chore: bump version to v0.1.80

fix : split deficit weeks by weekdays count when no hours worked
When a week spans two months and has zero worked hours (e.g. RTT all week), the proportional split by worked minutes gave 0 to both months. Now falls back to splitting by weekday count.
2026-04-08 06:47:00 +00:00 · 2026-04-08 08:17:07 +02:00 · 2026-04-03 13:18:40 +00:00 · 2026-04-03 13:18:32 +00:00 · 2026-04-02 12:34:10 +00:00 · 2026-04-02 14:34:00 +02:00
71 changed files with 3042 additions and 137 deletions
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -24,7 +24,10 @@
      "Bash(npx xlsx-cli:*)",
      "Bash(cat /home/m-tristan/.claude/projects/-home-m-tristan-workspace-SIRH/4b53d9d7-d8ae-451f-a5cc-5d4fd55f2eef/tool-results/toolu_019hng9Cu2m9wiNACuC2Wm3F.json | python3 -c \"import json,sys; data=json.load\\(sys.stdin\\); print\\(data[0]['text']\\)\" 2>/dev/null | head -2000)",
      "Bash(pip3 install:*)",
-      "Bash(find:*)"
+      "Bash(find:*)",
+      "Bash(git add:*)",
+      "Bash(git commit:*)",
+      "Bash(python3:*)"
    ]
  }
 }
--- a/.dockerignore
+++ b/.dockerignore
@@ -0,0 +1,23 @@
+.git
+.gitea
+.env.local
+.env.test
+docker/
+deploy/docker/docker-compose.prod.yml
+deploy/docker/deploy.sh
+deploy/docker/.env.example
+frontend/node_modules
+frontend/.nuxt
+frontend/.output
+var/
+LOG/
+docs/
+doc/
+tests/
+*.sql
+*.xlsx
+*.png
+*.md
+!composer.lock
+!symfony.lock
+!frontend/package-lock.json
--- a/.gitea/workflows/build-docker.yml
+++ b/.gitea/workflows/build-docker.yml
@@ -0,0 +1,30 @@
+name: Build & Push Docker Image
+
+on:
+  push:
+    tags:
+      - "v*"
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Login to Gitea Registry
+        run: |
+          echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.malio.fr -u "${{ gitea.repository_owner }}" --password-stdin
+
+      - name: Build Docker image
+        run: |
+          docker build \
+            -f deploy/docker/Dockerfile.prod \
+            -t gitea.malio.fr/malio-dev/sirh:${{ github.ref_name }} \
+            -t gitea.malio.fr/malio-dev/sirh:latest \
+            .
+
+      - name: Push Docker image
+        run: |
+          docker push gitea.malio.fr/malio-dev/sirh:${{ github.ref_name }}
+          docker push gitea.malio.fr/malio-dev/sirh:latest
--- a/.gitea/workflows/release-artefact.yml
+++ b/.gitea/workflows/release-artefact.yml
@@ -1,65 +0,0 @@
-name: Build Release Artefact
-
-on:
-  push:
-    tags:
-      - "v*"
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Setup PHP
-        uses: shivammathur/setup-php@v2
-        with:
-          php-version: "8.4"
-          extensions: mbstring, intl, pdo_pgsql, xml, curl, zip, gd
-
-      - name: Setup Node
-        uses: actions/setup-node@v4
-        with:
-          node-version: "lts/*"
-
-      - name: Install backend deps (prod)
-        env:
-          APP_ENV: prod
-          APP_DEBUG: "0"
-        run: composer install --no-dev --optimize-autoloader --no-interaction --no-scripts
-
-      - name: Build frontend (static)
-        run: |
-          cd frontend
-          npm ci
-          CI=1 NUXT_TELEMETRY_DISABLED=1 NUXT_PUBLIC_API_BASE=/api NUXT_PUBLIC_APP_BASE=/ npm run generate
-          test -f .output/public/index.html
-
-      - name: Build artefact
-        shell: bash
-        run: |
-          set -euo pipefail
-          mkdir -p release
-          tar -czf "release/sirh-${GITHUB_REF_NAME}.tar.gz" \
-            bin \
-            config \
-            migrations \
-            public \
-            src \
-            templates \
-            vendor \
-            composer.json \
-            composer.lock \
-            symfony.lock \
-            frontend/.output
-
-      - name: Create Release
-        uses: softprops/action-gh-release@v2
-        with:
-          files: release/sirh-${{ github.ref_name }}.tar.gz
-        env:
-          GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }}
--- a/.idea/data_source_mapping.xml
+++ b/.idea/data_source_mapping.xml
@@ -1,6 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<project version="4">
-  <component name="DataSourcePerFileMappings">
-    <file url="file://$APPLICATION_CONFIG_DIR$/consoles/db/9cad43df-2147-4989-b7a4-443067034884/console_3.sql" value="9cad43df-2147-4989-b7a4-443067034884" />
-  </component>
-</project>
--- a/.idea/db-forest-config.xml
+++ b/.idea/db-forest-config.xml
@@ -1,5 +1,15 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <project version="4">
+  <component name="db-forest-configuration">
+    <data version="2">.
+	----------------------------------------
+	1:0:9cad43df-2147-4989-b7a4-443067034884
+	2:0:ae622167-c834-4e7b-87a5-c1721036f5dc
+	3:0:f407a514-c6b4-4b26-9555-445a85892502
+	4:0:09e221b8-067a-488b-9c1d-4e155a333079
+	5:0:9d8c1ad3-2491-4642-964a-666003c14128
+		.</data>
+  </component>
  <component name="db-tree-configuration">
    <option name="data" value="----------------------------------------&#10;1:0:9cad43df-2147-4989-b7a4-443067034884&#10;2:0:ae622167-c834-4e7b-87a5-c1721036f5dc&#10;3:0:f407a514-c6b4-4b26-9555-445a85892502&#10;4:0:09e221b8-067a-488b-9c1d-4e155a333079&#10;" />
  </component>
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -2,6 +2,7 @@

 ## Mandatory Rules
 - Any functional change MUST update `doc/` in the same intervention
+- Any functional change MUST update the in-app documentation (`frontend/data/documentation-content.ts`) in the same intervention
 - At the end of every feature addition or functional modification, update this CLAUDE.md to reflect new patterns, rules, or conventions introduced

 ## Commands
@@ -72,12 +73,28 @@
 - File uploads: `deserialize: false` on Post, access file via RequestStack
 - Upload dir: `%kernel.project_dir%/var/uploads`

+## Audit Logging
+- All processors that modify entities impacting calculations (heures, absences, contrats, RTT) MUST inject `AuditLogger` and log create/update/delete actions
+- `AuditLogger::log()` persists without flushing — the processor's `flush()` handles both the data change and the audit entry atomically
+- Audit logs are accessible only via `ROLE_SUPER_ADMIN` (hidden role, added manually in DB)
+- Documentation: `doc/audit-logging.md`
+
 ## Backend Conventions
 - Prefer explicit DTOs over associative arrays
 - Business rules in backend (providers/processors/services), frontend is display/interaction only
 - Keep backend PHP DTOs aligned with frontend TS DTOs (`frontend/services/dto/*`)
 - Update unit tests when constructor/service signatures change

+## In-App Documentation
+- Content: `frontend/data/documentation-content.ts` — structured TypeScript data with all user-facing documentation
+- Types: `frontend/types/documentation.ts` — DocSection, DocArticle, DocBlock
+- Composable: `frontend/composables/useDocumentation.ts` — role-based filtering (employee < site_manager < admin)
+- Components: `frontend/components/documentation/` — DocumentationPage, DocumentationSection, DocumentationArticle
+- Page: `frontend/pages/documentation.vue`
+- 3 access levels: `employee` (ROLE_SELF), `site_manager` (ROLE_USER), `admin` (ROLE_ADMIN) — cumulative (admin sees everything)
+- Each section/article has a `requiredLevel` that controls visibility
+- When adding or modifying a feature, update the corresponding section in `documentation-content.ts`
+
 ## Language
 - UI is in French
 - User communicates in French
--- a/README.md
+++ b/README.md
@@ -1,4 +1,5 @@
 # SIRH
+
 Application de gestion des absences employée

