Migration modular monolith DDD (0.1 → 3.3) (#17)

## Migration modular monolith DDD — Lesstime (0.1 → 3.3)

Cette MR regroupe l'intégralité de la refonte en monolithe modulaire (strangler progressif, additif). Elle remplace les MR stackées de Phase 1 (#12–#16), désormais incluses ici.

**Ne pas merger avant validation fonctionnelle** : branche destinée à être testée telle quelle.

### Périmètre — 9 modules sous `src/Module/`
| Phase | Module | Contenu |
|------|--------|---------|
| 0.1 | (socle) | infrastructure modulaire, `ModuleInterface`, mapping Doctrine par module |
| 0.2 | (socle front) | auto-détection des layers Nuxt sous `frontend/modules/*` |
| 1.1 | **Core** | Identité (User/Auth), Notifications, Notifier |
| 1.2 | Core | RBAC fin (permissions `module.resource.action`, sidebar gated) |
| 1.3 | Core | Audit log (`#[Auditable]`, listener, provider DBAL) |
| 2.1 | **TimeTracking** | TimeEntry + MCP + export |
| 2.2 | **ProjectManagement** | cœur métier Projets/Tâches + 38 MCP tools |
| 2.3 | **Absence** | demandes, soldes, policies, justificatifs |
| 2.4 | **Directory** | Clients (migrés) + **Prospects** (nouveau, conversion → Client) |
| 2.5 | **Mail** | intégration IMAP OVH + liens tâches |
| 2.6 | **Integration** | Gitea / BookStack / Zimbra / Share |
| 3.1 | **Reporting** | rapports transverses (DBAL read-only, 0 import inter-module) |
| 3.2 | **ClientPortal** | portail client (ROLE_CLIENT cloisonné, tickets, notifications) |
| 3.3 | (finition) | nettoyage legacy — `src/Entity` vide, app 100% modulaire |

### Architecture
- Découplage inter-modules par **contrats** (`UserInterface`, `ProjectInterface`, `TaskInterface`, `TaskTagInterface`, `ClientInterface`, `ClientTicketInterface`, `LeaveProfileInterface`) + `resolve_target_entities` 100% modulaire (aucune cible legacy).
- Repositories : interface `Domain/Repository` + implémentation `Infrastructure/Doctrine`, bindées.
- Reporting en DBAL read-only pur (aucun import d'entité d'un autre module).
- Chaque migration de module : déplacement à comportement préservé (API publique et noms d'outils MCP inchangés), migrations **additives** uniquement (zéro destructif).

### Sécurité
- ROLE_CLIENT cloisonné : un utilisateur client n'accède qu'à `/portal` et à ses propres tickets (filtrés par `allowedProjects`), interdit sur toute l'API interne.
- Correctif : interdiction pour un client de créer un lien vers le partage SMB (upload uniquement).

### QA non-régression (branche reconstruite from scratch)
- Migrations from scratch + fixtures : OK.
- Compilation dev + prod : OK.
- **180 tests PHPUnit verts**, php-cs-fixer clean, ~96 routes, **66 outils MCP** tous sous `App\Module\*`.
- Smoke test runtime multi-rôles (admin / ROLE_USER / ROLE_CLIENT) : 44 vérifications HTTP, **0 écart**, cloisonnement client étanche.
- Build Nuxt OK, 9 layers, 0 import legacy résiduel.

### Points à arbitrer (hors périmètre de cette migration)
- Durcissement MCP/IDOR pré-existant (`userId` explicite sans scoping sur certains tools TimeTracking/Absence/TaskDocument) — ticket dédié recommandé.
- Validation fonctionnelle de **Prospect** et **ClientPortal** (conçus depuis les specs disque).
- **Harmonisation visuelle Malio finale** (3.3) — finition esthétique inter-modules laissée au PO.

---

## ⚠️ Déploiement / migration des données — à ne pas oublier

### 1. Resynchroniser les séquences PostgreSQL après tout import/restore de dump
Si la prod (ou tout environnement) est **montée depuis un dump** (`pg_restore` / `COPY`), les lignes sont chargées avec leurs `id` explicites **sans avancer les séquences** → au premier `INSERT` : `duplicate key value violates unique constraint "..._pkey"` (constaté en local sur `notification`, `task`, `time_entry`…).

À lancer **juste après chaque restore/import** :

```sql
DO $$
DECLARE r RECORD; maxid BIGINT; seq TEXT;
BEGIN
  FOR r IN SELECT table_name, column_name FROM information_schema.columns WHERE table_schema='public'
  LOOP
    seq := pg_get_serial_sequence(quote_ident(r.table_name), r.column_name);
    IF seq IS NOT NULL THEN
      EXECUTE format('SELECT COALESCE(MAX(%I),0) FROM %I', r.column_name, r.table_name) INTO maxid;
      PERFORM setval(seq, GREATEST(maxid,1), maxid > 0);
    END IF;
  END LOOP;
END $$;
```

> Ne concerne **pas** une prod qui tourne déjà (séquences avancées organiquement) — uniquement le cas restore/import. Idempotent, sans risque.

### 2. Fix dénormalisation des collections typées-contrat (code, inclus dans la branche)
Les relations **to-many** typées par une interface `Shared\Domain\Contract\*` (`TimeEntry::tags` → `TaskTagInterface`, `Task::collaborators` → `UserInterface`) étaient **indénormalisables par API Platform** (mono-valué OK via IRI, collection KO) → **tout POST/PATCH portant une telle collection renvoyait 400/500**. Corrigé par un dénormaliseur générique `ContractRelationDenormalizer` (réutilise `resolve_target_entities`, zéro couplage par-entité) + test fonctionnel de non-régression.

