118 lines
8.5 KiB
PHP
118 lines
8.5 KiB
PHP
<?php
|
|
|
|
namespace App\Http\Controllers;
|
|
|
|
use App\Models\Tenant;
|
|
use App\Models\User;
|
|
use App\Services\AdministrativeGeography;
|
|
use App\Services\AiPreparationPlan;
|
|
use App\Services\ComparisonPolicy;
|
|
use App\Services\IntelligencePolicy;
|
|
use App\Services\OrganizationAccess;
|
|
use App\Services\OrganizationActivationPreview;
|
|
use App\Services\OrganizationConfiguration;
|
|
use App\Services\WorkContext;
|
|
use App\Services\WorkflowTasks;
|
|
use Brick\Math\BigDecimal;
|
|
use Illuminate\Http\Request;
|
|
use Illuminate\Support\Facades\DB;
|
|
use Illuminate\Support\Facades\Schema;
|
|
use Illuminate\Validation\Rule;
|
|
use Inertia\Inertia;
|
|
use Symfony\Component\HttpFoundation\Response;
|
|
|
|
class OrganizationConfigurationController extends Controller
|
|
{
|
|
public function index(Request $request, OrganizationConfiguration $service): Response
|
|
{
|
|
return DB::transaction(function () use ($request, $service) {
|
|
if (DB::getDriverName() === 'pgsql' && DB::transactionLevel() === 1) {
|
|
DB::statement('SET TRANSACTION ISOLATION LEVEL REPEATABLE READ READ ONLY');
|
|
}
|
|
$user = $request->user('web');
|
|
abort_unless($user instanceof User, 403);
|
|
$actor = $service->administrator($user);
|
|
$ready = Schema::hasTable('organization_access');
|
|
$state = $ready ? DB::table('organization_access')->where('tenant_id', $actor->tenant_id)->first() : null;
|
|
Inertia::encryptHistory();
|
|
$response = Inertia::render('company/parameters', ['ready' => $ready, 'active' => (bool) ($state->active ?? false), 'version' => $state->version ?? 1,
|
|
'workflowTasks' => app(WorkflowTasks::class)->catalogue(),
|
|
'activationPreview' => app(OrganizationActivationPreview::class)->build($actor),
|
|
'geographyEnabled' => app(AdministrativeGeography::class)->enabled(),
|
|
'geography' => app(AdministrativeGeography::class)->describe(Tenant::query()->findOrFail($actor->tenant_id)->geography_reference),
|
|
'companyRules' => $this->companyRules((int) $actor->tenant_id),
|
|
'comparisonPolicy' => app(ComparisonPolicy::class)->company(Tenant::query()->findOrFail($actor->tenant_id)),
|
|
'intelligencePolicy' => app(IntelligencePolicy::class)->company(Tenant::query()->findOrFail($actor->tenant_id)),
|
|
'intelligenceReady' => Schema::hasColumn('tenants', 'intelligence_policy'),
|
|
'aiPlan' => app(AiPreparationPlan::class)->company(Tenant::query()->findOrFail($actor->tenant_id)),
|
|
'aiDomains' => AiPreparationPlan::DOMAINS, 'aiDataScopes' => AiPreparationPlan::SCOPES,
|
|
'permissions' => OrganizationAccess::PERMISSIONS,
|
|
'workContextConfiguration' => Schema::hasColumn('tenants', 'work_context_policy') ? app(WorkContext::class)->shared($request) : null,
|
|
'enabledWorkContexts' => app(WorkContext::class)->policy($actor)['enabled'] ?? [],
|
|
'profiles' => $ready ? DB::table('organization_profiles')->where('tenant_id', $actor->tenant_id)->orderBy('name')->get()->map(fn ($p) => ['id' => $p->id, 'name' => $p->name, 'permissions' => json_decode($p->permissions, true, 32, JSON_THROW_ON_ERROR), 'work_contexts' => json_decode($p->work_contexts ?? '[]', true, 32, JSON_THROW_ON_ERROR)]) : [],
|
|
'memberships' => $ready ? DB::table('organization_memberships')->where('tenant_id', $actor->tenant_id)->get(['user_id', 'profile_id', 'maintenance', 'expires_at', 'reason']) : [],
|
|
'users' => DB::table('users')->where('tenant_id', $actor->tenant_id)->orderBy('name')->get(['id', 'name', 'email', 'department_id']),
|
|
'departments' => DB::table('departments')->where('tenant_id', $actor->tenant_id)->orderBy('name')->get(['id', 'name']),
|
|
'costCenters' => DB::table('cost_centers')->where('tenant_id', $actor->tenant_id)->orderBy('code')->get(['id', 'code', 'name']),
|
|
'notice' => $request->session()->get('organization_notice')])->toResponse($request);
|
|
$response->headers->set('Cache-Control', 'private, no-store, max-age=0');
|
|
|
|
return $response;
|
|
});
|
|
}
|
|
|
|
public function command(Request $request, string $command, OrganizationConfiguration $service): Response
