CoolCMS API

FeedManager extends Manager
in package

Application

Feed CRUD plus dedicated bridge actions outside the generic object-graph save.

The parameter tree needs its own two-flush save because it is self-referencing (see the FeedParameter docblock). Actions:

saveParameterTree()/getParameterTree() - nested-set parameter tree. An unchanged tree is not written at all; a changed one is deleted and rebuilt. The cascade delete of feed_parameters removes the linked FeedParameterRel overrides (FK ON DELETE CASCADE), so the save moves them onto the new node with the same path.
saveParameterRels()/getParameterRels() - feed-scoped overrides (delete all rows of the feed, then insert). The admin UI does not use them (overrides are edited on the product set); call only with the complete row set of the whole feed.
saveParameterRelsForSet()/getParameterRelsForSet() - set-scoped overrides (tab "Feeds" in ProductSetEditComponent). The delete is limited to product_set_id = :setId, so saving one set never touches overrides of another set. Unlike the others, it accepts '' as a valid value (positional placeholder of a repeated multiple node, see the method docblock).
saveCategoryRelsForCategory()/getCategoryRelsForCategory() - category to value mapping per feed (category form). The delete is limited to category_id = :categoryId.

IMPORTANT: categoryRels is still an owned collection Feed::$categoryRels (read by FeedXmlGenerator), but it is listed in $defaultSkipFields, so the generic feed save never writes or deletes it. Otherwise saving a feed (its form has no category mapping section) would send an empty collection and orphanRemoval would delete the mappings of all categories.

Constants

DELETED_IDS_META : string = '__deletedIds': Reserved `$meta` key with the ids of the entities being deleted, captured before the first hook.
CATEGORY_RELATIONS_TABLE : string = 'cms_mod_eshop_feed_product_category_rel'
MAX_TREE_LEVEL : int = 2: Maximum depth of the parameter tree; deeper nodes are ignored.
PARAMETERS_TABLE : string = 'cms_mod_eshop_feed_parameters'
RELATIONS_TABLE : string = 'cms_mod_eshop_feed_parameter_relations'

Properties

$service : Service<string|int, TEntity>: Manager service; subclasses narrow the type (`@property` in the Api/Admin/Front manager).
$appContext : AppContext
$assetFormatRegistry : AssetFormatRegistry|null: Format processor registry for file uploads, used by {@see \App\Core\Traits\Api\Models\Managers\AssetProcessingTrait}.
$cacheTagInvalidator : CacheTagInvalidator|null: Post-commit invalidator of the wire-payload query cache (tag bump per entity class).
$defaultSkipFields : array<int, string>: `categoryRels` is written only by {@see saveCategoryRelsForCategory()} from the category form. Stripping it before hydration ({@see \App\Core\Traits\Api\Presenters\SaveTrait::stripDefaultSkipFields()}, runs on both the internal and external path) is the only real protection against a feed save silently deleting the mappings.
$internalCallContext : InternalCallContext|null: Tells whether the call is an internal bridge call; the single source for reading uploaded items with `path` ({@see readUploadedItem()}).
$languageContext : LanguageContext|null
$nonInvalidatingColumns : array<string|int, string>: Columns whose update does not invalidate the cache: view counters (`registerEvent()` bumps the counter on every pageview). Without this every view would flush the query cache of the whole class; counters are therefore stale up to the TTL. Override per manager by redefining the property.
$paramsConfig : Config|null: Neon parameters (`%params%`: server paths and directories), set by the decorator (`decorators.neon`) like `setAppContext()`.
$presenterContext : PresenterContext
$settingContext : SettingContext
$totalCount : int|null
$useTransactionForDelete : bool
$useTransactionForSave : bool
$em : EntityManagerInterface
$rejectedUploads : array<int, array{name: string, reason: string}>: New uploaded items that the Api did not save during the `save()` that is running right now (type, dimensions, unreadable, …). Filled by {@see recordRejectedUpload()} and returned in `saveInfo.rejectedUploads`.
$unitOfWorkReset : UnitOfWorkReset
$xmlGenerator : FeedXmlGenerator