---------

Co-authored-by: Matthieu <contact@malio.fr>
Reviewed-on: #17

src/Module/ProjectManagement/Domain/Entity/Project.php

@@ -0,0 +1,277 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Doctrine\Orm\Filter\BooleanFilter;
+use ApiPlatform\Metadata\ApiFilter;
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Link;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\Resource\SwitchWorkflowOutput;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\SwitchProjectWorkflowProcessor;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineProjectRepository;
+use App\Shared\Domain\Contract\BlamableInterface;
+use App\Shared\Domain\Contract\ClientInterface;
+use App\Shared\Domain\Contract\ProjectInterface;
+use App\Shared\Domain\Contract\TimestampableInterface;
+use App\Shared\Domain\Trait\TimestampableBlamableTrait;
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\Common\Collections\Collection;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Bridge\Doctrine\Validator\Constraints\UniqueEntity;
+use Symfony\Component\Serializer\Attribute\Groups;
+use Symfony\Component\Validator\Constraints as Assert;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(
+            security: "is_granted('ROLE_ADMIN')",
+            denormalizationContext: ['groups' => ['project:write', 'project:create']],
+        ),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+        new Post(
+            uriTemplate: '/projects/{id}/switch-workflow',
+            uriVariables: ['id' => new Link(fromClass: Project::class)],
+            security: "is_granted('ROLE_ADMIN')",
+            input: false,
+            output: SwitchWorkflowOutput::class,
+            normalizationContext: ['groups' => ['switch_workflow:read']],
+            processor: SwitchProjectWorkflowProcessor::class,
+            read: true,
+            deserialize: false,
+            validate: false,
+            name: 'switch_workflow',
+        ),
+    ],
+    normalizationContext: ['groups' => ['project:read']],
+    denormalizationContext: ['groups' => ['project:write']],
+    order: ['name' => 'ASC'],
+)]
+#[ApiFilter(BooleanFilter::class, properties: ['archived'])]
+#[ORM\Entity(repositoryClass: DoctrineProjectRepository::class)]
+#[UniqueEntity(fields: ['code'], message: 'Ce code de projet est déjà utilisé.')]
+class Project implements ProjectInterface, TimestampableInterface, BlamableInterface
+{
+    use TimestampableBlamableTrait;
+
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['project:read', 'time_entry:read', 'task:read', 'me:read', 'user:list'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 10, unique: true)]
+    #[Groups(['project:read', 'project:create', 'task:read'])]
+    #[Assert\NotBlank]
+    #[Assert\Regex(pattern: '/^[A-Z]{2,10}$/', message: 'Le code doit contenir entre 2 et 10 lettres majuscules.')]
+    private ?string $code = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['project:read', 'project:write', 'time_entry:read', 'task:read', 'me:read', 'user:list'])]
+    private ?string $name = null;
+
+    #[ORM\Column(type: 'text', nullable: true)]
+    #[Groups(['project:read', 'project:write'])]
+    private ?string $description = null;
+
+    #[ORM\Column(length: 7)]
+    #[Groups(['project:read', 'project:write', 'time_entry:read', 'task:read'])]
+    private ?string $color = '#222783';
+
+    #[ORM\ManyToOne(targetEntity: ClientInterface::class, inversedBy: 'projects')]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['project:read', 'project:write'])]
+    private ?ClientInterface $client = null;
+
+    #[ORM\ManyToOne(targetEntity: Workflow::class)]
+    #[ORM\JoinColumn(nullable: false, onDelete: 'RESTRICT')]
+    #[Groups(['project:read', 'project:write', 'task:read'])]
+    #[Assert\NotNull(message: 'Un projet doit avoir un workflow.')]
+    private ?Workflow $workflow = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    #[Groups(['project:read', 'project:write', 'task:read'])]
+    private ?string $giteaOwner = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    #[Groups(['project:read', 'project:write', 'task:read'])]
+    private ?string $giteaRepo = null;
+
+    #[ORM\Column(nullable: true)]
+    #[Groups(['project:read', 'project:write', 'task:read'])]
+    private ?int $bookstackShelfId = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    #[Groups(['project:read', 'project:write'])]
+    private ?string $bookstackShelfName = null;
+
+    #[ORM\Column]
+    #[Groups(['project:read', 'project:write'])]
+    private bool $archived = false;
+
+    /** @var Collection<int, Task> */
+    #[ORM\OneToMany(targetEntity: Task::class, mappedBy: 'project')]
+    private Collection $tasks;
+
+    public function __construct()
+    {
+        $this->tasks = new ArrayCollection();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getCode(): ?string
+    {
+        return $this->code;
+    }
+
+    public function setCode(string $code): static
+    {
+        $this->code = $code;
+
+        return $this;
+    }
+
+    public function getName(): ?string
+    {
+        return $this->name;
+    }
+
+    public function setName(string $name): static
+    {
+        $this->name = $name;
+
+        return $this;
+    }
+
+    public function getDescription(): ?string
+    {
+        return $this->description;
+    }
+
+    public function setDescription(?string $description): static
+    {
+        $this->description = $description;
+
+        return $this;
+    }
+
+    public function getColor(): ?string
+    {
+        return $this->color;
+    }
+
+    public function setColor(string $color): static
+    {
+        $this->color = $color;
+
+        return $this;
+    }
+
+    public function getClient(): ?ClientInterface
+    {
+        return $this->client;
+    }
+
+    public function setClient(?ClientInterface $client): static
+    {
+        $this->client = $client;
+
+        return $this;
+    }
+
+    public function getGiteaOwner(): ?string
+    {
+        return $this->giteaOwner;
+    }
+
+    public function setGiteaOwner(?string $giteaOwner): static
+    {
+        $this->giteaOwner = $giteaOwner;
+
+        return $this;
+    }
+
+    public function getGiteaRepo(): ?string
+    {
+        return $this->giteaRepo;
+    }
+
+    public function setGiteaRepo(?string $giteaRepo): static
+    {
+        $this->giteaRepo = $giteaRepo;
+
+        return $this;
+    }
+
+    public function hasGiteaRepo(): bool
+    {
+        return null !== $this->giteaOwner && null !== $this->giteaRepo;
+    }
+
+    public function isArchived(): bool
+    {
+        return $this->archived;
+    }
+
+    public function setArchived(bool $archived): static
+    {
+        $this->archived = $archived;
+
+        return $this;
+    }
+
+    public function getBookstackShelfId(): ?int
+    {
+        return $this->bookstackShelfId;
+    }
+
+    public function setBookstackShelfId(?int $bookstackShelfId): static
+    {
+        $this->bookstackShelfId = $bookstackShelfId;
+
+        return $this;
+    }
+
+    public function getBookstackShelfName(): ?string
+    {
+        return $this->bookstackShelfName;
+    }
+
+    public function setBookstackShelfName(?string $bookstackShelfName): static
+    {
+        $this->bookstackShelfName = $bookstackShelfName;
+
+        return $this;
+    }
+
+    public function getWorkflow(): ?Workflow
+    {
+        return $this->workflow;
+    }
+
+    public function setWorkflow(Workflow $workflow): static
+    {
+        $this->workflow = $workflow;
+
+        return $this;
+    }
+
+    #[Groups(['project:read'])]
+    public function getTaskCount(): int
+    {
+        return $this->tasks->count();
+    }
+}