 ## Importer un dump de prod en dev
@@ -17,3 +18,8 @@ Remplie la base avec le dump :
 ```shell
 docker compose exec -T db psql -U root -d sirh < sirh.sql
 ```
+
+## Mettre SUPER_ADMIN sur un user
+```sql
+UPDATE users SET roles = '["ROLE_ADMIN","ROLE_SUPER_ADMIN"]' WHERE username = 'emilie';
+```
--- a/config/version.yaml
+++ b/config/version.yaml
@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.1.65'
+    app.version: '0.1.80'
--- a/deploy/docker/.env.example
+++ b/deploy/docker/.env.example
@@ -0,0 +1,25 @@
+# Symfony
+APP_ENV=prod
+APP_DEBUG=0
+APP_SECRET=change-me
+
+# Database (use host.docker.internal to reach bare-metal PostgreSQL)
+DATABASE_URL="postgresql://sirh_user:password@host.docker.internal:5432/sirh?serverVersion=16&charset=utf8"
+
+# JWT
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE=change-me
+JWT_COOKIE_SECURE=1
+JWT_COOKIE_SAMESITE=lax
+JWT_TOKEN_TTL=86400
+JWT_COOKIE_TTL=86400
+
+# CORS
+CORS_ALLOW_ORIGIN='^https?://sirh\.malio-dev\.fr$'
+
+# App
+DEFAULT_URI=https://sirh.malio-dev.fr
+APP_SHARE_DIR=var/share
+RTT_START_DATE=2026-02-23
+HOLIDAY_URL="https://calendrier.api.gouv.fr/jours-feries/"
--- a/deploy/docker/Dockerfile.prod
+++ b/deploy/docker/Dockerfile.prod
@@ -0,0 +1,80 @@
+# --- Stage 1: Build backend ---
+FROM php:8.4-cli AS backend-build
+
+RUN apt-get update && apt-get install -y \
+        libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \
+        unzip curl git \
+    && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
+
+WORKDIR /app
+COPY composer.json composer.lock symfony.lock ./
+RUN APP_ENV=prod APP_DEBUG=0 composer install --no-dev --optimize-autoloader --no-scripts --no-interaction
+
+COPY bin bin/
+COPY config config/
+COPY migrations migrations/
+COPY public public/
+COPY src src/
+COPY templates templates/
+
+# --- Stage 2: Build frontend ---
+FROM node:lts-alpine AS frontend-build
+
+WORKDIR /app/frontend
+COPY frontend/package.json frontend/package-lock.json ./
+RUN npm ci
+
+COPY frontend/ ./
+ENV CI=1 \
+    NUXT_TELEMETRY_DISABLED=1 \
+    NUXT_PUBLIC_API_BASE=/api \
+    NUXT_PUBLIC_APP_BASE=/
+RUN npm run generate
+
+# --- Stage 3: Production image ---
+FROM php:8.4-fpm AS production
+
+RUN apt-get update && apt-get install -y \
+        libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \
+        nginx supervisor \
+    && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \
+    && rm -rf /var/lib/apt/lists/*
+
+# PHP production config
+RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
+
+# PHP-FPM: forward worker output to stderr for docker logs
+RUN echo "catch_workers_output = yes" >> /usr/local/etc/php-fpm.d/www.conf \
+    && echo "decorate_workers_output = no" >> /usr/local/etc/php-fpm.d/www.conf
+
+# Nginx: log to stdout/stderr
+RUN ln -sf /dev/stdout /var/log/nginx/access.log \
+    && ln -sf /dev/stderr /var/log/nginx/error.log
+
+# Remove default nginx site
+RUN rm -f /etc/nginx/sites-enabled/default
+
+# Configs
+COPY deploy/docker/supervisord.conf /etc/supervisor/conf.d/app.conf
+COPY deploy/docker/nginx.conf /etc/nginx/sites-enabled/sirh.conf
+
+# Backend from stage 1
+COPY --from=backend-build /app /var/www/html
+
+# Frontend from stage 2
+COPY --from=frontend-build /app/frontend/.output/public /var/www/html/frontend/.output/public
+
+# Symfony needs a .env file to boot (variables are overridden by env_file in docker-compose)
+RUN echo "APP_ENV=prod" > /var/www/html/.env
+
+# Permissions
+RUN mkdir -p /var/www/html/var \
+    && chown -R www-data:www-data /var/www/html/var
+
+WORKDIR /var/www/html
+EXPOSE 80
+
+CMD ["supervisord", "-n", "-c", "/etc/supervisor/conf.d/app.conf"]
--- a/deploy/docker/deploy.sh
+++ b/deploy/docker/deploy.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")"
+
+TAG="${1:-latest}"
+export SIRH_IMAGE_TAG="$TAG"
+
+echo "==> Deploying sirh:${TAG}..."
+
+echo "==> Enabling maintenance mode..."
+touch maintenance.on
+
+echo "==> Pulling image..."
+docker compose pull
+
+echo "==> Starting container..."
+docker compose up -d
+
+echo "==> Waiting for container to be ready..."
+sleep 3
+
+echo "==> Running migrations..."
+docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction
+
+echo "==> Clearing cache..."
+docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
+docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
+
+echo "==> Disabling maintenance mode..."
+rm -f maintenance.on
+
+VERSION=$(docker compose exec -T app cat config/version.yaml | grep 'app.version' | awk -F"'" '{print $2}')
+echo "==> Deployed v${VERSION}"
--- a/deploy/docker/docker-compose.prod.yml
+++ b/deploy/docker/docker-compose.prod.yml
@@ -0,0 +1,13 @@
+services:
+  app:
+    image: gitea.malio.fr/malio-dev/sirh:${SIRH_IMAGE_TAG:-latest}
+    container_name: sirh-app
+    env_file: .env
+    ports:
+      - "8080:80"
+    volumes:
+      - ./config/jwt:/var/www/html/config/jwt:ro
+      - ./uploads:/var/www/html/var/uploads
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    restart: unless-stopped
--- a/deploy/docker/nginx.conf
+++ b/deploy/docker/nginx.conf
@@ -0,0 +1,46 @@
+server {
+    listen 80;
+    server_name _;
+
+    root /var/www/html/frontend/.output/public;
+    index index.html;
+
+    access_log /dev/stdout;
+    error_log /dev/stderr;
+
+    location ^~ /api/ {
+        root /var/www/html/public;
+        try_files $uri /index.php?$query_string;
+    }
+
+    location ^~ /bundles/ {
+        root /var/www/html/public;
+        try_files $uri =404;
+    }
+
+    location = /api/login_check {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_param SCRIPT_NAME /index.php;
+        fastcgi_param PATH_INFO /login_check;
+        fastcgi_param REQUEST_URI /login_check;
+        fastcgi_pass 127.0.0.1:9000;
+    }
+
+    location ~ ^/index\.php(/|$) {
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME /var/www/html/public/index.php;
+        fastcgi_param DOCUMENT_ROOT /var/www/html/public;
+        fastcgi_pass 127.0.0.1:9000;
+        internal;
+    }
+
+    location ~ \.php$ {
+        return 404;
+    }
+
+    location / {
+        try_files $uri $uri/ /index.html;
+    }
+}
--- a/deploy/docker/supervisord.conf
+++ b/deploy/docker/supervisord.conf
@@ -0,0 +1,28 @@
+[supervisord]
+nodaemon=true
+user=root
+logfile=/dev/null
+logfile_maxbytes=0
+pidfile=/var/run/supervisord.pid
+
+[program:php-fpm]
+command=php-fpm -F
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+stopasgroup=true
+stopsignal=QUIT
+
+[program:nginx]
+command=nginx -g "daemon off;"
+autostart=true
+autorestart=true
+stdout_logfile=/dev/stdout
+stdout_logfile_maxbytes=0
+stderr_logfile=/dev/stderr
+stderr_logfile_maxbytes=0
+stopasgroup=true
+stopsignal=QUIT
--- a/deploy/maintenance.html
+++ b/deploy/maintenance.html
@@ -0,0 +1,50 @@
+<!DOCTYPE html>
+<html lang="fr">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Maintenance en cours</title>
+    <style>
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body {
+            font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+            background: #f3f4f6;
+            display: flex;
+            align-items: center;
+            justify-content: center;
+            min-height: 100vh;
+            color: #1f2937;
+        }
+        .container {
+            text-align: center;
+            padding: 3rem;
+            background: white;
+            border-radius: 12px;
+            box-shadow: 0 4px 24px rgba(0, 0, 0, 0.08);
+            max-width: 500px;
+            width: 90%;
+        }
+        .icon {
+            font-size: 4rem;
+            margin-bottom: 1.5rem;
+        }
+        h1 {
+            font-size: 1.5rem;
+            margin-bottom: 0.75rem;
+            color: #111827;
+        }
+        p {
+            font-size: 1rem;
+            color: #6b7280;
+            line-height: 1.6;
+        }
+    </style>
+</head>
+<body>
+    <div class="container">
+        <div class="icon">&#128736;</div>
+        <h1>Maintenance en cours</h1>
+        <p>L'application est temporairement indisponible pour mise a jour. Elle sera de retour dans quelques instants.</p>
+    </div>
+</body>
+</html>
--- a/deploy/nginx/sirh-docker.conf
+++ b/deploy/nginx/sirh-docker.conf
@@ -0,0 +1,29 @@
+server {
+    listen 80;
+    server_name sirh.malio-dev.fr;
+
+    root /var/www/sirh/public;
+
+    # Maintenance mode : si le fichier maintenance.on existe, renvoyer la page 503
+    if (-f /var/www/sirh/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
--- a/doc/audit-logging.md
+++ b/doc/audit-logging.md
@@ -0,0 +1,57 @@
+# Journal des actions (Audit Log)
+
+## Objectif
+
+Tracer les actions utilisateurs pour diagnostiquer rapidement les problèmes de calcul signalés.
+Quand un utilisateur signale une incohérence dans ses heures, RTT ou congés, le journal permet de voir
+exactement ce qui a été modifié, par qui, et quand.
+
+## Accès
+
+- **Rôle requis** : `ROLE_SUPER_ADMIN` (rôle caché, non visible dans l'interface de gestion des utilisateurs)
+- **Ajout du rôle** : directement en base de données
+  ```sql
+  UPDATE users SET roles = '["ROLE_ADMIN","ROLE_SUPER_ADMIN"]' WHERE username = 'xxx';
+  ```
+- **Page** : `/audit-logs` (lien "Journal" dans la sidebar, visible uniquement avec le rôle)
+
+## Actions tracées
+
+| Processor | Entité | Actions |
+|---|---|---|
+| `AbsenceWriteProcessor` | Absence | create, delete |
+| `WorkHourBulkUpsertProcessor` | WorkHour | create, update, delete |
+| `WorkHourSiteValidationProcessor` | WorkHour | site_validate |
+| `WorkHourBulkValidationProcessor` | WorkHour | validate |
+| `WorkHourBulkSiteValidationProcessor` | WorkHour | site_validate |
+| `EmployeeWriteProcessor` | Employee | create, update (changement contrat) |
+| `ContractSuspensionWriteProcessor` | ContractSuspension | create, update |
+| `EmployeeRttPaymentProcessor` | EmployeeRttPayment | update |
+| `EmployeeFractionedDaysProcessor` | EmployeeLeaveBalance | update |
+
+## Données stockées
+
+Chaque entrée contient :
+- **employee** : l'employé concerné (FK, nullable)
+- **username** : l'utilisateur qui a effectué l'action
+- **action** : type d'action (create, update, delete, validate, site_validate)
+- **entityType** : type d'entité (work_hour, absence, employee, etc.)
+- **description** : description lisible en français
+- **changes** : diff JSON `{old: {...}, new: {...}}` avec les anciennes/nouvelles valeurs
+- **affectedDate** : date de travail ou début d'absence (pour filtrage par période)
+- **createdAt** : horodatage de l'action
+
+## Filtres disponibles
+
+- Par employé
+- Par plage de dates (date affectée)
+- Par type d'entité
+
+## Pagination
+
+Les résultats sont paginés par 50 entrées. L'API retourne `{items, total, page, perPage}` et accepte un query param `page`.
+
+## Convention
+
+Tout nouveau processor traitant des entités impactant les calculs (heures, absences, contrats, RTT)
+doit intégrer le service `AuditLogger` et logger les actions create/update/delete.
--- a/doc/deployment-docker.md
+++ b/doc/deployment-docker.md
@@ -0,0 +1,363 @@
+# Deploiement Docker — SIRH
+
+## Pre-requis
+
+### Docker
+
+```bash
+# Ubuntu
+sudo apt update
+sudo apt install -y ca-certificates curl gnupg
+sudo install -m 0755 -d /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
+echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
+sudo apt update
+sudo apt install -y docker-ce docker-ce-cli containerd.io docker-compose-plugin
+sudo usermod -aG docker $USER
+```
+
+Se deconnecter/reconnecter pour que le groupe `docker` prenne effet.
+
+### Nginx
+
+```bash
+sudo apt install -y nginx
+sudo systemctl enable nginx
+sudo systemctl start nginx
+```
+
+### PostgreSQL
+
+PostgreSQL tourne dans un conteneur Docker separe (voir le repo `infra-postgres`).
+Il doit etre installe et accessible avant de deployer SIRH.
+
+Creer la base de donnees pour SIRH :
+
+```bash
+cd /var/www/postgres
+docker compose exec postgres psql -U admin
+```
+
+```sql
+-- Si le user n'existe pas encore
+CREATE USER malio WITH PASSWORD 'motdepasse';
+
+-- Creer la base
+CREATE DATABASE sirh_prod OWNER malio;
+\q
+```
+
+---
+
+## Premiere installation (nouvelle machine)
+
+Guide complet pour mettre en ligne SIRH sur une machine vierge. Inclut les pre-requis, la BDD et l'app.
+
+### 1. Installer les pre-requis
+
+Installer Docker, Nginx et PostgreSQL (voir section Pre-requis ci-dessus).
+
+### 2. Creer le dossier de deploiement
+
+```bash
+sudo mkdir -p /var/www/sirh
+sudo chown -R $(whoami):$(whoami) /var/www/sirh
+cd /var/www/sirh
+```
+
+### 3. Se connecter au registry Docker de Gitea
+
+```bash
+docker login gitea.malio.fr
+```
+
+- **Username** : le nom d'utilisateur du compte organisation Gitea `MALIO-DEV`
+- **Password** : le token REGISTRY_TOKEN dispo dans le bitwarden
+
+Le login est sauvegarde dans `~/.docker/config.json`, pas besoin de le refaire a chaque deploiement.
+
+### 4. Creer les fichiers de deploiement
+
+Creer `docker-compose.yml` :
+
+```yaml
+services:
+  app:
+    image: gitea.malio.fr/malio-dev/sirh:${SIRH_IMAGE_TAG:-latest}
+    container_name: sirh-app
+    env_file: .env
+    ports:
+      - "8080:80"
+    volumes:
+      - ./config/jwt:/var/www/html/config/jwt:ro
+      - ./uploads:/var/www/html/var/uploads
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    restart: unless-stopped
+```
+
+Creer `deploy.sh` :
+
+```bash
+#!/usr/bin/env bash
+set -euo pipefail
+
+cd "$(dirname "$0")"
+
+TAG="${1:-latest}"
+export SIRH_IMAGE_TAG="$TAG"
+
+echo "==> Deploying sirh:${TAG}..."
+
+echo "==> Pulling image..."
+docker compose pull
+
+echo "==> Starting container..."
+docker compose up -d
+
+echo "==> Waiting for container to be ready..."
+sleep 3
+
+echo "==> Running migrations..."
+docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate --no-interaction
+
+echo "==> Clearing cache..."
+docker compose exec -T -u www-data app php bin/console cache:clear --env=prod
+docker compose exec -T -u www-data app php bin/console cache:warmup --env=prod
+
+VERSION=$(docker compose exec -T app cat config/version.yaml | grep 'app.version' | awk -F"'" '{print $2}')
+echo "==> Deployed v${VERSION}"
+```
+
+Rendre executable :
+
+```bash
+chmod +x deploy.sh
+```
+
+### 5. Configurer l'environnement
+
+Creer `.env` avec les variables suivantes :
+
+```env
+# Symfony
+APP_ENV=prod
+APP_DEBUG=0
+APP_SECRET=<generer avec: openssl rand -hex 32>
+
+# Database (host.docker.internal = la machine hote, ou le PG tourne en Docker)
+DATABASE_URL="postgresql://malio:password@host.docker.internal:5432/sirh_prod?serverVersion=16&charset=utf8"
+
+# JWT
+JWT_SECRET_KEY=%kernel.project_dir%/config/jwt/private.pem
+JWT_PUBLIC_KEY=%kernel.project_dir%/config/jwt/public.pem
+JWT_PASSPHRASE=<generer avec: openssl rand -hex 32>
+JWT_COOKIE_SECURE=1
+JWT_COOKIE_SAMESITE=lax
+JWT_TOKEN_TTL=86400
+JWT_COOKIE_TTL=86400
+
+# CORS
+CORS_ALLOW_ORIGIN='^https?://sirh\.malio-dev\.fr$'
+
+# App
+DEFAULT_URI=https://sirh.malio-dev.fr
+APP_SHARE_DIR=var/share
+RTT_START_DATE=2026-02-23
+HOLIDAY_URL="https://calendrier.api.gouv.fr/jours-feries/"
+```
+
+### 6. Generer les cles JWT
+
+```bash
+mkdir -p config/jwt
+openssl genpkey -algorithm RSA -out config/jwt/private.pem -pkeyopt rsa_keygen_bits:4096
+openssl rsa -pubout -in config/jwt/private.pem -out config/jwt/public.pem
+```
+
+Rendre les cles lisibles par le conteneur (www-data = uid 33) :
+
+```bash
+sudo chown 33:33 config/jwt/private.pem config/jwt/public.pem
+sudo chmod 644 config/jwt/private.pem config/jwt/public.pem
+```
+
+### 7. Creer le dossier uploads
+
+```bash
+mkdir -p uploads
+```
+
+### 8. Configurer Nginx systeme
+
+Creer `/etc/nginx/sites-available/sirh.conf` :
+
+```nginx
+server {
+    listen 80;
+    server_name sirh.malio-dev.fr;
+
+    root /var/www/sirh/public;
+
+    # Maintenance mode
+    if (-f /var/www/sirh/maintenance.on) {
+        return 503;
+    }
+
+    error_page 503 @maintenance;
+
+    location @maintenance {
+        rewrite ^(.*)$ /maintenance.html break;
+    }
+
+    location = /maintenance.html {
+        internal;
+    }
+
+    location / {
+        proxy_pass http://127.0.0.1:8080;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+}
+```
+
+Copier la page de maintenance et activer le site :
+
+```bash
+cp deploy/maintenance.html /var/www/sirh/public/maintenance.html
+sudo ln -sf /etc/nginx/sites-available/sirh.conf /etc/nginx/sites-enabled/sirh.conf
+sudo nginx -t && sudo systemctl reload nginx
+```
+
+### 9. Deployer
+
+```bash
+./deploy.sh
+```
+
+### 10. Importer les donnees (optionnel)
+
+Si tu as un dump SQL a importer :
+
+```bash
+# Depuis ton PC, envoyer le dump vers le serveur
+scp sirh.sql user@serveur:/tmp/sirh.sql
+
+# Sur le serveur, vider la base puis importer
+cd /var/www/postgres
+docker compose exec -T postgres psql -U malio sirh_prod -c "DROP SCHEMA public CASCADE; CREATE SCHEMA public;"
+docker compose exec -T postgres psql -U malio sirh_prod < /tmp/sirh.sql
+
+# Creer les tables manquantes (si le dump a des erreurs de syntaxe)
+cd /var/www/sirh
+docker compose exec -u www-data app php bin/console doctrine:schema:update --force --env=prod
+
+# Nettoyer
+rm /tmp/sirh.sql
+```
+
+### Structure finale du dossier
+
+```
+/var/www/sirh/
+├── docker-compose.yml
+├── deploy.sh
+├── .env
+├── config/jwt/
+│   ├── private.pem
+│   └── public.pem
+├── public/
+│   └── maintenance.html
+└── uploads/
+```
+
+---
+
+## Deployer une nouvelle version
+
+Quand l'app est deja installee, deployer une mise a jour :
+
+```bash
+cd /var/www/sirh
+./deploy.sh           # deploie la derniere version (latest)
+./deploy.sh v0.1.61   # deploie une version specifique
+```
+
+Le script active automatiquement la maintenance pendant le deploy et la desactive a la fin.
+
+---
+
+## Maintenance manuelle
+
+Activer la maintenance (sans deployer) :
+
+```bash
+cd /var/www/sirh
+touch maintenance.on
+```
+
+Desactiver :
+
+```bash
+rm maintenance.on
+```
+
+---
+
+## Rollback
+
+### Image seule (pas de changement de schema BDD)
+
+```bash
+./deploy.sh v0.1.60
+```
+
+### Avec rollback de migration
+
+```bash
+# 1. Rollback schema (pendant que la version actuelle tourne encore)
+docker compose exec -T -u www-data app php bin/console doctrine:migrations:migrate prev --no-interaction
+# 2. Deployer l'ancienne version
+./deploy.sh v0.1.60
+```
+
+---
+
+## Voir les logs
+
+```bash
+cd /var/www/sirh
+docker compose logs -f            # tous les logs
+docker compose logs -f --tail=100 # 100 dernieres lignes
+```
+
+Logs Symfony :
+
+```bash
+docker compose exec app cat var/log/prod.log
+```
+
+---
+
+## Migration depuis l'ancien deploiement (tar.gz)
+
+Si l'application tourne deja en bare metal :
+
+1. Installer Docker (voir pre-requis)
+2. Creer le dossier `/var/www/sirh-docker/` (ne pas ecraser l'ancien)
+3. Copier les fichiers existants :
+   ```bash
+   cp /var/www/sirh/.env /var/www/sirh-docker/.env
+   cp -a /var/www/sirh/config/jwt /var/www/sirh-docker/config/jwt
+   cp -a /var/www/sirh/var/uploads /var/www/sirh-docker/uploads
+   ```
+4. Creer `docker-compose.yml` et `deploy.sh` dans `/var/www/sirh-docker/` (voir etape 4 ci-dessus)
+5. Editer `/var/www/sirh-docker/.env` : changer `DATABASE_URL` pour utiliser `host.docker.internal` au lieu de `127.0.0.1`
+6. Se connecter au registry Gitea (voir etape 3 ci-dessus)
+7. Mettre a jour Nginx systeme avec la conf reverse proxy (voir etape 8 ci-dessus)
+8. Arreter l'ancien PHP-FPM : `sudo systemctl stop php8.4-fpm`
+9. Deployer : `cd /var/www/sirh-docker && ./deploy.sh`
+10. Verifier que tout marche, puis renommer le dossier : `mv /var/www/sirh-docker /var/www/sirh`
--- a/doc/functional-rules.md
+++ b/doc/functional-rules.md
@@ -245,6 +245,7 @@ Tous les filtres checkbox sont cochés par défaut à l'ouverture du drawer.
      - pour `FORFAIT`:
        - pris: basé sur toutes les absences (demi-journées incluses)
        - restants = acquis - pris (borné à 0)
+        - paiement congés N-1: saisie RH via `PATCH /employees/{id}/paid-leave-days` (body: `paidLeaveDays`, `year`). Stocké dans `employee_leave_balances.paid_leave_days`. Les jours payés réduisent le stock N-1 **avant** l'attribution des jours pris : `disponible_N-1 = max(0, acquis_N-1 - payés)`, puis `pris_N-1 = min(disponible_N-1, total_pris)`, surplus pris basculé sur N. Reste à prendre N-1 = `max(0, disponible_N-1 - pris_N-1)`. Uniquement pour les contrats forfait.
      - report annuel:
        - le reliquat (`restants`) de l'exercice précédent est reporté dans les acquis de l'exercice courant
        - pour `CDI`/`CDD` non forfait: report séparé jours + samedis
@@ -274,8 +275,9 @@ Tous les filtres checkbox sont cochés par défaut à l'ouverture du drawer.
      - total mensuel des minutes de récupération
      - compteur global exercice = `report N-1 + acquis N`
    - attribution mensuelle des semaines:
-      - une semaine ISO est affichée une seule fois, dans le mois qui contient le **samedi** de cette semaine
-      - si le weekend tombe en début de mois suivant, c'est le mois suivant qui porte la semaine
+      - une semaine ISO qui chevauche deux mois est affichée dans **les deux mois**, avec les valeurs réparties proportionnellement aux minutes travaillées de chaque portion
+      - le calcul des heures supplémentaires reste hebdomadaire (seuils 35h/39h/43h appliqués sur la semaine entière), seul l'affichage est scindé
+      - exemple: S14 lundi-mardi en mars, mercredi-dimanche en avril → la S14 apparaît en mars (avec la part des heures de lun-mar) et en avril (avec la part mer-dim)
    - logique de calcul:
      - base identique aux calculs d'heures supplémentaires de la vue semaine Heures
      - minutes de récupération hebdomadaires = `HS totales + bonus 25% + bonus 50%`
--- a/doc/rtt-rollover.md
+++ b/doc/rtt-rollover.md
@@ -32,9 +32,9 @@ Principe:

 ## 4) Attribution mensuelle des semaines

- une semaine ISO est affichee une seule fois, dans le mois qui contient le **samedi** de cette semaine
- si le weekend tombe en debut du mois suivant, c'est ce mois qui porte la semaine
- pas de prorata: la totalite des minutes de recuperation de la semaine est comptee dans un seul mois
+- une semaine ISO qui chevauche deux mois est affichee dans **les deux mois**, avec les valeurs reparties proportionnellement aux minutes travaillees de chaque portion
+- le calcul des heures supplementaires reste hebdomadaire (seuils 35h/39h/43h appliques sur la semaine entiere), seul l'affichage est scinde
+- exemple: S14 lundi-mardi en mars, mercredi-dimanche en avril → la S14 apparait en mars (part lun-mar) et en avril (part mer-dim)

 ## 5) Table cible

--- a/frontend/components/documentation/DocumentationArticle.vue
+++ b/frontend/components/documentation/DocumentationArticle.vue
@@ -0,0 +1,26 @@
+<template>
+    <article :id="`doc-${article.id}`" class="scroll-mt-6">
+        <h3 class="text-lg font-bold text-primary-500 mb-3">{{ article.title }}</h3>
+        <div class="space-y-3">
+            <template v-for="(block, idx) in article.blocks" :key="idx">
+                <p v-if="block.type === 'paragraph'" class="text-sm text-neutral-700 leading-relaxed">
+                    {{ block.content }}
+                </p>
+                <ul v-else-if="block.type === 'list'" class="list-disc list-inside space-y-1 text-sm text-neutral-700 pl-2">
+                    <li v-for="(item, i) in block.content.split('\n')" :key="i">{{ item }}</li>
+                </ul>
+                <div v-else-if="block.type === 'note'" class="bg-tertiary-500 border-l-4 border-primary-500 p-3 rounded-r-md">
+                    <p class="text-sm text-neutral-700 leading-relaxed">{{ block.content }}</p>
+                </div>
+            </template>
+        </div>
+    </article>
+</template>
+
+<script setup lang="ts">
+import type { DocArticle } from '~/types/documentation'
+
+defineProps<{
+    article: DocArticle
+}>()
+</script>
--- a/frontend/components/documentation/DocumentationPage.vue
+++ b/frontend/components/documentation/DocumentationPage.vue
@@ -0,0 +1,67 @@
+<template>
+    <div class="h-full flex gap-8">
+        <!-- Table des matières -->
+        <nav class="w-64 flex-shrink-0 overflow-y-auto pr-4 border-r border-neutral-200">
+            <h1 class="text-xl font-bold text-primary-500 mb-6">Documentation</h1>
+            <div v-for="section in visibleSections" :key="section.id" class="mb-4">
+                <div class="flex items-center gap-2 mb-1">
+                    <Icon :name="section.icon" size="18" class="text-neutral-500"/>
+                    <span class="text-sm font-semibold text-neutral-700">{{ section.title }}</span>
+                </div>
+                <ul class="pl-7 space-y-0.5">
+                    <li v-for="article in section.articles" :key="article.id">
+                        <button
+                            class="text-xs text-neutral-500 hover:text-primary-500 text-left w-full py-0.5 transition-colors"
+                            :class="activeArticleId === article.id ? 'text-primary-500 font-bold' : ''"
+                            @click="scrollToArticle(article.id)"
+                        >
+                            {{ article.title }}
+                        </button>
+                    </li>
+                </ul>
+            </div>
+        </nav>
+
+        <!-- Contenu -->
+        <div ref="contentRef" class="flex-1 overflow-y-auto pr-4">
+            <DocumentationSection
+                v-for="section in visibleSections"
+                :key="section.id"
+                :section="section"
+            />
+        </div>
+    </div>
+</template>
+
+<script setup lang="ts">
+const { visibleSections, activeArticleId, scrollToArticle } = useDocumentation()
+const contentRef = ref<HTMLElement | null>(null)
+
+onMounted(() => {
+    if (!contentRef.value) return
+
+    const observer = new IntersectionObserver(
+        (entries) => {
+            for (const entry of entries) {
+                if (entry.isIntersecting) {
+                    const id = entry.target.id.replace('doc-', '')
+                    activeArticleId.value = id
+                    break
+                }
+            }
+        },
+        {
+            root: contentRef.value,
+            rootMargin: '-10% 0px -80% 0px',
+            threshold: 0,
+        },
+    )
+
+    nextTick(() => {
+        const articles = contentRef.value?.querySelectorAll('[id^="doc-"]')
+        articles?.forEach(el => observer.observe(el))
+    })
+
+    onUnmounted(() => observer.disconnect())
+})
+</script>
--- a/frontend/components/documentation/DocumentationSection.vue
+++ b/frontend/components/documentation/DocumentationSection.vue
@@ -0,0 +1,23 @@
+<template>
+    <section class="mb-10">
+        <div class="flex items-center gap-3 border-b-2 border-primary-500 pb-3 mb-6">
+            <Icon :name="section.icon" size="28" class="text-primary-500"/>
+            <h2 class="text-xl font-bold text-primary-500">{{ section.title }}</h2>
+        </div>
+        <div class="space-y-8 pl-2">
+            <DocumentationArticle
+                v-for="article in section.articles"
+                :key="article.id"
+                :article="article"
+            />
+        </div>
+    </section>
+</template>
+
+<script setup lang="ts">
+import type { DocSection } from '~/types/documentation'
+
+defineProps<{
+    section: DocSection
+}>()
+</script>
--- a/frontend/components/employees/LeaveTab.vue
+++ b/frontend/components/employees/LeaveTab.vue
@@ -32,6 +32,18 @@
            <p v-if="isForfaitRule" class="col-start-3 p-[10px] border-r-primary-500 bg-primary-500 text-white"><span class="uppercase font-semibold">Reste à prendre :</span>
                {{ formatCount(summary?.previousYearRemainingDays) }} Jours
            </p>
+            <div v-if="isForfaitRule" class="col-start-4 p-[10px] flex gap-7 items-center">
+                <div>
+                    <span class="uppercase font-semibold">Année n-1 payés : </span>
+                    <span> {{ formatCount(summary?.previousYearPaidDays) }} Jours</span>
+                </div>
+                <button
+                    class="flex items-center"
+                    @click="openPaidLeaveDrawer"
+                >
+                    <Icon name="mdi:edit-box" size="24"/>
+                </button>
+            </div>
            <div v-if="!isForfaitRule" class="col-start-4 p-[10px] flex gap-7 items-center">
                <div>
                    <span class="uppercase font-semibold">Fractionné acquis : </span>
@@ -112,6 +124,39 @@
                </div>
            </form>
        </AppDrawer>
+        <AppDrawer v-model="isPaidLeaveDrawerOpen" title="Congés N-1 payés">
+            <form class="space-y-4" @submit.prevent="handleSubmitPaidLeave">
+                <div>
+                    <label class="text-md font-semibold text-neutral-700" for="paid-leave-days">
+                        Nombre de jours <span class="text-red-600">*</span>
+                    </label>
+                    <input
+                        id="paid-leave-days"
+                        v-model="paidLeaveForm.days"
+                        type="number"
+                        step="0.5"
+                        min="0"
+                        class="mt-2 w-full rounded-md border border-neutral-300 px-3 py-2 text-md text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
+                    />
+                </div>
+
+                <div class="flex justify-end gap-3 pt-2">
+                    <button
+                        type="button"
+                        class="rounded-lg border border-neutral-200 px-4 py-2 text-md font-semibold text-neutral-700 hover:bg-neutral-100"
+                        @click="isPaidLeaveDrawerOpen = false"
+                    >
+                        Annuler
+                    </button>
+                    <button
+                        type="submit"
+                        class="rounded-lg bg-primary-500 px-4 py-2 text-md font-semibold text-white hover:bg-secondary-500"
+                    >
+                        Enregistrer
+                    </button>
+                </div>
+            </form>
+        </AppDrawer>
    </section>
 </template>