Methods

__construct() : mixed
delete() : Result: Deletes the entity or entities by id. Optional hooks (opt-in via `method_exists`, like {@see SaveTrait}) allow cleanup of derived or denormalized state during the delete:
deleteAll() : Result
find() : T|null
findAll() : T> : list>)
findBy() : T|null
findRelatedIds() : array<int, int>|null: Returns the ids of target entities that already belong to the record `$parentId` through the relation collection `$property` (for example `('assetRels', 'asset')`, `('fileRels', 'file')`). Reads straight from the database, not through the Api read path (no `UoW::clear()` in the middle of save hooks).
generateAll() : array<int, array{feedId: int, urlName: string, itemCount?: int, path?: string, error?: string}>: Generates the XML of all feeds, or only of `$feedId` when given.
getAppContext() : AppContext
getCategoryRelsForCategory() : array<int, array<string, mixed>>: Returns the mapping of one category to a value per feed: `[['id'=>int,'feedId'=>int, 'feedName'=>string,'value'=>string]]`.
getDefaultSkipFields() : array<string|int, string>: Returns keys that the generic `service->save()` must not copy onto the managed entity.
getEntityClass() : TEntity>: Returns the root Doctrine entity class managed by this manager.
getExternalMetaAllowlist() : array<string|int, string>: Returns the meta keys allowed through the external HTTP path ({@see \App\Core\Traits\Api\Presenters\SaveTrait::actionSave()}).
getExternalOwnerData() : array<string, mixed>: Returns `data` keys that fill the owner from the server when an external save creates a record.
getExternalRemoteIpData() : array<string, mixed>: Returns `data` keys that fill the caller's IP from the server when an external save creates a record; sibling of {@see getExternalOwnerData()}.
getExternalUpdateColumnsAllowlist() : array<string|int, string>: Returns the columns the external HTTP path may change through {@see \App\Core\Traits\Api\Presenters\SaveTrait::actionUpdateColumns()}.
getGraphDataKeys() : array<string|int, string>: Returns the keys an external client may send nested in `data`.
getLanguageContext() : LanguageContext|null
getParameterRels() : array<int, array<string, mixed>>: Returns the feed-scoped overrides as a flat list: `[['id'=>int,'feedParameterId'=>int, 'feedParameterTag'=>string,'productSetId'=>int,'value'=>?string]]`.
getParameterRelsForSet() : array<int, array<string, mixed>>: Returns the overrides of one product set across all feeds: `[['id'=>int,'feedId'=>int, 'feedParameterId'=>int,'feedParameterTag'=>string,'value'=>?string,'valueMode'=>string]]`, Ordered by `r.id` (creation order), which the pairing of repeated values of a `multiple` node depends on (see {@see FeedXmlGenerator}).
getParameterTree() : array<int, array<string, mixed>>: Returns the nested-set parameter tree of the feed as a nested array (max 2 levels): `[['id'=>int,'tag'=>string,'multiple'=>bool,'actionId'=>?int,'children'=>[...]]]`.
getPresenterContext() : PresenterContext
getServiceClass() : class-string: Returns the fully qualified service class name, the identity for the per-service rollout allowlist of the wire-payload query cache ({@see \App\Core\Cache\Config::isServiceEnabled()}).
getSettingContext() : SettingContext
getSettings() : array<int, array<string, mixed>>
getTotalCount() : int|null
initializeAllContexts() : void
registerEvent() : Result
save() : Result
saveCategoryRelsForCategory() : Result: Deletes and rebuilds the mapping of one category (one value per feed, natural key `UNIQUE(feed_id, category_id)`).
saveParameterRels() : Result: Deletes and rebuilds all overrides of the feed. Ownership guard: `feedParameterId` must belong to this feed; a foreign or unknown id is not in `$validParamIds` and the row is silently skipped.
saveParameterRelsForSet() : Result: Deletes and rebuilds the overrides of one product set.
saveParameterTree() : Result: Saves the parameter tree of the feed (see the class docblock).
setAppContext() : $this
setAssetFormatRegistry() : static
setCacheTagInvalidator() : static
setInternalCallContext() : static
setLanguageContext() : $this
setParamsConfig() : static
setPresenterContext() : $this
setSettingContext() : $this
updateAllRelations() : Result
updateColumn() : Result
updateColumns() : Result
updateRelations() : Result
beforeSave() : Result|null
beginRejectedUploads() : array<int, array{name: string, reason: string}>: Starts a save ({@see save()}): the list of rejected items belongs to this save only; the outer one (a nested save of the same manager) is returned to the caller and restored after the save through {@see finishRejectedUploads()}.
