chore: bump version to v0.1.85

CLAUDE.md

@@ -56,6 +56,17 @@
 - Driver contracts: RTT uses `dayHoursMinutes + nightHoursMinutes + workshopHoursMinutes` instead of morning/afternoon/evening time ranges
 - FORFAIT weekend/holiday bonus: each weekend or public holiday day worked gives bonus leave (full day if morning+afternoon, 0.5 if only one). Added to acquired days, no cap. PRESENCE mode only.
 
+## Récap. congés (écran)
+- Accès via sidebar `Récap. congés`, conditionné au flag `User.hasLeaveRecapAccess` (défaut `false`) — activé au create/edit user. Le flag s'applique à tous les profils, y compris admin.
+- Scope : `ROLE_ADMIN` → tous les employés, `ROLE_USER` (chef de site) → employés de ses sites, `ROLE_SELF` → sa ligne
+- Cutoff temporel : fin de la semaine S-2 (dimanche 23:59:59). Formule : `dimanche(lundi_semaine_courante − 14j)`. Pas de gate `isValid`.
+- Helper : `App\Util\LeaveRecapCutoff::resolveCutoff()`
+- Colonnes : Nom, Prénom, Contrat, CP N-1 restant, CP N, Samedis, RTT — identiques au PDF
+- Service partagé : `LeaveRecapRowBuilder` consommé par `LeaveRecapPrintProvider` (as-of today) et `EmployeeLeaveRecapProvider` (as-of cutoff)
+- `EmployeeLeaveSummaryProvider::computeYearSummary()` accepte un `?DateTimeImmutable $asOfDate` qui cappe l'accrual et les absences sur l'année cible (`null` = comportement live inchangé)
+- Pas d'export PDF depuis cet écran
+- Doc détaillée : `doc/leave-recap-screen.md`
+
 ## Frais (MileageAllowance)
 - Onglet "Frais" (anciennement "Frais Kms") sur la fiche employé
 - Validation: mois obligatoire + au moins `kilometers > 0` ou `amount > 0`

README.md

@@ -23,3 +23,5 @@ docker compose exec -T db psql -U root -d sirh < sirh.sql
 ```sql
 UPDATE users SET roles = '["ROLE_ADMIN","ROLE_SUPER_ADMIN"]' WHERE username = 'emilie';
 ```
+sudo -u postgres pg_dump --no-owner --no-privileges --clean --if-exists sirh_prod > /tmp/sirh_prod_$(date +%F).sql
+scp user@<serveur>:/tmp/sirh_prod_2026-04-14.dump ~/workspace/

config/version.yaml

@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.1.84'
+    app.version: '0.1.85'

doc/functional-rules.md

@@ -330,6 +330,24 @@ Tous les filtres checkbox sont cochés par défaut à l'ouverture du drawer.
 | CP N | Forfait: jours acquis année civile. Non-forfait: en cours d'acquisition |
 | RTT | Minutes disponibles (report N-1 + acquis N - payés). Format `X h Y m`. Forfait et INTERIM: `-` |
 
+## 10bis) Écran Récap. congés (tableau)
+
+- Complément de l'export PDF : même logique de calcul, mais accessible aux employés et chefs de site
+- Endpoint: `GET /api/leave-recap`
+- Accès conditionné au flag `User.hasLeaveRecapAccess` (défaut `false`, activé au create/edit user)
+- Le flag s'applique à tous les profils, y compris admin (pas de bypass)
+- Scoping :
+  - `ROLE_ADMIN` : tous les employés
+  - `ROLE_USER` (chef de site) : employés des sites autorisés (`UserSiteRole`)
+  - `ROLE_SELF` : uniquement son employé lié
+- **Cutoff temporel** : le récap est figé à la fin de la semaine S-2 (dimanche 23:59:59)
+  - Formule : `cutoffDate = dimanche(lundi_semaine_courante − 14 jours)`
+  - Exemple : mardi 14/04/2026 (S16) → dimanche 05/04/2026 (fin S14)
+  - `isValid` n'entre PAS en compte : cutoff purement temporel
+  - Les heures et absences postérieures au cutoff sont ignorées dans les calculs
+- Colonnes identiques au PDF (voir §10)
+- Détails techniques : voir `doc/leave-recap-screen.md`
+
 ## 11) Récapitulatif Salaire (PDF mensuel)
 
 - Accessible depuis la page Employés via le bouton "Récap. Salaire" (réservé `ROLE_ADMIN`)