src/Module/ProjectManagement/Domain/Entity/Task.php

@@ -0,0 +1,494 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Doctrine\Orm\Filter\BooleanFilter;
+use ApiPlatform\Doctrine\Orm\Filter\DateFilter;
+use ApiPlatform\Doctrine\Orm\Filter\OrderFilter;
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Metadata\ApiFilter;
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\TaskCalendarProcessor;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\TaskNumberProcessor;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskRepository;
+use App\Shared\Domain\Contract\BlamableInterface;
+use App\Shared\Domain\Contract\TaskInterface;
+use App\Shared\Domain\Contract\TimestampableInterface;
+use App\Shared\Domain\Contract\UserInterface;
+use App\Shared\Domain\Trait\TimestampableBlamableTrait;
+use DateTimeImmutable;
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\Common\Collections\Collection;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+use Symfony\Component\Validator\Constraints as Assert;
+use Symfony\Component\Validator\Context\ExecutionContextInterface;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')", processor: TaskNumberProcessor::class),
+        new Patch(security: "is_granted('ROLE_ADMIN')", processor: TaskCalendarProcessor::class),
+        new Delete(security: "is_granted('ROLE_ADMIN')", processor: TaskCalendarProcessor::class),
+    ],
+    normalizationContext: ['groups' => ['task:read']],
+    denormalizationContext: ['groups' => ['task:write']],
+    order: ['id' => 'DESC'],
+)]
+#[ApiFilter(SearchFilter::class, properties: ['project' => 'exact', 'group' => 'exact', 'assignee' => 'exact', 'collaborators' => 'exact', 'priority' => 'exact', 'effort' => 'exact', 'tags' => 'exact', 'status' => 'exact'])]
+#[ApiFilter(DateFilter::class, properties: ['scheduledStart', 'scheduledEnd', 'deadline'])]
+#[ApiFilter(BooleanFilter::class, properties: ['archived', 'syncToCalendar'])]
+#[ApiFilter(OrderFilter::class, properties: ['scheduledStart', 'deadline'])]
+#[ORM\Entity(repositoryClass: DoctrineTaskRepository::class)]
+#[ORM\Table(name: 'task')]
+#[ORM\UniqueConstraint(name: 'uniq_task_project_number', columns: ['project_id', 'number'])]
+class Task implements TaskInterface, TimestampableInterface, BlamableInterface
+{
+    use TimestampableBlamableTrait;
+
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(type: 'integer')]
+    #[Groups(['task:read'])]
+    private ?int $number = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task:read', 'task:write'])]
+    private ?string $title = null;
+
+    #[ORM\Column(type: 'text', nullable: true)]
+    #[Groups(['task:read', 'task:write'])]
+    private ?string $description = null;
+
+    #[ORM\ManyToOne(targetEntity: TaskStatus::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?TaskStatus $status = null;
+
+    #[ORM\ManyToOne(targetEntity: TaskEffort::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?TaskEffort $effort = null;
+
+    #[ORM\ManyToOne(targetEntity: TaskPriority::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?TaskPriority $priority = null;
+
+    #[ORM\ManyToOne(targetEntity: UserInterface::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?UserInterface $assignee = null;
+
+    /** @var Collection<int, UserInterface> */
+    #[ORM\ManyToMany(targetEntity: UserInterface::class)]
+    #[ORM\JoinTable(
+        name: 'task_collaborator',
+        joinColumns: [new ORM\JoinColumn(name: 'task_id', referencedColumnName: 'id', onDelete: 'CASCADE')],
+        inverseJoinColumns: [new ORM\JoinColumn(name: 'user_id', referencedColumnName: 'id', onDelete: 'CASCADE')],
+    )]
+    #[Groups(['task:read', 'task:write'])]
+    private Collection $collaborators;
+
+    #[ORM\ManyToOne(targetEntity: TaskGroup::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?TaskGroup $group = null;
+
+    #[ORM\ManyToOne(targetEntity: Project::class, inversedBy: 'tasks')]
+    #[ORM\JoinColumn(nullable: false, onDelete: 'CASCADE')]
+    #[Groups(['task:read', 'task:write'])]
+    #[Assert\NotNull]
+    private ?Project $project = null;
+
+    /** @var Collection<int, TaskTag> */
+    #[ORM\ManyToMany(targetEntity: TaskTag::class)]
+    #[ORM\JoinTable(
+        name: 'task_task_type',
+        joinColumns: [new ORM\JoinColumn(name: 'task_id', referencedColumnName: 'id')],
+        inverseJoinColumns: [new ORM\JoinColumn(name: 'task_type_id', referencedColumnName: 'id')],
+    )]
+    #[Groups(['task:read', 'task:write'])]
+    private Collection $tags;
+
+    #[ORM\Column(type: 'boolean')]
+    #[Groups(['task:read', 'task:write'])]
+    private bool $archived = false;
+
+    /** @var Collection<int, TaskDocument> */
+    #[ORM\OneToMany(targetEntity: TaskDocument::class, mappedBy: 'task', cascade: ['remove'])]
+    #[Groups(['task:read'])]
+    private Collection $documents;
+
+    #[ORM\Column(type: 'datetime_immutable', nullable: true)]
+    #[Groups(['task:read', 'task:write'])]
+    private ?DateTimeImmutable $scheduledStart = null;
+
+    #[ORM\Column(type: 'datetime_immutable', nullable: true)]
+    #[Groups(['task:read', 'task:write'])]
+    private ?DateTimeImmutable $scheduledEnd = null;
+
+    #[ORM\Column(type: 'datetime_immutable', nullable: true)]
+    #[Groups(['task:read', 'task:write'])]
+    private ?DateTimeImmutable $deadline = null;
+
+    #[ORM\Column(type: 'boolean', options: ['default' => false])]
+    #[Groups(['task:read', 'task:write'])]
+    private bool $syncToCalendar = false;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    private ?string $calendarEventUid = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    private ?string $calendarTodoUid = null;
+
+    #[ORM\Column(type: 'text', nullable: true)]
+    #[Groups(['task:read'])]
+    private ?string $calendarSyncError = null;
+
+    #[ORM\ManyToOne(targetEntity: TaskRecurrence::class, inversedBy: 'tasks')]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task:read', 'task:write'])]
+    private ?TaskRecurrence $recurrence = null;
+
+    public function __construct()
+    {
+        $this->tags          = new ArrayCollection();
+        $this->documents     = new ArrayCollection();
+        $this->collaborators = new ArrayCollection();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getNumber(): ?int
+    {
+        return $this->number;
+    }
+
+    public function setNumber(int $number): static
+    {
+        $this->number = $number;
+
+        return $this;
+    }
+
+    public function getTitle(): ?string
+    {
+        return $this->title;
+    }
+
+    public function setTitle(string $title): static
+    {
+        $this->title = $title;
+
+        return $this;
+    }
+
+    public function getDescription(): ?string
+    {
+        return $this->description;
+    }
+
+    public function setDescription(?string $description): static
+    {
+        $this->description = $description;
+
