AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP/Service/S8/S8RuleHandlerPoolService.cs

using Admin.NET.Core;
using Admin.NET.Plugin.AiDOP.Entity.S8;
using Admin.NET.Plugin.AiDOP.Infrastructure;
using Admin.NET.Plugin.AiDOP.Infrastructure.S8;
using Microsoft.Extensions.Logging;

namespace Admin.NET.Plugin.AiDOP.Service.S8;

/// <summary>人员池成员（展示用）。</summary>
public sealed class S8HandlerUserDto
{
    public long UserId { get; set; }
    public string Account { get; set; } = string.Empty;
    public string DisplayName { get; set; } = string.Empty;
    /// <summary>该账号当前是否仍可用（同租户 + 启用）。false = 历史配置已失效，前端需显式提示。</summary>
    public bool Valid { get; set; }
}

/// <summary>
/// 责任池的<b>读侧</b> seam。就绪门禁、认领资格、可见性收敛、以及后续的通知收件人解析
/// 都只需要读 —— 让它们依赖这个窄接口而不是整个服务，既能在单测里替身，
/// 也让「谁会写这张表」在类型层面收敛到配置入口一处。
/// </summary>
public interface IS8RuleHandlerPoolReader
{
    /// <summary>池成员账号 Id（原样返回，含可能已失效的历史成员）。</summary>
    Task<IReadOnlyList<long>> GetMemberIdsAsync(long tenantId, string ruleCode);

    /// <summary>池成员（含展示信息与有效性标记）。失效成员照样返回、只标 <c>Valid=false</c>。</summary>
    Task<List<S8HandlerUserDto>> GetMembersAsync(long tenantId, string ruleCode);

    /// <summary>该账号是否属于这条规则的责任池（停用 / 跨租户成员一律不算数）。</summary>
    Task<bool> IsMemberAsync(long tenantId, string ruleCode, long userId);

    /// <summary>该账号在本租户负责的全部规则编码（供可见性过滤使用）。</summary>
    Task<IReadOnlyList<string>> GetRuleCodesForUserAsync(long tenantId, long userId);

    /// <summary>批量取多条规则的池成员（避免规则列表页 N+1）。</summary>
    Task<IReadOnlyDictionary<string, List<long>>> GetPoolsAsync(long tenantId, IEnumerable<string> ruleCodes);
}

/// <summary>
/// S8-HANDLER-POOL-1：规则处理账号池的<b>唯一</b>读写实现。
///
/// <para>它回答的是「哪些账号负责这条规则」，与「哪个角色能做认领这类动作」
/// （<see cref="IS8ExceptionActionAuthorizer"/>）是两个正交问题。
/// 最终允许 = 动作权限 ∩ 规则责任 ∩ 状态机。</para>
///
/// <para><b>成员合法性复用 <see cref="IS8UserScopeValidator"/></b>，不另写一套判据：
/// 池成员与认领人必须用同一把尺子，否则会出现「配得进池、认领时又被拒」这种
/// 管理员完全无法自查的状态。</para>
/// </summary>
public class S8RuleHandlerPoolService : IS8RuleHandlerPoolReader, ITransient
{
    private readonly SqlSugarRepository<AdoS8RuleHandlerUser> _rep;
    private readonly IS8UserScopeValidator _userScope;
    private readonly UserManager _userManager;
    private readonly ILogger<S8RuleHandlerPoolService> _logger;

    public S8RuleHandlerPoolService(
        SqlSugarRepository<AdoS8RuleHandlerUser> rep,
        IS8UserScopeValidator userScope,
        UserManager userManager,
        ILogger<S8RuleHandlerPoolService> logger)
    {
        _rep = rep;
        _userScope = userScope;
        _userManager = userManager;
        _logger = logger;
    }

    // ────────────────────────────── 读 ──────────────────────────────

    /// <summary>池成员的账号 Id（原样返回，含可能已失效的历史成员）。</summary>
    public async Task<IReadOnlyList<long>> GetMemberIdsAsync(long tenantId, string ruleCode)
    {
        if (tenantId <= 0 || string.IsNullOrWhiteSpace(ruleCode)) return Array.Empty<long>();
        return await _rep.AsQueryable().ClearFilter()
            .Where(x => x.TenantId == tenantId && x.RuleCode == ruleCode)
            .Select(x => x.UserId)
            .ToListAsync();
    }

    /// <summary>
    /// 池成员（含展示信息与有效性标记）。
    ///
    /// <para><b>失效成员照样返回、只标 <c>Valid=false</c></b>，不静默过滤：
    /// 账号被停用或移出租户之后，管理员必须能在页面上看见"这里有一个人已经不算数了"，
    /// 而不是眼看着池子无声地少了一个人。</para>
    /// </summary>
    public async Task<List<S8HandlerUserDto>> GetMembersAsync(long tenantId, string ruleCode)
    {
        var ids = await GetMemberIdsAsync(tenantId, ruleCode);
        if (ids.Count == 0) return new List<S8HandlerUserDto>();

        var valid = (await _userScope.ValidateUsersAsync(tenantId, ids)).ToDictionary(u => u.UserId);

        return ids.Distinct().Select(id => valid.TryGetValue(id, out var u)
            ? new S8HandlerUserDto { UserId = id, Account = u.Account, DisplayName = u.DisplayName, Valid = true }
            : new S8HandlerUserDto { UserId = id, Account = string.Empty, DisplayName = "账号已停用或不在本租户", Valid = false })
            .ToList();
    }

