219 lines
14 KiB
PHP
219 lines
14 KiB
PHP
<?php
|
|
|
|
namespace App\Modules\Purchasing;
|
|
|
|
use App\Models\User;
|
|
use App\Modules\Identity\Services\Permissions;
|
|
use App\Shared\Context\CompanyContext;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Tempo\Finance\Payables\Payables;
|
|
|
|
final class SupplierPayables
|
|
{
|
|
public static function guard(): void
|
|
{
|
|
$c = DB::connection();
|
|
$composedQa=app()->environment(['testing','browser-testing'])&&(config('sales_ledger.synthetic_enabled')===true||config('cost_ledger.synthetic_enabled')===true);
|
|
abort_unless(app()->environment('payable-testing')||$composedQa, 403, 'Obrigações apenas no ensaio isolado.');
|
|
if($composedQa)\App\Shared\Testing\TestingDatabaseGuard::assertSafe();
|
|
if ($c->getDriverName() !== 'pgsql' || ! preg_match('/^payable_sgf_[a-f0-9]{12}$/D', $c->getDatabaseName()) || $c->getConfig('host') !== '127.0.0.1' || $c->selectOne('select current_database() as d')->d !== $c->getDatabaseName()) {
|
|
throw new \LogicException('PAYABLE_QA_DATABASE_REFUSED');
|
|
}
|
|
}
|
|
|
|
public function scope(User $u): array
|
|
{
|
|
self::guard();
|
|
$c = app(CompanyContext::class);
|
|
abort_unless(auth()->id() === $u->id && $c->userId() === $u->id && $c->unitId(), 403);
|
|
$ids = $c->identifiers();
|
|
app(Permissions::class)->require($u->id, $ids['tenant_id'], $ids['company_id'], 'supplier_payables.view', $c->unitId());
|
|
|
|
return $c->identifiers() + ['unit_id' => $c->unitId()];
|
|
}
|
|
|
|
public function can(User $u, string $a): bool
|
|
{
|
|
return DB::table('pa_access')->where($this->scope($u))->where(['user_id' => $u->id, 'action' => $a])->exists();
|
|
}
|
|
|
|
public function document(User $u, int $id): array
|
|
{
|
|
$row = DB::table('pa_imported_sources')->where($this->scope($u))->where('id', $id)->first() ?? abort(403, 'Origem não mapeada neste contexto.');
|
|
|
|
return $this->receiptDocument($row);
|
|
}
|
|
|
|
private function receiptDocument(object $row): array
|
|
{
|
|
$s = json_decode($row->payload, true, 64, JSON_THROW_ON_ERROR);
|
|
abort_unless(hash_equals($row->receipt_hash, hash('sha256', Payables::canonical($s))), 409, 'Recibo de origem divergente.');
|
|
$s['local_id'] = (int) $row->id;
|
|
|
|
return $s;
|
|
}
|
|
|
|
public function engine(User $u): Payables
|
|
{
|
|
return $this->buildEngine($u);
|
|
}
|
|
|
|
private function buildEngine(User $u, ?array $documents = null, ?array $histories = null): Payables
|
|
{
|
|
$scope = $this->scope($u);
|
|
$person = DB::table('pa_access')->where($scope)->where(['user_id' => $u->id, 'action' => 'view'])->value('person');
|
|
abort_unless($person, 403);
|
|
|
|
$authorize = function (string $a, bool $lock = true) use ($u, $scope, $person) {
|
|
self::guard();
|
|
if ($lock) {
|
|
DB::table('companies')->where('tenant_id', $scope['tenant_id'])->where('id', $scope['company_id'])->lockForUpdate()->firstOrFail();
|
|
DB::table('users')->where('id', $u->id)->lockForUpdate()->firstOrFail();
|
|
}
|
|
abort_unless(DB::table('pa_access')->where($scope)->where(['user_id' => $u->id, 'action' => 'view'])->value('person') === $person, 409, 'Identidade de pessoa alterada; reabra a proposta.');
|
|
abort_unless($this->scope($u) === $scope, 409, 'Contexto mudou.');
|
|
app(CompanyContext::class)->selectFor($u->id, $scope['tenant_id'], $scope['company_id'], $scope['unit_id']);
