chore: bump version to v0.3.33

Backend :
- POST /api/me/regenerate-api-token : nouveau controller, ROLE_USER (exclut CLIENT)
- User.apiToken exposé via groupe me:read sur GET /api/me

Frontend :
- Section 'Token API MCP' sur /profile (masquée pour les CLIENT du portail)
- Boutons Copier + Régénérer avec modal de confirmation
- Service api-token + DTO mis à jour + clés i18n fr

.claude/skills/ticket-executor/LEARNINGS.md

@@ -0,0 +1,61 @@
+# Ticket Executor - Learnings
+
+## Session 2026-03-17 (26 tickets)
+
+### T-001 — Secrets .env
+- **Pattern**: Replace secrets with `change_me_in_env_local` placeholder, move real values to `.env.local`
+- **Gotcha**: `.env.local` must contain ALL overridden secrets
+
+### T-002 — Security API Gitea
+- **Pattern**: Ajouter `security: "is_granted('ROLE_USER')"` sur les opérations ApiResource
+- **Learning**: Vérifier d'abord les ressources déjà sécurisées pour ne pas dupliquer
+
+### T-003 — SVG Upload
+- **Pattern**: Double protection - bloquer à l'upload (retirer du MIME allowlist) + defense-in-depth (Content-Disposition: attachment au download)
+- **Learning**: Toujours vérifier upload ET download controllers
+
+### T-004 — MCP create-task / Repos numérotation
+- **Gotcha critique**: PostgreSQL n'autorise PAS `FOR UPDATE` avec des fonctions d'agrégation (`MAX`)
+- **Fix**: Utiliser `pg_advisory_xact_lock()` au lieu de `FOR UPDATE` pour les queries avec agrégation
+- **Pattern**: Offset les lock keys (+1000000) pour éviter collisions entre Task et ClientTicket
+
+### T-005 — Filter ROLE_CLIENT projects
+- **Pattern**: Créer une Doctrine Extension (`QueryCollectionExtensionInterface` + `QueryItemExtensionInterface`) pour filtrer par relation
+- **Learning**: Symfony autoconfigure enregistre l'extension automatiquement
+
+### T-006 — Block client doc upload
+- **Pattern**: Vérifier le rôle dans le Processor AVANT de résoudre l'IRI de la tâche
+- **Learning**: Le portail client envoie un `clientTicket` IRI (pas de `task` IRI), donc le check sur `taskIri` non-vide suffit
+
+### T-007 — MCP role checks
+- **Pattern**: Injecter `Security` dans chaque Tool, vérifier au début de `__invoke()`
+- **Learning**: 22 tools à modifier - bien séparer ROLE_ADMIN (users/clients) vs ROLE_USER (le reste)
+
+### T-009 — Password hashing
+- **Pattern**: Champ `plainPassword` non-persisté, writable uniquement, hashé dans le Processor
+- **Learning**: Modifier aussi le frontend (DTO + composant) quand on renomme un champ API
+
+### T-010 — Rate limiting
+- **Gotcha**: `login_throttling` nécessite `symfony/rate-limiter` installé, pas juste dans composer.json
+- **Learning**: Toujours vérifier que les packages sont installés, pas juste déclarés
+
+### T-012 — Harmoniser repos numérotation
+- **Pattern**: Aligner les contrats (retourner le max, pas le next) et mettre le +1 côté appelant
+- **Learning**: Vérifier TOUS les appelants d'une méthode renommée
+
+### T-015 — useAvatarService
+- **Learning**: Quand on migre vers `useApi()`, ajouter la détection FormData pour ne pas écraser le Content-Type multipart
+
+### T-020 — i18n
+- **Pattern**: Ajouter `useI18n()` dans le setup script avant de pouvoir utiliser `t()` dans le JS
+- **Learning**: Les templates peuvent utiliser `$t()` directement sans import
+
+### T-022 — Retirer twig-bundle
+- **Pattern**: Retirer de composer.json + bundles.php + supprimer config YAML + templates
+- **Learning**: API Platform ne requiert PAS twig, c'est juste suggéré pour Swagger UI
+
+## Meta-learnings
+- **Parallélisation**: Les tickets touchant des fichiers indépendants peuvent tourner en parallèle sans problème
+- **MCP status**: Toujours mettre "En cours" AVANT de commencer, "Terminé" APRÈS validation
+- **PostgreSQL gotchas**: Tester les queries SQL avec agrégation + locking sur PostgreSQL, pas MySQL
+- **Agents**: Les agents simples (1-3 fichiers) terminent en ~30s, les complexes (22 fichiers) en ~8min

.claude/skills/ticket-executor/SKILL.md

@@ -0,0 +1,78 @@
+---
+name: ticket-executor
+description: Execute Lesstime project tickets systematically - updates MCP statuses, follows project conventions, and logs learnings for self-improvement
+---
+
+# Ticket Executor Skill
+
+## Purpose
+Execute Lesstime project tickets end-to-end: read the ticket, implement the fix, update MCP status, and log learnings.
+
+## Workflow
+
+### 1. Receive Ticket
+- Get ticket ID, title, description, tags (Backend/Frontend), priority, and current status
+- Understand the scope from the title and description
+
+### 2. Set Status to "En cours" (ID: 2)
+- Use MCP `update-task` with `statusId: 2` before starting work
+- MCP endpoint: `http://project.malio-dev.fr/_mcp`
+- Auth: `Bearer 7e8b410a5b79b5c0432951dcee3a3a81e0731e86d9f70d8784ec079a2b759c64`
+
+### 3. Analyze & Implement
+Based on tag:
+- **Backend**: Check `src/Entity/`, `src/State/`, `src/Controller/`, `src/Security/`, `config/`
+- **Frontend**: Check `frontend/components/`, `frontend/composables/`, `frontend/pages/`, `frontend/services/`
+
+Conventions to follow:
+- PHP: `declare(strict_types=1)`, Symfony + PSR-12, API Platform patterns
+- Frontend: TypeScript strict, `useApi()` composable, 4 spaces indent
+- See CLAUDE.md for full conventions
+
+### 4. Verify
+- For Backend: `make php-cs-fixer-allow-risky` if PHP changed
+- For Frontend: check TypeScript types, no `any`
+- Read modified files to confirm correctness
+
+### 5. Set Status to "Terminé" (ID: 5)
+- Use MCP `update-task` with `statusId: 5` after successful implementation
+
+### 6. Log Learnings
+Append to `.claude/skills/ticket-executor/LEARNINGS.md`:
+- What worked well
+- Patterns discovered
+- Gotchas encountered
+- Time-saving shortcuts found
+
+## MCP Session Management
+The MCP HTTP transport requires a session. To call tools:
+```bash
+# Initialize session (get Mcp-Session-Id from response header)
+curl -si -X POST http://project.malio-dev.fr/_mcp \
+  -H "Authorization: Bearer <token>" \
+  -H "Content-Type: application/json" \
+  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"claude","version":"1.0"}}}'
+
+# Call tool (use Mcp-Session-Id from init response)
+curl -s -X POST http://project.malio-dev.fr/_mcp \
+  -H "Authorization: Bearer <token>" \
+  -H "Content-Type: application/json" \
+  -H "Mcp-Session-Id: <session-id>" \
+  -d '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"update-task","arguments":{"id":<taskId>,"statusId":<statusId>}}}'
+```
+
+## Status IDs
+- 1 = A faire
+- 2 = En cours
+- 3 = Bloqué
+- 4 = En attente de validation
+- 5 = Terminé
+
+## Learnings Integration
+Before each ticket, read `LEARNINGS.md` to apply previous insights.
+After each ticket, append new learnings. This creates a feedback loop that improves execution quality over time.
+
+## Parallel Execution Rules
+- Independent tickets (no shared files) can run in parallel via worktree agents
+- Tickets modifying the same files must run sequentially
+- Always verify no merge conflicts after parallel execution

.dockerignore

@@ -0,0 +1,24 @@
+.git
+.gitea
+.env.local
+.env.test
+infra/dev/
+infra/prod/docker-compose.yml
+infra/prod/deploy.sh
+infra/prod/deploy-release.sh
+infra/prod/.env.example
+frontend/node_modules
+frontend/.nuxt
+frontend/.output
+var/
+vendor/
+LOG/
+docs/
+tests/
+*.sql
+*.xlsx
+*.png
+*.md
+!composer.lock
+!symfony.lock
+!frontend/package-lock.json

.env.example

@@ -60,7 +60,7 @@ JWT_COOKIE_TTL=86400
 # Base de donnees (Doctrine / PostgreSQL)
 # ===========================================================================
 
-# Les variables POSTGRES_* sont definies dans docker/.env.docker
+# Les variables POSTGRES_* sont definies dans infra/dev/.env.docker
 # et injectees automatiquement par Docker Compose.
 # DATABASE_URL est construite a partir de ces variables.
 DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/${POSTGRES_DB}?serverVersion=16&charset=utf8"
@@ -74,10 +74,10 @@ DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:${POSTGRES_P
 ENCRYPTION_KEY=change_me_in_env_local
 
 # ===========================================================================
-# Docker (docker/.env.docker)
+# Docker (infra/dev/.env.docker)
 #
-# Ces variables sont lues par Docker Compose. Voir docker/.env.docker
-# pour les valeurs par defaut. Creez docker/.env.docker.local pour
+# Ces variables sont lues par Docker Compose. Voir infra/dev/.env.docker
+# pour les valeurs par defaut. Creez infra/dev/.env.docker.local pour
 # surcharger localement.
 # ===========================================================================
 

.gitea/workflows/build-docker.yml

@@ -0,0 +1,30 @@
+name: Build & Push Docker Image
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Login to Gitea Registry
+        run: |
+          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.malio.fr -u "${{ gitea.repository_owner }}" --password-stdin
+
+      - name: Build Docker image
+        run: |
+          docker build \
+            -f infra/prod/Dockerfile \
+            -t gitea.malio.fr/malio-dev/lesstime:${{ gitea.ref_name }} \
+            -t gitea.malio.fr/malio-dev/lesstime:latest \
+            .
+
+      - name: Push Docker image
+        run: |
+          docker push gitea.malio.fr/malio-dev/lesstime:${{ gitea.ref_name }}
+          docker push gitea.malio.fr/malio-dev/lesstime:latest

.gitea/workflows/release-artefact.yml

@@ -1,65 +0,0 @@
-name: Build Release Artefact
-
-on:
-  push:
-    tags:
-      - "v*"
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Setup PHP
-        uses: shivammathur/setup-php@v2
-        with:
-          php-version: "8.4"
-          extensions: mbstring, intl, pdo_pgsql, xml, curl, zip, gd
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: "lts/*"
-
-      - name: Install backend deps (prod)
-        env:
-          APP_ENV: prod
-          APP_DEBUG: "0"
-        run: composer install --no-dev --optimize-autoloader --no-interaction --no-scripts
-
-      - name: Build frontend (static)
-        run: |
-          cd frontend
-          npm ci
-          CI=1 NUXT_TELEMETRY_DISABLED=1 NUXT_PUBLIC_API_BASE=/api NUXT_PUBLIC_APP_BASE=/ npm run generate
-          test -f .output/public/index.html
-
-      - name: Build artefact
-        shell: bash
-        run: |
-          set -euo pipefail
-          mkdir -p release
-          tar -czf "release/lesstime-${GITHUB_REF_NAME}.tar.gz" \
-            .env \
-            bin \
-            config \
-            migrations \
-            public \
-            src \
-            vendor \
-            composer.json \
-            composer.lock \
-            symfony.lock \
-            frontend/.output
-
-      - name: Create Release
-        uses: softprops/action-gh-release@v2
-        with:
-          files: release/lesstime-${{ github.ref_name }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}

.gitignore

@@ -28,5 +28,5 @@
 ###< ide ###
 
 ###> docker local ###
-docker/.env.docker.local
+infra/dev/.env.docker.local
 ###< docker local ###

CLAUDE.md

@@ -103,6 +103,10 @@ Exemples : `feat : add login page`, `fix(auth) : prevent null token crash`
 - Portal client : pages sous `/portal/`, layout `portal.vue`, middleware redirige `ROLE_CLIENT` (sans `ROLE_ADMIN`) vers `/portal`
 - Users admin+client : ne pas bloquer — vérifier `ROLE_CLIENT && !ROLE_ADMIN` pour les restrictions
 
+### Composants UI
+
+La librairie `@malio/layer-ui` fournit les composants de formulaire et d'action. La documentation complète des props, events et exemples d'utilisation se trouve dans `frontend/node_modules/@malio/layer-ui/COMPONENTS.md`. Toujours s'y référer avant d'utiliser un composant Malio.
+
 ### MCP Server
 
 - 25 tools MCP exposant projets, tâches, métadonnées, time tracking, et récurrences
@@ -125,7 +129,7 @@ Exemples : `feat : add login page`, `fix(auth) : prevent null token crash`
 - Container PHP : `php-lesstime-fpm`
 - Container Nginx : `nginx-lesstime`
 - Container DB : PostgreSQL sur port **5435** (interne et externe)
-- Config Docker : `docker/.env.docker` (override local : `docker/.env.docker.local`)
+- Config Docker : `infra/dev/.env.docker` (override local : `infra/dev/.env.docker.local`)
 - Après modif nginx : `docker restart nginx-lesstime`
 
 ## Fixtures
@@ -136,3 +140,12 @@ Exemples : `feat : add login page`, `fix(auth) : prevent null token crash`
 - API token admin (dev) : `dev-mcp-token-for-testing-only-do-not-use-in-production`
 - ZimbraConfiguration : serverUrl `https://mail.ovh.com`, username `lesstime@ovh.fr`, enabled false
 - TaskRecurrence (hebdomadaire lun/mer/ven) attachée à la tâche "Réunion de suivi hebdomadaire" (SIRH)
+
+## Delegation Codex
+
+Pour les taches mecaniques (tests, boilerplate, renommages, refacto repetitif), delegue a Codex via le plugin `codex`. Garde Claude pour la reflexion, l'architecture et la verification.
+
+- **Codex** = junior dev rapide et pas cher (executions mecaniques)
+- **Claude** = senior dev qui verifie et reflechit (design, review, decisions)
+
+C'est le meilleur ratio qualite/credits.

README.md

@@ -156,7 +156,7 @@ docker/                 # Dockerfiles et config Nginx
 | `nginx-lesstime` | 8082 | Nginx reverse proxy |
 | PostgreSQL | 5435 | Base de données |
 
-Configuration : `docker/.env.docker` (override local : `docker/.env.docker.local`)
+Configuration : `infra/dev/.env.docker` (override local : `infra/dev/.env.docker.local`)
 
 ## API
 

config/version.yaml

@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.3.10'
+    app.version: '0.3.33'

deploy/nginx/lesstime.conf

@@ -1,50 +0,0 @@
-server {
-  listen 80;
-  listen [::]:80;
-  server_name project.malio-dev.fr;
-
-  root /var/www/lesstime/frontend/.output/public;
-  index index.html;
-
-  client_max_body_size 55m;
-
-    location ^~ /api/ {
-        root /var/www/lesstime/public;
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ^~ /bundles/ {
-        root /var/www/lesstime/public;
-        try_files $uri =404;
-    }
-
-    location = /api/login_check {
-        include fastcgi_params;
-        fastcgi_param SCRIPT_FILENAME /var/www/lesstime/public/index.php;
-        fastcgi_param DOCUMENT_ROOT /var/www/lesstime/public;
-        fastcgi_param SCRIPT_NAME /index.php;
-        fastcgi_param PATH_INFO /login_check;
-        fastcgi_param REQUEST_URI /login_check;
-        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
-    }
-
-    location ^~ /_mcp {
-        root /var/www/lesstime/public;
-        try_files $uri /index.php?$query_string;
-    }
-
-    location ~ ^/index\.php(/|$) {
-        include fastcgi_params;
-        fastcgi_param SCRIPT_FILENAME /var/www/lesstime/public/index.php;
-        fastcgi_param DOCUMENT_ROOT /var/www/lesstime/public;
-        fastcgi_pass unix:/run/php/php8.4-fpm.sock;
-    }
-
-  location ~ \.php$ {
-      return 404;
-  }
-
-  location / {
-      try_files $uri $uri/ /index.html;
-  }
-}

doc/deployment-docker.md

@@ -0,0 +1,364 @@
+# Deploiement Docker — Lesstime
+
+## Pre-requis
+
+### Docker
+
+```bash
+# Ubuntu
+sudo apt update
+sudo apt install -y ca-certificates curl gnupg
+sudo install -m 0755 -d /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+sudo apt update
+sudo apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+sudo usermod -aG docker $USER
+```
+
+Se deconnecter/reconnecter pour que le groupe `docker` prenne effet.
+
+### Nginx
+
+```bash
+sudo apt install -y nginx
+sudo systemctl enable nginx
+sudo systemctl start nginx
+```
+
+### PostgreSQL
+
+PostgreSQL tourne dans un conteneur Docker separe (voir le repo `infra-postgres`).
+Il doit etre installe et accessible avant de deployer Lesstime.
+
+Creer la base de donnees pour Lesstime :
+
+```bash
+cd /var/www/postgres
+docker compose exec postgres psql -U admin
+```
+
+```sql
+-- Si le user n'existe pas encore
+CREATE USER malio WITH PASSWORD 'motdepasse';
+
+-- Creer la base
+CREATE DATABASE lesstime_prod OWNER malio;
+\q
+```
+
+---
+
+## Premiere installation (nouvelle machine)
+
+Guide complet pour mettre en ligne Lesstime sur une machine vierge. Inclut les pre-requis, la BDD et l'app.
+
+### 1. Installer les pre-requis
+
+Installer Docker, Nginx et PostgreSQL (voir section Pre-requis ci-dessus).
+
+### 2. Creer le dossier de deploiement
+
+```bash
+sudo mkdir -p /var/www/lesstime
+sudo chown -R $(whoami):$(whoami) /var/www/lesstime
+cd /var/www/lesstime
+```
+
+### 3. Se connecter au registry Docker de Gitea
+
+```bash
+docker login gitea.malio.fr
+```
+
+- **Username** : le nom d'utilisateur du compte organisation Gitea `MALIO`
+- **Password** : le token REGISTRY_TOKEN dispo dans le bitwarden
+
+Le login est sauvegarde dans `~/.docker/config.json`, pas besoin de le refaire a chaque deploiement.
+
+### 4. Creer les fichiers de deploiement
+
+Creer `docker-compose.yml` :
+
+```yaml
+services:
+  app:
+    image: gitea.malio.fr/malio-dev/lesstime:${LESSTIME_IMAGE_TAG:-latest}
+    container_name: lesstime-app
+    env_file: .env
+    ports:
+      - "8080:80"
+    volumes:
+      - ./config/jwt:/var/www/html/config/jwt:ro
+      - ./uploads:/var/www/html/var/uploads
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    restart: unless-stopped
+```
+
+Creer `deploy.sh` :
+
+```bash
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")"
+
+TAG="${1:-latest}"
+export LESSTIME_IMAGE_TAG="$TAG"
+
+echo "==> Deploying lesstime:${TAG}..."
+
+echo "==> Enabling maintenance mode..."
+touch maintenance.on
+
+echo "==> Pulling image..."
+sudo docker compose pull
+
+echo "==> Starting container..."
+sudo docker compose up -d
+
+echo "==> Waiting for container to be ready..."
+sleep 3
+
+echo "==> Extracting maintenance page..."
+mkdir -p public
+sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintenance.html
+
+echo "==> Running migrations..."
+sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction
+
+echo "==> Clearing cache..."
+sudo docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
+sudo docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
+
+echo "==> Disabling maintenance mode..."
+rm -f maintenance.on
+
+VERSION=$(sudo docker compose exec -T app cat config/version.yaml | grep 'app.version' | awk -F"'" '{print $2}')
+echo "==> Deployed v${VERSION}"
+```
+
+Rendre executable :
+
+```bash
+chmod +x deploy.sh
+```
+
+### 5. Configurer l'environnement
+
+Creer `.env` avec les variables suivantes :
+
+```env
+# Symfony
+APP_ENV=prod
+APP_DEBUG=0
+APP_SECRET=<generer avec: openssl rand -hex 32>
+
+# Database (host.docker.internal = la machine hote, ou le PG tourne en Docker)
+DATABASE_URL="postgresql://malio:password@host.docker.internal:5432/lesstime_prod?serverVersion=16&charset=utf8"
+
+# JWT
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE=<generer avec: openssl rand -hex 32>
+JWT_COOKIE_SECURE=1
+JWT_COOKIE_SAMESITE=lax
+JWT_TOKEN_TTL=86400
+JWT_COOKIE_TTL=86400
+
+# CORS
+CORS_ALLOW_ORIGIN='^https?://project\.malio-dev\.fr$'
+
+# App
+DEFAULT_URI=https://project.malio-dev.fr
+```
+
+### 6. Generer les cles JWT
+
+```bash
+mkdir -p config/jwt
+openssl genpkey -algorithm RSA -out config/jwt/private.pem -pkeyopt rsa_keygen_bits:4096
+openssl rsa -pubout -in config/jwt/private.pem -out config/jwt/public.pem
+```
+
+Rendre les cles lisibles par le conteneur (www-data = uid 33) :
+
+```bash
+sudo chown 33:33 config/jwt/private.pem config/jwt/public.pem
+sudo chmod 644 config/jwt/private.pem config/jwt/public.pem
+```
+
+### 7. Creer le dossier uploads
+
+```bash
+mkdir -p uploads
+```
+
+### 8. Configurer Nginx systeme
+
+Creer `/etc/nginx/sites-available/lesstime.conf` :
+
+```nginx
+server {
+    listen 80;
+    listen [::]:80;
+    server_name project.malio-dev.fr;
+
+    root /var/www/lesstime/public;
+
+    # Maintenance mode
+    if (-f /var/www/lesstime/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8081;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        client_max_body_size 55m;
+    }
+}
+```
+
+Activer le site :
+
+```bash
+sudo ln -sf /etc/nginx/sites-available/lesstime.conf /etc/nginx/sites-enabled/lesstime.conf
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+### 9. Deployer
+
+```bash
+./deploy.sh
+```
+
+### 10. Importer les donnees (optionnel)
+
+Si tu as un dump SQL a importer :
+
+```bash
+# Depuis ton PC, envoyer le dump vers le serveur
+scp lesstime.sql user@serveur:/tmp/lesstime.sql
+
+# Sur le serveur, vider la base puis importer
+cd /var/www/postgres
+docker compose exec -T postgres psql -U malio lesstime_prod -c "DROP SCHEMA public CASCADE; CREATE SCHEMA public;"
+docker compose exec -T postgres psql -U malio lesstime_prod < /tmp/lesstime.sql
+
+# Creer les tables manquantes (si le dump a des erreurs de syntaxe)
+cd /var/www/lesstime
+docker compose exec -u www-data app php bin/console doctrine:schema:update --force --env=prod
+
+# Nettoyer
+rm /tmp/lesstime.sql
+```
+
+### Structure finale du dossier
+
+```
+/var/www/lesstime/
+├── docker-compose.yml
+├── deploy.sh
+├── .env
+├── config/jwt/
+│   ├── private.pem
+│   └── public.pem
+├── public/
+│   └── maintenance.html    # extrait automatiquement par deploy.sh
+└── uploads/
+```
+
+---
+
+## Deployer une nouvelle version
+
+Quand l'app est deja installee, deployer une mise a jour :
+
+```bash
+cd /var/www/lesstime
+./deploy.sh           # deploie la derniere version (latest)
+./deploy.sh v0.3.13   # deploie une version specifique
+```
+
+C'est tout. Le script pull l'image, redemarre le conteneur, lance les migrations et vide le cache.
+
+---
+
+## Rollback
+
+### Image seule (pas de changement de schema BDD)
+
+```bash
+./deploy.sh v0.3.12
+```
+
+### Avec rollback de migration
+
+```bash
+# 1. Rollback schema (pendant que la version actuelle tourne encore)
+docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate prev --no-interaction
+# 2. Deployer l'ancienne version
+./deploy.sh v0.3.12
+```
+
+---
+
+## CI/CD
+
+Le workflow `.gitea/workflows/build-docker.yml` se declenche automatiquement sur push de tag `v*` :
+1. Build l'image multi-stage
+2. Push vers `gitea.malio.fr/malio-dev/lesstime:<tag>` et `:latest`
+
+Combine avec `auto-tag-develop.yml`, chaque push sur `develop` cree automatiquement un tag → build → image disponible.
+
+---
+
+## Voir les logs
+
+```bash
+cd /var/www/lesstime
+docker compose logs -f            # tous les logs
+docker compose logs -f --tail=100 # 100 dernieres lignes
+```
+
+Logs Symfony :
+
+```bash
+docker compose exec app cat var/log/prod.log
+```
+
+---
+
+## Migration depuis l'ancien deploiement (bare-metal)
+
+Si l'application tourne deja en bare metal :
+
+1. Installer Docker (voir pre-requis)
+2. Creer le dossier `/var/www/lesstime-docker/` (ne pas ecraser l'ancien)
+3. Copier les fichiers existants :
+   ```bash
+   cp /var/www/lesstime/.env /var/www/lesstime-docker/.env
+   cp -a /var/www/lesstime/config/jwt /var/www/lesstime-docker/config/jwt
+   cp -a /var/www/lesstime/var/uploads /var/www/lesstime-docker/uploads
+   ```
+4. Creer `docker-compose.yml` et `deploy.sh` dans `/var/www/lesstime-docker/` (voir etape 4 ci-dessus)
+5. Editer `/var/www/lesstime-docker/.env` : changer `DATABASE_URL` pour utiliser `host.docker.internal` au lieu de `127.0.0.1`
+6. Se connecter au registry Gitea (voir etape 3 ci-dessus)
+7. Mettre a jour Nginx systeme avec la conf reverse proxy (voir etape 8 ci-dessus)
+8. Arreter l'ancien PHP-FPM : `sudo systemctl stop php8.4-fpm`
+9. Deployer : `cd /var/www/lesstime-docker && ./deploy.sh`
+10. Verifier que tout marche, puis renommer le dossier : `mv /var/www/lesstime-docker /var/www/lesstime`

