nodebb-plugin-equipment-calendar 9.0.2 → 9.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodebb-plugin-equipment-calendar",
-  "version": "9.0.2",
+  "version": "9.0.4",
   "description": "Equipment reservation calendar for NodeBB (FullCalendar, approvals, HelloAsso payments)",
   "main": "library.js",
   "scripts": {

package/plugin.json

@@ -25,6 +25,6 @@
   "scripts": [
     "public/js/client.js"
   ],
-  "version": "3.0.0-stable4q-acp-save-calendar-fixes",
+  "version": "3.0.0-stable4s-server-save",
   "minver": "4.7.1"
 }

package/public/js/client.js

@@ -1,4 +1,4 @@
-require(['jquery', 'bootstrap'], function ($, bootstrap) {
+require(['jquery', 'bootstrap', 'bootbox'], function ($, bootstrap, bootbox) {
 'use strict';
 /* global window, document, FullCalendar */
 
@@ -54,6 +54,38 @@ require(['jquery', 'bootstrap'], function ($, bootstrap) {
     } catch (e) { return iso; }
   }
 
+
+  function escapeHtml(str) {
+    return String(str || '').replace(/[&<>"']/g, function (c) {
+      return ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c];
+    });
+  }
+
+  function ecDoAction(rid, action, eventObj) {
+    try {
+      const csrf = window.EC_CSRF || (window.config && window.config.csrf_token) || '';
+      return fetch((config.relative_path || '') + '/api/equipment/reservations/' + encodeURIComponent(rid) + '/action', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', 'x-csrf-token': csrf },
+        body: JSON.stringify({ action: action })
+      }).then(function (r) {
+        return r.json().catch(function () { return {}; }).then(function (j) { return { ok: r.ok, json: j }; });
+      }).then(function (res) {
+        if (!res.ok || (res.json && res.json.error)) {
+          if (window.app && app.alertError) app.alertError((res.json && res.json.error) ? res.json.error : 'Erreur');
+          return false;
+        }
+        if (action === 'delete') {
+          try { eventObj.remove(); } catch (e) {}
+        } else {
+          try { eventObj.setExtendedProp('status', action === 'approve' ? 'approved' : 'rejected'); } catch (e) {}
+        }
+        if (window.app && app.alertSuccess) app.alertSuccess('OK');
+        return true;
+      });
+    } catch (e) { return false; }
+  }
+
 function updateTotalPrice() {
     try {
       const sel = document.getElementById('ec-item-ids');
@@ -140,7 +172,6 @@ function updateTotalPrice() {
       dayMaxEventRows: true,
       displayEventTime: false,
         timeZone: 'UTC',
-        locale: 'fr',
       events: events,
       select: function (info) {
         if (!window.EC_CAN_CREATE) return;
@@ -151,15 +182,34 @@ function updateTotalPrice() {
       },
       dateClick: function (info) {
         if (!window.EC_CAN_CREATE) return;
-        openCreateModal(info.dateStr, info.dateStr);
+        openCreateModal(String(info.dateStr||'').slice(0,10), String(info.dateStr||'').slice(0,10));
       },
       eventClick: function (info) {
-        // simple details popup
-        const r = info.event.extendedProps || {};
-        const title = info.event.title || 'Réservation';
-        const start = info.event.startStr || '';
-        const end = info.event.endStr ? addDaysIsoLocal(info.event.endStr, -1) : '';
-        bootbox.alert(`<strong>${title}</strong><br>Du ${start} au ${end}<br>Statut: ${r.status || ''}`);
+        try {
+          info.jsEvent && info.jsEvent.preventDefault && info.jsEvent.preventDefault();
+          const ep = info.event.extendedProps || {};
+          const rid = ep.rid || info.event.id;
+          const status = ep.status || 'pending';
+          const title = info.event.title || 'Reservation';
+          const start = String(info.event.startStr || '').slice(0,10);
+          const end = String(info.event.endStr || '').slice(0,10);
+          const total = ep.total || 0;
+
+          let msg = '<div><strong>' + escapeHtml(title) + '</strong></div>';
+          msg += '<div>Periode: ' + escapeHtml(start) + ' -> ' + escapeHtml(end) + '</div>';
+          msg += '<div>Statut: ' + escapeHtml(status) + '</div>';
+          if (total) msg += '<div>Total: ' + escapeHtml(String(total)) + ' EUR</div>';
+
+          const buttons = { close: { label: 'Fermer', className: 'btn-secondary' } };
+
+          if (window.EC_IS_APPROVER) {
+            buttons.approve = { label: 'Valider', className: 'btn-success', callback: function () { return ecDoAction(rid, 'approve', info.event); } };
+            buttons.reject = { label: 'Rejeter', className: 'btn-warning', callback: function () { return ecDoAction(rid, 'reject', info.event); } };
+            buttons.delete = { label: 'Supprimer', className: 'btn-danger', callback: function () { return ecDoAction(rid, 'delete', info.event); } };
+          }
+
+          bootbox.dialog({ title: 'Reservation', message: msg, buttons: buttons });
+        } catch (e) {}
       },
     });
 