bumpCacheTags() : void: Bumps cache tags for the entity after commit: its class, the owned-cascade classes from metadata and the optional `additionalCacheTags()` of the manager.
bumpCacheTagsExplicit() : void: Bumps the given classes explicitly (raw-DBAL paths with a cross-entity effect).
bumpCacheTagsForClass() : void: Bumps cache tags by class name when there is no instance (bulk delete, `updateColumns()`, raw DBAL, tree operations).
classCacheTags() : array<string|int, string>: Returns extra tags for a bump that has no entity, typically tree operations ({@see \App\Core\Traits\Api\Models\Managers\TreeTrait::treeTransaction()}) that rewrite `lft`/`rgt` on many rows.
finishRejectedUploads() : void: Ends a save: whatever {@see recordRejectedUpload()} wrote during it is added to the data of a successful result as `saveInfo.rejectedUploads` (the Api presenter passes it on to the caller, the admin builds a warning from it). A rejected item does not fail the save; the accepted files stay.
getDeletedId() : int|null: Returns the id `$entity` had before the delete, from the snapshot in `$meta` that {@see delete()} hands to every hook. Null for an entity the snapshot does not know (not loaded by this delete, or without a simple id).
getService() : Service<string|int, TEntity>: Returns the service backing the manager traits.
readUploadedItem() : string|null: Reads the content of an uploaded item (`{name, data}` base64 or `{name, path}` from the dropzone) through the single reader {@see UploadedItem}.
recordRejectedUpload() : void: Records a new uploaded item that the save skipped ({@see UploadRejection} `REASON_*`).
buildParameterPathKeys() : array<int, string>: Returns `node id => path` for a stored tree ({@see getParameterTree()}). The path is the tag of every ancestor and the node, each with its occurrence among same-tag siblings (`PARAM#1/VAL#0`), so repeated `multiple` nodes stay distinct and a reorder of differently named nodes does not move values between them.
bumpDeleteCacheTags() : void: Post-commit bump after a delete. With entities it goes through {@see \App\Core\Base\BaseManager::bumpCacheTags()}, which also collects `additionalCacheTags()` (Comment → CommentThread); without them it falls back to bumping the manager class itself, the original behavior.
captureDeletedIds() : WeakMap<object, int>: Keys the ids by the loaded entity objects, not by the input ids: an input id that loaded nothing must not shift the pairing. A weak map, so the snapshot never keeps an entity alive.
columnsInvalidateCache() : bool
countParameterNodes() : int
deleteBatch() : Result: Bulk delete of a list of ids as one transaction. `Service::deleteAll()` flushes per entity; in autocommit the rows deleted before a database failure would stay deleted while the caller got either an escaped `EntityManagerClosed` or an "OK" with an error text. Here the service stops at the technical failure, this wrapper rolls the whole batch back and returns the failure Result with `deletedCount = 0` and `rolledBack = true`: nothing of the batch is durable and nothing is attempted over the closed EntityManager. A domain partial success (missing ids) keeps the existing contract and is committed.
flattenParameterTree() : void: Recursively creates (persists without flushing) `FeedParameter` entities from the nested array and computes `lft`/`rgt` (standard nested-set preorder, assigned structurally without real DB ids) and `level`/`order`. `parentId` is filled in only after the first flush (see {@see saveParameterTree()}), so only the parent object reference is kept here.
inRebuildTransaction() : Result: Wraps a destructive rebuild (raw delete, persist, flush) in one transaction.
isAssetPathAllowed() : bool: Checks only entities composing {@see AssetPathTrait}; the trait is the allowlist of "relative file path" columns, other `assetPath`-like fields are untouched.
loadEntitiesForCacheTags() : array<int, object>: Loads the entities being deleted only to find out their `additionalCacheTags()`. Fail-soft: what cannot be loaded is simply missing and the bump falls back to the class; it must never stop the delete.
normalizeParameterTree() : array<int, array{tag: string, multiple: bool, actionId: ?int, children: list}>: Normalizes a tree to what {@see flattenParameterTree()} would store (trimmed non-empty tags, at most {@see MAX_TREE_LEVEL} levels, `actionId` as int or null), so the submitted and the stored tree can be compared.
restoreParameterRelations() : int: Re-inserts the captured manual values onto the new node with the same path, under their original row id. Values of a node that is gone are dropped.
rollbackBatch() : void
saveWithHooks() : Result: Runs the save itself: transaction, `beforeSave` / `afterSave` / `completedSave`, tree, cache.
usesAssetPathTrait() : bool