doc/setup-maintenance-mode.md

@@ -0,0 +1,153 @@
+# Configuration du mode maintenance (nginx hote)
+
+Guide pour activer le support du mode maintenance pilote par Central.
+Ces etapes sont a faire **une seule fois** par application sur le serveur de production.
+
+Le principe : le nginx de l'hote (reverse proxy) verifie si un fichier `maintenance.on` existe dans le dossier de deploy. Si oui, il sert une page `maintenance.html` au lieu de proxifier vers le container Docker.
+
+Central pilote la creation/suppression de ce fichier via ses volumes Docker.
+
+## Ce qui a ete fait pour Lesstime
+
+### 1. Deployer pour extraire la page maintenance
+
+```bash
+cd /var/www/lesstime
+sudo ./deploy.sh
+```
+
+Le `deploy.sh` extrait automatiquement `maintenance.html` du container vers `public/` :
+```
+mkdir -p public
+sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintenance.html
+```
+
+### 2. Mettre a jour la conf nginx de l'hote
+
+Remplacer le contenu de `/etc/nginx/sites-available/lesstime.conf` :
+
+```nginx
+server {
+    listen 80;
+    listen [::]:80;
+    server_name project.malio-dev.fr;
+
+    root /var/www/lesstime/public;
+
+    # Maintenance mode
+    if (-f /var/www/lesstime/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8081;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        client_max_body_size 55m;
+    }
+}
+```
+
+### 3. Recharger nginx
+
+```bash
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+### 4. Verifier
+
+- Depuis Central, activer la maintenance sur Lesstime
+- Ouvrir `http://project.malio-dev.fr` → doit afficher la page "Maintenance en cours"
+- Desactiver la maintenance depuis Central → le site revient
+
+---
+
+## A faire pour Inventory
+
+Meme procedure :
+
+### 1. Deployer pour extraire la page maintenance
+
+```bash
+cd /var/www/inventory
+sudo ./deploy.sh
+```
+
+> Si le `deploy.sh` ne contient pas encore l'extraction, mettre a jour le fichier depuis le repo (`infra/prod/deploy.sh`) ou executer manuellement :
+> ```bash
+> mkdir -p public
+> sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintenance.html
+> ```
+
+### 2. Mettre a jour la conf nginx de l'hote
+
+Remplacer le contenu de `/etc/nginx/sites-available/inventory.conf` :
+
+```nginx
+server {
+    listen 80;
+    listen [::]:80;
+    server_name inventory.malio-dev.fr;
+
+    root /var/www/inventory/public;
+
+    # Maintenance mode
+    if (-f /var/www/inventory/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8082;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+```
+
+### 3. Recharger nginx
+
+```bash
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+---
+
+## Fonctionnement
+
+```
+Central (container)
+  └── touch /var/www/maintenance/lesstime/maintenance.on
+        │ (volume Docker : /var/www/lesstime → /var/www/maintenance/lesstime)
+        ▼
+/var/www/lesstime/maintenance.on (hote)
+        │
+        ▼
+nginx hote : if (-f /var/www/lesstime/maintenance.on) → 503
+        │
+        ▼
+maintenance.html servie depuis /var/www/lesstime/public/
+```

docker-compose.yml

@@ -2,7 +2,7 @@ services:
   php:
     container_name: php-${DOCKER_APP_NAME}-fpm
     build:
-      context: ./docker/php
+      context: ./infra/dev
       dockerfile: Dockerfile
       args:
         DOCKER_PHP_VERSION: ${DOCKER_PHP_VERSION}
@@ -21,8 +21,8 @@ services:
       - ~/.cache:/var/www/.cache # Pour la cache de composer
       - ~/.config:/var/www/.config # Pour la config de yarn
       - ~/.composer:/var/www/.composer # Pour la config de composer
-      - ./docker/php/config/php.ini:/usr/local/etc/php/php.ini
-      - ./docker/php/config/docker-php-ext-xdebug.ini:/usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini
+      - ./infra/dev/php.ini:/usr/local/etc/php/php.ini
+      - ./infra/dev/xdebug.ini:/usr/local/etc/php/conf.d/docker-php-ext-xdebug.ini
       - ./LOG:/var/www/html/LOG
       - uploads_data:/var/www/html/var/uploads
     extra_hosts:
@@ -41,7 +41,7 @@ services:
       - "8082:80"
     volumes:
       - ./:/var/www/html:ro
-      - ./docker/nginx/conf.d:/etc/nginx/conf.d:ro
+      - ./infra/dev/nginx.conf:/etc/nginx/conf.d/default.conf:ro
     restart: unless-stopped
   db:
     image: postgres:16-alpine

docs/claude-time-tracking-rule.md

@@ -0,0 +1,87 @@
+# Règle Claude : Time Tracking automatique via Lesstime
+
+> Ajouter ce contenu dans le CLAUDE.md de chaque projet ou dans `~/.claude/CLAUDE.md` pour l'appliquer globalement.
+
+---
+
+## Time Tracking obligatoire
+
+Claude DOIT créer une time entry dans Lesstime au démarrage de chaque tâche de développement, ou sur demande explicite de l'utilisateur ("lance le chrono", "start timer", "track le temps").
+
+### Déclencheurs
+
+1. **Début d'une tâche de dev** : feature, bugfix, refactoring, infra, review
+2. **Demande explicite** : "lance le chrono", "start timer", "track le temps"
+3. **Depuis un ticket Lesstime** : lier directement au taskId du ticket référencé
+
+### Méthode
+
+Créer la time entry via **curl** sur l'API REST Lesstime :
+
+1. **Login** : `POST http://project.malio-dev.fr/api/login_check`
+   - Body : `{"username":"admin","password":"admin"}`
+   - Réponse : 204 avec cookie `Set-Cookie: BEARER=<jwt>`
+
+2. **Créer le timer** : `POST http://project.malio-dev.fr/api/time_entries`
+   - Headers : `Cookie: BEARER=<jwt>`, `Content-Type: application/ld+json`, `Accept: application/ld+json`
+   - Body :
+     ```json
+     {
+       "user": "/api/users/5",
+       "startedAt": "<ISO8601 avec timezone>",
+       "title": "<description courte de la tâche>",
+       "project": "/api/projects/<projectId>",
+       "tags": ["/api/task_tags/<tagId>"],
+       "task": "/api/tasks/<taskId>"
+     }
+     ```
+
+3. **Stopper le timer** : `PATCH http://project.malio-dev.fr/api/time_entries/<id>`
+   - Headers : `Cookie: BEARER=<jwt>`, `Content-Type: application/merge-patch+json`, `Accept: application/ld+json`
+   - Body : `{"stoppedAt": "<ISO8601>"}`
+
+### Paramètres obligatoires
+
+- **user** : TOUJOURS `/api/users/5` (Matthieu)
+- **startedAt** : ISO 8601 avec timezone (ex: `2026-04-01T14:30:00+02:00`)
+- **title** : description courte de la tâche en cours
+- **project** : selon le projet (voir mapping ci-dessous)
+
+### Tags (choisir selon le type de travail)
+
+| Tag | ID | IRI |
+|-----|----|-----|
+| Backend | 3 | `/api/task_tags/3` |
+| Frontend | 2 | `/api/task_tags/2` |
+| IA | 7 | `/api/task_tags/7` |
+| Infra | 5 | `/api/task_tags/5` |
+| UI/UX | 4 | `/api/task_tags/4` |
+| Maintenance | 6 | `/api/task_tags/6` |
+| RDV | 1 | `/api/task_tags/1` |
+| Réunion | 8 | `/api/task_tags/8` |
+| Formation | 10 | `/api/task_tags/10` |
+| Gestion projet | 9 | `/api/task_tags/9` |
+
+### Mapping projets
+
+| Projet | ID | IRI |
+|--------|----|-----|
+| Lesstime | 5 | `/api/projects/5` |
+| Inventory | 7 | `/api/projects/7` |
+| SIRH | 12 | `/api/projects/12` |
+| Infrastructure | 13 | `/api/projects/13` |
+| Malio UI | 11 | `/api/projects/11` |
+| ERP Liot | 6 | `/api/projects/6` |
+| Ferme | 8 | `/api/projects/8` |
+| ADMIN | 16 | `/api/projects/16` |
+| Maintenance-LIOT | 17 | `/api/projects/17` |
+| Qualiopi | 14 | `/api/projects/14` |
+| Vaultwarden | 18 | `/api/projects/18` |
+
+### Règles
+
+- **Un seul timer actif à la fois** (contrainte DB) — stopper l'actif avant d'en créer un nouveau
+- **Toujours stopper le timer** en fin de tâche ou sur demande
+- **Informer l'utilisateur** quand un timer est lancé/stoppé (numéro, titre, projet, tags)
+- **Lier au ticket Lesstime** si un ticket est référencé (champ `task`)
+- **Choisir les tags intelligemment** selon le type de travail effectué

docs/deploy.md

@@ -61,7 +61,7 @@ ENCRYPTION_KEY=<random-hex-32>
 ## 4. Installer le script de deploy
 
 ```bash
-sudo cp script/deploy-release.sh /usr/local/bin/deploy-lesstime
+sudo cp infra/prod/deploy-release.sh /usr/local/bin/deploy-lesstime
 sudo chmod +x /usr/local/bin/deploy-lesstime
 ```
 
@@ -89,7 +89,7 @@ sudo -u www-data php bin/console lexik:jwt:generate-keypair --skip-if-exists --e
 ## 7. Configurer Nginx
 
 ```bash
-sudo cp deploy/nginx/lesstime.conf /etc/nginx/sites-available/lesstime
+sudo cp infra/prod/nginx-baremetal.conf /etc/nginx/sites-available/lesstime
 sudo ln -sf /etc/nginx/sites-available/lesstime /etc/nginx/sites-enabled/
 sudo nginx -t && sudo systemctl reload nginx
 ```

frontend/components/admin/AdminBookStackTab.vue

@@ -10,21 +10,17 @@
                 input-class="w-full"
             />
 
-            <MalioInputText
+            <MalioInputPassword
                 v-model="form.tokenId"
                 :label="$t('bookstack.settings.tokenId')"
-                :placeholder="$t('bookstack.settings.tokenIdPlaceholder')"
                 input-class="w-full"
-                type="password"
             />
 
             <div>
-                <MalioInputText
+                <MalioInputPassword
                     v-model="form.tokenSecret"
                     :label="$t('bookstack.settings.tokenSecret')"
-                    :placeholder="$t('bookstack.settings.tokenSecretPlaceholder')"
                     input-class="w-full"
-                    type="password"
                 />
                 <p v-if="hasToken && !form.tokenId && !form.tokenSecret" class="mt-1 text-xs text-green-600">
                     {{ $t('bookstack.settings.tokenConfigured') }}
@@ -32,21 +28,19 @@
             </div>
 
             <div class="flex gap-3">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:opacity-50"
+                <MalioButton
+                    :label="$t('bookstack.settings.save')"
+                    button-class="w-auto px-4"
                     :disabled="isSaving"
-                >
-                    {{ $t('bookstack.settings.save') }}
-                </button>
-                <button
-                    type="button"
-                    class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50 disabled:opacity-50"
+                    @click="handleSave"
+                />
+                <MalioButton
+                    variant="tertiary"
+                    :label="$t('bookstack.settings.testConnection')"
+                    button-class="w-auto px-4"
                     :disabled="isTesting"
                     @click="handleTest"
-                >
-                    {{ $t('bookstack.settings.testConnection') }}
-                </button>
+                />
             </div>
 
             <p v-if="testResult !== null" class="text-sm font-medium" :class="testResult ? 'text-green-600' : 'text-red-600'">

frontend/components/admin/AdminClientTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Clients</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter un client"
                 @click="openCreate"
-            >
-                + Ajouter un client
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminClientTicketTab.vue

@@ -92,19 +92,21 @@
                         <td class="px-3 py-3 text-neutral-400">{{ formatDate(ticket.createdAt) }}</td>
                         <td class="px-3 py-3">
                             <div class="flex items-center gap-2">
-                                <button
-                                    class="rounded p-1 text-neutral-400 transition-colors hover:bg-neutral-100 hover:text-primary-500"
-                                    :title="$t('clientTicket.changeStatus')"
+                                <MalioButtonIcon
+                                    icon="mdi:swap-horizontal"
+                                    :aria-label="$t('clientTicket.changeStatus')"
+                                    variant="ghost"
+                                    icon-size="18"
                                     @click.stop="openStatusChange(ticket)"
-                                >
-                                    <Icon name="mdi:swap-horizontal" size="18" />
-                                </button>
-                                <button
-                                    class="rounded p-1 text-neutral-400 transition-colors hover:bg-red-50 hover:text-red-500"
+                                />
+                                <MalioButtonIcon
+                                    icon="mdi:delete-outline"
+                                    aria-label="Supprimer"
+                                    variant="ghost"
+                                    icon-size="18"
+                                    button-class="text-neutral-400 hover:bg-red-50 hover:text-red-500"
                                     @click.stop="openDeleteConfirm(ticket)"
-                                >
-                                    <Icon name="mdi:delete-outline" size="18" />
-                                </button>
+                                />
                             </div>
                         </td>
                     </tr>
@@ -155,19 +157,18 @@
                         </div>
 
                         <div class="mt-6 flex justify-end gap-3">
-                            <button
-                                class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                            <MalioButton
+                                variant="tertiary"
+                                :label="$t('common.cancel')"
+                                button-class="w-auto px-4"
                                 @click="statusModalOpen = false"
-                            >
-                                {{ $t('common.cancel') }}
-                            </button>
-                            <button
-                                class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                            />
+                            <MalioButton
+                                label="Confirmer"
+                                button-class="w-auto px-6"
                                 :disabled="isUpdatingStatus"
                                 @click="confirmStatusChange"
-                            >
-                                Confirmer
-                            </button>
+                            />
                         </div>
                     </div>
                 </div>
@@ -186,19 +187,19 @@
                         <h3 class="text-lg font-bold text-neutral-900">{{ $t('clientTicket.confirmDelete') }}</h3>
                         <p class="mt-2 text-sm text-neutral-600">{{ $t('clientTicket.confirmDeleteMessage') }}</p>
                         <div class="mt-6 flex justify-end gap-3">
-                            <button
-                                class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                            <MalioButton
+                                variant="tertiary"
+                                :label="$t('common.cancel')"
+                                button-class="w-auto px-4"
                                 @click="deleteModalOpen = false"
-                            >
-                                {{ $t('common.cancel') }}
-                            </button>
-                            <button
-                                class="rounded-lg bg-red-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-red-600 disabled:cursor-not-allowed disabled:opacity-50"
+                            />
+                            <MalioButton
+                                variant="danger"
+                                label="Supprimer"
+                                button-class="w-auto px-6"
                                 :disabled="isDeleting"
                                 @click="confirmDelete"
-                            >
-                                Supprimer
-                            </button>
+                            />
                         </div>
                     </div>
                 </div>

frontend/components/admin/AdminEffortTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Efforts</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter un effort"
                 @click="openCreate"
-            >
-                + Ajouter un effort
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminGiteaTab.vue

@@ -11,12 +11,10 @@
             />
 
             <div>
-                <MalioInputText
+                <MalioInputPassword
                     v-model="form.token"
                     :label="$t('gitea.settings.token')"
-                    :placeholder="$t('gitea.settings.tokenPlaceholder')"
                     input-class="w-full"
-                    type="password"
                 />
                 <p v-if="hasToken && !form.token" class="mt-1 text-xs text-green-600">
                     {{ $t('gitea.settings.tokenConfigured') }}
@@ -24,21 +22,19 @@
             </div>
 
             <div class="flex gap-3">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:opacity-50"
+                <MalioButton
+                    :label="$t('gitea.settings.save')"
+                    button-class="w-auto px-4"
                     :disabled="isSaving"
-                >
-                    {{ $t('gitea.settings.save') }}
-                </button>
-                <button
-                    type="button"
-                    class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50 disabled:opacity-50"
+                    @click="handleSave"
+                />
+                <MalioButton
+                    variant="tertiary"
+                    :label="$t('gitea.settings.testConnection')"
+                    button-class="w-auto px-4"
                     :disabled="isTesting"
                     @click="handleTest"
-                >
-                    {{ $t('gitea.settings.testConnection') }}
-                </button>
+                />
             </div>
 
             <p v-if="testResult !== null" class="text-sm font-medium" :class="testResult ? 'text-green-600' : 'text-red-600'">

frontend/components/admin/AdminPriorityTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Priorités</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter une priorité"
                 @click="openCreate"
-            >
-                + Ajouter une priorité
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminStatusTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Statuts</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter un statut"
                 @click="openCreate"
-            >
-                + Ajouter un statut
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminTagTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Tags</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter un tag"
                 @click="openCreate"
-            >
-                + Ajouter un tag
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminUserTab.vue

@@ -2,12 +2,13 @@
     <div>
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Utilisateurs</h2>
-            <button
-                class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+            <MalioButton
+                icon-name="mdi:plus"
+                icon-position="left"
+                button-class="w-auto px-4"
+                label="Ajouter un utilisateur"
                 @click="openCreate"
-            >
-                + Ajouter un utilisateur
-            </button>
+            />
         </div>
 
         <DataTable

frontend/components/admin/AdminZimbraTab.vue

@@ -22,11 +22,10 @@
                 input-class="w-full"
             />
             <div>
-                <MalioInputText
+                <MalioInputPassword
                     v-model="form.password"
                     :label="$t('zimbra.settings.password')"
                     input-class="w-full"
-                    type="password"
                 />
                 <p v-if="hasPassword && !form.password" class="mt-1 text-xs text-green-600">
                     {{ $t('zimbra.settings.passwordConfigured') }}
@@ -37,21 +36,19 @@
                 <span class="text-sm">{{ $t('zimbra.settings.enabled') }}</span>
             </label>
             <div class="flex gap-3">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:opacity-50"
+                <MalioButton
+                    :label="$t('zimbra.settings.save')"
+                    button-class="w-auto px-4"
                     :disabled="isSaving"
-                >
-                    {{ $t('zimbra.settings.save') }}
-                </button>
-                <button
-                    type="button"
-                    class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50 disabled:opacity-50"
+                    @click="handleSave"
+                />
+                <MalioButton
+                    variant="tertiary"
+                    :label="$t('zimbra.settings.testConnection')"
+                    button-class="w-auto px-4"
                     :disabled="isTesting"
                     @click="handleTest"
-                >
-                    {{ $t('zimbra.settings.testConnection') }}
-                </button>
+                />
             </div>
             <p v-if="testResult !== null" class="text-sm font-medium" :class="testResult ? 'text-green-600' : 'text-red-600'">
                 {{ testResult ? $t('zimbra.settings.testSuccess') : $t('zimbra.settings.testFailed') }}

frontend/components/client-ticket/ClientTicketDetailModal.vue

@@ -29,22 +29,22 @@
                             </div>
                             <div class="flex items-center gap-2">
                                 <!-- Edit button (only for open tickets submitted by current user) -->
-                                <button
+                                <MalioButton
                                     v-if="canEdit && !isEditing"
-                                    type="button"
-                                    class="flex h-8 items-center gap-1.5 rounded-lg px-3 text-sm font-medium text-primary-500 transition-colors hover:bg-primary-50"
+                                    variant="tertiary"
+                                    icon-name="mdi:pencil-outline"
+                                    icon-position="left"
+                                    button-class="w-auto px-3"
+                                    :label="$t('common.edit')"
                                     @click="startEdit"
-                                >
-                                    <Icon name="mdi:pencil-outline" size="16" />
-                                    {{ $t('common.edit') }}
-                                </button>
-                                <button
-                                    type="button"
-                                    class="flex h-8 w-8 items-center justify-center rounded-lg text-neutral-400 transition-colors hover:bg-neutral-200/60 hover:text-neutral-600"
+                                />
+                                <MalioButtonIcon
+                                    icon="mdi:close"
+                                    aria-label="Fermer"
+                                    variant="ghost"
+                                    icon-size="20"
                                     @click="close"
-                                >
-                                    <Icon name="mdi:close" size="20" />
-                                </button>
+                                />
                             </div>
                         </div>
                     </div>
@@ -66,14 +66,10 @@
                             </div>
 
                             <div class="mt-4">
-                                <label class="mb-1 block text-sm font-medium text-neutral-700">
-                                    {{ $t('clientTicket.description') }}
-                                </label>
-                                <textarea
+                                <MalioInputRichText
                                     v-model="editForm.description"
-                                    rows="5"
-                                    class="w-full rounded-lg border border-neutral-300 px-3 py-2 text-sm focus:border-primary-500 focus:outline-none focus:ring-1 focus:ring-primary-500"
-                                    style="resize: vertical; min-height: 140px; max-height: 500px"
+                                    :label="$t('clientTicket.description')"
+                                    min-height="180px"
                                 />
                             </div>
 
@@ -90,21 +86,18 @@
                             </div>
 
                             <div class="mt-6 flex justify-end gap-3">
-                                <button
-                                    type="button"
-                                    class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                                <MalioButton
+                                    variant="tertiary"
+                                    :label="$t('common.cancel')"
+                                    button-class="w-auto px-4"
                                     @click="cancelEdit"
-                                >
-                                    {{ $t('common.cancel') }}
-                                </button>
-                                <button
-                                    type="button"
-                                    class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                                />
+                                <MalioButton
+                                    :label="$t('common.save')"
+                                    button-class="w-auto px-6"
                                     :disabled="isSaving"
                                     @click="saveEdit"
-                                >
-                                    {{ $t('common.save') }}
-                                </button>
+                                />
                             </div>
                         </template>
 
@@ -132,7 +125,13 @@
                             <!-- Description -->
                             <div class="mt-4">
                                 <p class="text-sm font-medium text-neutral-700">{{ $t('clientTicket.description') }}</p>
-                                <p class="mt-1 whitespace-pre-wrap text-sm text-neutral-600">{{ ticket.description }}</p>
+                                <MalioInputRichText
+                                    v-if="ticket.description"
+                                    :model-value="ticket.description"
+                                    :editable="false"
+                                    group-class="mt-1"
+                                />
+                                <p v-else class="mt-1 text-sm italic text-neutral-400">—</p>
                             </div>
 
                             <!-- URL (if bug) -->

frontend/components/client-ticket/ProjectClientTickets.vue

@@ -1,11 +1,13 @@
 <template>
     <div>
         <!-- Trigger button -->
-        <button
-            class="relative flex shrink-0 items-center gap-2 rounded-md bg-neutral-100 px-3 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-200 sm:px-4"
+        <MalioButton
+            variant="tertiary"
+            icon-name="mdi:ticket-outline"
+            icon-position="left"
+            button-class="w-auto px-3 sm:px-4 shrink-0"
             @click="open"
         >
-            <Icon name="mdi:ticket-outline" class="size-4 sm:size-5" />
             <span class="hidden sm:inline">{{ $t('clientTicket.adminTab') }}</span>
             <span
                 v-if="totalCount > 0"
@@ -13,7 +15,7 @@
             >
                 {{ totalCount }}
             </span>
-        </button>
+        </MalioButton>
 
         <!-- Panel -->
         <Teleport v-if="isOpen" to="body">
@@ -33,13 +35,13 @@
                                 <h2 class="text-base font-bold text-neutral-900">{{ $t('clientTicket.adminTab') }}</h2>
                                 <p class="mt-0.5 text-xs text-neutral-400">{{ projectName }}</p>
                             </div>
-                            <button
-                                type="button"
-                                class="flex h-8 w-8 items-center justify-center rounded-lg text-neutral-400 transition-colors hover:bg-neutral-100 hover:text-neutral-600"
+                            <MalioButtonIcon
+                                icon="mdi:close"
+                                aria-label="Fermer"
+                                variant="ghost"
+                                icon-size="20"
                                 @click="close"
-                            >
-                                <Icon name="mdi:close" size="20" />
-                            </button>
+                            />
                         </div>
 
                         <!-- Filters -->
@@ -97,13 +99,13 @@
                                             <p class="mt-0.5 text-xs text-neutral-400">{{ formatDate(ticket.createdAt) }}</p>
                                         </div>
                                         <div class="flex items-center gap-1">
-                                            <button
-                                                class="rounded p-1 text-neutral-400 transition-colors hover:bg-neutral-100 hover:text-primary-500"
-                                                :title="$t('clientTicket.changeStatus')"
+                                            <MalioButtonIcon
+                                                icon="mdi:swap-horizontal"
+                                                :aria-label="$t('clientTicket.changeStatus')"
+                                                variant="ghost"
+                                                icon-size="16"
                                                 @click.stop="openStatusChange(ticket)"
-                                            >
-                                                <Icon name="mdi:swap-horizontal" size="16" />
-                                            </button>
+                                            />
                                             <Icon
                                                 :name="expandedId === ticket.id ? 'mdi:chevron-up' : 'mdi:chevron-down'"
                                                 size="18"
@@ -114,7 +116,12 @@
 
                                     <!-- Expanded details -->
                                     <div v-if="expandedId === ticket.id" class="border-t border-neutral-100 px-3 py-3">
-                                        <p class="text-sm text-neutral-600 whitespace-pre-wrap">{{ ticket.description }}</p>
+                                        <MalioInputRichText
+                                            v-if="ticket.description"
+                                            :model-value="ticket.description"
+                                            :editable="false"
+                                        />
+                                        <p v-else class="text-sm italic text-neutral-400">—</p>
                                         <div v-if="ticket.url" class="mt-2">
                                             <a
                                                 :href="ticket.url"
@@ -179,19 +186,18 @@
                         </div>
 
