{"search_text": "tag\\.", "file_patterns": ["templates/permissions_tags/edit.html.twig"], "use_perl_regexp": true}

File: templates/permissions_tags/edit.html.twig
Match lines: 14
89|				<form id="adminForm" class="stdform" data-tag-id="{{ permissionTag.id }}">
95|								<input type="text" class="form-control" id="tituloPermissao" value="{{ permissionTag.name }}">
104|											class="color-block {% if colorTag.color == permissionTag.color %}selected{% endif %}"
105|											style="background-color: {{ colorTag.color }};"
106|											data-color-id="{{ colorTag.colorId }}"
107|											data-color="{{ colorTag.color }}"
108|											data-letter-color="{{ colorTag.letterColor }}">
119|								<textarea class="form-control" id="descricaoPermissao" rows="3">{{ permissionTag.description }}</textarea>
128|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe" {% if permissionTag.teamLimitation %}checked{% endif %}>
136|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea" {% if permissionTag.areaLimitation %}checked{% endif %}>
144|									<input class="form-check-input" type="checkbox" role="switch" id="canView" {% if permissionTag.canView %}checked{% endif %}>
152|									<input class="form-check-input" type="checkbox" role="switch" id="canCreate" {% if permissionTag.canCreate %}checked{% endif %}>
160|									<input class="form-check-input" type="checkbox" role="switch" id="canEdit" {% if permissionTag.canEdit %}checked{% endif %}>
168|									<input class="form-check-input" type="checkbox" role="switch" id="canDelete" {% if permissionTag.canDelete %}checked{% endif %}>

{"file_path": "templates/permissions_tags/edit.html.twig"}

File: templates/permissions_tags/edit.html.twig (Total lines: 288)
IS_TRUNCATED: false
LINE_RANGE: 1-288
1|{% extends 'layoutAdmin.html.twig' %}
2|
3|{% block container %}
4|
5|	<style>
6|		.color-block-container {
7|			display: flex;
8|			flex-wrap: wrap;
9|			gap: 10px;
10|			align-items: center;
11|		}
12|
13|		.color-block {
14|			width: 40px;
15|			height: 40px;
16|			border-radius: 5px;
17|			cursor: pointer;
18|			border: 2px solid transparent;
19|			transition: border-color 0.2s ease;
20|		}
21|		
22|		.color-block.selected {
23|			border-color: #000; /* Destaque para a cor selecionada */
24|		}
25|
26|		/* Custom styling for switches */
27|		.form-check-input[type="checkbox"][role="switch"] {
28|			width: 2.5em; /* Largura do switch */
29|			height: 1.25em; /* Altura do switch */
30|			background-color: #e0e0e0; /* Cor de fundo quando desativado */
31|			border-radius: 1.25em;
32|			position: relative;
33|			appearance: none;
34|			-webkit-appearance: none;
35|			outline: none;
36|			cursor: pointer;
37|			transition: background-color 0.3s;
38|		}
39|
40|		.form-check-input[type="checkbox"][role="switch"]:checked {
41|			background-color: #00a5b8; /* Cor de fundo quando ativado */
42|		}
43|
44|		.form-check-input[type="checkbox"][role="switch"]::before {
45|			content: '';
46|			position: absolute;
47|			top: 0.1em; /* Ajuste da posição vertical */
48|			left: 0.1em; /* Ajuste da posição horizontal */
49|			width: 1em; /* Diâmetro do círculo */
50|			height: 1em; /* Diâmetro do círculo */
51|			background-color: white; /* Cor do círculo */
52|			border-radius: 50%;
53|			transition: transform 0.3s;
54|		}
55|
56|		.form-check-input[type="checkbox"][role="switch"]:checked::before {
57|			transform: translateX(1.25em); /* Move o círculo para a direita quando ativado */
58|		}
59|
60|		.card-box {
61|			background-color: #f8f8f8; /* Substitua por exatamente a cor desejada */
62|			border-radius: 8px;
63|			padding: 10px;
64|		}
65|
66|	</style>
67|
68|    <div class="content-header">
69|		<div class="container-fluid">
70|			<div class="row mb-2 align-items-start">
71|				<div class="col-12 d-flex justify-content-between align-items-start flex-column flex-md-row">
72|					<div>
73|						<p class="mb-2 font-color font-weight-bold h1">EDITAR PERMISSÃO</p>
74|					</div>
75|					<div>
76|						<a class="btn btn-outline-secondary mt-2" href="{{ path('admin_permissionstags_index') }}">
77|							<i class="fa fa-angle-left mr-2"></i>
78|							Voltar para Permissões
79|						</a>
80|					</div>
81|				</div>
82|			</div>
83|		</div>
84|	</div>
85|
86|    <section class="content">
87|		<div class="container-fluid">
88|			<div class="card app-card-surface p-4">
89|				<form id="adminForm" class="stdform" data-tag-id="{{ permissionTag.id }}">
90|					<div class="card-box">
91|						<div class="row mb-4">
92|							<!-- Título da Permissão -->
93|							<div class="col-md-6">
94|								<label for="tituloPermissao" class="form-label">Título da Permissão</label>
95|								<input type="text" class="form-control" id="tituloPermissao" value="{{ permissionTag.name }}">
96|							</div>
97|
98|							<!-- Cor da Tag -->
99|							<div class="col-md-6">
100|								<label class="form-label">Cor da Tag</label>
101|								<div id="editColorBlocks" class="d-flex flex-wrap color-block-container">
102|									{% for colorTag in colorsTags %}
103|										<div 
104|											class="color-block {% if colorTag.color == permissionTag.color %}selected{% endif %}"
105|											style="background-color: {{ colorTag.color }};"
106|											data-color-id="{{ colorTag.colorId }}"
107|											data-color="{{ colorTag.color }}"
108|											data-letter-color="{{ colorTag.letterColor }}">
109|										</div>
110|									{% endfor %}
111|								</div>
112|							</div>
113|						</div>
114|
115|						<!-- Descrição -->
116|						<div class="row mb-4">
117|							<div class="col-12">
118|								<label for="descricaoPermissao" class="form-label">Descrição da Permissão</label>
119|								<textarea class="form-control" id="descricaoPermissao" rows="3">{{ permissionTag.description }}</textarea>
120|							</div>
121|						</div>
122|
123|						<div class="row">
124|							<!-- Limitação de Equipe -->
125|							<div class="col">
126|								<label class="form-check-label" for="limitacaoEquipe">Limitação de Equipe</label>
127|								<div class="form-check form-switch">
128|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe" {% if permissionTag.teamLimitation %}checked{% endif %}>
129|								</div>
130|							</div>
131|
132|							<!-- Limitação de Área -->
133|							<div class="col">
134|								<label class="form-check-label" for="limitacaoArea">Limitação de Área</label>
135|								<div class="form-check form-switch">
136|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea" {% if permissionTag.areaLimitation %}checked{% endif %}>
137|								</div>
138|							</div>
139|
140|							<!-- Permissão de Visualizar -->
141|							<div class="col">
142|								<label class="form-check-label" for="canView">Permissão de Visualizar</label>
143|								<div class="form-check form-switch">
144|									<input class="form-check-input" type="checkbox" role="switch" id="canView" {% if permissionTag.canView %}checked{% endif %}>
145|								</div>
146|							</div>
147|
148|							<!-- Permissão de Criar -->
149|							<div class="col">
150|								<label class="form-check-label" for="canCreate">Permissão de Criar</label>
151|								<div class="form-check form-switch">
152|									<input class="form-check-input" type="checkbox" role="switch" id="canCreate" {% if permissionTag.canCreate %}checked{% endif %}>
153|								</div>
154|							</div>
155|
156|							<!-- Permissão de Editar -->
157|							<div class="col">
158|								<label class="form-check-label" for="canEdit">Permissão de Editar</label>
159|								<div class="form-check form-switch">
160|									<input class="form-check-input" type="checkbox" role="switch" id="canEdit" {% if permissionTag.canEdit %}checked{% endif %}>
161|								</div>
162|							</div>
163|
164|							<!-- Permissão de Deletar -->
165|							<div class="col">
166|								<label class="form-check-label" for="canDelete">Permissão de Deletar</label>
167|								<div class="form-check form-switch">
168|									<input class="form-check-input" type="checkbox" role="switch" id="canDelete" {% if permissionTag.canDelete %}checked{% endif %}>
169|								</div>
170|							</div>
171|						</div>
172|
173|						<div class="row mt-4">
174|							<div class="col d-flex justify-content-end">
175|								<button type="submit" class="btn btn-primary px-4 py-2">
176|									<i class="fa fa-save mr-2"></i> Salvar Alterações
177|								</button>
178|							</div>
179|						</div>
180|
181|					</div>
182|				</form>
183|			</div>
184|		</div>
185|	</section>
186|
187|{% endblock %}
188|
189|{% block javascripts %}
190|	<script>
191|        // function showToast(message, title = 'Notificação', iconClass = 'fas fa-check', bgColor = 'bg-success') {
192|        // 	// Criação do Toast
193|        //     $(document).Toasts('create', {
194|        //     class: bgColor,
195|        //     title: title,
196|        //     subtitle: '', // Subtítulo opcional
197|        //     icon: iconClass, // Ícone FontAwesome
198|        //     body: message, // Mensagem exibida
199|        //     autohide: true, // Fecha automaticamente
200|        //     delay: 3000, // Tempo em milissegundos para fechamento
201|        //     autoremove: true // Remove o Toast do DOM automaticamente
202|        //     });
203|        // }
204|        
205|        document.addEventListener("DOMContentLoaded", () => {
206|            function collectFormData() {
207|                // Captura os valores do formulário
208|                const title = document.getElementById("tituloPermissao").value.trim();
209|                const description = document.getElementById("descricaoPermissao").value.trim();
210|                const teamLimitation = document.getElementById("limitacaoEquipe").checked;
211|                const areaLimitation = document.getElementById("limitacaoArea").checked;
212|
213|                // Captura a cor selecionada
214|                const selectedColorBlock = document.querySelector(".color-block.selected");
215|                const colorID = selectedColorBlock ? selectedColorBlock.dataset.colorId : null;
216|                const color = selectedColorBlock ? selectedColorBlock.dataset.color : null;
217|                const letterColor = selectedColorBlock ? selectedColorBlock.dataset.letterColor : null;
218|
219|                // Captura as permissões
220|                const canView = document.getElementById("canView").checked;
221|                const canCreate = document.getElementById("canCreate").checked;
222|                const canEdit = document.getElementById("canEdit").checked;
223|                const canDelete = document.getElementById("canDelete").checked;
224|
225|                // Retorna os dados formatados em JSON
226|                return {
227|                    title,
228|                    description,
229|                    teamLimitation,
230|                    areaLimitation,
231|                    colorID,
232|                    color,
233|                    letterColor,
234|                    canView,
235|                    canCreate,
236|                    canEdit,
237|                    canDelete
238|                };
239|            }
240|
241|            function sendFormData() {
242|                const formData = collectFormData();
243|                const tagId = document.getElementById("adminForm").dataset.tagId; // Obtém o ID da permissão
244|
245|                // Enviar os dados via PUT no formato JSON
246|                fetch(`/manager/permissionstags/edit/${tagId}`, {
247|                    method: 'PUT',
248|                    headers: {
249|                        'Content-Type': 'application/json'
250|                    },
251|                    body: JSON.stringify(formData)
252|                })
253|                .then(response => response.json())
254|                .then(data => {
255|                    if (data.status === 'success') {
256|						// Exibe uma mensagem de sucesso no console ou em um alerta
257|						showToast(data.message, 'Sucesso', 'fas fa-check', 'bg-success');
258|						// Atualiza a página
259|						setTimeout(() => {
260|							// Redireciona para a lista de permissões após a edição
261|							window.location.href = "/manager/permissionstags";
262|						}, 1000); // Adiciona um pequeno delay para permitir que o usuário veja o toast
263|					} else {
264|						showToast(data.message, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
265|					}
266|                })
267|                .catch(error => {
268|                    showToast(error, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
269|                });
270|            }
271|
272|            // Evento para capturar o clique nos blocos de cor
273|            document.querySelectorAll(".color-block").forEach(block => {
274|                block.addEventListener("click", () => {
275|                    document.querySelectorAll(".color-block").forEach(b => b.classList.remove("selected"));
276|                    block.classList.add("selected");
277|                });
278|            });
279|
280|            // Evento de submissão do formulário
281|            document.getElementById("adminForm").addEventListener("submit", (event) => {
282|                event.preventDefault();
283|                sendFormData();
284|            });
285|        });
286|
287|	</script>
288|{% endblock %}

{"query_name": "2026-08-19"}

docs/database-changes/2026-08-19-permission-tag-area-limitation.md

{"search_text": "permissions_tags/edit"}

File: docs/qa/communication_center/QA_arquivos_communication_center.txt
Match lines: 1
127|M	templates/permissions_tags/edit.html.twig

File: docs/qa/communication_center/QA_impacto_communication_center.txt
Match lines: 1
127| templates/permissions_tags/edit.html.twig          |    26 +-

File: src/Controller/PermissionsTagsController.php
Match lines: 1
165|        return $this->render('permissions_tags/edit.html.twig', [

{"query_name": "database-changes"}

docs/database-changes/2026-06-13-empresas-parceiras-contractor.md
docs/database-changes/2026-07-08-interview-template-terms-cpf-ip.md
docs/database-changes/2026-07-10-interview-researchers.md
docs/database-changes/2026-07-12-text-to-bpmn-conversation-workflow.md
docs/database-changes/2026-07-13-interview-template-client-integration.md
docs/database-changes/2026-07-13-interview-template-external-survey.md
docs/database-changes/2026-07-13-interview-template-integration-token.md
docs/database-changes/2026-07-14-interview-media-interaction-definition.md
docs/database-changes/2026-07-23-service-package-apps-catalog.md
docs/database-changes/2026-07-30-invitation-temp-password.md
docs/database-changes/2026-07-31-company-workarea-loading.md
docs/database-changes/2026-07-31-member-import-batch.md
docs/database-changes/2026-08-03-service-package-extras.md
docs/database-changes/2026-08-05-escalas-e-turnos.md
docs/database-changes/2026-08-06-goal-cycle-check-in-frequency.md
docs/database-changes/2026-08-07-gestao-carreiras-roles.md
docs/database-changes/2026-08-11-project-mention-automation.md
docs/database-changes/2026-08-11-ssma-direito-de-recusa.md
docs/database-changes/2026-08-12-goal-description-text.md
docs/database-changes/2026-08-12-project-task-custom-fields.md
docs/database-changes/2026-08-13-conversation-domain-state.md
docs/database-changes/2026-08-14-company-home-hero-image.md
docs/database-changes/2026-08-14-contractor-requirement-instances.md
docs/database-changes/2026-08-14-contractor-requirement-optional-responsible.md
docs/database-changes/2026-08-16-company-workarea-loading-bg-image.md
docs/database-changes/2026-08-17-delete-company-96-account-profiles.md
docs/database-changes/2026-08-18-project-custom-fields.md
docs/database-changes/2026-08-19-permission-tag-area-limitation.md
docs/database-changes/2026-08-21-project-collaborator-permissions.md
docs/database-changes/2026-08-23-demo-dataset-manifest.md
docs/database-changes/2026-08-28-interview-template-interaction-mode.md
docs/database-changes/2026-08-31-ssma-cause-tree-state.md
docs/database-changes/20260703-ssma-occurrence-create-permission.md
docs/database-changes/20260715-company-area-organizational-structure.md
docs/database-changes/20260715-seed-catalog-areas-atuacao-especialidades.md
docs/database-changes/20260716-add-company-area-parent-id-if-missing.md
docs/database-changes/README.md

{"file_path": "docs/database-changes/2026-08-19-permission-tag-area-limitation.md"}

File: docs/database-changes/2026-08-19-permission-tag-area-limitation.md (Total lines: 94)
IS_TRUNCATED: false
LINE_RANGE: 1-94
1|# Mudanca De Banco - Limitacao Por Area Em Permission Tag
2|
3|## Objetivo
4|
5|Adicionar o flag `area_limitation` em `permission_tag` e criar as tags globais **Supervisor de Área** e **Gestor de Área**, no mesmo modelo das tags de equipe (`team_limitation`).
6|
7|## Por que foi criado
8|
9|- Tags existentes cobrem limitacao por equipe, nao por area organizacional.
10|- Supervisor de Área precisa visualizar apenas o recorte da area (`can_view` + `area_limitation`).
11|- Gestor de Área precisa do mesmo recorte com acoes de escrita (`can_view`, `can_create`, `can_edit`, `can_delete` + `area_limitation`).
12|
13|## Quem consome
14|
15|| Consumidor | Uso |
16||---|---|
17|| `PermissionTag` | Persistencia do flag `areaLimitation` |
18|| `PermissionTagByMember` | Vinculo membro/produto/tag (sem mudanca de schema) |
19|| Telas e servicos de permissao | Passam a poder filtrar por area quando a tag estiver atribuida |
20|
21|## Escopo
22|
23|### Coluna em tabela existente `permission_tag`
24|
25|| Coluna | Tipo | Default | Motivo |
26||---|---|---|---|
27|| `area_limitation` | `TINYINT(1) NOT NULL` | `0` | Recorte de visibilidade/acao pela area do membro |
28|
29|Dados existentes: tags ja cadastradas ficam com `area_limitation = 0`. Sem backfill adicional.
30|
31|### Seed de tags
32|
33|| Nome | can_view | can_create | can_edit | can_delete | team_limitation | area_limitation |
34||---|---|---|---|---|---|---|
35|| Supervisor de Área | 1 | 0 | 0 | 0 | 0 | 1 |
36|| Gestor de Área | 1 | 1 | 1 | 1 | 0 | 1 |
37|
38|Inserts sao idempotentes (`WHERE NOT EXISTS` pelo `name`).
39|
40|## Migration Ou Script
41|
42|```text
43|Arquivo: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
44|Tipo: migration Doctrine (up/down), idempotente via schema manager + NOT EXISTS
45|Ambiente alvo: todos os ambientes
46|```
47|
48|## Plano De Execucao
49|
50|1. Antes: `doctrine:migrations:status`; confirmar `Version20260819160000` ainda `New` se aplicavel.
51|2. Durante: `php bin/console doctrine:migrations:migrate --no-interaction`.
52|3. Depois: conferir coluna e as duas tags; atribuir a um membro de teste e validar o recorte por area.
53|
54|## Validacao
55|
56|Antes:
57|
58|```sql
59|SHOW COLUMNS FROM permission_tag LIKE 'area_limitation';
60|SELECT id, name FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área');
61|```
62|
63|Depois (esperado: coluna presente com default 0; duas tags com `area_limitation = 1`):
64|
65|```sql
66|SHOW COLUMNS FROM permission_tag LIKE 'area_limitation';
67|
68|SELECT name, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation
69|FROM permission_tag
70|WHERE name IN ('Supervisor de Área', 'Gestor de Área');
71|```
72|
73|Como testar funcionalmente:
74|
75|1. Abrir cadastro de tags de permissao e confirmar as duas novas tags.
76|2. Atribuir Supervisor de Área a um membro e conferir visao restrita a area.
77|3. Atribuir Gestor de Área e conferir visao + criar/editar/excluir no mesmo recorte.
78|
79|## Rollback Ou Mitigacao
80|
81|O `down` remove vinculos em `permission_tag_suggestions` e `permission_tag_by_member` das duas tags, apaga as tags e dropa `area_limitation`.
82|
83|Se o codigo novo ja estiver deployado, reverter so o schema quebra a leitura de `PermissionTag::$areaLimitation`. Preferir migration corretiva nova em vez de editar `Version20260819160000`.
84|
85|## Riscos
86|
87|- `ALTER TABLE` em `permission_tag` e tabela pequena; lock irrelevante.
88|- Nomes das tags precisam permanecer literais (`Supervisor de Área`, `Gestor de Área`) para o `down` e para buscas por `findOneBy(['name' => ...])`.
89|- Drop no `down` e destrutivo para vinculos dessas tags.
90|
91|## Responsavel
92|
93|Time de produto / permissoes.
94|

{"search_text": "permission_tag", "file_patterns": ["migrations/"]}

File: migrations/Version20260508141500.php
Match lines: 11
154|        $this->renameColumnIfNeeded('permission_tag_by_member', 'memberTagID', 'member_tag_id', 'INT NOT NULL AUTO_INCREMENT');
155|        $this->renameColumnIfNeeded('permission_tag_by_member', 'companyMemberID', 'company_member_id', 'INT NOT NULL');
156|        $this->renameColumnIfNeeded('permission_tag_by_member', 'productID', 'product_id', 'INT NOT NULL');
157|        $this->renameColumnIfNeeded('permission_tag_by_member', 'tagID', 'tag_id', 'INT NOT NULL');
162|        $this->renameColumnIfNeeded('permission_tag', 'colorID', 'color_id', 'INT NOT NULL');
163|        $this->renameColumnIfNeeded('permission_tag', 'letterColor', 'letter_color', 'VARCHAR(7) DEFAULT NULL');
164|        $this->renameColumnIfNeeded('permission_tag', 'teamLimitation', 'team_limitation', 'TINYINT(1) NOT NULL');
165|        $this->renameColumnIfNeeded('permission_tag', 'canView', 'can_view', 'TINYINT(1) NOT NULL');
166|        $this->renameColumnIfNeeded('permission_tag', 'canCreate', 'can_create', 'TINYINT(1) NOT NULL');
167|        $this->renameColumnIfNeeded('permission_tag', 'canEdit', 'can_edit', 'TINYINT(1) NOT NULL');
168|        $this->renameColumnIfNeeded('permission_tag', 'canDelete', 'can_delete', 'TINYINT(1) NOT NULL');

File: migrations/Version20260510120000_AddSsmaPermissionTagTablesIfMissing.php
Match lines: 9
17|        return 'Create ssma_permission_tag and ssma_permission_tag_member if missing (fixes TableNotFoundException on SSMA screens).';
26|        if (!$this->tableExists('ssma_permission_tag')) {
27|            $this->addSql('CREATE TABLE ssma_permission_tag ( id INT AUTO_INCREMENT NOT NULL, company_id INT NOT NULL, name VARCHAR(255) NOT NULL, occurrence_type_key VARCHAR(100) DEFAULT NULL, created_at DATETIME NOT NULL, PRIMARY KEY (id), INDEX IDX_SPT_COMPANY (company_id), CONSTRAINT FK_spt_company FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
30|        if (!$this->tableExists('ssma_permission_tag_member')) {
31|            $this->addSql('CREATE TABLE ssma_permission_tag_member ( id INT AUTO_INCREMENT NOT NULL, tag_id INT NOT NULL, company_member_id INT NOT NULL, clinica VARCHAR(255) DEFAULT NULL, PRIMARY KEY (id), UNIQUE INDEX uniq_sptm_tag_member (tag_id, company_member_id), INDEX IDX_SPTM_TAG (tag_id), INDEX IDX_SPTM_MEMBER (company_member_id), CONSTRAINT FK_sptm_tag FOREIGN KEY (tag_id) REFERENCES ssma_permission_tag (id) ON DELETE CASCADE, CONSTRAINT FK_sptm_member FOREIGN KEY (company_member_id) REFERENCES company_members (id) ON DELETE CASCADE ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
37|        if ($this->tableExists('ssma_permission_tag_member')) {
38|            $this->addSql('DROP TABLE ssma_permission_tag_member');
40|        if ($this->tableExists('ssma_permission_tag')) {
41|            $this->addSql('DROP TABLE ssma_permission_tag');

File: migrations/Version20260519124600.php
Match lines: 5
181|        if (!$this->tableExists('permission_tag_suggestions') || !$this->tableExists('permission_tag')) {
186|            INSERT INTO permission_tag_suggestions (permission_tag_id, suggestion_id, created_at)
188|            FROM permission_tag pt
196|            LEFT JOIN permission_tag_suggestions pts
197|                ON pts.permission_tag_id = pt.id

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 18
14|        return 'Adiciona area_limitation em permission_tag e cria as tags Supervisor de Área e Gestor de Área.';
20|        if (!$schemaManager->tablesExist(['permission_tag'])) {
24|        $table = $schemaManager->introspectTable('permission_tag');
26|            $this->addSql('ALTER TABLE permission_tag ADD area_limitation TINYINT(1) NOT NULL DEFAULT 0');
29|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
31|            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Supervisor de Área')");
33|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
35|            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Gestor de Área')");
41|        if (!$schemaManager->tablesExist(['permission_tag'])) {
45|        if ($schemaManager->tablesExist(['permission_tag_suggestions'])) {
46|            $this->addSql("DELETE FROM permission_tag_suggestions WHERE permission_tag_id IN (
47|                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
51|        if ($schemaManager->tablesExist(['permission_tag_by_member'])) {
52|            $this->addSql("DELETE FROM permission_tag_by_member WHERE tag_id IN (
53|                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
57|        $this->addSql("DELETE FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')");
59|        $table = $schemaManager->introspectTable('permission_tag');
61|            $this->addSql('ALTER TABLE permission_tag DROP area_limitation');

{"file_patterns": ["migrations/"], "search_text": "CREATE TABLE permission_tag"}

No matches found

{"search_text": "color_id|colorsTags|colorId", "file_patterns": ["src/Controller/PermissionsTagsController.php", "src/Repository/"], "use_perl_regexp": true}

File: src/Controller/PermissionsTagsController.php
Match lines: 11
5|use App\Entity\ColorsTagsPermissions;
45|        $colorsTags = $entityManager->getRepository(ColorsTagsPermissions::class);
50|            'colorsTags' => $colorsTags,
67|            if (empty($data['colorID'])) {
76|            $permissionTag->setColorID($data['colorID']);
98|            'colorsTags' => $this->getColorsTags(),
122|                if (empty($data['colorID'])) {
130|                $tag->setColorID($data['colorID']);
167|            'colorsTags' => $this->getColorsTags(),
472|    private function getColorsTags()
474|        return $this->getDoctrine()->getRepository(ColorsTagsPermissions::class)->findAll();

File: src/Repository/ColorsTagsPermissionsRepository.php
Match lines: 7
5|use App\Entity\ColorsTagsPermissions;
10| * @method ColorsTagsPermissions|null find($id, $lockMode = null, $lockVersion = null)
11| * @method ColorsTagsPermissions|null findOneBy(array $criteria, array $orderBy = null)
12| * @method ColorsTagsPermissions[]    findAll()
13| * @method ColorsTagsPermissions[]    findBy(array $criteria, array $orderBy = null, $limit = null, $offset = null)
15|class ColorsTagsPermissionsRepository extends ServiceEntityRepository
19|        parent::__construct($registry, ColorsTagsPermissions::class);

{"file_path": "src/Controller/PermissionsTagsController.php"}

File: src/Controller/PermissionsTagsController.php (Total lines: 478)
IS_TRUNCATED: false
LINE_RANGE: 1-478
1|<?php
2|
3|namespace App\Controller;
4|
5|use App\Entity\ColorsTagsPermissions;
6|use App\Entity\PermissionTag;
7|use App\Entity\ProductPermission;
8|use App\Entity\TagProductPermissions;
9|use App\Entity\Config;
10|use App\Entity\Process;
11|use App\Entity\Company;
12|use Doctrine\ORM\EntityManagerInterface;
13|use SebastianBergmann\Environment\Console;
14|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
15|use Symfony\Component\HttpFoundation\JsonResponse;
16|use Symfony\Component\HttpFoundation\Request;
17|use Symfony\Component\HttpFoundation\Response;
18|use Symfony\Component\Security\Core\Security;
19|use App\Entity\Product;
20|use App\Entity\PermissionTagByMember;
21|use App\Entity\CompanyMembers;
22|
23|class PermissionsTagsController extends AbstractController
24|{
25|    private $security;
26|
27|    public function __construct(Security $security)
28|    {
29|        $this->security = $security;
30|    }
31|
32|    /**
33|     * Flags de limitação/permissão chegam por JSON e podem vir como bool, "0"/"1", "true"/"false"
34|     * ou null. Normaliza para bool antes dos setters, que só aceitam bool.
35|     */
36|    private function toBoolFlag(mixed $value): bool
37|    {
38|        return filter_var($value, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE) ?? false;
39|    }
40|
41|    public function index(EntityManagerInterface $entityManager): Response
42|    {
43|        $user = $this->security->getUser();
44|        $tags = $entityManager->getRepository(PermissionTag::class)->findAll();
45|        $colorsTags = $entityManager->getRepository(ColorsTagsPermissions::class);
46|
47|        return $this->render('permissions_tags/index.html.twig', [
48|            'tags' => $tags,
49|            'user' => $user,
50|            'colorsTags' => $colorsTags,
51|        ]);
52|    }
53|
54|    public function add(Request $request, EntityManagerInterface $entityManager): Response
55|    {
56|        if ($request->isMethod('POST')) {
57|            // Decodifica os dados JSON recebidos
58|            $data = json_decode($request->getContent(), true);
59|    
60|            // Validação básica dos campos obrigatórios
61|            if (empty($data['title'])) {
62|                return new JsonResponse(['status' => 'error', 'message' => 'O título é obrigatório.'], 400);
63|            }
64|            if (empty($data['description'])) {
65|                return new JsonResponse(['status' => 'error', 'message' => 'A descrição é obrigatória.'], 400);
66|            }
67|            if (empty($data['colorID'])) {
68|                return new JsonResponse(['status' => 'error', 'message' => 'A cor é obrigatória.'], 400);
69|            }
70|            
71|    
72|            // Criando uma nova entidade PermissionTag
73|            $permissionTag = new PermissionTag();
74|            $permissionTag->setName($data['title']);
75|            $permissionTag->setDescription($data['description']);
76|            $permissionTag->setColorID($data['colorID']);
77|            $permissionTag->setColor($data['color'] ?? null);
78|            $permissionTag->setLetterColor($data['letterColor'] ?? null);
79|            $permissionTag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
80|            $permissionTag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
81|            $permissionTag->setCanView($data['canView'] ?? false);
82|            $permissionTag->setCanCreate($data['canCreate'] ?? false);
83|            $permissionTag->setCanEdit($data['canEdit'] ?? false);
84|            $permissionTag->setCanDelete($data['canDelete'] ?? false);
85|    
86|            // Persiste a entidade no banco de dados
87|            $entityManager->persist($permissionTag);
88|            $entityManager->flush();
89|    
90|            return new JsonResponse([
91|                'status' => 'success',
92|                'message' => 'Permissão adicionada com sucesso!',
93|                'id' => $permissionTag->getId()
94|            ], 201);
95|        }
96|    
97|        return $this->render('permissions_tags/add.html.twig', [
98|            'colorsTags' => $this->getColorsTags(),
99|        ]);
100|    }
101|
102|    public function edit(Request $request, EntityManagerInterface $entityManager, int $id): Response
103|    {
104|        if ($request->isMethod('PUT')) {
105|            // Busca a permissão pelo ID
106|            $tag = $entityManager->getRepository(PermissionTag::class)->find($id);
107|        
108|            if (!$tag) {
109|                return new JsonResponse(['status' => 'error', 'message' => 'Tag não encontrada'], 404);
110|            }
111|        
112|            try {
113|                $data = json_decode($request->getContent(), true);
114|        
115|                // Validação básica dos campos obrigatórios
116|                if (empty($data['title'])) {
117|                    return new JsonResponse(['status' => 'error', 'message' => 'O título é obrigatório.'], 400);
118|                }
119|                if (empty($data['description'])) {
120|                    return new JsonResponse(['status' => 'error', 'message' => 'A descrição é obrigatória.'], 400);
121|                }
122|                if (empty($data['colorID'])) {
123|                    return new JsonResponse(['status' => 'error', 'message' => 'A cor é obrigatória.'], 400);
124|                }
125|                
126|        
127|                // Atualiza os dados da tag
128|                $tag->setName($data['title']);
129|                $tag->setDescription($data['description']);
130|                $tag->setColorID($data['colorID']);
131|                $tag->setColor($data['color'] ?? null);
132|                $tag->setLetterColor($data['letterColor'] ?? null);
133|                $tag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
134|                $tag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
135|                
136|                // Atualiza permissões
137|                $tag->setCanView($data['canView'] ?? false);
138|                $tag->setCanCreate($data['canCreate'] ?? false);
139|                $tag->setCanEdit($data['canEdit'] ?? false);
140|                $tag->setCanDelete($data['canDelete'] ?? false);
141|        
142|                // Salva as mudanças no banco de dados
143|                $entityManager->flush();
144|        
145|                return new JsonResponse([
146|                    'status' => 'success',
147|                    'message' => 'Permissão atualizada com sucesso!',
148|                    'id' => $tag->getId()
149|                ], 200);
150|            } catch (\Exception $e) {
151|                return new JsonResponse(['status' => 'error', 'message' => 'Erro ao atualizar a permissão: ' . $e->getMessage()], 500);
152|            }
153|        }
154|    
155|        // Caso seja uma requisição GET, retorna a página de edição
156|        $tag = $entityManager->getRepository(PermissionTag::class)->find($id);
157|
158|        if (!$tag) {
159|            throw $this->createNotFoundException('Tag não encontrada.');
160|        }
161|
162|        // Nome específico de propósito: a tela estende o layoutAdmin, que inclui componentes
163|        // compartilhados sem `only`. Uma variável genérica `tag` colidiria com o atributo `tag`
164|        // esperado por esses componentes.
165|        return $this->render('permissions_tags/edit.html.twig', [
166|            'permissionTag' => $tag,
167|            'colorsTags' => $this->getColorsTags(),
168|        ]);
169|    }
170|
171|    public function delete(PermissionTag $tag = null, EntityManagerInterface $entityManager): JsonResponse
172|    {
173|        if (!$tag) {
174|            return new JsonResponse([
175|                'status' => 'error',
176|                'message' => 'Tag não encontrada'
177|            ], 404);
178|        }
179|
180|        try {
181|            // Remove a tag de permissão
182|            $entityManager->remove($tag);
183|            $entityManager->flush();
184|
185|            return new JsonResponse([
186|                'status' => 'success',
187|                'message' => 'A permissão foi excluída com sucesso.'
188|            ], 200);
189|        } catch (\Exception $e) {
190|            return new JsonResponse([
191|                'status' => 'error',
192|                'message' => 'Erro ao excluir a permissão: ' . $e->getMessage()
193|            ], 500);
194|        }
195|    }
196|
197|    public function updatePermissionTagByMember(Request $request, EntityManagerInterface $entityManager): JsonResponse
198|    {
199|        $data = json_decode($request->getContent(), true);
200|
201|        if (empty($data['companyMemberID'])) {
202|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
203|        }
204|        if (empty($data['productSlug'])) {
205|            return new JsonResponse(['status' => 'error', 'message' => 'A slug do produto é obrigatória.'], 400);
206|        }
207|        if (empty($data['tagID'])) {
208|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
209|        }
210|
211|        $companyMemberID = (int) $data['companyMemberID'];
212|        $productSlug = $data['productSlug'];
213|        $tagID = (int) $data['tagID'];
214|
215|        $product = $entityManager->getRepository(Product::class)->findOneBy(['slug' => $productSlug]);
216|        if (!$product) {
217|            return new JsonResponse(['status' => 'error', 'message' => 'Produto não encontrado.'], 404);
218|        }
219|
220|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
221|        if (!$permissionTag) {
222|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
223|        }
224|
225|        $permissionTagByMember = $entityManager->getRepository(PermissionTagByMember::class)
226|            ->findOneBy([
227|                'companyMemberID' => $companyMemberID,
228|                'productID' => $product->getId()
229|            ]);
230|
231|        if ($permissionTagByMember) {
232|            $permissionTagByMember->setTagID($tagID);
233|        } else {
234|            $permissionTagByMember = new PermissionTagByMember();
235|            $permissionTagByMember->setCompanyMemberID($companyMemberID);
236|            $permissionTagByMember->setProductID($product->getId());
237|            $permissionTagByMember->setTagID($tagID);
238|            $entityManager->persist($permissionTagByMember);
239|        }
240|
241|        $entityManager->flush();
242|
243|        return new JsonResponse([
244|            'status' => 'success',
245|            'message' => 'Permissão do membro atualizada com sucesso!',
246|            'data' => [
247|                'companyMemberID' => $companyMemberID,
248|                'productSlug' => $productSlug,
249|                'tagID' => $tagID,
250|                'productName' => $product->getName(),
251|                'tagName' => $permissionTag->getName()
252|            ]
253|        ], 200);
254|    }
255|
256|    /**
257|     * Atualiza a permissão de um membro para um produto específico via parâmetros na URL
258|     */
259|    public function updatePermissionTagByMemberUrl(int $companyMemberID, string $productSlug, int $tagID, EntityManagerInterface $entityManager): JsonResponse
260|    {
261|        if (empty($companyMemberID)) {
262|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
263|        }
264|        if (empty($productSlug)) {
265|            return new JsonResponse(['status' => 'error', 'message' => 'A slug do produto é obrigatória.'], 400);
266|        }
267|        if (empty($tagID)) {
268|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
269|        }
270|
271|        $product = $entityManager->getRepository(Product::class)->findOneBy(['slug' => $productSlug]);
272|        if (!$product) {
273|            return new JsonResponse(['status' => 'error', 'message' => 'Produto não encontrado.'], 404);
274|        }
275|
276|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
277|        if (!$permissionTag) {
278|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
279|        }
280|
281|        $permissionTagByMember = $entityManager->getRepository(PermissionTagByMember::class)
282|            ->findOneBy([
283|                'companyMemberID' => $companyMemberID,
284|                'productID' => $product->getId()
285|            ]);
286|
287|        if ($permissionTagByMember) {
288|            $permissionTagByMember->setTagID($tagID);
289|        } else {
290|            $permissionTagByMember = new PermissionTagByMember();
291|            $permissionTagByMember->setCompanyMemberID($companyMemberID);
292|            $permissionTagByMember->setProductID($product->getId());
293|            $permissionTagByMember->setTagID($tagID);
294|            $entityManager->persist($permissionTagByMember);
295|        }
296|
297|        $entityManager->flush();
298|
299|        return new JsonResponse([
300|            'status' => 'success',
301|            'message' => 'Permissão do membro atualizada com sucesso!',
302|            'data' => [
303|                'companyMemberID' => $companyMemberID,
304|                'productSlug' => $productSlug,
305|                'tagID' => $tagID,
306|                'productName' => $product->getName(),
307|                'tagName' => $permissionTag->getName()
308|            ]
309|        ], 200);
310|    }
311|
312|    public function updateGlobalPermissionTagByMember(Request $request, EntityManagerInterface $entityManager): JsonResponse
313|    {
314|        $data = json_decode($request->getContent(), true);
315|
316|        if (empty($data['companyMemberID'])) {
317|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
318|        }
319|        if (empty($data['tagID'])) {
320|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
321|        }
322|
323|        $companyMemberID = (int) $data['companyMemberID'];
324|        $tagID = (int) $data['tagID'];
325|
326|        $companyMember = $entityManager->getRepository(CompanyMembers::class)->find($companyMemberID);
327|        if (!$companyMember) {
328|            return new JsonResponse(['status' => 'error', 'message' => 'Membro da empresa não encontrado.'], 404);
329|        }
330|
331|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
332|        if (!$permissionTag) {
333|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
334|        }
335|
336|        $companyMember->setGlobalPermissionTag($permissionTag);
337|
338|        $entityManager->flush();
339|
340|        return new JsonResponse([
341|            'status' => 'success',
342|            'message' => 'Tag global de permissão do membro atualizada com sucesso!',
343|            'data' => [
344|                'companyMemberID' => $companyMemberID,
345|                'tagID' => $tagID,
346|                'memberName' => $companyMember->getFullName(),
347|                'tagName' => $permissionTag->getName()
348|            ]
349|        ], 200);
350|    }
351|
352|    /**
353|     * Atualiza a permissão global de um membro via parâmetros na URL
354|     */
355|    public function updateGlobalPermissionTagByMemberUrl(int $companyMemberID, int $tagID, EntityManagerInterface $entityManager): JsonResponse
356|    {
357|        if (empty($companyMemberID)) {
358|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
359|        }
360|        if (empty($tagID)) {
361|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
362|        }
363|
364|        $companyMember = $entityManager->getRepository(CompanyMembers::class)->find($companyMemberID);
365|        if (!$companyMember) {
366|            return new JsonResponse(['status' => 'error', 'message' => 'Membro da empresa não encontrado.'], 404);
367|        }
368|
369|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
370|        if (!$permissionTag) {
371|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
372|        }
373|
374|        $companyMember->setGlobalPermissionTag($permissionTag);
375|
376|        $entityManager->flush();
377|
378|        return new JsonResponse([
379|            'status' => 'success',
380|            'message' => 'Tag global de permissão do membro atualizada com sucesso!',
381|            'data' => [
382|                'companyMemberID' => $companyMemberID,
383|                'tagID' => $tagID,
384|                'memberName' => $companyMember->getFullName(),
385|                'tagName' => $permissionTag->getName()
386|            ]
387|        ], 200);
388|    }
389|
390|    public function getPermissionsByTag(int $id, EntityManagerInterface $entityManager): JsonResponse
391|    {
392|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($id);
393|
394|        if (!$permissionTag) {
395|            return new JsonResponse([
396|                'status' => 'error',
397|                'message' => 'Tag não encontrada'
398|            ], 404);
399|        }
400|
401|        $permissions = array_map(function ($permission) {
402|            return [
403|                'product_name' => $permission->getProduct(),
404|                'permissions' => explode(',', $permission->getPermission()),
405|            ];
406|        }, $permissionTag->getTagProductPermissions()->toArray());
407|
408|        return new JsonResponse([
409|            'status' => 'success',
410|            'tag_name' => $permissionTag->getName(),
411|            'permissions' => $permissions
412|        ]);
413|    }
414|
415|    private function processPermissions(array $products, PermissionTag $tag, EntityManagerInterface $entityManager): void
416|    {
417|        foreach ($products as $productData) {
418|            if (empty($productData['productID'])) {
419|                continue;
420|            }
421|            
422|            
423|            $permissions = [];
424|            foreach (['view', 'create', 'edit', 'delete'] as $action) {
425|                if (!empty($productData[$action])) {
426|                    $permissions[] = $action;
427|                }
428|            }
429|
430|            $existingPermission = $tag->getTagProductPermissions()->filter(function ($perm) use ($productData) {
431|                return $perm->getProductID() === $productData['productID'];
432|            })->first();
433|
434|            if ($existingPermission) {
435|                $existingPermission->setPermission(implode(',', $permissions));
436|            } else {
437|                $newPermission = new TagProductPermissions();
438|                $newPermission->setProductID($productData['productID']);
439|                $newPermission->setPermission(implode(',', $permissions));
440|                $newPermission->setPermissionTag($tag);
441|                $entityManager->persist($newPermission);
442|            }
443|        }
444|    }
445|
446|    private function getConfig()
447|    {
448|        return $this->getDoctrine()->getRepository(Config::class)->findOneBy(['company' => $this->getUser()->getCompany()]);
449|    }
450|
451|    private function getProcessList()
452|    {
453|        if ($this->getUser()->isSuperAdmin()) {
454|            return $this->getDoctrine()->getRepository(Process::class)->findAll();
455|        }
456|        return [];
457|    }
458|
459|    private function getCompanies()
460|    {
461|        if ($this->getUser()->isSuperAdmin()) {
462|            return $this->getDoctrine()->getRepository(Company::class)->findBy([], ['name' => 'asc']);
463|        }
464|        return [];
465|    }
466|
467|    private function getProductsPermissions()
468|    {
469|        return $this->getDoctrine()->getRepository(ProductPermission::class)->findAll();
470|    }
471|
472|    private function getColorsTags()
473|    {
474|        return $this->getDoctrine()->getRepository(ColorsTagsPermissions::class)->findAll();
475|    }
476|
477|}
478|

{"file_path": "src/Entity/PermissionTag.php"}

File: src/Entity/PermissionTag.php (Total lines: 210)
IS_TRUNCATED: false
LINE_RANGE: 1-210
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\PermissionTagRepository;
6|use Doctrine\Common\Collections\ArrayCollection;
7|use Doctrine\Common\Collections\Collection;
8|use Doctrine\ORM\Mapping as ORM;
9|
10|/**
11| * @ORM\Entity(repositoryClass=PermissionTagRepository::class)
12| */
13|class PermissionTag
14|{
15|    /**
16|     * @ORM\Id
17|     * @ORM\GeneratedValue
18|     * @ORM\Column(type="integer")
19|     */
20|    private $id;
21|
22|    /**
23|     * @ORM\Column(type="string", length=255)
24|     */
25|    private $name;
26|
27|    /**
28|     * @ORM\Column(type="string", length=255, nullable=true)
29|     */
30|    private $description;
31|
32|    /**
33|     * @ORM\Column(name="team_limitation", type="boolean", nullable=false)
34|     */
35|    private $teamLimitation;
36|
37|    /**
38|     * @ORM\Column(name="area_limitation", type="boolean", nullable=false, options={"default": false})
39|     */
40|    private $areaLimitation = false;
41|
42|    /**
43|     * @ORM\Column(name="color_id", type="integer", nullable=false)
44|     */
45|    private $colorID;
46|
47|    /**
48|     * @ORM\Column(type="string", length=7, nullable=true)
49|     */
50|    private $color;
51|
52|    /**
53|     * @ORM\Column(name="letter_color", type="string", length=7, nullable=true)
54|     */
55|    private $letterColor;
56|
57|    /**
58|     * @ORM\Column(name="can_view", type="boolean", nullable=false)
59|     */
60|    private $canView;
61|
62|    /**
63|     * @ORM\Column(name="can_create", type="boolean", nullable=false)
64|     */
65|    private $canCreate;
66|
67|    /**
68|     * @ORM\Column(name="can_edit", type="boolean", nullable=false)
69|     */
70|    private $canEdit;
71|
72|    /**
73|     * @ORM\Column(name="can_delete", type="boolean", nullable=false)
74|     */
75|    private $canDelete;
76|
77|    public function getId(): ?int
78|    {
79|        return $this->id;
80|    }
81|
82|    public function getName(): ?string
83|    {
84|        return $this->name;
85|    }
86|
87|    public function setName(string $name): self
88|    {
89|        $this->name = $name;
90|
91|        return $this;
92|    }
93|
94|    public function getDescription(): ?string
95|    {
96|        return $this->description;
97|    }
98|
99|    public function setDescription(?string $description): self
100|    {
101|        $this->description = $description;
102|
103|        return $this;
104|    }
105|
106|    public function getColorID(): ?int
107|    {
108|        return $this->colorID;
109|    }
110|
111|    public function setColorID(int $colorID): self
112|    {
113|        $this->colorID = $colorID;
114|
115|        return $this;
116|    }
117|
118|    public function getTeamLimitation(): ?bool
119|    {
120|        return $this->teamLimitation;
121|    }
122|
123|    public function setTeamLimitation(bool $teamLimitation): self
124|    {
125|        $this->teamLimitation = $teamLimitation;
126|
127|        return $this;
128|    }
129|
130|    public function getAreaLimitation(): ?bool
131|    {
132|        return $this->areaLimitation;
133|    }
134|
135|    public function setAreaLimitation(bool $areaLimitation): self
136|    {
137|        $this->areaLimitation = $areaLimitation;
138|
139|        return $this;
140|    }
141|
142|    public function setColor(string $color): void
143|    {
144|        $this->color = $color;
145|    }
146|
147|    public function getColor(): string
148|    {
149|        return $this->color ?? '';
150|    }
151|
152|    public function setLetterColor(string $letterColor): void
153|    {
154|        $this->letterColor = $letterColor;
155|    }
156|
157|    public function getLetterColor(): string
158|    {
159|        return $this->letterColor ?? '';
160|    }
161|
162|    public function getCanView(): ?bool
163|    {
164|        return $this->canView;
165|    }
166|
167|    public function setCanView(bool $canView): self
168|    {
169|        $this->canView = $canView;
170|
171|        return $this;
172|    }
173|
174|    public function getCanCreate(): ?bool
175|    {
176|        return $this->canCreate;
177|    }
178|
179|    public function setCanCreate(bool $canCreate): self
180|    {
181|        $this->canCreate = $canCreate;
182|
183|        return $this;
184|    }
185|
186|    public function getCanEdit(): ?bool
187|    {
188|        return $this->canEdit;
189|    }
190|
191|    public function setCanEdit(bool $canEdit): self
192|    {
193|        $this->canEdit = $canEdit;
194|
195|        return $this;
196|    }
197|
198|    public function getCanDelete(): ?bool
199|    {
200|        return $this->canDelete;
201|    }
202|
203|    public function setCanDelete(bool $canDelete): self
204|    {
205|        $this->canDelete = $canDelete;
206|
207|        return $this;
208|    }
209|}
210|

{"query_name": "ColorsTagsPermissions.php"}

src/Entity/ColorsTagsPermissions.php

{"file_patterns": ["migrations/"], "search_text": "permission_tag` "}

No matches found

{"file_patterns": ["*.sql", "migrations/"], "search_text": "colors_tags_permissions"}

File: migrations/Version20260508141500.php
Match lines: 2
159|        $this->renameColumnIfNeeded('colors_tags_permissions', 'colorID', 'color_id', 'INT NOT NULL');
160|        $this->renameColumnIfNeeded('colors_tags_permissions', 'letterColor', 'letter_color', 'VARCHAR(20) NOT NULL');

{"file_path": "src/Entity/ColorsTagsPermissions.php"}

File: src/Entity/ColorsTagsPermissions.php (Total lines: 64)
IS_TRUNCATED: false
LINE_RANGE: 1-64
1|<?php
2|
3|namespace App\Entity;
4|
5|use Doctrine\ORM\Mapping as ORM;
6|
7|/**
8| * @ORM\Entity(repositoryClass="App\Repository\ColorsTagsPermissionsRepository")
9| */
10|class ColorsTagsPermissions
11|{
12|    /**
13|     * @ORM\Id
14|     * @ORM\Column(name="color_id", type="integer")
15|     */
16|    private $colorID;
17|
18|    /**
19|     * @ORM\Column(type="string", length=20)
20|     */
21|    private $color;
22|
23|    /**
24|     * @ORM\Column(name="letter_color", type="string", length=20)
25|     */
26|    private $letterColor;
27|
28|    public function getColorID(): ?int
29|    {
30|        return $this->colorID;
31|    }
32|
33|    public function setColorID(int $colorID): self
34|    {
35|        $this->colorID = $colorID;
36|
37|        return $this;
38|    }
39|
40|    public function getColor(): ?string
41|    {
42|        return $this->color;
43|    }
44|
45|    public function setColor(string $color): self
46|    {
47|        $this->color = $color;
48|
49|        return $this;
50|    }
51|
52|    public function getLetterColor(): ?string
53|    {
54|        return $this->letterColor;
55|    }
56|
57|    public function setLetterColor(string $letterColor): self
58|    {
59|        $this->letterColor = $letterColor;
60|
61|        return $this;
62|    }
63|}
64|

{"query_name": "PermissionsTags"}

src/Controller/PermissionsTagsController.php

{"file_patterns": ["*.sql", "src/DataFixtures/"], "search_text": "colors_tags_permissions|ColorsTagsPermissions", "use_perl_regexp": true}

No matches found

{"query_name": ".sql"}

docs/Flowable/QUERIES_RAPIDAS_KANBAN.sql
docs/Flowable/VERIFICACAO_COLUNAS_FLOW.sql
docs/Flowable/avancar_dias_offboarding.sql
docs/Flowable/reset_all_offboarding_members_dynamic.sql
docs/Flowable/reset_all_offboarding_members_to_first_step.sql
docs/Flowable/reset_todos_membros_teste.sql
docs/Flowable/reset_todos_membros_teste_v2.sql
docs/Flowable/resetar_datas_offboarding.sql
docs/OFFBOARDING_CATEGORIES_SETUP.sql
scripts/adriana/seed_lexical_test_corpus.sql
scripts/payroll_dashboard_simulation.sql
scripts/payroll_dashboard_simulation_rollback.sql
scripts/seed_financial_hub_managers_per_user.sql
scripts/sql/process_1174_comparacao_competencia.sql
scripts/sql/process_1174_entrevista_e_fit_notas.sql
scripts/sql/process_1174_fit_mapa_perfil.sql
scripts/sql/process_1174_per_question_detail.sql
scripts/sql/process_1174_sync_candidatos_csv.sql

{"file_patterns": ["tests/"], "search_text": "areaLimitation|toBoolFlag", "use_perl_regexp": true}

File: tests/Unit/Product/Ssma/SsmaAreaLimitationScopeTest.php
Match lines: 14
7|use App\Service\Ssma\SsmaAreaLimitationScope;
10|final class SsmaAreaLimitationScopeTest extends TestCase
28|        $fromOperacoes = SsmaAreaLimitationScope::expandWithDescendants($parentByAreaId, [2]);
45|        self::assertSame([4], SsmaAreaLimitationScope::expandWithDescendants($parentByAreaId, [4]));
50|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor de Área', false, false));
51|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor de Área', false, false));
52|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Tag customizada', true, false));
53|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor', true, false));
54|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor Administrador', true, false));
55|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor de Área', true, true));
56|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor de Equipe', false, false));
69|        $scoped = SsmaAreaLimitationScope::filterAbordagensByMemberIds($abordagens, [100 => true, 102 => true]);
83|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
102|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(

{"search_text": "#edd9ff|#a2e4ac", "use_perl_regexp": true}

File: migration_archive_20260508/Version20241206195150.php
Match lines: 2
26|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (3, '#edd9ff', '#736282')");
27|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (4, '#a2e4ac', '#468a50')");

File: migration_archive_20260508/Version20250114222511.php
Match lines: 4
87|            (3, '#edd9ff', '#736282'),
88|            (4, '#a2e4ac', '#468a50'),
99|                true, 3, '#edd9ff', '#736282', true, false, false, false),
105|                true, 4, '#a2e4ac', '#468a50', true, true, true, true),

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 2
30|            SELECT 'Supervisor de Área', 'Visualizacao apenas da sua area', 1, 0, 0, 0, 0, 1, 3, '#edd9ff', '#736282'
34|            SELECT 'Gestor de Área', 'Acesso completo limitado a sua area', 1, 1, 1, 1, 0, 1, 4, '#a2e4ac', '#468a50'

{"file_patterns": ["migrations/", "src/DataFixtures/", "*.sql"], "search_text": "color_id"}

File: migrations/Version20260508141500.php
Match lines: 2
159|        $this->renameColumnIfNeeded('colors_tags_permissions', 'colorID', 'color_id', 'INT NOT NULL');
162|        $this->renameColumnIfNeeded('permission_tag', 'colorID', 'color_id', 'INT NOT NULL');

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 2
29|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
33|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)

{"file_path": "templates/permissions_tags/add.html.twig"}

File: templates/permissions_tags/add.html.twig (Total lines: 288)
IS_TRUNCATED: false
LINE_RANGE: 1-288
1|{% extends 'layoutAdmin.html.twig' %}
2|
3|{% block container %}
4|
5|	<style>
6|		.color-block-container {
7|			display: flex;
8|			flex-wrap: wrap;
9|			gap: 10px;
10|			align-items: center;
11|		}
12|
13|		.color-block {
14|			width: 40px;
15|			height: 40px;
16|			border-radius: 5px;
17|			cursor: pointer;
18|			border: 2px solid transparent;
19|			transition: border-color 0.2s ease;
20|		}
21|		
22|		.color-block.selected {
23|			border-color: #000; /* Destaque para a cor selecionada */
24|		}
25|
26|		/* Custom styling for switches */
27|		.form-check-input[type="checkbox"][role="switch"] {
28|			width: 2.5em; /* Largura do switch */
29|			height: 1.25em; /* Altura do switch */
30|			background-color: #e0e0e0; /* Cor de fundo quando desativado */
31|			border-radius: 1.25em;
32|			position: relative;
33|			appearance: none;
34|			-webkit-appearance: none;
35|			outline: none;
36|			cursor: pointer;
37|			transition: background-color 0.3s;
38|		}
39|
40|		.form-check-input[type="checkbox"][role="switch"]:checked {
41|			background-color: #00a5b8; /* Cor de fundo quando ativado */
42|		}
43|
44|		.form-check-input[type="checkbox"][role="switch"]::before {
45|			content: '';
46|			position: absolute;
47|			top: 0.1em; /* Ajuste da posição vertical */
48|			left: 0.1em; /* Ajuste da posição horizontal */
49|			width: 1em; /* Diâmetro do círculo */
50|			height: 1em; /* Diâmetro do círculo */
51|			background-color: white; /* Cor do círculo */
52|			border-radius: 50%;
53|			transition: transform 0.3s;
54|		}
55|
56|		.form-check-input[type="checkbox"][role="switch"]:checked::before {
57|			transform: translateX(1.25em); /* Move o círculo para a direita quando ativado */
58|		}
59|
60|		.card-box {
61|			background-color: #f8f8f8; /* Substitua por exatamente a cor desejada */
62|			border-radius: 8px;
63|			padding: 10px;
64|		}
65|
66|	</style>
67|
68|	<div class="content-header">
69|		<div class="container-fluid">
70|			<div class="row mb-2 align-items-start">
71|				<div class="col-12 d-flex justify-content-between align-items-start flex-column flex-md-row">
72|					<div>
73|						<p class="mb-2 font-color font-weight-bold h1">NOVA PERMISSÃO</p>
74|					</div>
75|					<div>
76|						<a class="btn btn-outline-secondary mt-2" href="{{ path('admin_permissionstags_index') }}">
77|							<i class="fa fa-angle-left mr-2"></i>
78|							Voltar para Permissões
79|						</a>
80|					</div>
81|				</div>
82|			</div>
83|		</div>
84|	</div>
85|
86|	<section class="content">
87|		<div class="container-fluid">
88|			<div class="card app-card-surface p-4">
89|				<form id="adminForm" class="stdform">
90|					<div class="card-box">
91|						<div class="row mb-4">
92|							<!-- Título da Permissão -->
93|							<div class="col-md-6">
94|								<label for="tituloPermissao" class="form-label">Título da Permissão</label>
95|								<input type="text" class="form-control" id="tituloPermissao" placeholder="Digite o título">
96|							</div>
97|
98|							<!-- Cor da Tag -->
99|							<div class="col-md-6">
100|								<label class="form-label">Cor da Tag</label>
101|								<div id="editColorBlocks" class="d-flex flex-wrap color-block-container">
102|									{% for colorTag in colorsTags %}
103|										<div 
104|											class="color-block" 
105|											style="background-color: {{ colorTag.color }};"
106|											title="Cor: {{ colorTag.color }};"
107|											data-color-id="{{ colorTag.colorId }}"
108|											data-color="{{ colorTag.color }}"
109|											data-letter-color="{{ colorTag.letterColor }}">
110|										</div>
111|									{% endfor %}
112|								</div>
113|							</div>
114|						</div>
115|
116|						<!-- Descrição -->
117|						<div class="row mb-4">
118|							<div class="col-12">
119|								<label for="descricaoPermissao" class="form-label">Descrição da Permissão</label>
120|								<textarea class="form-control" id="descricaoPermissao" rows="3" placeholder="Digite a descrição"></textarea>
121|							</div>
122|						</div>
123|
124|						<div class="row">
125|							<!-- Limitação de Equipe -->
126|							<div class="col">
127|								<label class="form-check-label" for="limitacaoEquipe">Limitação de Equipe</label>
128|								<div class="form-check form-switch">
129|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe">
130|								</div>
131|							</div>
132|
133|							<!-- Limitação de Área -->
134|							<div class="col">
135|								<label class="form-check-label" for="limitacaoArea">Limitação de Área</label>
136|								<div class="form-check form-switch">
137|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea">
138|								</div>
139|							</div>
140|
141|							<!-- Permissão de Visualizar -->
142|							<div class="col">
143|								<label class="form-check-label" for="canView">Permissão de Visualizar</label>
144|								<div class="form-check form-switch">
145|									<input class="form-check-input" type="checkbox" role="switch" id="canView">
146|								</div>
147|							</div>
148|
149|							<!-- Permissão de Criar -->
150|							<div class="col">
151|								<label class="form-check-label" for="canCreate">Permissão de Criar</label>
152|								<div class="form-check form-switch">
153|									<input class="form-check-input" type="checkbox" role="switch" id="canCreate">
154|								</div>
155|							</div>
156|
157|							<!-- Permissão de Editar -->
158|							<div class="col">
159|								<label class="form-check-label" for="canEdit">Permissão de Editar</label>
160|								<div class="form-check form-switch">
161|									<input class="form-check-input" type="checkbox" role="switch" id="canEdit">
162|								</div>
163|							</div>
164|
165|							<!-- Permissão de Deletar -->
166|							<div class="col">
167|								<label class="form-check-label" for="canDelete">Permissão de Deletar</label>
168|								<div class="form-check form-switch">
169|									<input class="form-check-input" type="checkbox" role="switch" id="canDelete">
170|								</div>
171|							</div>
172|						</div>
173|
174|						<div class="row mt-4">
175|							<div class="col d-flex justify-content-end">
176|								<button type="submit" class="btn btn-primary px-4 py-2">
177|									<i class="fa fa-save mr-2"></i> Salvar Alterações
178|								</button>
179|							</div>
180|						</div>
181|
182|					</div>
183|				</form>
184|			</div>
185|		</div>
186|	</section>
187|
188|{% endblock %}
189|
190|{% block javascripts %}
191|	<script>
192|		// function showToast(message, title = 'Notificação', iconClass = 'fas fa-check', bgColor = 'bg-success') {
193|        // 	// Criação do Toast
194|        //     $(document).Toasts('create', {
195|        //     class: bgColor,
196|        //     title: title,
197|        //     subtitle: '', // Subtítulo opcional
198|        //     icon: iconClass, // Ícone FontAwesome
199|        //     body: message, // Mensagem exibida
200|        //     autohide: true, // Fecha automaticamente
201|        //     delay: 3000, // Tempo em milissegundos para fechamento
202|        //     autoremove: true // Remove o Toast do DOM automaticamente
203|        //     });
204|        // }
205|
206|		document.addEventListener("DOMContentLoaded", () => {
207|			function collectFormData() {
208|				// Captura os valores do formulário
209|				const title = document.getElementById("tituloPermissao").value.trim();
210|				const description = document.getElementById("descricaoPermissao").value.trim();
211|				const teamLimitation = document.getElementById("limitacaoEquipe").checked;
212|				const areaLimitation = document.getElementById("limitacaoArea").checked;
213|
214|				// Captura a cor selecionada
215|				const selectedColorBlock = document.querySelector(".color-block.selected");
216|				const colorID = selectedColorBlock ? selectedColorBlock.dataset.colorId : null;
217|				const color = selectedColorBlock ? selectedColorBlock.dataset.color : null;
218|				const letterColor = selectedColorBlock ? selectedColorBlock.dataset.letterColor : null;
219|
220|				// Captura as permissões
221|				const canView = document.getElementById("canView").checked;
222|				const canCreate = document.getElementById("canCreate").checked;
223|				const canEdit = document.getElementById("canEdit").checked;
224|				const canDelete = document.getElementById("canDelete").checked;
225|
226|				// Retorna os dados formatados em JSON
227|				return {
228|					title,
229|					description,
230|					teamLimitation,
231|					areaLimitation,
232|					colorID,
233|					color,
234|					letterColor,
235|					canView,
236|					canCreate,
237|					canEdit,
238|					canDelete
239|				};
240|			}
241|
242|			function sendFormData() {
243|				const formData = collectFormData();
244|
245|				// Enviar os dados via POST no formato JSON
246|				fetch('/manager/permissionstags/add', {
247|					method: 'POST',
248|					headers: {
249|						'Content-Type': 'application/json'
250|					},
251|					body: JSON.stringify(formData)
252|				})
253|				.then(response => response.json())
254|				.then(data => {
255|					if (data.status === 'success') {
256|						// Exibe uma mensagem de sucesso no console ou em um alerta
257|						showToast(data.message, 'Sucesso', 'fas fa-check', 'bg-success');
258|						// Atualiza a página
259|						setTimeout(() => {
260|							// Redireciona para a lista de permissões após a edição
261|							window.location.href = "/manager/permissionstags";
262|						}, 1000); // Adiciona um pequeno delay para permitir que o usuário veja o toast
263|					} else {
264|						showToast(data.message, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
265|					}
266|				})
267|				.catch(error => {
268|                    showToast(error, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
269|				});
270|			}
271|
272|			// Evento para capturar o clique nos blocos de cor
273|			document.querySelectorAll(".color-block").forEach(block => {
274|				block.addEventListener("click", () => {
275|					document.querySelectorAll(".color-block").forEach(b => b.classList.remove("selected"));
276|					block.classList.add("selected");
277|				});
278|			});
279|
280|			// Evento de submissão do formulário
281|			document.getElementById("adminForm").addEventListener("submit", (event) => {
282|				event.preventDefault();
283|				sendFormData();
284|			});
285|		});
286|
287|	</script>
288|{% endblock %}

{"file_path": "migration_archive_20260508/Version20250114222511.php", "start_line": 60, "end_line": 130}

File: migration_archive_20260508/Version20250114222511.php (Total lines: 124)
IS_TRUNCATED: false
LINE_RANGE: 60-124
60|            CONSTRAINT FK_permission_tag FOREIGN KEY (tagID) REFERENCES permission_tag (id) ON DELETE CASCADE
61|        ) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci ENGINE = InnoDB;");
62|
63|        // Seeding initial data
64|        $this->addSql("INSERT INTO products (name, active) VALUES
65|            ('Recrutamento e Seleção', 0),
66|            ('Assessment 360º', 0),
67|            ('Assessment Profissional', 0),
68|            ('Metas', 0),
69|            ('Treinamentos', 0),
70|            ('Projetos', 0),
71|            ('Timesheet', 0),
72|            ('Calendário', 0),
73|            ('Planejamento Salarial', 0),
74|            ('eSocial', 0),
75|            ('Licenças e Férias', 0),
76|            ('Gestão de Filiais', 0),
77|            ('Reembolso', 1),
78|            ('CRM', 0),
79|            ('Pesquisa Estrutural', 0),
80|            ('Bate-Papo', 0),
81|            ('Membros e Equipes', 0),
82|            ('Configurações', 0);");
83|
84|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES 
85|            (1, '#a2e1e4', '#2f7c80'),
86|            (2, '#c1a2e4', '#6a4199'),
87|            (3, '#edd9ff', '#736282'),
88|            (4, '#a2e4ac', '#468a50'),
89|            (5, '#f07474', '#9b3a3a');");
90|
91|        $this->addSql("INSERT INTO permission_tag (
92|            name, description, team_limitation, colorID, color, letter_color, can_view, can_create, can_edit, can_delete
93|        ) VALUES
94|            ('Membro', 
95|                'Nível padrão e inicial. Colaboradores com essa tag só podem visualizar e interagir com as tarefas designadas a eles, sem acesso a outras áreas ou funcionalidades administrativas.', 
96|                true, 1, '#a2e1e4', '#2f7c80', false, false, false, false),
97|            ('Supervisor de Equipe', 
98|                'Colaboradores com essa tag têm acesso administrativo de visualização exclusiva para as equipes às quais pertencem. Ou seja, têm permissão para visualizar e editar os detalhes da equipe, com restrição de acesso a informações confidenciais.', 
99|                true, 3, '#edd9ff', '#736282', true, false, false, false),
100|            ('Supervisor', 
101|                'Colaboradores com essa tag têm acesso administrativo de visualização, ou seja, podem visualizar todos os produtos e detalhes de membros e equipes que não sejam de sua responsabilidade, mas não podem criar, editar ou remover conteúdo.', 
102|                false, 2, '#c1a2e4', '#6a4199', true, false, false, false),
103|            ('Gestor de Equipe', 
104|                'Colaboradores com essa tag têm acesso administrativo de edição exclusiva para as equipes às quais pertencem. Podem visualizar e editar detalhes da equipe que gerenciam, sem restrição a informações confidenciais, como endereços e dados de pagamento.', 
105|                true, 4, '#a2e4ac', '#468a50', true, true, true, true),
106|            ('Gestor Administrador', 
107|                'Colaboradores com essa tag têm acesso total, com as mesmas permissões do administrador, permitindo visualizar, criar e editar todos os produtos da plataforma, sem restrições.', 
108|                false, 5, '#f07474', '#9b3a3a', true, true, true, true);");
109|    }
110|
111|    public function down(Schema $schema): void
112|    {
113|        // Verifica se a tabela existe antes de deletar os registros
114|        $this->addSql("SET FOREIGN_KEY_CHECKS=0;"); // Desabilita verificação de chave estrangeira temporariamente
115|    
116|        $this->addSql("DROP TABLE IF EXISTS permission_tag_by_member;");
117|        $this->addSql("DROP TABLE IF EXISTS permission_tag;");
118|        $this->addSql("DROP TABLE IF EXISTS colors_tags_permissions;");
119|        $this->addSql("DROP TABLE IF EXISTS products;");
120|    
121|        $this->addSql("SET FOREIGN_KEY_CHECKS=1;"); // Reabilita verificação de chave estrangeira
122|    }
123|}
124|

{"file_patterns": ["templates/layoutAdmin.html.twig", "templates/components/"], "search_text": "\\btag\\b", "use_perl_regexp": true}

File: templates/components/member/_team_selector.html.twig
Match lines: 6
50|.team-tag {
61|.team-tag:hover {
66|.team-tag-avatar {
77|.team-tag-name {
83|.team-tag-remove {
90|.team-tag-remove:hover {

File: templates/components/member/_team_tag.html.twig
Match lines: 5
2|    Componente Team Tag - Tag individual de equipe
7|<div class="team-tag" data-id="{{ team.id }}">
8|    <div class="team-tag-avatar" 
18|    <span class="team-tag-name">{{ team.name }}</span>
19|    <i class="fas fa-times team-tag-remove rem_team" role="button"></i>

File: templates/components/permissions_tab.html.twig
Match lines: 33
63|    .tag {
73|    .team-tag {
480|        /* Centralizar com a tag por padrão */
514|        /* Centralizar com a tag */
525|        /* Centralizar com a tag */
560|        .offcanvas-custom #offcanvasGlobalTagPermission .tag,
561|        .offcanvas-custom #customPermissionsList .tag {
753|                                                <span class="team-tag">{{ teamName }}</span>
760|                                            <button class="tag" type="button" id="dropdownMenu{{ member.id }}_{{ tabId }}" data-bs-toggle="dropdown" aria-expanded="false" 
767|                                                        <a class="dropdown-item change-permission tag"
872|                                <span class="tag" id="offcanvasGlobalTagPermission{{ tabId }}"></span>
1232|            badge.className = 'team-tag';
1247|        dropdownButton.className = 'tag dropdown-toggle';
1259|        permissionTags.forEach(tag => {
1262|            dropdownLink.className = 'dropdown-item change-permission-global tag';
1264|            dropdownLink.style.backgroundColor = tag.color;
1265|            dropdownLink.style.color = tag.letterColor;
1266|            dropdownLink.innerText = tag.name;
1268|            dropdownLink.setAttribute('data-permission-id', String(tag.id));
1269|            dropdownLink.setAttribute('data-permission-name', String(tag.name || ''));
1270|            dropdownLink.setAttribute('data-permission-color', String(tag.color || ''));
1271|            dropdownLink.setAttribute('data-permission-letter-color', String(tag.letterColor || ''));
1305|            dropdownButton.className = 'tag dropdown-toggle';
1316|            permissionTags.forEach(tag => {
1319|                dropdownLink.className = 'dropdown-item change-permission tag';
1321|                dropdownLink.style.backgroundColor = tag.color;
1322|                dropdownLink.style.color = tag.letterColor;
1323|                dropdownLink.innerText = tag.name;
1326|                dropdownLink.setAttribute('data-permission-id', String(tag.id));
1327|                dropdownLink.setAttribute('data-permission-name', String(tag.name || ''));
1328|                dropdownLink.setAttribute('data-permission-color', String(tag.color || ''));
1329|                dropdownLink.setAttribute('data-permission-letter-color', String(tag.letterColor || ''));
1406|                    tagNames: window.permissionTabTags.map(tag => tag.name)

File: templates/components/ui/_pill.html.twig
Match lines: 1
21|{% set pillTag = tag|default('span') %}

File: templates/layoutAdmin.html.twig
Match lines: 2
2402|               vejam o item via canView(), que não considera a restrição de tag SSMA. #}
2405|               para que Membros sem meta de inspeção/abordagem (e sem tag de gestão) não vejam o item,

{"file_patterns": ["src/Entity/TagProductPermissions.php", "src/Entity/CompanyMembers.php"], "search_text": "PermissionTag|permission_tag"}

No matches found

{"file_patterns": ["templates/layoutAdmin.html.twig"], "search_text": "include|permissions_tab|tag =", "use_perl_regexp": true}

File: templates/layoutAdmin.html.twig
Match lines: 27
140|{% include 'company/components/_company_theme_styles.html.twig' %}
146|{% include 'templates/chat_ia_modal.html.twig' %}
147|{% include 'ai_committee/_hcm_workspace_company_id.html.twig' %}
148|{% include 'ai_committee/partials/_committee_header_assets.html.twig' %}
149|{% include 'ai_committee/ai_committee_modal.html.twig' %}
150|{% include 'ai_committee/ai_committee_offcanvas.html.twig' %}
180|                    {{ include('partials/user_profile_dropdown_content.html.twig') }}
1423|                                    <a href="{{path('cultural_hub_active_voice', {'companyId': app.user.company.id})}}" class="nav-link" id="nav_item_cultural_hub_active_voice" data-rels="cultural_hub_active_voice cultural_hub_active_voice_add_recognition cultural_hub_active_voice_add_occurrence cultural_hub_active_voice_occurrence_goal cultural_hub_active_voice_occurrence_solved cultural_hub_active_voice_occurrence_occulted cultural_hub_active_voice_occurrence_include_action cultural_hub_active_voice_recognition_comment cultural_hub_active_voice_recognition_comment_like cultural_hub_active_voice_recognition_comment_unlike cultural_hub_active_voice_recognition_comment_delete cultural_hub_active_voice_config cultural_hub_active_voice_recognition_like cultural_hub_active_voice_recognition_unlike cultural_hub_active_voice_toggle_automation cultural_hub_occurrences cultural_hub_occurrences_create cultural_hub_occurrences_feedback cultural_hub_occurrences_mark_read cultural_hub_occurrences_mark_solved cultural_hub_occurrences_mark_occulted">
2315|                            <a id="nav_item_cultural_hub_active_voice_maturity" href="{{ path('cultural_hub_active_voice', {companyId: app.user.company.id}) }}" class="nav-link" data-rels="cultural_hub_active_voice cultural_hub_active_voice_add_recognition cultural_hub_active_voice_add_occurrence cultural_hub_active_voice_occurrence_goal cultural_hub_active_voice_occurrence_solved cultural_hub_active_voice_occurrence_occulted cultural_hub_active_voice_occurrence_include_action cultural_hub_active_voice_recognition_comment cultural_hub_active_voice_recognition_comment_like cultural_hub_active_voice_recognition_comment_unlike cultural_hub_active_voice_recognition_comment_delete cultural_hub_active_voice_config cultural_hub_active_voice_recognition_like cultural_hub_active_voice_recognition_unlike cultural_hub_active_voice_toggle_automation cultural_hub_occurrences cultural_hub_occurrences_create cultural_hub_occurrences_feedback cultural_hub_occurrences_mark_read cultural_hub_occurrences_mark_solved cultural_hub_occurrences_mark_occulted">
2416|            {% set ssmaInCompanyPlanAdmin = isAppIncludedInCompanyPlan('saude-e-seguranca')
2417|                or isAppIncludedInCompanyPlan('health-safety-work')
2418|                or isAppIncludedInCompanyPlan('modulo-seguranca')
2419|                or isAppIncludedInCompanyPlan('ssma-occurrences') %}
3271|                    {{ include('partials/app_search.html.twig') }}
3294|                    {{ include('partials/apps_launcher.html.twig', { apps_launcher_role: 'admin' }) }}
3487|                    {{ include('partials/user_profile_dropdown_content.html.twig') }}
3626|            {{ include('partials/app_search.html.twig', { mobile: true }) }}
3673|{# Include WebSocket FIRST - before chatUserStatus.js #}
3674|{% include 'partials/websocket_init.html.twig' %}
3676|{# Include WebRTC scripts for call functionality #}
4313|        var isCrmPage = crmRoutes.includes(currentRoute);
4508|{% include "partials/_modal_new_package_products.html.twig" %}
4509|{% include "partials/_auto_debit_failure_global_modal.html.twig" %}
4510|{% include "process/modal/_modal_leave_without_save.html.twig" %}
4511|{% include 'chat_ia/partials/_modal_workflow_approval.html.twig' %}
4512|{% include 'notifications_center/_layout_trigger.html.twig' with { notificationAudience: 'tenant' } %}
4513|{% include "partials/notification_system.html.twig" %}

{"search_text": "permissions_tab.html.twig"}

File: .opencodereview/rules/frontend/twig.md
Match lines: 1
22|`ui/_button.html.twig`, `ui/_card.html.twig`, `ui/_dynamic_table.html.twig`, `ui/_table_card.html.twig`, `ui/_table_inline_edit.html.twig`, `ui/_table_separated_rows.html.twig`, `_modal.html.twig`, `_modal_offcanvas.html.twig`, `_modal_bottom_sheet.html.twig`, `_modal_confirm_multiple.html.twig`, `validation/_modal_validation_ui.html.twig`, `ui/_offcanvas.html.twig`, `_shell_offcanvas.twig`, `offcanvas/_member_profile_offcanvas.html.twig`, `ui/_mobile_bottom_sheet.html.twig`, `ui/_mobile_select_fullscreen.html.twig`, `ui/_mobile_fabs.html.twig`, `ui/_custom_select.html.twig`, `ui/_search_expandable.html.twig`, `ui/_tabs.html.twig`, `ui/_pill.html.twig`, `ui/_icon_badge.html.twig`, `_dynamic_color_icon.html.twig`, `ui/_quill_editor.html.twig`, `member/_avatar_card.html.twig`, `member/_avatar_circle.html.twig`, `ui/_member_avatars_stack.html.twig`, `member/_position_selector.html.twig`, `member/_team_selector.html.twig`, `member/_status_toggle.html.twig`, `permissions_tab.html.twig`, `automations/_module_automations_tab.html.twig`, `charts/*_bar_chart.html.twig`, `charts/_dynamic_chart.html.twig`.

File: docs/engineering/pr/new_staging2/PR_arquivos_new_staging2.txt
Match lines: 1
1596|A	templates/process_department/components/_permissions_tab.html.twig

File: docs/engineering/pr/new_staging2/PR_impacto_new_staging2.txt
Match lines: 1
1596| .../components/_permissions_tab.html.twig          |    5 +

File: docs/logs/engineering/frontend_console_inventory.md
Match lines: 2
115|| templates/components/permissions_tab.html.twig | templates | nao | 40 | 31 | 9 | 0 | 0 | 0 | 0 |
535|| templates/calendar_member/tabs/_permissions_tab.html.twig | templates | nao | 5 | 2 | 3 | 0 | 0 | 0 | 0 |

File: src/Controller/PermissionTabController.php
Match lines: 1
173|        return $this->render('components/permissions_tab.html.twig', $templateData);

File: templates/ai_committee/ai_coach_hub.html.twig
Match lines: 1
203|        {{ include('ai_committee/partials/_committee_hub_permissions_tab.html.twig', {

File: templates/ai_committee/specialized_committees_entry.html.twig
Match lines: 1
87|        {{ include('ai_committee/partials/_committee_hub_permissions_tab.html.twig', {

File: templates/organizational_structure/index.html.twig
Match lines: 1
423|            {{ include('process_department/components/_permissions_tab.html.twig') }}

File: templates/permissions_tags/member_tab_permissions.html.twig
Match lines: 3
1446|        // Função para carregar dados via AJAX (baseada no permissions_tab.html.twig)
1581|        // Função updateCustomPermission usando endpoint do permissions_tab.html.twig
1961|            // Usar mesmo endpoint do permissions_tab.html.twig

File: templates/spaces_control/permissions/index.html.twig
Match lines: 1
4|{% include 'components/permissions_tab.html.twig' with {

{"file_patterns": ["src/Entity/"], "search_text": "PermissionTag"}

File: src/Entity/CompanyMembers.php
Match lines: 8
138|     * @ORM\ManyToOne(targetEntity=PermissionTag::class)
141|    private $globalPermissionTag;
725|    public function getGlobalPermissionTag(): ?PermissionTag
727|        return $this->globalPermissionTag;
730|    public function setGlobalPermissionTag(?PermissionTag $globalPermissionTag): self
732|        $this->globalPermissionTag = $globalPermissionTag;
744|     * @return array{avatar: string|null, company: int|null, created_at: \DateTimeInterface|null, email: string|null, enabled: bool|null, globalPermissionTag: int|null, group: string|null, groups: string|null, id: int|null, invitation: int|null, isRegistered: bool|null, isRemoved: bool|null, is_admin: bool, local: string, managerRoles: array, name: string, role: string|null, team: string|null, teams: string|null, updated_at: \DateTimeInterface|null, user: int|null}
802|            'globalPermissionTag' => $this->getGlobalPermissionTag()?->getId(),

File: src/Entity/OrganizationalRoleDetails.php
Match lines: 8
172|     * @ORM\ManyToOne(targetEntity=PermissionTag::class)
175|    private $globalPermissionTag;
508|    public function getGlobalPermissionTag(): ?PermissionTag
510|        return $this->globalPermissionTag;
513|    public function setGlobalPermissionTag(?PermissionTag $globalPermissionTag): self
515|        $this->globalPermissionTag = $globalPermissionTag;
519|    public function getCustomPermissionTags(): ?string
524|    public function setCustomPermissionTags(?string $customPermissionsTags): self

File: src/Entity/PermissionTag.php
Match lines: 3
5|use App\Repository\PermissionTagRepository;
11| * @ORM\Entity(repositoryClass=PermissionTagRepository::class)
13|class PermissionTag

File: src/Entity/PermissionTagByMember.php
Match lines: 3
5|use App\Repository\PermissionTagByMemberRepository;
9| * @ORM\Entity(repositoryClass=PermissionTagByMemberRepository::class)
12|class PermissionTagByMember

File: src/Entity/PermissionTagSuggestion.php
Match lines: 9
8| * Tabela de relacionamento entre PermissionTag e Suggestion
11| * @ORM\Entity(repositoryClass="App\Repository\PermissionTagSuggestionRepository")
16|class PermissionTagSuggestion
26|     * @ORM\ManyToOne(targetEntity="PermissionTag")
29|    private PermissionTag $permissionTag;
52|    public function getPermissionTag(): PermissionTag
54|        return $this->permissionTag;
57|    public function setPermissionTag(PermissionTag $permissionTag): self
59|        $this->permissionTag = $permissionTag;

File: src/Entity/SsmaPermissionTag.php
Match lines: 6
15| * @ORM\Entity(repositoryClass="App\Repository\SsmaPermissionTagRepository")
19|class SsmaPermissionTag
53|     *     targetEntity=SsmaPermissionTagMember::class,
88|    /** @return Collection<int, SsmaPermissionTagMember> */
91|    public function addMemberLink(SsmaPermissionTagMember $link): self
100|    public function removeMemberLink(SsmaPermissionTagMember $link): self

File: src/Entity/SsmaPermissionTagMember.php
Match lines: 5
21|class SsmaPermissionTagMember
31|     * @ORM\ManyToOne(targetEntity=SsmaPermissionTag::class, inversedBy="memberLinks")
34|    private SsmaPermissionTag $tag;
51|    public function getTag(): SsmaPermissionTag { return $this->tag; }
52|    public function setTag(SsmaPermissionTag $tag): self { $this->tag = $tag; return $this; }

File: src/Entity/TagProductPermissions.php
Match lines: 6
26|     * @ORM\ManyToOne(targetEntity=PermissionTag::class, )
29|    private $permissionTag;
54|    public function getPermissionTag(): ?PermissionTag
56|        return $this->permissionTag;
59|    public function setPermissionTag(?PermissionTag $permissionTag): self
61|        $this->permissionTag = $permissionTag;

{"file_patterns": ["migrations/"], "search_text": "ALTER TABLE permission_tag"}

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 2
26|            $this->addSql('ALTER TABLE permission_tag ADD area_limitation TINYINT(1) NOT NULL DEFAULT 0');
61|            $this->addSql('ALTER TABLE permission_tag DROP area_limitation');

{"file_path": "src/Entity/TagProductPermissions.php"}

File: src/Entity/TagProductPermissions.php (Total lines: 77)
IS_TRUNCATED: false
LINE_RANGE: 1-77
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\TagProductPermissionsRepository;
6|use Doctrine\ORM\Mapping as ORM;
7|
8|/**
9| * @ORM\Entity(repositoryClass=TagProductPermissionsRepository::class)
10| */
11|class TagProductPermissions
12|{
13|    /**
14|     * @ORM\Id
15|     * @ORM\GeneratedValue
16|     * @ORM\Column(type="integer")
17|     */
18|    private $id;
19|
20|    /**
21|     * @ORM\Column(type="string", length=255)
22|     */
23|    private $permission;
24|
25|    /**
26|     * @ORM\ManyToOne(targetEntity=PermissionTag::class, )
27|     * @ORM\JoinColumn(nullable=false)
28|     */
29|    private $permissionTag;
30|
31|    /**
32|     * @ORM\ManyToOne(targetEntity=Product::class)
33|     * @ORM\JoinColumn(name="product_id", referencedColumnName="id", nullable=false)
34|     */
35|    private $productID;
36|
37|    public function getId(): ?int
38|    {
39|        return $this->id;
40|    }
41|
42|    public function getPermission(): ?string
43|    {
44|        return $this->permission;
45|    }
46|
47|    public function setPermission(string $permission): self
48|    {
49|        $this->permission = $permission;
50|
51|        return $this;
52|    }
53|
54|    public function getPermissionTag(): ?PermissionTag
55|    {
56|        return $this->permissionTag;
57|    }
58|
59|    public function setPermissionTag(?PermissionTag $permissionTag): self
60|    {
61|        $this->permissionTag = $permissionTag;
62|
63|        return $this;
64|    }
65|
66|    public function getProductID(): ?Product
67|    {
68|        return $this->productID;
69|    }
70|
71|    public function setProductID(?Product $productID): self
72|    {
73|        $this->productID = $productID;
74|
75|        return $this;
76|    }
77|}

{"query_name": "composer.json"}

composer.json
public/js/ckfinder/core/connector/php/vendor/spatie/dropbox-api/composer.json
public/js/ckfinder/core/connector/php/vendor/spatie/flysystem-dropbox/composer.json
src/libs/nfephp-org/sped-common/composer.json
src/libs/nfephp-org/sped-esocial/composer.json

{"file_patterns": ["migrations/"], "search_text": "colors_tags_permissions|global_permission_tag", "use_perl_regexp": true}

File: migrations/Version20260508141500.php
Match lines: 2
159|        $this->renameColumnIfNeeded('colors_tags_permissions', 'colorID', 'color_id', 'INT NOT NULL');
160|        $this->renameColumnIfNeeded('colors_tags_permissions', 'letterColor', 'letter_color', 'VARCHAR(20) NOT NULL');

{"file_path": "composer.json"}

File: composer.json (Total lines: 160)
IS_TRUNCATED: false
LINE_RANGE: 1-160
1|{
2|  "type": "project",
3|  "license": "proprietary",
4|  "minimum-stability": "stable",
5|  "prefer-stable": true,
6|  "require": {
7|    "php": ">=8.0",
8|    "ext-ctype": "*",
9|    "ext-fileinfo": "*",
10|    "ext-iconv": "*",
11|    "ext-zip": "*",
12|    "adnanhussainturki/microsoft-api-php": "^0.04.0",
13|    "amphp/http-client": "^4.6",
14|    "beberlei/doctrineextensions": "dev-master",
15|    "cboden/ratchet": "*",
16|    "composer/package-versions-deprecated": "1.11.99.2",
17|    "doctrine/annotations": "^1.0",
18|    "doctrine/dbal": "3.8",
19|    "doctrine/doctrine-bundle": "^2.4",
20|    "doctrine/doctrine-migrations-bundle": "^3.2",
21|    "doctrine/orm": "^2.12.2",
22|    "docusign/esign-client": "^6.7",
23|    "firebase/php-jwt": "^6.11",
24|    "google/apiclient": "^2.18",
25|    "hshn/base64-encoded-file": "^4.1",
26|    "hybridauth/hybridauth": "~3.0",
27|    "justinrainbow/json-schema": "^6.0",
28|    "knplabs/knp-snappy-bundle": "^1.9",
29|    "laminas/laminas-code": "^4.5",
30|    "laravel/pint": "^1.5",
31|    "league/csv": "9.8",
32|    "mpdf/mpdf": "^8.2",
33|    "phpdocumentor/reflection-docblock": "^5.2",
34|    "phpoffice/phpspreadsheet": "^1.23",
35|    "phpoffice/phpword": "^1.4",
36|    "predis/predis": "^3.2",
37|    "pusher/pusher-php-server": "*",
38|    "sensio/framework-extra-bundle": "^6.1",
39|    "smalot/pdfparser": "*",
40|    "symfony/apache-pack": "^1.0",
41|    "symfony/asset": "5.3.*",
42|    "symfony/cache": "5.3.*",
43|    "symfony/console": "5.3.*",
44|    "symfony/doctrine-messenger": "5.3.*",
45|    "symfony/dotenv": "5.3.*",
46|    "symfony/expression-language": "5.3.*",
47|    "symfony/flex": "^1.3.1",
48|    "symfony/form": "5.3.*",
49|    "symfony/framework-bundle": "5.3.*",
50|    "symfony/http-client": "5.3.*",
51|    "symfony/intl": "5.3.*",
52|    "symfony/lock": "5.3.*",
53|    "symfony/mailer": "5.3.*",
54|    "symfony/messenger": "5.3.*",
55|    "symfony/mime": "5.3.*",
56|    "symfony/monolog-bundle": "^3.1",
57|    "symfony/notifier": "5.3.*",
58|    "symfony/process": "5.3.*",
59|    "symfony/property-access": "5.3.*",
60|    "symfony/property-info": "5.3.*",
61|    "symfony/proxy-manager-bridge": "5.3.*",
62|    "symfony/runtime": "5.3.*",
63|    "symfony/security-bundle": "5.3.*",
64|    "symfony/serializer": "5.3.*",
65|    "symfony/string": "5.3.*",
66|    "symfony/swiftmailer-bundle": "^3.5",
67|    "symfony/translation": "5.3.*",
68|    "symfony/twig-bundle": "^5.3",
69|    "symfony/uid": "5.3.*",
70|    "symfony/ux-react": "*",
71|    "symfony/validator": "5.3.*",
72|    "symfony/web-link": "5.3.*",
73|    "symfony/webpack-encore-bundle": "^1.17",
74|    "symfony/yaml": "5.3.*",
75|    "symfonycasts/reset-password-bundle": "^1.9",
76|    "tecnickcom/tcpdf": "*",
77|    "twig/extra-bundle": "^2.12|^3.0",
78|    "twig/intl-extra": "^3.3",
79|    "twig/twig": "^2.12|^3.0",
80|    "twilio/sdk": "^6.28"
81|  },
82|  "require-dev": {
83|    "doctrine/doctrine-fixtures-bundle": "^3.4",
84|    "fakerphp/faker": "^1.24",
85|    "phpmd/phpmd": "@stable",
86|    "phpunit/phpunit": "^9.5",
87|    "squizlabs/php_codesniffer": "3.*",
88|    "symfony/browser-kit": "^5.3",
89|    "symfony/css-selector": "^5.3",
90|    "symfony/debug-bundle": "^5.3",
91|    "symfony/maker-bundle": "^1.33",
92|    "symfony/phpunit-bridge": "^5.3",
93|    "symfony/stopwatch": "^5.3",
94|    "symfony/var-dumper": "^5.3",
95|    "symfony/web-profiler-bundle": "5.3.*"
96|  },
97|  "config": {
98|    "optimize-autoloader": false,
99|    "preferred-install": {
100|      "*": "dist"
101|    },
102|    "sort-packages": true,
103|    "allow-plugins": {
104|      "symfony/flex": true,
105|      "symfony/runtime": true
106|    },
107|    "audit": {
108|      "block-insecure": false
109|    },
110|    "platform": {
111|      "php": "8.0.3"
112|    }
113|  },
114|  "autoload": {
115|    "psr-4": {
116|      "App\\": "src/",
117|      "NFePHP\\Common\\": "src/libs/nfephp-org/sped-common/src",
118|      "NFePHP\\eSocial\\": "src/libs/nfephp-org/sped-esocial/src",
119|      "DoctrineMigrations\\": "migrations/"
120|    }
121|  },
122|  "autoload-dev": {
123|    "psr-4": {
124|      "App\\Tests\\": "tests/"
125|    }
126|  },
127|  "replace": {
128|    "symfony/polyfill-ctype": "*",
129|    "symfony/polyfill-iconv": "*",
130|    "symfony/polyfill-php72": "*"
131|  },
132|  "scripts": {
133|    "__disabled_pre-autoload-dump": "Google\\Task\\Composer::cleanup",
134|    "auto-scripts": {
135|      "cache:clear": "symfony-cmd",
136|      "assets:install %PUBLIC_DIR%": "symfony-cmd"
137|    },
138|    "post-install-cmd": [
139|      "@auto-scripts"
140|    ],
141|    "post-update-cmd": [
142|      "@auto-scripts"
143|    ]
144|  },
145|  "conflict": {
146|    "symfony/symfony": "*"
147|  },
148|  "extra": {
149|    "google/apiclient-services": [
150|        "Calendar",
151|        "Drive"
152|    ],
153|    "symfony": {
154|      "allow-contrib": true,
155|      "require": "5.3.*",
156|      "docker": true
157|    }
158|  }
159|}
160|

{"search_text": "areaLimitation"}

File: docs/database-changes/2026-08-19-permission-tag-area-limitation.md
Match lines: 3
17|| `PermissionTag` | Persistencia do flag `areaLimitation` |
43|Arquivo: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
83|Se o codigo novo ja estiver deployado, reverter so o schema quebra a leitura de `PermissionTag::$areaLimitation`. Preferir migration corretiva nova em vez de editar `Version20260819160000`.