doc/leave-recap-screen.md

@@ -0,0 +1,73 @@
+# Écran Récap. congés
+
+## Objet
+
+Vue tableau des soldes de congés par employé, figée à un cutoff temporel (fin de semaine S-2).
+Complémentaire à l'export PDF admin : mêmes colonnes, accès étendu aux employés et chefs de site.
+
+## Cutoff
+
+La formule est : `cutoffDate = dimanche de (lundi de la semaine courante − 14 jours)`.
+
+Exemple : mardi 14/04/2026 (S16) → **dimanche 05/04/2026 23:59:59** (fin S14).
+
+Le cutoff est purement temporel : l'état `isValid` des heures n'entre pas en compte. Les heures
+et absences postérieures au cutoff sont ignorées dans le calcul des soldes.
+
+Implémentation : `App\Util\LeaveRecapCutoff::resolveCutoff()` côté backend, helper `parseYmd` +
+`getIsoWeekNumber` côté frontend pour l'affichage du badge.
+
+## Colonnes
+
+Identiques au PDF :
+
+- Nom
+- Prénom
+- Contrat
+- CP N-1 restant
+- CP N
+- Samedis acquis
+- RTT
+
+Pour les admins et chefs de site, une colonne **Site** est ajoutée à gauche.
+
+## Scoping
+
+| Profil        | Données visibles                        |
+|---------------|-----------------------------------------|
+| `ROLE_ADMIN`  | Tous les employés actifs, tous sites    |
+| `ROLE_USER` (chef de site) | Employés actifs des sites autorisés via `UserSiteRole` |
+| `ROLE_SELF`   | Uniquement l'employé lié à son compte   |
+
+## Flag d'accès
+
+Le champ `User.hasLeaveRecapAccess` (boolean, défaut `false`) conditionne :
+
+- L'affichage de l'entrée "Récap. congés" dans la sidebar
+- L'accès à la route `/leave-recap` (middleware `leave-recap-access.ts`)
+- L'endpoint API `GET /api/leave-recap` (le provider renvoie `403` si le flag est faux)
+
+Le flag s'applique même aux admins : un admin sans le flag ne voit pas l'écran. Il se configure
+dans le drawer de création/édition d'un utilisateur.
+
+## Service partagé
+
+`App\Service\Leave\LeaveRecapRowBuilder::build(Employee $employee, DateTimeImmutable $asOfDate)`
+construit une ligne de récap. Il est utilisé par :
+
+- `LeaveRecapPrintProvider` (PDF admin) avec `$asOfDate = today`
+- `EmployeeLeaveRecapProvider` (écran) avec `$asOfDate = cutoff`
+
+## Propagation du cutoff dans les calculs
+
+`EmployeeLeaveSummaryProvider::computeYearSummary()` accepte un `?DateTimeImmutable $asOfDate`.
+Lorsqu'il est fourni et appliqué à l'année cible, il remplace "today" dans :
+
+- `resolveAccrualCalculationEndDate()` — la borne d'accrual devient le dernier jour du mois
+  précédant `asOfDate` (au lieu du mois précédent today).
+- `resolveTakenCalculationEndDate()` — les absences postérieures à `asOfDate` sont ignorées.
+
+Pour les années antérieures (carry forward), le comportement reste inchangé (pas de cap).
+
+Le RTT est capé via `RttRecoveryComputationService::computeTotalRecoveryForExercise(..., $limitDate)`
+qui existait déjà, en passant `cutoff` comme date de référence.

frontend/data/documentation-content.ts

@@ -442,6 +442,17 @@ export const documentationSections: DocSection[] = [
           { type: 'paragraph', content: 'Compteurs visibles sur l\'onglet Congé de la fiche employé : acquis, en cours d\'acquisition, pris, restant.' },
         ],
       },
+      {
+        id: 'ecran-recap-conges',
+        title: 'Écran Récap. congés',
+        requiredLevel: 'employee',
+        blocks: [
+          { type: 'paragraph', content: 'L\'écran "Récap. congés" affiche un tableau figé des soldes de congés et RTT par employé. Il est accessible via la sidebar lorsque l\'accès a été activé sur le compte utilisateur.' },
+          { type: 'list', content: 'Employé : voit uniquement sa propre ligne\nChef de site : voit les employés des sites qui lui sont rattachés\nAdmin : voit tous les employés, groupés par site' },
+          { type: 'note', content: 'Le récap est arrêté à la fin de la semaine S-2 (dimanche). Exemple : un mardi en S16, les soldes sont calculés jusqu\'au dimanche de la S14 inclus. Les heures et absences postérieures ne sont pas comptées.' },
+          { type: 'paragraph', content: 'Les colonnes affichées sont identiques à l\'export PDF admin (Nom, Prénom, Contrat, CP N-1 restant, CP N, Samedis, RTT). L\'accès à cet écran est géré par un flag sur l\'utilisateur, activé depuis le drawer de création/édition d\'un utilisateur par un admin.' },
+        ],
+      },
     ],
   },
   {

frontend/i18n/locales/fr.json

@@ -56,6 +56,9 @@
             "create": "Impossible de créer l'observation.",
             "update": "Impossible de mettre à jour l'observation.",
             "delete": "Impossible de supprimer l'observation."
+        },
+        "leaveRecap": {
+            "load": "Impossible de charger le récap des congés."
         }
     },
     "success": {

frontend/layouts/default.vue

@@ -53,6 +53,17 @@
                             <Icon name="mdi:account-group-outline" size="24"/>
                             <p>Employés</p>
                         </NuxtLink>
+                        <NuxtLink
+                            v-if="hasLeaveRecapAccess"
+                            to="/leave-recap"
+                            class="flex items-center gap-2 py-3 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
+                            :class="route.path.startsWith('/leave-recap')
+                            ? 'bg-tertiary-500 text-primary-500 font-bold'
+                            : ''"
+                        >
+                            <Icon name="mdi:beach" size="24"/>
+                            <p>Récap. congés</p>
+                        </NuxtLink>
                         <NuxtLink
                             to="/sites"
                             class="flex items-center gap-2 py-3 text-md text-black hover:bg-tertiary-500 hover:text-primary-500"
@@ -84,6 +95,15 @@
                             <p>Utilisateurs</p>
                         </NuxtLink>
                     </template>
+                    <NuxtLink
+                        v-if="hasLeaveRecapAccess && !isAdmin"
+                        to="/leave-recap"
+                        class="flex items-center gap-2 py-3 text-md text-black hover:bg-tertiary-500 hover:text-primary-500 pt-3"
+                        :class="route.path.startsWith('/leave-recap') ? 'bg-tertiary-500 text-primary-500 font-bold' : ''"
+                    >
+                        <Icon name="mdi:beach" size="24"/>
+                        <p>Récap. congés</p>
+                    </NuxtLink>
                     <NuxtLink
                         v-if="isSuperAdmin"
                         to="/audit-logs"
@@ -128,5 +148,6 @@ const {version} = useAppVersion()
 const isAdmin = computed(() => auth.user?.roles?.includes('ROLE_ADMIN') ?? false)
 const isSuperAdmin = computed(() => auth.user?.roles?.includes('ROLE_SUPER_ADMIN') ?? false)
 const isDriver = computed(() => auth.user?.isDriver ?? false)
+const hasLeaveRecapAccess = computed(() => auth.user?.hasLeaveRecapAccess ?? false)
 const route = useRoute()
 </script>

frontend/middleware/leave-recap-access.ts

@@ -0,0 +1,11 @@
+export default defineNuxtRouteMiddleware(async () => {
+  const auth = useAuthStore()
+
+  if (!auth.checked) {
+    await auth.ensureSession()
+  }
+
+  if (!auth.user?.hasLeaveRecapAccess) {
+    return navigateTo('/')
+  }
+})

