feat(unionflow): ajout Spec-Kit, constitution, mission mutuelles

- Config Spec-Kit pour Spec-Driven Development
- CONSTITUTION.md + .specify/memory/constitution.md
- Commandes Cursor /speckit.*, règles projet
- Mission: associations + mutuelles d'épargne et de financement
- .gitignore: versionner config spec-kit unionflow

Made-with: Cursor

unionflow/unionflow-mobile-apps/lib/features/admin/bloc/admin_users_bloc.dart

@@ -0,0 +1,89 @@
+library admin_users_bloc;
+
+import 'package:flutter_bloc/flutter_bloc.dart';
+import '../data/models/admin_user_model.dart';
+import '../data/repositories/admin_user_repository.dart';
+import 'admin_users_event.dart';
+import 'admin_users_state.dart';
+
+class AdminUsersBloc extends Bloc<AdminUsersEvent, AdminUsersState> {
+  final AdminUserRepository _repository;
+
+  AdminUsersBloc(this._repository) : super(AdminUsersInitial()) {
+    on<AdminUsersLoadRequested>(_onLoadRequested);
+    on<AdminUserDetailRequested>(_onDetailRequested);
+    on<AdminUserDetailWithRolesRequested>(_onDetailWithRolesRequested);
+    on<AdminUserRolesUpdateRequested>(_onRolesUpdateRequested);
+    on<AdminRolesLoadRequested>(_onRolesLoadRequested);
+  }
+
+  Future<void> _onLoadRequested(AdminUsersLoadRequested e, Emitter<AdminUsersState> emit) async {
+    emit(AdminUsersLoading());
+    try {
+      final result = await _repository.search(
+        page: e.page ?? 0,
+        size: e.size ?? 20,
+        search: e.search,
+      );
+      emit(AdminUsersLoaded(
+        users: result.users,
+        totalCount: result.totalCount,
+        currentPage: result.currentPage,
+        pageSize: result.pageSize,
+        totalPages: result.totalPages,
+      ));
+    } catch (err) {
+      emit(AdminUsersError(err.toString()));
+    }
+  }
+
+  Future<void> _onDetailRequested(AdminUserDetailRequested e, Emitter<AdminUsersState> emit) async {
+    emit(AdminUsersLoading());
+    try {
+      final user = await _repository.getById(e.userId);
+      if (user == null) {
+        emit(AdminUsersError('Utilisateur non trouvé'));
+        return;
+      }
+      final roles = await _repository.getUserRoles(e.userId);
+      emit(AdminUserDetailLoaded(user: user, userRoles: roles));
+    } catch (err) {
+      emit(AdminUsersError(err.toString()));
+    }
+  }
+
+  Future<void> _onDetailWithRolesRequested(AdminUserDetailWithRolesRequested e, Emitter<AdminUsersState> emit) async {
+    emit(AdminUsersLoading());
+    try {
+      final user = await _repository.getById(e.userId);
+      if (user == null) {
+        emit(AdminUsersError('Utilisateur non trouvé'));
+        return;
+      }
+      final userRoles = await _repository.getUserRoles(e.userId);
+      final allRoles = await _repository.getRealmRoles();
+      emit(AdminUserDetailLoaded(user: user, userRoles: userRoles, allRoles: allRoles));
+    } catch (err) {
+      emit(AdminUsersError(err.toString()));
+    }
+  }
+
+  Future<void> _onRolesUpdateRequested(AdminUserRolesUpdateRequested e, Emitter<AdminUsersState> emit) async {
+    try {
+      await _repository.setUserRoles(e.userId, e.roleNames);
+      emit(AdminUserRolesUpdated());
+      add(AdminUserDetailWithRolesRequested(e.userId));
+    } catch (err) {
+      emit(AdminUsersError(err.toString()));
+    }
+  }
+
+  Future<void> _onRolesLoadRequested(AdminRolesLoadRequested e, Emitter<AdminUsersState> emit) async {
+    try {
+      final roles = await _repository.getRealmRoles();
+      emit(AdminRolesLoaded(roles));
+    } catch (err) {
+      emit(AdminUsersError(err.toString()));
+    }
+  }
+}