DELETED_IDS_META

Reserved `$meta` key with the ids of the entities being deleted, captured before the first hook.


    protected
        string
    DELETED_IDS_META
    = '__deletedIds'

Read it only through getDeletedId().

CATEGORY_RELATIONS_TABLE


    private
        string
    CATEGORY_RELATIONS_TABLE
    = 'cms_mod_eshop_feed_product_category_rel'

MAX_TREE_LEVEL

Maximum depth of the parameter tree; deeper nodes are ignored.


    private
        int
    MAX_TREE_LEVEL
    = 2

PARAMETERS_TABLE


    private
        string
    PARAMETERS_TABLE
    = 'cms_mod_eshop_feed_parameters'

RELATIONS_TABLE


    private
        string
    RELATIONS_TABLE
    = 'cms_mod_eshop_feed_parameter_relations'

$service

Manager service; subclasses narrow the type (`@property` in the Api/Admin/Front manager).


        public
            Service<string|int, TEntity>
    $service

$appContext


        protected
            AppContext
    $appContext

$assetFormatRegistry

Format processor registry for file uploads, used by {@see \App\Core\Traits\Api\Models\Managers\AssetProcessingTrait}.


        protected
            AssetFormatRegistry|null
    $assetFormatRegistry
     = null

Set by a decorator (decorators.neon) like setParamsConfig(): more than ten managers process assets and each has its own constructor, so constructor injection would touch all of them.

$cacheTagInvalidator

Post-commit invalidator of the wire-payload query cache (tag bump per entity class).


        protected
            CacheTagInvalidator|null
    $cacheTagInvalidator
     = null

Set by the decorator (decorators.neon) like setParamsConfig(). Nullable and fail-open: without wiring (or without Redis) a bump is a no-op.

$defaultSkipFields

`categoryRels` is written only by {@see saveCategoryRelsForCategory()} from the category form. Stripping it before hydration ({@see \App\Core\Traits\Api\Presenters\SaveTrait::stripDefaultSkipFields()}, runs on both the internal and external path) is the only real protection against a feed save silently deleting the mappings.


        protected
            array<int, string>
    $defaultSkipFields
     = ['categoryRels']

$internalCallContext

Tells whether the call is an internal bridge call; the single source for reading uploaded items with `path` ({@see readUploadedItem()}).


        protected
            InternalCallContext|null
    $internalCallContext
     = null

Only ApiBridge::internalCall() sets it, never the payload and not the RBAC guard, so the emergency apiRbac.internalMode: off cannot disable it. Set by a decorator like setAssetFormatRegistry(). Without it (direct manager call from cron or a test) the call counts as external.

$languageContext


        protected
            LanguageContext|null
    $languageContext
     = NULL

$nonInvalidatingColumns

Columns whose update does not invalidate the cache: view counters (`registerEvent()` bumps the counter on every pageview). Without this every view would flush the query cache of the whole class; counters are therefore stale up to the TTL. Override per manager by redefining the property.


        protected
            array<string|int, string>
    $nonInvalidatingColumns
     = ['views', 'viewsList', 'viewsDetail']

Covers all view counters across modules: views (Blog Article), viewsList (list impression of Advert/Message) and viewsDetail (detail view of Advert/Message, registerEvent() in the *DetailTraits). IMPORTANT: viewsDetail must stay in the list, otherwise every open of an advert/post detail would invalidate all lists of the class.

