{"file_path": "src/Controller/SsmaController.php", "start_line": 10380, "end_line": 10470}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10380-10470
10380|
10381|    /**
10382|     * @param array<string, mixed> $data Payload já normalizado ({@see normalizeSsmaEventPayload}).
10383|     */
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
10385|    {
10386|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10387|        if ($scope === null) {
10388|            return null;
10389|        }
10390|
10391|        $details = $data['details'] ?? [];
10392|        if (!is_array($details)) {
10393|            $details = [];
10394|        }
10395|
10396|        if ($scope === []) {
10397|            // Técnico especialista SSMA (sem equipe no produto): não valida payload por equipe.
10398|            // O acesso ao evento já ?? validado por isSsmaEventVisibleUnderOccurrenceTeamDashboardScope
10399|            // e canCompleteSsmaTechnicalType antes dessa chamada, garantindo que só acessa seu tipo.
10400|            try {
10401|                $member = $this->getCurrentCompanyMember($company, $user);
10402|                if ($member) {
10403|                    $techLinks = $this->entityManager
10404|                        ->getRepository(SsmaPermissionTagMember::class)
10405|                        ->findBy(['companyMember' => $member]);
10406|                    if (!empty($techLinks)) {
10407|                        return null;
10408|                    }
10409|                }
10410|            } catch (\Throwable) {
10411|            }
10412|
10413|            return 'Seu perfil não está vinculado a nenhuma equipe; não ? possível registrar ocorrências.';
10414|        }
10415|
10416|        $teamId = (int) ($details['team_id'] ?? 0);
10417|        if ($teamId <= 0 || !in_array($teamId, $scope, true)) {
10418|            return 'A equipe informada não está disponível para o seu perfil.';
10419|        }
10420|
10421|        $allowedMembers = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);
10422|
10423|        $managerId = (int) ($details['manager_id'] ?? 0);
10424|        if ($managerId <= 0) {
10425|            return 'Informe o gestor responsável.';
10426|        }
10427|        $leaderIds = $this->collectImmediateLeaderMemberIds($company);
10428|        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);
10429|        $managerAllowed = isset($leaderIds[$managerId]) && isset($allowedMembers[$managerId]);
10430|        if ($ownLeaderId !== null && $ownLeaderId === $managerId) {
10431|            $managerAllowed = true;
10432|        }
10433|        if (!$managerAllowed) {
10434|            return 'O gestor responsável precisa ser líder imediato de alguém e pertencer ao seu escopo de equipe/área.';
10435|        }
10436|
10437|        return null;
10438|    }
10439|
10440|    /**
10441|     * team_limitation na inspeção: a equipe é o recorte. Sem equipe, ou equipe fora do cadastro
10442|     * do perfil, a gravação é recusada. area_limitation sozinha não passa por aqui.
10443|     *
10444|     * @param array<string, mixed> $data
10445|     */
10446|    private function validateInspectionPayloadAgainstTeamScope(
10447|        array $data,
10448|        ?int $resolvedTeamId,
10449|        Company $company,
10450|        User $user,
10451|    ): ?string {
10452|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10453|        if ($scope === null) {
10454|            return null;
10455|        }
10456|
10457|        if ($scope === []) {
10458|            try {
10459|                $member = $this->getCurrentCompanyMember($company, $user);
10460|                if ($member) {
10461|                    $techLinks = $this->entityManager
10462|                        ->getRepository(SsmaPermissionTagMember::class)
10463|                        ->findBy(['companyMember' => $member]);
10464|                    if (!empty($techLinks)) {
10465|                        return null;
10466|                    }
10467|                }
10468|            } catch (\Throwable) {
10469|            }
10470|

{"search_text": "As pessoas envolvidas devem pertencer"}

No matches found

{"search_text": "allMembersForEventPeople"}

File: docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md
Match lines: 3
138|Local: bloco de montagem de `allMembersForEventPeople` / `gestoresForEventModal` (~linhas
142|- `allMembersForEventPeople` (usado no seletor de "pessoas envolvidas"/"testemunhas") era
155|- `allMembersForEventPeople` passou a usar sempre `$allMembers` (empresa toda), tanto no bloco de

File: src/Controller/SsmaController.php
Match lines: 8
13179|        $allMembersForEventPeople = $allMembers;
13547|                ($occurrenceTeamFilterIds !== null && $allMembersForEventPeople !== [])
13550|                ? $allMembersForEventPeople
13601|            $allMembersForEventPeople = $this->filterSsmaMembersToReferencedForDetail(
13602|                $allMembersForEventPeople,
13610|        $allMembersForEventPeople = $this->sortSsmaMemberRowsByName($allMembersForEventPeople);
13671|                'all_members_for_event_people' => $allMembersForEventPeople,
13672|                'ssma_modal_members' => $allMembersForEventPeople,

{"file_path": "docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md"}

File: docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md (Total lines: 266)
IS_TRUNCATED: false
LINE_RANGE: 1-266
1|# SSMA Ocorrência — Auditoria de Permissões (reunião 2026-09-03) e Correções
2|
3|## Fonte
4|
5|Transcrição integral da reunião de alinhamento de permissões SSMA, gravada em
6|`2026-09-03_16-28-32` (áudio "ao vivo" do Gustavo explicando o modelo de permissões produto a
7|produto, focado em Ocorrência). Este documento traduz essa explicação em regras técnicas,
8|audita o código atual do módulo de **Ocorrência** contra essas regras, e registra o que foi
9|corrigido agora vs. o que ainda está pendente.
10|
11|Escopo: **apenas SSMA Ocorrência** (registro, aprofundamento, descaracterização, aprovação,
12|listagem, botões, exportação, pickers de pessoas). Árvore de Causas, Prevenção Ativa, Plano de
13|Ação e Direito de Recusa foram mencionados na reunião mas ficam fora deste documento.
14|
15|## 1. Modelo de permissões — resumo executivo (Ocorrência)
16|
17|### 1.1 Tags estruturais (independem de SSMA)
18|
19|`Membro` (default) → `Supervisor de Equipe` / `Supervisor de Área` / `Supervisor` → `Gestor de
20|Equipe` / `Gestor de Área` / `Gestor Administrador`.
21|
22|- **Membro**: baseline. Só vê o que registrou, o que está relacionado a ele (envolvido/gestor
23|  responsável), ou o que pode aprofundar/aprovar por configuração.
24|- **Supervisor** (qualquer nível): ganha **visão** adicional (dados de outras pessoas, escopo
25|  por equipe/área/geral), mas **não ganha ação**. Continua sendo "Membro" para fins de registrar
26|  a própria ocorrência — a tag de supervisor nunca deve **remover** um botão que a matriz de
27|  configuração já concedeu ao colaborador.
28|- **Gestor** (qualquer nível): ganha visão **e ação** — vira equivalente a administrador dentro
29|  do escopo (equipe/área/todos). Sempre vê os 3 botões (+ROS, +Evento, Exportar planilha),
30|  sempre vê "Criar ação", "+Aprofundamento", "Árvore de causas" e o card de "Comitê" em qualquer
31|  ocorrência dentro do seu escopo — independentemente de estar listado como responsável,
32|  envolvido ou especialista.
33|- **Gestor Administrador**: único nível de gestor que vê o botão **Editar** ocorrência.
34|
35|### 1.2 Etapas do registro (fluxo transversal a todos os 5 tipos)
36|
37|1. **Informação geral** — quem registra depende da matriz de configuração (`Registro por tipo de
38|   ocorrência`), não da tag estrutural.
39|2. **Aprofundamento** — quem edita depende da listagem de especialistas por tipo (config).
40|3. **Validação** — quem aprova depende da listagem de "Aprovador de ocorrência" (config).
41|
42|Citação literal (transcrição, ~l.343-348):
43|
44|> "Um erro que estava rolando, que talvez tenha arrumado, mas que rolou... como tinha essa
45|> coisa do supervisor só ver e a pessoa tinha autorização para ROS, por exemplo, o que
46|> aconteceu é que sumiu com o botão... Nesse caso aqui a configuração do membro de fazer ROS ou
47|> evento ele tem prioridade, porque é o default membro."
48|
49|Citação literal (transcrição, ~l.196-202):
50|
51|> "elas vão ver o cardzinho, quando elas entram, tem um botãozinho de fazer a validação... se eu
52|> sou um aprovador, se eu estou naquela configuração, eu vou ver esse botão de validar
53|> ocorrência."
54|
55|Citação literal (transcrição, ~l.379-382 — nível de gestor não dá bypass de validação):
56|
57|> "Validar a ocorrência vai depender da configuração... Na configuração de validação, tem uma
58|> configuração exclusiva pra isso. O gestor administrativo se ele não tiver [configurado], nem
59|> aparece pra ele."
60|
61|Citação literal (transcrição, ~l.103-106 — pickers de envolvido/testemunha nunca são filtrados):
62|
63|> "Essa limitação não está associada a pessoas envolvidas e nem a testemunhas... que sempre
64|> aparece todo mundo. A possibilidade é eu poder colocar qualquer pessoa aqui."
65|
66|Citação literal (transcrição, ~l.100-104 — gestor responsável É filtrado por escopo do gestor):
67|
68|> "Gestor, ele vai poder fazer coisas que o administrador faz. Por exemplo, selecionar outras
69|> pessoas aqui dentro. Quais pessoas? Aí depende do meu nível de gestor. De equipe, só as
70|> pessoas que fazem parte da mesma equipe que eu faço. Se for [de área], só as pessoas que fazem
71|> parte da mesma estrutura organizacional que eu faço."
72|
73|## 2. Bugs encontrados e status
74|
75|| # | Bug | Severidade | Status |
76||---|-----|------------|--------|
77|| 1 | Supervisor com ROS/Evento habilitado na matriz podia perder o botão de registro | Alta (regressão confirmada em reunião) | **Corrigido** |
78|| 2 | `Gestor de Equipe`/`Gestor Administrador` aprovavam ocorrência sem estar na lista de "Aprovador de ocorrência" | Alta (bypass indevido de validação) | **Corrigido** |
79|| 3 | Picker de "pessoas envolvidas/testemunhas" era filtrado por equipe/área do supervisor/gestor (deveria sempre listar a empresa toda) | Média (funcional — impedia adicionar envolvidos fora da equipe) | **Corrigido** |
80|| 4 | Picker de "gestor responsável" listava tags SSMA / qualquer membro, em vez do líder imediato do organograma | Alta (regra Brenda 03/09/2026) | **Corrigido** |
81|| 4b | Eventos não apareciam para quem cadastrou (`created_by_id` é User ID; listagem comparava member ID) | Alta | **Corrigido** |
82|| 4c | Página de informações gerais mostrava Gestor responsável vazio ("apagado") | Alta | **Corrigido** |
83|| 5 | `Gestor de Equipe`/`Gestor de Área` não recebem bypass automático de "+Aprofundamento" (só `Gestor Administrador` recebe) | Média | Pendente — ver §4.1 |
84|| 6 | Gate de descaracterização (`applySsmaDescaracterPermissionGate`) não retorna 403; apenas remove dados silenciosamente | Média | Pendente — ver §3.2 |
85|| 7 | Listagem (`isOccurrenceVisibleToMember`) usa `if` sequenciais em vez de união explícita + "cap 500" antes do filtro de visibilidade | Alta (risco técnico) | Pendente — ver §3.3 |
86|| 8 | Comitê da árvore de causas: confirmar se card fica oculto para Supervisor (reunião diz que é exclusivo de Gestor) | A confirmar | Pendente — ver §3.4 |
87|
88|## 3. O que foi corrigido agora
89|
90|Arquivo único alterado: `src/Controller/SsmaController.php`.
91|
92|### 3.1 `canMemberRegisterOwnOccurrence()` — supervisor não bloqueia mais o próprio registro
93|
94|Local:
95|```11416:11431:src/Controller/SsmaController.php
96|    private function canMemberRegisterOwnOccurrence(?Company $company, ?User $user): bool
97|    {
98|        ...
99|    }
100|```
101|
102|**Antes**: havia um `if ($this->isSsmaViewer()) { return false; }` que zerava a permissão de
103|registro para qualquer tag de Supervisor, mesmo quando a matriz (`ssma_occurrence_create_permission`)
104|liberava ROS/Evento para aquele colaborador especificamente. Isso reproduz exatamente o bug
105|relatado na reunião ("sumiu com o botão").
106|
107|**Depois**: removido o bloqueio por `isSsmaViewer()`. A função volta a decidir apenas se existe
108|vínculo de `CompanyMembers` — o tipo específico liberado continua 100% decidido pela matriz em
109|`canCreateSsmaOccurrenceType()` / `SsmaOccurrenceCreatePermissionService::resolveAllowedCreateTypes()`,
110|que já tinha essa lógica correta e não foi alterada.
111|
112|### 3.2 `canApproveSsmaOccurrence()` — validação exige estar na lista de aprovadores
113|
114|Local:
115|```11194:11220:src/Controller/SsmaController.php
116|    private function canApproveSsmaOccurrence(?Company $company, ?User $user): bool
117|    {
118|        ...
119|    }
120|```
121|
122|**Antes**: bypassava automaticamente para `ROLE_MANAGER_GESTOR` e para qualquer membro com tag
123|`Gestor Administrador` (`memberIsSsmaGestorAdministrador()`), **sem checar**
124|`getFlashReportApproverIds()`.
125|
126|**Depois**: mantido apenas o bypass de plataforma/tenant (`ROLE_SUPER_ADMIN`, `ROLE_MANAGER`,
127|`ROLE_TENANT` — mesmo padrão usado em `canEditOccurrenceDetail()`). Removidos os bypasses de
128|`ROLE_MANAGER_GESTOR` e de `Gestor Administrador`: agora **todo mundo**, inclusive Gestor
129|Administrador, só vê "Validar ocorrência" se o `CompanyMembers::id` estiver na lista configurada
130|em Configurações → Aprovador de ocorrência — exatamente como a reunião descreve.
131|
132|Consumidores de `can_approve_occurrence` no Twig (`occurrence_view.html.twig`, linhas ~718,
133|~806, ~3069) já usam essa função via a variável do controller, então o fix se propaga sem
134|necessidade de tocar em template.
135|
136|### 3.3 Pickers do modal de evento — escopo invertido corrigido
137|
138|Local: bloco de montagem de `allMembersForEventPeople` / `gestoresForEventModal` (~linhas
139|12840-12900 de `SsmaController.php`, dentro do método que monta a view de ocorrências).
140|
141|**Antes**:
142|- `allMembersForEventPeople` (usado no seletor de "pessoas envolvidas"/"testemunhas") era
143|  filtrado pela equipe/área do supervisor/gestor logado.
144|- `gestoresForEventModal` (usado no seletor de "gestor responsável") **ignorava** esse filtro de
145|  propósito, com o comentário explícito "escopo da empresa, não só membros da equipe do
146|  supervisor".
147|
148|Isso é o **inverso exato** do que a reunião define duas vezes (na especificação escrita do
149|usuário e nesta transcrição de áudio):
150|
151|- Envolvido/testemunha → nunca filtra, sempre lista todo mundo.
152|- Gestor responsável → filtra pelo escopo (equipe/área) de quem está montando o registro.
153|
154|**Depois**:
155|- `allMembersForEventPeople` passou a usar sempre `$allMembers` (empresa toda), tanto no bloco de
156|  escopo de equipe quanto no de área.
157|- `gestoresForEventModal` passou a receber o mapa de membros do escopo
158|  (`collectCompanyMemberIdsBelongingToCompanyTeams()` / `$areaScope->allowedMemberIds()`) em vez
159|  de `null`, via `buildSsmaEventModalGestores(...)`. Essa função já tratava corretamente o caso
160|  de o próprio usuário logado poder sempre se selecionar mesmo fora do escopo (auto-seleção não
161|  é afetada pelo fix).
162|
163|Teste automatizado relacionado (`tests/Ssma/ssma_event_modal_scope_standalone.php`) continua
164|passando (8/8) — ele cobre a lógica de "quando aplicar o filtro no Twig", que não foi alterada;
165|o fix atual é sobre **qual** lista é usada como base do filtro em cada picker.
166|
167|### 3.4 Atualização Brenda 03/09/2026 — Gestor responsável = líder imediato
168|
169|Fonte: mensagem da Brenda + áudio complementar. Campo `Responsável` do cadastro de colaborador
170|(`templates/company/members_v2.html.twig`, `#superior` → `CompanyMembers.superior`).
171|
172|Regras implementadas:
173|
174|1. **Responsável pelo cadastro** = login que iniciou o registro (`SsmaEvent.createdById` =
175|   User ID). Não aparece no off-canvas. Aparece só nas informações gerais do detalhe
176|   (`occurrence_view.html.twig`).
177|2. **Gestor responsável** = líder imediato (`getSuperior()`) de quem está cadastrando.
178|   Membro/supervisor vê o campo preenchido e **não edita**. Gestor (equipe/área/administrador)
179|   pode trocar.
180|3. Lista do select, quando Gestor edita: interseção de (3.1) pessoas que são superior de
181|   alguém **e** (3.2) pessoas do escopo de equipe/área do gestor. O próprio líder de quem está
182|   logado sempre entra, para o default não ficar vazio.
183|4. **Envolvidos e testemunhas** = qualquer membro (já corrigido na rodada anterior).
184|5. **Responsável da área** = local da ocorrência (`enrichOccurrenceAreaResponsible`) — só
185|   display, sem campo no off-canvas.
186|
187|Bugs que essa regra fechou:
188|
189|- Evento não aparecia para quem cadastrou: `isOccurrenceVisibleToMember` agora resolve
190|  `created_by_id` (User) → `created_by_member_id` e a listagem anexa os eventos do login.
191|- Campo "apagado" no detalhe: se `manager_id` estiver vazio, o display cai no líder imediato
192|  de quem cadastrou (`enrichOccurrenceCreatorAndManagerFallback`).
193|
194|## 4. Bugs pendentes (não corrigidos nesta rodada — motivo e recomendação)
195|
196|### 4.1 Aprofundamento — bypass de Gestor de Equipe/Área
197|
198|Reunião (~l.369-373): "criar ação, aprofundamento, árvore de causas, detalhes do comitê... são
199|exclusivos de gestor. Aí não importa o nível, se ele teve acesso a essa ocorrência, ele vai
200|poder ver isso aqui." Hoje `canAccessSsmaEventAprofundamento()` só dá bypass para
201|`isSsmaAprofundamentoAdmin` (que resolve para `Gestor Administrador`); `Gestor de Equipe` e
202|`Gestor de Área` continuam dependendo de estar na lista de especialistas por tipo.
203|
204|**Por que não corrigi agora**: implementar corretamente exige resolver, para a ocorrência
205|específica, se ela pertence à equipe/área do gestor (o dado de equipe/área da ocorrência não é
206|uniforme entre os 5 tipos e nem sempre está disponível no mesmo campo de `details`). Como a
207|reunião reforça que o erro mais grave possível é "membro qualquer poder ver dados dos outros",
208|prefiro **não** ampliar esse acesso sem antes mapear com precisão de onde vem `team_id`/área em
209|cada tipo de ocorrência, para não conceder acesso além do escopo real do gestor.
210|
211|**Próximo passo sugerido**: reaproveitar a mesma resolução de equipe/área já usada no filtro de
212|listagem (`getSsmaOccurrenceDashboardTeamFilterIds` / `SsmaAreaLimitationScope`) para decidir,
213|por ocorrência, se o gestor de equipe/área tem escopo sobre ela, e então liberar o bypass de
214|aprofundamento nesse caso.
215|
216|### 4.2 Gate de descaracterização não retorna 403
217|
218|`applySsmaDescaracterPermissionGate()` silenciosamente remove/ignora os campos de
219|descaracterização quando o membro não tem permissão, em vez de rejeitar a requisição com 403.
220|Funcionalmente "não deixa passar", mas mascara o erro para quem está integrando/testando e
221|diverge do padrão usado no resto do controller (outros gates retornam 403 explícito).
222|
223|**Por que não corrigi agora**: mudar de "ignora silenciosamente" para "403 explícito" é uma
224|mudança de contrato de API que pode impactar o JS do modal (que hoje pode não estar preparado
225|para tratar um 403 nesse endpoint sem quebrar o fluxo de salvar rascunho). Requer checar
226|`_modal_event.html.twig` / JS do modal antes de mudar o código de resposta.
227|
228|### 4.3 Listagem — união vs `if`s sequenciais + cap 500
229|
230|Regra unificada da reunião/spec do usuário: visível se (visão estrutural) OU (criador, gestor
231|responsável, envolvido, responsável/validador de ação) OU (especialista do tipo com
232|aprofundamento disponível) OU (aprovador com ocorrência pronta para validação) — avaliada como
233|união **antes** da paginação.
234|
235|**Por que não corrigi agora**: é a mudança de maior risco e maior escopo (toca
236|`isOccurrenceVisibleToMember`, `filterOccurrencesForMember` e `loadOccurrences`, incluindo a
237|lógica de "cap 500 + filtro PHP"), e uma implementação apressada pode tanto **esconder**
238|ocorrências que deveriam aparecer (ex.: aprovador não vendo o card pronto para validar) quanto
239|**expor** ocorrências indevidamente — o oposto do risco #1 mencionado pela reunião. Recomendo
240|tratar como item isolado, com testes de regressão dedicados por perfil antes de subir.
241|
242|### 4.4 Card "Comitê" — confirmar ocultação para Supervisor
243|
244|Reunião (~l.396-404): card de "Comitê" (árvore de causas) na página/dentro da ocorrência é
245|exclusivo de Gestor — oculto para Membro **e também para Supervisor** ("supervisor também
246|porque supervisor só vê"). Não localizei com certeza absoluta, nesta rodada, o ponto exato do
247|Twig/controller que renderiza esse card especificamente para auditá-lo em detalhe — fica como
248|item de verificação pontual antes de fechar o épico de Ocorrência.
249|
250|## 5. Testes executados
251|
252|```bash
253|php -l src/Controller/SsmaController.php
254|php tests/Ssma/ssma_event_modal_scope_standalone.php
255|php tests/Ssma/ssma_event_manager_leader_rule_standalone.php
256|php vendor/bin/phpunit tests/Ssma/SsmaPermissionsRegressionTest.php
257|```
258|
259|## 6. Recomendação de ordem para as próximas correções
260|
261|1. §4.3 Listagem (união + remover cap 500 do caminho crítico) — maior risco técnico documentado.
262|2. §4.1 Aprofundamento (bypass de Gestor de Equipe/Área) — depende de mapear equipe/área por
263|   tipo de ocorrência.
264|3. §4.2 Gate de descaracterização → 403 explícito — depende de ajuste no JS do modal.
265|4. §4.4 Confirmação pontual do card de Comitê.
266|

{"search_text": "validateSsmaEventPayloadAgainstTeamScope"}

File: src/Controller/SsmaController.php
Match lines: 3
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);

{"search_text": "private function getSsmaOccurrenceDashboardTeamFilterIds"}

File: src/Controller/SsmaController.php
Match lines: 1
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array

{"search_text": "function getSsmaPreventionAreaScope"}

File: src/Controller/SsmaController.php
Match lines: 1
10306|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope

{"search_text": "function collectCompanyMemberIdsBelongingToCompanyTeams"}

File: src/Controller/SsmaController.php
Match lines: 1
10355|    private function collectCompanyMemberIdsBelongingToCompanyTeams(Company $company, array $teamIds): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 10240, "end_line": 10400}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10240-10400
10240|     * - Tags **Gestor de Equipe** e **Supervisor de Equipe** no produto atual: escopo pelas equipes do
10241|     *   cadastro do membro (mesmo se `team_limitation` estiver incorreto na base).
10242|     * - Supervisor de Equipe (viewer) continua coberto por {@see getSsmaViewerTeamIds()} quando a tag
10243|     *   por produto não reflete team_limitation (legado).
10244|     * - Colaborador sem equipe no cadastro e sem ser Gestor Administrador no produto (ex.: tag "Supervisor"
10245|     *   com team_limitation = 0) → escopo vazio {@see []}, para não listar ocorrências alheias.
10246|     *
10247|     * @return int[]|null null = sem filtro por equipe nesta tela
10248|     */
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array
10250|    {
10251|        if (!$company || !$user instanceof User) {
10252|            return null;
10253|        }
10254|
10255|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10256|            return null;
10257|        }
10258|
10259|        $member = $this->getCurrentCompanyMember($company, $user);
10260|        if (!$member) {
10261|            return null;
10262|        }
10263|
10264|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10265|        // 'Supervisor' puro (sem "de Equipe") ?? supervisor global: sem restrição de equipe, igual ao Gestor Administrador.
10266|        if ($tag && in_array($tag->getName(), ['Gestor Administrador', 'Supervisor'], true)) {
10267|            return null;
10268|        }
10269|
10270|        $parsed = $this->parseCompanyMemberTeamIds($member);
10271|
10272|        if ($tag && in_array($tag->getName(), $this->ssmaTeamScopePermissionTagNames(), true)) {
10273|            return $parsed;
10274|        }
10275|
10276|        if ($tag && $tag->getTeamLimitation()) {
10277|            return $parsed;
10278|        }
10279|
10280|        $viewerTeams = $this->getSsmaViewerTeamIds();
10281|        if ($viewerTeams !== null) {
10282|            return $viewerTeams;
10283|        }
10284|
10285|        // Membro sem tag de supervisão/gestão SSMA (ex.: stakeholder via ocorrência) não deve
10286|        // ter filtro de equipe aplicado: retorna null para que filterOccurrencesForMember
10287|        // mostre apenas o conteúdo próprio. Retornar [] zeraria todos os dados antes disso.
10288|        if ($tag !== null && $parsed === []) {
10289|            if ($this->resolveCurrentUserTechnicalTypes($company, $user) !== []) {
10290|                return [];
10291|            }
10292|
10293|            return null;
10294|        }
10295|
10296|        return null;
10297|    }
10298|
10299|    /**
10300|     * Recorte de área do usuário logado na Prevenção Ativa.
10301|     *
10302|     * Fonte única para listagem, busca, detalhe e gravação: um escopo não restrito libera tudo,
10303|     * um escopo restrito com conjunto vazio nega tudo. Não existe estado intermediário em que
10304|     * a ausência de área cadastrada remova o filtro.
10305|     */
10306|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10307|    {
10308|        if (!$company || !$user instanceof User) {
10309|            return SsmaPreventionAreaScope::unrestricted();
10310|        }
10311|
10312|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10313|        $member = $this->getCurrentCompanyMember($company, $user);
10314|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, 'ssma-prevention') : null;
10315|
10316|        return $this->ssmaPreventionAreaAuthorization
10317|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10318|    }
10319|
10320|    /**
10321|     * @return list<int>
10322|     */
10323|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10324|    {
10325|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10326|    }
10327|
10328|    /**
10329|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10330|     */
10331|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10332|    {
10333|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10334|            $this->getSsmaPreventionAreaScope($company, $user),
10335|            $inspection
10336|        );
10337|    }
10338|
10339|    /**
10340|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).
10341|     */
10342|    private function canViewAbordagemUnderAreaScope(SsmaAbordagem $abordagem, ?Company $company, ?User $user): bool
10343|    {
10344|        return $this->ssmaPreventionAreaAuthorization->canViewAbordagem(
10345|            $this->getSsmaPreventionAreaScope($company, $user),
10346|            $abordagem
10347|        );
10348|    }
10349|
10350|    /**
10351|     * @param int[] $teamIds
10352|     *
10353|     * @return array<int, true>
10354|     */
10355|    private function collectCompanyMemberIdsBelongingToCompanyTeams(Company $company, array $teamIds): array
10356|    {
10357|        if ($teamIds === []) {
10358|            return [];
10359|        }
10360|
10361|        $teamIdStr = array_map('strval', $teamIds);
10362|        $set = [];
10363|        $members = $this->entityManager->getRepository(CompanyMembers::class)
10364|            ->findBy(['company' => $company, 'isRemoved' => 0]);
10365|        foreach ($members as $m) {
10366|            $raw = $m->getTeams() ?? '';
10367|            if ($raw === '') {
10368|                continue;
10369|            }
10370|            foreach (array_map('trim', explode(',', $raw)) as $t) {
10371|                if ($t !== '' && in_array((string) $t, $teamIdStr, true)) {
10372|                    $set[(int) $m->getId()] = true;
10373|                    break;
10374|                }
10375|            }
10376|        }
10377|
10378|        return $set;
10379|    }
10380|
10381|    /**
10382|     * @param array<string, mixed> $data Payload já normalizado ({@see normalizeSsmaEventPayload}).
10383|     */
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
10385|    {
10386|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10387|        if ($scope === null) {
10388|            return null;
10389|        }
10390|
10391|        $details = $data['details'] ?? [];
10392|        if (!is_array($details)) {
10393|            $details = [];
10394|        }
10395|
10396|        if ($scope === []) {
10397|            // Técnico especialista SSMA (sem equipe no produto): não valida payload por equipe.
10398|            // O acesso ao evento já ?? validado por isSsmaEventVisibleUnderOccurrenceTeamDashboardScope
10399|            // e canCompleteSsmaTechnicalType antes dessa chamada, garantindo que só acessa seu tipo.
10400|            try {

{"search_text": "function ssmaTeamScopePermissionTagNames"}

File: src/Controller/SsmaController.php
Match lines: 1
20042|    private function ssmaTeamScopePermissionTagNames(): array

{"search_text": "TAG_GESTOR_AREA"}

File: src/Controller/SsmaController.php
Match lines: 6
11612|        return $tagPm && in_array($tagPm->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
12162|            SsmaAreaLimitationScope::TAG_GESTOR_AREA,
13096|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
13484|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
19225|                    SsmaAreaLimitationScope::TAG_GESTOR_AREA,
20533|            && in_array($tag->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);

File: src/Service/Ssma/SsmaAreaLimitationScope.php
Match lines: 2
16|    public const TAG_GESTOR_AREA = 'Gestor de Área';
23|        return [self::TAG_SUPERVISOR_AREA, self::TAG_GESTOR_AREA];

{"search_text": "function mapSsmaEventToOccurrenceListRow"}

File: src/Controller/SsmaController.php
Match lines: 1
15470|    private function mapSsmaEventToOccurrenceListRow(SsmaEvent $e, array $teamsById): array

{"search_text": "function enrichOccurrenceManagerFields"}

File: src/Controller/SsmaController.php
Match lines: 1
28626|    private function enrichOccurrenceManagerFields(array $row, array $membersById, ?Company $company = null): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 26420, "end_line": 26760}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 26420-26760
26420|            return sprintf(
26421|                'Data da abordagem fora do prazo: só é possível registrar até %d dias após a data em que foi realizada (a partir de %s).',
26422|                self::SSMA_ABORDAGEM_JANELA_REGISTRO_DIAS,
26423|                $limiteMinimo->format('d/m/Y')
26424|            );
26425|        }
26426|
26427|        return null;
26428|    }
26429|
26430|    // =========================================================================
26431|    // EVENTOS SSMA (SSMAEvent tipado)
26432|    // =========================================================================
26433|
26434|    /**
26435|     * POST /manager/ssma/events
26436|     * Cria um novo evento SSMA tipado.
26437|     */
26438|    public function createEvent(Request $request): JsonResponse
26439|    {
26440|        /** @var \App\Entity\User|null $user */
26441|        $user    = $this->getUser();
26442|        $company = $user?->getCompany();
26443|        if (!$user || !$company) {
26444|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
26445|        }
26446|
26447|        $data = json_decode($request->getContent(), true) ?? [];
26448|        $data = $this->normalizeSsmaEventPayload($data, $company);
26449|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
26450|        $data = $this->applySsmaEventManagerAssignment($data, $company, $user);
26451|        $data = $this->applySsmaDescaracterPermissionGate($data, $company, $user);
26452|        $data = $this->ensureSsmaEventTitle($data);
26453|
26454|        $validator = new \App\Service\Ssma\SsmaEventValidator();
26455|        $errors    = $validator->validate($data, [
26456|            'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26457|        ]);
26458|        if ($errors !== []) {
26459|            return new JsonResponse([
26460|                'success' => false,
26461|                'message' => implode(' ', $errors),
26462|                'errors'  => $errors,
26463|            ], 422);
26464|        }
26465|
26466|        if (!$this->canMemberRegisterOwnOccurrence($company, $user)) {
26467|            return new JsonResponse(['success' => false, 'message' => 'Você não tem autorização para registrar ocorrências.'], 403);
26468|        }
26469|
26470|        $typeKey = strtoupper(trim((string) ($data['type'] ?? '')));
26471|        if ($typeKey !== '' && !$this->canCreateSsmaOccurrenceType($typeKey)) {
26472|            return new JsonResponse(['success' => false, 'message' => 'Você não tem permissão para registrar ocorrências deste tipo.'], 403);
26473|        }
26474|
26475|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
26476|        if (
26477|            in_array($typeKey, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
26478|            && !$this->canAccessSsmaEventAprofundamento(
26479|                $company,
26480|                $user,
26481|                $typeKey,
26482|                $eventDetails,
26483|                (int) ($user->getId() ?? 0)
26484|            )
26485|        ) {
26486|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload($data, $typeKey, []);
26487|        }
26488|
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26490|        if ($teamScopeErr !== null) {
26491|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26492|        }
26493|
26494|        try {
26495|            $service  = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26496|            $payloads = $service->splitPersonalAccidentPayloads($data);
26497|            $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26498|            $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
26499|            if ($registeredByName === '') {
26500|                $registeredByName = $user->getEmail() ?? 'Sistema';
26501|            }
26502|
26503|            foreach ($payloads as $payload) {
26504|                $payloadErrors = $validator->validate($payload, [
26505|                    'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26506|                ]);
26507|                if ($payloadErrors !== []) {
26508|                    return new JsonResponse([
26509|                        'success' => false,
26510|                        'message' => implode(' ', $payloadErrors),
26511|                        'errors'  => $payloadErrors,
26512|                    ], 422);
26513|                }
26514|            }
26515|
26516|            $events = [];
26517|            $flashApprovals = [];
26518|            foreach ($payloads as $payload) {
26519|                $event = $service->createFromPayload($payload, $user, $company, $editorMeta);
26520|                $events[] = $event;
26521|                $this->ssmaAutomationService->triggerForEvent(
26522|                    'ssma_on_occurrence_created',
26523|                    $event,
26524|                    $company,
26525|                    ['registered_by_name' => $registeredByName]
26526|                );
26527|                if (!empty($event->getDetails()['immediate_risk'])) {
26528|                    $this->ssmaNotificationService->notifyImmediateRisk($event);
26529|                }
26530|                if ($this->ssmaEventAprofundamentoPending($event)) {
26531|                    $this->ssmaNotificationService->notifyAprofundamentoSpecialists(
26532|                        $company,
26533|                        $user,
26534|                        (string) $event->getType(),
26535|                        (int) $event->getId(),
26536|                        'event'
26537|                    );
26538|                }
26539|                $this->maybeSubmitOccurrenceForValidation($event, $company, $user);
26540|                try {
26541|                    $flashApprovals[] = $this->ssmaFlashReportService->maybeAutoRequestApproval($event, $user);
26542|                } catch (\Throwable $flashErr) {
26543|                    $this->ssmaLogger->warning('Ssma createEvent flash approval: ' . $flashErr->getMessage());
26544|                    $flashApprovals[] = ['success' => false, 'message' => $flashErr->getMessage()];
26545|                }
26546|            }
26547|
26548|            $count = count($events);
26549|            $message = $count > 1
26550|                ? sprintf('%d ocorrências registradas — uma por acidentado.', $count)
26551|                : 'Ocorrência registrada com sucesso.';
26552|
26553|            return new JsonResponse([
26554|                'success' => true,
26555|                'message' => $message,
26556|                'event'   => $service->serialize($events[0]),
26557|                'events'  => array_map(static fn ($e) => $service->serialize($e), $events),
26558|                'count'   => $count,
26559|                'flash_approval' => $this->sanitizeFlashApprovalApiResponse($flashApprovals[0] ?? null),
26560|            ], 201);
26561|        } catch (\Throwable $e) {
26562|            $this->ssmaLogger->error('Ssma createEvent failed: '.$e->getMessage(), ['exception' => $e]);
26563|
26564|            $msg = $this->getParameter('kernel.debug') ? $e->getMessage() : 'Erro ao salvar o evento. Tente novamente.';
26565|
26566|            return new JsonResponse(['success' => false, 'message' => $msg], 500);
26567|        }
26568|    }
26569|
26570|    /**
26571|     * GET /manager/ssma/events/{id}
26572|     * Retorna um evento pelo ID.
26573|     */
26574|    public function getEvent(int $id): JsonResponse
26575|    {
26576|        /** @var \App\Entity\User|null $user */
26577|        $user    = $this->getUser();
26578|        $company = $this->getSsmaCompany() ?? $user?->getCompany();
26579|        if (!$user || !$company) {
26580|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
26581|        }
26582|
26583|        $event = $this->entityManager->getRepository(\App\Entity\SsmaEvent::class)->find($id);
26584|
26585|        if (!$event || $event->getCompany()->getId() !== $company->getId()) {
26586|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26587|        }
26588|
26589|        if (!$this->isSsmaEventVisibleUnderOccurrenceTeamDashboardScope($event, $company, $user)) {
26590|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26591|        }
26592|
26593|        $service = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26594|
26595|        return new JsonResponse(['success' => true, 'event' => $service->serialize($event)]);
26596|    }
26597|
26598|    /**
26599|     * POST /manager/ssma/events/{id}
26600|     * Atualiza um evento existente.
26601|     */
26602|    public function updateEvent(Request $request, int $id): JsonResponse
26603|    {
26604|        /** @var \App\Entity\User|null $user */
26605|        $user    = $this->getUser();
26606|        $company = $user?->getCompany();
26607|        if (!$user || !$company) {
26608|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
26609|        }
26610|
26611|        $event = $this->entityManager->getRepository(\App\Entity\SsmaEvent::class)->find($id);
26612|
26613|        if (!$event || $event->getCompany()->getId() !== $company->getId()) {
26614|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26615|        }
26616|
26617|        if (!$this->isSsmaEventVisibleUnderOccurrenceTeamDashboardScope($event, $company, $user)) {
26618|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26619|        }
26620|
26621|        $data = json_decode($request->getContent(), true) ?? [];
26622|        $aprofundamentoOnly = !empty($data['aprofundamento_only']);
26623|        $existingDetails = is_array($event->getDetails()) ? $event->getDetails() : [];
26624|        $aprofundamentoStatus = strtolower(trim((string) ($existingDetails['aprofundamento_status'] ?? '')));
26625|        $aprofundamentoFinalized = $aprofundamentoStatus === 'finalized'
26626|            || !empty($existingDetails['aprofundamento_complete']);
26627|
26628|        $canFullEdit = $this->canEditSsmaEvent($company, $user, $event);
26629|        $eventTypeForAccess = (string) ($data['type'] ?? $event->getType());
26630|        $canAprofundamento = $this->canAccessSsmaEventAprofundamento(
26631|            $company,
26632|            $user,
26633|            $eventTypeForAccess,
26634|            is_array($data['details'] ?? null) ? $data['details'] : $existingDetails,
26635|            (int) ($event->getCreatedById() ?? 0)
26636|        );
26637|        $isAprofundamentoUpdate = $aprofundamentoOnly
26638|            || !empty($data['aprofundamento_complete'])
26639|            || strtolower(trim((string) ($data['aprofundamento_status'] ?? ''))) === 'finalized';
26640|
26641|        if (!$canFullEdit) {
26642|            if (!$isAprofundamentoUpdate || !$canAprofundamento) {
26643|                return new JsonResponse(['success' => false, 'message' => 'Você não tem autorização para editar esse tipo de ocorrência.'], 403);
26644|            }
26645|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
26646|                return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
26647|            }
26648|            $data = $this->mergeSsmaEventAprofundamentoOnlyPayload($event, $data);
26649|        } else {
26650|            $data = array_merge($this->eventToValidationArray($event), $data);
26651|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
26652|                if ($aprofundamentoOnly || $isAprofundamentoUpdate) {
26653|                    return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
26654|                }
26655|                $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
26656|                    $data,
26657|                    (string) ($data['type'] ?? $event->getType()),
26658|                    $existingDetails
26659|                );
26660|            }
26661|        }
26662|
26663|        $data = $this->normalizeSsmaEventPayload($data, $company);
26664|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
26665|        $data = $this->applySsmaEventManagerAssignment($data, $company, $user, $existingDetails);
26666|        $data = $this->applySsmaDescaracterPermissionGate(
26667|            $data,
26668|            $company,
26669|            $user,
26670|            $existingDetails
26671|        );
26672|
26673|        $eventType = (string) ($data['type'] ?? $event->getType());
26674|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
26675|        // Em modo só-aprofundamento o especialista já está autorizado; não stripa o que acabou de enviar.
26676|        if (
26677|            !$aprofundamentoOnly
26678|            && !$this->canAccessSsmaEventAprofundamento($company, $user, $eventType, $eventDetails, $event->getCreatedById())
26679|            && in_array($eventType, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
26680|        ) {
26681|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
26682|                $data,
26683|                $eventType,
26684|                $existingDetails
26685|            );
26686|        }
26687|
26688|        // Draft vs finalize do aprofundamento (especialista / admin).
26689|        $wantsFinalize = false;
26690|        if ($aprofundamentoOnly || !empty($data['aprofundamento_complete']) || array_key_exists('aprofundamento_status', $data)) {
26691|            $detailsOut = is_array($data['details'] ?? null) ? $data['details'] : [];
26692|            $wantsFinalize = !empty($data['aprofundamento_complete'])
26693|                || strtolower(trim((string) ($data['aprofundamento_status'] ?? ''))) === 'finalized';
26694|            if ($wantsFinalize) {
26695|                $data['aprofundamento_complete'] = true;
26696|                $detailsOut['aprofundamento_complete'] = true;
26697|                $detailsOut['aprofundamento_status'] = 'finalized';
26698|            } else {
26699|                $data['aprofundamento_complete'] = false;
26700|                $detailsOut['aprofundamento_complete'] = false;
26701|                $detailsOut['aprofundamento_status'] = 'draft';
26702|            }
26703|            $data['details'] = $detailsOut;
26704|        }
26705|
26706|        // Valida apenas se type ou details estiverem presentes no payload (atualização parcial ok)
26707|        if (!empty($data['type']) || !empty($data['details'])) {
26708|            $validator = new \App\Service\Ssma\SsmaEventValidator();
26709|            $errors    = $validator->validate($data, [
26710|                'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26711|                'soft_aprofundamento' => $aprofundamentoOnly && !$wantsFinalize,
26712|            ]);
26713|            if ($errors !== []) {
26714|                return new JsonResponse(['success' => false, 'errors' => $errors], 422);
26715|            }
26716|        }
26717|
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26719|        if ($teamScopeErr !== null) {
26720|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26721|        }
26722|
26723|        $service = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26724|        $prevType         = $event->getType();
26725|        $prevStatus       = $event->getStatus();
26726|        $prevImmediateRisk = !empty($event->getDetails()['immediate_risk']);
26727|        $prevManagerId = (int) ($event->getDetails()['manager_id'] ?? 0);
26728|        $wasRejectedApproval = $this->ssmaOccurrenceApprovalService->getState($event)['status']
26729|            === \App\Service\Ssma\SsmaOccurrenceApprovalService::STATUS_REJECTED;
26730|        $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26731|        $event      = $service->updateFromPayload($event, $data, $user, $editorMeta);
26732|
26733|        if ($wasRejectedApproval) {
26734|            // Readequação: reenvia tanto na edição completa quanto ao finalizar só o aprofundamento.
26735|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, true);
26736|        } elseif ($wantsFinalize) {
26737|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, false);
26738|        }
26739|
26740|        $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
26741|        if ($registeredByName === '') {
26742|            $registeredByName = $user->getEmail() ?? 'Sistema';
26743|        }
26744|        $automationContext = [
26745|            'registered_by_name' => $registeredByName,
26746|            'type_raw'           => $event->getType(),
26747|            'new_type'           => $event->getType(),
26748|        ];
26749|        $flashApproval = null;
26750|
26751|        try {
26752|            $this->ssmaAutomationService->triggerForEvent(
26753|                'ssma_on_occurrence_updated',
26754|                $event,
26755|                $company,
26756|                $automationContext
26757|            );
26758|            if ($prevStatus !== $event->getStatus()) {
26759|                $this->ssmaAutomationService->triggerForEvent(
26760|                    'ssma_on_status_change',

{"file_path": "src/Controller/SsmaController.php", "start_line": 20030, "end_line": 20075}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 20030-20075
20030|     * @param list<array<string, mixed>> $members
20031|     * @param list<array<string, mixed>> $teams
20032|     * @param list<array<string, mixed>> $inspections
20033|     * @param list<array<string, mixed>> $abordagens
20034|     *
20035|     * @return array{inspecao: list<array<string,mixed>>, abordagem: list<array<string,mixed>>} Cada linha pode incluir kind_disabled=true (membro desligado só neste tipo de meta).
20036|     */
20037|    /**
20038|     * Tags de gestão/supervisão de equipe no produto SSMA (inclui "Supervisor" legado no hub).
20039|     *
20040|     * @return list<string>
20041|     */
20042|    private function ssmaTeamScopePermissionTagNames(): array
20043|    {
20044|        return ['Gestor de Equipe', 'Supervisor de Equipe', 'Supervisor'];
20045|    }
20046|
20047|    /**
20048|     * Opções de "Gestor responsável" no modal de ocorrência: ROLE_MANAGER_GESTOR + tags Gestor/Supervisor de Equipe no produto SSMA.
20049|     *
20050|     * @param list<array<string, mixed>> $allMembers
20051|     * @param list<array<string, mixed>> $gestoresByRole
20052|     * @param array<int, true>|null $allowedMemberIds null = empresa inteira; mapa vazio = ninguém no escopo
20053|     *
20054|     * @return list<array<string, mixed>>
20055|     */
20056|    private function sortSsmaMemberRowsByName(array $members): array
20057|    {
20058|        usort($members, static function (array $a, array $b): int {
20059|            return strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? ''));
20060|        });
20061|
20062|        return $members;
20063|    }
20064|
20065|    /**
20066|     * @param array<int, true>|null $allowedMemberIds null = empresa inteira; mapa vazio = ninguém no escopo
20067|     *
20068|     * @return list<array<string, mixed>>
20069|     */
20070|    private function buildSsmaEventModalGestores(
20071|        Company $company,
20072|        array $allMembers,
20073|        array $gestoresByRole,
20074|        ?array $allowedMemberIds,
20075|    ): array {

{"search_text": "resolveSsmaProductPermissionTagForMember"}

File: docs/engineering/pr/homolog/PR_commits_homolog.txt
Match lines: 1
2365|f6f16cfbe7 fix: delegate SSMA permission tag resolution to PermissionTagByMemberService - SsmaController::resolveSsmaProductPermissionTagForMember was querying PermissionTagByMember directly, bypassing service logic for stale/auto-propagated tags. Now injects PermissionTagByMemberService to ensure consistent resolution and fix ssmaCanRegisterNewOccurrence for Yann-like cases.

