chore: bump version to v0.2.5

chore : bump version to 0.25 and fix MCP session directory
Move MCP session storage from cache dir to var/mcp-sessions so it survives cache:clear operations. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-17 09:36:25 +00:00 · 2026-03-17 10:35:00 +01:00
93 changed files with 824 additions and 780 deletions
--- a/.env
+++ b/.env
@@ -1,5 +1,5 @@
 APP_ENV=dev
-APP_SECRET="change_me_in_env_local"
+APP_SECRET="a64f5614357bf56aecb1d7470e431535"
 APP_DEBUG=1

 DEFAULT_URI=http://localhost/
@@ -11,7 +11,7 @@ CORS_ALLOW_ORIGIN='^https?://(localhost|127.0.0.1)(:[0-9]+)?$'
 ###> lexik/jwt-authentication-bundle ###
 JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
 JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
-JWT_PASSPHRASE=change_me_in_env_local
+JWT_PASSPHRASE=c2dbeec8fa8255bdab24e88b9fc1e57927740c429ae3b930d03e51b92e13a85f
 JWT_COOKIE_SECURE=0
 JWT_TOKEN_TTL=86400
 JWT_COOKIE_TTL=86400
@@ -20,4 +20,4 @@ JWT_COOKIE_TTL=86400

 DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/${POSTGRES_DB}?serverVersion=16&charset=utf8"

-ENCRYPTION_KEY=change_me_in_env_local
+ENCRYPTION_KEY=aaaaaaaaa
--- a/.env.example
+++ b/.env.example
@@ -1,99 +0,0 @@
-###############################################################################
-# Lesstime — Fichier d'environnement de reference
-#
-# Copiez ce fichier en .env.local et remplissez les valeurs sensibles.
-# Les valeurs par defaut dans .env suffisent pour le developpement ;
-# seuls les secrets (APP_SECRET, JWT_PASSPHRASE, ENCRYPTION_KEY) doivent
-# etre definis dans .env.local.
-#
-# Ne commitez JAMAIS de vrais secrets dans .env ou .env.example.
-###############################################################################
-
-# ===========================================================================
-# App
-# ===========================================================================
-
-# Environnement Symfony : dev, test, prod
-APP_ENV=dev
-
-# Secret applicatif Symfony (32 chars hex) — a generer pour chaque installation
-# Generer avec : php -r "echo bin2hex(random_bytes(16));"
-APP_SECRET="change_me_in_env_local"
-
-# Active/desactive le mode debug (1 = oui, 0 = non)
-APP_DEBUG=1
-
-# URI par defaut de l'application (utilise pour les liens absolus)
-DEFAULT_URI=http://localhost/
-
-# ===========================================================================
-# CORS (nelmio/cors-bundle)
-# ===========================================================================
-
-# Origines autorisees pour les requetes cross-origin (regex)
-CORS_ALLOW_ORIGIN='^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$'
-
-# ===========================================================================
-# JWT (lexik/jwt-authentication-bundle)
-# ===========================================================================
-
-# Chemin vers la cle privee RSA pour signer les tokens JWT
-JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
-
-# Chemin vers la cle publique RSA pour verifier les tokens JWT
-JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
-
-# Passphrase de la cle privee JWT — a generer pour chaque installation
-# Generer avec : php -r "echo bin2hex(random_bytes(32));"
-JWT_PASSPHRASE=change_me_in_env_local
-
-# Cookie securise (1 = HTTPS uniquement, 0 = HTTP autorise — dev seulement)
-JWT_COOKIE_SECURE=0
-
-# Duree de vie du token JWT en secondes (86400 = 24h)
-JWT_TOKEN_TTL=86400
-
-# Duree de vie du cookie JWT en secondes (86400 = 24h)
-JWT_COOKIE_TTL=86400
-
-# ===========================================================================
-# Base de donnees (Doctrine / PostgreSQL)
-# ===========================================================================
-
-# Les variables POSTGRES_* sont definies dans docker/.env.docker
-# et injectees automatiquement par Docker Compose.
-# DATABASE_URL est construite a partir de ces variables.
-DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/${POSTGRES_DB}?serverVersion=16&charset=utf8"
-
-# ===========================================================================
-# Chiffrement
-# ===========================================================================
-
-# Cle de chiffrement pour les donnees sensibles (64 chars hex = 256 bits)
-# Generer avec : php -r "echo bin2hex(random_bytes(32));"
-ENCRYPTION_KEY=change_me_in_env_local
-
-# ===========================================================================
-# Docker (docker/.env.docker)
-#
-# Ces variables sont lues par Docker Compose. Voir docker/.env.docker
-# pour les valeurs par defaut. Creez docker/.env.docker.local pour
-# surcharger localement.
-# ===========================================================================
-
-# DOCKER_APP_NAME=lesstime
-# DOCKER_PHP_VERSION=8.4.6
-# DOCKER_NODE_VERSION=24.12.0
-# APP_USER=www-data
-# POSTGRES_DB=lesstime
-# POSTGRES_USER=root
-# POSTGRES_PASSWORD=root
-# POSTGRES_PORT=5435
-# XDEBUG_CLIENT_HOST=host.docker.internal
-
-# ===========================================================================
-# Frontend (frontend/.env)
-# ===========================================================================
-
-# Base URL de l'API pour le client Nuxt (relative, proxifiee par Nginx)
-# NUXT_PUBLIC_API_BASE=/api
--- a/.gitea/workflows/release-artefact.yml
+++ b/.gitea/workflows/release-artefact.yml
@@ -51,6 +51,7 @@ jobs:
            migrations \
            public \
            src \
+            templates \
            vendor \
            composer.json \
            composer.lock \
--- a/.gitignore
+++ b/.gitignore
@@ -22,11 +22,3 @@
 ###> lexik/jwt-authentication-bundle ###
 /config/jwt/*.pem
 ###< lexik/jwt-authentication-bundle ###
-
-###> ide ###
-.idea/
-###< ide ###
-
-###> docker local ###
-docker/.env.docker.local
-###< docker local ###
--- a/.idea/.gitignore
+++ b/.idea/.gitignore
@@ -0,0 +1,10 @@
+# Default ignored files
+/shelf/
+/workspace.xml
+# Ignored default folder with query files
+/queries/
+# Datasource local storage ignored files
+/dataSources/
+/dataSources.local.xml
+# Editor-based HTTP Client requests
+/httpRequests/
--- a/.idea/Lesstime.iml
+++ b/.idea/Lesstime.iml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="WEB_MODULE" version="4">
+  <component name="NewModuleRootManager">
+    <content url="file://$MODULE_DIR$" />
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>
--- a/.idea/db-forest-config.xml
+++ b/.idea/db-forest-config.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="db-tree-configuration">
+    <option name="data" value="----------------------------------------&#10;1:0:9cad43df-2147-4989-b7a4-443067034884&#10;2:0:ae622167-c834-4e7b-87a5-c1721036f5dc&#10;3:0:f407a514-c6b4-4b26-9555-445a85892502&#10;4:0:09e221b8-067a-488b-9c1d-4e155a333079&#10;" />
+  </component>
+</project>
--- a/.idea/material_theme_project_new.xml
+++ b/.idea/material_theme_project_new.xml
@@ -0,0 +1,10 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="MaterialThemeProjectNewConfig">
+    <option name="metadata">
+      <MTProjectMetadataState>
+        <option name="userId" value="386cba74:19cc24e9181:-799b" />
+      </MTProjectMetadataState>
+    </option>
+  </component>
+</project>
--- a/.idea/modules.xml
+++ b/.idea/modules.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="ProjectModuleManager">
+    <modules>
+      <module fileurl="file://$PROJECT_DIR$/.idea/Lesstime.iml" filepath="$PROJECT_DIR$/.idea/Lesstime.iml" />
+    </modules>
+  </component>
+</project>
--- a/.idea/php.xml
+++ b/.idea/php.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="MessDetectorOptionsConfiguration">
+    <option name="transferred" value="true" />
+  </component>
+  <component name="PHPCSFixerOptionsConfiguration">
+    <option name="transferred" value="true" />
+  </component>
+  <component name="PHPCodeSnifferOptionsConfiguration">
+    <option name="highlightLevel" value="WARNING" />
+    <option name="transferred" value="true" />
+  </component>
+  <component name="PhpProjectSharedConfiguration" php_language_level="8.4" />
+  <component name="PhpStanOptionsConfiguration">
+    <option name="transferred" value="true" />
+  </component>
+  <component name="PsalmOptionsConfiguration">
+    <option name="transferred" value="true" />
+  </component>
+</project>
--- a/.idea/vcs.xml
+++ b/.idea/vcs.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="VcsDirectoryMappings">
+    <mapping directory="$PROJECT_DIR$" vcs="Git" />
+  </component>
+</project>
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -12,7 +12,7 @@ Application de gestion de projet. Monorepo Symfony 8 (API Platform 4) + Nuxt 4.
