3aca674a78
앞선 감사 네 번은 "이 코드가 제대로 도는가"를 물었다. 이번엔 작업자·노조·안전관리자·
공장장·설치기사 5인 관점으로 3단논법을 세우고 전제를 코드로 확인한 뒤 반문으로 깼다.
5인 중 2인의 논증이 완전히, 2인이 부분적으로 무너졌다.
읽기 감사 — 이 시스템은 쓰기를 전부 감사했다. 임계값 한 번 바꾼 것까지 해시 체인에
들어간다. 그런데 작업자 사진을 열어보는 것은 하나도 남지 않았다. 감시 시스템과 안전
시스템을 가르는 선이 정확히 거기라서, 나머지 프라이버시 설계(RAM 링버퍼 7.5초·전송 전
얼굴 블러·라이브뷰 부재)가 전부 이 한 줄이 없어서 검증 불가능한 주장에 머물러 있었다.
거부된 열람은 기록하지 않는다 — 그러면 감사 로그가 "본 사람"이 아니라 "요청한 사람"
목록이 되어 정작 누가 봤는지를 묻는 데 못 쓴다.
크론 생존 — 죽은 노드는 스스로 신고할 수 없어서 크론이 하트비트의 부재로 판정한다.
그런데 그 크론이 멈추면 아무도 판정하지 않는다. 통보·5분 확대·장치 이상 발행이 전부 그
한 프로세스에 걸려 있어서, 멈춘 순간부터 화면은 조용해지고 그 침묵은 "사고 없음"과
구별되지 않는다. 감시자의 생존은 감시자가 아닌 쪽이 읽어야 한다.
증거 보존 — 스냅샷 삭제가 나이 하나만 봤다. 기본 7일인데 중대재해 조사는 몇 주에서 몇
달이라, 우리가 내건 목적("사고 후 원인 분석")이 8일째에 스스로 사라졌다. 확인 처리로
자동 연장하지 않는 이유는 자동이면 사실상 전량 보존이 되어 7일 약속이 무너지기 때문이다.
증거 정책 — 프레임이 ergo_report 하나만 빼고 모든 이벤트에 붙었다. 체류 상한 초과도
포함이라, 밀폐공간 프리셋 기본값(30분) 기준으로 정상 작업자가 규정대로 일하는 동안
주기적으로 본인 사진이 서버로 갔다. 위험해서가 아니라 오래 있어서. 기준을 명문화했다:
시간 경과 자체가 조건인 이벤트에는 사진을 붙이지 않는다.
마이그레이션 2026-09-25-evidence-hold-and-view-audit.sql (README-UPLOAD 10번).
검증: phpunit 302 passed(신규 18, 스킵 0) · pytest(신규 18)
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EBjuR7DW6PNNMows4KnbYU
485 lines
27 KiB
PHP
485 lines
27 KiB
PHP
<?php
|
|
declare(strict_types=1);
|
|
namespace App\Tests\Support;
|
|
use App\Repository\{DeviceRepository, NonceRepository, RateLimiterRepository,
|
|
EventRepository, SnapshotRepository, UserRepository, ZoneRepository,
|
|
ThresholdRepository, AuditRepository, ActionRepository, SuppressionRepository,
|
|
AlertRepository, HandoverRepository, RiskControlRepository, DeviceMetricRepository};
|
|
|
|
final class InMemoryDeviceRepository implements DeviceRepository {
|
|
public array $heartbeats = [];
|
|
// $statusRows: full device rows for listStatus() (the status panel tests populate it). Kept a
|
|
// trailing optional arg so the many existing 3-arg call sites are unaffected.
|
|
public function __construct(private array $secrets = [], private array $versions = [],
|
|
private array $sites = [], public array $statusRows = []) {}
|
|
public function secretFor(string $d): ?string { return $this->secrets[$d] ?? null; }
|
|
public function exists(string $d): bool {
|
|
// A device is "known" if it appears in any provisioned map the test set up.
