fix(project-management) : make my-tasks kanban drag-drop status change instant

fix(directory) : refresh clients list after converting a prospect
Converting a prospect creates a client and removes the prospect, but only loadProspects() was called, so the new client did not appear in the Clients tab until a manual page refresh. Both the table convert button and the ProspectDrawer saved event now reload prospects and clients.
2026-06-23 15:42:57 +02:00 · 2026-06-23 12:14:44 +02:00 · 2026-06-23 12:14:22 +02:00 · 2026-06-22 17:28:07 +02:00 · 2026-06-22 14:17:12 +02:00 · 2026-06-22 13:52:12 +02:00
76 changed files with 500 additions and 2668 deletions
@@ -126,12 +126,6 @@ La librairie `@malio/layer-ui` fournit les composants de formulaire et d'action.
 - Config Docker : `infra/dev/.env.docker` (override local : `infra/dev/.env.docker.local`)
 - Après modif nginx : `docker restart nginx-lesstime`

-## Déploiement (prod Docker)
-
- Script : `infra/prod/deploy.sh` (`./deploy.sh [tag]`) — doc complète : `doc/deployment-docker.md`
- Étapes : maintenance → pull image → up → migrations → **`app:seed-rbac`** → **`app:sync-permissions`** → cache clear/warmup
- **RBAC** : les migrations créent les tables `role`/`permission` mais **n'insèrent aucune donnée**. Les rôles système (`admin`, `user`) viennent de `app:seed-rbac` (idempotent) et le catalogue des permissions de `app:sync-permissions` (à relancer à chaque ajout de permission). Symptôme si oubliées : page admin Rôles vide (« Aucun rôle trouvé »).
-
 ## Fixtures

 - User admin : `admin` / `admin` (ROLE_ADMIN)
@@ -23,9 +23,9 @@ return [
        'icon'  => 'mdi:view-dashboard-outline',
        'items' => [
            ['label' => 'sidebar.general.dashboard', 'to' => '/', 'icon' => 'mdi:view-dashboard-outline'],
-            ['label' => 'sidebar.general.myTasks', 'to' => '/my-tasks', 'icon' => 'mdi:clipboard-check-outline', 'module' => 'project-management', 'permission' => 'project-management.tasks.view'],
-            ['label' => 'sidebar.general.projects', 'to' => '/projects', 'icon' => 'mdi:folder-outline', 'module' => 'project-management', 'permission' => 'project-management.projects.view'],
-            ['label' => 'sidebar.general.timeTracking', 'to' => '/time-tracking', 'icon' => 'mdi:calendar-edit-outline', 'module' => 'time-tracking', 'permission' => 'time-tracking.entries.view'],
+            ['label' => 'sidebar.general.myTasks', 'to' => '/my-tasks', 'icon' => 'mdi:clipboard-check-outline', 'module' => 'project-management'],
+            ['label' => 'sidebar.general.projects', 'to' => '/projects', 'icon' => 'mdi:folder-outline', 'module' => 'project-management'],
+            ['label' => 'sidebar.general.timeTracking', 'to' => '/time-tracking', 'icon' => 'mdi:calendar-edit-outline', 'module' => 'time-tracking'],
            // Gating module uniquement (cf. en-tête) : rendu visuel + badge gérés côté layout.
            ['label' => 'sidebar.general.mail', 'to' => '/mail', 'icon' => 'mdi:email-outline', 'module' => 'mail'],
        ],
@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.4.37'
+    app.version: '0.4.30'
@@ -128,12 +128,6 @@ sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintena
 echo "==> Running migrations..."
 sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction

-echo "==> Seeding RBAC system roles (idempotent)..."
-sudo docker compose exec -T -u www-data app php bin/console app:seed-rbac
-
-echo "==> Syncing RBAC permissions catalog..."
-sudo docker compose exec -T -u www-data app php bin/console app:sync-permissions
-
 echo "==> Clearing cache..."
 sudo docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
 sudo docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
@@ -300,31 +294,7 @@ cd /var/www/lesstime
 ./deploy.sh v0.3.13   # deploie une version specifique
 ```

-C'est tout. Le script pull l'image, redemarre le conteneur, lance les migrations, seed les roles
-systeme RBAC, synchronise le catalogue des permissions et vide le cache.
-
---
-
-## RBAC : roles & permissions (post-deploiement)
-
-Le module RBAC (entites `Role` / `Permission`) repose sur des donnees qui ne sont **pas**
-inserees par les migrations (celles-ci creent uniquement les tables). Deux commandes idempotentes
-les peuplent, integrees au `deploy.sh` :
-
-| Commande | Effet |
-|----------|-------|
-| `app:seed-rbac` | Cree les **roles systeme** `admin` (Administrateur) et `user` (Utilisateur). Idempotent : ne recree rien si deja present. |
-| `app:sync-permissions` | (Re)synchronise le **catalogue des permissions** a partir des modules actifs. A relancer a chaque ajout de permission dans le code. |
-
-Symptome si elles n'ont pas tourne : la page d'admin **Roles** affiche « Aucun role trouve ».
-
-Correctif manuel sur une prod deja deployee (sans relancer un deploiement complet) :
-
-```bash
-cd /var/www/lesstime
-sudo docker compose exec -T -u www-data app php bin/console app:seed-rbac
-sudo docker compose exec -T -u www-data app php bin/console app:sync-permissions
-```
+C'est tout. Le script pull l'image, redemarre le conteneur, lance les migrations et vide le cache.

 ---

@@ -1,61 +0,0 @@
-<template>
-    <Teleport v-if="modelValue" to="body">
-        <Transition name="modal" appear>
-            <div class="fixed inset-0 z-[70] flex items-center justify-center">
-                <div class="absolute inset-0 bg-black/30" @click.stop="cancel" />
-                <div class="relative z-10 w-full max-w-md rounded-lg bg-white p-6 shadow-xl">
-                    <h3 class="text-lg font-bold text-neutral-900">{{ $t('directory.reports.confirmDeleteTitle') }}</h3>
-                    <p class="mt-3 text-sm text-neutral-600">
-                        {{ $t('directory.reports.confirmDeleteMessage') }}
-                    </p>
-                    <div class="mt-6 flex justify-end gap-3">
-                        <MalioButton
-                            variant="tertiary"
-                            :label="$t('common.cancel')"
-                            button-class="w-auto px-4"
-                            :disabled="busy"
-                            @click="cancel"
-                        />
-                        <MalioButton
-                            variant="danger"
-                            :label="$t('common.delete')"
-                            button-class="w-auto px-4"
-                            :disabled="busy"
-                            @click="$emit('confirm')"
-                        />
-                    </div>
-                </div>
-            </div>
-        </Transition>
-    </Teleport>
-</template>
-
-<script setup lang="ts">
-const props = defineProps<{
-    modelValue: boolean
-    // Suppression en cours : on désactive les actions pour éviter un double envoi.
-    busy?: boolean
-}>()
-
-const emit = defineEmits<{
-    (e: 'update:modelValue', value: boolean): void
-    (e: 'confirm'): void
-}>()
-
-function cancel() {
-    if (props.busy) return
-    emit('update:modelValue', false)
-}
-</script>
-
-<style scoped>
-.modal-enter-active,
-.modal-leave-active {
-    transition: opacity 0.2s ease;
-}
-
-.modal-enter-from,
-.modal-leave-to {
-    opacity: 0;
-}
-</style>
@@ -24,9 +24,7 @@
    "updated": "Client mis à jour avec succès.",
    "deleted": "Client supprimé avec succès.",
    "addClient": "Ajouter un client",
-    "editClient": "Modifier un client",
-    "deleteConfirmTitle": "Supprimer le client",
-    "deleteConfirmMessage": "Êtes-vous sûr de vouloir supprimer le client « {name} » ? Cette action est irréversible."
+    "editClient": "Modifier un client"
  },
  "projects": {
    "title": "Projets",
@@ -910,14 +908,11 @@
    "editProspect": "Modifier un prospect",
    "convert": "Convertir en client",
    "alreadyConverted": "Déjà converti en client",
-    "deleteConfirmTitle": "Supprimer le prospect",
-    "deleteConfirmMessage": "Êtes-vous sûr de vouloir supprimer le prospect « {name} » ? Cette action est irréversible.",
    "fields": {
      "name": "Nom",
      "company": "Société",
      "email": "Email",
      "phone": "Téléphone",
-      "website": "Site web",
      "street": "Rue",
      "city": "Ville",
      "postalCode": "Code postal",
@@ -933,51 +928,18 @@
      "lost": "Perdu"
    },
    "validation": {
-      "nameRequired": "Le nom est requis",
-      "companyRequired": "La société est requise"
-    }
-  },
-  "prestataires": {
-    "created": "Prestataire créé avec succès.",
-    "updated": "Prestataire mis à jour avec succès.",
-    "deleted": "Prestataire supprimé avec succès.",
-    "addPrestataire": "Ajouter un prestataire",
-    "editPrestataire": "Modifier un prestataire",
-    "deleteConfirmTitle": "Supprimer le prestataire",
-    "deleteConfirmMessage": "Êtes-vous sûr de vouloir supprimer le prestataire « {name} » ? Cette action est irréversible.",
-    "fields": {
-      "name": "Nom / Société",
-      "email": "Email",
-      "phone": "Téléphone",
-      "website": "Site web"
+      "nameRequired": "Le nom est requis"
    }
  },
  "directory": {
    "title": "Répertoire",
    "tabs": {
-      "info": "Informations",
      "clients": "Clients",
      "prospects": "Prospects",
-      "prestataires": "Prestataires",
      "contact": "Contact",
      "address": "Adresse",
      "report": "Rapport"
    },
-    "info": {
-      "fields": {
-        "name": "Nom",
-        "email": "Email",
-        "phone": "Téléphone",
-        "website": "Site web"
-      }
-    },
-    "validation": {
-      "nameRequired": "Le nom est requis.",
-      "subjectRequired": "L'objet est requis.",
-      "emailInvalid": "Adresse email invalide.",
-      "phoneInvalid": "Numéro de téléphone invalide (ex. 0549200910).",
-      "urlInvalid": "URL invalide (ex. https://exemple.fr)."
-    },
    "clients": {
      "add": "Ajouter un client",
      "empty": "Aucun client trouvé."
@@ -987,10 +949,6 @@
      "empty": "Aucun prospect trouvé.",
      "allStatuses": "Tous les statuts"
    },
-    "prestataires": {
-      "add": "Ajouter un prestataire",
-      "empty": "Aucun prestataire trouvé."
-    },
    "contacts": {
      "add": "Ajouter un contact",
      "item": "Contact {n}",
@@ -1010,8 +968,6 @@
      "item": "Adresse {n}",
      "saved": "Adresse enregistrée.",
      "deleted": "Adresse supprimée.",
-      "streetNotFound": "Aucune adresse trouvée — saisie libre possible.",
-      "autocompleteUnavailable": "Recherche d'adresse indisponible : saisissez l'adresse manuellement.",
      "fields": {
        "label": "Libellé",
        "street": "Rue",
@@ -1022,16 +978,9 @@
    },
    "reports": {
      "add": "Ajouter un compte-rendu",
-      "addTitle": "Nouveau compte-rendu",
-      "editTitle": "Modifier le compte-rendu",
-      "empty": "Aucun compte-rendu",
-      "emptyHint": "Consignez vos échanges (appels, rendez-vous, emails) pour garder l'historique de la relation.",
-      "count": "{n} compte-rendu | {n} comptes-rendus",
-      "documentsLabel": "Documents",
+      "empty": "Aucun compte-rendu.",
      "saved": "Compte-rendu enregistré.",
      "deleted": "Compte-rendu supprimé.",
-      "confirmDeleteTitle": "Supprimer ce compte-rendu ?",
-      "confirmDeleteMessage": "Cette action est irréversible. Les documents joints seront également supprimés.",
      "fields": {
        "subject": "Objet",
        "type": "Type d'échange",
@@ -6,11 +6,21 @@
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
            <MalioInputText
                v-model="form.name"
-                label="Nom société"
+                label="Nom"
                input-class="w-full"
                :error="touched.name && !form.name.trim() ? 'Le nom est requis' : ''"
                @blur="touched.name = true"
            />
+            <MalioInputText
+                v-model="form.email"
+                label="Email"
+                input-class="w-full"
+            />
+            <MalioInputText
+                v-model="form.phone"
+                label="Téléphone"
+                input-class="w-full"
+            />

            <div class="mt-6 flex justify-end">
                <MalioButton
@@ -48,16 +58,28 @@ const isSubmitting = ref(false)

 const form = reactive({
    name: '',
+    email: '',
+    phone: '',
 })

 const touched = reactive({
    name: false,
+    email: false,
 })

 watch(() => props.modelValue, (open) => {
    if (open) {
-        form.name = props.client?.name ?? ''
+        if (props.client) {
+            form.name = props.client.name ?? ''
+            form.email = props.client.email ?? ''
+            form.phone = props.client.phone ?? ''
+        } else {
+            form.name = ''
+            form.email = ''
+            form.phone = ''
+        }
        touched.name = false
+        touched.email = false
    }
 })

@@ -71,6 +93,8 @@ async function handleSubmit() {
    try {
        const payload: ClientWrite = {
            name: form.name.trim(),
+            email: form.email.trim() || null,
+            phone: form.phone.trim() || null,
        }

        if (isEditing.value && props.client) {
@@ -1,144 +0,0 @@
-<template>
-    <MalioDrawer v-model="isOpen">
-        <template #header>
-            <h2 class="text-xl font-bold">
-                {{ isEditing ? $t('directory.reports.editTitle') : $t('directory.reports.addTitle') }}
-            </h2>
-        </template>
-        <form @submit.prevent="handleSubmit" class="flex flex-col gap-4">
-            <MalioInputText
-                v-model="form.subject"
-                :label="$t('directory.reports.fields.subject')"
-                input-class="w-full"
-                :error="touched.subject && !form.subject.trim() ? $t('directory.validation.subjectRequired') : ''"
-                @blur="touched.subject = true"
-            />
-            <MalioSelect
-                v-model="form.type"
-                :label="$t('directory.reports.fields.type')"
-                :options="typeOptions"
-                group-class="w-full"
-            />
-            <MalioDate
-                v-model="form.occurredAt"
-                :label="$t('directory.reports.fields.occurredAt')"
-            />
-            <MalioInputRichText
-                v-model="form.body"
-                :label="$t('directory.reports.fields.body')"
-                min-height="180px"
-            />
-
-            <div class="mt-4 flex justify-end gap-3">
-                <MalioButton
-                    variant="tertiary"
-                    button-class="w-auto px-4"
-                    :label="$t('common.cancel')"
-                    @click="isOpen = false"
-                />
-                <MalioButton
-                    button-class="w-auto px-6"
-                    :label="$t('common.save')"
-                    :disabled="isSubmitting"
-                    @click="handleSubmit"
-                />
-            </div>
-        </form>
-    </MalioDrawer>
-</template>
-
-<script setup lang="ts">
-import type { CommercialReport, CommercialReportWrite, ReportType } from '~/modules/directory/services/dto/commercial-report'
-import { useCommercialReportService } from '~/modules/directory/services/commercial-reports'
-
-const props = defineProps<{
-    modelValue: boolean
-    report: CommercialReport | null
-    owner: { client?: string, prospect?: string, prestataire?: string }
-}>()
-
-const emit = defineEmits<{
-    (e: 'update:modelValue', value: boolean): void
-    (e: 'saved'): void
-}>()
-
-const { t } = useI18n()
-const { create, update } = useCommercialReportService()
-
-const isOpen = computed({
-    get: () => props.modelValue,
-    set: (v) => emit('update:modelValue', v),
-})
-
-const isEditing = computed(() => !!props.report)
-const isSubmitting = ref(false)
-
-const typeOptions: { label: string, value: ReportType }[] = [
-    { label: t('directory.reports.types.call'), value: 'call' },
-    { label: t('directory.reports.types.meeting'), value: 'meeting' },
-    { label: t('directory.reports.types.email'), value: 'email' },
-    { label: t('directory.reports.types.note'), value: 'note' },
-]
-
-function today(): string {
-    return new Date().toISOString().slice(0, 10)
-}
-
-// L'éditeur riche émet du HTML : un contenu « vide » vaut `<p></p>`. On le
-// normalise en null pour ne pas persister une coquille vide.