@@ -136,11 +181,15 @@ const props = defineProps<{

 const emit = defineEmits<{
    (event: 'update-fractioned-days', days: number): void
+    (event: 'update-paid-leave-days', days: number): void
 }>()

 const isFractionedDrawerOpen = ref(false)
 const fractionedForm = reactive({days: 0})

+const isPaidLeaveDrawerOpen = ref(false)
+const paidLeaveForm = reactive({days: 0})
+
 const openFractionedDrawer = () => {
    fractionedForm.days = props.summary?.fractionedDays ?? 0
    isFractionedDrawerOpen.value = true
@@ -153,6 +202,18 @@ const handleSubmitFractioned = () => {
    isFractionedDrawerOpen.value = false
 }

+const openPaidLeaveDrawer = () => {
+    paidLeaveForm.days = props.summary?.previousYearPaidDays ?? 0
+    isPaidLeaveDrawerOpen.value = true
+}
+
+const handleSubmitPaidLeave = () => {
+    const value = Number(paidLeaveForm.days)
+    if (Number.isNaN(value) || value < 0) return
+    emit('update-paid-leave-days', value)
+    isPaidLeaveDrawerOpen.value = false
+}
+
 const monthLabels = [
    'Janvier',
    'Fevrier',
--- a/frontend/components/employees/RttTab.vue
+++ b/frontend/components/employees/RttTab.vue
@@ -30,7 +30,7 @@
                class="rounded-md bg-primary-500 px-8 py-2 font-bold text-white hover:bg-primary-600"
                @click="openPaymentDrawer"
            >
-                + Payer les RRT
+                + Payer les RTT
            </button>
        </div>
    </div>
--- a/frontend/composables/useDocumentation.ts
+++ b/frontend/composables/useDocumentation.ts
@@ -0,0 +1,39 @@
+import { documentationSections } from '~/data/documentation-content'
+import type { DocAccessLevel, DocSection } from '~/types/documentation'
+
+const LEVEL_HIERARCHY: Record<DocAccessLevel, number> = {
+  employee: 0,
+  site_manager: 1,
+  admin: 2,
+}
+
+function getUserLevel(roles: string[]): number {
+  if (roles.includes('ROLE_ADMIN') || roles.includes('ROLE_SUPER_ADMIN')) return 2
+  if (roles.includes('ROLE_USER')) return 1
+  return 0
+}
+
+export function useDocumentation() {
+  const auth = useAuthStore()
+  const userLevel = computed(() => getUserLevel(auth.user?.roles ?? []))
+
+  const visibleSections = computed<DocSection[]>(() => {
+    return documentationSections
+      .filter(s => LEVEL_HIERARCHY[s.requiredLevel] <= userLevel.value)
+      .map(s => ({
+        ...s,
+        articles: s.articles.filter(a => LEVEL_HIERARCHY[a.requiredLevel] <= userLevel.value),
+      }))
+      .filter(s => s.articles.length > 0)
+  })
+
+  const activeArticleId = ref<string | null>(null)
+
+  const scrollToArticle = (articleId: string) => {
+    activeArticleId.value = articleId
+    const el = document.getElementById(`doc-${articleId}`)
+    el?.scrollIntoView({ behavior: 'smooth', block: 'start' })
+  }
+
+  return { visibleSections, activeArticleId, scrollToArticle }
+}
--- a/frontend/composables/useEmployeeLeave.ts
+++ b/frontend/composables/useEmployeeLeave.ts
@@ -4,7 +4,7 @@ import type { EmployeeLeaveSummary } from '~/services/dto/employee-leave-summary
 import type { Employee } from '~/services/dto/employee'
 import { CONTRACT_TYPES } from '~/services/dto/contract'
 import { listAbsences } from '~/services/absences'
-import { getEmployeeLeaveSummary, updateFractionedDays } from '~/services/employee-leave-summary'
+import { getEmployeeLeaveSummary, updateFractionedDays, updatePaidLeaveDays } from '~/services/employee-leave-summary'
 import { listPublicHolidays } from '~/services/public-holidays'

 export const useEmployeeLeave = (employee: Ref<Employee | null>, reloadEmployee: () => Promise<void>) => {
@@ -57,6 +57,13 @@ export const useEmployeeLeave = (employee: Ref<Employee | null>, reloadEmployee:
    await reloadEmployee()
  }