|
|
return isset($this->secrets[$d]) || isset($this->sites[$d]) || isset($this->versions[$d]);
|
|
}
|
|
public function siteFor(string $d): ?string { return $this->sites[$d] ?? null; }
|
|
public function touchHeartbeat(string $d, array $m): void { $this->heartbeats[$d] = $m; }
|
|
public function configVersion(string $d): int { return $this->versions[$d] ?? 1; }
|
|
public function bumpConfigVersion(string $d): int {
|
|
if (!isset($this->secrets[$d]) && !isset($this->versions[$d])) return 0;
|
|
$this->versions[$d] = ($this->versions[$d] ?? 1) + 1;
|
|
return $this->versions[$d];
|
|
}
|
|
public function listStatus(?string $site): array {
|
|
$rows = $this->statusRows;
|
|
if ($site !== null) $rows = array_filter($rows, fn($d) => ($d['site'] ?? null) === $site);
|
|
return array_values($rows);
|
|
}
|
|
}
|
|
final class InMemoryNonceRepository implements NonceRepository {
|
|
public array $store = [];
|
|
public function seen(string $n): bool { return isset($this->store[$n]); }
|
|
public function remember(string $n, int $exp): void { $this->store[$n] = $exp; }
|
|
}
|
|
final class InMemoryRateLimiter implements RateLimiterRepository {
|
|
public array $counts = [];
|
|
public function hit(string $k, int $w): int { $key = "$k:$w"; return $this->counts[$key] = ($this->counts[$key] ?? 0) + 1; }
|
|
}
|
|
final class InMemoryEventRepository implements EventRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
public function insert(array $e): int { $id = ++$this->seq; $this->rows[$id] = $e + ['event_id' => $id, 'acknowledged_by' => null]; return $id; }
|
|
public function idByUuid(string $uuid): ?int {
|
|
foreach ($this->rows as $id => $r) if (($r['event_uuid'] ?? null) === $uuid) return (int)$id;
|
|
return null;
|
|
}
|
|
public function recent(int $limit, ?string $sev): array {
|
|
$r = array_reverse($this->rows, true);
|
|
if ($sev !== null) $r = array_filter($r, fn($x) => $x['severity'] === $sev);
|
|
return array_slice(array_values($r), 0, $limit);
|
|
}
|
|
public function page(int $limit, ?string $sev, ?string $beforeTs, ?int $beforeId, ?string $site = null): array {
|
|
$r = array_values($this->rows);
|
|
if ($sev !== null) $r = array_filter($r, fn($x) => $x['severity'] === $sev);
|
|
if ($site !== null) $r = array_filter($r, fn($x) => ($x['site'] ?? null) === $site);
|
|
// (occurred_at DESC, event_id DESC); events inserted without occurred_at sort as 0.
|
|
usort($r, fn($a, $b) => [$b['occurred_at'] ?? 0, $b['event_id']] <=> [$a['occurred_at'] ?? 0, $a['event_id']]);
|
|
if ($beforeTs !== null && $beforeId !== null) {
|
|
$bt = (float)$beforeTs; // cursor carries occurred_at as a string; compare numerically
|
|
$r = array_filter($r, fn($x) => ($x['occurred_at'] ?? 0) < $bt
|
|
|| (($x['occurred_at'] ?? 0) == $bt && $x['event_id'] < $beforeId));
|
|
}
|
|
return array_slice(array_values($r), 0, $limit);
|
|
}
|
|
public function find(int $id): ?array { return $this->rows[$id] ?? null; }
|
|
public function acknowledge(int $id, string $u): bool { if (!isset($this->rows[$id])) return false; $this->rows[$id]['acknowledged_by'] = $u; $this->rows[$id]['acknowledged_at'] = $this->rows[$id]['acknowledged_at'] ?? time(); return true; }
|
|
public function setHold(int $id, ?int $until): bool {
|
|
if (!isset($this->rows[$id])) return false;
|
|
$this->rows[$id]['hold_until'] = $until;
|
|
return true;
|
|
}
|
|
public function markFalsePositive(int $id, string $user): bool {
|
|
if (!isset($this->rows[$id])) return false;
|
|
$r = $this->rows[$id];
|
|
$r['false_positive_by'] = $r['false_positive_by'] ?? $user;
|
|
$r['false_positive_at'] = $r['false_positive_at'] ?? time();
|
|
$r['acknowledged_by'] = ($r['acknowledged_by'] ?? null) !== null ? $r['acknowledged_by'] : $user;
|
|
$this->rows[$id] = $r;
