{"file_path": "src/Service/Ssma/SsmaEventValidator.php", "start_line": 660, "end_line": 760}

File: src/Service/Ssma/SsmaEventValidator.php (Total lines: 883)
IS_TRUNCATED: false
LINE_RANGE: 660-760
660|                            }
661|                        }
662|                    }
663|                }
664|            }
665|        }
666|
667|        $workLeave = strtoupper(trim((string) ($d['work_leave'] ?? '')));
668|        $injClass    = strtoupper(trim((string) ($d['injury_classification'] ?? '')));
669|        if ($hadInjury && $injClass === '') {
670|            $errors[] = 'Classificação da lesão é obrigatória quando há lesão.';
671|        }
672|        if ($workLeave === 'PARCIAL') {
673|            $errors[] = 'Afastamento parcial não é mais permitido. Use Com ou Sem afastamento.';
674|        }
675|        if ($workLeave !== '' && !\in_array($workLeave, ['NAO', 'TOTAL'], true)) {
676|            $errors[] = 'Licença inválida. Use Sem afastamento ou Com afastamento total.';
677|        }
678|        if ($workLeave === 'NAO' && \in_array($injClass, ['LTI', 'LTI_FATALIDADE', 'LTI_INCAPACITANTE', 'FAT'], true)) {
679|            $errors[] = 'LTI/FAT não é permitido quando a licença é Sem afastamento.';
680|        }
681|        if ($workLeave === 'TOTAL' && $injClass !== '' && !\in_array($injClass, ['LTI', 'LTI_FATALIDADE', 'LTI_INCAPACITANTE', 'FAT'], true)) {
682|            $errors[] = 'Com afastamento total, a classificação deve ser FAT ou LTI — Afastamento.';
683|        }
684|        if ($workLeave === 'NAO' && $injClass !== '' && !\in_array($injClass, ['FAC', 'MTC', 'RWC'], true)) {
685|            $errors[] = 'Sem afastamento, use apenas FAC, MTC ou RWC.';
686|        }
687|
688|        if ($hadInjury) {
689|            if (isset($d['body_location_detail']) && $d['body_location_detail'] !== null && $d['body_location_detail'] !== '') {
690|                if (!\is_string($d['body_location_detail'])) {
691|                    $errors[] = 'Detalhe da localização no corpo deve ser texto.';
692|                } elseif (mb_strlen((string) $d['body_location_detail']) > 2000) {
693|                    $errors[] = 'Detalhe da localização no corpo: no máximo 2000 caracteres.';
694|                }
695|            }
696|            /* hand_finger / foot_toe no nível details: legado (MAO/PE sem lado); preferir por body_parts[]. */
697|            $allowedHandFlat = ['POLEGAR', 'INDICADOR', 'MEDIO', 'ANULAR', 'MINIMO'];
698|            $allowedFootFlat = ['HALUX', 'SEGUNDO_DEDO', 'TERCEIRO_DEDO', 'QUARTO_DEDO', 'MINIMO_PE'];
699|            if (!empty($d['hand_finger'])) {
700|                foreach (array_filter(array_map('trim', explode(',', (string) $d['hand_finger']))) as $v) {
701|                    if (!\in_array($v, $allowedHandFlat, true)) {
702|                        $errors[] = 'Dedo da mão inválido: ' . $v;
703|                    }
704|                }
705|            }
706|            if (!empty($d['foot_toe'])) {
707|                foreach (array_filter(array_map('trim', explode(',', (string) $d['foot_toe']))) as $v) {
708|                    if (!\in_array($v, $allowedFootFlat, true)) {
709|                        $errors[] = 'Dedo do pé inválido: ' . $v;
710|                    }
711|                }
712|            }
713|        }
714|
715|        $descVal = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';
716|        // Médico sempre informa caracterização no aprofundamento dedicado.
717|        if (!empty($data['aprofundamento_only'])) {
718|            if (!\in_array($descVal, ['0', '1'], true)) {
719|                $errors[] = 'Informe se o evento é caracterizado como acidente (Sim/Não).';
720|            } else {
721|                $comment = trim((string) ($d['descaracter_comment'] ?? ''));
722|                if ($comment === '') {
723|                    $errors[] = 'Comentário de caracterização do acidente é obrigatório.';
724|                }
725|            }
726|        }
727|
728|        return $errors;
729|    }
730|
731|    private function validateAcidenteMaterial(array $d): array
732|    {
733|        $errors = [];
734|
735|        if (empty($d['potential_severity']) || !PotentialSeverityEnum::isValid($d['potential_severity'])) {
736|            $errors[] = 'Consequência potencial / Gravidade é obrigatória. Selecione uma opção válida.';
737|        }
738|
739|        if (empty($d['asset_type'])) {
740|            $errors[] = 'Tipo de ativo é obrigatório para Acidente Material.';
741|        }
742|        if (!isset($d['operational_impact'])) {
743|            $errors[] = 'Impacto operacional é obrigatório.';
744|        }
745|        // Barreira que falhou removida do formulário AM (Brenda) — legado opcional.
746|        if (!empty($d['failed_barrier']) && !FailedBarrierEnum::isValid((string) $d['failed_barrier'])) {
747|            $errors[] = 'Barreira que falhou: valor inválido.';
748|        }
749|        if (empty($d['barrier_type']) || !BarrierTypeEnum::isValid((string) $d['barrier_type'])) {
750|            $errors[] = 'Tipo de barreira é obrigatório. Selecione uma opção válida.';
751|        }
752|
753|        return $errors;
754|    }
755|
756|    private function validateAcidenteAmbiental(array $d): array
757|    {
758|        $errors = [];
759|
760|        if (empty($d['potential_severity']) || !PotentialSeverityEnum::isValid($d['potential_severity'])) {

{"path_array": ["tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php", "tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php"]}

==== FILE: tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php ====
diff --git a/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php b/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
--- a/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
+++ b/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
@@ -20,6 +20,7 @@ use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
 use App\Service\Ssma\SsmaPreventionMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightService;
+use App\Service\Ssma\SsmaStakeholderActionPermissionService;
 use App\Repository\SsmaOccurrenceCreatePermissionRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use Doctrine\Persistence\ObjectRepository;
@@ -140,7 +141,14 @@ final class GlobalPermissionListenerOccurrenceCreateWriteTest extends SsmaTestCa
                 $permissionService,
                 $authorizationChecker,
             ),
-            $this->createMock(SsmaActionPlanMutatePermissionService::class),
+            new SsmaActionPlanMutatePermissionService(
+                $entityManager,
+                new SsmaStakeholderActionPermissionService(
+                    $permissionService,
+                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
+                    $authorizationChecker,
+                ),
+            ),
             new SsmaOccurrenceCreatePermissionService(
                 $entityManager,
                 $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),
==== FILE: tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php ====
diff --git a/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php b/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
--- a/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
+++ b/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
@@ -20,6 +20,7 @@ use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
 use App\Service\Ssma\SsmaPreventionMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightService;
+use App\Service\Ssma\SsmaStakeholderActionPermissionService;
 use App\Repository\SsmaOccurrenceCreatePermissionRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use Doctrine\Persistence\ObjectRepository;
@@ -157,7 +158,14 @@ final class GlobalPermissionListenerPreventionWriteTest extends SsmaTestCase
                 $permissionService,
                 $authorizationChecker,
             ),
-            $this->createMock(SsmaActionPlanMutatePermissionService::class),
+            new SsmaActionPlanMutatePermissionService(
+                $entityManager,
+                new SsmaStakeholderActionPermissionService(
+                    $permissionService,
+                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
+                    $authorizationChecker,
+                ),
+            ),
             new SsmaOccurrenceCreatePermissionService(
                 $entityManager,
                 $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),

{"search_text": "descaracter_suspect", "file_patterns": ["src/"]}

File: src/Controller/SsmaController.php
Match lines: 6
14820|            'descaracter_suspect'    => !empty($details['descaracter_suspect']) ? 1 : 0,
27353|            'injured_person_details', 'descaracter_suspect', 'descaracterizado', 'descaracter_comment', 'witness_ids',
27449|                foreach (['descaracter_suspect', 'descaracterizado', 'descaracter_comment'] as $descKey) {
27461|        if (isset($details['descaracter_suspect'])) {
27462|            $details['descaracter_suspect'] = !empty($details['descaracter_suspect']) && $details['descaracter_suspect'] !== '0' ? 1 : 0;
27697|            'descaracter_suspect',

File: src/Service/Ssma/Export/SsmaOccurrenceExportRowMapper.php
Match lines: 1
156|            'ap_descaracter_suspect' => SsmaOccurrenceExportLabels::boolLabel($d['descaracter_suspect'] ?? null),

File: src/Service/Ssma/Export/SsmaOccurrenceExportSchema.php
Match lines: 1
76|        'ap_descaracter_suspect' => 'Suspeita de descaracterização?',

File: src/Service/Ssma/SsmaAutomationService.php
Match lines: 2
648|                $suspect = ($payload['descaracter_suspect'] ?? '0') === '1';
2031|        $payload['descaracter_suspect'] = !empty($details['descaracter_suspect']) ? '1' : '0';

File: src/Service/Ssma/SsmaEventService.php
Match lines: 5
161|            'descaracter_suspect', 'descaracterizado', 'descaracter_comment',
186|        if (!empty($card['descaracter_suspect'])) {
187|            $details['descaracter_suspect'] = 1;
188|        } elseif (array_key_exists('descaracter_suspect', $card)) {
189|            $details['descaracter_suspect'] = 0;

{"search_text": "descaracterizado", "file_patterns": ["src/Service/Ssma/SsmaEventValidator.php"]}

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 2
183|        $desc = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';
715|        $descVal = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';

{"end_line": 230, "file_path": "src/Service/Ssma/SsmaEventValidator.php", "start_line": 140}

File: src/Service/Ssma/SsmaEventValidator.php (Total lines: 883)
IS_TRUNCATED: false
LINE_RANGE: 140-230
140|        if (\in_array($type, [EventTypeEnum::ROS, EventTypeEnum::QUASE_ACIDENTE], true)) {
141|            $errors = array_merge($errors, $this->validateDetails($type, $details, $data));
142|        }
143|
144|        return array_values(array_unique($errors));
145|    }
146|
147|    private function isAccidentType(string $type): bool
148|    {
149|        return \in_array($type, [
150|            EventTypeEnum::ACIDENTE_PESSOAL,
151|            EventTypeEnum::ACIDENTE_MATERIAL,
152|            EventTypeEnum::ACIDENTE_AMBIENTAL,
153|        ], true);
154|    }
155|
156|    /**
157|     * @param array<string, mixed> $data
158|     * @param array<string, mixed> $d
159|     */
160|    private function hasAccidentAprofundamentoFields(array $data, array $d): bool
161|    {
162|        // NÃO usar approach/strategic_nature aqui: o formulário manda approach com default
163|        // na 1ª etapa e isso não significa que o usuário entrou no Aprofundamento.
164|        if (trim((string) ($data['consequence'] ?? '')) !== '') {
165|            return true;
166|        }
167|
168|        foreach ([
169|            'potential_consequence',
170|            'potential_severity',
171|            'injury_type',
172|            'injury_classification',
173|            'asset_type',
174|            // Meio/poluente ficam na Identificação (Ambiental) — não disparam aprofundamento.
175|            'failed_barrier',
176|            'barrier_type',
177|        ] as $key) {
178|            if (trim((string) ($d[$key] ?? '')) !== '') {
179|                return true;
180|            }
181|        }
182|
183|        $desc = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';
184|
185|        return \in_array($desc, ['0', '1'], true);
186|    }
187|
188|    // ── Base ──────────────────────────────────────────────────────────────────
189|
190|    private function validateBase(array $data, array $context = []): array
191|    {
192|        $errors = [];
193|
194|        $type = $data['type'] ?? '';
195|        $allowed = $context['allowed_type_keys'] ?? null;
196|        if ($allowed === null) {
197|            if (empty($type) || !EventTypeEnum::isValid((string) $type)) {
198|                $errors[] = 'type: obrigatório e deve ser um dos valores válidos (' . implode(', ', EventTypeEnum::values()) . ').';
199|            }
200|        } else {
201|            if (empty($type) || !in_array((string) $type, $allowed, true)) {
202|                $errors[] = 'type: obrigatório ou não está habilitado para esta empresa.';
203|            }
204|        }
205|
206|        if (!empty($data['origin']) && !EventOriginEnum::isValid($data['origin'])) {
207|            $errors[] = 'origin: valor inválido.';
208|        }
209|
210|        if (empty($data['datetime'])) {
211|            $errors[] = 'datetime: obrigatório.';
212|        } elseif (!\DateTime::createFromFormat('Y-m-d\TH:i:s', $data['datetime'])
213|               && !\DateTime::createFromFormat('Y-m-d H:i:s', $data['datetime'])
214|               && !\DateTime::createFromFormat('Y-m-d\TH:i', $data['datetime'])) {
215|            $errors[] = 'datetime: formato inválido. Use ISO 8601 (ex.: 2026-04-07T10:30:00).';
216|        }
217|
218|        if (empty($data['location']) || trim((string) $data['location']) === '') {
219|            $errors[] = 'location: obrigatório.';
220|        }
221|
222|        if (empty($data['description']) || trim((string) $data['description']) === '') {
223|            $errors[] = 'description: obrigatório.';
224|        }
225|
226|        return $errors;
227|    }
228|
229|    // ── Classificação técnica ─────────────────────────────────────────────────
230|

{"end_line": 720, "file_path": "src/Service/Ssma/SsmaEventValidator.php", "start_line": 540}

File: src/Service/Ssma/SsmaEventValidator.php (Total lines: 883)
IS_TRUNCATED: false
LINE_RANGE: 540-720
540|            $errors[] = 'Informe se houve lesão.';
541|        }
542|
543|        // Sem dano: não exige tipo/severidade de lesão (mesmo se had_injury legado vier true).
544|        $consequence = strtoupper(trim((string) ($data['consequence'] ?? $d['consequence'] ?? '')));
545|        $semDano = $consequence === EventConsequenceEnum::SEM_DANO;
546|
547|        $hadInjury = !$semDano
548|            && !empty($d['had_injury'])
549|            && $d['had_injury'] !== false
550|            && $d['had_injury'] !== 0
551|            && $d['had_injury'] !== '0';
552|
553|        if ($hadInjury) {
554|            if (empty($d['injury_type'])) {
555|                $errors[] = 'Tipo de lesão é obrigatório quando há lesão.';
556|            } elseif (!InjuryTypeEnum::isValid($d['injury_type'])) {
557|                $errors[] = 'Tipo de lesão inválido. Selecione uma opção válida.';
558|            }
559|        }
560|
561|        // fatal / barreira / causa imediata: opcionais (removidos do formulário de AP; legado ainda pode enviar)
562|        if (array_key_exists('fatal', $d) && $d['fatal'] !== null && $d['fatal'] !== '') {
563|            if (!\is_bool($d['fatal']) && !\in_array($d['fatal'], [0, 1, '0', '1'], true)) {
564|                $errors[] = 'Campo fatalidade inválido.';
565|            }
566|        }
567|        if (!empty($d['failed_barrier']) && !FailedBarrierEnum::isValid($d['failed_barrier'])) {
568|            $errors[] = 'Barreira que falhou inválida. Selecione uma opção válida.';
569|        }
570|        // Dimensão trocada por Tipo de barreira (Brenda).
571|        if (empty($d['barrier_type']) || !BarrierTypeEnum::isValid((string) $d['barrier_type'])) {
572|            $errors[] = 'Tipo de barreira é obrigatório. Selecione uma opção válida.';
573|        }
574|        if (isset($d['immediate_cause']) && $d['immediate_cause'] !== null && !\is_string($d['immediate_cause'])) {
575|            $errors[] = 'Causa imediata deve ser texto.';
576|        }
577|
578|        // Body map: condicional quando had_injury = true
579|        if ($hadInjury && !empty($d['body_parts'])) {
580|            if (!is_array($d['body_parts'])) {
581|                $errors[] = 'Partes do corpo devem ser uma lista.';
582|            } else {
583|                $allowedHand = ['POLEGAR', 'INDICADOR', 'MEDIO', 'ANULAR', 'MINIMO'];
584|                $allowedFoot = ['HALUX', 'SEGUNDO_DEDO', 'TERCEIRO_DEDO', 'QUARTO_DEDO', 'MINIMO_PE'];
585|                $allowedCabeca = ['OLHO_ESQ', 'OLHO_DIR', 'BOCA', 'NARIZ', 'ORELHA_ESQ', 'ORELHA_DIR', 'TESTA', 'MENTO'];
586|                $allowedPescoco = ['PESCOCO_ANT', 'PESCOCO_POST', 'PESCOCO_LAT_ESQ', 'PESCOCO_LAT_DIR'];
587|                $allowedFace = ['FACE_BOCA', 'FACE_NARIZ', 'FACE_BOCHE_ESQ', 'FACE_BOCHE_DIR', 'FACE_MENTO', 'FACE_MAXILAR'];
588|                $allowedOlhos = ['OLHO_ESQ', 'OLHO_DIR', 'SOBRANCELHA_ESQ', 'SOBRANCELHA_DIR'];
589|                foreach ($d['body_parts'] as $i => $part) {
590|                    if (!\is_array($part)) {
591|                        $errors[] = 'Parte do corpo inválida.';
592|
593|                        continue;
594|                    }
595|                    if (empty($part['region']) || !BodyRegionEnum::isValid($part['region'])) {
596|                        $errors[] = 'Região do corpo inválida.';
597|                    }
598|                    if (!empty($part['side']) && !BodySideEnum::isValid($part['side'])) {
599|                        $errors[] = 'Lado do corpo inválido.';
600|                    }
601|                    if (!empty($part['injury_type']) && !InjuryTypeEnum::isValid($part['injury_type'])) {
602|                        $errors[] = 'Tipo de lesão inválido na região marcada.';
603|                    }
604|                    if (!empty($part['hand_finger'])) {
605|                        foreach (array_filter(array_map('trim', explode(',', (string) $part['hand_finger']))) as $v) {
606|                            if (!\in_array($v, $allowedHand, true)) {
607|                                $errors[] = 'Dedo da mão inválido: ' . $v;
608|                            }
609|                        }
610|                    }
611|                    if (!empty($part['foot_toe'])) {
612|                        foreach (array_filter(array_map('trim', explode(',', (string) $part['foot_toe']))) as $v) {
613|                            if (!\in_array($v, $allowedFoot, true)) {
614|                                $errors[] = 'Dedo do pé inválido: ' . $v;
615|                            }
616|                        }
617|                    }
618|                    $reg = (string) ($part['region'] ?? '');
619|                    if (!empty($part['cabeca_zones'])) {
620|                        if ($reg !== 'CABECA') {
621|                            $errors[] = 'Zonas de cabeça só são permitidas quando a região é Cabeça.';
622|                        } else {
623|                            foreach (array_filter(array_map('trim', explode(',', (string) $part['cabeca_zones']))) as $v) {
624|                                if (!\in_array($v, $allowedCabeca, true)) {
625|                                    $errors[] = 'Zona de cabeça inválida: ' . $v;
626|                                }
627|                            }
628|                        }
629|                    }
630|                    if (!empty($part['pescoco_zones'])) {
631|                        if ($reg !== 'PESCOCO') {
632|                            $errors[] = 'Zonas de pescoço só são permitidas quando a região é Pescoço.';
633|                        } else {
634|                            foreach (array_filter(array_map('trim', explode(',', (string) $part['pescoco_zones']))) as $v) {
635|                                if (!\in_array($v, $allowedPescoco, true)) {
636|                                    $errors[] = 'Zona de pescoço inválida: ' . $v;
637|                                }
638|                            }
639|                        }
640|                    }
641|                    if (!empty($part['face_zones'])) {
642|                        if ($reg !== 'FACE') {
643|                            $errors[] = 'Zonas de face só são permitidas quando a região é Face.';
644|                        } else {
645|                            foreach (array_filter(array_map('trim', explode(',', (string) $part['face_zones']))) as $v) {
646|                                if (!\in_array($v, $allowedFace, true)) {
647|                                    $errors[] = 'Zona de face inválida: ' . $v;
648|                                }
649|                            }
650|                        }
651|                    }
652|                    if (!empty($part['olhos_zones'])) {
653|                        if ($reg !== 'OLHOS') {
654|                            $errors[] = 'Zonas de olhos só são permitidas quando a região é Olhos.';
655|                        } else {
656|                            foreach (array_filter(array_map('trim', explode(',', (string) $part['olhos_zones']))) as $v) {
657|                                if (!\in_array($v, $allowedOlhos, true)) {
658|                                    $errors[] = 'Zona de olhos inválida: ' . $v;
659|                                }
660|                            }
661|                        }
662|                    }
663|                }
664|            }
665|        }
666|
667|        $workLeave = strtoupper(trim((string) ($d['work_leave'] ?? '')));
668|        $injClass    = strtoupper(trim((string) ($d['injury_classification'] ?? '')));
669|        if ($hadInjury && $injClass === '') {
670|            $errors[] = 'Classificação da lesão é obrigatória quando há lesão.';
671|        }
672|        if ($workLeave === 'PARCIAL') {
673|            $errors[] = 'Afastamento parcial não é mais permitido. Use Com ou Sem afastamento.';
674|        }
675|        if ($workLeave !== '' && !\in_array($workLeave, ['NAO', 'TOTAL'], true)) {
676|            $errors[] = 'Licença inválida. Use Sem afastamento ou Com afastamento total.';
677|        }
678|        if ($workLeave === 'NAO' && \in_array($injClass, ['LTI', 'LTI_FATALIDADE', 'LTI_INCAPACITANTE', 'FAT'], true)) {
679|            $errors[] = 'LTI/FAT não é permitido quando a licença é Sem afastamento.';
680|        }
681|        if ($workLeave === 'TOTAL' && $injClass !== '' && !\in_array($injClass, ['LTI', 'LTI_FATALIDADE', 'LTI_INCAPACITANTE', 'FAT'], true)) {
682|            $errors[] = 'Com afastamento total, a classificação deve ser FAT ou LTI — Afastamento.';
683|        }
684|        if ($workLeave === 'NAO' && $injClass !== '' && !\in_array($injClass, ['FAC', 'MTC', 'RWC'], true)) {
685|            $errors[] = 'Sem afastamento, use apenas FAC, MTC ou RWC.';
686|        }
687|
688|        if ($hadInjury) {
689|            if (isset($d['body_location_detail']) && $d['body_location_detail'] !== null && $d['body_location_detail'] !== '') {
690|                if (!\is_string($d['body_location_detail'])) {
691|                    $errors[] = 'Detalhe da localização no corpo deve ser texto.';
692|                } elseif (mb_strlen((string) $d['body_location_detail']) > 2000) {
693|                    $errors[] = 'Detalhe da localização no corpo: no máximo 2000 caracteres.';
694|                }
695|            }
696|            /* hand_finger / foot_toe no nível details: legado (MAO/PE sem lado); preferir por body_parts[]. */
697|            $allowedHandFlat = ['POLEGAR', 'INDICADOR', 'MEDIO', 'ANULAR', 'MINIMO'];
698|            $allowedFootFlat = ['HALUX', 'SEGUNDO_DEDO', 'TERCEIRO_DEDO', 'QUARTO_DEDO', 'MINIMO_PE'];
699|            if (!empty($d['hand_finger'])) {
700|                foreach (array_filter(array_map('trim', explode(',', (string) $d['hand_finger']))) as $v) {
701|                    if (!\in_array($v, $allowedHandFlat, true)) {
702|                        $errors[] = 'Dedo da mão inválido: ' . $v;
703|                    }
704|                }
705|            }
706|            if (!empty($d['foot_toe'])) {
707|                foreach (array_filter(array_map('trim', explode(',', (string) $d['foot_toe']))) as $v) {
708|                    if (!\in_array($v, $allowedFootFlat, true)) {
709|                        $errors[] = 'Dedo do pé inválido: ' . $v;
710|                    }
711|                }
712|            }
713|        }
714|
715|        $descVal = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';
716|        // Médico sempre informa caracterização no aprofundamento dedicado.
717|        if (!empty($data['aprofundamento_only'])) {
718|            if (!\in_array($descVal, ['0', '1'], true)) {
719|                $errors[] = 'Informe se o evento é caracterizado como acidente (Sim/Não).';
720|            } else {

{"file_patterns": ["src/Service/Ssma/SsmaEventValidator.php"], "search_text": "aprofundamento_only"}

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 1
717|        if (!empty($data['aprofundamento_only'])) {

{"search_text": "aprofundamento_only"}

File: docs/engineering/pr/hotfix-ssma-occ-type-perms-datatables-new-production/PR_descricao_hotfix-ssma-occ-type-perms-datatables-new-production.md
Match lines: 2
93|| `templates/ssma/occurrence/partials/_modal_event.html.twig` | `EvModal.openAprofundamento`, botões rascunho/finalizar, payload `aprofundamento_only` |
136|5. **+Aprofundamento — rascunho e finalizar:** especialista autorizado pode salvar rascunho (`soft_aprofundamento` / status draft) e depois finalizar. Payload parcial via `aprofundamento_only: true` no update.

File: src/Controller/SsmaController.php
Match lines: 2
25848|        $aprofundamentoOnly = !empty($data['aprofundamento_only']);
27760|        $merged['aprofundamento_only'] = true;

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 1
717|        if (!empty($data['aprofundamento_only'])) {

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 1
6960|            payload.aprofundamento_only = true;

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php
Match lines: 1
860|            'aprofundamento_only'     => true,

{"end_line": 25910, "file_path": "src/Controller/SsmaController.php", "start_line": 25820}

File: src/Controller/SsmaController.php (Total lines: 28130)
IS_TRUNCATED: false
LINE_RANGE: 25820-25910
25820|
25821|        return new JsonResponse(['success' => true, 'event' => $service->serialize($event)]);
25822|    }
25823|
25824|    /**
25825|     * POST /manager/ssma/events/{id}
25826|     * Atualiza um evento existente.
25827|     */
25828|    public function updateEvent(Request $request, int $id): JsonResponse
25829|    {
25830|        /** @var \App\Entity\User|null $user */
25831|        $user    = $this->getUser();
25832|        $company = $user?->getCompany();
25833|        if (!$user || !$company) {
25834|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
25835|        }
25836|
25837|        $event = $this->entityManager->getRepository(\App\Entity\SsmaEvent::class)->find($id);
25838|
25839|        if (!$event || $event->getCompany()->getId() !== $company->getId()) {
25840|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
25841|        }
25842|
25843|        if (!$this->isSsmaEventVisibleUnderOccurrenceTeamDashboardScope($event, $company, $user)) {
25844|            return new JsonResponse(['success' => false, 'message' => 'Evento não encontrado.'], 404);
25845|        }
25846|
25847|        $data = json_decode($request->getContent(), true) ?? [];
25848|        $aprofundamentoOnly = !empty($data['aprofundamento_only']);
25849|        $existingDetails = is_array($event->getDetails()) ? $event->getDetails() : [];
25850|        $aprofundamentoStatus = strtolower(trim((string) ($existingDetails['aprofundamento_status'] ?? '')));
25851|        $aprofundamentoFinalized = $aprofundamentoStatus === 'finalized'
25852|            || !empty($existingDetails['aprofundamento_complete']);
25853|
25854|        $canFullEdit = $this->canEditSsmaEvent($company, $user, $event);
25855|        $eventTypeForAccess = (string) ($data['type'] ?? $event->getType());
25856|        $canAprofundamento = $this->canAccessSsmaEventAprofundamento(
25857|            $company,
25858|            $user,
25859|            $eventTypeForAccess,
25860|            is_array($data['details'] ?? null) ? $data['details'] : $existingDetails,
25861|            (int) ($event->getCreatedById() ?? 0)
25862|        );
25863|        $isAprofundamentoUpdate = $aprofundamentoOnly
25864|            || !empty($data['aprofundamento_complete'])
25865|            || strtolower(trim((string) ($data['aprofundamento_status'] ?? ''))) === 'finalized';
25866|
25867|        if (!$canFullEdit) {
25868|            if (!$isAprofundamentoUpdate || !$canAprofundamento) {
25869|                return new JsonResponse(['success' => false, 'message' => 'Você não tem autorização para editar esse tipo de ocorrência.'], 403);
25870|            }
25871|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
25872|                return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
25873|            }
25874|            $data = $this->mergeSsmaEventAprofundamentoOnlyPayload($event, $data);
25875|        } else {
25876|            $data = array_merge($this->eventToValidationArray($event), $data);
25877|            if ($aprofundamentoFinalized && !$this->isSsmaAprofundamentoAdmin($company, $user)) {
25878|                if ($aprofundamentoOnly || $isAprofundamentoUpdate) {
25879|                    return new JsonResponse(['success' => false, 'message' => 'Aprofundamento finalizado. Somente um administrador ou gestor administrador pode alterar.'], 403);
25880|                }
25881|                $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
25882|                    $data,
25883|                    (string) ($data['type'] ?? $event->getType()),
25884|                    $existingDetails
25885|                );
25886|            }
25887|        }
25888|
25889|        $data = $this->normalizeSsmaEventPayload($data, $company);
25890|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
25891|        $data = $this->forceSsmaRosReporterForPlainMember($data, $company, $user);
25892|        $data = $this->applySsmaDescaracterPermissionGate(
25893|            $data,
25894|            $company,
25895|            $user,
25896|            $existingDetails
25897|        );
25898|
25899|        $eventType = (string) ($data['type'] ?? $event->getType());
25900|        $eventDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
25901|        // Em modo só-aprofundamento o especialista já está autorizado; não stripa o que acabou de enviar.
25902|        if (
25903|            !$aprofundamentoOnly
25904|            && !$this->canAccessSsmaEventAprofundamento($company, $user, $eventType, $eventDetails, $event->getCreatedById())
25905|            && in_array($eventType, ['ROS', 'QUASE_ACIDENTE', 'ACIDENTE_PESSOAL', 'ACIDENTE_MATERIAL', 'ACIDENTE_AMBIENTAL'], true)
25906|        ) {
25907|            $data = $this->stripSsmaEventAprofundamentoFieldsFromPayload(
25908|                $data,
25909|                $eventType,
25910|                $existingDetails

{"end_line": 160, "file_path": "src/Service/Ssma/SsmaEventValidator.php", "start_line": 1}

File: src/Service/Ssma/SsmaEventValidator.php (Total lines: 883)
IS_TRUNCATED: false
LINE_RANGE: 1-160
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Enum\Ssma\BarrierTypeEnum;
8|use App\Enum\Ssma\BodyRegionEnum;
9|use App\Enum\Ssma\BodySideEnum;
10|use App\Enum\Ssma\DeviationTypeEnum;
11|use App\Enum\Ssma\EnvironmentalMediumEnum;
12|use App\Enum\Ssma\EventAgentEnum;
13|use App\Enum\Ssma\EventClassNatureEnum;
14|use App\Enum\Ssma\EventConsequenceEnum;
15|use App\Enum\Ssma\EventImpactEnum;
16|use App\Enum\Ssma\EventNatureEnum;
17|use App\Enum\Ssma\EventOriginEnum;
18|use App\Enum\Ssma\EventTypeEnum;
19|use App\Enum\Ssma\FailedBarrierEnum;
20|use App\Enum\Ssma\InjuryTypeEnum;
21|use App\Enum\Ssma\InvolvementTypeEnum;
22|use App\Enum\Ssma\RosFailedBarrierEnum;
23|use App\Enum\Ssma\RosInvolvementTypeEnum;
24|use App\Enum\Ssma\PersonTypeEnum;
25|use App\Enum\Ssma\PotentialSeverityEnum;
26|use App\Enum\Ssma\EventStrategicNatureEnum;
27|
28|/**
29| * Valida payload de criação/atualização de SsmaEvent.
30| *
31| * Uso:
32| *   $errors = $validator->validate($payload);
33| *   if ($errors !== []) { return 422 com $errors; }
34| */
35|final class SsmaEventValidator
36|{
37|    /**
38|     * Valida o payload completo e retorna array de erros.
39|     * Array vazio = válido.
40|     *
41|     * @param array<string, mixed> $data
42|     * @param array<string, mixed> $context allowed_type_keys?: list<string> — tipos ativos na empresa (inclui customizados).
43|     *                                    Se omitido, aceita apenas EventTypeEnum.
44|     *
45|     * @return string[]
46|     */
47|    public function validate(array $data, array $context = []): array
48|    {
49|        $errors = [];
50|
51|        $errors = array_merge($errors, $this->validateBase($data, $context));
52|
53|        if ($errors !== []) {
54|            return $errors;
55|        }
56|
57|        $type    = (string) ($data['type'] ?? '');
58|        $details = \is_array($data['details'] ?? null) ? $data['details'] : [];
59|
60|        // Rascunho de aprofundamento: valida só a base (permite salvar parcial).
61|        if (!empty($context['soft_aprofundamento'])) {
62|            return $errors;
63|        }
64|
65|        // Acidentes: create soft (1ª etapa) — campos técnicos ficam no Aprofundamento (2ª etapa),
66|        // igual ROS/QA. Só exige aprofundamento quando o payload traz esses campos ou quando
67|        // o front marca aprofundamento_complete (salvou a 2ª etapa).
68|        $isAccident = $this->isAccidentType($type);
69|        $forceAccidentDeep = !empty($data['aprofundamento_complete'])
70|            || !empty($context['force_technical_depth'])
71|            || ($isAccident && $this->hasAccidentAprofundamentoFields($data, $details));
72|        $requiresTechnicalDepth = $isAccident && $forceAccidentDeep;
73|
74|        $errors = array_merge($errors, $this->validateClassification($data, $requiresTechnicalDepth));
75|        if ($requiresTechnicalDepth) {
76|            $errors = array_merge($errors, $this->validateDetails($type, $details, $data));
77|        } elseif ($type === EventTypeEnum::ACIDENTE_PESSOAL) {
78|            // Etapa 1 do AP: pessoas envolvidas (person_id / vínculo).
79|            $errors = array_merge($errors, $this->validateAcidentePessoalEtapa1($details));
80|        }
81|        $errors = array_merge($errors, $this->validateSharedDetails($details, $requiresTechnicalDepth, $type));
82|
83|        if ($type === EventTypeEnum::ROS && $this->hasRosAprofundamentoFields($details)) {
84|            $errors = array_merge($errors, $this->validateDetails($type, $details, $data));
85|        } elseif ($type === EventTypeEnum::QUASE_ACIDENTE && $this->hasQaAprofundamentoFields($details)) {
86|            $errors = array_merge($errors, $this->validateDetails($type, $details, $data));
87|        }
88|
89|        return $errors;
90|    }
91|
92|    /**
93|     * @param array<string, mixed> $d
94|     */
95|    private function hasRosAprofundamentoFields(array $d): bool
96|    {
97|        // Campos só da 1ª etapa (categoria / sugestão / risco) NÃO disparam a validação
98|        // completa do aprofundamento — isso exigia Tipo de desvio/Barreira mesmo com
99|        // "Visto e resolvido" ou antes de chegar na 2ª etapa.
100|        foreach (['deviation_type', 'barrier_type', 'failed_barrier', 'potential_severity', 'potential_consequence'] as $key) {
101|            if (!empty($d[$key])) {
102|                return true;
103|            }
104|        }
105|
106|        return false;
107|    }
108|
109|    /**
110|     * @param array<string, mixed> $d
111|     */
112|    private function hasQaAprofundamentoFields(array $d): bool
113|    {
114|        foreach (['involvement_type', 'barrier_type', 'failed_barrier', 'potential_severity', 'potential_consequence'] as $key) {
115|            if (!empty($d[$key])) {
116|                return true;
117|            }
118|        }
119|
120|        return false;
121|    }
122|
123|    /**
124|     * Checklist do filtro “aprofundamento técnico preenchido”.
125|     * Inclui o validate() do create + campos tipados de ROS/Quase Acidente
126|     * (esses tipos são soft no create, mas o filtro marca pendência).
127|     *
128|     * @param array<string, mixed> $data
129|     * @param array<string, mixed> $context
130|     *
131|     * @return list<string>
132|     */
133|    public function aprofundamentoPendingErrors(array $data, array $context = []): array
134|    {
135|        $context['force_technical_depth'] = true;
136|        $errors = $this->validate($data, $context);
137|        $type = (string) ($data['type'] ?? '');
138|        $details = \is_array($data['details'] ?? null) ? $data['details'] : [];
139|
140|        if (\in_array($type, [EventTypeEnum::ROS, EventTypeEnum::QUASE_ACIDENTE], true)) {
141|            $errors = array_merge($errors, $this->validateDetails($type, $details, $data));
142|        }
143|
144|        return array_values(array_unique($errors));
145|    }
146|
147|    private function isAccidentType(string $type): bool
148|    {
149|        return \in_array($type, [
150|            EventTypeEnum::ACIDENTE_PESSOAL,
151|            EventTypeEnum::ACIDENTE_MATERIAL,
152|            EventTypeEnum::ACIDENTE_AMBIENTAL,
153|        ], true);
154|    }
155|
156|    /**
157|     * @param array<string, mixed> $data
158|     * @param array<string, mixed> $d
159|     */
160|    private function hasAccidentAprofundamentoFields(array $data, array $d): bool

{"end_line": 27790, "file_path": "src/Controller/SsmaController.php", "start_line": 27720}

File: src/Controller/SsmaController.php (Total lines: 28130)
IS_TRUNCATED: false
LINE_RANGE: 27720-27790
27720|            'aprofundamento_status',
27721|        ];
27722|    }
27723|
27724|    /**
27725|     * Monta payload de update só com campos de aprofundamento; preserva dados gerais do evento.
27726|     *
27727|     * @param array<string, mixed> $data
27728|     *
27729|     * @return array<string, mixed>
27730|     */
27731|    private function mergeSsmaEventAprofundamentoOnlyPayload(\App\Entity\SsmaEvent $event, array $data): array
27732|    {
27733|        $merged = $this->eventToValidationArray($event);
27734|        $existingDetails = is_array($merged['details'] ?? null) ? $merged['details'] : [];
27735|        $incomingDetails = is_array($data['details'] ?? null) ? $data['details'] : [];
27736|        $keys = $this->ssmaEventAprofundamentoFieldKeys();
27737|
27738|        foreach ($keys as $key) {
27739|            if (array_key_exists($key, $data)) {
27740|                $merged[$key] = $data[$key];
27741|            }
27742|            if (array_key_exists($key, $incomingDetails)) {
27743|                $existingDetails[$key] = $incomingDetails[$key];
27744|            }
27745|        }
27746|
27747|        // Consequência pode vir no nível raiz do formulário (não só em details).
27748|        if (array_key_exists('consequence', $data) && $data['consequence'] !== null && $data['consequence'] !== '') {
27749|            $merged['consequence'] = $data['consequence'];
27750|        }
27751|
27752|        if (array_key_exists('aprofundamento_complete', $data)) {
27753|            $merged['aprofundamento_complete'] = $data['aprofundamento_complete'];
27754|        }
27755|        if (array_key_exists('aprofundamento_status', $data)) {
27756|            $merged['aprofundamento_status'] = $data['aprofundamento_status'];
27757|        }
27758|
27759|        $merged['details'] = $existingDetails;
27760|        $merged['aprofundamento_only'] = true;
27761|
27762|        return $merged;
27763|    }
27764|
27765|    /**
27766|     * S/N de descaracterização só pode ser gravado por membro com flag na coluna Descaracterizar.
27767|     *
27768|     * @param array<string, mixed>      $data
27769|     * @param array<string, mixed>|null $existingDetails details já persistidos (update)
27770|     *
27771|     * @return array<string, mixed>
27772|     */
27773|    private function applySsmaDescaracterPermissionGate(
27774|        array $data,
27775|        Company $company,
27776|        $user,
27777|        ?array $existingDetails = null
27778|    ): array {
27779|        $member = $this->getCurrentCompanyMember($company, $user);
27780|        $can = $this->ssmaMemberCanDescharacterizeAccident($company, $member);
27781|        if ($can) {
27782|            return $data;
27783|        }
27784|
27785|        $details = isset($data['details']) && is_array($data['details']) ? $data['details'] : [];
27786|        if ($existingDetails !== null && array_key_exists('descaracterizado', $existingDetails)
27787|            && \in_array((string) $existingDetails['descaracterizado'], ['0', '1'], true)) {
27788|            // Mantém o valor já salvo anteriormente.
27789|            $details['descaracterizado'] = (string) $existingDetails['descaracterizado'];
27790|        } elseif (isset($data['details']['descaracterizado'])

{"file_patterns": ["src/Service/Ssma/SsmaEventValidator.php"], "search_text": "private function validateDetails"}

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 1
351|    private function validateDetails(string $type, array $details, array $data = []): array

{"end_line": 27840, "file_path": "src/Controller/SsmaController.php", "start_line": 27790}

