chore: bump version to v0.1.160

Error tracking centralise : remontee des erreurs back (Symfony) et front (Nuxt)
vers l'instance GlitchTip auto-hebergee. DSN vides par defaut => SDK inerte.

Backend :
- sentry/sentry-symfony ^5.10, bundle enregistre prod-only
- config/packages/sentry.yaml : handler Monolog niveau ERROR+, ignore 4xx/AccessDenied,
  pas d'APM, release = %app.version%
- .env : bloc SENTRY_DSN documente (vide => inerte)

Frontend :
- @sentry/nuxt ^10.61, module charge uniquement si NUXT_PUBLIC_SENTRY_DSN defini
- runtimeConfig.public.sentry + source maps (hidden) + options d'upload
- sentry.client.config.ts : init cote client gardee par if (dsn)

Deploiement :
- Dockerfile : ARG Sentry au build front (prefixe inline du RUN, token non persiste)
  + CA racine interne MALIO (update-ca-certificates) pour le handshake HTTPS GlitchTip back
- build-docker.yml : --build-arg depuis les secrets Gitea
- .env.prod.example : SENTRY_DSN (back, runtime)

.env

@@ -19,3 +19,10 @@ JWT_COOKIE_TTL=86400
 
 
 DATABASE_URL="postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/${POSTGRES_DB}?serverVersion=16&charset=utf8"
+
+###> sentry/sentry-symfony ###
+# Error tracking backend → GlitchTip (projet "starseed-api"). Prod only, vide => inerte.
+# À définir dans l'env de prod (PAS ici, pas de secret commité). Format :
+#   SENTRY_DSN=https://<clé>@<host-ou-IP>:<port>/<id-projet>
+# SENTRY_DSN=
+###< sentry/sentry-symfony ###

.gitea/workflows/build-docker.yml

@@ -20,6 +20,11 @@ jobs:
         run: |
           docker build \
             -f infra/prod/Dockerfile \
+            --build-arg NUXT_PUBLIC_SENTRY_DSN="${{ secrets.STARSEED_SENTRY_DSN_FRONT }}" \
+            --build-arg SENTRY_URL="${{ secrets.SENTRY_URL }}" \
+            --build-arg SENTRY_ORG="${{ secrets.SENTRY_ORG }}" \
+            --build-arg SENTRY_PROJECT="${{ secrets.SENTRY_PROJECT }}" \
+            --build-arg SENTRY_AUTH_TOKEN="${{ secrets.SENTRY_AUTH_TOKEN }}" \
             -t gitea.malio.fr/malio-dev/starseed:${{ gitea.ref_name }} \
             -t gitea.malio.fr/malio-dev/starseed:latest \
             .

composer.json

@@ -19,6 +19,7 @@
         "phpdocumentor/reflection-docblock": "^5.6|^6.0",
         "phpoffice/phpspreadsheet": "^5.7",
         "phpstan/phpdoc-parser": "^2.3",
+        "sentry/sentry-symfony": "^5.10",
         "symfony/asset": "8.0.*",
         "symfony/console": "8.0.*",
         "symfony/dotenv": "8.0.*",

composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "224bae08ec63f217eabf5b2b611deaa0",
+    "content-hash": "b8b93695be3d3ac324dc082fbd6db78c",
     "packages": [
         {
             "name": "api-platform/doctrine-common",
@@ -2675,6 +2675,185 @@
             },
             "time": "2026-01-02T16:01:13+00:00"
         },
+        {
+            "name": "guzzlehttp/psr7",
+            "version": "2.12.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/guzzle/psr7.git",
+                "reference": "7ec62dc3f44aa218487dbed81a9bf9bc647be55d"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/guzzle/psr7/zipball/7ec62dc3f44aa218487dbed81a9bf9bc647be55d",
+                "reference": "7ec62dc3f44aa218487dbed81a9bf9bc647be55d",
+                "shasum": ""
+            },
+            "require": {
+                "php": "^7.2.5 || ^8.0",
+                "psr/http-factory": "^1.0",
+                "psr/http-message": "^1.1 || ^2.0",
+                "ralouphie/getallheaders": "^3.0",
+                "symfony/deprecation-contracts": "^2.5 || ^3.0",
+                "symfony/polyfill-php80": "^1.25"
+            },
+            "provide": {
+                "psr/http-factory-implementation": "1.0",
+                "psr/http-message-implementation": "1.0"
+            },
+            "require-dev": {
+                "bamarni/composer-bin-plugin": "^1.8.2",
+                "http-interop/http-factory-tests": "1.1.0",
+                "jshttp/mime-db": "1.54.0.1",
+                "phpunit/phpunit": "^8.5.52 || ^9.6.34"
+            },
+            "suggest": {
+                "laminas/laminas-httphandlerrunner": "Emit PSR-7 responses"
+            },
+            "type": "library",
+            "extra": {
+                "bamarni-bin": {
+                    "bin-links": true,
+                    "forward-command": false
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "GuzzleHttp\\Psr7\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Graham Campbell",
+                    "email": "hello@gjcampbell.co.uk",
+                    "homepage": "https://github.com/GrahamCampbell"
+                },
+                {
+                    "name": "Michael Dowling",
+                    "email": "mtdowling@gmail.com",
+                    "homepage": "https://github.com/mtdowling"
+                },
+                {
+                    "name": "George Mponos",
+                    "email": "gmponos@gmail.com",
+                    "homepage": "https://github.com/gmponos"
+                },
+                {
+                    "name": "Tobias Nyholm",
+                    "email": "tobias.nyholm@gmail.com",
+                    "homepage": "https://github.com/Nyholm"
+                },
+                {
+                    "name": "Márk Sági-Kazár",
+                    "email": "mark.sagikazar@gmail.com",
+                    "homepage": "https://github.com/sagikazarmark"
+                },
+                {
+                    "name": "Tobias Schultze",
+                    "email": "webmaster@tubo-world.de",
+                    "homepage": "https://github.com/Tobion"
+                },
+                {
+                    "name": "Márk Sági-Kazár",
+                    "email": "mark.sagikazar@gmail.com",
+                    "homepage": "https://sagikazarmark.hu"
+                }
+            ],
+            "description": "PSR-7 message implementation that also provides common utility methods",
+            "keywords": [
+                "http",
+                "message",
+                "psr-7",
+                "request",
+                "response",
+                "stream",
+                "uri",
+                "url"
+            ],
+            "support": {
+                "issues": "https://github.com/guzzle/psr7/issues",
+                "source": "https://github.com/guzzle/psr7/tree/2.12.3"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/GrahamCampbell",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/Nyholm",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/guzzlehttp/psr7",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-06-23T15:21:08+00:00"
+        },
+        {
+            "name": "jean85/pretty-package-versions",
+            "version": "2.1.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/Jean85/pretty-package-versions.git",
+                "reference": "4d7aa5dab42e2a76d99559706022885de0e18e1a"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/Jean85/pretty-package-versions/zipball/4d7aa5dab42e2a76d99559706022885de0e18e1a",
+                "reference": "4d7aa5dab42e2a76d99559706022885de0e18e1a",
+                "shasum": ""
+            },
+            "require": {
+                "composer-runtime-api": "^2.1.0",
+                "php": "^7.4|^8.0"
+            },
+            "require-dev": {
+                "friendsofphp/php-cs-fixer": "^3.2",
+                "jean85/composer-provided-replaced-stub-package": "^1.0",
+                "phpstan/phpstan": "^2.0",
+                "phpunit/phpunit": "^7.5|^8.5|^9.6",
+                "rector/rector": "^2.0",
+                "vimeo/psalm": "^4.3 || ^5.0"
+            },
+            "type": "library",
+            "extra": {
+                "branch-alias": {
+                    "dev-master": "1.x-dev"
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "Jean85\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Alessandro Lai",
+                    "email": "alessandro.lai85@gmail.com"
+                }
+            ],
+            "description": "A library to get pretty versions strings of installed dependencies",
+            "keywords": [
+                "composer",
+                "package",
+                "release",
+                "versions"
+            ],
+            "support": {
+                "issues": "https://github.com/Jean85/pretty-package-versions/issues",
+                "source": "https://github.com/Jean85/pretty-package-versions/tree/2.1.1"
+            },
+            "time": "2025-03-19T14:43:43+00:00"
+        },
         {
             "name": "lcobucci/jwt",
             "version": "5.6.0",
@@ -4159,6 +4338,50 @@
             },
             "time": "2021-10-29T13:26:27+00:00"
         },
+        {
+            "name": "ralouphie/getallheaders",
+            "version": "3.0.3",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/ralouphie/getallheaders.git",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/ralouphie/getallheaders/zipball/120b605dfeb996808c31b6477290a714d356e822",
+                "reference": "120b605dfeb996808c31b6477290a714d356e822",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=5.6"
+            },
+            "require-dev": {
+                "php-coveralls/php-coveralls": "^2.1",
+                "phpunit/phpunit": "^5 || ^6.5"
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/getallheaders.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Ralph Khattar",
+                    "email": "ralph.khattar@gmail.com"
+                }
+            ],
+            "description": "A polyfill for getallheaders.",
+            "support": {
+                "issues": "https://github.com/ralouphie/getallheaders/issues",
+                "source": "https://github.com/ralouphie/getallheaders/tree/develop"
+            },
+            "time": "2019-03-08T08:55:37+00:00"
+        },
         {
             "name": "sabberworm/php-css-parser",
             "version": "v9.4.0",
@@ -4239,6 +4462,202 @@
             },
             "time": "2026-06-18T15:10:53+00:00"
         },
+        {
+            "name": "sentry/sentry",
+            "version": "4.29.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/getsentry/sentry-php.git",
+                "reference": "d732a4da195f231cedb2a2a78ae16dd73082afa3"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/getsentry/sentry-php/zipball/d732a4da195f231cedb2a2a78ae16dd73082afa3",
+                "reference": "d732a4da195f231cedb2a2a78ae16dd73082afa3",
+                "shasum": ""
+            },
+            "require": {
+                "ext-curl": "*",
+                "ext-json": "*",
+                "ext-mbstring": "*",
+                "guzzlehttp/psr7": "^1.8.4|^2.1.1",
+                "jean85/pretty-package-versions": "^1.5|^2.0.4",
+                "php": "^7.2|^8.0",
+                "psr/log": "^1.0|^2.0|^3.0",
+                "symfony/options-resolver": "^4.4.30|^5.0.11|^6.0|^7.0|^8.0"
+            },
+            "conflict": {
+                "raven/raven": "*"
+            },
+            "require-dev": {
+                "carthage-software/mago": "1.30.0",
+                "friendsofphp/php-cs-fixer": "^3.4",
+                "guzzlehttp/promises": "^2.0.3",
+                "monolog/monolog": "^1.6|^2.0|^3.0",
+                "nyholm/psr7": "^1.8",
+                "open-telemetry/api": "^1.0",
+                "open-telemetry/exporter-otlp": "^1.0",
+                "open-telemetry/sdk": "^1.0",
+                "open-telemetry/sem-conv": "^1.27",
+                "phpstan/phpstan": "^1.3",
+                "phpunit/phpunit": "^8.5.52|^9.6.34",
+                "spiral/roadrunner-http": "^3.6",
+                "spiral/roadrunner-worker": "^3.6"
+            },
+            "suggest": {
+                "ext-excimer": "Enable Sentry profiling with the Excimer PHP extension.",
+                "monolog/monolog": "Allow sending log messages to Sentry by using the included Monolog handler."
+            },
+            "type": "library",
+            "autoload": {
+                "files": [
+                    "src/functions.php"
+                ],
+                "psr-4": {
+                    "Sentry\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Sentry",
+                    "email": "accounts@sentry.io"
+                }
+            ],
+            "description": "PHP SDK for Sentry (http://sentry.io)",
+            "homepage": "http://sentry.io",
+            "keywords": [
+                "crash-reporting",
+                "crash-reports",
+                "error-handler",
+                "error-monitoring",
+                "log",
+                "logging",
+                "profiling",
+                "sentry",
+                "tracing"
+            ],
+            "support": {
+                "issues": "https://github.com/getsentry/sentry-php/issues",
+                "source": "https://github.com/getsentry/sentry-php/tree/4.29.0"
+            },
+            "funding": [
+                {
+                    "url": "https://sentry.io/",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://sentry.io/pricing/",
+                    "type": "custom"
+                }
+            ],
+            "time": "2026-06-29T14:47:44+00:00"
+        },
+        {
+            "name": "sentry/sentry-symfony",
+            "version": "5.10.0",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/getsentry/sentry-symfony.git",
+                "reference": "6f49255f4cdcfc43a3a283bd3a1f65d483e9192f"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/getsentry/sentry-symfony/zipball/6f49255f4cdcfc43a3a283bd3a1f65d483e9192f",
+                "reference": "6f49255f4cdcfc43a3a283bd3a1f65d483e9192f",
+                "shasum": ""
+            },
+            "require": {
+                "guzzlehttp/psr7": "^2.1.1",
+                "jean85/pretty-package-versions": "^1.5||^2.0",
+                "php": "^7.2||^8.0",
+                "sentry/sentry": "^4.23.0",
+                "symfony/cache-contracts": "^1.1||^2.4||^3.0",
+                "symfony/config": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/console": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/dependency-injection": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/event-dispatcher": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/http-kernel": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/polyfill-php80": "^1.22",
+                "symfony/psr-http-message-bridge": "^1.2||^2.0||^6.4||^7.0||^8.0",
+                "symfony/yaml": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0"
+            },
+            "require-dev": {
+                "doctrine/dbal": "^2.13||^3.3||^4.0",
+                "doctrine/doctrine-bundle": "^2.6||^3.0",
+                "friendsofphp/php-cs-fixer": "^2.19||^3.40",
+                "masterminds/html5": "^2.8",
+                "phpstan/extension-installer": "^1.0",
+                "phpstan/phpstan": "1.12.5",
+                "phpstan/phpstan-phpunit": "1.4.0",
+                "phpstan/phpstan-symfony": "1.4.10",
+                "phpunit/phpunit": "^8.5.40||^9.6.21",
+                "symfony/browser-kit": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/cache": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/dom-crawler": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/framework-bundle": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/http-client": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/messenger": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/monolog-bundle": "^3.4||^4.0",
+                "symfony/phpunit-bridge": "^5.2.6||^6.0||^7.0||^8.0",
+                "symfony/process": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/security-core": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/security-http": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "symfony/twig-bundle": "^4.4.20||^5.0.11||^6.0||^7.0||^8.0",
+                "vimeo/psalm": "^4.3||^5.16.0"
+            },
+            "suggest": {
+                "doctrine/doctrine-bundle": "Allow distributed tracing of database queries using Sentry.",
+                "monolog/monolog": "Allow sending log messages to Sentry by using the included Monolog handler.",
+                "symfony/cache": "Allow distributed tracing of cache pools using Sentry.",
+                "symfony/twig-bundle": "Allow distributed tracing of Twig template rendering using Sentry."
+            },
+            "type": "symfony-bundle",
+            "autoload": {
+                "files": [
+                    "src/aliases.php"
+                ],
+                "psr-4": {
+                    "Sentry\\SentryBundle\\": "src/"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Sentry",
+                    "email": "accounts@sentry.io"
+                }
+            ],
+            "description": "Symfony integration for Sentry (http://getsentry.com)",
+            "homepage": "http://getsentry.com",
+            "keywords": [
+                "errors",
+                "logging",
+                "sentry",
+                "symfony"
+            ],
+            "support": {
+                "issues": "https://github.com/getsentry/sentry-symfony/issues",
+                "source": "https://github.com/getsentry/sentry-symfony/tree/5.10.0"
+            },
+            "funding": [
+                {
+                    "url": "https://sentry.io/",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://sentry.io/pricing/",
+                    "type": "custom"
+                }
+            ],
+            "time": "2026-04-01T14:50:32+00:00"
+        },
         {
             "name": "symfony/asset",
             "version": "v8.0.8",
@@ -7216,6 +7635,93 @@
             ],
             "time": "2026-03-30T15:14:47+00:00"
         },
+        {
+            "name": "symfony/psr-http-message-bridge",
+            "version": "v8.0.8",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/symfony/psr-http-message-bridge.git",
+                "reference": "94facc221260c1d5f20e31ee43cd6c6a824b4a19"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/symfony/psr-http-message-bridge/zipball/94facc221260c1d5f20e31ee43cd6c6a824b4a19",
+                "reference": "94facc221260c1d5f20e31ee43cd6c6a824b4a19",
+                "shasum": ""
+            },
+            "require": {
+                "php": ">=8.4",
+                "psr/http-message": "^1.0|^2.0",
+                "symfony/http-foundation": "^7.4|^8.0"
+            },
+            "conflict": {
+                "php-http/discovery": "<1.15"
+            },
+            "require-dev": {
+                "nyholm/psr7": "^1.1",
+                "php-http/discovery": "^1.15",
+                "psr/log": "^1.1.4|^2|^3",
+                "symfony/browser-kit": "^7.4|^8.0",
+                "symfony/config": "^7.4|^8.0",
+                "symfony/event-dispatcher": "^7.4|^8.0",
+                "symfony/framework-bundle": "^7.4|^8.0",
+                "symfony/http-kernel": "^7.4|^8.0",
+                "symfony/runtime": "^7.4|^8.0"
+            },
+            "type": "symfony-bridge",
+            "autoload": {
+                "psr-4": {
+                    "Symfony\\Bridge\\PsrHttpMessage\\": ""
+                },
+                "exclude-from-classmap": [
+                    "/Tests/"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Fabien Potencier",
+                    "email": "fabien@symfony.com"
+                },
+                {
+                    "name": "Symfony Community",
+                    "homepage": "https://symfony.com/contributors"
+                }
+            ],
+            "description": "PSR HTTP message bridge",
+            "homepage": "https://symfony.com",
+            "keywords": [
+                "http",
+                "http-message",
+                "psr-17",
+                "psr-7"
+            ],
+            "support": {
+                "source": "https://github.com/symfony/psr-http-message-bridge/tree/v8.0.8"
+            },
+            "funding": [
+                {
+                    "url": "https://symfony.com/sponsor",
+                    "type": "custom"
+                },
+                {
+                    "url": "https://github.com/fabpot",
+                    "type": "github"
+                },
+                {
+                    "url": "https://github.com/nicolas-grekas",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/symfony/symfony",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2026-03-30T15:14:47+00:00"
+        },
         {
             "name": "symfony/rate-limiter",
             "version": "v8.0.8",

