WIP: Publication admin / manage area

.gitignore

@@ -12,6 +12,10 @@ Thumbs.db
 
 # Tool specific files #
 #######################
+# Root-level one-off screencast scratch (not part of the main test setup).
+# Limited to the repo root so nested `screencast/` folders (e.g. playwright
+# specs) are still tracked.
+/screencast/
 # PHPUnit
 .phpunit.result.cache
 clover.xml

backend/.env.testing

@@ -4,12 +4,7 @@ APP_NAME="Pilcrow Testing"
 APP_DEBUG=true
 APP_URL=https://localhost/
 
-DB_CONNECTION=mysql
-DB_DATABASE=pilcrow
-DB_HOST=127.0.0.1
-DB_PORT=3306
-DB_USERNAME=root
-DB_PASSWORD=pilcrow
+DB_CONNECTION=testing
 LIGHTHOUSE_CACHE_ENABLE=true
 LIGHTHOUSE_CACHE_STORE=file
 

backend/app/Builders/PublicationAssignmentBuilder.php

@@ -0,0 +1,107 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Builders;
+
+use App\Models\Publication;
+use Illuminate\Database\Eloquent\Builder;
+
+class PublicationAssignmentBuilder extends Builder
+{
+    /**
+     * Filter assignments by role.
+     *
+     * @param array|null $roles
+     * @return self
+     */
+    public function roleFilter(?array $roles): self
+    {
+        if ($roles) {
+            $this->whereIn('role_id', $roles);
+        }
+
+        return $this;
+    }
+
+    /**
+     * Search assignments by the related publication's name.
+     *
+     * Delegates to PublicationBuilder::search so the min-length
+     * guard + LIKE-wildcard escape rules live in one place.
+     *
+     * @param string|null $search
+     * @return self
+     */
+    public function search(?string $search): self
+    {
+        if (!is_string($search)) {
+            return $this;
+        }
+        $term = trim($search);
+        if (mb_strlen($term) < Publication::MIN_SEARCH_LENGTH) {
+            return $this;
+        }
+
+        return $this->whereHas(
+            'publication',
+            fn(Builder $query) => $query->search($term)
+        );
+    }
+
+    /**
+     * Restrict to assignments whose publication currently has at least
+     * one non-draft submission in any of the given statuses. Used by
+     * /manage to show only publications with activity in a given
+     * workflow stage. Drafts are always excluded to match the
+     * dashboard's status-count semantics.
+     *
+     * @param array|null $statuses
+     * @return self
+     */
+    public function withStatuses(?array $statuses): self
+    {
+        if ($statuses) {
+            $this->whereHas('publication.submissions', function (Builder $query) use ($statuses) {
+                $query
+                    ->whereIn('status', $statuses)
+                    ->where('status', '!=', 'DRAFT');
+            });
+        }
+
+        return $this;
+    }
+
+    /**
+     * Order assignments by a column on the related publication.
+     *
+     * @param array|null $orderBy Array of {column, order} pairs
+     * @return self
+     */
+    public function orderByPublication(?array $orderBy): self
+    {
+        if (!$orderBy) {
+            return $this;
+        }
+
+        $columnMap = [
+            'NAME' => 'name',
+            'CREATED_AT' => 'created_at',
+            'UPDATED_AT' => 'updated_at',
+        ];
+
+        foreach ($orderBy as $clause) {
+            $column = $columnMap[$clause['column']] ?? null;
+            $direction = $clause['order'] ?? 'ASC';
+            if ($column) {
+                $this->orderBy(
+                    Publication::select($column)
+                        ->whereColumn('publications.id', 'publication_user.publication_id')
+                        ->limit(1),
+                    $direction
+                );
+            }
+        }
+
+        return $this;
+    }
+}