|
|
abort_unless($this->can($u, 'view') && $this->can($u, $a), 403);
|
|
};
|
|
$source = $documents === null ? fn (int $id) => $this->document($u, $id) : fn (int $id) => $documents[$id] ?? abort(403);
|
|
$history = $histories === null ? fn (int $id) => app(SupplierHistoryReceipts::class)->payments($u, $id) : function (int $id) use ($histories) {
|
|
$result = $histories[$id] ?? new \DomainException('Histórico não reconciliado nesta página.');
|
|
if ($result instanceof \DomainException) { throw $result; }
|
|
return $result;
|
|
};
|
|
|
|
return new Payables(DB::connection(), $u->id, $person, $scope, fn (string $a) => $authorize($a), $source,
|
|
app(SupplierHistoryReceipts::class)->available() ? $history : null, fn () => $authorize('view', false), fn () => $authorize('payments_view', false));
|
|
}
|
|
|
|
/** One predicate for list windows and complete position reports. */
|
|
private function sourceQuery(array $scope, array $options): array
|
|
{
|
|
$q = trim((string) ($options['q'] ?? '')); $recognition = $options['recognition'] ?? 'all';
|
|
abort_unless(mb_strlen($q) <= 100 && in_array($recognition, ['all', 'recognised', 'unrecognised'], true), 422);
|
|
$query = DB::table('pa_imported_sources AS r')->where($scope);
|
|
$sourceId = array_key_exists('source', $options) ? filter_var($options['source'], FILTER_VALIDATE_INT, ['options' => ['min_range' => 1]]) : null;
|
|
abort_if($sourceId === false || (isset($options['source']) && is_bool($options['source'])), 422, 'Origem inválida.');
|
|
if ($sourceId !== null) {
|
|
abort_unless((clone $query)->where('r.id', $sourceId)->exists(), 403, 'Origem não mapeada neste contexto.');
|
|
$query->where('r.id', $sourceId);
|
|
}
|
|
if ($q !== '') {
|
|
$needle = '%'.str_replace(['\\', '%', '_'], ['\\\\', '\\%', '\\_'], $q).'%';
|
|
$query->where(fn ($w) => $w->whereRaw("payload->>'number' ILIKE ?", [$needle])->orWhereRaw("payload->>'supplier_name' ILIKE ?", [$needle]));
|
|
}
|
|
if ($recognition !== 'all') {
|
|
$method = $recognition === 'recognised' ? 'whereExists' : 'whereNotExists';
|
|
$query->$method(fn ($w) => $w->selectRaw('1')->from('pa_sources AS s')->join('pa_obligations AS o', 'o.source_id', '=', 's.id')
|
|
->whereColumn('s.local_source_id', 'r.id')->whereColumn('s.tenant_id', 'r.tenant_id')->whereColumn('s.company_id', 'r.company_id')->whereColumn('s.unit_id', 'r.unit_id')
|
|
->whereColumn('o.tenant_id', 'r.tenant_id')->whereColumn('o.company_id', 'r.company_id')->whereColumn('o.unit_id', 'r.unit_id'));
|
|
}
|
|
return [$query, $sourceId];
|
|
}
|
|
|
|
public function listing(User $u, array $options = []): array
|
|
{
|
|
$own = DB::transactionLevel() === 0;
|
|
return DB::transaction(function () use ($u, $options, $own) {
|
|
if ($own) { DB::statement('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY'); }
|
|
$scope = $this->scope($u); abort_unless($this->can($u, 'view'), 403);
|
|
$page = (int) ($options['page'] ?? 1); $perPage = (int) ($options['per_page'] ?? 25);
|
|
$q = trim((string) ($options['q'] ?? '')); $recognition = $options['recognition'] ?? 'all';
|
|
abort_unless($page >= 1 && $page <= 100000 && in_array($perPage, [25, 100], true) && mb_strlen($q) <= 100 && in_array($recognition, ['all', 'recognised', 'unrecognised'], true), 422);
|
|
[$query, $sourceId] = $this->sourceQuery($scope, $options);
|
|