config/bundles.php

@@ -8,6 +8,7 @@ use Doctrine\Bundle\FixturesBundle\DoctrineFixturesBundle;
 use Doctrine\Bundle\MigrationsBundle\DoctrineMigrationsBundle;
 use Lexik\Bundle\JWTAuthenticationBundle\LexikJWTAuthenticationBundle;
 use Nelmio\CorsBundle\NelmioCorsBundle;
+use Sentry\SentryBundle\SentryBundle;
 use Symfony\Bundle\FrameworkBundle\FrameworkBundle;
 use Symfony\Bundle\MonologBundle\MonologBundle;
 use Symfony\Bundle\SecurityBundle\SecurityBundle;
@@ -24,4 +25,5 @@ return [
     LexikJWTAuthenticationBundle::class => ['all' => true],
     MonologBundle::class                => ['all' => true],
     TwigBundle::class                   => ['all' => true],
+    SentryBundle::class                 => ['prod' => true],
 ];

config/packages/sentry.yaml

@@ -0,0 +1,35 @@
+# Error tracking → GlitchTip (compatible SDK Sentry).
+# Actif uniquement en prod (bundle enregistré prod-only dans bundles.php).
+# Si SENTRY_DSN est vide/non défini, le SDK est inerte (rien n'est envoyé).
+when@prod:
+    parameters:
+        # Valeur par défaut : DSN vide => Sentry désactivé tant qu'il n'est pas fourni.
+        env(SENTRY_DSN): ''
+
+    sentry:
+        dsn: '%env(SENTRY_DSN)%'
+        # Capture des erreurs fatales PHP via le handler. On DÉSACTIVE le listener
+        # kernel pour éviter les doublons avec le handler Monolog (ci-dessous) : les
+        # exceptions du kernel sont déjà logguées par Symfony => remontées via Monolog.
+        register_error_listener: false
+        register_error_handler: true
+        options:
+            environment: '%env(APP_ENV)%'
+            release: '%app.version%'
+            # Pas d'APM/tracing (DuckDB hors périmètre du ticket #146).
+            traces_sample_rate: 0.0
+            # Ne pas remonter les 4xx HTTP comme des erreurs (bruit).
+            ignore_exceptions:
+                - Symfony\Component\HttpKernel\Exception\NotFoundHttpException
+                - Symfony\Component\HttpKernel\Exception\MethodNotAllowedHttpException
+                - Symfony\Component\Security\Core\Exception\AccessDeniedException
+
+    # Handler Monolog -> Sentry : remonte les logs niveau ERROR+ comme Issues GlitchTip
+    # (en plus des erreurs fatales). Les $logger->error(...) métier deviennent des Issues.
+    # Le filtre ignore_exceptions ci-dessus s'applique aussi à ces événements.
+    services:
+        Sentry\Monolog\Handler:
+            arguments:
+                $hub: '@Sentry\State\HubInterface'
+                $level: !php/const Monolog\Level::Error
+                $bubble: true

config/version.yaml

@@ -1,2 +1,2 @@
 parameters:
-    app.version: '0.1.156'
+    app.version: '0.1.160'

frontend/nuxt.config.ts

@@ -40,12 +40,33 @@ export default defineNuxtConfig({
         'nuxt-toast',
         '@nuxtjs/i18n',
         '@nuxt/icon',
+        // Error tracking → GlitchTip. Module charge uniquement si un DSN est fourni
+        // (build prod) ; en dev sans DSN, aucun overhead Sentry. Les options d'upload
+        // des source maps sont passees en ligne (fournies au build via secrets CI).
+        ...(process.env.NUXT_PUBLIC_SENTRY_DSN
+            ? [['@sentry/nuxt/module', {
+                sourceMapsUploadOptions: {
+                    url: process.env.SENTRY_URL,
+                    org: process.env.SENTRY_ORG,
+                    project: process.env.SENTRY_PROJECT,
+                    authToken: process.env.SENTRY_AUTH_TOKEN,
+                },
+            }] as [string, Record<string, unknown>]]
+            : []),
     ],
     runtimeConfig: {
         public: {
-            apiBase: process.env.NUXT_PUBLIC_API_BASE
+            apiBase: process.env.NUXT_PUBLIC_API_BASE,
+            sentry: {
+                // DSN du projet GlitchTip "starseed-front" (vide => SDK inerte).
+                dsn: process.env.NUXT_PUBLIC_SENTRY_DSN || '',
+                environment: process.env.NODE_ENV || 'development',
+            },
         }
     },
+    // Source maps "hidden" : generees et uploadees vers GlitchTip pour des stacktraces
+    // lisibles, sans exposer les .map au navigateur.
+    sourcemap: {client: 'hidden'},
     devServer: {
         port: 3004,
     },