+  const submitPaidLeaveDays = async (days: number) => {
+    if (!employee.value) return
+    const year = leaveSummary.value?.year ?? undefined
+    await updatePaidLeaveDays(employee.value.id, days, year)
+    await reloadEmployee()
+  }
+
  return {
    employeeAbsences,
    leaveSummary,
@@ -65,6 +72,7 @@ export const useEmployeeLeave = (employee: Ref<Employee | null>, reloadEmployee:
    leaveDataLoaded,
    loadLeaveData,
    resetLoaded,
-    submitFractionedDays
+    submitFractionedDays,
+    submitPaidLeaveDays
  }
 }
--- a/frontend/data/documentation-content.ts
+++ b/frontend/data/documentation-content.ts
@@ -0,0 +1,568 @@
+import type { DocSection } from '~/types/documentation'
+
+export const documentationSections: DocSection[] = [
+  // ============================================================
+  // EMPLOYEE LEVEL
+  // ============================================================
+  {
+    id: 'connexion',
+    title: 'Connexion et navigation',
+    requiredLevel: 'employee',
+    icon: 'mdi:login',
+    articles: [
+      {
+        id: 'login',
+        title: 'Se connecter',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Pour accéder à l\'application, rendez-vous sur la page de connexion et saisissez vos identifiants.' },
+          { type: 'list', content: 'Saisissez votre nom d\'utilisateur\nSaisissez votre mot de passe\nCliquez sur le bouton "Connexion"' },
+          { type: 'note', content: 'Si vous ne parvenez pas à vous connecter, contactez votre administrateur RH. Votre compte a peut-être été verrouillé.' },
+        ],
+      },
+      {
+        id: 'navigation',
+        title: 'Naviguer dans la vue jour',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'La vue jour est votre écran principal. Elle affiche les heures de travail pour une date donnée.' },
+          { type: 'list', content: 'Boutons "Hier" / "Aujourd\'hui" / "Demain" pour naviguer rapidement\nSélecteur de date pour choisir une date spécifique\nFiltrage par site si vous avez accès à plusieurs sites' },
+          { type: 'paragraph', content: 'Seuls les employés ayant un contrat actif à la date sélectionnée sont affichés.' },
+        ],
+      },
+      {
+        id: 'perimetre',
+        title: 'Périmètre d\'accès',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Votre accès dépend du rôle qui vous a été attribué par l\'administrateur.' },
+          { type: 'list', content: 'Employé : accès à la saisie de ses propres heures uniquement\nChef de site : accès aux heures des employés de ses sites autorisés + validation\nAdministrateur : accès complet à toutes les fonctionnalités' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'saisie-heures',
+    title: 'Saisie des heures',
+    requiredLevel: 'employee',
+    icon: 'mdi:clock-time-four-outline',
+    articles: [
+      {
+        id: 'saisie-time',
+        title: 'Mode horaire (TIME)',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'En mode horaire, vous saisissez vos heures via des créneaux matin, après-midi et soir.' },
+          { type: 'list', content: 'Matin : heure de début et heure de fin\nAprès-midi : heure de début et heure de fin\nSoir : heure de début et heure de fin' },
+          { type: 'paragraph', content: 'Le sélecteur de temps fonctionne par tranches de 15 minutes (00, 15, 30, 45). La saisie libre est possible mais sera corrigée automatiquement.' },
+          { type: 'note', content: 'Les calculs sont mis à jour automatiquement : heures de jour (06:00–21:00), heures de nuit (00:00–06:00 et 21:00–24:00) et total.' },
+        ],
+      },
+      {
+        id: 'saisie-presence',
+        title: 'Mode présence (PRESENCE)',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'En mode présence (contrats forfait), vous indiquez simplement si vous étiez présent le matin et/ou l\'après-midi.' },
+          { type: 'list', content: 'Cochez "Présent matin" pour indiquer une demi-journée de travail le matin\nCochez "Présent après-midi" pour indiquer une demi-journée l\'après-midi\nChaque demi-journée cochée compte pour 0.5 jour de présence' },
+        ],
+      },
+      {
+        id: 'comprendre-calculs',
+        title: 'Comprendre les calculs affichés',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Les colonnes de calcul sont mises à jour automatiquement en fonction de votre saisie.' },
+          { type: 'list', content: 'Jour : total des heures dans la plage 06:00–21:00\nNuit : total des heures dans les plages 00:00–06:00 et 21:00–24:00\nTotal : somme des heures de jour et de nuit' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'saisie-conducteurs',
+    title: 'Saisie conducteurs',
+    requiredLevel: 'employee',
+    icon: 'mdi:truck-outline',
+    articles: [
+      {
+        id: 'conducteur-heures',
+        title: 'Saisie des heures conducteur',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Les conducteurs disposent d\'un écran dédié accessible via le menu "Heures Conducteurs". Ils n\'apparaissent pas sur l\'écran classique des heures.' },
+          { type: 'list', content: 'Heures de jour : durée au format HH:MM\nHeures de nuit : durée au format HH:MM\nHeures atelier : durée au format HH:MM\nTotal : calculé automatiquement (jour + nuit + atelier)' },
+        ],
+      },
+      {
+        id: 'conducteur-indemnites',
+        title: 'Indemnités conducteur',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'En plus des heures, vous pouvez cocher les indemnités correspondant à votre journée.' },
+          { type: 'list', content: 'Petit déjeuner\nDéjeuner\nDîner\nNuitée' },
+          { type: 'paragraph', content: 'La même logique de validation s\'applique que pour les heures classiques.' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'absences-validations',
+    title: 'Absences et validations',
+    requiredLevel: 'employee',
+    icon: 'mdi:information-outline',
+    articles: [
+      {
+        id: 'comprendre-absences',
+        title: 'Comprendre les absences affichées',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Quand une absence est posée sur votre journée, elle apparaît dans la colonne dédiée avec un fond coloré selon le type d\'absence.' },
+          { type: 'list', content: 'Absence du matin (AM) : verrouille le créneau matin\nAbsence de l\'après-midi (PM) : verrouille les créneaux après-midi et soir\nAbsence journée complète : verrouille tous les créneaux' },
+          { type: 'note', content: 'Vous ne pouvez pas modifier les créneaux horaires verrouillés par une absence. Seul un administrateur peut retirer ou modifier l\'absence.' },
+        ],
+      },
+      {
+        id: 'comprendre-validations',
+        title: 'Comprendre les validations',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'Vos heures passent par un processus de double validation avant d\'être définitivement enregistrées.' },
+          { type: 'list', content: 'Validation chef de site : votre chef de site vérifie et valide vos heures. La ligne est alors verrouillée pour vous.\nValidation RH : l\'administrateur RH valide définitivement. La ligne est complètement verrouillée.' },
+          { type: 'paragraph', content: 'Une fois validée, vous ne pouvez plus modifier la ligne. Si une correction est nécessaire, contactez votre chef de site ou l\'administrateur RH.' },
+          { type: 'note', content: 'Toute vraie modification effectuée par un administrateur remet automatiquement les deux validations à zéro.' },
+        ],
+      },
+    ],
+  },
+
+  // ============================================================
+  // SITE MANAGER LEVEL
+  // ============================================================
+  {
+    id: 'validation-site',
+    title: 'Validation de site',
+    requiredLevel: 'site_manager',
+    icon: 'mdi:check-decagram-outline',
+    articles: [
+      {
+        id: 'role-chef-site',
+        title: 'Rôle du chef de site',
+        requiredLevel: 'site_manager',
+        blocks: [
+          { type: 'paragraph', content: 'En tant que chef de site, vous êtes responsable de la vérification et de la validation des heures saisies par les employés de votre site.' },
+          { type: 'paragraph', content: 'Le workflow de validation suit un circuit en 3 étapes : l\'employé saisit ses heures → le chef de site valide → l\'admin RH valide définitivement.' },
+        ],
+      },
+      {
+        id: 'validation-individuelle',
+        title: 'Validation individuelle',
+        requiredLevel: 'site_manager',
+        blocks: [
+          { type: 'paragraph', content: 'Pour valider une ligne d\'heures individuellement :' },
+          { type: 'list', content: 'Cochez la case de validation site sur la ligne de l\'employé\nLa ligne est immédiatement verrouillée pour l\'employé\nL\'administrateur RH peut toujours corriger une ligne que vous avez validée' },
+        ],
+      },
+      {
+        id: 'validation-masse',
+        title: 'Validation en masse',
+        requiredLevel: 'site_manager',
+        blocks: [
+          { type: 'paragraph', content: 'Pour gagner du temps, vous pouvez valider toutes les lignes en une seule action.' },
+          { type: 'list', content: 'Cliquez sur le bouton de validation en masse\nToutes les lignes de la date affichée sont validées d\'un coup\nUtile quand toutes les saisies sont correctes' },
+          { type: 'note', content: 'Quand toutes les lignes de votre site sont validées pour une date donnée, les administrateurs RH reçoivent automatiquement une notification.' },
+        ],
+      },
+      {
+        id: 'difference-validations',
+        title: 'Validation site vs validation RH',
+        requiredLevel: 'site_manager',
+        blocks: [
+          { type: 'paragraph', content: 'Il est important de comprendre la différence entre les deux niveaux de validation.' },
+          { type: 'list', content: 'Validation site : verrouille la ligne pour les employés, mais l\'admin RH peut encore modifier\nValidation RH : verrouillage complet, seul l\'admin peut retirer cette validation\nLe chef de site ne voit pas et ne peut pas agir sur la validation RH' },
+        ],
+      },
+    ],
+  },
+
+  // ============================================================
+  // ADMIN LEVEL
+  // ============================================================
+  {
+    id: 'administration',
+    title: 'Administration',
+    requiredLevel: 'admin',
+    icon: 'mdi:cog-outline',
+    articles: [
+      {
+        id: 'gestion-sites',
+        title: 'Gestion des sites',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les sites organisent les employés et les accès dans l\'application. Chaque site possède un nom et une couleur utilisée dans toute l\'interface.' },
+          { type: 'list', content: 'Créer, modifier ou supprimer un site depuis le menu "Sites"\nL\'ordre d\'affichage est modifiable par glisser-déposer\nLa couleur du site est utilisée pour identifier visuellement les employés' },
+        ],
+      },
+      {
+        id: 'gestion-types-absence',
+        title: 'Gestion des types d\'absence',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les types d\'absence définissent les catégories disponibles lors de la pose d\'une absence.' },
+          { type: 'list', content: 'Code : identifiant court (max 10 caractères), ex: C, M, AT\nLibellé : nom affiché, ex: Congé, Maladie, Accident du travail\nCouleur : code couleur pour le calendrier et la vue jour\nOption "Compté comme travaillé" : si activé, l\'absence crédite des heures en mode TIME' },
+          { type: 'note', content: 'L\'option "Compté comme travaillé" impacte le calcul des heures supplémentaires. En mode TIME, les minutes sont créditées selon le contrat. En mode PRESENCE, aucun crédit n\'est appliqué.' },
+        ],
+      },
+      {
+        id: 'gestion-utilisateurs',
+        title: 'Gestion des utilisateurs',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Chaque personne qui se connecte à l\'application a un compte utilisateur distinct de sa fiche employé.' },
+          { type: 'list', content: 'Nom d\'utilisateur : unique, sert de login\nMot de passe : défini à la création, modifiable\nRôle : Admin (accès complet), User (chef de site), Self (employé)\nSites autorisés : pour les chefs de site, définit leur périmètre\nAssociation employé : lie le compte à une fiche employé\nVerrouillage : un compte verrouillé ne peut plus se connecter' },
+          { type: 'note', content: 'Il n\'est pas possible de supprimer un utilisateur (sécurité). Pour bloquer l\'accès, utilisez le verrouillage de compte.' },
+        ],
+      },
+      {
+        id: 'taches-automatiques',
+        title: 'Tâches automatiques (crons)',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Deux tâches automatiques s\'exécutent quotidiennement pour gérer le report des compteurs.' },
+          { type: 'list', content: 'Report congés (02h10) : déclenche le report des congés payés le 1er juin (CDI/CDD) et le 1er janvier (forfait)\nReport RTT (02h15) : déclenche le report du solde RTT le 1er juin' },
+          { type: 'note', content: 'Ces tâches sont idempotentes : si elles s\'exécutent plusieurs fois, aucun doublon n\'est créé.' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'employes-contrats',
+    title: 'Employés et contrats',
+    requiredLevel: 'admin',
+    icon: 'mdi:account-group-outline',
+    articles: [
+      {
+        id: 'liste-employes',
+        title: 'Liste et recherche d\'employés',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'La page Employés affiche tous les employés sous forme de cartes.' },
+          { type: 'list', content: 'Recherche par nom\nFiltrage par site (multi-sélection)\nFiltrage par statut de contrat : "Avec contrat" (défaut), "Sans contrat", "Tous"\n"Avec contrat" = employés ayant une période de contrat active à la date du jour' },
+        ],
+      },
+      {
+        id: 'creation-employe',
+        title: 'Créer un employé',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'La création d\'un employé se fait via le drawer d\'ajout.' },
+          { type: 'list', content: 'Champs : prénom, nom, site\nNature du contrat : CDI, CDD ou INTERIM\nType de contrat / temps de travail (Forfait, 35h, 39h, etc.)\nDate de début (obligatoire)\nDate de fin (obligatoire pour CDD et INTERIM)' },
+        ],
+      },
+      {
+        id: 'types-contrat',
+        title: 'Types de contrat',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Le type de contrat détermine le mode de suivi et les règles de calcul appliquées.' },
+          { type: 'list', content: 'FORFAIT : suivi en jours (mode PRESENCE), base 218 jours/an\n35 HEURES : suivi horaire (mode TIME), 35h/semaine\n39 HEURES : suivi horaire (mode TIME), 39h/semaine\nCUSTOM : heures personnalisées (ex: 4h, 20h), 1h sup = 1h récup sans bonus\nINTERIM : travail temporaire, pas de récupération ni de congés gérés' },
+          { type: 'note', content: 'Le mode de suivi (TIME ou PRESENCE) est lié au type de contrat et ne peut pas être modifié indépendamment.' },
+        ],
+      },
+      {
+        id: 'suivi-contrat',
+        title: 'Suivi contrat et historique',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'L\'onglet "Suivi contrat" sur la fiche employé affiche l\'historique complet des périodes de contrat.' },
+          { type: 'list', content: 'Chaque ligne : nature (CDI/CDD/INTERIM), type de contrat, date début, date fin ou "En cours"\nAjouter un contrat : disponible uniquement si le contrat en cours est clôturé\nClôturer un contrat : définir la date de fin + option "Solde de tout compte"\nSuspension : ajouter une période de suspension avec dates et commentaire' },
+          { type: 'note', content: 'La case "Soldé dans le solde de tout compte" remet le report des congés à 0 pour l\'exercice suivant.' },
+        ],
+      },
+      {
+        id: 'statut-conducteur',
+        title: 'Statut conducteur',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Le statut conducteur est un flag activé sur une période de contrat. Un employé peut changer de statut conducteur selon la période.' },
+          { type: 'paragraph', content: 'Un employé conducteur apparaît uniquement sur l\'écran "Heures Conducteurs" et non sur l\'écran "Heures" classique.' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'double-validation',
+    title: 'Saisie et double validation',
+    requiredLevel: 'admin',
+    icon: 'mdi:shield-check-outline',
+    articles: [
+      {
+        id: 'validation-rh',
+        title: 'Validation RH',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'La validation RH est le niveau de validation le plus élevé, réservé aux administrateurs.' },
+          { type: 'list', content: 'Verrouille complètement la ligne (heures et absences)\nSeul un administrateur peut retirer cette validation\nPeut être appliquée individuellement ou en masse' },
+        ],
+      },
+      {
+        id: 'regles-reinitialisation',
+        title: 'Règles de réinitialisation',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les validations sont automatiquement réinitialisées dans certaines conditions.' },
+          { type: 'list', content: 'Toute vraie modification d\'une ligne remet les deux validations (site et RH) à faux\nUn enregistrement sans changement réel préserve les validations existantes\nLa date de modification est mise à jour uniquement quand un employé modifie ses propres heures' },
+          { type: 'note', content: 'La date de modification est visible uniquement par les administrateurs, sous le nom de l\'employé dans la vue jour.' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'vue-semaine-hs',
+    title: 'Vue semaine et heures supplémentaires',
+    requiredLevel: 'admin',
+    icon: 'mdi:calendar-week',
+    articles: [
+      {
+        id: 'vue-semaine',
+        title: 'Vue semaine',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'La vue semaine est réservée aux administrateurs. Elle affiche une synthèse hebdomadaire par employé avec les heures supplémentaires calculées.' },
+          { type: 'list', content: 'Filtrage par site et par employé\nDétail par jour avec totaux hebdomadaires\nColonnes de calcul : base, heures sup 25%, heures sup 50%, total récupération' },
+        ],
+      },
+      {
+        id: 'calcul-hs',
+        title: 'Calcul des heures supplémentaires',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les règles de calcul des heures supplémentaires dépendent du type de contrat.' },
+          { type: 'list', content: 'Contrats ≤ 35h : +25% de 35h à 43h, +50% au-delà de 43h\nContrats ≥ 39h : +25% de 39h à 43h, +50% au-delà de 43h\nContrats CUSTOM (4h, 25h, etc.) : 1h supplémentaire = 1h de récupération, pas de bonus\nINTERIM : aucune récupération, aucun bonus' },
+          { type: 'note', content: 'En cas de déficit hebdomadaire (heures travaillées < heures contrat), le déficit est déduit du cumul RTT : d\'abord des heures à 50%, puis des heures à 25%.' },
+        ],
+      },
+      {
+        id: 'vue-semaine-conducteurs',
+        title: 'Vue semaine conducteurs',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'La vue semaine conducteurs affiche des colonnes spécifiques.' },
+          { type: 'list', content: 'Totaux jour / nuit / atelier par jour et par semaine\nPanier de nuit (PN) : affiché quand heures nuit > heures jour OU nuit ≥ 4h\nCompteurs hebdomadaires : petit déjeuner, déjeuner, dîner, nuitée\nRTT calculé sur jour + nuit + atelier (au lieu des créneaux classiques)' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'absences-calendrier',
+    title: 'Absences et calendrier',
+    requiredLevel: 'admin',
+    icon: 'mdi:calendar-blank',
+    articles: [
+      {
+        id: 'poser-absence',
+        title: 'Poser une absence',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les absences peuvent être posées depuis la vue jour des heures ou depuis le calendrier.' },
+          { type: 'list', content: 'Journée complète : efface toutes les plages horaires\nDemi-journée matin (AM) : efface le créneau matin\nDemi-journée après-midi (PM) : efface les créneaux après-midi et soir' },
+          { type: 'paragraph', content: 'Les absences sont stockées par jour : une absence de plusieurs jours est automatiquement découpée en entrées quotidiennes.' },
+        ],
+      },
+      {
+        id: 'effet-absences-heures',
+        title: 'Effet sur les heures',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'L\'impact d\'une absence sur les heures dépend du type d\'absence et du mode de suivi.' },
+          { type: 'list', content: 'Standard : efface les créneaux horaires correspondants\nSi "Compté comme travaillé" en mode TIME : crédite des minutes selon le contrat actif\nSi "Compté comme travaillé" en mode PRESENCE : aucun crédit (seules les cases cochées comptent)' },
+          { type: 'note', content: 'Les absences comptées comme travaillées impactent le calcul des heures supplémentaires et du RTT.' },
+        ],
+      },
+      {
+        id: 'calendrier-mensuel',
+        title: 'Calendrier mensuel',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Le calendrier offre une vue d\'ensemble mensuelle des absences de tous les employés.' },
+          { type: 'list', content: 'Code couleur par type d\'absence\nDemi-journée : affichage en dégradé diagonal\nJournée complète : fond plein\nJours fériés : fond bleu clair\nFiltres par site et par employé\nNavigation par mois (précédent / suivant)' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'conges-payes',
+    title: 'Congés payés',
+    requiredLevel: 'admin',
+    icon: 'mdi:umbrella-beach-outline',
+    articles: [
+      {
+        id: 'regles-cdi-cdd',
+        title: 'Règles CDI/CDD non-forfait',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Pour les contrats CDI et CDD (hors forfait), l\'exercice de congés va du 1er juin (N-1) au 31 mai (N).' },
+          { type: 'list', content: 'Acquisition annuelle : 25 jours + 5 samedis\nAcquisition mensuelle : 2,08 jours + 0,42 samedi par mois\nProratisation en cas de début/fin ou suspension en cours de mois\nContrat 4h : 10 jours annuels, 0 samedi, 0,83 jour/mois' },
+        ],
+      },
+      {
+        id: 'regles-forfait',
+        title: 'Règles FORFAIT',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Pour les contrats forfait, l\'exercice suit l\'année civile (1er janvier au 31 décembre).' },
+          { type: 'list', content: 'Calcul : jours ouvrés de l\'année − 218 + bonus weekend/férié\nBonus : 1 jour par jour travaillé un weekend ou jour férié (0.5 si demi-journée)\nPas de samedis\nPas de jours en cours d\'acquisition' },
+        ],
+      },
+      {
+        id: 'maladie-longue',
+        title: 'Arrêt maladie long',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'En cas d\'arrêt maladie de plus d\'un mois, les règles d\'acquisition sont modifiées.' },
+          { type: 'list', content: 'Premier mois de maladie : acquisition normale\nAprès le premier mois : acquisition réduite (facteur 0,80)\nDétection automatique à partir des absences MALADIE consécutives (tolérance de gap ≤ 3 jours)' },
+        ],
+      },
+      {
+        id: 'report-conges',
+        title: 'Report annuel et rollover',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Le reliquat de congés de l\'exercice précédent est automatiquement reporté dans les acquis du nouvel exercice.' },
+          { type: 'list', content: 'Report automatique le 1er juin (CDI/CDD non-forfait) ou 1er janvier (forfait)\nSi "Solde de tout compte" coché sur le contrat clôturé : report remis à 0\nJours fractionnés : saisie manuelle par la RH, ajoutés aux acquis' },
+        ],
+      },
+      {
+        id: 'consommation-conges',
+        title: 'Règle de consommation',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Les absences s\'imputent selon un ordre précis.' },
+          { type: 'list', content: 'D\'abord sur les acquis (report N-1)\nPuis sur les jours en cours d\'acquisition\nEn cours d\'acquisition peut devenir négatif temporairement (se reconstitue avec les acquisitions suivantes)' },
+          { type: 'paragraph', content: 'Compteurs visibles sur l\'onglet Congé de la fiche employé : acquis, en cours d\'acquisition, pris, restant.' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'rtt',
+    title: 'RTT (Récupération de Temps de Travail)',
+    requiredLevel: 'admin',
+    icon: 'mdi:timer-sand',
+    articles: [
+      {
+        id: 'rtt-principe',
+        title: 'Principe et exercice RTT',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Le RTT correspond aux heures supplémentaires accumulées, converties en temps de récupération. L\'exercice RTT va du 1er juin (N-1) au 31 mai (N).' },
+          { type: 'paragraph', content: 'L\'onglet RTT sur la fiche employé affiche le détail hebdomadaire regroupé par mois, avec un compteur global en heures (1 jour = 7h = 420 minutes).' },
+        ],
+      },
+      {
+        id: 'rtt-compteurs',
+        title: 'Compteurs RTT',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'list', content: 'Report N-1 : solde de l\'exercice précédent\nAcquis : cumul des heures supplémentaires de l\'exercice en cours\nDisponible : report + acquis − payé\nPayé : RTT convertis en salaire (soustraits du disponible)' },
+          { type: 'note', content: 'Les contrats INTERIM et le mode PRESENCE n\'accumulent pas de RTT (affiché à 0).' },
+        ],
+      },
+      {
+        id: 'rtt-paiement',
+        title: 'Paiement RTT',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'L\'administrateur RH peut enregistrer un paiement RTT depuis l\'onglet RTT de la fiche employé.' },
+          { type: 'list', content: 'Saisie : mois, nombre de minutes, taux (25% ou 50%)\nPlusieurs paiements possibles par mois\nLes heures payées sont soustraites du solde disponible' },
+        ],
+      },
+      {
+        id: 'rtt-semaines-mois',
+        title: 'Attribution des semaines aux mois',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Chaque semaine ISO est attribuée à un seul mois dans le tableau RTT.' },
+          { type: 'list', content: 'Une semaine est attribuée au mois qui contient son samedi\nSi le samedi tombe en début de mois suivant, la semaine est dans ce mois suivant' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'frais-primes-observations',
+    title: 'Frais, primes et observations',
+    requiredLevel: 'admin',
+    icon: 'mdi:account-cash-outline',
+    articles: [
+      {
+        id: 'frais',
+        title: 'Onglet Frais',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'L\'onglet Frais sur la fiche employé permet de saisir les frais kilométriques et les montants associés.' },
+          { type: 'list', content: 'Mois : obligatoire\nKilomètres : nombre de km (optionnel)\nMontant : en euros (optionnel)\nCommentaire : optionnel\nDeux justificatifs PDF distincts : un pour les km, un pour le montant' },
+          { type: 'note', content: 'Au moins un des deux champs (kilomètres ou montant) doit être supérieur à 0. Un seul enregistrement par mois par employé.' },
+        ],
+      },
+      {
+        id: 'primes',
+        title: 'Onglet Prime',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'list', content: 'Mois : obligatoire\nMontant en euros : obligatoire\nCommentaire : optionnel\nUne seule prime par mois par employé' },
+        ],
+      },
+      {
+        id: 'observations',
+        title: 'Onglet Observation',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'list', content: 'Mois : obligatoire\nTexte d\'observation : obligatoire\nUne seule observation par mois par employé\nNote libre pour le suivi RH' },
+        ],
+      },
+    ],
+  },
+  {
+    id: 'exports',
+    title: 'Exports et impressions',
+    requiredLevel: 'admin',
+    icon: 'mdi:file-pdf-box',
+    articles: [
+      {
+        id: 'export-recap-conges',
+        title: 'Export récap. congés',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Génère un PDF A4 portrait récapitulant les congés de tous les employés actifs.' },
+          { type: 'list', content: 'Accessible depuis la page Employés (bouton "Export récap. congés")\nGénère un PDF à la date du jour\nDonnées groupées par site\nColonnes : nom, contrat, CP N-1 restant, samedi restant, CP N, RTT' },
+        ],
+      },
+      {
+        id: 'export-recap-salaire',
+        title: 'Récapitulatif salaire',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Génère un PDF A4 paysage avec le détail mensuel pour la paie.' },
+          { type: 'list', content: 'Sélecteur de mois (défaut = mois courant)\nDonnées groupées par site\nColonnes : nom, base contrat, jours de présence cadre, heures de nuit, panier de nuit, heures RTT payées, congés (nombre + dates), maladie/AT (nombre + dates), primes conducteur (PDJ, repas, nuitée, samedi), observations' },
+        ],
+      },
+      {
+        id: 'impression-absences',
+        title: 'Impression absences',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Génère un PDF A3 paysage du calendrier d\'absences avec des filtres.' },
+          { type: 'list', content: 'Filtres : période (du/au), sites, nature de contrat, type de contrat\nTous les filtres sont cochés par défaut\nCalendrier coloré par type d\'absence' },
+        ],
+      },
+      {
+        id: 'export-heures-annuelles',
+        title: 'Export heures annuelles',
+        requiredLevel: 'admin',
+        blocks: [
+          { type: 'paragraph', content: 'Génère un PDF par employé avec le détail jour par jour de ses heures sur une année.' },
+          { type: 'list', content: 'Accessible depuis la fiche employé (bouton imprimante)\nChoix de l\'année civile (janvier à décembre)\nColonnes adaptées au mode de suivi (TIME, PRESENCE, conducteur)\nSections séparées en cas de changement de contrat en cours d\'année' },
+        ],
+      },
+    ],
+  },
+]
--- a/frontend/layouts/default.vue
+++ b/frontend/layouts/default.vue
@@ -19,6 +19,7 @@
                        </NuxtLink>
                    </template>
                    <NuxtLink
+                        v-if="isAdmin || !isDriver"
                        to="/hours"
                        class="flex items-center gap-2 py-2 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
                        :class="[
@@ -30,12 +31,13 @@
                        <p>Heures</p>
                    </NuxtLink>
                    <NuxtLink
-                        v-if="isAdmin"
+                        v-if="isAdmin || isDriver"
                        to="/driver-hours"
                        class="flex items-center gap-2 py-2 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
-                        :class="route.path.startsWith('/driver-hours')
-                            ? 'bg-tertiary-500 text-primary-500 font-bold'
-                            : ''"
+                        :class="[
+                            route.path.startsWith('/driver-hours') ? 'bg-tertiary-500 text-primary-500 font-bold' : '',
+                            !isAdmin && isDriver ? 'border-t border-secondary-500 pt-3' : ''
+                        ]"
                    >
                        <Icon name="mdi:truck-outline" size="24"/>
                        <p>Heures Conducteurs</p>
@@ -82,6 +84,27 @@
                            <p>Utilisateurs</p>
                        </NuxtLink>
                    </template>
+                    <NuxtLink
+                        v-if="isSuperAdmin"
+                        to="/audit-logs"
+                        class="flex items-center gap-2 py-3 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
+                        :class="route.path.startsWith('/audit-logs')
+                            ? 'bg-tertiary-500 text-primary-500 font-bold'
+                            : ''"
+                    >
+                        <Icon name="mdi:clipboard-text-clock-outline" size="24"/>
+                        <p>Journal</p>
+                    </NuxtLink>
+                    <NuxtLink
+                        to="/documentation"
+                        class="flex items-center gap-2 py-3 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
+                        :class="route.path.startsWith('/documentation')
+                            ? 'bg-tertiary-500 text-primary-500 font-bold'
+                            : ''"
+                    >
+                        <Icon name="mdi:book-open-page-variant-outline" size="24"/>
+                        <p>Documentation</p>
+                    </NuxtLink>
                </nav>

