TenantAtlas/app/Jobs/Operations/CapturePolicySnapshotWorkerJob.php

<?php

declare(strict_types=1);

namespace App\Jobs\Operations;

use App\Models\OperationRun;
use App\Models\Policy;
use App\Services\Intune\VersionService;
use App\Services\OperationRunService;
use App\Services\Operations\TargetScopeConcurrencyLimiter;
use Illuminate\Bus\Queueable;
use Illuminate\Contracts\Queue\ShouldQueue;
use Illuminate\Foundation\Bus\Dispatchable;
use Illuminate\Queue\InteractsWithQueue;
use Illuminate\Queue\SerializesModels;
use RuntimeException;
use Throwable;

class CapturePolicySnapshotWorkerJob implements ShouldQueue
{
    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;

    public ?OperationRun $operationRun = null;

    /**
     * @param  array<string, mixed>  $context
     */
    public function __construct(
        public int $tenantId,
        public int $userId,
        public int $policyId,
        public bool $includeAssignments = true,
        public bool $includeScopeTags = true,
        public ?string $createdBy = null,
        ?OperationRun $operationRun = null,
        public array $context = [],
    ) {
        $this->operationRun = $operationRun;
    }

    public function handle(
        OperationRunService $runs,
        TargetScopeConcurrencyLimiter $limiter,
        VersionService $versionService,
    ): void {
        if (! $this->operationRun instanceof OperationRun) {
            throw new RuntimeException('OperationRun is required for policy snapshot capture worker.');
        }

        $this->operationRun->refresh();

        if ($this->operationRun->status === 'completed') {
            return;
        }

        $context = is_array($this->operationRun->context) ? $this->operationRun->context : [];
        $targetScope = is_array($context['target_scope'] ?? null) ? $context['target_scope'] : [];

        $lock = $limiter->acquireSlot($this->tenantId, $targetScope);

        if (! $lock) {
            $delay = (int) config('tenantpilot.bulk_operations.poll_interval_seconds', 3);
            $this->release(max(1, $delay));

            return;
        }

        try {
            $policy = Policy::query()
                ->with('tenant')
                ->where('tenant_id', $this->tenantId)
                ->whereKey($this->policyId)
                ->first();

            if (! $policy instanceof Policy || ! $policy->tenant) {
                $runs->incrementSummaryCounts($this->operationRun, [
                    'processed' => 1,
                    'failed' => 1,
                ]);

                $runs->appendFailures($this->operationRun, [[
                    'code' => 'policy.not_found',
                    'message' => 'Policy '.$this->policyId.' not found.',
                ]]);

                $runs->maybeCompleteBulkRun($this->operationRun);

                return;
            }

            $versionService->captureFromGraph(
                tenant: $policy->tenant,
                policy: $policy,
                createdBy: $this->createdBy,
                includeAssignments: $this->includeAssignments,
                includeScopeTags: $this->includeScopeTags,
            );

            $runs->incrementSummaryCounts($this->operationRun, [
                'processed' => 1,
                'succeeded' => 1,
            ]);

            $runs->maybeCompleteBulkRun($this->operationRun);
        } catch (Throwable $e) {
            $runs->incrementSummaryCounts($this->operationRun, [
                'processed' => 1,
                'failed' => 1,
            ]);

            $runs->appendFailures($this->operationRun, [[
                'code' => 'policy.capture_snapshot.failed',
                'message' => $e->getMessage(),
            ]]);

            $runs->maybeCompleteBulkRun($this->operationRun);

            throw $e;
        } finally {
            $lock->release();
        }
    }
}