File: src/Controller/SsmaController.php (Total lines: 28130)
IS_TRUNCATED: false
LINE_RANGE: 27790-27840
27790|        } elseif (isset($data['details']['descaracterizado'])
27791|            && \in_array((string) $data['details']['descaracterizado'], ['0', '1'], true)) {
27792|            // Aceita o valor enviado pelo frontend se for válido.
27793|            $details['descaracterizado'] = (string) $data['details']['descaracterizado'];
27794|        } else {
27795|            // Sem valor anterior e sem permissão: default "Sim" (é acidente = '0').
27796|            // Quem não pode descaracterizar nunca poderia marcar "Não" de qualquer forma.
27797|            $details['descaracterizado'] = '0';
27798|        }
27799|        unset($data['descaracterizado']);
27800|        $data['details'] = $details;
27801|
27802|        return $data;
27803|    }
27804|
27805|    /**
27806|     * Resolve manager_id a partir de manager_name quando o front/LLM só enviou o nome.
27807|     *
27808|     * @param array<string, mixed> $data
27809|     *
27810|     * @return array<string, mixed>
27811|     */
27812|    private function normalizeSsmaEventManagerInDetails(array $data, Company $company): array
27813|    {
27814|        $details = $data['details'] ?? [];
27815|        if (!is_array($details)) {
27816|            return $data;
27817|        }
27818|
27819|        $rawId = $details['manager_id'] ?? null;
27820|        if ($rawId !== null && $rawId !== '') {
27821|            $details['manager_id'] = (int) $rawId;
27822|            $data['details'] = $details;
27823|
27824|            return $data;
27825|        }
27826|
27827|        $name = trim((string) ($details['manager_name'] ?? ''));
27828|        if ($name === '') {
27829|            return $data;
27830|        }
27831|
27832|        $membersById = [];
27833|        $members = $this->entityManager->getRepository(CompanyMembers::class)
27834|            ->findBy(['company' => $company, 'isRemoved' => 0]);
27835|        foreach ($members as $cm) {
27836|            if (!$cm instanceof CompanyMembers) {
27837|                continue;
27838|            }
27839|            $memberId = (int) $cm->getId();
27840|            if ($memberId <= 0) {

{"search_text": "->validate(", "file_patterns": ["src/Service/Ssma/"]}

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 2
32| *   $errors = $validator->validate($payload);
136|        $errors = $this->validate($data, $context);

{"query_name": "SsmaEventValidator"}

src/Service/Ssma/SsmaEventValidator.php
tests/Ssma/SsmaEventValidatorTest.php
tests/Unit/Product/Ssma/SsmaEventValidatorTest.php

{"search_text": "SsmaEventValidator", "file_patterns": ["src/"]}

File: src/Controller/SsmaController.php
Match lines: 3
14842|        $validator = new \App\Service\Ssma\SsmaEventValidator();
25680|        $validator = new \App\Service\Ssma\SsmaEventValidator();
25934|            $validator = new \App\Service\Ssma\SsmaEventValidator();

File: src/Service/Ssma/SsmaAutomationService.php
Match lines: 2
2253|        $validator = new SsmaEventValidator();
2297|        return (new SsmaEventValidator())->aprofundamentoPendingErrors($data, ['allowed_type_keys' => [$typeRaw]]) === [];

File: src/Service/Ssma/SsmaEventValidator.php
Match lines: 1
35|final class SsmaEventValidator

{"end_line": 560, "file_path": "src/Service/Ssma/SsmaEventValidator.php", "start_line": 351}

File: src/Service/Ssma/SsmaEventValidator.php (Total lines: 883)
IS_TRUNCATED: false
LINE_RANGE: 351-560
351|    private function validateDetails(string $type, array $details, array $data = []): array
352|    {
353|        if (!EventTypeEnum::isValid($type)) {
354|            // Tipos configurados pela empresa (ex.: CUSTOM_*) — sem regras extras além do compartilhado + classificação.
355|            return [];
356|        }
357|
358|        return match ($type) {
359|            EventTypeEnum::ROS              => $this->validateRos($details),
360|            EventTypeEnum::QUASE_ACIDENTE   => $this->validateQuaseAcidente($details),
361|            EventTypeEnum::ACIDENTE_PESSOAL => $this->validateAcidentePessoal($details, $data),
362|            EventTypeEnum::ACIDENTE_MATERIAL  => $this->validateAcidenteMaterial($details),
363|            EventTypeEnum::ACIDENTE_AMBIENTAL => $this->validateAcidenteAmbiental($details),
364|            default                           => [],
365|        };
366|    }
367|
368|    private function validateRos(array $d): array
369|    {
370|        $errors = [];
371|
372|        // "Visto e resolvido" no ROS dispensa o bloco classificatório completo.
373|        $rosResolved = !empty($d['ros_resolved']) && (
374|            $d['ros_resolved'] === true || $d['ros_resolved'] === 1 || $d['ros_resolved'] === '1'
375|        );
376|        if ($rosResolved) {
377|            $involvement = RosInvolvementTypeEnum::normalizeLegacy((string) ($d['involvement_type'] ?? ''));
378|            if ($involvement === '' || !RosInvolvementTypeEnum::isValid($involvement)) {
379|                $errors[] = 'Envolvimento é obrigatório. Selecione Saúde, Segurança ou Meio Ambiente.';
380|            }
381|            return $errors;
382|        }
383|
384|        if (empty($d['deviation_type']) || !DeviationTypeEnum::isValid($d['deviation_type'])) {
385|            $errors[] = 'Tipo de desvio é obrigatório. Selecione uma opção válida.';
386|        }
387|        $involvement = RosInvolvementTypeEnum::normalizeLegacy((string) ($d['involvement_type'] ?? ''));
388|        if ($involvement === '' || !RosInvolvementTypeEnum::isValid($involvement)) {
389|            $errors[] = 'Envolvimento é obrigatório. Selecione Saúde, Segurança ou Meio Ambiente.';
390|        }
391|        if (!isset($d['immediate_risk'])) {
392|            $errors[] = 'Risco imediato é obrigatório.';
393|        }
394|        if (empty($d['potential_severity']) || !PotentialSeverityEnum::isValid($d['potential_severity'])) {
395|            $errors[] = 'Consequência potencial é obrigatória. Selecione Leve, Baixo, Médio, Alto ou Severo.';
396|        }
397|        if (empty($d['barrier_type']) || !BarrierTypeEnum::isValid((string) $d['barrier_type'])) {
398|            $errors[] = 'Tipo de barreira é obrigatório. Selecione uma opção válida.';
399|        }
400|        // Legado: "Barreira que falhou" / Outro — aceita se ainda vier no payload antigo.
401|        if (!empty($d['failed_barrier']) && !RosFailedBarrierEnum::isValid((string) $d['failed_barrier'])) {
402|            $errors[] = 'Barreira que falhou: valor inválido.';
403|        } elseif (($d['failed_barrier'] ?? '') === RosFailedBarrierEnum::OUTRO) {
404|            $other = trim((string) ($d['failed_barrier_other'] ?? ''));
405|            if ($other === '') {
406|                $errors[] = 'Descreva o que faltou (obrigatório quando a barreira é Outro).';
407|            }
408|        }
409|        if (empty($d['nature']) || !EventClassNatureEnum::isValid($d['nature'])) {
410|            $errors[] = 'Natureza é obrigatória e deve ser um valor válido.';
411|        }
412|        $suggestions = trim((string) ($d['improvement_suggestions'] ?? ''));
413|        if ($suggestions === '') {
414|            $errors[] = 'Sugestões de melhoria são obrigatórias.';
415|        }
416|
417|        return $errors;
418|    }
419|
420|    private function validateQuaseAcidente(array $d): array
421|    {
422|        $errors = [];
423|
424|        if (empty($d['involvement_type']) || !InvolvementTypeEnum::isValid($d['involvement_type'])) {
425|            $errors[] = 'details.involvement_type: obrigatório e deve ser um valor válido.';
426|        }
427|        if (empty($d['potential_severity']) || !PotentialSeverityEnum::isValid($d['potential_severity'])) {
428|            $errors[] = 'details.potential_severity: obrigatório e deve ser um valor válido.';
429|        }
430|        if (empty($d['barrier_type']) || !BarrierTypeEnum::isValid((string) $d['barrier_type'])) {
431|            $errors[] = 'details.barrier_type: obrigatório e deve ser um valor válido.';
432|        }
433|        // Legado: "Barreira que falhou" — aceita se ainda vier no payload antigo.
434|        if (!empty($d['failed_barrier']) && !FailedBarrierEnum::isValid($d['failed_barrier'])) {
435|            $errors[] = 'details.failed_barrier: valor inválido.';
436|        }
437|        if (empty($d['nature']) || !EventClassNatureEnum::isValid($d['nature'])) {
438|            $errors[] = 'details.nature: obrigatório e deve ser um valor válido.';
439|        }
440|
441|        if (($d['involvement_type'] ?? '') === InvolvementTypeEnum::PERSON) {
442|            if (empty($d['person_id'])) {
443|                $errors[] = 'details.person_id: obrigatório quando o envolvimento do quase acidente é Pessoa.';
444|            }
445|            if (empty($d['person_type']) || !PersonTypeEnum::isValid($d['person_type'])) {
446|                $errors[] = 'details.person_type: obrigatório e deve ser um valor válido quando o envolvimento é Pessoa.';
447|            }
448|        }
449|
450|        return $errors;
451|    }
452|
453|    /**
454|     * @param array<string, mixed> $d
455|     * @param array<string, mixed> $data Payload completo — consequence real fica no root.
456|     *
457|     * @return list<string>
458|     */
459|    /**
460|     * Etapa 1 do Acidente Pessoal (contexto): pessoas envolvidas.
461|     * Campos técnicos (lesão, consequência, descaracterização) ficam na 2ª etapa.
462|     *
463|     * @param array<string, mixed> $d
464|     *
465|     * @return list<string>
466|     */
467|    private function validateAcidentePessoalEtapa1(array $d): array
468|    {
469|        $errors = [];
470|
471|        // Etapa 1: UI preenche "Pessoa(s) envolvida(s)" (people_ids). person_id/person_type
472|        // podem ainda não ter sido espelhados — aceitar a 1ª pessoa das tags.
473|        $personId = isset($d['person_id']) && $d['person_id'] !== '' && $d['person_id'] !== null
474|            ? (int) $d['person_id']
475|            : 0;
476|        if ($personId <= 0) {
477|            $personId = $this->firstPositiveIntFromPeopleIds($d['people_ids'] ?? null);
478|        }
479|        if ($personId <= 0) {
480|            $errors[] = 'Pessoa envolvida é obrigatória para Acidente Pessoal.';
481|        }
482|
483|        $personType = trim((string) ($d['person_type'] ?? ''));
484|        if ($personType === '') {
485|            $personType = PersonTypeEnum::COLABORADOR;
486|        }
487|        if (!PersonTypeEnum::isValid($personType)) {
488|            $errors[] = 'Tipo de vínculo da pessoa envolvida é obrigatório. Selecione uma opção válida.';
489|        }
490|
491|        return $errors;
492|    }
493|
494|    /**
495|     * @param mixed $raw
496|     */
497|    private function firstPositiveIntFromPeopleIds($raw): int
498|    {
499|        if (is_string($raw) && $raw !== '') {
500|            foreach (explode(',', $raw) as $part) {
501|                $id = (int) trim($part);
502|                if ($id > 0) {
503|                    return $id;
504|                }
505|            }
506|
507|            return 0;
508|        }
509|
510|        if (!is_array($raw)) {
511|            return 0;
512|        }
513|
514|        foreach ($raw as $value) {
515|            $id = (int) $value;
516|            if ($id > 0) {
517|                return $id;
518|            }
519|        }
520|
521|        return 0;
522|    }
523|
524|    /**
525|     * @param array<string, mixed> $d
526|     * @param array<string, mixed> $data Payload completo — consequence real fica no root.
527|     *
528|     * @return list<string>
529|     */
530|    private function validateAcidentePessoal(array $d, array $data = []): array
531|    {
532|        $errors = $this->validateAcidentePessoalEtapa1($d);
533|
534|        if (empty($d['potential_severity']) || !PotentialSeverityEnum::isValid($d['potential_severity'])) {
535|            $errors[] = 'Consequência potencial / Gravidade é obrigatória. Selecione uma opção válida.';
536|        }
537|
538|        // had_injury aceita bool true/false OU int 1/0
539|        if (!isset($d['had_injury'])) {
540|            $errors[] = 'Informe se houve lesão.';
541|        }
542|
543|        // Sem dano: não exige tipo/severidade de lesão (mesmo se had_injury legado vier true).
544|        $consequence = strtoupper(trim((string) ($data['consequence'] ?? $d['consequence'] ?? '')));
545|        $semDano = $consequence === EventConsequenceEnum::SEM_DANO;
546|
547|        $hadInjury = !$semDano
548|            && !empty($d['had_injury'])
549|            && $d['had_injury'] !== false
550|            && $d['had_injury'] !== 0
551|            && $d['had_injury'] !== '0';
552|
553|        if ($hadInjury) {
554|            if (empty($d['injury_type'])) {
555|                $errors[] = 'Tipo de lesão é obrigatório quando há lesão.';
556|            } elseif (!InjuryTypeEnum::isValid($d['injury_type'])) {
557|                $errors[] = 'Tipo de lesão inválido. Selecione uma opção válida.';
558|            }
559|        }
560|

{"end_line": 920, "file_path": "tests/Unit/Product/Ssma/SsmaEventValidatorTest.php", "start_line": 800}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php (Total lines: 989)
IS_TRUNCATED: false
LINE_RANGE: 800-920
800|            'origin'                  => 'MANUAL',
801|            'datetime'                => '2026-04-07T10:30:00',
802|            'location'                => 'Linha 2',
803|            'description'             => 'Toast da imagem — etapa 2 incompleta',
804|            'aprofundamento_complete' => true,
805|            'details'                 => [
806|                'activity'    => 'Operação de corte',
807|                'approach'    => 'CORRECAO_OPERACIONAL',
808|                'person_id'   => '101',
809|                'person_type' => 'COLABORADOR',
810|                'had_injury'  => true,
811|            ],
812|        ]);
813|
814|        $joined = implode("\n", $errors);
815|
816|        // Não pode mais aparecer o texto técnico do print antigo.
817|        self::assertStringNotContainsString('details.injury_type:', $joined);
818|        self::assertStringNotContainsString('details.injury_classification:', $joined);
819|        self::assertStringNotContainsString('details.descaracterizado:', $joined);
820|        self::assertStringNotContainsString('details.potential_consequence:', $joined);
821|        self::assertStringNotContainsString('consequence: obrigatório', $joined);
822|
823|        self::assertTrue(
824|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Consequência real é obrigatória')),
825|            "Faltou mensagem de consequência real. Erros:\n{$joined}"
826|        );
827|        self::assertTrue(
828|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Consequência potencial é obrigatória')),
829|            "Faltou mensagem de consequência potencial. Erros:\n{$joined}"
830|        );
831|        self::assertTrue(
832|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Consequência potencial / Gravidade é obrigatória')),
833|            "Faltou mensagem de gravidade. Erros:\n{$joined}"
834|        );
835|        self::assertTrue(
836|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Tipo de lesão é obrigatório quando há lesão')),
837|            "Faltou mensagem humana de tipo de lesão. Erros:\n{$joined}"
838|        );
839|        self::assertTrue(
840|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Classificação da lesão é obrigatória quando há lesão')),
841|            "Faltou mensagem humana de classificação. Erros:\n{$joined}"
842|        );
843|        self::assertFalse(
844|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'caracterizado como acidente')),
845|            "Caracterizar não deve ser exigido na criação. Erros:\n{$joined}"
846|        );
847|    }
848|
849|    public function testAcidentePessoalAprofundamentoMedicoExigeCaracterizar(): void
850|    {
851|        $validator = new SsmaEventValidator();
852|
853|        $errors = $validator->validate([
854|            'type'                    => EventTypeEnum::ACIDENTE_PESSOAL,
855|            'origin'                  => 'MANUAL',
856|            'datetime'                => '2026-04-07T10:30:00',
857|            'location'                => 'Linha 2',
858|            'description'             => 'Médico finalizando aprofundamento',
859|            'aprofundamento_complete' => true,
860|            'aprofundamento_only'     => true,
861|            'nature'                  => 'CORTE',
862|            'agent'                   => 'FERRAMENTA',
863|            'consequence'             => 'LESAO_LEVE',
864|            'impacts'                 => ['PESSOA'],
865|            'details'                 => [
866|                'activity'              => 'Operação de corte',
867|                'approach'              => 'TREINAMENTO',
868|                'strategic_nature'      => 'SEGURANCA',
869|                'barrier_type'          => 'FISICA',
870|                'potential_consequence' => 'LESAO_MODERADA',
871|                'potential_severity'    => 'MODERADO',
872|                'person_id'             => '101',
873|                'person_type'           => 'COLABORADOR',
874|                'had_injury'            => true,
875|                'injury_type'           => 'CORTE',
876|                'injury_severity'       => 'LEVE',
877|                'injury_classification' => 'FAC',
878|                'body_parts'            => [
879|                    ['region' => 'MAO', 'side' => 'DIREITA', 'injury_type' => 'CORTE'],
880|                ],
881|            ],
882|        ]);
883|
884|        self::assertTrue(
885|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'caracterizado como acidente')),
886|            'Médico deve informar se foi caracterizado. Erros: ' . implode(' | ', $errors)
887|        );
888|    }
889|
890|    public function testPayloadComInjuryTypePreenchidoDisparaValidacaoAprofundamento(): void
891|    {
892|        $validator = new SsmaEventValidator();
893|
894|        $errors = $validator->validate([
895|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
896|            'origin'      => 'MANUAL',
897|            'datetime'    => '2026-04-07T10:30:00',
898|            'location'    => 'Linha 2',
899|            'description' => 'Enviou injury_type sem completar aprofundamento',
900|            'details'     => [
901|                'activity'    => 'Operação',
902|                'approach'    => 'CORRECAO_OPERACIONAL',
903|                'person_id'   => '101',
904|                'person_type' => 'COLABORADOR',
905|                'injury_type' => 'CORTE',
906|                'had_injury'  => true,
907|            ],
908|        ]);
909|
910|        self::assertNotEmpty($errors);
911|        $joined = implode(' | ', $errors);
912|        self::assertStringNotContainsString('details.injury_type:', $joined);
913|        self::assertTrue(
914|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Consequência real')),
915|            'Com injury_type preenchido deve exigir aprofundamento. Erros: ' . $joined
916|        );
917|    }
918|
919|    public function testAcidentePessoalEtapa1SemPessoaRetornaMensagemHumana(): void
920|    {

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "descaracterizado"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 25
819|            <input type="hidden" id="ev_descaracterizado" name="ev_descaracterizado" value="">
2198|            descaracterizado: '',
2202|        var cardDescHidden = card.getAttribute('data-descaracterizado');
2204|            data.descaracterizado = cardDescHidden;
2208|                data.descaracterizado = cardBtns[0].getAttribute('data-descaracter-val') || '';
2253|        var descVal = saved.descaracterizado != null ? String(saved.descaracterizado) : '';
2254|        if (descVal !== '') card.setAttribute('data-descaracterizado', descVal);
2628|                card.setAttribute('data-descaracterizado', val);
2629|                var hidden = document.getElementById('ev_descaracterizado');
2938|        var hidden = document.getElementById('ev_descaracterizado');
2951|                c.setAttribute('data-descaracterizado', '0');
2957|            var cardDesc = card.getAttribute('data-descaracterizado') || cur;
6020|                    var desc = card.getAttribute('data-descaracterizado') || '';
6424|                if (seed.descaracterizado === undefined && det.descaracterizado !== undefined && det.descaracterizado !== '') {
6425|                    seed.descaracterizado = String(det.descaracterizado);
6485|        var descVal = det.descaracterizado != null ? det.descaracterizado : data.descaracterizado;
6488|        evSetVal('ev_descaracterizado', descVal == null ? '' : String(descVal));
6977|            delete payload.descaracterizado;
7093|            var descFromCard = (primaryData && primaryData.descaracterizado !== undefined && primaryData.descaracterizado !== '')
7094|                ? String(primaryData.descaracterizado)
7097|                descFromCard = String(primaryCard.getAttribute('data-descaracterizado') || '');
7100|                descFromCard = String((document.getElementById('ev_descaracterizado') || {}).value || '');
7111|                payload.descaracterizado = descFromCard;
7113|                delete payload.descaracterizado;
7253|                'details.descaracterizado': 'Caracterizado como acidente',

{"file_patterns": ["src/Controller/SsmaController.php"], "search_text": "ssmaMemberCanDescharacterizeAccident"}

File: src/Controller/SsmaController.php
Match lines: 3
10635|    private function ssmaMemberCanDescharacterizeAccident(Company $company, ?CompanyMembers $member): bool
13050|            && $this->ssmaMemberCanDescharacterizeAccident($company, $currentMemberForExport);
27780|        $can = $this->ssmaMemberCanDescharacterizeAccident($company, $member);

{"end_line": 7130, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6940}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 6940-7130
6940|        } else if (type === 'QUASE_ACIDENTE') {
6941|            var qaPc = (document.getElementById('ev_qa_potential_consequence') || { value: '' }).value;
6942|            var qaCrit = evResolvePotentialSeverity(
6943|                qaPc,
6944|                (document.getElementById('ev_criticality') || {}).value
6945|            );
6946|            if (qaCrit) payload.potential_severity = qaCrit;
6947|        } else {
6948|            var critEl = document.getElementById('ev_criticality');
6949|            if (critEl && critEl.value) {
6950|                payload.potential_severity = evResolvePotentialSeverity(critEl.value) || critEl.value;
6951|            }
6952|        }
6953|
6954|        if (evRequiresAprofundamento(type)) {
6955|            payload.corrective_actions = evCollectCorrectiveActions();
6956|        }
6957|
6958|        // Marca 2ª etapa: backend exige campos técnicos só quando o médico finaliza o Aprofundamento.
6959|        if (evCurrentStep === 'aprofundamento' && evAprofundamentoOnlyMode) {
6960|            payload.aprofundamento_only = true;
6961|            payload.aprofundamento_complete = !!finalizeAprofundamento;
6962|            payload.aprofundamento_status = finalizeAprofundamento ? 'finalized' : 'draft';
6963|        }
6964|
6965|        // Etapa 1 de acidentes: não envia campos técnicos vazios (evita disparar validação da 2ª etapa).
6966|        if (
6967|            (type === 'ACIDENTE_PESSOAL' || type === 'ACIDENTE_MATERIAL' || type === 'ACIDENTE_AMBIENTAL')
6968|            && evCurrentStep !== 'aprofundamento'
6969|            && !evCanEditAprofundamento(type)
6970|        ) {
6971|            payload.consequence = '';
6972|            payload.potential_consequence = '';
6973|            delete payload.potential_severity;
6974|            delete payload.injury_type;
6975|            delete payload.injury_classification;
6976|            delete payload.injury_severity;
6977|            delete payload.descaracterizado;
6978|            delete payload.descaracter_comment;
6979|            delete payload.body_parts;
6980|            delete payload.strategic_nature;
6981|            delete payload.corrective_actions;
6982|            delete payload.asset_type;
6983|            delete payload.failed_barrier;
6984|            delete payload.barrier_type;
6985|            delete payload.environmental_medium;
6986|            delete payload.pollutant_type;
6987|        }
6988|
6989|        if (mode === 'edit') {
6990|            payload.status = document.getElementById('ev_status').value;
6991|        } else {
6992|            var stEl = document.getElementById('ev_status');
6993|            payload.status = (stEl && stEl.value) ? stEl.value : 'ABERTO';
6994|        }
6995|
6996|        // ROS "Visto e resolvido" = SIM: a ocorrência já nasce (ou é salva) como resolvida.
6997|        if (type === 'ROS' && evIsRosResolvedChecked()) {
6998|            payload.status = 'CONCLUIDO';
6999|        }
7000|
7001|        if (type === 'ROS') {
7002|            payload.deviation_type        = document.getElementById('ev_deviation_type').value;
7003|            payload.involvement_type      = document.getElementById('ev_involvement_type_ros').value;
7004|            // Consequência potencial = escala de gravidade; gravamos em potential_severity.
7005|            // Mantém potential_consequence vazio para não conflitar com EventConsequenceEnum.
7006|            payload.potential_consequence = '';
7007|            payload.immediate_risk        = document.getElementById('ev_immediate_risk').checked ? 1 : 0;
7008|            payload.barrier_type          = (document.getElementById('ev_barrier_type_ros') || { value: '' }).value;
7009|            delete payload.failed_barrier;
7010|            delete payload.failed_barrier_other;
7011|            payload.improvement_suggestions = (document.getElementById('ev_improvement_suggestions') || { value: '' }).value;
7012|            payload.ros_resolved = (document.getElementById('ev_ros_resolved') || {}).checked ? 1 : 0;
7013|            payload.ros_resolution_notes = payload.ros_resolved
7014|                ? ((document.getElementById('ev_ros_resolution_notes') || { value: '' }).value || '')
7015|                : '';
7016|            payload.ros_resolution_evidences = payload.ros_resolved ? (evRosResolutionEvidences || []).slice() : [];
7017|            payload.people_ids = '';
7018|        } else if (type === 'QUASE_ACIDENTE') {
7019|            payload.involvement_type   = document.getElementById('ev_involvement_type_qa').value;
7020|            payload.barrier_type       = (document.getElementById('ev_barrier_type_qa') || { value: '' }).value;
7021|            delete payload.failed_barrier;
7022|            payload.potential_consequence = (document.getElementById('ev_qa_potential_consequence') || { value: '' }).value;
7023|            if (payload.involvement_type === 'PERSON') {
7024|                payload.person_id   = (document.getElementById('ev_person_id_qa')   || { value: '' }).value;
7025|                payload.person_type = (document.getElementById('ev_person_type_qa') || { value: '' }).value;
7026|            }
7027|        } else if (type === 'ACIDENTE_PESSOAL') {
7028|            if (typeof evSyncInjuredCardsFromInvolved === 'function') {
7029|                evSyncInjuredCardsFromInvolved();
7030|            }
7031|            evSyncInjuredPersonDetailsHidden();
7032|            var primaryId = (typeof evGetPrimaryInjuredPersonId === 'function')
7033|                ? evGetPrimaryInjuredPersonId()
7034|                : '';
7035|            if (!primaryId) {
7036|                primaryId = evFirstPeopleInvolvedId(peopleIds);
7037|            }
7038|            payload.person_id   = primaryId || (document.getElementById('ev_person_id') || { value: '' }).value;
7039|            payload.person_type = (document.getElementById('ev_person_type') || { value: '' }).value || 'COLABORADOR';
7040|            var detailsObj = (typeof evGetInjuredDetailsObj === 'function') ? evGetInjuredDetailsObj() : {};
7041|            var primaryData = (primaryId && detailsObj[primaryId]) ? detailsObj[primaryId] : null;
7042|            var primaryCard = (typeof evGetPrimaryInjuredCard === 'function') ? evGetPrimaryInjuredCard() : null;
7043|            payload.consequence = primaryCard
7044|                ? ((primaryCard.querySelector('.ev-inj-consequence') || {}).value || '')
7045|                : ((primaryData && primaryData.consequence) || '');
7046|            payload.potential_consequence = primaryCard
7047|                ? ((primaryCard.querySelector('.ev-inj-potential-consequence') || {}).value || '')
7048|                : ((primaryData && primaryData.potential_consequence) || '');
7049|            var consequenceReal = payload.consequence;
7050|            var apDerivedCrit = evResolvePotentialSeverity(
7051|                consequenceReal,
7052|                payload.potential_consequence,
7053|                payload.potential_severity
7054|            );
7055|            if (apDerivedCrit) {
7056|                payload.potential_severity = apDerivedCrit;
7057|            }
7058|            if (consequenceReal === 'SEM_DANO') {
7059|                payload.had_injury = 0;
7060|                payload.injury_type = '';
7061|                payload.injury_severity = '';
7062|            } else {
7063|                var hadEl = primaryCard
7064|                    ? primaryCard.querySelector('.ev-inj-had-injury')
7065|                    : document.getElementById('ev_had_injury');
7066|                payload.had_injury = hadEl
7067|                    ? (hadEl.checked ? 1 : 0)
7068|                    : (primaryData && primaryData.had_injury ? 1 : 0);
7069|                if (payload.had_injury) {
7070|                    var typeFromCard = primaryCard
7071|                        ? ((primaryCard.querySelector('.ev-inj-injury-type') || {}).value || '')
7072|                        : '';
7073|                    var sevFromCard = primaryCard
7074|                        ? ((primaryCard.querySelector('.ev-inj-injury-severity') || {}).value || '')
7075|                        : '';
7076|                    payload.injury_type = (document.getElementById('ev_injury_type') || { value: '' }).value
7077|                        || typeFromCard
7078|                        || (primaryData && primaryData.injury_type) || '';
7079|                    payload.injury_severity = (document.getElementById('ev_injury_severity') || { value: '' }).value
7080|                        || sevFromCard
7081|                        || (primaryData && primaryData.injury_severity) || '';
7082|                } else {
7083|                    payload.injury_type = '';
7084|                    payload.injury_severity = '';
7085|                }
7086|            }
7087|            payload.injury_classification = (document.getElementById('ev_injury_classification') || { value: '' }).value
7088|                || (primaryData && primaryData.injury_classification) || '';
7089|            payload.work_leave      = (document.getElementById('ev_work_leave') || { value: '' }).value
7090|                || (primaryData && primaryData.work_leave) || '';
7091|            payload.injured_person_details = (document.getElementById('ev_injured_person_details') || { value: '' }).value;
7092|            var suspectEl = document.getElementById('ev_descaracter_suspect');
7093|            var descFromCard = (primaryData && primaryData.descaracterizado !== undefined && primaryData.descaracterizado !== '')
7094|                ? String(primaryData.descaracterizado)
7095|                : '';
7096|            if (!descFromCard && primaryCard) {
7097|                descFromCard = String(primaryCard.getAttribute('data-descaracterizado') || '');
7098|            }
7099|            if (!descFromCard) {
7100|                descFromCard = String((document.getElementById('ev_descaracterizado') || {}).value || '');
7101|            }
7102|            // Fallback: médico sem permissão de descaracterizar nunca pode marcar "Não",
7103|            // então se todas as fontes estiverem vazias, assume "Sim" (é acidente = '0').
7104|            if (!descFromCard && evAprofundamentoOnlyMode && !evCanDescharacterizeAccident()) {
7105|                descFromCard = '0';
7106|            }
7107|            var descAnswered = descFromCard === '0' || descFromCard === '1';
7108|            payload.descaracter_suspect = evIsDescaracterSuspectChecked() ? 1 : 0;
7109|            // Caracterizar só o médico no aprofundamento dedicado.
7110|            if (descAnswered && evAprofundamentoOnlyMode) {
7111|                payload.descaracterizado = descFromCard;
7112|            } else {
7113|                delete payload.descaracterizado;
7114|            }
7115|            var descCommentFromCard = primaryCard
7116|                ? String((primaryCard.querySelector('.ev-inj-descaracter-comment') || {}).value || '').trim()
7117|                : '';
7118|            payload.descaracter_comment = descCommentFromCard
7119|                || (primaryData && primaryData.descaracter_comment ? String(primaryData.descaracter_comment).trim() : '')
7120|                || '';
7121|            if (!evAprofundamentoOnlyMode) {
7122|                delete payload.descaracter_comment;
7123|            }
7124|            if (suspectEl) {
7125|                suspectEl.checked = !!payload.descaracter_suspect;
7126|            }
7127|            if (payload.had_injury) {
7128|                var bodyParts = (typeof evCollectActiveBodyParts === 'function')
7129|                    ? evCollectActiveBodyParts()
7130|                    : [];

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "ev-inj-descaracter-comment"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 6
2199|            descaracter_comment: (card.querySelector('.ev-inj-descaracter-comment') || {}).value || '',
2255|        var comm = card.querySelector('.ev-inj-descaracter-comment');
2596|        card.querySelectorAll('.ev-inj-attendance, .ev-inj-relato, .ev-inj-injury-type, .ev-inj-injury-severity, .ev-inj-injury-classification, .ev-inj-had-injury, .ev-inj-consequence, .ev-inj-potential-consequence, .ev-inj-descaracter-comment').forEach(function (el) {
2638|        card.querySelectorAll('.ev-inj-descaracter-comment').forEach(function (ta) {
6022|                    var comm = card.querySelector('.ev-inj-descaracter-comment');
7116|                ? String((primaryCard.querySelector('.ev-inj-descaracter-comment') || {}).value || '').trim()

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "ev_descaracter_suspect"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 7
291|                <input class="form-check-input" type="checkbox" id="ev_descaracter_suspect" name="ev_descaracter_suspect" value="1">
292|                <label class="form-check-label" for="ev_descaracter_suspect">Há suspeita de descaracterização do acidente?</label>
2905|        var el = document.getElementById('ev_descaracter_suspect');
5728|        var suspectChk = document.getElementById('ev_descaracter_suspect');
5746|            var globalChk = document.getElementById('ev_descaracter_suspect');
6476|        evSetChk('ev_descaracter_suspect', suspectOn);
7092|            var suspectEl = document.getElementById('ev_descaracter_suspect');

{"end_line": 2270, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 2180}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 2180-2270
2180|            if (hadLabel) hadLabel.setAttribute('for', had.id);
2181|        }
2182|    }
2183|
2184|    function evReadCardInjuryData(card) {
2185|        if (!card) return {};
2186|        var isActive = card.classList.contains('is-expanded');
2187|        var data = {
2188|            attendance_date: (card.querySelector('.ev-inj-attendance') || {}).value || '',
2189|            breve_relato: (card.querySelector('.ev-inj-relato') || {}).value || '',
2190|            had_injury: !!(card.querySelector('.ev-inj-had-injury') || {}).checked,
2191|            injury_type: (card.querySelector('.ev-inj-injury-type') || {}).value || '',
2192|            injury_severity: (card.querySelector('.ev-inj-injury-severity') || {}).value || '',
2193|            work_leave: (card.querySelector('.ev-inj-work-leave') || {}).value || '',
2194|            injury_classification: (card.querySelector('.ev-inj-injury-classification') || {}).value || '',
2195|            consequence: (card.querySelector('.ev-inj-consequence') || {}).value || '',
2196|            potential_consequence: (card.querySelector('.ev-inj-potential-consequence') || {}).value || '',
2197|            descaracter_suspect: evIsDescaracterSuspectChecked() ? 1 : 0,
2198|            descaracterizado: '',
2199|            descaracter_comment: (card.querySelector('.ev-inj-descaracter-comment') || {}).value || '',
2200|            body_parts: []
2201|        };
2202|        var cardDescHidden = card.getAttribute('data-descaracterizado');
2203|        if (cardDescHidden !== null && cardDescHidden !== '') {
2204|            data.descaracterizado = cardDescHidden;
2205|        } else {
2206|            var cardBtns = card.querySelectorAll('.ev-inj-descaracter-btn.active');
2207|            if (cardBtns.length) {
2208|                data.descaracterizado = cardBtns[0].getAttribute('data-descaracter-val') || '';
2209|            }
2210|        }
2211|        if (isActive) {
2212|            data.body_parts = evCollectActiveBodyParts();
2213|            var bld = document.getElementById('ev_body_location_detail');
2214|            data.body_location_detail = bld && bld.value ? String(bld.value).trim() : '';
2215|        } else {
2216|            var prev = evGetInjuredDetailsObj()[card.getAttribute('data-person-id')] || {};
2217|            data.body_parts = Array.isArray(prev.body_parts) ? prev.body_parts : [];
2218|            data.body_location_detail = prev.body_location_detail || '';
2219|        }
2220|        return data;
2221|    }
2222|
2223|    function evApplyCardInjuryData(card, saved) {
2224|        if (!card || !saved) return;
2225|        var att = card.querySelector('.ev-inj-attendance');
2226|        if (att) att.value = saved.attendance_date || evTodayDateInputValue();
2227|        var rel = card.querySelector('.ev-inj-relato');
2228|        if (rel) rel.value = saved.breve_relato || '';
2229|        var had = card.querySelector('.ev-inj-had-injury');
2230|        if (had) had.checked = saved.had_injury === undefined ? true : !!saved.had_injury;
2231|        var type = card.querySelector('.ev-inj-injury-type');
2232|        if (type && saved.injury_type) type.value = saved.injury_type;
2233|        var sev = card.querySelector('.ev-inj-injury-severity');
2234|        if (sev && saved.injury_severity) sev.value = saved.injury_severity;
2235|        var leave = card.querySelector('.ev-inj-work-leave');
2236|        if (leave) leave.value = saved.work_leave === 'PARCIAL' ? 'TOTAL' : (saved.work_leave || '');
2237|        var klass = card.querySelector('.ev-inj-injury-classification');
2238|        if (klass) {
2239|            var ic = saved.injury_classification || '';
2240|            if (ic === 'LTI_FATALIDADE') ic = 'FAT';
2241|            if (ic) klass.value = ic;
2242|        }
2243|        if (typeof evSyncCardCatFromClassification === 'function') {
2244|            evSyncCardCatFromClassification(card);
2245|        }
2246|        var cons = card.querySelector('.ev-inj-consequence');
2247|        if (cons && saved.consequence) cons.value = saved.consequence;
2248|        var pot = card.querySelector('.ev-inj-potential-consequence');
2249|        if (pot && saved.potential_consequence) pot.value = saved.potential_consequence;
2250|        if (typeof evFilterCardConsequences === 'function') evFilterCardConsequences(card);
2251|        if (typeof evSyncCardDerivedSeverity === 'function') evSyncCardDerivedSeverity(card);
2252|        if (typeof evSyncCardPotentialGteReal === 'function') evSyncCardPotentialGteReal(card);
2253|        var descVal = saved.descaracterizado != null ? String(saved.descaracterizado) : '';
2254|        if (descVal !== '') card.setAttribute('data-descaracterizado', descVal);
2255|        var comm = card.querySelector('.ev-inj-descaracter-comment');
2256|        if (comm) comm.value = saved.descaracter_comment || '';
2257|        evRenderInjuredPersonSummary(card, card.getAttribute('data-person-id'));
2258|        evUpdateInjuredCardSummary(card);
2259|        if (typeof syncInjuryFieldsForCard === 'function') syncInjuryFieldsForCard(card);
2260|    }
2261|
2262|    function evSyncInjuredPersonDetailsHidden() {
2263|        var wrap = document.getElementById('ev_injured_person_boxes');
2264|        if (!wrap) return;
2265|        // Merge: não apaga pessoas que ainda têm caixinha / dados salvos.
2266|        var out = evGetInjuredDetailsObj();
2267|        var seen = {};
2268|        wrap.querySelectorAll('.ev-injured-person-box[data-person-id]').forEach(function (card) {
2269|            var id = String(card.getAttribute('data-person-id') || '');
2270|            if (!id) return;

{"end_line": 2650, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 2585}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 2585-2650
2585|                }
2586|            });
2587|        });
2588|        var pick = card.querySelector('.js-ev-inj-pick');
2589|        if (pick) {
2590|            pick.addEventListener('click', function (e) {
2591|                e.preventDefault();
2592|                e.stopPropagation();
2593|                evSelectPrimaryInjuredPerson(card.getAttribute('data-person-id'));
2594|            });
2595|        }
2596|        card.querySelectorAll('.ev-inj-attendance, .ev-inj-relato, .ev-inj-injury-type, .ev-inj-injury-severity, .ev-inj-injury-classification, .ev-inj-had-injury, .ev-inj-consequence, .ev-inj-potential-consequence, .ev-inj-descaracter-comment').forEach(function (el) {
2597|            el.addEventListener('change', function () {
2598|                if (el.classList.contains('ev-inj-had-injury') && typeof window.evSyncHadInjuryUi === 'function') {
2599|                    window.evSyncHadInjuryUi();
2600|                }
2601|                if (el.classList.contains('ev-inj-injury-classification')) {
2602|                    evSyncCardCatFromClassification(card);
2603|                }
2604|                if (el.classList.contains('ev-inj-consequence')) {
2605|                    evSyncCardDerivedSeverity(card);
2606|                    evSyncCardPotentialGteReal(card);
2607|                    evSyncInjuryFieldsByConsequence();
2608|                }
2609|                if (el.classList.contains('ev-inj-potential-consequence')) {
2610|                    evSyncCardPotentialGteReal(card);
2611|                }
2612|                evUpdateInjuredCardSummary(card);
2613|                evSyncInjuredPersonDetailsHidden();
2614|                evPersistDraftSoon();
2615|            });
2616|            el.addEventListener('input', function () {
2617|                evSyncInjuredPersonDetailsHidden();
2618|                evPersistDraftSoon();
2619|            });
2620|        });
2621|
2622|        card.querySelectorAll('.ev-inj-descaracter-btn').forEach(function (btn) {
2623|            btn.addEventListener('click', function () {
2624|                var val = this.getAttribute('data-descaracter-val');
2625|                if (val === '1' && !evCanDescharacterizeAccident()) {
2626|                    return;
2627|                }
2628|                card.setAttribute('data-descaracterizado', val);
2629|                var hidden = document.getElementById('ev_descaracterizado');
2630|                if (hidden) hidden.value = val;
2631|                var toggle = card.querySelector('.ev-inj-descaracter-toggle');
2632|                if (toggle) toggle.classList.remove('is-invalid');
2633|                evSyncDescaracterUi();
2634|                evSyncInjuredPersonDetailsHidden();
2635|                evPersistDraftSoon();
2636|            });
2637|        });
2638|        card.querySelectorAll('.ev-inj-descaracter-comment').forEach(function (ta) {
2639|            ta.addEventListener('input', function () {
2640|                ta.classList.remove('is-invalid');
2641|            });
2642|        });
2643|        evFilterCardConsequences(card);
2644|        evSyncCardCatFromClassification(card);
2645|        evSyncDescaracterUi();
2646|        if (window.jQuery && window.jQuery.fn.tooltip) {
2647|            window.jQuery(card).find('.ev-inj-descaracter-tip').tooltip({ container: 'body' });
2648|        }
2649|    }
2650|

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "function evSyncDescaracterUi"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 1
2937|    function evSyncDescaracterUi() {