$pager = $query->orderByDesc('r.id')->paginate($perPage, ['r.*'], 'page', $page); $documents = [];
|
|
foreach ($pager->items() as $row) { $documents[(int) $row->id] = $this->receiptDocument($row); }
|
|
$provider = app(SupplierHistoryReceipts::class);
|
|
$histories = $provider->available() ? $provider->page($u, $documents) : [];
|
|
$d = $this->buildEngine($u, $documents, $histories)->listingPage(array_keys($documents), (int) ($options['proposal_page'] ?? 1), (int) ($options['event_page'] ?? 1), $perPage);
|
|
$d['pagination']['documents'] = ['page' => $pager->currentPage(), 'last_page' => $pager->lastPage(), 'total' => $pager->total(), 'per_page' => $pager->perPage()];
|
|
$d['listing_query'] = ['page' => $page, 'per_page' => $perPage, 'q' => $q, 'recognition' => $recognition, 'proposal_page' => (int) ($options['proposal_page'] ?? 1), 'event_page' => (int) ($options['event_page'] ?? 1)];
|
|
if ($sourceId !== null) { $d['listing_query']['source'] = $sourceId; }
|
|
$d['permissions'] = ['prepare' => $this->can($u, 'prepare'), 'validate' => $this->can($u, 'validate')];
|
|
$d['history_import_available'] = app(SupplierHistoryReceipts::class)->available();
|
|
$d['history_decisions_available'] = false;
|
|
if ($d['history_import_available']) {
|
|
$d['history_receipt_notice'] = 'Recibo histórico de ensaio: a origem é uma fotografia conferida. Não há leitura histórica em tempo real nem passagem operacional de responsabilidade validada.';
|
|
}
|
|
$d['payments_available'] = app()->environment('payable-testing') && DB::connection()->getSchemaBuilder()->hasTable('ps_payments') && $this->can($u, 'payments_view');
|
|
|
|
return $d;
|
|
});
|
|
}
|
|
|
|
/** Current recognised positions, aggregated through the existing engine in bounded windows. */
|
|
public function report(User $u, array $criteria = []): array
|
|
{
|
|
abort_if(array_diff(array_keys($criteria), ['q', 'source']) !== [], 422);
|
|
abort_if(isset($criteria['q']) && !is_string($criteria['q']), 422);
|
|
if (array_key_exists('source', $criteria)) {
|
|
$id = filter_var($criteria['source'], FILTER_VALIDATE_INT, ['options' => ['min_range' => 1]]);
|
|
abort_if($id === false || is_bool($criteria['source']), 422);
|
|
$criteria['source'] = $id;
|
|
}
|
|
$own = DB::transactionLevel() === 0;
|
|
return DB::transaction(function () use ($u, $criteria, $own): array {
|
|
if ($own) DB::statement('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY');
|
|
else abort_unless(in_array(DB::selectOne('SHOW transaction_isolation')->transaction_isolation, ['repeatable read', 'serializable'], true), 409, 'O relatório exige uma fotografia coerente própria.');
|
|
$scope = $this->scope($u);
|
|
abort_unless($this->can($u, 'view'), 403);
|
|
$criteria['q'] = trim((string) ($criteria['q'] ?? ''));
|
|
$hash = hash_init('sha256');
|
|
hash_update($hash, Payables::canonical(['scope' => $scope, 'criteria' => $criteria, 'basis' => 'current_recognised_positions', 'window' => 100])."\n");
|
|
$total = ['count' => 0, 'principal_minor' => 0, 'unknown_balance_count' => 0, 'unknown_due_count' => 0];
|
|
$known = ['count' => 0, 'principal_minor' => 0, 'historical_confirmed_minor' => 0, 'net_allocated_minor' => 0, 'balance_minor' => 0];
|
|
[$query] = $this->sourceQuery($scope, $criteria + ['recognition' => 'recognised']);
|
|
$person = DB::table('pa_access')->where($scope)->where(['user_id' => $u->id, 'action' => 'view'])->value('person');