File: src/Controller/SsmaController.php
Match lines: 21
1329|                $tag = $this->resolveSsmaProductPermissionTagForMember($member);
1425|        return $this->resolveSsmaProductPermissionTagForMember($member);
10126|                $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10148|            ? $this->resolveSsmaProductPermissionTagForMember($member)
10212|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10264|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10314|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, 'ssma-prevention') : null;
10693|        if ($this->isSsmaGestorAdministradorTag($this->resolveSsmaProductPermissionTagForMember($member))) {
10735|    private function resolveSsmaProductPermissionTagForMember(
11529|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member) : null;
11592|        $tagPm = $memberPm ? $this->resolveSsmaProductPermissionTagForMember($memberPm) : null;
11604|                $resolvedScoped = $this->resolveSsmaProductPermissionTagForMember($memberScoped);
11985|            $tag = $this->resolveSsmaProductPermissionTagForMember($member);
12014|            $tag = $this->resolveSsmaProductPermissionTagForMember($member);
12158|        $tagName = $this->resolveSsmaProductPermissionTagForMember($member)?->getName();
13014|                $resolvedTag = $this->resolveSsmaProductPermissionTagForMember($memberForTagCheck);
19218|                $tagCheck = $memberTagCheck ? $this->resolveSsmaProductPermissionTagForMember($memberTagCheck) : null;
20114|            $tag = $currentMember ? $this->resolveSsmaProductPermissionTagForMember($currentMember) : null;
20530|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
20548|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member) : null;
23401|            $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member) : null;

File: src/Service/Ssma/SsmaOccurrenceCreatePermissionService.php
Match lines: 2
621|        $tag = $this->resolveSsmaProductPermissionTagForMember($member, $ssmaProduct);
641|    private function resolveSsmaProductPermissionTagForMember(CompanyMembers $member, ?Product $ssmaProduct = null): ?PermissionTag

{"file_path": "src/Controller/SsmaController.php", "start_line": 12960, "end_line": 13400}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 12960-13400
12960|                        foreach ($occurrences as $idx => $occRow) {
12961|                            $entityId = (int) ($occRow['id'] ?? 0);
12962|                            $key = (!empty($occRow['is_ssma_event']) ? 'e:' : 'o:') . $entityId;
12963|                            $occurrences[$idx]['cause_tree_id'] = $treeMeta[$key]['cause_tree_id'] ?? null;
12964|                        }
12965|                    }
12966|                }
12967|                $occurrences = $this->enrichOccurrencesCommitteeTriggerFlags($occurrences, $company);
12968|                $occurrences = $this->enrichOccurrencesGravityLabels($occurrences);
12969|            }
12970|            if ($deferOccurrenceHubHeavyData) {
12971|                $actionsTaken = [];
12972|                $inspections = [];
12973|                $horasData = [];
12974|            } else {
12975|            $actionsTaken = $company ? $this->loadActions($company) : [];
12976|            $inspections  = $company ? $this->loadInspections($company, $allMembers, $teams) : [];
12977|            $horasData    = $company ? $this->loadHorasData($company) : [];
12978|            }
12979|        }
12980|        if ($needsPreventionCollections) {
12981|            $abordagens = $company ? $this->loadAbordagens($company) : [];
12982|        }
12983|        $occurrenceUiMeta = $this->getMockOccurrenceMetadata();
12984|
12985|        $userTechnicalTypes = $company
12986|            ? $this->resolveUserTechnicalTypes($company, $user, $companyMembers ?? [])
12987|            : [];
12988|        $ssmaCanManageOccurrences = $this->canManageSsmaOccurrences();
12989|        $ssmaCanAccessSupervisorSurface = $this->canAccessSsmaSupervisorSurface();
12990|        $ssmaCanAccessPreventionPanelAndMetas = $this->canAccessPreventionDashboardAndMetasTabs();
12991|        $ssmaCanAccessOccurrencePanel = $ssmaCanManageOccurrences || $this->isSsmaViewer();
12992|        // Supervisores veem a aba Automações mas não criam; o botão de criação usa ssmaCanManageOccurrences
12993|        $ssmaCanAccessOccurrenceAutomations = $ssmaCanManageOccurrences || $this->isSsmaViewer();
12994|        $ssmaCanManageConfig = $this->canManageSsmaConfig();
12995|        $ssmaCanManagePermissions = $this->canManageSsmaPermissions();
12996|        // ssmaCanCreateLinkedActions: botão "Criar ação" na aba Ocorrências e occurrence_view.
12997|        // Brenda: Supervisor só visualiza (dash/painel). Criar/editar fica com gestor/admin
12998|        // e Gestor de Equipe (override abaixo). Membro comum não cria.
12999|        $ssmaCanCreateLinkedActions = $this->canMutateSsmaActionPlan();
13000|        $ssmaCanMutateActionPlan = $ssmaCanCreateLinkedActions;
13001|        // ssmaCanCreateCauseTree: Supervisor ?? SOMENTE LEITURA na Árvore de Causas (planilha).
13002|        // NÃO incluir isSsmaViewer() aqui. Usa produto ssma-cause-tree (não can_create de ssma-occurrences).
13003|        $ssmaCanCreateCauseTree = $this->canCreateSsmaCauseTree();
13004|        $ssmaCanCreateAuthorization = $ssmaCanManageOccurrences;
13005|        $ssmaCanEditHorasTrabalhadas = $this->canEditSsmaHorasTrabalhadas();
13006|
13007|        // Tag SSMA do colaborador — sempre resolve (ROLE_MANAGER de plataforma ≠ perfil SSMA).
13008|        $ssmaProductTagName = null;
13009|        $memberForTagCheck = null;
13010|        $ssmaPreventionProductTagName = null;
13011|        if ($company && $user instanceof User) {
13012|            $memberForTagCheck = $this->getCurrentCompanyMember($company, $user);
13013|            if ($memberForTagCheck) {
13014|                $resolvedTag = $this->resolveSsmaProductPermissionTagForMember($memberForTagCheck);
13015|                if ($resolvedTag) {
13016|                    $ssmaProductTagName = $resolvedTag->getName();
13017|                }
13018|                if ($this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
13019|                    $ssmaProductTagName = 'Gestor Administrador';
13020|                }
13021|                $ssmaPreventionProductTagName = $this->ssmaPreventionHubAccessService
13022|                    ->resolvePreventionProductTagName($memberForTagCheck);
13023|            }
13024|        }
13025|
13026|        // Membro/Inspetor: visão de pessoa física (matriz de tipos + registrar).
13027|        // Só strip se tiver ROLE_USER (Palloma). Conta admin empresa sem ROLE_USER (Aura) mantém abas.
13028|        // Tenant / SUPER_ADMIN mantêm abas mesmo com tag Membro (regressão Felipe).
13029|        $ssmaIsPlainProductMemberUi = SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
13030|            $ssmaProductTagName,
13031|            $this->isGranted('ROLE_SUPER_ADMIN'),
13032|            $this->isGranted('ROLE_TENANT'),
13033|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
13034|        );
13035|        if ($ssmaIsPlainProductMemberUi && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
13036|            $ssmaCanManageOccurrences = false;
13037|            $ssmaCanAccessSupervisorSurface = false;
13038|            $ssmaCanAccessPreventionPanelAndMetas = false;
13039|            $ssmaCanAccessOccurrencePanel = false;
13040|            $ssmaCanAccessOccurrenceAutomations = false;
13041|            $ssmaCanManageConfig = false;
13042|            $ssmaCanManagePermissions = false;
13043|            $ssmaCanCreateLinkedActions = false;
13044|            $ssmaCanCreateAuthorization = false;
13045|        }
13046|
13047|        $loggedMemberForCauseTree = ($company && $user instanceof User)
13048|            ? $this->getCurrentCompanyMember($company, $user)
13049|            : null;
13050|
13051|        // Especialistas técnicos (SsmaPermissionTagMember) e gestores/supervisores podem visualizar.
13052|        // Membro/Inspetor com acesso só via mapa legado tipo/equipe NÃO recebem o botão na listagem.
13053|        $ssmaCanViewCauseTree = $ssmaCanCreateCauseTree
13054|            || $this->isSsmaViewer()
13055|            || in_array($ssmaProductTagName, ['Gestor Administrador', 'Gestor de Equipe', 'Supervisor de Equipe', 'Supervisor'], true)
13056|            || ($loggedMemberForCauseTree && $company && $this->hasSsmaTechnicalCauseTreeAccess($loggedMemberForCauseTree, $company));
13057|
13058|        // Hub Ocorrências — botão "Registrar ocorrência" (empty state / FAB): Membro não cria (planilha),
13059|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
13060|        // Reutiliza $ssmaProductTagName (já corrigido por memberIsSsmaGestorAdministrador).
13061|        $ssmaProductTagNameForRegister = $ssmaProductTagName;
13062|        $ssmaCanRegisterNewOccurrence = $this->isGranted('ROLE_SUPER_ADMIN')
13063|            || $this->isGranted('ROLE_MANAGER')
13064|            || $this->isGranted('ROLE_MANAGER_GESTOR')
13065|            || \in_array($ssmaProductTagNameForRegister, ['Gestor de Equipe', 'Gestor Administrador'], true)
13066|            // Permissão padrão do Membro: registrar a própria ocorrência.
13067|            || $this->canMemberRegisterOwnOccurrence($company, $user);
13068|
13069|        $loggedMemberForOccurrence = ($company && $user instanceof User)
13070|            ? $this->getCurrentCompanyMember($company, $user)
13071|            : null;
13072|        $ssmaAllowedCreateTypes = ($company && $user instanceof User)
13073|            ? $this->ssmaOccurrenceCreatePermissionService->resolveAllowedCreateTypes(
13074|                $loggedMemberForOccurrence,
13075|                $user,
13076|                $company,
13077|                $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
13078|                $ssmaCanManageOccurrences,
13079|            )
13080|            : [];
13081|        if (!$ssmaCanRegisterNewOccurrence && $ssmaAllowedCreateTypes !== []) {
13082|            $ssmaCanRegisterNewOccurrence = true;
13083|        }
13084|
13085|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
13086|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
13087|        $occurrenceAreaFilterIds = $areaScope->isRestricted() ? $areaScope->areaIds() : null;
13088|        $viewerTeamIds = $this->getSsmaViewerTeamIds();
13089|
13090|        // ── Detecção de Supervisor/Gestor de Equipe via tag SSMA ──────────────────────────────
13091|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
13092|        // funções baseadas em role. Identificamos o perfil pelo nome da tag para ajustar flags de UI.
13093|        $ssmaIsTagTeamSupervisor = in_array($ssmaProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
13094|        $ssmaIsTagTeamGestor     = $ssmaProductTagName === 'Gestor de Equipe';
13095|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
13096|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
13097|        $ssmaIsPreventionTagTeamSupervisor = in_array($ssmaPreventionProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
13098|        $ssmaIsPreventionTagTeamGestor = $ssmaPreventionProductTagName === 'Gestor de Equipe';
13099|
13100|        // Painel + Metas: libera para Sup/G. de Equipe/Área e Gestor Administrador (ocorrências + ssma-prevention)
13101|        if (!$ssmaCanAccessPreventionPanelAndMetas
13102|            && (
13103|                $ssmaIsTagTeamSupervisor
13104|                || $ssmaIsTagTeamGestor
13105|                || $ssmaIsTagAreaSupervisor
13106|                || $ssmaIsTagAreaGestor
13107|                || $ssmaProductTagName === 'Gestor Administrador'
13108|                || $ssmaIsPreventionTagTeamSupervisor
13109|                || $ssmaIsPreventionTagTeamGestor
13110|                || $ssmaPreventionProductTagName === 'Gestor Administrador'
13111|            )
13112|        ) {
13113|            $ssmaCanAccessPreventionPanelAndMetas = true;
13114|        }
13115|
13116|        // Membro/Inspetor (pessoa física / Palloma): não acessa Painel nem Metas.
13117|        // Conta admin empresa sem ROLE_USER (Aura), Tenant e SUPER_ADMIN mantêm — mesmo contrato das abas de Ocorrências.
13118|        if (SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
13119|            $ssmaProductTagName,
13120|            $this->isGranted('ROLE_SUPER_ADMIN'),
13121|            $this->isGranted('ROLE_TENANT'),
13122|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
13123|        )) {
13124|            $ssmaCanAccessPreventionPanelAndMetas = false;
13125|        }
13126|
13127|        // Modal + Evento: título/status ocultos na criação para todos os perfis (Figma Etapa 0).
13128|        // Na edição o JS (evApplyAuraTitleStatusVisibility) reexibe conforme o modo.
13129|        $ssmaHideEventTitleStatusOnCreate = true;
13130|
13131|        // ssmaIsTeamViewer: true quando o usuário opera com escopo de equipe (via role SSMA OU via tag SSMA)
13132|        // Usado para sinalizar ao template que os dados estáo limitados ?? equipe.
13133|        $ssmaIsTeamViewerFlag = $viewerTeamIds !== null || $ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor
13134|            || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor;
13135|
13136|        // ssmaCanCreatePreventionItems: Gestor de Equipe/Área e Gestor Administrador via tag SSMA
13137|        // também podem registrar inspeções/abordagens (ssmaCanManageOccurrences = true via tag).
13138|        $ssmaCanCreatePreventionItems = (
13139|            $this->isGranted('ROLE_SUPER_ADMIN')
13140|            || $this->isGranted('ROLE_MANAGER')
13141|            || $this->isGranted('ROLE_MANAGER_GESTOR')
13142|            || (
13143|                $ssmaCanManageOccurrences
13144|                && ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor || $ssmaProductTagName === 'Gestor Administrador')
13145|            )
13146|        );
13147|
13148|        // ssmaCanEditPreventionContent: controla botões Editar/Finalizar/Deletar em inspeções e abordagens
13149|        // e o botão "Configuração" na aba Metas.
13150|        // Supervisor registra/edita o próprio conteúdo (can_mutate por item); gestão edita todos.
13151|        $ssmaCanEditPreventionContent = $ssmaCanManageOccurrences
13152|            && !$this->isSsmaViewer()
13153|            && !$ssmaIsTagTeamSupervisor
13154|            && !$ssmaIsTagAreaSupervisor;
13155|        $ssmaPreventionMutateOwnOnly = false;
13156|
13157|        // Configurações da aba Prevenção Ativa: Sup/Gestor de Equipe ou Área não acessam (planilha: "Não acessa")
13158|        if ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor) {
13159|            $ssmaCanManageConfig = false;
13160|        }
13161|
13162|        // G. Equipe via tag SSMA pode criar ação (Plano de Ação).
13163|        // Árvore de causas: {@see canCreateSsmaCauseTree()} já cobre Gestor de Equipe.
13164|        if ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor) {
13165|            $ssmaCanCreateLinkedActions = true;
13166|            $ssmaCanMutateActionPlan = true;
13167|        }
13168|
13169|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
13170|        $ssmaCanEditPreventionMetasTable = $company && $user instanceof User
13171|            && $this->canEditPreventionMetasTableForCurrentUser($company, $user);
13172|
13173|        // ssmaPreventionCanCreateLinkedActions: botão "Criar ação" em Inspeções e Abordagem.
13174|        // Alinhado com ssmaCanCreateLinkedActions (Plano de Ações): quem não pode criar
13175|        // ação no Plano de Ações também não pode criar em inspeção/abordagem/árvore.
13176|        $ssmaPreventionCanCreateLinkedActions = $ssmaCanCreateLinkedActions;
13177|
13178|        $teamsForEventModal = $teams;
13179|        $allMembersForEventPeople = $allMembers;
13180|        $ssmaEventFormDefaults = ['manager_id' => null, 'team_id' => null];
13181|        $applyTeamEventScope = $occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== [];
13182|        $ssmaCanChangeEventManager = $this->canSelectSsmaEventResponsibleManager(
13183|            $company,
13184|            $user instanceof User ? $user : null
13185|        );
13186|        $ownImmediateLeaderId = ($company instanceof Company && $user instanceof User)
13187|            ? $this->resolveLoggedMemberImmediateLeaderId($company, $user)
13188|            : null;
13189|        $ssmaEventFormDefaults['manager_id'] = $ownImmediateLeaderId;
13190|
13191|        $managerScopeIds = null;
13192|        if ($applyTeamEventScope && $company instanceof Company) {
13193|            $teamIdStrScope = array_map('strval', $occurrenceTeamFilterIds);
13194|            $teamsForEventModal = array_values(array_filter(
13195|                $teams,
13196|                static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $teamIdStrScope, true)
13197|            ));
13198|            $managerScopeIds = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
13199|            $ssmaEventFormDefaults['team_id'] = (int) $occurrenceTeamFilterIds[0];
13200|        }
13201|
13202|        if ($occurrenceAreaFilterIds !== null) {
13203|            $areaMemberIds = $areaScope->allowedMemberIds();
13204|            $teamsForEventModal = array_values(array_filter(
13205|                $teamsForEventModal,
13206|                static fn (array $t): bool => $areaScope->allowsTeam((int) ($t['id'] ?? 0))
13207|            ));
13208|            $managerScopeIds = $managerScopeIds === null
13209|                ? $areaMemberIds
13210|                : array_intersect_key($managerScopeIds, $areaMemberIds);
13211|            $applyTeamEventScope = true;
13212|            if ($teamsForEventModal !== []) {
13213|                $ssmaEventFormDefaults['team_id'] = (int) ($teamsForEventModal[0]['id'] ?? 0) ?: $ssmaEventFormDefaults['team_id'];
13214|            }
13215|        }
13216|
13217|        $gestoresForEventModal = $company instanceof Company
13218|            ? $this->buildSsmaEventResponsibleManagerOptions(
13219|                $company,
13220|                $allMembers,
13221|                $managerScopeIds,
13222|                $ownImmediateLeaderId,
13223|                $occurrences
13224|            )
13225|            : $gestores;
13226|
13227|        if ($gestores === [] && $allMembers !== []) {
13228|            $gestores = $allMembers;
13229|        }
13230|        $gestoresForEventModal = $this->enrichSsmaMemberRowsWithTeamMeta(
13231|            $gestoresForEventModal,
13232|            $teamNameByMemberId ?? []
13233|        );
13234|       
13235|
13236|        // Inspeção — equipe no modal: gestão vê escopo/lista completa; Membro só suas equipes (auto se uma).
13237|        // Mesmo contrato Palloma vs Aura das abas: tenant/SUPER_ADMIN/ROLE_MANAGER sem ROLE_USER
13238|        // com tag Membro não entram no recorte de pessoa física.
13239|        $teamsForInspectionModal = $applyTeamEventScope ? $teamsForEventModal : $teams;
13240|        $defaultInspectionTeamId = null;
13241|        $ssmaIsPlainPreventionMember = $ssmaIsPlainProductMemberUi
13242|            && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck);
13243|        if ($ssmaIsPlainPreventionMember && $company && $user instanceof User) {
13244|            $plainMemberRow = $this->getCurrentCompanyMember($company, $user);
13245|            $plainMemberTeamIds = $plainMemberRow ? $this->parseCompanyMemberTeamIds($plainMemberRow) : [];
13246|            if ($plainMemberTeamIds !== []) {
13247|                $plainTeamIdStr = array_map('strval', $plainMemberTeamIds);
13248|                $teamsForInspectionModal = array_values(array_filter(
13249|                    $teams,
13250|                    static fn (array $t): bool => in_array((string) ($t['id'] ?? ''), $plainTeamIdStr, true)
13251|                        && $areaScope->allowsTeam((int) ($t['id'] ?? 0))
13252|                ));
13253|                if (count($plainMemberTeamIds) === 1) {
13254|                    $defaultInspectionTeamId = (int) $plainMemberTeamIds[0];
13255|                }
13256|            } else {
13257|                $teamsForInspectionModal = [];
13258|            }
13259|        } elseif ($applyTeamEventScope && $teamsForInspectionModal !== []) {
13260|            $defaultInspectionTeamId = (int) ($ssmaEventFormDefaults['team_id'] ?? 0) ?: null;
13261|            if ($defaultInspectionTeamId === null && count($teamsForInspectionModal) === 1) {
13262|                $defaultInspectionTeamId = (int) ($teamsForInspectionModal[0]['id'] ?? 0) ?: null;
13263|            }
13264|        }
13265|        usort($teamsForInspectionModal, static function (array $a, array $b): int {
13266|            return strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? ''));
13267|        });
13268|
13269|        // Técnico especialista SSMA: tem SsmaPermissionTagMember mas sem gestão ou supervisão de equipe.
13270|        // O scope retornado por getSsmaOccurrenceDashboardTeamFilterIds ?? [] (sem equipe atribuída no produto),
13271|        // o que zeraria todas as ocorrências se o filtro de equipe fosse aplicado.
13272|        // Em vez disso, aplicamos um filtro por tipo de ocorrência após o bloco de equipe.
13273|        $isTechSpecialistOnly = !$ssmaCanManageOccurrences
13274|            && !$this->isSsmaViewer()
13275|            && $occurrenceTeamFilterIds === []
13276|            && !empty($userTechnicalTypes);
13277|
13278|        if ($occurrenceTeamFilterIds !== null && !$isTechSpecialistOnly) {
13279|            $teamIdStr = array_map('strval', $occurrenceTeamFilterIds);
13280|
13281|            // Coleta IDs de membros pertencentes às equipes do viewer
13282|            $memberIdsInTeams = [];
13283|            foreach ($teams as $team) {
13284|                if (in_array((string) ($team['id'] ?? ''), $teamIdStr, true)) {
13285|                    foreach ($team['members'] ?? [] as $mid) {
13286|                        $memberIdsInTeams[(int) $mid] = true;
13287|                    }
13288|                }
13289|            }
13290|
13291|            // Supervisor/Gestor de Equipe sem equipe atribuída: ainda deve ver ocorrências onde ??
13292|            // pessoalmente gestor responsável ou pessoa envolvida (regra da planilha SSMA).
13293|            // Sem esse ajuste, memberIdsInTeams ficaria vazio e o filtro de manager_id/people_ids
13294|            // nunca passaria — o supervisor não veria nada, mesmo sendo o responsável da ocorrência.
13295|            if ($occurrenceTeamFilterIds === [] && ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor)) {
13296|                $selfMember = $this->getCurrentCompanyMember($company, $user);
13297|                $selfMemberId = (int) ($selfMember?->getId() ?? 0);
13298|                if ($selfMemberId > 0) {
13299|                    $memberIdsInTeams[$selfMemberId] = true;
13300|                }
13301|            }
13302|
13303|            // Ocorrências: por team_id direto OU por manager_id/people_ids/responsible_ids pertencente ?? equipe.
13304|            // Supervisor de Equipe deve ver ocorrências onde ?? gestor responsável ou pessoa envolvida,
13305|            // mesmo que o team_id da ocorrência não esteja preenchido ou difira do escopo.
13306|            $viewerMemberIdForCreated = (int) ($this->getCurrentCompanyMember($company, $user instanceof User ? $user : null)?->getId() ?? 0);
13307|            $occurrences = array_values(array_filter($occurrences, static function (array $o) use ($teamIdStr, $memberIdsInTeams, $viewerMemberIdForCreated): bool {
13308|                if (isset($o['team_id']) && $o['team_id'] !== null && in_array((string) $o['team_id'], $teamIdStr, true)) {
13309|                    return true;
13310|                }
13311|                if ($viewerMemberIdForCreated > 0 && (int) ($o['created_by_member_id'] ?? 0) === $viewerMemberIdForCreated) {
13312|                    return true;
13313|                }
13314|                $managerId = (int) ($o['manager_id'] ?? 0);
13315|                if ($managerId > 0 && isset($memberIdsInTeams[$managerId])) {
13316|                    return true;
13317|                }
13318|                $personId = (int) ($o['person_id'] ?? 0);
13319|                if ($personId > 0 && isset($memberIdsInTeams[$personId])) {
13320|                    return true;
13321|                }
13322|                foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
13323|                    if (isset($memberIdsInTeams[(int) $p])) {
13324|                        return true;
13325|                    }
13326|                }
13327|                return false;
13328|            }));
13329|
13330|            // Inspeções: por team_id
13331|            $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
13332|                $tid = $i['team_id'] ?? null;
13333|                return $tid !== null && $tid !== '' && in_array((string) $tid, $teamIdStr, true);
13334|            }));
13335|
13336|            // Abordagens: por observador pertencente ?? equipe
13337|            $abordagens = array_values(array_filter($abordagens, static function (array $ab) use ($memberIdsInTeams): bool {
13338|                $obsId = (int) ($ab['observador_id'] ?? 0);
13339|                return $obsId > 0 && isset($memberIdsInTeams[$obsId]);
13340|            }));
13341|
13342|            // Plano de Ação: ações em que pelo menos um responsável pertence ao escopo da equipe
13343|            // (não todas as ações das ocorrências visíveis da equipe).
13344|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
13345|        }
13346|
13347|        if ($occurrenceAreaFilterIds !== null) {
13348|            $areaMemberIds = $areaScope->allowedMemberIds();
13349|            // Equipe com área fora do recorte esconde a inspeção mesmo com participante interno:
13350|            // é o que mantém a interseção quando team_limitation e area_limitation estão juntos.
13351|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
13352|                $inspections,
13353|                $areaScope->allowedTeamIds(),
13354|                $areaMemberIds,
13355|                $areaScope->teamIdsWithoutArea()
13356|            );
13357|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
13358|                $abordagens,
13359|                $areaMemberIds
13360|            );
13361|            // Mesmo critério da limitação de equipe: plano de ação só com responsável no recorte.
13362|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $areaMemberIds);
13363|        }
13364|
13365|        // Técnico especialista: filtra ocorrências pelos tipos que têm autorização técnica (SsmaPermissionTagMember).
13366|        // Inspeções/Abordagens/Ações não são filtradas por equipe; o técnico não tem equipe SSMA atribuída.
13367|        if ($isTechSpecialistOnly) {
13368|            $techTypesSet = array_flip($userTechnicalTypes);
13369|            $occurrences = array_values(array_filter(
13370|                $occurrences,
13371|                static fn (array $o): bool => isset($techTypesSet[$o['type_value'] ?? ''])
13372|            ));
13373|        }
13374|
13375|        // Filtro de membro (próprio conteúdo) apenas quando o usuário NÃO tem escopo de equipe.
13376|        // Supervisor/Gestor de Equipe já foram limitados pelo filtro de equipe acima — aplicar o
13377|        // filtro de membro sobre eles reduziria a visão incorretamente para só o próprio conteúdo.
13378|        $ssmaPreventionInspectionEnabled = true;
13379|        $ssmaPreventionAbordagemEnabled  = true;
13380|
13381|        // Abas Inspeção/Abordagem (ROLE_USER): só quando meta do kind > 0 (igual critério da tabela Metas).
13382|        // - Sem row (nunca adicionado ou removido com lixeira) → abas ocultas.
13383|        // - Meta = -1 (desligado para esse kind) → aba oculta.
13384|        // - Meta >= 0 (ligado, mesmo sem goal definido ainda) → aba visível.
13385|        // Supervisores/Gestores de Equipe e Gestor Administrador são excluídos desse controle: suas abas dependem de outras flags.
13386|        if ($company && $user instanceof User
13387|            && !$this->isGranted('ROLE_SUPER_ADMIN')
13388|            && !$this->isGranted('ROLE_MANAGER')
13389|            && !$this->isGranted('ROLE_MANAGER_GESTOR')) {
13390|            $memberForPreventionTabs = $this->getCurrentCompanyMember($company, $user);
13391|            $memberIdPreventionTabs = (int) ($memberForPreventionTabs?->getId() ?? 0);
13392|            if ($memberIdPreventionTabs > 0) {
13393|                $metaKeyTabs = self::PREVENCAO_MEMBER_META_PREFIX . $memberIdPreventionTabs;
13394|                $memberMetaRowTabs = $this->entityManager->getRepository(SsmaMeta::class)
13395|                    ->findOneBy(['company' => $company, 'teamName' => $metaKeyTabs]);
13396|                // Le os valores de meta da linha encontrada (null quando a linha nao existe).
13397|                // Aba visível quando o membro está na tabela (row existe) e esse kind não está desligado (-1).
13398|                // meta=0 (ligado sem goal definido) → aba visível; meta=-1 (desligado) → aba oculta.
13399|                $isMgmtPreventionProfile = $this->ssmaPreventionHubAccessService
13400|                    ->isManagementPreventionTag($ssmaPreventionProductTagName)

{"search_text": "private function applySsmaEventManagerAssignment"}

File: src/Controller/SsmaController.php
Match lines: 1
12294|    private function applySsmaEventManagerAssignment(

{"search_text": "private function buildSsmaEventResponsibleManagerOptions"}

File: src/Controller/SsmaController.php
Match lines: 1
12248|    private function buildSsmaEventResponsibleManagerOptions(

{"search_text": "private function canSelectSsmaEventResponsibleManager"}

File: src/Controller/SsmaController.php
Match lines: 1
12137|    private function canSelectSsmaEventResponsibleManager(?Company $company, ?User $user): bool

{"file_path": "src/Controller/SsmaController.php", "start_line": 12090, "end_line": 12430}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 12090-12430
12090|                foreach ($peopleRaw as $pid) {
12091|                    $pid = (int) $pid;
12092|                    if ($pid > 0) {
12093|                        return $pid;
12094|                    }
12095|                }
12096|            }
12097|        }
12098|
12099|        if ($createdByUserId > 0) {
12100|            return $this->resolveCompanyMemberIdByUserId($company, $createdByUserId);
12101|        }
12102|
12103|        return null;
12104|    }
12105|
12106|    private function resolveCompanyMemberIdByUserId(Company $company, int $userId): ?int
12107|    {
12108|        if ($userId <= 0) {
12109|            return null;
12110|        }
12111|
12112|        $cacheKey = ((int) $company->getId()) . ':' . $userId;
12113|        if (array_key_exists($cacheKey, $this->ssmaMemberIdByUserIdCache)) {
12114|            return $this->ssmaMemberIdByUserIdCache[$cacheKey];
12115|        }
12116|
12117|        $members = $this->entityManager->getRepository(CompanyMembers::class)
12118|            ->findBy(['company' => $company, 'user' => $userId, 'isRemoved' => 0]);
12119|
12120|        $resolved = null;
12121|        foreach ($members as $member) {
12122|            if ($member instanceof CompanyMembers) {
12123|                $resolved = (int) $member->getId();
12124|                break;
12125|            }
12126|        }
12127|
12128|        $this->ssmaMemberIdByUserIdCache[$cacheKey] = $resolved;
12129|
12130|        return $resolved;
12131|    }
12132|
12133|    /**
12134|     * Gestor (equipe/área/administrador) ou tenant/plataforma pode trocar o "Gestor responsável".
12135|     * Membro e supervisor não — o campo fica travado no líder imediato de quem está cadastrando.
12136|     */
12137|    private function canSelectSsmaEventResponsibleManager(?Company $company, ?User $user): bool
12138|    {
12139|        if (
12140|            $this->isGranted('ROLE_SUPER_ADMIN')
12141|            || $this->isGranted('ROLE_MANAGER')
12142|            || $this->isGranted('ROLE_TENANT')
12143|        ) {
12144|            return true;
12145|        }
12146|        if (!$company || !$user) {
12147|            return false;
12148|        }
12149|
12150|        $member = $this->getCurrentCompanyMember($company, $user);
12151|        if (!$member instanceof CompanyMembers) {
12152|            return false;
12153|        }
12154|        if ($this->memberIsSsmaGestorAdministrador($member)) {
12155|            return true;
12156|        }
12157|
12158|        $tagName = $this->resolveSsmaProductPermissionTagForMember($member)?->getName();
12159|
12160|        return in_array($tagName, [
12161|            'Gestor de Equipe',
12162|            SsmaAreaLimitationScope::TAG_GESTOR_AREA,
12163|            'Gestor Administrador',
12164|        ], true);
12165|    }
12166|
12167|    private function resolveLoggedMemberImmediateLeaderId(Company $company, User $user): ?int
12168|    {
12169|        $member = $this->getCurrentCompanyMember($company, $user);
12170|        if (!$member instanceof CompanyMembers) {
12171|            return null;
12172|        }
12173|
12174|        $superior = $member->getSuperior();
12175|        if (!$superior instanceof CompanyMembers || (int) $superior->getIsRemoved() === 1) {
12176|            return null;
12177|        }
12178|        if ($superior->getCompany()?->getId() !== $company->getId()) {
12179|            return null;
12180|        }
12181|
12182|        $id = (int) $superior->getId();
12183|
12184|        return $id > 0 ? $id : null;
12185|    }
12186|
12187|    /**
12188|     * Pessoas que são "Responsável" (superior) de pelo menos um colaborador ativo.
12189|     * Fonte: campo Responsável do cadastro em /my-company/members.
12190|     *
12191|     * @return array<int, true>
12192|     */
12193|    private function collectImmediateLeaderMemberIds(Company $company): array
12194|    {
12195|        if ($this->ssmaImmediateLeaderMemberIdsCache !== null) {
12196|            return $this->ssmaImmediateLeaderMemberIdsCache;
12197|        }
12198|
12199|        $set = [];
12200|        try {
12201|            $rows = $this->entityManager->createQueryBuilder()
12202|                ->select('DISTINCT IDENTITY(cm.superior) AS sid')
12203|                ->from(CompanyMembers::class, 'cm')
12204|                ->where('cm.company = :company')
12205|                ->andWhere('cm.isRemoved = 0')
12206|                ->andWhere('cm.superior IS NOT NULL')
12207|                ->setParameter('company', $company)
12208|                ->getQuery()
12209|                ->getArrayResult();
12210|            foreach ($rows as $row) {
12211|                $id = (int) ($row['sid'] ?? 0);
12212|                if ($id > 0) {
12213|                    $set[$id] = true;
12214|                }
12215|            }
12216|        } catch (\Throwable) {
12217|            $members = $this->entityManager->getRepository(CompanyMembers::class)
12218|                ->findBy(['company' => $company, 'isRemoved' => 0]);
12219|            foreach ($members as $member) {
12220|                if (!$member instanceof CompanyMembers) {
12221|                    continue;
12222|                }
12223|                $superior = $member->getSuperior();
12224|                if ($superior instanceof CompanyMembers) {
12225|                    $sid = (int) $superior->getId();
12226|                    if ($sid > 0) {
12227|                        $set[$sid] = true;
12228|                    }
12229|                }
12230|            }
12231|        }
12232|
12233|        $this->ssmaImmediateLeaderMemberIdsCache = $set;
12234|
12235|        return $set;
12236|    }
12237|
12238|    /**
12239|     * Lista do select "Gestor responsável": líderes imediatos no escopo do gestor.
12240|     * Sempre inclui o líder imediato de quem está logado (default do cadastro).
12241|     *
12242|     * @param list<array<string, mixed>> $allMembers
12243|     * @param array<int, true>|null $scopeMemberIds
12244|     * @param list<array<string, mixed>> $occurrences
12245|     *
12246|     * @return list<array<string, mixed>>
12247|     */
12248|    private function buildSsmaEventResponsibleManagerOptions(
12249|        Company $company,
12250|        array $allMembers,
12251|        ?array $scopeMemberIds,
12252|        ?int $ownLeaderId,
12253|        array $occurrences = [],
12254|    ): array {
12255|        $leaderIds = $this->collectImmediateLeaderMemberIds($company);
12256|        $keep = $leaderIds;
12257|        if ($scopeMemberIds !== null) {
12258|            $keep = array_intersect_key($keep, $scopeMemberIds);
12259|        }
12260|        if ($ownLeaderId !== null && $ownLeaderId > 0) {
12261|            $keep[$ownLeaderId] = true;
12262|        }
12263|        foreach ($occurrences as $row) {
12264|            $mid = (int) ($row['manager_id'] ?? 0);
12265|            if ($mid > 0) {
12266|                $keep[$mid] = true;
12267|            }
12268|        }
12269|
12270|        $byId = [];
12271|        $memberById = [];
12272|        foreach ($allMembers as $m) {
12273|            $mid = (int) ($m['id'] ?? 0);
12274|            if ($mid > 0) {
12275|                $memberById[$mid] = $m;
12276|            }
12277|        }
12278|        foreach (array_keys($keep) as $memberId) {
12279|            $this->appendSsmaEventModalGestorRow($byId, (int) $memberId, $memberById, $company);
12280|        }
12281|
12282|        $list = array_values($byId);
12283|        usort($list, static fn (array $a, array $b): int => strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? '')));
12284|
12285|        return $list;
12286|    }
12287|
12288|    /**
12289|     * @param array<string, mixed> $data
12290|     * @param array<string, mixed>|null $existingDetails
12291|     *
12292|     * @return array<string, mixed>
12293|     */
12294|    private function applySsmaEventManagerAssignment(
12295|        array $data,
12296|        Company $company,
12297|        User $user,
12298|        ?array $existingDetails = null
12299|    ): array {
12300|        if (!isset($data['details']) || !is_array($data['details'])) {
12301|            $data['details'] = [];
12302|        }
12303|
12304|        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);
12305|        $canSelect = $this->canSelectSsmaEventResponsibleManager($company, $user);
12306|        $existingManagerId = (int) ($existingDetails['manager_id'] ?? 0);
12307|        $requested = (int) ($data['details']['manager_id'] ?? 0);
12308|
12309|        if (!$canSelect) {
12310|            if ($existingManagerId > 0) {
12311|                $data['details']['manager_id'] = $existingManagerId;
12312|                return $data;
12313|            }
12314|            if ($ownLeaderId !== null && $ownLeaderId > 0) {
12315|                $data['details']['manager_id'] = $ownLeaderId;
12316|            }
12317|            return $data;
12318|        }
12319|
12320|        $allowed = $this->collectImmediateLeaderMemberIds($company);
12321|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
12322|        if ($scope !== null) {
12323|            $teamMembers = $scope === []
12324|                ? []
12325|                : $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);
12326|            $allowed = array_intersect_key($allowed, $teamMembers);
12327|        }
12328|        if ($ownLeaderId !== null && $ownLeaderId > 0) {
12329|            $allowed[$ownLeaderId] = true;
12330|        }
12331|
12332|        if ($requested > 0 && (isset($allowed[$requested]) || $requested === $existingManagerId)) {
12333|            $data['details']['manager_id'] = $requested;
12334|            return $data;
12335|        }
12336|
12337|        if ($existingManagerId > 0) {
12338|            $data['details']['manager_id'] = $existingManagerId;
12339|            return $data;
12340|        }
12341|        if ($ownLeaderId !== null && $ownLeaderId > 0) {
12342|            $data['details']['manager_id'] = $ownLeaderId;
12343|        }
12344|
12345|        return $data;
12346|    }
12347|
12348|    /**
12349|     * @param array<string, mixed> $row
12350|     *
12351|     * @return array<string, mixed>
12352|     */
12353|    private function enrichOccurrenceCreatorAndManagerFallback(array $row, Company $company): array
12354|    {
12355|        $createdByUserId = (int) ($row['created_by_id'] ?? 0);
12356|        $createdByMemberId = (int) ($row['created_by_member_id'] ?? 0);
12357|        if ($createdByMemberId <= 0 && $createdByUserId > 0) {
12358|            $createdByMemberId = (int) ($this->resolveCompanyMemberIdByUserId($company, $createdByUserId) ?? 0);
12359|        }
12360|        if ($createdByMemberId > 0) {
12361|            $row['created_by_member_id'] = $createdByMemberId;
12362|        }
12363|
12364|        $managerId = (int) ($row['manager_id'] ?? 0);
12365|        if ($managerId <= 0 && $createdByMemberId > 0) {
12366|            $creator = $this->entityManager->find(CompanyMembers::class, $createdByMemberId);
12367|            $superior = $creator instanceof CompanyMembers ? $creator->getSuperior() : null;
12368|            if ($superior instanceof CompanyMembers && (int) $superior->getIsRemoved() !== 1) {
12369|                $row['manager_id'] = (int) $superior->getId();
12370|                $label = $this->ssmaMemberDisplayLabel($superior);
12371|                if ($label === '') {
12372|                    $label = (string) ($superior->getEmail() ?? '');
12373|                }
12374|                if ($label !== '') {
12375|                    $row['manager_display_name'] = $label;
12376|                }
12377|            }
12378|        }
12379|
12380|        return $row;
12381|    }
12382|
12383|    /**
12384|     * Eventos cadastrados pelo login atual entram na listagem mesmo fora do recorte de equipe.
12385|     *
12386|     * @param list<array<string, mixed>> $occurrences
12387|     *
12388|     * @return list<array<string, mixed>>
12389|     */
12390|    private function appendOccurrencesCreatedByCurrentUser(array $occurrences, Company $company, User $user): array
12391|    {
12392|        $userId = (int) $user->getId();
12393|        if ($userId <= 0) {
12394|            return $occurrences;
12395|        }
12396|
12397|        $existing = [];
12398|        foreach ($occurrences as $row) {
12399|            if (!empty($row['is_ssma_event'])) {
12400|                $id = (int) ($row['id'] ?? 0);
12401|                if ($id > 0) {
12402|                    $existing['e' . $id] = true;
12403|                }
12404|            }
12405|        }
12406|
12407|        $events = $this->entityManager->getRepository(SsmaEvent::class)
12408|            ->findBy(['company' => $company, 'createdById' => $userId], ['eventDatetime' => 'DESC']);
12409|        if ($events === []) {
12410|            return $occurrences;
12411|        }
12412|
12413|        [, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
12414|        $teamsById = array_column($teams, null, 'id');
12415|
12416|        foreach ($events as $event) {
12417|            if (!$event instanceof SsmaEvent) {
12418|                continue;
12419|            }
12420|            $key = 'e' . (int) $event->getId();
12421|            if (isset($existing[$key])) {
12422|                continue;
12423|            }
12424|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
12425|            $occurrences[] = $this->enrichOccurrenceCreatorAndManagerFallback($row, $company);
12426|            $existing[$key] = true;
12427|        }
12428|
12429|        return $occurrences;
12430|    }

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "start_line": 440, "end_line": 545}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3231)
IS_TRUNCATED: false
LINE_RANGE: 440-545
440|            flex-direction: column;
441|            align-items: center;
442|            justify-content: center;
443|            gap: 10px;
444|        }
445|
446|        .ssma-occ-evidence-row .occ-view-drop-zone > span:not(.text-muted) {
447|            font-size: 14px !important;
448|            font-weight: 700 !important;
449|            color: #374151 !important;
450|            text-align: center;
451|            line-height: 1.3;
452|        }
453|
454|        .ssma-occ-evidence-row .occ-view-drop-zone > .text-muted {
455|            font-size: 12px !important;
456|            color: #8B9199 !important;
457|        }
458|
459|        #occ-view-procedures-list .occ-view-drop-zone {
460|            min-height: 160px;
461|        }
462|
463|        .ssma-evidence-card {
464|            transition: none !important;
465|            cursor: default;
466|            box-shadow: none !important;
467|        }
468|
469|        .ssma-evidence-card:hover {
470|            transform: none !important;
471|            border-color: #EEEFF4 !important;
472|            background-color: #FFFFFF !important;
473|            filter: none !important;
474|            opacity: 1 !important;
475|        }
476|
477|        .ssma-evidence-card *,
478|        .ssma-evidence-card:hover * {
479|            transition: none !important;
480|        }
481|
482|        .ssma-evidence-card .card-footer {
483|            border-top: 0 !important;
484|        }
485|
486|    </style>
487|{% endblock %}
488|
489|{% block container %}
490|{% set member_by_id = {} %}
491|{% for member in allMembers %}
492|    {% set member_by_id = member_by_id|merge({ ('member_' ~ member.id): member }) %}
493|{% endfor %}
494|
495|{% set severity_key       = occurrence.severity_value|default('') %}
496|{% set sev                = severity_map[severity_key] ?? { 'label': '—', 'dot': '#6c757d', 'bg_light': 'rgba(108,117,125,0.10)' } %}
497|{% set gravity_label      = occurrence.gravity_label|default(occurrence.potential_severity_label|default(sev.label)) %}
498|{% set guidance           = severity_guidance[severity_key] ?? null %}
499|{% set _occ_approval      = occurrence.occurrence_approval.status|default('') %}
500|{% set _is_rejected_occ   = occurrence.is_ssma_event|default(false) and _occ_approval == 'rejected' %}
501|{% set normalized_status  = _is_rejected_occ
502|    ? 'readequacao'
503|    : occurrence.status_value|default('')|replace({'-': '_'}) %}
504|{% set stat               = status_map[normalized_status] ?? { 'label': '—', 'dot': '#6c757d' } %}
505|{% set type_label         = type_labels[occurrence.type_value|default('')]       ?? occurrence.type_value|default('—') %}
506|{% set nature_label       = nature_labels[occurrence.nature_value|default('')]   ?? occurrence.nature_value|default('—') %}
507|{% set approach_label     = approach_labels[occurrence.approach_value|default('')] ?? occurrence.approach_value|default('—') %}
508|{% set gmr_label          = occurrence.gmr|default('') != '' ? occurrence.gmr : 'Não informado' %}
509|{% set category_label     = occurrence.category|default('') != '' ? occurrence.category : 'Não informado' %}
510|{% set location_label     = location_labels[occurrence.location_value|default('')] ?? occurrence.location_value|default('—') %}
511|{% set responsible_id     = occurrence.responsible_ids|default([])|first %}
512|{% set manager_member_key = occurrence.manager_id is defined ? ('member_' ~ occurrence.manager_id) : '' %}
513|{% set manager_member     = manager_member_key and member_by_id[manager_member_key] is defined ? member_by_id[manager_member_key] : null %}
514|{% set team_name = '—' %}
515|{% for team in teams %}
516|    {% if team.id == occurrence.team_id %}{% set team_name = team.name %}{% endif %}
517|{% endfor %}
518|{% set people_members = [] %}
519|{% for person_id in occurrence.people_ids|default([]) %}
520|    {% set person_key = 'member_' ~ person_id %}
521|    {% if member_by_id[person_key] is defined %}
522|        {% set people_members = people_members|merge([member_by_id[person_key]]) %}
523|    {% endif %}
524|{% endfor %}
525|{% set is_ros_occurrence = occurrence.type_value|default('') == 'ROS' %}
526|{% set created_by_lookup_id = occurrence.created_by_member_id|default(occurrence.created_by_id|default(null)) %}
527|{% set created_by_member_key = created_by_lookup_id ? ('member_' ~ created_by_lookup_id) : '' %}
528|{% set created_by_member = created_by_member_key and member_by_id[created_by_member_key] is defined ? member_by_id[created_by_member_key] : null %}
529|{% set reported_by_member = created_by_member ?: manager_member %}
530|{% set witness_members = [] %}
531|{% for witness_id in occurrence.witness_ids|default([]) %}
532|    {% set witness_key = 'member_' ~ witness_id %}
533|    {% if member_by_id[witness_key] is defined %}
534|        {% set witness_members = witness_members|merge([member_by_id[witness_key]]) %}
535|    {% endif %}
536|{% endfor %}
537|{% set responsible_member_key = responsible_id is not null ? ('member_' ~ responsible_id) : '' %}
538|{% set evidence_uploader_member = responsible_member_key and member_by_id[responsible_member_key] is defined
539|    ? member_by_id[responsible_member_key]
540|    : manager_member %}
541|{% set evidence_chip_initials = [] %}
542|{% if people_members|length > 0 %}
543|    {% set evidence_chip_initials = evidence_chip_initials|merge([people_members[0].name|default('R')|slice(0, 1)|upper]) %}
544|{% endif %}
545|{% if evidence_uploader_member and evidence_uploader_member.name|default('') != '' %}

{"search_text": "member_by_id", "file_patterns": ["templates/ssma/occurrence/occurrence_view.html.twig"]}

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 16
490|{% set member_by_id = {} %}
492|    {% set member_by_id = member_by_id|merge({ ('member_' ~ member.id): member }) %}
513|{% set manager_member     = manager_member_key and member_by_id[manager_member_key] is defined ? member_by_id[manager_member_key] : null %}
521|    {% if member_by_id[person_key] is defined %}
522|        {% set people_members = people_members|merge([member_by_id[person_key]]) %}
528|{% set created_by_member = created_by_member_key and member_by_id[created_by_member_key] is defined ? member_by_id[created_by_member_key] : null %}
533|    {% if member_by_id[witness_key] is defined %}
534|        {% set witness_members = witness_members|merge([member_by_id[witness_key]]) %}
538|{% set evidence_uploader_member = responsible_member_key and member_by_id[responsible_member_key] is defined
539|    ? member_by_id[responsible_member_key]
906|                {% set area_resp_member = area_resp_key and member_by_id[area_resp_key] is defined ? member_by_id[area_resp_key] : null %}
967|                            member_by_id: member_by_id,
1010|                        {% set _mem = _memKey and member_by_id[_memKey] is defined ? member_by_id[_memKey] : null %}
1163|                                        {% if member_by_id[responsible_key] is defined %}
1164|                                            {% set responsible_members = responsible_members|merge([member_by_id[responsible_key]]) %}
1170|                                        member_by_id: member_by_id

{"search_text": "occurrence_view.html.twig"}

File: .opencodereview/rule.json
Match lines: 2
106|      "path": "templates/ssma/occurrence/occurrence_view.html.twig",
111|      "path": "templates/ssma/occurrence/occurrence_view.html.twig",

File: .opencodereview/rules/ssma/occurrence-approve.md
Match lines: 1
7|- `templates/ssma/occurrence/occurrence_view.html.twig` — modal `#ssmaOccurrenceApproveModal` e `sendDecision`

File: .opencodereview/rules/ssma/occurrence-ros-aprofundamento-readonly.md
Match lines: 2
6|- `templates/ssma/occurrence/occurrence_view.html.twig` — clique em `+ Aprofundamento` / `.js-occ-view-aprofundamento-btn`; envia `_can_edit_aprofundamento` a partir de `can_aprofundamento.can_edit`
32|**View (`occurrence_view.html.twig`):**

File: CONFLITOS_REAIS_DYNAMIC_COLOR_ICONS.md
Match lines: 5
19|### 1️⃣ `templates/ssma/occurrence/occurrence_view.html.twig` (Linha ~449)
77|### Passo 1: Editar `templates/ssma/occurrence/occurrence_view.html.twig`
110|git add templates/ssma/occurrence/occurrence_view.html.twig
227|git add templates/ssma/occurrence/occurrence_view.html.twig
246|> 1. `occurrence_view.html.twig` - apenas nome de classe CSS

File: docs/engineering/pr/feature-ssma-ocorrencia-correcoes-new-production/PR_descricao_feature-ssma-ocorrencia-correcoes-new-production.md
Match lines: 1
29|- `occurrence_view.html.twig`, `_tab_occurrences.html.twig`, `_modal_event.html.twig` — Readequação, validação, suspeita/caracterizar só para médico (`.is-doctor-aprof`), Reprovar com cor da plataforma

File: docs/engineering/pr/hotfix-ssma-ambiental-material-brenda-new-production/PR_descricao_hotfix-ssma-ambiental-material-brenda-new-production.md
Match lines: 2
44|- Detalhe `occurrence_view.html.twig` — Editar restrito a tenant/super admin.
88|| `occurrence_view.html.twig` | Editar só `ROLE_TENANT` / `ROLE_SUPER_ADMIN` |

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_arquivos_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
221|M	templates/ssma/occurrence/occurrence_view.html.twig

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_impacto_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
221| .../ssma/occurrence/occurrence_view.html.twig      |  300 +-

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_arquivos_hotfix-ssma-occ-type-perms-datatables-new-production.txt
Match lines: 1
6|M	templates/ssma/occurrence/occurrence_view.html.twig

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_descricao_hotfix-ssma-occ-type-perms-datatables-new-production.md
Match lines: 1
92|| `templates/ssma/occurrence/occurrence_view.html.twig` | Botão **+Aprofundamento** para especialistas |

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_impacto_hotfix-ssma-occ-type-perms-datatables-new-production.txt
Match lines: 1
6| .../ssma/occurrence/occurrence_view.html.twig      |  50 ++-

File: docs/engineering/pr/hotfix-ssma-ros-barrier-type-422/PR_descricao_hotfix-ssma-ros-barrier-type-422.md
Match lines: 1
50|| Flash report | `occurrence_view.html.twig`, `_modal_event.html.twig`, `_tab_config.html.twig`, `new_automation.html.twig` |

File: docs/engineering/pr/new_staging2/PR_arquivos_new_staging2.txt
Match lines: 1
1623|M	templates/ssma/occurrence/occurrence_view.html.twig

File: docs/engineering/pr/new_staging2/PR_impacto_new_staging2.txt
Match lines: 1
1623| .../ssma/occurrence/occurrence_view.html.twig      |  178 +-

File: docs/ssma/PENDENCIAS-SSMA.md
Match lines: 1
84|- [ ] Flash report **abrir/baixar** no modal (sem e-mail) — implementado em `occurrence_view.html.twig`.

File: docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md
Match lines: 2
132|Consumidores de `can_approve_occurrence` no Twig (`occurrence_view.html.twig`, linhas ~718,
176|   (`occurrence_view.html.twig`).

File: src/Controller/SsmaController.php
Match lines: 1
3519|        return $this->render('ssma/occurrence/occurrence_view.html.twig', array_merge($viewData, [

File: templates/ssma/partials/_ssma_body_map_entry.html.twig
Match lines: 1
10|  - occurrence/occurrence_view.html.twig        → mapa readonly (view sem permissão de editar)

File: tests/Ssma/SsmaPermissionsRegressionTest.php
Match lines: 1
61|        $this->occurrenceView = $root . '/templates/ssma/occurrence/occurrence_view.html.twig';

File: tests/Ssma/ssma_performance_fase_d_standalone.php
Match lines: 1
15|$occView = file_get_contents($root . '/templates/ssma/occurrence/occurrence_view.html.twig');

File: tests/Unit/Product/Ssma/SsmaBodyMapEntryRegressionTest.php
Match lines: 1
56|        $view = $this->read('templates/ssma/occurrence/occurrence_view.html.twig');

File: tests/Unit/Product/Ssma/assert_branch_ui_fixes.php
Match lines: 2
141|$occView = $root . '/templates/ssma/occurrence/occurrence_view.html.twig';
287|$occView = $root . '/templates/ssma/occurrence/occurrence_view.html.twig';

File: tests/Unit/Product/Ssma/assert_flash_report_flow.php
Match lines: 1
37|$occView = $root . '/templates/ssma/occurrence/occurrence_view.html.twig';

{"search_text": "created_by_member_id"}

File: docs/plano_integracao_alertas_painel_efetividade.md
Match lines: 8
19|As ações de alertas existem em outro fluxo. O plano é salvo em `risk_indicator_manager_context`, com `context_type = signal_action_plan`. Após o merge de `fix/acoes-alertas`, o JSON persistido é significativamente mais rico: o plano mantém responsável, prazo e autor no nível do plano; cada passo NEURAL novo passa a ter **autoria individual server-side** (`created_by_user_id`, `created_by_member_id`, `created_by_name`, `created_at` em ISO 8601) e **avaliação imutável por outro gestor** (`evaluation` com `note`, `satisfaction`, `evidence`, `evaluated_by_*`, `evaluated_at`, `status = "resolved"`). A branch auditada agora contém `NeuralAlertActionPlanApplicationService`, `NeuralAlertStepEvaluationService` e `NeuralAlertStepEvidenceStorage`, com transação, lock de linha e `context_version` para concorrência otimista. Evidência em imagem é persistida em storage privado via `StorageDriverInterface` e servida por rota dedicada com `Cache-Control: private, no-store`.
24|2. **Não existe UI de seleção de avaliador.** O avaliador é sempre o usuário autenticado; o backend bloqueia autoavaliação comparando `created_by_user_id`/`created_by_member_id` com o usuário da sessão.
258|      "created_by_member_id": 456,
272|      "created_by_member_id": 456,
313|| Autoria individual do passo | **Existe (NEURAL novo)** | `created_by_user_id`, `created_by_member_id`, `created_by_name` |
405|`canEvaluateNeuralAlertStep` bloqueia explicitamente autoavaliação comparando `created_by_user_id` e `created_by_member_id` com o usuário da sessão. Não há método dedicado para visualização de evidência; o acesso à rota GET de evidência valida `canViewSignal` + tipo NEURAL + escopo do path (`company_{id}/signal_{hash}/step_{hash}`).
462|| Autoria individual do passo | JSON do plano | mesma | `steps[].created_by_user_id`, `created_by_member_id`, `created_by_name`, `created_at` | Server-side, NEURAL novo | Existe (NEURAL novo) | Legados sem autoria não são avaliáveis |
904|        'created_by_member_id' => 456,

File: docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md
Match lines: 1
190|  `created_by_id` (User) → `created_by_member_id` e a listagem anexa os eventos do login.