package/public/templates/admin/plugins/equipment-calendar.tpl

@@ -1,4 +1,3 @@
-
 <div class="acp-page-container">
   <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
     <h1 class="mb-0">Equipment Calendar</h1>
@@ -9,76 +8,76 @@
     </div>
   </div>
 
-  <div class="equipment-calendar-settings mt-3">
+  <form id="ec-admin-form" method="post" action="/admin/plugins/equipment-calendar/save" class="mb-3 mt-3">
+    <input type="hidden" name="_csrf" value="{config.csrf_token}">
+
     <div class="card card-body mb-3">
       <h5>Permissions</h5>
       <div class="mb-3">
         <label class="form-label">Groupes autorisés à créer une demande (creatorGroups)</label>
-        <input class="form-control" type="text" name="creatorGroups" data-field="creatorGroups" value="{settings.creatorGroups}">
+        <input class="form-control" type="text" name="creatorGroups" value="{settings.creatorGroups}">
       </div>
       <div class="mb-3">
         <label class="form-label">Groupe valideur (approverGroup)</label>
-        <input class="form-control" type="text" name="approverGroup" data-field="approverGroup" value="{settings.approverGroup}">
+        <input class="form-control" type="text" name="approverGroup" value="{settings.approverGroup}">
       </div>
       <div class="mb-0">
         <label class="form-label">Groupe notifié (notifyGroup)</label>
-        <input class="form-control" type="text" name="notifyGroup" data-field="notifyGroup" value="{settings.notifyGroup}">
+        <input class="form-control" type="text" name="notifyGroup" value="{settings.notifyGroup}">
       </div>
     </div>
 
     <div class="card card-body mb-3">
-      <h5>HelloAsso</h5>
-      <div class="row g-3">
-        <div class="col-md-6">
-          <label class="form-label">Client ID</label>
-          <input class="form-control" type="text" name="ha_clientId" data-field="ha_clientId" value="{settings.ha_clientId}">
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Client Secret</label>
-          <input class="form-control" type="password" name="ha_clientSecret" data-field="ha_clientSecret" value="{settings.ha_clientSecret}">
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Organization slug</label>
-          <input class="form-control" type="text" name="ha_organizationSlug" data-field="ha_organizationSlug" value="{settings.ha_organizationSlug}">
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Return URL base (callback)</label>
-          <input class="form-control" type="text" name="ha_returnUrl" data-field="ha_returnUrl" value="{settings.ha_returnUrl}" placeholder="https://www.onekite.com">
-          <div class="form-text">Le plugin ajoutera automatiquement le chemin de callback.</div>
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Form Type</label>
-          <input class="form-control" type="text" name="ha_itemsFormType" data-field="ha_itemsFormType" value="{settings.ha_itemsFormType}" placeholder="shop">
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Form Slug</label>
-          <input class="form-control" type="text" name="ha_itemsFormSlug" data-field="ha_itemsFormSlug" value="{settings.ha_itemsFormSlug}" placeholder="locations-materiel-2026">
-        </div>
+      <h5>Paiement</h5>
+      <div class="mb-0">
+        <label class="form-label">Timeout paiement (minutes)</label>
+        <input class="form-control" type="number" min="1" name="paymentTimeoutMinutes" value="{settings.paymentTimeoutMinutes}">
       </div>
     </div>
 