unionflow/unionflow-mobile-apps/lib/features/admin/bloc/admin_users_event.dart

@@ -0,0 +1,29 @@
+library admin_users_event;
+
+abstract class AdminUsersEvent {}
+
+class AdminUsersLoadRequested extends AdminUsersEvent {
+  final int page;
+  final int size;
+  final String? search;
+  AdminUsersLoadRequested({this.page = 0, this.size = 20, this.search});
+}
+
+class AdminUserDetailRequested extends AdminUsersEvent {
+  final String userId;
+  AdminUserDetailRequested(this.userId);
+}
+
+/// Charge détail utilisateur + liste complète des rôles (pour édition)
+class AdminUserDetailWithRolesRequested extends AdminUsersEvent {
+  final String userId;
+  AdminUserDetailWithRolesRequested(this.userId);
+}
+
+class AdminUserRolesUpdateRequested extends AdminUsersEvent {
+  final String userId;
+  final List<String> roleNames;
+  AdminUserRolesUpdateRequested(this.userId, this.roleNames);
+}
+
+class AdminRolesLoadRequested extends AdminUsersEvent {}

unionflow/unionflow-mobile-apps/lib/features/admin/bloc/admin_users_state.dart

@@ -0,0 +1,47 @@
+library admin_users_state;
+
+import '../data/models/admin_user_model.dart';
+
+abstract class AdminUsersState {}
+
+class AdminUsersInitial extends AdminUsersState {}
+
+class AdminUsersLoading extends AdminUsersState {}
+
+class AdminUsersLoaded extends AdminUsersState {
+  final List<AdminUserModel> users;
+  final int totalCount;
+  final int currentPage;
+  final int pageSize;
+  final int totalPages;
+  AdminUsersLoaded({
+    required this.users,
+    required this.totalCount,
+    required this.currentPage,
+    required this.pageSize,
+    required this.totalPages,
+  });
+}
+
+class AdminUsersError extends AdminUsersState {
+  final String message;
+  AdminUsersError(this.message);
+}
+
+class AdminUserDetailLoaded extends AdminUsersState {
+  final AdminUserModel user;
+  final List<AdminRoleModel> userRoles;
+  final List<AdminRoleModel> allRoles;
+  AdminUserDetailLoaded({
+    required this.user,
+    required this.userRoles,
+    this.allRoles = const [],
+  });
+}
+
+class AdminRolesLoaded extends AdminUsersState {
+  final List<AdminRoleModel> roles;
+  AdminRolesLoaded(this.roles);
+}
+
+class AdminUserRolesUpdated extends AdminUsersState {}

unionflow/unionflow-mobile-apps/lib/features/admin/data/models/admin_user_model.dart

@@ -0,0 +1,66 @@
+/// Modèle pour un utilisateur admin (Keycloak) - aligné sur l'API /api/admin/users
+library admin_user_model;
+
+class AdminUserModel {
+  final String id;
+  final String? username;
+  final String? email;
+  final String? prenom;
+  final String? nom;
+  final bool? enabled;
+  final List<String>? realmRoles;
+
+  AdminUserModel({
+    required this.id,
+    this.username,
+    this.email,
+    this.prenom,
+    this.nom,
+    this.enabled,
+    this.realmRoles,
+  });
+
+  String get displayName {
+    if (prenom != null && nom != null) return '$prenom $nom';
+    if (prenom != null) return prenom!;
+    if (nom != null) return nom!;
+    return username ?? email ?? id;
+  }
+
+  factory AdminUserModel.fromJson(Map<String, dynamic> json) {
+    final roles = json['realmRoles'] as List<dynamic>?;
+    return AdminUserModel(
+      id: json['id'] as String? ?? '',
+      username: json['username'] as String?,
+      email: json['email'] as String?,
+      prenom: json['prenom'] as String?,
+      nom: json['nom'] as String?,
+      enabled: json['enabled'] as bool?,
+      realmRoles: roles?.map((e) => e is Map ? (e['name'] as String?) ?? e.toString() : e.toString()).toList(),
+    );
+  }
+
+  Map<String, dynamic> toJson() => {
+        'id': id,
+        'username': username,
+        'email': email,
+        'prenom': prenom,
+        'nom': nom,
+        'enabled': enabled,
+        'realmRoles': realmRoles,
+      };
+}
+
+class AdminRoleModel {
+  final String id;
+  final String name;
+  final String? description;
+
+  AdminRoleModel({required this.id, required this.name, this.description});
+
+  factory AdminRoleModel.fromJson(Map<String, dynamic> json) => AdminRoleModel(
+        id: json['id'] as String? ?? '',
+        name: json['name'] as String? ?? '',
+        description: json['description'] as String?,
+      );
+}