                         <div class="mt-6 flex justify-end gap-3">
-                            <button
-                                class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                            <MalioButton
+                                variant="tertiary"
+                                :label="$t('common.cancel')"
+                                button-class="w-auto px-4"
                                 @click="statusModalOpen = false"
-                            >
-                                {{ $t('common.cancel') }}
-                            </button>
-                            <button
-                                class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                            />
+                            <MalioButton
+                                label="Confirmer"
+                                button-class="w-auto px-6"
                                 :disabled="isUpdatingStatus"
                                 @click="confirmStatusChange"
-                            >
-                                Confirmer
-                            </button>
+                            />
                         </div>
                     </div>
                 </div>

frontend/components/client/ClientDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('clients.editClient') : $t('clients.addClient')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('clients.editClient') : $t('clients.addClient')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.name"
@@ -35,16 +35,15 @@
             />
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/notification/NotificationBell.vue

@@ -1,18 +1,21 @@
 <template>
     <div ref="bellRef" class="relative">
-        <button
-            type="button"
-            class="relative rounded-md p-2 text-white hover:bg-primary-600 transition-colors"
-            @click="toggleDropdown"
-        >
-            <Icon name="mdi:bell-outline" size="24" />
+        <div class="relative">
+            <MalioButtonIcon
+                icon="mdi:bell-outline"
+                aria-label="Notifications"
+                variant="ghost"
+                icon-size="24"
+                button-class="text-white hover:bg-primary-600"
+                @click="toggleDropdown"
+            />
             <span
                 v-if="unreadCount > 0"
-                class="absolute -right-0.5 -top-0.5 flex h-5 min-w-5 items-center justify-center rounded-full bg-red-500 px-1 text-xs font-bold text-white"
+                class="absolute -right-0.5 -top-0.5 flex h-5 min-w-5 items-center justify-center rounded-full bg-red-500 px-1 text-xs font-bold text-white pointer-events-none"
             >
                 {{ unreadCount > 99 ? '99+' : unreadCount }}
             </span>
-        </button>
+        </div>
 
         <Transition name="dropdown">
             <div

frontend/components/project/ProjectDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('projects.editProject') : $t('projects.addProject')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('projects.editProject') : $t('projects.addProject')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.code"
@@ -54,41 +54,44 @@
             </div>
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
 
         <div v-if="isEditing && project" class="mt-6 border-t border-neutral-200 pt-4 flex items-center justify-between">
-            <button
-                class="flex items-center gap-2 text-sm text-neutral-500 hover:text-amber-600"
+            <MalioButton
+                variant="tertiary"
+                :icon-name="project.archived ? 'mdi:archive-arrow-up-outline' : 'mdi:archive-arrow-down-outline'"
+                icon-position="left"
+                button-class="w-auto px-4"
                 :disabled="isSubmitting"
                 @click="handleArchiveToggle"
             >
-                <Icon :name="project.archived ? 'mdi:archive-arrow-up-outline' : 'mdi:archive-arrow-down-outline'" size="18" />
                 {{ project.archived ? 'Désarchiver' : 'Archiver' }}
-            </button>
-            <button
+            </MalioButton>
+            <MalioButton
                 v-if="project.taskCount === 0"
-                class="flex items-center gap-2 text-sm text-neutral-500 hover:text-red-600"
+                variant="danger"
+                icon-name="mdi:delete-outline"
+                icon-position="left"
+                button-class="w-auto px-4"
                 :disabled="isSubmitting"
                 @click="confirmDeleteOpen = true"
             >
-                <Icon name="mdi:delete-outline" size="18" />
                 {{ $t('common.delete') }}
-            </button>
+            </MalioButton>
         </div>
 
         <ConfirmDeleteProjectModal
             v-model="confirmDeleteOpen"
             @confirm="handleDelete"
         />
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/project/ProjectGroupTab.vue

@@ -3,20 +3,20 @@
         <div class="flex items-center justify-between">
             <h2 class="text-lg font-bold text-neutral-900">Groupes</h2>
             <div class="flex items-center gap-3">
-                <button
-                    type="button"
-                    class="text-sm font-medium text-neutral-500 hover:text-neutral-700"
+                <MalioButton
+                    variant="tertiary"
+                    button-class="w-auto px-3"
+                    :label="showArchived ? $t('archive.hideArchived') : $t('archive.showArchived')"
                     @click="showArchived = !showArchived"
-                >
-                    {{ showArchived ? $t('archive.hideArchived') : $t('archive.showArchived') }}
-                </button>
-                <button
+                />
+                <MalioButton
                     v-if="!showArchived"
-                    class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+                    icon-name="mdi:plus"
+                    icon-position="left"
+                    button-class="w-auto px-4"
+                    label="Ajouter un groupe"
                     @click="openCreate"
-                >
-                    + Ajouter un groupe
-                </button>
+                />
             </div>
         </div>
 
@@ -36,25 +36,23 @@
                 />
             </template>
             <template #cell-description="{ item }">
-                {{ item.description ?? '—' }}
+                {{ stripRichText(item.description) || '—' }}
             </template>
             <template #actions="{ item }">
-                <button
+                <MalioButton
                     v-if="!showArchived && canArchiveGroup(item)"
-                    type="button"
-                    class="rounded-md bg-neutral-500 px-3 py-1 text-xs font-semibold text-white hover:bg-neutral-600"
+                    variant="secondary"
+                    :label="$t('archive.archiveButton')"
+                    button-class="w-auto px-3"
                     @click.stop="handleArchive(item)"
-                >
-                    {{ $t('archive.archiveButton') }}
-                </button>
-                <button
+                />
+                <MalioButton
                     v-if="showArchived"
-                    type="button"
-                    class="rounded-md bg-neutral-500 px-3 py-1 text-xs font-semibold text-white hover:bg-neutral-600"
+                    variant="secondary"
+                    :label="$t('archive.unarchiveButton')"
+                    button-class="w-auto px-3"
                     @click.stop="handleUnarchive(item)"
-                >
-                    {{ $t('archive.unarchiveButton') }}
-                </button>
+                />
             </template>
         </DataTable>
 
@@ -73,6 +71,7 @@ import type { TaskGroup } from '~/services/dto/task-group'
 import type { Task } from '~/services/dto/task'
 import { useTaskGroupService } from '~/services/task-groups'
 import { useTaskService } from '~/services/tasks'
+import { stripRichText } from '~/utils/format'
 
 const props = defineProps<{
     projectId: number

frontend/components/task/TaskBookStackLinks.vue

@@ -57,13 +57,14 @@
                 >
                     {{ link.title }}
                 </a>
-                <button
-                    type="button"
-                    class="ml-auto shrink-0 text-neutral-300 hover:text-red-500"
+                <MalioButtonIcon
+                    icon="mdi:close"
+                    aria-label="Supprimer le lien"
+                    variant="ghost"
+                    icon-size="16"
+                    button-class="ml-auto shrink-0 text-neutral-300 hover:text-red-500"
                     @click="handleRemove(link.id)"
-                >
-                    <Icon name="mdi:close" size="16" />
-                </button>
+                />
             </div>
         </div>
 

frontend/components/task/TaskBulkActions.vue

@@ -72,13 +72,14 @@
             />
 
             <!-- Delete -->
-            <button
-                class="flex h-9 w-9 shrink-0 items-center justify-center self-end rounded-md text-neutral-500 transition-colors hover:bg-red-50 hover:text-red-500"
-                title="Supprimer"
+            <MalioButtonIcon
+                icon="mdi:delete-outline"
+                aria-label="Supprimer"
+                variant="ghost"
+                icon-size="22"
+                button-class="self-end text-neutral-500 hover:bg-red-50 hover:text-red-500"
                 @click="emit('bulk-delete')"
-            >
-                <Icon name="mdi:delete-outline" size="22" />
-            </button>
+            />
         </div>
     </div>
 </template>

frontend/components/task/TaskCard.vue

@@ -29,13 +29,14 @@
                 </div>
                 <h4 class="text-sm font-semibold text-neutral-900">{{ task.title }}</h4>
             </div>
-            <button
-                class="shrink-0 transition-colors"
-                :class="isTimerOnTask ? 'text-[#F18619] hover:text-[#d97314]' : 'text-neutral-400 hover:text-primary-500'"
+            <MalioButtonIcon
+                :icon="isTimerOnTask ? 'mdi:stop-circle-outline' : 'mdi:play-circle-outline'"
+                :aria-label="isTimerOnTask ? 'Arrêter le timer' : 'Démarrer le timer'"
+                variant="ghost"
+                icon-size="20"
+                :button-class="isTimerOnTask ? 'shrink-0 text-[#F18619] hover:text-[#d97314]' : 'shrink-0 text-neutral-400 hover:text-primary-500'"
                 @click.stop="isTimerOnTask ? timerStore.stop() : onPlay()"
-            >
-                <Icon :name="isTimerOnTask ? 'mdi:stop-circle-outline' : 'mdi:play-circle-outline'" size="20" />
-            </button>
+            />
         </div>
 
         <div class="mt-2 flex items-center gap-1.5">
@@ -77,11 +78,17 @@
                 class="text-blue-500"
                 size="14"
             />
+            <Icon
+                v-if="task.collaborators?.length"
+                name="mdi:account-group"
+                class="ml-auto h-4 w-4 text-neutral-400"
+                :title="task.collaborators.map(c => c.username).join(', ')"
+            />
             <UserAvatar
                 v-if="task.assignee"
                 :user="task.assignee"
                 size="xs"
-                class="ml-auto"
+                :class="task.collaborators?.length ? '' : 'ml-auto'"
             />
             <span
                 v-else

frontend/components/task/TaskDocumentList.vue

@@ -32,14 +32,15 @@
                 </div>
 
                 <!-- Delete button -->
-                <button
+                <MalioButtonIcon
                     v-if="isAdmin"
-                    type="button"
-                    class="absolute right-1 top-1 hidden rounded p-0.5 text-neutral-400 transition-colors hover:bg-red-50 hover:text-red-500 group-hover:block"
+                    icon="heroicons:x-mark"
+                    aria-label="Supprimer"
+                    variant="ghost"
+                    icon-size="16"
+                    button-class="absolute right-1 top-1 hidden text-neutral-400 hover:bg-red-50 hover:text-red-500 group-hover:block"
                     @click.stop="$emit('delete', doc)"
-                >
-                    <Icon name="heroicons:x-mark" class="h-4 w-4" />
-                </button>
+                />
             </div>
         </div>
     </div>

frontend/components/task/TaskDocumentPreview.vue

@@ -12,28 +12,34 @@
                 ref="overlayRef"
             >
                 <!-- Close button -->
-                <button
-                    class="absolute right-4 top-4 rounded-full bg-black/50 p-2 text-white transition-colors hover:bg-black/70"
+                <MalioButtonIcon
+                    icon="heroicons:x-mark"
+                    aria-label="Fermer"
+                    variant="ghost"
+                    icon-size="24"
+                    button-class="absolute right-4 top-4 rounded-full bg-black/50 text-white hover:bg-black/70"
                     @click="$emit('close')"
-                >
-                    <Icon name="heroicons:x-mark" class="h-6 w-6" />
-                </button>
+                />
 
                 <!-- Navigation arrows -->
-                <button
+                <MalioButtonIcon
                     v-if="hasPrev"
-                    class="absolute left-4 top-1/2 -translate-y-1/2 rounded-full bg-black/50 p-2 text-white transition-colors hover:bg-black/70"
+                    icon="heroicons:chevron-left"
+                    aria-label="Précédent"
+                    variant="ghost"
+                    icon-size="24"
+                    button-class="absolute left-4 top-1/2 -translate-y-1/2 rounded-full bg-black/50 text-white hover:bg-black/70"
                     @click="$emit('prev')"
-                >
-                    <Icon name="heroicons:chevron-left" class="h-6 w-6" />
-                </button>
-                <button
+                />
+                <MalioButtonIcon
                     v-if="hasNext"
-                    class="absolute right-4 top-1/2 -translate-y-1/2 rounded-full bg-black/50 p-2 text-white transition-colors hover:bg-black/70"
+                    icon="heroicons:chevron-right"
+                    aria-label="Suivant"
+                    variant="ghost"
+                    icon-size="24"
+                    button-class="absolute right-4 top-1/2 -translate-y-1/2 rounded-full bg-black/50 text-white hover:bg-black/70"
                     @click="$emit('next')"
-                >
-                    <Icon name="heroicons:chevron-right" class="h-6 w-6" />
-                </button>
+                />
 
                 <!-- Content -->
                 <div class="flex max-h-[90vh] max-w-[90vw] flex-col items-center">

frontend/components/task/TaskEffortDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskEfforts.editEffort') : $t('taskEfforts.addEffort')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('taskEfforts.editEffort') : $t('taskEfforts.addEffort')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.label"
@@ -10,16 +10,15 @@
             />
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/task/TaskGitSection.vue

@@ -38,24 +38,22 @@
 
             <!-- Actions -->
             <div class="flex gap-1">
-                <button
+                <MalioButtonIcon
                     v-if="activeTab === 'branches'"
-                    type="button"
-                    class="rounded-md px-2.5 py-1.5 text-xs font-medium text-neutral-500 transition-colors hover:bg-neutral-200/60 hover:text-neutral-700"
-                    :title="$t('gitea.branch.copy')"
+                    icon="mdi:content-copy"
+                    :aria-label="$t('gitea.branch.copy')"
+                    variant="ghost"
+                    icon-size="14"
                     @click="handleCopy"
-                >
-                    <Icon name="mdi:content-copy" size="14" />
-                </button>
-                <button
+                />
+                <MalioButton
                     v-if="activeTab === 'branches'"
-                    type="button"
-                    class="rounded-md bg-primary-500 px-2.5 py-1.5 text-xs font-semibold text-white transition-colors hover:bg-secondary-500"
+                    icon-name="mdi:plus"
+                    icon-position="left"
+                    button-class="w-auto px-2.5 py-1.5 text-xs"
+                    :label="$t('gitea.branch.create')"
                     @click="showCreateForm = !showCreateForm"
-                >
-                    <Icon name="mdi:plus" size="14" class="mr-0.5 inline-block align-[-2px]" />
-                    {{ $t('gitea.branch.create') }}
-                </button>
+                />
             </div>
         </div>
 
@@ -79,14 +77,12 @@
                         :label="$t('gitea.branch.baseBranch')"
                         input-class="w-full"
                     />
-                    <button
-                        type="button"
-                        class="mb-[2px] rounded-md bg-primary-500 px-4 py-2 text-xs font-semibold text-white transition-colors hover:bg-secondary-500 disabled:opacity-50"
+                    <MalioButton
+                        :label="isCreating ? '...' : $t('gitea.branch.create')"
+                        button-class="w-auto px-4 mb-[2px] text-xs"
                         :disabled="isCreating"
                         @click="handleCreate"
-                    >
-                        {{ isCreating ? '...' : $t('gitea.branch.create') }}
-                    </button>
+                    />
                 </div>
                 <code class="mt-2 block rounded bg-neutral-50 px-2 py-1 text-[11px] text-neutral-500">
                     {{ branchPreview }}

frontend/components/task/TaskGroupDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskGroups.editGroup') : $t('taskGroups.addGroup')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('taskGroups.editGroup') : $t('taskGroups.addGroup')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.title"
@@ -8,10 +8,10 @@
                 :error="touched.title && !form.title.trim() ? 'Le titre est requis' : ''"
                 @blur="touched.title = true"
             />
-            <MalioInputTextArea
+            <MalioInputRichText
                 v-model="form.description"
                 label="Description"
-                :size="3"
+                min-height="120px"
             />
             <div class="mt-4">
                 <ColorPicker v-model="form.color" />
@@ -25,34 +25,31 @@
             </div>
 
             <div class="mt-6 flex items-center" :class="isEditing ? 'justify-between' : 'justify-end'">
-                <button
+                <MalioButton
                     v-if="canArchive"
-                    type="button"
-                    class="rounded-md bg-neutral-500 px-4 py-2 text-sm font-semibold text-white hover:bg-neutral-600 disabled:cursor-not-allowed disabled:opacity-50"
+                    variant="secondary"
+                    :label="$t('archive.archiveButton')"
+                    button-class="w-auto px-4"
                     :disabled="isSubmitting"
                     @click="handleArchive"
-                >
-                    {{ $t('archive.archiveButton') }}
-                </button>
-                <button
+                />
+                <MalioButton
                     v-if="canUnarchive"
-                    type="button"
-                    class="rounded-md bg-neutral-500 px-4 py-2 text-sm font-semibold text-white hover:bg-neutral-600 disabled:cursor-not-allowed disabled:opacity-50"
+                    variant="secondary"
+                    :label="$t('archive.unarchiveButton')"
+                    button-class="w-auto px-4"
                     :disabled="isSubmitting"
                     @click="handleUnarchive"
-                >
-                    {{ $t('archive.unarchiveButton') }}
-                </button>
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                />
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/task/TaskListItem.vue

@@ -78,24 +78,33 @@
 
         <!-- Right: timer top, avatar bottom -->
         <div class="flex shrink-0 flex-col items-end justify-between self-stretch gap-1">
-            <button
-                class="shrink-0 transition-colors"
-                :class="isTimerOnTask ? 'text-[#F18619] hover:text-[#d97314]' : 'text-neutral-400 hover:text-primary-500'"
+            <MalioButtonIcon
+                :icon="isTimerOnTask ? 'mdi:stop-circle-outline' : 'mdi:play-circle-outline'"
+                :aria-label="isTimerOnTask ? 'Arrêter le timer' : 'Démarrer le timer'"
+                variant="ghost"
+                icon-size="20"
+                :button-class="isTimerOnTask ? 'shrink-0 text-[#F18619] hover:text-[#d97314]' : 'shrink-0 text-neutral-400 hover:text-primary-500'"
                 @click.stop="isTimerOnTask ? timerStore.stop() : timerStore.startFromTask(task)"
-            >
-                <Icon :name="isTimerOnTask ? 'mdi:stop-circle-outline' : 'mdi:play-circle-outline'" size="20" />
-            </button>
-            <UserAvatar
-                v-if="task.assignee"
-                :user="task.assignee"
-                size="xs"
             />
-            <span
-                v-else
-                class="flex h-5 w-5 items-center justify-center rounded-full bg-neutral-200 text-neutral-400"
-            >
-                <Icon name="mdi:account-outline" size="14" />
-            </span>
+            <div class="flex items-center gap-1">
+                <Icon
+                    v-if="task.collaborators?.length"
+                    name="mdi:account-group"
+                    class="h-4 w-4 text-neutral-400"
+                    :title="task.collaborators.map(c => c.username).join(', ')"
+                />
+                <UserAvatar
+                    v-if="task.assignee"
+                    :user="task.assignee"
+                    size="xs"
+                />
+                <span
+                    v-else
+                    class="flex h-5 w-5 items-center justify-center rounded-full bg-neutral-200 text-neutral-400"
+                >
+                    <Icon name="mdi:account-outline" size="14" />
+                </span>
+            </div>
         </div>
     </div>
 </template>

frontend/components/task/TaskModal.vue

@@ -27,13 +27,13 @@
                                     {{ isEditing ? $t('tasks.editTask') : $t('tasks.addTask') }}
                                 </h2>
                             </div>
-                            <button
-                                type="button"
-                                class="flex h-8 w-8 items-center justify-center rounded-lg text-neutral-400 transition-colors hover:bg-neutral-200/60 hover:text-neutral-600"
+                            <MalioButtonIcon
+                                icon="mdi:close"
+                                aria-label="Fermer"
+                                variant="ghost"
+                                icon-size="20"
                                 @click="close"
-                            >
-                                <Icon name="mdi:close" size="20" />
-                            </button>
+                            />
                         </div>
 
                         <!-- Client ticket link -->
@@ -170,15 +170,36 @@
                             </div>
                         </div>
 
+                        <!-- Collaborators -->
+                        <div v-if="collaboratorOptions.length" class="mt-5">
+                            <p class="mb-2 text-sm font-medium text-neutral-700">Collaborateurs</p>
+                            <div class="flex flex-wrap gap-2">
+                                <label
+                                    v-for="user in collaboratorOptions"
+                                    :key="user.value"
+                                    class="cursor-pointer rounded-full px-3 py-1 text-xs font-semibold transition-all"
+                                    :class="form.collaboratorIds.includes(user.value)
+                                        ? 'bg-primary-500 text-white shadow-sm'
+                                        : 'bg-neutral-100 text-neutral-600 hover:bg-neutral-200'"
+                                >
+                                    <input
+                                        type="checkbox"
+                                        class="hidden"
+                                        :value="user.value"
+                                        :checked="form.collaboratorIds.includes(user.value)"
+                                        @change="toggleCollaborator(user.value)"
+                                    />
+                                    {{ user.label }}
+                                </label>
+                            </div>
+                        </div>
+
                         <!-- Description -->
                         <div class="mt-5">
-                            <MalioInputTextArea
+                            <MalioInputRichText
                                 v-model="form.description"
                                 label="Description"
-                                :size="5"
-                                resize="vertical"
-                                :min-resize-height="140"
-                                :max-resize-height="500"
+                                min-height="180px"
                             />
                         </div>
 
@@ -417,48 +438,43 @@
                             class="mt-6 flex items-center border-t border-neutral-100 pt-5"
                             :class="isEditing ? 'justify-between' : 'justify-end'"
                         >
-                            <button
+                            <MalioButton
                                 v-if="isEditing"
-                                type="button"
-                                class="rounded-lg bg-red-50 px-4 py-2 text-sm font-semibold text-red-600 transition-colors hover:bg-red-100 disabled:cursor-not-allowed disabled:opacity-50"
+                                variant="danger"
+                                label="Supprimer"
+                                button-class="w-auto px-4"
                                 :disabled="isSubmitting"
                                 @click="confirmDeleteOpen = true"
-                            >
-                                Supprimer
-                            </button>
+                            />
                             <div class="flex gap-3">
-                                <button
+                                <MalioButton
                                     v-if="canArchive"
-                                    type="button"
-                                    class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50 disabled:cursor-not-allowed disabled:opacity-50"
+                                    variant="tertiary"
+                                    :label="$t('archive.archiveButton')"
+                                    button-class="w-auto px-4"
                                     :disabled="isSubmitting"
                                     @click="handleArchive"
-                                >
-                                    {{ $t('archive.archiveButton') }}
-                                </button>
-                                <button
+                                />
+                                <MalioButton
                                     v-if="canUnarchive"
-                                    type="button"
-                                    class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50 disabled:cursor-not-allowed disabled:opacity-50"
+                                    variant="tertiary"
+                                    :label="$t('archive.unarchiveButton')"
+                                    button-class="w-auto px-4"
                                     :disabled="isSubmitting"
                                     @click="handleUnarchive"
-                                >
-                                    {{ $t('archive.unarchiveButton') }}
-                                </button>
-                                <button
-                                    type="button"
-                                    class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                                />
+                                <MalioButton
+                                    variant="tertiary"
+                                    label="Annuler"
+                                    button-class="w-auto px-4"
                                     @click="close"
-                                >
-                                    Annuler
-                                </button>
-                                <button
-                                    type="submit"
-                                    class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                                />
+                                <MalioButton
+                                    label="Enregistrer"
+                                    button-class="w-auto px-6"
                                     :disabled="isSubmitting"
-                                >
-                                    Enregistrer
-                                </button>
+                                    @click="handleSubmit"
+                                />
                             </div>
                         </div>
                     </form>
@@ -549,6 +565,7 @@ const form = reactive({
     effortId: null as number | null,
     priorityId: null as number | null,
     assigneeId: null as number | null,
+    collaboratorIds: [] as number[],
     groupId: null as number | null,
     tagIds: [] as number[],
     clientTicketId: null as number | null,
@@ -591,6 +608,18 @@ const userOptions = computed(() =>
     props.users.map(u => ({ label: u.username, value: u.id }))
 )
 
+const collaboratorOptions = computed(() =>
+    props.users
+        .filter(u => u.id !== form.assigneeId)
+        .map(u => ({ label: u.username, value: u.id }))
+)
+
+watch(() => form.assigneeId, (newAssigneeId) => {
+    if (newAssigneeId) {
+        form.collaboratorIds = form.collaboratorIds.filter(id => id !== newAssigneeId)
+    }
+})
+
 const groupOptions = computed(() => {
     let filtered = props.groups.filter(g => !g.archived)
     if (showProjectSelect.value && form.projectId) {
@@ -629,6 +658,12 @@ function toggleTag(id: number) {
     }
 }
 
+function toggleCollaborator(userId: number) {
+    const idx = form.collaboratorIds.indexOf(userId)
+    if (idx >= 0) form.collaboratorIds.splice(idx, 1)
+    else form.collaboratorIds.push(userId)
+}
+
 const weekDays = computed(() => [
     { value: 'monday', label: t('tasks.planning.days.mon') },
     { value: 'tuesday', label: t('tasks.planning.days.tue') },
@@ -653,6 +688,7 @@ function populateForm(task: Task | null) {
         form.effortId = task.effort?.id ?? null
         form.priorityId = task.priority?.id ?? null
         form.assigneeId = task.assignee?.id ?? null
+        form.collaboratorIds = task.collaborators?.map(c => c.id) ?? []
         form.groupId = task.group?.id ?? null
         form.tagIds = task.tags.map(t => t.id)
         form.clientTicketId = task.clientTicket?.id ?? null
@@ -699,6 +735,7 @@ function populateForm(task: Task | null) {
         form.effortId = null
         form.priorityId = null
         form.assigneeId = null
+        form.collaboratorIds = []
         form.groupId = null
         form.tagIds = []
         form.clientTicketId = null
@@ -911,6 +948,7 @@ async function handleSubmit() {
             effort: form.effortId ? `/api/task_efforts/${form.effortId}` : null,
             priority: form.priorityId ? `/api/task_priorities/${form.priorityId}` : null,
             assignee: form.assigneeId ? `/api/users/${form.assigneeId}` : null,
+            collaborators: form.collaboratorIds.map(id => `/api/users/${id}`),
             group: form.groupId ? `/api/task_groups/${form.groupId}` : null,
             project: `/api/projects/${resolvedProjectId.value}`,
             tags: form.tagIds.map(id => `/api/task_tags/${id}`),

frontend/components/task/TaskPriorityDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskPriorities.editPriority') : $t('taskPriorities.addPriority')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('taskPriorities.editPriority') : $t('taskPriorities.addPriority')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.label"
@@ -13,16 +13,15 @@
             </div>
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/task/TaskStatusDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskStatuses.editStatus') : $t('taskStatuses.addStatus')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('taskStatuses.editStatus') : $t('taskStatuses.addStatus')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.label"
@@ -31,16 +31,15 @@
             </div>
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/task/TaskTagDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('taskTags.editTag') : $t('taskTags.addTag')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('taskTags.editTag') : $t('taskTags.addTag')">
         <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
             <MalioInputText
                 v-model="form.label"
@@ -13,16 +13,15 @@
             </div>
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/time-tracking/TimeEntryDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('timeEntries.editEntry') : $t('timeEntries.addEntry')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('timeEntries.editEntry') : $t('timeEntries.addEntry')">
         <form class="space-y-4" @submit.prevent="onSubmit">
             <div>
                 <label class="mb-1 block text-sm font-semibold text-neutral-700">Titre</label>
@@ -11,14 +11,11 @@
                 />
             </div>
 