frontend/pages/leave-recap.vue

@@ -0,0 +1,121 @@
+<template>
+  <div class="h-full flex flex-col overflow-hidden">
+    <div class="flex flex-wrap items-center justify-between gap-4 pb-8">
+      <h1 class="text-4xl font-bold text-primary-500">Récap. congés</h1>
+      <span
+        v-if="cutoffLabel"
+        class="inline-flex items-center gap-2 rounded-full bg-tertiary-500 px-4 py-1 text-sm font-semibold text-primary-500"
+      >
+        <Icon name="mdi:calendar-check-outline" size="18"/>
+        {{ cutoffLabel }}
+      </span>
+    </div>
+
+    <div
+      v-if="isLoading"
+      class="rounded-lg border border-neutral-200 bg-white p-6 text-md text-neutral-600"
+    >
+      Chargement...
+    </div>
+
+    <div
+      v-else-if="rows.length === 0"
+      class="rounded-lg border border-neutral-200 bg-white p-6 text-md text-neutral-600"
+    >
+      Aucun employé à afficher.
+    </div>
+
+    <div v-else class="min-h-0 overflow-auto rounded-md bg-white">
+      <div
+        :class="`grid ${gridColsClass} gap-4 border border-black bg-tertiary-500 px-6 py-3 text-[20px] font-semibold text-black rounded-t-md sticky top-0 z-10`"
+      >
+        <span v-if="showSiteColumn" class="text-left">Site</span>
+        <span class="text-left">Nom</span>
+        <span class="text-left">Prénom</span>
+        <span class="text-left">Contrat</span>
+        <span class="text-right">CP N-1 restant</span>
+        <span class="text-right">CP N</span>
+        <span class="text-right">Samedis</span>
+        <span class="text-right">RTT</span>
+      </div>
+      <div class="border-x border-b border-primary-500 rounded-b-md">
+        <div
+          v-for="row in rows"
+          :key="row.employeeId"
+          :class="`grid ${gridColsClass} items-center gap-4 border-b border-primary-500 px-6 py-3 text-md font-bold text-primary-500 last:border-b-0`"
+        >
+          <span v-if="showSiteColumn" class="truncate">
+            <span
+              v-if="row.siteName"
+              class="inline-block rounded-full px-3 py-1 text-sm"
+              :style="{ backgroundColor: row.siteColor || '#ffd7d7', color: '#1a1a1a' }"
+            >
+              {{ row.siteName }}
+            </span>
+            <span v-else class="text-neutral-500">-</span>
+          </span>
+          <span class="truncate">{{ row.lastName }}</span>
+          <span class="truncate">{{ row.firstName }}</span>
+          <span class="truncate">{{ row.contractName ?? '-' }}</span>
+          <span class="text-right tabular-nums">{{ formatNumber(row.cpN1Remaining) }}</span>
+          <span class="text-right tabular-nums">{{ row.cpN }}</span>
+          <span class="text-right tabular-nums">{{ row.acquiredSaturdays }}</span>
+          <span class="text-right tabular-nums">{{ row.rtt }}</span>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import type { LeaveRecapRow } from '~/services/dto/leave-recap'
+import { fetchLeaveRecap } from '~/services/leave-recap'
+import { formatYmdToFr, getIsoWeekNumber, parseYmd } from '~/utils/date'
+
+definePageMeta({ middleware: ['leave-recap-access'] })
+useHead({ title: 'Récap. congés' })
+
+const auth = useAuthStore()
+const rows = ref<LeaveRecapRow[]>([])
+const isLoading = ref(false)
+
+const isAdmin = computed(() => auth.user?.roles?.includes('ROLE_ADMIN') ?? false)
+const isSelfOnly = computed(() => {
+  const roles = auth.user?.roles ?? []
+  return roles.includes('ROLE_SELF') && !roles.includes('ROLE_ADMIN')
+})
+const showSiteColumn = computed(() => !isSelfOnly.value)
+const gridColsClass = computed(() =>
+  showSiteColumn.value
+    ? 'grid-cols-[1.2fr_1fr_1fr_1.2fr_140px_100px_100px_120px]'
+    : 'grid-cols-[1fr_1fr_1.2fr_140px_100px_100px_120px]'
+)
+
+const cutoffLabel = computed(() => {
+  const ymd = rows.value[0]?.cutoffDate
+  if (!ymd) return ''
+  const parsed = parseYmd(ymd)
+  if (!parsed) return ''
+  const week = getIsoWeekNumber(parsed)
+  return `Arrêté au ${formatYmdToFr(ymd)} (fin S${week})`
+})
+
+const formatNumber = (value: number) => {
+  if (!Number.isFinite(value)) return '-'
+  return value.toLocaleString('fr-FR', { minimumFractionDigits: 0, maximumFractionDigits: 2 })
+}
+
+const load = async () => {
+  isLoading.value = true
+  try {
+    rows.value = await fetchLeaveRecap()
+  } finally {
+    isLoading.value = false
+  }
+}
+
+onMounted(load)
+
+// Silence unused linter warning for isAdmin (kept for future site grouping)
+void isAdmin
+</script>

frontend/pages/users.vue

@@ -189,6 +189,20 @@
           </p>
         </div>
 
+        <div>
+          <label class="flex items-center gap-2 cursor-pointer">
+            <input
+              v-model="form.hasLeaveRecapAccess"
+              type="checkbox"
+              class="cursor-pointer"
+            />
+            <span class="text-md font-semibold text-neutral-700">Accès à l'écran Récap. congés</span>
+          </label>
+          <p class="mt-1 text-sm text-neutral-500">
+            Affiche l'onglet dans la sidebar et donne accès au tableau récap.
+          </p>
+        </div>
+
         <div class="flex justify-center pt-2">
           <button
             type="submit"
@@ -233,7 +247,8 @@ const form = reactive({
   accessMode: 'admin' as 'admin' | 'self' | 'sites',
   employeeId: '' as number | '',
   siteIds: [] as number[],
-  isLocked: false
+  isLocked: false,
+  hasLeaveRecapAccess: false
 })
 