 ## Structure

 ```
-src/Entity/          # Entités Doctrine (User, Client, Project, Task, TaskStatus, TaskEffort, TaskPriority, TaskTag, TaskGroup, TimeEntry, GiteaConfiguration, ClientTicket, Notification, TaskDocument, BookStackConfiguration, TaskBookStackLink)
+src/Entity/          # Entités Doctrine (User, Client, Project, Task, TaskStatus, TaskEffort, TaskPriority, TaskTag, TaskGroup, TimeEntry, GiteaConfiguration, ClientTicket, Notification, TaskDocument)
 src/ApiResource/     # Ressources API Platform (si découplées des entités)
 src/State/           # Providers et Processors API Platform (MeProvider, AppVersionProvider, ActiveTimeEntryProvider, UserPasswordHasherProcessor, TaskNumberProcessor, ClientTicket*Provider/Processor, NotificationProvider, Gitea*Provider, Gitea*Processor)
 src/Service/         # Services métier (NotificationService)
--- a/composer.json
+++ b/composer.json
@@ -29,10 +29,10 @@
        "symfony/monolog-bundle": "^4.0",
        "symfony/property-access": "8.0.*",
        "symfony/property-info": "8.0.*",
-        "symfony/rate-limiter": "8.0.*",
        "symfony/runtime": "8.0.*",
        "symfony/security-bundle": "8.0.*",
        "symfony/serializer": "8.0.*",
+        "symfony/twig-bundle": "8.0.*",
        "symfony/validator": "8.0.*",
        "symfony/yaml": "8.0.*"
    },
@@ -91,6 +91,8 @@
    "require-dev": {
        "doctrine/doctrine-fixtures-bundle": "^4.3",
        "friendsofphp/php-cs-fixer": "^3.94",
-        "phpunit/phpunit": "^13.0"
+        "phpunit/phpunit": "^13.0",
+        "symfony/browser-kit": "8.0.*",
+        "symfony/css-selector": "8.0.*"
    }
 }
--- a/composer.lock
+++ b/composer.lock
@@ -4,7 +4,7 @@
        "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
        "This file is @generated automatically"
    ],
-    "content-hash": "1a611b09459bb0625242a9a0ea223107",
+    "content-hash": "6fd67ba307d74fa0bcb9e6b9bf72f8bc",
    "packages": [
        {
            "name": "api-platform/doctrine-common",
@@ -6048,77 +6048,6 @@
            ],
            "time": "2025-12-08T08:00:13+00:00"
        },
-        {
-            "name": "symfony/options-resolver",
-            "version": "v8.0.0",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/symfony/options-resolver.git",
-                "reference": "d2b592535ffa6600c265a3893a7f7fd2bad82dd7"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/options-resolver/zipball/d2b592535ffa6600c265a3893a7f7fd2bad82dd7",
-                "reference": "d2b592535ffa6600c265a3893a7f7fd2bad82dd7",
-                "shasum": ""
-            },
-            "require": {
-                "php": ">=8.4",
-                "symfony/deprecation-contracts": "^2.5|^3"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "Symfony\\Component\\OptionsResolver\\": ""
-                },
-                "exclude-from-classmap": [
-                    "/Tests/"
-                ]
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Fabien Potencier",
-                    "email": "fabien@symfony.com"
-                },
-                {
-                    "name": "Symfony Community",
-                    "homepage": "https://symfony.com/contributors"
-                }
-            ],
-            "description": "Provides an improved replacement for the array_replace PHP function",
-            "homepage": "https://symfony.com",
-            "keywords": [
-                "config",
-                "configuration",
-                "options"
-            ],
-            "support": {
-                "source": "https://github.com/symfony/options-resolver/tree/v8.0.0"
-            },
-            "funding": [
-                {
-                    "url": "https://symfony.com/sponsor",
-                    "type": "custom"
-                },
-                {
-                    "url": "https://github.com/fabpot",
-                    "type": "github"
-                },
-                {
-                    "url": "https://github.com/nicolas-grekas",
-                    "type": "github"
-                },
-                {
-                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
-                    "type": "tidelift"
-                }
-            ],
-            "time": "2025-11-12T15:55:31+00:00"
-        },
        {
            "name": "symfony/password-hasher",
            "version": "v8.0.6",
@@ -6948,80 +6877,6 @@
            ],
            "time": "2026-01-03T23:40:55+00:00"
        },
-        {
-            "name": "symfony/rate-limiter",
-            "version": "v8.0.7",
-            "source": {
-                "type": "git",
-                "url": "https://github.com/symfony/rate-limiter.git",
-                "reference": "1f8159c50b55e78810f5a8f60889d0b6b3a11deb"
-            },
-            "dist": {
-                "type": "zip",
-                "url": "https://api.github.com/repos/symfony/rate-limiter/zipball/1f8159c50b55e78810f5a8f60889d0b6b3a11deb",
-                "reference": "1f8159c50b55e78810f5a8f60889d0b6b3a11deb",
-                "shasum": ""
-            },
-            "require": {
-                "php": ">=8.4",
-                "symfony/options-resolver": "^7.4|^8.0"
-            },
-            "require-dev": {
-                "psr/cache": "^1.0|^2.0|^3.0",
-                "symfony/lock": "^7.4|^8.0"
-            },
-            "type": "library",
-            "autoload": {
-                "psr-4": {
-                    "Symfony\\Component\\RateLimiter\\": ""
-                },
-                "exclude-from-classmap": [
-                    "/Tests/"
-                ]
-            },
-            "notification-url": "https://packagist.org/downloads/",
-            "license": [
-                "MIT"
-            ],
-            "authors": [
-                {
-                    "name": "Wouter de Jong",
-                    "email": "wouter@wouterj.nl"
-                },
-                {
-                    "name": "Symfony Community",
-                    "homepage": "https://symfony.com/contributors"
-                }
-            ],
-            "description": "Provides a Token Bucket implementation to rate limit input and output in your application",
-            "homepage": "https://symfony.com",
-            "keywords": [
-                "limiter",
-                "rate-limiter"
-            ],
-            "support": {
-                "source": "https://github.com/symfony/rate-limiter/tree/v8.0.7"
-            },
-            "funding": [
-                {
-                    "url": "https://symfony.com/sponsor",
-                    "type": "custom"
-                },
-                {
-                    "url": "https://github.com/fabpot",
-                    "type": "github"
-                },
-                {
-                    "url": "https://github.com/nicolas-grekas",
-                    "type": "github"
-                },
-                {
-                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
-                    "type": "tidelift"
-                }
-            ],
-            "time": "2026-03-04T13:55:34+00:00"
-        },
        {
            "name": "symfony/routing",
            "version": "v8.0.6",
@@ -7947,6 +7802,197 @@
            ],
            "time": "2025-07-15T13:41:35+00:00"
        },
+        {
+            "name": "symfony/twig-bridge",
+            "version": "v8.0.7",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/twig-bridge.git",
+                "reference": "e0539400f53d8305945c06eba7e8df007402f5e2"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/twig-bridge/zipball/e0539400f53d8305945c06eba7e8df007402f5e2",
+                "reference": "e0539400f53d8305945c06eba7e8df007402f5e2",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/translation-contracts": "^2.5|^3",
+                "twig/twig": "^3.21"
+            },
+            "conflict": {
+                "phpdocumentor/reflection-docblock": "<5.2|>=7",
+                "phpdocumentor/type-resolver": "<1.5.1",
+                "symfony/form": "<7.4.4|>8.0,<8.0.4"
+            },
+            "require-dev": {
+                "egulias/email-validator": "^2.1.10|^3|^4",
+                "league/html-to-markdown": "^5.0",
+                "phpdocumentor/reflection-docblock": "^5.2|^6.0",
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/asset-mapper": "^7.4|^8.0",
+                "symfony/console": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/emoji": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/form": "^7.4.4|^8.0.4",
+                "symfony/html-sanitizer": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/intl": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/polyfill-intl-icu": "^1.0",
+                "symfony/property-info": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/security-acl": "^2.8|^3.0",
+                "symfony/security-core": "^7.4|^8.0",
+                "symfony/security-csrf": "^7.4|^8.0",
+                "symfony/security-http": "^7.4|^8.0",
+                "symfony/serializer": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/validator": "^7.4|^8.0",
+                "symfony/web-link": "^7.4|^8.0",
+                "symfony/workflow": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0",
+                "twig/cssinliner-extra": "^3",
+                "twig/inky-extra": "^3",
+                "twig/markdown-extra": "^3"
+            },
+            "type": "symfony-bridge",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bridge\\Twig\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides integration for Twig with various Symfony components",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/twig-bridge/tree/v8.0.7"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-04T15:37:12+00:00"
+        },
+        {
+            "name": "symfony/twig-bundle",
+            "version": "v8.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/twig-bundle.git",
+                "reference": "5a68f2e0e06996514bf04900c3982b93b42487af"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/twig-bundle/zipball/5a68f2e0e06996514bf04900c3982b93b42487af",
+                "reference": "5a68f2e0e06996514bf04900c3982b93b42487af",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": ">=2.1",
+                "php": ">=8.4",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/dependency-injection": "^7.4|^8.0",
+                "symfony/http-foundation": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/twig-bridge": "^7.4|^8.0"
+            },
+            "require-dev": {
+                "symfony/asset": "^7.4|^8.0",
+                "symfony/expression-language": "^7.4|^8.0",
+                "symfony/finder": "^7.4|^8.0",
+                "symfony/form": "^7.4|^8.0",
+                "symfony/framework-bundle": "^7.4|^8.0",
+                "symfony/routing": "^7.4|^8.0",
+                "symfony/runtime": "^7.4|^8.0",
+                "symfony/stopwatch": "^7.4|^8.0",
+                "symfony/translation": "^7.4|^8.0",
+                "symfony/web-link": "^7.4|^8.0",
+                "symfony/yaml": "^7.4|^8.0"
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bundle\\TwigBundle\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides a tight integration of Twig into the Symfony full-stack framework",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/twig-bundle/tree/v8.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-06T12:43:21+00:00"
+        },
        {
            "name": "symfony/type-info",
            "version": "v8.0.7",
@@ -8528,6 +8574,85 @@
            ],
            "time": "2026-02-09T10:14:57+00:00"
        },
+        {
+            "name": "twig/twig",
+            "version": "v3.23.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/twigphp/Twig.git",
+                "reference": "a64dc5d2cc7d6cafb9347f6cd802d0d06d0351c9"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/twigphp/Twig/zipball/a64dc5d2cc7d6cafb9347f6cd802d0d06d0351c9",
+                "reference": "a64dc5d2cc7d6cafb9347f6cd802d0d06d0351c9",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.1.0",
+                "symfony/deprecation-contracts": "^2.5|^3",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-mbstring": "^1.3"
+            },
+            "require-dev": {
+                "phpstan/phpstan": "^2.0",
+                "psr/container": "^1.0|^2.0",
+                "symfony/phpunit-bridge": "^5.4.9|^6.4|^7.0"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/Resources/core.php",
+                    "src/Resources/debug.php",
+                    "src/Resources/escaper.php",
+                    "src/Resources/string_loader.php"
+                ],
+                "psr-4": {
+                    "Twig\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "BSD-3-Clause"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com",
+                    "homepage": "http://fabien.potencier.org",
+                    "role": "Lead Developer"
+                },
+                {
+                    "name": "Twig Team",
+                    "role": "Contributors"
+                },
+                {
+                    "name": "Armin Ronacher",
+                    "email": "armin.ronacher@active-4.com",
+                    "role": "Project Founder"
+                }
+            ],
+            "description": "Twig, the flexible, fast, and secure template language for PHP",
+            "homepage": "https://twig.symfony.com",
+            "keywords": [
+                "templating"
+            ],
+            "support": {
+                "issues": "https://github.com/twigphp/Twig/issues",
+                "source": "https://github.com/twigphp/Twig/tree/v3.23.0"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/twig/twig",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-23T21:00:41+00:00"
+        },
        {
            "name": "webmozart/assert",
            "version": "2.1.6",
@@ -11586,6 +11711,288 @@
            ],
            "time": "2024-10-20T05:08:20+00:00"
        },
+        {
+            "name": "symfony/browser-kit",
+            "version": "v8.0.4",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/browser-kit.git",
+                "reference": "0d998c101e1920fc68572209d1316fec0db728ef"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/browser-kit/zipball/0d998c101e1920fc68572209d1316fec0db728ef",
