Aorabooks — multi-tenant ERP, one PostgreSQL database per tenant

// One PostgreSQL database per tenant. Resolve by subdomain, swap the
// connection on every request — and purge first so Octane workers never
// serve one tenant's data to the next.
function dbConnectByDomain(string $domain): bool
{
    if ($domain === 'app') {                 // central / control-plane DB
        DB::setDefaultConnection('pgsql');
        setDefaultTimezone();
        return true;
    }

    $org = Organization::where('db_removed', false)
        ->where('domain', $domain)
        ->first(['db_database', 'db_username', 'db_password']);
    if (! $org) {
        return false;
    }

    DB::purge('pgsql');
    DB::purge('pgsql_md');
    config([
        'database.connections.pgsql_md.database' => $org->db_database,
        'database.connections.pgsql_md.username' => $org->db_username,
        'database.connections.pgsql_md.password' => $org->db_password,
    ]);
    DB::setDefaultConnection('pgsql_md');     // tenant is now the default
    return true;
}

// ProcessOfflineSyncJob — public $tries = 3; public $timeout = 300;
public function handle(): void
{
    // Never block the till: the POS sells offline; we reconcile here,
    // into the right tenant DB, idempotently.
    if (! dbConnectByDomain($this->domain)) {
        return;
    }

    // sync_id makes replays safe: a re-sent batch updates, never duplicates.
    $log = OfflineSyncLog::firstOrNew(['sync_id' => $this->syncId]);
    $log->fill(['type' => $this->type, 'status' => 'processing'])->save();

    DB::beginTransaction();
    try {
        $result = match ($this->type) {
            'session_opened' => $this->processSessionOpen(),
            'session_closed' => $this->processSessionClose(),
            'sale'           => $this->processSale(),
            default          => "Unknown type: {$this->type}",
        };
        DB::commit();
        $log->update(['status' => 'completed', 'result' => $result]);
    } catch (Throwable $e) {
        DB::rollBack();
        $log->update(['status' => 'failed', 'error_message' => $e->getMessage()]);
        throw $e;                            // re-throw → queue retries
    }
}

// ZATCA Phase-2 e-invoicing. Sign locally, then report/clear with the
// tax authority — but a rejection must never fail the sale itself.
public static function clearance(int $invoiceId, int $companyId, string $type = 'invoice')
{
    if (! companySetting($companyId, 'enable_e_invoicing', 0)) {
        return true;                          // feature off → no-op
    }

    $invoiceData = self::mapInvoiceData($invoiceId, $companyId, $type);
    $signed = InvoiceSigner::signInvoice(
        GeneratorInvoice::invoice($invoiceData)->getXML(),
        $certificate
    );

    // Persist hash + QR up front so the till can print immediately.
    $status = $sale->zatcaStatus()->firstOrNew();
    $status->zatca_invoice_hash = $signed->getHash();
    $status->zatca_qr_code      = $signed->getQRCode();
    $status->save();

    $response = $sale->is_bill_to_bill
        ? $api->clearance($signed->getXML(), $signed->getHash(), $invoiceData['uuid'])
        : $api->reporting($signed->getXML(), $signed->getHash(), $invoiceData['uuid']);

    $status->zatca_status = $response->success()
        ? ($sale->is_bill_to_bill ? 'CLEARED' : 'REPORTED')
        : 'NOT_CLEARED';                      // degrade, don't throw
    $status->save();
}