osint/app/Http/Controllers/InvestigationController.php

<?php

namespace App\Http\Controllers;

use App\Models\Investigation;
use App\Models\Source;
use App\Osint\RunnerRegistry;
use Illuminate\Http\RedirectResponse;
use Illuminate\Http\Request;
use Illuminate\View\View;

class InvestigationController extends Controller
{
    public function index(Request $request): View
    {
        $investigations = Investigation::query()
            ->accessibleBy($request->user())
            ->withCount('targets')
            ->latest()
            ->get();

        return view('investigations.index', compact('investigations'));
    }

    public function create(): View
    {
        $this->authorize('create', Investigation::class);

        return view('investigations.create');
    }

    public function store(Request $request): RedirectResponse
    {
        $this->authorize('create', Investigation::class);

        $data = $request->validate([
            'name' => ['required', 'string', 'max:255'],
            'description' => ['nullable', 'string', 'max:5000'],
        ]);

        $investigation = Investigation::create([
            ...$data,
            'owner_id' => $request->user()->id,
            'status' => 'open',
        ]);

        return redirect()->route('investigations.show', $investigation);
    }

    public function show(Request $request, Investigation $investigation, RunnerRegistry $registry): View
    {
        $this->authorize('view', $investigation);

        $investigation->load(['owner', 'targets.creator', 'targets.findings.source']);

        $sources = Source::where('enabled', true)->orderBy('name')->get();

        return view('investigations.show', [
            'investigation' => $investigation,
            'canEdit' => $investigation->isEditableBy($request->user()),
            'canManageAccess' => $request->user()->can('manageAccess', $investigation),
            'sources' => $sources,
            'runnableSourceKeys' => $sources->filter(fn (Source $s) => $registry->has($s->key))->pluck('key'),
        ]);
    }

    public function destroy(Investigation $investigation): RedirectResponse
    {
        $this->authorize('delete', $investigation);

        $investigation->delete();

        return redirect()->route('investigations.index');
    }
}