File: src/Controller/SsmaController.php
Match lines: 6
11680|        $createdByMemberId = (int) ($occurrence['created_by_member_id'] ?? 0);
12356|        $createdByMemberId = (int) ($row['created_by_member_id'] ?? 0);
12361|            $row['created_by_member_id'] = $createdByMemberId;
13311|                if ($viewerMemberIdForCreated > 0 && (int) ($o['created_by_member_id'] ?? 0) === $viewerMemberIdForCreated) {
14966|            $add($row['created_by_member_id'] ?? 0);
15590|            'created_by_member_id'   => $this->resolveCompanyMemberIdByUserId($e->getCompany(), $e->getCreatedById()),

File: src/Service/Effectiveness/Alert/NeuralAlertActionNormalizer.php
Match lines: 3
338|                'created_by_member_id' => ($step['created_by_member_id'] ?? null) !== null
339|                    ? (int) $step['created_by_member_id']
374|                foreach (['created_by_member_id', 'evaluated_by_member_id'] as $field) {

File: src/Service/Effectiveness/Alert/NeuralAlertEvidenceConfidenceCalculator.php
Match lines: 2
117|        $createdByMemberId = (int) ($metadata['created_by_member_id'] ?? 0);
136|            || (int) ($metadata['created_by_member_id'] ?? 0) > 0;

File: src/Service/Effectiveness/Behavioral/BehavioralActionNormalizer.php
Match lines: 3
260|                'author_member_id' => isset($payload['created_by_member_id']) && $payload['created_by_member_id'] !== null
261|                    ? (int) $payload['created_by_member_id']
301|            'created_by_member_id' => $draft['metadata']['author_member_id'] ?? null,

File: src/Service/PeopleAnalytics/BehavioralIndicatorActionPlanApplicationService.php
Match lines: 4
163|                'created_by_member_id' => $actorMetadata['member_id'],
250|                'created_by_member_id',
443|                'created_by_member_id' => (int) ($step['created_by_member_id'] ?? 0) ?: null,
495|            'author_member_id' => (int) ($payload['created_by_member_id'] ?? 0) ?: null,

File: src/Service/PeopleAnalytics/NeuralAlertActionPlanApplicationService.php
Match lines: 2
226|                && (int) ($persistedStep['created_by_member_id'] ?? 0) > 0
227|                && (int) $persistedStep['created_by_member_id'] === (int) $evaluatorMember->getId();

File: src/Service/PeopleAnalytics/NeuralAlertStepEvaluationService.php
Match lines: 2
86|                'created_by_member_id' => ($actor['member_id'] ?? null) !== null
340|        foreach (['created_by_user_id', 'created_by_member_id', 'created_by_name', 'created_at'] as $field) {

File: src/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolver.php
Match lines: 4
155|            || (int) ($persistedStep['created_by_member_id'] ?? 0) <= 0
156|            || (int) $persistedStep['created_by_member_id'] !== (int) $companyMember->getId();
186|            && (int) ($persistedStep['created_by_member_id'] ?? 0) > 0
187|            && (int) $persistedStep['created_by_member_id'] === (int) $companyMember->getId()

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 1
526|{% set created_by_lookup_id = occurrence.created_by_member_id|default(occurrence.created_by_id|default(null)) %}

File: tests/Controller/DecisionSystem/RiskIntelligence/BehavioralIndicatorActionControllerTest.php
Match lines: 2
365|            'created_by_member_id' => 20,
407|                'created_by_member_id' => 20,

File: tests/Service/PeopleAnalytics/BehavioralIndicatorActionPlanApplicationServiceTest.php
Match lines: 7
79|        self::assertSame(20, $manualPayload['created_by_member_id']);
106|        self::assertSame(20, $view['actions'][0]['steps'][0]['created_by_member_id']);
124|        $step['created_by_member_id'] = null;
127|        $payload['created_by_member_id'] = null;
140|        self::assertNull($view['actions'][0]['steps'][0]['created_by_member_id']);
583|            'created_by_member_id' => 20,
631|                'created_by_member_id' => 20,

File: tests/Service/PeopleAnalytics/NeuralAlertActionPlanApplicationServiceTest.php
Match lines: 2
258|        self::assertSame(20, $step['created_by_member_id']);
395|            'created_by_member_id' => 20,

File: tests/Service/PeopleAnalytics/NeuralAlertStepEvaluationServiceTest.php
Match lines: 4
42|        self::assertSame(20, $steps[0]['created_by_member_id']);
74|                'created_by_member_id' => 999,
85|        self::assertSame($persisted['created_by_member_id'], $steps[0]['created_by_member_id']);
243|            'created_by_member_id' => 20,

File: tests/Service/PeopleAnalytics/RiskIntelligenceSignalPermissionResolverTest.php
Match lines: 2
556|            'created_by_member_id' => $memberId,
576|                'created_by_member_id' => $authorMemberId,

File: tests/Service/PeopleAnalytics/RiskSignalsPresenterTest.php
Match lines: 1
237|            'created_by_member_id' => 20,

File: tests/Ssma/ssma_event_manager_leader_rule_standalone.php
Match lines: 1
88|ok('Criador volta a ver se created_by_member_id == ele', 10 === 10);

File: tests/Unit/Product/Alert/NeuralAlertActionNormalizerTest.php
Match lines: 1
181|                    'created_by_member_id' => 5,

File: tests/Unit/Product/Alert/NeuralAlertActionPlanReaderTest.php
Match lines: 4
55|                    '{"steps":[{"id":"eval","label":"Avaliada","created_by_user_id":1,"created_by_member_id":2,"created_by_name":"Criador","created_at":"2026-01-01T00:00:00+00:00","evaluation":{"evaluated_at":"2026-02-01T00:00:00+00:00","satisfaction":"bom","status":"evaluated","evaluated_by_member_id":3,"evaluated_by_name":"Gestor"}}]}',
73|                    '{"steps":[{"id":"resolved-eval","label":"Resolvida avaliada","created_by_user_id":1,"created_by_member_id":2,"created_by_name":"Criador","created_at":"2026-01-01T00:00:00+00:00","evaluation":{"evaluated_at":"2026-02-01T00:00:00+00:00","satisfaction":"otimo","status":"evaluated","evaluated_by_member_id":3,"evaluated_by_name":"Gestor"}}]}',
91|                    '{"steps":[{"id":"resolved-done","label":"Concluída","completed":true,"created_by_user_id":1,"created_by_member_id":2,"created_by_name":"Criador","created_at":"2026-01-01T00:00:00+00:00"}]}',
225|                    '{"steps":[{"id":"old","label":"Histórica","created_by_user_id":1,"created_by_member_id":2,"created_by_name":"Criador","created_at":"2024-06-01T00:00:00+00:00","evaluation":{"evaluated_at":"2024-07-01T00:00:00+00:00","satisfaction":"bom","status":"evaluated","evaluated_by_member_id":3,"evaluated_by_name":"Gestor"}}]}',

File: tests/Unit/Product/Alert/NeuralAlertEvidenceConfidenceCalculatorTest.php
Match lines: 5
27|                'created_by_member_id' => 1,
48|                'created_by_member_id' => 1,
69|                'created_by_member_id' => 2,
88|                'created_by_member_id' => 1,
152|                'created_by_member_id' => 1,

File: tests/Unit/Product/Dimension/AlertEffectivenessProviderTest.php
Match lines: 1
49|                    'created_by_member_id' => 2,

File: tests/Unit/Product/Effectiveness/EffectivenessAnalyticalContractPropagationTest.php
Match lines: 1
29|                'created_by_member_id' => 10,

{"file_path": "src/Controller/SsmaController.php", "start_line": 3400, "end_line": 3530}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 3400-3530
3400|
3401|        $isSsmaEventRow = (bool) ($occurrence['is_ssma_event'] ?? false);
3402|        $user    = $this->getUser();
3403|        $company = $user instanceof User ? $user->getCompany() : null;
3404|        $this->maybeAutoFinalizeOccurrenceRowIfAllActionsClosed($occurrence, $company);
3405|        $this->syncOccurrenceRowStatusFromDatabase($occurrence, $company);
3406|
3407|        $today = new \DateTimeImmutable('today');
3408|        foreach ($viewData['actions_taken'] as $actionItem) {
3409|            if ($isSsmaEventRow) {
3410|                if ((int) ($actionItem['event_id'] ?? 0) !== $id) {
3411|                    continue;
3412|                }
3413|            } elseif ((int) ($actionItem['occurrence_id'] ?? 0) !== $id) {
3414|                continue;
3415|            }
3416|            $occurrenceActions[] = $this->enrichOccurrenceViewActionCard($actionItem, $actionTypeLabels, $today);
3417|        }
3418|
3419|        $history = $occurrence['history'] ?? [];
3420|        if (($occurrence['is_ssma_event'] ?? false) === true) {
3421|            $eventEntity = $this->entityManager->getRepository(SsmaEvent::class)->find($id);
3422|            if ($eventEntity instanceof SsmaEvent && $company && $eventEntity->getCompany()->getId() === $company->getId()) {
3423|                foreach ($eventEntity->getHistory() as $hItem) {
3424|                    if (is_array($hItem)) {
3425|                        $history[] = $hItem;
3426|                    }
3427|                }
3428|            }
3429|        } else {
3430|            // Mescla o changelog de auditoria (tipo, gravidade) armazenado em details
3431|            $occurrenceEntity = $this->entityManager->getRepository(SsmaOccurrence::class)->find($id);
3432|            if ($occurrenceEntity instanceof SsmaOccurrence) {
3433|                $changelog = $occurrenceEntity->getDetails()['changelog'] ?? [];
3434|                foreach ($changelog as $cItem) {
3435|                    if (is_array($cItem) && isset($cItem['message'])) {
3436|                        $history[] = $cItem;
3437|                    }
3438|                }
3439|            }
3440|        }
3441|        foreach ($occurrenceActions as $actionItem) {
3442|            $createdAt = (string) ($actionItem['created_at'] ?? '');
3443|            $title = trim((string) ($actionItem['title'] ?? ''));
3444|            if ($createdAt !== '' && $title !== '') {
3445|                $history[] = [
3446|                    'date' => (new \DateTimeImmutable($createdAt))->format('d/m/Y'),
3447|                    'label' => 'Ação criada: ' . $title,
3448|                ];
3449|            }
3450|        }
3451|        // Ordena do mais recente para o mais antigo (data mais recente no topo do histórico).
3452|        usort($history, function (array $a, array $b): int {
3453|            return $this->occurrenceHistoryEntryTimestamp($b) <=> $this->occurrenceHistoryEntryTimestamp($a);
3454|        });
3455|        $occurrence['history'] = $history;
3456|
3457|        $occurrence = $this->filterOccurrenceEvidencesForCurrentUser($occurrence, false);
3458|
3459|        $occurrence = $this->enrichOccurrenceEvidencesForView($occurrence);
3460|
3461|        if (($occurrence['is_ssma_event'] ?? false) === true && $company instanceof Company) {
3462|            $eventEntity = $this->entityManager->getRepository(SsmaEvent::class)->find($id);
3463|            if ($eventEntity instanceof SsmaEvent && $eventEntity->getCompany()->getId() === $company->getId()) {
3464|                $flash = $eventEntity->getDetails()['flash_report'] ?? [];
3465|                $occurrence['flash_report'] = is_array($flash) ? $flash : [];
3466|                if ($user instanceof User) {
3467|                    $this->maybeSubmitOccurrenceForValidation($eventEntity, $company, $user);
3468|                }
3469|                $occurrence['occurrence_approval'] = $this->ssmaOccurrenceApprovalService->getState($eventEntity);
3470|                $details = $eventEntity->getDetails();
3471|                if (is_array($details)) {
3472|                    $occurrence['work_leave'] = (string) ($details['work_leave'] ?? $occurrence['work_leave'] ?? '');
3473|                    $occurrence['injury_classification'] = (string) ($details['injury_classification'] ?? $occurrence['injury_classification'] ?? '');
3474|                }
3475|            }
3476|        }
3477|
3478|        $occurrence['work_leave_label'] = $this->ssmaReportWorkLeaveLabel($occurrence['work_leave'] ?? '');
3479|        $occurrence['injury_classification_label'] = $this->ssmaReportInjuryClassificationLabel(
3480|            (string) ($occurrence['injury_classification'] ?? '')
3481|        );
3482|        // Mesma escala do formulário (Leve/Baixo/Médio/Alto/Severo) — não o slug 4 níveis (grave).
3483|        $occurrence['gravity_label'] = $this->resolveSsmaOccurrenceGravityLabel($occurrence);
3484|        $potSevRaw = trim((string) ($occurrence['potential_severity'] ?? ''));
3485|        if ($potSevRaw !== '') {
3486|            $occurrence['potential_severity_label'] = $this->ssmaReportPotentialSeverityLabel($potSevRaw);
3487|        }
3488|
3489|        $canSubmitFlashReport = false;
3490|        $canDirectSendFlashReport = false;
3491|        if (($occurrence['is_ssma_event'] ?? false) === true && $company instanceof Company && $user instanceof User) {
3492|            $flashPerms = $this->resolveSsmaFlashReportUiPermissions(
3493|                $company,
3494|                $user,
3495|                [],
3496|                (bool) ($viewData['ssma_is_gestor_user'] ?? false)
3497|            );
3498|            $canSubmitFlashReport = $flashPerms['can_submit'];
3499|            $canDirectSendFlashReport = $flashPerms['can_direct_send'];
3500|        }
3501|
3502|        // Responsável da área / do local (mapa location_responsibles + fallback CompanyArea por nome).
3503|        if ($company instanceof Company) {
3504|            $occurrence = $this->enrichOccurrenceAreaResponsible($occurrence, $company, $viewData['allMembers'] ?? []);
3505|        }
3506|
3507|        // Cards de aprofundamento técnico do tipo (ROS / Quase Acidente / acidentes).
3508|        $occurrenceTypeKey = (string) ($occurrence['type_value'] ?? '');
3509|        $occurrenceTechTags = [];
3510|        foreach ($viewData['ssma_perm_tags'] ?? [] as $tagRow) {
3511|            if (!is_array($tagRow)) {
3512|                continue;
3513|            }
3514|            if ((string) ($tagRow['occurrence_type_key'] ?? '') === $occurrenceTypeKey) {
3515|                $occurrenceTechTags[] = $tagRow;
3516|            }
3517|        }
3518|
3519|        return $this->render('ssma/occurrence/occurrence_view.html.twig', array_merge($viewData, [
3520|            'occurrence'         => $occurrence,
3521|            'occurrence_actions' => $occurrenceActions,
3522|            'occurrence_tech_tags' => $occurrenceTechTags,
3523|            'ros_call_priority'  => $viewData['ros_call_priority']
3524|                ?? \App\Service\Ssma\SsmaOccurrenceTypeConfigService::ROS_CALL_PRIORITY_LOCATION_DIRECT,
3525|            'can_aprofundamento' => $this->resolveOccurrenceViewAprofundamentoFlags(
3526|                $occurrence,
3527|                $company,
3528|                $user instanceof User ? $user : null
3529|            ),
3530|            'can_submit_flash_report' => $canSubmitFlashReport,

{"search_text": "enrichOccurrenceManagerFields("}

File: src/Controller/SsmaController.php
Match lines: 5
14916|            $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
15222|                $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
15341|            $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
22760|                $all[]                 = $this->enrichOccurrenceManagerFields($row, $membersById, $netCompany);
28626|    private function enrichOccurrenceManagerFields(array $row, array $membersById, ?Company $company = null): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 28620, "end_line": 28710}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 28620-28710
28620|
28621|    /**
28622|     * @param array<int, array<string, mixed>> $membersById
28623|     *
28624|     * @return array<string, mixed>
28625|     */
28626|    private function enrichOccurrenceManagerFields(array $row, array $membersById, ?Company $company = null): array
28627|    {
28628|        if ($company instanceof Company) {
28629|            $row = $this->enrichOccurrenceCreatorAndManagerFallback($row, $company);
28630|        }
28631|
28632|        $managerId = (int) ($row['manager_id'] ?? 0);
28633|        $managerName = trim((string) ($row['manager_name'] ?? ''));
28634|
28635|        if ($managerId > 0 && isset($membersById[$managerId])) {
28636|            $m = $membersById[$managerId];
28637|            $row['manager_display_name'] = (string) ($m['name'] ?? '');
28638|            $row['manager_position'] = (string) ($m['position'] ?? '');
28639|
28640|            return $row;
28641|        }
28642|
28643|        if ($managerName === '' && $managerId > 0 && $company instanceof Company) {
28644|            $member = $this->entityManager->find(CompanyMembers::class, $managerId);
28645|            if ($member instanceof CompanyMembers && $member->getCompany()?->getId() === $company->getId()) {
28646|                $managerName = $this->ssmaMemberDisplayLabel($member);
28647|                if ($managerName === '') {
28648|                    $managerName = (string) ($member->getEmail() ?? '');
28649|                }
28650|            }
28651|        }
28652|
28653|        if ($managerName !== '') {
28654|            $resolvedId = $this->resolveCompanyMemberIdByDisplayLabel($managerName, $membersById);
28655|            if ($resolvedId > 0) {
28656|                $row['manager_id'] = $resolvedId;
28657|                if (isset($membersById[$resolvedId])) {
28658|                    $m = $membersById[$resolvedId];
28659|                    $row['manager_display_name'] = (string) ($m['name'] ?? $managerName);
28660|                    $row['manager_position'] = (string) ($m['position'] ?? '');
28661|
28662|                    return $row;
28663|                }
28664|            }
28665|            $row['manager_display_name'] = $managerName;
28666|
28667|            return $row;
28668|        }
28669|
28670|        if ($managerId > 0 && $company instanceof Company) {
28671|            $member = $this->entityManager->find(CompanyMembers::class, $managerId);
28672|            if ($member instanceof CompanyMembers && $member->getCompany()?->getId() === $company->getId()) {
28673|                $label = $this->ssmaMemberDisplayLabel($member);
28674|                if ($label === '') {
28675|                    $label = (string) ($member->getEmail() ?? '');
28676|                }
28677|                if ($label !== '') {
28678|                    $row['manager_display_name'] = $label;
28679|                }
28680|            }
28681|        }
28682|
28683|        return $row;
28684|    }
28685|
28686|    /**
28687|     * @param array<int, array<string, mixed>> $membersById
28688|     */
28689|    private function resolveCompanyMemberIdByDisplayLabel(string $label, array $membersById): int
28690|    {
28691|        $needle = mb_strtolower(trim($label));
28692|        if ($needle === '') {
28693|            return 0;
28694|        }
28695|
28696|        foreach ($membersById as $id => $memberRow) {
28697|            $name = mb_strtolower(trim((string) ($memberRow['name'] ?? '')));
28698|            if ($name !== '' && $name === $needle) {
28699|                return (int) $id;
28700|            }
28701|        }
28702|
28703|        return 0;
28704|    }
28705|
28706|    public function listMembersJson(): JsonResponse
28707|    {
28708|        /** @var User|null $user */
28709|        $user = $this->getUser();
28710|        if (!$user) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 15440, "end_line": 15610}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 15440-15610
15440|        );
15441|
15442|        return $occ + $evt;
15443|    }
15444|
15445|    /**
15446|     * Formato compatível com cards/tabela de ocorrências (legado).
15447|     *
15448|     * @param array<string, array<string, mixed>> $teamsById
15449|     *
15450|     * @return array<string, mixed>
15451|     */
15452|    /**
15453|     * @return int[]
15454|     */
15455|    private function ssmaExtractIdListFromDetails(mixed $raw): array
15456|    {
15457|        if (empty($raw)) {
15458|            return [];
15459|        }
15460|        if (is_string($raw)) {
15461|            $raw = explode(',', $raw);
15462|        }
15463|        if (!is_array($raw)) {
15464|            return [];
15465|        }
15466|
15467|        return array_values(array_filter(array_map('intval', $raw)));
15468|    }
15469|
15470|    private function mapSsmaEventToOccurrenceListRow(SsmaEvent $e, array $teamsById): array
15471|    {
15472|        $details = $e->getDetails();
15473|        $strategic = (string) ($details['strategic_nature'] ?? '');
15474|        $natureSlug = $this->strategicNatureCodeToListSlug($strategic);
15475|
15476|        $peopleIds = [];
15477|        if (!empty($details['people_ids'])) {
15478|            if (is_string($details['people_ids'])) {
15479|                $peopleIds = array_values(array_filter(array_map('intval', explode(',', $details['people_ids']))));
15480|            } elseif (is_array($details['people_ids'])) {
15481|                $peopleIds = array_values(array_filter(array_map('intval', $details['people_ids'])));
15482|            }
15483|        }
15484|
15485|        $responsibleIds = [];
15486|        if (!empty($details['responsible_ids'])) {
15487|            if (is_string($details['responsible_ids'])) {
15488|                $responsibleIds = array_values(array_filter(array_map('intval', explode(',', $details['responsible_ids']))));
15489|            } elseif (is_array($details['responsible_ids'])) {
15490|                $responsibleIds = array_values(array_filter(array_map('intval', $details['responsible_ids'])));
15491|            }
15492|        }
15493|
15494|        $rawManagerId = $details['manager_id'] ?? null;
15495|        $managerId = ($rawManagerId !== null && $rawManagerId !== '') ? (int) $rawManagerId : null;
15496|        $teamId    = isset($details['team_id']) ? (int) $details['team_id'] : $e->getUnitId();
15497|        $approach  = (string) ($details['approach'] ?? '');
15498|
15499|        $physicalNature = $e->getNature() ?? '';
15500|        $natureLabelKey = $natureSlug !== '' ? $natureSlug : 'processo';
15501|        $title = trim((string) ($details['title'] ?? ''));
15502|        if ($title === '') {
15503|            $desc = trim($e->getDescription());
15504|            $title = $desc !== '' ? (explode("\n", $desc, 2)[0] ?: 'Evento SSMA') : 'Evento SSMA';
15505|        }
15506|
15507|        $personIdRaw = $details['person_id'] ?? null;
15508|        $personId    = $personIdRaw !== null && $personIdRaw !== '' ? (int) $personIdRaw : null;
15509|
15510|        $potSev = trim((string) ($details['potential_severity'] ?? ''));
15511|
15512|        return array_merge([
15513|            'id'              => $e->getId(),
15514|            'list_row_key'    => 'e'.$e->getId(),
15515|            'is_ssma_event'   => true,
15516|            'event_uuid'      => $e->getUuid(),
15517|            'title'           => $title,
15518|            'person_id'       => $personId,
15519|            'person_type'     => (string) ($details['person_type'] ?? ''),
15520|            'type_value'      => $e->getType(),
15521|            'nature_value'    => $natureLabelKey,
15522|            'physical_nature' => $physicalNature,
15523|            'severity_value'  => $potSev !== ''
15524|                ? SsmaOccurrenceDashboardAggregator::normalizeSeveritySlug($this->executiveReportPotentialSeveritySlug($potSev))
15525|                : $this->ssmaEventConsequenceToSeveritySlug($e->getConsequence() ?? ''),
15526|            'status_value'       => $this->ssmaEventStatusToLegacyStatus($e->getStatus()),
15527|            'event_status_raw'   => $e->getStatus(),
15528|            'workflow_status'    => SsmaOccurrenceDashboardAggregator::workflowBucketFromEventStatus($e->getStatus()),
15529|            'date'            => $e->getEventDatetime()->format('Y-m-d'),
15530|            'created_at'      => $e->getCreatedAt()->format('Y-m-d'),
15531|            'manager_id'      => $managerId ?: null,
15532|            'manager_name'    => trim((string) ($details['manager_name'] ?? '')),
15533|            'team_id'         => $teamId,
15534|            'people_ids'      => $peopleIds,
15535|            'location_value'  => $e->getLocation(),
15536|            'description'     => trim((string) ($e->getDescription() ?? '')),
15537|            'activity'        => (string) ($details['activity'] ?? $e->getDescription()),
15538|            'approach_value'  => $approach,
15539|            'gmr'             => trim((string) ($details['gmr'] ?? '')),
15540|            'category'        => trim((string) ($details['category'] ?? '')),
15541|            'responsible_ids' => $responsibleIds,
15542|            'area'            => (string) ($details['area_label'] ?? '') !== ''
15543|                ? (string) $details['area_label']
15544|                : ($teamsById[$teamId]['name'] ?? ''),
15545|            'evidences'            => $this->ssmaEvidencesStorageToDisplay(
15546|                $this->ssmaSanitizeEvidenceStorageList(
15547|                    is_array($details['evidences'] ?? null) ? $details['evidences'] : []
15548|                )
15549|            ),
15550|            'history'              => [],
15551|            'strategic_nature_label' => $strategic !== '' ? EventStrategicNatureEnum::label($strategic) : '',
15552|            'agent_label'          => ($ag = trim((string) ($details['agent'] ?? ($e->getAgent() ?? '')))) !== '' ? EventAgentEnum::label($ag) : '',
15553|            'consequence_label'    => ($cq = $e->getConsequence() ?? '') !== '' ? EventConsequenceEnum::label($cq) : '',
15554|            'consequence'          => (string) ($e->getConsequence() ?? ''),
15555|            'potential_consequence'=> (string) ($details['potential_consequence'] ?? ''),
15556|            'potential_consequence_label' => ($pcq = (string) ($details['potential_consequence'] ?? '')) !== '' && EventConsequenceEnum::isValid($pcq)
15557|                ? EventConsequenceEnum::label($pcq) : '',
15558|            'impacts_display'      => implode(', ', array_filter(array_map(
15559|                static fn (string $imp) => \App\Enum\Ssma\EventImpactEnum::label($imp),
15560|                array_filter(is_array($e->getImpacts()) ? $e->getImpacts() : [], static fn ($v) => is_string($v) && $v !== '')
15561|            ))),
15562|            'event_datetime'       => $e->getEventDatetime()->format('d/m/Y H:i'),
15563|            'had_injury'           => !empty($details['had_injury']),
15564|            'body_parts'           => $this->ssmaEnrichBodyPartsForDisplay($details),
15565|            'body_location_detail' => trim((string) ($details['body_location_detail'] ?? '')),
15566|            'injury_type_label'      => ($it = (string) ($details['injury_type'] ?? '')) !== '' ? InjuryTypeEnum::label($it) : '',
15567|            'injury_severity_label'  => ($is = (string) ($details['injury_severity'] ?? '')) !== '' ? InjurySeverityEnum::label($is) : '',
15568|            'injury_classification'  => (string) ($details['injury_classification'] ?? ''),
15569|            'injury_classification_label' => $this->ssmaReportInjuryClassificationLabel(
15570|                (string) ($details['injury_classification'] ?? '')
15571|            ),
15572|            'work_leave'             => (string) ($details['work_leave'] ?? ''),
15573|            'work_leave_label'       => $this->ssmaReportWorkLeaveLabel($details['work_leave'] ?? ''),
15574|            'occurrence_approval'    => is_array($details['occurrence_approval'] ?? null) ? $details['occurrence_approval'] : [],
15575|            'injured_people_maps'    => $this->ssmaBuildInjuredPeopleMapsForView($details),
15576|            'potential_severity'     => (string) ($details['potential_severity'] ?? ''),
15577|            'deviation_type'         => (string) ($details['deviation_type'] ?? ''),
15578|            'failed_barrier'         => (string) ($details['failed_barrier'] ?? ''),
15579|            'barrier_type'           => (string) ($details['barrier_type'] ?? ''),
15580|            'descaracter_suspect'    => !empty($details['descaracter_suspect']) ? 1 : 0,
15581|            'descaracterizado'       => array_key_exists('descaracterizado', $details) ? (string) $details['descaracterizado'] : '',
15582|            'aprofundamento_pending' => $this->ssmaEventAprofundamentoPending($e) ? 1 : 0,
15583|            'aprofundamento_status' => strtolower(trim((string) ($details['aprofundamento_status'] ?? ''))),
15584|            'aprofundamento_complete' => (
15585|                strtolower(trim((string) ($details['aprofundamento_status'] ?? ''))) === 'finalized'
15586|                || !empty($details['aprofundamento_complete'])
15587|            ) ? 1 : 0,
15588|            'witness_ids'            => $this->ssmaExtractIdListFromDetails($details['witness_ids'] ?? null),
15589|            'created_by_id'          => $e->getCreatedById(),
15590|            'created_by_member_id'   => $this->resolveCompanyMemberIdByUserId($e->getCompany(), $e->getCreatedById()),
15591|            'immediate_risk'         => !empty($details['immediate_risk']) ? 1 : 0,
15592|            'ros_resolved'           => !empty($details['ros_resolved']) ? 1 : 0,
15593|        ], $this->ssmaNormalizeHandFootDetailsForDisplay($details));
15594|    }
15595|
15596|    /**
15597|     * Flag do filtro “campos obrigatórios pendentes” no aprofundamento técnico.
15598|     * Usa o validador completo + checklist ROS/QA (soft no create, rígido no filtro).
15599|     */
15600|    private function ssmaEventAprofundamentoPending(\App\Entity\SsmaEvent $e): bool
15601|    {
15602|        $data = $this->eventToValidationArray($e);
15603|        $validator = new \App\Service\Ssma\SsmaEventValidator();
15604|
15605|        return $validator->aprofundamentoPendingErrors($data) !== [];
15606|    }
15607|
15608|    /**
15609|     * Lista de acidentados com mapa corporal para a view (troca por avatar).
15610|     *

{"file_path": "src/Controller/SsmaController.php", "start_line": 3300, "end_line": 3400}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 3300-3400
3300|                $val = $d->getValidadeDocumento();
3301|                // Documento aprovado só conta se não houver validade ou validade >= hoje
3302|                if ($val === null || \DateTimeImmutable::createFromInterface($val) >= $today) {
3303|                    $aprovados[$d->getRequisitoLabel()] = true;
3304|                }
3305|            }
3306|
3307|            $todos = count(array_intersect_key(array_flip($requisitos), $aprovados)) === count($requisitos);
3308|            $vinculo->setStatusRequisito($todos ? 'valido' : 'pendente');
3309|        }
3310|    }
3311|
3312|    public function viewOccurrence(Request $request, int $id): Response
3313|    {
3314|        if (!$this->canEnterSsmaOperationalArea()) {
3315|            throw $this->createAccessDeniedException('Sem permissão para acessar esta ocorrência.');
3316|        }
3317|
3318|        $viewData = $this->buildSsmaViewData([
3319|            'occurrence_id' => $id,
3320|            'occurrence_kind' => $request->query->get('kind'),
3321|        ]);
3322|        $occurrence = null;
3323|        $occurrenceActions = [];
3324|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
3325|
3326|        $matching = [];
3327|        foreach ($viewData['occurrences'] as $item) {
3328|            if ((int) ($item['id'] ?? 0) === $id) {
3329|                $matching[] = $item;
3330|            }
3331|        }
3332|
3333|        if ($matching === []) {
3334|            $userForStakeholder = $this->getUser();
3335|            $companyForStakeholder = $userForStakeholder instanceof User ? $userForStakeholder->getCompany() : null;
3336|            $stakeholderRow = ($companyForStakeholder instanceof Company && $userForStakeholder instanceof User)
3337|                ? $this->tryLoadOccurrenceViewRowForActionStakeholder(
3338|                    $id,
3339|                    $request->query->get('kind'),
3340|                    $companyForStakeholder,
3341|                    $userForStakeholder
3342|                )
3343|                : null;
3344|            if ($stakeholderRow !== null) {
3345|                $matching = [$stakeholderRow];
3346|            }
3347|        }
3348|
3349|        if ($matching === []) {
3350|            $approverUser = $this->getUser();
3351|            $approverCompany = $approverUser instanceof User ? $approverUser->getCompany() : null;
3352|            if (
3353|                $approverCompany instanceof Company
3354|                && $approverUser instanceof User
3355|                && $this->canApproveSsmaOccurrence($approverCompany, $approverUser)
3356|            ) {
3357|                foreach ($this->loadOccurrenceListRowsForDetailView(
3358|                    $approverCompany,
3359|                    $id,
3360|                    $viewData['allMembers'] ?? [],
3361|                    $viewData['teams'] ?? []
3362|                ) as $item) {
3363|                    if ((int) ($item['id'] ?? 0) === $id) {
3364|                        $matching[] = $item;
3365|                    }
3366|                }
3367|            }
3368|        }
3369|
3370|        if ($matching === []) {
3371|            $this->addFlash('warning', 'Ocorrência não encontrada.');
3372|
3373|            return $this->redirectToRoute('ssma_ocorrencia_index');
3374|        }
3375|
3376|        $kind = $request->query->get('kind');
3377|        if ($kind === 'event') {
3378|            foreach ($matching as $item) {
3379|                if (($item['is_ssma_event'] ?? false) === true) {
3380|                $occurrence = $item;
3381|                break;
3382|            }
3383|        }
3384|            if ($occurrence === null) {
3385|                $this->addFlash('warning', 'Registro não encontrado.');
3386|
3387|                return $this->redirectToRoute('ssma_ocorrencia_index');
3388|            }
3389|        } else {
3390|            foreach ($matching as $item) {
3391|                if (!($item['is_ssma_event'] ?? false)) {
3392|                    $occurrence = $item;
3393|                    break;
3394|                }
3395|            }
3396|            if ($occurrence === null) {
3397|                $occurrence = $matching[0];
3398|            }
3399|        }
3400|

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "start_line": 895, "end_line": 1000}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3231)
IS_TRUNCATED: false
LINE_RANGE: 895-1000
895|                <div class="mb-3">
896|                    <p class="text-muted mb-1 font-weight-bold">Contexto do evento</p>
897|                    <p class="mb-0 font-weight-bold">Registrado {{ occurrence.date|date('d/m/Y') }}</p>
898|                </div>
899|
900|                <div class="mb-3">
901|                    <p class="text-muted mb-1 font-weight-bold">Local da ocorrência</p>
902|                    <p class="mb-0 font-weight-bold">{{ location_label }}</p>
903|                </div>
904|
905|                {% set area_resp_key = occurrence.area_responsible_id|default(null) ? ('member_' ~ occurrence.area_responsible_id) : '' %}
906|                {% set area_resp_member = area_resp_key and member_by_id[area_resp_key] is defined ? member_by_id[area_resp_key] : null %}
907|                <div class="mb-3">
908|                    <p class="text-muted mb-1 font-weight-bold">Responsável da área</p>
909|                    {% if area_resp_member %}
910|                        {% include 'components/ui/_member_avatars_stack.html.twig' with {
911|                            members: [area_resp_member|merge({'avatar': null, 'email': null})],
912|                            max_visible: 1,
913|                            size: 28
914|                        } %}
915|                    {% elseif occurrence.area_responsible_name|default('') %}
916|                        <p class="mb-0 font-weight-bold">{{ occurrence.area_responsible_name }}</p>
917|                    {% else %}
918|                        <p class="mb-0 font-weight-bold">—</p>
919|                    {% endif %}
920|                </div>
921|
922|                <div class="mb-3">
923|                    <p class="text-muted mb-1 font-weight-bold">Equipe</p>
924|                    <p class="mb-0 font-weight-bold">{{ team_name }}</p>
925|                </div>
926|
927|                <div class="mb-3">
928|                    <p class="text-muted mb-1 font-weight-bold">Responsável pelo cadastro</p>
929|                    {% if created_by_member %}
930|                        {% include 'components/ui/_member_avatars_stack.html.twig' with {
931|                            members: [created_by_member|merge({'avatar': null, 'email': null})],
932|                            max_visible: 1,
933|                            size: 28
934|                        } %}
935|                    {% elseif reported_by_member %}
936|                        {% include 'components/ui/_member_avatars_stack.html.twig' with {
937|                            members: [reported_by_member|merge({'avatar': null, 'email': null})],
938|                            max_visible: 1,
939|                            size: 28
940|                        } %}
941|                    {% else %}
942|                        <p class="mb-0 font-weight-bold">—</p>
943|                    {% endif %}
944|                </div>
945|
946|                <div class="mb-3">
947|                    <p class="text-muted mb-1 font-weight-bold">Gestor responsável</p>
948|                    {% if manager_member %}
949|                        {% include 'components/ui/_member_avatars_stack.html.twig' with {
950|                            members: [manager_member|merge({'avatar': null, 'email': null})],
951|                            max_visible: 1,
952|                            size: 28
953|                        } %}
954|                    {% elseif occurrence.manager_display_name|default('') %}
955|                        <p class="mb-0 font-weight-bold">{{ occurrence.manager_display_name }}</p>
956|                    {% else %}
957|                        <p class="mb-0 font-weight-bold">—</p>
958|                    {% endif %}
959|                </div>
960|
961|                {% if not is_ros_occurrence %}
962|                    <div class="mb-3">
963|                        <p class="text-muted mb-1 font-weight-bold">Pessoa(s) envolvida(s)</p>
964|                        {% include 'ssma/occurrence/partials/_involved_people_display.html.twig' with {
965|                            people_ids: occurrence.people_ids|default([]),
966|                            people_members: people_members,
967|                            member_by_id: member_by_id,
968|                            teams: teams|default([]),
969|                            can_view_names: ssmaCanViewAccidentVictimName|default(false),
970|                            max_visible: 4,
971|                            size: 28
972|                        } %}
973|                    </div>
974|                {% endif %}
975|
976|                {% if witness_members|length > 0 %}
977|                    <div class="mb-3">
978|                        <p class="text-muted mb-1 font-weight-bold">Testemunhas</p>
979|                        {% include 'components/ui/_member_avatars_stack.html.twig' with {
980|                            members: witness_members,
981|                            max_visible: 4,
982|                            size: 28
983|                        } %}
984|                    </div>
985|                {% endif %}
986|
987|                {% if occurrence.is_ssma_event|default(false)
988|                    and occurrence.type_value|default('') == 'ACIDENTE_PESSOAL'
989|                    and (
990|                        (occurrence.injured_people_maps|default([])|length > 0)
991|                        or (occurrence.had_injury|default(false) and occurrence.body_parts|default([])|length > 0)
992|                    ) %}
993|                    <hr class="my-3">
994|                    {% set _injuredMaps = occurrence.injured_people_maps|default([]) %}
995|                    {% if _injuredMaps|length == 0 and occurrence.body_parts|default([])|length > 0 %}
996|                        {% set _injuredMaps = [{
997|                            'person_id': '',
998|                            'body_parts': occurrence.body_parts,
999|                            'body_location_detail': occurrence.body_location_detail|default(''),
1000|                            'injury_type_label': occurrence.injury_type_label|default(''),

{"search_text": "mapSsmaEventToOccurrenceListRow("}

File: src/Controller/SsmaController.php
Match lines: 6
12424|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
14912|            $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15214|                $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15322|                $evtById[(int) $event->getId()] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15470|    private function mapSsmaEventToOccurrenceListRow(SsmaEvent $e, array $teamsById): array
16701|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);

{"file_path": "src/Controller/SsmaController.php", "start_line": 14880, "end_line": 14940}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 14880-14940
14880|        }
14881|
14882|        return $occurrences;
14883|    }
14884|
14885|    /**
14886|     * Linhas de listagem para a tela de detalhe — uma ocorrência legada e/ou evento SSMA pelo ID.
14887|     *
14888|     * @param list<array<string, mixed>> $allMembers
14889|     * @param list<array<string, mixed>> $teams
14890|     *
14891|     * @return list<array<string, mixed>>
14892|     */
14893|    private function loadOccurrenceListRowsForDetailView(
14894|        Company $company,
14895|        int $id,
14896|        array $allMembers,
14897|        array $teams
14898|    ): array {
14899|        $teamsById = array_column($teams, null, 'id');
14900|        $membersById = array_column($allMembers, null, 'id');
14901|        $result = [];
14902|
14903|        $legacy = $this->entityManager->getRepository(SsmaOccurrence::class)
14904|            ->findOneBy(['id' => $id, 'company' => $company]);
14905|        if ($legacy instanceof SsmaOccurrence) {
14906|            $result[] = $this->mapSsmaOccurrenceEntityToListRow($legacy, $teamsById);
14907|        }
14908|
14909|        $event = $this->entityManager->getRepository(SsmaEvent::class)
14910|            ->findOneBy(['id' => $id, 'company' => $company]);
14911|        if ($event instanceof SsmaEvent) {
14912|            $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
14913|        }
14914|
14915|        foreach ($result as $idx => $row) {
14916|            $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
14917|        }
14918|
14919|        if ($result === []) {
14920|            return [];
14921|        }
14922|
14923|        $companyId = (int) $company->getId();
14924|        foreach ($result as $idx => $occRow) {
14925|            $entityId = (int) ($occRow['id'] ?? 0);
14926|            $isEvent = !empty($occRow['is_ssma_event']);
14927|            $treeMeta = $this->ssmaCauseTreeService->resolveEntityTreeMeta($companyId, $entityId, $isEvent);
14928|            $occRow['cause_tree_id'] = $treeMeta['cause_tree_id'];
14929|            $result[$idx] = $this->applyOccurrenceCommitteeTriggerFlags($occRow, $company, $treeMeta['tree_status']);
14930|        }
14931|
14932|        return $this->enrichOccurrencesGravityLabels($result);
14933|    }
14934|
14935|    /**
14936|     * Mantém no SSR do detalhe apenas membros citados na ocorrência/ações + gestores do modal.
14937|     *
14938|     * @param list<array<string, mixed>> $allMembers
14939|     * @param list<array<string, mixed>> $occurrences
14940|     * @param list<array<string, mixed>> $actionsTaken

{"file_path": "src/Controller/SsmaController.php", "start_line": 15120, "end_line": 15360}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 15120-15360
15120|    {
15121|        $projectIds = array_values(array_unique(array_filter(array_map(
15122|            static fn (SsmaAction $row): ?int => $row->getProjectId(),
15123|            $rows
15124|        ))));
15125|        $taskCountersByProject = $this->buildProjectTaskCounters($projectIds);
15126|        $projectNamesById = [];
15127|        if ($projectIds !== []) {
15128|            $projectEntities = $this->entityManager->getRepository(Project::class)->findBy(['id' => $projectIds]);
15129|            foreach ($projectEntities as $projectEntity) {
15130|                $projectNamesById[(int) $projectEntity->getId()] = (string) ($projectEntity->getName() ?? '');
15131|            }
15132|        }
15133|
15134|        $result = [];
15135|        foreach ($rows as $row) {
15136|            $responsibleIds = $row->getResponsibleIds() ?? [];
15137|
15138|            $projectId = $row->getProjectId();
15139|            $linkedProject = $row->isHasProject() && $projectId;
15140|            $projectUrl = $linkedProject ? '/projects/project_steps/' . $projectId : null;
15141|            $taskCounters = $linkedProject ? ($taskCountersByProject[$projectId] ?? ['total' => 0, 'completed' => 0]) : ['total' => 0, 'completed' => 0];
15142|
15143|            $relatedEventType = $row->resolveRelatedEventType();
15144|
15145|            $result[] = array_merge([
15146|                'id'                      => $row->getId(),
15147|                'occurrence_id'           => $row->getOccurrence()?->getId(),
15148|                'event_id'                => $row->getEvent()?->getId(),
15149|                'related_event_type'      => $relatedEventType,
15150|                'title'                   => $row->getTitle(),
15151|                'description'             => $row->getDescription() ?? '',
15152|                'type'                    => $row->getType() ?? '',
15153|                'responsible_ids'         => $responsibleIds,
15154|                'deadline'                => $row->getDeadline()?->format('Y-m-d'),
15155|                'solved'                  => $row->isSolved(),
15156|                'has_project'             => $row->isHasProject(),
15157|                'project_id'              => $projectId,
15158|                'project_url'             => $projectUrl,
15159|                'project_name'            => $linkedProject ? ($projectNamesById[(int) $projectId] ?? ('Projeto #' . $projectId)) : '',
15160|                'project_start_date'      => $row->getProjectStartDate()?->format('Y-m-d') ?? '',
15161|                'project_priority'        => $row->getProjectPriority() ?? '',
15162|                'control_hierarchy'       => $row->getControlHierarchy() ?? '',
15163|                'created_at'              => $row->getCreatedAt()->format('Y-m-d'),
15164|                'updated_at'              => $row->getUpdatedAt()->format('Y-m-d'),
15165|                'actions_taken_completed' => $taskCounters['completed'],
15166|                'actions_taken_total'     => $taskCounters['total'],
15167|                'validation_status'       => $row->getValidationStatus() ?? '',
15168|                'validator_member_id'     => $row->getValidatorMemberId(),
15169|                'closing_evidence'        => $row->getClosingEvidence() ?? '',
15170|                'resolution_rating'       => $row->getResolutionRating() ?? '',
15171|                'resolution_note'         => $this->extractLastSsmaActionResolutionNote($row->getDescription()),
15172|                'cc_demand_id'            => $row->getCcDemandId(),
15173|                'rejection_note'          => $row->getRejectionNote() ?? '',
15174|            ], $this->resolveActionDeadlineEditMeta($row, $company, $user));
15175|        }
15176|
15177|        return $result;
15178|    }
15179|
15180|    /**
15181|     * @param list<array<string, mixed>> $allMembers
15182|     * @param list<array<string, mixed>> $teams
15183|     *
15184|     * @return list<array<string, mixed>>
15185|     */
15186|    private function loadOccurrences(
15187|        Company $company,
15188|        array $allMembers,
15189|        array $teams,
15190|        ?int $limit = null,
15191|        int $offset = 0,
15192|        array $types = [],
15193|        array $teamIdsFilter = [],
15194|        array $memberIdsFilter = []
15195|    ): array {
15196|        $membersById = array_column($allMembers, null, 'id');
15197|        $teamsById   = array_column($teams, null, 'id');
15198|
15199|        // Carga completa (filtros de equipe/membro depois): mantém findBy por company.
15200|        if ($limit === null) {
15201|            /** @var SsmaOccurrence[] $rows */
15202|            $rows = $this->entityManager->getRepository(SsmaOccurrence::class)
15203|                ->findBy(['company' => $company], ['createdAt' => 'DESC']);
15204|
15205|            $result = [];
15206|            foreach ($rows as $row) {
15207|                $result[] = $this->mapSsmaOccurrenceEntityToListRow($row, $teamsById);
15208|            }
15209|
15210|            /** @var SsmaEvent[] $events */
15211|            $events = $this->entityManager->getRepository(SsmaEvent::class)
15212|                ->findBy(['company' => $company], ['eventDatetime' => 'DESC']);
15213|            foreach ($events as $event) {
15214|                $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15215|            }
15216|
15217|            usort($result, static function (array $a, array $b): int {
15218|                return strcmp($b['date'] ?? '', $a['date'] ?? '');
15219|            });
15220|
15221|            foreach ($result as $idx => $row) {
15222|                $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
15223|            }
15224|
15225|            return $result;
15226|        }
15227|
15228|        // Página (visão completa sem pós-filtro): UNION + hydrate só dos IDs da página.
15229|        $companyId = (int) $company->getId();
15230|        $conn = $this->entityManager->getConnection();
15231|        $safeLimit = max(0, (int) $limit);
15232|        $safeOffset = max(0, (int) $offset);
15233|
15234|        // Filtro opcional por tipo de ocorrência (técnico especialista).
15235|        $typeClause = '';
15236|        $typeParams = [];
15237|        if ($types !== []) {
15238|            $placeholders = implode(',', array_fill(0, count($types), '?'));
15239|            $typeClause   = ' AND type IN (' . $placeholders . ')';
15240|            $typeParams   = array_values($types);
15241|        }
15242|
15243|        // Filtro SQL de equipe/membro (supervisor com escopo de equipe).
15244|        // ssma_occurrences: team_id e manager_id; ssma_events: unit_id (coluna direta do time).
15245|        $teamClauseOcc = '';
15246|        $teamClauseEvt = '';
15247|        $teamParamsOcc = [];
15248|        $teamParamsEvt = [];
15249|        if ($teamIdsFilter !== [] || $memberIdsFilter !== []) {
15250|            $occClauses = [];
15251|            $evtClauses = [];
15252|            if ($teamIdsFilter !== []) {
15253|                $phTeam        = implode(',', array_fill(0, count($teamIdsFilter), '?'));
15254|                $occClauses[]  = 'team_id IN (' . $phTeam . ')';
15255|                $evtClauses[]  = 'unit_id IN (' . $phTeam . ')';
15256|                foreach ($teamIdsFilter as $tid) {
15257|                    $teamParamsOcc[] = (int) $tid;
15258|                    $teamParamsEvt[] = (int) $tid;
15259|                }
15260|            }
15261|            if ($memberIdsFilter !== []) {
15262|                $phMem        = implode(',', array_fill(0, count($memberIdsFilter), '?'));
15263|                $occClauses[] = 'manager_id IN (' . $phMem . ')';
15264|                foreach ($memberIdsFilter as $mid) {
15265|                    $teamParamsOcc[] = (int) $mid;
15266|                }
15267|            }
15268|            if ($occClauses !== []) {
15269|                $teamClauseOcc = ' AND (' . implode(' OR ', $occClauses) . ')';
15270|            }
15271|            if ($evtClauses !== []) {
15272|                $teamClauseEvt = ' AND (' . implode(' OR ', $evtClauses) . ')';
15273|            }
15274|        }
15275|
15276|        $keys = $conn->fetchAllAssociative(
15277|            'SELECT id, kind, sort_date FROM (
15278|                    SELECT id, \'o\' AS kind, created_at AS sort_date
15279|                      FROM ssma_occurrences
15280|                     WHERE company_id = ?' . $typeClause . $teamClauseOcc . '
15281|                    UNION ALL
15282|                    SELECT id, \'e\' AS kind, event_datetime AS sort_date
15283|                      FROM ssma_events
15284|                     WHERE company_id = ?' . $typeClause . $teamClauseEvt . '
15285|                ) u
15286|                ORDER BY sort_date DESC
15287|                LIMIT ' . $safeLimit . ' OFFSET ' . $safeOffset,
15288|            array_merge([$companyId], $typeParams, $teamParamsOcc, [$companyId], $typeParams, $teamParamsEvt)
15289|        );
15290|        if ($keys === []) {
15291|            return [];
15292|        }
15293|
15294|        $occIds = [];
15295|        $evtIds = [];
15296|        foreach ($keys as $key) {
15297|            $id = (int) ($key['id'] ?? 0);
15298|            if ($id <= 0) {
15299|                continue;
15300|            }
15301|            if (($key['kind'] ?? '') === 'e') {
15302|                $evtIds[] = $id;
15303|            } else {
15304|                $occIds[] = $id;
15305|            }
15306|        }
15307|
15308|        $occById = [];
15309|        if ($occIds !== []) {
15310|            /** @var SsmaOccurrence[] $occRows */
15311|            $occRows = $this->entityManager->getRepository(SsmaOccurrence::class)->findBy(['id' => $occIds]);
15312|            foreach ($occRows as $row) {
15313|                $occById[(int) $row->getId()] = $this->mapSsmaOccurrenceEntityToListRow($row, $teamsById);
15314|            }
15315|        }
15316|
15317|        $evtById = [];
15318|        if ($evtIds !== []) {
15319|            /** @var SsmaEvent[] $evtRows */
15320|            $evtRows = $this->entityManager->getRepository(SsmaEvent::class)->findBy(['id' => $evtIds]);
15321|            foreach ($evtRows as $event) {
15322|                $evtById[(int) $event->getId()] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15323|            }
15324|        }
15325|
15326|        $result = [];
15327|        foreach ($keys as $key) {
15328|            $id = (int) ($key['id'] ?? 0);
15329|            if (($key['kind'] ?? '') === 'e') {
15330|                if (isset($evtById[$id])) {
15331|                    $result[] = $evtById[$id];
15332|                }
15333|                continue;
15334|            }
15335|            if (isset($occById[$id])) {
15336|                $result[] = $occById[$id];
15337|            }
15338|        }
15339|
15340|        foreach ($result as $idx => $row) {
15341|            $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
15342|        }
15343|
15344|        return $result;
15345|    }
15346|
15347|    private function countCompanyOccurrencesAndEvents(Company $company): int
15348|    {
15349|        $companyId = (int) $company->getId();
15350|        $conn = $this->entityManager->getConnection();
15351|        $occ = (int) $conn->fetchOne(
15352|            'SELECT COUNT(*) FROM ssma_occurrences WHERE company_id = ?',
15353|            [$companyId]
15354|        );
15355|        $evt = (int) $conn->fetchOne(
15356|            'SELECT COUNT(*) FROM ssma_events WHERE company_id = ?',
15357|            [$companyId]
15358|        );
15359|
15360|        return $occ + $evt;