backend/app/Builders/PublicationBuilder.php

@@ -0,0 +1,95 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Builders;
+
+use App\Models\Publication;
+use App\Models\Role;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Support\Facades\Auth;
+
+class PublicationBuilder extends Builder
+{
+    /**
+     * Scope by public visibility. Accepts a boolean so callers can filter
+     * to hidden publications too (@scope passes the field arg through).
+     *
+     * @param bool $value
+     * @return self
+     */
+    public function public(bool $value = true): self
+    {
+        return $this->where('is_publicly_visible', $value);
+    }
+
+    /**
+     * Scope by accepting-submissions state. Accepts a boolean so callers
+     * can filter to closed publications too (@scope passes the field arg
+     * through).
+     *
+     * @param bool $value
+     * @return self
+     */
+    public function acceptingSubmissions(bool $value = true): self
+    {
+        return $this->where('is_accepting_submissions', $value);
+    }
+
+    /**
+     * Add a scope to filter publications by a search string.
+     *
+     * Short-circuits on empty / too-short terms so single-keystroke
+     * searches don't scan the table. Escapes LIKE wildcards so users
+     * can't (accidentally or otherwise) inject `%` / `_` / `\` into
+     * the pattern. Matches the hardening applied to the submissions
+     * search in commit cd1ea18d — the FULLTEXT index on `name` exists
+     * to support a future MATCH...AGAINST switch.
+     *
+     * @param mixed $search
+     * @return self
+     */
+    public function search(mixed $search): self
+    {
+        if (!is_string($search)) {
+            return $this;
+        }
+        $term = trim($search);
+        if (mb_strlen($term) < Publication::MIN_SEARCH_LENGTH) {
+            return $this;
+        }
+
+        return $this->where(
+            'name',
+            'like',
+            '%' . addcslashes($term, '%_\\') . '%'
+        );
+    }
+
+    /**
+     * Scope to publications visible to the current user.
+     *
+     * The public/assigned disjunction is wrapped in a grouped `where`
+     * so subsequent filters (search, my_role, etc.) AND against the
+     * whole expression rather than OR-ing around it — otherwise
+     * public publications leak through regardless of downstream
+     * filters.
+     *
+     * @return self
+     */
+    public function visible(): self
+    {
+        $user = Auth::user();
+
+        if ($user && $user->hasRole(Role::APPLICATION_ADMINISTRATOR)) {
+            return $this;
+        }
+
+        return $this->where(function (Builder $query) use ($user) {
+            $query
+                ->where('is_publicly_visible', true)
+                ->orWhereHas('users', function (Builder $subQuery) use ($user) {
+                    $subQuery->where('user_id', $user->id);
+                });
+        });
+    }
+}

backend/app/Builders/SubmissionAssignmentBuilder.php

@@ -0,0 +1,111 @@
+<?php
+declare(strict_types=1);
+
+namespace App\Builders;
+
+use App\Models\Submission;
+use Illuminate\Database\Eloquent\Builder;
+
+class SubmissionAssignmentBuilder extends Builder
+{
+    /**
+     * Filter assignments by role.
+     *
+     * @param array|null $roles
+     * @return self
+     */
+    public function roleFilter(?array $roles): self
+    {
+        if ($roles) {
+            $this->whereIn('role_id', $roles);
+        }
+
+        return $this;
+    }
+
+    /**
+     * Filter assignments by submission status.
+     *
+     * @param array|null $status
+     * @return self
+     */
+    public function statusFilter(?array $status): self
+    {
+        if ($status) {
+            $this->whereHas('submission', function (Builder $query) use ($status) {
+                $query->whereIn('status', $status);
+            });
+        }
+
+        return $this;
+    }
+
+    /**
+     * Filter assignments by publication.
+     *
+     * @param array|null $publicationIds
+     * @return self
+     */
+    public function publicationFilter(?array $publicationIds): self
+    {
+        if ($publicationIds) {
+            $this->whereHas('submission', function (Builder $query) use ($publicationIds) {
+                $query->whereIn('publication_id', $publicationIds);
+            });
+        }
+
+        return $this;
+    }
+
+    /**
+     * Search assignments by submission title.
+     *
+     * @param string|null $search
+     * @return self
+     */
+    public function search(?string $search): self
+    {
+        if ($search) {
+            $this->whereHas('submission', function (Builder $query) use ($search) {
+                $query->where('title', 'like', "%{$search}%");
+            });
+        }
+
+        return $this;
+    }
+
+    /**
+     * Order assignments by a column on the related submission.
+     *
+     * @param array|null $orderBy Array of {column, order} pairs
+     * @return self
+     */
+    public function orderBySubmission(?array $orderBy): self
+    {
+        if (!$orderBy) {
+            return $this;
+        }
+
+        $columnMap = [
+            'CREATED_AT' => 'created_at',
+            'UPDATED_AT' => 'updated_at',
+            'TITLE' => 'title',
+            'STATUS' => 'status',
+        ];
+
+        foreach ($orderBy as $clause) {
+            $column = $columnMap[$clause['column']] ?? null;
+            $direction = $clause['order'] ?? 'ASC';
+            if ($column) {
+                $this->orderBy(
+                    Submission::select($column)
+                        ->whereColumn('submissions.id', 'submission_user.submission_id')
+                        ->limit(1),
+                    $direction
+                );
+            }
+        }
+
+        return $this;
+    }
+}