user()->purchasing_role, [PurchasingRole::Admin, PurchasingRole::Procurement, PurchasingRole::Finance, PurchasingRole::DepartmentHead]), 403); $filters = $request->validate(['search' => 'nullable|string|max:100']); $query = Supplier::query(); if (! empty($filters['search'])) { $query->where(fn ($q) => $q->where('name', 'like', '%'.$filters['search'].'%')->orWhere('nuit', 'like', '%'.$filters['search'].'%')); } return Inertia::render('suppliers/index', ['suppliers' => $query->orderBy('name')->paginate(15)->withQueryString(), 'filters' => $filters, 'canCreate' => $request->user()->purchasing_role === PurchasingRole::Procurement, 'canReview' => $request->user()->purchasing_role === PurchasingRole::Finance]); } public function store(SaveSupplierRequest $request, RequisitionWorkflow $workflow): RedirectResponse { $data = $request->validated(); DB::transaction(function () use ($request, $data, $workflow) { $supplier = Supplier::query()->create([...$data, 'tenant_id' => $request->user()->tenant_id, 'created_by' => $request->user()->id, 'last_changed_by' => $request->user()->id, 'status' => 'pending']); $workflow->audit($request->user(), 'supplier.created', null, null, $supplier->toArray()); }); return back(); } public function show(Request $request, Supplier $supplier): Response { Gate::authorize('view', $supplier); $canDocuments = $request->user()->can('viewDocuments', $supplier); return Inertia::render('suppliers/show', [ 'supplier' => $supplier, 'documents' => $canDocuments ? $supplier->documents()->latest('id')->get() : [], 'canEdit' => $request->user()->can('update', $supplier), 'canDocuments' => $canDocuments, 'canReview' => $request->user()->purchasing_role === PurchasingRole::Finance, ]); } public function edit(Supplier $supplier): Response { Gate::authorize('update', $supplier); return Inertia::render('suppliers/edit', ['supplier' => $supplier]); } public function update(SaveSupplierRequest $request, Supplier $supplier, RequisitionWorkflow $workflow): RedirectResponse { Gate::authorize('update', $supplier); $data = $request->validated(); DB::transaction(function () use ($request, $supplier, $workflow, $data) { $supplier = Supplier::query()->lockForUpdate()->findOrFail($supplier->id); if ($supplier->version !== (int) $data['version']) { throw ValidationException::withMessages(['version' => 'A ficha foi alterada por outro utilizador. Reabra a edição para carregar os dados actuais.']); } $before = $supplier->toArray(); unset($data['version']); $supplier->fill($data); if ($supplier->isDirty()) { $supplier->fill(['status' => 'pending', 'reviewed_by' => null, 'review_comment' => null, 'last_changed_by' => $request->user()->id, 'version' => $supplier->version + 1])->save(); $workflow->audit($request->user(), 'supplier.updated', null, $before, $supplier->toArray()); } }); return to_route('suppliers.show', $supplier); } public function review(Request $request, Supplier $supplier, RequisitionWorkflow $workflow): RedirectResponse { abort_unless($request->user()->purchasing_role === PurchasingRole::Finance, 403); $data = $request->validate(['status' => ['required', Rule::in(['active', 'suspended'])], 'comment' => 'required|string|min:10|max:2000', 'version' => 'required|integer|min:1']); DB::transaction(function () use ($request, $supplier, $data, $workflow) { $supplier = Supplier::query()->lockForUpdate()->findOrFail($supplier->id); abort_if($supplier->created_by === $request->user()->id, 403); abort_if($supplier->last_changed_by === $request->user()->id, 403); if ($supplier->version !== (int) $data['version']) { throw ValidationException::withMessages(['version' => 'A ficha ou os documentos foram alterados. Reabra a ficha antes de validar.']); } if ($data['status'] === 'active' && ($supplier->blocked || $supplier->next_review < today())) { throw ValidationException::withMessages(['status' => 'Fornecedor impedido ou com revisão vencida. Não pode ser activado.']); } $before = $supplier->toArray(); $supplier->update(['status' => $data['status'], 'review_comment' => $data['comment'], 'reviewed_by' => $request->user()->id, 'version' => $supplier->version + 1]); $workflow->audit($request->user(), 'supplier.reviewed', null, $before, $supplier->toArray()); }); return back(); } }