{"search_text": "ROLE_MANAGER_GESTOR", "file_patterns": ["config/*", "*.yaml", "*.yml"]}

File: config/packages/security.yaml
Match lines: 61
57|        - { path: ^/user/show, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
60|        - { path: ^/training, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
61|        - { path: ^/notifications-center, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
62|        - { path: ^/manager/communication-center, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
63|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER], methods: [POST, PUT, PATCH, DELETE] }
64|        - { path: ^/manager/ssma, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN, ROLE_MANAGER_VIEWER, ROLE_USER] }
78|        - { path: ^/manager/process$, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
79|        - { path: ^/spaces-control, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
80|        - { path: ^/manager/hub-in-progress, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
81|        - { path: ^/user/specialist/management_data, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
82|        - { path: ^/management/update-receipt, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
83|        - { path: ^/management/update-recipts, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
84|        - { path: ^/user/specialist/disable, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
85|        - { path: ^/user/specialist/reactivate, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
86|        - { path: ^/user/specialist/(pause|resume), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
87|        - { path: ^/user/specialist/(block|unblock), roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
89|        - { path: ^/employee-advocacy, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
90|        - { path: ^/manager/chavesdeacesso, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_SUPER_ADMIN] }
91|        - { path: ^/onboarding/\d+/onboarding-\d+, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
93|        - { path: ^/dei_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
97|        - { path: ^/manager/governance, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
99|        - { path: ^/manager/home, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
101|        - { path: ^/manager/participantes, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
102|        - { path: ^/manager/company/invoice, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
103|        - { path: ^/manager/processos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
104|        - { path: ^/manager/user/data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_REVIEWER] }
105|        - { path: ^/manager/user/show, roles: [ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
106|        - { path: ^/manager/process/dashboard/old, roles: [ROLE_SUPER_ADMIN, ROLE_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
107|        - { path: ^/manager/process/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER] }
108|        - { path: ^/manager/professional-assessment/dashboard, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
111|        - { path: ^/manager/department, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
112|        - { path: ^/manager/organizational-structure, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER] }
114|        - { path: ^/manager/users, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
117|        - { path: ^/manager/benefit, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
118|        - { path: ^/manager/skill, roles: [ROLE_SUPER_ADMIN, ROLE_MANAGER, ROLE_MANAGER_GESTOR] }
136|        - { path: ^/manager/training-module/get-data, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
137|        - { path: ^/manager/empresas-parceiras, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
138|        - { path: ^/manager, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER] }
142|        - { path: ^/my-company, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER, ROLE_SUPER_ADMIN] }
143|        - { path: ^/crm, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER] }
145|        # - { path: ^/my-company/list-members-by-teams/, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
146|        - { path: ^/subsidiary-companies, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
149|        - { path: ^/calendar-member, roles: [ROLE_SURVEY, ROLE_USER, ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_MANAGER_VIEWER, ROLE_SUPER_ADMIN] }
157|        - { path: ^/muralQuestionario, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
158|        - { path: ^/teste/chat, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
159|        - { path: ^/account, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
160|        - { path: ^/offboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
161|        - { path: ^/onboarding, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
162|        - { path: ^/cultural-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
165|        - { path: ^/time-management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
166|        - { path: ^/welfare-hub, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
167|        - { path: ^/specialists, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
168|        - { path: ^/cognitive_assessment, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
169|        - { path: ^/templates, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
170|        - { path: ^/gestao-documentos, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
171|        - { path: ^/job, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
172|        - { path: ^/process, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
175|        - { path: ^/sst, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }
180|        - { path: '^/manager/process/\d+(/stage/\d+)?/candidates', roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
181|        - { path: ^/manager/live-interview, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_REVIEWER, ROLE_USER] }
182|        - { path: ^/interview/management, roles: [ROLE_MANAGER, ROLE_MANAGER_GESTOR, ROLE_USER, ROLE_SUPER_ADMIN] }

{"search_text": "role_hierarchy"}

File: .claude/agents/especialistas/symfony/security_specialist.md
Match lines: 2
612|    role_hierarchy:
783|    role_hierarchy:

File: agents/especialistas/symfony/security_specialist.md
Match lines: 2
612|    role_hierarchy:
783|    role_hierarchy:

File: config/packages/security.yaml
Match lines: 2
13|    role_hierarchy:
20|    #role_hierarchy:

{"file_path": "config/packages/security.yaml", "start_line": 1, "end_line": 56}

File: config/packages/security.yaml (Total lines: 185)
IS_TRUNCATED: false
LINE_RANGE: 1-56
1|security:
2|    # Guard authenticators only — avoid GuardBridgeAuthenticator deprecation (Symfony 5.3+)
3|    enable_authenticator_manager: true
4|    password_hashers:
5|        App\Entity\User:
6|            algorithm: auto
7|
8|    # https://symfony.com/doc/current/security.html#where-do-users-come-from-user-providers
9|    providers:
10|        # used to reload user from session & other features (e.g. switch_user)
11|        app_user_provider:
12|            id: App\Repository\UserRepository
13|    role_hierarchy:
14|        ROLE_SUPER_ADMIN: [ROLE_MANAGER]
15|        ROLE_MANAGER: [ROLE_ALLOWED_TO_SWITCH, ROLE_MANAGER_COMPANY, ROLE_MANAGER_TEAM, ROLE_MANAGER_PDI]
16|        ROLE_GERENTE_CONTA: [ROLE_USER]
17|        ROLE_DIRETOR_COMERCIAL: [ROLE_USER]
18|        ROLE_CS_ALERTAS: [ROLE_USER]
19|        ROLE_FINANCIAL_ALERT: [ROLE_USER]
20|    #role_hierarchy:
21|    #    ROLE_SUPER_ADMIN:       ROLE_ADMIN
22|    #    ROLE_ADMIN:            ROLE_MANAGER
23|    #    ROLE_COMPANY_ADMIN:    ROLE_COMPANY_MANAGER
24|    #    ROLE_COMPANY_MANAGER:  ROLE_USER
25|    #    ROLE_USER:             ~
26|    firewalls:
27|        dev:
28|            pattern: ^/(_(profiler|wdt)|css|images|js)/
29|            security: false
30|        main:
31|            switch_user: { role: ROLE_MANAGER }
32|            # Necessário com enable_authenticator_manager: false (Guard)
33|            provider: app_user_provider
34|            guard:
35|                authenticators:
36|                    - App\Security\LoginFormAuthenticator
37|            logout:
38|                path: app_logout
39|            # Lembrar-me: o formulário envia _remember_me; sem isto o cookie não era gravado.
40|            remember_me:
41|                secret: '%kernel.secret%'
42|                lifetime: 604800
43|                path: /
44|                name: REMEMBERME
45|                secure: auto
46|                httponly: true
47|                samesite: lax
48|            # activate different ways to authenticate
49|            # https://symfony.com/doc/current/security.html#firewalls-authentication
50|
51|            # https://symfony.com/doc/current/security/impersonating_user.html
52|            # switch_user: true
53|
54|    # Easy way to control access for large sections of your site
55|    # Note: Only the *first* access control that matches will be used
56|    access_control:

{"file_path": "src/Controller/SsmaController.php", "start_line": 13420, "end_line": 13530}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 13420-13530
13420|                }
13421|            } else {
13422|                // Membro não encontrado: oculta ambas as abas por segurança.
13423|                $ssmaPreventionInspectionEnabled = false;
13424|                $ssmaPreventionAbordagemEnabled  = false;
13425|            }
13426|        }
13427|
13428|        if ($company instanceof Company
13429|            && !$this->isGranted('ROLE_SUPER_ADMIN')
13430|            && !$this->isGranted('ROLE_MANAGER')
13431|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
13432|            && !$this->ssmaPreventionHubAccessService->companyHasPreventionMetasBootstrap($company)) {
13433|            $ssmaPreventionInspectionEnabled = false;
13434|            $ssmaPreventionAbordagemEnabled = false;
13435|            $ssmaCanAccessPreventionPanelAndMetas = false;
13436|        }
13437|
13438|        // Colaborador com meta, supervisor ou perfil equivalente: registrar o próprio conteúdo.
13439|        // Gestor cria para outros; supervisor/membro só o próprio (ssmaPreventionMutateOwnOnly).
13440|        // Inclui Supervisor/Gestor de Área via canMutatePreventionContentForCurrentUser.
13441|        if ($company && $user instanceof User) {
13442|            $canMutateOwnInspection = $ssmaPreventionInspectionEnabled
13443|                && $this->canMutatePreventionContentForCurrentUser($company, $user, 'inspecao');
13444|            $canMutateOwnAbordagem = $ssmaPreventionAbordagemEnabled
13445|                && $this->canMutatePreventionContentForCurrentUser($company, $user, 'abordagem');
13446|
13447|            if ($canMutateOwnInspection || $canMutateOwnAbordagem) {
13448|                $ssmaCanCreatePreventionItems = true;
13449|                $ssmaCanEditPreventionContent = true;
13450|            }
13451|        }
13452|
13453|        if ($company && $user instanceof User
13454|            && $ssmaCanEditPreventionContent
13455|            && !$this->canManageAllPreventionContentForCurrentUser($company, $user)
13456|        ) {
13457|            $ssmaPreventionMutateOwnOnly = true;
13458|        }
13459|
13460|        $loggedPreventionMemberId = ($company && $user instanceof User)
13461|            ? (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0)
13462|            : 0;
13463|        $loggedPreventionUserId = $user instanceof User ? (int) $user->getId() : 0;
13464|        if ($ssmaCanEditPreventionContent) {
13465|            foreach ($inspections as $inspIdx => $inspRow) {
13466|                if (!is_array($inspRow)) {
13467|                    continue;
13468|                }
13469|                $inspections[$inspIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
13470|                    || $this->preventionArrayOwnedByMember($inspRow, $loggedPreventionMemberId, $loggedPreventionUserId);
13471|            }
13472|            foreach ($abordagens as $abIdx => $abRow) {
13473|                if (!is_array($abRow)) {
13474|                    continue;
13475|                }
13476|                $abordagens[$abIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
13477|                    || $this->preventionArrayOwnedByMember($abRow, $loggedPreventionMemberId, $loggedPreventionUserId);
13478|            }
13479|        }
13480|
13481|        if (!$this->canManageSsmaOccurrences()
13482|            && !$ssmaIsTagTeamSupervisor
13483|            && !$ssmaIsTagAreaSupervisor
13484|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
13485|            && !$this->memberIsSsmaGestorAdministrador($company && $user instanceof User ? $this->getCurrentCompanyMember($company, $user) : null)
13486|            && $occurrenceTeamFilterIds === null
13487|            && $occurrenceAreaFilterIds === null
13488|            && !$isTechSpecialistOnly) {
13489|            $currentMember = $this->getCurrentCompanyMember($company, $user);
13490|            $currentMemberId = $currentMember?->getId() ?? 0;
13491|
13492|            $occurrences = $this->filterOccurrencesForMember($occurrences, $currentMemberId, $company);
13493|            if ($company instanceof Company && $user instanceof User && $currentMemberId > 0) {
13494|                $occurrences = $this->appendMissingActionLinkedOccurrences(
13495|                    $occurrences,
13496|                    $currentMemberId,
13497|                    $company,
13498|                    $user
13499|                );
13500|                $occurrences = $this->appendOccurrencesCreatedByCurrentUser($occurrences, $company, $user);
13501|            }
13502|            $actionsTaken = $this->filterActionsForMember($actionsTaken, $occurrences, $currentMemberId);
13503|        } elseif ($company instanceof Company && $user instanceof User
13504|            && ($occurrenceTeamFilterIds !== null || $occurrenceAreaFilterIds !== null)
13505|        ) {
13506|            $occurrences = $this->appendOccurrencesCreatedByCurrentUser($occurrences, $company, $user);
13507|        }
13508|
13509|        // Membro/Inspetor (pessoa física): na Prevenção Ativa só vê inspeções/abordagens em que está relacionado.
13510|        // O filtro por equipe nas ocorrências não deve listar inspeções da equipe inteira para esses perfis.
13511|        // Aura/tenant/SUPER_ADMIN com tag Membro herdada NÃO entram aqui — senão o admin vê
13512|        // só o próprio conteúdo (ex.: 2 inspeções) enquanto o Gestor de Área vê o recorte da gerência (3).
13513|        if ($company && $user instanceof User && $ssmaIsPlainPreventionMember) {
13514|            $plainMemberId = (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0);
13515|            $plainUserId = (int) $user->getId();
13516|            $inspections = array_values(array_filter(
13517|                $inspections,
13518|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
13519|            ));
13520|            $abordagens = array_values(array_filter(
13521|                $abordagens,
13522|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
13523|            ));
13524|        }
13525|
13526|        if ($needsPreventionCollections) {
13527|            [$metaFromStr, $metaToStr] = $this->getPrevencaoPeriodDateBounds($metasPeriod);
13528|            [$inspectionsForMetas, $abordagensForMetas] = $this->filterCollectionsForMetasRealizado(
13529|                $inspections,
13530|                $abordagens,

{"file_path": "src/Service/Ssma/SsmaAreaLimitationScope.php"}

File: src/Service/Ssma/SsmaAreaLimitationScope.php (Total lines: 167)
IS_TRUNCATED: false
LINE_RANGE: 1-167
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|/**
8| * Escopo de limitação por área organizacional no SSMA.
9| *
10| * Quem tem area_limitation vê a própria área e todas as subáreas (qualquer profundidade).
11| * Nunca vê a área pai nem irmãs fora da subárvore.
12| */
13|final class SsmaAreaLimitationScope
14|{
15|    public const TAG_SUPERVISOR_AREA = 'Supervisor de Área';
16|    public const TAG_GESTOR_AREA = 'Gestor de Área';
17|
18|    /**
19|     * @return list<string>
20|     */
21|    public static function namedAreaScopeTags(): array
22|    {
23|        return [self::TAG_SUPERVISOR_AREA, self::TAG_GESTOR_AREA];
24|    }
25|
26|    public static function shouldApplyAreaLimitation(
27|        ?string $tagName,
28|        ?bool $areaLimitation,
29|        bool $isPlatformAdmin,
30|    ): bool {
31|        if ($isPlatformAdmin) {
32|            return false;
33|        }
34|
35|        // Supervisor (empresa) e Gestor Administrador operam sem recorte de área.
36|        if (in_array($tagName, ['Gestor Administrador', 'Supervisor'], true)) {
37|            return false;
38|        }
39|
40|        if (in_array($tagName, self::namedAreaScopeTags(), true)) {
41|            return true;
42|        }
43|
44|        return (bool) $areaLimitation;
45|    }
46|
47|    /**
48|     * Inclui as áreas raiz e todos os descendentes. Não sobe para pais.
49|     *
50|     * @param array<int, int|null> $parentByAreaId id da área => id do pai (null se raiz)
51|     * @param list<int> $rootAreaIds
52|     *
53|     * @return list<int>
54|     */
55|    public static function expandWithDescendants(array $parentByAreaId, array $rootAreaIds): array
56|    {
57|        $childrenByParent = [];
58|        foreach ($parentByAreaId as $areaId => $parentId) {
59|            $areaId = (int) $areaId;
60|            if ($areaId <= 0) {
61|                continue;
62|            }
63|            $parentId = $parentId !== null ? (int) $parentId : 0;
64|            if ($parentId > 0) {
65|                $childrenByParent[$parentId][] = $areaId;
66|            }
67|        }
68|
69|        $allowed = [];
70|        $queue = [];
71|        foreach ($rootAreaIds as $rootId) {
72|            $rootId = (int) $rootId;
73|            if ($rootId > 0) {
74|                $queue[] = $rootId;
75|            }
76|        }
77|
78|        while ($queue !== []) {
79|            $id = array_shift($queue);
80|            if (isset($allowed[$id])) {
81|                continue;
82|            }
83|            $allowed[$id] = true;
84|            foreach ($childrenByParent[$id] ?? [] as $childId) {
85|                $queue[] = $childId;
86|            }
87|        }
88|
89|        return array_keys($allowed);
90|    }
91|
92|    /**
93|     * Inspeção entra no recorte de área se a equipe está no recorte.
94|     *
95|     * Quando a equipe tem área conhecida fora do recorte, o registro fica escondido mesmo que
96|     * uma pessoa da área participe — é isso que preserva a interseção com a limitação de equipe.
97|     * O fallback por pessoa vale só quando a equipe não informa área: sem equipe, ou equipe
98|     * listada em `$teamIdsWithoutArea` (sem `process_department`).
99|     *
100|     * @param list<array<string, mixed>> $inspections
101|     * @param list<int> $allowedTeamIds
102|     * @param array<int, true> $allowedMemberIds
103|     * @param list<int> $teamIdsWithoutArea
104|     *
105|     * @return list<array<string, mixed>>
106|     */
107|    public static function filterInspectionsForAreaScope(
108|        array $inspections,
109|        array $allowedTeamIds,
110|        array $allowedMemberIds,
111|        array $teamIdsWithoutArea,
112|    ): array {
113|        $teamIdStr = array_map('strval', $allowedTeamIds);
114|        $withoutAreaStr = array_map('strval', $teamIdsWithoutArea);
115|
116|        return array_values(array_filter(
117|            $inspections,
118|            static function (array $inspection) use ($teamIdStr, $allowedMemberIds, $withoutAreaStr): bool {
119|                $teamId = $inspection['team_id'] ?? null;
120|                $hasTeam = $teamId !== null && $teamId !== '';
121|                if ($hasTeam && in_array((string) $teamId, $teamIdStr, true)) {
122|                    return true;
123|                }
124|                if ($hasTeam && !in_array((string) $teamId, $withoutAreaStr, true)) {
125|                    return false;
126|                }
127|
128|                foreach ([
129|                    (int) ($inspection['created_by_id'] ?? 0),
130|                    (int) ($inspection['safety_responsible_id'] ?? 0),
131|                ] as $memberId) {
132|                    if ($memberId > 0 && isset($allowedMemberIds[$memberId])) {
133|                        return true;
134|                    }
135|                }
136|
137|                foreach ((array) ($inspection['participants_ids'] ?? []) as $participantId) {
138|                    if (isset($allowedMemberIds[(int) $participantId])) {
139|                        return true;
140|                    }
141|                }
142|
143|                return false;
144|            }
145|        ));
146|    }
147|
148|    /**
149|     * @param list<array<string, mixed>> $abordagens
150|     * @param array<int, true> $allowedMemberIds
151|     *
152|     * @return list<array<string, mixed>>
153|     */
154|    public static function filterAbordagensByMemberIds(array $abordagens, array $allowedMemberIds): array
155|    {
156|        return array_values(array_filter(
157|            $abordagens,
158|            static function (array $abordagem) use ($allowedMemberIds): bool {
159|                $observadorId = (int) ($abordagem['observador_id'] ?? 0);
160|
161|                return $observadorId > 0 && isset($allowedMemberIds[$observadorId]);
162|            }
163|        ));
164|    }
165|
166|}
167|

{"search_text": "class SsmaPreventionAreaAuthorization"}

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php
Match lines: 1
24|class SsmaPreventionAreaAuthorizationService

{"file_path": "src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php", "start_line": 24, "end_line": 200}

File: src/Service/Ssma/SsmaPreventionAreaAuthorizationService.php (Total lines: 456)
IS_TRUNCATED: false
LINE_RANGE: 24-200
24|class SsmaPreventionAreaAuthorizationService
25|{
26|    public function __construct(private EntityManagerInterface $entityManager)
27|    {
28|    }
29|
30|    public function resolveScope(
31|        Company $company,
32|        ?CompanyMembers $member,
33|        ?PermissionTag $tag,
34|        bool $isPlatformAdmin,
35|    ): SsmaPreventionAreaScope {
36|        if ($isPlatformAdmin || !$member instanceof CompanyMembers) {
37|            return SsmaPreventionAreaScope::unrestricted();
38|        }
39|
40|        if (!SsmaAreaLimitationScope::shouldApplyAreaLimitation(
41|            $tag?->getName(),
42|            ($tag !== null && method_exists($tag, 'getAreaLimitation')) ? $tag->getAreaLimitation() : null,
43|            $isPlatformAdmin
44|        )) {
45|            return SsmaPreventionAreaScope::unrestricted();
46|        }
47|
48|        $areaIds = SsmaAreaLimitationScope::expandWithDescendants(
49|            $this->loadAreaParentMap($company),
50|            $this->memberAreaIds($member)
51|        );
52|
53|        [$teamIds, $teamIdsWithoutArea] = $this->splitCompanyTeamsByArea($company, $areaIds);
54|        $memberIds = $this->collectMemberIdsInScope($company, $areaIds, $teamIds);
55|
56|        // O próprio membro sempre se enxerga, mesmo sem área cadastrada.
57|        $selfId = (int) ($member->getId() ?? 0);
58|        if ($selfId > 0) {
59|            $memberIds[] = $selfId;
60|        }
61|
62|        return SsmaPreventionAreaScope::restricted(
63|            $areaIds,
64|            array_values(array_unique($memberIds)),
65|            $teamIds,
66|            $teamIdsWithoutArea
67|        );
68|    }
69|
70|    /**
71|     * Áreas vinculadas ao membro; sem vínculo, cai para o departamento do cadastro.
72|     *
73|     * @return list<int>
74|     */
75|    public function memberAreaIds(CompanyMembers $member): array
76|    {
77|        $ids = [];
78|        foreach ($member->getMemberAreas() as $memberArea) {
79|            if (!$memberArea instanceof CompanyMemberArea) {
80|                continue;
81|            }
82|            $areaId = (int) ($memberArea->getCompanyArea()?->getId() ?? 0);
83|            if ($areaId > 0) {
84|                $ids[$areaId] = $areaId;
85|            }
86|        }
87|
88|        if ($ids === []) {
89|            $departmentId = (int) ($member->getDepartment()?->getId() ?? 0);
90|            if ($departmentId > 0) {
91|                $ids[$departmentId] = $departmentId;
92|            }
93|        }
94|
95|        return array_values($ids);
96|    }
97|
98|    // ─── Leitura ─────────────────────────────────────────────────────────────────────────────
99|
100|    public function canViewInspection(SsmaPreventionAreaScope $scope, SsmaInspection $inspection): bool
101|    {
102|        if (!$scope->isRestricted()) {
103|            return true;
104|        }
105|
106|        $teamId = (int) ($inspection->getTeam()?->getId() ?? 0);
107|        if ($scope->allowsTeam($teamId)) {
108|            return true;
109|        }
110|
111|        // Equipe com área conhecida fora do recorte esconde o registro: pessoa no recorte
112|        // não pode reabrir o que a interseção equipe ∩ área já negou.
113|        if ($scope->teamIsOutsideArea($teamId)) {
114|            return false;
115|        }
116|
117|        foreach ($this->inspectionRelatedMemberIds($inspection) as $memberId) {
118|            if ($scope->allowsMember($memberId)) {
119|                return true;
120|            }
121|        }
122|
123|        return false;
124|    }
125|
126|    public function canViewAbordagem(SsmaPreventionAreaScope $scope, SsmaAbordagem $abordagem): bool
127|    {
128|        if (!$scope->isRestricted()) {
129|            return true;
130|        }
131|
132|        // Mesmo critério da listagem ({@see SsmaAreaLimitationScope::filterAbordagensByMemberIds}):
133|        // é o observador que ancora a abordagem na área.
134|        return $scope->allowsMember((int) ($abordagem->getObservadorId() ?? 0));
135|    }
136|
137|    /**
138|     * @return list<int>
139|     */
140|    private function inspectionRelatedMemberIds(SsmaInspection $inspection): array
141|    {
142|        $ids = [
143|            (int) ($inspection->getCreatorMeta()['created_by_id'] ?? 0),
144|            (int) ($inspection->getSafetyResponsible()?->getId() ?? 0),
145|        ];
146|
147|        foreach ($inspection->getParticipantsIds() as $participantId) {
148|            $ids[] = (int) $participantId;
149|        }
150|        foreach ($inspection->getCompanionIds() as $companionId) {
151|            $ids[] = (int) $companionId;
152|        }
153|
154|        return array_values(array_filter($ids, static fn (int $id): bool => $id > 0));
155|    }
156|
157|    // ─── Gravação ────────────────────────────────────────────────────────────────────────────
158|
159|    /**
160|     * area_limitation: equipe é opcional — o recorte segue as pessoas da gerência.
161|     * Equipe de outra área só é recusada quando permanece no payload (interseção com
162|     * team_limitation). Sem equipe, ou equipe sem área cadastrada, a gravação segue as pessoas.
163|     *
164|     * @param array<string, mixed> $data payload cru de {@see SsmaController::createInspection}
165|     */
166|    public function validateInspectionPayload(
167|        SsmaPreventionAreaScope $scope,
168|        Company $company,
169|        array $data,
170|        ?int $resolvedTeamId,
171|    ): ?string {
172|        if (!$scope->isRestricted()) {
173|            return null;
174|        }
175|
176|        $teamError = $this->validateTeamId($scope, $company, $resolvedTeamId);
177|        if ($teamError !== null) {
178|            return $teamError;
179|        }
180|
181|        $memberIds = [];
182|        if (!empty($data['safety_responsible_id'])) {
183|            $memberIds[] = (int) $data['safety_responsible_id'];
184|        }
185|        foreach ((array) ($data['participants_ids'] ?? []) as $participantId) {
186|            $memberIds[] = (int) $participantId;
187|        }
188|        foreach ((array) ($data['companion_ids'] ?? []) as $companionId) {
189|            $memberIds[] = (int) $companionId;
190|        }
191|        foreach ((array) ($data['deviations'] ?? []) as $deviation) {
192|            if (!is_array($deviation)) {
193|                continue;
194|            }
195|            if (!empty($deviation['responsible_id'])) {
196|                $memberIds[] = (int) $deviation['responsible_id'];
197|            }
198|        }
199|
200|        return $this->validateMemberIds($scope, $company, $memberIds);

{"search_text": "validateSsmaEventPayloadAgainstArea|AreaScope.*Event|event.*AreaScope"}

No matches found

{"search_text": "function normalizeSsmaEventManagerInDetails"}

File: src/Controller/SsmaController.php
Match lines: 1
28572|    private function normalizeSsmaEventManagerInDetails(array $data, Company $company): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 28540, "end_line": 28618}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 28540-28618
28540|        $can = $member instanceof CompanyMembers
28541|            && $type !== ''
28542|            && $this->ssmaOccurrenceTypeConfig->memberCanDescharacterizeForType(
28543|                $company,
28544|                (int) $member->getId(),
28545|                $type
28546|            );
28547|        if ($can) {
28548|            return $data;
28549|        }
28550|
28551|        $details = isset($data['details']) && is_array($data['details']) ? $data['details'] : [];
28552|        foreach (['descaracterizado', 'descaracter_comment'] as $key) {
28553|            if ($existingDetails !== null && array_key_exists($key, $existingDetails)) {
28554|                $details[$key] = $existingDetails[$key];
28555|            } else {
28556|                unset($details[$key]);
28557|            }
28558|            unset($data[$key]);
28559|        }
28560|        $data['details'] = $details;
28561|
28562|        return $data;
28563|    }
28564|
28565|    /**
28566|     * Resolve manager_id a partir de manager_name quando o front/LLM só enviou o nome.
28567|     *
28568|     * @param array<string, mixed> $data
28569|     *
28570|     * @return array<string, mixed>
28571|     */
28572|    private function normalizeSsmaEventManagerInDetails(array $data, Company $company): array
28573|    {
28574|        $details = $data['details'] ?? [];
28575|        if (!is_array($details)) {
28576|            return $data;
28577|        }
28578|
28579|        $rawId = $details['manager_id'] ?? null;
28580|        if ($rawId !== null && $rawId !== '') {
28581|            $details['manager_id'] = (int) $rawId;
28582|            $data['details'] = $details;
28583|
28584|            return $data;
28585|        }
28586|
28587|        $name = trim((string) ($details['manager_name'] ?? ''));
28588|        if ($name === '') {
28589|            return $data;
28590|        }
28591|
28592|        $membersById = [];
28593|        $members = $this->entityManager->getRepository(CompanyMembers::class)
28594|            ->findBy(['company' => $company, 'isRemoved' => 0]);
28595|        foreach ($members as $cm) {
28596|            if (!$cm instanceof CompanyMembers) {
28597|                continue;
28598|            }
28599|            $memberId = (int) $cm->getId();
28600|            if ($memberId <= 0) {
28601|                continue;
28602|            }
28603|            $label = $this->ssmaMemberDisplayLabel($cm);
28604|            if ($label === '') {
28605|                $label = (string) ($cm->getEmail() ?? '');
28606|            }
28607|            if ($label !== '') {
28608|                $membersById[$memberId] = ['name' => $label];
28609|            }
28610|        }
28611|
28612|        $resolvedId = $this->resolveCompanyMemberIdByDisplayLabel($name, $membersById);
28613|        if ($resolvedId > 0) {
28614|            $details['manager_id'] = $resolvedId;
28615|            $data['details'] = $details;
28616|        }
28617|
28618|        return $data;

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 200, "end_line": 280}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 200-280
200|           BLOCO 2 — Contexto do evento
201|        ══════════════════════════════════════════ #}
202|        <h5 class="ssma-form-section text-primary">Contexto do evento</h5>
203|
204|        <div class="form-row ev-meta-fields-row align-items-start">
205|            <div class="col-12 col-md-6">
206|                <div class="form-group mb-0">
207|                    <label class="ev-meta-field-label" for="ev_datetime">Data e horário do evento <span class="text-danger">*</span></label>
208|                    <input type="datetime-local" class="form-control" id="ev_datetime" name="ev_datetime" required>
209|                    <small class="ev-meta-field-hint-spacer" aria-hidden="true"></small>
210|                </div>
211|            </div>
212|            <div class="col-12 col-md-6 ev-location-stack-col">
213|                <div class="form-group mb-0">
214|                    <label class="ev-meta-field-label" for="ev_location">Local do evento <span class="text-danger">*</span></label>
215|                    <select class="form-control" id="ev_location" name="ev_location" required>
216|                        <option value="" selected>Selecione o Local</option>
217|                    </select>
218|                    {% include 'ssma/partials/_ssma_location_hint.html.twig' with {
219|                        empty_hint_id: 'ev_location_hint',
220|                        manage_hint_id: 'ev_location_manage_hint',
221|                        spaces_link_id: 'ev_location_spaces_link'
222|                    } %}
223|                </div>
224|                <div id="ev-gmr-slot-under-local" class="ev-gmr-context-slot">
225|                    <div class="form-group mb-0" id="ev-gmr-wrap">
226|                        <label class="ev-meta-field-label" for="ev_gmr" title="Gestão de maior risco">GMR</label>
227|                        <select class="form-control" id="ev_gmr" name="ev_gmr">
228|                            <option value="">Selecione o GMR</option>
229|                            {% include 'ssma/partials/_ssma_gmr_options.html.twig' %}
230|                        </select>
231|                        <small class="ev-meta-field-hint-spacer" aria-hidden="true"></small>
232|                    </div>
233|                </div>
234|            </div>
235|        </div>
236|
237|        {# GMR fica abaixo do Local (todos os tipos, inclusive ROS). #}
238|
239|        <div class="form-group" id="ev-manager-field-wrap">
240|            <label for="ev_manager" id="ev-manager-label"><span id="ev-manager-label-text">Gestor responsável</span> {% if gestoresList|length > 0 %}<span class="text-danger">*</span>{% endif %}</label>
241|            <select class="form-control" id="ev_manager" name="ev_manager" {% if gestoresList|length > 0 %}required{% endif %}{% if not ssmaCanChangeEventManager|default(false) %} disabled{% endif %}>
242|                <option value="" disabled selected hidden></option>
243|                {% for g in gestoresList %}
244|                    {% set _gReg = g.registration|default('') %}
245|                    {% if _gReg == '' %}
246|                        {% set _gReg = '%07d'|format(g.id) %}
247|                    {% endif %}
248|                    <option value="{{ g.id }}"
249|                            data-name="{{ g.name|e('html_attr') }}"
250|                            data-position="{{ g.position|default('')|e('html_attr') }}"
251|                            data-avatar="{{ g.avatar|default('')|e('html_attr') }}"
252|                            data-area="{{ g.area|default('')|e('html_attr') }}"
253|                            data-team-name="{{ g.team_name|default('')|e('html_attr') }}"
254|                            data-registration="{{ _gReg|e('html_attr') }}">{{ g.name }}</option>
255|                {% endfor %}
256|            </select>
257|            {# Equipe removida da UI — team_id segue oculto e preenchido pelo gestor. #}
258|            <input type="hidden" id="ev_team_id" name="ev_team_id" value="">
259|            <div id="ev_manager_preview" class="d-none mt-2"></div>
260|        </div>
261|
262|        <div class="form-group" id="ev-people-field-wrap">
263|            <label for="ev_people_select">Pessoa(s) envolvida(s) <span class="text-danger">*</span></label>
264|            <select class="form-control" id="ev_people_select" name="ev_people_select">
265|                <option value="" selected disabled>Selecione quem estava envolvido</option>
266|                {% for member in allMembers %}
267|                    <option value="{{ member.id }}"
268|                            data-name="{{ member.name }}"
269|                            data-registration="{{ member.registration|default('%07d'|format(member.id)) }}"
270|                            data-position="{{ member.position|default('') }}"
271|                            data-supervisor="{{ member.supervisor_name|default('') }}"
272|                            data-gerencia="{{ member.gerencia|default(member.area|default('')) }}"
273|                            data-shift="{{ member.work_shift_label|default('') }}">{{ member.name }}</option>
274|                {% endfor %}
275|            </select>
276|            <div id="ev_people_tags" class="d-flex flex-wrap mt-2"></div>
277|        </div>
278|
279|        <div class="form-group">
280|            <label for="ev_witnesses_select">Testemunhas</label>

{"search_text": "ev_manager", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 18
240|            <label for="ev_manager" id="ev-manager-label"><span id="ev-manager-label-text">Gestor responsável</span> {% if gestoresList|length > 0 %}<span class="text-danger">*</span>{% endif %}</label>
241|            <select class="form-control" id="ev_manager" name="ev_manager" {% if gestoresList|length > 0 %}required{% endif %}{% if not ssmaCanChangeEventManager|default(false) %} disabled{% endif %}>
259|            <div id="ev_manager_preview" class="d-none mt-2"></div>
3131|            var reportedBy = String((document.getElementById('ev_manager') || { value: '' }).value || '').trim();
4313|            shared.initSearchableMemberField($('#ev_manager'), {
5029|            $('#ev_manager_preview').addClass('d-none').empty();
5244|        var sel     = document.getElementById('ev_manager');
5918|        var $preview = $('#ev_manager_preview');
5920|        var managerId = String(($('#ev_manager').val() || '')).trim();
5933|            ? shared.memberMetaFromSelection(managerId, $('#ev_manager option:selected'), window.SSMA_EV_MEMBERS_BY_ID || {})
5947|    $(document).on('change', '#ev_manager', function () {
5955|        $('#ev_manager').val('').trigger('change');
5994|            '#ev_manager',
6280|        if (det.manager_id)               evSetVal('ev_manager', det.manager_id);
6609|        $('#ev_manager').trigger('change');
6731|                    evSetVal('ev_manager', String(defs.manager_id));
6739|                    $('#ev_manager').trigger('change');
7010|            manager_id:       document.getElementById('ev_manager').value,

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6690, "end_line": 6760}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 6690-6760
6690|            if (window.__ssmaEvCreateMode === 'ros') {
6691|                modalTitle.textContent = 'Novo ROS';
6692|            } else if (window.__ssmaEvCreateMode === 'event') {
6693|                modalTitle.textContent = 'Novo evento';
6694|            } else {
6695|                modalTitle.textContent = 'Nova ocorrência';
6696|            }
6697|        }
6698|        var generalPanelCreate = document.getElementById('ev-step-general');
6699|        if (generalPanelCreate) generalPanelCreate.classList.remove('is-readonly');
6700|
6701|        if (typeof initEvTagSelectsOnce === 'function') {
6702|            initEvTagSelectsOnce();
6703|        }
6704|        evResetCreateUiState();
6705|        if (typeof evInitTypeSelectFromConfig === 'function') {
6706|            evInitTypeSelectFromConfig();
6707|        }
6708|        evApplyDatetimeMax();
6709|        evApplyAuraTitleStatusVisibility('create');
6710|        if (typeof window.renderEvCategorySelect === 'function') {
6711|            window.renderEvCategorySelect('', '');
6712|        }
6713|
6714|        var typeEl = document.getElementById('ev_type');
6715|        applyTypeBlock((typeEl && typeEl.value) ? typeEl.value : '');
6716|        ensureClassificationDefaults('', true);
6717|        evDefaultDatetimeToday();
6718|
6719|        if (window.SSMA_IS_AURA_ADMIN) {
6720|            evSetVal('ev_title', '');
6721|            evSetVal('ev_status', 'ABERTO');
6722|        }
6723|
6724|        (function applyEvCreateDefaults() {
6725|            var defs = window.SSMA_EVENT_FORM_DEFAULTS || {};
6726|            if (!defs || typeof defs !== 'object') {
6727|                defs = {};
6728|            }
6729|            function apply() {
6730|                if (defs.manager_id) {
6731|                    evSetVal('ev_manager', String(defs.manager_id));
6732|                }
6733|                if (defs.team_id) {
6734|                    evSetVal('ev_team_id', String(defs.team_id));
6735|                }
6736|                ensureClassificationDefaults('', true);
6737|                var $ = window.jQuery;
6738|                if ($) {
6739|                    $('#ev_manager').trigger('change');
6740|                    $('#ev_team_id').trigger('change');
6741|                }
6742|                if (typeof window.EvModal.syncTagHiddens === 'function') {
6743|                    // Evita regravar draft vazio logo após limpar a criação.
6744|                    var _persist = typeof evPersistDraftSoon === 'function' ? evPersistDraftSoon : null;
6745|                    if (_persist) {
6746|                        window.__ssmaEvSkipDraftPersist = true;
6747|                    }
6748|                    window.EvModal.syncTagHiddens();
6749|                    window.__ssmaEvSkipDraftPersist = false;
6750|                }
6751|                evFilterInjuredPersonSelect();
6752|                evSyncDescaracterUi();
6753|                evSyncContainmentTimeEnabled();
6754|                evSyncInjuryClassificationByLeave();
6755|                evSyncDerivedSeverityFromConsequence();
6756|            }
6757|            if (typeof window.requestAnimationFrame === 'function') {
6758|                window.requestAnimationFrame(function () { apply(); });
6759|            } else {
6760|                window.setTimeout(apply, 0);

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6990, "end_line": 7030}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 6990-7030
6990|
6991|        var occurrenceTime = '';
6992|        if (dtIso && /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}/.test(dtIso)) {
6993|            occurrenceTime = String(dtIso).slice(11, 16);
6994|        }
6995|
6996|        var payload = {
6997|            type:             type,
6998|            origin:           'MANUAL',
6999|            datetime:         dtIso,
7000|            occurrence_time:  occurrenceTime,
7001|            location:         document.getElementById('ev_location').value,
7002|            gmr:              (document.getElementById('ev_gmr') || { value: '' }).value,
7003|            description:      descCombined,
7004|            consequence:      document.getElementById('ev_consequence').value,
7005|            potential_consequence: document.getElementById('ev_potential_consequence').value,
7006|            impacts:          impacts,
7007|            activity:         document.getElementById('ev_activity').value,
7008|            approach:         approachVal,
7009|            title:            titleTxt,
7010|            manager_id:       document.getElementById('ev_manager').value,
7011|            people_ids:       peopleIds,
7012|            witness_ids:      (document.getElementById('ev_witness_ids') || { value: '' }).value,
7013|            team_id:          teamVal,
7014|            unit_id:          teamVal || null,
7015|            responsible_ids:  (document.getElementById('ev_responsible_ids') || { value: '' }).value,
7016|            strategic_nature: (document.getElementById('ev_strategic_nature') || { value: '' }).value,
7017|            area_label:       (document.getElementById('ev_area_label') || { value: '' }).value.trim(),
7018|            evidences:        evEvidences.slice()
7019|        };
7020|
7021|        var catWrap = document.getElementById('ev-category-wrap');
7022|        var catSel  = document.getElementById('ev_category');
7023|        if (catWrap && catSel && !catWrap.classList.contains('d-none')) {
7024|            var catVal = (catSel.value || '').trim();
7025|            if (catVal) {
7026|                payload.category = catVal;
7027|            }
7028|        }
7029|
7030|        var cd = document.getElementById('ev_classifier_dano');

{"search_text": "private function mapSsmaOccurrenceEntityToListRow"}

File: src/Controller/SsmaController.php
Match lines: 1
15073|    private function mapSsmaOccurrenceEntityToListRow(SsmaOccurrence $row, array $teamsById): array

{"file_path": "src/Controller/SsmaController.php", "start_line": 15073, "end_line": 15120}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 15073-15120
15073|    private function mapSsmaOccurrenceEntityToListRow(SsmaOccurrence $row, array $teamsById): array
15074|    {
15075|        $managerId = $row->getManager()?->getId();
15076|        $teamId = $row->getTeam()?->getId();
15077|        $activityMeta = $this->parseOccurrenceActivityPayload($row->getActivity());
15078|        $history = [
15079|            ['date' => $row->getCreatedAt()->format('d/m/Y'), 'label' => 'Ocorrência registrada'],
15080|        ];
15081|        if (in_array($row->getStatus(), ['resolvida', 'finalizada'], true)) {
15082|            $history[] = ['date' => $row->getUpdatedAt()->format('d/m/Y'), 'label' => 'Ocorrência finalizada'];
15083|        }
15084|
15085|        return [
15086|            'id'              => $row->getId(),
15087|            'list_row_key'    => (string) $row->getId(),
15088|            'is_ssma_event'   => false,
15089|            'title'           => $row->getTitle(),
15090|            'type_value'      => $row->getType(),
15091|            'nature_value'    => $row->getNature() ?? '',
15092|            'severity_value'  => SsmaOccurrenceDashboardAggregator::normalizeSeveritySlug((string) ($row->getSeverity() ?? '')),
15093|            'status_value'    => $row->getStatus(),
15094|            'workflow_status' => SsmaOccurrenceDashboardAggregator::workflowBucketFromLegacyStatus((string) $row->getStatus()),
15095|            'date'            => $row->getDate()->format('Y-m-d'),
15096|            'created_at'      => $row->getCreatedAt()->format('Y-m-d'),
15097|            'updated_at'      => $row->getUpdatedAt()->format('Y-m-d'),
15098|            'manager_id'      => $managerId,
15099|            'team_id'         => $teamId,
15100|            'people_ids'      => $row->getPeopleIds(),
15101|            'location_value'  => $row->getLocation() ?? '',
15102|            'description'     => trim($activityMeta['text'] ?? ''),
15103|            'activity'        => $activityMeta['text'],
15104|            'approach_value'  => $row->getApproach() ?? '',
15105|            'responsible_ids' => $row->getResponsibleIds(),
15106|            'area'            => $teamsById[$teamId]['name'] ?? '',
15107|            'evidences'       => $activityMeta['evidences'],
15108|            'history'         => $history,
15109|            'person_id'       => null,
15110|            'person_type'     => '',
15111|        ];
15112|    }
15113|
15114|    /**
15115|     * @param list<SsmaAction> $rows
15116|     *
15117|     * @return list<array<string, mixed>>
15118|     */
15119|    private function mapSsmaActionEntitiesToListArrays(array $rows, Company $company, ?User $user): array
15120|    {

{"comments": [{"content": "A nova regra exige que o gestor seja 'líder imediato' de alguém no escopo (ou o próprio superior de quem salva), e o front trava o campo para quem não é gestor. Quando o cadastro do usuário não tem 'Responsável' (superior) preenchido — estruturas sem hierarquia configurada — um Supervisor de Equipe (escopo de equipe, sem poder trocar o campo) fica sem gestor default e toda tentativa de salvar é recusada com 403 'Informe o gestor responsável.', sem nenhum fallback. Além disso, ocorrências antigas gravadas com manager_id que não é 'líder imediato' (ex.: ROS onde o relator era o próprio colaborador) passam a falhar na edição mesmo com o campo inalterado. Recomendo: na edição, quando o manager_id enviado é igual ao já gravado, preservar sem exigir a regra de líder; e na criação, quando não há superior cadastrado, não bloquear (deixar gravar sem gestor para o fallback de exibição ou permitir escolher outro líder do escopo).", "existing_code": "        $leaderIds = $this->collectImmediateLeaderMemberIds($company);\n        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);\n        $managerAllowed = isset($leaderIds[$managerId]) && isset($allowedMembers[$managerId]);\n        if ($ownLeaderId !== null && $ownLeaderId === $managerId) {\n            $managerAllowed = true;\n        }", "category": "bug", "severity": "medium", "path": "src/Controller/SsmaController.php"}, {"content": "O seletor do modal limita o 'Gestor responsável' ao escopo de equipe E área (o código da view cruza managerScopeIds com allowedMemberIds da área), mas a atribuição no servidor (applySsmaEventManagerAssignment) e a validação validateSsmaEventPayloadAgainstTeamScope usam apenas getSsmaOccurrenceDashboardTeamFilterIds. Para um Gestor de Área com área restrita e sem equipe esse filtro devolve null e o servidor aceita qualquer líder da empresa inteira como gestor, mesmo fora da área dele — o recorte aplicado na interface vira cosmético e uma request manipulada cruza o isolamento por área. Alinhe a atribuição/validação com o mesmo getSsmaPreventionAreaScope usado para montar as opções.", "existing_code": "        $allowed = $this->collectImmediateLeaderMemberIds($company);\n        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);\n        if ($scope !== null) {\n            $teamMembers = $scope === []\n                ? []\n                : $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);\n            $allowed = array_intersect_key($allowed, $teamMembers);\n        }", "category": "security", "severity": "medium", "path": "src/Controller/SsmaController.php"}, {"content": "Esse resolveCompanyMemberIdByUserId roda dentro de mapSsmaEventToOccurrenceListRow, que percorre todos os eventos da empresa em loadOccurrences (listagem do dashboard, centenas de linhas). Cada criador distinto dispara um findBy novo (o cache só evita repetição do mesmo par empresa/usuário dentro da request). Considere resolver os member_ids de todos os criadores em uma única consulta (WHERE user IN (...)) ou já trazer o created_by_member_id no SQL da listagem, para evitar N+1 a cada render.", "existing_code": "            'created_by_member_id'   => $this->resolveCompanyMemberIdByUserId($e->getCompany(), $e->getCreatedById()),", "category": "performance", "severity": "low", "path": "src/Controller/SsmaController.php"}, {"content": "Essas duas últimas asserções são tautologias (99 !== 10 e 10 === 10) — não executam buildSsmaEventResponsibleManagerOptions nem applySsmaEventManagerAssignment. Todo o arquivo apenas duplica a lógica das funções em helpers locais e não passa pelos endpoints reais de criação/edição de evento nem por validateSsmaEventPayloadAgainstTeamScope. Como a PR mexe em regra de permissão (quem pode trocar o gestor / quem pode validar), o teste deveria cobrir o fluxo funcional/integração para pegar regressões de autorização como as descritas acima.", "existing_code": "ok('Evento some para o criador se só olhar manager_id (regressão)', 99 !== 10);\nok('Criador volta a ver se created_by_member_id == ele', 10 === 10);", "category": "test", "severity": "low", "path": "tests/Ssma/ssma_event_manager_leader_rule_standalone.php"}, {"content": "Nesta seção 'Responsável pelo cadastro', quando o criador não é resolvido (created_by_member nulo — ex.: ocorrências legadas sem created_by_id ou criador desligado), o fallback exibe reported_by_member, que é o gestor responsável (linha 529). Ou seja, o nome/avatar do gestor aparece rotulado como 'quem cadastrou', duplicando a informação da seção seguinte e rotulando incorretamente a autoria. Para ocorrências sem dado de criador o correto é exibir '—', não cair no gestor.", "existing_code": "                    {% elseif reported_by_member %}\n                        {% include 'components/ui/_member_avatars_stack.html.twig' with {\n                            members: [reported_by_member|merge({'avatar': null, 'email': null})],\n                            max_visible: 1,\n                            size: 28\n                        } %}", "category": "bug", "severity": "low", "path": "templates/ssma/occurrence/occurrence_view.html.twig"}]}

(async)

{"search_text": "validateSsmaEventPayloadAgainstTeamScope", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 3
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);

{"search_text": "buildSsmaEventResponsibleManagerOptions", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 2
12248|    private function buildSsmaEventResponsibleManagerOptions(
13218|            ? $this->buildSsmaEventResponsibleManagerOptions(

{"file_path": "src/Controller/SsmaController.php", "start_line": 26470, "end_line": 26510}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 26470-26510
26470|        $typeKey = strtoupper(trim((string) ($data['type'] ?? '')));
26471|        if ($typeKey !== '' && !$this->canCreateSsmaOccurrenceType($typeKey)) {
26472|            return new JsonResponse(['success' => false, 'message' => 'Você não tem permissão para registrar ocorrências deste tipo.'], 403);
26473|        }
26474|
26475|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
26476|        if (
26477|            in_array($typeKey, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
26478|            && !$this->canAccessSsmaEventAprofundamento(
26479|                $company,
26480|                $user,
26481|                $typeKey,
26482|                $eventDetails,
26483|                (int) ($user->getId() ?? 0)
26484|            )
26485|        ) {
26486|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload($data, $typeKey, []);
26487|        }
26488|
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26490|        if ($teamScopeErr !== null) {
26491|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26492|        }
26493|
26494|        try {
26495|            $service  = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26496|            $payloads = $service->splitPersonalAccidentPayloads($data);
26497|            $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26498|            $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
26499|            if ($registeredByName === '') {
26500|                $registeredByName = $user->getEmail() ?? 'Sistema';
26501|            }
26502|
26503|            foreach ($payloads as $payload) {
26504|                $payloadErrors = $validator->validate($payload, [
26505|                    'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26506|                ]);
26507|                if ($payloadErrors !== []) {
26508|                    return new JsonResponse([
26509|                        'success' => false,
26510|                        'message' => implode(' ', $payloadErrors),