frontend/package-lock.json

@@ -12,6 +12,7 @@
         "@nuxtjs/i18n": "^10.2.3",
         "@nuxtjs/tailwindcss": "^6.14.0",
         "@pinia/nuxt": "^0.11.3",
+        "@sentry/nuxt": "^10.62.0",
         "nuxt": "^4.3.1",
         "nuxt-toast": "^1.4.0",
         "pinia": "^3.0.4",
@@ -57,6 +58,49 @@
         "url": "https://github.com/sponsors/antfu"
       }
     },
+    "node_modules/@apm-js-collab/code-transformer": {
+      "version": "0.15.0",
+      "resolved": "https://registry.npmjs.org/@apm-js-collab/code-transformer/-/code-transformer-0.15.0.tgz",
+      "integrity": "sha512-XmXYVs8CzJ1Aj79noVbn2weUO/XWtRyURpGqx7aU7DOXlUQhR0WKOQNF0okh7PCeY37vxf7kU3v57OAkEPm3ww==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/estree": "^1.0.8",
+        "astring": "^1.9.0",
+        "esquery": "^1.7.0",
+        "meriyah": "^6.1.4",
+        "semifies": "^1.0.0",
+        "source-map": "^0.6.0"
+      },
+      "bin": {
+        "code-transformer": "cli.js"
+      }
+    },
+    "node_modules/@apm-js-collab/code-transformer-bundler-plugins": {
+      "version": "0.5.0",
+      "resolved": "https://registry.npmjs.org/@apm-js-collab/code-transformer-bundler-plugins/-/code-transformer-bundler-plugins-0.5.0.tgz",
+      "integrity": "sha512-YxLBY5nGlurL7QeJLq6e5g0ouBpAp0pwgyA/5rHXEXwhiPLn9ZHbT+Y2LlP90GT872cSocfjWRYu/fnpuBudNQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@apm-js-collab/code-transformer": "^0.15.0",
+        "es-module-lexer": "^2.1.0",
+        "magic-string": "^0.30.21",
+        "module-details-from-path": "^1.0.4"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/@apm-js-collab/tracing-hooks": {
+      "version": "0.10.0",
+      "resolved": "https://registry.npmjs.org/@apm-js-collab/tracing-hooks/-/tracing-hooks-0.10.0.tgz",
+      "integrity": "sha512-2/Z3NTewJTruUkmsSnBC5bJlLNUd9keuD1OLlTEpim4FyLhm6m2Rnfv+wrFdUvFfhmH8CRdiDZBqBrn+wyaGuA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@apm-js-collab/code-transformer": "^0.15.0",
+        "debug": "^4.4.1",
+        "module-details-from-path": "^1.0.4"
+      }
+    },
     "node_modules/@babel/code-frame": {
       "version": "7.29.0",
       "resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.29.0.tgz",
@@ -2625,6 +2669,101 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@opentelemetry/api": {
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api/-/api-1.9.1.tgz",
+      "integrity": "sha512-gLyJlPHPZYdAk1JENA9LeHejZe1Ti77/pTeFm/nMXmQH/HFZlcS/O2XJB+L8fkbrNSqhdtlvjBVjxwUYanNH5Q==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/api-logs": {
+      "version": "0.214.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/api-logs/-/api-logs-0.214.0.tgz",
+      "integrity": "sha512-40lSJeqYO8Uz2Yj7u94/SJWE/wONa7rmMKjI1ZcIjgf3MHNHv1OZUCrCETGuaRF62d5pQD1wKIW+L4lmSMTzZA==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      },
+      "engines": {
+        "node": ">=8.0.0"
+      }
+    },
+    "node_modules/@opentelemetry/core": {
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/core/-/core-2.8.0.tgz",
+      "integrity": "sha512-hd1Lfh8p545nNz+jq1Ejfz+Mn1hyLuxYn1YzTfFNrxr8urEWMNQLPf1Th8kjOH+HxwawCrtgBp8JpBUR4ZSgww==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.0.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/instrumentation": {
+      "version": "0.214.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/instrumentation/-/instrumentation-0.214.0.tgz",
+      "integrity": "sha512-MHqEX5Dk59cqVah5LiARMACku7jXSVk9iVDWOea4x3cr7VfdByeDCURK6o1lntT1JS/Tsovw01UJrBhN3/uC5w==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/api-logs": "0.214.0",
+        "import-in-the-middle": "^3.0.0",
+        "require-in-the-middle": "^8.0.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.3.0"
+      }
+    },
+    "node_modules/@opentelemetry/resources": {
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/resources/-/resources-2.8.0.tgz",
+      "integrity": "sha512-qmXQ27ilDbUK/vGMqwL8D4/rhn76C+sherM4wTbjlfknR8Nvfc/hCxjRJPhkzZzUsPiNg16SA31NxMabwttRjg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.8.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/sdk-trace-base": {
+      "version": "2.8.0",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/sdk-trace-base/-/sdk-trace-base-2.8.0.tgz",
+      "integrity": "sha512-mhU4jp+vW0mGbFRd+GeXHvmfA4aDqWjBjLC3pE5XMpLs0IE2ryYb019Ts2AQrOq67gaTF25D91+fgvEHDZEnuQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@opentelemetry/core": "2.8.0",
+        "@opentelemetry/resources": "2.8.0",
+        "@opentelemetry/semantic-conventions": "^1.29.0"
+      },
+      "engines": {
+        "node": "^18.19.0 || >=20.6.0"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": ">=1.3.0 <1.10.0"
+      }
+    },
+    "node_modules/@opentelemetry/semantic-conventions": {
+      "version": "1.41.1",
+      "resolved": "https://registry.npmjs.org/@opentelemetry/semantic-conventions/-/semantic-conventions-1.41.1.tgz",
+      "integrity": "sha512-/UhIkaZgPutTFmQ7RnIJGgDXZmtEJ7Dvi86xNTFWcnRxVRNk/aotsqDJYeEvDP+FSMB2SdW+pQzNMcWP0rwuNA==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=14"
+      }
+    },
     "node_modules/@oxc-minify/binding-android-arm-eabi": {
       "version": "0.117.0",
       "resolved": "https://registry.npmjs.org/@oxc-minify/binding-android-arm-eabi/-/binding-android-arm-eabi-0.117.0.tgz",
@@ -4534,6 +4673,556 @@
         "win32"
       ]
     },
+    "node_modules/@sentry/babel-plugin-component-annotate": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/@sentry/babel-plugin-component-annotate/-/babel-plugin-component-annotate-5.3.0.tgz",
+      "integrity": "sha512-p4q8gn8wcFqZGP/s2MnJCAAd8fTikaU6A0mM97RDHQgStcrYiaS0Sc5zUNfb1V+UOLPuvdEdL6MwyxfzjYJQTA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/@sentry/browser": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/browser/-/browser-10.62.0.tgz",
+      "integrity": "sha512-uJi0yPssB3Nt/cZ8/S8opW42gaM59/6IyNtPFYD7C0ciudi/nIo5QMVpCYBBI3jnKFOIQLlsMT4pDlOLuxxNuQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/browser-utils": "10.62.0",
+        "@sentry/core": "10.62.0",
+        "@sentry/feedback": "10.62.0",
+        "@sentry/replay": "10.62.0",
+        "@sentry/replay-canvas": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/browser-utils": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/browser-utils/-/browser-utils-10.62.0.tgz",
+      "integrity": "sha512-mS9HVVuWIdye9o0xUGFmzNOBqktF4n5kugrF8NCOYYDrr5ZV8Cx7BlquHQn5UpCeViVhZtcDlEm4iOK7++Px7A==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/bundler-plugin-core": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/@sentry/bundler-plugin-core/-/bundler-plugin-core-5.3.0.tgz",
+      "integrity": "sha512-L5T60sWdAI3qWwdg3Ptwek/0TY59PERrxyqp4XMUkroayQvGd9r5dIW9Q1kSeXX9iJ442nXbFZKAOyCKV4Z13Q==",
+      "license": "MIT",
+      "dependencies": {
+        "@babel/core": "^7.18.5",
+        "@sentry/babel-plugin-component-annotate": "5.3.0",
+        "@sentry/cli": "^2.58.5",
+        "dotenv": "^16.3.1",
+        "find-up": "^5.0.0",
+        "glob": "^13.0.6",
+        "magic-string": "~0.30.8"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/@sentry/bundler-plugin-core/node_modules/dotenv": {
+      "version": "16.6.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
+      "integrity": "sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/@sentry/cli": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli/-/cli-2.58.6.tgz",
+      "integrity": "sha512-baBcNPLLfUi9WuL+Tpri9BFaAdvugZIKelC5X0tt0Zdy+K0K+PCVSrnNmwMWU/HyaF/SEv6b6UHnXIdqanBlcg==",
+      "hasInstallScript": true,
+      "license": "FSL-1.1-MIT",
+      "dependencies": {
+        "https-proxy-agent": "^5.0.0",
+        "node-fetch": "^2.6.7",
+        "progress": "^2.0.3",
+        "proxy-from-env": "^1.1.0",
+        "which": "^2.0.2"
+      },
+      "bin": {
+        "sentry-cli": "bin/sentry-cli"
+      },
+      "engines": {
+        "node": ">= 10"
+      },
+      "optionalDependencies": {
+        "@sentry/cli-darwin": "2.58.6",
+        "@sentry/cli-linux-arm": "2.58.6",
+        "@sentry/cli-linux-arm64": "2.58.6",
+        "@sentry/cli-linux-i686": "2.58.6",
+        "@sentry/cli-linux-x64": "2.58.6",
+        "@sentry/cli-win32-arm64": "2.58.6",
+        "@sentry/cli-win32-i686": "2.58.6",
+        "@sentry/cli-win32-x64": "2.58.6"
+      }
+    },
+    "node_modules/@sentry/cli-darwin": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-darwin/-/cli-darwin-2.58.6.tgz",
+      "integrity": "sha512-udAVvcyfNa0R+95GvPz/+43/N3TC0TYKdkQ7D7jhPSzbcMc7l2fxRNN5yB3UpCA5fWFnW4toeaqwDBhb/Wh3LA==",
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-linux-arm": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-linux-arm/-/cli-linux-arm-2.58.6.tgz",
+      "integrity": "sha512-pD0LAt5PcUzAinBwvDqc66x9+2CabHEv486yP0gRjWO7SakbaxmfVq/EXd8VLq/Tzi39LAu422UYK1lpW3MILw==",
+      "cpu": [
+        "arm"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "linux",
+        "freebsd",
+        "android"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-linux-arm64": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-linux-arm64/-/cli-linux-arm64-2.58.6.tgz",
+      "integrity": "sha512-q8mEcNNmeXMy5i+jWT30TVpH7LcP4HD21CD5XRSPAd/a912HF6EpK0ybf/1USO14WOhoXbAGi9txwaWabSe33g==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "linux",
+        "freebsd",
+        "android"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-linux-i686": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-linux-i686/-/cli-linux-i686-2.58.6.tgz",
+      "integrity": "sha512-q8vNJi1eOV/4vxAFWBsEwLHoSYapaZHIf4j76KJGJXFKTkEbsjCOOsKbwUIBTQQhRgV4DFWh3ryfsPS/que4Kg==",
+      "cpu": [
+        "x86",
+        "ia32"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "linux",
+        "freebsd",
+        "android"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-linux-x64": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-linux-x64/-/cli-linux-x64-2.58.6.tgz",
+      "integrity": "sha512-DZu956Mhi3ZRjTBe1WdbGV46ldVbA8d2rgp/fh51GsI25zjBHah4wZnPTSzpc+YqxU6pJpg579B/r3jrIK530Q==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "linux",
+        "freebsd",
+        "android"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-win32-arm64": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-win32-arm64/-/cli-win32-arm64-2.58.6.tgz",
+      "integrity": "sha512-nj0Ff/kmAB73EPDhR8B4O9r+NUHK5GkPCkGWC+kXVemqAJWL5jcJ5KdxG0l/S0z6RoEoltID8/43/B+TaMlT7A==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-win32-i686": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-win32-i686/-/cli-win32-i686-2.58.6.tgz",
+      "integrity": "sha512-WNZiDzPbgsEMQWq4avsQ391v/xWKJDIWWWo9GYl+N/w5qcYKkoDW7wQG7T9FasI6ENn68phChTOAPXXxbfAdOg==",
+      "cpu": [
+        "x86",
+        "ia32"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli-win32-x64": {
+      "version": "2.58.6",
+      "resolved": "https://registry.npmjs.org/@sentry/cli-win32-x64/-/cli-win32-x64-2.58.6.tgz",
+      "integrity": "sha512-R35WJ17oF4D2eqI1DR2sQQqr0fjRTt5xoP16WrTu91XM2lndRMFsnjh+/GttbxapLCBNlrjzia99MJ0PZHZpgA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "FSL-1.1-MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/@sentry/cli/node_modules/agent-base": {
+      "version": "6.0.2",
+      "resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
+      "integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6.0.0"
+      }
+    },
+    "node_modules/@sentry/cli/node_modules/https-proxy-agent": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
+      "integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
+      "license": "MIT",
+      "dependencies": {
+        "agent-base": "6",
+        "debug": "4"
+      },
+      "engines": {
+        "node": ">= 6"
+      }
+    },
+    "node_modules/@sentry/cloudflare": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/cloudflare/-/cloudflare-10.62.0.tgz",
+      "integrity": "sha512-oHDpXXiO3XpBO2cHiTRQpSrtQOQrsU9JsO3TZ6ukdd24IUE6Tkc3l7hWdwzKqId3nTWP1Ef0Fr+offsrEGJ6UA==",
+      "license": "MIT",
+      "dependencies": {
+        "@opentelemetry/api": "^1.9.1",
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@cloudflare/workers-types": "^4.x"
+      },
+      "peerDependenciesMeta": {
+        "@cloudflare/workers-types": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@sentry/conventions": {
+      "version": "0.12.0",
+      "resolved": "https://registry.npmjs.org/@sentry/conventions/-/conventions-0.12.0.tgz",
+      "integrity": "sha512-z1JQrl/1SLY+8wpzvork6vl+fpsg/oCCxM7HWWhUnI/R+OGNyoIzieQuggX3uUMY7NBtp8UWCQx6FeFazzOF9g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14"
+      }
+    },
+    "node_modules/@sentry/core": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/core/-/core-10.62.0.tgz",
+      "integrity": "sha512-tV69fMg2sS5DUFmQSnS7Jd5qJAp0izxwcsvBVz2ieTM9VMRi99IfOSYW9UYr3p1yfuksk41kefN5PEbeedUE+A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/feedback": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/feedback/-/feedback-10.62.0.tgz",
+      "integrity": "sha512-d0BVjJVny6qpBgGJgWL0fbcoQHjtD3z3R8EK/KzTS3RO92JX5n3A536n5D/rh0gZFgcIwiUzBXegmyPOSQn9ng==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/node": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/node/-/node-10.62.0.tgz",
+      "integrity": "sha512-4hoU67bJY0o3irEDMZu2UIztAOsvEqFkLXA7EUKl1LXMA3Ba1Lb32OUVqlsTypiEInSDs/BtM+aAFKojZ3P3Fw==",
+      "license": "MIT",
+      "dependencies": {
+        "@opentelemetry/api": "^1.9.1",
+        "@opentelemetry/instrumentation": "^0.214.0",
+        "@opentelemetry/sdk-trace-base": "^2.6.1",
+        "@opentelemetry/semantic-conventions": "^1.40.0",
+        "@sentry/core": "10.62.0",
+        "@sentry/node-core": "10.62.0",
+        "@sentry/opentelemetry": "10.62.0",
+        "@sentry/server-utils": "10.62.0",
+        "import-in-the-middle": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/node-core": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/node-core/-/node-core-10.62.0.tgz",
+      "integrity": "sha512-V7rDgbxViiHU0OpcFEDp3l41IFvWTasKHfXw8SQ6yIgtZ8VpFqmz2TR5N7X85iIOmWIvK5HV0yp0eDdsly0+rA==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/conventions": "^0.12.0",
+        "@sentry/core": "10.62.0",
+        "@sentry/opentelemetry": "10.62.0",
+        "import-in-the-middle": "^3.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.9.0",