                <div class="flex flex-col gap-2 items-center p-4">
@@ -103,5 +126,7 @@
 const auth = useAuthStore()
 const {version} = useAppVersion()
 const isAdmin = computed(() => auth.user?.roles?.includes('ROLE_ADMIN') ?? false)
+const isSuperAdmin = computed(() => auth.user?.roles?.includes('ROLE_SUPER_ADMIN') ?? false)
+const isDriver = computed(() => auth.user?.isDriver ?? false)
 const route = useRoute()
 </script>
--- a/frontend/middleware/super-admin.ts
+++ b/frontend/middleware/super-admin.ts
@@ -0,0 +1,12 @@
+export default defineNuxtRouteMiddleware(async () => {
+  const auth = useAuthStore()
+
+  if (!auth.checked) {
+    await auth.ensureSession()
+  }
+
+  const isSuperAdmin = auth.user?.roles?.includes('ROLE_SUPER_ADMIN')
+  if (!isSuperAdmin) {
+    return navigateTo('/')
+  }
+})
--- a/frontend/pages/audit-logs.vue
+++ b/frontend/pages/audit-logs.vue
@@ -0,0 +1,254 @@
+<template>
+  <div class="h-full flex flex-col overflow-hidden">
+    <h1 class="text-4xl font-bold text-primary-500 pb-6">Journal des actions</h1>
+
+    <div class="flex items-end gap-4 pb-6 flex-wrap">
+      <div>
+        <label class="text-md font-semibold text-neutral-700">Employé</label>
+        <select
+          v-model="filters.employeeId"
+          class="mt-2 h-[42px] w-full rounded-md border border-neutral-300 px-3 py-2 text-md text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
+        >
+          <option :value="undefined">Tous</option>
+          <option v-for="emp in employees" :key="emp.id" :value="emp.id">
+            {{ emp.lastName }} {{ emp.firstName }}
+          </option>
+        </select>
+      </div>
+      <div>
+        <label class="text-md font-semibold text-neutral-700">Du</label>
+        <input
+          v-model="filters.from"
+          type="date"
+          class="mt-2 w-full rounded-md border border-neutral-300 px-3 py-2 text-md text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
+        />
+      </div>
+      <div>
+        <label class="text-md font-semibold text-neutral-700">Au</label>
+        <input
+          v-model="filters.to"
+          type="date"
+          class="mt-2 w-full rounded-md border border-neutral-300 px-3 py-2 text-md text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
+        />
+      </div>
+      <div>
+        <label class="text-md font-semibold text-neutral-700">Type</label>
+        <select
+          v-model="filters.entityType"
+          class="mt-2 h-[42px] w-full rounded-md border border-neutral-300 px-3 py-2 text-md text-neutral-900 focus:border-primary-500 focus:outline-none focus:ring-2 focus:ring-secondary-500/20"
+        >
+          <option :value="undefined">Tous</option>
+          <option value="work_hour">Heures</option>
+          <option value="absence">Absences</option>
+          <option value="employee">Employé</option>
+          <option value="contract_suspension">Suspension</option>
+          <option value="rtt_payment">Paiement RTT</option>
+          <option value="fractioned_days">Jours fractionnés</option>
+          <option value="paid_leave_days">Congés N-1 payés</option>
+        </select>
+      </div>
+      <button
+        type="button"
+        class="h-[42px] rounded-lg bg-primary-500 px-4 py-2 text-md font-semibold text-white hover:bg-secondary-500"
+        @click="search"
+      >
+        Rechercher
+      </button>
+    </div>
+
+    <div v-if="isLoading" class="rounded-lg border border-neutral-200 bg-white p-6 text-md text-neutral-600">
+      Chargement...
+    </div>
+
+    <div v-else-if="logs.length === 0" class="rounded-lg border border-neutral-200 bg-white p-6 text-md text-neutral-600">
+      Aucune entrée trouvée.
+    </div>
+
+    <template v-else>
+      <div class="min-h-0 flex-1 overflow-auto rounded-md bg-white">
+        <div class="grid grid-cols-[140px_110px_90px_100px_150px_1fr_130px] gap-4 border border-black bg-tertiary-500 px-6 py-3 text-[20px] font-semibold text-black rounded-t-md sticky top-0 z-10">
+          <span>Date action</span>
+          <span>Utilisateur</span>
+          <span>Action</span>
+          <span>Type</span>
+          <span>Employé</span>
+          <span>Description</span>
+          <span>Date affectée</span>
+        </div>
+        <div class="border-x border-b border-primary-500 rounded-b-md">
+          <template v-for="log in logs" :key="log.id">
+            <div
+              class="grid grid-cols-[140px_110px_90px_100px_150px_1fr_130px] items-center gap-4 border-b border-primary-500 px-6 py-3 text-md font-bold text-primary-500 last:border-b-0 cursor-pointer hover:bg-tertiary-500"
+              @click="toggleExpand(log.id)"
+            >
+              <span>{{ formatDateTime(log.createdAt) }}</span>
+              <span>{{ log.username }}</span>
+              <span>
+                <span class="rounded px-2 py-0.5 text-xs font-bold text-white" :class="actionClass(log.action)">
+                  {{ actionLabel(log.action) }}
+                </span>
+              </span>
+              <span>{{ entityTypeLabel(log.entityType) }}</span>
+              <span>{{ log.employeeName ?? '-' }}</span>
+              <span class="truncate font-normal" :title="log.description">{{ log.description }}</span>
+              <span>{{ log.affectedDate ? formatDate(log.affectedDate) : '-' }}</span>
+            </div>
+
+            <div
+              v-if="expandedIds.has(log.id)"
+              class="border-b border-primary-500 px-6 py-4 bg-neutral-50"
+            >
+              <div v-if="log.changes" class="grid grid-cols-2 gap-6 text-sm font-mono">
+                <div v-if="log.changes.old">
+                  <p class="font-bold text-red-600 mb-2">Ancien</p>
+                  <pre class="whitespace-pre-wrap text-neutral-700">{{ JSON.stringify(log.changes.old, null, 2) }}</pre>
+                </div>
+                <div v-if="log.changes.new">
+                  <p class="font-bold text-green-600 mb-2">Nouveau</p>
+                  <pre class="whitespace-pre-wrap text-neutral-700">{{ JSON.stringify(log.changes.new, null, 2) }}</pre>
+                </div>
+              </div>
+              <p v-else class="text-md text-neutral-400">Pas de détail disponible.</p>
+            </div>
+          </template>
+        </div>
+      </div>
+
+      <div class="flex items-center justify-between pt-4">
+        <p class="text-md text-neutral-500">
+          {{ total }} résultat{{ total > 1 ? 's' : '' }} — page {{ currentPage }}/{{ totalPages }}
+        </p>
+        <div class="flex gap-3">
+          <button
+            type="button"
+            :disabled="currentPage <= 1"
+            class="rounded-lg border border-primary-500 px-4 py-2 text-md font-semibold text-primary-500 hover:bg-tertiary-500 disabled:opacity-30 disabled:cursor-not-allowed"
+            @click="goToPage(currentPage - 1)"
+          >
+            Précédent
+          </button>
+          <button
+            type="button"
+            :disabled="currentPage >= totalPages"
+            class="rounded-lg bg-primary-500 px-4 py-2 text-md font-semibold text-white hover:bg-secondary-500 disabled:opacity-30 disabled:cursor-not-allowed"
+            @click="goToPage(currentPage + 1)"
+          >
+            Suivant
+          </button>
+        </div>
+      </div>
+    </template>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { ref, reactive, computed, onMounted } from 'vue'
+import type { AuditLog } from '~/services/dto/audit-log'
+import type { Employee } from '~/services/dto/employee'
+import { fetchAuditLogs } from '~/services/audit-logs'
+import { listEmployees } from '~/services/employees'
+
+definePageMeta({
+  middleware: 'super-admin'
+})
+
+useHead({ title: 'Journal des actions' })
+
+const logs = ref<AuditLog[]>([])
+const employees = ref<Employee[]>([])
+const isLoading = ref(false)
+const expandedIds = ref(new Set<number>())
+const total = ref(0)
+const currentPage = ref(1)
+const perPage = ref(50)
+
+const totalPages = computed(() => Math.max(1, Math.ceil(total.value / perPage.value)))
+
+const filters = reactive<{
+  employeeId?: number
+  from?: string
+  to?: string
+  entityType?: string
+}>({})
+
+const loadLogs = async (page = 1) => {
+  isLoading.value = true
+  try {
+    const result = await fetchAuditLogs({ ...filters, page })
+    logs.value = result.items
+    total.value = result.total
+    currentPage.value = result.page
+    perPage.value = result.perPage
+    expandedIds.value.clear()
+  } finally {
+    isLoading.value = false
+  }
+}
+
+const search = () => {
+  loadLogs(1)
+}
+
+const goToPage = (page: number) => {
+  if (page >= 1 && page <= totalPages.value) {
+    loadLogs(page)
+  }
+}
+
+const toggleExpand = (id: number) => {
+  if (expandedIds.value.has(id)) {
+    expandedIds.value.delete(id)
+  } else {
+    expandedIds.value.add(id)
+  }
+}
+
+const formatDateTime = (dt: string) => {
+  const d = new Date(dt)
+  return d.toLocaleDateString('fr-FR') + ' ' + d.toLocaleTimeString('fr-FR', { hour: '2-digit', minute: '2-digit' })
+}
+
+const formatDate = (d: string) => {
+  return d.split('-').reverse().join('/')
+}
+
+const actionLabel = (action: string): string => {
+  const map: Record<string, string> = {
+    create: 'Créer',
+    update: 'Modifier',
+    delete: 'Suppr.',
+    validate: 'Valid.',
+    site_validate: 'Valid. site',
+  }
+  return map[action] ?? action
+}
+
+const actionClass = (action: string): string => {
+  const map: Record<string, string> = {
+    create: 'bg-green-500',
+    update: 'bg-blue-500',
+    delete: 'bg-red-500',
+    validate: 'bg-purple-500',
+    site_validate: 'bg-indigo-500',
+  }
+  return map[action] ?? 'bg-neutral-500'
+}
+
+const entityTypeLabel = (type: string): string => {
+  const map: Record<string, string> = {
+    work_hour: 'Heures',
+    absence: 'Absence',
+    employee: 'Employé',
+    contract_suspension: 'Suspension',
+    rtt_payment: 'RTT',
+    fractioned_days: 'Fract.',
+    paid_leave_days: 'Congés payés',
+  }
+  return map[type] ?? type
+}
+
+onMounted(async () => {
+  employees.value = await listEmployees()
+  await loadLogs()
+})
+</script>
--- a/frontend/pages/documentation.vue
+++ b/frontend/pages/documentation.vue
@@ -0,0 +1,9 @@
+<template>
+    <DocumentationPage/>
+</template>
+
+<script setup lang="ts">
+useHead({
+    title: 'Documentation',
+})
+</script>
--- a/frontend/pages/employees/[id].vue
+++ b/frontend/pages/employees/[id].vue
@@ -148,6 +148,7 @@
                        :summary="leaveSummary"
                        :public-holidays="publicHolidays"
                        @update-fractioned-days="submitFractionedDays"
+                        @update-paid-leave-days="submitPaidLeaveDays"
                    />
                </div>
                <div v-else-if="showRttTab && activeTab === 'rtt'" class="h-full">
@@ -259,6 +260,7 @@ const {
    submitContractUpdate,
    submitCreateContract,
    submitFractionedDays,
+    submitPaidLeaveDays,
    submitRttPayment,
    suspensionForms,
    isSuspensionSubmitting,
--- a/frontend/pages/login.vue
+++ b/frontend/pages/login.vue
@@ -69,7 +69,8 @@ const handleSubmit = async () => {
        await auth.login(username.value, password.value)

        const isAdmin = auth.user?.roles?.includes('ROLE_ADMIN')
-        await router.push(isAdmin ? '/calendar' : '/hours')
+        const isDriver = auth.user?.isDriver
+        await router.push(isAdmin ? '/calendar' : isDriver ? '/driver-hours' : '/hours')
    } finally {
        isSubmitting.value = false
    }
--- a/frontend/services/audit-logs.ts
+++ b/frontend/services/audit-logs.ts
@@ -0,0 +1,33 @@
+import type { AuditLog } from './dto/audit-log'
+
+export type AuditLogFilters = {
+  employeeId?: number
+  from?: string
+  to?: string
+  entityType?: string
+  page?: number
+}
+
+export type AuditLogPage = {
+  items: AuditLog[]
+  total: number
+  page: number
+  perPage: number
+}
+
+export const fetchAuditLogs = async (filters: AuditLogFilters = {}): Promise<AuditLogPage> => {
+  const api = useApi()
+  const params: Record<string, string> = {}
+
+  if (filters.employeeId) params.employeeId = String(filters.employeeId)
+  if (filters.from) params.from = filters.from
+  if (filters.to) params.to = filters.to
+  if (filters.entityType) params.entityType = filters.entityType
+  if (filters.page) params.page = String(filters.page)
+
+  return api.get<AuditLogPage>(
+    '/audit-logs',
+    params,
+    { toast: false }
+  )
+}
--- a/frontend/services/dto/audit-log.ts
+++ b/frontend/services/dto/audit-log.ts
@@ -0,0 +1,12 @@
+export type AuditLog = {
+  id: number
+  employeeName: string | null
+  employeeId: number | null
+  username: string
+  action: string
+  entityType: string
+  description: string
+  changes: { old?: Record<string, unknown>; new?: Record<string, unknown> } | null
+  affectedDate: string | null
+  createdAt: string
+}
--- a/frontend/services/dto/employee-leave-summary.ts
+++ b/frontend/services/dto/employee-leave-summary.ts
@@ -13,6 +13,7 @@ export type EmployeeLeaveSummary = {
  previousYearAcquiredDays: number
  previousYearTakenDays: number
  previousYearRemainingDays: number
+  previousYearPaidDays: number
  presenceDaysByMonth: Record<string, number>
 }

--- a/frontend/services/dto/user-data.ts
+++ b/frontend/services/dto/user-data.ts
@@ -2,4 +2,5 @@ export type UserData = {
  id: number
  username: string
  roles: string[]
+  isDriver: boolean
 }
--- a/frontend/services/employee-leave-summary.ts
+++ b/frontend/services/employee-leave-summary.ts
@@ -16,3 +16,11 @@ export const updateFractionedDays = async (employeeId: number, fractionedDays: n
  return api.patch(`/employees/${employeeId}/fractioned-days`, body)
 }

+export const updatePaidLeaveDays = async (employeeId: number, paidLeaveDays: number, year?: number) => {
+  const api = useApi()
+  const body: Record<string, unknown> = { paidLeaveDays }
+  if (year) body.year = year
+
+  return api.patch(`/employees/${employeeId}/paid-leave-days`, body)
+}
+
--- a/frontend/types/documentation.ts
+++ b/frontend/types/documentation.ts
@@ -0,0 +1,21 @@
+export type DocAccessLevel = 'employee' | 'site_manager' | 'admin'
+
+export interface DocBlock {
+  type: 'paragraph' | 'list' | 'note'
+  content: string
+}
+
+export interface DocArticle {
+  id: string
+  title: string
+  requiredLevel: DocAccessLevel
+  blocks: DocBlock[]
+}
+
+export interface DocSection {
+  id: string
+  title: string
+  requiredLevel: DocAccessLevel
+  icon: string
+  articles: DocArticle[]
+}
--- a/migrations/Version20260330120000.php
+++ b/migrations/Version20260330120000.php
@@ -0,0 +1,43 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260330120000 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Create audit_logs table for tracking user actions.';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('CREATE TABLE audit_logs (
+            id SERIAL PRIMARY KEY,
+            employee_id INTEGER DEFAULT NULL,
+            username VARCHAR(180) NOT NULL,
+            action VARCHAR(30) NOT NULL,
+            entity_type VARCHAR(50) NOT NULL,
+            entity_id INTEGER DEFAULT NULL,
+            description TEXT NOT NULL,
+            changes JSON DEFAULT NULL,
+            affected_date DATE DEFAULT NULL,
+            created_at TIMESTAMP(0) WITHOUT TIME ZONE NOT NULL,
+            CONSTRAINT fk_audit_employee FOREIGN KEY (employee_id) REFERENCES employees (id) ON DELETE SET NULL
+        )');
+
+        $this->addSql('CREATE INDEX idx_audit_employee_created ON audit_logs (employee_id, created_at)');
+        $this->addSql('CREATE INDEX idx_audit_entity ON audit_logs (entity_type, entity_id)');
+        $this->addSql('CREATE INDEX idx_audit_created ON audit_logs (created_at)');
+        $this->addSql('CREATE INDEX idx_audit_affected_date ON audit_logs (affected_date)');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('DROP TABLE audit_logs');
+    }
+}
--- a/migrations/Version20260402064647.php
+++ b/migrations/Version20260402064647.php
@@ -0,0 +1,27 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260402064647 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add paid_leave_days column to employee_leave_balances for forfait N-1 leave payment';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE employee_leave_balances ADD paid_leave_days DOUBLE PRECISION DEFAULT 0 NOT NULL');
+        $this->addSql("COMMENT ON COLUMN employee_leave_balances.paid_leave_days IS 'Jours de conges N-1 payes par la RH (forfait uniquement).'");
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE employee_leave_balances DROP paid_leave_days');
+    }
+}
--- a/src/ApiResource/AuditLogResource.php
+++ b/src/ApiResource/AuditLogResource.php
@@ -0,0 +1,27 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\ApiResource;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\GetCollection;
+use ApiPlatform\Metadata\QueryParameter;
+use App\State\AuditLogProvider;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(
+            uriTemplate: '/audit-logs',
+            provider: AuditLogProvider::class,
+            parameters: [
+                new QueryParameter(key: 'employeeId'),
+                new QueryParameter(key: 'from'),
+                new QueryParameter(key: 'to'),
+                new QueryParameter(key: 'entityType'),
+            ],
+            security: "is_granted('ROLE_SUPER_ADMIN')"
+        ),
+    ]
+)]
+final class AuditLogResource {}
--- a/src/ApiResource/EmployeeLeaveSummary.php
+++ b/src/ApiResource/EmployeeLeaveSummary.php
@@ -34,6 +34,7 @@ final class EmployeeLeaveSummary
    public float $previousYearAcquiredDays  = 0.0;
    public float $previousYearTakenDays     = 0.0;
    public float $previousYearRemainingDays = 0.0;
+    public float $previousYearPaidDays      = 0.0;

    /** @var array<string, float> YYYY-MM => count (0.5 for half-days) */
    public array $presenceDaysByMonth = [];
--- a/src/ApiResource/EmployeePaidLeaveDaysInput.php
+++ b/src/ApiResource/EmployeePaidLeaveDaysInput.php
@@ -0,0 +1,27 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\ApiResource;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\Patch;
+use App\State\EmployeePaidLeaveDaysProcessor;
+use App\State\EmployeePaidLeaveDaysProvider;
+
+#[ApiResource(
+    operations: [
+        new Patch(
+            uriTemplate: '/employees/{id}/paid-leave-days',
+            security: "is_granted('ROLE_ADMIN')",
+            provider: EmployeePaidLeaveDaysProvider::class,
+            processor: EmployeePaidLeaveDaysProcessor::class
+        ),
+    ],
+    paginationEnabled: false
+)]
+final class EmployeePaidLeaveDaysInput
+{
+    public float $paidLeaveDays = 0.0;
+    public ?int $year           = null;
+}
--- a/src/Dto/AuditLogOutput.php
+++ b/src/Dto/AuditLogOutput.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Dto;
+
+final class AuditLogOutput
+{
+    public function __construct(
+        public int $id,
+        public ?string $employeeName,
+        public ?int $employeeId,
+        public string $username,
+        public string $action,
+        public string $entityType,
+        public string $description,
+        public ?array $changes,
+        public ?string $affectedDate,
+        public string $createdAt,
+    ) {}
+}
--- a/src/Dto/Rtt/WeekRecoveryDetail.php
+++ b/src/Dto/Rtt/WeekRecoveryDetail.php
@@ -6,6 +6,9 @@ namespace App\Dto\Rtt;

 final class WeekRecoveryDetail
 {
+    /**
+     * @param array<string, int> $dailyMinutes date (Y-m-d) => worked minutes
+     */
    public function __construct(
        public int $overtimeMinutes = 0,
        public int $base25Minutes = 0,
@@ -13,5 +16,6 @@ final class WeekRecoveryDetail
        public int $base50Minutes = 0,
        public int $bonus50Minutes = 0,
        public int $totalMinutes = 0,
+        public array $dailyMinutes = [],
    ) {}
 }
--- a/src/Entity/AuditLog.php
+++ b/src/Entity/AuditLog.php
@@ -0,0 +1,169 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Entity;
+
+use App\Repository\AuditLogRepository;
+use DateTimeImmutable;
+use Doctrine\ORM\Mapping as ORM;
+
+#[ORM\Entity(repositoryClass: AuditLogRepository::class)]
+#[ORM\Table(name: 'audit_logs')]
+#[ORM\Index(name: 'idx_audit_employee_created', columns: ['employee_id', 'created_at'])]
+#[ORM\Index(name: 'idx_audit_entity', columns: ['entity_type', 'entity_id'])]
+#[ORM\Index(name: 'idx_audit_created', columns: ['created_at'])]
+#[ORM\Index(name: 'idx_audit_affected_date', columns: ['affected_date'])]
+class AuditLog
+{
+    #[ORM\Id]
+    #[ORM\GeneratedValue]
+    #[ORM\Column(type: 'integer')]
+    private ?int $id = null;
+
+    #[ORM\ManyToOne(targetEntity: Employee::class)]
+    #[ORM\JoinColumn(nullable: true, onDelete: 'SET NULL')]
+    private ?Employee $employee = null;
+
+    #[ORM\Column(type: 'string', length: 180)]
+    private string $username = '';
+
+    #[ORM\Column(type: 'string', length: 30)]
+    private string $action = '';
+
+    #[ORM\Column(type: 'string', length: 50)]
+    private string $entityType = '';
+
+    #[ORM\Column(type: 'integer', nullable: true)]
+    private ?int $entityId = null;
+
+    #[ORM\Column(type: 'text')]
+    private string $description = '';
+
+    #[ORM\Column(type: 'json', nullable: true)]
+    private ?array $changes = null;
+
+    #[ORM\Column(type: 'date_immutable', nullable: true)]
+    private ?DateTimeImmutable $affectedDate = null;
+
+    #[ORM\Column(type: 'datetime_immutable')]
+    private DateTimeImmutable $createdAt;
+
+    public function __construct()
+    {
+        $this->createdAt = new DateTimeImmutable();
+    }
+
+    public function getId(): ?int
+    {
+        return $this->id;
+    }
+
+    public function getEmployee(): ?Employee
+    {
+        return $this->employee;
+    }
+
+    public function setEmployee(?Employee $employee): self
+    {
+        $this->employee = $employee;
+
+        return $this;
+    }
+
+    public function getUsername(): string
+    {
+        return $this->username;
+    }
+
+    public function setUsername(string $username): self
+    {
+        $this->username = $username;
+
+        return $this;
+    }
+
+    public function getAction(): string
+    {
+        return $this->action;
+    }
+
+    public function setAction(string $action): self
+    {
+        $this->action = $action;
+
+        return $this;
+    }
+
+    public function getEntityType(): string
+    {
+        return $this->entityType;
+    }
+
+    public function setEntityType(string $entityType): self
+    {
+        $this->entityType = $entityType;
+
+        return $this;
+    }
+
+    public function getEntityId(): ?int
+    {
+        return $this->entityId;
+    }
+
+    public function setEntityId(?int $entityId): self
+    {
+        $this->entityId = $entityId;
+
+        return $this;
+    }
+
+    public function getDescription(): string
+    {
+        return $this->description;
+    }
+
+    public function setDescription(string $description): self
+    {
+        $this->description = $description;
+
+        return $this;
+    }
+
+    public function getChanges(): ?array
+    {
+        return $this->changes;
+    }
+
+    public function setChanges(?array $changes): self
+    {
+        $this->changes = $changes;
+
+        return $this;
+    }
+
+    public function getAffectedDate(): ?DateTimeImmutable
+    {
+        return $this->affectedDate;
+    }
+
+    public function setAffectedDate(?DateTimeImmutable $affectedDate): self
+    {
+        $this->affectedDate = $affectedDate;
+
+        return $this;
+    }
+
+    public function getCreatedAt(): DateTimeImmutable
+    {
+        return $this->createdAt;
+    }
+
+    public function setCreatedAt(DateTimeImmutable $createdAt): self
+    {
+        $this->createdAt = $createdAt;
+
+        return $this;
+    }
+}
--- a/src/Entity/EmployeeLeaveBalance.php
+++ b/src/Entity/EmployeeLeaveBalance.php
@@ -57,6 +57,9 @@ class EmployeeLeaveBalance
    #[ORM\Column(type: 'float', options: ['default' => 0, 'comment' => 'Jours de fractionnement saisis par la RH.'])]
    private float $fractionedDays = 0.0;