     <div class="card card-body mb-3">
-      <h5>Calendrier</h5>
+      <h5>HelloAsso</h5>
+      <div class="mb-3">
+        <label class="form-label">API Base URL (prod/sandbox)</label>
+        <input class="form-control" type="text" name="ha_apiBaseUrl" value="{settings.ha_apiBaseUrl}">
+        <div class="form-text">Prod: <code>https://api.helloasso.com</code> — Sandbox: <code>https://api.helloasso-sandbox.com</code></div>
+      </div>
+      <div class="mb-3">
+        <label class="form-label">Organization slug</label>
+        <input class="form-control" type="text" name="ha_organizationSlug" value="{settings.ha_organizationSlug}">
+      </div>
+      <div class="mb-3">
+        <label class="form-label">Client ID</label>
+        <input class="form-control" type="text" name="ha_clientId" value="{settings.ha_clientId}">
+      </div>
+      <div class="mb-3">
+        <label class="form-label">Client Secret</label>
+        <input class="form-control" type="password" name="ha_clientSecret" value="{settings.ha_clientSecret}">
+      </div>
       <div class="row g-3">
         <div class="col-md-6">
-          <label class="form-label">Vue par défaut</label>
-          <select class="form-select" name="defaultView" data-field="defaultView">
-            <option value="dayGridMonth">Mois</option>
-            <option value="timeGridWeek">Semaine</option>
-            <option value="listWeek">Liste</option>
-          </select>
-        </div>
-        <div class="col-md-6">
-          <label class="form-label">Timezone</label>
-          <input class="form-control" type="text" name="timezone" data-field="timezone" value="{settings.timezone}">
+          <label class="form-label">Form Type</label>
+          <input class="form-control" type="text" name="ha_itemsFormType" value="{settings.ha_itemsFormType}" placeholder="shop">
         </div>
         <div class="col-md-6">
-          <label class="form-label">Timeout paiement (minutes)</label>
-          <input class="form-control" type="number" min="1" name="paymentTimeoutMinutes" data-field="paymentTimeoutMinutes" value="{settings.paymentTimeoutMinutes}">
+          <label class="form-label">Form Slug</label>
+          <input class="form-control" type="text" name="ha_itemsFormSlug" value="{settings.ha_itemsFormSlug}" placeholder="locations-materiel-2026">
         </div>
       </div>
+      <div class="mb-0 mt-3">
+        <label class="form-label">Préfixe itemName (checkout)</label>
+        <input class="form-control" type="text" name="ha_calendarItemNamePrefix" value="{settings.ha_calendarItemNamePrefix}">
+      </div>
     </div>
 
-    <button id="save" class="btn btn-primary" type="button">Enregistrer</button>
-  </div>
+    <button class="btn btn-primary" type="submit">Enregistrer</button>
+  </form>
+
+  {{{ if saved }}}
+  <script>
+    if (window.app && typeof window.app.alertSuccess === 'function') {
+      window.app.alertSuccess('Paramètres enregistrés');
+    }
+  </script>
+  {{{ end }}}
 </div>