-function normalizeBody(html: string): string | null {
-    const stripped = html.replace(/<[^>]*>/g, '').replace(/&nbsp;/g, ' ').trim()
-    return stripped ? html : null
-}
-
-const form = reactive<{ subject: string, type: ReportType, occurredAt: string, body: string }>({
-    subject: '',
-    type: 'note',
-    occurredAt: today(),
-    body: '',
-})
-const touched = reactive({ subject: false })
-
-watch(() => props.modelValue, (open) => {
-    if (!open) return
-    if (props.report) {
-        form.subject = props.report.subject
-        form.type = props.report.type
-        form.occurredAt = props.report.occurredAt.slice(0, 10)
-        form.body = props.report.body ?? ''
-    } else {
-        form.subject = ''
-        form.type = 'note'
-        form.occurredAt = today()
-        form.body = ''
-    }
-    touched.subject = false
-})
-
-async function handleSubmit(): Promise<void> {
-    touched.subject = true
-    if (!form.subject.trim() || isSubmitting.value) return
-
-    isSubmitting.value = true
-    try {
-        const payload: CommercialReportWrite = {
-            subject: form.subject.trim(),
-            type: form.type,
-            occurredAt: form.occurredAt,
-            body: normalizeBody(form.body),
-            ...props.owner,
-        }
-
-        if (isEditing.value && props.report) {
-            await update(props.report.id, payload)
-        } else {
-            await create(payload)
-        }
-
-        emit('saved')
-        isOpen.value = false
-    } finally {
-        isSubmitting.value = false
-    }
-}
-</script>
@@ -1,235 +1,158 @@
 <template>
-    <div class="flex flex-col gap-5 pt-6">
-        <!-- Barre d'action -->
-        <div class="flex items-center justify-between gap-3">
-            <p class="text-sm text-neutral-500">
-                <span v-if="reports.length">{{ $t('directory.reports.count', { n: reports.length }, reports.length) }}</span>
-            </p>
-            <MalioButton
-                v-if="canManage"
-                icon-name="mdi:plus"
-                icon-position="left"
-                button-class="w-auto px-4"
-                :label="$t('directory.reports.add')"
-                @click="openCreate"
+    <div class="flex flex-col gap-6 pt-6">
+        <!-- Formulaire d'ajout / édition -->
+        <div v-if="isAdmin" class="grid grid-cols-2 gap-x-8 gap-y-3 rounded bg-white p-4 shadow">
+            <MalioInputText
+                class="col-span-2"
+                :label="$t('directory.reports.fields.subject')"
+                v-model="draft.subject"
            />
+            <MalioSelect
+                :label="$t('directory.reports.fields.type')"
+                v-model="draft.type"
+                :options="typeOptions"
+                group-class="w-full"
+            />
+            <MalioDate
+                :label="$t('directory.reports.fields.occurredAt')"
+                v-model="draft.occurredAt"
+            />
+            <MalioInputTextArea
+                class="col-span-2"
+                :label="$t('directory.reports.fields.body')"
+                v-model="draft.body"
+            />
+            <div class="col-span-2 flex justify-end gap-3">
+                <MalioButton
+                    v-if="editingId"
+                    variant="secondary"
+                    button-class="w-auto px-4"
+                    :label="$t('common.cancel')"
+                    @click="resetDraft"
+                />
+                <MalioButton
+                    button-class="w-auto px-4"
+                    :label="editingId ? $t('common.save') : $t('directory.reports.add')"
+                    :disabled="!draft.subject"
+                    @click="save"
+                />
+            </div>
        </div>

-        <!-- État vide -->
-        <div
-            v-if="!loading && !reports.length"
-            class="flex flex-col items-center gap-2 rounded-lg border border-dashed border-neutral-200 bg-neutral-50 px-6 py-12 text-center"
-        >
-            <Icon name="mdi:message-text-outline" class="text-4xl text-neutral-300" />
-            <p class="font-medium text-neutral-600">{{ $t('directory.reports.empty') }}</p>
-            <p class="max-w-sm text-sm text-neutral-400">{{ $t('directory.reports.emptyHint') }}</p>
-            <MalioButton
-                v-if="canManage"
-                variant="tertiary"
-                icon-name="mdi:plus"
-                icon-position="left"
-                button-class="mt-2 w-auto px-4"
-                :label="$t('directory.reports.add')"
-                @click="openCreate"
-            />
+        <!-- Liste des comptes-rendus -->
+        <div v-for="report in reports" :key="report.id" class="rounded border border-neutral-200 p-4">
+            <div class="flex items-start justify-between">
+                <div>
+                    <p class="font-semibold text-neutral-800">{{ report.subject }}</p>
+                    <p class="text-xs text-neutral-500">
+                        {{ formatDate(report.occurredAt) }} · {{ $t(`directory.reports.types.${report.type}`) }}
+                        <span v-if="report.author"> · {{ report.author.username }}</span>
+                    </p>
+                </div>
+                <div v-if="isAdmin" class="flex gap-2">
+                    <MalioButtonIcon icon="mdi:pencil-outline" :aria-label="$t('common.edit')" @click="edit(report)" />
+                    <MalioButtonIcon icon="mdi:trash-can-outline" button-class="!text-red-600" :aria-label="$t('common.delete')" @click="remove(report.id)" />
+                </div>
+            </div>
+            <p v-if="report.body" class="mt-2 whitespace-pre-wrap text-sm text-neutral-700">{{ report.body }}</p>
+
+            <div class="mt-3 flex flex-col gap-2">
+                <ReportDocumentList
+                    :documents="report.documents ?? []"
+                    :is-admin="isAdmin"
+                    @delete="(id) => removeDocument(report, id)"
+                />
+                <ReportDocumentUpload
+                    v-if="isAdmin"
+                    :report-id="report.id"
+                    @uploaded="reload"
+                />
+            </div>
        </div>

-        <!-- Timeline antéchronologique -->
-        <ol v-else class="flex flex-col">
-            <li
-                v-for="report in sortedReports"
-                :key="report.id"
-                class="relative flex gap-4 pb-6 last:pb-0"
-            >
-                <!-- Rail + pastille de type -->
-                <div class="flex flex-col items-center">
-                    <span
-                        class="flex h-9 w-9 shrink-0 items-center justify-center rounded-full"
-                        :class="typeStyle(report.type).badge"
-                    >
-                        <Icon :name="typeStyle(report.type).icon" class="text-lg" />
-                    </span>
-                    <span class="mt-1 w-px grow bg-neutral-200" aria-hidden="true" />
-                </div>
-
-                <!-- Carte -->
-                <div class="flex-1 rounded-lg border border-neutral-200 bg-white p-4 shadow-[0_1px_2px_0_rgba(0,0,0,0.05)]">
-                    <div class="flex items-start justify-between gap-3">
-                        <div class="min-w-0">
-                            <div class="flex flex-wrap items-center gap-2">
-                                <span
-                                    class="rounded-full px-2 py-0.5 text-xs font-medium"
-                                    :class="typeStyle(report.type).chip"
-                                >
-                                    {{ $t(`directory.reports.types.${report.type}`) }}
-                                </span>
-                                <p class="truncate font-semibold text-neutral-800">{{ report.subject }}</p>
-                            </div>
-                            <p class="mt-1 text-xs text-neutral-500">
-                                <span :title="absoluteDate(report.occurredAt)">{{ relativeDate(report.occurredAt) }}</span>
-                                <span v-if="report.author"> · {{ report.author.username }}</span>
-                            </p>
-                        </div>
-                        <div v-if="canManage" class="flex shrink-0 gap-1">
-                            <MalioButtonIcon
-                                icon="mdi:pencil-outline"
-                                variant="ghost"
-                                :aria-label="$t('common.edit')"
-                                @click="openEdit(report)"
-                            />
-                            <MalioButtonIcon
-                                icon="mdi:delete-outline"
-                                variant="ghost"
-                                :aria-label="$t('common.delete')"
-                                @click="askDelete(report)"
-                            />
-                        </div>
-                    </div>
-
-                    <MalioInputRichText
-                        v-if="report.body"
-                        :model-value="report.body"
-                        :editable="false"
-                        :reserve-message-space="false"
-                        editor-class="!border-0 !rounded-none !bg-transparent !p-0 text-sm text-neutral-700"
-                        class="mt-2"
-                    />
-
-                    <!-- Documents joints -->
-                    <div
-                        v-if="(report.documents?.length ?? 0) || canManage"
-                        class="mt-3 border-t border-neutral-100 pt-3"
-                    >
-                        <p class="mb-2 text-xs font-medium uppercase tracking-wide text-neutral-400">
-                            {{ $t('directory.reports.documentsLabel') }}
-                        </p>
-                        <div class="flex flex-col gap-2">
-                            <ReportDocumentList
-                                v-if="report.documents?.length"
-                                :documents="report.documents"
-                                :can-manage="canManage"
-                                @delete="(docId) => removeDocument(docId)"
-                            />
-                            <ReportDocumentUpload
-                                v-if="canManage"
-                                :report-id="report.id"
-                                @uploaded="reload"
-                            />
-                        </div>
-                    </div>
-                </div>
-            </li>
-        </ol>
-
-        <CommercialReportDrawer
-            v-model="drawerOpen"
-            :report="editing"
-            :owner="owner"
-            @saved="reload"
-        />
-        <ConfirmDeleteReportModal
-            v-model="confirmOpen"
-            :busy="deleting"
-            @confirm="confirmDelete"
-        />
+        <p v-if="!reports.length" class="text-sm text-neutral-400">
+            {{ $t('directory.reports.empty') }}
+        </p>
    </div>
 </template>

 <script setup lang="ts">
-import type { CommercialReport, ReportType } from '~/modules/directory/services/dto/commercial-report'
+import type { CommercialReport, CommercialReportWrite, ReportType } from '~/modules/directory/services/dto/commercial-report'
 import { useCommercialReportService } from '~/modules/directory/services/commercial-reports'
 import { useReportDocumentService } from '~/modules/directory/services/report-documents'

 const props = defineProps<{
-    owner: { client?: string, prospect?: string, prestataire?: string }
-    canManage: boolean
+    owner: { client?: string, prospect?: string }
+    isAdmin: boolean
 }>()

+const { t } = useI18n()
 const reportService = useCommercialReportService()
 const documentService = useReportDocumentService()

 const reports = ref<CommercialReport[]>([])
-const loading = ref(true)
+const editingId = ref<number | null>(null)

-const drawerOpen = ref(false)
-const editing = ref<CommercialReport | null>(null)
-
-const confirmOpen = ref(false)
-const pendingDelete = ref<CommercialReport | null>(null)
-const deleting = ref(false)
-
-// Le plus récent en haut (l'API ne garantit pas l'ordre).
-const sortedReports = computed(() =>
-    [...reports.value].sort((a, b) => b.occurredAt.localeCompare(a.occurredAt)),
-)
-
-const typeStyles: Record<ReportType, { icon: string, badge: string, chip: string }> = {
-    call: { icon: 'mdi:phone-outline', badge: 'bg-emerald-100 text-emerald-700', chip: 'bg-emerald-50 text-emerald-700' },
-    meeting: { icon: 'mdi:account-group-outline', badge: 'bg-violet-100 text-violet-700', chip: 'bg-violet-50 text-violet-700' },
-    email: { icon: 'mdi:email-outline', badge: 'bg-sky-100 text-sky-700', chip: 'bg-sky-50 text-sky-700' },
-    note: { icon: 'mdi:note-text-outline', badge: 'bg-amber-100 text-amber-700', chip: 'bg-amber-50 text-amber-700' },
-}
-function typeStyle(type: ReportType) {
-    return typeStyles[type]
-}
-
-function startOfDay(d: Date): number {
-    return new Date(d.getFullYear(), d.getMonth(), d.getDate()).getTime()
-}
-
-function absoluteDate(iso: string): string {
-    return new Date(iso).toLocaleDateString('fr-FR')
-}
-
-// Date relative lisible (« aujourd'hui », « il y a 3 jours »…) avec repli sur la
-// date absolue au-delà d'un an. La date exacte reste disponible en infobulle.
-function relativeDate(iso: string): string {
-    const diffDays = Math.round((startOfDay(new Date(iso)) - startOfDay(new Date())) / 86400000)
-    const rtf = new Intl.RelativeTimeFormat('fr-FR', { numeric: 'auto' })
-    const abs = Math.abs(diffDays)
-    if (abs < 1) return rtf.format(0, 'day')
-    if (abs < 7) return rtf.format(diffDays, 'day')
-    if (abs < 31) return rtf.format(Math.round(diffDays / 7), 'week')
-    if (abs < 365) return rtf.format(Math.round(diffDays / 30), 'month')
-    return absoluteDate(iso)
-}
-
-function openCreate(): void {
-    editing.value = null
-    drawerOpen.value = true
-}
-
-function openEdit(report: CommercialReport): void {
-    editing.value = report
-    drawerOpen.value = true
-}
-
-function askDelete(report: CommercialReport): void {
-    pendingDelete.value = report
-    confirmOpen.value = true
-}
-
-async function confirmDelete(): Promise<void> {
-    if (!pendingDelete.value || deleting.value) return
-    deleting.value = true
-    try {
-        await reportService.remove(pendingDelete.value.id)
-        confirmOpen.value = false
-        pendingDelete.value = null
-        await reload()
-    } finally {
-        deleting.value = false
+function emptyDraft(): CommercialReportWrite {
+    return {
+        subject: '',
+        body: null,
+        occurredAt: new Date().toISOString().slice(0, 10),
+        type: 'note',
+        ...props.owner,
    }
 }
+const draft = ref<CommercialReportWrite>(emptyDraft())

-async function removeDocument(id: number): Promise<void> {
-    await documentService.remove(id)
-    await reload()
+const typeOptions: { label: string, value: ReportType }[] = [
+    { label: t('directory.reports.types.call'), value: 'call' },
+    { label: t('directory.reports.types.meeting'), value: 'meeting' },
+    { label: t('directory.reports.types.email'), value: 'email' },
+    { label: t('directory.reports.types.note'), value: 'note' },
+]
+
+function formatDate(iso: string): string {
+    return new Date(iso).toLocaleDateString('fr-FR')
 }

 async function reload(): Promise<void> {
    reports.value = await reportService.getByOwner(props.owner)
-    loading.value = false
+}
+
+function resetDraft(): void {
+    editingId.value = null
+    draft.value = emptyDraft()
+}
+
+function edit(report: CommercialReport): void {
+    editingId.value = report.id
+    draft.value = {
+        subject: report.subject,
+        body: report.body,
+        occurredAt: report.occurredAt.slice(0, 10),
+        type: report.type,
+        ...props.owner,
+    }
+}
+
+async function save(): Promise<void> {
+    if (editingId.value) {
+        await reportService.update(editingId.value, draft.value)
+    } else {
+        await reportService.create(draft.value)
+    }
+    resetDraft()
+    await reload()
+}
+
+async function remove(id: number): Promise<void> {
+    await reportService.remove(id)
+    await reload()
+}
+
+async function removeDocument(report: CommercialReport, id: number): Promise<void> {
+    await documentService.remove(id)
+    await reload()
 }

 onMounted(reload)
@@ -1,58 +0,0 @@
-<template>
-    <Teleport v-if="modelValue" to="body">
-        <Transition name="modal" appear>
-            <div class="fixed inset-0 z-50 flex items-center justify-center">
-                <div class="absolute inset-0 bg-black/30" @click="cancel" />
-                <div class="relative z-10 w-full max-w-md rounded-lg bg-white p-6 shadow-xl">
-                    <h3 class="text-lg font-bold text-neutral-900">{{ title }}</h3>
-                    <p class="mt-3 text-sm text-neutral-600">
-                        {{ message }}
-                    </p>
-                    <div class="mt-6 flex justify-end gap-3">
-                        <MalioButton
-                            variant="tertiary"
-                            :label="$t('common.cancel')"
-                            button-class="w-auto px-4"
-                            @click="cancel"
-                        />
-                        <MalioButton
-                            variant="danger"
-                            :label="$t('common.delete')"
-                            button-class="w-auto px-4"
-                            @click="$emit('confirm')"
-                        />
-                    </div>
-                </div>
-            </div>
-        </Transition>
-    </Teleport>
-</template>
-
-<script setup lang="ts">
-defineProps<{
-    modelValue: boolean
-    title: string
-    message: string
-}>()
-
-const emit = defineEmits<{
-    (e: 'update:modelValue', value: boolean): void
-    (e: 'confirm'): void
-}>()
-
-function cancel() {
-    emit('update:modelValue', false)
-}
-</script>
-
-<style scoped>
-.modal-enter-active,
-.modal-leave-active {
-    transition: opacity 0.2s ease;
-}
-
-.modal-enter-from,
-.modal-leave-to {
-    opacity: 0;
-}
-</style>
@@ -1,13 +1,13 @@
 <template>
-    <div class="relative grid grid-cols-2 gap-x-[44px] gap-y-4 rounded-lg bg-white px-7 py-5 shadow-[0_4px_4px_0_rgba(0,0,0,0.10)]">
+    <div class="relative grid grid-cols-2 gap-x-8 gap-y-3 rounded bg-white p-4 shadow">
        <h3 class="col-span-2 text-sm font-semibold text-neutral-700">
            {{ title }}
        </h3>
        <MalioButtonIcon
            v-if="removable && !readonly"
-            icon="mdi:delete-outline"
-            variant="ghost"
-            class="absolute right-3 top-3"
+            icon="mdi:trash-can-outline"
+            class="absolute right-2 top-2"
+            button-class="!text-red-600"
            :aria-label="$t('common.delete')"
            @click="$emit('remove')"
        />
@@ -19,33 +19,13 @@
            :readonly="readonly"
            @update:model-value="update('label', $event)"
        />
-
-        <!-- Rue : saisie assistée (BAN) en édition, champ texte en lecture seule.
-             allow-create conserve le texte saisi si la BAN ne propose rien
-             (erreur/timeout). Choisir une suggestion remplit rue + CP + ville. -->
-        <div class="col-span-2">
-            <MalioInputAutocomplete
-                v-if="!readonly"
-                :model-value="modelValue.street ?? ''"
-                :options="addressOptions"
-                :loading="addressLoading"
-                :min-search-length="3"
-                :allow-create="true"
-                :label="$t('directory.addresses.fields.street')"
-                :no-results-text="$t('directory.addresses.streetNotFound')"
-                @update:model-value="(v) => update('street', v === null ? '' : String(v))"
-                @search="onAddressSearch"
-                @select="onAddressSelect"
-            />
-            <MalioInputText
-                v-else
-                :label="$t('directory.addresses.fields.street')"
-                :model-value="modelValue.street ?? ''"
-                :readonly="readonly"
-                @update:model-value="update('street', $event)"
-            />
-        </div>
-
+        <MalioInputText
+            class="col-span-2"
+            :label="$t('directory.addresses.fields.street')"
+            :model-value="modelValue.street ?? ''"
+            :readonly="readonly"
+            @update:model-value="update('street', $event)"
+        />
        <MalioInputText
            class="col-span-2"
            :label="$t('directory.addresses.fields.streetComplement')"
@@ -53,27 +33,13 @@
            :readonly="readonly"
            @update:model-value="update('streetComplement', $event)"
        />
-
        <MalioInputText
            :label="$t('directory.addresses.fields.postalCode')"
            :model-value="modelValue.postalCode ?? ''"
            :readonly="readonly"
-            @update:model-value="onPostalCodeInput"
-        />
-
-        <!-- Ville : select alimenté par le code postal (BAN). En mode dégradé
-             (BAN indispo) ou lecture seule, on bascule en saisie libre. -->
-        <MalioSelect
-            v-if="!readonly && !degraded"
-            :model-value="modelValue.city ?? ''"
-            :options="cityOptions"
-            :label="$t('directory.addresses.fields.city')"
-            empty-option-label=""
-            group-class="w-full"
-            @update:model-value="(v) => update('city', v === null ? '' : String(v))"
+            @update:model-value="update('postalCode', $event)"
        />
        <MalioInputText
-            v-else
            :label="$t('directory.addresses.fields.city')"
            :model-value="modelValue.city ?? ''"
            :readonly="readonly"
@@ -84,10 +50,6 @@

 <script setup lang="ts">
 import type { Address } from '~/modules/directory/services/dto/address'
-import {
-    useAddressAutocomplete,
-    type AddressSuggestion,
-} from '~/modules/directory/composables/useAddressAutocomplete'

 const props = defineProps<{
    modelValue: Address
@@ -101,98 +63,7 @@ const emit = defineEmits<{
    'remove': []
 }>()

-const { t } = useI18n()
-const toast = useToast()
-const autocomplete = useAddressAutocomplete()
-
-type Option = { label: string, value: string | number }
-
-const addressOptions = ref<Option[]>([])
-// Villes renvoyées par la BAN pour le code postal courant.
-const fetchedCityOptions = ref<Option[]>([])
-const addressLoading = ref(false)
-
-// Le select Ville n'affiche que les valeurs présentes dans ses options : on
-// garantit donc que la ville déjà enregistrée (chargement d'une fiche) ou
-// pré-remplie par l'autocomplétion d'adresse figure toujours dans la liste,
-// même avant toute recherche par code postal — sinon elle s'afficherait vide.
-const cityOptions = computed<Option[]>(() => {
-    const current = (props.modelValue.city ?? '').trim()
-    const options = [...fetchedCityOptions.value]
-    if (current && !options.some(o => o.value === current)) {
-        options.unshift({ value: current, label: current })
-    }
-    return options
-})
-// Mode dégradé : BAN indisponible → la ville passe en saisie libre.
-const degraded = ref(false)
-let lastAddressSuggestions: AddressSuggestion[] = []
-let notified = false
-
 function update(field: keyof Address, value: string): void {
    emit('update:modelValue', { ...props.modelValue, [field]: value === '' ? null : value })
 }
-
-// Avertit une seule fois que l'autocomplétion est indisponible (saisie libre).
