varias alteracoes

app/Http/Controllers/AiController.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Controllers;
 
+use App\Jobs\ScanDocumentForMalware;
 use App\Models\AiRun;
 use App\Models\Opportunity;
 use App\Services\Ai\AiGateway;
@@ -25,6 +26,7 @@ final class AiController extends Controller
             'controls' => DB::table('ai_controls')->orderBy('capability')->get(),
             'sources' => DB::table('ai_sources')->orderByDesc('created_at')->limit(50)->get(['id', 'title', 'language', 'status', 'nature', 'valid_until', 'submitted_by']),
             'documents' => DB::table('documents')->where('status', 'active')->whereNull('deleted_at')->where('media_type', 'text/plain')
+                ->where('malware_scan_status', 'clean')->whereColumn('malware_scanned_sha256', 'sha256')
                 ->whereIn('data_classification', ['public', 'internal'])->limit(100)->get(['id', 'file_name']),
             'runs' => AiRun::orderByDesc('created_at')->limit(20)->get(['id', 'capability', 'mode', 'review_status', 'review_requested', 'created_at']),
             'today' => now()->toDateString(),
@@ -118,7 +120,8 @@ final class AiController extends Controller
             DB::transaction(function () use ($request, $file, $text, $id, $key): void {
                 DB::table('documents')->insert(['id' => $id, 'file_name' => basename($file->getClientOriginalName()),
                     'media_type' => 'text/plain', 'storage_key' => $key, 'sha256' => hash('sha256', $text),
-                    'status' => 'active', 'data_classification' => 'internal']);
+                    'size_bytes' => strlen($text), 'uploaded_by' => $request->user()->id,
+                    'status' => 'quarantined', 'data_classification' => 'internal']);
                 $this->audit('documents', $id, 'plain_text_registered', $request->user()->id);
             });
         } catch (\Throwable $exception) {
@@ -126,6 +129,8 @@ final class AiController extends Controller
             throw $exception;
         }
 
+        ScanDocumentForMalware::dispatch($id)->afterCommit();
+
         return $request->expectsJson() ? response()->json(['document_id' => $id], 201)
             : back()->with('success', 'Texto guardado no cadastro documental. Registe a fonte e solicite revisão antes de o pesquisar.');
     }
@@ -140,6 +145,7 @@ final class AiController extends Controller
             if ($data['status'] === 'approved') {
                 abort_if((int) $source->submitted_by === $request->user()->id, 403, 'Outra pessoa deve validar a autorização.');
                 $valid = DB::table('documents')->where('id', $source->document_id)->where('status', 'active')
+                    ->where('malware_scan_status', 'clean')->whereColumn('malware_scanned_sha256', 'sha256')
                     ->whereNull('deleted_at')->whereIn('data_classification', ['public', 'internal'])
                     ->where('version_no', $source->document_version)->where('sha256', $source->document_checksum)->exists();
                 abort_unless($valid && $source->valid_until >= now()->toDateString(), 422, 'Fonte alterada, expirada ou sem autorização.');