AiDOPWarehouse/server/Plugins/Admin.NET.Plugin.AiDOP/Service/S8/S8NotificationLayerService.cs

using Admin.NET.Core;
using Admin.NET.Plugin.AiDOP.Entity.S8;
using Admin.NET.Plugin.AiDOP.Infrastructure;
using Admin.NET.Plugin.AiDOP.Infrastructure.S8;

namespace Admin.NET.Plugin.AiDOP.Service.S8;

public class S8NotificationLayerService : ITransient
{
    private readonly SqlSugarRepository<AdoS8NotificationLayer> _rep;
    private readonly SqlSugarRepository<SysRole> _roleRep;

    public S8NotificationLayerService(
        SqlSugarRepository<AdoS8NotificationLayer> rep,
        SqlSugarRepository<SysRole> roleRep)
    {
        _rep = rep;
        _roleRep = roleRep;
    }

    public async Task<List<AdoS8NotificationLayer>> ListAsync(long tenantId, long factoryId) =>
        await _rep.AsQueryable()
            .Where(x => x.TenantId == tenantId && x.FactoryId == factoryId)
            .ToListAsync();

    public async Task<List<object>> GetRoleOptionsAsync()
    {
        var roles = await _roleRep.AsQueryable()
            .Where(x => (x.Id >= 1329908000101L && x.Id <= 1329908000107L) || x.Id == 1300000000101L)
            .OrderBy(x => x.Id)
            .Select(x => new { value = x.Code, label = x.Name })
            .ToListAsync();
        return roles.Cast<object>().ToList();
    }

    // S8-TENANT-FACTORY-P0-CLOSURE-1：归属一律由服务端可信作用域盖章，忽略 body.TenantId / body.FactoryId。
    public async Task<AdoS8NotificationLayer> CreateAsync(AdoS8NotificationLayer body, S8TrustedScope scope)
    {
        if (string.IsNullOrWhiteSpace(body.SceneCode) || string.IsNullOrWhiteSpace(body.Severity) || string.IsNullOrWhiteSpace(body.LevelCode))
            throw new S8BizException("场景、严重度、层级必填");
        if (string.IsNullOrWhiteSpace(body.TargetRoleIds))
            throw new S8BizException("目标角色必填");
        if (string.IsNullOrWhiteSpace(body.NotifyChannel))
            throw new S8BizException("通知渠道至少选一个");
        // S8-SEVERITY-FOLLOW-SERIOUS-STANDARDIZE-EXEC-1：归一为 FOLLOW/SERIOUS 后再校验/写入。
        body.Severity = S8SeverityCode.Normalize(body.Severity);
        body.TenantId = scope.TenantId;
        body.FactoryId = scope.FactoryId;
        var exists = await _rep.AsQueryable()
            .AnyAsync(x => x.TenantId == body.TenantId && x.FactoryId == body.FactoryId &&
                           x.SceneCode == body.SceneCode && x.Severity == body.Severity && x.LevelCode == body.LevelCode);
        if (exists) throw new S8BizException("同场景+严重度+层级已存在");
        body.Id = 0;
        body.CreatedAt = DateTime.Now;
        return await _rep.InsertReturnEntityAsync(body);
    }

    // S8-TENANT-FACTORY-P0-CLOSURE-1：按 Id + 可信作用域绑行；越权 Id 视为不存在，归属不可被 body 改写。
    public async Task<AdoS8NotificationLayer> UpdateAsync(long id, AdoS8NotificationLayer body, S8TrustedScope scope)
    {
        var e = await LoadScopedAsync(id, scope);
        if (string.IsNullOrWhiteSpace(body.SceneCode) || string.IsNullOrWhiteSpace(body.Severity) || string.IsNullOrWhiteSpace(body.LevelCode))
            throw new S8BizException("场景、严重度、层级必填");
        if (string.IsNullOrWhiteSpace(body.TargetRoleIds))
            throw new S8BizException("目标角色必填");
        if (string.IsNullOrWhiteSpace(body.NotifyChannel))
            throw new S8BizException("通知渠道至少选一个");
        // S8-SEVERITY-FOLLOW-SERIOUS-STANDARDIZE-EXEC-1：归一为 FOLLOW/SERIOUS 后再校验/写入。
        body.Severity = S8SeverityCode.Normalize(body.Severity);
        var exists = await _rep.AsQueryable()
            .AnyAsync(x => x.Id != id && x.TenantId == e.TenantId && x.FactoryId == e.FactoryId &&
                           x.SceneCode == body.SceneCode && x.Severity == body.Severity && x.LevelCode == body.LevelCode);
        if (exists) throw new S8BizException("同场景+严重度+层级已存在");
        body.Id = id;
        body.TenantId = e.TenantId;
        body.FactoryId = e.FactoryId;
        body.CreatedAt = e.CreatedAt;
        body.UpdatedAt = DateTime.Now;
        await _rep.UpdateAsync(body);
        return body;
    }

    // S8-TENANT-FACTORY-P0-CLOSURE-1：删除必须先按可信作用域绑行，禁止裸 DeleteByIdAsync(id)。
    public async Task DeleteAsync(long id, S8TrustedScope scope)
    {
        var e = await LoadScopedAsync(id, scope);
        await _rep.DeleteByIdAsync(e.Id);
    }

    private async Task<AdoS8NotificationLayer> LoadScopedAsync(long id, S8TrustedScope scope) =>
        await _rep.AsQueryable()
            .Where(x => x.Id == id && x.TenantId == scope.TenantId && x.FactoryId == scope.FactoryId)
            .FirstAsync() ?? throw new S8NotFoundException();
}