+        "@opentelemetry/core": "^1.30.1 || ^2.1.0",
+        "@opentelemetry/exporter-trace-otlp-http": ">=0.57.0 <1",
+        "@opentelemetry/instrumentation": ">=0.57.1 <1",
+        "@opentelemetry/sdk-trace-base": "^1.30.1 || ^2.1.0"
+      },
+      "peerDependenciesMeta": {
+        "@opentelemetry/api": {
+          "optional": true
+        },
+        "@opentelemetry/core": {
+          "optional": true
+        },
+        "@opentelemetry/exporter-trace-otlp-http": {
+          "optional": true
+        },
+        "@opentelemetry/instrumentation": {
+          "optional": true
+        },
+        "@opentelemetry/sdk-trace-base": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@sentry/nuxt": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/nuxt/-/nuxt-10.62.0.tgz",
+      "integrity": "sha512-YM9N4mH/uOJP/zr3QmQgCpQFaLzoDRh0/SoMMuNq/EEtzFZLQT6+qd5tYERMAutU4ySHinIaKYC2Gq/hEs5LtA==",
+      "license": "MIT",
+      "dependencies": {
+        "@nuxt/kit": "^3.13.2",
+        "@sentry/browser": "10.62.0",
+        "@sentry/cloudflare": "10.62.0",
+        "@sentry/core": "10.62.0",
+        "@sentry/node": "10.62.0",
+        "@sentry/node-core": "10.62.0",
+        "@sentry/rollup-plugin": "^5.3.0",
+        "@sentry/vite-plugin": "^5.3.0",
+        "@sentry/vue": "10.62.0",
+        "local-pkg": "^1.1.2"
+      },
+      "engines": {
+        "node": ">=18.19.1"
+      },
+      "peerDependencies": {
+        "nitro": "2.x || 3.x",
+        "nuxt": ">=3.7.0 || 4.x || 5.x"
+      },
+      "peerDependenciesMeta": {
+        "nitro": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@sentry/nuxt/node_modules/@nuxt/kit": {
+      "version": "3.21.8",
+      "resolved": "https://registry.npmjs.org/@nuxt/kit/-/kit-3.21.8.tgz",
+      "integrity": "sha512-kg63DUPY5AHPn+9XM7u8rYcdWHXjzwfUscgRDuiC5YUciQ+xdLRhdwXelYFxEAx2nxJHossliiQXbMm/Fleivw==",
+      "license": "MIT",
+      "dependencies": {
+        "c12": "^3.3.4",
+        "consola": "^3.4.2",
+        "defu": "^6.1.7",
+        "destr": "^2.0.5",
+        "errx": "^0.1.0",
+        "exsolve": "^1.0.8",
+        "ignore": "^7.0.5",
+        "jiti": "^2.7.0",
+        "klona": "^2.0.6",
+        "knitwork": "^1.3.0",
+        "mlly": "^1.8.2",
+        "ohash": "^2.0.11",
+        "pathe": "^2.0.3",
+        "pkg-types": "^2.3.1",
+        "rc9": "^3.0.1",
+        "scule": "^1.3.0",
+        "semver": "^7.8.0",
+        "tinyglobby": "^0.2.16",
+        "ufo": "^1.6.4",
+        "unctx": "^2.5.0",
+        "untyped": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=18.12.0"
+      }
+    },
+    "node_modules/@sentry/opentelemetry": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/opentelemetry/-/opentelemetry-10.62.0.tgz",
+      "integrity": "sha512-nFwBgtjfwgY8P5lAuQFWfAsQW1MXxuQ6kR/HtBs+A6julqwGGS2QnQ65OCWMzz6IqDEL/pRgT1405/gU+OXU3A==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/conventions": "^0.12.0",
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@opentelemetry/api": "^1.9.0",
+        "@opentelemetry/core": "^1.30.1 || ^2.1.0",
+        "@opentelemetry/sdk-trace-base": "^1.30.1 || ^2.1.0"
+      }
+    },
+    "node_modules/@sentry/replay": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/replay/-/replay-10.62.0.tgz",
+      "integrity": "sha512-rWp4hBhZOmdQhisxcKzAwTGiRk/LvWnNaElWe7nbRhjsM/usp2095yfjq4iJ47v9MtO7xxY6eUz++fLBycqXKg==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/browser-utils": "10.62.0",
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/replay-canvas": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/replay-canvas/-/replay-canvas-10.62.0.tgz",
+      "integrity": "sha512-CzPAxmpe5US/ABGA1TzpjFKOFZN5uqlzrRh/uM9/daVuzLVKIAQ0XRNxo/PPEXvlDm/PoMdI5L0qIODuIKnyyw==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/core": "10.62.0",
+        "@sentry/replay": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/rollup-plugin": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/@sentry/rollup-plugin/-/rollup-plugin-5.3.0.tgz",
+      "integrity": "sha512-hgPGPYdQJ/G1cGYOxAb7d4z3V+/k/E5/P/5TFPEEBLuIbFFk+JG0CISUDJdzXJjO382Lb99PBJuXGbueBmO79w==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/bundler-plugin-core": "5.3.0",
+        "magic-string": "~0.30.8"
+      },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "rollup": ">=3.2.0"
+      },
+      "peerDependenciesMeta": {
+        "rollup": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@sentry/server-utils": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/server-utils/-/server-utils-10.62.0.tgz",
+      "integrity": "sha512-S5szsj6kKBhxw97b2HA98fYp/PpWXvSizlisEzb2rnL4IH6RAJ8wP05/fnth8pSywTH+gtUu+i6Wn8e8rX5HvA==",
+      "license": "MIT",
+      "dependencies": {
+        "@apm-js-collab/code-transformer": "^0.15.0",
+        "@apm-js-collab/code-transformer-bundler-plugins": "^0.5.0",
+        "@apm-js-collab/tracing-hooks": "^0.10.0",
+        "@sentry/conventions": "^0.12.0",
+        "@sentry/core": "10.62.0",
+        "magic-string": "~0.30.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@sentry/vite-plugin": {
+      "version": "5.3.0",
+      "resolved": "https://registry.npmjs.org/@sentry/vite-plugin/-/vite-plugin-5.3.0.tgz",
+      "integrity": "sha512-qcoSzo4n2MulVQ70UUPLq6dTleb2a2HwL2wuwvAgWhPChrYTuk6A6mDg6aQb9fairPAwFPiU9PzOANpoDJcz1A==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/bundler-plugin-core": "5.3.0",
+        "@sentry/rollup-plugin": "5.3.0"
+      },
+      "engines": {
+        "node": ">= 18"
+      }
+    },
+    "node_modules/@sentry/vue": {
+      "version": "10.62.0",
+      "resolved": "https://registry.npmjs.org/@sentry/vue/-/vue-10.62.0.tgz",
+      "integrity": "sha512-aK3E302Zx/g1dqtUU30Q0jblvCW8MsVXuzwnxM4JSgO47o0jW74zaFh1K3Ym2uQWhLvP1rV2D49BYwCMUc4ovQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@sentry/browser": "10.62.0",
+        "@sentry/core": "10.62.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@tanstack/vue-router": "^1.64.0",
+        "pinia": "2.x || 3.x",
+        "vue": "2.x || 3.x"
+      },
+      "peerDependenciesMeta": {
+        "@tanstack/vue-router": {
+          "optional": true
+        },
+        "pinia": {
+          "optional": true
+        }
+      }
+    },
     "node_modules/@simple-git/args-pathspec": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/@simple-git/args-pathspec/-/args-pathspec-1.0.2.tgz",
@@ -6560,6 +7249,15 @@
         "url": "https://github.com/sponsors/sxzz"
       }
     },
+    "node_modules/astring": {
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/astring/-/astring-1.9.0.tgz",
+      "integrity": "sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==",
+      "license": "MIT",
+      "bin": {
+        "astring": "bin/astring"
+      }
+    },
     "node_modules/async": {
       "version": "3.2.6",
       "resolved": "https://registry.npmjs.org/async/-/async-3.2.6.tgz",
@@ -7152,6 +7850,12 @@
       "integrity": "sha512-+6vJA3L98yv+IdfKGZHBNiGW5KHn22e/JwID0Strsz8h4S/csAu/OuICwxrg44k5MRiZHWIo8XXuJgQTriRP4w==",
       "license": "MIT"
     },
+    "node_modules/cjs-module-lexer": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/cjs-module-lexer/-/cjs-module-lexer-2.2.0.tgz",
+      "integrity": "sha512-4bHTS2YuzUvtoLjdy+98ykbNB5jS0+07EvFNXerqZQJ89F7DI6ET7OQo/HJuW6K0aVsKA9hj9/RVb2kQVOrPDQ==",
+      "license": "MIT"
+    },
     "node_modules/clean-regexp": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/clean-regexp/-/clean-regexp-1.0.0.tgz",
@@ -8092,9 +8796,9 @@
       }
     },
     "node_modules/es-module-lexer": {
-      "version": "2.0.0",
+      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.0.0.tgz",
+      "resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.2.0.tgz",
-      "integrity": "sha512-5POEcUuZybH7IdmGsD8wlf0AI55wMecM9rVBTI/qEAy2c1kTOm3DjFYjrBdI2K3BaJjJYfYFeRtM0t9ssnRuxw==",
+      "integrity": "sha512-3lGxdTXCLfe1MYfTz1y2ksAAUM4NAOP6rPEjxGJVKO7TZ5+tvHCaQWGpC4Y3IXvW3ece0Cz1cIP4FWBxOnGCTQ==",
       "license": "MIT"
     },
     "node_modules/es-object-atoms": {
@@ -9609,6 +10313,21 @@
         "node": ">=4"
       }
     },
+    "node_modules/import-in-the-middle": {
+      "version": "3.2.0",
+      "resolved": "https://registry.npmjs.org/import-in-the-middle/-/import-in-the-middle-3.2.0.tgz",
+      "integrity": "sha512-vR2B6HKIhaBjcZr2bLpFiJ1VbzOlRQ7aby4/gw5WPIzToLjqpfWw3VJ4sk1uDchoOODEirvO2jyrSPtUSL5CrQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "acorn": "^8.15.0",
+        "acorn-import-attributes": "^1.9.5",
+        "cjs-module-lexer": "^2.2.0",
+        "module-details-from-path": "^1.0.4"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/impound": {
       "version": "1.1.5",
       "resolved": "https://registry.npmjs.org/impound/-/impound-1.1.5.tgz",
@@ -9998,9 +10717,9 @@
       }
     },
     "node_modules/jiti": {
-      "version": "2.6.1",
+      "version": "2.7.0",
-      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.6.1.tgz",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.7.0.tgz",
-      "integrity": "sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==",
+      "integrity": "sha512-AC/7JofJvZGrrneWNaEnJeOLUx+JlGt7tNa0wZiRPT4MY1wmfKjt2+6O2p2uz2+skll8OZZmJMNqeke7kKbNgQ==",
       "license": "MIT",
       "bin": {
         "jiti": "lib/jiti-cli.mjs"
@@ -10836,6 +11555,15 @@
         "node": ">= 8"
       }
     },
+    "node_modules/meriyah": {
+      "version": "6.1.4",
+      "resolved": "https://registry.npmjs.org/meriyah/-/meriyah-6.1.4.tgz",
+      "integrity": "sha512-Sz8FzjzI0kN13GK/6MVEsVzMZEPvOhnmmI1lU5+/1cGOiK3QUahntrNNtdVeihrO7t9JpoH75iMNXg6R6uWflQ==",
+      "license": "ISC",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/methods": {
       "version": "1.1.2",
       "resolved": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz",
@@ -10999,6 +11727,12 @@
       "integrity": "sha512-aF7yRQr/Q0O2/4pIXm6PZ5G+jAd7QS4Yu8m+WEeEHGnbo+7mE36CbLSDQiXYV8bVL3NfmdeqPJct0tUlnjVSnA==",
       "license": "MIT"
     },
+    "node_modules/module-details-from-path": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/module-details-from-path/-/module-details-from-path-1.0.4.tgz",
+      "integrity": "sha512-EGWKgxALGMgzvxYF1UyGTy0HXX/2vHLkw6+NvDKW2jypWbHpjQuj4UMcqQWXHERJhVGKikolT06G3bcKe4fi7w==",
+      "license": "MIT"
+    },
     "node_modules/mrmime": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/mrmime/-/mrmime-2.0.1.tgz",
@@ -13214,13 +13948,13 @@
       }
     },
     "node_modules/pkg-types": {
-      "version": "2.3.0",
+      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-2.3.0.tgz",
+      "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-2.3.1.tgz",
-      "integrity": "sha512-SIqCzDRg0s9npO5XQ3tNZioRY1uK06lA41ynBC1YmFTmnY6FjUjVt6s4LoADmwoig1qqD0oK8h1p/8mlMx8Oig==",
+      "integrity": "sha512-y+ichcgc2LrADuhLNAx8DFjVfgz91pRxfZdI3UDhxHvcVEZsenLO+7XaU5vOp0u/7V/wZ+plyuQxtrDlZJ+yeg==",
       "license": "MIT",
       "dependencies": {
-        "confbox": "^0.2.2",
+        "confbox": "^0.2.4",
-        "exsolve": "^1.0.7",
+        "exsolve": "^1.0.8",
         "pathe": "^2.0.3"
       }
     },
@@ -13949,6 +14683,15 @@
       "integrity": "sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==",
       "license": "MIT"
     },
+    "node_modules/progress": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/progress/-/progress-2.0.3.tgz",
+      "integrity": "sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
     "node_modules/prosemirror-changeset": {
       "version": "2.4.1",
       "resolved": "https://registry.npmjs.org/prosemirror-changeset/-/prosemirror-changeset-2.4.1.tgz",
@@ -14118,6 +14861,12 @@
       "dev": true,
       "license": "ISC"
     },
+    "node_modules/proxy-from-env": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-1.1.0.tgz",
+      "integrity": "sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==",
+      "license": "MIT"
+    },
     "node_modules/punycode": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
@@ -14515,6 +15264,19 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/require-in-the-middle": {
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/require-in-the-middle/-/require-in-the-middle-8.0.1.tgz",
+      "integrity": "sha512-QT7FVMXfWOYFbeRBF6nu+I6tr2Tf3u0q8RIEjNob/heKY/nh7drD/k7eeMFmSQgnTtCzLDcCu/XEnpW2wk4xCQ==",
+      "license": "MIT",
+      "dependencies": {
+        "debug": "^4.3.5",
+        "module-details-from-path": "^1.0.3"
+      },
+      "engines": {
+        "node": ">=9.3.0 || >=8.10.0 <9.0.0"
+      }
+    },
     "node_modules/reserved-identifiers": {
       "version": "1.2.0",
       "resolved": "https://registry.npmjs.org/reserved-identifiers/-/reserved-identifiers-1.2.0.tgz",
@@ -14838,10 +15600,16 @@
       "integrity": "sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==",
       "license": "MIT"
     },
+    "node_modules/semifies": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/semifies/-/semifies-1.0.0.tgz",
+      "integrity": "sha512-xXR3KGeoxTNWPD4aBvL5NUpMTT7WMANr3EWnaS190QVkY52lqqcVRD7Q05UVbBhiWDGWMlJEUam9m7uFFGVScw==",
+      "license": "Apache-2.0"
+    },
     "node_modules/semver": {
-      "version": "7.7.4",
+      "version": "7.8.5",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
-      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -15795,13 +16563,13 @@
       }
     },
     "node_modules/tinyglobby": {
-      "version": "0.2.15",
+      "version": "0.2.17",
-      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.15.tgz",
+      "resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
-      "integrity": "sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==",
+      "integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
       "license": "MIT",
       "dependencies": {
         "fdir": "^6.5.0",
-        "picomatch": "^4.0.3"
+        "picomatch": "^4.0.4"
       },
       "engines": {
         "node": ">=12.0.0"
@@ -16021,9 +16789,9 @@
       "license": "MIT"
     },
     "node_modules/ufo": {
-      "version": "1.6.3",
+      "version": "1.6.4",
-      "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.3.tgz",
+      "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.6.4.tgz",
-      "integrity": "sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==",
+      "integrity": "sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==",
       "license": "MIT"
     },
     "node_modules/ultrahtml": {