unionflow/unionflow-mobile-apps/lib/features/admin/data/repositories/admin_user_repository.dart

@@ -0,0 +1,85 @@
+/// Repository pour la gestion des utilisateurs admin (API /api/admin/users)
+library admin_user_repository;
+
+import 'package:dio/dio.dart';
+import '../models/admin_user_model.dart';
+
+abstract class AdminUserRepository {
+  Future<AdminUserSearchResult> search({int page = 0, int size = 20, String? search});
+  Future<AdminUserModel?> getById(String id);
+  Future<List<AdminRoleModel>> getRealmRoles();
+  Future<List<AdminRoleModel>> getUserRoles(String userId);
+  Future<void> setUserRoles(String userId, List<String> roleNames);
+}
+
+class AdminUserSearchResult {
+  final List<AdminUserModel> users;
+  final int totalCount;
+  final int currentPage;
+  final int pageSize;
+  final int totalPages;
+
+  AdminUserSearchResult({
+    required this.users,
+    required this.totalCount,
+    required this.currentPage,
+    required this.pageSize,
+    required this.totalPages,
+  });
+}
+
+class AdminUserRepositoryImpl implements AdminUserRepository {
+  final Dio _dio;
+  static const String _base = '/api/admin/users';
+
+  AdminUserRepositoryImpl(this._dio);
+
+  @override
+  Future<AdminUserSearchResult> search({int page = 0, int size = 20, String? search}) async {
+    final query = <String, dynamic>{'page': page, 'size': size};
+    if (search != null && search.isNotEmpty) query['search'] = search;
+    final response = await _dio.get(_base, queryParameters: query);
+    if (response.statusCode != 200) throw Exception('Erreur ${response.statusCode}');
+    final data = response.data as Map<String, dynamic>;
+    final list = data['users'] as List<dynamic>? ?? [];
+    return AdminUserSearchResult(
+      users: list.map((e) => AdminUserModel.fromJson(e as Map<String, dynamic>)).toList(),
+      totalCount: (data['totalCount'] as num?)?.toInt() ?? 0,
+      currentPage: (data['currentPage'] as num?)?.toInt() ?? 0,
+      pageSize: (data['pageSize'] as num?)?.toInt() ?? size,
+      totalPages: (data['totalPages'] as num?)?.toInt() ?? 0,
+    );
+  }
+
+  @override
+  Future<AdminUserModel?> getById(String id) async {
+    final response = await _dio.get('$_base/$id');
+    if (response.statusCode == 200) {
+      return AdminUserModel.fromJson(response.data as Map<String, dynamic>);
+    }
+    if (response.statusCode == 404) return null;
+    throw Exception('Erreur ${response.statusCode}');
+  }
+
+  @override
+  Future<List<AdminRoleModel>> getRealmRoles() async {
+    final response = await _dio.get('$_base/roles');
+    if (response.statusCode != 200) return [];
+    final list = response.data as List<dynamic>? ?? [];
+    return list.map((e) => AdminRoleModel.fromJson(e as Map<String, dynamic>)).toList();
+  }
+
+  @override
+  Future<List<AdminRoleModel>> getUserRoles(String userId) async {
+    final response = await _dio.get('$_base/$userId/roles');
+    if (response.statusCode != 200) return [];
+    final list = response.data as List<dynamic>? ?? [];
+    return list.map((e) => AdminRoleModel.fromJson(e as Map<String, dynamic>)).toList();
+  }
+
+  @override
+  Future<void> setUserRoles(String userId, List<String> roleNames) async {
+    final response = await _dio.put('$_base/$userId/roles', data: roleNames);
+    if (response.statusCode != 200) throw Exception('Erreur ${response.statusCode}');
+  }
+}