-function notifyUnavailable(): void {
-    if (notified) return
-    notified = true
-    toast.info({ title: '', message: t('directory.addresses.autocompleteUnavailable') })
-}
-
-/** Recherche d'adresse assistée (event de MalioInputAutocomplete). */
-async function onAddressSearch(query: string): Promise<void> {
-    if (query.trim().length < 3) {
-        addressOptions.value = []
-        return
-    }
-    addressLoading.value = true
-    try {
-        const postalCode = (props.modelValue.postalCode ?? '').replace(/\D/g, '') || undefined
-        const suggestions = await autocomplete.searchAddress(query, postalCode)
-        lastAddressSuggestions = suggestions
-        addressOptions.value = suggestions.map(s => ({ value: s.street, label: s.label }))
-    }
-    catch {
-        addressOptions.value = []
-        notifyUnavailable()
-    }
-    finally {
-        addressLoading.value = false
-    }
-}
-
-/** Sélection d'une suggestion → remplit rue + ville + code postal. */
-function onAddressSelect(option: Option | null): void {
-    if (option === null) return
-    // Matching par `label` (adresse complète, unique côté BAN) plutôt que par
-    // rue : deux communes peuvent partager le même libellé de voie.
-    const suggestion = lastAddressSuggestions.find(s => s.label === option.label)
-    if (!suggestion) {
-        update('street', String(option.value))
-        return
-    }
-    emit('update:modelValue', {
-        ...props.modelValue,
-        street: suggestion.street,
-        city: suggestion.city || props.modelValue.city,
-        postalCode: suggestion.postalCode || props.modelValue.postalCode,
-    })
-}
-
-/** Saisie du code postal → met à jour le champ + interroge la BAN pour la ville. */
-async function onPostalCodeInput(value: string): Promise<void> {
-    update('postalCode', value)
-    const digits = (value ?? '').replace(/\D/g, '')
-    if (digits.length < 5) return
-    try {
-        const suggestions = await autocomplete.searchCity(digits)
-        fetchedCityOptions.value = suggestions.map(s => ({ value: s.city, label: s.city }))
-        degraded.value = false
-    }
-    catch {
-        degraded.value = true
-        notifyUnavailable()
-    }
-}
 </script>
@@ -1,13 +1,13 @@
 <template>
-    <div class="relative grid grid-cols-2 gap-x-[44px] gap-y-4 rounded-lg bg-white px-7 py-5 shadow-[0_4px_4px_0_rgba(0,0,0,0.10)]">
+    <div class="relative grid grid-cols-2 gap-x-8 gap-y-3 rounded bg-white p-4 shadow">
        <h3 class="col-span-2 text-sm font-semibold text-neutral-700">
            {{ title }}
        </h3>
        <MalioButtonIcon
            v-if="removable && !readonly"
-            icon="mdi:delete-outline"
-            variant="ghost"
-            class="absolute right-3 top-3"
+            icon="mdi:trash-can-outline"
+            class="absolute right-2 top-2"
+            button-class="!text-red-600"
            :aria-label="$t('common.delete')"
            @click="$emit('remove')"
        />
@@ -35,21 +35,18 @@
            :label="$t('directory.contacts.fields.email')"
            :model-value="modelValue.email ?? ''"
            :readonly="readonly"
-            :error="emailError"
            @update:model-value="update('email', $event)"
        />
        <MalioInputText
            :label="$t('directory.contacts.fields.phonePrimary')"
            :model-value="modelValue.phonePrimary ?? ''"
            :readonly="readonly"
-            :error="phonePrimaryError"
            @update:model-value="update('phonePrimary', $event)"
        />
        <MalioInputText
            :label="$t('directory.contacts.fields.phoneSecondary')"
            :model-value="modelValue.phoneSecondary ?? ''"
            :readonly="readonly"
-            :error="phoneSecondaryError"
            @update:model-value="update('phoneSecondary', $event)"
        />
    </div>
@@ -57,7 +54,6 @@

 <script setup lang="ts">
 import type { Contact } from '~/modules/directory/services/dto/contact'
-import { isValidEmail, isValidFrPhone } from '~/modules/directory/utils/validation'

 const props = defineProps<{
    modelValue: Contact
@@ -71,18 +67,6 @@ const emit = defineEmits<{
    'remove': []
 }>()

-const { t } = useI18n()
-
-const emailError = computed(() =>
-    isValidEmail(props.modelValue.email) ? '' : t('directory.validation.emailInvalid'),
-)
-const phonePrimaryError = computed(() =>
-    isValidFrPhone(props.modelValue.phonePrimary) ? '' : t('directory.validation.phoneInvalid'),
-)
-const phoneSecondaryError = computed(() =>
-    isValidFrPhone(props.modelValue.phoneSecondary) ? '' : t('directory.validation.phoneInvalid'),
-)
-
 function update(field: keyof Contact, value: string): void {
    emit('update:modelValue', { ...props.modelValue, [field]: value === '' ? null : value })
 }
@@ -1,88 +0,0 @@
-<template>
-    <MalioDrawer v-model="isOpen">
-        <template #header>
-            <h2 class="text-xl font-bold">{{ isEditing ? $t('prestataires.editPrestataire') : $t('prestataires.addPrestataire') }}</h2>
-        </template>
-        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
-            <MalioInputText
-                v-model="form.name"
-                :label="$t('prestataires.fields.name')"
-                input-class="w-full"
-                :error="touched.name && !form.name.trim() ? $t('directory.validation.nameRequired') : ''"
-                @blur="touched.name = true"
-            />
-
-            <div class="mt-6 flex justify-end">
-                <MalioButton
-                    :label="$t('common.save')"
-                    button-class="w-auto px-6"
-                    :disabled="isSubmitting"
-                    @click="handleSubmit"
-                />
-            </div>
-        </form>
-    </MalioDrawer>
-</template>
-
-<script setup lang="ts">
-import type { Prestataire, PrestataireWrite } from '~/modules/directory/services/dto/prestataire'
-import { usePrestataireService } from '~/modules/directory/services/prestataires'
-
-const props = defineProps<{
-    modelValue: boolean
-    prestataire: Prestataire | null
-}>()
-
-const emit = defineEmits<{
-    (e: 'update:modelValue', value: boolean): void
-    (e: 'saved'): void
-}>()
-
-const isOpen = computed({
-    get: () => props.modelValue,
-    set: (v) => emit('update:modelValue', v),
-})
-
-const isEditing = computed(() => !!props.prestataire)
-const isSubmitting = ref(false)
-
-const form = reactive({
-    name: '',
-})
-
-const touched = reactive({
-    name: false,
-})
-
-watch(() => props.modelValue, (open) => {
-    if (open) {
-        form.name = props.prestataire?.name ?? ''
-        touched.name = false
-    }
-})
-
-const { create, update } = usePrestataireService()
-
-async function handleSubmit() {
-    touched.name = true
-    if (!form.name.trim()) return
-
-    isSubmitting.value = true
-    try {
-        const payload: PrestataireWrite = {
-            name: form.name.trim(),
-        }
-
-        if (isEditing.value && props.prestataire) {
-            await update(props.prestataire.id, payload)
-        } else {
-            await create(payload)
-        }
-
-        emit('saved')
-        isOpen.value = false
-    } finally {
-        isSubmitting.value = false
-    }
-}
-</script>
@@ -4,12 +4,42 @@
            <h2 class="text-xl font-bold">{{ isEditing ? $t('prospects.editProspect') : $t('prospects.addProspect') }}</h2>
        </template>
        <form @submit.prevent="handleSubmit" class="flex flex-col gap-2">
+            <MalioInputText
+                v-model="form.name"
+                :label="$t('prospects.fields.name')"
+                input-class="w-full"
+                :error="touched.name && !form.name.trim() ? $t('prospects.validation.nameRequired') : ''"
+                @blur="touched.name = true"
+            />
            <MalioInputText
                v-model="form.company"
                :label="$t('prospects.fields.company')"
                input-class="w-full"
-                :error="touched.company && !form.company.trim() ? $t('prospects.validation.companyRequired') : ''"
-                @blur="touched.company = true"
+            />
+            <MalioInputText
+                v-model="form.email"
+                :label="$t('prospects.fields.email')"
+                input-class="w-full"
+            />
+            <MalioInputText
+                v-model="form.phone"
+                :label="$t('prospects.fields.phone')"
+                input-class="w-full"
+            />
+            <MalioSelect
+                v-model="form.status"
+                :label="$t('prospects.fields.status')"
+                :options="statusOptions"
+                group-class="w-full"
+            />
+            <MalioInputText
+                v-model="form.source"
+                :label="$t('prospects.fields.source')"
+                input-class="w-full"
+            />
+            <MalioInputTextArea
+                v-model="form.notes"
+                :label="$t('prospects.fields.notes')"
            />

            <div class="mt-6 flex items-center justify-between gap-2">
@@ -39,7 +69,7 @@
 </template>

 <script setup lang="ts">
-import type { Prospect, ProspectWrite } from '~/modules/directory/services/dto/prospect'
+import type { Prospect, ProspectStatus, ProspectWrite } from '~/modules/directory/services/dto/prospect'
 import { useProspectService } from '~/modules/directory/services/prospects'

 const props = defineProps<{
@@ -52,6 +82,8 @@ const emit = defineEmits<{
    (e: 'saved'): void
 }>()

+const { t } = useI18n()
+
 const isOpen = computed({
    get: () => props.modelValue,
    set: (v) => emit('update:modelValue', v),
@@ -61,31 +93,75 @@ const isEditing = computed(() => !!props.prospect)
 const isConverted = computed(() => !!props.prospect?.convertedClient)
 const isSubmitting = ref(false)

-const form = reactive({
+const statusOptions = [
+    { label: t('prospects.status.new'), value: 'new' },
+    { label: t('prospects.status.contacted'), value: 'contacted' },
+    { label: t('prospects.status.qualified'), value: 'qualified' },
+    { label: t('prospects.status.won'), value: 'won' },
+    { label: t('prospects.status.lost'), value: 'lost' },
+]
+
+const form = reactive<{
+    name: string
+    company: string
+    email: string
+    phone: string
+    status: ProspectStatus
+    source: string
+    notes: string
+}>({
+    name: '',
    company: '',
+    email: '',
+    phone: '',
+    status: 'new',
+    source: '',
+    notes: '',
 })

 const touched = reactive({
-    company: false,
+    name: false,
 })

 watch(() => props.modelValue, (open) => {
    if (open) {
-        form.company = props.prospect?.company ?? ''
-        touched.company = false
+        if (props.prospect) {
+            form.name = props.prospect.name ?? ''
+            form.company = props.prospect.company ?? ''
+            form.email = props.prospect.email ?? ''
+            form.phone = props.prospect.phone ?? ''
+            form.status = props.prospect.status ?? 'new'
+            form.source = props.prospect.source ?? ''
+            form.notes = props.prospect.notes ?? ''
+        } else {
+            form.name = ''
+            form.company = ''
+            form.email = ''
+            form.phone = ''
+            form.status = 'new'
+            form.source = ''
+            form.notes = ''
+        }
+        touched.name = false
    }
 })

 const { create, update, convert } = useProspectService()

 async function handleSubmit() {
-    touched.company = true
-    if (!form.company.trim()) return
+    touched.name = true
+    if (!form.name.trim()) return

    isSubmitting.value = true
    try {
        const payload: ProspectWrite = {
-            company: form.company.trim(),
+            name: form.name.trim(),
+            company: form.company.trim() || null,
+            email: form.email.trim() || null,
+            phone: form.phone.trim() || null,
+            status: form.status,
+            source: form.source.trim() || null,
+            notes: form.notes.trim() || null,
        }

        if (isEditing.value && props.prospect) {
@@ -15,7 +15,7 @@
                {{ doc.originalName }}
            </a>
            <MalioButtonIcon
-                v-if="canManage"
+                v-if="isAdmin"
                icon="mdi:trash-can-outline"
                button-class="!text-red-600"
                :aria-label="$t('common.delete')"
@@ -32,7 +32,7 @@
 import type { ReportDocument } from '~/modules/directory/services/dto/report-document'
 import { useReportDocumentService } from '~/modules/directory/services/report-documents'

-defineProps<{ documents: ReportDocument[], canManage: boolean }>()
+defineProps<{ documents: ReportDocument[], isAdmin: boolean }>()
 defineEmits<{ delete: [id: number] }>()

 const { getDownloadUrl } = useReportDocumentService()
@@ -1,113 +0,0 @@
-import { httpExternal } from '~/utils/httpExternal'
-
-// Autocomplétion d'adresse branchée sur la Base Adresse Nationale (BAN),
-// `api-adresse.data.gouv.fr` — service public français, gratuit, CORS ouvert.
-//
-// Appel HTTP DIRECT depuis le front (pas de proxy back) : la BAN est un domaine
-// externe, sans cookie de session ni enveloppe Hydra → on passe par
-// `httpExternal` et NON `useApi()`.
-//
-// Contrat :
-//   searchCity(postalCode)       -> liste { city, postalCode }
-//   searchAddress(query, cp?)    -> liste { label, street, postalCode, city }
-//   En cas d'erreur/timeout, la méthode THROW une
-//   AddressAutocompleteUnavailableError. Le composant consommateur catch,
-//   avertit l'utilisateur et bascule en saisie libre.
-
-/** URL de l'endpoint de recherche BAN. */
-const BAN_SEARCH_URL = 'https://api-adresse.data.gouv.fr/search/'
-
-/** Une suggestion de ville renvoyée à partir d'un code postal. */
-export interface CitySuggestion {
-    city: string
-    postalCode: string
-}
-
-/** Une suggestion d'adresse complète (saisie assistée du champ « Rue »). */
-export interface AddressSuggestion {
-    label: string
-    street: string
-    postalCode: string
-    city: string
-}
-
-export interface AddressAutocomplete {
-    searchCity(postalCode: string): Promise<CitySuggestion[]>
-    searchAddress(query: string, postalCode?: string): Promise<AddressSuggestion[]>
-}
-
-/** Erreur signalant que le service d'autocomplétion BAN n'est pas disponible. */
-export class AddressAutocompleteUnavailableError extends Error {
-    constructor() {
-        super('Address autocomplete (BAN) is not available.')
-        this.name = 'AddressAutocompleteUnavailableError'
-    }
-}
-
-/** Propriétés d'une « feature » GeoJSON renvoyée par la BAN (champs utilisés). */
-interface BanFeatureProperties {
-    label?: string
-    name?: string
-    street?: string
-    postcode?: string
-    city?: string
-}
-
-/** Réponse GeoJSON FeatureCollection de la BAN. */
-interface BanResponse {
-    features?: { properties?: BanFeatureProperties }[]
-}
-
-export function useAddressAutocomplete(): AddressAutocomplete {
-    return {
-        async searchCity(postalCode: string): Promise<CitySuggestion[]> {
-            let res: BanResponse
-            try {
-                res = await httpExternal<BanResponse>(BAN_SEARCH_URL, {
-                    query: { q: postalCode, type: 'municipality' },
-                })
-            }
-            catch {
-                throw new AddressAutocompleteUnavailableError()
-            }
-
-            return (res.features ?? []).map((feature) => {
-                const props = feature.properties ?? {}
-                return {
-                    city: props.city ?? props.name ?? '',
-                    postalCode: props.postcode ?? '',
-                }
-            })
-        },
-
-        async searchAddress(query: string, postalCode?: string): Promise<AddressSuggestion[]> {
-            // Pas de `type=housenumber` ici : sans filtre, la BAN classe rues +
-            // numéros par pertinence (comportement d'autocomplétion attendu).
-            // On n'ajoute `postcode` que s'il est fourni (sinon recherche large).
-            const banQuery: Record<string, string> = { q: query }
-            if (postalCode) {
-                banQuery.postcode = postalCode
-            }
-
-            let res: BanResponse
-            try {
-                res = await httpExternal<BanResponse>(BAN_SEARCH_URL, { query: banQuery })
-            }
-            catch {
-                throw new AddressAutocompleteUnavailableError()
-            }
-
-            return (res.features ?? []).map((feature) => {
-                const props = feature.properties ?? {}
-                return {
-                    label: props.label ?? '',
-                    // `name` porte la ligne d'adresse complète (numéro + voie) ;
-                    // `street` ne contient que la voie. On privilégie `name`.
-                    street: props.name ?? props.street ?? '',
-                    postalCode: props.postcode ?? '',
-                    city: props.city ?? '',
-                }
-            })
-        },
-    }
-}
@@ -3,15 +3,13 @@ import type { Address } from '~/modules/directory/services/dto/address'
 import { useContactService } from '~/modules/directory/services/contacts'
 import { useAddressService } from '~/modules/directory/services/addresses'

-type Owner = { client?: string, prospect?: string, prestataire?: string }
+type Owner = { client?: string, prospect?: string }

 /**
- * Logique partagée des fiches détail Client/Prospect : blocs répétables Contact
- * et Adresse (chargement, ajout, suppression). L'édition est tenue en mémoire
- * localement ; la persistance se fait au clic sur « Enregistrer » (saveContacts/
- * saveAddresses), comme les formulaires de tâche — pas d'enregistrement au blur.
- * Paramétré par l'IRI du propriétaire (`{ client }` ou `{ prospect }`), réutilisé
- * tel quel par les deux pages.
+ * Logique partagée des fiches détail Client/Prospect : gestion des blocs
+ * répétables Contact et Adresse (chargement, ajout, édition par bloc avec
+ * persistance immédiate, suppression). Paramétré par l'IRI du propriétaire
+ * (`{ client }` ou `{ prospect }`), réutilisé tel quel par les deux pages.
 */
 export function useDirectoryDetail(owner: Owner) {
    const contactService = useContactService()
@@ -19,8 +17,6 @@ export function useDirectoryDetail(owner: Owner) {

    const contacts = ref<Contact[]>([])
    const addresses = ref<Address[]>([])
-    const savingContacts = ref(false)
-    const savingAddresses = ref(false)

    function emptyContact(): Contact {
        return { id: 0, firstName: null, lastName: null, jobTitle: null, email: null, phonePrimary: null, phoneSecondary: null, ...owner }
@@ -29,75 +25,54 @@ export function useDirectoryDetail(owner: Owner) {
        return { id: 0, label: null, street: null, streetComplement: null, postalCode: null, city: null, country: 'FR', ...owner }
    }

-    // Édition locale uniquement : on remplace le bloc en mémoire, rien n'est
-    // persisté tant que l'utilisateur n'a pas cliqué sur « Enregistrer ».