{"file_path": "src/Controller/SsmaController.php", "start_line": 26700, "end_line": 26740}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 26700-26740
26700|                $detailsOut['aprofundamento_complete'] = false;
26701|                $detailsOut['aprofundamento_status'] = 'draft';
26702|            }
26703|            $data['details'] = $detailsOut;
26704|        }
26705|
26706|        // Valida apenas se type ou details estiverem presentes no payload (atualização parcial ok)
26707|        if (!empty($data['type']) || !empty($data['details'])) {
26708|            $validator = new \App\Service\Ssma\SsmaEventValidator();
26709|            $errors    = $validator->validate($data, [
26710|                'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26711|                'soft_aprofundamento' => $aprofundamentoOnly && !$wantsFinalize,
26712|            ]);
26713|            if ($errors !== []) {
26714|                return new JsonResponse(['success' => false, 'errors' => $errors], 422);
26715|            }
26716|        }
26717|
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26719|        if ($teamScopeErr !== null) {
26720|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26721|        }
26722|
26723|        $service = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26724|        $prevType         = $event->getType();
26725|        $prevStatus       = $event->getStatus();
26726|        $prevImmediateRisk = !empty($event->getDetails()['immediate_risk']);
26727|        $prevManagerId = (int) ($event->getDetails()['manager_id'] ?? 0);
26728|        $wasRejectedApproval = $this->ssmaOccurrenceApprovalService->getState($event)['status']
26729|            === \App\Service\Ssma\SsmaOccurrenceApprovalService::STATUS_REJECTED;
26730|        $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26731|        $event      = $service->updateFromPayload($event, $data, $user, $editorMeta);
26732|
26733|        if ($wasRejectedApproval) {
26734|            // Readequação: reenvia tanto na edição completa quanto ao finalizar só o aprofundamento.
26735|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, true);
26736|        } elseif ($wantsFinalize) {
26737|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, false);
26738|        }
26739|
26740|        $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));

{"file_path": "src/Controller/SsmaController.php", "start_line": 10370, "end_line": 10445}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10370-10445
10370|            foreach (array_map('trim', explode(',', $raw)) as $t) {
10371|                if ($t !== '' && in_array((string) $t, $teamIdStr, true)) {
10372|                    $set[(int) $m->getId()] = true;
10373|                    break;
10374|                }
10375|            }
10376|        }
10377|
10378|        return $set;
10379|    }
10380|
10381|    /**
10382|     * @param array<string, mixed> $data Payload já normalizado ({@see normalizeSsmaEventPayload}).
10383|     */
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
10385|    {
10386|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10387|        if ($scope === null) {
10388|            return null;
10389|        }
10390|
10391|        $details = $data['details'] ?? [];
10392|        if (!is_array($details)) {
10393|            $details = [];
10394|        }
10395|
10396|        if ($scope === []) {
10397|            // Técnico especialista SSMA (sem equipe no produto): não valida payload por equipe.
10398|            // O acesso ao evento já ?? validado por isSsmaEventVisibleUnderOccurrenceTeamDashboardScope
10399|            // e canCompleteSsmaTechnicalType antes dessa chamada, garantindo que só acessa seu tipo.
10400|            try {
10401|                $member = $this->getCurrentCompanyMember($company, $user);
10402|                if ($member) {
10403|                    $techLinks = $this->entityManager
10404|                        ->getRepository(SsmaPermissionTagMember::class)
10405|                        ->findBy(['companyMember' => $member]);
10406|                    if (!empty($techLinks)) {
10407|                        return null;
10408|                    }
10409|                }
10410|            } catch (\Throwable) {
10411|            }
10412|
10413|            return 'Seu perfil não está vinculado a nenhuma equipe; não ? possível registrar ocorrências.';
10414|        }
10415|
10416|        $teamId = (int) ($details['team_id'] ?? 0);
10417|        if ($teamId <= 0 || !in_array($teamId, $scope, true)) {
10418|            return 'A equipe informada não está disponível para o seu perfil.';
10419|        }
10420|
10421|        $allowedMembers = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);
10422|
10423|        $managerId = (int) ($details['manager_id'] ?? 0);
10424|        if ($managerId <= 0) {
10425|            return 'Informe o gestor responsável.';
10426|        }
10427|        $leaderIds = $this->collectImmediateLeaderMemberIds($company);
10428|        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);
10429|        $managerAllowed = isset($leaderIds[$managerId]) && isset($allowedMembers[$managerId]);
10430|        if ($ownLeaderId !== null && $ownLeaderId === $managerId) {
10431|            $managerAllowed = true;
10432|        }
10433|        if (!$managerAllowed) {
10434|            return 'O gestor responsável precisa ser líder imediato de alguém e pertencer ao seu escopo de equipe/área.';
10435|        }
10436|
10437|        return null;
10438|    }
10439|
10440|    /**
10441|     * team_limitation na inspeção: a equipe é o recorte. Sem equipe, ou equipe fora do cadastro
10442|     * do perfil, a gravação é recusada. area_limitation sozinha não passa por aqui.
10443|     *
10444|     * @param array<string, mixed> $data
10445|     */

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "private function getSsmaOccurrenceDashboardTeamFilterIds"}

File: src/Controller/SsmaController.php
Match lines: 1
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array

{"file_path": "src/Controller/SsmaController.php", "start_line": 10249, "end_line": 10340}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10249-10340
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array
10250|    {
10251|        if (!$company || !$user instanceof User) {
10252|            return null;
10253|        }
10254|
10255|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10256|            return null;
10257|        }
10258|
10259|        $member = $this->getCurrentCompanyMember($company, $user);
10260|        if (!$member) {
10261|            return null;
10262|        }
10263|
10264|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10265|        // 'Supervisor' puro (sem "de Equipe") ?? supervisor global: sem restrição de equipe, igual ao Gestor Administrador.
10266|        if ($tag && in_array($tag->getName(), ['Gestor Administrador', 'Supervisor'], true)) {
10267|            return null;
10268|        }
10269|
10270|        $parsed = $this->parseCompanyMemberTeamIds($member);
10271|
10272|        if ($tag && in_array($tag->getName(), $this->ssmaTeamScopePermissionTagNames(), true)) {
10273|            return $parsed;
10274|        }
10275|
10276|        if ($tag && $tag->getTeamLimitation()) {
10277|            return $parsed;
10278|        }
10279|
10280|        $viewerTeams = $this->getSsmaViewerTeamIds();
10281|        if ($viewerTeams !== null) {
10282|            return $viewerTeams;
10283|        }
10284|
10285|        // Membro sem tag de supervisão/gestão SSMA (ex.: stakeholder via ocorrência) não deve
10286|        // ter filtro de equipe aplicado: retorna null para que filterOccurrencesForMember
10287|        // mostre apenas o conteúdo próprio. Retornar [] zeraria todos os dados antes disso.
10288|        if ($tag !== null && $parsed === []) {
10289|            if ($this->resolveCurrentUserTechnicalTypes($company, $user) !== []) {
10290|                return [];
10291|            }
10292|
10293|            return null;
10294|        }
10295|
10296|        return null;
10297|    }
10298|
10299|    /**
10300|     * Recorte de área do usuário logado na Prevenção Ativa.
10301|     *
10302|     * Fonte única para listagem, busca, detalhe e gravação: um escopo não restrito libera tudo,
10303|     * um escopo restrito com conjunto vazio nega tudo. Não existe estado intermediário em que
10304|     * a ausência de área cadastrada remova o filtro.
10305|     */
10306|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10307|    {
10308|        if (!$company || !$user instanceof User) {
10309|            return SsmaPreventionAreaScope::unrestricted();
10310|        }
10311|
10312|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10313|        $member = $this->getCurrentCompanyMember($company, $user);
10314|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, 'ssma-prevention') : null;
10315|
10316|        return $this->ssmaPreventionAreaAuthorization
10317|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10318|    }
10319|
10320|    /**
10321|     * @return list<int>
10322|     */
10323|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10324|    {
10325|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10326|    }
10327|
10328|    /**
10329|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10330|     */
10331|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10332|    {
10333|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10334|            $this->getSsmaPreventionAreaScope($company, $user),
10335|            $inspection
10336|        );
10337|    }
10338|
10339|    /**
10340|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "mapSsmaEventToOccurrenceListRow"}

File: src/Controller/SsmaController.php
Match lines: 6
12424|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
14912|            $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15214|                $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15322|                $evtById[(int) $event->getId()] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15470|    private function mapSsmaEventToOccurrenceListRow(SsmaEvent $e, array $teamsById): array
16701|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);

{"state": "DONE"}

{"file_path": "src/Controller/SsmaController.php", "start_line": 9100, "end_line": 9260}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 9100-9260
9100|                fn (SsmaAbordagem $a): bool => $this->ssmaPreventionAreaAuthorization
9101|                    ->canViewAbordagem($areaScope, $a)
9102|            )), 0, $limit);
9103|        }
9104|
9105|        $items = array_map(static function (SsmaAbordagem $a): array {
9106|            return [
9107|                'id'    => $a->getId(),
9108|                'label' => sprintf('Abordagem por %s em %s (#%d) — %s',
9109|                    $a->getObservadorNome(),
9110|                    $a->getLocal(),
9111|                    $a->getId(),
9112|                    $a->getData()->format('d/m/Y')
9113|                ),
9114|            ];
9115|        }, $rows);
9116|
9117|        return new JsonResponse(['success' => true, 'items' => $items, 'total' => count($items)]);
9118|    }
9119|
9120|    /**
9121|     * Busca membros da empresa para combobox SSMA (Fase B — evita SSR com lista completa).
9122|     */
9123|    public function searchSsmaMembers(Request $request): JsonResponse
9124|    {
9125|        /** @var User|null $user */
9126|        $user = $this->getUser();
9127|        if (!$user) {
9128|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9129|        }
9130|
9131|        $company = $this->getSsmaCompany();
9132|        if (!$company instanceof Company) {
9133|            return new JsonResponse(['success' => false, 'message' => 'Empresa não encontrada.'], 400);
9134|        }
9135|
9136|        $q = trim((string) $request->query->get('q', ''));
9137|        $teamId = (int) $request->query->get('team_id', 0);
9138|        // Campo Gestor responsável / executor-validador da ação imediata: escopo da empresa
9139|        // (não filtrar por equipe do supervisor).
9140|        $forGestorModal = filter_var($request->query->get('gestor_modal', false), FILTER_VALIDATE_BOOLEAN)
9141|            || filter_var($request->query->get('company_scope', false), FILTER_VALIDATE_BOOLEAN);
9142|        $forResponsibleManager = filter_var($request->query->get('responsible_manager', false), FILTER_VALIDATE_BOOLEAN);
9143|        // Limite maior para o seletor de comitê (member picker modal) que precisa de todos os membros da empresa.
9144|        $forPicker = filter_var($request->query->get('picker', false), FILTER_VALIDATE_BOOLEAN);
9145|        $defaultCap = $forGestorModal ? ($forPicker ? 500 : 100) : 50;
9146|        $limit = min($defaultCap, max(1, (int) $request->query->get('limit', 20)));
9147|
9148|        [$allMembers, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
9149|
9150|        $allowedMemberMap = null;
9151|        if ($forResponsibleManager) {
9152|            $leaderIds = $this->collectImmediateLeaderMemberIds($company);
9153|            $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);
9154|            $scopeIds = null;
9155|            $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
9156|            if ($occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== []) {
9157|                $scopeIds = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
9158|            }
9159|            $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
9160|            if ($areaScope->isRestricted()) {
9161|                $areaMemberMap = $areaScope->allowedMemberIds();
9162|                $scopeIds = $scopeIds === null
9163|                    ? $areaMemberMap
9164|                    : array_intersect_key($scopeIds, $areaMemberMap);
9165|            }
9166|            $allowedMemberMap = $scopeIds === null
9167|                ? $leaderIds
9168|                : array_intersect_key($leaderIds, $scopeIds);
9169|            if ($ownLeaderId !== null && $ownLeaderId > 0) {
9170|                $allowedMemberMap[$ownLeaderId] = true;
9171|            }
9172|        } elseif (!$forGestorModal) {
9173|            $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
9174|            if ($teamId > 0) {
9175|                $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, [$teamId]);
9176|            } elseif ($occurrenceTeamFilterIds !== null && $occurrenceTeamFilterIds !== []) {
9177|                $allowedMemberMap = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $occurrenceTeamFilterIds);
9178|            }
9179|
9180|            // Recorte de área ativo sempre restringe, inclusive quando o membro não tem área
9181|            // cadastrada (conjunto vazio = nega tudo). Sem esse cuidado a busca devolveria a
9182|            // empresa inteira justamente no caso em que a tela já não mostra nada.
9183|            $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
9184|            if ($areaScope->isRestricted()) {
9185|                $areaMemberMap = $areaScope->allowedMemberIds();
9186|                $allowedMemberMap = $allowedMemberMap === null
9187|                    ? $areaMemberMap
9188|                    : array_intersect_key($allowedMemberMap, $areaMemberMap);
9189|            }
9190|        }
9191|
9192|        $qNorm = $this->normalizeSsmaMemberSearchText($q);
9193|        $items = [];
9194|        foreach ($allMembers as $row) {
9195|            $id = (int) ($row['id'] ?? 0);
9196|            if ($id <= 0) {
9197|                continue;
9198|            }
9199|            if ($allowedMemberMap !== null && !isset($allowedMemberMap[$id])) {
9200|                continue;
9201|            }
9202|            $name = trim((string) ($row['name'] ?? ''));
9203|            if ($name === '') {
9204|                continue;
9205|            }
9206|            if ($qNorm !== '' && !str_contains($this->normalizeSsmaMemberSearchText($name), $qNorm)
9207|                && !str_contains($this->normalizeSsmaMemberSearchText((string) ($row['email'] ?? '')), $qNorm)
9208|            ) {
9209|                continue;
9210|            }
9211|            $items[] = [
9212|                'id' => $id,
9213|                'name' => $name,
9214|                'email' => (string) ($row['email'] ?? ''),
9215|                'avatar' => $row['avatar'] ?? null,
9216|                'position' => (string) ($row['position'] ?? ''),
9217|            ];
9218|        }
9219|
9220|        usort($items, static function (array $a, array $b): int {
9221|            return strcasecmp((string) $a['name'], (string) $b['name']);
9222|        });
9223|        $items = array_slice($items, 0, $limit);
9224|
9225|        return new JsonResponse([
9226|            'success' => true,
9227|            'items' => $items,
9228|            'total' => count($items),
9229|            'q' => $q,
9230|        ]);
9231|    }
9232|
9233|    public function deleteAction(int $id): JsonResponse
9234|    {
9235|        /** @var User|null $user */
9236|        $user = $this->getUser();
9237|        if (!$user) {
9238|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
9239|        }
9240|
9241|        if (!$this->canManageSsmaOccurrences()) {
9242|            return new JsonResponse(['success' => false, 'message' => 'Sem permissão para deletar ações.'], 403);
9243|        }
9244|
9245|        $action = $this->entityManager->find(SsmaAction::class, $id);
9246|        if (!$action || $action->getCompany()->getId() !== $user->getCompany()?->getId()) {
9247|            return new JsonResponse(['success' => false, 'message' => 'Ação não encontrada.'], 404);
9248|        }
9249|
9250|        try {
9251|            $this->entityManager->remove($action);
9252|            $this->entityManager->flush();
9253|
9254|            return new JsonResponse(['success' => true, 'message' => 'Ação deletada com sucesso.']);
9255|        } catch (\Throwable $e) {
9256|            return new JsonResponse(['success' => false, 'message' => 'Erro ao deletar ação.'], 500);
9257|        }
9258|    }
9259|
9260|    public function reopenAction(int $id): JsonResponse

{"search_text": "private function validateSsmaEventPayloadAgainstTeamScope"}

File: src/Controller/SsmaController.php
Match lines: 1
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string

{"end_line": 10500, "file_path": "src/Controller/SsmaController.php", "start_line": 10360}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10360-10500
10360|
10361|        $teamIdStr = array_map('strval', $teamIds);
10362|        $set = [];
10363|        $members = $this->entityManager->getRepository(CompanyMembers::class)
10364|            ->findBy(['company' => $company, 'isRemoved' => 0]);
10365|        foreach ($members as $m) {
10366|            $raw = $m->getTeams() ?? '';
10367|            if ($raw === '') {
10368|                continue;
10369|            }
10370|            foreach (array_map('trim', explode(',', $raw)) as $t) {
10371|                if ($t !== '' && in_array((string) $t, $teamIdStr, true)) {
10372|                    $set[(int) $m->getId()] = true;
10373|                    break;
10374|                }
10375|            }
10376|        }
10377|
10378|        return $set;
10379|    }
10380|
10381|    /**
10382|     * @param array<string, mixed> $data Payload já normalizado ({@see normalizeSsmaEventPayload}).
10383|     */
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
10385|    {
10386|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10387|        if ($scope === null) {
10388|            return null;
10389|        }
10390|
10391|        $details = $data['details'] ?? [];
10392|        if (!is_array($details)) {
10393|            $details = [];
10394|        }
10395|
10396|        if ($scope === []) {
10397|            // Técnico especialista SSMA (sem equipe no produto): não valida payload por equipe.
10398|            // O acesso ao evento já ?? validado por isSsmaEventVisibleUnderOccurrenceTeamDashboardScope
10399|            // e canCompleteSsmaTechnicalType antes dessa chamada, garantindo que só acessa seu tipo.
10400|            try {
10401|                $member = $this->getCurrentCompanyMember($company, $user);
10402|                if ($member) {
10403|                    $techLinks = $this->entityManager
10404|                        ->getRepository(SsmaPermissionTagMember::class)
10405|                        ->findBy(['companyMember' => $member]);
10406|                    if (!empty($techLinks)) {
10407|                        return null;
10408|                    }
10409|                }
10410|            } catch (\Throwable) {
10411|            }
10412|
10413|            return 'Seu perfil não está vinculado a nenhuma equipe; não ? possível registrar ocorrências.';
10414|        }
10415|
10416|        $teamId = (int) ($details['team_id'] ?? 0);
10417|        if ($teamId <= 0 || !in_array($teamId, $scope, true)) {
10418|            return 'A equipe informada não está disponível para o seu perfil.';
10419|        }
10420|
10421|        $allowedMembers = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);
10422|
10423|        $managerId = (int) ($details['manager_id'] ?? 0);
10424|        if ($managerId <= 0) {
10425|            return 'Informe o gestor responsável.';
10426|        }
10427|        $leaderIds = $this->collectImmediateLeaderMemberIds($company);
10428|        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);
10429|        $managerAllowed = isset($leaderIds[$managerId]) && isset($allowedMembers[$managerId]);
10430|        if ($ownLeaderId !== null && $ownLeaderId === $managerId) {
10431|            $managerAllowed = true;
10432|        }
10433|        if (!$managerAllowed) {
10434|            return 'O gestor responsável precisa ser líder imediato de alguém e pertencer ao seu escopo de equipe/área.';
10435|        }
10436|
10437|        return null;
10438|    }
10439|
10440|    /**
10441|     * team_limitation na inspeção: a equipe é o recorte. Sem equipe, ou equipe fora do cadastro
10442|     * do perfil, a gravação é recusada. area_limitation sozinha não passa por aqui.
10443|     *
10444|     * @param array<string, mixed> $data
10445|     */
10446|    private function validateInspectionPayloadAgainstTeamScope(
10447|        array $data,
10448|        ?int $resolvedTeamId,
10449|        Company $company,
10450|        User $user,
10451|    ): ?string {
10452|        $scope = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
10453|        if ($scope === null) {
10454|            return null;
10455|        }
10456|
10457|        if ($scope === []) {
10458|            try {
10459|                $member = $this->getCurrentCompanyMember($company, $user);
10460|                if ($member) {
10461|                    $techLinks = $this->entityManager
10462|                        ->getRepository(SsmaPermissionTagMember::class)
10463|                        ->findBy(['companyMember' => $member]);
10464|                    if (!empty($techLinks)) {
10465|                        return null;
10466|                    }
10467|                }
10468|            } catch (\Throwable) {
10469|            }
10470|
10471|            return 'Seu perfil não está vinculado a nenhuma equipe; não é possível registrar inspeções.';
10472|        }
10473|
10474|        if ($resolvedTeamId === null || $resolvedTeamId <= 0 || !in_array($resolvedTeamId, $scope, true)) {
10475|            return 'A equipe informada não está disponível para o seu perfil.';
10476|        }
10477|
10478|        $allowedMembers = $this->collectCompanyMemberIdsBelongingToCompanyTeams($company, $scope);
10479|        $memberIds = [];
10480|        if (!empty($data['safety_responsible_id'])) {
10481|            $memberIds[] = (int) $data['safety_responsible_id'];
10482|        }
10483|        foreach ((array) ($data['participants_ids'] ?? []) as $participantId) {
10484|            $memberIds[] = (int) $participantId;
10485|        }
10486|        foreach ((array) ($data['companion_ids'] ?? []) as $companionId) {
10487|            $memberIds[] = (int) $companionId;
10488|        }
10489|        foreach ((array) ($data['deviations'] ?? []) as $deviation) {
10490|            if (!is_array($deviation)) {
10491|                continue;
10492|            }
10493|            if (!empty($deviation['responsible_id'])) {
10494|                $memberIds[] = (int) $deviation['responsible_id'];
10495|            }
10496|        }
10497|
10498|        foreach (array_unique(array_filter(array_map('intval', $memberIds), static fn (int $id): bool => $id > 0)) as $memberId) {
10499|            if (!isset($allowedMembers[$memberId])) {
10500|                return 'O colaborador informado não pertence às suas equipes.';

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "start_line": 1, "end_line": 120}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3231)
IS_TRUNCATED: false
LINE_RANGE: 1-120
1|{% extends user_uses_admin_hub_shell() ? 'layoutAdmin.html.twig' : 'layoutUser.html.twig' %}
2|
3|{% block headercss %}
4|    {{ parent() }}
5|    <link rel="stylesheet" href="{{ asset('assets/styles/file-management/index.css') }}">
6|    <style>
7|        /* Detalhe da ocorrência: título + ações num único bloco sticky (evita barra subir com top:62px fixo). */
8|        @media (min-width: 1024px) {
9|            section.ssma-module.ssma-occurrence-detail .ssma-occ-detail-sticky-head {
10|                position: sticky;
11|                top: 0;
12|                z-index: 1038;
13|                background: var(--surface, #fff);
14|                overflow: visible;
15|            }
16|
17|            section.ssma-module.ssma-occurrence-detail .ssma-occ-detail-sticky-head .modern-header.no-tabs {
18|                position: static !important;
19|                top: auto !important;
20|                min-height: 0;
21|            }
22|
23|            section.ssma-module.ssma-occurrence-detail .ssma-occ-detail-sticky-head #occ_view_controls.modern-header-actions {
24|                position: static !important;
25|                top: auto !important;
26|                z-index: auto;
27|                overflow: visible;
28|            }
29|        }
30|
31|        /* Severity badge (colors applied inline via Twig) */
32|        .occ-severity-badge {
33|            display: inline-flex;
34|            align-items: center;
35|            gap: 5px;
36|            border-radius: 100px;
37|            border: 1px solid;
38|            padding: 4px 12px;
39|            font-weight: 600;
40|        }
41|
42|        .ssma-action-card-label {
43|            color: #8B9199;
44|            font-size: 12px;
45|            font-weight: 500;
46|            line-height: 1.2;
47|        }
48|
49|        .ssma-action-card-role-label {
50|            font-size: 11px;
51|            font-weight: 600;
52|            min-width: 64px;
53|            color: #8B9199;
54|        }
55|
56|        .ssma-action-card-type {
57|            color: #5C5D5D;
58|            font-size: 14px;
59|            line-height: 1.3;
60|        }
61|
62|        .ssma-validation-badge {
63|            display: inline-flex;
64|            align-items: center;
65|            gap: 4px;
66|            padding: 2px 8px;
67|            border-radius: 10px;
68|            border: 1px solid transparent;
69|            font-size: 11px;
70|            font-weight: 600;
71|            line-height: 1.2;
72|            white-space: nowrap;
73|        }
74|
75|        .ssma-action-plan-deadline-tag {
76|            font-size: 11px;
77|            font-weight: 600;
78|            line-height: 1.2;
79|        }
80|
81|        .ssma-action-menu-toggle {
82|            box-shadow: none !important;
83|            text-decoration: none !important;
84|            line-height: 1;
85|        }
86|
87|        .ssma-action-menu-danger {
88|            color: #ff5a5f !important;
89|        }
90|
91|        .ssma-action-menu-danger:hover,
92|        .ssma-action-menu-danger:focus {
93|            color: #ff5a5f !important;
94|            background: rgba(255, 90, 95, 0.10) !important;
95|        }
96|
97|        .occurrence-view-page .modern-header-actions .mhs-btn-secondary,
98|        .occurrence-view-page .ssma-occ-detail-sticky-head .mhs-btn-secondary {
99|            background: var(--app-brand-primary-emphasis, var(--company-theme1-800, #135C66));
100|            color: var(--app-brand-primary-contrast, #FFFFFF) !important;
101|        }
102|
103|        .occurrence-view-page .modern-header-actions .mhs-btn-secondary:hover,
104|        .occurrence-view-page .modern-header-actions .mhs-btn-secondary:focus,
105|        .occurrence-view-page .ssma-occ-detail-sticky-head .mhs-btn-secondary:hover,
106|        .occurrence-view-page .ssma-occ-detail-sticky-head .mhs-btn-secondary:focus {
107|            background: var(--company-theme1-900, var(--app-brand-primary-emphasis, #135C66));
108|            color: var(--app-brand-primary-contrast, #FFFFFF) !important;
109|        }
110|
111|        .occurrence-view-page .ssma-occ-reports-dropdown {
112|            position: relative;
113|            z-index: 1040;
114|        }
115|
116|        .occurrence-view-page .ssma-occ-reports-dropdown > .mhs-btn-secondary.dropdown-toggle::after {
117|            display: none;
118|        }
119|
120|        .occurrence-view-page .ssma-occ-reports-dropdown .ssma-occ-reports-chevron {

{"search_text": "member_by_id\\[", "file_patterns": ["templates/ssma/occurrence/occurrence_view.html.twig"]}

No matches found

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "start_line": 440, "end_line": 560}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3231)
IS_TRUNCATED: false
LINE_RANGE: 440-560
440|            flex-direction: column;
441|            align-items: center;
442|            justify-content: center;
443|            gap: 10px;
444|        }
445|
446|        .ssma-occ-evidence-row .occ-view-drop-zone > span:not(.text-muted) {
447|            font-size: 14px !important;
448|            font-weight: 700 !important;
449|            color: #374151 !important;
450|            text-align: center;
451|            line-height: 1.3;
452|        }
453|
454|        .ssma-occ-evidence-row .occ-view-drop-zone > .text-muted {
455|            font-size: 12px !important;
456|            color: #8B9199 !important;
457|        }
458|
459|        #occ-view-procedures-list .occ-view-drop-zone {
460|            min-height: 160px;
461|        }
462|
463|        .ssma-evidence-card {
464|            transition: none !important;
465|            cursor: default;
466|            box-shadow: none !important;
467|        }
468|
469|        .ssma-evidence-card:hover {
470|            transform: none !important;
471|            border-color: #EEEFF4 !important;
472|            background-color: #FFFFFF !important;
473|            filter: none !important;
474|            opacity: 1 !important;
475|        }
476|
477|        .ssma-evidence-card *,
478|        .ssma-evidence-card:hover * {
479|            transition: none !important;
480|        }
481|
482|        .ssma-evidence-card .card-footer {
483|            border-top: 0 !important;
484|        }
485|
486|    </style>
487|{% endblock %}
488|
489|{% block container %}
490|{% set member_by_id = {} %}
491|{% for member in allMembers %}
492|    {% set member_by_id = member_by_id|merge({ ('member_' ~ member.id): member }) %}
493|{% endfor %}
494|
495|{% set severity_key       = occurrence.severity_value|default('') %}
496|{% set sev                = severity_map[severity_key] ?? { 'label': '—', 'dot': '#6c757d', 'bg_light': 'rgba(108,117,125,0.10)' } %}
497|{% set gravity_label      = occurrence.gravity_label|default(occurrence.potential_severity_label|default(sev.label)) %}
498|{% set guidance           = severity_guidance[severity_key] ?? null %}
499|{% set _occ_approval      = occurrence.occurrence_approval.status|default('') %}
500|{% set _is_rejected_occ   = occurrence.is_ssma_event|default(false) and _occ_approval == 'rejected' %}
501|{% set normalized_status  = _is_rejected_occ
502|    ? 'readequacao'
503|    : occurrence.status_value|default('')|replace({'-': '_'}) %}
504|{% set stat               = status_map[normalized_status] ?? { 'label': '—', 'dot': '#6c757d' } %}
505|{% set type_label         = type_labels[occurrence.type_value|default('')]       ?? occurrence.type_value|default('—') %}
506|{% set nature_label       = nature_labels[occurrence.nature_value|default('')]   ?? occurrence.nature_value|default('—') %}
507|{% set approach_label     = approach_labels[occurrence.approach_value|default('')] ?? occurrence.approach_value|default('—') %}
508|{% set gmr_label          = occurrence.gmr|default('') != '' ? occurrence.gmr : 'Não informado' %}
509|{% set category_label     = occurrence.category|default('') != '' ? occurrence.category : 'Não informado' %}
510|{% set location_label     = location_labels[occurrence.location_value|default('')] ?? occurrence.location_value|default('—') %}
511|{% set responsible_id     = occurrence.responsible_ids|default([])|first %}
512|{% set manager_member_key = occurrence.manager_id is defined ? ('member_' ~ occurrence.manager_id) : '' %}
513|{% set manager_member     = manager_member_key and member_by_id[manager_member_key] is defined ? member_by_id[manager_member_key] : null %}
514|{% set team_name = '—' %}
515|{% for team in teams %}
516|    {% if team.id == occurrence.team_id %}{% set team_name = team.name %}{% endif %}
517|{% endfor %}
518|{% set people_members = [] %}
519|{% for person_id in occurrence.people_ids|default([]) %}
520|    {% set person_key = 'member_' ~ person_id %}
521|    {% if member_by_id[person_key] is defined %}
522|        {% set people_members = people_members|merge([member_by_id[person_key]]) %}
523|    {% endif %}
524|{% endfor %}
525|{% set is_ros_occurrence = occurrence.type_value|default('') == 'ROS' %}
526|{% set created_by_lookup_id = occurrence.created_by_member_id|default(occurrence.created_by_id|default(null)) %}
527|{% set created_by_member_key = created_by_lookup_id ? ('member_' ~ created_by_lookup_id) : '' %}
528|{% set created_by_member = created_by_member_key and member_by_id[created_by_member_key] is defined ? member_by_id[created_by_member_key] : null %}
529|{% set reported_by_member = created_by_member ?: manager_member %}
530|{% set witness_members = [] %}
531|{% for witness_id in occurrence.witness_ids|default([]) %}
532|    {% set witness_key = 'member_' ~ witness_id %}
533|    {% if member_by_id[witness_key] is defined %}
534|        {% set witness_members = witness_members|merge([member_by_id[witness_key]]) %}
535|    {% endif %}
536|{% endfor %}
537|{% set responsible_member_key = responsible_id is not null ? ('member_' ~ responsible_id) : '' %}
538|{% set evidence_uploader_member = responsible_member_key and member_by_id[responsible_member_key] is defined
539|    ? member_by_id[responsible_member_key]
540|    : manager_member %}
541|{% set evidence_chip_initials = [] %}
542|{% if people_members|length > 0 %}
543|    {% set evidence_chip_initials = evidence_chip_initials|merge([people_members[0].name|default('R')|slice(0, 1)|upper]) %}
544|{% endif %}
545|{% if evidence_uploader_member and evidence_uploader_member.name|default('') != '' %}
546|    {% set evidence_chip_initials = evidence_chip_initials|merge([evidence_uploader_member.name|slice(0, 1)|upper]) %}
547|{% else %}
548|    {% set evidence_chip_initials = evidence_chip_initials|merge(['A']) %}
549|{% endif %}
550|{% if people_members|length > 1 %}
551|    {% set evidence_chip_initials = evidence_chip_initials|merge([people_members[1].name|default('J')|slice(0, 1)|upper]) %}
552|{% endif %}
553|
554|<section class="members-content zero-padding modern-layout ssma-module occurrence-view-page ssma-occurrence-detail">
555|    {% include 'ssma/partials/_shared_module_assets.html.twig' with {
556|        allMembers: allMembers|default([])
557|    } %}
558|    {# Readonly: view inclui o modal só com can_edit — entry precisa ficar aqui também.
559|       Fonte: partial único (Encore deduplica se o modal também incluir). #}
560|    {% include 'ssma/partials/_ssma_body_map_entry.html.twig' %}

{"search_text": "created_by_member_id", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 6
11680|        $createdByMemberId = (int) ($occurrence['created_by_member_id'] ?? 0);
12356|        $createdByMemberId = (int) ($row['created_by_member_id'] ?? 0);
12361|            $row['created_by_member_id'] = $createdByMemberId;
13311|                if ($viewerMemberIdForCreated > 0 && (int) ($o['created_by_member_id'] ?? 0) === $viewerMemberIdForCreated) {
14966|            $add($row['created_by_member_id'] ?? 0);
15590|            'created_by_member_id'   => $this->resolveCompanyMemberIdByUserId($e->getCompany(), $e->getCreatedById()),

{"search_text": "mapSsmaEventToOccurrenceListRow", "file_patterns": ["src/Controller/SsmaController.php"]}

File: src/Controller/SsmaController.php
Match lines: 6
12424|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
14912|            $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15214|                $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15322|                $evtById[(int) $event->getId()] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
15470|    private function mapSsmaEventToOccurrenceListRow(SsmaEvent $e, array $teamsById): array
16701|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);

{"file_path": "src/Controller/SsmaController.php", "start_line": 12040, "end_line": 12220}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 12040-12220
12040|        }
12041|
12042|        if (in_array($type, $this->resolveCurrentUserTechnicalTypes($company, $user), true)) {
12043|            return true;
12044|        }
12045|
12046|        if (!in_array($type, ['ROS', 'QUASE_ACIDENTE'], true)) {
12047|            return false;
12048|        }
12049|
12050|        $loggedMember = $this->getCurrentCompanyMember($company, $user);
12051|        if (!$loggedMember) {
12052|            return false;
12053|        }
12054|
12055|        return $this->isSsmaEventDirectManagerOfReporter(
12056|            $company,
12057|            $loggedMember,
12058|            $type,
12059|            $details,
12060|            $createdByUserId
12061|        );
12062|    }
12063|
12064|    /**
12065|     * @param array<string, mixed> $details
12066|     */
12067|    private function resolveSsmaEventReporterMemberId(
12068|        Company $company,
12069|        string $type,
12070|        array $details,
12071|        int $createdByUserId = 0
12072|    ): ?int {
12073|        if ($type === 'ROS') {
12074|            $managerId = (int) ($details['manager_id'] ?? 0);
12075|            if ($managerId > 0) {
12076|                return $managerId;
12077|            }
12078|        }
12079|
12080|        if ($type === 'QUASE_ACIDENTE') {
12081|            $personId = (int) ($details['person_id'] ?? 0);
12082|            if ($personId > 0) {
12083|                return $personId;
12084|            }
12085|            $peopleRaw = $details['people_ids'] ?? [];
12086|            if (is_string($peopleRaw) && $peopleRaw !== '') {
12087|                $peopleRaw = array_map('trim', explode(',', $peopleRaw));
12088|            }
12089|            if (is_array($peopleRaw)) {
12090|                foreach ($peopleRaw as $pid) {
12091|                    $pid = (int) $pid;
12092|                    if ($pid > 0) {
12093|                        return $pid;
12094|                    }
12095|                }
12096|            }
12097|        }
12098|
12099|        if ($createdByUserId > 0) {
12100|            return $this->resolveCompanyMemberIdByUserId($company, $createdByUserId);
12101|        }
12102|
12103|        return null;
12104|    }
12105|
12106|    private function resolveCompanyMemberIdByUserId(Company $company, int $userId): ?int
12107|    {
12108|        if ($userId <= 0) {
12109|            return null;
12110|        }
12111|
12112|        $cacheKey = ((int) $company->getId()) . ':' . $userId;
12113|        if (array_key_exists($cacheKey, $this->ssmaMemberIdByUserIdCache)) {
12114|            return $this->ssmaMemberIdByUserIdCache[$cacheKey];
12115|        }
12116|
12117|        $members = $this->entityManager->getRepository(CompanyMembers::class)
12118|            ->findBy(['company' => $company, 'user' => $userId, 'isRemoved' => 0]);
12119|
12120|        $resolved = null;
12121|        foreach ($members as $member) {
12122|            if ($member instanceof CompanyMembers) {
12123|                $resolved = (int) $member->getId();
12124|                break;
12125|            }
12126|        }
12127|
12128|        $this->ssmaMemberIdByUserIdCache[$cacheKey] = $resolved;
12129|
12130|        return $resolved;
12131|    }
12132|
12133|    /**
12134|     * Gestor (equipe/área/administrador) ou tenant/plataforma pode trocar o "Gestor responsável".
12135|     * Membro e supervisor não — o campo fica travado no líder imediato de quem está cadastrando.
12136|     */
12137|    private function canSelectSsmaEventResponsibleManager(?Company $company, ?User $user): bool
12138|    {
12139|        if (
12140|            $this->isGranted('ROLE_SUPER_ADMIN')
12141|            || $this->isGranted('ROLE_MANAGER')
12142|            || $this->isGranted('ROLE_TENANT')
12143|        ) {
12144|            return true;
12145|        }
12146|        if (!$company || !$user) {
12147|            return false;
12148|        }
12149|
12150|        $member = $this->getCurrentCompanyMember($company, $user);
12151|        if (!$member instanceof CompanyMembers) {
12152|            return false;
12153|        }
12154|        if ($this->memberIsSsmaGestorAdministrador($member)) {
12155|            return true;
12156|        }
12157|
12158|        $tagName = $this->resolveSsmaProductPermissionTagForMember($member)?->getName();
12159|
12160|        return in_array($tagName, [
12161|            'Gestor de Equipe',
12162|            SsmaAreaLimitationScope::TAG_GESTOR_AREA,
12163|            'Gestor Administrador',
12164|        ], true);
12165|    }
12166|
12167|    private function resolveLoggedMemberImmediateLeaderId(Company $company, User $user): ?int
12168|    {
12169|        $member = $this->getCurrentCompanyMember($company, $user);
12170|        if (!$member instanceof CompanyMembers) {
12171|            return null;
12172|        }
12173|
12174|        $superior = $member->getSuperior();
12175|        if (!$superior instanceof CompanyMembers || (int) $superior->getIsRemoved() === 1) {
12176|            return null;
12177|        }
12178|        if ($superior->getCompany()?->getId() !== $company->getId()) {
12179|            return null;
12180|        }
12181|
12182|        $id = (int) $superior->getId();
12183|
12184|        return $id > 0 ? $id : null;
12185|    }
12186|
12187|    /**
12188|     * Pessoas que são "Responsável" (superior) de pelo menos um colaborador ativo.
12189|     * Fonte: campo Responsável do cadastro em /my-company/members.
12190|     *
12191|     * @return array<int, true>
12192|     */
12193|    private function collectImmediateLeaderMemberIds(Company $company): array
12194|    {
12195|        if ($this->ssmaImmediateLeaderMemberIdsCache !== null) {
12196|            return $this->ssmaImmediateLeaderMemberIdsCache;
12197|        }
12198|
12199|        $set = [];
12200|        try {
12201|            $rows = $this->entityManager->createQueryBuilder()
12202|                ->select('DISTINCT IDENTITY(cm.superior) AS sid')
12203|                ->from(CompanyMembers::class, 'cm')
12204|                ->where('cm.company = :company')
12205|                ->andWhere('cm.isRemoved = 0')
12206|                ->andWhere('cm.superior IS NOT NULL')
12207|                ->setParameter('company', $company)
12208|                ->getQuery()
12209|                ->getArrayResult();
12210|            foreach ($rows as $row) {
12211|                $id = (int) ($row['sid'] ?? 0);
12212|                if ($id > 0) {
12213|                    $set[$id] = true;
12214|                }
12215|            }
12216|        } catch (\Throwable) {
12217|            $members = $this->entityManager->getRepository(CompanyMembers::class)
12218|                ->findBy(['company' => $company, 'isRemoved' => 0]);
12219|            foreach ($members as $member) {
12220|                if (!$member instanceof CompanyMembers) {

{"file_path": "src/Controller/SsmaController.php", "start_line": 14840, "end_line": 15060}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 14840-15060
14840|                    $occHasInv[(int) $r['occurrence_id']] = true;
14841|                }
14842|            } catch (\Throwable) {
14843|                // Tabela pode estar ausente em ambientes novos; continua com false
14844|            }
14845|        }
14846|
14847|        if ($evtIds !== []) {
14848|            $ph = implode(',', array_fill(0, count($evtIds), '?'));
14849|            try {
14850|                $rows = $conn->fetchAllAssociative(
14851|                    "SELECT DISTINCT event_id FROM ssma_actions
14852|                     WHERE company_id = ? AND solved = 0 AND event_id IN ($ph) AND $invTypeSql",
14853|                    array_merge([$companyId], $evtIds)
14854|                );
14855|                foreach ($rows as $r) {
14856|                    $evtHasInv[(int) $r['event_id']] = true;
14857|                }
14858|            } catch (\Throwable) {
14859|                // idem
14860|            }
14861|        }
14862|
14863|        foreach ($occurrences as $idx => $row) {
14864|            $statusKey = SsmaNativeInvestigationSignalsV1Builder::normalizeWorkflowStatus((string) ($row['status_value'] ?? ''));
14865|            $treeId    = (int) ($row['cause_tree_id'] ?? 0);
14866|            $investigating = $treeId > 0 && ($treeStatusById[$treeId] ?? '') === 'investigating';
14867|
14868|            $entityId = (int) ($row['id'] ?? 0);
14869|            if (!empty($row['is_ssma_event'])) {
14870|                $hasInvAction = isset($evtHasInv[$entityId]);
14871|            } else {
14872|                $hasInvAction = isset($occHasInv[$entityId]);
14873|            }
14874|
14875|            $occurrences[$idx]['committee_trigger'] = [
14876|                'status_investigada'           => $statusKey === 'investigada',
14877|                'has_open_investigation_action' => $hasInvAction,
14878|                'cause_tree_investigating'      => $investigating,
14879|            ];
14880|        }
14881|
14882|        return $occurrences;
14883|    }
14884|
14885|    /**
14886|     * Linhas de listagem para a tela de detalhe — uma ocorrência legada e/ou evento SSMA pelo ID.
14887|     *
14888|     * @param list<array<string, mixed>> $allMembers
14889|     * @param list<array<string, mixed>> $teams
14890|     *
14891|     * @return list<array<string, mixed>>
14892|     */
14893|    private function loadOccurrenceListRowsForDetailView(
14894|        Company $company,
14895|        int $id,
14896|        array $allMembers,
14897|        array $teams
14898|    ): array {
14899|        $teamsById = array_column($teams, null, 'id');
14900|        $membersById = array_column($allMembers, null, 'id');
14901|        $result = [];
14902|
14903|        $legacy = $this->entityManager->getRepository(SsmaOccurrence::class)
14904|            ->findOneBy(['id' => $id, 'company' => $company]);
14905|        if ($legacy instanceof SsmaOccurrence) {
14906|            $result[] = $this->mapSsmaOccurrenceEntityToListRow($legacy, $teamsById);
14907|        }
14908|
14909|        $event = $this->entityManager->getRepository(SsmaEvent::class)
14910|            ->findOneBy(['id' => $id, 'company' => $company]);
14911|        if ($event instanceof SsmaEvent) {
14912|            $result[] = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
14913|        }
14914|
14915|        foreach ($result as $idx => $row) {
14916|            $result[$idx] = $this->enrichOccurrenceManagerFields($row, $membersById, $company);
14917|        }
14918|
14919|        if ($result === []) {
14920|            return [];
14921|        }
14922|
14923|        $companyId = (int) $company->getId();
14924|        foreach ($result as $idx => $occRow) {
14925|            $entityId = (int) ($occRow['id'] ?? 0);
14926|            $isEvent = !empty($occRow['is_ssma_event']);
14927|            $treeMeta = $this->ssmaCauseTreeService->resolveEntityTreeMeta($companyId, $entityId, $isEvent);
14928|            $occRow['cause_tree_id'] = $treeMeta['cause_tree_id'];
14929|            $result[$idx] = $this->applyOccurrenceCommitteeTriggerFlags($occRow, $company, $treeMeta['tree_status']);
14930|        }
14931|
14932|        return $this->enrichOccurrencesGravityLabels($result);
14933|    }
14934|
14935|    /**
14936|     * Mantém no SSR do detalhe apenas membros citados na ocorrência/ações + gestores do modal.
14937|     *
14938|     * @param list<array<string, mixed>> $allMembers
14939|     * @param list<array<string, mixed>> $occurrences
14940|     * @param list<array<string, mixed>> $actionsTaken
14941|     * @param list<array<string, mixed>> $gestores
14942|     *
14943|     * @return list<array<string, mixed>>
14944|     */
14945|    private function filterSsmaMembersToReferencedForDetail(
14946|        array $allMembers,
14947|        array $occurrences,
14948|        array $actionsTaken,
14949|        array $gestores
14950|    ): array {
14951|        $keep = [];
14952|        $add = static function (mixed $id) use (&$keep): void {
14953|            $id = (int) $id;
14954|            if ($id > 0) {
14955|                $keep[$id] = true;
14956|            }
14957|        };
14958|
14959|        foreach ($gestores as $g) {
14960|            $add($g['id'] ?? 0);
14961|        }
14962|
14963|        foreach ($occurrences as $row) {
14964|            $add($row['manager_id'] ?? 0);
14965|            $add($row['person_id'] ?? 0);
14966|            $add($row['created_by_member_id'] ?? 0);
14967|            $add($row['created_by_id'] ?? 0);
14968|            $add($row['area_responsible_id'] ?? 0);
14969|            foreach (array_merge(
14970|                (array) ($row['people_ids'] ?? []),
14971|                (array) ($row['responsible_ids'] ?? []),
14972|                (array) ($row['witness_ids'] ?? [])
14973|            ) as $pid) {
14974|                $add($pid);
14975|            }
14976|        }
14977|
14978|        foreach ($actionsTaken as $action) {
14979|            $add($action['responsible_id'] ?? 0);
14980|            $add($action['validator_id'] ?? 0);
14981|            $add($action['validator_member_id'] ?? 0);
14982|            foreach ((array) ($action['responsible_ids'] ?? []) as $pid) {
14983|                $add($pid);
14984|            }
14985|            $add($action['created_by_id'] ?? 0);
14986|        }
14987|
14988|        if ($keep === []) {
14989|            return array_slice($allMembers, 0, 50);
14990|        }
14991|
14992|        return array_values(array_filter(
14993|            $allMembers,
14994|            static fn (array $m): bool => isset($keep[(int) ($m['id'] ?? 0)])
14995|        ));
14996|    }
14997|
14998|    /**
14999|     * Flags de comitê para uma única linha (detalhe) — sem carregar todas as árvores da empresa.
15000|     *
15001|     * @param array<string, mixed> $row
15002|     *
15003|     * @return array<string, mixed>
15004|     */
15005|    private function applyOccurrenceCommitteeTriggerFlags(array $row, Company $company, ?string $treeStatus): array
15006|    {
15007|        $companyId = (int) $company->getId();
15008|        $entityId = (int) ($row['id'] ?? 0);
15009|        $isEvent = !empty($row['is_ssma_event']);
15010|        $statusKey = SsmaNativeInvestigationSignalsV1Builder::normalizeWorkflowStatus((string) ($row['status_value'] ?? ''));
15011|        $treeId = (int) ($row['cause_tree_id'] ?? 0);
15012|        $investigating = $treeId > 0 && ($treeStatus ?? '') === 'investigating';
15013|        $hasInvAction = false;
15014|
15015|        if ($entityId > 0) {
15016|            $conn = $this->entityManager->getConnection();
15017|            $invTypeSql = "(LOWER(type) LIKE '%investig%' OR LOWER(type) = 'investigacao')";
15018|            try {
15019|                if ($isEvent) {
15020|                    $hasInvAction = (bool) $conn->fetchOne(
15021|                        "SELECT 1 FROM ssma_actions WHERE company_id = ? AND solved = 0 AND event_id = ? AND $invTypeSql LIMIT 1",
15022|                        [$companyId, $entityId]
15023|                    );
15024|                } else {
15025|                    $hasInvAction = (bool) $conn->fetchOne(
15026|                        "SELECT 1 FROM ssma_actions WHERE company_id = ? AND solved = 0 AND occurrence_id = ? AND $invTypeSql LIMIT 1",
15027|                        [$companyId, $entityId]
15028|                    );
15029|                }
15030|            } catch (\Throwable) {
15031|                // Tabela pode estar ausente em ambientes novos
15032|            }
15033|        }
15034|
15035|        $row['committee_trigger'] = [
15036|            'status_investigada'            => $statusKey === 'investigada',
15037|            'has_open_investigation_action' => $hasInvAction,
15038|            'cause_tree_investigating'      => $investigating,
15039|        ];
15040|
15041|        return $row;
15042|    }
15043|
15044|    /**
15045|     * Ações vinculadas a uma ocorrência legada ou evento SSMA (detalhe / relatório).
15046|     *
15047|     * @return list<array<string, mixed>>
15048|     */
15049|    private function loadActionsForOccurrenceDetail(Company $company, int $occurrenceId): array
15050|    {
15051|        /** @var SsmaAction[] $rows */
15052|        $rows = $this->entityManager->getRepository(SsmaAction::class)
15053|            ->createQueryBuilder('a')
15054|            ->where('a.company = :company')
15055|            ->andWhere('(IDENTITY(a.occurrence) = :id OR IDENTITY(a.event) = :id)')
15056|            ->setParameter('company', $company)
15057|            ->setParameter('id', $occurrenceId)
15058|            ->orderBy('a.createdAt', 'DESC')
15059|            ->getQuery()
15060|            ->getResult();