 const validationTouched = reactive({
@@ -345,6 +360,7 @@ const resetForm = () => {
   form.accessMode = 'admin'
   form.siteIds = []
   form.isLocked = false
+  form.hasLeaveRecapAccess = false
   editingUser.value = null
   validationTouched.username = false
   validationTouched.password = false
@@ -373,6 +389,7 @@ const openEdit = (user: User) => {
 
   form.employeeId = user.employee?.id ?? ''
   form.isLocked = user.isLocked
+  form.hasLeaveRecapAccess = user.hasLeaveRecapAccess ?? false
 
   const siteRoles = userAccessById.value.get(user.id) ?? []
   form.siteIds = siteRoles.map((role) => role.site?.id).filter((id): id is number => typeof id === 'number')
@@ -427,7 +444,8 @@ const handleSubmit = async () => {
         plainPassword: form.password.trim() ? form.password : undefined,
         roles,
         employeeId,
-        isLocked: form.isLocked
+        isLocked: form.isLocked,
+        hasLeaveRecapAccess: form.hasLeaveRecapAccess
       })
 
       const existingSiteRoles = userAccessById.value.get(editingUser.value.id) ?? []
@@ -452,7 +470,8 @@ const handleSubmit = async () => {
         plainPassword: form.password,
         roles,
         employeeId,
-        isLocked: form.isLocked
+        isLocked: form.isLocked,
+        hasLeaveRecapAccess: form.hasLeaveRecapAccess
       })
 
       if (form.accessMode === 'sites' && form.siteIds.length > 0) {

frontend/services/dto/leave-recap.ts

@@ -0,0 +1,14 @@
+export type LeaveRecapRow = {
+  employeeId: number
+  lastName: string
+  firstName: string
+  siteId: number | null
+  siteName: string | null
+  siteColor: string | null
+  contractName: string | null
+  cpN1Remaining: number
+  cpN: string
+  acquiredSaturdays: string
+  rtt: string
+  cutoffDate: string
+}

frontend/services/dto/user-data.ts

@@ -3,4 +3,5 @@ export type UserData = {
   username: string
   roles: string[]
   isDriver: boolean
+  hasLeaveRecapAccess: boolean
 }

frontend/services/dto/user.ts

@@ -5,5 +5,6 @@ export type User = {
   username: string
   roles: string[]
   isLocked: boolean
+  hasLeaveRecapAccess: boolean
   employee?: Employee | null
 }

frontend/services/leave-recap.ts

@@ -0,0 +1,12 @@
+import type { LeaveRecapRow } from './dto/leave-recap'
+import { extractItems } from '~/utils/api'
+
+export const fetchLeaveRecap = async (): Promise<LeaveRecapRow[]> => {
+  const api = useApi()
+  const data = await api.get<LeaveRecapRow[] | { 'hydra:member'?: LeaveRecapRow[] }>(
+    '/leave-recap',
+    {},
+    { toastErrorKey: 'errors.leaveRecap.load' }
+  )
+  return extractItems<LeaveRecapRow>(data)
+}

frontend/services/users.ts

@@ -17,6 +17,7 @@ export const createUser = async (payload: {
   roles: string[]
   employeeId?: number | null
   isLocked?: boolean
+  hasLeaveRecapAccess?: boolean
 }) => {
   const api = useApi()
   return api.post<User>(
@@ -26,7 +27,8 @@ export const createUser = async (payload: {
       plainPassword: payload.plainPassword,
       roles: payload.roles,
       employee: payload.employeeId ? `/api/employees/${payload.employeeId}` : null,
-      isLocked: payload.isLocked ?? false
+      isLocked: payload.isLocked ?? false,
+      hasLeaveRecapAccess: payload.hasLeaveRecapAccess ?? false
     },
     {
       toastSuccessKey: 'success.user.create',
@@ -41,13 +43,15 @@ export const updateUser = async (id: number, payload: {
   roles: string[]
   employeeId?: number | null
   isLocked?: boolean
+  hasLeaveRecapAccess?: boolean
 }) => {
   const api = useApi()
   const body: Record<string, unknown> = {
     username: payload.username,
     roles: payload.roles,
     employee: payload.employeeId ? `/api/employees/${payload.employeeId}` : null,
-    isLocked: payload.isLocked ?? false
+    isLocked: payload.isLocked ?? false,
+    hasLeaveRecapAccess: payload.hasLeaveRecapAccess ?? false
   }
 
   if (payload.plainPassword) {

migrations/Version20260414100000.php

@@ -0,0 +1,26 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260414100000 extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Add has_leave_recap_access flag on users';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE users ADD has_leave_recap_access BOOLEAN DEFAULT FALSE NOT NULL');
+    }
+
+    public function down(Schema $schema): void
+    {
+        $this->addSql('ALTER TABLE users DROP has_leave_recap_access');
+    }
+}

src/ApiResource/EmployeeLeaveRecap.php

@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\ApiResource;
+
+use ApiPlatform\Metadata\ApiResource;
+use ApiPlatform\Metadata\GetCollection;
+use App\State\EmployeeLeaveRecapProvider;
+
+#[ApiResource(
+    operations: [
+        new GetCollection(
+            uriTemplate: '/leave-recap',
+            paginationEnabled: false,
+            security: "is_granted('ROLE_USER')",
+            provider: EmployeeLeaveRecapProvider::class,
+        ),
+    ],
+)]
+final class EmployeeLeaveRecap
+{
+    public int $employeeId           = 0;
+    public string $lastName          = '';
+    public string $firstName         = '';
+    public ?int $siteId              = null;
+    public ?string $siteName         = null;
+    public ?string $siteColor        = null;
+    public ?string $contractName     = null;
+    public float $cpN1Remaining      = 0.0;
+    public string $cpN               = '-';
+    public string $acquiredSaturdays = '-';
+    public string $rtt               = '-';
+    public string $cutoffDate        = '';
+}

src/Entity/User.php

@@ -90,6 +90,11 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
     #[SerializedName('isLocked')]
     private bool $isLocked = false;
 
+    #[ORM\Column(type: 'boolean', options: ['default' => false])]
+    #[Groups(['user:write'])]
+    #[SerializedName('hasLeaveRecapAccess')]
+    private bool $hasLeaveRecapAccess = false;
+
     /**
      * @var Collection<int, UserSiteRole>
      */
@@ -224,6 +229,20 @@ class User implements UserInterface, PasswordAuthenticatedUserInterface
         return $this;
     }
 