File: docs/ssma/features/action-plan/area-limitation.md
Match lines: 1
51|- Flag: `PermissionTag::$areaLimitation` / coluna `permission_tag.area_limitation`

File: docs/ssma/features/prevention/area-limitation.md
Match lines: 4
45|A expansao e feita em `App\Service\Ssma\SsmaAreaLimitationScope::expandWithDescendants`: mapa `area_id => parent_id`, BFS so para baixo.
86|- Flag: `PermissionTag::$areaLimitation` / coluna `permission_tag.area_limitation`
90|- Regra pura de hierarquia e filtros de colecao: `src/Service/Ssma/SsmaAreaLimitationScope.php`
93|  - `tests/Unit/Product/Ssma/SsmaAreaLimitationScopeTest.php`

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 1
10|final class Version20260819160000_AddAreaLimitationToPermissionTag extends AbstractMigration

File: src/Controller/PermissionsTagsController.php
Match lines: 2
80|            $permissionTag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
134|                $tag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));

File: src/Controller/SsmaController.php
Match lines: 12
38|use App\Service\Ssma\SsmaAreaLimitationScope;
11334|        if ($tagNameScoped === 'Supervisor de Equipe' || $tagNameScoped === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA) {
11338|        return $tagPm && in_array($tagPm->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
12498|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
12499|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
12926|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
18598|                    SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
18599|                    SsmaAreaLimitationScope::TAG_GESTOR_AREA,
19907|            && in_array($tag->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
19925|            && in_array($tag->getName(), ['Supervisor de Equipe', 'Supervisor', SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA], true);

File: src/Entity/PermissionTag.php
Match lines: 5
40|    private $areaLimitation = false;
130|    public function getAreaLimitation(): ?bool
132|        return $this->areaLimitation;
135|    public function setAreaLimitation(bool $areaLimitation): self
137|        $this->areaLimitation = $areaLimitation;

File: src/Service/PermissionTabService.php
Match lines: 1
322|                'areaLimitation' => $tag->getAreaLimitation(),

File: src/Service/Ssma/SsmaAreaLimitationScope.php
Match lines: 4
13|final class SsmaAreaLimitationScope
26|    public static function shouldApplyAreaLimitation(
28|        ?bool $areaLimitation,
44|        return (bool) $areaLimitation;

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 5
23| * que pode ser gravado. A travessia da árvore continua em {@see SsmaAreaLimitationScope}.
41|        if (!SsmaAreaLimitationScope::shouldApplyAreaLimitation(
43|            $tag?->getAreaLimitation(),
49|        $areaIds = SsmaAreaLimitationScope::expandWithDescendants(
133|        // Mesmo critério da listagem ({@see SsmaAreaLimitationScope::filterAbordagensByMemberIds}):

File: src/Service/Ssma/SsmaPreventionHubAccessService.php
Match lines: 2
34|        SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
35|        SsmaAreaLimitationScope::TAG_GESTOR_AREA,

File: templates/permissions_tags/add.html.twig
Match lines: 2
212|				const areaLimitation = document.getElementById("limitacaoArea").checked;
231|					areaLimitation,

File: templates/permissions_tags/edit.html.twig
Match lines: 3
136|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea" {% if permissionTag.areaLimitation %}checked{% endif %}>
211|                const areaLimitation = document.getElementById("limitacaoArea").checked;
230|                    areaLimitation,

File: tests/Unit/Product/Ssma/SsmaAreaLimitationScopeTest.php
Match lines: 14
7|use App\Service\Ssma\SsmaAreaLimitationScope;
10|final class SsmaAreaLimitationScopeTest extends TestCase
28|        $fromOperacoes = SsmaAreaLimitationScope::expandWithDescendants($parentByAreaId, [2]);
45|        self::assertSame([4], SsmaAreaLimitationScope::expandWithDescendants($parentByAreaId, [4]));
50|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor de Área', false, false));
51|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor de Área', false, false));
52|        self::assertTrue(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Tag customizada', true, false));
53|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor', true, false));
54|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor Administrador', true, false));
55|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Supervisor de Área', true, true));
56|        self::assertFalse(SsmaAreaLimitationScope::shouldApplyAreaLimitation('Gestor de Equipe', false, false));
69|        $scoped = SsmaAreaLimitationScope::filterAbordagensByMemberIds($abordagens, [100 => true, 102 => true]);
83|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
102|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(

{"search_text": "teamLimitation", "file_patterns": ["templates/", "public/js/"]}

File: templates/ai_training_modules/index.html.twig
Match lines: 1
1404|	teamLimitation:       {{ userPermission.teamLimitation       ? 'true' : 'false' }},

File: templates/company/components/memberOffCanvas.html.twig
Match lines: 1
322|            teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/company/crm/leads/crm_leads.html.twig
Match lines: 1
908|            // 2. Se tem permissão total (teamLimitation=false e canEdit=true)

File: templates/company/crm/leads/defaultCrmView.html.twig
Match lines: 1
1581|    // 2. Se tem permissão total (teamLimitation=false e canEdit=true)

File: templates/company/crm/opportunities/crm_opportunities.html.twig
Match lines: 1
2473|    // 2. Se tem permissão total (teamLimitation=false e canEdit=true)

File: templates/company/crm/sales/crm_sales.html.twig
Match lines: 1
1862|            // 2. Se tem permissão total (teamLimitation=false e canEdit=true)

File: templates/company/teams_permissions.html.twig
Match lines: 1
906|				teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/company/teams_permissions_v2.html.twig
Match lines: 1
921|				teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/dei_assessment/company_dashboard.html.twig
Match lines: 1
194|	    const hasTeamLimitation = {{ member_permission_is_dei_team_limited() ? 'true' : 'false' }};

File: templates/license/individual_license_request_gestor.html.twig
Match lines: 3
104|                    {% if not permissionTagUser.teamLimitation %}
242|        var hasTeamLimitation = {{ permissionTagUser.teamLimitation ? 'true' : 'false' }};
257|            } else if (hasTeamLimitation) {

File: templates/new-goals/goal_company/goal_company.html.twig
Match lines: 9
401|                        {% if canEditWithoutTeamLimitation('goals') %}
660|                                                    {% if canEditWithoutTeamLimitation('goals') or actionDone %}
697|                                                {% if canEditWithoutTeamLimitation('goals') %}
781|                                                    {% if canEditWithoutTeamLimitation('goals') or krDone %}
836|                                                {% if canEditWithoutTeamLimitation('goals') %}
887|                        {% if canEditWithoutTeamLimitation('goals') %}
931|const canEditGoalWithoutTeamLimitation = {{ canEditWithoutTeamLimitation('goals') ? 'true' : 'false' }};
3064|            ${canEditGoalWithoutTeamLimitation ? `
3115|            ${canEditGoalWithoutTeamLimitation ? `

File: templates/new-goals/pdi/pdi_permissions.html.twig
Match lines: 1
883|                teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/organograma/company_layout.html.twig
Match lines: 9
2928|        const teamLimitationActive = Boolean(
2929|            permissionTagUser?.teamLimitationActive ??
2930|            permissionTagUser?.teamLimitation ??
2952|                teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},
3044|                if (!teamLimitationActive) return true;
3055|                if (!teamLimitationActive) return true;
3173|                    if (teamLimitationActive && !isMemberInAllowedTeams(memberID)) {
3537|                                if (teamLimitationActive && !isMemberInAllowedTeams(memberId)) {
5744|                        if (teamLimitationActive) {

File: templates/organograma/company_layout_js.html.twig
Match lines: 1
174|                teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/permissions_tags/add.html.twig
Match lines: 2
211|				const teamLimitation = document.getElementById("limitacaoEquipe").checked;
230|					teamLimitation,

File: templates/permissions_tags/edit.html.twig
Match lines: 3
128|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe" {% if permissionTag.teamLimitation %}checked{% endif %}>
210|                const teamLimitation = document.getElementById("limitacaoEquipe").checked;
229|                    teamLimitation,

File: templates/structural_research/structural_research_permission.html.twig
Match lines: 1
1001|                teamLimitation: {{ tag.teamLimitation ? 'true' : 'false' }},

File: templates/templates/timesheet_new_screen/index.html.twig
Match lines: 2
1651|    const hasTeamLimitation = {{ hasTeamLimitation| json_encode | raw }};
1674|            if (hasTeamLimitation && userTeamIds) {

File: templates/welfare_assessment/dashboard/dashboard_index.html.twig
Match lines: 1
198|const hasTeamLimitation = {{ member_permission_is_welfare_team_limited() ? 'true' : 'false' }};

{"file_path": "src/Service/Ssma/SsmaAreaLimitationScope.php", "start_line": 1, "end_line": 70}

File: src/Service/Ssma/SsmaAreaLimitationScope.php (Total lines: 167)
IS_TRUNCATED: false
LINE_RANGE: 1-70
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|/**
8| * Escopo de limitação por área organizacional no SSMA.
9| *
10| * Quem tem area_limitation vê a própria área e todas as subáreas (qualquer profundidade).
11| * Nunca vê a área pai nem irmãs fora da subárvore.
12| */
13|final class SsmaAreaLimitationScope
14|{
15|    public const TAG_SUPERVISOR_AREA = 'Supervisor de Área';
16|    public const TAG_GESTOR_AREA = 'Gestor de Área';
17|
18|    /**
19|     * @return list<string>
20|     */
21|    public static function namedAreaScopeTags(): array
22|    {
23|        return [self::TAG_SUPERVISOR_AREA, self::TAG_GESTOR_AREA];
24|    }
25|
26|    public static function shouldApplyAreaLimitation(
27|        ?string $tagName,
28|        ?bool $areaLimitation,
29|        bool $isPlatformAdmin,
30|    ): bool {
31|        if ($isPlatformAdmin) {
32|            return false;
33|        }
34|
35|        // Supervisor (empresa) e Gestor Administrador operam sem recorte de área.
36|        if (in_array($tagName, ['Gestor Administrador', 'Supervisor'], true)) {
37|            return false;
38|        }
39|
40|        if (in_array($tagName, self::namedAreaScopeTags(), true)) {
41|            return true;
42|        }
43|
44|        return (bool) $areaLimitation;
45|    }
46|
47|    /**
48|     * Inclui as áreas raiz e todos os descendentes. Não sobe para pais.
49|     *
50|     * @param array<int, int|null> $parentByAreaId id da área => id do pai (null se raiz)
51|     * @param list<int> $rootAreaIds
52|     *
53|     * @return list<int>
54|     */
55|    public static function expandWithDescendants(array $parentByAreaId, array $rootAreaIds): array
56|    {
57|        $childrenByParent = [];
58|        foreach ($parentByAreaId as $areaId => $parentId) {
59|            $areaId = (int) $areaId;
60|            if ($areaId <= 0) {
61|                continue;
62|            }
63|            $parentId = $parentId !== null ? (int) $parentId : 0;
64|            if ($parentId > 0) {
65|                $childrenByParent[$parentId][] = $areaId;
66|            }
67|        }
68|
69|        $allowed = [];
70|        $queue = [];

{"file_patterns": ["migrations/", "migration_archive_20260508/"], "search_text": "global_permission"}

File: migration_archive_20260508/Version20241216210858.php
Match lines: 7
17|        $this->addSql('ALTER TABLE company_members ADD global_permission_tag_id INT DEFAULT NULL');
18|        $this->addSql('ALTER TABLE company_members ADD CONSTRAINT FK_GLOBAL_PERMISSION_TAG FOREIGN KEY (global_permission_tag_id) REFERENCES permission_tag (id) ON DELETE SET NULL');
19|        $this->addSql('CREATE INDEX IDX_GLOBAL_PERMISSION_TAG ON company_members (global_permission_tag_id)');
21|        $this->addSql("UPDATE company_members SET global_permission_tag_id = 1;");
26|        $this->addSql('ALTER TABLE company_members DROP global_permission_tag_id');
27|        $this->addSql('ALTER TABLE company_members DROP FOREIGN KEY FK_GLOBAL_PERMISSION_TAG');
28|        $this->addSql('DROP INDEX IDX_GLOBAL_PERMISSION_TAG ON company_members');

File: migration_archive_20260508/Version20250204211232.php
Match lines: 3
80|            global_permission_tag_id INT DEFAULT NULL,
88|            INDEX IDX_ORD_GLOBAL_PERMISSION (global_permission_tag_id),
94|            CONSTRAINT FK_ORD_GLOBAL_PERMISSION FOREIGN KEY (global_permission_tag_id) REFERENCES permission_tag (id) ON DELETE SET NULL

File: migration_archive_20260508/Version20250221151202.php
Match lines: 2
25|            global_permission_tag_id INT NULL,
47|            ADD CONSTRAINT FK_ORG_ROLE_GLOBAL_PERMISSION FOREIGN KEY (global_permission_tag_id) 

File: migration_archive_20260508/Version20250328061732.php
Match lines: 6
57|            global_permission_tag_id INT DEFAULT NULL,
65|            INDEX IDX_ORD_GLOBAL_PERMISSION (global_permission_tag_id),
71|            CONSTRAINT FK_ORD_GLOBAL_PERMISSION FOREIGN KEY (global_permission_tag_id) REFERENCES permission_tag (id) ON DELETE SET NULL
84|            global_permission_tag_id INT DEFAULT NULL,
100|            INDEX IDX_GLOBAL_PERM_ORIG (global_permission_tag_id),
102|            CONSTRAINT FK_GLOBAL_PERM_ORIG FOREIGN KEY (global_permission_tag_id) REFERENCES permission_tag (id) ON DELETE SET NULL

File: migration_archive_20260508/Version20250425150432.php
Match lines: 1
28|               `global_permission_tag_id`, `manager_roles`)

File: migration_archive_20260508/Version20260306130001.php
Match lines: 1
2452|                     SELECT cm.id, @product_profisssional_growth_id, COALESCE(cm.global_permission_tag_id, 1)

{"file_patterns": ["migrations/", "migration_archive_20260508/"], "search_text": "permission_tag_suggestions|permission_tag_by_member"}

No matches found

{"file_patterns": ["public/js/"], "search_text": "permissionstags/add|permissionstags/edit", "use_perl_regexp": true}

No matches found

{"file_patterns": ["public/js/"], "search_text": "areaLimitation|canView|teamLimitation"}

No matches found

{"search_text": "processPermissions\\("}

No matches found

{"file_patterns": ["src/Entity/PermissionTagByMember.php", "src/Entity/PermissionTagSuggestion.php"], "search_text": "JoinColumn|table="}

No matches found

{"comments": [{"content": "A normalização de booleano foi aplicada apenas em `teamLimitation` e `areaLimitation`, mas os quatro flags de permissão do mesmo payload (`canView`, `canCreate`, `canEdit`, `canDelete`) continuam indo crus para setters que exigem `bool`. Como o PHP converte qualquer string não vazia em `true`, um valor textual como \"false\" acabaria gravado como permissão liberada — exatamente o cenário que o comentário do método diz tratar. Recomendo aplicar a mesma conversão a todos os flags booleanos do payload (ou garantir `bool` real no front) para o comportamento ficar consistente e não deixar uma permissão mais permissiva que a pretendida.", "existing_code": "    private function toBoolFlag(mixed $value): bool\n    {\n        return filter_var($value, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE) ?? false;\n    }", "path": "src/Controller/PermissionsTagsController.php", "category": "maintainability", "severity": "low"}, {"content": "Se alguma base já tiver uma tag com o nome \"Supervisor de Área\" ou \"Gestor de Área\" (o catálogo é global e aceita nomes arbitrários), o `WHERE NOT EXISTS` pula o INSERT e a tag existente fica com `area_limitation = 0`, porque não há UPDATE complementar. Como o recorte de área no SSMA é ativado por esses nomes/flag, o recurso ficaria desligado silenciosamente naquele ambiente. Sugiro, além do INSERT, um UPDATE que marque `area_limitation = 1` nas tags já existentes com esses nomes, ou registrar/validar a colisão antes do deploy.", "existing_code": "        $this->addSql(\"INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)\n            SELECT 'Supervisor de Área', 'Visualizacao apenas da sua area', 1, 0, 0, 0, 0, 1, 3, '#edd9ff', '#736282'\n            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Supervisor de Área')\");", "path": "migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php", "category": "bug", "severity": "low"}, {"content": "O rollback apaga as tags filtrando apenas pelo nome e limpa somente `permission_tag_suggestions` e `permission_tag_by_member`. Se num ambiente já existia uma tag customizada com esses nomes antes desta migration, o `DELETE` remove uma tag que não foi criada por ela (perda de configuração); e se alguma das tags tiver sido atribuída como tag global de membro/role (`global_permission_tag_id` em `company_members`/`organizational_role_details`) ou vinculada a produto (`tag_product_permissions`), o `DELETE` pode falhar por constraint não tratada. Recomendo restringir a exclusão aos IDs criados no `up` e limpar explicitamente todos os vínculos antes do `DELETE`.", "existing_code": "        $this->addSql(\"DELETE FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')\");", "path": "migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php", "category": "bug", "severity": "low"}, {"content": "Não há teste automatizado cobrindo o fluxo real de criar/editar tag com o novo campo `areaLimitation` e a normalização de valores \"false\"/\"0\"/null recém-introduzida no controller; a suíte nova da PR cobre apenas os serviços SSMA. Como o flag alimenta autorização de recorte de área, uma regressão aqui altera silenciosamente quem enxerga dados. Recomendo adicionar cobertura de borda para os endpoints de tags antes do merge.", "existing_code": "            $permissionTag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));", "path": "src/Controller/PermissionsTagsController.php", "category": "test", "severity": "low"}]}

(async)

{"state": "DONE"}

{"file_path": "templates/permissions_tags/edit.html.twig"}

File: templates/permissions_tags/edit.html.twig (Total lines: 288)
IS_TRUNCATED: false
LINE_RANGE: 1-288
1|{% extends 'layoutAdmin.html.twig' %}
2|
3|{% block container %}
4|
5|	<style>
6|		.color-block-container {
7|			display: flex;
8|			flex-wrap: wrap;
9|			gap: 10px;
10|			align-items: center;
11|		}
12|
13|		.color-block {
14|			width: 40px;
15|			height: 40px;
16|			border-radius: 5px;
17|			cursor: pointer;
18|			border: 2px solid transparent;
19|			transition: border-color 0.2s ease;
20|		}
21|		
22|		.color-block.selected {
23|			border-color: #000; /* Destaque para a cor selecionada */
24|		}
25|
26|		/* Custom styling for switches */
27|		.form-check-input[type="checkbox"][role="switch"] {
28|			width: 2.5em; /* Largura do switch */
29|			height: 1.25em; /* Altura do switch */
30|			background-color: #e0e0e0; /* Cor de fundo quando desativado */
31|			border-radius: 1.25em;
32|			position: relative;
33|			appearance: none;
34|			-webkit-appearance: none;
35|			outline: none;
36|			cursor: pointer;
37|			transition: background-color 0.3s;
38|		}
39|
40|		.form-check-input[type="checkbox"][role="switch"]:checked {
41|			background-color: #00a5b8; /* Cor de fundo quando ativado */
42|		}
43|
44|		.form-check-input[type="checkbox"][role="switch"]::before {
45|			content: '';
46|			position: absolute;
47|			top: 0.1em; /* Ajuste da posição vertical */
48|			left: 0.1em; /* Ajuste da posição horizontal */
49|			width: 1em; /* Diâmetro do círculo */
50|			height: 1em; /* Diâmetro do círculo */
51|			background-color: white; /* Cor do círculo */
52|			border-radius: 50%;
53|			transition: transform 0.3s;
54|		}
55|
56|		.form-check-input[type="checkbox"][role="switch"]:checked::before {
57|			transform: translateX(1.25em); /* Move o círculo para a direita quando ativado */
58|		}
59|
60|		.card-box {
61|			background-color: #f8f8f8; /* Substitua por exatamente a cor desejada */
62|			border-radius: 8px;
63|			padding: 10px;
64|		}
65|
66|	</style>
67|
68|    <div class="content-header">
69|		<div class="container-fluid">
70|			<div class="row mb-2 align-items-start">
71|				<div class="col-12 d-flex justify-content-between align-items-start flex-column flex-md-row">
72|					<div>
73|						<p class="mb-2 font-color font-weight-bold h1">EDITAR PERMISSÃO</p>
74|					</div>
75|					<div>
76|						<a class="btn btn-outline-secondary mt-2" href="{{ path('admin_permissionstags_index') }}">
77|							<i class="fa fa-angle-left mr-2"></i>
78|							Voltar para Permissões
79|						</a>
80|					</div>
81|				</div>
82|			</div>
83|		</div>
84|	</div>
85|
86|    <section class="content">
87|		<div class="container-fluid">
88|			<div class="card app-card-surface p-4">
89|				<form id="adminForm" class="stdform" data-tag-id="{{ permissionTag.id }}">
90|					<div class="card-box">
91|						<div class="row mb-4">
92|							<!-- Título da Permissão -->
93|							<div class="col-md-6">
94|								<label for="tituloPermissao" class="form-label">Título da Permissão</label>
95|								<input type="text" class="form-control" id="tituloPermissao" value="{{ permissionTag.name }}">
96|							</div>
97|
98|							<!-- Cor da Tag -->
99|							<div class="col-md-6">
100|								<label class="form-label">Cor da Tag</label>
101|								<div id="editColorBlocks" class="d-flex flex-wrap color-block-container">
102|									{% for colorTag in colorsTags %}
103|										<div 
104|											class="color-block {% if colorTag.color == permissionTag.color %}selected{% endif %}"
105|											style="background-color: {{ colorTag.color }};"
106|											data-color-id="{{ colorTag.colorId }}"
107|											data-color="{{ colorTag.color }}"
108|											data-letter-color="{{ colorTag.letterColor }}">
109|										</div>
110|									{% endfor %}
111|								</div>
112|							</div>
113|						</div>
114|
115|						<!-- Descrição -->
116|						<div class="row mb-4">
117|							<div class="col-12">
118|								<label for="descricaoPermissao" class="form-label">Descrição da Permissão</label>
119|								<textarea class="form-control" id="descricaoPermissao" rows="3">{{ permissionTag.description }}</textarea>
120|							</div>
121|						</div>
122|
123|						<div class="row">
124|							<!-- Limitação de Equipe -->
125|							<div class="col">
126|								<label class="form-check-label" for="limitacaoEquipe">Limitação de Equipe</label>
127|								<div class="form-check form-switch">
128|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe" {% if permissionTag.teamLimitation %}checked{% endif %}>
129|								</div>
130|							</div>
131|
132|							<!-- Limitação de Área -->
133|							<div class="col">
134|								<label class="form-check-label" for="limitacaoArea">Limitação de Área</label>
135|								<div class="form-check form-switch">
136|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea" {% if permissionTag.areaLimitation %}checked{% endif %}>
137|								</div>
138|							</div>
139|
140|							<!-- Permissão de Visualizar -->
141|							<div class="col">
142|								<label class="form-check-label" for="canView">Permissão de Visualizar</label>
143|								<div class="form-check form-switch">
144|									<input class="form-check-input" type="checkbox" role="switch" id="canView" {% if permissionTag.canView %}checked{% endif %}>
145|								</div>
146|							</div>
147|
148|							<!-- Permissão de Criar -->
149|							<div class="col">
150|								<label class="form-check-label" for="canCreate">Permissão de Criar</label>
151|								<div class="form-check form-switch">
152|									<input class="form-check-input" type="checkbox" role="switch" id="canCreate" {% if permissionTag.canCreate %}checked{% endif %}>
153|								</div>
154|							</div>
155|
156|							<!-- Permissão de Editar -->
157|							<div class="col">
158|								<label class="form-check-label" for="canEdit">Permissão de Editar</label>
159|								<div class="form-check form-switch">
160|									<input class="form-check-input" type="checkbox" role="switch" id="canEdit" {% if permissionTag.canEdit %}checked{% endif %}>
161|								</div>
162|							</div>
163|
164|							<!-- Permissão de Deletar -->
165|							<div class="col">
166|								<label class="form-check-label" for="canDelete">Permissão de Deletar</label>
167|								<div class="form-check form-switch">
168|									<input class="form-check-input" type="checkbox" role="switch" id="canDelete" {% if permissionTag.canDelete %}checked{% endif %}>
169|								</div>
170|							</div>
171|						</div>
172|
173|						<div class="row mt-4">
174|							<div class="col d-flex justify-content-end">
175|								<button type="submit" class="btn btn-primary px-4 py-2">
176|									<i class="fa fa-save mr-2"></i> Salvar Alterações
177|								</button>
178|							</div>
179|						</div>
180|
181|					</div>
182|				</form>
183|			</div>
184|		</div>
185|	</section>
186|
187|{% endblock %}
188|
189|{% block javascripts %}
190|	<script>
191|        // function showToast(message, title = 'Notificação', iconClass = 'fas fa-check', bgColor = 'bg-success') {
192|        // 	// Criação do Toast
193|        //     $(document).Toasts('create', {
194|        //     class: bgColor,
195|        //     title: title,
196|        //     subtitle: '', // Subtítulo opcional
197|        //     icon: iconClass, // Ícone FontAwesome
198|        //     body: message, // Mensagem exibida
199|        //     autohide: true, // Fecha automaticamente
200|        //     delay: 3000, // Tempo em milissegundos para fechamento
201|        //     autoremove: true // Remove o Toast do DOM automaticamente
202|        //     });
203|        // }
204|        
205|        document.addEventListener("DOMContentLoaded", () => {
206|            function collectFormData() {
207|                // Captura os valores do formulário
208|                const title = document.getElementById("tituloPermissao").value.trim();
209|                const description = document.getElementById("descricaoPermissao").value.trim();
210|                const teamLimitation = document.getElementById("limitacaoEquipe").checked;
211|                const areaLimitation = document.getElementById("limitacaoArea").checked;
212|
213|                // Captura a cor selecionada
214|                const selectedColorBlock = document.querySelector(".color-block.selected");
215|                const colorID = selectedColorBlock ? selectedColorBlock.dataset.colorId : null;
216|                const color = selectedColorBlock ? selectedColorBlock.dataset.color : null;
217|                const letterColor = selectedColorBlock ? selectedColorBlock.dataset.letterColor : null;
218|
219|                // Captura as permissões
220|                const canView = document.getElementById("canView").checked;
221|                const canCreate = document.getElementById("canCreate").checked;
222|                const canEdit = document.getElementById("canEdit").checked;
223|                const canDelete = document.getElementById("canDelete").checked;
224|
225|                // Retorna os dados formatados em JSON
226|                return {
227|                    title,
228|                    description,
229|                    teamLimitation,
230|                    areaLimitation,
231|                    colorID,
232|                    color,
233|                    letterColor,
234|                    canView,
235|                    canCreate,
236|                    canEdit,
237|                    canDelete
238|                };
239|            }
240|
241|            function sendFormData() {
242|                const formData = collectFormData();
243|                const tagId = document.getElementById("adminForm").dataset.tagId; // Obtém o ID da permissão
244|
245|                // Enviar os dados via PUT no formato JSON
246|                fetch(`/manager/permissionstags/edit/${tagId}`, {
247|                    method: 'PUT',
248|                    headers: {
249|                        'Content-Type': 'application/json'
250|                    },
251|                    body: JSON.stringify(formData)
252|                })
253|                .then(response => response.json())
254|                .then(data => {
255|                    if (data.status === 'success') {
256|						// Exibe uma mensagem de sucesso no console ou em um alerta
257|						showToast(data.message, 'Sucesso', 'fas fa-check', 'bg-success');
258|						// Atualiza a página
259|						setTimeout(() => {
260|							// Redireciona para a lista de permissões após a edição
261|							window.location.href = "/manager/permissionstags";
262|						}, 1000); // Adiciona um pequeno delay para permitir que o usuário veja o toast
263|					} else {
264|						showToast(data.message, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
265|					}
266|                })
267|                .catch(error => {
268|                    showToast(error, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
269|                });
270|            }
271|
272|            // Evento para capturar o clique nos blocos de cor
273|            document.querySelectorAll(".color-block").forEach(block => {
274|                block.addEventListener("click", () => {
275|                    document.querySelectorAll(".color-block").forEach(b => b.classList.remove("selected"));
276|                    block.classList.add("selected");
277|                });
278|            });
279|
280|            // Evento de submissão do formulário
281|            document.getElementById("adminForm").addEventListener("submit", (event) => {
282|                event.preventDefault();
283|                sendFormData();
284|            });
285|        });
286|
287|	</script>
288|{% endblock %}

{"file_path": "src/Controller/PermissionsTagsController.php"}

File: src/Controller/PermissionsTagsController.php (Total lines: 478)
IS_TRUNCATED: false
LINE_RANGE: 1-478
1|<?php
2|
3|namespace App\Controller;
4|
5|use App\Entity\ColorsTagsPermissions;
6|use App\Entity\PermissionTag;
7|use App\Entity\ProductPermission;
8|use App\Entity\TagProductPermissions;
9|use App\Entity\Config;
10|use App\Entity\Process;
11|use App\Entity\Company;
12|use Doctrine\ORM\EntityManagerInterface;
13|use SebastianBergmann\Environment\Console;
14|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
15|use Symfony\Component\HttpFoundation\JsonResponse;
16|use Symfony\Component\HttpFoundation\Request;
17|use Symfony\Component\HttpFoundation\Response;
18|use Symfony\Component\Security\Core\Security;
19|use App\Entity\Product;
20|use App\Entity\PermissionTagByMember;
21|use App\Entity\CompanyMembers;
22|
23|class PermissionsTagsController extends AbstractController
24|{
25|    private $security;
26|
27|    public function __construct(Security $security)
28|    {
29|        $this->security = $security;
30|    }
31|
32|    /**
33|     * Flags de limitação/permissão chegam por JSON e podem vir como bool, "0"/"1", "true"/"false"
34|     * ou null. Normaliza para bool antes dos setters, que só aceitam bool.
35|     */
36|    private function toBoolFlag(mixed $value): bool
37|    {
38|        return filter_var($value, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE) ?? false;
39|    }
40|
41|    public function index(EntityManagerInterface $entityManager): Response
42|    {
43|        $user = $this->security->getUser();
44|        $tags = $entityManager->getRepository(PermissionTag::class)->findAll();
45|        $colorsTags = $entityManager->getRepository(ColorsTagsPermissions::class);
46|
47|        return $this->render('permissions_tags/index.html.twig', [
48|            'tags' => $tags,
49|            'user' => $user,
50|            'colorsTags' => $colorsTags,
51|        ]);
52|    }
53|
54|    public function add(Request $request, EntityManagerInterface $entityManager): Response
55|    {
56|        if ($request->isMethod('POST')) {
57|            // Decodifica os dados JSON recebidos
58|            $data = json_decode($request->getContent(), true);
59|    
60|            // Validação básica dos campos obrigatórios
61|            if (empty($data['title'])) {
62|                return new JsonResponse(['status' => 'error', 'message' => 'O título é obrigatório.'], 400);
63|            }
64|            if (empty($data['description'])) {
65|                return new JsonResponse(['status' => 'error', 'message' => 'A descrição é obrigatória.'], 400);
66|            }
67|            if (empty($data['colorID'])) {
68|                return new JsonResponse(['status' => 'error', 'message' => 'A cor é obrigatória.'], 400);
69|            }
70|            
71|    
72|            // Criando uma nova entidade PermissionTag
73|            $permissionTag = new PermissionTag();
74|            $permissionTag->setName($data['title']);
75|            $permissionTag->setDescription($data['description']);
76|            $permissionTag->setColorID($data['colorID']);
77|            $permissionTag->setColor($data['color'] ?? null);
78|            $permissionTag->setLetterColor($data['letterColor'] ?? null);
79|            $permissionTag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
80|            $permissionTag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
81|            $permissionTag->setCanView($data['canView'] ?? false);
82|            $permissionTag->setCanCreate($data['canCreate'] ?? false);
83|            $permissionTag->setCanEdit($data['canEdit'] ?? false);
84|            $permissionTag->setCanDelete($data['canDelete'] ?? false);
85|    
86|            // Persiste a entidade no banco de dados
87|            $entityManager->persist($permissionTag);
88|            $entityManager->flush();
89|    
90|            return new JsonResponse([
91|                'status' => 'success',
92|                'message' => 'Permissão adicionada com sucesso!',
93|                'id' => $permissionTag->getId()
94|            ], 201);
95|        }
96|    
97|        return $this->render('permissions_tags/add.html.twig', [
98|            'colorsTags' => $this->getColorsTags(),
99|        ]);
100|    }
101|
102|    public function edit(Request $request, EntityManagerInterface $entityManager, int $id): Response
103|    {
104|        if ($request->isMethod('PUT')) {
105|            // Busca a permissão pelo ID
106|            $tag = $entityManager->getRepository(PermissionTag::class)->find($id);
107|        
108|            if (!$tag) {
109|                return new JsonResponse(['status' => 'error', 'message' => 'Tag não encontrada'], 404);
110|            }
111|        
112|            try {
113|                $data = json_decode($request->getContent(), true);
114|        
115|                // Validação básica dos campos obrigatórios
116|                if (empty($data['title'])) {
117|                    return new JsonResponse(['status' => 'error', 'message' => 'O título é obrigatório.'], 400);
118|                }
119|                if (empty($data['description'])) {
120|                    return new JsonResponse(['status' => 'error', 'message' => 'A descrição é obrigatória.'], 400);
121|                }
122|                if (empty($data['colorID'])) {
123|                    return new JsonResponse(['status' => 'error', 'message' => 'A cor é obrigatória.'], 400);
124|                }
125|                
126|        
127|                // Atualiza os dados da tag
128|                $tag->setName($data['title']);
129|                $tag->setDescription($data['description']);
130|                $tag->setColorID($data['colorID']);
131|                $tag->setColor($data['color'] ?? null);
132|                $tag->setLetterColor($data['letterColor'] ?? null);
133|                $tag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
134|                $tag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
135|                
136|                // Atualiza permissões
137|                $tag->setCanView($data['canView'] ?? false);
138|                $tag->setCanCreate($data['canCreate'] ?? false);
139|                $tag->setCanEdit($data['canEdit'] ?? false);
140|                $tag->setCanDelete($data['canDelete'] ?? false);
141|        
142|                // Salva as mudanças no banco de dados
143|                $entityManager->flush();
144|        
145|                return new JsonResponse([
146|                    'status' => 'success',
147|                    'message' => 'Permissão atualizada com sucesso!',
148|                    'id' => $tag->getId()
149|                ], 200);
150|            } catch (\Exception $e) {
151|                return new JsonResponse(['status' => 'error', 'message' => 'Erro ao atualizar a permissão: ' . $e->getMessage()], 500);
152|            }
153|        }
154|    
155|        // Caso seja uma requisição GET, retorna a página de edição
156|        $tag = $entityManager->getRepository(PermissionTag::class)->find($id);
157|
158|        if (!$tag) {
159|            throw $this->createNotFoundException('Tag não encontrada.');
160|        }
161|
162|        // Nome específico de propósito: a tela estende o layoutAdmin, que inclui componentes
163|        // compartilhados sem `only`. Uma variável genérica `tag` colidiria com o atributo `tag`
164|        // esperado por esses componentes.
165|        return $this->render('permissions_tags/edit.html.twig', [
166|            'permissionTag' => $tag,
167|            'colorsTags' => $this->getColorsTags(),
168|        ]);
169|    }
170|
171|    public function delete(PermissionTag $tag = null, EntityManagerInterface $entityManager): JsonResponse
172|    {
173|        if (!$tag) {
174|            return new JsonResponse([
175|                'status' => 'error',
176|                'message' => 'Tag não encontrada'
177|            ], 404);
178|        }
179|
180|        try {
181|            // Remove a tag de permissão
182|            $entityManager->remove($tag);
183|            $entityManager->flush();
184|
185|            return new JsonResponse([
186|                'status' => 'success',
187|                'message' => 'A permissão foi excluída com sucesso.'
188|            ], 200);
189|        } catch (\Exception $e) {
190|            return new JsonResponse([
191|                'status' => 'error',
192|                'message' => 'Erro ao excluir a permissão: ' . $e->getMessage()
193|            ], 500);
194|        }
195|    }
196|
197|    public function updatePermissionTagByMember(Request $request, EntityManagerInterface $entityManager): JsonResponse
198|    {
199|        $data = json_decode($request->getContent(), true);
200|
201|        if (empty($data['companyMemberID'])) {
202|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
203|        }
204|        if (empty($data['productSlug'])) {
205|            return new JsonResponse(['status' => 'error', 'message' => 'A slug do produto é obrigatória.'], 400);
206|        }
207|        if (empty($data['tagID'])) {
208|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
209|        }
210|
211|        $companyMemberID = (int) $data['companyMemberID'];
212|        $productSlug = $data['productSlug'];
213|        $tagID = (int) $data['tagID'];
214|
215|        $product = $entityManager->getRepository(Product::class)->findOneBy(['slug' => $productSlug]);
216|        if (!$product) {
217|            return new JsonResponse(['status' => 'error', 'message' => 'Produto não encontrado.'], 404);
218|        }
219|
220|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
221|        if (!$permissionTag) {
222|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
223|        }
224|
225|        $permissionTagByMember = $entityManager->getRepository(PermissionTagByMember::class)
226|            ->findOneBy([
227|                'companyMemberID' => $companyMemberID,
228|                'productID' => $product->getId()
229|            ]);
230|
231|        if ($permissionTagByMember) {
232|            $permissionTagByMember->setTagID($tagID);
233|        } else {
234|            $permissionTagByMember = new PermissionTagByMember();
235|            $permissionTagByMember->setCompanyMemberID($companyMemberID);
236|            $permissionTagByMember->setProductID($product->getId());
237|            $permissionTagByMember->setTagID($tagID);
238|            $entityManager->persist($permissionTagByMember);
239|        }
240|
241|        $entityManager->flush();
242|
243|        return new JsonResponse([
244|            'status' => 'success',
245|            'message' => 'Permissão do membro atualizada com sucesso!',
246|            'data' => [
247|                'companyMemberID' => $companyMemberID,
248|                'productSlug' => $productSlug,
249|                'tagID' => $tagID,
250|                'productName' => $product->getName(),
251|                'tagName' => $permissionTag->getName()
252|            ]
253|        ], 200);
254|    }
255|
256|    /**
257|     * Atualiza a permissão de um membro para um produto específico via parâmetros na URL
258|     */
259|    public function updatePermissionTagByMemberUrl(int $companyMemberID, string $productSlug, int $tagID, EntityManagerInterface $entityManager): JsonResponse
260|    {
261|        if (empty($companyMemberID)) {
262|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
263|        }
264|        if (empty($productSlug)) {
265|            return new JsonResponse(['status' => 'error', 'message' => 'A slug do produto é obrigatória.'], 400);
266|        }
267|        if (empty($tagID)) {
268|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
269|        }
270|
271|        $product = $entityManager->getRepository(Product::class)->findOneBy(['slug' => $productSlug]);
272|        if (!$product) {
273|            return new JsonResponse(['status' => 'error', 'message' => 'Produto não encontrado.'], 404);
274|        }
275|
276|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
277|        if (!$permissionTag) {
278|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
279|        }
280|
281|        $permissionTagByMember = $entityManager->getRepository(PermissionTagByMember::class)
282|            ->findOneBy([
283|                'companyMemberID' => $companyMemberID,
284|                'productID' => $product->getId()
285|            ]);
286|
287|        if ($permissionTagByMember) {
288|            $permissionTagByMember->setTagID($tagID);
289|        } else {
290|            $permissionTagByMember = new PermissionTagByMember();
291|            $permissionTagByMember->setCompanyMemberID($companyMemberID);
292|            $permissionTagByMember->setProductID($product->getId());
293|            $permissionTagByMember->setTagID($tagID);
294|            $entityManager->persist($permissionTagByMember);
295|        }
296|
297|        $entityManager->flush();
298|
299|        return new JsonResponse([
300|            'status' => 'success',
301|            'message' => 'Permissão do membro atualizada com sucesso!',
302|            'data' => [
303|                'companyMemberID' => $companyMemberID,
304|                'productSlug' => $productSlug,
305|                'tagID' => $tagID,
306|                'productName' => $product->getName(),
307|                'tagName' => $permissionTag->getName()
308|            ]
309|        ], 200);
310|    }
311|
312|    public function updateGlobalPermissionTagByMember(Request $request, EntityManagerInterface $entityManager): JsonResponse
313|    {
314|        $data = json_decode($request->getContent(), true);
315|
316|        if (empty($data['companyMemberID'])) {
317|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
318|        }
319|        if (empty($data['tagID'])) {
320|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
321|        }
322|
323|        $companyMemberID = (int) $data['companyMemberID'];
324|        $tagID = (int) $data['tagID'];
325|
326|        $companyMember = $entityManager->getRepository(CompanyMembers::class)->find($companyMemberID);
327|        if (!$companyMember) {
328|            return new JsonResponse(['status' => 'error', 'message' => 'Membro da empresa não encontrado.'], 404);
329|        }
330|
331|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
332|        if (!$permissionTag) {
333|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
334|        }
335|
336|        $companyMember->setGlobalPermissionTag($permissionTag);
337|
338|        $entityManager->flush();
339|
340|        return new JsonResponse([
341|            'status' => 'success',
342|            'message' => 'Tag global de permissão do membro atualizada com sucesso!',
343|            'data' => [
344|                'companyMemberID' => $companyMemberID,
345|                'tagID' => $tagID,
346|                'memberName' => $companyMember->getFullName(),
347|                'tagName' => $permissionTag->getName()
348|            ]
349|        ], 200);
350|    }
351|
352|    /**
353|     * Atualiza a permissão global de um membro via parâmetros na URL
354|     */
355|    public function updateGlobalPermissionTagByMemberUrl(int $companyMemberID, int $tagID, EntityManagerInterface $entityManager): JsonResponse
356|    {
357|        if (empty($companyMemberID)) {
358|            return new JsonResponse(['status' => 'error', 'message' => 'O ID do membro da empresa é obrigatório.'], 400);
359|        }
360|        if (empty($tagID)) {
361|            return new JsonResponse(['status' => 'error', 'message' => 'O ID da tag é obrigatório.'], 400);
362|        }
363|
364|        $companyMember = $entityManager->getRepository(CompanyMembers::class)->find($companyMemberID);
365|        if (!$companyMember) {
366|            return new JsonResponse(['status' => 'error', 'message' => 'Membro da empresa não encontrado.'], 404);
367|        }
368|
369|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($tagID);
370|        if (!$permissionTag) {
371|            return new JsonResponse(['status' => 'error', 'message' => 'Tag de permissão não encontrada.'], 404);
372|        }
373|
374|        $companyMember->setGlobalPermissionTag($permissionTag);
375|
376|        $entityManager->flush();
377|
378|        return new JsonResponse([
379|            'status' => 'success',
380|            'message' => 'Tag global de permissão do membro atualizada com sucesso!',
381|            'data' => [
382|                'companyMemberID' => $companyMemberID,
383|                'tagID' => $tagID,
384|                'memberName' => $companyMember->getFullName(),
385|                'tagName' => $permissionTag->getName()
386|            ]
387|        ], 200);
388|    }
389|
390|    public function getPermissionsByTag(int $id, EntityManagerInterface $entityManager): JsonResponse
391|    {
392|        $permissionTag = $entityManager->getRepository(PermissionTag::class)->find($id);
393|
394|        if (!$permissionTag) {
395|            return new JsonResponse([
396|                'status' => 'error',
397|                'message' => 'Tag não encontrada'
398|            ], 404);
399|        }
400|
401|        $permissions = array_map(function ($permission) {
402|            return [
403|                'product_name' => $permission->getProduct(),
404|                'permissions' => explode(',', $permission->getPermission()),
405|            ];
406|        }, $permissionTag->getTagProductPermissions()->toArray());
407|
408|        return new JsonResponse([
409|            'status' => 'success',
410|            'tag_name' => $permissionTag->getName(),
411|            'permissions' => $permissions
412|        ]);
413|    }
414|
415|    private function processPermissions(array $products, PermissionTag $tag, EntityManagerInterface $entityManager): void
416|    {
417|        foreach ($products as $productData) {
418|            if (empty($productData['productID'])) {
419|                continue;
420|            }
421|            
422|            
423|            $permissions = [];
424|            foreach (['view', 'create', 'edit', 'delete'] as $action) {
425|                if (!empty($productData[$action])) {
426|                    $permissions[] = $action;
427|                }
428|            }
429|
430|            $existingPermission = $tag->getTagProductPermissions()->filter(function ($perm) use ($productData) {
431|                return $perm->getProductID() === $productData['productID'];
432|            })->first();
433|
434|            if ($existingPermission) {
435|                $existingPermission->setPermission(implode(',', $permissions));
436|            } else {
437|                $newPermission = new TagProductPermissions();
438|                $newPermission->setProductID($productData['productID']);
439|                $newPermission->setPermission(implode(',', $permissions));
440|                $newPermission->setPermissionTag($tag);
441|                $entityManager->persist($newPermission);
442|            }
443|        }
444|    }
445|
446|    private function getConfig()
447|    {
448|        return $this->getDoctrine()->getRepository(Config::class)->findOneBy(['company' => $this->getUser()->getCompany()]);
449|    }
450|
451|    private function getProcessList()
452|    {
453|        if ($this->getUser()->isSuperAdmin()) {
454|            return $this->getDoctrine()->getRepository(Process::class)->findAll();
455|        }
456|        return [];
457|    }
458|
459|    private function getCompanies()
460|    {
461|        if ($this->getUser()->isSuperAdmin()) {
462|            return $this->getDoctrine()->getRepository(Company::class)->findBy([], ['name' => 'asc']);
463|        }
464|        return [];
465|    }
466|
467|    private function getProductsPermissions()
468|    {
469|        return $this->getDoctrine()->getRepository(ProductPermission::class)->findAll();
470|    }
471|
472|    private function getColorsTags()
473|    {
474|        return $this->getDoctrine()->getRepository(ColorsTagsPermissions::class)->findAll();
475|    }
476|
477|}
478|

{"file_path": "src/Entity/PermissionTag.php"}

File: src/Entity/PermissionTag.php (Total lines: 210)
IS_TRUNCATED: false
LINE_RANGE: 1-210
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\PermissionTagRepository;
6|use Doctrine\Common\Collections\ArrayCollection;
7|use Doctrine\Common\Collections\Collection;
8|use Doctrine\ORM\Mapping as ORM;
9|
10|/**
11| * @ORM\Entity(repositoryClass=PermissionTagRepository::class)
12| */
13|class PermissionTag
14|{
15|    /**
16|     * @ORM\Id
17|     * @ORM\GeneratedValue
18|     * @ORM\Column(type="integer")
19|     */
20|    private $id;
21|
22|    /**
23|     * @ORM\Column(type="string", length=255)
24|     */
25|    private $name;
26|
27|    /**
28|     * @ORM\Column(type="string", length=255, nullable=true)
29|     */
30|    private $description;
31|
32|    /**
33|     * @ORM\Column(name="team_limitation", type="boolean", nullable=false)
34|     */
35|    private $teamLimitation;
36|
37|    /**
38|     * @ORM\Column(name="area_limitation", type="boolean", nullable=false, options={"default": false})
39|     */
40|    private $areaLimitation = false;
41|
42|    /**
43|     * @ORM\Column(name="color_id", type="integer", nullable=false)
44|     */
45|    private $colorID;
46|
47|    /**
48|     * @ORM\Column(type="string", length=7, nullable=true)
49|     */
50|    private $color;
51|
52|    /**
53|     * @ORM\Column(name="letter_color", type="string", length=7, nullable=true)
54|     */
55|    private $letterColor;
56|
57|    /**
58|     * @ORM\Column(name="can_view", type="boolean", nullable=false)
59|     */
60|    private $canView;
61|
62|    /**
63|     * @ORM\Column(name="can_create", type="boolean", nullable=false)
64|     */
65|    private $canCreate;
66|
67|    /**
68|     * @ORM\Column(name="can_edit", type="boolean", nullable=false)
69|     */
70|    private $canEdit;
71|
72|    /**
73|     * @ORM\Column(name="can_delete", type="boolean", nullable=false)
74|     */
75|    private $canDelete;
76|
77|    public function getId(): ?int
78|    {
79|        return $this->id;
80|    }
81|
82|    public function getName(): ?string
83|    {
84|        return $this->name;
85|    }
86|
87|    public function setName(string $name): self
88|    {
89|        $this->name = $name;
90|
91|        return $this;
92|    }
93|
94|    public function getDescription(): ?string
95|    {
96|        return $this->description;
97|    }
98|
99|    public function setDescription(?string $description): self
100|    {
101|        $this->description = $description;
102|
103|        return $this;
104|    }
105|
106|    public function getColorID(): ?int
107|    {
108|        return $this->colorID;
109|    }
110|
111|    public function setColorID(int $colorID): self
112|    {
113|        $this->colorID = $colorID;
114|
115|        return $this;
116|    }
117|
118|    public function getTeamLimitation(): ?bool
119|    {
120|        return $this->teamLimitation;
121|    }
122|
123|    public function setTeamLimitation(bool $teamLimitation): self
124|    {
125|        $this->teamLimitation = $teamLimitation;
126|
127|        return $this;
128|    }
129|
130|    public function getAreaLimitation(): ?bool
131|    {
132|        return $this->areaLimitation;
133|    }
134|
135|    public function setAreaLimitation(bool $areaLimitation): self
136|    {
137|        $this->areaLimitation = $areaLimitation;
138|
139|        return $this;
140|    }
141|
142|    public function setColor(string $color): void
143|    {
144|        $this->color = $color;
145|    }
146|
147|    public function getColor(): string
148|    {
149|        return $this->color ?? '';
150|    }
151|
152|    public function setLetterColor(string $letterColor): void
153|    {
154|        $this->letterColor = $letterColor;
155|    }
156|
157|    public function getLetterColor(): string
158|    {
159|        return $this->letterColor ?? '';
160|    }
161|
162|    public function getCanView(): ?bool
163|    {
164|        return $this->canView;
165|    }
166|
167|    public function setCanView(bool $canView): self
168|    {
169|        $this->canView = $canView;
170|
171|        return $this;
172|    }
173|
174|    public function getCanCreate(): ?bool
175|    {
176|        return $this->canCreate;
177|    }
178|
179|    public function setCanCreate(bool $canCreate): self
180|    {
181|        $this->canCreate = $canCreate;
182|
183|        return $this;
184|    }
185|
186|    public function getCanEdit(): ?bool
187|    {
188|        return $this->canEdit;
189|    }
190|
191|    public function setCanEdit(bool $canEdit): self
192|    {
193|        $this->canEdit = $canEdit;
194|
195|        return $this;
196|    }
197|
198|    public function getCanDelete(): ?bool
199|    {
200|        return $this->canDelete;
201|    }
202|
203|    public function setCanDelete(bool $canDelete): self
204|    {
205|        $this->canDelete = $canDelete;
206|
207|        return $this;
208|    }
209|}
210|

{"file_path": "templates/permissions_tags/add.html.twig"}

File: templates/permissions_tags/add.html.twig (Total lines: 288)
IS_TRUNCATED: false
LINE_RANGE: 1-288
1|{% extends 'layoutAdmin.html.twig' %}
2|
3|{% block container %}
4|
5|	<style>
6|		.color-block-container {
7|			display: flex;
8|			flex-wrap: wrap;
9|			gap: 10px;
10|			align-items: center;
11|		}
12|
13|		.color-block {
14|			width: 40px;
15|			height: 40px;
16|			border-radius: 5px;
17|			cursor: pointer;
18|			border: 2px solid transparent;
19|			transition: border-color 0.2s ease;
20|		}
21|		
22|		.color-block.selected {
23|			border-color: #000; /* Destaque para a cor selecionada */
24|		}
25|
26|		/* Custom styling for switches */
27|		.form-check-input[type="checkbox"][role="switch"] {
28|			width: 2.5em; /* Largura do switch */
29|			height: 1.25em; /* Altura do switch */
30|			background-color: #e0e0e0; /* Cor de fundo quando desativado */
31|			border-radius: 1.25em;
32|			position: relative;
33|			appearance: none;
34|			-webkit-appearance: none;
35|			outline: none;
36|			cursor: pointer;
37|			transition: background-color 0.3s;
38|		}
39|
40|		.form-check-input[type="checkbox"][role="switch"]:checked {
41|			background-color: #00a5b8; /* Cor de fundo quando ativado */
42|		}
43|
44|		.form-check-input[type="checkbox"][role="switch"]::before {
45|			content: '';
46|			position: absolute;
47|			top: 0.1em; /* Ajuste da posição vertical */
48|			left: 0.1em; /* Ajuste da posição horizontal */
49|			width: 1em; /* Diâmetro do círculo */
50|			height: 1em; /* Diâmetro do círculo */
51|			background-color: white; /* Cor do círculo */
52|			border-radius: 50%;
53|			transition: transform 0.3s;
54|		}
55|
56|		.form-check-input[type="checkbox"][role="switch"]:checked::before {
57|			transform: translateX(1.25em); /* Move o círculo para a direita quando ativado */
58|		}
59|
60|		.card-box {
61|			background-color: #f8f8f8; /* Substitua por exatamente a cor desejada */
62|			border-radius: 8px;
63|			padding: 10px;
64|		}
65|
66|	</style>
67|
68|	<div class="content-header">
69|		<div class="container-fluid">
70|			<div class="row mb-2 align-items-start">
71|				<div class="col-12 d-flex justify-content-between align-items-start flex-column flex-md-row">
72|					<div>
73|						<p class="mb-2 font-color font-weight-bold h1">NOVA PERMISSÃO</p>
74|					</div>
75|					<div>
76|						<a class="btn btn-outline-secondary mt-2" href="{{ path('admin_permissionstags_index') }}">
77|							<i class="fa fa-angle-left mr-2"></i>
78|							Voltar para Permissões
79|						</a>
80|					</div>
81|				</div>
82|			</div>
83|		</div>
84|	</div>
85|
86|	<section class="content">
87|		<div class="container-fluid">
88|			<div class="card app-card-surface p-4">
89|				<form id="adminForm" class="stdform">
90|					<div class="card-box">
91|						<div class="row mb-4">
92|							<!-- Título da Permissão -->
93|							<div class="col-md-6">
94|								<label for="tituloPermissao" class="form-label">Título da Permissão</label>
95|								<input type="text" class="form-control" id="tituloPermissao" placeholder="Digite o título">
96|							</div>
97|
98|							<!-- Cor da Tag -->
99|							<div class="col-md-6">
100|								<label class="form-label">Cor da Tag</label>
101|								<div id="editColorBlocks" class="d-flex flex-wrap color-block-container">
102|									{% for colorTag in colorsTags %}
103|										<div 
104|											class="color-block" 
105|											style="background-color: {{ colorTag.color }};"
106|											title="Cor: {{ colorTag.color }};"
107|											data-color-id="{{ colorTag.colorId }}"
108|											data-color="{{ colorTag.color }}"
109|											data-letter-color="{{ colorTag.letterColor }}">
110|										</div>
111|									{% endfor %}
112|								</div>
113|							</div>
114|						</div>
115|
116|						<!-- Descrição -->
117|						<div class="row mb-4">
118|							<div class="col-12">
119|								<label for="descricaoPermissao" class="form-label">Descrição da Permissão</label>
120|								<textarea class="form-control" id="descricaoPermissao" rows="3" placeholder="Digite a descrição"></textarea>
121|							</div>
122|						</div>
123|
124|						<div class="row">
125|							<!-- Limitação de Equipe -->
126|							<div class="col">
127|								<label class="form-check-label" for="limitacaoEquipe">Limitação de Equipe</label>
128|								<div class="form-check form-switch">
129|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoEquipe">
130|								</div>
131|							</div>
132|
133|							<!-- Limitação de Área -->
134|							<div class="col">
135|								<label class="form-check-label" for="limitacaoArea">Limitação de Área</label>
136|								<div class="form-check form-switch">
137|									<input class="form-check-input" type="checkbox" role="switch" id="limitacaoArea">
138|								</div>
139|							</div>
140|
141|							<!-- Permissão de Visualizar -->
142|							<div class="col">
143|								<label class="form-check-label" for="canView">Permissão de Visualizar</label>
144|								<div class="form-check form-switch">
145|									<input class="form-check-input" type="checkbox" role="switch" id="canView">
146|								</div>
147|							</div>
148|
149|							<!-- Permissão de Criar -->
150|							<div class="col">
151|								<label class="form-check-label" for="canCreate">Permissão de Criar</label>
152|								<div class="form-check form-switch">
153|									<input class="form-check-input" type="checkbox" role="switch" id="canCreate">
154|								</div>
155|							</div>
156|
157|							<!-- Permissão de Editar -->
158|							<div class="col">
159|								<label class="form-check-label" for="canEdit">Permissão de Editar</label>
160|								<div class="form-check form-switch">
161|									<input class="form-check-input" type="checkbox" role="switch" id="canEdit">
162|								</div>
163|							</div>
164|
165|							<!-- Permissão de Deletar -->
166|							<div class="col">
167|								<label class="form-check-label" for="canDelete">Permissão de Deletar</label>
168|								<div class="form-check form-switch">
169|									<input class="form-check-input" type="checkbox" role="switch" id="canDelete">
170|								</div>
171|							</div>
172|						</div>
173|
174|						<div class="row mt-4">
175|							<div class="col d-flex justify-content-end">
176|								<button type="submit" class="btn btn-primary px-4 py-2">
177|									<i class="fa fa-save mr-2"></i> Salvar Alterações
178|								</button>
179|							</div>
180|						</div>
181|
182|					</div>
183|				</form>
184|			</div>
185|		</div>
186|	</section>
187|
188|{% endblock %}
189|
190|{% block javascripts %}
191|	<script>
192|		// function showToast(message, title = 'Notificação', iconClass = 'fas fa-check', bgColor = 'bg-success') {
193|        // 	// Criação do Toast
194|        //     $(document).Toasts('create', {
195|        //     class: bgColor,
196|        //     title: title,
197|        //     subtitle: '', // Subtítulo opcional
198|        //     icon: iconClass, // Ícone FontAwesome
199|        //     body: message, // Mensagem exibida
200|        //     autohide: true, // Fecha automaticamente
201|        //     delay: 3000, // Tempo em milissegundos para fechamento
202|        //     autoremove: true // Remove o Toast do DOM automaticamente
203|        //     });
204|        // }
205|
206|		document.addEventListener("DOMContentLoaded", () => {
207|			function collectFormData() {
208|				// Captura os valores do formulário
209|				const title = document.getElementById("tituloPermissao").value.trim();
210|				const description = document.getElementById("descricaoPermissao").value.trim();
211|				const teamLimitation = document.getElementById("limitacaoEquipe").checked;
212|				const areaLimitation = document.getElementById("limitacaoArea").checked;
213|
214|				// Captura a cor selecionada
215|				const selectedColorBlock = document.querySelector(".color-block.selected");
216|				const colorID = selectedColorBlock ? selectedColorBlock.dataset.colorId : null;
217|				const color = selectedColorBlock ? selectedColorBlock.dataset.color : null;
218|				const letterColor = selectedColorBlock ? selectedColorBlock.dataset.letterColor : null;
219|
220|				// Captura as permissões
221|				const canView = document.getElementById("canView").checked;
222|				const canCreate = document.getElementById("canCreate").checked;
223|				const canEdit = document.getElementById("canEdit").checked;
224|				const canDelete = document.getElementById("canDelete").checked;
225|
226|				// Retorna os dados formatados em JSON
227|				return {
228|					title,
229|					description,
230|					teamLimitation,
231|					areaLimitation,
232|					colorID,
233|					color,
234|					letterColor,
235|					canView,
236|					canCreate,
237|					canEdit,
238|					canDelete
239|				};
240|			}
241|
242|			function sendFormData() {
243|				const formData = collectFormData();
244|
245|				// Enviar os dados via POST no formato JSON
246|				fetch('/manager/permissionstags/add', {
247|					method: 'POST',
248|					headers: {
249|						'Content-Type': 'application/json'
250|					},
251|					body: JSON.stringify(formData)
252|				})
253|				.then(response => response.json())
254|				.then(data => {
255|					if (data.status === 'success') {
256|						// Exibe uma mensagem de sucesso no console ou em um alerta
257|						showToast(data.message, 'Sucesso', 'fas fa-check', 'bg-success');
258|						// Atualiza a página
259|						setTimeout(() => {
260|							// Redireciona para a lista de permissões após a edição
261|							window.location.href = "/manager/permissionstags";
262|						}, 1000); // Adiciona um pequeno delay para permitir que o usuário veja o toast
263|					} else {
264|						showToast(data.message, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
265|					}
266|				})
267|				.catch(error => {
268|                    showToast(error, 'Erro', 'fas fa-exclamation-circle', 'bg-danger');
269|				});
270|			}
271|
272|			// Evento para capturar o clique nos blocos de cor
273|			document.querySelectorAll(".color-block").forEach(block => {
274|				block.addEventListener("click", () => {
275|					document.querySelectorAll(".color-block").forEach(b => b.classList.remove("selected"));
276|					block.classList.add("selected");
277|				});
278|			});
279|
280|			// Evento de submissão do formulário
281|			document.getElementById("adminForm").addEventListener("submit", (event) => {
282|				event.preventDefault();
283|				sendFormData();
284|			});
285|		});
286|
287|	</script>
288|{% endblock %}

{"query_name": "migrations/Version"}

migrations/Version00000000000001.php
migrations/Version20251003021946.php
migrations/Version20251204000000.php
migrations/Version20251218102947.php
migrations/Version20260108150025_ChartImport.php
migrations/Version20260308100000.php
migrations/Version20260316110500.php
migrations/Version20260316120000.php
migrations/Version20260319120000.php
migrations/Version20260320090000.php
migrations/Version20260320120000.php
migrations/Version20260327185728.php
migrations/Version20260330180000.php
migrations/Version20260406162000_JobsDescriptionLongtext.php
migrations/Version20260409120000.php
migrations/Version20260410120000_ProjectDescriptionLongtext.php
migrations/Version20260415120000_HiringTribunalCandidateState.php
migrations/Version20260424165500.php
migrations/Version20260424200000_AddCompanyMembersSsmaAprofundamentoClinicas.php
migrations/Version20260427180000_MetaHumanCommitteeMemberAndAudit.php
migrations/Version20260427191000.php
migrations/Version20260428133000.php
migrations/Version20260428153000_MetaHumanCommitteeAuditProduct.php
migrations/Version20260428160000_MetaHumanStrategicActionsProduct.php
migrations/Version20260428161000.php
migrations/Version20260428170000_MetaHumanDossierLaudoPdf.php
migrations/Version20260428180000_DossierLaudoAcknowledgment.php
migrations/Version20260429134000.php
migrations/Version20260429140000_MetaHumanClientCommitteeFoundation.php
migrations/Version20260429150000_MetaHumanClientStrategicPipelineAndAlerts.php
migrations/Version20260429150859.php
migrations/Version20260429170000_MetaHumanClientFinanceAuditPredictive.php
migrations/Version20260429193000.php
migrations/Version20260430100000_MetaHumanCommitteeCaseUiStatePersistence.php
migrations/Version20260430120000_MetaHumanModelV3Telemetry.php
migrations/Version20260430120000_MetaHumanStrategicActionsLegalProduct.php
migrations/Version20260430140000_CompanyAiCommitteePolicy.php
migrations/Version20260430140000_PermanenceLegalClassifierAuditLog.php
migrations/Version20260430203000_MetaHumanHiringVacancyPriorityRanking.php
migrations/Version20260503103000_MetaHumanClientStrategicAlertInstanceColumns.php
migrations/Version20260503140000_MetaHumanMemberSheetWizardState.php
migrations/Version20260503150000_AlertSchedulerTelemetry.php
migrations/Version20260503150100_AlertThresholdConfig.php
migrations/Version20260503160000_AlertInstanceEstado.php
migrations/Version20260503160100_AlertAuditLog.php
migrations/Version20260503160200_ClientFinancialProfile.php
migrations/Version20260503160300_AlertSchedulerTelemetryStatus.php
migrations/Version20260503170000_ClientCommitteeSessionEntities.php
migrations/Version20260503180000_HarassmentAuditLog.php
migrations/Version20260503180100_CommitteeCaseStateBloqueioMotivo.php
migrations/Version20260503190000_HandoffSuggestionUrgencia.php
migrations/Version20260503200000_CompanyModelV3Enabled.php
migrations/Version20260503210000_MetaHumanClientStrategicSignal.php
migrations/Version20260503220000_MetaHumanPermanencePromotionTelemetrySnapshot.php
migrations/Version20260504103000_AiCommitteeSessionPermanenceClassifierSnapshot.php
migrations/Version20260504140000_MetaHumanClientStrategicAlertSilencedUntil.php
migrations/Version20260504150000_RagDocumentMetadata.php
migrations/Version20260504170000_ClientCommitteeSessionOverride.php
migrations/Version20260505143000_CrmOrganizationMetaHumanAl5Tags.php
migrations/Version20260505210000_AiCommitteeBrainstormExecutiveEvidence.php
migrations/Version20260506120000_InterpretativeOperationalPipelineTables.php
migrations/Version20260506124500.php
migrations/Version20260506160000_MetahumanInterpretativeOperationalEnvelopeAudit.php
migrations/Version20260507100000_MetahumanInterpretativeOperationalSimulation.php
migrations/Version20260508103000_InterpretativeOperationalEnvelopeAuditIndex.php
migrations/Version20260508113000.php
migrations/Version20260508120000_AddCompanyMembersSsmaAprofundamentoClinicasIfMissing.php
migrations/Version20260508124500_AddEsocialDadosTrabalhadorCnhColumnsIfMissing.php
migrations/Version20260508141500.php
migrations/Version20260509100000_AiCommitteeSessionReportVersion.php
migrations/Version20260509150000_AiCommitteeBrainstormPublishAudit.php
migrations/Version20260510103000_AiCommitteeBrainstormOperationLog.php
migrations/Version20260510120000_AddSsmaPermissionTagTablesIfMissing.php
migrations/Version20260511120000_AddCipaAndUnionRepresentativeMandates.php
migrations/Version20260511140000_DisciplinaryCaseAttachment.php
migrations/Version20260511180000_SsmaActionValidation.php
migrations/Version20260511182000.php
migrations/Version20260512140000_AddUserPregnancyRecord.php
migrations/Version20260513103000.php
migrations/Version20260513124500.php
migrations/Version20260513170000.php
migrations/Version20260513195000.php
migrations/Version20260513200510.php
migrations/Version20260513300520.php
migrations/Version20260515113000.php
migrations/Version20260515172000.php
migrations/Version20260518151423.php
migrations/Version20260518160000.php
migrations/Version20260518170000.php
migrations/Version20260518183900.php
migrations/Version20260519120000_EsocialPayrollRubricaCatalog.php
migrations/Version20260519120000_MetaHumanCommitteeHubPermissionProducts.php
migrations/Version20260519124600.php
migrations/Version20260519155647.php
migrations/Version20260519173602.php
migrations/Version20260519180000_PermanenceRestructuringApproval.php
migrations/Version20260519203024.php
migrations/Version20260519211500.php
migrations/Version20260520233000_RiskIndicatorManagerContext.php
migrations/Version20260522104500.php

{"search_text": "permission_tag", "file_patterns": ["migrations/"]}

File: migrations/Version20260508141500.php
Match lines: 11
154|        $this->renameColumnIfNeeded('permission_tag_by_member', 'memberTagID', 'member_tag_id', 'INT NOT NULL AUTO_INCREMENT');
155|        $this->renameColumnIfNeeded('permission_tag_by_member', 'companyMemberID', 'company_member_id', 'INT NOT NULL');
156|        $this->renameColumnIfNeeded('permission_tag_by_member', 'productID', 'product_id', 'INT NOT NULL');
157|        $this->renameColumnIfNeeded('permission_tag_by_member', 'tagID', 'tag_id', 'INT NOT NULL');
162|        $this->renameColumnIfNeeded('permission_tag', 'colorID', 'color_id', 'INT NOT NULL');
163|        $this->renameColumnIfNeeded('permission_tag', 'letterColor', 'letter_color', 'VARCHAR(7) DEFAULT NULL');
164|        $this->renameColumnIfNeeded('permission_tag', 'teamLimitation', 'team_limitation', 'TINYINT(1) NOT NULL');
165|        $this->renameColumnIfNeeded('permission_tag', 'canView', 'can_view', 'TINYINT(1) NOT NULL');
166|        $this->renameColumnIfNeeded('permission_tag', 'canCreate', 'can_create', 'TINYINT(1) NOT NULL');
167|        $this->renameColumnIfNeeded('permission_tag', 'canEdit', 'can_edit', 'TINYINT(1) NOT NULL');
168|        $this->renameColumnIfNeeded('permission_tag', 'canDelete', 'can_delete', 'TINYINT(1) NOT NULL');

File: migrations/Version20260510120000_AddSsmaPermissionTagTablesIfMissing.php
Match lines: 9
17|        return 'Create ssma_permission_tag and ssma_permission_tag_member if missing (fixes TableNotFoundException on SSMA screens).';
26|        if (!$this->tableExists('ssma_permission_tag')) {
27|            $this->addSql('CREATE TABLE ssma_permission_tag ( id INT AUTO_INCREMENT NOT NULL, company_id INT NOT NULL, name VARCHAR(255) NOT NULL, occurrence_type_key VARCHAR(100) DEFAULT NULL, created_at DATETIME NOT NULL, PRIMARY KEY (id), INDEX IDX_SPT_COMPANY (company_id), CONSTRAINT FK_spt_company FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
30|        if (!$this->tableExists('ssma_permission_tag_member')) {
31|            $this->addSql('CREATE TABLE ssma_permission_tag_member ( id INT AUTO_INCREMENT NOT NULL, tag_id INT NOT NULL, company_member_id INT NOT NULL, clinica VARCHAR(255) DEFAULT NULL, PRIMARY KEY (id), UNIQUE INDEX uniq_sptm_tag_member (tag_id, company_member_id), INDEX IDX_SPTM_TAG (tag_id), INDEX IDX_SPTM_MEMBER (company_member_id), CONSTRAINT FK_sptm_tag FOREIGN KEY (tag_id) REFERENCES ssma_permission_tag (id) ON DELETE CASCADE, CONSTRAINT FK_sptm_member FOREIGN KEY (company_member_id) REFERENCES company_members (id) ON DELETE CASCADE ) DEFAULT CHARACTER SET utf8mb4 COLLATE `utf8mb4_unicode_ci` ENGINE = InnoDB');
37|        if ($this->tableExists('ssma_permission_tag_member')) {
38|            $this->addSql('DROP TABLE ssma_permission_tag_member');
40|        if ($this->tableExists('ssma_permission_tag')) {
41|            $this->addSql('DROP TABLE ssma_permission_tag');

File: migrations/Version20260519124600.php
Match lines: 5
181|        if (!$this->tableExists('permission_tag_suggestions') || !$this->tableExists('permission_tag')) {
186|            INSERT INTO permission_tag_suggestions (permission_tag_id, suggestion_id, created_at)
188|            FROM permission_tag pt
196|            LEFT JOIN permission_tag_suggestions pts
197|                ON pts.permission_tag_id = pt.id

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 18
14|        return 'Adiciona area_limitation em permission_tag e cria as tags Supervisor de Área e Gestor de Área.';
20|        if (!$schemaManager->tablesExist(['permission_tag'])) {
24|        $table = $schemaManager->introspectTable('permission_tag');
26|            $this->addSql('ALTER TABLE permission_tag ADD area_limitation TINYINT(1) NOT NULL DEFAULT 0');
29|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
31|            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Supervisor de Área')");
33|        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
35|            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Gestor de Área')");
41|        if (!$schemaManager->tablesExist(['permission_tag'])) {
45|        if ($schemaManager->tablesExist(['permission_tag_suggestions'])) {
46|            $this->addSql("DELETE FROM permission_tag_suggestions WHERE permission_tag_id IN (
47|                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
51|        if ($schemaManager->tablesExist(['permission_tag_by_member'])) {
52|            $this->addSql("DELETE FROM permission_tag_by_member WHERE tag_id IN (
53|                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
57|        $this->addSql("DELETE FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')");
59|        $table = $schemaManager->introspectTable('permission_tag');
61|            $this->addSql('ALTER TABLE permission_tag DROP area_limitation');

{"query_name": "2026-08-19-permission-tag-area-limitation"}

docs/database-changes/2026-08-19-permission-tag-area-limitation.md

{"query_name": "ColorsTagsPermissions"}

src/Controller/ColorsTagsPermissionsController.php
src/Entity/ColorsTagsPermissions.php
src/Repository/ColorsTagsPermissionsRepository.php

{"search_text": "CREATE TABLE permission_tag", "file_patterns": ["migrations/"]}

No matches found

{"file_patterns": ["migrations/"], "search_text": "color_id.*REFERENCES|REFERENCES.*color", "use_perl_regexp": true}

No matches found

{"file_path": "src/Entity/ColorsTagsPermissions.php"}

File: src/Entity/ColorsTagsPermissions.php (Total lines: 64)
IS_TRUNCATED: false
LINE_RANGE: 1-64
1|<?php
2|
3|namespace App\Entity;
4|
5|use Doctrine\ORM\Mapping as ORM;
6|
7|/**
8| * @ORM\Entity(repositoryClass="App\Repository\ColorsTagsPermissionsRepository")
9| */
10|class ColorsTagsPermissions
11|{
12|    /**
13|     * @ORM\Id
14|     * @ORM\Column(name="color_id", type="integer")
15|     */
16|    private $colorID;
17|
18|    /**
19|     * @ORM\Column(type="string", length=20)
20|     */
21|    private $color;
22|
23|    /**
24|     * @ORM\Column(name="letter_color", type="string", length=20)
25|     */
26|    private $letterColor;
27|
28|    public function getColorID(): ?int
29|    {
30|        return $this->colorID;
31|    }
32|
33|    public function setColorID(int $colorID): self
34|    {
35|        $this->colorID = $colorID;
36|
37|        return $this;
38|    }
39|
40|    public function getColor(): ?string
41|    {
42|        return $this->color;
43|    }
44|
45|    public function setColor(string $color): self
46|    {
47|        $this->color = $color;
48|
49|        return $this;
50|    }
51|
52|    public function getLetterColor(): ?string
53|    {
54|        return $this->letterColor;
55|    }
56|
57|    public function setLetterColor(string $letterColor): self
58|    {
59|        $this->letterColor = $letterColor;
60|
61|        return $this;
62|    }
63|}
64|

{"search_text": "colors_tags_permissions"}

File: migration_archive_20260508/Version20241206195150.php
Match lines: 8
15|        return 'Create colors_tags_permissions table with colorID as the primary key, color and letterColor fields (both with 20 characters), and insert default color values';
21|        $this->addSql('CREATE TABLE colors_tags_permissions (colorID INT NOT NULL, color VARCHAR(20) NOT NULL, letterColor VARCHAR(20) NOT NULL, PRIMARY KEY(colorID))');
24|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (1, '#a2e1e4', '#2f7c80')");
25|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (2, '#c1a2e4', '#6a4199')");
26|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (3, '#edd9ff', '#736282')");
27|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (4, '#a2e4ac', '#468a50')");
28|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES (5, '#f07474', '#9b3a3a')");
34|        $this->addSql('DROP TABLE colors_tags_permissions');

File: migration_archive_20260508/Version20250114222511.php
Match lines: 4
17|        return 'Create initial tables and seed data for products, colors_tags_permissions, permission_tag, and permission_tag_by_member';
30|        $this->addSql("CREATE TABLE colors_tags_permissions (
84|        $this->addSql("INSERT INTO colors_tags_permissions (colorID, color, letterColor) VALUES 
118|        $this->addSql("DROP TABLE IF EXISTS colors_tags_permissions;");

File: migration_archive_20260508/Version20260311120000_UnifyFinancialHubMigrations.php
Match lines: 2
156|        $this->renameColumnIfNeeded('colors_tags_permissions', 'colorID', 'color_id', 'INT NOT NULL');
157|        $this->renameColumnIfNeeded('colors_tags_permissions', 'letterColor', 'letter_color', 'VARCHAR(20) NOT NULL');

File: migrations/Version20260508141500.php
Match lines: 2
159|        $this->renameColumnIfNeeded('colors_tags_permissions', 'colorID', 'color_id', 'INT NOT NULL');
160|        $this->renameColumnIfNeeded('colors_tags_permissions', 'letterColor', 'letter_color', 'VARCHAR(20) NOT NULL');

{"search_text": "'teamLimitation' =>"}

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1303|                    'teamLimitation' => $tag->getTeamLimitation()

File: src/Controller/CompanyController.php
Match lines: 6
3469|                'teamLimitation' => true,
3488|                'teamLimitation' => false,
3500|                'teamLimitation' => true,
3548|            'teamLimitation' => $teamLimitation,
6102|                        'teamLimitation' => $permissionTag->getTeamLimitation(),
6128|                        'teamLimitation' => $globalPermissionTag->getTeamLimitation(),

File: src/Controller/CostCentersController.php
Match lines: 1
382|            'teamLimitation' => $teamLimitation,

File: src/Controller/DecisionSystem/FlowTemplateController.php
Match lines: 1
5379|                        'teamLimitation' => $permissionTag->getTeamLimitation(),

File: src/Controller/OrganogramaController.php
Match lines: 2
511|            'teamLimitation' => $permissionTagUser->getTeamLimitation(),
2678|            'teamLimitation' => $permissionTagUser->getTeamLimitation(),

File: src/Controller/PayablesFinancePermissionContextTrait.php
Match lines: 1
357|            'teamLimitation' => $teamLimitation,

File: src/Controller/SuppliersController.php
Match lines: 1
1305|            'teamLimitation' => $teamLimitation,

File: src/EventSubscriber/ProcessSubscriber.php
Match lines: 3
217|                'teamLimitation' => true,
244|                'teamLimitation' => true,
253|            'teamLimitation' => $permissionTag->getTeamLimitation() ?? true,

File: src/Service/FieldExtractorService.php
Match lines: 2
204|            'teamLimitation' => $permissionTagUser->getTeamLimitation(),
227|                'teamLimitation' => $permissionTag->getTeamLimitation(),

File: src/Service/MemberService.php
Match lines: 2
409|                        'teamLimitation' => $permissionTag->getTeamLimitation(),
435|                        'teamLimitation' => $globalPermissionTag->getTeamLimitation(),

File: src/Service/PeopleAnalytics/PeopleAnalyticsPermissionService.php
Match lines: 4
47|     *     'teamLimitation' => bool,
118|            'teamLimitation' => $permissionTag ? (bool) $permissionTag->getTeamLimitation() : false,
520|            'teamLimitation' => false,
543|            'teamLimitation' => false,

File: src/Service/PermissionTabService.php
Match lines: 1
321|                'teamLimitation' => $tag->getTeamLimitation(),

File: tests/Controller/CostCentersControllerPermissionTest.php
Match lines: 13
73|            'teamLimitation' => false,
396|            'teamLimitation' => false,
448|            'teamLimitation' => false,
501|            'teamLimitation' => true,
550|            'teamLimitation' => true,
603|            'teamLimitation' => true,
654|            'teamLimitation' => true,
708|            'teamLimitation' => true,
762|            'teamLimitation' => false,
816|            'teamLimitation' => true,
870|            'teamLimitation' => true,
920|            'teamLimitation' => false,
973|            'teamLimitation' => false,

{"file_path": "src/Service/PermissionTabService.php", "start_line": 250, "end_line": 360}

File: src/Service/PermissionTabService.php (Total lines: 555)
IS_TRUNCATED: false
LINE_RANGE: 250-360
250|     * para o offcanvas "Editar Tags" listar o módulo mesmo sem linha em permission_tag_by_member.
251|     */
252|    private function appendVirtualContextProductPermissionRow(?Product $product, array $customPermissionsTags, array $resolvedPermissionTag): array
253|    {
254|        if (!$product instanceof Product) {
255|            return $customPermissionsTags;
256|        }
257|
258|        $slug = (string) $product->getSlug();
259|        if ($slug !== $this->ssmaParentProductSlug && !isset(self::SSMA_PERMISSION_PRODUCTS[$slug])) {
260|            return $customPermissionsTags;
261|        }
262|
263|        foreach ($customPermissionsTags as $row) {
264|            if ((int) ($row['productId'] ?? 0) === (int) $product->getId()) {
265|                return $customPermissionsTags;
266|            }
267|        }
268|
269|        $customPermissionsTags[] = [
270|            'productId' => $product->getId(),
271|            'productName' => $this->getDisplayProductName($product),
272|            'productSlug' => $slug,
273|            'productActive' => $product->isActive(),
274|            'tagId' => $resolvedPermissionTag['id'],
275|            'tagName' => $resolvedPermissionTag['name'],
276|            'tagColor' => $resolvedPermissionTag['color'],
277|            'letterColor' => $resolvedPermissionTag['letterColor'],
278|        ];
279|
280|        return $customPermissionsTags;
281|    }
282|
283|    /**
284|     * Formata uma PermissionTag para array
285|     */
286|    private function formatPermissionTag(?PermissionTag $tag): array
287|    {
288|        if (!$tag) {
289|            return [
290|                'id' => null,
291|                'name' => 'Sem permissão global',
292|                'color' => '#6c757d',
293|                'letterColor' => '#ffffff'
294|            ];
295|        }
296|
297|        return [
298|            'id' => $tag->getId(),
299|            'name' => $tag->getName(),
300|            'color' => $tag->getColor(),
301|            'letterColor' => $tag->getLetterColor()
302|        ];
303|    }
304|
305|    /**
306|     * Busca todas as tags de permissão
307|     */
308|    public function getPermissionTags(): array
309|    {
310|        $tags = $this->entityManager->getRepository(PermissionTag::class)->findAll();
311|        
312|        // Converter entidades Doctrine para arrays para evitar problemas de serialização
313|        $tagsArray = [];
314|        foreach ($tags as $tag) {
315|            $tagsArray[] = [
316|                'id' => $tag->getId(),
317|                'name' => $tag->getName(),
318|                'description' => $tag->getDescription(),
319|                'color' => $tag->getColor(),
320|                'letterColor' => $tag->getLetterColor(),
321|                'teamLimitation' => $tag->getTeamLimitation(),
322|                'areaLimitation' => $tag->getAreaLimitation(),
323|                'canView' => $tag->getCanView(),
324|                'canCreate' => $tag->getCanCreate(),
325|                'canEdit' => $tag->getCanEdit(),
326|                'canDelete' => $tag->getCanDelete()
327|            ];
328|        }
329|        
330|        return $tagsArray;
331|    }
332|
333|    /**
334|     * Busca todas as equipes da empresa
335|     */
336|    public function getCompanyTeams(Company $company): array
337|    {
338|        return $this->entityManager->getConnection()->fetchAllAssociative(
339|            'SELECT id, name FROM company_team WHERE company_id = :companyId ORDER BY name ASC',
340|            ['companyId' => $company->getId()]
341|        );
342|    }
343|
344|    private function getCompanyTeamName(int $teamId): ?string
345|    {
346|        if ($teamId <= 0) {
347|            return null;
348|        }
349|
350|        $teamName = $this->entityManager->getConnection()->fetchOne(
351|            'SELECT name FROM company_team WHERE id = :teamId',
352|            ['teamId' => $teamId]
353|        );
354|
355|        return is_string($teamName) && trim($teamName) !== '' ? trim($teamName) : null;
356|    }
357|
358|    /**
359|     * Busca roles únicos dos membros da empresa
360|     */

{"search_text": "permissions_tags/edit.html.twig"}

File: docs/qa/communication_center/QA_arquivos_communication_center.txt
Match lines: 1
127|M	templates/permissions_tags/edit.html.twig

File: docs/qa/communication_center/QA_impacto_communication_center.txt
Match lines: 1
127| templates/permissions_tags/edit.html.twig          |    26 +-

File: src/Controller/PermissionsTagsController.php
Match lines: 1
165|        return $this->render('permissions_tags/edit.html.twig', [

{"search_text": "getPermissionTags("}

File: java/src/main/java/com/metahuman/controller/company/CompanyController.java
Match lines: 2
836|    public ResponseEntity<Map<String, Object>> getPermissionTags() {
840|            List<PermissionTagDTO> tags = companyService.getPermissionTags();

File: java/src/main/java/com/metahuman/dto/organograma/OrganogramaIndexResponseDTO.java
Match lines: 1
92|    public List<PermissionTagDTO> getPermissionTags() { return permissionTags; }

File: java/src/main/java/com/metahuman/services/company/CompanyService.java
Match lines: 1
955|    public List<PermissionTagDTO> getPermissionTags() {

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1289|    public function getPermissionTags(): JsonResponse

File: src/Controller/CompanyController.php
Match lines: 1
5950|        if (!$member->getPermissionTags()->contains($tag)) {

File: src/Service/PermissionTabService.php
Match lines: 2
41|            'permissionTags' => $this->getPermissionTags(),
308|    public function getPermissionTags(): array

{"file_patterns": ["migrations/Version00000000000001.php"], "search_text": "colors_tags_permissions"}

No matches found

{"file_patterns": ["migrations/"], "search_text": "INSERT INTO colors_tags_permissions|INSERT INTO colors_tags", "use_perl_regexp": true}

No matches found

{"file_path": "migrations/Version00000000000001.php"}

File: migrations/Version00000000000001.php (Total lines: 32)
IS_TRUNCATED: false
LINE_RANGE: 1-32
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace DoctrineMigrations;
6|
7|use Doctrine\DBAL\Schema\Schema;
8|use Doctrine\Migrations\AbstractMigration;
9|
10|/**
11| * Auto-generated Migration: Please modify to your needs!
12| */
13|final class Version00000000000001 extends AbstractMigration
14|{
15|    public function getDescription(): string
16|    {
17|        return '';
18|    }
19|
20|    public function up(Schema $schema): void
21|    {
22|        $this->addSql("DELETE FROM doctrine_migration_versions");
23|    }
24|
25|
26|    public function down(Schema $schema): void
27|    {
28|        // this down() migration is auto-generated, please modify it to your needs
29|
30|    }
31|}
32|

{"search_text": "\"php\"", "file_patterns": ["composer.json"]}

File: composer.json
Match lines: 2
7|    "php": ">=8.0",
111|      "php": "8.0.3"

{"path_array": ["src/Entity/PermissionTag.php", "src/Service/PermissionTabService.php", "migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php"]}

==== FILE: src/Entity/PermissionTag.php ====
diff --git a/src/Entity/PermissionTag.php b/src/Entity/PermissionTag.php
--- a/src/Entity/PermissionTag.php
+++ b/src/Entity/PermissionTag.php
@@ -34,6 +34,11 @@ class PermissionTag
      */
     private $teamLimitation;
 
+    /**
+     * @ORM\Column(name="area_limitation", type="boolean", nullable=false, options={"default": false})
+     */
+    private $areaLimitation = false;
+
     /**
      * @ORM\Column(name="color_id", type="integer", nullable=false)
      */
@@ -122,6 +127,18 @@ class PermissionTag
         return $this;
     }
 
+    public function getAreaLimitation(): ?bool
+    {
+        return $this->areaLimitation;
+    }
+
+    public function setAreaLimitation(bool $areaLimitation): self
+    {
+        $this->areaLimitation = $areaLimitation;
+
+        return $this;
+    }
+
     public function setColor(string $color): void
     {
         $this->color = $color;
==== FILE: src/Service/PermissionTabService.php ====
diff --git a/src/Service/PermissionTabService.php b/src/Service/PermissionTabService.php
--- a/src/Service/PermissionTabService.php
+++ b/src/Service/PermissionTabService.php
@@ -319,6 +319,7 @@ class PermissionTabService
                 'color' => $tag->getColor(),
                 'letterColor' => $tag->getLetterColor(),
                 'teamLimitation' => $tag->getTeamLimitation(),
+                'areaLimitation' => $tag->getAreaLimitation(),
                 'canView' => $tag->getCanView(),
                 'canCreate' => $tag->getCanCreate(),
                 'canEdit' => $tag->getCanEdit(),
==== FILE: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php ====
diff --git a/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php b/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
new file mode 100644
--- /dev/null
+++ b/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
@@ -0,0 +1,64 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260819160000_AddAreaLimitationToPermissionTag extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Adiciona area_limitation em permission_tag e cria as tags Supervisor de Área e Gestor de Área.';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['permission_tag'])) {
+            return;
+        }
+
+        $table = $schemaManager->introspectTable('permission_tag');
+        if (!$table->hasColumn('area_limitation')) {
+            $this->addSql('ALTER TABLE permission_tag ADD area_limitation TINYINT(1) NOT NULL DEFAULT 0');
+        }
+
+        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
+            SELECT 'Supervisor de Área', 'Visualizacao apenas da sua area', 1, 0, 0, 0, 0, 1, 3, '#edd9ff', '#736282'
+            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Supervisor de Área')");
+
+        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
+            SELECT 'Gestor de Área', 'Acesso completo limitado a sua area', 1, 1, 1, 1, 0, 1, 4, '#a2e4ac', '#468a50'
+            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Gestor de Área')");
+    }
+
+    public function down(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['permission_tag'])) {
+            return;
+        }
+
+        if ($schemaManager->tablesExist(['permission_tag_suggestions'])) {
+            $this->addSql("DELETE FROM permission_tag_suggestions WHERE permission_tag_id IN (
+                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
+            )");
+        }
+
+        if ($schemaManager->tablesExist(['permission_tag_by_member'])) {
+            $this->addSql("DELETE FROM permission_tag_by_member WHERE tag_id IN (
+                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
+            )");
+        }
+
+        $this->addSql("DELETE FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')");
+
+        $table = $schemaManager->introspectTable('permission_tag');
+        if ($table->hasColumn('area_limitation')) {
+            $this->addSql('ALTER TABLE permission_tag DROP area_limitation');
+        }
+    }
+}

{"file_path": "docs/database-changes/2026-08-19-permission-tag-area-limitation.md"}

File: docs/database-changes/2026-08-19-permission-tag-area-limitation.md (Total lines: 94)
IS_TRUNCATED: false
LINE_RANGE: 1-94
1|# Mudanca De Banco - Limitacao Por Area Em Permission Tag
2|
3|## Objetivo
4|
5|Adicionar o flag `area_limitation` em `permission_tag` e criar as tags globais **Supervisor de Área** e **Gestor de Área**, no mesmo modelo das tags de equipe (`team_limitation`).
6|
7|## Por que foi criado
8|
9|- Tags existentes cobrem limitacao por equipe, nao por area organizacional.
10|- Supervisor de Área precisa visualizar apenas o recorte da area (`can_view` + `area_limitation`).
11|- Gestor de Área precisa do mesmo recorte com acoes de escrita (`can_view`, `can_create`, `can_edit`, `can_delete` + `area_limitation`).
12|
13|## Quem consome
14|
15|| Consumidor | Uso |
16||---|---|
17|| `PermissionTag` | Persistencia do flag `areaLimitation` |
18|| `PermissionTagByMember` | Vinculo membro/produto/tag (sem mudanca de schema) |
19|| Telas e servicos de permissao | Passam a poder filtrar por area quando a tag estiver atribuida |
20|
21|## Escopo
22|
23|### Coluna em tabela existente `permission_tag`
24|
25|| Coluna | Tipo | Default | Motivo |
26||---|---|---|---|
27|| `area_limitation` | `TINYINT(1) NOT NULL` | `0` | Recorte de visibilidade/acao pela area do membro |
28|
29|Dados existentes: tags ja cadastradas ficam com `area_limitation = 0`. Sem backfill adicional.
30|
31|### Seed de tags
32|
33|| Nome | can_view | can_create | can_edit | can_delete | team_limitation | area_limitation |
34||---|---|---|---|---|---|---|
35|| Supervisor de Área | 1 | 0 | 0 | 0 | 0 | 1 |
36|| Gestor de Área | 1 | 1 | 1 | 1 | 0 | 1 |
37|
38|Inserts sao idempotentes (`WHERE NOT EXISTS` pelo `name`).
39|
40|## Migration Ou Script
41|
42|```text
43|Arquivo: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
44|Tipo: migration Doctrine (up/down), idempotente via schema manager + NOT EXISTS
45|Ambiente alvo: todos os ambientes
46|```
47|
48|## Plano De Execucao
49|
50|1. Antes: `doctrine:migrations:status`; confirmar `Version20260819160000` ainda `New` se aplicavel.
51|2. Durante: `php bin/console doctrine:migrations:migrate --no-interaction`.
52|3. Depois: conferir coluna e as duas tags; atribuir a um membro de teste e validar o recorte por area.
53|
54|## Validacao
55|
56|Antes:
57|
58|```sql
59|SHOW COLUMNS FROM permission_tag LIKE 'area_limitation';
60|SELECT id, name FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área');
61|```
62|
63|Depois (esperado: coluna presente com default 0; duas tags com `area_limitation = 1`):
64|
65|```sql
66|SHOW COLUMNS FROM permission_tag LIKE 'area_limitation';
67|
68|SELECT name, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation
69|FROM permission_tag
70|WHERE name IN ('Supervisor de Área', 'Gestor de Área');
71|```
72|
73|Como testar funcionalmente:
74|
75|1. Abrir cadastro de tags de permissao e confirmar as duas novas tags.
76|2. Atribuir Supervisor de Área a um membro e conferir visao restrita a area.
77|3. Atribuir Gestor de Área e conferir visao + criar/editar/excluir no mesmo recorte.
78|
79|## Rollback Ou Mitigacao
80|
81|O `down` remove vinculos em `permission_tag_suggestions` e `permission_tag_by_member` das duas tags, apaga as tags e dropa `area_limitation`.
82|
83|Se o codigo novo ja estiver deployado, reverter so o schema quebra a leitura de `PermissionTag::$areaLimitation`. Preferir migration corretiva nova em vez de editar `Version20260819160000`.
84|
85|## Riscos
86|
87|- `ALTER TABLE` em `permission_tag` e tabela pequena; lock irrelevante.
88|- Nomes das tags precisam permanecer literais (`Supervisor de Área`, `Gestor de Área`) para o `down` e para buscas por `findOneBy(['name' => ...])`.
89|- Drop no `down` e destrutivo para vinculos dessas tags.
90|
91|## Responsavel
92|
93|Time de produto / permissoes.
94|

{"search_text": "permissionstags/edit"}

File: config/routes.yaml
Match lines: 1
5654|  path: /manager/permissionstags/edit/{id}

File: templates/permissions_tags/edit.html.twig
Match lines: 1
246|                fetch(`/manager/permissionstags/edit/${tagId}`, {

{"search_text": "setTeamLimitation("}

File: java/src/main/java/com/metahuman/dto/company/PermissionTagDTO.java
Match lines: 1
81|    public void setTeamLimitation(Boolean teamLimitation) {

File: java/src/main/java/com/metahuman/dto/organograma/PermissionTagDTO.java
Match lines: 1
44|    public void setTeamLimitation(Boolean teamLimitation) { this.teamLimitation = teamLimitation; }

File: src/Controller/PermissionsTagsController.php
Match lines: 2
79|            $permissionTag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
133|                $tag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));

File: src/Entity/PermissionTag.php
Match lines: 1
123|    public function setTeamLimitation(bool $teamLimitation): self

File: tests/Controller/Finance/PayrollFinanceControllerWebTest.php
Match lines: 1
433|        $tag->setTeamLimitation(false);

File: tests/Controller/SuppliersControllerPermissionMatrixTest.php
Match lines: 1
454|        $permissionTag->setTeamLimitation(false);

File: tests/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolverTest.php
Match lines: 1
535|            ->setTeamLimitation($teamLimited)

File: tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
Match lines: 1
90|            ->setTeamLimitation(false);

File: tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
Match lines: 1
107|            ->setTeamLimitation(false);

{"file_path": "src/Entity/TagProductPermissions.php"}

File: src/Entity/TagProductPermissions.php (Total lines: 77)
IS_TRUNCATED: false
LINE_RANGE: 1-77
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\TagProductPermissionsRepository;
6|use Doctrine\ORM\Mapping as ORM;
7|
8|/**
9| * @ORM\Entity(repositoryClass=TagProductPermissionsRepository::class)
10| */
11|class TagProductPermissions
12|{
13|    /**
14|     * @ORM\Id
15|     * @ORM\GeneratedValue
16|     * @ORM\Column(type="integer")
17|     */
18|    private $id;
19|
20|    /**
21|     * @ORM\Column(type="string", length=255)
22|     */
23|    private $permission;
24|
25|    /**
26|     * @ORM\ManyToOne(targetEntity=PermissionTag::class, )
27|     * @ORM\JoinColumn(nullable=false)
28|     */
29|    private $permissionTag;
30|
31|    /**
32|     * @ORM\ManyToOne(targetEntity=Product::class)
33|     * @ORM\JoinColumn(name="product_id", referencedColumnName="id", nullable=false)
34|     */
35|    private $productID;
36|
37|    public function getId(): ?int
38|    {
39|        return $this->id;
40|    }
41|
42|    public function getPermission(): ?string
43|    {
44|        return $this->permission;
45|    }
46|
47|    public function setPermission(string $permission): self
48|    {
49|        $this->permission = $permission;
50|
51|        return $this;
52|    }
53|
54|    public function getPermissionTag(): ?PermissionTag
55|    {
56|        return $this->permissionTag;
57|    }
58|
59|    public function setPermissionTag(?PermissionTag $permissionTag): self
60|    {
61|        $this->permissionTag = $permissionTag;
62|
63|        return $this;
64|    }
65|
66|    public function getProductID(): ?Product
67|    {
68|        return $this->productID;
69|    }
70|
71|    public function setProductID(?Product $productID): self
72|    {
73|        $this->productID = $productID;
74|
75|        return $this;
76|    }
77|}

{"search_text": "permission_tag_id", "file_patterns": ["migrations/"]}

File: migrations/Version20260519124600.php
Match lines: 2
186|            INSERT INTO permission_tag_suggestions (permission_tag_id, suggestion_id, created_at)
197|                ON pts.permission_tag_id = pt.id

File: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
Match lines: 1
46|            $this->addSql("DELETE FROM permission_tag_suggestions WHERE permission_tag_id IN (

{"file_patterns": ["migrations/", "migration_archive_20260508/"], "search_text": "tag_product_permissions"}

File: migration_archive_20260508/Version20241113203308.php
Match lines: 4
31|        // Criação da tabela tag_product_permissions
32|        $this->addSql('CREATE TABLE tag_product_permissions (
45|        // Remoção da tabela tag_product_permissions
46|        $this->addSql('DROP TABLE tag_product_permissions');

File: migration_archive_20260508/Version20241118195948.php
Match lines: 4
17|        return 'Cria as tabelas permission_tag e tag_product_permissions do zero, sem a foreign key para user_id na tabela tag_product_permissions.';
34|        // Criação da tabela tag_product_permissions
36|            CREATE TABLE tag_product_permissions (
50|        $this->addSql("DROP TABLE IF EXISTS tag_product_permissions;");

File: migration_archive_20260508/Version20241211200119.php
Match lines: 9
17|        return 'Remove a coluna product e adiciona a coluna product_id com a relação com a tabela products na tabela tag_product_permissions.';
23|        $this->addSql('ALTER TABLE tag_product_permissions DROP COLUMN product');
26|        $this->addSql('ALTER TABLE tag_product_permissions ADD product_id INT NOT NULL');
30|            ALTER TABLE tag_product_permissions 
33|        $this->addSql('CREATE INDEX IDX_PRODUCT_ID ON tag_product_permissions (product_id)');
41|        $this->addSql('ALTER TABLE tag_product_permissions DROP FOREIGN KEY FK_PRODUCT_ID');
42|        $this->addSql('DROP INDEX IDX_PRODUCT_ID ON tag_product_permissions');
45|        $this->addSql('ALTER TABLE tag_product_permissions DROP COLUMN product_id');
48|        $this->addSql('ALTER TABLE tag_product_permissions ADD product VARCHAR(255) DEFAULT NULL');

{"file_path": "migration_archive_20260508/Version20241118195948.php", "start_line": 30, "end_line": 55}

File: migration_archive_20260508/Version20241118195948.php (Total lines: 53)
IS_TRUNCATED: false
LINE_RANGE: 30-53
30|                PRIMARY KEY(id)
31|            ) 
32|        ");
33|
34|        // Criação da tabela tag_product_permissions
35|        $this->addSql("
36|            CREATE TABLE tag_product_permissions (
37|                id INT AUTO_INCREMENT NOT NULL,
38|                permission_tag_id INT NOT NULL,
39|                permission VARCHAR(255) NOT NULL,
40|                product VARCHAR(255) NOT NULL,
41|                PRIMARY KEY(id),
42|                CONSTRAINT FK_permission_tag_id FOREIGN KEY (permission_tag_id) REFERENCES permission_tag (id) ON DELETE CASCADE
43|            )
44|        ");
45|    }
46|
47|    public function down(Schema $schema): void
48|    {
49|        // Remove as tabelas criadas
50|        $this->addSql("DROP TABLE IF EXISTS tag_product_permissions;");
51|        $this->addSql("DROP TABLE IF EXISTS permission_tag;");
52|    }
53|}

{"file_path": "src/Service/Ssma/SsmaAreaLimitationScope.php"}

File: src/Service/Ssma/SsmaAreaLimitationScope.php (Total lines: 167)
IS_TRUNCATED: false
LINE_RANGE: 1-167
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|/**
8| * Escopo de limitação por área organizacional no SSMA.
9| *
10| * Quem tem area_limitation vê a própria área e todas as subáreas (qualquer profundidade).
11| * Nunca vê a área pai nem irmãs fora da subárvore.
12| */
13|final class SsmaAreaLimitationScope
14|{
15|    public const TAG_SUPERVISOR_AREA = 'Supervisor de Área';
16|    public const TAG_GESTOR_AREA = 'Gestor de Área';
17|
18|    /**
19|     * @return list<string>
20|     */
21|    public static function namedAreaScopeTags(): array
22|    {
23|        return [self::TAG_SUPERVISOR_AREA, self::TAG_GESTOR_AREA];
24|    }
25|
26|    public static function shouldApplyAreaLimitation(
27|        ?string $tagName,
28|        ?bool $areaLimitation,
29|        bool $isPlatformAdmin,
30|    ): bool {
31|        if ($isPlatformAdmin) {
32|            return false;
33|        }
34|
35|        // Supervisor (empresa) e Gestor Administrador operam sem recorte de área.
36|        if (in_array($tagName, ['Gestor Administrador', 'Supervisor'], true)) {
37|            return false;
38|        }
39|
40|        if (in_array($tagName, self::namedAreaScopeTags(), true)) {
41|            return true;
42|        }
43|
44|        return (bool) $areaLimitation;
45|    }
46|
47|    /**
48|     * Inclui as áreas raiz e todos os descendentes. Não sobe para pais.
49|     *
50|     * @param array<int, int|null> $parentByAreaId id da área => id do pai (null se raiz)
51|     * @param list<int> $rootAreaIds
52|     *
53|     * @return list<int>
54|     */
55|    public static function expandWithDescendants(array $parentByAreaId, array $rootAreaIds): array
56|    {
57|        $childrenByParent = [];
58|        foreach ($parentByAreaId as $areaId => $parentId) {
59|            $areaId = (int) $areaId;
60|            if ($areaId <= 0) {
61|                continue;
62|            }
63|            $parentId = $parentId !== null ? (int) $parentId : 0;
64|            if ($parentId > 0) {
65|                $childrenByParent[$parentId][] = $areaId;
66|            }
67|        }
68|
69|        $allowed = [];
70|        $queue = [];
71|        foreach ($rootAreaIds as $rootId) {
72|            $rootId = (int) $rootId;
73|            if ($rootId > 0) {
74|                $queue[] = $rootId;
75|            }
76|        }
77|
78|        while ($queue !== []) {
79|            $id = array_shift($queue);
80|            if (isset($allowed[$id])) {
81|                continue;
82|            }
83|            $allowed[$id] = true;
84|            foreach ($childrenByParent[$id] ?? [] as $childId) {
85|                $queue[] = $childId;
86|            }
87|        }
88|
89|        return array_keys($allowed);
90|    }
91|
92|    /**
93|     * Inspeção entra no recorte de área se a equipe está no recorte.
94|     *
95|     * Quando a equipe tem área conhecida fora do recorte, o registro fica escondido mesmo que
96|     * uma pessoa da área participe — é isso que preserva a interseção com a limitação de equipe.
97|     * O fallback por pessoa vale só quando a equipe não informa área: sem equipe, ou equipe
98|     * listada em `$teamIdsWithoutArea` (sem `process_department`).
99|     *
100|     * @param list<array<string, mixed>> $inspections
101|     * @param list<int> $allowedTeamIds
102|     * @param array<int, true> $allowedMemberIds
103|     * @param list<int> $teamIdsWithoutArea
104|     *
105|     * @return list<array<string, mixed>>
106|     */
107|    public static function filterInspectionsForAreaScope(
108|        array $inspections,
109|        array $allowedTeamIds,
110|        array $allowedMemberIds,
111|        array $teamIdsWithoutArea,
112|    ): array {
113|        $teamIdStr = array_map('strval', $allowedTeamIds);
114|        $withoutAreaStr = array_map('strval', $teamIdsWithoutArea);
115|
116|        return array_values(array_filter(
117|            $inspections,
118|            static function (array $inspection) use ($teamIdStr, $allowedMemberIds, $withoutAreaStr): bool {
119|                $teamId = $inspection['team_id'] ?? null;
120|                $hasTeam = $teamId !== null && $teamId !== '';
121|                if ($hasTeam && in_array((string) $teamId, $teamIdStr, true)) {
122|                    return true;
123|                }
124|                if ($hasTeam && !in_array((string) $teamId, $withoutAreaStr, true)) {
125|                    return false;
126|                }
127|
128|                foreach ([
129|                    (int) ($inspection['created_by_id'] ?? 0),
130|                    (int) ($inspection['safety_responsible_id'] ?? 0),
131|                ] as $memberId) {
132|                    if ($memberId > 0 && isset($allowedMemberIds[$memberId])) {
133|                        return true;
134|                    }
135|                }
136|
137|                foreach ((array) ($inspection['participants_ids'] ?? []) as $participantId) {
138|                    if (isset($allowedMemberIds[(int) $participantId])) {
139|                        return true;
140|                    }
141|                }
142|
143|                return false;
144|            }
145|        ));
146|    }
147|
148|    /**
149|     * @param list<array<string, mixed>> $abordagens
150|     * @param array<int, true> $allowedMemberIds
151|     *
152|     * @return list<array<string, mixed>>
153|     */
154|    public static function filterAbordagensByMemberIds(array $abordagens, array $allowedMemberIds): array
155|    {
156|        return array_values(array_filter(
157|            $abordagens,
158|            static function (array $abordagem) use ($allowedMemberIds): bool {
159|                $observadorId = (int) ($abordagem['observador_id'] ?? 0);
160|
161|                return $observadorId > 0 && isset($allowedMemberIds[$observadorId]);
162|            }
163|        ));
164|    }
165|
166|}
167|

{"file_path": "migration_archive_20260508/Version20241118195948.php", "start_line": 10, "end_line": 33}

File: migration_archive_20260508/Version20241118195948.php (Total lines: 53)
IS_TRUNCATED: false
LINE_RANGE: 10-33
10|/**
11| * Auto-generated Migration: Please modify to your needs!
12| */
13|final class Version20241118195948 extends AbstractMigration
14|{
15|    public function getDescription(): string
16|    {
17|        return 'Cria as tabelas permission_tag e tag_product_permissions do zero, sem a foreign key para user_id na tabela tag_product_permissions.';
18|    }
19|
20|    public function up(Schema $schema): void
21|    {
22|        // Criação da tabela permission_tag
23|        $this->addSql("
24|            CREATE TABLE permission_tag (
25|                id INT AUTO_INCREMENT NOT NULL,
26|                name VARCHAR(255) NOT NULL,
27|                color VARCHAR(25) NOT NULL,
28|                description VARCHAR(255) NOT NULL,
29|                team_limitation BOOLEAN DEFAULT FALSE NOT NULL,
30|                PRIMARY KEY(id)
31|            ) 
32|        ");
33|

{"file_patterns": ["src/Entity/PermissionTag.php", "src/Repository/PermissionTagRepository.php"], "search_text": "company"}

No matches found

{"comments": [{"content": "O bloco de coleta do formulário é idêntico nas duas telas de permissão e esta PR adicionou o novo campo `areaLimitation` em duas cópias do mesmo JavaScript embutido no template (aqui e em edit.html.twig). O risco prático é o próximo ajuste no cadastro de tags precisar ser replicado nos dois arquivos e um deles ficar para trás — exatamente o tipo de divergência que este campo recém-criado pode sofrer no futuro. Como a lógica de tela deveria ficar em `public/js/`, vale extrair a montagem do payload/submit para um módulo JS único (ou partial Twig) reaproveitado pelas duas páginas, em vez de duplicar a linha em cada cópia.", "existing_code": "const areaLimitation = document.getElementById(\"limitacaoArea\").checked;", "category": "maintainability", "severity": "low", "path": "templates/permissions_tags/add.html.twig"}]}

(async)

{"comments": [{"category": "maintainability", "content": "Este controller já concentra validação de payload, persistência e regra de negócio dentro das próprias actions, e a PR reforça esse padrão: o mesmo trecho de montagem/atualização do `PermissionTag` (agora com a normalização de booleanos e o novo flag de área) foi duplicado entre `add()` e `edit()` dentro do controller. Cada campo novo precisa ser replicado nos dois lugares, o que favorece divergência futura. O ideal é extrair um serviço/caso de uso único (ex.: criar/atualizar tag) que valide e monte a entidade, chamado pelas duas rotas e coberto por teste, deixando o controller apenas com orquestração HTTP.", "existing_code": "                $tag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));", "path": "src/Controller/PermissionsTagsController.php", "severity": "low"}]}

(async)

{"state": "DONE"}

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 1, "end_line": 260}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 1-260
1|<?php
2|
3|namespace App\EventListener;
4|
5|use App\Service\PermissionTagByMemberService;
6|use App\Service\Finance\FinanceTenantContextResolver;
7|use App\Service\LiveInterviewAccessService;
8|use App\Entity\User;
9|use App\Entity\Company;
10|use App\Entity\Product;
11|use App\Entity\CompanyMembers;
12|use App\Entity\PermissionTag;
13|use App\Entity\SsmaPermissionTagMember;
14|use App\Service\Ssma\SsmaOccurrenceCreatePermissionService;
15|use App\Service\Ssma\SsmaOccurrenceStakeholderAccessChecker;
16|use App\Service\Ssma\SsmaPreventionMutatePermissionService;
17|use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
18|use App\Entity\StructuralResearchSurvey;
19|use App\Entity\StructuralResearchParticipant;
20|use Symfony\Component\HttpKernel\Event\ControllerEvent;
21|use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
22|use Symfony\Component\Security\Core\Security;
23|use Symfony\Component\HttpFoundation\JsonResponse;
24|use Symfony\Component\HttpFoundation\RedirectResponse;
25|use Symfony\Component\HttpFoundation\Session\SessionInterface;
26|use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
27|use Doctrine\ORM\EntityManagerInterface;
28|use Symfony\Component\EventDispatcher\Attribute\AsEventListener;
29|
30|#[AsEventListener(event: 'kernel.controller', priority: 0)]
31|class GlobalPermissionListener
32|{
33|    private PermissionTagByMemberService $permissionService;
34|    private LiveInterviewAccessService $liveInterviewAccessService;
35|    private Security $security;
36|    private EntityManagerInterface $entityManager;
37|    private SessionInterface $session;
38|    private UrlGeneratorInterface $urlGenerator;
39|    private SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker;
40|    private SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService;
41|    private SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService;
42|    private SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService;
43|    private FinanceTenantContextResolver $financeTenantContextResolver;
44|    private string $ssmaParentProductSlug;
45|
46|    // Mapeamento de rotas para produtos necessários (inicializado no construtor para suportar slug dinâmico)
47|    private array $routeProductMapping = [];
48|
49|    // Mapeamento de templates baseado em rotas
50|    private array $routeTemplateMapping = [
51|        'onboarding_index' => [
52|            'product' => 'onboarding',
53|            'admin' => 'onboarding/index_admin.html.twig',
54|            'user' => 'onboarding/index_user.html.twig'
55|        ],
56|        'offboarding_index' => [
57|            'product' => 'offboarding',
58|            'admin' => 'offboarding/index.html.twig',
59|            'user' => 'offboarding/index_user.html.twig'
60|        ],
61|        'nps_dashboard' => [
62|            'product' => 'nps-com-ia',
63|            'admin' => 'layoutAdmin.html.twig',
64|            'user' => 'layoutUser.html.twig'
65|        ],
66|        'live_interview_management' => [
67|            'product' => 'live_interview',
68|            'admin' => 'layoutAdmin.html.twig',
69|            'user' => 'layoutUser.html.twig'
70|        ],
71|        // Adicione outras rotas conforme necessário
72|    ];
73|
74|    // Mapeamento específico para rotas de pesquisa estrutural
75|    private array $structuralResearchRoutes = [
76|        'structural_research_list',
77|        'structural_research_survey_list',
78|        'structural_research_survey_new',
79|        'structural_research_survey_edit',
80|        'structural_research_survey_save',
81|        'structural_research_survey_delete',
82|        'structural_research_copy',
83|        'structural_research_survey_get_participants',
84|        'structural_research_survey_update_participants',
85|        'structural_research_survey_current_participants',
86|        'structural_research_survey',
87|        'structural_research_view',
88|        'structural_research_survey_edit_manager'
89|    ];
90|
91|
92|    public function __construct(
93|        PermissionTagByMemberService $permissionService,
94|        LiveInterviewAccessService $liveInterviewAccessService,
95|        Security $security,
96|        EntityManagerInterface $entityManager,
97|        SessionInterface $session,
98|        UrlGeneratorInterface $urlGenerator,
99|        SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker,
100|        SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService,
101|        SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService,
102|        SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService,
103|        FinanceTenantContextResolver $financeTenantContextResolver,
104|        string $ssmaParentProductSlug = 'saude-e-seguranca'
105|    ) {
106|        $this->permissionService = $permissionService;
107|        $this->liveInterviewAccessService = $liveInterviewAccessService;
108|        $this->security = $security;
109|        $this->entityManager = $entityManager;
110|        $this->session = $session;
111|        $this->urlGenerator = $urlGenerator;
112|        $this->ssmaOccurrenceStakeholderAccessChecker = $ssmaOccurrenceStakeholderAccessChecker;
113|        $this->ssmaPreventionMutatePermissionService = $ssmaPreventionMutatePermissionService;
114|        $this->ssmaRefusalRightMutatePermissionService = $ssmaRefusalRightMutatePermissionService;
115|        $this->ssmaOccurrenceCreatePermissionService = $ssmaOccurrenceCreatePermissionService;
116|        $this->financeTenantContextResolver = $financeTenantContextResolver;
117|        $this->ssmaParentProductSlug = $ssmaParentProductSlug;
118|        $this->routeProductMapping = [
119|            'ssma_prevencao_' => 'ssma-prevention',
120|            'admin_ssma_prevencao_' => 'ssma-prevention',
121|            'ssma_inspection_' => 'ssma-prevention',
122|            'admin_ssma_inspection_' => 'ssma-prevention',
123|            'ssma_abordagem_' => 'ssma-prevention',
124|            'ssma_plano_acao_' => 'ssma-action-plan',
125|            'ssma_action_' => 'ssma-action-plan',
126|            'admin_ssma_action_' => 'ssma-action-plan',
127|            'governance_authorization_' => 'ssma-authorization',
128|            'governance_cases_' => 'ssma-authorization',
129|            'governance_badge_' => 'ssma-badge',
130|            'ssma_cause_tree_' => 'ssma-cause-tree',
131|            'ssma_ocorrencia_' => 'ssma-occurrences',
132|            'ssma_occurrence_' => 'ssma-occurrences',
133|            'admin_ssma_occurrence_' => 'ssma-occurrences',
134|            'ssma_event_' => 'ssma-occurrences',
135|            'admin_ssma_event_' => 'ssma-occurrences',
136|            'ssma_direito_recusa_' => 'ssma-occurrences',
137|            'ssma_automations_' => 'ssma-occurrences',
138|            'ssma_flow_templates_' => 'ssma-occurrences',
139|            'ssma_horas_trabalhadas_' => 'ssma-occurrences',
140|            'admin_ssma_dashboard_' => 'ssma-occurrences',
141|            'admin_ssma_' => $ssmaParentProductSlug,
142|            'ssma_' => $ssmaParentProductSlug,
143|            'sst_' => 'health-safety-work',
144|            'refunds_index' => 'refunds',
145|            'refunds_edit' => 'refunds',
146|            'refunds_' => 'refunds',
147|            'user_license' => 'licenses-vacation',
148|            'onboarding_index' => 'onboarding',
149|            'offboarding_index' => 'offboarding',
150|            'offboarding_' => 'offboarding',
151|            'nps_dashboard' => 'nps-com-ia',
152|            'spaces_control_' => 'spaces_control',
153|            'admin_processos_all' => 'recruitment-selection',
154|            'admin_evaluation_index' => 'recruitment-selection',
155|            'admin_avaliacao_monitorada' => 'recruitment-selection',
156|            'admin_conjuntos_de_avaliacoes' => 'recruitment-selection',
157|            'recommendation_network_index' => 'recruitment-selection',
158|            // jobs_index (Mural de Oportunidades) fica fora: é área de candidato no My Space,
159|            // não exige tag do produto recruitment-selection (gestão de RH).
160|            'job_interview_index' => 'recruitment-selection',
161|            'live_interview_management' => 'live_interview',
162|        ];
163|    }
164|
165|    // #region agent log
166|    private function debugLog(string $location, string $message, array $data = [], string $hypothesisId = ''): void {
167|        $logPath = 'h:\Meta\humanfactor5\.cursor\debug.log';
168|        $headersSentInfo = false;
169|        if (headers_sent($file, $line)) {
170|            $headersSentInfo = ['file' => $file, 'line' => $line];
171|        }
172|        $logEntry = json_encode([
173|            'timestamp' => (int)(microtime(true) * 1000),
174|            'location' => $location,
175|            'message' => $message,
176|            'data' => $data,
177|            'sessionId' => 'debug-session',
178|            'runId' => 'run1',
179|            'hypothesisId' => $hypothesisId,
180|            'outputBuffering' => ob_get_level(),
181|            'headersSent' => $headersSentInfo,
182|            'outputBufferContents' => ob_get_level() > 0 ? substr(ob_get_contents(), 0, 200) : null
183|        ]) . "\n";
184|        file_put_contents($logPath, $logEntry, FILE_APPEND | LOCK_EX);
185|    }
186|    // #endregion
187|
188|    public function onKernelController(ControllerEvent $event): void
189|    {
190|        // Só executa na request principal
191|        if (!$event->isMainRequest()) {
192|            return;
193|        }
194|        
195|        $request = $event->getRequest();
196|        $route = $request->attributes->get('_route');
197|        
198|        // ✅ Ignorar rotas de API - elas já possuem autenticação própria via access_control
199|        $pathInfo = $request->getPathInfo();
200|        if (str_starts_with($pathInfo, '/api/')) {
201|            return;
202|        }
203|        
204|        // #region agent log
205|        if ($route === 'crm_opportunities' || strpos($request->getPathInfo(), '/crm/opportunities') !== false) {
206|            $controller = $event->getController();
207|            $controllerInfo = 'unknown';
208|            if (is_array($controller)) {
209|                $controllerInfo = get_class($controller[0]) . '::' . $controller[1];
210|            }
211|            $this->debugLog('GlobalPermissionListener.php:onKernelController', 'Before controller execution', [
212|                'route' => $route,
213|                'path' => $request->getPathInfo(),
214|                'controller' => $controllerInfo,
215|                'errorReporting' => error_reporting(),
216|                'displayErrors' => ini_get('display_errors'),
217|                'logErrors' => ini_get('log_errors')
218|            ], 'A');
219|        }
220|        // #endregion
221|
222|        $user = $this->security->getUser();  
223|
224|        // Verifica se o usuário está logado
225|        if (!$user instanceof User) {
226|            return;
227|        }
228|
229|        // Verifica se o usuário é super admin (pode tudo)
230|        $userRoles = $user->getRoles();
231|        if (in_array('ROLE_SUPER_ADMIN', $userRoles) || in_array('ROLE_ADMIN', $userRoles)) {
232|            // Adiciona informação de admin à request
233|            $request->attributes->set('is_admin', true);
234|            
235|            // Define template para admin
236|            $this->setTemplateForRoute($route, $request, true);
237|            return;
238|        }
239|
240|        // Verifica permissões específicas
241|        $redirectResponse = $this->checkUserPermissions($user, $route, $request);
242|        if ($redirectResponse) {
243|            // Para requisições AJAX (fetch/XHR), retorna JSON 403 em vez de redirecionar para HTML.
244|            // Isso evita que o fetch siga o redirect (302→200 HTML) e mostre erro incompreensível.
245|            $acceptHeader = $request->headers->get('Accept', '');
246|            if (
247|                $request->isXmlHttpRequest()
248|                || str_contains($acceptHeader, 'application/json')
249|                || $route === 'structural_research_survey_get_participants'
250|            ) {
251|                $event->setController(static function () {
252|                    return new JsonResponse(['success' => false, 'message' => 'Sem permissão para acessar este recurso.'], 403);
253|                });
254|            } else {
255|                $event->setController(function() use ($redirectResponse) {
256|                    return $redirectResponse;
257|                });
258|            }
259|        }
260|    }