+        return $this;
+    }
+
+    public function getStatus(): ?TaskStatus
+    {
+        return $this->status;
+    }
+
+    public function setStatus(?TaskStatus $status): static
+    {
+        $this->status = $status;
+
+        return $this;
+    }
+
+    public function getEffort(): ?TaskEffort
+    {
+        return $this->effort;
+    }
+
+    public function setEffort(?TaskEffort $effort): static
+    {
+        $this->effort = $effort;
+
+        return $this;
+    }
+
+    public function getPriority(): ?TaskPriority
+    {
+        return $this->priority;
+    }
+
+    public function setPriority(?TaskPriority $priority): static
+    {
+        $this->priority = $priority;
+
+        return $this;
+    }
+
+    public function getAssignee(): ?UserInterface
+    {
+        return $this->assignee;
+    }
+
+    public function setAssignee(?UserInterface $assignee): static
+    {
+        $this->assignee = $assignee;
+
+        return $this;
+    }
+
+    /** @return Collection<int, UserInterface> */
+    public function getCollaborators(): Collection
+    {
+        return $this->collaborators;
+    }
+
+    public function addCollaborator(UserInterface $user): static
+    {
+        if (!$this->collaborators->contains($user)) {
+            $this->collaborators->add($user);
+        }
+
+        return $this;
+    }
+
+    public function removeCollaborator(UserInterface $user): static
+    {
+        $this->collaborators->removeElement($user);
+
+        return $this;
+    }
+
+    public function getGroup(): ?TaskGroup
+    {
+        return $this->group;
+    }
+
+    public function setGroup(?TaskGroup $group): static
+    {
+        $this->group = $group;
+
+        return $this;
+    }
+
+    public function getProject(): ?Project
+    {
+        return $this->project;
+    }
+
+    public function setProject(?Project $project): static
+    {
+        $this->project = $project;
+
+        return $this;
+    }
+
+    /** @return Collection<int, TaskTag> */
+    public function getTags(): Collection
+    {
+        return $this->tags;
+    }
+
+    public function addTag(TaskTag $tag): static
+    {
+        if (!$this->tags->contains($tag)) {
+            $this->tags->add($tag);
+        }
+
+        return $this;
+    }
+
+    public function removeTag(TaskTag $tag): static
+    {
+        $this->tags->removeElement($tag);
+
+        return $this;
+    }
+
+    public function isArchived(): bool
+    {
+        return $this->archived;
+    }
+
+    public function setArchived(bool $archived): static
+    {
+        $this->archived = $archived;
+
+        return $this;
+    }
+
+    /** @return Collection<int, TaskDocument> */
+    public function getDocuments(): Collection
+    {
+        return $this->documents;
+    }
+
+    public function getScheduledStart(): ?DateTimeImmutable
+    {
+        return $this->scheduledStart;
+    }
+
+    public function setScheduledStart(?DateTimeImmutable $scheduledStart): static
+    {
+        $this->scheduledStart = $scheduledStart;
+
+        return $this;
+    }
+
+    public function getScheduledEnd(): ?DateTimeImmutable
+    {
+        return $this->scheduledEnd;
+    }
+
+    public function setScheduledEnd(?DateTimeImmutable $scheduledEnd): static
+    {
+        $this->scheduledEnd = $scheduledEnd;
+
+        return $this;
+    }
+
+    public function getDeadline(): ?DateTimeImmutable
+    {
+        return $this->deadline;
+    }
+
+    public function setDeadline(?DateTimeImmutable $deadline): static
+    {
+        $this->deadline = $deadline;
+
+        return $this;
+    }
+
+    public function isSyncToCalendar(): bool
+    {
+        return $this->syncToCalendar;
+    }
+
+    public function setSyncToCalendar(bool $syncToCalendar): static
+    {
+        $this->syncToCalendar = $syncToCalendar;
+
+        return $this;
+    }
+
+    public function getCalendarEventUid(): ?string
+    {
+        return $this->calendarEventUid;
+    }
+
+    public function setCalendarEventUid(?string $calendarEventUid): static
+    {
+        $this->calendarEventUid = $calendarEventUid;
+
+        return $this;
+    }
+
+    public function getCalendarTodoUid(): ?string
+    {
+        return $this->calendarTodoUid;
+    }
+
+    public function setCalendarTodoUid(?string $calendarTodoUid): static
+    {
+        $this->calendarTodoUid = $calendarTodoUid;
+
+        return $this;
+    }
+
+    public function getCalendarSyncError(): ?string
+    {
+        return $this->calendarSyncError;
+    }
+
+    public function setCalendarSyncError(?string $calendarSyncError): static
+    {
+        $this->calendarSyncError = $calendarSyncError;
+
+        return $this;
+    }
+
+    public function getRecurrence(): ?TaskRecurrence
+    {
+        return $this->recurrence;
+    }
+
+    public function setRecurrence(?TaskRecurrence $recurrence): static
+    {
+        $this->recurrence = $recurrence;
+
+        return $this;
+    }
+
+    #[Assert\Callback]
+    public function validateScheduledDates(ExecutionContextInterface $context): void
+    {
+        if ((null === $this->scheduledStart) !== (null === $this->scheduledEnd)) {
+            $context->buildViolation('scheduledStart and scheduledEnd must both be set or both be null.')
+                ->atPath('scheduledEnd')
+                ->addViolation()
+            ;
+        }
+        if (null !== $this->scheduledStart && null !== $this->scheduledEnd
+            && $this->scheduledEnd <= $this->scheduledStart) {
+            $context->buildViolation('scheduledEnd must be after scheduledStart.')
+                ->atPath('scheduledEnd')
+                ->addViolation()
+            ;
+        }
+    }
+
+    #[Assert\Callback]
+    public function validateCollaborators(ExecutionContextInterface $context): void
+    {
+        if (null !== $this->assignee && $this->collaborators->contains($this->assignee)) {
+            $context->buildViolation('The assignee cannot also be a collaborator.')
+                ->atPath('collaborators')
+                ->addViolation()
+            ;
+        }
+    }
+
+    #[Assert\Callback]
+    public function validateStatusBelongsToProjectWorkflow(ExecutionContextInterface $context): void
+    {
+        if (null === $this->status || null === $this->project) {
+            return;
+        }
+
+        $projectWorkflow = $this->project->getWorkflow();
+        $statusWorkflow  = $this->status->getWorkflow();
+
+        if (null === $projectWorkflow || null === $statusWorkflow) {
+            return;
+        }
+
+        if ($projectWorkflow->getId() !== $statusWorkflow->getId()) {
+            $context->buildViolation('Status does not belong to this project\'s workflow.')
+                ->atPath('status')
+                ->addViolation()
+            ;
+        }
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskDocument.php