+    #[Groups(['user:read'])]
+    #[SerializedName('hasLeaveRecapAccess')]
+    public function hasLeaveRecapAccess(): bool
+    {
+        return $this->hasLeaveRecapAccess;
+    }
+
+    public function setHasLeaveRecapAccess(bool $hasLeaveRecapAccess): self
+    {
+        $this->hasLeaveRecapAccess = $hasLeaveRecapAccess;
+
+        return $this;
+    }
+
     #[Groups(['user:read'])]
     public function getIsDriver(): bool
     {

src/Service/Leave/LeaveRecapRowBuilder.php

@@ -0,0 +1,180 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Service\Leave;
+
+use App\Entity\Employee;
+use App\Enum\ContractNature;
+use App\Enum\ContractType;
+use App\Enum\TrackingMode;
+use App\Repository\EmployeeRttBalanceRepository;
+use App\Repository\EmployeeRttPaymentRepository;
+use App\Repository\WorkHourRepository;
+use App\Service\Rtt\RttRecoveryComputationService;
+use App\State\EmployeeLeaveSummaryProvider;
+use DateTimeImmutable;
+use Throwable;
+
+final readonly class LeaveRecapRowBuilder
+{
+    public function __construct(
+        private EmployeeLeaveSummaryProvider $leaveSummaryProvider,
+        private RttRecoveryComputationService $rttRecoveryService,
+        private EmployeeRttBalanceRepository $rttBalanceRepository,
+        private EmployeeRttPaymentRepository $rttPaymentRepository,
+        private WorkHourRepository $workHourRepository,
+    ) {}
+
+    /**
+     * Builds a leave recap row for one employee.
+     *
+     * - $asOfDate = null → live behavior (identical to legacy PDF export): accrual capped at
+     *   previous month end, ALL booked absences counted (incl. future ones), RTT uses today
+     * - $asOfDate = non-null → frozen snapshot at that date: accrual capped at the previous
+     *   month end before asOfDate, absences after asOfDate excluded, RTT uses asOfDate
+     *
+     * @return array{
+     *     lastName: string,
+     *     firstName: string,
+     *     contractName: ?string,
+     *     cpN1Remaining: float|string,
+     *     cpN: string,
+     *     acquiredSaturdays: string,
+     *     rtt: string
+     * }
+     */
+    public function build(Employee $employee, ?DateTimeImmutable $asOfDate = null): array
+    {
+        $contract     = $employee->getContract();
+        $contractName = $contract?->getName();
+        $isForfait    = ContractType::FORFAIT === $contract?->getType();
+        $nature       = ContractNature::tryFrom($employee->getCurrentContractNature());
+        $isInterim    = ContractNature::INTERIM === $nature;
+
+        $rttReference = $asOfDate ?? new DateTimeImmutable('today');
+
+        $cpN1Remaining     = 0.0;
+        $cpN               = '-';
+        $acquiredSaturdays = '-';
+        $rtt               = '-';
+
+        if (!$isInterim) {
+            $leaveYear   = $this->leaveSummaryProvider->resolveLeaveYearForToday($employee);
+            $yearSummary = $this->leaveSummaryProvider->computeYearSummary($employee, $leaveYear, 0.0, $asOfDate);
+
+            if (null !== $yearSummary) {
+                if ($isForfait) {
+                    $paidLeaveDays = $this->leaveSummaryProvider->resolvePaidLeaveDays($employee, $yearSummary['ruleCode'], $leaveYear);
+                    if ($paidLeaveDays > 0.0) {
+                        $recomputed = $this->leaveSummaryProvider->computeYearSummary($employee, $leaveYear, $paidLeaveDays, $asOfDate);
+                        if (null !== $recomputed) {
+                            $yearSummary = $recomputed;
+                        }
+                    }
+                    $cpN1Remaining     = round($yearSummary['previousYearRemainingDays'], 2);
+                    $cpN               = (string) round($yearSummary['acquiredDays'], 2);
+                    $acquiredSaturdays = '-';
+                } else {
+                    $cpN1Remaining     = round($yearSummary['remainingDays'], 2);
+                    $cpN               = (string) round($yearSummary['accruingDays'], 2);
+                    $acquiredSaturdays = (string) round($yearSummary['remainingSaturdays'], 2);
+                }
+            }
+
+            if (!$isForfait && TrackingMode::PRESENCE->value !== $contract?->getTrackingMode()) {
+                try {
+                    $rtt = $this->formatMinutes($this->computeAvailableRttMinutes($employee, $rttReference));
+                } catch (Throwable) {
+                    $rtt = '-';
+                }
+            }
+        }
+
+        return [
+            'lastName'          => $employee->getLastName(),
+            'firstName'         => $employee->getFirstName(),
+            'contractName'      => $contractName,
+            'cpN1Remaining'     => $cpN1Remaining,
+            'cpN'               => $cpN,
+            'acquiredSaturdays' => $acquiredSaturdays,
+            'rtt'               => $rtt,
+        ];
+    }
+
+    private function computeAvailableRttMinutes(Employee $employee, DateTimeImmutable $reference): int
+    {
+        $month        = (int) $reference->format('n');
+        $year         = (int) $reference->format('Y');
+        $exerciseYear = $month >= 6 ? $year + 1 : $year;
+
+        // Exclude incomplete current week: limit to last Sunday
+        $isoDay    = (int) $reference->format('N');
+        $limitDate = 7 === $isoDay ? $reference : $reference->modify('last sunday');
+
+        // Include the current week if all existing days are admin-validated
+        if (7 !== $isoDay) {
+            $currentWeekStart = $reference->modify('monday this week');
+            $currentWeekEnd   = $currentWeekStart->modify('+6 days');
+            $checkEnd         = $this->resolveWeekEndForEmployee($employee, $currentWeekStart, $currentWeekEnd, $reference);
+            if ($this->workHourRepository->isWeekFullyValidated($employee, $currentWeekStart, $checkEnd)) {
+                $limitDate = $currentWeekEnd;
+            }
+        }
+
+        // Carry from previous exercise
+        $carry   = 0;
+        $balance = $this->rttBalanceRepository->findOneByEmployeeAndYear($employee, $exerciseYear);
+        if (null !== $balance) {
+            $carry = $balance->getTotalOpeningMinutes();
+        } else {
+            $previousTotal = $this->rttRecoveryService->computeTotalRecoveryForExercise($employee, $exerciseYear - 1);
+            $carry         = $previousTotal->totalMinutes;
+        }
+
+        // Current exercise (limited to completed weeks)
+        $current = $this->rttRecoveryService->computeTotalRecoveryForExercise($employee, $exerciseYear, $limitDate);
+
+        // Paid RTT
+        $paid     = 0;
+        $payments = $this->rttPaymentRepository->findByEmployeeAndYear($employee, $exerciseYear);
+        foreach ($payments as $payment) {
+            $paid += $payment->getBase25Minutes() + $payment->getBonus25Minutes()
+                   + $payment->getBase50Minutes() + $payment->getBonus50Minutes();
+        }
+
+        return $carry + $current->totalMinutes - $paid;
+    }
+
+    private function resolveWeekEndForEmployee(Employee $employee, DateTimeImmutable $weekStart, DateTimeImmutable $weekEnd, DateTimeImmutable $today): DateTimeImmutable
+    {
+        foreach ($employee->getContractPeriods() as $period) {
+            if ($period->getStartDate() > $today) {
+                continue;
+            }
+            $endDate = $period->getEndDate();
+            if (null === $endDate) {
+                continue;
+            }
+            if ($endDate >= $weekStart && $endDate <= $weekEnd) {
+                return $endDate;
+            }
+        }
+
+        return $weekEnd;
+    }
+
+    private function formatMinutes(int $minutes): string
+    {
+        if (0 === $minutes) {
+            return '0 h';
+        }
+
+        $sign = $minutes < 0 ? '- ' : '';
+        $abs  = abs($minutes);
+        $h    = intdiv($abs, 60);
+        $m    = $abs % 60;
+
+        return 0 === $m ? "{$sign}{$h} h" : "{$sign}{$h} h {$m} m";
+    }
+}

