move_detect/server/tests/Support/InMemoryRepositories.php

<?php
declare(strict_types=1);
namespace App\Tests\Support;
use App\Repository\{DeviceRepository, NonceRepository, RateLimiterRepository,
    EventRepository, SnapshotRepository, UserRepository, ZoneRepository,
    ThresholdRepository, AuditRepository, ActionRepository, SuppressionRepository,
    AlertRepository, HandoverRepository, RiskControlRepository, DeviceMetricRepository};

final class InMemoryDeviceRepository implements DeviceRepository {
    public array $heartbeats = [];
    // $statusRows: full device rows for listStatus() (the status panel tests populate it). Kept a
    // trailing optional arg so the many existing 3-arg call sites are unaffected.
    public function __construct(private array $secrets = [], private array $versions = [],
                               private array $sites = [], public array $statusRows = []) {}
    public function secretFor(string $d): ?string { return $this->secrets[$d] ?? null; }
    public function exists(string $d): bool {
        // A device is "known" if it appears in any provisioned map the test set up.
        return isset($this->secrets[$d]) || isset($this->sites[$d]) || isset($this->versions[$d]);
    }
    public function siteFor(string $d): ?string { return $this->sites[$d] ?? null; }
    public function touchHeartbeat(string $d, array $m): void { $this->heartbeats[$d] = $m; }
    public function configVersion(string $d): int { return $this->versions[$d] ?? 1; }
    public function bumpConfigVersion(string $d): int {
        if (!isset($this->secrets[$d]) && !isset($this->versions[$d])) return 0;
        $this->versions[$d] = ($this->versions[$d] ?? 1) + 1;
        return $this->versions[$d];
    }
    public function listStatus(?string $site): array {
        $rows = $this->statusRows;
        if ($site !== null) $rows = array_filter($rows, fn($d) => ($d['site'] ?? null) === $site);
        return array_values($rows);
    }
}
final class InMemoryNonceRepository implements NonceRepository {
    public array $store = [];
    public function seen(string $n): bool { return isset($this->store[$n]); }
    public function remember(string $n, int $exp): void { $this->store[$n] = $exp; }
}
final class InMemoryRateLimiter implements RateLimiterRepository {
    public array $counts = [];
    public function hit(string $k, int $w): int { $key = "$k:$w"; return $this->counts[$key] = ($this->counts[$key] ?? 0) + 1; }
}
final class InMemoryEventRepository implements EventRepository {
    public array $rows = []; private int $seq = 0;
    public function insert(array $e): int { $id = ++$this->seq; $this->rows[$id] = $e + ['event_id' => $id, 'acknowledged_by' => null]; return $id; }
    public function idByUuid(string $uuid): ?int {
        foreach ($this->rows as $id => $r) if (($r['event_uuid'] ?? null) === $uuid) return (int)$id;
        return null;
    }
    public function recent(int $limit, ?string $sev): array {
        $r = array_reverse($this->rows, true);
        if ($sev !== null) $r = array_filter($r, fn($x) => $x['severity'] === $sev);
        return array_slice(array_values($r), 0, $limit);
    }
    public function page(int $limit, ?string $sev, ?string $beforeTs, ?int $beforeId, ?string $site = null): array {
        $r = array_values($this->rows);
        if ($sev !== null) $r = array_filter($r, fn($x) => $x['severity'] === $sev);
        if ($site !== null) $r = array_filter($r, fn($x) => ($x['site'] ?? null) === $site);
        // (occurred_at DESC, event_id DESC); events inserted without occurred_at sort as 0.