@@ -0,0 +1,191 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Metadata\ApiFilter;
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\TaskDocumentProcessor;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\TaskDocumentProvider;
+use App\Module\ProjectManagement\Infrastructure\EventListener\TaskDocumentListener;
+use App\Shared\Domain\Contract\UserInterface;
+use DateTimeImmutable;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')", provider: TaskDocumentProvider::class),
+        new Get(security: "is_granted('ROLE_USER')", provider: TaskDocumentProvider::class),
+        new Post(
+            security: "is_granted('ROLE_ADMIN')",
+            processor: TaskDocumentProcessor::class,
+            deserialize: false,
+        ),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_document:read']],
+    denormalizationContext: ['groups' => ['task_document:write']],
+    order: ['id' => 'DESC'],
+)]
+#[ApiFilter(SearchFilter::class, properties: ['task' => 'exact'])]
+#[ORM\Entity]
+#[ORM\EntityListeners([TaskDocumentListener::class])]
+class TaskDocument
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?int $id = null;
+
+    #[ORM\ManyToOne(targetEntity: Task::class, inversedBy: 'documents')]
+    #[ORM\JoinColumn(nullable: false, onDelete: 'CASCADE')]
+    #[Groups(['task_document:read', 'task_document:write'])]
+    private ?Task $task = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?string $originalName = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?string $fileName = null;
+
+    /**
+     * Chemin relatif sur le partage SMB lorsque le document est un lien vers un fichier du partage
+     * (au lieu d'un fichier uploadé stocké sur disque). Mutuellement exclusif avec fileName.
+     */
+    #[ORM\Column(length: 1024, nullable: true)]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?string $sharePath = null;
+
+    #[ORM\Column(length: 100)]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?string $mimeType = null;
+
+    #[ORM\Column]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?int $size = null;
+
+    #[ORM\Column(type: 'datetime_immutable')]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?DateTimeImmutable $createdAt = null;
+
+    #[ORM\ManyToOne(targetEntity: UserInterface::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    #[Groups(['task_document:read', 'task:read'])]
+    private ?UserInterface $uploadedBy = null;
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getTask(): ?Task
+    {
+        return $this->task;
+    }
+
+    public function setTask(?Task $task): static
+    {
+        $this->task = $task;
+
+        return $this;
+    }
+
+    public function getOriginalName(): ?string
+    {
+        return $this->originalName;
+    }
+
+    public function setOriginalName(string $originalName): static
+    {
+        $this->originalName = $originalName;
+
+        return $this;
+    }
+
+    public function getFileName(): ?string
+    {
+        return $this->fileName;
+    }
+
+    public function setFileName(?string $fileName): static
+    {
+        $this->fileName = $fileName;
+
+        return $this;
+    }
+
+    public function getSharePath(): ?string
+    {
+        return $this->sharePath;
+    }
+
+    public function setSharePath(?string $sharePath): static
+    {
+        $this->sharePath = $sharePath;
+
+        return $this;
+    }
+
+    public function isShareLink(): bool
+    {
+        return null !== $this->sharePath;
+    }
+
+    public function getMimeType(): ?string
+    {
+        return $this->mimeType;
+    }
+
+    public function setMimeType(string $mimeType): static
+    {
+        $this->mimeType = $mimeType;
+
+        return $this;
+    }
+
+    public function getSize(): ?int
+    {
+        return $this->size;
+    }
+
+    public function setSize(int $size): static
+    {
+        $this->size = $size;
+
+        return $this;
+    }
+
+    public function getCreatedAt(): ?DateTimeImmutable
+    {
+        return $this->createdAt;
+    }
+
+    public function setCreatedAt(DateTimeImmutable $createdAt): static
+    {
+        $this->createdAt = $createdAt;
+
+        return $this;
+    }
+
+    public function getUploadedBy(): ?UserInterface
+    {
+        return $this->uploadedBy;
+    }
+
+    public function setUploadedBy(?UserInterface $uploadedBy): static
+    {
+        $this->uploadedBy = $uploadedBy;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskEffort.php

@@ -0,0 +1,58 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskEffortRepository;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_effort:read']],
+    denormalizationContext: ['groups' => ['task_effort:write']],
+    order: ['label' => 'ASC'],
+)]
+#[ORM\Entity(repositoryClass: DoctrineTaskEffortRepository::class)]
+class TaskEffort
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_effort:read', 'task:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 50)]
+    #[Groups(['task_effort:read', 'task_effort:write', 'task:read'])]
+    private ?string $label = null;
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $label): static
+    {
+        $this->label = $label;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskGroup.php

