From 6ca91cbd3b3f8d7f74962f1f56ee08979d0e2a5f Mon Sep 17 00:00:00 2001
From: Matthieu <contact@malio.fr>
Date: Fri, 19 Jun 2026 15:53:38 +0200
Subject: [PATCH] feat(core) : add CoreModule, user repository contract,
 notifier contract and enriched user contract

---
 src/Module/Core/CoreModule.php                | 39 +++++++++++++++++++
 .../Repository/UserRepositoryInterface.php    | 23 +++++++++++
 .../Domain/Contract/NotifierInterface.php     | 10 +++++
 src/Shared/Domain/Contract/UserInterface.php  | 19 +++++++++
 tests/Unit/Module/Core/CoreModuleTest.php     | 35 +++++++++++++++++
 .../TimestampableBlamableSubscriberTest.php   | 36 +++++++++++++++++
 6 files changed, 162 insertions(+)
 create mode 100644 src/Module/Core/CoreModule.php
 create mode 100644 src/Module/Core/Domain/Repository/UserRepositoryInterface.php
 create mode 100644 src/Shared/Domain/Contract/NotifierInterface.php
 create mode 100644 tests/Unit/Module/Core/CoreModuleTest.php

diff --git a/src/Module/Core/CoreModule.php b/src/Module/Core/CoreModule.php
new file mode 100644
index 0000000..fde5724
--- /dev/null
+++ b/src/Module/Core/CoreModule.php
@@ -0,0 +1,39 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\Core;
+
+use App\Shared\Domain\Module\ModuleInterface;
+
+final class CoreModule implements ModuleInterface
+{
+    public static function id(): string
+    {
+        return 'core';
+    }
+
+    public static function label(): string
+    {
+        return 'Core';
+    }
+
+    public static function isRequired(): bool
+    {
+        return true;
+    }
+
+    /**
+     * Permissions posées pour le RBAC fin (1.2). Inertes tant que 1.2 n'est pas livré.
+     *
+     * @return list<array{code: string, label: string}>
+     */
+    public static function permissions(): array
+    {
+        return [
+            ['code' => 'core.user.read', 'label' => 'Consulter les utilisateurs'],
+            ['code' => 'core.user.manage', 'label' => 'Gérer les utilisateurs'],
+            ['code' => 'core.notification.read', 'label' => 'Consulter ses notifications'],
+        ];
+    }
+}
diff --git a/src/Module/Core/Domain/Repository/UserRepositoryInterface.php b/src/Module/Core/Domain/Repository/UserRepositoryInterface.php
new file mode 100644
index 0000000..6f45735
--- /dev/null
+++ b/src/Module/Core/Domain/Repository/UserRepositoryInterface.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Module\Core\Domain\Repository;
+
+use App\Shared\Domain\Contract\UserInterface;
+use DateTimeInterface;
+
+interface UserRepositoryInterface
+{
+    /**
+     * @return list<UserInterface>
+     */
+    public function findByRole(string $role): array;
+
+    /**
+     * @return list<UserInterface>
+     */
+    public function findActiveEmployees(DateTimeInterface $date): array;
+
+    public function findOneByUsername(string $username): ?UserInterface;
+}
diff --git a/src/Shared/Domain/Contract/NotifierInterface.php b/src/Shared/Domain/Contract/NotifierInterface.php
new file mode 100644
index 0000000..59872b2
--- /dev/null
+++ b/src/Shared/Domain/Contract/NotifierInterface.php
@@ -0,0 +1,10 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Shared\Domain\Contract;
+
+interface NotifierInterface
+{
+    public function notify(UserInterface $user, string $type, string $title, string $message): void;
+}
diff --git a/src/Shared/Domain/Contract/UserInterface.php b/src/Shared/Domain/Contract/UserInterface.php
index 9879371..8419b27 100644
--- a/src/Shared/Domain/Contract/UserInterface.php
+++ b/src/Shared/Domain/Contract/UserInterface.php
@@ -4,7 +4,26 @@ declare(strict_types=1);
 
 namespace App\Shared\Domain\Contract;
 
+/**
+ * Contrat de LECTURE de l'identité, consommé hors du module Core.
+ * Les écritures (setPassword, setters HR…) restent sur le concret Core\Domain\Entity\User.
+ */
 interface UserInterface
 {
     public function getId(): ?int;
+
+    public function getUserIdentifier(): string;
+
+    public function getUsername(): ?string;
+
+    /** @return list<string> */
+    public function getRoles(): array;
+
+    public function getFirstName(): ?string;
+
+    public function getLastName(): ?string;
+
+    public function getAvatarUrl(): ?string;
+
+    public function getIsEmployee(): bool;
 }
diff --git a/tests/Unit/Module/Core/CoreModuleTest.php b/tests/Unit/Module/Core/CoreModuleTest.php
new file mode 100644
index 0000000..e6a9f11
--- /dev/null
+++ b/tests/Unit/Module/Core/CoreModuleTest.php
@@ -0,0 +1,35 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Tests\Unit\Module\Core;
+
+use App\Module\Core\CoreModule;
+use App\Shared\Domain\Module\ModuleInterface;
+use PHPUnit\Framework\TestCase;
+
+/**
+ * @internal
+ */
+final class CoreModuleTest extends TestCase
+{
+    public function testItIsAModule(): void
+    {
+        self::assertInstanceOf(ModuleInterface::class, new CoreModule());
+    }
+
+    public function testIdentity(): void
+    {
+        self::assertSame('core', CoreModule::id());
+        self::assertTrue(CoreModule::isRequired());
+        self::assertNotSame('', CoreModule::label());
+    }
+
+    public function testPermissionsAreWellFormed(): void
+    {
+        foreach (CoreModule::permissions() as $permission) {
+            self::assertArrayHasKey('code', $permission);
+            self::assertArrayHasKey('label', $permission);
+        }
+    }
+}
diff --git a/tests/Unit/Shared/Doctrine/TimestampableBlamableSubscriberTest.php b/tests/Unit/Shared/Doctrine/TimestampableBlamableSubscriberTest.php
index 669acf5..bac0a42 100644
--- a/tests/Unit/Shared/Doctrine/TimestampableBlamableSubscriberTest.php
+++ b/tests/Unit/Shared/Doctrine/TimestampableBlamableSubscriberTest.php
@@ -79,6 +79,42 @@ final class TimestampableBlamableSubscriberTest extends TestCase
             {
                 return $this->id;
             }
+
+            public function getUserIdentifier(): string
+            {
+                return 'user-'.$this->id;
+            }
+
+            public function getUsername(): ?string
+            {
+                return 'user-'.$this->id;
+            }
+
+            /** @return list<string> */
+            public function getRoles(): array
+            {
+                return ['ROLE_USER'];
+            }
+
+            public function getFirstName(): ?string
+            {
+                return null;
+            }
+
+            public function getLastName(): ?string
+            {
+                return null;
+            }
+
+            public function getAvatarUrl(): ?string
+            {
+                return null;
+            }
+
+            public function getIsEmployee(): bool
+            {
+                return false;
+            }
         };
     }