technical-services-exchange/app/Http/Controllers/WorkOrderController.php

<?php

namespace App\Http\Controllers;

use App\Models\WorkOrder;
use App\Notifications\ExchangeEventNotification;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\Support\Arr;
use Illuminate\View\View;

class WorkOrderController extends Controller
{
    public function index(Request $request): View
    {
        $orders = WorkOrder::with('jobPost', 'buyer.buyerProfile', 'provider.providerProfile', 'ratings.user')
            ->where(fn ($query) => $query
                ->where('buyer_id', $request->user()->id)
                ->orWhere('provider_id', $request->user()->id)
            )
            ->latest()
            ->paginate(20);

        return view('work-orders.index', ['orders' => $orders]);
    }

    public function show(Request $request, WorkOrder $workOrder): View
    {
        $this->authorizeParticipant($request, $workOrder);

        return view('work-orders.show', [
            'workOrder' => $workOrder->load(
                'jobPost',
                'buyer.buyerProfile',
                'provider.providerProfile',
                'acceptedQuote',
                'reviews.reviewer',
                'reviews.reviewee',
                'disputes.openedBy',
                'messages.user',
                'attachments',
                'ratings.user',
            ),
        ]);
    }

    public function print(Request $request, WorkOrder $workOrder): View
    {
        $this->authorizeParticipant($request, $workOrder);

        return view('work-orders.print', [
            'workOrder' => $workOrder->load(
                'jobPost',
                'buyer.buyerProfile',
                'provider.providerProfile',
                'acceptedQuote',
                'attachments',
            ),
        ]);
    }

    public function transition(Request $request, WorkOrder $workOrder): RedirectResponse
    {
        $this->authorizeParticipant($request, $workOrder);

        $data = $request->validate([
            'status' => ['required', 'string', 'in:'.implode(',', WorkOrder::STATUSES)],
            'completion_notes' => ['nullable', 'string'],
            'checklist_completed' => ['nullable', 'array'],
            'checklist_completed.*' => ['nullable', 'boolean'],
        ]);

        $status = $data['status'];
        abort_unless($workOrder->canTransitionTo($status), 422, 'This status transition is not allowed.');
        $this->authorizeTransitionRole($request, $workOrder, $status);

        $timestamps = [
            'en_route' => 'en_route_at',
            'on_site' => 'on_site_at',
            'in_progress' => 'started_at',
            'completed' => 'completed_at',
            'buyer_approved' => 'approved_at',
            'closed' => 'closed_at',
        ];

        $history = $workOrder->status_history ?? [];
        $history[] = [
            'status' => $status,
            'user_id' => $request->user()->id,
            'at' => now()->toIso8601String(),
        ];

        $updates = [
            'status' => $status,
            'status_history' => $history,
            'completion_notes' => $data['completion_notes'] ?? $workOrder->completion_notes,
            'checklist_completed' => $this->normalizeChecklistCompletion(
                $workOrder,
                $data['checklist_completed'] ?? $workOrder->checklistCompleted()
            ),
        ];

        if (isset($timestamps[$status]) && ! $workOrder->{$timestamps[$status]}) {
            $updates[$timestamps[$status]] = now();
        }

        $workOrder->update($updates);

        $recipient = $request->user()->id === $workOrder->buyer_id
            ? $workOrder->provider
            : $workOrder->buyer;

        $recipient->notify(new ExchangeEventNotification(
            'Work order updated',
            $request->user()->name.' changed '.$workOrder->jobPost->title.' to '.str_replace('_', ' ', $status).'.',
            route('work-orders.show', $workOrder),
            'work_order_status'
        ));

        return redirect()->route('work-orders.show', $workOrder)->with('status', 'Work order updated.');
    }

    public function updateDetails(Request $request, WorkOrder $workOrder): RedirectResponse
    {
        $this->authorizeParticipant($request, $workOrder);
        abort_unless($request->user()->id === $workOrder->buyer_id || $request->user()->hasRole('admin'), 403);

