Guia de Engenharia: Módulo Representante

// Conexão com o Banco Local do CRM (Tabelas crm_*)
$localDb = (new DatabaseConnection())->getPrimaryConnection(); // ou getConnection('default')

// Conexão com o ERP Externo (Apenas Leitura de Clientes, Pedidos e Validações)
$erpDb   = (new DatabaseConnection())->getConnection('external');

// ❌ ERRADO: Fazer query direta no Controller
$stmt = $db->prepare("SELECT area_code FROM crm_user_seller_mapping WHERE email = :e");
$stmt->execute([':e' => $userEmail]);

// ✅ CORRETO: Chamar método especializado no Model
$userArea = $this->model->getUserAreaCodeByEmail($userEmail);

// Garante Content-Type e JSON.stringify para todos os métodos com payload
const upperMethod = (method || 'GET').toUpperCase();
const hasPayload = ['POST', 'PUT', 'PATCH', 'DELETE'].includes(upperMethod) && data !== null;

if (hasPayload) {
    headers['Content-Type'] = 'application/json';
}

$.ajax({
    url: baseUrl + endpoint,
    type: upperMethod,
    headers: headers,
    data: hasPayload ? JSON.stringify(data) : data, // <-- Crucial!
    dataType: 'json',
    ...
});

// Extrai o payload de forma resiliente em qualquer cenário
private function getRequestData(Request $request): array
{
    $parsed = $request->getParsedBody();
    if (!empty($parsed) && is_array($parsed)) {
        return $parsed;
    }

    $raw = (string)$request->getBody();
    $decoded = json_decode($raw, true);
    if (json_last_error() === JSON_ERROR_NONE && is_array($decoded)) {
        return $decoded;
    }

    // Fallback se alguém enviar form-encoded em PATCH
    $form = [];
    parse_str($raw, $form);
    return $form;
}

# Executa todos os 15 testes de integração ponta a ponta
php backend/src/test/test_backend.php

# Saída esperada (100% de sucesso):
[PASS] 1. Swagger JSON endpoint (200 OK, valid OpenAPI)
[PASS] 2. Swagger UI endpoint (200 OK)
[PASS] 3. Security: Unauthorized without token (401)
[PASS] 4. Security: Authorized crm_sup accessed /teams (200 OK)
[PASS] 5. RBAC: Forbidden for crm_rep on /admin/logs (403)
[PASS] 6. RBAC: Allowed for crm_admin on /admin/logs (200 OK)
[PASS] 7. Client Enrichment: POST /api/v1/clients/info saved to local database (200 OK)
[PASS] 8. Client Enrichment: GET /api/v1/clients/{cnpj}/info retrieved from local DB (200 OK)
[PASS] 9. Client Pagination & Filter: GET /api/v1/clients/9 (200 OK)
[PASS] 10. Client Orders: GET /api/v1/clients/21869/orders (200 OK)
[PASS] 11. Order Details & Modern PDF: GET /api/v1/orders/9695 and /pdf (200 OK)
[PASS] 12. Kanban Tasks: Full CRUD, Drag & Drop status update, and Summary (200/201 OK)
[PASS] 13. Kanban Client Autocomplete: GET /api/v1/kanban/clients from ERP (200 OK)
[PASS] 14. Area Orders: GET /api/v1/orders/area/349 retrieved real orders with KPIs (200 OK)
[PASS] 15. Order Validations: GET /api/v1/orders/34900227/validations retrieved 5 steps (200 OK)

ALL BACKEND TESTS PASSED SUCCESSFULLY!