+    #[ORM\Column(type: 'float', options: ['default' => 0, 'comment' => 'Jours de conges N-1 payes par la RH (forfait uniquement).'])]
+    private float $paidLeaveDays = 0.0;
+
    #[ORM\Column(type: 'boolean', options: ['default' => false, 'comment' => 'Indique si le solde de l exercice est fige (verrouille RH).'])]
    private bool $isLocked = false;

@@ -222,6 +225,18 @@ class EmployeeLeaveBalance
        return $this;
    }

+    public function getPaidLeaveDays(): float
+    {
+        return $this->paidLeaveDays;
+    }
+
+    public function setPaidLeaveDays(float $paidLeaveDays): self
+    {
+        $this->paidLeaveDays = $paidLeaveDays;
+
+        return $this;
+    }
+
    public function isLocked(): bool
    {
        return $this->isLocked;
--- a/src/Entity/User.php
+++ b/src/Entity/User.php
@@ -224,5 +224,11 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
        return $this;
    }

+    #[Groups(['user:read'])]
+    public function getIsDriver(): bool
+    {
+        return $this->employee?->getIsDriver() ?? false;
+    }
+
    public function eraseCredentials(): void {}
 }
--- a/src/Repository/AuditLogRepository.php
+++ b/src/Repository/AuditLogRepository.php
@@ -0,0 +1,102 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Repository;
+
+use App\Entity\AuditLog;
+use DateTimeImmutable;
+use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
+use Doctrine\Persistence\ManagerRegistry;
+
+/**
+ * @extends ServiceEntityRepository<AuditLog>
+ */
+final class AuditLogRepository extends ServiceEntityRepository
+{
+    public function __construct(ManagerRegistry $registry)
+    {
+        parent::__construct($registry, AuditLog::class);
+    }
+
+    /**
+     * @return list<AuditLog>
+     */
+    public function findByFilters(
+        ?int $employeeId = null,
+        ?DateTimeImmutable $from = null,
+        ?DateTimeImmutable $to = null,
+        ?string $entityType = null,
+        int $limit = 50,
+        int $offset = 0,
+    ): array {
+        $qb = $this->createQueryBuilder('a')
+            ->orderBy('a.createdAt', 'DESC')
+            ->setMaxResults($limit)
+            ->setFirstResult($offset)
+        ;
+
+        if (null !== $employeeId) {
+            $qb->andWhere('a.employee = :employeeId')
+                ->setParameter('employeeId', $employeeId)
+            ;
+        }
+
+        if (null !== $from) {
+            $qb->andWhere('a.affectedDate >= :from')
+                ->setParameter('from', $from)
+            ;
+        }
+
+        if (null !== $to) {
+            $qb->andWhere('a.affectedDate <= :to')
+                ->setParameter('to', $to)
+            ;
+        }
+
+        if (null !== $entityType) {
+            $qb->andWhere('a.entityType = :entityType')
+                ->setParameter('entityType', $entityType)
+            ;
+        }
+
+        return $qb->getQuery()->getResult();
+    }
+
+    public function countByFilters(
+        ?int $employeeId = null,
+        ?DateTimeImmutable $from = null,
+        ?DateTimeImmutable $to = null,
+        ?string $entityType = null,
+    ): int {
+        $qb = $this->createQueryBuilder('a')
+            ->select('COUNT(a.id)')
+        ;
+
+        if (null !== $employeeId) {
+            $qb->andWhere('a.employee = :employeeId')
+                ->setParameter('employeeId', $employeeId)
+            ;
+        }
+
+        if (null !== $from) {
+            $qb->andWhere('a.affectedDate >= :from')
+                ->setParameter('from', $from)
+            ;
+        }
+
+        if (null !== $to) {
+            $qb->andWhere('a.affectedDate <= :to')
+                ->setParameter('to', $to)
+            ;
+        }
+
+        if (null !== $entityType) {
+            $qb->andWhere('a.entityType = :entityType')
+                ->setParameter('entityType', $entityType)
+            ;
+        }
+
+        return (int) $qb->getQuery()->getSingleScalarResult();
+    }
+}
--- a/src/Service/AuditLogger.php
+++ b/src/Service/AuditLogger.php
@@ -0,0 +1,47 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Service;
+
+use App\Entity\AuditLog;
+use App\Entity\Employee;
+use App\Entity\User;
+use DateTimeImmutable;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\SecurityBundle\Security;
+
+readonly class AuditLogger
+{
+    public function __construct(
+        private EntityManagerInterface $entityManager,
+        private Security $security,
+    ) {}
+
+    public function log(
+        ?Employee $employee,
+        string $action,
+        string $entityType,
+        ?int $entityId,
+        string $description,
+        ?array $changes = null,
+        ?DateTimeImmutable $affectedDate = null,
+    ): void {
+        $user     = $this->security->getUser();
+        $username = $user instanceof User ? $user->getUsername() : 'system';
+
+        $auditLog = new AuditLog();
+        $auditLog
+            ->setEmployee($employee)
+            ->setUsername($username)
+            ->setAction($action)
+            ->setEntityType($entityType)
+            ->setEntityId($entityId)
+            ->setDescription($description)
+            ->setChanges($changes)
+            ->setAffectedDate($affectedDate)
+        ;
+
+        $this->entityManager->persist($auditLog);
+    }
+}
--- a/src/Service/Rtt/RttRecoveryComputationService.php
+++ b/src/Service/Rtt/RttRecoveryComputationService.php
@@ -46,7 +46,7 @@ final readonly class RttRecoveryComputationService
    }

    /**
-     * @return list<array{month:int,weekNumber:int,start:DateTimeImmutable,end:DateTimeImmutable}>
+     * @return list<array{weekNumber:int,start:DateTimeImmutable,end:DateTimeImmutable}>
     */
    public function buildWeeksForExercise(DateTimeImmutable $from, DateTimeImmutable $to): array
    {
@@ -61,10 +61,7 @@ final readonly class RttRecoveryComputationService
            $effectiveEnd   = $end > $to ? $to : $end;

            if ($effectiveEnd >= $effectiveStart) {
-                $saturday    = $start->modify('+5 days');
-                $monthAnchor = $saturday < $from ? $from : ($saturday > $to ? $to : $saturday);
-                $weeks[]     = [
-                    'month'      => (int) $monthAnchor->format('n'),
+                $weeks[] = [
                    'weekNumber' => (int) $effectiveStart->format('W'),
                    'start'      => $start,
                    'end'        => $end,
@@ -82,7 +79,6 @@ final readonly class RttRecoveryComputationService
        $weeks       = $this->buildWeeksForExercise($from, $to);
        $weekRanges  = array_map(
            static fn (array $week): array => [
-                'month'      => (int) $week['month'],
                'weekNumber' => (int) $week['weekNumber'],
                'start'      => $week['start'],
                'end'        => $week['end'],
@@ -108,7 +104,7 @@ final readonly class RttRecoveryComputationService
    }

    /**
-     * @param list<array{month:int,weekNumber:int,start:DateTimeImmutable,end:DateTimeImmutable}> $weeks
+     * @param list<array{weekNumber:int,start:DateTimeImmutable,end:DateTimeImmutable}> $weeks
     *
     * @return array<string, WeekRecoveryDetail>
     */
@@ -189,6 +185,7 @@ final readonly class RttRecoveryComputationService
            }

            $weeklyTotalMinutes      = 0;
+            $dailyWorkedMinutes      = [];
            $employeeContractsByDate = [];
            foreach ($weekDays as $date) {
                $employeeContractsByDate[$date] = $contractsByDate[$employeeId][$date] ?? null;
@@ -198,6 +195,7 @@ final readonly class RttRecoveryComputationService
                $metrics = $metricsByDate[$date] ?? new WorkMetrics();
                $metrics->addCreditedMinutes($creditedByDate[$date] ?? 0);
                $weeklyTotalMinutes += $metrics->totalMinutes;
+                $dailyWorkedMinutes[$date] = $metrics->totalMinutes;
            }

            if ([] === $weekDays) {
@@ -244,6 +242,7 @@ final readonly class RttRecoveryComputationService
                base50Minutes: $base50,
                bonus50Minutes: $bonus50,
                totalMinutes: $totalMinutes,
+                dailyMinutes: $dailyWorkedMinutes,
            );
        }

--- a/src/State/AbsenceWriteProcessor.php
+++ b/src/State/AbsenceWriteProcessor.php
@@ -13,6 +13,7 @@ use App\Entity\User;
 use App\Enum\HalfDay;
 use App\Repository\Contract\AbsenceReadRepositoryInterface;
 use App\Repository\Contract\WorkHourReadRepositoryInterface;
+use App\Service\AuditLogger;
 use App\Service\PublicHolidayServiceInterface;
 use DateInterval;
 use DatePeriod;
@@ -33,6 +34,7 @@ final readonly class AbsenceWriteProcessor implements ProcessorInterface
        private WorkHourReadRepositoryInterface $workHourRepository,
        private Security $security,
        private PublicHolidayServiceInterface $publicHolidayService,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): mixed
@@ -54,6 +56,21 @@ final readonly class AbsenceWriteProcessor implements ProcessorInterface
                throw new ConflictHttpException('Impossible de modifier une absence sur une période validée.');
            }

+            $typeName  = $data->getType()?->getLabel() ?? 'inconnu';
+            $startDate = $data->getStartDate()->format('d/m/Y');
+            $endDate   = $data->getEndDate()->format('d/m/Y');
+            $empName   = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+
+            $this->auditLogger->log(
+                $employee,
+                'delete',
+                'absence',
+                $data->getId(),
+                sprintf('Absence %s supprimée pour %s du %s au %s', $typeName, $empName, $startDate, $endDate),
+                ['old' => ['type' => $typeName, 'start' => $startDate, 'end' => $endDate, 'startHalf' => $data->getStartHalf()->value, 'endHalf' => $data->getEndHalf()->value, 'comment' => $data->getComment()]],
+                DateTimeImmutable::createFromInterface($data->getStartDate()),
+            );
+
            $this->entityManager->remove($data);
            $this->entityManager->flush();

@@ -110,6 +127,21 @@ final readonly class AbsenceWriteProcessor implements ProcessorInterface
            $this->entityManager->persist($absence);
        }

+        $typeName  = $data->getType()?->getLabel() ?? 'inconnu';
+        $startDate = $data->getStartDate()->format('d/m/Y');
+        $endDate   = $data->getEndDate()->format('d/m/Y');
+        $empName   = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+
+        $this->auditLogger->log(
+            $employee,
+            'create',
+            'absence',
+            null,
+            sprintf('Absence %s créée pour %s du %s au %s', $typeName, $empName, $startDate, $endDate),
+            ['new' => ['type' => $typeName, 'start' => $startDate, 'end' => $endDate, 'startHalf' => $data->getStartHalf()->value, 'endHalf' => $data->getEndHalf()->value, 'comment' => $data->getComment()]],
+            DateTimeImmutable::createFromInterface($data->getStartDate()),
+        );
+
        $this->entityManager->flush();

        return $data;
--- a/src/State/AuditLogProvider.php
+++ b/src/State/AuditLogProvider.php
@@ -0,0 +1,74 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\State;
+
+use ApiPlatform\Metadata\Operation;
+use ApiPlatform\State\ProviderInterface;
+use App\Repository\AuditLogRepository;
+use DateTimeImmutable;
+use DateTimeZone;
+use Symfony\Component\HttpFoundation\JsonResponse;
+use Symfony\Component\HttpFoundation\RequestStack;
+
+class AuditLogProvider implements ProviderInterface
+{
+    private const PER_PAGE = 50;
+
+    public function __construct(
+        private readonly RequestStack $requestStack,
+        private readonly AuditLogRepository $auditLogRepository,
+    ) {}
+
+    public function provide(Operation $operation, array $uriVariables = [], array $context = []): JsonResponse
+    {
+        $request = $this->requestStack->getCurrentRequest();
+        if (!$request) {
+            return new JsonResponse(['items' => [], 'total' => 0]);
+        }
+
+        $employeeId = $request->query->get('employeeId');
+        $from       = $request->query->get('from');
+        $to         = $request->query->get('to');
+        $entityType = $request->query->get('entityType');
+        $page       = max(1, (int) $request->query->get('page', '1'));
+
+        $empId  = $employeeId ? (int) $employeeId : null;
+        $fromDt = $from ? new DateTimeImmutable($from) : null;
+        $toDt   = $to ? new DateTimeImmutable($to) : null;
+        $type   = $entityType ?: null;
+        $offset = ($page - 1) * self::PER_PAGE;
+
+        $total = $this->auditLogRepository->countByFilters($empId, $fromDt, $toDt, $type);
+        $logs  = $this->auditLogRepository->findByFilters($empId, $fromDt, $toDt, $type, self::PER_PAGE, $offset);
+
+        $items = [];
+        foreach ($logs as $log) {
+            $employee     = $log->getEmployee();
+            $employeeName = $employee
+                ? trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''))
+                : null;
+
+            $items[] = [
+                'id'           => $log->getId(),
+                'employeeName' => $employeeName,
+                'employeeId'   => $employee?->getId(),
+                'username'     => $log->getUsername(),
+                'action'       => $log->getAction(),
+                'entityType'   => $log->getEntityType(),
+                'description'  => $log->getDescription(),
+                'changes'      => $log->getChanges(),
+                'affectedDate' => $log->getAffectedDate()?->format('Y-m-d'),
+                'createdAt'    => $log->getCreatedAt()->setTimezone(new DateTimeZone('Europe/Paris'))->format('Y-m-d H:i:s'),
+            ];
+        }
+
+        return new JsonResponse([
+            'items'   => $items,
+            'total'   => $total,
+            'page'    => $page,
+            'perPage' => self::PER_PAGE,
+        ]);
+    }
+}
--- a/src/State/ContractSuspensionWriteProcessor.php
+++ b/src/State/ContractSuspensionWriteProcessor.php
@@ -8,6 +8,7 @@ use ApiPlatform\Metadata\Operation;
 use ApiPlatform\State\ProcessorInterface;
 use App\Entity\ContractSuspension;
 use App\Entity\EmployeeContractPeriod;
+use App\Service\AuditLogger;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Component\DependencyInjection\Attribute\Autowire;
@@ -19,6 +20,7 @@ final readonly class ContractSuspensionWriteProcessor implements ProcessorInterf
        #[Autowire(service: 'api_platform.doctrine.orm.state.persist_processor')]
        private ProcessorInterface $persistProcessor,
        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(
@@ -46,7 +48,26 @@ final readonly class ContractSuspensionWriteProcessor implements ProcessorInterf

        $this->validate($data, $period);

-        return $this->persistProcessor->process($data, $operation, $uriVariables, $context);
+        $isNew    = null === $data->getId();
+        $employee = $period->getEmployee();
+        $empName  = $employee ? trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? '')) : '';
+        $start    = $data->getStartDate()->format('d/m/Y');
+        $end      = $data->getEndDate()?->format('d/m/Y') ?? 'indéfinie';
+
+        $result = $this->persistProcessor->process($data, $operation, $uriVariables, $context);
+
+        $this->auditLogger->log(
+            $employee,
+            $isNew ? 'create' : 'update',
+            'contract_suspension',
+            $data->getId(),
+            sprintf('Suspension %s pour %s du %s au %s', $isNew ? 'créée' : 'modifiée', $empName, $start, $end),
+            ['new' => ['start' => $start, 'end' => $end]],
+            DateTimeImmutable::createFromInterface($data->getStartDate()),
+        );
+        $this->entityManager->flush();
+
+        return $result;
    }

    private function validate(ContractSuspension $suspension, EmployeeContractPeriod $period): void
--- a/src/State/EmployeeFractionedDaysProcessor.php
+++ b/src/State/EmployeeFractionedDaysProcessor.php
@@ -13,6 +13,7 @@ use App\Enum\ContractType;
 use App\Enum\LeaveRuleCode;
 use App\Repository\EmployeeLeaveBalanceRepository;
 use App\Repository\EmployeeRepository;
+use App\Service\AuditLogger;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
@@ -24,6 +25,7 @@ final readonly class EmployeeFractionedDaysProcessor implements ProcessorInterfa
        private EmployeeRepository $employeeRepository,
        private EmployeeLeaveBalanceRepository $leaveBalanceRepository,
        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): EmployeeFractionedDaysInput
@@ -57,6 +59,17 @@ final readonly class EmployeeFractionedDaysProcessor implements ProcessorInterfa

        $balance->setFractionedDays($data->fractionedDays);
        $balance->touch();
+
+        $empName = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+        $this->auditLogger->log(
+            $employee,
+            'update',
+            'fractioned_days',
+            $balance->getId(),
+            sprintf('Jours fractionnés modifiés pour %s (année %d) : %s', $empName, $year, (string) $data->fractionedDays),
+            ['new' => ['fractionedDays' => $data->fractionedDays, 'year' => $year]],
+        );
+
        $this->entityManager->flush();

        $data->year = $year;
--- a/src/State/EmployeeLeaveSummaryProvider.php
+++ b/src/State/EmployeeLeaveSummaryProvider.php
@@ -93,6 +93,16 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
        }

        $fractionedDays = $this->resolveFractionedDays($employee, $yearSummary['ruleCode'], $year);
+        $paidLeaveDays  = $this->resolvePaidLeaveDays($employee, $yearSummary['ruleCode'], $year);
+
+        // For forfait contracts, paid days reduce N-1 stock before taken-day attribution.
+        // Recompute with paidLeaveDays so taken days shift from N-1 to N when N-1 is consumed by payment.
+        if ($paidLeaveDays > 0.0) {
+            $yearSummary = $this->computeYearSummary($employee, $year, $paidLeaveDays);
+            if (null === $yearSummary) {
+                return $summary;
+            }
+        }

        $summary->isSupported               = true;
        $summary->ruleCode                  = $yearSummary['ruleCode'];
@@ -107,6 +117,7 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
        $summary->previousYearAcquiredDays  = $yearSummary['previousYearAcquiredDays'];
        $summary->previousYearTakenDays     = $yearSummary['previousYearTakenDays'];
        $summary->previousYearRemainingDays = $yearSummary['previousYearRemainingDays'];
+        $summary->previousYearPaidDays      = $paidLeaveDays;

        [$periodFrom, $periodTo]      = $this->resolvePeriodBounds($employee, $year);
        $summary->presenceDaysByMonth = $this->computePresenceDaysByMonth($employee, $periodFrom, $periodTo);
@@ -129,7 +140,7 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
     *   previousYearRemainingDays: float
     * }
     */
-    public function computeYearSummary(Employee $employee, int $targetYear): ?array
+    public function computeYearSummary(Employee $employee, int $targetYear, float $paidLeaveDays = 0.0): ?array
    {
        $firstYear = max($this->resolveFirstComputationYear($employee), $targetYear - 1);
        if ($targetYear < $firstYear) {
@@ -269,13 +280,15 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
            } else {
                // Forfait: no "en cours d'acquisition" counter, all rights are in acquired.
                // Suspensions do not impact forfait 218 leave calculation.
-                // Taken days are first deducted from N-1 carry, then from current year.
-                $previousYearAcquired = $carryDays;
-                $takenFromPrevious    = min(max(0.0, $previousYearAcquired), $takenDays);
-                $previousYearTaken    = $takenFromPrevious;
-                $takenFromCurrent     = $takenDays - $takenFromPrevious;
+                // Paid days reduce N-1 stock first, then taken days are attributed to what remains in N-1.
+                $previousYearAcquired  = $carryDays;
+                $effectivePaidDays     = ($year === $targetYear) ? $paidLeaveDays : 0.0;
+                $availableAfterPayment = max(0.0, $previousYearAcquired - $effectivePaidDays);
+                $takenFromPrevious     = min($availableAfterPayment, $takenDays);
+                $previousYearTaken     = $takenFromPrevious;
+                $takenFromCurrent      = $takenDays - $takenFromPrevious;