        usort($r, fn($a, $b) => [$b['occurred_at'] ?? 0, $b['event_id']] <=> [$a['occurred_at'] ?? 0, $a['event_id']]);
        if ($beforeTs !== null && $beforeId !== null) {
            $bt = (float)$beforeTs;   // cursor carries occurred_at as a string; compare numerically
            $r = array_filter($r, fn($x) => ($x['occurred_at'] ?? 0) < $bt
                || (($x['occurred_at'] ?? 0) == $bt && $x['event_id'] < $beforeId));
        }
        return array_slice(array_values($r), 0, $limit);
    }
    public function find(int $id): ?array { return $this->rows[$id] ?? null; }
    public function acknowledge(int $id, string $u): bool { if (!isset($this->rows[$id])) return false; $this->rows[$id]['acknowledged_by'] = $u; $this->rows[$id]['acknowledged_at'] = $this->rows[$id]['acknowledged_at'] ?? time(); return true; }
    public function markFalsePositive(int $id, string $user): bool {
        if (!isset($this->rows[$id])) return false;
        $r = $this->rows[$id];
        $r['false_positive_by'] = $r['false_positive_by'] ?? $user;
        $r['false_positive_at'] = $r['false_positive_at'] ?? time();
        $r['acknowledged_by'] = ($r['acknowledged_by'] ?? null) !== null ? $r['acknowledged_by'] : $user;
        $this->rows[$id] = $r;
        return true;
    }
    public function fpStats(float $since, ?string $site): array {
        $groups = [];
        foreach ($this->rows as $r) {
            if (($r['occurred_at'] ?? 0) < $since) continue;
            if ($site !== null && ($r['site'] ?? null) !== $site) continue;
            $key = ($r['camera_id'] ?? '') . '|' . ($r['event_type'] ?? '');
            $groups[$key] = $groups[$key] ?? ['camera_id' => $r['camera_id'], 'event_type' => $r['event_type'], 'total' => 0, 'fp' => 0];
            $groups[$key]['total']++;
            if (($r['false_positive_by'] ?? null) !== null) $groups[$key]['fp']++;
        }
        $out = array_values(array_filter($groups, fn($g) => $g['fp'] > 0));
        usort($out, fn($a, $b) => $b['fp'] <=> $a['fp']);
        return $out;
    }
    public function reportSummary(float $since, ?string $site, int $topCameras, ?float $until = null): array {
        $rows = array_filter($this->rows, fn($r) => ($r['occurred_at'] ?? 0) >= $since
            && ($until === null || ($r['occurred_at'] ?? 0) < $until)
            && ($site === null || ($r['site'] ?? null) === $site));
        $byType = []; $byCam = []; $ttaDeltas = []; $ergo = [];
        foreach ($rows as $r) {
            $tk = ($r['event_type'] ?? '') . '|' . ($r['severity'] ?? '');
            $byType[$tk] = $byType[$tk] ?? ['event_type' => $r['event_type'], 'severity' => $r['severity'], 'count' => 0, 'unacked' => 0, 'fp' => 0];
            $byType[$tk]['count']++;
            if (($r['acknowledged_by'] ?? null) === null) $byType[$tk]['unacked']++;
            if (($r['false_positive_by'] ?? null) !== null) $byType[$tk]['fp']++;
            $cam = $r['camera_id'] ?? '';
            $byCam[$cam] = $byCam[$cam] ?? ['camera_id' => $cam, 'count' => 0, 'critical_high' => 0];
            $byCam[$cam]['count']++;
            if (in_array($r['severity'] ?? '', ['critical', 'high'], true)) $byCam[$cam]['critical_high']++;
            if (in_array($r['severity'] ?? '', ['critical', 'high'], true)
                && ($r['acknowledged_at'] ?? null) !== null && ($r['false_positive_by'] ?? null) === null
                && $r['acknowledged_at'] >= ($r['occurred_at'] ?? 0)) {
                $ttaDeltas[] = $r['acknowledged_at'] - $r['occurred_at'];
            }
            if (($r['event_type'] ?? '') === 'ergo_report') $ergo[] = $r['metrics'] ?? [];
        }
        $cams = array_values($byCam);
