Files
clinicpro/migrations/Version20260728140000.php
T
hamedandClaude Opus 5 c9d4348c46 feat(tenant): mark the financial tables with their owning environment
Phase 6 of the tenant series. GlobalTables::DEFERRED is now empty and the
coverage test asserts it stays that way.

payments carries the (entity_type, entity_id) pair and belongs to the
receiving side, never the payer: an appointment payment takes the
appointment's environment, a subscription takes the environment its buyer
owns, and an SMS wallet top-up takes the wallet's. The patient never chose
an environment, so TenantFilter stays off for them and they still see their
own payment.

Three corrections to the analysis the phase was planned on, each backed by
the code or the data rather than the plan:

- A third payment type exists. Payment::TYPE_SMS_WALLET is created in
  SmsWalletController and already carries its environment in the metadata;
  without assigning it the write would fail at flush.
- clinic_subscriptions has no user_id, and its trial rows carry no payment,
  so it cannot drive the subscription backfill. The environment is derived
  the way handleSubscriptionActivation derives it — and that method now
  reads the pair off the payment instead of re-deriving it, so a payment and
  the subscription it buys can no longer land on different environments.
- WalletTransaction is not a child of Payment. payment_id is nullable and
  none of the four creation sites set it; the wallet is a person's, with a
  running balance per user. It and Settlement, which withdraws from that same
  wallet, are global with a recorded reason instead.

bank_accounts and pos_devices move from the registering user to the
environment. Their pair is deliberately nullable: nothing in the existing
data says which of a multi-environment owner's cards belongs where, and
guessing would point real money at the wrong account. Ambiguous rows stay
unassigned and the migration reports how many. The cost is that such a row
is invisible in every environment, so the owner reaches it through a
user-scoped lookup that runs outside the filter, and assigns it with
PATCH .../{uuid}/environment. The admin panel marks those rows and offers
the assignment.

Tests: 896 backend (+11), 570 frontend (+4). PHPStan unchanged at its 17
pre-existing errors.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-07-28 15:06:28 +03:30

104 lines
4.2 KiB
PHP

<?php
declare(strict_types=1);
namespace DoctrineMigrations;
use Doctrine\DBAL\Schema\Schema;
use Doctrine\Migrations\AbstractMigration;
/**
* Phase 6 of the tenant-marking series: payments, the root of the financial
* chain. payment_logs, financial_breakdowns and secretary_earnings inherit the
* environment through their foreign keys and get no column of their own.
*
* The environment of a payment is the receiving side, never the payer:
*
* appointment → the environment of the appointment (marked in phase 2)
* subscription → the environment the buyer owns (doctor first, then clinic —
* the same order PaymentManager::handleSubscriptionActivation
* uses to create the subscription itself)
* sms_wallet → the environment already recorded in the payment metadata
*
* clinic_subscriptions cannot drive the subscription backfill: it links to a
* payment (payment_id) rather than to a user, and trial rows carry no payment at
* all, so a payment whose subscription was never activated has no row to join.
*
* Statements run through $this->connection rather than addSql() because the
* NOT NULL guard has to sit between the backfill and the tightening; addSql()
* defers everything to the end of up().
*/
final class Version20260728140000 extends AbstractMigration
{
public function getDescription(): string
{
return 'Mark payments with the environment that receives them';
}
public function up(Schema $schema): void
{
$this->connection->executeStatement(
'ALTER TABLE payments ADD entity_type VARCHAR(10) NULL, ADD entity_id INT NULL'
);
// Appointment payments: the appointment already carries the pair.
$this->connection->executeStatement(
'UPDATE payments p JOIN appointments a ON a.id = p.appointment_id
SET p.entity_type = a.entity_type, p.entity_id = a.entity_id
WHERE p.appointment_id IS NOT NULL'
);
// SMS wallet charges: the environment was stored in the metadata when the
// charge was started, which is also what PaymentManager reads on callback.
$this->connection->executeStatement(
"UPDATE payments
SET entity_type = JSON_UNQUOTE(JSON_EXTRACT(metadata, '$.entity_type')),
entity_id = JSON_EXTRACT(metadata, '$.entity_id')
WHERE entity_type IS NULL
AND type = 'sms_wallet'
AND JSON_EXTRACT(metadata, '$.entity_id') IS NOT NULL"
);
// Subscription payments: the environment the payer owns.
$this->connection->executeStatement(
"UPDATE payments p JOIN doctors d ON d.user_id = p.user_id
SET p.entity_type = 'doctor', p.entity_id = d.id
WHERE p.entity_type IS NULL"
);
$this->connection->executeStatement(
"UPDATE payments p JOIN clinics c ON c.user_id = p.user_id
SET p.entity_type = 'clinic', p.entity_id = c.id
WHERE p.entity_type IS NULL"
);
// A payment left without an environment is a kind this analysis has not
// seen. Guessing one would put real money in the wrong ledger.
$remaining = (int) $this->connection->fetchOne(
'SELECT COUNT(*) FROM payments WHERE entity_type IS NULL OR entity_id IS NULL'
);
$this->abortIf(
$remaining > 0,
"Backfill left {$remaining} payments without an environment; classify them by hand before rerunning."
);
$this->connection->executeStatement(
'ALTER TABLE payments MODIFY entity_type VARCHAR(10) NOT NULL, MODIFY entity_id INT NOT NULL'
);
$this->connection->executeStatement(
'CREATE INDEX idx_payments_entity_date ON payments (entity_type, entity_id, created_at)'
);
}
public function down(Schema $schema): void
{
$this->addSql('DROP INDEX idx_payments_entity_date ON payments');
$this->addSql('ALTER TABLE payments DROP entity_type, DROP entity_id');
}
/** DDL on MariaDB commits implicitly; wrapping up() in a transaction would be a lie. */
public function isTransactional(): bool
{
return false;
}
}