$paramsConfig

Neon parameters (`%params%`: server paths and directories), set by the decorator (`decorators.neon`) like `setAppContext()`.


        protected
            Config|null
    $paramsConfig
     = null

Write logic (asset directories) reads paths from here, not from getSettings() or the setting context, which may be filled by the client without server paths. The property cannot be named $config: it collides with the promoted $config in some managers.

$presenterContext


        protected
            PresenterContext
    $presenterContext

$settingContext


        protected
            SettingContext
    $settingContext

$totalCount


        protected
            int|null
    $totalCount
     = null

$useTransactionForDelete


        protected
            bool
    $useTransactionForDelete
     = true

$useTransactionForSave


        protected
            bool
    $useTransactionForSave
     = true

$em read-only


        private
            EntityManagerInterface
    $em

$rejectedUploads

New uploaded items that the Api did not save during the `save()` that is running right now (type, dimensions, unreadable, …). Filled by {@see recordRejectedUpload()} and returned in `saveInfo.rejectedUploads`.


        private
            array<int, array{name: string, reason: string}>
    $rejectedUploads
     = []

$unitOfWorkReset read-only


        private
            UnitOfWorkReset
    $unitOfWorkReset

$xmlGenerator read-only


        private
            FeedXmlGenerator
    $xmlGenerator

__construct()


    public
                    __construct(FeedService $service, EntityManagerInterface $em, UnitOfWorkReset $unitOfWorkReset, FeedXmlGenerator $xmlGenerator) : mixed

Parameters

$service : FeedService
$em : EntityManagerInterface
$unitOfWorkReset : UnitOfWorkReset
$xmlGenerator : FeedXmlGenerator

delete()

Deletes the entity or entities by id. Optional hooks (opt-in via `method_exists`, like {@see SaveTrait}) allow cleanup of derived or denormalized state during the delete:


    public
                    delete(int|array<string|int, mixed> $id[, array<string, mixed> $meta = [] ]) : Result

beforeDelete(array $entities, array $meta): ?Result runs before the delete (validation or capturing context while the rows exist). A failed Result means rollback and return. Its data flows into afterDelete under $meta['__beforeDelete'].
afterDelete(array $entities, Result $result, array $meta): ?Result runs after the delete, still in the transaction. It is only for recomputing derived state from the remaining rows (toped_until, member_until, county), idempotent and reversible. A failure rolls back the delete itself (atomicity). It is also the place for the mandatory delete of dependents through a foreign manager (comment, rating and message threads): an owner still managed in the unit of work references them, so they must go after its row, never before it in beforeDelete (collect their ids there). Additive or irreversible effects (credits, e-mails, invoices) do not belong here, only into completedDelete.
completedDelete(array $entities, Result $result, array $meta): void runs best effort after the commit, outside the transaction; an exception is only logged (the delete stays).
completedAssetCleanup(array $entities, Result $result, array $meta): void runs best effort after the commit and releases the Asset rows and files the deleted entity owned. The body is in AssetProcessingTrait; opt-in is ownedAssetIds(object $entity): array on the manager, without it the hook does not run.

IMPORTANT: the cleanup has its own name instead of completedDelete() because many Api managers define completedDelete() themselves and a class method overrides a trait method without a warning, so the cleanup would silently be missing in them.

IMPORTANT: a soft delete (deleted = 1) goes through save(), not here; assets must not be released there because the record can be restored.

$entities are the entities loaded before the delete (after the DELETE the row is gone, but the PHP object keeps the data, such as FKs for the recomputation).

IMPORTANT: the id is the exception. Doctrine nulls the id of a removed instance on flush(), so a hook must not rely on getId() once the delete ran (today only the read UoW::clear() in the service find() hands the preloaded entities over detached and keeps their id). Every hook therefore gets the ids captured before beforeDelete under the reserved key DELETED_IDS_META, keyed by the loaded entity object (an input id that loaded nothing has no entry); read it through getDeletedId(). The key is always set here, so a caller-supplied value never survives.

