Move the entire audit subsystem (system audit, API audit, import audit, user lifecycle audit, frontend telemetry) from core into modules/audit/. Core decoupling via interface-based injection: - AuditRecorderInterface replaces SystemAuditService in 10+ core services - UserLifecycleAuditInterface / ImportAuditInterface for specialized flows - NullAuditRecorder fallback when audit module is disabled - ApiBootstrap/ApiResponse use null-safe callable resolvers Module structure (modules/audit/): - Manifest with routes, permissions, scheduler jobs, authorization policy - 9 services, 8 repositories, 6 domain enums, 4 job handlers - 33 page files, 4 JS files, 8 test files, migration scripts, i18n Core cleanup: - OperationsAuthorizationPolicy, UiCapabilityMap, PermissionService surgically cleaned of audit-specific constants - Sidebar template cleared of hardcoded audit navigation - AuditModuleIsolationContractTest ensures no future core→module coupling All quality gates pass: 1346 tests (19,276 assertions), PHPStan level 5 clean, architecture contracts verified. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
85 lines
2.8 KiB
PHP
85 lines
2.8 KiB
PHP
<?php
|
|
|
|
namespace MintyPHP\Service\Directory;
|
|
|
|
use MintyPHP\Repository\Access\RoleRepositoryInterface;
|
|
use MintyPHP\Repository\Org\DepartmentRepositoryInterface;
|
|
use MintyPHP\Repository\Tenant\TenantRepositoryInterface;
|
|
use MintyPHP\Service\Access\RoleService;
|
|
use MintyPHP\Service\Audit\AuditRecorderInterface;
|
|
use MintyPHP\Service\Org\DepartmentService;
|
|
use MintyPHP\Service\Tenant\TenantScopeService;
|
|
use MintyPHP\Service\Tenant\TenantService;
|
|
use MintyPHP\Service\User\UserServicesFactory;
|
|
|
|
class DirectoryServicesFactory
|
|
{
|
|
private ?TenantService $tenantService = null;
|
|
private ?DepartmentService $departmentService = null;
|
|
private ?RoleService $roleService = null;
|
|
|
|
public function __construct(
|
|
private readonly UserServicesFactory $userServicesFactory,
|
|
private readonly AuditRecorderInterface $auditRecorder,
|
|
private readonly DirectoryRepositoryFactory $directoryRepositoryFactory,
|
|
private readonly DirectoryGatewayFactory $directoryGatewayFactory
|
|
) {
|
|
}
|
|
|
|
public function createTenantService(): TenantService
|
|
{
|
|
return $this->tenantService ??= new TenantService(
|
|
$this->createTenantRepository(),
|
|
$this->createDepartmentRepository(),
|
|
$this->createDirectorySettingsGateway(),
|
|
$this->auditRecorder
|
|
);
|
|
}
|
|
|
|
public function createDepartmentService(): DepartmentService
|
|
{
|
|
return $this->departmentService ??= new DepartmentService(
|
|
$this->userServicesFactory,
|
|
$this->createDepartmentRepository(),
|
|
$this->createDirectorySettingsGateway(),
|
|
$this->directoryGatewayFactory->getTenantScopeService(),
|
|
$this->auditRecorder
|
|
);
|
|
}
|
|
|
|
public function createRoleService(): RoleService
|
|
{
|
|
return $this->roleService ??= new RoleService(
|
|
$this->createRoleRepository(),
|
|
$this->createDirectorySettingsGateway(),
|
|
$this->auditRecorder
|
|
);
|
|
}
|
|
|
|
// Passthrough accessors so callers only need a reference to this factory, not the sub-factories.
|
|
public function createTenantRepository(): TenantRepositoryInterface
|
|
{
|
|
return $this->directoryRepositoryFactory->createTenantRepository();
|
|
}
|
|
|
|
public function createDepartmentRepository(): DepartmentRepositoryInterface
|
|
{
|
|
return $this->directoryRepositoryFactory->createDepartmentRepository();
|
|
}
|
|
|
|
public function createRoleRepository(): RoleRepositoryInterface
|
|
{
|
|
return $this->directoryRepositoryFactory->createRoleRepository();
|
|
}
|
|
|
|
public function createDirectorySettingsGateway(): DirectorySettingsGateway
|
|
{
|
|
return $this->directoryGatewayFactory->createDirectorySettingsGateway();
|
|
}
|
|
|
|
public function getTenantScopeService(): TenantScopeService
|
|
{
|
|
return $this->directoryGatewayFactory->getTenantScopeService();
|
|
}
|
|
}
|