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "evCanDescharacterizeAccident"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 4
2625|                if (val === '1' && !evCanDescharacterizeAccident()) {
2900|    function evCanDescharacterizeAccident() {
2939|        var canSn = evCanDescharacterizeAccident();
7104|            if (!descFromCard && evAprofundamentoOnlyMode && !evCanDescharacterizeAccident()) {

{"end_line": 3010, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 2890}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 2890-3010
2890|            // Remonta caixinhas após restaurar o JSON do draft.
2891|            setTimeout(function () {
2892|                if (typeof evRenderInjuredPersonBoxes === 'function') evRenderInjuredPersonBoxes();
2893|            }, 0);
2894|            return true;
2895|        } catch (e) {
2896|            return false;
2897|        }
2898|    }
2899|
2900|    function evCanDescharacterizeAccident() {
2901|        return window.SSMA_CAN_DESCARACTERIZE === true || window.SSMA_CAN_DESCARACTERIZE === 'true';
2902|    }
2903|
2904|    function evIsDescaracterSuspectChecked() {
2905|        var el = document.getElementById('ev_descaracter_suspect');
2906|        return !!(el && el.checked);
2907|    }
2908|
2909|    function evIsCreateMode() {
2910|        return ((document.getElementById('ev_form_mode') || { value: 'create' }).value === 'create');
2911|    }
2912|
2913|    function evSyncDescaracterStageUi() {
2914|        var isAp = evSelectedType() === 'ACIDENTE_PESSOAL';
2915|        var isDoctorAprof = !!evAprofundamentoOnlyMode;
2916|        var form = document.getElementById('form-event-new');
2917|        if (form) form.classList.toggle('is-doctor-aprof', isDoctorAprof);
2918|        // Checkbox global de suspeita (etapa 1) fica sempre oculto — suspeita agora é por card no aprofundamento.
2919|        var suspectWrap = document.getElementById('ev-suspeita-wrap');
2920|        if (suspectWrap) {
2921|            suspectWrap.classList.add('d-none');
2922|        }
2923|        document.querySelectorAll('.ev-inj-descaracter').forEach(function (el) {
2924|            // Seção de descaracterização só aparece no aprofundamento do especialista.
2925|            el.classList.toggle('d-none', !isAp || !isDoctorAprof);
2926|        });
2927|        // Sincroniza Sim/Não de cada card com o estado do checkbox de suspeita do próprio card.
2928|        document.querySelectorAll('.ev-injured-person-box').forEach(function (card) {
2929|            var suspChk = card.querySelector('.ev-inj-suspect-chk');
2930|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
2931|            if (suspChk && yesNoWrap) {
2932|                yesNoWrap.classList.toggle('d-none', !suspChk.checked);
2933|            }
2934|        });
2935|    }
2936|
2937|    function evSyncDescaracterUi() {
2938|        var hidden = document.getElementById('ev_descaracterizado');
2939|        var canSn = evCanDescharacterizeAccident();
2940|        var cur = String((hidden || {}).value || '');
2941|
2942|        evSyncDescaracterStageUi();
2943|
2944|        // Pré-seleciona "Sim" quando o profissional não tem permissão de descaracterização
2945|        // e o campo ainda está vazio. Ele só pode dizer "Sim" de qualquer forma, então
2946|        // pré-preencher evita a validação falhar sem o usuário perceber o que falta.
2947|        if (!canSn && cur === '' && evAprofundamentoOnlyMode && hidden) {
2948|            hidden.value = '0';
2949|            cur = '0';
2950|            document.querySelectorAll('.ev-injured-person-box').forEach(function (c) {
2951|                c.setAttribute('data-descaracterizado', '0');
2952|            });
2953|        }
2954|
2955|        document.querySelectorAll('.ev-injured-person-box').forEach(function (card) {
2956|            var noPerm = card.querySelector('.ev-inj-descaracter-no-perm');
2957|            var cardDesc = card.getAttribute('data-descaracterizado') || cur;
2958|            if (noPerm) noPerm.classList.toggle('d-none', canSn);
2959|            card.querySelectorAll('.ev-inj-descaracter-btn').forEach(function (b) {
2960|                var val = b.getAttribute('data-descaracter-val');
2961|                // Sem permissão: "Não" fica visível mas desabilitado — o par Sim/Não precisa aparecer.
2962|                if (val === '1' && !canSn) {
2963|                    b.disabled = true;
2964|                    b.classList.remove('d-none');
2965|                    b.setAttribute('title', 'Sem permissão para descaracterizar o acidente.');
2966|                } else {
2967|                    b.disabled = false;
2968|                    b.classList.remove('d-none');
2969|                    b.removeAttribute('title');
2970|                }
2971|            });
2972|            if (window.SsmaShared && typeof window.SsmaShared.toggleYesNo === 'function') {
2973|                window.SsmaShared.toggleYesNo(card.querySelectorAll('.ev-inj-descaracter-btn'), cardDesc !== '' ? cardDesc : null, {
2974|                    valueAttr: 'data-descaracter-val'
2975|                });
2976|            }
2977|        });
2978|    }
2979|
2980|    /** Etapa 0: admin Aura + membro — esconde título/status só na criação; na edição volta. */
2981|    function evApplyAuraTitleStatusVisibility(mode) {
2982|        var row = document.getElementById('ev-title-status-row');
2983|        if (!row) return;
2984|        var hideOnCreate = !!window.SSMA_HIDE_EVENT_TITLE_STATUS_ON_CREATE
2985|            || !!window.SSMA_IS_AURA_ADMIN;
2986|        var hide = hideOnCreate && mode === 'create';
2987|        row.classList.toggle('d-none', hide);
2988|        var statusEl = document.getElementById('ev_status');
2989|        if (statusEl) {
2990|            if (hide) {
2991|                statusEl.removeAttribute('required');
2992|                if (!statusEl.value) statusEl.value = 'ABERTO';
2993|            } else {
2994|                statusEl.setAttribute('required', 'required');
2995|            }
2996|        }
2997|    }
2998|
2999|    function evSyncAaIdentFields(type) {
3000|        var wrap = document.getElementById('ev-aa-ident-fields');
3001|        if (!wrap) return;
3002|        var show = type === 'ACIDENTE_AMBIENTAL';
3003|        wrap.classList.toggle('d-none', !show);
3004|    }
3005|
3006|    function evSyncContainmentTimeEnabled() {
3007|        var done = document.getElementById('ev_containment_done');
3008|        var time = document.getElementById('ev_containment_time');
3009|        if (!done || !time) return;
3010|        time.disabled = !done.checked;

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "ev-inj-suspect-chk"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 3
2929|            var suspChk = card.querySelector('.ev-inj-suspect-chk');
5738|            if (!e.target || !e.target.classList.contains('ev-inj-suspect-chk')) return;
6479|            var chk = card.querySelector('.ev-inj-suspect-chk');

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "ev-inj-descaracter-yesno-wrap"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 3
2930|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
5741|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
6482|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "ev-inj-descaracter-no-perm"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 1
2956|            var noPerm = card.querySelector('.ev-inj-descaracter-no-perm');

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "descaracter-yesno"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 3
2930|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
5741|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
6482|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');

{"search_text": "ev-inj-descaracter-yesno-wrap"}

File: templates/ssma/occurrence/partials/_ev_injured_person_box.html.twig
Match lines: 1
197|            <div class="ev-inj-descaracter-yesno-wrap d-none">

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 3
2930|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
5741|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
6482|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');

{"search_text": "ev-inj-descaracter-no-perm"}

File: templates/ssma/occurrence/partials/_ev_injured_person_box.html.twig
Match lines: 1
216|                <p class="ev-inj-descaracter-no-perm small text-muted mb-0 mt-2 d-none">

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 1
2956|            var noPerm = card.querySelector('.ev-inj-descaracter-no-perm');

{"end_line": 240, "file_path": "templates/ssma/occurrence/partials/_ev_injured_person_box.html.twig", "start_line": 150}

File: templates/ssma/occurrence/partials/_ev_injured_person_box.html.twig (Total lines: 225)
IS_TRUNCATED: false
LINE_RANGE: 150-225
150|                            <option value="TOTAL">Com afastamento</option>
151|                        </select>
152|                    </div>
153|                </div>
154|            </div>
155|
156|            <div class="form-row ev-inj-consequence-row d-none" aria-hidden="true">
157|                <div class="col-6">
158|                    <div class="form-group mb-2">
159|                        <label>Consequência real <span class="text-danger">*</span></label>
160|                        <select class="form-control ev-inj-consequence">
161|                            <option value="" disabled selected>Selecione a consequência</option>
162|                            {% include 'ssma/occurrence/partials/_ev_consequence_options.html.twig' %}
163|                        </select>
164|                        <div class="ev-inj-derived-severity-wrap mt-2">
165|                            <label class="text-muted small d-block mb-1">Gravidade da ocorrência (automática)</label>
166|                            <span class="ev-inj-derived-severity-badge ssma-shared-tag"
167|                                  style="background:rgba(108,117,125,0.10);color:#6c757d;border-color:#adb5bd;">—</span>
168|                        </div>
169|                    </div>
170|                </div>
171|                <div class="col-6">
172|                    <div class="form-group mb-2">
173|                        <label>Consequência potencial <span class="text-danger">*</span></label>
174|                        <select class="form-control ev-inj-potential-consequence">
175|                            <option value="" disabled selected>Selecione a consequência</option>
176|                            {% include 'ssma/occurrence/partials/_ev_consequence_options.html.twig' %}
177|                        </select>
178|                    </div>
179|                </div>
180|            </div>
181|
182|            {# CAT eSocial — exibido quando integração estiver ativa #}
183|            <div class="ev-inj-esocial-cat-wrap d-none mt-2 p-2 rounded border">
184|                <div class="small font-weight-bold mb-1">Registro da CAT no eSocial (automático)</div>
185|                <div class="ev-inj-esocial-cat-body small text-muted">—</div>
186|            </div>
187|        </div>
188|
189|        <p class="small text-muted font-italic mb-0 mt-2">Oriente o profissional a anexar evidências (fotos, laudos) na etapa de registro, se aplicável.</p>
190|
191|        {# Descaracterização — só no aprofundamento. Suspeita editável por qualquer especialista AP; Sim/Não só quem tem permissão Descaracterizar. #}
192|        <div class="ev-inj-descaracter mt-3 pt-3 border-top d-none">
193|            <div class="form-check mb-2">
194|                <input class="form-check-input ev-inj-suspect-chk" type="checkbox">
195|                <label class="form-check-label font-weight-bold">Há suspeita de descaracterização do acidente?</label>
196|            </div>
197|            <div class="ev-inj-descaracter-yesno-wrap d-none">
198|                <label class="d-block small mb-2 font-weight-bold">
199|                    Caracterizado como acidente?
200|                    <i class="fas fa-info-circle text-muted ml-1 ev-inj-descaracter-tip"
201|                       style="cursor:help;font-size:12px;"
202|                       data-toggle="tooltip"
203|                       data-placement="top"
204|                       title="Sim = é acidente. Não (descaracterizar) só quem tem permissão na coluna Descaracterizar em Profissionais de Saúde."></i>
205|                </label>
206|                <div class="ev-inj-descaracter-toggle d-flex align-items-center mb-3" role="group" aria-label="Caracterizado como acidente">
207|                    <button type="button" class="mhs-btn-cancel ev-inj-descaracter-btn" data-descaracter-val="0" style="min-width:84px;">Sim</button>
208|                    <button type="button" class="mhs-btn-cancel ev-inj-descaracter-btn" data-descaracter-val="1" style="min-width:84px;">Não</button>
209|                </div>
210|                <div class="form-group mb-0 ev-inj-descaracter-comment-wrap">
211|                    <label class="small mb-1">Comentário <span class="text-danger">*</span></label>
212|                    <textarea class="form-control form-control-sm ev-inj-descaracter-comment"
213|                              rows="2"
214|                              maxlength="2000"></textarea>
215|                </div>
216|                <p class="ev-inj-descaracter-no-perm small text-muted mb-0 mt-2 d-none">
217|                    Sem permissão para descaracterizar o acidente.
218|                    Peça ao gestor que marque a coluna <strong>Descaracterizar</strong> em
219|                    Profissionais de Saúde (configuração de aprofundamento).
220|                </p>
221|            </div>
222|        </div>
223|    </div>
224|</div>
225|

{"query_name": "SsmaActionPlanMutatePermissionService"}

src/Service/Ssma/SsmaActionPlanMutatePermissionService.php
tests/Unit/Product/Ssma/SsmaActionPlanMutatePermissionServiceTest.php

{"query_name": "SsmaStakeholderActionPermissionService"}

src/Service/Ssma/SsmaStakeholderActionPermissionService.php

{"query_name": "SsmaOccurrenceStakeholderAccessChecker"}

src/Service/Ssma/SsmaOccurrenceStakeholderAccessChecker.php

{"file_path": "src/Service/Ssma/SsmaActionPlanMutatePermissionService.php"}

File: src/Service/Ssma/SsmaActionPlanMutatePermissionService.php (Total lines: 111)
IS_TRUNCATED: false
LINE_RANGE: 1-111
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\SsmaAction;
10|use App\Entity\User;
11|use Doctrine\ORM\EntityManagerInterface;
12|use Symfony\Component\HttpFoundation\Request;
13|
14|/**
15| * Libera rotas de resolver/validar ação no gate global quando o membro
16| * é executor ou validador designado, mesmo com tag SSMA só leitura.
17| * A validação fina permanece em {@see SsmaStakeholderActionPermissionService} e no controller.
18| */
19|final class SsmaActionPlanMutatePermissionService
20|{
21|    /** @var list<string> */
22|    private const MUTATION_ROUTES = [
23|        'admin_ssma_action_resolve',
24|        'admin_ssma_action_validate',
25|    ];
26|
27|    public function __construct(
28|        private EntityManagerInterface $entityManager,
29|        private SsmaStakeholderActionPermissionService $stakeholderActionPermissionService,
30|    ) {}
31|
32|    public function isMutationRoute(string $route): bool
33|    {
34|        return in_array($route, self::MUTATION_ROUTES, true);
35|    }
36|
37|    public function canMutateForRoute(
38|        User $user,
39|        Company $company,
40|        CompanyMembers $member,
41|        string $route,
42|        ?Request $request = null,
43|    ): bool {
44|        if (!$this->isMutationRoute($route)) {
45|            return false;
46|        }
47|
48|        $action = $this->resolveActionForRoute($company, $request);
49|        if ($action === null) {
50|            return false;
51|        }
52|
53|        if ($route === 'admin_ssma_action_validate') {
54|            return $this->stakeholderActionPermissionService->canValidateAsDesignatedValidator($action, $member);
55|        }
56|
57|        if ($route === 'admin_ssma_action_resolve') {
58|            if (in_array($this->resolveOperation($request), ['evaluate', 'reopen'], true)) {
59|                return false;
60|            }
61|
62|            return $this->stakeholderActionPermissionService->canResolveAsResponsible($action, $member);
63|        }
64|
65|        return false;
66|    }
67|
68|    private function resolveActionForRoute(Company $company, ?Request $request): ?SsmaAction
69|    {
70|        if ($request === null) {
71|            return null;
72|        }
73|
74|        $id = $request->attributes->get('id');
75|        if (!is_numeric($id)) {
76|            return null;
77|        }
78|
79|        $action = $this->entityManager->find(SsmaAction::class, (int) $id);
80|        if (!$action || (int) $action->getCompany()->getId() !== (int) $company->getId()) {
81|            return null;
82|        }
83|
84|        return $action;
85|    }
86|
87|    private function resolveOperation(?Request $request): string
88|    {
89|        if ($request === null) {
90|            return 'resolve';
91|        }
92|
93|        $content = $request->getContent();
94|        if (!is_string($content) || $content === '') {
95|            return 'resolve';
96|        }
97|
98|        try {
99|            $data = json_decode($content, true, 512, JSON_THROW_ON_ERROR);
100|        } catch (\JsonException) {
101|            return 'resolve';
102|        }
103|
104|        if (!is_array($data)) {
105|            return 'resolve';
106|        }
107|
108|        return (string) ($data['operation'] ?? 'resolve');
109|    }
110|}
111|

{"file_path": "src/Service/Ssma/SsmaStakeholderActionPermissionService.php"}

File: src/Service/Ssma/SsmaStakeholderActionPermissionService.php (Total lines: 124)
IS_TRUNCATED: false
LINE_RANGE: 1-124
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\SsmaAction;
10|use App\Entity\User;
11|use App\Service\PermissionTagByMemberService;
12|use Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface;
13|
14|/**
15| * Permissões de escrita SSMA para executor, validador e stakeholder de ocorrência.
16| *
17| * Regras de produto ficam no módulo SSMA e são aplicadas no SsmaController.
18| */
19|final class SsmaStakeholderActionPermissionService
20|{
21|    public function __construct(
22|        private PermissionTagByMemberService $permissionService,
23|        private SsmaOccurrenceStakeholderAccessChecker $stakeholderAccessChecker,
24|        private AuthorizationCheckerInterface $authorizationChecker,
25|    ) {}
26|
27|    public function hasStakeholderAccess(?CompanyMembers $member, Company $company): bool
28|    {
29|        return $this->stakeholderAccessChecker->hasStakeholderLink($member, $company);
30|    }
31|
32|    public function canUploadOccurrenceEvidence(?CompanyMembers $member, Company $company): bool
33|    {
34|        return $this->hasStakeholderAccess($member, $company);
35|    }
36|
37|    public function canUserUploadOccurrenceEvidence(User $user, Company $company, bool $canManageOccurrences): bool
38|    {
39|        if ($canManageOccurrences) {
40|            return true;
41|        }
42|
43|        $member = $this->permissionService->getCompanyMember($user, $company);
44|
45|        return $this->canUploadOccurrenceEvidence($member, $company);
46|    }
47|
48|    public function canResolveAsResponsible(SsmaAction $action, ?CompanyMembers $member): bool
49|    {
50|        if (!$member) {
51|            return false;
52|        }
53|
54|        $memberId = (int) $member->getId();
55|        if ($memberId <= 0) {
56|            return false;
57|        }
58|
59|        if ($action->isSolved() || $action->getValidationStatus() === 'pending_validation') {
60|            return false;
61|        }
62|
63|        return in_array($memberId, $action->getResponsibleIds() ?? [], true);
64|    }
65|
66|    public function canValidateAsDesignatedValidator(SsmaAction $action, ?CompanyMembers $member): bool
67|    {
68|        if (!$member || !$action->isPendingValidation()) {
69|            return false;
70|        }
71|
72|        $validatorId = $action->getValidatorMemberId();
73|        if ($validatorId === null) {
74|            return false;
75|        }
76|
77|        return (int) $member->getId() === (int) $validatorId;
78|    }
79|
80|    public function canUserResolveAction(
81|        SsmaAction $action,
82|        Company $company,
83|        ?User $user,
84|        bool $canManageOccurrences,
85|        string $operation = 'resolve',
86|    ): bool {
87|        if (in_array($operation, ['evaluate', 'reopen'], true)) {
88|            return $canManageOccurrences;
89|        }
90|
91|        if ($this->authorizationChecker->isGranted('ROLE_SUPER_ADMIN')
92|            || $this->authorizationChecker->isGranted('ROLE_MANAGER')) {
93|            return true;
94|        }
95|
96|        if ($canManageOccurrences) {
97|            return true;
98|        }
99|
100|        $member = $user ? $this->permissionService->getCompanyMember($user, $company) : null;
101|
102|        return $this->canResolveAsResponsible($action, $member);
103|    }
104|
105|    public function canUserValidateAction(
106|        SsmaAction $action,
107|        Company $company,
108|        ?User $user,
109|        bool $canManageOccurrences,
110|    ): bool {
111|        if (!$action->isPendingValidation()) {
112|            return false;
113|        }
114|
115|        if ($canManageOccurrences) {
116|            return true;
117|        }
118|
119|        $member = $user ? $this->permissionService->getCompanyMember($user, $company) : null;
120|
121|        return $this->canValidateAsDesignatedValidator($action, $member);
122|    }
123|}
124|

{"file_path": "tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php"}

File: tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php (Total lines: 163)
IS_TRUNCATED: false
LINE_RANGE: 1-163
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\EventListener\GlobalPermissionListener;
13|use App\Service\Finance\FinanceTenantContextResolver;
14|use App\Service\LiveInterviewAccessService;
15|use App\Service\PermissionTagByMemberService;
16|use App\Service\Ssma\SsmaOccurrenceCreatePermissionService;
17|use App\Service\Ssma\SsmaActionPlanMutatePermissionService;
18|use App\Service\Ssma\SsmaOccurrenceStakeholderAccessChecker;
19|use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
20|use App\Service\Ssma\SsmaPreventionMutatePermissionService;
21|use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
22|use App\Service\Ssma\SsmaRefusalRightService;
23|use App\Service\Ssma\SsmaStakeholderActionPermissionService;
24|use App\Repository\SsmaOccurrenceCreatePermissionRepository;
25|use Doctrine\ORM\EntityManagerInterface;
26|use Doctrine\Persistence\ObjectRepository;
27|use Symfony\Component\HttpFoundation\Request;
28|use Symfony\Component\HttpFoundation\Session\SessionInterface;
29|use Symfony\Component\HttpKernel\Event\ControllerEvent;
30|use Symfony\Component\HttpKernel\HttpKernelInterface;
31|use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
32|use Symfony\Component\Security\Core\Security;
33|
34|/**
35| * Anti-regressão: cadastro de ocorrência (ssma_event_create) não pode levar 403
36| * no gate de Supervisor antes do bypass isMemberOwnOccurrenceCreate / occurrenceMatrixMutate.
37| */
38|final class GlobalPermissionListenerOccurrenceCreateWriteTest extends SsmaTestCase
39|{
40|    public function testSupervisorViewerCanPostSsmaEventCreateWithoutListener403(): void
41|    {
42|        $listener = $this->createListener(['ROLE_USER', 'ROLE_MANAGER_VIEWER'], false);
43|        $request = Request::create('/manager/ssma/events', 'POST', [], [], [], [], '{}');
44|        $request->attributes->set('_route', 'ssma_event_create');
45|
46|        $event = new ControllerEvent(
47|            $this->createMock(HttpKernelInterface::class),
48|            static function (): void {},
49|            $request,
50|            HttpKernelInterface::MAIN_REQUEST,
51|        );
52|
53|        $listener->onKernelController($event);
54|
55|        self::assertSame('ssma_event_create', $request->attributes->get('_route'));
56|    }
57|
58|    public function testPlainMemberWithoutCreateTagRemainsBlockedOnOccurrenceWrite(): void
59|    {
60|        $listener = $this->createListener(['ROLE_USER'], false);
61|        // ssma_event_update ganha bypass via occurrenceMatrixMutate (ROS padrão do membro).
62|        // DELETE sem bypass de matriz valida o gate de escrita da tag.
63|        $request = Request::create('/manager/ssma/events/1', 'DELETE');
64|        $request->attributes->set('_route', 'ssma_event_delete');
65|
66|        $event = new ControllerEvent(
67|            $this->createMock(HttpKernelInterface::class),
68|            static function (): void {},
69|            $request,
70|            HttpKernelInterface::MAIN_REQUEST,
71|        );
72|
73|        $this->expectExceptionMessage('Você não possui permissão para executar esta ação.');
74|        $listener->onKernelController($event);
75|    }
76|
77|    /**
78|     * @param list<string> $roles
79|     */
80|    private function createListener(array $roles, bool $canCreate): GlobalPermissionListener
81|    {
82|        $company = $this->company(10);
83|        $user = $this->user(20)->setCompany($company)->setRoles($roles);
84|        $member = (new CompanyMembers())->setCompany($company)->setUser($user);
85|        $tag = (new PermissionTag())
86|            ->setName('Membro')
87|            ->setCanView(true)
88|            ->setCanCreate($canCreate)
89|            ->setCanEdit(false)
90|            ->setCanDelete(false)
91|            ->setTeamLimitation(false);
92|        $product = $this->setEntityId(new Product(), 30);
93|
94|        $productRepository = $this->createMock(ObjectRepository::class);
95|        $productRepository->method('findOneBy')->willReturn($product);
96|        $memberRepository = $this->createMock(ObjectRepository::class);
97|        $memberRepository->method('findBy')->willReturn([]);
98|        $metaRepository = $this->createMock(ObjectRepository::class);
99|        $metaRepository->method('findOneBy')->willReturn(null);
100|
101|        $entityManager = $this->createMock(EntityManagerInterface::class);
102|        $entityManager->method('getRepository')->willReturnCallback(
103|            static function (string $class) use ($productRepository, $memberRepository, $metaRepository): ObjectRepository {
104|                return match ($class) {
105|                    Product::class => $productRepository,
106|                    CompanyMembers::class => $memberRepository,
107|                    default => $metaRepository,
108|                };
109|            }
110|        );
111|
112|        $permissionService = $this->createMock(PermissionTagByMemberService::class);
113|        $permissionService->method('getCompanyMember')->willReturn($member);
114|        $permissionService->method('getPermissionTag')->willReturn($tag);
115|
116|        $security = $this->createMock(Security::class);
117|        $security->method('getUser')->willReturn($user);
118|
119|        $authorizationChecker = $this->createMock(\Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface::class);
120|        $authorizationChecker->method('isGranted')->willReturnCallback(
121|            static fn (string $role): bool => $role === 'ROLE_MANAGER_VIEWER' && in_array('ROLE_MANAGER_VIEWER', $roles, true)
122|        );
123|        $preventionService = new SsmaPreventionMutatePermissionService(
124|            $entityManager,
125|            $permissionService,
126|            $authorizationChecker,
127|        );
128|
129|        return new GlobalPermissionListener(
130|            $permissionService,
131|            $this->createMock(LiveInterviewAccessService::class),
132|            $security,
133|            $entityManager,
134|            $this->createMock(SessionInterface::class),
135|            $this->createMock(UrlGeneratorInterface::class),
136|            new SsmaOccurrenceStakeholderAccessChecker($entityManager),
137|            $preventionService,
138|            new SsmaRefusalRightMutatePermissionService(
139|                new SsmaRefusalRightService($entityManager),
140|                $entityManager,
141|                $permissionService,
142|                $authorizationChecker,
143|            ),
144|            new SsmaActionPlanMutatePermissionService(
145|                $entityManager,
146|                new SsmaStakeholderActionPermissionService(
147|                    $permissionService,
148|                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
149|                    $authorizationChecker,
150|                ),
151|            ),
152|            new SsmaOccurrenceCreatePermissionService(
153|                $entityManager,
154|                $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),
155|                $authorizationChecker,
156|                new SsmaOccurrenceTypeConfigService($entityManager),
157|                $permissionService,
158|            ),
159|            $this->createMock(FinanceTenantContextResolver::class),
160|        );
161|    }
162|}
163|

{"file_path": "tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php"}

File: tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php (Total lines: 180)
IS_TRUNCATED: false
LINE_RANGE: 1-180
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\EventListener\GlobalPermissionListener;
13|use App\Service\Finance\FinanceTenantContextResolver;
14|use App\Service\LiveInterviewAccessService;
15|use App\Service\PermissionTagByMemberService;
16|use App\Service\Ssma\SsmaOccurrenceCreatePermissionService;
17|use App\Service\Ssma\SsmaActionPlanMutatePermissionService;
18|use App\Service\Ssma\SsmaOccurrenceStakeholderAccessChecker;
19|use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
20|use App\Service\Ssma\SsmaPreventionMutatePermissionService;
21|use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
22|use App\Service\Ssma\SsmaRefusalRightService;
23|use App\Service\Ssma\SsmaStakeholderActionPermissionService;
24|use App\Repository\SsmaOccurrenceCreatePermissionRepository;
25|use Doctrine\ORM\EntityManagerInterface;
26|use Doctrine\Persistence\ObjectRepository;
27|use Symfony\Component\HttpFoundation\Request;
28|use Symfony\Component\HttpFoundation\Session\SessionInterface;
29|use Symfony\Component\HttpKernel\Event\ControllerEvent;
30|use Symfony\Component\HttpKernel\HttpKernelInterface;
31|use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
32|use Symfony\Component\Security\Core\Security;
33|
34|final class GlobalPermissionListenerPreventionWriteTest extends SsmaTestCase
35|{
36|    /**
37|     * Supervisor é autorizado pelo serviço de Prevenção para registrar o próprio
38|     * conteúdo. O listener global não pode sobrescrever essa decisão.
39|     *
40|     * @param array{0: string, 1: string} $endpoint
41|     * @dataProvider preventionCreateEndpoints
42|     */
43|    public function testSupervisorCanCreatePreventionContentWhenPreventionGateAllowsIt(array $endpoint): void
44|    {
45|        [$route, $path] = $endpoint;
46|        $listener = $this->createListener(['ROLE_USER', 'ROLE_MANAGER_VIEWER'], false);
47|        $request = Request::create($path, 'POST');
48|        $request->attributes->set('_route', $route);
49|
50|        $event = new ControllerEvent(
51|            $this->createMock(HttpKernelInterface::class),
52|            static function (): void {},
53|            $request,
54|            HttpKernelInterface::MAIN_REQUEST,
55|        );
56|
57|        $listener->onKernelController($event);
58|
59|        self::assertTrue($request->attributes->get('can_create'));
60|        self::assertTrue($request->attributes->get('can_edit'));
61|    }
62|
63|    /**
64|     * @param array{0: string, 1: string} $endpoint
65|     * @dataProvider preventionCreateEndpoints
66|     */
67|    public function testPlainMemberWithoutMetaOrCreateTagRemainsBlocked(array $endpoint): void
68|    {
69|        [$route, $path] = $endpoint;
70|        $listener = $this->createListener(['ROLE_USER'], false);
71|        $request = Request::create($path, 'POST');
72|        $request->attributes->set('_route', $route);
73|
74|        $event = new ControllerEvent(
75|            $this->createMock(HttpKernelInterface::class),
76|            static function (): void {},
77|            $request,
78|            HttpKernelInterface::MAIN_REQUEST,
79|        );
80|
81|        $this->expectExceptionMessage('Você não possui permissão para executar esta ação.');
82|        $listener->onKernelController($event);
83|    }
84|
85|    /**
86|     * @return iterable<string, array{0: array{0: string, 1: string}}>
87|     */
88|    public static function preventionCreateEndpoints(): iterable
89|    {
90|        yield 'inspeção' => [['admin_ssma_inspection_create', '/manager/ssma/inspections']];
91|        yield 'abordagem' => [['ssma_abordagem_create', '/manager/ssma/abordagens']];
92|    }
93|
94|    /**
95|     * @param list<string> $roles
96|     */
97|    private function createListener(array $roles, bool $canCreate): GlobalPermissionListener
98|    {
99|        $company = $this->company(10);
100|        $user = $this->user(20)->setCompany($company)->setRoles($roles);
101|        $member = (new CompanyMembers())->setCompany($company)->setUser($user);
102|        $tag = (new PermissionTag())
103|            ->setName('Membro')
104|            ->setCanView(true)
105|            ->setCanCreate($canCreate)
106|            ->setCanEdit(false)
107|            ->setCanDelete(false)
108|            ->setTeamLimitation(false);
109|        $product = $this->setEntityId(new Product(), 30);
110|
111|        $productRepository = $this->createMock(ObjectRepository::class);
112|        $productRepository->method('findOneBy')->willReturn($product);
113|        $memberRepository = $this->createMock(ObjectRepository::class);
114|        $memberRepository->method('findBy')->willReturn([]);
115|        $metaRepository = $this->createMock(ObjectRepository::class);
116|        $metaRepository->method('findOneBy')->willReturn(null);
117|
118|        $entityManager = $this->createMock(EntityManagerInterface::class);
119|        $entityManager->method('getRepository')->willReturnCallback(
120|            static function (string $class) use ($productRepository, $memberRepository, $metaRepository): ObjectRepository {
121|                return match ($class) {
122|                    Product::class => $productRepository,
123|                    CompanyMembers::class => $memberRepository,
124|                    default => $metaRepository,
125|                };
126|            }
127|        );
128|
129|        $permissionService = $this->createMock(PermissionTagByMemberService::class);
130|        $permissionService->method('getCompanyMember')->willReturn($member);
131|        $permissionService->method('getPermissionTag')->willReturn($tag);
132|
133|        $security = $this->createMock(Security::class);
134|        $security->method('getUser')->willReturn($user);
135|
136|        $authorizationChecker = $this->createMock(\Symfony\Component\Security\Core\Authorization\AuthorizationCheckerInterface::class);
137|        $authorizationChecker->method('isGranted')->willReturnCallback(
138|            static fn (string $role): bool => $role === 'ROLE_MANAGER_VIEWER' && in_array('ROLE_MANAGER_VIEWER', $roles, true)
139|        );
140|        $preventionService = new SsmaPreventionMutatePermissionService(
141|            $entityManager,
142|            $permissionService,
143|            $authorizationChecker,
144|        );
145|
146|        return new GlobalPermissionListener(
147|            $permissionService,
148|            $this->createMock(LiveInterviewAccessService::class),
149|            $security,
150|            $entityManager,
151|            $this->createMock(SessionInterface::class),
152|            $this->createMock(UrlGeneratorInterface::class),
153|            new SsmaOccurrenceStakeholderAccessChecker($entityManager),
154|            $preventionService,
155|            new SsmaRefusalRightMutatePermissionService(
156|                new SsmaRefusalRightService($entityManager),
157|                $entityManager,
158|                $permissionService,
159|                $authorizationChecker,
160|            ),
161|            new SsmaActionPlanMutatePermissionService(
162|                $entityManager,
163|                new SsmaStakeholderActionPermissionService(
164|                    $permissionService,
165|                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
166|                    $authorizationChecker,
167|                ),
168|            ),
169|            new SsmaOccurrenceCreatePermissionService(
170|                $entityManager,
171|                $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),
172|                $authorizationChecker,
173|                new SsmaOccurrenceTypeConfigService($entityManager),
174|                $permissionService,
175|            ),
176|            $this->createMock(FinanceTenantContextResolver::class),
177|        );
178|    }
179|}
180|

{"file_path": "src/Service/Ssma/SsmaOccurrenceStakeholderAccessChecker.php"}

File: src/Service/Ssma/SsmaOccurrenceStakeholderAccessChecker.php (Total lines: 145)
IS_TRUNCATED: false
LINE_RANGE: 1-145
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Service\Ssma;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use Doctrine\ORM\EntityManagerInterface;
10|
11|/**
12| * Detecta se um membro da empresa está ligado a alguma ocorrência SSMA clássica ou evento tipado
13| * (gestor, pessoas envolvidas, responsáveis, person_id em evento) — alinhado a
14| * {@see \App\Controller\SsmaController::isOccurrenceVisibleToMember}.
15| */
16|final class SsmaOccurrenceStakeholderAccessChecker
17|{
18|    /** @var EntityManagerInterface */
19|    private $entityManager;
20|
21|    public function __construct(EntityManagerInterface $entityManager)
22|    {
23|        $this->entityManager = $entityManager;
24|    }
25|
26|    public function hasStakeholderLink(?CompanyMembers $companyMember, Company $company): bool
27|    {
28|        if (!$companyMember) {
29|            return false;
30|        }
31|
32|        $mid = (int) $companyMember->getId();
33|        if ($mid <= 0) {
34|            return false;
35|        }
36|
37|        $cid = (int) $company->getId();
38|        $conn = $this->entityManager->getConnection();
39|        $midJson = json_encode($mid) ?: (string) $mid;
40|        $midStr = (string) $mid;
41|
42|        try {
43|            $sqlOcc = <<<'SQL'
44|SELECT 1 FROM ssma_occurrences o
45|WHERE o.company_id = ?
46|AND (
47|  o.manager_id = ?
48|  OR JSON_CONTAINS(COALESCE(o.people_ids, JSON_ARRAY()), CAST(? AS JSON), '$')
49|  OR JSON_CONTAINS(COALESCE(o.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$')
50|)
51|LIMIT 1
52|SQL;
53|            $r = $conn->fetchOne($sqlOcc, [$cid, $mid, $midJson, $midJson]);
54|            if ($r !== false && $r !== null) {
55|                return true;
56|            }
57|        } catch (\Throwable) {
58|        }
59|
60|        try {
61|            $sqlEv = <<<'SQL'
62|SELECT 1 FROM ssma_events e
63|WHERE e.company_id = ?
64|AND (
65|  CAST(NULLIF(JSON_UNQUOTE(JSON_EXTRACT(e.details, '$.person_id')), '') AS UNSIGNED) = ?
66|  OR CAST(NULLIF(JSON_UNQUOTE(JSON_EXTRACT(e.details, '$.manager_id')), '') AS UNSIGNED) = ?
67|  OR (
68|    JSON_TYPE(JSON_EXTRACT(e.details, '$.people_ids')) = 'ARRAY'
69|    AND JSON_CONTAINS(JSON_EXTRACT(e.details, '$.people_ids'), CAST(? AS JSON), '$') = 1
70|  )
71|  OR (
72|    JSON_TYPE(JSON_EXTRACT(e.details, '$.people_ids')) = 'STRING'
73|    AND FIND_IN_SET(?, JSON_UNQUOTE(JSON_EXTRACT(e.details, '$.people_ids'))) > 0
74|  )
75|  OR (
76|    JSON_TYPE(JSON_EXTRACT(e.details, '$.responsible_ids')) = 'ARRAY'
77|    AND JSON_CONTAINS(JSON_EXTRACT(e.details, '$.responsible_ids'), CAST(? AS JSON), '$') = 1
78|  )
79|  OR (
80|    JSON_TYPE(JSON_EXTRACT(e.details, '$.responsible_ids')) = 'STRING'
81|    AND FIND_IN_SET(?, JSON_UNQUOTE(JSON_EXTRACT(e.details, '$.responsible_ids'))) > 0
82|  )
83|)
84|LIMIT 1
85|SQL;
86|            $r = $conn->fetchOne($sqlEv, [$cid, $mid, $mid, $midJson, $midStr, $midJson, $midStr]);
87|            if ($r !== false && $r !== null) {
88|                return true;
89|            }
90|        } catch (\Throwable) {
91|        }
92|
93|        // Membro responsável por uma ação (ssma_actions.responsible_ids) também acessa o Plano de Ação
94|        try {
95|            $sqlAction = <<<'SQL'
96|SELECT 1 FROM ssma_actions a
97|WHERE a.company_id = ?
98|AND (
99|  JSON_CONTAINS(COALESCE(a.responsible_ids, JSON_ARRAY()), CAST(? AS JSON), '$') = 1
100|  OR a.validator_member_id = ?
101|)
102|LIMIT 1
103|SQL;
104|            $r = $conn->fetchOne($sqlAction, [$cid, $midJson, $mid]);
105|            if ($r !== false && $r !== null) {
106|                return true;
107|            }
108|        } catch (\Throwable) {
109|        }
110|
111|        // Participante ou responsável em inspeção SSMA — acessa Prevenção Ativa
112|        try {
113|            $sqlInsp = <<<'SQL'
114|SELECT 1 FROM ssma_inspections i
115|WHERE i.company_id = ?
116|AND (
117|  i.safety_responsible_id = ?
118|  OR JSON_CONTAINS(COALESCE(i.participants_ids, JSON_ARRAY()), CAST(? AS JSON), '$') = 1
119|)
120|LIMIT 1
121|SQL;
122|            $r = $conn->fetchOne($sqlInsp, [$cid, $mid, $midJson]);
123|            if ($r !== false && $r !== null) {
124|                return true;
125|            }
126|        } catch (\Throwable) {
127|        }
128|
129|        // Observador em abordagem comportamental SSMA — acessa Prevenção Ativa
130|        try {
131|            $sqlAb = <<<'SQL'
132|SELECT 1 FROM ssma_abordagem a
133|WHERE a.company_id = ?
134|AND a.observador_id = ?
135|LIMIT 1
136|SQL;
137|            $r = $conn->fetchOne($sqlAb, [$cid, $mid]);
138|
139|            return $r !== false && $r !== null;
140|        } catch (\Throwable) {
141|            return false;
142|        }
143|    }
144|}
145|

