Add association meetings and GDPR settings

src/app/backend/BackendShell.tsx

@@ -15,8 +15,10 @@ const TITLES: Record<string, [string, string]> = {
     "Modération des promotions",
     "Validez les offres soumises par les adhérents",
   ],
+  "/backend/rencontres": ["Rencontres", "Gérer les prochaines dates et les archives"],
   "/backend/administrateurs": ["Administrateurs", "Gérer les accès à l'administration"],
   "/backend/categories": ["Catégories", "Gérer les métiers de l'annuaire"],
+  "/backend/parametres": ["Paramètres du site", "Configurer l'association et les mentions légales"],
   "/backend/espace": ["Mon espace adhérent", "Publiez et suivez vos promotions"],
   "/backend/changer-mot-de-passe": ["Mot de passe", "Sécurisez votre compte"],
 };
@@ -141,11 +143,21 @@ export function BackendShell({
                   </span>
                 </NavLink>
               )}
+              {can(user.role, "manageMeetings") && (
+                <NavLink href="/backend/rencontres" active={pathname === "/backend/rencontres"}>
+                  {dotRound}Rencontres
+                </NavLink>
+              )}
               {can(user.role, "manageCategories") && (
                 <NavLink href="/backend/categories" active={pathname === "/backend/categories"}>
                   {dotDiamond}Catégories
                 </NavLink>
               )}
+              {can(user.role, "manageSettings") && (
+                <NavLink href="/backend/parametres" active={pathname === "/backend/parametres"}>
+                  {dot}Paramètres
+                </NavLink>
+              )}
               {can(user.role, "manageAdmins") && (
                 <NavLink href="/backend/administrateurs" active={pathname === "/backend/administrateurs"}>
                   {dot}Administrateurs

src/app/backend/actions.ts

@@ -1,7 +1,9 @@
 "use server";
 
 import { revalidatePath } from "next/cache";
-import { eq, sql } from "drizzle-orm";
+import { headers } from "next/headers";
+import { redirect } from "next/navigation";
+import { and, eq, sql } from "drizzle-orm";
 import bcrypt from "bcryptjs";
 import { auth, signOut } from "@/auth";
 import { db } from "@/db";
@@ -9,12 +11,19 @@ import {
   activityLog,
   categories,
   contactMessages,
+  imageConsents,
+  meetingRegistrations,
+  meetings,
   members,
   membershipRequests,
+  pastMeetingPhotos,
+  pastMeetings,
   promotions,
+  siteSettings,
   users,
 } from "@/db/schema";
 import { can, LABEL_TO_ROLE } from "@/lib/rbac";
+import { SITE_SETTING_DEFAULTS } from "@/lib/site-settings";
 import type { AppRole } from "@/types/next-auth";
 
 const CATEGORY_PALETTE = [
@@ -62,6 +71,21 @@ async function requireRole(): Promise<{ role: AppRole; memberId: number | null;
   };
 }
 
+function asString(formData: FormData, key: string) {
+  return String(formData.get(key) ?? "").trim();
+}
+
+function asDate(formData: FormData, key: string) {
+  const raw = asString(formData, key);
+  const date = raw ? new Date(raw) : null;
+  if (!date || Number.isNaN(date.getTime())) throw new Error("Date invalide");
+  return date;
+}
+
+function asNullableString(formData: FormData, key: string) {
+  return asString(formData, key) || null;
+}
+
 // ---- Promotion moderation ----
 export async function moderatePromo(formData: FormData) {
   const { role } = await requireRole();
@@ -370,6 +394,247 @@ export async function deleteCategory(formData: FormData) {
   revalidatePath("/annuaire");
 }
 
