201 lines
14 KiB
PHP
201 lines
14 KiB
PHP
<?php
|
|
|
|
namespace App\Services;
|
|
|
|
use App\Domain\Opportunities\Enums\OpportunityStatus;
|
|
use App\Models\ExistingBusiness;
|
|
use App\Models\ExistingBusinessObject;
|
|
use App\Models\User;
|
|
use App\Services\Mne\BusinessRepository;
|
|
use Illuminate\Support\Facades\Crypt;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Gate;
|
|
use Illuminate\Support\Facades\Validator;
|
|
use Illuminate\Support\Str;
|
|
use Illuminate\Validation\Rule;
|
|
use Illuminate\Validation\ValidationException;
|
|
|
|
final class ExistingBusinessIntake
|
|
{
|
|
public function transition(User $actor, string $id, int $version, string $action, string $note, bool $consent = false, ?string $confirmationCode = null): ExistingBusiness
|
|
{
|
|
Validator::make(compact('action', 'note'), [
|
|
'action' => ['required', Rule::in([
|
|
OpportunityStatus::Submitted->value,
|
|
OpportunityStatus::Triage->value,
|
|
OpportunityStatus::InReview->value,
|
|
OpportunityStatus::NeedsInformation->value,
|
|
OpportunityStatus::ApprovalL1->value,
|
|
OpportunityStatus::ApprovalL2->value,
|
|
OpportunityStatus::Approved->value,
|
|
OpportunityStatus::Published->value,
|
|
OpportunityStatus::Rejected->value,
|
|
OpportunityStatus::Withdrawn->value,
|
|
])],
|
|
'note' => ['required', 'string', 'min:10', 'max:2000'],
|
|
])->validate();
|
|
|
|
return DB::transaction(function () use ($actor, $id, $version, $action, $note, $consent, $confirmationCode) {
|
|
$business = app(BusinessRepository::class)->find($id, true);
|
|
$profileWorkflow = ExistingBusinessProfileCategory::category($business) !== null && app(PortalProfileAccess::class)->available();
|
|
$ability = match ($action) {
|
|
OpportunityStatus::Submitted->value, OpportunityStatus::Withdrawn->value => 'owns',
|
|
OpportunityStatus::Triage->value => 'triage',
|
|
OpportunityStatus::ApprovalL2->value => 'approveLevelOne',
|
|
OpportunityStatus::Approved->value => 'approveLevelTwo',
|
|
OpportunityStatus::Published->value => 'publish',
|
|
OpportunityStatus::Rejected->value => in_array($business->status, ['approval_l1', 'approval_l2'], true)
|
|
? ($business->status === 'approval_l1' ? 'approveLevelOne' : 'approveLevelTwo') : 'review',
|
|
default => 'review',
|
|
};
|
|
Gate::forUser($actor)->authorize($ability, $business);
|
|
abort_unless($business->version_no === $version, 409, 'Versão desactualizada.');
|
|
$allowed = [
|
|
OpportunityStatus::Submitted->value => [OpportunityStatus::Draft->value, OpportunityStatus::NeedsInformation->value],
|
|
OpportunityStatus::Triage->value => [OpportunityStatus::Submitted->value],
|
|
OpportunityStatus::InReview->value => [OpportunityStatus::Triage->value],
|
|
OpportunityStatus::NeedsInformation->value => [OpportunityStatus::Triage->value, OpportunityStatus::InReview->value],
|
|
OpportunityStatus::ApprovalL1->value => [OpportunityStatus::InReview->value],
|
|
OpportunityStatus::ApprovalL2->value => [OpportunityStatus::ApprovalL1->value],
|
|
OpportunityStatus::Approved->value => [OpportunityStatus::ApprovalL2->value],
|
|
OpportunityStatus::Published->value => [OpportunityStatus::Approved->value],
|
|
OpportunityStatus::Rejected->value => [OpportunityStatus::Triage->value, OpportunityStatus::InReview->value,
|
|
OpportunityStatus::ApprovalL1->value, OpportunityStatus::ApprovalL2->value],
|
|
OpportunityStatus::Withdrawn->value => [OpportunityStatus::Draft->value, OpportunityStatus::Submitted->value,
|
|
OpportunityStatus::Triage->value, OpportunityStatus::InReview->value, OpportunityStatus::NeedsInformation->value],
|
|
];
|
|
abort_unless(in_array($business->status, $allowed[$action], true), 409, 'Transição indisponível neste estado.');
|
|
// Reuse the bounded delivery contract: profile correspondence is access, not functional enablement.