-    function onContactInput(index: number, value: Contact): void {
+    async function onContactInput(index: number, value: Contact): Promise<void> {
        contacts.value[index] = value
+        await persistContact(index)
    }
-    function onAddressInput(index: number, value: Address): void {
-        addresses.value[index] = value
+    async function persistContact(index: number): Promise<void> {
+        const c = contacts.value[index]
+        if (!c) return
+        const payload = { firstName: c.firstName, lastName: c.lastName, jobTitle: c.jobTitle, email: c.email, phonePrimary: c.phonePrimary, phoneSecondary: c.phoneSecondary, ...owner }
+        if (c.id && c.id > 0) {
+            await contactService.update(c.id, payload)
+        } else if (c.lastName || c.firstName) {
+            const created = await contactService.create(payload)
+            contacts.value[index] = created
+        }
    }
-
    function addContact(): void {
        contacts.value.push(emptyContact())
    }
-    function addAddress(): void {
-        addresses.value.push(emptyAddress())
-    }
-
-    // Suppression immédiate (comme la corbeille du formulaire de tâche) : un bloc
-    // déjà enregistré est supprimé côté serveur, une amorce non enregistrée est
-    // simplement retirée de la liste.
    async function removeContact(index: number): Promise<void> {
        const c = contacts.value[index]
        if (c?.id && c.id > 0) await contactService.remove(c.id)
        contacts.value.splice(index, 1)
    }
+
+    async function onAddressInput(index: number, value: Address): Promise<void> {
+        addresses.value[index] = value
+        await persistAddress(index)
+    }
+    async function persistAddress(index: number): Promise<void> {
+        const a = addresses.value[index]
+        if (!a) return
+        const payload = { label: a.label, street: a.street, streetComplement: a.streetComplement, postalCode: a.postalCode, city: a.city, country: a.country, ...owner }
+        if (a.id && a.id > 0) {
+            await addressService.update(a.id, payload)
+        } else if (a.street || a.city || a.postalCode) {
+            const created = await addressService.create(payload)
+            addresses.value[index] = created
+        }
+    }
+    function addAddress(): void {
+        addresses.value.push(emptyAddress())
+    }
    async function removeAddress(index: number): Promise<void> {
        const a = addresses.value[index]
        if (a?.id && a.id > 0) await addressService.remove(a.id)
        addresses.value.splice(index, 1)
    }

-    // Persistance au clic : met à jour les blocs existants, crée les nouveaux
-    // blocs renseignés. Les amorces vides (sans contenu) sont ignorées.
-    async function saveContacts(): Promise<void> {
-        if (savingContacts.value) return
-        savingContacts.value = true
-        try {
-            for (let i = 0; i < contacts.value.length; i++) {
-                const c = contacts.value[i]
-                if (!c) continue
-                const payload = { firstName: c.firstName, lastName: c.lastName, jobTitle: c.jobTitle, email: c.email, phonePrimary: c.phonePrimary, phoneSecondary: c.phoneSecondary, ...owner }
-                if (c.id && c.id > 0) {
-                    contacts.value[i] = await contactService.update(c.id, payload)
-                } else if (c.lastName || c.firstName) {
-                    contacts.value[i] = await contactService.create(payload)
-                }
-            }
-        } finally {
-            savingContacts.value = false
-        }
-    }
-    async function saveAddresses(): Promise<void> {
-        if (savingAddresses.value) return
-        savingAddresses.value = true
-        try {
-            for (let i = 0; i < addresses.value.length; i++) {
-                const a = addresses.value[i]
-                if (!a) continue
-                const payload = { label: a.label, street: a.street, streetComplement: a.streetComplement, postalCode: a.postalCode, city: a.city, country: a.country, ...owner }
-                if (a.id && a.id > 0) {
-                    addresses.value[i] = await addressService.update(a.id, payload)
-                } else if (a.street || a.city || a.postalCode) {
-                    addresses.value[i] = await addressService.create(payload)
-                }
-            }
-        } finally {
-            savingAddresses.value = false
-        }
-    }
-
    async function load(): Promise<void> {
        contacts.value = await contactService.getByOwner(owner)
        addresses.value = await addressService.getByOwner(owner)
@@ -106,16 +81,12 @@ export function useDirectoryDetail(owner: Owner) {
    return {
        contacts,
        addresses,
-        savingContacts,
-        savingAddresses,
        onContactInput,
        addContact,
        removeContact,
-        saveContacts,
        onAddressInput,
        addAddress,
        removeAddress,
-        saveAddresses,
        load,
    }
 }
@@ -8,44 +8,6 @@
        <p v-if="loading">{{ $t('common.loading') }}</p>
        <template v-else-if="client">
            <MalioTabList v-model="activeTab" :tabs="tabs">
-                <template #info>
-                    <div class="flex flex-col gap-4 pt-6">
-                        <div class="relative grid grid-cols-2 gap-x-[44px] gap-y-4 rounded-lg bg-white px-7 py-5 shadow-[0_4px_4px_0_rgba(0,0,0,0.10)]">
-                            <MalioInputText
-                                v-model="info.name"
-                                class="col-span-2"
-                                :label="$t('directory.info.fields.name')"
-                                :error="infoTouched.name && !info.name.trim() ? $t('directory.validation.nameRequired') : ''"
-                                @blur="infoTouched.name = true"
-                            />
-                            <MalioInputText
-                                v-model="info.email"
-                                :label="$t('directory.info.fields.email')"
-                                :error="emailError"
-                            />
-                            <MalioInputText
-                                v-model="info.phone"
-                                :label="$t('directory.info.fields.phone')"
-                                :error="phoneError"
-                            />
-                            <MalioInputText
-                                v-model="info.website"
-                                class="col-span-2"
-                                :label="$t('directory.info.fields.website')"
-                                :error="websiteError"
-                            />
-                        </div>
-                        <div class="flex justify-center pt-2">
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingInfo || !infoValid"
-                                @click="saveInfo"
-                            />
-                        </div>
-                    </div>
-                </template>
-
                <template #contact>
                    <div class="flex flex-col gap-4 pt-6">
                        <DirectoryContactBlock
@@ -57,22 +19,13 @@
                            @update:model-value="(v) => onContactInput(i, v)"
                            @remove="removeContact(i)"
                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.contacts.add')"
-                                @click="addContact"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingContacts"
-                                @click="saveContacts"
-                            />
-                        </div>
+                        <MalioButton
+                            icon-name="mdi:plus"
+                            icon-position="left"
+                            button-class="w-auto px-4"
+                            :label="$t('directory.contacts.add')"
+                            @click="addContact"
+                        />
                    </div>
                </template>

@@ -87,27 +40,18 @@
                            @update:model-value="(v) => onAddressInput(i, v)"
                            @remove="removeAddress(i)"
                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.addresses.add')"
-                                @click="addAddress"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingAddresses"
-                                @click="saveAddresses"
-                            />
-                        </div>
+                        <MalioButton
+                            icon-name="mdi:plus"
+                            icon-position="left"
+                            button-class="w-auto px-4"
+                            :label="$t('directory.addresses.add')"
+                            @click="addAddress"
+                        />
                    </div>
                </template>

                <template #report>
-                    <CommercialReportTab :owner="owner" :can-manage="canManage" />
+                    <CommercialReportTab :owner="owner" :is-admin="true" />
                </template>
            </MalioTabList>
        </template>
@@ -117,7 +61,6 @@
 <script setup lang="ts">
 import type { Client } from '~/modules/directory/services/dto/client'
 import { useClientService } from '~/modules/directory/services/clients'
-import { isValidEmail, isValidFrPhone, isValidUrl } from '~/modules/directory/utils/validation'

 definePageMeta({ middleware: ['admin'] })

@@ -133,70 +76,31 @@ const clientService = useClientService()
 const {
    contacts,
    addresses,
-    savingContacts,
-    savingAddresses,
    onContactInput,
    addContact,
    removeContact,
-    saveContacts,
    onAddressInput,
    addAddress,
    removeAddress,
-    saveAddresses,
    load,
 } = useDirectoryDetail(owner)

-const { can } = usePermissions()
-const canManage = computed(() => can('directory.clients.manage'))
-
 const client = ref<Client | null>(null)
 const loading = ref(true)

-const activeTab = ref('info')
+const activeTab = ref('contact')
 const tabs = [
-    { key: 'info', label: t('directory.tabs.info'), icon: 'mdi:information-outline' },
    { key: 'contact', label: t('directory.tabs.contact'), icon: 'mdi:account-outline' },
    { key: 'address', label: t('directory.tabs.address'), icon: 'mdi:map-marker-outline' },
    { key: 'report', label: t('directory.tabs.report'), icon: 'mdi:file-document-outline' },
 ]

-// Champs de base de la fiche, édités en mémoire et persistés au clic sur
-// « Enregistrer » (PATCH), comme les onglets Contact/Adresse.
-const info = reactive({ name: '', email: '', phone: '', website: '' })
-const infoTouched = reactive({ name: false })
-const savingInfo = ref(false)
-
-const emailError = computed(() => (isValidEmail(info.email) ? '' : t('directory.validation.emailInvalid')))
-const phoneError = computed(() => (isValidFrPhone(info.phone) ? '' : t('directory.validation.phoneInvalid')))
-const websiteError = computed(() => (isValidUrl(info.website) ? '' : t('directory.validation.urlInvalid')))
-const infoValid = computed(() => !emailError.value && !phoneError.value && !websiteError.value)
-
-async function saveInfo(): Promise<void> {
-    infoTouched.name = true
-    if (!info.name.trim() || !infoValid.value || savingInfo.value) return
-    savingInfo.value = true
-    try {
-        client.value = await clientService.update(id, {
-            name: info.name.trim(),
-            email: info.email.trim() || null,
-            phone: info.phone.trim() || null,
-            website: info.website.trim() || null,
-        })
-    } finally {
-        savingInfo.value = false
-    }
-}
-
 function goBack(): void {
    router.push('/directory')
 }

 onMounted(async () => {
    client.value = await clientService.getById(id)
-    info.name = client.value.name ?? ''
-    info.email = client.value.email ?? ''
-    info.phone = client.value.phone ?? ''
-    info.website = client.value.website ?? ''
    await load()
    loading.value = false
 })
@@ -31,17 +31,6 @@
                        <template #cell-phone="{ item }">
                            {{ (item as Client).phone ?? '—' }}
                        </template>
-                        <template #cell-actions="{ item }">
-                            <div class="flex justify-end" @click.stop>
-                                <MalioButtonIcon
-                                    icon="mdi:trash-can-outline"
-                                    :aria-label="$t('common.delete')"
-                                    button-class="!bg-red-100 !text-red-700"
-                                    :icon-size="18"
-                                    @click="askDeleteClient(item as Client)"
-                                />
-                            </div>
-                        </template>
                    </MalioDataTable>
                </div>
            </template>
@@ -86,63 +75,20 @@
                            {{ (item as ProspectRow).phone ?? '—' }}
                        </template>
                        <template #cell-actions="{ item }">
-                            <div class="flex justify-end gap-2" @click.stop>
+                            <div
+                                v-if="!(item as ProspectRow).convertedClient"
+                                class="flex justify-end"
+                                @click.stop
+                            >
                                <MalioButtonIcon
-                                    v-if="!(item as ProspectRow).convertedClient"
                                    icon="mdi:account-convert"
                                    :aria-label="$t('prospects.convert')"
                                    button-class="!bg-green-100 !text-green-700"
                                    :icon-size="18"
                                    @click="convertProspect(item as ProspectRow)"
                                />
-                                <MalioButtonIcon
-                                    icon="mdi:trash-can-outline"
-                                    :aria-label="$t('common.delete')"
-                                    button-class="!bg-red-100 !text-red-700"
-                                    :icon-size="18"
-                                    @click="askDeleteProspect(item as ProspectRow)"
-                                />
-                            </div>
-                        </template>
-                    </MalioDataTable>
-                </div>
-            </template>
-            <!-- Prestataires -->
-            <template #prestataires>
-                <div class="flex min-h-[30rem] flex-col gap-4 pt-10">
-                    <div class="flex items-center justify-end">
-                        <MalioButton
-                            icon-name="mdi:plus"
-                            icon-position="left"
-                            button-class="w-auto px-4"
-                            :label="$t('directory.prestataires.add')"
-                            @click="openCreatePrestataire"
-                        />
-                    </div>
-
-                    <MalioDataTable
-                        :columns="prestataireColumns"
-                        :items="prestataires"
-                        :total-items="prestataires.length"
-                        :empty-message="$t('directory.prestataires.empty')"
-                        @row-click="openEditPrestataire"
-                    >
-                        <template #cell-email="{ item }">
-                            {{ (item as Prestataire).email ?? '—' }}
-                        </template>
-                        <template #cell-phone="{ item }">
-                            {{ (item as Prestataire).phone ?? '—' }}
-                        </template>
-                        <template #cell-actions="{ item }">
-                            <div class="flex justify-end" @click.stop>
-                                <MalioButtonIcon
-                                    icon="mdi:trash-can-outline"
-                                    :aria-label="$t('common.delete')"
-                                    button-class="!bg-red-100 !text-red-700"
-                                    :icon-size="18"
-                                    @click="askDeletePrestataire(item as Prestataire)"
-                                />
                            </div>
+                            <span v-else class="text-neutral-300">—</span>
                        </template>
                    </MalioDataTable>
                </div>
@@ -159,18 +105,6 @@
            :prospect="selectedProspect"
            @saved="onProspectSaved"
        />
-        <PrestataireDrawer
-            v-model="prestataireDrawerOpen"
-            :prestataire="selectedPrestataire"
-            @saved="loadPrestataires"
-        />
-
-        <ConfirmDeleteModal
-            v-model="deleteModalOpen"
-            :title="deleteModalTitle"
-            :message="deleteModalMessage"
-            @confirm="confirmDelete"
-        />
    </div>
 </template>

@@ -179,8 +113,6 @@ import type { Client } from '~/modules/directory/services/dto/client'
 import { useClientService } from '~/modules/directory/services/clients'
 import type { Prospect, ProspectStatus } from '~/modules/directory/services/dto/prospect'
 import { useProspectService } from '~/modules/directory/services/prospects'
-import type { Prestataire } from '~/modules/directory/services/dto/prestataire'
-import { usePrestataireService } from '~/modules/directory/services/prestataires'

 definePageMeta({ middleware: ['admin'] })

@@ -191,13 +123,11 @@ useHead({ title: t('directory.title') })

 const clientService = useClientService()
 const prospectService = useProspectService()
-const prestataireService = usePrestataireService()

 const activeTab = ref('clients')
 const tabs = [
    { key: 'clients', label: t('directory.tabs.clients'), icon: 'mdi:account-tie-outline' },
    { key: 'prospects', label: t('directory.tabs.prospects'), icon: 'mdi:account-search-outline' },
-    { key: 'prestataires', label: t('directory.tabs.prestataires'), icon: 'mdi:account-hard-hat-outline' },
 ]

 // --- Clients ---
@@ -206,10 +136,9 @@ const clientDrawerOpen = ref(false)
 const selectedClient = ref<Client | null>(null)

 const clientColumns = [
-    { key: 'name', label: t('prospects.fields.company') },
+    { key: 'name', label: t('prospects.fields.name') },
    { key: 'email', label: t('prospects.fields.email') },
    { key: 'phone', label: t('prospects.fields.phone') },
-    { key: 'actions', label: '' },
 ]

 async function loadClients() {
@@ -240,6 +169,7 @@ const statusOptions = [
 ]

 const prospectColumns = [
+    { key: 'name', label: t('prospects.fields.name') },
    { key: 'company', label: t('prospects.fields.company') },
    { key: 'status', label: t('prospects.fields.status') },
    { key: 'email', label: t('prospects.fields.email') },
@@ -295,102 +225,10 @@ async function onProspectSaved() {
    await Promise.all([loadProspects(), loadClients()])
 }

-// --- Prestataires ---
-const prestataires = ref<Prestataire[]>([])
-const prestataireDrawerOpen = ref(false)
-const selectedPrestataire = ref<Prestataire | null>(null)
-
-const prestataireColumns = [
-    { key: 'name', label: t('prospects.fields.company') },
-    { key: 'email', label: t('prospects.fields.email') },
-    { key: 'phone', label: t('prospects.fields.phone') },
-    { key: 'actions', label: '' },
-]
-
-async function loadPrestataires() {
-    prestataires.value = await prestataireService.getAll()
-}
-
-function openCreatePrestataire() {
-    selectedPrestataire.value = null
-    prestataireDrawerOpen.value = true
-}
-
-function openEditPrestataire(item: Record<string, unknown>) {
-    navigateTo(`/directory/prestataires/${(item as Prestataire).id}`)
-}
-
-// --- Suppression (clients, prospects & prestataires) ---
-type DeleteTarget =
-    | { type: 'client'; item: Client }
-    | { type: 'prospect'; item: Prospect }
-    | { type: 'prestataire'; item: Prestataire }
-
-const deleteModalOpen = ref(false)
-const deleteTarget = ref<DeleteTarget | null>(null)
-
-const deleteModalTitle = computed(() => {
-    switch (deleteTarget.value?.type) {
-        case 'prospect':
-            return t('prospects.deleteConfirmTitle')
-        case 'prestataire':
-            return t('prestataires.deleteConfirmTitle')
-        default:
-            return t('clients.deleteConfirmTitle')
-    }
-})
-
-const deleteModalMessage = computed(() => {
-    const target = deleteTarget.value
-    if (!target) return ''
-    switch (target.type) {
-        case 'prospect':
-            return t('prospects.deleteConfirmMessage', { name: target.item.company })
-        case 'prestataire':
-            return t('prestataires.deleteConfirmMessage', { name: target.item.name })
-        default:
-            return t('clients.deleteConfirmMessage', { name: target.item.name })
-    }
-})
-
-function askDeleteClient(item: Client) {
-    deleteTarget.value = { type: 'client', item }
-    deleteModalOpen.value = true
-}
-
-function askDeleteProspect(item: Prospect) {
-    deleteTarget.value = { type: 'prospect', item }
-    deleteModalOpen.value = true
-}
-
-function askDeletePrestataire(item: Prestataire) {
-    deleteTarget.value = { type: 'prestataire', item }
-    deleteModalOpen.value = true
-}
-
-async function confirmDelete() {
-    const target = deleteTarget.value
-    if (!target) return
-
-    if (target.type === 'client') {
-        await clientService.remove(target.item.id)
-        await loadClients()
-    } else if (target.type === 'prospect') {
-        await prospectService.remove(target.item.id)
-        await loadProspects()
-    } else {
-        await prestataireService.remove(target.item.id)
-        await loadPrestataires()
-    }
-
-    deleteModalOpen.value = false
-    deleteTarget.value = null
-}
-
 watch(statusFilter, loadProspects)

 onMounted(async () => {
-    await Promise.all([loadClients(), loadProspects(), loadPrestataires()])
+    await Promise.all([loadClients(), loadProspects()])
 })
 </script>

@@ -1,201 +0,0 @@
-<template>
-    <div class="flex flex-col gap-6">
-        <div class="flex items-center gap-3 pt-4">
-            <MalioButtonIcon icon="mdi:arrow-left" :aria-label="$t('common.back')" @click="goBack" />
-            <h1 class="text-2xl font-bold text-neutral-900">{{ prestataire?.name ?? '…' }}</h1>