        usort($cams, fn($a, $b) => [$b['critical_high'], $b['count']] <=> [$a['critical_high'], $a['count']]);
        return [
            'by_type' => array_values($byType),
            'by_camera' => array_slice($cams, 0, $topCameras),
            'tta' => ['acked' => count($ttaDeltas),
                      'avg_s' => $ttaDeltas ? array_sum($ttaDeltas) / count($ttaDeltas) : null,
                      'max_s' => $ttaDeltas ? max($ttaDeltas) : null],
            'ergo_metrics' => $ergo,
        ];
    }
    public function exportRows(float $since, ?string $site, int $limit): array {
        $r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since
            && ($site === null || ($x['site'] ?? null) === $site));
        usort($r, fn($a, $b) => [$b['occurred_at'] ?? 0, $b['event_id']] <=> [$a['occurred_at'] ?? 0, $a['event_id']]);
        return array_slice(array_values($r), 0, $limit);
    }
    public function forNotification(float $since, int $limit): array {
        $r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since);
        usort($r, fn($a, $b) => [$a['occurred_at'] ?? 0, $a['event_id']] <=> [$b['occurred_at'] ?? 0, $b['event_id']]);
        return array_slice(array_values($r), 0, $limit);
    }
    public function siteSummary(float $since, ?float $until = null): array {
        $by = [];
        foreach ($this->rows as $r) {
            if (($r['occurred_at'] ?? 0) < $since) continue;
            if ($until !== null && ($r['occurred_at'] ?? 0) >= $until) continue;
            if (($r['event_type'] ?? '') === 'ergo_report') continue;
            $s = $r['site'] ?? null;
            $k = $s === null ? "\x00" : $s;
            if (!isset($by[$k])) $by[$k] = ['site' => $s, 'count' => 0, 'critical_high' => 0,
                                            'unacked' => 0, 'cameras' => [], ];
            $by[$k]['count']++;
            if (in_array($r['severity'] ?? '', ['critical', 'high'], true)) $by[$k]['critical_high']++;
            if (empty($r['acknowledged_by'])) $by[$k]['unacked']++;
            if (!empty($r['camera_id'])) $by[$k]['cameras'][$r['camera_id']] = true;
        }
        $out = array_map(fn($x) => ['site' => $x['site'], 'count' => $x['count'],
            'critical_high' => $x['critical_high'], 'unacked' => $x['unacked'],
            'cameras' => count($x['cameras'])], array_values($by));
        usort($out, fn($a, $b) => [$b['critical_high'], $b['count']] <=> [$a['critical_high'], $a['count']]);
        return $out;
    }
    public function windowForCamera(string $cam, float $from, float $to, ?string $site, int $limit): array {
        $r = array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cam
            && ($x['occurred_at'] ?? 0) >= $from && ($x['occurred_at'] ?? 0) < $to
            && ($site === null || ($x['site'] ?? null) === $site));
        usort($r, fn($a, $b) => [$a['occurred_at'] ?? 0, $a['event_id']] <=> [$b['occurred_at'] ?? 0, $b['event_id']]);
        return array_slice(array_values($r), 0, $limit);
    }
    public function countForCamera(string $cam, float $from, float $to, ?string $site): int {
        return count(array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cam
            && ($x['occurred_at'] ?? 0) >= $from && ($x['occurred_at'] ?? 0) < $to
            && ($x['event_type'] ?? '') !== 'ergo_report'
            && ($site === null || ($x['site'] ?? null) === $site)));
    }
    public function purgeOlderThan(float $cutoff, int $limit = 500): int {
        $old = array_filter($this->rows, fn($r) => ($r['occurred_at'] ?? 0) < $cutoff);
        $n = 0;
        foreach (array_keys($old) as $id) {