-            <div>
-                <label class="mb-1 block text-sm font-semibold text-neutral-700">Description</label>
-                <textarea
-                    v-model="form.description"
-                    rows="3"
-                    class="w-full rounded-md border border-neutral-300 px-3 py-2 text-sm focus:border-primary-500 focus:outline-none"
-                />
-            </div>
+            <MalioInputRichText
+                v-model="form.description"
+                label="Description"
+                min-height="120px"
+            />
 
             <div>
                 <label class="mb-1 block text-sm font-semibold text-neutral-700">Date</label>
@@ -97,33 +94,30 @@
             </div>
 
             <div class="flex items-center" :class="isEditing ? 'justify-between' : 'justify-end'">
-                <button
+                <MalioButton
                     v-if="isEditing"
-                    type="button"
-                    class="rounded-md bg-red-500 px-4 py-2 text-sm font-semibold text-white hover:bg-red-600 transition"
+                    variant="danger"
+                    label="Supprimer"
+                    button-class="w-auto px-4"
                     @click="onDelete"
-                >
-                    Supprimer
-                </button>
+                />
                 <div class="flex gap-2">
-                    <button
+                    <MalioButton
                         v-if="isEditing"
-                        type="button"
-                        class="rounded-md bg-blue-500 px-4 py-2 text-sm font-semibold text-white hover:bg-blue-600 transition"
+                        variant="secondary"
+                        label="Dupliquer"
+                        button-class="w-auto px-4"
                         @click="onDuplicate"
-                    >
-                        Dupliquer
-                    </button>
-                    <button
-                        type="submit"
-                        class="rounded-md bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-primary-600 transition"
-                    >
-                        Enregistrer
-                    </button>
+                    />
+                    <MalioButton
+                        label="Enregistrer"
+                        button-class="w-auto px-4"
+                        @click="onSubmit"
+                    />
                 </div>
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/components/time-tracking/TimeEntryList.vue

@@ -33,8 +33,8 @@
                 </div>
                 <div class="mt-0.5 flex items-center gap-2 text-xs text-neutral-500">
                     <span v-if="entry.project">{{ entry.project.name }}</span>
-                    <span v-if="entry.project && entry.description" class="text-neutral-300">·</span>
-                    <span v-if="entry.description" class="truncate">{{ entry.description }}</span>
+                    <span v-if="entry.project && stripRichText(entry.description)" class="text-neutral-300">·</span>
+                    <span v-if="stripRichText(entry.description)" class="truncate">{{ stripRichText(entry.description) }}</span>
                 </div>
             </div>
 
@@ -54,19 +54,21 @@
             </div>
 
             <!-- Delete action -->
-            <button
-                class="shrink-0 rounded-md p-1.5 text-neutral-300 opacity-0 transition hover:bg-red-50 hover:text-red-500 group-hover:opacity-100"
-                :title="$t('common.delete')"
+            <MalioButtonIcon
+                icon="mdi:delete-outline"
+                :aria-label="$t('common.delete')"
+                variant="ghost"
+                icon-size="18"
+                button-class="shrink-0 text-neutral-300 opacity-0 hover:bg-red-50 hover:text-red-500 group-hover:opacity-100"
                 @click.stop="emit('deleteEntry', entry)"
-            >
-                <Icon name="mdi:delete-outline" size="18" />
-            </button>
+            />
         </div>
     </div>
 </template>
 
 <script setup lang="ts">
 import type { TimeEntry } from '~/services/dto/time-entry'
+import { stripRichText } from '~/utils/format'
 
 const props = defineProps<{
     entries: TimeEntry[]

frontend/components/time-tracking/TimeTrackingExportDrawer.vue

@@ -0,0 +1,205 @@
+<template>
+    <MalioDrawer v-model="isOpen" :title="$t('timeEntries.exportTitle')" drawer-class="max-w-lg">
+        <div class="flex flex-col gap-6 p-4">
+            <!-- Period presets -->
+            <div>
+                <p class="mb-2 text-sm font-semibold text-neutral-700">Période</p>
+                <div class="flex flex-col gap-2">
+                    <MalioRadioButton
+                        v-model="periodMode"
+                        name="exportPeriod"
+                        value="currentMonth"
+                        :label="$t('timeEntries.exportCurrentMonth')"
+                    />
+                    <MalioRadioButton
+                        v-model="periodMode"
+                        name="exportPeriod"
+                        value="lastMonth"
+                        :label="$t('timeEntries.exportLastMonth')"
+                    />
+                    <MalioRadioButton
+                        v-model="periodMode"
+                        name="exportPeriod"
+                        value="custom"
+                        :label="$t('timeEntries.exportCustomPeriod')"
+                    />
+                </div>
+                <div v-if="periodMode === 'custom'" class="mt-3 flex items-center gap-3">
+                    <div class="flex-1">
+                        <label class="mb-1 block text-xs text-neutral-500">{{ $t('timeEntries.exportFrom') }}</label>
+                        <input
+                            v-model="customFrom"
+                            type="date"
+                            class="w-full rounded-md border border-neutral-300 px-3 py-2 text-sm"
+                        />
+                    </div>
+                    <div class="flex-1">
+                        <label class="mb-1 block text-xs text-neutral-500">{{ $t('timeEntries.exportTo') }}</label>
+                        <input
+                            v-model="customTo"
+                            type="date"
+                            class="w-full rounded-md border border-neutral-300 px-3 py-2 text-sm"
+                        />
+                    </div>
+                </div>
+            </div>
+
+            <!-- User filter (admin only) -->
+            <div v-if="isAdmin" class="[&>div]:!mt-0">
+                <MalioSelectCheckbox
+                    v-model="selectedUserIds"
+                    :options="userOptions"
+                    :label="$t('timeEntries.exportUsers')"
+                    :display-tag="true"
+                    :display-select-all="true"
+                    min-width="!w-full"
+                />
+            </div>
+
+            <!-- Client filter -->
+            <div class="[&>div]:!mt-0">
+                <MalioSelect
+                    v-model="selectedClientId"
+                    :options="clientOptions"
+                    :label="$t('timeEntries.exportClient')"
+                    :empty-option-label="$t('timeEntries.exportAllClients')"
+                    min-width="!w-full"
+                />
+            </div>
+
+            <!-- Project filter -->
+            <div class="[&>div]:!mt-0">
+                <MalioSelectCheckbox
+                    v-model="selectedProjectIds"
+                    :options="filteredProjectOptions"
+                    :label="$t('timeEntries.exportProjects')"
+                    :display-tag="true"
+                    :display-select-all="true"
+                    min-width="!w-full"
+                />
+            </div>
+
+            <!-- Tag filter -->
+            <div class="[&>div]:!mt-0">
+                <MalioSelectCheckbox
+                    v-model="selectedTagIds"
+                    :options="tagOptions"
+                    :label="$t('timeEntries.exportTags')"
+                    :display-tag="true"
+                    :display-select-all="true"
+                    min-width="!w-full"
+                />
+            </div>
+
+            <!-- Export button -->
+            <MalioButton
+                :label="$t('timeEntries.export')"
+                icon-name="mdi:download"
+                icon-position="left"
+                button-class="w-full"
+                @click="doExport"
+            />
+        </div>
+    </MalioDrawer>
+</template>
+
+<script setup lang="ts">
+import type { UserData } from '~/services/dto/user-data'
+import type { Project } from '~/services/dto/project'
+import type { TaskTag } from '~/services/dto/task-tag'
+import type { Client } from '~/services/dto/client'
+
+const props = defineProps<{
+    users: UserData[]
+    projects: Project[]
+    tags: TaskTag[]
+    clients: Client[]
+}>()
+
+const isOpen = defineModel<boolean>({ default: false })
+const emit = defineEmits<{
+    (e: 'export', params: {
+        after: string
+        before: string
+        users?: number[]
+        projects?: number[]
+        client?: number
+        tags?: number[]
+    }): void
+}>()
+
+const authStore = useAuthStore()
+const isAdmin = computed(() => authStore.user?.roles?.includes('ROLE_ADMIN') ?? false)
+
+const periodMode = ref<'currentMonth' | 'lastMonth' | 'custom'>('currentMonth')
+const customFrom = ref('')
+const customTo = ref('')
+const selectedUserIds = ref<number[]>([])
+const selectedClientId = ref<number | null>(null)
+const selectedProjectIds = ref<number[]>([])
+const selectedTagIds = ref<number[]>([])
+
+const userOptions = computed(() =>
+    props.users.map(u => ({ label: u.username, value: u.id }))
+)
+
+const clientOptions = computed(() =>
+    props.clients.map(c => ({ label: c.name, value: c.id }))
+)
+
+const filteredProjectOptions = computed(() => {
+    let list = props.projects
+    if (selectedClientId.value) {
+        list = list.filter(p => p.client?.id === selectedClientId.value)
+    }
+    return list.map(p => ({ label: p.name, value: p.id }))
+})
+
+const tagOptions = computed(() =>
+    props.tags.map(t => ({ label: t.label, value: t.id }))
+)
+
+// Reset project selection when client changes
+watch(selectedClientId, () => {
+    selectedProjectIds.value = []
+})
+
+function getDateRange(): { after: string; before: string } {
+    const now = new Date()
+    if (periodMode.value === 'currentMonth') {
+        const first = new Date(now.getFullYear(), now.getMonth(), 1)
+        const last = new Date(now.getFullYear(), now.getMonth() + 1, 1)
+        return {
+            after: first.toISOString().slice(0, 10),
+            before: last.toISOString().slice(0, 10),
+        }
+    }
+    if (periodMode.value === 'lastMonth') {
+        const first = new Date(now.getFullYear(), now.getMonth() - 1, 1)
+        const last = new Date(now.getFullYear(), now.getMonth(), 1)
+        return {
+            after: first.toISOString().slice(0, 10),
+            before: last.toISOString().slice(0, 10),
+        }
+    }
+    return {
+        after: customFrom.value,
+        before: customTo.value,
+    }
+}
+
+function doExport() {
+    const { after, before } = getDateRange()
+    if (!after || !before) return
+
+    emit('export', {
+        after,
+        before,
+        users: selectedUserIds.value.length ? selectedUserIds.value : undefined,
+        projects: selectedProjectIds.value.length ? selectedProjectIds.value : undefined,
+        client: selectedClientId.value ?? undefined,
+        tags: selectedTagIds.value.length ? selectedTagIds.value : undefined,
+    })
+    isOpen.value = false
+}
+</script>

frontend/components/ui/AppDrawer.vue

@@ -13,13 +13,13 @@
                 >
                     <div class="flex items-center justify-between border-b border-neutral-200 px-6 py-4">
                         <h2 class="text-lg font-bold text-neutral-900">{{ title }}</h2>
-                        <button
-                            type="button"
-                            class="rounded p-1 text-neutral-400 hover:text-neutral-600"
+                        <MalioButtonIcon
+                            icon="mdi:close"
+                            aria-label="Fermer"
+                            variant="ghost"
+                            icon-size="24"
                             @click="close"
-                        >
-                            <Icon name="mdi:close" size="24" />
-                        </button>
+                        />
                     </div>
                     <div class="flex-1 overflow-y-auto px-6 py-4">
                         <slot />

frontend/components/ui/AppTopNav.vue

@@ -1,32 +1,26 @@
 <template>
   <header class="border-b border-neutral-200 bg-primary-500 px-3 py-2 text-white sm:px-5 sm:py-2 max-h-[60px]">
     <div class="flex h-full items-center justify-between">
-      <button
-        class="rounded-md p-2 text-white hover:bg-primary-600 transition-colors lg:hidden"
+      <MalioButtonIcon
+        icon="mdi:menu"
+        aria-label="Menu"
+        variant="ghost"
+        icon-size="24"
+        button-class="lg:hidden text-white hover:bg-primary-600"
         @click="ui.openMobileSidebar()"
-      >
-        <Icon name="mdi:menu" size="24" />
-      </button>
+      />
       <div class="hidden items-center gap-2 lg:flex">
-        <h1 class="text-lg font-bold tracking-tight">{{ appTitle }}</h1>
-        <button
-          type="button"
-          class="rounded-md p-1 text-white/60 transition-colors hover:bg-primary-600 hover:text-white"
-          :title="appTitle === 'NeauTime' ? 'Switch to Lesstime' : 'Switch to NeauTime'"
-          @click="toggleTitle"
-        >
-          <Icon name="mdi:swap-horizontal" size="18" />
-        </button>
+        <h1 class="text-lg font-bold tracking-tight">Lesstime</h1>
       </div>
       <div class="ml-auto flex items-center gap-4 text-xl text-white sm:gap-8">
-        <button
-          type="button"
-          class="rounded-md p-1.5 text-white/70 transition-colors hover:bg-primary-600 hover:text-white"
-          :title="ui.darkMode ? 'Mode clair' : 'Mode sombre'"
+        <MalioButtonIcon
+          :icon="ui.darkMode ? 'mdi:weather-sunny' : 'mdi:weather-night'"
+          :aria-label="ui.darkMode ? 'Mode clair' : 'Mode sombre'"
+          variant="ghost"
+          icon-size="22"
+          button-class="text-white/70 hover:bg-primary-600 hover:text-white"
           @click="ui.toggleDarkMode()"
-        >
-          <Icon :name="ui.darkMode ? 'mdi:weather-sunny' : 'mdi:weather-night'" size="22" />
-        </button>
+        />
         <NotificationBell />
         <div class="group relative flex gap-2 sm:gap-4">
           <UserAvatar v-if="user" :user="user" size="md" class="cursor-pointer" />
@@ -64,13 +58,6 @@ defineProps<{
 const auth = useAuthStore()
 const ui = useUiStore()
 
-const appTitle = ref(localStorage.getItem('appTitle') || 'NeauTime')
-
-function toggleTitle() {
-  appTitle.value = appTitle.value === 'NeauTime' ? 'Lesstime' : 'NeauTime'
-  localStorage.setItem('appTitle', appTitle.value)
-}
-
 async function handleLogout() {
   await auth.logout()
   await navigateTo('/login')

frontend/components/ui/ConfirmDeleteDocumentModal.vue

@@ -9,20 +9,18 @@
                         {{ $t('taskDocuments.confirmDeleteMessage') }}
                     </p>
                     <div class="mt-6 flex justify-end gap-3">
-                        <button
-                            type="button"
-                            class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            :label="$t('common.cancel')"
+                            button-class="w-auto px-4"
                             @click="cancel"
-                        >
-                            {{ $t('common.cancel') }}
-                        </button>
-                        <button
-                            type="button"
-                            class="rounded-md bg-red-600 px-4 py-2 text-sm font-semibold text-white hover:bg-red-700"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            label="Supprimer"
+                            button-class="w-auto px-4"
                             @click="$emit('confirm')"
-                        >
-                            Supprimer
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/components/ui/ConfirmDeleteProjectModal.vue

@@ -9,20 +9,18 @@
                         {{ $t('projects.deleteConfirmMessage') }}
                     </p>
                     <div class="mt-6 flex justify-end gap-3">
-                        <button
-                            type="button"
-                            class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            :label="$t('common.cancel')"
+                            button-class="w-auto px-4"
                             @click="cancel"
-                        >
-                            {{ $t('common.cancel') }}
-                        </button>
-                        <button
-                            type="button"
-                            class="rounded-md bg-red-600 px-4 py-2 text-sm font-semibold text-white hover:bg-red-700"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            :label="$t('common.delete')"
+                            button-class="w-auto px-4"
                             @click="$emit('confirm')"
-                        >
-                            {{ $t('common.delete') }}
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/components/ui/ConfirmDeleteStatusModal.vue

@@ -21,21 +21,19 @@
                     </div>
 
                     <div class="mt-6 flex justify-end gap-3">
-                        <button
-                            type="button"
-                            class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            :label="$t('common.cancel')"
+                            button-class="w-auto px-4"
                             @click="cancel"
-                        >
-                            {{ $t('common.cancel') }}
-                        </button>
-                        <button
-                            type="button"
-                            class="rounded-md bg-[red-600] px-4 py-2 text-sm font-semibold text-white hover:bg-[red-700] disabled:opacity-50"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            :label="$t('common.delete')"
+                            button-class="w-auto px-4"
                             :disabled="isProcessing"
                             @click="confirm"
-                        >
-                            {{ $t('common.delete') }}
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/components/ui/ConfirmDeleteTaskModal.vue

@@ -9,20 +9,18 @@
                         {{ $t('tasks.deleteConfirmMessage') }}
                     </p>
                     <div class="mt-6 flex justify-end gap-3">
-                        <button
-                            type="button"
-                            class="rounded-md border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            label="Annuler"
+                            button-class="w-auto px-4"
                             @click="cancel"
-                        >
-                            Annuler
-                        </button>
-                        <button
-                            type="button"
-                            class="rounded-md bg-red-600 px-4 py-2 text-sm font-semibold text-white hover:bg-red-700"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            label="Supprimer"
+                            button-class="w-auto px-4"
                             @click="$emit('confirm')"
-                        >
-                            Supprimer
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/components/ui/DataTable.vue

@@ -35,13 +35,15 @@
                     <td v-if="deletable || $slots.actions" class="px-4 py-3">
                         <div class="flex items-center gap-2">
                             <slot name="actions" :item="item" />
-                            <button
+                            <MalioButtonIcon
                                 v-if="deletable"
-                                class="text-neutral-400 transition-colors hover:text-red-500"
+                                icon="mdi:delete-outline"
+                                aria-label="Supprimer"
+                                variant="ghost"
+                                icon-size="20"
+                                button-class="text-neutral-400 hover:text-red-500"
                                 @click.stop="$emit('delete', item)"
-                            >
-                                <Icon name="mdi:delete-outline" size="20" />
-                            </button>
+                            />
                         </div>
                     </td>
                 </tr>

frontend/components/ui/MarkdownPreviewModal.vue

@@ -0,0 +1,75 @@
+<template>
+    <Teleport to="body">
+        <Transition name="md-preview" appear>
+            <div v-if="modelValue" class="fixed inset-0 z-[60] flex items-center justify-center p-4">
+                <!-- Backdrop -->
+                <div
+                    class="absolute inset-0 bg-slate-900/40 backdrop-blur-sm"
+                    @click="emit('update:modelValue', false)"
+                />
+
+                <!-- Modal -->
+                <div
+                    class="relative z-10 flex w-full max-w-2xl flex-col overflow-hidden rounded-2xl bg-white shadow-2xl ring-1 ring-black/5"
+                    style="max-height: min(80vh, 700px)"
+                >
+                    <!-- Header -->
+                    <div class="flex items-center justify-between border-b border-slate-100 px-6 py-4">
+                        <h3 class="text-lg font-semibold text-slate-800">
+                            {{ title }}
+                        </h3>
+                        <button
+                            class="rounded-lg p-1.5 text-slate-400 transition-colors hover:bg-slate-100 hover:text-slate-600"
+                            @click="emit('update:modelValue', false)"
+                        >
+                            <Icon name="heroicons:x-mark" class="size-5" />
+                        </button>
+                    </div>
+
+                    <!-- Body -->
+                    <div class="overflow-y-auto px-6 py-4">
+                        <div
+                            v-if="content"
+                            class="prose prose-slate max-w-none prose-headings:font-semibold prose-a:text-blue-600 prose-code:rounded prose-code:bg-slate-100 prose-code:px-1.5 prose-code:py-0.5 prose-code:text-sm prose-code:before:content-none prose-code:after:content-none prose-pre:bg-slate-900 prose-pre:text-slate-100 prose-pre:overflow-x-auto [&_pre_code]:bg-transparent [&_pre_code]:p-0 [&_pre_code]:text-inherit [&_pre_code]:text-[0.875rem] [&_pre_code]:leading-relaxed"
+                            v-html="renderedHtml"
+                        />
+                        <p v-else class="text-sm italic text-slate-400">
+                            Aucune description
+                        </p>
+                    </div>
+                </div>
+            </div>
+        </Transition>
+    </Teleport>
+</template>
+
+<script setup lang="ts">
+import { marked } from 'marked'
+
+const props = defineProps<{
+    modelValue: boolean
+    content: string
+    title?: string
+}>()
+
+const emit = defineEmits<{
+    (e: 'update:modelValue', value: boolean): void
+}>()
+
+const renderedHtml = computed(() => {
+    if (!props.content) return ''
+    return marked.parse(props.content, { async: false }) as string
+})
+</script>
+
+<style scoped>
+.md-preview-enter-active,
+.md-preview-leave-active {
+    transition: opacity 0.2s ease;
+}
+
+.md-preview-enter-from,
+.md-preview-leave-to {
+    opacity: 0;
+}
+</style>

frontend/components/user/AvatarCropper.vue

@@ -18,21 +18,18 @@
                 </div>
 
                 <div class="flex justify-end gap-3">
-                    <button
-                        type="button"
-                        class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-medium text-neutral-700 hover:bg-neutral-50"
+                    <MalioButton
+                        variant="tertiary"
+                        :label="$t('common.cancel')"
+                        button-class="w-auto px-4"
                         @click="emit('cancel')"
-                    >
-                        {{ $t('common.cancel') }}
-                    </button>
-                    <button
-                        type="button"
-                        class="rounded-lg bg-primary-500 px-4 py-2 text-sm font-semibold text-white hover:bg-secondary-500"
+                    />
+                    <MalioButton
+                        :label="$t('common.confirm')"
+                        button-class="w-auto px-4"
                         :disabled="cropping"
                         @click="onConfirm"
-                    >
-                        {{ $t('common.confirm') }}
-                    </button>
+                    />
                 </div>
             </div>
         </div>

frontend/components/user/UserDrawer.vue

@@ -1,5 +1,5 @@
 <template>
-    <AppDrawer v-model="isOpen" :title="isEditing ? $t('users.editUser') : $t('users.addUser')">
+    <MalioDrawer v-model="isOpen" :title="isEditing ? $t('users.editUser') : $t('users.addUser')">
         <form class="flex flex-col gap-2" @submit.prevent="handleSubmit">
             <MalioInputText
                 v-model="form.username"
@@ -8,12 +8,11 @@
                 :error="touched.username && !form.username.trim() ? 'Le nom est requis' : ''"
                 @blur="touched.username = true"
             />
-            <MalioInputText
+            <MalioInputPassword
                 v-model="form.password"
                 label="Mot de passe"
                 input-class="w-full"
-                type="password"
-                :placeholder="isEditing ? 'Laisser vide pour ne pas changer' : ''"
+                :hint="isEditing ? 'Laisser vide pour ne pas changer' : ''"
                 :error="touched.password && !isEditing && !form.password ? 'Le mot de passe est requis' : ''"
                 @blur="touched.password = true"
             />
@@ -70,16 +69,15 @@
             </div>
 
             <div class="mt-6 flex justify-end">
-                <button
-                    type="submit"
-                    class="rounded-md bg-primary-500 px-6 py-2 text-sm font-semibold text-white hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    label="Enregistrer"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    Enregistrer
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
-    </AppDrawer>
+    </MalioDrawer>
 </template>
 
