presseportale/app/Models/PressReleaseRedactionSnapshot.php

<?php

namespace App\Models;

use Database\Factories\PressReleaseRedactionSnapshotFactory;
use Illuminate\Database\Eloquent\Builder;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Database\Eloquent\Model;
use Illuminate\Database\Eloquent\Relations\BelongsTo;

/**
 * Verschlüsselter Vorher-Snapshot einer Meldeverfahren-Mutation
 * (Anonymisierung/Depublizierung). Existiert nur für die Reversibilität
 * innerhalb der Löschfrist — Alt-Werte leben nie im Klartext in Logs
 * oder Payloads weiter. Wird nach purge_after durch snapshots:purge
 * gelöscht (config legal.snapshot_retention_days).
 */
class PressReleaseRedactionSnapshot extends Model
{
    /** @use HasFactory<PressReleaseRedactionSnapshotFactory> */
    use HasFactory;

    public const UPDATED_AT = null;

    protected $fillable = [
        'legal_request_id',
        'press_release_id',
        'encrypted_before',
        'purge_after',
    ];

    protected function casts(): array
    {
        return [
            'encrypted_before' => 'encrypted:array',
            'purge_after' => 'date',
        ];
    }

    /**
     * Snapshot mit Löschfrist ab heute (config legal.snapshot_retention_days).
     *
     * @param  array<string, mixed>  $before
     */
    public static function capture(PressRelease $pressRelease, array $before, ?LegalRequest $legalRequest = null): self
    {
        return self::query()->create([
            'legal_request_id' => $legalRequest?->getKey(),
            'press_release_id' => $pressRelease->getKey(),
            'encrypted_before' => $before,
            'purge_after' => now()->addDays((int) config('legal.snapshot_retention_days'))->toDateString(),
        ]);
    }

    public function legalRequest(): BelongsTo
    {
        return $this->belongsTo(LegalRequest::class);
    }

    public function pressRelease(): BelongsTo
    {
        return $this->belongsTo(PressRelease::class);
    }

    /**
     * @param  Builder<PressReleaseRedactionSnapshot>  $query
     * @return Builder<PressReleaseRedactionSnapshot>
     */
    public function scopeDueForPurge(Builder $query): Builder
    {
        return $query->whereDate('purge_after', '<', now()->toDateString());
    }
}