|
|
abort_unless(is_string($person) && $person !== '', 403);
|
|
$provider = app(SupplierHistoryReceipts::class); $historical = $provider->available();
|
|
$read = function () use ($u, $scope, $person): void {
|
|
$context = app(CompanyContext::class);
|
|
abort_unless(auth()->id() === $u->id && $context->userId() === $u->id, 403);
|
|
abort_unless(($context->identifiers() + ['unit_id' => $context->unitId()]) === $scope, 409);
|
|
abort_unless($this->can($u, 'view'), 403);
|
|
abort_unless(DB::table('pa_access')->where($scope)->where(['user_id' => $u->id, 'action' => 'view'])->value('person') === $person, 409);
|
|
};
|
|
$last = null; $windows = 0;
|
|
do {
|
|
$window = clone $query;
|
|
if ($last !== null) $window->where('r.id', '<', $last);
|
|
$rows = $window->orderByDesc('r.id')->limit(100)->get(['r.*']);
|
|
if ($rows->isEmpty()) break;
|
|
$documents = [];
|
|
foreach ($rows as $row) $documents[(int) $row->id] = $this->receiptDocument($row);
|
|
$histories = $historical ? $provider->page($u, $documents, true) : [];
|
|
$engine = new Payables(DB::connection(), $u->id, $person, $scope,
|
|
static fn () => throw new \LogicException('Relatórios nunca executam comandos.'),
|
|
fn (int $id) => $documents[$id] ?? abort(403),
|
|
$historical ? static function (int $id) use ($histories) {
|
|
$result = $histories[$id] ?? new \DomainException('Histórico fora da janela.');
|
|
if ($result instanceof \DomainException) throw $result;
|
|
return $result;
|
|
} : null, $read);
|
|
$data = $engine->positionsPage(array_keys($documents));
|
|
foreach ($data['documents'] as $doc) hash_update($hash, Payables::canonical(['local_source_id' => $doc['local_id'], 'current_revision' => $doc['revision']])."\n");
|
|
foreach ($data['obligations'] as $o) {
|
|
abort_unless($o['currency'] === 'MZN', 409, 'Moeda incompatível no relatório; nenhuma soma entre moedas.');
|
|
$total['count']++; $total['principal_minor'] += $o['principal_minor'];
|
|
if ($o['due_on'] === null) $total['unknown_due_count']++;
|
|
if ($o['source_conflict'] || $o['balance_minor'] === null) $total['unknown_balance_count']++;
|
|
else {
|
|
$known['count']++; $known['principal_minor'] += $o['principal_minor'];
|
|
$known['historical_confirmed_minor'] += $o['confirmed_payments_minor'];
|
|
$known['net_allocated_minor'] += $o['allocated_payments_minor'];
|
|
$known['balance_minor'] += $o['balance_minor'];
|
|
}
|
|
hash_update($hash, Payables::canonical($o)."\n");
|
|
}
|
|
$windows++; $last = (int) $rows->last()->id;
|
|
} while ($rows->count() === 100);
|
|
abort_unless($known['principal_minor'] - $known['historical_confirmed_minor'] - $known['net_allocated_minor'] === $known['balance_minor'], 409, 'Componentes financeiros não reconciliados.');
|
|
$total['balance_minor'] = $total['unknown_balance_count'] === 0 ? $known['balance_minor'] : null;
|
|
return ['version' => 'SGF-PAYABLE-POSITION-REPORT-SIM-v1', 'synthetic_only' => true,
|
|
'basis' => 'current_recognised_positions', 'captured_at_utc' => DB::selectOne("SELECT transaction_timestamp() AT TIME ZONE 'UTC' AS captured")->captured,
|
|
'scope' => $scope, 'criteria' => $criteria, 'currency' => 'MZN', 'totals' => $total, 'known_positions' => $known,
|
|
'positions_sha256' => hash_final($hash), 'window_size' => 100, 'windows' => $windows];
|
|
});
|
|
}
|
|
}
|