{"search_text": "ssma_action_|admin_ssma_action_", "file_patterns": ["src/"], "use_perl_regexp": true}

File: src/Controller/CommunicationCenterController.php
Match lines: 1
243|            'communication_center/demand_view/partials/_ssma_action_validation_modals_only.html.twig',

File: src/Controller/SsmaController.php
Match lines: 1
28117|    /** Validação de fechamento (rota: config/routes_ssma.yaml — admin_ssma_action_validate). */

File: src/Entity/SsmaActionTypeConfig.php
Match lines: 1
14| *     name="ssma_action_type_config",

File: src/EventListener/GlobalPermissionListener.php
Match lines: 3
125|            'ssma_action_' => 'ssma-action-plan',
126|            'admin_ssma_action_' => 'ssma-action-plan',
1134|        return in_array($route, ['admin_ssma_action_create', 'admin_ssma_action_validate'], true);

File: src/Governance/Grc/GovernanceCaseScenarioCatalog.php
Match lines: 4
207|                && ! (bool) ($row['ssma_action_high_risk'] ?? false)
208|                && ! (bool) ($row['ssma_action_recurrence'] ?? false),
212|                    (bool) ($row['ssma_action_high_risk'] ?? false)
221|                        (bool) ($row['ssma_action_recurrence'] ?? false)

File: src/Service/Governance/Grc/Detector/CorrectiveActionDetector.php
Match lines: 6
131|        $payload['ssma_action_id'] = (int) $action->getId();
132|        $payload['ssma_action_type'] = $action->getType();
133|        $payload['ssma_action_validation_status'] = $action->getValidationStatus();
134|        $payload['ssma_action_origin'] = $action->getOrigem();
135|        $payload['ssma_action_origin_id'] = $action->getOrigemId();
138|        $payload['ssma_action_high_risk'] = $isHighRisk;

File: src/Service/Governance/Grc/GovernanceCaseGrcEnrichmentService.php
Match lines: 1
2324|        $ssmaActionId = (int) ($grcSnapshot['ssma_action_id'] ?? $detail['ssma_action_id'] ?? 0);

File: src/Service/Governance/Grc/GovernanceIntelligentControlWizardService.php
Match lines: 2
160|                    'key' => 'ssma_action_type',
167|                    'key' => 'ssma_action_validation_status',

File: src/Service/Governance/Grc/GrcCaseStateClassifier.php
Match lines: 2
163|                || ($prazoInt !== null && $prazoInt < 0 && (bool) ($detectionRow['ssma_action_recurrence'] ?? false)),
232|                    || (bool) ($detectionRow['ssma_action_high_risk'] ?? false)

File: src/Service/Ssma/SsmaAutomationProvisionService.php
Match lines: 6
104|        $automation->setActionType('ssma_action_notify_responsible');
118|                'type'       => 'ssma_action_notify_responsible',
164|        $automation->setActionType('ssma_action_notify_responsible');
187|                'type'       => 'ssma_action_notify_responsible',
322|        $automation->setActionType('ssma_action_notify_responsible');
336|                'type'       => 'ssma_action_notify_responsible',

File: src/Service/Ssma/SsmaAutomationService.php
Match lines: 37
697|                case 'ssma_action_notify':
701|                case 'ssma_action_notify_refusal_leader':
708|                case 'ssma_action_notify_refusal_collaborator':
719|                case 'ssma_action_notify_responsible':
740|                case 'ssma_action_notify_involved_people':
751|                case 'ssma_action_notify_member':
758|                case 'ssma_action_notify_gestor':
765|                case 'ssma_action_notify_by_team':
769|                case 'ssma_action_notify_technical_investigation':
773|                case 'ssma_action_send_email':
777|                case 'ssma_action_archive_occurrence':
778|                case 'ssma_action_escalate_occurrence':
813|                        '[SSMA] ssma_action_notify: membro específico sem member_id (occ=#%s)',
887|                    '[SSMA] ssma_action_notify ignorado: destinatário não informado (occ=#%s)',
1142|                if (!in_array($type, ['ssma_action_notify_responsible', 'ssma_action_notify', 'ssma_action_notify_member'], true)) {
1291|                if ($this->normalizeActionType((string) ($action['type'] ?? '')) !== 'ssma_action_notify_responsible') {
1317|            if (!in_array($type, ['ssma_action_notify_responsible', 'ssma_action_notify', 'ssma_action_notify_member'], true)) {
1431|                if (!in_array($type, ['ssma_action_notify_responsible', 'ssma_action_notify', 'ssma_action_notify_member'], true)) {
1465|     * Resolve IDs de membros a partir da configuração de ssma_action_notify (sem enviar).
1575|                    if ($type === 'ssma_action_notify_member') {
1580|                    } elseif ($type === 'ssma_action_notify_responsible') {
1613|                    } elseif ($type === 'ssma_action_notify_gestor') {
1618|                    } elseif ($type === 'ssma_action_notify') {
2308|     * Normaliza id YAML legado (ssma_send_email) para type da API (ssma_action_send_email).
2342|            'ssma_notify'                         => 'ssma_action_notify',
2343|            'ssma_send_email'                     => 'ssma_action_send_email',
2344|            'ssma_notify_responsible'             => 'ssma_action_notify_responsible',
2345|            'ssma_notify_technical_investigation' => 'ssma_action_notify_technical_investigation',
2346|            'ssma_notify_involved_people'         => 'ssma_action_notify_involved_people',
2347|            'ssma_notify_member'                  => 'ssma_action_notify_member',
2348|            'ssma_notify_gestor'                  => 'ssma_action_notify_gestor',
2349|            'ssma_notify_by_team'                 => 'ssma_action_notify_by_team',
2350|            'ssma_archive_occurrence'             => 'ssma_action_archive_occurrence',
2351|            'ssma_escalate_occurrence'            => 'ssma_action_escalate_occurrence',
2352|            'ssma_create_feed_draft'              => 'ssma_action_create_feed_draft',
2353|            'ssma_notify_refusal_leader'          => 'ssma_action_notify_refusal_leader',
2354|            'ssma_notify_refusal_collaborator'    => 'ssma_action_notify_refusal_collaborator',

File: src/Service/Ssma/SsmaIndicatorImprovementAutomationRunner.php
Match lines: 2
198|            $type = 'ssma_action_create_feed_draft';
200|        if ($type !== 'ssma_action_create_feed_draft') {

File: src/Service/ai_committee/SpecializedHcmTriggerEvaluator.php
Match lines: 2
16|        'ssma_action_investigacao_aberta' => 90,
107|                    'ssma_action_investigacao_aberta',

{"search_text": "routeProductMapping", "file_patterns": ["src/EventListener/GlobalPermissionListener.php"]}

File: src/EventListener/GlobalPermissionListener.php
Match lines: 3
47|    private array $routeProductMapping = [];
118|        $this->routeProductMapping = [
984|        foreach ($this->routeProductMapping as $routePrefix => $product) {

{"query_name": "routes_ssma"}

config/routes_ssma.yaml

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 940, "end_line": 1060}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 940-1060
940|        
941|        // Método 3: Pegar do POST request (para formulários)
942|        $companyId = $request->request->get('companyId') ?? 
943|                    $request->request->get('company_id') ?? 
944|                    $request->request->get('company') ??
945|                    $request->request->get('companyid');
946|    
947|        
948|        if ($companyId && is_numeric($companyId)) {
949|            return (int) $companyId;
950|        }
951|
952|        // Rotas SSMA: números no path são IDs de recurso (ocorrência, inspeção, árvore de causas, etc.)
953|        if (str_starts_with((string) $pathInfo, '/manager/ssma')) {
954|            return null;
955|        }
956|
957|        // Reembolsos legado: /refunds/edit/{id}, delete, update_status — o número é do pedido, não da empresa.
958|        if (preg_match('#^/refunds/(edit|delete|update_status)(?:/|$)#', (string) $pathInfo)) {
959|            return null;
960|        }
961|
962|        // Hub financeiro: /finance/refunds — sem ID de empresa no path.
963|        if (preg_match('#^/finance/refunds(?:/|$)#', (string) $pathInfo)) {
964|            return null;
965|        }
966|
967|        // Método 4: Extrair o último número da URL (legado; não usar para IDs de recurso em rotas acima)
968|        if (preg_match('/\/(\d+)(?:\/.*)?$/', $pathInfo, $matches)) {
969|            return (int) $matches[1];
970|        }
971|        
972|        // Método 5: Extrair qualquer número da URL que pareça ser um ID de empresa
973|        if (preg_match_all('/\/(\d+)/', $pathInfo, $matches)) {
974|            $numbers = $matches[1];
975|            // Pega o último número encontrado (assumindo que é o company ID)
976|            return (int) end($numbers);
977|        }
978|        
979|        return null;
980|    }
981|
982|    private function getRequiredProductForRoute(string $route): ?string
983|    {
984|        foreach ($this->routeProductMapping as $routePrefix => $product) {
985|            if (str_starts_with($route, $routePrefix)) {
986|                return $product;
987|            }
988|        }
989|
990|        return null;
991|    }
992|    private function resolveProductForPermissionRoute(string $requiredProduct): ?Product
993|    {
994|        $product = $this->entityManager->getRepository(Product::class)
995|            ->findOneBy(['slug' => $requiredProduct]);
996|
997|        if (!$product && in_array($requiredProduct, ['nps-com-ia', 'nps-ia'], true)) {
998|            $npsAliases = ['nps-com-ia', 'nps-ia'];
999|            foreach ($npsAliases as $npsAlias) {
1000|                $product = $this->entityManager->getRepository(Product::class)
1001|                    ->findOneBy(['slug' => $npsAlias]);
1002|                if ($product) {
1003|                    break;
1004|                }
1005|            }
1006|        }
1007|
1008|        $ssmaNoFallback = ['ssma-authorization', 'ssma-badge', 'ssma-cause-tree'];
1009|        if (!$product && str_starts_with($requiredProduct, 'ssma-') && !in_array($requiredProduct, $ssmaNoFallback, true)) {
1010|            $product = $this->entityManager->getRepository(Product::class)
1011|                ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
1012|        }
1013|
1014|        // Fallback para buscar por nome se não encontrar por slug
1015|        if (!$product) {
1016|            $product = $this->entityManager->getRepository(Product::class)
1017|                ->findOneBy(['name' => ucfirst($requiredProduct)]);
1018|        }
1019|
1020|        return $product;
1021|    }
1022|    /**
1023|     * GET JSON de andares/salas/colaboradores — chamado pelo modal Novo Projeto,
1024|     * sem exigir PermissionTag do produto spaces_control.
1025|     */
1026|    private function isSpacesControlSharedReadApiRoute(string $route): bool
1027|    {
1028|        return in_array($route, [
1029|            'spaces_control_floors_api_list',
1030|            'spaces_control_api_floor_spaces',
1031|            'spaces_control_api_floor_collaborators',
1032|        ], true);
1033|    }
1034|
1035|    private function canAccessMappedRouteWithRestrictedView(string $route): bool
1036|    {
1037|        if ($this->isSpacesControlSharedReadApiRoute($route)) {
1038|            return true;
1039|        }
1040|
1041|        $routesAllowed = [
1042|            'user_license',
1043|            'refunds_',
1044|            'offboarding_',
1045|            'nps_dashboard',
1046|            'spaces_control_realtime',
1047|            'spaces_control_book_room',
1048|            'ssma_prevencao_index',
1049|            'admin_ssma_prevencao_panel_filter',
1050|            'admin_ssma_prevencao_metas_filter',
1051|        ];
1052|
1053|        foreach ($routesAllowed as $routePrefix) {
1054|            if (str_starts_with($route, $routePrefix)) {
1055|                return true;
1056|            }
1057|        }
1058|
1059|        return false;
1060|    }

{"file_path": "config/routes_ssma.yaml"}

File: config/routes_ssma.yaml (Total lines: 707)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|admin_ssma_index:
2|  path: /manager/ssma
3|  controller: App\Controller\SsmaController::index
4|  methods: [GET]
5|
6|ssma_ocorrencia_index:
7|  path: /manager/ssma/ocorrencias
8|  controller: App\Controller\SsmaController::ocorrenciaIndex
9|  methods: [GET]
10|
11|ssma_prevencao_index:
12|  path: /manager/ssma/prevencao-ativa
13|  controller: App\Controller\SsmaController::prevencaoIndex
14|  methods: [GET]
15|
16|ssma_plano_acao_index:
17|  path: /manager/ssma/plano-acao
18|  controller: App\Controller\SsmaController::planoAcaoIndex
19|  methods: [GET]
20|
21|ssma_direito_recusa_index:
22|  path: /manager/ssma/direito-de-recusa
23|  controller: App\Controller\SsmaController::direitoRecusaIndex
24|  methods: [GET]
25|
26|ssma_direito_recusa_create:
27|  path: /manager/ssma/direito-de-recusa
28|  controller: App\Controller\SsmaController::createDireitoRecusa
29|  methods: [POST]
30|
31|ssma_direito_recusa_update:
32|  path: /manager/ssma/direito-de-recusa/{id}
33|  controller: App\Controller\SsmaController::updateDireitoRecusa
34|  methods: [POST]
35|  requirements:
36|    id: '\d+'
37|
38|ssma_direito_recusa_config_save:
39|  path: /manager/ssma/direito-de-recusa/config
40|  controller: App\Controller\SsmaController::saveDireitoRecusaConfig
41|  methods: [POST]
42|
43|admin_ssma_occurrence_view:
44|  path: /manager/ssma/occurrence/{id}
45|  controller: App\Controller\SsmaController::viewOccurrence
46|  methods: [GET]
47|
48|ssma_members_search:
49|  path: /manager/ssma/members/search
50|  controller: App\Controller\SsmaController::searchSsmaMembers
51|  methods: [GET]
52|
53|ssma_occurrences_cause_tree_meta:
54|  path: /manager/ssma/occurrences/cause-tree-meta
55|  controller: App\Controller\SsmaController::occurrenceCauseTreeMeta
56|  methods: [POST]
57|
58|ssma_occurrences_list_page:
59|  path: /manager/ssma/occurrences/list-page
60|  controller: App\Controller\SsmaController::occurrenceListPage
61|  methods: [GET]
62|
63|ssma_occurrences_export:
64|  path: /manager/ssma/occurrences/export
65|  controller: App\Controller\Ssma\SsmaOccurrenceExportController::exportOccurrences
66|  methods: [GET]
67|
68|ssma_inspections_export:
69|  path: /manager/ssma/inspections/export
70|  controller: App\Controller\Ssma\SsmaInspectionExportController::exportInspections
71|  methods: [GET]
72|
73|ssma_abordagens_export:
74|  path: /manager/ssma/abordagens/export
75|  controller: App\Controller\Ssma\SsmaAbordagemExportController::exportAbordagens
76|  methods: [GET]
77|
78|admin_ssma_occurrence_report:
79|  path: /manager/ssma/occurrence/{id}/report
80|  controller: App\Controller\SsmaController::occurrenceReport
81|  methods: [GET]
82|  requirements:
83|    id: '\d+'
84|
85|admin_ssma_occurrence_flash_report_context:
86|  path: /manager/ssma/occurrence/{id}/flash-report/context
87|  controller: App\Controller\SsmaController::occurrenceFlashReportContext
88|  methods: [GET]
89|  requirements:
90|    id: '\d+'
91|
92|admin_ssma_occurrence_flash_report_submit:
93|  path: /manager/ssma/occurrence/{id}/flash-report/submit
94|  controller: App\Controller\SsmaController::submitFlashReport
95|  methods: [POST]
96|  requirements:
97|    id: '\d+'
98|
99|admin_ssma_occurrence_approve:
100|  path: /manager/ssma/occurrence/{id}/approve
101|  controller: App\Controller\SsmaController::approveOccurrence
102|  methods: [POST]
103|  requirements:
104|    id: '\d+'
105|
106|admin_ssma_occurrence_flash_report_approvers:
107|  path: /manager/ssma/occurrence/flash-report/approvers
108|  controller: App\Controller\SsmaController::occurrenceFlashReportApprovers
109|  methods: [GET, POST]
110|
111|admin_ssma_action_plan_delete:
112|  path: /manager/ssma/action-plan/delete
113|  controller: App\Controller\SsmaController::deleteActionPlanAction
114|  methods: [POST]
115|
116|admin_ssma_occurrence_create:
117|  path: /manager/ssma/occurrences
118|  controller: App\Controller\SsmaController::createOccurrence
119|  methods: [POST]
120|
121|admin_ssma_occurrence_evidence_upload:
122|  path: /manager/ssma/occurrence-evidence/upload
123|  controller: App\Controller\SsmaController::uploadOccurrenceEvidence
124|  methods: [POST]
125|
126|admin_ssma_occurrence_evidence_meta:
127|  path: /manager/ssma/occurrence-evidence/meta
128|  controller: App\Controller\SsmaController::updateOccurrenceEvidenceMeta
129|  methods: [PATCH]
130|
131|admin_ssma_occurrence_evidence_append:
132|  path: /manager/ssma/occurrence-evidence/append
133|  controller: App\Controller\SsmaController::appendOccurrenceEvidence
134|  methods: [POST]
135|
136|admin_ssma_occurrence_sst_exams:
137|  path: /manager/ssma/occurrence-evidence/sst-exams
138|  controller: App\Controller\SsmaController::listOccurrenceSstExams
139|  methods: [GET]
140|
141|admin_ssma_occurrence_sst_attach:
142|  path: /manager/ssma/occurrence-evidence/sst-attach
143|  controller: App\Controller\SsmaController::attachOccurrenceSstEvidence
144|  methods: [POST]
145|
146|admin_ssma_occurrence_sst_review:
147|  path: /manager/ssma/occurrence-evidence/sst-review
148|  controller: App\Controller\SsmaController::reviewOccurrenceSstEvidence
149|  methods: [POST]
150|
151|admin_ssma_inspection_create:
152|  path: /manager/ssma/inspections
153|  controller: App\Controller\SsmaController::createInspection
154|  methods: [POST]
155|
156|admin_ssma_inspection_report:
157|  path: /manager/ssma/inspection/{id}/report
158|  controller: App\Controller\SsmaController::inspectionReport
159|  methods: [GET]
160|  requirements:
161|    id: '\d+'
162|
163|admin_ssma_abordagem_report:
164|  path: /manager/ssma/abordagem/{id}/report
165|  controller: App\Controller\SsmaController::abordagemReport
166|  methods: [GET]
167|  requirements:
168|    id: '\d+'
169|
170|admin_ssma_inspection_get:
171|  path: /manager/ssma/inspections/{id}
172|  controller: App\Controller\SsmaController::getInspection
173|  methods: [GET]
174|
175|ssma_inspection_view:
176|  path: /manager/ssma/inspections/{id}/view
177|  controller: App\Controller\SsmaController::viewInspection
178|  methods: [GET]
179|
180|admin_ssma_inspection_delete:
181|  path: /manager/ssma/inspections/{id}
182|  controller: App\Controller\SsmaController::deleteInspection
183|  methods: [DELETE]
184|
185|admin_ssma_inspection_finalize:
186|  path: /manager/ssma/inspections/{id}/finalize
187|  controller: App\Controller\SsmaController::finalizeInspection
188|  methods: [POST]
189|
190|admin_ssma_action_create:
191|  path: /manager/ssma/actions
192|  controller: App\Controller\SsmaController::createAction
193|  methods: [POST]
194|
195|admin_ssma_action_get:
196|  path: /manager/ssma/actions/{id}
197|  controller: App\Controller\SsmaController::getAction
198|  methods: [GET]
199|
200|ssma_action_modal_partial:
201|  path: /manager/ssma/action-modal-partial
202|  controller: App\Controller\SsmaController::actionModalPartial
203|  methods: [GET]
204|
205|admin_ssma_action_reopen:
206|  path: /manager/ssma/actions/{id}/reopen
207|  controller: App\Controller\SsmaController::reopenAction
208|  methods: [POST]
209|
210|admin_ssma_action_resolve:
211|  path: /manager/ssma/actions/{id}/resolve
212|  controller: App\Controller\SsmaController::resolveAction
213|  methods: [POST]
214|
215|admin_ssma_action_validate:
216|  path: /manager/ssma/actions/{id}/validate
217|  controller: App\Controller\SsmaController::validateAction
218|  methods: [POST]
219|
220|admin_ssma_members_list:
221|  path: /manager/ssma/members
222|  controller: App\Controller\SsmaController::listMembersJson
223|  methods: [GET]
224|
225|admin_ssma_action_delete:
226|  path: /manager/ssma/actions/{id}
227|  controller: App\Controller\SsmaController::deleteAction
228|  methods: [DELETE]
229|
230|admin_ssma_occurrence_delete:
231|  path: /manager/ssma/occurrences/{id}
232|  controller: App\Controller\SsmaController::deleteOccurrence
233|  methods: [DELETE]
234|
235|admin_ssma_occurrence_resolve:
236|  path: /manager/ssma/occurrences/{id}/resolve
237|  controller: App\Controller\SsmaController::resolveOccurrence
238|  methods: [POST]
239|
240|admin_ssma_event_resolve:
241|  path: /manager/ssma/events/{id}/resolve
242|  controller: App\Controller\SsmaController::resolveSsmaEvent
243|  methods: [POST]
244|
245|admin_ssma_dashboard_filter:
246|  path: /manager/ssma/dashboard/filter
247|  controller: App\Controller\SsmaController::dashboardFilter
248|  methods: [GET]
249|
250|admin_ssma_dashboard_semantic:
251|  path: /manager/ssma/dashboard/semantic
252|  controller: App\Controller\SsmaController::dashboardSemantic
253|  methods: [GET]
254|
255|admin_ssma_prevencao_panel_semantic:
256|  path: /manager/ssma/prevencao/panel/semantic
257|  controller: App\Controller\SsmaController::prevencaoPanelSemantic
258|  methods: [GET]
259|
260|admin_ssma_ocorrencia_comparativo_filter:
261|  path: /manager/ssma/ocorrencias/comparativo/filter
262|  controller: App\Controller\SsmaController::ocorrenciaComparativoFilter
263|  methods: [GET]
264|
265|admin_ssma_prevencao_panel_filter:
266|  path: /manager/ssma/prevencao/panel/filter
267|  controller: App\Controller\SsmaController::prevencaoPanelFilter
268|  methods: [GET]
269|
270|admin_ssma_prevencao_abordagem_panel_filter:
271|  path: /manager/ssma/prevencao/abordagem/panel/filter
272|  controller: App\Controller\SsmaController::prevencaoAbordagemPanelFilter
273|  methods: [GET]
274|
275|admin_ssma_prevencao_comparativo_filter:
276|  path: /manager/ssma/prevencao/comparativo/filter
277|  controller: App\Controller\SsmaController::prevencaoComparativoFilter
278|  methods: [GET]
279|
280|admin_ssma_prevencao_metas_filter:
281|  path: /manager/ssma/prevencao/metas/filter
282|  controller: App\Controller\SsmaController::prevencaoMetasFilter
283|  methods: [GET]
284|
285|admin_ssma_prevencao_member_meta_save:
286|  path: /manager/ssma/prevencao/member-meta
287|  controller: App\Controller\SsmaController::savePrevencaoMemberMeta
288|  methods: [POST]
289|
290|admin_ssma_prevencao_global_metas:
291|  path: /manager/ssma/prevencao/global-metas
292|  controller: App\Controller\SsmaController::prevencaoGlobalMetas
293|  methods: [GET, POST]
294|
295|admin_ssma_prevencao_meta_abono_list:
296|  path: /manager/ssma/prevencao/meta-abono
297|  controller: App\Controller\SsmaController::prevencaoMetaAbonoList
298|  methods: [GET]
299|
300|admin_ssma_prevencao_meta_abono_create:
301|  path: /manager/ssma/prevencao/meta-abono
302|  controller: App\Controller\SsmaController::prevencaoMetaAbonoCreate
303|  methods: [POST]
304|
305|admin_ssma_prevencao_meta_abono_review:
306|  path: /manager/ssma/prevencao/meta-abono/{id}/review
307|  controller: App\Controller\SsmaController::prevencaoMetaAbonoReview
308|  methods: [POST]
309|  requirements:
310|    id: '\d+'
311|
312|admin_ssma_prevencao_meta_abono_cancel:
313|  path: /manager/ssma/prevencao/meta-abono/{id}/cancel
314|  controller: App\Controller\SsmaController::prevencaoMetaAbonoCancel
315|  methods: [POST]
316|  requirements:
317|    id: '\d+'
318|
319|admin_ssma_prevencao_meta_abono_update:
320|  path: /manager/ssma/prevencao/meta-abono/{id}
321|  controller: App\Controller\SsmaController::prevencaoMetaAbonoUpdate
322|  methods: [PUT, POST]
323|  requirements:
324|    id: '\d+'
325|
326|admin_ssma_prevencao_meta_abono_submit:
327|  path: /manager/ssma/prevencao/meta-abono/{id}/submit
328|  controller: App\Controller\SsmaController::prevencaoMetaAbonoSubmit
329|  methods: [POST]
330|  requirements:
331|    id: '\d+'
332|
333|admin_ssma_prevencao_meta_abono_delete:
334|  path: /manager/ssma/prevencao/meta-abono/{id}/delete
335|  controller: App\Controller\SsmaController::prevencaoMetaAbonoDelete
336|  methods: [POST]
337|  requirements:
338|    id: '\d+'
339|
340|admin_ssma_prevencao_meta_abono_approvers:
341|  path: /manager/ssma/prevencao/meta-abono/approvers
342|  controller: App\Controller\SsmaController::prevencaoMetaAbonoApprovers
343|  methods: [GET, POST]
344|
345|admin_ssma_prevencao_abordagem_coaches:
346|  path: /manager/ssma/prevencao/coaches
347|  controller: App\Controller\SsmaController::prevencaoAbordagemCoaches
348|  methods: [GET, POST]
349|
350|ssma_automations_list:
351|  path: /manager/ssma/automations
352|  controller: App\Controller\SsmaController::automationsList
353|  methods: [GET]
354|
355|ssma_automations_new:
356|  path: /manager/ssma/flow/{flowId}/stage/{stageId}/automations/new
357|  controller: App\Controller\Ssma\SsmaAutomationBuilderController::newAutomation
358|  methods: [GET]
359|
360|ssma_automations_edit:
361|  path: /manager/ssma/automations/{id}/edit
362|  controller: App\Controller\Ssma\SsmaAutomationBuilderController::editAutomation
363|  methods: [GET]
364|
365|ssma_flow_templates_list:
366|  path: /manager/ssma/flow-templates
367|  controller: App\Controller\SsmaController::flowTemplatesList
368|  methods: [GET]
369|
370|ssma_action_plan_projects:
371|  path: /manager/ssma/action-plan/projects
372|  controller: App\Controller\SsmaController::listActionPlanProjects
373|  methods: [GET]
374|
375|ssma_action_link_project:
376|  path: /manager/ssma/actions/{id}/link-project
377|  controller: App\Controller\SsmaController::linkActionToProject
378|  methods: [POST]
379|
380|ssma_action_occurrences_search:
381|  path: /manager/ssma/action-plan/occurrences/search
382|  controller: App\Controller\SsmaController::searchActionOccurrences
383|  methods: [GET]
384|
385|ssma_action_inspections_search:
386|  path: /manager/ssma/action-plan/inspections/search
387|  controller: App\Controller\SsmaController::searchActionInspections
388|  methods: [GET]
389|
390|ssma_action_abordagens_search:
391|  path: /manager/ssma/action-plan/abordagens/search
392|  controller: App\Controller\SsmaController::searchActionAbordagens
393|  methods: [GET]
394|
395|ssma_abordagem_questionarios:
396|  path: /manager/ssma/abordagens/questionarios
397|  controller: App\Controller\SsmaController::listQuestionariosAbordagem
398|  methods: [GET]
399|
400|ssma_abordagem_get:
401|  path: /manager/ssma/abordagens/{id}
402|  controller: App\Controller\SsmaController::getAbordagem
403|  methods: [GET]
404|  requirements:
405|    id: '\d+'
406|
407|ssma_abordagem_view:
408|  path: /manager/ssma/abordagens/{id}/view
409|  controller: App\Controller\SsmaController::viewAbordagem
410|  methods: [GET]
411|  requirements:
412|    id: '\d+'
413|
414|ssma_abordagem_create:
415|  path: /manager/ssma/abordagens
416|  controller: App\Controller\SsmaController::salvarAbordagem
417|  methods: [POST]
418|
419|ssma_abordagem_update:
420|  path: /manager/ssma/abordagens/{id}
421|  controller: App\Controller\SsmaController::salvarAbordagem
422|  methods: [POST]
423|  requirements:
424|    id: '\d+'
425|
426|ssma_abordagem_delete:
427|  path: /manager/ssma/abordagens/{id}
428|  controller: App\Controller\SsmaController::deletarAbordagem
429|  methods: [DELETE]
430|  requirements:
431|    id: '\d+'
432|
433|ssma_abordagem_duplicar:
434|  path: /manager/ssma/abordagens/{id}/duplicar
435|  controller: App\Controller\SsmaController::duplicarAbordagem
436|  methods: [POST]
437|  requirements:
438|    id: '\d+'
439|
440|ssma_abordagem_coaching_save:
441|  path: /manager/ssma/abordagens/{id}/coaching
442|  controller: App\Controller\SsmaController::salvarCoachingAbordagem
443|  methods: [POST]
444|  requirements:
445|    id: '\d+'
446|
447|# ── Eventos SSMA (SSMAEvent tipado) ──────────────────────────────────────────
448|
449|ssma_event_create:
450|  path: /manager/ssma/events
451|  controller: App\Controller\SsmaController::createEvent
452|  methods: [POST]
453|
454|ssma_event_get:
455|  path: /manager/ssma/events/{id}
456|  controller: App\Controller\SsmaController::getEvent
457|  methods: [GET]
458|
459|ssma_event_update:
460|  path: /manager/ssma/events/{id}
461|  controller: App\Controller\SsmaController::updateEvent
462|  methods: [POST]
463|
464|ssma_event_delete:
465|  path: /manager/ssma/events/{id}
466|  controller: App\Controller\SsmaController::deleteEvent
467|  methods: [DELETE]
468|
469|ssma_event_list:
470|  path: /manager/ssma/events
471|  controller: App\Controller\SsmaController::listEvents
472|  methods: [GET]
473|
474|ssma_occurrence_type_config_get:
475|  path: /manager/ssma/occurrence-type-config
476|  controller: App\Controller\SsmaController::getOccurrenceTypeConfig
477|  methods: [GET]
478|
479|ssma_occurrence_type_config_save:
480|  path: /manager/ssma/occurrence-type-config
481|  controller: App\Controller\SsmaController::saveOccurrenceTypeConfig
482|  methods: [POST]
483|
484|ssma_action_type_config_get:
485|  path: /manager/ssma/action-type-config
486|  controller: App\Controller\SsmaController::getActionTypeConfig
487|  methods: [GET]
488|
489|ssma_action_type_config_save:
490|  path: /manager/ssma/action-type-config
491|  controller: App\Controller\SsmaController::saveActionTypeConfig
492|  methods: [POST]
493|
494|ssma_action_validator_config_get:
495|  path: /manager/ssma/action-validator-config
496|  controller: App\Controller\SsmaController::getActionValidatorConfig
497|  methods: [GET]
498|
499|ssma_action_validator_config_save:
500|  path: /manager/ssma/action-validator-config

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "config/routes_ssma.yaml", "start_line": 500, "end_line": 707}

File: config/routes_ssma.yaml (Total lines: 707)
IS_TRUNCATED: false
LINE_RANGE: 500-707
500|  path: /manager/ssma/action-validator-config
501|  controller: App\Controller\SsmaController::saveActionValidatorConfig
502|  methods: [POST]
503|
504|ssma_inspection_type_config_get:
505|  path: /manager/ssma/inspection-type-config
506|  controller: App\Controller\SsmaController::getInspectionTypeConfig
507|  methods: [GET]
508|
509|ssma_inspection_type_config_save:
510|  path: /manager/ssma/inspection-type-config
511|  controller: App\Controller\SsmaController::saveInspectionTypeConfig
512|  methods: [POST]
513|
514|ssma_horas_trabalhadas_save:
515|  path: /manager/ssma/horas-trabalhadas
516|  controller: App\Controller\SsmaController::saveHorasTrabalhadas
517|  methods: [POST]
518|
519|ssma_abordagem_questionario_config_get:
520|  path: /manager/ssma/abordagem-questionario-config
521|  controller: App\Controller\SsmaController::getAbordagemQuestionarioConfig
522|  methods: [GET]
523|
524|ssma_abordagem_questionario_config_save:
525|  path: /manager/ssma/abordagem-questionario-config
526|  controller: App\Controller\SsmaController::saveAbordagemQuestionarioConfig
527|  methods: [POST]
528|
529|ssma_abordagem_formulario_default:
530|  path: /manager/ssma/abordagem-formulario-default
531|  controller: App\Controller\SsmaController::getAbordagemFormularioDefault
532|  methods: [GET]
533|
534|ssma_abordagem_formulario_resultados:
535|  path: /manager/ssma/abordagem-formulario-resultados
536|  controller: App\Controller\SsmaController::getAbordagemFormularioResultados
537|  methods: [GET]
538|
539|ssma_cause_tree_index:
540|  path: /manager/ssma/occurrences/cause-tree
541|  controller: App\Controller\SsmaController::causeTreeIndex
542|  methods: [GET]
543|
544|ssma_cause_tree_view:
545|  path: /manager/ssma/occurrences/cause-tree/view
546|  controller: App\Controller\SsmaController::causeTreeView
547|  methods: [GET]
548|
549|ssma_cause_tree_tree_create:
550|  path: /manager/ssma/occurrences/cause-tree/trees
551|  controller: App\Controller\SsmaController::createCauseTree
552|  methods: [POST]
553|
554|ssma_cause_tree_tree_update:
555|  path: /manager/ssma/occurrences/cause-tree/trees/{id}
556|  controller: App\Controller\SsmaController::updateCauseTree
557|  methods: [POST]
558|  requirements:
559|    id: '\d+'
560|
561|ssma_cause_tree_tree_delete:
562|  path: /manager/ssma/occurrences/cause-tree/trees/{id}
563|  controller: App\Controller\SsmaController::deleteCauseTree
564|  methods: [DELETE]
565|  requirements:
566|    id: '\d+'
567|
568|ssma_cause_tree_data:
569|  path: /manager/ssma/occurrences/cause-tree/data
570|  controller: App\Controller\SsmaController::getCauseTreeData
571|  methods: [GET]
572|
573|ssma_cause_tree_node_create:
574|  path: /manager/ssma/occurrences/cause-tree/nodes
575|  controller: App\Controller\SsmaController::createCauseTreeNode
576|  methods: [POST]
577|
578|ssma_cause_tree_node_update:
579|  path: /manager/ssma/occurrences/cause-tree/nodes/{id}
580|  controller: App\Controller\SsmaController::updateCauseTreeNode
581|  methods: [POST]
582|  requirements:
583|    id: '\d+'
584|
585|ssma_cause_tree_action_plan_node_update:
586|  path: /manager/ssma/occurrences/cause-tree/action-plan/nodes/{id}
587|  controller: App\Controller\SsmaController::updateCauseTreeActionPlanNode
588|  methods: [POST]
589|  requirements:
590|    id: '\d+'
591|
592|ssma_cause_tree_action_plan_node_add:
593|  path: /manager/ssma/occurrences/cause-tree/action-plan/nodes/{id}/actions
594|  controller: App\Controller\SsmaController::addCauseTreeActionPlanEntry
595|  methods: [POST]
596|  requirements:
597|    id: '\d+'
598|
599|ssma_cause_tree_action_plan_entry_delete:
600|  path: /manager/ssma/occurrences/cause-tree/action-plan/nodes/{id}/actions/delete
601|  controller: App\Controller\SsmaController::deleteCauseTreeActionPlanEntry
602|  methods: [POST]
603|  requirements:
604|    id: '\d+'
605|
606|ssma_cause_tree_action_plan_apply:
607|  path: /manager/ssma/occurrences/cause-tree/action-plan/apply
608|  controller: App\Controller\SsmaController::applyCauseTreeActionPlanEntries
609|  methods: [POST]
610|
611|ssma_cause_tree_node_delete:
612|  path: /manager/ssma/occurrences/cause-tree/nodes/{id}
613|  controller: App\Controller\SsmaController::deleteCauseTreeNode
614|  methods: [DELETE]
615|  requirements:
616|    id: '\d+'
617|
618|ssma_aprofundamento_grupo_view:
619|  path: /manager/ssma/config/aprofundamento/{teamId}
620|  controller: App\Controller\SsmaController::aprofundamentoGrupoView
621|  methods: [GET]
622|  requirements:
623|    teamId: '\d+'
624|
625|ssma_aprofundamento_mapa_save:
626|  path: /manager/ssma/config/aprofundamento/map
627|  controller: App\Controller\SsmaController::aprofundamentoSalvarMapa
628|  methods: [POST]
629|
630|ssma_aprofundamento_membros_save:
631|  path: /manager/ssma/config/aprofundamento/{teamId}/members
632|  controller: App\Controller\SsmaController::aprofundamentoSalvarMembros
633|  methods: [POST]
634|  requirements:
635|    teamId: '\d+'
636|
637|ssma_aprofundamento_descaracter_save:
638|  path: /manager/ssma/config/aprofundamento/descaracter
639|  controller: App\Controller\SsmaController::aprofundamentoSalvarDescaracter
640|  methods: [POST]
641|
642|# ── Permission Tags (Aprofundamento Técnico — novo modelo) ───────────────────
643|
644|ssma_permission_tag_create:
645|  path: /manager/ssma/permission-tags
646|  controller: App\Controller\SsmaController::createPermissionTag
647|  methods: [POST]
648|
649|ssma_permission_tag_delete:
650|  path: /manager/ssma/permission-tags/{tagId}
651|  controller: App\Controller\SsmaController::deletePermissionTag
652|  methods: [DELETE]
653|  requirements:
654|    tagId: '\d+'
655|
656|ssma_permission_tag_view:
657|  path: /manager/ssma/permission-tags/{tagId}
658|  controller: App\Controller\SsmaController::permissionTagView
659|  methods: [GET]
660|  requirements:
661|    tagId: '\d+'
662|
663|ssma_permission_tag_members_save:
664|  path: /manager/ssma/permission-tags/{tagId}/members
665|  controller: App\Controller\SsmaController::permissionTagSaveMembers
666|  methods: [POST]
667|  requirements:
668|    tagId: '\d+'
669|
670|ssma_occurrence_create_permissions_matrix:
671|  path: /manager/ssma/occurrence-create-permissions/matrix
672|  controller: App\Controller\SsmaController::occurrenceCreatePermissionsMatrix
673|  methods: [GET]
674|
675|ssma_occurrence_create_permissions_bulk:
676|  path: /manager/ssma/occurrence-create-permissions/bulk
677|  controller: App\Controller\SsmaController::occurrenceCreatePermissionsBulkSave
678|  methods: [POST]
679|
680|ssma_occurrence_create_permissions_save:
681|  path: /manager/ssma/occurrence-create-permissions/members/{memberId}
682|  controller: App\Controller\SsmaController::occurrenceCreatePermissionsSave
683|  methods: [POST]
684|  requirements:
685|    memberId: '\d+'
686|
687|ssma_ai_quality_check:
688|  path: /manager/ssma/ai-quality-check
689|  controller: App\Controller\SsmaController::aiQualityCheck
690|  methods: [POST]
691|
692|ssma_ai_suggest_ros_fields:
693|  path: /manager/ssma/ai-suggest-ros-fields
694|  controller: App\Controller\SsmaController::aiSuggestRosFields
695|  methods: [POST]
696|
697|ssma_generate_occurrence_title:
698|  path: /manager/ssma/generate-occurrence-title
699|  controller: App\Controller\SsmaController::generateOccurrenceTitle
700|  methods: [POST]
701|
702|ssma_ros_call_priority_save:
703|  path: /manager/ssma/ros-call-priority
704|  controller: App\Controller\SsmaController::saveRosCallPriority
705|  methods: [POST]
706|
707|

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "current_product|resolveSsmaProductPermissionTagForMember|getCurrentSsmaPermissionProductSlug"}

No matches found

{"file_patterns": ["src/"], "search_text": "getRequiredProductForRoute|current_product"}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "getCurrentSsmaPermissionProductSlug|ssmaParentProductSlug|productSlug"}

No matches found

{"file_patterns": ["src/"], "use_perl_regexp": true, "search_text": "current_product|getRequiredProductForRoute"}

File: src/Command/TestSsmaEventModalListsCommand.php
Match lines: 1
82|            $request->attributes->set('current_product', $product);

File: src/Controller/SsmaController.php
Match lines: 2
10591|        $product = $request ? $request->attributes->get('current_product') : null;
10612|            $request->attributes->set('current_product', $product);

File: src/EventListener/GlobalPermissionListener.php
Match lines: 4
292|        $requiredProduct = $this->getRequiredProductForRoute($route);
982|    private function getRequiredProductForRoute(string $route): ?string
1279|            $request->attributes->set('current_product', $product);
1486|            $request->attributes->set('current_product', $product);

{"file_path": "src/Controller/SsmaController.php", "start_line": 10560, "end_line": 10625}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10560-10625
10560|        return $member->getGlobalPermissionTag();
10561|    }
10562|
10563|    /**
10564|     * S/N de descaracterização: liberado automaticamente para Gestor Administrador/Tenant
10565|     * (ROLE_SUPER_ADMIN, ROLE_MANAGER ou tag "Gestor Administrador"), sem precisar de
10566|     * configuração explícita em "Profissionais de Saúde". Demais perfis seguem a config.
10567|     */
10568|    private function ssmaMemberCanDescharacterizeAccident(Company $company, ?CompanyMembers $member): bool
10569|    {
10570|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10571|            return true;
10572|        }
10573|
10574|        if (!$member instanceof CompanyMembers) {
10575|            return false;
10576|        }
10577|
10578|        if ($this->memberIsSsmaGestorAdministrador($member)) {
10579|            return true;
10580|        }
10581|
10582|        return $this->ssmaOccurrenceTypeConfig->memberCanDescharacterizeAccident(
10583|            $company,
10584|            (int) $member->getId()
10585|        );
10586|    }
10587|
10588|    private function getCurrentSsmaPermissionProductSlug(): string
10589|    {
10590|        $request = $this->requestStack->getCurrentRequest();
10591|        $product = $request ? $request->attributes->get('current_product') : null;
10592|
10593|        if ($product instanceof \App\Entity\Product) {
10594|            $slug = (string) $product->getSlug();
10595|            if ($slug !== '') {
10596|                return $slug;
10597|            }
10598|        }
10599|
10600|        return $this->ssmaParentProductSlug;
10601|    }
10602|
10603|    /**
10604|     * Garante que a Prevenção Ativa resolve a tag de `ssma-prevention`, não a do produto-pai.
10605|     */
10606|    private function bindSsmaPreventionProductToRequest(Request $request): void
10607|    {
10608|        $product = $this->entityManager
10609|            ->getRepository(\App\Entity\Product::class)
10610|            ->findOneBy(['slug' => 'ssma-prevention']);
10611|        if ($product instanceof \App\Entity\Product) {
10612|            $request->attributes->set('current_product', $product);
10613|        }
10614|    }
10615|
10616|    /**
10617|     * Admin da tenant/plataforma — não entra em NENHUM select/lista de membros SSMA.
10618|     * ROLE_MANAGER_GESTOR (colaborador gestor de equipe) NÃO é excluído aqui.
10619|     * Alinhado a SsmaOccurrenceCreatePermissionService::isAdminRoleExcludedFromMatrix.
10620|     */
10621|    private function isSsmaExcludedTenantAdminUser(?User $user): bool
10622|    {
10623|        if (!$user instanceof User) {
10624|            return false;
10625|        }

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 270, "end_line": 360}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 270-360
270|                return new RedirectResponse($this->urlGenerator->generate('app_home'));
271|            }
272|            
273|            return $this->handleStructuralResearchPermissions($user, $route, $request, $company);
274|        }
275|
276|        if ($route === 'live_interview_management') {
277|            $company = $this->getCompanyBasedOnUserRole($user, $request);
278|
279|            if (!$this->liveInterviewAccessService->canAccessManagement($user, $company)) {
280|                $this->addFlashErrorOnce('Você não possui permissão para acessar a plataforma de entrevistas.');
281|                return new RedirectResponse($this->urlGenerator->generate('app_home'));
282|            }
283|
284|            $this->setLiveInterviewManagementPermissions($request, $user, $company);
285|            return null;
286|        }
287|
288|        if ($route === 'onboarding_index' || $route === 'offboarding_index') {
289|            return $this->handleOnboardingIndexAccess($user, $route, $request);
290|        }
291|
292|        $requiredProduct = $this->getRequiredProductForRoute($route);
293|        
294|        // Se não há produto requerido para esta rota, não precisa fazer verificações
295|        if (!$requiredProduct) {
296|            return null;
297|        }
298|
299|        // APIs somente-leitura de Spaces Control usadas por outros módulos (ex.: Projetos).
300|        // Precisa sair ANTES do gate !$permissionTag: usuário sem tag do produto recebia
301|        // RedirectResponse, convertido em JSON 403 no AJAX (jQuery isXmlHttpRequest).
302|        if ($this->isSpacesControlSharedReadApiRoute((string) $route)) {
303|            return null;
304|        }
305|
306|        // Se for ROLE_MANAGER, acesso total para rotas mapeadas
307|        if (in_array('ROLE_MANAGER', $user->getRoles(), true)) {
308|            $company = $this->getCompanyBasedOnUserRole($user, $request);
309|            $this->setDefaultPermissions($request, $user, $company);
310|            // Define template/layout para manager (sempre admin)
311|            $this->setTemplateForRoute($route, $request, true);
312|            return null;
313|        }
314|
315|        // Apenas para rotas mapeadas, verificar empresa
316|        $company = $this->getCompanyBasedOnUserRole($user, $request);
317|        
318|        if (!$company) {
319|            $this->addFlashErrorOnce('Usuário não possui empresa associada ou empresa não encontrada.');
320|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
321|        }
322|        // Buscar CompanyMember pela empresa detectada; se o workspace divergir, usa vínculo ativo em outra empresa.
323|        $companyMember = $this->permissionService->getCompanyMember($user, $company);
324|        if (!$companyMember) {
325|            $companyMember = $this->entityManager->getRepository(\App\Entity\CompanyMembers::class)
326|                ->findOneBy([
327|                    'user' => $user,
328|                    'enabled' => true,
329|                    'isRemoved' => false
330|                ], ['created_at' => 'DESC']);
331|
332|            if ($companyMember) {
333|                $company = $companyMember->getCompany();
334|            }
335|        }
336|
337|        if (!$companyMember) {
338|            $this->addFlashErrorOnce('Usuário não vinculado a nenhuma empresa.');
339|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
340|        }
341|
342|        // Member self-service: list/upload own authorization documents (pendencies page, profile).
343|        if ($this->isMemberSelfAuthorizationDocumentRoute($route, $request, $companyMember)) {
344|            $this->setMemberSelfAuthorizationDocumentAttributes($request, $user, $company, $companyMember);
345|
346|            return null;
347|        }
348|    
349|        $product = $this->entityManager->getRepository(Product::class)
350|            ->findOneBy(['slug' => $requiredProduct]);
351|        // POSSIVELMENTE PRECISA REMOVE >>>>>
352|        
353|        // Fallback para buscar por nome se não encontrar por slug
354|        if (!$product) {
355|            $product = $this->entityManager->getRepository(Product::class)
356|                ->findOneBy(['name' => ucfirst($requiredProduct)]);
357|        }
358|
359|        $product = $this->resolveProductForPermissionRoute($requiredProduct);
360|

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 1240, "end_line": 1300}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 1240-1300
1240|        
1241|        // Permissões específicas
1242|        $request->attributes->set('can_view', $permissionTag->getCanView() ?? false);
1243|        $request->attributes->set('can_edit', $permissionTag->getCanEdit() ?? false);
1244|        $request->attributes->set('can_create', $permissionTag->getCanCreate() ?? false);
1245|        $request->attributes->set('can_delete', $permissionTag->getCanDelete() ?? false);
1246|        $request->attributes->set('team_limitation', $permissionTag->getTeamLimitation() ?? false);
1247|        
1248|        // Informações de times
1249|        if ($canView && !$teamLimitation) {
1250|                // Pode ver TODOS da empresa - busca todos os membros ativos da empresa
1251|                $allCompanyMembers = $this->entityManager->getRepository(CompanyMembers::class)
1252|                    ->findBy(['company' => $company, 'isRemoved' => 0]);
1253|                
1254|                $allUserIds = [];
1255|                foreach ($allCompanyMembers as $member) {
1256|                    if ($member->getUser()) {
1257|                        $allUserIds[] = $member->getUser()->getId();
1258|                    }
1259|                }
1260|                
1261|                $request->attributes->set('user_teams', []); // Não importa os times específicos
1262|                $request->attributes->set('user_team_names', ['Toda a Empresa']); // Nome descritivo
1263|                $request->attributes->set('user_team_member_ids', $allUserIds); // TODOS da empresa
1264|            } 
1265|            elseif ($canView && $teamLimitation) {
1266|                // Pode ver apenas do PRÓPRIO TIME
1267|                $request->attributes->set('user_teams', $this->permissionService->getCompanyMemberTemsIds($companyMember));
1268|                $request->attributes->set('user_team_names', $this->permissionService->getCompanyMemberTemsNames($companyMember, $company));
1269|                $request->attributes->set('user_team_member_ids', $this->permissionService->getUserTeamMemberIds($companyMember, $company));
1270|            } 
1271|            else {
1272|                // NÃO pode ver outros - apenas próprios dados
1273|                $request->attributes->set('user_teams', []);
1274|                $request->attributes->set('user_team_names', []);
1275|                $request->attributes->set('user_team_member_ids', [$user->getId()]);
1276|            }
1277|        // Informações do produto atual
1278|        if ($product) {
1279|            $request->attributes->set('current_product', $product);
1280|        }
1281|        
1282|        // Flags úteis
1283|        $request->attributes->set('is_admin', false);
1284|        $request->attributes->set('is_manager', $permissionTag->getName() === 'Gestor Administrador');
1285|        $request->attributes->set('is_member', $permissionTag->getName() === 'Membro');
1286|        $request->attributes->set('user_role', $user->getRoles()[0] ?? 'ROLE_USER');
1287|        
1288|        // Define template baseado nas permissões
1289|        $route = $request->attributes->get('_route');
1290|        $this->setTemplateForRoute($route, $request);
1291|    }
1292|
1293|    private function isSsmaEvidenceUploadRoute(string $route): bool
1294|    {
1295|        return in_array($route, [
1296|            'admin_ssma_occurrence_evidence_upload',
1297|            'admin_ssma_occurrence_evidence_append',
1298|        ], true);
1299|    }
1300|

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 1440, "end_line": 1500}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 1440-1500
1440|     * Escritas continuam barradas por {@see hasActionPermission} com o tag real (canEdit/canCreate false).
1441|     */
1442|    private function isSsmaStakeholderOccurrenceRoute(string $route): bool
1443|    {
1444|        return in_array($route, [
1445|            'admin_ssma_index',
1446|            'ssma_ocorrencia_index',
1447|            'ssma_direito_recusa_index',
1448|            'ssma_prevencao_index',
1449|            'ssma_plano_acao_index',
1450|            'ssma_cause_tree_index',
1451|            'ssma_cause_tree_view',
1452|            'ssma_cause_tree_data',
1453|            'admin_ssma_occurrence_view',
1454|            'admin_ssma_occurrence_evidence_meta',
1455|            'ssma_event_get',
1456|            'ssma_event_list',
1457|            // Abordagem e Inspeção: membro vinculado pode visualizar o detalhe
1458|            'ssma_abordagem_view',
1459|            'ssma_abordagem_get',
1460|            'ssma_inspection_view',
1461|            'admin_ssma_inspection_get',
1462|        ], true);
1463|    }
1464|
1465|    private function setSsmaTechnicalOccurrenceAttributes($request, PermissionTag $permissionTag, CompanyMembers $companyMember, User $user, Company $company, ?Product $product = null): void
1466|    {
1467|        $request->attributes->set('current_user', $user);
1468|        $request->attributes->set('current_company', $company);
1469|        $request->attributes->set('company_member', $companyMember);
1470|        $request->attributes->set('permission_tag', $permissionTag);
1471|        $request->attributes->set('permission_tag_name', $permissionTag->getName());
1472|        $request->attributes->set('can_view', true);
1473|        $request->attributes->set('can_edit', false);
1474|        $request->attributes->set('can_create', false);
1475|        $request->attributes->set('can_delete', false);
1476|        $request->attributes->set('team_limitation', false);
1477|        $request->attributes->set('user_teams', []);
1478|        $request->attributes->set('user_team_names', []);
1479|        $request->attributes->set('user_team_member_ids', [$user->getId()]);
1480|        $request->attributes->set('is_admin', false);
1481|        $request->attributes->set('is_manager', false);
1482|        $request->attributes->set('is_member', true);
1483|        $request->attributes->set('user_role', $user->getRoles()[0] ?? 'ROLE_USER');
1484|
1485|        if ($product) {
1486|            $request->attributes->set('current_product', $product);
1487|        }
1488|    }
1489|
1490|
1491|    private function setDefaultPermissions($request, User $user, Company $company): void
1492|    {
1493|        $companyMember = $this->permissionService->getCompanyMember($user, $company);
1494|        
1495|        $request->attributes->set('current_user', $user);
1496|        $request->attributes->set('current_company', $company);
1497|        $request->attributes->set('company_member', $companyMember);
1498|        $request->attributes->set('can_view', true);
1499|        $request->attributes->set('can_edit', true);
1500|        $request->attributes->set('can_create', true);

{"file_path": "src/Controller/SsmaController.php", "start_line": 9180, "end_line": 9330}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9180-9330
9180|            return new JsonResponse([
9181|                'success' => true,
9182|                'message' => $operation === 'evaluate' ? 'Ação reavaliada com sucesso.' : 'Ação finalizada com sucesso.',
9183|                'solved'  => true,
9184|                'parent_occurrence_finalized' => $parentFinalized,
9185|            ]);
9186|        } catch (\Throwable $e) {
9187|            $this->ssmaLogger->error('resolveAction error: ' . $e->getMessage(), [
9188|                'exception' => $e::class,
9189|                'action_id'   => $id,
9190|                'trace'       => $e->getTraceAsString(),
9191|            ]);
9192|            $payload = ['success' => false, 'message' => 'Erro ao resolver ação.'];
9193|            if ($this->getParameter('kernel.debug')) {
9194|                $payload['detail'] = $e->getMessage();
9195|            }
9196|
9197|            return new JsonResponse($payload, 500);
9198|        }
9199|    }
9200|
9201|    // ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
9202|    // Inspection CRUD
9203|    // ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
9204|
9205|    public function createInspection(Request $request): JsonResponse
9206|    {
9207|        /** @var User|null $user */
9208|        $user = $this->getUser();
9209|        if (!$user) {
9210|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9211|        }
9212|
9213|        $company = $this->getSsmaCompany();
9214|        if (!$company) {
9215|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
9216|        }
9217|
9218|        if (!$this->canMutatePreventionContentForCurrentUser($company, $user, 'inspecao')) {
9219|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para registrar ou alterar inspeções.'], 403);
9220|        }
9221|
9222|        // TODO: Keep this payload contract stable so the front-end edit/create flow can integrate with the final database model.
9223|        $data = json_decode($request->getContent(), true) ?? [];
9224|        $mode = $data['mode'] ?? 'create';
9225|
9226|        $inspectionDate = $data['inspection_date'] ?? null;
9227|        if (!$inspectionDate) {
9228|            return new JsonResponse(['success' => false, 'message' => 'Data da inspeção obrigatória.'], 422);
9229|        }
9230|
9231|        $inspectionType = trim((string) ($data['inspection_type'] ?? ''));
9232|        if ($inspectionType === '') {
9233|            return new JsonResponse(['success' => false, 'message' => 'Tipo de inspeção obrigatório.'], 422);
9234|        }
9235|
9236|        $this->ensureSsmaDeviationExtraColumns();
9237|        $this->ensureSsmaActionSchema();
9238|
9239|        try {
9240|            if ($mode === 'edit' && !empty($data['inspectionId'])) {
9241|                $inspection = $this->entityManager->find(SsmaInspection::class, (int) $data['inspectionId']);
9242|                if (!$inspection || $inspection->getCompany()->getId() !== $company->getId()) {
9243|                    return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9244|                }
9245|                if (!$this->canMutateExistingInspection($inspection, $company, $user)) {
9246|                    return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar esta inspeção.'], 403);
9247|                }
9248|                $message = 'Inspeção atualizada com sucesso.';
9249|            } else {
9250|                $inspection = new SsmaInspection();
9251|                $inspection->setCompany($company);
9252|                $message = 'Inspeção registrada com sucesso.';
9253|                $currentMember = $this->getCurrentCompanyMember($company, $user);
9254|                $creatorName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
9255|                if ($creatorName === '') {
9256|                    $creatorName = (string) ($user->getEmail() ?? 'Usuário');
9257|                }
9258|                if ($currentMember) {
9259|                    $label = $this->ssmaMemberDisplayLabel($currentMember);
9260|                    if ($label !== '') {
9261|                        $creatorName = $label;
9262|                    }
9263|                }
9264|                $inspection->setCreatorMeta(
9265|                    $currentMember ? (int) $currentMember->getId() : null,
9266|                    $creatorName
9267|                );
9268|            }
9269|
9270|            $previousInspectionRecipientIds = $mode === 'edit'
9271|                ? $this->ssmaNotificationService->resolveInspectionRecipientMemberIds($inspection)
9272|                : [];
9273|
9274|            $executorNotifications = $this->applyInspectionData($inspection, $data);
9275|            $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
9276|            $hasTeamLimitation = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user) !== null;
9277|            $rawTeamId = $inspection->getTeam()?->getId() ? (int) $inspection->getTeam()->getId() : null;
9278|            $writableTeamId = $this->ssmaPreventionAreaAuthorization->resolveWritableInspectionTeamId(
9279|                $areaScope,
9280|                $rawTeamId,
9281|                $hasTeamLimitation
9282|            );
9283|            // area_limitation sozinha: pessoa da gerência cuja CompanyTeam é de outra área
9284|            // não pode impedir o save — a inspeção fica no recorte pelas pessoas.
9285|            if ($writableTeamId === null && $rawTeamId !== null) {
9286|                $inspection->setTeam(null);
9287|            }
9288|            // Seletor filtrado no Twig é só UX: valida no backend a equipe resolvida e cada
9289|            // pessoa do payload (responsável, participantes, acompanhantes, responsáveis de desvio)
9290|            // contra a empresa da sessão e o recorte de área.
9291|            $areaScopeErr = $this->ssmaPreventionAreaAuthorization->validateInspectionPayload(
9292|                $areaScope,
9293|                $company,
9294|                $data,
9295|                $writableTeamId
9296|            );
9297|            if ($areaScopeErr !== null) {
9298|                return new JsonResponse(['success' => false, 'message' => $areaScopeErr], 403);
9299|            }
9300|            $teamScopeErr = $this->validateInspectionPayloadAgainstTeamScope(
9301|                $data,
9302|                $writableTeamId,
9303|                $company,
9304|                $user
9305|            );
9306|            if ($teamScopeErr !== null) {
9307|                return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
9308|            }
9309|            $this->entityManager->persist($inspection);
9310|            $this->entityManager->flush();
9311|
9312|            // P?s-flush: garante origemId nas ações dos desvios (necessário em create, pois o id da inspeção não existia antes).
9313|            $inspectionId = (int) $inspection->getId();
9314|            $needsExtraFlush = false;
9315|            foreach ($inspection->getDeviations() as $deviation) {
9316|                $devAction = $deviation->getAction();
9317|                if ($devAction !== null && $devAction->getOrigemId() !== $inspectionId) {
9318|                    $devAction->setOrigemId($inspectionId);
9319|                    $needsExtraFlush = true;
9320|                }
9321|                foreach ($this->entityManager->getRepository(SsmaAction::class)->findBy(['deviation' => $deviation]) as $linkedAction) {
9322|                    if ($linkedAction->getOrigemId() !== $inspectionId) {
9323|                        $linkedAction->setOrigemId($inspectionId);
9324|                        $needsExtraFlush = true;
9325|                    }
9326|                }
9327|            }
9328|            if ($needsExtraFlush) {
9329|                $this->entityManager->flush();
9330|            }

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function applyInspectionData"}

File: src/Controller/SsmaController.php
Match lines: 1
16335|    private function applyInspectionData(SsmaInspection $inspection, array $data): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 16335, "end_line": 16460}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 16335-16460
16335|    private function applyInspectionData(SsmaInspection $inspection, array $data): array
16336|    {
16337|        $executorNotifications = [];
16338|        // TODO: Centralize any future inspection business rules here when the final back-end model is ready.
16339|        $inspection->setTitle(!empty($data['title']) ? trim((string) $data['title']) : null);
16340|        $inspection->setInspectionDate(new \DateTime((string) $data['inspection_date']));
16341|        $inspection->setObservations($data['observations'] ?? null);
16342|        $participantIds = array_values(array_filter(array_map('intval', (array) ($data['participants_ids'] ?? []))));
16343|        $companionIds = array_values(array_filter(array_map('intval', (array) ($data['companion_ids'] ?? []))));
16344|        $inspection->setParticipantsIds($participantIds);
16345|        $inspection->setCompanionIds($companionIds);
16346|        $companionNotes = isset($data['companion_notes']) ? trim((string) $data['companion_notes']) : null;
16347|        $inspection->setCompanionNotes($companionNotes !== '' ? $companionNotes : null);
16348|        $location = isset($data['location']) ? trim((string) $data['location']) : null;
16349|        $inspection->setLocation($location !== '' ? $location : null);
16350|        $inspectionType = isset($data['inspection_type']) ? trim((string) $data['inspection_type']) : null;
16351|        $inspection->setType($inspectionType !== '' ? $inspectionType : null);
16352|        $responsibleId = !empty($data['safety_responsible_id']) ? (int) $data['safety_responsible_id'] : null;
16353|        $teamId = !empty($data['team_id']) ? (int) $data['team_id'] : null;
16354|
16355|        if ($responsibleId === null && $participantIds !== []) {
16356|            $responsibleId = $participantIds[0];
16357|        }
16358|        if ($responsibleId === null && $companionIds !== []) {
16359|            $responsibleId = $companionIds[0];
16360|        }
16361|
16362|        $responsibleMember = null;
16363|        if ($responsibleId !== null && $responsibleId > 0) {
16364|            $responsibleMember = $this->entityManager->find(CompanyMembers::class, $responsibleId);
16365|        }
16366|
16367|        if ($teamId === null && $responsibleMember instanceof CompanyMembers) {
16368|            $memberTeamIds = $this->parseCompanyMemberTeamIds($responsibleMember);
16369|            if ($memberTeamIds !== []) {
16370|                $teamId = (int) $memberTeamIds[0];
16371|            }
16372|        }
16373|
16374|        $inspection->setSafetyResponsible(null);
16375|        $inspection->setTeam(null);
16376|
16377|        if ($responsibleMember instanceof CompanyMembers) {
16378|            $inspection->setSafetyResponsible($responsibleMember);
16379|        }
16380|
16381|        if ($teamId !== null && $teamId > 0) {
16382|            $team = $this->entityManager->find(CompanyTeam::class, $teamId);
16383|            $inspection->setTeam($team);
16384|        }
16385|
16386|        // TODO: Replace this full reset strategy if the final back-end requires diff-based child updates.
16387|        foreach ($inspection->getDeviations()->toArray() as $deviation) {
16388|            $inspection->getDeviations()->removeElement($deviation);
16389|            $this->entityManager->remove($deviation);
16390|        }
16391|
16392|        $primaryInspectionGmr = null;
16393|        foreach ((array) ($data['deviations'] ?? []) as $dev) {
16394|            $deviation = new SsmaInspectionDeviation();
16395|            $deviation->setTitle((string) ($dev['title'] ?? ''));
16396|            $deviation->setCorrectiveAction($dev['corrective_action'] ?? null);
16397|            $deviation->setEvidenceNames((array) ($dev['evidence_names'] ?? []));
16398|            $deviation->setDeviationType(!empty($dev['deviation_type']) ? (string) $dev['deviation_type'] : null);
16399|            $deviation->setLocationLabel(!empty($dev['location_label']) ? (string) $dev['location_label'] : null);
16400|            $deviation->setSituation(null);
16401|            $deviation->setClassification(!empty($dev['classification']) ? (array) $dev['classification'] : null);
16402|            $deviation->setProbableCause(!empty($dev['probable_cause']) ? (array) $dev['probable_cause'] : null);
16403|            $deviation->setCriticality(!empty($dev['criticidade']) ? (string) $dev['criticidade'] : null);
16404|            $devGmr = !empty($dev['gmr']) ? trim((string) $dev['gmr']) : null;
16405|            $deviation->setGmr($devGmr !== '' ? $devGmr : null);
16406|            if ($primaryInspectionGmr === null && $devGmr !== null && $devGmr !== '') {
16407|                $primaryInspectionGmr = $devGmr;
16408|            }
16409|
16410|            if (!empty($dev['start_date'])) {
16411|                $deviation->setStartDate(new \DateTime($dev['start_date']));
16412|            }
16413|            if (!empty($dev['end_date'])) {
16414|                $deviation->setEndDate(new \DateTime($dev['end_date']));
16415|            }
16416|            if (!empty($dev['responsible_id'])) {
16417|                $resp = $this->entityManager->find(CompanyMembers::class, (int) $dev['responsible_id']);
16418|                $deviation->setResponsible($resp);
16419|            }
16420|
16421|            $correctiveActionsRaw = is_array($dev['corrective_actions'] ?? null) ? $dev['corrective_actions'] : [];
16422|            $correctiveActions = $this->normalizeSsmaCorrectiveActions($correctiveActionsRaw);
16423|            foreach ($correctiveActions as $i => $ca) {
16424|                if (isset($correctiveActionsRaw[$i]['action_id']) && $correctiveActionsRaw[$i]['action_id'] !== '') {
16425|                    $correctiveActions[$i]['action_id'] = (int) $correctiveActionsRaw[$i]['action_id'];
16426|                }
16427|            }
16428|
16429|            // Legado: campo único "Ação Corretiva" + visto/prazo/responsável (inspeções antigas).
16430|            if ($correctiveActions === []) {
16431|                $legacyDesc = trim((string) ($dev['corrective_action'] ?? ''));
16432|                $legacyVisto = !empty($dev['visto_resolvido']) && $dev['visto_resolvido'] !== false;
16433|                $legacyDeadline = trim((string) ($dev['action_deadline'] ?? ''));
16434|                $legacyResp = isset($dev['action_responsible_id']) && $dev['action_responsible_id'] !== ''
16435|                    ? (int) $dev['action_responsible_id']
16436|                    : null;
16437|                $legacyHierarchy = trim((string) ($dev['action_hierarchy'] ?? ''));
16438|                $legacyActionId = !empty($dev['action_id']) ? (int) $dev['action_id'] : null;
16439|                if ($legacyDesc !== '' || $legacyVisto || $legacyDeadline !== '' || $legacyResp || $legacyHierarchy !== '' || $legacyActionId) {
16440|                    $correctiveActions = [[
16441|                        'description' => $legacyDesc,
16442|                        'resolved' => $legacyVisto ? 1 : 0,
16443|                        'deadline' => $legacyVisto ? null : ($legacyDeadline !== '' ? $legacyDeadline : null),
16444|                        'responsible_id' => $legacyResp,
16445|                        'validator_id' => null,
16446|                        'hierarchy' => $legacyHierarchy !== '' ? $legacyHierarchy : null,
16447|                        'action_id' => $legacyActionId,
16448|                    ]];
16449|                }
16450|            }
16451|
16452|            $priorityMap = [
16453|                'LEVE' => 'baixa', 'BAIXO' => 'baixa',
16454|                'MEDIO' => 'media', 'MODERADO' => 'media',
16455|                'ALTO' => 'alta', 'SEVERO' => 'alta', 'CRITICO' => 'alta',
16456|                'BAIXA' => 'baixa', 'MEDIA' => 'media', 'ALTA' => 'alta', 'CRITICA' => 'alta',
16457|            ];
16458|            $criticality = strtoupper((string) ($dev['criticidade'] ?? ''));
16459|            $firstDescription = '';
16460|            $allResolved = true;

{"file_patterns": ["src/"], "search_text": "validator_member_id|responsible_ids"}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "validator_member_id"}

File: src/Controller/SsmaController.php
Match lines: 22
1664|            $validatorMemberId = (int) ($entry['validatorMemberId'] ?? $entry['validator_member_id'] ?? 0);
2144|                : (isset($payload['validator_member_id']) && $payload['validator_member_id'] !== ''
2145|                    ? (int) $payload['validator_member_id']
4705|                    responsible_ids, validator_member_id
4742|        $validatorMemberId = (int) ($row['validator_member_id'] ?? 0);
6113|                'validator_member_id' => $a->getValidatorMemberId(),
6179|                'validator_member_id' => $a->getValidatorMemberId(),
7777|                $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
7791|                $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
8018|                'validator_member_id' => $action->getValidatorMemberId(),
8273|        $validatorMemberId = (int) ($entry['validatorMemberId'] ?? $entry['validator_member_id'] ?? 0);
9100|            if (!empty($data['validator_member_ids']) && is_array($data['validator_member_ids'])) {
9101|                $validatorMemberIds = array_values(array_filter(array_map('intval', $data['validator_member_ids'])));
9102|            } elseif (!empty($data['validator_member_id'])) {
9103|                $validatorMemberIds = [(int) $data['validator_member_id']];
9492|                'validator_member_id' => $a->getValidatorMemberId(),
9619|                'validator_member_id' => $a->getValidatorMemberId(),
11446|  OR a.validator_member_id = ?
11553|            $validatorMemberId = (int) ($action['validator_member_id'] ?? 0);
14303|            $add($action['validator_member_id'] ?? 0);
14491|                'validator_member_id'     => $row->getValidatorMemberId(),
21731|            $conn->executeStatement('ALTER TABLE ssma_actions ADD COLUMN IF NOT EXISTS validator_member_id INT DEFAULT NULL');

{"file_patterns": ["src/Entity/SsmaAction.php", "src/Entity/"], "search_text": "responsibleIds"}

File: src/Entity/IntermediateCrm.php
Match lines: 4
94|        $responsibleIds = [];
97|                $responsibleIds[] = $responsible->getId();
100|                $responsibleIds[] = $responsible;
104|        $this->responsible = $responsibleIds;

File: src/Entity/SsmaAction.php
Match lines: 3
63|    private ?array $responsibleIds = [];
189|    public function getResponsibleIds(): array { return $this->responsibleIds ?? []; }
190|    public function setResponsibleIds(array $ids): self { $this->responsibleIds = $ids; return $this; }

File: src/Entity/SsmaOccurrence.php
Match lines: 3
73|    private ?array $responsibleIds = [];
158|    public function getResponsibleIds(): array { return $this->responsibleIds ?? []; }
159|    public function setResponsibleIds(array $responsibleIds): self { $this->responsibleIds = $responsibleIds; return $this; }

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "public function viewAbordagem|public function viewInspection|public function prevencaoIndex|public function abordagemDetail"}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "viewAbordagem"}

File: src/Controller/SsmaController.php
Match lines: 11
6132|     * Reaproveita os mesmos dados de viewAbordagem (mapAbordagem + ações com
6155|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
6188|        // Decode obs_multiplas — labels (mesmas labels usadas em viewAbordagem)
8826|                    ->canViewAbordagem($areaScope, $a)
9578|    public function viewAbordagem(int $id): Response
9594|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
10097|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10099|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
20060|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
24316|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
25218|        if (!$this->canViewAbordagemUnderAreaScope($original, $company, $user)) {

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "viewInspection"}

File: src/Controller/SsmaController.php
Match lines: 9
6065|     * Reaproveita os mesmos dados de viewInspection (serializeInspectionDetail
6088|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
8755|                    ->canViewInspection($areaScope, $i)
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9446|    public function viewInspection(int $id): Response
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
20026|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 9420, "end_line": 9610}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9420-9610
9420|    }
9421|
9422|    public function getInspection(int $id): JsonResponse
9423|    {
9424|        /** @var User|null $user */
9425|        $user = $this->getUser();
9426|        if (!$user) {
9427|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9428|        }
9429|
9430|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9431|        if (!$inspection || $inspection->getCompany()->getId() !== $user->getCompany()?->getId()) {
9432|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9433|        }
9434|
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9436|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9437|        }
9438|
9439|        // TODO: This detail payload is the source used to hydrate the edit modal on the front-end.
9440|        return new JsonResponse([
9441|            'success' => true,
9442|            'inspection' => $this->serializeInspectionDetail($inspection),
9443|        ]);
9444|    }
9445|
9446|    public function viewInspection(int $id): Response
9447|    {
9448|        /** @var User|null $user */
9449|        $user = $this->getUser();
9450|        if (!$user) {
9451|            return $this->redirectToRoute('app_login');
9452|        }
9453|
9454|        $company = $user->getCompany();
9455|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9456|
9457|        if (!$inspection || !$company || $inspection->getCompany()->getId() !== $company->getId()) {
9458|            $this->addFlash('warning', 'Inspeção não encontrada.');
9459|
9460|            return $this->redirectToRoute('ssma_prevencao_index');
9461|        }
9462|
9463|        $request = $this->requestStack->getCurrentRequest();
9464|        if ($request instanceof Request) {
9465|            $this->bindSsmaPreventionProductToRequest($request);
9466|        }
9467|
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
9469|            $this->addFlash('warning', 'Inspeção não encontrada.');
9470|
9471|            return $this->redirectToRoute('ssma_prevencao_index');
9472|        }
9473|        $viewData    = $this->buildSsmaViewData(['module' => 'prevention']);
9474|        $detail      = $this->serializeInspectionDetail($inspection);
9475|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
9476|
9477|        /** @var SsmaAction[] $rawActions */
9478|        $rawActions = $this->entityManager->getRepository(SsmaAction::class)
9479|            ->findBy(['company' => $company, 'origem' => ActionOrigemEnum::INSPECAO, 'origemId' => $id], ['createdAt' => 'DESC']);
9480|
9481|        $inspectionActions = array_map(function (SsmaAction $a) use ($actionTypeLabels, $company, $user, $id): array {
9482|            $deadline = $a->getDeadline()?->format('Y-m-d');
9483|            $type = $a->getType() ?? '';
9484|
9485|            return array_merge([
9486|                'id'               => $a->getId(),
9487|                'title'            => $a->getTitle(),
9488|                'description'      => $a->getDescription() ?? '',
9489|                'type'             => $type,
9490|                'type_label'       => $actionTypeLabels[$type] ?? $type,
9491|                'responsible_ids'  => $a->getResponsibleIds() ?? [],
9492|                'validator_member_id' => $a->getValidatorMemberId(),
9493|                'deadline'         => $deadline,
9494|                'solved'           => $a->isSolved(),
9495|                'has_project'      => $a->isHasProject(),
9496|                'project_url'      => $a->isHasProject() && $a->getProjectId()
9497|                    ? '/projects/project_steps/' . $a->getProjectId()
9498|                    : '',
9499|                'project_start_date' => $a->getProjectStartDate()?->format('Y-m-d') ?? '',
9500|                'project_priority'   => $a->getProjectPriority() ?? '',
9501|                'control_hierarchy'  => $a->getControlHierarchy() ?? '',
9502|                'occurrence_id'    => null,
9503|                'event_id'         => null,
9504|            ], $this->resolveActionDeadlineEditMeta($a, $company, $user));
9505|        }, $rawActions);
9506|
9507|        // Qualidade: base estrutural (60 pts) + bônus qualitativo LLM (40 pts).
9508|        $qualityScore = 0;
9509|        // Estrutural — step1: campos preenchidos (40 pts)
9510|        if (!empty($detail['inspection_date']))                           $qualityScore += 10;
9511|        if (trim((string) ($detail['location'] ?? '')) !== '' && $detail['location'] !== 'Local padrão') $qualityScore += 10;
9512|        if (trim((string) ($detail['inspection_type'] ?? '')) !== '')     $qualityScore += 10;
9513|        if (!empty($detail['participants_ids']))                           $qualityScore += 10;
9514|        // Estrutural — step2: desvios com descrição (20 pts)
9515|        $hasDevTitle = false;
9516|        foreach ($detail['deviations'] ?? [] as $dev) {
9517|            if (trim((string) ($dev['title'] ?? '')) !== '') {
9518|                $hasDevTitle = true;
9519|            }
9520|        }
9521|        if ($hasDevTitle) {
9522|            $qualityScore += 20;
9523|        }
9524|        // Estrutural — step3/4: destaques e observações (20 pts)
9525|        $hasStrength = false;
9526|        foreach ($detail['strengths'] ?? [] as $str) {
9527|            if (trim((string) ($str['description'] ?? '')) !== '') { $hasStrength = true; break; }
9528|        }
9529|        if ($hasStrength) $qualityScore += 10;
9530|        if (mb_strlen(trim((string) ($detail['observations'] ?? ''))) >= 20) $qualityScore += 10;
9531|
9532|        // Qualitativo LLM — avalia o texto do primeiro desvio (título + situação) e observações (até 40 pts bônus)
9533|        $llmQualityBonus = 0;
9534|        $deviations = $detail['deviations'] ?? [];
9535|        if (!empty($deviations)) {
9536|            $firstDev = $deviations[0];
9537|            $devText  = trim(implode(' ', array_filter([
9538|                (string) ($firstDev['title'] ?? ''),
9539|            ])));
9540|            if (mb_strlen($devText) >= 15) {
9541|                $llmEval       = $this->ssmaInspectionLlmService->evaluateDescriptionQuality($devText, 'Não conformidade encontrada');
9542|                $llmScore      = $llmEval['score'] ?? 0;
9543|                $llmQualityBonus += (int) round(($llmScore / 100) * 25);
9544|            }
9545|        }
9546|        $obsText = trim((string) ($detail['observations'] ?? ''));
9547|        if (mb_strlen($obsText) >= 30) {
9548|            $llmObsEval       = $this->ssmaInspectionLlmService->evaluateDescriptionQuality($obsText, 'Observações finais');
9549|            $llmObsScore      = $llmObsEval['score'] ?? 0;
9550|            $llmQualityBonus += (int) round(($llmObsScore / 100) * 15);
9551|        }
9552|
9553|        $qualityScore = min(100, $qualityScore + $llmQualityBonus);
9554|        $qualityLabel = $qualityScore >= 70 ? 'Alta' : ($qualityScore >= 40 ? 'Média' : 'Baixa');
9555|
9556|        $classificationTagsMap = [];
9557|        foreach ($detail['deviations'] ?? [] as $dev) {
9558|            foreach ($dev['classification'] ?? [] as $cls) {
9559|                $classificationTagsMap[$cls] = true;
9560|            }
9561|        }
9562|        $strengthTagsMap = [];
9563|        foreach ($detail['strengths'] ?? [] as $str) {
9564|            $strengthTagsMap['Destaque'] = true;
9565|        }
9566|
9567|        return $this->render('ssma/prevention/inspection/index.html.twig', array_merge($viewData, [
9568|            'inspection'          => $detail,
9569|            'inspection_actions'  => $inspectionActions,
9570|            'action_type_labels'  => $actionTypeLabels,
9571|            'quality_score'       => $qualityScore,
9572|            'quality_label'       => $qualityLabel,
9573|            'deviation_tags'      => array_keys($classificationTagsMap),
9574|            'strength_tags'       => array_keys($strengthTagsMap),
9575|        ]));
9576|    }
9577|
9578|    public function viewAbordagem(int $id): Response
9579|    {
9580|        /** @var User|null $user */
9581|        $user = $this->getUser();
9582|        if (!$user) {
9583|            return $this->redirectToRoute('app_login');
9584|        }
9585|
9586|        $company   = $user->getCompany();
9587|        $abordagem = $this->entityManager->find(SsmaAbordagem::class, $id);
9588|
9589|        if (!$abordagem || !$company || $abordagem->getCompany()->getId() !== $company->getId()) {
9590|            $this->addFlash('warning', 'Abordagem não encontrada.');
9591|            return $this->redirectToRoute('ssma_prevencao_index');
9592|        }
9593|
9594|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
9595|            $this->addFlash('warning', 'Abordagem não encontrada.');
9596|            return $this->redirectToRoute('ssma_prevencao_index');
9597|        }
9598|
9599|        $viewData         = $this->buildSsmaViewData();
9600|        $detail           = $this->mapAbordagem($abordagem, true);
9601|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
9602|
9603|        /** @var SsmaAction[] $rawActions */
9604|        $rawActions = $this->entityManager->getRepository(SsmaAction::class)
9605|            ->findBy(['company' => $company, 'origem' => ActionOrigemEnum::ABORDAGEM, 'origemId' => $id], ['createdAt' => 'DESC']);
9606|
9607|        $membersById = $this->buildMembersById($company);
9608|
9609|        $abordagemActions = array_map(function (SsmaAction $a) use ($actionTypeLabels, $company, $user, $id): array {
9610|            $type = $a->getType() ?? '';

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 1330, "end_line": 1442}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 1330-1442
1330|        }
1331|
1332|        $links = $this->entityManager
1333|            ->getRepository(SsmaPermissionTagMember::class)
1334|            ->findBy(['companyMember' => $companyMember]);
1335|
1336|        foreach ($links as $link) {
1337|            if (!$link instanceof SsmaPermissionTagMember) {
1338|                continue;
1339|            }
1340|
1341|            $tag = $link->getTag();
1342|            if ($tag->getCompany()->getId() === $company->getId() && (string) $tag->getOccurrenceTypeKey() !== '') {
1343|                return true;
1344|            }
1345|        }
1346|
1347|        return false;
1348|    }
1349|
1350|    /**
1351|     * Espelha {@see MemberPermissionExtension::hasSsmaProductTagAssignment}: verifica se o membro
1352|     * tem um registro em PermissionTagByMember para o produto específico, independente do can_view da tag.
1353|     */
1354|    private function hasSsmaProductTagAssignmentForMember(CompanyMembers $companyMember, Product $product): bool
1355|    {
1356|        $ptbm = $this->entityManager->getRepository(\App\Entity\PermissionTagByMember::class)->findOneBy([
1357|            'companyMemberID' => $companyMember->getId(),
1358|            'productID'       => $product->getId(),
1359|        ]);
1360|        return $ptbm !== null;
1361|    }
1362|
1363|    private function getExplicitProductPermissionTagForMember(CompanyMembers $companyMember, Product $product): ?PermissionTag
1364|    {
1365|        $ptbm = $this->entityManager->getRepository(\App\Entity\PermissionTagByMember::class)->findOneBy([
1366|            'companyMemberID' => $companyMember->getId(),
1367|            'productID'       => $product->getId(),
1368|        ]);
1369|
1370|        if (!$ptbm instanceof \App\Entity\PermissionTagByMember) {
1371|            return null;
1372|        }
1373|
1374|        $tag = $this->entityManager->getRepository(PermissionTag::class)->find($ptbm->getTagID());
1375|
1376|        return $tag instanceof PermissionTag ? $tag : null;
1377|    }
1378|
1379|    /**
1380|     * Rotas de hub em que can_view em ssma-occurrences substitui tag ausente/sem leitura no subproduto da rota.
1381|     * Inclui Prevenção Ativa (somente leitura/filtro): Supervisor/Gestor de Equipe com can_view em
1382|     * ssma-occurrences pode acessar o painel — os dados são filtrados pela equipe no controller.
1383|     * Rotas de escrita (member_meta_save, global_metas POST) não entram aqui: requerem permissão explícita.
1384|     */
1385|    private function isSsmaReadHubRouteAllowingOccurrenceViewFallback(string $route): bool
1386|    {
1387|        return in_array($route, [
1388|            'ssma_cause_tree_index',
1389|            'ssma_cause_tree_view',
1390|            'ssma_cause_tree_data',
1391|            // Prevenção Ativa: supervisor/gestor de equipe acessa com limitação de equipe (somente leitura)
1392|            'ssma_prevencao_index',
1393|            'admin_ssma_prevencao_panel_filter',
1394|            'admin_ssma_prevencao_metas_filter',
1395|            'ssma_direito_recusa_index',
1396|            // Detalhe de abordagem e inspeção: acessível a quem tem can_view em ssma-occurrences
1397|            'ssma_abordagem_view',
1398|            'ssma_abordagem_get',
1399|            'ssma_inspection_view',
1400|            'admin_ssma_inspection_get',
1401|        ], true);
1402|    }
1403|
1404|    /**
1405|     * Rotas de escrita da árvore de causas acionadas pelo hub de ocorrências (botão "Causa").
1406|     * Gestor de Equipe com tag em ssma-occurrences pode mutar sem PTBM explícito em ssma-cause-tree
1407|     * — espelha {@see \App\Controller\SsmaController::canCreateSsmaCauseTree()}.
1408|     */
1409|    private function isSsmaCauseTreeHubMutationRoute(string $route): bool
1410|    {
1411|        return in_array($route, [
1412|            'ssma_cause_tree_tree_create',
1413|            'ssma_cause_tree_tree_update',
1414|            'ssma_cause_tree_tree_delete',
1415|            'ssma_cause_tree_node_create',
1416|            'ssma_cause_tree_node_update',
1417|            'ssma_cause_tree_node_delete',
1418|            'ssma_cause_tree_action_plan_node_update',
1419|        ], true);
1420|    }
1421|
1422|    private function getSsmaOccurrencesGestorEquipeTag(CompanyMembers $companyMember): ?PermissionTag
1423|    {
1424|        $occurrencesProduct = $this->entityManager->getRepository(Product::class)
1425|            ->findOneBy(['slug' => 'ssma-occurrences']);
1426|        if (!$occurrencesProduct) {
1427|            return null;
1428|        }
1429|
1430|        $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
1431|
1432|        return ($occurrencesTag !== null && $occurrencesTag->getName() === 'Gestor de Equipe')
1433|            ? $occurrencesTag
1434|            : null;
1435|    }
1436|
1437|    /**
1438|     * Rotas permitidas para quem tem canView=false no produto SSMA mas está ligado a pelo menos
1439|     * uma ocorrência ou evento (gestor, responsáveis, pessoas envolvidas, person_id em evento).
1440|     * Escritas continuam barradas por {@see hasActionPermission} com o tag real (canEdit/canCreate false).
1441|     */
1442|    private function isSsmaStakeholderOccurrenceRoute(string $route): bool

{"file_path": "src/Controller/SsmaController.php", "start_line": 12460, "end_line": 12680}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12460-12680
12460|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
12461|        // Reutiliza $ssmaProductTagName (já corrigido por memberIsSsmaGestorAdministrador).
12462|        $ssmaProductTagNameForRegister = $ssmaProductTagName;
12463|        $ssmaCanRegisterNewOccurrence = $this->isGranted('ROLE_SUPER_ADMIN')
12464|            || $this->isGranted('ROLE_MANAGER')
12465|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12466|            || \in_array($ssmaProductTagNameForRegister, ['Gestor de Equipe', 'Gestor Administrador'], true)
12467|            // Permissão padrão do Membro: registrar a própria ocorrência.
12468|            || $this->canMemberRegisterOwnOccurrence($company, $user);
12469|
12470|        $loggedMemberForOccurrence = ($company && $user instanceof User)
12471|            ? $this->getCurrentCompanyMember($company, $user)
12472|            : null;
12473|        $ssmaAllowedCreateTypes = ($company && $user instanceof User)
12474|            ? $this->ssmaOccurrenceCreatePermissionService->resolveAllowedCreateTypes(
12475|                $loggedMemberForOccurrence,
12476|                $user,
12477|                $company,
12478|                $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
12479|                $ssmaCanManageOccurrences,
12480|            )
12481|            : [];
12482|        if (!$ssmaCanRegisterNewOccurrence && $ssmaAllowedCreateTypes !== []) {
12483|            $ssmaCanRegisterNewOccurrence = true;
12484|        }
12485|
12486|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
12487|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
12488|        $occurrenceAreaFilterIds = $areaScope->isRestricted() ? $areaScope->areaIds() : null;
12489|        $actionPlanAreaScope = $this->getSsmaActionPlanAreaScope($company, $user);
12490|        $actionPlanAreaFilterIds = $actionPlanAreaScope->isRestricted() ? $actionPlanAreaScope->areaIds() : null;
12491|        $viewerTeamIds = $this->getSsmaViewerTeamIds();
12492|
12493|        // ── Detecção de Supervisor/Gestor de Equipe via tag SSMA ──────────────────────────────
12494|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
12495|        // funções baseadas em role. Identificamos o perfil pelo nome da tag para ajustar flags de UI.
12496|        $ssmaIsTagTeamSupervisor = in_array($ssmaProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12497|        $ssmaIsTagTeamGestor     = $ssmaProductTagName === 'Gestor de Equipe';
12498|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
12499|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
12500|        $ssmaIsPreventionTagTeamSupervisor = in_array($ssmaPreventionProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12501|        $ssmaIsPreventionTagTeamGestor = $ssmaPreventionProductTagName === 'Gestor de Equipe';
12502|
12503|        // Painel + Metas: libera para Sup/G. de Equipe/Área e Gestor Administrador (ocorrências + ssma-prevention)
12504|        if (!$ssmaCanAccessPreventionPanelAndMetas
12505|            && (
12506|                $ssmaIsTagTeamSupervisor
12507|                || $ssmaIsTagTeamGestor
12508|                || $ssmaIsTagAreaSupervisor
12509|                || $ssmaIsTagAreaGestor
12510|                || $ssmaProductTagName === 'Gestor Administrador'
12511|                || $ssmaIsPreventionTagTeamSupervisor
12512|                || $ssmaIsPreventionTagTeamGestor
12513|                || $ssmaPreventionProductTagName === 'Gestor Administrador'
12514|            )
12515|        ) {
12516|            $ssmaCanAccessPreventionPanelAndMetas = true;
12517|        }
12518|
12519|        // Membro/Inspetor (pessoa física / Palloma): não acessa Painel nem Metas.
12520|        // Conta admin empresa sem ROLE_USER (Aura), Tenant e SUPER_ADMIN mantêm — mesmo contrato das abas de Ocorrências.
12521|        if (SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
12522|            $ssmaProductTagName,
12523|            $this->isGranted('ROLE_SUPER_ADMIN'),
12524|            $this->isGranted('ROLE_TENANT'),
12525|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
12526|        )) {
12527|            $ssmaCanAccessPreventionPanelAndMetas = false;
12528|        }
12529|
12530|        // Modal + Evento: título/status ocultos na criação para todos os perfis (Figma Etapa 0).
12531|        // Na edição o JS (evApplyAuraTitleStatusVisibility) reexibe conforme o modo.
12532|        $ssmaHideEventTitleStatusOnCreate = true;
12533|
12534|        // ssmaIsTeamViewer: true quando o usuário opera com escopo de equipe (via role SSMA OU via tag SSMA)
12535|        // Usado para sinalizar ao template que os dados estáo limitados ?? equipe.
12536|        $ssmaIsTeamViewerFlag = $viewerTeamIds !== null || $ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor
12537|            || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor;
12538|
12539|        // ssmaCanCreatePreventionItems: Gestor de Equipe/Área e Gestor Administrador via tag SSMA
12540|        // também podem registrar inspeções/abordagens (ssmaCanManageOccurrences = true via tag).
12541|        $ssmaCanCreatePreventionItems = (
12542|            $this->isGranted('ROLE_SUPER_ADMIN')
12543|            || $this->isGranted('ROLE_MANAGER')
12544|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12545|            || (
12546|                $ssmaCanManageOccurrences
12547|                && ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor || $ssmaProductTagName === 'Gestor Administrador')
12548|            )
12549|        );
12550|
12551|        // ssmaCanEditPreventionContent: controla botões Editar/Finalizar/Deletar em inspeções e abordagens
12552|        // e o botão "Configuração" na aba Metas.
12553|        // Supervisor registra/edita o próprio conteúdo (can_mutate por item); gestão edita todos.
12554|        $ssmaCanEditPreventionContent = $ssmaCanManageOccurrences
12555|            && !$this->isSsmaViewer()
12556|            && !$ssmaIsTagTeamSupervisor
12557|            && !$ssmaIsTagAreaSupervisor;
12558|        $ssmaPreventionMutateOwnOnly = false;
12559|
12560|        // Configurações da aba Prevenção Ativa: Sup/Gestor de Equipe ou Área não acessam (planilha: "Não acessa")
12561|        if ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor) {
12562|            $ssmaCanManageConfig = false;
12563|        }
12564|
12565|        // G. Equipe via tag SSMA pode criar ação (Plano de Ação).
12566|        // Árvore de causas: {@see canCreateSsmaCauseTree()} já cobre Gestor de Equipe.
12567|        if ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor) {
12568|            $ssmaCanCreateLinkedActions = true;
12569|        }
12570|
12571|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
12572|        $ssmaCanEditPreventionMetasTable = $company && $user instanceof User
12573|            && $this->canEditPreventionMetasTableForCurrentUser($company, $user);
12574|
12575|        // ssmaPreventionCanCreateLinkedActions: botão "Criar ação" em Inspeções e Abordagem.
12576|        // Alinhado com ssmaCanCreateLinkedActions (Plano de Ações): quem não pode criar
12577|        // ação no Plano de Ações também não pode criar em inspeção/abordagem/árvore.
12578|        $ssmaPreventionCanCreateLinkedActions = $ssmaCanCreateLinkedActions;
12579|
12580|        $teamsForEventModal = $teams;
12581|        $allMembersForEventPeople = $allMembers;
12582|        $gestoresForEventModal = $company
12583|            ? $this->buildSsmaEventModalGestores($company, $allMembers, $gestores, null)
12584|            : $gestores;
12585|
12586|        $ssmaEventFormDefaults = ['manager_id' => null, 'team_id' => null];
12587|        $applyTeamEventScope = $occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== [];
12588|
12589|        // Supervisor/Gestor de Equipe: filtra modais pelas equipes do cadastro (lista vazia = sem equipe — não zera selects).
12590|        if ($applyTeamEventScope) {
12591|            $teamIdStrScope = array_map('strval', $occurrenceTeamFilterIds);
12592|            $teamsForEventModal = array_values(array_filter(
12593|                $teams,
12594|                static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $teamIdStrScope, true)
12595|            ));
12596|            $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
12597|            $allMembersForEventPeople = array_values(array_filter(
12598|                $allMembers,
12599|                static fn (array $m): bool => isset($allowedMemberMap[(int) ($m['id'] ?? 0)])
12600|            ));
12601|            // Gestor responsável: escopo da empresa (tags/roles), não só membros da equipe do supervisor
12602|            $gestoresForEventModal = $this->buildSsmaEventModalGestores(
12603|                $company,
12604|                $allMembers,
12605|                $gestores,
12606|                null
12607|            );
12608|            $ssmaEventFormDefaults['team_id'] = (int) $occurrenceTeamFilterIds[0];
12609|            $currentMemberForDefaults = $this->getCurrentCompanyMember($company, $user);
12610|            $currentMemberIdForDefaults = (int) ($currentMemberForDefaults?->getId() ?? 0);
12611|            if ($currentMemberIdForDefaults > 0) {
12612|                foreach ($gestoresForEventModal as $gRow) {
12613|                    if ((int) ($gRow['id'] ?? 0) === $currentMemberIdForDefaults) {
12614|                        $ssmaEventFormDefaults['manager_id'] = $currentMemberIdForDefaults;
12615|                        break;
12616|                    }
12617|                }
12618|            }
12619|        }
12620|
12621|        if ($occurrenceAreaFilterIds !== null) {
12622|            $areaMemberIds = $areaScope->allowedMemberIds();
12623|            $teamsForEventModal = array_values(array_filter(
12624|                $teamsForEventModal,
12625|                static fn (array $t): bool => $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12626|            ));
12627|            $allMembersForEventPeople = array_values(array_filter(
12628|                $allMembersForEventPeople,
12629|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12630|            ));
12631|            $gestoresForEventModal = array_values(array_filter(
12632|                $gestoresForEventModal,
12633|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12634|            ));
12635|            $applyTeamEventScope = true;
12636|            if ($teamsForEventModal !== []) {
12637|                $ssmaEventFormDefaults['team_id'] = (int) ($teamsForEventModal[0]['id'] ?? 0) ?: $ssmaEventFormDefaults['team_id'];
12638|            }
12639|        }
12640|
12641|        if ($actionPlanAreaFilterIds !== null) {
12642|            $actionPlanMemberIds = $actionPlanAreaScope->allowedMemberIds();
12643|            $allMembersForEventPeople = array_values(array_filter(
12644|                $allMembersForEventPeople,
12645|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12646|            ));
12647|            $gestoresForEventModal = array_values(array_filter(
12648|                $gestoresForEventModal,
12649|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12650|            ));
12651|            $applyTeamEventScope = true;
12652|        }
12653|
12654|        // Fallback final: gestor responsável usa escopo da empresa (não só equipe do supervisor).
12655|        if ($gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12656|            $gestoresForEventModal = $allMembers !== [] ? $allMembers : $allMembersForEventPeople;
12657|        }   
12658|        if ($gestores === [] && $allMembers !== []) {
12659|            $gestores = $allMembers;
12660|        }
12661|        if ($company && $gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12662|            $gestoresForEventModal = $this->mergeGestoresFromOccurrenceManagerIds(
12663|                $company,
12664|                $allMembers,
12665|                $occurrences,
12666|                $gestoresForEventModal
12667|            );
12668|        }
12669|        $gestoresForEventModal = $this->enrichSsmaMemberRowsWithTeamMeta(
12670|            $gestoresForEventModal,
12671|            $teamNameByMemberId ?? []
12672|        );
12673|       
12674|
12675|        // Inspeção — equipe no modal: gestão vê escopo/lista completa; Membro só suas equipes (auto se uma).
12676|        // Mesmo contrato Palloma vs Aura das abas: tenant/SUPER_ADMIN/ROLE_MANAGER sem ROLE_USER
12677|        // com tag Membro não entram no recorte de pessoa física.
12678|        $teamsForInspectionModal = $applyTeamEventScope ? $teamsForEventModal : $teams;
12679|        $defaultInspectionTeamId = null;
12680|        $ssmaIsPlainPreventionMember = $ssmaIsPlainProductMemberUi