-        </div>
-
-        <p v-if="loading">{{ $t('common.loading') }}</p>
-        <template v-else-if="prestataire">
-            <MalioTabList v-model="activeTab" :tabs="tabs">
-                <template #info>
-                    <div class="flex flex-col gap-4 pt-6">
-                        <div class="relative grid grid-cols-2 gap-x-[44px] gap-y-4 rounded-lg bg-white px-7 py-5 shadow-[0_4px_4px_0_rgba(0,0,0,0.10)]">
-                            <MalioInputText
-                                v-model="info.name"
-                                class="col-span-2"
-                                :label="$t('directory.info.fields.name')"
-                                :error="infoTouched.name && !info.name.trim() ? $t('directory.validation.nameRequired') : ''"
-                                @blur="infoTouched.name = true"
-                            />
-                            <MalioInputText
-                                v-model="info.email"
-                                :label="$t('directory.info.fields.email')"
-                                :error="emailError"
-                            />
-                            <MalioInputText
-                                v-model="info.phone"
-                                :label="$t('directory.info.fields.phone')"
-                                :error="phoneError"
-                            />
-                            <MalioInputText
-                                v-model="info.website"
-                                class="col-span-2"
-                                :label="$t('directory.info.fields.website')"
-                                :error="websiteError"
-                            />
-                        </div>
-                        <div class="flex justify-center pt-2">
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingInfo || !infoValid"
-                                @click="saveInfo"
-                            />
-                        </div>
-                    </div>
-                </template>
-
-                <template #contact>
-                    <div class="flex flex-col gap-4 pt-6">
-                        <DirectoryContactBlock
-                            v-for="(contact, i) in contacts"
-                            :key="contact.id || `new-${i}`"
-                            :model-value="contact"
-                            :title="$t('directory.contacts.item', { n: i + 1 })"
-                            :removable="contacts.length > 0"
-                            @update:model-value="(v) => onContactInput(i, v)"
-                            @remove="removeContact(i)"
-                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.contacts.add')"
-                                @click="addContact"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingContacts"
-                                @click="saveContacts"
-                            />
-                        </div>
-                    </div>
-                </template>
-
-                <template #address>
-                    <div class="flex flex-col gap-4 pt-6">
-                        <DirectoryAddressBlock
-                            v-for="(address, i) in addresses"
-                            :key="address.id || `new-${i}`"
-                            :model-value="address"
-                            :title="$t('directory.addresses.item', { n: i + 1 })"
-                            :removable="addresses.length > 0"
-                            @update:model-value="(v) => onAddressInput(i, v)"
-                            @remove="removeAddress(i)"
-                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.addresses.add')"
-                                @click="addAddress"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingAddresses"
-                                @click="saveAddresses"
-                            />
-                        </div>
-                    </div>
-                </template>
-
-                <template #report>
-                    <CommercialReportTab :owner="owner" :can-manage="canManage" />
-                </template>
-            </MalioTabList>
-        </template>
-    </div>
-</template>
-
-<script setup lang="ts">
-import type { Prestataire } from '~/modules/directory/services/dto/prestataire'
-import { usePrestataireService } from '~/modules/directory/services/prestataires'
-import { isValidEmail, isValidFrPhone, isValidUrl } from '~/modules/directory/utils/validation'
-
-definePageMeta({ middleware: ['admin'] })
-
-const route = useRoute()
-const router = useRouter()
-const { t } = useI18n()
-
-const id = Number(route.params.id)
-const ownerIri = `/api/prestataires/${id}`
-const owner = { prestataire: ownerIri }
-
-const prestataireService = usePrestataireService()
-const {
-    contacts,
-    addresses,
-    savingContacts,
-    savingAddresses,
-    onContactInput,
-    addContact,
-    removeContact,
-    saveContacts,
-    onAddressInput,
-    addAddress,
-    removeAddress,
-    saveAddresses,
-    load,
-} = useDirectoryDetail(owner)
-
-const { can } = usePermissions()
-const canManage = computed(() => can('directory.providers.manage'))
-
-const prestataire = ref<Prestataire | null>(null)
-const loading = ref(true)
-
-const activeTab = ref('info')
-const tabs = [
-    { key: 'info', label: t('directory.tabs.info'), icon: 'mdi:information-outline' },
-    { key: 'contact', label: t('directory.tabs.contact'), icon: 'mdi:account-outline' },
-    { key: 'address', label: t('directory.tabs.address'), icon: 'mdi:map-marker-outline' },
-    { key: 'report', label: t('directory.tabs.report'), icon: 'mdi:file-document-outline' },
-]
-
-const info = reactive({ name: '', email: '', phone: '', website: '' })
-const infoTouched = reactive({ name: false })
-const savingInfo = ref(false)
-
-const emailError = computed(() => (isValidEmail(info.email) ? '' : t('directory.validation.emailInvalid')))
-const phoneError = computed(() => (isValidFrPhone(info.phone) ? '' : t('directory.validation.phoneInvalid')))
-const websiteError = computed(() => (isValidUrl(info.website) ? '' : t('directory.validation.urlInvalid')))
-const infoValid = computed(() => !emailError.value && !phoneError.value && !websiteError.value)
-
-async function saveInfo(): Promise<void> {
-    infoTouched.name = true
-    if (!info.name.trim() || !infoValid.value || savingInfo.value) return
-    savingInfo.value = true
-    try {
-        prestataire.value = await prestataireService.update(id, {
-            name: info.name.trim(),
-            email: info.email.trim() || null,
-            phone: info.phone.trim() || null,
-            website: info.website.trim() || null,
-        })
-    } finally {
-        savingInfo.value = false
-    }
-}
-
-function goBack(): void {
-    router.push('/directory')
-}
-
-onMounted(async () => {
-    prestataire.value = await prestataireService.getById(id)
-    info.name = prestataire.value.name ?? ''
-    info.email = prestataire.value.email ?? ''
-    info.phone = prestataire.value.phone ?? ''
-    info.website = prestataire.value.website ?? ''
-    await load()
-    loading.value = false
-})
-</script>
@@ -2,65 +2,12 @@
    <div class="flex flex-col gap-6">
        <div class="flex items-center gap-3 pt-4">
            <MalioButtonIcon icon="mdi:arrow-left" :aria-label="$t('common.back')" @click="goBack" />
-            <h1 class="text-2xl font-bold text-neutral-900">{{ prospect?.company ?? '…' }}</h1>
+            <h1 class="text-2xl font-bold text-neutral-900">{{ prospect?.name ?? '…' }}</h1>
        </div>

        <p v-if="loading">{{ $t('common.loading') }}</p>
        <template v-else-if="prospect">
            <MalioTabList v-model="activeTab" :tabs="tabs">
-                <template #info>
-                    <div class="flex flex-col gap-4 pt-6">
-                        <div class="relative grid grid-cols-2 gap-x-[44px] gap-y-4 rounded-lg bg-white px-7 py-5 shadow-[0_4px_4px_0_rgba(0,0,0,0.10)]">
-                            <MalioInputText
-                                v-model="info.company"
-                                class="col-span-2"
-                                :label="$t('prospects.fields.company')"
-                                :error="infoTouched.company && !info.company.trim() ? $t('prospects.validation.companyRequired') : ''"
-                                @blur="infoTouched.company = true"
-                            />
-                            <MalioSelect
-                                v-model="info.status"
-                                :label="$t('prospects.fields.status')"
-                                :options="statusOptions"
-                                group-class="w-full"
-                            />
-                            <MalioInputText
-                                v-model="info.website"
-                                :label="$t('prospects.fields.website')"
-                                :error="websiteError"
-                            />
-                            <MalioInputText
-                                v-model="info.email"
-                                :label="$t('prospects.fields.email')"
-                                :error="emailError"
-                            />
-                            <MalioInputText
-                                v-model="info.phone"
-                                :label="$t('prospects.fields.phone')"
-                                :error="phoneError"
-                            />
-                            <MalioInputText
-                                v-model="info.source"
-                                class="col-span-2"
-                                :label="$t('prospects.fields.source')"
-                            />
-                            <MalioInputTextArea
-                                v-model="info.notes"
-                                class="col-span-2"
-                                :label="$t('prospects.fields.notes')"
-                            />
-                        </div>
-                        <div class="flex justify-center pt-2">
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingInfo || !infoValid"
-                                @click="saveInfo"
-                            />
-                        </div>
-                    </div>
-                </template>
-
                <template #contact>
                    <div class="flex flex-col gap-4 pt-6">
                        <DirectoryContactBlock
@@ -72,22 +19,13 @@
                            @update:model-value="(v) => onContactInput(i, v)"
                            @remove="removeContact(i)"
                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.contacts.add')"
-                                @click="addContact"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingContacts"
-                                @click="saveContacts"
-                            />
-                        </div>
+                        <MalioButton
+                            icon-name="mdi:plus"
+                            icon-position="left"
+                            button-class="w-auto px-4"
+                            :label="$t('directory.contacts.add')"
+                            @click="addContact"
+                        />
                    </div>
                </template>

@@ -102,27 +40,18 @@
                            @update:model-value="(v) => onAddressInput(i, v)"
                            @remove="removeAddress(i)"
                        />
-                        <div class="flex justify-center gap-3 pt-2">
-                            <MalioButton
-                                variant="tertiary"
-                                icon-name="mdi:plus"
-                                icon-position="left"
-                                button-class="w-auto px-4"
-                                :label="$t('directory.addresses.add')"
-                                @click="addAddress"
-                            />
-                            <MalioButton
-                                button-class="w-auto px-6"
-                                :label="$t('common.save')"
-                                :disabled="savingAddresses"
-                                @click="saveAddresses"
-                            />
-                        </div>
+                        <MalioButton
+                            icon-name="mdi:plus"
+                            icon-position="left"
+                            button-class="w-auto px-4"
+                            :label="$t('directory.addresses.add')"
+                            @click="addAddress"
+                        />
                    </div>
                </template>

                <template #report>
-                    <CommercialReportTab :owner="owner" :can-manage="canManage" />
+                    <CommercialReportTab :owner="owner" :is-admin="true" />
                </template>
            </MalioTabList>
        </template>
@@ -130,9 +59,8 @@
 </template>

 <script setup lang="ts">
-import type { Prospect, ProspectStatus } from '~/modules/directory/services/dto/prospect'
+import type { Prospect } from '~/modules/directory/services/dto/prospect'
 import { useProspectService } from '~/modules/directory/services/prospects'
-import { isValidEmail, isValidFrPhone, isValidUrl } from '~/modules/directory/utils/validation'

 definePageMeta({ middleware: ['admin'] })

@@ -148,92 +76,31 @@ const prospectService = useProspectService()
 const {
    contacts,
    addresses,
-    savingContacts,
-    savingAddresses,
    onContactInput,
    addContact,
    removeContact,
-    saveContacts,
    onAddressInput,
    addAddress,
    removeAddress,
-    saveAddresses,
    load,
 } = useDirectoryDetail(owner)

-const { can } = usePermissions()
-const canManage = computed(() => can('directory.prospects.manage'))
-
 const prospect = ref<Prospect | null>(null)
 const loading = ref(true)

-const activeTab = ref('info')
+const activeTab = ref('contact')
 const tabs = [
-    { key: 'info', label: t('directory.tabs.info'), icon: 'mdi:information-outline' },
    { key: 'contact', label: t('directory.tabs.contact'), icon: 'mdi:account-outline' },
    { key: 'address', label: t('directory.tabs.address'), icon: 'mdi:map-marker-outline' },
    { key: 'report', label: t('directory.tabs.report'), icon: 'mdi:file-document-outline' },
 ]

-const statusOptions = [
-    { label: t('prospects.status.new'), value: 'new' },
-    { label: t('prospects.status.contacted'), value: 'contacted' },
-    { label: t('prospects.status.qualified'), value: 'qualified' },
-    { label: t('prospects.status.won'), value: 'won' },
-    { label: t('prospects.status.lost'), value: 'lost' },
-]
-
-// Champs de base de la fiche, édités en mémoire et persistés au clic sur
-// « Enregistrer » (PATCH), comme les onglets Contact/Adresse.
-const info = reactive<{
-    company: string
-    email: string
-    phone: string
-    website: string
-    status: ProspectStatus
-    source: string
-    notes: string
-}>({ company: '', email: '', phone: '', website: '', status: 'new', source: '', notes: '' })
-const infoTouched = reactive({ company: false })
-const savingInfo = ref(false)
-
-const emailError = computed(() => (isValidEmail(info.email) ? '' : t('directory.validation.emailInvalid')))
-const phoneError = computed(() => (isValidFrPhone(info.phone) ? '' : t('directory.validation.phoneInvalid')))
-const websiteError = computed(() => (isValidUrl(info.website) ? '' : t('directory.validation.urlInvalid')))
-const infoValid = computed(() => !emailError.value && !phoneError.value && !websiteError.value)
-
-async function saveInfo(): Promise<void> {
-    infoTouched.company = true
-    if (!info.company.trim() || !infoValid.value || savingInfo.value) return
-    savingInfo.value = true
-    try {
-        prospect.value = await prospectService.update(id, {
-            company: info.company.trim(),
-            email: info.email.trim() || null,
-            phone: info.phone.trim() || null,
-            website: info.website.trim() || null,
-            status: info.status,
-            source: info.source.trim() || null,
-            notes: info.notes.trim() || null,
-        })
-    } finally {
-        savingInfo.value = false
-    }
-}
-
 function goBack(): void {
    router.push('/directory')
 }

 onMounted(async () => {
    prospect.value = await prospectService.getById(id)
-    info.company = prospect.value.company ?? ''
-    info.email = prospect.value.email ?? ''
-    info.phone = prospect.value.phone ?? ''
-    info.website = prospect.value.website ?? ''
-    info.status = prospect.value.status ?? 'new'
-    info.source = prospect.value.source ?? ''
-    info.notes = prospect.value.notes ?? ''
    await load()
    loading.value = false
 })
@@ -2,7 +2,7 @@ import type { Address, AddressWrite } from './dto/address'
 import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'

-type Owner = { client?: string, prospect?: string, prestataire?: string }
+type Owner = { client?: string, prospect?: string }

 export function useAddressService() {
    const api = useApi()
@@ -2,7 +2,7 @@ import type { CommercialReport, CommercialReportWrite } from './dto/commercial-r
 import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'

-type Owner = { client?: string, prospect?: string, prestataire?: string }
+type Owner = { client?: string, prospect?: string }

 export function useCommercialReportService() {
    const api = useApi()
@@ -2,7 +2,7 @@ import type { Contact, ContactWrite } from './dto/contact'
 import type { HydraCollection } from '~/utils/api'
 import { extractHydraMembers } from '~/utils/api'

-type Owner = { client?: string, prospect?: string, prestataire?: string }
+type Owner = { client?: string, prospect?: string }

 export function useContactService() {
    const api = useApi()
@@ -9,7 +9,6 @@ export type Address = {
    country: string
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
 }

 export type AddressWrite = {
@@ -21,5 +20,4 @@ export type AddressWrite = {
    country: string
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
 }
@@ -4,12 +4,10 @@ export type Client = {
    name: string
    email: string | null
    phone: string | null
-    website: string | null
 }

 export type ClientWrite = {
    name: string
-    email?: string | null
-    phone?: string | null
-    website?: string | null
+    email: string | null
+    phone: string | null
 }
@@ -12,7 +12,6 @@ export type CommercialReport = {
    author?: { id: number, username: string } | null
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
    documents?: ReportDocument[]
    createdAt?: string
    updatedAt?: string
@@ -25,5 +24,4 @@ export type CommercialReportWrite = {
    type: ReportType
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
 }
@@ -9,7 +9,6 @@ export type Contact = {
    phoneSecondary: string | null
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
 }

 export type ContactWrite = {
@@ -21,5 +20,4 @@ export type ContactWrite = {
    phoneSecondary: string | null
    client?: string | null
    prospect?: string | null
-    prestataire?: string | null
 }
@@ -1,15 +0,0 @@
-export type Prestataire = {
-    id: number
-    '@id'?: string
-    name: string
-    email: string | null
-    phone: string | null
-    website: string | null
-}
-
-export type PrestataireWrite = {
-    name: string
-    email?: string | null
-    phone?: string | null
-    website?: string | null
-}
@@ -5,10 +5,10 @@ export type ProspectStatus = 'new' | 'contacted' | 'qualified' | 'won' | 'lost'
 export type Prospect = {
    id: number
    '@id'?: string
-    company: string
+    name: string
+    company: string | null
    email: string | null
    phone: string | null
-    website: string | null
    status: ProspectStatus
    source: string | null
    notes: string | null
@@ -18,11 +18,11 @@ export type Prospect = {
 }

 export type ProspectWrite = {
-    company: string
-    email?: string | null
-    phone?: string | null
-    website?: string | null
-    status?: ProspectStatus
-    source?: string | null
-    notes?: string | null
+    name: string
+    company: string | null
+    email: string | null
+    phone: string | null
+    status: ProspectStatus
+    source: string | null
+    notes: string | null
 }
@@ -1,36 +0,0 @@
-import type { Prestataire, PrestataireWrite } from './dto/prestataire'
-import type { HydraCollection } from '~/utils/api'
-import { extractHydraMembers } from '~/utils/api'
-
-export function usePrestataireService() {
-    const api = useApi()
-
-    async function getAll(): Promise<Prestataire[]> {
-        const data = await api.get<HydraCollection<Prestataire>>('/prestataires')
-        return extractHydraMembers(data)
-    }
-
-    async function getById(id: number): Promise<Prestataire> {
-        return api.get<Prestataire>(`/prestataires/${id}`)
-    }
-
-    async function create(payload: PrestataireWrite): Promise<Prestataire> {
-        return api.post<Prestataire>('/prestataires', payload as Record<string, unknown>, {
-            toastSuccessKey: 'prestataires.created',
-        })
-    }
-
-    async function update(id: number, payload: Partial<PrestataireWrite>): Promise<Prestataire> {
-        return api.patch<Prestataire>(`/prestataires/${id}`, payload as Record<string, unknown>, {
-            toastSuccessKey: 'prestataires.updated',
-        })
-    }
-
-    async function remove(id: number): Promise<void> {
-        await api.delete(`/prestataires/${id}`, {}, {
-            toastSuccessKey: 'prestataires.deleted',
-        })
-    }
-
-    return { getAll, getById, create, update, remove }
-}
@@ -1,40 +0,0 @@
-// Validateurs partagés du répertoire (annuaire). Chaque validateur considère
-// une valeur VIDE comme valide : les champs email/téléphone/site web sont
-// facultatifs — la validation ne porte que sur le format quand c'est renseigné.
-
-/** Email basique (présence d'un @ entouré de caractères, un point dans le domaine). */
-const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/
-
-/**
- * Téléphone français : 10 chiffres commençant par 0 (ex. `0549200910`) — format
- * saisi par l'utilisateur, sans séparateurs — ou notation internationale
- * `+33XXXXXXXXX` (9 chiffres après l'indicatif). Les espaces, points et tirets
- * sont tolérés à la frappe (retirés avant contrôle).