@@ -0,0 +1,128 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Doctrine\Orm\Filter\BooleanFilter;
+use ApiPlatform\Doctrine\Orm\Filter\SearchFilter;
+use ApiPlatform\Metadata\ApiFilter;
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskGroupRepository;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_group:read']],
+    denormalizationContext: ['groups' => ['task_group:write']],
+    order: ['title' => 'ASC'],
+)]
+#[ApiFilter(SearchFilter::class, properties: ['project' => 'exact'])]
+#[ApiFilter(BooleanFilter::class, properties: ['archived'])]
+#[ORM\Entity(repositoryClass: DoctrineTaskGroupRepository::class)]
+class TaskGroup
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_group:read', 'task:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task_group:read', 'task_group:write', 'task:read'])]
+    private ?string $title = null;
+
+    #[ORM\Column(type: 'text', nullable: true)]
+    #[Groups(['task_group:read', 'task_group:write'])]
+    private ?string $description = null;
+
+    #[ORM\Column(length: 7)]
+    #[Groups(['task_group:read', 'task_group:write', 'task:read'])]
+    private ?string $color = '#222783';
+
+    #[ORM\ManyToOne(targetEntity: Project::class)]
+    #[ORM\JoinColumn(nullable: false, onDelete: 'CASCADE')]
+    #[Groups(['task_group:read', 'task_group:write'])]
+    private ?Project $project = null;
+
+    #[ORM\Column(type: 'boolean')]
+    #[Groups(['task_group:read', 'task_group:write', 'task:read'])]
+    private bool $archived = false;
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getTitle(): ?string
+    {
+        return $this->title;
+    }
+
+    public function setTitle(string $title): static
+    {
+        $this->title = $title;
+
+        return $this;
+    }
+
+    public function getDescription(): ?string
+    {
+        return $this->description;
+    }
+
+    public function setDescription(?string $description): static
+    {
+        $this->description = $description;
+
+        return $this;
+    }
+
+    public function getColor(): ?string
+    {
+        return $this->color;
+    }
+
+    public function setColor(string $color): static
+    {
+        $this->color = $color;
+
+        return $this;
+    }
+
+    public function getProject(): ?Project
+    {
+        return $this->project;
+    }
+
+    public function setProject(?Project $project): static
+    {
+        $this->project = $project;
+
+        return $this;
+    }
+
+    public function isArchived(): bool
+    {
+        return $this->archived;
+    }
+
+    public function setArchived(bool $archived): static
+    {
+        $this->archived = $archived;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskPriority.php

@@ -0,0 +1,74 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskPriorityRepository;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_priority:read']],
+    denormalizationContext: ['groups' => ['task_priority:write']],
+    order: ['label' => 'ASC'],
+)]
+#[ORM\Entity(repositoryClass: DoctrineTaskPriorityRepository::class)]
+class TaskPriority
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_priority:read', 'task:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task_priority:read', 'task_priority:write', 'task:read'])]
+    private ?string $label = null;
+
+    #[ORM\Column(length: 7)]
+    #[Groups(['task_priority:read', 'task_priority:write', 'task:read'])]
+    private ?string $color = '#222783';
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $label): static
+    {
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getColor(): ?string
+    {
+        return $this->color;
+    }
+
+    public function setColor(string $color): static
+    {
+        $this->color = $color;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskRecurrence.php

@@ -0,0 +1,197 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Domain\Enum\RecurrenceType;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskRecurrenceRepository;
+use DateTimeImmutable;
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\Common\Collections\Collection;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_recurrence:read']],
+    denormalizationContext: ['groups' => ['task_recurrence:write']],
+)]
+#[ORM\Entity(repositoryClass: DoctrineTaskRecurrenceRepository::class)]
+class TaskRecurrence
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_recurrence:read', 'task:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(type: 'string', enumType: RecurrenceType::class)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?RecurrenceType $type = null;
+
+    #[ORM\Column(type: 'integer')]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private int $interval = 1;
+
+    #[ORM\Column(type: 'json', nullable: true)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?array $daysOfWeek = null;
+
+    #[ORM\Column(type: 'integer', nullable: true)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?int $dayOfMonth = null;
+
+    #[ORM\Column(type: 'integer', nullable: true)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?int $weekOfMonth = null;
+
+    #[ORM\Column(type: 'date_immutable', nullable: true)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?DateTimeImmutable $endDate = null;
+
+    #[ORM\Column(type: 'integer', nullable: true)]
+    #[Groups(['task_recurrence:read', 'task_recurrence:write', 'task:read'])]
+    private ?int $maxOccurrences = null;
+
+    #[ORM\Column(type: 'integer')]
+    #[Groups(['task_recurrence:read'])]
+    private int $occurrenceCount = 0;
+
+    #[ORM\Version]
+    #[ORM\Column(type: 'integer')]
+    private int $version = 1;
+
+    /** @var Collection<int, Task> */
+    #[ORM\OneToMany(targetEntity: Task::class, mappedBy: 'recurrence')]
+    private Collection $tasks;
+
+    public function __construct()
+    {
+        $this->tasks = new ArrayCollection();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getType(): ?RecurrenceType
+    {
+        return $this->type;
+    }
+
+    public function setType(RecurrenceType $type): static
+    {
+        $this->type = $type;
+
+        return $this;
+    }
+
+    public function getInterval(): int
+    {
+        return $this->interval;
+    }
+
+    public function setInterval(int $interval): static
+    {
+        $this->interval = $interval;
+
+        return $this;
+    }
+
+    public function getDaysOfWeek(): ?array
+    {
+        return $this->daysOfWeek;
+    }
+
+    public function setDaysOfWeek(?array $daysOfWeek): static
+    {
+        $this->daysOfWeek = $daysOfWeek;
+
+        return $this;
+    }
+
+    public function getDayOfMonth(): ?int
+    {
+        return $this->dayOfMonth;
+    }
+
+    public function setDayOfMonth(?int $dayOfMonth): static
+    {
+        $this->dayOfMonth = $dayOfMonth;
+
+        return $this;
+    }
+
+    public function getWeekOfMonth(): ?int
+    {
+        return $this->weekOfMonth;
+    }
+
+    public function setWeekOfMonth(?int $weekOfMonth): static
+    {
+        $this->weekOfMonth = $weekOfMonth;
+
+        return $this;
+    }
+
+    public function getEndDate(): ?DateTimeImmutable
+    {
+        return $this->endDate;
+    }
+
+    public function setEndDate(?DateTimeImmutable $endDate): static
+    {
+        $this->endDate = $endDate;
+
+        return $this;
+    }
+
+    public function getMaxOccurrences(): ?int
+    {
+        return $this->maxOccurrences;
+    }
+
+    public function setMaxOccurrences(?int $maxOccurrences): static
+    {
+        $this->maxOccurrences = $maxOccurrences;
+
+        return $this;
+    }
+
+    public function getOccurrenceCount(): int
+    {
+        return $this->occurrenceCount;
+    }
+
+    public function getVersion(): int
+    {
+        return $this->version;
+    }
+
+    /** @return Collection<int, Task> */
+    public function getTasks(): Collection
+    {
+        return $this->tasks;
+    }
+
+    public function incrementOccurrenceCount(): static
+    {
+        ++$this->occurrenceCount;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskStatus.php