|
|
return true;
|
|
}
|
|
public function fpStats(float $since, ?string $site): array {
|
|
$groups = [];
|
|
foreach ($this->rows as $r) {
|
|
if (($r['occurred_at'] ?? 0) < $since) continue;
|
|
if ($site !== null && ($r['site'] ?? null) !== $site) continue;
|
|
$key = ($r['camera_id'] ?? '') . '|' . ($r['event_type'] ?? '');
|
|
$groups[$key] = $groups[$key] ?? ['camera_id' => $r['camera_id'], 'event_type' => $r['event_type'], 'total' => 0, 'fp' => 0];
|
|
$groups[$key]['total']++;
|
|
if (($r['false_positive_by'] ?? null) !== null) $groups[$key]['fp']++;
|
|
}
|
|
$out = array_values(array_filter($groups, fn($g) => $g['fp'] > 0));
|
|
usort($out, fn($a, $b) => $b['fp'] <=> $a['fp']);
|
|
return $out;
|
|
}
|
|
public function reportSummary(float $since, ?string $site, int $topCameras, ?float $until = null): array {
|
|
$rows = array_filter($this->rows, fn($r) => ($r['occurred_at'] ?? 0) >= $since
|
|
&& ($until === null || ($r['occurred_at'] ?? 0) < $until)
|
|
&& ($site === null || ($r['site'] ?? null) === $site));
|
|
$byType = []; $byCam = []; $ttaDeltas = []; $ergo = [];
|
|
foreach ($rows as $r) {
|
|
$tk = ($r['event_type'] ?? '') . '|' . ($r['severity'] ?? '');
|
|
$byType[$tk] = $byType[$tk] ?? ['event_type' => $r['event_type'], 'severity' => $r['severity'], 'count' => 0, 'unacked' => 0, 'fp' => 0];
|
|
$byType[$tk]['count']++;
|
|
if (($r['acknowledged_by'] ?? null) === null) $byType[$tk]['unacked']++;
|
|
if (($r['false_positive_by'] ?? null) !== null) $byType[$tk]['fp']++;
|
|
$cam = $r['camera_id'] ?? '';
|
|
$byCam[$cam] = $byCam[$cam] ?? ['camera_id' => $cam, 'count' => 0, 'critical_high' => 0];
|
|
$byCam[$cam]['count']++;
|
|
if (in_array($r['severity'] ?? '', ['critical', 'high'], true)) $byCam[$cam]['critical_high']++;
|
|
if (in_array($r['severity'] ?? '', ['critical', 'high'], true)
|
|
&& ($r['acknowledged_at'] ?? null) !== null && ($r['false_positive_by'] ?? null) === null
|
|
&& $r['acknowledged_at'] >= ($r['occurred_at'] ?? 0)) {
|
|
$ttaDeltas[] = $r['acknowledged_at'] - $r['occurred_at'];
|
|
}
|
|
if (($r['event_type'] ?? '') === 'ergo_report') $ergo[] = $r['metrics'] ?? [];
|
|
}
|
|
$cams = array_values($byCam);
|
|
usort($cams, fn($a, $b) => [$b['critical_high'], $b['count']] <=> [$a['critical_high'], $a['count']]);
|
|
return [
|
|
'by_type' => array_values($byType),
|
|
'by_camera' => array_slice($cams, 0, $topCameras),
|
|
'tta' => ['acked' => count($ttaDeltas),
|
|
'avg_s' => $ttaDeltas ? array_sum($ttaDeltas) / count($ttaDeltas) : null,
|
|
'max_s' => $ttaDeltas ? max($ttaDeltas) : null],
|
|
'ergo_metrics' => $ergo,
|
|
];
|
|
}
|
|
public function exportRows(float $since, ?string $site, int $limit): array {
|
|
$r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since
|
|
&& ($site === null || ($x['site'] ?? null) === $site));
|
|
usort($r, fn($a, $b) => [$b['occurred_at'] ?? 0, $b['event_id']] <=> [$a['occurred_at'] ?? 0, $a['event_id']]);
|
|
return array_slice(array_values($r), 0, $limit);
|
|
}
|
|
public function forNotification(float $since, int $limit): array {
|
|
$r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since);
|
|
usort($r, fn($a, $b) => [$a['occurred_at'] ?? 0, $a['event_id']] <=> [$b['occurred_at'] ?? 0, $b['event_id']]);
|
|
return array_slice(array_values($r), 0, $limit);
|
|
}
|
|
public function siteSummary(float $since, ?float $until = null): array {
|
|
$by = [];
|
|
foreach ($this->rows as $r) {
|
|
if (($r['occurred_at'] ?? 0) < $since) continue;
|
|
if ($until !== null && ($r['occurred_at'] ?? 0) >= $until) continue;
|
|
if (($r['event_type'] ?? '') === 'ergo_report') continue;
|
|
$s = $r['site'] ?? null;
|
|
$k = $s === null ? "\x00" : $s;
|
|
if (!isset($by[$k])) $by[$k] = ['site' => $s, 'count' => 0, 'critical_high' => 0,