|
|
$category = ExistingBusinessProfileCategory::category($business);
|
|
if ($category !== null && in_array($action, ['submitted', 'published'], true)) {
|
|
$blockers = app(OpportunityCanonicalContract::class)->deliveryBlockers(['opportunity_category' => $category]);
|
|
if ($blockers) {
|
|
throw ValidationException::withMessages(['modality' => implode(' ', array_values($blockers))]);
|
|
}
|
|
}
|
|
if ($action === 'submitted') {
|
|
if (($business->payload['wizard_version'] ?? null) === '2') {
|
|
BusinessFormSchema::validateSubmission($business->payload, $business->sector_id, $business->modality);
|
|
$requiredKind = ['asset_sale' => 'asset', 'asset_lease' => 'asset', 'real_estate' => 'property',
|
|
'agricultural_investment' => 'agricultural_investment', 'land_right' => 'land_right',
|
|
'mining_license' => 'license', 'forestry_license' => 'license', 'capital_increase' => 'capital_request',
|
|
'participation_sale' => 'participation'][$business->modality] ?? null;
|
|
if ($requiredKind !== null && ! ExistingBusinessObject::where('business_id', $business->id)->where('kind', $requiredKind)->exists()) {
|
|
throw ValidationException::withMessages(['objects' => 'Declare o elemento aplicável na etapa 6: '.$requiredKind]);
|
|
}
|
|
Validator::make(['confirmation_code' => $confirmationCode, 'sector_id' => $business->sector_id], [
|
|
'confirmation_code' => ['required', Rule::in([$business->code])],
|
|
'sector_id' => ['required', Rule::exists('sectors', 'id')->whereNull('deleted_at')->where('is_active', true)],
|
|
])->validate();
|
|
} elseif (($business->payload['wizard_version'] ?? null) === '1') {
|
|
Validator::make($business->payload, [
|
|
'proponent_type' => ['required'], 'proponent_name' => ['required'], 'tax_identifier' => ['required'],
|
|
'contact_email' => ['required', 'email'], 'country' => ['required', app(CountryCatalogue::class)->rule()],
|
|
'declared_origin_country_code' => ['nullable', app(CountryCatalogue::class)->rule()],
|
|
'acting_capacity' => ['required'], 'declared_holder' => ['required'], 'location_notes' => ['required'],
|
|
'legitimacy_declaration' => ['required', 'in:yes'],
|
|
'mandate_reference' => ['required_if:acting_capacity,representative'],
|
|
'mandate_valid_until' => ['required_if:acting_capacity,representative', 'nullable', 'date_format:Y-m-d', 'after_or_equal:today'],
|
|
])->validate();
|
|
Validator::make(['confirmation_code' => $confirmationCode], [
|
|
'confirmation_code' => ['required', Rule::in([$business->code])],
|
|
])->validate();
|
|
}
|
|
if (($business->payload['wizard_version'] ?? null) === '1') {
|
|
$requiredKind = ['asset_sale' => 'asset', 'asset_lease' => 'asset', 'real_estate' => 'property',
|
|
'agricultural_investment' => 'agricultural_investment', 'land_right' => 'land_right',
|
|
'mining_license' => 'license', 'forestry_license' => 'license', 'capital_increase' => 'capital_request',
|
|
'participation_sale' => 'participation'][$business->modality] ?? null;
|
|
if ($requiredKind !== null && ! ExistingBusinessObject::where('business_id', $business->id)->where('kind', $requiredKind)->exists()) {
|
|
throw ValidationException::withMessages(['objects' => 'Declare the applicable object in step 6: '.$requiredKind]);
|
|
}
|
|
}
|
|
$submissionRules = [
|
|
'description' => ['required', 'string', 'min:30'],
|
|
'source_reference' => ['required', 'string', 'min:10'],
|
|
'consent' => ['accepted'],
|
|
// Deadlines are optional for newer and legacy payloads, but
|
|
// an explicitly supplied deadline must never be expired.