{"end_line": 13530, "file_path": "src/Controller/SsmaController.php", "start_line": 13260}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 13260-13530
13260|            $defaultInspectionTeamId = (int) ($ssmaEventFormDefaults['team_id'] ?? 0) ?: null;
13261|            if ($defaultInspectionTeamId === null && count($teamsForInspectionModal) === 1) {
13262|                $defaultInspectionTeamId = (int) ($teamsForInspectionModal[0]['id'] ?? 0) ?: null;
13263|            }
13264|        }
13265|        usort($teamsForInspectionModal, static function (array $a, array $b): int {
13266|            return strcasecmp((string) ($a['name'] ?? ''), (string) ($b['name'] ?? ''));
13267|        });
13268|
13269|        // Técnico especialista SSMA: tem SsmaPermissionTagMember mas sem gestão ou supervisão de equipe.
13270|        // O scope retornado por getSsmaOccurrenceDashboardTeamFilterIds ?? [] (sem equipe atribuída no produto),
13271|        // o que zeraria todas as ocorrências se o filtro de equipe fosse aplicado.
13272|        // Em vez disso, aplicamos um filtro por tipo de ocorrência após o bloco de equipe.
13273|        $isTechSpecialistOnly = !$ssmaCanManageOccurrences
13274|            && !$this->isSsmaViewer()
13275|            && $occurrenceTeamFilterIds === []
13276|            && !empty($userTechnicalTypes);
13277|
13278|        if ($occurrenceTeamFilterIds !== null && !$isTechSpecialistOnly) {
13279|            $teamIdStr = array_map('strval', $occurrenceTeamFilterIds);
13280|
13281|            // Coleta IDs de membros pertencentes às equipes do viewer
13282|            $memberIdsInTeams = [];
13283|            foreach ($teams as $team) {
13284|                if (in_array((string) ($team['id'] ?? ''), $teamIdStr, true)) {
13285|                    foreach ($team['members'] ?? [] as $mid) {
13286|                        $memberIdsInTeams[(int) $mid] = true;
13287|                    }
13288|                }
13289|            }
13290|
13291|            // Supervisor/Gestor de Equipe sem equipe atribuída: ainda deve ver ocorrências onde ??
13292|            // pessoalmente gestor responsável ou pessoa envolvida (regra da planilha SSMA).
13293|            // Sem esse ajuste, memberIdsInTeams ficaria vazio e o filtro de manager_id/people_ids
13294|            // nunca passaria — o supervisor não veria nada, mesmo sendo o responsável da ocorrência.
13295|            if ($occurrenceTeamFilterIds === [] && ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor)) {
13296|                $selfMember = $this->getCurrentCompanyMember($company, $user);
13297|                $selfMemberId = (int) ($selfMember?->getId() ?? 0);
13298|                if ($selfMemberId > 0) {
13299|                    $memberIdsInTeams[$selfMemberId] = true;
13300|                }
13301|            }
13302|
13303|            // Ocorrências: por team_id direto OU por manager_id/people_ids/responsible_ids pertencente ?? equipe.
13304|            // Supervisor de Equipe deve ver ocorrências onde ?? gestor responsável ou pessoa envolvida,
13305|            // mesmo que o team_id da ocorrência não esteja preenchido ou difira do escopo.
13306|            $viewerMemberIdForCreated = (int) ($this->getCurrentCompanyMember($company, $user instanceof User ? $user : null)?->getId() ?? 0);
13307|            $occurrences = array_values(array_filter($occurrences, static function (array $o) use ($teamIdStr, $memberIdsInTeams, $viewerMemberIdForCreated): bool {
13308|                if (isset($o['team_id']) && $o['team_id'] !== null && in_array((string) $o['team_id'], $teamIdStr, true)) {
13309|                    return true;
13310|                }
13311|                if ($viewerMemberIdForCreated > 0 && (int) ($o['created_by_member_id'] ?? 0) === $viewerMemberIdForCreated) {
13312|                    return true;
13313|                }
13314|                $managerId = (int) ($o['manager_id'] ?? 0);
13315|                if ($managerId > 0 && isset($memberIdsInTeams[$managerId])) {
13316|                    return true;
13317|                }
13318|                $personId = (int) ($o['person_id'] ?? 0);
13319|                if ($personId > 0 && isset($memberIdsInTeams[$personId])) {
13320|                    return true;
13321|                }
13322|                foreach (array_merge((array) ($o['people_ids'] ?? []), (array) ($o['responsible_ids'] ?? [])) as $p) {
13323|                    if (isset($memberIdsInTeams[(int) $p])) {
13324|                        return true;
13325|                    }
13326|                }
13327|                return false;
13328|            }));
13329|
13330|            // Inspeções: por team_id
13331|            $inspections = array_values(array_filter($inspections, static function (array $i) use ($teamIdStr): bool {
13332|                $tid = $i['team_id'] ?? null;
13333|                return $tid !== null && $tid !== '' && in_array((string) $tid, $teamIdStr, true);
13334|            }));
13335|
13336|            // Abordagens: por observador pertencente ?? equipe
13337|            $abordagens = array_values(array_filter($abordagens, static function (array $ab) use ($memberIdsInTeams): bool {
13338|                $obsId = (int) ($ab['observador_id'] ?? 0);
13339|                return $obsId > 0 && isset($memberIdsInTeams[$obsId]);
13340|            }));
13341|
13342|            // Plano de Ação: ações em que pelo menos um responsável pertence ao escopo da equipe
13343|            // (não todas as ações das ocorrências visíveis da equipe).
13344|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $memberIdsInTeams);
13345|        }
13346|
13347|        if ($occurrenceAreaFilterIds !== null) {
13348|            $areaMemberIds = $areaScope->allowedMemberIds();
13349|            // Equipe com área fora do recorte esconde a inspeção mesmo com participante interno:
13350|            // é o que mantém a interseção quando team_limitation e area_limitation estão juntos.
13351|            $inspections = SsmaAreaLimitationScope::filterInspectionsForAreaScope(
13352|                $inspections,
13353|                $areaScope->allowedTeamIds(),
13354|                $areaMemberIds,
13355|                $areaScope->teamIdsWithoutArea()
13356|            );
13357|            $abordagens = SsmaAreaLimitationScope::filterAbordagensByMemberIds(
13358|                $abordagens,
13359|                $areaMemberIds
13360|            );
13361|            // Mesmo critério da limitação de equipe: plano de ação só com responsável no recorte.
13362|            $actionsTaken = $this->filterActionsByResponsibleMemberIds($actionsTaken, $areaMemberIds);
13363|        }
13364|
13365|        // Técnico especialista: filtra ocorrências pelos tipos que têm autorização técnica (SsmaPermissionTagMember).
13366|        // Inspeções/Abordagens/Ações não são filtradas por equipe; o técnico não tem equipe SSMA atribuída.
13367|        if ($isTechSpecialistOnly) {
13368|            $techTypesSet = array_flip($userTechnicalTypes);
13369|            $occurrences = array_values(array_filter(
13370|                $occurrences,
13371|                static fn (array $o): bool => isset($techTypesSet[$o['type_value'] ?? ''])
13372|            ));
13373|        }
13374|
13375|        // Filtro de membro (próprio conteúdo) apenas quando o usuário NÃO tem escopo de equipe.
13376|        // Supervisor/Gestor de Equipe já foram limitados pelo filtro de equipe acima — aplicar o
13377|        // filtro de membro sobre eles reduziria a visão incorretamente para só o próprio conteúdo.
13378|        $ssmaPreventionInspectionEnabled = true;
13379|        $ssmaPreventionAbordagemEnabled  = true;
13380|
13381|        // Abas Inspeção/Abordagem (ROLE_USER): só quando meta do kind > 0 (igual critério da tabela Metas).
13382|        // - Sem row (nunca adicionado ou removido com lixeira) → abas ocultas.
13383|        // - Meta = -1 (desligado para esse kind) → aba oculta.
13384|        // - Meta >= 0 (ligado, mesmo sem goal definido ainda) → aba visível.
13385|        // Supervisores/Gestores de Equipe e Gestor Administrador são excluídos desse controle: suas abas dependem de outras flags.
13386|        if ($company && $user instanceof User
13387|            && !$this->isGranted('ROLE_SUPER_ADMIN')
13388|            && !$this->isGranted('ROLE_MANAGER')
13389|            && !$this->isGranted('ROLE_MANAGER_GESTOR')) {
13390|            $memberForPreventionTabs = $this->getCurrentCompanyMember($company, $user);
13391|            $memberIdPreventionTabs = (int) ($memberForPreventionTabs?->getId() ?? 0);
13392|            if ($memberIdPreventionTabs > 0) {
13393|                $metaKeyTabs = self::PREVENCAO_MEMBER_META_PREFIX . $memberIdPreventionTabs;
13394|                $memberMetaRowTabs = $this->entityManager->getRepository(SsmaMeta::class)
13395|                    ->findOneBy(['company' => $company, 'teamName' => $metaKeyTabs]);
13396|                // Le os valores de meta da linha encontrada (null quando a linha nao existe).
13397|                // Aba visível quando o membro está na tabela (row existe) e esse kind não está desligado (-1).
13398|                // meta=0 (ligado sem goal definido) → aba visível; meta=-1 (desligado) → aba oculta.
13399|                $isMgmtPreventionProfile = $this->ssmaPreventionHubAccessService
13400|                    ->isManagementPreventionTag($ssmaPreventionProductTagName)
13401|                    || $this->ssmaPreventionHubAccessService->isManagementPreventionTag($ssmaProductTagName);
13402|                $isPlainPreventionMember = $this->ssmaPreventionHubAccessService
13403|                    ->isPlainPreventionMemberTag($ssmaPreventionProductTagName);
13404|
13405|                if ($isMgmtPreventionProfile) {
13406|                    // Supervisores e Gestores visualizam todos os kinds independente da meta individual.
13407|                    // O campo meta=-1 (desligado) serve para Membros; nao deve ocultar abas de gestao.
13408|                    $ssmaPreventionInspectionEnabled = true;
13409|                    $ssmaPreventionAbordagemEnabled = true;
13410|                } elseif ($isPlainPreventionMember) {
13411|                    if ($memberMetaRowTabs !== null) {
13412|                        $ssmaPreventionInspectionEnabled = $this->ssmaPreventionHubAccessService
13413|                            ->isPrevencaoMemberKindTabVisible($memberMetaRowTabs->getMetaInspecao());
13414|                        $ssmaPreventionAbordagemEnabled = $this->ssmaPreventionHubAccessService
13415|                            ->isPrevencaoMemberKindTabVisible($memberMetaRowTabs->getMetaAbordagem());
13416|                    } else {
13417|                        $ssmaPreventionInspectionEnabled = false;
13418|                        $ssmaPreventionAbordagemEnabled = false;
13419|                    }
13420|                }
13421|            } else {
13422|                // Membro não encontrado: oculta ambas as abas por segurança.
13423|                $ssmaPreventionInspectionEnabled = false;
13424|                $ssmaPreventionAbordagemEnabled  = false;
13425|            }
13426|        }
13427|
13428|        if ($company instanceof Company
13429|            && !$this->isGranted('ROLE_SUPER_ADMIN')
13430|            && !$this->isGranted('ROLE_MANAGER')
13431|            && !$this->isGranted('ROLE_MANAGER_GESTOR')
13432|            && !$this->ssmaPreventionHubAccessService->companyHasPreventionMetasBootstrap($company)) {
13433|            $ssmaPreventionInspectionEnabled = false;
13434|            $ssmaPreventionAbordagemEnabled = false;
13435|            $ssmaCanAccessPreventionPanelAndMetas = false;
13436|        }
13437|
13438|        // Colaborador com meta, supervisor ou perfil equivalente: registrar o próprio conteúdo.
13439|        // Gestor cria para outros; supervisor/membro só o próprio (ssmaPreventionMutateOwnOnly).
13440|        // Inclui Supervisor/Gestor de Área via canMutatePreventionContentForCurrentUser.
13441|        if ($company && $user instanceof User) {
13442|            $canMutateOwnInspection = $ssmaPreventionInspectionEnabled
13443|                && $this->canMutatePreventionContentForCurrentUser($company, $user, 'inspecao');
13444|            $canMutateOwnAbordagem = $ssmaPreventionAbordagemEnabled
13445|                && $this->canMutatePreventionContentForCurrentUser($company, $user, 'abordagem');
13446|
13447|            if ($canMutateOwnInspection || $canMutateOwnAbordagem) {
13448|                $ssmaCanCreatePreventionItems = true;
13449|                $ssmaCanEditPreventionContent = true;
13450|            }
13451|        }
13452|
13453|        if ($company && $user instanceof User
13454|            && $ssmaCanEditPreventionContent
13455|            && !$this->canManageAllPreventionContentForCurrentUser($company, $user)
13456|        ) {
13457|            $ssmaPreventionMutateOwnOnly = true;
13458|        }
13459|
13460|        $loggedPreventionMemberId = ($company && $user instanceof User)
13461|            ? (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0)
13462|            : 0;
13463|        $loggedPreventionUserId = $user instanceof User ? (int) $user->getId() : 0;
13464|        if ($ssmaCanEditPreventionContent) {
13465|            foreach ($inspections as $inspIdx => $inspRow) {
13466|                if (!is_array($inspRow)) {
13467|                    continue;
13468|                }
13469|                $inspections[$inspIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
13470|                    || $this->preventionArrayOwnedByMember($inspRow, $loggedPreventionMemberId, $loggedPreventionUserId);
13471|            }
13472|            foreach ($abordagens as $abIdx => $abRow) {
13473|                if (!is_array($abRow)) {
13474|                    continue;
13475|                }
13476|                $abordagens[$abIdx]['can_mutate'] = !$ssmaPreventionMutateOwnOnly
13477|                    || $this->preventionArrayOwnedByMember($abRow, $loggedPreventionMemberId, $loggedPreventionUserId);
13478|            }
13479|        }
13480|
13481|        if (!$this->canManageSsmaOccurrences()
13482|            && !$ssmaIsTagTeamSupervisor
13483|            && !$ssmaIsTagAreaSupervisor
13484|            && $ssmaProductTagName !== SsmaAreaLimitationScope::TAG_GESTOR_AREA
13485|            && !$this->memberIsSsmaGestorAdministrador($company && $user instanceof User ? $this->getCurrentCompanyMember($company, $user) : null)
13486|            && $occurrenceTeamFilterIds === null
13487|            && $occurrenceAreaFilterIds === null
13488|            && !$isTechSpecialistOnly) {
13489|            $currentMember = $this->getCurrentCompanyMember($company, $user);
13490|            $currentMemberId = $currentMember?->getId() ?? 0;
13491|
13492|            $occurrences = $this->filterOccurrencesForMember($occurrences, $currentMemberId, $company);
13493|            if ($company instanceof Company && $user instanceof User && $currentMemberId > 0) {
13494|                $occurrences = $this->appendMissingActionLinkedOccurrences(
13495|                    $occurrences,
13496|                    $currentMemberId,
13497|                    $company,
13498|                    $user
13499|                );
13500|                $occurrences = $this->appendOccurrencesCreatedByCurrentUser($occurrences, $company, $user);
13501|            }
13502|            $actionsTaken = $this->filterActionsForMember($actionsTaken, $occurrences, $currentMemberId);
13503|        } elseif ($company instanceof Company && $user instanceof User
13504|            && ($occurrenceTeamFilterIds !== null || $occurrenceAreaFilterIds !== null)
13505|        ) {
13506|            $occurrences = $this->appendOccurrencesCreatedByCurrentUser($occurrences, $company, $user);
13507|        }
13508|
13509|        // Membro/Inspetor (pessoa física): na Prevenção Ativa só vê inspeções/abordagens em que está relacionado.
13510|        // O filtro por equipe nas ocorrências não deve listar inspeções da equipe inteira para esses perfis.
13511|        // Aura/tenant/SUPER_ADMIN com tag Membro herdada NÃO entram aqui — senão o admin vê
13512|        // só o próprio conteúdo (ex.: 2 inspeções) enquanto o Gestor de Área vê o recorte da gerência (3).
13513|        if ($company && $user instanceof User && $ssmaIsPlainPreventionMember) {
13514|            $plainMemberId = (int) ($this->getCurrentCompanyMember($company, $user)?->getId() ?? 0);
13515|            $plainUserId = (int) $user->getId();
13516|            $inspections = array_values(array_filter(
13517|                $inspections,
13518|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
13519|            ));
13520|            $abordagens = array_values(array_filter(
13521|                $abordagens,
13522|                fn (array $row): bool => $this->preventionArrayOwnedByMember($row, $plainMemberId, $plainUserId)
13523|            ));
13524|        }
13525|
13526|        if ($needsPreventionCollections) {
13527|            [$metaFromStr, $metaToStr] = $this->getPrevencaoPeriodDateBounds($metasPeriod);
13528|            [$inspectionsForMetas, $abordagensForMetas] = $this->filterCollectionsForMetasRealizado(
13529|                $inspections,
13530|                $abordagens,

{"end_line": 11720, "file_path": "src/Controller/SsmaController.php", "start_line": 11590}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 11590-11720
11590|        }
11591|
11592|        $tagPm = $memberPm ? $this->resolveSsmaProductPermissionTagForMember($memberPm) : null;
11593|
11594|        if (!$this->canManageSsmaOccurrences() || $this->isSsmaViewer()) {
11595|            return false;
11596|        }
11597|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
11598|        $tagNameScoped = null;
11599|        if ($occurrenceTeamFilterIds !== null
11600|            && !$this->isGranted('ROLE_SUPER_ADMIN')
11601|            && !$this->isGranted('ROLE_MANAGER')) {
11602|            $memberScoped = $this->getCurrentCompanyMember($company, $user);
11603|            if ($memberScoped) {
11604|                $resolvedScoped = $this->resolveSsmaProductPermissionTagForMember($memberScoped);
11605|                $tagNameScoped = $resolvedScoped?->getName();
11606|            }
11607|        }
11608|        if ($tagNameScoped === 'Supervisor de Equipe' || $tagNameScoped === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA) {
11609|            return false;
11610|        }
11611|
11612|        return $tagPm && in_array($tagPm->getName(), ['Gestor de Equipe', SsmaAreaLimitationScope::TAG_GESTOR_AREA], true);
11613|    }
11614|
11615|    private function canEditSsmaHorasTrabalhadas(): bool
11616|    {
11617|        return $this->canManageSsmaOccurrences() || $this->getSsmaViewerTeamIds() !== null;
11618|    }
11619|
11620|    private function getCurrentCompanyMember(?Company $company, ?User $user): ?CompanyMembers
11621|    {
11622|        if (!$company || !$user) {
11623|            return null;
11624|        }
11625|
11626|        $repo = $this->entityManager->getRepository(CompanyMembers::class);
11627|        foreach ([false, 0] as $isRemovedValue) {
11628|            $member = $repo->findOneBy([
11629|                'company' => $company,
11630|                'user' => $user,
11631|                'isRemoved' => $isRemovedValue,
11632|            ]);
11633|            if ($member instanceof CompanyMembers) {
11634|                return $member;
11635|            }
11636|        }
11637|
11638|        foreach ($repo->findBy(['company' => $company, 'user' => $user]) as $candidate) {
11639|            if ($candidate instanceof CompanyMembers && (int) $candidate->getIsRemoved() !== 1) {
11640|                return $candidate;
11641|            }
11642|        }
11643|
11644|        return null;
11645|    }
11646|
11647|    private function isActiveCompanyMemberForCompany(?CompanyMembers $member, Company $company): bool
11648|    {
11649|        return $member instanceof CompanyMembers
11650|            && $member->getCompany()?->getId() === $company->getId()
11651|            && (int) $member->getIsRemoved() !== 1;
11652|    }
11653|
11654|  /** @var array<string, true>|null */
11655|    private ?array $occurrenceActionLinkVisibilityCache = null;
11656|
11657|    /** @var array<int, bool> */
11658|    private array $memberIsSsmaGestorAdministradorCache = [];
11659|
11660|    /** @var array<string, int|null> */
11661|    private array $ssmaMemberIdByUserIdCache = [];
11662|
11663|    /** @var array<int, true>|null */
11664|    private ?array $ssmaImmediateLeaderMemberIdsCache = null;
11665|
11666|    private bool $ssmaOccurrencesProductForPermissionResolved = false;
11667|
11668|    private ?\App\Entity\Product $ssmaOccurrencesProductForPermissionCache = null;
11669|
11670|    private function isOccurrenceVisibleToMember(array $occurrence, int $memberId, ?Company $company = null): bool
11671|    {
11672|        if ($memberId <= 0) {
11673|            return false;
11674|        }
11675|
11676|        if ((int) ($occurrence['manager_id'] ?? 0) === $memberId) {
11677|            return true;
11678|        }
11679|
11680|        $createdByMemberId = (int) ($occurrence['created_by_member_id'] ?? 0);
11681|        if ($createdByMemberId <= 0 && $company instanceof Company) {
11682|            $createdByUserId = (int) ($occurrence['created_by_id'] ?? 0);
11683|            if ($createdByUserId > 0) {
11684|                $createdByMemberId = (int) ($this->resolveCompanyMemberIdByUserId($company, $createdByUserId) ?? 0);
11685|            }
11686|        }
11687|        if ($createdByMemberId > 0 && $createdByMemberId === $memberId) {
11688|            return true;
11689|        }
11690|
11691|        if ((int) ($occurrence['person_id'] ?? 0) === $memberId) {
11692|            return true;
11693|        }
11694|
11695|        foreach (['people_ids', 'responsible_ids'] as $field) {
11696|            foreach ((array) ($occurrence[$field] ?? []) as $id) {
11697|                if ((int) $id === $memberId) {
11698|                    return true;
11699|                }
11700|            }
11701|        }
11702|
11703|        if ($company instanceof Company && $this->isOccurrenceVisibleViaActionLink($occurrence, $memberId, $company)) {
11704|            return true;
11705|        }
11706|
11707|        return false;
11708|    }
11709|
11710|    /**
11711|     * Executor ou validador de ação vinculada à ocorrência/evento pode abrir o detalhe em leitura.
11712|     *
11713|     * @return array<string, true> chaves "occ_{id}" ou "event_{id}"
11714|     */
11715|    private function getOccurrenceActionLinkVisibilityKeys(int $memberId, Company $company): array
11716|    {
11717|        if ($memberId <= 0) {
11718|            return [];
11719|        }
11720|

{"search_text": "_modal_event.html.twig"}

File: .opencodereview/rule.json
Match lines: 2
86|      "path": "templates/ssma/occurrence/partials/_modal_event.html.twig",
96|      "path": "templates/ssma/occurrence/partials/_modal_event.html.twig",

File: .opencodereview/rules/ssma/occurrence-descaracter-suspeita-card.md
Match lines: 1
6|- `templates/ssma/occurrence/partials/_modal_event.html.twig` — `evSyncDescaracterStageUi`, `evCreateInjuredPersonCard`, `evRenderInjuredPersonBoxes`, CSS `.ev-inj-descaracter*`

File: .opencodereview/rules/ssma/occurrence-ros-aprofundamento-readonly.md
Match lines: 2
7|- `templates/ssma/occurrence/partials/_modal_event.html.twig` — `EvModal.openAprofundamento`, `evAprofundamentoCanEditFromServer`, `evCanEditAprofundamento`, `evSetAprofundamentoReadonly`
35|**Modal (`_modal_event.html.twig`):**

File: CONFLITOS_REAIS_DYNAMIC_COLOR_ICONS.md
Match lines: 1
152|- `templates/ssma/occurrence/partials/_modal_event.html.twig` ✅

File: docs/engineering/pr/feature-ssma-ocorrencia-correcoes-new-production/PR_descricao_feature-ssma-ocorrencia-correcoes-new-production.md
Match lines: 1
29|- `occurrence_view.html.twig`, `_tab_occurrences.html.twig`, `_modal_event.html.twig` — Readequação, validação, suspeita/caracterizar só para médico (`.is-doctor-aprof`), Reprovar com cor da plataforma

File: docs/engineering/pr/homolog/PR_arquivos_homolog.txt
Match lines: 1
71|M	templates/ssma/occurrence/partials/_modal_event.html.twig

File: docs/engineering/pr/homolog/PR_impacto_homolog.txt
Match lines: 1
71| .../occurrence/partials/_modal_event.html.twig     |  54 +++-

File: docs/engineering/pr/hotfix-ssma-ambiental-material-brenda-new-production/PR_descricao_hotfix-ssma-ambiental-material-brenda-new-production.md
Match lines: 2
41|- Formulário compartilhado `_modal_event.html.twig` — listagem e detalhe.
84|| `_modal_event.html.twig` | AA nativo, barreiras, consequências, AP, ROS/QA, exclusão envolvido/testemunha |

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_arquivos_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
225|M	templates/ssma/occurrence/partials/_modal_event.html.twig

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_descricao_hotfix-ssma-ap-validacao-etapa1-new-production.md
Match lines: 1
45|| `_modal_event.html.twig` | Etapa 1 não envia campos técnicos para Membro; botão **Registrar**; validação só do passo ativo; labels humanizadas nos toasts |

File: docs/engineering/pr/hotfix-ssma-ap-validacao-etapa1-new-production/PR_impacto_hotfix-ssma-ap-validacao-etapa1-new-production.txt
Match lines: 1
225| .../occurrence/partials/_modal_event.html.twig     | 1821 ++++++++----

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_arquivos_hotfix-ssma-occ-type-perms-datatables-new-production.txt
Match lines: 1
7|M	templates/ssma/occurrence/partials/_modal_event.html.twig

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_descricao_hotfix-ssma-occ-type-perms-datatables-new-production.md
Match lines: 2
36|- Formulário compartilhado `_modal_event.html.twig` (create/update de ocorrências e aprofundamento).
93|| `templates/ssma/occurrence/partials/_modal_event.html.twig` | `EvModal.openAprofundamento`, botões rascunho/finalizar, payload `aprofundamento_only` |

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_impacto_hotfix-ssma-occ-type-perms-datatables-new-production.txt
Match lines: 1
7| .../occurrence/partials/_modal_event.html.twig     | 146 ++++++-

File: docs/engineering/pr/hotfix-ssma-ros-barrier-type-422/PR_descricao_hotfix-ssma-ros-barrier-type-422.md
Match lines: 1
50|| Flash report | `occurrence_view.html.twig`, `_modal_event.html.twig`, `_tab_config.html.twig`, `new_automation.html.twig` |

File: docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_arquivos_hotfix-ssma-ux-pos-merge-231-new-production.txt
Match lines: 1
7|M	templates/ssma/occurrence/partials/_modal_event.html.twig

File: docs/engineering/pr/hotfix-ssma-ux-pos-merge-231-new-production/PR_impacto_hotfix-ssma-ux-pos-merge-231-new-production.txt
Match lines: 1
7| .../occurrence/partials/_modal_event.html.twig     |  35 +-

File: docs/engineering/pr/new_staging2/PR_arquivos_new_staging2.txt
Match lines: 1
1631|M	templates/ssma/occurrence/partials/_modal_event.html.twig

File: docs/engineering/pr/new_staging2/PR_impacto_new_staging2.txt
Match lines: 1
1631| .../occurrence/partials/_modal_event.html.twig     |  162 +-

File: docs/logs/engineering/frontend_console_inventory.md
Match lines: 1
794|| templates/ssma/occurrence/partials/_modal_event.html.twig | templates | nao | 2 | 0 | 2 | 0 | 0 | 0 | 0 |

File: docs/pr-hotfix-ssma-ap-parte-medica-new-production.md
Match lines: 1
25|| Alterado | `templates/ssma/occurrence/partials/_modal_event.html.twig` |

File: docs/ssma/ALINHAMENTO-TITULO-OPCIONAL-E-MEMBROS-SEM-ADMIN.md
Match lines: 2
229|- UI: `_modal_event.html.twig` — esconder `#ev-gravity-wrap` nos tipos com `#ev_consequence`; mostrar badge/read-only de gravidade no bloco de classificação técnica.
269|- UI: `_modal_event.html.twig` — opções de `#ev_work_leave` + filtro/auto-select do select de classificação ao mudar afastamento.

File: docs/ssma/CORRECOES-FECHAMENTO-FIGMA-PENDENTES.md
Match lines: 3
38|**Onde:** `templates/ssma/occurrence/partials/_modal_event.html.twig` (`ev_datetime`, `evDefaultDatetimeToday`).
95|| 3 | `_modal_event.html.twig` |
97|| 5 | `_modal_event.html.twig`, `SsmaController.php`, `SsmaEventValidator.php` |

File: docs/ssma/CORRECOES-OCORRENCIA-FIGMA-PARTE-2.md
Match lines: 1
46|- UI: `_modal_event.html.twig` / `_modal_occurrence.html.twig` (`SSMA_IS_AURA_ADMIN`, hide na criação).

File: docs/ssma/PAINEL-OCORRENCIAS-INDICADORES-PLANO.md
Match lines: 1
377|| Classificação FAC/LTI/RWC/MTC | `_modal_event.html.twig` → `#ev_injury_classification`; persistido em `SsmaEvent.details.injury_classification` |

File: docs/ssma/PRODUTO_SSMA_MAPA_COMPLETO.md
Match lines: 2
199|3. No offcanvas **Evento SSMA** (`_modal_event.html.twig`): escolher tipo (ROS, Quase acidente, Acidente pessoal/material/ambiental).
219|| Criar/editar evento | `_modal_event.html.twig` |

File: docs/ssma/engineering/ssma-permissoes-ocorrencia-auditoria-2026-09.md
Match lines: 1
226|`_modal_event.html.twig` / JS do modal antes de mudar o código de resposta.

File: docs/ssma/ocorrencia-01-colab-acidentado-pessoas-envolvidas.md
Match lines: 1
21|| Filtro do select | `evFilterInjuredPersonSelect()` em `_modal_event.html.twig` |

File: templates/ssma/occurrence/index.html.twig
Match lines: 1
114|    {% include 'ssma/occurrence/partials/_modal_event.html.twig' with {

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 1
1313|    {% include 'ssma/occurrence/partials/_modal_event.html.twig' with {

File: templates/ssma/occurrence/partials/_modal_occurrence.html.twig
Match lines: 1
2|{# Modal legado (listagem/detalhe). Fluxo principal de registro: _modal_event.html.twig (offcanvas tipado). #}

File: templates/ssma/occurrence/tabs/_tab_occurrences.html.twig
Match lines: 1
1891|    // ── Open "Nova ocorrência" offcanvas (implementação em _modal_event.html.twig) ──

File: templates/ssma/partials/_ssma_body_map_entry.html.twig
Match lines: 1
9|  - occurrence/partials/_modal_event.html.twig  → Novo evento / edição

File: tests/Ssma/ValidateLocalFixesTest.php
Match lines: 2
18| *   2. _modal_event.html.twig       — todos os <option value> batem com EnvironmentalMediumEnum
87|        // Exatamente as <option value="..."> de _modal_event.html.twig para ACIDENTE_AMBIENTAL

File: tests/Unit/Product/Ssma/SsmaBodyMapEntryRegressionTest.php
Match lines: 1
46|        $modal = $this->read('templates/ssma/occurrence/partials/_modal_event.html.twig');

File: tests/Unit/Product/Ssma/assert_branch_ui_fixes.php
Match lines: 2
40|$modal = $root . '/templates/ssma/occurrence/partials/_modal_event.html.twig';
201|$modalEvent = $root . '/templates/ssma/occurrence/partials/_modal_event.html.twig';

File: tests/Unit/Product/Ssma/assert_flash_report_flow.php
Match lines: 1
140|$modalEvent = $root . '/templates/ssma/occurrence/partials/_modal_event.html.twig';

{"search_text": "ssma_can_change_event_manager"}

File: src/Controller/SsmaController.php
Match lines: 1
13680|                'ssma_can_change_event_manager' => $ssmaCanChangeEventManager,

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 4
50|        {% set ssmaCanChangeEventManager = ssma_can_change_event_manager|default(false) or ssmaIsTenantAdminUser %}
56|        window.SSMA_CAN_CHANGE_EVENT_MANAGER = {{ ssmaCanChangeEventManager ? 'true' : 'false' }};
4312|        if (typeof shared.initSearchableMemberField === 'function' && window.SSMA_CAN_CHANGE_EVENT_MANAGER) {
5255|        var canChange = !!window.SSMA_CAN_CHANGE_EVENT_MANAGER;

{"file_path": "templates/ssma/occurrence/occurrence_view.html.twig", "start_line": 1290, "end_line": 1360}

File: templates/ssma/occurrence/occurrence_view.html.twig (Total lines: 3231)
IS_TRUNCATED: false
LINE_RANGE: 1290-1360
1290|            deadline: '__ACTION_DEADLINE__',
1291|            solved: false,
1292|            has_project: false,
1293|            project_url: '',
1294|            project_start_date: '',
1295|            project_priority: '',
1296|            responsible_ids: []
1297|        },
1298|        responsible_members: []
1299|    } only %}
1300|</template>
1301|{% include 'ssma/partials/_modal_action.html.twig' with {
1302|    occurrences: occurrences,
1303|    allMembers: allMembers
1304|} %}
1305|{% include 'ssma/partials/_modal_action_resolution.html.twig' %}
1306|{% include 'ssma/partials/_modal_delete_confirm.html.twig' %}
1307|
1308|{# Offcanvas de edição / aprofundamento — disponível também para especialistas técnicos. #}
1309|{% if can_edit_occurrence|default(false) or show_aprofundamento_btn|default(false) %}
1310|    {% set _membersForModal  = ssma_apply_team_event_scope|default(false) ? all_members_for_event_people|default([]) : allMembers|default([]) %}
1311|    {% set _gestoresForModal = gestores_for_event_modal|default(gestores|default([])) %}
1312|    {% set _teamsForModal    = teams_for_event_modal|default(teams|default([])) %}
1313|    {% include 'ssma/occurrence/partials/_modal_event.html.twig' with {
1314|        allMembers: _membersForModal,
1315|        allMembersForMeta: allMembers|default([]),
1316|        gestores: _gestoresForModal,
1317|        teams: _teamsForModal,
1318|        occurrence_type_config: occurrence_type_config|default({ types: [] }),
1319|        ssma_event_form_defaults: ssma_event_form_defaults|default({}),
1320|        user_technical_types: user_technical_types|default([]),
1321|        ssmaCanManageOccurrences: ssmaCanManageOccurrences|default(false),
1322|        ssma_hide_event_title_status_on_create: ssma_hide_event_title_status_on_create|default(false),
1323|        ssmaCanRegisterNewOccurrence: ssmaCanRegisterNewOccurrence|default(false),
1324|        ssmaAllowedCreateTypes: ssmaAllowedCreateTypes|default([]),
1325|        ssmaCanDescharacterizeByType: ssmaCanDescharacterizeByType|default({})
1326|    } %}
1327|    {% if can_edit_occurrence|default(false) %}
1328|    {% include 'ssma/occurrence/partials/_modal_occurrence.html.twig' %}
1329|    {% endif %}
1330|{% endif %}
1331|
1332|{# Modal: vincular ação a um plano de ação (detalhe da ocorrência). IDs com prefixo ssmaOccView* para não colidir com #ssmaLinkProjectModal da aba Plano de Ação. #}
1333|<div class="modal fade" id="ssmaOccViewLinkProjectModal" tabindex="-1" role="dialog" aria-labelledby="ssmaOccViewLinkProjectModalLabel" aria-hidden="true">
1334|    <div class="modal-dialog modal-dialog-centered" role="document">
1335|        <div class="modal-content">
1336|            <div class="modal-header">
1337|                <h5 class="modal-title" id="ssmaOccViewLinkProjectModalLabel">
1338|                    <i class="fas fa-link mr-2"></i>Vincular a um plano de ação
1339|                </h5>
1340|                <button type="button" class="close" data-dismiss="modal" aria-label="Fechar">
1341|                    <span aria-hidden="true">&times;</span>
1342|                </button>
1343|            </div>
1344|            <div class="modal-body">
1345|                <div id="ssmaOccViewLinkProjectLoadingState" class="text-center py-3" style="display:none;">
1346|                    <i class="fas fa-spinner fa-spin mr-1"></i> Carregando planos...
1347|                </div>
1348|                <div id="ssmaOccViewLinkProjectContent">
1349|                    <div class="form-group mb-0">
1350|                        <label for="ssmaOccViewLinkProjectSelect">Plano de ação <span class="text-danger">*</span></label>
1351|                        <select class="form-control" id="ssmaOccViewLinkProjectSelect">
1352|                            <option value="" disabled selected>Selecione um plano de ação</option>
1353|                        </select>
1354|                        <small class="text-muted mt-1 d-block">A ação será vinculada ao plano selecionado.</small>
1355|                    </div>
1356|                </div>
1357|            </div>
1358|            <div class="modal-footer">
1359|                <button type="button" class="btn btn-default" data-dismiss="modal">Cancelar</button>
1360|                <button type="button" class="btn btn-primary" id="ssmaOccViewLinkProjectConfirmBtn">

{"file_path": "templates/ssma/occurrence/index.html.twig", "start_line": 90, "end_line": 140}

File: templates/ssma/occurrence/index.html.twig (Total lines: 135)
IS_TRUNCATED: false
LINE_RANGE: 90-135
90|        {% include 'ssma/occurrence/tabs/_tab_config.html.twig' with {
91|            occurrence_type_config: occurrence_type_config|default({ types: [] })
92|        } %}
93|    </div>
94|    {% endif %}
95|
96|    {% if ssmaCanManagePermissions|default(false) %}
97|    <div id="tab_oc_permissao_content" class="tab-panel" style="display:none;">
98|        {% include 'ssma/partials/_tab_permissions.html.twig' %}
99|    </div>
100|    {% endif %}
101|
102|    {% include 'ssma/partials/_modal_action.html.twig' with {
103|        occurrences: occurrences|default([]),
104|        allMembers: allMembers|default([]),
105|        action_type_config: action_type_config|default({ types: [] })
106|    } %}
107|    {% include 'ssma/partials/_modal_delete_confirm.html.twig' %}
108|
109|    {# Modais no fim do section — evita espaço fantasma acima do .modern-header sticky #}
110|    {% set _membersForModal  = ssma_apply_team_event_scope|default(false) ? all_members_for_event_people|default([]) : allMembers|default([]) %}
111|    {% set _gestoresForModal = gestores_for_event_modal|default(gestores|default([])) %}
112|    {% set _teamsForModal    = teams_for_event_modal|default(teams|default([])) %}
113|    {% include 'ssma/occurrence/partials/_modal_classify.html.twig' %}
114|    {% include 'ssma/occurrence/partials/_modal_event.html.twig' with {
115|        allMembers: _membersForModal,
116|        allMembersForMeta: allMembers|default([]),
117|        gestores: _gestoresForModal,
118|        teams: _teamsForModal,
119|        occurrence_type_config: occurrence_type_config|default({ types: [] }),
120|        ssma_event_form_defaults: ssma_event_form_defaults|default({}),
121|        user_technical_types: user_technical_types|default([]),
122|        ssmaCanManageOccurrences: ssmaCanManageOccurrences|default(false),
123|        ssma_hide_event_title_status_on_create: ssma_hide_event_title_status_on_create|default(false),
124|        ssmaCanRegisterNewOccurrence: ssmaCanRegisterNewOccurrence|default(false),
125|        ssmaAllowedCreateTypes: ssmaAllowedCreateTypes|default([]),
126|        ssmaCanDescharacterizeByType: ssmaCanDescharacterizeByType|default({})
127|    } %}
128|</section>
129|{% endblock %}
130|
131|{% block javascripts %}
132|{{ parent() }}
133|{# Botões "+ Evento" / "+ ROS": handler em _tab_occurrences e _modal_event — abre offcanvas tipado #}
134|{% endblock %}
135|

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "gestores_for_event_modal"}

File: src/Controller/SsmaController.php
Match lines: 1
13667|                'gestores_for_event_modal' => $gestoresForEventModal,

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "occurrence_view.html.twig"}

File: src/Controller/SsmaController.php
Match lines: 1
3519|        return $this->render('ssma/occurrence/occurrence_view.html.twig', array_merge($viewData, [

{"end_line": 3580, "file_path": "src/Controller/SsmaController.php", "start_line": 3260}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 3260-3580
3260|     */
3261|    private function recalcularStatusRequisito(GovernanceAuthorizationCollaborator $vinculo): void
3262|    {
3263|        $aut       = $vinculo->getGovernanceAuthorization();
3264|        $requisitos = $aut?->getRequisitosList() ?? [];
3265|
3266|        if ($aut && $requisitos !== []) {
3267|            // Verifica se a própria autorização está vencida
3268|            $validadeStr = $aut->getValidade();
3269|            if ($validadeStr) {
3270|                if (preg_match('/^\\d{4}-\\d{2}-\\d{2}$/', $validadeStr)) {
3271|                    try {
3272|                        $valDate = new \DateTime($validadeStr);
3273|                        $valDate->setTime(0, 0, 0);
3274|                        if ($valDate < new \DateTime('today')) {
3275|                            $vinculo->setStatusRequisito('expirado');
3276|                            return;
3277|                        }
3278|                    } catch (\Throwable) {
3279|                    }
3280|                } elseif (ctype_digit($validadeStr)) {
3281|                    $dias = (int) $validadeStr;
3282|                    $emitida = $aut->getEmitida();
3283|                    if ($dias > 0 && $emitida !== null) {
3284|                        $expira = (clone \DateTime::createFromInterface($emitida))->modify('+' . $dias . ' days');
3285|                        $expira->setTime(0, 0, 0);
3286|                        if ($expira < new \DateTime('today')) {
3287|                            $vinculo->setStatusRequisito('expirado');
3288|                            return;
3289|                        }
3290|                    }
3291|                }
3292|            }
3293|
3294|            $today     = new \DateTimeImmutable('today');
3295|            $aprovados = [];
3296|            foreach ($vinculo->getDocumentos() as $d) {
3297|                if ($d->getStatus() !== SsmaAutorizacaoDocumento::STATUS_APROVADO) {
3298|                    continue;
3299|                }
3300|                $val = $d->getValidadeDocumento();
3301|                // Documento aprovado só conta se não houver validade ou validade >= hoje
3302|                if ($val === null || \DateTimeImmutable::createFromInterface($val) >= $today) {
3303|                    $aprovados[$d->getRequisitoLabel()] = true;
3304|                }
3305|            }
3306|
3307|            $todos = count(array_intersect_key(array_flip($requisitos), $aprovados)) === count($requisitos);
3308|            $vinculo->setStatusRequisito($todos ? 'valido' : 'pendente');
3309|        }
3310|    }
3311|
3312|    public function viewOccurrence(Request $request, int $id): Response
3313|    {
3314|        if (!$this->canEnterSsmaOperationalArea()) {
3315|            throw $this->createAccessDeniedException('Sem permissão para acessar esta ocorrência.');
3316|        }
3317|
3318|        $viewData = $this->buildSsmaViewData([
3319|            'occurrence_id' => $id,
3320|            'occurrence_kind' => $request->query->get('kind'),
3321|        ]);
3322|        $occurrence = null;
3323|        $occurrenceActions = [];
3324|        $actionTypeLabels = $viewData['action_type_labels'] ?? [];
3325|
3326|        $matching = [];
3327|        foreach ($viewData['occurrences'] as $item) {
3328|            if ((int) ($item['id'] ?? 0) === $id) {
3329|                $matching[] = $item;
3330|            }
3331|        }
3332|
3333|        if ($matching === []) {
3334|            $userForStakeholder = $this->getUser();
3335|            $companyForStakeholder = $userForStakeholder instanceof User ? $userForStakeholder->getCompany() : null;
3336|            $stakeholderRow = ($companyForStakeholder instanceof Company && $userForStakeholder instanceof User)
3337|                ? $this->tryLoadOccurrenceViewRowForActionStakeholder(
3338|                    $id,
3339|                    $request->query->get('kind'),
3340|                    $companyForStakeholder,
3341|                    $userForStakeholder
3342|                )
3343|                : null;
3344|            if ($stakeholderRow !== null) {
3345|                $matching = [$stakeholderRow];
3346|            }
3347|        }
3348|
3349|        if ($matching === []) {
3350|            $approverUser = $this->getUser();
3351|            $approverCompany = $approverUser instanceof User ? $approverUser->getCompany() : null;
3352|            if (
3353|                $approverCompany instanceof Company
3354|                && $approverUser instanceof User
3355|                && $this->canApproveSsmaOccurrence($approverCompany, $approverUser)
3356|            ) {
3357|                foreach ($this->loadOccurrenceListRowsForDetailView(
3358|                    $approverCompany,
3359|                    $id,
3360|                    $viewData['allMembers'] ?? [],
3361|                    $viewData['teams'] ?? []
3362|                ) as $item) {
3363|                    if ((int) ($item['id'] ?? 0) === $id) {
3364|                        $matching[] = $item;
3365|                    }
3366|                }
3367|            }
3368|        }
3369|
3370|        if ($matching === []) {
3371|            $this->addFlash('warning', 'Ocorrência não encontrada.');
3372|
3373|            return $this->redirectToRoute('ssma_ocorrencia_index');
3374|        }
3375|
3376|        $kind = $request->query->get('kind');
3377|        if ($kind === 'event') {
3378|            foreach ($matching as $item) {
3379|                if (($item['is_ssma_event'] ?? false) === true) {
3380|                $occurrence = $item;
3381|                break;
3382|            }
3383|        }
3384|            if ($occurrence === null) {
3385|                $this->addFlash('warning', 'Registro não encontrado.');
3386|
3387|                return $this->redirectToRoute('ssma_ocorrencia_index');
3388|            }
3389|        } else {
3390|            foreach ($matching as $item) {
3391|                if (!($item['is_ssma_event'] ?? false)) {
3392|                    $occurrence = $item;
3393|                    break;
3394|                }
3395|            }
3396|            if ($occurrence === null) {
3397|                $occurrence = $matching[0];
3398|            }
3399|        }
3400|
3401|        $isSsmaEventRow = (bool) ($occurrence['is_ssma_event'] ?? false);
3402|        $user    = $this->getUser();
3403|        $company = $user instanceof User ? $user->getCompany() : null;
3404|        $this->maybeAutoFinalizeOccurrenceRowIfAllActionsClosed($occurrence, $company);
3405|        $this->syncOccurrenceRowStatusFromDatabase($occurrence, $company);
3406|
3407|        $today = new \DateTimeImmutable('today');
3408|        foreach ($viewData['actions_taken'] as $actionItem) {
3409|            if ($isSsmaEventRow) {
3410|                if ((int) ($actionItem['event_id'] ?? 0) !== $id) {
3411|                    continue;
3412|                }
3413|            } elseif ((int) ($actionItem['occurrence_id'] ?? 0) !== $id) {
3414|                continue;
3415|            }
3416|            $occurrenceActions[] = $this->enrichOccurrenceViewActionCard($actionItem, $actionTypeLabels, $today);
3417|        }
3418|
3419|        $history = $occurrence['history'] ?? [];
3420|        if (($occurrence['is_ssma_event'] ?? false) === true) {
3421|            $eventEntity = $this->entityManager->getRepository(SsmaEvent::class)->find($id);
3422|            if ($eventEntity instanceof SsmaEvent && $company && $eventEntity->getCompany()->getId() === $company->getId()) {
3423|                foreach ($eventEntity->getHistory() as $hItem) {
3424|                    if (is_array($hItem)) {
3425|                        $history[] = $hItem;
3426|                    }
3427|                }
3428|            }
3429|        } else {
3430|            // Mescla o changelog de auditoria (tipo, gravidade) armazenado em details
3431|            $occurrenceEntity = $this->entityManager->getRepository(SsmaOccurrence::class)->find($id);
3432|            if ($occurrenceEntity instanceof SsmaOccurrence) {
3433|                $changelog = $occurrenceEntity->getDetails()['changelog'] ?? [];
3434|                foreach ($changelog as $cItem) {
3435|                    if (is_array($cItem) && isset($cItem['message'])) {
3436|                        $history[] = $cItem;
3437|                    }
3438|                }
3439|            }
3440|        }
3441|        foreach ($occurrenceActions as $actionItem) {
3442|            $createdAt = (string) ($actionItem['created_at'] ?? '');
3443|            $title = trim((string) ($actionItem['title'] ?? ''));
3444|            if ($createdAt !== '' && $title !== '') {
3445|                $history[] = [
3446|                    'date' => (new \DateTimeImmutable($createdAt))->format('d/m/Y'),
3447|                    'label' => 'Ação criada: ' . $title,
3448|                ];
3449|            }
3450|        }
3451|        // Ordena do mais recente para o mais antigo (data mais recente no topo do histórico).
3452|        usort($history, function (array $a, array $b): int {
3453|            return $this->occurrenceHistoryEntryTimestamp($b) <=> $this->occurrenceHistoryEntryTimestamp($a);
3454|        });
3455|        $occurrence['history'] = $history;
3456|
3457|        $occurrence = $this->filterOccurrenceEvidencesForCurrentUser($occurrence, false);
3458|
3459|        $occurrence = $this->enrichOccurrenceEvidencesForView($occurrence);
3460|
3461|        if (($occurrence['is_ssma_event'] ?? false) === true && $company instanceof Company) {
3462|            $eventEntity = $this->entityManager->getRepository(SsmaEvent::class)->find($id);
3463|            if ($eventEntity instanceof SsmaEvent && $eventEntity->getCompany()->getId() === $company->getId()) {
3464|                $flash = $eventEntity->getDetails()['flash_report'] ?? [];
3465|                $occurrence['flash_report'] = is_array($flash) ? $flash : [];
3466|                if ($user instanceof User) {
3467|                    $this->maybeSubmitOccurrenceForValidation($eventEntity, $company, $user);
3468|                }
3469|                $occurrence['occurrence_approval'] = $this->ssmaOccurrenceApprovalService->getState($eventEntity);
3470|                $details = $eventEntity->getDetails();
3471|                if (is_array($details)) {
3472|                    $occurrence['work_leave'] = (string) ($details['work_leave'] ?? $occurrence['work_leave'] ?? '');
3473|                    $occurrence['injury_classification'] = (string) ($details['injury_classification'] ?? $occurrence['injury_classification'] ?? '');
3474|                }
3475|            }
3476|        }
3477|
3478|        $occurrence['work_leave_label'] = $this->ssmaReportWorkLeaveLabel($occurrence['work_leave'] ?? '');
3479|        $occurrence['injury_classification_label'] = $this->ssmaReportInjuryClassificationLabel(
3480|            (string) ($occurrence['injury_classification'] ?? '')
3481|        );
3482|        // Mesma escala do formulário (Leve/Baixo/Médio/Alto/Severo) — não o slug 4 níveis (grave).
3483|        $occurrence['gravity_label'] = $this->resolveSsmaOccurrenceGravityLabel($occurrence);
3484|        $potSevRaw = trim((string) ($occurrence['potential_severity'] ?? ''));
3485|        if ($potSevRaw !== '') {
3486|            $occurrence['potential_severity_label'] = $this->ssmaReportPotentialSeverityLabel($potSevRaw);
3487|        }
3488|
3489|        $canSubmitFlashReport = false;
3490|        $canDirectSendFlashReport = false;
3491|        if (($occurrence['is_ssma_event'] ?? false) === true && $company instanceof Company && $user instanceof User) {
3492|            $flashPerms = $this->resolveSsmaFlashReportUiPermissions(
3493|                $company,
3494|                $user,
3495|                [],
3496|                (bool) ($viewData['ssma_is_gestor_user'] ?? false)
3497|            );
3498|            $canSubmitFlashReport = $flashPerms['can_submit'];
3499|            $canDirectSendFlashReport = $flashPerms['can_direct_send'];
3500|        }
3501|
3502|        // Responsável da área / do local (mapa location_responsibles + fallback CompanyArea por nome).
3503|        if ($company instanceof Company) {
3504|            $occurrence = $this->enrichOccurrenceAreaResponsible($occurrence, $company, $viewData['allMembers'] ?? []);
3505|        }
3506|
3507|        // Cards de aprofundamento técnico do tipo (ROS / Quase Acidente / acidentes).
3508|        $occurrenceTypeKey = (string) ($occurrence['type_value'] ?? '');
3509|        $occurrenceTechTags = [];
3510|        foreach ($viewData['ssma_perm_tags'] ?? [] as $tagRow) {
3511|            if (!is_array($tagRow)) {
3512|                continue;
3513|            }
3514|            if ((string) ($tagRow['occurrence_type_key'] ?? '') === $occurrenceTypeKey) {
3515|                $occurrenceTechTags[] = $tagRow;
3516|            }
3517|        }
3518|
3519|        return $this->render('ssma/occurrence/occurrence_view.html.twig', array_merge($viewData, [
3520|            'occurrence'         => $occurrence,
3521|            'occurrence_actions' => $occurrenceActions,
3522|            'occurrence_tech_tags' => $occurrenceTechTags,
3523|            'ros_call_priority'  => $viewData['ros_call_priority']
3524|                ?? \App\Service\Ssma\SsmaOccurrenceTypeConfigService::ROS_CALL_PRIORITY_LOCATION_DIRECT,
3525|            'can_aprofundamento' => $this->resolveOccurrenceViewAprofundamentoFlags(
3526|                $occurrence,
3527|                $company,
3528|                $user instanceof User ? $user : null
3529|            ),
3530|            'can_submit_flash_report' => $canSubmitFlashReport,
3531|            'can_direct_send_flash_report' => $canDirectSendFlashReport,
3532|            'can_approve_occurrence' => $this->canApproveSsmaOccurrence($company, $user instanceof User ? $user : null)
3533|                && ($occurrence['is_ssma_event'] ?? false) === true,
3534|            'ssma_flash_report_lazy' => ($occurrence['is_ssma_event'] ?? false) === true,
3535|        ]));
3536|    }
3537|
3538|    /**
3539|     * Flags do botão +Aprofundamento na view da ocorrência.
3540|     *
3541|     * @param array<string, mixed> $occurrence
3542|     *
3543|     * @return array{
3544|     *   show: bool,
3545|     *   pending: bool,
3546|     *   finalized: bool,
3547|     *   can_edit: bool,
3548|     *   is_admin: bool,
3549|     *   validation_ready: bool
3550|     * }
3551|     */
3552|    private function resolveOccurrenceViewAprofundamentoFlags(
3553|        array $occurrence,
3554|        ?Company $company,
3555|        ?User $user
3556|    ): array {
3557|        $empty = [
3558|            'show' => false,
3559|            'pending' => false,
3560|            'finalized' => false,
3561|            'can_edit' => false,
3562|            'is_admin' => false,
3563|            'validation_ready' => true,
3564|        ];
3565|        if (!$company || !$user || empty($occurrence['is_ssma_event'])) {
3566|            return $empty;
3567|        }
3568|
3569|        $type = strtoupper(trim((string) ($occurrence['type_value'] ?? $occurrence['type'] ?? '')));
3570|        $requires = in_array($type, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true);
3571|        if (!$requires) {
3572|            return $empty;
3573|        }
3574|
3575|        $details = [];
3576|        $eventEntity = null;
3577|        $eventId = (int) ($occurrence['id'] ?? 0);
3578|        if ($eventId > 0) {
3579|            $eventEntity = $this->entityManager->getRepository(SsmaEvent::class)->find($eventId);
3580|            if ($eventEntity instanceof SsmaEvent) {