|
|
'unacked' => 0, 'cameras' => [], ];
|
|
$by[$k]['count']++;
|
|
if (in_array($r['severity'] ?? '', ['critical', 'high'], true)) $by[$k]['critical_high']++;
|
|
if (empty($r['acknowledged_by'])) $by[$k]['unacked']++;
|
|
if (!empty($r['camera_id'])) $by[$k]['cameras'][$r['camera_id']] = true;
|
|
}
|
|
$out = array_map(fn($x) => ['site' => $x['site'], 'count' => $x['count'],
|
|
'critical_high' => $x['critical_high'], 'unacked' => $x['unacked'],
|
|
'cameras' => count($x['cameras'])], array_values($by));
|
|
usort($out, fn($a, $b) => [$b['critical_high'], $b['count']] <=> [$a['critical_high'], $a['count']]);
|
|
return $out;
|
|
}
|
|
public function windowForCamera(string $cam, float $from, float $to, ?string $site, int $limit): array {
|
|
$r = array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cam
|
|
&& ($x['occurred_at'] ?? 0) >= $from && ($x['occurred_at'] ?? 0) < $to
|
|
&& ($site === null || ($x['site'] ?? null) === $site));
|
|
usort($r, fn($a, $b) => [$a['occurred_at'] ?? 0, $a['event_id']] <=> [$b['occurred_at'] ?? 0, $b['event_id']]);
|
|
return array_slice(array_values($r), 0, $limit);
|
|
}
|
|
public function countForCamera(string $cam, float $from, float $to, ?string $site): int {
|
|
return count(array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cam
|
|
&& ($x['occurred_at'] ?? 0) >= $from && ($x['occurred_at'] ?? 0) < $to
|
|
&& ($x['event_type'] ?? '') !== 'ergo_report'
|
|
&& ($site === null || ($x['site'] ?? null) === $site)));
|
|
}
|
|
public function purgeOlderThan(float $cutoff, int $limit = 500): int {
|
|
$old = array_filter($this->rows, fn($r) => ($r['occurred_at'] ?? 0) < $cutoff);
|
|
$n = 0;
|
|
foreach (array_keys($old) as $id) {
|
|
if ($n >= $limit) break;
|
|
unset($this->rows[$id]); $n++;
|
|
}
|
|
return $n;
|
|
}
|
|
public function cameraExists(string $cam): bool {
|
|
foreach ($this->rows as $r) if (($r['camera_id'] ?? '') === $cam) return true;
|
|
return false;
|
|
}
|
|
public function siteForCamera(string $cam): ?string {
|
|
$best = null;
|
|
foreach ($this->rows as $r) {
|
|
if (($r['camera_id'] ?? '') !== $cam || ($r['site'] ?? null) === null) continue;
|
|
if ($best === null || ($r['event_id'] ?? 0) >= ($best['event_id'] ?? 0)) $best = $r;
|
|
}
|
|
return $best === null ? null : (string)$best['site'];
|
|
}
|
|
public function occurrenceTimes(float $since, ?string $site, int $limit): array {
|
|
$r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since
|
|
&& ($x['event_type'] ?? '') !== 'ergo_report'
|
|
&& ($site === null || ($x['site'] ?? null) === $site));
|
|
usort($r, fn($a, $b) => ($b['occurred_at'] ?? 0) <=> ($a['occurred_at'] ?? 0));
|
|
return array_map(fn($x) => ['occurred_at' => (float)($x['occurred_at'] ?? 0),
|
|
'event_type' => $x['event_type']], array_slice(array_values($r), 0, $limit));
|
|
}
|
|
public function heatmapPoints(string $cameraId, float $since, ?string $site, int $limit): array {
|
|
$r = array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cameraId
|
|
&& ($x['occurred_at'] ?? 0) >= $since
|
|
&& ($x['spatial_x'] ?? null) !== null && ($x['spatial_y'] ?? null) !== null
|
|
&& ($site === null || ($x['site'] ?? null) === $site));
|
|
usort($r, fn($a, $b) => ($b['occurred_at'] ?? 0) <=> ($a['occurred_at'] ?? 0));
|
|
return array_map(fn($x) => ['x' => (float)$x['spatial_x'], 'y' => (float)$x['spatial_y'],
|
|
'severity' => $x['severity'], 'event_type' => $x['event_type'],
|
|
'occurred_at' => (float)($x['occurred_at'] ?? 0)], array_slice(array_values($r), 0, $limit));
|
|
}
|
|
}
|
|
final class InMemorySnapshotRepository implements SnapshotRepository {
|
|
public array $rows = []; public array $paths = []; public array $created = [];
|
|
/** 실제 파일이 있어야 하는 테스트(SnapshotProxy 는 is_file() 을 본다)가 쓸 디렉터리.