            if ($n >= $limit) break;
            unset($this->rows[$id]); $n++;
        }
        return $n;
    }
    public function cameraExists(string $cam): bool {
        foreach ($this->rows as $r) if (($r['camera_id'] ?? '') === $cam) return true;
        return false;
    }
    public function siteForCamera(string $cam): ?string {
        $best = null;
        foreach ($this->rows as $r) {
            if (($r['camera_id'] ?? '') !== $cam || ($r['site'] ?? null) === null) continue;
            if ($best === null || ($r['event_id'] ?? 0) >= ($best['event_id'] ?? 0)) $best = $r;
        }
        return $best === null ? null : (string)$best['site'];
    }
    public function occurrenceTimes(float $since, ?string $site, int $limit): array {
        $r = array_filter($this->rows, fn($x) => ($x['occurred_at'] ?? 0) >= $since
            && ($x['event_type'] ?? '') !== 'ergo_report'
            && ($site === null || ($x['site'] ?? null) === $site));
        usort($r, fn($a, $b) => ($b['occurred_at'] ?? 0) <=> ($a['occurred_at'] ?? 0));
        return array_map(fn($x) => ['occurred_at' => (float)($x['occurred_at'] ?? 0),
            'event_type' => $x['event_type']], array_slice(array_values($r), 0, $limit));
    }
    public function heatmapPoints(string $cameraId, float $since, ?string $site, int $limit): array {
        $r = array_filter($this->rows, fn($x) => ($x['camera_id'] ?? '') === $cameraId
            && ($x['occurred_at'] ?? 0) >= $since
            && ($x['spatial_x'] ?? null) !== null && ($x['spatial_y'] ?? null) !== null
            && ($site === null || ($x['site'] ?? null) === $site));
        usort($r, fn($a, $b) => ($b['occurred_at'] ?? 0) <=> ($a['occurred_at'] ?? 0));
        return array_map(fn($x) => ['x' => (float)$x['spatial_x'], 'y' => (float)$x['spatial_y'],
            'severity' => $x['severity'], 'event_type' => $x['event_type'],
            'occurred_at' => (float)($x['occurred_at'] ?? 0)], array_slice(array_values($r), 0, $limit));
    }
}
final class InMemorySnapshotRepository implements SnapshotRepository {
    public array $rows = []; public array $paths = []; public array $created = [];
    public function add(int $e, string $uuid, string $hash): void {
        // Mirror the DB's UNIQUE (event_id, content_hash): a re-sent event's identical bytes
        // collide instead of duplicating, so the dedup recovery path is idempotent.
        foreach ($this->rows[$e] ?? [] as $r) { if ($r['content_hash'] === $hash) return; }
        $this->rows[$e][] = ['file_uuid' => $uuid, 'content_hash' => $hash]; $this->paths[$uuid] = "/tmp/$uuid.jpg"; $this->created[$uuid] = time();
    }
    public function forEvent(int $e): array { return $this->rows[$e] ?? []; }
    public function thumbUuidsFor(array $eventIds): array {
        $out = [];
        foreach ($eventIds as $e) {
            $list = $this->rows[(int)$e] ?? [];
            if ($list !== []) $out[(int)$e] = end($list)['file_uuid'];  // newest = last appended
        }
        return $out;
    }
    public function pathByUuid(string $u): ?string { return $this->paths[$u] ?? null; }
    public function eventIdByUuid(string $u): ?int {
        foreach ($this->rows as $e => $list) foreach ($list as $r) if ($r['file_uuid'] === $u) return (int)$e;
        return null;
    }
    /** @var array<string,string> file_uuid => camera_id, recorded by the tests that need it */
    public array $cameras = [];
    /** @var array<string,string> file_uuid => device_id */
    public array $devices = [];
    public function latestForCamera(string $cameraId): ?array {
        // Insert order, newest first -- mirrors the Pdo impl's ORDER BY snapshot_id DESC.