+// ---- Rencontres ----
+export async function createMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+
+  const title = asString(formData, "title");
+  if (!title) return;
+  await db.insert(meetings).values({
+    title,
+    startsAt: asDate(formData, "startsAt"),
+    location: asNullableString(formData, "location"),
+    description: asNullableString(formData, "description"),
+    capacity: Number(formData.get("capacity") ?? 30) || 30,
+    imageUrl: asNullableString(formData, "imageUrl"),
+  });
+  await logActivity(`Rencontre ajoutée : <strong>${title}</strong>`, "#2C6FB3");
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function updateMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+
+  const id = Number(formData.get("id"));
+  const title = asString(formData, "title");
+  if (!id || !title) return;
+  await db
+    .update(meetings)
+    .set({
+      title,
+      startsAt: asDate(formData, "startsAt"),
+      location: asNullableString(formData, "location"),
+      description: asNullableString(formData, "description"),
+      capacity: Number(formData.get("capacity") ?? 30) || 30,
+      imageUrl: asNullableString(formData, "imageUrl"),
+    })
+    .where(eq(meetings.id, id));
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function deleteMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const id = Number(formData.get("id"));
+  if (!id) return;
+  await db.delete(meetings).where(eq(meetings.id, id));
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function registerForMeeting(formData: FormData) {
+  const session = await auth();
+  if (!session?.user?.memberId) throw new Error("Compte adhérent requis");
+  const memberId = session.user.memberId;
+  const meetingId = Number(formData.get("meetingId"));
+  if (!meetingId) return;
+
+  await db.transaction(async (tx) => {
+    const [meeting] = await tx.select().from(meetings).where(eq(meetings.id, meetingId));
+    if (!meeting) throw new Error("Rencontre introuvable");
+    if (meeting.startsAt.getTime() < Date.now()) throw new Error("Cette rencontre est passée");
+
+    const duplicate = await tx
+      .select({ id: meetingRegistrations.id })
+      .from(meetingRegistrations)
+      .where(and(eq(meetingRegistrations.meetingId, meetingId), eq(meetingRegistrations.memberId, memberId)));
+    if (duplicate.length > 0) return;
+
+    const [{ total } = { total: 0 }] = await tx
+      .select({ total: sql<number>`count(*)` })
+      .from(meetingRegistrations)
+      .where(eq(meetingRegistrations.meetingId, meetingId));
+    if (Number(total) >= meeting.capacity) throw new Error("Rencontre complète");
+
+    const [member] = await tx
+      .select({ name: members.name, email: members.email })
+      .from(members)
+      .where(eq(members.id, memberId));
+    await tx.insert(meetingRegistrations).values({
+      meetingId,
+      memberId,
+      attendeeName: member?.name ?? session.user.name ?? "Adhérent",
+      attendeeEmail: member?.email ?? session.user.email ?? null,
+      imageConsent: formData.get("imageConsent") === "on",
+    });
+  });
+
+  revalidatePath("/association");
+  revalidatePath("/backend/espace");
+}
+
+export async function cancelMeetingRegistration(formData: FormData) {
+  const session = await auth();
+  if (!session?.user?.memberId) throw new Error("Compte adhérent requis");
+  const meetingId = Number(formData.get("meetingId"));
+  if (!meetingId) return;
+  await db
+    .delete(meetingRegistrations)
+    .where(
+      and(
+        eq(meetingRegistrations.meetingId, meetingId),
+        eq(meetingRegistrations.memberId, session.user.memberId)
+      )
+    );
+  revalidatePath("/association");
+  revalidatePath("/backend/espace");
+}
+
+export async function createPastMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const title = asString(formData, "title");
+  if (!title) return;
+  await db.insert(pastMeetings).values({
+    title,
+    eventDate: asDate(formData, "eventDate"),
+    location: asNullableString(formData, "location"),
+    description: asNullableString(formData, "description"),
+    participants: asNullableString(formData, "participants"),
+    meetingId: formData.get("meetingId") ? Number(formData.get("meetingId")) : null,
+  });
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function updatePastMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const id = Number(formData.get("id"));
+  const title = asString(formData, "title");
+  if (!id || !title) return;
+  await db
+    .update(pastMeetings)
+    .set({
+      title,
+      eventDate: asDate(formData, "eventDate"),
+      location: asNullableString(formData, "location"),
+      description: asNullableString(formData, "description"),
+      participants: asNullableString(formData, "participants"),
+      meetingId: formData.get("meetingId") ? Number(formData.get("meetingId")) : null,
+    })
+    .where(eq(pastMeetings.id, id));
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function deletePastMeeting(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const id = Number(formData.get("id"));
+  if (!id) return;
+  await db.delete(pastMeetings).where(eq(pastMeetings.id, id));
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function addPastMeetingPhoto(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const pastMeetingId = Number(formData.get("pastMeetingId"));
+  const imageUrl = asString(formData, "imageUrl");
+  if (!pastMeetingId || !imageUrl) return;
+  const [{ max } = { max: 0 }] = await db
+    .select({ max: sql<number>`coalesce(max(${pastMeetingPhotos.position}), 0)` })
+    .from(pastMeetingPhotos)
+    .where(eq(pastMeetingPhotos.pastMeetingId, pastMeetingId));
+  await db.insert(pastMeetingPhotos).values({
+    pastMeetingId,
+    imageUrl,
+    caption: asNullableString(formData, "caption"),
+    position: Number(max) + 1,
+  });
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+export async function deletePastMeetingPhoto(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageMeetings")) throw new Error("Accès refusé");
+  const id = Number(formData.get("id"));
+  if (!id) return;
+  await db.delete(pastMeetingPhotos).where(eq(pastMeetingPhotos.id, id));
+  revalidatePath("/backend/rencontres");
+  revalidatePath("/association");
+}
+
+// ---- Paramètres du site ----
+export async function saveSiteSettings(formData: FormData) {
+  const { role } = await requireRole();
+  if (!can(role, "manageSettings")) throw new Error("Accès refusé");
+  const updatedAt = new Date();
+
+  for (const key of Object.keys(SITE_SETTING_DEFAULTS)) {
+    await db
+      .insert(siteSettings)
+      .values({ key, value: asString(formData, key), updatedAt })
+      .onConflictDoUpdate({
+        target: siteSettings.key,
+        set: { value: asString(formData, key), updatedAt },
+      });
+  }
+
+  revalidatePath("/backend/parametres");
+  revalidatePath("/association");
+  revalidatePath("/mentions-legales");
+  revalidatePath("/confidentialite");
+  revalidatePath("/");
+}
+
+// ---- RGPD / droit à l'image ----
+export async function saveImageConsent(formData: FormData) {
+  const session = await auth();
+  if (!session?.user?.memberId) throw new Error("Compte adhérent requis");
+
+  const decision = asString(formData, "decision");
+  if (!["accepted", "refused"].includes(decision)) throw new Error("Décision invalide");
+  const signatoryName = asString(formData, "signatoryName") || session.user.name || "Adhérent";
+  const signaturePng = asString(formData, "signaturePng");
+  if (decision === "accepted" && !signaturePng) {
+    throw new Error("Signature requise pour autoriser le droit à l'image");
+  }
+  const h = await headers();
+
+  await db.insert(imageConsents).values({
+    memberId: session.user.memberId,
+    decision,
+    scopes: decision === "accepted" ? "site,social,print" : "",
+    signatoryName,
+    signaturePng: decision === "accepted" ? signaturePng : null,
+    consentVersion: "2026-07-v1",
+    ip: h.get("x-forwarded-for")?.split(",")[0]?.trim() ?? null,
+    userAgent: h.get("user-agent") ?? null,
+  });
+
+  revalidatePath("/backend");
+  revalidatePath("/backend/espace");
+  redirect("/backend/espace");
+}
+
 // ---- Self password change (forced at first login) ----
 export async function changeOwnPassword(formData: FormData) {
   const session = await auth();