- */
-const FR_PHONE_NATIONAL_RE = /^0\d{9}$/
-const FR_PHONE_INTL_RE = /^\+33\d{9}$/
-
-const URL_RE = /^https?:\/\/[^\s.]+\.[^\s]+$/
-
-/** Retire les séparateurs usuels d'un numéro (espaces, points, tirets, parenthèses). */
-export function stripPhoneSeparators(value: string): string {
-    return value.replace(/[\s.\-()]/g, '')
-}
-
-export function isValidEmail(value: string | null | undefined): boolean {
-    const v = (value ?? '').trim()
-    if (v === '') return true
-    return EMAIL_RE.test(v)
-}
-
-export function isValidFrPhone(value: string | null | undefined): boolean {
-    const v = stripPhoneSeparators((value ?? '').trim())
-    if (v === '') return true
-    return FR_PHONE_NATIONAL_RE.test(v) || FR_PHONE_INTL_RE.test(v)
-}
-
-export function isValidUrl(value: string | null | undefined): boolean {
-    const v = (value ?? '').trim()
-    if (v === '') return true
-    return URL_RE.test(v)
-}
@@ -21,6 +21,7 @@
        </div>

        <div>
+            <AdminClientTab v-if="activeTab === 'clients'" />
            <AdminWorkflowTab v-if="activeTab === 'workflows'" />
            <AdminEffortTab v-if="activeTab === 'efforts'" />
            <AdminPriorityTab v-if="activeTab === 'priorities'" />
@@ -49,6 +50,7 @@ const canViewRoles = computed(() => can('core.roles.view'))
 const canViewAudit = computed(() => can('core.audit_log.view'))

 const tabs = [
+    { key: 'clients', label: 'Clients' },
    { key: 'workflows', label: 'Workflows' },
    { key: 'efforts', label: 'Efforts' },
    { key: 'priorities', label: 'Priorités' },
@@ -70,5 +72,5 @@ const visibleTabs = computed(() =>
    tabs.filter((tab) => !('permission' in tab) || can(tab.permission)),
 )

-const activeTab = ref<TabKey>('workflows')
+const activeTab = ref<TabKey>('clients')
 </script>
@@ -1,26 +0,0 @@
-import { $fetch } from 'ofetch'
-
-/**
- * Appel HTTP vers un service EXTERNE (hors API Lesstime) : pas de cookie de
- * session, pas d'enveloppe Hydra, timeout court. Utilisé par l'autocomplétion
- * d'adresse branchée sur la Base Adresse Nationale (api-adresse.data.gouv.fr).
- * Ne jamais passer par `useApi()` pour ces domaines tiers.
- */
-export interface HttpExternalOptions {
-    /** Paramètres de query string (encodés par ofetch). */
-    query?: Record<string, string | number | undefined>
-    /** Timeout en millisecondes avant abandon (défaut 5000). */
-    timeoutMs?: number
-}
-
-export async function httpExternal<T>(
-    url: string,
-    opts: HttpExternalOptions = {},
-): Promise<T> {
-    return $fetch<T>(url, {
-        query: opts.query,
-        credentials: 'omit',
-        retry: 0,
-        timeout: opts.timeoutMs ?? 5000,
-    })
-}
@@ -27,9 +27,6 @@ sudo docker compose cp app:/var/www/html/public/maintenance.html public/maintena
 echo "==> Running migrations..."
 sudo docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction

-echo "==> Seeding RBAC system roles (idempotent)..."
-sudo docker compose exec -T -u www-data app php bin/console app:seed-rbac
-
 echo "==> Syncing RBAC permissions catalog..."
 sudo docker compose exec -T -u www-data app php bin/console app:sync-permissions

@@ -1,89 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace DoctrineMigrations;
-
-use Doctrine\DBAL\Schema\Schema;
-use Doctrine\Migrations\AbstractMigration;
-
-/**
- * Auto-generated Migration: Please modify to your needs!
- */
-final class Version20260624153709 extends AbstractMigration
-{
-    public function getDescription(): string
-    {
-        return 'Directory: prestataire entity + website on client/prospect/prestataire + prestataire ownership on contacts/addresses/reports + prospect company-only';
-    }
-
-    public function up(Schema $schema): void
-    {
-        $this->addSql('CREATE TABLE prestataire (id INT GENERATED BY DEFAULT AS IDENTITY NOT NULL, name VARCHAR(255) NOT NULL, email VARCHAR(255) DEFAULT NULL, phone VARCHAR(50) DEFAULT NULL, website VARCHAR(255) DEFAULT NULL, created_at TIMESTAMP(0) WITHOUT TIME ZONE DEFAULT NULL, updated_at TIMESTAMP(0) WITHOUT TIME ZONE DEFAULT NULL, created_by INT DEFAULT NULL, updated_by INT DEFAULT NULL, PRIMARY KEY (id))');
-        $this->addSql('CREATE INDEX IDX_60A26480DE12AB56 ON prestataire (created_by)');
-        $this->addSql('CREATE INDEX IDX_60A2648016FE72E1 ON prestataire (updated_by)');
-        $this->addSql('ALTER TABLE prestataire ADD CONSTRAINT FK_60A26480DE12AB56 FOREIGN KEY (created_by) REFERENCES "user" (id) ON DELETE SET NULL NOT DEFERRABLE');
-        $this->addSql('ALTER TABLE prestataire ADD CONSTRAINT FK_60A2648016FE72E1 FOREIGN KEY (updated_by) REFERENCES "user" (id) ON DELETE SET NULL NOT DEFERRABLE');
-        $this->addSql('ALTER TABLE client ADD website VARCHAR(255) DEFAULT NULL');
-        $this->addSql('ALTER TABLE commercial_report ADD prestataire_id INT DEFAULT NULL');
-        $this->addSql('ALTER TABLE commercial_report ADD CONSTRAINT FK_886919D8BE3DB2B7 FOREIGN KEY (prestataire_id) REFERENCES prestataire (id) ON DELETE CASCADE NOT DEFERRABLE');
-        $this->addSql('CREATE INDEX IDX_886919D8BE3DB2B7 ON commercial_report (prestataire_id)');
-        $this->addSql('ALTER TABLE directory_address ADD prestataire_id INT DEFAULT NULL');
-        $this->addSql('ALTER TABLE directory_address ADD CONSTRAINT FK_6E5D9707BE3DB2B7 FOREIGN KEY (prestataire_id) REFERENCES prestataire (id) ON DELETE CASCADE NOT DEFERRABLE');
-        $this->addSql('CREATE INDEX IDX_6E5D9707BE3DB2B7 ON directory_address (prestataire_id)');
-        $this->addSql('ALTER TABLE directory_contact ADD prestataire_id INT DEFAULT NULL');
-        $this->addSql('ALTER TABLE directory_contact ADD CONSTRAINT FK_2F711EBEBE3DB2B7 FOREIGN KEY (prestataire_id) REFERENCES prestataire (id) ON DELETE CASCADE NOT DEFERRABLE');
-        $this->addSql('CREATE INDEX IDX_2F711EBEBE3DB2B7 ON directory_contact (prestataire_id)');
-
-        // Prospect désormais société-only : on conserve la donnée existante en
-        // recopiant le nom dans la société quand celle-ci est vide, avant de
-        // rendre la colonne obligatoire et de supprimer la colonne name.
-        $this->addSql('ALTER TABLE prospect ADD website VARCHAR(255) DEFAULT NULL');
-        $this->addSql("UPDATE prospect SET company = name WHERE company IS NULL OR company = ''");
-        $this->addSql('ALTER TABLE prospect ALTER company SET NOT NULL');
-        $this->addSql('ALTER TABLE prospect DROP name');
-
-        // Ownership CHECK constraints: chaque ligne appartient à un client,
-        // un prospect OU un prestataire.
-        $this->addSql('ALTER TABLE directory_contact DROP CONSTRAINT chk_contact_owner');
-        $this->addSql('ALTER TABLE directory_contact ADD CONSTRAINT chk_contact_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL OR prestataire_id IS NOT NULL)');
-        $this->addSql('ALTER TABLE directory_address DROP CONSTRAINT chk_address_owner');
-        $this->addSql('ALTER TABLE directory_address ADD CONSTRAINT chk_address_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL OR prestataire_id IS NOT NULL)');
-        $this->addSql('ALTER TABLE commercial_report DROP CONSTRAINT chk_report_owner');
-        $this->addSql('ALTER TABLE commercial_report ADD CONSTRAINT chk_report_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL OR prestataire_id IS NOT NULL)');
-    }
-
-    public function down(Schema $schema): void
-    {
-        // Rétablit les contraintes d'ownership client/prospect (sans prestataire).
-        $this->addSql('ALTER TABLE directory_contact DROP CONSTRAINT chk_contact_owner');
-        $this->addSql('ALTER TABLE directory_address DROP CONSTRAINT chk_address_owner');
-        $this->addSql('ALTER TABLE commercial_report DROP CONSTRAINT chk_report_owner');
-
-        $this->addSql('ALTER TABLE commercial_report DROP CONSTRAINT FK_886919D8BE3DB2B7');
-        $this->addSql('DROP INDEX IDX_886919D8BE3DB2B7');
-        $this->addSql('ALTER TABLE commercial_report DROP prestataire_id');
-        $this->addSql('ALTER TABLE directory_address DROP CONSTRAINT FK_6E5D9707BE3DB2B7');
-        $this->addSql('DROP INDEX IDX_6E5D9707BE3DB2B7');
-        $this->addSql('ALTER TABLE directory_address DROP prestataire_id');
-        $this->addSql('ALTER TABLE directory_contact DROP CONSTRAINT FK_2F711EBEBE3DB2B7');
-        $this->addSql('DROP INDEX IDX_2F711EBEBE3DB2B7');
-        $this->addSql('ALTER TABLE directory_contact DROP prestataire_id');
-
-        $this->addSql('ALTER TABLE directory_contact ADD CONSTRAINT chk_contact_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL)');
-        $this->addSql('ALTER TABLE directory_address ADD CONSTRAINT chk_address_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL)');
-        $this->addSql('ALTER TABLE commercial_report ADD CONSTRAINT chk_report_owner CHECK (client_id IS NOT NULL OR prospect_id IS NOT NULL)');
-
-        $this->addSql('ALTER TABLE prestataire DROP CONSTRAINT FK_60A26480DE12AB56');
-        $this->addSql('ALTER TABLE prestataire DROP CONSTRAINT FK_60A2648016FE72E1');
-        $this->addSql('DROP TABLE prestataire');
-        $this->addSql('ALTER TABLE client DROP website');
-
-        // Restaure la colonne name (recopiée depuis company) puis l'oblige.
-        $this->addSql('ALTER TABLE prospect ADD name VARCHAR(255) DEFAULT NULL');
-        $this->addSql('UPDATE prospect SET name = company');
-        $this->addSql('ALTER TABLE prospect ALTER name SET NOT NULL');
-        $this->addSql('ALTER TABLE prospect DROP website');
-        $this->addSql('ALTER TABLE prospect ALTER company DROP NOT NULL');
-    }
-}
@@ -127,6 +127,7 @@ class AppFixtures extends Fixture

        // Prospects
        $prospectLead = new Prospect();
+        $prospectLead->setName('Marie Dupont');
        $prospectLead->setCompany('Atelier Dupont');
        $prospectLead->setEmail('marie@atelier-dupont.fr');
        $prospectLead->setPhone('06 11 22 33 44');
@@ -144,6 +145,7 @@ class AppFixtures extends Fixture
        $manager->persist($addressLead);

        $prospectQualified = new Prospect();
+        $prospectQualified->setName('Jean Martin');
        $prospectQualified->setCompany('Martin & Fils');
        $prospectQualified->setEmail('contact@martin-fils.fr');
        $prospectQualified->setPhone('07 55 66 77 88');
@@ -161,6 +163,7 @@ class AppFixtures extends Fixture
        $manager->persist($addressQualified);

        $prospectWon = new Prospect();
+        $prospectWon->setName('Sophie Bernard');
        $prospectWon->setCompany('ACME Corp');
        $prospectWon->setEmail('contact@acme.com');
        $prospectWon->setPhone('01 23 45 67 89');
@@ -111,18 +111,9 @@ class AccrueLeaveCommand extends Command
                $previousBalance = null !== $previousPeriod
                    ? $this->balanceRepository->findOneForPeriod($user, AbsenceType::PaidLeave, $previousPeriod)
                    : null;
-
-                if (null !== $previousBalance) {
-                    // Only the days *not yet taken* carry over. Leave is charged
-                    // oldest-first: it first consumes the previous "acquired"
-                    // (N-2) bucket — which expires at roll-over anyway — so only
-                    // days taken beyond that bucket eat into the carry-over.
-                    $carryOver = $previousBalance->getAcquiring()
-                        - max(0.0, $previousBalance->getTaken() - $previousBalance->getAcquired());
-                    $balance->setAcquired(max(0.0, $carryOver));
-                } else {
-                    $balance->setAcquired($profile->getInitialLeaveBalance());
-                }
+                $balance->setAcquired(
+                    null !== $previousBalance ? $previousBalance->getAcquiring() : $profile->getInitialLeaveBalance(),
+                );
            }

            if ($monthKey === $balance->getLastAccruedMonth()) {
@@ -14,9 +14,7 @@ use Symfony\Component\Security\Core\Authorization\Voter\Voter;
 */
 final class PermissionVoter extends Voter
 {
-    // Les codes de permission sont au format module.resource.action où chaque
-    // segment peut contenir des tirets (ex. project-management, time-tracking).
-    private const string PATTERN = '/^[a-z][a-z0-9_-]*(\.[a-z][a-z0-9_-]*)+$/';
+    private const string PATTERN = '/^[a-z][a-z0-9_]*(\.[a-z][a-z0-9_]*)+$/';

    protected function supports(string $attribute, mixed $subject): bool
    {
@@ -38,8 +38,6 @@ final class DirectoryModule implements ModuleInterface
            ['code' => 'directory.clients.manage', 'label' => 'Gérer les clients'],
            ['code' => 'directory.prospects.view', 'label' => 'Voir les prospects'],
            ['code' => 'directory.prospects.manage', 'label' => 'Gérer les prospects'],
-            ['code' => 'directory.providers.view', 'label' => 'Voir les prestataires'],
-            ['code' => 'directory.providers.manage', 'label' => 'Gérer les prestataires'],
        ];
    }
 }
@@ -23,17 +23,17 @@ use Symfony\Component\Serializer\Attribute\Groups;
 #[Auditable]
 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Get(security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Post(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Patch(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Delete(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['address:read']],
    denormalizationContext: ['groups' => ['address:write']],
    order: ['id' => 'ASC'],
 )]
-#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact', 'prestataire' => 'exact'])]
+#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact'])]
 #[ORM\Entity(repositoryClass: DoctrineAddressRepository::class)]
 #[ORM\Table(name: 'directory_address')]
 class Address implements TimestampableInterface, BlamableInterface
@@ -80,11 +80,6 @@ class Address implements TimestampableInterface, BlamableInterface
    #[Groups(['address:read', 'address:write'])]
    private ?Prospect $prospect = null;

-    #[ORM\ManyToOne(targetEntity: Prestataire::class)]
-    #[ORM\JoinColumn(name: 'prestataire_id', referencedColumnName: 'id', nullable: true, onDelete: 'CASCADE')]
-    #[Groups(['address:read', 'address:write'])]
-    private ?Prestataire $prestataire = null;
-
    public function getId(): ?int
    {
        return $this->id;
@@ -185,16 +180,4 @@ class Address implements TimestampableInterface, BlamableInterface

        return $this;
    }
-
-    public function getPrestataire(): ?Prestataire
-    {
-        return $this->prestataire;
-    }
-
-    public function setPrestataire(?Prestataire $prestataire): static
-    {
-        $this->prestataire = $prestataire;
-
-        return $this;
-    }
 }
@@ -25,11 +25,11 @@ use Symfony\Component\Serializer\Attribute\Groups;
 #[Auditable]
 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.clients.view')"),
-        new Get(security: "is_granted('directory.clients.view')"),
-        new Post(security: "is_granted('directory.clients.manage')"),
-        new Patch(security: "is_granted('directory.clients.manage')"),
-        new Delete(security: "is_granted('directory.clients.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['client:read']],
    denormalizationContext: ['groups' => ['client:write']],
@@ -58,10 +58,6 @@ class Client implements ClientInterface, TimestampableInterface, BlamableInterfa
    #[Groups(['client:read', 'client:write'])]
    private ?string $phone = null;

-    #[ORM\Column(length: 255, nullable: true)]
-    #[Groups(['client:read', 'client:write'])]
-    private ?string $website = null;
-
    /** @var Collection<int, ProjectInterface> */
    #[ORM\OneToMany(targetEntity: ProjectInterface::class, mappedBy: 'client')]
    private Collection $projects;
@@ -112,18 +108,6 @@ class Client implements ClientInterface, TimestampableInterface, BlamableInterfa
        return $this;
    }

-    public function getWebsite(): ?string
-    {
-        return $this->website;
-    }
-
-    public function setWebsite(?string $website): static
-    {
-        $this->website = $website;
-
-        return $this;
-    }
-
    /** @return Collection<int, ProjectInterface> */
    public function getProjects(): Collection
    {
@@ -26,17 +26,17 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Get(security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Post(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Patch(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Delete(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['commercial_report:read']],
    denormalizationContext: ['groups' => ['commercial_report:write']],
    order: ['occurredAt' => 'DESC'],
 )]
-#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact', 'prestataire' => 'exact'])]
+#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact'])]
 #[ORM\Entity(repositoryClass: DoctrineCommercialReportRepository::class)]
 #[ORM\Table(name: 'commercial_report')]
 class CommercialReport implements TimestampableInterface
@@ -80,11 +80,6 @@ class CommercialReport implements TimestampableInterface
    #[Groups(['commercial_report:read', 'commercial_report:write'])]
    private ?Prospect $prospect = null;

-    #[ORM\ManyToOne(targetEntity: Prestataire::class)]
-    #[ORM\JoinColumn(name: 'prestataire_id', referencedColumnName: 'id', nullable: true, onDelete: 'CASCADE')]
-    #[Groups(['commercial_report:read', 'commercial_report:write'])]
-    private ?Prestataire $prestataire = null;
-
    /** @var Collection<int, ReportDocument> */
    #[ORM\OneToMany(targetEntity: ReportDocument::class, mappedBy: 'commercialReport', cascade: ['remove'])]
    #[Groups(['commercial_report:read'])]
@@ -184,18 +179,6 @@ class CommercialReport implements TimestampableInterface
        return $this;
    }

-    public function getPrestataire(): ?Prestataire
-    {
-        return $this->prestataire;
-    }
-
-    public function setPrestataire(?Prestataire $prestataire): static
-    {
-        $this->prestataire = $prestataire;
-
-        return $this;
-    }
-
    /** @return Collection<int, ReportDocument> */
    public function getDocuments(): Collection
    {
@@ -23,17 +23,17 @@ use Symfony\Component\Serializer\Attribute\Groups;
 #[Auditable]
 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Get(security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view') or is_granted('directory.providers.view')"),
-        new Post(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Patch(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
-        new Delete(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage') or is_granted('directory.providers.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['contact:read']],
    denormalizationContext: ['groups' => ['contact:write']],
    order: ['lastName' => 'ASC'],
 )]
-#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact', 'prestataire' => 'exact'])]
+#[ApiFilter(SearchFilter::class, properties: ['client' => 'exact', 'prospect' => 'exact'])]
 #[ORM\Entity(repositoryClass: DoctrineContactRepository::class)]
 #[ORM\Table(name: 'directory_contact')]
 class Contact implements TimestampableInterface, BlamableInterface
@@ -80,11 +80,6 @@ class Contact implements TimestampableInterface, BlamableInterface
    #[Groups(['contact:read', 'contact:write'])]
    private ?Prospect $prospect = null;

-    #[ORM\ManyToOne(targetEntity: Prestataire::class)]
-    #[ORM\JoinColumn(name: 'prestataire_id', referencedColumnName: 'id', nullable: true, onDelete: 'CASCADE')]
-    #[Groups(['contact:read', 'contact:write'])]
-    private ?Prestataire $prestataire = null;
-
    public function getId(): ?int
    {
        return $this->id;
@@ -185,16 +180,4 @@ class Contact implements TimestampableInterface, BlamableInterface

        return $this;
    }
-
-    public function getPrestataire(): ?Prestataire
-    {
-        return $this->prestataire;
-    }
-
-    public function setPrestataire(?Prestataire $prestataire): static
-    {
-        $this->prestataire = $prestataire;
-
-        return $this;
-    }
 }
@@ -1,114 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Directory\Domain\Entity;
-
-use ApiPlatform\Metadata\ApiResource;
-use ApiPlatform\Metadata\Delete;