        foreach (array_reverse($this->cameras, true) as $uuid => $cam) {
            if ($cam === $cameraId) return ['file_uuid' => $uuid, 'device_id' => $this->devices[$uuid] ?? ''];
        }
        return null;
    }
    public function uuidsFor(array $eventIds): array {
        $out = [];
        foreach ($eventIds as $e) {
            foreach ($this->rows[(int)$e] ?? [] as $r) $out[(int)$e][] = $r['file_uuid'];
        }
        return $out;
    }
    public function purgeOlderThan(int $cutoff): int {
        $n = 0;
        foreach ($this->created as $uuid => $ts) {
            if ($ts >= $cutoff) continue;
            unset($this->created[$uuid], $this->paths[$uuid]);
            foreach ($this->rows as $e => $list) {
                $this->rows[$e] = array_values(array_filter($list, fn($r) => $r['file_uuid'] !== $uuid));
            }
            $n++;
        }
        return $n;
    }
}
final class InMemoryUserRepository implements UserRepository {
    public function __construct(public array $users = []) {}
    public function byUsername(string $u): ?array { return $this->users[$u] ?? null; }
    public function recordFailure(int $id, int $lock): void { foreach ($this->users as &$row) if ($row['id'] === $id) { $row['failed_attempts'] = ($row['failed_attempts'] ?? 0) + 1; $row['locked_until'] = $lock; } }
    public function clearFailures(int $id): void { foreach ($this->users as &$row) if ($row['id'] === $id) { $row['failed_attempts'] = 0; $row['locked_until'] = 0; } }
}
final class InMemoryZoneRepository implements ZoneRepository {
    public array $zones = []; private int $seq = 0;
    public function forDevice(string $d): array { return array_values(array_filter($this->zones, fn($z) => ($z['device_id'] ?? '') === $d)); }
    public function forCamera(string $c): array { return array_values(array_filter($this->zones, fn($z) => $z['camera_id'] === $c)); }
    public function find(string $id): ?array { return $this->zones[$id] ?? null; }
    public function save(array $z): string { $id = $z['zone_id'] ?? ('z' . (++$this->seq)); $this->zones[$id] = $z + ['zone_id' => $id]; return $id; }
    public function delete(string $id): bool { if (!isset($this->zones[$id])) return false; unset($this->zones[$id]); return true; }
}
final class InMemoryActionRepository implements ActionRepository {
    public array $rows = []; private int $seq = 0;
    public function insert(array $a): int { $id = ++$this->seq; $this->rows[$id] = $a + ['action_id' => $id]; return $id; }
    public function recent(int $limit, ?string $site): array {
        $r = array_values(array_filter($this->rows,
            fn($a) => $site === null || ($a['site'] ?? null) === $site));
        usort($r, fn($a, $b) => [$b['taken_at'], $b['action_id']] <=> [$a['taken_at'], $a['action_id']]);
        return array_slice($r, 0, $limit);
    }
}
final class InMemoryThresholdRepository implements ThresholdRepository {
    public array $rows = []; private int $seq = 0;
    /** @param array $data device_id => [key => value] (the pre-editor shape many tests use) */
    public function __construct(array $data = []) {
        foreach ($data as $dev => $kv) foreach ($kv as $k => $v) {
            $id = ++$this->seq;
            $this->rows[$id] = ['id' => $id, 'device_id' => $dev, 'camera_id' => null, 'key' => $k,
                                'value' => (string)$v, 'updated_by' => null, 'updated_at' => null, 'site' => null];
        }
    }
    public function forDevice(string $d): array {
        // Device-wide rows only — the same contract PdoThresholdRepository has, so a test that
        // passes here cannot pass for a reason the delivered query would not reproduce.