Without hooks it behaves exactly as before (no preloading, no transaction). NOTE: deleteAll() (bulk) and the tree deleteNode take another path and do not trigger these hooks.

Parameters

$id : int|array<string|int, mixed>
$meta : array<string, mixed> = []

Return values

Result

deleteAll()


    public
                    deleteAll([array<string|int, mixed> $filters = [] ]) : Result

Parameters

$filters : array<string|int, mixed> = []

Return values

Result

find()


    public
                    find(int $id[, string|array<string|int, mixed> $includes = [] ]) : T|null

Parameters

$id : int
$includes : string|array<string|int, mixed> = []

Return values

T|null

findAll()


    public
                    findAll([array<string|int, mixed>|null $includes = [] ][, array<string|int, mixed>|null $filters = [] ][, array<string|int, mixed>|null $orderBys = null ][, int|null $offset = null ][, int|null $limit = null ][, array<string|int, mixed>|null $columns = null ][, bool $computeTotalCount = false ]) : T> : list>)

Parameters

$includes : array<string|int, mixed>|null = []
$filters : array<string|int, mixed>|null = []
$orderBys : array<string|int, mixed>|null = null
$offset : int|null = null
$limit : int|null = null
$columns : array<string|int, mixed>|null = null
$computeTotalCount : bool = false

Return values

T> : list>) —

entities, or raw rows when $columns is set

findBy()


    public
                    findBy([array<string|int, mixed>|null $filters = [] ][, string|array<string|int, mixed> $includes = [] ]) : T|null

Parameters

$filters : array<string|int, mixed>|null = []
$includes : string|array<string|int, mixed> = []

Return values

T|null

findRelatedIds()

Returns the ids of target entities that already belong to the record `$parentId` through the relation collection `$property` (for example `('assetRels', 'asset')`, `('fileRels', 'file')`). Reads straight from the database, not through the Api read path (no `UoW::clear()` in the middle of save hooks).


    public
                    findRelatedIds(int $parentId, string $property, string $targetAssociation) : array<int, int>|null

Parameters

$parentId : int
$property : string
$targetAssociation : string

Return values

array<int, int>|null —

null when it cannot be determined (collection mapping missing / database error)

generateAll()

Generates the XML of all feeds, or only of `$feedId` when given.


    public
                    generateAll([int|null $feedId = null ]) : array<int, array{feedId: int, urlName: string, itemCount?: int, path?: string, error?: string}>

The cron /cron/eshop/feed/generate calls only this manager. It delegates 1:1 to FeedXmlGenerator::generate(); the cycle FeedManager to FeedXmlGenerator to FeedManager::getParameterTree() is safe because of di: lazy: true in config/common.neon.

Parameters

$feedId : int|null = null

Return values

array<int, array{feedId: int, urlName: string, itemCount?: int, path?: string, error?: string}>

getAppContext()


    public
                    getAppContext() : AppContext

Return values

AppContext

getCategoryRelsForCategory()

Returns the mapping of one category to a value per feed: `[['id'=>int,'feedId'=>int, 'feedName'=>string,'value'=>string]]`.


    public
                    getCategoryRelsForCategory(int $categoryId) : array<int, array<string, mixed>>

Parameters

$categoryId : int

Return values

array<int, array<string, mixed>>

getDefaultSkipFields()

Returns keys that the generic `service->save()` must not copy onto the managed entity.


    public
                    getDefaultSkipFields() : array<string|int, string>

The manager's own afterSave()/beforeSave() sync trait handles them through $meta, not through the object graph. Backed by an optional protected per-manager property. The write Api endpoint (SaveTrait::internalActionSave()) also uses this accessor to strip the same keys from $data before hydration, because defaultSkipFields alone does not protect hydration.

Return values

array<string|int, string>

getEntityClass()

Returns the root Doctrine entity class managed by this manager.


    public
                    getEntityClass() : TEntity>

The write Api endpoint (SaveTrait) takes it from here instead of the request, so a client cannot choose the instantiated PHP class.