|
|
* 기본값은 예전 그대로 /tmp — 경로 문자열만 쓰던 기존 테스트가 그대로 돈다. */
|
|
public function __construct(private string $dir = '/tmp') {}
|
|
public function add(int $e, string $uuid, string $hash): void {
|
|
// Mirror the DB's UNIQUE (event_id, content_hash): a re-sent event's identical bytes
|
|
// collide instead of duplicating, so the dedup recovery path is idempotent.
|
|
foreach ($this->rows[$e] ?? [] as $r) { if ($r['content_hash'] === $hash) return; }
|
|
$this->rows[$e][] = ['file_uuid' => $uuid, 'content_hash' => $hash]; $this->paths[$uuid] = rtrim($this->dir, '/\\') . "/$uuid.jpg"; $this->created[$uuid] = time();
|
|
}
|
|
public function forEvent(int $e): array { return $this->rows[$e] ?? []; }
|
|
public function thumbUuidsFor(array $eventIds): array {
|
|
$out = [];
|
|
foreach ($eventIds as $e) {
|
|
$list = $this->rows[(int)$e] ?? [];
|
|
if ($list !== []) $out[(int)$e] = end($list)['file_uuid']; // newest = last appended
|
|
}
|
|
return $out;
|
|
}
|
|
public function pathByUuid(string $u): ?string { return $this->paths[$u] ?? null; }
|
|
public function eventIdByUuid(string $u): ?int {
|
|
foreach ($this->rows as $e => $list) foreach ($list as $r) if ($r['file_uuid'] === $u) return (int)$e;
|
|
return null;
|
|
}
|
|
/** @var array<string,string> file_uuid => camera_id, recorded by the tests that need it */
|
|
public array $cameras = [];
|
|
/** @var array<string,string> file_uuid => device_id */
|
|
public array $devices = [];
|
|
public function latestForCamera(string $cameraId): ?array {
|
|
// Insert order, newest first -- mirrors the Pdo impl's ORDER BY snapshot_id DESC.
|
|
foreach (array_reverse($this->cameras, true) as $uuid => $cam) {
|
|
if ($cam === $cameraId) return ['file_uuid' => $uuid, 'device_id' => $this->devices[$uuid] ?? ''];
|
|
}
|
|
return null;
|
|
}
|
|
public function uuidsFor(array $eventIds): array {
|
|
$out = [];
|
|
foreach ($eventIds as $e) {
|
|
foreach ($this->rows[(int)$e] ?? [] as $r) $out[(int)$e][] = $r['file_uuid'];
|
|
}
|
|
return $out;
|
|
}
|
|
public function purgeOlderThan(int $cutoff): int {
|
|
$n = 0;
|
|
foreach ($this->created as $uuid => $ts) {
|
|
if ($ts >= $cutoff) continue;
|
|
unset($this->created[$uuid], $this->paths[$uuid]);
|
|
foreach ($this->rows as $e => $list) {
|
|
$this->rows[$e] = array_values(array_filter($list, fn($r) => $r['file_uuid'] !== $uuid));
|
|
}
|
|
$n++;
|
|
}
|
|
return $n;
|
|
}
|
|
}
|
|
final class InMemoryUserRepository implements UserRepository {
|
|
public function __construct(public array $users = []) {}
|
|
public function byUsername(string $u): ?array { return $this->users[$u] ?? null; }
|
|
public function recordFailure(int $id, int $lock): void { foreach ($this->users as &$row) if ($row['id'] === $id) { $row['failed_attempts'] = ($row['failed_attempts'] ?? 0) + 1; $row['locked_until'] = $lock; } }
|
|
public function clearFailures(int $id): void { foreach ($this->users as &$row) if ($row['id'] === $id) { $row['failed_attempts'] = 0; $row['locked_until'] = 0; } }
|
|
}
|
|
final class InMemoryZoneRepository implements ZoneRepository {
|
|
public array $zones = []; private int $seq = 0;
|
|
public function forDevice(string $d): array { return array_values(array_filter($this->zones, fn($z) => ($z['device_id'] ?? '') === $d)); }
|
|
public function forCamera(string $c): array { return array_values(array_filter($this->zones, fn($z) => $z['camera_id'] === $c)); }
|
|
public function find(string $id): ?array { return $this->zones[$id] ?? null; }