{"end_line": 130, "file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 1}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1919)
IS_TRUNCATED: false
LINE_RANGE: 1-130
1|<?php
2|
3|namespace App\EventListener;
4|
5|use App\Service\PermissionTagByMemberService;
6|use App\Service\Finance\FinanceTenantContextResolver;
7|use App\Service\LiveInterviewAccessService;
8|use App\Entity\User;
9|use App\Entity\Company;
10|use App\Entity\Product;
11|use App\Entity\CompanyMembers;
12|use App\Entity\PermissionTag;
13|use App\Entity\SsmaPermissionTagMember;
14|use App\Service\Ssma\SsmaOccurrenceCreatePermissionService;
15|use App\Service\Ssma\SsmaOccurrenceStakeholderAccessChecker;
16|use App\Service\Ssma\SsmaPreventionMutatePermissionService;
17|use App\Service\Ssma\SsmaActionPlanMutatePermissionService;
18|use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
19|use App\Entity\StructuralResearchSurvey;
20|use App\Entity\StructuralResearchParticipant;
21|use Symfony\Component\HttpKernel\Event\ControllerEvent;
22|use Symfony\Component\HttpKernel\Exception\AccessDeniedHttpException;
23|use Symfony\Component\Security\Core\Security;
24|use Symfony\Component\HttpFoundation\JsonResponse;
25|use Symfony\Component\HttpFoundation\RedirectResponse;
26|use Symfony\Component\HttpFoundation\Session\SessionInterface;
27|use Symfony\Component\Routing\Generator\UrlGeneratorInterface;
28|use Doctrine\ORM\EntityManagerInterface;
29|use Symfony\Component\EventDispatcher\Attribute\AsEventListener;
30|
31|#[AsEventListener(event: 'kernel.controller', priority: 0)]
32|class GlobalPermissionListener
33|{
34|    private PermissionTagByMemberService $permissionService;
35|    private LiveInterviewAccessService $liveInterviewAccessService;
36|    private Security $security;
37|    private EntityManagerInterface $entityManager;
38|    private SessionInterface $session;
39|    private UrlGeneratorInterface $urlGenerator;
40|    private SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker;
41|    private SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService;
42|    private SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService;
43|    private SsmaActionPlanMutatePermissionService $ssmaActionPlanMutatePermissionService;
44|    private SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService;
45|    private FinanceTenantContextResolver $financeTenantContextResolver;
46|    private string $ssmaParentProductSlug;
47|
48|    // Mapeamento de rotas para produtos necessários (inicializado no construtor para suportar slug dinâmico)
49|    private array $routeProductMapping = [];
50|
51|    // Mapeamento de templates baseado em rotas
52|    private array $routeTemplateMapping = [
53|        'onboarding_index' => [
54|            'product' => 'onboarding',
55|            'admin' => 'onboarding/index_admin.html.twig',
56|            'user' => 'onboarding/index_user.html.twig'
57|        ],
58|        'offboarding_index' => [
59|            'product' => 'offboarding',
60|            'admin' => 'offboarding/index.html.twig',
61|            'user' => 'offboarding/index_user.html.twig'
62|        ],
63|        'nps_dashboard' => [
64|            'product' => 'nps-com-ia',
65|            'admin' => 'layoutAdmin.html.twig',
66|            'user' => 'layoutUser.html.twig'
67|        ],
68|        'live_interview_management' => [
69|            'product' => 'live_interview',
70|            'admin' => 'layoutAdmin.html.twig',
71|            'user' => 'layoutUser.html.twig'
72|        ],
73|        // Adicione outras rotas conforme necessário
74|    ];
75|
76|    // Mapeamento específico para rotas de pesquisa estrutural
77|    private array $structuralResearchRoutes = [
78|        'structural_research_list',
79|        'structural_research_survey_list',
80|        'structural_research_survey_new',
81|        'structural_research_survey_edit',
82|        'structural_research_survey_save',
83|        'structural_research_survey_delete',
84|        'structural_research_copy',
85|        'structural_research_survey_get_participants',
86|        'structural_research_survey_update_participants',
87|        'structural_research_survey_current_participants',
88|        'structural_research_survey',
89|        'structural_research_view',
90|        'structural_research_survey_edit_manager'
91|    ];
92|
93|
94|    public function __construct(
95|        PermissionTagByMemberService $permissionService,
96|        LiveInterviewAccessService $liveInterviewAccessService,
97|        Security $security,
98|        EntityManagerInterface $entityManager,
99|        SessionInterface $session,
100|        UrlGeneratorInterface $urlGenerator,
101|        SsmaOccurrenceStakeholderAccessChecker $ssmaOccurrenceStakeholderAccessChecker,
102|        SsmaPreventionMutatePermissionService $ssmaPreventionMutatePermissionService,
103|        SsmaRefusalRightMutatePermissionService $ssmaRefusalRightMutatePermissionService,
104|        SsmaActionPlanMutatePermissionService $ssmaActionPlanMutatePermissionService,
105|        SsmaOccurrenceCreatePermissionService $ssmaOccurrenceCreatePermissionService,
106|        FinanceTenantContextResolver $financeTenantContextResolver,
107|        string $ssmaParentProductSlug = 'saude-e-seguranca'
108|    ) {
109|        $this->permissionService = $permissionService;
110|        $this->liveInterviewAccessService = $liveInterviewAccessService;
111|        $this->security = $security;
112|        $this->entityManager = $entityManager;
113|        $this->session = $session;
114|        $this->urlGenerator = $urlGenerator;
115|        $this->ssmaOccurrenceStakeholderAccessChecker = $ssmaOccurrenceStakeholderAccessChecker;
116|        $this->ssmaPreventionMutatePermissionService = $ssmaPreventionMutatePermissionService;
117|        $this->ssmaRefusalRightMutatePermissionService = $ssmaRefusalRightMutatePermissionService;
118|        $this->ssmaActionPlanMutatePermissionService = $ssmaActionPlanMutatePermissionService;
119|        $this->ssmaOccurrenceCreatePermissionService = $ssmaOccurrenceCreatePermissionService;
120|        $this->financeTenantContextResolver = $financeTenantContextResolver;
121|        $this->ssmaParentProductSlug = $ssmaParentProductSlug;
122|        $this->routeProductMapping = [
123|            'ssma_prevencao_' => 'ssma-prevention',
124|            'admin_ssma_prevencao_' => 'ssma-prevention',
125|            'ssma_inspection_' => 'ssma-prevention',
126|            'admin_ssma_inspection_' => 'ssma-prevention',
127|            'ssma_abordagem_' => 'ssma-prevention',
128|            'ssma_plano_acao_' => 'ssma-action-plan',
129|            'ssma_action_plan_' => 'ssma-action-plan',
130|            'admin_ssma_action_create' => 'ssma-action-plan',

{"end_line": 25690, "file_path": "src/Controller/SsmaController.php", "start_line": 25640}

File: src/Controller/SsmaController.php (Total lines: 28130)
IS_TRUNCATED: false
LINE_RANGE: 25640-25690
25640|        if ($dataAbordagem > $hoje) {
25641|            return 'Data da abordagem não pode ser futura.';
25642|        }
25643|
25644|        $limiteMinimo = $hoje->modify('-' . self::SSMA_ABORDAGEM_JANELA_REGISTRO_DIAS . ' days');
25645|        if ($dataAbordagem < $limiteMinimo) {
25646|            return sprintf(
25647|                'Data da abordagem fora do prazo: só é possível registrar até %d dias após a data em que foi realizada (a partir de %s).',
25648|                self::SSMA_ABORDAGEM_JANELA_REGISTRO_DIAS,
25649|                $limiteMinimo->format('d/m/Y')
25650|            );
25651|        }
25652|
25653|        return null;
25654|    }
25655|
25656|    // =========================================================================
25657|    // EVENTOS SSMA (SSMAEvent tipado)
25658|    // =========================================================================
25659|
25660|    /**
25661|     * POST /manager/ssma/events
25662|     * Cria um novo evento SSMA tipado.
25663|     */
25664|    public function createEvent(Request $request): JsonResponse
25665|    {
25666|        /** @var \App\Entity\User|null $user */
25667|        $user    = $this->getUser();
25668|        $company = $user?->getCompany();
25669|        if (!$user || !$company) {
25670|            return new JsonResponse(['success' => false, 'message' => 'Não autenticado.'], 401);
25671|        }
25672|
25673|        $data = json_decode($request->getContent(), true) ?? [];
25674|        $data = $this->normalizeSsmaEventPayload($data, $company);
25675|        $data = $this->normalizeSsmaEventManagerInDetails($data, $company);
25676|        $data = $this->forceSsmaRosReporterForPlainMember($data, $company, $user);
25677|        $data = $this->applySsmaDescaracterPermissionGate($data, $company, $user);
25678|        $data = $this->ensureSsmaEventTitle($data);
25679|
25680|        $validator = new \App\Service\Ssma\SsmaEventValidator();
25681|        $errors    = $validator->validate($data, [
25682|            'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
25683|        ]);
25684|        if ($errors !== []) {
25685|            return new JsonResponse([
25686|                'success' => false,
25687|                'message' => implode(' ', $errors),
25688|                'errors'  => $errors,
25689|            ], 422);
25690|        }

{"end_line": 26020, "file_path": "src/Controller/SsmaController.php", "start_line": 25920}

File: src/Controller/SsmaController.php (Total lines: 28130)
IS_TRUNCATED: false
LINE_RANGE: 25920-26020
25920|            if ($wantsFinalize) {
25921|                $data['aprofundamento_complete'] = true;
25922|                $detailsOut['aprofundamento_complete'] = true;
25923|                $detailsOut['aprofundamento_status'] = 'finalized';
25924|            } else {
25925|                $data['aprofundamento_complete'] = false;
25926|                $detailsOut['aprofundamento_complete'] = false;
25927|                $detailsOut['aprofundamento_status'] = 'draft';
25928|            }
25929|            $data['details'] = $detailsOut;
25930|        }
25931|
25932|        // Valida apenas se type ou details estiverem presentes no payload (atualização parcial ok)
25933|        if (!empty($data['type']) || !empty($data['details'])) {
25934|            $validator = new \App\Service\Ssma\SsmaEventValidator();
25935|            $errors    = $validator->validate($data, [
25936|                'allowed_type_keys' => $this->ssmaOccurrenceTypeConfig->getAllowedTypeKeys($company),
25937|                'soft_aprofundamento' => $aprofundamentoOnly && !$wantsFinalize,
25938|            ]);
25939|            if ($errors !== []) {
25940|                return new JsonResponse(['success' => false, 'errors' => $errors], 422);
25941|            }
25942|        }
25943|
25944|        $teamScopeErr = $this->validateSsmaEventPayloadAgainstTeamScope($data, $company, $user);
25945|        if ($teamScopeErr !== null) {
25946|            return new JsonResponse(['success' => false, 'message' => $teamScopeErr], 403);
25947|        }
25948|
25949|        $service = new \App\Service\Ssma\SsmaEventService($this->entityManager, $this->ssmaOccurrenceTypeConfig);
25950|        $prevType         = $event->getType();
25951|        $prevStatus       = $event->getStatus();
25952|        $prevImmediateRisk = !empty($event->getDetails()['immediate_risk']);
25953|        $prevManagerId = (int) ($event->getDetails()['manager_id'] ?? 0);
25954|        $wasRejectedApproval = $this->ssmaOccurrenceApprovalService->getState($event)['status']
25955|            === \App\Service\Ssma\SsmaOccurrenceApprovalService::STATUS_REJECTED;
25956|        $editorMeta = $this->resolveSsmaEditorMeta($company, $user);
25957|        $event      = $service->updateFromPayload($event, $data, $user, $editorMeta);
25958|
25959|        if ($wasRejectedApproval) {
25960|            // Readequação: reenvia tanto na edição completa quanto ao finalizar só o aprofundamento.
25961|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, true);
25962|        } elseif ($wantsFinalize) {
25963|            $this->maybeSubmitOccurrenceForValidation($event, $company, $user, false);
25964|        }
25965|
25966|        $registeredByName = trim(($user->getFirstName() ?? '') . ' ' . ($user->getLastName() ?? ''));
25967|        if ($registeredByName === '') {
25968|            $registeredByName = $user->getEmail() ?? 'Sistema';
25969|        }
25970|        $automationContext = [
25971|            'registered_by_name' => $registeredByName,
25972|            'type_raw'           => $event->getType(),
25973|            'new_type'           => $event->getType(),
25974|        ];
25975|        $flashApproval = null;
25976|
25977|        try {
25978|            $this->ssmaAutomationService->triggerForEvent(
25979|                'ssma_on_occurrence_updated',
25980|                $event,
25981|                $company,
25982|                $automationContext
25983|            );
25984|            if ($prevStatus !== $event->getStatus()) {
25985|                $this->ssmaAutomationService->triggerForEvent(
25986|                    'ssma_on_status_change',
25987|                    $event,
25988|                    $company,
25989|                    array_merge($automationContext, ['old_status' => $prevStatus])
25990|                );
25991|            }
25992|            if ($prevType !== $event->getType()) {
25993|                $this->ssmaAutomationService->triggerForEvent(
25994|                    'ssma_on_occurrence_type_changed',
25995|                    $event,
25996|                    $company,
25997|                    array_merge($automationContext, [
25998|                        'old_type' => $prevType,
25999|                        'new_type' => $event->getType(),
26000|                    ])
26001|                );
26002|            }
26003|            $newImmediateRisk = !empty($event->getDetails()['immediate_risk']);
26004|            $newManagerId = (int) ($event->getDetails()['manager_id'] ?? 0);
26005|            // Dispara quando risco vira SIM, ou quando Relatado por é preenchido com risco já ativo.
26006|            if ($newImmediateRisk && (!$prevImmediateRisk || ($prevManagerId <= 0 && $newManagerId > 0))) {
26007|                $this->ssmaNotificationService->notifyImmediateRisk($event);
26008|            }
26009|            if ($newManagerId > 0 && $newManagerId !== $prevManagerId) {
26010|                $this->ssmaNotificationService->notifyOccurrenceResponsible($newManagerId, (int) $event->getId(), 'event', $user);
26011|            }
26012|
26013|            // P2: quando a ocorrência está pronta, tenta abrir aprovação na CC (não envia PDF).
26014|            // Idempotente: se já pending/sent, ou sem aprovador, maybeAutoRequestApproval só faz skip.
26015|            // Importante para ROS: já pode estar "ready" no create (sem aprovador) e precisar
26016|            // re-tentar no update depois que a automação ganha aprovador.
26017|            $eventPayload = $this->ssmaAutomationService->buildEventPayload($event, $company, $automationContext);
26018|            $nowReady = $this->ssmaAutomationService->passesFlashReportRequirements($eventPayload);
26019|            if ($nowReady) {
26020|                $flashApproval = $this->ssmaFlashReportService->maybeAutoRequestApproval($event, $user);

{"end_line": 5765, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 5720}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 5720-5765
5720|                var hidden = document.getElementById('ev_derived_criticality');
5721|                var critSel = document.getElementById('ev_criticality');
5722|                if (hidden) hidden.value = this.value || '';
5723|                if (critSel && this.value) critSel.value = this.value;
5724|                evPersistDraftSoon();
5725|            });
5726|        }
5727|        // Descaracterização: suspeita na 1ª etapa; caracterizado na caixinha (aprofundamento).
5728|        var suspectChk = document.getElementById('ev_descaracter_suspect');
5729|        if (suspectChk) {
5730|            suspectChk.addEventListener('change', function () {
5731|                evSyncDescaracterStageUi();
5732|                evSyncInjuredPersonDetailsHidden();
5733|                evPersistDraftSoon();
5734|            });
5735|        }
5736|        // Checkbox de suspeita por card (aprofundamento): mostra/oculta Sim/Não do próprio card.
5737|        document.addEventListener('change', function (e) {
5738|            if (!e.target || !e.target.classList.contains('ev-inj-suspect-chk')) return;
5739|            var card = e.target.closest('.ev-injured-person-box');
5740|            if (!card) return;
5741|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
5742|            if (yesNoWrap) yesNoWrap.classList.toggle('d-none', !e.target.checked);
5743|            // Atualiza o data-descaracter-suspect do card para serialização.
5744|            card.setAttribute('data-descaracter-suspect', e.target.checked ? '1' : '0');
5745|            // Espelha no campo global usado pelo payload (evIsDescaracterSuspectChecked).
5746|            var globalChk = document.getElementById('ev_descaracter_suspect');
5747|            if (globalChk) globalChk.checked = e.target.checked;
5748|            evSyncInjuredPersonDetailsHidden();
5749|            evPersistDraftSoon();
5750|        });
5751|        var contDone = document.getElementById('ev_containment_done');
5752|        if (contDone) {
5753|            contDone.addEventListener('change', function () {
5754|                evSyncContainmentTimeEnabled();
5755|                evPersistDraftSoon();
5756|            });
5757|        }
5758|        var form = document.getElementById('form-event-new');
5759|        if (form) {
5760|            form.addEventListener('change', evPersistDraftSoon);
5761|            form.addEventListener('input', evPersistDraftSoon);
5762|        }
5763|        document.addEventListener('ev:formLoaded', function () {
5764|            evSyncCriticalityField(evSelectedType());
5765|            evSyncDerivedSeverityFromConsequence();

{"end_line": 6010, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 5990}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 5990-6010
5990|            var primaryPotEl = primaryCardForVal ? primaryCardForVal.querySelector('.ev-inj-potential-consequence') : null;
5991|            var hadInj = evHadInjuryForValidation();
5992|            var semDano = ((primaryConsEl || {}).value || '') === 'SEM_DANO';
5993|            if (boxesWrap) {
5994|                boxesWrap.querySelectorAll('.ev-injured-person-box[data-person-id]').forEach(function (card) {
5995|                    var cons = card.querySelector('.ev-inj-consequence');
5996|                    var pot = card.querySelector('.ev-inj-potential-consequence');
5997|                    if (cons && !cons.value) mark(cons);
5998|                    if (pot && !pot.value) mark(pot);
5999|                });
6000|            }
6001|            if (!(document.getElementById('ev_barrier_type_ap') || {}).value) mark('#ev_barrier_type_ap');
6002|            if (hadInj && !semDano) {
6003|                var injCard = primaryCardForVal || evGetPrimaryInjuredCard();
6004|                var typeEl = injCard
6005|                    ? injCard.querySelector('.ev-inj-injury-type')
6006|                    : document.getElementById('ev_injury_type');
6007|                var sevEl = injCard
6008|                    ? injCard.querySelector('.ev-inj-injury-severity')
6009|                    : document.getElementById('ev_injury_severity');
6010|                if (typeEl && !typeEl.value) mark(typeEl);

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "descaracter-comment"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 6
2199|            descaracter_comment: (card.querySelector('.ev-inj-descaracter-comment') || {}).value || '',
2255|        var comm = card.querySelector('.ev-inj-descaracter-comment');
2596|        card.querySelectorAll('.ev-inj-attendance, .ev-inj-relato, .ev-inj-injury-type, .ev-inj-injury-severity, .ev-inj-injury-classification, .ev-inj-had-injury, .ev-inj-consequence, .ev-inj-potential-consequence, .ev-inj-descaracter-comment').forEach(function (el) {
2638|        card.querySelectorAll('.ev-inj-descaracter-comment').forEach(function (ta) {
6022|                    var comm = card.querySelector('.ev-inj-descaracter-comment');
7116|                ? String((primaryCard.querySelector('.ev-inj-descaracter-comment') || {}).value || '').trim()

{"end_line": 6060, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6005}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 6005-6060
6005|                    ? injCard.querySelector('.ev-inj-injury-type')
6006|                    : document.getElementById('ev_injury_type');
6007|                var sevEl = injCard
6008|                    ? injCard.querySelector('.ev-inj-injury-severity')
6009|                    : document.getElementById('ev_injury_severity');
6010|                if (typeEl && !typeEl.value) mark(typeEl);
6011|                if (sevEl && !sevEl.value) mark(sevEl);
6012|                var classEl = injCard ? injCard.querySelector('.ev-inj-injury-classification') : null;
6013|                if (classEl && !classEl.value) mark(classEl);
6014|            }
6015|            if (boxesWrap && evAprofundamentoOnlyMode) {
6016|                var descaracterInvalid = false;
6017|                var focusCard = null;
6018|                var focusEl = null;
6019|                boxesWrap.querySelectorAll('.ev-injured-person-box[data-person-id]').forEach(function (card) {
6020|                    var desc = card.getAttribute('data-descaracterizado') || '';
6021|                    var toggle = card.querySelector('.ev-inj-descaracter-toggle');
6022|                    var comm = card.querySelector('.ev-inj-descaracter-comment');
6023|                    if (toggle) toggle.classList.remove('is-invalid');
6024|                    if (desc === '0' || desc === '1') {
6025|                        if (comm && !String(comm.value || '').trim()) {
6026|                            mark(comm);
6027|                            descaracterInvalid = true;
6028|                            if (!focusCard) {
6029|                                focusCard = card;
6030|                                focusEl = comm;
6031|                            }
6032|                        }
6033|                    } else {
6034|                        if (toggle) {
6035|                            toggle.classList.add('is-invalid');
6036|                            if (MV) MV.markInvalid($(toggle));
6037|                        }
6038|                        if (comm) mark(comm);
6039|                        ok = false;
6040|                        descaracterInvalid = true;
6041|                        if (!focusCard) {
6042|                            focusCard = card;
6043|                            focusEl = toggle || comm || card;
6044|                        }
6045|                    }
6046|                });
6047|                if (descaracterInvalid) {
6048|                    window.__ssmaEvSkipGenericValidationToast = true;
6049|                    if (focusCard && typeof evExpandInjuredCard === 'function') {
6050|                        evExpandInjuredCard(focusCard);
6051|                    }
6052|                    window.setTimeout(function () {
6053|                        var target = focusEl
6054|                            || (focusCard && focusCard.querySelector('.ev-inj-descaracter'))
6055|                            || focusCard;
6056|                        if (target && typeof target.scrollIntoView === 'function') {
6057|                            try { target.scrollIntoView({ block: 'center', behavior: 'smooth' }); } catch (eScroll) {}
6058|                        }
6059|                    }, 80);
6060|                    if (typeof showToast === 'function') {

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "evAprofundamentoOnlyMode ="}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 4
1546|    var evAprofundamentoOnlyMode = false;
6131|        evAprofundamentoOnlyMode = false;
6525|            evAprofundamentoOnlyMode = true;
6564|        evAprofundamentoOnlyMode = false;

{"file_patterns": ["templates/ssma/occurrence/partials/_modal_event.html.twig"], "search_text": "evAprofundamentoOnlyMode"}

File: templates/ssma/occurrence/partials/_modal_event.html.twig
Match lines: 24
1546|    var evAprofundamentoOnlyMode = false;
2915|        var isDoctorAprof = !!evAprofundamentoOnlyMode;
2947|        if (!canSn && cur === '' && evAprofundamentoOnlyMode && hidden) {
3330|            draft.classList.toggle('d-none', !evAprofundamentoOnlyMode || evCurrentStep !== 'aprofundamento');
3332|        if (evAprofundamentoOnlyMode) {
3368|        if (evAprofundamentoOnlyMode) {
3376|            general.classList.toggle('is-readonly', !!evAprofundamentoOnlyMode);
3381|            if (evAprofundamentoOnlyMode) {
6015|            if (boxesWrap && evAprofundamentoOnlyMode) {
6131|        evAprofundamentoOnlyMode = false;
6525|            evAprofundamentoOnlyMode = true;
6533|            // Sincroniza a UI de descaracterização agora que evAprofundamentoOnlyMode=true.
6564|        evAprofundamentoOnlyMode = false;
6657|            if (evAprofundamentoOnlyMode) return;
6676|        if (evAprofundamentoOnlyMode && evIsAprofundamentoFinalized() && !EV_IS_ADMIN_APROFUNDAMENTO) {
6692|        var finalizeAprofundamento = !evAprofundamentoOnlyMode || !!evAprofundamentoFinalizeIntent;
6693|        if (evAprofundamentoOnlyMode) {
6699|        if (evCurrentStep === 'general' && !evAprofundamentoOnlyMode) {
6716|            if (!evAprofundamentoOnlyMode) {
6722|        var softAprofundamentoDraft = evAprofundamentoOnlyMode && !finalizeAprofundamento;
6959|        if (evCurrentStep === 'aprofundamento' && evAprofundamentoOnlyMode) {
7104|            if (!descFromCard && evAprofundamentoOnlyMode && !evCanDescharacterizeAccident()) {
7110|            if (descAnswered && evAprofundamentoOnlyMode) {
7121|            if (!evAprofundamentoOnlyMode) {

{"end_line": 6580, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6500}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 6500-6580
6500|        evEvidenceRenderList();
6501|
6502|        // ── Labels do modal ─────────────────────────────────
6503|        var btnLbl = document.getElementById('ev-btn-label');
6504|        var modalTitle = document.getElementById('ev-modal-title');
6505|        if (modalTitle) modalTitle.textContent = 'Editar ocorrência';
6506|        evApplyAuraTitleStatusVisibility('edit');
6507|        evSetStep('general');
6508|        $('#ev_manager').trigger('change');
6509|    };
6510|
6511|    /**
6512|     * Abre o offcanvas no aprofundamento (especialista).
6513|     * Admin/gestor administrador edita tudo desde informações gerais — não trava o 1º passo.
6514|     */
6515|    window.EvModal.openAprofundamento = function (data) {
6516|        data = data || {};
6517|        if (EV_IS_ADMIN_APROFUNDAMENTO && window.OccurrenceModal && typeof window.OccurrenceModal.openEdit === 'function') {
6518|            window.OccurrenceModal.openEdit(data);
6519|            return;
6520|        }
6521|        var EV_GET_URL = '{{ path('ssma_event_get', {id: '__EV_ID__'})|e('js') }}';
6522|
6523|        function openWith(full) {
6524|            window.EvModal.populateForEdit(full || data);
6525|            evAprofundamentoOnlyMode = true;
6526|            evAprofundamentoFinalizeIntent = true;
6527|            var modalTitle = document.getElementById('ev-modal-title');
6528|            if (modalTitle) modalTitle.textContent = 'Aprofundamento técnico';
6529|            if (typeof evEnsureCorrectiveActionsSeed === 'function') {
6530|                evEnsureCorrectiveActionsSeed();
6531|            }
6532|            evSetStep('aprofundamento');
6533|            // Sincroniza a UI de descaracterização agora que evAprofundamentoOnlyMode=true.
6534|            // Isso também pré-seleciona "Sim" quando o profissional não pode descaracterizar.
6535|            evSyncDescaracterUi();
6536|            if (typeof window.openOffcanvasmodalEventNew === 'function') {
6537|                window.openOffcanvasmodalEventNew();
6538|            }
6539|        }
6540|
6541|        var eventId = data.id;
6542|        if (!eventId || String(eventId) === 'undefined') {
6543|            openWith(data);
6544|            return;
6545|        }
6546|        fetch(EV_GET_URL.replace('__EV_ID__', encodeURIComponent(String(eventId))), {
6547|            method: 'GET',
6548|            credentials: 'same-origin',
6549|            headers: { 'X-Requested-With': 'XMLHttpRequest' }
6550|        })
6551|            .then(function (res) { return res.json(); })
6552|            .then(function (result) {
6553|                var fullData = (result && result.success && result.event) ? result.event : data;
6554|                openWith(fullData);
6555|            })
6556|            .catch(function () {
6557|                openWith(data);
6558|            });
6559|    };
6560|
6561|    window.EvModal.openCreate = function (opts) {
6562|        opts = opts || {};
6563|        window.__ssmaEvCreateMode = opts.createMode || null;
6564|        evAprofundamentoOnlyMode = false;
6565|        evAprofundamentoFinalizeIntent = true;
6566|        evAprofundamentoFinalized = false;
6567|        // Nova ocorrência sempre começa limpa (não restaura draft de preenchimento anterior).
6568|        var modeEl = document.getElementById('ev_form_mode');
6569|        var idEl = document.getElementById('ev_id');
6570|        if (modeEl) {
6571|            modeEl.value = 'create';
6572|        }
6573|        if (idEl) {
6574|            idEl.value = '';
6575|        }
6576|        var modalTitle = document.getElementById('ev-modal-title');
6577|        if (modalTitle) {
6578|            if (window.__ssmaEvCreateMode === 'ros') {
6579|                modalTitle.textContent = 'Novo ROS';
6580|            } else if (window.__ssmaEvCreateMode === 'event') {

{"end_line": 6495, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6450}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 6450-6495
6450|        }
6451|        evFilterInjuredPersonSelect();
6452|        evRenderInjuredPersonBoxes();
6453|
6454|        if (type === 'ACIDENTE_PESSOAL') {
6455|            // Re-sync depois das tags + details: garante caixinhas médicas mesmo se
6456|            // setTagSelectValues rodou antes do hidden ou membro não estava no select.
6457|            syncBodyRegionVisibility();
6458|            evSyncInjuryFieldsByConsequence();
6459|            if (typeof window.evSyncLtiAvailability === 'function') { window.evSyncLtiAvailability(); }
6460|            evSyncInjuredCardsFromInvolved();
6461|            // Se sync ainda não viu pessoas nas tags, remonta a partir dos details salvos.
6462|            var wrapAfter = document.getElementById('ev_injured_person_boxes');
6463|            var hasMedCards = !!(wrapAfter && wrapAfter.querySelector('.ev-injured-person-box[data-person-id]'));
6464|            if (!hasMedCards && Object.keys(evGetInjuredDetailsObj() || {}).length) {
6465|                evRenderInjuredPersonBoxes();
6466|            }
6467|            if (evCurrentStep === 'aprofundamento' && typeof evEnsurePrimaryInjuredCardExpanded === 'function') {
6468|                evEnsurePrimaryInjuredCardExpanded();
6469|            }
6470|        }
6471|
6472|        // ── Descaracterização ────────────────────────────────
6473|        // Restaura suspeita por card a partir do det ou do injured_person_details do card primário.
6474|        var suspectRaw = det.descaracter_suspect != null ? det.descaracter_suspect : data.descaracter_suspect;
6475|        var suspectOn = suspectRaw === true || suspectRaw === 1 || suspectRaw === '1';
6476|        evSetChk('ev_descaracter_suspect', suspectOn);
6477|        // Propaga suspeita para cada card (checkbox editável no aprofundamento).
6478|        document.querySelectorAll('.ev-injured-person-box').forEach(function (card) {
6479|            var chk = card.querySelector('.ev-inj-suspect-chk');
6480|            if (chk) chk.checked = suspectOn;
6481|            card.setAttribute('data-descaracter-suspect', suspectOn ? '1' : '0');
6482|            var yesNoWrap = card.querySelector('.ev-inj-descaracter-yesno-wrap');
6483|            if (yesNoWrap) yesNoWrap.classList.toggle('d-none', !suspectOn);
6484|        });
6485|        var descVal = det.descaracterizado != null ? det.descaracterizado : data.descaracterizado;
6486|        if (descVal === true || descVal === 1) descVal = '1';
6487|        if (descVal === false || descVal === 0) descVal = '0';
6488|        evSetVal('ev_descaracterizado', descVal == null ? '' : String(descVal));
6489|        evSyncDescaracterUi();
6490|
6491|        // ── Evidências já anexadas ──────────────────────────
6492|        var evidences = Array.isArray(det.evidences) ? det.evidences : (Array.isArray(data.evidences) ? data.evidences : []);
6493|        evEvidences = evidences.map(function (e) {
6494|            return {
6495|                name: e.name || e.filename || '',

{"end_line": 6140, "file_path": "templates/ssma/occurrence/partials/_modal_event.html.twig", "start_line": 6060}

File: templates/ssma/occurrence/partials/_modal_event.html.twig (Total lines: 7707)
IS_TRUNCATED: false
LINE_RANGE: 6060-6140
6060|                    if (typeof showToast === 'function') {
6061|                        showToast(
6062|                            'No card do acidentado (acima da Ação), responda “Caracterizado como acidente?” e preencha o comentário.',
6063|                            'Aprofundamento',
6064|                            'fas fa-exclamation-circle',
6065|                            'bg-warning'
6066|                        );
6067|                    }
6068|                }
6069|            }
6070|        } else if (type === 'ACIDENTE_MATERIAL') {
6071|            if (!(document.getElementById('ev_asset_type') || {}).value) mark('#ev_asset_type');
6072|            if (!(document.getElementById('ev_consequence') || {}).value) mark('#ev_consequence');
6073|            if (!(document.getElementById('ev_potential_consequence') || {}).value) mark('#ev_potential_consequence');
6074|            if (!(document.getElementById('ev_barrier_type_am') || {}).value) mark('#ev_barrier_type_am');
6075|        } else if (type === 'ACIDENTE_AMBIENTAL') {
6076|            if (!(document.getElementById('ev_environmental_medium') || {}).value) {
6077|                mark('#ev_environmental_medium');
6078|            }
6079|            if (!(document.getElementById('ev_pollutant_type') || {}).value) {
6080|                mark('#ev_pollutant_type');
6081|            }
6082|            if (!(document.getElementById('ev_consequence') || {}).value) mark('#ev_consequence');
6083|            if (!(document.getElementById('ev_potential_consequence') || {}).value) mark('#ev_potential_consequence');
6084|            if (!(document.getElementById('ev_barrier_type_aa') || {}).value) mark('#ev_barrier_type_aa');
6085|        }
6086|        return ok;
6087|    }
6088|
6089|    /* ── Helpers internos para populateForEdit ────────────── */
6090|    function evSetVal(id, val) {
6091|        var el = document.getElementById(id);
6092|        if (el && val !== undefined && val !== null && val !== '') el.value = String(val);
6093|        if (id === 'ev_person_id' || id === 'ev_person_id_qa') {
6094|            if (typeof window.setCustomSelectValue === 'function' && val !== undefined && val !== null && val !== '') {
6095|                window.setCustomSelectValue(id, String(val));
6096|            } else {
6097|                evSyncCustomSelectVisual(id, false);
6098|            }
6099|        }
6100|    }
6101|    /** Garante option legada no select (meio/poluente/barreira antigos) ao editar. */
6102|    function evEnsureSelectOption(selectId, value) {
6103|        if (value === undefined || value === null || value === '') return;
6104|        var sel = document.getElementById(selectId);
6105|        if (!sel) return;
6106|        var v = String(value);
6107|        for (var i = 0; i < sel.options.length; i++) {
6108|            if (sel.options[i].value === v) return;
6109|        }
6110|        var opt = document.createElement('option');
6111|        opt.value = v;
6112|        opt.textContent = v;
6113|        sel.appendChild(opt);
6114|    }
6115|    function evSetChk(id, val) {
6116|        var el = document.getElementById(id);
6117|        if (el) el.checked = !!val;
6118|    }
6119|    function evParseCsvIds(val) {
6120|        if (Array.isArray(val)) return val.map(Number).filter(Boolean);
6121|        if (!val) return [];
6122|        return String(val).split(',').map(function (s) { return parseInt(s.trim(), 10); }).filter(Boolean);
6123|    }
6124|
6125|    /* ── API pública para abertura em modo edição ─────────── */
6126|    window.EvModal = window.EvModal || {};
6127|    window.EvModal.populateForEdit = function (data) {
6128|        var $ = window.jQuery;
6129|        if (!$) return;
6130|        window.__ssmaEvCreateMode = null;
6131|        evAprofundamentoOnlyMode = false;
6132|        evAprofundamentoFinalizeIntent = true;
6133|        var detEarly = (data && data.details && typeof data.details === 'object') ? data.details : (data || {});
6134|        var aprofStatus = String(detEarly.aprofundamento_status || (data && data.aprofundamento_status) || '').toLowerCase();
6135|        evAprofundamentoFinalized = aprofStatus === 'finalized'
6136|            || !!(detEarly.aprofundamento_complete || (data && data.aprofundamento_complete));
6137|        var typeWrap = document.getElementById('ev_type_wrap');
6138|        if (typeWrap) typeWrap.classList.remove('d-none');
6139|        var shared = window.SsmaShared || {};
6140|        var tc     = window.EvModal._tagConfigs;

{"file_patterns": ["tests/Unit/Product/Ssma/SsmaEventValidatorTest.php"], "search_text": "descaracter"}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php
Match lines: 15
41|                'descaracterizado'      => '0',
42|                'descaracter_comment'   => 'Acidente confirmado.',
145|                'descaracterizado'      => '0',
146|                'descaracter_comment'   => 'Acidente confirmado.',
184|                'descaracterizado'      => '0',
185|                'descaracter_comment'   => 'Acidente confirmado.',
226|                'descaracterizado'      => '0',
227|                'descaracter_comment'   => 'Sem descaracterização.',
252|                'descaracterizado'      => '0',
253|                'descaracter_comment'   => 'Sem descaracterização.',
448|        self::assertStringNotContainsString('details.descaracterizado', $joined);
501|                'descaracterizado'      => '',
691|                'descaracterizado'      => '0',
692|                'descaracter_comment'   => 'Acidente confirmado.',
819|        self::assertStringNotContainsString('details.descaracterizado:', $joined);

{"end_line": 989, "file_path": "tests/Unit/Product/Ssma/SsmaEventValidatorTest.php", "start_line": 920}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php (Total lines: 989)
IS_TRUNCATED: false
LINE_RANGE: 920-989
920|    {
921|        $validator = new SsmaEventValidator();
922|
923|        $errors = $validator->validate([
924|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
925|            'origin'      => 'MANUAL',
926|            'datetime'    => '2026-04-07T10:30:00',
927|            'location'    => 'Linha 2',
928|            'description' => 'Sem pessoa',
929|            'details'     => [
930|                'activity' => 'Operação',
931|                'approach' => 'CORRECAO_OPERACIONAL',
932|            ],
933|        ]);
934|
935|        self::assertNotEmpty($errors);
936|        $joined = implode(' | ', $errors);
937|        self::assertStringNotContainsString('details.person_id', $joined);
938|        self::assertTrue(
939|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'Pessoa envolvida é obrigatória')),
940|            'Esperava mensagem humana de pessoa. Erros: ' . $joined
941|        );
942|    }
943|
944|    public function testAcidentePessoalEtapa1ComPessoaEnvolvidaNaoExigeAprofundamento(): void
945|    {
946|        $validator = new SsmaEventValidator();
947|
948|        $errors = $validator->validate([
949|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
950|            'origin'      => 'MANUAL',
951|            'datetime'    => '2026-04-07T10:30:00',
952|            'location'    => 'Linha 2',
953|            'description' => 'Com pessoa na etapa 1',
954|            'details'     => [
955|                'activity'    => 'Operação',
956|                'approach'    => 'CORRECAO_OPERACIONAL',
957|                'people_ids'  => '101,102',
958|                'person_id'   => '101',
959|                'person_type' => 'COLABORADOR',
960|            ],
961|        ]);
962|
963|        self::assertEmpty($errors, 'Etapa 1 com person_id/person_type deve passar: ' . implode(' | ', $errors));
964|    }
965|
966|    public function testAcidentePessoalEtapa1AceitaPeopleIdsSemPersonId(): void
967|    {
968|        $validator = new SsmaEventValidator();
969|
970|        $errors = $validator->validate([
971|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
972|            'origin'      => 'MANUAL',
973|            'datetime'    => '2026-04-07T10:30:00',
974|            'location'    => 'Linha 2',
975|            'description' => 'Só tags de pessoas envolvidas',
976|            'details'     => [
977|                'activity'   => 'Operação',
978|                'approach'   => 'CORRECAO_OPERACIONAL',
979|                'people_ids' => '101,102',
980|            ],
981|        ]);
982|
983|        self::assertEmpty(
984|            $errors,
985|            'Etapa 1 com people_ids deve passar sem person_id explícito: ' . implode(' | ', $errors)
986|        );
987|    }
988|}
989|

{"file_patterns": ["src/EventListener/GlobalPermissionListener.php"], "search_text": "ssmaActionPlanMutatePermissionService"}

File: src/EventListener/GlobalPermissionListener.php
Match lines: 6
17|use App\Service\Ssma\SsmaActionPlanMutatePermissionService;
43|    private SsmaActionPlanMutatePermissionService $ssmaActionPlanMutatePermissionService;
104|        SsmaActionPlanMutatePermissionService $ssmaActionPlanMutatePermissionService,
118|        $this->ssmaActionPlanMutatePermissionService = $ssmaActionPlanMutatePermissionService;
504|            && $this->ssmaActionPlanMutatePermissionService->isMutationRoute((string) $route)
505|            && $this->ssmaActionPlanMutatePermissionService->canMutateForRoute(

{"end_line": 600, "file_path": "src/EventListener/GlobalPermissionListener.php", "start_line": 470}

File: src/EventListener/GlobalPermissionListener.php (Total lines: 1919)
IS_TRUNCATED: false
LINE_RANGE: 470-600
470|                    }
471|                }
472|            }
473|        }
474|
475|        $refusalRightMutate = false;
476|        if (
477|            $requiredProduct === 'ssma-occurrences'
478|            && $companyMember
479|            && $this->ssmaRefusalRightMutatePermissionService->isMutationRoute((string) $route)
480|            && $this->ssmaRefusalRightMutatePermissionService->canMutateForRoute(
481|                $user,
482|                $company,
483|                $companyMember,
484|                (string) $route,
485|                $request
486|            )
487|        ) {
488|            $refusalRightMutate = true;
489|            $occurrencesProduct = $this->entityManager->getRepository(Product::class)
490|                ->findOneBy(['slug' => 'ssma-occurrences']);
491|            if ($occurrencesProduct) {
492|                $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
493|                if ($occurrencesTag && ($occurrencesTag->getCanView() ?? false)) {
494|                    if (!$permissionTag || !($permissionTag->getCanView() ?? false)) {
495|                        $permissionTag = $occurrencesTag;
496|                    }
497|                }
498|            }
499|        }
500|
501|        $actionPlanMutate = false;
502|        if (
503|            $companyMember
504|            && $this->ssmaActionPlanMutatePermissionService->isMutationRoute((string) $route)
505|            && $this->ssmaActionPlanMutatePermissionService->canMutateForRoute(
506|                $user,
507|                $company,
508|                $companyMember,
509|                (string) $route,
510|                $request
511|            )
512|        ) {
513|            $actionPlanMutate = true;
514|            $occurrencesProduct = $this->entityManager->getRepository(Product::class)
515|                ->findOneBy(['slug' => 'ssma-occurrences']);
516|            if ($occurrencesProduct) {
517|                $occurrencesTag = $this->permissionService->getPermissionTag($companyMember, $occurrencesProduct);
518|                if ($occurrencesTag && ($occurrencesTag->getCanView() ?? false)) {
519|                    if (!$permissionTag || !($permissionTag->getCanView() ?? false)) {
520|                        $permissionTag = $occurrencesTag;
521|                    }
522|                }
523|            }
524|        }
525|
526|        if (!$permissionTag) {
527|            $ssmaStakeholderReadWithoutTag = is_string($requiredProduct)
528|                && $this->isSsmaPermissionProduct($requiredProduct)
529|                && $companyMember
530|                && $this->isSsmaStakeholderOccurrenceRoute((string) $route)
531|                && $this->ssmaOccurrenceStakeholderAccessChecker->hasStakeholderLink($companyMember, $company);
532|            if ($ssmaStakeholderReadWithoutTag || $actionPlanMutate) {
533|                $this->setSsmaTechnicalOccurrenceAttributes(
534|                    $request,
535|                    null,
536|                    $companyMember,
537|                    $user,
538|                    $company,
539|                    $product
540|                );
541|                return null;
542|            }
543|
544|            $this->addFlashErrorOnce('Usuário não possui permissão para acessar este módulo.');
545|            return new RedirectResponse($this->urlGenerator->generate('app_home'));
546|        }
547|
548|        if (
549|            $this->isSsmaPermissionProduct($requiredProduct)
550|            && ($permissionTag->getCanView() ?? false) === false
551|            && $this->isSsmaTechnicalOccurrenceRoute((string) $route)
552|            && $this->hasSsmaTechnicalOccurrenceAccess($companyMember, $company)
553|        ) {
554|            $this->setSsmaTechnicalOccurrenceAttributes($request, $permissionTag, $companyMember, $user, $company, $product);
555|            return null;
556|        }
557|
558|        // Membro com canView=false no SSMA, mas vinculado a ocorrência/evento (pessoa envolvida, responsável, etc.):
559|        // libera só rotas de leitura da área de ocorrências — a listagem/detalhe já filtra dados no controller.
560|        if (
561|            $this->isSsmaPermissionProduct($requiredProduct)
562|            && ($permissionTag->getCanView() ?? false) === false
563|            && $this->isSsmaStakeholderOccurrenceRoute((string) $route)
564|            && $companyMember
565|            && $this->ssmaOccurrenceStakeholderAccessChecker->hasStakeholderLink($companyMember, $company)
566|        ) {
567|            $this->setSsmaTechnicalOccurrenceAttributes($request, $permissionTag, $companyMember, $user, $company, $product);
568|            return null;
569|        }
570|
571|        // Membro com PermissionTagByMember explícito no produto SSMA (gestor atribuiu via "Editar Tags")
572|        // mas tag com can_view=false (ex.: "Membro"): libera acesso de leitura restrita para a maioria
573|        // dos subprodutos.
574|        // EXCEÇÃO: ssma-cause-tree e ssma-authorization exigem permissão real de gestão — a atribuição
575|        // automática via cloneSsmaParentPermissions não concede acesso a esses produtos restritos.
576|        // cloneSsmaParentPermissions() clona PTBMs do pai para todos os subprodutos, inclusive ssma-cause-tree,
577|        // fazendo $hadExplicitSsmaProductAssignment=true para qualquer Membro com ssma-occurrences — sem esta
578|        // exclusão, todo membro veria a Árvore de Causas.
579|        $ssmaStrictAccessProducts = ['ssma-authorization', 'ssma-badge', 'ssma-cause-tree'];
580|        if (
581|            $this->isSsmaPermissionProduct($requiredProduct)
582|            && ($permissionTag->getCanView() ?? false) === false
583|            && $hadExplicitSsmaProductAssignment
584|            && !in_array($requiredProduct, $ssmaStrictAccessProducts, true)
585|        ) {
586|            $this->setSsmaTechnicalOccurrenceAttributes($request, $permissionTag, $companyMember, $user, $company, $product);
587|            return null;
588|        }
589|
590|        if (
591|            $this->isSsmaPermissionProduct($requiredProduct)
592|            && ($permissionTag->getCanView() ?? false) === false
593|            && $this->canAccessMappedRouteWithRestrictedView((string) $route)
594|        ) {
595|            $this->setSsmaTechnicalOccurrenceAttributes($request, $permissionTag, $companyMember, $user, $company, $product);
596|            return null;
597|        }
598|
599|        // Membro da matriz de criação de ocorrências (SsmaOccurrenceCreatePermission):
600|        // tem permissão explícita para criar tipos de ocorrência, mas tag SSMA sem can_create.