|
|
'valid_until' => ['nullable', 'date_format:Y-m-d', 'after_or_equal:today'],
|
|
];
|
|
if (($business->payload['wizard_version'] ?? null) === '1') {
|
|
$submissionRules['valid_until'][0] = 'required';
|
|
}
|
|
Validator::make([...$business->payload, 'consent' => $consent], $submissionRules)->validate();
|
|
app(BusinessPointPublication::class)->candidate($business->payload);
|
|
}
|
|
if ($action === OpportunityStatus::Approved->value) {
|
|
$levelOneActor = DB::table('business_workflow_transitions')->where('existing_business_id', $business->id)
|
|
->where('to_status', OpportunityStatus::ApprovalL2->value)->orderByDesc('created_at')->value('actor_id');
|
|
abort_unless($levelOneActor !== null && ($profileWorkflow || (int) $levelOneActor !== (int) $actor->id), 403,
|
|
'A aprovação de nível 2 deve ser feita por uma pessoa diferente da aprovação de nível 1.');
|
|
}
|
|
if ($action === OpportunityStatus::Published->value) {
|
|
abort_unless(is_string($business->public_title) && trim($business->public_title) !== '' && $business->sector_id,
|
|
422, 'Preencha o título público e o sector antes de publicar.');
|
|
$approvalActors = DB::table('business_workflow_transitions')->where('existing_business_id', $business->id)
|
|
->whereIn('to_status', [OpportunityStatus::ApprovalL2->value, OpportunityStatus::Approved->value])
|
|
->whereNotNull('actor_id')->pluck('actor_id')->map(fn ($id) => (int) $id)->all();
|
|
abort_unless(! in_array((int) $actor->id, $approvalActors, true), 403,
|
|
'A publicação deve ser executada por uma pessoa diferente dos aprovadores.');
|
|
}
|
|
$pointContext = $action === OpportunityStatus::Published->value ? app(BusinessPointPublication::class)->publish($business) : [];
|
|
$fromStatus = $business->status;
|
|
$business->status = $action;
|
|
if ($action === OpportunityStatus::Published->value) {
|
|
$business->published_at = now();
|
|
$business->public_slug ??= Str::slug($business->public_title).'-'.strtolower(substr(str_replace('-', '', $business->id), 0, 10));
|
|
}
|
|
$business->version_no++;
|
|
$business->save();
|
|
$correlationId = (string) Str::uuid();
|
|
DB::table('business_workflow_transitions')->insert([
|
|
'id' => (string) Str::uuid(),
|
|
'existing_business_id' => $business->id,
|
|
'from_status' => $fromStatus,
|
|
'to_status' => $action,
|
|
'actor_id' => $actor->id,
|
|
'reason' => Crypt::encryptString($note),
|
|
'correlation_id' => $correlationId,
|
|
'metadata' => json_encode(['version_no' => $business->version_no, 'source' => 'portal-intake',
|
|
'authorization_mode' => $profileWorkflow ? 'profiles-v1-company-sale' : 'legacy-designations'], JSON_THROW_ON_ERROR),
|
|
'created_at' => now(),
|
|
]);
|
|
if ($action === OpportunityStatus::Submitted->value) {
|
|
DB::table('tasks')->insertOrIgnore([
|
|
'source_system' => 'portal-intake',
|
|
'external_id' => 'BusinessListingTriage:'.$business->id.':'.$business->version_no,
|
|
'version_no' => 1,
|
|
'data_classification' => 'internal',
|
|
'correlation_id' => $correlationId,
|
|
'existing_business_id' => $business->id,
|
|
'task_type' => 'triage',
|
|
'title' => 'Triar oportunidade '.$business->code,
|
|
'status' => 'open',
|
|
'priority' => 3,
|
|
'due_at' => now()->addWeekdays(3),
|
|
'created_at' => now(),
|
|
'updated_at' => now(),
|
|
]);
|
|
DB::table('outbox_events')->insert([
|
|
'source_system' => 'portal-intake',
|
|
'external_id' => 'BusinessListingSubmitted:'.$business->id.':'.$business->version_no,
|
|
'aggregate_type' => 'business_listing',
|
|
'aggregate_id' => $business->id,
|
|
'event_type' => 'BusinessListingSubmitted',
|
|
'data_classification' => 'confidential',
|
|
'correlation_id' => $correlationId,
|
|
'status' => 'pending',
|
|
'payload' => json_encode(['business_id' => $business->id, 'version_no' => $business->version_no], JSON_THROW_ON_ERROR),
|
|
]);
|
|
}
|
|
DB::table('existing_business_reviews')->insert(['id' => (string) Str::uuid(), 'business_id' => $id, 'actor_id' => $actor->id,
|
|
'version_no' => $business->version_no, 'action' => $action,
|
|
'note' => Crypt::encryptString(json_encode(['note' => $note, 'review_consent' => $action === 'submitted' ? $consent : null], JSON_THROW_ON_ERROR))]);
|
|
app(ExistingBusinessDrafts::class)->snapshot($business, $actor, $action, $note, $pointContext);
|
|
|
|
return $business;
|
|
});
|
|
}
|
|
}
|