package/templates/admin/plugins/equipment-calendar-helloasso-test.tpl

@@ -0,0 +1,54 @@
+<div class="acp-page-container">
+  <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+    <h1 class="mb-0">Equipment Calendar</h1>
+    <div class="btn-group">
+      <a class="btn btn-outline-secondary" href="/admin/plugins/equipment-calendar">Paramètres</a>
+      <a class="btn btn-outline-secondary" href="/admin/plugins/equipment-calendar/reservations">Réservations</a>
+      <a class="btn btn-secondary active" href="/admin/plugins/equipment-calendar/helloasso-test">Test HelloAsso</a>
+    </div>
+  </div>
+
+  <div class="card card-body mt-3">
+    <div class="d-flex flex-wrap gap-2 mb-2">
+      <a class="btn btn-outline-primary" href="/admin/plugins/equipment-calendar/helloasso-test">Test (cache OK)</a>
+      <a class="btn btn-outline-primary" href="/admin/plugins/equipment-calendar/helloasso-test?force=1">Test (forcer nouveau token)</a>
+      <a class="btn btn-outline-danger" href="/admin/plugins/equipment-calendar/helloasso-test?force=1&clear=1" onclick="return confirm('Supprimer le token stocké et retester ?');">Vider token + retester</a>
+    </div>
+    {{{ if ok }}}
+      <div class="alert alert-success">{message}</div>
+    {{{ else }}}
+      <div class="alert alert-danger">Échec : {message}</div>
+    {{{ end }}}
+
+    <div class="small text-muted">
+      Form: <code>{settings.ha_itemsFormType}</code> / <code>{settings.ha_itemsFormSlug}</code> — Orga: <code>{settings.ha_organizationSlug}</code>
+    </div>
+    {{{ if hasSampleItems }}}
+  <div class="card card-body mt-3">
+    <div class="d-flex flex-wrap gap-2 mb-2">
+      <a class="btn btn-outline-primary" href="/admin/plugins/equipment-calendar/helloasso-test">Test (cache OK)</a>
+      <a class="btn btn-outline-primary" href="/admin/plugins/equipment-calendar/helloasso-test?force=1">Test (forcer nouveau token)</a>
+      <a class="btn btn-outline-danger" href="/admin/plugins/equipment-calendar/helloasso-test?force=1&clear=1" onclick="return confirm('Supprimer le token stocké et retester ?');">Vider token + retester</a>
+    </div>
+    <h5 class="mb-2">Aperçu (10 premiers articles)</h5>
+    <div class="table-responsive">
+      <table class="table table-striped align-middle">
+        <thead>
+          <tr>
+            <th>ID</th>
+            <th>Nom</th>
+          </tr>
+        </thead>
+        <tbody>
+          {{{ each sampleItems }}}
+          <tr>
+            <td><code>{sampleItems.id}</code></td>
+            <td>{sampleItems.rawName}</td>
+          </tr>
+          {{{ end }}}
+        </tbody>
+      </table>
+    </div>
+  </div>
+  {{{ end }}}
+</div>