{"end_line": 260, "file_path": "tests/Unit/Product/Ssma/SsmaEventValidatorTest.php", "start_line": 1}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php (Total lines: 989)
IS_TRUNCATED: false
LINE_RANGE: 1-260
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\Ssma;
6|
7|use App\Enum\Ssma\EventTypeEnum;
8|use App\Enum\Ssma\RosInvolvementTypeEnum;
9|use App\Service\Ssma\SsmaEventValidator;
10|
11|final class SsmaEventValidatorTest extends SsmaTestCase
12|{
13|    public function testValidAcidentePessoalPayloadPassesValidation(): void
14|    {
15|        $validator = new SsmaEventValidator();
16|
17|        $errors = $validator->validate([
18|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
19|            'origin'      => 'MANUAL',
20|            'datetime'    => '2026-04-07T10:30:00',
21|            'location'    => 'Linha 2',
22|            'description' => 'Teste',
23|            'nature'      => 'CORTE',
24|            'agent'       => 'FERRAMENTA',
25|            'consequence' => 'LESAO_LEVE',
26|            'impacts'     => ['PESSOA'],
27|            'details'     => [
28|                'activity'              => 'Operação de corte',
29|                'approach'              => 'TREINAMENTO',
30|                'strategic_nature'      => 'SEGURANCA',
31|                'barrier_type'          => 'FISICA',
32|                'potential_consequence' => 'LESAO_MODERADA',
33|                'potential_severity'    => 'MODERADO',
34|                'person_id'             => '101',
35|                'person_type'           => 'COLABORADOR',
36|                'had_injury'            => true,
37|                'injury_type'           => 'CORTE',
38|                'injury_classification' => 'FAC',
39|                'work_leave'            => 'NAO',
40|                'injury_severity'       => 'LEVE',
41|                'descaracterizado'      => '0',
42|                'descaracter_comment'   => 'Acidente confirmado.',
43|                'body_parts'            => [
44|                    ['region' => 'MAO', 'side' => 'DIREITA', 'injury_type' => 'CORTE'],
45|                ],
46|            ],
47|        ]);
48|
49|        self::assertSame([], $errors);
50|    }
51|
52|    public function testInvalidHandFingerFailsValidation(): void
53|    {
54|        $validator = new SsmaEventValidator();
55|
56|        $errors = $validator->validate([
57|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
58|            'origin'      => 'MANUAL',
59|            'datetime'    => '2026-04-07T10:30:00',
60|            'location'    => 'Linha 2',
61|            'description' => 'Teste',
62|            'nature'      => 'CORTE',
63|            'agent'       => 'FERRAMENTA',
64|            'consequence' => 'LESAO_LEVE',
65|            'impacts'     => ['PESSOA'],
66|            'details'     => [
67|                'activity'              => 'Operação',
68|                'approach'              => 'TREINAMENTO',
69|                'strategic_nature'      => 'SEGURANCA',
70|                'barrier_type'          => 'FISICA',
71|                'potential_consequence' => 'LESAO_MODERADA',
72|                'potential_severity'    => 'MODERADO',
73|                'person_id'             => '101',
74|                'person_type'           => 'COLABORADOR',
75|                'had_injury'            => true,
76|                'injury_type'           => 'CORTE',
77|                'injury_severity'       => 'LEVE',
78|                'hand_finger'           => 'INVALIDO',
79|                'body_parts'            => [
80|                    ['region' => 'MAO'],
81|                ],
82|            ],
83|        ]);
84|
85|        self::assertNotEmpty($errors);
86|    }
87|
88|    public function testMissingRequiredFieldsReturnErrors(): void
89|    {
90|        $validator = new SsmaEventValidator();
91|
92|        $errors = $validator->validate([
93|            'type'   => EventTypeEnum::ACIDENTE_PESSOAL,
94|            'origin' => 'MANUAL',
95|        ]);
96|
97|        self::assertNotEmpty($errors);
98|    }
99|
100|    public function testAprofundamentoPendingFlagsIncompleteRos(): void
101|    {
102|        $validator = new SsmaEventValidator();
103|        $base = [
104|            'type'        => EventTypeEnum::ROS,
105|            'datetime'    => '2026-04-07T10:30:00',
106|            'location'    => 'Patio',
107|            'description' => 'Observacao',
108|            'details'     => [
109|                'activity' => 'Inspeção de rotina',
110|            ],
111|        ];
112|
113|        // Create soft-passa; filtro de aprofundamento marca pendência nos campos tipados ROS.
114|        self::assertSame([], $validator->validate($base));
115|        self::assertNotEmpty($validator->aprofundamentoPendingErrors($base));
116|    }
117|
118|    public function testAprofundamentoPendingClearWhenAcidenteComplete(): void
119|    {
120|        $validator = new SsmaEventValidator();
121|        $payload = [
122|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
123|            'origin'      => 'MANUAL',
124|            'datetime'    => '2026-04-07T10:30:00',
125|            'location'    => 'Linha 2',
126|            'description' => 'Teste',
127|            'nature'      => 'CORTE',
128|            'agent'       => 'FERRAMENTA',
129|            'consequence' => 'LESAO_LEVE',
130|            'impacts'     => ['PESSOA'],
131|            'details'     => [
132|                'activity'              => 'Operação de corte',
133|                'approach'              => 'TREINAMENTO',
134|                'strategic_nature'      => 'SEGURANCA',
135|                'barrier_type'          => 'FISICA',
136|                'potential_consequence' => 'LESAO_MODERADA',
137|                'potential_severity'    => 'MODERADO',
138|                'person_id'             => '101',
139|                'person_type'           => 'COLABORADOR',
140|                'had_injury'            => true,
141|                'injury_type'           => 'CORTE',
142|                'injury_classification' => 'FAC',
143|                'work_leave'            => 'NAO',
144|                'injury_severity'       => 'LEVE',
145|                'descaracterizado'      => '0',
146|                'descaracter_comment'   => 'Acidente confirmado.',
147|                'body_parts'            => [
148|                    ['region' => 'MAO', 'side' => 'DIREITA', 'injury_type' => 'CORTE'],
149|                ],
150|            ],
151|        ];
152|
153|        self::assertSame([], $validator->aprofundamentoPendingErrors($payload));
154|    }
155|
156|    public function testPotentialConsequenceLowerThanRealIsRejected(): void
157|    {
158|        $validator = new SsmaEventValidator();
159|
160|        $errors = $validator->validate([
161|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
162|            'origin'      => 'MANUAL',
163|            'datetime'    => '2026-04-07T10:30:00',
164|            'location'    => 'Linha 2',
165|            'description' => 'Teste',
166|            'nature'      => 'CORTE',
167|            'agent'       => 'FERRAMENTA',
168|            'consequence' => 'LESAO_LEVE',
169|            'impacts'     => ['PESSOA'],
170|            'details'     => [
171|                'activity'              => 'Operação de corte',
172|                'approach'              => 'TREINAMENTO',
173|                'strategic_nature'      => 'SEGURANCA',
174|                'barrier_type'          => 'FISICA',
175|                'potential_consequence' => 'SEM_DANO',
176|                'potential_severity'    => 'LEVE',
177|                'person_id'             => '101',
178|                'person_type'           => 'COLABORADOR',
179|                'had_injury'            => true,
180|                'injury_type'           => 'CORTE',
181|                'injury_classification' => 'FAC',
182|                'work_leave'            => 'NAO',
183|                'injury_severity'       => 'LEVE',
184|                'descaracterizado'      => '0',
185|                'descaracter_comment'   => 'Acidente confirmado.',
186|                'body_parts'            => [
187|                    ['region' => 'MAO', 'side' => 'DIREITA', 'injury_type' => 'CORTE'],
188|                ],
189|            ],
190|        ]);
191|
192|        self::assertNotEmpty($errors);
193|        self::assertTrue(
194|            (bool) array_filter(
195|                $errors,
196|                static fn (string $e): bool => str_contains($e, 'potencial deve ser maior ou igual')
197|            )
198|        );
199|    }
200|
201|    public function testSemDanoDoesNotRequireInjuryTypeEvenIfHadInjuryLegacyTrue(): void
202|    {
203|        $validator = new SsmaEventValidator();
204|
205|        $errors = $validator->validate([
206|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
207|            'origin'      => 'MANUAL',
208|            'datetime'    => '2026-04-07T10:30:00',
209|            'location'    => 'Linha 2',
210|            'description' => 'Teste Sem dano',
211|            'nature'      => 'CORTE',
212|            'agent'       => 'FERRAMENTA',
213|            'consequence' => 'SEM_DANO',
214|            'impacts'     => ['PESSOA'],
215|            'details'     => [
216|                'activity'              => 'Operação',
217|                'approach'              => 'TREINAMENTO',
218|                'strategic_nature'      => 'SEGURANCA',
219|                'barrier_type'          => 'ADMINISTRATIVA',
220|                'potential_consequence' => 'LESAO_GRAVE',
221|                'potential_severity'    => 'LEVE',
222|                'person_id'             => '101',
223|                'person_type'           => 'COLABORADOR',
224|                // Legado / UI inconsistente: checkbox marcado sem tipo/severidade
225|                'had_injury'            => 1,
226|                'descaracterizado'      => '0',
227|                'descaracter_comment'   => 'Sem descaracterização.',
228|            ],
229|        ]);
230|
231|        self::assertSame([], $errors);
232|        self::assertSame([], $validator->aprofundamentoPendingErrors([
233|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
234|            'origin'      => 'MANUAL',
235|            'datetime'    => '2026-04-07T10:30:00',
236|            'location'    => 'Linha 2',
237|            'description' => 'Teste Sem dano',
238|            'nature'      => 'CORTE',
239|            'agent'       => 'FERRAMENTA',
240|            'consequence' => 'SEM_DANO',
241|            'impacts'     => ['PESSOA'],
242|            'details'     => [
243|                'activity'              => 'Operação',
244|                'approach'              => 'TREINAMENTO',
245|                'strategic_nature'      => 'SEGURANCA',
246|                'barrier_type'          => 'ADMINISTRATIVA',
247|                'potential_consequence' => 'LESAO_GRAVE',
248|                'potential_severity'    => 'LEVE',
249|                'person_id'             => '101',
250|                'person_type'           => 'COLABORADOR',
251|                'had_injury'            => 1,
252|                'descaracterizado'      => '0',
253|                'descaracter_comment'   => 'Sem descaracterização.',
254|            ],
255|        ]));
256|    }
257|
258|    public function testHadInjuryWithoutTypeStillFailsWhenConsequenceIsNotSemDano(): void
259|    {
260|        $validator = new SsmaEventValidator();

{"file_patterns": ["src/EventListener/GlobalPermissionListener.php"], "search_text": "ssma-action-plan|ssma_plano_acao|isSsma.*ActionPlan", "use_perl_regexp": true}

File: src/EventListener/GlobalPermissionListener.php
Match lines: 8
128|            'ssma_plano_acao_' => 'ssma-action-plan',
129|            'ssma_action_plan_' => 'ssma-action-plan',
130|            'admin_ssma_action_create' => 'ssma-action-plan',
131|            'admin_ssma_action_plan_' => 'ssma-action-plan',
1116|            'ssma_plano_acao_panel_filter',
1565|            'ssma_plano_acao_index',
1566|            'ssma_plano_acao_painel',
1567|            'ssma_plano_acao_panel_filter',

{"file_patterns": ["tests/Unit/Product/Ssma/SsmaEventValidatorTest.php"], "search_text": "aprofundamento"}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php
Match lines: 45
100|    public function testAprofundamentoPendingFlagsIncompleteRos(): void
113|        // Create soft-passa; filtro de aprofundamento marca pendência nos campos tipados ROS.
115|        self::assertNotEmpty($validator->aprofundamentoPendingErrors($base));
118|    public function testAprofundamentoPendingClearWhenAcidenteComplete(): void
153|        self::assertSame([], $validator->aprofundamentoPendingErrors($payload));
232|        self::assertSame([], $validator->aprofundamentoPendingErrors([
296|    public function testValidRosAprofundamentoPayloadPassesValidation(): void
404|    public function testAcidentePessoalEtapa1SemAprofundamentoPassaValidacao(): void
422|        self::assertSame([], $errors, 'Etapa 1 não deve exigir campos do Aprofundamento. Erros: ' . implode(' | ', $errors));
425|    public function testAcidentePessoalAprofundamentoCompleteExigeCamposTecnicosComMensagemHumana(): void
435|            'aprofundamento_complete' => true,
456|            'Esperava mensagens humanas do Aprofundamento. Erros: ' . $joined
460|    public function testAcidentePessoalAprofundamentoPendingAindaExigeCampos(): void
464|        $errors = $validator->aprofundamentoPendingErrors([
484|        // Simula payload do front na 1ª etapa com strings vazias (não dispara aprofundamento).
508|    public function testAcidenteMaterialEtapa1SemAprofundamentoPassaValidacao(): void
524|        self::assertSame([], $errors, 'AM etapa 1 não deve exigir aprofundamento. Erros: ' . implode(' | ', $errors));
527|    public function testAcidenteAmbientalEtapa1SemAprofundamentoPassaValidacao(): void
543|        self::assertSame([], $errors, 'AA etapa 1 não deve exigir aprofundamento. Erros: ' . implode(' | ', $errors));
546|    public function testAcidenteAmbientalAprofundamentoBrendaSemDimensaoNemFailedBarrier(): void
557|            'aprofundamento_complete' => true,
570|        self::assertSame([], $errors, 'AA aprofundamento Brenda deve passar. Erros: ' . implode(' | ', $errors));
573|    public function testAcidenteAmbientalAprofundamentoComAaComoGravidadePassaAposDePara(): void
584|            'aprofundamento_complete' => true,
609|    public function testAcidenteAmbientalAprofundamentoRejeitaEscalaLeveSeveroComoOpcaoNova(): void
620|            'aprofundamento_complete' => true,
640|    public function testAcidenteMaterialAprofundamentoBrendaSemDimensaoNemFailedBarrier(): void
651|            'aprofundamento_complete' => true,
663|        self::assertSame([], $errors, 'AM aprofundamento Brenda deve passar. Erros: ' . implode(' | ', $errors));
666|    public function testAcidentePessoalAprofundamentoBrendaTrocaDimensaoPorTipoBarreira(): void
677|            'aprofundamento_complete' => true,
706|    public function testAcidenteAmbientalEtapa1ComMeioPoluenteNaoDisparaAprofundamento(): void
728|            'Meio/poluente na identificação não devem exigir aprofundamento. Erros: ' . implode(' | ', $errors)
743|            'aprofundamento_complete' => true,
774|            'aprofundamento_complete' => true,
794|    public function testToastAprofundamentoIncompletoUsaMensagensHumanasDoPrint(): void
804|            'aprofundamento_complete' => true,
849|    public function testAcidentePessoalAprofundamentoMedicoExigeCaracterizar(): void
858|            'description'             => 'Médico finalizando aprofundamento',
859|            'aprofundamento_complete' => true,
860|            'aprofundamento_only'     => true,
890|    public function testPayloadComInjuryTypePreenchidoDisparaValidacaoAprofundamento(): void
899|            'description' => 'Enviou injury_type sem completar aprofundamento',
915|            'Com injury_type preenchido deve exigir aprofundamento. Erros: ' . $joined
944|    public function testAcidentePessoalEtapa1ComPessoaEnvolvidaNaoExigeAprofundamento(): void

{"end_line": 480, "file_path": "tests/Unit/Product/Ssma/SsmaEventValidatorTest.php", "start_line": 425}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php (Total lines: 989)
IS_TRUNCATED: false
LINE_RANGE: 425-480
425|    public function testAcidentePessoalAprofundamentoCompleteExigeCamposTecnicosComMensagemHumana(): void
426|    {
427|        $validator = new SsmaEventValidator();
428|
429|        $errors = $validator->validate([
430|            'type'                    => EventTypeEnum::ACIDENTE_PESSOAL,
431|            'origin'                  => 'MANUAL',
432|            'datetime'                => '2026-04-07T10:30:00',
433|            'location'                => 'Linha 2',
434|            'description'             => 'Teste etapa 2',
435|            'aprofundamento_complete' => true,
436|            'details'                 => [
437|                'activity'    => 'Operação de corte',
438|                'approach'    => 'CORRECAO_OPERACIONAL',
439|                'person_id'   => '101',
440|                'person_type' => 'COLABORADOR',
441|                'had_injury'  => true,
442|            ],
443|        ]);
444|
445|        self::assertNotEmpty($errors);
446|        $joined = implode(' | ', $errors);
447|        self::assertStringNotContainsString('details.injury_type', $joined);
448|        self::assertStringNotContainsString('details.descaracterizado', $joined);
449|        self::assertTrue(
450|            (bool) array_filter(
451|                $errors,
452|                static fn (string $e): bool => str_contains($e, 'Consequência real')
453|                    || str_contains($e, 'Tipo de lesão')
454|                    || str_contains($e, 'caracterizado como acidente')
455|            ),
456|            'Esperava mensagens humanas do Aprofundamento. Erros: ' . $joined
457|        );
458|    }
459|
460|    public function testAcidentePessoalAprofundamentoPendingAindaExigeCampos(): void
461|    {
462|        $validator = new SsmaEventValidator();
463|
464|        $errors = $validator->aprofundamentoPendingErrors([
465|            'type'        => EventTypeEnum::ACIDENTE_PESSOAL,
466|            'origin'      => 'MANUAL',
467|            'datetime'    => '2026-04-07T10:30:00',
468|            'location'    => 'Linha 2',
469|            'description' => 'Pendente',
470|            'details'     => [
471|                'activity'    => 'Operação',
472|                'person_id'   => '101',
473|                'person_type' => 'COLABORADOR',
474|            ],
475|        ]);
476|
477|        self::assertNotEmpty($errors);
478|    }
479|
480|    public function testAcidentePessoalEtapa1ComCamposTecnicosVaziosAindaPassa(): void

{"end_line": 790, "file_path": "tests/Unit/Product/Ssma/SsmaEventValidatorTest.php", "start_line": 666}

File: tests/Unit/Product/Ssma/SsmaEventValidatorTest.php (Total lines: 989)
IS_TRUNCATED: false
LINE_RANGE: 666-790
666|    public function testAcidentePessoalAprofundamentoBrendaTrocaDimensaoPorTipoBarreira(): void
667|    {
668|        $validator = new SsmaEventValidator();
669|
670|        $errors = $validator->validate([
671|            'type'                    => EventTypeEnum::ACIDENTE_PESSOAL,
672|            'origin'                  => 'MANUAL',
673|            'datetime'                => '2026-04-07T10:30:00',
674|            'location'                => 'Linha 2',
675|            'description'             => 'AP Brenda — barreira no lugar da dimensão',
676|            'consequence'             => 'MEDIO',
677|            'aprofundamento_complete' => true,
678|            'details'                 => [
679|                'activity'              => 'Operação de corte',
680|                'approach'              => 'TREINAMENTO',
681|                'barrier_type'          => 'COMPORTAMENTAL',
682|                'potential_consequence' => 'ALTO',
683|                'potential_severity'    => 'MEDIO',
684|                'person_id'             => '101',
685|                'person_type'           => 'COLABORADOR',
686|                'had_injury'            => true,
687|                'injury_type'           => 'CORTE',
688|                'injury_classification' => 'FAC',
689|                'work_leave'            => 'NAO',
690|                'injury_severity'       => 'LEVE',
691|                'descaracterizado'      => '0',
692|                'descaracter_comment'   => 'Acidente confirmado.',
693|                'body_parts'            => [
694|                    ['region' => 'MAO', 'side' => 'DIREITA', 'injury_type' => 'CORTE'],
695|                ],
696|            ],
697|        ]);
698|
699|        self::assertSame(
700|            [],
701|            $errors,
702|            'AP deve aceitar Leve…Severo + Tipo de barreira sem Dimensão. Erros: ' . implode(' | ', $errors)
703|        );
704|    }
705|
706|    public function testAcidenteAmbientalEtapa1ComMeioPoluenteNaoDisparaAprofundamento(): void
707|    {
708|        $validator = new SsmaEventValidator();
709|
710|        $errors = $validator->validate([
711|            'type'        => EventTypeEnum::ACIDENTE_AMBIENTAL,
712|            'origin'      => 'MANUAL',
713|            'datetime'    => '2026-04-07T10:30:00',
714|            'location'    => 'Área externa',
715|            'description' => 'Vazamento contido',
716|            'details'     => [
717|                'activity'             => 'Transferência',
718|                'approach'             => 'CORRECAO_OPERACIONAL',
719|                'environmental_medium' => 'SOLO',
720|                'pollutant_type'       => 'ESGOTO_SANITARIO',
721|                'containment_done'     => true,
722|            ],
723|        ]);
724|
725|        self::assertSame(
726|            [],
727|            $errors,
728|            'Meio/poluente na identificação não devem exigir aprofundamento. Erros: ' . implode(' | ', $errors)
729|        );
730|    }
731|
732|    public function testAcidenteAmbientalAceitaPollutantFreeTextLegadoNoResave(): void
733|    {
734|        $validator = new SsmaEventValidator();
735|
736|        $errors = $validator->validate([
737|            'type'                    => EventTypeEnum::ACIDENTE_AMBIENTAL,
738|            'origin'                  => 'MANUAL',
739|            'datetime'                => '2026-04-07T10:30:00',
740|            'location'                => 'Área externa',
741|            'description'             => 'Vazamento legado',
742|            'consequence'             => 'MEDIO',
743|            'aprofundamento_complete' => true,
744|            'details'                 => [
745|                'activity'              => 'Transferência',
746|                'approach'              => 'CORRECAO_OPERACIONAL',
747|                'environmental_medium'  => 'SOLO',
748|                'pollutant_type'        => 'Óleo hidráulico',
749|                'containment_done'      => true,
750|                'potential_severity'    => 'MEDIO',
751|                'potential_consequence' => 'ALTO',
752|                'barrier_type'          => 'FISICA',
753|            ],
754|        ]);
755|
756|        self::assertSame(
757|            [],
758|            $errors,
759|            'Poluente free-text legado deve permitir re-save. Erros: ' . implode(' | ', $errors)
760|        );
761|    }
762|
763|    public function testAcidenteAmbientalRejeitaPollutantVazio(): void
764|    {
765|        $validator = new SsmaEventValidator();
766|
767|        $errors = $validator->validate([
768|            'type'                    => EventTypeEnum::ACIDENTE_AMBIENTAL,
769|            'origin'                  => 'MANUAL',
770|            'datetime'                => '2026-04-07T10:30:00',
771|            'location'                => 'Área externa',
772|            'description'             => 'Sem poluente',
773|            'consequence'             => 'MEDIO',
774|            'aprofundamento_complete' => true,
775|            'details'                 => [
776|                'activity'              => 'Transferência',
777|                'approach'              => 'CORRECAO_OPERACIONAL',
778|                'environmental_medium'  => 'SOLO',
779|                'pollutant_type'        => '',
780|                'containment_done'      => true,
781|                'potential_severity'    => 'MEDIO',
782|                'potential_consequence' => 'MEDIO',
783|                'barrier_type'          => 'FISICA',
784|            ],
785|        ]);
786|
787|        self::assertNotSame([], $errors);
788|        self::assertTrue(
789|            (bool) array_filter($errors, static fn (string $e): bool => str_contains($e, 'poluente')),
790|            'Deve exigir tipo de poluente. Erros: ' . implode(' | ', $errors)

{"state": "DONE"}

{"file_path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php", "start_line": 1, "end_line": 330}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php (Total lines: 299)
IS_TRUNCATED: false
LINE_RANGE: 1-299
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\EmpresasParceiras;
6|
7|use App\Controller\Contractor\EmpresasParceirasController;
8|use App\Entity\Contractor\ContractorDocumentRequirementHistory;
9|use App\Entity\Contractor\ContractorProviderCompanyHistory;
10|use App\Repository\Contractor\ContractorDocumentRequirementRepository;
11|use App\Repository\Contractor\ContractorProviderCompanyRequirementRepository;
12|use App\Service\PermissionTagByMemberService;
13|use Doctrine\ORM\EntityManagerInterface;
14|use Doctrine\Persistence\ObjectRepository;
15|use Symfony\Component\HttpFoundation\Request;
16|
17|/**
18| * Testes de efeito colateral do EmpresasParceirasController com services reais
19| * e dependências mockadas (classes final não são mockáveis no PHPUnit).
20| */
21|final class EmpresasParceirasControllerTest extends EmpresasParceirasTestCase
22|{
23|    public function testRequirementSavePersistsAndReturnsRequirement(): void
24|    {
25|        $company = $this->company(1);
26|        $user = $this->user(10, $company);
27|        $payload = $this->validRequirementPayload();
28|
29|        $entityManager = $this->entityManagerWithConnection();
30|        $entityManager->expects(self::atLeastOnce())->method('persist');
31|        $entityManager->expects(self::once())->method('flush');
32|
33|        $response = $this->controller(
34|            $this->makeRequirementService(['entityManager' => $entityManager]),
35|            $this->makeProviderCompanyService(),
36|            $user,
37|        )->requirementSave($this->jsonRequest($payload));
38|
39|        self::assertSame(200, $response->getStatusCode());
40|        $data = $this->decode($response);
41|        self::assertTrue($data['success']);
42|        self::assertSame('ASO Admissional', $data['requirement']['titulo']);
43|    }
44|
45|    public function testRequirementSaveReturns422OnValidationError(): void
46|    {
47|        $response = $this->controller(
48|            $this->makeRequirementService(),
49|            $this->makeProviderCompanyService(),
50|            $this->user(10, $this->company(1)),
51|        )->requirementSave($this->jsonRequest(['categoria' => 'contrato']));
52|
53|        self::assertSame(422, $response->getStatusCode());
54|        self::assertSame('Título é obrigatório.', $this->decode($response)['message']);
55|    }
56|
57|    public function testRequirementSaveRejectsInvalidPayload(): void
58|    {
59|        $entityManager = $this->createMock(EntityManagerInterface::class);
60|        $entityManager->expects(self::never())->method('flush');
61|
62|        $response = $this->controller(
63|            $this->makeRequirementService(['entityManager' => $entityManager]),
64|            $this->makeProviderCompanyService(),
65|            $this->user(10, $this->company(1)),
66|        )->requirementSave(Request::create('/', 'POST', [], [], [], [], 'not-json'));
67|
68|        self::assertSame(400, $response->getStatusCode());
69|    }
70|
71|    public function testRequirementDeleteReturns409WhenLinked(): void
72|    {
73|        $company = $this->company(1);
74|        $requirement = $this->documentRequirement(7, $company);
75|
76|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
77|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
78|
79|        $companyRequirementRepository = $this->createMock(ContractorProviderCompanyRequirementRepository::class);
80|        $companyRequirementRepository->method('countByRequirement')->willReturn(2);
81|
82|        $entityManager = $this->createMock(EntityManagerInterface::class);
83|        $entityManager->expects(self::never())->method('remove');
84|
85|        $response = $this->controller(
86|            $this->makeRequirementService([
87|                'entityManager' => $entityManager,
88|                'requirementRepository' => $requirementRepository,
89|                'companyRequirementRepository' => $companyRequirementRepository,
90|            ]),
91|            $this->makeProviderCompanyService(),
92|            $this->user(10, $company),
93|        )->requirementDelete(7, $this->jsonRequest(['motivo' => 'teste']));
94|
95|        self::assertSame(409, $response->getStatusCode());
96|        self::assertSame(2, $this->decode($response)['linked_count']);
97|    }
98|
99|    public function testRequirementDeleteRemovesWhenNotLinked(): void
100|    {
101|        $company = $this->company(1);
102|        $requirement = $this->documentRequirement(7, $company);
103|
104|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
105|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
106|
107|        $companyRequirementRepository = $this->createMock(ContractorProviderCompanyRequirementRepository::class);
108|        $companyRequirementRepository->method('countByRequirement')->willReturn(0);
109|
110|        $entityManager = $this->createMock(EntityManagerInterface::class);
111|        $entityManager->expects(self::once())->method('persist')->with(self::isInstanceOf(ContractorDocumentRequirementHistory::class));
112|        $entityManager->expects(self::exactly(2))->method('flush');
113|        $entityManager->expects(self::once())->method('remove')->with($requirement);
114|
115|        $response = $this->controller(
116|            $this->makeRequirementService([
117|                'entityManager' => $entityManager,
118|                'requirementRepository' => $requirementRepository,
119|                'companyRequirementRepository' => $companyRequirementRepository,
120|            ]),
121|            $this->makeProviderCompanyService(),
122|            $this->user(10, $company),
123|        )->requirementDelete(7, $this->jsonRequest(['motivo' => 'motivo teste']));
124|
125|        self::assertSame(200, $response->getStatusCode());
126|        self::assertTrue($this->decode($response)['success']);
127|    }
128|
129|    public function testRequirementSetActiveRequiresActiveField(): void
130|    {
131|        $company = $this->company(1);
132|        $requirement = $this->documentRequirement(3, $company);
133|
134|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
135|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
136|
137|        $entityManager = $this->entityManagerWithConnection();
138|        $entityManager->expects(self::never())->method('flush');
139|
140|        $response = $this->controller(
141|            $this->makeRequirementService([
142|                'entityManager' => $entityManager,
143|                'requirementRepository' => $requirementRepository,
144|            ]),
145|            $this->makeProviderCompanyService(),
146|            $this->user(10, $company),
147|        )->requirementSetActive(3, $this->jsonRequest(['active' => 'invalido']));
148|
149|        self::assertSame(422, $response->getStatusCode());
150|    }
151|
152|    public function testCompanySavePersistsAndReturnsCompany(): void
153|    {
154|        $company = $this->company(1);
155|        $user = $this->user(10, $company);
156|        $member = $this->companyMember(20, $company);
157|        $payload = $this->validCompanyPayload(20);
158|
159|        $companyMembersRepository = $this->createMock(\App\Repository\CompanyMembersRepository::class);
160|        $companyMembersRepository->method('findOneBy')->willReturn($member);
161|
162|        $entityManager = $this->createMock(EntityManagerInterface::class);
163|        $entityManager->expects(self::atLeastOnce())->method('persist');
164|        $entityManager->expects(self::once())->method('flush');
165|
166|        $response = $this->controller(
167|            $this->makeRequirementService(),
168|            $this->makeProviderCompanyService([
169|                'entityManager' => $entityManager,
170|                'companyMembersRepository' => $companyMembersRepository,
171|            ]),
172|            $user,
173|        )->companySave($this->jsonRequest($payload));
174|
175|        self::assertSame(200, $response->getStatusCode());
176|        self::assertSame('Empresa Parceira LTDA', $this->decode($response)['company']['razao_social']);
177|    }
178|
179|    public function testCompanyDeleteReturns409WhenInUse(): void
180|    {
181|        $company = $this->company(1);
182|        $providerCompany = $this->providerCompany(4, $company);
183|        $this->providerCompanyMember(1, $providerCompany, $this->companyMember(30, $company));
184|
185|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
186|        $companyRepository->method('findOneByCompanyAndId')->willReturn($providerCompany);
187|
188|        $entityManager = $this->createMock(EntityManagerInterface::class);
189|        $entityManager->expects(self::never())->method('remove');
190|
191|        $response = $this->controller(
192|            $this->makeRequirementService(),
193|            $this->makeProviderCompanyService([
194|                'entityManager' => $entityManager,
195|                'companyRepository' => $companyRepository,
196|            ]),
197|            $this->user(10, $company),
198|        )->companyDelete(4, $this->jsonRequest(['motivo' => 'teste']));
199|
200|        self::assertSame(409, $response->getStatusCode());
201|        self::assertSame('Empresa em uso.', $this->decode($response)['message']);
202|    }
203|
204|    public function testCompanyProvidersLinkPersistsMembers(): void
205|    {
206|        $company = $this->company(1);
207|        $user = $this->user(10, $company);
208|        $providerCompany = $this->providerCompany(4, $company);
209|        $member = $this->companyMember(30, $company);
210|
211|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
212|        $companyRepository->method('findOneByCompanyAndId')->willReturn($providerCompany);
213|
214|        $companyMembersRepository = $this->createMock(\App\Repository\CompanyMembersRepository::class);
215|        $companyMembersRepository->method('findOneBy')->willReturn($member);
216|
217|        $entityManager = $this->createMock(EntityManagerInterface::class);
218|        $entityManager->expects(self::once())
219|            ->method('persist')
220|            ->with(self::isInstanceOf(\App\Entity\Contractor\ContractorProviderCompanyMember::class));
221|        $entityManager->expects(self::once())->method('flush');
222|
223|        $response = $this->controller(
224|            $this->makeRequirementService(),
225|            $this->makeProviderCompanyService([
226|                'entityManager' => $entityManager,
227|                'companyRepository' => $companyRepository,
228|                'companyMembersRepository' => $companyMembersRepository,
229|            ]),
230|            $user,
231|        )->companyProvidersLink(4, $this->jsonRequest(['provider_ids' => [30]]));
232|
233|        self::assertSame(200, $response->getStatusCode());
234|        self::assertSame(1, $this->decode($response)['company']['prestadores_count']);
235|    }
236|
237|    public function testCompaniesListReturnsStats(): void
238|    {
239|        $company = $this->company(1);
240|        $providerCompany = $this->providerCompany(1, $company);
241|
242|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
243|        $companyRepository->method('findByCompany')->willReturn([$providerCompany]);
244|
245|        $response = $this->controller(
246|            $this->makeRequirementService(),
247|            $this->makeProviderCompanyService(['companyRepository' => $companyRepository]),
248|            $this->user(10, $company),
249|        )->companiesList();
250|
251|        $data = $this->decode($response);
252|        self::assertTrue($data['success']);
253|        self::assertCount(1, $data['companies']);
254|        self::assertSame(1, $data['stats']['total']);
255|    }
256|
257|    public function testCompanyRequirementEvidenceUploadRejectsMissingFile(): void
258|    {
259|        $entityManager = $this->createMock(EntityManagerInterface::class);
260|        $entityManager->expects(self::never())->method('flush');
261|
262|        $response = $this->controller(
263|            $this->makeRequirementService(),
264|            $this->makeProviderCompanyService(['entityManager' => $entityManager]),
265|            $this->user(10, $this->company(1)),
266|        )->companyRequirementEvidenceUpload(1, 2, Request::create('/', 'POST'));
267|
268|        self::assertSame(400, $response->getStatusCode());
269|        self::assertSame('Arquivo inválido.', $this->decode($response)['message']);
270|    }
271|
272|    private function controller(
273|        \App\Service\Contractor\ContractorDocumentRequirementService $requirementService,
274|        \App\Service\Contractor\ContractorProviderCompanyService $companyService,
275|        ?\App\Entity\User $user,
276|    ): EmpresasParceirasController {
277|        $entityManager = $this->createMock(EntityManagerInterface::class);
278|        $entityManager->method('getRepository')->willReturn(
279|            $this->createMock(ObjectRepository::class)
280|        );
281|
282|        $controller = new EmpresasParceirasController(
283|            $requirementService,
284|            $companyService,
285|            $this->createMock(PermissionTagByMemberService::class),
286|            $entityManager,
287|        );
288|        $controller->setContainer($this->containerWithUser($user));
289|
290|        return $controller;
291|    }
292|
293|    /** @param array<string, mixed> $payload */
294|    private function jsonRequest(array $payload): Request
295|    {
296|        return Request::create('/', 'POST', [], [], [], [], json_encode($payload, JSON_THROW_ON_ERROR));
297|    }
298|}
299|