+                "reference": "0d998c101e1920fc68572209d1316fec0db728ef",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/dom-crawler": "^7.4|^8.0"
+            },
+            "require-dev": {
+                "symfony/css-selector": "^7.4|^8.0",
+                "symfony/http-client": "^7.4|^8.0",
+                "symfony/mime": "^7.4|^8.0",
+                "symfony/process": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\BrowserKit\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Simulates the behavior of a web browser, allowing you to make requests, click on links and submit forms programmatically",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/browser-kit/tree/v8.0.4"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-01-13T13:06:50+00:00"
+        },
+        {
+            "name": "symfony/css-selector",
+            "version": "v8.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/css-selector.git",
+                "reference": "2a178bf80f05dbbe469a337730eba79d61315262"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/css-selector/zipball/2a178bf80f05dbbe469a337730eba79d61315262",
+                "reference": "2a178bf80f05dbbe469a337730eba79d61315262",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\CssSelector\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Jean-François Simon",
+                    "email": "jeanfrancois.simon@sensiolabs.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Converts CSS selectors to XPath expressions",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/css-selector/tree/v8.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-02-17T13:07:04+00:00"
+        },
+        {
+            "name": "symfony/dom-crawler",
+            "version": "v8.0.6",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/dom-crawler.git",
+                "reference": "7f504fe7fb7fa5fee40a653104842cf6f851a6d8"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/dom-crawler/zipball/7f504fe7fb7fa5fee40a653104842cf6f851a6d8",
+                "reference": "7f504fe7fb7fa5fee40a653104842cf6f851a6d8",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/polyfill-ctype": "^1.8",
+                "symfony/polyfill-mbstring": "^1.0"
+            },
+            "require-dev": {
+                "symfony/css-selector": "^7.4|^8.0"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\DomCrawler\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Eases DOM navigation for HTML and XML documents",
+            "homepage": "https://symfony.com",
+            "support": {
+                "source": "https://github.com/symfony/dom-crawler/tree/v8.0.6"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-02-17T13:07:04+00:00"
+        },
+        {
+            "name": "symfony/options-resolver",
+            "version": "v8.0.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/options-resolver.git",
+                "reference": "d2b592535ffa6600c265a3893a7f7fd2bad82dd7"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/options-resolver/zipball/d2b592535ffa6600c265a3893a7f7fd2bad82dd7",
+                "reference": "d2b592535ffa6600c265a3893a7f7fd2bad82dd7",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "symfony/deprecation-contracts": "^2.5|^3"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Component\\OptionsResolver\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "Provides an improved replacement for the array_replace PHP function",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "config",
+                "configuration",
+                "options"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/options-resolver/tree/v8.0.0"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-11-12T15:55:31+00:00"
+        },
        {
            "name": "symfony/process",
            "version": "v8.0.5",
--- a/config/bundles.php
+++ b/config/bundles.php
@@ -12,9 +12,11 @@ use Symfony\AI\McpBundle\McpBundle;
 use Symfony\Bundle\FrameworkBundle\FrameworkBundle;
 use Symfony\Bundle\MonologBundle\MonologBundle;
 use Symfony\Bundle\SecurityBundle\SecurityBundle;
+use Symfony\Bundle\TwigBundle\TwigBundle;

 return [
    FrameworkBundle::class              => ['all' => true],
+    TwigBundle::class                   => ['all' => true],
    SecurityBundle::class               => ['all' => true],
    DoctrineBundle::class               => ['all' => true],
    DoctrineMigrationsBundle::class     => ['all' => true],
--- a/config/packages/api_platform.yaml
+++ b/config/packages/api_platform.yaml
@@ -1,5 +1,5 @@
 api_platform:
-    title: Lesstime API
+    title: Hello API Platform
    version: 1.0.0
    formats:
        jsonld: ['application/ld+json']
--- a/config/packages/security.yaml
+++ b/config/packages/security.yaml
@@ -22,9 +22,6 @@ security:
            pattern: ^/login_check
            stateless: true
            provider: app_user_provider
-            login_throttling:
-                max_attempts: 5
-                interval: '1 minute'
            json_login:
                check_path: /login_check
                username_path: username
--- a/config/packages/twig.yaml
+++ b/config/packages/twig.yaml
@@ -0,0 +1,6 @@
+twig:
+    file_name_pattern: '*.twig'
+
+when@test:
+    twig:
+        strict_variables: true
--- a/config/version.yaml
+++ b/config/version.yaml
@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.2.9'
+    app.version: '0.2.5'
--- a/docker/.env.docker.local
+++ b/docker/.env.docker.local
@@ -0,0 +1,9 @@
+DOCKER_APP_NAME=lesstime
+DOCKER_PHP_VERSION=8.4.6
+DOCKER_NODE_VERSION=24.12.0
+APP_USER=www-data
+POSTGRES_DB=lesstime
+POSTGRES_USER=root
+POSTGRES_PASSWORD=root
+POSTGRES_PORT=5435
+XDEBUG_CLIENT_HOST=192.168.0.124
--- a/frontend/components/admin/AdminClientTicketTab.vue
+++ b/frontend/components/admin/AdminClientTicketTab.vue
@@ -274,22 +274,25 @@ const availableStatusTransitions = computed(() => {
 })

 function getProjectName(iri: string): string {
-    const id = extractIdFromIri(iri)
-    if (!id) return ''
+    const match = iri.match(/\/api\/projects\/(\d+)/)
+    if (!match) return ''
+    const id = Number(match[1])
    return projects.value.find(p => p.id === id)?.name ?? ''
 }

 function getSubmitterName(iri: string | null): string {
    if (!iri) return '-'
-    const id = extractIdFromIri(iri)
-    if (!id) return ''
+    const match = iri.match(/\/api\/users\/(\d+)/)
+    if (!match) return ''
+    const id = Number(match[1])
    return users.value.find(u => u.id === id)?.username ?? ''
 }

 function getSubmitterUser(iri: string | null): UserData | undefined {
    if (!iri) return undefined
-    const id = extractIdFromIri(iri)
-    if (!id) return undefined
+    const match = iri.match(/\/api\/users\/(\d+)/)
+    if (!match) return undefined
+    const id = Number(match[1])
    return users.value.find(u => u.id === id)
 }

--- a/frontend/components/client-ticket/ClientTicketDetailModal.vue
+++ b/frontend/components/client-ticket/ClientTicketDetailModal.vue
@@ -191,7 +191,7 @@
 </template>

 <script setup lang="ts">
-import type { ClientTicket, ClientTicketWrite } from '~/services/dto/client-ticket'
+import type { ClientTicket } from '~/services/dto/client-ticket'
 import type { TaskDocument } from '~/services/dto/task-document'
 import { useTaskDocumentService } from '~/services/task-documents'
 import { useClientTicketService } from '~/services/client-tickets'
@@ -243,7 +243,7 @@ const canEdit = computed(() => {
    if (!sub) return false
    // submittedBy can be an IRI string or an embedded object
    if (typeof sub === 'string') return sub === `/api/users/${userId}`
-    if (typeof sub === 'object' && 'id' in sub) return (sub as { id: number }).id === userId
+    if (typeof sub === 'object' && 'id' in sub) return (sub as any).id === userId
    return false
 })

@@ -270,7 +270,7 @@ async function saveEdit() {
        if (props.ticket.type === 'bug') {
            data.url = editForm.url || null
        }
-        await clientTicketService.update(props.ticket.id, data as Partial<ClientTicketWrite>)
+        await clientTicketService.update(props.ticket.id, data as any)
        isEditing.value = false
        emit('refresh')
    } finally {
--- a/frontend/components/client/ClientDrawer.vue
+++ b/frontend/components/client/ClientDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('clients.editClient') : $t('clients.addClient')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un client' : 'Ajouter un client'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.name"
--- a/frontend/components/project/ProjectDrawer.vue
+++ b/frontend/components/project/ProjectDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('projects.editProject') : $t('projects.addProject')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un projet' : 'Ajouter un projet'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.code"
--- a/frontend/components/task/TaskDrawer.vue
+++ b/frontend/components/task/TaskDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('tasks.editTask') : $t('tasks.addTask')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un ticket' : 'Ajouter un ticket'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.title"
@@ -267,7 +267,7 @@ async function handleArchive() {
    if (timerStore.activeEntry?.task) {
        const taskIri = typeof timerStore.activeEntry.task === 'string'
            ? timerStore.activeEntry.task
-            : (timerStore.activeEntry.task as Task)?.['@id'] ?? `/api/tasks/${(timerStore.activeEntry.task as Task)?.id}`
+            : (timerStore.activeEntry.task as any)?.['@id'] ?? `/api/tasks/${(timerStore.activeEntry.task as any)?.id}`
        if (taskIri === `/api/tasks/${props.task.id}`) {
            await timerStore.stop()
        }
--- a/frontend/components/task/TaskEffortDrawer.vue
+++ b/frontend/components/task/TaskEffortDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskEfforts.editEffort') : $t('taskEfforts.addEffort')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un effort' : 'Ajouter un effort'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.label"
--- a/frontend/components/task/TaskGroupDrawer.vue
+++ b/frontend/components/task/TaskGroupDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskGroups.editGroup') : $t('taskGroups.addGroup')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un groupe' : 'Ajouter un groupe'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.title"
--- a/frontend/components/task/TaskModal.vue
+++ b/frontend/components/task/TaskModal.vue
@@ -24,7 +24,7 @@
                                    {{ task.project.code }}-{{ task.number }}
                                </span>
                                <h2 class="text-lg font-bold tracking-tight text-neutral-900">
-                                    {{ isEditing ? $t('tasks.editTask') : $t('tasks.addTask') }}
+                                    {{ isEditing ? 'Modifier un ticket' : 'Ajouter un ticket' }}
                                </h2>
                            </div>
                            <button
@@ -568,7 +568,7 @@ async function handleArchive() {
    if (timerStore.activeEntry?.task) {
        const taskIri = typeof timerStore.activeEntry.task === 'string'
            ? timerStore.activeEntry.task
-            : (timerStore.activeEntry.task as Task)?.['@id'] ?? `/api/tasks/${(timerStore.activeEntry.task as Task)?.id}`
+            : (timerStore.activeEntry.task as any)?.['@id'] ?? `/api/tasks/${(timerStore.activeEntry.task as any)?.id}`
        if (taskIri === `/api/tasks/${props.task.id}`) {
            await timerStore.stop()
        }
--- a/frontend/components/task/TaskPriorityDrawer.vue
+++ b/frontend/components/task/TaskPriorityDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskPriorities.editPriority') : $t('taskPriorities.addPriority')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier une priorité' : 'Ajouter une priorité'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.label"
--- a/frontend/components/task/TaskStatusDrawer.vue
+++ b/frontend/components/task/TaskStatusDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskStatuses.editStatus') : $t('taskStatuses.addStatus')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un statut' : 'Ajouter un statut'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.label"
--- a/frontend/components/task/TaskTagDrawer.vue
+++ b/frontend/components/task/TaskTagDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskTags.editTag') : $t('taskTags.addTag')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un tag' : 'Ajouter un tag'">
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.label"
--- a/frontend/components/time-tracking/TimeEntryBlock.vue
+++ b/frontend/components/time-tracking/TimeEntryBlock.vue
@@ -1,7 +1,7 @@
 <template>
    <div
        ref="blockEl"
-        class="absolute z-10 cursor-pointer rounded-md text-xs shadow-sm select-none"
+        class="absolute z-10 cursor-pointer rounded-md text-xs text-white shadow-sm select-none"
        :style="blockStyle"
        :class="{ 'opacity-40': isDragSource }"
        @contextmenu.prevent="emit('contextmenu', $event, entry)"
@@ -21,7 +21,7 @@
            <!-- Full display: title + project + type dot + duration -->
            <template v-if="sizeLevel >= 3">
                <div class="flex items-center gap-1">
-                    <div class="font-semibold truncate">{{ entry.title || $t('common.untitled') }}</div>
+                    <div class="font-semibold truncate">{{ entry.title || 'Sans titre' }}</div>
                    <span class="ml-auto shrink-0 text-[10px] tabular-nums opacity-80">{{ duration }}</span>
                </div>
                <div v-if="entry.project" class="truncate text-[10px] opacity-80">{{ entry.project.name }}</div>
@@ -39,13 +39,13 @@

            <!-- Medium: title + duration -->
            <template v-else-if="sizeLevel === 2">
-                <div class="font-semibold truncate">{{ entry.title || $t('common.untitled') }}</div>
+                <div class="font-semibold truncate">{{ entry.title || 'Sans titre' }}</div>
                <div class="text-[10px] tabular-nums opacity-80">{{ duration }}</div>
            </template>

            <!-- Small: title only -->
            <template v-else-if="sizeLevel === 1">
-                <div class="font-semibold truncate text-[10px] leading-tight">{{ entry.title || $t('common.untitled') }}</div>
+                <div class="font-semibold truncate text-[10px] leading-tight">{{ entry.title || 'Sans titre' }}</div>