-                $previousYearRemaining = max(0.0, $previousYearAcquired - $takenFromPrevious);
+                $previousYearRemaining = max(0.0, $availableAfterPayment - $takenFromPrevious);

                $acquiredDays       = $leavePolicy['acquiredDays'];
                $accruingDays       = 0.0;
@@ -765,6 +778,13 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
        return null !== $balance ? $balance->getFractionedDays() : 0.0;
    }

+    private function resolvePaidLeaveDays(Employee $employee, string $ruleCode, int $year): float
+    {
+        $balance = $this->leaveBalanceRepository->findOneByEmployeeRuleAndYear($employee, $ruleCode, $year);
+
+        return null !== $balance ? $balance->getPaidLeaveDays() : 0.0;
+    }
+
    private function resolveCurrentLeaveYear(DateTimeImmutable $today): int
    {
        $year  = (int) $today->format('Y');
--- a/src/State/EmployeePaidLeaveDaysProcessor.php
+++ b/src/State/EmployeePaidLeaveDaysProcessor.php
@@ -0,0 +1,101 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\State;
+
+use ApiPlatform\Metadata\Operation;
+use ApiPlatform\State\ProcessorInterface;
+use App\ApiResource\EmployeePaidLeaveDaysInput;
+use App\Entity\Employee;
+use App\Entity\EmployeeLeaveBalance;
+use App\Enum\ContractType;
+use App\Enum\LeaveRuleCode;
+use App\Repository\EmployeeLeaveBalanceRepository;
+use App\Repository\EmployeeRepository;
+use App\Service\AuditLogger;
+use DateTimeImmutable;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+use Symfony\Component\HttpKernel\Exception\UnprocessableEntityHttpException;
+
+final readonly class EmployeePaidLeaveDaysProcessor implements ProcessorInterface
+{
+    public function __construct(
+        private EmployeeRepository $employeeRepository,
+        private EmployeeLeaveBalanceRepository $leaveBalanceRepository,
+        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
+    ) {}
+
+    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): EmployeePaidLeaveDaysInput
+    {
+        if (!$data instanceof EmployeePaidLeaveDaysInput) {
+            throw new UnprocessableEntityHttpException('Invalid payload.');
+        }
+
+        $employeeId = (int) ($uriVariables['id'] ?? 0);
+        if ($employeeId <= 0) {
+            throw new UnprocessableEntityHttpException('id must be a positive integer.');
+        }
+
+        $employee = $this->employeeRepository->find($employeeId);
+        if (!$employee instanceof Employee) {
+            throw new NotFoundHttpException('Employee not found.');
+        }
+
+        $year     = $data->year ?? $this->resolveCurrentYear($employee);
+        $ruleCode = $this->resolveRuleCode($employee);
+
+        $balance = $this->leaveBalanceRepository->findOneByEmployeeRuleAndYear($employee, $ruleCode, $year);
+
+        if (null === $balance) {
+            $balance = new EmployeeLeaveBalance();
+            $balance->setEmployee($employee);
+            $balance->setRuleCode($ruleCode);
+            $balance->setYear($year);
+            $this->entityManager->persist($balance);
+        }
+
+        $balance->setPaidLeaveDays($data->paidLeaveDays);
+        $balance->touch();
+
+        $empName = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+        $this->auditLogger->log(
+            $employee,
+            'update',
+            'paid_leave_days',
+            $balance->getId(),
+            sprintf('Congés N-1 payés modifiés pour %s (année %d) : %s', $empName, $year, (string) $data->paidLeaveDays),
+            ['new' => ['paidLeaveDays' => $data->paidLeaveDays, 'year' => $year]],
+        );
+
+        $this->entityManager->flush();
+
+        $data->year = $year;
+
+        return $data;
+    }
+
+    private function resolveRuleCode(Employee $employee): LeaveRuleCode
+    {
+        if (ContractType::FORFAIT === $employee->getContract()?->getType()) {
+            return LeaveRuleCode::FORFAIT_218;
+        }
+
+        return LeaveRuleCode::CDI_CDD_NON_FORFAIT;
+    }
+
+    private function resolveCurrentYear(Employee $employee): int
+    {
+        $today = new DateTimeImmutable('today');
+
+        if (ContractType::FORFAIT === $employee->getContract()?->getType()) {
+            return (int) $today->format('Y');
+        }
+
+        $month = (int) $today->format('n');
+
+        return $month >= 6 ? (int) $today->format('Y') + 1 : (int) $today->format('Y');
+    }
+}
--- a/src/State/EmployeePaidLeaveDaysProvider.php
+++ b/src/State/EmployeePaidLeaveDaysProvider.php
@@ -0,0 +1,17 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\State;
+
+use ApiPlatform\Metadata\Operation;
+use ApiPlatform\State\ProviderInterface;
+use App\ApiResource\EmployeePaidLeaveDaysInput;
+
+final readonly class EmployeePaidLeaveDaysProvider implements ProviderInterface
+{
+    public function provide(Operation $operation, array $uriVariables = [], array $context = []): EmployeePaidLeaveDaysInput
+    {
+        return new EmployeePaidLeaveDaysInput();
+    }
+}
--- a/src/State/EmployeeRttPaymentProcessor.php
+++ b/src/State/EmployeeRttPaymentProcessor.php
@@ -11,6 +11,7 @@ use App\Entity\Employee;
 use App\Entity\EmployeeRttPayment;
 use App\Repository\EmployeeRepository;
 use App\Repository\EmployeeRttPaymentRepository;
+use App\Service\AuditLogger;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
@@ -22,6 +23,7 @@ final readonly class EmployeeRttPaymentProcessor implements ProcessorInterface
        private EmployeeRepository $employeeRepository,
        private EmployeeRttPaymentRepository $rttPaymentRepository,
        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): EmployeeRttPaymentInput
@@ -61,6 +63,17 @@ final readonly class EmployeeRttPaymentProcessor implements ProcessorInterface
        $payment->setBase50Minutes($data->base50Minutes);
        $payment->setBonus50Minutes($data->bonus50Minutes);
        $payment->touch();
+
+        $empName = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+        $this->auditLogger->log(
+            $employee,
+            'update',
+            'rtt_payment',
+            $payment->getId(),
+            sprintf('Paiement RTT modifié pour %s (%02d/%d)', $empName, $data->month, $year),
+            ['new' => ['month' => $data->month, 'year' => $year, 'base25' => $data->base25Minutes, 'bonus25' => $data->bonus25Minutes, 'base50' => $data->base50Minutes, 'bonus50' => $data->bonus50Minutes]],
+        );
+
        $this->entityManager->flush();

        $data->year = $year;
--- a/src/State/EmployeeRttSummaryProvider.php
+++ b/src/State/EmployeeRttSummaryProvider.php
@@ -71,7 +71,6 @@ final readonly class EmployeeRttSummaryProvider implements ProviderInterface
        $weeks                   = $this->rttRecoveryService->buildWeeksForExercise($periodFrom, $periodTo);
        $weekRanges              = array_map(
            static fn (array $week): array => [
-                'month'      => (int) $week['month'],
                'weekNumber' => (int) $week['weekNumber'],
                'start'      => $week['start'],
                'end'        => $week['end'],
@@ -118,25 +117,7 @@ final readonly class EmployeeRttSummaryProvider implements ProviderInterface
                $summary->rttStartDate = $this->rttStartDate;
            }
        }
-        $summary->weeks = array_map(
-            static function (array $week) use ($currentByWeekStart) {
-                $detail = $currentByWeekStart[$week['start']->format('Y-m-d')] ?? new WeekRecoveryDetail();
-
-                return new EmployeeRttWeekSummary(
-                    month: (int) $week['month'],
-                    weekNumber: (int) $week['weekNumber'],
-                    weekStart: $week['start']->format('Y-m-d'),
-                    weekEnd: $week['end']->format('Y-m-d'),
-                    overtimeMinutes: $detail->overtimeMinutes,
-                    base25Minutes: $detail->base25Minutes,
-                    bonus25Minutes: $detail->bonus25Minutes,
-                    base50Minutes: $detail->base50Minutes,
-                    bonus50Minutes: $detail->bonus50Minutes,
-                    totalMinutes: $detail->totalMinutes,
-                );
-            },
-            $weekRanges
-        );
+        $summary->weeks = $this->buildWeekSummaries($weekRanges, $currentByWeekStart, $periodFrom, $periodTo);

        // Post-process: distribute deficit weeks across cumulative balance (50% first, then 25%)
        $cumulative50 = $carry->base50Minutes + $carry->bonus50Minutes;
@@ -269,4 +250,88 @@ final readonly class EmployeeRttSummaryProvider implements ProviderInterface

        return $weekEnd;
    }
+
+    /**
+     * Build week summaries, splitting weeks that span two months into two entries
+     * with values distributed proportionally based on daily worked minutes.
+     *
+     * @param list<array{weekNumber:int,start:DateTimeImmutable,end:DateTimeImmutable}> $weekRanges
+     * @param array<string, WeekRecoveryDetail>                                         $recoveryByWeek
+     *
+     * @return list<EmployeeRttWeekSummary>
+     */
+    private function buildWeekSummaries(array $weekRanges, array $recoveryByWeek, DateTimeImmutable $periodFrom, DateTimeImmutable $periodTo): array
+    {
+        $result = [];
+
+        foreach ($weekRanges as $week) {
+            $weekStart = $week['start'];
+            $weekEnd   = $week['end'];
+            $weekKey   = $weekStart->format('Y-m-d');
+            $detail    = $recoveryByWeek[$weekKey] ?? new WeekRecoveryDetail();
+
+            $effectiveStart = $weekStart < $periodFrom ? $periodFrom : $weekStart;
+            $effectiveEnd   = $weekEnd > $periodTo ? $periodTo : $weekEnd;
+
+            $startMonth = (int) $effectiveStart->format('n');
+            $endMonth   = (int) $effectiveEnd->format('n');
+
+            if ($startMonth === $endMonth) {
+                $result[] = new EmployeeRttWeekSummary(
+                    month: $startMonth,
+                    weekNumber: (int) $week['weekNumber'],
+                    weekStart: $weekStart->format('Y-m-d'),
+                    weekEnd: $weekEnd->format('Y-m-d'),
+                    overtimeMinutes: $detail->overtimeMinutes,
+                    base25Minutes: $detail->base25Minutes,
+                    bonus25Minutes: $detail->bonus25Minutes,
+                    base50Minutes: $detail->base50Minutes,
+                    bonus50Minutes: $detail->bonus50Minutes,
+                    totalMinutes: $detail->totalMinutes,
+                );
+
+                continue;
+            }
+
+            // Week spans two months — split proportionally by daily worked minutes
+            $monthMinutes  = [];
+            $monthWeekdays = [];
+            foreach ($detail->dailyMinutes as $date => $mins) {
+                $m                = (int) new DateTimeImmutable($date)->format('n');
+                $monthMinutes[$m] = ($monthMinutes[$m] ?? 0) + $mins;
+                $isoDay           = (int) new DateTimeImmutable($date)->format('N');
+                if ($isoDay < 6) {
+                    $monthWeekdays[$m] = ($monthWeekdays[$m] ?? 0) + 1;
+                }
+            }
+
+            $totalWorked   = array_sum($monthMinutes);
+            $totalWeekdays = array_sum($monthWeekdays);
+
+            foreach ([$startMonth, $endMonth] as $month) {
+                if ($totalWorked > 0) {
+                    $ratio = ($monthMinutes[$month] ?? 0) / $totalWorked;
+                } elseif ($totalWeekdays > 0) {
+                    $ratio = ($monthWeekdays[$month] ?? 0) / $totalWeekdays;
+                } else {
+                    $ratio = 0.0;
+                }
+
+                $result[] = new EmployeeRttWeekSummary(
+                    month: $month,
+                    weekNumber: (int) $week['weekNumber'],
+                    weekStart: $weekStart->format('Y-m-d'),
+                    weekEnd: $weekEnd->format('Y-m-d'),
+                    overtimeMinutes: (int) round($detail->overtimeMinutes * $ratio),
+                    base25Minutes: (int) round($detail->base25Minutes * $ratio),
+                    bonus25Minutes: (int) round($detail->bonus25Minutes * $ratio),
+                    base50Minutes: (int) round($detail->base50Minutes * $ratio),
+                    bonus50Minutes: (int) round($detail->bonus50Minutes * $ratio),
+                    totalMinutes: (int) round($detail->totalMinutes * $ratio),
+                );
+            }
+        }
+
+        return $result;
+    }
 }
--- a/src/State/EmployeeWriteProcessor.php
+++ b/src/State/EmployeeWriteProcessor.php
@@ -11,6 +11,7 @@ use App\Entity\Contract;
 use App\Entity\Employee;
 use App\Enum\ContractNature;
 use App\Repository\Contract\EmployeeContractPeriodReadRepositoryInterface;
+use App\Service\AuditLogger;
 use App\Service\Contracts\EmployeeContractChangeRequestFactory;
 use App\Service\Contracts\EmployeeContractPeriodManagerInterface;
 use DateTimeImmutable;
@@ -29,6 +30,7 @@ final readonly class EmployeeWriteProcessor implements ProcessorInterface
        private EmployeeContractPeriodReadRepositoryInterface $periodRepository,
        private EmployeeContractChangeRequestFactory $changeRequestFactory,
        private EmployeeContractPeriodManagerInterface $periodManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(
@@ -72,6 +74,17 @@ final readonly class EmployeeWriteProcessor implements ProcessorInterface
            $data->setEntryDate($startDate);
            $this->entityManager->flush();

+            $empName = trim(($data->getLastName() ?? '').' '.($data->getFirstName() ?? ''));
+            $this->auditLogger->log(
+                $data,
+                'create',
+                'employee',
+                $data->getId(),
+                sprintf('Employé %s créé (contrat: %s)', $empName, $currentContract->getName() ?? ''),
+                ['new' => ['name' => $empName, 'contract' => $currentContract->getName(), 'nature' => $nature->value, 'startDate' => $startDate->format('d/m/Y')]],
+            );
+            $this->entityManager->flush();
+
            return $result;
        }

@@ -79,6 +92,17 @@ final readonly class EmployeeWriteProcessor implements ProcessorInterface
            return $result;
        }

+        $empName = trim(($data->getLastName() ?? '').' '.($data->getFirstName() ?? ''));
+        $this->auditLogger->log(
+            $data,
+            'update',
+            'employee',
+            $data->getId(),
+            sprintf('Contrat modifié pour %s : %s → %s', $empName, $previousContract?->getName() ?? 'aucun', $currentContract->getName() ?? ''),
+            ['old' => ['contract' => $previousContract?->getName()], 'new' => ['contract' => $currentContract->getName()]],
+        );
+        $this->entityManager->flush();
+
        $todayPeriod           = $this->periodRepository->findOneCoveringDate($data, $today);
        $effectivePeriod       = $todayPeriod ?? $this->periodRepository->findLatestPeriod($data);
        $currentPeriodContract = $effectivePeriod?->getContract();
--- a/src/State/WorkHourBulkSiteValidationProcessor.php
+++ b/src/State/WorkHourBulkSiteValidationProcessor.php
@@ -14,6 +14,7 @@ use App\Entity\WorkHour;
 use App\Repository\UserRepository;
 use App\Repository\WorkHourRepository;
 use App\Security\EmployeeScopeService;
+use App\Service\AuditLogger;
 use App\Service\WorkHours\WorkHourBulkValidationExecutor;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
@@ -30,6 +31,7 @@ final readonly class WorkHourBulkSiteValidationProcessor implements ProcessorInt
        private UserRepository $userRepository,
        private EmployeeScopeService $employeeScopeService,
        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(
@@ -61,6 +63,21 @@ final readonly class WorkHourBulkSiteValidationProcessor implements ProcessorInt
            }
        );

+        if ($result->updated > 0) {
+            $workDate = DateTimeImmutable::createFromFormat('Y-m-d', $data->workDate);
+            $action   = $data->isSiteValid ? 'validé' : 'dévalidé';
+
+            $this->auditLogger->log(
+                null,
+                'site_validate',
+                'work_hour',
+                null,
+                sprintf('Validation site %s pour %d employé(s) le %s', $action, $result->updated, $data->workDate),
+                ['employeeIds' => $data->employeeIds, 'isSiteValid' => $data->isSiteValid],
+                $workDate ?: null,
+            );
+        }
+
        if ($data->isSiteValid && $result->updated > 0) {
            $this->createNotificationsIfSiteFullyValidated($user, $data->workDate);
        }
--- a/src/State/WorkHourBulkUpsertProcessor.php
+++ b/src/State/WorkHourBulkUpsertProcessor.php
@@ -14,6 +14,7 @@ use App\Enum\TrackingMode;
 use App\Repository\Contract\AbsenceReadRepositoryInterface;
 use App\Repository\EmployeeRepository;
 use App\Repository\WorkHourRepository;
+use App\Service\AuditLogger;
 use App\Service\Contracts\EmployeeContractResolver;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
@@ -31,6 +32,7 @@ final readonly class WorkHourBulkUpsertProcessor implements ProcessorInterface
        private WorkHourRepository $workHourRepository,
        private AbsenceReadRepositoryInterface $absenceRepository,
        private EmployeeContractResolver $contractResolver,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(
@@ -137,9 +139,20 @@ final readonly class WorkHourBulkUpsertProcessor implements ProcessorInterface

            $is4hContract = 4 === $contract->getWeeklyHours();

+            $empName = trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? ''));
+
            if ($this->isEntryEmpty($normalized)) {
                // Convention choisie: une ligne vide supprime l'enregistrement existant.
                if ($existing) {
+                    $this->auditLogger->log(
+                        $employee,
+                        'delete',
+                        'work_hour',
+                        $existing->getId(),
+                        sprintf('Heures supprimées pour %s le %s', $empName, $data->workDate),
+                        ['old' => $this->snapshotWorkHour($existing)],
+                        $workDate,
+                    );
                    $this->entityManager->remove($existing);
                    ++$result->deleted;
                } elseif (($absenceByEmployeeId[$employeeId] ?? false) === true || $is4hContract) {
@@ -163,9 +176,11 @@ final readonly class WorkHourBulkUpsertProcessor implements ProcessorInterface
            }

            if ($existing) {
-                $workHour = $existing;
+                $oldSnapshot = $this->snapshotWorkHour($existing);
+                $workHour    = $existing;
                ++$result->updated;
            } else {
+                $oldSnapshot = null;
                // Upsert: création si aucune ligne n'existe pour (employé, date).
                $workHour = new WorkHour()
                    ->setEmployee($employee)
@@ -179,6 +194,23 @@ final readonly class WorkHourBulkUpsertProcessor implements ProcessorInterface
            if (!$isAdmin) {
                $workHour->setUpdatedAt(new DateTimeImmutable());
            }
+
+            $newSnapshot = $this->snapshotWorkHour($workHour);
+            $action      = null !== $oldSnapshot ? 'update' : 'create';
+            $changes     = null !== $oldSnapshot
+                ? ['old' => $oldSnapshot, 'new' => $newSnapshot]
+                : ['new' => $newSnapshot];
+
+            $this->auditLogger->log(
+                $employee,
+                $action,
+                'work_hour',
+                $workHour->getId(),
+                sprintf('Heures %s pour %s le %s', null !== $oldSnapshot ? 'modifiées' : 'créées', $empName, $data->workDate),
+                $changes,
+                $workDate,
+            );
+
            ++$result->processed;
        }