        $data = $request->validate([
            'scheduled_at' => ['nullable', 'date'],
            'appointment_window' => ['nullable', 'string', 'max:255'],
            'agreed_terms' => ['nullable', 'string'],
            'deliverables_checklist' => ['nullable', 'string'],
            'required_evidence' => ['nullable', 'string'],
            'evidence_rules' => ['nullable', 'array'],
            'evidence_rules.*' => ['nullable', 'string', 'max:255'],
        ]);

        $checklistItems = collect(preg_split('/\r\n|\r|\n/', (string) ($data['deliverables_checklist'] ?? '')))
            ->map(fn (string $item): string => trim($item, " \t\n\r\0\x0B-[]"))
            ->filter()
            ->values()
            ->all();

        $workOrder->update([
            'scheduled_at' => $data['scheduled_at'] ?? null,
            'appointment_window' => $data['appointment_window'] ?? null,
            'agreed_terms' => $data['agreed_terms'] ?? null,
            'deliverables_checklist' => $data['deliverables_checklist'] ?? null,
            'checklist_items' => $checklistItems,
            'checklist_completed' => $this->normalizeChecklistCompletion($workOrder, $workOrder->checklistCompleted(), $checklistItems),
            'required_evidence' => $data['required_evidence'] ?? null,
            'evidence_rules' => array_values(array_filter($data['evidence_rules'] ?? [])),
        ]);

        return redirect()->route('work-orders.show', $workOrder)->with('status', 'Work order details updated.');
    }

    public function requestChange(Request $request, WorkOrder $workOrder): RedirectResponse
    {
        $this->authorizeParticipant($request, $workOrder);

        $data = $request->validate([
            'summary' => ['required', 'string', 'max:255'],
            'details' => ['nullable', 'string'],
        ]);

        $requests = $workOrder->changeRequests();
        $requests[] = [
            'summary' => $data['summary'],
            'details' => $data['details'] ?? null,
            'requested_by_id' => $request->user()->id,
            'requested_by_name' => $request->user()->name,
            'status' => 'open',
            'requested_at' => now()->toIso8601String(),
        ];

        $workOrder->update(['change_requests' => $requests]);

        $recipient = $request->user()->id === $workOrder->buyer_id
            ? $workOrder->provider
            : $workOrder->buyer;

        $recipient->notify(new ExchangeEventNotification(
            'Work order change requested',
            $request->user()->name.' requested a change on '.$workOrder->jobPost->title.'.',
            route('work-orders.show', $workOrder),
            'work_order_change_request'
        ));

        return redirect()->route('work-orders.show', $workOrder)->with('status', 'Change request recorded.');
    }

    private function authorizeParticipant(Request $request, WorkOrder $workOrder): void
    {
        abort_unless(
            in_array($request->user()->id, [$workOrder->buyer_id, $workOrder->provider_id], true)
                || $request->user()->hasRole('admin'),
            403
        );
    }

    private function authorizeTransitionRole(Request $request, WorkOrder $workOrder, string $status): void
    {
        $userId = $request->user()->id;

        $providerStatuses = ['en_route', 'on_site', 'in_progress', 'completed'];
        $buyerStatuses = ['buyer_approved', 'closed', 'cancelled'];
        $sharedStatuses = ['disputed'];

        if (in_array($status, $providerStatuses, true)) {
            abort_unless($workOrder->provider_id === $userId || $request->user()->hasRole('admin'), 403);
        } elseif (in_array($status, $buyerStatuses, true)) {
            abort_unless($workOrder->buyer_id === $userId || $request->user()->hasRole('admin'), 403);
        } elseif (in_array($status, $sharedStatuses, true)) {
            abort_unless(in_array($userId, [$workOrder->buyer_id, $workOrder->provider_id], true) || $request->user()->hasRole('admin'), 403);
        }
    }

    private function normalizeChecklistCompletion(WorkOrder $workOrder, array $completed, ?array $items = null): array
    {
        $items ??= $workOrder->checklistItems();

        return collect($items)
            ->mapWithKeys(fn (string $item): array => [$item => (bool) Arr::get($completed, $item, false)])
            ->all();
    }
}