frontend/package.json

@@ -22,6 +22,7 @@
     "@nuxtjs/i18n": "^10.2.3",
     "@nuxtjs/tailwindcss": "^6.14.0",
     "@pinia/nuxt": "^0.11.3",
+    "@sentry/nuxt": "^10.62.0",
     "nuxt": "^4.3.1",
     "nuxt-toast": "^1.4.0",
     "pinia": "^3.0.4",

frontend/sentry.client.config.ts

@@ -0,0 +1,18 @@
+import * as Sentry from '@sentry/nuxt'
+
+// Init Sentry cote client (SPA). Le DSN provient du build prod (NUXT_PUBLIC_SENTRY_DSN).
+// Si le DSN est vide (dev), Sentry.init est un no-op : rien n'est envoye.
+const config = useRuntimeConfig()
+const dsn = config.public.sentry?.dsn
+
+if (dsn) {
+    Sentry.init({
+        dsn,
+        environment: config.public.sentry?.environment,
+        // Pas d'APM/tracing (hors perimetre) : on ne remonte que les erreurs.
+        tracesSampleRate: 0,
+        // Pas de session replay (volume).
+        replaysSessionSampleRate: 0,
+        replaysOnErrorSampleRate: 0,
+    })
+}

infra/prod/.env.prod.example

@@ -11,3 +11,7 @@ JWT_TOKEN_TTL=86400
 JWT_COOKIE_TTL=86400
 
 CORS_ALLOW_ORIGIN='^http://starseed\.malio-dev\.fr$'
+
+# Sentry / GlitchTip — error tracking backend (projet "starseed-api").
+# Runtime, prod only. Vide/absent => SDK inerte (rien envoye).
+# SENTRY_DSN=https://<cle>@<host-ou-IP>:<port>/<id-projet>

infra/prod/Dockerfile

@@ -30,21 +30,42 @@ COPY frontend/package.json frontend/package-lock.json ./
 RUN npm ci
 
 COPY frontend/ ./
+
+# Error tracking → GlitchTip (build-time). Vides par defaut => module Sentry inerte
+# et aucun upload de source maps. Fournis par la CI via --build-arg (secrets Gitea).
+# Passes en prefixe inline du RUN (pas en ENV) pour ne pas persister le token dans
+# une couche d'image.
+ARG NUXT_PUBLIC_SENTRY_DSN=""
+ARG SENTRY_URL=""
+ARG SENTRY_ORG=""
+ARG SENTRY_PROJECT=""
+ARG SENTRY_AUTH_TOKEN=""
+
 ENV CI=1 \
     NUXT_TELEMETRY_DISABLED=1 \
     NUXT_PUBLIC_API_BASE=/api \
     NUXT_PUBLIC_APP_BASE=/
-RUN npm run generate
+RUN NUXT_PUBLIC_SENTRY_DSN="$NUXT_PUBLIC_SENTRY_DSN" \
+    SENTRY_URL="$SENTRY_URL" \
+    SENTRY_ORG="$SENTRY_ORG" \
+    SENTRY_PROJECT="$SENTRY_PROJECT" \
+    SENTRY_AUTH_TOKEN="$SENTRY_AUTH_TOKEN" \
+    npm run generate
 
 # --- Stage 3: Production image ---
 FROM php:8.4-fpm AS production
 
 RUN apt-get update && apt-get install -y \
         libicu-dev libpq-dev libpng-dev libzip-dev libxml2-dev \
-        nginx supervisor \
+        nginx supervisor ca-certificates \
     && docker-php-ext-install -j$(nproc) intl pdo_pgsql zip gd opcache \
     && rm -rf /var/lib/apt/lists/*
 