{"query_name": "EmpresasParceirasController.php"}

src/Controller/Contractor/EmpresasParceirasController.php

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php"}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 730)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Controller\Contractor;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\Service\Contractor\ContractorDocumentRequirementService;
13|use App\Service\Contractor\ContractorProviderCompanyService;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
17|use Symfony\Component\HttpFoundation\BinaryFileResponse;
18|use Symfony\Component\HttpFoundation\File\UploadedFile;
19|use Symfony\Component\HttpFoundation\JsonResponse;
20|use Symfony\Component\HttpFoundation\Request;
21|use Symfony\Component\HttpFoundation\Response;
22|use Symfony\Component\HttpFoundation\ResponseHeaderBag;
23|
24|final class EmpresasParceirasController extends AbstractController
25|{
26|    private const CONTRACTOR_PRODUCT_SLUG = 'ssma-contractor';
27|
28|    public function __construct(
29|        private ContractorDocumentRequirementService $requirementService,
30|        private ContractorProviderCompanyService $companyService,
31|        private PermissionTagByMemberService $permissionTagByMemberService,
32|        private EntityManagerInterface $entityManager,
33|    ) {
34|    }
35|
36|    public function index(): Response
37|    {
38|        $this->assertCanAccess();
39|
40|        $company = $this->resolveCompany();
41|        $contractorCompanies = $this->companyService->listForFrontend($company);
42|
43|        return $this->render('contractor/index.html.twig', [
44|            'contractorRequirements' => $this->requirementService->listForFrontend($company),
45|            'contractorCompanies' => $contractorCompanies,
46|            'contractorCompanyStats' => $this->companyService->computeStats($contractorCompanies),
47|            'contractorDocumentoStatus' => ContractorProviderCompanyService::DOCUMENTO_STATUS,
48|            'contractorCategorias' => ContractorDocumentRequirementService::CATEGORIAS,
49|            'contractorAreas' => ContractorDocumentRequirementService::AREAS,
50|            'contractorCompanyTypes' => ContractorDocumentRequirementService::COMPANY_TYPES,
51|            'contractorValidadeTipos' => ContractorDocumentRequirementService::VALIDADE_TIPOS,
52|            'contractorValidadeUnidades' => ContractorDocumentRequirementService::VALIDADE_UNIDADES,
53|            'contractorRegrasBloqueio' => ContractorDocumentRequirementService::REGRAS_BLOQUEIO,
54|            'contractorBloqueioParcialTipos' => ContractorDocumentRequirementService::BLOQUEIO_PARCIAL_TIPOS,
55|            'contractorBloqueioParcialOptions' => $this->requirementService->listPartialBlockingOptions($company),
56|            'contractorInternalResponsibleOptions' => $this->companyService->listInternalResponsibleOptions($company),
57|            'contractorCanManage' => $this->canManage(),
58|            'contractorCanManagePermissions' => $this->canManagePermissions(),
59|        ]);
60|    }
61|
62|    public function requirementsList(): JsonResponse
63|    {
64|        if ($response = $this->jsonIfCannotAccess()) {
65|            return $response;
66|        }
67|
68|        $company = $this->resolveCompany();
69|
70|        return $this->json([
71|            'success' => true,
72|            'requirements' => $this->requirementService->listForFrontend($company),
73|        ]);
74|    }
75|
76|    public function requirementDetail(int $id): JsonResponse
77|    {
78|        if ($response = $this->jsonIfCannotAccess()) {
79|            return $response;
80|        }
81|
82|        $company = $this->resolveCompany();
83|
84|        try {
85|            $detail = $this->requirementService->getDetail($company, $id);
86|        } catch (\RuntimeException $exception) {
87|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
88|        }
89|
90|        return $this->json(['success' => true] + $detail);
91|    }
92|
93|    public function requirementSave(Request $request): JsonResponse
94|    {
95|        if (!$this->canManage()) {
96|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
97|        }
98|
99|        $company = $this->resolveCompany();
100|        $user = $this->resolveUser();
101|        $payload = json_decode($request->getContent(), true);
102|
103|        if (!is_array($payload)) {
104|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
105|        }
106|
107|        try {
108|            $requirement = $this->requirementService->save($company, $user, $payload);
109|        } catch (\InvalidArgumentException $exception) {
110|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
111|        }
112|
113|        return $this->json([
114|            'success' => true,
115|            'requirement' => $requirement,
116|        ]);
117|    }
118|
119|    public function requirementDelete(int $id, Request $request): JsonResponse
120|    {
121|        if (!$this->canManage()) {
122|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
123|        }
124|
125|        $company = $this->resolveCompany();
126|        $user = $this->resolveUser();
127|        $payload = json_decode($request->getContent(), true);
128|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
129|
130|        try {
131|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
132|            if ($linkedCount > 0) {
133|                return $this->json([
134|                    'success' => false,
135|                    'message' => 'Requisito em uso por empresas parceiras.',
136|                    'linked_count' => $linkedCount,
137|                ], 409);
138|            }
139|
140|            $this->requirementService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
141|        } catch (\RuntimeException $exception) {
142|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
143|        }
144|
145|        return $this->json(['success' => true]);
146|    }
147|
148|    public function requirementSetActive(int $id, Request $request): JsonResponse
149|    {
150|        if (!$this->canManage()) {
151|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
152|        }
153|
154|        $company = $this->resolveCompany();
155|        $user = $this->resolveUser();
156|        $payload = json_decode($request->getContent(), true);
157|
158|        if (!is_array($payload)) {
159|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
160|        }
161|
162|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
163|        if ($active === null) {
164|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
165|        }
166|
167|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
168|
169|        try {
170|            $requirement = $this->requirementService->setActive($company, $user, $id, $active, $motivo);
171|        } catch (\RuntimeException $exception) {
172|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
173|        }
174|
175|        return $this->json([
176|            'success' => true,
177|            'requirement' => $requirement,
178|        ]);
179|    }
180|
181|    public function requirementUsage(int $id): JsonResponse
182|    {
183|        if ($response = $this->jsonIfCannotAccess()) {
184|            return $response;
185|        }
186|
187|        $company = $this->resolveCompany();
188|
189|        try {
190|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
191|        } catch (\RuntimeException $exception) {
192|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
193|        }
194|
195|        return $this->json([
196|            'success' => true,
197|            'linked_count' => $linkedCount,
198|            'in_use' => $linkedCount > 0,
199|        ]);
200|    }
201|
202|    public function companiesList(): JsonResponse
203|    {
204|        if ($response = $this->jsonIfCannotAccess()) {
205|            return $response;
206|        }
207|
208|        $company = $this->resolveCompany();
209|        $companies = $this->companyService->listForFrontend($company);
210|
211|        return $this->json([
212|            'success' => true,
213|            'companies' => $companies,
214|            'stats' => $this->companyService->computeStats($companies),
215|        ]);
216|    }
217|
218|    public function companyDetail(int $id): JsonResponse
219|    {
220|        if ($response = $this->jsonIfCannotAccess()) {
221|            return $response;
222|        }
223|
224|        $company = $this->resolveCompany();
225|
226|        try {
227|            $detail = $this->companyService->getDetail($company, $id);
228|        } catch (\RuntimeException $exception) {
229|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
230|        }
231|
232|        return $this->json(['success' => true] + $detail);
233|    }
234|
235|    public function companyDelete(int $id, Request $request): JsonResponse
236|    {
237|        if (!$this->canManage()) {
238|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
239|        }
240|
241|        $company = $this->resolveCompany();
242|        $user = $this->resolveUser();
243|        $payload = json_decode($request->getContent(), true);
244|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
245|
246|        try {
247|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
248|            if ($linkedCount > 0) {
249|                return $this->json([
250|                    'success' => false,
251|                    'message' => 'Empresa em uso.',
252|                    'linked_count' => $linkedCount,
253|                ], 409);
254|            }
255|
256|            $this->companyService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
257|        } catch (\RuntimeException $exception) {
258|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
259|        }
260|
261|        return $this->json(['success' => true]);
262|    }
263|
264|    public function companySetActive(int $id, Request $request): JsonResponse
265|    {
266|        if (!$this->canManage()) {
267|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
268|        }
269|
270|        $company = $this->resolveCompany();
271|        $user = $this->resolveUser();
272|        $payload = json_decode($request->getContent(), true);
273|
274|        if (!is_array($payload)) {
275|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
276|        }
277|
278|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
279|        if ($active === null) {
280|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
281|        }
282|
283|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
284|
285|        try {
286|            $providerCompany = $this->companyService->setActive($company, $user, $id, $active, $motivo);
287|        } catch (\RuntimeException $exception) {
288|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
289|        }
290|
291|        return $this->json([
292|            'success' => true,
293|            'company' => $providerCompany,
294|        ]);
295|    }
296|
297|    public function companyUsage(int $id): JsonResponse
298|    {
299|        if ($response = $this->jsonIfCannotAccess()) {
300|            return $response;
301|        }
302|
303|        $company = $this->resolveCompany();
304|
305|        try {
306|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
307|        } catch (\RuntimeException $exception) {
308|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
309|        }
310|
311|        return $this->json([
312|            'success' => true,
313|            'linked_count' => $linkedCount,
314|            'in_use' => $linkedCount > 0,
315|        ]);
316|    }
317|
318|    public function companySave(Request $request): JsonResponse
319|    {
320|        if (!$this->canManage()) {
321|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
322|        }
323|
324|        $company = $this->resolveCompany();
325|        $user = $this->resolveUser();
326|        $payload = json_decode($request->getContent(), true);
327|
328|        if (!is_array($payload)) {
329|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
330|        }
331|
332|        try {
333|            $providerCompany = $this->companyService->save($company, $user, $payload);
334|        } catch (\InvalidArgumentException $exception) {
335|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
336|        } catch (\RuntimeException $exception) {
337|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
338|        }
339|
340|        return $this->json([
341|            'success' => true,
342|            'company' => $providerCompany,
343|        ]);
344|    }
345|
346|    public function companyProviders(int $id): JsonResponse
347|    {
348|        if ($response = $this->jsonIfCannotAccess()) {
349|            return $response;
350|        }
351|
352|        $company = $this->resolveCompany();
353|
354|        try {
355|            $data = $this->companyService->getProviders($company, $id);
356|        } catch (\RuntimeException $exception) {
357|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
358|        }
359|
360|        return $this->json(['success' => true] + $data);
361|    }
362|
363|    public function companyProvidersLink(int $id, Request $request): JsonResponse
364|    {
365|        if (!$this->canManage()) {
366|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
367|        }
368|
369|        $company = $this->resolveCompany();
370|        $user = $this->resolveUser();
371|        $payload = json_decode($request->getContent(), true);
372|        $providerIds = is_array($payload) ? ($payload['provider_ids'] ?? []) : [];
373|
374|        if (!is_array($providerIds)) {
375|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
376|        }
377|
378|        try {
379|            $providerCompany = $this->companyService->linkProviders($company, $user, $id, $providerIds);
380|        } catch (\RuntimeException $exception) {
381|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
382|        }
383|
384|        return $this->json([
385|            'success' => true,
386|            'company' => $providerCompany,
387|        ]);
388|    }
389|
390|    public function companyRequirements(int $id): JsonResponse
391|    {
392|        if ($response = $this->jsonIfCannotAccess()) {
393|            return $response;
394|        }
395|
396|        $company = $this->resolveCompany();
397|
398|        try {
399|            $data = $this->companyService->getCompanyRequirements($company, $id, $this->requirementService);
400|        } catch (\RuntimeException $exception) {
401|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
402|        }
403|
404|        return $this->json(['success' => true] + $data);
405|    }
406|
407|    public function companyRequirementsSave(int $id, Request $request): JsonResponse
408|    {
409|        if (!$this->canManage()) {
410|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
411|        }
412|
413|        $company = $this->resolveCompany();
414|        $user = $this->resolveUser();
415|        $payload = json_decode($request->getContent(), true);
416|        $requirementIds = is_array($payload) ? ($payload['requirement_ids'] ?? []) : [];
417|        $requirementNames = is_array($payload) ? ($payload['requirement_names'] ?? []) : [];
418|        $requirementResponsibleIds = is_array($payload) ? ($payload['requirement_responsible_ids'] ?? []) : [];
419|        $requirementOptionalResponsibleIds = is_array($payload) ? ($payload['requirement_optional_responsible_ids'] ?? []) : [];
420|
421|        if (!is_array($requirementIds)) {
422|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
423|        }
424|
425|        if (!is_array($requirementNames)) {
426|            $requirementNames = [];
427|        }
428|
429|        if (!is_array($requirementResponsibleIds)) {
430|            $requirementResponsibleIds = [];
431|        }
432|
433|        if (!is_array($requirementOptionalResponsibleIds)) {
434|            $requirementOptionalResponsibleIds = [];
435|        }
436|
437|        try {
438|            $providerCompany = $this->companyService->saveCompanyRequirements(
439|                $company,
440|                $user,
441|                $id,
442|                $requirementIds,
443|                $requirementNames,
444|                $requirementResponsibleIds,
445|                $requirementOptionalResponsibleIds,
446|            );
447|        } catch (\RuntimeException $exception) {
448|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
449|        }
450|
451|        return $this->json([
452|            'success' => true,
453|            'company' => $providerCompany,
454|        ]);
455|    }
456|
457|    public function companyRequirementDelete(int $id, int $linkId): JsonResponse
458|    {
459|        if (!$this->canManage()) {
460|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
461|        }
462|
463|        $company = $this->resolveCompany();
464|        $user = $this->resolveUser();
465|
466|        try {
467|            $providerCompany = $this->companyService->deleteCompanyRequirement($company, $user, $id, $linkId);
468|        } catch (\RuntimeException $exception) {
469|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
470|        }
471|
472|        return $this->json([
473|            'success' => true,
474|            'company' => $providerCompany,
475|        ]);
476|    }
477|
478|    public function companyRequirementDocumentSave(int $id, Request $request): JsonResponse
479|    {
480|        if (!$this->canManage()) {
481|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
482|        }
483|
484|        $company = $this->resolveCompany();
485|        $user = $this->resolveUser();
486|        $payload = json_decode($request->getContent(), true);
487|
488|        if (!is_array($payload)) {
489|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
490|        }
491|
492|        try {
493|            $providerCompany = $this->companyService->saveRequirementDocument($company, $user, $id, $payload);
494|        } catch (\InvalidArgumentException $exception) {
495|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
496|        } catch (\RuntimeException $exception) {
497|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
498|        }
499|
500|        return $this->json([

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php", "start_line": 500, "end_line": 730}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 730)
IS_TRUNCATED: false
LINE_RANGE: 500-730
500|        return $this->json([
501|            'success' => true,
502|            'company' => $providerCompany,
503|        ]);
504|    }
505|
506|    public function companyRequirementEvidenceUpload(int $id, int $requirementId, Request $request): JsonResponse
507|    {
508|        if (!$this->canManage()) {
509|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
510|        }
511|
512|        $company = $this->resolveCompany();
513|        $user = $this->resolveUser();
514|        /** @var UploadedFile|null $file */
515|        $file = $request->files->get('file');
516|
517|        if (!$file instanceof UploadedFile) {
518|            return $this->json(['success' => false, 'message' => 'Arquivo inválido.'], 400);
519|        }
520|
521|        try {
522|            $payload = $this->companyService->uploadRequirementEvidence(
523|                $company,
524|                $user,
525|                $id,
526|                $requirementId,
527|                $file,
528|                $this->requirementService,
529|                $request->request->all(),
530|            );
531|        } catch (\InvalidArgumentException $exception) {
532|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
533|        } catch (\RuntimeException $exception) {
534|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
535|        }
536|
537|        return $this->json(['success' => true] + $payload);
538|    }
539|
540|    public function companyRequirementEvidenceDownload(int $id, int $requirementId, string $evidenceId): Response
541|    {
542|        if (!$this->canAccess()) {
543|            return new Response('Sem permissão.', Response::HTTP_FORBIDDEN);
544|        }
545|
546|        $company = $this->resolveCompany();
547|
548|        try {
549|            $download = $this->companyService->resolveRequirementEvidenceDownload(
550|                $company,
551|                $id,
552|                $requirementId,
553|                $evidenceId,
554|            );
555|        } catch (\RuntimeException $exception) {
556|            return new Response($exception->getMessage(), Response::HTTP_NOT_FOUND);
557|        }
558|
559|        $response = new BinaryFileResponse($download['absolute_path']);
560|        $response->setContentDisposition(
561|            ResponseHeaderBag::DISPOSITION_ATTACHMENT,
562|            $download['download_name'],
563|        );
564|
565|        return $response;
566|    }
567|
568|    public function companyRequirementEvidenceDelete(int $id, int $requirementId, Request $request): JsonResponse
569|    {
570|        if (!$this->canManage()) {
571|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
572|        }
573|
574|        $company = $this->resolveCompany();
575|        $payload = json_decode($request->getContent(), true);
576|        $evidenceId = is_array($payload) ? trim((string) ($payload['evidence_id'] ?? '')) : '';
577|        $index = is_array($payload) && array_key_exists('index', $payload) ? (int) $payload['index'] : null;
578|
579|        try {
580|            $data = $this->companyService->deleteRequirementEvidence(
581|                $company,
582|                $id,
583|                $requirementId,
584|                $evidenceId !== '' ? $evidenceId : null,
585|                $index,
586|                $this->requirementService,
587|            );
588|        } catch (\InvalidArgumentException $exception) {
589|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
590|        } catch (\RuntimeException $exception) {
591|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
592|        }
593|
594|        return $this->json(['success' => true] + $data);
595|    }
596|
597|    /**
598|     * Leitura: requer PermissionTag ativa do produto ssma-contractor ou admin de plataforma.
599|     * OCR-Fixes: OCR-658-01
600|     */
601|    private function canAccess(): bool
602|    {
603|        if ($this->isContractorPlatformAdmin()) {
604|            return true;
605|        }
606|
607|        return $this->resolveContractorPermissionTag() instanceof PermissionTag;
608|    }
609|
610|    private function assertCanAccess(): void
611|    {
612|        if (!$this->canAccess()) {
613|            throw $this->createAccessDeniedException('Sem permissão para acessar Empresas Parceiras.');
614|        }
615|    }
616|
617|    private function jsonIfCannotAccess(): ?JsonResponse
618|    {
619|        if ($this->canAccess()) {
620|            return null;
621|        }
622|
623|        return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
624|    }
625|
626|    private function canManage(): bool
627|    {
628|        if ($this->isContractorPlatformAdmin()) {
629|            return true;
630|        }
631|
632|        $tag = $this->resolveContractorPermissionTag();
633|        if (!$tag instanceof PermissionTag) {
634|            return false;
635|        }
636|
637|        $tagName = trim((string) $tag->getName());
638|        if ($tagName === '' || strcasecmp($tagName, 'Membro') === 0) {
639|            return false;
640|        }
641|
642|        if (in_array($tagName, [
643|            'Gestor Administrador',
644|            'Gestor de Equipe',
645|            'Supervisor de Equipe',
646|            'Supervisor',
647|        ], true)) {
648|            return true;
649|        }
650|
651|        return (bool) ($tag->getCanCreate() || $tag->getCanEdit());
652|    }
653|
654|    private function canManagePermissions(): bool
655|    {
656|        if ($this->isContractorPlatformAdmin()) {
657|            return true;
658|        }
659|
660|        $tag = $this->resolveContractorPermissionTag();
661|
662|        return $tag instanceof PermissionTag
663|            && $tag->getName() === 'Gestor Administrador';
664|    }
665|
666|    private function isContractorPlatformAdmin(): bool
667|    {
668|        $user = $this->getUser();
669|
670|        return $user instanceof User
671|            && ($user->isSuperAdmin() || in_array('ROLE_MANAGER', $user->getRoles(), true));
672|    }
673|
674|    private function resolveContractorPermissionTag(): ?PermissionTag
675|    {
676|        $user = $this->getUser();
677|        if (!$user instanceof User) {
678|            return null;
679|        }
680|
681|        $company = $user->getCompany();
682|        if (!$company instanceof Company) {
683|            return null;
684|        }
685|
686|        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
687|            'user' => $user,
688|            'company' => $company,
689|            'isRemoved' => false,
690|            'enabled' => true,
691|        ]);
692|        if (!$member instanceof CompanyMembers) {
693|            return null;
694|        }
695|
696|        $product = $this->entityManager->getRepository(Product::class)
697|            ->findOneBy(['slug' => self::CONTRACTOR_PRODUCT_SLUG]);
698|        if (!$product instanceof Product) {
699|            return null;
700|        }
701|
702|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);
703|    }
704|
705|    private function resolveCompany(): Company
706|    {
707|        $user = $this->getUser();
708|        if (!$user instanceof User) {
709|            throw $this->createAccessDeniedException();
710|        }
711|
712|        $company = $user->getCompany();
713|        if (!$company instanceof Company) {
714|            throw $this->createAccessDeniedException('Empresa não encontrada.');
715|        }
716|
717|        return $company;
718|    }
719|
720|    private function resolveUser(): User
721|    {
722|        $user = $this->getUser();
723|        if (!$user instanceof User) {
724|            throw $this->createAccessDeniedException();
725|        }
726|
727|        return $user;
728|    }
729|}
730|

{"query_name": "EmpresasParceirasTestCase.php"}

tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php

{"file_path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php"}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php (Total lines: 302)
IS_TRUNCATED: false
LINE_RANGE: 1-302
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\EmpresasParceiras;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\Contractor\ContractorDocumentRequirement;
10|use App\Entity\Contractor\ContractorProviderCompany;
11|use App\Entity\Contractor\ContractorProviderCompanyMember;
12|use App\Entity\Contractor\ContractorProviderCompanyRequirement;
13|use App\Entity\User;
14|use App\Repository\CompanyMembersRepository;
15|use App\Repository\Contractor\ContractorDocumentRequirementHistoryRepository;
16|use App\Repository\Contractor\ContractorDocumentRequirementRepository;
17|use App\Repository\Contractor\ContractorProviderCompanyHistoryRepository;
18|use App\Repository\Contractor\ContractorProviderCompanyMemberRepository;
19|use App\Repository\Contractor\ContractorProviderCompanyRepository;
20|use App\Repository\Contractor\ContractorProviderCompanyRequirementRepository;
21|use App\Service\Contractor\ContractorDocumentRequirementService;
22|use App\Service\Contractor\ContractorMemberServiceProvisionService;
23|use App\Service\Contractor\ContractorProviderCompanyService;
24|use App\Service\Contractor\ContractorRequirementDocumentStorageService;
25|use Doctrine\DBAL\Connection;
26|use Doctrine\ORM\EntityManagerInterface;
27|use PHPUnit\Framework\TestCase;
28|use Psr\Container\ContainerInterface;
29|use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
30|use Symfony\Component\HttpFoundation\JsonResponse;
31|use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
32|use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
33|
34|abstract class EmpresasParceirasTestCase extends TestCase
35|{
36|    protected function setEntityId(object $entity, int $id): object
37|    {
38|        $reflection = new \ReflectionObject($entity);
39|        while (!$reflection->hasProperty('id') && $reflection->getParentClass()) {
40|            $reflection = $reflection->getParentClass();
41|        }
42|
43|        $property = $reflection->getProperty('id');
44|        $property->setAccessible(true);
45|        $property->setValue($entity, $id);
46|
47|        return $entity;
48|    }
49|
50|    protected function setPrivateProperty(object $object, string $propertyName, mixed $value): void
51|    {
52|        $property = (new \ReflectionClass($object))->getProperty($propertyName);
53|        $property->setAccessible(true);
54|        $property->setValue($object, $value);
55|    }
56|
57|    protected function company(int $id): Company
58|    {
59|        /** @var Company $company */
60|        $company = $this->setEntityId(new Company(), $id);
61|
62|        return $company;
63|    }
64|
65|    protected function user(int $id, ?Company $company = null, string $email = 'user@example.com'): User
66|    {
67|        /** @var User $user */
68|        $user = $this->setEntityId(new User(), $id);
69|        $user->setEmail($email);
70|        if ($company !== null) {
71|            $user->setCompany($company);
72|        }
73|
74|        return $user;
75|    }
76|
77|    protected function companyMember(int $id, Company $company, string $email = 'colab@example.com'): CompanyMembers
78|    {
79|        /** @var CompanyMembers $member */
80|        $member = $this->setEntityId(new CompanyMembers(), $id);
81|        $member->setCompany($company);
82|        $member->setUser($this->user($id + 10000, $company, $email));
83|        $member->setIsRemoved(false);
84|
85|        return $member;
86|    }
87|
88|    protected function mockCompanyMember(int $id, string $name = '', string $email = ''): CompanyMembers
89|    {
90|        $member = $this->createMock(CompanyMembers::class);
91|        $member->method('getId')->willReturn($id);
92|        $member->method('getFullName')->willReturn($name !== '' ? $name : null);
93|        $member->method('getEmail')->willReturn($email !== '' ? $email : null);
94|
95|        return $member;
96|    }
97|
98|    protected function providerCompany(int $id, Company $company, string $razaoSocial = 'Parceira LTDA'): ContractorProviderCompany
99|    {
100|        /** @var ContractorProviderCompany $providerCompany */
101|        $providerCompany = $this->setEntityId(
102|            (new ContractorProviderCompany())
103|                ->setCompany($company)
104|                ->setRazaoSocial($razaoSocial)
105|                ->setDocumento('12345678000199')
106|                ->setTipo('operacional')
107|                ->setActive(true),
108|            $id,
109|        );
110|
111|        return $providerCompany;
112|    }
113|
114|    protected function documentRequirement(int $id, Company $company, string $titulo = 'ASO'): ContractorDocumentRequirement
115|    {
116|        /** @var ContractorDocumentRequirement $requirement */
117|        $requirement = $this->setEntityId(
118|            (new ContractorDocumentRequirement())
119|                ->setCompany($company)
120|                ->setTitulo($titulo)
121|                ->setCategoria('contrato')
122|                ->setAplicarPara(['operacional'])
123|                ->setValidadeTipo('sem_validade')
124|                ->setRegraBloqueio('sem_bloqueio')
125|                ->setActive(true),
126|            $id,
127|        );
128|
129|        return $requirement;
130|    }
131|
132|    protected function providerCompanyRequirement(
133|        int $id,
134|        ContractorProviderCompany $providerCompany,
135|        ContractorDocumentRequirement $requirement,
136|    ): ContractorProviderCompanyRequirement {
137|        /** @var ContractorProviderCompanyRequirement $link */
138|        $link = $this->setEntityId(
139|            (new ContractorProviderCompanyRequirement())
140|                ->setProviderCompany($providerCompany)
141|                ->setRequirement($requirement)
142|                ->setStatus('nao_conforme'),
143|            $id,
144|        );
145|        $providerCompany->getRequirements()->add($link);
146|
147|        return $link;
148|    }
149|
150|    protected function providerCompanyMember(
151|        int $id,
152|        ContractorProviderCompany $providerCompany,
153|        CompanyMembers $member,
154|    ): ContractorProviderCompanyMember {
155|        /** @var ContractorProviderCompanyMember $link */
156|        $link = $this->setEntityId(
157|            (new ContractorProviderCompanyMember())
158|                ->setProviderCompany($providerCompany)
159|                ->setCompanyMember($member),
160|            $id,
161|        );
162|        $providerCompany->getMembers()->add($link);
163|
164|        return $link;
165|    }
166|
167|    protected function documentStorage(?string $projectDir = null): ContractorRequirementDocumentStorageService
168|    {
169|        $parameterBag = $this->createMock(ParameterBagInterface::class);
170|        $parameterBag->method('get')->with('kernel.project_dir')->willReturn($projectDir ?? sys_get_temp_dir());
171|
172|        return new ContractorRequirementDocumentStorageService($parameterBag);
173|    }
174|
175|    /**
176|     * @param array<string, object> $overrides
177|     */
178|    protected function makeRequirementService(array $overrides = []): ContractorDocumentRequirementService
179|    {
180|        return new ContractorDocumentRequirementService(
181|            $overrides['entityManager'] ?? $this->entityManagerWithConnection(),
182|            $overrides['requirementRepository'] ?? $this->createMock(ContractorDocumentRequirementRepository::class),
183|            $overrides['historyRepository'] ?? $this->createMock(ContractorDocumentRequirementHistoryRepository::class),
184|            $overrides['companyRequirementRepository'] ?? $this->createMock(ContractorProviderCompanyRequirementRepository::class),
185|        );
186|    }
187|
188|    protected function entityManagerWithConnection(): EntityManagerInterface
189|    {
190|        $connection = $this->createMock(Connection::class);
191|        $connection->method('fetchAllAssociative')->willReturn([]);
192|
193|        $repository = $this->createMock(\Doctrine\Persistence\ObjectRepository::class);
194|        $repository->method('findBy')->willReturn([]);
195|
196|        $entityManager = $this->createMock(EntityManagerInterface::class);
197|        $entityManager->method('getConnection')->willReturn($connection);
198|        $entityManager->method('getRepository')->willReturn($repository);
199|
200|        return $entityManager;
201|    }
202|
203|    /**
204|     * @param array<string, object> $overrides
205|     */
206|    protected function makeProviderCompanyService(array $overrides = []): ContractorProviderCompanyService
207|    {
208|        return new ContractorProviderCompanyService(
209|            $overrides['entityManager'] ?? $this->createMock(EntityManagerInterface::class),
210|            $overrides['companyRepository'] ?? $this->createMock(ContractorProviderCompanyRepository::class),
211|            $overrides['historyRepository'] ?? $this->createMock(ContractorProviderCompanyHistoryRepository::class),
212|            $overrides['companyRequirementRepository'] ?? $this->createMock(ContractorProviderCompanyRequirementRepository::class),
213|            $overrides['requirementRepository'] ?? $this->createMock(ContractorDocumentRequirementRepository::class),
214|            $overrides['companyMembersRepository'] ?? $this->createMock(CompanyMembersRepository::class),
215|            $overrides['documentStorage'] ?? $this->documentStorage(),
216|        );
217|    }
218|
219|    /**
220|     * @param array<string, object> $overrides
221|     */
222|    protected function makeMemberProvisionService(array $overrides = []): ContractorMemberServiceProvisionService
223|    {
224|        return new ContractorMemberServiceProvisionService(
225|            $overrides['entityManager'] ?? $this->createMock(EntityManagerInterface::class),
226|            $overrides['providerCompanyRepository'] ?? $this->createMock(ContractorProviderCompanyRepository::class),
227|            $overrides['providerMemberRepository'] ?? $this->createMock(ContractorProviderCompanyMemberRepository::class),
228|            $overrides['providerCompanyService'] ?? $this->makeProviderCompanyService(),
229|            $overrides['requirementService'] ?? $this->makeRequirementService(),
230|        );
231|    }
232|
233|    protected function containerWithUser(?User $user): ContainerInterface
234|    {
235|        $token = $this->createMock(TokenInterface::class);
236|        $token->method('getUser')->willReturn($user);
237|
238|        $tokenStorage = $this->createMock(TokenStorageInterface::class);
239|        $tokenStorage->method('getToken')->willReturn($user !== null ? $token : null);
240|
241|        return new class($tokenStorage) implements ContainerInterface {
242|            public function __construct(private TokenStorageInterface $tokenStorage)
243|            {
244|            }
245|
246|            public function get(string $id): mixed
247|            {
248|                if ($id === 'security.token_storage') {
249|                    return $this->tokenStorage;
250|                }
251|
252|                throw new \LogicException('Serviço não configurado no container de teste: ' . $id);
253|            }
254|
255|            public function has(string $id): bool
256|            {
257|                return $id === 'security.token_storage';
258|            }
259|        };
260|    }
261|
262|    /** @return array<string, mixed> */
263|    protected function decode(JsonResponse $response): array
264|    {
265|        $data = json_decode((string) $response->getContent(), true);
266|
267|        return is_array($data) ? $data : [];
268|    }
269|
270|    /**
271|     * @return array<string, mixed>
272|     */
273|    protected function validCompanyPayload(int $responsibleMemberId): array
274|    {
275|        return [
276|            'razao_social' => 'Empresa Parceira LTDA',
277|            'cnpj' => '12.345.678/0001-99',
278|            'tipo' => 'operacional',
279|            'responsavel_interno_member_id' => $responsibleMemberId,
280|            'contato' => [
281|                'nome' => 'João Contato',
282|                'email' => 'joao@parceira.com',
283|                'telefone' => '11999998888',
284|            ],
285|        ];
286|    }
287|
288|    /**
289|     * @return array<string, mixed>
290|     */
291|    protected function validRequirementPayload(): array
292|    {
293|        return [
294|            'titulo' => 'ASO Admissional',
295|            'categoria' => 'contrato',
296|            'aplicar_para' => ['operacional'],
297|            'validade_tipo' => 'sem_validade',
298|            'regra_bloqueio' => 'sem_bloqueio',
299|        ];
300|    }
301|}
302|

{"search_text": "function isSuperAdmin"}

File: src/Entity/User.php
Match lines: 1
412|    public function isSuperAdmin(): bool

File: src/Service/LLMRequestService.php
Match lines: 1
980|    private function isSuperAdminFreeUsage(array $options, array $context): bool

{"search_text": "function getRoles"}

File: .claude/agents/especialistas/symfony/security_specialist.md
Match lines: 1
109|    public function getRoles(): array

File: agents/especialistas/symfony/security_specialist.md
Match lines: 1
109|    public function getRoles(): array

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1075|    public function getRoles(int $companyId): JsonResponse

File: src/Controller/DecisionSystem/FlowTemplateController.php
Match lines: 1
4714|    public function getRoles(Request $request): JsonResponse

File: src/Controller/DecisionSystemController.php
Match lines: 1
12797|    public function getRoles(): JsonResponse

File: src/Entity/AiTrainingModule.php
Match lines: 1
229|    public function getRoles(): ?array

File: src/Entity/CompanyArea.php
Match lines: 1
511|    public function getRoles(): Collection

File: src/Entity/CostCenter.php
Match lines: 1
282|    public function getRoles(): Collection

File: src/Entity/SstEntity.php
Match lines: 1
120|    public function getRoles(): array

File: src/Entity/TrainingModule.php
Match lines: 1
377|    public function getRoles(): ?array

File: src/Entity/Trm/TrmPerson.php
Match lines: 1
251|    public function getRoleSet(): ?string { return $this->roleSet; }

File: src/Entity/User.php
Match lines: 1
312|    public function getRoles(): array

File: src/Repository/RolesBenefitsRepository.php
Match lines: 1
93|    public function getRolesWithBenefitsSummary(int $companyId): array

File: src/Service/Chat/ChatDataSourceService.php
Match lines: 8
1113|    private function getRolesHierarchicalLevels(): array
1129|    private function getRolesTypeContracts(): array
1145|    private function getRolesSalaryBenefits(): array
1161|    private function getRolesSalaryAdditionals(): array
1177|    private function getRolesMarketJobs(): array
1193|    private function getRolesMembersAtivos(): array
1243|    private function getRolesCompetencies(): array
1259|    private function getRolesCompanyActive(): array

{"file_path": "src/Entity/User.php", "start_line": 300, "end_line": 430}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 300-430
300|    public function getEmail(): ?string
301|    {
302|        return $this->email;
303|    }
304|
305|    public function setEmail(?string $email): self
306|    {
307|        $email = $email !== null ? strtolower(trim($email)) : null;
308|        $this->email = $email !== '' ? $email : null;
309|        return $this;
310|    }
311|
312|    public function getRoles(): array
313|    {
314|        $roles = array_unique($this->roles ?? []);
315|
316|        // access_control em ^/user exige ROLE_USER; candidatos às vezes só têm ROLE_CANDIDATE na BD → 403.
317|        if (\in_array(self::ROLE_CANDIDATE, $roles, true) && !\in_array(self::ROLE_USER, $roles, true)) {
318|            $roles[] = self::ROLE_USER;
319|        }
320|
321|        return $roles;
322|    }
323|
324|    public function setRoles(array $roles): self
325|    {
326|        $this->roles = $roles;
327|        return $this;
328|    }
329|
330|    public function getPassword(): string
331|    {
332|        return $this->password;
333|    }
334|
335|    public function setPassword(string $password): self
336|    {
337|        $this->password = $password;
338|        return $this;
339|    }
340|
341|    public function getSalt(): ?string
342|    {
343|        return null;
344|    }
345|
346|    public function eraseCredentials()
347|    {
348|        // If you store any temporary, sensitive data on the user, clear it here
349|    }
350|
351|    public function getUsername(): string
352|    {
353|        return $this->getUserIdentifier();
354|    }
355|
356|    public function getUserIdentifier(): string
357|    {
358|        $email = trim((string) $this->email);
359|        if ($email !== '') {
360|            return strtolower($email);
361|        }
362|
363|        $cpf = preg_replace('/\D+/', '', (string) ($this->profile?->getCpf() ?? ''));
364|        if ($cpf !== '') {
365|            return $cpf;
366|        }
367|
368|        return $this->id ? 'user:' . $this->id : 'user:new';
369|    }
370|
371|    public function getAuditIdentifier(): string
372|    {
373|        return $this->id ? 'user:' . $this->id : 'user:new';
374|    }
375|
376|    /**
377|     * A sessão contém uma versão serializada sem Profile. Sem esta comparação
378|     * por ID, senha e papéis, o Symfony compara getUserIdentifier(): a cópia da
379|     * sessão retorna user:<id>, enquanto a entidade recarregada retorna o CPF,
380|     * e encerra uma autenticação válida com "user has changed".
381|     */
382|    public function isEqualTo(UserInterface $user): bool
383|    {
384|        if (!$user instanceof self || $this->id === null || $this->id !== $user->getId()) {
385|            return false;
386|        }
387|
388|        if (!hash_equals((string) $this->password, (string) $user->getPassword())) {
389|            return false;
390|        }
391|
392|        $currentRoles = $this->getRoles();
393|        $refreshedRoles = $user->getRoles();
394|        sort($currentRoles);
395|        sort($refreshedRoles);
396|
397|        return $currentRoles === $refreshedRoles;
398|    }
399|
400|    public function getDisplayName(): string
401|    {
402|        $name = trim((string) $this->getFullName());
403|
404|        return $name !== '' ? $name : ($this->id ? 'Usuário #' . $this->id : 'Usuário');
405|    }
406|
407|    public function hasRole(string $role): bool
408|    {
409|        return in_array($role, $this->getRoles());
410|    }
411|
412|    public function isSuperAdmin(): bool
413|    {
414|        return $this->hasRole('ROLE_SUPER_ADMIN');
415|    }
416|
417|    public function getCompany(): ?Company
418|    {
419|        return $this->company;
420|    }
421|
422|    public function setCompany(?Company $company): self
423|    {
424|        $this->company = $company;
425|        return $this;
426|    }
427|
428|    public function getProfile(): ?Profile
429|    {
430|        return $this->profile;

{"search_text": "ROLE_SUPER_ADMIN|ROLE_MANAGER|private \\$roles|protected \\$roles", "file_patterns": ["src/Entity/User.php"], "use_perl_regexp": true}

File: src/Entity/User.php
Match lines: 6
55|    const ROLE_MANAGER = 'ROLE_MANAGER';
92|    private $roles = [];
414|        return $this->hasRole('ROLE_SUPER_ADMIN');
503|        return $this->hasRole('ROLE_MANAGER');
519|        return $this->hasRole('ROLE_MANAGER_VIEWER');
524|        return $this->hasRole('ROLE_MANAGER_GESTOR');

{"file_path": "src/Entity/User.php", "start_line": 1, "end_line": 130}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 1-130
1|<?php
2|
3|namespace App\Entity;
4|
5|use App\Repository\UserRepository;
6|use DateTime;
7|use DateTimeInterface;
8|use Doctrine\Common\Collections\ArrayCollection;
9|use Doctrine\Common\Collections\Collection;
10|use Doctrine\ORM\Mapping as ORM;
11|use Symfony\Bridge\Doctrine\Validator\Constraints\UniqueEntity;
12|use Symfony\Component\HttpFoundation\File\UploadedFile;
13|use Symfony\Component\Security\Core\User\EquatableInterface;
14|use Symfony\Component\Security\Core\User\PasswordAuthenticatedUserInterface;
15|use Symfony\Component\Security\Core\User\UserInterface;
16|use Symfony\Component\Serializer\Annotation\Groups;
17|/**
18| * REGRAS DE IDENTIDADE E CONTATO:
19| *
20| * - User::email é opcional somente para membros cadastrados pelo acesso imediato.
21| * - Um usuário sem email autentica pelo CPF normalizado de User::profile.
22| * - Email não é uma chave universal de usuário. Para localizar login, use
23| *   UserRepository::findOneByLoginIdentifier(); para relações internas, use User::id.
24| * - Nunca use getUserIdentifier() como nome, email de contato ou valor de auditoria:
25| *   ele pode retornar CPF. Use getDisplayName(), getEmail() com guarda de null ou
26| *   getAuditIdentifier(), respectivamente.
27| * - Todo envio deve ignorar getEmail() null/vazio sem impedir o restante do fluxo.
28| * - Permissões administrativas concedidas a um membro não tornam o email obrigatório.
29| * - Há CPFs duplicados legados no banco. O cadastro imediato deve consultar
30| *   UserRepository::countUsersByCpf() e nunca criar uma nova duplicidade.
31| *
32| * @ORM\Entity(repositoryClass=UserRepository::class)
33| * @UniqueEntity(fields={"email"}, message="There is already an account with this email")
34| */
35|class User implements UserInterface, PasswordAuthenticatedUserInterface, EquatableInterface, \JsonSerializable
36|{
37|    /**
38|     * User Generico  >> ROLE_USER
39|     * Registro desde Lead registration >> ROLE_LEAD
40|     * Participa en proceso selectivo  >> ROLE_CANDIDATE
41|     * Participa en proceso de treinamento  >> ROLE_TRAINING
42|     * Participa en Pesquisa  >> ROLE_SURVEY
43|     * Evaluador  >> ROLE_REVIEWER
44|     */
45|    //constant('EVALUATOR_STATUS_DISABLED', e.user)
46|    const EVALUATOR_STATUS_DISABLED = 0; //constant('EVALUATOR_REQUIRED_VALIDATION', monitoredEvaluationSchedule.admin)
47|    const EVALUATOR_STATUS_ENABLED = 1;
48|    const EVALUATOR_REQUIRED_VALIDATION = 2; //constant('EVALUATOR_REQUIRED_VALIDATION', u)
49|    const EVALUATOR_NOT_REQUIRED_VALIDATION = 3;
50|    const EVALUATOR_ZAP_SIGN_PENDING = 4;
51|
52|    const ROLE_SURVEY = 'ROLE_SURVEY';
53|    const ROLE_LEAD = 'ROLE_LEAD';
54|    const ROLE_COMPANY_TRIAL = 'ROLE_COMPANY_TRIAL';
55|    const ROLE_MANAGER = 'ROLE_MANAGER';
56|    const ROLE_USER = 'ROLE_USER';
57|    const ROLE_CANDIDATE = 'ROLE_CANDIDATE';
58|    const ROLE_TRAINING = 'ROLE_TRAINING';
59|    const ROLE_REVIEWER = 'ROLE_REVIEWER';
60|
61|    /**
62|     * CEO / CFO / diretor financeiro — camada financeira opcional (alerta Concentração, §3.4).
63|     */
64|    const ROLE_METAHUMAN_CLIENT_STRATEGIC_FINANCE = 'ROLE_METAHUMAN_CLIENT_STRATEGIC_FINANCE';
65|
66|    /**
67|     * Exportação de memo jurídico §8.9 — Comitê 6 assédio (Model v3).
68|     */
69|    const ROLE_METAHUMAN_HARASSMENT_LEGAL_MEMO_EXPORT = 'ROLE_METAHUMAN_HARASSMENT_LEGAL_MEMO_EXPORT';
70|
71|    /**
72|     * @ORM\Id
73|     * @ORM\GeneratedValue
74|     * @ORM\Column(type="integer")
75|     * @Groups({"user_id"})
76|     */
77|    private $id;
78|
79|    /**
80|     * @ORM\Column(type="string", length=180, unique=true, nullable=true)
81|     */
82|    private $email;
83|
84|    /**
85|     * @ORM\Column(type="string", length=180, nullable=true)
86|     */
87|    private $avatar;
88|
89|    /**
90|     * @ORM\Column(type="json")
91|     */
92|    private $roles = [];
93|
94|    /**
95|     * @var string The hashed password
96|     * @ORM\Column(type="string")
97|     */
98|    private $password;
99|
100|    /**
101|     * @var string
102|     * @ORM\Column(type="boolean", nullable=true)
103|     */
104|    private $isClientUser;
105|    /**
106|     * @var string
107|     * @ORM\Column(type="boolean", nullable=true)
108|     */
109|    private $isGlobalUser;
110|    /**
111|     * @var string
112|     * @ORM\Column(type="string", nullable=true)
113|     */
114|    private $layout_profile;
115|    /**
116|     * @var string
117|     * @ORM\Column(type="boolean", nullable=true)
118|     */
119|    private $enabled;
120|
121|    /**
122|     * @var datetime
123|     * @ORM\Column(type="datetime", nullable=true)
124|     */
125|    private $last_login;
126|
127|    /**
128|     * @var string
129|     * @ORM\Column(type="boolean", nullable=true)
130|     */