 <script setup lang="ts">

frontend/i18n/locales/fr.json

@@ -162,7 +162,21 @@
         "noEntries": "Aucune activité pour cette période",
         "addEntry": "Ajouter une Activité",
         "editEntry": "Modifier un temps",
-        "export": "Exporter"
+        "export": "Exporter",
+        "exportTitle": "Exporter les temps",
+        "exportCurrentMonth": "Mois en cours",
+        "exportLastMonth": "Mois dernier",
+        "exportCustomPeriod": "Période personnalisée",
+        "exportFrom": "Du",
+        "exportTo": "Au",
+        "exportUsers": "Utilisateurs",
+        "exportClient": "Client",
+        "exportProjects": "Projets",
+        "exportTags": "Tags",
+        "exportAllClients": "Tous les clients",
+        "exportLoading": "Export en cours...",
+        "exportSuccess": "Export terminé !",
+        "exportError": "Erreur lors de l'export."
     },
     "archive": {
         "title": "Archives",
@@ -379,7 +393,21 @@
         "title": "Mon profil",
         "changeAvatar": "Changer l'avatar",
         "removeAvatar": "Supprimer l'avatar",
-        "cropAvatar": "Recadrer l'avatar"
+        "cropAvatar": "Recadrer l'avatar",
+        "apiToken": {
+            "title": "Token API MCP",
+            "help": "Utilisé pour authentifier le serveur MCP HTTP (à coller dans le header Authorization: Bearer …). Ne pas partager.",
+            "label": "Token",
+            "empty": "Aucun token généré pour le moment.",
+            "generate": "Générer un token",
+            "regenerate": "Régénérer",
+            "copy": "Copier",
+            "copied": "Token copié dans le presse-papiers.",
+            "copyFailed": "Impossible de copier le token.",
+            "regenerated": "Nouveau token généré. L'ancien token est désormais invalide.",
+            "confirmTitle": "Régénérer le token MCP ?",
+            "confirmMessage": "L'ancien token sera immédiatement invalidé. Tous les clients MCP utilisant ce token devront être reconfigurés."
+        }
     },
     "bookstack": {
         "settings": {

frontend/nuxt.config.ts

@@ -37,6 +37,9 @@ export default defineNuxtConfig({
                 },
             },
         },
+        optimizeDeps: {
+            include: ['markdown-it-task-lists'],
+        },
     },
     toast: {
         settings: {

frontend/package-lock.json

@@ -7,13 +7,15 @@
             "name": "nuxt-app",
             "hasInstallScript": true,
             "dependencies": {
-                "@malio/layer-ui": "^1.1.0",
+                "@malio/layer-ui": "^1.4.8",
                 "@nuxt/icon": "^2.2.1",
                 "@nuxtjs/i18n": "^10.2.3",
                 "@nuxtjs/tailwindcss": "^6.14.0",
                 "@pinia/nuxt": "^0.11.3",
+                "@tailwindcss/typography": "^0.5.19",
                 "@vuepic/vue-datepicker": "^12.1.0",
                 "chart.js": "^4.5.1",
+                "marked": "^18.0.0",
                 "nuxt": "^4.3.1",
                 "nuxt-toast": "^1.4.0",
                 "pinia": "^3.0.4",
@@ -1116,6 +1118,7 @@
             "resolved": "https://registry.npmjs.org/@floating-ui/dom/-/dom-1.7.6.tgz",
             "integrity": "sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==",
             "license": "MIT",
+            "peer": true,
             "dependencies": {
                 "@floating-ui/core": "^1.7.5",
                 "@floating-ui/utils": "^0.2.11"
@@ -2203,19 +2206,545 @@
             "license": "MIT"
         },
         "node_modules/@malio/layer-ui": {
-            "version": "1.1.0",
-            "resolved": "https://gitea.malio.fr/api/packages/MALIO-DEV/npm/%40malio%2Flayer-ui/-/1.1.0/layer-ui-1.1.0.tgz",
-            "integrity": "sha512-mc+kOK+EDfo6ZZcE0/FaVnvDyIDJrigkgOzvL8rxnpljXEiRlKj5673e5e6ZIoOyKFqktzbJXzFr4V6UBD0wPg==",
+            "version": "1.4.8",
+            "resolved": "https://gitea.malio.fr/api/packages/MALIO-DEV/npm/%40malio%2Flayer-ui/-/1.4.8/layer-ui-1.4.8.tgz",
+            "integrity": "sha512-ABQmfMqJqKGGnx6kf5KK/XVuKAPWSpRHmLpS9XMg6pUH8kww8o3JoywlrlFkk9xA30zNFaehAtzV7S19E4JTlg==",
             "dependencies": {
                 "@nuxt/icon": "^2.2.1",
                 "@nuxtjs/tailwindcss": "^6.14.0",
+                "@tiptap/extension-color": "^3.22.5",
+                "@tiptap/extension-highlight": "^3.22.5",
+                "@tiptap/extension-placeholder": "^3.22.5",
+                "@tiptap/extension-text-style": "^3.22.5",
+                "@tiptap/pm": "^3.22.5",
+                "@tiptap/starter-kit": "^3.22.5",
+                "@tiptap/vue-3": "^3.22.5",
                 "maska": "^3.2.0",
-                "tailwind-merge": "^3.3.1"
+                "tailwind-merge": "^3.3.1",
+                "tiptap-markdown": "^0.9.0"
             },
             "peerDependencies": {
                 "nuxt": "^4.0.0"
             }
         },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/core": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/core/-/core-3.22.5.tgz",
+            "integrity": "sha512-L1lhWz6ujGny8LduTJ7MBWYhzigwOvfUJUrJ7IzOJSuy3+OAzisdGDD1GV7LEO/hU0Hr2Mkm1wajRIHExvS9HQ==",
+            "license": "MIT",
+            "peer": true,
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-blockquote": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-blockquote/-/extension-blockquote-3.22.5.tgz",
+            "integrity": "sha512-ajyP5W8fG5Hrru47T/eF3xMKOpNvWofgNJqBTeNuGl02sYxsy9a4EunyFxudsaZP9WW3VOD4SaIWr5+MqpbnOQ==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-bold": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-bold/-/extension-bold-3.22.5.tgz",
+            "integrity": "sha512-l/uDtpJISiFFyfctvnODNWBN/XPZI1jVZRacTRDDnSn8+x6KQ7G2qgFYueU7KvVJGDFVT39Iio56mcFRG/Pozg==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-bubble-menu": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-bubble-menu/-/extension-bubble-menu-3.22.5.tgz",
+            "integrity": "sha512-yrNlFQQJY5MmhBpmD8tnmaSmyUQrEvgyPKa3bzVeWEhDSG1CW4A0ZSMx3hrA9yFO0HWfw3IJmvSCycEZQBalpQ==",
+            "license": "MIT",
+            "optional": true,
+            "dependencies": {
+                "@floating-ui/dom": "^1.0.0"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-bullet-list": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-bullet-list/-/extension-bullet-list-3.22.5.tgz",
+            "integrity": "sha512-cf54fG9AybU8NgPMv1TOcoqAkELeRc/VpnSCt/rIJZphWQx9nsFmrtkrlCatrIcCaGtNZYwlHlMnC5LVVMu0uA==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extension-list": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-code": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-code/-/extension-code-3.22.5.tgz",
+            "integrity": "sha512-mwDNOJC9rYbDu/JcqrN4dbUQRklJU8Fuk2raxD/IvFw9qUIcPCmxQ2XT9UTKmZz/Ju7Kdy72fss6XpgWv6gLAQ==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-code-block": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-code-block/-/extension-code-block-3.22.5.tgz",
+            "integrity": "sha512-d123kCfLdJTi4fue1m0+TNFztDkmIRSZGZmGu6H9KqwG5Q7IzjT9o8lzRsz+pXxYqHvqgYmXoEpM6srbzXx/Ag==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-color": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-color/-/extension-color-3.22.5.tgz",
+            "integrity": "sha512-4aTygOUlTFBYCvJy67SeKVdXCQw7du3Rj+N5ZutVnDnrpfzUBWsO7f+I+iDS8eMQFbWxVFLlWxGMcTbjtk1a+Q==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extension-text-style": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-document": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-document/-/extension-document-3.22.5.tgz",
+            "integrity": "sha512-8NJERd+pCtvSuEP4C4WMGYmRRCV12ePZL7bC+QUdFlbdXg+kNZS0zZ7hh879tYA0Kidbi8rWWD1Tx+H2ezkmMw==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-dropcursor": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-dropcursor/-/extension-dropcursor-3.22.5.tgz",
+            "integrity": "sha512-Mp40DaFrY3sEUVtFqmxrR0BmU4G3k8GCYYNGqNa9OqWv7BrcFDC03V2n3okESDKt4MKkzhQQmypq+ouLy8dLfA==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extensions": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-floating-menu": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-floating-menu/-/extension-floating-menu-3.22.5.tgz",
+            "integrity": "sha512-dhem4sTPhyQgQ+pFp2Oud4k4FSQz9PVMgeQAC9288SmGwxBkJNveDAw6sKTMrumqDvwkJrtslXIupq9TZYQnzg==",
+            "license": "MIT",
+            "optional": true,
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@floating-ui/dom": "^1.0.0",
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-gapcursor": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-gapcursor/-/extension-gapcursor-3.22.5.tgz",
+            "integrity": "sha512-4WkMu7qqjbsm8hCQS+8X+la1wjriN0SKoRdvpfKH33qM50MB34tYJuGLAO+y7TTh4MMMco3AZCKPBL5JVMqNIg==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extensions": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-hard-break": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-hard-break/-/extension-hard-break-3.22.5.tgz",
+            "integrity": "sha512-n0R2mUVYZU2AVbJhg/WcY9+zx690wVwvsItHJf0DrYbf1tCYHx+PRHUt/AoXk6u8BSmnkb8/FDziS8m3mjfpSg==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-heading": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-heading/-/extension-heading-3.22.5.tgz",
+            "integrity": "sha512-hjyEG4947PAhMBfP1G6B0QAh6+y9mp2C5BQmNjprA05/lQzDAT7KFZzNh8ZVp3ol6aICKq/N1gFOW9Dc/9FUOw==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-highlight": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-highlight/-/extension-highlight-3.22.5.tgz",
+            "integrity": "sha512-byWruAOKcqRN0OuzVSKqLLrced3M9AZaR2pD1BV3aUZHzMzeBjLBfByh8s4lExH2Z547xQUdHHnUflBQ572I5A==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-horizontal-rule": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-horizontal-rule/-/extension-horizontal-rule-3.22.5.tgz",
+            "integrity": "sha512-vUV0/ugIbXOc8SJib0h8UMhgcqZXWu/dkEhlswZN4VVven1o5enkfxEiDw+OyIJHi5rUkrdhsQ/KTxG/Xb7X8A==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-italic": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-italic/-/extension-italic-3.22.5.tgz",
+            "integrity": "sha512-4T8baSiLkeIymTgEwirxDFt5YgYofkP3m1+MGYdGy2HKcOK+1vpvlPhEO1X5qtZngtJW5S4+njKjinRg52A4PA==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-link": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-link/-/extension-link-3.22.5.tgz",
+            "integrity": "sha512-d671MvF3GPKoS2OVxjIlQ7hIE7MS3hREdR+d4cvnnoiLLD+ZJ6KgDnxmWqF0a1s4qxLWK2KxKRSOIfYGE31QWQ==",
+            "license": "MIT",
+            "dependencies": {
+                "linkifyjs": "^4.3.2"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-list": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-list/-/extension-list-3.22.5.tgz",
+            "integrity": "sha512-cVO3ZHCgxAWZ4zrFSs81FO2nyCk1wb2EHkpLpW98FzbJLkN9rDkazhW99P3HRWy/CvUldOT+8ecI1YrQtBojMg==",
+            "license": "MIT",
+            "peer": true,
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-list-item": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-list-item/-/extension-list-item-3.22.5.tgz",
+            "integrity": "sha512-W7uTmyKLhlsvuTPLv+8WwnsY+mlikBFIoLSvVcBaFt4MwpsZ+DeB6KQg02Y7tbtaAnG7rXu9Fvw2QORh2P728A==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extension-list": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-list-keymap": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-list-keymap/-/extension-list-keymap-3.22.5.tgz",
+            "integrity": "sha512-cGUnxJ0y515e1bVHNjUmbx7oWHoEon59w6BA5N2KwV9iW2mZZchlTX4yxJSOX+ixeVRChsa7YwC3Z1jUZ6AMEg==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extension-list": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-ordered-list": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-ordered-list/-/extension-ordered-list-3.22.5.tgz",
+            "integrity": "sha512-OXdh4k4CNrukwiSdWdEQ49uvgnqvR0Z9aNSP4HI5/kZQ/Te1NtRtYCpUrzWyO/7CtjcCisXHti0o9C/TV8YMbQ==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extension-list": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-paragraph": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-paragraph/-/extension-paragraph-3.22.5.tgz",
+            "integrity": "sha512-52KCto4+XKpnBWpIufspWLyq4UWxAWC72ANPdGuIhbi72NRTabiTbTVN40uwGSPkyakeESG0/vKdWJCVvB4f0g==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-placeholder": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-placeholder/-/extension-placeholder-3.22.5.tgz",
+            "integrity": "sha512-MZAohQ3FCS763BkhGXgaWRya6WruZjwRwEAkXP8vkxbERzl2OJRjniS4uXCWzAlRb3ttE103SnY7LMdM8FvsXw==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/extensions": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-strike": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-strike/-/extension-strike-3.22.5.tgz",
+            "integrity": "sha512-42WrrFK5gOom/0znH85x12Mw5IQ/6O6DWdyUWoRIrNA/qJpuHtU8oVU+bIgU2tuomMGHruRjIzgBQv5sBjEtww==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-text": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-text/-/extension-text-3.22.5.tgz",
+            "integrity": "sha512-bzpDOdAEo1JeoVZDIyV0oY0jGXkEG+AzF70SzHoRSjOvFDtKWunyXf9eO1OnOr2/fmMcckT2qwUBNBMQplWBzw==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-text-style": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-text-style/-/extension-text-style-3.22.5.tgz",
+            "integrity": "sha512-jt63jy8YbhZJUGMxTUzeivLhowGtFp6YbCFrrmZJ7G6IHu8X8LJzO81ksz5nT5l8DKpldGwnINUfA6iE91JIAg==",
+            "license": "MIT",
+            "peer": true,
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extension-underline": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extension-underline/-/extension-underline-3.22.5.tgz",
+            "integrity": "sha512-9ut09rJD0iEbS6sk7yd2j6IwuFDLTNmDEGTDLodvqAfi+bq7ddsTDv0YviXoZaA9sdHAdTEVr2ITy2m6WK5jpA==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/extensions": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/extensions/-/extensions-3.22.5.tgz",
+            "integrity": "sha512-Ifg4MzKCj3uRqe3ieTwYnomu2y4p7EXr2avVSKZYfh12i2dyWe2Gkn1KuZDREANVE+gHqFlQjJRYzhJFwzSCrg==",
+            "license": "MIT",
+            "peer": true,
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/pm": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/pm/-/pm-3.22.5.tgz",
+            "integrity": "sha512-Cr9Mv4igxvI2tKMiahw48sZxva3PfDzypErH8IB82N+9qa9n9ygVMt0BOaDg53hLKxEEVeYr2S/wCcJIVFgBTw==",
+            "license": "MIT",
+            "peer": true,
+            "dependencies": {
+                "prosemirror-changeset": "^2.3.0",
+                "prosemirror-commands": "^1.6.2",
+                "prosemirror-dropcursor": "^1.8.1",
+                "prosemirror-gapcursor": "^1.3.2",
+                "prosemirror-history": "^1.4.1",
+                "prosemirror-keymap": "^1.2.2",
+                "prosemirror-model": "^1.24.1",
+                "prosemirror-schema-list": "^1.5.0",
+                "prosemirror-state": "^1.4.3",
+                "prosemirror-tables": "^1.6.4",
+                "prosemirror-transform": "^1.10.2",
+                "prosemirror-view": "^1.38.1"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/starter-kit": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/starter-kit/-/starter-kit-3.22.5.tgz",
+            "integrity": "sha512-LZ/LYbwH6rnDi5DnRyagkuNsYAVyhM+yJvvz+ZuYA0JkPiTXJV86J5PWSKew8M0gVfMHcNVtKjfQCvViFCeIgw==",
+            "license": "MIT",
+            "dependencies": {
+                "@tiptap/core": "^3.22.5",
+                "@tiptap/extension-blockquote": "^3.22.5",
+                "@tiptap/extension-bold": "^3.22.5",
+                "@tiptap/extension-bullet-list": "^3.22.5",
+                "@tiptap/extension-code": "^3.22.5",
+                "@tiptap/extension-code-block": "^3.22.5",
+                "@tiptap/extension-document": "^3.22.5",
+                "@tiptap/extension-dropcursor": "^3.22.5",
+                "@tiptap/extension-gapcursor": "^3.22.5",
+                "@tiptap/extension-hard-break": "^3.22.5",
+                "@tiptap/extension-heading": "^3.22.5",
+                "@tiptap/extension-horizontal-rule": "^3.22.5",
+                "@tiptap/extension-italic": "^3.22.5",
+                "@tiptap/extension-link": "^3.22.5",
+                "@tiptap/extension-list": "^3.22.5",
+                "@tiptap/extension-list-item": "^3.22.5",
+                "@tiptap/extension-list-keymap": "^3.22.5",
+                "@tiptap/extension-ordered-list": "^3.22.5",
+                "@tiptap/extension-paragraph": "^3.22.5",
+                "@tiptap/extension-strike": "^3.22.5",
+                "@tiptap/extension-text": "^3.22.5",
+                "@tiptap/extension-underline": "^3.22.5",
+                "@tiptap/extensions": "^3.22.5",
+                "@tiptap/pm": "^3.22.5"
+            },
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@tiptap/vue-3": {
+            "version": "3.22.5",
+            "resolved": "https://registry.npmjs.org/@tiptap/vue-3/-/vue-3-3.22.5.tgz",
+            "integrity": "sha512-xwSXPwDjauIVktMXBMaNaSgFyq3O1sXcX1vWyHyyCFlq4+8ekq4uXbjkD6y6IhZyr/AQoRYnjgosus+apGyGuA==",
+            "license": "MIT",
+            "funding": {
+                "type": "github",
+                "url": "https://github.com/sponsors/ueberdosis"
+            },
+            "optionalDependencies": {
+                "@tiptap/extension-bubble-menu": "^3.22.5",
+                "@tiptap/extension-floating-menu": "^3.22.5"
+            },
+            "peerDependencies": {
+                "@floating-ui/dom": "^1.0.0",
+                "@tiptap/core": "3.22.5",
+                "@tiptap/pm": "3.22.5",
+                "vue": "^3.0.0"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@types/linkify-it": {
+            "version": "3.0.5",
+            "resolved": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-3.0.5.tgz",
+            "integrity": "sha512-yg6E+u0/+Zjva+buc3EIb+29XEg4wltq7cSmd4Uc2EE/1nUVmxyzpX6gUXD0V8jIrG0r7YeOGVIbYRkxeooCtw==",
+            "license": "MIT"
+        },
+        "node_modules/@malio/layer-ui/node_modules/@types/markdown-it": {
+            "version": "13.0.9",
+            "resolved": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-13.0.9.tgz",
+            "integrity": "sha512-1XPwR0+MgXLWfTn9gCsZ55AHOKW1WN+P9vr0PaQh5aerR9LLQXUbjfEAFhjmEmyoYFWAyuN2Mqkn40MZ4ukjBw==",
+            "license": "MIT",
+            "dependencies": {
+                "@types/linkify-it": "^3",
+                "@types/mdurl": "^1"
+            }
+        },
+        "node_modules/@malio/layer-ui/node_modules/@types/mdurl": {
+            "version": "1.0.5",
+            "resolved": "https://registry.npmjs.org/@types/mdurl/-/mdurl-1.0.5.tgz",
+            "integrity": "sha512-6L6VymKTzYSrEf4Nev4Xa1LCHKrlTlYCBMTlQKFuddo1CvQcE52I0mwfOJayueUC7MJuXOeHTcIU683lzd0cUA==",
+            "license": "MIT"
+        },
+        "node_modules/@malio/layer-ui/node_modules/tiptap-markdown": {
+            "version": "0.9.0",
+            "resolved": "https://registry.npmjs.org/tiptap-markdown/-/tiptap-markdown-0.9.0.tgz",
+            "integrity": "sha512-dKLQ9iiuGNgrlGVjrNauF/UBzWu4LYOx5pkD0jNkmQt/GOwfCJsBuzZTsf1jZ204ANHOm572mZ9PYvGh1S7tpQ==",
+            "license": "MIT",
+            "workspaces": [
+                "example"
+            ],
+            "dependencies": {
+                "@types/markdown-it": "^13.0.7",
+                "markdown-it": "^14.1.0",
+                "markdown-it-task-lists": "^2.1.1",
+                "prosemirror-markdown": "^1.11.1"
+            },
+            "peerDependencies": {
+                "@tiptap/core": "^3.0.1"
+            }
+        },
         "node_modules/@mapbox/node-pre-gyp": {
             "version": "2.0.3",
             "resolved": "https://registry.npmjs.org/@mapbox/node-pre-gyp/-/node-pre-gyp-2.0.3.tgz",
@@ -5295,6 +5824,31 @@
             "integrity": "sha512-G4ewlBNhUtlLvrJTb88d2mdy2KRijzs4UhnlrOSRT4bmjh/IqNElZa3zkrZ+TC47TwtlDWzVLFADljF1Ijp5hA==",
             "license": "CC0-1.0"
         },
+        "node_modules/@tailwindcss/typography": {
+            "version": "0.5.19",
+            "resolved": "https://registry.npmjs.org/@tailwindcss/typography/-/typography-0.5.19.tgz",
+            "integrity": "sha512-w31dd8HOx3k9vPtcQh5QHP9GwKcgbMp87j58qi6xgiBnFFtKEAgCWnDw4qUT8aHwkCp8bKvb/KGKWWHedP0AAg==",
+            "license": "MIT",
+            "dependencies": {
+                "postcss-selector-parser": "6.0.10"
+            },
+            "peerDependencies": {
+                "tailwindcss": ">=3.0.0 || insiders || >=4.0.0-alpha.20 || >=4.0.0-beta.1"
+            }
+        },
+        "node_modules/@tailwindcss/typography/node_modules/postcss-selector-parser": {
+            "version": "6.0.10",
+            "resolved": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-6.0.10.tgz",
+            "integrity": "sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==",
+            "license": "MIT",
+            "dependencies": {
+                "cssesc": "^3.0.0",
+                "util-deprecate": "^1.0.2"
+            },
+            "engines": {
+                "node": ">=4"
+            }
+        },
         "node_modules/@tybys/wasm-util": {
             "version": "0.10.1",
             "resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz",
@@ -5323,6 +5877,28 @@
             "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
             "license": "MIT"
         },
+        "node_modules/@types/linkify-it": {
+            "version": "5.0.0",
+            "resolved": "https://registry.npmjs.org/@types/linkify-it/-/linkify-it-5.0.0.tgz",
+            "integrity": "sha512-sVDA58zAw4eWAffKOaQH5/5j3XeayukzDk+ewSsnv3p4yJEZHCCzMDiZM8e0OUrRvmpGZ85jf4yDHkHsgBNr9Q==",
+            "license": "MIT"
+        },
+        "node_modules/@types/markdown-it": {
+            "version": "14.1.2",
+            "resolved": "https://registry.npmjs.org/@types/markdown-it/-/markdown-it-14.1.2.tgz",
+            "integrity": "sha512-promo4eFwuiW+TfGxhi+0x3czqTYJkG8qB17ZUJiVF10Xm7NLVRSLUsfRTU/6h1e24VvRnXCx+hG7li58lkzog==",
+            "license": "MIT",
+            "dependencies": {
+                "@types/linkify-it": "^5",
+                "@types/mdurl": "^2"
+            }
+        },
+        "node_modules/@types/mdurl": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/@types/mdurl/-/mdurl-2.0.0.tgz",
+            "integrity": "sha512-RGdgjQUZba5p6QEFAVx2OGb8rQDL/cPRG7GiedRzMcJ1tYnUANBncjbSB1NRGwbvjcPeikRABz2nshyPk1bhWg==",
+            "license": "MIT"
+        },
         "node_modules/@types/resolve": {
             "version": "1.20.2",
             "resolved": "https://registry.npmjs.org/@types/resolve/-/resolve-1.20.2.tgz",
@@ -9498,6 +10074,21 @@
             "integrity": "sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==",
             "license": "MIT"
         },
+        "node_modules/linkify-it": {
+            "version": "5.0.0",
+            "resolved": "https://registry.npmjs.org/linkify-it/-/linkify-it-5.0.0.tgz",
+            "integrity": "sha512-5aHCbzQRADcdP+ATqnDuhhJ/MRIqDkZX5pyjFHRRysS8vZ5AbqGEoFIb6pYHPZ+L/OC2Lc+xT8uHVVR5CAK/wQ==",
+            "license": "MIT",
+            "dependencies": {
+                "uc.micro": "^2.0.0"
+            }
+        },
+        "node_modules/linkifyjs": {
+            "version": "4.3.2",
+            "resolved": "https://registry.npmjs.org/linkifyjs/-/linkifyjs-4.3.2.tgz",
+            "integrity": "sha512-NT1CJtq3hHIreOianA8aSXn6Cw0JzYOuDQbOrSPe7gqFnCpKP++MQe3ODgO3oh2GJFORkAAdqredOa60z63GbA==",
+            "license": "MIT"
+        },
         "node_modules/listhen": {
             "version": "1.9.0",
             "resolved": "https://registry.npmjs.org/listhen/-/listhen-1.9.0.tgz",
@@ -9679,6 +10270,53 @@
                 "source-map-js": "^1.2.1"
             }
         },
+        "node_modules/markdown-it": {
+            "version": "14.1.1",
+            "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.1.1.tgz",
+            "integrity": "sha512-BuU2qnTti9YKgK5N+IeMubp14ZUKUUw7yeJbkjtosvHiP0AZ5c8IAgEMk79D0eC8F23r4Ac/q8cAIFdm2FtyoA==",
+            "license": "MIT",
+            "dependencies": {
+                "argparse": "^2.0.1",
+                "entities": "^4.4.0",
+                "linkify-it": "^5.0.0",
+                "mdurl": "^2.0.0",
+                "punycode.js": "^2.3.1",
+                "uc.micro": "^2.1.0"
+            },
+            "bin": {
+                "markdown-it": "bin/markdown-it.mjs"
+            }
+        },
+        "node_modules/markdown-it-task-lists": {
+            "version": "2.1.1",
+            "resolved": "https://registry.npmjs.org/markdown-it-task-lists/-/markdown-it-task-lists-2.1.1.tgz",
+            "integrity": "sha512-TxFAc76Jnhb2OUu+n3yz9RMu4CwGfaT788br6HhEDlvWfdeJcLUsxk1Hgw2yJio0OXsxv7pyIPmvECY7bMbluA==",
+            "license": "ISC"
+        },
+        "node_modules/markdown-it/node_modules/entities": {
+            "version": "4.5.0",
+            "resolved": "https://registry.npmjs.org/entities/-/entities-4.5.0.tgz",
+            "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+            "license": "BSD-2-Clause",
+            "engines": {
+                "node": ">=0.12"
+            },
+            "funding": {
+                "url": "https://github.com/fb55/entities?sponsor=1"
+            }
+        },
+        "node_modules/marked": {
+            "version": "18.0.0",
+            "resolved": "https://registry.npmjs.org/marked/-/marked-18.0.0.tgz",
+            "integrity": "sha512-2e7Qiv/HJSXj8rDEpgTvGKsP8yYtI9xXHKDnrftrmnrJPaFNM7VRb2YCzWaX4BP1iCJ/XPduzDJZMFoqTCcIMA==",
+            "license": "MIT",
+            "bin": {
+                "marked": "bin/marked.js"
+            },
+            "engines": {
+                "node": ">= 20"
+            }
+        },
         "node_modules/maska": {
             "version": "3.2.0",
             "resolved": "https://registry.npmjs.org/maska/-/maska-3.2.0.tgz",
@@ -9700,6 +10338,12 @@
             "integrity": "sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==",
             "license": "CC0-1.0"
         },
+        "node_modules/mdurl": {
+            "version": "2.0.0",
+            "resolved": "https://registry.npmjs.org/mdurl/-/mdurl-2.0.0.tgz",
+            "integrity": "sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==",
+            "license": "MIT"
+        },
         "node_modules/media-typer": {
             "version": "0.3.0",
             "resolved": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz",
@@ -10466,6 +11110,12 @@
                 "node": ">= 0.8.0"
             }
         },
+        "node_modules/orderedmap": {
+            "version": "2.1.1",
+            "resolved": "https://registry.npmjs.org/orderedmap/-/orderedmap-2.1.1.tgz",
+            "integrity": "sha512-TvAWxi0nDe1j/rtMcWcIj94+Ffe6n7zhow33h40SKxmsmozs6dz/e+EajymfoFcHd7sxNn8yHM8839uixMOV6g==",
+            "license": "MIT"
+        },
         "node_modules/oxc-minify": {
             "version": "0.112.0",
             "resolved": "https://registry.npmjs.org/oxc-minify/-/oxc-minify-0.112.0.tgz",
@@ -11492,6 +12142,149 @@
             "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
             "license": "MIT"
         },
+        "node_modules/prosemirror-changeset": {
+            "version": "2.4.1",
+            "resolved": "https://registry.npmjs.org/prosemirror-changeset/-/prosemirror-changeset-2.4.1.tgz",
+            "integrity": "sha512-96WBLhOaYhJ+kPhLg3uW359Tz6I/MfcrQfL4EGv4SrcqKEMC1gmoGrXHecPE8eOwTVCJ4IwgfzM8fFad25wNfw==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-transform": "^1.0.0"
+            }
+        },
+        "node_modules/prosemirror-commands": {
+            "version": "1.7.1",
+            "resolved": "https://registry.npmjs.org/prosemirror-commands/-/prosemirror-commands-1.7.1.tgz",
+            "integrity": "sha512-rT7qZnQtx5c0/y/KlYaGvtG411S97UaL6gdp6RIZ23DLHanMYLyfGBV5DtSnZdthQql7W+lEVbpSfwtO8T+L2w==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-model": "^1.0.0",
+                "prosemirror-state": "^1.0.0",
+                "prosemirror-transform": "^1.10.2"
+            }
+        },
+        "node_modules/prosemirror-dropcursor": {
+            "version": "1.8.2",
+            "resolved": "https://registry.npmjs.org/prosemirror-dropcursor/-/prosemirror-dropcursor-1.8.2.tgz",
+            "integrity": "sha512-CCk6Gyx9+Tt2sbYk5NK0nB1ukHi2ryaRgadV/LvyNuO3ena1payM2z6Cg0vO1ebK8cxbzo41ku2DE5Axj1Zuiw==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-state": "^1.0.0",
+                "prosemirror-transform": "^1.1.0",
+                "prosemirror-view": "^1.1.0"
+            }
+        },
+        "node_modules/prosemirror-gapcursor": {
+            "version": "1.4.1",
+            "resolved": "https://registry.npmjs.org/prosemirror-gapcursor/-/prosemirror-gapcursor-1.4.1.tgz",
+            "integrity": "sha512-pMdYaEnjNMSwl11yjEGtgTmLkR08m/Vl+Jj443167p9eB3HVQKhYCc4gmHVDsLPODfZfjr/MmirsdyZziXbQKw==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-keymap": "^1.0.0",
+                "prosemirror-model": "^1.0.0",
+                "prosemirror-state": "^1.0.0",
+                "prosemirror-view": "^1.0.0"
+            }
+        },
+        "node_modules/prosemirror-history": {
+            "version": "1.5.0",
+            "resolved": "https://registry.npmjs.org/prosemirror-history/-/prosemirror-history-1.5.0.tgz",
+            "integrity": "sha512-zlzTiH01eKA55UAf1MEjtssJeHnGxO0j4K4Dpx+gnmX9n+SHNlDqI2oO1Kv1iPN5B1dm5fsljCfqKF9nFL6HRg==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-state": "^1.2.2",
+                "prosemirror-transform": "^1.0.0",
+                "prosemirror-view": "^1.31.0",
+                "rope-sequence": "^1.3.0"
+            }
+        },
+        "node_modules/prosemirror-keymap": {
+            "version": "1.2.3",
+            "resolved": "https://registry.npmjs.org/prosemirror-keymap/-/prosemirror-keymap-1.2.3.tgz",
+            "integrity": "sha512-4HucRlpiLd1IPQQXNqeo81BGtkY8Ai5smHhKW9jjPKRc2wQIxksg7Hl1tTI2IfT2B/LgX6bfYvXxEpJl7aKYKw==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-state": "^1.0.0",
+                "w3c-keyname": "^2.2.0"
+            }
+        },
+        "node_modules/prosemirror-markdown": {
+            "version": "1.13.4",
+            "resolved": "https://registry.npmjs.org/prosemirror-markdown/-/prosemirror-markdown-1.13.4.tgz",
+            "integrity": "sha512-D98dm4cQ3Hs6EmjK500TdAOew4Z03EV71ajEFiWra3Upr7diytJsjF4mPV2dW+eK5uNectiRj0xFxYI9NLXDbw==",
+            "license": "MIT",
+            "dependencies": {
+                "@types/markdown-it": "^14.0.0",
+                "markdown-it": "^14.0.0",
+                "prosemirror-model": "^1.25.0"
+            }
+        },
+        "node_modules/prosemirror-model": {
+            "version": "1.25.4",
+            "resolved": "https://registry.npmjs.org/prosemirror-model/-/prosemirror-model-1.25.4.tgz",
+            "integrity": "sha512-PIM7E43PBxKce8OQeezAs9j4TP+5yDpZVbuurd1h5phUxEKIu+G2a+EUZzIC5nS1mJktDJWzbqS23n1tsAf5QA==",
+            "license": "MIT",
+            "peer": true,
+            "dependencies": {
+                "orderedmap": "^2.0.0"
+            }
+        },
+        "node_modules/prosemirror-schema-list": {
+            "version": "1.5.1",
+            "resolved": "https://registry.npmjs.org/prosemirror-schema-list/-/prosemirror-schema-list-1.5.1.tgz",
+            "integrity": "sha512-927lFx/uwyQaGwJxLWCZRkjXG0p48KpMj6ueoYiu4JX05GGuGcgzAy62dfiV8eFZftgyBUvLx76RsMe20fJl+Q==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-model": "^1.0.0",
+                "prosemirror-state": "^1.0.0",
+                "prosemirror-transform": "^1.7.3"
+            }
+        },
+        "node_modules/prosemirror-state": {
+            "version": "1.4.4",
+            "resolved": "https://registry.npmjs.org/prosemirror-state/-/prosemirror-state-1.4.4.tgz",
+            "integrity": "sha512-6jiYHH2CIGbCfnxdHbXZ12gySFY/fz/ulZE333G6bPqIZ4F+TXo9ifiR86nAHpWnfoNjOb3o5ESi7J8Uz1jXHw==",
+            "license": "MIT",
+            "peer": true,
+            "dependencies": {
+                "prosemirror-model": "^1.0.0",
+                "prosemirror-transform": "^1.0.0",
+                "prosemirror-view": "^1.27.0"
+            }
+        },
+        "node_modules/prosemirror-tables": {
+            "version": "1.8.5",
+            "resolved": "https://registry.npmjs.org/prosemirror-tables/-/prosemirror-tables-1.8.5.tgz",
+            "integrity": "sha512-V/0cDCsHKHe/tfWkeCmthNUcEp1IVO3p6vwN8XtwE9PZQLAZJigbw3QoraAdfJPir4NKJtNvOB8oYGKRl+t0Dw==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-keymap": "^1.2.3",
+                "prosemirror-model": "^1.25.4",
+                "prosemirror-state": "^1.4.4",
+                "prosemirror-transform": "^1.10.5",
+                "prosemirror-view": "^1.41.4"
+            }
+        },
+        "node_modules/prosemirror-transform": {
+            "version": "1.12.0",
+            "resolved": "https://registry.npmjs.org/prosemirror-transform/-/prosemirror-transform-1.12.0.tgz",
+            "integrity": "sha512-GxboyN4AMIsoHNtz5uf2r2Ru551i5hWeCMD6E2Ib4Eogqoub0NflniaBPVQ4MrGE5yZ8JV9tUHg9qcZTTrcN4w==",
+            "license": "MIT",
+            "dependencies": {
+                "prosemirror-model": "^1.21.0"
+            }
+        },
+        "node_modules/prosemirror-view": {
+            "version": "1.41.8",
+            "resolved": "https://registry.npmjs.org/prosemirror-view/-/prosemirror-view-1.41.8.tgz",
+            "integrity": "sha512-TnKDdohEatgyZNGCDWIdccOHXhYloJwbwU+phw/a23KBvJIR9lWQWW7WHHK3vBdOLDNuF7TaX98GObUZOWkOnA==",
+            "license": "MIT",
+            "peer": true,
+            "dependencies": {
+                "prosemirror-model": "^1.20.0",
+                "prosemirror-state": "^1.0.0",
+                "prosemirror-transform": "^1.1.0"
+            }
+        },
         "node_modules/punycode": {
             "version": "2.3.1",
             "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -11501,6 +12294,15 @@
                 "node": ">=6"
             }
         },
+        "node_modules/punycode.js": {
+            "version": "2.3.1",
+            "resolved": "https://registry.npmjs.org/punycode.js/-/punycode.js-2.3.1.tgz",
+            "integrity": "sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==",
+            "license": "MIT",
+            "engines": {
+                "node": ">=6"
+            }
+        },
         "node_modules/quansync": {
             "version": "0.2.11",
             "resolved": "https://registry.npmjs.org/quansync/-/quansync-0.2.11.tgz",
@@ -11928,6 +12730,12 @@
                 }
             }
         },
+        "node_modules/rope-sequence": {
+            "version": "1.3.4",
+            "resolved": "https://registry.npmjs.org/rope-sequence/-/rope-sequence-1.3.4.tgz",
+            "integrity": "sha512-UT5EDe2cu2E/6O4igUr5PSFs23nvvukicWHx6GnOPlHAiiYbzNuCRQCuiUdHJQcqKalLKlrYJnjY0ySGsXNQXQ==",
+            "license": "MIT"
+        },
         "node_modules/rou3": {
             "version": "0.7.12",
             "resolved": "https://registry.npmjs.org/rou3/-/rou3-0.7.12.tgz",
@@ -13058,6 +13866,12 @@
                 "node": ">=14.17"
             }
         },
+        "node_modules/uc.micro": {
+            "version": "2.1.0",
+            "resolved": "https://registry.npmjs.org/uc.micro/-/uc.micro-2.1.0.tgz",
+            "integrity": "sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==",
+            "license": "MIT"
+        },
         "node_modules/ufo": {
             "version": "1.6.3",
             "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.3.tgz",
@@ -13969,6 +14783,12 @@
                 "vue": "^3.5.0"
             }
         },
+        "node_modules/w3c-keyname": {
+            "version": "2.2.8",
+            "resolved": "https://registry.npmjs.org/w3c-keyname/-/w3c-keyname-2.2.8.tgz",
+            "integrity": "sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==",
+            "license": "MIT"
+        },
         "node_modules/webidl-conversions": {
             "version": "3.0.1",
             "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz",