            </template>

            <!-- Tiny: just a colored bar, no text -->
@@ -119,10 +119,7 @@ const sizeLevel = computed(() => {
 const blockStyle = computed(() => {
    const startMinutes = startDate.value.getHours() * 60 + startDate.value.getMinutes() + resizeTopDeltaMinutes.value
    const topPx = ((startMinutes - props.dayStartHour * 60) / 60) * props.hourHeight
-    const hex = (props.entry.project?.color ?? '#94a3b8').replace('#', '')
-    const r = parseInt(hex.substring(0, 2), 16)
-    const g = parseInt(hex.substring(2, 4), 16)
-    const b = parseInt(hex.substring(4, 6), 16)
+    const bgColor = props.entry.project?.color ?? '#94a3b8'

    const col = props.columnIndex ?? 0
    const total = props.totalColumns ?? 1
@@ -133,8 +130,7 @@ const blockStyle = computed(() => {
    return {
        top: `${topPx}px`,
        height: `${heightPx.value}px`,
-        backgroundColor: `rgb(${Math.round(r + (255 - r) * 0.6)}, ${Math.round(g + (255 - g) * 0.6)}, ${Math.round(b + (255 - b) * 0.6)})`,
-        color: `rgb(${r}, ${g}, ${b})`,
+        backgroundColor: bgColor,
        left: `calc(${leftPercent}% + ${gapPx}px)`,
        width: `calc(${widthPercent}% - ${gapPx * 2}px)`,
    }
--- a/frontend/components/time-tracking/TimeEntryDrawer.vue
+++ b/frontend/components/time-tracking/TimeEntryDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('timeEntries.editEntry') : $t('timeEntries.addEntry')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un temps' : 'Ajouter une Activité'">
        <form class="space-y-4" @submit.prevent="onSubmit">
            <div>
                <label class="mb-1 block text-sm font-semibold text-neutral-700">Titre</label>
@@ -117,7 +117,7 @@
 </template>

 <script setup lang="ts">
-import type { TimeEntry, TimeEntryWrite } from '~/services/dto/time-entry'
+import type { TimeEntry } from '~/services/dto/time-entry'
 import type { UserData } from '~/services/dto/user-data'
 import type { Project } from '~/services/dto/project'
 import type { TaskTag } from '~/services/dto/task-tag'
@@ -257,7 +257,7 @@ async function onSubmit() {
    if (isEditing.value && props.entry) {
        await update(props.entry.id, payload)
    } else {
-        await create(payload as TimeEntryWrite)
+        await create(payload as any)
    }

    emit('saved')
--- a/frontend/components/time-tracking/TimeEntryList.vue
+++ b/frontend/components/time-tracking/TimeEntryList.vue
@@ -1,7 +1,7 @@
 <template>
    <div class="space-y-2">
        <div v-if="entries.length === 0" class="rounded-lg border border-neutral-200 bg-neutral-50 py-12 text-center text-sm text-neutral-400">
-            {{ $t('timeEntries.noEntries') }}
+            Aucune activité pour cette période
        </div>

        <div
@@ -20,7 +20,7 @@
            <div class="min-w-0 flex-1">
                <div class="flex items-center gap-2">
                    <span class="truncate text-sm font-semibold text-neutral-900">
-                        {{ entry.title || $t('common.untitled') }}
+                        {{ entry.title || 'Sans titre' }}
                    </span>
                    <span
                        v-for="tag in entry.tags"
@@ -56,7 +56,7 @@
            <!-- Delete action -->
            <button
                class="shrink-0 rounded-md p-1.5 text-neutral-300 opacity-0 transition hover:bg-red-50 hover:text-red-500 group-hover:opacity-100"
-                :title="$t('common.delete')"
+                title="Supprimer"
                @click.stop="emit('deleteEntry', entry)"
            >
                <Icon name="mdi:delete-outline" size="18" />
--- a/frontend/components/time-tracking/TimeTrackingCalendar.vue
+++ b/frontend/components/time-tracking/TimeTrackingCalendar.vue
@@ -99,7 +99,7 @@
                            :style="{ backgroundColor: entry.project?.color ?? '#94a3b8' }"
                        />
                        <div class="min-w-0">
-                            <div class="truncate text-xs font-medium text-neutral-800">{{ entry.title || $t('common.untitled') }}</div>
+                            <div class="truncate text-xs font-medium text-neutral-800">{{ entry.title || 'Sans titre' }}</div>
                            <div class="text-[10px] text-neutral-500">
                                {{ formatTime(entry.startedAt) }} – {{ entry.stoppedAt ? formatTime(entry.stoppedAt) : '...' }}
                            </div>
@@ -141,8 +141,6 @@
 <script setup lang="ts">
 import type { TimeEntry } from '~/services/dto/time-entry'

-const { t } = useI18n()
-
 const props = defineProps<{
    entries: TimeEntry[]
    startDate: Date
@@ -461,7 +459,7 @@ function onMoveStart(payload: { entry: TimeEntry; offsetY: number }, sourceDayIn
    dragState.value = {
        entryId: entry.id,
        entry,
-        title: entry.title || t('common.untitled'),
+        title: entry.title || 'Sans titre',
        color: entry.project?.color ?? '#94a3b8',
        durationMinutes,
        ghostHeightPx: Math.max((durationMinutes / 60) * hourHeight, 20),
--- a/frontend/components/ui/ConfirmDeleteStatusModal.vue
+++ b/frontend/components/ui/ConfirmDeleteStatusModal.vue
@@ -4,18 +4,19 @@
            <div class="fixed inset-0 z-50 flex items-center justify-center">
                <div class="absolute inset-0 bg-black/30" @click="cancel" />
                <div class="relative z-10 w-full max-w-md rounded-lg bg-white p-6 shadow-xl">
-                    <h3 class="text-lg font-bold text-neutral-900">{{ $t('taskStatuses.deleteStatus', { label: statusLabel }) }}</h3>
+                    <h3 class="text-lg font-bold text-neutral-900">Supprimer le statut « {{ statusLabel }} »</h3>

                    <p class="mt-3 text-sm text-neutral-600">
-                        {{ taskCount > 1 ? $t('taskStatuses.linkedTasksPlural', { count: taskCount }) : $t('taskStatuses.linkedTasks', { count: taskCount }) }}
+                        {{ taskCount }} tâche{{ taskCount > 1 ? 's sont liées' : ' est liée' }} à ce statut.
+                        Choisissez où les déplacer :
                    </p>

                    <div class="mt-4">
                        <MalioSelect
                            v-model="targetStatusId"
                            :options="targetOptions"
-                            :label="$t('taskStatuses.moveTo')"
-                            :empty-option-label="$t('taskStatuses.backlog')"
+                            label="Déplacer vers"
+                            empty-option-label="Backlog (sans statut)"
                            min-width="w-full"
                        />
                    </div>
@@ -26,7 +27,7 @@
                            class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
                            @click="cancel"
                        >
-                            {{ $t('common.cancel') }}
+                            Annuler
                        </button>
                        <button
                            type="button"
@@ -34,7 +35,7 @@
                            :disabled="isProcessing"
                            @click="confirm"
                        >
-                            {{ $t('common.delete') }}
+                            Supprimer
                        </button>
                    </div>
                </div>
--- a/frontend/components/user/UserDrawer.vue
+++ b/frontend/components/user/UserDrawer.vue
@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('users.editUser') : $t('users.addUser')">
+    <AppDrawer v-model="isOpen" :title="isEditing ? 'Modifier un utilisateur' : 'Ajouter un utilisateur'">
        <form class="flex flex-col gap-2" @submit.prevent="handleSubmit">
            <MalioInputText
                v-model="form.username"
@@ -90,8 +90,6 @@ import { useProjectService } from '~/services/projects'
 import type { Client } from '~/services/dto/client'
 import type { Project } from '~/services/dto/project'

-const { t } = useI18n()
-
 const props = defineProps<{
    modelValue: boolean
    item: UserData | null
@@ -116,7 +114,7 @@ const clients = ref<Client[]>([])
 const allProjects = ref<Project[]>([])

 const clientOptions = computed(() => [
-    { label: t('common.noClient'), value: null as number | null },
+    { label: 'Aucun client', value: null as number | null },
    ...clients.value.map((c) => ({ label: c.name, value: c.id as number | null })),
 ])

@@ -192,7 +190,7 @@ async function handleSubmit() {
            allowedProjects: form.allowedProjectIds.map((id) => `/api/projects/${id}`),
        }
        if (form.password) {
-            payload.plainPassword = form.password
+            payload.password = form.password
        }

        if (isEditing.value && props.item) {
--- a/frontend/composables/useApi.ts
+++ b/frontend/composables/useApi.ts
@@ -177,16 +177,13 @@ export function useApi(): ApiClient {
  ) {
    const needsJsonBody = method === 'POST' || method === 'PUT'
    const needsMergePatch = method === 'PATCH'
-    const isFormData = typeof FormData !== 'undefined' && options.body instanceof FormData

    const headers = new Headers(options.headers as HeadersInit | undefined)

-    if (!isFormData) {
-      if (needsMergePatch && !headers.has('Content-Type')) {
-        headers.set('Content-Type', 'application/merge-patch+json')
-      } else if (needsJsonBody && !headers.has('Content-Type')) {
-        headers.set('Content-Type', 'application/json')
-      }
+    if (needsMergePatch && !headers.has('Content-Type')) {
+      headers.set('Content-Type', 'application/merge-patch+json')
+    } else if (needsJsonBody && !headers.has('Content-Type')) {
+      headers.set('Content-Type', 'application/json')
    }

    return client<T>(url, { ...options, method, headers })
--- a/frontend/composables/useAvatarService.ts
+++ b/frontend/composables/useAvatarService.ts
@@ -5,13 +5,11 @@ export function useAvatarService() {
        const formData = new FormData()
        formData.append('file', file, 'avatar.png')

-        return api.post<{ avatarUrl: string }>(
-            `/users/${userId}/avatar`,
-            formData as unknown as Record<string, unknown>,
-            {
-                toastSuccessKey: 'profile.avatarUpdated',
-            }
-        )
+        return $fetch(`/api/users/${userId}/avatar`, {
+            method: 'POST',
+            body: formData,
+            credentials: 'include',
+        })
    }

    async function remove(userId: number): Promise<void> {
--- a/frontend/i18n/locales/fr.json
+++ b/frontend/i18n/locales/fr.json
@@ -22,66 +22,43 @@
    "clients": {
        "created": "Client créé avec succès.",
        "updated": "Client mis à jour avec succès.",
-        "deleted": "Client supprimé avec succès.",
-        "addClient": "Ajouter un client",
-        "editClient": "Modifier un client"
+        "deleted": "Client supprimé avec succès."
    },
    "projects": {
-        "title": "Projets",
        "created": "Projet créé avec succès.",
        "updated": "Projet mis à jour avec succès.",
        "deleted": "Projet supprimé avec succès.",
        "archived": "Projet archivé avec succès.",
        "unarchived": "Projet désarchivé avec succès.",
        "showArchived": "Voir les projets archivés",
-        "hideArchived": "Masquer les projets archivés",
-        "noProjects": "Aucun projet trouvé.",
-        "noArchivedProjects": "Aucun projet archivé.",
-        "addProject": "Ajouter un projet",
-        "addProjectShort": "Projet",
-        "editProject": "Modifier un projet"
+        "hideArchived": "Masquer les projets archivés"
    },
    "taskStatuses": {
        "created": "Statut créé avec succès.",
        "updated": "Statut mis à jour avec succès.",
-        "deleted": "Statut supprimé avec succès.",
-        "addStatus": "Ajouter un statut",
-        "editStatus": "Modifier un statut",
-        "deleteStatus": "Supprimer le statut « {label} »",
-        "linkedTasks": "{count} tâche est liée à ce statut. Choisissez où les déplacer :",
-        "linkedTasksPlural": "{count} tâches sont liées à ce statut. Choisissez où les déplacer :",
-        "moveTo": "Déplacer vers",
-        "backlog": "Backlog (sans statut)"
+        "deleted": "Statut supprimé avec succès."
    },
    "taskEfforts": {
        "created": "Effort créé avec succès.",
        "updated": "Effort mis à jour avec succès.",
-        "deleted": "Effort supprimé avec succès.",
-        "addEffort": "Ajouter un effort",
-        "editEffort": "Modifier un effort"
+        "deleted": "Effort supprimé avec succès."
    },
    "taskPriorities": {
        "created": "Priorité créée avec succès.",
        "updated": "Priorité mise à jour avec succès.",
-        "deleted": "Priorité supprimée avec succès.",
-        "addPriority": "Ajouter une priorité",
-        "editPriority": "Modifier une priorité"
+        "deleted": "Priorité supprimée avec succès."
    },
    "taskTags": {
        "created": "Tag créé avec succès.",
        "updated": "Tag mis à jour avec succès.",
-        "deleted": "Tag supprimé avec succès.",
-        "addTag": "Ajouter un tag",
-        "editTag": "Modifier un tag"
+        "deleted": "Tag supprimé avec succès."
    },
    "taskGroups": {
        "created": "Groupe créé avec succès.",
        "updated": "Groupe mis à jour avec succès.",
        "deleted": "Groupe supprimé avec succès.",
        "archived": "Groupe archivé avec succès.",
-        "unarchived": "Groupe désarchivé avec succès.",
-        "addGroup": "Ajouter un groupe",
-        "editGroup": "Modifier un groupe"
+        "unarchived": "Groupe désarchivé avec succès."
    },
    "taskDocuments": {
        "title": "Documents",
@@ -101,24 +78,17 @@
        "archived": "Ticket archivé avec succès.",
        "unarchived": "Ticket désarchivé avec succès.",
        "deleteConfirmTitle": "Supprimer le ticket",
-        "deleteConfirmMessage": "Êtes-vous sûr de vouloir supprimer ce ticket ? Cette action est irréversible.",
-        "addTask": "Ajouter un ticket",
-        "editTask": "Modifier un ticket"
+        "deleteConfirmMessage": "Êtes-vous sûr de vouloir supprimer ce ticket ? Cette action est irréversible."
    },
    "users": {
        "created": "Utilisateur créé avec succès.",
        "updated": "Utilisateur mis à jour avec succès.",
-        "deleted": "Utilisateur supprimé avec succès.",
-        "addUser": "Ajouter un utilisateur",
-        "editUser": "Modifier un utilisateur"
+        "deleted": "Utilisateur supprimé avec succès."