@@ -0,0 +1,143 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Domain\Enum\StatusCategory;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskStatusRepository;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+use Symfony\Component\Validator\Constraints as Assert;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_status:read']],
+    denormalizationContext: ['groups' => ['task_status:write']],
+    order: ['position' => 'ASC'],
+)]
+#[ORM\Entity(repositoryClass: DoctrineTaskStatusRepository::class)]
+class TaskStatus
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_status:read', 'task:read', 'workflow:read', 'project:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read', 'workflow:read', 'project:read'])]
+    private ?string $label = null;
+
+    #[ORM\Column(length: 7)]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read', 'workflow:read', 'project:read'])]
+    private ?string $color = '#222783';
+
+    #[ORM\Column]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read', 'workflow:read', 'project:read'])]
+    private ?int $position = 0;
+
+    #[ORM\Column(type: 'boolean')]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read', 'workflow:read', 'project:read'])]
+    private bool $isFinal = false;
+
+    #[ORM\ManyToOne(targetEntity: Workflow::class, inversedBy: 'statuses')]
+    #[ORM\JoinColumn(nullable: false, onDelete: 'CASCADE')]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read'])]
+    #[Assert\NotNull]
+    private ?Workflow $workflow = null;
+
+    #[ORM\Column(type: 'string', length: 32, enumType: StatusCategory::class)]
+    #[Groups(['task_status:read', 'task_status:write', 'task:read', 'workflow:read', 'project:read'])]
+    #[Assert\NotNull]
+    private ?StatusCategory $category = null;
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $label): static
+    {
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getColor(): ?string
+    {
+        return $this->color;
+    }
+
+    public function setColor(string $color): static
+    {
+        $this->color = $color;
+
+        return $this;
+    }
+
+    public function getPosition(): ?int
+    {
+        return $this->position;
+    }
+
+    public function setPosition(int $position): static
+    {
+        $this->position = $position;
+
+        return $this;
+    }
+
+    public function getIsFinal(): bool
+    {
+        return $this->isFinal;
+    }
+
+    public function setIsFinal(bool $isFinal): static
+    {
+        $this->isFinal = $isFinal;
+
+        return $this;
+    }
+
+    public function getWorkflow(): ?Workflow
+    {
+        return $this->workflow;
+    }
+
+    public function setWorkflow(?Workflow $workflow): static
+    {
+        $this->workflow = $workflow;
+
+        return $this;
+    }
+
+    public function getCategory(): ?StatusCategory
+    {
+        return $this->category;
+    }
+
+    public function setCategory(StatusCategory $category): static
+    {
+        $this->category = $category;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/TaskTag.php

@@ -0,0 +1,76 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineTaskTagRepository;
+use App\Shared\Domain\Contract\TaskTagInterface;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Component\Serializer\Attribute\Groups;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
+    ],
+    normalizationContext: ['groups' => ['task_tag:read']],
+    denormalizationContext: ['groups' => ['task_tag:write']],
+    order: ['label' => 'ASC'],
+)]
+#[ORM\Entity(repositoryClass: DoctrineTaskTagRepository::class)]
+#[ORM\Table(name: 'task_type')]
+class TaskTag implements TaskTagInterface
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['task_tag:read', 'task:read', 'time_entry:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 255)]
+    #[Groups(['task_tag:read', 'task_tag:write', 'task:read', 'time_entry:read'])]
+    private ?string $label = null;
+
+    #[ORM\Column(length: 7)]
+    #[Groups(['task_tag:read', 'task_tag:write', 'task:read', 'time_entry:read'])]
+    private ?string $color = '#222783';
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getLabel(): ?string
+    {
+        return $this->label;
+    }
+
+    public function setLabel(string $label): static
+    {
+        $this->label = $label;
+
+        return $this;
+    }
+
+    public function getColor(): ?string
+    {
+        return $this->color;
+    }
+
+    public function setColor(string $color): static
+    {
+        $this->color = $color;
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Entity/Workflow.php