{"search_text": "resolveContractorPermissionTag"}

File: src/Controller/Contractor/EmpresasParceirasController.php
Match lines: 4
607|        return $this->resolveContractorPermissionTag() instanceof PermissionTag;
632|        $tag = $this->resolveContractorPermissionTag();
660|        $tag = $this->resolveContractorPermissionTag();
674|    private function resolveContractorPermissionTag(): ?PermissionTag

{"search_text": "EmpresasParceirasController("}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php
Match lines: 1
282|        $controller = new EmpresasParceirasController(

{"search_text": "function getPermissionTag"}

File: src/Command/TestMembrosEsocialPermissaoCommand.php
Match lines: 1
149|    private function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag

File: src/Command/TestPesquisaEstruturalPermissaoCommand.php
Match lines: 1
214|    private function getPermissionTagName(CompanyMembers $companyMember, Product $product): string

File: src/Controller/Api/CompanyApiController.php
Match lines: 1
1289|    public function getPermissionTags(): JsonResponse

File: src/Entity/PermissionTagSuggestion.php
Match lines: 1
52|    public function getPermissionTag(): PermissionTag

File: src/Entity/TagProductPermissions.php
Match lines: 1
54|    public function getPermissionTag(): ?PermissionTag

File: src/Service/FieldExtractorService.php
Match lines: 2
195|    public function getPermissionTagUserFields(PermissionTag $permissionTagUser) {
217|    public function getPermissionTagsFields(array $permissionTags) {

File: src/Service/PermissionTabService.php
Match lines: 1
308|    public function getPermissionTags(): array

File: src/Service/PermissionTagByMemberService.php
Match lines: 2
173|    public function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
338|    public function getPermissionTagGestor(): ?PermissionTag

File: src/Twig/GlobalPermissionExtension.php
Match lines: 1
96|    public function getPermissionTag()

File: src/Twig/MemberPermissionExtension.php
Match lines: 1
1555|    public function getPermissionTagName(string $productSlug): string

File: templates/permissions_tags/member_tab_permissions.html.twig
Match lines: 2
1019|    function getPermissionTagEditWrapper() {
1451|        function getPermissionTagVisual(name, fallbackBackgroundColor, fallbackLetterColor) {

{"file_path": "src/Service/PermissionTagByMemberService.php"}

File: src/Service/PermissionTagByMemberService.php (Total lines: 548)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|namespace App\Service;
4|
5|use Doctrine\ORM\EntityManagerInterface;
6|use Doctrine\ORM\EntityNotFoundException;
7|
8|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
9|
10|use App\Entity\PermissionTagByMember;
11|use App\Entity\Company;
12|use App\Entity\CompanyMembers;
13|use App\Entity\Product;
14|use App\Entity\PermissionTag;
15|use App\Entity\User;
16|use App\Entity\CompanyTeam;
17|use App\Repository\CompanyMembersRepository;
18|
19|class PermissionTagByMemberService extends AbstractController
20|{
21|    private $entityManager;
22|    private string $ssmaParentProductSlug;
23|
24|    public function __construct(EntityManagerInterface $entityManager, string $ssmaParentProductSlug = 'saude-e-seguranca')
25|    {
26|        $this->entityManager = $entityManager;
27|        $this->ssmaParentProductSlug = $ssmaParentProductSlug;
28|    }
29|
30|    /**
31|     * Cria um novo PermissionTagByMember e persiste no banco de dados.
32|     *
33|     * @param int $companyMemberID
34|     * @param int $productID
35|     * @param int $tagID
36|     * @return PermissionTagByMember Retorna o objeto recém-criado.
37|     */
38|    public function createPermissionTagByMember(int $companyMemberID, int $productID, int $tagID): PermissionTagByMember
39|    {
40|        // Criação do novo objeto PermissionTagByMember
41|        $permissionTagByMember = new PermissionTagByMember();
42|
43|        // Preenchendo as propriedades do objeto
44|        $permissionTagByMember->setCompanyMemberID($companyMemberID);
45|        $permissionTagByMember->setProductID($productID);
46|        $permissionTagByMember->setTagID($tagID);
47|
48|        // Persistir o objeto no banco de dados
49|        $this->entityManager->persist($permissionTagByMember);
50|        $this->entityManager->flush(); // Salva a entidade no banco
51|
52|        // Retornando o objeto recém-criado
53|        return $permissionTagByMember;
54|    }
55|
56|    /**
57|     * Exclui um PermissionTagByMember pelo ID.
58|     *
59|     * @param int $permissionTagID ID do PermissionTagByMember a ser excluído.
60|     * @return bool Retorna true se a exclusão for bem-sucedida, false caso contrário.
61|     */
62|    public function deletePermissionTagByMember(int $permissionTagID): bool
63|    {
64|        // Procurar pelo PermissionTagByMember usando o ID
65|        $permissionTag = $this->entityManager->getRepository(PermissionTagByMember::class)->find($permissionTagID);
66|
67|        // Verifica se o objeto foi encontrado
68|        if (!$permissionTag) {
69|            // Lança exceção caso o PermissionTag não seja encontrado
70|            throw new EntityNotFoundException('Permission tag with ID ' . $permissionTagID . ' not found.');
71|        }
72|
73|        // Iniciar uma transação para garantir que a exclusão seja atômica
74|        $this->entityManager->beginTransaction();
75|
76|        try {
77|            // Remove o PermissionTagByMember
78|            $this->entityManager->remove($permissionTag);
79|            $this->entityManager->flush(); // Aplica a remoção no banco de dados
80|
81|            // Commit da transação
82|            $this->entityManager->commit();
83|
84|            return true;
85|        } catch (\Exception $e) {
86|            // Em caso de erro, desfaz as alterações e lança o erro
87|            $this->entityManager->rollback();
88|            throw $e;  // Re-lança a exceção para ser tratada em outro lugar
89|        }
90|    }
91|
92|    /**
93|     * Retorna o tagID associado a um membro da empresa para um produto específico.
94|     *
95|     * @param int $companyMemberID ID do membro da empresa.
96|     * @param int $productID ID do produto.
97|     * @return int|null Retorna o tagID associado ao membro e ao produto, ou null se não houver relação.
98|     */
99|    public function getTagIDByMemberAndProduct(int $companyMemberID, int $productID): ?int
100|    {
101|        // Consultar a tabela PermissionTagByMember para encontrar a relação
102|        $permissionTag = $this->entityManager->getRepository(PermissionTagByMember::class)
103|            ->findOneBy([
104|                'companyMemberID' => $companyMemberID,
105|                'productID' => $productID
106|            ]);
107|
108|        // Se não encontrar nenhuma relação, retorna null
109|        if (!$permissionTag) {
110|            return null;
111|        }
112|
113|        return $permissionTag->getTagID();
114|    }
115|
116|    public function getProductPermission(User $user, string $productSlug): ?PermissionTag
117|    {
118|        // Primeiro, buscar o produto pela slug
119|        $product = $this->entityManager->getRepository(Product::class)
120|            ->findOneBy(['slug' => $productSlug]);
121|
122|        if (!$product) {
123|            if (!str_starts_with($productSlug, 'ssma-')) {
124|                return null;
125|            }
126|
127|            $product = $this->entityManager->getRepository(Product::class)
128|                ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
129|
130|            if (!$product) {
131|                return null;
132|            }
133|        }
134|
135|        // Buscar o CompanyMember do usuário
136|        $companyMember = $this->entityManager->getRepository(CompanyMembers::class)
137|            ->findOneBy(['user' => $user, 'company' => $user->getCompany()]);
138|
139|        if (!$companyMember) {
140|            return null;
141|        }
142|
143|        // Buscar a permissão através da tabela PermissionTagByMember
144|        $permissionTagByMember = $this->entityManager->getRepository(PermissionTagByMember::class)
145|            ->findOneBy([
146|                'companyMemberID' => $companyMember->getId(),
147|                'productID' => $product->getId()
148|            ]);
149|
150|        if (!$permissionTagByMember) {
151|            if (str_starts_with($productSlug, 'ssma-')) {
152|                $parentPermission = $this->getProductPermission($user, $this->ssmaParentProductSlug);
153|                if ($parentPermission instanceof PermissionTag) {
154|                    return $parentPermission;
155|                }
156|            }
157|
158|            // Se não tem permissão customizada, usar a permissão global
159|            $globalPermissionTagId = $companyMember->getGlobalPermissionTag();
160|            if ($globalPermissionTagId) {
161|                return $this->entityManager->getRepository(PermissionTag::class)->find($globalPermissionTagId);
162|            }
163|            
164|            return null;
165|        }
166|
167|        // Buscar a tag de permissão
168|        return $this->entityManager->getRepository(PermissionTag::class)
169|            ->find($permissionTagByMember->getTagID());
170|    }
171|
172|
173|    public function getPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
174|    {
175|        $ptbmRepo = $this->entityManager->getRepository(PermissionTagByMember::class);
176|        $tagRepo  = $this->entityManager->getRepository(PermissionTag::class);
177|
178|        // getGlobalPermissionTag() devolve ?PermissionTag (objecto Doctrine), extraímos o ID aqui
179|        $globalTag   = $companyMember->getGlobalPermissionTag();
180|        $globalTagId = $globalTag instanceof PermissionTag ? (int) $globalTag->getId() : null;
181|
182|        // 1. Registo explícito no produto específico (atribuído via "Editar Tags" pelo gestor)
183|        $ptbm = $ptbmRepo->findOneBy([
184|            'companyMemberID' => $companyMember->getId(),
185|            'productID'       => $product->getId(),
186|        ]);
187|
188|        if ($ptbm) {
189|            $storedTag = $tagRepo->find($ptbm->getTagID());
190|
191|            if ($storedTag instanceof PermissionTag) {
192|                if (!str_starts_with((string) $product->getSlug(), 'ssma-')) {
193|                    return $storedTag;
194|                }
195|
196|                // Tag de gestão no PTBM do produto prevalece sobre global Membro/Inspetor.
197|                // Regressão Aura: Gestor Administrador na matriz SSMA + global Membro + stored==parent
198|                // era tratado como auto-propagação e descartava a tag de gestão.
199|                if (in_array((string) $storedTag->getName(), [
200|                    'Gestor Administrador',
201|                    'Gestor de Equipe',
202|                    'Supervisor de Equipe',
203|                    'Supervisor',
204|                ], true)) {
205|                    return $storedTag;
206|                }
207|
208|                // Produtos SSMA: detectar se o registo foi auto-criado (cópia da tag do produto-pai)
209|                // ou se foi explicitamente atribuído pelo gestor.
210|                // Se a tag do produto e a tag do produto-pai (saude-e-seguranca) são iguais
211|                // e ambas diferem da tag global actual, foi auto-propagação → usa tag global.
212|                $parentTagId = $this->getTagIDByMemberAndProduct(
213|                    $companyMember->getId(),
214|                    $this->getSsmaParentProductId()
215|                );
216|
217|                $storedId           = (int) $storedTag->getId();
218|                $storedMatchesParent = $parentTagId !== null && $storedId === (int) $parentTagId;
219|                $parentMatchesGlobal = $parentTagId !== null && $globalTagId !== null && (int) $parentTagId === $globalTagId;
220|
221|                if ($globalTagId !== null && $storedId !== $globalTagId) {
222|                    // Stored difere da global — verificar se é assignment explícito ou propagação automática.
223|                    //
224|                    // É explícito (respeitar) quando:
225|                    //   stored != parent  →  admin atribuiu este produto de forma diferente do pai
226|                    // É automático (preferir global) quando:
227|                    //   stored == parent  →  propagação do pai, que por sua vez diverge da global
228|                    //   OU não há parent PTBM (stored foi auto-criado a partir de global antigo)
229|                    $isExplicitAssignment = $parentTagId !== null && $storedId !== (int) $parentTagId;
230|
231|                    if (!$isExplicitAssignment) {
232|                        // Auto-propagado ou sem pai → usa tag global actual
233|                        $resolvedGlobal = $tagRepo->find($globalTagId);
234|                        if ($resolvedGlobal instanceof PermissionTag) {
235|                            return $resolvedGlobal;
236|                        }
237|                    }
238|                    // Se é explícito: respeita o stored ($isExplicitAssignment = true)
239|                }
240|
241|                return $storedTag;
242|            }
243|        }
244|
245|        // 2. Sem registo explícito: herdar dinamicamente do produto-pai (ssma-* → saude-e-seguranca)
246|        if (str_starts_with((string) $product->getSlug(), 'ssma-')) {
247|            $parentTag = $this->getSsmaParentPermissionTag($companyMember, $product);
248|            if ($parentTag instanceof PermissionTag) {
249|                return $parentTag;
250|            }
251|        }
252|
253|        // 3. Fallback: tag global do membro
254|        if ($globalTagId !== null) {
255|            $resolvedGlobal = $tagRepo->find($globalTagId);
256|            if ($resolvedGlobal instanceof PermissionTag) {
257|                return $resolvedGlobal;
258|            }
259|        }
260|
261|        // 4. Último recurso: tag "Membro"
262|        return $tagRepo->findOneBy(['name' => 'Membro']);
263|    }
264|
265|    /**
266|     * ID do produto-pai SSMA (saude-e-seguranca) em cache local por request.
267|     */
268|    private ?int $ssmaParentProductId = null;
269|
270|    private function getSsmaParentProductId(): int
271|    {
272|        if ($this->ssmaParentProductId === null) {
273|            $p = $this->entityManager->getRepository(Product::class)->findOneBy(['slug' => 'saude-e-seguranca']);
274|            $this->ssmaParentProductId = $p ? (int) $p->getId() : 0;
275|        }
276|
277|        return $this->ssmaParentProductId;
278|    }
279|
280|    private function getSsmaParentPermissionTag(CompanyMembers $companyMember, Product $product): ?PermissionTag
281|    {
282|        $slug = (string) $product->getSlug();
283|        if (!str_starts_with($slug, 'ssma-')) {
284|            return null;
285|        }
286|
287|        $parentProduct = $this->entityManager->getRepository(Product::class)
288|            ->findOneBy(['slug' => $this->ssmaParentProductSlug]);
289|        if (!$parentProduct instanceof Product || $parentProduct->getId() === $product->getId()) {
290|            return null;
291|        }
292|
293|        $parentPermissionTagId = $this->getTagIDByMemberAndProduct($companyMember->getId(), $parentProduct->getId());
294|        if (!$parentPermissionTagId) {
295|            return null;
296|        }
297|
298|        return $this->entityManager->getRepository(PermissionTag::class)->find($parentPermissionTagId);
299|    }
300|
301|    public function getGlobalPermissionTag(CompanyMembers $companyMember): ?PermissionTag
302|    {
303|        $repo  = $this->entityManager->getRepository(PermissionTag::class);
304|        $tagId = $companyMember->getGlobalPermissionTag();
305|
306|        $tag = $tagId
307|            ? $repo->find($tagId)
308|            : null;
309|
310|        if (! $tag) {
311|            $tag = $repo->findOneBy(['name' => 'Membro']);
312|
313|            if ($tag) {
314|                $companyMember->setGlobalPermissionTag($tag);
315|                $this->entityManager->flush();
316|            }
317|        }
318|
319|        return $tag;
320|    }
321|    
322|    public function getPermissionsByMember(CompanyMembers $companyMember): array
323|    {
324|        $customPermissionTags = $this->entityManager->getRepository(PermissionTagByMember::class)->findBy(['companyMemberID' => $companyMember->getId()]);
325|
326|        return $customPermissionTags;
327|    }
328|
329|    public function getCompanyMember(User $user, Company $company): ?CompanyMembers
330|    {
331|        return $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
332|            'company' => $company,
333|            'user' => $user,
334|            'isRemoved' => 0,
335|        ]);
336|    }
337|
338|    public function getPermissionTagGestor(): ?PermissionTag
339|    {
340|        $permissionTag = $this->entityManager->getRepository(PermissionTag::class)->findOneBy(['name' => 'Gestor Administrador']);
341|        return $permissionTag;
342|    }
343|
344|    public function getUserTeamMemberIds(CompanyMembers $companyMember, Company $company): array
345|    {
346|        // Obtém os times do usuário como string (Exemplo: "82,86")
347|        $teamsString = trim((string) ($companyMember->getTeams() ?? ''));
348|
349|        // Sem times definidos: apenas o próprio utilizador compõe o escopo.
350|        if ($teamsString === '') {
351|            $uid = $companyMember->getUser()?->getId();
352|
353|            return $uid !== null ? [(int) $uid] : [];
354|        }
355|
356|        // Converte a string em IDs de equipa e ignora segmentos vazios (evita LIKE inválido ",%").
357|        $teamsArray = array_values(array_filter(array_map('trim', explode(',', $teamsString)), static fn (string $t): bool => $t !== ''));
358|        if ($teamsArray === []) {
359|            $uid = $companyMember->getUser()?->getId();
360|
361|            return $uid !== null ? [(int) $uid] : [];
362|        }
363|
364|        // Remove o dd() e melhorar a query
365|        $query = $this->entityManager->createQueryBuilder()
366|            ->select('cm')
367|            ->from(CompanyMembers::class, 'cm')
368|            ->where('cm.company = :company')
369|            ->andWhere('cm.isRemoved = 0') // Apenas membros ativos
370|            ->setParameter('company', $company);
371|
372|        // 🔧 MELHOR LÓGICA: Para cada time, busca quem tem esse time
373|        $orConditions = [];
374|        foreach ($teamsArray as $index => $teamId) {
375|            $paramName = ':team_' . $index;
376|            
377|            // Busca exata por ID do time (no início, meio ou fim da string)
378|            $orConditions[] = $query->expr()->orX(
379|                $query->expr()->like('cm.teams', $paramName . '_start'), // Começa com o team
380|                $query->expr()->like('cm.teams', $paramName . '_middle'), // Tem o team no meio
381|                $query->expr()->eq('cm.teams', $paramName . '_exact') // É exatamente o team
382|            );
383|            
384|            // Define os parâmetros para as diferentes posições
385|            $query->setParameter($paramName . '_start', $teamId . ',%');     // "82,%"
386|            $query->setParameter($paramName . '_middle', '%,' . $teamId . ',%'); // "%,82,%"
387|            $query->setParameter($paramName . '_exact', $teamId);           // "82"
388|            
389|            // Também para o final da string
390|            $orConditions[] = $query->expr()->like('cm.teams', $paramName . '_end');
391|            $query->setParameter($paramName . '_end', '%,' . $teamId);      // "%,82"
392|        }
393|
394|        if (!empty($orConditions)) {
395|            $query->andWhere($query->expr()->orX(...$orConditions));
396|        }
397|
398|        // Executa a consulta
399|        $companyTeamMembers = $query->getQuery()->getResult();
400|        
401|        // Obtém os usuários associados aos membros encontrados
402|        $userTeamIds = [];
403|        foreach ($companyTeamMembers as $member) {
404|            if ($member->getUser()) {
405|                $userTeamIds[] = (int) $member->getUser()->getId();
406|            }
407|        }
408|
409|        return array_values(array_unique(array_filter($userTeamIds, static fn (int $id): bool => $id > 0)));
410|    }
411|
412|    public function getTeamInvitationIds(CompanyMembers $companyMember, Company $company): array
413|    {
414|        // Obtém os times do usuário como string (Exemplo: "4,6")
415|        $teamsString = $companyMember->getTeams();
416|
417|        // Retorna um array vazio se não houver times
418|        if (empty($teamsString)) {
419|            return [];
420|        }
421|
422|        // Converte a string em um array de times
423|        $teamsArray = array_map('trim', explode(',', $teamsString));
424|
425|        // Cria a consulta para buscar membros da empresa que pertencem aos mesmos times
426|        $query = $this->entityManager->createQueryBuilder()
427|            ->select('cm')
428|            ->from(CompanyMembers::class, 'cm')
429|            ->where('cm.company = :company')
430|            ->setParameter('company', $company);
431|
432|        // Adiciona condições para buscar os times
433|        if (!empty($teamsArray)) {
434|            $orConditions = [];
435|
436|            foreach ($teamsArray as $index => $team) {
437|                $paramName = ':team_' . $index;
438|                $orConditions[] = $query->expr()->like('cm.teams', $paramName);
439|                $query->setParameter($paramName, '%' . $team . '%');
440|            }
441|
442|            $query->andWhere($query->expr()->orX(...$orConditions));
443|        }
444|
445|        // Executa a consulta e obtém os membros da empresa que pertencem aos mesmos times
446|        $companyTeamMembers = $query->getQuery()->getResult();
447|
448|        // Obtém os IDs dos convites associados aos membros encontrados
449|        $invitationIds = array_map(
450|            fn($member) => $member->getInvitation() ? $member->getInvitation()->getId() : null, 
451|            $companyTeamMembers
452|        );
453|
454|        // Remove valores nulos do array final
455|        return array_filter($invitationIds);
456|    }
457|
458|    public function getCompanyMemberTemsIds(CompanyMembers $companyMember): array
459|    {
460|        // Obtém os times do usuário como string (Exemplo: "4,6")
461|        $teamsString = $companyMember->getTeams();
462|    
463|        // Retorna um array vazio se não houver times
464|        if (empty($teamsString)) {
465|            return [];
466|        }
467|    
468|        // Converte a string em um array de times
469|        $teamsArray = array_map('trim', explode(',', $teamsString));
470|
471|        return $teamsArray;
472|    }
473|
474|    public function getCompanyMemberTemsNames(CompanyMembers $companyMember, Company $company): array
475|    {
476|        try {
477|            // Pega os IDs dos times do membro
478|            $teamIds = $this->getCompanyMemberTemsIds($companyMember);
479|            
480|            if (empty($teamIds)) {
481|                return ["Não informado"];
482|            }
483|
484|            // Busca os times usando o repositório
485|            $teamRepository = $this->entityManager->getRepository(CompanyTeam::class);
486|            $teams = $teamRepository->findBy(['id' => $teamIds, 'company' => $company]);
487|            
488|            // Cria array com os nomes dos times
489|            $teamNames = [];
490|            foreach ($teams as $team) {
491|                $teamNames[] = $team->getName();
492|            }
493|            
494|            return $teamNames;
495|            
496|        } catch (\Exception $e) {
497|            // Log do erro se necessário
498|            return ["Erro ao carregar equipes"];
499|        }
500|    }

Note: Results truncated to 500 lines. Please narrow your line range.

{"comments": [{"content": "O mock de `ObjectRepository` não configura `findOneBy`, então ele retorna `null` por padrão. No controller atual, toda action do arquivo passa primeiro por `canManage()`/`canAccess()` → `resolveContractorPermissionTag()`, que faz `getRepository(CompanyMembers::class)->findOneBy(...)`; com retorno `null`, o método devolve `null` e o guard responde **403**. Como os testes deste arquivo esperam 200/400/409/422 (fluxos autorizados), esta mudança apenas converte o antigo erro `Call to a member function findOneBy() on null` em respostas 403 — as asserções de status continuam falhando e o objetivo do PR (fazer o arquivo passar) não é atingido. Além disso, o mesmo repo é usado para `CompanyMembers` e `Product`; mesmo que `findOneBy` fosse configurado para retornar uma entidade, a segunda consulta (`Product`) exigiria um retorno diferente. Sugestão: configurar `getRepository` de forma consciente da classe (ex.: `willReturnMap` com `CompanyMembers`/`Product`) retornando entidades válidas e fazer o mock de `PermissionTagByMemberService` devolver um `PermissionTag`, ou usar usuário fixture com `ROLE_MANAGER` para que `isContractorPlatformAdmin()` libere o fluxo autorizado que as asserções esperam.", "existing_code": "        $entityManager = $this->createMock(EntityManagerInterface::class);\n        $entityManager->method('getRepository')->willReturn(\n            $this->createMock(ObjectRepository::class)\n        );", "category": "test", "severity": "high", "path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php"}]}

(async)

{"state": "DONE"}

{"file_path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php"}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasControllerTest.php (Total lines: 299)
IS_TRUNCATED: false
LINE_RANGE: 1-299
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\EmpresasParceiras;
6|
7|use App\Controller\Contractor\EmpresasParceirasController;
8|use App\Entity\Contractor\ContractorDocumentRequirementHistory;
9|use App\Entity\Contractor\ContractorProviderCompanyHistory;
10|use App\Repository\Contractor\ContractorDocumentRequirementRepository;
11|use App\Repository\Contractor\ContractorProviderCompanyRequirementRepository;
12|use App\Service\PermissionTagByMemberService;
13|use Doctrine\ORM\EntityManagerInterface;
14|use Doctrine\Persistence\ObjectRepository;
15|use Symfony\Component\HttpFoundation\Request;
16|
17|/**
18| * Testes de efeito colateral do EmpresasParceirasController com services reais
19| * e dependências mockadas (classes final não são mockáveis no PHPUnit).
20| */
21|final class EmpresasParceirasControllerTest extends EmpresasParceirasTestCase
22|{
23|    public function testRequirementSavePersistsAndReturnsRequirement(): void
24|    {
25|        $company = $this->company(1);
26|        $user = $this->user(10, $company);
27|        $payload = $this->validRequirementPayload();
28|
29|        $entityManager = $this->entityManagerWithConnection();
30|        $entityManager->expects(self::atLeastOnce())->method('persist');
31|        $entityManager->expects(self::once())->method('flush');
32|
33|        $response = $this->controller(
34|            $this->makeRequirementService(['entityManager' => $entityManager]),
35|            $this->makeProviderCompanyService(),
36|            $user,
37|        )->requirementSave($this->jsonRequest($payload));
38|
39|        self::assertSame(200, $response->getStatusCode());
40|        $data = $this->decode($response);
41|        self::assertTrue($data['success']);
42|        self::assertSame('ASO Admissional', $data['requirement']['titulo']);
43|    }
44|
45|    public function testRequirementSaveReturns422OnValidationError(): void
46|    {
47|        $response = $this->controller(
48|            $this->makeRequirementService(),
49|            $this->makeProviderCompanyService(),
50|            $this->user(10, $this->company(1)),
51|        )->requirementSave($this->jsonRequest(['categoria' => 'contrato']));
52|
53|        self::assertSame(422, $response->getStatusCode());
54|        self::assertSame('Título é obrigatório.', $this->decode($response)['message']);
55|    }
56|
57|    public function testRequirementSaveRejectsInvalidPayload(): void
58|    {
59|        $entityManager = $this->createMock(EntityManagerInterface::class);
60|        $entityManager->expects(self::never())->method('flush');
61|
62|        $response = $this->controller(
63|            $this->makeRequirementService(['entityManager' => $entityManager]),
64|            $this->makeProviderCompanyService(),
65|            $this->user(10, $this->company(1)),
66|        )->requirementSave(Request::create('/', 'POST', [], [], [], [], 'not-json'));
67|
68|        self::assertSame(400, $response->getStatusCode());
69|    }
70|
71|    public function testRequirementDeleteReturns409WhenLinked(): void
72|    {
73|        $company = $this->company(1);
74|        $requirement = $this->documentRequirement(7, $company);
75|
76|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
77|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
78|
79|        $companyRequirementRepository = $this->createMock(ContractorProviderCompanyRequirementRepository::class);
80|        $companyRequirementRepository->method('countByRequirement')->willReturn(2);
81|
82|        $entityManager = $this->createMock(EntityManagerInterface::class);
83|        $entityManager->expects(self::never())->method('remove');
84|
85|        $response = $this->controller(
86|            $this->makeRequirementService([
87|                'entityManager' => $entityManager,
88|                'requirementRepository' => $requirementRepository,
89|                'companyRequirementRepository' => $companyRequirementRepository,
90|            ]),
91|            $this->makeProviderCompanyService(),
92|            $this->user(10, $company),
93|        )->requirementDelete(7, $this->jsonRequest(['motivo' => 'teste']));
94|
95|        self::assertSame(409, $response->getStatusCode());
96|        self::assertSame(2, $this->decode($response)['linked_count']);
97|    }
98|
99|    public function testRequirementDeleteRemovesWhenNotLinked(): void
100|    {
101|        $company = $this->company(1);
102|        $requirement = $this->documentRequirement(7, $company);
103|
104|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
105|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
106|
107|        $companyRequirementRepository = $this->createMock(ContractorProviderCompanyRequirementRepository::class);
108|        $companyRequirementRepository->method('countByRequirement')->willReturn(0);
109|
110|        $entityManager = $this->createMock(EntityManagerInterface::class);
111|        $entityManager->expects(self::once())->method('persist')->with(self::isInstanceOf(ContractorDocumentRequirementHistory::class));
112|        $entityManager->expects(self::exactly(2))->method('flush');
113|        $entityManager->expects(self::once())->method('remove')->with($requirement);
114|
115|        $response = $this->controller(
116|            $this->makeRequirementService([
117|                'entityManager' => $entityManager,
118|                'requirementRepository' => $requirementRepository,
119|                'companyRequirementRepository' => $companyRequirementRepository,
120|            ]),
121|            $this->makeProviderCompanyService(),
122|            $this->user(10, $company),
123|        )->requirementDelete(7, $this->jsonRequest(['motivo' => 'motivo teste']));
124|
125|        self::assertSame(200, $response->getStatusCode());
126|        self::assertTrue($this->decode($response)['success']);
127|    }
128|
129|    public function testRequirementSetActiveRequiresActiveField(): void
130|    {
131|        $company = $this->company(1);
132|        $requirement = $this->documentRequirement(3, $company);
133|
134|        $requirementRepository = $this->createMock(ContractorDocumentRequirementRepository::class);
135|        $requirementRepository->method('findOneByCompanyAndId')->willReturn($requirement);
136|
137|        $entityManager = $this->entityManagerWithConnection();
138|        $entityManager->expects(self::never())->method('flush');
139|
140|        $response = $this->controller(
141|            $this->makeRequirementService([
142|                'entityManager' => $entityManager,
143|                'requirementRepository' => $requirementRepository,
144|            ]),
145|            $this->makeProviderCompanyService(),
146|            $this->user(10, $company),
147|        )->requirementSetActive(3, $this->jsonRequest(['active' => 'invalido']));
148|
149|        self::assertSame(422, $response->getStatusCode());
150|    }
151|
152|    public function testCompanySavePersistsAndReturnsCompany(): void
153|    {
154|        $company = $this->company(1);
155|        $user = $this->user(10, $company);
156|        $member = $this->companyMember(20, $company);
157|        $payload = $this->validCompanyPayload(20);
158|
159|        $companyMembersRepository = $this->createMock(\App\Repository\CompanyMembersRepository::class);
160|        $companyMembersRepository->method('findOneBy')->willReturn($member);
161|
162|        $entityManager = $this->createMock(EntityManagerInterface::class);
163|        $entityManager->expects(self::atLeastOnce())->method('persist');
164|        $entityManager->expects(self::once())->method('flush');
165|
166|        $response = $this->controller(
167|            $this->makeRequirementService(),
168|            $this->makeProviderCompanyService([
169|                'entityManager' => $entityManager,
170|                'companyMembersRepository' => $companyMembersRepository,
171|            ]),
172|            $user,
173|        )->companySave($this->jsonRequest($payload));
174|
175|        self::assertSame(200, $response->getStatusCode());
176|        self::assertSame('Empresa Parceira LTDA', $this->decode($response)['company']['razao_social']);
177|    }
178|
179|    public function testCompanyDeleteReturns409WhenInUse(): void
180|    {
181|        $company = $this->company(1);
182|        $providerCompany = $this->providerCompany(4, $company);
183|        $this->providerCompanyMember(1, $providerCompany, $this->companyMember(30, $company));
184|
185|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
186|        $companyRepository->method('findOneByCompanyAndId')->willReturn($providerCompany);
187|
188|        $entityManager = $this->createMock(EntityManagerInterface::class);
189|        $entityManager->expects(self::never())->method('remove');
190|
191|        $response = $this->controller(
192|            $this->makeRequirementService(),
193|            $this->makeProviderCompanyService([
194|                'entityManager' => $entityManager,
195|                'companyRepository' => $companyRepository,
196|            ]),
197|            $this->user(10, $company),
198|        )->companyDelete(4, $this->jsonRequest(['motivo' => 'teste']));
199|
200|        self::assertSame(409, $response->getStatusCode());
201|        self::assertSame('Empresa em uso.', $this->decode($response)['message']);
202|    }
203|
204|    public function testCompanyProvidersLinkPersistsMembers(): void
205|    {
206|        $company = $this->company(1);
207|        $user = $this->user(10, $company);
208|        $providerCompany = $this->providerCompany(4, $company);
209|        $member = $this->companyMember(30, $company);
210|
211|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
212|        $companyRepository->method('findOneByCompanyAndId')->willReturn($providerCompany);
213|
214|        $companyMembersRepository = $this->createMock(\App\Repository\CompanyMembersRepository::class);
215|        $companyMembersRepository->method('findOneBy')->willReturn($member);
216|
217|        $entityManager = $this->createMock(EntityManagerInterface::class);
218|        $entityManager->expects(self::once())
219|            ->method('persist')
220|            ->with(self::isInstanceOf(\App\Entity\Contractor\ContractorProviderCompanyMember::class));
221|        $entityManager->expects(self::once())->method('flush');
222|
223|        $response = $this->controller(
224|            $this->makeRequirementService(),
225|            $this->makeProviderCompanyService([
226|                'entityManager' => $entityManager,
227|                'companyRepository' => $companyRepository,
228|                'companyMembersRepository' => $companyMembersRepository,
229|            ]),
230|            $user,
231|        )->companyProvidersLink(4, $this->jsonRequest(['provider_ids' => [30]]));
232|
233|        self::assertSame(200, $response->getStatusCode());
234|        self::assertSame(1, $this->decode($response)['company']['prestadores_count']);
235|    }
236|
237|    public function testCompaniesListReturnsStats(): void
238|    {
239|        $company = $this->company(1);
240|        $providerCompany = $this->providerCompany(1, $company);
241|
242|        $companyRepository = $this->createMock(\App\Repository\Contractor\ContractorProviderCompanyRepository::class);
243|        $companyRepository->method('findByCompany')->willReturn([$providerCompany]);
244|
245|        $response = $this->controller(
246|            $this->makeRequirementService(),
247|            $this->makeProviderCompanyService(['companyRepository' => $companyRepository]),
248|            $this->user(10, $company),
249|        )->companiesList();
250|
251|        $data = $this->decode($response);
252|        self::assertTrue($data['success']);
253|        self::assertCount(1, $data['companies']);
254|        self::assertSame(1, $data['stats']['total']);
255|    }
256|
257|    public function testCompanyRequirementEvidenceUploadRejectsMissingFile(): void
258|    {
259|        $entityManager = $this->createMock(EntityManagerInterface::class);
260|        $entityManager->expects(self::never())->method('flush');
261|
262|        $response = $this->controller(
263|            $this->makeRequirementService(),
264|            $this->makeProviderCompanyService(['entityManager' => $entityManager]),
265|            $this->user(10, $this->company(1)),
266|        )->companyRequirementEvidenceUpload(1, 2, Request::create('/', 'POST'));
267|
268|        self::assertSame(400, $response->getStatusCode());
269|        self::assertSame('Arquivo inválido.', $this->decode($response)['message']);
270|    }
271|
272|    private function controller(
273|        \App\Service\Contractor\ContractorDocumentRequirementService $requirementService,
274|        \App\Service\Contractor\ContractorProviderCompanyService $companyService,
275|        ?\App\Entity\User $user,
276|    ): EmpresasParceirasController {
277|        $entityManager = $this->createMock(EntityManagerInterface::class);
278|        $entityManager->method('getRepository')->willReturn(
279|            $this->createMock(ObjectRepository::class)
280|        );
281|
282|        $controller = new EmpresasParceirasController(
283|            $requirementService,
284|            $companyService,
285|            $this->createMock(PermissionTagByMemberService::class),
286|            $entityManager,
287|        );
288|        $controller->setContainer($this->containerWithUser($user));
289|
290|        return $controller;
291|    }
292|
293|    /** @param array<string, mixed> $payload */
294|    private function jsonRequest(array $payload): Request
295|    {
296|        return Request::create('/', 'POST', [], [], [], [], json_encode($payload, JSON_THROW_ON_ERROR));
297|    }
298|}
299|

{"path_array": ["src/Service/Ssma/SsmaEventValidator.php", "tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php", "tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php"]}

==== FILE: src/Service/Ssma/SsmaEventValidator.php ====
diff --git a/src/Service/Ssma/SsmaEventValidator.php b/src/Service/Ssma/SsmaEventValidator.php
--- a/src/Service/Ssma/SsmaEventValidator.php
+++ b/src/Service/Ssma/SsmaEventValidator.php
@@ -713,18 +713,14 @@ final class SsmaEventValidator
         }
 
         $descVal = array_key_exists('descaracterizado', $d) ? (string) $d['descaracterizado'] : '';
-        // Caracterizar é do médico no aprofundamento dedicado — não na criação.
-        // Sim/Não + comentário só são obrigatórios quando há suspeita de descaracterização marcada.
+        // Médico sempre informa caracterização no aprofundamento dedicado.
         if (!empty($data['aprofundamento_only'])) {
-            $hasSuspect = !empty($d['descaracter_suspect']) && $d['descaracter_suspect'] !== '0';
-            if ($hasSuspect) {
-                if (!\in_array($descVal, ['0', '1'], true)) {
-                    $errors[] = 'Informe se o evento é caracterizado como acidente (Sim/Não).';
-                } else {
-                    $comment = trim((string) ($d['descaracter_comment'] ?? ''));
-                    if ($comment === '') {
-                        $errors[] = 'Comentário de caracterização do acidente é obrigatório.';
-                    }
+            if (!\in_array($descVal, ['0', '1'], true)) {
+                $errors[] = 'Informe se o evento é caracterizado como acidente (Sim/Não).';
+            } else {
+                $comment = trim((string) ($d['descaracter_comment'] ?? ''));
+                if ($comment === '') {
+                    $errors[] = 'Comentário de caracterização do acidente é obrigatório.';
                 }
             }
         }
==== FILE: tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php ====
diff --git a/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php b/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
--- a/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
+++ b/tests/Unit/Product/Ssma/GlobalPermissionListenerOccurrenceCreateWriteTest.php
@@ -20,6 +20,7 @@ use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
 use App\Service\Ssma\SsmaPreventionMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightService;
+use App\Service\Ssma\SsmaStakeholderActionPermissionService;
 use App\Repository\SsmaOccurrenceCreatePermissionRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use Doctrine\Persistence\ObjectRepository;
@@ -140,7 +141,14 @@ final class GlobalPermissionListenerOccurrenceCreateWriteTest extends SsmaTestCa
                 $permissionService,
                 $authorizationChecker,
             ),
-            $this->createMock(SsmaActionPlanMutatePermissionService::class),
+            new SsmaActionPlanMutatePermissionService(
+                $entityManager,
+                new SsmaStakeholderActionPermissionService(
+                    $permissionService,
+                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
+                    $authorizationChecker,
+                ),
+            ),
             new SsmaOccurrenceCreatePermissionService(
                 $entityManager,
                 $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),
==== FILE: tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php ====
diff --git a/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php b/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
--- a/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
+++ b/tests/Unit/Product/Ssma/GlobalPermissionListenerPreventionWriteTest.php
@@ -20,6 +20,7 @@ use App\Service\Ssma\SsmaOccurrenceTypeConfigService;
 use App\Service\Ssma\SsmaPreventionMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightMutatePermissionService;
 use App\Service\Ssma\SsmaRefusalRightService;
+use App\Service\Ssma\SsmaStakeholderActionPermissionService;
 use App\Repository\SsmaOccurrenceCreatePermissionRepository;
 use Doctrine\ORM\EntityManagerInterface;
 use Doctrine\Persistence\ObjectRepository;
@@ -157,7 +158,14 @@ final class GlobalPermissionListenerPreventionWriteTest extends SsmaTestCase
                 $permissionService,
                 $authorizationChecker,
             ),
-            $this->createMock(SsmaActionPlanMutatePermissionService::class),
+            new SsmaActionPlanMutatePermissionService(
+                $entityManager,
+                new SsmaStakeholderActionPermissionService(
+                    $permissionService,
+                    new SsmaOccurrenceStakeholderAccessChecker($entityManager),
+                    $authorizationChecker,
+                ),
+            ),
             new SsmaOccurrenceCreatePermissionService(
                 $entityManager,
                 $this->createMock(SsmaOccurrenceCreatePermissionRepository::class),