|
|
public function save(array $z): string { $id = $z['zone_id'] ?? ('z' . (++$this->seq)); $this->zones[$id] = $z + ['zone_id' => $id]; return $id; }
|
|
public function delete(string $id): bool { if (!isset($this->zones[$id])) return false; unset($this->zones[$id]); return true; }
|
|
}
|
|
final class InMemoryActionRepository implements ActionRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
public function insert(array $a): int { $id = ++$this->seq; $this->rows[$id] = $a + ['action_id' => $id]; return $id; }
|
|
public function recent(int $limit, ?string $site): array {
|
|
$r = array_values(array_filter($this->rows,
|
|
fn($a) => $site === null || ($a['site'] ?? null) === $site));
|
|
usort($r, fn($a, $b) => [$b['taken_at'], $b['action_id']] <=> [$a['taken_at'], $a['action_id']]);
|
|
return array_slice($r, 0, $limit);
|
|
}
|
|
}
|
|
final class InMemoryThresholdRepository implements ThresholdRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
/** @param array $data device_id => [key => value] (the pre-editor shape many tests use) */
|
|
public function __construct(array $data = []) {
|
|
foreach ($data as $dev => $kv) foreach ($kv as $k => $v) {
|
|
$id = ++$this->seq;
|
|
$this->rows[$id] = ['id' => $id, 'device_id' => $dev, 'camera_id' => null, 'key' => $k,
|
|
'value' => (string)$v, 'updated_by' => null, 'updated_at' => null, 'site' => null];
|
|
}
|
|
}
|
|
public function forDevice(string $d): array {
|
|
// Device-wide rows only — the same contract PdoThresholdRepository has, so a test that
|
|
// passes here cannot pass for a reason the delivered query would not reproduce.
|
|
$out = [];
|
|
foreach ($this->rows as $r) if ($r['device_id'] === $d && $r['camera_id'] === null) $out[$r['key']] = $r['value'];
|
|
return $out;
|
|
}
|
|
public function listAll(?string $site): array {
|
|
return array_values(array_filter($this->rows, fn($r) => $site === null || $r['site'] === $site));
|
|
}
|
|
public function set(string $dev, ?string $cam, string $k, string $v, string $actor, int $now): int {
|
|
foreach ($this->rows as $id => $r) {
|
|
if ($r['device_id'] === $dev && $r['camera_id'] === $cam && $r['key'] === $k) {
|
|
$this->rows[$id]['value'] = $v;
|
|
$this->rows[$id]['updated_by'] = $actor;
|
|
$this->rows[$id]['updated_at'] = $now;
|
|
return $id;
|
|
}
|
|
}
|
|
$id = ++$this->seq;
|
|
$this->rows[$id] = ['id' => $id, 'device_id' => $dev, 'camera_id' => $cam, 'key' => $k,
|
|
'value' => $v, 'updated_by' => $actor, 'updated_at' => $now, 'site' => null];
|
|
return $id;
|
|
}
|
|
public function remove(int $id, ?string $site): bool {
|
|
if (!isset($this->rows[$id])) return false;
|
|
if ($site !== null && $this->rows[$id]['site'] !== $site) return false;
|
|
unset($this->rows[$id]); return true;
|
|
}
|
|
public function find(int $id): ?array { return $this->rows[$id] ?? null; }
|
|
}
|
|
final class InMemoryAuditRepository implements AuditRepository {
|
|
public array $log = [];
|
|
public function append(string $a, string $act, string $t, array $b, array $af): void { $this->log[] = compact('a', 'act', 't', 'b', 'af'); }
|
|
}
|
|
final class InMemorySuppressionRepository implements SuppressionRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
private function live(array $r, int $now): bool {
|
|
return $r['revoked_at'] === null && $r['starts_at'] <= $now && $r['ends_at'] > $now;
|
|
}
|
|
public function activeFor(array $scopes, int $now): array {