src/app/backend/espace/page.tsx

@@ -1,10 +1,11 @@
 import { asc, desc, eq } from "drizzle-orm";
 import { auth } from "@/auth";
 import { db } from "@/db";
-import { categories, members, promotions, type Member } from "@/db/schema";
+import { categories, imageConsents, members, promotions, type Member } from "@/db/schema";
 import { ImageField } from "@/components/ImageField";
+import { ImageConsentForm } from "@/components/ImageConsentForm";
 import { communeOptions } from "@/lib/communes";
-import { updateOwnProfile } from "../actions";
+import { saveImageConsent, updateOwnProfile } from "../actions";
 import { MemberSpaceForm } from "./MemberSpaceForm";
 
 export const dynamic = "force-dynamic";
@@ -29,6 +30,7 @@ export default async function EspacePage() {
   let subtitle = "Espace adhérent";
   let profile: Member | null = null;
   let myPromos: { id: number; title: string; status: string; createdAt: Date; imageUrl: string | null }[] = [];
+  let latestConsent: { decision: string; createdAt: Date } | null = null;
 
   if (memberId) {
     const [m] = await db.select().from(members).where(eq(members.id, memberId));
@@ -51,6 +53,13 @@ export default async function EspacePage() {
       .from(promotions)
       .where(eq(promotions.memberId, memberId))
       .orderBy(desc(promotions.createdAt));
+    const [consent] = await db
+      .select({ decision: imageConsents.decision, createdAt: imageConsents.createdAt })
+      .from(imageConsents)
+      .where(eq(imageConsents.memberId, memberId))
+      .orderBy(desc(imageConsents.createdAt))
+      .limit(1);
+    latestConsent = consent ?? null;
   }
 
   const catRows = await db
@@ -154,6 +163,27 @@ export default async function EspacePage() {
         </form>
       )}
 
