patch<TaskStatus>(`/task_statuses/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskStatuses.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_statuses/${id}`, {}, {
+            toastSuccessKey: 'taskStatuses.deleted',
+        })
+    }
+
+    return { getAll, create, update, remove }
+}
@@ -0,0 +1,32 @@
+import type { TaskTag, TaskTagWrite } from './dto/task-tag'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskTagService() {
+    const api = useApi()
+
+    async function getAll(): Promise<TaskTag[]> {
+        const data = await api.get<HydraCollection<TaskTag>>('/task_tags')
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskTagWrite): Promise<TaskTag> {
+        return api.post<TaskTag>('/task_tags', payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskTags.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskTagWrite>): Promise<TaskTag> {
+        return api.patch<TaskTag>(`/task_tags/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'taskTags.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/task_tags/${id}`, {}, {
+            toastSuccessKey: 'taskTags.deleted',
+        })
+    }
+
+    return { getAll, create, update, remove }
+}
@@ -0,0 +1,45 @@
+import type { Task, TaskWrite } from './dto/task'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+export function useTaskService() {
+    const api = useApi()
+
+    async function getAll(): Promise<Task[]> {
+        const data = await api.get<HydraCollection<Task>>('/tasks')
+        return extractHydraMembers(data)
+    }
+
+    async function getByProject(projectId: number, archived = false): Promise<Task[]> {
+        const data = await api.get<HydraCollection<Task>>('/tasks', {
+            project: `/api/projects/${projectId}`,
+            archived,
+        })
+        return extractHydraMembers(data)
+    }
+
+    async function getFiltered(params: Record<string, string | number | boolean | string[]>): Promise<Task[]> {
+        const data = await api.get<HydraCollection<Task>>('/tasks', params as Record<string, unknown>)
+        return extractHydraMembers(data)
+    }
+
+    async function create(payload: TaskWrite): Promise<Task> {
+        return api.post<Task>('/tasks', payload as Record<string, unknown>, {
+            toastSuccessKey: 'tasks.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<TaskWrite>): Promise<Task> {
+        return api.patch<Task>(`/tasks/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'tasks.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/tasks/${id}`, {}, {
+            toastSuccessKey: 'tasks.deleted',
+        })
+    }
+
+    return { getAll, getByProject, getFiltered, create, update, remove }
+}
@@ -0,0 +1,55 @@
+import type { Workflow, WorkflowWrite } from './dto/workflow'
+import type { HydraCollection } from '~/utils/api'
+import { extractHydraMembers } from '~/utils/api'
+
+type SwitchPayload = {
+    workflowId: number
+    mapping: Record<string, number | null>
+}
+
+type SwitchResult = {
+    projectId: number
+    workflowId: number
+    migratedTaskCount: number
+}
+
+export function useWorkflowService() {
+    const api = useApi()
+
+    async function getAll(): Promise<Workflow[]> {
+        const data = await api.get<HydraCollection<Workflow>>('/workflows')
+        return extractHydraMembers(data)
+    }
+
+    async function getOne(id: number): Promise<Workflow> {
+        return api.get<Workflow>(`/workflows/${id}`)
+    }
+
+    async function create(payload: WorkflowWrite): Promise<Workflow> {
+        return api.post<Workflow>('/workflows', payload as Record<string, unknown>, {
+            toastSuccessKey: 'workflows.created',
+        })
+    }
+
+    async function update(id: number, payload: Partial<WorkflowWrite>): Promise<Workflow> {
+        return api.patch<Workflow>(`/workflows/${id}`, payload as Record<string, unknown>, {
+            toastSuccessKey: 'workflows.updated',
+        })
+    }
+
+    async function remove(id: number): Promise<void> {
+        await api.delete(`/workflows/${id}`, {}, {
+            toastSuccessKey: 'workflows.deleted',
+        })
+    }
+
+    async function switchOnProject(projectId: number, payload: SwitchPayload): Promise<SwitchResult> {
+        return api.post<SwitchResult>(
+            `/projects/${projectId}/switch-workflow`,
+            payload as unknown as Record<string, unknown>,
+            { toastSuccessKey: 'workflows.switched' },
+        )
+    }
+
+    return { getAll, getOne, create, update, remove, switchOnProject }
+}