commit14

2026-11-02 20:27:11 +02:00
parent b44378b899
commit badaada043
300 changed files with 17458 additions and 1056 deletions
@@ -0,0 +1,42 @@
+<?php
+
+namespace App\Services;
+
+use App\Models\User;
+use Illuminate\Support\Facades\DB;
+use Tempo\Inventory\DeliveryReturnWriter;
+
+final class WarehouseReturnMovement
+{
+    public const MANIFEST_SHA256='2850a4f5cb678acfe3a9dbc7a7d62eb233bc72722ad0de374681c2679c90557c';
+    private function fileHash(string $file): string
+    {
+        $hash = is_file($file) ? hash_file('sha256', $file) : false;
+        abort_unless(is_string($hash), 503, 'Ficheiro do pacote de devolução indisponível.');
+
+        return $hash;
+    }
+
+    public function for(User $actor): DeliveryReturnWriter
+    {
+        $root = base_path('packages/inventory-return/releases/0.1.0');
+        if (! hash_equals(self::MANIFEST_SHA256, $this->fileHash($root.'/manifest.json'))) {
+            abort(503, 'Pacote de devolução incompatível.');
+        }
+        $raw = file_get_contents($root.'/manifest.json');
+        if ($raw === false) {
+            abort(503, 'Manifesto de devolução indisponível.');
+        }
+        $manifest = json_decode($raw, true, 512, JSON_THROW_ON_ERROR);
+        foreach (['bootstrap.php', 'src/DeliveryReturnWriter.php'] as $file) {
+            if (! hash_equals($manifest['files'][$file] ?? '', $this->fileHash($root.'/'.$file))) {
+                abort(503, 'Pacote de devolução alterado.');
+            }
+        }
+        require_once $root.'/bootstrap.php';
+
+        return new DeliveryReturnWriter(DB::connection(), 'public', (int) $actor->tenant_id, (int) $actor->id, function () use ($actor) {
+            app(WarehouseReturns::class)->authorize($actor, 'confirm');
+        });
+    }
+}