Return values

TEntity>

getExternalMetaAllowlist()

Returns the meta keys allowed through the external HTTP path ({@see \App\Core\Traits\Api\Presenters\SaveTrait::actionSave()}).


    public
                    getExternalMetaAllowlist() : array<string|int, string>

The internal path (ApiBridge::internalCall() calling internalActionSave() directly, admin and front) is not limited by this allowlist and reads $meta unchanged. The default is an empty array, so external meta is dropped entirely; actionSave() is reachable through HTTP routing regardless of ApiBridge, hence the strip. Override per manager with the protected property $externalMetaAllowlist, analogous to self::getDefaultSkipFields().

Return values

array<string|int, string>

getExternalOwnerData()

Returns `data` keys that fill the owner from the server when an external save creates a record.


    public
                    getExternalOwnerData(int $userId) : array<string, mixed>

The default [] means the domain has no owner or must not be created through external save (Order uses the dedicated checkout action, User registers another way). On INSERT there is nothing to own, so the owner cannot be verified, only determined: the owner field is #[ExternalReadonly] (the strip removes it from the payload) and SaveTrait::applyExternalOwner() then fills it from the JWT, so the client value never reaches hydration.

IMPORTANT: return the key that matches the column mapping, otherwise the owner is silently not written:

Watchdog/Comment/Rating/Message: scalar column, ['userId' => $userId];
Advert (Bazaar/Comcat): mapped column, ['insertUserId' => $userId];
Bazaar Response/AdvertFollower: the scalar userId has an #[ORM\AttributeOverride] with insertable: false, updatable: false in the Api leaf and the column belongs to the association $user, so ['user' => ['id' => $userId]]; Comcat Response has no $user association, so there it is ['userId' => $userId];
Complaint: the owner is the association $user, ['user' => ['id' => $userId]].

['id' => X] is a reference that hydrateForPersist() looks up in the DB (OrmEntityHydrator::isReference()). Called only on the external path and only on INSERT; on UPDATE it would make whoever saves a foreign record its owner.

Parameters

$userId : int: identity from the JWT (never from the request)

Return values

array<string, mixed>

getExternalRemoteIpData()

Returns `data` keys that fill the caller's IP from the server when an external save creates a record; sibling of {@see getExternalOwnerData()}.


    public
                    getExternalRemoteIpData(string $ip) : array<string, mixed>

The IP field is #[ExternalReadonly], so the external strip removes it and the client cannot forge it. Without filling, an external insert would have no IP and the "anonymous by IP" deduplication and per-IP manager limits would silently stop working. SaveTrait::applyExternalRemoteIp() fills it from IRequest::getRemoteAddress(), never from the request. The default [] means the entity carries no IP; overrides return the entity field name (['insertIp' => $ip]).

Parameters

$ip : string

Return values

array<string, mixed>

getExternalUpdateColumnsAllowlist()

Returns the columns the external HTTP path may change through {@see \App\Core\Traits\Api\Presenters\SaveTrait::actionUpdateColumns()}.


    public
                    getExternalUpdateColumnsAllowlist() : array<string|int, string>

updateColumn on a to-many relation is DELETE-all plus INSERT, so without this filter an external POST with values={userRoles: [...]} would bypass the strip/guard of the save path (privilege escalation). The internal path (ApiBridge::internalCall() calling internalActionUpdateColumns() directly) is not limited. The default is an empty array, so external updateColumns is rejected entirely. Override with the protected property $externalUpdateColumnsAllowlist.

Return values

array<string|int, string>

getGraphDataKeys()

Returns the keys an external client may send nested in `data`.


    public
                    getGraphDataKeys() : array<string|int, string>

Before hydration the write Api endpoint (SaveTrait::internalActionSave()) moves them from $data to $meta, where the manager's own afterSave()/beforeSave() sync trait reads them (the same mechanism as internal meta). When the client also sends the same key explicitly in meta, meta wins (compatibility with admin, e.g. the categoryRels collision on Advert). Backed by an optional protected per-manager property, like self::getDefaultSkipFields().