+      {memberId && (
+        <section style={{ background: "#fff", border: "1px solid #e6dcc6", borderRadius: 16, padding: 24, marginBottom: 28 }}>
+          <div style={{ display: "flex", justifyContent: "space-between", gap: 12, alignItems: "start", flexWrap: "wrap", marginBottom: 14 }}>
+            <div>
+              <h3 className="font-display" style={{ fontWeight: 700, fontSize: 18, margin: 0, color: "#26201a" }}>
+                Droit à l'image
+              </h3>
+              <div style={{ color: "#8c8068", fontSize: 13, marginTop: 4 }}>
+                Vous pouvez modifier votre décision à tout moment.
+              </div>
+            </div>
+            {latestConsent && (
+              <span style={{ background: latestConsent.decision === "accepted" ? "#e6f4ec" : "#fbe9e6", color: latestConsent.decision === "accepted" ? "#1f8a5b" : "#d8472b", borderRadius: 999, padding: "6px 12px", fontSize: 12, fontWeight: 800 }}>
+                {latestConsent.decision === "accepted" ? "Autorisé" : "Refusé"} · {fmtDate(latestConsent.createdAt)}
+              </span>
+            )}
+          </div>
+          <ImageConsentForm saveAction={saveImageConsent} defaultName={memberName} compact />
+        </section>
+      )}
+
       <MemberSpaceForm memberName={memberName} categories={categoryLabels} />
 
       <div style={{ marginTop: 28 }}>

src/app/backend/layout.tsx

@@ -1,9 +1,11 @@
 import { redirect } from "next/navigation";
-import { eq } from "drizzle-orm";
+import { desc, eq } from "drizzle-orm";
 import { auth } from "@/auth";
 import { db } from "@/db";
-import { contactMessages, membershipRequests, promotions } from "@/db/schema";
+import { contactMessages, imageConsents, membershipRequests, promotions } from "@/db/schema";
+import { ImageConsentForm } from "@/components/ImageConsentForm";
 import { isStaff } from "@/lib/rbac";
+import { saveImageConsent } from "./actions";
 import { BackendShell } from "./BackendShell";
 
 export const dynamic = "force-dynamic";
@@ -18,6 +20,48 @@ export default async function BackendLayout({
     redirect("/login");
   }
 
+  if (
+    session.user.role === "member" &&
+    session.user.memberId &&
+    !session.user.mustChangePassword
+  ) {
+    const latestConsent = await db
+      .select({ id: imageConsents.id })
+      .from(imageConsents)
+      .where(eq(imageConsents.memberId, session.user.memberId))
+      .orderBy(desc(imageConsents.createdAt))
+      .limit(1);
+
+    if (latestConsent.length === 0) {
+      return (
+        <div style={{ minHeight: "100vh", background: "#F6F2E8", color: "#33291D", fontFamily: "'Public Sans',sans-serif", padding: "clamp(22px, 5vw, 54px)" }}>
+          <main style={{ maxWidth: 860, margin: "0 auto" }}>
+            <div style={{ display: "flex", alignItems: "center", gap: 14, marginBottom: 24 }}>
+              {/* eslint-disable-next-line @next/next/no-img-element */}
+              <img src="/assets/logo.png" alt="Plein R" style={{ height: 50, width: "auto" }} />
+              <div>
+                <div className="font-display" style={{ fontSize: 24, fontWeight: 800, color: "#26201a" }}>
+                  Consentement RGPD
+                </div>
+                <div style={{ color: "#8c8068", fontSize: 14 }}>Droit à l'image - première connexion adhérent</div>
+              </div>
+            </div>
+            <section style={{ background: "#fff", border: "1px solid #e6dcc6", borderRadius: 20, padding: "clamp(22px, 5vw, 36px)", boxShadow: "0 24px 55px -42px rgba(40,30,15,0.55)" }}>
+              <h1 className="font-display" style={{ margin: "0 0 10px", color: "#26201a", fontSize: "clamp(28px, 5vw, 40px)" }}>
+                Votre choix sur le droit à l'image
+              </h1>
+              <p style={{ margin: "0 0 20px", color: "#6c6150", lineHeight: 1.7 }}>
+                Avant d'accéder à votre espace, indiquez si Plein R peut utiliser votre image dans
+                les supports liés aux rencontres et à la vie de l'association.
+              </p>
+              <ImageConsentForm saveAction={saveImageConsent} defaultName={session.user.name ?? "Adhérent"} />
+            </section>
+          </main>
+        </div>
+      );
+    }
+  }
+
   let pendingCount = 0;
   let inboxCount = 0;
   if (isStaff(session.user.role)) {