+# CA racine interne MALIO (auto-signee) — permet au SDK Sentry/HttpClient de
+# joindre les services HTTPS internes (ex. GlitchTip sur logs.malio-dev.fr).
+COPY infra/prod/malio-dev-root-ca.crt /usr/local/share/ca-certificates/malio-dev-root-ca.crt
+RUN update-ca-certificates
+
 # PHP production config
 RUN mv "$PHP_INI_DIR/php.ini-production" "$PHP_INI_DIR/php.ini"
 

infra/prod/malio-dev-root-ca.crt

@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

src/Module/Catalog/Application/Service/StorageFieldNormalizer.php

@@ -1,35 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Catalog\Application\Service;
-
-/**
- * Normalisation serveur des champs texte d'un Storage, appliquee par le
- * StorageProcessor AVANT l'unicite metier et la persistance (RG-7.06). Jumeau du
- * ProductFieldNormalizer (M6), recentre sur l'unique champ texte du stockage.
- *
- * - numero : trim simple, SANS changement de casse (HP-M7-05 : pas d'UPPER par
- *   defaut, contrairement au code produit). Le numero est saisi tel quel et sert
- *   l'unicite metier (site, type, numero) parmi les actifs (RG-7.01).
- *
- * La methode est null-safe et trim l'entree ; une chaine vide apres trim devient
- * null (c'est l'Assert\NotBlank de l'entite qui rejette le vide, pas le normalizer).
- */
-final class StorageFieldNormalizer
-{
-    /**
-     * Numero de stockage trimme (RG-7.06), sans changement de casse (HP-M7-05).
-     * Conserve null tel quel ; une chaine vide apres trim devient null.
-     */
-    public function normalizeNumero(?string $value): ?string
-    {
-        if (null === $value) {
-            return null;
-        }
-
-        $value = trim($value);
-
-        return '' === $value ? null : $value;
-    }
-}

src/Module/Catalog/Domain/Repository/StorageRepositoryInterface.php

@@ -5,44 +5,10 @@ declare(strict_types=1);
 namespace App\Module\Catalog\Domain\Repository;
 
 use App\Module\Catalog\Domain\Entity\Storage;
-use Doctrine\ORM\QueryBuilder;
 
 interface StorageRepositoryInterface
 {
     public function findById(int $id): ?Storage;
 
     public function save(Storage $storage): void;
-
-    /**
-     * Vrai si un stockage actif (deleted_at IS NULL) porte deja le triplet
-     * (site, storageType, numero). `$excludeId` exclut un stockage precis du test
-     * (cas PATCH). Garantit l'unicite metier parmi les actifs (RG-7.01, index
-     * partiel uq_storage_site_type_numero_active). Un numero redevient disponible
-     * apres soft-delete (le test ignore les supprimes).
-     */
-    public function existsActiveBySiteTypeNumero(
-        int $siteId,
-        int $storageTypeId,
-        string $numero,
-        ?int $excludeId = null,
-    ): bool;
-
-    /**
-     * QueryBuilder de la liste stockages (consomme par le StorageProvider) : exclut
-     * par defaut les soft-deleted (RG-7.07), trie par site.code ASC, storageType.label
-     * ASC, numero ASC (defaut spec § 4.1) et applique les filtres optionnels :
-     *  - `$search`        : recherche partielle case-insensitive sur `numero`.
-     *  - `$siteIds`       : stockage rattache a AU MOINS UN des sites passes.
-     *  - `$storageTypeId` : restreint a un type de stockage precis (par id).
-     *  - `$state`         : appartenance a la colonne JSONB `states` (RECEPTION|PRODUCTION|TRIAGE).
-     *
-     * @param list<int> $siteIds
-     */
-    public function createListQueryBuilder(
-        bool $includeDeleted = false,
-        ?string $search = null,
-        array $siteIds = [],
-        ?int $storageTypeId = null,
-        ?string $state = null,
-    ): QueryBuilder;
 }

src/Module/Catalog/Infrastructure/ApiPlatform/State/Processor/StorageProcessor.php

@@ -1,112 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Catalog\Infrastructure\ApiPlatform\State\Processor;
-
-use ApiPlatform\Metadata\Operation;
-use ApiPlatform\State\ProcessorInterface;
-use App\Module\Catalog\Application\Service\StorageFieldNormalizer;
-use App\Module\Catalog\Domain\Entity\Storage;
-use App\Module\Catalog\Domain\Repository\StorageRepositoryInterface;
-use Doctrine\DBAL\Exception\UniqueConstraintViolationException;
-use Symfony\Component\DependencyInjection\Attribute\Autowire;
-use Symfony\Component\HttpKernel\Exception\ConflictHttpException;
-use Throwable;
-
-use function sprintf;
-
-/**
- * Processor d'ecriture du stockage (M7, POST / PATCH). Cf. spec-back M7 § 4.3 /
- * § 4.4 + RG-7.01 / RG-7.06. Jumeau du ProductProcessor (normalisation serveur +
- * 409 doublon).
- *
- * Sequence (POST / PATCH) :
- *  1. Normalisation serveur (RG-7.06) via StorageFieldNormalizer : numero trim
- *     (pas d'UPPER — HP-M7-05). Jouee AVANT l'unicite et la persistance ; la
- *     validation (NotNull site/type, NotBlank/Length numero, Count/Choice states
- *     RG-7.04) a deja joue cote API Platform sur la saisie brute.
- *  2. RG-7.01 : unicite metier du triplet (site, storageType, numero) parmi les
- *     actifs. Pre-check deterministe (excluant le stockage courant en PATCH) -> 409 ;
- *     l'index partiel uq_storage_site_type_numero_active reste le filet anti-race
- *     au flush.
- *  3. Persistance via le persist_processor Doctrine ORM.
- *
- * RG-7.03 (« le type doit etre disponible sur le site choisi ») n'est PAS portee :
- * le concept type<->site a ete retire du modele en M6 (StorageType rendu plat,
- * jointure storage_type_site droppee — migration Version20260626100000). C'est
- * desormais l'entite Storage (1 site + 1 type) qui materialise cette disponibilite ;
- * il n'existe plus de referentiel a interroger. A reclarifier cote spec (signale).
- *
- * Mode strict PATCH (RETEX M1) : la security d'operation exige `catalog.storages.manage`
- * pour TOUS les champs ecrivables (un seul niveau de permission au M7 — admin-only).
- * Aucun champ « hors-permission » a re-gater finement ici : le 403 global est porte
- * par la security d'operation.
- *
- * @implements ProcessorInterface<Storage, Storage>
- */
-final class StorageProcessor implements ProcessorInterface
-{
-    public function __construct(
-        #[Autowire(service: 'api_platform.doctrine.orm.state.persist_processor')]
-        private readonly ProcessorInterface $persistProcessor,
-        private readonly StorageFieldNormalizer $normalizer,
-        #[Autowire(service: 'App\Module\Catalog\Infrastructure\Doctrine\DoctrineStorageRepository')]
-        private readonly StorageRepositoryInterface $repository,
-    ) {}
-
-    public function process(mixed $data, Operation $operation, array $uriVariables = [], array $context = []): mixed
-    {
-        if (!$data instanceof Storage) {
-            return $this->persistProcessor->process($data, $operation, $uriVariables, $context);
-        }
-
-        // 1. RG-7.06 : normalisation serveur (numero trim, pas d'UPPER).
-        $this->normalize($data);
-
-        // 2. RG-7.01 : unicite metier (site, storageType, numero) parmi les actifs
-        // (exclut le stockage courant en PATCH). Pre-check explicite -> 409
-        // deterministe. Le NotNull site/type + NotBlank numero ont deja joue.
-        $siteId = $data->getSite()?->getId();
-        $typeId = $data->getStorageType()?->getId();
-        $numero = (string) $data->getNumero();
-        if (null !== $siteId && null !== $typeId && '' !== $numero
-            && $this->repository->existsActiveBySiteTypeNumero($siteId, $typeId, $numero, $data->getId())) {
-            throw $this->duplicateConflict($numero);
-        }
-
-        // 3. Persistance, avec filet anti-race sur l'index partiel.
-        try {
-            return $this->persistProcessor->process($data, $operation, $uriVariables, $context);
-        } catch (UniqueConstraintViolationException $e) {
-            // Insertion concurrente du meme triplet entre le pre-check et le flush
-            // (collision sur uq_storage_site_type_numero_active).
-            throw $this->duplicateConflict($numero, $e);
-        }
-    }
-
-    /**
-     * Normalisation serveur du stockage (RG-7.06). Le setter n'est touche que si une
-     * valeur est presente, pour ne jamais ecraser l'existant lors d'un PATCH partiel.
-     * Le cast (string) est sur : NotBlank a deja rejete le vide en amont.
-     */
-    private function normalize(Storage $data): void
-    {
-        if (null !== $data->getNumero()) {
-            $data->setNumero((string) $this->normalizer->normalizeNumero($data->getNumero()));
-        }
-    }
-
-    /**
-     * RG-7.01 : 409 sur doublon (site, type, numero). Le front mappe ce conflit sur
-     * le champ `numero` (setError('numero', ...) + toast — convention useFormErrors
-     * ERP-101) : le propertyPath exploitable est `numero`.
-     */
-    private function duplicateConflict(string $numero, ?Throwable $previous = null): ConflictHttpException
-    {
-        return new ConflictHttpException(
-            sprintf('Un stockage portant le numéro « %s » existe déjà pour ce site et ce type de stockage.', $numero),
-            $previous,
-        );
-    }
-}

src/Module/Catalog/Infrastructure/ApiPlatform/State/Provider/StorageProvider.php

@@ -1,172 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Module\Catalog\Infrastructure\ApiPlatform\State\Provider;
-
-use ApiPlatform\Doctrine\Orm\Paginator;
-use ApiPlatform\Metadata\CollectionOperationInterface;
-use ApiPlatform\Metadata\Operation;
-use ApiPlatform\State\Pagination\Pagination;
-use ApiPlatform\State\ProviderInterface;
-use App\Module\Catalog\Domain\Entity\Storage;
-use App\Module\Catalog\Domain\Repository\StorageRepositoryInterface;
-use Doctrine\ORM\Tools\Pagination\Paginator as DoctrinePaginator;
-use Symfony\Component\DependencyInjection\Attribute\Autowire;
-
-use function in_array;
-use function is_int;
-use function is_string;
-
-/**
- * Provider Storage (lecture, ERP-213) :
- *  - LISTE : exclut par defaut les stockages soft-deleted (RG-7.07), trie par
- *    site.code ASC, storageType.label ASC, numero ASC (defaut spec § 4.1), applique
- *    les filtres (?search sur numero, ?siteId[], ?storageTypeId, ?state) et renvoie
- *    une collection PAGINEE Hydra (regle ABSOLUE n°13 : jamais d'array brut sur une
- *    operation de collection — on enveloppe le QueryBuilder dans le Paginator ORM).
- *    Echappatoire ?pagination=false respectee (alimentation d'un select).
- *  - ITEM : recharge le stockage puis renvoie null (404) s'il est soft-deleted — le
- *    soft-delete n'est jamais expose (§ 2.8), aucun flag includeDeleted.
- *
- * @implements ProviderInterface<Storage>
- */
-final class StorageProvider implements ProviderInterface
-{
-    /** Etats valides du filtre ?state= (enum borne, RG-7.04). */
-    private const array VALID_STATES = [
-        Storage::STATE_RECEPTION,
-        Storage::STATE_PRODUCTION,
-        Storage::STATE_TRIAGE,
-    ];
-
-    public function __construct(
-        #[Autowire(service: 'App\Module\Catalog\Infrastructure\Doctrine\DoctrineStorageRepository')]
-        private readonly StorageRepositoryInterface $repository,
-        private readonly Pagination $pagination,
-    ) {}
-
-    public function provide(Operation $operation, array $uriVariables = [], array $context = []): iterable|Paginator|Storage|null
-    {
-        if ($operation instanceof CollectionOperationInterface) {
-            // includeDeleted toujours false : le soft-delete n'est pas expose (§ 2.8).
-            $qb = $this->repository->createListQueryBuilder(
-                false,
-                $this->readSearch($context),
-                $this->readSiteIds($context),
-                $this->readStorageTypeId($context),
-                $this->readState($context),
-            );
-
-            // Echappatoire ?pagination=false : collection complete sans Paginator.
-            if (!$this->pagination->isEnabled($operation, $context)) {
-                return $qb->getQuery()->getResult();
-            }
-
-            // Branche paginee standard : offset/limit via Pagination, enveloppe dans le
-            // Paginator ORM. Les jointures site/storageType sont to-ONE (ManyToOne) :
-            // pas de duplication de lignes, le comptage reste exact.
-            $limit  = $this->pagination->getLimit($operation, $context);
-            $page   = max(1, $this->pagination->getPage($context));
-            $offset = ($page - 1) * $limit;
-
-            $qb->setFirstResult($offset)->setMaxResults($limit);
-
-            return new Paginator(new DoctrinePaginator($qb->getQuery()));
-        }
-
-        // Get unitaire : recharger l'entite, puis appliquer le filtre soft-delete.
-        $id = $uriVariables['id'] ?? null;
-        if (!is_int($id) && !(is_string($id) && ctype_digit($id))) {
-            return null;
-        }
-
-        $storage = $this->repository->findById((int) $id);
-        if (null === $storage) {
-            return null;
-        }
-
-        // § 2.8 : un stockage soft-deleted n'est jamais expose (404).
-        if (null !== $storage->getDeletedAt()) {
-            return null;
-        }
-
-        return $storage;
-    }
-
-    /**
-     * Lit le filtre `?search=` (recherche partielle sur numero). Renvoie la valeur
-     * trimmee ou null si absente / vide.
-     */
-    private function readSearch(array $context): ?string
-    {
-        $raw = $context['filters']['search'] ?? null;
-
-        if (!is_string($raw)) {
-            return null;
-        }
-
-        $raw = trim($raw);
-
-        return '' === $raw ? null : $raw;
-    }
-
-    /**
-     * Lit le filtre `?siteId[]=` : ids des sites coches (OR). Tolere une valeur
-     * scalaire unique (`?siteId=1`) ou un tableau. Ignore les entrees non numeriques.
-     *
-     * @return list<int>
-     */
-    private function readSiteIds(array $context): array
-    {
-        $raw = $context['filters']['siteId'] ?? null;
-
-        if (null === $raw) {
-            return [];
-        }
-
-        $values = is_array($raw) ? $raw : [$raw];
-
-        $ids = [];
-        foreach ($values as $value) {
-            if (is_int($value) || (is_string($value) && ctype_digit($value))) {
-                $ids[] = (int) $value;
-            }
-        }
-
-        return array_values(array_unique($ids));
-    }
-
-    /**
-     * Lit le filtre `?storageTypeId=` (drawer « Filtrer »). Renvoie l'id entier ou
-     * null si absent / non numerique.
-     */
-    private function readStorageTypeId(array $context): ?int
-    {
-        $raw = $context['filters']['storageTypeId'] ?? null;
-
-        if (is_int($raw)) {
-            return $raw;
-        }
-
-        return is_string($raw) && ctype_digit($raw) ? (int) $raw : null;
-    }
-
-    /**
-     * Lit le filtre `?state=` (RECEPTION / PRODUCTION / TRIAGE). Normalise en
-     * majuscules et n'accepte qu'une valeur de l'enum borne ; toute autre valeur est
-     * ignoree (null).
-     */
-    private function readState(array $context): ?string
-    {
-        $raw = $context['filters']['state'] ?? null;
-
-        if (!is_string($raw) || '' === trim($raw)) {
-            return null;
-        }
-
-        $state = mb_strtoupper(trim($raw), 'UTF-8');
-
-        return in_array($state, self::VALID_STATES, true) ? $state : null;
-    }
-}