{"file_path": "src/Controller/SsmaController.php", "start_line": 9820, "end_line": 10040}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9820-10040
9820|            $payload['inspection'] = $this->serializeInspection($inspection, $membersById);
9821|            $payload['inspection']['can_mutate'] = $this->canMutateExistingInspection($inspection, $company, $user);
9822|        } catch (\Throwable $e) {
9823|            // Persistiu; o front recarrega se o payload de UI falhar.
9824|        }
9825|
9826|        return new JsonResponse($payload);
9827|    }
9828|
9829|    private function isSsmaViewer(): bool
9830|    {
9831|        $tag = null;
9832|        $user = $this->getUser();
9833|        $member = null;
9834|        if ($user instanceof User) {
9835|            $company = $this->getSsmaCompany() ?? $user->getCompany();
9836|            $member = $company instanceof Company ? $this->getCurrentCompanyMember($company, $user) : null;
9837|            if ($this->memberIsSsmaGestorAdministrador($member)) {
9838|                return false;
9839|            }
9840|            if ($member) {
9841|                $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9842|            }
9843|        }
9844|
9845|        // Supervisor global via Symfony role
9846|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
9847|            && !$this->isGranted('ROLE_MANAGER')
9848|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
9849|            && !$this->isGranted('ROLE_SUPER_ADMIN')
9850|        ) {
9851|            return true;
9852|        }
9853|
9854|        // Supervisor via tag SSMA de produto (can_view=true, sem permissões de escrita).
9855|        // Cobre tags como "Supervisor" ou qualquer tag com can_view=1 e can_create/edit/delete=0,
9856|        // atribuídas diretamente ao produto SSMA sem alterar a role global do usuário.
9857|        //
9858|        // IMPORTANTE: verificar a PermissionTag real da DB (não só os request attributes).
9859|        // setSsmaTechnicalOccurrenceAttributes() define can_view=true nos attributes para stakeholders/técnicos
9860|        // cujo PermissionTag real tem can_view=false. Esses usuários NÃO são viewers reais — são membros
9861|        // com acesso técnico especial. Se só checássemos os attributes, eles bypassariam o filtro de membro.
9862|        $tag = $member instanceof CompanyMembers
9863|            ? $this->resolveSsmaProductPermissionTagForMember($member)
9864|            : null;
9865|        if ($tag instanceof \App\Entity\PermissionTag) {
9866|            if (!($tag->getCanView() ?? false)) {
9867|                return false;
9868|            }
9869|
9870|            return !($tag->getCanCreate() ?? false)
9871|                && !($tag->getCanEdit() ?? false)
9872|                && !($tag->getCanDelete() ?? false);
9873|        }
9874|
9875|        $request = $this->requestStack->getCurrentRequest();
9876|        if (!$request) {
9877|            return false;
9878|        }
9879|
9880|        $permTag = $request->attributes->get('permission_tag');
9881|        if ($permTag instanceof \App\Entity\PermissionTag && !($permTag->getCanView() ?? false)) {
9882|            return false;
9883|        }
9884|
9885|        return (bool) $request->attributes->get('can_view', false)
9886|            && !(bool) $request->attributes->get('can_create', false)
9887|            && !(bool) $request->attributes->get('can_edit', false)
9888|            && !(bool) $request->attributes->get('can_delete', false);
9889|    }
9890|
9891|    /**
9892|     * Retorna IDs das equipes do usuário logado quando ele ?? Supervisor de Equipe na Área SSMA atual.
9893|     * Ex.: Ocorrências pode ser Supervisor enquanto Prevenção ?? Gestor Administrador.
9894|     *
9895|     * Usa a tag vinculada ao produto/Área SSMA (PermissionTagByMember), não a tag global do colaborador,
9896|     * para não aplicar filtro por equipe a quem ?? Gestor Administrador (ou outro perfil) só no SSMA
9897|     * enquanto a tag global/organizacional permanece "Supervisor de Equipe".
9898|     *
9899|     * Também escopo empresa correta: nunca usar findOneBy(user) sem company (multi-empresa).
9900|     *
9901|     * @return int[]|null
9902|     */
9903|    private function getSsmaViewerTeamIds(): ?array
9904|    {
9905|        if (!$this->isSsmaViewer()) {
9906|            return null;
9907|        }
9908|
9909|        /** @var User|null $user */
9910|        $user = $this->getUser();
9911|        if (!$user instanceof User) {
9912|            return null;
9913|        }
9914|
9915|        $company = $user->getCompany();
9916|        if (!$company) {
9917|            return null;
9918|        }
9919|
9920|        $member = $this->entityManager->getRepository(CompanyMembers::class)
9921|            ->findOneBy(['user' => $user, 'company' => $company, 'isRemoved' => 0]);
9922|
9923|        if (!$member) {
9924|            return null;
9925|        }
9926|
9927|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9928|        if (!$tag || !in_array($tag->getName(), ['Supervisor de Equipe', 'Supervisor'], true)) {
9929|            return null;
9930|        }
9931|
9932|        return $this->parseCompanyMemberTeamIds($member);
9933|    }
9934|
9935|    /**
9936|     * @return int[]
9937|     */
9938|    private function parseCompanyMemberTeamIds(CompanyMembers $member): array
9939|    {
9940|        $teamsRaw = $member->getTeams() ?? '';
9941|        if ($teamsRaw === '') {
9942|            return [];
9943|        }
9944|
9945|        return array_values(array_filter(
9946|            array_map('intval', array_map('trim', explode(',', $teamsRaw)))
9947|        ));
9948|    }
9949|
9950|    /**
9951|     * IDs das equipes para filtrar ocorrências (e correlatos) no hub SSMA.
9952|     *
9953|     * - Tag do produto com {@see PermissionTag::getTeamLimitation()} = true → filtra pelas equipes do cadastro
9954|     *   do membro (lista vazia = não vê ocorrências de outras equipes).
9955|     * - Tags **Gestor de Equipe** e **Supervisor de Equipe** no produto atual: escopo pelas equipes do
9956|     *   cadastro do membro (mesmo se `team_limitation` estiver incorreto na base).
9957|     * - Supervisor de Equipe (viewer) continua coberto por {@see getSsmaViewerTeamIds()} quando a tag
9958|     *   por produto não reflete team_limitation (legado).
9959|     * - Colaborador sem equipe no cadastro e sem ser Gestor Administrador no produto (ex.: tag "Supervisor"
9960|     *   com team_limitation = 0) → escopo vazio {@see []}, para não listar ocorrências alheias.
9961|     *
9962|     * @return int[]|null null = sem filtro por equipe nesta tela
9963|     */
9964|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array
9965|    {
9966|        if (!$company || !$user instanceof User) {
9967|            return null;
9968|        }
9969|
9970|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
9971|            return null;
9972|        }
9973|
9974|        $member = $this->getCurrentCompanyMember($company, $user);
9975|        if (!$member) {
9976|            return null;
9977|        }
9978|
9979|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9980|        // 'Supervisor' puro (sem "de Equipe") ?? supervisor global: sem restrição de equipe, igual ao Gestor Administrador.
9981|        if ($tag && in_array($tag->getName(), ['Gestor Administrador', 'Supervisor'], true)) {
9982|            return null;
9983|        }
9984|
9985|        $parsed = $this->parseCompanyMemberTeamIds($member);
9986|
9987|        if ($tag && in_array($tag->getName(), $this->ssmaTeamScopePermissionTagNames(), true)) {
9988|            return $parsed;
9989|        }
9990|
9991|        if ($tag && $tag->getTeamLimitation()) {
9992|            return $parsed;
9993|        }
9994|
9995|        $viewerTeams = $this->getSsmaViewerTeamIds();
9996|        if ($viewerTeams !== null) {
9997|            return $viewerTeams;
9998|        }
9999|
10000|        // Membro sem tag de supervisão/gestão SSMA (ex.: stakeholder via ocorrência) não deve
10001|        // ter filtro de equipe aplicado: retorna null para que filterOccurrencesForMember
10002|        // mostre apenas o conteúdo próprio. Retornar [] zeraria todos os dados antes disso.
10003|        if ($tag !== null && $parsed === []) {
10004|            if ($this->resolveCurrentUserTechnicalTypes($company, $user) !== []) {
10005|                return [];
10006|            }
10007|
10008|            return null;
10009|        }
10010|
10011|        return null;
10012|    }
10013|
10014|    /**
10015|     * Recorte de área do usuário logado na Prevenção Ativa.
10016|     *
10017|     * Fonte única para listagem, busca, detalhe e gravação: um escopo não restrito libera tudo,
10018|     * um escopo restrito com conjunto vazio nega tudo. Não existe estado intermediário em que
10019|     * a ausência de área cadastrada remova o filtro.
10020|     */
10021|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10022|    {
10023|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-prevention');
10024|    }
10025|
10026|    /**
10027|     * Recorte de área do produto Plano de Ação (`ssma-action-plan`).
10028|     * Independente da tag de Prevenção: a tag do hub é a que vale na tela.
10029|     */
10030|    private function getSsmaActionPlanAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10031|    {
10032|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-action-plan');
10033|    }
10034|
10035|    private function getSsmaAreaScopeForProduct(
10036|        ?Company $company,
10037|        ?User $user,
10038|        string $productSlug,
10039|    ): SsmaPreventionAreaScope {
10040|        if (!$company || !$user instanceof User) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 10040, "end_line": 10130}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10040-10130
10040|        if (!$company || !$user instanceof User) {
10041|            return SsmaPreventionAreaScope::unrestricted();
10042|        }
10043|
10044|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10045|        $member = $this->getCurrentCompanyMember($company, $user);
10046|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, $productSlug) : null;
10047|
10048|        return $this->ssmaPreventionAreaAuthorization
10049|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10050|    }
10051|
10052|    /**
10053|     * Interseção dos recortes de área de Prevenção e Plano de Ação.
10054|     * null = nenhum dos dois limita; mapa vazio = limita e nega tudo.
10055|     *
10056|     * @return array<int, true>|null
10057|     */
10058|    private function getSsmaCombinedAreaMemberIds(?Company $company, ?User $user): ?array
10059|    {
10060|        $allowed = null;
10061|        foreach ([
10062|            $this->getSsmaPreventionAreaScope($company, $user),
10063|            $this->getSsmaActionPlanAreaScope($company, $user),
10064|        ] as $scope) {
10065|            if (!$scope->isRestricted()) {
10066|                continue;
10067|            }
10068|            $areaMap = $scope->allowedMemberIds();
10069|            $allowed = $allowed === null ? $areaMap : array_intersect_key($allowed, $areaMap);
10070|        }
10071|
10072|        return $allowed;
10073|    }
10074|
10075|    /**
10076|     * @return list<int>
10077|     */
10078|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10079|    {
10080|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10081|    }
10082|
10083|    /**
10084|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10085|     */
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10087|    {
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10089|            $this->getSsmaPreventionAreaScope($company, $user),
10090|            $inspection
10091|        );
10092|    }
10093|
10094|    /**
10095|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).
10096|     */
10097|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10098|    {
10099|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
10100|            $this->getSsmaPreventionAreaScope($company, $user),
10101|            $abordagem
10102|        );
10103|    }
10104|
10105|    /**
10106|     * Quem não vê a ação na listagem também não abre, edita nem apaga pelo ID.
10107|     * Interseção: se Prevenção ou Plano de Ação limitar, os dois recortes precisam passar.
10108|     */
10109|    private function canViewSsmaActionUnderAreaScope(SsmaAction $action, ?Company $company, ?User $user): bool
10110|    {
10111|        return $this->ssmaPreventionAreaAuthorization->canViewAction(
10112|            $this->getSsmaPreventionAreaScope($company, $user),
10113|            $action
10114|        ) && $this->ssmaPreventionAreaAuthorization->canViewAction(
10115|            $this->getSsmaActionPlanAreaScope($company, $user),
10116|            $action
10117|        );
10118|    }
10119|
10120|    /**
10121|     * @param array<string, mixed> $data
10122|     */
10123|    private function validateSsmaActionPayloadAgainstAreaScope(array $data, Company $company, User $user): ?string
10124|    {
10125|        foreach ([
10126|            $this->getSsmaPreventionAreaScope($company, $user),
10127|            $this->getSsmaActionPlanAreaScope($company, $user),
10128|        ] as $scope) {
10129|            $error = $this->ssmaPreventionAreaAuthorization->validateActionPayload($scope, $company, $data);
10130|            if ($error !== null) {

{"file_path": "src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php", "start_line": 1, "end_line": 200}

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php (Total lines: 502)
IS_TRUNCATED: false
LINE_RANGE: 1-200
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyArea;
9|use App\Entity\CompanyMemberArea;
10|use App\Entity\CompanyMembers;
11|use App\Entity\CompanyTeam;
12|use App\Entity\PermissionTag;
13|use App\Entity\SsmaAbordagem;
14|use App\Entity\SsmaAction;
15|use App\Entity\SsmaInspection;
16|use Doctrine\ORM\EntityManagerInterface;
17|
18|/**
19| * Autorização da Prevenção Ativa quando a tag do membro limita por área.
20| *
21| * Resolve o recorte uma única vez ({@see resolveScope}) e responde às três perguntas que
22| * antes estavam espalhadas pelo controller: o que listar, o que pode ser aberto por ID e o
23| * que pode ser gravado. A travessia da árvore continua em {@see SsmaAreaLimitationScope}.
24| */
25|class SsmaPreventionAreaAuthorizationService
26|{
27|    public function __construct(private EntityManagerInterface $entityManager)
28|    {
29|    }
30|
31|    public function resolveScope(
32|        Company $company,
33|        ?CompanyMembers $member,
34|        ?PermissionTag $tag,
35|        bool $isPlatformAdmin,
36|    ): SsmaPreventionAreaScope {
37|        if ($isPlatformAdmin || !$member instanceof CompanyMembers) {
38|            return SsmaPreventionAreaScope::unrestricted();
39|        }
40|
41|        if (!SsmaAreaLimitationScope::shouldApplyAreaLimitation(
42|            $tag?->getName(),
43|            $tag?->getAreaLimitation(),
44|            $isPlatformAdmin
45|        )) {
46|            return SsmaPreventionAreaScope::unrestricted();
47|        }
48|
49|        $areaIds = SsmaAreaLimitationScope::expandWithDescendants(
50|            $this->loadAreaParentMap($company),
51|            $this->memberAreaIds($member)
52|        );
53|
54|        [$teamIds, $teamIdsWithoutArea] = $this->splitCompanyTeamsByArea($company, $areaIds);
55|        $memberIds = $this->collectMemberIdsInScope($company, $areaIds, $teamIds);
56|
57|        // O próprio membro sempre se enxerga, mesmo sem área cadastrada.
58|        $selfId = (int) ($member->getId() ?? 0);
59|        if ($selfId > 0) {
60|            $memberIds[] = $selfId;
61|        }
62|
63|        return SsmaPreventionAreaScope::restricted(
64|            $areaIds,
65|            array_values(array_unique($memberIds)),
66|            $teamIds,
67|            $teamIdsWithoutArea
68|        );
69|    }
70|
71|    /**
72|     * Áreas vinculadas ao membro; sem vínculo, cai para o departamento do cadastro.
73|     *
74|     * @return list<int>
75|     */
76|    public function memberAreaIds(CompanyMembers $member): array
77|    {
78|        $ids = [];
79|        foreach ($member->getMemberAreas() as $memberArea) {
80|            if (!$memberArea instanceof CompanyMemberArea) {
81|                continue;
82|            }
83|            $areaId = (int) ($memberArea->getCompanyArea()?->getId() ?? 0);
84|            if ($areaId > 0) {
85|                $ids[$areaId] = $areaId;
86|            }
87|        }
88|
89|        if ($ids === []) {
90|            $departmentId = (int) ($member->getDepartment()?->getId() ?? 0);
91|            if ($departmentId > 0) {
92|                $ids[$departmentId] = $departmentId;
93|            }
94|        }
95|
96|        return array_values($ids);
97|    }
98|
99|    // ─── Leitura ─────────────────────────────────────────────────────────────────────────────
100|
101|    public function canViewInspection(SsmaPreventionAreaScope $scope, SsmaInspection $inspection): bool
102|    {
103|        if (!$scope->isRestricted()) {
104|            return true;
105|        }
106|
107|        $teamId = (int) ($inspection->getTeam()?->getId() ?? 0);
108|        if ($scope->allowsTeam($teamId)) {
109|            return true;
110|        }
111|
112|        // Equipe com área conhecida fora do recorte esconde o registro: pessoa no recorte
113|        // não pode reabrir o que a interseção equipe ∩ área já negou.
114|        if ($scope->teamIsOutsideArea($teamId)) {
115|            return false;
116|        }
117|
118|        foreach ($this->inspectionRelatedMemberIds($inspection) as $memberId) {
119|            if ($scope->allowsMember($memberId)) {
120|                return true;
121|            }
122|        }
123|
124|        return false;
125|    }
126|
127|    public function canViewAbordagem(SsmaPreventionAreaScope $scope, SsmaAbordagem $abordagem): bool
128|    {
129|        if (!$scope->isRestricted()) {
130|            return true;
131|        }
132|
133|        // Mesmo critério da listagem ({@see SsmaAreaLimitationScope::filterAbordagensByMemberIds}):
134|        // é o observador que ancora a abordagem na área.
135|        return $scope->allowsMember((int) ($abordagem->getObservadorId() ?? 0));
136|    }
137|
138|    /**
139|     * Mesmo critério da listagem do Plano de Ação: entra se o validador ou algum
140|     * responsável está no recorte. Escopo vazio nega tudo.
141|     */
142|    public function canViewAction(SsmaPreventionAreaScope $scope, SsmaAction $action): bool
143|    {
144|        if (!$scope->isRestricted()) {
145|            return true;
146|        }
147|
148|        $validatorMemberId = (int) ($action->getValidatorMemberId() ?? 0);
149|        if ($scope->allowsMember($validatorMemberId)) {
150|            return true;
151|        }
152|
153|        foreach ($action->getResponsibleIds() as $responsibleId) {
154|            if ($scope->allowsMember((int) $responsibleId)) {
155|                return true;
156|            }
157|        }
158|
159|        return false;
160|    }
161|
162|    /**
163|     * @return list<int>
164|     */
165|    private function inspectionRelatedMemberIds(SsmaInspection $inspection): array
166|    {
167|        $ids = [
168|            (int) ($inspection->getCreatorMeta()['created_by_id'] ?? 0),
169|            (int) ($inspection->getSafetyResponsible()?->getId() ?? 0),
170|        ];
171|
172|        foreach ($inspection->getParticipantsIds() as $participantId) {
173|            $ids[] = (int) $participantId;
174|        }
175|        foreach ($inspection->getCompanionIds() as $companionId) {
176|            $ids[] = (int) $companionId;
177|        }
178|
179|        return array_values(array_filter($ids, static fn (int $id): bool => $id > 0));
180|    }
181|
182|    // ─── Gravação ────────────────────────────────────────────────────────────────────────────
183|
184|    /**
185|     * area_limitation: equipe é opcional — o recorte segue as pessoas da gerência.
186|     * Equipe de outra área só é recusada quando permanece no payload (interseção com
187|     * team_limitation). Sem equipe, ou equipe sem área cadastrada, a gravação segue as pessoas.
188|     *
189|     * @param array<string, mixed> $data payload cru de {@see SsmaController::createInspection}
190|     */
191|    public function validateInspectionPayload(
192|        SsmaPreventionAreaScope $scope,
193|        Company $company,
194|        array $data,
195|        ?int $resolvedTeamId,
196|    ): ?string {
197|        if (!$scope->isRestricted()) {
198|            return null;
199|        }
200|

{"file_path": "src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php", "start_line": 200, "end_line": 502}

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php (Total lines: 502)
IS_TRUNCATED: false
LINE_RANGE: 200-502
200|
201|        $teamError = $this->validateTeamId($scope, $company, $resolvedTeamId);
202|        if ($teamError !== null) {
203|            return $teamError;
204|        }
205|
206|        $memberIds = [];
207|        if (!empty($data['safety_responsible_id'])) {
208|            $memberIds[] = (int) $data['safety_responsible_id'];
209|        }
210|        foreach ((array) ($data['participants_ids'] ?? []) as $participantId) {
211|            $memberIds[] = (int) $participantId;
212|        }
213|        foreach ((array) ($data['companion_ids'] ?? []) as $companionId) {
214|            $memberIds[] = (int) $companionId;
215|        }
216|        foreach ((array) ($data['deviations'] ?? []) as $deviation) {
217|            if (!is_array($deviation)) {
218|                continue;
219|            }
220|            if (!empty($deviation['responsible_id'])) {
221|                $memberIds[] = (int) $deviation['responsible_id'];
222|            }
223|        }
224|
225|        return $this->validateMemberIds($scope, $company, $memberIds);
226|    }
227|
228|    /**
229|     * @param array<string, mixed> $data payload cru de {@see SsmaController::salvarAbordagem}
230|     */
231|    public function validateAbordagemPayload(
232|        SsmaPreventionAreaScope $scope,
233|        Company $company,
234|        array $data,
235|    ): ?string {
236|        if (!$scope->isRestricted()) {
237|            return null;
238|        }
239|
240|        $observadorId = isset($data['observador_id']) ? (int) $data['observador_id'] : 0;
241|        $observadorError = $this->validateMemberIds($scope, $company, [$observadorId]);
242|        if ($observadorError !== null) {
243|            return $observadorError;
244|        }
245|        if ($observadorId <= 0) {
246|            return 'O colaborador informado não está no recorte da sua área.';
247|        }
248|
249|        $memberIds = [];
250|        foreach ($this->normalizeIdList($data['colaboradores_ids'] ?? []) as $colaboradorId) {
251|            $memberIds[] = $colaboradorId;
252|        }
253|        if (!empty($data['coach_member_id'])) {
254|            $memberIds[] = (int) $data['coach_member_id'];
255|        }
256|        if (!empty($data['medida_responsavel_id'])) {
257|            $memberIds[] = (int) $data['medida_responsavel_id'];
258|        }
259|
260|        return $this->validateMemberIds($scope, $company, $memberIds);
261|    }
262|
263|    /**
264|     * @param array<string, mixed> $data payload cru de {@see SsmaController::createAction}
265|     */
266|    public function validateActionPayload(
267|        SsmaPreventionAreaScope $scope,
268|        Company $company,
269|        array $data,
270|    ): ?string {
271|        if (!$scope->isRestricted()) {
272|            return null;
273|        }
274|
275|        $memberIds = $this->normalizeIdList($data['responsible_ids'] ?? []);
276|        $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
277|        if ($validatorMemberId > 0) {
278|            $memberIds[] = $validatorMemberId;
279|        }
280|
281|        return $this->validateMemberIds($scope, $company, $memberIds);
282|    }
283|
284|    /**
285|     * Com area_limitation a equipe não é obrigatória. Se vier preenchida, precisa existir na
286|     * empresa da sessão e não ter área conhecida fora do recorte. Equipe sem área cadastrada
287|     * não esconde o registro na listagem — a gravação segue o mesmo critério.
288|     */
289|    public function validateTeamId(SsmaPreventionAreaScope $scope, Company $company, ?int $teamId): ?string
290|    {
291|        if (!$scope->isRestricted()) {
292|            return null;
293|        }
294|
295|        if ($teamId === null || $teamId <= 0) {
296|            return null;
297|        }
298|
299|        $denied = 'A equipe informada não está disponível para o recorte da sua área.';
300|        $team = $this->entityManager->getRepository(CompanyTeam::class)
301|            ->findOneBy(['id' => $teamId, 'company' => $company]);
302|        if (!$team instanceof CompanyTeam) {
303|            return $denied;
304|        }
305|
306|        if ($scope->allowsTeam($teamId) || $scope->teamHasNoArea($teamId)) {
307|            return null;
308|        }
309|
310|        return $denied;
311|    }
312|
313|    /**
314|     * area_limitation sozinha: descarta equipe de outra gerência inferida do cadastro da pessoa,
315|     * para a inspeção ficar no recorte pelas pessoas. Com team_limitation junto, mantém a equipe
316|     * para a validação de área recusar — é a interseção dos dois recortes.
317|     */
318|    public function resolveWritableInspectionTeamId(
319|        SsmaPreventionAreaScope $scope,
320|        ?int $teamId,
321|        bool $hasTeamLimitation,
322|    ): ?int {
323|        $teamId = $teamId !== null && $teamId > 0 ? $teamId : null;
324|        if (!$scope->isRestricted() || $teamId === null) {
325|            return $teamId;
326|        }
327|
328|        if ($scope->allowsTeam($teamId) || $scope->teamHasNoArea($teamId)) {
329|            return $teamId;
330|        }
331|
332|        return $hasTeamLimitation ? $teamId : null;
333|    }
334|
335|    /**
336|     * Cada membro precisa existir na empresa da sessão e ter área dentro do recorte.
337|     *
338|     * @param list<int> $memberIds
339|     */
340|    public function validateMemberIds(SsmaPreventionAreaScope $scope, Company $company, array $memberIds): ?string
341|    {
342|        if (!$scope->isRestricted()) {
343|            return null;
344|        }
345|
346|        $denied = 'O colaborador informado não está no recorte da sua área.';
347|        foreach (array_unique(array_map('intval', $memberIds)) as $memberId) {
348|            if ($memberId <= 0) {
349|                continue;
350|            }
351|            if (!$scope->allowsMember($memberId)) {
352|                return $denied;
353|            }
354|            $member = $this->entityManager->getRepository(CompanyMembers::class)
355|                ->findOneBy(['id' => $memberId, 'company' => $company]);
356|            if (!$member instanceof CompanyMembers) {
357|                return $denied;
358|            }
359|        }
360|
361|        return null;
362|    }
363|
364|    /**
365|     * @param mixed $raw lista de IDs ou JSON serializado (o tag-select envia string)
366|     *
367|     * @return list<int>
368|     */
369|    private function normalizeIdList(mixed $raw): array
370|    {
371|        if (is_string($raw)) {
372|            $decoded = json_decode($raw, true);
373|            $raw = is_array($decoded) ? $decoded : [];
374|        }
375|
376|        return array_values(array_filter(array_map('intval', (array) $raw), static fn (int $id): bool => $id > 0));
377|    }
378|
379|    // ─── Carga de dados ──────────────────────────────────────────────────────────────────────
380|
381|    /**
382|     * @return array<int, int|null>
383|     */
384|    private function loadAreaParentMap(Company $company): array
385|    {
386|        $map = [];
387|        foreach ($this->entityManager->getRepository(CompanyArea::class)->findByCompany((int) $company->getId()) as $area) {
388|            if (!$area instanceof CompanyArea || !$area->getId()) {
389|                continue;
390|            }
391|            $parent = $area->getParent();
392|            $map[(int) $area->getId()] = $parent instanceof CompanyArea && $parent->getId()
393|                ? (int) $parent->getId()
394|                : null;
395|        }
396|
397|        return $map;
398|    }
399|
400|    /**
401|     * @param list<int> $areaIds
402|     *
403|     * @return array{0: list<int>, 1: list<int>} equipes no recorte, equipes sem área cadastrada
404|     */
405|    private function splitCompanyTeamsByArea(Company $company, array $areaIds): array
406|    {
407|        $areaIdSet = array_fill_keys($areaIds, true);
408|        $inScope = [];
409|        $withoutArea = [];
410|
411|        foreach ($this->entityManager->getRepository(CompanyTeam::class)->findBy(['company' => $company]) as $team) {
412|            if (!$team instanceof CompanyTeam || !$team->getId()) {
413|                continue;
414|            }
415|            $teamId = (int) $team->getId();
416|            $teamAreaId = (int) ($team->getCompanyArea()?->getId() ?? 0);
417|            if ($teamAreaId <= 0) {
418|                $withoutArea[] = $teamId;
419|                continue;
420|            }
421|            if (isset($areaIdSet[$teamAreaId])) {
422|                $inScope[] = $teamId;
423|            }
424|        }
425|
426|        return [$inScope, $withoutArea];
427|    }
428|
429|    /**
430|     * Membros do recorte em uma única passada: entra quem tem área no recorte ou quem pertence
431|     * a uma equipe do recorte (a equipe já está dentro da área, mesmo critério dos modais).
432|     *
433|     * @param list<int> $areaIds
434|     * @param list<int> $teamIds
435|     *
436|     * @return list<int>
437|     */
438|    private function collectMemberIdsInScope(Company $company, array $areaIds, array $teamIds): array
439|    {
440|        if ($areaIds === [] && $teamIds === []) {
441|            return [];
442|        }
443|
444|        $areaIdSet = array_fill_keys($areaIds, true);
445|        $teamIdStr = array_map('strval', $teamIds);
446|        $ids = [];
447|
448|        $members = $this->entityManager->getRepository(CompanyMembers::class)
449|            ->findBy(['company' => $company, 'isRemoved' => 0]);
450|
451|        foreach ($members as $member) {
452|            if (!$member instanceof CompanyMembers) {
453|                continue;
454|            }
455|            $memberId = (int) $member->getId();
456|            if ($memberId <= 0) {
457|                continue;
458|            }
459|
460|            if ($this->memberBelongsToAreas($member, $areaIdSet)
461|                || $this->memberBelongsToTeams($member, $teamIdStr)
462|            ) {
463|                $ids[] = $memberId;
464|            }
465|        }
466|
467|        return $ids;
468|    }
469|
470|    /**
471|     * @param array<int, bool> $areaIdSet
472|     */
473|    private function memberBelongsToAreas(CompanyMembers $member, array $areaIdSet): bool
474|    {
475|        foreach ($this->memberAreaIds($member) as $areaId) {
476|            if (isset($areaIdSet[$areaId])) {
477|                return true;
478|            }
479|        }
480|
481|        return false;
482|    }
483|
484|    /**
485|     * @param list<string> $teamIds
486|     */
487|    private function memberBelongsToTeams(CompanyMembers $member, array $teamIds): bool
488|    {
489|        if ($teamIds === []) {
490|            return false;
491|        }
492|
493|        foreach (array_map('trim', explode(',', $member->getTeams() ?? '')) as $memberTeamId) {
494|            if ($memberTeamId !== '' && in_array($memberTeamId, $teamIds, true)) {
495|                return true;
496|            }
497|        }
498|
499|        return false;
500|    }
501|}
502|

{"file_path": "src/Controller/SsmaController.php", "start_line": 8930, "end_line": 9110}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 8930-9110
8930|            'items' => $items,
8931|            'total' => count($items),
8932|            'q' => $q,
8933|        ]);
8934|    }
8935|
8936|    public function deleteAction(int $id): JsonResponse
8937|    {
8938|        /** @var User|null $user */
8939|        $user = $this->getUser();
8940|        if (!$user) {
8941|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8942|        }
8943|
8944|        if (!$this->canManageSsmaOccurrences()) {
8945|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para deletar ações.'], 403);
8946|        }
8947|
8948|        $action = $this->entityManager->find(SsmaAction::class, $id);
8949|        if (!$action || $action->getCompany()->getId() !== $user->getCompany()?->getId()) {
8950|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8951|        }
8952|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
8953|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8954|        }
8955|
8956|        try {
8957|            $this->entityManager->remove($action);
8958|            $this->entityManager->flush();
8959|
8960|            return new JsonResponse(['success' => true, 'message' => 'Ação deletada com sucesso.']);
8961|        } catch (\Throwable $e) {
8962|            return new JsonResponse(['success' => false, 'message' => 'Erro ao deletar ação.'], 500);
8963|        }
8964|    }
8965|
8966|    public function reopenAction(int $id): JsonResponse
8967|    {
8968|        /** @var User|null $user */
8969|        $user = $this->getUser();
8970|        if (!$user) {
8971|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8972|        }
8973|
8974|        if (!$this->canManageSsmaOccurrences()) {
8975|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para reabrir ações.'], 403);
8976|        }
8977|
8978|        $action = $this->entityManager->find(SsmaAction::class, $id);
8979|        if (!$action || $action->getCompany()->getId() !== $user->getCompany()?->getId()) {
8980|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8981|        }
8982|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
8983|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8984|        }
8985|
8986|        try {
8987|            $action->setSolved(false);
8988|            $this->entityManager->flush();
8989|
8990|            $viewData = $this->buildSsmaViewData();
8991|            $actionPlanData = $this->buildActionPlanData(
8992|                $viewData['actions_taken'],
8993|                $viewData['occurrences'],
8994|                $viewData['action_type_metadata']
8995|            );
8996|
8997|            return new JsonResponse([
8998|                'success'          => true,
8999|                'message'          => 'Ação reaberta com sucesso.',
9000|                'action_plan_data' => $actionPlanData,
9001|            ]);
9002|        } catch (\Throwable $e) {
9003|            return new JsonResponse(['success' => false, 'message' => 'Erro ao reabrir ação.'], 500);
9004|        }
9005|    }
9006|
9007|    public function resolveAction(Request $request, int $id): JsonResponse
9008|    {
9009|        /** @var User|null $user */
9010|        $user = $this->getUser();
9011|        if (!$user) {
9012|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9013|        }
9014|
9015|        $action = $this->entityManager->find(SsmaAction::class, $id);
9016|        if (!$action || $action->getCompany()->getId() !== $user->getCompany()?->getId()) {
9017|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9018|        }
9019|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
9020|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9021|        }
9022|
9023|        try {
9024|            $data = json_decode($request->getContent(), true) ?? [];
9025|            $note = trim((string) ($data['note'] ?? ''));
9026|            $evidence = trim((string) ($data['evidence'] ?? '')) ?: null;
9027|            $rating = !empty($data['rating']) ? (string) $data['rating'] : null;
9028|            $validatorMode = (string) ($data['validator_mode'] ?? 'default_validators');
9029|            $operation = (string) ($data['operation'] ?? 'resolve');
9030|
9031|            $company = $action->getCompany();
9032|            if (!$this->canCurrentUserResolveSsmaAction($action, $company, $user, $operation)) {
9033|                return new JsonResponse(['success' => false, 'message' => 'Sem permissão para resolver ações.'], 403);
9034|            }
9035|
9036|            $isTenant = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
9037|            // Resolver nunca mistura satisfação — escala fica no Validar fechamento.
9038|            if ($operation !== 'evaluate') {
9039|                $rating = null;
9040|            }
9041|
9042|            // Evidência é sempre obrigatória para finalizar/reavaliar uma ação, sem exceção de perfil.
9043|            if (empty($evidence)) {
9044|                return new JsonResponse([
9045|                    'success' => false,
9046|                    'message' => 'Evidência é obrigatória para finalizar a ação.',
9047|                ], 422);
9048|            }
9049|
9050|            if ($action->getValidationStatus() === 'rejected') {
9051|                $previousNote = $this->extractLastSsmaActionResolutionNote($action->getDescription());
9052|                $previousEvidence = $this->normalizeSsmaEvidencePath($action->getClosingEvidence());
9053|                $noteChanged = $note !== $previousNote;
9054|                $evidenceChanged = $this->normalizeSsmaEvidencePath($evidence) !== $previousEvidence;
9055|                if (!$noteChanged && !$evidenceChanged) {
9056|                    return new JsonResponse([
9057|                        'success' => false,
9058|                        'message' => 'Altere a nota ou a evidência para reenviar a ação após a reprovação.',
9059|                    ], 422);
9060|                }
9061|            }
9062|
9063|            if ($note) {
9064|                $action->setDescription(
9065|                    ($action->getDescription() ? $action->getDescription() . "\n\n" : '') .
9066|                    '[' . ($operation === 'evaluate' ? 'Avaliação' : 'Resolução') . '] ' . $note
9067|                );
9068|            }
9069|            if ($evidence) {
9070|                $action->setClosingEvidence($evidence);
9071|            }
9072|
9073|            // Reavaliar (admin): fecha direto. Resolver (qualquer perfil): envia para validação.
9074|            if ($operation === 'evaluate' && $isTenant) {
9075|                if ($rating) {
9076|                    $action->setResolutionRating($rating);
9077|                }
9078|                $action->setSolved(true);
9079|                $action->setValidationStatus(null);
9080|                $this->entityManager->flush();
9081|                $parentFinalized = $this->ssmaOccurrenceAutoFinalizeService->tryFinalizeParentWhenAllActionsClosed($action);
9082|                if ($parentFinalized) {
9083|                    $event = $action->getEvent();
9084|                    $company = $user->getCompany();
9085|                    if ($event instanceof \App\Entity\SsmaEvent && $company instanceof Company) {
9086|                        $this->maybeSubmitOccurrenceForValidation($event, $company, $user);
9087|                    }
9088|                }
9089|
9090|                return new JsonResponse([
9091|                    'success' => true,
9092|                    'message' => 'Ação reavaliada com sucesso.',
9093|                    'solved'  => true,
9094|                    'parent_occurrence_finalized' => $parentFinalized,
9095|                ]);
9096|            }
9097|
9098|            // Resolve o validador do fechamento — sempre 1 pessoa só (não permite múltipla seleção).
9099|            $validatorMemberIds = [];
9100|            if (!empty($data['validator_member_ids']) && is_array($data['validator_member_ids'])) {
9101|                $validatorMemberIds = array_values(array_filter(array_map('intval', $data['validator_member_ids'])));
9102|            } elseif (!empty($data['validator_member_id'])) {
9103|                $validatorMemberIds = [(int) $data['validator_member_id']];
9104|            }
9105|
9106|            // Fallback: usa o validador pré-configurado na criação da ação (campo validator_id do modal)
9107|            if (empty($validatorMemberIds) && $action->getValidatorMemberId() !== null) {
9108|                $validatorMemberIds = [$action->getValidatorMemberId()];
9109|            }
9110|

{"file_patterns": ["config/"], "search_text": "^ssma_action_|^admin_ssma_action_", "use_perl_regexp": true}

File: config/routes_ssma.yaml
Match lines: 17
111|admin_ssma_action_plan_delete:
190|admin_ssma_action_create:
195|admin_ssma_action_get:
200|ssma_action_modal_partial:
205|admin_ssma_action_reopen:
210|admin_ssma_action_resolve:
215|admin_ssma_action_validate:
225|admin_ssma_action_delete:
370|ssma_action_plan_projects:
375|ssma_action_link_project:
380|ssma_action_occurrences_search:
385|ssma_action_inspections_search:
390|ssma_action_abordagens_search:
484|ssma_action_type_config_get:
489|ssma_action_type_config_save:
494|ssma_action_validator_config_get:
499|ssma_action_validator_config_save:

{"query_name": "Ssma"}

assets/ssma/ssma_body_map.ts
config/automations/ssma.yaml
config/ontology/domains/ssma.yaml
config/routes_ssma.yaml
docs/ChatPrincipal/ssma/SSMA_ADRIANA_IMPLEMENTACAO.md
docs/Home/SMOKE_MEMBER_HOME_SSMA.md
docs/INTEGRACAO-SSMA-CC-FELIPE.md
docs/Notifications/NOTIFICACOES_SSMA.md
docs/PLANO-INTEGRACAO-SSMA-CC.md
docs/SSMA-CC-CORRECOES-IMPLEMENTADAS.md
docs/SSMA-CC-CORRECOES.md
docs/SSMA-REGRAS-POS-MERGE.md
docs/adriana-cognitive-layer/SSMA-FLUENCY-F3-PHP-CHECKLIST.md
docs/adriana-cognitive-layer/SSMA-PERSONA-GPT-SMOKE.md
docs/adriana-cognitive-layer/contracts/ssma-reply-policy.md
docs/adriana-cognitive-layer/decisions/ADR-006-ssma-layer-orquestra-php-tools.md
docs/adriana-cognitive-layer/decisions/ADR-007-ssma-painel-semantica-layer.md
docs/adriana-cognitive-layer/topics/SSMA.md
docs/database-changes/2026-08-11-ssma-direito-de-recusa.md
docs/database-changes/2026-08-31-ssma-cause-tree-state.md
docs/database-changes/20260703-ssma-occurrence-create-permission.md
docs/engineering/adr-ssma-view-data-scope.md
docs/engineering/kanban/ssma-refusal-automacoes-nativas.md
docs/engineering/pr/feature-ssma-automation-team-dropdown-new-production/PR_descricao_feature-ssma-automation-team-dropdown-new-production.md
docs/engineering/pr/feature-ssma-correcoes-arvore-executor-new-production/PR_descricao_feature-ssma-correcoes-arvore-executor-new-production.md
docs/engineering/pr/feature-ssma-ocorrencia-correcoes-new-production/PR_descricao_feature-ssma-ocorrencia-correcoes-new-production.md
docs/engineering/pr/feature-ssma-performance-roadmap-fase-a-new-production/PR_commits_feature-ssma-performance-roadmap-fase-a-new-production.txt
docs/engineering/pr/feature-ssma-performance-roadmap-fase-a-new-production/PR_descricao_feature-ssma-performance-roadmap-fase-a-new-production.md
docs/engineering/pr/hotfix-ssma-ambiental-material-brenda-new-production/PR_descricao_hotfix-ssma-ambiental-material-brenda-new-production.md
docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_arquivos_hotfix-ssma-ap-validacao-etapa1-new-production.txt
docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_commits_hotfix-ssma-ap-validacao-etapa1-new-production.txt
docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_descricao_hotfix-ssma-ap-validacao-etapa1-new-production.md
docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_impacto_hotfix-ssma-ap-validacao-etapa1-new-production.txt
docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_merges_hotfix-ssma-ap-validacao-etapa1-new-production.txt
docs/engineering/pr/hotfix-ssma-form-cleanup/PR_descricao_hotfix-ssma-form-cleanup.md
docs/engineering/pr/hotfix-ssma-menu-gestor-admin-aura-new-production/PR_arquivos_hotfix-ssma-menu-gestor-admin-aura-new-production.txt
docs/engineering/pr/hotfix-ssma-menu-gestor-admin-aura-new-production/PR_commits_hotfix-ssma-menu-gestor-admin-aura-new-production.txt
docs/engineering/pr/hotfix-ssma-menu-gestor-admin-aura-new-production/PR_descricao_hotfix-ssma-menu-gestor-admin-aura-new-production.md
docs/engineering/pr/hotfix-ssma-menu-gestor-admin-aura-new-production/PR_impacto_hotfix-ssma-menu-gestor-admin-aura-new-production.txt
docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_arquivos_hotfix-ssma-occ-type-perms-datatables-new-production.txt
docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_commits_hotfix-ssma-occ-type-perms-datatables-new-production.txt
docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_descricao_hotfix-ssma-occ-type-perms-datatables-new-production.md
docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_impacto_hotfix-ssma-occ-type-perms-datatables-new-production.txt
docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_merges_hotfix-ssma-occ-type-perms-datatables-new-production.txt
docs/engineering/pr/hotfix-ssma-occurrence-view-500-new-production/PR_arquivos_hotfix-ssma-occurrence-view-500-new-production.txt
docs/engineering/pr/hotfix-ssma-occurrence-view-500-new-production/PR_commits_hotfix-ssma-occurrence-view-500-new-production.txt
docs/engineering/pr/hotfix-ssma-occurrence-view-500-new-production/PR_descricao_hotfix-ssma-occurrence-view-500-new-production.md
docs/engineering/pr/hotfix-ssma-occurrence-view-500-new-production/PR_impacto_hotfix-ssma-occurrence-view-500-new-production.txt
docs/engineering/pr/hotfix-ssma-occurrence-view-500-new-production/PR_merges_hotfix-ssma-occurrence-view-500-new-production.txt
docs/engineering/pr/hotfix-ssma-ocorrencias-500-504-definitivo-new-production/PR_arquivos_hotfix-ssma-ocorrencias-500-504-definitivo-new-production.txt
docs/engineering/pr/hotfix-ssma-ocorrencias-500-504-definitivo-new-production/PR_commits_hotfix-ssma-ocorrencias-500-504-definitivo-new-production.txt
docs/engineering/pr/hotfix-ssma-ocorrencias-500-504-definitivo-new-production/PR_descricao_hotfix-ssma-ocorrencias-500-504-definitivo-new-production.md
docs/engineering/pr/hotfix-ssma-ocorrencias-500-504-definitivo-new-production/PR_impacto_hotfix-ssma-ocorrencias-500-504-definitivo-new-production.txt
docs/engineering/pr/hotfix-ssma-ocorrencias-500-504-definitivo-new-production/PR_merges_hotfix-ssma-ocorrencias-500-504-definitivo-new-production.txt
docs/engineering/pr/hotfix-ssma-ros-barrier-type-422/PR_descricao_hotfix-ssma-ros-barrier-type-422.md
docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_arquivos_hotfix-ssma-ux-pos-merge-231-new-production.txt
docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_commits_hotfix-ssma-ux-pos-merge-231-new-production.txt
docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_descricao_hotfix-ssma-ux-pos-merge-231-new-production.md
docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_impacto_hotfix-ssma-ux-pos-merge-231-new-production.txt
docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_merges_hotfix-ssma-ux-pos-merge-231-new-production.txt
docs/engineering/ssma-roadmap-performance.md
docs/evolucao_painel_efetividade_ssma.md
docs/generate_merge_ssma_pdf.py
docs/generate_ssma_ocorrencias_qa_pdf.py
docs/generate_ssma_prevencao_qa_pdf.py
docs/merge-partner-companies-ssma-testes-mauricio.html
docs/merge-partner-companies-ssma-testes-mauricio.pdf
docs/painel_efetividade_ssma.md
docs/pr-hotfix-ssma-ap-parte-medica-new-production.md
docs/ssma-ocorrencias-qa-feature-novas-correcoes-5.pdf
docs/ssma-prevencao-homologacao-checklist.md
docs/ssma-prevencao-qa-feature-novas-correcoes-4.pdf
docs/ssma/CAPA_DOCUMENTO_SSMA.md
docs/ssma/MERGE_NEW_STAGING2_PARA_SSMA.md
docs/ssma/PENDENCIAS-SSMA.md
docs/ssma/PRODUTO_SSMA_CATALOGO_TELAS.md
docs/ssma/PRODUTO_SSMA_MAPA_COMPLETO.md
docs/ssma/SMOKE_BUGS_SSMA_001_006.md
docs/ssma/SSMA-AUTOMACOES-OCORRENCIAS.md
migration_archive_20260508/Version20260505162228_SsmaUnified.php
migration_archive_20260508/_archive_ssma/Version20260424120000_AddSsmaAutConditionConfig.php
migration_archive_20260508/_archive_ssma/Version20260424200000_AddCompanyMembersSsmaAprofundamentoClinicas.php
migrations/Version20260424200000_AddCompanyMembersSsmaAprofundamentoClinicas.php
migrations/Version20260508120000_AddCompanyMembersSsmaAprofundamentoClinicasIfMissing.php
migrations/Version20260510120000_AddSsmaPermissionTagTablesIfMissing.php
migrations/Version20260511180000_SsmaActionValidation.php
migrations/Version20260528200000_SsmaDeviationVistoResolvido.php
migrations/Version20260602111200_SsmaDeviationVistoResolvidoForce.php
migrations/Version20260609180000_AddOccurrenceTimeToSsmaOccurrences.php
migrations/Version20260703160000_AddSsmaOccurrenceCreatePermission.php
migrations/Version20260728220000_SsmaAbordagemCoaching.php
migrations/Version20260728230000_SsmaActionDeviationLink.php
migrations/Version20260729120000_SsmaMetaAbonoRequest.php
migrations/Version20260831160000_SsmaCauseTreeState.php
public/images/cultural-hub/capa_ssma_manual_de_gestao_integrada.jpg
public/images/ia_images/icons/ssma-modulo-seguranca.svg
public/js/chat_ia/ssma_prevention_handoff.js
public/js/ckfinder/core/connector/php/vendor/composer/autoload_classmap.php
public/js/ssma/ssma-member-picker.js
public/js/ssma/ssma-table-export.js

{"file_patterns": ["tests/"], "search_text": "createClient"}

File: tests/Controller/AiCommitteeControllerConcordanciaTest.php
Match lines: 4
61|    private function createClientBooted(): KernelBrowser
63|        return self::runOrSkipDb(static fn (): KernelBrowser => static::createClient());
68|        $client = $this->createClientBooted();
200|        $client = $this->createClientBooted();

File: tests/Controller/Api/AlertLifecycleControllerWebTest.php
Match lines: 1
14|        $client = static::createClient();

File: tests/Controller/Api/ClientCommitteeControllerWebTest.php
Match lines: 6
20|        $client = static::createClient();
40|        $client = static::createClient();
121|        $client = static::createClient();
184|        $client = static::createClient();
263|        $client = static::createClient();
387|        $client = static::createClient();

File: tests/Controller/Api/DissonanceRuleControllerTest.php
Match lines: 3
87|        $client = static::createClient();
98|        $client = static::createClient();
109|        $client = static::createClient();

File: tests/Controller/Api/KnowledgeVaultControllerTest.php
Match lines: 7
92|        $client = static::createClient();
103|        $client = static::createClient();
114|        $client = static::createClient();
126|        $client = static::createClient();
138|        $client = static::createClient();
150|        $client = static::createClient();
162|        $client = static::createClient();

File: tests/Controller/Api/MemberSheetWizardTxWebTest.php
Match lines: 1
21|        $client = static::createClient();

File: tests/Controller/Api/StrategicActionsAvailabilityWebTest.php
Match lines: 1
30|        $client = static::createClient();

File: tests/Controller/Api/Uc1LitigationSessionUploadAvailabilityWebTest.php
Match lines: 1
45|            $client = static::createClient();

File: tests/Controller/Dashboard/AlertsDashboardControllerWebTest.php
Match lines: 1
21|        $client = static::createClient();

File: tests/Controller/EmployeeTrailApiTest.php
Match lines: 1
29|        $this->client = static::createClient();

File: tests/Controller/Finance/PayrollFinanceControllerWebTest.php
Match lines: 56
287|        $client = static::createClient();
580|        $client = static::createClient();
605|        $client = static::createClient();
630|        $client = static::createClient();
656|        $client = static::createClient();
674|        $client = static::createClient();
714|        $client = static::createClient();
742|        $client = static::createClient();
770|        $client = static::createClient();
799|        $client = static::createClient();
827|        $client = static::createClient();
855|        $client = static::createClient();
883|        $client = static::createClient();
911|        $client = static::createClient();
939|        $client = static::createClient();
997|        $client = static::createClient();
1089|        $client = static::createClient();
1130|        $client = static::createClient();
1180|        $client = static::createClient();
1231|        $client = static::createClient();
1329|        $client = static::createClient();
1387|        $client = static::createClient();
1438|        $client = static::createClient();
1522|        $client = static::createClient();
1613|        $client = static::createClient();
1685|        $client = static::createClient();
1727|        $client = static::createClient();
1761|        $client = static::createClient();
1796|        $client = static::createClient();
1832|        $client = static::createClient();
1870|        $client = static::createClient();
1933|        $client = static::createClient();
2007|        $client = static::createClient();
2059|        $client = static::createClient();
2084|        $client = static::createClient();
2109|        $client = static::createClient();
2147|        $client = static::createClient();
2197|        $client = static::createClient();
2227|        $client = static::createClient();
2259|        $client = static::createClient();
2290|        $client = static::createClient();
2321|        $client = static::createClient();
2352|        $client = static::createClient();
2383|        $client = static::createClient();
2414|        $client = static::createClient();
2448|        $client = static::createClient();
2479|        $client = static::createClient();
2514|        $client = static::createClient();
2545|        $client = static::createClient();
2581|        $client = static::createClient();
2648|        $client = static::createClient();
2692|        $client = static::createClient();
2739|        $client = static::createClient();
2795|        $client = static::createClient();
2831|        $client = static::createClient();
2875|        $client = static::createClient();

File: tests/Controller/WorkflowApiTest.php
Match lines: 1
39|        $this->client = static::createClient();

File: tests/Integration/Adriana/WorkflowApiSmokeTest.php
Match lines: 1
154|            $client = static::createClient();

File: tests/Integration/Products/FinancialFlowBootstrapApiIntegrationTest.php
Match lines: 1
44|        $this->client = static::createClient();

{"file_path": "src/Controller/SsmaController.php", "start_line": 9610, "end_line": 9750}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9610-9750
9610|            $type = $a->getType() ?? '';
9611|
9612|            return array_merge([
9613|                'id'               => $a->getId(),
9614|                'title'            => $a->getTitle(),
9615|                'description'      => $a->getDescription() ?? '',
9616|                'type'             => $type,
9617|                'type_label'       => $actionTypeLabels[$type] ?? $type,
9618|                'responsible_ids'  => $a->getResponsibleIds() ?? [],
9619|                'validator_member_id' => $a->getValidatorMemberId(),
9620|                'deadline'         => $a->getDeadline()?->format('Y-m-d'),
9621|                'solved'           => $a->isSolved(),
9622|                'has_project'      => $a->isHasProject(),
9623|                'project_url'      => $a->isHasProject() && $a->getProjectId()
9624|                    ? '/projects/project_steps/' . $a->getProjectId()
9625|                    : '',
9626|                'project_start_date' => $a->getProjectStartDate()?->format('Y-m-d') ?? '',
9627|                'project_priority'   => $a->getProjectPriority() ?? '',
9628|                'control_hierarchy'  => $a->getControlHierarchy() ?? '',
9629|                'occurrence_id'    => null,
9630|                'event_id'         => $id,
9631|                'created_at'       => $a->getCreatedAt()->format('d/m/Y H:i'),
9632|            ], $this->resolveActionDeadlineEditMeta($a, $company, $user));
9633|        }, $rawActions);
9634|
9635|        $fmtTimeline = static fn (\DateTimeInterface $dt): string => $dt->format('d/m/Y H:i');
9636|        $timelineRows = [
9637|            [
9638|                'ts'    => $abordagem->getCreatedAt()->getTimestamp(),
9639|                'date'  => $fmtTimeline($abordagem->getCreatedAt()),
9640|                'label' => 'Abordagem iniciada',
9641|            ],
9642|        ];
9643|        foreach ($rawActions as $actionEntity) {
9644|            $timelineRows[] = [
9645|                'ts'    => $actionEntity->getCreatedAt()->getTimestamp(),
9646|                'date'  => $fmtTimeline($actionEntity->getCreatedAt()),
9647|                'label' => 'Ação "' . ($actionEntity->getTitle() ?? '') . '" criada',
9648|            ];
9649|            foreach ($actionEntity->getDeadlineHistory() as $hist) {
9650|                if (!is_array($hist)) {
9651|                    continue;
9652|                }
9653|                $changedAt = isset($hist['changed_at']) ? strtotime((string) $hist['changed_at']) : false;
9654|                $from = (string) ($hist['from'] ?? '—');
9655|                $to = (string) ($hist['to'] ?? '—');
9656|                $timelineRows[] = [
9657|                    'ts'    => $changedAt ?: $actionEntity->getUpdatedAt()->getTimestamp(),
9658|                    'date'  => $changedAt ? date('d/m/Y H:i', $changedAt) : $fmtTimeline($actionEntity->getUpdatedAt()),
9659|                    'label' => 'Prazo da ação "' . ($actionEntity->getTitle() ?? '') . '" alterado (' . $from . ' → ' . $to . ')',
9660|                ];
9661|            }
9662|        }
9663|        if ($abordagem->getStatus() === SsmaAbordagem::STATUS_FINALIZADA) {
9664|            $timelineRows[] = [
9665|                'ts'    => $abordagem->getUpdatedAt()->getTimestamp(),
9666|                'date'  => $fmtTimeline($abordagem->getUpdatedAt()),
9667|                'label' => 'Abordagem finalizada',
9668|            ];
9669|        }
9670|        usort($timelineRows, static fn (array $x, array $y): int => $y['ts'] <=> $x['ts']);
9671|        $abordagemTimeline = array_map(static fn (array $row): array => [
9672|            'date'  => $row['date'],
9673|            'label' => $row['label'],
9674|        ], $timelineRows);
9675|
9676|        // Decode obs_multiplas JSON string → human-readable labels
9677|        $obsMultiplasRaw  = $detail['obs_multiplas'] ?? null;
9678|        $obsMultiplasKeys = [];
9679|        if ($obsMultiplasRaw && is_string($obsMultiplasRaw)) {
9680|            $decoded = json_decode($obsMultiplasRaw, true);
9681|            $obsMultiplasKeys = is_array($decoded) ? array_values(array_filter($decoded)) : [];
9682|        }
9683|        $obsLabels = [
9684|            'nao_utilizou_epi'           => 'Não utilizou EPI',
9685|            'executou_fora_procedimento' => 'Executou fora do procedimento',
9686|            'postura_inadequada'         => 'Postura inadequada',
9687|            'falta_sinalizacao'          => 'Falta de sinalização',
9688|            'comportamento_inadequado'   => 'Comportamento inadequado',
9689|            'outro'                      => 'Outro',
9690|        ];
9691|        $obsMultiplasLabels = array_map(
9692|            static fn(string $k): string => $obsLabels[$k] ?? ucfirst(str_replace('_', ' ', $k)),
9693|            $obsMultiplasKeys
9694|        );
9695|
9696|        // Compute answer distribution from questionnaire
9697|        $respostas    = $detail['respostas'] ?? [];
9698|        $respostasForm = array_values(array_filter(
9699|            $respostas,
9700|            static fn($r) => is_array($r) && (string) ($r['questao_id'] ?? '') !== '__percepcoes_positivas__'
9701|        ));
9702|        $totalAnswers = count($respostasForm);
9703|        $riscoCount   = count(array_filter($respostasForm, static fn($r) => strtolower($r['resposta'] ?? '') === 'risco'));
9704|        $seguroCount  = count(array_filter($respostasForm, static fn($r) => strtolower($r['resposta'] ?? '') === 'seguro'));
9705|        $naCount      = $totalAnswers - $riscoCount - $seguroCount;
9706|        $riscoPct     = $totalAnswers > 0 ? (int) round($riscoCount  / $totalAnswers * 100) : 0;
9707|        $seguroPct    = $totalAnswers > 0 ? (int) round($seguroCount / $totalAnswers * 100) : 0;
9708|        $naPct        = $totalAnswers > 0 ? max(0, 100 - $riscoPct - $seguroPct) : 0;
9709|        $scorePct     = (int) round(($detail['score_comportamental'] ?? 0) * 100);
9710|
9711|        // Group questionnaire answers by category for server-side render
9712|        $questionsByCategory = [];
9713|        foreach ($respostasForm as $r) {
9714|            $cat = $r['categoria'] ?? 'Geral';
9715|            $questionsByCategory[$cat][] = $r;
9716|        }
9717|
9718|        $viewCurrentMember = $this->getCurrentCompanyMember($company, $user);
9719|        $viewIsCoachOwner  = $viewCurrentMember instanceof CompanyMembers && $viewCurrentMember->getId() === $abordagem->getCoachMemberId();
9720|        $viewIsAdmin       = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER') || $this->isGranted('ROLE_MANAGER_GESTOR');
9721|        $detail['is_current_user_coach'] = $viewIsCoachOwner;
9722|        $detail['can_complete_coaching'] = $abordagem->isCoaching() && $abordagem->getCoachMemberId() !== null && ($viewIsCoachOwner || $viewIsAdmin);
9723|
9724|        return $this->render('ssma/prevention/approach/index.html.twig', array_merge($viewData, [
9725|            'abordagem'          => $detail,
9726|            'abordagem_actions'  => $abordagemActions,
9727|            'abordagem_timeline' => $abordagemTimeline,
9728|            'action_type_labels' => $actionTypeLabels,
9729|            'members_by_id'      => $membersById,
9730|            'risco_pct'            => $riscoPct,
9731|            'seguro_pct'           => $seguroPct,
9732|            'na_pct'               => $naPct,
9733|            'risco_count'          => $riscoCount,
9734|            'seguro_count'         => $seguroCount,
9735|            'na_count'             => $naCount,
9736|            'score_pct'            => $scorePct,
9737|            'obs_multiplas_labels' => $obsMultiplasLabels,
9738|            'questions_by_cat'     => $questionsByCategory,
9739|        ]));
9740|    }
9741|
9742|    public function deleteInspection(int $id): JsonResponse
9743|    {
9744|        /** @var User|null $user */
9745|        $user = $this->getUser();
9746|        if (!$user) {
9747|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9748|        }
9749|
9750|        $company = $this->getSsmaCompany();

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function buildSsmaViewData|private function buildSsmaViewData\\("}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function buildSsmaViewData"}

File: src/Controller/SsmaController.php
Match lines: 1
11904|    private function buildSsmaViewData(?array $detailScope = null): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 11904, "end_line": 12060}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 11904-12060
11904|    private function buildSsmaViewData(?array $detailScope = null): array
11905|    {
11906|        $scope = SsmaViewDataScope::fromDetailScope($detailScope);
11907|        $buildStartedAt = microtime(true);
11908|
11909|        /** @var User|null $user */
11910|        $user = $this->getUser();
11911|        $role = 'user';
11912|        $roles = $user ? $user->getRoles() : [];
11913|
11914|        if (in_array('ROLE_SUPER_ADMIN', $roles, true)) {
11915|            $role = 'superAdmin';
11916|        } elseif (in_array('ROLE_MANAGER', $roles, true)) {
11917|            $role = 'manager';
11918|        }
11919|
11920|        $company = $this->getSsmaCompany();
11921|        $detailOccurrenceId = $scope->occurrenceId;
11922|        $isOccurrenceDetailView = $scope->isOccurrenceDetailView;
11923|        $module = $scope->module;
11924|        $needsPreventionCollections = $scope->needsPreventionCollections();
11925|        $memberLoadMode = $this->ssmaMemberSelectDataProvider->resolveLoadMode($scope);
11926|        $deferOccurrenceHubHeavyData = $scope->shouldDeferOccurrenceHubPanelData();
11927|        $paginateOccurrenceList = $scope->shouldPaginateOccurrenceList();
11928|
11929|        // Sempre inicializa — evita 500 por variável indefinida em qualquer ramo.
11930|        $occurrences = [];
11931|        $occurrencesListTotal = 0;
11932|        $occurrencesListHasMore = false;
11933|        $occurrencesListPage = 1;
11934|        $occurrenceListAlreadyPaged = false;
11935|        $actionsTaken = [];
11936|        $inspections = [];
11937|        $abordagens = [];
11938|        $horasData = [];
11939|        $membersForMetas = [];
11940|        $inspCoverage = ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
11941|        $abCoverage = ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
11942|        $prevencaoMetasPessoa = ['inspecao' => [], 'abordagem' => []];
11943|
11944|        $request = $this->requestStack->getCurrentRequest();
11945|        // Default: mês atual (a meta é contabilizada no mês/meta mensal por padrão).
11946|        $metasPeriod = 'last_month';
11947|        if ($request) {
11948|            $qPeriod = (string) $request->query->get('meta_period', 'last_month');
11949|            if (
11950|                in_array($qPeriod, ['total', 'last_week', 'last_month', 'last_3_months', 'last_6_months', 'last_year'], true)
11951|                || preg_match('/^range:\\d{4}-\\d{2}-\\d{2}:\\d{4}-\\d{2}-\\d{2}$/', $qPeriod)
11952|            ) {
11953|                $metasPeriod = $qPeriod;
11954|            }
11955|        }
11956|
11957|        $gestores = [];
11958|        $teams = [];
11959|        $allMembers = [];
11960|        /** Pré-selecionar Observador na Abordagem quando o usuário logado é um CompanyMember da empresa */
11961|        $defaultAbordagemObservadorId = null;
11962|        $companyMembers = [];
11963|        $teamNameByMemberId = [];
11964|
11965|        if ($company) {
11966|            if ($memberLoadMode === SsmaMemberSelectDataProvider::LOAD_MODE_LITE) {
11967|                // Detalhe: lista lite (sem turnos / hierarquia de área) — evita 504 em empresas grandes.
11968|                [$allMembers, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
11969|                $companyMembers = $this->entityManager->getRepository(CompanyMembers::class)
11970|                    ->findBy(['company' => $company, 'isRemoved' => 0]);
11971|                foreach ($companyMembers as $member) {
11972|                    $memberUser = $member->getUser();
11973|                    if ($this->isSsmaExcludedTenantAdminUser($memberUser)) {
11974|                        continue;
11975|                    }
11976|                    if (!$memberUser || !in_array('ROLE_MANAGER_GESTOR', $memberUser->getRoles(), true)) {
11977|                        continue;
11978|                    }
11979|                    $name = $this->ssmaMemberDisplayLabel($member);
11980|                    if ($name === '') {
11981|                        $name = (string) ($member->getEmail() ?? '');
11982|                    }
11983|                    if ($name === '' && $member->getEmail() === null) {
11984|                        continue;
11985|                    }
11986|                    $roleMember = $member->getRoleMember();
11987|                    $gestores[] = [
11988|                        'id'       => $member->getId(),
11989|                        'name'     => $name,
11990|                        'email'    => $member->getEmail(),
11991|                        'avatar'   => $memberUser->getAvatar(),
11992|                        'position' => $roleMember ? (string) $roleMember->getName() : '',
11993|                        'area'     => '',
11994|                    ];
11995|                }
11996|                foreach ($teams as $teamRow) {
11997|                    foreach ($teamRow['members'] as $teamMemberId) {
11998|                        $teamMemberId = (int) $teamMemberId;
11999|                        if ($teamMemberId > 0 && !isset($teamNameByMemberId[$teamMemberId])) {
12000|                            $teamNameByMemberId[$teamMemberId] = (string) ($teamRow['name'] ?? '');
12001|                        }
12002|                    }
12003|                }
12004|                $allMembers = $this->enrichSsmaMemberRowsWithTeamMeta($allMembers, $teamNameByMemberId);
12005|            } else {
12006|            $companyMembers = $this->entityManager->getRepository(CompanyMembers::class)
12007|                ->findBy(['company' => $company, 'isRemoved' => 0]);
12008|
12009|            foreach ($companyMembers as $member) {
12010|                $memberUser = $member->getUser();
12011|                $name = $this->ssmaMemberDisplayLabel($member);
12012|                if ($name === '') {
12013|                    $name = (string) ($member->getEmail() ?? '');
12014|                }
12015|                $email = $member->getEmail();
12016|
12017|                if (!$name && !$email) {
12018|                    continue;
12019|                }
12020|
12021|                $roleMember = $member->getRoleMember();
12022|                // Tenant / admin da empresa: fora de todos os selects e listas de membros SSMA.
12023|                if ($memberUser && $this->isSsmaExcludedTenantAdminUser($memberUser)) {
12024|                    continue;
12025|                }
12026|                $superior = $member->getSuperior();
12027|                $superiorName = '';
12028|                if ($superior instanceof CompanyMembers) {
12029|                    $superiorName = $this->ssmaMemberDisplayLabel($superior);
12030|                    if ($superiorName === '') {
12031|                        $superiorName = (string) ($superior->getEmail() ?? '');
12032|                    }
12033|                }
12034|                // Só o primeiro nível da hierarquia (Gerência) — subgerência não entra no card.
12035|                // Fallback: se não houver raiz, usa o departamento direto do membro.
12036|                $rootAreaName = $this->resolveSsmaMemberRootAreaName($member);
12037|                if ($rootAreaName === '') {
12038|                    $dept = $member->getDepartment();
12039|                    if ($dept instanceof CompanyArea) {
12040|                        $rootAreaName = Utf8MojibakeNormalizer::normalize(trim((string) ($dept->getName() ?? '')));
12041|                    }
12042|                }
12043|                $vincPresentation = $this->ssmaMemberVinculoPresentation($member);
12044|                $positionName = $roleMember ? trim((string) $roleMember->getName()) : '';
12045|                if ($positionName === '') {
12046|                    $positionName = trim((string) ($member->getRole() ?? ''));
12047|                }
12048|                $memberAreaIds = $this->parseCompanyMemberAreaIds($member);
12049|
12050|                $allMembers[] = [
12051|                    'id'         => $member->getId(),
12052|                    'name'       => $name,
12053|                    'email'      => $email,
12054|                    'avatar'     => $memberUser ? $memberUser->getAvatar() : null,
12055|                    'position'   => $positionName,
12056|                    'role_id'    => $roleMember ? (int) $roleMember->getId() : null,
12057|                    'area_id'    => $memberAreaIds[0] ?? null,
12058|                    'area_ids'   => $memberAreaIds,
12059|                    'area'       => $rootAreaName,
12060|                    'gerencia'   => $rootAreaName,

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function getSsmaCompany"}

File: src/Controller/SsmaController.php
Match lines: 1
2071|    private function getSsmaCompany(): ?Company

{"file_path": "src/Controller/SsmaController.php", "start_line": 2071, "end_line": 2105}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 2071-2105
2071|    private function getSsmaCompany(): ?Company
2072|    {
2073|        // Prioridade: current_company resolvido pelo GlobalPermissionListener a partir
2074|        // do selected_workspace da sessão. Isso garante que membros ROLE_USER (sem
2075|        // User::getCompany() definido) e membros ROLE_MANAGER_GESTOR (cujo User::getCompany()
2076|        // pode apontar para outra empresa) usem sempre a empresa correta do workspace ativo.
2077|        $req = $this->requestStack->getCurrentRequest();
2078|        if ($req) {
2079|            $fromAttr = $req->attributes->get('current_company');
2080|            if ($fromAttr instanceof Company) {
2081|                return $fromAttr;
2082|            }
2083|        }
2084|
2085|        /** @var User|null $user */
2086|        $user = $this->getUser();
2087|        return $user ? $user->getCompany() : null;
2088|    }
2089|
2090|    private function normalizeCauseTreeRequest(Request $request): array
2091|    {
2092|        $payload = $request->request->all();
2093|        if ($payload === []) {
2094|            $decoded = json_decode($request->getContent(), true);
2095|            $payload = is_array($decoded) ? $decoded : [];
2096|        }
2097|
2098|        return [
2099|            'parentId' => $payload['parentId'] ?? null,
2100|            'title' => trim((string) ($payload['title'] ?? '')),
2101|            'description' => trim((string) ($payload['description'] ?? '')),
2102|            'category' => trim((string) ($payload['category'] ?? '')),
2103|            'actionActive' => filter_var($payload['actionActive'] ?? false, FILTER_VALIDATE_BOOL),
2104|            'closureType' => trim((string) ($payload['closureType'] ?? '')),
2105|            'closureComment' => trim((string) ($payload['closureComment'] ?? '')),

{"file_path": "public/js/ssma/ssma-member-picker.js", "start_line": 1, "end_line": 200}

File: public/js/ssma/ssma-member-picker.js (Total lines: 454)
IS_TRUNCATED: false
LINE_RANGE: 1-200
1|/**
2| * SSMA — seletor de membros (modal Internos: busca + Cargo/Time/Vínculo).
3| * Uso: SsmaShared.openMemberPicker({ mode, title, selectedIds, onConfirm, ... })
4| */
5|(function ($) {
6|    'use strict';
7|
8|    if (!$ || !window.SsmaShared) {
9|        return;
10|    }
11|
12|    var shared = window.SsmaShared;
13|    var AVATAR_COLORS = ['#EA151C', '#186073', '#25AD52', '#FFC107', '#6F42C1', '#FD7E14', '#20C997', '#DC3545'];
14|    var activeOptions = null;
15|    /** true após a primeira carga remota (evita re-fetch desnecessário). */
16|    var remotePickerLoaded = false;
17|
18|    function normalizeMember(row) {
19|        if (!row || row.id == null) {
20|            return null;
21|        }
22|        if (row.ssma_exclude_person_select) {
23|            return null;
24|        }
25|        return {
26|            id: parseInt(row.id, 10),
27|            name: String(row.name || row.email || '').trim(),
28|            email: String(row.email || '').trim(),
29|            avatar: row.avatar || '',
30|            cargo: String(row.cargo || row.position || '').trim(),
31|            team_display: String(row.team_display || row.team_name || '').trim(),
32|            vinculo: String(row.vinculo || '').trim()
33|        };
34|    }
35|
36|    function resolveCatalogRows(options) {
37|        if (options && Array.isArray(options.members)) {
38|            return options.members;
39|        }
40|        if (shared.modalMembers != null) {
41|            return Array.isArray(shared.modalMembers) ? shared.modalMembers : [];
42|        }
43|        return shared.allMembers || [];
44|    }
45|
46|    function buildCatalog(rows) {
47|        shared.memberPickerCatalog = [];
48|        $.each(rows || [], function (_, row) {
49|            var m = normalizeMember(row);
50|            if (m && m.id > 0 && m.name) {
51|                shared.memberPickerCatalog.push(m);
52|            }
53|        });
54|    }
55|
56|    /**
57|     * Complementa o catálogo local com todos os membros da empresa via AJAX.
58|     * Necessário em telas de detalhe (occurrence_view) onde allMembers está filtrado
59|     * apenas aos membros referenciados na ocorrência.
60|     * A flag remotePickerLoaded garante que a requisição só acontece uma vez por sessão.
61|     */
62|    function ensureFullMemberCatalog(callback) {
63|        var url = shared.membersSearchUrl;
64|        if (!url || remotePickerLoaded) {
65|            if (typeof callback === 'function') {
66|                callback();
67|            }
68|            return;
69|        }
70|        remotePickerLoaded = true;
71|
72|        $.getJSON(url, { q: '', company_scope: 1, picker: 1, limit: 500 })
73|            .done(function (resp) {
74|                var items = (resp && Array.isArray(resp.items)) ? resp.items : [];
75|                var existingIds = {};
76|                (shared.memberPickerCatalog || []).forEach(function (m) {
77|                    existingIds[String(m.id)] = true;
78|                });
79|                items.forEach(function (row) {
80|                    var m = normalizeMember(row);
81|                    if (m && m.id > 0 && m.name && !existingIds[String(m.id)]) {
82|                        shared.memberPickerCatalog.push(m);
83|                        existingIds[String(m.id)] = true;
84|                    }
85|                });
86|            })
87|            .always(function () {
88|                if (typeof callback === 'function') {
89|                    callback();
90|                }
91|            });
92|    }
93|
94|    function avatarColor(id) {
95|        return AVATAR_COLORS[Math.abs(parseInt(id, 10) || 0) % AVATAR_COLORS.length];
96|    }
97|
98|    function memberAvatarHtml(member) {
99|        var initial = (member.name || '?').charAt(0).toUpperCase();
100|        var uploadsBase = shared.uploadsPhotosBase || '/uploads/photos/';
101|        if (member.avatar) {
102|            var src = uploadsBase + String(member.avatar).replace(/^\/+/, '');
103|            return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
104|                '<img src="' + shared.escapeHtml(src) + '" class="user-avatar-image" alt="" ' +
105|                'onerror="this.style.display=\'none\';this.nextElementSibling.style.display=\'flex\';">' +
106|                '<div class="user-avatar" style="display:none;background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
107|                '</div>';
108|        }
109|        return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
110|            '<div class="user-avatar" style="background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
111|            '</div>';
112|    }
113|
114|    function escapeAttr(value) {
115|        return shared.escapeHtml(String(value ?? '')).replace(/'/g, '&#39;');
116|    }
117|
118|    function syncCustomSelectFromNative($sel) {
119|        if (!$sel || !$sel.length) {
120|            return;
121|        }
122|        var selectId = $sel.attr('id');
123|        var wrapper = $sel.closest('.custom-modern-select-wrapper');
124|        var optionsDiv = wrapper.find('.custom-modern-options').first();
125|        if (!optionsDiv.length) {
126|            return;
127|        }
128|        var html = '';
129|        $sel.find('option').each(function () {
130|            var val = $(this).attr('value');
131|            if (val === undefined || val === null) {
132|                val = '';
133|            }
134|            html += '<div class="custom-modern-option" data-value="' + escapeAttr(val) + '">' +
135|                shared.escapeHtml($(this).text()) + '</div>';
136|        });
137|        optionsDiv.html(html);
138|        if (typeof window.setCustomSelectValue === 'function' && selectId) {
139|            window.setCustomSelectValue(selectId, $sel.val() || '');
140|        } else if (typeof window.initCustomSelects === 'function') {
141|            window.initCustomSelects();
142|        }
143|    }
144|
145|    function resetMemberPickerFilters() {
146|        ['ssmaMemberPickerCargoFilter', 'ssmaMemberPickerTimeFilter', 'ssmaMemberPickerVinculoFilter'].forEach(function (id) {
147|            if (typeof window.setCustomSelectValue === 'function') {
148|                window.setCustomSelectValue(id, '');
149|            } else {
150|                $('#' + id).val('');
151|            }
152|        });
153|    }
154|
155|    function bindMemberPickerFilterHandlers() {
156|        $('#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter')
157|            .off('change.ssmaMemberPicker')
158|            .on('change.ssmaMemberPicker', filterRows);
159|    }
160|
161|    function rebuildCargoFilterOptions() {
162|        var $sel = $('#ssmaMemberPickerCargoFilter');
163|        if (!$sel.length) {
164|            return;
165|        }
166|        var prev = $sel.val() || '';
167|        var cargos = {};
168|        (shared.memberPickerCatalog || []).forEach(function (m) {
169|            if (m.cargo) {
170|                cargos[m.cargo.toLowerCase()] = m.cargo;
171|            }
172|        });
173|        $sel.find('option:not(:first)').remove();
174|        Object.keys(cargos).sort().forEach(function (key) {
175|            $sel.append($('<option>', { value: cargos[key], text: cargos[key] }));
176|        });
177|        if (prev) {
178|            $sel.val(prev);
179|        }
180|        syncCustomSelectFromNative($sel);
181|    }
182|
183|    function rebuildTimeFilterOptions() {
184|        var $sel = $('#ssmaMemberPickerTimeFilter');
185|        if (!$sel.length) {
186|            return;
187|        }
188|        var prev = $sel.val() || '';
189|        var teams = {};
190|        (shared.ssmaTeams || []).forEach(function (t) {
191|            if (t && t.name) {
192|                teams[String(t.name).toLowerCase()] = t.name;
193|            }
194|        });
195|        (shared.memberPickerCatalog || []).forEach(function (m) {
196|            if (m.team_display) {
197|                teams[m.team_display.toLowerCase()] = m.team_display;
198|            }
199|        });
200|        $sel.find('option:not(:first)').remove();

{"file_path": "public/js/ssma/ssma-member-picker.js", "start_line": 330, "end_line": 454}

File: public/js/ssma/ssma-member-picker.js (Total lines: 454)
IS_TRUNCATED: false
LINE_RANGE: 330-454
330|        $('#ssmaMemberPickerTableBody .ssma-member-picker-chk:checked').each(function () {
331|            var id = parseInt($(this).val(), 10);
332|            if (id > 0) {
333|                ids.push(id);
334|            }
335|        });
336|        return ids;
337|    }
338|
339|    function membersByIds(ids) {
340|        var map = {};
341|        (shared.memberPickerCatalog || []).forEach(function (m) {
342|            map[String(m.id)] = m;
343|        });
344|        return (ids || []).map(function (id) {
345|            return map[String(id)] || shared.getMemberById(id);
346|        }).filter(Boolean);
347|    }
348|
349|    shared.openMemberPicker = function (options) {
350|        activeOptions = $.extend({
351|            mode: 'multiple',
352|            title: 'Selecionar membros',
353|            sectionLabel: 'Internos',
354|            selectedIds: [],
355|            excludeIds: [],
356|            confirmLabel: 'Confirmar',
357|            onConfirm: null
358|        }, options || {});
359|        buildCatalog(resolveCatalogRows(activeOptions));
360|
361|        moveModalToBody();
362|        $('#ssmaMemberPickerModalTitle').text(activeOptions.title);
363|        $('#ssmaMemberPickerSectionLabel').text(activeOptions.sectionLabel);
364|        $('#ssmaMemberPickerConfirmBtn').text(activeOptions.confirmLabel);
365|        resetMemberPickerFilters();
366|        resetMemberPickerSearch();
367|
368|        var renderAndBind = function () {
369|            rebuildCargoFilterOptions();
370|            rebuildTimeFilterOptions();
371|            renderTableRows();
372|            bindMemberPickerFilterHandlers();
373|            if (typeof window.initAllCustomSelectWrappers === 'function') {
374|                window.initAllCustomSelectWrappers();
375|            }
376|        };
377|
378|        // Catálogo já recortado (modalMembers / options.members): não expandir via AJAX
379|        // com company_scope, senão o picker ignora a limitação por área.
380|        var catalogIsScoped = Array.isArray(activeOptions.members) || shared.modalMembers != null;
381|        if (!catalogIsScoped && !remotePickerLoaded && shared.membersSearchUrl) {
382|            // Primeira abertura: exibe loading enquanto carrega todos os membros remotamente.
383|            $('#ssmaMemberPickerTableBody').html(
384|                '<tr><td colspan="5" class="text-center text-muted py-3 small">' +
385|                '<i class="fas fa-spinner fa-spin mr-1"></i>Carregando membros&hellip;' +
386|                '</td></tr>'
387|            );
388|            $('#ssmaMemberPickerModal').modal('show');
389|            ensureFullMemberCatalog(renderAndBind);
390|        } else {
391|            renderAndBind();
392|            $('#ssmaMemberPickerModal').modal('show');
393|        }
394|    };
395|
396|    $(document).on('input', '#ssma-member-picker-search-input', filterRows);
397|
398|    $(document).on('change', '#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter', filterRows);
399|
400|    $(document).on('change', '#ssmaMemberPickerTableBody .ssma-member-picker-chk', function () {
401|        if (!activeOptions || activeOptions.mode !== 'single') {
402|            return;
403|        }
404|        if (this.checked) {
405|            $('#ssmaMemberPickerTableBody .ssma-member-picker-chk').not(this).prop('checked', false);
406|        }
407|    });
408|
409|    $(document).on('click', '#ssmaMemberPickerTableBody .ssma-member-picker-row', function (e) {
410|        if ($(e.target).is('input, a, button, label')) {
411|            return;
412|        }
413|        var $chk = $(this).find('.ssma-member-picker-chk');
414|        if (!$chk.length) {
415|            return;
416|        }
417|        if (activeOptions && activeOptions.mode === 'single') {
418|            $chk.prop('checked', true).trigger('change');
419|        } else {
420|            $chk.prop('checked', !$chk.prop('checked'));
421|        }
422|    });
423|
424|    $('#ssmaMemberPickerConfirmBtn').on('click', function () {
425|        var ids = collectSelectedIds();
426|        if (activeOptions && activeOptions.mode === 'single' && ids.length > 1) {
427|            ids = [ids[0]];
428|        }
429|        if (typeof activeOptions.onConfirm === 'function') {
430|            activeOptions.onConfirm(ids, membersByIds(ids));
431|        }
432|        $('#ssmaMemberPickerModal').modal('hide');
433|    });
434|
435|    $(document).on('show.bs.modal', '#ssmaMemberPickerModal', function () {
436|        lockAppPageBodyScroll();
437|    });
438|
439|    $(document).on('shown.bs.modal', '#ssmaMemberPickerModal', function () {
440|        if (typeof window.setupSearchExpandable === 'function') {
441|            window.setupSearchExpandable();
442|        }
443|        if (typeof window.initAllCustomSelectWrappers === 'function') {
444|            window.initAllCustomSelectWrappers();
445|        }
446|        filterRows();
447|    });
448|
449|    $(document).on('hidden.bs.modal', '#ssmaMemberPickerModal', function () {
450|        unlockAppPageBodyScroll();
451|    });
452|
453|})(window.jQuery);
454|

{"file_patterns": ["templates/", "public/js/"], "search_text": "action_modal_partial|actionModalPartial"}

No matches found

{"search_text": "action-modal-partial|actionModalPartial"}

No matches found

{"comments": [{"content": "O controller SsmaController já passa de 28 mil linhas e esta PR adiciona mais de mil, concentrando nele regra de negócio de recorte de área, montagem de SQL bruto, filtros de listagem e decisão de UI — o serviço de autorização recém-criado (SsmaPreventionAreaAuthorizationService) é usado, mas a mesma interseção de escopos (prevenção × plano de ação, área × equipe) é reimplementada em pelo menos quatro pontos diferentes do controller (getSsmaCombinedAreaMemberIds, filtro do relatório executivo, filtros dos modais em buildSsmaViewData e a busca AJAX). Isso tende a divergir aos poucos e torna cada nova tela do SSMA mais cara e arriscada de alterar. Recomendo mover essas decisões para um service/query dedicado (ex.: um serviço que responda “o que esse usuário pode ver neste produto” reutilizando o scope já resolvido) e deixar o controller apenas orquestrando HTTP.", "existing_code": "    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope\n    {\n        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-prevention');\n    }", "category": "maintainability", "severity": "high", "path": "src/Controller/SsmaController.php"}, {"content": "Aqui a guarda de recorte de área usa uma fonte de empresa diferente da checagem de posse que acabou de passar: a posse compara com $user->getCompany(), mas o escopo de área é resolvido com $this->getSsmaCompany() (empresa do workspace ativo da sessão). Nas rotas de delete/reopen/resolve de ação isso se repete em três pontos. Se o workspace SSMA da sessão for outra empresa (multi-empresa) ou estiver ausente, o escopo é calculado contra a empresa errada — ou, quando getSsmaCompany() devolve null, vira SsmaPreventionAreaScope::unrestricted() e a guarda é pulada silenciosamente. O resto da PR já usa $action->getCompany() no mesmo tipo de guarda (ex.: validação de ação). Sugiro passar a empresa do próprio recurso ($action->getCompany()), que nesse ponto já se sabe igual à do usuário, mantendo a checagem e o recorte na mesma empresa.", "existing_code": "        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {\n            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);\n        }", "category": "security", "severity": "medium", "path": "src/Controller/SsmaController.php"}, {"content": "Quando o escopo de área está restrito, o limite do banco é removido e todas as inspeções/abordagens da empresa são carregadas para filtrar em memória a cada requisição de busca. Como a busca é disparada a cada tecla digitada, em empresas com histórico grande isso vira uma query sem LIMIT materializando a tabela inteira — risco concreto de lentidão e uso de memória. O mesmo padrão se repete na busca de abordagem. Recomendo empurrar o recorte para a query (junção com os membros/equipes permitidos, ou pelo menos um filtro preliminar por responsável/participante antes do order by + limit) em vez de carregar tudo para filtrar no PHP.", "existing_code": "        if ($areaScope->isRestricted()) {\n            $rows = array_slice(array_values(array_filter(\n                $rows,\n                fn (SsmaInspection $i): bool => $this->ssmaPreventionAreaAuthorization\n                    ->canViewInspection($areaScope, $i)\n            )), 0, $limit);\n        }", "category": "performance", "severity": "medium", "path": "src/Controller/SsmaController.php"}, {"content": "A mudança mexe em autorização de vários endpoints (listagem, busca AJAX, leitura por ID, criação/edição/exclusão de inspeção, abordagem e ação) e os testes adicionados cobrem apenas os serviços unitários e uma asserção textual do controller. Falta um teste funcional que percorra o fluxo real (ex.: usuário com Supervisor de Área não abre ação/inspeção de área irmã por ID — 404, payload com pessoa fora do recorte — 403, e a interseção prevenção × plano de ação), que é exatamente o tipo de descasamento entre a guarda de listagem e a de leitura por ID que esta PR diz evitar. Não encontrei teste de controller existente para SsmaController (não há createClient cobrindo esses endpoints em tests/). Vale adicionar cobertura de endpoint antes de fechar a mudança de autorização.", "existing_code": "        self::assertStringContainsString(\n            'if ($company && $user instanceof User && $ssmaIsPlainPreventionMember)',", "category": "test", "severity": "medium", "path": "tests/Ssma/SsmaPermissionsRegressionTest.php"}]}

(async)

{"file_path": "templates/ssma/partials/_modal_action.html.twig", "start_line": 1, "end_line": 120}

File: templates/ssma/partials/_modal_action.html.twig (Total lines: 2679)
IS_TRUNCATED: false
LINE_RANGE: 1-120
1|{#
2|    Partial: _modal_action.html.twig
3|    Unified modal for creating an action linked to an occurrence.
4|
5|    Expected variables (passed via include):
6|      - occurrences : array   — list of all occurrences for the "Ocorrência relacionada" select
7|      - allMembers  : array   — list of members for the "Responsáveis" tag select
8|#}
9|
10|{#
11|  Monta action_type_metadata a partir da config do tenant (tipos ativos)
12|  ou usa os defaults nativos como fallback.
13|#}
14|{% set _default_action_types = {
15|    'corretiva':    { 'value': 'corretiva',    'label': 'Corretiva',    'subtitle': 'Resolve uma falha ou desvio já identificado.',      'icon': 'fa-solid fa-screwdriver-wrench' },
16|    'preventiva':   { 'value': 'preventiva',   'label': 'Preventiva',   'subtitle': 'Atua antes que o problema ocorra ou se repita.',    'icon': 'fa-solid fa-shield-halved' },
17|    'melhoria':     { 'value': 'melhoria',     'label': 'Melhoria',     'subtitle': 'Otimiza processo, ambiente ou rotina operacional.', 'icon': 'fa-solid fa-arrow-trend-up' },
18|    'treinamento':  { 'value': 'treinamento',  'label': 'Treinamento',  'subtitle': 'Capacita pessoas e reforça condutas seguras.',      'icon': 'fa-solid fa-user-graduate' },
19|    'investigacao': { 'value': 'investigacao', 'label': 'Investigação', 'subtitle': 'Aprofunda análises, causas e evidências.',          'icon': 'fa-solid fa-magnifying-glass' }
20|} %}
21|
22|{% set _icon_map = {
23|    'corretiva': 'fa-solid fa-screwdriver-wrench',
24|    'preventiva': 'fa-solid fa-shield-halved',
25|    'melhoria': 'fa-solid fa-arrow-trend-up',
26|    'treinamento': 'fa-solid fa-user-graduate',
27|    'investigacao': 'fa-solid fa-magnifying-glass'
28|} %}
29|
30|{% if action_type_config is defined and action_type_config.types is defined and action_type_config.types|length > 0 %}
31|    {% set action_type_metadata = {} %}
32|    {% for _t in action_type_config.types %}
33|        {% if _t.active %}
34|            {% set action_type_metadata = action_type_metadata|merge({
35|                (_t.key): {
36|                    'value':    _t.key,
37|                    'label':    _t.label,
38|                    'subtitle': _t.subtitle|default(''),
39|                    'icon':     _t.icon|default(_icon_map[_t.key]|default('fa-solid fa-circle-dot'))
40|                }
41|            }) %}
42|        {% endif %}
43|    {% endfor %}
44|{% else %}
45|    {% set action_type_metadata = _default_action_types %}
46|{% endif %}
47|
48|{% set action_priority_options = [
49|    {'value': 'alta', 'label': 'Alta'},
50|    {'value': 'media', 'label': 'Média'},
51|    {'value': 'baixa', 'label': 'Baixa'}
52|] %}
53|{% set action_control_hierarchy_options = [
54|    {'value': 'elimination', 'label': 'Eliminação'},
55|    {'value': 'substitution', 'label': 'Substituição'},
56|    {'value': 'independent_engineering', 'label': 'Engenharia Independente'},
57|    {'value': 'dependent_engineering', 'label': 'Engenharia Dependente'},
58|    {'value': 'administrative', 'label': 'Administrativa'},
59|    {'value': 'epi', 'label': 'EPI'}
60|] %}
61|
62|<style>
63|#modal_action_create .ssma-action-project-option {
64|    display: inline-flex;
65|    width: auto;
66|    max-width: 100%;
67|    cursor: pointer;
68|    transition: all 0.2s ease;
69|    border: 2px solid #dee2e6 !important;
70|}
71|
72|#modal_action_create .ssma-action-project-option:hover {
73|    border-color: var(--company-theme1-800, #0F3D4A) !important;
74|}
75|
76|#modal_action_create .ssma-action-project-option.active {
77|    border-color: var(--company-theme1-800, #0F3D4A) !important;
78|    background-color: color-mix(in srgb, var(--company-theme1-800, #0F3D4A) 8%, #fff) !important;
79|}
80|
81|#modal_action_create .ssma-action-project-option input[type="checkbox"] {
82|    width: 18px;
83|    height: 18px;
84|    accent-color: var(--company-theme1-800, #0F3D4A);
85|    cursor: pointer;
86|    flex-shrink: 0;
87|    margin-top: 0;
88|}
89|
90|#modal_action_create .ssma-action-project-option label {
91|    cursor: pointer;
92|    margin-bottom: 0;
93|    line-height: 1.4;
94|}
95|
96|#modal_action_create .ssma-action-project-help {
97|    cursor: pointer;
98|    transition: color 0.2s ease;
99|}
100|
101|#modal_action_create .ssma-action-project-help:hover {
102|    color: var(--company-theme1-800, #0F3D4A) !important;
103|}
104|
105|#modal_action_create .ssma-action-project-template-indicator {
106|    min-width: 0;
107|    max-width: 100%;
108|    color: #5c5d5d;
109|    font-size: 13px;
110|}
111|
112|#modal_action_create .ssma-action-project-template-indicator i {
113|    color: #5c5d5d;
114|}
115|
116|#modal_action_create .ssma-action-project-info {
117|    display: none;
118|    background: color-mix(in srgb, var(--company-theme1-800, #0F3D4A) 8%, #fff);
119|    color: var(--company-theme1-800, #0F3D4A);
120|    border-radius: 6px;

{"comments": [{"category": "maintainability", "content": "Os nomes das tags \"Supervisor de Área\" e \"Gestor de Área\" aparecem agora como strings soltas em vários arquivos (este extension, SsmaController, templates e testes), enquanto o próprio SsmaController passou a usar as constantes SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA/TAG_GESTOR_AREA para a mesma classificação. Com o nome duplicado em texto puro, uma futura renomeação ou nova tag de área exige caçar todas as ocorrências e qualquer divergência de digitação muda silenciosamente quem é tratado como gestão nos templates. Sugiro expor essas constantes ao Twig (via variável global ou método na extension) e referenciá-las aqui, evitando a cópia literal.", "existing_code": "            'Supervisor de Área',\n            'Gestor de Área',", "path": "src/Twig/MemberPermissionExtension.php", "severity": "low", "suggestion_code": "            SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,\n            SsmaAreaLimitationScope::TAG_GESTOR_AREA,"}]}

(async)

{"state": "DONE"}

{"file_path": "src/EventListener/GlobalPermissionListener.php"}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|namespace App\EventListener;
4|
5|use App\Service\PermissionTagByMemberService;
6|use App\Service\Finance\FinanceTenantContextResolver;
7|use App\Service\LiveInterviewAccessService;
8|use App\Entity\User;
9|use App\Entity\Company;
10|use App\Entity\Product;
11|use App\Entity\CompanyMembers;
12|use App\Entity\PermissionTag;
13|use App\Entity\SsmaPermissionTagMember;
14|use App\Service\Ssma\SsmaOccurrenceCreatePermissionService;
15|use App\Service\Ssma\SsmaOccurrenceStakeholderAccessChecker;
16|use App\Service\Ssma\SsmaPreventionMutatePermissionService;
17|use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
18|use App\Entity\StructuralResearchSurvey;
19|use App\Entity\StructuralResearchParticipant;
20|use Symfony\Component\HttpKernel\Event\ControllerEvent;
21|use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
22|use Symfony\Component\Security\Core\Security;
23|use Symfony\Component\HttpFoundation\JsonResponse;
24|use Symfony\Component\HttpFoundation\RedirectResponse;
25|use Symfony\Component\HttpFoundation\Session\SessionInterface;
26|use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
27|use Doctrine\ORM\EntityManagerInterface;
28|use Symfony\Component\EventDispatcher\Attribute\AsEventListener;
29|
30|#[AsEventListener(event: 'kernel.controller', priority: 0)]
31|class GlobalPermissionListener
32|{
33|    private PermissionTagByMemberService $permissionService;
34|    private LiveInterviewAccessService $liveInterviewAccessService;
35|    private Security $security;
36|    private EntityManagerInterface $entityManager;
37|    private SessionInterface $session;
38|    private UrlGeneratorInterface $urlGenerator;
39|    private SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker;
40|    private SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService;
41|    private SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService;
42|    private SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService;
43|    private FinanceTenantContextResolver $financeTenantContextResolver;
44|    private string $ssmaParentProductSlug;
45|
46|    // Mapeamento de rotas para produtos necessários (inicializado no construtor para suportar slug dinâmico)
47|    private array $routeProductMapping = [];
48|
49|    // Mapeamento de templates baseado em rotas
50|    private array $routeTemplateMapping = [
51|        'onboarding_index' => [
52|            'product' => 'onboarding',
53|            'admin' => 'onboarding/index_admin.html.twig',
54|            'user' => 'onboarding/index_user.html.twig'
55|        ],
56|        'offboarding_index' => [
57|            'product' => 'offboarding',
58|            'admin' => 'offboarding/index.html.twig',
59|            'user' => 'offboarding/index_user.html.twig'
60|        ],
61|        'nps_dashboard' => [
62|            'product' => 'nps-com-ia',
63|            'admin' => 'layoutAdmin.html.twig',
64|            'user' => 'layoutUser.html.twig'
65|        ],
66|        'live_interview_management' => [
67|            'product' => 'live_interview',
68|            'admin' => 'layoutAdmin.html.twig',
69|            'user' => 'layoutUser.html.twig'
70|        ],
71|        // Adicione outras rotas conforme necessário
72|    ];
73|
74|    // Mapeamento específico para rotas de pesquisa estrutural
75|    private array $structuralResearchRoutes = [
76|        'structural_research_list',
77|        'structural_research_survey_list',
78|        'structural_research_survey_new',
79|        'structural_research_survey_edit',
80|        'structural_research_survey_save',
81|        'structural_research_survey_delete',
82|        'structural_research_copy',
83|        'structural_research_survey_get_participants',
84|        'structural_research_survey_update_participants',
85|        'structural_research_survey_current_participants',
86|        'structural_research_survey',
87|        'structural_research_view',
88|        'structural_research_survey_edit_manager'
89|    ];
90|
91|
92|    public function __construct(
93|        PermissionTagByMemberService $permissionService,
94|        LiveInterviewAccessService $liveInterviewAccessService,
95|        Security $security,
96|        EntityManagerInterface $entityManager,
97|        SessionInterface $session,
98|        UrlGeneratorInterface $urlGenerator,
99|        SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker,
100|        SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService,
101|        SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService,
102|        SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService,
103|        FinanceTenantContextResolver $financeTenantContextResolver,
104|        string $ssmaParentProductSlug = 'saude-e-seguranca'
105|    ) {
106|        $this->permissionService = $permissionService;
107|        $this->liveInterviewAccessService = $liveInterviewAccessService;
108|        $this->security = $security;
109|        $this->entityManager = $entityManager;
110|        $this->session = $session;
111|        $this->urlGenerator = $urlGenerator;
112|        $this->ssmaOccurrenceStakeholderAccessChecker = $ssmaOccurrenceStakeholderAccessChecker;
113|        $this->ssmaPreventionMutatePermissionService = $ssmaPreventionMutatePermissionService;
114|        $this->ssmaRefusalRightMutatePermissionService = $ssmaRefusalRightMutatePermissionService;
115|        $this->ssmaOccurrenceCreatePermissionService = $ssmaOccurrenceCreatePermissionService;
116|        $this->financeTenantContextResolver = $financeTenantContextResolver;
117|        $this->ssmaParentProductSlug = $ssmaParentProductSlug;
118|        $this->routeProductMapping = [
119|            'ssma_prevencao_' => 'ssma-prevention',
120|            'admin_ssma_prevencao_' => 'ssma-prevention',
121|            'ssma_inspection_' => 'ssma-prevention',
122|            'admin_ssma_inspection_' => 'ssma-prevention',
123|            'ssma_abordagem_' => 'ssma-prevention',
124|            'ssma_plano_acao_' => 'ssma-action-plan',
125|            'ssma_action_' => 'ssma-action-plan',
126|            'admin_ssma_action_' => 'ssma-action-plan',
127|            'governance_authorization_' => 'ssma-authorization',
128|            'governance_cases_' => 'ssma-authorization',
129|            'governance_badge_' => 'ssma-badge',
130|            'ssma_cause_tree_' => 'ssma-cause-tree',
131|            'ssma_ocorrencia_' => 'ssma-occurrences',
132|            'ssma_occurrence_' => 'ssma-occurrences',
133|            'admin_ssma_occurrence_' => 'ssma-occurrences',
134|            'ssma_event_' => 'ssma-occurrences',
135|            'admin_ssma_event_' => 'ssma-occurrences',
136|            'ssma_direito_recusa_' => 'ssma-occurrences',
137|            'ssma_automations_' => 'ssma-occurrences',
138|            'ssma_flow_templates_' => 'ssma-occurrences',
139|            'ssma_horas_trabalhadas_' => 'ssma-occurrences',
140|            'admin_ssma_dashboard_' => 'ssma-occurrences',
141|            'admin_ssma_' => $ssmaParentProductSlug,
142|            'ssma_' => $ssmaParentProductSlug,
143|            'sst_' => 'health-safety-work',
144|            'refunds_index' => 'refunds',
145|            'refunds_edit' => 'refunds',
146|            'refunds_' => 'refunds',
147|            'user_license' => 'licenses-vacation',
148|            'onboarding_index' => 'onboarding',
149|            'offboarding_index' => 'offboarding',
150|            'offboarding_' => 'offboarding',
151|            'nps_dashboard' => 'nps-com-ia',
152|            'spaces_control_' => 'spaces_control',
153|            'admin_processos_all' => 'recruitment-selection',
154|            'admin_evaluation_index' => 'recruitment-selection',
155|            'admin_avaliacao_monitorada' => 'recruitment-selection',
156|            'admin_conjuntos_de_avaliacoes' => 'recruitment-selection',
157|            'recommendation_network_index' => 'recruitment-selection',
158|            // jobs_index (Mural de Oportunidades) fica fora: é área de candidato no My Space,
159|            // não exige tag do produto recruitment-selection (gestão de RH).
160|            'job_interview_index' => 'recruitment-selection',
161|            'live_interview_management' => 'live_interview',
162|        ];
163|    }
164|
165|    // #region agent log
166|    private function debugLog(string $location, string $message, array $data = [], string $hypothesisId = ''): void {
167|        $logPath = 'h:\Meta\humanfactor5\.cursor\debug.log';
168|        $headersSentInfo = false;
169|        if (headers_sent($file, $line)) {
170|            $headersSentInfo = ['file' => $file, 'line' => $line];
171|        }
172|        $logEntry = json_encode([
173|            'timestamp' => (int)(microtime(true) * 1000),
174|            'location' => $location,
175|            'message' => $message,
176|            'data' => $data,
177|            'sessionId' => 'debug-session',
178|            'runId' => 'run1',
179|            'hypothesisId' => $hypothesisId,
180|            'outputBuffering' => ob_get_level(),
181|            'headersSent' => $headersSentInfo,
182|            'outputBufferContents' => ob_get_level() > 0 ? substr(ob_get_contents(), 0, 200) : null
183|        ]) . "\n";
184|        file_put_contents($logPath, $logEntry, FILE_APPEND | LOCK_EX);
185|    }
186|    // #endregion
187|
188|    public function onKernelController(ControllerEvent $event): void
189|    {
190|        // Só executa na request principal
191|        if (!$event->isMainRequest()) {
192|            return;
193|        }
194|        
195|        $request = $event->getRequest();
196|        $route = $request->attributes->get('_route');
197|        
198|        // ✅ Ignorar rotas de API - elas já possuem autenticação própria via access_control
199|        $pathInfo = $request->getPathInfo();
200|        if (str_starts_with($pathInfo, '/api/')) {
201|            return;
202|        }
203|        
204|        // #region agent log
205|        if ($route === 'crm_opportunities' || strpos($request->getPathInfo(), '/crm/opportunities') !== false) {
206|            $controller = $event->getController();
207|            $controllerInfo = 'unknown';
208|            if (is_array($controller)) {
209|                $controllerInfo = get_class($controller[0]) . '::' . $controller[1];
210|            }
211|            $this->debugLog('GlobalPermissionListener.php:onKernelController', 'Before controller execution', [
212|                'route' => $route,
213|                'path' => $request->getPathInfo(),
214|                'controller' => $controllerInfo,
215|                'errorReporting' => error_reporting(),
216|                'displayErrors' => ini_get('display_errors'),
217|                'logErrors' => ini_get('log_errors')
218|            ], 'A');
219|        }
220|        // #endregion
221|
222|        $user = $this->security->getUser();  
223|
224|        // Verifica se o usuário está logado
225|        if (!$user instanceof User) {
226|            return;
227|        }
228|
229|        // Verifica se o usuário é super admin (pode tudo)
230|        $userRoles = $user->getRoles();
231|        if (in_array('ROLE_SUPER_ADMIN', $userRoles) || in_array('ROLE_ADMIN', $userRoles)) {
232|            // Adiciona informação de admin à request
233|            $request->attributes->set('is_admin', true);
234|            
235|            // Define template para admin
236|            $this->setTemplateForRoute($route, $request, true);
237|            return;
238|        }
239|
240|        // Verifica permissões específicas
241|        $redirectResponse = $this->checkUserPermissions($user, $route, $request);
242|        if ($redirectResponse) {
243|            // Para requisições AJAX (fetch/XHR), retorna JSON 403 em vez de redirecionar para HTML.
244|            // Isso evita que o fetch siga o redirect (302→200 HTML) e mostre erro incompreensível.
245|            $acceptHeader = $request->headers->get('Accept', '');
246|            if (
247|                $request->isXmlHttpRequest()
248|                || str_contains($acceptHeader, 'application/json')
249|                || $route === 'structural_research_survey_get_participants'
250|            ) {
251|                $event->setController(static function () {
252|                    return new JsonResponse(['success' => false, 'message' => 'Sem permissão para acessar este recurso.'], 403);
253|                });
254|            } else {
255|                $event->setController(function() use ($redirectResponse) {
256|                    return $redirectResponse;
257|                });
258|            }
259|        }
260|    }
261|
262|    private function checkUserPermissions(User $user, string $route, $request): ?RedirectResponse {
263|
264|        // Verifica se é uma rota de pesquisa estrutural
265|        if (in_array($route, $this->structuralResearchRoutes)) {
266|            $company = $this->getCompanyBasedOnUserRole($user, $request);
267|            
268|            if (!$company) {
269|                $this->addFlashErrorOnce('Usuário não possui empresa associada ou empresa não encontrada.');
270|                return new RedirectResponse($this->urlGenerator->generate('app_home'));
271|            }
272|            
273|            return $this->handleStructuralResearchPermissions($user, $route, $request, $company);
274|        }
275|
276|        if ($route === 'live_interview_management') {
277|            $company = $this->getCompanyBasedOnUserRole($user, $request);
278|
279|            if (!$this->liveInterviewAccessService->canAccessManagement($user, $company)) {
280|                $this->addFlashErrorOnce('Você não possui permissão para acessar a plataforma de entrevistas.');
281|                return new RedirectResponse($this->urlGenerator->generate('app_home'));
282|            }
283|
284|            $this->setLiveInterviewManagementPermissions($request, $user, $company);
285|            return null;
286|        }
287|
288|        if ($route === 'onboarding_index' || $route === 'offboarding_index') {
289|            return $this->handleOnboardingIndexAccess($user, $route, $request);
290|        }
291|
292|        $requiredProduct = $this->getRequiredProductForRoute($route);
293|        
294|        // Se não há produto requerido para esta rota, não precisa fazer verificações
295|        if (!$requiredProduct) {
296|            return null;
297|        }
298|
299|        // APIs somente-leitura de Spaces Control usadas por outros módulos (ex.: Projetos).
300|        // Precisa sair ANTES do gate !$permissionTag: usuário sem tag do produto recebia
301|        // RedirectResponse, convertido em JSON 403 no AJAX (jQuery isXmlHttpRequest).
302|        if ($this->isSpacesControlSharedReadApiRoute((string) $route)) {
303|            return null;
304|        }
305|
306|        // Se for ROLE_MANAGER, acesso total para rotas mapeadas
307|        if (in_array('ROLE_MANAGER', $user->getRoles(), true)) {
308|            $company = $this->getCompanyBasedOnUserRole($user, $request);
309|            $this->setDefaultPermissions($request, $user, $company);
310|            // Define template/layout para manager (sempre admin)
311|            $this->setTemplateForRoute($route, $request, true);
312|            return null;
313|        }
314|
315|        // Apenas para rotas mapeadas, verificar empresa
316|        $company = $this->getCompanyBasedOnUserRole($user, $request);
317|        
318|        if (!$company) {
319|            $this->addFlashErrorOnce('Usuário não possui empresa associada ou empresa não encontrada.');
320|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
321|        }
322|        // Buscar CompanyMember pela empresa detectada; se o workspace divergir, usa vínculo ativo em outra empresa.
323|        $companyMember = $this->permissionService->getCompanyMember($user, $company);
324|        if (!$companyMember) {
325|            $companyMember = $this->entityManager->getRepository(\App\Entity\CompanyMembers::class)
326|                ->findOneBy([
327|                    'user' => $user,
328|                    'enabled' => true,
329|                    'isRemoved' => false
330|                ], ['created_at' => 'DESC']);
331|
332|            if ($companyMember) {
333|                $company = $companyMember->getCompany();
334|            }
335|        }
336|
337|        if (!$companyMember) {
338|            $this->addFlashErrorOnce('Usuário não vinculado a nenhuma empresa.');
339|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
340|        }
341|
342|        // Member self-service: list/upload own authorization documents (pendencies page, profile).
343|        if ($this->isMemberSelfAuthorizationDocumentRoute($route, $request, $companyMember)) {
344|            $this->setMemberSelfAuthorizationDocumentAttributes($request, $user, $company, $companyMember);
345|
346|            return null;
347|        }
348|    
349|        $product = $this->entityManager->getRepository(Product::class)
350|            ->findOneBy(['slug' => $requiredProduct]);
351|        // POSSIVELMENTE PRECISA REMOVE >>>>>
352|        
353|        // Fallback para buscar por nome se não encontrar por slug
354|        if (!$product) {
355|            $product = $this->entityManager->getRepository(Product::class)
356|                ->findOneBy(['name' => ucfirst($requiredProduct)]);
357|        }
358|
359|        $product = $this->resolveProductForPermissionRoute($requiredProduct);
360|
361|        if (!$product) {
362|            $this->setGlobalPermissions($request, $companyMember);
363|            // setGlobalPermissions agora define o template internamente
364|            return null;
365|        }
366|
367|        // Verificar ANTES de getPermissionTag auto-criar entradas no banco.
368|        // getPermissionTag cria PermissionTagByMember automaticamente quando não existe nenhuma,
369|        // então checar depois sempre retornaria true — precisamos do estado PRÉ-chamada.
370|        // Se o gestor atribuiu explicitamente este produto SSMA ao membro via "Editar Tags",
371|        // o acesso de leitura restrita será liberado mesmo que a tag tenha can_view=false.
372|        $hadExplicitSsmaProductAssignment = $this->isSsmaPermissionProduct($requiredProduct)
373|            && $product instanceof Product
374|            && $this->hasSsmaProductTagAssignmentForMember($companyMember, $product);
375|
376|        // Para sub-módulos SSMA, se o membro não tem tag específica, usa o produto-pai "saude-e-seguranca" como fallback.
377|        // EXCEÇÃO: estes subprodutos exigem tag explícita — o fallback liberaria membros
378|        // com tag global do SSMA para acessar áreas de Governança sem permissão explícita.
379|        $ssmaNoFallback = ['ssma-authorization', 'ssma-badge', 'ssma-cause-tree'];
380|        $permissionTag = null;
381|        if ($this->isSsmaPermissionProduct($requiredProduct) && in_array($requiredProduct, $ssmaNoFallback, true)) {
382|            $permissionTag = $this->getExplicitProductPermissionTagForMember($companyMember, $product);
383|        }
384|
385|        if (!$permissionTag) {
386|            $permissionTag = $this->permissionService->getPermissionTag($companyMember, $product);
387|        }
388|
389|        if (!$permissionTag && $this->isSsmaPermissionProduct($requiredProduct) && !in_array($requiredProduct, $ssmaNoFallback, true)) {
390|            $ssaProduct = $this->entityManager->getRepository(Product::class)
391|                ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
392|            if ($ssaProduct && $ssaProduct->getId() !== $product->getId()) {
393|                $permissionTag = $this->permissionService->getPermissionTag($companyMember, $ssaProduct);
394|            }
395|        }
396|
397|        // Hub leitura (Árvore de Causas): quem pode ver ocorrências SSMA acompanha sem tag em ssma-cause-tree.
398|        // Autorizações (ssma-authorization) exige tag do produto — não liberar só por ssma-occurrences.
399|        if (
400|            $this->isSsmaReadHubRouteAllowingOccurrenceViewFallback((string) $route)
401|            && $this->isSsmaPermissionProduct($requiredProduct)
402|            && $companyMember
403|        ) {
404|            $occurrencesProduct = $this->entityManager->getRepository(Product::class)
405|                ->findOneBy(['slug' => 'ssma-occurrences']);
406|            if ($occurrencesProduct) {
407|                $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
408|                $occurrencesTagName = $occurrencesTag?->getName();
409|                $isCauseTreeHubRoute = in_array($route, [
410|                    'ssma_cause_tree_index',
411|                    'ssma_cause_tree_view',
412|                    'ssma_cause_tree_data',
413|                ], true);
414|                $managementTagNames = ['Gestor Administrador', 'Gestor de Equipe', 'Supervisor de Equipe'];
415|                $occurrencesGrantsCauseTree = $occurrencesTag
416|                    && ($occurrencesTag->getCanView() ?? false)
417|                    && (!$isCauseTreeHubRoute || in_array($occurrencesTagName, $managementTagNames, true));
418|                if ($occurrencesGrantsCauseTree) {
419|                    if (!$permissionTag || !($permissionTag->getCanView() ?? false)) {
420|                        $permissionTag = $occurrencesTag;
421|                    }
422|                }
423|            }
424|        }
425|
426|        $gestorEquipeCauseTreeMutate = false;
427|        if (
428|            $requiredProduct === 'ssma-cause-tree'
429|            && $this->isSsmaCauseTreeHubMutationRoute((string) $route)
430|            && $companyMember
431|        ) {
432|            $occurrencesGestorTag = $this->getSsmaOccurrencesGestorEquipeTag($companyMember);
433|            if ($occurrencesGestorTag !== null) {
434|                $gestorEquipeCauseTreeMutate = true;
435|                if (!$permissionTag) {
436|                    $permissionTag = $occurrencesGestorTag;
437|                }
438|            }
439|        }
440|
441|        $preventionHubMutate = false;
442|        if (
443|            $requiredProduct === 'ssma-prevention'
444|            && $companyMember
445|            && $this->ssmaPreventionMutatePermissionService->isPreventionHubMutationRoute((string) $route)
446|            && $this->ssmaPreventionMutatePermissionService->canMutateForRoute($user, $company, (string) $route)
447|        ) {
448|            $preventionHubMutate = true;
449|            $occurrencesProduct = $this->entityManager->getRepository(Product::class)
450|                ->findOneBy(['slug' => 'ssma-occurrences']);
451|            if ($occurrencesProduct) {
452|                $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
453|                if ($occurrencesTag && ($occurrencesTag->getCanView() ?? false)) {
454|                    if (!$permissionTag || !($permissionTag->getCanView() ?? false)) {
455|                        $permissionTag = $occurrencesTag;
456|                    }
457|                }
458|            }
459|        }
460|
461|        $refusalRightMutate = false;
462|        if (
463|            $requiredProduct === 'ssma-occurrences'
464|            && $companyMember
465|            && $this->ssmaRefusalRightMutatePermissionService->isMutationRoute((string) $route)
466|            && $this->ssmaRefusalRightMutatePermissionService->canMutateForRoute(
467|                $user,
468|                $company,
469|                $companyMember,
470|                (string) $route,
471|                $request
472|            )
473|        ) {
474|            $refusalRightMutate = true;
475|            $occurrencesProduct = $this->entityManager->getRepository(Product::class)
476|                ->findOneBy(['slug' => 'ssma-occurrences']);
477|            if ($occurrencesProduct) {
478|                $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
479|                if ($occurrencesTag && ($occurrencesTag->getCanView() ?? false)) {
480|                    if (!$permissionTag || !($permissionTag->getCanView() ?? false)) {
481|                        $permissionTag = $occurrencesTag;
482|                    }
483|                }
484|            }
485|        }
486|
487|        if (!$permissionTag) {
488|            $this->addFlashErrorOnce('Usuário não possui permissão para acessar este módulo.');
489|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
490|        }
491|
492|        if (
493|            $this->isSsmaPermissionProduct($requiredProduct)
494|            && ($permissionTag->getCanView() ?? false) === false
495|            && $this->isSsmaTechnicalOccurrenceRoute((string) $route)
496|            && $this->hasSsmaTechnicalOccurrenceAccess($companyMember, $company)
497|        ) {
498|            $this->setSsmaTechnicalOccurrenceAttributes($request, $permissionTag, $companyMember, $user, $company, $product);
499|            return null;
500|        }