unionflow/unionflow-mobile-apps/lib/features/admin/di/admin_di.dart

@@ -0,0 +1,15 @@
+library admin_di;
+
+import 'package:get_it/get_it.dart';
+import 'package:dio/dio.dart';
+import '../bloc/admin_users_bloc.dart';
+import '../data/repositories/admin_user_repository.dart';
+
+void registerAdminDependencies(GetIt getIt) {
+  getIt.registerLazySingleton<AdminUserRepository>(
+    () => AdminUserRepositoryImpl(getIt<Dio>()),
+  );
+  getIt.registerFactory<AdminUsersBloc>(
+    () => AdminUsersBloc(getIt<AdminUserRepository>()),
+  );
+}

unionflow/unionflow-mobile-apps/lib/features/admin/presentation/pages/user_management_detail_page.dart

@@ -0,0 +1,153 @@
+import 'package:flutter/material.dart';
+import 'package:flutter_bloc/flutter_bloc.dart';
+import '../../bloc/admin_users_bloc.dart';
+import '../../bloc/admin_users_event.dart';
+import '../../bloc/admin_users_state.dart';
+import '../../data/models/admin_user_model.dart';
+
+/// Page détail d'un utilisateur + édition des rôles
+class UserManagementDetailPage extends StatelessWidget {
+  final String userId;
+
+  const UserManagementDetailPage({super.key, required this.userId});
+
+  @override
+  Widget build(BuildContext context) {
+    return Scaffold(
+      appBar: AppBar(
+        title: const Text('Détail utilisateur'),
+        backgroundColor: const Color(0xFF0984E3),
+        foregroundColor: Colors.white,
+      ),
+      body: BlocBuilder<AdminUsersBloc, AdminUsersState>(
+        builder: (context, state) {
+          if (state is AdminUsersLoading) {
+            return const Center(child: CircularProgressIndicator());
+          }
+          if (state is AdminUsersError) {
+            return Center(
+              child: Column(
+                mainAxisAlignment: MainAxisAlignment.center,
+                children: [
+                  Text(state.message),
+                  const SizedBox(height: 16),
+                  ElevatedButton(
+                    onPressed: () => context.read<AdminUsersBloc>().add(AdminUserDetailRequested(userId)),
+                    child: const Text('Réessayer'),
+                  ),
+                ],
+              ),
+            );
+          }
+          if (state is AdminUserDetailLoaded) {
+            return _UserDetailContent(
+              user: state.user,
+              userRoles: state.userRoles,
+              allRoles: state.allRoles,
+              userId: userId,
+            );
+          }
+          return const SizedBox();
+        },
+      ),
+    );
+  }
+}
+
+class _UserDetailContent extends StatefulWidget {
+  final AdminUserModel user;
+  final List<AdminRoleModel> userRoles;
+  final List<AdminRoleModel> allRoles;
+  final String userId;
+
+  const _UserDetailContent({
+    required this.user,
+    required this.userRoles,
+    required this.allRoles,
+    required this.userId,
+  });
+
+  @override
+  State<_UserDetailContent> createState() => _UserDetailContentState();
+}
+
+class _UserDetailContentState extends State<_UserDetailContent> {
+  late Set<String> _selectedRoleNames;
+
+  @override
+  void initState() {
+    super.initState();
+    _selectedRoleNames = widget.userRoles.map((r) => r.name).toSet();
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    return BlocListener<AdminUsersBloc, AdminUsersState>(
+      listener: (context, state) {
+        if (state is AdminUserRolesUpdated) {
+          ScaffoldMessenger.of(context).showSnackBar(
+            const SnackBar(content: Text('Rôles mis à jour')),
+          );
+        }
+      },
+      child: SingleChildScrollView(
+        padding: const EdgeInsets.all(16),
+        child: Column(
+          crossAxisAlignment: CrossAxisAlignment.start,
+          children: [
+            Card(
+              child: Padding(
+                padding: const EdgeInsets.all(16),
+                child: Column(
+                  crossAxisAlignment: CrossAxisAlignment.start,
+                  children: [
+                    Text(widget.user.displayName, style: Theme.of(context).textTheme.titleLarge),
+                    const SizedBox(height: 8),
+                    if (widget.user.email != null) Text('Email: ${widget.user.email}'),
+                    if (widget.user.username != null) Text('Username: ${widget.user.username}'),
+                    Text('Actif: ${widget.user.enabled == true ? "Oui" : "Non"}'),
+                  ],
+                ),
+              ),
+            ),
+            const SizedBox(height: 16),
+            const Text('Rôles (cochez pour attribuer)', style: TextStyle(fontWeight: FontWeight.bold)),
+            const SizedBox(height: 8),
+            ...widget.allRoles.map((role) {
+              final selected = _selectedRoleNames.contains(role.name);
+              return CheckboxListTile(
+                title: Text(role.name),
+                value: selected,
+                onChanged: (v) {
+                  setState(() {
+                    if (v == true) {
+                      _selectedRoleNames.add(role.name);
+                    } else {
+                      _selectedRoleNames.remove(role.name);
+                    }
+                  });
+                },
+              );
+            }),
+            const SizedBox(height: 24),
+            SizedBox(
+              width: double.infinity,
+              child: ElevatedButton(
+                style: ElevatedButton.styleFrom(
+                  backgroundColor: const Color(0xFF0984E3),
+                  padding: const EdgeInsets.symmetric(vertical: 14),
+                ),
+                onPressed: () {
+                  context.read<AdminUsersBloc>().add(
+                        AdminUserRolesUpdateRequested(widget.userId, _selectedRoleNames.toList()),
+                      );
+                },
+                child: const Text('Enregistrer les rôles'),
+              ),
+            ),
+          ],
+        ),
+      ),
+    );
+  }
+}