{"search_pattern": "", "search_text": "function appendSsmaEventModalGestorRow"}

File: src/Controller/SsmaController.php
Match lines: 1
20170|    private function appendSsmaEventModalGestorRow(

{"file_path": "src/Controller/SsmaController.php", "start_line": 20140, "end_line": 20280}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 20140-20280
20140|     * IDs de produtos SSMA usados para montar a lista de gestores do modal de ocorrência.
20141|     *
20142|     * @return array<int, int>
20143|     */
20144|    private function resolveSsmaOccurrenceGestorProductIds(): array
20145|    {
20146|        $ids = [];
20147|        foreach (array_unique([
20148|            'ssma-occurrences',
20149|            $this->ssmaParentProductSlug,
20150|            $this->getCurrentSsmaPermissionProductSlug(),
20151|        ]) as $slug) {
20152|            if ($slug === '') {
20153|                continue;
20154|            }
20155|            $product = $this->entityManager
20156|                ->getRepository(\App\Entity\Product::class)
20157|                ->findOneBy(['slug' => $slug]);
20158|            if ($product) {
20159|                $ids[(int) $product->getId()] = (int) $product->getId();
20160|            }
20161|        }
20162|
20163|        return array_values($ids);
20164|    }
20165|
20166|    /**
20167|     * @param array<int, array<string, mixed>> $byId
20168|     * @param array<int, array<string, mixed>> $memberById
20169|     */
20170|    private function appendSsmaEventModalGestorRow(
20171|        array &$byId,
20172|        int $memberId,
20173|        array $memberById,
20174|        Company $company,
20175|    ): void {
20176|        if ($memberId <= 0 || isset($byId[$memberId])) {
20177|            return;
20178|        }
20179|
20180|        $row = $memberById[$memberId] ?? null;
20181|        if (!$row) {
20182|            $cm = $this->entityManager->find(CompanyMembers::class, $memberId);
20183|            if (!$cm instanceof CompanyMembers || $cm->getCompany()?->getId() !== $company->getId()) {
20184|                return;
20185|            }
20186|            if ($this->isSsmaExcludedTenantAdminUser($cm->getUser())) {
20187|                return;
20188|            }
20189|            $name = $this->ssmaMemberDisplayLabel($cm);
20190|            if ($name === '') {
20191|                $name = (string) ($cm->getEmail() ?? '');
20192|            }
20193|            if ($name === '') {
20194|                return;
20195|            }
20196|            $row = [
20197|                'id'       => $memberId,
20198|                'name'     => $name,
20199|                'email'    => (string) ($cm->getEmail() ?? ''),
20200|                'avatar'   => $cm->getUser()?->getAvatar(),
20201|                'area'     => $this->resolveSsmaMemberRootAreaName($cm),
20202|                'position' => $cm->getRoleMember() ? (string) $cm->getRoleMember()->getName() : '',
20203|            ];
20204|        } elseif (!empty($row['ssma_exclude_person_select'])) {
20205|            return;
20206|        }
20207|
20208|        $area = (string) ($row['area'] ?? ($memberById[$memberId]['area'] ?? ''));
20209|        if ($area === '') {
20210|            $cmForArea = $this->entityManager->find(CompanyMembers::class, $memberId);
20211|            $area = $this->resolveSsmaMemberRootAreaName(
20212|                $cmForArea instanceof CompanyMembers ? $cmForArea : null
20213|            );
20214|        }
20215|
20216|        $byId[$memberId] = [
20217|            'id'        => $memberId,
20218|            'name'      => (string) ($row['name'] ?? ''),
20219|            'email'     => (string) ($row['email'] ?? ''),
20220|            'avatar'    => $row['avatar'] ?? null,
20221|            'position'  => (string) ($row['position'] ?? ($memberById[$memberId]['position'] ?? '')),
20222|            'area'      => $area,
20223|            'team_name' => (string) ($row['team_name'] ?? ($memberById[$memberId]['team_name'] ?? '')),
20224|        ];
20225|    }
20226|
20227|    /**
20228|     * @param list<array<string, mixed>> $members
20229|     * @param array<int, string> $teamNameByMemberId
20230|     *
20231|     * @return list<array<string, mixed>>
20232|     */
20233|    private function enrichSsmaMemberRowsWithTeamMeta(array $members, array $teamNameByMemberId): array
20234|    {
20235|        foreach ($members as &$memberRow) {
20236|            $memberId = (int) ($memberRow['id'] ?? 0);
20237|            if (($memberRow['team_name'] ?? '') === '') {
20238|                $memberRow['team_name'] = $teamNameByMemberId[$memberId] ?? '';
20239|            }
20240|        }
20241|        unset($memberRow);
20242|
20243|        return $members;
20244|    }
20245|
20246|    /**
20247|     * Enriquece card de ação na página de detalhe da ocorrência (status, prazo, validação).
20248|     *
20249|     * @param array<string, mixed> $actionItem
20250|     * @param array<string, string> $actionTypeLabels
20251|     *
20252|     * @return array<string, mixed>
20253|     */
20254|    private function enrichOccurrenceViewActionCard(array $actionItem, array $actionTypeLabels, \DateTimeImmutable $today): array
20255|    {
20256|        $typeValue = (string) ($actionItem['type'] ?? '');
20257|        $deadlineBucket = $this->resolveDeadlineBucket($actionItem, $today);
20258|        $validationStatus = (string) ($actionItem['validation_status'] ?? '');
20259|        $validationMeta = $this->resolveSsmaActionValidationDisplay($validationStatus);
20260|        $cardStatus = $this->resolveSsmaActionCardStatus($validationStatus, $deadlineBucket);
20261|
20262|        return array_merge($actionItem, [
20263|            'type_label' => $this->resolveSsmaActionTypeLabel($typeValue, $actionTypeLabels),
20264|            'deadline_bucket_label' => $deadlineBucket['label'],
20265|            'deadline_bucket_color' => $deadlineBucket['color'],
20266|            'solved_label' => ($actionItem['solved'] ?? false) ? 'Resolvida' : 'Em aberto',
20267|            'solved_color' => ($actionItem['solved'] ?? false) ? '#28a745' : '#6c757d',
20268|            'validation_status_label' => $validationMeta['label'],
20269|            'validation_status_color' => $validationMeta['color'],
20270|            'card_status_label' => $cardStatus['label'],
20271|            'card_status_color' => $cardStatus['color'],
20272|        ]);
20273|    }
20274|
20275|    /**
20276|     * Membros elegíveis como "Gestor responsável" no modal de ocorrências.
20277|     * Combina PTBM direto (como supervisores), roles Symfony e resolução por serviço de tags.
20278|     *
20279|     * @return array<int, true>
20280|     */

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "validateSsmaEventPayloadAgainstTeamScope("}

File: src/Controller/SsmaController.php
Match lines: 3
10384|    private function validateSsmaEventPayloadAgainstTeamScope(array $data, Company $company, User $user): ?string
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);

{"end_line": 26540, "file_path": "src/Controller/SsmaController.php", "start_line": 26380}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 26380-26540
26380|                $erros[] = $erroData;
26381|            }
26382|        }
26383|
26384|        if (isset($data['tempo_abordagem_min']) && (int) $data['tempo_abordagem_min'] < 0) {
26385|            $erros[] = 'Tempo da abordagem inválido.';
26386|        }
26387|
26388|        if (isset($data['qtd_pessoas_observadas']) && (int) $data['qtd_pessoas_observadas'] < 0) {
26389|            $erros[] = 'N. de pessoas observadas deve ser >= 0.';
26390|        }
26391|
26392|        return $erros;
26393|    }
26394|
26395|    /**
26396|     * Janela de registro da Abordagem: como a meta é semanal, a data em que a abordagem
26397|     * foi realizada só pode ser registrada até 7 dias depois (ex.: abordagem no dia 20 →
26398|     * registrável até o dia 27). Não se aplica à Inspeção.
26399|     */
26400|    private function validarSsmaAbordagemJanelaData(string $dataStr): ?string
26401|    {
26402|        $dataStr = trim($dataStr);
26403|        if ($dataStr === '') {
26404|            return null;
26405|        }
26406|
26407|        try {
26408|            $dataAbordagem = new \DateTimeImmutable($dataStr);
26409|        } catch (\Exception) {
26410|            return 'Data inválida.';
26411|        }
26412|
26413|        $hoje = new \DateTimeImmutable('today');
26414|        if ($dataAbordagem > $hoje) {
26415|            return 'Data da abordagem não pode ser futura.';
26416|        }
26417|
26418|        $limiteMinimo = $hoje->modify('-' . self::SSMA_ABORDAGEM_JANELA_REGISTRO_DIAS . ' days');
26419|        if ($dataAbordagem < $limiteMinimo) {
26420|            return sprintf(
26421|                'Data da abordagem fora do prazo: só é possível registrar até %d dias após a data em que foi realizada (a partir de %s).',
26422|                self::SSMA_ABORDAGEM_JANELA_REGISTRO_DIAS,
26423|                $limiteMinimo->format('d/m/Y')
26424|            );
26425|        }
26426|
26427|        return null;
26428|    }
26429|
26430|    // =========================================================================
26431|    // EVENTOS SSMA (SSMAEvent tipado)
26432|    // =========================================================================
26433|
26434|    /**
26435|     * POST /manager/ssma/events
26436|     * Cria um novo evento SSMA tipado.
26437|     */
26438|    public function createEvent(Request $request): JsonResponse
26439|    {
26440|        /** @var \App\Entity\User|null $user */
26441|        $user    = $this->getUser();
26442|        $company = $user?->getCompany();
26443|        if (!$user || !$company) {
26444|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
26445|        }
26446|
26447|        $data = json_decode($request->getContent(), true) ?? [];
26448|        $data = $this->normalizeSsmaEventPayload($data, $company);
26449|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
26450|        $data = $this->applySsmaEventManagerAssignment($data, $company, $user);
26451|        $data = $this->applySsmaDescaracterPermissionGate($data, $company, $user);
26452|        $data = $this->ensureSsmaEventTitle($data);
26453|
26454|        $validator = new \App\Service\Ssma\SsmaEventValidator();
26455|        $errors    = $validator->validate($data, [
26456|            'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26457|        ]);
26458|        if ($errors !== []) {
26459|            return new JsonResponse([
26460|                'success' => false,
26461|                'message' => implode(' ', $errors),
26462|                'errors'  => $errors,
26463|            ], 422);
26464|        }
26465|
26466|        if (!$this->canMemberRegisterOwnOccurrence($company, $user)) {
26467|            return new JsonResponse(['success' => false, 'message' => 'Você não tem autorização para registrar ocorrências.'], 403);
26468|        }
26469|
26470|        $typeKey = strtoupper(trim((string) ($data['type'] ?? '')));
26471|        if ($typeKey !== '' && !$this->canCreateSsmaOccurrenceType($typeKey)) {
26472|            return new JsonResponse(['success' => false, 'message' => 'Você não tem permissão para registrar ocorrências deste tipo.'], 403);
26473|        }
26474|
26475|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
26476|        if (
26477|            in_array($typeKey, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
26478|            && !$this->canAccessSsmaEventAprofundamento(
26479|                $company,
26480|                $user,
26481|                $typeKey,
26482|                $eventDetails,
26483|                (int) ($user->getId() ?? 0)
26484|            )
26485|        ) {
26486|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload($data, $typeKey, []);
26487|        }
26488|
26489|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26490|        if ($teamScopeErr !== null) {
26491|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26492|        }
26493|
26494|        try {
26495|            $service  = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26496|            $payloads = $service->splitPersonalAccidentPayloads($data);
26497|            $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26498|            $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
26499|            if ($registeredByName === '') {
26500|                $registeredByName = $user->getEmail() ?? 'Sistema';
26501|            }
26502|
26503|            foreach ($payloads as $payload) {
26504|                $payloadErrors = $validator->validate($payload, [
26505|                    'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26506|                ]);
26507|                if ($payloadErrors !== []) {
26508|                    return new JsonResponse([
26509|                        'success' => false,
26510|                        'message' => implode(' ', $payloadErrors),
26511|                        'errors'  => $payloadErrors,
26512|                    ], 422);
26513|                }
26514|            }
26515|
26516|            $events = [];
26517|            $flashApprovals = [];
26518|            foreach ($payloads as $payload) {
26519|                $event = $service->createFromPayload($payload, $user, $company, $editorMeta);
26520|                $events[] = $event;
26521|                $this->ssmaAutomationService->triggerForEvent(
26522|                    'ssma_on_occurrence_created',
26523|                    $event,
26524|                    $company,
26525|                    ['registered_by_name' => $registeredByName]
26526|                );
26527|                if (!empty($event->getDetails()['immediate_risk'])) {
26528|                    $this->ssmaNotificationService->notifyImmediateRisk($event);
26529|                }
26530|                if ($this->ssmaEventAprofundamentoPending($event)) {
26531|                    $this->ssmaNotificationService->notifyAprofundamentoSpecialists(
26532|                        $company,
26533|                        $user,
26534|                        (string) $event->getType(),
26535|                        (int) $event->getId(),
26536|                        'event'
26537|                    );
26538|                }
26539|                $this->maybeSubmitOccurrenceForValidation($event, $company, $user);
26540|                try {

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "filterOccurrencesForMember("}

File: src/Controller/SsmaController.php
Match lines: 2
11772|    private function filterOccurrencesForMember(array $occurrences, int $memberId, ?Company $company = null): array
13492|            $occurrences = $this->filterOccurrencesForMember($occurrences, $currentMemberId, $company);

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "isOccurrenceVisibleToMember("}

File: src/Controller/SsmaController.php
Match lines: 4
11670|    private function isOccurrenceVisibleToMember(array $occurrence, int $memberId, ?Company $company = null): bool
11776|            fn (array $occurrence): bool => $this->isOccurrenceVisibleToMember($occurrence, $memberId, $company)
16702|            if (!$this->isOccurrenceVisibleToMember($row, $memberId, $company)) {
16714|        if (!$this->isOccurrenceVisibleToMember($row, $memberId, $company)) {

{"file_path": "src/Controller/SsmaController.php", "end_line": 11810, "start_line": 11725}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 11725-11810
11725|        $keys = [];
11726|        $conn = $this->entityManager->getConnection();
11727|        $midJson = json_encode($memberId) ?: (string) $memberId;
11728|
11729|        try {
11730|            $sql = <<<'SQL'
11731|SELECT DISTINCT
11732|  CASE WHEN a.occurrence_id IS NOT NULL THEN CONCAT('occ_', a.occurrence_id) ELSE CONCAT('event_', a.event_id) END AS vis_key
11733|FROM ssma_actions a
11734|WHERE a.company_id = ?
11735|AND (
11736|  JSON_CONTAINS(COALESCE(a.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$') = 1
11737|  OR a.validator_member_id = ?
11738|)
11739|SQL;
11740|            $rows = $conn->fetchFirstColumn($sql, [(int) $company->getId(), $midJson, $memberId]);
11741|            foreach ($rows as $row) {
11742|                if (is_string($row) && $row !== '') {
11743|                    $keys[$row] = true;
11744|                }
11745|            }
11746|        } catch (\Throwable) {
11747|        }
11748|
11749|        $this->occurrenceActionLinkVisibilityCache = $keys;
11750|
11751|        return $keys;
11752|    }
11753|
11754|    private function isOccurrenceVisibleViaActionLink(array $occurrence, int $memberId, Company $company): bool
11755|    {
11756|        $occId = (int) ($occurrence['id'] ?? 0);
11757|        if ($occId <= 0) {
11758|            return false;
11759|        }
11760|
11761|        $key = ((bool) ($occurrence['is_ssma_event'] ?? false) ? 'event_' : 'occ_') . $occId;
11762|        $keys = $this->getOccurrenceActionLinkVisibilityKeys($memberId, $company);
11763|
11764|        return isset($keys[$key]);
11765|    }
11766|
11767|    /**
11768|     * @param array<int, array<string, mixed>> $occurrences
11769|     *
11770|     * @return array<int, array<string, mixed>>
11771|     */
11772|    private function filterOccurrencesForMember(array $occurrences, int $memberId, ?Company $company = null): array
11773|    {
11774|        return array_values(array_filter(
11775|            $occurrences,
11776|            fn (array $occurrence): bool => $this->isOccurrenceVisibleToMember($occurrence, $memberId, $company)
11777|        ));
11778|    }
11779|
11780|    /**
11781|     * Garante que ocorrências/eventos em que o membro é executor/validador de ação apareçam na listagem,
11782|     * mesmo quando o registro não passou no filtro inicial da página.
11783|     *
11784|     * @param array<int, array<string, mixed>> $occurrences
11785|     *
11786|     * @return array<int, array<string, mixed>>
11787|     */
11788|    private function appendMissingActionLinkedOccurrences(
11789|        array $occurrences,
11790|        int $memberId,
11791|        Company $company,
11792|        User $user,
11793|    ): array {
11794|        if ($memberId <= 0) {
11795|            return $occurrences;
11796|        }
11797|
11798|        $existing = [];
11799|        foreach ($occurrences as $row) {
11800|            $id = (int) ($row['id'] ?? 0);
11801|            if ($id <= 0) {
11802|                continue;
11803|            }
11804|            $existing[(!empty($row['is_ssma_event']) ? 'event_' : 'occ_') . $id] = true;
11805|        }
11806|
11807|        foreach (array_keys($this->getOccurrenceActionLinkVisibilityKeys($memberId, $company)) as $key) {
11808|            if (isset($existing[$key])) {
11809|                continue;
11810|            }

{"file_path": "src/Controller/SsmaController.php", "end_line": 16730, "start_line": 16640}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 16640-16730
16640|
16641|    private function isCurrentUserSsmaActionValidator(SsmaAction $action, Company $company, ?User $user): bool
16642|    {
16643|        $member = $user ? $this->getCurrentCompanyMember($company, $user) : null;
16644|
16645|        return $this->ssmaStakeholderActionPermissionService->canValidateAsDesignatedValidator($action, $member);
16646|    }
16647|
16648|    private function canCurrentUserEditSsmaAction(SsmaAction $action, Company $company, ?User $user): bool
16649|    {
16650|        return $this->canMutateSsmaActionPlan();
16651|    }
16652|
16653|    private function canCurrentUserResolveSsmaAction(
16654|        SsmaAction $action,
16655|        Company $company,
16656|        ?User $user,
16657|        string $operation = 'resolve'
16658|    ): bool {
16659|        return $this->ssmaStakeholderActionPermissionService->canUserResolveAction(
16660|            $action,
16661|            $company,
16662|            $user,
16663|            $this->canManageSsmaOccurrences(),
16664|            $operation
16665|        );
16666|    }
16667|
16668|    private function canCurrentUserValidateSsmaAction(SsmaAction $action, Company $company, ?User $user): bool
16669|    {
16670|        return $this->ssmaStakeholderActionPermissionService->canUserValidateAction(
16671|            $action,
16672|            $company,
16673|            $user,
16674|            $this->canManageSsmaOccurrences()
16675|        );
16676|    }
16677|
16678|    /**
16679|     * @return array<string, mixed>|null
16680|     */
16681|    private function tryLoadOccurrenceViewRowForActionStakeholder(
16682|        int $id,
16683|        ?string $kind,
16684|        Company $company,
16685|        User $user
16686|    ): ?array {
16687|        $member = $this->getCurrentCompanyMember($company, $user);
16688|        $memberId = (int) ($member?->getId() ?? 0);
16689|        if ($memberId <= 0) {
16690|            return null;
16691|        }
16692|
16693|        [, $teams] = $this->loadCompanyMembersAndTeamsLite($company);
16694|        $teamsById = array_column($teams, null, 'id');
16695|
16696|        if ($kind === 'event') {
16697|            $event = $this->entityManager->getRepository(SsmaEvent::class)->find($id);
16698|            if (!$event instanceof SsmaEvent || $event->getCompany()->getId() !== $company->getId()) {
16699|                return null;
16700|            }
16701|            $row = $this->mapSsmaEventToOccurrenceListRow($event, $teamsById);
16702|            if (!$this->isOccurrenceVisibleToMember($row, $memberId, $company)) {
16703|                return null;
16704|            }
16705|
16706|            return $row;
16707|        }
16708|
16709|        $occurrence = $this->entityManager->getRepository(SsmaOccurrence::class)->find($id);
16710|        if (!$occurrence instanceof SsmaOccurrence || $occurrence->getCompany()->getId() !== $company->getId()) {
16711|            return null;
16712|        }
16713|        $row = $this->mapSsmaOccurrenceEntityToListRow($occurrence, $teamsById);
16714|        if (!$this->isOccurrenceVisibleToMember($row, $memberId, $company)) {
16715|            return null;
16716|        }
16717|
16718|        return $row;
16719|    }
16720|
16721|    private function resolveActionDeadlineEditMeta(SsmaAction $action, Company $company, ?User $user): array
16722|    {
16723|        $isAdmin = $this->canManageSsmaConfig();
16724|        $member = $user ? $this->getCurrentCompanyMember($company, $user) : null;
16725|        $memberId = $member ? (int) $member->getId() : 0;
16726|        $respIds = $action->getResponsibleIds() ?? [];
16727|        $isResponsible = $memberId > 0 && in_array($memberId, $respIds, true);
16728|        $isValidator = $this->isCurrentUserSsmaActionValidator($action, $company, $user);
16729|        $canManage = $this->canMutateSsmaActionPlan();
16730|        $pendingValidation = $action->getValidationStatus() === 'pending_validation';

{"file_path": "src/Controller/SsmaController.php", "start_line": 11195, "end_line": 11300}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 11195-11300
11195|        }
11196|
11197|        foreach ($aproMap as $typeKey => $teamId) {
11198|            if (in_array($teamId, $userTeamIds, true)) {
11199|                $types[] = $typeKey;
11200|            }
11201|        }
11202|
11203|        return $types;
11204|    }
11205|
11206|    private function canApproveSsmaOccurrence(?Company $company, ?User $user): bool
11207|    {
11208|        // Tenant/plataforma sempre valida (mesma regra guarda-chuva usada em
11209|        // canEditOccurrenceDetail() e nos demais gates administrativos do SSMA).
11210|        if (
11211|            $this->isGranted('ROLE_SUPER_ADMIN')
11212|            || $this->isGranted('ROLE_MANAGER')
11213|            || $this->isGranted('ROLE_TENANT')
11214|        ) {
11215|            return true;
11216|        }
11217|        if (!$company || !$user) {
11218|            return false;
11219|        }
11220|
11221|        $member = $this->getCurrentCompanyMember($company, $user);
11222|        if (!$member instanceof CompanyMembers) {
11223|            return false;
11224|        }
11225|
11226|        // BUG CONFIRMADO em reunião de alinhamento (2026-09-03, seção "Aprovador de ocorrência"):
11227|        // validar depende exclusivamente de quem está listado na configuração de aprovadores —
11228|        // inclusive Gestor Administrador. "O gestor administrativo se ele não tiver [configurado
11229|        // na lista], nem aparece pra ele." Removido o bypass automático por tag
11230|        // (memberIsSsmaGestorAdministrador) e por ROLE_MANAGER_GESTOR, que concediam o botão
11231|        // "Validar ocorrência" sem passar pela lista de aprovadores.
11232|        $approverIds = $this->ssmaOccurrenceTypeConfig->getFlashReportApproverIds($company);
11233|
11234|        return in_array((int) $member->getId(), array_map('intval', $approverIds), true);
11235|    }
11236|
11237|    private function ssmaEventTypeRequiresAprofundamentoFinalizeGate(string $type): bool
11238|    {
11239|        return in_array(strtoupper(trim($type)), [
11240|            'ROS',
11241|            'QUASE_ACIDENTE',
11242|            'ACIDENTE_PESSOAL',
11243|            'ACIDENTE_MATERIAL',
11244|            'ACIDENTE_AMBIENTAL',
11245|        ], true);
11246|    }
11247|
11248|    private function isSsmaEventAprofundamentoExplicitlyFinalized(\App\Entity\SsmaEvent $event): bool
11249|    {
11250|        $details = is_array($event->getDetails()) ? $event->getDetails() : [];
11251|        $status = strtolower(trim((string) ($details['aprofundamento_status'] ?? '')));
11252|
11253|        return $status === 'finalized' || !empty($details['aprofundamento_complete']);
11254|    }
11255|
11256|    /**
11257|     * ROS "visto e resolvido" dispensa o aprofundamento técnico no gate de validação.
11258|     */
11259|    private function ssmaEventSkipsAprofundamentoValidationGate(\App\Entity\SsmaEvent $event): bool
11260|    {
11261|        if (strtoupper(trim((string) $event->getType())) !== 'ROS') {
11262|            return false;
11263|        }
11264|
11265|        $details = is_array($event->getDetails()) ? $event->getDetails() : [];
11266|
11267|        return !empty($details['ros_resolved']);
11268|    }
11269|
11270|    /**
11271|     * Ocorrência pronta para o gate de validação (aprofundamento completo ou tipo sem essa etapa).
11272|     */
11273|    private function isEventReadyForOccurrenceValidation(\App\Entity\SsmaEvent $event): bool
11274|    {
11275|        if ($this->ssmaEventSkipsAprofundamentoValidationGate($event)) {
11276|            return true;
11277|        }
11278|
11279|        if ($this->ssmaEventAprofundamentoPending($event)) {
11280|            return false;
11281|        }
11282|
11283|        if ($this->ssmaEventTypeRequiresAprofundamentoFinalizeGate($event->getType())) {
11284|            $details = is_array($event->getDetails()) ? $event->getDetails() : [];
11285|            $status = strtolower(trim((string) ($details['aprofundamento_status'] ?? '')));
11286|            if ($status === 'draft') {
11287|                return false;
11288|            }
11289|        }
11290|
11291|        return true;
11292|    }
11293|
11294|    private function isSsmaEventStatusFinalized(\App\Entity\SsmaEvent $event): bool
11295|    {
11296|        $raw = trim((string) $event->getStatus());
11297|        $upper = mb_strtoupper($raw);
11298|
11299|        return $upper === SsmaEvent::STATUS_CONCLUIDO
11300|            || in_array(mb_strtolower($raw), ['finalizada', 'resolvida', 'concluida'], true);

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "buildSsmaEventModalGestorMemberIdSet"}

File: src/Controller/SsmaController.php
Match lines: 2
20100|        foreach ($this->buildSsmaEventModalGestorMemberIdSet($company) as $memberId => $_) {
20281|    private function buildSsmaEventModalGestorMemberIdSet(Company $company): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "forceSsmaRosReporterForPlainMember"}

File: src/Controller/SsmaController.php
Match lines: 1
28399|    private function forceSsmaRosReporterForPlainMember(array $data, Company $company, User $user): array

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "function getSsmaOccurrenceDashboardTeamFilterIds"}

File: src/Controller/SsmaController.php
Match lines: 1
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array

{"file_path": "src/Controller/SsmaController.php", "start_line": 10249, "end_line": 10340}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 10249-10340
10249|    private function getSsmaOccurrenceDashboardTeamFilterIds(?Company $company, ?User $user): ?array
10250|    {
10251|        if (!$company || !$user instanceof User) {
10252|            return null;
10253|        }
10254|
10255|        if ($this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER')) {
10256|            return null;
10257|        }
10258|
10259|        $member = $this->getCurrentCompanyMember($company, $user);
10260|        if (!$member) {
10261|            return null;
10262|        }
10263|
10264|        $tag = $this->resolveSsmaProductPermissionTagForMember($member);
10265|        // 'Supervisor' puro (sem "de Equipe") ?? supervisor global: sem restrição de equipe, igual ao Gestor Administrador.
10266|        if ($tag && in_array($tag->getName(), ['Gestor Administrador', 'Supervisor'], true)) {
10267|            return null;
10268|        }
10269|
10270|        $parsed = $this->parseCompanyMemberTeamIds($member);
10271|
10272|        if ($tag && in_array($tag->getName(), $this->ssmaTeamScopePermissionTagNames(), true)) {
10273|            return $parsed;
10274|        }
10275|
10276|        if ($tag && $tag->getTeamLimitation()) {
10277|            return $parsed;
10278|        }
10279|
10280|        $viewerTeams = $this->getSsmaViewerTeamIds();
10281|        if ($viewerTeams !== null) {
10282|            return $viewerTeams;
10283|        }
10284|
10285|        // Membro sem tag de supervisão/gestão SSMA (ex.: stakeholder via ocorrência) não deve
10286|        // ter filtro de equipe aplicado: retorna null para que filterOccurrencesForMember
10287|        // mostre apenas o conteúdo próprio. Retornar [] zeraria todos os dados antes disso.
10288|        if ($tag !== null && $parsed === []) {
10289|            if ($this->resolveCurrentUserTechnicalTypes($company, $user) !== []) {
10290|                return [];
10291|            }
10292|
10293|            return null;
10294|        }
10295|
10296|        return null;
10297|    }
10298|
10299|    /**
10300|     * Recorte de área do usuário logado na Prevenção Ativa.
10301|     *
10302|     * Fonte única para listagem, busca, detalhe e gravação: um escopo não restrito libera tudo,
10303|     * um escopo restrito com conjunto vazio nega tudo. Não existe estado intermediário em que
10304|     * a ausência de área cadastrada remova o filtro.
10305|     */
10306|    private function getSsmaPreventionAreaScope(?Company $company, ?User $user): SsmaPreventionAreaScope
10307|    {
10308|        if (!$company || !$user instanceof User) {
10309|            return SsmaPreventionAreaScope::unrestricted();
10310|        }
10311|
10312|        $isPlatformAdmin = $this->isGranted('ROLE_SUPER_ADMIN') || $this->isGranted('ROLE_MANAGER');
10313|        $member = $this->getCurrentCompanyMember($company, $user);
10314|        $tag = $member ? $this->resolveSsmaProductPermissionTagForMember($member, 'ssma-prevention') : null;
10315|
10316|        return $this->ssmaPreventionAreaAuthorization
10317|            ->resolveScope($company, $member, $tag, $isPlatformAdmin);
10318|    }
10319|
10320|    /**
10321|     * @return list<int>
10322|     */
10323|    private function parseCompanyMemberAreaIds(CompanyMembers $member): array
10324|    {
10325|        return $this->ssmaPreventionAreaAuthorization->memberAreaIds($member);
10326|    }
10327|
10328|    /**
10329|     * Guarda de leitura de inspeção por ID: quem não vê na listagem também não abre pelo ID.
10330|     */
10331|    private function canViewInspectionUnderAreaScope(SsmaInspection $inspection, ?Company $company, ?User $user): bool
10332|    {
10333|        return $this->ssmaPreventionAreaAuthorization->canViewInspection(
10334|            $this->getSsmaPreventionAreaScope($company, $user),
10335|            $inspection
10336|        );
10337|    }
10338|
10339|    /**
10340|     * Guarda de leitura de abordagem por ID: mesmo critério da listagem (observador no recorte).

{"search_text": "manager_id", "file_patterns": ["src/Service/Ssma/SsmaEventValidator.php"]}

No matches found

{"query_name": "SsmaEventValidator"}

src/Service/Ssma/SsmaEventValidator.php
tests/Ssma/SsmaEventValidatorTest.php
tests/Unit/Product/Ssma/SsmaEventValidatorTest.php

{"file_patterns": ["src/Service/Ssma/SsmaEventValidator.php"], "search_text": "manager"}

No matches found

{"end_line": 13180, "file_path": "src/Controller/SsmaController.php", "start_line": 12810}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 12810-13180
12810|                $teams
12811|            );
12812|            $actionsTaken = $this->loadActionsForOccurrenceDetail($company, $detailOccurrenceId);
12813|            $inspections = [];
12814|            $abordagens = [];
12815|            $horasData = [];
12816|            // Fase B: SSR do detalhe só com membros referenciados (+ gestores do modal).
12817|            if ($this->ssmaMemberSelectDataProvider->shouldFilterToReferencedMembers($scope)) {
12818|                $allMembers = $this->filterSsmaMembersToReferencedForDetail(
12819|                    $allMembers,
12820|                    $occurrences,
12821|                    $actionsTaken,
12822|                    $gestores
12823|                );
12824|            }
12825|        } elseif ($isNetworkHeadWithUnits && $company) {
12826|            $occurrences = $this->loadNetworkOccurrencesForList($company);
12827|            foreach ($this->resolveSsmaNetworkSubsidiaries($company) as $netCompany) {
12828|                if ((int) $netCompany->getId() === (int) $company->getId()) {
12829|                    continue;
12830|                }
12831|                [$extraMembers, $extraTeams] = $this->loadCompanyMembersAndTeamsLite($netCompany);
12832|                $teamNameByMemberId = [];
12833|                foreach ($extraTeams as $teamRow) {
12834|                    foreach ($teamRow['members'] as $teamMemberId) {
12835|                        $teamMemberId = (int) $teamMemberId;
12836|                        if ($teamMemberId > 0 && !isset($teamNameByMemberId[$teamMemberId])) {
12837|                            $teamNameByMemberId[$teamMemberId] = (string) ($teamRow['name'] ?? '');
12838|                        }
12839|                    }
12840|                }
12841|                foreach ($this->enrichSsmaMemberRowsWithTeamMeta($extraMembers, $teamNameByMemberId) as $extraMember) {
12842|                    $allMembers[] = $extraMember;
12843|                }
12844|            }
12845|            $networkCompanies = $this->resolveSsmaNetworkSubsidiaries($company);
12846|            if ($deferOccurrenceHubHeavyData) {
12847|                $actionsTaken = [];
12848|                $inspections = [];
12849|                $horasData = [];
12850|            } else {
12851|            $actionsTaken = [];
12852|            $inspections  = [];
12853|            foreach ($networkCompanies as $netCompany) {
12854|                [$netMembers, $netTeams] = $this->loadCompanyMembersAndTeamsLite($netCompany);
12855|                $actionsTaken = array_merge(
12856|                    $actionsTaken,
12857|                    $this->loadActions($netCompany)
12858|                );
12859|                $inspections = array_merge(
12860|                    $inspections,
12861|                    $this->loadInspections($netCompany, $netMembers, $netTeams)
12862|                );
12863|            }
12864|            $horasData = $this->mergeHorasDataForNetworkCompanies($networkCompanies);
12865|            }
12866|        } else {
12867|            $occurrenceListAlreadyPaged = false;
12868|            if ($company && $paginateOccurrenceList) {
12869|                $teamFilterEarly = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user instanceof User ? $user : null);
12870|                $canManageEarly = $this->canManageSsmaOccurrences();
12871|                $isViewerEarly = $this->isSsmaViewer();
12872|                $userTechnicalTypesEarly = $this->resolveUserTechnicalTypes($company, $user, $companyMembers ?? []);
12873|                $isTechEarly = !$canManageEarly
12874|                    && !$isViewerEarly
12875|                    && $teamFilterEarly === []
12876|                    && $userTechnicalTypesEarly !== [];
12877|                $needsOccurrencePostFilter = ($teamFilterEarly !== null && !$isTechEarly)
12878|                    || $isTechEarly
12879|                    || (!$canManageEarly && !$isViewerEarly && $teamFilterEarly === null && !$isTechEarly);
12880|
12881|                $pageSize = SsmaViewDataScope::OCCURRENCE_LIST_PAGE_SIZE;
12882|                $occurrencesListPage = $scope->listPage;
12883|                $offset = ($occurrencesListPage - 1) * $pageSize;
12884|
12885|                if (!$needsOccurrencePostFilter) {
12886|                    // Visão completa: hidrata só a página pedida (SQL UNION + findBy ids).
12887|                    $occurrencesListTotal = $this->countCompanyOccurrencesAndEvents($company);
12888|                    $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset);
12889|                    $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12890|                    $occurrenceListAlreadyPaged = true;
12891|                } elseif ($isTechEarly && $userTechnicalTypesEarly !== []) {
12892|                    // Técnico especialista: pagina direto em SQL filtrando por tipo — evita
12893|                    // carregar todas as ocorrências da empresa (timeout em bases grandes).
12894|                    $occurrencesListTotal = $this->countCompanyOccurrencesAndEventsByTypes($company, $userTechnicalTypesEarly);
12895|                    $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset, $userTechnicalTypesEarly);
12896|                    $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12897|                    $occurrenceListAlreadyPaged = true;
12898|                } else {
12899|                    // Supervisor com equipe / membro regular: precisa de pós-filtro PHP.
12900|                    // Para supervisores com equipe: aplica filtro SQL (team_id, manager_id) e pagina
12901|                    // diretamente via LIMIT/OFFSET — evita carregar/hidratar N mil entidades.
12902|                    if ($teamFilterEarly !== null) {
12903|                        $teamIdInts = array_values(array_unique(array_map('intval', $teamFilterEarly)));
12904|                        $memberIdsForTeam = [];
12905|                        foreach ($teams as $tmEntry) {
12906|                            if (in_array((int) ($tmEntry['id'] ?? -1), $teamIdInts, true)) {
12907|                                foreach ($tmEntry['members'] ?? [] as $tmMid) {
12908|                                    $memberIdsForTeam[] = (int) $tmMid;
12909|                                }
12910|                            }
12911|                        }
12912|                        // Supervisor sem equipe atribuída: adiciona próprio membro para ver onde é gestor/envolvido.
12913|                        if ($teamIdInts === []) {
12914|                            $selfMWin = $user instanceof User ? $this->getCurrentCompanyMember($company, $user) : null;
12915|                            $selfMIdWin = (int) ($selfMWin?->getId() ?? 0);
12916|                            if ($selfMIdWin > 0) {
12917|                                $memberIdsForTeam[] = $selfMIdWin;
12918|                            }
12919|                        }
12920|                        $memberIdsForTeam = array_values(array_unique($memberIdsForTeam));
12921|
12922|                        if ($teamIdInts !== [] || $memberIdsForTeam !== []) {
12923|                            // SQL paginado com filtro de equipe: carrega exatamente $pageSize registros.
12924|                            $occurrencesListTotal = $this->countCompanyOccurrencesForTeam($company, $teamIdInts, $memberIdsForTeam);
12925|                            $occurrences = $this->loadOccurrences($company, $allMembers, $teams, $pageSize, $offset, [], $teamIdInts, $memberIdsForTeam);
12926|                            $occurrencesListHasMore = ($offset + count($occurrences)) < $occurrencesListTotal;
12927|                            $occurrenceListAlreadyPaged = true;
12928|                        } else {
12929|                            // Sem IDs concretos: cap conservador; PHP post-filter aplicará depois.
12930|                            $occurrences = $this->loadOccurrences($company, $allMembers, $teams, 500);
12931|                        }
12932|                    } else {
12933|                        // Membro regular (teamFilter=null): cap 500 para evitar OOM; PHP post-filter após.
12934|                        $occurrences = $this->loadOccurrences($company, $allMembers, $teams, 500);
12935|                    }
12936|                }
12937|            } else {
12938|                $occurrences = $company ? $this->loadOccurrences($company, $allMembers, $teams) : [];
12939|            }
12940|            if ($occurrences !== []) {
12941|                // Sempre anexa cause_tree_id na página atual (UX: botão Causa aparece no SSR).
12942|                // Painel/inspeções/horas continuam deferred; só o mapa de árvores volta no hub.
12943|                if ($company instanceof Company) {
12944|                    $itemsForTrees = [];
12945|                    foreach ($occurrences as $occRow) {
12946|                        $entityId = (int) ($occRow['id'] ?? 0);
12947|                        if ($entityId <= 0) {
12948|                            continue;
12949|                        }
12950|                        $itemsForTrees[] = [
12951|                            'id' => $entityId,
12952|                            'is_ssma_event' => !empty($occRow['is_ssma_event']),
12953|                        ];
12954|                    }
12955|                    if ($itemsForTrees !== []) {
12956|                        $treeMeta = $this->ssmaCauseTreeService->resolveEntityTreeMetaBatch(
12957|                            (int) $company->getId(),
12958|                            $itemsForTrees
12959|                        );
12960|                        foreach ($occurrences as $idx => $occRow) {
12961|                            $entityId = (int) ($occRow['id'] ?? 0);
12962|                            $key = (!empty($occRow['is_ssma_event']) ? 'e:' : 'o:') . $entityId;
12963|                            $occurrences[$idx]['cause_tree_id'] = $treeMeta[$key]['cause_tree_id'] ?? null;
12964|                        }
12965|                    }
12966|                }
12967|                $occurrences = $this->enrichOccurrencesCommitteeTriggerFlags($occurrences, $company);
12968|                $occurrences = $this->enrichOccurrencesGravityLabels($occurrences);
12969|            }
12970|            if ($deferOccurrenceHubHeavyData) {
12971|                $actionsTaken = [];
12972|                $inspections = [];
12973|                $horasData = [];
12974|            } else {
12975|            $actionsTaken = $company ? $this->loadActions($company) : [];
12976|            $inspections  = $company ? $this->loadInspections($company, $allMembers, $teams) : [];
12977|            $horasData    = $company ? $this->loadHorasData($company) : [];
12978|            }
12979|        }
12980|        if ($needsPreventionCollections) {
12981|            $abordagens = $company ? $this->loadAbordagens($company) : [];
12982|        }
12983|        $occurrenceUiMeta = $this->getMockOccurrenceMetadata();
12984|
12985|        $userTechnicalTypes = $company
12986|            ? $this->resolveUserTechnicalTypes($company, $user, $companyMembers ?? [])
12987|            : [];
12988|        $ssmaCanManageOccurrences = $this->canManageSsmaOccurrences();
12989|        $ssmaCanAccessSupervisorSurface = $this->canAccessSsmaSupervisorSurface();
12990|        $ssmaCanAccessPreventionPanelAndMetas = $this->canAccessPreventionDashboardAndMetasTabs();
12991|        $ssmaCanAccessOccurrencePanel = $ssmaCanManageOccurrences || $this->isSsmaViewer();
12992|        // Supervisores veem a aba Automações mas não criam; o botão de criação usa ssmaCanManageOccurrences
12993|        $ssmaCanAccessOccurrenceAutomations = $ssmaCanManageOccurrences || $this->isSsmaViewer();
12994|        $ssmaCanManageConfig = $this->canManageSsmaConfig();
12995|        $ssmaCanManagePermissions = $this->canManageSsmaPermissions();
12996|        // ssmaCanCreateLinkedActions: botão "Criar ação" na aba Ocorrências e occurrence_view.
12997|        // Brenda: Supervisor só visualiza (dash/painel). Criar/editar fica com gestor/admin
12998|        // e Gestor de Equipe (override abaixo). Membro comum não cria.
12999|        $ssmaCanCreateLinkedActions = $this->canMutateSsmaActionPlan();
13000|        $ssmaCanMutateActionPlan = $ssmaCanCreateLinkedActions;
13001|        // ssmaCanCreateCauseTree: Supervisor ?? SOMENTE LEITURA na Árvore de Causas (planilha).
13002|        // NÃO incluir isSsmaViewer() aqui. Usa produto ssma-cause-tree (não can_create de ssma-occurrences).
13003|        $ssmaCanCreateCauseTree = $this->canCreateSsmaCauseTree();
13004|        $ssmaCanCreateAuthorization = $ssmaCanManageOccurrences;
13005|        $ssmaCanEditHorasTrabalhadas = $this->canEditSsmaHorasTrabalhadas();
13006|
13007|        // Tag SSMA do colaborador — sempre resolve (ROLE_MANAGER de plataforma ≠ perfil SSMA).
13008|        $ssmaProductTagName = null;
13009|        $memberForTagCheck = null;
13010|        $ssmaPreventionProductTagName = null;
13011|        if ($company && $user instanceof User) {
13012|            $memberForTagCheck = $this->getCurrentCompanyMember($company, $user);
13013|            if ($memberForTagCheck) {
13014|                $resolvedTag = $this->resolveSsmaProductPermissionTagForMember($memberForTagCheck);
13015|                if ($resolvedTag) {
13016|                    $ssmaProductTagName = $resolvedTag->getName();
13017|                }
13018|                if ($this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
13019|                    $ssmaProductTagName = 'Gestor Administrador';
13020|                }
13021|                $ssmaPreventionProductTagName = $this->ssmaPreventionHubAccessService
13022|                    ->resolvePreventionProductTagName($memberForTagCheck);
13023|            }
13024|        }
13025|
13026|        // Membro/Inspetor: visão de pessoa física (matriz de tipos + registrar).
13027|        // Só strip se tiver ROLE_USER (Palloma). Conta admin empresa sem ROLE_USER (Aura) mantém abas.
13028|        // Tenant / SUPER_ADMIN mantêm abas mesmo com tag Membro (regressão Felipe).
13029|        $ssmaIsPlainProductMemberUi = SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
13030|            $ssmaProductTagName,
13031|            $this->isGranted('ROLE_SUPER_ADMIN'),
13032|            $this->isGranted('ROLE_TENANT'),
13033|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
13034|        );
13035|        if ($ssmaIsPlainProductMemberUi && !$this->memberIsSsmaGestorAdministrador($memberForTagCheck)) {
13036|            $ssmaCanManageOccurrences = false;
13037|            $ssmaCanAccessSupervisorSurface = false;
13038|            $ssmaCanAccessPreventionPanelAndMetas = false;
13039|            $ssmaCanAccessOccurrencePanel = false;
13040|            $ssmaCanAccessOccurrenceAutomations = false;
13041|            $ssmaCanManageConfig = false;
13042|            $ssmaCanManagePermissions = false;
13043|            $ssmaCanCreateLinkedActions = false;
13044|            $ssmaCanCreateAuthorization = false;
13045|        }
13046|
13047|        $loggedMemberForCauseTree = ($company && $user instanceof User)
13048|            ? $this->getCurrentCompanyMember($company, $user)
13049|            : null;
13050|
13051|        // Especialistas técnicos (SsmaPermissionTagMember) e gestores/supervisores podem visualizar.
13052|        // Membro/Inspetor com acesso só via mapa legado tipo/equipe NÃO recebem o botão na listagem.
13053|        $ssmaCanViewCauseTree = $ssmaCanCreateCauseTree
13054|            || $this->isSsmaViewer()
13055|            || in_array($ssmaProductTagName, ['Gestor Administrador', 'Gestor de Equipe', 'Supervisor de Equipe', 'Supervisor'], true)
13056|            || ($loggedMemberForCauseTree && $company && $this->hasSsmaTechnicalCauseTreeAccess($loggedMemberForCauseTree, $company));
13057|
13058|        // Hub Ocorrências — botão "Registrar ocorrência" (empty state / FAB): Membro não cria (planilha),
13059|        // mesmo com can_create na tag. Só roles de gestão na empresa ou tag Gestor de Equipe / G. Administrador com manage.
13060|        // Reutiliza $ssmaProductTagName (já corrigido por memberIsSsmaGestorAdministrador).
13061|        $ssmaProductTagNameForRegister = $ssmaProductTagName;
13062|        $ssmaCanRegisterNewOccurrence = $this->isGranted('ROLE_SUPER_ADMIN')
13063|            || $this->isGranted('ROLE_MANAGER')
13064|            || $this->isGranted('ROLE_MANAGER_GESTOR')
13065|            || \in_array($ssmaProductTagNameForRegister, ['Gestor de Equipe', 'Gestor Administrador'], true)
13066|            // Permissão padrão do Membro: registrar a própria ocorrência.
13067|            || $this->canMemberRegisterOwnOccurrence($company, $user);
13068|
13069|        $loggedMemberForOccurrence = ($company && $user instanceof User)
13070|            ? $this->getCurrentCompanyMember($company, $user)
13071|            : null;
13072|        $ssmaAllowedCreateTypes = ($company && $user instanceof User)
13073|            ? $this->ssmaOccurrenceCreatePermissionService->resolveAllowedCreateTypes(
13074|                $loggedMemberForOccurrence,
13075|                $user,
13076|                $company,
13077|                $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
13078|                $ssmaCanManageOccurrences,
13079|            )
13080|            : [];
13081|        if (!$ssmaCanRegisterNewOccurrence && $ssmaAllowedCreateTypes !== []) {
13082|            $ssmaCanRegisterNewOccurrence = true;
13083|        }
13084|
13085|        $occurrenceTeamFilterIds = $this->getSsmaOccurrenceDashboardTeamFilterIds($company, $user);
13086|        $areaScope = $this->getSsmaPreventionAreaScope($company, $user);
13087|        $occurrenceAreaFilterIds = $areaScope->isRestricted() ? $areaScope->areaIds() : null;
13088|        $viewerTeamIds = $this->getSsmaViewerTeamIds();
13089|
13090|        // ── Detecção de Supervisor/Gestor de Equipe via tag SSMA ──────────────────────────────
13091|        // Usuários com ROLE_USER + tag SSMA (sem ROLE_MANAGER_VIEWER global) não são detectados pelas
13092|        // funções baseadas em role. Identificamos o perfil pelo nome da tag para ajustar flags de UI.
13093|        $ssmaIsTagTeamSupervisor = in_array($ssmaProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
13094|        $ssmaIsTagTeamGestor     = $ssmaProductTagName === 'Gestor de Equipe';
13095|        $ssmaIsTagAreaSupervisor = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_SUPERVISOR_AREA;
13096|        $ssmaIsTagAreaGestor     = $ssmaProductTagName === SsmaAreaLimitationScope::TAG_GESTOR_AREA;
13097|        $ssmaIsPreventionTagTeamSupervisor = in_array($ssmaPreventionProductTagName, ['Supervisor de Equipe', 'Supervisor'], true);
13098|        $ssmaIsPreventionTagTeamGestor = $ssmaPreventionProductTagName === 'Gestor de Equipe';
13099|
13100|        // Painel + Metas: libera para Sup/G. de Equipe/Área e Gestor Administrador (ocorrências + ssma-prevention)
13101|        if (!$ssmaCanAccessPreventionPanelAndMetas
13102|            && (
13103|                $ssmaIsTagTeamSupervisor
13104|                || $ssmaIsTagTeamGestor
13105|                || $ssmaIsTagAreaSupervisor
13106|                || $ssmaIsTagAreaGestor
13107|                || $ssmaProductTagName === 'Gestor Administrador'
13108|                || $ssmaIsPreventionTagTeamSupervisor
13109|                || $ssmaIsPreventionTagTeamGestor
13110|                || $ssmaPreventionProductTagName === 'Gestor Administrador'
13111|            )
13112|        ) {
13113|            $ssmaCanAccessPreventionPanelAndMetas = true;
13114|        }
13115|
13116|        // Membro/Inspetor (pessoa física / Palloma): não acessa Painel nem Metas.
13117|        // Conta admin empresa sem ROLE_USER (Aura), Tenant e SUPER_ADMIN mantêm — mesmo contrato das abas de Ocorrências.
13118|        if (SsmaOccurrenceCreatePermissionService::shouldStripOccurrenceManagementTabsUi(
13119|            $ssmaProductTagName,
13120|            $this->isGranted('ROLE_SUPER_ADMIN'),
13121|            $this->isGranted('ROLE_TENANT'),
13122|            $user instanceof User && in_array('ROLE_USER', $user->getRoles(), true)
13123|        )) {
13124|            $ssmaCanAccessPreventionPanelAndMetas = false;
13125|        }
13126|
13127|        // Modal + Evento: título/status ocultos na criação para todos os perfis (Figma Etapa 0).
13128|        // Na edição o JS (evApplyAuraTitleStatusVisibility) reexibe conforme o modo.
13129|        $ssmaHideEventTitleStatusOnCreate = true;
13130|
13131|        // ssmaIsTeamViewer: true quando o usuário opera com escopo de equipe (via role SSMA OU via tag SSMA)
13132|        // Usado para sinalizar ao template que os dados estáo limitados ?? equipe.
13133|        $ssmaIsTeamViewerFlag = $viewerTeamIds !== null || $ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor
13134|            || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor;
13135|
13136|        // ssmaCanCreatePreventionItems: Gestor de Equipe/Área e Gestor Administrador via tag SSMA
13137|        // também podem registrar inspeções/abordagens (ssmaCanManageOccurrences = true via tag).
13138|        $ssmaCanCreatePreventionItems = (
13139|            $this->isGranted('ROLE_SUPER_ADMIN')
13140|            || $this->isGranted('ROLE_MANAGER')
13141|            || $this->isGranted('ROLE_MANAGER_GESTOR')
13142|            || (
13143|                $ssmaCanManageOccurrences
13144|                && ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor || $ssmaProductTagName === 'Gestor Administrador')
13145|            )
13146|        );
13147|
13148|        // ssmaCanEditPreventionContent: controla botões Editar/Finalizar/Deletar em inspeções e abordagens
13149|        // e o botão "Configuração" na aba Metas.
13150|        // Supervisor registra/edita o próprio conteúdo (can_mutate por item); gestão edita todos.
13151|        $ssmaCanEditPreventionContent = $ssmaCanManageOccurrences
13152|            && !$this->isSsmaViewer()
13153|            && !$ssmaIsTagTeamSupervisor
13154|            && !$ssmaIsTagAreaSupervisor;
13155|        $ssmaPreventionMutateOwnOnly = false;
13156|
13157|        // Configurações da aba Prevenção Ativa: Sup/Gestor de Equipe ou Área não acessam (planilha: "Não acessa")
13158|        if ($ssmaIsTagTeamSupervisor || $ssmaIsTagTeamGestor || $ssmaIsTagAreaSupervisor || $ssmaIsTagAreaGestor) {
13159|            $ssmaCanManageConfig = false;
13160|        }
13161|
13162|        // G. Equipe via tag SSMA pode criar ação (Plano de Ação).
13163|        // Árvore de causas: {@see canCreateSsmaCauseTree()} já cobre Gestor de Equipe.
13164|        if ($ssmaIsTagTeamGestor || $ssmaIsTagAreaGestor) {
13165|            $ssmaCanCreateLinkedActions = true;
13166|            $ssmaCanMutateActionPlan = true;
13167|        }
13168|
13169|        // Tabela de metas por pessoa (aba Metas): edição global só para gestão; membro com can_create não gere metas alheias.
13170|        $ssmaCanEditPreventionMetasTable = $company && $user instanceof User
13171|            && $this->canEditPreventionMetasTableForCurrentUser($company, $user);
13172|
13173|        // ssmaPreventionCanCreateLinkedActions: botão "Criar ação" em Inspeções e Abordagem.
13174|        // Alinhado com ssmaCanCreateLinkedActions (Plano de Ações): quem não pode criar
13175|        // ação no Plano de Ações também não pode criar em inspeção/abordagem/árvore.
13176|        $ssmaPreventionCanCreateLinkedActions = $ssmaCanCreateLinkedActions;
13177|
13178|        $teamsForEventModal = $teams;
13179|        $allMembersForEventPeople = $allMembers;
13180|        $ssmaEventFormDefaults = ['manager_id' => null, 'team_id' => null];