        $out = [];
        foreach ($this->rows as $r) if ($r['device_id'] === $d && $r['camera_id'] === null) $out[$r['key']] = $r['value'];
        return $out;
    }
    public function listAll(?string $site): array {
        return array_values(array_filter($this->rows, fn($r) => $site === null || $r['site'] === $site));
    }
    public function set(string $dev, ?string $cam, string $k, string $v, string $actor, int $now): int {
        foreach ($this->rows as $id => $r) {
            if ($r['device_id'] === $dev && $r['camera_id'] === $cam && $r['key'] === $k) {
                $this->rows[$id]['value'] = $v;
                $this->rows[$id]['updated_by'] = $actor;
                $this->rows[$id]['updated_at'] = $now;
                return $id;
            }
        }
        $id = ++$this->seq;
        $this->rows[$id] = ['id' => $id, 'device_id' => $dev, 'camera_id' => $cam, 'key' => $k,
                            'value' => $v, 'updated_by' => $actor, 'updated_at' => $now, 'site' => null];
        return $id;
    }
    public function remove(int $id, ?string $site): bool {
        if (!isset($this->rows[$id])) return false;
        if ($site !== null && $this->rows[$id]['site'] !== $site) return false;
        unset($this->rows[$id]); return true;
    }
    public function find(int $id): ?array { return $this->rows[$id] ?? null; }
}
final class InMemoryAuditRepository implements AuditRepository {
    public array $log = [];
    public function append(string $a, string $act, string $t, array $b, array $af): void { $this->log[] = compact('a', 'act', 't', 'b', 'af'); }
}
final class InMemorySuppressionRepository implements SuppressionRepository {
    public array $rows = []; private int $seq = 0;
    private function live(array $r, int $now): bool {
        return $r['revoked_at'] === null && $r['starts_at'] <= $now && $r['ends_at'] > $now;
    }
    public function activeFor(array $scopes, int $now): array {
        return array_values(array_filter($this->rows, function ($r) use ($scopes, $now) {
            if (!$this->live($r, $now)) return false;
            foreach ($scopes as [$type, $id]) if ($r['scope_type'] === $type && $r['scope_id'] === (string)$id) return true;
            return false;
        }));
    }
    public function listAll(?string $site, int $now, bool $includeExpired = false): array {
        $r = array_values(array_filter($this->rows, fn($x) =>
            ($site === null || $x['site'] === $site) && ($includeExpired || $this->live($x, $now))));
        usort($r, fn($a, $b) => $b['created_at'] <=> $a['created_at']);
        return $r;
    }
    public function create(array $row): int {
        $id = ++$this->seq;
        $this->rows[$id] = $row + ['suppression_id' => $id, 'revoked_by' => null, 'revoked_at' => null];
        return $id;
    }
    public function revoke(int $id, string $user, int $now, ?string $site): bool {
        if (!isset($this->rows[$id]) || $this->rows[$id]['revoked_at'] !== null) return false;
        if ($site !== null && $this->rows[$id]['site'] !== $site) return false;
        $this->rows[$id]['revoked_by'] = $user; $this->rows[$id]['revoked_at'] = $now; return true;
    }
    public function find(int $id): ?array { return $this->rows[$id] ?? null; }
}
final class InMemoryAlertRepository implements AlertRepository {
    public array $chan = []; public array $log = []; private int $seq = 0;
    public function __construct(array $channels = []) { foreach ($channels as $c) $this->saveChannel($c); }
    public function channels(?string $s): array {
        $r = array_values(array_filter($this->chan, fn($c) =>
            $c['enabled'] && ($s === null || $c['site'] === null || $c['site'] === $s)));
        usort($r, fn($a, $b) => [$a['step'], $a['channel_id']] <=> [$b['step'], $b['channel_id']]);
        return $r;
    }
    public function allChannels(?string $s): array {
        return array_values(array_filter($this->chan, fn($c) => $s === null || $c['site'] === $s));
    }
    public function saveChannel(array $row): int {
        $id = $row['channel_id'] ?? ++$this->seq;
        $this->chan[$id] = $row + ['channel_id' => $id, 'site' => null, 'enabled' => 1, 'step' => 0,
