Sprint 4 : decisions et mandats -- workflow complet + vote integration

Backend: 7 nouveaux endpoints (advance, assign, revoke, create-vote-session),
services enrichis avec creation de sessions de vote, assignation de mandataire
et revocation. 35 nouveaux tests (104 total). Frontend: store mandates, page
cadrage decisions, detail mandats, composants DecisionWorkflow, DecisionCadrage,
DecisionCard, MandateTimeline, MandateCard. Documentation mise a jour.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend/app/routers/mandates.py

@@ -13,12 +13,22 @@ from app.database import get_db
 from app.models.mandate import Mandate, MandateStep
 from app.models.user import DuniterIdentity
 from app.schemas.mandate import (
+    MandateAdvanceOut,
+    MandateAssignRequest,
     MandateCreate,
     MandateOut,
     MandateStepCreate,
     MandateStepOut,
+    MandateUpdate,
 )
+from app.schemas.vote import VoteSessionOut
 from app.services.auth_service import get_current_identity
+from app.services.mandate_service import (
+    advance_mandate,
+    assign_mandatee,
+    create_vote_session_for_step,
+    revoke_mandate,
+)
 
 router = APIRouter()
 
@@ -95,7 +105,7 @@ async def get_mandate(
 @router.put("/{id}", response_model=MandateOut)
 async def update_mandate(
     id: uuid.UUID,
-    payload: MandateCreate,
+    payload: MandateUpdate,
     db: AsyncSession = Depends(get_db),
     identity: DuniterIdentity = Depends(get_current_identity),
 ) -> MandateOut:
@@ -165,3 +175,80 @@ async def list_steps(
     """List all steps for a mandate, ordered by step_order."""
     mandate = await _get_mandate(db, id)
     return [MandateStepOut.model_validate(s) for s in mandate.steps]
+
+
+# ── Workflow routes ────────────────────────────────────────────────────────
+
+
+@router.post("/{id}/advance", response_model=MandateAdvanceOut)
+async def advance_mandate_endpoint(
+    id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    identity: DuniterIdentity = Depends(get_current_identity),
+) -> MandateAdvanceOut:
+    """Advance a mandate to its next step or status."""
+    try:
+        mandate = await advance_mandate(id, db)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc))
+
+    # Reload with steps for complete output
+    mandate = await _get_mandate(db, mandate.id)
+    data = MandateOut.model_validate(mandate).model_dump()
+    data["message"] = f"Mandat avance au statut : {mandate.status}"
+    return MandateAdvanceOut(**data)
+
+
+@router.post("/{id}/assign", response_model=MandateOut)
+async def assign_mandatee_endpoint(
+    id: uuid.UUID,
+    payload: MandateAssignRequest,
+    db: AsyncSession = Depends(get_db),
+    identity: DuniterIdentity = Depends(get_current_identity),
+) -> MandateOut:
+    """Assign a mandatee to a mandate."""
+    try:
+        mandate = await assign_mandatee(id, payload.mandatee_id, db)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc))
+
+    # Reload with steps
+    mandate = await _get_mandate(db, mandate.id)
+    return MandateOut.model_validate(mandate)
+
+
+@router.post("/{id}/revoke", response_model=MandateOut)
+async def revoke_mandate_endpoint(
+    id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    identity: DuniterIdentity = Depends(get_current_identity),
+) -> MandateOut:
+    """Revoke an active mandate."""
+    try:
+        mandate = await revoke_mandate(id, db)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc))
+
+    # Reload with steps
+    mandate = await _get_mandate(db, mandate.id)
+    return MandateOut.model_validate(mandate)
+
+
+@router.post(
+    "/{id}/steps/{step_id}/create-vote-session",
+    response_model=VoteSessionOut,
+    status_code=status.HTTP_201_CREATED,
+)
+async def create_vote_session_for_step_endpoint(
+    id: uuid.UUID,
+    step_id: uuid.UUID,
+    db: AsyncSession = Depends(get_db),
+    identity: DuniterIdentity = Depends(get_current_identity),
+) -> VoteSessionOut:
+    """Create a vote session linked to a mandate step."""
+    try:
+        session = await create_vote_session_for_step(id, step_id, db)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=str(exc))
+
+    return VoteSessionOut.model_validate(session)