src/app/backend/parametres/page.tsx

@@ -0,0 +1,130 @@
+import { redirect } from "next/navigation";
+import type { CSSProperties } from "react";
+import { auth } from "@/auth";
+import { ImageField } from "@/components/ImageField";
+import { can } from "@/lib/rbac";
+import { getSiteSettings } from "@/lib/site-settings";
+import { saveSiteSettings } from "../actions";
+
+export const dynamic = "force-dynamic";
+
+export default async function ParametresPage() {
+  const session = await auth();
+  if (!can(session?.user.role, "manageSettings")) redirect("/backend");
+
+  const settings = await getSiteSettings();
+
+  return (
+    <form action={saveSiteSettings} style={{ display: "grid", gap: 22, maxWidth: 1080 }}>
+      <section style={panel}>
+        <h2 className="font-display" style={title}>Identité du site</h2>
+        <div className="grid grid-2" style={{ gap: 16 }}>
+          <Field label="Nom association" name="association_name" value={settings.association_name} />
+          <Field label="Slogan" name="association_tagline" value={settings.association_tagline} />
+          <Field label="E-mail" name="association_email" value={settings.association_email} />
+          <Field label="Téléphone" name="association_phone" value={settings.association_phone} />
+          <Field label="Site web" name="association_website" value={settings.association_website} />
+          <Field label="Contact principal" name="association_contact" value={settings.association_contact} />
+          <div style={{ gridColumn: "1 / -1" }}>
+            <Field label="Adresse" name="association_address" value={settings.association_address} />
+          </div>
+          <Area label="Texte d'introduction Association" name="association_intro" value={settings.association_intro} />
+          <Area label="Mission" name="association_mission" value={settings.association_mission} />
+        </div>
+      </section>
+
+      <section style={panel}>
+        <h2 className="font-display" style={title}>Directoire</h2>
+        <div className="grid grid-2" style={{ gap: 16 }}>
+          <Field label="Président(e)" name="association_president" value={settings.association_president} />
+          <Field label="Intitulé du rôle" name="association_president_role" value={settings.association_president_role} />
+          <Field label="Vice-président(e)" name="association_vice_president" value={settings.association_vice_president} />
+          <Field label="Trésorier(ère)" name="association_treasurer" value={settings.association_treasurer} />
+          <Field label="Secrétaire" name="association_secretary" value={settings.association_secretary} />
+          <ImageField name="association_president_photo" label="Photo président(e)" defaultValue={settings.association_president_photo} height={130} />
+          <Area label="Message président(e)" name="association_president_message" value={settings.association_president_message} />
+          <Area
+            label="Autres membres du directoire (Nom|Fonction, une ligne par personne)"
+            name="association_board_members"
+            value={settings.association_board_members}
+          />
+        </div>
+      </section>
+
+      <section style={panel}>
+        <h2 className="font-display" style={title}>Mentions légales & confidentialité</h2>
+        <div className="grid grid-2" style={{ gap: 16 }}>
+          <Field label="SIRET" name="association_siret" value={settings.association_siret} />
+          <Field label="RNA" name="association_rna" value={settings.association_rna} />
+          <Field label="Directeur de publication" name="association_publication_director" value={settings.association_publication_director} />
+          <Field label="Contact confidentialité/RGPD" name="association_privacy_contact" value={settings.association_privacy_contact} />
+          <Field label="Hébergeur" name="association_host_name" value={settings.association_host_name} />
+          <Field label="Téléphone hébergeur" name="association_host_phone" value={settings.association_host_phone} />
+          <div style={{ gridColumn: "1 / -1" }}>
+            <Field label="Adresse hébergeur" name="association_host_address" value={settings.association_host_address} />
+          </div>
+          <Field label="Dernière mise à jour légale" name="legal_updated" value={settings.legal_updated} placeholder="17 juillet 2026" />
+        </div>
+        <div style={{ marginTop: 14, color: "#9a6638", fontSize: 13, lineHeight: 1.6 }}>
+          Remplissez ces champs avant mise en production: ils alimentent les pages publiques
+          Mentions légales et Confidentialité.
+        </div>
+      </section>
+
+      <button type="submit" style={submitButton}>Enregistrer les paramètres</button>
+    </form>
+  );
+}
+
+function Field({
+  label,
+  name,
+  value,
+  placeholder,
+}: {
+  label: string;
+  name: string;
+  value: string;
+  placeholder?: string;
+}) {
+  return (
+    <div>
+      <label className="field-label">{label}</label>
+      <input name={name} defaultValue={value} placeholder={placeholder} className="field" />
+    </div>
+  );
+}
+
+function Area({ label, name, value }: { label: string; name: string; value: string }) {
+  return (
+    <div style={{ gridColumn: "1 / -1" }}>
+      <label className="field-label">{label}</label>
+      <textarea name={name} rows={4} defaultValue={value} className="field" />
+    </div>
+  );
+}
+
+const panel: CSSProperties = {
+  background: "#fff",
+  border: "1px solid #e6dcc6",
+  borderRadius: 16,
+  padding: 22,
+};
+
+const title: CSSProperties = {
+  margin: "0 0 16px",
+  fontSize: 20,
+  color: "#26201a",
+};
+
+const submitButton: CSSProperties = {
+  justifySelf: "start",
+  border: "none",
+  background: "#13324F",
+  color: "#fff",
+  fontWeight: 800,
+  fontSize: 14.5,
+  padding: "13px 22px",
+  borderRadius: 10,
+  cursor: "pointer",
+};

src/app/backend/promotions/page.tsx

@@ -57,7 +57,7 @@ export default async function PromotionsPage() {
         </div>
       )}
 