@@ -446,6 +478,30 @@ final readonly class WorkHourBulkUpsertProcessor implements ProcessorInterface
        ;
    }

+    /**
+     * @return array<string, mixed>
+     */
+    private function snapshotWorkHour(WorkHour $wh): array
+    {
+        return [
+            'morningFrom'          => $wh->getMorningFrom(),
+            'morningTo'            => $wh->getMorningTo(),
+            'afternoonFrom'        => $wh->getAfternoonFrom(),
+            'afternoonTo'          => $wh->getAfternoonTo(),
+            'eveningFrom'          => $wh->getEveningFrom(),
+            'eveningTo'            => $wh->getEveningTo(),
+            'isPresentMorning'     => $wh->getIsPresentMorning(),
+            'isPresentAfternoon'   => $wh->getIsPresentAfternoon(),
+            'dayHoursMinutes'      => $wh->getDayHoursMinutes(),
+            'nightHoursMinutes'    => $wh->getNightHoursMinutes(),
+            'workshopHoursMinutes' => $wh->getWorkshopHoursMinutes(),
+            'hasBreakfast'         => $wh->getHasBreakfast(),
+            'hasLunch'             => $wh->getHasLunch(),
+            'hasDinner'            => $wh->getHasDinner(),
+            'hasOvernight'         => $wh->getHasOvernight(),
+        ];
+    }
+
    /**
     * @param array{
     *     morningFrom:?string,
--- a/src/State/WorkHourBulkValidationProcessor.php
+++ b/src/State/WorkHourBulkValidationProcessor.php
@@ -10,7 +10,9 @@ use App\ApiResource\WorkHourBulkValidation;
 use App\ApiResource\WorkHourBulkValidationResult;
 use App\Entity\User;
 use App\Entity\WorkHour;
+use App\Service\AuditLogger;
 use App\Service\WorkHours\WorkHourBulkValidationExecutor;
+use DateTimeImmutable;
 use Symfony\Bundle\SecurityBundle\Security;
 use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
 use Symfony\Component\HttpKernel\Exception\BadRequestHttpException;
@@ -20,6 +22,7 @@ final readonly class WorkHourBulkValidationProcessor implements ProcessorInterfa
    public function __construct(
        private Security $security,
        private WorkHourBulkValidationExecutor $executor,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(
@@ -41,7 +44,7 @@ final readonly class WorkHourBulkValidationProcessor implements ProcessorInterfa
            throw new AccessDeniedHttpException('Only admins can bulk validate work hours.');
        }

-        return $this->executor->execute(
+        $result = $this->executor->execute(
            user: $user,
            workDateValue: $data->workDate,
            employeeIds: $data->employeeIds,
@@ -50,5 +53,22 @@ final readonly class WorkHourBulkValidationProcessor implements ProcessorInterfa
                $workHour->setIsValid($data->isValid);
            }
        );
+
+        if ($result->updated > 0) {
+            $workDate = DateTimeImmutable::createFromFormat('Y-m-d', $data->workDate);
+            $action   = $data->isValid ? 'validé' : 'dévalidé';
+
+            $this->auditLogger->log(
+                null,
+                'validate',
+                'work_hour',
+                null,
+                sprintf('Validation RH %s pour %d employé(s) le %s', $action, $result->updated, $data->workDate),
+                ['employeeIds' => $data->employeeIds, 'isValid' => $data->isValid],
+                $workDate ?: null,
+            );
+        }
+
+        return $result;
    }
 }
--- a/src/State/WorkHourSiteValidationProcessor.php
+++ b/src/State/WorkHourSiteValidationProcessor.php
@@ -12,6 +12,8 @@ use App\Entity\WorkHour;
 use App\Repository\UserRepository;
 use App\Repository\WorkHourRepository;
 use App\Security\EmployeeScopeService;
+use App\Service\AuditLogger;
+use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use Symfony\Bundle\SecurityBundle\Security;
 use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
@@ -24,6 +26,7 @@ final readonly class WorkHourSiteValidationProcessor implements ProcessorInterfa
        private WorkHourRepository $workHourRepository,
        private UserRepository $userRepository,
        private EntityManagerInterface $entityManager,
+        private AuditLogger $auditLogger,
    ) {}

    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): WorkHour
@@ -59,6 +62,23 @@ final readonly class WorkHourSiteValidationProcessor implements ProcessorInterfa
            && false === $changeSet['isSiteValid'][0]
            && true === $changeSet['isSiteValid'][1];

+        if (isset($changeSet['isSiteValid'])) {
+            $employee = $data->getEmployee();
+            $empName  = $employee ? trim(($employee->getLastName() ?? '').' '.($employee->getFirstName() ?? '')) : '';
+            $workDate = $data->getWorkDate();
+            $newVal   = $changeSet['isSiteValid'][1] ? 'validé' : 'dévalidé';
+
+            $this->auditLogger->log(
+                $employee,
+                'site_validate',
+                'work_hour',
+                $data->getId(),
+                sprintf('Validation site %s pour %s le %s', $newVal, $empName, $workDate->format('d/m/Y')),
+                ['old' => ['isSiteValid' => $changeSet['isSiteValid'][0]], 'new' => ['isSiteValid' => $changeSet['isSiteValid'][1]]],
+                $workDate instanceof DateTimeImmutable ? $workDate : DateTimeImmutable::createFromInterface($workDate),
+            );
+        }
+
        $this->entityManager->flush();

        // Notification uniquement quand la dernière ligne du site est validée pour la date.
--- a/tests/State/AbsenceWriteProcessorTest.php
+++ b/tests/State/AbsenceWriteProcessorTest.php
@@ -14,6 +14,7 @@ use App\Entity\User;
 use App\Enum\HalfDay;
 use App\Repository\Contract\AbsenceReadRepositoryInterface;
 use App\Repository\Contract\WorkHourReadRepositoryInterface;
+use App\Service\AuditLogger;
 use App\Service\PublicHolidayServiceInterface;
 use App\State\AbsenceWriteProcessor;
 use DateTime;
@@ -36,7 +37,7 @@ final class AbsenceWriteProcessorTest extends TestCase
        $absenceRepository  = $this->createMock(AbsenceReadRepositoryInterface::class);
        $workHourRepository = $this->createMock(WorkHourReadRepositoryInterface::class);
        $security           = $this->createAdminSecurityStub();
-        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub());
+        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub(), $this->createStub(AuditLogger::class));

        $absence = $this->buildAbsence('2026-02-16', '2026-02-18', HalfDay::AM, HalfDay::PM);

@@ -64,7 +65,7 @@ final class AbsenceWriteProcessorTest extends TestCase
        $absenceRepository  = $this->createStub(AbsenceReadRepositoryInterface::class);
        $workHourRepository = $this->createMock(WorkHourReadRepositoryInterface::class);
        $security           = $this->createAdminSecurityStub();
-        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub());
+        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub(), $this->createStub(AuditLogger::class));

        $absence = $this->buildAbsence('2026-02-16', '2026-02-16', HalfDay::AM, HalfDay::PM);

@@ -85,7 +86,7 @@ final class AbsenceWriteProcessorTest extends TestCase
        $absenceRepository  = $this->createStub(AbsenceReadRepositoryInterface::class);
        $workHourRepository = $this->createMock(WorkHourReadRepositoryInterface::class);
        $security           = $this->createAdminSecurityStub();
-        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub());
+        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub(), $this->createStub(AuditLogger::class));

        $absence = $this->buildAbsence('2026-02-16', '2026-02-16', HalfDay::AM, HalfDay::PM);

@@ -107,7 +108,7 @@ final class AbsenceWriteProcessorTest extends TestCase
        $absenceRepository  = $this->createStub(AbsenceReadRepositoryInterface::class);
        $workHourRepository = $this->createStub(WorkHourReadRepositoryInterface::class);
        $security           = $this->createAdminSecurityStub();
-        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub());
+        $this->processor    = new AbsenceWriteProcessor($entityManager, $absenceRepository, $workHourRepository, $security, $this->createEmptyHolidayServiceStub(), $this->createStub(AuditLogger::class));

        $absence = $this->buildAbsence('2026-02-16', '2026-02-16', HalfDay::PM, HalfDay::AM);

--- a/tests/State/ContractSuspensionWriteProcessorTest.php
+++ b/tests/State/ContractSuspensionWriteProcessorTest.php
@@ -9,6 +9,7 @@ use ApiPlatform\State\ProcessorInterface;
 use App\Entity\ContractSuspension;
 use App\Entity\EmployeeContractPeriod;
 use App\Enum\ContractNature;
+use App\Service\AuditLogger;
 use App\State\ContractSuspensionWriteProcessor;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
@@ -35,7 +36,7 @@ final class ContractSuspensionWriteProcessorTest extends TestCase

        $entityManager = $this->createStub(EntityManagerInterface::class);

-        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager);
+        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager, $this->createStub(AuditLogger::class));
        $result    = $processor->process($suspension, new Post());

        self::assertSame($suspension, $result);
@@ -52,7 +53,7 @@ final class ContractSuspensionWriteProcessorTest extends TestCase
        $persistProcessor = $this->createStub(ProcessorInterface::class);
        $entityManager    = $this->createStub(EntityManagerInterface::class);

-        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager);
+        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager, $this->createStub(AuditLogger::class));

        $this->expectException(UnprocessableEntityHttpException::class);
        $processor->process($suspension, new Post());
@@ -68,7 +69,7 @@ final class ContractSuspensionWriteProcessorTest extends TestCase
        $persistProcessor = $this->createStub(ProcessorInterface::class);
        $entityManager    = $this->createStub(EntityManagerInterface::class);

-        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager);
+        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager, $this->createStub(AuditLogger::class));

        $this->expectException(UnprocessableEntityHttpException::class);
        $processor->process($suspension, new Post());
@@ -92,7 +93,7 @@ final class ContractSuspensionWriteProcessorTest extends TestCase
        $persistProcessor = $this->createStub(ProcessorInterface::class);
        $entityManager    = $this->createStub(EntityManagerInterface::class);

-        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager);
+        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager, $this->createStub(AuditLogger::class));

        $this->expectException(UnprocessableEntityHttpException::class);
        $processor->process($suspension, new Post());
@@ -109,7 +110,7 @@ final class ContractSuspensionWriteProcessorTest extends TestCase
        $persistProcessor = $this->createStub(ProcessorInterface::class);
        $entityManager    = $this->createStub(EntityManagerInterface::class);

-        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager);
+        $processor = new ContractSuspensionWriteProcessor($persistProcessor, $entityManager, $this->createStub(AuditLogger::class));

        $this->expectException(UnprocessableEntityHttpException::class);
        $processor->process($suspension, new Post());
--- a/tests/State/EmployeeWriteProcessorTest.php
+++ b/tests/State/EmployeeWriteProcessorTest.php
@@ -13,6 +13,7 @@ use App\Entity\Employee;
 use App\Entity\EmployeeContractPeriod;
 use App\Enum\ContractNature;
 use App\Repository\Contract\EmployeeContractPeriodReadRepositoryInterface;
+use App\Service\AuditLogger;
 use App\Service\Contracts\EmployeeContractChangeRequestFactory;
 use App\Service\Contracts\EmployeeContractPeriodManagerInterface;
 use App\State\EmployeeWriteProcessor;
@@ -83,7 +84,8 @@ final class EmployeeWriteProcessorTest extends TestCase
            $entityManager,
            $periodRepository,
            $changeRequestFactory,
-            $periodManager
+            $periodManager,
+            $this->createStub(AuditLogger::class)
        );

        $result = $processor->process($employee, new Patch());
@@ -149,7 +151,8 @@ final class EmployeeWriteProcessorTest extends TestCase
            $entityManager,
            $periodRepository,
            $changeRequestFactory,
-            $periodManager
+            $periodManager,
+            $this->createStub(AuditLogger::class)
        );

        $result = $processor->process($employee, new Patch());
@@ -187,7 +190,8 @@ final class EmployeeWriteProcessorTest extends TestCase
            $entityManager,
            $periodRepository,
            $changeRequestFactory,
-            $periodManager
+            $periodManager,
+            $this->createStub(AuditLogger::class)
        );

        $result = $processor->process($employee, new Patch());
@@ -234,7 +238,8 @@ final class EmployeeWriteProcessorTest extends TestCase
            $entityManager,
            $periodRepository,
            $changeRequestFactory,
-            $periodManager
+            $periodManager,
+            $this->createStub(AuditLogger::class)
        );

        $processor->process($employee, new Post());
@@ -268,7 +273,8 @@ final class EmployeeWriteProcessorTest extends TestCase
            $entityManager,
            $periodRepository,
            $changeRequestFactory,
-            $periodManager
+            $periodManager,
+            $this->createStub(AuditLogger::class)
        );

        $result = $processor->process($employee, new Delete());
Author	SHA1	Message	Date
gitea-actions	b185accdbb	chore: bump version to v0.1.80 All checks were successful Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Successful in 26s Details	2026-04-08 06:47:00 +00:00
tristan	a4bda53f57	fix : split deficit weeks by weekdays count when no hours worked Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details When a week spans two months and has zero worked hours (e.g. RTT all week), the proportional split by worked minutes gave 0 to both months. Now falls back to splitting by weekday count.	2026-04-08 08:17:07 +02:00
gitea-actions	c255000a5e	chore: bump version to v0.1.79 All checks were successful Auto Tag Develop / tag (push) Successful in 5s Details Build & Push Docker Image / build (push) Successful in 33s Details	2026-04-03 13:18:40 +00:00
tristan	b8b9368ad0	[#SIRH-6] Faire une doc de type wiki (#14 ) Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Reviewed-on: #14 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-04-03 13:18:32 +00:00
gitea-actions	10a0ab0809	chore: bump version to v0.1.78 All checks were successful Build & Push Docker Image / build (push) Successful in 38s Details Auto Tag Develop / tag (push) Successful in 6s Details	2026-04-02 12:34:10 +00:00
tristan	055f1187f9	fix : wording Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-04-02 14:34:00 +02:00
gitea-actions	f3ed359d3f	chore: bump version to v0.1.77 All checks were successful Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Successful in 57s Details	2026-04-02 10:05:12 +00:00
tristan	906c245451	feat(deploy) : add maintenance mode with automatic toggle during deploy Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-04-02 11:56:13 +02:00
gitea-actions	100ab340d4	chore: bump version to v0.1.76 All checks were successful Auto Tag Develop / tag (push) Successful in 5s Details Build & Push Docker Image / build (push) Successful in 39s Details	2026-04-02 08:55:05 +00:00
tristan	0257e59671	[#SIRH-21] Revoir l'affichage des RTT pour les semaines qui se chevauchent (#13 ) Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Reviewed-on: #13 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-04-02 08:54:55 +00:00
gitea-actions	f9979c9a19	chore: bump version to v0.1.75 All checks were successful Auto Tag Develop / tag (push) Successful in 4s Details Build & Push Docker Image / build (push) Successful in 30s Details	2026-04-02 06:59:10 +00:00
tristan	1091147100	[#SIRH-20] Ajouter pour les forfaits le paiement de congés N-1 (#12 ) All checks were successful Auto Tag Develop / tag (push) Successful in 7s Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Reviewed-on: #12 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-04-02 06:59:03 +00:00
gitea-actions	fd154a59fb	chore: bump version to v0.1.74 All checks were successful Auto Tag Develop / tag (push) Successful in 7s Details Build & Push Docker Image / build (push) Successful in 18s Details	2026-03-31 14:44:07 +00:00
tristan	967e3311e5	docs : update doc deployment-docker.md Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-03-31 16:43:54 +02:00
gitea-actions	04c5279946	chore: bump version to v0.1.73 All checks were successful Auto Tag Develop / tag (push) Successful in 5s Details Build & Push Docker Image / build (push) Successful in 15s Details	2026-03-31 12:46:03 +00:00
tristan	b25d40f3d8	Merge remote-tracking branch 'origin/develop' into develop Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-03-31 14:45:55 +02:00
tristan	e654516b82	docs : fix JWT key generation and permissions in deployment doc	2026-03-31 14:32:12 +02:00
gitea-actions	b07146e78d	chore: bump version to v0.1.72 All checks were successful Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Successful in 19s Details	2026-03-31 10:13:39 +00:00
tristan	b1bf363fa1	Merge remote-tracking branch 'origin/develop' into develop Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-03-31 12:13:31 +02:00
tristan	c13cab6b59	fix(deploy) : run console commands as www-data to prevent permission issues	2026-03-31 12:11:58 +02:00
gitea-actions	3752785ed1	chore: bump version to v0.1.71 All checks were successful Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Successful in 17s Details	2026-03-31 09:50:51 +00:00
tristan	ab44b5439d	fix(deploy) : add minimal .env file in Docker image for Symfony boot Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-03-31 10:38:59 +02:00
tristan	699d09e2f4	docs : add nginx install to deployment prerequisites	2026-03-31 10:35:32 +02:00
tristan	b62a19513d	docs : improve Docker deployment documentation	2026-03-31 09:33:05 +02:00
gitea-actions	3d69346d24	chore: bump version to v0.1.70 All checks were successful Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Successful in 18s Details	2026-03-31 07:11:36 +00:00
tristan	ea849a4fdd	Merge remote-tracking branch 'origin/develop' into develop All checks were successful Auto Tag Develop / tag (push) Successful in 7s Details	2026-03-31 09:11:28 +02:00
tristan	7b3dcc3c54	fix : déploiement docker	2026-03-31 09:11:00 +02:00
gitea-actions	c6ab8e3624	chore: bump version to v0.1.69 Some checks failed Auto Tag Develop / tag (push) Successful in 5s Details Build & Push Docker Image / build (push) Failing after 6s Details	2026-03-31 06:57:47 +00:00
tristan	f3b65c0617	fix(deploy) : use REGISTRY_TOKEN for Docker registry authentication Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details	2026-03-31 08:57:27 +02:00
gitea-actions	15ce234737	chore: bump version to v0.1.68 Some checks failed Auto Tag Develop / tag (push) Successful in 6s Details Build & Push Docker Image / build (push) Failing after 6s Details	2026-03-31 06:38:47 +00:00
tristan	caffb74cbf	[#INFRA-142] Revoir le système de déploiement (#11 ) All checks were successful Auto Tag Develop / tag (push) Successful in 7s Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Co-authored-by: gitea-actions <gitea-actions@local> Reviewed-on: #11 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-03-31 06:38:38 +00:00
gitea-actions	54354c4435	chore: bump version to v0.1.67 All checks were successful Auto Tag Develop / tag (push) Successful in 5s Details Build Release Artefact / build (push) Successful in 1m33s Details	2026-03-30 13:06:35 +00:00
tristan	3dcdf0fb81	[#SIRH-18] Fix connexion conducteur (#10 ) Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Reviewed-on: #10 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-03-30 13:06:27 +00:00
gitea-actions	1a71ff6834	chore: bump version to v0.1.66 All checks were successful Auto Tag Develop / tag (push) Successful in 5s Details Build Release Artefact / build (push) Successful in 1m30s Details	2026-03-30 07:52:57 +00:00
tristan	057d6bf06f	[#SIRH-17] Ajouter un système de log des actions utilisateurs (#9 ) Some checks failed Auto Tag Develop / tag (push) Has been cancelled Details \| Numéro du ticket \| Titre du ticket \| \|------------------\|-----------------\| \| \| \| ## Description de la PR ## Modification du .env ## Check list - [ ] Pas de régression - [ ] TU/TI/TF rédigée - [ ] TU/TI/TF OK - [ ] CHANGELOG modifié Reviewed-on: #9 Co-authored-by: tristan <tristan@yuno.malio.fr> Co-committed-by: tristan <tristan@yuno.malio.fr>	2026-03-30 07:52:49 +00:00