|
|
return array_values(array_filter($this->rows, function ($r) use ($scopes, $now) {
|
|
if (!$this->live($r, $now)) return false;
|
|
foreach ($scopes as [$type, $id]) if ($r['scope_type'] === $type && $r['scope_id'] === (string)$id) return true;
|
|
return false;
|
|
}));
|
|
}
|
|
public function listAll(?string $site, int $now, bool $includeExpired = false): array {
|
|
$r = array_values(array_filter($this->rows, fn($x) =>
|
|
($site === null || $x['site'] === $site) && ($includeExpired || $this->live($x, $now))));
|
|
usort($r, fn($a, $b) => $b['created_at'] <=> $a['created_at']);
|
|
return $r;
|
|
}
|
|
public function create(array $row): int {
|
|
$id = ++$this->seq;
|
|
$this->rows[$id] = $row + ['suppression_id' => $id, 'revoked_by' => null, 'revoked_at' => null];
|
|
return $id;
|
|
}
|
|
public function revoke(int $id, string $user, int $now, ?string $site): bool {
|
|
if (!isset($this->rows[$id]) || $this->rows[$id]['revoked_at'] !== null) return false;
|
|
if ($site !== null && $this->rows[$id]['site'] !== $site) return false;
|
|
$this->rows[$id]['revoked_by'] = $user; $this->rows[$id]['revoked_at'] = $now; return true;
|
|
}
|
|
public function find(int $id): ?array { return $this->rows[$id] ?? null; }
|
|
}
|
|
final class InMemoryAlertRepository implements AlertRepository {
|
|
public array $chan = []; public array $log = []; private int $seq = 0;
|
|
/** Observation hook: how many times claim() was actually attempted. The dispatcher is
|
|
* supposed to pre-filter already-delivered pairs, and the only way to see that from the
|
|
* outside is to count the attempts. */
|
|
public int $claimCalls = 0;
|
|
public function __construct(array $channels = []) { foreach ($channels as $c) $this->saveChannel($c); }
|
|
public function channels(?string $s): array {
|
|
$r = array_values(array_filter($this->chan, fn($c) =>
|
|
$c['enabled'] && ($s === null || $c['site'] === null || $c['site'] === $s)));
|
|
usort($r, fn($a, $b) => [$a['step'], $a['channel_id']] <=> [$b['step'], $b['channel_id']]);
|
|
return $r;
|
|
}
|
|
public function allChannels(?string $s): array {
|
|
return array_values(array_filter($this->chan, fn($c) => $s === null || $c['site'] === $s));
|
|
}
|
|
public function saveChannel(array $row): int {
|
|
$id = $row['channel_id'] ?? ++$this->seq;
|
|
$this->chan[$id] = $row + ['channel_id' => $id, 'site' => null, 'enabled' => 1, 'step' => 0,
|
|
'escalate_after_s' => 0, 'min_severity' => 'high', 'config_json' => '{}'];
|
|
return $id;
|
|
}
|
|
public function deleteChannel(int $id, ?string $s): bool {
|
|
if (!isset($this->chan[$id])) return false;
|
|
if ($s !== null && $this->chan[$id]['site'] !== $s) return false;
|
|
unset($this->chan[$id]); return true;
|
|
}
|
|
private function key(int $e, int $c): string { return $e . ':' . $c; }
|
|
public function claim(int $e, int $c, int $now): bool {
|
|
$this->claimCalls++;
|
|
if (isset($this->log[$this->key($e, $c)])) return false;
|
|
$this->log[$this->key($e, $c)] = ['event_id' => $e, 'channel_id' => $c, 'status' => 'pending',
|
|
'attempts' => 0, 'last_error' => null, 'queued_at' => $now, 'sent_at' => null];
|
|
return true;
|
|
}
|
|
public function markSent(int $e, int $c, int $now): void {
|
|
$k = $this->key($e, $c);
|
|
if (isset($this->log[$k])) { $this->log[$k]['status'] = 'sent'; $this->log[$k]['sent_at'] = $now; $this->log[$k]['attempts']++; }
|
|
}
|
|