package/templates/admin/plugins/equipment-calendar-reservations.tpl

@@ -0,0 +1,99 @@
+<div class="acp-page-container">
+  <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+    <h1 class="mb-0">Equipment Calendar</h1>
+    <div class="btn-group">
+      <a class="btn btn-outline-secondary" href="/admin/plugins/equipment-calendar">Paramètres</a>
+      <a class="btn btn-secondary active" href="/admin/plugins/equipment-calendar/reservations">Réservations</a>
+    </div>
+  </div>
+
+  <form method="get" action="/admin/plugins/equipment-calendar/reservations" class="card card-body mt-3 mb-3">
+    <div class="row g-2 align-items-end">
+      <div class="col-md-3">
+        <label class="form-label">Statut</label>
+        <select class="form-select" name="status">
+          {{{ each statusOptions }}}
+            <option value="{statusOptions.id}" {{{ if statusOptions.selected }}}selected{{{ end }}}>{statusOptions.name}</option>
+          {{{ end }}}
+        </select>
+      </div>
+      <div class="col-md-4">
+        <label class="form-label">Matériel</label>
+        <select class="form-select" name="itemId">
+          {{{ each itemOptions }}}
+            <option value="{itemOptions.id}" {{{ if itemOptions.selected }}}selected{{{ end }}}>{itemOptions.name}</option>
+          {{{ end }}}
+        </select>
+      </div>
+      <div class="col-md-3">
+        <label class="form-label">Recherche</label>
+        <input class="form-control" name="q" value="{q}" placeholder="rid, uid, note">
+      </div>
+      <div class="col-md-2">
+        <button class="btn btn-primary w-100" type="submit">Filtrer</button>
+      </div>
+    </div>
+  </form>
+
+  <div class="text-muted small mb-2">
+    Total (filtré) : <strong>{total}</strong> - Total (global) : <strong>{totalAll}</strong>
+  </div>
+
+  {{{ if hasRows }}}
+  <div class="table-responsive">
+    <table class="table table-striped align-middle">
+      <thead><tr>
+  <th>Matériel</th>
+  <th>Période</th>
+  <th>Créée le</th>
+  <th>Statut</th>
+  <th>Total</th>
+  <th class="text-end">Actions</th>
+</tr></thead>
+      <tbody>
+        {{{ each rows }}}
+        <tr>
+          <td><code>{rows.rid}</code></td>
+          <td>{rows.itemName}</td>
+          <td>{rows.uid}</td>
+          <td><small>{rows.start}</small></td>
+          <td><small>{rows.end}</small></td>
+          <td><code>{rows.status}</code></td>
+          <td><small>{rows.createdAt}</small></td>
+          <td><small>{rows.notesUser}</small></td>
+          <td class="text-nowrap">
+            <form method="post" action="/admin/plugins/equipment-calendar/reservations/{rows.rid}/approve" class="d-inline">
+              <input type="hidden" name="_csrf" value="{config.csrf_token}">
+              <button class="btn btn-sm btn-success" type="submit">Approve</button>
+            </form>
+            <form method="post" action="/admin/plugins/equipment-calendar/reservations/{rows.rid}/reject" class="d-inline ms-1">
+              <input type="hidden" name="_csrf" value="{config.csrf_token}">
+              <button class="btn btn-sm btn-warning" type="submit">Reject</button>
+            </form>
+            <form method="post" action="/admin/plugins/equipment-calendar/reservations/{rows.rid}/delete" class="d-inline ms-1" onsubmit="return confirm('Supprimer définitivement ?');">
+              <input type="hidden" name="_csrf" value="{config.csrf_token}">
+              <button class="btn btn-sm btn-danger" type="submit">Delete</button>
+            </form>
+          </td>
+        </tr>
+        {{{ end }}}
+      </tbody>
+    </table>
+  </div>
+
+  <div class="d-flex justify-content-between align-items-center mt-3">
+    <div>Page {page} / {totalPages}</div>
+    <div class="btn-group">
+      {{{ if prevPage }}}
+      <a class="btn btn-outline-secondary" href="/admin/plugins/equipment-calendar/reservations?page={prevPage}&perPage={perPage}">Précédent</a>
+      {{{ end }}}
+      {{{ if nextPage }}}
+      <a class="btn btn-outline-secondary" href="/admin/plugins/equipment-calendar/reservations?page={nextPage}&perPage={perPage}">Suivant</a>
+      {{{ end }}}
+    </div>
+  </div>
+
+  {{{ else }}}
+    <div class="alert alert-info">Aucune réservation trouvée.</div>
+  {{{ end }}}
+</div>