@@ -0,0 +1,131 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Entity;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Delete;
+use ApiPlatform\Metadata\Get;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\Patch;
+use ApiPlatform\Metadata\Post;
+use App\Module\ProjectManagement\Infrastructure\ApiPlatform\State\WorkflowDeleteProcessor;
+use App\Module\ProjectManagement\Infrastructure\Doctrine\DoctrineWorkflowRepository;
+use Doctrine\Common\Collections\ArrayCollection;
+use Doctrine\Common\Collections\Collection;
+use Doctrine\ORM\Mapping as ORM;
+use Symfony\Bridge\Doctrine\Validator\Constraints\UniqueEntity;
+use Symfony\Component\Serializer\Attribute\Groups;
+use Symfony\Component\Validator\Constraints as Assert;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')", processor: WorkflowDeleteProcessor::class),
+    ],
+    normalizationContext: ['groups' => ['workflow:read']],
+    denormalizationContext: ['groups' => ['workflow:write']],
+    order: ['position' => 'ASC'],
+)]
+#[ORM\Entity(repositoryClass: DoctrineWorkflowRepository::class)]
+#[UniqueEntity(fields: ['name'], message: 'Ce nom de workflow est déjà utilisé.')]
+class Workflow
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column]
+    #[Groups(['workflow:read', 'project:read', 'task_status:read'])]
+    private ?int $id = null;
+
+    #[ORM\Column(length: 255, unique: true)]
+    #[Groups(['workflow:read', 'workflow:write', 'project:read'])]
+    #[Assert\NotBlank]
+    private ?string $name = null;
+
+    #[ORM\Column(type: 'boolean', options: ['default' => false])]
+    #[Groups(['workflow:read', 'workflow:write'])]
+    private bool $isDefault = false;
+
+    #[ORM\Column(type: 'integer', options: ['default' => 0])]
+    #[Groups(['workflow:read', 'workflow:write'])]
+    private int $position = 0;
+
+    /** @var Collection<int, TaskStatus> */
+    #[ORM\OneToMany(targetEntity: TaskStatus::class, mappedBy: 'workflow', cascade: ['persist', 'remove'], orphanRemoval: true)]
+    #[ORM\OrderBy(['position' => 'ASC'])]
+    #[Groups(['workflow:read', 'project:read'])]
+    private Collection $statuses;
+
+    public function __construct()
+    {
+        $this->statuses = new ArrayCollection();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getName(): ?string
+    {
+        return $this->name;
+    }
+
+    public function setName(string $name): static
+    {
+        $this->name = $name;
+
+        return $this;
+    }
+
+    public function isDefault(): bool
+    {
+        return $this->isDefault;
+    }
+
+    public function setIsDefault(bool $isDefault): static
+    {
+        $this->isDefault = $isDefault;
+
+        return $this;
+    }
+
+    public function getPosition(): int
+    {
+        return $this->position;
+    }
+
+    public function setPosition(int $position): static
+    {
+        $this->position = $position;
+
+        return $this;
+    }
+
+    /** @return Collection<int, TaskStatus> */
+    public function getStatuses(): Collection
+    {
+        return $this->statuses;
+    }
+
+    public function addStatus(TaskStatus $status): static
+    {
+        if (!$this->statuses->contains($status)) {
+            $this->statuses->add($status);
+            $status->setWorkflow($this);
+        }
+
+        return $this;
+    }
+
+    public function removeStatus(TaskStatus $status): static
+    {
+        $this->statuses->removeElement($status);
+
+        return $this;
+    }
+}

src/Module/ProjectManagement/Domain/Enum/RecurrenceType.php

@@ -0,0 +1,13 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Enum;
+
+enum RecurrenceType: string
+{
+    case Daily   = 'daily';
+    case Weekly  = 'weekly';
+    case Monthly = 'monthly';
+    case Yearly  = 'yearly';
+}

src/Module/ProjectManagement/Domain/Enum/StatusCategory.php

@@ -0,0 +1,14 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Enum;
+
+enum StatusCategory: string
+{
+    case Todo       = 'todo';
+    case InProgress = 'in_progress';
+    case Blocked    = 'blocked';
+    case Review     = 'review';
+    case Done       = 'done';
+}

src/Module/ProjectManagement/Domain/Repository/ProjectRepositoryInterface.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\Project;
+
+interface ProjectRepositoryInterface
+{
+    public function findById(int $id): ?Project;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return Project[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+}

src/Module/ProjectManagement/Domain/Repository/TaskEffortRepositoryInterface.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskEffort;
+
+interface TaskEffortRepositoryInterface
+{
+    public function findById(int $id): ?TaskEffort;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return TaskEffort[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+}

src/Module/ProjectManagement/Domain/Repository/TaskGroupRepositoryInterface.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskGroup;
+
+interface TaskGroupRepositoryInterface
+{
+    public function findById(int $id): ?TaskGroup;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return TaskGroup[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+}

src/Module/ProjectManagement/Domain/Repository/TaskPriorityRepositoryInterface.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskPriority;
+
+interface TaskPriorityRepositoryInterface
+{
+    public function findById(int $id): ?TaskPriority;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return TaskPriority[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+}

src/Module/ProjectManagement/Domain/Repository/TaskRecurrenceRepositoryInterface.php

@@ -0,0 +1,12 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskRecurrence;
+
+interface TaskRecurrenceRepositoryInterface
+{
+    public function findById(int $id): ?TaskRecurrence;
+}

src/Module/ProjectManagement/Domain/Repository/TaskRepositoryInterface.php

@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\Project;
+use App\Module\ProjectManagement\Domain\Entity\Task;
+use Doctrine\ORM\QueryBuilder;
+
+interface TaskRepositoryInterface
+{
+    public function createQueryBuilder(string $alias, ?string $indexBy = null): QueryBuilder;
+
+    public function findById(int $id): ?Task;
+
+    /**
+     * Returns the max task number for a project, using an advisory lock
+     * to prevent race conditions when creating tasks concurrently.
+     */
+    public function findMaxNumberByProjectForUpdate(Project $project): int;
+}

src/Module/ProjectManagement/Domain/Repository/TaskStatusRepositoryInterface.php

@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskStatus;
+
+interface TaskStatusRepositoryInterface
+{
+    public function findById(int $id): ?TaskStatus;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return TaskStatus[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+
+    public function findFirstNonFinal(): ?TaskStatus;
+}

src/Module/ProjectManagement/Domain/Repository/TaskTagRepositoryInterface.php

@@ -0,0 +1,20 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\TaskTag;
+
+interface TaskTagRepositoryInterface
+{
+    public function findById(int $id): ?TaskTag;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return TaskTag[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+}

src/Module/ProjectManagement/Domain/Repository/WorkflowRepositoryInterface.php

@@ -0,0 +1,22 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\ProjectManagement\Domain\Repository;
+
+use App\Module\ProjectManagement\Domain\Entity\Workflow;
+
+interface WorkflowRepositoryInterface
+{
+    public function findById(int $id): ?Workflow;
+
+    /**
+     * @param array<string, mixed>       $criteria
+     * @param null|array<string, string> $orderBy
+     *
+     * @return Workflow[]
+     */
+    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
+
+    public function findDefault(): ?Workflow;
+}