feat(patients): phase B2 — attachments (ضمیمه)

Add patient file attachments: a new PatientAttachment entity (record-scoped, CASCADE) + repository, and endpoints GET /patient/{uuid}/attachments, POST /patient/{uuid}/attachment (raw-body upload) and DELETE /patient/attachment/{uuid} (owner-scoped). Factor the shared raw-body upload logic into FileUploadService. Wire the "ضمیمه" tab in PatientDetailPage (upload + list + delete). PHPUnit covers list/delete/ownership; Vitest covers the tab. API docs updated. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-07-13 15:20:00 +03:30
parent 4c52316a49
commit 537bb8c7b3
10 changed files with 446 additions and 2 deletions
@@ -0,0 +1,59 @@
+<?php
+
+namespace App\Shared\Service;
+
+use Symfony\Component\HttpFoundation\Request;
+
+/**
+ * Stores a raw-body file upload (the `/file/upload/...` convention: the file is
+ * sent as the request body with a Content-Disposition filename) under
+ * public/uploads/<subDir>/<year>-<month>/ and returns its public URL + metadata.
+ */
+class FileUploadService
+{
+    public function __construct(
+        private readonly FileValidatorService $fileValidator,
+        private readonly string $projectDir,
+    ) {}
+
+    /**
+     * @return array{url: string, filename: string, filemime: string, size: int}
+     * @throws \RuntimeException on an invalid/oversized file
+     */
+    public function storeFromRequest(Request $request, string $subDir): array
+    {
+        $content = $request->getContent();
+        preg_match('/filename=["\']?([^"\';\s]+)["\']?/i', $request->headers->get('Content-Disposition', ''), $m);
+        $filename = $m[1] ?? 'file';
+
+        $tmpPath = sys_get_temp_dir() . '/' . uniqid('upload_', true);
+        file_put_contents($tmpPath, $content);
+
+        try {
+            $safeFilename = $this->fileValidator->sanitizeFilename($filename);
+            $mime         = $this->fileValidator->detectMimeType($tmpPath);
+
+            $year = date('Y');
+            $month = date('m');
+            $dir = $this->projectDir . '/public/uploads/' . $subDir . '/' . $year . '-' . $month;
+            if (!is_dir($dir)) {
+                mkdir($dir, 0755, true);
+            }
+
+            $storedName = uniqid('', true) . '_' . $safeFilename;
+            rename($tmpPath, $dir . '/' . $storedName);
+
+            return [
+                'url'      => '/uploads/' . $subDir . '/' . $year . '-' . $month . '/' . $storedName,
+                'filename' => $safeFilename,
+                'filemime' => $mime,
+                'size'     => strlen($content),
+            ];
+        } catch (\Throwable $e) {
+            if (file_exists($tmpPath)) {
+                unlink($tmpPath);
+            }
+            throw new \RuntimeException($e->getMessage(), 0, $e);
+        }
+    }
+}