src/State/EmployeeLeaveRecapProvider.php

@@ -0,0 +1,114 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\State;
+
+use ApiPlatform\Metadata\Operation;
+use ApiPlatform\State\ProviderInterface;
+use App\ApiResource\EmployeeLeaveRecap;
+use App\Entity\Employee;
+use App\Entity\User;
+use App\Repository\EmployeeRepository;
+use App\Security\EmployeeScopeService;
+use App\Service\Leave\LeaveRecapRowBuilder;
+use App\Util\LeaveRecapCutoff;
+use DateTimeImmutable;
+use Doctrine\ORM\EntityManagerInterface;
+use Symfony\Bundle\SecurityBundle\Security;
+use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
+
+final readonly class EmployeeLeaveRecapProvider implements ProviderInterface
+{
+    public function __construct(
+        private Security $security,
+        private EmployeeRepository $employeeRepository,
+        private EmployeeScopeService $employeeScopeService,
+        private LeaveRecapRowBuilder $rowBuilder,
+        private EntityManagerInterface $entityManager,
+    ) {}
+
+    /**
+     * @return list<EmployeeLeaveRecap>
+     */
+    public function provide(Operation $operation, array $uriVariables = [], array $context = []): array
+    {
+        $user = $this->security->getUser();
+        if (!$user instanceof User) {
+            throw new AccessDeniedHttpException('Authentication required.');
+        }
+
+        if (!$user->hasLeaveRecapAccess()) {
+            throw new AccessDeniedHttpException('Leave recap access not granted.');
+        }
+
+        $cutoff    = LeaveRecapCutoff::resolveCutoff(new DateTimeImmutable('today'));
+        $cutoffYmd = $cutoff->format('Y-m-d');
+        $employees = $this->resolveScopedEmployees($user);
+        $rows      = [];
+
+        foreach ($employees as $employee) {
+            if (!$employee->getHasActiveContract()) {
+                continue;
+            }
+
+            $row = $this->rowBuilder->build($employee, $cutoff);
+
+            $resource                    = new EmployeeLeaveRecap();
+            $resource->employeeId        = (int) $employee->getId();
+            $resource->lastName          = $row['lastName'] ?? '';
+            $resource->firstName         = $row['firstName'] ?? '';
+            $site                        = $employee->getSite();
+            $resource->siteId            = $site?->getId();
+            $resource->siteName          = $site?->getName();
+            $resource->siteColor         = $site?->getColor();
+            $resource->contractName      = $row['contractName'] ?? null;
+            $resource->cpN1Remaining     = is_numeric($row['cpN1Remaining']) ? (float) $row['cpN1Remaining'] : 0.0;
+            $resource->cpN               = (string) $row['cpN'];
+            $resource->acquiredSaturdays = (string) $row['acquiredSaturdays'];
+            $resource->rtt               = (string) $row['rtt'];
+            $resource->cutoffDate        = $cutoffYmd;
+
+            $rows[] = $resource;
+            $this->entityManager->clear();
+        }
+
+        usort($rows, static function (EmployeeLeaveRecap $a, EmployeeLeaveRecap $b): int {
+            $siteCmp = strcmp((string) ($a->siteName ?? 'zzz'), (string) ($b->siteName ?? 'zzz'));
+            if (0 !== $siteCmp) {
+                return $siteCmp;
+            }
+            $lastCmp = strcmp($a->lastName, $b->lastName);
+            if (0 !== $lastCmp) {
+                return $lastCmp;
+            }
+
+            return strcmp($a->firstName, $b->firstName);
+        });
+
+        return $rows;
+    }
+
+    /**
+     * @return list<Employee>
+     */
+    private function resolveScopedEmployees(User $user): array
+    {
+        if (in_array('ROLE_ADMIN', $user->getRoles(), true)) {
+            return $this->employeeRepository->findForPrintBySiteIds([]);
+        }
+
+        if (in_array('ROLE_SELF', $user->getRoles(), true)) {
+            $employee = $user->getEmployee();
+
+            return $employee instanceof Employee ? [$employee] : [];
+        }
+
+        $siteIds = $this->employeeScopeService->getAllowedSiteIds($user);
+        if ([] === $siteIds) {
+            return [];
+        }
+
+        return $this->employeeRepository->findForPrintBySiteIds($siteIds);
+    }
+}

src/State/EmployeeLeaveSummaryProvider.php

@@ -140,7 +140,7 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
      *   previousYearRemainingDays: float
      * }
      */
-    public function computeYearSummary(Employee $employee, int $targetYear, float $paidLeaveDays = 0.0): ?array
+    public function computeYearSummary(Employee $employee, int $targetYear, float $paidLeaveDays = 0.0, ?DateTimeImmutable $asOfDate = null): ?array
     {
         $firstYear = max($this->resolveFirstComputationYear($employee), $targetYear - 1);
         if ($targetYear < $firstYear) {
@@ -196,8 +196,9 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
                 $carrySaturdays = 0.0;
             }
 