unionflow/unionflow-mobile-apps/lib/features/admin/presentation/pages/user_management_page.dart

@@ -0,0 +1,180 @@
+import 'package:flutter/material.dart';
+import 'package:flutter_bloc/flutter_bloc.dart';
+import 'package:get_it/get_it.dart';
+import '../../bloc/admin_users_bloc.dart';
+import '../../bloc/admin_users_event.dart';
+import '../../bloc/admin_users_state.dart';
+import '../../data/models/admin_user_model.dart';
+import 'user_management_detail_page.dart';
+
+/// Page de gestion des utilisateurs (SUPER_ADMIN) - liste paginée
+class UserManagementPage extends StatelessWidget {
+  const UserManagementPage({super.key});
+
+  @override
+  Widget build(BuildContext context) {
+    return BlocProvider(
+      create: (_) => GetIt.I<AdminUsersBloc>()..add(AdminUsersLoadRequested()),
+      child: const _UserManagementView(),
+    );
+  }
+}
+
+class _UserManagementView extends StatefulWidget {
+  const _UserManagementView();
+
+  @override
+  State<_UserManagementView> createState() => _UserManagementViewState();
+}
+
+class _UserManagementViewState extends State<_UserManagementView> {
+  final _searchController = TextEditingController();
+
+  @override
+  void dispose() {
+    _searchController.dispose();
+    super.dispose();
+  }
+
+  @override
+  Widget build(BuildContext context) {
+    return Scaffold(
+      appBar: AppBar(
+        title: const Text('Gestion des utilisateurs'),
+        backgroundColor: const Color(0xFF0984E3),
+        foregroundColor: Colors.white,
+        actions: [
+          IconButton(
+            icon: const Icon(Icons.refresh),
+            onPressed: () => context.read<AdminUsersBloc>().add(AdminUsersLoadRequested()),
+          ),
+        ],
+      ),
+      body: Column(
+        children: [
+          Padding(
+            padding: const EdgeInsets.all(12),
+            child: TextField(
+              controller: _searchController,
+              decoration: InputDecoration(
+                hintText: 'Rechercher (email, nom...)',
+                prefixIcon: const Icon(Icons.search),
+                border: OutlineInputBorder(borderRadius: BorderRadius.circular(12)),
+                filled: true,
+              ),
+              onSubmitted: (v) => context.read<AdminUsersBloc>().add(
+                    AdminUsersLoadRequested(search: v.isEmpty ? null : v),
+                  ),
+            ),
+          ),
+          Expanded(
+            child: BlocBuilder<AdminUsersBloc, AdminUsersState>(
+              builder: (context, state) {
+                if (state is AdminUsersLoading) {
+                  return const Center(child: CircularProgressIndicator());
+                }
+                if (state is AdminUsersError) {
+                  return Center(
+                    child: Column(
+                      mainAxisAlignment: MainAxisAlignment.center,
+                      children: [
+                        Text(state.message, textAlign: TextAlign.center),
+                        const SizedBox(height: 16),
+                        ElevatedButton(
+                          onPressed: () => context.read<AdminUsersBloc>().add(AdminUsersLoadRequested()),
+                          child: const Text('Réessayer'),
+                        ),
+                      ],
+                    ),
+                  );
+                }
+                if (state is AdminUsersLoaded) {
+                  if (state.users.isEmpty) {