package/templates/admin/plugins/equipment-calendar.tpl

@@ -0,0 +1,83 @@
+<div class="acp-page-container">
+  <div class="d-flex align-items-center justify-content-between flex-wrap gap-2">
+    <h1 class="mb-0">Equipment Calendar</h1>
+    <div class="btn-group">
+      <a class="btn btn-secondary active" href="{config.relative_path}/admin/plugins/equipment-calendar">Paramètres</a>
+      <a class="btn btn-outline-secondary" href="{config.relative_path}/admin/plugins/equipment-calendar/reservations">Réservations</a>
+    </div>
+  </div>
+
+  <form class="equipment-calendar-settings mt-3" method="post" action="{config.relative_path}/admin/plugins/equipment-calendar/save">
+    <input type="hidden" name="_csrf" value="{csrf_token}">
+    <div class="card card-body mb-3">
+      <h5>Permissions</h5>
+      <div class="mb-3">
+        <label class="form-label">creatorGroups (séparés par virgule)</label>
+        <input class="form-control" type="text" name="creatorGroups" value="{settings.creatorGroups}">
+      </div>
+      <div class="mb-3">
+        <label class="form-label">approverGroup</label>
+        <input class="form-control" type="text" name="approverGroup" value="{settings.approverGroup}">
+      </div>
+      <div class="mb-0">
+        <label class="form-label">notifyGroup</label>
+        <input class="form-control" type="text" name="notifyGroup" value="{settings.notifyGroup}">
+      </div>
+    </div>
+
+    <div class="card card-body mb-3">
+      <h5>HelloAsso</h5>
+      <div class="row g-3">
+        <div class="col-md-6">
+          <label class="form-label">API base URL</label>
+          <input class="form-control" type="text" name="ha_apiBaseUrl" value="{settings.ha_apiBaseUrl}" placeholder="https://api.helloasso.com ou https://api.helloasso-sandbox.com">
+        </div>
+        <div class="col-md-6">
+          <label class="form-label">Organization slug</label>
+          <input class="form-control" type="text" name="ha_organizationSlug" value="{settings.ha_organizationSlug}">
+        </div>
+        <div class="col-md-6">
+          <label class="form-label">Client ID</label>
+          <input class="form-control" type="text" name="ha_clientId" value="{settings.ha_clientId}">
+        </div>
+        <div class="col-md-6">
+          <label class="form-label">Client Secret</label>
+          <input class="form-control" type="password" name="ha_clientSecret" value="{settings.ha_clientSecret}">
+        </div>
+        <div class="col-md-6">
+          <label class="form-label">Form Type</label>
+          <input class="form-control" type="text" name="ha_itemsFormType" value="{settings.ha_itemsFormType}" placeholder="shop">
+        </div>
+        <div class="col-md-6">
+          <label class="form-label">Form Slug</label>
+          <input class="form-control" type="text" name="ha_itemsFormSlug" value="{settings.ha_itemsFormSlug}" placeholder="locations-materiel-2026">
+        </div>
+        <div class="col-12">
+          <label class="form-label">Return URL base (callback)</label>
+          <input class="form-control" type="text" name="ha_returnUrl" value="{settings.ha_returnUrl}" placeholder="https://www.onekite.com">
+        </div>
+      </div>
+    </div>
+
+    <div class="card card-body mb-3">
+      <h5>Paiement</h5>
+      <div class="row g-3">
+        <div class="col-md-6">
+          <label class="form-label">paymentTimeoutMinutes</label>
+          <input class="form-control" type="number" min="1" name="paymentTimeoutMinutes" value="{settings.paymentTimeoutMinutes}">
+        </div>
+      </div>
+    </div>
+
+    <button class="btn btn-primary" type="submit">Enregistrer</button>
+  </form>
+
+  <script>
+    (function () {
+      var params = new URLSearchParams(window.location.search || '');
+      if (params.get('saved') === '1') {
+        require(['alerts'], function (alerts) { alerts.success('Paramètres enregistrés'); });
+      }
+    })();
+  </script>
+</div>

package/templates/equipment-calendar/approvals.tpl

@@ -0,0 +1,51 @@
+<div class="equipment-approvals-page">
+  <h1>Validation des réservations</h1>
+
+  {{{ if hasRows }}}
+  <div class="table-responsive">
+    <table class="table table-striped align-middle">
+      <thead>
+        <tr>
+          <th>Matériel</th>
+          <th>Demandeur</th>
+          <th>Début</th>
+          <th>Fin</th>
+          <th>Statut</th>
+          <th>Paiement</th>
+          <th>Actions</th>
+        </tr>
+      </thead>
+      <tbody>
+        {{{ each rows }}}
+        <tr>
+          <td>{rows.itemName}</td>
+          <td>{rows.requester}</td>
+          <td>{rows.start}</td>
+          <td>{rows.end}</td>
+          <td><code>{rows.status}</code></td>
+          <td>
+            {{{ if rows.paymentUrl }}}
+              <a href="{rows.paymentUrl}" target="_blank" rel="noreferrer">Lien</a>
+            {{{ else }}}
+              -
+            {{{ end }}}
+          </td>
+          <td>
+            <form method="post" action="/equipment/reservations/{rows.id}/approve" class="d-inline">
+              <input type="hidden" name="_csrf" value="{rows.csrf}">
+              <button class="btn btn-sm btn-success" type="submit">Approuver</button>
+            </form>
+            <form method="post" action="/equipment/reservations/{rows.id}/reject" class="d-inline ms-1">
+              <input type="hidden" name="_csrf" value="{rows.csrf}">
+              <button class="btn btn-sm btn-danger" type="submit">Refuser</button>
+            </form>
+          </td>
+        </tr>
+        {{{ end }}}
+      </tbody>
+    </table>
+  </div>
+  {{{ else }}}
+    <div class="alert alert-success">Aucune demande en attente 🎉</div>
+  {{{ end }}}
+</div>