frontend/package.json

@@ -11,13 +11,15 @@
         "build:dist": "nuxt generate && rm -rf dist && cp -R .output/public dist"
     },
     "dependencies": {
-        "@malio/layer-ui": "^1.1.0",
+        "@malio/layer-ui": "^1.4.8",
         "@nuxt/icon": "^2.2.1",
         "@nuxtjs/i18n": "^10.2.3",
         "@nuxtjs/tailwindcss": "^6.14.0",
         "@pinia/nuxt": "^0.11.3",
+        "@tailwindcss/typography": "^0.5.19",
         "@vuepic/vue-datepicker": "^12.1.0",
         "chart.js": "^4.5.1",
+        "marked": "^18.0.0",
         "nuxt": "^4.3.1",
         "nuxt-toast": "^1.4.0",
         "pinia": "^3.0.4",

frontend/pages/index.vue

@@ -93,11 +93,22 @@ const isWeekPeriod = computed(() =>
     selectedPeriod.value === 'thisWeek' || selectedPeriod.value === 'lastWeek'
 )
 
-// ── Filtered data (client-side project filter) ──
+// ── Filtered data (client-side project + user filter) ──
+
+const effectiveUserId = computed(() => selectedUserId.value ?? auth.user?.id ?? null)
 
 const tasks = computed(() => {
-    if (!selectedProjectId.value) return allTasks.value
-    return allTasks.value.filter(t => t.project?.id === selectedProjectId.value)
+    let result = allTasks.value
+    if (selectedProjectId.value) {
+        result = result.filter(t => t.project?.id === selectedProjectId.value)
+    }
+    if (selectedUserId.value) {
+        result = result.filter(t =>
+            t.assignee?.id === selectedUserId.value
+            || t.collaborators?.some(c => c.id === selectedUserId.value),
+        )
+    }
+    return result
 })
 
 const timeEntries = computed(() => {
@@ -172,7 +183,10 @@ const totalHoursThisWeek = computed(() =>
 )
 
 const myTasks = computed(() =>
-    tasks.value.filter(t => t.assignee?.id === auth.user?.id)
+    tasks.value.filter(t =>
+        t.assignee?.id === effectiveUserId.value
+        || t.collaborators?.some(c => c.id === effectiveUserId.value),
+    )
 )
 
 const myTasksDone = computed(() =>

frontend/pages/login.vue

@@ -17,26 +17,19 @@
                 v-model="username"
             />
 
-            <div>
-                <label class="text-sm font-semibold text-neutral-700" for="password">
-                    Mot de passe
-                </label>
-                <input
-                    id="password"
-                    v-model="password"
-                    type="password"
-                    autocomplete="current-password"
-                    class="mt-2 w-full rounded-md border border-neutral-300 bg-white px-3 py-2 text-base text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
-                />
-            </div>
+            <MalioInputPassword
+                v-model="password"
+                label="Mot de passe"
+                autocomplete="current-password"
+                input-class="w-full"
+            />
 
-            <button
+            <MalioButton
+                label="Se connecter"
+                button-class="w-full"
                 type="submit"
-                class="w-full rounded-md bg-primary-500 px-4 py-2 text-base font-semibold text-white transition hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-60"
                 :disabled="isSubmitting"
-            >
-                Se connecter
-            </button>
+            />
             <p class="font-bold">v{{ version }}</p>
         </form>
     </div>

frontend/pages/my-tasks.vue

@@ -51,8 +51,9 @@ const selectedEffortId = ref<number | null>(null)
 const selectedAssigneeId = ref<number | null>(auth.user?.id ?? null)
 
 // Sort
-type SortOption = 'default' | 'deadline' | 'scheduledStart'
-const sortBy = ref<SortOption>('default')
+const SORT_DEADLINE = 1
+const SORT_SCHEDULED = 2
+const sortById = ref<number | null>(null)
 
 // View toggle
 const viewMode = ref<'kanban' | 'list'>('kanban')
@@ -106,6 +107,11 @@ const assigneeOptions = computed(() =>
     users.value.map(u => ({ label: u.username, value: u.id }))
 )
 
+const sortOptions = computed(() => [
+    { label: t('myTasks.sortDeadline'), value: SORT_DEADLINE },
+    { label: t('myTasks.sortScheduledStart'), value: SORT_SCHEDULED },
+])
+
 // Kanban helpers
 const sortedStatuses = computed(() =>
     [...statuses.value].sort((a, b) => a.position - b.position)
@@ -140,33 +146,43 @@ async function loadReferenceData() {
 }
 
 async function loadTasks() {
-    const params: Record<string, string | number | boolean | string[]> = {
+    const baseParams: Record<string, string | number | boolean | string[]> = {
         archived: false,
     }
-    if (selectedAssigneeId.value) {
-        params.assignee = `/api/users/${selectedAssigneeId.value}`
-    }
     if (selectedProjectId.value) {
-        params.project = `/api/projects/${selectedProjectId.value}`
+        baseParams.project = `/api/projects/${selectedProjectId.value}`
     }
     if (selectedGroupId.value) {
-        params.group = `/api/task_groups/${selectedGroupId.value}`
+        baseParams.group = `/api/task_groups/${selectedGroupId.value}`
     }
     if (selectedPriorityId.value) {
-        params.priority = `/api/task_priorities/${selectedPriorityId.value}`
+        baseParams.priority = `/api/task_priorities/${selectedPriorityId.value}`
     }
     if (selectedEffortId.value) {
-        params.effort = `/api/task_efforts/${selectedEffortId.value}`
+        baseParams.effort = `/api/task_efforts/${selectedEffortId.value}`
     }
     if (selectedTagId.value) {
-        params['tags[]'] = `/api/task_tags/${selectedTagId.value}`
+        baseParams['tags[]'] = `/api/task_tags/${selectedTagId.value}`
     }
-    if (sortBy.value === 'deadline') {
-        params['order[deadline]'] = 'asc'
-    } else if (sortBy.value === 'scheduledStart') {
-        params['order[scheduledStart]'] = 'asc'
+    if (sortById.value === SORT_DEADLINE) {
+        baseParams['order[deadline]'] = 'asc'
+    } else if (sortById.value === SORT_SCHEDULED) {
+        baseParams['order[scheduledStart]'] = 'asc'
+    }
+
+    if (selectedAssigneeId.value) {
+        const userIri = `/api/users/${selectedAssigneeId.value}`
+        const [assigneeTasks, collabTasks] = await Promise.all([
+            taskService.getFiltered({ ...baseParams, assignee: userIri }),
+            taskService.getFiltered({ ...baseParams, 'collaborators[]': userIri }),
+        ])
+        const map = new Map<number, Task>()
+        for (const t of assigneeTasks) map.set(t.id, t)
+        for (const t of collabTasks) map.set(t.id, t)
+        tasks.value = [...map.values()].sort((a, b) => b.id - a.id)
+    } else {
+        tasks.value = await taskService.getFiltered(baseParams)
     }
-    tasks.value = await taskService.getFiltered(params)
 }
 
 async function loadAll() {
@@ -180,7 +196,7 @@ async function loadAll() {
 
 // Watch filters and sort to reload tasks
 watch(
-    [selectedProjectId, selectedGroupId, selectedTagId, selectedPriorityId, selectedEffortId, selectedAssigneeId, sortBy],
+    [selectedProjectId, selectedGroupId, selectedTagId, selectedPriorityId, selectedEffortId, selectedAssigneeId, sortById],
     () => { loadTasks() },
 )
 
@@ -324,15 +340,16 @@ onMounted(async () => {
             <div class="flex items-center justify-between gap-3">
                 <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">{{ $t('myTasks.title') }}</h1>
                 <div class="flex items-center gap-2">
-                    <button
-                        class="flex items-center gap-1.5 rounded-lg bg-primary-500 px-3 py-1.5 text-sm font-semibold text-white transition-colors hover:bg-secondary-500"
+                    <MalioButton
+                        icon-name="mdi:plus"
+                        icon-position="left"
+                        button-class="w-auto px-3"
                         @click="openTaskCreate"
                     >
-                        <Icon name="mdi:plus" size="18" />
                         {{ $t('myTasks.createTask') }}
-                    </button>
+                    </MalioButton>
                     <button
-                        class="flex items-center justify-center rounded-md border p-1.5 transition-colors"
+                        class="flex h-[40px] w-[40px] items-center justify-center rounded-md border transition-colors"
                         :class="viewMode === 'list'
                             ? 'border-primary-500 bg-primary-500 text-white'
                             : 'border-primary-500 text-primary-500 hover:bg-primary-50'"
@@ -399,17 +416,15 @@ onMounted(async () => {
                     text-field="text-sm"
                     text-value="text-sm"
                 />
-                <div class="flex flex-col gap-0.5">
-                    <span class="text-xs font-semibold text-neutral-500">{{ $t('myTasks.sortBy') }}</span>
-                    <select
-                        v-model="sortBy"
-                        class="rounded-lg border border-neutral-300 bg-white px-2 py-1.5 text-sm text-neutral-700 focus:outline-none focus:ring-2 focus:ring-primary-500"
-                    >
-                        <option value="default">{{ $t('myTasks.sortDefault') }}</option>
-                        <option value="deadline">{{ $t('myTasks.sortDeadline') }}</option>
-                        <option value="scheduledStart">{{ $t('myTasks.sortScheduledStart') }}</option>
-                    </select>
-                </div>
+                <MalioSelect
+                    v-model="sortById"
+                    :options="sortOptions"
+                    :label="$t('myTasks.sortBy')"
+                    :empty-option-label="$t('myTasks.sortDefault')"
+                    min-width="!w-40"
+                    text-field="text-sm"
+                    text-value="text-sm"
+                />
             </div>
         </div>
 

frontend/pages/portal/projects/[id]/index.vue

@@ -104,21 +104,19 @@
                         :placeholder="$t('clientTicket.rejectComment')"
                     />
                     <div class="mt-4 flex justify-end gap-3">
-                        <button
-                            type="button"
-                            class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            :label="$t('common.cancel')"
+                            button-class="w-auto px-4"
                             @click="cancelReject"
-                        >
-                            {{ $t('common.cancel') }}
-                        </button>
-                        <button
-                            type="button"
-                            class="rounded-lg bg-red-600 px-4 py-2 text-sm font-semibold text-white hover:bg-red-700 disabled:opacity-50"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            :label="$t('clientTicket.status.rejected')"
+                            button-class="w-auto px-4"
                             :disabled="!rejectComment.trim()"
                             @click="confirmReject"
-                        >
-                            {{ $t('clientTicket.status.rejected') }}
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/pages/portal/projects/[id]/new-ticket.vue

@@ -37,15 +37,10 @@
 
             <!-- Description -->
             <div class="mt-4">
-                <MalioInputTextArea
+                <MalioInputRichText
                     v-model="form.description"
                     :label="$t('clientTicket.description')"
-                    :size="5"
-                    resize="vertical"
-                    :min-resize-height="140"
-                    :max-resize-height="500"
-                    min-resize-width="100%"
-                    max-resize-width="100%"
+                    min-height="180px"
                 />
             </div>
 
@@ -74,13 +69,12 @@
                 >
                     {{ $t('common.cancel') }}
                 </NuxtLink>
-                <button
-                    type="submit"
-                    class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                <MalioButton
+                    :label="$t('portal.submitTicket')"
+                    button-class="w-auto px-6"
                     :disabled="isSubmitting"
-                >
-                    {{ $t('portal.submitTicket') }}
-                </button>
+                    @click="handleSubmit"
+                />
             </div>
         </form>
     </div>

frontend/pages/profile.vue

@@ -26,15 +26,64 @@
                     />
                 </label>
 
-                <button
+                <MalioButton
                     v-if="auth.user?.avatarUrl"
-                    type="button"
-                    class="rounded-lg border border-red-300 px-4 py-2 text-sm font-medium text-red-600 hover:bg-red-50"
+                    variant="danger"
+                    button-class="w-auto px-4"
                     :disabled="removing"
+                    :label="$t('profile.removeAvatar')"
                     @click="onRemove"
-                >
-                    {{ $t('profile.removeAvatar') }}
-                </button>
+                />
+            </div>
+        </div>
+
+        <!-- API Token MCP (interne uniquement) -->
+        <div
+            v-if="!isClientOnly"
+            class="mt-8 rounded-xl border border-neutral-200 bg-white p-6 shadow-sm"
+        >
+            <h2 class="mb-1 text-lg font-bold text-neutral-900">{{ $t('profile.apiToken.title') }}</h2>
+            <p class="mb-4 text-sm text-neutral-600">{{ $t('profile.apiToken.help') }}</p>
+
+            <div v-if="auth.user?.apiToken">
+                <MalioInputPassword
+                    :model-value="auth.user.apiToken"
+                    :label="$t('profile.apiToken.label')"
+                    readonly
+                    @update:model-value="() => {}"
+                />
+                <div class="mt-3 flex flex-wrap gap-3">
+                    <MalioButton
+                        variant="secondary"
+                        button-class="w-auto px-4"
+                        icon-name="mdi:content-copy"
+                        icon-position="left"
+                        :label="$t('profile.apiToken.copy')"
+                        @click="onCopy"
+                    />
+                    <MalioButton
+                        variant="danger"
+                        button-class="w-auto px-4"
+                        icon-name="mdi:refresh"
+                        icon-position="left"
+                        :disabled="regenerating"
+                        :label="$t('profile.apiToken.regenerate')"
+                        @click="showConfirm = true"
+                    />
+                </div>
+            </div>
+
+            <div v-else>
+                <p class="mb-4 text-sm text-neutral-500 italic">{{ $t('profile.apiToken.empty') }}</p>
+                <MalioButton
+                    variant="primary"
+                    button-class="w-auto px-4"
+                    icon-name="mdi:key-plus"
+                    icon-position="left"
+                    :disabled="regenerating"
+                    :label="$t('profile.apiToken.generate')"
+                    @click="onRegenerate"
+                />
             </div>
         </div>
 
@@ -45,14 +94,45 @@
             @crop="onCrop"
             @cancel="selectedFile = null"
         />
+
+        <!-- Confirm regenerate modal -->
+        <Teleport v-if="showConfirm" to="body">
+            <div class="fixed inset-0 z-[70] flex items-center justify-center">
+                <div class="absolute inset-0 bg-black/30" @click.stop="showConfirm = false" />
+                <div class="relative z-10 w-full max-w-md rounded-lg bg-white p-6 shadow-xl">
+                    <h3 class="text-lg font-bold text-neutral-900">{{ $t('profile.apiToken.confirmTitle') }}</h3>
+                    <p class="mt-3 text-sm text-neutral-600">
+                        {{ $t('profile.apiToken.confirmMessage') }}
+                    </p>
+                    <div class="mt-6 flex justify-end gap-3">
+                        <MalioButton
+                            variant="tertiary"
+                            button-class="w-auto px-4"
+                            :label="$t('common.cancel')"
+                            @click="showConfirm = false"
+                        />
+                        <MalioButton
+                            variant="danger"
+                            button-class="w-auto px-4"
+                            :disabled="regenerating"
+                            :label="$t('profile.apiToken.regenerate')"
+                            @click="onRegenerate"
+                        />
+                    </div>
+                </div>
+            </div>
+        </Teleport>
     </div>
     </NuxtLayout>
 </template>
 