+                    return const Center(child: Text('Aucun utilisateur'));
+                  }
+                  return RefreshIndicator(
+                    onRefresh: () async {
+                      context.read<AdminUsersBloc>().add(AdminUsersLoadRequested(
+                            search: _searchController.text.isEmpty ? null : _searchController.text,
+                          ));
+                    },
+                    child: ListView.builder(
+                      padding: const EdgeInsets.symmetric(horizontal: 12),
+                      itemCount: state.users.length + 1,
+                      itemBuilder: (context, i) {
+                        if (i == state.users.length) {
+                          return _buildPagination(context, state);
+                        }
+                        return _buildUserTile(context, state.users[i]);
+                      },
+                    ),
+                  );
+                }
+                return const SizedBox();
+              },
+            ),
+          ),
+        ],
+      ),
+    );
+  }
+
+  Widget _buildUserTile(BuildContext context, AdminUserModel user) {
+    return Card(
+      margin: const EdgeInsets.only(bottom: 8),
+      child: ListTile(
+        leading: CircleAvatar(
+          backgroundColor: const Color(0xFF0984E3),
+          child: Text(
+            (user.prenom?.substring(0, 1) ?? user.username?.substring(0, 1) ?? '?').toUpperCase(),
+            style: const TextStyle(color: Colors.white),
+          ),
+        ),
+        title: Text(user.displayName),
+        subtitle: Text(user.email ?? user.username ?? user.id),
+        trailing: const Icon(Icons.chevron_right),
+        onTap: () => Navigator.of(context).push(
+          MaterialPageRoute(
+            builder: (context) => BlocProvider(
+              create: (_) => GetIt.I<AdminUsersBloc>()..add(AdminUserDetailWithRolesRequested(user.id)),
+              child: UserManagementDetailPage(userId: user.id),
+            ),
+          ),
+        ),
+      ),
+    );
+  }
+
+  Widget _buildPagination(BuildContext context, AdminUsersLoaded state) {
+    if (state.totalPages <= 1) return const SizedBox(height: 24);
+    return Padding(
+      padding: const EdgeInsets.all(16),
+      child: Row(
+        mainAxisAlignment: MainAxisAlignment.center,
+        children: [
+          IconButton(
+            icon: const Icon(Icons.arrow_back),
+            onPressed: state.currentPage > 0
+                ? () => context.read<AdminUsersBloc>().add(AdminUsersLoadRequested(
+                      page: state.currentPage - 1,
+                      size: state.pageSize,
+                      search: _searchController.text.isEmpty ? null : _searchController.text,
+                    ))
+                : null,
+          ),
+          Text('${state.currentPage + 1} / ${state.totalPages}'),
+          IconButton(
+            icon: const Icon(Icons.arrow_forward),
+            onPressed: state.currentPage < state.totalPages - 1
+                ? () => context.read<AdminUsersBloc>().add(AdminUsersLoadRequested(
+                      page: state.currentPage + 1,
+                      size: state.pageSize,
+                      search: _searchController.text.isEmpty ? null : _searchController.text,
+                    ))
+                : null,
+          ),
+        ],
+      ),
+    );
+  }
+}