-            $accrualCalculationEnd = $this->resolveAccrualCalculationEndDate($leavePolicy['ruleCode'], $year, $to, $employee);
-            $takenCalculationEnd   = $this->resolveTakenCalculationEndDate($to, $employee);
+            $effectiveAsOfDate     = ($year === $targetYear) ? $asOfDate : null;
+            $accrualCalculationEnd = $this->resolveAccrualCalculationEndDate($leavePolicy['ruleCode'], $year, $to, $employee, $effectiveAsOfDate);
+            $takenCalculationEnd   = $this->resolveTakenCalculationEndDate($to, $employee, $effectiveAsOfDate);
             $suspensions           = $this->suspensionDaysCalculator->applyFirstMonthGrace(
                 $this->resolveSuspensionsForPeriod($employee, $effectiveFrom, $to)
             );
@@ -489,19 +490,20 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
         string $ruleCode,
         int $year,
         DateTimeImmutable $periodEnd,
-        Employee $employee
+        Employee $employee,
+        ?DateTimeImmutable $asOfDate = null
     ): ?DateTimeImmutable {
-        $today       = new DateTimeImmutable('today');
+        $reference   = $asOfDate ?? new DateTimeImmutable('today');
         $currentYear = LeaveRuleCode::FORFAIT_218->value === $ruleCode
-            ? (int) $today->format('Y')
-            : $this->resolveCurrentLeaveYear($today);
+            ? (int) $reference->format('Y')
+            : $this->resolveCurrentLeaveYear($reference);
 
         if ($year < $currentYear) {
             $end = $periodEnd;
         } elseif ($year > $currentYear) {
             $end = null;
         } else {
-            $lastDayPreviousMonth = $today
+            $lastDayPreviousMonth = $reference
                 ->modify('first day of this month')
                 ->modify('-1 day')
                 ->setTime(0, 0)
@@ -523,10 +525,15 @@ final readonly class EmployeeLeaveSummaryProvider implements ProviderInterface
 
     private function resolveTakenCalculationEndDate(
         DateTimeImmutable $periodEnd,
-        Employee $employee
+        Employee $employee,
+        ?DateTimeImmutable $asOfDate = null
     ): ?DateTimeImmutable {
         $end = $periodEnd;
 
+        if ($asOfDate instanceof DateTimeImmutable && $asOfDate < $end) {
+            $end = $asOfDate;
+        }
+
         // Cap at contract end date if the employee has left.
         $contractEndRaw = $employee->getCurrentContractEndDate();
         if (null !== $end && null !== $contractEndRaw && '' !== trim($contractEndRaw)) {

src/State/LeaveRecapPrintProvider.php

@@ -6,21 +6,13 @@ namespace App\State;
 
 use ApiPlatform\Metadata\Operation;
 use ApiPlatform\State\ProviderInterface;
-use App\Entity\Employee;
-use App\Enum\ContractNature;
-use App\Enum\ContractType;
-use App\Enum\TrackingMode;
 use App\Repository\EmployeeRepository;
-use App\Repository\EmployeeRttBalanceRepository;
-use App\Repository\EmployeeRttPaymentRepository;
-use App\Repository\WorkHourRepository;
-use App\Service\Rtt\RttRecoveryComputationService;
+use App\Service\Leave\LeaveRecapRowBuilder;
 use DateTimeImmutable;
 use Doctrine\ORM\EntityManagerInterface;
 use Dompdf\Dompdf;
 use Dompdf\Options;
 use Symfony\Component\HttpFoundation\Response;
-use Throwable;
 use Twig\Environment;
 
 class LeaveRecapPrintProvider implements ProviderInterface
@@ -28,12 +20,8 @@ class LeaveRecapPrintProvider implements ProviderInterface
     public function __construct(
         private Environment $twig,
         private EmployeeRepository $employeeRepository,
-        private EmployeeLeaveSummaryProvider $leaveSummaryProvider,
-        private RttRecoveryComputationService $rttRecoveryService,
-        private EmployeeRttBalanceRepository $rttBalanceRepository,
-        private EmployeeRttPaymentRepository $rttPaymentRepository,
+        private LeaveRecapRowBuilder $rowBuilder,
         private EntityManagerInterface $entityManager,
-        private WorkHourRepository $workHourRepository,
     ) {}
 
     public function provide(Operation $operation, array $uriVariables = [], array $context = []): Response
@@ -59,7 +47,7 @@ class LeaveRecapPrintProvider implements ProviderInterface
                 ];
             }
 
-            $siteGroups[$siteId]['employees'][] = $this->buildEmployeeRow($employee, $today);
+            $siteGroups[$siteId]['employees'][] = $this->rowBuilder->build($employee);
             $this->entityManager->clear();
         }
 