package/templates/equipment-calendar/calendar.tpl

@@ -0,0 +1,89 @@
+<div class="equipment-calendar-page">
+  <h1>Réservation de matériel</h1>
+
+  {{{ if canCreate }}}
+  <div class="alert alert-info">
+    Clique sur une date ou sélectionne une plage sur le calendrier pour faire une demande.
+  </div>
+  {{{ else }}}
+  <div class="alert alert-info">Tu peux consulter le calendrier, mais tu n’as pas les droits pour créer une demande.</div>
+  {{{ end }}}
+
+  <div class="card card-body mb-3">
+    <div id="ec-calendar"></div>
+  </div>
+
+  <!-- Modal de demande -->
+  <div class="modal fade" id="ec-create-modal" tabindex="-1" aria-hidden="true">
+    <div class="modal-dialog modal-dialog-centered">
+      <div class="modal-content">
+        <form id="ec-create-form" method="post" action="{relative_path}/equipment/reservations/create">
+          <div class="modal-header">
+            <h5 class="modal-title">Demande de réservation</h5>
+            <button type="button" class="btn-close" data-bs-dismiss="modal" aria-label="Close"></button>
+          </div>
+
+          <div class="modal-body">
+            <input type="hidden" name="_csrf" value="{config.csrf_token}">
+            <input type="hidden" id="ec-start-iso" name="start" value="">
+            <input type="hidden" id="ec-end-iso" name="end" value="">
+
+            <div class="row g-3 mb-3">
+              <div class="col-6">
+                <label class="form-label">Début</label>
+                <input class="form-control" type="date" id="ec-start-date" required>
+              </div>
+              <div class="col-6">
+                <label class="form-label">Fin</label>
+                <input class="form-control" type="date" id="ec-end-date" required>
+              </div>
+            </div>
+
+            <div class="mb-3">
+              <label class="form-label">Matériel</label>
+              <select class="form-select" id="ec-item-ids" name="itemIds" multiple required>
+        <!-- BEGIN items -->
+        <option value="{items.id}" data-price="{items.price}">{items.name}</option>
+        <!-- END items -->
+</select>
+              <div class="form-text">Tu peux sélectionner plusieurs matériels.</div>
+            </div>
+
+            <div class="mb-3">
+              <label class="form-label">Notes</label>
+              <textarea class="form-control" name="notesUser" rows="3" placeholder="Infos utiles..."></textarea>
+            </div>
+
+            <div class="mb-0">
+              <div class="fw-semibold">Durée</div>
+              <div id="ec-total-days">1 jour</div>
+              <hr class="my-2">
+              <div class="fw-semibold">Total estimé</div>
+              <div id="ec-total-price" class="fs-5">0 EUR</div>
+            </div>
+          </div>
+
+          <div class="modal-footer">
+            <button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Annuler</button>
+            <button type="submit" class="btn btn-primary">Envoyer la demande</button>
+          </div>
+        </form>
+      </div>
+    </div>
+  </div>
+</div>
+
+<script src="https://cdn.jsdelivr.net/npm/fullcalendar@6.1.19/index.global.min.js"></script>
+<script src="{relative_path}/plugins/nodebb-plugin-equipment-calendar/js/client.js"></script>
+
+<script>
+  window.EC_EVENTS = JSON.parse(atob('{eventsB64}'));
+  window.EC_BLOCKS = JSON.parse(atob('{blocksB64}'));
+  window.EC_CAN_CREATE = {canCreateJs};
+  window.EC_TZ = '{tz}';
+</script>
+
+<script>
+  window.EC_CSRF = '{csrf_token}';
+  window.EC_IS_APPROVER = {isApprover};
+</script>

package/templates/equipment-calendar/payment-return.tpl

@@ -0,0 +1,15 @@
+<div class="card card-body">
+  <h4>Retour paiement</h4>
+
+  {{{ if statusPaid }}}
+    <div class="alert alert-success">✅ Paiement confirmé.</div>
+  {{{ end }}}
+
+  {{{ if statusError }}}
+    <div class="alert alert-danger">❌ Paiement non confirmé.</div>
+  {{{ end }}}
+
+  <p>{message}</p>
+
+  <a class="btn btn-primary" href="/equipment/calendar">Retour au calendrier</a>
+</div>