src/Module/Catalog/Infrastructure/Doctrine/DoctrineStorageRepository.php

@@ -7,7 +7,6 @@ namespace App\Module\Catalog\Infrastructure\Doctrine;
 use App\Module\Catalog\Domain\Entity\Storage;
 use App\Module\Catalog\Domain\Repository\StorageRepositoryInterface;
 use Doctrine\Bundle\DoctrineBundle\Repository\ServiceEntityRepository;
-use Doctrine\ORM\QueryBuilder;
 use Doctrine\Persistence\ManagerRegistry;
 
 /**
@@ -30,110 +29,4 @@ class DoctrineStorageRepository extends ServiceEntityRepository implements Stora
         $this->getEntityManager()->persist($storage);
         $this->getEntityManager()->flush();
     }
-
-    public function existsActiveBySiteTypeNumero(
-        int $siteId,
-        int $storageTypeId,
-        string $numero,
-        ?int $excludeId = null,
-    ): bool {
-        $qb = $this->createQueryBuilder('s')
-            ->select('1')
-            ->andWhere('s.site = :siteId')
-            ->andWhere('s.storageType = :storageTypeId')
-            ->andWhere('s.numero = :numero')
-            ->andWhere('s.deletedAt IS NULL')
-            ->setParameter('siteId', $siteId)
-            ->setParameter('storageTypeId', $storageTypeId)
-            ->setParameter('numero', $numero)
-            ->setMaxResults(1)
-        ;
-
-        if (null !== $excludeId) {
-            $qb->andWhere('s.id != :excludeId')->setParameter('excludeId', $excludeId);
-        }
-
-        return [] !== $qb->getQuery()->getResult();
-    }
-
-    public function createListQueryBuilder(
-        bool $includeDeleted = false,
-        ?string $search = null,
-        array $siteIds = [],
-        ?int $storageTypeId = null,
-        ?string $state = null,
-    ): QueryBuilder {
-        // Eager-load des relations embarquees en liste (storage:read) pour eviter un
-        // N+1 par stockage : site et storageType sont des ManyToOne (to-ONE, sures —
-        // pas de duplication de lignes, contrairement aux ManyToMany du Product). Les
-        // jointures servent aussi le tri (site.code, storageType.label).
-        $qb = $this->createQueryBuilder('s')
-            ->leftJoin('s.site', 'site')->addSelect('site')
-            ->leftJoin('s.storageType', 'st')->addSelect('st')
-            ->orderBy('site.code', 'ASC')
-            ->addOrderBy('st.label', 'ASC')
-            ->addOrderBy('s.numero', 'ASC')
-        ;
-
-        // RG-7.07 : la liste exclut par defaut les stockages soft-deleted.
-        if (!$includeDeleted) {
-            $qb->andWhere('s.deletedAt IS NULL');
-        }
-
-        // ?search= : recherche partielle case-insensitive sur numero. Les
-        // metacaracteres LIKE (%, _, \) sont echappes pour rester litteraux.
-        if (null !== $search && '' !== trim($search)) {
-            $escaped = str_replace(['\\', '%', '_'], ['\\\\', '\%', '\_'], trim($search));
-            $pattern = '%'.mb_strtolower($escaped, 'UTF-8').'%';
-            $qb->andWhere('LOWER(s.numero) LIKE :search')->setParameter('search', $pattern);
-        }
-
-        // ?siteId[]= : stockage rattache a AU MOINS UN des sites passes (OR). site est
-        // un ManyToOne (to-one) -> filtre direct sur la jointure, sans sous-requete
-        // EXISTS ni risque de masquer une collection (≠ Product.sites M2M).
-        if ([] !== $siteIds) {
-            $qb->andWhere('site.id IN (:siteIds)')->setParameter('siteIds', $siteIds);
-        }
-
-        // ?storageTypeId= : filtre par type de stockage precis (id).
-        if (null !== $storageTypeId) {
-            $qb->andWhere('st.id = :storageTypeId')->setParameter('storageTypeId', $storageTypeId);
-        }
-
-        // ?state= : appartenance a la colonne JSONB `states`. DQL ne sait pas exprimer
-        // la containment jsonb -> on resout les ids matchant en SQL natif (operateur
-        // @>), puis on contraint le QueryBuilder. Ids vides -> condition toujours
-        // fausse (aucun stockage), sans casser le reste de la requete.
-        if (null !== $state) {
-            $stateIds = $this->matchingStateIds($state);
-            if ([] === $stateIds) {
-                $qb->andWhere('1 = 0');
-            } else {
-                $qb->andWhere('s.id IN (:stateIds)')->setParameter('stateIds', $stateIds);
-            }
-        }
-
-        return $qb;
-    }
-
-    /**
-     * Ids des stockages dont la colonne JSONB `states` contient l'etat donne, via
-     * l'operateur de containment Postgres `@>`. L'etat est borne a l'enum
-     * {RECEPTION, PRODUCTION, TRIAGE} en amont (StorageProvider) — pas de saisie
-     * libre ici.
-     *
-     * @return list<int>
-     */
-    private function matchingStateIds(string $state): array
-    {
-        $rows = $this->getEntityManager()->getConnection()
-            ->executeQuery(
-                'SELECT id FROM storage WHERE states @> CAST(:state AS JSONB)',
-                ['state' => (string) json_encode([$state])],
-            )
-            ->fetchFirstColumn()
-        ;
-
-        return array_map(static fn (mixed $id): int => (int) $id, $rows);
-    }
 }

symfony.lock

@@ -124,6 +124,15 @@
             "bin/phpunit"
         ]
     },
+    "sentry/sentry-symfony": {
+        "version": "5.10",
+        "recipe": {
+            "repo": "github.com/symfony/recipes-contrib",
+            "branch": "main",
+            "version": "5.0",
+            "ref": "aac2bc5220e9ab5b9e3838a7a4da90e7f74e6148"
+        }
+    },
     "symfony/console": {
         "version": "8.0",
         "recipe": {