{"search_text": "devem pertencer às suas equipes"}

File: src/Controller/SsmaController.php
Match lines: 1
10527|                return 'Os responsáveis pela ação devem pertencer às suas equipes.';

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "all_members_for_event_people"}

File: src/Controller/SsmaController.php
Match lines: 1
13671|                'all_members_for_event_people' => $allMembersForEventPeople,

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "ssma_apply_team_event_scope"}

File: src/Controller/SsmaController.php
Match lines: 1
13674|                'ssma_apply_team_event_scope' => $applyTeamEventScope,

{"end_line": 13700, "file_path": "src/Controller/SsmaController.php", "start_line": 13630}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 13630-13700
13630|                'ssmaAllowedCreateTypes' => $ssmaAllowedCreateTypes,
13631|                'ssmaOccurrenceTypeColumns' => SsmaOccurrenceCreatePermissionService::TYPE_COLUMNS,
13632|                'ssmaPreventionInspectionEnabled' => $ssmaPreventionInspectionEnabled,
13633|                'ssmaPreventionAbordagemEnabled'  => $ssmaPreventionAbordagemEnabled,
13634|                'ssmaCanCreatePreventionItems' => $ssmaCanCreatePreventionItems,
13635|                'ssmaCanAccessSupervisorSurface' => $ssmaCanAccessSupervisorSurface,
13636|                'ssmaCanAccessPreventionPanelAndMetas' => $ssmaCanAccessPreventionPanelAndMetas,
13637|                'ssmaCanAccessOccurrencePanel' => $ssmaCanAccessOccurrencePanel,
13638|                'ssmaCanPublishCulturalFeed' => $company instanceof Company
13639|                    && $user instanceof User
13640|                    && $this->ssmaFeedImprovementBridge->canManageFeedImprovements($user, $company),
13641|                'ssmaCanAccessOccurrenceAutomations' => $ssmaCanAccessOccurrenceAutomations,
13642|                'ssmaCanManageConfig' => $ssmaCanManageConfig,
13643|                'ssmaCanManagePermissions' => $ssmaCanManagePermissions,
13644|                'ssmaCanCreateLinkedActions' => $ssmaCanCreateLinkedActions,
13645|                'ssmaCanMutateActionPlan' => $ssmaCanMutateActionPlan,
13646|                'ssmaPreventionCanCreateLinkedActions' => $ssmaPreventionCanCreateLinkedActions,
13647|                'ssmaCanEditPreventionContent' => $ssmaCanEditPreventionContent,
13648|                'ssmaCanEditPreventionMetasTable' => $ssmaCanEditPreventionMetasTable,
13649|                'ssmaCanCreateCauseTree' => $ssmaCanCreateCauseTree,
13650|                'ssmaCanViewCauseTree'   => $ssmaCanViewCauseTree,
13651|                'causeTreeCommitteeHelpLines' => $company instanceof Company
13652|                    ? $this->ssmaCauseTreeService->getCommitteeHelpLines((int) $company->getId())
13653|                    : [],
13654|                'ssmaCanCreateAuthorization' => $ssmaCanCreateAuthorization,
13655|                'ssmaCanEditHorasTrabalhadas' => $ssmaCanEditHorasTrabalhadas,
13656|                'ssmaCanViewAccidentVictimName' => $this->isGranted('ROLE_SUPER_ADMIN')
13657|                    || $this->isGranted('ROLE_MANAGER')
13658|                    || $this->isGranted('ROLE_MANAGER_GESTOR')
13659|                    || $ssmaProductTagName === 'Gestor Administrador'
13660|                    || $ssmaIsTagTeamSupervisor
13661|                    || $ssmaIsTagTeamGestor
13662|                    || $ssmaIsTagAreaSupervisor
13663|                    || $ssmaIsTagAreaGestor
13664|                    || $this->isSsmaViewer(),
13665|                'gestores'      => $gestores,
13666|                'teams'       => $teams,
13667|                'gestores_for_event_modal' => $gestoresForEventModal,
13668|                'teams_for_event_modal' => $teamsForEventModal,
13669|                'teams_for_inspection_modal' => $teamsForInspectionModal,
13670|                'default_inspection_team_id' => $defaultInspectionTeamId,
13671|                'all_members_for_event_people' => $allMembersForEventPeople,
13672|                'ssma_modal_members' => $allMembersForEventPeople,
13673|                /** true = usar listas filtradas nos modais; false = admin/tenant vê lista completa */
13674|                'ssma_apply_team_event_scope' => $applyTeamEventScope,
13675|                'ssma_event_form_defaults' => $ssmaEventFormDefaults,
13676|                'ssma_logged_member_id' => (int) ($loggedMemberForOccurrence?->getId() ?? 0),
13677|                'ssma_is_admin_aprofundamento' => $this->isSsmaAprofundamentoAdmin($company, $user instanceof User ? $user : null),
13678|                // Resolve pela tag SSMA real (mesmo com ROLE_MANAGER de plataforma).
13679|                'ssma_is_pessoa_fisica_comum' => $this->isSsmaPlainProductMember($company, $user instanceof User ? $user : null),
13680|                'ssma_can_change_event_manager' => $ssmaCanChangeEventManager,
13681|                'ssma_is_gestor_user' => $ssmaIsTagTeamGestor
13682|                    || $ssmaIsTagAreaGestor
13683|                    || $ssmaProductTagName === 'Gestor Administrador'
13684|                    || $this->isSsmaAprofundamentoAdmin($company, $user instanceof User ? $user : null)
13685|                    || $this->isGranted('ROLE_MANAGER_GESTOR'),
13686|                'ssma_perm_tags' => $ssmaPermTags,
13687|                'ros_call_priority' => $rosCallPriority,
13688|                'allMembers'  => $allMembers,
13689|                'abordagem_turno_options' => ($isOccurrenceDetailView || $module === 'occurrence')
13690|                    ? []
13691|                    : $this->buildSsmaAbordagemTurnoOptions($company),
13692|                'default_abordagem_observador_id' => $defaultAbordagemObservadorId,
13693|                'default_insp_responsible_id'    => $defaultAbordagemObservadorId,
13694|                'inspection_types' => $company instanceof Company
13695|                    ? $this->ssmaInspectionTypeConfig->getTypesForFrontend($company)
13696|                    : [],
13697|                /** Contexto de tenant para cache de listas no front (ex.: questionários PE) */
13698|                'ssma_company_id'                 => $company?->getId(),
13699|                'ssma_export_matricula'           => $ssmaExportMatricula,
13700|                'ssmaCanDescharacterizeAccident' => $ssmaCanDescharacterizeAccident,

{"search_text": "evSyncReportedByFieldForType", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 3
5227|        evSyncReportedByFieldForType(type);
5241|    function evSyncReportedByFieldForType(type) {
5345|        evSyncReportedByFieldForType(type);

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 5200, "end_line": 5370}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 5200-5370
5200|        if (type === 'QUASE_ACIDENTE') {
5201|            toggleQaPersonRow();
5202|            if (typeof filterQaPotentialConsequence === 'function') {
5203|                filterQaPotentialConsequence();
5204|            }
5205|        }
5206|
5207|        // ROS: re-apply potential consequence filter
5208|        if (type === 'ROS') {
5209|            filterRosPotentialConsequence();
5210|        }
5211|
5212|        // Ao mudar tipo, sincroniza visibilidade do bloco de regiões
5213|        if (type === 'ACIDENTE_PESSOAL') {
5214|            syncBodyRegionVisibility();
5215|            if (evHadInjuryForValidation()) {
5216|                evEnsureBodyMapForCard(evGetActiveInjuredCardForBodyMap());
5217|            }
5218|            evSyncInjuredCardsFromInvolved();
5219|        } else {
5220|            var bmb = document.getElementById('ev-body-map-block');
5221|            if (bmb) bmb.classList.add('d-none');
5222|        }
5223|
5224|        if (typeof window.renderEvCategorySelect === 'function') {
5225|            window.renderEvCategorySelect(type, '');
5226|        }
5227|        evSyncReportedByFieldForType(type);
5228|        evSyncCriticalityField(type);
5229|        evSetAprofundamentoReadonly(!evRequiresAprofundamento(type) || !evCanEditAprofundamento(type));
5230|        evSyncAccidentCostFields(type || '');
5231|        evUpdateFooter();
5232|    }
5233|
5234|    /**
5235|     * Gestor responsável (ROS e Evento):
5236|     * - Sempre visível nas informações gerais do off-canvas.
5237|     * - Default = líder imediato de quem está cadastrando (SSMA_EVENT_FORM_DEFAULTS.manager_id).
5238|     * - Membro/supervisor: campo travado.
5239|     * - Gestor: pode trocar entre líderes imediatos do seu escopo.
5240|     */
5241|    function evSyncReportedByFieldForType(type) {
5242|        var wrap    = document.getElementById('ev-manager-field-wrap');
5243|        var labelEl = document.getElementById('ev-manager-label-text');
5244|        var sel     = document.getElementById('ev_manager');
5245|        if (!wrap || !sel) return;
5246|
5247|        if (sel.dataset.origRequired === undefined) {
5248|            sel.dataset.origRequired = sel.required ? '1' : '0';
5249|        }
5250|
5251|        if (labelEl) labelEl.textContent = 'Gestor responsável';
5252|        wrap.classList.remove('d-none');
5253|        sel.required = sel.dataset.origRequired === '1';
5254|
5255|        var canChange = !!window.SSMA_CAN_CHANGE_EVENT_MANAGER;
5256|        sel.disabled = !canChange;
5257|
5258|        var defs = window.SSMA_EVENT_FORM_DEFAULTS || {};
5259|        var defaultManagerId = defs.manager_id ? String(defs.manager_id) : '';
5260|        if (!sel.value && defaultManagerId) {
5261|            for (var i = 0; i < sel.options.length; i++) {
5262|                if (String(sel.options[i].value) === defaultManagerId) {
5263|                    sel.value = defaultManagerId;
5264|                    if (window.jQuery) { window.jQuery(sel).trigger('change'); }
5265|                    break;
5266|                }
5267|            }
5268|        }
5269|    }
5270|
5271|    /** De-para 1:1 — 5 consequências pessoais ↔ 5 níveis de gravidade. */
5272|    var EV_CONSEQUENCE_TO_CRITICALITY = {
5273|        SEM_DANO: 'LEVE',
5274|        LESAO_LEVE: 'BAIXO',
5275|        LESAO_MODERADA: 'MEDIO',
5276|        LESAO_GRAVE: 'ALTO',
5277|        FATALIDADE: 'SEVERO',
5278|        DANO_MATERIAL_LEVE: 'LEVE',
5279|        DANO_MATERIAL_MODERADO: 'BAIXO',
5280|        DANO_MATERIAL_GRAVE: 'ALTO',
5281|        PARADA_OPERACIONAL: 'SEVERO',
5282|        CONTAMINACAO_AGUA: 'ALTO',
5283|        CONTAMINACAO_SOLO: 'ALTO',
5284|        POLUICAO_AR: 'ALTO',
5285|        AA1: 'LEVE',
5286|        AA2: 'MEDIO',
5287|        AA3: 'SEVERO',
5288|        // Pessoal / Material: consequência = escala de gravidade
5289|        LEVE: 'LEVE',
5290|        BAIXO: 'BAIXO',
5291|        MEDIO: 'MEDIO',
5292|        ALTO: 'ALTO',
5293|        SEVERO: 'SEVERO'
5294|    };
5295|    function evResolvePotentialSeverity() {
5296|        for (var i = 0; i < arguments.length; i++) {
5297|            var v = String(arguments[i] || '').toUpperCase();
5298|            if (!v) continue;
5299|            if (EV_CONSEQUENCE_TO_CRITICALITY[v]) return EV_CONSEQUENCE_TO_CRITICALITY[v];
5300|            if (EV_CRITICALITY_LABELS[v]) return v;
5301|        }
5302|        return '';
5303|    }
5304|    var EV_CRITICALITY_LABELS = {
5305|        LEVE: 'Leve', BAIXO: 'Baixo', MEDIO: 'Médio', ALTO: 'Alto', SEVERO: 'Severo',
5306|        MODERADO: 'Moderado', CRITICO: 'Crítico'
5307|    };
5308|    var EV_CRITICALITY_COLORS = {
5309|        LEVE:   { bg: 'rgba(37,173,82,0.12)', color: '#25AD52', border: '#25AD52' },
5310|        BAIXO:  { bg: 'rgba(37,173,82,0.12)', color: '#25AD52', border: '#25AD52' },
5311|        MEDIO:  { bg: 'rgba(255,193,7,0.15)', color: '#B78103', border: '#FFC107' },
5312|        MODERADO: { bg: 'rgba(255,193,7,0.15)', color: '#B78103', border: '#FFC107' },
5313|        ALTO:   { bg: 'rgba(253,126,20,0.14)', color: '#FD7E14', border: '#FD7E14' },
5314|        SEVERO: { bg: 'rgba(234,21,28,0.12)', color: '#EA151C', border: '#EA151C' },
5315|        CRITICO:{ bg: 'rgba(234,21,28,0.12)', color: '#EA151C', border: '#EA151C' }
5316|    };
5317|
5318|    /** Gravidade: acidentes, ROS e Quase Acidente derivam da consequência. */
5319|    function evSyncCriticalityField(type) {
5320|        var wrap = document.getElementById('ev-gravity-wrap');
5321|        var sel  = document.getElementById('ev_criticality');
5322|        var derivedWrap = document.getElementById('ev-derived-severity-wrap');
5323|        var rosDerivedWrap = document.getElementById('ev-ros-derived-severity-wrap');
5324|        var qaDerivedWrap = document.getElementById('ev-qa-derived-severity-wrap');
5325|        if (!sel) return;
5326|        var isAccident = evRequiresAccidentTechnical(type);
5327|        var isRos = type === 'ROS';
5328|        var isQa = type === 'QUASE_ACIDENTE';
5329|        if (wrap) {
5330|            wrap.classList.add('d-none');
5331|        }
5332|        sel.required = false;
5333|        if (derivedWrap) derivedWrap.classList.toggle('d-none', !isAccident);
5334|        if (rosDerivedWrap) rosDerivedWrap.classList.toggle('d-none', !isRos);
5335|        if (qaDerivedWrap) qaDerivedWrap.classList.toggle('d-none', !isQa);
5336|        if (isAccident) {
5337|            evSyncDerivedSeverityFromConsequence();
5338|        } else if (isRos) {
5339|            evSyncRosDerivedSeverityFromPotential();
5340|        } else if (isQa) {
5341|            evSyncQaDerivedSeverityFromPotential();
5342|        }
5343|        evSyncAaIdentFields(type);
5344|        evSyncPeopleFieldForType(type);
5345|        evSyncReportedByFieldForType(type);
5346|        evSyncDescaracterStageUi();
5347|    }
5348|
5349|    function evSyncPeopleFieldForType(type) {
5350|        var wrap = document.getElementById('ev-people-field-wrap');
5351|        if (!wrap) return;
5352|        var hide = type === 'ROS';
5353|        wrap.classList.toggle('d-none', hide);
5354|        if (hide) {
5355|            var peopleIds = document.getElementById('ev_people_ids');
5356|            if (peopleIds) peopleIds.value = '';
5357|            var tags = document.getElementById('ev_people_tags');
5358|            if (tags) tags.innerHTML = '';
5359|        }
5360|    }
5361|    function evApplyDerivedSeverityBadge(badgeId, consequence) {
5362|        var key = EV_CONSEQUENCE_TO_CRITICALITY[consequence] || '';
5363|        var badge = document.getElementById(badgeId);
5364|        var critSel = document.getElementById('ev_criticality');
5365|        if (critSel && key) critSel.value = key;
5366|        if (!badge) return key;
5367|        if (!key) {
5368|            badge.textContent = '—';
5369|            badge.style.background = 'rgba(108,117,125,0.10)';
5370|            badge.style.color = '#6c757d';

{"search_text": "initSearchableMemberField", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 2
4312|        if (typeof shared.initSearchableMemberField === 'function' && window.SSMA_CAN_CHANGE_EVENT_MANAGER) {
4313|            shared.initSearchableMemberField($('#ev_manager'), {

{"search_text": "ev_manager", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 18
240|            <label for="ev_manager" id="ev-manager-label"><span id="ev-manager-label-text">Gestor responsável</span> {% if gestoresList|length > 0 %}<span class="text-danger">*</span>{% endif %}</label>
241|            <select class="form-control" id="ev_manager" name="ev_manager" {% if gestoresList|length > 0 %}required{% endif %}{% if not ssmaCanChangeEventManager|default(false) %} disabled{% endif %}>
259|            <div id="ev_manager_preview" class="d-none mt-2"></div>
3131|            var reportedBy = String((document.getElementById('ev_manager') || { value: '' }).value || '').trim();
4313|            shared.initSearchableMemberField($('#ev_manager'), {
5029|            $('#ev_manager_preview').addClass('d-none').empty();
5244|        var sel     = document.getElementById('ev_manager');
5918|        var $preview = $('#ev_manager_preview');
5920|        var managerId = String(($('#ev_manager').val() || '')).trim();
5933|            ? shared.memberMetaFromSelection(managerId, $('#ev_manager option:selected'), window.SSMA_EV_MEMBERS_BY_ID || {})
5947|    $(document).on('change', '#ev_manager', function () {
5955|        $('#ev_manager').val('').trigger('change');
5994|            '#ev_manager',
6280|        if (det.manager_id)               evSetVal('ev_manager', det.manager_id);
6609|        $('#ev_manager').trigger('change');
6731|                    evSetVal('ev_manager', String(defs.manager_id));
6739|                    $('#ev_manager').trigger('change');
7010|            manager_id:       document.getElementById('ev_manager').value,

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 4290, "end_line": 4360}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 4290-4360
4290|        });
4291|
4292|        $(document).on('click', '#ev-body-map-host .ssma-bm-tab', function () {
4293|            window.setTimeout(function () {
4294|                if (typeof window.__ssmaSyncEvExtremityFloats === 'function') {
4295|                    window.__ssmaSyncEvExtremityFloats();
4296|                }
4297|            }, 80);
4298|        });
4299|
4300|        if (!window.__ssmaEvExtremityResizeBound) {
4301|            window.__ssmaEvExtremityResizeBound = true;
4302|            window.addEventListener('resize', function () {
4303|                if (typeof window.__ssmaSyncEvExtremityFloats === 'function') {
4304|                    window.__ssmaSyncEvExtremityFloats();
4305|                }
4306|            });
4307|        }
4308|
4309|        syncEvTagHiddens();
4310|        syncEvExtremitySelects();
4311|
4312|        if (typeof shared.initSearchableMemberField === 'function' && window.SSMA_CAN_CHANGE_EVENT_MANAGER) {
4313|            shared.initSearchableMemberField($('#ev_manager'), {
4314|                mode: 'single',
4315|                placeholder: 'Buscar gestor...',
4316|                dropdownParent: '#modalEventNew-offcanvas-wrapper',
4317|                remoteExtraParams: { gestor_modal: 1, responsible_manager: 1 }
4318|            });
4319|        }
4320|
4321|        if (typeof shared.closeAllSearchableMemberDropdowns === 'function') {
4322|            shared.closeAllSearchableMemberDropdowns('#modalEventNew-offcanvas-wrapper');
4323|        }
4324|
4325|        initEvTagSelectsOnce._done = true;
4326|
4327|        // Expõe configs de tags para uso externo (ex.: populateForEdit)
4328|        window.EvModal = window.EvModal || {};
4329|        window.EvModal._tagConfigs = EV_TAG_CONFIGS;
4330|        window.EvModal.syncTagHiddens = syncEvTagHiddens;
4331|    }
4332|
4333|    /* ── Evidências: upload AJAX + preview ──────────────── */
4334|    var EV_EVIDENCE_UPLOAD_URL = '{{ path('admin_ssma_occurrence_evidence_upload') }}';
4335|    var EV_EVIDENCE_APPEND_URL = '{{ path('admin_ssma_occurrence_evidence_append') }}';
4336|    var EV_CREATE_URL          = '{{ path('ssma_event_create') }}';
4337|    var EV_UPDATE_URL_TPL      = '{{ path('ssma_event_update', {id: '__EV_ID__'})|e('js') }}';
4338|    var EV_EVIDENCE_MAX_BYTES  = 10 * 1024 * 1024;
4339|    var evEvidences = []; // [{name, path, persisted?}]
4340|    var evRosResolutionEvidences = []; // [{name, path, persisted?}] — evidência opcional do "Visto e resolvido"
4341|
4342|    function evCurrentEventId() {
4343|        var el = document.getElementById('ev_id');
4344|        var id = el ? parseInt(el.value, 10) : 0;
4345|        return (id > 0 && !isNaN(id)) ? id : 0;
4346|    }
4347|
4348|    function evShowFlashApprovalToast(flashApproval) {
4349|        if (!flashApproval || typeof showToast !== 'function') {
4350|            return;
4351|        }
4352|        if (!flashApproval.success) {
4353|            return;
4354|        }
4355|        if (flashApproval.cc_demand_id) {
4356|            showToast(
4357|                'Flash report enviado para aprovação (demanda #' + flashApproval.cc_demand_id + ').',
4358|                'Flash report',
4359|                'fas fa-bell',
4360|                'bg-info'

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6690, "end_line": 6760}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 6690-6760
6690|            if (window.__ssmaEvCreateMode === 'ros') {
6691|                modalTitle.textContent = 'Novo ROS';
6692|            } else if (window.__ssmaEvCreateMode === 'event') {
6693|                modalTitle.textContent = 'Novo evento';
6694|            } else {
6695|                modalTitle.textContent = 'Nova ocorrência';
6696|            }
6697|        }
6698|        var generalPanelCreate = document.getElementById('ev-step-general');
6699|        if (generalPanelCreate) generalPanelCreate.classList.remove('is-readonly');
6700|
6701|        if (typeof initEvTagSelectsOnce === 'function') {
6702|            initEvTagSelectsOnce();
6703|        }
6704|        evResetCreateUiState();
6705|        if (typeof evInitTypeSelectFromConfig === 'function') {
6706|            evInitTypeSelectFromConfig();
6707|        }
6708|        evApplyDatetimeMax();
6709|        evApplyAuraTitleStatusVisibility('create');
6710|        if (typeof window.renderEvCategorySelect === 'function') {
6711|            window.renderEvCategorySelect('', '');
6712|        }
6713|
6714|        var typeEl = document.getElementById('ev_type');
6715|        applyTypeBlock((typeEl && typeEl.value) ? typeEl.value : '');
6716|        ensureClassificationDefaults('', true);
6717|        evDefaultDatetimeToday();
6718|
6719|        if (window.SSMA_IS_AURA_ADMIN) {
6720|            evSetVal('ev_title', '');
6721|            evSetVal('ev_status', 'ABERTO');
6722|        }
6723|
6724|        (function applyEvCreateDefaults() {
6725|            var defs = window.SSMA_EVENT_FORM_DEFAULTS || {};
6726|            if (!defs || typeof defs !== 'object') {
6727|                defs = {};
6728|            }
6729|            function apply() {
6730|                if (defs.manager_id) {
6731|                    evSetVal('ev_manager', String(defs.manager_id));
6732|                }
6733|                if (defs.team_id) {
6734|                    evSetVal('ev_team_id', String(defs.team_id));
6735|                }
6736|                ensureClassificationDefaults('', true);
6737|                var $ = window.jQuery;
6738|                if ($) {
6739|                    $('#ev_manager').trigger('change');
6740|                    $('#ev_team_id').trigger('change');
6741|                }
6742|                if (typeof window.EvModal.syncTagHiddens === 'function') {
6743|                    // Evita regravar draft vazio logo após limpar a criação.
6744|                    var _persist = typeof evPersistDraftSoon === 'function' ? evPersistDraftSoon : null;
6745|                    if (_persist) {
6746|                        window.__ssmaEvSkipDraftPersist = true;
6747|                    }
6748|                    window.EvModal.syncTagHiddens();
6749|                    window.__ssmaEvSkipDraftPersist = false;
6750|                }
6751|                evFilterInjuredPersonSelect();
6752|                evSyncDescaracterUi();
6753|                evSyncContainmentTimeEnabled();
6754|                evSyncInjuryClassificationByLeave();
6755|                evSyncDerivedSeverityFromConsequence();
6756|            }
6757|            if (typeof window.requestAnimationFrame === 'function') {
6758|                window.requestAnimationFrame(function () { apply(); });
6759|            } else {
6760|                window.setTimeout(apply, 0);

{"search_text": "SSMA_IS_GESTOR_USER"}

File: src/Controller/SsmaController.php
Match lines: 2
3496|                (bool) ($viewData['ssma_is_gestor_user'] ?? false)
13681|                'ssma_is_gestor_user' => $ssmaIsTagTeamGestor

File: templates/ssma/occurrence/occurrence_view.html.twig
Match lines: 1
619|        or ssma_is_gestor_user|default(false)

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 2
48|        {% set ssmaIsGestorUser = ssma_is_gestor_user|default(false) %}
54|        window.SSMA_IS_GESTOR_USER = {{ ssmaIsGestorUser ? 'true' : 'false' }};

File: tests/Unit/Product/Ssma/assert_branch_ui_fixes.php
Match lines: 1
295|    && fileContains($occView, 'ssma_is_gestor_user|default(false)')

File: tests/Unit/Product/Ssma/assert_flash_report_flow.php
Match lines: 1
56|    && fileContains($occView, 'ssma_is_gestor_user|default(false)')

{"search_text": "SSMA_EV_MEMBERS_BY_ID", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 4
1517|    window.SSMA_EV_MEMBERS_BY_ID = (function (list) {
2093|        var map = window.SSMA_EV_MEMBERS_BY_ID || {};
3160|        var meta = (window.SSMA_EV_MEMBERS_BY_ID || {})[String(reporterId)];
5933|            ? shared.memberMetaFromSelection(managerId, $('#ev_manager option:selected'), window.SSMA_EV_MEMBERS_BY_ID || {})

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 1505, "end_line": 1565}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 1505-1565
1505|            position: g.position|default(''),
1506|            avatar: g.avatar|default(''),
1507|            area: g.area|default(''),
1508|            team_name: g.team_name|default(''),
1509|            registration: _gRegMap,
1510|            superior_id: g.superior_id|default(null),
1511|            supervisor_name: g.supervisor_name|default(''),
1512|            gerencia: g.gerencia|default(g.area|default('')),
1513|            work_shift_id: g.work_shift_id|default(null),
1514|            work_shift_label: g.work_shift_label|default('')
1515|        }]) %}
1516|    {% endfor %}
1517|    window.SSMA_EV_MEMBERS_BY_ID = (function (list) {
1518|        var map = {};
1519|        (list || []).forEach(function (m) {
1520|            if (!m || m.id == null || m.id === '') return;
1521|            var key = String(m.id);
1522|            // Mantém o primeiro registro completo; gestores não sobrescrevem membros.
1523|            if (!map[key]) {
1524|                map[key] = m;
1525|            } else {
1526|                var cur = map[key];
1527|                if (!cur.position && m.position) cur.position = m.position;
1528|                if (!cur.supervisor_name && m.supervisor_name) cur.supervisor_name = m.supervisor_name;
1529|                if (!cur.gerencia && (m.gerencia || m.area)) cur.gerencia = m.gerencia || m.area;
1530|                if (!cur.area && m.area) cur.area = m.area;
1531|                if (!cur.work_shift_label && m.work_shift_label) cur.work_shift_label = m.work_shift_label;
1532|                if (!cur.team_name && m.team_name) cur.team_name = m.team_name;
1533|            }
1534|        });
1535|        return map;
1536|    })({{ _evMembersList|json_encode|raw }});
1537|    window.SSMA_ESOCIAL_CAT_INTEGRATION = {{ ssma_esocial_cat_integration|default(false) ? 'true' : 'false' }};
1538|
1539|    /** Tipos de ocorrência que o usuário logado pode finalizar como técnico (tags SSMA / mapa antigo). */
1540|    var EV_USER_TECHNICAL_TYPES = {{ user_technical_types|default([])|json_encode|raw }};
1541|    var EV_LOGGED_MEMBER_ID = {{ (ssma_logged_member_id|default(0))|json_encode|raw }};
1542|    {# Belt-and-suspenders: controller flag + roles Twig (Felipe 05/08 — Tenant sem botão Aprofundamento). #}
1543|    {% set _ev_admin_aprof = ssma_is_admin_aprofundamento|default(false)
1544|        or is_granted('ROLE_SUPER_ADMIN')
1545|        or is_granted('ROLE_TENANT')
1546|        or is_granted('ROLE_ADMIN')
1547|        or (is_granted('ROLE_MANAGER') and not (app.user and 'ROLE_USER' in app.user.roles))
1548|    %}
1549|    var EV_IS_ADMIN_APROFUNDAMENTO = {{ _ev_admin_aprof|json_encode|raw }};
1550|    var EV_CORRECTIVE_HIERARCHY_OPTIONS = [
1551|        { value: 'elimination', label: 'Eliminação' },
1552|        { value: 'substitution', label: 'Substituição' },
1553|        { value: 'independent_engineering', label: 'Engenharia Independente' },
1554|        { value: 'dependent_engineering', label: 'Engenharia Dependente' },
1555|        { value: 'administrative', label: 'Administrativa' },
1556|        { value: 'epi', label: 'EPI' }
1557|    ];
1558|    var EV_CORRECTIVE_MEMBER_OPTIONS = [
1559|        {% for member in allMembers|default([]) %}
1560|        { id: {{ member.id|json_encode|raw }}, name: {{ member.name|json_encode|raw }} }{% if not loop.last %},{% endif %}
1561|        {% endfor %}
1562|    ];
1563|
1564|    /** Pré-preenchimento (ex.: gestor/equipe do usuário com escopo por equipe). */
1565|    window.SSMA_EVENT_FORM_DEFAULTS = {{ ssma_event_form_defaults|default({})|json_encode|raw }};

{"search_text": "_evMembersList", "file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"]}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 4
1476|    {% set _evMembersList = [] %}
1482|        {% set _evMembersList = _evMembersList|merge([{
1502|        {% set _evMembersList = _evMembersList|merge([{
1536|    })({{ _evMembersList|json_encode|raw }});

{"file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 1460, "end_line": 1515}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7818)
IS_TRUNCATED: false
LINE_RANGE: 1460-1515
1460|
1461|    /** Tipos que este usuário tem permissão explícita para criar (vazio = herda regra do cargo). */
1462|    window.SSMA_ALLOWED_CREATE_TYPES = {{ ssmaAllowedCreateTypes|default([])|json_encode|raw }};
1463|
1464|    /** Mapa membro -> equipe (primeira equipe do membro). Usado para selecionar a equipe ao escolher o gestor. */
1465|    {% set ev_member_team_map = {} %}
1466|    {% for team in teams|default([]) %}
1467|        {% for mid in team.members|default([]) %}
1468|            {% if ev_member_team_map[mid] is not defined %}
1469|                {% set ev_member_team_map = ev_member_team_map|merge({(mid): team.id}) %}
1470|            {% endif %}
1471|        {% endfor %}
1472|    {% endfor %}
1473|    window.SSMA_EV_MEMBER_TEAM = {{ ev_member_team_map|json_encode|raw }};
1474|
1475|    {# Lista (não mapa): Twig merge com chave numérica reindexa e quebra lookup por member id. #}
1476|    {% set _evMembersList = [] %}
1477|    {% for m in allMembersForMeta|default(allMembers|default([])) %}
1478|        {% set _mReg = m.registration|default('') %}
1479|        {% if _mReg == '' %}
1480|            {% set _mReg = '%07d'|format(m.id) %}
1481|        {% endif %}
1482|        {% set _evMembersList = _evMembersList|merge([{
1483|            id: m.id,
1484|            name: m.name|default(''),
1485|            position: m.position|default(''),
1486|            avatar: m.avatar|default(''),
1487|            area: m.area|default(''),
1488|            team_name: m.team_name|default(''),
1489|            registration: _mReg,
1490|            superior_id: m.superior_id|default(null),
1491|            supervisor_name: m.supervisor_name|default(''),
1492|            gerencia: m.gerencia|default(m.area|default('')),
1493|            work_shift_id: m.work_shift_id|default(null),
1494|            work_shift_label: m.work_shift_label|default('')
1495|        }]) %}
1496|    {% endfor %}
1497|    {% for g in gestores|default([]) %}
1498|        {% set _gRegMap = g.registration|default('') %}
1499|        {% if _gRegMap == '' %}
1500|            {% set _gRegMap = '%07d'|format(g.id) %}
1501|        {% endif %}
1502|        {% set _evMembersList = _evMembersList|merge([{
1503|            id: g.id,
1504|            name: g.name|default(''),
1505|            position: g.position|default(''),
1506|            avatar: g.avatar|default(''),
1507|            area: g.area|default(''),
1508|            team_name: g.team_name|default(''),
1509|            registration: _gRegMap,
1510|            superior_id: g.superior_id|default(null),
1511|            supervisor_name: g.supervisor_name|default(''),
1512|            gerencia: g.gerencia|default(g.area|default('')),
1513|            work_shift_id: g.work_shift_id|default(null),
1514|            work_shift_label: g.work_shift_label|default('')
1515|        }]) %}

{"file_path": "src/Controller/SsmaController.php", "start_line": 28610, "end_line": 28720}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 28610-28720
28610|        }
28611|
28612|        $resolvedId = $this->resolveCompanyMemberIdByDisplayLabel($name, $membersById);
28613|        if ($resolvedId > 0) {
28614|            $details['manager_id'] = $resolvedId;
28615|            $data['details'] = $details;
28616|        }
28617|
28618|        return $data;
28619|    }
28620|
28621|    /**
28622|     * @param array<int, array<string, mixed>> $membersById
28623|     *
28624|     * @return array<string, mixed>
28625|     */
28626|    private function enrichOccurrenceManagerFields(array $row, array $membersById, ?Company $company = null): array
28627|    {
28628|        if ($company instanceof Company) {
28629|            $row = $this->enrichOccurrenceCreatorAndManagerFallback($row, $company);
28630|        }
28631|
28632|        $managerId = (int) ($row['manager_id'] ?? 0);
28633|        $managerName = trim((string) ($row['manager_name'] ?? ''));
28634|
28635|        if ($managerId > 0 && isset($membersById[$managerId])) {
28636|            $m = $membersById[$managerId];
28637|            $row['manager_display_name'] = (string) ($m['name'] ?? '');
28638|            $row['manager_position'] = (string) ($m['position'] ?? '');
28639|
28640|            return $row;
28641|        }
28642|
28643|        if ($managerName === '' && $managerId > 0 && $company instanceof Company) {
28644|            $member = $this->entityManager->find(CompanyMembers::class, $managerId);
28645|            if ($member instanceof CompanyMembers && $member->getCompany()?->getId() === $company->getId()) {
28646|                $managerName = $this->ssmaMemberDisplayLabel($member);
28647|                if ($managerName === '') {
28648|                    $managerName = (string) ($member->getEmail() ?? '');
28649|                }
28650|            }
28651|        }
28652|
28653|        if ($managerName !== '') {
28654|            $resolvedId = $this->resolveCompanyMemberIdByDisplayLabel($managerName, $membersById);
28655|            if ($resolvedId > 0) {
28656|                $row['manager_id'] = $resolvedId;
28657|                if (isset($membersById[$resolvedId])) {
28658|                    $m = $membersById[$resolvedId];
28659|                    $row['manager_display_name'] = (string) ($m['name'] ?? $managerName);
28660|                    $row['manager_position'] = (string) ($m['position'] ?? '');
28661|
28662|                    return $row;
28663|                }
28664|            }
28665|            $row['manager_display_name'] = $managerName;
28666|
28667|            return $row;
28668|        }
28669|
28670|        if ($managerId > 0 && $company instanceof Company) {
28671|            $member = $this->entityManager->find(CompanyMembers::class, $managerId);
28672|            if ($member instanceof CompanyMembers && $member->getCompany()?->getId() === $company->getId()) {
28673|                $label = $this->ssmaMemberDisplayLabel($member);
28674|                if ($label === '') {
28675|                    $label = (string) ($member->getEmail() ?? '');
28676|                }
28677|                if ($label !== '') {
28678|                    $row['manager_display_name'] = $label;
28679|                }
28680|            }
28681|        }
28682|
28683|        return $row;
28684|    }
28685|
28686|    /**
28687|     * @param array<int, array<string, mixed>> $membersById
28688|     */
28689|    private function resolveCompanyMemberIdByDisplayLabel(string $label, array $membersById): int
28690|    {
28691|        $needle = mb_strtolower(trim($label));
28692|        if ($needle === '') {
28693|            return 0;
28694|        }
28695|
28696|        foreach ($membersById as $id => $memberRow) {
28697|            $name = mb_strtolower(trim((string) ($memberRow['name'] ?? '')));
28698|            if ($name !== '' && $name === $needle) {
28699|                return (int) $id;
28700|            }
28701|        }
28702|
28703|        return 0;
28704|    }
28705|
28706|    public function listMembersJson(): JsonResponse
28707|    {
28708|        /** @var User|null $user */
28709|        $user = $this->getUser();
28710|        if (!$user) {
28711|            return new JsonResponse(['success' => false, 'members' => []], 401);
28712|        }
28713|
28714|        $company = $user->getCompany();
28715|        if (!$company) {
28716|            return new JsonResponse(['success' => false, 'members' => []], 404);
28717|        }
28718|
28719|        $members = $this->entityManager->getRepository(CompanyMembers::class)
28720|            ->findBy(['company' => $company], ['id' => 'ASC']);

{"end_line": 26750, "file_path": "src/Controller/SsmaController.php", "start_line": 26600}

File: src/Controller/SsmaController.php (Total lines: 28894)
IS_TRUNCATED: false
LINE_RANGE: 26600-26750
26600|     * Atualiza um evento existente.
26601|     */
26602|    public function updateEvent(Request $request, int $id): JsonResponse
26603|    {
26604|        /** @var \App\Entity\User|null $user */
26605|        $user    = $this->getUser();
26606|        $company = $user?->getCompany();
26607|        if (!$user || !$company) {
26608|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
26609|        }
26610|
26611|        $event = $this->entityManager->getRepository(\App\Entity\SsmaEvent::class)->find($id);
26612|
26613|        if (!$event || $event->getCompany()->getId() !== $company->getId()) {
26614|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26615|        }
26616|
26617|        if (!$this->isSsmaEventVisibleUnderOccurrenceTeamDashboardScope($event, $company, $user)) {
26618|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
26619|        }
26620|
26621|        $data = json_decode($request->getContent(), true) ?? [];
26622|        $aprofundamentoOnly = !empty($data['aprofundamento_only']);
26623|        $existingDetails = is_array($event->getDetails()) ? $event->getDetails() : [];
26624|        $aprofundamentoStatus = strtolower(trim((string) ($existingDetails['aprofundamento_status'] ?? '')));
26625|        $aprofundamentoFinalized = $aprofundamentoStatus === 'finalized'
26626|            || !empty($existingDetails['aprofundamento_complete']);
26627|
26628|        $canFullEdit = $this->canEditSsmaEvent($company, $user, $event);
26629|        $eventTypeForAccess = (string) ($data['type'] ?? $event->getType());
26630|        $canAprofundamento = $this->canAccessSsmaEventAprofundamento(
26631|            $company,
26632|            $user,
26633|            $eventTypeForAccess,
26634|            is_array($data['details'] ?? null) ? $data['details'] : $existingDetails,
26635|            (int) ($event->getCreatedById() ?? 0)
26636|        );
26637|        $isAprofundamentoUpdate = $aprofundamentoOnly
26638|            || !empty($data['aprofundamento_complete'])
26639|            || strtolower(trim((string) ($data['aprofundamento_status'] ?? ''))) === 'finalized';
26640|
26641|        if (!$canFullEdit) {
26642|            if (!$isAprofundamentoUpdate || !$canAprofundamento) {
26643|                return new JsonResponse(['success' => false, 'message' => 'Você não tem autorização para editar esse tipo de ocorrência.'], 403);
26644|            }
26645|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
26646|                return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
26647|            }
26648|            $data = $this->mergeSsmaEventAprofundamentoOnlyPayload($event, $data);
26649|        } else {
26650|            $data = array_merge($this->eventToValidationArray($event), $data);
26651|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
26652|                if ($aprofundamentoOnly || $isAprofundamentoUpdate) {
26653|                    return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
26654|                }
26655|                $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
26656|                    $data,
26657|                    (string) ($data['type'] ?? $event->getType()),
26658|                    $existingDetails
26659|                );
26660|            }
26661|        }
26662|
26663|        $data = $this->normalizeSsmaEventPayload($data, $company);
26664|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
26665|        $data = $this->applySsmaEventManagerAssignment($data, $company, $user, $existingDetails);
26666|        $data = $this->applySsmaDescaracterPermissionGate(
26667|            $data,
26668|            $company,
26669|            $user,
26670|            $existingDetails
26671|        );
26672|
26673|        $eventType = (string) ($data['type'] ?? $event->getType());
26674|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
26675|        // Em modo só-aprofundamento o especialista já está autorizado; não stripa o que acabou de enviar.
26676|        if (
26677|            !$aprofundamentoOnly
26678|            && !$this->canAccessSsmaEventAprofundamento($company, $user, $eventType, $eventDetails, $event->getCreatedById())
26679|            && in_array($eventType, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
26680|        ) {
26681|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
26682|                $data,
26683|                $eventType,
26684|                $existingDetails
26685|            );
26686|        }
26687|
26688|        // Draft vs finalize do aprofundamento (especialista / admin).
26689|        $wantsFinalize = false;
26690|        if ($aprofundamentoOnly || !empty($data['aprofundamento_complete']) || array_key_exists('aprofundamento_status', $data)) {
26691|            $detailsOut = is_array($data['details'] ?? null) ? $data['details'] : [];
26692|            $wantsFinalize = !empty($data['aprofundamento_complete'])
26693|                || strtolower(trim((string) ($data['aprofundamento_status'] ?? ''))) === 'finalized';
26694|            if ($wantsFinalize) {
26695|                $data['aprofundamento_complete'] = true;
26696|                $detailsOut['aprofundamento_complete'] = true;
26697|                $detailsOut['aprofundamento_status'] = 'finalized';
26698|            } else {
26699|                $data['aprofundamento_complete'] = false;
26700|                $detailsOut['aprofundamento_complete'] = false;
26701|                $detailsOut['aprofundamento_status'] = 'draft';
26702|            }
26703|            $data['details'] = $detailsOut;
26704|        }
26705|
26706|        // Valida apenas se type ou details estiverem presentes no payload (atualização parcial ok)
26707|        if (!empty($data['type']) || !empty($data['details'])) {
26708|            $validator = new \App\Service\Ssma\SsmaEventValidator();
26709|            $errors    = $validator->validate($data, [
26710|                'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
26711|                'soft_aprofundamento' => $aprofundamentoOnly && !$wantsFinalize,
26712|            ]);
26713|            if ($errors !== []) {
26714|                return new JsonResponse(['success' => false, 'errors' => $errors], 422);
26715|            }
26716|        }
26717|
26718|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
26719|        if ($teamScopeErr !== null) {
26720|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
26721|        }
26722|
26723|        $service = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
26724|        $prevType         = $event->getType();
26725|        $prevStatus       = $event->getStatus();
26726|        $prevImmediateRisk = !empty($event->getDetails()['immediate_risk']);
26727|        $prevManagerId = (int) ($event->getDetails()['manager_id'] ?? 0);
26728|        $wasRejectedApproval = $this->ssmaOccurrenceApprovalService->getState($event)['status']
26729|            === \App\Service\Ssma\SsmaOccurrenceApprovalService::STATUS_REJECTED;
26730|        $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
26731|        $event      = $service->updateFromPayload($event, $data, $user, $editorMeta);
26732|
26733|        if ($wasRejectedApproval) {
26734|            // Readequação: reenvia tanto na edição completa quanto ao finalizar só o aprofundamento.
26735|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, true);
26736|        } elseif ($wantsFinalize) {
26737|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, false);
26738|        }
26739|
26740|        $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
26741|        if ($registeredByName === '') {
26742|            $registeredByName = $user->getEmail() ?? 'Sistema';
26743|        }
26744|        $automationContext = [
26745|            'registered_by_name' => $registeredByName,
26746|            'type_raw'           => $event->getType(),
26747|            'new_type'           => $event->getType(),
26748|        ];
26749|        $flashApproval = null;
26750|

{"comments": [{"content": "A reescrita desta validação removeu a checagem que exigia que `person_id`/`people_ids` (pessoas envolvidas) pertencessem às equipes do usuário (mensagem antiga \"As pessoas envolvidas devem pertencer às suas equipes.\"). Em paralelo, o filtro que restringia `allMembersForEventPeople` às equipes/área do usuário no modal também foi removido. Resultado: um Supervisor/Gestor de Equipe com escopo passa a conseguir referenciar qualquer membro da empresa como envolvido, tanto pela UI quanto por POST direto, sem nenhuma validação de escopo no servidor para pessoas. Como o objetivo desta PR é trocar a regra do \"gestor responsável\" para líder imediato, essa perda de restrição parece regressão não intencional — confirmar com produto e, se não for desejada, restaurar a validação de escopo das pessoas (ou ao menos manter o filtro do modal).", "existing_code": "        $leaderIds = $this->collectImmediateLeaderMemberIds($company);\n        $ownLeaderId = $this->resolveLoggedMemberImmediateLeaderId($company, $user);\n        $managerAllowed = isset($leaderIds[$managerId]) && isset($allowedMembers[$managerId]);", "category": "security", "severity": "medium", "path": "src/Controller/SsmaController.php"}, {"content": "Este método (usado na listagem sempre que o usuário tem escopo de equipe/área) recarrega toda a lista de membros e equipes da empresa via `loadCompanyMembersAndTeamsLite()` para montar `$teamsById`, mesmo que o request já tenha carregado os mesmos dados no fluxo principal do dashboard. Em uma página que já é pesada, isso dobra uma consulta de empresa inteira a cada abertura. Como só o nome da equipe do evento anexado é necessário, é melhor receber `$teamsById`/`$teams` de quem chamou (ou carregar apenas o mapa de equipe dos eventos retornados) em vez de refazer o load completo.", "existing_code": "        [, $teams] = $this->loadCompanyMembersAndTeamsLite($company);\n        $teamsById = array_column($teams, null, 'id');", "category": "performance", "severity": "low", "path": "src/Controller/SsmaController.php"}]}

(async)

{"state": "DONE"}