public function markFailed(int $e, int $c, string $err, int $now): void {
|
|
$k = $this->key($e, $c);
|
|
if (isset($this->log[$k])) { $this->log[$k]['status'] = 'failed'; $this->log[$k]['last_error'] = $err; $this->log[$k]['attempts']++; }
|
|
}
|
|
public function markSuppressed(int $e, int $c, int $now): void {
|
|
$k = $this->key($e, $c);
|
|
if (isset($this->log[$k])) { $this->log[$k]['status'] = 'suppressed'; $this->log[$k]['sent_at'] = $now; }
|
|
}
|
|
public function forEvent(int $e): array {
|
|
return array_values(array_filter($this->log, fn($r) => $r['event_id'] === $e));
|
|
}
|
|
public function retryable(int $max, int $limit): array {
|
|
return array_slice(array_values(array_filter($this->log,
|
|
fn($r) => $r['status'] === 'failed' && $r['attempts'] < $max)), 0, $limit);
|
|
}
|
|
public function claimedSince(int $since): array {
|
|
$out = [];
|
|
foreach ($this->log as $r) {
|
|
if ($r['queued_at'] >= $since) $out[$r['event_id'] . ':' . $r['channel_id']] = true;
|
|
}
|
|
return $out;
|
|
}
|
|
public function pruneResolved(int $before): int {
|
|
$n = count($this->log);
|
|
$this->log = array_filter($this->log, fn($r) =>
|
|
!($r['queued_at'] < $before && in_array($r['status'], ['sent', 'suppressed'], true)));
|
|
return $n - count($this->log);
|
|
}
|
|
}
|
|
final class InMemoryHandoverRepository implements HandoverRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
public function recent(?string $s, int $limit): array {
|
|
$r = array_values(array_filter($this->rows, fn($x) => $s === null || $x['site'] === $s));
|
|
usort($r, fn($a, $b) => $b['created_at'] <=> $a['created_at']);
|
|
return array_slice($r, 0, $limit);
|
|
}
|
|
public function latest(?string $s): ?array { return $this->recent($s, 1)[0] ?? null; }
|
|
public function create(array $row): int {
|
|
$id = ++$this->seq; $this->rows[$id] = $row + ['handover_id' => $id]; return $id;
|
|
}
|
|
}
|
|
final class InMemoryRiskControlRepository implements RiskControlRepository {
|
|
public array $rows = []; private int $seq = 0;
|
|
public function listAll(?string $s): array {
|
|
return array_values(array_filter($this->rows, fn($r) => $s === null || $r['site'] === $s));
|
|
}
|
|
public function upsert(array $row): void {
|
|
foreach ($this->rows as $id => $r) {
|
|
if ($r['site'] === ($row['site'] ?? null) && $r['event_type'] === $row['event_type']) {
|
|
$this->rows[$id] = $row + ['control_id' => $id]; return;
|
|
}
|
|
}
|
|
$id = ++$this->seq; $this->rows[$id] = $row + ['control_id' => $id];
|
|
}
|
|
public function delete(int $id, ?string $s): bool {
|
|
if (!isset($this->rows[$id])) return false;
|
|
if ($s !== null && $this->rows[$id]['site'] !== $s) return false;
|
|
unset($this->rows[$id]); return true;
|
|
}
|
|
}
|
|
final class InMemoryDeviceMetricRepository implements DeviceMetricRepository {
|
|
public array $rows = [];
|
|
public function append(string $d, array $m, int $now): void {
|
|
$this->rows[] = ['device_id' => $d, 'ts' => $now] + $m;
|
|
}
|
|
public function series(string $d, int $since, int $limit): array {
|
|
$r = array_values(array_filter($this->rows, fn($x) => $x['device_id'] === $d && $x['ts'] >= $since));
|
|
usort($r, fn($a, $b) => $a['ts'] <=> $b['ts']);
|
|
return array_slice($r, 0, $limit);
|
|
}
|
|
public function prune(int $before): int {
|
|
$n = count($this->rows);
|
|
$this->rows = array_values(array_filter($this->rows, fn($x) => $x['ts'] >= $before));
|
|
return $n - count($this->rows);
|
|
}
|
|
}
|