                                   'escalate_after_s' => 0, 'min_severity' => 'high', 'config_json' => '{}'];
        return $id;
    }
    public function deleteChannel(int $id, ?string $s): bool {
        if (!isset($this->chan[$id])) return false;
        if ($s !== null && $this->chan[$id]['site'] !== $s) return false;
        unset($this->chan[$id]); return true;
    }
    private function key(int $e, int $c): string { return $e . ':' . $c; }
    public function claim(int $e, int $c, int $now): bool {
        if (isset($this->log[$this->key($e, $c)])) return false;
        $this->log[$this->key($e, $c)] = ['event_id' => $e, 'channel_id' => $c, 'status' => 'pending',
                                          'attempts' => 0, 'last_error' => null, 'queued_at' => $now, 'sent_at' => null];
        return true;
    }
    public function markSent(int $e, int $c, int $now): void {
        $k = $this->key($e, $c);
        if (isset($this->log[$k])) { $this->log[$k]['status'] = 'sent'; $this->log[$k]['sent_at'] = $now; $this->log[$k]['attempts']++; }
    }
    public function markFailed(int $e, int $c, string $err, int $now): void {
        $k = $this->key($e, $c);
        if (isset($this->log[$k])) { $this->log[$k]['status'] = 'failed'; $this->log[$k]['last_error'] = $err; $this->log[$k]['attempts']++; }
    }
    public function markSuppressed(int $e, int $c, int $now): void {
        $k = $this->key($e, $c);
        if (isset($this->log[$k])) { $this->log[$k]['status'] = 'suppressed'; $this->log[$k]['sent_at'] = $now; }
    }
    public function forEvent(int $e): array {
        return array_values(array_filter($this->log, fn($r) => $r['event_id'] === $e));
    }
    public function retryable(int $max, int $limit): array {
        return array_slice(array_values(array_filter($this->log,
            fn($r) => $r['status'] === 'failed' && $r['attempts'] < $max)), 0, $limit);
    }
}
final class InMemoryHandoverRepository implements HandoverRepository {
    public array $rows = []; private int $seq = 0;
    public function recent(?string $s, int $limit): array {
        $r = array_values(array_filter($this->rows, fn($x) => $s === null || $x['site'] === $s));
        usort($r, fn($a, $b) => $b['created_at'] <=> $a['created_at']);
        return array_slice($r, 0, $limit);
    }
    public function latest(?string $s): ?array { return $this->recent($s, 1)[0] ?? null; }
    public function create(array $row): int {
        $id = ++$this->seq; $this->rows[$id] = $row + ['handover_id' => $id]; return $id;
    }
}
final class InMemoryRiskControlRepository implements RiskControlRepository {
    public array $rows = []; private int $seq = 0;
    public function listAll(?string $s): array {
        return array_values(array_filter($this->rows, fn($r) => $s === null || $r['site'] === $s));
    }
    public function upsert(array $row): void {
        foreach ($this->rows as $id => $r) {
            if ($r['site'] === ($row['site'] ?? null) && $r['event_type'] === $row['event_type']) {
                $this->rows[$id] = $row + ['control_id' => $id]; return;
            }
        }
        $id = ++$this->seq; $this->rows[$id] = $row + ['control_id' => $id];
    }
    public function delete(int $id, ?string $s): bool {
        if (!isset($this->rows[$id])) return false;
        if ($s !== null && $this->rows[$id]['site'] !== $s) return false;
        unset($this->rows[$id]); return true;
    }
}
final class InMemoryDeviceMetricRepository implements DeviceMetricRepository {
    public array $rows = [];
    public function append(string $d, array $m, int $now): void {
        $this->rows[] = ['device_id' => $d, 'ts' => $now] + $m;
    }
    public function series(string $d, int $since, int $limit): array {
        $r = array_values(array_filter($this->rows, fn($x) => $x['device_id'] === $d && $x['ts'] >= $since));
        usort($r, fn($a, $b) => $a['ts'] <=> $b['ts']);
        return array_slice($r, 0, $limit);
    }
    public function prune(int $before): int {
        $n = count($this->rows);
        $this->rows = array_values(array_filter($this->rows, fn($x) => $x['ts'] >= $before));
        return $n - count($this->rows);
    }
}