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "public/js/ssma/ssma-member-picker.js"}

File: public/js/ssma/ssma-member-picker.js (Total lines: 454)
IS_TRUNCATED: false
LINE_RANGE: 1-454
1|/**
2| * SSMA — seletor de membros (modal Internos: busca + Cargo/Time/Vínculo).
3| * Uso: SsmaShared.openMemberPicker({ mode, title, selectedIds, onConfirm, ... })
4| */
5|(function ($) {
6|    'use strict';
7|
8|    if (!$ || !window.SsmaShared) {
9|        return;
10|    }
11|
12|    var shared = window.SsmaShared;
13|    var AVATAR_COLORS = ['#EA151C', '#186073', '#25AD52', '#FFC107', '#6F42C1', '#FD7E14', '#20C997', '#DC3545'];
14|    var activeOptions = null;
15|    /** true após a primeira carga remota (evita re-fetch desnecessário). */
16|    var remotePickerLoaded = false;
17|
18|    function normalizeMember(row) {
19|        if (!row || row.id == null) {
20|            return null;
21|        }
22|        if (row.ssma_exclude_person_select) {
23|            return null;
24|        }
25|        return {
26|            id: parseInt(row.id, 10),
27|            name: String(row.name || row.email || '').trim(),
28|            email: String(row.email || '').trim(),
29|            avatar: row.avatar || '',
30|            cargo: String(row.cargo || row.position || '').trim(),
31|            team_display: String(row.team_display || row.team_name || '').trim(),
32|            vinculo: String(row.vinculo || '').trim()
33|        };
34|    }
35|
36|    function resolveCatalogRows(options) {
37|        if (options && Array.isArray(options.members)) {
38|            return options.members;
39|        }
40|        if (shared.modalMembers != null) {
41|            return Array.isArray(shared.modalMembers) ? shared.modalMembers : [];
42|        }
43|        return shared.allMembers || [];
44|    }
45|
46|    function buildCatalog(rows) {
47|        shared.memberPickerCatalog = [];
48|        $.each(rows || [], function (_, row) {
49|            var m = normalizeMember(row);
50|            if (m && m.id > 0 && m.name) {
51|                shared.memberPickerCatalog.push(m);
52|            }
53|        });
54|    }
55|
56|    /**
57|     * Complementa o catálogo local com todos os membros da empresa via AJAX.
58|     * Necessário em telas de detalhe (occurrence_view) onde allMembers está filtrado
59|     * apenas aos membros referenciados na ocorrência.
60|     * A flag remotePickerLoaded garante que a requisição só acontece uma vez por sessão.
61|     */
62|    function ensureFullMemberCatalog(callback) {
63|        var url = shared.membersSearchUrl;
64|        if (!url || remotePickerLoaded) {
65|            if (typeof callback === 'function') {
66|                callback();
67|            }
68|            return;
69|        }
70|        remotePickerLoaded = true;
71|
72|        $.getJSON(url, { q: '', company_scope: 1, picker: 1, limit: 500 })
73|            .done(function (resp) {
74|                var items = (resp && Array.isArray(resp.items)) ? resp.items : [];
75|                var existingIds = {};
76|                (shared.memberPickerCatalog || []).forEach(function (m) {
77|                    existingIds[String(m.id)] = true;
78|                });
79|                items.forEach(function (row) {
80|                    var m = normalizeMember(row);
81|                    if (m && m.id > 0 && m.name && !existingIds[String(m.id)]) {
82|                        shared.memberPickerCatalog.push(m);
83|                        existingIds[String(m.id)] = true;
84|                    }
85|                });
86|            })
87|            .always(function () {
88|                if (typeof callback === 'function') {
89|                    callback();
90|                }
91|            });
92|    }
93|
94|    function avatarColor(id) {
95|        return AVATAR_COLORS[Math.abs(parseInt(id, 10) || 0) % AVATAR_COLORS.length];
96|    }
97|
98|    function memberAvatarHtml(member) {
99|        var initial = (member.name || '?').charAt(0).toUpperCase();
100|        var uploadsBase = shared.uploadsPhotosBase || '/uploads/photos/';
101|        if (member.avatar) {
102|            var src = uploadsBase + String(member.avatar).replace(/^\/+/, '');
103|            return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
104|                '<img src="' + shared.escapeHtml(src) + '" class="user-avatar-image" alt="" ' +
105|                'onerror="this.style.display=\'none\';this.nextElementSibling.style.display=\'flex\';">' +
106|                '<div class="user-avatar" style="display:none;background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
107|                '</div>';
108|        }
109|        return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
110|            '<div class="user-avatar" style="background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
111|            '</div>';
112|    }
113|
114|    function escapeAttr(value) {
115|        return shared.escapeHtml(String(value ?? '')).replace(/'/g, '&#39;');
116|    }
117|
118|    function syncCustomSelectFromNative($sel) {
119|        if (!$sel || !$sel.length) {
120|            return;
121|        }
122|        var selectId = $sel.attr('id');
123|        var wrapper = $sel.closest('.custom-modern-select-wrapper');
124|        var optionsDiv = wrapper.find('.custom-modern-options').first();
125|        if (!optionsDiv.length) {
126|            return;
127|        }
128|        var html = '';
129|        $sel.find('option').each(function () {
130|            var val = $(this).attr('value');
131|            if (val === undefined || val === null) {
132|                val = '';
133|            }
134|            html += '<div class="custom-modern-option" data-value="' + escapeAttr(val) + '">' +
135|                shared.escapeHtml($(this).text()) + '</div>';
136|        });
137|        optionsDiv.html(html);
138|        if (typeof window.setCustomSelectValue === 'function' && selectId) {
139|            window.setCustomSelectValue(selectId, $sel.val() || '');
140|        } else if (typeof window.initCustomSelects === 'function') {
141|            window.initCustomSelects();
142|        }
143|    }
144|
145|    function resetMemberPickerFilters() {
146|        ['ssmaMemberPickerCargoFilter', 'ssmaMemberPickerTimeFilter', 'ssmaMemberPickerVinculoFilter'].forEach(function (id) {
147|            if (typeof window.setCustomSelectValue === 'function') {
148|                window.setCustomSelectValue(id, '');
149|            } else {
150|                $('#' + id).val('');
151|            }
152|        });
153|    }
154|
155|    function bindMemberPickerFilterHandlers() {
156|        $('#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter')
157|            .off('change.ssmaMemberPicker')
158|            .on('change.ssmaMemberPicker', filterRows);
159|    }
160|
161|    function rebuildCargoFilterOptions() {
162|        var $sel = $('#ssmaMemberPickerCargoFilter');
163|        if (!$sel.length) {
164|            return;
165|        }
166|        var prev = $sel.val() || '';
167|        var cargos = {};
168|        (shared.memberPickerCatalog || []).forEach(function (m) {
169|            if (m.cargo) {
170|                cargos[m.cargo.toLowerCase()] = m.cargo;
171|            }
172|        });
173|        $sel.find('option:not(:first)').remove();
174|        Object.keys(cargos).sort().forEach(function (key) {
175|            $sel.append($('<option>', { value: cargos[key], text: cargos[key] }));
176|        });
177|        if (prev) {
178|            $sel.val(prev);
179|        }
180|        syncCustomSelectFromNative($sel);
181|    }
182|
183|    function rebuildTimeFilterOptions() {
184|        var $sel = $('#ssmaMemberPickerTimeFilter');
185|        if (!$sel.length) {
186|            return;
187|        }
188|        var prev = $sel.val() || '';
189|        var teams = {};
190|        (shared.ssmaTeams || []).forEach(function (t) {
191|            if (t && t.name) {
192|                teams[String(t.name).toLowerCase()] = t.name;
193|            }
194|        });
195|        (shared.memberPickerCatalog || []).forEach(function (m) {
196|            if (m.team_display) {
197|                teams[m.team_display.toLowerCase()] = m.team_display;
198|            }
199|        });
200|        $sel.find('option:not(:first)').remove();
201|        Object.keys(teams).sort().forEach(function (key) {
202|            $sel.append($('<option>', { value: teams[key], text: teams[key] }));
203|        });
204|        if (prev) {
205|            $sel.val(prev);
206|        }
207|        syncCustomSelectFromNative($sel);
208|    }
209|
210|    function renderTableRows() {
211|        var $body = $('#ssmaMemberPickerTableBody');
212|        if (!$body.length) {
213|            return;
214|        }
215|        var opts = activeOptions || {};
216|        var exclude = {};
217|        (opts.excludeIds || []).forEach(function (id) {
218|            exclude[String(id)] = true;
219|        });
220|        var selected = {};
221|        (opts.selectedIds || []).forEach(function (id) {
222|            selected[String(id)] = true;
223|        });
224|        var isSingle = opts.mode === 'single';
225|        var inputType = isSingle ? 'radio' : 'checkbox';
226|        var inputName = isSingle ? 'ssma-member-picker-single' : '';
227|        var html = '';
228|
229|        (shared.memberPickerCatalog || []).forEach(function (m) {
230|            if (exclude[String(m.id)]) {
231|                return;
232|            }
233|            if (typeof opts.filterMember === 'function' && !opts.filterMember(m)) {
234|                return;
235|            }
236|            var teamCell = m.team_display
237|                ? '<span class="team-badge">' + shared.escapeHtml(m.team_display) + '</span>'
238|                : '<span class="default-cell-text">—</span>';
239|            html += '<tr class="ssma-member-picker-row" data-member-id="' + m.id + '"' +
240|                ' data-member-name="' + shared.escapeHtml((m.name || '').toLowerCase()) + '"' +
241|                ' data-cargo="' + shared.escapeHtml((m.cargo || '').toLowerCase()) + '"' +
242|                ' data-time="' + shared.escapeHtml((m.team_display || '').toLowerCase()) + '"' +
243|                ' data-vinculo="' + shared.escapeHtml((m.vinculo || '').toLowerCase()) + '">' +
244|                '<td style="padding:8px 12px;width:40px;">' +
245|                '<input type="' + inputType + '" class="custom-checkbox ssma-member-picker-chk"' +
246|                (inputName ? ' name="' + inputName + '"' : '') +
247|                ' value="' + m.id + '"' + (selected[String(m.id)] ? ' checked' : '') + '>' +
248|                '</td>' +
249|                '<td style="padding:8px 12px;"><div class="member-cell" style="gap:10px;">' +
250|                memberAvatarHtml(m) +
251|                '<div class="member-info" style="min-width:0;">' +
252|                '<span class="member-name" style="white-space:nowrap;overflow:hidden;text-overflow:ellipsis;max-width:220px;display:block;">' +
253|                shared.escapeHtml(m.name) + '</span>' +
254|                (m.email ? '<span class="member-email" style="white-space:nowrap;overflow:hidden;text-overflow:ellipsis;max-width:220px;display:block;">' +
255|                    shared.escapeHtml(m.email) + '</span>' : '') +
256|                '</div></div></td>' +
257|                '<td style="padding:8px 10px;"><span class="default-cell-text">' + shared.escapeHtml(m.cargo || '—') + '</span></td>' +
258|                '<td style="padding:8px 10px;">' + teamCell + '</td>' +
259|                '<td style="padding:8px 10px;"><span class="default-cell-text">' + shared.escapeHtml(m.vinculo || '—') + '</span></td>' +
260|                '</tr>';
261|        });
262|
263|        $body.html(html || '<tr><td colspan="5" class="text-center text-muted py-3 small">Nenhum membro disponível.</td></tr>');
264|        filterRows();
265|    }
266|
267|    function filterRows() {
268|        var search = ($('#ssma-member-picker-search-input').val() || '').toLowerCase().trim();
269|        var cargo = ($('#ssmaMemberPickerCargoFilter').val() || '').toLowerCase();
270|        var time = ($('#ssmaMemberPickerTimeFilter').val() || '').toLowerCase();
271|        var vinc = ($('#ssmaMemberPickerVinculoFilter').val() || '').toLowerCase();
272|        var visible = 0;
273|
274|        $('#ssmaMemberPickerTableBody .ssma-member-picker-row').each(function () {
275|            var $r = $(this);
276|            var name = String($r.attr('data-member-name') || '');
277|            var email = $r.find('.member-email').text().toLowerCase();
278|            var mCargo = String($r.attr('data-cargo') || '');
279|            var mTime = String($r.attr('data-time') || '');
280|            var mVinc = String($r.attr('data-vinculo') || '');
281|            var ok = (search === '' || name.indexOf(search) !== -1 || email.indexOf(search) !== -1)
282|                && (cargo === '' || mCargo.indexOf(cargo) !== -1)
283|                && (time === '' || mTime.indexOf(time) !== -1)
284|                && (vinc === '' || mVinc === vinc);
285|            $r.toggle(ok);
286|            if (ok) {
287|                visible += 1;
288|            }
289|        });
290|        $('#ssmaMemberPickerEmptyHint').toggleClass('d-none', visible > 0);
291|    }
292|
293|    function moveModalToBody() {
294|        var el = document.getElementById('ssmaMemberPickerModal');
295|        if (el && el.parentElement !== document.body) {
296|            document.body.appendChild(el);
297|        }
298|    }
299|
300|    function lockAppPageBodyScroll() {
301|        var $pageBody = $('.app-page-body').first();
302|        if ($pageBody.length) {
303|            $pageBody.addClass('offcanvas-active');
304|        }
305|    }
306|
307|    function unlockAppPageBodyScroll() {
308|        if ($('.modal.show').length) {
309|            return;
310|        }
311|        $('.app-page-body').first().removeClass('offcanvas-active');
312|    }
313|
314|    function resetMemberPickerSearch() {
315|        var $search = $('#ssma-member-picker-search');
316|        var $input = $('#ssma-member-picker-search-input');
317|        if ($input.length) {
318|            $input.val('');
319|        }
320|        if ($search.length) {
321|            $search.removeClass('active has-value');
322|        }
323|        if (typeof window.setupSearchExpandable === 'function') {
324|            window.setupSearchExpandable();
325|        }
326|    }
327|
328|    function collectSelectedIds() {
329|        var ids = [];
330|        $('#ssmaMemberPickerTableBody .ssma-member-picker-chk:checked').each(function () {
331|            var id = parseInt($(this).val(), 10);
332|            if (id > 0) {
333|                ids.push(id);
334|            }
335|        });
336|        return ids;
337|    }
338|
339|    function membersByIds(ids) {
340|        var map = {};
341|        (shared.memberPickerCatalog || []).forEach(function (m) {
342|            map[String(m.id)] = m;
343|        });
344|        return (ids || []).map(function (id) {
345|            return map[String(id)] || shared.getMemberById(id);
346|        }).filter(Boolean);
347|    }
348|
349|    shared.openMemberPicker = function (options) {
350|        activeOptions = $.extend({
351|            mode: 'multiple',
352|            title: 'Selecionar membros',
353|            sectionLabel: 'Internos',
354|            selectedIds: [],
355|            excludeIds: [],
356|            confirmLabel: 'Confirmar',
357|            onConfirm: null
358|        }, options || {});
359|        buildCatalog(resolveCatalogRows(activeOptions));
360|
361|        moveModalToBody();
362|        $('#ssmaMemberPickerModalTitle').text(activeOptions.title);
363|        $('#ssmaMemberPickerSectionLabel').text(activeOptions.sectionLabel);
364|        $('#ssmaMemberPickerConfirmBtn').text(activeOptions.confirmLabel);
365|        resetMemberPickerFilters();
366|        resetMemberPickerSearch();
367|
368|        var renderAndBind = function () {
369|            rebuildCargoFilterOptions();
370|            rebuildTimeFilterOptions();
371|            renderTableRows();
372|            bindMemberPickerFilterHandlers();
373|            if (typeof window.initAllCustomSelectWrappers === 'function') {
374|                window.initAllCustomSelectWrappers();
375|            }
376|        };
377|
378|        // Catálogo já recortado (modalMembers / options.members): não expandir via AJAX
379|        // com company_scope, senão o picker ignora a limitação por área.
380|        var catalogIsScoped = Array.isArray(activeOptions.members) || shared.modalMembers != null;
381|        if (!catalogIsScoped && !remotePickerLoaded && shared.membersSearchUrl) {
382|            // Primeira abertura: exibe loading enquanto carrega todos os membros remotamente.
383|            $('#ssmaMemberPickerTableBody').html(
384|                '<tr><td colspan="5" class="text-center text-muted py-3 small">' +
385|                '<i class="fas fa-spinner fa-spin mr-1"></i>Carregando membros&hellip;' +
386|                '</td></tr>'
387|            );
388|            $('#ssmaMemberPickerModal').modal('show');
389|            ensureFullMemberCatalog(renderAndBind);
390|        } else {
391|            renderAndBind();
392|            $('#ssmaMemberPickerModal').modal('show');
393|        }
394|    };
395|
396|    $(document).on('input', '#ssma-member-picker-search-input', filterRows);
397|
398|    $(document).on('change', '#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter', filterRows);
399|
400|    $(document).on('change', '#ssmaMemberPickerTableBody .ssma-member-picker-chk', function () {
401|        if (!activeOptions || activeOptions.mode !== 'single') {
402|            return;
403|        }
404|        if (this.checked) {
405|            $('#ssmaMemberPickerTableBody .ssma-member-picker-chk').not(this).prop('checked', false);
406|        }
407|    });
408|
409|    $(document).on('click', '#ssmaMemberPickerTableBody .ssma-member-picker-row', function (e) {
410|        if ($(e.target).is('input, a, button, label')) {
411|            return;
412|        }
413|        var $chk = $(this).find('.ssma-member-picker-chk');
414|        if (!$chk.length) {
415|            return;
416|        }
417|        if (activeOptions && activeOptions.mode === 'single') {
418|            $chk.prop('checked', true).trigger('change');
419|        } else {
420|            $chk.prop('checked', !$chk.prop('checked'));
421|        }
422|    });
423|
424|    $('#ssmaMemberPickerConfirmBtn').on('click', function () {
425|        var ids = collectSelectedIds();
426|        if (activeOptions && activeOptions.mode === 'single' && ids.length > 1) {
427|            ids = [ids[0]];
428|        }
429|        if (typeof activeOptions.onConfirm === 'function') {
430|            activeOptions.onConfirm(ids, membersByIds(ids));
431|        }
432|        $('#ssmaMemberPickerModal').modal('hide');
433|    });
434|
435|    $(document).on('show.bs.modal', '#ssmaMemberPickerModal', function () {
436|        lockAppPageBodyScroll();
437|    });
438|
439|    $(document).on('shown.bs.modal', '#ssmaMemberPickerModal', function () {
440|        if (typeof window.setupSearchExpandable === 'function') {
441|            window.setupSearchExpandable();
442|        }
443|        if (typeof window.initAllCustomSelectWrappers === 'function') {
444|            window.initAllCustomSelectWrappers();
445|        }
446|        filterRows();
447|    });
448|
449|    $(document).on('hidden.bs.modal', '#ssmaMemberPickerModal', function () {
450|        unlockAppPageBodyScroll();
451|    });
452|
453|})(window.jQuery);
454|

{"search_text": "function getRequiredProductForRoute", "file_patterns": ["src/EventListener/GlobalPermissionListener.php"]}

File: src/EventListener/GlobalPermissionListener.php
Match lines: 1
982|    private function getRequiredProductForRoute(string $route): ?string

{"search_text": "'admin_ssma_action|ssma_action_plan|ssma_plano_acao|ssma_action_delete|ssma_action_reopen|ssma_action_resolve|ssma_action_create|ssma_action_update'", "use_perl_regexp": true}

File: config/automations/ssma.yaml
Match lines: 1
308|      type: "ssma_action_create_feed_draft"

File: config/routes_ssma.yaml
Match lines: 7
16|ssma_plano_acao_index:
111|admin_ssma_action_plan_delete:
190|admin_ssma_action_create:
205|admin_ssma_action_reopen:
210|admin_ssma_action_resolve:
225|admin_ssma_action_delete:
370|ssma_action_plan_projects:

File: docs/INTEGRACAO-SSMA-CC-FELIPE.md
Match lines: 2
78|- **Rota:** `admin_ssma_action_resolve`  
170|| `templates/ssma/partials/_modal_action_resolution.html.twig` | Modal “Satisfação com a ação realizada”: nota, evidência (textarea), busca de validador, escala de satisfação, submit → `admin_ssma_action_resolve`. Botão principal: **“Enviar para validação”**. |

File: docs/PLANO-INTEGRACAO-SSMA-CC.md
Match lines: 2
15|3. POST → `admin_ssma_action_resolve` → `SsmaController::resolveAction()`
89|Alterar o endpoint `admin_ssma_action_resolve` para:

File: docs/SSMA-REGRAS-POS-MERGE.md
Match lines: 2
425|| `81dfa9c6b`, `498a4ff3e` | Mapeamento `admin_ssma_action_create` → produto `ssma-action-plan` (com revert intermediário) |
508|php tests/Ssma/ssma_action_plan_logic_standalone.php    # 29 cenários

File: docs/adriana-cognitive-layer/ROADMAP-UNIFICACAO.md
Match lines: 1
77|| P13 | SSMA `/planodeação` | `POST /ia/send` | `SsmaTurnHandler` | `SsmaCommandService` + `SsmaActionPlan*Service` | `metahuman_ssma_action_plan` | principal | **12 ✓** |

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 3
2234|a9d4fb172c fix(ssma/permission): mapeia admin_ssma_action_create para produto ssma-action-plan
2238|d7d8975539 Revert "fix(ssma/permission): mapeia admin_ssma_action_create para produto ssma-action-plan"
2245|5323bcf8bc fix(ssma/permission): mapeia admin_ssma_action_create para produto ssma-action-plan

File: docs/ssma/PAINEL-OCORRENCIAS-INDICADORES-PLANO.md
Match lines: 2
317|- [x] CTAs linkando Prevenção Ativa (`ssma_prevencao_index`) e Plano de Ação (`ssma_plano_acao_index`)
553|Detalhe completo fica no painel **Plano de Ação** (`ssma_plano_acao_index`).

File: docs/ssma/PRODUTO_SSMA_CATALOGO_TELAS.md
Match lines: 1
931|| **Rota** | `ssma_plano_acao_index` |

File: docs/ssma/PRODUTO_SSMA_MAPA_COMPLETO.md
Match lines: 3
117|| **Plano de ação** (hub) | [BASE/manager/ssma/plano-acao](BASE/manager/ssma/plano-acao) | `ssma_plano_acao_index` | [§6](#6-plano-de-ação) |
118|| Relatório executivo plano | [BASE/manager/ssma/plano-acao?executive_report=1](BASE/manager/ssma/plano-acao?executive_report=1) | `ssma_plano_acao_index` | [§6.3](#63-relatório-executivo) |
275|6. **Plano de ação** — criar ou vincular ação; busca projetos `ssma_action_plan_projects`.

File: docs/ssma/SSMA-AUTOMACOES-OCORRENCIAS.md
Match lines: 1
100|| `ssma_action_plan_assigned` | `ssma_on_action_plan_assigned` | **Plano de ação for atribuído a um responsável** | — |

File: src/Controller/SsmaController.php
Match lines: 2
4596|                $this->generateUrl('ssma_plano_acao_index'),
4636|            $this->generateUrl('ssma_plano_acao_index'),

File: src/EventListener/GlobalPermissionListener.php
Match lines: 4
124|            'ssma_plano_acao_' => 'ssma-action-plan',
126|            'admin_ssma_action_' => 'ssma-action-plan',
1134|        return in_array($route, ['admin_ssma_action_create', 'admin_ssma_action_validate'], true);
1449|            'ssma_plano_acao_index',

File: src/Service/Home/HomeSsmaActivityCardService.php
Match lines: 1
338|                'href' => $this->urlGenerator->generate('ssma_plano_acao_index'),

File: src/Service/SafetyEnvironmentService.php
Match lines: 3
67|            'actionPlansListHref' => $this->router->generate('ssma_plano_acao_index'),
368|                    'href' => $this->router->generate('ssma_plano_acao_index', ['action' => $actionId]),
442|                    'href' => $this->router->generate('ssma_plano_acao_index', ['action' => $actionId]),

File: src/Service/Ssma/SsmaActionValidationService.php
Match lines: 1
66|            'ssma_plano_acao_index',

File: src/Service/Ssma/SsmaAutomationService.php
Match lines: 1
2352|            'ssma_create_feed_draft'              => 'ssma_action_create_feed_draft',

File: src/Service/Ssma/SsmaIndicatorImprovementAutomationRunner.php
Match lines: 2
198|            $type = 'ssma_action_create_feed_draft';
200|        if ($type !== 'ssma_action_create_feed_draft') {

File: src/Service/Ssma/SsmaNotificationService.php
Match lines: 1
305|            $this->urlGenerator->generate('ssma_plano_acao_index', ['action' => $actionId])

File: templates/decision_system/automations/list_automations.html.twig
Match lines: 1
343|        'ssma_action_plan_assigned': 'Plano de ação for atribuído a um responsável',

File: templates/decision_system/automations/new_automation.html.twig
Match lines: 5
4488|            'ssma_action_plan_assigned':       'plano de ação for atribuído a um responsável',
4674|            'ssma_action_create_feed_draft':   'criar rascunho no feed',
6409|                    'ssma_action_plan_assigned': 'Plano de ação for atribuído a um responsável',
7452|                    'ssma_action_create_feed_draft': 'Criar rascunho no feed',
8253|        'ssma_create_feed_draft':                 'ssma_action_create_feed_draft',

File: templates/governance/cases/automations/new_automation.html.twig
Match lines: 5
3225|            'ssma_action_plan_assigned':       'plano de ação for atribuído a um responsável',
3340|            'ssma_action_create_feed_draft':   'criar rascunho no feed',
4289|                    'ssma_action_plan_assigned': 'Plano de ação for atribuído a um responsável',
5080|                    'ssma_action_create_feed_draft': 'Criar rascunho no feed',
5714|        'ssma_create_feed_draft':                 'ssma_action_create_feed_draft',

File: templates/layoutAdmin.html.twig
Match lines: 1
2457|                            <a href="{{ path('ssma_plano_acao_index') }}" class="nav-link" data-rels="ssma_plano_acao_index">

File: templates/layoutUser.html.twig
Match lines: 6
1409|                                    <a href="#" class="nav-link d-flex align-items-center" data-rels="user_ssma_assessment_list ssma_ocorrencia_index ssma_cause_tree_index ssma_prevencao_index ssma_plano_acao_index ssma_direito_recusa_index">
1468|                                            <a id="nav_item_member_ssma_action_plan" href="{{ path('ssma_plano_acao_index') }}" class="nav-link" data-rels="ssma_plano_acao_index">
2203|                                {% set ssmaHubParentDataRels = 'ssma_ocorrencia_index ssma_prevencao_index ssma_plano_acao_index ssma_direito_recusa_index' %}
2253|                                            <a href="{{ path('ssma_plano_acao_index') }}"
2255|                                               data-rels="ssma_plano_acao_index">
2759|                                <a id="nav_item_maturity_ssma_action_plan_bottom" href="{{ path('ssma_plano_acao_index') }}" class="nav-link">

File: templates/new_home/manager_home.html.twig
Match lines: 1
1540|                                                <a href="{{ safetyEnvironmentSections.actionPlansListHref|default(path('ssma_plano_acao_index')) }}" class="administrative-card-link">Plano de ação</a>

File: templates/projects2.0/components/modal_create_project.html.twig
Match lines: 2
907|											var SSMA_ACTION_PLAN_TEMPLATE_NAME = 'Plano de Ação de Ocorrências';
911|												return String(name || '').trim() === SSMA_ACTION_PLAN_TEMPLATE_NAME;

File: templates/ssma/action_plan/tabs/_tab_action_plan.html.twig
Match lines: 6
141|<div class="modern-header-actions has-mobile-fabs" id="ssma_action_plan_controls">
151|                data-report-url="{{ path('ssma_plano_acao_index', {executive_report: 1}) }}"
183|        'data-report-url': path('ssma_plano_acao_index', {executive_report: 1})
359|        var ssmaActionPlanDeleteUrl = {{ path('admin_ssma_action_plan_delete')|json_encode|raw }};
360|        var ssmaActionPlanReopenUrlTemplate = {{ path('admin_ssma_action_reopen', {id: '__ID__'})|json_encode|raw }};
361|        var ssmaActionPlanProjectsUrl = {{ path('ssma_action_plan_projects')|json_encode|raw }};

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 3
1373|    var ssmaActionDeleteUrlTemplate = {{ path('admin_ssma_action_delete', {id: '__ID__'})|json_encode|raw }};
1374|    var ssmaActionReopenUrlTemplate = {{ path('admin_ssma_action_reopen', {id: '__ID__'})|json_encode|raw }};
1375|    var ssmaActionPlanProjectsUrl = {{ path('ssma_action_plan_projects')|json_encode|raw }};

File: templates/ssma/partials/_intro_tutorial_helpers.html.twig
Match lines: 5
47|        '#ssma_action_plan_controls',
276|            '#ssma_action_plan_controls .js-create-action-btn',
277|            '#ssma_action_plan_controls'
281|        '#ssma_action_plan_controls > .d-lg-flex.align-items-center',
282|        '#ssma_action_plan_controls'

File: templates/ssma/partials/_modal_action.html.twig
Match lines: 3
771|    var ACTION_CREATE_URL = {{ path('admin_ssma_action_create')|json_encode|raw }};
772|    var ACTION_GET_URL = {{ path('admin_ssma_action_get', {id: '__ID__'})|json_encode|raw }};
1341|            url: {{ path('ssma_action_plan_projects')|json_encode|raw }},

File: templates/ssma/partials/_modal_action_resolution.html.twig
Match lines: 2
211|    var SSMA_ACTION_RESOLVE_URL_TPL = '{{ path('admin_ssma_action_resolve', {id: '__ACTION_ID__'})|e('js') }}';
609|                url: SSMA_ACTION_RESOLVE_URL_TPL.replace('__ACTION_ID__', encodeURIComponent(String(resolutionState.actionId))),

File: templates/ssma/partials/_modal_action_validation.html.twig
Match lines: 1
103|    var VALIDATE_URL_TPL = '{{ path('admin_ssma_action_validate', {id: '__ACTION_ID__'})|e('js') }}';

File: templates/ssma/prevention/approach/index.html.twig
Match lines: 2
777|    var ssmaActionDeleteUrlTemplate = {{ path('admin_ssma_action_delete', {id: '__ID__'})|json_encode|raw }};
778|    var ssmaActionReopenUrlTemplate = {{ path('admin_ssma_action_reopen', {id: '__ID__'})|json_encode|raw }};

File: templates/ssma/prevention/inspection/index.html.twig
Match lines: 2
653|    var ssmaActionDeleteUrlTemplate = {{ path('admin_ssma_action_delete', {id: '__ID__'})|json_encode|raw }};
654|    var ssmaActionReopenUrlTemplate = {{ path('admin_ssma_action_reopen', {id: '__ID__'})|json_encode|raw }};

File: tests/Ssma/run_ssma_chat_flow_tests.php
Match lines: 1
12|    [PHP_BINARY, 'tests/Ssma/ssma_action_plan_logic_standalone.php'],

File: tests/Ssma/ssma_action_plan_logic_standalone.php
Match lines: 1
9| * Execução: php tests/Ssma/ssma_action_plan_logic_standalone.php

File: tests/Unit/Product/Ssma/SafetyEnvironmentMemberSectionsServiceTest.php
Match lines: 1
155|        self::assertStringContainsString('ssma_plano_acao_index:', $sections['execution'][0]['href']);

File: tests/Unit/Product/Ssma/ssma_permissions_policy_standalone.php
Match lines: 8
110|    'ssma_plano_acao_index' => 'ssma-action-plan',
124|    'ssma_plano_acao_index',
495|function hubCanAccessSsmaActionPlan(array $p, string $routeAttrs = 'ssma_plano_acao_index'): bool
497|    $reqView = listenerSimulateRequestCanView('ssma_plano_acao_index', $p);
579|            'ssma-action-plan' => 'ssma_plano_acao_index',
600|        'ssma-action-plan' => 'ssma_plano_acao_index',
617|ok('Plano: tag negada + stakeholder → listener ainda ON', listenerSimulateRequestCanView('ssma_plano_acao_index', $deniedComStake) === true);
685|ok('Listener: plano_acao stakeholder → ON', listenerSimulateRequestCanView('ssma_plano_acao_index', $stake) === true);

{"file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 960, "end_line": 1060}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1792)
IS_TRUNCATED: false
LINE_RANGE: 960-1060
960|        }
961|
962|        // Hub financeiro: /finance/refunds — sem ID de empresa no path.
963|        if (preg_match('#^/finance/refunds(?:/|$)#', (string) $pathInfo)) {
964|            return null;
965|        }
966|
967|        // Método 4: Extrair o último número da URL (legado; não usar para IDs de recurso em rotas acima)
968|        if (preg_match('/\/(\d+)(?:\/.*)?$/', $pathInfo, $matches)) {
969|            return (int) $matches[1];
970|        }
971|        
972|        // Método 5: Extrair qualquer número da URL que pareça ser um ID de empresa
973|        if (preg_match_all('/\/(\d+)/', $pathInfo, $matches)) {
974|            $numbers = $matches[1];
975|            // Pega o último número encontrado (assumindo que é o company ID)
976|            return (int) end($numbers);
977|        }
978|        
979|        return null;
980|    }
981|
982|    private function getRequiredProductForRoute(string $route): ?string
983|    {
984|        foreach ($this->routeProductMapping as $routePrefix => $product) {
985|            if (str_starts_with($route, $routePrefix)) {
986|                return $product;
987|            }
988|        }
989|
990|        return null;
991|    }
992|    private function resolveProductForPermissionRoute(string $requiredProduct): ?Product
993|    {
994|        $product = $this->entityManager->getRepository(Product::class)
995|            ->findOneBy(['slug' => $requiredProduct]);
996|
997|        if (!$product && in_array($requiredProduct, ['nps-com-ia', 'nps-ia'], true)) {
998|            $npsAliases = ['nps-com-ia', 'nps-ia'];
999|            foreach ($npsAliases as $npsAlias) {
1000|                $product = $this->entityManager->getRepository(Product::class)
1001|                    ->findOneBy(['slug' => $npsAlias]);
1002|                if ($product) {
1003|                    break;
1004|                }
1005|            }
1006|        }
1007|
1008|        $ssmaNoFallback = ['ssma-authorization', 'ssma-badge', 'ssma-cause-tree'];
1009|        if (!$product && str_starts_with($requiredProduct, 'ssma-') && !in_array($requiredProduct, $ssmaNoFallback, true)) {
1010|            $product = $this->entityManager->getRepository(Product::class)
1011|                ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
1012|        }
1013|
1014|        // Fallback para buscar por nome se não encontrar por slug
1015|        if (!$product) {
1016|            $product = $this->entityManager->getRepository(Product::class)
1017|                ->findOneBy(['name' => ucfirst($requiredProduct)]);
1018|        }
1019|
1020|        return $product;
1021|    }
1022|    /**
1023|     * GET JSON de andares/salas/colaboradores — chamado pelo modal Novo Projeto,
1024|     * sem exigir PermissionTag do produto spaces_control.
1025|     */
1026|    private function isSpacesControlSharedReadApiRoute(string $route): bool
1027|    {
1028|        return in_array($route, [
1029|            'spaces_control_floors_api_list',
1030|            'spaces_control_api_floor_spaces',
1031|            'spaces_control_api_floor_collaborators',
1032|        ], true);
1033|    }
1034|
1035|    private function canAccessMappedRouteWithRestrictedView(string $route): bool
1036|    {
1037|        if ($this->isSpacesControlSharedReadApiRoute($route)) {
1038|            return true;
1039|        }
1040|
1041|        $routesAllowed = [
1042|            'user_license',
1043|            'refunds_',
1044|            'offboarding_',
1045|            'nps_dashboard',
1046|            'spaces_control_realtime',
1047|            'spaces_control_book_room',
1048|            'ssma_prevencao_index',
1049|            'admin_ssma_prevencao_panel_filter',
1050|            'admin_ssma_prevencao_metas_filter',
1051|        ];
1052|
1053|        foreach ($routesAllowed as $routePrefix) {
1054|            if (str_starts_with($route, $routePrefix)) {
1055|                return true;
1056|            }
1057|        }
1058|
1059|        return false;
1060|    }

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "name: (admin_)?ssma_action", "use_perl_regexp": true}

No matches found

{"file_patterns": ["config/routes_ssma.yaml"], "search_text": "ssma_action|admin_ssma_action", "use_perl_regexp": true}

File: config/routes_ssma.yaml
Match lines: 17
111|admin_ssma_action_plan_delete:
190|admin_ssma_action_create:
195|admin_ssma_action_get:
200|ssma_action_modal_partial:
205|admin_ssma_action_reopen:
210|admin_ssma_action_resolve:
215|admin_ssma_action_validate:
225|admin_ssma_action_delete:
370|ssma_action_plan_projects:
375|ssma_action_link_project:
380|ssma_action_occurrences_search:
385|ssma_action_inspections_search:
390|ssma_action_abordagens_search:
484|ssma_action_type_config_get:
489|ssma_action_type_config_save:
494|ssma_action_validator_config_get:
499|ssma_action_validator_config_save:

{"file_path": "src/Controller/SsmaController.php", "start_line": 4650, "end_line": 4780}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 4650-4780
4650|            $toStr,
4651|            $prevFromStr,
4652|            $prevToStr,
4653|            $typeLabels,
4654|        );
4655|
4656|        return $report;
4657|    }
4658|
4659|    /**
4660|     * @param array<string, string> $typeLabels
4661|     *
4662|     * @return array<string, mixed>
4663|     */
4664|    private function buildActionPlanExecutiveReportUnitsComparison(
4665|        Company $company,
4666|        ?string $fromStr,
4667|        string $toStr,
4668|        string $prevFromStr,
4669|        string $prevToStr,
4670|        array $typeLabels,
4671|    ): array {
4672|        $builder      = new SsmaActionPlanExecutiveReportBuilder();
4673|        $subsidiaries = $this->resolveSsmaNetworkSubsidiaries($company);
4674|
4675|        if (count($subsidiaries) < 2) {
4676|            return $builder->emptyUnitsComparison('no_network');
4677|        }
4678|
4679|        $unitRows   = [];
4680|        $allActions = [];
4681|
4682|        foreach ($subsidiaries as $sub) {
4683|            $cur  = $this->loadActionsForExecutiveReport($sub, $fromStr, $toStr);
4684|            $prev = $this->loadActionsForExecutiveReport($sub, $prevFromStr, $prevToStr);
4685|            $allActions = array_merge($allActions, $cur);
4686|            $unitRows[] = $builder->buildUnitRow(
4687|                $sub->getFantasyName() ?: $sub->getName() ?: ('Unidade #' . $sub->getId()),
4688|                $cur,
4689|                $prev,
4690|            );
4691|        }
4692|
4693|        return $builder->buildUnitsComparison($unitRows, $allActions, $typeLabels);
4694|    }
4695|
4696|    /**
4697|     * @return list<array<string, mixed>>
4698|     */
4699|    private function loadActionsForExecutiveReport(Company $company, ?string $fromStr, string $toStr): array
4700|    {
4701|        $conn = $this->entityManager->getConnection();
4702|        $rows = $conn->executeQuery(
4703|            'SELECT id, type, origem, control_hierarchy, validation_status, resolution_rating,
4704|                    project_priority, has_project, solved, deadline, created_at, updated_at,
4705|                    responsible_ids, validator_member_id
4706|             FROM ssma_actions
4707|             WHERE company_id = ?
4708|               AND DATE(created_at) <= ?
4709|             ORDER BY created_at DESC',
4710|            [$company->getId(), $toStr]
4711|        )->fetchAllAssociative();
4712|
4713|        $areaMemberIds = $this->getSsmaCombinedAreaMemberIds($company, $this->getUser() instanceof User ? $this->getUser() : null);
4714|        if ($areaMemberIds !== null) {
4715|            $rows = array_values(array_filter(
4716|                $rows,
4717|                fn (array $row): bool => $this->executiveReportActionRowInAreaScope($row, $areaMemberIds)
4718|            ));
4719|        }
4720|
4721|        $asOf = new \DateTimeImmutable($toStr);
4722|        $result = [];
4723|        foreach ($rows as $row) {
4724|            $normalized = SsmaActionPlanExecutiveReportBuilder::normalizeActionRow($row, $asOf);
4725|            if ($fromStr !== null && $fromStr !== '' && ($normalized['created_at'] ?? '') < $fromStr) {
4726|                if ($normalized['solved'] && ($normalized['updated_at'] ?? '') < $fromStr) {
4727|                    continue;
4728|                }
4729|            }
4730|            $result[] = $normalized;
4731|        }
4732|
4733|        return $result;
4734|    }
4735|
4736|    /**
4737|     * @param array<string, mixed> $row
4738|     * @param array<int, true> $allowedMemberIds
4739|     */
4740|    private function executiveReportActionRowInAreaScope(array $row, array $allowedMemberIds): bool
4741|    {
4742|        $validatorMemberId = (int) ($row['validator_member_id'] ?? 0);
4743|        if ($validatorMemberId > 0 && isset($allowedMemberIds[$validatorMemberId])) {
4744|            return true;
4745|        }
4746|
4747|        $responsibleIds = $row['responsible_ids'] ?? [];
4748|        if (is_string($responsibleIds) && $responsibleIds !== '') {
4749|            $decoded = json_decode($responsibleIds, true);
4750|            $responsibleIds = is_array($decoded) ? $decoded : [];
4751|        }
4752|        foreach ((array) $responsibleIds as $id) {
4753|            if (isset($allowedMemberIds[(int) $id])) {
4754|                return true;
4755|            }
4756|        }
4757|
4758|        return false;
4759|    }
4760|
4761|    /**
4762|     * Resolves [DateTimeImmutable $from, DateTimeImmutable $to] for a given period string.
4763|     *
4764|     * @return array{0: \DateTimeImmutable, 1: \DateTimeImmutable}
4765|     */
4766|    private function resolveExecutiveReportPeriod(string $period): array
4767|    {
4768|        $today = new \DateTimeImmutable('today');
4769|
4770|        if (preg_match('/^month:(\d{4})-(\d{2})$/', $period, $m)) {
4771|            $from = new \DateTimeImmutable(sprintf('%04d-%02d-01', (int) $m[1], (int) $m[2]));
4772|            $to   = $from->modify('last day of this month');
4773|        } elseif (preg_match('/^range:(\d{4}-\d{2}-\d{2}):(\d{4}-\d{2}-\d{2})$/', $period, $m)) {
4774|            $from = new \DateTimeImmutable($m[1]);
4775|            $to   = new \DateTimeImmutable($m[2]);
4776|            if ($from > $to) { [$from, $to] = [$to, $from]; }
4777|        } elseif (preg_match('/^year:(\d{4})$/', $period, $m)) {
4778|            $from = new \DateTimeImmutable(sprintf('%04d-01-01', (int) $m[1]));
4779|            $to   = new \DateTimeImmutable(sprintf('%04d-12-31', (int) $m[1]));
4780|        } else {

{"file_patterns": ["src/Entity/SsmaAction.php"], "search_text": "responsible_ids|validator_member|validatorMember|responsibleIds", "use_perl_regexp": true}

File: src/Entity/SsmaAction.php
Match lines: 6
63|    private ?array $responsibleIds = [];
100|    private ?int $validatorMemberId = null;
189|    public function getResponsibleIds(): array { return $this->responsibleIds ?? []; }
190|    public function setResponsibleIds(array $ids): self { $this->responsibleIds = $ids; return $this; }
216|    public function getValidatorMemberId(): ?int { return $this->validatorMemberId; }
217|    public function setValidatorMemberId(?int $id): self { $this->validatorMemberId = $id; return $this; }

{"search_text": "validator_member_id|responsible_ids", "use_perl_regexp": true}

Note: The results have been truncated. Only showing first 100 results.
File: docs/Adriana/ADRIANA_INSTANCIAS_MAPEAMENTO.md
Match lines: 1
183|| `responsible_ids[]` (direct) | int[] | |

File: docs/INTEGRACAO-SSMA-CC-FELIPE.md
Match lines: 4
15|Fluxo legado preservado: se o payload de resolução **não** enviar `validator_member_id`, a ação continua sendo fechada direto (`solved = true`), como antes.
91|  "validator_member_id": 123
97|- Se `validator_member_id` **preenchido:** define `validationStatus`, `validatorMemberId`, `closingEvidence`, mantém `solved = false`, chama `submitForValidation`, persiste `ccDemandId`, responde com `validation_status` e `cc_demand_id`.
177|Foi corrigido um bug em que `SsmaController::loadActions()` não repassava os novos campos para o front; agora o array inclui `validation_status`, `validator_member_id`, `closing_evidence`, `cc_demand_id`, `rejection_note`, permitindo badges e links corretos.

File: docs/PLANO-INTEGRACAO-SSMA-CC.md
Match lines: 3
96|  validator_member_id (obrigatório para validação)
105|3. SsmaAction::validatorMemberId = validator_member_id
131|- responsibles_json: [validator_member_id]

File: docs/SSMA-CC-CORRECOES-IMPLEMENTADAS.md
Match lines: 3
47|- Payload enviado: `validator_member_ids: [id1, id2, ...]` (array).  
51|- Aceita `validator_member_ids` (array) com fallback para `validator_member_id` (legado).  
217|| `templates/ssma/partials/_modal_action_resolution.html.twig` | SSMA_IS_TENANT, multi-validador chips, payload validator_member_ids |

File: docs/SSMA-CC-CORRECOES.md
Match lines: 6
35|| `SsmaController::resolveAction` | Se tenant: ignorar `validator_member_id`, fechar direto (`solved = true`), não chamar `ssmaActionValidationService->submitForValidation` |
61|| `SsmaController::resolveAction` | Aceitar `validator_member_ids` (array) no payload; iterar e criar demanda(s) |
62|| `SsmaAction` entity | Adicionar campo `validator_member_ids` (JSON array) ao lado do atual `validator_member_id` — ou migrar para array |
63|| Migration | Adicionar coluna `validator_member_ids JSON NULL` na tabela `ssma_actions` |
72|  "validator_member_ids": [12, 34, 56],
240|- Verificar se o payload de salvar/carregar validadores padrão está usando o campo correto (`member_ids` ou `validator_member_ids`).

File: docs/SSMA-REGRAS-POS-MERGE.md
Match lines: 8
242|- Filtra por `responsible_ids`: pelo menos um responsável no conjunto permitido
246|| Membro | Só ações em que ele está em `responsible_ids` |
254|- Filtro do painel (`dashboardFilter`): mesmo critério de `responsible_ids` por equipe quando há filtro de times
275|Pessoa **sem** `can_view` no produto SSMA, mas vinculada a ocorrência/evento (gestor responsável, pessoa envolvida, `responsible_ids`, etc.).
414|### 10.3 Plano de Ação — além de `responsible_ids`
418|| `197e5fa39` | Filtro por `responsible_ids` (já em §7) |
481|| `197e5fa39` | 19/05 | Plano por `responsible_ids`; prevenção membro com meta |
507|# Plano de ação (responsible_ids, contadores, validações)

File: docs/engineering/pr/feature-ssma-correcoes-arvore-executor-new-production/PR_descricao_feature-ssma-correcoes-arvore-executor-new-production.md
Match lines: 1
31|- Apply árvore grava `validator_member_id` e inclui executor/validador no projeto.

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 1
3163|36362e7244 chore(ssma): remove unused SsmaController helper, fix duplicate ev_responsible_ids id, polish body map UI

File: docs/ontology/audits/system_data_inventory.md
Match lines: 1
79|| `ssma_occurrences` | `severity`, `status`, `date`, `people_ids`, `manager_id`, `responsible_ids` |

File: docs/plano_indice_efetividade_decisoria_liderancas.md
Match lines: 4
128|| **SSMA** | Maduro (`SsmaAction` com `responsible_ids`, `validator_member_id`, `validation_status`, `closing_evidence`, `resolution_rating`, `result_key`, `same_problem_count`, `similar_problem_count`, `severity_numeric`) | **Ativa** — única dimensão elegível no MVP |
158|- `responsible_ids` — array de IDs de `CompanyMembers` responsáveis (executores).
159|- `validator_member_id` — ID do validador (nullable).
427|- Validação (`validator_member_id` + `validation_status=approved`)

File: docs/ssma/ALINHAMENTO-TITULO-OPCIONAL-E-MEMBROS-SEM-ADMIN.md
Match lines: 2
299|- Aplicar a mesma regra no modal da ocorrência, no CRUD de ação e nos fluxos Adriana/chat que ainda falam em vários `responsible_ids`.
312|- Backend create/update ainda grava `responsible_ids` como lista sem checar igualdade com o validador.

File: docs/ssma/MIGRATIONS-MAPEAMENTO.md
Match lines: 1
122|| `validator_member_id` | INT | FK lógica → `company_members.id` |

File: docs/ssma/SSMA-AUTOMACOES-OCORRENCIAS.md
Match lines: 1
80|1. Cria `NotificationSpecialist` para cada responsável (`responsible_ids`).

File: docs/ssma/features/action-plan/area-limitation.md
Match lines: 1
47|Todo ID de pessoa do payload (`responsible_ids`, `validator_id`) é validado contra a empresa da sessão e o recorte de área; qualquer um fora nega o request inteiro com `403`.

File: migration_archive_20260508/Version20260505162228_SsmaUnified.php
Match lines: 2
67|            $this->addSql('CREATE TABLE ssma_occurrences ( id INT AUTO_INCREMENT NOT NULL, company_id INT NOT NULL, manager_id INT DEFAULT NULL, team_id INT DEFAULT NULL, title VARCHAR(255) NOT NULL, type VARCHAR(100) NOT NULL, status VARCHAR(100) NOT NULL, nature VARCHAR(100) DEFAULT NULL, severity VARCHAR(100) DEFAULT NULL, date DATE NOT NULL, people_ids JSON DEFAULT NULL, location VARCHAR(255) DEFAULT NULL, activity LONGTEXT DEFAULT NULL, approach VARCHAR(100) DEFAULT NULL, responsible_ids JSON DEFAULT NULL, created_at DATETIME NOT NULL, updated_at DATETIME NOT NULL, INDEX IDX_SSMA_OCC_COMPANY (company_id), INDEX IDX_SSMA_OCC_MANAGER (manager_id), INDEX IDX_SSMA_OCC_TEAM (team_id), PRIMARY KEY(id), CONSTRAINT FK_SSMA_OCC_COMPANY FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE, CONSTRAINT FK_SSMA_OCC_MANAGER FOREIGN KEY (manager_id) REFERENCES company_members (id) ON DELETE SET NULL, CONSTRAINT FK_SSMA_OCC_TEAM FOREIGN KEY (team_id) REFERENCES company_team (id) ON DELETE SET NULL ) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci ENGINE = InnoDB');
81|            $this->addSql('CREATE TABLE ssma_actions ( id INT AUTO_INCREMENT NOT NULL, company_id INT NOT NULL, occurrence_id INT DEFAULT NULL, title VARCHAR(255) NOT NULL, description LONGTEXT DEFAULT NULL, type VARCHAR(100) DEFAULT NULL, deadline DATE DEFAULT NULL, responsible_ids JSON DEFAULT NULL, solved TINYINT(1) NOT NULL DEFAULT 0, has_project TINYINT(1) NOT NULL DEFAULT 0, project_start_date DATE DEFAULT NULL, project_priority VARCHAR(50) DEFAULT NULL, created_at DATETIME NOT NULL, updated_at DATETIME NOT NULL, INDEX IDX_SSMA_ACT_COMPANY (company_id), INDEX IDX_SSMA_ACT_OCCURRENCE (occurrence_id), PRIMARY KEY(id), CONSTRAINT FK_SSMA_ACT_COMPANY FOREIGN KEY (company_id) REFERENCES company (id) ON DELETE CASCADE, CONSTRAINT FK_SSMA_ACT_OCCURRENCE FOREIGN KEY (occurrence_id) REFERENCES ssma_occurrences (id) ON DELETE SET NULL ) DEFAULT CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci ENGINE = InnoDB');

File: migration_archive_20260508/_archive_ssma/Version20260326180914.php
Match lines: 1
36|                    responsible_ids JSON DEFAULT NULL,

File: migration_archive_20260508/_archive_ssma/Version20260326183000.php
Match lines: 1
29|                    responsible_ids JSON DEFAULT NULL,

File: migrations/Version20260511180000_SsmaActionValidation.php
Match lines: 3
18|        return 'Add validation_status, validator_member_id, closing_evidence, cc_demand_id and rejection_note to ssma_actions';
25|            ADD COLUMN IF NOT EXISTS validator_member_id INT          DEFAULT NULL COMMENT 'CompanyMembers.id of the designated validator',
36|            DROP COLUMN IF EXISTS validator_member_id,

File: public/js/create-instance-offcanvas.js
Match lines: 1
6322|                        draft.responsible_ids = detail.responsibles.map(function (r) {

File: public/js/products/create-instance-treinamentos.js
Match lines: 8
385|            responsible_ids: sortedUniqueIntArray(state.responsible_ids || []),
1520|            (data.responsible_ids || []).forEach(function (id) {
1818|                        responsible_ids: (defaultResponsibles || []).map(function (responsible) {
1911|                responsible_ids: responsibleIds,
1948|                if (!data.responsible_ids || data.responsible_ids.length === 0) {
1972|            if (!data.responsible_ids || data.responsible_ids.length === 0) {
2006|                (data.responsible_ids || []).forEach(function (id) { rset[id] = true; });
2024|                responsible_ids: productData.responsible_ids || [],

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 2
418|        $requirementResponsibleIds = is_array($payload) ? ($payload['requirement_responsible_ids'] ?? []) : [];
419|        $requirementOptionalResponsibleIds = is_array($payload) ? ($payload['requirement_optional_responsible_ids'] ?? []) : [];

File: src/Controller/SsmaController.php
Match lines: 67
1664|            $validatorMemberId = (int) ($entry['validatorMemberId'] ?? $entry['validator_member_id'] ?? 0);
2144|                : (isset($payload['validator_member_id']) && $payload['validator_member_id'] !== ''
2145|                    ? (int) $payload['validator_member_id']
4021|        foreach ($occurrence['responsible_ids'] ?? [] as $id) {
4045|            foreach ($actionItem['responsible_ids'] ?? [] as $respId) {
4705|                    responsible_ids, validator_member_id
4742|        $validatorMemberId = (int) ($row['validator_member_id'] ?? 0);
4747|        $responsibleIds = $row['responsible_ids'] ?? [];
6112|                'responsible_ids'    => $a->getResponsibleIds() ?? [],
6113|                'validator_member_id' => $a->getValidatorMemberId(),
6178|                'responsible_ids'   => $a->getResponsibleIds() ?? [],
6179|                'validator_member_id' => $a->getValidatorMemberId(),
6842|            $occurrence->setResponsibleIds(array_map('intval', (array) ($data['responsible_ids'] ?? [])));
6888|                    'previous_responsible_ids' => $previousResponsibleIds,
6903|                    'responsible_ids'  => $occurrence->getResponsibleIds(),
7766|                array_map('intval', (array) ($data['responsible_ids'] ?? [])),
7777|                $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
7791|                $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
8016|                'responsible_ids'    => $action->getResponsibleIds() ?? [],
8018|                'validator_member_id' => $action->getValidatorMemberId(),
8273|        $validatorMemberId = (int) ($entry['validatorMemberId'] ?? $entry['validator_member_id'] ?? 0);
8680|                $rawIds = $details['responsible_ids'] ?? '';
9100|            if (!empty($data['validator_member_ids']) && is_array($data['validator_member_ids'])) {
9101|                $validatorMemberIds = array_values(array_filter(array_map('intval', $data['validator_member_ids'])));
9102|            } elseif (!empty($data['validator_member_id'])) {
9103|                $validatorMemberIds = [(int) $data['validator_member_id']];
9408|            'responsible_ids'    => $action->getResponsibleIds() ?? [],
9491|                'responsible_ids'  => $a->getResponsibleIds() ?? [],
9492|                'validator_member_id' => $a->getValidatorMemberId(),
9618|                'responsible_ids'  => $a->getResponsibleIds() ?? [],
9619|                'validator_member_id' => $a->getValidatorMemberId(),
10326|        $responsibleIds = array_values(array_filter(array_map('intval', (array) ($data['responsible_ids'] ?? []))));
10426|        $responsibleRaw = $details['responsible_ids'] ?? null;
11404|        foreach (['people_ids', 'responsible_ids'] as $field) {
11445|  JSON_CONTAINS(COALESCE(a.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$') = 1
11446|  OR a.validator_member_id = ?
11553|            $validatorMemberId = (int) ($action['validator_member_id'] ?? 0);
11558|            foreach ((array) ($action['responsible_ids'] ?? []) as $id) {
12742|            // Ocorrências: por team_id direto OU por manager_id/people_ids/responsible_ids pertencente ?? equipe.
12757|                foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
14293|                (array) ($row['responsible_ids'] ?? []),
14303|            $add($action['validator_member_id'] ?? 0);
14304|            foreach ((array) ($action['responsible_ids'] ?? []) as $pid) {
14428|            'responsible_ids' => $row->getResponsibleIds(),
14476|                'responsible_ids'         => $responsibleIds,
14491|                'validator_member_id'     => $row->getValidatorMemberId(),
14808|        if (!empty($details['responsible_ids'])) {
14809|            if (is_string($details['responsible_ids'])) {
14810|                $responsibleIds = array_values(array_filter(array_map('intval', explode(',', $details['responsible_ids']))));
14811|            } elseif (is_array($details['responsible_ids'])) {
14812|                $responsibleIds = array_values(array_filter(array_map('intval', $details['responsible_ids'])));
14864|            'responsible_ids' => $responsibleIds,
15652|            $prevResponsible = $this->normalizeOccurrenceIdList($previous['previous_responsible_ids'] ?? []);
15653|            $newResponsible  = $this->normalizeOccurrenceIdList($current['responsible_ids'] ?? []);
15657|                    'field'   => 'responsible_ids',
15850|            'responsible_ids' => $occurrence->getResponsibleIds(),
17454|                    foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
21018|                $ids = (array) ($act['responsible_ids'] ?? []);
21731|            $conn->executeStatement('ALTER TABLE ssma_actions ADD COLUMN IF NOT EXISTS validator_member_id INT DEFAULT NULL');
22543|            $rawResponsible = $details['responsible_ids'] ?? null;
22599|                'responsible_ids'        => $responsibleIds,
22635|                o.responsible_ids,
22686|                'responsible_ids' => json_decode((string) ($row['responsible_ids'] ?? '[]'), true) ?? [],
22799|            foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
22901|                    responsible_ids, origem, created_at, updated_at
22917|                'responsible_ids'  => json_decode((string) ($row['responsible_ids'] ?? '[]'), true) ?? [],
27481|            'activity', 'approach', 'responsible_ids',

File: src/Controller/TrainingController.php
Match lines: 6
2049|            // Process responsible_ids
2051|                $request->request->get("responsible_ids", "[]"),
4124|            // Process responsible_ids
4125|            $responsibleIds = json_decode($request->request->get('responsible_ids', '[]'), true);
5449|                    array_map('intval', is_array($data['responsible_ids'] ?? null) ? $data['responsible_ids'] : []),
5589|                    'responsible_ids' => $responsibleIds,

File: src/Repository/Ontology/Ssma/SsmaOccurrenceMemberRepository.php
Match lines: 3
80|                OR JSON_CONTAINS(o.responsible_ids, :memberJson)
160|                OR JSON_CONTAINS(o.responsible_ids, :memberJson)
209|                OR JSON_CONTAINS(o.responsible_ids, :memberJson)

File: src/Service/Adriana/Command/SsmaCommandService.php
Match lines: 3
2440|        foreach (['description', 'type', 'priority', 'deadline', 'control_hierarchy', 'responsible_ids', 'validator_id'] as $field) {
2442|                ? ($draft['validator_id'] ?? $draft['validator_member_id'] ?? null)
2444|            if ($field === 'responsible_ids') {

File: src/Service/Adriana/Instance/Product/TrainingInstanceHandler.php
Match lines: 5
21|            'responsible_ids' => isset($sharedDefaults['responsibleId']) ? [(int) $sharedDefaults['responsibleId']] : [],
56|        $fields['responsible_ids'] = $this->normalizeIds((array) ($fields['responsible_ids'] ?? []));
57|        if ($fields['responsibleMode'] === 'direct' && $fields['responsible_ids'] === []) {
116|        $responsibles = $this->normalizeIds((array) ($fields['responsible_ids'] ?? []));
118|            return [$this->missing('responsible_ids', 'Responsáveis do grupo', 'int_list', 'responsibles')];

File: src/Service/Adriana/WorkflowConversationOrchestratorService.php
Match lines: 1
7120|        if ($field === 'responsible_ids') {

File: src/Service/Adriana/WorkflowInstanceApplierService.php
Match lines: 1
376|                $base['responsible_ids'] = (array) ($fields['responsible_ids'] ?? []);

File: src/Service/Adriana/WorkflowInstanceFieldCatalog.php
Match lines: 1
342|                    ['key' => 'responsible_ids', 'label' => 'Responsaveis (membros)', 'type' => 'int_list', 'required' => true, 'options_source' => 'responsibles', 'depends_on' => 'responsibleMode=direct', 'only_when_mode' => 'new'],

File: src/Service/Adriana/WorkflowInstancePlannerService.php
Match lines: 1
315|                    'responsible_ids' => isset($shared['responsibleId']) ? [(int) $shared['responsibleId']] : [],

File: src/Service/Effectiveness/Backfill/EffectivenessAnalyticalContextBackfillService.php
Match lines: 1
323|        $sql = 'SELECT id, title, type, origem, origem_id, responsible_ids, solved, validation_status, created_at

File: src/Service/Ssma/Effectiveness/SecurityActionEffectivenessPresenter.php
Match lines: 1
1256|            'responsible_ids' => $responsibleIds,

File: src/Service/Ssma/SsmaActionPlanLlmService.php
Match lines: 5
85|Regras de pessoas: exatamente 1 executor (responsible_ids) e 1 validador (validator_id), pessoas DIFERENTES.
104|    "responsible_ids": [],
147|                    'responsible_ids'   => [],
157|                    ['field' => 'responsible_ids',   'label' => 'Responsável pela execução',  'reason' => 'obrigatório'],
213|- Mapeamento obrigatório: title → "Título da ação", description → "Descrição", type → "Tipo da ação", priority → "Prioridade", deadline → "Prazo", responsible_ids/responsible_names → "Executor", validator_id/validator_name → "Validador", occurrence_id/occurrence_title → "Ocorrência vinculada", control_hierarchy → "Hierarquia de controle".

File: src/Service/Ssma/SsmaActionPlanPreviewService.php
Match lines: 6
21|        'responsible_ids'   => 'Responsável pela execução',
341|            array_map('intval', (array) ($draft['responsible_ids'] ?? [])),
358|        if ($field === 'responsible_ids') {
382|        if (array_values(array_filter(array_map('intval', (array) ($draft['responsible_ids'] ?? [])))) !== []
383|            || in_array('responsible_ids', array_column($selectRequests, 'field'), true)) {
410|            'field' => 'responsible_ids',

File: src/Service/Ssma/SsmaActionPlanSubmitService.php
Match lines: 4
22|        'responsible_ids',
51|            $action->setResponsibleIds(array_map('intval', (array) $draft['responsible_ids']));
72|                array_map('intval', (array) $draft['responsible_ids']),
107|        $responsibleIds = array_values(array_filter(array_map('intval', (array) $draft['responsible_ids'])));

File: src/Service/Ssma/SsmaAdrianaConversationGuide.php
Match lines: 2
36|            'responsible_ids', 'validator_id',
752|            'responsible_ids' => 'Quem será o **único executor** dessa ação? (uma pessoa)',

File: src/Service/Ssma/SsmaAnalyticsAnonymizer.php
Match lines: 1
17|        'responsible_ids',

File: src/Service/Ssma/SsmaAutomationService.php
Match lines: 10
726|                            is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
822|                        is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
1215|            is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
1479|                is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
1599|                                    is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
1607|                                is_array($payload['responsible_ids'] ?? null) ? $payload['responsible_ids'] : [],
2483|            'responsible_ids'       => $responsibleIds,
2513|        $responsibleIds = $this->parseIntIdList($details['responsible_ids'] ?? []);
2554|            'responsible_ids'        => $responsibleIds,
2988|            'responsible_ids'        => $leaderId > 0 ? [$leaderId] : [],

File: src/Service/Ssma/SsmaEventService.php
Match lines: 1
371|        foreach (['people_ids' => 'Pessoas envolvidas', 'responsible_ids' => 'Responsáveis'] as $field => $label) {

File: src/Service/Ssma/SsmaFlashReportService.php
Match lines: 2
778|        if (is_array($payload['responsible_ids'] ?? null)) {
779|            foreach ($payload['responsible_ids'] as $id) {

File: src/Service/Ssma/SsmaOccurrenceCatalogService.php
Match lines: 4
282|        $responsibleIds = array_values(array_filter(array_map('intval', (array) ($draft['responsible_ids'] ?? []))));
295|        $draft['responsible_ids'] = $responsibleIds;
384|        $responsibleIds = array_values(array_filter(array_map('intval', (array) ($draft['responsible_ids'] ?? []))));
394|        $draft['responsible_ids'] = $responsibleIds;

File: src/Service/Ssma/SsmaOccurrenceLlmService.php
Match lines: 2
62|- NÃO peça culpados, responsáveis pela resolução (responsible_ids) nem pessoas envolvidas (people_ids) — são opcionais no chat; só preencha se o usuário mencionar espontaneamente. Nunca liste esses campos em missing_required_fields.
202|- NÃO peça culpados, responsáveis pela resolução (responsible_ids) nem pessoas envolvidas (people_ids) — são opcionais; só altere se o usuário pedir explicitamente.

File: src/Service/Ssma/SsmaOccurrencePreviewService.php
Match lines: 1
718|            'responsible_ids'      => 'Responsáveis',

File: src/Service/Ssma/SsmaOccurrenceStakeholderAccessChecker.php
Match lines: 8
49|  OR JSON_CONTAINS(COALESCE(o.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$')
76|    JSON_TYPE(JSON_EXTRACT(e.details, '$.responsible_ids')) = 'ARRAY'
77|    AND JSON_CONTAINS(JSON_EXTRACT(e.details, '$.responsible_ids'), CAST(? AS JSON), '$') = 1
80|    JSON_TYPE(JSON_EXTRACT(e.details, '$.responsible_ids')) = 'STRING'
81|    AND FIND_IN_SET(?, JSON_UNQUOTE(JSON_EXTRACT(e.details, '$.responsible_ids'))) > 0
93|        // Membro responsável por uma ação (ssma_actions.responsible_ids) também acessa o Plano de Ação
99|  JSON_CONTAINS(COALESCE(a.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$') = 1
100|  OR a.validator_member_id = ?

File: src/Service/Ssma/SsmaOccurrenceSubmitService.php
Match lines: 1
83|            $occurrence->setResponsibleIds(array_map('intval', array_filter((array) ($draft['responsible_ids'] ?? []))));

File: src/Service/Ssma/SsmaPanelSnapshotService.php
Match lines: 3
267|                o.team_id, o.manager_id, o.people_ids, o.responsible_ids
307|                'responsible_ids'    => json_decode((string) ($row['responsible_ids'] ?? '[]'), true) ?? [],
427|                        foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 2
275|        $memberIds = $this->normalizeIdList($data['responsible_ids'] ?? []);
276|        $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);

File: templates/contractor/tabs/_tab_empresas.html.twig
Match lines: 2
1949|                requirement_responsible_ids: responsibleIds,
1950|                requirement_optional_responsible_ids: optionalResponsibleIds

File: templates/manager/ssma/abordagem_report.html.twig
Match lines: 1
1486|                        {% set _act_resp_id = action.responsible_ids|default([])|first %}

File: templates/manager/ssma/inspection_report.html.twig
Match lines: 1
1098|                        {% set _act_resp_id = action.responsible_ids|default([])|first %}

File: templates/manager/ssma/report.html.twig
Match lines: 2
954|{% set responsible_id = occurrence.responsible_ids|default([])|first %}
2076|                        {% for _resp_id in action.responsible_ids|default([]) %}

File: templates/ssma/action_plan/partials/_action_plan_table.html.twig
Match lines: 2
94|                                    {% for responsible_id in child.responsible_ids|default([]) %}
203|    {% for responsible_id in action_item.responsible_ids|default([]) %}

File: templates/ssma/action_plan/tabs/_tab_action_plan.html.twig
Match lines: 5
1024|                    responsibleIds: actionData.responsible_ids || [],
1044|                    validatorMemberId: actionData.validator_member_id || actionData.validator_id || null
1077|                    responsibleIds: actionData.responsible_ids || [],
1482|                    '<td>' + buildSsmaActionPlanResponsibleCell(child.responsible_ids || []) + '</td>' +
1721|                buildSsmaActionPlanResponsibleCell(action.responsible_ids || []),

File: templates/ssma/cause_tree/tree_view/tabs/_tab_action_plan.html.twig
Match lines: 1
755|                    responsible_ids: responsibleId ? [responsibleId] : [],

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 17
510|{% set responsible_id     = occurrence.responsible_ids|default([])|first %}
1156|                                    {% for responsible_id in action_item.responsible_ids|default([]) %}
1291|            responsible_ids: []
1639|        var validatorId = actionItem.validator_member_id || actionItem.validator_id || null;
1648|        var execHtml = buildMemberStackHtml(actionItem.responsible_ids || []);
1678|        var validatorMemberId = payload.validator_member_id || payload.validator_id || null;
1699|            responsible_ids: payload.responsible_ids || [],
1700|            validator_member_id: validatorMemberId,
1897|        var validatorId = actionItem.validator_member_id || actionItem.validator_id || null;
1975|        $card.attr('data-responsible-ids', JSON.stringify(actionItem.responsible_ids || []));
1976|        $card.attr('data-validator-member-id', actionItem.validator_member_id || actionItem.validator_id || '');
2048|            responsible_ids: parseResponsibleIds($card.attr('data-responsible-ids')),
2049|            validator_member_id: $card.attr('data-validator-member-id')
2107|            responsibleIds: actionItem.responsible_ids || [],
2108|            validator_id: actionItem.validator_member_id || actionItem.validator_id || null,
2109|            validator_member_id: actionItem.validator_member_id || actionItem.validator_id || null,
2276|                validatorMemberId: actionItem.validator_member_id || actionItem.validator_id || null,

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 6
23|        <input type="hidden" id="ev_responsible_ids"    name="ev_responsible_ids"   value="">
3719|            $('#ev_responsible_ids').val(resp);
4882|        ['ev_people_ids', 'ev_witness_ids', 'ev_responsible_ids', 'ev_injured_person_details', 'ev_approach_custom'].forEach(function (id) {
6402|        var respIds   = evParseCsvIds(det.responsible_ids || data.responsible_ids);
6414|        var respEl = document.getElementById('ev_responsible_ids');
6927|            responsible_ids:  (document.getElementById('ev_responsible_ids') || { value: '' }).value,

File: templates/ssma/occurrence/partials/_modal_occurrence.html.twig
Match lines: 2
458|                setTagSelectValues(TAG_CONFIGS.responsible, occurrenceData.responsible_ids);
641|                responsible_ids: $('#occ_responsible_tags .occ-tag-item').map(function () {

File: templates/ssma/partials/_action_taken_card.html.twig
Match lines: 7
9|{% set action_responsible_ids = action_item.responsible_ids|default([]) %}
33|     data-responsible-ids='{{ action_responsible_ids|json_encode|e('html_attr') }}'
34|     data-validator-member-id="{{ action_item.validator_member_id|default('') }}"
74|        {% set validator_member_id = action_item.validator_member_id|default(null) %}
75|        {% set show_validator_missing_badge = not is_template and not action_solved and not validator_member_id and (action_item.validation_status|default('')) != 'pending_validation' %}
109|                        {% if validator_member_id %}
110|                            {% set _vk = 'member_' ~ validator_member_id %}

File: templates/ssma/partials/_modal_action.html.twig
Match lines: 7
1716|            responsible_ids: [parseInt(extra.responsible_id, 10)],
1889|            responsible_ids: getResponsibleIds(),
2238|        setResponsibleIds(data.responsible_ids || []);
2239|        var validatorVal = data.validator_id || data.validator_member_id || '';
2306|            responsible_ids: modalConfig.responsibleIds || modalConfig.responsible_ids,
2307|            validator_id: modalConfig.validator_id || modalConfig.validator_member_id,
2308|            validator_member_id: modalConfig.validator_member_id || modalConfig.validator_id,

File: templates/ssma/partials/_modal_action_resolution.html.twig
Match lines: 2
425|        resolutionState.validatorMemberId = modalConfig.validatorMemberId || modalConfig.validator_member_id || null;
602|                validator_member_ids: validatorIds

File: templates/ssma/prevention/approach/index.html.twig
Match lines: 12
523|                                        {% for rid in action_item.responsible_ids|default([]) %}
766|            responsible_ids: []
925|        var execHtml = buildMemberStackHtml(a.responsible_ids || []);
926|        var validatorId = a.validator_member_id || a.validator_id || null;
999|            responsible_ids: parseResponsibleIds($card.attr('data-responsible-ids')),
1018|        $card.attr('data-responsible-ids', JSON.stringify(a.responsible_ids || []));
1019|        $card.attr('data-validator-member-id', a.validator_member_id || a.validator_id || '');
1079|            responsibleIds: a.responsible_ids || [],
1116|            responsible_ids: actionPayload.responsible_ids || [],
1117|            validator_member_id: actionPayload.validator_member_id || actionPayload.validator_id || null,
1138|            responsible_ids: actionPayload.responsible_ids || [],
1139|            validator_member_id: actionPayload.validator_member_id || actionPayload.validator_id || null,

File: templates/ssma/prevention/inspection/index.html.twig
Match lines: 12
378|                                        {% for rid in action_item.responsible_ids|default([]) %}
628|            responsible_ids: []
706|        var execHtml = buildMemberStackHtml(a.responsible_ids || []);
707|        var validatorId = a.validator_member_id || a.validator_id || null;
767|        $card.attr('data-responsible-ids', JSON.stringify(a.responsible_ids || []));
768|        $card.attr('data-validator-member-id', a.validator_member_id || a.validator_id || '');
798|            responsible_ids: parseResponsibleIds($card.attr('data-responsible-ids')),
842|            responsibleIds: a.responsible_ids || [],
873|            responsible_ids: payload.responsible_ids || [],
874|            validator_member_id: payload.validator_member_id || payload.validator_id || null,
891|            responsible_ids: payload.responsible_ids || [],
892|            validator_member_id: payload.validator_member_id || payload.validator_id || null,

File: templates/training/edit.html.twig
Match lines: 5
1317|            <input type="hidden" name="responsible_ids" id="responsible_ids"
2809|        $('#responsible_ids').val(JSON.stringify(responsibleIds));
2833|        const responsibleIds = JSON.parse($('#responsible_ids').val() || '[]');
2876|        $('#responsible_ids').val(JSON.stringify(responsibleIds));
2908|            selectedIds = JSON.parse($('#responsible_ids').val() || '[]');

File: tests/Service/Adriana/WorkflowAiPipelineTest.php
Match lines: 5
3486|            'responsible_ids' => [2296],
3496|            'responsible_ids' => [2296],
3502|        $this->assertSame([2296], $fields['responsible_ids']);
3584|            'responsible_ids' => [2296],
3629|                        'responsible_ids' => [2296],

File: tests/Ssma/SsmaActionCommunicationCenterIntegrationTest.php
Match lines: 1
54|        foreach (['validation_status', 'validator_member_id', 'closing_evidence', 'cc_demand_id', 'rejection_note'] as $col) {

File: tests/Ssma/SsmaChatFlowLogicTest.php
Match lines: 3
144|        self::assertSame([9], $draft['responsible_ids']);
158|        self::assertSame([7], $draft['responsible_ids']);
187|            'responsible_ids' => [7],

File: tests/Ssma/SsmaChatFlowsFullTest.php
Match lines: 4
304|        $this->assertPreviewMissingField($result, 'responsible_ids');
331|        unset($draft['responsible_ids']);
337|        $this->assertPreviewSelectField($result, 'responsible_ids', 2);
447|            'responsible_ids' => [7],

File: tests/Ssma/query_occurrences.php
Match lines: 2
12|$rows = $pdo->query('SELECT id, company_id, title, type, status, severity, manager_id, responsible_ids, created_at FROM ssma_occurrences ORDER BY id DESC LIMIT 8')->fetchAll(PDO::FETCH_ASSOC);
38|    $events = $pdo->query('SELECT id, company_id, title, type, status, consequence, manager_id, responsible_ids, created_at FROM ssma_events ORDER BY id DESC LIMIT 5')->fetchAll(PDO::FETCH_ASSOC);

File: tests/Ssma/query_ssma_events.php
Match lines: 1
30|        'responsible_ids' => $details['responsible_ids'] ?? null,

File: tests/Ssma/seed_prevencao_panel.php
Match lines: 2
334|         (company_id, title, description, type, deadline, solved, project_priority, responsible_ids, origem, created_at, updated_at)
418|          responsible_ids, origem, origem_id, created_at, updated_at)

File: tests/Ssma/ssma_action_plan_logic_standalone.php
Match lines: 6
258|        foreach ((array) ($action['responsible_ids'] ?? []) as $id) {
270|    ['id' => 1, 'occurrence_id' => 100, 'responsible_ids' => [8, 42]],
271|    ['id' => 2, 'occurrence_id' => 100, 'responsible_ids' => [8]],
272|    ['id' => 3, 'occurrence_id' => 200, 'responsible_ids' => [42]],
275|ok('Membro: vê só ações com ele em responsible_ids (não todas da ocorrência)', count($filtered) === 2);
281|    foreach ((array) ($action['responsible_ids'] ?? []) as $id) {

File: tests/Ssma/ssma_supervisor_no_team_occurrence_filter_standalone.php
Match lines: 5
46|        foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
64|    ['id' => 1, 'manager_id' => $selfId, 'team_id' => null, 'people_ids' => [], 'responsible_ids' => []],
65|    ['id' => 2, 'manager_id' => 99, 'team_id' => null, 'people_ids' => [], 'responsible_ids' => []],
85|    ['id' => 3, 'manager_id' => 0, 'team_id' => null, 'people_ids' => [$selfId], 'responsible_ids' => []],
93|    ['id' => 4, 'manager_id' => 0, 'team_id' => '5', 'people_ids' => [], 'responsible_ids' => []],

File: tests/Ssma/test_ajax_panel.php
Match lines: 1
88|    'SELECT id, title, type, deadline, solved, project_priority, responsible_ids, origem, created_at, updated_at

File: tests/Ssma/test_email_flow.php
Match lines: 1
69|    'responsible_ids'        => [10, 20],

File: tests/Ssma/test_email_send_mailtrap.php
Match lines: 1
152|    'responsible_ids'        => [10],

File: tests/Ssma/test_occurrence_email_trigger.php
Match lines: 2
65|echo "  responsible_ids=" . json_encode($occurrence->getResponsibleIds()) . "\n\n";
78|        'responsible_ids' => $occurrence->getResponsibleIds(),

File: tests/Ssma/verify_abordagem_backend.php
Match lines: 1
35|    SELECT id, title, type, deadline, solved, project_priority, responsible_ids, origem, created_at, updated_at

File: tests/Unit/Product/Ssma/SecurityActionEffectivenessPresenterTest.php
Match lines: 1
146|        self::assertSame([10124], $row['responsible_ids']);

File: tests/Unit/Product/Ssma/SsmaPreventionAreaAuthorizationServiceTest.php
Match lines: 5
306|            'responsible_ids' => [999],
323|                'responsible_ids' => [101],
330|                'responsible_ids' => [100],
331|                'validator_member_id' => 101,
335|            'responsible_ids' => [100],

File: tests/Unit/Product/Ssma/assert_flash_report_flow.php
Match lines: 1
195|    && fileNotContains($flash, "['responsible_ids', 'people_ids']")

File: tests/Unit/Product/Ssma/verify_flash_approver_routing.php
Match lines: 1
165|        'responsible_ids' => [(int) $requesterMember->getId()],

{"file_path": "src/Controller/SsmaController.php", "start_line": 12460, "end_line": 12720}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12460-12720
12460|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
12461|        // Reutiliza $ssmaProductTagName (já corrigido por memberIsSsmaGestorAdministrador).
12462|        $ssmaProductTagNameForRegister = $ssmaProductTagName;
12463|        $ssmaCanRegisterNewOccurrence = $this->isGranted('ROLE_SUPER_ADMIN')
12464|            || $this->isGranted('ROLE_MANAGER')
12465|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12466|            || \in_array($ssmaProductTagNameForRegister, ['Gestor de Equipe', 'Gestor Administrador'], true)
12467|            // Permissão padrão do Membro: registrar a própria ocorrência.
12468|            || $this->canMemberRegisterOwnOccurrence($company, $user);
12469|
12470|        $loggedMemberForOccurrence = ($company && $user instanceof User)
12471|            ? $this->getCurrentCompanyMember($company, $user)
12472|            : null;
12473|        $ssmaAllowedCreateTypes = ($company && $user instanceof User)
12474|            ? $this->ssmaOccurrenceCreatePermissionService->resolveAllowedCreateTypes(
12475|                $loggedMemberForOccurrence,
12476|                $user,
12477|                $company,
12478|                $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
12479|                $ssmaCanManageOccurrences,
12480|            )
12481|            : [];
12482|        if (!$ssmaCanRegisterNewOccurrence && $ssmaAllowedCreateTypes !== []) {
12483|            $ssmaCanRegisterNewOccurrence = true;
12484|        }
12485|
12486|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
12487|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
12488|        $occurrenceAreaFilterIds = $areaScope->isRestricted() ? $areaScope->areaIds() : null;
12489|        $actionPlanAreaScope = $this->getSsmaActionPlanAreaScope($company, $user);
12490|        $actionPlanAreaFilterIds = $actionPlanAreaScope->isRestricted() ? $actionPlanAreaScope->areaIds() : null;
12491|        $viewerTeamIds = $this->getSsmaViewerTeamIds();
12492|
12493|        // ── Detecção de Supervisor/Gestor de Equipe via tag SSMA ──────────────────────────────
12494|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
12495|        // funções baseadas em role. Identificamos o perfil pelo nome da tag para ajustar flags de UI.
12496|        $ssmaIsTagTeamSupervisor = in_array($ssmaProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12497|        $ssmaIsTagTeamGestor     = $ssmaProductTagName === 'Gestor de Equipe';
12498|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
12499|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
12500|        $ssmaIsPreventionTagTeamSupervisor = in_array($ssmaPreventionProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12501|        $ssmaIsPreventionTagTeamGestor = $ssmaPreventionProductTagName === 'Gestor de Equipe';
12502|
12503|        // Painel + Metas: libera para Sup/G. de Equipe/Área e Gestor Administrador (ocorrências + ssma-prevention)
12504|        if (!$ssmaCanAccessPreventionPanelAndMetas
12505|            && (
12506|                $ssmaIsTagTeamSupervisor
12507|                || $ssmaIsTagTeamGestor
12508|                || $ssmaIsTagAreaSupervisor
12509|                || $ssmaIsTagAreaGestor
12510|                || $ssmaProductTagName === 'Gestor Administrador'
12511|                || $ssmaIsPreventionTagTeamSupervisor
12512|                || $ssmaIsPreventionTagTeamGestor
12513|                || $ssmaPreventionProductTagName === 'Gestor Administrador'
12514|            )
12515|        ) {
12516|            $ssmaCanAccessPreventionPanelAndMetas = true;
12517|        }
12518|
12519|        // Membro/Inspetor (pessoa física / Palloma): não acessa Painel nem Metas.
12520|        // Conta admin empresa sem ROLE_USER (Aura), Tenant e SUPER_ADMIN mantêm — mesmo contrato das abas de Ocorrências.
12521|        if (SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
12522|            $ssmaProductTagName,
12523|            $this->isGranted('ROLE_SUPER_ADMIN'),
12524|            $this->isGranted('ROLE_TENANT'),
12525|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
12526|        )) {
12527|            $ssmaCanAccessPreventionPanelAndMetas = false;
12528|        }
12529|
12530|        // Modal + Evento: título/status ocultos na criação para todos os perfis (Figma Etapa 0).
12531|        // Na edição o JS (evApplyAuraTitleStatusVisibility) reexibe conforme o modo.
12532|        $ssmaHideEventTitleStatusOnCreate = true;
12533|
12534|        // ssmaIsTeamViewer: true quando o usuário opera com escopo de equipe (via role SSMA OU via tag SSMA)
12535|        // Usado para sinalizar ao template que os dados estáo limitados ?? equipe.
12536|        $ssmaIsTeamViewerFlag = $viewerTeamIds !== null || $ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor
12537|            || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor;
12538|
12539|        // ssmaCanCreatePreventionItems: Gestor de Equipe/Área e Gestor Administrador via tag SSMA
12540|        // também podem registrar inspeções/abordagens (ssmaCanManageOccurrences = true via tag).
12541|        $ssmaCanCreatePreventionItems = (
12542|            $this->isGranted('ROLE_SUPER_ADMIN')
12543|            || $this->isGranted('ROLE_MANAGER')
12544|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12545|            || (
12546|                $ssmaCanManageOccurrences
12547|                && ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor || $ssmaProductTagName === 'Gestor Administrador')
12548|            )
12549|        );
12550|
12551|        // ssmaCanEditPreventionContent: controla botões Editar/Finalizar/Deletar em inspeções e abordagens
12552|        // e o botão "Configuração" na aba Metas.
12553|        // Supervisor registra/edita o próprio conteúdo (can_mutate por item); gestão edita todos.
12554|        $ssmaCanEditPreventionContent = $ssmaCanManageOccurrences
12555|            && !$this->isSsmaViewer()
12556|            && !$ssmaIsTagTeamSupervisor
12557|            && !$ssmaIsTagAreaSupervisor;
12558|        $ssmaPreventionMutateOwnOnly = false;
12559|
12560|        // Configurações da aba Prevenção Ativa: Sup/Gestor de Equipe ou Área não acessam (planilha: "Não acessa")
12561|        if ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor) {
12562|            $ssmaCanManageConfig = false;
12563|        }
12564|
12565|        // G. Equipe via tag SSMA pode criar ação (Plano de Ação).
12566|        // Árvore de causas: {@see canCreateSsmaCauseTree()} já cobre Gestor de Equipe.
12567|        if ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor) {
12568|            $ssmaCanCreateLinkedActions = true;
12569|        }
12570|
12571|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
12572|        $ssmaCanEditPreventionMetasTable = $company && $user instanceof User
12573|            && $this->canEditPreventionMetasTableForCurrentUser($company, $user);
12574|
12575|        // ssmaPreventionCanCreateLinkedActions: botão "Criar ação" em Inspeções e Abordagem.
12576|        // Alinhado com ssmaCanCreateLinkedActions (Plano de Ações): quem não pode criar
12577|        // ação no Plano de Ações também não pode criar em inspeção/abordagem/árvore.
12578|        $ssmaPreventionCanCreateLinkedActions = $ssmaCanCreateLinkedActions;
12579|
12580|        $teamsForEventModal = $teams;
12581|        $allMembersForEventPeople = $allMembers;
12582|        $gestoresForEventModal = $company
12583|            ? $this->buildSsmaEventModalGestores($company, $allMembers, $gestores, null)
12584|            : $gestores;
12585|
12586|        $ssmaEventFormDefaults = ['manager_id' => null, 'team_id' => null];
12587|        $applyTeamEventScope = $occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== [];
12588|
12589|        // Supervisor/Gestor de Equipe: filtra modais pelas equipes do cadastro (lista vazia = sem equipe — não zera selects).
12590|        if ($applyTeamEventScope) {
12591|            $teamIdStrScope = array_map('strval', $occurrenceTeamFilterIds);
12592|            $teamsForEventModal = array_values(array_filter(
12593|                $teams,
12594|                static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $teamIdStrScope, true)
12595|            ));
12596|            $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
12597|            $allMembersForEventPeople = array_values(array_filter(
12598|                $allMembers,
12599|                static fn (array $m): bool => isset($allowedMemberMap[(int) ($m['id'] ?? 0)])
12600|            ));
12601|            // Gestor responsável: escopo da empresa (tags/roles), não só membros da equipe do supervisor
12602|            $gestoresForEventModal = $this->buildSsmaEventModalGestores(
12603|                $company,
12604|                $allMembers,
12605|                $gestores,
12606|                null
12607|            );
12608|            $ssmaEventFormDefaults['team_id'] = (int) $occurrenceTeamFilterIds[0];
12609|            $currentMemberForDefaults = $this->getCurrentCompanyMember($company, $user);
12610|            $currentMemberIdForDefaults = (int) ($currentMemberForDefaults?->getId() ?? 0);
12611|            if ($currentMemberIdForDefaults > 0) {
12612|                foreach ($gestoresForEventModal as $gRow) {
12613|                    if ((int) ($gRow['id'] ?? 0) === $currentMemberIdForDefaults) {
12614|                        $ssmaEventFormDefaults['manager_id'] = $currentMemberIdForDefaults;
12615|                        break;
12616|                    }
12617|                }
12618|            }
12619|        }
12620|
12621|        if ($occurrenceAreaFilterIds !== null) {
12622|            $areaMemberIds = $areaScope->allowedMemberIds();
12623|            $teamsForEventModal = array_values(array_filter(
12624|                $teamsForEventModal,
12625|                static fn (array $t): bool => $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12626|            ));
12627|            $allMembersForEventPeople = array_values(array_filter(
12628|                $allMembersForEventPeople,
12629|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12630|            ));
12631|            $gestoresForEventModal = array_values(array_filter(
12632|                $gestoresForEventModal,
12633|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12634|            ));
12635|            $applyTeamEventScope = true;
12636|            if ($teamsForEventModal !== []) {
12637|                $ssmaEventFormDefaults['team_id'] = (int) ($teamsForEventModal[0]['id'] ?? 0) ?: $ssmaEventFormDefaults['team_id'];
12638|            }
12639|        }
12640|
12641|        if ($actionPlanAreaFilterIds !== null) {
12642|            $actionPlanMemberIds = $actionPlanAreaScope->allowedMemberIds();
12643|            $allMembersForEventPeople = array_values(array_filter(
12644|                $allMembersForEventPeople,
12645|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12646|            ));
12647|            $gestoresForEventModal = array_values(array_filter(
12648|                $gestoresForEventModal,
12649|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12650|            ));
12651|            $applyTeamEventScope = true;
12652|        }
12653|
12654|        // Fallback final: gestor responsável usa escopo da empresa (não só equipe do supervisor).
12655|        if ($gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12656|            $gestoresForEventModal = $allMembers !== [] ? $allMembers : $allMembersForEventPeople;
12657|        }   
12658|        if ($gestores === [] && $allMembers !== []) {
12659|            $gestores = $allMembers;
12660|        }
12661|        if ($company && $gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12662|            $gestoresForEventModal = $this->mergeGestoresFromOccurrenceManagerIds(
12663|                $company,
12664|                $allMembers,
12665|                $occurrences,
12666|                $gestoresForEventModal
12667|            );
12668|        }
12669|        $gestoresForEventModal = $this->enrichSsmaMemberRowsWithTeamMeta(
12670|            $gestoresForEventModal,
12671|            $teamNameByMemberId ?? []
12672|        );
12673|       
12674|
12675|        // Inspeção — equipe no modal: gestão vê escopo/lista completa; Membro só suas equipes (auto se uma).
12676|        // Mesmo contrato Palloma vs Aura das abas: tenant/SUPER_ADMIN/ROLE_MANAGER sem ROLE_USER
12677|        // com tag Membro não entram no recorte de pessoa física.
12678|        $teamsForInspectionModal = $applyTeamEventScope ? $teamsForEventModal : $teams;
12679|        $defaultInspectionTeamId = null;
12680|        $ssmaIsPlainPreventionMember = $ssmaIsPlainProductMemberUi
12681|            && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck);
12682|        if ($ssmaIsPlainPreventionMember && $company && $user instanceof User) {
12683|            $plainMemberRow = $this->getCurrentCompanyMember($company, $user);
12684|            $plainMemberTeamIds = $plainMemberRow ? $this->parseCompanyMemberTeamIds($plainMemberRow) : [];
12685|            if ($plainMemberTeamIds !== []) {
12686|                $plainTeamIdStr = array_map('strval', $plainMemberTeamIds);
12687|                $teamsForInspectionModal = array_values(array_filter(
12688|                    $teams,
12689|                    static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $plainTeamIdStr, true)
12690|                        && $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12691|                ));
12692|                if (count($plainMemberTeamIds) === 1) {
12693|                    $defaultInspectionTeamId = (int) $plainMemberTeamIds[0];
12694|                }
12695|            } else {
12696|                $teamsForInspectionModal = [];
12697|            }
12698|        } elseif ($applyTeamEventScope && $teamsForInspectionModal !== []) {
12699|            $defaultInspectionTeamId = (int) ($ssmaEventFormDefaults['team_id'] ?? 0) ?: null;
12700|            if ($defaultInspectionTeamId === null && count($teamsForInspectionModal) === 1) {
12701|                $defaultInspectionTeamId = (int) ($teamsForInspectionModal[0]['id'] ?? 0) ?: null;
12702|            }
12703|        }
12704|        usort($teamsForInspectionModal, static function (array $a, array $b): int {
12705|            return strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? ''));
12706|        });
12707|
12708|        // Técnico especialista SSMA: tem SsmaPermissionTagMember e escopo de equipe [].
12709|        // getSsmaOccurrenceDashboardTeamFilterIds devolve [] (sem equipe no produto) — aplicar
12710|        // filtro de equipe com lista vazia zeraria todas as ocorrências. Filtra por tipo técnico.
12711|        // Importante: NÃO exigir !$ssmaCanManageOccurrences. can_create na tag Membro / ROLE de
12712|        // plataforma não pode esconder ocorrências dos tipos associados ao aprofundamento.
12713|        $isTechSpecialistOnly = !$this->isSsmaViewer()
12714|            && $occurrenceTeamFilterIds === []
12715|            && !empty($userTechnicalTypes);
12716|
12717|        if ($occurrenceTeamFilterIds !== null && !$isTechSpecialistOnly) {
12718|            $teamIdStr = array_map('strval', $occurrenceTeamFilterIds);
12719|
12720|            // Coleta IDs de membros pertencentes às equipes do viewer