 <script setup lang="ts">
 import { useAvatarService } from '~/composables/useAvatarService'
+import { useApiTokenService } from '~/services/api-token'
 
 const auth = useAuthStore()
+const toast = useToast()
+const { t } = useI18n()
 
 const isClientOnly = computed(() =>
     auth.user?.roles?.includes('ROLE_CLIENT') && !auth.user?.roles?.includes('ROLE_ADMIN')
@@ -62,9 +142,12 @@ definePageMeta({
     layout: false,
 })
 const { upload, remove } = useAvatarService()
+const { regenerate } = useApiTokenService()
 
 const selectedFile = ref<File | null>(null)
 const removing = ref(false)
+const regenerating = ref(false)
+const showConfirm = ref(false)
 
 function onFileSelect(event: Event) {
     const input = event.target as HTMLInputElement
@@ -98,4 +181,28 @@ async function onRemove() {
         removing.value = false
     }
 }
+
+async function onCopy() {
+    if (!auth.user?.apiToken) return
+    try {
+        await navigator.clipboard.writeText(auth.user.apiToken)
+        toast.success({ message: t('profile.apiToken.copied') })
+    } catch {
+        toast.error({ message: t('profile.apiToken.copyFailed') })
+    }
+}
+
+async function onRegenerate() {
+    regenerating.value = true
+    try {
+        const newToken = await regenerate()
+        if (auth.user) {
+            auth.user.apiToken = newToken
+        }
+        showConfirm.value = false
+        toast.success({ message: t('profile.apiToken.regenerated') })
+    } finally {
+        regenerating.value = false
+    }
+}
 </script>

frontend/pages/projects/[id]/client-tickets.vue

@@ -60,20 +60,20 @@
                         <p class="mt-0.5 text-xs text-neutral-400">{{ formatDate(ticket.createdAt) }}</p>
                     </div>
                     <div class="flex items-center gap-1">
-                        <button
-                            class="rounded p-1.5 text-neutral-400 transition-colors hover:bg-neutral-100 hover:text-primary-500"
-                            :title="$t('clientTicket.changeStatus')"
+                        <MalioButtonIcon
+                            icon="mdi:swap-horizontal"
+                            :aria-label="$t('clientTicket.changeStatus')"
+                            variant="ghost"
+                            icon-size="18"
                             @click.stop="openStatusChange(ticket)"
-                        >
-                            <Icon name="mdi:swap-horizontal" size="18" />
-                        </button>
-                        <button
-                            class="rounded p-1.5 text-neutral-400 transition-colors hover:bg-red-50 hover:text-red-500"
-                            title="Supprimer"
+                        />
+                        <MalioButtonIcon
+                            icon="mdi:delete-outline"
+                            aria-label="Supprimer"
+                            variant="ghost"
+                            icon-size="18"
                             @click.stop="onDelete(ticket)"
-                        >
-                            <Icon name="mdi:delete-outline" size="18" />
-                        </button>
+                        />
                         <Icon
                             :name="expandedId === ticket.id ? 'mdi:chevron-up' : 'mdi:chevron-down'"
                             size="20"
@@ -84,7 +84,12 @@
 
                 <!-- Expanded details -->
                 <div v-if="expandedId === ticket.id" class="border-t border-neutral-100 px-4 py-3">
-                    <p class="text-sm text-neutral-600 whitespace-pre-wrap">{{ ticket.description }}</p>
+                    <MalioInputRichText
+                        v-if="ticket.description"
+                        :model-value="ticket.description"
+                        :editable="false"
+                    />
+                    <p v-else class="text-sm italic text-neutral-400">—</p>
                     <div v-if="ticket.url" class="mt-2">
                         <a
                             :href="ticket.url"
@@ -143,19 +148,18 @@
                     </div>
 
                     <div class="mt-6 flex justify-end gap-3">
-                        <button
-                            class="rounded-lg border border-neutral-300 px-4 py-2 text-sm font-semibold text-neutral-700 transition-colors hover:bg-neutral-50"
+                        <MalioButton
+                            variant="tertiary"
+                            :label="$t('common.cancel')"
+                            button-class="w-auto px-4"
                             @click="statusModalOpen = false"
-                        >
-                            {{ $t('common.cancel') }}
-                        </button>
-                        <button
-                            class="rounded-lg bg-primary-500 px-6 py-2 text-sm font-semibold text-white transition-colors hover:bg-secondary-500 disabled:cursor-not-allowed disabled:opacity-50"
+                        />
+                        <MalioButton
+                            label="Confirmer"
+                            button-class="w-auto px-6"
                             :disabled="isUpdatingStatus"
                             @click="confirmStatusChange"
-                        >
-                            Confirmer
-                        </button>
+                        />
                     </div>
                 </div>
             </div>

frontend/pages/projects/[id]/index.vue

@@ -4,15 +4,17 @@
             <div class="flex items-center justify-between gap-3">
                 <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">{{ project?.name ?? '' }}</h1>
                 <div class="flex items-center gap-2">
-                    <button
-                        class="shrink-0 rounded-md bg-primary-500 px-3 py-2 text-xs font-semibold text-white hover:bg-secondary-500 sm:px-4 sm:text-sm"
+                    <MalioButton
+                        icon-name="mdi:plus"
+                        icon-position="left"
+                        button-class="w-auto px-3 shrink-0"
                         @click="openTaskCreate"
                     >
-                        <span class="hidden sm:inline">+ Ajouter un ticket</span>
-                        <span class="sm:hidden">+ Ticket</span>
-                    </button>
+                        <span class="hidden sm:inline">Ajouter un ticket</span>
+                        <span class="sm:hidden">Ticket</span>
+                    </MalioButton>
                     <button
-                        class="flex items-center justify-center rounded-md border p-1.5 transition-colors"
+                        class="flex h-[40px] w-[40px] items-center justify-center rounded-md border transition-colors"
                         :class="viewMode === 'list'
                             ? 'border-primary-500 bg-primary-500 text-white'
                             : 'border-primary-500 text-primary-500 hover:bg-primary-50'"
@@ -21,13 +23,12 @@
                     >
                         <Icon name="mdi:format-list-bulleted" size="20" />
                     </button>
-                    <button
-                        class="flex shrink-0 items-center rounded-md bg-neutral-200 px-3 py-2 text-neutral-600 hover:bg-neutral-300 sm:px-4"
-                        title="Paramètres du projet"
+                    <MalioButtonIcon
+                        icon="heroicons:cog-6-tooth"
+                        aria-label="Paramètres du projet"
+                        variant="ghost"
                         @click="projectDrawerOpen = true"
-                    >
-                        <Icon name="heroicons:cog-6-tooth" class="size-4 sm:size-5" />
-                    </button>
+                    />
                 </div>
             </div>
 
@@ -60,6 +61,7 @@
                     text-value="text-sm"
                 />
                 <MalioSelect
+                    v-if="viewMode === 'list'"
                     v-model="selectedStatusId"
                     :options="statusFilterOptions"
                     label="Status"
@@ -257,6 +259,12 @@ const selectedStatusId = ref<number | null>(null)
 const selectedPriorityId = ref<number | null>(null)
 const selectedEffortId = ref<number | null>(null)
 const viewMode = ref<'kanban' | 'list'>('kanban')
+
+watch(viewMode, (mode) => {
+    if (mode === 'kanban') {
+        selectedStatusId.value = null
+    }
+})
 const selectedTaskIds = reactive(new Set<number>())
 const dragOverStatusId = ref<number | null>(null)
 const dragCounter = ref(0)
@@ -297,7 +305,10 @@ const filteredTasks = computed(() => {
         result = result.filter(t => t.tags?.some(tag => tag.id === selectedTagId.value))
     }
     if (selectedAssigneeId.value) {
-        result = result.filter(t => t.assignee?.id === selectedAssigneeId.value)
+        result = result.filter(t =>
+            t.assignee?.id === selectedAssigneeId.value
+            || t.collaborators?.some(c => c.id === selectedAssigneeId.value)
+        )
     }
     if (selectedStatusId.value) {
         result = result.filter(t => t.status?.id === selectedStatusId.value)

frontend/pages/projects/index.vue

@@ -4,23 +4,24 @@
             <div class="flex flex-wrap items-center justify-between gap-3">
                 <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">{{ $t('projects.title') }}</h1>
                 <div class="flex items-center gap-2 sm:gap-3">
-                    <button
-                        class="flex items-center gap-1.5 rounded-md px-2 py-2 text-sm font-medium transition sm:px-3"
-                        :class="showArchived
-                            ? 'bg-amber-100 text-amber-700 hover:bg-amber-200'
-                            : 'text-neutral-500 hover:bg-neutral-100 hover:text-neutral-700'"
+                    <MalioButton
+                        variant="tertiary"
+                        :icon-name="showArchived ? 'mdi:archive-arrow-up-outline' : 'mdi:archive-outline'"
+                        icon-position="left"
+                        button-class="w-auto px-3"
                         @click="toggleArchived"
                     >
-                        <Icon :name="showArchived ? 'mdi:archive-arrow-up-outline' : 'mdi:archive-outline'" size="18" />
                         <span class="hidden sm:inline">{{ showArchived ? $t('projects.hideArchived') : $t('projects.showArchived') }}</span>
-                    </button>
-                    <button
-                        class="shrink-0 rounded-md bg-primary-500 px-3 py-2 text-xs font-semibold text-white hover:bg-secondary-500 sm:px-4 sm:text-sm"
+                    </MalioButton>
+                    <MalioButton
+                        icon-name="mdi:plus"
+                        icon-position="left"
+                        button-class="w-auto px-3 shrink-0"
                         @click="openCreate"
                     >
-                        <span class="hidden sm:inline">+ {{ $t('projects.addProject') }}</span>
-                        <span class="sm:hidden">+ {{ $t('projects.addProjectShort') }}</span>
-                    </button>
+                        <span class="hidden sm:inline">{{ $t('projects.addProject') }}</span>
+                        <span class="sm:hidden">{{ $t('projects.addProjectShort') }}</span>
+                    </MalioButton>
                 </div>
             </div>
         </div>
@@ -44,12 +45,13 @@
                             {{ $t('common.archived') }}
                         </span>
                     </div>
-                    <button
-                        class="p-1 text-neutral-400 hover:text-primary-500"
+                    <MalioButtonIcon
+                        icon="mdi:pencil-outline"
+                        aria-label="Modifier le projet"
+                        variant="ghost"
+                        icon-size="16"
                         @click.stop="openEdit(project)"
-                    >
-                        <Icon name="mdi:pencil-outline" size="16" />
-                    </button>
+                    />
                 </div>
                 <p class="mt-2 text-sm text-neutral-600 line-clamp-4">
                     {{ project.description ?? '' }}

frontend/pages/time-tracking.vue

@@ -3,27 +3,35 @@
         <div ref="pageHeaderEl" class="sticky top-8 z-20 flex-shrink-0 bg-white pb-4 sm:top-12">
             <div class="flex items-center justify-between gap-3">
                 <h1 class="text-xl font-bold text-primary-500 sm:text-2xl">Suivi des temps</h1>
-                <button
-                    class="shrink-0 rounded-md bg-primary-500 px-3 py-2 text-xs font-semibold text-white hover:bg-primary-600 transition sm:px-4 sm:text-sm"
+                <MalioButton
+                    icon-name="mdi:plus"
+                    icon-position="left"
+                    button-class="shrink-0"
                     @click="openCreateDrawer()"
                 >
-                    <span class="hidden sm:inline">+ Ajouter une Activité</span>
-                    <span class="sm:hidden">+ Activité</span>
-                </button>
+                    <span class="hidden sm:inline">Ajouter une Activité</span>
+                    <span class="sm:hidden">Activité</span>
+                </MalioButton>
             </div>
 
             <div class="relative z-30 mt-4 flex flex-wrap items-center gap-3 sm:gap-4">
                 <div class="flex shrink-0 items-center gap-1 h-8">
-                    <button class="flex h-8 w-8 items-center justify-center rounded-full text-neutral-400 hover:text-neutral-700 transition" @click="navigatePrev">
-                        <Icon name="mdi:chevron-left" size="20" />
-                    </button>
+                    <MalioButtonIcon
+                        icon="mdi:chevron-left"
+                        aria-label="Précédent"
+                        variant="ghost"
+                        @click="navigatePrev"
+                    />
                     <DateFilter v-model="selectedDateFilter" :picker-mode="viewMode === 'day' ? 'day' : 'week'" />
                     <h2 class="shrink-0 whitespace-nowrap text-lg font-bold leading-8 text-orange-500">
                         {{ currentMonthLabel }}
                     </h2>
-                    <button class="flex h-8 w-8 items-center justify-center rounded-full text-neutral-400 hover:text-neutral-700 transition" @click="navigateNext">
-                        <Icon name="mdi:chevron-right" size="20" />
-                    </button>
+                    <MalioButtonIcon
+                        icon="mdi:chevron-right"
+                        aria-label="Suivant"
+                        variant="ghost"
+                        @click="navigateNext"
+                    />
                 </div>
 
                 <div class="flex items-center rounded-full bg-neutral-100 p-1">
@@ -48,7 +56,7 @@
                         text-field="text-sm"
                         text-value="text-sm"
                         label="User"
-                        empty-option-label="User"
+                        empty-option-label="Tous"
                     />
                 </div>
 
@@ -76,13 +84,14 @@
                     />
                 </div>
 
-                <button
-                    class="flex shrink-0 items-center gap-2 rounded-md border border-neutral-200 bg-white px-3 py-2 text-sm font-medium text-neutral-700 hover:bg-neutral-50 transition"
-                    @click="exportTimeEntries"
-                >
-                    <Icon name="mdi:download" size="18" />
-                    {{ $t('timeEntries.export') }}
-                </button>
+                <MalioButton
+                    :label="$t('timeEntries.export')"
+                    variant="secondary"
+                    icon-name="mdi:download"
+                    icon-position="left"
+                    button-class="w-auto px-4"
+                    @click="exportDrawerOpen = true"
+                />
             </div>
         </div>
 
@@ -128,6 +137,15 @@
             @paste="onPaste"
             @delete="onDelete"
         />
+
+        <TimeTrackingExportDrawer
+            v-model="exportDrawerOpen"
+            :users="users"
+            :projects="projects"
+            :tags="tags"
+            :clients="clients"
+            @export="onExport"
+        />
     </div>
 </template>
 
@@ -136,6 +154,7 @@ import type { TimeEntry } from '~/services/dto/time-entry'
 import type { UserData } from '~/services/dto/user-data'
 import type { Project } from '~/services/dto/project'
 import type { TaskTag } from '~/services/dto/task-tag'
+import type { Client } from '~/services/dto/client'
 import { useTimeEntryService } from '~/services/time-entries'
 import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'
@@ -156,6 +175,8 @@ const entries = ref<TimeEntry[]>([])
 const users = ref<UserData[]>([])
 const projects = ref<Project[]>([])
 const tags = ref<TaskTag[]>([])
+const clients = ref<Client[]>([])
+const exportDrawerOpen = ref(false)
 
 const drawerOpen = ref(false)
 const editingEntry = ref<TimeEntry | null>(null)
@@ -196,16 +217,7 @@ function updatePageHeaderHeight() {
     pageHeaderHeight.value = pageHeaderEl.value?.offsetHeight ?? 0
 }
 
-const filteredEntries = computed(() => {
-    let result = entries.value
-    if (selectedProjectId.value) {
-        result = result.filter((e) => e.project?.id === selectedProjectId.value)
-    }
-    if (selectedTagId.value) {
-        result = result.filter((e) => e.tags.some((t) => t.id === selectedTagId.value))
-    }
-    return result
-})
+const filteredEntries = computed(() => entries.value)
 
 function getMonday(d: Date): Date {
     const date = new Date(d)
@@ -218,15 +230,35 @@ function getMonday(d: Date): Date {
 
 function navigatePrev() {
     const d = new Date(startDate.value)
-    d.setDate(d.getDate() - (viewMode.value === 'day' ? 1 : 7))
-    startDate.value = viewMode.value === 'day' ? d : getMonday(d)
+    if (viewMode.value === 'day') {
+        d.setDate(d.getDate() - 1)
+        startDate.value = d
+    } else if (viewMode.value === 'list') {
+        d.setMonth(d.getMonth() - 1)
+        d.setDate(1)
+        d.setHours(0, 0, 0, 0)
+        startDate.value = d
+    } else {
+        d.setDate(d.getDate() - 7)
+        startDate.value = getMonday(d)
+    }
     loadEntries()
 }
 
 function navigateNext() {
     const d = new Date(startDate.value)
-    d.setDate(d.getDate() + (viewMode.value === 'day' ? 1 : 7))
-    startDate.value = viewMode.value === 'day' ? d : getMonday(d)
+    if (viewMode.value === 'day') {
+        d.setDate(d.getDate() + 1)
+        startDate.value = d
+    } else if (viewMode.value === 'list') {
+        d.setMonth(d.getMonth() + 1)
+        d.setDate(1)
+        d.setHours(0, 0, 0, 0)
+        startDate.value = d
+    } else {
+        d.setDate(d.getDate() + 7)
+        startDate.value = getMonday(d)
+    }
     loadEntries()
 }
 
@@ -305,63 +337,70 @@ async function onDelete(entry: TimeEntry) {
     await loadEntries()
 }
 
-function getExportDateRange(): { after: string, before: string } {
-    if (Array.isArray(selectedDateFilter.value) && selectedDateFilter.value.length === 2) {
-        return {
-            after: selectedDateFilter.value[0].toISOString().slice(0, 10),
-            before: selectedDateFilter.value[1].toISOString().slice(0, 10),
-        }
+async function onExport(params: {
+    after: string
+    before: string
+    users?: number[]
+    projects?: number[]
+    client?: number
+    tags?: number[]
+}) {
+    const toast = useToast()
+    const { t } = useNuxtApp().$i18n as { t: (key: string) => string }
+
+    toast.info({ message: t('timeEntries.exportLoading') })
+
+    try {
+        const result = await timeEntryService.downloadExport(params)
+
+        const url = URL.createObjectURL(result.blob)
+        const a = document.createElement('a')
+        a.href = url
+        a.download = result.filename
+        document.body.appendChild(a)
+        a.click()
+        document.body.removeChild(a)
+        URL.revokeObjectURL(url)
+
+        toast.success({ message: t('timeEntries.exportSuccess') })
+    } catch {
+        toast.error({ message: t('timeEntries.exportError') })
     }
-    const end = new Date(startDate.value)
-    end.setDate(end.getDate() + (viewMode.value === 'day' ? 1 : 7))
-    return {
-        after: startDate.value.toISOString().slice(0, 10),
-        before: end.toISOString().slice(0, 10),
-    }
-}
-
-function exportTimeEntries() {
-    const { after, before } = getExportDateRange()
-
-    const url = timeEntryService.getExportUrl({
-        after,
-        before,
-        user: selectedUserId.value ?? undefined,
-        project: selectedProjectId.value ?? undefined,
-        tags: selectedTagId.value ? [selectedTagId.value] : undefined,
-    })
-
-    const a = document.createElement('a')
-    a.href = url
-    a.download = ''
-    document.body.appendChild(a)
-    a.click()
-    document.body.removeChild(a)
 }
 
 async function loadEntries() {
     const end = new Date(startDate.value)
-    end.setDate(end.getDate() + (viewMode.value === 'day' ? 1 : 7))
+    if (viewMode.value === 'day') {
+        end.setDate(end.getDate() + 1)
+    } else if (viewMode.value === 'list') {
+        end.setMonth(end.getMonth() + 1)
+    } else {
+        end.setDate(end.getDate() + 7)
+    }
 
     entries.value = await timeEntryService.getByDateRange({
         after: startDate.value.toISOString(),
         before: end.toISOString(),
         user: selectedUserId.value ?? undefined,
+        project: selectedProjectId.value ?? undefined,
+        tag: selectedTagId.value ?? undefined,
     })
 }
 
 async function loadReferenceData() {
     const api = useApi()
 
-    const [usersData, projectsData, typesData] = await Promise.all([
+    const [usersData, projectsData, typesData, clientsData] = await Promise.all([
         api.get<HydraCollection<UserData>>('/users'),
         api.get<HydraCollection<Project>>('/projects'),
         api.get<HydraCollection<TaskTag>>('/task_tags'),
+        api.get<HydraCollection<Client>>('/clients'),
     ])
 
     users.value = extractHydraMembers(usersData)
     projects.value = extractHydraMembers(projectsData)
     tags.value = extractHydraMembers(typesData)
+    clients.value = extractHydraMembers(clientsData)
 }
 
 onMounted(async () => {
@@ -380,11 +419,20 @@ onMounted(async () => {
 
 watch(viewMode, () => {
     selectedDateFilter.value = null
-    startDate.value = viewMode.value === 'day' ? startDate.value : getMonday(startDate.value)
+    if (viewMode.value === 'day') {
+        // keep current date
+    } else if (viewMode.value === 'list') {
+        const d = new Date(startDate.value)
+        d.setDate(1)
+        d.setHours(0, 0, 0, 0)
+        startDate.value = d
+    } else {
+        startDate.value = getMonday(startDate.value)
+    }
     loadEntries()
 })
 
-watch(selectedUserId, () => {
+watch([selectedUserId, selectedProjectId, selectedTagId], () => {
     loadEntries()
 })
 

frontend/services/api-token.ts

@@ -0,0 +1,12 @@
+export function useApiTokenService() {
+    const api = useApi()
+
+    async function regenerate(): Promise<string> {
+        const data = await api.post<{ apiToken: string }>('/me/regenerate-api-token', {}, {
+            toast: false,
+        })
+        return data.apiToken
+    }
+
+    return { regenerate }
+}

frontend/services/dto/task.ts

@@ -17,6 +17,7 @@ export type Task = {
     effort: TaskEffort | null
     priority: TaskPriority | null
     assignee: UserData | null
+    collaborators: UserData[]
     group: TaskGroup | null
     project: Project | null
     tags: TaskTag[]
@@ -55,6 +56,7 @@ export type TaskWrite = {
     effort: string | null
     priority: string | null
     assignee: string | null
+    collaborators?: string[]
     group: string | null
     project: string
     tags: string[]

frontend/services/dto/user-data.ts

@@ -8,6 +8,7 @@ export type UserData = {
     client?: { id: number; name: string } | null
     allowedProjects?: Project[]
     avatarUrl?: string | null
+    apiToken?: string | null
 }
 
 export type UserWrite = {

frontend/services/time-entries.ts

@@ -9,7 +9,8 @@ export function useTimeEntryService() {
         after: string
         before: string
         user?: number
-        types?: number[]
+        project?: number
+        tag?: number
     }): Promise<TimeEntry[]> {
         const query: Record<string, unknown> = {
             'startedAt[after]': params.after,
@@ -18,6 +19,12 @@ export function useTimeEntryService() {
         if (params.user) {
             query.user = `/api/users/${params.user}`
         }
+        if (params.project) {
+            query.project = `/api/projects/${params.project}`
+        }
+        if (params.tag) {
+            query['tags[]'] = `/api/task_tags/${params.tag}`
+        }
         const data = await api.get<HydraCollection<TimeEntry>>('/time_entries', query)
         return extractHydraMembers(data)
     }
@@ -53,20 +60,42 @@ export function useTimeEntryService() {
     function getExportUrl(params: {
         after: string
         before: string
-        user?: number
-        project?: number
+        users?: number[]
+        projects?: number[]
+        client?: number
         tags?: number[]
     }): string {
         const query = new URLSearchParams()
         query.set('after', params.after)
         query.set('before', params.before)
-        if (params.user) query.set('user', String(params.user))
-        if (params.project) query.set('project', String(params.project))
+        if (params.users?.length) {
+            params.users.forEach(id => query.append('users[]', String(id)))
+        }
+        if (params.client) query.set('client', String(params.client))
+        if (params.projects?.length) {
+            params.projects.forEach(id => query.append('projects[]', String(id)))
+        }
         if (params.tags?.length) {
             params.tags.forEach(id => query.append('tags[]', String(id)))
         }
-        return `/api/time_entries/export?${query.toString()}`
+        return `/time_entries/export?${query.toString()}`
     }
 
