AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP/Service/S8/S8MasterDataAdapter.cs

using Admin.NET.Plugin.AiDOP.Entity.S0.Manufacturing;
using Admin.NET.Plugin.AiDOP.Entity.S0.Warehouse;
using Admin.NET.Plugin.AiDOP.Infrastructure;
using Admin.NET.Plugin.AiDOP.Infrastructure.S8;

namespace Admin.NET.Plugin.AiDOP.Service.S8;

/// <summary>
/// S8 主数据下拉：优先复用 S0 已落库主数据语义（部门等），无则返回空列表，不把「下拉查询」误建成独立业务表。
///
/// <para><b>S8-P0-3-MASTERDATA-TRUSTED-SCOPE-1 作用域合同</b>：三个入口的工厂边界
/// **一律由 <see cref="S8TrustedScopeResolver"/> 从认证身份解析**，
/// 客户端传入的 <c>factoryRefId</c> 只被视为筛选意图，**当前实现直接忽略、不承担授权作用**。</para>
///
/// <para><b>S8-SYSUSER-ONLY-1</b>：<c>GetEmployeesAsync</c> 已退役，由
/// <see cref="GetOperatorUsersAsync"/> 取代 —— S8 的"人"只有系统账号一种。</para>
/// </summary>
public class S8MasterDataAdapter : ITransient
{
    private readonly SqlSugarRepository<AdoS0DepartmentMaster> _deptRep;
    private readonly SqlSugarRepository<AdoS0LineMaster> _lineRep;
    private readonly SqlSugarRepository<SysUser> _sysUserRep;
    private readonly IS8UserScopeValidator _userScope;
    private readonly IS8ExceptionActionAuthorizer _actionAuthorizer;

    public S8MasterDataAdapter(
        SqlSugarRepository<AdoS0DepartmentMaster> deptRep,
        SqlSugarRepository<AdoS0LineMaster> lineRep,
        SqlSugarRepository<SysUser> sysUserRep,
        IS8UserScopeValidator userScope,
        IS8ExceptionActionAuthorizer actionAuthorizer)
    {
        _deptRep = deptRep;
        _lineRep = lineRep;
        _sysUserRep = sysUserRep;
        _userScope = userScope;
        _actionAuthorizer = actionAuthorizer;
    }

    /// <summary>
    /// S8-TENANT-ONLY-BATCH6：主数据下拉的边界由 <c>factory_ref_id</c> 改为 <c>tenant_id</c>。
    ///
    /// <para><b>这不是等价改写，是修一个真实越权。</b>真库取证（aidopdev，只读）：
    /// <c>factory_ref_id = 1000</c> 同时属于租户 <c>824585161322565</c> 与 <c>797403760988229</c>——
    /// 按工厂过滤会把另一租户的 613 名员工 / 210 个部门直接列进本租户的下拉框。
    /// 工厂号从来就不是隔离维度，之前只是没人对着数据看过。</para>
    ///
    /// <para>可用性同样已验证：三张表 <c>tenant_id</c> 100% 非空
    /// （EmployeeMaster 1105 行 / DepartmentMaster 239 行 / LineMaster 169 行，NULL 均为 0），
    /// 每个租户都有非空主数据，改判据不会把下拉打空。</para>
    /// </summary>
    public async Task<object> GetDepartmentsAsync(S8TrustedScope scope) =>
        await _deptRep.AsQueryable()
            .Where(x => x.TenantId == scope.TenantId)
            .Take(500)
            .Select(x => new { id = x.Id, code = x.Department, name = x.Descr ?? x.Department })
            .ToListAsync();

    /// <summary>
    /// S8 人员选择器的<b>唯一</b>数据源：当前租户的<b>启用系统账号</b>。
    ///
    /// <para>S8-SYSUSER-ONLY-1：替代原 <c>GetEmployeesAsync</c>。原实现列的是
    /// <c>EmployeeMaster</c>，每行还挂一个 <c>bindStatus: BOUND/UNBOUND</c> —— 也就是说，
    /// 下拉框里绝大多数选项<b>选了也没用</b>：真库 1105 名员工只有 8 个绑了账号，
    /// 选中未绑定的员工后通知发不出去、审批流转办静默跳过，而页面上没有任何提示。
    /// 现在列的就是账号本身，<b>不存在"选了但用不了"的选项</b>。</para>
    ///
    /// <para>边界只有租户，与 <see cref="GetDepartmentsAsync"/> 同因：
    /// <c>factory_ref_id = 1000</c> 横跨两个租户，工厂从来不是隔离维度。</para>
    /// </summary>
    /// <param name="requiredAction">
    /// S8-UAT-APPROVAL-REPAIR-1：只列具备该动作权限的账号（如挑选检验人时传
    /// <c>EXCEPTION_VERIFY</c>）。为空则返回全部启用账号。
    /// <para>存在的意义是让「页面上能选到的人」与「后端会放行的人」一致 ——
    /// 否则用户会选中一个看起来正常、提交却被拒的账号。</para>
    /// </param>
    public async Task<object> GetOperatorUsersAsync(S8TrustedScope scope, string? requiredAction = null)
    {
        var users = await _userScope.ValidateUsersAsync(
            scope.TenantId,
            await _sysUserRep.AsQueryable().ClearFilter()
                .Where(u => u.TenantId == scope.TenantId)
                .Take(S8UserScopeValidator.MaxHydrationKeys)
                .Select(u => u.Id)
                .ToListAsync());

        if (!string.IsNullOrWhiteSpace(requiredAction))
        {
            var allowed = new List<S8OperatorUser>();
            foreach (var u in users)
            {
                var auth = await _actionAuthorizer.AuthorizeAsync(scope.TenantId, u.UserId, requiredAction!);
                if (auth.Allowed) allowed.Add(u);
            }
            users = allowed;
        }

        return users
            .OrderBy(u => u.DisplayName, StringComparer.Ordinal)
            .Select(u => new { id = u.UserId, name = u.DisplayName, account = u.Account })
            .ToList();
    }

    /// <summary>产线下拉，边界同 <see cref="GetDepartmentsAsync"/>。</summary>
    public async Task<object> GetLinesAsync(S8TrustedScope scope) =>
        await _lineRep.AsQueryable()
            .Where(x => x.TenantId == scope.TenantId)
            .Take(500)
            .Select(x => new { id = x.Id, code = x.Line, name = x.Describe ?? x.Line })
            .ToListAsync();
}