tests/Module/Catalog/Api/AbstractStorageApiTestCase.php

@@ -1,202 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Tests\Module\Catalog\Api;
-
-use ApiPlatform\Symfony\Bundle\Test\Client;
-use App\Module\Catalog\Domain\Entity\Storage;
-use App\Module\Catalog\Domain\Entity\StorageType;
-use App\Module\Sites\Domain\Entity\Site;
-use DateTimeImmutable;
-use Symfony\Contracts\HttpClient\ResponseInterface;
-
-/**
- * Classe de base des tests fonctionnels de l'entite Storage (M7, module Catalog).
- *
- * Etend la base Catalog (helpers d'auth + personas metier) et ajoute ce qu'il faut
- * pour exercer l'API stockage de bout en bout :
- *  - `seedStorageType()` : type de stockage de test (code prefixe pour cleanup).
- *  - `firstSite()` / `siteByCode()` : sites fixtures (86 / 17 / 82).
- *  - `authView()` : user non-admin portant la permission `catalog.storages.view`.
- *  - `validStoragePayload()` : payload POST de reference (IRIs site / storageType),
- *    surchargeable par cle.
- *  - `seedStorageEntity()` : seede un stockage via l'EM (id existant, soft-deleted).
- *  - `iri()` / `memberById()` / `violationPaths()` : utilitaires Hydra.
- *
- * Cleanup : on purge les stockages (toute la table — aucune fixture stockage en env
- * test) AVANT le parent, car storage reference site / storage_type en FK ON DELETE
- * RESTRICT. Les types de stockage de test (prefixe code) sont purges dans la foulee.
- *
- * @internal
- */
-abstract class AbstractStorageApiTestCase extends AbstractCatalogApiTestCase
-{
-    protected const string LD    = 'application/ld+json';
-    protected const string MERGE = 'application/merge-patch+json';
-
-    /** Prefixe des codes de StorageType seedes par ces tests (purge ciblee). */
-    protected const string TEST_STORAGE_TYPE_PREFIX = 'TESTSTO';
-
-    protected function tearDown(): void
-    {
-        $em = $this->getEm();
-
-        // Stockages d'abord : ils referencent site / storage_type en FK RESTRICT.
-        $em->createQuery('DELETE FROM '.Storage::class)->execute();
-
-        // Types de stockage de test (prefixe code).
-        $em->createQuery('DELETE FROM '.StorageType::class.' s WHERE s.code LIKE :prefix')
-            ->setParameter('prefix', self::TEST_STORAGE_TYPE_PREFIX.'%')
-            ->execute()
-        ;
-
-        parent::tearDown();
-    }
-
-    /**
-     * Cree un type de stockage de test (code prefixe TESTSTO pour le cleanup).
-     */
-    protected function seedStorageType(string $label = 'Cellule test'): StorageType
-    {
-        $em = $this->getEm();
-
-        $storageType = new StorageType();
-        $storageType->setCode($this->uniqueCode(self::TEST_STORAGE_TYPE_PREFIX));
-        $storageType->setLabel($label);
-
-        $em->persist($storageType);
-        $em->flush();
-
-        return $storageType;
-    }
-
-    protected function siteByCode(string $code): Site
-    {
-        $site = $this->getEm()->getRepository(Site::class)->findOneBy(['code' => $code]);
-        self::assertInstanceOf(Site::class, $site, sprintf('Le site de code "%s" doit etre seede.', $code));
-
-        return $site;
-    }
-
-    protected function firstSite(): Site
-    {
-        $site = $this->getEm()->getRepository(Site::class)->findOneBy([]);
-        self::assertInstanceOf(Site::class, $site, 'Un site fixture est requis (SitesFixtures).');
-
-        return $site;
-    }
-
-    /**
-     * Client non-admin portant seulement `catalog.storages.view`.
-     */
-    protected function authView(): Client
-    {
-        $creds = $this->createUserWithPermission('catalog.storages.view');
-
-        return $this->authenticatedClient($creds['username'], $creds['password']);
-    }
-
-    /**
-     * Payload POST de reference : un stockage valide (1 site, 1 type, 1 numero,
-     * 1 etat). Surchargeable par cle via $overrides (ex: ['numero' => 'A1']).
-     *
-     * @param array<string, mixed> $overrides
-     *
-     * @return array<string, mixed>
-     */
-    protected function validStoragePayload(array $overrides = []): array
-    {
-        $site        = $this->firstSite();
-        $storageType = $this->seedStorageType();
-
-        $base = [
-            'site'        => $this->iri('sites', (int) $site->getId()),
-            'storageType' => $this->iri('storage_types', (int) $storageType->getId()),
-            'numero'      => $this->uniqueCode('NUM'),
-            'states'      => [Storage::STATE_RECEPTION],
-        ];
-
-        return array_replace($base, $overrides);
-    }
-
-    /**
-     * Seede un stockage directement via l'EM (bypass Processor/Validator). Utile pour
-     * disposer d'un id existant (RBAC item, PATCH) ou d'un stockage soft-deleted
-     * (reutilisation du triplet — RG-7.01). Le site / le type manquants sont crees
-     * a la volee.
-     *
-     * @param list<string> $states
-     */
-    protected function seedStorageEntity(
-        ?string $numero = null,
-        array $states = [Storage::STATE_RECEPTION],
-        ?DateTimeImmutable $deletedAt = null,
-        ?Site $site = null,
-        ?StorageType $storageType = null,
-    ): Storage {
-        $em   = $this->getEm();
-        $site ??= $this->firstSite();
-
-        $storage = new Storage();
-        $storage->setSite($em->getReference(Site::class, (int) $site->getId()));
-        $storage->setStorageType($storageType ?? $this->seedStorageType('Seed'));
-        $storage->setNumero($numero ?? $this->uniqueCode('NUM'));
-        $storage->setStates($states);
-        $storage->setDeletedAt($deletedAt);
-
-        $em->persist($storage);
-        $em->flush();
-
-        return $storage;
-    }
-
-    /**
-     * Construit un IRI API Platform (`/api/{resource}/{id}`).
-     */
-    protected function iri(string $resource, int $id): string
-    {
-        return sprintf('/api/%s/%d', $resource, $id);
-    }
-
-    /**
-     * Identifiant unique de test (prefixe + nonce), deja en MAJUSCULE.
-     */
-    protected function uniqueCode(string $prefix): string
-    {
-        return $prefix.'_'.strtoupper(substr(bin2hex(random_bytes(5)), 0, 10));
-    }
-
-    /**
-     * Extrait les `propertyPath` des violations d'une reponse 422.
-     *
-     * @return list<string>
-     */
-    protected function violationPaths(ResponseInterface $response): array
-    {
-        $body = $response->toArray(false);
-
-        return array_values(array_map(
-            static fn (array $violation): string => (string) ($violation['propertyPath'] ?? ''),
-            $body['violations'] ?? [],
-        ));
-    }
-
-    /**
-     * Retrouve un membre d'une collection Hydra par son id (ou null).
-     *
-     * @param array<string, mixed> $list
-     *
-     * @return null|array<string, mixed>
-     */
-    protected function memberById(array $list, int $id): ?array
-    {
-        foreach ($list['member'] ?? [] as $member) {
-            if (($member['id'] ?? null) === $id) {
-                return $member;
-            }
-        }
-
-        return null;
-    }
-}

tests/Module/Catalog/Api/StorageApiTest.php

@@ -1,204 +0,0 @@
-<?php
-
-declare(strict_types=1);
-
-namespace App\Tests\Module\Catalog\Api;
-
-use App\Module\Catalog\Domain\Entity\Storage;
-use DateTimeImmutable;
-
-/**
- * Tests fonctionnels de l'API stockage (M7, spec-back § 4) — StorageProvider +
- * StorageProcessor (ERP-213).
- *
- * Couvre : collection paginee Hydra + contrat de serialisation (site / storageType
- * embarques, displayName), creation, normalisation serveur du numero (trim, RG-7.06),
- * unicite metier (site, type, numero) parmi les actifs -> 409 (RG-7.01), reutilisation
- * du triplet apres soft-delete, soft-delete jamais expose (§ 2.8), et la matrice RBAC
- * admin-only (view lit mais ne gere pas ; personas metier 403 partout).
- *
- * RG-7.03 (« type disponible sur le site choisi ») n'est PAS testee : le concept
- * type<->site a ete retire du modele en M6 (StorageType plat), c'est Storage qui le
- * porte desormais — aucun referentiel a interroger (cf. StorageProcessor).
- *
- * @internal
- */
-final class StorageApiTest extends AbstractStorageApiTestCase
-{
-    /** Personas metier sans permission stockage (admin-only — ERP-210). */
-    private const array PERSONAS = ['Bureau', 'Compta', 'Commerciale', 'Usine'];
-
-    public function testCollectionIsPaginatedHydraWithEmbeddedRelations(): void
-    {
-        $site = $this->firstSite();
-        $type = $this->seedStorageType('Cellule');
-        $seed = $this->seedStorageEntity('C3', site: $site, storageType: $type);
-
-        $client   = $this->createAdminClient();
-        $response = $client->request('GET', '/api/storages', ['headers' => ['Accept' => self::LD]]);
-        self::assertResponseStatusCodeSame(200);
-
-        $body = $response->toArray();
-        // Enveloppe Hydra (regle ABSOLUE n°13 : collection paginee, jamais d'array brut).
-        self::assertArrayHasKey('totalItems', $body);
-        self::assertArrayHasKey('member', $body);
-
-        $member = $this->memberById($body, (int) $seed->getId());
-        self::assertIsArray($member, 'Le stockage seede doit figurer dans la collection.');
-
-        // Contrat de serialisation (§ 4.0.bis) : site / storageType en OBJETS embarques
-        // (pas un IRI nu), displayName present (RG-7.05).
-        self::assertIsArray($member['site'], 'site doit etre un objet embarque.');
-        self::assertSame($site->getCode(), $member['site']['code'] ?? null);
-        self::assertIsArray($member['storageType'], 'storageType doit etre un objet embarque.');
-        self::assertSame('Cellule', $member['storageType']['label'] ?? null);
-        self::assertSame('Cellule C3', $member['displayName'] ?? null);
-    }
-
-    public function testAdminCanCreateStorage(): void
-    {
-        $client = $this->createAdminClient();
-
-        $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => $this->validStoragePayload(),
-        ]);
-        self::assertResponseStatusCodeSame(201);
-    }
-
-    public function testNumeroIsTrimmedServerSide(): void
-    {
-        $client   = $this->createAdminClient();
-        $response = $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => $this->validStoragePayload(['numero' => '  Z9  ']),
-        ]);
-        self::assertResponseStatusCodeSame(201);
-
-        // RG-7.06 : trim serveur, sans changement de casse (HP-M7-05).
-        self::assertSame('Z9', $response->toArray()['numero'] ?? null);
-    }
-
-    public function testDuplicateTripletReturns409(): void
-    {
-        $site = $this->firstSite();
-        $type = $this->seedStorageType();
-        $this->seedStorageEntity('A1', site: $site, storageType: $type);
-
-        $client = $this->createAdminClient();
-        $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => [
-                'site'        => $this->iri('sites', (int) $site->getId()),
-                'storageType' => $this->iri('storage_types', (int) $type->getId()),
-                'numero'      => 'A1',
-                'states'      => [Storage::STATE_RECEPTION],
-            ],
-        ]);
-        // RG-7.01 : meme (site, type, numero) parmi les actifs -> 409.
-        self::assertResponseStatusCodeSame(409);
-    }
-
-    public function testSameNumeroDifferentTypeIsAllowed(): void
-    {
-        $site  = $this->firstSite();
-        $typeA = $this->seedStorageType();
-        $typeB = $this->seedStorageType();
-        $this->seedStorageEntity('A1', site: $site, storageType: $typeA);
-
-        $client = $this->createAdminClient();
-        $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => [
-                'site'        => $this->iri('sites', (int) $site->getId()),
-                'storageType' => $this->iri('storage_types', (int) $typeB->getId()),
-                'numero'      => 'A1',
-                'states'      => [Storage::STATE_RECEPTION],
-            ],
-        ]);
-        // Unicite portee par le TRIPLET : un meme numero sur un autre type passe.
-        self::assertResponseStatusCodeSame(201);
-    }
-
-    public function testSoftDeletedTripletCanBeReused(): void
-    {
-        $site = $this->firstSite();
-        $type = $this->seedStorageType();
-        $this->seedStorageEntity('B2', deletedAt: new DateTimeImmutable(), site: $site, storageType: $type);
-
-        $client = $this->createAdminClient();
-        $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => [
-                'site'        => $this->iri('sites', (int) $site->getId()),
-                'storageType' => $this->iri('storage_types', (int) $type->getId()),
-                'numero'      => 'B2',
-                'states'      => [Storage::STATE_RECEPTION],
-            ],
-        ]);
-        // RG-7.01 : l'unicite ne porte que sur les ACTIFS -> reutilisation OK.
-        self::assertResponseStatusCodeSame(201);
-    }
-
-    public function testSoftDeletedIsNotExposed(): void
-    {
-        $deleted = $this->seedStorageEntity('SD', deletedAt: new DateTimeImmutable());
-
-        $client = $this->createAdminClient();
-
-        // § 2.8 : item soft-deleted -> 404.
-        $client->request('GET', '/api/storages/'.$deleted->getId(), ['headers' => ['Accept' => self::LD]]);
-        self::assertResponseStatusCodeSame(404);
-
-        // … et absent de la collection (RG-7.07).
-        $response = $client->request('GET', '/api/storages', ['headers' => ['Accept' => self::LD]]);
-        self::assertNull($this->memberById($response->toArray(), (int) $deleted->getId()));
-    }
-
-    public function testViewPermissionReadsButCannotManage(): void
-    {
-        $storage = $this->seedStorageEntity();
-        $client  = $this->authView();
-
-        $client->request('GET', '/api/storages', ['headers' => ['Accept' => self::LD]]);
-        self::assertResponseStatusCodeSame(200);
-
-        $client->request('GET', '/api/storages/'.$storage->getId(), ['headers' => ['Accept' => self::LD]]);
-        self::assertResponseStatusCodeSame(200);
-
-        // view sans manage : creation refusee au niveau securite (403).
-        $client->request('POST', '/api/storages', [
-            'headers' => ['Content-Type' => self::LD],
-            'json'    => $this->validStoragePayload(),
-        ]);
-        self::assertResponseStatusCodeSame(403);
-    }
-
-    public function testBusinessPersonasAreForbiddenEverywhere(): void
-    {
-        $storage = $this->seedStorageEntity();
-        $id      = (int) $storage->getId();
-
-        foreach (self::PERSONAS as $persona) {
-            $client = $this->createPersonaClient($persona);
-
-            $client->request('GET', '/api/storages', ['headers' => ['Accept' => self::LD]]);
-            self::assertResponseStatusCodeSame(403, $persona.' ne doit pas lister les stockages.');
-
-            $client->request('GET', '/api/storages/'.$id, ['headers' => ['Accept' => self::LD]]);
-            self::assertResponseStatusCodeSame(403, $persona.' ne doit pas consulter un stockage.');
-
-            $client->request('POST', '/api/storages', [
-                'headers' => ['Content-Type' => self::LD],
-                'json'    => $this->validStoragePayload(),
-            ]);
-            self::assertResponseStatusCodeSame(403, $persona.' ne doit pas creer de stockage.');
-
-            $client->request('PATCH', '/api/storages/'.$id, [
-                'headers' => ['Content-Type' => self::MERGE],
-                'json'    => ['numero' => 'X'],
-            ]);
-            self::assertResponseStatusCodeSame(403, $persona.' ne doit pas modifier un stockage.');
-        }
-    }
-}