-    return { getByDateRange, getActive, create, update, remove, getExportUrl }
+    async function downloadExport(params: {
+        after: string
+        before: string
+        users?: number[]
+        projects?: number[]
+        client?: number
+        tags?: number[]
+    }): Promise<{ blob: Blob; filename: string }> {
+        const url = getExportUrl(params)
+        const response = await api.getBlob(url)
+        const disposition = response.headers.get('content-disposition') ?? ''
+        const filenameMatch = disposition.match(/filename="?([^";\n]+)"?/)
+        const filename = filenameMatch?.[1] ?? `export-temps-${params.after}_${params.before}.xlsx`
+        return { blob: response.data, filename }
+    }
+
+    return { getByDateRange, getActive, create, update, remove, getExportUrl, downloadExport }
 }

frontend/tailwind.config.ts

@@ -1,7 +1,9 @@
 import type {Config} from 'tailwindcss'
+import typography from '@tailwindcss/typography'
 
 export default <Partial<Config>>{
     darkMode: 'class',
+    plugins: [typography],
     theme: {
         extend: {
             fontFamily: {
@@ -19,6 +21,28 @@ export default <Partial<Config>>{
                 },
                 blue: {
                     500: '#056CF2'
+                },
+                m: {
+                    primary: 'rgb(var(--m-primary) / <alpha-value>)',
+                    secondary: 'rgb(var(--m-secondary, 75 77 237) / <alpha-value>)',
+                    tertiary: 'rgb(var(--m-tertiary, 243 244 248) / <alpha-value>)',
+                    border: 'rgb(var(--m-border) / <alpha-value>)',
+                    text: 'rgb(var(--m-text) / <alpha-value>)',
+                    muted: 'rgb(var(--m-muted) / <alpha-value>)',
+                    bg: 'rgb(var(--m-bg) / <alpha-value>)',
+                    surface: 'rgb(var(--m-surface) / <alpha-value>)',
+                    disabled: 'rgb(var(--m-disabled) / <alpha-value>)',
+                    danger: 'rgb(var(--m-danger) / <alpha-value>)',
+                    success: 'rgb(var(--m-success) / <alpha-value>)',
+                    'btn-primary': 'rgb(var(--m-btn-primary) / <alpha-value>)',
+                    'btn-primary-hover': 'rgb(var(--m-btn-primary-hover) / <alpha-value>)',
+                    'btn-primary-active': 'rgb(var(--m-btn-primary-active) / <alpha-value>)',
+                    'btn-secondary': 'rgb(var(--m-btn-secondary) / <alpha-value>)',
+                    'btn-secondary-hover': 'rgb(var(--m-btn-secondary-hover) / <alpha-value>)',
+                    'btn-secondary-active': 'rgb(var(--m-btn-secondary-active) / <alpha-value>)',
+                    'btn-danger': 'rgb(var(--m-btn-danger) / <alpha-value>)',
+                    'btn-danger-hover': 'rgb(var(--m-btn-danger-hover) / <alpha-value>)',
+                    'btn-danger-active': 'rgb(var(--m-btn-danger-active) / <alpha-value>)',
                 }
             }
         }

frontend/utils/format.ts

@@ -3,3 +3,17 @@ export function formatFileSize(bytes: number): string {
     if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(0)} Ko`
     return `${(bytes / (1024 * 1024)).toFixed(1)} Mo`
 }
+
+export function stripRichText(value: string | null | undefined): string {
+    if (!value) return ''
+    return value
+        .replace(/<[^>]+>/g, ' ')
+        .replace(/&nbsp;/gi, ' ')
+        .replace(/&amp;/gi, '&')
+        .replace(/&lt;/gi, '<')
+        .replace(/&gt;/gi, '>')
+        .replace(/&quot;/gi, '"')
+        .replace(/&#39;|&apos;/gi, '\'')
+        .replace(/\s+/g, ' ')
+        .trim()
+}

infra/prod/.env.example

@@ -0,0 +1,22 @@
+# Symfony
+APP_ENV=prod
+APP_DEBUG=0
+APP_SECRET=change-me
+
+# Database (use host.docker.internal to reach bare-metal PostgreSQL)
+DATABASE_URL="postgresql://lesstime_user:password@host.docker.internal:5432/lesstime_prod?serverVersion=16&charset=utf8"
+
+# JWT
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE=change-me
+JWT_COOKIE_SECURE=1
+JWT_COOKIE_SAMESITE=lax
+JWT_TOKEN_TTL=86400
+JWT_COOKIE_TTL=86400
+
+# CORS
+CORS_ALLOW_ORIGIN='^https?://project\.malio-dev\.fr$'
+
+# App
+DEFAULT_URI=https://project.malio-dev.fr

infra/prod/Dockerfile

@@ -0,0 +1,82 @@
+# --- Stage 1: Build backend ---
+FROM php:8.4-cli AS backend-build
+
+RUN apt-get update && apt-get install -y \
+        libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \
+        unzip curl git \
+    && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
+
+WORKDIR /app
+COPY composer.json composer.lock symfony.lock ./
+RUN APP_ENV=prod APP_DEBUG=0 composer install --no-dev --no-scripts --no-interaction
+
+COPY bin bin/
+COPY config config/
+COPY migrations migrations/
+COPY public public/
+COPY src src/
+
+RUN composer dump-autoload --optimize --no-dev
+
+# --- Stage 2: Build frontend ---
+FROM node:lts-alpine AS frontend-build
+
+WORKDIR /app/frontend
+COPY frontend/package.json frontend/package-lock.json ./
+RUN npm ci
+
+COPY frontend/ ./
+ENV CI=1 \
+    NUXT_TELEMETRY_DISABLED=1 \
+    NUXT_PUBLIC_API_BASE=/api \
+    NUXT_PUBLIC_APP_BASE=/
+RUN npm run generate
+
+# --- Stage 3: Production image ---
+FROM php:8.4-fpm AS production
+
+RUN apt-get update && apt-get install -y \
+        libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \
+        nginx supervisor \
+    && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \
+    && rm -rf /var/lib/apt/lists/*
+
+# PHP production config
+RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
+
+# PHP-FPM: forward worker output to stderr for docker logs
+RUN echo "catch_workers_output = yes" >> /usr/local/etc/php-fpm.d/www.conf \
+    && echo "decorate_workers_output = no" >> /usr/local/etc/php-fpm.d/www.conf
+
+# Nginx: log to stdout/stderr
+RUN ln -sf /dev/stdout /var/log/nginx/access.log \
+    && ln -sf /dev/stderr /var/log/nginx/error.log
+
+# Remove default nginx site
+RUN rm -f /etc/nginx/sites-enabled/default
+
+# Configs
+COPY infra/prod/supervisord.conf /etc/supervisor/conf.d/app.conf
+COPY infra/prod/nginx.conf /etc/nginx/sites-enabled/lesstime.conf
+COPY infra/prod/maintenance.html /var/www/html/public/maintenance.html
+
+# Backend from stage 1
+COPY --from=backend-build /app /var/www/html
+
+# Frontend from stage 2
+COPY --from=frontend-build /app/frontend/.output/public /var/www/html/frontend/.output/public
+
+# Symfony needs a .env file to boot (variables are overridden by env_file in docker-compose)
+RUN echo "APP_ENV=prod" > /var/www/html/.env
+
+# Permissions
+RUN mkdir -p /var/www/html/var /var/www/html/var/uploads /var/www/html/var/mcp-sessions \
+    && chown -R www-data:www-data /var/www/html/var
+
+WORKDIR /var/www/html
+EXPOSE 80
+
+CMD ["supervisord", "-n", "-c", "/etc/supervisor/conf.d/app.conf"]

infra/prod/deploy.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")"
+
+TAG="${1:-latest}"
+export LESSTIME_IMAGE_TAG="$TAG"
+
+echo "==> Deploying lesstime:${TAG}..."
+
+echo "==> Enabling maintenance mode..."
+touch maintenance.on
+
+echo "==> Pulling image..."
+sudo docker compose pull
+
+echo "==> Starting container..."
+sudo docker compose up -d
+
+echo "==> Waiting for container to be ready..."
+sleep 3
+
+echo "==> Extracting maintenance page..."
+mkdir -p public
+sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintenance.html
+
+echo "==> Running migrations..."
+sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction
+
+echo "==> Clearing cache..."
+sudo docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
+sudo docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
+
+echo "==> Disabling maintenance mode..."
+rm -f maintenance.on
+
+VERSION=$(sudo docker compose exec -T app cat config/version.yaml | grep 'app.version' | awk -F"'" '{print $2}')
+echo "==> Deployed v${VERSION}"

infra/prod/docker-compose.yml

@@ -0,0 +1,17 @@
+services:
+  app:
+    image: gitea.malio.fr/malio-dev/lesstime:${LESSTIME_IMAGE_TAG:-latest}
+    container_name: lesstime-app
+    env_file: .env
+    ports:
+      - "8081:80"
+    volumes:
+      - ./config/jwt:/var/www/html/config/jwt:ro
+      - ./uploads:/var/www/html/var/uploads
+      - lesstime_logs:/var/www/html/var/log
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    restart: unless-stopped
+
+volumes:
+  lesstime_logs:

infra/prod/maintenance.html

@@ -0,0 +1,49 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Maintenance en cours</title>
+    <style>
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+            background-color: #f3f4f6;
+            display: flex;
+            justify-content: center;
+            align-items: center;
+            min-height: 100vh;
+            margin: 0;
+        }
+        .container {
+            background: white;
+            border-radius: 12px;
+            box-shadow: 0 4px 24px rgba(0,0,0,0.10);
+            padding: 48px 40px;
+            max-width: 480px;
+            text-align: center;
+        }
+        .icon {
+            font-size: 48px;
+            margin-bottom: 16px;
+        }
+        h1 {
+            color: #1f2937;
+            font-size: 24px;
+            margin: 0 0 16px;
+        }
+        p {
+            color: #6b7280;
+            font-size: 16px;
+            line-height: 1.6;
+            margin: 0;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="icon">&#128736;</div>
+        <h1>Maintenance en cours</h1>
+        <p>L'application est temporairement indisponible pour mise à jour. Elle sera de retour dans quelques instants.</p>
+    </div>
+</body>
+</html>

infra/prod/nginx-proxy.conf

@@ -0,0 +1,31 @@
+server {
+    listen 80;
+    listen [::]:80;
+    server_name project.malio-dev.fr;
+
+    root /var/www/lesstime/public;
+
+    # Maintenance mode
+    if (-f /var/www/lesstime/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8081;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        client_max_body_size 55m;
+    }
+}

infra/prod/nginx.conf

@@ -0,0 +1,70 @@
+server {
+    listen 80;
+    server_name _;
+
+    # Maintenance mode
+    if (-f /var/www/html/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        root /var/www/html/public;
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        root /var/www/html/public;
+        internal;
+    }
+
+    root /var/www/html/frontend/.output/public;
+    index index.html;
+
+    client_max_body_size 55m;
+
+    access_log /dev/stdout;
+    error_log /dev/stderr;
+
+    location ^~ /api/ {
+        root /var/www/html/public;
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ^~ /bundles/ {
+        root /var/www/html/public;
+        try_files $uri =404;
+    }
+
+    location = /api/login_check {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_param SCRIPT_NAME /index.php;
+        fastcgi_param PATH_INFO /login_check;
+        fastcgi_param REQUEST_URI /login_check;
+        fastcgi_pass 127.0.0.1:9000;
+    }
+
+    location ^~ /_mcp {
+        root /var/www/html/public;
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ~ ^/index\.php(/|$) {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_pass 127.0.0.1:9000;
+        internal;
+    }
+
+    location ~ \.php$ {
+        return 404;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}

infra/prod/supervisord.conf

@@ -0,0 +1,28 @@
+[supervisord]
+nodaemon=true
+user=root
+logfile=/dev/null
+logfile_maxbytes=0
+pidfile=/var/run/supervisord.pid
+
+[program:php-fpm]
+command=php-fpm -F
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+stopasgroup=true
+stopsignal=QUIT
+
+[program:nginx]
+command=nginx -g "daemon off;"
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+stopasgroup=true
+stopsignal=QUIT

makefile

@@ -1,6 +1,6 @@
 # Permet d'utiliser un .env.docker.local pour override
-ENV_DEFAULT = docker/.env.docker
-ENV_LOCAL   = docker/.env.docker.local
+ENV_DEFAULT = infra/dev/.env.docker
+ENV_LOCAL   = infra/dev/.env.docker.local
 ENV_FILE    := $(if $(wildcard $(ENV_LOCAL)),$(ENV_LOCAL),$(ENV_DEFAULT))
 
 # Permet d'avoir les variables du fichier .env.docker.local
@@ -23,13 +23,11 @@ FILES						=
 #========================================================================================
 
 env-init:
-	@mkdir -p docker
 	@cp --update=none $(ENV_DEFAULT) $(ENV_LOCAL)
 
 # Lance le container
 start: env-init
 	@echo "**** START CONTAINERS ****"
-	@cp --update=none docker/.env.docker docker/.env.docker.local
 	CURRENT_UID=$(shell id -u) CURRENT_GID=$(shell id -g) $(DOCKER_COMPOSE) up -d
 
 # Éteint le container

migrations/Version20260409075411.php

@@ -0,0 +1,37 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+/**
+ * Auto-generated Migration: Please modify to your needs!
+ */
+final class Version20260409075411 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return '';
+    }
+
+    public function up(Schema $schema): void
+    {
+        // this up() migration is auto-generated, please modify it to your needs
+        $this->addSql('CREATE TABLE task_collaborator (task_id INT NOT NULL, user_id INT NOT NULL, PRIMARY KEY (task_id, user_id))');
+        $this->addSql('CREATE INDEX IDX_A8FC6C518DB60186 ON task_collaborator (task_id)');
+        $this->addSql('CREATE INDEX IDX_A8FC6C51A76ED395 ON task_collaborator (user_id)');
+        $this->addSql('ALTER TABLE task_collaborator ADD CONSTRAINT FK_A8FC6C518DB60186 FOREIGN KEY (task_id) REFERENCES task (id) ON DELETE CASCADE NOT DEFERRABLE');
+        $this->addSql('ALTER TABLE task_collaborator ADD CONSTRAINT FK_A8FC6C51A76ED395 FOREIGN KEY (user_id) REFERENCES "user" (id) ON DELETE CASCADE NOT DEFERRABLE');
+    }
+
+    public function down(Schema $schema): void
+    {
+        // this down() migration is auto-generated, please modify it to your needs
+        $this->addSql('ALTER TABLE task_collaborator DROP CONSTRAINT FK_A8FC6C518DB60186');
+        $this->addSql('ALTER TABLE task_collaborator DROP CONSTRAINT FK_A8FC6C51A76ED395');
+        $this->addSql('DROP TABLE task_collaborator');
+    }
+}

script/deploy-release.sh

@@ -1,96 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-# Usage: ./script/deploy-release.sh v0.1.0
-# Requires: curl, tar, (optional) rsync
-#
-# Auth token: set RELEASE_TOKEN env var or create /etc/lesstime-release-token
-umask 002
-
-TAG="${1:-}"
-if [ -z "$TAG" ]; then
-  echo "Usage: $0 v0.1.0" >&2
-  exit 1
-fi
-
-REPO_OWNER="MALIO-DEV"
-REPO_NAME="Lesstime"
-GITEA_API="https://gitea.malio.fr/api/v1"
-DEPLOY_DIR="/var/www/lesstime"
-
-if [ -f /etc/lesstime-release-token ] && [ -z "${RELEASE_TOKEN:-}" ]; then
-  RELEASE_TOKEN="$(cat /etc/lesstime-release-token)"
-fi
-
-tmp_dir="$(mktemp -d)"
-cleanup() {
-  rm -rf "$tmp_dir"
-}
-trap cleanup EXIT
-
-release_json="$tmp_dir/release.json"
-curl_opts=(-sS)
-if [ -n "${RELEASE_TOKEN:-}" ]; then
-  curl_opts+=(-H "Authorization: token ${RELEASE_TOKEN}")
-fi
-curl "${curl_opts[@]}" \
-  "${GITEA_API}/repos/${REPO_OWNER}/${REPO_NAME}/releases/tags/${TAG}" \
-  -o "$release_json"
-
-asset_url="$(python3 - "$release_json" <<'PY'
-import json, sys
-data = json.load(open(sys.argv[1], 'r'))
-assets = data.get("assets", [])
-for a in assets:
-    name = a.get("name", "")
-    if name.startswith("lesstime-") and name.endswith(".tar.gz"):
-        print(a.get("browser_download_url", ""))
-        break
-PY
-)"
-
-if [ -z "$asset_url" ]; then
-  echo "Release asset not found for tag ${TAG}" >&2
-  exit 1
-fi
-
-archive="$tmp_dir/artefact.tar.gz"
-curl "${curl_opts[@]}" -L "$asset_url" -o "$archive"
-
-tar -xzf "$archive" -C "$tmp_dir"
-
-if command -v rsync >/dev/null 2>&1; then
-  rsync -a --delete --no-perms --no-owner --no-group \
-    --exclude ".env" \
-    --exclude ".env.local" \
-    --exclude "config/jwt" \
-    --exclude "var" \
-    "$tmp_dir"/ "$DEPLOY_DIR"/
-else
-  cp -a "$tmp_dir"/. "$DEPLOY_DIR"/
-fi
-
-# Ensure Nginx can traverse the deploy path.
-chmod o+rx "$(dirname "$DEPLOY_DIR")" "$DEPLOY_DIR" 2>/dev/null || true
-
-# Create frontend/dist symlink if needed (nginx serves from frontend/dist)
-if [ -d "${DEPLOY_DIR}/frontend/.output/public" ] && [ ! -L "${DEPLOY_DIR}/frontend/dist" ]; then
-  ln -sfn "${DEPLOY_DIR}/frontend/.output/public" "${DEPLOY_DIR}/frontend/dist"
-fi
-
-echo "Release ${TAG} deployed to ${DEPLOY_DIR}"
-
-# Ensure var/log exists and is writable by PHP (www-data)
-mkdir -p "${DEPLOY_DIR}/var/log"
-chown www-data:www-data "${DEPLOY_DIR}/var/log"
-chmod 775 "${DEPLOY_DIR}/var/log"
-
-if [ -f "${DEPLOY_DIR}/.env.local" ]; then
-  echo "Clearing cache..."
-  php "${DEPLOY_DIR}/bin/console" cache:clear --env=prod --no-debug
-
-  echo "Running migrations (if any)..."
-  php "${DEPLOY_DIR}/bin/console" doctrine:migrations:migrate --no-interaction --env=prod
-else
-  echo "Skip post-deploy: ${DEPLOY_DIR}/.env.local not found" >&2
-fi

src/Controller/RegenerateApiTokenController.php

@@ -0,0 +1,36 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controller;
+
+use App\Entity\User;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\Routing\Attribute\Route;
+use Symfony\Component\Security\Http\Attribute\IsGranted;
+
+use function bin2hex;
+use function random_bytes;
+
+class RegenerateApiTokenController extends AbstractController
+{
+    public function __construct(
+        private readonly EntityManagerInterface $entityManager,
+    ) {}
+
+    #[Route('/api/me/regenerate-api-token', name: 'me_regenerate_api_token', methods: ['POST'], priority: 1)]
+    #[IsGranted('ROLE_USER')]
+    public function __invoke(): JsonResponse
+    {
+        /** @var User $user */
+        $user = $this->getUser();
+
+        $token = bin2hex(random_bytes(32));
+        $user->setApiToken($token);
+        $this->entityManager->flush();
+
+        return new JsonResponse(['apiToken' => $token]);
+    }
+}

src/Controller/TimeEntryExportController.php

@@ -47,27 +47,65 @@ class TimeEntryExportController extends AbstractController
             throw new BadRequestHttpException('Format de date invalide. Utilisez YYYY-MM-DD.');
         }
 
-        // Max range: 12 months
         if ($after->modify('+12 months') < $before) {
             throw new BadRequestHttpException('La plage de dates ne peut pas dépasser 12 mois.');
         }
 
-        // Authorization: non-admin users can only export their own data
-        $user = null;
+        // --- Users ---
+        $users = null;
         if (!$this->security->isGranted('ROLE_ADMIN')) {
-            /** @var User $user */
-            $user = $this->security->getUser();
+            /** @var User $currentUser */
+            $currentUser = $this->security->getUser();
+            $users       = [$currentUser];
         } else {
-            $userId = $request->query->getInt('user');
-            if ($userId > 0) {
-                $user = $this->entityManager->getRepository(User::class)->find($userId);
+            /** @var int[] $userIds */
+            $userIds = array_filter(
+                array_map('intval', (array) $request->query->all('users')),
+                fn (int $id) => $id > 0,
+            );
+            if ([] !== $userIds) {
+                $users = $this->entityManager->getRepository(User::class)->findBy(['id' => $userIds]);
             }
         }
 
-        $project   = null;
-        $projectId = $request->query->getInt('project');
-        if ($projectId > 0) {
-            $project = $this->entityManager->getRepository(Project::class)->find($projectId);
+        // --- Client (filter projects by client) ---
+        $clientId       = $request->query->getInt('client');
+        $clientProjects = null;
+        if ($clientId > 0) {
+            $clientProjects = $this->entityManager->getRepository(Project::class)->findBy(['client' => $clientId]);
+        }
+
+        // --- Projects ---
+        $projects = null;
+
+        /** @var int[] $projectIds */
+        $projectIds = array_filter(
+            array_map('intval', (array) $request->query->all('projects')),
+            fn (int $id) => $id > 0,
+        );
+        if ([] !== $projectIds) {
+            $projects = $this->entityManager->getRepository(Project::class)->findBy(['id' => $projectIds]);
+        }
+
+        // Merge: if both client and projects are set, intersect; if only client, use client projects
+        if (null !== $clientProjects && null !== $projects) {
+            $clientProjectIds = array_map(fn (Project $p) => $p->getId(), $clientProjects);
+            $projects         = array_values(array_filter($projects, fn (Project $p) => in_array($p->getId(), $clientProjectIds, true)));
+            if ([] === $projects) {
+                $projects = null;
+                // No matching projects — force empty result by using a dummy condition
+                $entries  = [];
+                $tempFile = $this->exportService->generate($entries, $after, $before);
+                $filename = sprintf('export-temps-%s_%s.xlsx', $after->format('Y-m-d'), $before->format('Y-m-d'));
+                $response = new BinaryFileResponse($tempFile);
+                $response->setContentDisposition(ResponseHeaderBag::DISPOSITION_ATTACHMENT, $filename);
+                $response->headers->set('Content-Type', 'application/vnd.openxmlformats-officedocument.spreadsheetml.sheet');
+                $response->deleteFileAfterSend(true);
+
+                return $response;
+            }
+        } elseif (null !== $clientProjects) {
+            $projects = $clientProjects;
         }
 
         /** @var int[] $tagIds */
@@ -79,8 +117,8 @@ class TimeEntryExportController extends AbstractController
         $entries = $this->timeEntryRepository->findForExport(
             $after,
             $before,
-            $user,
-            $project,
+            $users ?: null,
+            $projects ?: null,
             $tagIds ?: null,
         );
 

src/Entity/Task.php

@@ -38,7 +38,7 @@ use Symfony\Component\Validator\Context\ExecutionContextInterface;
     denormalizationContext: ['groups' => ['task:write']],
     order: ['id' => 'DESC'],
 )]
-#[ApiFilter(SearchFilter::class, properties: ['project' => 'exact', 'group' => 'exact', 'assignee' => 'exact', 'priority' => 'exact', 'effort' => 'exact', 'tags' => 'exact', 'status' => 'exact'])]
+#[ApiFilter(SearchFilter::class, properties: ['project' => 'exact', 'group' => 'exact', 'assignee' => 'exact', 'collaborators' => 'exact', 'priority' => 'exact', 'effort' => 'exact', 'tags' => 'exact', 'status' => 'exact'])]
 #[ApiFilter(DateFilter::class, properties: ['scheduledStart', 'scheduledEnd', 'deadline'])]
 #[ApiFilter(BooleanFilter::class, properties: ['archived', 'syncToCalendar'])]
 #[ApiFilter(OrderFilter::class, properties: ['scheduledStart', 'deadline'])]
@@ -85,6 +85,16 @@ class Task
     #[Groups(['task:read', 'task:write'])]
     private ?User $assignee = null;
 
+    /** @var Collection<int, User> */
+    #[ORM\ManyToMany(targetEntity: User::class)]
+    #[ORM\JoinTable(
+        name: 'task_collaborator',
+        joinColumns: [new ORM\JoinColumn(name: 'task_id', referencedColumnName: 'id', onDelete: 'CASCADE')],
+        inverseJoinColumns: [new ORM\JoinColumn(name: 'user_id', referencedColumnName: 'id', onDelete: 'CASCADE')],
+    )]
+    #[Groups(['task:read', 'task:write'])]
+    private Collection $collaborators;
+
     #[ORM\ManyToOne(targetEntity: TaskGroup::class)]
     #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
     #[Groups(['task:read', 'task:write'])]
@@ -152,8 +162,9 @@ class Task
 
     public function __construct()
     {
-        $this->tags      = new ArrayCollection();
-        $this->documents = new ArrayCollection();
+        $this->tags          = new ArrayCollection();
+        $this->documents     = new ArrayCollection();
+        $this->collaborators = new ArrayCollection();
     }
 
     public function getId(): ?int
@@ -245,6 +256,28 @@ class Task
         return $this;
     }
 
+    /** @return Collection<int, User> */
+    public function getCollaborators(): Collection
+    {
+        return $this->collaborators;
+    }
+
+    public function addCollaborator(User $user): static
+    {
+        if (!$this->collaborators->contains($user)) {
+            $this->collaborators->add($user);
+        }
+
+        return $this;
+    }
+
+    public function removeCollaborator(User $user): static
+    {
+        $this->collaborators->removeElement($user);
+
+        return $this;
+    }
+
     public function getGroup(): ?TaskGroup
     {
         return $this->group;
@@ -434,4 +467,15 @@ class Task
             ;
         }
     }
+
+    #[Assert\Callback]
+    public function validateCollaborators(ExecutionContextInterface $context): void
+    {
+        if (null !== $this->assignee && $this->collaborators->contains($this->assignee)) {
+            $context->buildViolation('The assignee cannot also be a collaborator.')
+                ->atPath('collaborators')
+                ->addViolation()
+            ;
+        }
+    }
 }

src/Entity/User.php

@@ -70,6 +70,7 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
     private ?DateTimeImmutable $createdAt = null;
 
     #[ORM\Column(length: 64, unique: true, nullable: true)]
+    #[Groups(['me:read'])]
     private ?string $apiToken = null;
 
     #[ORM\Column(length: 255, nullable: true)]

src/Mcp/Tool/Serializer.php

@@ -134,6 +134,19 @@ final class Serializer
         ];
     }
 
+    /**
+     * @param Collection<int, User> $users
+     *
+     * @return list<array{id: ?int, username: ?string}>
+     */
+    public static function users(Collection $users): array
+    {
+        return $users->map(fn (User $u) => [
+            'id'       => $u->getId(),
+            'username' => $u->getUsername(),
+        ])->toArray();
+    }
+
     /**
      * @return null|array{id: ?int, title: ?string, color: ?string}
      */