-use ApiPlatform\Metadata\Get;
-use ApiPlatform\Metadata\GetCollection;
-use ApiPlatform\Metadata\Patch;
-use ApiPlatform\Metadata\Post;
-use App\Module\Directory\Infrastructure\Doctrine\DoctrinePrestataireRepository;
-use App\Shared\Domain\Attribute\Auditable;
-use App\Shared\Domain\Contract\BlamableInterface;
-use App\Shared\Domain\Contract\TimestampableInterface;
-use App\Shared\Domain\Trait\TimestampableBlamableTrait;
-use Doctrine\ORM\Mapping as ORM;
-use Symfony\Component\Serializer\Attribute\Groups;
-
-#[Auditable]
-#[ApiResource(
-    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.providers.view')"),
-        new Get(security: "is_granted('directory.providers.view')"),
-        new Post(security: "is_granted('directory.providers.manage')"),
-        new Patch(security: "is_granted('directory.providers.manage')"),
-        new Delete(security: "is_granted('directory.providers.manage')"),
-    ],
-    normalizationContext: ['groups' => ['prestataire:read']],
-    denormalizationContext: ['groups' => ['prestataire:write']],
-    order: ['name' => 'ASC'],
-)]
-#[ORM\Entity(repositoryClass: DoctrinePrestataireRepository::class)]
-#[ORM\Table(name: 'prestataire')]
-class Prestataire implements TimestampableInterface, BlamableInterface
-{
-    use TimestampableBlamableTrait;
-
-    #[ORM\Id]
-    #[ORM\GeneratedValue]
-    #[ORM\Column]
-    #[Groups(['prestataire:read'])]
-    private ?int $id = null;
-
-    #[ORM\Column(length: 255)]
-    #[Groups(['prestataire:read', 'prestataire:write'])]
-    private ?string $name = null;
-
-    #[ORM\Column(length: 255, nullable: true)]
-    #[Groups(['prestataire:read', 'prestataire:write'])]
-    private ?string $email = null;
-
-    #[ORM\Column(length: 50, nullable: true)]
-    #[Groups(['prestataire:read', 'prestataire:write'])]
-    private ?string $phone = null;
-
-    #[ORM\Column(length: 255, nullable: true)]
-    #[Groups(['prestataire:read', 'prestataire:write'])]
-    private ?string $website = null;
-
-    public function getId(): ?int
-    {
-        return $this->id;
-    }
-
-    public function getName(): ?string
-    {
-        return $this->name;
-    }
-
-    public function setName(string $name): static
-    {
-        $this->name = $name;
-
-        return $this;
-    }
-
-    public function getEmail(): ?string
-    {
-        return $this->email;
-    }
-
-    public function setEmail(?string $email): static
-    {
-        $this->email = $email;
-
-        return $this;
-    }
-
-    public function getPhone(): ?string
-    {
-        return $this->phone;
-    }
-
-    public function setPhone(?string $phone): static
-    {
-        $this->phone = $phone;
-
-        return $this;
-    }
-
-    public function getWebsite(): ?string
-    {
-        return $this->website;
-    }
-
-    public function setWebsite(?string $website): static
-    {
-        $this->website = $website;
-
-        return $this;
-    }
-}
@@ -27,20 +27,20 @@ use Symfony\Component\Serializer\Attribute\Groups;
 #[Auditable]
 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.prospects.view')"),
-        new Get(security: "is_granted('directory.prospects.view')"),
-        new Post(security: "is_granted('directory.prospects.manage')"),
-        new Patch(security: "is_granted('directory.prospects.manage')"),
-        new Delete(security: "is_granted('directory.prospects.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
        new Post(
            uriTemplate: '/prospects/{id}/convert',
-            security: "is_granted('directory.prospects.manage')",
+            security: "is_granted('ROLE_ADMIN')",
            processor: ConvertProspectProcessor::class,
        ),
    ],
    normalizationContext: ['groups' => ['prospect:read']],
    denormalizationContext: ['groups' => ['prospect:write']],
-    order: ['company' => 'ASC'],
+    order: ['name' => 'ASC'],
 )]
 #[ApiFilter(SearchFilter::class, properties: ['status' => 'exact'])]
 #[ORM\Entity(repositoryClass: DoctrineProspectRepository::class)]
@@ -57,6 +57,10 @@ class Prospect implements TimestampableInterface, BlamableInterface

    #[ORM\Column(length: 255)]
    #[Groups(['prospect:read', 'prospect:write'])]
+    private ?string $name = null;
+
+    #[ORM\Column(length: 255, nullable: true)]
+    #[Groups(['prospect:read', 'prospect:write'])]
    private ?string $company = null;

    #[ORM\Column(length: 255, nullable: true)]
@@ -67,10 +71,6 @@ class Prospect implements TimestampableInterface, BlamableInterface
    #[Groups(['prospect:read', 'prospect:write'])]
    private ?string $phone = null;

-    #[ORM\Column(length: 255, nullable: true)]
-    #[Groups(['prospect:read', 'prospect:write'])]
-    private ?string $website = null;
-
    #[ORM\Column(type: Types::STRING, length: 32, enumType: ProspectStatus::class)]
    #[Groups(['prospect:read', 'prospect:write'])]
    private ProspectStatus $status = ProspectStatus::New;
@@ -93,12 +93,24 @@ class Prospect implements TimestampableInterface, BlamableInterface
        return $this->id;
    }

+    public function getName(): ?string
+    {
+        return $this->name;
+    }
+
+    public function setName(string $name): static
+    {
+        $this->name = $name;
+
+        return $this;
+    }
+
    public function getCompany(): ?string
    {
        return $this->company;
    }

-    public function setCompany(string $company): static
+    public function setCompany(?string $company): static
    {
        $this->company = $company;

@@ -129,18 +141,6 @@ class Prospect implements TimestampableInterface, BlamableInterface
        return $this;
    }

-    public function getWebsite(): ?string
-    {
-        return $this->website;
-    }
-
-    public function setWebsite(?string $website): static
-    {
-        $this->website = $website;
-
-        return $this;
-    }
-
    public function getStatus(): ProspectStatus
    {
        return $this->status;
@@ -20,14 +20,14 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view')"),
-        new Get(security: "is_granted('directory.clients.view') or is_granted('directory.prospects.view')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
        new Post(
-            security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage')",
+            security: "is_granted('ROLE_ADMIN')",
            processor: ReportDocumentProcessor::class,
            deserialize: false,
        ),
-        new Delete(security: "is_granted('directory.clients.manage') or is_granted('directory.prospects.manage')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['report_document:read']],
    denormalizationContext: ['groups' => ['report_document:write']],
@@ -1,20 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Directory\Domain\Repository;
-
-use App\Module\Directory\Domain\Entity\Prestataire;
-
-interface PrestataireRepositoryInterface
-{
-    public function findById(int $id): ?Prestataire;
-
-    /**
-     * @param array<string, mixed>       $criteria
-     * @param null|array<string, string> $orderBy
-     *
-     * @return Prestataire[]
-     */
-    public function findBy(array $criteria, ?array $orderBy = null, ?int $limit = null, ?int $offset = null): array;
-}
@@ -46,10 +46,9 @@ final readonly class ConvertProspectProcessor implements ProcessorInterface
        }

        $client = new Client();
-        $client->setName((string) $prospect->getCompany());
+        $client->setName($prospect->getCompany() ?: (string) $prospect->getName());
        $client->setEmail($prospect->getEmail());
        $client->setPhone($prospect->getPhone());
-        $client->setWebsite($prospect->getWebsite());

        $this->entityManager->persist($client);

@@ -1,26 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Directory\Infrastructure\Doctrine;
-
-use App\Module\Directory\Domain\Entity\Prestataire;
-use App\Module\Directory\Domain\Repository\PrestataireRepositoryInterface;
-use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
-use Doctrine\Persistence\ManagerRegistry;
-
-/**
- * @extends ServiceEntityRepository<Prestataire>
- */
-final class DoctrinePrestataireRepository extends ServiceEntityRepository implements PrestataireRepositoryInterface
-{
-    public function __construct(ManagerRegistry $registry)
-    {
-        parent::__construct($registry, Prestataire::class);
-    }
-
-    public function findById(int $id): ?Prestataire
-    {
-        return $this->find($id);
-    }
-}
@@ -42,10 +42,9 @@ class ConvertProspectTool

        if (null === $prospect->getConvertedClient()) {
            $client = new Client();
-            $client->setName((string) $prospect->getCompany());
+            $client->setName($prospect->getCompany() ?: (string) $prospect->getName());
            $client->setEmail($prospect->getEmail());
            $client->setPhone($prospect->getPhone());
-            $client->setWebsite($prospect->getWebsite());

            $this->entityManager->persist($client);

@@ -23,7 +23,6 @@ class CreateClientTool
        string $name,
        ?string $email = null,
        ?string $phone = null,
-        ?string $website = null,
    ): string {
        if (!$this->security->isGranted('ROLE_ADMIN')) {
            throw new AccessDeniedException('Access denied: ROLE_ADMIN required.');
@@ -33,7 +32,6 @@ class CreateClientTool
        $client->setName($name);
        $client->setEmail($email);
        $client->setPhone($phone);
-        $client->setWebsite($website);

        $this->entityManager->persist($client);
        $this->entityManager->flush();
@@ -15,7 +15,7 @@ use Symfony\Component\Security\Core\Exception\AccessDeniedException;

 use function sprintf;

-#[McpTool(name: 'create-prospect', description: 'Create a prospect (admin). Only company is required. Status defaults to "new".')]
+#[McpTool(name: 'create-prospect', description: 'Create a prospect (admin). Only name is required. Status defaults to "new".')]
 class CreateProspectTool
 {
    public function __construct(
@@ -24,10 +24,10 @@ class CreateProspectTool
    ) {}

    public function __invoke(
-        string $company,
+        string $name,
+        ?string $company = null,
        ?string $email = null,
        ?string $phone = null,
-        ?string $website = null,
        ?string $status = null,
        ?string $source = null,
        ?string $notes = null,
@@ -37,10 +37,10 @@ class CreateProspectTool
        }

        $prospect = new Prospect();
+        $prospect->setName($name);
        $prospect->setCompany($company);
        $prospect->setEmail($email);
        $prospect->setPhone($phone);
-        $prospect->setWebsite($website);
        $prospect->setSource($source);
        $prospect->setNotes($notes);

@@ -33,10 +33,10 @@ class DeleteProspectTool
            throw new InvalidArgumentException(sprintf('Prospect with ID %d not found.', $id));
        }

-        $company = $prospect->getCompany();
+        $name = $prospect->getName();
        $this->entityManager->remove($prospect);
        $this->entityManager->flush();

-        return json_encode(['success' => true, 'message' => sprintf('Prospect "%s" deleted.', $company)]);
+        return json_encode(['success' => true, 'message' => sprintf('Prospect "%s" deleted.', $name)]);
    }
 }
@@ -37,7 +37,7 @@ class ListProspectsTool
            $criteria['status'] = $statusEnum;
        }

-        $prospects = $this->prospectRepository->findBy($criteria, ['company' => 'ASC']);
+        $prospects = $this->prospectRepository->findBy($criteria, ['name' => 'ASC']);

        return json_encode(array_map(static fn ($prospect) => Serializer::prospect($prospect), $prospects));
    }
@@ -28,7 +28,6 @@ class UpdateClientTool
        ?string $name = null,
        ?string $email = null,
        ?string $phone = null,
-        ?string $website = null,
    ): string {
        if (!$this->security->isGranted('ROLE_ADMIN')) {
            throw new AccessDeniedException('Access denied: ROLE_ADMIN required.');
@@ -48,9 +47,6 @@ class UpdateClientTool
        if (null !== $phone) {
            $client->setPhone($phone);
        }
-        if (null !== $website) {
-            $client->setWebsite($website);
-        }

        $this->entityManager->flush();

@@ -26,10 +26,10 @@ class UpdateProspectTool

    public function __invoke(
        int $id,
+        ?string $name = null,
        ?string $company = null,
        ?string $email = null,
        ?string $phone = null,
-        ?string $website = null,
        ?string $status = null,
        ?string $source = null,
        ?string $notes = null,
@@ -43,6 +43,9 @@ class UpdateProspectTool
            throw new InvalidArgumentException(sprintf('Prospect with ID %d not found.', $id));
        }

+        if (null !== $name) {
+            $prospect->setName($name);
+        }
        if (null !== $company) {
            $prospect->setCompany($company);
        }
@@ -52,9 +55,6 @@ class UpdateProspectTool
        if (null !== $phone) {
            $prospect->setPhone($phone);
        }
-        if (null !== $website) {
-            $prospect->setWebsite($website);
-        }
        if (null !== $status) {
            $statusEnum = ProspectStatus::tryFrom($status);
            if (null === $statusEnum) {
@@ -30,18 +30,18 @@ use Symfony\Component\Validator\Constraints as Assert;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view')"),
-        new Get(security: "is_granted('project-management.projects.view')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
        new Post(
-            security: "is_granted('project-management.projects.manage')",
+            security: "is_granted('ROLE_ADMIN')",
            denormalizationContext: ['groups' => ['project:write', 'project:create']],
        ),
-        new Patch(security: "is_granted('project-management.projects.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
        new Post(
            uriTemplate: '/projects/{id}/switch-workflow',
            uriVariables: ['id' => new Link(fromClass: Project::class)],
-            security: "is_granted('project-management.projects.manage')",
+            security: "is_granted('ROLE_ADMIN')",
            input: false,
            output: SwitchWorkflowOutput::class,
            normalizationContext: ['groups' => ['switch_workflow:read']],
@@ -33,11 +33,11 @@ use Symfony\Component\Validator\Context\ExecutionContextInterface;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.tasks.manage')", processor: TaskNumberProcessor::class),
-        new Patch(security: "is_granted('project-management.tasks.manage')", processor: TaskCalendarProcessor::class),
-        new Delete(security: "is_granted('project-management.tasks.manage')", processor: TaskCalendarProcessor::class),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')", processor: TaskNumberProcessor::class),
+        new Patch(security: "is_granted('ROLE_ADMIN')", processor: TaskCalendarProcessor::class),
+        new Delete(security: "is_granted('ROLE_ADMIN')", processor: TaskCalendarProcessor::class),
    ],
    normalizationContext: ['groups' => ['task:read']],
    denormalizationContext: ['groups' => ['task:write']],
@@ -21,14 +21,14 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.tasks.view')", provider: TaskDocumentProvider::class),
-        new Get(security: "is_granted('project-management.tasks.view')", provider: TaskDocumentProvider::class),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')", provider: TaskDocumentProvider::class),
+        new Get(security: "is_granted('ROLE_USER')", provider: TaskDocumentProvider::class),
        new Post(
-            security: "is_granted('project-management.tasks.manage')",
+            security: "is_granted('ROLE_ADMIN')",
            processor: TaskDocumentProcessor::class,
            deserialize: false,
        ),
-        new Delete(security: "is_granted('project-management.tasks.manage')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_document:read']],
    denormalizationContext: ['groups' => ['task_document:write']],
@@ -16,11 +16,11 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_effort:read']],
    denormalizationContext: ['groups' => ['task_effort:write']],
@@ -19,11 +19,11 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_group:read']],
    denormalizationContext: ['groups' => ['task_group:write']],
@@ -16,11 +16,11 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_priority:read']],
    denormalizationContext: ['groups' => ['task_priority:write']],
@@ -20,11 +20,11 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_recurrence:read']],
    denormalizationContext: ['groups' => ['task_recurrence:write']],
@@ -18,11 +18,11 @@ use Symfony\Component\Validator\Constraints as Assert;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_status:read']],
    denormalizationContext: ['groups' => ['task_status:write']],
@@ -17,11 +17,11 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')"),
    ],
    normalizationContext: ['groups' => ['task_tag:read']],
    denormalizationContext: ['groups' => ['task_tag:write']],
@@ -21,11 +21,11 @@ use Symfony\Component\Validator\Constraints as Assert;

 #[ApiResource(
    operations: [
-        new GetCollection(paginationEnabled: false, security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Get(security: "is_granted('project-management.projects.view') or is_granted('project-management.tasks.view')"),
-        new Post(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Patch(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')"),
-        new Delete(security: "is_granted('project-management.projects.manage') or is_granted('project-management.tasks.manage')", processor: WorkflowDeleteProcessor::class),
+        new GetCollection(paginationEnabled: false, security: "is_granted('ROLE_USER')"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_ADMIN')"),
+        new Patch(security: "is_granted('ROLE_ADMIN')"),
+        new Delete(security: "is_granted('ROLE_ADMIN')", processor: WorkflowDeleteProcessor::class),
    ],
    normalizationContext: ['groups' => ['workflow:read']],
    denormalizationContext: ['groups' => ['workflow:write']],
@@ -31,13 +31,13 @@ use Symfony\Component\Serializer\Attribute\Groups;

 #[ApiResource(
    operations: [
-        new GetCollection(security: "is_granted('time-tracking.entries.view')"),
+        new GetCollection(security: "is_granted('ROLE_USER')"),
        new GetCollection(
            name: 'time_entries_range',
            uriTemplate: '/time_entries/range',
            description: 'List time entries for a bounded date range without pagination (used by the time-tracking calendar)',
            paginationEnabled: false,
-            security: "is_granted('time-tracking.entries.view')",
+            security: "is_granted('ROLE_USER')",
        ),
        new GetCollection(
            name: 'active_time_entry',
@@ -45,12 +45,12 @@ use Symfony\Component\Serializer\Attribute\Groups;
            provider: ActiveTimeEntryProvider::class,
            description: 'Get the active timer for the current user',
            paginationEnabled: false,
-            security: "is_granted('time-tracking.entries.view')",
+            security: "is_granted('ROLE_USER')",
        ),
-        new Get(security: "is_granted('time-tracking.entries.view')"),
-        new Post(security: "is_granted('time-tracking.entries.manage')"),
-        new Patch(security: "is_granted('ROLE_ADMIN') or (is_granted('time-tracking.entries.manage') and object.getUser() == user)"),
-        new Delete(security: "is_granted('ROLE_ADMIN') or (is_granted('time-tracking.entries.manage') and object.getUser() == user)"),
+        new Get(security: "is_granted('ROLE_USER')"),
+        new Post(security: "is_granted('ROLE_USER')"),
+        new Patch(security: "is_granted('ROLE_ADMIN') or object.getUser() == user"),
+        new Delete(security: "is_granted('ROLE_ADMIN') or object.getUser() == user"),
    ],
    normalizationContext: ['groups' => ['time_entry:read']],
    denormalizationContext: ['groups' => ['time_entry:write']],
@@ -26,13 +26,15 @@ final class TimeTrackingModule implements ModuleInterface
    /**
     * Permissions RBAC fin du Module TimeTracking (2.1).