{"file_path": "src/Controller/SsmaController.php", "start_line": 8710, "end_line": 8970}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 8710-8970
8710|     * Busca inspeções SSMA pelo título.
8711|     * Parâmetros GET: q (texto), limit (max 100)
8712|     */
8713|    public function searchActionInspections(Request $request): JsonResponse
8714|    {
8715|        /** @var User|null $user */
8716|        $user = $this->getUser();
8717|        if (!$user) {
8718|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8719|        }
8720|
8721|        $company = $this->getSsmaCompany();
8722|        if (!$company) {
8723|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
8724|        }
8725|
8726|        $q     = trim((string) $request->query->get('q', ''));
8727|        $limit = min(100, max(1, (int) $request->query->get('limit', 50)));
8728|
8729|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
8730|
8731|        $qb = $this->entityManager->getRepository(SsmaInspection::class)
8732|            ->createQueryBuilder('i')
8733|            ->where('i.company = :company')
8734|            ->setParameter('company', $company)
8735|            ->orderBy('i.inspectionDate', 'DESC');
8736|
8737|        // Com recorte de área o limite sai do banco: filtrar depois os N mais recentes
8738|        // devolveria uma lista incompleta.
8739|        if (!$areaScope->isRestricted()) {
8740|            $qb->setMaxResults($limit);
8741|        }
8742|
8743|        if ($q !== '') {
8744|            $qb->andWhere('LOWER(i.title) LIKE :q')
8745|               ->setParameter('q', '%' . mb_strtolower($q) . '%');
8746|        }
8747|
8748|        /** @var SsmaInspection[] $rows */
8749|        $rows = $qb->getQuery()->getResult();
8750|
8751|        if ($areaScope->isRestricted()) {
8752|            $rows = array_slice(array_values(array_filter(
8753|                $rows,
8754|                fn (SsmaInspection $i): bool => $this->ssmaPreventionAreaAuthorization
8755|                    ->canViewInspection($areaScope, $i)
8756|            )), 0, $limit);
8757|        }
8758|
8759|        $items = array_map(static function (SsmaInspection $i): array {
8760|            $title = trim((string) ($i->getTitle() ?? ''));
8761|            if ($title === '' || strcasecmp($title, 'None') === 0 || strcasecmp($title, 'null') === 0) {
8762|                $title = 'Inspeção #' . $i->getId();
8763|            }
8764|            $dateLabel = $i->getInspectionDate() instanceof \DateTimeInterface
8765|                ? $i->getInspectionDate()->format('d/m/Y')
8766|                : '';
8767|            $label = $dateLabel !== ''
8768|                ? sprintf('%s (#%d) — %s', $title, $i->getId(), $dateLabel)
8769|                : sprintf('%s (#%d)', $title, $i->getId());
8770|
8771|            return [
8772|                'id'    => $i->getId(),
8773|                'label' => $label,
8774|            ];
8775|        }, $rows);
8776|
8777|        return new JsonResponse(['success' => true, 'items' => $items, 'total' => count($items)]);
8778|    }
8779|
8780|    /**
8781|     * Busca abordagens SSMA pelo nome do observador ou local.
8782|     * Parâmetros GET: q (texto), limit (max 100)
8783|     */
8784|    public function searchActionAbordagens(Request $request): JsonResponse
8785|    {
8786|        /** @var User|null $user */
8787|        $user = $this->getUser();
8788|        if (!$user) {
8789|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8790|        }
8791|
8792|        $company = $this->getSsmaCompany();
8793|        if (!$company) {
8794|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
8795|        }
8796|
8797|        $q     = trim((string) $request->query->get('q', ''));
8798|        $limit = min(100, max(1, (int) $request->query->get('limit', 50)));
8799|
8800|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
8801|
8802|        $qb = $this->entityManager->getRepository(SsmaAbordagem::class)
8803|            ->createQueryBuilder('a')
8804|            ->where('a.company = :company')
8805|            ->setParameter('company', $company)
8806|            ->orderBy('a.data', 'DESC');
8807|
8808|        // Com recorte de área o limite sai do banco: filtrar depois os N mais recentes
8809|        // devolveria uma lista incompleta.
8810|        if (!$areaScope->isRestricted()) {
8811|            $qb->setMaxResults($limit);
8812|        }
8813|
8814|        if ($q !== '') {
8815|            $qb->andWhere('LOWER(a.observadorNome) LIKE :q OR LOWER(a.local) LIKE :q')
8816|               ->setParameter('q', '%' . mb_strtolower($q) . '%');
8817|        }
8818|
8819|        /** @var SsmaAbordagem[] $rows */
8820|        $rows = $qb->getQuery()->getResult();
8821|
8822|        if ($areaScope->isRestricted()) {
8823|            $rows = array_slice(array_values(array_filter(
8824|                $rows,
8825|                fn (SsmaAbordagem $a): bool => $this->ssmaPreventionAreaAuthorization
8826|                    ->canViewAbordagem($areaScope, $a)
8827|            )), 0, $limit);
8828|        }
8829|
8830|        $items = array_map(static function (SsmaAbordagem $a): array {
8831|            return [
8832|                'id'    => $a->getId(),
8833|                'label' => sprintf('Abordagem por %s em %s (#%d) — %s',
8834|                    $a->getObservadorNome(),
8835|                    $a->getLocal(),
8836|                    $a->getId(),
8837|                    $a->getData()->format('d/m/Y')
8838|                ),
8839|            ];
8840|        }, $rows);
8841|
8842|        return new JsonResponse(['success' => true, 'items' => $items, 'total' => count($items)]);
8843|    }
8844|
8845|    /**
8846|     * Busca membros da empresa para combobox SSMA (Fase B — evita SSR com lista completa).
8847|     */
8848|    public function searchSsmaMembers(Request $request): JsonResponse
8849|    {
8850|        /** @var User|null $user */
8851|        $user = $this->getUser();
8852|        if (!$user) {
8853|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8854|        }
8855|
8856|        $company = $this->getSsmaCompany();
8857|        if (!$company instanceof Company) {
8858|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
8859|        }
8860|
8861|        $q = trim((string) $request->query->get('q', ''));
8862|        $teamId = (int) $request->query->get('team_id', 0);
8863|        // Campo Gestor responsável / executor-validador da ação imediata: escopo da empresa
8864|        // (não filtrar por equipe do supervisor).
8865|        $forGestorModal = filter_var($request->query->get('gestor_modal', false), FILTER_VALIDATE_BOOLEAN)
8866|            || filter_var($request->query->get('company_scope', false), FILTER_VALIDATE_BOOLEAN);
8867|        // Limite maior para o seletor de comitê (member picker modal) que precisa de todos os membros da empresa.
8868|        $forPicker = filter_var($request->query->get('picker', false), FILTER_VALIDATE_BOOLEAN);
8869|        $defaultCap = $forGestorModal ? ($forPicker ? 500 : 100) : 50;
8870|        $limit = min($defaultCap, max(1, (int) $request->query->get('limit', 20)));
8871|
8872|        [$allMembers, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
8873|
8874|        $allowedMemberMap = null;
8875|        if (!$forGestorModal) {
8876|            $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
8877|            if ($teamId > 0) {
8878|                $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, [$teamId]);
8879|            } elseif ($occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== []) {
8880|                $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
8881|            }
8882|
8883|            // Recorte de área ativo sempre restringe, inclusive quando o membro não tem área
8884|            // cadastrada (conjunto vazio = nega tudo). Sem esse cuidado a busca devolveria a
8885|            // empresa inteira justamente no caso em que a tela já não mostra nada.
8886|            // Interseção Prevenção ∩ Plano de Ação: cada produto com area_limitation recorta.
8887|            $areaMemberMap = $this->getSsmaCombinedAreaMemberIds($company, $user);
8888|            if ($areaMemberMap !== null) {
8889|                $allowedMemberMap = $allowedMemberMap === null
8890|                    ? $areaMemberMap
8891|                    : array_intersect_key($allowedMemberMap, $areaMemberMap);
8892|            }
8893|        }
8894|
8895|        $qNorm = $this->normalizeSsmaMemberSearchText($q);
8896|        $items = [];
8897|        foreach ($allMembers as $row) {
8898|            $id = (int) ($row['id'] ?? 0);
8899|            if ($id <= 0) {
8900|                continue;
8901|            }
8902|            if ($allowedMemberMap !== null && !isset($allowedMemberMap[$id])) {
8903|                continue;
8904|            }
8905|            $name = trim((string) ($row['name'] ?? ''));
8906|            if ($name === '') {
8907|                continue;
8908|            }
8909|            if ($qNorm !== '' && !str_contains($this->normalizeSsmaMemberSearchText($name), $qNorm)
8910|                && !str_contains($this->normalizeSsmaMemberSearchText((string) ($row['email'] ?? '')), $qNorm)
8911|            ) {
8912|                continue;
8913|            }
8914|            $items[] = [
8915|                'id' => $id,
8916|                'name' => $name,
8917|                'email' => (string) ($row['email'] ?? ''),
8918|                'avatar' => $row['avatar'] ?? null,
8919|                'position' => (string) ($row['position'] ?? ''),
8920|            ];
8921|        }
8922|
8923|        usort($items, static function (array $a, array $b): int {
8924|            return strcasecmp((string) $a['name'], (string) $b['name']);
8925|        });
8926|        $items = array_slice($items, 0, $limit);
8927|
8928|        return new JsonResponse([
8929|            'success' => true,
8930|            'items' => $items,
8931|            'total' => count($items),
8932|            'q' => $q,
8933|        ]);
8934|    }
8935|
8936|    public function deleteAction(int $id): JsonResponse
8937|    {
8938|        /** @var User|null $user */
8939|        $user = $this->getUser();
8940|        if (!$user) {
8941|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
8942|        }
8943|
8944|        if (!$this->canManageSsmaOccurrences()) {
8945|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para deletar ações.'], 403);
8946|        }
8947|
8948|        $action = $this->entityManager->find(SsmaAction::class, $id);
8949|        if (!$action || $action->getCompany()->getId() !== $user->getCompany()?->getId()) {
8950|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8951|        }
8952|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
8953|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
8954|        }
8955|
8956|        try {
8957|            $this->entityManager->remove($action);
8958|            $this->entityManager->flush();
8959|
8960|            return new JsonResponse(['success' => true, 'message' => 'Ação deletada com sucesso.']);
8961|        } catch (\Throwable $e) {
8962|            return new JsonResponse(['success' => false, 'message' => 'Erro ao deletar ação.'], 500);
8963|        }
8964|    }
8965|
8966|    public function reopenAction(int $id): JsonResponse
8967|    {
8968|        /** @var User|null $user */
8969|        $user = $this->getUser();
8970|        if (!$user) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 9800, "end_line": 10030}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9800-10030
9800|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para finalizar esta inspeção.'], 403);
9801|        }
9802|
9803|        if ($inspection->getStatus() === 'finalizada') {
9804|            return new JsonResponse(['success' => true, 'message' => 'Inspeção já está finalizada.']);
9805|        }
9806|
9807|        try {
9808|            $inspection->setStatus('finalizada');
9809|            $this->entityManager->flush();
9810|        } catch (\Throwable $e) {
9811|            return new JsonResponse(['success' => false, 'message' => 'Erro ao finalizar inspeção.'], 500);
9812|        }
9813|
9814|        $payload = [
9815|            'success' => true,
9816|            'message' => 'Inspeção finalizada com sucesso.',
9817|        ];
9818|        try {
9819|            $membersById = $this->buildMembersById($inspection->getCompany());
9820|            $payload['inspection'] = $this->serializeInspection($inspection, $membersById);
9821|            $payload['inspection']['can_mutate'] = $this->canMutateExistingInspection($inspection, $company, $user);
9822|        } catch (\Throwable $e) {
9823|            // Persistiu; o front recarrega se o payload de UI falhar.
9824|        }
9825|
9826|        return new JsonResponse($payload);
9827|    }
9828|
9829|    private function isSsmaViewer(): bool
9830|    {
9831|        $tag = null;
9832|        $user = $this->getUser();
9833|        $member = null;
9834|        if ($user instanceof User) {
9835|            $company = $this->getSsmaCompany() ?? $user->getCompany();
9836|            $member = $company instanceof Company ? $this->getCurrentCompanyMember($company, $user) : null;
9837|            if ($this->memberIsSsmaGestorAdministrador($member)) {
9838|                return false;
9839|            }
9840|            if ($member) {
9841|                $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9842|            }
9843|        }
9844|
9845|        // Supervisor global via Symfony role
9846|        if ($this->isGranted('ROLE_MANAGER_VIEWER')
9847|            && !$this->isGranted('ROLE_MANAGER')
9848|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
9849|            && !$this->isGranted('ROLE_SUPER_ADMIN')
9850|        ) {
9851|            return true;
9852|        }
9853|
9854|        // Supervisor via tag SSMA de produto (can_view=true, sem permissões de escrita).
9855|        // Cobre tags como "Supervisor" ou qualquer tag com can_view=1 e can_create/edit/delete=0,
9856|        // atribuídas diretamente ao produto SSMA sem alterar a role global do usuário.
9857|        //
9858|        // IMPORTANTE: verificar a PermissionTag real da DB (não só os request attributes).
9859|        // setSsmaTechnicalOccurrenceAttributes() define can_view=true nos attributes para stakeholders/técnicos
9860|        // cujo PermissionTag real tem can_view=false. Esses usuários NÃO são viewers reais — são membros
9861|        // com acesso técnico especial. Se só checássemos os attributes, eles bypassariam o filtro de membro.
9862|        $tag = $member instanceof CompanyMembers
9863|            ? $this->resolveSsmaProductPermissionTagForMember($member)
9864|            : null;
9865|        if ($tag instanceof \App\Entity\PermissionTag) {
9866|            if (!($tag->getCanView() ?? false)) {
9867|                return false;
9868|            }
9869|
9870|            return !($tag->getCanCreate() ?? false)
9871|                && !($tag->getCanEdit() ?? false)
9872|                && !($tag->getCanDelete() ?? false);
9873|        }
9874|
9875|        $request = $this->requestStack->getCurrentRequest();
9876|        if (!$request) {
9877|            return false;
9878|        }
9879|
9880|        $permTag = $request->attributes->get('permission_tag');
9881|        if ($permTag instanceof \App\Entity\PermissionTag && !($permTag->getCanView() ?? false)) {
9882|            return false;
9883|        }
9884|
9885|        return (bool) $request->attributes->get('can_view', false)
9886|            && !(bool) $request->attributes->get('can_create', false)
9887|            && !(bool) $request->attributes->get('can_edit', false)
9888|            && !(bool) $request->attributes->get('can_delete', false);
9889|    }
9890|
9891|    /**
9892|     * Retorna IDs das equipes do usuário logado quando ele ?? Supervisor de Equipe na Área SSMA atual.
9893|     * Ex.: Ocorrências pode ser Supervisor enquanto Prevenção ?? Gestor Administrador.
9894|     *
9895|     * Usa a tag vinculada ao produto/Área SSMA (PermissionTagByMember), não a tag global do colaborador,
9896|     * para não aplicar filtro por equipe a quem ?? Gestor Administrador (ou outro perfil) só no SSMA
9897|     * enquanto a tag global/organizacional permanece "Supervisor de Equipe".
9898|     *
9899|     * Também escopo empresa correta: nunca usar findOneBy(user) sem company (multi-empresa).
9900|     *
9901|     * @return int[]|null
9902|     */
9903|    private function getSsmaViewerTeamIds(): ?array
9904|    {
9905|        if (!$this->isSsmaViewer()) {
9906|            return null;
9907|        }
9908|
9909|        /** @var User|null $user */
9910|        $user = $this->getUser();
9911|        if (!$user instanceof User) {
9912|            return null;
9913|        }
9914|
9915|        $company = $user->getCompany();
9916|        if (!$company) {
9917|            return null;
9918|        }
9919|
9920|        $member = $this->entityManager->getRepository(CompanyMembers::class)
9921|            ->findOneBy(['user' => $user, 'company' => $company, 'isRemoved' => 0]);
9922|
9923|        if (!$member) {
9924|            return null;
9925|        }
9926|
9927|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9928|        if (!$tag || !in_array($tag->getName(), ['Supervisor de Equipe', 'Supervisor'], true)) {
9929|            return null;
9930|        }
9931|
9932|        return $this->parseCompanyMemberTeamIds($member);
9933|    }
9934|
9935|    /**
9936|     * @return int[]
9937|     */
9938|    private function parseCompanyMemberTeamIds(CompanyMembers $member): array
9939|    {
9940|        $teamsRaw = $member->getTeams() ?? '';
9941|        if ($teamsRaw === '') {
9942|            return [];
9943|        }
9944|
9945|        return array_values(array_filter(
9946|            array_map('intval', array_map('trim', explode(',', $teamsRaw)))
9947|        ));
9948|    }
9949|
9950|    /**
9951|     * IDs das equipes para filtrar ocorrências (e correlatos) no hub SSMA.
9952|     *
9953|     * - Tag do produto com {@see PermissionTag::getTeamLimitation()} = true → filtra pelas equipes do cadastro
9954|     *   do membro (lista vazia = não vê ocorrências de outras equipes).
9955|     * - Tags **Gestor de Equipe** e **Supervisor de Equipe** no produto atual: escopo pelas equipes do
9956|     *   cadastro do membro (mesmo se `team_limitation` estiver incorreto na base).
9957|     * - Supervisor de Equipe (viewer) continua coberto por {@see getSsmaViewerTeamIds()} quando a tag
9958|     *   por produto não reflete team_limitation (legado).
9959|     * - Colaborador sem equipe no cadastro e sem ser Gestor Administrador no produto (ex.: tag "Supervisor"
9960|     *   com team_limitation = 0) → escopo vazio {@see []}, para não listar ocorrências alheias.
9961|     *
9962|     * @return int[]|null null = sem filtro por equipe nesta tela
9963|     */
9964|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array
9965|    {
9966|        if (!$company || !$user instanceof User) {
9967|            return null;
9968|        }
9969|
9970|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
9971|            return null;
9972|        }
9973|
9974|        $member = $this->getCurrentCompanyMember($company, $user);
9975|        if (!$member) {
9976|            return null;
9977|        }
9978|
9979|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
9980|        // 'Supervisor' puro (sem "de Equipe") ?? supervisor global: sem restrição de equipe, igual ao Gestor Administrador.
9981|        if ($tag && in_array($tag->getName(), ['Gestor Administrador', 'Supervisor'], true)) {
9982|            return null;
9983|        }
9984|
9985|        $parsed = $this->parseCompanyMemberTeamIds($member);
9986|
9987|        if ($tag && in_array($tag->getName(), $this->ssmaTeamScopePermissionTagNames(), true)) {
9988|            return $parsed;
9989|        }
9990|
9991|        if ($tag && $tag->getTeamLimitation()) {
9992|            return $parsed;
9993|        }
9994|
9995|        $viewerTeams = $this->getSsmaViewerTeamIds();
9996|        if ($viewerTeams !== null) {
9997|            return $viewerTeams;
9998|        }
9999|
10000|        // Membro sem tag de supervisão/gestão SSMA (ex.: stakeholder via ocorrência) não deve
10001|        // ter filtro de equipe aplicado: retorna null para que filterOccurrencesForMember
10002|        // mostre apenas o conteúdo próprio. Retornar [] zeraria todos os dados antes disso.
10003|        if ($tag !== null && $parsed === []) {
10004|            if ($this->resolveCurrentUserTechnicalTypes($company, $user) !== []) {
10005|                return [];
10006|            }
10007|
10008|            return null;
10009|        }
10010|
10011|        return null;
10012|    }
10013|
10014|    /**
10015|     * Recorte de área do usuário logado na Prevenção Ativa.
10016|     *
10017|     * Fonte única para listagem, busca, detalhe e gravação: um escopo não restrito libera tudo,
10018|     * um escopo restrito com conjunto vazio nega tudo. Não existe estado intermediário em que
10019|     * a ausência de área cadastrada remova o filtro.
10020|     */
10021|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10022|    {
10023|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-prevention');
10024|    }
10025|
10026|    /**
10027|     * Recorte de área do produto Plano de Ação (`ssma-action-plan`).
10028|     * Independente da tag de Prevenção: a tag do hub é a que vale na tela.
10029|     */
10030|    private function getSsmaActionPlanAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope

{"search_text": "members_for_metas"}

File: src/Controller/SsmaController.php
Match lines: 2
13157|                'members_for_metas'    => $membersForMetas,
18617|        $allMembers  = $viewData['members_for_metas'] ?? $viewData['allMembers'] ?? [];

{"file_path": "src/Controller/SsmaController.php", "start_line": 18570, "end_line": 18660}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 18570-18660
18570|            }
18571|        }
18572|
18573|        return [
18574|            'id'   => null,
18575|            'name' => 'Formulário padrão',
18576|        ];
18577|    }
18578|
18579|    public function prevencaoMetasFilter(Request $request): JsonResponse
18580|    {
18581|        /** @var User|null $user */
18582|        $user    = $this->getUser();
18583|        $company = $user instanceof User ? $user->getCompany() : null;
18584|        if (!$user || !$company) {
18585|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
18586|        }
18587|
18588|        if (!$this->canAccessPreventionDashboardAndMetasTabs()) {
18589|            // Tags de gestão SSMA também acessam Metas (alinhado à UI em buildSsmaViewData).
18590|            $memberTagCheck = $this->getCurrentCompanyMember($company, $user);
18591|            if (!$this->memberIsSsmaGestorAdministrador($memberTagCheck)) {
18592|                $tagCheck = $memberTagCheck ? $this->resolveSsmaProductPermissionTagForMember($memberTagCheck) : null;
18593|                if (!in_array($tagCheck?->getName(), [
18594|                    'Supervisor de Equipe',
18595|                    'Supervisor',
18596|                    'Gestor de Equipe',
18597|                    'Gestor Administrador',
18598|                    SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
18599|                    SsmaAreaLimitationScope::TAG_GESTOR_AREA,
18600|                ], true)) {
18601|                    return new JsonResponse(['success' => false, 'message' => 'Acesso negado.'], 403);
18602|                }
18603|            }
18604|        }
18605|
18606|        $period = (string) $request->query->get('period', 'total');
18607|        if (
18608|            !in_array($period, ['total', 'last_week', 'last_month', 'last_3_months', 'last_6_months', 'last_year'], true)
18609|            && !preg_match('/^range:\\d{4}-\\d{2}-\\d{2}:\\d{4}-\\d{2}-\\d{2}$/', $period)
18610|        ) {
18611|            $period = 'total';
18612|        }
18613|
18614|        $viewData    = $this->buildSsmaViewData();
18615|        $inspections = $viewData['inspections'] ?? [];
18616|        $abordagens  = $viewData['abordagens']  ?? [];
18617|        $allMembers  = $viewData['members_for_metas'] ?? $viewData['allMembers'] ?? [];
18618|        $teams       = $viewData['teams']       ?? [];
18619|
18620|        [$fromStr, $toStr] = $this->getPrevencaoPeriodDateBounds($period);
18621|        [$inspForMetas, $abForMetas] = $this->filterCollectionsForMetasRealizado(
18622|            $inspections, $abordagens, $fromStr, $toStr
18623|        );
18624|
18625|        $metasData = $this->buildPrevencaoPessoaMetasData(
18626|            $company,
18627|            $allMembers,
18628|            $teams,
18629|            $inspForMetas,
18630|            $abForMetas,
18631|            $this->buildSupervisorGestorMemberIdSet(),
18632|            $fromStr,
18633|            $toStr
18634|        );
18635|
18636|        return new JsonResponse([
18637|            'success' => true,
18638|            'metas'   => $metasData,
18639|            'period'  => $period,
18640|            'meta_abono' => array_merge(
18641|                [
18642|                    'pending' => $this->ssmaMetaAbonoService->serializeList(
18643|                        $company,
18644|                        null,
18645|                        \App\Entity\SsmaMetaAbonoRequest::STATUS_PENDING,
18646|                        $this->getCurrentCompanyMember($company, $user)
18647|                    ),
18648|                    'history' => $this->ssmaMetaAbonoService->serializeList(
18649|                        $company,
18650|                        null,
18651|                        null,
18652|                        $this->getCurrentCompanyMember($company, $user)
18653|                    ),
18654|                ],
18655|                $this->ssmaMetaAbonoService->getApproverConfig($company)
18656|            ),
18657|        ]);
18658|    }
18659|
18660|    /**

{"file_path": "templates/ssma/prevention/modals/_modal_inspection.html.twig", "start_line": 820, "end_line": 940}

File: templates/ssma/prevention/modals/_modal_inspection.html.twig (Total lines: 2216)
IS_TRUNCATED: false
LINE_RANGE: 820-940
820|            $('#inspection_deviations_container .js-insp-dev-location').each(function () {
821|                populateInspDevLocationSelect($(this).closest('.insp-dev-card'), $(this).val());
822|            });
823|        }
824|
825|        var PARTICIPANTS_CONFIG = {
826|            $select: $('#inspection_participants_select'),
827|            $tags:   $('#inspection_participants_tags'),
828|            removeClass:       'inspection-participant',
829|            tagClass:          'inspection-tag-item',
830|            removeButtonClass: 'inspection-tag-remove',
831|            memberSearch: {
832|                placeholder: 'Buscar participante...',
833|                dropdownParent: '#modalInspectionNew-offcanvas-wrapper',
834|                remoteUrl: ''
835|            }
836|        };
837|        var COMPANION_CONFIG = {
838|            $select: $('#inspection_companion_select'),
839|            $tags:   $('#inspection_companion_tags'),
840|            removeClass:       'inspection-companion',
841|            tagClass:          'inspection-companion-tag-item',
842|            removeButtonClass: 'inspection-companion-tag-remove',
843|            memberSearch: {
844|                placeholder: 'Buscar acompanhante...',
845|                dropdownParent: '#modalInspectionNew-offcanvas-wrapper',
846|                remoteUrl: ''
847|            }
848|        };
849|
850|        if (window.SsmaShared && typeof window.SsmaShared.bindSingleMemberPreview === 'function') {
851|            window.SsmaShared.bindSingleMemberPreview(
852|                '#inspection_safety_responsible',
853|                '#inspection_safety_responsible_preview',
854|                {
855|                    eventNamespace: '.ssmaInspSafetyResponsiblePreview',
856|                    previewOptions: { removable: false }
857|                }
858|            );
859|        }
860|        $(document).on('change.ssmaInspTeamSync', '#inspection_safety_responsible', function () {
861|            inspSyncTeamFromResponsible();
862|        });
863|        var shared            = window.SsmaShared || {};
864|        var bindTagSelect     = typeof shared.bindTagSelect     === 'function' ? shared.bindTagSelect     : null;
865|        var resetTagSelect    = typeof shared.resetTagSelect    === 'function' ? shared.resetTagSelect    : null;
866|        var setTagSelectValues= typeof shared.setTagSelectValues=== 'function' ? shared.setTagSelectValues: null;
867|        var appendEvidenceItems=typeof shared.appendEvidenceItems==='function' ? shared.appendEvidenceItems: null;
868|
869|        if (typeof shared.initSearchableMemberField === 'function') {
870|            shared.initSearchableMemberField($('#inspection_safety_responsible'), {
871|                mode: 'single',
872|                placeholder: 'Buscar responsável de segurança...',
873|                dropdownParent: '#modalInspectionNew-offcanvas-wrapper'
874|            });
875|        }
876|
877|        PARTICIPANTS_CONFIG.initialHtml = PARTICIPANTS_CONFIG.$select.html();
878|        COMPANION_CONFIG.initialHtml = COMPANION_CONFIG.$select.html();
879|
880|        function isValidationUiReady() { return !!window.ModalValidation; }
881|
882|        /* ── Etapas ──────────────────────────────── */
883|        var _currentStep = 1;
884|
885|        function countFormStrengthsWithText() {
886|            var n = 0;
887|            $('#inspection_strengths_container .insp-strength-card').each(function () {
888|                if ($.trim($(this).find('.js-inspection-strength-description').val() || '')) {
889|                    n += 1;
890|                }
891|            });
892|            return n;
893|        }
894|
895|        /** Textos orientativos por faixa (alinhados ao mockup de produto). */
896|        var INSPECTION_FORM_QUALITY_GUIDANCE = {
897|            alta: [
898|                'Registro completo e bem estruturado, com classificação consistente nos desvios e ação claramente definida.',
899|                'As informações permitem uma leitura precisa de risco e apoiam a tomada de decisão. Mantenha esse padrão, priorizando clareza na classificação e objetividade nas observações.'
900|            ],
901|            media: [
902|                'O registro contém as informações principais, mas apresenta oportunidades de melhoria na classificação dos desvios ou no detalhamento da ação.',
903|                'Para aumentar a qualidade, utilize as categorias com mais precisão e descreva de forma mais clara o que foi observado e a ação realizada.'
904|            ],
905|            baixa: [
906|                'O registro apresenta informações incompletas ou pouco estruturadas, limitando a análise de risco e a definição de ações.',
907|                'Para melhorar, preencha todos os campos obrigatórios, classifique corretamente os desvios e registre a ação de forma objetiva.'
908|            ]
909|        };
910|
911|        function resetInspectionFormQualityUi() {
912|            var $hero = $('#insp-form-quality-hero');
913|            var $bar = $('#insp-form-quality-bar');
914|            $hero.removeClass('insp-form-ql-baixa insp-form-ql-media insp-form-ql-alta');
915|            $bar.removeClass('insp-form-ql-baixa insp-form-ql-media insp-form-ql-alta').css('width', '0%');
916|            $('#insp-form-quality-hero-pct').addClass('is-muted').text('—');
917|            $('#insp-form-quality-hero-word').text('');
918|            $('#insp-form-quality-copy-p1').text('');
919|            $('#insp-form-quality-copy-p2').text('');
920|            $('#insp-form-quality-footer').text('');
921|        }
922|
923|        /** Igual ao padrão da abordagem: atualiza o card só quando o usuário está no passo 4 (evita trabalho desnecessário). */
924|        function maybeRefreshInspectionFormQuality() {
925|            if (_currentStep === 4) {
926|                refreshInspectionFormQuality();
927|            }
928|        }
929|
930|        /**
931|         * Calcula a qualidade da inspeção pelo mesmo modelo da abordagem:
932|         * pontos por campo preenchido (máximo 100 pts = 100%).
933|         *
934|         * Distribuição:
935|         *  Step 1 — informações gerais: 40 pts
936|         *    título               10 pts
937|         *    data                 10 pts
938|         *    responsável seg.     10 pts
939|         *    participantes (≥1)   10 pts
940|         *  Step 2 — desvios: 30 pts

{"file_patterns": ["templates/ssma/prevention/modals/_modal_inspection.html.twig"], "search_text": "openMemberPicker"}

File: templates/ssma/prevention/modals/_modal_inspection.html.twig
Match lines: 2
2039|            if (typeof shared.openMemberPicker !== 'function') {
2045|            shared.openMemberPicker({

{"file_path": "templates/ssma/prevention/modals/_modal_inspection.html.twig", "start_line": 2020, "end_line": 2120}

File: templates/ssma/prevention/modals/_modal_inspection.html.twig (Total lines: 2216)
IS_TRUNCATED: false
LINE_RANGE: 2020-2120
2020|                if (isValidationUiReady()) window.ModalValidation.clearInvalid($select);
2021|                refreshInspMemberSearch($select);
2022|                inspSyncResponsibleFromParticipants();
2023|            };
2024|            PARTICIPANTS_CONFIG.onRemove = function ($select) {
2025|                refreshInspMemberSearch($select);
2026|                inspSyncResponsibleFromParticipants();
2027|            };
2028|            COMPANION_CONFIG.onChange = function ($select) {
2029|                refreshInspMemberSearch($select);
2030|            };
2031|            COMPANION_CONFIG.onRemove = function ($select) {
2032|                refreshInspMemberSearch($select);
2033|            };
2034|            bindTagSelect(PARTICIPANTS_CONFIG);
2035|            bindTagSelect(COMPANION_CONFIG);
2036|        }
2037|
2038|        $(document).on('click', '#insp_participants_picker_btn', function () {
2039|            if (typeof shared.openMemberPicker !== 'function') {
2040|                return;
2041|            }
2042|            var currentIds = PARTICIPANTS_CONFIG.$tags.find('[data-id]').map(function () {
2043|                return parseInt($(this).attr('data-id'), 10);
2044|            }).get().filter(function (n) { return n > 0; });
2045|            shared.openMemberPicker({
2046|                mode: 'multiple',
2047|                title: 'Incluir participantes',
2048|                sectionLabel: 'Internos',
2049|                selectedIds: currentIds,
2050|                confirmLabel: 'Incluir selecionados',
2051|                members: (function () {
2052|                    var rows = [];
2053|                    var seen = {};
2054|                    PARTICIPANTS_CONFIG.$select.find('option').each(function () {
2055|                        var id = parseInt($(this).val(), 10);
2056|                        if (!(id > 0) || seen[id]) {
2057|                            return;
2058|                        }
2059|                        seen[id] = true;
2060|                        var extra = (shared.getMemberById && shared.getMemberById(id)) || {};
2061|                        rows.push($.extend({}, extra, {
2062|                            id: id,
2063|                            name: String($(this).data('name') || $(this).text() || extra.name || '').trim()
2064|                        }));
2065|                    });
2066|                    return rows;
2067|                })(),
2068|                onConfirm: function (ids) {
2069|                    if (typeof shared.setTagSelectValues === 'function') {
2070|                        shared.setTagSelectValues(PARTICIPANTS_CONFIG, ids);
2071|                    }
2072|                    refreshInspMemberSearch(PARTICIPANTS_CONFIG.$select);
2073|                    if (typeof PARTICIPANTS_CONFIG.onChange === 'function') {
2074|                        PARTICIPANTS_CONFIG.onChange(PARTICIPANTS_CONFIG.$select);
2075|                    }
2076|                }
2077|            });
2078|        });
2079|
2080|        resetInspectionForm();
2081|    });
2082|
2083|    // ── Botão "Avaliar com IA" nos cards de desvio da inspeção ───────────────
2084|    (function () {
2085|        var colorMap = {
2086|            'Insuficiente': '#dc3545',
2087|            'Fraca':        '#fd7e14',
2088|            'Adequada':     '#ffc107',
2089|            'Boa':          '#20c997',
2090|            'Excelente':    '#198754',
2091|        };
2092|
2093|        $(document).on('click', '.js-insp-ai-quality-btn', function () {
2094|            var $btn      = $(this);
2095|            var $card     = $btn.closest('.js-inspection-deviation-card, .deviation-card');
2096|            var $input    = $card.find('.js-inspection-deviation-title');
2097|            var $badge    = $btn.closest('.form-group').find('.js-insp-ai-quality-badge');
2098|            var $feedback = $btn.closest('.form-group').find('.js-insp-ai-quality-feedback');
2099|            var field     = $btn.data('field') || 'inspection_deviation';
2100|            var text      = $input.val().trim();
2101|
2102|            if (text.length < 10) {
2103|                $feedback.text('Preencha o campo antes de avaliar.').css('border-color', '#dc3545').removeClass('d-none');
2104|                return;
2105|            }
2106|
2107|            $btn.prop('disabled', true).html('<i class="fas fa-spinner fa-spin mr-1" style="font-size:10px;"></i> Avaliando…');
2108|            $badge.addClass('d-none');
2109|            $feedback.addClass('d-none');
2110|
2111|            $.ajax({
2112|                url: '/manager/ssma/ai-quality-check',
2113|                method: 'POST',
2114|                contentType: 'application/json',
2115|                data: JSON.stringify({ text: text, field: field }),
2116|                success: function (data) {
2117|                    if (!data.success || !data.quality) return;
2118|                    var q = data.quality;
2119|                    var color = colorMap[q.label] || '#6c757d';
2120|

{"file_path": "src/Controller/SsmaController.php", "start_line": 9380, "end_line": 9470}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9380-9470
9380|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9381|        }
9382|        if (!$this->canViewSsmaActionUnderAreaScope($action, $company, $user)) {
9383|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9384|        }
9385|
9386|        $actionTypeLabels = array_column($this->getActionTypeMetadata(), 'label', 'value');
9387|        $type = $action->getType() ?? '';
9388|        $origem = $action->getOrigem() ?? '';
9389|        $relatedEventType = $action->resolveRelatedEventType();
9390|
9391|        $projectId = $action->getProjectId();
9392|        $projectUrl = $action->isHasProject() && $projectId
9393|            ? '/projects/project_steps/' . $projectId
9394|            : '';
9395|
9396|        $payload = array_merge([
9397|            'id'                 => $action->getId(),
9398|            'occurrence_id'      => $action->getOccurrence()?->getId(),
9399|            'event_id'           => $action->getEvent()?->getId() ?? (ActionOrigemEnum::isInspectionOrApproach($origem) ? $action->getOrigemId() : null),
9400|            'related_event_type' => $relatedEventType,
9401|            'relatedType'        => $relatedEventType,
9402|            'origem_id'          => $action->getOrigemId(),
9403|            'title'              => $action->getTitle(),
9404|            'description'        => $action->getDescription() ?? '',
9405|            'type'               => $type,
9406|            'type_label'         => $actionTypeLabels[$type] ?? $type,
9407|            'deadline'           => $action->getDeadline()?->format('Y-m-d'),
9408|            'responsible_ids'    => $action->getResponsibleIds() ?? [],
9409|            'validator_id'       => $action->getValidatorMemberId(),
9410|            'solved'             => $action->isSolved(),
9411|            'has_project'        => $action->isHasProject(),
9412|            'project_id'         => $projectId,
9413|            'project_url'        => $projectUrl,
9414|            'project_start_date' => $action->getProjectStartDate()?->format('Y-m-d') ?? '',
9415|            'project_priority'   => $action->getProjectPriority() ?? '',
9416|            'control_hierarchy'  => $action->getControlHierarchy() ?? '',
9417|        ], $this->resolveActionDeadlineEditMeta($action, $company, $user));
9418|
9419|        return new JsonResponse(['success' => true, 'action' => $payload]);
9420|    }
9421|
9422|    public function getInspection(int $id): JsonResponse
9423|    {
9424|        /** @var User|null $user */
9425|        $user = $this->getUser();
9426|        if (!$user) {
9427|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9428|        }
9429|
9430|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9431|        if (!$inspection || $inspection->getCompany()->getId() !== $user->getCompany()?->getId()) {
9432|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9433|        }
9434|
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9436|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9437|        }
9438|
9439|        // TODO: This detail payload is the source used to hydrate the edit modal on the front-end.
9440|        return new JsonResponse([
9441|            'success' => true,
9442|            'inspection' => $this->serializeInspectionDetail($inspection),
9443|        ]);
9444|    }
9445|
9446|    public function viewInspection(int $id): Response
9447|    {
9448|        /** @var User|null $user */
9449|        $user = $this->getUser();
9450|        if (!$user) {
9451|            return $this->redirectToRoute('app_login');
9452|        }
9453|
9454|        $company = $user->getCompany();
9455|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9456|
9457|        if (!$inspection || !$company || $inspection->getCompany()->getId() !== $company->getId()) {
9458|            $this->addFlash('warning', 'Inspeção não encontrada.');
9459|
9460|            return $this->redirectToRoute('ssma_prevencao_index');
9461|        }
9462|
9463|        $request = $this->requestStack->getCurrentRequest();
9464|        if ($request instanceof Request) {
9465|            $this->bindSsmaPreventionProductToRequest($request);
9466|        }
9467|
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
9469|            $this->addFlash('warning', 'Inspeção não encontrada.');
9470|

{"search_text": "remoteUrl", "file_patterns": ["public/js/ssma/*.js", "templates/ssma/prevention/**/*.twig"]}

File: templates/ssma/prevention/modals/_modal_inspection.html.twig
Match lines: 2
834|                remoteUrl: ''
846|                remoteUrl: ''

{"search_text": "memberSearch", "file_patterns": ["public/js/"]}

File: public/js/chat_ia/assessment_analysis/member_search_analysis.js
Match lines: 9
927|function memberSearchAnalysisByResearch(iaResponse) {
1560|window.memberSearchAnalysisByResearch =
1561|  memberSearchAnalysisByResearch;
1564|function memberSearchAnalysisGeneral(iaResponse) {
2071|window.memberSearchAnalysisGeneral = memberSearchAnalysisGeneral;
2999|function renderMemberSearchAnalysisByResearch(analysisObj) {
3308|window.renderMemberSearchAnalysisByResearch = renderMemberSearchAnalysisByResearch;
3337|function memberSearchPeriodAnalysis(iaResponse) {
3966|window.memberSearchPeriodAnalysis = memberSearchPeriodAnalysis;

File: public/js/chat_ia/processos_analysis/processos_analysis.js
Match lines: 4
1196|  // Criação manual da loading bubble, igual ao padrão de memberSearchAnalysisByResearch
1874|async function memberSearchProcessManagement(iaResponse) {
2450|window.memberSearchProcessManagement = memberSearchProcessManagement;
2598|// Renderiza histórico da lista de processos (memberSearchProcessManagement)

File: public/js/shift-scheduling/index.js
Match lines: 2
1581|        var memberSearch = normalizeSearchText([
1593|        if (search && memberSearch.indexOf(search) === -1) {

{"file_patterns": ["public/js/ssma*", "public/js/*ssma*", "templates/ssma/partials/"], "search_text": "remoteUrl"}

File: templates/ssma/partials/_shared_module_assets.html.twig
Match lines: 5
761|        var remoteUrl = Object.prototype.hasOwnProperty.call(options, 'remoteUrl')
762|            ? (options.remoteUrl || '')
877|            var cacheKey = shared.memberSearchRequestKey(remoteUrl, ajaxParams);
899|                shared.fetchMembersSearch(remoteUrl, ajaxParams)
911|            if (remoteUrl) {

{"file_path": "templates/ssma/partials/_shared_module_assets.html.twig", "start_line": 700, "end_line": 960}

File: templates/ssma/partials/_shared_module_assets.html.twig (Total lines: 2165)
IS_TRUNCATED: false
LINE_RANGE: 700-960
700|        $select.removeData('ssmaSearchableField');
701|        if (ui) {
702|            $select.removeAttr('tabindex aria-hidden');
703|            $select.removeClass('d-none ssma-member-tag-native-select ssma-member-select-search');
704|        } else {
705|            $select.removeClass('ssma-member-tag-native-select ssma-member-select-search');
706|        }
707|    };
708|
709|    shared.closeSearchableMemberFieldDropdown = shared.closeSearchableMemberFieldDropdown || function ($select) {
710|        var ui = shared.getSearchableMemberField($select);
711|        if (ui && ui.$dropdown) {
712|            ui.$dropdown.addClass('d-none');
713|        }
714|    };
715|
716|    shared.closeAllSearchableMemberDropdowns = shared.closeAllSearchableMemberDropdowns || function (root) {
717|        var $scope = root ? $(root) : $(document.body);
718|        $scope.find('.ssma-member-tag-search-dropdown').addClass('d-none');
719|        $scope.find('.ssma-member-tag-search-input').each(function () {
720|            if (this !== document.activeElement && typeof this.blur === 'function') {
721|                this.blur();
722|            }
723|        });
724|    };
725|
726|    shared.refreshSearchableMemberField = shared.refreshSearchableMemberField || function ($select) {
727|        var ui = shared.getSearchableMemberField($select);
728|        if (!ui) {
729|            return;
730|        }
731|        if (document.activeElement === ui.$input[0]) {
732|            ui.render(ui.$input.val());
733|            return;
734|        }
735|        ui.$dropdown.addClass('d-none');
736|    };
737|
738|    /**
739|     * Campo de busca digitável com filtro ao vivo (padrão dos filtros do header SSMA).
740|     * mode=tag: integra com bindTagSelect; mode=single: select único (gestor).
741|     */
742|    shared.initSearchableMemberField = shared.initSearchableMemberField || function ($select, options) {
743|        if (!$select || !$select.length) {
744|            return;
745|        }
746|
747|        options = options || {};
748|        if ($select.data('ssmaSearchableField')) {
749|            shared.refreshSearchableMemberField($select);
750|            return;
751|        }
752|
753|        shared.destroySearchableMemberField($select);
754|
755|        if (typeof shared.sortMemberSelectOptions === 'function') {
756|            shared.sortMemberSelectOptions($select);
757|        }
758|
759|        var mode = options.mode === 'single' ? 'single' : 'tag';
760|        var placeholder = options.placeholder || 'Buscar pelo nome...';
761|        var remoteUrl = Object.prototype.hasOwnProperty.call(options, 'remoteUrl')
762|            ? (options.remoteUrl || '')
763|            : (shared.membersSearchUrl || '');
764|        var remoteExtraParams = options.remoteExtraParams || {};
765|        var remoteLimit = parseInt(options.remoteLimit, 10);
766|        if (!remoteLimit || remoteLimit < 1) {
767|            remoteLimit = 20;
768|        }
769|        var remoteTimer = null;
770|        var remoteSeq = 0;
771|        var $wrap = $('<div class="ssma-member-tag-search-wrap"></div>');
772|        var $input = $('<input type="text" class="form-control ssma-member-tag-search-input" autocomplete="off" autocorrect="off" spellcheck="false">')
773|            .attr({ placeholder: placeholder, 'aria-autocomplete': 'list', role: 'combobox' });
774|        var $dropdown = $('<div class="ssma-member-tag-search-dropdown d-none" role="listbox"></div>');
775|        var ns = '.ssmaMemberSearch' + String($select.attr('id') || Math.random()).replace(/[^a-z0-9]/gi, '');
776|
777|        $select.addClass('ssma-member-tag-native-select');
778|        $select.attr({ tabindex: '-1', 'aria-hidden': 'true' });
779|        $select.after($wrap);
780|        $wrap.append($input).append($dropdown);
781|
782|        function availableOptions() {
783|            return $select.find('option').filter(function () {
784|                var $opt = $(this);
785|                if ($opt.is(':disabled')) {
786|                    return false;
787|                }
788|                var val = $opt.attr('value');
789|                return val !== undefined && val !== null && String(val).trim() !== '';
790|            });
791|        }
792|
793|        function shouldShowDropdown() {
794|            return $input.is(':focus');
795|        }
796|
797|        function ensureOption(item) {
798|            if (!item || !item.id) {
799|                return;
800|            }
801|            var id = String(item.id);
802|            var name = String(item.name || '').trim();
803|            if (!name) {
804|                return;
805|            }
806|            var $existing = $select.find('option').filter(function () {
807|                return String($(this).val()) === id;
808|            });
809|            if ($existing.length) {
810|                $existing.first().attr('data-name', name).text(name);
811|                return;
812|            }
813|            $select.append($('<option></option>').val(id).attr('data-name', name).text(name));
814|        }
815|
816|        function paintMatches(matches, filter) {
817|            matches = matches || [];
818|            matches.sort(function (a, b) {
819|                return shared.normalizeMemberSearchText(a.name).localeCompare(
820|                    shared.normalizeMemberSearchText(b.name),
821|                    'pt-BR'
822|                );
823|            });
824|
825|            var html = '';
826|            matches.forEach(function (match) {
827|                html += '<button type="button" class="ssma-member-tag-search-option" role="option" data-value="' +
828|                    shared.escapeHtml(match.id) + '">' + shared.escapeHtml(match.name) + '</button>';
829|            });
830|
831|            if (!html) {
832|                html = '<div class="ssma-member-tag-search-empty text-muted px-3 py-2">Nenhum resultado encontrado</div>';
833|            }
834|
835|            $dropdown.html(html);
836|            if (shouldShowDropdown()) {
837|                $dropdown.removeClass('d-none');
838|            } else {
839|                $dropdown.addClass('d-none');
840|            }
841|        }
842|
843|        function renderLocal(filter) {
844|            var q = shared.normalizeMemberSearchText(filter);
845|            var matches = [];
846|
847|            availableOptions().each(function () {
848|                var $opt = $(this);
849|                var name = String($opt.data('name') || $opt.text() || '').trim();
850|                var id = String($opt.val());
851|                if (!name) {
852|                    return;
853|                }
854|                if (q && shared.normalizeMemberSearchText(name).indexOf(q) === -1) {
855|                    return;
856|                }
857|                matches.push({ id: id, name: name });
858|            });
859|
860|            paintMatches(matches, filter);
861|        }
862|
863|        function renderRemote(filter) {
864|            var q = String(filter || '').trim();
865|            var seq = ++remoteSeq;
866|            $dropdown.html('<div class="ssma-member-tag-search-empty text-muted px-3 py-2">Buscando...</div>');
867|            if (shouldShowDropdown()) {
868|                $dropdown.removeClass('d-none');
869|            }
870|            window.clearTimeout(remoteTimer);
871|            var ajaxParams = { q: q, limit: remoteLimit };
872|            if (remoteExtraParams && typeof remoteExtraParams === 'object') {
873|                Object.keys(remoteExtraParams).forEach(function (key) {
874|                    ajaxParams[key] = remoteExtraParams[key];
875|                });
876|            }
877|            var cacheKey = shared.memberSearchRequestKey(remoteUrl, ajaxParams);
878|            var applyResponse = function (resp) {
879|                if (seq !== remoteSeq) {
880|                    return;
881|                }
882|                var items = (resp && resp.items) ? resp.items : [];
883|                var matches = [];
884|                items.forEach(function (item) {
885|                    ensureOption(item);
886|                    matches.push({ id: String(item.id), name: String(item.name || '') });
887|                });
888|                if (matches.length === 0) {
889|                    renderLocal(filter);
890|                    return;
891|                }
892|                paintMatches(matches, filter);
893|            };
894|            if (shared.memberSearchCache[cacheKey]) {
895|                applyResponse(shared.memberSearchCache[cacheKey]);
896|                return;
897|            }
898|            remoteTimer = window.setTimeout(function () {
899|                shared.fetchMembersSearch(remoteUrl, ajaxParams)
900|                    .done(applyResponse)
901|                    .fail(function () {
902|                        if (seq !== remoteSeq) {
903|                            return;
904|                        }
905|                        renderLocal(filter);
906|                    });
907|            }, 280);
908|        }
909|
910|        function render(filter) {
911|            if (remoteUrl) {
912|                renderRemote(filter);
913|                return;
914|            }
915|            renderLocal(filter);
916|        }
917|
918|        function pick(val) {
919|            if (!val) {
920|                return;
921|            }
922|            $select.val(String(val)).trigger('change');
923|            if (mode === 'single') {
924|                var $opt = $select.find('option').filter(function () {
925|                    return String($(this).val()) === String(val);
926|                }).first();
927|                $input.val(String($opt.data('name') || $opt.text() || '').trim());
928|                $dropdown.addClass('d-none');
929|            } else {
930|                $input.val('');
931|                $dropdown.addClass('d-none');
932|                if (document.activeElement === $input[0]) {
933|                    $input.blur();
934|                }
935|            }
936|        }
937|
938|        $input.on('focus' + ns, function () {
939|            if (mode === 'single') {
940|                this.select();
941|                render('');
942|                return;
943|            }
944|            render($input.val());
945|        });
946|        $input.on('input' + ns, function () {
947|            render($input.val());
948|        });
949|
950|        $input.on('blur' + ns, function () {
951|            window.setTimeout(function () {
952|                $dropdown.addClass('d-none');
953|            }, 150);
954|        });
955|
956|        $input.on('keydown' + ns, function (e) {
957|            if (e.key === 'Escape') {
958|                $dropdown.addClass('d-none');
959|                return;
960|            }

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "ssmaIsPlainProductMemberUi"}

File: src/Controller/SsmaController.php
Match lines: 3
12430|        $ssmaIsPlainProductMemberUi = SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
12436|        if ($ssmaIsPlainProductMemberUi && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
12680|        $ssmaIsPlainPreventionMember = $ssmaIsPlainProductMemberUi

{"file_path": "src/Controller/SsmaController.php", "start_line": 9140, "end_line": 9295}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9140-9295
9140|                    null,
9141|                    $user
9142|                );
9143|
9144|                $action->setCcDemandId($demandId);
9145|                $this->entityManager->flush();
9146|
9147|                return new JsonResponse([
9148|                    'success'            => true,
9149|                    'message'            => 'Ação enviada para validação com sucesso.',
9150|                    'validation_status'  => 'pending_validation',
9151|                    'cc_demand_id'       => $demandId,
9152|                    'solved'             => false,
9153|                ]);
9154|            }
9155|
9156|            // Sem validador no Resolver: não fecha direto — o fluxo exige validação por pessoa distinta.
9157|            if ($operation !== 'evaluate' && empty($validatorMemberIds)) {
9158|                return new JsonResponse([
9159|                    'success' => false,
9160|                    'message' => 'Informe o responsável pela validação antes de enviar o fechamento.',
9161|                ], 422);
9162|            }
9163|
9164|            // Sem validador: fecha direto (somente reavaliação admin / legado)
9165|            if ($rating) {
9166|                $action->setResolutionRating($rating);
9167|            }
9168|            $action->setSolved(true);
9169|            $action->setValidationStatus(null);
9170|            $this->entityManager->flush();
9171|            $parentFinalized = $this->ssmaOccurrenceAutoFinalizeService->tryFinalizeParentWhenAllActionsClosed($action);
9172|            if ($parentFinalized) {
9173|                $event = $action->getEvent();
9174|                $company = $user->getCompany();
9175|                if ($event instanceof SsmaEvent && $company instanceof Company) {
9176|                    $this->maybeSubmitOccurrenceForValidation($event, $company, $user);
9177|                }
9178|            }
9179|
9180|            return new JsonResponse([
9181|                'success' => true,
9182|                'message' => $operation === 'evaluate' ? 'Ação reavaliada com sucesso.' : 'Ação finalizada com sucesso.',
9183|                'solved'  => true,
9184|                'parent_occurrence_finalized' => $parentFinalized,
9185|            ]);
9186|        } catch (\Throwable $e) {
9187|            $this->ssmaLogger->error('resolveAction error: ' . $e->getMessage(), [
9188|                'exception' => $e::class,
9189|                'action_id'   => $id,
9190|                'trace'       => $e->getTraceAsString(),
9191|            ]);
9192|            $payload = ['success' => false, 'message' => 'Erro ao resolver ação.'];
9193|            if ($this->getParameter('kernel.debug')) {
9194|                $payload['detail'] = $e->getMessage();
9195|            }
9196|
9197|            return new JsonResponse($payload, 500);
9198|        }
9199|    }
9200|
9201|    // ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
9202|    // Inspection CRUD
9203|    // ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
9204|
9205|    public function createInspection(Request $request): JsonResponse
9206|    {
9207|        /** @var User|null $user */
9208|        $user = $this->getUser();
9209|        if (!$user) {
9210|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9211|        }
9212|
9213|        $company = $this->getSsmaCompany();
9214|        if (!$company) {
9215|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
9216|        }
9217|
9218|        if (!$this->canMutatePreventionContentForCurrentUser($company, $user, 'inspecao')) {
9219|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para registrar ou alterar inspeções.'], 403);
9220|        }
9221|
9222|        // TODO: Keep this payload contract stable so the front-end edit/create flow can integrate with the final database model.
9223|        $data = json_decode($request->getContent(), true) ?? [];
9224|        $mode = $data['mode'] ?? 'create';
9225|
9226|        $inspectionDate = $data['inspection_date'] ?? null;
9227|        if (!$inspectionDate) {
9228|            return new JsonResponse(['success' => false, 'message' => 'Data da inspeção obrigatória.'], 422);
9229|        }
9230|
9231|        $inspectionType = trim((string) ($data['inspection_type'] ?? ''));
9232|        if ($inspectionType === '') {
9233|            return new JsonResponse(['success' => false, 'message' => 'Tipo de inspeção obrigatório.'], 422);
9234|        }
9235|
9236|        $this->ensureSsmaDeviationExtraColumns();
9237|        $this->ensureSsmaActionSchema();
9238|
9239|        try {
9240|            if ($mode === 'edit' && !empty($data['inspectionId'])) {
9241|                $inspection = $this->entityManager->find(SsmaInspection::class, (int) $data['inspectionId']);
9242|                if (!$inspection || $inspection->getCompany()->getId() !== $company->getId()) {
9243|                    return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9244|                }
9245|                if (!$this->canMutateExistingInspection($inspection, $company, $user)) {
9246|                    return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar esta inspeção.'], 403);
9247|                }
9248|                $message = 'Inspeção atualizada com sucesso.';
9249|            } else {
9250|                $inspection = new SsmaInspection();
9251|                $inspection->setCompany($company);
9252|                $message = 'Inspeção registrada com sucesso.';
9253|                $currentMember = $this->getCurrentCompanyMember($company, $user);
9254|                $creatorName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
9255|                if ($creatorName === '') {
9256|                    $creatorName = (string) ($user->getEmail() ?? 'Usuário');
9257|                }
9258|                if ($currentMember) {
9259|                    $label = $this->ssmaMemberDisplayLabel($currentMember);
9260|                    if ($label !== '') {
9261|                        $creatorName = $label;
9262|                    }
9263|                }
9264|                $inspection->setCreatorMeta(
9265|                    $currentMember ? (int) $currentMember->getId() : null,
9266|                    $creatorName
9267|                );
9268|            }
9269|
9270|            $previousInspectionRecipientIds = $mode === 'edit'
9271|                ? $this->ssmaNotificationService->resolveInspectionRecipientMemberIds($inspection)
9272|                : [];
9273|
9274|            $executorNotifications = $this->applyInspectionData($inspection, $data);
9275|            $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
9276|            $hasTeamLimitation = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user) !== null;
9277|            $rawTeamId = $inspection->getTeam()?->getId() ? (int) $inspection->getTeam()->getId() : null;
9278|            $writableTeamId = $this->ssmaPreventionAreaAuthorization->resolveWritableInspectionTeamId(
9279|                $areaScope,
9280|                $rawTeamId,
9281|                $hasTeamLimitation
9282|            );
9283|            // area_limitation sozinha: pessoa da gerência cuja CompanyTeam é de outra área
9284|            // não pode impedir o save — a inspeção fica no recorte pelas pessoas.
9285|            if ($writableTeamId === null && $rawTeamId !== null) {
9286|                $inspection->setTeam(null);
9287|            }
9288|            // Seletor filtrado no Twig é só UX: valida no backend a equipe resolvida e cada
9289|            // pessoa do payload (responsável, participantes, acompanhantes, responsáveis de desvio)
9290|            // contra a empresa da sessão e o recorte de área.
9291|            $areaScopeErr = $this->ssmaPreventionAreaAuthorization->validateInspectionPayload(
9292|                $areaScope,
9293|                $company,
9294|                $data,
9295|                $writableTeamId

{"search_text": "getSsmaManagementTagNames"}

File: src/Twig/MemberPermissionExtension.php
Match lines: 4
746|    private function getSsmaManagementTagNames(): array
783|        $managementTagNames = $this->getSsmaManagementTagNames();
1080|        $managementTagNames = $this->getSsmaManagementTagNames();
1159|        $managementTagNames = $this->getSsmaManagementTagNames();

{"file_path": "src/Twig/MemberPermissionExtension.php", "end_line": 1200, "start_line": 740}

File: src/Twig/MemberPermissionExtension.php (Total lines: 5411)
IS_TRUNCATED: false
LINE_RANGE: 740-1200
740|        return $permission instanceof PermissionTag ? $permission : null;
741|    }
742|
743|    /**
744|     * @return list<string>
745|     */
746|    private function getSsmaManagementTagNames(): array
747|    {
748|        return [
749|            'Supervisor de Equipe',
750|            'Supervisor',
751|            'Gestor de Equipe',
752|            'Gestor Administrador',
753|            'Supervisor de Área',
754|            'Gestor de Área',
755|        ];
756|    }
757|
758|    /**
759|     * Produtos em que a tag de gestor/supervisor libera o menu ampliado de SSMA.
760|     * Inclui o card de catálogo "Módulo de Segurança" (`modulo-seguranca`), que não é o mesmo
761|     * slug do pai legado `saude-e-seguranca`.
762|     *
763|     * @return list<string>
764|     */
765|    private function getSsmaManagementMenuProductSlugs(): array
766|    {
767|        return array_values(array_unique([
768|            'ssma-occurrences',
769|            'ssma-prevention',
770|            'ssma-action-plan',
771|            $this->ssmaParentProductSlug,
772|            'modulo-seguranca',
773|            'seguranca',
774|        ]));
775|    }
776|
777|    /**
778|     * Tag de gestão atribuída de forma explícita (PermissionTagByMember), sem herdar a tag global.
779|     * Evita classificar como "Membro" quem é Gestor só no produto `modulo-seguranca`.
780|     */
781|    private function memberHasExplicitSsmaManagementProductTag(CompanyMembers $companyMember): bool
782|    {
783|        $managementTagNames = $this->getSsmaManagementTagNames();
784|        foreach ($this->getSsmaManagementMenuProductSlugs() as $slug) {
785|            $tag = $this->getExplicitProductPermission($companyMember, $slug);
786|            if ($tag instanceof PermissionTag && in_array((string) $tag->getName(), $managementTagNames, true)) {
787|                return true;
788|            }
789|        }
790|
791|        return false;
792|    }
793|
794|    /**
795|     * Pai explícito do catálogo SSMA (legado + card "Módulo de Segurança"), sem fallback global.
796|     */
797|    private function getExplicitSsmaCatalogParentPermission(CompanyMembers $companyMember): ?PermissionTag
798|    {
799|        foreach ([$this->ssmaParentProductSlug, 'modulo-seguranca', 'seguranca'] as $slug) {
800|            $tag = $this->getExplicitProductPermission($companyMember, $slug);
801|            if ($tag instanceof PermissionTag) {
802|                return $tag;
803|            }
804|        }
805|
806|        return null;
807|    }
808|
809|    public function canAccessSsmaAprofundamento(): bool
810|    {
811|        $user = $this->security->getUser();
812|        if (!$user instanceof User || !in_array('ROLE_USER', $user->getRoles(), true)) {
813|            return false;
814|        }
815|
816|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
817|        if (!$company) {
818|            return false;
819|        }
820|
821|        $companyMember = $this->getCompanyMember($user, $company);
822|        if (!$companyMember instanceof CompanyMembers) {
823|            return false;
824|        }
825|
826|        $links = $this->em
827|            ->getRepository(SsmaPermissionTagMember::class)
828|            ->findBy(['companyMember' => $companyMember]);
829|
830|        foreach ($links as $link) {
831|            if (!$link instanceof SsmaPermissionTagMember) {
832|                continue;
833|            }
834|
835|            $tag = $link->getTag();
836|            if (
837|                $tag->getCompany()->getId() === $companyMember->getCompany()->getId()
838|                && (string) $tag->getOccurrenceTypeKey() !== ''
839|            ) {
840|                return true;
841|            }
842|        }
843|
844|        return false;
845|    }
846|
847|    /**
848|     * Membro com canView=false no SSMA mas vinculado a ocorrência/evento (pessoa envolvida, responsável, etc.).
849|     * Usado no menu para espelhar a exceção do {@see \App\EventListener\GlobalPermissionListener}.
850|     */
851|    public function canAccessSsmaOccurrenceStakeholder(): bool
852|    {
853|        $user = $this->security->getUser();
854|        if (!$user instanceof User || !in_array('ROLE_USER', $user->getRoles(), true)) {
855|            return false;
856|        }
857|
858|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
859|        if (!$company) {
860|            return false;
861|        }
862|
863|        $companyMember = $this->getCompanyMember($user, $company);
864|        if (!$companyMember instanceof CompanyMembers) {
865|            return false;
866|        }
867|
868|        return $this->ssmaOccurrenceStakeholderChecker->hasStakeholderLink($companyMember, $company);
869|    }
870|
871|    /**
872|     * Retorna true quando o usuário deve ver o item "Prevenção Ativa" no menu lateral.
873|     *
874|     * Espelha {@see SsmaController::prevencaoIndex()}:
875|     * - Admins de plataforma/empresa sempre veem (configuram metas e permissões).
876|     * - Colaboradores só veem quando a empresa já tem metas configuradas e o perfil/meta individual
877|     *   liberaria ao menos uma aba do hub (sem página vazia).
878|     */
879|    public function canAccessSsmaPrevencaoAtiva(): bool
880|    {
881|        $user = $this->security->getUser();
882|        if (!$user instanceof User) {
883|            return false;
884|        }
885|
886|        $roles = $user->getRoles();
887|        if (
888|            in_array('ROLE_SUPER_ADMIN', $roles, true)
889|            || in_array('ROLE_MANAGER', $roles, true)
890|            || in_array('ROLE_MANAGER_GESTOR', $roles, true)
891|        ) {
892|            return true;
893|        }
894|
895|        if (!in_array('ROLE_USER', $roles, true)) {
896|            return false;
897|        }
898|
899|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
900|        if (!$company) {
901|            return false;
902|        }
903|
904|        $companyMember = $this->getCompanyMember($user, $company);
905|        if (!$companyMember instanceof CompanyMembers) {
906|            return false;
907|        }
908|
909|        return $this->ssmaPreventionHubAccessService->canCollaboratorAccessPreventionHub($company, $companyMember);
910|    }
911|
912|    /**
913|     * Retorna true quando o usuário deve ver o item "Árvore de Causas" no menu lateral.
914|     *
915|     * Mesma regra de {@see canAccessSsmaAuthorizationNavigation()}: usa SsmaPermissionTagMember e,
916|     * em fallback, PermissionTagByMember somente no produto ssma-cause-tree (não herda tag de
917|     * ssma-occurrences nem saude-e-seguranca). Membro/Inspetor com só ocorrências não veem o item.
918|     */
919|    public function canAccessSsmaCauseTreeNavigation(): bool
920|    {
921|        $user = $this->security->getUser();
922|        if (!$user instanceof User) {
923|            return false;
924|        }
925|
926|        $roles = $user->getRoles();
927|        if (
928|            in_array('ROLE_SUPER_ADMIN', $roles, true)
929|            || in_array('ROLE_MANAGER', $roles, true)
930|            || in_array('ROLE_MANAGER_GESTOR', $roles, true)
931|        ) {
932|            return true;
933|        }
934|
935|        if (!in_array('ROLE_USER', $roles, true)) {
936|            return false;
937|        }
938|
939|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
940|        if (!$company) {
941|            return false;
942|        }
943|
944|        $companyMember = $this->getCompanyMember($user, $company);
945|        if (!$companyMember instanceof CompanyMembers) {
946|            return false;
947|        }
948|
949|        $managementTagNames = ['Supervisor de Equipe', 'Supervisor', 'Gestor de Equipe', 'Gestor Administrador'];
950|
951|        $links = $this->em
952|            ->getRepository(SsmaPermissionTagMember::class)
953|            ->findBy(['companyMember' => $companyMember]);
954|        foreach ($links as $link) {
955|            if (!$link instanceof SsmaPermissionTagMember) {
956|                continue;
957|            }
958|            $tag = $link->getTag();
959|            if ($tag->getCompany()->getId() !== $company->getId()) {
960|                continue;
961|            }
962|            if (in_array($tag->getName(), $managementTagNames, true)) {
963|                return true;
964|            }
965|        }
966|
967|        $causeTreeProduct = $this->em->getRepository(Product::class)->findOneBy(['slug' => 'ssma-cause-tree']);
968|        if ($causeTreeProduct) {
969|            $ptbm = $this->em->getRepository(PermissionTagByMember::class)->findOneBy([
970|                'companyMemberID' => $companyMember->getId(),
971|                'productID'       => $causeTreeProduct->getId(),
972|            ]);
973|            if ($ptbm) {
974|                $permTag = $this->em->getRepository(PermissionTag::class)->find($ptbm->getTagID());
975|                if ($permTag && in_array($permTag->getName(), $managementTagNames, true)) {
976|                    return true;
977|                }
978|            }
979|        }
980|
981|        return false;
982|    }
983|
984|    /**
985|     * Controla a visibilidade do item "Autorizações" na sidebar.
986|     * Usa SsmaPermissionTagMember (mesma tabela de canAccessSsmaCauseTreeNavigation) para
987|     * não ser afetado pelo clone automático de PermissionTagByMember via cloneSsmaParentPermissions.
988|     * Apenas gestores/supervisores SSMA e admins veem este item.
989|     */
990|    public function canAccessSsmaAuthorizationNavigation(): bool
991|    {
992|        $user = $this->security->getUser();
993|        if (!$user instanceof User) {
994|            return false;
995|        }
996|
997|        $roles = $user->getRoles();
998|        if (
999|            in_array('ROLE_SUPER_ADMIN', $roles, true)
1000|            || in_array('ROLE_MANAGER', $roles, true)
1001|            || in_array('ROLE_MANAGER_GESTOR', $roles, true)
1002|        ) {
1003|            return true;
1004|        }
1005|
1006|        if (!in_array('ROLE_USER', $roles, true)) {
1007|            return false;
1008|        }
1009|
1010|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
1011|        if (!$company) {
1012|            return false;
1013|        }
1014|
1015|        $companyMember = $this->getCompanyMember($user, $company);
1016|        if (!$companyMember instanceof CompanyMembers) {
1017|            return false;
1018|        }
1019|
1020|        $managementTagNames = ['Supervisor de Equipe', 'Supervisor', 'Gestor de Equipe', 'Gestor Administrador'];
1021|
1022|        // Verificação via SsmaPermissionTagMember (sistema SSMA específico)
1023|        $links = $this->em
1024|            ->getRepository(SsmaPermissionTagMember::class)
1025|            ->findBy(['companyMember' => $companyMember]);
1026|        foreach ($links as $link) {
1027|            if (!$link instanceof SsmaPermissionTagMember) {
1028|                continue;
1029|            }
1030|            $tag = $link->getTag();
1031|            if ($tag->getCompany()->getId() !== $company->getId()) {
1032|                continue;
1033|            }
1034|            if (in_array($tag->getName(), $managementTagNames, true)) {
1035|                return true;
1036|            }
1037|        }
1038|
1039|        // Fallback: verificação via PermissionTagByMember para o produto ssma-authorization.
1040|        // Necessário quando o membro tem a tag de gestão no sistema padrão de produtos
1041|        // (PermissionTagByMember) mas ainda não tem entrada em SsmaPermissionTagMember.
1042|        $authProduct = $this->em->getRepository(Product::class)->findOneBy(['slug' => 'ssma-authorization']);
1043|        if ($authProduct) {
1044|            $ptbm = $this->em->getRepository(PermissionTagByMember::class)->findOneBy([
1045|                'companyMemberID' => $companyMember->getId(),
1046|                'productID'       => $authProduct->getId(),
1047|            ]);
1048|            if ($ptbm) {
1049|                $permTag = $this->em->getRepository(PermissionTag::class)->find($ptbm->getTagID());
1050|                if ($permTag && in_array($permTag->getName(), $managementTagNames, true)) {
1051|                    return true;
1052|                }
1053|            }
1054|        }
1055|
1056|        return false;
1057|    }
1058|
1059|    /**
1060|     * Tag SSMA de pessoa física comum (Membro/Inspetor), mesmo se o user tiver ROLE_MANAGER
1061|     * de plataforma. Fluxograma Brenda: cadastro/registro ≠ nível ampliado no Hub de Maturidade.
1062|     */
1063|    public function isSsmaPlainProductMember(): bool
1064|    {
1065|        $user = $this->security->getUser();
1066|        if (!$user instanceof User || !in_array('ROLE_USER', $user->getRoles(), true)) {
1067|            return false;
1068|        }
1069|
1070|        $company = $this->getCompanyFromRequest($user) ?? $user->getCompany();
1071|        if (!$company instanceof Company) {
1072|            return false;
1073|        }
1074|
1075|        $companyMember = $this->getCompanyMember($user, $company);
1076|        if (!$companyMember instanceof CompanyMembers) {
1077|            return false;
1078|        }
1079|
1080|        $managementTagNames = $this->getSsmaManagementTagNames();
1081|        $plainTagNames = ['Membro', 'Inspetor', 'Membro (default)'];
1082|
1083|        // Tag de gestão em SsmaPermissionTagMember ⇒ não é pessoa física comum.
1084|        $links = $this->em
1085|            ->getRepository(SsmaPermissionTagMember::class)
1086|            ->findBy(['companyMember' => $companyMember]);
1087|        foreach ($links as $link) {
1088|            if (!$link instanceof SsmaPermissionTagMember) {
1089|                continue;
1090|            }
1091|            $tag = $link->getTag();
1092|            if ($tag->getCompany()->getId() !== $company->getId()) {
1093|                continue;
1094|            }
1095|            if (in_array((string) $tag->getName(), $managementTagNames, true)) {
1096|                return false;
1097|            }
1098|        }
1099|
1100|        // Gestor/Supervisor no card "Módulo de Segurança" (modulo-seguranca) ou em outro
1101|        // produto SSMA explícito ganha da tag global/Membro em ocorrências.
1102|        if ($this->memberHasExplicitSsmaManagementProductTag($companyMember)) {
1103|            return false;
1104|        }
1105|
1106|        foreach (['ssma-occurrences', $this->ssmaParentProductSlug, 'modulo-seguranca'] as $slug) {
1107|            $productTag = $this->getProductPermission($user, $slug);
1108|            if (!$productTag instanceof PermissionTag) {
1109|                continue;
1110|            }
1111|            $name = (string) $productTag->getName();
1112|            if (in_array($name, $managementTagNames, true)) {
1113|                return false;
1114|            }
1115|            if (in_array($name, $plainTagNames, true)) {
1116|                return true;
1117|            }
1118|        }
1119|
1120|        $global = $companyMember->getGlobalPermissionTag();
1121|        if ($global instanceof PermissionTag) {
1122|            $gName = (string) $global->getName();
1123|            if (in_array($gName, $managementTagNames, true)) {
1124|                return false;
1125|            }
1126|            if (in_array($gName, $plainTagNames, true)) {
1127|                return true;
1128|            }
1129|        }
1130|
1131|        return false;
1132|    }
1133|
1134|    /**
1135|     * Hub de Maturidade / Módulo de Segurança (visão ampliada): Supervisor, Gestor ou Admin.
1136|     * Tag Membro/Inspetor bloqueia mesmo com ROLE_MANAGER de plataforma (caso Palloma).
1137|     */
1138|    public function canAccessSsmaExpandedMaturityMenu(): bool
1139|    {
1140|        if ($this->isSsmaPlainProductMember()) {
1141|            return false;
1142|        }
1143|
1144|        $user = $this->security->getUser();
1145|        if (!$user instanceof User) {
1146|            return false;
1147|        }
1148|
1149|        $roles = $user->getRoles();
1150|        if (
1151|            in_array('ROLE_SUPER_ADMIN', $roles, true)
1152|            || in_array('ROLE_MANAGER', $roles, true)
1153|            || in_array('ROLE_MANAGER_GESTOR', $roles, true)
1154|            || in_array('ROLE_MANAGER_VIEWER', $roles, true)
1155|        ) {
1156|            return true;
1157|        }
1158|
1159|        $managementTagNames = $this->getSsmaManagementTagNames();
1160|        foreach ($this->getSsmaManagementMenuProductSlugs() as $slug) {
1161|            $productTag = $this->getProductPermission($user, $slug);
1162|            if ($productTag instanceof PermissionTag && in_array((string) $productTag->getName(), $managementTagNames, true)) {
1163|                return true;
1164|            }
1165|        }
1166|
1167|        return $this->canAccessSsmaCauseTreeNavigation()
1168|            || $this->canAccessSsmaAuthorizationNavigation();
1169|    }
1170|
1171|    /**
1172|     * Member self-service pendencies page (authorization requirements).
1173|     * Visible only for Membro profile without SSMA authorization supervisor access,
1174|     * and only while there is at least one open pendency.
1175|     */
1176|    public function canAccessMemberGovernancePendencies(): bool
1177|    {
1178|        return $this->memberGovernancePendenciesCount() > 0;
1179|    }
1180|
1181|    public function memberGovernancePendenciesCount(): int
1182|    {
1183|        $context = $this->resolveMemberGovernancePendenciesContext();
1184|        if ($context === null) {
1185|            return 0;
1186|        }
1187|
1188|        if ($this->memberPendenciesService === null) {
1189|            return 0;
1190|        }
1191|
1192|        return $this->memberPendenciesService->countForMember($context['member'], $context['company']);
1193|    }
1194|
1195|    /**
1196|     * @return array{member: CompanyMembers, company: Company}|null
1197|     */
1198|    private function resolveMemberGovernancePendenciesContext(): ?array
1199|    {
1200|        if ($this->canAccessSsmaAuthorizationNavigation()) {

{"search_text": "ssma_action_modal_partial"}

File: config/routes_ssma.yaml
Match lines: 1
200|ssma_action_modal_partial:

File: docs/ssma/PRODUTO_SSMA_MAPA_COMPLETO.md
Match lines: 1
408|1. **Nova ação** → modal `_modal_action.html.twig` (ou partial `ssma_action_modal_partial`).

File: templates/projects2.0/components/modal_create_project.html.twig
Match lines: 2
888|												var partialUrl = {{ path('ssma_action_modal_partial')|json_encode|raw }};
908|											var ssmaActionModalPartialUrl = {{ path('ssma_action_modal_partial')|json_encode|raw }};

{"file_path": "templates/ssma/prevention/inspection/index.html.twig", "start_line": 1, "end_line": 60}

File: templates/ssma/prevention/inspection/index.html.twig (Total lines: 986)
IS_TRUNCATED: false
LINE_RANGE: 1-60
1|{% extends user_uses_admin_hub_shell() ? 'layoutAdmin.html.twig' : 'layoutUser.html.twig' %}
2|
3|{# KPI dos cards: pills por frequência (usa apenas classes occ-tag-pill já estilizadas nesta página). #}
4|{% macro insp_kpi_classifications(rows, chip_labels, max_visible, tone) %}
5|    {% set max_vis = max_visible|default(3) %}
6|    {% set tone = tone|default('deviations') %}
7|    {% set counts = {} %}
8|    {% set first_seen = {} %}
9|    {% set seq = 0 %}
10|    {% for row in rows|default([]) %}
11|        {% for cls in row.classification|default([]) %}
12|            {% set counts = counts|merge({(cls): (counts[cls]|default(0) + 1)}) %}
13|            {% if first_seen[cls] is not defined %}
14|                {% set first_seen = first_seen|merge({(cls): seq}) %}
15|            {% endif %}
16|            {% set seq = seq + 1 %}
17|        {% endfor %}
18|    {% endfor %}
19|    {% set pairs = [] %}
20|    {% for cls, cnt in counts %}
21|        {% set pairs = pairs|merge([[cnt, cls, first_seen[cls]|default(999)]]) %}
22|    {% endfor %}
23|    {% set pairs = pairs|sort((a, b) => a[0] == b[0] ? (a[2] <=> b[2]) : (b[0] <=> a[0])) %}
24|    <div class="d-flex flex-wrap" style="gap:4px;">
25|        {% if pairs|length > 0 %}
26|            {% for pair in pairs|slice(0, max_vis) %}
27|                <span class="occ-tag-pill" title="{{ chip_labels[pair[1]]|default(pair[1]) }}">
28|                    <span>{{ chip_labels[pair[1]]|default(pair[1]) }}</span>
29|                </span>
30|            {% endfor %}
31|            {% if pairs|length > max_vis %}
32|                <span class="occ-tag-pill occ-tag-pill--muted" title="{{ (pairs|length - max_vis) }} outro(s) motivo(s)">
33|                    <span>+{{ pairs|length - max_vis }}</span>
34|                </span>
35|            {% endif %}
36|        {% elseif tone == 'strengths' and rows|length > 0 %}
37|            <span class="occ-tag-pill occ-tag-pill--positive">
38|                <span>Positivo</span>
39|            </span>
40|        {% elseif tone == 'strengths' %}
41|            <span class="text-muted small">Sem destaques</span>
42|        {% else %}
43|            <span class="text-muted small">Sem classificação</span>
44|        {% endif %}
45|    </div>
46|{% endmacro %}
47|
48|{% block headercss %}
49|    {{ parent() }}
50|    <style>
51|
52|        /* ── NC detail fields (visualização) ── */
53|        .insp-nc-field-label { font-size: 11px; letter-spacing: 0.02em; }
54|        .insp-nc-field-value { font-weight: 600; color: #212529; }
55|        .insp-nc-collapse-head { cursor: pointer; user-select: none; }
56|        .insp-nc-collapse-head .insp-nc-title-wrap { min-width: 0; }
57|
58|        /* ── Collapsible card chevron ── */
59|        .insp-dev-chevron {
60|            font-size: 12px;

{"search_text": "loadActionsForExecutiveReport|getSsmaCombinedAreaMemberIds"}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "loadActionsForExecutiveReport"}

File: src/Controller/SsmaController.php
Match lines: 6
4619|            return count($this->loadActionsForExecutiveReport($company, $pf, $pt));
4631|        $curActions  = $this->loadActionsForExecutiveReport($company, $fromStr, $toStr);
4632|        $prevActions = $this->loadActionsForExecutiveReport($company, $prevFromStr, $prevToStr);
4683|            $cur  = $this->loadActionsForExecutiveReport($sub, $fromStr, $toStr);
4684|            $prev = $this->loadActionsForExecutiveReport($sub, $prevFromStr, $prevToStr);
4699|    private function loadActionsForExecutiveReport(Company $company, ?string $fromStr, string $toStr): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 4590, "end_line": 4655}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 4590-4655
4590|        $builder = new SsmaActionPlanExecutiveReportBuilder();
4591|        $company = $this->getSsmaCompany();
4592|
4593|        if (!$company) {
4594|            $empty = $builder->build(
4595|                null,
4596|                $this->generateUrl('ssma_plano_acao_index'),
4597|                new \DateTimeImmutable('today'),
4598|                new \DateTimeImmutable('today'),
4599|                new \DateTimeImmutable('today'),
4600|                new \DateTimeImmutable('today'),
4601|                SsmaPanelComparisonPeriodResolver::BASIS_YEAR_AGO,
4602|                [],
4603|                [],
4604|                [],
4605|            );
4606|            $empty['units_comparison'] = $builder->emptyUnitsComparison('no_company');
4607|
4608|            return $empty;
4609|        }
4610|
4611|        $request   = $this->requestStack->getCurrentRequest();
4612|        $periodStr = $request ? (string) $request->query->get('meta_period', 'last_month') : 'last_month';
4613|
4614|        [$fromStr, $toStr] = $this->getPrevencaoPeriodDateBounds($periodStr);
4615|        $from = new \DateTimeImmutable($fromStr ?? '2000-01-01');
4616|        $to   = new \DateTimeImmutable($toStr);
4617|
4618|        $countInPeriod = function (?string $pf, string $pt) use ($company): int {
4619|            return count($this->loadActionsForExecutiveReport($company, $pf, $pt));
4620|        };
4621|
4622|        [$prevFromStr, $prevToStr, $comparisonBasis] = $this->ssmaComparisonPeriodResolver->resolveYmd(
4623|            $fromStr ?? $from->format('Y-m-d'),
4624|            $toStr,
4625|            $countInPeriod
4626|        );
4627|        $prevFrom = new \DateTimeImmutable($prevFromStr);
4628|        $prevTo   = new \DateTimeImmutable($prevToStr);
4629|
4630|        $typeLabels  = array_column($this->getActionTypeMetadata(), 'label', 'value');
4631|        $curActions  = $this->loadActionsForExecutiveReport($company, $fromStr, $toStr);
4632|        $prevActions = $this->loadActionsForExecutiveReport($company, $prevFromStr, $prevToStr);
4633|
4634|        $report = $builder->build(
4635|            $company,
4636|            $this->generateUrl('ssma_plano_acao_index'),
4637|            $from,
4638|            $to,
4639|            $prevFrom,
4640|            $prevTo,
4641|            $comparisonBasis,
4642|            $curActions,
4643|            $prevActions,
4644|            $typeLabels,
4645|        );
4646|
4647|        $report['units_comparison'] = $this->buildActionPlanExecutiveReportUnitsComparison(
4648|            $company,
4649|            $fromStr,
4650|            $toStr,
4651|            $prevFromStr,
4652|            $prevToStr,
4653|            $typeLabels,
4654|        );
4655|

{"file_path": "src/Controller/SsmaController.php", "end_line": 24440, "start_line": 24340}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 24340-24440
24340|
24341|        if (!$this->canMutatePreventionContentForCurrentUser($company, $user, 'abordagem')) {
24342|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para registrar ou alterar abordagens.'], 403);
24343|        }
24344|
24345|        $this->ensureSsmaPerformanceSchema();
24346|
24347|        $data = json_decode($request->getContent(), true) ?? [];
24348|
24349|        $erros = $this->validarPayloadAbordagem($data);
24350|        if ($erros) {
24351|            return new JsonResponse(['success' => false, 'message' => implode(' ', $erros)], 422);
24352|        }
24353|
24354|        // Buscar ou criar
24355|        if ($id !== null) {
24356|            $abordagem = $this->entityManager->getRepository(SsmaAbordagem::class)->find($id);
24357|            if (!$abordagem || $abordagem->getCompany()->getId() !== $company->getId()) {
24358|                return new JsonResponse(['success' => false, 'message' => 'Abordagem não encontrada.'], 404);
24359|            }
24360|            if (!$this->canMutateExistingAbordagem($abordagem, $company, $user)) {
24361|                return new JsonResponse(['success' => false, 'message' => 'Sem permissão para alterar esta abordagem.'], 403);
24362|            }
24363|            if ($abordagem->isFinalizada()) {
24364|                return new JsonResponse(['success' => false, 'message' => 'Abordagens finalizadas não podem ser editadas.'], 422);
24365|            }
24366|            $abordagem->setAtualizadoPorId($user->getId());
24367|        } else {
24368|            $abordagem = new SsmaAbordagem();
24369|            $abordagem->setCompany($company);
24370|            $abordagem->setCriadoPorId($user->getId());
24371|            $abordagem->setAtualizadoPorId($user->getId());
24372|        }
24373|
24374|        // Observador, colaboradores observados, coach e responsável da medida: todos validados
24375|        // contra a empresa da sessão e o recorte de área antes de qualquer escrita.
24376|        $areaScopeErr = $this->ssmaPreventionAreaAuthorization->validateAbordagemPayload(
24377|            $this->getSsmaPreventionAreaScope($company, $user),
24378|            $company,
24379|            $data
24380|        );
24381|        if ($areaScopeErr !== null) {
24382|            return new JsonResponse(['success' => false, 'message' => $areaScopeErr], 403);
24383|        }
24384|
24385|        $abordagem->setTitulo(trim((string) ($data['titulo'] ?? '')) ?: null);
24386|        $abordagem->setObservadorNome(trim((string) ($data['observador_nome'] ?? '')));
24387|        $abordagem->setObservadorId(isset($data['observador_id']) ? (int) $data['observador_id'] : null);
24388|        $abordagem->setEmpresaObservador(null);
24389|        $abordagem->setGerencia('');
24390|        $dataStr = trim((string) ($data['data'] ?? ''));
24391|        if ($dataStr !== '') {
24392|            $abordagem->setData(new \DateTimeImmutable($dataStr));
24393|        } elseif ($id === null) {
24394|            $abordagem->setData(new \DateTimeImmutable('today'));
24395|        }
24396|        $abordagem->setLocal(trim((string) ($data['local'] ?? '')));
24397|        $abordagem->setGmr(trim((string) ($data['gmr'] ?? '')));
24398|        $abordagem->setQtdPessoasObservadas((int) ($data['qtd_pessoas_observadas'] ?? 0));
24399|        $abordagem->setTempoAbordagemMin((int) ($data['tempo_abordagem_min'] ?? 0));
24400|
24401|        // Persiste IDs dos colaboradores observados (enviados pelo tag-select do offcanvas)
24402|        $rawColabIds = $data['colaboradores_ids'] ?? [];
24403|        if (is_string($rawColabIds)) {
24404|            $decoded = json_decode($rawColabIds, true);
24405|            $rawColabIds = is_array($decoded) ? $decoded : [];
24406|        }
24407|        $colaboradoresIds = array_values(array_filter(array_map('intval', (array) $rawColabIds)));
24408|        $preserveColaboradores = !empty($data['preserve_colaboradores_ids']);
24409|        if ($preserveColaboradores && $colaboradoresIds === [] && $id !== null) {
24410|            // UI sem seleção de colaboradores: mantém vínculos já gravados na edição.
24411|        } else {
24412|            $abordagem->setColaboradoresIds($colaboradoresIds);
24413|        }
24414|        $turno = trim((string) ($data['turno'] ?? ''));
24415|        $abordagem->setTurno($turno !== '' ? $turno : null);
24416|
24417|        $abordagem->setTipoAtividade(trim((string) ($data['tipo_atividade'] ?? '')));
24418|        $abordagem->setTipoAbordagem(trim((string) ($data['tipo_abordagem'] ?? '')));
24419|        $abordagem->setTempoCasa(trim((string) ($data['tempo_casa'] ?? '')) ?: null);
24420|        // coaching: true/false respondido; null = ainda não respondido (rascunho — não sobrescreve).
24421|        $coachingWasEnabled = $abordagem->isCoaching();
24422|        if (array_key_exists('coaching', $data) && $data['coaching'] !== null) {
24423|            $coaching = (bool) $data['coaching'];
24424|            $abordagem->setCoaching($coaching);
24425|            if ($coaching) {
24426|                $coachMemberId = isset($data['coach_member_id']) ? (int) $data['coach_member_id'] : 0;
24427|                $observadorId  = isset($data['observador_id']) ? (int) $data['observador_id'] : 0;
24428|                if ($coachMemberId > 0 && $observadorId > 0 && $coachMemberId === $observadorId) {
24429|                    return new JsonResponse(['success' => false, 'message' => 'O coach não pode ser o mesmo membro selecionado como observador.'], 422);
24430|                }
24431|                $coachMember = $coachMemberId > 0
24432|                    ? $this->entityManager->getRepository(CompanyMembers::class)->find($coachMemberId)
24433|                    : null;
24434|                $coachName = trim((string) ($data['coach'] ?? ''));
24435|                if ($coachMember instanceof CompanyMembers) {
24436|                    $coachName = $this->ssmaMemberDisplayLabel($coachMember) ?: $coachName;
24437|                    $abordagem->setCoachMemberId($coachMemberId);
24438|                } else {
24439|                    $abordagem->setCoachMemberId(null);
24440|                }

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function applyInspectionData"}

File: src/Controller/SsmaController.php
Match lines: 1
16335|    private function applyInspectionData(SsmaInspection $inspection, array $data): array

{"file_path": "src/Controller/SsmaController.php", "end_line": 16680, "start_line": 16335}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 16335-16680
16335|    private function applyInspectionData(SsmaInspection $inspection, array $data): array
16336|    {
16337|        $executorNotifications = [];
16338|        // TODO: Centralize any future inspection business rules here when the final back-end model is ready.
16339|        $inspection->setTitle(!empty($data['title']) ? trim((string) $data['title']) : null);
16340|        $inspection->setInspectionDate(new \DateTime((string) $data['inspection_date']));
16341|        $inspection->setObservations($data['observations'] ?? null);
16342|        $participantIds = array_values(array_filter(array_map('intval', (array) ($data['participants_ids'] ?? []))));
16343|        $companionIds = array_values(array_filter(array_map('intval', (array) ($data['companion_ids'] ?? []))));
16344|        $inspection->setParticipantsIds($participantIds);
16345|        $inspection->setCompanionIds($companionIds);
16346|        $companionNotes = isset($data['companion_notes']) ? trim((string) $data['companion_notes']) : null;
16347|        $inspection->setCompanionNotes($companionNotes !== '' ? $companionNotes : null);
16348|        $location = isset($data['location']) ? trim((string) $data['location']) : null;
16349|        $inspection->setLocation($location !== '' ? $location : null);
16350|        $inspectionType = isset($data['inspection_type']) ? trim((string) $data['inspection_type']) : null;
16351|        $inspection->setType($inspectionType !== '' ? $inspectionType : null);
16352|        $responsibleId = !empty($data['safety_responsible_id']) ? (int) $data['safety_responsible_id'] : null;
16353|        $teamId = !empty($data['team_id']) ? (int) $data['team_id'] : null;
16354|
16355|        if ($responsibleId === null && $participantIds !== []) {
16356|            $responsibleId = $participantIds[0];
16357|        }
16358|        if ($responsibleId === null && $companionIds !== []) {
16359|            $responsibleId = $companionIds[0];
16360|        }
16361|
16362|        $responsibleMember = null;
16363|        if ($responsibleId !== null && $responsibleId > 0) {
16364|            $responsibleMember = $this->entityManager->find(CompanyMembers::class, $responsibleId);
16365|        }
16366|
16367|        if ($teamId === null && $responsibleMember instanceof CompanyMembers) {
16368|            $memberTeamIds = $this->parseCompanyMemberTeamIds($responsibleMember);
16369|            if ($memberTeamIds !== []) {
16370|                $teamId = (int) $memberTeamIds[0];
16371|            }
16372|        }
16373|
16374|        $inspection->setSafetyResponsible(null);
16375|        $inspection->setTeam(null);
16376|
16377|        if ($responsibleMember instanceof CompanyMembers) {
16378|            $inspection->setSafetyResponsible($responsibleMember);
16379|        }
16380|
16381|        if ($teamId !== null && $teamId > 0) {
16382|            $team = $this->entityManager->find(CompanyTeam::class, $teamId);
16383|            $inspection->setTeam($team);
16384|        }
16385|
16386|        // TODO: Replace this full reset strategy if the final back-end requires diff-based child updates.
16387|        foreach ($inspection->getDeviations()->toArray() as $deviation) {
16388|            $inspection->getDeviations()->removeElement($deviation);
16389|            $this->entityManager->remove($deviation);
16390|        }
16391|
16392|        $primaryInspectionGmr = null;
16393|        foreach ((array) ($data['deviations'] ?? []) as $dev) {
16394|            $deviation = new SsmaInspectionDeviation();
16395|            $deviation->setTitle((string) ($dev['title'] ?? ''));
16396|            $deviation->setCorrectiveAction($dev['corrective_action'] ?? null);
16397|            $deviation->setEvidenceNames((array) ($dev['evidence_names'] ?? []));
16398|            $deviation->setDeviationType(!empty($dev['deviation_type']) ? (string) $dev['deviation_type'] : null);
16399|            $deviation->setLocationLabel(!empty($dev['location_label']) ? (string) $dev['location_label'] : null);
16400|            $deviation->setSituation(null);
16401|            $deviation->setClassification(!empty($dev['classification']) ? (array) $dev['classification'] : null);
16402|            $deviation->setProbableCause(!empty($dev['probable_cause']) ? (array) $dev['probable_cause'] : null);
16403|            $deviation->setCriticality(!empty($dev['criticidade']) ? (string) $dev['criticidade'] : null);
16404|            $devGmr = !empty($dev['gmr']) ? trim((string) $dev['gmr']) : null;
16405|            $deviation->setGmr($devGmr !== '' ? $devGmr : null);
16406|            if ($primaryInspectionGmr === null && $devGmr !== null && $devGmr !== '') {
16407|                $primaryInspectionGmr = $devGmr;
16408|            }
16409|
16410|            if (!empty($dev['start_date'])) {
16411|                $deviation->setStartDate(new \DateTime($dev['start_date']));
16412|            }
16413|            if (!empty($dev['end_date'])) {
16414|                $deviation->setEndDate(new \DateTime($dev['end_date']));
16415|            }
16416|            if (!empty($dev['responsible_id'])) {
16417|                $resp = $this->entityManager->find(CompanyMembers::class, (int) $dev['responsible_id']);
16418|                $deviation->setResponsible($resp);
16419|            }
16420|
16421|            $correctiveActionsRaw = is_array($dev['corrective_actions'] ?? null) ? $dev['corrective_actions'] : [];
16422|            $correctiveActions = $this->normalizeSsmaCorrectiveActions($correctiveActionsRaw);
16423|            foreach ($correctiveActions as $i => $ca) {
16424|                if (isset($correctiveActionsRaw[$i]['action_id']) && $correctiveActionsRaw[$i]['action_id'] !== '') {
16425|                    $correctiveActions[$i]['action_id'] = (int) $correctiveActionsRaw[$i]['action_id'];
16426|                }
16427|            }
16428|
16429|            // Legado: campo único "Ação Corretiva" + visto/prazo/responsável (inspeções antigas).
16430|            if ($correctiveActions === []) {
16431|                $legacyDesc = trim((string) ($dev['corrective_action'] ?? ''));
16432|                $legacyVisto = !empty($dev['visto_resolvido']) && $dev['visto_resolvido'] !== false;
16433|                $legacyDeadline = trim((string) ($dev['action_deadline'] ?? ''));
16434|                $legacyResp = isset($dev['action_responsible_id']) && $dev['action_responsible_id'] !== ''
16435|                    ? (int) $dev['action_responsible_id']
16436|                    : null;
16437|                $legacyHierarchy = trim((string) ($dev['action_hierarchy'] ?? ''));
16438|                $legacyActionId = !empty($dev['action_id']) ? (int) $dev['action_id'] : null;
16439|                if ($legacyDesc !== '' || $legacyVisto || $legacyDeadline !== '' || $legacyResp || $legacyHierarchy !== '' || $legacyActionId) {
16440|                    $correctiveActions = [[
16441|                        'description' => $legacyDesc,
16442|                        'resolved' => $legacyVisto ? 1 : 0,
16443|                        'deadline' => $legacyVisto ? null : ($legacyDeadline !== '' ? $legacyDeadline : null),
16444|                        'responsible_id' => $legacyResp,
16445|                        'validator_id' => null,
16446|                        'hierarchy' => $legacyHierarchy !== '' ? $legacyHierarchy : null,
16447|                        'action_id' => $legacyActionId,
16448|                    ]];
16449|                }
16450|            }
16451|
16452|            $priorityMap = [
16453|                'LEVE' => 'baixa', 'BAIXO' => 'baixa',
16454|                'MEDIO' => 'media', 'MODERADO' => 'media',
16455|                'ALTO' => 'alta', 'SEVERO' => 'alta', 'CRITICO' => 'alta',
16456|                'BAIXA' => 'baixa', 'MEDIA' => 'media', 'ALTA' => 'alta', 'CRITICA' => 'alta',
16457|            ];
16458|            $criticality = strtoupper((string) ($dev['criticidade'] ?? ''));
16459|            $firstDescription = '';
16460|            $allResolved = true;
16461|            $primaryAction = null;
16462|
16463|            foreach ($correctiveActions as $idx => $ca) {
16464|                $resolved = !empty($ca['resolved']) && $ca['resolved'] !== '0' && $ca['resolved'] !== false;
16465|                if (!$resolved) {
16466|                    $allResolved = false;
16467|                }
16468|                $description = trim((string) ($ca['description'] ?? ''));
16469|                if ($idx === 0) {
16470|                    $firstDescription = $description;
16471|                }
16472|
16473|                $actionTitle = $description !== '' ? $description : (trim((string) ($dev['title'] ?? '')) ?: 'Ação preventiva');
16474|                $existingActionId = !empty($ca['action_id']) ? (int) $ca['action_id'] : null;
16475|                if ($existingActionId === null && $idx === 0 && !empty($dev['action_id'])) {
16476|                    $existingActionId = (int) $dev['action_id'];
16477|                }
16478|
16479|                $action = $existingActionId
16480|                    ? $this->entityManager->find(SsmaAction::class, $existingActionId)
16481|                    : null;
16482|                if (!$action) {
16483|                    $action = new SsmaAction();
16484|                    $action->setCompany($inspection->getCompany());
16485|                }
16486|
16487|                $action->setTitle($actionTitle);
16488|                $action->setDescription($description !== '' ? $description : null);
16489|                $action->setType('preventiva');
16490|                $action->setProjectPriority($priorityMap[$criticality] ?? null);
16491|                $action->setSolved($resolved);
16492|                $action->setOrigem(ActionOrigemEnum::INSPECAO);
16493|
16494|                if ($resolved) {
16495|                    $action->setDeadline(new \DateTime());
16496|                } elseif (!empty($ca['deadline'])) {
16497|                    try {
16498|                        $requestedDeadline = new \DateTime((string) $ca['deadline']);
16499|                        $currentUser = $this->getUser();
16500|                        if ($currentUser instanceof User) {
16501|                            $this->applySsmaActionDeadlineChange(
16502|                                $action,
16503|                                $requestedDeadline,
16504|                                $inspection->getCompany(),
16505|                                $currentUser
16506|                            );
16507|                        } else {
16508|                            $action->setDeadline($requestedDeadline);
16509|                        }
16510|                    } catch (\InvalidArgumentException $e) {
16511|                        throw $e;
16512|                    } catch (\Throwable $e) {
16513|                        $action->setDeadline(null);
16514|                    }
16515|                } else {
16516|                    $action->setDeadline(null);
16517|                }
16518|
16519|                $action->setControlHierarchy(!empty($ca['hierarchy']) ? (string) $ca['hierarchy'] : null);
16520|                $previousResponsibleIds = array_map('intval', $action->getResponsibleIds() ?? []);
16521|                $respId = isset($ca['responsible_id']) && $ca['responsible_id'] ? (int) $ca['responsible_id'] : null;
16522|                $action->setResponsibleIds($respId ? [$respId] : []);
16523|                $validatorId = isset($ca['validator_id']) && $ca['validator_id'] ? (int) $ca['validator_id'] : null;
16524|                $action->setValidatorMemberId($validatorId);
16525|
16526|                $action->setDeviation($deviation);
16527|                $this->entityManager->persist($action);
16528|
16529|                $addedExecutorIds = array_values(array_diff(
16530|                    $respId ? [$respId] : [],
16531|                    $previousResponsibleIds
16532|                ));
16533|                if ($addedExecutorIds !== []) {
16534|                    $executorNotifications[] = [
16535|                        'action' => $action,
16536|                        'memberIds' => $addedExecutorIds,
16537|                    ];
16538|                }
16539|
16540|                if ($idx === 0) {
16541|                    $primaryAction = $action;
16542|                }
16543|            }
16544|
16545|            $deviation->setCorrectiveAction($firstDescription !== '' ? $firstDescription : null);
16546|            $deviation->setVistoResolvido($correctiveActions !== [] && $allResolved);
16547|            if ($primaryAction !== null) {
16548|                $deviation->setAction($primaryAction);
16549|            }
16550|
16551|            $inspection->addDeviation($deviation);
16552|        }
16553|
16554|        // Compat: relatórios/listagens ainda leem GMR na inspeção — espelha o 1º desvio com GMR.
16555|        $inspection->setGmr($primaryInspectionGmr);
16556|
16557|        foreach ($inspection->getStrengths()->toArray() as $strength) {
16558|            $inspection->getStrengths()->removeElement($strength);
16559|            $this->entityManager->remove($strength);
16560|        }
16561|
16562|        foreach ((array) ($data['strengths'] ?? []) as $str) {
16563|            $strength = new SsmaInspectionStrength();
16564|            $strength->setDescription((string) ($str['description'] ?? ''));
16565|            $strength->setEvidenceNames((array) ($str['evidence_names'] ?? []));
16566|            $inspection->addStrength($strength);
16567|        }
16568|
16569|        return $executorNotifications;
16570|    }
16571|
16572|    private function serializeInspection(
16573|        SsmaInspection $inspection,
16574|        array $membersById = [],
16575|        int $deviationsCount = -1,
16576|        int $strengthsCount = -1,
16577|        ?string $deviationGmrFallback = null,
16578|        ?string $managementOfResponsible = null,
16579|    ): array
16580|    {
16581|        $responsible = $inspection->getSafetyResponsible();
16582|        $participantIds = $inspection->getParticipantsIds();
16583|        $responsibleName = '';
16584|        if ($responsible instanceof CompanyMembers) {
16585|            $responsibleName = $this->ssmaMemberDisplayLabel($responsible);
16586|            if ($responsibleName === '') {
16587|                $responsibleName = (string) ($membersById[$responsible->getId()]['name'] ?? '');
16588|            }
16589|        }
16590|        if ($responsibleName === '') {
16591|            $responsibleName = '—';
16592|        }
16593|        if ($managementOfResponsible === null && $responsible instanceof CompanyMembers) {
16594|            $managementOfResponsible = $this->ssmaMemberOrganizationalManagementResolver
16595|                ->resolveForMembers($inspection->getCompany(), [$responsible])[$responsible->getId()] ?? '';
16596|        }
16597|
16598|        $teamName = trim((string) ($inspection->getTeam()?->getName() ?? ''));
16599|        if ($teamName === '' && $responsible instanceof CompanyMembers) {
16600|            $memberTeamIds = $this->parseCompanyMemberTeamIds($responsible);
16601|            if ($memberTeamIds !== []) {
16602|                $fallbackTeam = $this->entityManager->find(CompanyTeam::class, (int) $memberTeamIds[0]);
16603|                $teamName = trim((string) ($fallbackTeam?->getName() ?? ''));
16604|            }
16605|        }
16606|        if ($teamName === '' && $participantIds !== []) {
16607|            $participantMember = $this->entityManager->find(CompanyMembers::class, (int) $participantIds[0]);
16608|            if ($participantMember instanceof CompanyMembers) {
16609|                $memberTeamIds = $this->parseCompanyMemberTeamIds($participantMember);
16610|                if ($memberTeamIds !== []) {
16611|                    $fallbackTeam = $this->entityManager->find(CompanyTeam::class, (int) $memberTeamIds[0]);
16612|                    $teamName = trim((string) ($fallbackTeam?->getName() ?? ''));
16613|                }
16614|            }
16615|        }
16616|        if ($teamName === '') {
16617|            $teamName = '—';
16618|        }
16619|
16620|        $title = $inspection->getTitle();
16621|        if ($title === null || trim($title) === '') {
16622|            $title = 'Inspeção ' . $inspection->getInspectionDate()->format('d/m/Y');
16623|        }
16624|
16625|        $participantNames = array_values(array_filter(array_map(
16626|            static fn ($pid) => $membersById[$pid]['name'] ?? null,
16627|            $participantIds
16628|        )));
16629|
16630|        $statusValue = $inspection->getStatus() ?? 'aberta';
16631|
16632|        $companionIds = $inspection->getCompanionIds();
16633|        $companionNames = array_values(array_filter(array_map(
16634|            static fn ($cid) => $membersById[$cid]['name'] ?? null,
16635|            $companionIds
16636|        )));
16637|
16638|        $gmr = trim((string) ($inspection->getGmr() ?? ''));
16639|        if ($gmr === '') {
16640|            if ($deviationGmrFallback !== null) {
16641|                // Batch forneceu resultado ('' = sem GMR nos desvios, string = GMR encontrado).
16642|                $gmr = trim($deviationGmrFallback);
16643|            } else {
16644|                // Chamada avulsa (create/update/finalize) — lazy load permitido.
16645|                foreach ($inspection->getDeviations() as $deviation) {
16646|                    $devGmr = trim((string) ($deviation->getGmr() ?? ''));
16647|                    if ($devGmr !== '') {
16648|                        $gmr = $devGmr;
16649|                        break;
16650|                    }
16651|                }
16652|            }
16653|        }
16654|
16655|        return [
16656|            'id'                      => $inspection->getId(),
16657|            'title'                   => $title,
16658|            'inspection_date'         => $inspection->getInspectionDate()->format('Y-m-d'),
16659|            'inspection_date_label'   => $inspection->getInspectionDate()->format('d/m/Y'),
16660|            'safety_responsible_id'   => $responsible?->getId(),
16661|            'safety_responsible_name' => $responsibleName,
16662|            'responsible_management'  => $managementOfResponsible ?? '',
16663|            'team_id'                 => $inspection->getTeam()?->getId(),
16664|            'team_name'               => $teamName,
16665|            'participants_ids'        => $participantIds,
16666|            'participants_names'      => $participantNames,
16667|            'participants_count'      => count($participantIds),
16668|            'companion_ids'           => $companionIds,
16669|            'companion_names'         => $companionNames,
16670|            'companion_notes'         => $inspection->getCompanionNotes() ?? '',
16671|            'observations'            => $inspection->getObservations() ?? '',
16672|            'deviations_count'        => $deviationsCount >= 0 ? $deviationsCount : $inspection->getDeviations()->count(),
16673|            'strengths_count'         => $strengthsCount  >= 0 ? $strengthsCount  : $inspection->getStrengths()->count(),
16674|            'status'                  => ucfirst($statusValue),
16675|            'status_value'            => $statusValue,
16676|            'gmr'                     => $gmr,
16677|            'location'                => $inspection->getLocation() ?? '',
16678|            'inspection_type'         => $inspection->getType() ?? '',
16679|            'created_at'              => $inspection->getCreatedAt()->format('d/m/Y'),
16680|            'created_at_ymd'          => $inspection->getCreatedAt()->format('Y-m-d'),

{"search_text": "_shared_module_assets.html.twig"}

File: CONFLITOS_REAIS_DYNAMIC_COLOR_ICONS.md
Match lines: 1
154|- `templates/ssma/partials/_shared_module_assets.html.twig` ✅

File: docs/engineering/pr/feature-ssma-performance-roadmap-fase-a-new-production/PR_descricao_feature-ssma-performance-roadmap-fase-a-new-production.md
Match lines: 1
162|- `_shared_module_assets.html.twig` — busca remota de membros, combobox tag e mapa corporal (SSMA)

File: docs/engineering/pr/homolog/PR_arquivos_homolog.txt
Match lines: 1
74|M	templates/ssma/partials/_shared_module_assets.html.twig

File: docs/engineering/pr/homolog/PR_impacto_homolog.txt
Match lines: 1
74| .../ssma/partials/_shared_module_assets.html.twig  | 121 ++++++--

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_arquivos_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
236|M	templates/ssma/partials/_shared_module_assets.html.twig

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_descricao_hotfix-ssma-ap-validacao-etapa1-new-production.md
Match lines: 2
50|| `_shared_module_assets.html.twig` | Alinhamento do card de membro selecionado |
151|- `_shared_module_assets.html.twig` — card de membro em módulos SSMA.

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_impacto_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
236| .../ssma/partials/_shared_module_assets.html.twig  |  592 +++-

File: docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_arquivos_hotfix-ssma-ux-pos-merge-231-new-production.txt
Match lines: 1
10|M	templates/ssma/partials/_shared_module_assets.html.twig

File: docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_descricao_hotfix-ssma-ux-pos-merge-231-new-production.md
Match lines: 1
62|| Combobox | `_shared_module_assets.html.twig`, modais SSMA |

File: docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_impacto_hotfix-ssma-ux-pos-merge-231-new-production.txt
Match lines: 1
10| .../ssma/partials/_shared_module_assets.html.twig  | 380 +++++++++++++++++

File: docs/engineering/pr/new_staging2/PR_arquivos_new_staging2.txt
Match lines: 1
1647|M	templates/ssma/partials/_shared_module_assets.html.twig

File: docs/engineering/pr/new_staging2/PR_impacto_new_staging2.txt
Match lines: 1
1647| .../ssma/partials/_shared_module_assets.html.twig  |   50 +-

File: docs/pr-hotfix-ssma-ap-parte-medica-new-production.md
Match lines: 2
26|| Alterado | `templates/ssma/partials/_shared_module_assets.html.twig` |
92|**Explique:** Ajuste em `templates/ssma/partials/_shared_module_assets.html.twig` na função **`SsmaShared.setTagSelectValues`**, usada por fluxos SSMA que montam tags a partir de selects (modal de ocorrência/evento, inspeção, etc.). Mudança: permitir tag com ID mesmo sem option no select. **Não** altera `templates/components/**` nem `public/js/metahuman-standard/**`.