-      <div className="grid grid-3" style={{ gap: 18, width: "100%", maxWidth: 1096 }}>
+      <div className="grid grid-3" style={{ gap: 16, width: "100%", maxWidth: 960 }}>
         {ordered.map((p) => {
           const isPending = p.status === "pending";
           return (
@@ -75,7 +75,7 @@ export default async function PromotionsPage() {
               <div
                 style={{
                   position: "relative",
-                  aspectRatio: "1 / 1",
+                  aspectRatio: "4 / 3",
                   background: isPending ? STRIPE_COOL : STRIPE_WARM,
                   overflow: "hidden",
                   display: "flex",
@@ -105,14 +105,14 @@ export default async function PromotionsPage() {
                   {isPending ? "En attente" : "En ligne"}
                 </span>
               </div>
-              <div style={{ padding: "15px 16px 16px", display: "flex", flexDirection: "column", flex: 1 }}>
-                <h3 className="font-display" style={{ fontWeight: 700, fontSize: 16.5, margin: "0 0 4px", color: "#26201a" }}>
+              <div style={{ padding: "13px 14px 14px", display: "flex", flexDirection: "column", flex: 1 }}>
+                <h3 className="font-display" style={{ fontWeight: 700, fontSize: 15.5, margin: "0 0 4px", color: "#26201a" }}>
                   {p.title}
                 </h3>
                 <div style={{ fontSize: 12.5, color: "#9a6638", fontWeight: 600, marginBottom: 8 }}>
                   {p.memberName}
                 </div>
-                <p style={{ margin: "0 0 14px", fontSize: 13, color: "#8c8068", lineHeight: 1.5, flex: 1 }}>
+                <p style={{ margin: "0 0 12px", fontSize: 12.5, color: "#8c8068", lineHeight: 1.45, flex: 1 }}>
                   {p.text}
                 </p>
 