    },
    "timeEntries": {
        "created": "Temps enregistré",
        "updated": "Temps modifié",
-        "deleted": "Temps supprimé",
-        "noEntries": "Aucune activité pour cette période",
-        "addEntry": "Ajouter une Activité",
-        "editEntry": "Modifier un temps"
+        "deleted": "Temps supprimé"
    },
    "archive": {
        "title": "Archives",
@@ -199,12 +169,7 @@
        "cancel": "Annuler",
        "save": "Enregistrer",
        "edit": "Modifier",
-        "delete": "Supprimer",
-        "add": "Ajouter",
        "loading": "Chargement...",
-        "archived": "Archivé",
-        "noClient": "Aucun client",
-        "untitled": "Sans titre",
        "dateFilter": "Date",
        "today": "Aujourd'hui",
        "thisWeek": "Cette semaine",
--- a/frontend/layouts/default.vue
+++ b/frontend/layouts/default.vue
@@ -148,7 +148,6 @@ import type { UserData } from '~/services/dto/user-data'
 import type { Project } from '~/services/dto/project'
 import type { TaskTag } from '~/services/dto/task-tag'
 import { useAppVersion } from '~/composables/useAppVersion'
-import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'

 const auth = useAuthStore()
@@ -212,9 +211,9 @@ async function loadRefData() {
    if (refData.loaded) return
    const api = useApi()
    const [usersData, projectsData, typesData] = await Promise.all([
-        api.get<HydraCollection<UserData>>('/users'),
-        api.get<HydraCollection<Project>>('/projects'),
-        api.get<HydraCollection<TaskTag>>('/task_tags'),
+        api.get<any>('/users'),
+        api.get<any>('/projects'),
+        api.get<any>('/task_tags'),
    ])
    refData.users = extractHydraMembers(usersData)
    refData.projects = extractHydraMembers(projectsData)
--- a/frontend/middleware/admin.ts
+++ b/frontend/middleware/admin.ts
@@ -1,7 +0,0 @@
-export default defineNuxtRouteMiddleware(() => {
-    const auth = useAuthStore()
-
-    if (!auth.isAuthenticated || !auth.user?.roles?.includes('ROLE_ADMIN')) {
-        return navigateTo('/')
-    }
-})
--- a/frontend/nuxt.config.ts
+++ b/frontend/nuxt.config.ts
@@ -23,6 +23,14 @@ export default defineNuxtConfig({
    devServer: {
        port: 3002,
    },
+    nitro: {
+        devProxy: {
+            '/api': {
+                target: 'http://nginx',
+                changeOrigin: true,
+            },
+        },
+    },
    components: [
        {path: '~/components', pathPrefix: false},
    ],
--- a/frontend/pages/admin.vue
+++ b/frontend/pages/admin.vue
@@ -35,7 +35,6 @@
 </template>

 <script setup lang="ts">
-definePageMeta({ middleware: ['admin'] })
 useHead({ title: 'Administration' })

 const tabs = [
--- a/frontend/pages/index.vue
+++ b/frontend/pages/index.vue
@@ -471,7 +471,7 @@ const lineOptions = {
        legend: { display: false },
        tooltip: {
            callbacks: {
-                label: (ctx: { raw: unknown }) => `${formatHours(ctx.raw as number)}`,
+                label: (ctx: any) => `${formatHours(ctx.raw)}`,
            },
        },
    },
@@ -480,7 +480,7 @@ const lineOptions = {
            beginAtZero: true,
            grid: { color: '#f3f4f6' },
            ticks: {
-                callback: (value: number | string) => `${value}h`,
+                callback: (value: any) => `${value}h`,
            },
        },
        x: {
--- a/frontend/pages/my-tasks.vue
+++ b/frontend/pages/my-tasks.vue
@@ -328,7 +328,7 @@ onMounted(() => {

        <!-- Kanban View -->
        <div v-if="viewMode === 'kanban'">
-            <div class="mt-6 flex h-[calc(100vh-260px)] gap-3 overflow-x-auto pb-4">
+            <div class="mt-6 flex gap-3 overflow-x-auto pb-4">
                <div
                    v-for="status in sortedStatuses"
                    :key="status.id"
@@ -340,26 +340,24 @@ onMounted(() => {
                    @drop.prevent="onDropStatus($event, status)"
                >
                    <div
-                        class="shrink-0 rounded-t-lg px-4 py-3 text-sm font-bold text-white"
+                        class="rounded-t-lg px-4 py-3 text-sm font-bold text-white"
                        :style="{ backgroundColor: status.color }"
                    >
                        {{ status.label }} ({{ tasksByStatus(status.id).length }})
                    </div>
-                    <div class="min-h-0 flex-1 overflow-y-auto p-3">
-                        <div class="flex flex-col gap-3">
-                            <TaskCard
-                                v-for="task in tasksByStatus(status.id)"
-                                :key="task.id"
-                                :task="task"
-                                @click="openTaskEdit(task)"
-                            />
-                            <p
-                                v-if="tasksByStatus(status.id).length === 0"
-                                class="py-4 text-center text-xs text-neutral-400"
-                            >
-                                {{ $t('myTasks.noTasks') }}
-                            </p>
-                        </div>
+                    <div class="flex flex-col gap-3 p-3">
+                        <TaskCard
+                            v-for="task in tasksByStatus(status.id)"
+                            :key="task.id"
+                            :task="task"
+                            @click="openTaskEdit(task)"
+                        />
+                        <p
+                            v-if="tasksByStatus(status.id).length === 0"
+                            class="py-4 text-center text-xs text-neutral-400"
+                        >
+                            {{ $t('myTasks.noTasks') }}
+                        </p>
                    </div>
                </div>
            </div>
--- a/frontend/pages/portal/index.vue
+++ b/frontend/pages/portal/index.vue
@@ -53,8 +53,10 @@ const ticketCountByProject = computed(() => {
    const counts: Record<number, number> = {}
    for (const ticket of tickets.value) {
        if (ticket.status === 'new' || ticket.status === 'in_progress') {
-            const projectId = extractIdFromIri(ticket.project)
-            if (projectId) {
+            // Extract project ID from IRI
+            const match = ticket.project.match(/\/api\/projects\/(\d+)/)
+            if (match) {
+                const projectId = Number(match[1])
                counts[projectId] = (counts[projectId] ?? 0) + 1
            }
        }
--- a/frontend/pages/portal/projects/[id]/index.vue
+++ b/frontend/pages/portal/projects/[id]/index.vue
@@ -31,13 +31,13 @@
        </div>

        <!-- Kanban board -->
-        <div v-else class="mt-4 flex h-[calc(100vh-200px)] flex-col gap-4 sm:flex-row sm:overflow-x-auto sm:pb-4">
+        <div v-else class="mt-4 flex flex-col gap-4 sm:flex-row sm:overflow-x-auto sm:pb-4">
            <div
                v-for="col in columns"
                :key="col.status"
-                class="flex min-w-0 flex-1 flex-col sm:min-w-[280px]"
+                class="min-w-0 flex-1 sm:min-w-[280px]"
            >
-                <div class="mb-3 flex shrink-0 items-center gap-2">
+                <div class="mb-3 flex items-center gap-2">
                    <div class="h-2 w-2 rounded-full" :class="col.dotClass" />
                    <h3 class="text-sm font-bold text-neutral-700">{{ col.label }}</h3>
                    <span class="ml-auto rounded-full bg-neutral-100 px-2 py-0.5 text-xs font-semibold text-neutral-500">
@@ -45,7 +45,7 @@
                    </span>
                </div>
                <div
-                    class="min-h-0 flex-1 space-y-2 overflow-y-auto rounded-lg border-2 border-transparent p-1 transition-colors"
+                    class="min-h-[60px] space-y-2 rounded-lg border-2 border-transparent p-1 transition-colors"
                    :class="dragOverStatus === col.status ? 'border-primary-300 bg-primary-50/50' : ''"
                    @dragover.prevent="onDragOver(col.status)"
                    @dragleave="onDragLeave"
--- a/frontend/pages/projects/[id]/index.vue
+++ b/frontend/pages/projects/[id]/index.vue
@@ -62,7 +62,7 @@
        </div>

        <!-- Kanban -->
-        <div class="mt-6 flex h-[calc(100vh-200px)] gap-3 overflow-x-auto pb-4">
+        <div class="mt-6 flex gap-3 overflow-x-auto pb-4">
            <div
                v-for="status in statuses"
                :key="status.id"
@@ -74,26 +74,24 @@
                @drop.prevent="onDropStatus($event, status)"
            >
                <div
-                    class="shrink-0 rounded-t-lg px-4 py-3 text-sm font-bold text-white"
+                    class="rounded-t-lg px-4 py-3 text-sm font-bold text-white"
                    :style="{ backgroundColor: status.color }"
                >
                    {{ status.label }} ({{ tasksByStatus(status.id).length }})
                </div>
-                <div class="min-h-0 flex-1 overflow-y-auto p-3">
-                    <div class="flex flex-col gap-3">
-                        <TaskCard
-                            v-for="task in tasksByStatus(status.id)"
-                            :key="task.id"
-                            :task="task"
-                            @click="openTaskEdit(task)"
-                        />
-                        <p
-                            v-if="tasksByStatus(status.id).length === 0"
-                            class="py-4 text-center text-xs text-neutral-400"
-                        >
-                            Aucun ticket
-                        </p>
-                    </div>
+                <div class="flex flex-col gap-3 p-3">
+                    <TaskCard
+                        v-for="task in tasksByStatus(status.id)"
+                        :key="task.id"
+                        :task="task"
+                        @click="openTaskEdit(task)"
+                    />
+                    <p
+                        v-if="tasksByStatus(status.id).length === 0"
+                        class="py-4 text-center text-xs text-neutral-400"
+                    >
+                        Aucun ticket
+                    </p>
                </div>
            </div>
        </div>
--- a/frontend/pages/projects/index.vue
+++ b/frontend/pages/projects/index.vue
@@ -2,7 +2,7 @@
    <div>
        <div class="sticky top-8 z-20 bg-white pb-4 sm:top-12">
            <div class="flex flex-wrap items-center justify-between gap-3">
-                <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">{{ $t('projects.title') }}</h1>
+                <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">Projets</h1>
                <div class="flex items-center gap-2 sm:gap-3">
                    <button
                        class="flex items-center gap-1.5 rounded-md px-2 py-2 text-sm font-medium transition sm:px-3"
@@ -18,8 +18,8 @@
                        class="shrink-0 rounded-md bg-primary-500 px-3 py-2 text-xs font-semibold text-white hover:bg-secondary-500 sm:px-4 sm:text-sm"
                        @click="openCreate"
                    >
-                        <span class="hidden sm:inline">+ {{ $t('projects.addProject') }}</span>
-                        <span class="sm:hidden">+ {{ $t('projects.addProjectShort') }}</span>
+                        <span class="hidden sm:inline">+ Ajouter un projet</span>
+                        <span class="sm:hidden">+ Projet</span>
                    </button>
                </div>
            </div>
@@ -29,9 +29,8 @@
            <div
                v-for="project in projects"
                :key="project.id"
-                class="cursor-pointer p-4 shadow-sm transition hover:shadow-md"
+                class="cursor-pointer rounded-[6px] border border-neutral-200 bg-tertiary-500 p-4 shadow-sm transition hover:shadow-md"
                :class="{ 'opacity-60': project.archived }"
-                :style="projectCardStyle(project.color)"
                @click="navigateTo(`/projects/${project.id}`)"
            >
                <div class="flex items-center justify-between">
@@ -41,7 +40,7 @@
                            v-if="project.archived"
                            class="rounded bg-amber-100 px-1.5 py-0.5 text-xs font-medium text-amber-700"
                        >
-                            {{ $t('common.archived') }}
+                            Archivé
                        </span>
                    </div>
                    <button
@@ -60,7 +59,7 @@
                v-if="projects.length === 0 && !isLoading"
                class="col-span-full py-12 text-center text-neutral-400"
            >
-                {{ showArchived ? $t('projects.noArchivedProjects') : $t('projects.noProjects') }}
+                {{ showArchived ? 'Aucun projet archivé.' : 'Aucun projet trouvé.' }}
            </div>
        </div>

@@ -81,17 +80,6 @@ import { useClientService } from '~/services/clients'

 useHead({ title: 'Projets' })

-function projectCardStyle(color: string | null) {
-    const hex = (color || '#222783').replace('#', '')
-    const r = parseInt(hex.substring(0, 2), 16)
-    const g = parseInt(hex.substring(2, 4), 16)
-    const b = parseInt(hex.substring(4, 6), 16)
-    return {
-        borderRadius: '16px',
-        backgroundColor: `rgba(${r}, ${g}, ${b}, 0.08)`,
-    }
-}
-
 const projectService = useProjectService()
 const clientService = useClientService()

--- a/frontend/pages/time-tracking.vue
+++ b/frontend/pages/time-tracking.vue
@@ -126,7 +126,6 @@ import type { UserData } from '~/services/dto/user-data'
 import type { Project } from '~/services/dto/project'
 import type { TaskTag } from '~/services/dto/task-tag'
 import { useTimeEntryService } from '~/services/time-entries'
-import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'

 useHead({ title: 'Suivi des temps' })
@@ -309,9 +308,9 @@ async function loadReferenceData() {
    const api = useApi()

    const [usersData, projectsData, typesData] = await Promise.all([
-        api.get<HydraCollection<UserData>>('/users'),
-        api.get<HydraCollection<Project>>('/projects'),
-        api.get<HydraCollection<TaskTag>>('/task_tags'),
+        api.get<any>('/users'),
+        api.get<any>('/projects'),
+        api.get<any>('/task_tags'),
    ])

    users.value = extractHydraMembers(usersData)
--- a/frontend/services/dto/user-data.ts
+++ b/frontend/services/dto/user-data.ts
@@ -12,7 +12,7 @@ export type UserData = {

 export type UserWrite = {
    username: string
-    plainPassword?: string
+    password?: string
    roles: string[]
    client?: string | null
    allowedProjects?: string[]
--- a/frontend/utils/iri.ts
+++ b/frontend/utils/iri.ts
@@ -1,11 +0,0 @@
-/**
- * Extract the numeric ID from an API Platform IRI string.