File: templates/contractor/index.html.twig
Match lines: 1
13|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/governance/authorization/index.html.twig
Match lines: 1
15|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/governance/authorization/monitoring.html.twig
Match lines: 1
14|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/governance/badge/index.html.twig
Match lines: 1
10|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/governance/cases/index.html.twig
Match lines: 1
17|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/spaces_control/book_room/index.html.twig
Match lines: 1
6|    {% include 'spaces_control/partials/_shared_module_assets.html.twig' %}

File: templates/spaces_control/buildings/index.html.twig
Match lines: 2
11|    {% include 'spaces_control/partials/_shared_module_assets.html.twig' %}
30|        {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/spaces_control/realtime/index.html.twig
Match lines: 1
17|    {% include 'spaces_control/partials/_shared_module_assets.html.twig' %}

File: templates/ssma/action_plan/index.html.twig
Match lines: 1
8|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/cause_tree/index.html.twig
Match lines: 1
5|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/ssma/cause_tree/tree_view/index.html.twig
Match lines: 1
227|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/ssma/occurrence/deep_dive_group.html.twig
Match lines: 1
5|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/occurrence/index.html.twig
Match lines: 1
24|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 1
554|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 1
1427|/* Card do gestor — usa .ssma-single-member-card em _shared_module_assets.html.twig */

File: templates/ssma/prevention/approach/index.html.twig
Match lines: 1
79|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/prevention/index.html.twig
Match lines: 1
8|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/prevention/inspection/index.html.twig
Match lines: 1
150|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {

File: templates/ssma/refusal/index.html.twig
Match lines: 1
59|    {% include 'ssma/partials/_shared_module_assets.html.twig' with { allMembers: allMembers|default([]) } %}

File: tests/Ssma/ssma_performance_fase_b_standalone.php
Match lines: 1
11|$assets = file_get_contents($root . '/templates/ssma/partials/_shared_module_assets.html.twig');

File: tests/Unit/Product/Ssma/SsmaBodyMapEntryRegressionTest.php
Match lines: 1
66|        $shared = $this->read('templates/ssma/partials/_shared_module_assets.html.twig');

File: tests/Unit/Product/Ssma/SsmaRefusalRightHubContractTest.php
Match lines: 1
60|        $shared = $this->read('templates/ssma/partials/_shared_module_assets.html.twig');

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "end_line": 570, "start_line": 545}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3225)
IS_TRUNCATED: false
LINE_RANGE: 545-570
545|    {% set evidence_chip_initials = evidence_chip_initials|merge([evidence_uploader_member.name|slice(0, 1)|upper]) %}
546|{% else %}
547|    {% set evidence_chip_initials = evidence_chip_initials|merge(['A']) %}
548|{% endif %}
549|{% if people_members|length > 1 %}
550|    {% set evidence_chip_initials = evidence_chip_initials|merge([people_members[1].name|default('J')|slice(0, 1)|upper]) %}
551|{% endif %}
552|
553|<section class="members-content zero-padding modern-layout ssma-module occurrence-view-page ssma-occurrence-detail">
554|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {
555|        allMembers: allMembers|default([])
556|    } %}
557|    {# Readonly: view inclui o modal só com can_edit — entry precisa ficar aqui também.
558|       Fonte: partial único (Encore deduplica se o modal também incluir). #}
559|    {% include 'ssma/partials/_ssma_body_map_entry.html.twig' %}
560|
561|    {# ── Header + ações (um sticky só) ── #}
562|    <div class="ssma-occ-detail-sticky-head">
563|    <div class="modern-header no-tabs">
564|        <div class="header-top">
565|            <a href="{{ path('ssma_ocorrencia_index') }}" class="btn-back-link mr-2">
566|                <i class="fa fa-angle-left"></i>
567|            </a>
568|            <span class="ssma-shared-tag mr-2 align-self-center" title="Identificador"
569|                  style="background:rgba(108,117,125,0.10); color:#6c757d; border-color:#adb5bd; font-size:12px;">
570|                {{ occurrence.display_code|default(occurrence.id) }}

{"file_path": "public/js/ssma/ssma-member-picker.js", "end_line": 160, "start_line": 1}

File: public/js/ssma/ssma-member-picker.js (Total lines: 454)
IS_TRUNCATED: false
LINE_RANGE: 1-160
1|/**
2| * SSMA — seletor de membros (modal Internos: busca + Cargo/Time/Vínculo).
3| * Uso: SsmaShared.openMemberPicker({ mode, title, selectedIds, onConfirm, ... })
4| */
5|(function ($) {
6|    'use strict';
7|
8|    if (!$ || !window.SsmaShared) {
9|        return;
10|    }
11|
12|    var shared = window.SsmaShared;
13|    var AVATAR_COLORS = ['#EA151C', '#186073', '#25AD52', '#FFC107', '#6F42C1', '#FD7E14', '#20C997', '#DC3545'];
14|    var activeOptions = null;
15|    /** true após a primeira carga remota (evita re-fetch desnecessário). */
16|    var remotePickerLoaded = false;
17|
18|    function normalizeMember(row) {
19|        if (!row || row.id == null) {
20|            return null;
21|        }
22|        if (row.ssma_exclude_person_select) {
23|            return null;
24|        }
25|        return {
26|            id: parseInt(row.id, 10),
27|            name: String(row.name || row.email || '').trim(),
28|            email: String(row.email || '').trim(),
29|            avatar: row.avatar || '',
30|            cargo: String(row.cargo || row.position || '').trim(),
31|            team_display: String(row.team_display || row.team_name || '').trim(),
32|            vinculo: String(row.vinculo || '').trim()
33|        };
34|    }
35|
36|    function resolveCatalogRows(options) {
37|        if (options && Array.isArray(options.members)) {
38|            return options.members;
39|        }
40|        if (shared.modalMembers != null) {
41|            return Array.isArray(shared.modalMembers) ? shared.modalMembers : [];
42|        }
43|        return shared.allMembers || [];
44|    }
45|
46|    function buildCatalog(rows) {
47|        shared.memberPickerCatalog = [];
48|        $.each(rows || [], function (_, row) {
49|            var m = normalizeMember(row);
50|            if (m && m.id > 0 && m.name) {
51|                shared.memberPickerCatalog.push(m);
52|            }
53|        });
54|    }
55|
56|    /**
57|     * Complementa o catálogo local com todos os membros da empresa via AJAX.
58|     * Necessário em telas de detalhe (occurrence_view) onde allMembers está filtrado
59|     * apenas aos membros referenciados na ocorrência.
60|     * A flag remotePickerLoaded garante que a requisição só acontece uma vez por sessão.
61|     */
62|    function ensureFullMemberCatalog(callback) {
63|        var url = shared.membersSearchUrl;
64|        if (!url || remotePickerLoaded) {
65|            if (typeof callback === 'function') {
66|                callback();
67|            }
68|            return;
69|        }
70|        remotePickerLoaded = true;
71|
72|        $.getJSON(url, { q: '', company_scope: 1, picker: 1, limit: 500 })
73|            .done(function (resp) {
74|                var items = (resp && Array.isArray(resp.items)) ? resp.items : [];
75|                var existingIds = {};
76|                (shared.memberPickerCatalog || []).forEach(function (m) {
77|                    existingIds[String(m.id)] = true;
78|                });
79|                items.forEach(function (row) {
80|                    var m = normalizeMember(row);
81|                    if (m && m.id > 0 && m.name && !existingIds[String(m.id)]) {
82|                        shared.memberPickerCatalog.push(m);
83|                        existingIds[String(m.id)] = true;
84|                    }
85|                });
86|            })
87|            .always(function () {
88|                if (typeof callback === 'function') {
89|                    callback();
90|                }
91|            });
92|    }
93|
94|    function avatarColor(id) {
95|        return AVATAR_COLORS[Math.abs(parseInt(id, 10) || 0) % AVATAR_COLORS.length];
96|    }
97|
98|    function memberAvatarHtml(member) {
99|        var initial = (member.name || '?').charAt(0).toUpperCase();
100|        var uploadsBase = shared.uploadsPhotosBase || '/uploads/photos/';
101|        if (member.avatar) {
102|            var src = uploadsBase + String(member.avatar).replace(/^\/+/, '');
103|            return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
104|                '<img src="' + shared.escapeHtml(src) + '" class="user-avatar-image" alt="" ' +
105|                'onerror="this.style.display=\'none\';this.nextElementSibling.style.display=\'flex\';">' +
106|                '<div class="user-avatar" style="display:none;background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
107|                '</div>';
108|        }
109|        return '<div class="user-avatar-container" style="width:34px;height:34px;min-width:34px;flex-shrink:0;">' +
110|            '<div class="user-avatar" style="background:' + avatarColor(member.id) + ';"><span>' + initial + '</span></div>' +
111|            '</div>';
112|    }
113|
114|    function escapeAttr(value) {
115|        return shared.escapeHtml(String(value ?? '')).replace(/'/g, '&#39;');
116|    }
117|
118|    function syncCustomSelectFromNative($sel) {
119|        if (!$sel || !$sel.length) {
120|            return;
121|        }
122|        var selectId = $sel.attr('id');
123|        var wrapper = $sel.closest('.custom-modern-select-wrapper');
124|        var optionsDiv = wrapper.find('.custom-modern-options').first();
125|        if (!optionsDiv.length) {
126|            return;
127|        }
128|        var html = '';
129|        $sel.find('option').each(function () {
130|            var val = $(this).attr('value');
131|            if (val === undefined || val === null) {
132|                val = '';
133|            }
134|            html += '<div class="custom-modern-option" data-value="' + escapeAttr(val) + '">' +
135|                shared.escapeHtml($(this).text()) + '</div>';
136|        });
137|        optionsDiv.html(html);
138|        if (typeof window.setCustomSelectValue === 'function' && selectId) {
139|            window.setCustomSelectValue(selectId, $sel.val() || '');
140|        } else if (typeof window.initCustomSelects === 'function') {
141|            window.initCustomSelects();
142|        }
143|    }
144|
145|    function resetMemberPickerFilters() {
146|        ['ssmaMemberPickerCargoFilter', 'ssmaMemberPickerTimeFilter', 'ssmaMemberPickerVinculoFilter'].forEach(function (id) {
147|            if (typeof window.setCustomSelectValue === 'function') {
148|                window.setCustomSelectValue(id, '');
149|            } else {
150|                $('#' + id).val('');
151|            }
152|        });
153|    }
154|
155|    function bindMemberPickerFilterHandlers() {
156|        $('#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter')
157|            .off('change.ssmaMemberPicker')
158|            .on('change.ssmaMemberPicker', filterRows);
159|    }
160|

{"end_line": 454, "file_path": "public/js/ssma/ssma-member-picker.js", "start_line": 330}

File: public/js/ssma/ssma-member-picker.js (Total lines: 454)
IS_TRUNCATED: false
LINE_RANGE: 330-454
330|        $('#ssmaMemberPickerTableBody .ssma-member-picker-chk:checked').each(function () {
331|            var id = parseInt($(this).val(), 10);
332|            if (id > 0) {
333|                ids.push(id);
334|            }
335|        });
336|        return ids;
337|    }
338|
339|    function membersByIds(ids) {
340|        var map = {};
341|        (shared.memberPickerCatalog || []).forEach(function (m) {
342|            map[String(m.id)] = m;
343|        });
344|        return (ids || []).map(function (id) {
345|            return map[String(id)] || shared.getMemberById(id);
346|        }).filter(Boolean);
347|    }
348|
349|    shared.openMemberPicker = function (options) {
350|        activeOptions = $.extend({
351|            mode: 'multiple',
352|            title: 'Selecionar membros',
353|            sectionLabel: 'Internos',
354|            selectedIds: [],
355|            excludeIds: [],
356|            confirmLabel: 'Confirmar',
357|            onConfirm: null
358|        }, options || {});
359|        buildCatalog(resolveCatalogRows(activeOptions));
360|
361|        moveModalToBody();
362|        $('#ssmaMemberPickerModalTitle').text(activeOptions.title);
363|        $('#ssmaMemberPickerSectionLabel').text(activeOptions.sectionLabel);
364|        $('#ssmaMemberPickerConfirmBtn').text(activeOptions.confirmLabel);
365|        resetMemberPickerFilters();
366|        resetMemberPickerSearch();
367|
368|        var renderAndBind = function () {
369|            rebuildCargoFilterOptions();
370|            rebuildTimeFilterOptions();
371|            renderTableRows();
372|            bindMemberPickerFilterHandlers();
373|            if (typeof window.initAllCustomSelectWrappers === 'function') {
374|                window.initAllCustomSelectWrappers();
375|            }
376|        };
377|
378|        // Catálogo já recortado (modalMembers / options.members): não expandir via AJAX
379|        // com company_scope, senão o picker ignora a limitação por área.
380|        var catalogIsScoped = Array.isArray(activeOptions.members) || shared.modalMembers != null;
381|        if (!catalogIsScoped && !remotePickerLoaded && shared.membersSearchUrl) {
382|            // Primeira abertura: exibe loading enquanto carrega todos os membros remotamente.
383|            $('#ssmaMemberPickerTableBody').html(
384|                '<tr><td colspan="5" class="text-center text-muted py-3 small">' +
385|                '<i class="fas fa-spinner fa-spin mr-1"></i>Carregando membros&hellip;' +
386|                '</td></tr>'
387|            );
388|            $('#ssmaMemberPickerModal').modal('show');
389|            ensureFullMemberCatalog(renderAndBind);
390|        } else {
391|            renderAndBind();
392|            $('#ssmaMemberPickerModal').modal('show');
393|        }
394|    };
395|
396|    $(document).on('input', '#ssma-member-picker-search-input', filterRows);
397|
398|    $(document).on('change', '#ssmaMemberPickerCargoFilter, #ssmaMemberPickerTimeFilter, #ssmaMemberPickerVinculoFilter', filterRows);
399|
400|    $(document).on('change', '#ssmaMemberPickerTableBody .ssma-member-picker-chk', function () {
401|        if (!activeOptions || activeOptions.mode !== 'single') {
402|            return;
403|        }
404|        if (this.checked) {
405|            $('#ssmaMemberPickerTableBody .ssma-member-picker-chk').not(this).prop('checked', false);
406|        }
407|    });
408|
409|    $(document).on('click', '#ssmaMemberPickerTableBody .ssma-member-picker-row', function (e) {
410|        if ($(e.target).is('input, a, button, label')) {
411|            return;
412|        }
413|        var $chk = $(this).find('.ssma-member-picker-chk');
414|        if (!$chk.length) {
415|            return;
416|        }
417|        if (activeOptions && activeOptions.mode === 'single') {
418|            $chk.prop('checked', true).trigger('change');
419|        } else {
420|            $chk.prop('checked', !$chk.prop('checked'));
421|        }
422|    });
423|
424|    $('#ssmaMemberPickerConfirmBtn').on('click', function () {
425|        var ids = collectSelectedIds();
426|        if (activeOptions && activeOptions.mode === 'single' && ids.length > 1) {
427|            ids = [ids[0]];
428|        }
429|        if (typeof activeOptions.onConfirm === 'function') {
430|            activeOptions.onConfirm(ids, membersByIds(ids));
431|        }
432|        $('#ssmaMemberPickerModal').modal('hide');
433|    });
434|
435|    $(document).on('show.bs.modal', '#ssmaMemberPickerModal', function () {
436|        lockAppPageBodyScroll();
437|    });
438|
439|    $(document).on('shown.bs.modal', '#ssmaMemberPickerModal', function () {
440|        if (typeof window.setupSearchExpandable === 'function') {
441|            window.setupSearchExpandable();
442|        }
443|        if (typeof window.initAllCustomSelectWrappers === 'function') {
444|            window.initAllCustomSelectWrappers();
445|        }
446|        filterRows();
447|    });
448|
449|    $(document).on('hidden.bs.modal', '#ssmaMemberPickerModal', function () {
450|        unlockAppPageBodyScroll();
451|    });
452|
453|})(window.jQuery);
454|

{"end_line": 9460, "file_path": "src/Controller/SsmaController.php", "start_line": 9380}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9380-9460
9380|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9381|        }
9382|        if (!$this->canViewSsmaActionUnderAreaScope($action, $company, $user)) {
9383|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9384|        }
9385|
9386|        $actionTypeLabels = array_column($this->getActionTypeMetadata(), 'label', 'value');
9387|        $type = $action->getType() ?? '';
9388|        $origem = $action->getOrigem() ?? '';
9389|        $relatedEventType = $action->resolveRelatedEventType();
9390|
9391|        $projectId = $action->getProjectId();
9392|        $projectUrl = $action->isHasProject() && $projectId
9393|            ? '/projects/project_steps/' . $projectId
9394|            : '';
9395|
9396|        $payload = array_merge([
9397|            'id'                 => $action->getId(),
9398|            'occurrence_id'      => $action->getOccurrence()?->getId(),
9399|            'event_id'           => $action->getEvent()?->getId() ?? (ActionOrigemEnum::isInspectionOrApproach($origem) ? $action->getOrigemId() : null),
9400|            'related_event_type' => $relatedEventType,
9401|            'relatedType'        => $relatedEventType,
9402|            'origem_id'          => $action->getOrigemId(),
9403|            'title'              => $action->getTitle(),
9404|            'description'        => $action->getDescription() ?? '',
9405|            'type'               => $type,
9406|            'type_label'         => $actionTypeLabels[$type] ?? $type,
9407|            'deadline'           => $action->getDeadline()?->format('Y-m-d'),
9408|            'responsible_ids'    => $action->getResponsibleIds() ?? [],
9409|            'validator_id'       => $action->getValidatorMemberId(),
9410|            'solved'             => $action->isSolved(),
9411|            'has_project'        => $action->isHasProject(),
9412|            'project_id'         => $projectId,
9413|            'project_url'        => $projectUrl,
9414|            'project_start_date' => $action->getProjectStartDate()?->format('Y-m-d') ?? '',
9415|            'project_priority'   => $action->getProjectPriority() ?? '',
9416|            'control_hierarchy'  => $action->getControlHierarchy() ?? '',
9417|        ], $this->resolveActionDeadlineEditMeta($action, $company, $user));
9418|
9419|        return new JsonResponse(['success' => true, 'action' => $payload]);
9420|    }
9421|
9422|    public function getInspection(int $id): JsonResponse
9423|    {
9424|        /** @var User|null $user */
9425|        $user = $this->getUser();
9426|        if (!$user) {
9427|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9428|        }
9429|
9430|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9431|        if (!$inspection || $inspection->getCompany()->getId() !== $user->getCompany()?->getId()) {
9432|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9433|        }
9434|
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9436|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9437|        }
9438|
9439|        // TODO: This detail payload is the source used to hydrate the edit modal on the front-end.
9440|        return new JsonResponse([
9441|            'success' => true,
9442|            'inspection' => $this->serializeInspectionDetail($inspection),
9443|        ]);
9444|    }
9445|
9446|    public function viewInspection(int $id): Response
9447|    {
9448|        /** @var User|null $user */
9449|        $user = $this->getUser();
9450|        if (!$user) {
9451|            return $this->redirectToRoute('app_login');
9452|        }
9453|
9454|        $company = $user->getCompany();
9455|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9456|
9457|        if (!$inspection || !$company || $inspection->getCompany()->getId() !== $company->getId()) {
9458|            $this->addFlash('warning', 'Inspeção não encontrada.');
9459|
9460|            return $this->redirectToRoute('ssma_prevencao_index');

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "resolveWritableInspectionTeamId"}

File: src/Controller/SsmaController.php
Match lines: 1
9278|            $writableTeamId = $this->ssmaPreventionAreaAuthorization->resolveWritableInspectionTeamId(

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "validateInspectionPayloadAgainstTeamScope|validateInspectionPayload("}

No matches found

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "validateInspectionPayload"}

File: src/Controller/SsmaController.php
Match lines: 3
9291|            $areaScopeErr = $this->ssmaPreventionAreaAuthorization->validateInspectionPayload(
9300|            $teamScopeErr = $this->validateInspectionPayloadAgainstTeamScope(
10248|    private function validateInspectionPayloadAgainstTeamScope(

{"comments": [{"content": "Ao remover o cache de catálogo (catalogBuilt), o picker agora reconstrói o catálogo a cada abertura a partir da lista local. Em telas de detalhe como a de ocorrência, onde allMembers vem filtrado apenas aos membros referenciados e a lista completa depende da carga remota, a primeira abertura funciona (AJAX expande), mas na segunda abertura a lista é reconstruída do allMembers filtrado e a expansão remota não ocorre mais (remotePickerLoaded já é true) — o usuário perde a capacidade de buscar/pickar membros da empresa que não estão na ocorrência, comportamento que existia antes. Para preservar isso mantendo o recorte por área nos fluxos escopados, reconstrua o catálogo apenas quando a fonte for escopada ou quando a carga remota ainda não ocorreu, por exemplo: if (catalogIsScoped || !remotePickerLoaded) { buildCatalog(resolveCatalogRows(activeOptions)); }", "category": "bug", "existing_code": "        buildCatalog(resolveCatalogRows(activeOptions));", "path": "public/js/ssma/ssma-member-picker.js", "severity": "medium", "suggestion_code": "        var catalogIsScoped = Array.isArray(activeOptions.members) || shared.modalMembers != null;\n        if (catalogIsScoped || !remotePickerLoaded) {\n            buildCatalog(resolveCatalogRows(activeOptions));\n        }"}]}

(async)

{"state": "DONE"}

{"arguments": "{\"search_text\": \"filterInspectionsForAreaScope|filterAbordagensByMemberIds\", \"file_patterns\": [\"src/Controller/*.php\"]}"}

Error: search_text is blank

{"arguments": "{\"search_text\": \"withExtraMemberIds\", \"file_patterns\": [\"*.php\"]}"}

Error: search_text is blank

{"arguments": "{\"search_text\": \"resolveScope\\\\(\", \"file_patterns\": [\"*.php\"]}"}

Error: search_text is blank

{"arguments": "{\"search_text\": \"filterInspectionsForAreaScope\", \"file_patterns\": [\"*.php\"]}"}

Error: search_text is blank

{"arguments": "{\"search_text\": \"withExtraMemberIds\", \"file_patterns\": [\"*.php\"]}"}

Error: search_text is blank

{"arguments": "{\"search_text\": \"resolveScope\", \"file_patterns\": [\"*.php\"]}"}

Error: search_text is blank

{"search_text": "filterInspectionsForAreaScope"}

File: src/Controller/SsmaController.php
Match lines: 1
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(

File: src/Service/Ssma/SsmaAreaLimitationScope.php
Match lines: 1
107|    public static function filterInspectionsForAreaScope(

File: tests/Unit/Product/Ssma/SsmaAreaLimitationScopeTest.php
Match lines: 2
83|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
102|        $scoped = SsmaAreaLimitationScope::filterInspectionsForAreaScope(

{"search_text": "withExtraMemberIds"}

File: src/Service/Ssma/SsmaPreventionAreaScope.php
Match lines: 1
137|    public function withExtraMemberIds(array $memberIds): self

File: tests/Unit/Product/Ssma/SsmaPreventionAreaScopeTest.php
Match lines: 3
67|    public function testWithExtraMemberIds(): void
70|        $widened = $restricted->withExtraMemberIds([200, 0, -5]);
78|        self::assertSame($unrestricted, $unrestricted->withExtraMemberIds([1]));

{"search_text": "resolveScope"}

File: public/js/goal-adriana-create-modal.js
Match lines: 2
27|    function resolveScope(trigger) {
674|            openModal(resolveScope(trigger));

File: src/Controller/SsmaController.php
Match lines: 1
10049|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);

File: src/Service/PeopleAnalytics/PeopleAnalyticsPermissionService.php
Match lines: 2
106|        $scope = $this->resolveScope($permissionTag);
358|    private function resolveScope(?PermissionTag $permissionTag): string

File: src/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolver.php
Match lines: 2
442|        $scopeUserIds = $this->resolveScopeUserIds($scope, $user, $companyMember);
586|    private function resolveScopeUserIds(string $scope, User $user, ?CompanyMembers $companyMember): array

File: src/Service/Products/PayrollFlowDashboardResponseComposer.php
Match lines: 1
219|        $backlogCount = PayrollFlowDashboardStageScopeHelper::resolveScopedBacklogCount(

File: src/Service/Products/PayrollFlowDashboardStageScopeHelper.php
Match lines: 1
144|    public static function resolveScopedBacklogCount(

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 2
21| * Resolve o recorte uma única vez ({@see resolveScope}) e responde às três perguntas que
31|    public function resolveScope(

File: tests/Unit/Product/FolhaDePagamento/PayrollFlowDashboardStageScopeHelperTest.php
Match lines: 2
12|    public function testResolveScopedBacklogCountPrefersFilteredItemsOverStaleSummary(): void
16|        $count = PayrollFlowDashboardStageScopeHelper::resolveScopedBacklogCount(

{"search_text": "canViewInspection"}

File: src/Controller/SsmaController.php
Match lines: 7
6088|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
8755|                    ->canViewInspection($areaScope, $i)
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
20026|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 1
101|    public function canViewInspection(SsmaPreventionAreaScope $scope, SsmaInspection $inspection): bool

File: tests/Unit/Product/Ssma/SsmaPreventionAreaAuthorizationServiceTest.php
Match lines: 10
28|        self::assertTrue($service->canViewInspection(
40|        self::assertTrue($service->canViewInspection($scope, $this->inspection(teamId: 10)));
54|        self::assertFalse($service->canViewInspection(
66|        self::assertTrue($service->canViewInspection($scope, $this->inspection(participantIds: [100])));
67|        self::assertTrue($service->canViewInspection($scope, $this->inspection(createdById: 100)));
68|        self::assertTrue($service->canViewInspection($scope, $this->inspection(safetyResponsibleId: 100)));
69|        self::assertTrue($service->canViewInspection($scope, $this->inspection(companionIds: [100])));
70|        self::assertFalse($service->canViewInspection($scope, $this->inspection(participantIds: [101])));
79|        self::assertTrue($service->canViewInspection(
83|        self::assertFalse($service->canViewInspection(

{"file_path": "src/Controller/SsmaController.php", "start_line": 10020, "end_line": 10120}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10020-10120
10020|     */
10021|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10022|    {
10023|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-prevention');
10024|    }
10025|
10026|    /**
10027|     * Recorte de área do produto Plano de Ação (`ssma-action-plan`).
10028|     * Independente da tag de Prevenção: a tag do hub é a que vale na tela.
10029|     */
10030|    private function getSsmaActionPlanAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10031|    {
10032|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-action-plan');
10033|    }
10034|
10035|    private function getSsmaAreaScopeForProduct(
10036|        ?Company $company,
10037|        ?User $user,
10038|        string $productSlug,
10039|    ): SsmaPreventionAreaScope {
10040|        if (!$company || !$user instanceof User) {
10041|            return SsmaPreventionAreaScope::unrestricted();
10042|        }
10043|
10044|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10045|        $member = $this->getCurrentCompanyMember($company, $user);
10046|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, $productSlug) : null;
10047|
10048|        return $this->ssmaPreventionAreaAuthorization
10049|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10050|    }
10051|
10052|    /**
10053|     * Interseção dos recortes de área de Prevenção e Plano de Ação.
10054|     * null = nenhum dos dois limita; mapa vazio = limita e nega tudo.
10055|     *
10056|     * @return array<int, true>|null
10057|     */
10058|    private function getSsmaCombinedAreaMemberIds(?Company $company, ?User $user): ?array
10059|    {
10060|        $allowed = null;
10061|        foreach ([
10062|            $this->getSsmaPreventionAreaScope($company, $user),
10063|            $this->getSsmaActionPlanAreaScope($company, $user),
10064|        ] as $scope) {
10065|            if (!$scope->isRestricted()) {
10066|                continue;
10067|            }
10068|            $areaMap = $scope->allowedMemberIds();
10069|            $allowed = $allowed === null ? $areaMap : array_intersect_key($allowed, $areaMap);
10070|        }
10071|
10072|        return $allowed;
10073|    }
10074|
10075|    /**
10076|     * @return list<int>
10077|     */
10078|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10079|    {
10080|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10081|    }
10082|
10083|    /**
10084|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10085|     */
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10087|    {
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10089|            $this->getSsmaPreventionAreaScope($company, $user),
10090|            $inspection
10091|        );
10092|    }
10093|
10094|    /**
10095|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).
10096|     */
10097|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10098|    {
10099|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
10100|            $this->getSsmaPreventionAreaScope($company, $user),
10101|            $abordagem
10102|        );
10103|    }
10104|
10105|    /**
10106|     * Quem não vê a ação na listagem também não abre, edita nem apaga pelo ID.
10107|     * Interseção: se Prevenção ou Plano de Ação limitar, os dois recortes precisam passar.
10108|     */
10109|    private function canViewSsmaActionUnderAreaScope(SsmaAction $action, ?Company $company, ?User $user): bool
10110|    {
10111|        return $this->ssmaPreventionAreaAuthorization->canViewAction(
10112|            $this->getSsmaPreventionAreaScope($company, $user),
10113|            $action
10114|        ) && $this->ssmaPreventionAreaAuthorization->canViewAction(
10115|            $this->getSsmaActionPlanAreaScope($company, $user),
10116|            $action
10117|        );
10118|    }
10119|
10120|    /**

{"search_text": "companion_ids", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 5
10288|        foreach ((array) ($data['companion_ids'] ?? []) as $companionId) {
16343|        $companionIds = array_values(array_filter(array_map('intval', (array) ($data['companion_ids'] ?? []))));
16668|            'companion_ids'           => $companionIds,
20011|        foreach ((array) ($row['companion_ids'] ?? []) as $cid) {
22394|                'companion_ids'           => $companionIds,

{"file_path": "src/Controller/SsmaController.php", "start_line": 12700, "end_line": 12860}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12700-12860
12700|            if ($defaultInspectionTeamId === null && count($teamsForInspectionModal) === 1) {
12701|                $defaultInspectionTeamId = (int) ($teamsForInspectionModal[0]['id'] ?? 0) ?: null;
12702|            }
12703|        }
12704|        usort($teamsForInspectionModal, static function (array $a, array $b): int {
12705|            return strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? ''));
12706|        });
12707|
12708|        // Técnico especialista SSMA: tem SsmaPermissionTagMember e escopo de equipe [].
12709|        // getSsmaOccurrenceDashboardTeamFilterIds devolve [] (sem equipe no produto) — aplicar
12710|        // filtro de equipe com lista vazia zeraria todas as ocorrências. Filtra por tipo técnico.
12711|        // Importante: NÃO exigir !$ssmaCanManageOccurrences. can_create na tag Membro / ROLE de
12712|        // plataforma não pode esconder ocorrências dos tipos associados ao aprofundamento.
12713|        $isTechSpecialistOnly = !$this->isSsmaViewer()
12714|            && $occurrenceTeamFilterIds === []
12715|            && !empty($userTechnicalTypes);
12716|
12717|        if ($occurrenceTeamFilterIds !== null && !$isTechSpecialistOnly) {
12718|            $teamIdStr = array_map('strval', $occurrenceTeamFilterIds);
12719|
12720|            // Coleta IDs de membros pertencentes às equipes do viewer
12721|            $memberIdsInTeams = [];
12722|            foreach ($teams as $team) {
12723|                if (in_array((string) ($team['id'] ?? ''), $teamIdStr, true)) {
12724|                    foreach ($team['members'] ?? [] as $mid) {
12725|                        $memberIdsInTeams[(int) $mid] = true;
12726|                    }
12727|                }
12728|            }
12729|
12730|            // Supervisor/Gestor de Equipe sem equipe atribuída: ainda deve ver ocorrências onde ??
12731|            // pessoalmente gestor responsável ou pessoa envolvida (regra da planilha SSMA).
12732|            // Sem esse ajuste, memberIdsInTeams ficaria vazio e o filtro de manager_id/people_ids
12733|            // nunca passaria — o supervisor não veria nada, mesmo sendo o responsável da ocorrência.
12734|            if ($occurrenceTeamFilterIds === [] && ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor)) {
12735|                $selfMember = $this->getCurrentCompanyMember($company, $user);
12736|                $selfMemberId = (int) ($selfMember?->getId() ?? 0);
12737|                if ($selfMemberId > 0) {
12738|                    $memberIdsInTeams[$selfMemberId] = true;
12739|                }
12740|            }
12741|
12742|            // Ocorrências: por team_id direto OU por manager_id/people_ids/responsible_ids pertencente ?? equipe.
12743|            // Supervisor de Equipe deve ver ocorrências onde ?? gestor responsável ou pessoa envolvida,
12744|            // mesmo que o team_id da ocorrência não esteja preenchido ou difira do escopo.
12745|            $occurrences = array_values(array_filter($occurrences, static function (array $o) use ($teamIdStr, $memberIdsInTeams): bool {
12746|                if (isset($o['team_id']) && $o['team_id'] !== null && in_array((string) $o['team_id'], $teamIdStr, true)) {
12747|                    return true;
12748|                }
12749|                $managerId = (int) ($o['manager_id'] ?? 0);
12750|                if ($managerId > 0 && isset($memberIdsInTeams[$managerId])) {
12751|                    return true;
12752|                }
12753|                $personId = (int) ($o['person_id'] ?? 0);
12754|                if ($personId > 0 && isset($memberIdsInTeams[$personId])) {
12755|                    return true;
12756|                }
12757|                foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
12758|                    if (isset($memberIdsInTeams[(int) $p])) {
12759|                        return true;
12760|                    }
12761|                }
12762|                return false;
12763|            }));
12764|
12765|            // Inspeções: por team_id
12766|            $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
12767|                $tid = $i['team_id'] ?? null;
12768|                return $tid !== null && $tid !== '' && in_array((string) $tid, $teamIdStr, true);
12769|            }));
12770|
12771|            // Abordagens: por observador pertencente ?? equipe
12772|            $abordagens = array_values(array_filter($abordagens, static function (array $ab) use ($memberIdsInTeams): bool {
12773|                $obsId = (int) ($ab['observador_id'] ?? 0);
12774|                return $obsId > 0 && isset($memberIdsInTeams[$obsId]);
12775|            }));
12776|
12777|            // Plano de Ação: ações em que pelo menos um responsável pertence ao escopo da equipe
12778|            // (não todas as ações das ocorrências visíveis da equipe).
12779|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
12780|        }
12781|
12782|        if ($occurrenceAreaFilterIds !== null) {
12783|            $areaMemberIds = $areaScope->allowedMemberIds();
12784|            // Equipe com área fora do recorte esconde a inspeção mesmo com participante interno:
12785|            // é o que mantém a interseção quando team_limitation e area_limitation estão juntos.
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12787|                $inspections,
12788|                $areaScope->allowedTeamIds(),
12789|                $areaMemberIds,
12790|                $areaScope->teamIdsWithoutArea()
12791|            );
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
12793|                $abordagens,
12794|                $areaMemberIds
12795|            );
12796|            // Mesmo critério da limitação de equipe: plano de ação só com responsável no recorte.
12797|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $areaMemberIds);
12798|        }
12799|
12800|        if ($actionPlanAreaFilterIds !== null) {
12801|            $actionsTaken = $this->filterActionsByResponsibleMemberIds(
12802|                $actionsTaken,
12803|                $actionPlanAreaScope->allowedMemberIds()
12804|            );
12805|        }
12806|
12807|        // Técnico especialista: filtra ocorrências pelos tipos que têm autorização técnica (SsmaPermissionTagMember).
12808|        // Inspeções/Abordagens/Ações não são filtradas por equipe; o técnico não tem equipe SSMA atribuída.
12809|        if ($isTechSpecialistOnly) {
12810|            $techTypesSet = array_flip($userTechnicalTypes);
12811|            $occurrences = array_values(array_filter(
12812|                $occurrences,
12813|                static fn (array $o): bool => isset($techTypesSet[$o['type_value'] ?? ''])
12814|            ));
12815|        }
12816|
12817|        // Filtro de membro (próprio conteúdo) apenas quando o usuário NÃO tem escopo de equipe.
12818|        // Supervisor/Gestor de Equipe já foram limitados pelo filtro de equipe acima — aplicar o
12819|        // filtro de membro sobre eles reduziria a visão incorretamente para só o próprio conteúdo.
12820|        $ssmaPreventionInspectionEnabled = true;
12821|        $ssmaPreventionAbordagemEnabled  = true;
12822|
12823|        // Abas Inspeção/Abordagem (ROLE_USER): só quando meta do kind > 0 (igual critério da tabela Metas).
12824|        // - Sem row (nunca adicionado ou removido com lixeira) → abas ocultas.
12825|        // - Meta = -1 (desligado para esse kind) → aba oculta.
12826|        // - Meta >= 0 (ligado, mesmo sem goal definido ainda) → aba visível.
12827|        // Supervisores/Gestores de Equipe e Gestor Administrador são excluídos desse controle: suas abas dependem de outras flags.
12828|        if ($company && $user instanceof User
12829|            && !$this->isGranted('ROLE_SUPER_ADMIN')
12830|            && !$this->isGranted('ROLE_MANAGER')
12831|            && !$this->isGranted('ROLE_MANAGER_GESTOR')) {
12832|            $memberForPreventionTabs = $this->getCurrentCompanyMember($company, $user);
12833|            $memberIdPreventionTabs = (int) ($memberForPreventionTabs?->getId() ?? 0);
12834|            if ($memberIdPreventionTabs > 0) {
12835|                $metaKeyTabs = self::PREVENCAO_MEMBER_META_PREFIX . $memberIdPreventionTabs;
12836|                $memberMetaRowTabs = $this->entityManager->getRepository(SsmaMeta::class)
12837|                    ->findOneBy(['company' => $company, 'teamName' => $metaKeyTabs]);
12838|                // Le os valores de meta da linha encontrada (null quando a linha nao existe).
12839|                // Aba visível quando o membro está na tabela (row existe) e esse kind não está desligado (-1).
12840|                // meta=0 (ligado sem goal definido) → aba visível; meta=-1 (desligado) → aba oculta.
12841|                $isMgmtPreventionProfile = $this->ssmaPreventionHubAccessService
12842|                    ->isManagementPreventionTag($ssmaPreventionProductTagName)
12843|                    || $this->ssmaPreventionHubAccessService->isManagementPreventionTag($ssmaProductTagName);
12844|                $isPlainPreventionMember = $this->ssmaPreventionHubAccessService
12845|                    ->isPlainPreventionMemberTag($ssmaPreventionProductTagName);
12846|
12847|                if ($isMgmtPreventionProfile) {
12848|                    // Supervisores e Gestores visualizam todos os kinds independente da meta individual.
12849|                    // O campo meta=-1 (desligado) serve para Membros; nao deve ocultar abas de gestao.
12850|                    $ssmaPreventionInspectionEnabled = true;
12851|                    $ssmaPreventionAbordagemEnabled = true;
12852|                } elseif ($isPlainPreventionMember) {
12853|                    if ($memberMetaRowTabs !== null) {
12854|                        $ssmaPreventionInspectionEnabled = $this->ssmaPreventionHubAccessService
12855|                            ->isPrevencaoMemberKindTabVisible($memberMetaRowTabs->getMetaInspecao());
12856|                        $ssmaPreventionAbordagemEnabled = $this->ssmaPreventionHubAccessService
12857|                            ->isPrevencaoMemberKindTabVisible($memberMetaRowTabs->getMetaAbordagem());
12858|                    } else {
12859|                        $ssmaPreventionInspectionEnabled = false;
12860|                        $ssmaPreventionAbordagemEnabled = false;

{"file_path": "src/Controller/SsmaController.php", "start_line": 12400, "end_line": 12700}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12400-12700
12400|        // Membro comum (sem tag de supervisão) não pode.
12401|        $ssmaCanCreateLinkedActions = $ssmaCanManageOccurrences || $this->isSsmaViewer();
12402|        // ssmaCanCreateCauseTree: Supervisor ?? SOMENTE LEITURA na Árvore de Causas (planilha).
12403|        // NÃO incluir isSsmaViewer() aqui. Usa produto ssma-cause-tree (não can_create de ssma-occurrences).
12404|        $ssmaCanCreateCauseTree = $this->canCreateSsmaCauseTree();
12405|        $ssmaCanCreateAuthorization = $ssmaCanManageOccurrences;
12406|        $ssmaCanEditHorasTrabalhadas = $this->canEditSsmaHorasTrabalhadas();
12407|
12408|        // Tag SSMA do colaborador — sempre resolve (ROLE_MANAGER de plataforma ≠ perfil SSMA).
12409|        $ssmaProductTagName = null;
12410|        $memberForTagCheck = null;
12411|        $ssmaPreventionProductTagName = null;
12412|        if ($company && $user instanceof User) {
12413|            $memberForTagCheck = $this->getCurrentCompanyMember($company, $user);
12414|            if ($memberForTagCheck) {
12415|                $resolvedTag = $this->resolveSsmaProductPermissionTagForMember($memberForTagCheck);
12416|                if ($resolvedTag) {
12417|                    $ssmaProductTagName = $resolvedTag->getName();
12418|                }
12419|                if ($this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
12420|                    $ssmaProductTagName = 'Gestor Administrador';
12421|                }
12422|                $ssmaPreventionProductTagName = $this->ssmaPreventionHubAccessService
12423|                    ->resolvePreventionProductTagName($memberForTagCheck);
12424|            }
12425|        }
12426|
12427|        // Membro/Inspetor: visão de pessoa física (matriz de tipos + registrar).
12428|        // Só strip se tiver ROLE_USER (Palloma). Conta admin empresa sem ROLE_USER (Aura) mantém abas.
12429|        // Tenant / SUPER_ADMIN mantêm abas mesmo com tag Membro (regressão Felipe).
12430|        $ssmaIsPlainProductMemberUi = SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
12431|            $ssmaProductTagName,
12432|            $this->isGranted('ROLE_SUPER_ADMIN'),
12433|            $this->isGranted('ROLE_TENANT'),
12434|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
12435|        );
12436|        if ($ssmaIsPlainProductMemberUi && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
12437|            $ssmaCanManageOccurrences = false;
12438|            $ssmaCanAccessSupervisorSurface = false;
12439|            $ssmaCanAccessPreventionPanelAndMetas = false;
12440|            $ssmaCanAccessOccurrencePanel = false;
12441|            $ssmaCanAccessOccurrenceAutomations = false;
12442|            $ssmaCanManageConfig = false;
12443|            $ssmaCanManagePermissions = false;
12444|            $ssmaCanCreateLinkedActions = false;
12445|            $ssmaCanCreateAuthorization = false;
12446|        }
12447|
12448|        $loggedMemberForCauseTree = ($company && $user instanceof User)
12449|            ? $this->getCurrentCompanyMember($company, $user)
12450|            : null;
12451|
12452|        // Especialistas técnicos (SsmaPermissionTagMember) e gestores/supervisores podem visualizar.
12453|        // Membro/Inspetor com acesso só via mapa legado tipo/equipe NÃO recebem o botão na listagem.
12454|        $ssmaCanViewCauseTree = $ssmaCanCreateCauseTree
12455|            || $this->isSsmaViewer()
12456|            || in_array($ssmaProductTagName, ['Gestor Administrador', 'Gestor de Equipe', 'Supervisor de Equipe', 'Supervisor'], true)
12457|            || ($loggedMemberForCauseTree && $company && $this->hasSsmaTechnicalCauseTreeAccess($loggedMemberForCauseTree, $company));
12458|
12459|        // Hub Ocorrências — botão "Registrar ocorrência" (empty state / FAB): Membro não cria (planilha),
12460|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
12461|        // Reutiliza $ssmaProductTagName (já corrigido por memberIsSsmaGestorAdministrador).
12462|        $ssmaProductTagNameForRegister = $ssmaProductTagName;
12463|        $ssmaCanRegisterNewOccurrence = $this->isGranted('ROLE_SUPER_ADMIN')
12464|            || $this->isGranted('ROLE_MANAGER')
12465|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12466|            || \in_array($ssmaProductTagNameForRegister, ['Gestor de Equipe', 'Gestor Administrador'], true)
12467|            // Permissão padrão do Membro: registrar a própria ocorrência.
12468|            || $this->canMemberRegisterOwnOccurrence($company, $user);
12469|
12470|        $loggedMemberForOccurrence = ($company && $user instanceof User)
12471|            ? $this->getCurrentCompanyMember($company, $user)
12472|            : null;
12473|        $ssmaAllowedCreateTypes = ($company && $user instanceof User)
12474|            ? $this->ssmaOccurrenceCreatePermissionService->resolveAllowedCreateTypes(
12475|                $loggedMemberForOccurrence,
12476|                $user,
12477|                $company,
12478|                $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
12479|                $ssmaCanManageOccurrences,
12480|            )
12481|            : [];
12482|        if (!$ssmaCanRegisterNewOccurrence && $ssmaAllowedCreateTypes !== []) {
12483|            $ssmaCanRegisterNewOccurrence = true;
12484|        }
12485|
12486|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
12487|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
12488|        $occurrenceAreaFilterIds = $areaScope->isRestricted() ? $areaScope->areaIds() : null;
12489|        $actionPlanAreaScope = $this->getSsmaActionPlanAreaScope($company, $user);
12490|        $actionPlanAreaFilterIds = $actionPlanAreaScope->isRestricted() ? $actionPlanAreaScope->areaIds() : null;
12491|        $viewerTeamIds = $this->getSsmaViewerTeamIds();
12492|
12493|        // ── Detecção de Supervisor/Gestor de Equipe via tag SSMA ──────────────────────────────
12494|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
12495|        // funções baseadas em role. Identificamos o perfil pelo nome da tag para ajustar flags de UI.
12496|        $ssmaIsTagTeamSupervisor = in_array($ssmaProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12497|        $ssmaIsTagTeamGestor     = $ssmaProductTagName === 'Gestor de Equipe';
12498|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
12499|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
12500|        $ssmaIsPreventionTagTeamSupervisor = in_array($ssmaPreventionProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
12501|        $ssmaIsPreventionTagTeamGestor = $ssmaPreventionProductTagName === 'Gestor de Equipe';
12502|
12503|        // Painel + Metas: libera para Sup/G. de Equipe/Área e Gestor Administrador (ocorrências + ssma-prevention)
12504|        if (!$ssmaCanAccessPreventionPanelAndMetas
12505|            && (
12506|                $ssmaIsTagTeamSupervisor
12507|                || $ssmaIsTagTeamGestor
12508|                || $ssmaIsTagAreaSupervisor
12509|                || $ssmaIsTagAreaGestor
12510|                || $ssmaProductTagName === 'Gestor Administrador'
12511|                || $ssmaIsPreventionTagTeamSupervisor
12512|                || $ssmaIsPreventionTagTeamGestor
12513|                || $ssmaPreventionProductTagName === 'Gestor Administrador'
12514|            )
12515|        ) {
12516|            $ssmaCanAccessPreventionPanelAndMetas = true;
12517|        }
12518|
12519|        // Membro/Inspetor (pessoa física / Palloma): não acessa Painel nem Metas.
12520|        // Conta admin empresa sem ROLE_USER (Aura), Tenant e SUPER_ADMIN mantêm — mesmo contrato das abas de Ocorrências.
12521|        if (SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
12522|            $ssmaProductTagName,
12523|            $this->isGranted('ROLE_SUPER_ADMIN'),
12524|            $this->isGranted('ROLE_TENANT'),
12525|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
12526|        )) {
12527|            $ssmaCanAccessPreventionPanelAndMetas = false;
12528|        }
12529|
12530|        // Modal + Evento: título/status ocultos na criação para todos os perfis (Figma Etapa 0).
12531|        // Na edição o JS (evApplyAuraTitleStatusVisibility) reexibe conforme o modo.
12532|        $ssmaHideEventTitleStatusOnCreate = true;
12533|
12534|        // ssmaIsTeamViewer: true quando o usuário opera com escopo de equipe (via role SSMA OU via tag SSMA)
12535|        // Usado para sinalizar ao template que os dados estáo limitados ?? equipe.
12536|        $ssmaIsTeamViewerFlag = $viewerTeamIds !== null || $ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor
12537|            || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor;
12538|
12539|        // ssmaCanCreatePreventionItems: Gestor de Equipe/Área e Gestor Administrador via tag SSMA
12540|        // também podem registrar inspeções/abordagens (ssmaCanManageOccurrences = true via tag).
12541|        $ssmaCanCreatePreventionItems = (
12542|            $this->isGranted('ROLE_SUPER_ADMIN')
12543|            || $this->isGranted('ROLE_MANAGER')
12544|            || $this->isGranted('ROLE_MANAGER_GESTOR')
12545|            || (
12546|                $ssmaCanManageOccurrences
12547|                && ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor || $ssmaProductTagName === 'Gestor Administrador')
12548|            )
12549|        );
12550|
12551|        // ssmaCanEditPreventionContent: controla botões Editar/Finalizar/Deletar em inspeções e abordagens
12552|        // e o botão "Configuração" na aba Metas.
12553|        // Supervisor registra/edita o próprio conteúdo (can_mutate por item); gestão edita todos.
12554|        $ssmaCanEditPreventionContent = $ssmaCanManageOccurrences
12555|            && !$this->isSsmaViewer()
12556|            && !$ssmaIsTagTeamSupervisor
12557|            && !$ssmaIsTagAreaSupervisor;
12558|        $ssmaPreventionMutateOwnOnly = false;
12559|
12560|        // Configurações da aba Prevenção Ativa: Sup/Gestor de Equipe ou Área não acessam (planilha: "Não acessa")
12561|        if ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor) {
12562|            $ssmaCanManageConfig = false;
12563|        }
12564|
12565|        // G. Equipe via tag SSMA pode criar ação (Plano de Ação).
12566|        // Árvore de causas: {@see canCreateSsmaCauseTree()} já cobre Gestor de Equipe.
12567|        if ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor) {
12568|            $ssmaCanCreateLinkedActions = true;
12569|        }
12570|
12571|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
12572|        $ssmaCanEditPreventionMetasTable = $company && $user instanceof User
12573|            && $this->canEditPreventionMetasTableForCurrentUser($company, $user);
12574|
12575|        // ssmaPreventionCanCreateLinkedActions: botão "Criar ação" em Inspeções e Abordagem.
12576|        // Alinhado com ssmaCanCreateLinkedActions (Plano de Ações): quem não pode criar
12577|        // ação no Plano de Ações também não pode criar em inspeção/abordagem/árvore.
12578|        $ssmaPreventionCanCreateLinkedActions = $ssmaCanCreateLinkedActions;
12579|
12580|        $teamsForEventModal = $teams;
12581|        $allMembersForEventPeople = $allMembers;
12582|        $gestoresForEventModal = $company
12583|            ? $this->buildSsmaEventModalGestores($company, $allMembers, $gestores, null)
12584|            : $gestores;
12585|
12586|        $ssmaEventFormDefaults = ['manager_id' => null, 'team_id' => null];
12587|        $applyTeamEventScope = $occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== [];
12588|
12589|        // Supervisor/Gestor de Equipe: filtra modais pelas equipes do cadastro (lista vazia = sem equipe — não zera selects).
12590|        if ($applyTeamEventScope) {
12591|            $teamIdStrScope = array_map('strval', $occurrenceTeamFilterIds);
12592|            $teamsForEventModal = array_values(array_filter(
12593|                $teams,
12594|                static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $teamIdStrScope, true)
12595|            ));
12596|            $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
12597|            $allMembersForEventPeople = array_values(array_filter(
12598|                $allMembers,
12599|                static fn (array $m): bool => isset($allowedMemberMap[(int) ($m['id'] ?? 0)])
12600|            ));
12601|            // Gestor responsável: escopo da empresa (tags/roles), não só membros da equipe do supervisor
12602|            $gestoresForEventModal = $this->buildSsmaEventModalGestores(
12603|                $company,
12604|                $allMembers,
12605|                $gestores,
12606|                null
12607|            );
12608|            $ssmaEventFormDefaults['team_id'] = (int) $occurrenceTeamFilterIds[0];
12609|            $currentMemberForDefaults = $this->getCurrentCompanyMember($company, $user);
12610|            $currentMemberIdForDefaults = (int) ($currentMemberForDefaults?->getId() ?? 0);
12611|            if ($currentMemberIdForDefaults > 0) {
12612|                foreach ($gestoresForEventModal as $gRow) {
12613|                    if ((int) ($gRow['id'] ?? 0) === $currentMemberIdForDefaults) {
12614|                        $ssmaEventFormDefaults['manager_id'] = $currentMemberIdForDefaults;
12615|                        break;
12616|                    }
12617|                }
12618|            }
12619|        }
12620|
12621|        if ($occurrenceAreaFilterIds !== null) {
12622|            $areaMemberIds = $areaScope->allowedMemberIds();
12623|            $teamsForEventModal = array_values(array_filter(
12624|                $teamsForEventModal,
12625|                static fn (array $t): bool => $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12626|            ));
12627|            $allMembersForEventPeople = array_values(array_filter(
12628|                $allMembersForEventPeople,
12629|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12630|            ));
12631|            $gestoresForEventModal = array_values(array_filter(
12632|                $gestoresForEventModal,
12633|                static fn (array $m): bool => isset($areaMemberIds[(int) ($m['id'] ?? 0)])
12634|            ));
12635|            $applyTeamEventScope = true;
12636|            if ($teamsForEventModal !== []) {
12637|                $ssmaEventFormDefaults['team_id'] = (int) ($teamsForEventModal[0]['id'] ?? 0) ?: $ssmaEventFormDefaults['team_id'];
12638|            }
12639|        }
12640|
12641|        if ($actionPlanAreaFilterIds !== null) {
12642|            $actionPlanMemberIds = $actionPlanAreaScope->allowedMemberIds();
12643|            $allMembersForEventPeople = array_values(array_filter(
12644|                $allMembersForEventPeople,
12645|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12646|            ));
12647|            $gestoresForEventModal = array_values(array_filter(
12648|                $gestoresForEventModal,
12649|                static fn (array $m): bool => isset($actionPlanMemberIds[(int) ($m['id'] ?? 0)])
12650|            ));
12651|            $applyTeamEventScope = true;
12652|        }
12653|
12654|        // Fallback final: gestor responsável usa escopo da empresa (não só equipe do supervisor).
12655|        if ($gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12656|            $gestoresForEventModal = $allMembers !== [] ? $allMembers : $allMembersForEventPeople;
12657|        }   
12658|        if ($gestores === [] && $allMembers !== []) {
12659|            $gestores = $allMembers;
12660|        }
12661|        if ($company && $gestoresForEventModal === [] && $occurrenceAreaFilterIds === null && $actionPlanAreaFilterIds === null) {
12662|            $gestoresForEventModal = $this->mergeGestoresFromOccurrenceManagerIds(
12663|                $company,
12664|                $allMembers,
12665|                $occurrences,
12666|                $gestoresForEventModal
12667|            );
12668|        }
12669|        $gestoresForEventModal = $this->enrichSsmaMemberRowsWithTeamMeta(
12670|            $gestoresForEventModal,
12671|            $teamNameByMemberId ?? []
12672|        );
12673|       
12674|
12675|        // Inspeção — equipe no modal: gestão vê escopo/lista completa; Membro só suas equipes (auto se uma).
12676|        // Mesmo contrato Palloma vs Aura das abas: tenant/SUPER_ADMIN/ROLE_MANAGER sem ROLE_USER
12677|        // com tag Membro não entram no recorte de pessoa física.
12678|        $teamsForInspectionModal = $applyTeamEventScope ? $teamsForEventModal : $teams;
12679|        $defaultInspectionTeamId = null;
12680|        $ssmaIsPlainPreventionMember = $ssmaIsPlainProductMemberUi
12681|            && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck);
12682|        if ($ssmaIsPlainPreventionMember && $company && $user instanceof User) {
12683|            $plainMemberRow = $this->getCurrentCompanyMember($company, $user);
12684|            $plainMemberTeamIds = $plainMemberRow ? $this->parseCompanyMemberTeamIds($plainMemberRow) : [];
12685|            if ($plainMemberTeamIds !== []) {
12686|                $plainTeamIdStr = array_map('strval', $plainMemberTeamIds);
12687|                $teamsForInspectionModal = array_values(array_filter(
12688|                    $teams,
12689|                    static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $plainTeamIdStr, true)
12690|                        && $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12691|                ));
12692|                if (count($plainMemberTeamIds) === 1) {
12693|                    $defaultInspectionTeamId = (int) $plainMemberTeamIds[0];
12694|                }
12695|            } else {
12696|                $teamsForInspectionModal = [];
12697|            }
12698|        } elseif ($applyTeamEventScope && $teamsForInspectionModal !== []) {
12699|            $defaultInspectionTeamId = (int) ($ssmaEventFormDefaults['team_id'] ?? 0) ?: null;
12700|            if ($defaultInspectionTeamId === null && count($teamsForInspectionModal) === 1) {

{"search_text": "$inspections =", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 11
4441|        $inspections = $panelData['inspections'];
11936|        $inspections = [];
12214|            $inspections = [];
12249|                $inspections = [];
12260|                $inspections = array_merge(
12374|                $inspections = [];
12766|            $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12954|            $inspections = array_values(array_filter(
16974|                $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
18615|        $inspections = $viewData['inspections'] ?? [];

{"search_text": "$abordagens =", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 8
11937|        $abordagens = [];
12215|            $abordagens = [];
12383|            $abordagens = $company ? $this->loadAbordagens($company) : [];
12772|            $abordagens = array_values(array_filter($abordagens, static function (array $ab) use ($memberIdsInTeams): bool {
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
12958|            $abordagens = array_values(array_filter(
17673|            $abordagens = $this->loadAbordagensFullForPanel($dataCompany, $fromStr, $toStr);
26781|        $abordagens = $repo->findBy(['company' => $company]);

{"search_text": "$actionsTaken =", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 16
11935|        $actionsTaken = [];
12213|            $actionsTaken = $this->loadActionsForOccurrenceDetail($company, $detailOccurrenceId);
12248|                $actionsTaken = [];
12252|            $actionsTaken = [];
12256|                $actionsTaken = array_merge(
12373|                $actionsTaken = [];
12377|            $actionsTaken = $company ? $this->loadActions($company) : [];
12779|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
12797|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $areaMemberIds);
12801|            $actionsTaken = $this->filterActionsByResponsibleMemberIds(
12944|            $actionsTaken = $this->filterActionsForMember($actionsTaken, $occurrences, $currentMemberId);
16949|        $actionsTaken = [];
16952|            $actionsTaken = array_merge($actionsTaken, $this->loadActionsForPanel($scopeCompany));
16970|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
17122|            $actionsTaken = $panelData['actions_taken'];
17567|            $actionsTaken = $panelData['actions_taken'];

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function loadInspections"}

File: src/Controller/SsmaController.php
Match lines: 2
16237|    private function loadInspections(Company $company, array $allMembers, array $teams): array
22316|    private function loadInspectionsForPanel(Company $company, ?string $fromStr = null, ?string $toStr = null): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function loadAbordagens"}

File: src/Controller/SsmaController.php
Match lines: 3
13276|    private function loadAbordagens(Company $company): array
18065|    private function loadAbordagensFullForPanel(Company $company, ?string $fromStr = null, ?string $toStr = null): array
22412|    private function loadAbordagensForPanel(Company $company, ?string $fromStr = null, ?string $toStr = null): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "companion_ids AS|as companion_ids|'companion_ids'"}

No matches found

{"file_path": "src/Controller/SsmaController.php", "start_line": 12900, "end_line": 13100}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12900-13100
12900|        }
12901|
12902|        $loggedPreventionMemberId = ($company && $user instanceof User)
12903|            ? (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0)
12904|            : 0;
12905|        $loggedPreventionUserId = $user instanceof User ? (int) $user->getId() : 0;
12906|        if ($ssmaCanEditPreventionContent) {
12907|            foreach ($inspections as $inspIdx => $inspRow) {
12908|                if (!is_array($inspRow)) {
12909|                    continue;
12910|                }
12911|                $inspections[$inspIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
12912|                    || $this->preventionArrayOwnedByMember($inspRow, $loggedPreventionMemberId, $loggedPreventionUserId);
12913|            }
12914|            foreach ($abordagens as $abIdx => $abRow) {
12915|                if (!is_array($abRow)) {
12916|                    continue;
12917|                }
12918|                $abordagens[$abIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
12919|                    || $this->preventionArrayOwnedByMember($abRow, $loggedPreventionMemberId, $loggedPreventionUserId);
12920|            }
12921|        }
12922|
12923|        if (!$this->canManageSsmaOccurrences()
12924|            && !$ssmaIsTagTeamSupervisor
12925|            && !$ssmaIsTagAreaSupervisor
12926|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
12927|            && !$this->memberIsSsmaGestorAdministrador($company && $user instanceof User ? $this->getCurrentCompanyMember($company, $user) : null)
12928|            && $occurrenceTeamFilterIds === null
12929|            && $occurrenceAreaFilterIds === null
12930|            && $actionPlanAreaFilterIds === null
12931|            && !$isTechSpecialistOnly) {
12932|            $currentMember = $this->getCurrentCompanyMember($company, $user);
12933|            $currentMemberId = $currentMember?->getId() ?? 0;
12934|
12935|            $occurrences = $this->filterOccurrencesForMember($occurrences, $currentMemberId, $company);
12936|            if ($company instanceof Company && $user instanceof User && $currentMemberId > 0) {
12937|                $occurrences = $this->appendMissingActionLinkedOccurrences(
12938|                    $occurrences,
12939|                    $currentMemberId,
12940|                    $company,
12941|                    $user
12942|                );
12943|            }
12944|            $actionsTaken = $this->filterActionsForMember($actionsTaken, $occurrences, $currentMemberId);
12945|        }
12946|
12947|        // Membro/Inspetor (pessoa física): na Prevenção Ativa só vê inspeções/abordagens em que está relacionado.
12948|        // O filtro por equipe nas ocorrências não deve listar inspeções da equipe inteira para esses perfis.
12949|        // Aura/tenant/SUPER_ADMIN com tag Membro herdada NÃO entram aqui — senão o admin vê
12950|        // só o próprio conteúdo (ex.: 2 inspeções) enquanto o Gestor de Área vê o recorte da gerência (3).
12951|        if ($company && $user instanceof User && $ssmaIsPlainPreventionMember) {
12952|            $plainMemberId = (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0);
12953|            $plainUserId = (int) $user->getId();
12954|            $inspections = array_values(array_filter(
12955|                $inspections,
12956|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
12957|            ));
12958|            $abordagens = array_values(array_filter(
12959|                $abordagens,
12960|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
12961|            ));
12962|        }
12963|
12964|        if ($needsPreventionCollections) {
12965|            [$metaFromStr, $metaToStr] = $this->getPrevencaoPeriodDateBounds($metasPeriod);
12966|            [$inspectionsForMetas, $abordagensForMetas] = $this->filterCollectionsForMetasRealizado(
12967|                $inspections,
12968|                $abordagens,
12969|                $metaFromStr,
12970|                $metaToStr
12971|            );
12972|
12973|            // Cobertura KPI (abas Inspeção/Abordagem): mesma base da aba Metas (membro + período de referência).
12974|            $inspCoverage = $company
12975|                ? $this->computeInspectionMetaCoverage($company, $inspectionsForMetas, $teams, '', $metaFromStr, $metaToStr)
12976|                : ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
12977|
12978|            $abCoverage = $company
12979|                ? $this->computeAbordagemMetaCoverage($company, $abordagensForMetas, $teams, '', $metaFromStr, $metaToStr)
12980|                : ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
12981|
12982|            // Metas: usa membros filtrados por equipe para Sup/G. de Equipe (não mostrar toda a empresa).
12983|            // Para G. Admin/Tenant usa a lista completa.
12984|            $membersForMetas = (
12985|                ($occurrenceTeamFilterIds !== null && $allMembersForEventPeople !== [])
12986|                || $occurrenceAreaFilterIds !== null
12987|            )
12988|                ? $allMembersForEventPeople
12989|                : $allMembers;
12990|            $prevencaoMetasPessoa = $company
12991|                ? $this->buildPrevencaoPessoaMetasData(
12992|                    $company,
12993|                    $membersForMetas,
12994|                    $teams,
12995|                    $inspectionsForMetas,
12996|                    $abordagensForMetas,
12997|                    $this->buildSupervisorGestorMemberIdSet(),
12998|                    $metaFromStr,
12999|                    $metaToStr
13000|                )
13001|                : ['inspecao' => [], 'abordagem' => []];
13002|        }
13003|
13004|        $currentMemberForExport = $this->getCurrentCompanyMember($company, $user);
13005|        $ssmaExportMatricula = $currentMemberForExport?->getId() ?? '';
13006|        $ssmaCanDescharacterizeAccident = $company instanceof Company
13007|            && $this->ssmaMemberCanDescharacterizeAccident($company, $currentMemberForExport);
13008|
13009|        // Hub Ocorrências: SSR/AJAX por página (50). Se já hidratou via SQL, não fatia de novo.
13010|        if (!$occurrenceListAlreadyPaged) {
13011|            $occurrencesListTotal = count($occurrences);
13012|            $occurrencesListPage = $paginateOccurrenceList ? $scope->listPage : 1;
13013|            $occurrencesListHasMore = false;
13014|            if ($paginateOccurrenceList) {
13015|                $pageSize = SsmaViewDataScope::OCCURRENCE_LIST_PAGE_SIZE;
13016|                $offset = ($occurrencesListPage - 1) * $pageSize;
13017|                $occurrencesListHasMore = $occurrencesListTotal > ($offset + $pageSize);
13018|                $occurrences = array_slice($occurrences, $offset, $pageSize);
13019|            }
13020|        }
13021|
13022|        // Hub: não dumpa 3k–5k membros no HTML — só referenciados da página + gestores (busca via API).
13023|        if (
13024|            !$isOccurrenceDetailView
13025|            && $this->ssmaMemberSelectDataProvider->shouldFilterToReferencedMembers($scope)
13026|            && !$ssmaCanManagePermissions
13027|        ) {
13028|            $allMembers = $this->filterSsmaMembersToReferencedForDetail(
13029|                $allMembers,
13030|                $occurrences,
13031|                [],
13032|                $gestores
13033|            );
13034|            $allMembersForEventPeople = $this->filterSsmaMembersToReferencedForDetail(
13035|                $allMembersForEventPeople,
13036|                $occurrences,
13037|                [],
13038|                $gestoresForEventModal
13039|            );
13040|        }
13041|
13042|        $allMembers = $this->sortSsmaMemberRowsByName($allMembers);
13043|        $allMembersForEventPeople = $this->sortSsmaMemberRowsByName($allMembersForEventPeople);
13044|        $gestores = $this->sortSsmaMemberRowsByName($gestores);
13045|        $gestoresForEventModal = $this->sortSsmaMemberRowsByName($gestoresForEventModal);
13046|
13047|        $this->ssmaViewDataBuildTelemetry->logBuild(
13048|            $buildStartedAt,
13049|            $scope,
13050|            $company instanceof Company ? (int) $company->getId() : null
13051|        );
13052|
13053|        return array_merge(
13054|            [
13055|                'user'          => $user,
13056|                'role'          => $role,
13057|                'ssmaIsTenant'      => in_array('ROLE_SUPER_ADMIN', $roles, true) || in_array('ROLE_MANAGER', $roles, true),
13058|                'ssmaIsViewer'      => $this->isSsmaViewer(),
13059|                'ssmaIsTeamViewer'  => $ssmaIsTeamViewerFlag,
13060|                'ssmaCanManageOccurrences' => $ssmaCanManageOccurrences,
13061|                'ssma_hide_event_title_status_on_create' => $ssmaHideEventTitleStatusOnCreate,
13062|                'ssmaCanRegisterNewOccurrence' => $ssmaCanRegisterNewOccurrence,
13063|                'ssmaAllowedCreateTypes' => $ssmaAllowedCreateTypes,
13064|                'ssmaOccurrenceTypeColumns' => SsmaOccurrenceCreatePermissionService::TYPE_COLUMNS,
13065|                'ssmaPreventionInspectionEnabled' => $ssmaPreventionInspectionEnabled,
13066|                'ssmaPreventionAbordagemEnabled'  => $ssmaPreventionAbordagemEnabled,
13067|                'ssmaCanCreatePreventionItems' => $ssmaCanCreatePreventionItems,
13068|                'ssmaCanAccessSupervisorSurface' => $ssmaCanAccessSupervisorSurface,
13069|                'ssmaCanAccessPreventionPanelAndMetas' => $ssmaCanAccessPreventionPanelAndMetas,
13070|                'ssmaCanAccessOccurrencePanel' => $ssmaCanAccessOccurrencePanel,
13071|                'ssmaCanPublishCulturalFeed' => $company instanceof Company
13072|                    && $user instanceof User
13073|                    && $this->ssmaFeedImprovementBridge->canManageFeedImprovements($user, $company),
13074|                'ssmaCanAccessOccurrenceAutomations' => $ssmaCanAccessOccurrenceAutomations,
13075|                'ssmaCanManageConfig' => $ssmaCanManageConfig,
13076|                'ssmaCanManagePermissions' => $ssmaCanManagePermissions,
13077|                'ssmaCanCreateLinkedActions' => $ssmaCanCreateLinkedActions,
13078|                'ssmaPreventionCanCreateLinkedActions' => $ssmaPreventionCanCreateLinkedActions,
13079|                'ssmaCanEditPreventionContent' => $ssmaCanEditPreventionContent,
13080|                'ssmaCanEditPreventionMetasTable' => $ssmaCanEditPreventionMetasTable,
13081|                'ssmaCanCreateCauseTree' => $ssmaCanCreateCauseTree,
13082|                'ssmaCanViewCauseTree'   => $ssmaCanViewCauseTree,
13083|                'ssmaCanCreateAuthorization' => $ssmaCanCreateAuthorization,
13084|                'ssmaCanEditHorasTrabalhadas' => $ssmaCanEditHorasTrabalhadas,
13085|                'ssmaCanViewAccidentVictimName' => $this->isGranted('ROLE_SUPER_ADMIN')
13086|                    || $this->isGranted('ROLE_MANAGER')
13087|                    || $this->isGranted('ROLE_MANAGER_GESTOR')
13088|                    || $ssmaProductTagName === 'Gestor Administrador'
13089|                    || $ssmaIsTagTeamSupervisor
13090|                    || $ssmaIsTagTeamGestor
13091|                    || $ssmaIsTagAreaSupervisor
13092|                    || $ssmaIsTagAreaGestor
13093|                    || $this->isSsmaViewer(),
13094|                'gestores'      => $gestores,
13095|                'teams'       => $teams,
13096|                'gestores_for_event_modal' => $gestoresForEventModal,
13097|                'teams_for_event_modal' => $teamsForEventModal,
13098|                'teams_for_inspection_modal' => $teamsForInspectionModal,
13099|                'default_inspection_team_id' => $defaultInspectionTeamId,
13100|                'all_members_for_event_people' => $allMembersForEventPeople,

{"file_path": "src/Controller/SsmaController.php", "start_line": 11900, "end_line": 12060}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 11900-12060
11900|     *     - module=occurrence: hub Ocorrências — sem abordagens/metas de prevenção (evita 504 na listagem).
11901|     *     - module=prevention: hub Prevenção — carrega inspeções/abordagens/metas.
11902|     *     - omitido/full: comportamento completo (plano de ação, autorizações, etc.).
11903|     */
11904|    private function buildSsmaViewData(?array $detailScope = null): array
11905|    {
11906|        $scope = SsmaViewDataScope::fromDetailScope($detailScope);
11907|        $buildStartedAt = microtime(true);
11908|
11909|        /** @var User|null $user */
11910|        $user = $this->getUser();
11911|        $role = 'user';
11912|        $roles = $user ? $user->getRoles() : [];
11913|
11914|        if (in_array('ROLE_SUPER_ADMIN', $roles, true)) {
11915|            $role = 'superAdmin';
11916|        } elseif (in_array('ROLE_MANAGER', $roles, true)) {
11917|            $role = 'manager';
11918|        }
11919|
11920|        $company = $this->getSsmaCompany();
11921|        $detailOccurrenceId = $scope->occurrenceId;
11922|        $isOccurrenceDetailView = $scope->isOccurrenceDetailView;
11923|        $module = $scope->module;
11924|        $needsPreventionCollections = $scope->needsPreventionCollections();
11925|        $memberLoadMode = $this->ssmaMemberSelectDataProvider->resolveLoadMode($scope);
11926|        $deferOccurrenceHubHeavyData = $scope->shouldDeferOccurrenceHubPanelData();
11927|        $paginateOccurrenceList = $scope->shouldPaginateOccurrenceList();
11928|
11929|        // Sempre inicializa — evita 500 por variável indefinida em qualquer ramo.
11930|        $occurrences = [];
11931|        $occurrencesListTotal = 0;
11932|        $occurrencesListHasMore = false;
11933|        $occurrencesListPage = 1;
11934|        $occurrenceListAlreadyPaged = false;
11935|        $actionsTaken = [];
11936|        $inspections = [];
11937|        $abordagens = [];
11938|        $horasData = [];
11939|        $membersForMetas = [];
11940|        $inspCoverage = ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
11941|        $abCoverage = ['pct' => null, 'meta_total' => 0, 'real_total' => 0];
11942|        $prevencaoMetasPessoa = ['inspecao' => [], 'abordagem' => []];
11943|
11944|        $request = $this->requestStack->getCurrentRequest();
11945|        // Default: mês atual (a meta é contabilizada no mês/meta mensal por padrão).
11946|        $metasPeriod = 'last_month';
11947|        if ($request) {
11948|            $qPeriod = (string) $request->query->get('meta_period', 'last_month');
11949|            if (
11950|                in_array($qPeriod, ['total', 'last_week', 'last_month', 'last_3_months', 'last_6_months', 'last_year'], true)
11951|                || preg_match('/^range:\\d{4}-\\d{2}-\\d{2}:\\d{4}-\\d{2}-\\d{2}$/', $qPeriod)
11952|            ) {
11953|                $metasPeriod = $qPeriod;
11954|            }
11955|        }
11956|
11957|        $gestores = [];
11958|        $teams = [];
11959|        $allMembers = [];
11960|        /** Pré-selecionar Observador na Abordagem quando o usuário logado é um CompanyMember da empresa */
11961|        $defaultAbordagemObservadorId = null;
11962|        $companyMembers = [];
11963|        $teamNameByMemberId = [];
11964|
11965|        if ($company) {
11966|            if ($memberLoadMode === SsmaMemberSelectDataProvider::LOAD_MODE_LITE) {
11967|                // Detalhe: lista lite (sem turnos / hierarquia de área) — evita 504 em empresas grandes.
11968|                [$allMembers, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
11969|                $companyMembers = $this->entityManager->getRepository(CompanyMembers::class)
11970|                    ->findBy(['company' => $company, 'isRemoved' => 0]);
11971|                foreach ($companyMembers as $member) {
11972|                    $memberUser = $member->getUser();
11973|                    if ($this->isSsmaExcludedTenantAdminUser($memberUser)) {
11974|                        continue;
11975|                    }
11976|                    if (!$memberUser || !in_array('ROLE_MANAGER_GESTOR', $memberUser->getRoles(), true)) {
11977|                        continue;
11978|                    }
11979|                    $name = $this->ssmaMemberDisplayLabel($member);
11980|                    if ($name === '') {
11981|                        $name = (string) ($member->getEmail() ?? '');
11982|                    }
11983|                    if ($name === '' && $member->getEmail() === null) {
11984|                        continue;
11985|                    }
11986|                    $roleMember = $member->getRoleMember();
11987|                    $gestores[] = [
11988|                        'id'       => $member->getId(),
11989|                        'name'     => $name,
11990|                        'email'    => $member->getEmail(),
11991|                        'avatar'   => $memberUser->getAvatar(),
11992|                        'position' => $roleMember ? (string) $roleMember->getName() : '',
11993|                        'area'     => '',
11994|                    ];
11995|                }
11996|                foreach ($teams as $teamRow) {
11997|                    foreach ($teamRow['members'] as $teamMemberId) {
11998|                        $teamMemberId = (int) $teamMemberId;
11999|                        if ($teamMemberId > 0 && !isset($teamNameByMemberId[$teamMemberId])) {
12000|                            $teamNameByMemberId[$teamMemberId] = (string) ($teamRow['name'] ?? '');
12001|                        }
12002|                    }
12003|                }
12004|                $allMembers = $this->enrichSsmaMemberRowsWithTeamMeta($allMembers, $teamNameByMemberId);
12005|            } else {
12006|            $companyMembers = $this->entityManager->getRepository(CompanyMembers::class)
12007|                ->findBy(['company' => $company, 'isRemoved' => 0]);
12008|
12009|            foreach ($companyMembers as $member) {
12010|                $memberUser = $member->getUser();
12011|                $name = $this->ssmaMemberDisplayLabel($member);
12012|                if ($name === '') {
12013|                    $name = (string) ($member->getEmail() ?? '');
12014|                }
12015|                $email = $member->getEmail();
12016|
12017|                if (!$name && !$email) {
12018|                    continue;
12019|                }
12020|
12021|                $roleMember = $member->getRoleMember();
12022|                // Tenant / admin da empresa: fora de todos os selects e listas de membros SSMA.
12023|                if ($memberUser && $this->isSsmaExcludedTenantAdminUser($memberUser)) {
12024|                    continue;
12025|                }
12026|                $superior = $member->getSuperior();
12027|                $superiorName = '';
12028|                if ($superior instanceof CompanyMembers) {
12029|                    $superiorName = $this->ssmaMemberDisplayLabel($superior);
12030|                    if ($superiorName === '') {
12031|                        $superiorName = (string) ($superior->getEmail() ?? '');
12032|                    }
12033|                }
12034|                // Só o primeiro nível da hierarquia (Gerência) — subgerência não entra no card.
12035|                // Fallback: se não houver raiz, usa o departamento direto do membro.
12036|                $rootAreaName = $this->resolveSsmaMemberRootAreaName($member);
12037|                if ($rootAreaName === '') {
12038|                    $dept = $member->getDepartment();
12039|                    if ($dept instanceof CompanyArea) {
12040|                        $rootAreaName = Utf8MojibakeNormalizer::normalize(trim((string) ($dept->getName() ?? '')));
12041|                    }
12042|                }
12043|                $vincPresentation = $this->ssmaMemberVinculoPresentation($member);
12044|                $positionName = $roleMember ? trim((string) $roleMember->getName()) : '';
12045|                if ($positionName === '') {
12046|                    $positionName = trim((string) ($member->getRole() ?? ''));
12047|                }
12048|                $memberAreaIds = $this->parseCompanyMemberAreaIds($member);
12049|
12050|                $allMembers[] = [
12051|                    'id'         => $member->getId(),
12052|                    'name'       => $name,
12053|                    'email'      => $email,
12054|                    'avatar'     => $memberUser ? $memberUser->getAvatar() : null,
12055|                    'position'   => $positionName,
12056|                    'role_id'    => $roleMember ? (int) $roleMember->getId() : null,
12057|                    'area_id'    => $memberAreaIds[0] ?? null,
12058|                    'area_ids'   => $memberAreaIds,
12059|                    'area'       => $rootAreaName,
12060|                    'gerencia'   => $rootAreaName,

{"file_path": "src/Controller/SsmaController.php", "start_line": 12200, "end_line": 12390}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12200-12390
12200|
12201|        $actionTypeMetadata = $this->getActionTypeMetadata();
12202|        $subsidiaryViewEarly = $company ? $this->buildSsmaSubsidiaryViewData($company) : [];
12203|        $isNetworkHeadWithUnits = ($subsidiaryViewEarly['ssma_is_network_head'] ?? false)
12204|            && ($subsidiaryViewEarly['ssma_has_network_units'] ?? false);
12205|
12206|        if ($isOccurrenceDetailView && $company) {
12207|            $occurrences = $this->loadOccurrenceListRowsForDetailView(
12208|                $company,
12209|                $detailOccurrenceId,
12210|                $allMembers,
12211|                $teams
12212|            );
12213|            $actionsTaken = $this->loadActionsForOccurrenceDetail($company, $detailOccurrenceId);
12214|            $inspections = [];
12215|            $abordagens = [];
12216|            $horasData = [];
12217|            // Fase B: SSR do detalhe só com membros referenciados (+ gestores do modal).
12218|            if ($this->ssmaMemberSelectDataProvider->shouldFilterToReferencedMembers($scope)) {
12219|                $allMembers = $this->filterSsmaMembersToReferencedForDetail(
12220|                    $allMembers,
12221|                    $occurrences,
12222|                    $actionsTaken,
12223|                    $gestores
12224|                );
12225|            }
12226|        } elseif ($isNetworkHeadWithUnits && $company) {
12227|            $occurrences = $this->loadNetworkOccurrencesForList($company);
12228|            foreach ($this->resolveSsmaNetworkSubsidiaries($company) as $netCompany) {
12229|                if ((int) $netCompany->getId() === (int) $company->getId()) {
12230|                    continue;
12231|                }
12232|                [$extraMembers, $extraTeams] = $this->loadCompanyMembersAndTeamsLite($netCompany);
12233|                $teamNameByMemberId = [];
12234|                foreach ($extraTeams as $teamRow) {
12235|                    foreach ($teamRow['members'] as $teamMemberId) {
12236|                        $teamMemberId = (int) $teamMemberId;
12237|                        if ($teamMemberId > 0 && !isset($teamNameByMemberId[$teamMemberId])) {
12238|                            $teamNameByMemberId[$teamMemberId] = (string) ($teamRow['name'] ?? '');
12239|                        }
12240|                    }
12241|                }
12242|                foreach ($this->enrichSsmaMemberRowsWithTeamMeta($extraMembers, $teamNameByMemberId) as $extraMember) {
12243|                    $allMembers[] = $extraMember;
12244|                }
12245|            }
12246|            $networkCompanies = $this->resolveSsmaNetworkSubsidiaries($company);
12247|            if ($deferOccurrenceHubHeavyData) {
12248|                $actionsTaken = [];
12249|                $inspections = [];
12250|                $horasData = [];
12251|            } else {
12252|            $actionsTaken = [];
12253|            $inspections  = [];
12254|            foreach ($networkCompanies as $netCompany) {
12255|                [$netMembers, $netTeams] = $this->loadCompanyMembersAndTeamsLite($netCompany);
12256|                $actionsTaken = array_merge(
12257|                    $actionsTaken,
12258|                    $this->loadActions($netCompany)
12259|                );
12260|                $inspections = array_merge(
12261|                    $inspections,
12262|                    $this->loadInspections($netCompany, $netMembers, $netTeams)
12263|                );
12264|            }
12265|            $horasData = $this->mergeHorasDataForNetworkCompanies($networkCompanies);
12266|            }
12267|        } else {
12268|            $occurrenceListAlreadyPaged = false;
12269|            if ($company && $paginateOccurrenceList) {
12270|                $teamFilterEarly = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user instanceof User ? $user : null);
12271|                $canManageEarly = $this->canManageSsmaOccurrences();
12272|                $isViewerEarly = $this->isSsmaViewer();
12273|                $userTechnicalTypesEarly = $this->resolveUserTechnicalTypes($company, $user, $companyMembers ?? []);
12274|                // Não exige !$canManageEarly: can_create de Membro / ROLE_* de plataforma
12275|                // não pode zerar a lista quando o escopo de equipe é [] (técnico por tipo).
12276|                $isTechEarly = !$isViewerEarly
12277|                    && $teamFilterEarly === []
12278|                    && $userTechnicalTypesEarly !== [];
12279|                $needsOccurrencePostFilter = ($teamFilterEarly !== null && !$isTechEarly)
12280|                    || $isTechEarly
12281|                    || (!$canManageEarly && !$isViewerEarly && $teamFilterEarly === null && !$isTechEarly);
12282|
12283|                $pageSize = SsmaViewDataScope::OCCURRENCE_LIST_PAGE_SIZE;
12284|                $occurrencesListPage = $scope->listPage;
12285|                $offset = ($occurrencesListPage - 1) * $pageSize;
12286|
12287|                if (!$needsOccurrencePostFilter) {
12288|                    // Visão completa: hidrata só a página pedida (SQL UNION + findBy ids).
12289|                    $occurrencesListTotal = $this->countCompanyOccurrencesAndEvents($company);
12290|                    $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset);
12291|                    $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12292|                    $occurrenceListAlreadyPaged = true;
12293|                } elseif ($isTechEarly && $userTechnicalTypesEarly !== []) {
12294|                    // Técnico especialista: pagina direto em SQL filtrando por tipo — evita
12295|                    // carregar todas as ocorrências da empresa (timeout em bases grandes).
12296|                    $occurrencesListTotal = $this->countCompanyOccurrencesAndEventsByTypes($company, $userTechnicalTypesEarly);
12297|                    $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset, $userTechnicalTypesEarly);
12298|                    $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12299|                    $occurrenceListAlreadyPaged = true;
12300|                } else {
12301|                    // Supervisor com equipe / membro regular: precisa de pós-filtro PHP.
12302|                    // Para supervisores com equipe: aplica filtro SQL (team_id, manager_id) e pagina
12303|                    // diretamente via LIMIT/OFFSET — evita carregar/hidratar N mil entidades.
12304|                    if ($teamFilterEarly !== null) {
12305|                        $teamIdInts = array_values(array_unique(array_map('intval', $teamFilterEarly)));
12306|                        $memberIdsForTeam = [];
12307|                        foreach ($teams as $tmEntry) {
12308|                            if (in_array((int) ($tmEntry['id'] ?? -1), $teamIdInts, true)) {
12309|                                foreach ($tmEntry['members'] ?? [] as $tmMid) {
12310|                                    $memberIdsForTeam[] = (int) $tmMid;
12311|                                }
12312|                            }
12313|                        }
12314|                        // Supervisor sem equipe atribuída: adiciona próprio membro para ver onde é gestor/envolvido.
12315|                        if ($teamIdInts === []) {
12316|                            $selfMWin = $user instanceof User ? $this->getCurrentCompanyMember($company, $user) : null;
12317|                            $selfMIdWin = (int) ($selfMWin?->getId() ?? 0);
12318|                            if ($selfMIdWin > 0) {
12319|                                $memberIdsForTeam[] = $selfMIdWin;
12320|                            }
12321|                        }
12322|                        $memberIdsForTeam = array_values(array_unique($memberIdsForTeam));
12323|
12324|                        if ($teamIdInts !== [] || $memberIdsForTeam !== []) {
12325|                            // SQL paginado com filtro de equipe: carrega exatamente $pageSize registros.
12326|                            $occurrencesListTotal = $this->countCompanyOccurrencesForTeam($company, $teamIdInts, $memberIdsForTeam);
12327|                            $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset, [], $teamIdInts, $memberIdsForTeam);
12328|                            $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12329|                            $occurrenceListAlreadyPaged = true;
12330|                        } else {
12331|                            // Sem IDs concretos: cap conservador; PHP post-filter aplicará depois.
12332|                            $occurrences = $this->loadOccurrences($company, $allMembers, $teams, 500);
12333|                        }
12334|                    } else {
12335|                        // Membro regular (teamFilter=null): cap 500 para evitar OOM; PHP post-filter após.
12336|                        $occurrences = $this->loadOccurrences($company, $allMembers, $teams, 500);
12337|                    }
12338|                }
12339|            } else {
12340|                $occurrences = $company ? $this->loadOccurrences($company, $allMembers, $teams) : [];
12341|            }
12342|            if ($occurrences !== []) {
12343|                // Sempre anexa cause_tree_id na página atual (UX: botão Causa aparece no SSR).
12344|                // Painel/inspeções/horas continuam deferred; só o mapa de árvores volta no hub.
12345|                if ($company instanceof Company) {
12346|                    $itemsForTrees = [];
12347|                    foreach ($occurrences as $occRow) {
12348|                        $entityId = (int) ($occRow['id'] ?? 0);
12349|                        if ($entityId <= 0) {
12350|                            continue;
12351|                        }
12352|                        $itemsForTrees[] = [
12353|                            'id' => $entityId,
12354|                            'is_ssma_event' => !empty($occRow['is_ssma_event']),
12355|                        ];
12356|                    }
12357|                    if ($itemsForTrees !== []) {
12358|                        $treeMeta = $this->ssmaCauseTreeService->resolveEntityTreeMetaBatch(
12359|                            (int) $company->getId(),
12360|                            $itemsForTrees
12361|                        );
12362|                        foreach ($occurrences as $idx => $occRow) {
12363|                            $entityId = (int) ($occRow['id'] ?? 0);
12364|                            $key = (!empty($occRow['is_ssma_event']) ? 'e:' : 'o:') . $entityId;
12365|                            $occurrences[$idx]['cause_tree_id'] = $treeMeta[$key]['cause_tree_id'] ?? null;
12366|                        }
12367|                    }
12368|                }
12369|                $occurrences = $this->enrichOccurrencesCommitteeTriggerFlags($occurrences, $company);
12370|                $occurrences = $this->enrichOccurrencesGravityLabels($occurrences);
12371|            }
12372|            if ($deferOccurrenceHubHeavyData) {
12373|                $actionsTaken = [];
12374|                $inspections = [];
12375|                $horasData = [];
12376|            } else {
12377|            $actionsTaken = $company ? $this->loadActions($company) : [];
12378|            $inspections  = $company ? $this->loadInspections($company, $allMembers, $teams) : [];
12379|            $horasData    = $company ? $this->loadHorasData($company) : [];
12380|            }
12381|        }
12382|        if ($needsPreventionCollections) {
12383|            $abordagens = $company ? $this->loadAbordagens($company) : [];
12384|        }
12385|        $occurrenceUiMeta = $this->getMockOccurrenceMetadata();
12386|
12387|        $userTechnicalTypes = $company
12388|            ? $this->resolveUserTechnicalTypes($company, $user, $companyMembers ?? [])
12389|            : [];
12390|        $ssmaCanManageOccurrences = $this->canManageSsmaOccurrences();

{"file_path": "src/Controller/SsmaController.php", "end_line": 16440, "start_line": 16237}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 16237-16440
16237|    private function loadInspections(Company $company, array $allMembers, array $teams): array
16238|    {
16239|        $em = $this->entityManager;
16240|
16241|        /** @var SsmaInspection[] $rows */
16242|        $rows = $em->createQuery(
16243|            'SELECT i, t, sr
16244|             FROM App\Entity\SsmaInspection i
16245|             LEFT JOIN i.team t
16246|             LEFT JOIN i.safetyResponsible sr
16247|             WHERE i.company = :company
16248|             ORDER BY i.createdAt DESC'
16249|        )
16250|        ->setParameter('company', $company)
16251|        ->getResult();
16252|
16253|        if ($rows === []) {
16254|            return [];
16255|        }
16256|
16257|        $devCounts = $em->createQuery(
16258|            'SELECT IDENTITY(d.inspection) AS iid, COUNT(d.id) AS cnt
16259|             FROM App\Entity\SsmaInspectionDeviation d
16260|             WHERE d.inspection IN (:ids)
16261|             GROUP BY d.inspection'
16262|        )
16263|        ->setParameter('ids', $rows)
16264|        ->getResult();
16265|
16266|        $strCounts = $em->createQuery(
16267|            'SELECT IDENTITY(s.inspection) AS iid, COUNT(s.id) AS cnt
16268|             FROM App\Entity\SsmaInspectionStrength s
16269|             WHERE s.inspection IN (:ids)
16270|             GROUP BY s.inspection'
16271|        )
16272|        ->setParameter('ids', $rows)
16273|        ->getResult();
16274|
16275|        $devCountById = array_column($devCounts, 'cnt', 'iid');
16276|        $strCountById = array_column($strCounts, 'cnt', 'iid');
16277|
16278|        $gmrByInspectionId = [];
16279|        $gmrRows = $em->createQuery(
16280|            'SELECT IDENTITY(d.inspection) AS iid, d.gmr AS gmr
16281|             FROM App\Entity\SsmaInspectionDeviation d
16282|             WHERE d.inspection IN (:ids)
16283|               AND d.gmr IS NOT NULL
16284|             ORDER BY d.id ASC'
16285|        )
16286|        ->setParameter('ids', $rows)
16287|        ->getResult();
16288|        foreach ($gmrRows as $gmrRow) {
16289|            $iid = (int) ($gmrRow['iid'] ?? 0);
16290|            if ($iid <= 0 || isset($gmrByInspectionId[$iid])) {
16291|                continue;
16292|            }
16293|            $gmrValue = trim((string) ($gmrRow['gmr'] ?? ''));
16294|            if ($gmrValue !== '') {
16295|                $gmrByInspectionId[$iid] = $gmrValue;
16296|            }
16297|        }
16298|
16299|        // '' = sentinel: batch rodou e não achou GMR → serializeInspection não faz lazy load.
16300|        // null = sem batch (chamadas avulsas) → lazy load permitido.
16301|        foreach ($rows as $row) {
16302|            $id = $row->getId();
16303|            if (!isset($gmrByInspectionId[$id])) {
16304|                $gmrByInspectionId[$id] = '';
16305|            }
16306|        }
16307|
16308|        $membersById = array_column($allMembers, null, 'id');
16309|        $responsibleMembers = array_values(array_filter(array_map(
16310|            static fn (SsmaInspection $inspection): ?CompanyMembers => $inspection->getSafetyResponsible(),
16311|            $rows
16312|        )));
16313|        $managementByResponsibleId = $this->ssmaMemberOrganizationalManagementResolver
16314|            ->resolveForMembers($company, $responsibleMembers);
16315|
16316|        $result = [];
16317|        foreach ($rows as $row) {
16318|            $id = $row->getId();
16319|            $result[] = $this->serializeInspection(
16320|                $row,
16321|                $membersById,
16322|                (int) ($devCountById[$id] ?? 0),
16323|                (int) ($strCountById[$id] ?? 0),
16324|                $gmrByInspectionId[$id],
16325|                $managementByResponsibleId[$row->getSafetyResponsible()?->getId()] ?? ''
16326|            );
16327|        }
16328|
16329|        return $result;
16330|    }
16331|
16332|    /**
16333|     * @return list<array{action: SsmaAction, memberIds: list<int>}>
16334|     */
16335|    private function applyInspectionData(SsmaInspection $inspection, array $data): array
16336|    {
16337|        $executorNotifications = [];
16338|        // TODO: Centralize any future inspection business rules here when the final back-end model is ready.
16339|        $inspection->setTitle(!empty($data['title']) ? trim((string) $data['title']) : null);
16340|        $inspection->setInspectionDate(new \DateTime((string) $data['inspection_date']));
16341|        $inspection->setObservations($data['observations'] ?? null);
16342|        $participantIds = array_values(array_filter(array_map('intval', (array) ($data['participants_ids'] ?? []))));
16343|        $companionIds = array_values(array_filter(array_map('intval', (array) ($data['companion_ids'] ?? []))));
16344|        $inspection->setParticipantsIds($participantIds);
16345|        $inspection->setCompanionIds($companionIds);
16346|        $companionNotes = isset($data['companion_notes']) ? trim((string) $data['companion_notes']) : null;
16347|        $inspection->setCompanionNotes($companionNotes !== '' ? $companionNotes : null);
16348|        $location = isset($data['location']) ? trim((string) $data['location']) : null;
16349|        $inspection->setLocation($location !== '' ? $location : null);
16350|        $inspectionType = isset($data['inspection_type']) ? trim((string) $data['inspection_type']) : null;
16351|        $inspection->setType($inspectionType !== '' ? $inspectionType : null);
16352|        $responsibleId = !empty($data['safety_responsible_id']) ? (int) $data['safety_responsible_id'] : null;
16353|        $teamId = !empty($data['team_id']) ? (int) $data['team_id'] : null;
16354|
16355|        if ($responsibleId === null && $participantIds !== []) {
16356|            $responsibleId = $participantIds[0];
16357|        }
16358|        if ($responsibleId === null && $companionIds !== []) {
16359|            $responsibleId = $companionIds[0];
16360|        }
16361|
16362|        $responsibleMember = null;
16363|        if ($responsibleId !== null && $responsibleId > 0) {
16364|            $responsibleMember = $this->entityManager->find(CompanyMembers::class, $responsibleId);
16365|        }
16366|
16367|        if ($teamId === null && $responsibleMember instanceof CompanyMembers) {
16368|            $memberTeamIds = $this->parseCompanyMemberTeamIds($responsibleMember);
16369|            if ($memberTeamIds !== []) {
16370|                $teamId = (int) $memberTeamIds[0];
16371|            }
16372|        }
16373|
16374|        $inspection->setSafetyResponsible(null);
16375|        $inspection->setTeam(null);
16376|
16377|        if ($responsibleMember instanceof CompanyMembers) {
16378|            $inspection->setSafetyResponsible($responsibleMember);
16379|        }
16380|
16381|        if ($teamId !== null && $teamId > 0) {
16382|            $team = $this->entityManager->find(CompanyTeam::class, $teamId);
16383|            $inspection->setTeam($team);
16384|        }
16385|
16386|        // TODO: Replace this full reset strategy if the final back-end requires diff-based child updates.
16387|        foreach ($inspection->getDeviations()->toArray() as $deviation) {
16388|            $inspection->getDeviations()->removeElement($deviation);
16389|            $this->entityManager->remove($deviation);
16390|        }
16391|
16392|        $primaryInspectionGmr = null;
16393|        foreach ((array) ($data['deviations'] ?? []) as $dev) {
16394|            $deviation = new SsmaInspectionDeviation();
16395|            $deviation->setTitle((string) ($dev['title'] ?? ''));
16396|            $deviation->setCorrectiveAction($dev['corrective_action'] ?? null);
16397|            $deviation->setEvidenceNames((array) ($dev['evidence_names'] ?? []));
16398|            $deviation->setDeviationType(!empty($dev['deviation_type']) ? (string) $dev['deviation_type'] : null);
16399|            $deviation->setLocationLabel(!empty($dev['location_label']) ? (string) $dev['location_label'] : null);
16400|            $deviation->setSituation(null);
16401|            $deviation->setClassification(!empty($dev['classification']) ? (array) $dev['classification'] : null);
16402|            $deviation->setProbableCause(!empty($dev['probable_cause']) ? (array) $dev['probable_cause'] : null);
16403|            $deviation->setCriticality(!empty($dev['criticidade']) ? (string) $dev['criticidade'] : null);
16404|            $devGmr = !empty($dev['gmr']) ? trim((string) $dev['gmr']) : null;
16405|            $deviation->setGmr($devGmr !== '' ? $devGmr : null);
16406|            if ($primaryInspectionGmr === null && $devGmr !== null && $devGmr !== '') {
16407|                $primaryInspectionGmr = $devGmr;
16408|            }
16409|
16410|            if (!empty($dev['start_date'])) {
16411|                $deviation->setStartDate(new \DateTime($dev['start_date']));
16412|            }
16413|            if (!empty($dev['end_date'])) {
16414|                $deviation->setEndDate(new \DateTime($dev['end_date']));
16415|            }
16416|            if (!empty($dev['responsible_id'])) {
16417|                $resp = $this->entityManager->find(CompanyMembers::class, (int) $dev['responsible_id']);
16418|                $deviation->setResponsible($resp);
16419|            }
16420|
16421|            $correctiveActionsRaw = is_array($dev['corrective_actions'] ?? null) ? $dev['corrective_actions'] : [];
16422|            $correctiveActions = $this->normalizeSsmaCorrectiveActions($correctiveActionsRaw);
16423|            foreach ($correctiveActions as $i => $ca) {
16424|                if (isset($correctiveActionsRaw[$i]['action_id']) && $correctiveActionsRaw[$i]['action_id'] !== '') {
16425|                    $correctiveActions[$i]['action_id'] = (int) $correctiveActionsRaw[$i]['action_id'];
16426|                }
16427|            }
16428|
16429|            // Legado: campo único "Ação Corretiva" + visto/prazo/responsável (inspeções antigas).
16430|            if ($correctiveActions === []) {
16431|                $legacyDesc = trim((string) ($dev['corrective_action'] ?? ''));
16432|                $legacyVisto = !empty($dev['visto_resolvido']) && $dev['visto_resolvido'] !== false;
16433|                $legacyDeadline = trim((string) ($dev['action_deadline'] ?? ''));
16434|                $legacyResp = isset($dev['action_responsible_id']) && $dev['action_responsible_id'] !== ''
16435|                    ? (int) $dev['action_responsible_id']
16436|                    : null;
16437|                $legacyHierarchy = trim((string) ($dev['action_hierarchy'] ?? ''));
16438|                $legacyActionId = !empty($dev['action_id']) ? (int) $dev['action_id'] : null;
16439|                if ($legacyDesc !== '' || $legacyVisto || $legacyDeadline !== '' || $legacyResp || $legacyHierarchy !== '' || $legacyActionId) {
16440|                    $correctiveActions = [[

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function serializeInspection"}

File: src/Controller/SsmaController.php
Match lines: 2
16572|    private function serializeInspection(
24259|    private function serializeInspectionDetail(SsmaInspection $inspection): array

{"end_line": 16680, "file_path": "src/Controller/SsmaController.php", "start_line": 16572}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 16572-16680
16572|    private function serializeInspection(
16573|        SsmaInspection $inspection,
16574|        array $membersById = [],
16575|        int $deviationsCount = -1,
16576|        int $strengthsCount = -1,
16577|        ?string $deviationGmrFallback = null,
16578|        ?string $managementOfResponsible = null,
16579|    ): array
16580|    {
16581|        $responsible = $inspection->getSafetyResponsible();
16582|        $participantIds = $inspection->getParticipantsIds();
16583|        $responsibleName = '';
16584|        if ($responsible instanceof CompanyMembers) {
16585|            $responsibleName = $this->ssmaMemberDisplayLabel($responsible);
16586|            if ($responsibleName === '') {
16587|                $responsibleName = (string) ($membersById[$responsible->getId()]['name'] ?? '');
16588|            }
16589|        }
16590|        if ($responsibleName === '') {
16591|            $responsibleName = '—';
16592|        }
16593|        if ($managementOfResponsible === null && $responsible instanceof CompanyMembers) {
16594|            $managementOfResponsible = $this->ssmaMemberOrganizationalManagementResolver
16595|                ->resolveForMembers($inspection->getCompany(), [$responsible])[$responsible->getId()] ?? '';
16596|        }
16597|
16598|        $teamName = trim((string) ($inspection->getTeam()?->getName() ?? ''));
16599|        if ($teamName === '' && $responsible instanceof CompanyMembers) {
16600|            $memberTeamIds = $this->parseCompanyMemberTeamIds($responsible);
16601|            if ($memberTeamIds !== []) {
16602|                $fallbackTeam = $this->entityManager->find(CompanyTeam::class, (int) $memberTeamIds[0]);
16603|                $teamName = trim((string) ($fallbackTeam?->getName() ?? ''));
16604|            }
16605|        }
16606|        if ($teamName === '' && $participantIds !== []) {
16607|            $participantMember = $this->entityManager->find(CompanyMembers::class, (int) $participantIds[0]);
16608|            if ($participantMember instanceof CompanyMembers) {
16609|                $memberTeamIds = $this->parseCompanyMemberTeamIds($participantMember);
16610|                if ($memberTeamIds !== []) {
16611|                    $fallbackTeam = $this->entityManager->find(CompanyTeam::class, (int) $memberTeamIds[0]);
16612|                    $teamName = trim((string) ($fallbackTeam?->getName() ?? ''));
16613|                }
16614|            }
16615|        }
16616|        if ($teamName === '') {
16617|            $teamName = '—';
16618|        }
16619|
16620|        $title = $inspection->getTitle();
16621|        if ($title === null || trim($title) === '') {
16622|            $title = 'Inspeção ' . $inspection->getInspectionDate()->format('d/m/Y');
16623|        }
16624|
16625|        $participantNames = array_values(array_filter(array_map(
16626|            static fn ($pid) => $membersById[$pid]['name'] ?? null,
16627|            $participantIds
16628|        )));
16629|
16630|        $statusValue = $inspection->getStatus() ?? 'aberta';
16631|
16632|        $companionIds = $inspection->getCompanionIds();
16633|        $companionNames = array_values(array_filter(array_map(
16634|            static fn ($cid) => $membersById[$cid]['name'] ?? null,
16635|            $companionIds
16636|        )));
16637|
16638|        $gmr = trim((string) ($inspection->getGmr() ?? ''));
16639|        if ($gmr === '') {
16640|            if ($deviationGmrFallback !== null) {
16641|                // Batch forneceu resultado ('' = sem GMR nos desvios, string = GMR encontrado).
16642|                $gmr = trim($deviationGmrFallback);
16643|            } else {
16644|                // Chamada avulsa (create/update/finalize) — lazy load permitido.
16645|                foreach ($inspection->getDeviations() as $deviation) {
16646|                    $devGmr = trim((string) ($deviation->getGmr() ?? ''));
16647|                    if ($devGmr !== '') {
16648|                        $gmr = $devGmr;
16649|                        break;
16650|                    }
16651|                }
16652|            }
16653|        }
16654|
16655|        return [
16656|            'id'                      => $inspection->getId(),
16657|            'title'                   => $title,
16658|            'inspection_date'         => $inspection->getInspectionDate()->format('Y-m-d'),
16659|            'inspection_date_label'   => $inspection->getInspectionDate()->format('d/m/Y'),
16660|            'safety_responsible_id'   => $responsible?->getId(),
16661|            'safety_responsible_name' => $responsibleName,
16662|            'responsible_management'  => $managementOfResponsible ?? '',
16663|            'team_id'                 => $inspection->getTeam()?->getId(),
16664|            'team_name'               => $teamName,
16665|            'participants_ids'        => $participantIds,
16666|            'participants_names'      => $participantNames,
16667|            'participants_count'      => count($participantIds),
16668|            'companion_ids'           => $companionIds,
16669|            'companion_names'         => $companionNames,
16670|            'companion_notes'         => $inspection->getCompanionNotes() ?? '',
16671|            'observations'            => $inspection->getObservations() ?? '',
16672|            'deviations_count'        => $deviationsCount >= 0 ? $deviationsCount : $inspection->getDeviations()->count(),
16673|            'strengths_count'         => $strengthsCount  >= 0 ? $strengthsCount  : $inspection->getStrengths()->count(),
16674|            'status'                  => ucfirst($statusValue),
16675|            'status_value'            => $statusValue,
16676|            'gmr'                     => $gmr,
16677|            'location'                => $inspection->getLocation() ?? '',
16678|            'inspection_type'         => $inspection->getType() ?? '',
16679|            'created_at'              => $inspection->getCreatedAt()->format('d/m/Y'),
16680|            'created_at_ymd'          => $inspection->getCreatedAt()->format('Y-m-d'),

{"end_line": 16710, "file_path": "src/Controller/SsmaController.php", "start_line": 16680}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 16680-16710
16680|            'created_at_ymd'          => $inspection->getCreatedAt()->format('Y-m-d'),
16681|            'created_by_name'         => $inspection->getCreatedByName(),
16682|            'created_by_id'           => $inspection->getCreatorMeta()['created_by_id'] ?? null,
16683|        ];
16684|    }
16685|
16686|    /**
16687|     * Dados agregados para os 4 gráficos do Painel de Prevenção (grid 2×2).
16688|     *
16689|     * @param list<array<string, mixed>> $inspections
16690|     * @param list<array<string, mixed>> $abordagens
16691|     * @param list<array<string, mixed>> $actionsTaken
16692|     *
16693|     * @return array{
16694|     *   deviation_types: list<array{label: string, value: int}>,
16695|     *   risco_operacional_mensal: list<array{label: string, value: float}>,
16696|     *   efetividade_acoes_mensal: list<array{label: string, pct: int|null}>
16697|     * }
16698|     */
16699|    private function buildPrevencaoPanelCharts(
16700|        Company $company,
16701|        array $inspections,
16702|        array $abordagens,
16703|        array $actionsTaken,
16704|        ?string $deviationFilterTeam = null,
16705|        ?string $deviationFilterFrom = null,
16706|        ?string $deviationFilterTo = null,
16707|    ): array {
16708|        $deviationTypes = $this->loadInspectionDeviationTypeCounts($company, $deviationFilterTeam, $deviationFilterFrom, $deviationFilterTo);
16709|
16710|        $monthPt = [1 => 'jan', 2 => 'fev', 3 => 'mar', 4 => 'abr', 5 => 'mai', 6 => 'jun',

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function filterActionsByResponsibleMemberIds"}

File: src/Controller/SsmaController.php
Match lines: 1
11546|    private function filterActionsByResponsibleMemberIds(array $actions, array $allowedResponsibleMemberIds): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "canViewSsmaActionUnderAreaScope"}

File: src/Controller/SsmaController.php
Match lines: 9
6707|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
7745|                if (!$this->canViewSsmaActionUnderAreaScope($action, $company, $user)) {
8493|        if (!$this->canViewSsmaActionUnderAreaScope($action, $company, $user)) {
8952|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
8982|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
9019|        if (!$this->canViewSsmaActionUnderAreaScope($action, $this->getSsmaCompany(), $user)) {
9382|        if (!$this->canViewSsmaActionUnderAreaScope($action, $company, $user)) {
10109|    private function canViewSsmaActionUnderAreaScope(SsmaAction $action, ?Company $company, ?User $user): bool
28130|        if (!$this->canViewSsmaActionUnderAreaScope($action, $action->getCompany(), $user)) {