{"query_name": "EmpresasParceirasController.php"}

src/Controller/Contractor/EmpresasParceirasController.php

{"query_name": "EmpresasParceirasTestCase.php"}

tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php"}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 730)
IS_TRUNCATED: true
LINE_RANGE: 1-500
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Controller\Contractor;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\PermissionTag;
10|use App\Entity\Product;
11|use App\Entity\User;
12|use App\Service\Contractor\ContractorDocumentRequirementService;
13|use App\Service\Contractor\ContractorProviderCompanyService;
14|use App\Service\PermissionTagByMemberService;
15|use Doctrine\ORM\EntityManagerInterface;
16|use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
17|use Symfony\Component\HttpFoundation\BinaryFileResponse;
18|use Symfony\Component\HttpFoundation\File\UploadedFile;
19|use Symfony\Component\HttpFoundation\JsonResponse;
20|use Symfony\Component\HttpFoundation\Request;
21|use Symfony\Component\HttpFoundation\Response;
22|use Symfony\Component\HttpFoundation\ResponseHeaderBag;
23|
24|final class EmpresasParceirasController extends AbstractController
25|{
26|    private const CONTRACTOR_PRODUCT_SLUG = 'ssma-contractor';
27|
28|    public function __construct(
29|        private ContractorDocumentRequirementService $requirementService,
30|        private ContractorProviderCompanyService $companyService,
31|        private PermissionTagByMemberService $permissionTagByMemberService,
32|        private EntityManagerInterface $entityManager,
33|    ) {
34|    }
35|
36|    public function index(): Response
37|    {
38|        $this->assertCanAccess();
39|
40|        $company = $this->resolveCompany();
41|        $contractorCompanies = $this->companyService->listForFrontend($company);
42|
43|        return $this->render('contractor/index.html.twig', [
44|            'contractorRequirements' => $this->requirementService->listForFrontend($company),
45|            'contractorCompanies' => $contractorCompanies,
46|            'contractorCompanyStats' => $this->companyService->computeStats($contractorCompanies),
47|            'contractorDocumentoStatus' => ContractorProviderCompanyService::DOCUMENTO_STATUS,
48|            'contractorCategorias' => ContractorDocumentRequirementService::CATEGORIAS,
49|            'contractorAreas' => ContractorDocumentRequirementService::AREAS,
50|            'contractorCompanyTypes' => ContractorDocumentRequirementService::COMPANY_TYPES,
51|            'contractorValidadeTipos' => ContractorDocumentRequirementService::VALIDADE_TIPOS,
52|            'contractorValidadeUnidades' => ContractorDocumentRequirementService::VALIDADE_UNIDADES,
53|            'contractorRegrasBloqueio' => ContractorDocumentRequirementService::REGRAS_BLOQUEIO,
54|            'contractorBloqueioParcialTipos' => ContractorDocumentRequirementService::BLOQUEIO_PARCIAL_TIPOS,
55|            'contractorBloqueioParcialOptions' => $this->requirementService->listPartialBlockingOptions($company),
56|            'contractorInternalResponsibleOptions' => $this->companyService->listInternalResponsibleOptions($company),
57|            'contractorCanManage' => $this->canManage(),
58|            'contractorCanManagePermissions' => $this->canManagePermissions(),
59|        ]);
60|    }
61|
62|    public function requirementsList(): JsonResponse
63|    {
64|        if ($response = $this->jsonIfCannotAccess()) {
65|            return $response;
66|        }
67|
68|        $company = $this->resolveCompany();
69|
70|        return $this->json([
71|            'success' => true,
72|            'requirements' => $this->requirementService->listForFrontend($company),
73|        ]);
74|    }
75|
76|    public function requirementDetail(int $id): JsonResponse
77|    {
78|        if ($response = $this->jsonIfCannotAccess()) {
79|            return $response;
80|        }
81|
82|        $company = $this->resolveCompany();
83|
84|        try {
85|            $detail = $this->requirementService->getDetail($company, $id);
86|        } catch (\RuntimeException $exception) {
87|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
88|        }
89|
90|        return $this->json(['success' => true] + $detail);
91|    }
92|
93|    public function requirementSave(Request $request): JsonResponse
94|    {
95|        if (!$this->canManage()) {
96|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
97|        }
98|
99|        $company = $this->resolveCompany();
100|        $user = $this->resolveUser();
101|        $payload = json_decode($request->getContent(), true);
102|
103|        if (!is_array($payload)) {
104|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
105|        }
106|
107|        try {
108|            $requirement = $this->requirementService->save($company, $user, $payload);
109|        } catch (\InvalidArgumentException $exception) {
110|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
111|        }
112|
113|        return $this->json([
114|            'success' => true,
115|            'requirement' => $requirement,
116|        ]);
117|    }
118|
119|    public function requirementDelete(int $id, Request $request): JsonResponse
120|    {
121|        if (!$this->canManage()) {
122|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
123|        }
124|
125|        $company = $this->resolveCompany();
126|        $user = $this->resolveUser();
127|        $payload = json_decode($request->getContent(), true);
128|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
129|
130|        try {
131|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
132|            if ($linkedCount > 0) {
133|                return $this->json([
134|                    'success' => false,
135|                    'message' => 'Requisito em uso por empresas parceiras.',
136|                    'linked_count' => $linkedCount,
137|                ], 409);
138|            }
139|
140|            $this->requirementService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
141|        } catch (\RuntimeException $exception) {
142|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
143|        }
144|
145|        return $this->json(['success' => true]);
146|    }
147|
148|    public function requirementSetActive(int $id, Request $request): JsonResponse
149|    {
150|        if (!$this->canManage()) {
151|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
152|        }
153|
154|        $company = $this->resolveCompany();
155|        $user = $this->resolveUser();
156|        $payload = json_decode($request->getContent(), true);
157|
158|        if (!is_array($payload)) {
159|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
160|        }
161|
162|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
163|        if ($active === null) {
164|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
165|        }
166|
167|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
168|
169|        try {
170|            $requirement = $this->requirementService->setActive($company, $user, $id, $active, $motivo);
171|        } catch (\RuntimeException $exception) {
172|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
173|        }
174|
175|        return $this->json([
176|            'success' => true,
177|            'requirement' => $requirement,
178|        ]);
179|    }
180|
181|    public function requirementUsage(int $id): JsonResponse
182|    {
183|        if ($response = $this->jsonIfCannotAccess()) {
184|            return $response;
185|        }
186|
187|        $company = $this->resolveCompany();
188|
189|        try {
190|            $linkedCount = $this->requirementService->countLinkedCompanies($company, $id);
191|        } catch (\RuntimeException $exception) {
192|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
193|        }
194|
195|        return $this->json([
196|            'success' => true,
197|            'linked_count' => $linkedCount,
198|            'in_use' => $linkedCount > 0,
199|        ]);
200|    }
201|
202|    public function companiesList(): JsonResponse
203|    {
204|        if ($response = $this->jsonIfCannotAccess()) {
205|            return $response;
206|        }
207|
208|        $company = $this->resolveCompany();
209|        $companies = $this->companyService->listForFrontend($company);
210|
211|        return $this->json([
212|            'success' => true,
213|            'companies' => $companies,
214|            'stats' => $this->companyService->computeStats($companies),
215|        ]);
216|    }
217|
218|    public function companyDetail(int $id): JsonResponse
219|    {
220|        if ($response = $this->jsonIfCannotAccess()) {
221|            return $response;
222|        }
223|
224|        $company = $this->resolveCompany();
225|
226|        try {
227|            $detail = $this->companyService->getDetail($company, $id);
228|        } catch (\RuntimeException $exception) {
229|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
230|        }
231|
232|        return $this->json(['success' => true] + $detail);
233|    }
234|
235|    public function companyDelete(int $id, Request $request): JsonResponse
236|    {
237|        if (!$this->canManage()) {
238|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
239|        }
240|
241|        $company = $this->resolveCompany();
242|        $user = $this->resolveUser();
243|        $payload = json_decode($request->getContent(), true);
244|        $motivo = is_array($payload) ? ($payload['motivo'] ?? null) : null;
245|
246|        try {
247|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
248|            if ($linkedCount > 0) {
249|                return $this->json([
250|                    'success' => false,
251|                    'message' => 'Empresa em uso.',
252|                    'linked_count' => $linkedCount,
253|                ], 409);
254|            }
255|
256|            $this->companyService->delete($company, $user, $id, is_string($motivo) ? $motivo : null);
257|        } catch (\RuntimeException $exception) {
258|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
259|        }
260|
261|        return $this->json(['success' => true]);
262|    }
263|
264|    public function companySetActive(int $id, Request $request): JsonResponse
265|    {
266|        if (!$this->canManage()) {
267|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
268|        }
269|
270|        $company = $this->resolveCompany();
271|        $user = $this->resolveUser();
272|        $payload = json_decode($request->getContent(), true);
273|
274|        if (!is_array($payload)) {
275|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
276|        }
277|
278|        $active = filter_var($payload['active'] ?? null, FILTER_VALIDATE_BOOLEAN, FILTER_NULL_ON_FAILURE);
279|        if ($active === null) {
280|            return $this->json(['success' => false, 'message' => 'Campo active é obrigatório.'], 422);
281|        }
282|
283|        $motivo = isset($payload['motivo']) ? (string) $payload['motivo'] : null;
284|
285|        try {
286|            $providerCompany = $this->companyService->setActive($company, $user, $id, $active, $motivo);
287|        } catch (\RuntimeException $exception) {
288|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
289|        }
290|
291|        return $this->json([
292|            'success' => true,
293|            'company' => $providerCompany,
294|        ]);
295|    }
296|
297|    public function companyUsage(int $id): JsonResponse
298|    {
299|        if ($response = $this->jsonIfCannotAccess()) {
300|            return $response;
301|        }
302|
303|        $company = $this->resolveCompany();
304|
305|        try {
306|            $linkedCount = $this->companyService->countLinkedRecords($company, $id);
307|        } catch (\RuntimeException $exception) {
308|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
309|        }
310|
311|        return $this->json([
312|            'success' => true,
313|            'linked_count' => $linkedCount,
314|            'in_use' => $linkedCount > 0,
315|        ]);
316|    }
317|
318|    public function companySave(Request $request): JsonResponse
319|    {
320|        if (!$this->canManage()) {
321|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
322|        }
323|
324|        $company = $this->resolveCompany();
325|        $user = $this->resolveUser();
326|        $payload = json_decode($request->getContent(), true);
327|
328|        if (!is_array($payload)) {
329|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
330|        }
331|
332|        try {
333|            $providerCompany = $this->companyService->save($company, $user, $payload);
334|        } catch (\InvalidArgumentException $exception) {
335|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
336|        } catch (\RuntimeException $exception) {
337|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
338|        }
339|
340|        return $this->json([
341|            'success' => true,
342|            'company' => $providerCompany,
343|        ]);
344|    }
345|
346|    public function companyProviders(int $id): JsonResponse
347|    {
348|        if ($response = $this->jsonIfCannotAccess()) {
349|            return $response;
350|        }
351|
352|        $company = $this->resolveCompany();
353|
354|        try {
355|            $data = $this->companyService->getProviders($company, $id);
356|        } catch (\RuntimeException $exception) {
357|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
358|        }
359|
360|        return $this->json(['success' => true] + $data);
361|    }
362|
363|    public function companyProvidersLink(int $id, Request $request): JsonResponse
364|    {
365|        if (!$this->canManage()) {
366|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
367|        }
368|
369|        $company = $this->resolveCompany();
370|        $user = $this->resolveUser();
371|        $payload = json_decode($request->getContent(), true);
372|        $providerIds = is_array($payload) ? ($payload['provider_ids'] ?? []) : [];
373|
374|        if (!is_array($providerIds)) {
375|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
376|        }
377|
378|        try {
379|            $providerCompany = $this->companyService->linkProviders($company, $user, $id, $providerIds);
380|        } catch (\RuntimeException $exception) {
381|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
382|        }
383|
384|        return $this->json([
385|            'success' => true,
386|            'company' => $providerCompany,
387|        ]);
388|    }
389|
390|    public function companyRequirements(int $id): JsonResponse
391|    {
392|        if ($response = $this->jsonIfCannotAccess()) {
393|            return $response;
394|        }
395|
396|        $company = $this->resolveCompany();
397|
398|        try {
399|            $data = $this->companyService->getCompanyRequirements($company, $id, $this->requirementService);
400|        } catch (\RuntimeException $exception) {
401|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
402|        }
403|
404|        return $this->json(['success' => true] + $data);
405|    }
406|
407|    public function companyRequirementsSave(int $id, Request $request): JsonResponse
408|    {
409|        if (!$this->canManage()) {
410|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
411|        }
412|
413|        $company = $this->resolveCompany();
414|        $user = $this->resolveUser();
415|        $payload = json_decode($request->getContent(), true);
416|        $requirementIds = is_array($payload) ? ($payload['requirement_ids'] ?? []) : [];
417|        $requirementNames = is_array($payload) ? ($payload['requirement_names'] ?? []) : [];
418|        $requirementResponsibleIds = is_array($payload) ? ($payload['requirement_responsible_ids'] ?? []) : [];
419|        $requirementOptionalResponsibleIds = is_array($payload) ? ($payload['requirement_optional_responsible_ids'] ?? []) : [];
420|
421|        if (!is_array($requirementIds)) {
422|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
423|        }
424|
425|        if (!is_array($requirementNames)) {
426|            $requirementNames = [];
427|        }
428|
429|        if (!is_array($requirementResponsibleIds)) {
430|            $requirementResponsibleIds = [];
431|        }
432|
433|        if (!is_array($requirementOptionalResponsibleIds)) {
434|            $requirementOptionalResponsibleIds = [];
435|        }
436|
437|        try {
438|            $providerCompany = $this->companyService->saveCompanyRequirements(
439|                $company,
440|                $user,
441|                $id,
442|                $requirementIds,
443|                $requirementNames,
444|                $requirementResponsibleIds,
445|                $requirementOptionalResponsibleIds,
446|            );
447|        } catch (\RuntimeException $exception) {
448|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
449|        }
450|
451|        return $this->json([
452|            'success' => true,
453|            'company' => $providerCompany,
454|        ]);
455|    }
456|
457|    public function companyRequirementDelete(int $id, int $linkId): JsonResponse
458|    {
459|        if (!$this->canManage()) {
460|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
461|        }
462|
463|        $company = $this->resolveCompany();
464|        $user = $this->resolveUser();
465|
466|        try {
467|            $providerCompany = $this->companyService->deleteCompanyRequirement($company, $user, $id, $linkId);
468|        } catch (\RuntimeException $exception) {
469|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
470|        }
471|
472|        return $this->json([
473|            'success' => true,
474|            'company' => $providerCompany,
475|        ]);
476|    }
477|
478|    public function companyRequirementDocumentSave(int $id, Request $request): JsonResponse
479|    {
480|        if (!$this->canManage()) {
481|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
482|        }
483|
484|        $company = $this->resolveCompany();
485|        $user = $this->resolveUser();
486|        $payload = json_decode($request->getContent(), true);
487|
488|        if (!is_array($payload)) {
489|            return $this->json(['success' => false, 'message' => 'Payload inválido.'], 400);
490|        }
491|
492|        try {
493|            $providerCompany = $this->companyService->saveRequirementDocument($company, $user, $id, $payload);
494|        } catch (\InvalidArgumentException $exception) {
495|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
496|        } catch (\RuntimeException $exception) {
497|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
498|        }
499|
500|        return $this->json([

Note: Results truncated to 500 lines. Please narrow your line range.

{"file_path": "tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php"}

File: tests/Unit/Product/EmpresasParceiras/EmpresasParceirasTestCase.php (Total lines: 302)
IS_TRUNCATED: false
LINE_RANGE: 1-302
1|<?php
2|
3|declare(strict_types=1);
4|
5|namespace App\Tests\Unit\Product\EmpresasParceiras;
6|
7|use App\Entity\Company;
8|use App\Entity\CompanyMembers;
9|use App\Entity\Contractor\ContractorDocumentRequirement;
10|use App\Entity\Contractor\ContractorProviderCompany;
11|use App\Entity\Contractor\ContractorProviderCompanyMember;
12|use App\Entity\Contractor\ContractorProviderCompanyRequirement;
13|use App\Entity\User;
14|use App\Repository\CompanyMembersRepository;
15|use App\Repository\Contractor\ContractorDocumentRequirementHistoryRepository;
16|use App\Repository\Contractor\ContractorDocumentRequirementRepository;
17|use App\Repository\Contractor\ContractorProviderCompanyHistoryRepository;
18|use App\Repository\Contractor\ContractorProviderCompanyMemberRepository;
19|use App\Repository\Contractor\ContractorProviderCompanyRepository;
20|use App\Repository\Contractor\ContractorProviderCompanyRequirementRepository;
21|use App\Service\Contractor\ContractorDocumentRequirementService;
22|use App\Service\Contractor\ContractorMemberServiceProvisionService;
23|use App\Service\Contractor\ContractorProviderCompanyService;
24|use App\Service\Contractor\ContractorRequirementDocumentStorageService;
25|use Doctrine\DBAL\Connection;
26|use Doctrine\ORM\EntityManagerInterface;
27|use PHPUnit\Framework\TestCase;
28|use Psr\Container\ContainerInterface;
29|use Symfony\Component\DependencyInjection\ParameterBag\ParameterBagInterface;
30|use Symfony\Component\HttpFoundation\JsonResponse;
31|use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
32|use Symfony\Component\Security\Core\Authentication\Token\TokenInterface;
33|
34|abstract class EmpresasParceirasTestCase extends TestCase
35|{
36|    protected function setEntityId(object $entity, int $id): object
37|    {
38|        $reflection = new \ReflectionObject($entity);
39|        while (!$reflection->hasProperty('id') && $reflection->getParentClass()) {
40|            $reflection = $reflection->getParentClass();
41|        }
42|
43|        $property = $reflection->getProperty('id');
44|        $property->setAccessible(true);
45|        $property->setValue($entity, $id);
46|
47|        return $entity;
48|    }
49|
50|    protected function setPrivateProperty(object $object, string $propertyName, mixed $value): void
51|    {
52|        $property = (new \ReflectionClass($object))->getProperty($propertyName);
53|        $property->setAccessible(true);
54|        $property->setValue($object, $value);
55|    }
56|
57|    protected function company(int $id): Company
58|    {
59|        /** @var Company $company */
60|        $company = $this->setEntityId(new Company(), $id);
61|
62|        return $company;
63|    }
64|
65|    protected function user(int $id, ?Company $company = null, string $email = 'user@example.com'): User
66|    {
67|        /** @var User $user */
68|        $user = $this->setEntityId(new User(), $id);
69|        $user->setEmail($email);
70|        if ($company !== null) {
71|            $user->setCompany($company);
72|        }
73|
74|        return $user;
75|    }
76|
77|    protected function companyMember(int $id, Company $company, string $email = 'colab@example.com'): CompanyMembers
78|    {
79|        /** @var CompanyMembers $member */
80|        $member = $this->setEntityId(new CompanyMembers(), $id);
81|        $member->setCompany($company);
82|        $member->setUser($this->user($id + 10000, $company, $email));
83|        $member->setIsRemoved(false);
84|
85|        return $member;
86|    }
87|
88|    protected function mockCompanyMember(int $id, string $name = '', string $email = ''): CompanyMembers
89|    {
90|        $member = $this->createMock(CompanyMembers::class);
91|        $member->method('getId')->willReturn($id);
92|        $member->method('getFullName')->willReturn($name !== '' ? $name : null);
93|        $member->method('getEmail')->willReturn($email !== '' ? $email : null);
94|
95|        return $member;
96|    }
97|
98|    protected function providerCompany(int $id, Company $company, string $razaoSocial = 'Parceira LTDA'): ContractorProviderCompany
99|    {
100|        /** @var ContractorProviderCompany $providerCompany */
101|        $providerCompany = $this->setEntityId(
102|            (new ContractorProviderCompany())
103|                ->setCompany($company)
104|                ->setRazaoSocial($razaoSocial)
105|                ->setDocumento('12345678000199')
106|                ->setTipo('operacional')
107|                ->setActive(true),
108|            $id,
109|        );
110|
111|        return $providerCompany;
112|    }
113|
114|    protected function documentRequirement(int $id, Company $company, string $titulo = 'ASO'): ContractorDocumentRequirement
115|    {
116|        /** @var ContractorDocumentRequirement $requirement */
117|        $requirement = $this->setEntityId(
118|            (new ContractorDocumentRequirement())
119|                ->setCompany($company)
120|                ->setTitulo($titulo)
121|                ->setCategoria('contrato')
122|                ->setAplicarPara(['operacional'])
123|                ->setValidadeTipo('sem_validade')
124|                ->setRegraBloqueio('sem_bloqueio')
125|                ->setActive(true),
126|            $id,
127|        );
128|
129|        return $requirement;
130|    }
131|
132|    protected function providerCompanyRequirement(
133|        int $id,
134|        ContractorProviderCompany $providerCompany,
135|        ContractorDocumentRequirement $requirement,
136|    ): ContractorProviderCompanyRequirement {
137|        /** @var ContractorProviderCompanyRequirement $link */
138|        $link = $this->setEntityId(
139|            (new ContractorProviderCompanyRequirement())
140|                ->setProviderCompany($providerCompany)
141|                ->setRequirement($requirement)
142|                ->setStatus('nao_conforme'),
143|            $id,
144|        );
145|        $providerCompany->getRequirements()->add($link);
146|
147|        return $link;
148|    }
149|
150|    protected function providerCompanyMember(
151|        int $id,
152|        ContractorProviderCompany $providerCompany,
153|        CompanyMembers $member,
154|    ): ContractorProviderCompanyMember {
155|        /** @var ContractorProviderCompanyMember $link */
156|        $link = $this->setEntityId(
157|            (new ContractorProviderCompanyMember())
158|                ->setProviderCompany($providerCompany)
159|                ->setCompanyMember($member),
160|            $id,
161|        );
162|        $providerCompany->getMembers()->add($link);
163|
164|        return $link;
165|    }
166|
167|    protected function documentStorage(?string $projectDir = null): ContractorRequirementDocumentStorageService
168|    {
169|        $parameterBag = $this->createMock(ParameterBagInterface::class);
170|        $parameterBag->method('get')->with('kernel.project_dir')->willReturn($projectDir ?? sys_get_temp_dir());
171|
172|        return new ContractorRequirementDocumentStorageService($parameterBag);
173|    }
174|
175|    /**
176|     * @param array<string, object> $overrides
177|     */
178|    protected function makeRequirementService(array $overrides = []): ContractorDocumentRequirementService
179|    {
180|        return new ContractorDocumentRequirementService(
181|            $overrides['entityManager'] ?? $this->entityManagerWithConnection(),
182|            $overrides['requirementRepository'] ?? $this->createMock(ContractorDocumentRequirementRepository::class),
183|            $overrides['historyRepository'] ?? $this->createMock(ContractorDocumentRequirementHistoryRepository::class),
184|            $overrides['companyRequirementRepository'] ?? $this->createMock(ContractorProviderCompanyRequirementRepository::class),
185|        );
186|    }
187|
188|    protected function entityManagerWithConnection(): EntityManagerInterface
189|    {
190|        $connection = $this->createMock(Connection::class);
191|        $connection->method('fetchAllAssociative')->willReturn([]);
192|
193|        $repository = $this->createMock(\Doctrine\Persistence\ObjectRepository::class);
194|        $repository->method('findBy')->willReturn([]);
195|
196|        $entityManager = $this->createMock(EntityManagerInterface::class);
197|        $entityManager->method('getConnection')->willReturn($connection);
198|        $entityManager->method('getRepository')->willReturn($repository);
199|
200|        return $entityManager;
201|    }
202|
203|    /**
204|     * @param array<string, object> $overrides
205|     */
206|    protected function makeProviderCompanyService(array $overrides = []): ContractorProviderCompanyService
207|    {
208|        return new ContractorProviderCompanyService(
209|            $overrides['entityManager'] ?? $this->createMock(EntityManagerInterface::class),
210|            $overrides['companyRepository'] ?? $this->createMock(ContractorProviderCompanyRepository::class),
211|            $overrides['historyRepository'] ?? $this->createMock(ContractorProviderCompanyHistoryRepository::class),
212|            $overrides['companyRequirementRepository'] ?? $this->createMock(ContractorProviderCompanyRequirementRepository::class),
213|            $overrides['requirementRepository'] ?? $this->createMock(ContractorDocumentRequirementRepository::class),
214|            $overrides['companyMembersRepository'] ?? $this->createMock(CompanyMembersRepository::class),
215|            $overrides['documentStorage'] ?? $this->documentStorage(),
216|        );
217|    }
218|
219|    /**
220|     * @param array<string, object> $overrides
221|     */
222|    protected function makeMemberProvisionService(array $overrides = []): ContractorMemberServiceProvisionService
223|    {
224|        return new ContractorMemberServiceProvisionService(
225|            $overrides['entityManager'] ?? $this->createMock(EntityManagerInterface::class),
226|            $overrides['providerCompanyRepository'] ?? $this->createMock(ContractorProviderCompanyRepository::class),
227|            $overrides['providerMemberRepository'] ?? $this->createMock(ContractorProviderCompanyMemberRepository::class),
228|            $overrides['providerCompanyService'] ?? $this->makeProviderCompanyService(),
229|            $overrides['requirementService'] ?? $this->makeRequirementService(),
230|        );
231|    }
232|
233|    protected function containerWithUser(?User $user): ContainerInterface
234|    {
235|        $token = $this->createMock(TokenInterface::class);
236|        $token->method('getUser')->willReturn($user);
237|
238|        $tokenStorage = $this->createMock(TokenStorageInterface::class);
239|        $tokenStorage->method('getToken')->willReturn($user !== null ? $token : null);
240|
241|        return new class($tokenStorage) implements ContainerInterface {
242|            public function __construct(private TokenStorageInterface $tokenStorage)
243|            {
244|            }
245|
246|            public function get(string $id): mixed
247|            {
248|                if ($id === 'security.token_storage') {
249|                    return $this->tokenStorage;
250|                }
251|
252|                throw new \LogicException('Serviço não configurado no container de teste: ' . $id);
253|            }
254|
255|            public function has(string $id): bool
256|            {
257|                return $id === 'security.token_storage';
258|            }
259|        };
260|    }
261|
262|    /** @return array<string, mixed> */
263|    protected function decode(JsonResponse $response): array
264|    {
265|        $data = json_decode((string) $response->getContent(), true);
266|
267|        return is_array($data) ? $data : [];
268|    }
269|
270|    /**
271|     * @return array<string, mixed>
272|     */
273|    protected function validCompanyPayload(int $responsibleMemberId): array
274|    {
275|        return [
276|            'razao_social' => 'Empresa Parceira LTDA',
277|            'cnpj' => '12.345.678/0001-99',
278|            'tipo' => 'operacional',
279|            'responsavel_interno_member_id' => $responsibleMemberId,
280|            'contato' => [
281|                'nome' => 'João Contato',
282|                'email' => 'joao@parceira.com',
283|                'telefone' => '11999998888',
284|            ],
285|        ];
286|    }
287|
288|    /**
289|     * @return array<string, mixed>
290|     */
291|    protected function validRequirementPayload(): array
292|    {
293|        return [
294|            'titulo' => 'ASO Admissional',
295|            'categoria' => 'contrato',
296|            'aplicar_para' => ['operacional'],
297|            'validade_tipo' => 'sem_validade',
298|            'regra_bloqueio' => 'sem_bloqueio',
299|        ];
300|    }
301|}
302|

{"file_path": "src/Controller/Contractor/EmpresasParceirasController.php", "start_line": 500, "end_line": 730}

File: src/Controller/Contractor/EmpresasParceirasController.php (Total lines: 730)
IS_TRUNCATED: false
LINE_RANGE: 500-730
500|        return $this->json([
501|            'success' => true,
502|            'company' => $providerCompany,
503|        ]);
504|    }
505|
506|    public function companyRequirementEvidenceUpload(int $id, int $requirementId, Request $request): JsonResponse
507|    {
508|        if (!$this->canManage()) {
509|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
510|        }
511|
512|        $company = $this->resolveCompany();
513|        $user = $this->resolveUser();
514|        /** @var UploadedFile|null $file */
515|        $file = $request->files->get('file');
516|
517|        if (!$file instanceof UploadedFile) {
518|            return $this->json(['success' => false, 'message' => 'Arquivo inválido.'], 400);
519|        }
520|
521|        try {
522|            $payload = $this->companyService->uploadRequirementEvidence(
523|                $company,
524|                $user,
525|                $id,
526|                $requirementId,
527|                $file,
528|                $this->requirementService,
529|                $request->request->all(),
530|            );
531|        } catch (\InvalidArgumentException $exception) {
532|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
533|        } catch (\RuntimeException $exception) {
534|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
535|        }
536|
537|        return $this->json(['success' => true] + $payload);
538|    }
539|
540|    public function companyRequirementEvidenceDownload(int $id, int $requirementId, string $evidenceId): Response
541|    {
542|        if (!$this->canAccess()) {
543|            return new Response('Sem permissão.', Response::HTTP_FORBIDDEN);
544|        }
545|
546|        $company = $this->resolveCompany();
547|
548|        try {
549|            $download = $this->companyService->resolveRequirementEvidenceDownload(
550|                $company,
551|                $id,
552|                $requirementId,
553|                $evidenceId,
554|            );
555|        } catch (\RuntimeException $exception) {
556|            return new Response($exception->getMessage(), Response::HTTP_NOT_FOUND);
557|        }
558|
559|        $response = new BinaryFileResponse($download['absolute_path']);
560|        $response->setContentDisposition(
561|            ResponseHeaderBag::DISPOSITION_ATTACHMENT,
562|            $download['download_name'],
563|        );
564|
565|        return $response;
566|    }
567|
568|    public function companyRequirementEvidenceDelete(int $id, int $requirementId, Request $request): JsonResponse
569|    {
570|        if (!$this->canManage()) {
571|            return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
572|        }
573|
574|        $company = $this->resolveCompany();
575|        $payload = json_decode($request->getContent(), true);
576|        $evidenceId = is_array($payload) ? trim((string) ($payload['evidence_id'] ?? '')) : '';
577|        $index = is_array($payload) && array_key_exists('index', $payload) ? (int) $payload['index'] : null;
578|
579|        try {
580|            $data = $this->companyService->deleteRequirementEvidence(
581|                $company,
582|                $id,
583|                $requirementId,
584|                $evidenceId !== '' ? $evidenceId : null,
585|                $index,
586|                $this->requirementService,
587|            );
588|        } catch (\InvalidArgumentException $exception) {
589|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 422);
590|        } catch (\RuntimeException $exception) {
591|            return $this->json(['success' => false, 'message' => $exception->getMessage()], 404);
592|        }
593|
594|        return $this->json(['success' => true] + $data);
595|    }
596|
597|    /**
598|     * Leitura: requer PermissionTag ativa do produto ssma-contractor ou admin de plataforma.
599|     * OCR-Fixes: OCR-658-01
600|     */
601|    private function canAccess(): bool
602|    {
603|        if ($this->isContractorPlatformAdmin()) {
604|            return true;
605|        }
606|
607|        return $this->resolveContractorPermissionTag() instanceof PermissionTag;
608|    }
609|
610|    private function assertCanAccess(): void
611|    {
612|        if (!$this->canAccess()) {
613|            throw $this->createAccessDeniedException('Sem permissão para acessar Empresas Parceiras.');
614|        }
615|    }
616|
617|    private function jsonIfCannotAccess(): ?JsonResponse
618|    {
619|        if ($this->canAccess()) {
620|            return null;
621|        }
622|
623|        return $this->json(['success' => false, 'message' => 'Sem permissão.'], 403);
624|    }
625|
626|    private function canManage(): bool
627|    {
628|        if ($this->isContractorPlatformAdmin()) {
629|            return true;
630|        }
631|
632|        $tag = $this->resolveContractorPermissionTag();
633|        if (!$tag instanceof PermissionTag) {
634|            return false;
635|        }
636|
637|        $tagName = trim((string) $tag->getName());
638|        if ($tagName === '' || strcasecmp($tagName, 'Membro') === 0) {
639|            return false;
640|        }
641|
642|        if (in_array($tagName, [
643|            'Gestor Administrador',
644|            'Gestor de Equipe',
645|            'Supervisor de Equipe',
646|            'Supervisor',
647|        ], true)) {
648|            return true;
649|        }
650|
651|        return (bool) ($tag->getCanCreate() || $tag->getCanEdit());
652|    }
653|
654|    private function canManagePermissions(): bool
655|    {
656|        if ($this->isContractorPlatformAdmin()) {
657|            return true;
658|        }
659|
660|        $tag = $this->resolveContractorPermissionTag();
661|
662|        return $tag instanceof PermissionTag
663|            && $tag->getName() === 'Gestor Administrador';
664|    }
665|
666|    private function isContractorPlatformAdmin(): bool
667|    {
668|        $user = $this->getUser();
669|
670|        return $user instanceof User
671|            && ($user->isSuperAdmin() || in_array('ROLE_MANAGER', $user->getRoles(), true));
672|    }
673|
674|    private function resolveContractorPermissionTag(): ?PermissionTag
675|    {
676|        $user = $this->getUser();
677|        if (!$user instanceof User) {
678|            return null;
679|        }
680|
681|        $company = $user->getCompany();
682|        if (!$company instanceof Company) {
683|            return null;
684|        }
685|
686|        $member = $this->entityManager->getRepository(CompanyMembers::class)->findOneBy([
687|            'user' => $user,
688|            'company' => $company,
689|            'isRemoved' => false,
690|            'enabled' => true,
691|        ]);
692|        if (!$member instanceof CompanyMembers) {
693|            return null;
694|        }
695|
696|        $product = $this->entityManager->getRepository(Product::class)
697|            ->findOneBy(['slug' => self::CONTRACTOR_PRODUCT_SLUG]);
698|        if (!$product instanceof Product) {
699|            return null;
700|        }
701|
702|        return $this->permissionTagByMemberService->getPermissionTag($member, $product);
703|    }
704|
705|    private function resolveCompany(): Company
706|    {
707|        $user = $this->getUser();
708|        if (!$user instanceof User) {
709|            throw $this->createAccessDeniedException();
710|        }
711|
712|        $company = $user->getCompany();
713|        if (!$company instanceof Company) {
714|            throw $this->createAccessDeniedException('Empresa não encontrada.');
715|        }
716|
717|        return $company;
718|    }
719|
720|    private function resolveUser(): User
721|    {
722|        $user = $this->getUser();
723|        if (!$user instanceof User) {
724|            throw $this->createAccessDeniedException();
725|        }
726|
727|        return $user;
728|    }
729|}
730|

{"search_text": "function getRoles", "file_patterns": ["src/Entity/User.php"]}

File: src/Entity/User.php
Match lines: 1
312|    public function getRoles(): array

{"search_text": "isSuperAdmin", "file_patterns": ["src/Entity/User.php"]}

File: src/Entity/User.php
Match lines: 9
412|    public function isSuperAdmin(): bool
772|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
780|        if ($this->hasRole('ROLE_COMPANY_DIAMANTE') || $this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
788|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
796|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
804|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
812|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
821|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {
829|        if ($this->isSuperAdmin() || $this->getCompany()->getServicePackage() === null) {

{"file_path": "src/Entity/User.php", "start_line": 300, "end_line": 430}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 300-430
300|    public function getEmail(): ?string
301|    {
302|        return $this->email;
303|    }
304|
305|    public function setEmail(?string $email): self
306|    {
307|        $email = $email !== null ? strtolower(trim($email)) : null;
308|        $this->email = $email !== '' ? $email : null;
309|        return $this;
310|    }
311|
312|    public function getRoles(): array
313|    {
314|        $roles = array_unique($this->roles ?? []);
315|
316|        // access_control em ^/user exige ROLE_USER; candidatos às vezes só têm ROLE_CANDIDATE na BD → 403.
317|        if (\in_array(self::ROLE_CANDIDATE, $roles, true) && !\in_array(self::ROLE_USER, $roles, true)) {
318|            $roles[] = self::ROLE_USER;
319|        }
320|
321|        return $roles;
322|    }
323|
324|    public function setRoles(array $roles): self
325|    {
326|        $this->roles = $roles;
327|        return $this;
328|    }
329|
330|    public function getPassword(): string
331|    {
332|        return $this->password;
333|    }
334|
335|    public function setPassword(string $password): self
336|    {
337|        $this->password = $password;
338|        return $this;
339|    }
340|
341|    public function getSalt(): ?string
342|    {
343|        return null;
344|    }
345|
346|    public function eraseCredentials()
347|    {
348|        // If you store any temporary, sensitive data on the user, clear it here
349|    }
350|
351|    public function getUsername(): string
352|    {
353|        return $this->getUserIdentifier();
354|    }
355|
356|    public function getUserIdentifier(): string
357|    {
358|        $email = trim((string) $this->email);
359|        if ($email !== '') {
360|            return strtolower($email);
361|        }
362|
363|        $cpf = preg_replace('/\D+/', '', (string) ($this->profile?->getCpf() ?? ''));
364|        if ($cpf !== '') {
365|            return $cpf;
366|        }
367|
368|        return $this->id ? 'user:' . $this->id : 'user:new';
369|    }
370|
371|    public function getAuditIdentifier(): string
372|    {
373|        return $this->id ? 'user:' . $this->id : 'user:new';
374|    }
375|
376|    /**
377|     * A sessão contém uma versão serializada sem Profile. Sem esta comparação
378|     * por ID, senha e papéis, o Symfony compara getUserIdentifier(): a cópia da
379|     * sessão retorna user:<id>, enquanto a entidade recarregada retorna o CPF,
380|     * e encerra uma autenticação válida com "user has changed".
381|     */
382|    public function isEqualTo(UserInterface $user): bool
383|    {
384|        if (!$user instanceof self || $this->id === null || $this->id !== $user->getId()) {
385|            return false;
386|        }
387|
388|        if (!hash_equals((string) $this->password, (string) $user->getPassword())) {
389|            return false;
390|        }
391|
392|        $currentRoles = $this->getRoles();
393|        $refreshedRoles = $user->getRoles();
394|        sort($currentRoles);
395|        sort($refreshedRoles);
396|
397|        return $currentRoles === $refreshedRoles;
398|    }
399|
400|    public function getDisplayName(): string
401|    {
402|        $name = trim((string) $this->getFullName());
403|
404|        return $name !== '' ? $name : ($this->id ? 'Usuário #' . $this->id : 'Usuário');
405|    }
406|
407|    public function hasRole(string $role): bool
408|    {
409|        return in_array($role, $this->getRoles());
410|    }
411|
412|    public function isSuperAdmin(): bool
413|    {
414|        return $this->hasRole('ROLE_SUPER_ADMIN');
415|    }
416|
417|    public function getCompany(): ?Company
418|    {
419|        return $this->company;
420|    }
421|
422|    public function setCompany(?Company $company): self
423|    {
424|        $this->company = $company;
425|        return $this;
426|    }
427|
428|    public function getProfile(): ?Profile
429|    {
430|        return $this->profile;

{"file_patterns": ["src/Entity/User.php"], "search_text": "ROLE_MANAGER|role"}

No matches found

{"file_path": "src/Entity/User.php", "start_line": 60, "end_line": 140}

File: src/Entity/User.php (Total lines: 1529)
IS_TRUNCATED: false
LINE_RANGE: 60-140
60|
61|    /**
62|     * CEO / CFO / diretor financeiro — camada financeira opcional (alerta Concentração, §3.4).
63|     */
64|    const ROLE_METAHUMAN_CLIENT_STRATEGIC_FINANCE = 'ROLE_METAHUMAN_CLIENT_STRATEGIC_FINANCE';
65|
66|    /**
67|     * Exportação de memo jurídico §8.9 — Comitê 6 assédio (Model v3).
68|     */
69|    const ROLE_METAHUMAN_HARASSMENT_LEGAL_MEMO_EXPORT = 'ROLE_METAHUMAN_HARASSMENT_LEGAL_MEMO_EXPORT';
70|
71|    /**
72|     * @ORM\Id
73|     * @ORM\GeneratedValue
74|     * @ORM\Column(type="integer")
75|     * @Groups({"user_id"})
76|     */
77|    private $id;
78|
79|    /**
80|     * @ORM\Column(type="string", length=180, unique=true, nullable=true)
81|     */
82|    private $email;
83|
84|    /**
85|     * @ORM\Column(type="string", length=180, nullable=true)
86|     */
87|    private $avatar;
88|
89|    /**
90|     * @ORM\Column(type="json")
91|     */
92|    private $roles = [];
93|
94|    /**
95|     * @var string The hashed password
96|     * @ORM\Column(type="string")
97|     */
98|    private $password;
99|
100|    /**
101|     * @var string
102|     * @ORM\Column(type="boolean", nullable=true)
103|     */
104|    private $isClientUser;
105|    /**
106|     * @var string
107|     * @ORM\Column(type="boolean", nullable=true)
108|     */
109|    private $isGlobalUser;
110|    /**
111|     * @var string
112|     * @ORM\Column(type="string", nullable=true)
113|     */
114|    private $layout_profile;
115|    /**
116|     * @var string
117|     * @ORM\Column(type="boolean", nullable=true)
118|     */
119|    private $enabled;
120|
121|    /**
122|     * @var datetime
123|     * @ORM\Column(type="datetime", nullable=true)
124|     */
125|    private $last_login;
126|
127|    /**
128|     * @var string
129|     * @ORM\Column(type="boolean", nullable=true)
130|     */
131|    private $locked;
132|
133|    /**
134|     * @var string
135|     * @ORM\Column(type="boolean", nullable=true)
136|     */
137|    private $agree_terms;
138|
139|    /**
140|     * @var Profile

{"state": "DONE"}