- * Example: "/api/projects/5" → 5
- */
-export function extractIdFromIri(iri: string | null | undefined): number {
-    if (!iri) return 0
-    const lastSlash = iri.lastIndexOf('/')
-    if (lastSlash === -1) return 0
-    const id = Number(iri.substring(lastSlash + 1))
-    return Number.isFinite(id) ? id : 0
-}
--- a/src/ApiResource/GiteaBranch.php
+++ b/src/ApiResource/GiteaBranch.php
@@ -17,7 +17,6 @@ use Symfony\Component\Serializer\Attribute\Groups;
            uriTemplate: '/tasks/{taskId}/gitea/branches',
            normalizationContext: ['groups' => ['gitea_branch:read']],
            provider: GiteaBranchProvider::class,
-            security: "is_granted('ROLE_USER')",
        ),
        new Post(
            uriTemplate: '/tasks/{taskId}/gitea/branches',
@@ -25,7 +24,6 @@ use Symfony\Component\Serializer\Attribute\Groups;
            normalizationContext: ['groups' => ['gitea_branch:read']],
            provider: GiteaBranchProvider::class,
            processor: GiteaBranchProcessor::class,
-            security: "is_granted('ROLE_USER')",
        ),
    ],
 )]
--- a/src/ApiResource/GiteaBranchName.php
+++ b/src/ApiResource/GiteaBranchName.php
@@ -15,7 +15,6 @@ use Symfony\Component\Serializer\Attribute\Groups;
            uriTemplate: '/tasks/{taskId}/gitea/branch-name/{type}',
            normalizationContext: ['groups' => ['gitea_branch_name:read']],
            provider: GiteaBranchNameProvider::class,
-            security: "is_granted('ROLE_USER')",
        ),
    ],
 )]
--- a/src/ApiResource/GiteaPullRequest.php
+++ b/src/ApiResource/GiteaPullRequest.php
@@ -15,7 +15,6 @@ use Symfony\Component\Serializer\Attribute\Groups;
            uriTemplate: '/tasks/{taskId}/gitea/pull-requests',
            normalizationContext: ['groups' => ['gitea_pr:read']],
            provider: GiteaPullRequestProvider::class,
-            security: "is_granted('ROLE_USER')",
        ),
    ],
 )]
--- a/src/Controller/TaskDocumentDownloadController.php
+++ b/src/Controller/TaskDocumentDownloadController.php
@@ -51,12 +51,9 @@ class TaskDocumentDownloadController extends AbstractController
        $mimeType = $document->getMimeType() ?? 'application/octet-stream';

        // Inline for images and PDFs, attachment for everything else
-        // SVG files are always served as attachment to prevent XSS via embedded JavaScript
-        $disposition = 'image/svg+xml' === $mimeType
-            ? ResponseHeaderBag::DISPOSITION_ATTACHMENT
-            : (str_starts_with($mimeType, 'image/') || 'application/pdf' === $mimeType
-                ? ResponseHeaderBag::DISPOSITION_INLINE
-                : ResponseHeaderBag::DISPOSITION_ATTACHMENT);
+        $disposition = str_starts_with($mimeType, 'image/') || 'application/pdf' === $mimeType
+            ? ResponseHeaderBag::DISPOSITION_INLINE
+            : ResponseHeaderBag::DISPOSITION_ATTACHMENT;

        $response->setContentDisposition($disposition, $document->getOriginalName());
        $response->headers->set('Content-Type', $mimeType);
--- a/src/Controller/UserAvatarController.php
+++ b/src/Controller/UserAvatarController.php
@@ -91,7 +91,7 @@ class UserAvatarController extends AbstractController
        $extension = pathinfo($user->getAvatarFileName(), PATHINFO_EXTENSION);
        $mimeMap   = ['jpg' => 'image/jpeg', 'jpeg' => 'image/jpeg', 'png' => 'image/png', 'webp' => 'image/webp', 'gif' => 'image/gif'];
        $response->headers->set('Content-Type', $mimeMap[$extension] ?? 'application/octet-stream');
-        $response->headers->set('Cache-Control', 'public, max-age=86400');
+        $response->headers->set('Cache-Control', 'no-cache, must-revalidate');

        return $response;
    }
--- a/src/Doctrine/ProjectAllowedExtension.php
+++ b/src/Doctrine/ProjectAllowedExtension.php
@@ -1,66 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Doctrine;
-
-use ApiPlatform\Doctrine\Orm\Extension\QueryCollectionExtensionInterface;
-use ApiPlatform\Doctrine\Orm\Extension\QueryItemExtensionInterface;
-use ApiPlatform\Doctrine\Orm\Util\QueryNameGeneratorInterface;
-use ApiPlatform\Metadata\Operation;
-use App\Entity\Project;
-use App\Entity\User;
-use Doctrine\ORM\QueryBuilder;
-use Symfony\Bundle\SecurityBundle\Security;
-
-final readonly class ProjectAllowedExtension implements QueryCollectionExtensionInterface, QueryItemExtensionInterface
-{
-    public function __construct(
-        private Security $security,
-    ) {}
-
-    public function applyToCollection(QueryBuilder $queryBuilder, QueryNameGeneratorInterface $queryNameGenerator, string $resourceClass, ?Operation $operation = null, array $context = []): void
-    {
-        $this->addWhere($queryBuilder, $resourceClass);
-    }
-
-    public function applyToItem(QueryBuilder $queryBuilder, QueryNameGeneratorInterface $queryNameGenerator, string $resourceClass, array $identifiers, ?Operation $operation = null, array $context = []): void
-    {
-        $this->addWhere($queryBuilder, $resourceClass);
-    }
-
-    private function addWhere(QueryBuilder $queryBuilder, string $resourceClass): void
-    {
-        if (Project::class !== $resourceClass) {
-            return;
-        }
-
-        $user = $this->security->getUser();
-
-        if (!$user instanceof User) {
-            return;
-        }
-
-        // Only restrict for ROLE_CLIENT users who are NOT admins
-        if (!in_array('ROLE_CLIENT', $user->getRoles(), true) || in_array('ROLE_ADMIN', $user->getRoles(), true)) {
-            return;
-        }
-
-        $rootAlias = $queryBuilder->getRootAliases()[0];
-
-        $allowedProjectIds = $user->getAllowedProjects()->map(
-            fn (Project $project) => $project->getId(),
-        )->toArray();
-
-        if ([] === $allowedProjectIds) {
-            $queryBuilder->andWhere('1 = 0');
-
-            return;
-        }
-
-        $queryBuilder
-            ->andWhere($rootAlias.'.id IN (:allowed_project_ids)')
-            ->setParameter('allowed_project_ids', $allowedProjectIds)
-        ;
-    }
-}
--- a/src/Entity/BookStackConfiguration.php
+++ b/src/Entity/BookStackConfiguration.php
@@ -6,7 +6,6 @@ namespace App\Entity;

 use App\Repository\BookStackConfigurationRepository;
 use Doctrine\ORM\Mapping as ORM;
-use Symfony\Component\Validator\Constraints as Assert;

 #[ORM\Entity(repositoryClass: BookStackConfigurationRepository::class)]
 class BookStackConfiguration
@@ -17,7 +16,6 @@ class BookStackConfiguration
    private ?int $id = null;

    #[ORM\Column(length: 255, nullable: true)]
-    #[Assert\Url]
    private ?string $url = null;

    #[ORM\Column(type: 'text', nullable: true)]
--- a/src/Entity/ClientTicket.php
+++ b/src/Entity/ClientTicket.php
@@ -19,7 +19,6 @@ use Doctrine\Common\Collections\ArrayCollection;
 use Doctrine\Common\Collections\Collection;
 use Doctrine\ORM\Mapping as ORM;
 use Symfony\Component\Serializer\Attribute\Groups;
-use Symfony\Component\Validator\Constraints as Assert;

 #[ApiResource(
    operations: [
@@ -55,27 +54,6 @@ use Symfony\Component\Validator\Constraints as Assert;
 )]
 class ClientTicket
 {
-    public const string TYPE_BUG         = 'bug';
-    public const string TYPE_IMPROVEMENT = 'improvement';
-    public const string TYPE_OTHER       = 'other';
-
-    public const array TYPES = [
-        self::TYPE_BUG,
-        self::TYPE_IMPROVEMENT,
-        self::TYPE_OTHER,
-    ];
-
-    public const string STATUS_NEW         = 'new';
-    public const string STATUS_IN_PROGRESS = 'in_progress';
-    public const string STATUS_DONE        = 'done';
-    public const string STATUS_REJECTED    = 'rejected';
-
-    public const array STATUSES = [
-        self::STATUS_NEW,
-        self::STATUS_IN_PROGRESS,
-        self::STATUS_DONE,
-        self::STATUS_REJECTED,
-    ];
    #[ORM\Id]
    #[ORM\GeneratedValue]
    #[ORM\Column]
@@ -88,7 +66,6 @@ class ClientTicket

    #[ORM\Column(length: 20)]
    #[Groups(['client_ticket:read', 'client_ticket:write', 'task:read'])]
-    #[Assert\Choice(choices: self::TYPES)]
    private ?string $type = null;

    #[ORM\Column(length: 255)]
@@ -101,12 +78,10 @@ class ClientTicket

    #[ORM\Column(length: 255, nullable: true)]
    #[Groups(['client_ticket:read', 'client_ticket:write'])]
-    #[Assert\Url]
    private ?string $url = null;

    #[ORM\Column(length: 20)]
    #[Groups(['client_ticket:read', 'client_ticket:write', 'task:read'])]
-    #[Assert\Choice(choices: self::STATUSES)]
    private ?string $status = 'new';

    #[ORM\Column(type: 'text', nullable: true)]
--- a/src/Entity/GiteaConfiguration.php
+++ b/src/Entity/GiteaConfiguration.php
@@ -6,7 +6,6 @@ namespace App\Entity;

 use App\Repository\GiteaConfigurationRepository;
 use Doctrine\ORM\Mapping as ORM;
-use Symfony\Component\Validator\Constraints as Assert;

 #[ORM\Entity(repositoryClass: GiteaConfigurationRepository::class)]
 class GiteaConfiguration
@@ -17,7 +16,6 @@ class GiteaConfiguration
    private ?int $id = null;

    #[ORM\Column(length: 255, nullable: true)]
-    #[Assert\Url]
    private ?string $url = null;

    #[ORM\Column(type: 'text', nullable: true)]
--- a/src/Entity/TaskBookStackLink.php
+++ b/src/Entity/TaskBookStackLink.php
@@ -7,7 +7,6 @@ namespace App\Entity;
 use App\Repository\TaskBookStackLinkRepository;
 use DateTimeImmutable;
 use Doctrine\ORM\Mapping as ORM;
-use Symfony\Component\Validator\Constraints as Assert;

 #[ORM\Entity(repositoryClass: TaskBookStackLinkRepository::class)]
 #[ORM\UniqueConstraint(name: 'UNIQ_task_bookstack_link', columns: ['task_id', 'bookstack_id', 'bookstack_type'])]
@@ -32,7 +31,6 @@ class TaskBookStackLink
    private string $title;

    #[ORM\Column(length: 500)]
-    #[Assert\Url]
    private string $url;

    #[ORM\Column]
--- a/src/Entity/User.php
+++ b/src/Entity/User.php
@@ -61,10 +61,8 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
    private array $roles = [];

    #[ORM\Column]
-    private ?string $password = null;
-
    #[Groups(['user:write'])]
-    private ?string $plainPassword = null;
+    private ?string $password = null;

    #[ORM\Column(type: Types::DATETIME_IMMUTABLE)]
    private ?DateTimeImmutable $createdAt = null;
@@ -226,20 +224,5 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
        return '/api/users/'.$this->id.'/avatar';
    }

-    public function getPlainPassword(): ?string
-    {
-        return $this->plainPassword;
-    }
-
-    public function setPlainPassword(?string $plainPassword): static
-    {
-        $this->plainPassword = $plainPassword;
-
-        return $this;
-    }
-
-    public function eraseCredentials(): void
-    {
-        $this->plainPassword = null;
-    }
+    public function eraseCredentials(): void {}
 }
--- a/src/Mcp/Tool/Project/CreateProjectTool.php
+++ b/src/Mcp/Tool/Project/CreateProjectTool.php
@@ -10,8 +10,6 @@ use App\Repository\ClientRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -21,7 +19,6 @@ class CreateProjectTool
    public function __construct(
        private readonly EntityManagerInterface $entityManager,
        private readonly ClientRepository $clientRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -31,10 +28,6 @@ class CreateProjectTool
        ?string $color = null,