|
|
{
|
|
$user = $request->user('web');
|
|
abort_unless($user instanceof User, 403);
|
|
$actor = $service->administrator($user);
|
|
abort_unless(Schema::hasTable('organization_access'), 503, 'A instalação da parametrização ainda não está concluída.');
|
|
$rules = ['version' => 'required|integer|min:1', 'tenant_id' => 'prohibited', 'purchasing_role' => 'prohibited'];
|
|
if ($command === 'profile') {
|
|
$rules += ['work_contexts' => 'sometimes|array', 'work_contexts.*' => ['string', 'distinct', Rule::in(array_keys(WorkContext::OPTIONS))]];
|
|
$rules += ['id' => 'nullable|integer|min:1', 'name' => ['required', 'string', 'max:120', Rule::unique('organization_profiles')->where('tenant_id', $actor->tenant_id)->ignore($request->integer('id'))],
|
|
'permissions' => 'present|array', 'permissions.*' => ['string', 'distinct', Rule::in(array_keys(OrganizationAccess::PERMISSIONS))]];
|
|
} elseif ($command === 'work_contexts') {
|
|
$rules += ['enabled' => 'present|array', 'enabled.*' => ['string', 'distinct', Rule::in(array_keys(WorkContext::OPTIONS))], 'reason' => 'required|string|min:10|max:4000', 'confirm' => 'accepted'];
|
|
} elseif ($command === 'user') {
|
|
$rules += ['name' => 'required|string|max:100', 'email' => 'required|email|max:255|unique:users', 'password' => 'required|string|min:12|confirmed',
|
|
'department_id' => 'required|integer|min:1', 'profile_ids' => 'present|array', 'profile_ids.*' => 'integer|distinct|min:1', 'reason' => 'required|string|min:10|max:4000'];
|
|
} elseif ($command === 'assign') {
|
|
$rules += ['user_id' => 'required|integer|min:1', 'profile_ids' => 'present|array', 'profile_ids.*' => 'integer|distinct|min:1', 'maintenance' => 'required|boolean',
|
|
'expires_at' => 'nullable|date|after:now', 'reason' => 'required|string|min:10|max:4000'];
|
|
} elseif ($command === 'rules') {
|
|
$rules += ['first_limit' => ['required', 'string', 'regex:/^\d{1,12}(\.\d{1,2})?$/D'], 'second_limit' => ['required', 'string', 'regex:/^\d{1,12}(\.\d{1,2})?$/D'], 'includes_tax' => 'required|boolean', 'reason' => 'required|string|min:10|max:4000'];
|
|
} elseif ($command === 'comparison') {
|
|
$rules += ['minimum_proposals' => 'required|integer|between:1,100', 'minimum_evaluators' => 'required|integer|between:1,100',
|
|
'weights' => 'required|array:price,quality,delivery,history,payment', 'reason' => 'required|string|min:10|max:4000'];
|
|
foreach (array_keys(ComparisonPolicy::DEFAULTS['weights']) as $criterion) {
|
|
$rules['weights.'.$criterion] = 'required|integer|between:0,100';
|
|
}
|
|
} elseif ($command === 'ai_plan') {
|
|
$rules += app(AiPreparationPlan::class)->rules() + ['reason' => 'required|string|min:10|max:4000'];
|
|
} elseif ($command === 'intelligence') {
|
|
$rules += ['procurement_brief' => 'required|boolean', 'people_brief' => 'required|boolean', 'reason' => 'required|string|min:10|max:4000',
|
|
'api_key' => 'prohibited', 'external_processing_enabled' => 'prohibited'];
|
|
} elseif ($command === 'tax') {
|
|
$rules += ['default_tax_rate' => 'required|numeric|decimal:0,2|between:0,100', 'reason' => 'required|string|min:10|max:4000'];
|
|
} else {
|
|
abort_unless($command === 'activate', 404);
|
|
$rules += ['reason' => 'required|string|min:10|max:4000', 'confirm' => 'required|accepted'];
|
|
}
|
|
$service->execute($actor, $command, $request->validate($rules));
|
|
|
|
return to_route('organization.parameters')->with('organization_notice', 'Parametrização actualizada e registada na auditoria.');
|
|
}
|
|
|
|
/** @return array<string,mixed> */
|
|
private function companyRules(int $tenant): array
|
|
{
|
|
$company = Tenant::query()->findOrFail($tenant);
|
|
|
|
return ['first_limit' => (string) BigDecimal::of((string) $company->first_limit_minor)->dividedBy(100, 2),
|
|
'second_limit' => (string) BigDecimal::of((string) $company->second_limit_minor)->dividedBy(100, 2),
|
|
'includes_tax' => $company->approval_includes_tax, 'provisional' => $company->rules_provisional,
|
|
'default_tax_rate' => (string) ($company->default_tax_rate ?? '16.00')];
|
|
}
|
|
}
|