{"end_line": 11590, "file_path": "src/Controller/SsmaController.php", "start_line": 11546}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 11546-11590
11546|    private function filterActionsByResponsibleMemberIds(array $actions, array $allowedResponsibleMemberIds): array
11547|    {
11548|        if ($allowedResponsibleMemberIds === []) {
11549|            return [];
11550|        }
11551|
11552|        return array_values(array_filter($actions, static function (array $action) use ($allowedResponsibleMemberIds): bool {
11553|            $validatorMemberId = (int) ($action['validator_member_id'] ?? 0);
11554|            if ($validatorMemberId > 0 && isset($allowedResponsibleMemberIds[$validatorMemberId])) {
11555|                return true;
11556|            }
11557|
11558|            foreach ((array) ($action['responsible_ids'] ?? []) as $id) {
11559|                if (isset($allowedResponsibleMemberIds[(int) $id])) {
11560|                    return true;
11561|                }
11562|            }
11563|
11564|            return false;
11565|        }));
11566|    }
11567|
11568|    /**
11569|     * Colaborador (Membro): somente ações em que ele ?? responsável.
11570|     *
11571|     * @param array<int, array<string, mixed>> $visibleOccurrences Mantido por compatibilidade de chamada.
11572|     *
11573|     * @return array<int, array<string, mixed>>
11574|     */
11575|    private function filterActionsForMember(array $actions, array $visibleOccurrences, int $memberId): array
11576|    {
11577|        if ($memberId <= 0) {
11578|            return [];
11579|        }
11580|
11581|        return $this->filterActionsByResponsibleMemberIds($actions, [$memberId => true]);
11582|    }
11583|
11584|    private function resolveCurrentUserTechnicalTypes(Company $company, User $user): array
11585|    {
11586|        $members = $this->entityManager
11587|            ->getRepository(CompanyMembers::class)
11588|            ->findBy(['company' => $company, 'isRemoved' => 0]);
11589|
11590|        return $this->resolveUserTechnicalTypes($company, $user, $members);

{"path_array": ["tests/Ssma/SsmaPermissionsRegressionTest.php"]}

==== FILE: tests/Ssma/SsmaPermissionsRegressionTest.php ====
diff --git a/tests/Ssma/SsmaPermissionsRegressionTest.php b/tests/Ssma/SsmaPermissionsRegressionTest.php
--- a/tests/Ssma/SsmaPermissionsRegressionTest.php
+++ b/tests/Ssma/SsmaPermissionsRegressionTest.php
@@ -537,6 +537,11 @@ final class SsmaPermissionsRegressionTest extends TestCase
             $src,
             'Regressão: comentário/contrato Aura em Painel/Metas deve permanecer.'
         );
+        self::assertStringContainsString(
+            'if ($company && $user instanceof User && $ssmaIsPlainPreventionMember)',
+            $src,
+            'Regressão: listagem de inspeções/abordagens não pode recortar por tag Membro o admin Aura/tenant.'
+        );
         self::assertStringContainsString(
             "'Gestor Administrador'",
             $src,

{"query_name": "CompanyMembers.php"}

migrations/Version20260602000000_AddCurrentSalaryToCompanyMembers.php
src/Entity/CompanyMembers.php

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "function getDepartment"}

File: src/Entity/CompanyMembers.php
Match lines: 1
906|    public function getDepartment(): ?CompanyArea

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "private \\$department|protected \\$department"}

No matches found

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "department"}

File: src/Entity/CompanyMembers.php
Match lines: 7
183|    private $department;
906|    public function getDepartment(): ?CompanyArea
908|        return $this->department;
911|    public function setDepartment(?CompanyArea $department): self
913|        $this->department = $department;
1244|            'departmentId' => $this->department ? $this->department->getId() : null,
1245|            'departmentName' => $this->department ? $this->department->getName() : null,

{"file_path": "src/Service/Ssma/SsmaPreventionHubAccessService.php"}

File: src/Service/Ssma/SsmaPreventionHubAccessService.php (Total lines: 197)
IS_TRUNCATED: false
LINE_RANGE: 1-197
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\PermissionTagByMember;
11|use App\Entity\Product;
12|use App\Entity\SsmaMeta;
13|use App\Entity\SsmaPermissionTagMember;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|
17|/**
18| * Regras de visibilidade do hub Prevenção Ativa (menu lateral + prevencaoIndex).
19| */
20|class SsmaPreventionHubAccessService
21|{
22|    public const PREVENTION_PRODUCT_SLUG = 'ssma-prevention';
23|
24|    public const MEMBER_META_PREFIX = '__PREV_MEMBER_META__';
25|
26|    public const PERIOD_REF_KEY = '__PREV_PERIOD_REF__';
27|
28|    /** @var list<string> */
29|    public const MANAGEMENT_TAG_NAMES = [
30|        'Supervisor de Equipe',
31|        'Supervisor',
32|        'Gestor de Equipe',
33|        'Gestor Administrador',
34|        SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
35|        SsmaAreaLimitationScope::TAG_GESTOR_AREA,
36|    ];
37|
38|    /** @var list<string> */
39|    private const PLAIN_MEMBER_TAG_NAMES = ['Membro', 'Inspetor', 'Membro (default)'];
40|
41|    public function __construct(
42|        private EntityManagerInterface $entityManager,
43|        private PermissionTagByMemberService $permissionTagByMemberService,
44|    ) {
45|    }
46|
47|    public function companyHasPreventionMetasBootstrap(Company $company): bool
48|    {
49|        $rows = $this->entityManager->getRepository(SsmaMeta::class)->findBy(['company' => $company]);
50|        foreach ($rows as $row) {
51|            if (!$row instanceof SsmaMeta) {
52|                continue;
53|            }
54|            if ($row->getTeamName() === self::PERIOD_REF_KEY) {
55|                continue;
56|            }
57|
58|            return true;
59|        }
60|
61|        return false;
62|    }
63|
64|    public function resolvePreventionProductTagName(CompanyMembers $member): ?string
65|    {
66|        $product = $this->entityManager->getRepository(Product::class)
67|            ->findOneBy(['slug' => self::PREVENTION_PRODUCT_SLUG]);
68|        if ($product instanceof Product) {
69|            $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);
70|            if ($tag instanceof PermissionTag) {
71|                $name = trim((string) $tag->getName());
72|                if ($name !== '') {
73|                    return $name;
74|                }
75|            }
76|        }
77|
78|        return $this->resolveManagementTagNameFromSsmaPermissionLinks($member);
79|    }
80|
81|    public function isManagementPreventionTag(?string $tagName): bool
82|    {
83|        return $tagName !== null && in_array($tagName, self::MANAGEMENT_TAG_NAMES, true);
84|    }
85|
86|    public function isPlainPreventionMemberTag(?string $tagName): bool
87|    {
88|        return $tagName === null || in_array($tagName, self::PLAIN_MEMBER_TAG_NAMES, true);
89|    }
90|
91|    public function memberHasActivePreventionMeta(Company $company, CompanyMembers $member): bool
92|    {
93|        $metaKey = self::MEMBER_META_PREFIX . $member->getId();
94|        /** @var SsmaMeta|null $metaRow */
95|        $metaRow = $this->entityManager->getRepository(SsmaMeta::class)
96|            ->findOneBy(['company' => $company, 'teamName' => $metaKey]);
97|        if ($metaRow === null) {
98|            return false;
99|        }
100|
101|        return $metaRow->getMetaInspecao() > 0 || $metaRow->getMetaAbordagem() > 0;
102|    }
103|
104|    /**
105|     * Colaborador (ROLE_USER): exige metas da empresa configuradas e perfil/meta individual compatível.
106|     */
107|    public function canCollaboratorAccessPreventionHub(Company $company, CompanyMembers $member): bool
108|    {
109|        if (!$this->companyHasPreventionMetasBootstrap($company)) {
110|            return false;
111|        }
112|
113|        $preventionTagName = $this->resolvePreventionProductTagName($member);
114|        if ($this->isManagementPreventionTag($preventionTagName)) {
115|            return true;
116|        }
117|
118|        return $this->memberHasActivePreventionMeta($company, $member);
119|    }
120|
121|    /**
122|     * @param array<string, mixed> $viewData
123|     */
124|    public function hasAnyPreventionHubTab(array $viewData): bool
125|    {
126|        if (!empty($viewData['ssmaPreventionInspectionEnabled'])) {
127|            return true;
128|        }
129|        if (!empty($viewData['ssmaPreventionAbordagemEnabled'])) {
130|            return true;
131|        }
132|        if (!empty($viewData['ssmaCanAccessPreventionPanelAndMetas'])) {
133|            return true;
134|        }
135|        if (!empty($viewData['ssmaCanManageConfig'])) {
136|            return true;
137|        }
138|        if (!empty($viewData['ssmaCanManagePermissions'])) {
139|            return true;
140|        }
141|
142|        return false;
143|    }
144|
145|    public function isPrevencaoMemberKindTabVisible(int $overrideRaw): bool
146|    {
147|        return $overrideRaw > 0;
148|    }
149|
150|    private function resolveManagementTagNameFromSsmaPermissionLinks(CompanyMembers $member): ?string
151|    {
152|        $company = $member->getCompany();
153|        if (!$company instanceof Company) {
154|            return null;
155|        }
156|
157|        $links = $this->entityManager->getRepository(SsmaPermissionTagMember::class)
158|            ->findBy(['companyMember' => $member]);
159|        foreach ($links as $link) {
160|            if (!$link instanceof SsmaPermissionTagMember) {
161|                continue;
162|            }
163|            $tag = $link->getTag();
164|            if ($tag->getCompany()->getId() !== $company->getId()) {
165|                continue;
166|            }
167|            $tagName = $tag->getName();
168|            if (in_array($tagName, self::MANAGEMENT_TAG_NAMES, true)) {
169|                return $tagName;
170|            }
171|        }
172|
173|        $product = $this->entityManager->getRepository(Product::class)
174|            ->findOneBy(['slug' => self::PREVENTION_PRODUCT_SLUG]);
175|        if (!$product instanceof Product) {
176|            return null;
177|        }
178|
179|        $ptbm = $this->entityManager->getRepository(PermissionTagByMember::class)->findOneBy([
180|            'companyMemberID' => $member->getId(),
181|            'productID' => $product->getId(),
182|        ]);
183|        if (!$ptbm instanceof PermissionTagByMember) {
184|            return null;
185|        }
186|
187|        $permTag = $this->entityManager->getRepository(PermissionTag::class)->find($ptbm->getTagID());
188|        if (!$permTag instanceof PermissionTag) {
189|            return null;
190|        }
191|
192|        $name = $permTag->getName();
193|
194|        return in_array($name, self::MANAGEMENT_TAG_NAMES, true) ? $name : null;
195|    }
196|}
197|

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "getSsmaCombinedAreaMemberIds"}

File: src/Controller/SsmaController.php
Match lines: 4
4713|        $areaMemberIds = $this->getSsmaCombinedAreaMemberIds($company, $this->getUser() instanceof User ? $this->getUser() : null);
8887|            $areaMemberMap = $this->getSsmaCombinedAreaMemberIds($company, $user);
10058|    private function getSsmaCombinedAreaMemberIds(?Company $company, ?User $user): ?array
28097|        $areaMemberIds = $this->getSsmaCombinedAreaMemberIds($company, $user);

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "getSsmaPreventionAreaScope"}

File: src/Controller/SsmaController.php
Match lines: 11
8729|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
8800|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
9275|            $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
10021|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10062|            $this->getSsmaPreventionAreaScope($company, $user),
10089|            $this->getSsmaPreventionAreaScope($company, $user),
10100|            $this->getSsmaPreventionAreaScope($company, $user),
10112|            $this->getSsmaPreventionAreaScope($company, $user),
10126|            $this->getSsmaPreventionAreaScope($company, $user),
12487|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
24377|            $this->getSsmaPreventionAreaScope($company, $user),

{"path_array": ["migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php", "src/Entity/PermissionTag.php", "src/Controller/PermissionsTagsController.php"]}

==== FILE: migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php ====
diff --git a/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php b/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
new file mode 100644
--- /dev/null
+++ b/migrations/Version20260819160000_AddAreaLimitationToPermissionTag.php
@@ -0,0 +1,64 @@
+<?php
+
+declare(strict_types=1);
+
+namespace DoctrineMigrations;
+
+use Doctrine\DBAL\Schema\Schema;
+use Doctrine\Migrations\AbstractMigration;
+
+final class Version20260819160000_AddAreaLimitationToPermissionTag extends AbstractMigration
+{
+    public function getDescription(): string
+    {
+        return 'Adiciona area_limitation em permission_tag e cria as tags Supervisor de Área e Gestor de Área.';
+    }
+
+    public function up(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['permission_tag'])) {
+            return;
+        }
+
+        $table = $schemaManager->introspectTable('permission_tag');
+        if (!$table->hasColumn('area_limitation')) {
+            $this->addSql('ALTER TABLE permission_tag ADD area_limitation TINYINT(1) NOT NULL DEFAULT 0');
+        }
+
+        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
+            SELECT 'Supervisor de Área', 'Visualizacao apenas da sua area', 1, 0, 0, 0, 0, 1, 3, '#edd9ff', '#736282'
+            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Supervisor de Área')");
+
+        $this->addSql("INSERT INTO permission_tag (name, description, can_view, can_create, can_edit, can_delete, team_limitation, area_limitation, color_id, color, letter_color)
+            SELECT 'Gestor de Área', 'Acesso completo limitado a sua area', 1, 1, 1, 1, 0, 1, 4, '#a2e4ac', '#468a50'
+            WHERE NOT EXISTS (SELECT 1 FROM permission_tag WHERE name = 'Gestor de Área')");
+    }
+
+    public function down(Schema $schema): void
+    {
+        $schemaManager = $this->connection->createSchemaManager();
+        if (!$schemaManager->tablesExist(['permission_tag'])) {
+            return;
+        }
+
+        if ($schemaManager->tablesExist(['permission_tag_suggestions'])) {
+            $this->addSql("DELETE FROM permission_tag_suggestions WHERE permission_tag_id IN (
+                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
+            )");
+        }
+
+        if ($schemaManager->tablesExist(['permission_tag_by_member'])) {
+            $this->addSql("DELETE FROM permission_tag_by_member WHERE tag_id IN (
+                SELECT id FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')
+            )");
+        }
+
+        $this->addSql("DELETE FROM permission_tag WHERE name IN ('Supervisor de Área', 'Gestor de Área')");
+
+        $table = $schemaManager->introspectTable('permission_tag');
+        if ($table->hasColumn('area_limitation')) {
+            $this->addSql('ALTER TABLE permission_tag DROP area_limitation');
+        }
+    }
+}
==== FILE: src/Entity/PermissionTag.php ====
diff --git a/src/Entity/PermissionTag.php b/src/Entity/PermissionTag.php
--- a/src/Entity/PermissionTag.php
+++ b/src/Entity/PermissionTag.php
@@ -34,6 +34,11 @@ class PermissionTag
      */
     private $teamLimitation;
 
+    /**
+     * @ORM\Column(name="area_limitation", type="boolean", nullable=false, options={"default": false})
+     */
+    private $areaLimitation = false;
+
     /**
      * @ORM\Column(name="color_id", type="integer", nullable=false)
      */
@@ -122,6 +127,18 @@ class PermissionTag
         return $this;
     }
 
+    public function getAreaLimitation(): ?bool
+    {
+        return $this->areaLimitation;
+    }
+
+    public function setAreaLimitation(bool $areaLimitation): self
+    {
+        $this->areaLimitation = $areaLimitation;
+
+        return $this;
+    }
+
     public function setColor(string $color): void
     {
         $this->color = $color;
==== FILE: src/Controller/PermissionsTagsController.php ====
diff --git a/src/Controller/PermissionsTagsController.php b/src/Controller/PermissionsTagsController.php
--- a/src/Controller/PermissionsTagsController.php
+++ b/src/Controller/PermissionsTagsController.php
@@ -29,6 +29,15 @@ class PermissionsTagsController extends AbstractController
         $this->security = $security;
     }
 
+    /**
+     * Flags de limitação/permissão chegam por JSON e podem vir como bool, "0"/"1", "true"/"false"
+     * ou null. Normaliza para bool antes dos setters, que só aceitam bool.
+     */
+    private function toBoolFlag(mixed $value): bool
+    {
+        return filter_var($value, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE) ?? false;
+    }
+
     public function index(EntityManagerInterface $entityManager): Response
     {
         $user = $this->security->getUser();
@@ -67,7 +76,8 @@ class PermissionsTagsController extends AbstractController
             $permissionTag->setColorID($data['colorID']);
             $permissionTag->setColor($data['color'] ?? null);
             $permissionTag->setLetterColor($data['letterColor'] ?? null);
-            $permissionTag->setTeamLimitation($data['teamLimitation'] ?? false);
+            $permissionTag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
+            $permissionTag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
             $permissionTag->setCanView($data['canView'] ?? false);
             $permissionTag->setCanCreate($data['canCreate'] ?? false);
             $permissionTag->setCanEdit($data['canEdit'] ?? false);
@@ -120,7 +130,8 @@ class PermissionsTagsController extends AbstractController
                 $tag->setColorID($data['colorID']);
                 $tag->setColor($data['color'] ?? null);
                 $tag->setLetterColor($data['letterColor'] ?? null);
-                $tag->setTeamLimitation($data['teamLimitation'] ?? false);
+                $tag->setTeamLimitation($this->toBoolFlag($data['teamLimitation'] ?? false));
+                $tag->setAreaLimitation($this->toBoolFlag($data['areaLimitation'] ?? false));
                 
                 // Atualiza permissões
                 $tag->setCanView($data['canView'] ?? false);
@@ -148,8 +159,11 @@ class PermissionsTagsController extends AbstractController
             throw $this->createNotFoundException('Tag não encontrada.');
         }
 
+        // Nome específico de propósito: a tela estende o layoutAdmin, que inclui componentes
+        // compartilhados sem `only`. Uma variável genérica `tag` colidiria com o atributo `tag`
+        // esperado por esses componentes.
         return $this->render('permissions_tags/edit.html.twig', [
-            'tag' => $tag,
+            'permissionTag' => $tag,
             'colorsTags' => $this->getColorsTags(),
         ]);
     }

{"file_patterns": ["src/Repository/CompanyAreaRepository.php"], "search_text": "function findByCompany"}

File: src/Repository/CompanyAreaRepository.php
Match lines: 1
101|    public function findByCompany(int $companyId, bool $activeOnly = false): array

{"search_text": "function resolveSsmaProductPermissionTagForMember", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 1
10533|    private function resolveSsmaProductPermissionTagForMember(

{"end_line": 10600, "file_path": "src/Controller/SsmaController.php", "start_line": 10533}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10533-10600
10533|    private function resolveSsmaProductPermissionTagForMember(
10534|        CompanyMembers $member,
10535|        ?string $productSlug = null,
10536|    ): ?\App\Entity\PermissionTag {
10537|        try {
10538|            $productSlug = $productSlug ?: $this->getCurrentSsmaPermissionProductSlug();
10539|            $product = $this->entityManager
10540|                ->getRepository(\App\Entity\Product::class)
10541|                ->findOneBy(['slug' => $productSlug]);
10542|
10543|            if (!$product && str_starts_with($productSlug, 'ssma-')) {
10544|                $product = $this->entityManager
10545|                    ->getRepository(\App\Entity\Product::class)
10546|                    ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
10547|            }
10548|
10549|            if (!$product) {
10550|                return $member->getGlobalPermissionTag();
10551|            }
10552|
10553|            // Delega ao serviço centralizado que resolve herança, tags obsoletas e tag global actual
10554|            $resolved = $this->permissionTagByMemberService->getPermissionTag($member, $product);
10555|
10556|            return $resolved;
10557|        } catch (\Throwable $e) {
10558|        }
10559|
10560|        return $member->getGlobalPermissionTag();
10561|    }
10562|
10563|    /**
10564|     * S/N de descaracterização: liberado automaticamente para Gestor Administrador/Tenant
10565|     * (ROLE_SUPER_ADMIN, ROLE_MANAGER ou tag "Gestor Administrador"), sem precisar de
10566|     * configuração explícita em "Profissionais de Saúde". Demais perfis seguem a config.
10567|     */
10568|    private function ssmaMemberCanDescharacterizeAccident(Company $company, ?CompanyMembers $member): bool
10569|    {
10570|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10571|            return true;
10572|        }
10573|
10574|        if (!$member instanceof CompanyMembers) {
10575|            return false;
10576|        }
10577|
10578|        if ($this->memberIsSsmaGestorAdministrador($member)) {
10579|            return true;
10580|        }
10581|
10582|        return $this->ssmaOccurrenceTypeConfig->memberCanDescharacterizeAccident(
10583|            $company,
10584|            (int) $member->getId()
10585|        );
10586|    }
10587|
10588|    private function getCurrentSsmaPermissionProductSlug(): string
10589|    {
10590|        $request = $this->requestStack->getCurrentRequest();
10591|        $product = $request ? $request->attributes->get('current_product') : null;
10592|
10593|        if ($product instanceof \App\Entity\Product) {
10594|            $slug = (string) $product->getSlug();
10595|            if ($slug !== '') {
10596|                return $slug;
10597|            }
10598|        }
10599|
10600|        return $this->ssmaParentProductSlug;

{"file_path": "src/Entity/PermissionTag.php", "start_line": 1, "end_line": 120}

File: src/Entity/PermissionTag.php (Total lines: 210)
IS_TRUNCATED: false
LINE_RANGE: 1-120
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\PermissionTagRepository;
6|use Doctrine\Common\Collections\ArrayCollection;
7|use Doctrine\Common\Collections\Collection;
8|use Doctrine\ORM\Mapping as ORM;
9|
10|/**
11| * @ORM\Entity(repositoryClass=PermissionTagRepository::class)
12| */
13|class PermissionTag
14|{
15|    /**
16|     * @ORM\Id
17|     * @ORM\GeneratedValue
18|     * @ORM\Column(type="integer")
19|     */
20|    private $id;
21|
22|    /**
23|     * @ORM\Column(type="string", length=255)
24|     */
25|    private $name;
26|
27|    /**
28|     * @ORM\Column(type="string", length=255, nullable=true)
29|     */
30|    private $description;
31|
32|    /**
33|     * @ORM\Column(name="team_limitation", type="boolean", nullable=false)
34|     */
35|    private $teamLimitation;
36|
37|    /**
38|     * @ORM\Column(name="area_limitation", type="boolean", nullable=false, options={"default": false})
39|     */
40|    private $areaLimitation = false;
41|
42|    /**
43|     * @ORM\Column(name="color_id", type="integer", nullable=false)
44|     */
45|    private $colorID;
46|
47|    /**
48|     * @ORM\Column(type="string", length=7, nullable=true)
49|     */
50|    private $color;
51|
52|    /**
53|     * @ORM\Column(name="letter_color", type="string", length=7, nullable=true)
54|     */
55|    private $letterColor;
56|
57|    /**
58|     * @ORM\Column(name="can_view", type="boolean", nullable=false)
59|     */
60|    private $canView;
61|
62|    /**
63|     * @ORM\Column(name="can_create", type="boolean", nullable=false)
64|     */
65|    private $canCreate;
66|
67|    /**
68|     * @ORM\Column(name="can_edit", type="boolean", nullable=false)
69|     */
70|    private $canEdit;
71|
72|    /**
73|     * @ORM\Column(name="can_delete", type="boolean", nullable=false)
74|     */
75|    private $canDelete;
76|
77|    public function getId(): ?int
78|    {
79|        return $this->id;
80|    }
81|
82|    public function getName(): ?string
83|    {
84|        return $this->name;
85|    }
86|
87|    public function setName(string $name): self
88|    {
89|        $this->name = $name;
90|
91|        return $this;
92|    }
93|
94|    public function getDescription(): ?string
95|    {
96|        return $this->description;
97|    }
98|
99|    public function setDescription(?string $description): self
100|    {
101|        $this->description = $description;
102|
103|        return $this;
104|    }
105|
106|    public function getColorID(): ?int
107|    {
108|        return $this->colorID;
109|    }
110|
111|    public function setColorID(int $colorID): self
112|    {
113|        $this->colorID = $colorID;
114|
115|        return $this;
116|    }
117|
118|    public function getTeamLimitation(): ?bool
119|    {
120|        return $this->teamLimitation;

{"path_array": ["src/Service/Ssma/SsmaPreventionAreaScope.php"]}

==== FILE: src/Service/Ssma/SsmaPreventionAreaScope.php ====
diff --git a/src/Service/Ssma/SsmaPreventionAreaScope.php b/src/Service/Ssma/SsmaPreventionAreaScope.php
new file mode 100644
--- /dev/null
+++ b/src/Service/Ssma/SsmaPreventionAreaScope.php
@@ -0,0 +1,153 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Service\Ssma;
+
+/**
+ * Recorte de área resolvido para o usuário logado na Prevenção Ativa.
+ *
+ * Existem apenas dois estados: {@see unrestricted()} (a tag não limita por área) e
+ * {@see restricted()} (a tag limita). Um recorte restrito com conjunto vazio nega tudo —
+ * nunca significa "sem filtro". Listagem, busca, detalhe e gravação leem o mesmo objeto,
+ * então não podem divergir.
+ */
+final class SsmaPreventionAreaScope
+{
+    /**
+     * @param list<int>       $areaIds
+     * @param array<int,true> $memberIds
+     * @param array<int,true> $teamIds
+     * @param array<int,true> $teamIdsWithoutArea
+     */
+    private function __construct(
+        private bool $restricted,
+        private array $areaIds,
+        private array $memberIds,
+        private array $teamIds,
+        private array $teamIdsWithoutArea
+    ) {
+    }
+
+    public static function unrestricted(): self
+    {
+        return new self(false, [], [], [], []);
+    }
+
+    /**
+     * @param list<int> $areaIds            área do membro + descendentes
+     * @param list<int> $memberIds          membros dentro do recorte
+     * @param list<int> $teamIds            equipes cuja área está no recorte
+     * @param list<int> $teamIdsWithoutArea equipes da empresa sem área cadastrada
+     */
+    public static function restricted(
+        array $areaIds,
+        array $memberIds,
+        array $teamIds,
+        array $teamIdsWithoutArea,
+    ): self {
+        return new self(
+            true,
+            array_values(array_unique(array_map('intval', $areaIds))),
+            array_fill_keys(array_map('intval', $memberIds), true),
+            array_fill_keys(array_map('intval', $teamIds), true),
+            array_fill_keys(array_map('intval', $teamIdsWithoutArea), true),
+        );
+    }
+
+    public function isRestricted(): bool
+    {
+        return $this->restricted;
+    }
+
+    /**
+     * @return list<int>
+     */
+    public function areaIds(): array
+    {
+        return $this->areaIds;
+    }
+
+    /**
+     * @return array<int,true>
+     */
+    public function allowedMemberIds(): array
+    {
+        return $this->memberIds;
+    }
+
+    /**
+     * @return list<int>
+     */
+    public function allowedTeamIds(): array
+    {
+        return array_keys($this->teamIds);
+    }
+
+    /**
+     * @return list<int>
+     */
+    public function teamIdsWithoutArea(): array
+    {
+        return array_keys($this->teamIdsWithoutArea);
+    }
+
+    public function allowsMember(?int $memberId): bool
+    {
+        if (!$this->restricted) {
+            return true;
+        }
+
+        return $memberId !== null && $memberId > 0 && isset($this->memberIds[$memberId]);
+    }
+
+    public function allowsTeam(?int $teamId): bool
+    {
+        if (!$this->restricted) {
+            return true;
+        }
+
+        return $teamId !== null && $teamId > 0 && isset($this->teamIds[$teamId]);
+    }
+
+    /**
+     * Equipe existente sem área cadastrada: não pode esconder o registro de quem está no recorte,
+     * porque a equipe não informa área nenhuma.
+     */
+    public function teamHasNoArea(?int $teamId): bool
+    {
+        return $teamId !== null && $teamId > 0 && isset($this->teamIdsWithoutArea[$teamId]);
+    }
+
+    /**
+     * Equipe preenchida cuja área é conhecida e está fora do recorte.
+     */
+    public function teamIsOutsideArea(?int $teamId): bool
+    {
+        if (!$this->restricted || $teamId === null || $teamId <= 0) {
+            return false;
+        }
+
+        return !isset($this->teamIds[$teamId]) && !isset($this->teamIdsWithoutArea[$teamId]);
+    }
+
+    /**
+     * @param list<int> $memberIds
+     */
+    public function withExtraMemberIds(array $memberIds): self
+    {
+        if (!$this->restricted) {
+            return $this;
+        }
+
+        $merged = $this->memberIds;
+        foreach ($memberIds as $memberId) {
+            $memberId = (int) $memberId;
+            if ($memberId > 0) {
+                $merged[$memberId] = true;
+            }
+        }
+
+        return new self(true, $this->areaIds, $merged, $this->teamIds, $this->teamIdsWithoutArea);
+    }
+}

{"comments": [{"category": "bug", "content": "A listagem e a abertura por ID aplicam critérios diferentes para o mesmo recorte de área, e isso faz um registro aparecer num caminho e sumir no outro. Este filtro ignora os acompanhantes da inspeção (companion_ids), enquanto a guarda usada ao abrir pelo ID (SsmaPreventionAreaAuthorizationService::canViewInspection) considera acompanhante como âncora suficiente dentro do recorte. Na prática, uma inspeção sem equipe (ou com equipe sem área cadastrada) em que só um acompanhante do recorte participa fica escondida na lista, mas responde 200 quando aberta pela URL — exatamente a divergência listagem × guarda por ID que a regra documentada da PR (quem não vê na lista recebe 404) pretendia eliminar. O dado de companion_ids já está presente nas linhas serializadas usadas aqui. Unifique o critério numa única fonte de verdade (inclua companion_ids como âncora neste filtro ou faça os dois caminhos chamarem o mesmo método) e cubra o cenário de acompanhante com teste nas duas pontas.", "existing_code": "                foreach ([\n                    (int) ($inspection['created_by_id'] ?? 0),\n                    (int) ($inspection['safety_responsible_id'] ?? 0),\n                ] as $memberId) {", "path": "src/Service/Ssma/SsmaAreaLimitationScope.php", "severity": "high"}, {"category": "performance", "content": "Resolver o escopo de área sai caro e o resultado não é reaproveitado entre produtos nem entre chamadas. Aqui o escopo é montado carregando todas as áreas, todas as equipes e todos os membros da empresa e, para cada membro, memberBelongsToAreas percorre getMemberAreas() — coleção lazy do Doctrine — disparando uma consulta por membro (N+1) dentro de um único resolveScope. Além disso, o resolveScope é reexecutado para a Prevenção e para o Plano de Ação e novamente a cada guarda de abertura por ID na mesma requisição, multiplicando esse custo em empresas com milhares de membros e tornando listagem/abertura lentas. Substitua a coleta em memória por uma query única (join de membros com áreas/equipes do recorte) que devolva os IDs permitidos e resolva o escopo uma única vez por requisição.", "existing_code": "        $members = $this->entityManager->getRepository(CompanyMembers::class)\n            ->findBy(['company' => $company, 'isRemoved' => 0]);", "path": "src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php", "severity": "medium"}, {"category": "test", "content": "Os testes novos exercitam apenas os helpers e o serviço com EntityManager simulado; nenhum cobre o caminho real de autorização dos endpoints — listagem com recorte, abertura por ID devolvendo 404 e gravação devolvendo 403 para pessoa/equipe fora da área. A alteração em tests/Ssma/SsmaPermissionsRegressionTest.php apenas compara strings do fonte e não adiciona um cenário funcional de area_limitation. Como a mudança mexe em autorização (o próprio histórico da branch cita falha de autorização em leitura por ID como risco), é esperado um teste funcional de controller para a nova tag com área antes de fechar a PR.", "existing_code": "    /** @testdox Sem limitacao de area qualquer inspecao e visivel */\n    public function testUnrestrictedScopeSeesAnyInspection(): void", "path": "tests/Unit/Product/Ssma/SsmaPreventionAreaAuthorizationServiceTest.php", "severity": "medium"}, {"category": "maintainability", "content": "Os nomes de tag que mudam o comportamento (Supervisor de Área, Gestor de Área, Gestor Administrador, Supervisor) estão espalhados como strings soltas nesta decisão e repetidos no hub de acesso e na migration. Como a regra decide pelo nome e não apenas pelo checkbox area_limitation, renomear uma tag no cadastro altera silenciosamente quem é recortado por área. Centralize os nomes em constantes numa lista única (reaproveitando as constantes TAG_SUPERVISOR_AREA/TAG_GESTOR_AREA já existentes) e documente que o nome tem prioridade sobre o checkbox.", "existing_code": "        // Supervisor (empresa) e Gestor Administrador operam sem recorte de área.\n        if (in_array($tagName, ['Gestor Administrador', 'Supervisor'], true)) {\n            return false;\n        }", "path": "src/Service/Ssma/SsmaAreaLimitationScope.php", "severity": "low"}]}

(async)

{"state": "DONE"}

{"file_path": "src/Service/Ssma/SsmaPreventionHubAccessService.php"}

File: src/Service/Ssma/SsmaPreventionHubAccessService.php (Total lines: 197)
IS_TRUNCATED: false
LINE_RANGE: 1-197
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\PermissionTagByMember;
11|use App\Entity\Product;
12|use App\Entity\SsmaMeta;
13|use App\Entity\SsmaPermissionTagMember;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|
17|/**
18| * Regras de visibilidade do hub Prevenção Ativa (menu lateral + prevencaoIndex).
19| */
20|class SsmaPreventionHubAccessService
21|{
22|    public const PREVENTION_PRODUCT_SLUG = 'ssma-prevention';
23|
24|    public const MEMBER_META_PREFIX = '__PREV_MEMBER_META__';
25|
26|    public const PERIOD_REF_KEY = '__PREV_PERIOD_REF__';
27|
28|    /** @var list<string> */
29|    public const MANAGEMENT_TAG_NAMES = [
30|        'Supervisor de Equipe',
31|        'Supervisor',
32|        'Gestor de Equipe',
33|        'Gestor Administrador',
34|        SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
35|        SsmaAreaLimitationScope::TAG_GESTOR_AREA,
36|    ];
37|
38|    /** @var list<string> */
39|    private const PLAIN_MEMBER_TAG_NAMES = ['Membro', 'Inspetor', 'Membro (default)'];
40|
41|    public function __construct(
42|        private EntityManagerInterface $entityManager,
43|        private PermissionTagByMemberService $permissionTagByMemberService,
44|    ) {
45|    }
46|
47|    public function companyHasPreventionMetasBootstrap(Company $company): bool
48|    {
49|        $rows = $this->entityManager->getRepository(SsmaMeta::class)->findBy(['company' => $company]);
50|        foreach ($rows as $row) {
51|            if (!$row instanceof SsmaMeta) {
52|                continue;
53|            }
54|            if ($row->getTeamName() === self::PERIOD_REF_KEY) {
55|                continue;
56|            }
57|
58|            return true;
59|        }
60|
61|        return false;
62|    }
63|
64|    public function resolvePreventionProductTagName(CompanyMembers $member): ?string
65|    {
66|        $product = $this->entityManager->getRepository(Product::class)
67|            ->findOneBy(['slug' => self::PREVENTION_PRODUCT_SLUG]);
68|        if ($product instanceof Product) {
69|            $tag = $this->permissionTagByMemberService->getPermissionTag($member, $product);
70|            if ($tag instanceof PermissionTag) {
71|                $name = trim((string) $tag->getName());
72|                if ($name !== '') {
73|                    return $name;
74|                }
75|            }
76|        }
77|
78|        return $this->resolveManagementTagNameFromSsmaPermissionLinks($member);
79|    }
80|
81|    public function isManagementPreventionTag(?string $tagName): bool
82|    {
83|        return $tagName !== null && in_array($tagName, self::MANAGEMENT_TAG_NAMES, true);
84|    }
85|
86|    public function isPlainPreventionMemberTag(?string $tagName): bool
87|    {
88|        return $tagName === null || in_array($tagName, self::PLAIN_MEMBER_TAG_NAMES, true);
89|    }
90|
91|    public function memberHasActivePreventionMeta(Company $company, CompanyMembers $member): bool
92|    {
93|        $metaKey = self::MEMBER_META_PREFIX . $member->getId();
94|        /** @var SsmaMeta|null $metaRow */
95|        $metaRow = $this->entityManager->getRepository(SsmaMeta::class)
96|            ->findOneBy(['company' => $company, 'teamName' => $metaKey]);
97|        if ($metaRow === null) {
98|            return false;
99|        }
100|
101|        return $metaRow->getMetaInspecao() > 0 || $metaRow->getMetaAbordagem() > 0;
102|    }
103|
104|    /**
105|     * Colaborador (ROLE_USER): exige metas da empresa configuradas e perfil/meta individual compatível.
106|     */
107|    public function canCollaboratorAccessPreventionHub(Company $company, CompanyMembers $member): bool
108|    {
109|        if (!$this->companyHasPreventionMetasBootstrap($company)) {
110|            return false;
111|        }
112|
113|        $preventionTagName = $this->resolvePreventionProductTagName($member);
114|        if ($this->isManagementPreventionTag($preventionTagName)) {
115|            return true;
116|        }
117|
118|        return $this->memberHasActivePreventionMeta($company, $member);
119|    }
120|
121|    /**
122|     * @param array<string, mixed> $viewData
123|     */
124|    public function hasAnyPreventionHubTab(array $viewData): bool
125|    {
126|        if (!empty($viewData['ssmaPreventionInspectionEnabled'])) {
127|            return true;
128|        }
129|        if (!empty($viewData['ssmaPreventionAbordagemEnabled'])) {
130|            return true;
131|        }
132|        if (!empty($viewData['ssmaCanAccessPreventionPanelAndMetas'])) {
133|            return true;
134|        }
135|        if (!empty($viewData['ssmaCanManageConfig'])) {
136|            return true;
137|        }
138|        if (!empty($viewData['ssmaCanManagePermissions'])) {
139|            return true;
140|        }
141|
142|        return false;
143|    }
144|
145|    public function isPrevencaoMemberKindTabVisible(int $overrideRaw): bool
146|    {
147|        return $overrideRaw > 0;
148|    }
149|
150|    private function resolveManagementTagNameFromSsmaPermissionLinks(CompanyMembers $member): ?string
151|    {
152|        $company = $member->getCompany();
153|        if (!$company instanceof Company) {
154|            return null;
155|        }
156|
157|        $links = $this->entityManager->getRepository(SsmaPermissionTagMember::class)
158|            ->findBy(['companyMember' => $member]);
159|        foreach ($links as $link) {
160|            if (!$link instanceof SsmaPermissionTagMember) {
161|                continue;
162|            }
163|            $tag = $link->getTag();
164|            if ($tag->getCompany()->getId() !== $company->getId()) {
165|                continue;
166|            }
167|            $tagName = $tag->getName();
168|            if (in_array($tagName, self::MANAGEMENT_TAG_NAMES, true)) {
169|                return $tagName;
170|            }
171|        }
172|
173|        $product = $this->entityManager->getRepository(Product::class)
174|            ->findOneBy(['slug' => self::PREVENTION_PRODUCT_SLUG]);
175|        if (!$product instanceof Product) {
176|            return null;
177|        }
178|
179|        $ptbm = $this->entityManager->getRepository(PermissionTagByMember::class)->findOneBy([
180|            'companyMemberID' => $member->getId(),
181|            'productID' => $product->getId(),
182|        ]);
183|        if (!$ptbm instanceof PermissionTagByMember) {
184|            return null;
185|        }
186|
187|        $permTag = $this->entityManager->getRepository(PermissionTag::class)->find($ptbm->getTagID());
188|        if (!$permTag instanceof PermissionTag) {
189|            return null;
190|        }
191|
192|        $name = $permTag->getName();
193|
194|        return in_array($name, self::MANAGEMENT_TAG_NAMES, true) ? $name : null;
195|    }
196|}
197|

{"search_text": "function findByCompany", "file_patterns": ["src/Repository/*.php", "src/Entity/*.php"]}

File: src/Repository/ActivityCollectiveRepository.php
Match lines: 1
55|    public function findByCompany($companyId)

File: src/Repository/ActivityTemplatesRepository.php
Match lines: 1
26|    public function findByCompany($company): array

File: src/Repository/CalendarEventRepository.php
Match lines: 3
27|    public function findByCompany(int $companyId): array
139|    public function findByCompanyAndUser(int $companyId, int $userId): array
157|    public function findByCompanyAndEventType(int $companyId, string $eventType): array

File: src/Repository/CandidateRepository.php
Match lines: 1
46|    public function findByCompany($company): array

File: src/Repository/ChatChannelRepository.php
Match lines: 1
45|    public function findByCompanyId(int $companyId): array

File: src/Repository/ChatOrganizerRepository.php
Match lines: 1
45|    public function findByCompanyId(int $companyId): array

File: src/Repository/CipaMandateRepository.php
Match lines: 1
27|    public function findByCompanyMemberOrdered(CompanyMembers $member): array

File: src/Repository/CompanyAreaRepository.php
Match lines: 1
101|    public function findByCompany(int $companyId, bool $activeOnly = false): array

File: src/Repository/CompanyAssessmentConfigRepository.php
Match lines: 1
74|    public function findByCompanyAndType($company, string $assessmentType): ?CompanyAssessmentConfig

File: src/Repository/CompanyMembersRepository.php
Match lines: 2
196|    public function findByCompanyAndSearch($company, $search = null): ?array
333|    public function findByCompanyAndTerm(int $companyId, ?string $term = null, int $limit = 25): array

File: src/Repository/CompensationAuditLogRepository.php
Match lines: 1
93|    public function findByCompanyAndPeriod(

File: src/Repository/CompensationCycleRepository.php
Match lines: 1
49|    public function findByCompany(Company $company): array

File: src/Repository/Contractor/ContractorDocumentRequirementRepository.php
Match lines: 1
30|    public function findByCompany(Company $company): array

File: src/Repository/Contractor/ContractorProviderCompanyMemberRepository.php
Match lines: 1
26|    public function findByCompanyMemberAndTenantCompany(CompanyMembers $member, Company $company): array

File: src/Repository/Contractor/ContractorProviderCompanyRepository.php
Match lines: 1
25|    public function findByCompany(Company $company): array

File: src/Repository/CreditConfigRepository.php
Match lines: 2
20|    public function findByCompany(Company $company): ?CreditConfig
25|    public function findByCompanyId(int $companyId): ?CreditConfig

File: src/Repository/CrmDefaultRegisterRepository.php
Match lines: 1
310|    public function findByCompanyAndIntermediateCrm(Company $company, IntermediateCrm $intermediateCrm)

File: src/Repository/CrmLeadsRepository.php
Match lines: 1
444|    public function findByCompanyAndCriteria($companyId, $criteria)

File: src/Repository/CrmLeadsScheduledActivityRepository.php
Match lines: 2
246|    public function findByCompany(Company $company)
256|    public function findByCompanyAndIntermediateCrm(Company $company, IntermediateCrm $intermediateCrm)

File: src/Repository/CrmOpportunitiesScheduledActivityRepository.php
Match lines: 2
234|    public function findByCompany(Company $company)
244|    public function findByCompanyAndIntermediateCrm(Company $company, IntermediateCrm $intermediateCrm)

File: src/Repository/CrmSalesScheduledActivityRepository.php
Match lines: 2
222|    public function findByCompany(Company $company)
232|    public function findByCompanyAndIntermediateCrm(Company $company, IntermediateCrm $intermediateCrm)

File: src/Repository/CrmTagRepository.php
Match lines: 1
53|    public function findByCompany($company): array

File: src/Repository/CulturalHubActiveVoiceOccurrenceRepository.php
Match lines: 3
57|    public function findByCompanyMember(CompanyMembers $companyMember): array
115|    public function findByCompany(int $companyId): array
169|    public function findByCompanyTeam(CompanyTeam $team): array

File: src/Repository/CulturalHubActiveVoiceRecognitionRepository.php
Match lines: 2
53|    public function findByCompanyMember(CompanyMembers $companyMember): array
64|    public function findByCompanyTeam(CompanyTeam $team): array

File: src/Repository/DeiAssessmentAnswersRepository.php
Match lines: 1
29|    public function findByCompanyMemberAndQuestion(int $companyMemberId, int $questionId)

File: src/Repository/DeiAssessmentGeneralResultsRepository.php
Match lines: 2
46|    public function findByCompanyMember(int $companyMemberId)
79|    public function findByCompanyMemberAndConceptsRange(int $companyMemberId, float $minConcepts, float $maxConcepts)

File: src/Repository/DeiAssessmentLeaderResultsRepository.php
Match lines: 2
46|    public function findByCompanyMember(int $companyMemberId)
79|    public function findByCompanyMemberAndGeneralResultRange(int $companyMemberId, float $minGeneralResult, float $maxGeneralResult)

File: src/Repository/DeiAssessmentRepository.php
Match lines: 1
44|    public function findByCompanyMemberAndCompany(int $companyMemberId, int $companyId)

File: src/Repository/EmployeeAdvocacy/SettingsEmployeeAdvocacyRepository.php
Match lines: 1
53|    public function findByCompany(Company $company): array

File: src/Repository/EmployeeAdvocacy/SharingVacanciesRepository.php
Match lines: 1
242|    public function findByCompanyForTable($company, array $filters = []): array

File: src/Repository/EsocialDadosTrabalhadorRepository.php
Match lines: 1
372|    public function findByCompanyMember($companyMemberId): array

File: src/Repository/EsocialS1210EvtPgtosRepository.php
Match lines: 1
461|    public function findByCompany($company)

File: src/Repository/EsocialS2190EvtAdmPrelimRepository.php
Match lines: 1
74|    public function findByCompanyMember($companyMemberId): array

File: src/Repository/EsocialS2200EvtAdmissaoRepository.php
Match lines: 1
74|    public function findByCompanyMember($companyMemberId): array

File: src/Repository/EsocialS2206EvtAltContratualRepository.php
Match lines: 1
69|    public function findByCompanyMember($companyMemberId): array

File: src/Repository/EsocialS2500EvtProcTrabRepository.php
Match lines: 1
114|    public function findByCompany($companyId)

File: src/Repository/FloorCheckinRepository.php
Match lines: 1
58|    public function findByCompanyAndDateRange(Company $company, \DateTimeInterface $startDate, \DateTimeInterface $endDate): array

File: src/Repository/FloorQRCodeRepository.php
Match lines: 1
41|    public function findByCompany(Company $company): array

File: src/Repository/FloorSpaceCollaboratorRepository.php
Match lines: 1
78|    public function findByCompanyMemberId(int $companyMemberId): array

File: src/Repository/GoalCompanyRepository.php
Match lines: 1
36|    public function findByCompanyAsArray(int $companyID): array

File: src/Repository/GoalCycleRepository.php
Match lines: 1
29|    public function findByCompany(Company $company, bool $onlyActive = false): array

File: src/Repository/GoalDevelopmentActionMemberRepository.php
Match lines: 1
176|    public function findByCompanyMemberAsArray(int $companyMemberID): array

File: src/Repository/GoalDevelopmentActionTeamsRepository.php
Match lines: 1
50|    public function findByCompany(int $companyID): array

File: src/Repository/GoalPdiRepository.php
Match lines: 1
262|    public function findByCompanyMemberAsArray(int $companyMemberID): array

File: src/Repository/GoalTeamRepository.php
Match lines: 2
87|    public function findByCompanyAsArray(int $companyID): array
202|    public function findByCompany(int $companyID)

File: src/Repository/GovernanceBadgeRepository.php
Match lines: 1
31|    public function findByCompany(Company $company): array

File: src/Repository/GovernanceGrcCaseRepository.php
Match lines: 2
62|    public function findByCompany(Company $company): array
77|    public function findByCompanyAndStatuses(Company $company, array $statuses): array

File: src/Repository/InterviewTemplateRepository.php
Match lines: 1
20|    public function findByCompany(Company $company): array

File: src/Repository/JobInterviewRepository.php
Match lines: 1
157|    public function findByCompany($company): array

File: src/Repository/JobInterviewTemplateRepository.php
Match lines: 1
150|    public function findByCompany($company): array

File: src/Repository/MaintenanceIncidentRepository.php
Match lines: 1
48|    public function findByCompany(int $companyId, array $filters = []): array

File: src/Repository/MetaHuman/Committee/HarassmentAuditLogRepository.php
Match lines: 1
56|    public function findByCompanyInLastDays(Company $company, int $days = 90): array

File: src/Repository/MetaHuman/Telemetry/PermanencePromotionTelemetrySnapshotRepository.php
Match lines: 1
22|    public function findByCompanyAndMonth(Company $company, string $month): ?PermanencePromotionTelemetrySnapshot

File: src/Repository/MetaHumanClientCommitteeOutcomeRepository.php
Match lines: 1
25|    public function findByCompanyAndClient(Company $company, string $clientEntityType, int $clientEntityId, int $limit = 50): array

File: src/Repository/NpsLimitRepository.php
Match lines: 1
20|    public function findByCompany(Company $company): ?NpsLimit

File: src/Repository/NpsTemplateRepository.php
Match lines: 1
20|    public function findByCompany(Company $company): array

File: src/Repository/OffboardingMemberRepository.php
Match lines: 2
50|    public function findByCompany(int $companyId): array
63|    public function findByCompanyMember(CompanyMembers $companyMember): array

File: src/Repository/OffboardingRepository.php
Match lines: 1
26|    public function findByCompany(int $companyId): array

File: src/Repository/OffboardingSignatureFileTypeRepository.php
Match lines: 1
18|    // public function findByCompany(int $companyId): array

File: src/Repository/OnboardingActivityRepository.php
Match lines: 1
59|    public function findByCompany(int $companyId): array

File: src/Repository/OnboardingMemberRepository.php
Match lines: 2
41|    public function findByCompanyAndOnboarding(int $companyId, int $onboardingId)
65|    public function findByCompanyOnboardingAndStep(int $companyId, int $onboardingId, int $stepId): array

File: src/Repository/OnboardingRepository.php
Match lines: 1
27|    public function findByCompany($companyId)

File: src/Repository/OnboardingStepActivityRepository.php
Match lines: 1
54|    public function findByCompany(int $companyId): array

File: src/Repository/ParticipantRepository.php
Match lines: 1
58|    public function findByCompany(Company $company): array

File: src/Repository/ProcessRepository.php
Match lines: 1
97|    public function findByCompany($companyId)

File: src/Repository/ProjectRepository.php
Match lines: 2
171|    public function findByCompanyAndCreator(CompanyMembers $companyMember): array
188|    public function findByCompany($company): array

File: src/Repository/Recruitment/ProfessionalSearchRepository.php
Match lines: 1
48|    public function findByCompany(Company $company): array

File: src/Repository/SsmaOccurrenceCreatePermissionRepository.php
Match lines: 1
26|    public function findByCompany(Company $company): array

File: src/Repository/SsmaPermissionTagRepository.php
Match lines: 1
48|    public function findByCompanyOrdered(Company $company): array

File: src/Repository/SstExamRequestRepository.php
Match lines: 1
50|    public function findByCompanyAndEmployee(Company $company, User $employee): array

File: src/Repository/SstExamResultRepository.php
Match lines: 1
31|    public function findByCompany(int $companyId): array

File: src/Repository/StructuralResearchRepository.php
Match lines: 2
52|    public function findByCompany($options)
158|    public function findByCompanyId(int $companyId): array

File: src/Repository/TimeManegementRepositories/Tenant/OccurrenceRepository.php
Match lines: 1
73|    public function findByCompanyWithMembers(

File: src/Repository/TimeManegementRepositories/Tenant/ScheduleModelRepository.php
Match lines: 1
19|    public function findByCompanyWithDays(Company $company): array

File: src/Repository/TimeManegementRepositories/Tenant/WorkScheduleRepository.php
Match lines: 1
19|    public function findByCompanyWithRelations(Company $company): array

File: src/Repository/UnionRepresentativeMandateRepository.php
Match lines: 1
25|    public function findByCompanyMemberOrdered(CompanyMembers $member): array

File: src/Repository/UserRepository.php
Match lines: 1
210|    public function findByCompany($company): mixed

{"search_text": "getDepartment", "file_patterns": ["src/Entity/CompanyMembers.php"]}

File: src/Entity/CompanyMembers.php
Match lines: 1
906|    public function getDepartment(): ?CompanyArea

{"file_patterns": ["src/Entity/CompanyMembers.php"], "search_text": "getMemberAreas|getTeams|function getDepartment|getCompanyArea", "use_perl_regexp": true}

File: src/Entity/CompanyMembers.php
Match lines: 6
342|    public function getTeams(): ?string
555|            "teams" => $this->getTeams(),
791|            'teams' => $this->getTeams(),
804|            'team' => $this->getTeams(),
906|    public function getDepartment(): ?CompanyArea
920|    public function getMemberAreas(): Collection

{"file_patterns": ["src/Entity/CompanyTeam.php"], "search_text": "function getCompanyArea"}

File: src/Entity/CompanyTeam.php
Match lines: 1
170|    public function getCompanyArea(): ?CompanyArea

{"file_patterns": ["src/Entity/CompanyArea.php"], "search_text": "function getParent"}

File: src/Entity/CompanyArea.php
Match lines: 1
349|    public function getParent(): ?self

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "SsmaPreventionAreaAuthorizationService|SsmaAreaLimitationScope|resolveScope|canViewInspection|canViewAction|canViewAbordagem", "use_perl_regexp": true}

File: src/Controller/SsmaController.php
Match lines: 32
38|use App\Service\Ssma\SsmaAreaLimitationScope;
193|    private \App\Service\Ssma\SsmaPreventionAreaAuthorizationService $ssmaPreventionAreaAuthorization;
234|        \App\Service\Ssma\SsmaPreventionAreaAuthorizationService $ssmaPreventionAreaAuthorization,
6088|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
6155|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
8755|                    ->canViewInspection($areaScope, $i)
8826|                    ->canViewAbordagem($areaScope, $a)
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
9594|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
10049|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10097|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10099|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
10111|        return $this->ssmaPreventionAreaAuthorization->canViewAction(
10114|        ) && $this->ssmaPreventionAreaAuthorization->canViewAction(
11334|        if ($tagNameScoped === 'Supervisor de Equipe' || $tagNameScoped === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA) {
11338|        return $tagPm && in_array($tagPm->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
12498|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
12499|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
12926|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
18598|                    SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA,
18599|                    SsmaAreaLimitationScope::TAG_GESTOR_AREA,
19907|            && in_array($tag->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
19925|            && in_array($tag->getName(), ['Supervisor de Equipe', 'Supervisor', SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA], true);
20026|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
20060|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
24316|        if (!$this->canViewAbordagemUnderAreaScope($abordagem, $company, $user)) {
25218|        if (!$this->canViewAbordagemUnderAreaScope($original, $company, $user)) {

{"file_path": "src/Entity/CompanyMembers.php", "start_line": 880, "end_line": 960}

File: src/Entity/CompanyMembers.php (Total lines: 1258)
IS_TRUNCATED: false
LINE_RANGE: 880-960
880|    {
881|        $normalized = mb_strtolower(trim($employmentBond));
882|        if (!in_array($normalized, [self::BOND_CLT, self::BOND_THIRD_PARTY], true)) {
883|            throw new \InvalidArgumentException("O vínculo deve ser 'clt' ou 'terceiro'.");
884|        }
885|        $this->employmentBond = $normalized;
886|
887|        return $this;
888|    }
889|
890|    public function isThirdPartyBond(): bool
891|    {
892|        return $this->employmentBond === self::BOND_THIRD_PARTY;
893|    }
894|
895|    public function getJobLevel(): ?int
896|    {
897|        return $this->jobLevel;
898|    }
899|
900|    public function setJobLevel(?int $jobLevel): self
901|    {
902|        $this->jobLevel = $jobLevel;
903|        return $this;
904|    }
905|
906|    public function getDepartment(): ?CompanyArea
907|    {
908|        return $this->department;
909|    }
910|
911|    public function setDepartment(?CompanyArea $department): self
912|    {
913|        $this->department = $department;
914|        return $this;
915|    }
916|
917|    /**
918|     * @return Collection<int, CompanyMemberArea>
919|     */
920|    public function getMemberAreas(): Collection
921|    {
922|        return $this->memberAreas;
923|    }
924|
925|    public function addMemberArea(CompanyMemberArea $memberArea): self
926|    {
927|        if (!$this->memberAreas->contains($memberArea)) {
928|            $this->memberAreas[] = $memberArea;
929|            $memberArea->setCompanyMember($this);
930|        }
931|
932|        return $this;
933|    }
934|
935|    public function removeMemberArea(CompanyMemberArea $memberArea): self
936|    {
937|        if ($this->memberAreas->removeElement($memberArea) && $memberArea->getCompanyMember() === $this) {
938|            $memberArea->setCompanyMember(null);
939|        }
940|
941|        return $this;
942|    }
943|
944|    public function getPeopleAnalyticsAccessMemberEnabled(): bool
945|    {
946|        return $this->peopleAnalyticsAccessMemberEnabled;
947|    }
948|    public function setPeopleAnalyticsAccessMemberEnabled(bool $peopleAnalyticsAccessMemberEnabled): self
949|    {
950|        $this->peopleAnalyticsAccessMemberEnabled = $peopleAnalyticsAccessMemberEnabled;
951|        return $this;
952|    }
953|    public function getCostCenter(): ?CostCenter
954|    {
955|        return $this->costCenter;
956|    }
957|
958|    public function setCostCenter(?CostCenter $costCenter): self
959|    {
960|        $this->costCenter = $costCenter;

{"file_path": "src/Controller/SsmaController.php", "start_line": 10030, "end_line": 10130}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10030-10130
10030|    private function getSsmaActionPlanAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10031|    {
10032|        return $this->getSsmaAreaScopeForProduct($company, $user, 'ssma-action-plan');
10033|    }
10034|
10035|    private function getSsmaAreaScopeForProduct(
10036|        ?Company $company,
10037|        ?User $user,
10038|        string $productSlug,
10039|    ): SsmaPreventionAreaScope {
10040|        if (!$company || !$user instanceof User) {
10041|            return SsmaPreventionAreaScope::unrestricted();
10042|        }
10043|
10044|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10045|        $member = $this->getCurrentCompanyMember($company, $user);
10046|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, $productSlug) : null;
10047|
10048|        return $this->ssmaPreventionAreaAuthorization
10049|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10050|    }
10051|
10052|    /**
10053|     * Interseção dos recortes de área de Prevenção e Plano de Ação.
10054|     * null = nenhum dos dois limita; mapa vazio = limita e nega tudo.
10055|     *
10056|     * @return array<int, true>|null
10057|     */
10058|    private function getSsmaCombinedAreaMemberIds(?Company $company, ?User $user): ?array
10059|    {
10060|        $allowed = null;
10061|        foreach ([
10062|            $this->getSsmaPreventionAreaScope($company, $user),
10063|            $this->getSsmaActionPlanAreaScope($company, $user),
10064|        ] as $scope) {
10065|            if (!$scope->isRestricted()) {
10066|                continue;
10067|            }
10068|            $areaMap = $scope->allowedMemberIds();
10069|            $allowed = $allowed === null ? $areaMap : array_intersect_key($allowed, $areaMap);
10070|        }
10071|
10072|        return $allowed;
10073|    }
10074|
10075|    /**
10076|     * @return list<int>
10077|     */
10078|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10079|    {
10080|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10081|    }
10082|
10083|    /**
10084|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10085|     */
10086|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10087|    {
10088|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10089|            $this->getSsmaPreventionAreaScope($company, $user),
10090|            $inspection
10091|        );
10092|    }
10093|
10094|    /**
10095|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).
10096|     */
10097|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10098|    {
10099|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
10100|            $this->getSsmaPreventionAreaScope($company, $user),
10101|            $abordagem
10102|        );
10103|    }
10104|
10105|    /**
10106|     * Quem não vê a ação na listagem também não abre, edita nem apaga pelo ID.
10107|     * Interseção: se Prevenção ou Plano de Ação limitar, os dois recortes precisam passar.
10108|     */
10109|    private function canViewSsmaActionUnderAreaScope(SsmaAction $action, ?Company $company, ?User $user): bool
10110|    {
10111|        return $this->ssmaPreventionAreaAuthorization->canViewAction(
10112|            $this->getSsmaPreventionAreaScope($company, $user),
10113|            $action
10114|        ) && $this->ssmaPreventionAreaAuthorization->canViewAction(
10115|            $this->getSsmaActionPlanAreaScope($company, $user),
10116|            $action
10117|        );
10118|    }
10119|
10120|    /**
10121|     * @param array<string, mixed> $data
10122|     */
10123|    private function validateSsmaActionPayloadAgainstAreaScope(array $data, Company $company, User $user): ?string
10124|    {
10125|        foreach ([
10126|            $this->getSsmaPreventionAreaScope($company, $user),
10127|            $this->getSsmaActionPlanAreaScope($company, $user),
10128|        ] as $scope) {
10129|            $error = $this->ssmaPreventionAreaAuthorization->validateActionPayload($scope, $company, $data);
10130|            if ($error !== null) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 12740, "end_line": 12820}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12740-12820
12740|            }
12741|
12742|            // Ocorrências: por team_id direto OU por manager_id/people_ids/responsible_ids pertencente ?? equipe.
12743|            // Supervisor de Equipe deve ver ocorrências onde ?? gestor responsável ou pessoa envolvida,
12744|            // mesmo que o team_id da ocorrência não esteja preenchido ou difira do escopo.
12745|            $occurrences = array_values(array_filter($occurrences, static function (array $o) use ($teamIdStr, $memberIdsInTeams): bool {
12746|                if (isset($o['team_id']) && $o['team_id'] !== null && in_array((string) $o['team_id'], $teamIdStr, true)) {
12747|                    return true;
12748|                }
12749|                $managerId = (int) ($o['manager_id'] ?? 0);
12750|                if ($managerId > 0 && isset($memberIdsInTeams[$managerId])) {
12751|                    return true;
12752|                }
12753|                $personId = (int) ($o['person_id'] ?? 0);
12754|                if ($personId > 0 && isset($memberIdsInTeams[$personId])) {
12755|                    return true;
12756|                }
12757|                foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
12758|                    if (isset($memberIdsInTeams[(int) $p])) {
12759|                        return true;
12760|                    }
12761|                }
12762|                return false;
12763|            }));
12764|
12765|            // Inspeções: por team_id
12766|            $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
12767|                $tid = $i['team_id'] ?? null;
12768|                return $tid !== null && $tid !== '' && in_array((string) $tid, $teamIdStr, true);
12769|            }));
12770|
12771|            // Abordagens: por observador pertencente ?? equipe
12772|            $abordagens = array_values(array_filter($abordagens, static function (array $ab) use ($memberIdsInTeams): bool {
12773|                $obsId = (int) ($ab['observador_id'] ?? 0);
12774|                return $obsId > 0 && isset($memberIdsInTeams[$obsId]);
12775|            }));
12776|
12777|            // Plano de Ação: ações em que pelo menos um responsável pertence ao escopo da equipe
12778|            // (não todas as ações das ocorrências visíveis da equipe).
12779|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
12780|        }
12781|
12782|        if ($occurrenceAreaFilterIds !== null) {
12783|            $areaMemberIds = $areaScope->allowedMemberIds();
12784|            // Equipe com área fora do recorte esconde a inspeção mesmo com participante interno:
12785|            // é o que mantém a interseção quando team_limitation e area_limitation estão juntos.
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12787|                $inspections,
12788|                $areaScope->allowedTeamIds(),
12789|                $areaMemberIds,
12790|                $areaScope->teamIdsWithoutArea()
12791|            );
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
12793|                $abordagens,
12794|                $areaMemberIds
12795|            );
12796|            // Mesmo critério da limitação de equipe: plano de ação só com responsável no recorte.
12797|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $areaMemberIds);
12798|        }
12799|
12800|        if ($actionPlanAreaFilterIds !== null) {
12801|            $actionsTaken = $this->filterActionsByResponsibleMemberIds(
12802|                $actionsTaken,
12803|                $actionPlanAreaScope->allowedMemberIds()
12804|            );
12805|        }
12806|
12807|        // Técnico especialista: filtra ocorrências pelos tipos que têm autorização técnica (SsmaPermissionTagMember).
12808|        // Inspeções/Abordagens/Ações não são filtradas por equipe; o técnico não tem equipe SSMA atribuída.
12809|        if ($isTechSpecialistOnly) {
12810|            $techTypesSet = array_flip($userTechnicalTypes);
12811|            $occurrences = array_values(array_filter(
12812|                $occurrences,
12813|                static fn (array $o): bool => isset($techTypesSet[$o['type_value'] ?? ''])
12814|            ));
12815|        }
12816|
12817|        // Filtro de membro (próprio conteúdo) apenas quando o usuário NÃO tem escopo de equipe.
12818|        // Supervisor/Gestor de Equipe já foram limitados pelo filtro de equipe acima — aplicar o
12819|        // filtro de membro sobre eles reduziria a visão incorretamente para só o próprio conteúdo.
12820|        $ssmaPreventionInspectionEnabled = true;

{"file_patterns": ["src/Controller/SsmaController.php", "src/"], "search_text": "withExtraMemberIds"}

File: src/Service/Ssma/SsmaPreventionAreaScope.php
Match lines: 1
137|    public function withExtraMemberIds(array $memberIds): self

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "teamIsOutsideArea|teamHasNoArea|allowsMember|allowsTeam|allowedTeamIds|teamIdsWithoutArea", "use_perl_regexp": true}

File: src/Controller/SsmaController.php
Match lines: 4
12625|                static fn (array $t): bool => $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12690|                        && $areaScope->allowsTeam((int) ($t['id'] ?? 0))
12788|                $areaScope->allowedTeamIds(),
12790|                $areaScope->teamIdsWithoutArea()

{"file_patterns": ["src/"], "search_text": "expandWithDescendants|shouldApplyAreaLimitation|memberAreaIds|filterInspectionsForAreaScope|filterAbordagensByMemberIds", "use_perl_regexp": true}

File: src/Controller/SsmaController.php
Match lines: 10
10078|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10080|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
12048|                $memberAreaIds = $this->parseCompanyMemberAreaIds($member);
12057|                    'area_id'    => $memberAreaIds[0] ?? null,
12058|                    'area_ids'   => $memberAreaIds,
12786|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
12792|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
22057|            $memberAreaIds = $this->parseCompanyMemberAreaIds($member);
22065|                'area_id'    => $memberAreaIds[0] ?? null,
22066|                'area_ids'   => $memberAreaIds,

File: src/Service/Ssma/SsmaAreaLimitationScope.php
Match lines: 4
26|    public static function shouldApplyAreaLimitation(
55|    public static function expandWithDescendants(array $parentByAreaId, array $rootAreaIds): array
107|    public static function filterInspectionsForAreaScope(
154|    public static function filterAbordagensByMemberIds(array $abordagens, array $allowedMemberIds): array

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 6
41|        if (!SsmaAreaLimitationScope::shouldApplyAreaLimitation(
49|        $areaIds = SsmaAreaLimitationScope::expandWithDescendants(
51|            $this->memberAreaIds($member)
76|    public function memberAreaIds(CompanyMembers $member): array
133|        // Mesmo critério da listagem ({@see SsmaAreaLimitationScope::filterAbordagensByMemberIds}):
475|        foreach ($this->memberAreaIds($member) as $areaId) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 12020, "end_line": 12090}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 12020-12090
12020|
12021|                $roleMember = $member->getRoleMember();
12022|                // Tenant / admin da empresa: fora de todos os selects e listas de membros SSMA.
12023|                if ($memberUser && $this->isSsmaExcludedTenantAdminUser($memberUser)) {
12024|                    continue;
12025|                }
12026|                $superior = $member->getSuperior();
12027|                $superiorName = '';
12028|                if ($superior instanceof CompanyMembers) {
12029|                    $superiorName = $this->ssmaMemberDisplayLabel($superior);
12030|                    if ($superiorName === '') {
12031|                        $superiorName = (string) ($superior->getEmail() ?? '');
12032|                    }
12033|                }
12034|                // Só o primeiro nível da hierarquia (Gerência) — subgerência não entra no card.
12035|                // Fallback: se não houver raiz, usa o departamento direto do membro.
12036|                $rootAreaName = $this->resolveSsmaMemberRootAreaName($member);
12037|                if ($rootAreaName === '') {
12038|                    $dept = $member->getDepartment();
12039|                    if ($dept instanceof CompanyArea) {
12040|                        $rootAreaName = Utf8MojibakeNormalizer::normalize(trim((string) ($dept->getName() ?? '')));
12041|                    }
12042|                }
12043|                $vincPresentation = $this->ssmaMemberVinculoPresentation($member);
12044|                $positionName = $roleMember ? trim((string) $roleMember->getName()) : '';
12045|                if ($positionName === '') {
12046|                    $positionName = trim((string) ($member->getRole() ?? ''));
12047|                }
12048|                $memberAreaIds = $this->parseCompanyMemberAreaIds($member);
12049|
12050|                $allMembers[] = [
12051|                    'id'         => $member->getId(),
12052|                    'name'       => $name,
12053|                    'email'      => $email,
12054|                    'avatar'     => $memberUser ? $memberUser->getAvatar() : null,
12055|                    'position'   => $positionName,
12056|                    'role_id'    => $roleMember ? (int) $roleMember->getId() : null,
12057|                    'area_id'    => $memberAreaIds[0] ?? null,
12058|                    'area_ids'   => $memberAreaIds,
12059|                    'area'       => $rootAreaName,
12060|                    'gerencia'   => $rootAreaName,
12061|                    'registration' => sprintf('%07d', (int) $member->getId()),
12062|                    'superior_id' => $superior instanceof CompanyMembers ? $superior->getId() : null,
12063|                    'supervisor_name' => $superiorName,
12064|                    'created_at' => $member->getCreatedAt()?->format('Y-m-d'),
12065|                    'vinculo' => $vincPresentation['label'],
12066|                    'vinculo_code' => $vincPresentation['code'],
12067|                    'ssma_exclude_person_select' => false,
12068|                ];
12069|
12070|                if (
12071|                    $defaultAbordagemObservadorId === null
12072|                    && $user
12073|                    && $memberUser
12074|                    && $memberUser->getId() === $user->getId()
12075|                ) {
12076|                    $defaultAbordagemObservadorId = $member->getId();
12077|                }
12078|
12079|                if (!$memberUser) {
12080|                    continue;
12081|                }
12082|
12083|                $memberRoles = $memberUser->getRoles();
12084|
12085|                // Gestores de equipe (nao admin da tenant) para selects de gestor.
12086|                if (in_array('ROLE_MANAGER_GESTOR', $memberRoles, true)) {
12087|                    $gestores[] = [
12088|                        'id'       => $member->getId(),
12089|                        'name'     => $name,
12090|                        'email'    => $email,

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function filterActionsByResponsibleMemberIds"}

File: src/Controller/SsmaController.php
Match lines: 1
11546|    private function filterActionsByResponsibleMemberIds(array $actions, array $allowedResponsibleMemberIds): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function resolveSsmaProductPermissionTagForMember"}

File: src/Controller/SsmaController.php
Match lines: 1
10533|    private function resolveSsmaProductPermissionTagForMember(

{"file_path": "src/Controller/SsmaController.php", "start_line": 11540, "end_line": 11620}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 11540-11620
11540|     *
11541|     * @param array<int, array<string, mixed>> $actions
11542|     * @param array<int, true> $allowedResponsibleMemberIds mapa member_id => true
11543|     *
11544|     * @return array<int, array<string, mixed>>
11545|     */
11546|    private function filterActionsByResponsibleMemberIds(array $actions, array $allowedResponsibleMemberIds): array
11547|    {
11548|        if ($allowedResponsibleMemberIds === []) {
11549|            return [];
11550|        }
11551|
11552|        return array_values(array_filter($actions, static function (array $action) use ($allowedResponsibleMemberIds): bool {
11553|            $validatorMemberId = (int) ($action['validator_member_id'] ?? 0);
11554|            if ($validatorMemberId > 0 && isset($allowedResponsibleMemberIds[$validatorMemberId])) {
11555|                return true;
11556|            }
11557|
11558|            foreach ((array) ($action['responsible_ids'] ?? []) as $id) {
11559|                if (isset($allowedResponsibleMemberIds[(int) $id])) {
11560|                    return true;
11561|                }
11562|            }
11563|
11564|            return false;
11565|        }));
11566|    }
11567|
11568|    /**
11569|     * Colaborador (Membro): somente ações em que ele ?? responsável.
11570|     *
11571|     * @param array<int, array<string, mixed>> $visibleOccurrences Mantido por compatibilidade de chamada.
11572|     *
11573|     * @return array<int, array<string, mixed>>
11574|     */
11575|    private function filterActionsForMember(array $actions, array $visibleOccurrences, int $memberId): array
11576|    {
11577|        if ($memberId <= 0) {
11578|            return [];
11579|        }
11580|
11581|        return $this->filterActionsByResponsibleMemberIds($actions, [$memberId => true]);
11582|    }
11583|
11584|    private function resolveCurrentUserTechnicalTypes(Company $company, User $user): array
11585|    {
11586|        $members = $this->entityManager
11587|            ->getRepository(CompanyMembers::class)
11588|            ->findBy(['company' => $company, 'isRemoved' => 0]);
11589|
11590|        return $this->resolveUserTechnicalTypes($company, $user, $members);
11591|    }
11592|
11593|    /**
11594|     * Quem pode completar aprofundamento técnico (rotas legadas).
11595|     * Alinhado a {@see canAccessSsmaEventAprofundamento}: NÃO usa canManageSsmaOccurrences()/ROLE_MANAGER.
11596|     * Libera: Gestor Administrador SSMA / SUPER_ADMIN, ou especialista técnico do tipo.
11597|     */
11598|    private function canCompleteSsmaTechnicalType(Company $company, User $user, string $type): bool
11599|    {
11600|        if ($this->isSsmaAprofundamentoAdmin($company, $user)) {
11601|            return true;
11602|        }
11603|
11604|        return in_array($type, $this->resolveCurrentUserTechnicalTypes($company, $user), true);
11605|    }
11606|
11607|    /**
11608|     * Admin real do aprofundamento SSMA:
11609|     * - SUPER_ADMIN / ROLE_TENANT / ROLE_ADMIN
11610|     * - conta admin da empresa (ROLE_MANAGER) que NÃO é membro físico plain (Palloma)
11611|     * - tag de produto "Gestor Administrador"
11612|     *
11613|     * Felipe (05/08): Tenant não via 2ª barra/botão "Aprofundamento" e precisava
11614|     * se adicionar como técnico para testar — admin da tenant libera direto.
11615|     *
11616|     * Não libera colaborador físico ROLE_USER + tag Membro/Inspetor (Palloma),
11617|     * mesmo que herde ROLE_MANAGER de plataforma.
11618|     */
11619|    private function isSsmaAprofundamentoAdmin(?Company $company, ?User $user): bool
11620|    {

{"file_path": "src/Controller/SsmaController.php", "start_line": 10533, "end_line": 10580}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 10533-10580
10533|    private function resolveSsmaProductPermissionTagForMember(
10534|        CompanyMembers $member,
10535|        ?string $productSlug = null,
10536|    ): ?\App\Entity\PermissionTag {
10537|        try {
10538|            $productSlug = $productSlug ?: $this->getCurrentSsmaPermissionProductSlug();
10539|            $product = $this->entityManager
10540|                ->getRepository(\App\Entity\Product::class)
10541|                ->findOneBy(['slug' => $productSlug]);
10542|
10543|            if (!$product && str_starts_with($productSlug, 'ssma-')) {
10544|                $product = $this->entityManager
10545|                    ->getRepository(\App\Entity\Product::class)
10546|                    ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
10547|            }
10548|
10549|            if (!$product) {
10550|                return $member->getGlobalPermissionTag();
10551|            }
10552|
10553|            // Delega ao serviço centralizado que resolve herança, tags obsoletas e tag global actual
10554|            $resolved = $this->permissionTagByMemberService->getPermissionTag($member, $product);
10555|
10556|            return $resolved;
10557|        } catch (\Throwable $e) {
10558|        }
10559|
10560|        return $member->getGlobalPermissionTag();
10561|    }
10562|
10563|    /**
10564|     * S/N de descaracterização: liberado automaticamente para Gestor Administrador/Tenant
10565|     * (ROLE_SUPER_ADMIN, ROLE_MANAGER ou tag "Gestor Administrador"), sem precisar de
10566|     * configuração explícita em "Profissionais de Saúde". Demais perfis seguem a config.
10567|     */
10568|    private function ssmaMemberCanDescharacterizeAccident(Company $company, ?CompanyMembers $member): bool
10569|    {
10570|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10571|            return true;
10572|        }
10573|
10574|        if (!$member instanceof CompanyMembers) {
10575|            return false;
10576|        }
10577|
10578|        if ($this->memberIsSsmaGestorAdministrador($member)) {
10579|            return true;
10580|        }

{"file_patterns": ["src/Entity/SsmaAction.php"], "search_text": "function getValidatorMemberId|function getResponsibleIds|function getValidatorId", "use_perl_regexp": true}

File: src/Entity/SsmaAction.php
Match lines: 2
189|    public function getResponsibleIds(): array { return $this->responsibleIds ?? []; }
216|    public function getValidatorMemberId(): ?int { return $this->validatorMemberId; }

{"file_patterns": ["src/Entity/SsmaInspection.php"], "search_text": "function getCreatorMeta|function getSafetyResponsible|function getParticipantsIds|function getCompanionIds", "use_perl_regexp": true}

File: src/Entity/SsmaInspection.php
Match lines: 4
108|    public function getSafetyResponsible(): ?CompanyMembers { return $this->safetyResponsible; }
117|    public function getParticipantsIds(): array
141|    public function getCompanionIds(): array
193|    public function getCreatorMeta(): array

{"file_patterns": ["src/Entity/SsmaAbordagem.php"], "search_text": "function getObservadorId"}

File: src/Entity/SsmaAbordagem.php
Match lines: 1
263|    public function getObservadorId(): ?int { return $this->observadorId; }

{"file_path": "src/Controller/SsmaController.php", "start_line": 6060, "end_line": 6120}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 6060-6120
6060|        return 'neutral';
6061|    }
6062|
6063|    /**
6064|     * Relatório de Inspeção SSMA — versão impressão/PDF.
6065|     * Reaproveita os mesmos dados de viewInspection (serializeInspectionDetail
6066|     * + ações com origem = 'inspecao') e apenas renderiza um template visual
6067|     * dedicado para impressão/PDF.
6068|     *
6069|     * Rota: admin_ssma_inspection_report  —  /manager/ssma/inspection/{id}/report
6070|     */
6071|    public function inspectionReport(int $id): Response
6072|    {
6073|        /** @var User|null $user */
6074|        $user = $this->getUser();
6075|        if (!$user instanceof User) {
6076|            return $this->redirectToRoute('app_login');
6077|        }
6078|
6079|        $company    = $user->getCompany();
6080|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
6081|
6082|        if (!$inspection || !$company || $inspection->getCompany()->getId() !== $company->getId()) {
6083|            $this->addFlash('warning', 'Inspeção não encontrada.');
6084|
6085|            return $this->redirectToRoute('ssma_prevencao_index');
6086|        }
6087|
6088|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
6089|            $this->addFlash('warning', 'Inspeção não encontrada.');
6090|
6091|            return $this->redirectToRoute('ssma_prevencao_index');
6092|        }
6093|
6094|        $viewData         = $this->buildSsmaViewData();
6095|        $detail           = $this->serializeInspectionDetail($inspection);
6096|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
6097|
6098|        /** @var SsmaAction[] $rawActions */
6099|        $rawActions = $this->entityManager->getRepository(SsmaAction::class)
6100|            ->findBy(['company' => $company, 'origem' => ActionOrigemEnum::INSPECAO, 'origemId' => $id], ['createdAt' => 'DESC']);
6101|
6102|        $inspectionActions = array_map(static function (SsmaAction $a) use ($actionTypeLabels): array {
6103|            $deadline = $a->getDeadline()?->format('Y-m-d');
6104|            $type     = $a->getType() ?? '';
6105|
6106|            return [
6107|                'id'                 => $a->getId(),
6108|                'title'              => $a->getTitle(),
6109|                'description'        => $a->getDescription() ?? '',
6110|                'type'               => $type,
6111|                'type_label'         => $actionTypeLabels[$type] ?? $type,
6112|                'responsible_ids'    => $a->getResponsibleIds() ?? [],
6113|                'validator_member_id' => $a->getValidatorMemberId(),
6114|                'deadline'           => $deadline,
6115|                'solved'             => $a->isSolved(),
6116|                'control_hierarchy'  => $a->getControlHierarchy() ?? '',
6117|                'project_priority'   => $a->getProjectPriority() ?? '',
6118|                'created_at'         => $a->getCreatedAt()->format('Y-m-d'),
6119|            ];
6120|        }, $rawActions);

{"file_path": "src/Controller/SsmaController.php", "start_line": 9400, "end_line": 9480}

File: src/Controller/SsmaController.php (Total lines: 28276)
IS_TRUNCATED: false
LINE_RANGE: 9400-9480
9400|            'related_event_type' => $relatedEventType,
9401|            'relatedType'        => $relatedEventType,
9402|            'origem_id'          => $action->getOrigemId(),
9403|            'title'              => $action->getTitle(),
9404|            'description'        => $action->getDescription() ?? '',
9405|            'type'               => $type,
9406|            'type_label'         => $actionTypeLabels[$type] ?? $type,
9407|            'deadline'           => $action->getDeadline()?->format('Y-m-d'),
9408|            'responsible_ids'    => $action->getResponsibleIds() ?? [],
9409|            'validator_id'       => $action->getValidatorMemberId(),
9410|            'solved'             => $action->isSolved(),
9411|            'has_project'        => $action->isHasProject(),
9412|            'project_id'         => $projectId,
9413|            'project_url'        => $projectUrl,
9414|            'project_start_date' => $action->getProjectStartDate()?->format('Y-m-d') ?? '',
9415|            'project_priority'   => $action->getProjectPriority() ?? '',
9416|            'control_hierarchy'  => $action->getControlHierarchy() ?? '',
9417|        ], $this->resolveActionDeadlineEditMeta($action, $company, $user));
9418|
9419|        return new JsonResponse(['success' => true, 'action' => $payload]);
9420|    }
9421|
9422|    public function getInspection(int $id): JsonResponse
9423|    {
9424|        /** @var User|null $user */
9425|        $user = $this->getUser();
9426|        if (!$user) {
9427|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9428|        }
9429|
9430|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9431|        if (!$inspection || $inspection->getCompany()->getId() !== $user->getCompany()?->getId()) {
9432|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9433|        }
9434|
9435|        if (!$this->canViewInspectionUnderAreaScope($inspection, $user->getCompany(), $user)) {
9436|            return new JsonResponse(['success' => false, 'message' => 'Inspeção não encontrada.'], 404);
9437|        }
9438|
9439|        // TODO: This detail payload is the source used to hydrate the edit modal on the front-end.
9440|        return new JsonResponse([
9441|            'success' => true,
9442|            'inspection' => $this->serializeInspectionDetail($inspection),
9443|        ]);
9444|    }
9445|
9446|    public function viewInspection(int $id): Response
9447|    {
9448|        /** @var User|null $user */
9449|        $user = $this->getUser();
9450|        if (!$user) {
9451|            return $this->redirectToRoute('app_login');
9452|        }
9453|
9454|        $company = $user->getCompany();
9455|        $inspection = $this->entityManager->find(SsmaInspection::class, $id);
9456|
9457|        if (!$inspection || !$company || $inspection->getCompany()->getId() !== $company->getId()) {
9458|            $this->addFlash('warning', 'Inspeção não encontrada.');
9459|
9460|            return $this->redirectToRoute('ssma_prevencao_index');
9461|        }
9462|
9463|        $request = $this->requestStack->getCurrentRequest();
9464|        if ($request instanceof Request) {
9465|            $this->bindSsmaPreventionProductToRequest($request);
9466|        }
9467|
9468|        if (!$this->canViewInspectionUnderAreaScope($inspection, $company, $user)) {
9469|            $this->addFlash('warning', 'Inspeção não encontrada.');
9470|
9471|            return $this->redirectToRoute('ssma_prevencao_index');
9472|        }
9473|        $viewData    = $this->buildSsmaViewData(['module' => 'prevention']);
9474|        $detail      = $this->serializeInspectionDetail($inspection);
9475|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
9476|
9477|        /** @var SsmaAction[] $rawActions */
9478|        $rawActions = $this->entityManager->getRepository(SsmaAction::class)
9479|            ->findBy(['company' => $company, 'origem' => ActionOrigemEnum::INSPECAO, 'origemId' => $id], ['createdAt' => 'DESC']);
9480|

{"path_array": ["src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php"]}

==== FILE: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php ====
diff --git a/src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php b/src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
new file mode 100644
--- /dev/null
+++ b/src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
@@ -0,0 +1,501 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Service\Ssma;
+
+use App\Entity\Company;
+use App\Entity\CompanyArea;
+use App\Entity\CompanyMemberArea;
+use App\Entity\CompanyMembers;
+use App\Entity\CompanyTeam;
+use App\Entity\PermissionTag;
+use App\Entity\SsmaAbordagem;
+use App\Entity\SsmaAction;
+use App\Entity\SsmaInspection;
+use Doctrine\ORM\EntityManagerInterface;
+
+/**
+ * Autorização da Prevenção Ativa quando a tag do membro limita por área.
+ *
+ * Resolve o recorte uma única vez ({@see resolveScope}) e responde às três perguntas que
+ * antes estavam espalhadas pelo controller: o que listar, o que pode ser aberto por ID e o
+ * que pode ser gravado. A travessia da árvore continua em {@see SsmaAreaLimitationScope}.
+ */
+class SsmaPreventionAreaAuthorizationService
+{
+    public function __construct(private EntityManagerInterface $entityManager)
+    {
+    }
+
+    public function resolveScope(
+        Company $company,
+        ?CompanyMembers $member,
+        ?PermissionTag $tag,
+        bool $isPlatformAdmin,
+    ): SsmaPreventionAreaScope {
+        if ($isPlatformAdmin || !$member instanceof CompanyMembers) {
+            return SsmaPreventionAreaScope::unrestricted();
+        }
+
+        if (!SsmaAreaLimitationScope::shouldApplyAreaLimitation(
+            $tag?->getName(),
+            $tag?->getAreaLimitation(),
+            $isPlatformAdmin
+        )) {
+            return SsmaPreventionAreaScope::unrestricted();
+        }
+
+        $areaIds = SsmaAreaLimitationScope::expandWithDescendants(
+            $this->loadAreaParentMap($company),
+            $this->memberAreaIds($member)
+        );
+
+        [$teamIds, $teamIdsWithoutArea] = $this->splitCompanyTeamsByArea($company, $areaIds);
+        $memberIds = $this->collectMemberIdsInScope($company, $areaIds, $teamIds);
+
+        // O próprio membro sempre se enxerga, mesmo sem área cadastrada.
+        $selfId = (int) ($member->getId() ?? 0);
+        if ($selfId > 0) {
+            $memberIds[] = $selfId;
+        }
+
+        return SsmaPreventionAreaScope::restricted(
+            $areaIds,
+            array_values(array_unique($memberIds)),
+            $teamIds,
+            $teamIdsWithoutArea
+        );
+    }
+
+    /**
+     * Áreas vinculadas ao membro; sem vínculo, cai para o departamento do cadastro.
+     *
+     * @return list<int>
+     */
+    public function memberAreaIds(CompanyMembers $member): array
+    {
+        $ids = [];
+        foreach ($member->getMemberAreas() as $memberArea) {
+            if (!$memberArea instanceof CompanyMemberArea) {
+                continue;
+            }
+            $areaId = (int) ($memberArea->getCompanyArea()?->getId() ?? 0);
+            if ($areaId > 0) {
+                $ids[$areaId] = $areaId;
+            }
+        }
+
+        if ($ids === []) {
+            $departmentId = (int) ($member->getDepartment()?->getId() ?? 0);
+            if ($departmentId > 0) {
+                $ids[$departmentId] = $departmentId;
+            }
+        }
+
+        return array_values($ids);
+    }
+
+    // ─── Leitura ─────────────────────────────────────────────────────────────────────────────
+
+    public function canViewInspection(SsmaPreventionAreaScope $scope, SsmaInspection $inspection): bool
+    {
+        if (!$scope->isRestricted()) {
+            return true;
+        }
+
+        $teamId = (int) ($inspection->getTeam()?->getId() ?? 0);
+        if ($scope->allowsTeam($teamId)) {
+            return true;
+        }
+
+        // Equipe com área conhecida fora do recorte esconde o registro: pessoa no recorte
+        // não pode reabrir o que a interseção equipe ∩ área já negou.
+        if ($scope->teamIsOutsideArea($teamId)) {
+            return false;
+        }
+
+        foreach ($this->inspectionRelatedMemberIds($inspection) as $memberId) {
+            if ($scope->allowsMember($memberId)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    public function canViewAbordagem(SsmaPreventionAreaScope $scope, SsmaAbordagem $abordagem): bool
+    {
+        if (!$scope->isRestricted()) {
+            return true;
+        }
+
+        // Mesmo critério da listagem ({@see SsmaAreaLimitationScope::filterAbordagensByMemberIds}):
+        // é o observador que ancora a abordagem na área.
+        return $scope->allowsMember((int) ($abordagem->getObservadorId() ?? 0));
+    }
+
+    /**
+     * Mesmo critério da listagem do Plano de Ação: entra se o validador ou algum
+     * responsável está no recorte. Escopo vazio nega tudo.
+     */
+    public function canViewAction(SsmaPreventionAreaScope $scope, SsmaAction $action): bool
+    {
+        if (!$scope->isRestricted()) {
+            return true;
+        }
+
+        $validatorMemberId = (int) ($action->getValidatorMemberId() ?? 0);
+        if ($scope->allowsMember($validatorMemberId)) {
+            return true;
+        }
+
+        foreach ($action->getResponsibleIds() as $responsibleId) {
+            if ($scope->allowsMember((int) $responsibleId)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * @return list<int>
+     */
+    private function inspectionRelatedMemberIds(SsmaInspection $inspection): array
+    {
+        $ids = [
+            (int) ($inspection->getCreatorMeta()['created_by_id'] ?? 0),
+            (int) ($inspection->getSafetyResponsible()?->getId() ?? 0),
+        ];
+
+        foreach ($inspection->getParticipantsIds() as $participantId) {
+            $ids[] = (int) $participantId;
+        }
+        foreach ($inspection->getCompanionIds() as $companionId) {
+            $ids[] = (int) $companionId;
+        }
+
+        return array_values(array_filter($ids, static fn (int $id): bool => $id > 0));
+    }
+
+    // ─── Gravação ────────────────────────────────────────────────────────────────────────────
+
+    /**
+     * area_limitation: equipe é opcional — o recorte segue as pessoas da gerência.
+     * Equipe de outra área só é recusada quando permanece no payload (interseção com
+     * team_limitation). Sem equipe, ou equipe sem área cadastrada, a gravação segue as pessoas.
+     *
+     * @param array<string, mixed> $data payload cru de {@see SsmaController::createInspection}
+     */
+    public function validateInspectionPayload(
+        SsmaPreventionAreaScope $scope,
+        Company $company,
+        array $data,
+        ?int $resolvedTeamId,
+    ): ?string {
+        if (!$scope->isRestricted()) {
+            return null;
+        }
+
+        $teamError = $this->validateTeamId($scope, $company, $resolvedTeamId);
+        if ($teamError !== null) {
+            return $teamError;
+        }
+
+        $memberIds = [];
+        if (!empty($data['safety_responsible_id'])) {
+            $memberIds[] = (int) $data['safety_responsible_id'];
+        }
+        foreach ((array) ($data['participants_ids'] ?? []) as $participantId) {
+            $memberIds[] = (int) $participantId;
+        }
+        foreach ((array) ($data['companion_ids'] ?? []) as $companionId) {
+            $memberIds[] = (int) $companionId;
+        }
+        foreach ((array) ($data['deviations'] ?? []) as $deviation) {
+            if (!is_array($deviation)) {
+                continue;
+            }
+            if (!empty($deviation['responsible_id'])) {
+                $memberIds[] = (int) $deviation['responsible_id'];
+            }
+        }
+
+        return $this->validateMemberIds($scope, $company, $memberIds);
+    }
+
+    /**
+     * @param array<string, mixed> $data payload cru de {@see SsmaController::salvarAbordagem}
+     */
+    public function validateAbordagemPayload(
+        SsmaPreventionAreaScope $scope,
+        Company $company,
+        array $data,
+    ): ?string {
+        if (!$scope->isRestricted()) {
+            return null;
+        }
+
+        $observadorId = isset($data['observador_id']) ? (int) $data['observador_id'] : 0;
+        $observadorError = $this->validateMemberIds($scope, $company, [$observadorId]);
+        if ($observadorError !== null) {
+            return $observadorError;
+        }
+        if ($observadorId <= 0) {
+            return 'O colaborador informado não está no recorte da sua área.';
+        }
+
+        $memberIds = [];
+        foreach ($this->normalizeIdList($data['colaboradores_ids'] ?? []) as $colaboradorId) {
+            $memberIds[] = $colaboradorId;
+        }
+        if (!empty($data['coach_member_id'])) {
+            $memberIds[] = (int) $data['coach_member_id'];
+        }
+        if (!empty($data['medida_responsavel_id'])) {
+            $memberIds[] = (int) $data['medida_responsavel_id'];
+        }
+
+        return $this->validateMemberIds($scope, $company, $memberIds);
+    }
+
+    /**
+     * @param array<string, mixed> $data payload cru de {@see SsmaController::createAction}
+     */
+    public function validateActionPayload(
+        SsmaPreventionAreaScope $scope,
+        Company $company,
+        array $data,
+    ): ?string {
+        if (!$scope->isRestricted()) {
+            return null;
+        }
+
+        $memberIds = $this->normalizeIdList($data['responsible_ids'] ?? []);
+        $validatorMemberId = (int) ($data['validator_id'] ?? $data['validator_member_id'] ?? 0);
+        if ($validatorMemberId > 0) {
+            $memberIds[] = $validatorMemberId;
+        }
+
+        return $this->validateMemberIds($scope, $company, $memberIds);
+    }
+
+    /**
+     * Com area_limitation a equipe não é obrigatória. Se vier preenchida, precisa existir na
+     * empresa da sessão e não ter área conhecida fora do recorte. Equipe sem área cadastrada
+     * não esconde o registro na listagem — a gravação segue o mesmo critério.
+     */
+    public function validateTeamId(SsmaPreventionAreaScope $scope, Company $company, ?int $teamId): ?string
+    {
+        if (!$scope->isRestricted()) {
+            return null;
+        }
+
+        if ($teamId === null || $teamId <= 0) {
+            return null;
+        }
+
+        $denied = 'A equipe informada não está disponível para o recorte da sua área.';
+        $team = $this->entityManager->getRepository(CompanyTeam::class)
+            ->findOneBy(['id' => $teamId, 'company' => $company]);
+        if (!$team instanceof CompanyTeam) {
+            return $denied;
+        }
+
+        if ($scope->allowsTeam($teamId) || $scope->teamHasNoArea($teamId)) {
+            return null;
+        }
+
+        return $denied;
+    }
+
+    /**
+     * area_limitation sozinha: descarta equipe de outra gerência inferida do cadastro da pessoa,
+     * para a inspeção ficar no recorte pelas pessoas. Com team_limitation junto, mantém a equipe
+     * para a validação de área recusar — é a interseção dos dois recortes.
+     */
+    public function resolveWritableInspectionTeamId(
+        SsmaPreventionAreaScope $scope,
+        ?int $teamId,
+        bool $hasTeamLimitation,
+    ): ?int {
+        $teamId = $teamId !== null && $teamId > 0 ? $teamId : null;
+        if (!$scope->isRestricted() || $teamId === null) {
+            return $teamId;
+        }
+
+        if ($scope->allowsTeam($teamId) || $scope->teamHasNoArea($teamId)) {
+            return $teamId;
+        }
+
+        return $hasTeamLimitation ? $teamId : null;
+    }
+
+    /**
+     * Cada membro precisa existir na empresa da sessão e ter área dentro do recorte.
+     *
+     * @param list<int> $memberIds
+     */
+    public function validateMemberIds(SsmaPreventionAreaScope $scope, Company $company, array $memberIds): ?string
+    {
+        if (!$scope->isRestricted()) {
+            return null;
+        }
+
+        $denied = 'O colaborador informado não está no recorte da sua área.';
+        foreach (array_unique(array_map('intval', $memberIds)) as $memberId) {
+            if ($memberId <= 0) {
+                continue;
+            }
+            if (!$scope->allowsMember($memberId)) {
+                return $denied;
+            }
+            $member = $this->entityManager->getRepository(CompanyMembers::class)
+                ->findOneBy(['id' => $memberId, 'company' => $company]);
+            if (!$member instanceof CompanyMembers) {
+                return $denied;
+            }
+        }
+
+        return null;
+    }
+
+    /**
+     * @param mixed $raw lista de IDs ou JSON serializado (o tag-select envia string)
+     *
+     * @return list<int>
+     */
+    private function normalizeIdList(mixed $raw): array
+    {
+        if (is_string($raw)) {
+            $decoded = json_decode($raw, true);
+            $raw = is_array($decoded) ? $decoded : [];
+        }
+
+        return array_values(array_filter(array_map('intval', (array) $raw), static fn (int $id): bool => $id > 0));
+    }
+
+    // ─── Carga de dados ──────────────────────────────────────────────────────────────────────
+
+    /**
+     * @return array<int, int|null>
+     */
+    private function loadAreaParentMap(Company $company): array
+    {
+        $map = [];
+        foreach ($this->entityManager->getRepository(CompanyArea::class)->findByCompany((int) $company->getId()) as $area) {
+            if (!$area instanceof CompanyArea || !$area->getId()) {
+                continue;
+            }
+            $parent = $area->getParent();
+            $map[(int) $area->getId()] = $parent instanceof CompanyArea && $parent->getId()
+                ? (int) $parent->getId()
+                : null;
+        }
+
+        return $map;
+    }
+
+    /**
+     * @param list<int> $areaIds
+     *
+     * @return array{0: list<int>, 1: list<int>} equipes no recorte, equipes sem área cadastrada
+     */
+    private function splitCompanyTeamsByArea(Company $company, array $areaIds): array
+    {
+        $areaIdSet = array_fill_keys($areaIds, true);
+        $inScope = [];
+        $withoutArea = [];
+
+        foreach ($this->entityManager->getRepository(CompanyTeam::class)->findBy(['company' => $company]) as $team) {
+            if (!$team instanceof CompanyTeam || !$team->getId()) {
+                continue;
+            }
+            $teamId = (int) $team->getId();
+            $teamAreaId = (int) ($team->getCompanyArea()?->getId() ?? 0);
+            if ($teamAreaId <= 0) {
+                $withoutArea[] = $teamId;
+                continue;
+            }
+            if (isset($areaIdSet[$teamAreaId])) {
+                $inScope[] = $teamId;
+            }
+        }
+
+        return [$inScope, $withoutArea];
+    }
+
+    /**
+     * Membros do recorte em uma única passada: entra quem tem área no recorte ou quem pertence
+     * a uma equipe do recorte (a equipe já está dentro da área, mesmo critério dos modais).
+     *
+     * @param list<int> $areaIds
+     * @param list<int> $teamIds
+     *
+     * @return list<int>
+     */
+    private function collectMemberIdsInScope(Company $company, array $areaIds, array $teamIds): array
+    {
+        if ($areaIds === [] && $teamIds === []) {
+            return [];
+        }
+
+        $areaIdSet = array_fill_keys($areaIds, true);
+        $teamIdStr = array_map('strval', $teamIds);
+        $ids = [];
+
+        $members = $this->entityManager->getRepository(CompanyMembers::class)
+            ->findBy(['company' => $company, 'isRemoved' => 0]);
+
+        foreach ($members as $member) {
+            if (!$member instanceof CompanyMembers) {
+                continue;
+            }
+            $memberId = (int) $member->getId();
+            if ($memberId <= 0) {
+                continue;
+            }
+
+            if ($this->memberBelongsToAreas($member, $areaIdSet)
+                || $this->memberBelongsToTeams($member, $teamIdStr)
+            ) {
+                $ids[] = $memberId;
+            }
+        }
+
+        return $ids;
+    }
+
+    /**
+     * @param array<int, bool> $areaIdSet
+     */
+    private function memberBelongsToAreas(CompanyMembers $member, array $areaIdSet): bool
+    {
+        foreach ($this->memberAreaIds($member) as $areaId) {
+            if (isset($areaIdSet[$areaId])) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+
+    /**
+     * @param list<string> $teamIds
+     */
+    private function memberBelongsToTeams(CompanyMembers $member, array $teamIds): bool
+    {
+        if ($teamIds === []) {
+            return false;
+        }
+
+        foreach (array_map('trim', explode(',', $member->getTeams() ?? '')) as $memberTeamId) {
+            if ($memberTeamId !== '' && in_array($memberTeamId, $teamIds, true)) {
+                return true;
+            }
+        }
+
+        return false;
+    }
+}

{"query_name": "composer.json"}

composer.json
public/js/ckfinder/core/connector/php/vendor/spatie/dropbox-api/composer.json
public/js/ckfinder/core/connector/php/vendor/spatie/flysystem-dropbox/composer.json
src/libs/nfephp-org/sped-common/composer.json
src/libs/nfephp-org/sped-esocial/composer.json

{"file_path": "src/Repository/CompanyAreaRepository.php", "start_line": 95, "end_line": 130}

File: src/Repository/CompanyAreaRepository.php (Total lines: 244)
IS_TRUNCATED: false
LINE_RANGE: 95-130
95|            ->setParameter('val', $value)
96|            ->getQuery()
97|            ->getOneOrNullResult()
98|        ;
99|    }
100|    */
101|    public function findByCompany(int $companyId, bool $activeOnly = false): array
102|    {
103|        $qb = $this->createQueryBuilder('p')
104|            ->where('p.company = :companyId')
105|            ->setParameter('companyId', $companyId)
106|            ->orderBy('p.name', 'ASC');
107|
108|        if ($activeOnly) {
109|            $qb->andWhere('p.status = :status')
110|                ->setParameter('status', CompanyArea::STATUS_ACTIVE);
111|        }
112|
113|        return $qb->getQuery()->getResult();
114|    }
115|
116|    public function findAvailableForCompany(int $companyId): array
117|    {
118|        return $this->findByCompany($companyId, true);
119|    }
120|
121|    /**
122|     * @return CompanyArea[]
123|     */
124|    public function findForCompany(?Company $company, bool $activeOnly = true): array
125|    {
126|        if (!$company || !$company->getId()) {
127|            return [];
128|        }
129|
130|        return $activeOnly

{"file_patterns": ["src/Entity/CompanyTeam.php"], "search_text": "isRemoved|isActive|function getIsRemoved|function isRemoved", "use_perl_regexp": true}

No matches found

{"file_patterns": ["src/Entity/CompanyTeam.php"], "search_text": "removed|Removed|status|Status", "use_perl_regexp": true}

No matches found

{"file_patterns": ["src/Entity/CompanyArea.php"], "search_text": "const STATUS|function getStatus", "use_perl_regexp": true}

File: src/Entity/CompanyArea.php
Match lines: 5
16|    public const STATUS_ACTIVE = 'active';
17|    public const STATUS_INACTIVE = 'inactive';
19|    public const STATUS_LABELS = [
189|    public function getStatus(): ?string
206|    public function getStatusLabel(): string

{"search_text": "withExtraMemberIds"}

File: src/Service/Ssma/SsmaPreventionAreaScope.php
Match lines: 1
137|    public function withExtraMemberIds(array $memberIds): self

File: tests/Unit/Product/Ssma/SsmaPreventionAreaScopeTest.php
Match lines: 3
67|    public function testWithExtraMemberIds(): void
70|        $widened = $restricted->withExtraMemberIds([200, 0, -5]);
78|        self::assertSame($unrestricted, $unrestricted->withExtraMemberIds([1]));

{"file_patterns": ["tests/"], "search_text": "resolveScope|SsmaPreventionAreaAuthorizationService|canViewAction|canViewInspection|validateInspectionPayload|validateActionPayload", "use_perl_regexp": true}

File: tests/Unit/Product/FolhaDePagamento/PayrollFlowDashboardStageScopeHelperTest.php
Match lines: 2
12|    public function testResolveScopedBacklogCountPrefersFilteredItemsOverStaleSummary(): void
16|        $count = PayrollFlowDashboardStageScopeHelper::resolveScopedBacklogCount(

File: tests/Unit/Product/Ssma/SsmaPreventionAreaAuthorizationServiceTest.php
Match lines: 43
13|use App\Service\Ssma\SsmaPreventionAreaAuthorizationService;
19|final class SsmaPreventionAreaAuthorizationServiceTest extends TestCase
26|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
28|        self::assertTrue($service->canViewInspection(
37|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
40|        self::assertTrue($service->canViewInspection($scope, $this->inspection(teamId: 10)));
51|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
54|        self::assertFalse($service->canViewInspection(
63|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
66|        self::assertTrue($service->canViewInspection($scope, $this->inspection(participantIds: [100])));
67|        self::assertTrue($service->canViewInspection($scope, $this->inspection(createdById: 100)));
68|        self::assertTrue($service->canViewInspection($scope, $this->inspection(safetyResponsibleId: 100)));
69|        self::assertTrue($service->canViewInspection($scope, $this->inspection(companionIds: [100])));
70|        self::assertFalse($service->canViewInspection($scope, $this->inspection(participantIds: [101])));
76|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
79|        self::assertTrue($service->canViewInspection(
83|        self::assertFalse($service->canViewInspection(
92|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
104|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
107|        self::assertTrue($service->canViewAction($scope, $this->action(responsibleIds: [100])));
108|        self::assertTrue($service->canViewAction($scope, $this->action(validatorMemberId: 100)));
109|        self::assertTrue($service->canViewAction($scope, $this->action(responsibleIds: [101], validatorMemberId: 100)));
110|        self::assertFalse($service->canViewAction($scope, $this->action(responsibleIds: [101], validatorMemberId: 102)));
111|        self::assertFalse($service->canViewAction($scope, $this->action()));
112|        self::assertTrue($service->canViewAction(
121|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
124|        self::assertFalse($service->canViewAction($scope, $this->action(responsibleIds: [100], validatorMemberId: 100)));
136|        $error = $service->validateInspectionPayload($scope, $company, [
151|        self::assertNotNull($service->validateInspectionPayload($scope, $company, [
156|        self::assertNotNull($service->validateInspectionPayload($scope, $company, [
169|        self::assertNull($service->validateInspectionPayload($scope, $company, [
184|        self::assertNull($service->validateInspectionPayload($scope, $company, [
198|        self::assertNull($service->validateInspectionPayload($scope, $company, [
212|            $service->validateInspectionPayload($scope, $company, ['safety_responsible_id' => 100], 11)
219|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
300|        $service = new SsmaPreventionAreaAuthorizationService($this->createMock(EntityManagerInterface::class));
303|        self::assertNull($service->validateInspectionPayload($scope, $company, ['participants_ids' => [999]], null));
305|        self::assertNull($service->validateActionPayload($scope, $company, [
322|            $service->validateActionPayload($scope, $company, [
329|            $service->validateActionPayload($scope, $company, [
334|        self::assertNull($service->validateActionPayload($scope, $company, [
415|    ): SsmaPreventionAreaAuthorizationService {
449|        return new SsmaPreventionAreaAuthorizationService($em);

{"state": "DONE"}