        ?int $clientId = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $project = new Project();
        $project->setName($name);
        $project->setCode($code);
--- a/src/Mcp/Tool/Project/GetProjectTool.php
+++ b/src/Mcp/Tool/Project/GetProjectTool.php
@@ -9,8 +9,6 @@ use App\Repository\ProjectRepository;
 use App\Repository\TaskRepository;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -20,15 +18,10 @@ class GetProjectTool
    public function __construct(
        private readonly ProjectRepository $projectRepository,
        private readonly TaskRepository $taskRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(int $id): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $project = $this->projectRepository->find($id);

        if (null === $project) {
--- a/src/Mcp/Tool/Project/ListProjectsTool.php
+++ b/src/Mcp/Tool/Project/ListProjectsTool.php
@@ -7,23 +7,16 @@ namespace App\Mcp\Tool\Project;
 use App\Mcp\Tool\Serializer;
 use App\Repository\ProjectRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-projects', description: 'List all projects with optional archive filter')]
 class ListProjectsTool
 {
    public function __construct(
        private readonly ProjectRepository $projectRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(bool $archived = false): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $projects = $this->projectRepository->findBy(['archived' => $archived], ['name' => 'ASC']);

        return json_encode(array_map(Serializer::project(...), $projects));
--- a/src/Mcp/Tool/Project/UpdateProjectTool.php
+++ b/src/Mcp/Tool/Project/UpdateProjectTool.php
@@ -10,8 +10,6 @@ use App\Repository\ProjectRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -22,7 +20,6 @@ class UpdateProjectTool
        private readonly ProjectRepository $projectRepository,
        private readonly ClientRepository $clientRepository,
        private readonly EntityManagerInterface $entityManager,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -34,10 +31,6 @@ class UpdateProjectTool
        ?int $clientId = null,
        ?bool $archived = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $project = $this->projectRepository->find($id);

        if (null === $project) {
--- a/src/Mcp/Tool/Reference/ListClientsTool.php
+++ b/src/Mcp/Tool/Reference/ListClientsTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\Reference;

 use App\Repository\ClientRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-clients', description: 'List all clients with their IDs, names, and emails. Use this to discover valid client IDs for project parameters.')]
 class ListClientsTool
 {
    public function __construct(
        private readonly ClientRepository $clientRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_ADMIN')) {
-            throw new AccessDeniedException('Access denied: ROLE_ADMIN required.');
-        }
-
        $clients = $this->clientRepository->findBy([], ['name' => 'ASC']);

        return json_encode(array_map(fn ($client) => [
--- a/src/Mcp/Tool/Reference/ListUsersTool.php
+++ b/src/Mcp/Tool/Reference/ListUsersTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\Reference;

 use App\Repository\UserRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-users', description: 'List all users with their IDs and usernames. Use this to discover valid user IDs for assignee or time entry parameters.')]
 class ListUsersTool
 {
    public function __construct(
        private readonly UserRepository $userRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_ADMIN')) {
-            throw new AccessDeniedException('Access denied: ROLE_ADMIN required.');
-        }
-
        $users = $this->userRepository->findBy([], ['username' => 'ASC']);

        return json_encode(array_map(fn ($user) => [
--- a/src/Mcp/Tool/Task/CreateTaskTool.php
+++ b/src/Mcp/Tool/Task/CreateTaskTool.php
@@ -17,8 +17,6 @@ use App\Repository\UserRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -35,7 +33,6 @@ class CreateTaskTool
        private readonly TaskGroupRepository $taskGroupRepository,
        private readonly TaskTagRepository $taskTagRepository,
        private readonly UserRepository $userRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -49,10 +46,6 @@ class CreateTaskTool
        ?int $groupId = null,
        ?array $tagIds = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $project = $this->projectRepository->find($projectId);
        if (null === $project) {
            throw new InvalidArgumentException(sprintf('Project with ID %d not found.', $projectId));
@@ -61,6 +54,7 @@ class CreateTaskTool
        $task = new Task();
        $task->setProject($project);
        $task->setTitle($title);
+        $task->setNumber($this->taskRepository->findMaxNumberByProjectForUpdate($project) + 1);

        if (null !== $description) {
            $task->setDescription($description);
@@ -110,11 +104,8 @@ class CreateTaskTool
            }
        }

-        $this->entityManager->wrapInTransaction(function () use ($task, $project): void {
-            $task->setNumber($this->taskRepository->findMaxNumberByProjectForUpdate($project) + 1);
-            $this->entityManager->persist($task);
-            $this->entityManager->flush();
-        });
+        $this->entityManager->persist($task);
+        $this->entityManager->flush();

        return json_encode([
            'id'          => $task->getId(),
--- a/src/Mcp/Tool/Task/DeleteTaskTool.php
+++ b/src/Mcp/Tool/Task/DeleteTaskTool.php
@@ -8,8 +8,6 @@ use App\Repository\TaskRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -19,15 +17,10 @@ class DeleteTaskTool
    public function __construct(
        private readonly TaskRepository $taskRepository,
        private readonly EntityManagerInterface $entityManager,
-        private readonly Security $security,
    ) {}

    public function __invoke(int $id): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $task = $this->taskRepository->find($id);

        if (null === $task) {
--- a/src/Mcp/Tool/Task/GetTaskTool.php
+++ b/src/Mcp/Tool/Task/GetTaskTool.php
@@ -8,8 +8,6 @@ use App\Mcp\Tool\Serializer;
 use App\Repository\TaskRepository;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -18,15 +16,10 @@ class GetTaskTool
 {
    public function __construct(
        private readonly TaskRepository $taskRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(int $id): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $task = $this->taskRepository->find($id);

        if (null === $task) {
--- a/src/Mcp/Tool/Task/ListTasksTool.php
+++ b/src/Mcp/Tool/Task/ListTasksTool.php
@@ -7,15 +7,12 @@ namespace App\Mcp\Tool\Task;
 use App\Mcp\Tool\Serializer;
 use App\Repository\TaskRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-tasks', description: 'List tasks with optional filters by project, status, assignee, priority, group, tags, and archive state. Returns max 100 results by default, use filters to narrow down.')]
 class ListTasksTool
 {
    public function __construct(
        private readonly TaskRepository $taskRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -28,10 +25,6 @@ class ListTasksTool
        bool $archived = false,
        int $limit = 100,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $limit = min($limit, 200);

        $qb = $this->taskRepository->createQueryBuilder('t')
--- a/src/Mcp/Tool/Task/UpdateTaskTool.php
+++ b/src/Mcp/Tool/Task/UpdateTaskTool.php
@@ -15,8 +15,6 @@ use App\Repository\UserRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -32,7 +30,6 @@ class UpdateTaskTool
        private readonly TaskGroupRepository $taskGroupRepository,
        private readonly TaskTagRepository $taskTagRepository,
        private readonly UserRepository $userRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -47,10 +44,6 @@ class UpdateTaskTool
        ?array $tagIds = null,
        ?bool $archived = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $task = $this->taskRepository->find($id);

        if (null === $task) {
--- a/src/Mcp/Tool/TaskMeta/CreateGroupTool.php
+++ b/src/Mcp/Tool/TaskMeta/CreateGroupTool.php
@@ -10,8 +10,6 @@ use App\Repository\ProjectRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -21,7 +19,6 @@ class CreateGroupTool
    public function __construct(
        private readonly EntityManagerInterface $entityManager,
        private readonly ProjectRepository $projectRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -30,10 +27,6 @@ class CreateGroupTool
        ?string $description = null,
        ?string $color = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $project = $this->projectRepository->find($projectId);
        if (null === $project) {
            throw new InvalidArgumentException(sprintf('Project with ID %d not found.', $projectId));
--- a/src/Mcp/Tool/TaskMeta/ListEffortsTool.php
+++ b/src/Mcp/Tool/TaskMeta/ListEffortsTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\TaskMeta;

 use App\Repository\TaskEffortRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-efforts', description: 'List all task effort levels. Efforts are global (shared across all projects).')]
 class ListEffortsTool
 {
    public function __construct(
        private readonly TaskEffortRepository $taskEffortRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $efforts = $this->taskEffortRepository->findBy([], ['label' => 'ASC']);

        return json_encode(array_map(fn ($e) => [
--- a/src/Mcp/Tool/TaskMeta/ListGroupsTool.php
+++ b/src/Mcp/Tool/TaskMeta/ListGroupsTool.php
@@ -7,23 +7,16 @@ namespace App\Mcp\Tool\TaskMeta;
 use App\Mcp\Tool\Serializer;
 use App\Repository\TaskGroupRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-groups', description: 'List task groups, optionally filtered by project. Groups are per-project (each group belongs to one project).')]
 class ListGroupsTool
 {
    public function __construct(
        private readonly TaskGroupRepository $taskGroupRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(?int $projectId = null, bool $archived = false): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $criteria = ['archived' => $archived];
        if (null !== $projectId) {
            $criteria['project'] = $projectId;
--- a/src/Mcp/Tool/TaskMeta/ListPrioritiesTool.php
+++ b/src/Mcp/Tool/TaskMeta/ListPrioritiesTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\TaskMeta;

 use App\Repository\TaskPriorityRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-priorities', description: 'List all task priorities. Priorities are global (shared across all projects).')]
 class ListPrioritiesTool
 {
    public function __construct(
        private readonly TaskPriorityRepository $taskPriorityRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $priorities = $this->taskPriorityRepository->findBy([], ['label' => 'ASC']);

        return json_encode(array_map(fn ($p) => [
--- a/src/Mcp/Tool/TaskMeta/ListStatusesTool.php
+++ b/src/Mcp/Tool/TaskMeta/ListStatusesTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\TaskMeta;

 use App\Repository\TaskStatusRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-statuses', description: 'List all task statuses ordered by position. Statuses are global (shared across all projects). Use the returned IDs when creating or updating tasks.')]
