KanbanGit/app/Http/Requests/UpdateProjectTicketRequest.php

<?php

namespace App\Http\Requests;

use App\Actions\Permissions\PermissionService;
use App\Actions\Tickets\Support\AcceptanceCriteriaChecklistMapper;
use App\Enums\Permission;
use App\Models\Project;
use App\Models\Ticket;
use App\Models\TicketType;
use Illuminate\Contracts\Validation\ValidationRule;
use Illuminate\Foundation\Http\FormRequest;
use Illuminate\Support\Arr;
use Illuminate\Validation\Rule;
use Illuminate\Validation\Validator;

class UpdateProjectTicketRequest extends FormRequest
{
    /**
     * Determine if the user is authorized to make this request.
     */
    public function authorize(): bool
    {
        return $this->user() !== null;
    }

    /**
     * Prepare the data for validation.
     */
    protected function prepareForValidation(): void
    {
        $acceptanceCriteria = $this->input('acceptance_criteria');

        if ($acceptanceCriteria !== null && ! is_array($acceptanceCriteria)) {
            return;
        }

        $this->merge([
            'acceptance_criteria' => AcceptanceCriteriaChecklistMapper::normalize(
                $acceptanceCriteria,
            ),
        ]);
    }

    /**
     * Get the validation rules that apply to the request.
     *
     * @return array<string, ValidationRule|array<mixed>|string>
     */
    public function rules(): array
    {
        /** @var Project $project */
        $project = $this->route('project');
        $projectTemplateId = $project->project_template_id;
        $ownershipColumn = $projectTemplateId === null ? 'project_id' : 'project_template_id';
        $ownershipValue = $projectTemplateId ?? $project->id;

        return [
            'acceptance_criteria' => ['nullable', 'array'],
            'acceptance_criteria.*' => ['array'],
            'acceptance_criteria.*.id' => ['nullable', 'integer'],
            'acceptance_criteria.*.text' => ['required', 'string'],
            'acceptance_criteria.*.checked' => ['required', 'boolean'],
            'acceptance_criteria.*.indent' => ['required', 'integer', 'min:0', 'max:'.AcceptanceCriteriaChecklistMapper::MAX_INDENT_LEVEL],
            'assignee_user_id' => ['nullable', 'integer', Rule::exists('users', 'id')],
            'author_user_id' => ['nullable', 'integer', Rule::exists('users', 'id')],
            'blocked_comment' => ['nullable', 'string'],
            'description' => ['nullable', 'string'],
            'field_values' => ['array'],
            'field_values.*' => ['array'],
            'field_values.*.ticket_field_definition_id' => [
                'required',
                'integer',
                Rule::exists('ticket_field_definitions', 'id')->where(
                    fn ($query) => $query->where($ownershipColumn, $ownershipValue),
                ),
            ],
            'field_values.*.value_number' => ['nullable', 'numeric'],
            'field_values.*.value_user_id' => ['nullable', 'integer', Rule::exists('users', 'id')],
            'is_blocked' => ['required', 'boolean'],
            'parent_ticket_id' => [
                'nullable',
                'integer',
                Rule::exists('tickets', 'id')->where('project_id', $project->id),
            ],
            'ticket_priority_id' => [
                'required',
                'integer',
                Rule::exists('ticket_priorities', 'id')->where(
                    fn ($query) => $query->where($ownershipColumn, $ownershipValue),
                ),
            ],
            'ticket_type_id' => [
                'required',
                'integer',
                Rule::exists('ticket_types', 'id')->where(
                    fn ($query) => $query->where($ownershipColumn, $ownershipValue),
                ),
            ],
            'title' => ['required', 'string', 'max:255'],
            'story_points' => ['nullable', 'integer', 'min:0'],
        ];
    }

    /**
     * @return array<int, callable(Validator): void>
     */
    public function after(): array
    {
        return [
            function (Validator $validator): void {
                /** @var array<string, mixed> $validated */
                $validated = $this->safe()->all();

                /** @var Project $project */
                $project = $this->route('project');

                /** @var Ticket $ticket */
                $ticket = $this->route('ticket');

                $canManageProject = app(PermissionService::class)
                    ->allows($this->user(), Permission::ProjectAdmin, $project);

                $parentTicketId = Arr::get($validated, 'parent_ticket_id');

                if ($parentTicketId !== null) {
                    if ($parentTicketId === $ticket->id) {
                        $validator->errors()->add('parent_ticket_id', 'A ticket cannot be its own parent.');

                        return;
                    }

                    $parentTicket = Ticket::query()
                        ->where('project_id', $project->id)
                        ->with('ticketType')
                        ->find($parentTicketId);

                    if ($parentTicket !== null && ! $parentTicket->ticketType?->is_parent) {
                        $validator->errors()->add('parent_ticket_id', 'Only tickets with a parent-enabled type can be selected as a parent.');

                        return;
                    }

                    if ($parentTicket !== null && $this->createsCycle($ticket, $parentTicket)) {
                        $validator->errors()->add('parent_ticket_id', 'A ticket cannot be assigned to one of its descendants.');

                        return;
                    }
                }

                $requestedTicketTypeId = Arr::get($validated, 'ticket_type_id');
                $requestedTicketType = TicketType::query()
                    ->where($project->project_template_id === null ? 'project_id' : 'project_template_id', $project->project_template_id ?? $project->id)
                    ->find($requestedTicketTypeId);

                if (
                    ! $requestedTicketType?->is_parent
                    && $ticket->childTickets()->exists()
                ) {
                    $validator->errors()->add('ticket_type_id', 'Tickets with child tickets must keep a parent-enabled type.');
                }

                if (Arr::get($validated, 'is_blocked', false) && blank(Arr::get($validated, 'blocked_comment'))) {
                    $validator->errors()->add('blocked_comment', 'Blocked tickets require a blocker comment.');
                }

                if (
                    Arr::exists($validated, 'author_user_id')
                    && (int) Arr::get($validated, 'author_user_id') !== (int) $ticket->author_user_id
                    && ! $canManageProject
                ) {
                    $validator->errors()->add('author_user_id', 'Only project admins can change the author.');
                }
            },
        ];
    }

    private function createsCycle(Ticket $ticket, Ticket $candidateParent): bool
    {
        $currentParent = $candidateParent;

        while ($currentParent !== null) {
            if ($currentParent->id === $ticket->id) {
                return true;
            }

            if ($currentParent->parent_ticket_id === null) {
                return false;
            }

            $currentParent = Ticket::query()->find($currentParent->parent_ticket_id);
        }

        return false;
    }
}