Initial commit: Laravel OSINT platform

Multi-user OSINT investigation tool with owner-controlled per-user and
per-group access grants. Includes Sherlock, theHarvester, crt.sh, WHOIS,
and ip-api.com collectors wired through a pluggable Runner/queue pipeline,
investigation search, and printable/CSV/JSON reporting.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/Models/Investigation.php

@@ -0,0 +1,94 @@
+<?php
+
+namespace App\Models;
+
+use Illuminate\Database\Eloquent\Attributes\Fillable;
+use Illuminate\Database\Eloquent\Builder;
+use Illuminate\Database\Eloquent\Factories\HasFactory;
+use Illuminate\Database\Eloquent\Model;
+use Illuminate\Database\Eloquent\Relations\BelongsTo;
+use Illuminate\Database\Eloquent\Relations\BelongsToMany;
+use Illuminate\Database\Eloquent\Relations\HasMany;
+
+#[Fillable(['name', 'description', 'owner_id', 'status'])]
+class Investigation extends Model
+{
+    use HasFactory;
+
+    /**
+     * Investigations owned by, directly granted to, or group-granted to the user.
+     * Used for listing; per-item role/edit checks still go through roleFor().
+     */
+    public function scopeAccessibleBy(Builder $query, User $user): Builder
+    {
+        return $query->where(function (Builder $q) use ($user) {
+            $q->where('owner_id', $user->id)
+                ->orWhereHas('users', fn (Builder $q2) => $q2->where('users.id', $user->id))
+                ->orWhereHas('groups', fn (Builder $q2) => $q2->whereIn(
+                    'groups.id',
+                    $user->groups()->pluck('groups.id')
+                ));
+        });
+    }
+
+    public function owner(): BelongsTo
+    {
+        return $this->belongsTo(User::class, 'owner_id');
+    }
+
+    public function users(): BelongsToMany
+    {
+        return $this->belongsToMany(User::class)
+            ->withPivot('role')
+            ->withTimestamps();
+    }
+
+    public function groups(): BelongsToMany
+    {
+        return $this->belongsToMany(Group::class, 'investigation_group')
+            ->withPivot('role')
+            ->withTimestamps();
+    }
+
+    public function targets(): HasMany
+    {
+        return $this->hasMany(Target::class);
+    }
+
+    /**
+     * The role a user has on this investigation, or null if they have no access.
+     * Owner implicitly has the 'owner' role; direct grants win over group grants,
+     * and among group grants 'editor' wins over 'viewer'.
+     */
+    public function roleFor(User $user): ?string
+    {
+        if ($this->owner_id === $user->id) {
+            return 'owner';
+        }
+
+        $directRole = $this->users()->where('users.id', $user->id)->value('investigation_user.role');
+        if ($directRole !== null) {
+            return $directRole;
+        }
+
+        $groupRoles = $this->groups()
+            ->whereIn('groups.id', $user->groups()->pluck('groups.id'))
+            ->pluck('investigation_group.role');
+
+        if ($groupRoles->isEmpty()) {
+            return null;
+        }
+
+        return $groupRoles->contains('editor') ? 'editor' : 'viewer';
+    }
+
+    public function isAccessibleBy(User $user): bool
+    {
+        return $this->roleFor($user) !== null;
+    }
+
+    public function isEditableBy(User $user): bool
+    {
+        return in_array($this->roleFor($user), ['owner', 'editor'], true);
+    }
+}