 class ListStatusesTool
 {
    public function __construct(
        private readonly TaskStatusRepository $taskStatusRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $statuses = $this->taskStatusRepository->findBy([], ['position' => 'ASC']);

        return json_encode(array_map(fn ($s) => [
--- a/src/Mcp/Tool/TaskMeta/ListTagsTool.php
+++ b/src/Mcp/Tool/TaskMeta/ListTagsTool.php
@@ -6,23 +6,16 @@ namespace App\Mcp\Tool\TaskMeta;

 use App\Repository\TaskTagRepository;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-tags', description: 'List all task tags. Tags are global (shared across all projects).')]
 class ListTagsTool
 {
    public function __construct(
        private readonly TaskTagRepository $taskTagRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $tags = $this->taskTagRepository->findBy([], ['label' => 'ASC']);

        return json_encode(array_map(fn ($t) => [
--- a/src/Mcp/Tool/TaskMeta/UpdateGroupTool.php
+++ b/src/Mcp/Tool/TaskMeta/UpdateGroupTool.php
@@ -9,8 +9,6 @@ use App\Repository\TaskGroupRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -20,7 +18,6 @@ class UpdateGroupTool
    public function __construct(
        private readonly TaskGroupRepository $taskGroupRepository,
        private readonly EntityManagerInterface $entityManager,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -30,10 +27,6 @@ class UpdateGroupTool
        ?string $color = null,
        ?bool $archived = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $group = $this->taskGroupRepository->find($id);

        if (null === $group) {
--- a/src/Mcp/Tool/TimeEntry/CreateTimeEntryTool.php
+++ b/src/Mcp/Tool/TimeEntry/CreateTimeEntryTool.php
@@ -16,8 +16,6 @@ use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -32,7 +30,6 @@ class CreateTimeEntryTool
        private readonly TaskTagRepository $taskTagRepository,
        private readonly TimeEntryRepository $timeEntryRepository,
        private readonly ClientTicketRepository $clientTicketRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -46,10 +43,6 @@ class CreateTimeEntryTool
        ?string $description = null,
        ?int $clientTicketId = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $user = $this->userRepository->find($userId);
        if (null === $user) {
            throw new InvalidArgumentException(sprintf('User with ID %d not found.', $userId));
--- a/src/Mcp/Tool/TimeEntry/DeleteTimeEntryTool.php
+++ b/src/Mcp/Tool/TimeEntry/DeleteTimeEntryTool.php
@@ -8,8 +8,6 @@ use App\Repository\TimeEntryRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -19,15 +17,10 @@ class DeleteTimeEntryTool
    public function __construct(
        private readonly TimeEntryRepository $timeEntryRepository,
        private readonly EntityManagerInterface $entityManager,
-        private readonly Security $security,
    ) {}

    public function __invoke(int $id): string
    {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $entry = $this->timeEntryRepository->find($id);

        if (null === $entry) {
--- a/src/Mcp/Tool/TimeEntry/ListTimeEntriesTool.php
+++ b/src/Mcp/Tool/TimeEntry/ListTimeEntriesTool.php
@@ -8,15 +8,12 @@ use App\Mcp\Tool\Serializer;
 use App\Repository\TimeEntryRepository;
 use DateTimeImmutable;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 #[McpTool(name: 'list-time-entries', description: 'List time entries with optional filters. Duration is computed in minutes and null for active timers.')]
 class ListTimeEntriesTool
 {
    public function __construct(
        private readonly TimeEntryRepository $timeEntryRepository,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -28,10 +25,6 @@ class ListTimeEntriesTool
        ?string $endDate = null,
        int $limit = 100,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $limit = min($limit, 200);

        $qb = $this->timeEntryRepository->createQueryBuilder('te')
--- a/src/Mcp/Tool/TimeEntry/UpdateTimeEntryTool.php
+++ b/src/Mcp/Tool/TimeEntry/UpdateTimeEntryTool.php
@@ -14,8 +14,6 @@ use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use InvalidArgumentException;
 use Mcp\Capability\Attribute\McpTool;
-use Symfony\Bundle\SecurityBundle\Security;
-use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

@@ -29,7 +27,6 @@ class UpdateTimeEntryTool
        private readonly TaskTagRepository $taskTagRepository,
        private readonly ClientTicketRepository $clientTicketRepository,
        private readonly EntityManagerInterface $entityManager,
-        private readonly Security $security,
    ) {}

    public function __invoke(
@@ -43,10 +40,6 @@ class UpdateTimeEntryTool
        ?string $description = null,
        ?int $clientTicketId = null,
    ): string {
-        if (!$this->security->isGranted('ROLE_USER')) {
-            throw new AccessDeniedException('Access denied: ROLE_USER required.');
-        }
-
        $entry = $this->timeEntryRepository->find($id);

        if (null === $entry) {
--- a/src/Repository/ClientTicketRepository.php
+++ b/src/Repository/ClientTicketRepository.php
@@ -20,26 +20,18 @@ class ClientTicketRepository extends ServiceEntityRepository
    }

    /**
-     * Returns the max ticket number for a project, using an advisory lock
+     * Returns the next ticket number for a project, using a row-level lock
     * to prevent race conditions when creating tickets concurrently.
     */
-    public function findMaxNumberByProjectForUpdate(Project $project): int
+    public function findNextNumberForProjectForUpdate(Project $project): int
    {
        $conn = $this->getEntityManager()->getConnection();

-        // Use PostgreSQL advisory lock instead of FOR UPDATE
-        // because FOR UPDATE is not allowed with aggregate functions in PostgreSQL.
-        // Offset by 1000000 to avoid collision with task locks on the same project ID.
-        $conn->executeStatement(
-            'SELECT pg_advisory_xact_lock(:lockKey)',
-            ['lockKey' => $project->getId() + 1000000],
-        );
-
        $result = $conn->fetchOne(
-            'SELECT COALESCE(MAX(number), 0) FROM client_ticket WHERE project_id = :project',
+            'SELECT COALESCE(MAX(number), 0) FROM client_ticket WHERE project_id = :project FOR UPDATE',
            ['project' => $project->getId()],
        );

-        return (int) $result;
+        return ((int) $result) + 1;
    }
 }
--- a/src/Repository/TaskRepository.php
+++ b/src/Repository/TaskRepository.php
@@ -20,20 +20,13 @@ class TaskRepository extends ServiceEntityRepository
    }

    /**
-     * Returns the max task number for a project, using an advisory lock
+     * Returns the max task number for a project, using a row-level lock
     * to prevent race conditions when creating tasks concurrently.
     */
    public function findMaxNumberByProjectForUpdate(Project $project): int
    {
        $conn = $this->getEntityManager()->getConnection();

-        // Use PostgreSQL advisory lock (project ID as lock key) instead of FOR UPDATE
-        // because FOR UPDATE is not allowed with aggregate functions in PostgreSQL.
-        $conn->executeStatement(
-            'SELECT pg_advisory_xact_lock(:project)',
-            ['project' => $project->getId()],
-        );
-
        $result = $conn->fetchOne(
            'SELECT COALESCE(MAX(number), 0) FROM task WHERE project_id = :project',
            ['project' => $project->getId()],
--- a/src/State/ClientTicketNumberProcessor.php
+++ b/src/State/ClientTicketNumberProcessor.php
@@ -53,8 +53,7 @@ final readonly class ClientTicketNumberProcessor implements ProcessorInterface

        $now = new DateTimeImmutable();

-        $maxNumber = $this->clientTicketRepository->findMaxNumberByProjectForUpdate($project);
-        $data->setNumber($maxNumber + 1);
+        $data->setNumber($this->clientTicketRepository->findNextNumberForProjectForUpdate($project));
        $data->setSubmittedBy($user);
        $data->setStatus('new');
        $data->setCreatedAt($now);
--- a/src/State/TaskDocumentProcessor.php
+++ b/src/State/TaskDocumentProcessor.php
@@ -25,7 +25,7 @@ final readonly class TaskDocumentProcessor implements ProcessorInterface
    private const MAX_FILE_SIZE = 50 * 1024 * 1024; // 50 MB

    private const ALLOWED_MIME_TYPES = [
-        'image/jpeg', 'image/png', 'image/gif', 'image/webp',
+        'image/jpeg', 'image/png', 'image/gif', 'image/webp', 'image/svg+xml',
        'application/pdf',
        'application/msword',
        'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
@@ -40,7 +40,7 @@ final readonly class TaskDocumentProcessor implements ProcessorInterface

    private const MIME_TO_EXTENSION = [
        'image/jpeg'                                                                => 'jpg', 'image/png' => 'png', 'image/gif' => 'gif',
-        'image/webp'                                                                => 'webp',
+        'image/webp'                                                                => 'webp', 'image/svg+xml' => 'svg',
        'application/pdf'                                                           => 'pdf',
        'application/msword'                                                        => 'doc',
        'application/vnd.openxmlformats-officedocument.wordprocessingml.document'   => 'docx',
@@ -92,11 +92,6 @@ final readonly class TaskDocumentProcessor implements ProcessorInterface
        $clientTicket = null;

        if ('' !== $taskIri) {
-            // ROLE_CLIENT (without ROLE_ADMIN) cannot upload documents directly to tasks
-            if ($this->security->isGranted('ROLE_CLIENT') && !$this->security->isGranted('ROLE_ADMIN')) {
-                throw new AccessDeniedHttpException('Clients can only upload documents to client tickets.');
-            }
-
            $task = $this->entityManager->getRepository(Task::class)->find((int) basename($taskIri));

            if (null === $task) {
--- a/src/State/UserPasswordHasherProcessor.php
+++ b/src/State/UserPasswordHasherProcessor.php
@@ -29,11 +29,10 @@ final readonly class UserPasswordHasherProcessor implements ProcessorInterface
     */
    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): mixed
    {
-        $plainPassword = $data->getPlainPassword();
+        $plainPassword = $data->getPassword();

-        if (null !== $plainPassword && '' !== $plainPassword) {
+        if (null !== $plainPassword && !str_starts_with($plainPassword, '$')) {
            $data->setPassword($this->passwordHasher->hashPassword($data, $plainPassword));
-            $data->setPlainPassword(null);
        }

        return $this->persistProcessor->process($data, $operation, $uriVariables, $context);
--- a/symfony.lock
+++ b/symfony.lock
@@ -222,6 +222,19 @@
            "config/routes/security.yaml"
        ]
    },
+    "symfony/twig-bundle": {
+        "version": "8.0",
+        "recipe": {
+            "repo": "github.com/symfony/recipes",
+            "branch": "main",
+            "version": "6.4",
+            "ref": "cab5fd2a13a45c266d45a7d9337e28dee6272877"
+        },
+        "files": [
+            "config/packages/twig.yaml",
+            "templates/base.html.twig"
+        ]
+    },
    "symfony/uid": {
        "version": "8.0",
        "recipe": {
--- a/templates/base.html.twig
+++ b/templates/base.html.twig
@@ -0,0 +1,16 @@
+<!DOCTYPE html>
+<html>
+    <head>
+        <meta charset="UTF-8">
+        <title>{% block title %}Welcome!{% endblock %}</title>
+        <link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 128 128%22><text y=%221.2em%22 font-size=%2296%22>⚫️</text><text y=%221.3em%22 x=%220.2em%22 font-size=%2276%22 fill=%22%23fff%22>sf</text></svg>">
+        {% block stylesheets %}
+        {% endblock %}
+
+        {% block javascripts %}
+        {% endblock %}
+    </head>
+    <body>
+        {% block body %}{% endblock %}
+    </body>
+</html>
Author	SHA1	Message	Date
gitea-actions	2e36e06966	chore: bump version to v0.2.5 All checks were successful Auto Tag Develop / tag (push) Successful in 4s Details Build Release Artefact / build (push) Successful in 1m24s Details	2026-03-17 09:36:25 +00:00
Matthieu	fb6a1931f5	chore : bump version to 0.25 and fix MCP session directory Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details Move MCP session storage from cache dir to var/mcp-sessions so it survives cache:clear operations. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-17 10:35:00 +01:00