@@ -84,136 +72,4 @@ class LeaveRecapPrintProvider implements ProviderInterface
             'Content-Disposition' => 'inline; filename="'.$filename.'"',
         ]);
     }
-
-    private function buildEmployeeRow(Employee $employee, DateTimeImmutable $today): array
-    {
-        $contract     = $employee->getContract();
-        $contractName = $contract?->getName();
-        $isForfait    = ContractType::FORFAIT === $contract?->getType();
-        $nature       = ContractNature::tryFrom($employee->getCurrentContractNature());
-        $isInterim    = ContractNature::INTERIM === $nature;
-
-        $cpN1Remaining     = 0.0;
-        $cpN               = '-';
-        $acquiredSaturdays = '-';
-        $rtt               = '-';
-
-        if (!$isInterim) {
-            $leaveYear   = $this->leaveSummaryProvider->resolveLeaveYearForToday($employee);
-            $yearSummary = $this->leaveSummaryProvider->computeYearSummary($employee, $leaveYear);
-
-            if (null !== $yearSummary) {
-                if ($isForfait) {
-                    $paidLeaveDays = $this->leaveSummaryProvider->resolvePaidLeaveDays($employee, $yearSummary['ruleCode'], $leaveYear);
-                    if ($paidLeaveDays > 0.0) {
-                        $recomputed = $this->leaveSummaryProvider->computeYearSummary($employee, $leaveYear, $paidLeaveDays);
-                        if (null !== $recomputed) {
-                            $yearSummary = $recomputed;
-                        }
-                    }
-                    $cpN1Remaining     = round($yearSummary['previousYearRemainingDays'], 2);
-                    $cpN               = (string) round($yearSummary['acquiredDays'], 2);
-                    $acquiredSaturdays = '-';
-                } else {
-                    $cpN1Remaining     = round($yearSummary['remainingDays'], 2);
-                    $cpN               = (string) round($yearSummary['accruingDays'], 2);
-                    $acquiredSaturdays = (string) round($yearSummary['remainingSaturdays'], 2);
-                }
-            }
-
-            if (!$isForfait && TrackingMode::PRESENCE->value !== $contract?->getTrackingMode()) {
-                try {
-                    $rtt = $this->formatMinutes($this->computeAvailableRttMinutes($employee, $today));
-                } catch (Throwable) {
-                    $rtt = '-';
-                }
-            }
-        }
-
-        return [
-            'lastName'          => $employee->getLastName(),
-            'firstName'         => $employee->getFirstName(),
-            'contractName'      => $contractName,
-            'cpN1Remaining'     => $cpN1Remaining,
-            'cpN'               => $cpN,
-            'acquiredSaturdays' => $acquiredSaturdays,
-            'rtt'               => $rtt,
-        ];
-    }
-
-    private function computeAvailableRttMinutes(Employee $employee, DateTimeImmutable $today): int
-    {
-        $month        = (int) $today->format('n');
-        $year         = (int) $today->format('Y');
-        $exerciseYear = $month >= 6 ? $year + 1 : $year;
-
-        // Exclude incomplete current week: limit to last Sunday
-        $isoDay    = (int) $today->format('N');
-        $limitDate = 7 === $isoDay ? $today : $today->modify('last sunday');
-
-        // Include the current week if all existing days are admin-validated
-        if (7 !== $isoDay) {
-            $currentWeekStart = $today->modify('monday this week');
-            $currentWeekEnd   = $currentWeekStart->modify('+6 days');
-            $checkEnd         = $this->resolveWeekEndForEmployee($employee, $currentWeekStart, $currentWeekEnd, $today);
-            if ($this->workHourRepository->isWeekFullyValidated($employee, $currentWeekStart, $checkEnd)) {
-                $limitDate = $currentWeekEnd;
-            }
-        }
-
-        // Carry from previous exercise
-        $carry   = 0;
-        $balance = $this->rttBalanceRepository->findOneByEmployeeAndYear($employee, $exerciseYear);
-        if (null !== $balance) {
-            $carry = $balance->getTotalOpeningMinutes();
-        } else {
-            $previousTotal = $this->rttRecoveryService->computeTotalRecoveryForExercise($employee, $exerciseYear - 1);
-            $carry         = $previousTotal->totalMinutes;
-        }
-
-        // Current exercise (limited to completed weeks)
-        $current = $this->rttRecoveryService->computeTotalRecoveryForExercise($employee, $exerciseYear, $limitDate);
-
-        // Paid RTT
-        $paid     = 0;
-        $payments = $this->rttPaymentRepository->findByEmployeeAndYear($employee, $exerciseYear);
-        foreach ($payments as $payment) {
-            $paid += $payment->getBase25Minutes() + $payment->getBonus25Minutes()
-                   + $payment->getBase50Minutes() + $payment->getBonus50Minutes();
-        }
-
-        return $carry + $current->totalMinutes - $paid;
-    }
-
-    private function resolveWeekEndForEmployee(Employee $employee, DateTimeImmutable $weekStart, DateTimeImmutable $weekEnd, DateTimeImmutable $today): DateTimeImmutable
-    {
-        foreach ($employee->getContractPeriods() as $period) {
-            if ($period->getStartDate() > $today) {
-                continue;
-            }
-            $endDate = $period->getEndDate();
-            if (null === $endDate) {
-                continue;
-            }
-            if ($endDate >= $weekStart && $endDate <= $weekEnd) {
-                return $endDate;
-            }
-        }
-
-        return $weekEnd;
-    }
-
-    private function formatMinutes(int $minutes): string
-    {
-        if (0 === $minutes) {
-            return '0 h';
-        }
-
-        $sign = $minutes < 0 ? '- ' : '';
-        $abs  = abs($minutes);
-        $h    = intdiv($abs, 60);
-        $m    = $abs % 60;
-
-        return 0 === $m ? "{$sign}{$h} h" : "{$sign}{$h} h {$m} m";
-    }
 }

src/Util/LeaveRecapCutoff.php

@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Util;
+
+use DateTimeImmutable;
+
+/**
+ * Leave recap cutoff rule: as-of end of ISO week S-2 (Sunday 23:59:59).
+ *
+ * Example: Tuesday 2026-04-14 (S16) → Sunday 2026-04-05 23:59:59 (end of S14).
+ */
+final class LeaveRecapCutoff
+{
+    public static function resolveCutoff(DateTimeImmutable $today): DateTimeImmutable
+    {
+        $currentWeekMonday = $today->modify('monday this week')->setTime(0, 0);
+        $cutoffWeekMonday  = $currentWeekMonday->modify('-14 days');
+
+        return $cutoffWeekMonday->modify('+6 days')->setTime(23, 59, 59);
+    }
+}