Phase 5 reputation governance

app/Http/Controllers/AdminController.php

@@ -5,6 +5,7 @@ namespace App\Http\Controllers;
 use App\Models\Attachment;
 use App\Models\Dispute;
 use App\Models\JobPost;
+use App\Models\Review;
 use App\Models\User;
 use App\Models\WorkOrder;
 use Illuminate\Http\Request;
@@ -28,6 +29,11 @@ class AdminController extends Controller
             'jobs' => JobPost::with('buyer')->latest()->limit(10)->get(),
             'workOrders' => WorkOrder::with('jobPost', 'buyer', 'provider')->latest()->limit(10)->get(),
             'disputes' => Dispute::with('workOrder.jobPost', 'openedBy')->latest()->limit(10)->get(),
+            'reportedReviews' => Review::with('workOrder.jobPost', 'reviewer', 'reviewee', 'reportedBy')
+                ->where('moderation_status', 'reported')
+                ->latest('reported_at')
+                ->limit(10)
+                ->get(),
         ]);
     }
 }

app/Http/Controllers/ReviewController.php

@@ -2,6 +2,7 @@
 
 namespace App\Http\Controllers;
 
+use App\Models\Review;
 use App\Models\WorkOrder;
 use App\Notifications\ExchangeEventNotification;
 use Illuminate\Http\RedirectResponse;
@@ -20,20 +21,35 @@ class ReviewController extends Controller
         $data = $request->validate([
             'rating' => ['required', 'integer', 'min:1', 'max:5'],
             'communication_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'preparedness_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
             'scope_accuracy_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
             'payment_reliability_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'contact_availability_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'schedule_reasonableness_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'support_responsiveness_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'closeout_fairness_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
             'workmanship_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
             'timeliness_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'closeout_quality_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
+            'professionalism_rating' => ['nullable', 'integer', 'min:1', 'max:5'],
             'body' => ['nullable', 'string'],
         ]);
 
-        $workOrder->reviews()->updateOrCreate(
+        $review = $workOrder->reviews()
+            ->where('reviewer_id', $request->user()->id)
+            ->where('reviewee_id', $revieweeId)
+            ->first();
+
+        abort_if($review && ! $review->editableBy($request->user()), 422, 'The review edit window has closed.');
+
+        $review = $workOrder->reviews()->updateOrCreate(
             [
                 'reviewer_id' => $request->user()->id,
                 'reviewee_id' => $revieweeId,
             ],
             $data + [
                 'review_type' => $request->user()->id === $workOrder->buyer_id ? 'buyer_to_provider' : 'provider_to_buyer',
+                'moderation_status' => $review?->moderation_status ?? 'published',
             ]
         );
 
@@ -50,4 +66,61 @@ class ReviewController extends Controller
 
         return redirect()->route('work-orders.show', $workOrder)->with('status', 'Review saved.');
     }
+
+    public function respond(Request $request, Review $review): RedirectResponse
+    {
+        abort_unless($request->user()->id === $review->reviewee_id || $request->user()->hasRole('admin'), 403);
+
+        $data = $request->validate([
+            'response_body' => ['required', 'string', 'max:4000'],
+        ]);
+
+        $review->update([
+            'response_body' => $data['response_body'],
+            'response_at' => now(),
+        ]);
+
+        return redirect()->route('work-orders.show', $review->work_order_id)->with('status', 'Review response saved.');
+    }
+
+    public function report(Request $request, Review $review): RedirectResponse
+    {
+        abort_unless(
+            in_array($request->user()->id, [$review->reviewer_id, $review->reviewee_id], true)
+                || $request->user()->hasRole('admin'),
+            403
+        );
+
+        $data = $request->validate([
+            'report_reason' => ['required', 'string', 'max:4000'],
+        ]);
+
+        $review->update([
+            'reported_at' => now(),
+            'reported_by_id' => $request->user()->id,
+            'report_reason' => $data['report_reason'],
+            'moderation_status' => 'reported',
+        ]);
+
+        return redirect()->route('work-orders.show', $review->work_order_id)->with('status', 'Review reported for moderation.');
+    }
+
+    public function moderate(Request $request, Review $review): RedirectResponse
+    {
+        abort_unless($request->user()->hasRole('admin'), 403);
+
+        $data = $request->validate([
+            'moderation_status' => ['required', 'string', 'in:'.implode(',', Review::MODERATION_STATUSES)],
+            'moderation_notes' => ['nullable', 'string', 'max:4000'],
+        ]);
+
+        $review->update([
+            'moderation_status' => $data['moderation_status'],
+            'moderation_notes' => $data['moderation_notes'] ?? null,
+            'moderated_by_id' => $request->user()->id,
+            'moderated_at' => now(),
+        ]);
+
+        return redirect()->route('admin.index')->with('status', 'Review moderation updated.');
+    }
 }

app/Models/Review.php

@@ -8,11 +8,27 @@ use Illuminate\Database\Eloquent\Model;
 
 #[Fillable([
     'work_order_id', 'reviewer_id', 'reviewee_id', 'rating', 'communication_rating',
-    'scope_accuracy_rating', 'payment_reliability_rating', 'workmanship_rating',
-    'timeliness_rating', 'body', 'review_type',
+    'preparedness_rating', 'scope_accuracy_rating', 'payment_reliability_rating',
+    'contact_availability_rating', 'schedule_reasonableness_rating',
+    'support_responsiveness_rating', 'closeout_fairness_rating', 'workmanship_rating',
+    'timeliness_rating', 'closeout_quality_rating', 'professionalism_rating', 'body',
+    'review_type', 'response_body', 'response_at', 'reported_at', 'reported_by_id',
+    'report_reason', 'moderation_status', 'moderated_by_id', 'moderated_at',
+    'moderation_notes',
 ])]
 class Review extends Model
 {
+    public const MODERATION_STATUSES = ['published', 'reported', 'hidden', 'dismissed'];
+
+    protected function casts(): array
+    {
+        return [
+            'response_at' => 'datetime',
+            'reported_at' => 'datetime',
+            'moderated_at' => 'datetime',
+        ];
+    }
+
     public function workOrder(): BelongsTo
     {
         return $this->belongsTo(WorkOrder::class);
@@ -27,4 +43,30 @@ class Review extends Model
     {
         return $this->belongsTo(User::class, 'reviewee_id');
     }
+
+    public function reportedBy(): BelongsTo
+    {
+        return $this->belongsTo(User::class, 'reported_by_id');
+    }
+
+    public function moderatedBy(): BelongsTo
+    {
+        return $this->belongsTo(User::class, 'moderated_by_id');
+    }
+
+    public function isVisible(): bool
+    {
+        return $this->moderation_status !== 'hidden';
+    }
+
+    public function editableBy(User $user): bool
+    {
+        if ($user->hasRole('admin')) {
+            return true;
+        }
+
+        $hours = (int) config('reputation.review_edit_window_hours', 48);
+
+        return $this->reviewer_id === $user->id && $this->created_at?->greaterThanOrEqualTo(now()->subHours($hours));
+    }
 }