     *
+     * Additif : alimente le catalogue RBAC. La sécurité des opérations API
+     * reste en ROLE_USER (non recâblée ici).
+     *
     * @return list<array{code: string, label: string}>
     */
    public static function permissions(): array
    {
        return [
            ['code' => 'time-tracking.entries.view', 'label' => 'Voir les saisies de temps'],
-            ['code' => 'time-tracking.entries.manage', 'label' => 'Gérer les saisies de temps'],
            ['code' => 'time-tracking.entries.export', 'label' => 'Exporter les saisies de temps'],
        ];
    }
@@ -1,96 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Shared\Infrastructure\ApiPlatform\Serializer;
-
-use ApiPlatform\Metadata\IriConverterInterface;
-use Doctrine\ORM\EntityManagerInterface;
-use Symfony\Component\Serializer\Normalizer\DenormalizerAwareInterface;
-use Symfony\Component\Serializer\Normalizer\DenormalizerAwareTrait;
-use Symfony\Component\Serializer\Normalizer\DenormalizerInterface;
-use Throwable;
-
-use function array_key_exists;
-use function is_string;
-
-/**
- * Modular monolith: cross-module relations are typed with a Shared\Domain\Contract
- * interface (e.g. UserInterface, TaskTagInterface) instead of the concrete entity,
- * to keep modules decoupled. Doctrine maps those back to the concrete entity through
- * resolve_target_entities.
- *
- * API Platform denormalizes *single* interface relations fine (the concrete class is
- * derived from the IRI), but blows up on *collections*: the collection value type stays
- * the interface, which is not a registered API resource, so no normalizer supports it
- * and the request fails with NotNormalizableValueException.
- *
- * This denormalizer bridges that gap for every contract interface, reusing Doctrine's
- * resolve_target_entities mapping (no per-entity config):
- *  - a string value is an IRI -> resolved through the IriConverter
- *  - an array value is an embedded object -> denormalized into the concrete entity
- */
-final class ContractRelationDenormalizer implements DenormalizerInterface, DenormalizerAwareInterface
-{
-    use DenormalizerAwareTrait;
-
-    private const CONTRACT_NAMESPACE = 'App\Shared\Domain\Contract\\';
-
-    /** @var array<string, ?class-string> */
-    private array $resolved = [];
-
-    public function __construct(
-        private readonly IriConverterInterface $iriConverter,
-        private readonly EntityManagerInterface $entityManager,
-    ) {}
-
-    public function supportsDenormalization(mixed $data, string $type, ?string $format = null, array $context = []): bool
-    {
-        return null !== $this->concreteClassFor($type);
-    }
-
-    public function denormalize(mixed $data, string $type, ?string $format = null, array $context = []): ?object
-    {
-        $concrete = $this->concreteClassFor($type);
-        if (null === $concrete) {
-            return null;
-        }
-
-        if (is_string($data)) {
-            return $this->iriConverter->getResourceFromIri($data, $context);
-        }
-
-        // Embedded object payload: denormalize into the resolved concrete entity.
-        return $this->denormalizer->denormalize($data, $concrete, $format, $context);
-    }
-
-    public function getSupportedTypes(?string $format): array
-    {
-        // Support depends on the runtime-resolved Doctrine mapping, so it cannot be
-        // statically cached by the serializer.
-        return ['object' => false];
-    }
-
-    /**
-     * @return ?class-string the concrete entity a contract interface resolves to, or null
-     */
-    private function concreteClassFor(string $type): ?string
-    {
-        if (array_key_exists($type, $this->resolved)) {
-            return $this->resolved[$type];
-        }
-
-        if (!str_starts_with($type, self::CONTRACT_NAMESPACE) || !interface_exists($type)) {
-            return $this->resolved[$type] = null;
-        }
-
-        try {
-            $name = $this->entityManager->getClassMetadata($type)->getName();
-        } catch (Throwable) {
-            // Not a Doctrine-mapped (resolve_target_entities) interface.
-            return $this->resolved[$type] = null;
-        }
-
-        return $this->resolved[$type] = ($name !== $type ? $name : null);
-    }
-}
@@ -366,11 +366,10 @@ final class Serializer
    public static function client(Client $c): array
    {
        return [
-            'id'      => $c->getId(),
-            'name'    => $c->getName(),
-            'email'   => $c->getEmail(),
-            'phone'   => $c->getPhone(),
-            'website' => $c->getWebsite(),
+            'id'    => $c->getId(),
+            'name'  => $c->getName(),
+            'email' => $c->getEmail(),
+            'phone' => $c->getPhone(),
        ];
    }

@@ -383,10 +382,10 @@ final class Serializer

        return [
            'id'              => $p->getId(),
+            'name'            => $p->getName(),
            'company'         => $p->getCompany(),
            'email'           => $p->getEmail(),
            'phone'           => $p->getPhone(),
-            'website'         => $p->getWebsite(),
            'status'          => $p->getStatus()->value,
            'statusLabel'     => $p->getStatus()->label(),
            'source'          => $p->getSource(),
@@ -1,120 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Tests\Functional\Command;
-
-use App\Module\Absence\Domain\Entity\AbsenceBalance;
-use App\Module\Absence\Domain\Enum\AbsenceType;
-use App\Module\Absence\Infrastructure\Command\AccrueLeaveCommand;
-use App\Module\Absence\Infrastructure\Doctrine\DoctrineAbsenceBalanceRepository;
-use App\Module\Core\Domain\Entity\User;
-use DateTimeImmutable;
-use Doctrine\ORM\EntityManagerInterface;
-use Symfony\Bundle\FrameworkBundle\Test\KernelTestCase;
-use Symfony\Component\Console\Tester\CommandTester;
-
-/**
- * Covers the period roll-over: when a new reference period opens, the previous
- * period's "en cours d'acquisition" (N) becomes the new "acquired" (N-1), but
- * only for the days that were not already taken.
- *
- * @internal
- */
-class AccrueLeaveCommandTest extends KernelTestCase
-{
-    private EntityManagerInterface $em;
-    private DoctrineAbsenceBalanceRepository $balances;
-
-    protected function setUp(): void
-    {
-        self::bootKernel();
-        $this->em       = self::getContainer()->get(EntityManagerInterface::class);
-        $this->balances = self::getContainer()->get(DoctrineAbsenceBalanceRepository::class);
-    }
-
-    /**
-     * Tristan's real case: 9.75 accruing, 1 day taken, nothing previously
-     * acquired → the day taken eats into the carry-over, so 8.75 rolls over
-     * (not 9.75).
-     */
-    public function testCarryOverDeductsTakenDays(): void
-    {
-        $user = $this->createEmployee();
-        $this->seedPreviousBalance($user, acquired: 0.0, acquiring: 9.75, taken: 1.0);
-
-        $this->runForJune2026();
-
-        $rolled = $this->balances->findOneForPeriod($user, AbsenceType::PaidLeave, '2026-2027');
-        self::assertNotNull($rolled);
-        self::assertEqualsWithDelta(8.75, $rolled->getAcquired(), 0.0001);
-    }
-
-    /**
-     * Leave is charged oldest-first: the 3 days taken come out of the expiring
-     * N-2 "acquired" bucket (5), so the full 10 accruing days carry over intact.
-     */
-    public function testCarryOverChargesOldestBucketFirst(): void
-    {
-        $user = $this->createEmployee();
-        $this->seedPreviousBalance($user, acquired: 5.0, acquiring: 10.0, taken: 3.0);
-
-        $this->runForJune2026();
-
-        $rolled = $this->balances->findOneForPeriod($user, AbsenceType::PaidLeave, '2026-2027');
-        self::assertNotNull($rolled);
-        self::assertEqualsWithDelta(10.0, $rolled->getAcquired(), 0.0001);
-    }
-
-    /** No day taken → the whole accruing bucket carries over. */
-    public function testFullCarryOverWhenNothingTaken(): void
-    {
-        $user = $this->createEmployee();
-        $this->seedPreviousBalance($user, acquired: 0.0, acquiring: 10.0, taken: 0.0);
-
-        $this->runForJune2026();
-
-        $rolled = $this->balances->findOneForPeriod($user, AbsenceType::PaidLeave, '2026-2027');
-        self::assertNotNull($rolled);
-        self::assertEqualsWithDelta(10.0, $rolled->getAcquired(), 0.0001);
-    }
-
-    private function createEmployee(): User
-    {
-        $user = new User();
-        $user->setUsername('accrue-test-'.uniqid());
-        $user->setPassword('x');
-        $user->setRoles(['ROLE_USER']);
-        $user->setIsEmployee(true);
-        $user->setHireDate(new DateTimeImmutable('2024-01-01'));
-        $user->setReferencePeriodStart('06-01');
-        $user->setAnnualLeaveDays(25.0);
-        $user->setWorkTimeRatio(1.0);
-        $user->setInitialLeaveBalance(0.0);
-        $this->em->persist($user);
-        $this->em->flush();
-
-        return $user;
-    }
-
-    private function seedPreviousBalance(User $user, float $acquired, float $acquiring, float $taken): void
-    {
-        $balance = new AbsenceBalance();
-        $balance->setUser($user);
-        $balance->setType(AbsenceType::PaidLeave);
-        $balance->setPeriod('2025-2026');
-        $balance->setAcquired($acquired);
-        $balance->setAcquiring($acquiring);
-        $balance->setTaken($taken);
-        $this->em->persist($balance);
-        $this->em->flush();
-    }
-
-    private function runForJune2026(): void
-    {
-        $command = self::getContainer()->get(AccrueLeaveCommand::class);
-        $tester  = new CommandTester($command);
-        $tester->execute(['--month' => '2026-06']);
-        self::assertSame(0, $tester->getStatusCode());
-    }
-}
@@ -28,6 +28,7 @@ class ProspectConversionTest extends KernelTestCase
    public function testConvertCreatesClientAndFlagsProspectWon(): void
    {
        $prospect = new Prospect();
+        $prospect->setName('Lead Test');
        $prospect->setCompany('Lead Company '.uniqid());
        $prospect->setEmail('lead@example.com');
        $prospect->setPhone('06 00 00 00 00');
@@ -46,7 +47,7 @@ class ProspectConversionTest extends KernelTestCase
    public function testConvertIsIdempotent(): void
    {
        $prospect = new Prospect();
-        $prospect->setCompany('Idempotent Lead');
+        $prospect->setName('Idempotent Lead');
        $prospect->setStatus(ProspectStatus::New);
        $this->em->persist($prospect);
        $this->em->flush();
@@ -1,82 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Tests\Functional\Module\ProjectManagement;
-
-use App\Module\Core\Domain\Entity\Permission;
-use App\Module\Core\Domain\Entity\User;
-use Doctrine\ORM\EntityManagerInterface;
-use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
-
-/**
- * Vérifie que les ressources métier sont bien gardées par les permissions RBAC
- * granulaires et non plus par le simple ROLE_USER.
- *
- * @internal
- */
-final class ProjectAccessControlTest extends WebTestCase
-{
-    public function testAuthenticatedUserWithoutPermissionIsForbidden(): void
-    {
-        $client = self::createClient();
-        $em     = self::getContainer()->get(EntityManagerInterface::class);
-
-        $user = $this->createPlainUser($em, 'proj-noperm-'.uniqid());
-        $em->flush();
-        $client->loginUser($user);
-
-        $client->request('GET', '/api/projects');
-
-        self::assertResponseStatusCodeSame(403);
-    }
-
-    public function testUserWithViewPermissionCanListProjects(): void
-    {
-        $client = self::createClient();
-        $em     = self::getContainer()->get(EntityManagerInterface::class);
-
-        $permission = $em->getRepository(Permission::class)->findOneBy(['code' => 'project-management.projects.view']);
-        self::assertInstanceOf(Permission::class, $permission, 'Le catalogue de permissions doit contenir project-management.projects.view (lancer app:sync-permissions).');
-
-        $user = $this->createPlainUser($em, 'proj-view-'.uniqid());
-        $user->addDirectPermission($permission);
-        $em->flush();
-        $client->loginUser($user);
-
-        $client->request('GET', '/api/projects');
-
-        self::assertResponseIsSuccessful();
-    }
-
-    public function testViewPermissionDoesNotGrantWrite(): void
-    {
-        $client = self::createClient();
-        $em     = self::getContainer()->get(EntityManagerInterface::class);
-
-        $permission = $em->getRepository(Permission::class)->findOneBy(['code' => 'project-management.projects.view']);
-        self::assertInstanceOf(Permission::class, $permission);
-
-        $user = $this->createPlainUser($em, 'proj-noWrite-'.uniqid());
-        $user->addDirectPermission($permission);
-        $em->flush();
-        $client->loginUser($user);
-
-        $client->request('POST', '/api/projects', server: [
-            'CONTENT_TYPE' => 'application/ld+json',
-        ], content: json_encode(['name' => 'Should be denied']));
-
-        self::assertResponseStatusCodeSame(403);
-    }
-
-    private function createPlainUser(EntityManagerInterface $em, string $username): User
-    {
-        $user = new User();
-        $user->setUsername($username);
-        $user->setPassword('x');
-        $user->setRoles(['ROLE_USER']);
-        $em->persist($user);
-
-        return $user;
-    }
-}
@@ -1,119 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Tests\Functional\Module\Shared;
-
-use App\Module\Core\Domain\Entity\User;
-use App\Module\ProjectManagement\Domain\Entity\Project;
-use App\Module\ProjectManagement\Domain\Entity\TaskTag;
-use Doctrine\ORM\EntityManagerInterface;
-use Symfony\Bundle\FrameworkBundle\KernelBrowser;
-use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
-
-/**
- * Regression: cross-module to-many relations are typed with a Shared contract
- * interface (TaskTagInterface[], UserInterface[]). API Platform cannot
- * denormalize a collection whose value type is an interface (no resource
- * normalizer supports it), so every POST/PATCH carrying such a collection
- * blew up with NotNormalizableValueException.
- *
- * @internal
- */
-final class InterfaceCollectionDenormalizationTest extends WebTestCase
-{
-    protected function tearDown(): void
-    {
-        $conn = self::getContainer()->get(EntityManagerInterface::class)->getConnection();
-        $conn->executeStatement("DELETE FROM time_entry_task_type WHERE time_entry_id IN (SELECT id FROM time_entry WHERE title = 'iface-denorm-te')");
-        $conn->executeStatement("DELETE FROM time_entry WHERE title = 'iface-denorm-te'");
-        $conn->executeStatement("DELETE FROM task_collaborator WHERE task_id IN (SELECT id FROM task WHERE title = 'iface-denorm-task')");
-        $conn->executeStatement("DELETE FROM task WHERE title = 'iface-denorm-task'");
-        parent::tearDown();
-    }
-
-    public function testPostTimeEntryWithInterfaceTypedTags(): void
-    {
-        $client = self::createClient();
-        $em     = self::getContainer()->get(EntityManagerInterface::class);
-        $this->loginAdmin($client);
-
-        $userId = $this->adminId($em);
-        $tagId  = $this->aTaskTagId($em);
-
-        $client->request('POST', '/api/time_entries', server: [
-            'CONTENT_TYPE' => 'application/json',
-            'HTTP_ACCEPT'  => 'application/json',
-        ], content: json_encode([
-            'title'     => 'iface-denorm-te',
-            'startedAt' => '2026-06-22T10:00:00+02:00',
-            'stoppedAt' => '2026-06-22T11:00:00+02:00',
-            'user'      => '/api/users/'.$userId,
-            'tags'      => ['/api/task_tags/'.$tagId],
-        ]));
-
-        self::assertResponseStatusCodeSame(201, $client->getResponse()->getContent() ?: '');
-        $data = json_decode($client->getResponse()->getContent(), true);
-        self::assertCount(1, $data['tags'] ?? []);
-    }
-
-    public function testPostTaskWithInterfaceTypedCollaborators(): void
-    {
-        $client = self::createClient();
-        $em     = self::getContainer()->get(EntityManagerInterface::class);
-        $this->loginAdmin($client);
-
-        $userId    = $this->adminId($em);
-        $projectId = $this->aProjectId($em);
-
-        $client->request('POST', '/api/tasks', server: [
-            'CONTENT_TYPE' => 'application/json',
-            'HTTP_ACCEPT'  => 'application/json',
-        ], content: json_encode([
-            'title'         => 'iface-denorm-task',
-            'project'       => '/api/projects/'.$projectId,
-            'collaborators' => ['/api/users/'.$userId],
-        ]));
-
-        self::assertResponseStatusCodeSame(201, $client->getResponse()->getContent() ?: '');
-        $data = json_decode($client->getResponse()->getContent(), true);
-        self::assertCount(1, $data['collaborators'] ?? []);
-    }
-
-    private function loginAdmin(KernelBrowser $client): void
-    {
-        $em   = self::getContainer()->get(EntityManagerInterface::class);
-        $user = $em->getRepository(User::class)->findOneBy(['username' => 'admin']);
-        self::assertInstanceOf(User::class, $user);
-        $client->loginUser($user);
-    }
-
-    private function adminId(EntityManagerInterface $em): int
-    {
-        $user = $em->getRepository(User::class)->findOneBy(['username' => 'admin']);
-        self::assertInstanceOf(User::class, $user);
-
-        return $user->getId();
-    }
-
-    private function aTaskTagId(EntityManagerInterface $em): int
-    {
-        $tag = $em->getRepository(TaskTag::class)->findOneBy([]);
-        if (null === $tag) {
-            $tag = new TaskTag();
-            $tag->setLabel('iface-denorm-tag');
-            $em->persist($tag);
-            $em->flush();
-        }
-
-        return $tag->getId();
-    }
-
-    private function aProjectId(EntityManagerInterface $em): int
-    {
-        $project = $em->getRepository(Project::class)->findOneBy([]);
-        self::assertInstanceOf(Project::class, $project);
-
-        return $project->getId();
-    }
-}
@@ -28,6 +28,7 @@ final class ConvertProspectProcessorTest extends KernelTestCase
        $em = self::getContainer()->get(EntityManagerInterface::class);

        $prospect = new Prospect();
+        $prospect->setName('Atelier Test');
        $prospect->setCompany('Atelier Test SARL');
        $em->persist($prospect);