Starseed/src/Module/Technique/Domain/Entity/ProviderContact.php

<?php

declare(strict_types=1);

namespace App\Module\Technique\Domain\Entity;

use ApiPlatform\Metadata\ApiResource;
use ApiPlatform\Metadata\Delete;
use ApiPlatform\Metadata\Get;
use ApiPlatform\Metadata\Link;
use ApiPlatform\Metadata\Patch;
use ApiPlatform\Metadata\Post;
use App\Module\Technique\Infrastructure\ApiPlatform\State\Processor\ProviderContactProcessor;
use App\Module\Technique\Infrastructure\ApiPlatform\State\Provider\ProviderSubResourceItemProvider;
use App\Shared\Domain\Attribute\Auditable;
use App\Shared\Domain\Contract\BlamableInterface;
use App\Shared\Domain\Contract\TimestampableInterface;
use App\Shared\Domain\Trait\TimestampableBlamableTrait;
use Doctrine\ORM\Mapping as ORM;
use Symfony\Component\Serializer\Attribute\Groups;
use Symfony\Component\Validator\Constraints as Assert;

/**
 * Contact d'un prestataire (1:n) — onglet Contacts. Un bloc est valide des qu'au
 * moins un champ est rempli (RG-3.04) : garantie portee par un CHECK BDD
 * (chk_provider_contact_name) + le ProviderContactProcessor (ERP-135) ; l'entite
 * reste permissive (tous les champs nullable).
 *
 * Embarque sous `provider.contacts` au detail (groupe provider:item:read,
 * maillon (a) du contrat de serialisation). Maximum 2 telephones
 * (phonePrimary + phoneSecondary).
 *
 * Sous-ressource API (ERP-135, spec § 4.5) :
 *  - POST /api/providers/{providerId}/contacts : creation rattachee au prestataire
 *    parent (Link toProperty 'provider'), security technique.providers.manage.
 *  - PATCH / DELETE /api/provider_contacts/{id} : security technique.providers.manage.
 *    Le DELETE est physique et libre (pas de garde « dernier contact » au M3 —
 *    RG-3.12 front-driven, la collection peut rester vide cote back).
 *  - GET /api/provider_contacts/{id} : lecture unitaire (security view) — la lecture
 *    courante reste via le parent (le prestataire embarque ses contacts). Pas de GET
 *    collection autonome.
 * Tout passe par le ProviderContactProcessor (normalisation RG-3.11, RG-3.04).
 *
 * Audite (#[Auditable]) + Timestampable / Blamable (pattern Shared standard).
 */
#[ApiResource(
    operations: [
        new Get(
            security: "is_granted('technique.providers.view')",
            normalizationContext: ['groups' => ['provider:item:read']],
            // Cloisonnement par site du prestataire parent (§ 2.13) : 404 hors perimetre.
            provider: ProviderSubResourceItemProvider::class,
        ),
        new Post(
            uriTemplate: '/providers/{providerId}/contacts',
            uriVariables: [
                'providerId' => new Link(fromClass: Provider::class, toProperty: 'provider'),
            ],
            // read:false : pas de stade lecture du parent. Le Link toProperty
            // resoudrait l'enfant (SELECT ProviderContact ... WHERE provider = :id)
            // et casse en NonUniqueResult des >= 2 enfants. Le parent est rattache
            // manuellement par ProviderContactProcessor::linkParent (404 si absent).
            read: false,
            security: "is_granted('technique.providers.manage')",
            normalizationContext: ['groups' => ['provider:item:read']],
            denormalizationContext: ['groups' => ['provider:write:contacts']],
            processor: ProviderContactProcessor::class,
        ),
        new Patch(
            security: "is_granted('technique.providers.manage')",
            normalizationContext: ['groups' => ['provider:item:read']],
            denormalizationContext: ['groups' => ['provider:write:contacts']],
            provider: ProviderSubResourceItemProvider::class,
            processor: ProviderContactProcessor::class,
        ),
        new Delete(
            security: "is_granted('technique.providers.manage')",
            provider: ProviderSubResourceItemProvider::class,
            processor: ProviderContactProcessor::class,
        ),
    ],
)]
#[ORM\Entity]
#[ORM\Table(name: 'provider_contact')]
#[ORM\Index(name: 'idx_provider_contact_provider', columns: ['provider_id'])]
#[Auditable]
class ProviderContact implements TimestampableInterface, BlamableInterface, ProviderOwnedInterface
{
    use TimestampableBlamableTrait;