    /// <summary>
    /// 该账号是否属于这条规则的责任池。<b>停用 / 跨租户成员一律不算数</b> ——
    /// 判据与认领时完全同源，避免"配置里有他、运行时又不认"。
    /// </summary>
    public async Task<bool> IsMemberAsync(long tenantId, string ruleCode, long userId)
    {
        if (tenantId <= 0 || userId <= 0 || string.IsNullOrWhiteSpace(ruleCode)) return false;

        var exists = await _rep.AsQueryable().ClearFilter()
            .Where(x => x.TenantId == tenantId && x.RuleCode == ruleCode && x.UserId == userId)
            .AnyAsync();
        if (!exists) return false;

        return await _userScope.FindActiveUserAsync(tenantId, userId) != null;
    }

    /// <summary>该账号在本租户负责的全部规则编码（供可见性过滤使用）。</summary>
    public async Task<IReadOnlyList<string>> GetRuleCodesForUserAsync(long tenantId, long userId)
    {
        if (tenantId <= 0 || userId <= 0) return Array.Empty<string>();
        return await _rep.AsQueryable().ClearFilter()
            .Where(x => x.TenantId == tenantId && x.UserId == userId)
            .Select(x => x.RuleCode)
            .Distinct()
            .ToListAsync();
    }

    /// <summary>批量取多条规则的池成员（避免规则列表页 N+1）。</summary>
    public async Task<IReadOnlyDictionary<string, List<long>>> GetPoolsAsync(long tenantId, IEnumerable<string> ruleCodes)
    {
        var codes = ruleCodes.Where(c => !string.IsNullOrWhiteSpace(c)).Distinct().ToList();
        if (tenantId <= 0 || codes.Count == 0)
            return new Dictionary<string, List<long>>(StringComparer.OrdinalIgnoreCase);

        var rows = await _rep.AsQueryable().ClearFilter()
            .Where(x => x.TenantId == tenantId && codes.Contains(x.RuleCode))
            .Select(x => new { x.RuleCode, x.UserId })
            .ToListAsync();

        return rows.GroupBy(x => x.RuleCode, StringComparer.OrdinalIgnoreCase)
            .ToDictionary(g => g.Key, g => g.Select(x => x.UserId).Distinct().ToList(), StringComparer.OrdinalIgnoreCase);
    }

    // ────────────────────────────── 写 ──────────────────────────────

    /// <summary>
    /// 全量替换某条规则的处理账号池。
    ///
    /// <para>成员必须是本租户的启用账号 —— 跨租户与不存在共用同一文案，不泄漏存在性。
    /// 判据来自 <see cref="IS8UserScopeValidator"/>，与认领 / 转派 / 复检完全同源。</para>
    /// </summary>
    public async Task SetMembersAsync(S8TrustedScope scope, string ruleCode, IEnumerable<long>? userIds)
    {
        if (string.IsNullOrWhiteSpace(ruleCode)) throw new S8BizException("规则编码不能为空");

        var wanted = (userIds ?? Enumerable.Empty<long>()).Where(x => x > 0).Distinct().ToList();

        if (wanted.Count > 0)
        {
            var validated = await _userScope.ValidateUsersAsync(scope.TenantId, wanted);
            var validIds = validated.Select(u => u.UserId).ToHashSet();
            if (wanted.Any(id => !validIds.Contains(id)))
                throw new S8BizException("所选账号不存在或已停用");
        }

        var existing = await _rep.AsQueryable().ClearFilter()
            .Where(x => x.TenantId == scope.TenantId && x.RuleCode == ruleCode)
            .ToListAsync();

        var existingIds = existing.Select(x => x.UserId).ToHashSet();
        var toRemove = existing.Where(x => !wanted.Contains(x.UserId)).Select(x => x.Id).ToList();
        var toAdd = wanted.Where(id => !existingIds.Contains(id)).ToList();

        if (toRemove.Count > 0)
            await _rep.AsDeleteable().Where(x => toRemove.Contains(x.Id)).ExecuteCommandAsync();

        if (toAdd.Count > 0)
        {
            var now = DateTime.Now;
            await _rep.AsInsertable(toAdd.Select(id => new AdoS8RuleHandlerUser
            {
                TenantId = scope.TenantId,
                RuleCode = ruleCode,
                UserId = id,
                CreatedAt = now,
                CreatedBy = _userManager.Account
            }).ToList()).ExecuteCommandAsync();
        }

        _logger.LogInformation(
            "s8_rule_handler_pool_updated tenant={Tenant} rule={Rule} added={Added} removed={Removed} total={Total}",
            scope.TenantId, ruleCode, toAdd.Count, toRemove.Count, wanted.Count);
    }
}