src/app/backend/rencontres/page.tsx

@@ -0,0 +1,290 @@
+import { redirect } from "next/navigation";
+import type { CSSProperties } from "react";
+import { asc, desc, eq, sql } from "drizzle-orm";
+import { auth } from "@/auth";
+import { db } from "@/db";
+import { meetingRegistrations, meetings, pastMeetingPhotos, pastMeetings } from "@/db/schema";
+import { ImageField } from "@/components/ImageField";
+import { can } from "@/lib/rbac";
+import {
+  addPastMeetingPhoto,
+  createMeeting,
+  createPastMeeting,
+  deleteMeeting,
+  deletePastMeeting,
+  deletePastMeetingPhoto,
+  updateMeeting,
+  updatePastMeeting,
+} from "../actions";
+
+export const dynamic = "force-dynamic";
+
+function dateTimeValue(date: Date) {
+  const local = new Date(date);
+  local.setMinutes(local.getMinutes() - local.getTimezoneOffset());
+  return local.toISOString().slice(0, 16);
+}
+
+function dateValue(date: Date) {
+  const local = new Date(date);
+  local.setMinutes(local.getMinutes() - local.getTimezoneOffset());
+  return local.toISOString().slice(0, 10);
+}
+
+export default async function RencontresAdminPage() {
+  const session = await auth();
+  if (!can(session?.user.role, "manageMeetings")) redirect("/backend");
+
+  const rows = await db
+    .select({
+      id: meetings.id,
+      title: meetings.title,
+      startsAt: meetings.startsAt,
+      location: meetings.location,
+      description: meetings.description,
+      capacity: meetings.capacity,
+      imageUrl: meetings.imageUrl,
+      registered: sql<number>`count(${meetingRegistrations.id})`,
+    })
+    .from(meetings)
+    .leftJoin(meetingRegistrations, eq(meetingRegistrations.meetingId, meetings.id))
+    .groupBy(meetings.id)
+    .orderBy(desc(meetings.startsAt));
+
+  const archives = await db.select().from(pastMeetings).orderBy(desc(pastMeetings.eventDate));
+  const photos = await db
+    .select()
+    .from(pastMeetingPhotos)
+    .orderBy(asc(pastMeetingPhotos.position), asc(pastMeetingPhotos.id));
+
+  const photosByPast = new Map<number, typeof photos>();
+  for (const photo of photos) {
+    photosByPast.set(photo.pastMeetingId, [...(photosByPast.get(photo.pastMeetingId) ?? []), photo]);
+  }
+
+  return (
+    <div style={{ display: "grid", gap: 28 }}>
+      <section style={{ background: "#fff", border: "1px solid #e6dcc6", borderRadius: 16, padding: 22 }}>
+        <h2 className="font-display" style={{ margin: "0 0 16px", fontSize: 20, color: "#26201a" }}>
+          Nouvelle rencontre
+        </h2>
+        <form action={createMeeting} className="grid grid-2" style={{ gap: 16 }}>
+          <div>
+            <label className="field-label">Titre</label>
+            <input name="title" className="field" required />
+          </div>
+          <div>
+            <label className="field-label">Date et heure</label>
+            <input name="startsAt" type="datetime-local" className="field" required />
+          </div>
+          <div>
+            <label className="field-label">Lieu</label>
+            <input name="location" className="field" />
+          </div>
+          <div>
+            <label className="field-label">Places</label>
+            <input name="capacity" type="number" min="1" defaultValue={30} className="field" />
+          </div>
+          <div style={{ gridColumn: "1 / -1" }}>
+            <label className="field-label">Description</label>
+            <textarea name="description" rows={3} className="field" />
+          </div>
+          <div style={{ gridColumn: "1 / -1" }}>
+            <ImageField name="imageUrl" label="Image" height={160} />
+          </div>
+          <button type="submit" style={primaryButton}>
+            Ajouter la rencontre
+          </button>
+        </form>
+      </section>
+
+      <section>
+        <div style={sectionTitle}>Rencontres à venir / publiées</div>
+        <div className="grid grid-3" style={{ gap: 18 }}>
+          {rows.map((meeting) => (
+            <article key={meeting.id} style={cardStyle}>
+              <form action={updateMeeting} style={{ display: "grid", gap: 12 }}>
+                <input type="hidden" name="id" value={meeting.id} />
+                <ImageField name="imageUrl" label="Image" defaultValue={meeting.imageUrl ?? ""} height={120} />
+                <div>
+                  <label className="field-label">Titre</label>
+                  <input name="title" defaultValue={meeting.title} className="field" required />
+                </div>
+                <div>
+                  <label className="field-label">Date et heure</label>
+                  <input name="startsAt" type="datetime-local" defaultValue={dateTimeValue(meeting.startsAt)} className="field" required />
+                </div>
+                <div>
+                  <label className="field-label">Lieu</label>
+                  <input name="location" defaultValue={meeting.location ?? ""} className="field" />
+                </div>
+                <div>
+                  <label className="field-label">Places</label>
+                  <input name="capacity" type="number" min="1" defaultValue={meeting.capacity} className="field" />
+                </div>
+                <div>
+                  <label className="field-label">Description</label>
+                  <textarea name="description" rows={3} defaultValue={meeting.description ?? ""} className="field" />
+                </div>
+                <div style={{ fontSize: 12.5, color: "#6c6150", fontWeight: 800 }}>
+                  {Number(meeting.registered)} inscrit(s)
+                </div>
+                <button type="submit" style={primaryButton}>Enregistrer</button>
+              </form>
+              <form action={deleteMeeting} style={{ marginTop: 8 }}>
+                <input type="hidden" name="id" value={meeting.id} />
+                <button type="submit" style={dangerButton}>Supprimer</button>
+              </form>
+            </article>
+          ))}
+        </div>
+      </section>
+
+      <section style={{ background: "#fff", border: "1px solid #e6dcc6", borderRadius: 16, padding: 22 }}>
+        <h2 className="font-display" style={{ margin: "0 0 16px", fontSize: 20, color: "#26201a" }}>