    #[ORM\Id]
    #[ORM\GeneratedValue]
    #[ORM\Column]
    #[Groups(['provider:item:read'])]
    private ?int $id = null;

    #[ORM\ManyToOne(targetEntity: Provider::class, inversedBy: 'contacts')]
    #[ORM\JoinColumn(name: 'provider_id', referencedColumnName: 'id', nullable: false, onDelete: 'CASCADE')]
    private ?Provider $provider = null;

    // RG-3.04 : au moins un champ du contact renseigne (CHECK BDD + Processor). Les
    // champs restent nullable au niveau ORM.
    #[ORM\Column(length: 120, nullable: true)]
    #[Assert\Length(max: 120, maxMessage: 'Le prénom ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $firstName = null;

    #[ORM\Column(length: 120, nullable: true)]
    #[Assert\Length(max: 120, maxMessage: 'Le nom ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $lastName = null;

    #[ORM\Column(length: 120, nullable: true)]
    #[Assert\Length(max: 120, maxMessage: 'La fonction ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $jobTitle = null;

    // Pas de validation de format telephone (saisie libre), mais une Assert\Length
    // calee sur la colonne VARCHAR(20) evite l'erreur Postgres (500 non rattachee au
    // champ) au profit d'une 422 propre (ERP-107).
    #[ORM\Column(length: 20, nullable: true)]
    #[Assert\Length(max: 20, maxMessage: 'Le téléphone ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $phonePrimary = null;

    #[ORM\Column(length: 20, nullable: true)]
    #[Assert\Length(max: 20, maxMessage: 'Le téléphone secondaire ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $phoneSecondary = null;

    #[ORM\Column(length: 180, nullable: true)]
    #[Assert\Email(message: 'L\'adresse email n\'est pas valide.')]
    #[Assert\Length(max: 180, maxMessage: 'L\'email ne peut dépasser {{ limit }} caractères.', normalizer: 'trim')]
    #[Groups(['provider:item:read', 'provider:write:contacts'])]
    private ?string $email = null;

    // Ordre d'affichage du contact (gere serveur, non expose au M3).
    #[ORM\Column(options: ['default' => 0])]
    private int $position = 0;

    public function getId(): ?int
    {
        return $this->id;
    }

    public function getProvider(): ?Provider
    {
        return $this->provider;
    }

    public function setProvider(?Provider $provider): static
    {
        $this->provider = $provider;

        return $this;
    }

    public function getFirstName(): ?string
    {
        return $this->firstName;
    }

    public function setFirstName(?string $firstName): static
    {
        $this->firstName = $firstName;

        return $this;
    }

    public function getLastName(): ?string
    {
        return $this->lastName;
    }

    public function setLastName(?string $lastName): static
    {
        $this->lastName = $lastName;

        return $this;
    }

    public function getJobTitle(): ?string
    {
        return $this->jobTitle;
    }

    public function setJobTitle(?string $jobTitle): static
    {
        $this->jobTitle = $jobTitle;

        return $this;
    }

    public function getPhonePrimary(): ?string
    {
        return $this->phonePrimary;
    }

    public function setPhonePrimary(?string $phonePrimary): static
    {
        $this->phonePrimary = $phonePrimary;

        return $this;
    }

    public function getPhoneSecondary(): ?string
    {
        return $this->phoneSecondary;
    }

    public function setPhoneSecondary(?string $phoneSecondary): static
    {
        $this->phoneSecondary = $phoneSecondary;

        return $this;
    }

    public function getEmail(): ?string
    {
        return $this->email;
    }

    public function setEmail(?string $email): static
    {
        $this->email = $email;

        return $this;
    }

    public function getPosition(): int
    {
        return $this->position;
    }

    public function setPosition(int $position): static
    {
        $this->position = $position;

        return $this;
    }
}