+          Nouvelle rencontre passée
+        </h2>
+        <form action={createPastMeeting} className="grid grid-2" style={{ gap: 16 }}>
+          <div>
+            <label className="field-label">Titre</label>
+            <input name="title" className="field" required />
+          </div>
+          <div>
+            <label className="field-label">Date</label>
+            <input name="eventDate" type="date" className="field" required />
+          </div>
+          <div>
+            <label className="field-label">Lieu</label>
+            <input name="location" className="field" />
+          </div>
+          <div>
+            <label className="field-label">Lier une rencontre</label>
+            <select name="meetingId" className="field" defaultValue="">
+              <option value="">Aucune</option>
+              {rows.map((meeting) => (
+                <option key={meeting.id} value={meeting.id}>
+                  {meeting.title}
+                </option>
+              ))}
+            </select>
+          </div>
+          <div style={{ gridColumn: "1 / -1" }}>
+            <label className="field-label">Description</label>
+            <textarea name="description" rows={3} className="field" />
+          </div>
+          <div style={{ gridColumn: "1 / -1" }}>
+            <label className="field-label">Participants manuels (un par ligne, si non liée)</label>
+            <textarea name="participants" rows={3} className="field" />
+          </div>
+          <button type="submit" style={primaryButton}>Publier l'archive</button>
+        </form>
+      </section>
+
+      <section>
+        <div style={sectionTitle}>Rencontres passées</div>
+        <div className="grid grid-3" style={{ gap: 18 }}>
+          {archives.map((archive) => (
+            <article key={archive.id} style={cardStyle}>
+              <form action={updatePastMeeting} style={{ display: "grid", gap: 12 }}>
+                <input type="hidden" name="id" value={archive.id} />
+                <div>
+                  <label className="field-label">Titre</label>
+                  <input name="title" defaultValue={archive.title} className="field" required />
+                </div>
+                <div>
+                  <label className="field-label">Date</label>
+                  <input name="eventDate" type="date" defaultValue={dateValue(archive.eventDate)} className="field" required />
+                </div>
+                <div>
+                  <label className="field-label">Lieu</label>
+                  <input name="location" defaultValue={archive.location ?? ""} className="field" />
+                </div>
+                <div>
+                  <label className="field-label">Rencontre liée</label>
+                  <select name="meetingId" className="field" defaultValue={archive.meetingId ?? ""}>
+                    <option value="">Aucune</option>
+                    {rows.map((meeting) => (
+                      <option key={meeting.id} value={meeting.id}>
+                        {meeting.title}
+                      </option>
+                    ))}
+                  </select>
+                </div>
+                <div>
+                  <label className="field-label">Description</label>
+                  <textarea name="description" rows={3} defaultValue={archive.description ?? ""} className="field" />
+                </div>
+                <div>
+                  <label className="field-label">Participants manuels</label>
+                  <textarea name="participants" rows={3} defaultValue={archive.participants ?? ""} className="field" />
+                </div>
+                <button type="submit" style={primaryButton}>Enregistrer</button>
+              </form>
+
+              <div style={{ marginTop: 14, borderTop: "1px solid #f0e8d6", paddingTop: 14 }}>
+                <form action={addPastMeetingPhoto} style={{ display: "grid", gap: 10 }}>
+                  <input type="hidden" name="pastMeetingId" value={archive.id} />
+                  <ImageField name="imageUrl" label="Ajouter une photo" height={100} />
+                  <input name="caption" className="field" placeholder="Légende" />
+                  <button type="submit" style={primaryButton}>Ajouter la photo</button>
+                </form>
+                <div style={{ display: "grid", gridTemplateColumns: "repeat(4, 1fr)", gap: 8, marginTop: 12 }}>
+                  {(photosByPast.get(archive.id) ?? []).map((photo) => (
+                    <form key={photo.id} action={deletePastMeetingPhoto}>
+                      <input type="hidden" name="id" value={photo.id} />
+                      <button type="submit" title="Supprimer" style={{ width: "100%", aspectRatio: "1 / 1", border: "1px solid #e6dcc6", borderRadius: 8, cursor: "pointer", background: `center/cover no-repeat url(${photo.imageUrl})` }} />
+                    </form>
+                  ))}
+                </div>
+              </div>
+
+              <form action={deletePastMeeting} style={{ marginTop: 12 }}>
+                <input type="hidden" name="id" value={archive.id} />
+                <button type="submit" style={dangerButton}>Supprimer l'archive</button>
+              </form>
+            </article>
+          ))}
+        </div>
+      </section>
+    </div>
+  );
+}
+
+const cardStyle: CSSProperties = {
+  background: "#fff",
+  border: "1px solid #e6dcc6",
+  borderRadius: 12,
+  padding: 16,
+};
+
+const sectionTitle: CSSProperties = {
+  fontSize: 12.5,
+  letterSpacing: "0.08em",
+  textTransform: "uppercase" as const,
+  color: "#9a8d72",
+  fontWeight: 800,
+  marginBottom: 12,
+};
+
+const primaryButton: CSSProperties = {
+  border: "none",
+  background: "#13324F",
+  color: "#fff",
+  fontWeight: 800,
+  fontSize: 13.5,
+  padding: "11px 16px",
+  borderRadius: 10,
+  cursor: "pointer",
+};
+
+const dangerButton: CSSProperties = {
+  width: "100%",
+  border: "1px solid #e0c3bb",
+  background: "#fff",
+  color: "#d8472b",
+  fontWeight: 800,
+  fontSize: 13,
+  padding: "10px 14px",
+  borderRadius: 10,
+  cursor: "pointer",
+};