IMPORTANT: promoting a key here does not make its content safe to write as received. When the key carries a sensitive field that the server otherwise dictates (typically a payment or approval flag), the manager must overwrite or verify it server-side on the external path in beforeSave()/afterSave() before its sync trait reads it; otherwise the client sets it itself (privilege escalation). The external path is recognized by $meta['__external'] === true, which only SaveTrait::actionSave() sets (never internalActionSave() alone), so internal calls never get the marker. Example: Bazaar Advert.categoryRels is persisted through the object graph (owned collection outside $graphDataKeys); a client could mark paid itself and get a paid advert without payment, so AdvertManager::beforeSave() overwrites it through CategoryRelsPaidSanitizationTrait::sanitizeExternalCategoryRelsPaid() before flush.

Return values

array<string|int, string>

getLanguageContext()


    public
                    getLanguageContext() : LanguageContext|null

Return values

LanguageContext|null

getParameterRels()

Returns the feed-scoped overrides as a flat list: `[['id'=>int,'feedParameterId'=>int, 'feedParameterTag'=>string,'productSetId'=>int,'value'=>?string]]`.


    public
                    getParameterRels(int $feedId) : array<int, array<string, mixed>>

Parameters

$feedId : int

Return values

array<int, array<string, mixed>>

getParameterRelsForSet()

Returns the overrides of one product set across all feeds: `[['id'=>int,'feedId'=>int, 'feedParameterId'=>int,'feedParameterTag'=>string,'value'=>?string,'valueMode'=>string]]`, Ordered by `r.id` (creation order), which the pairing of repeated values of a `multiple` node depends on (see {@see FeedXmlGenerator}).


    public
                    getParameterRelsForSet(int $productSetId) : array<int, array<string, mixed>>

valueMode is the mode of combining the manual and the automatic value. For a multiple node all rows of the (parameter, set) pair carry the same mode and the first one is authoritative (see FeedParameterRel).

Parameters

$productSetId : int

Return values

array<int, array<string, mixed>>

getParameterTree()

Returns the nested-set parameter tree of the feed as a nested array (max 2 levels): `[['id'=>int,'tag'=>string,'multiple'=>bool,'actionId'=>?int,'children'=>[...]]]`.


    public
                    getParameterTree(int $feedId) : array<int, array<string, mixed>>

Parameters

$feedId : int

Return values

array<int, array<string, mixed>>

getPresenterContext()


    public
                    getPresenterContext() : PresenterContext

Return values

PresenterContext

getServiceClass()

Returns the fully qualified service class name, the identity for the per-service rollout allowlist of the wire-payload query cache ({@see \App\Core\Cache\Config::isServiceEnabled()}).


    public
                    getServiceClass() : class-string

The cache is controlled at the Api presenter boundary through this identity.

Return values

class-string

getSettingContext()


    public
                    getSettingContext() : SettingContext

Return values

SettingContext

getSettings()


    public
                    getSettings() : array<int, array<string, mixed>>

Return values

array<int, array<string, mixed>>

getTotalCount()


    public
                    getTotalCount() : int|null

Return values

int|null

initializeAllContexts()


    public
                    initializeAllContexts() : void

registerEvent()


    public
                    registerEvent(array<string|int, int> $ids, class-string $entityClass, string $property) : Result

Parameters

$ids : array<string|int, int>
$entityClass : class-string: entity used to translate the property into a column in the expression
$property : string

Return values

Result

save()


    public
                    save(TEntity $entity[, array<string, mixed> $meta = [] ][, array<int, string> $skipFields = [] ]) : Result

Parameters

$entity : TEntity
$meta : array<string, mixed> = []
$skipFields : array<int, string> = []

Return values

Result

saveCategoryRelsForCategory()

Deletes and rebuilds the mapping of one category (one value per feed, natural key `UNIQUE(feed_id, category_id)`).


    public
                    saveCategoryRelsForCategory(int $categoryId, array<int, mixed> $rows) : Result

IMPORTANT: the delete is limited to category_id = :categoryId, so saving category A never touches the mapping of category B. The other half of the same trap (a feed save must not delete the mapping) is handled by categoryRels in $defaultSkipFields.

This is a dedicated bridge action instead of an owned collection on ProductCategory: a category is saved by object-graph save from several places (form, subtree move, grid action) and each would have to carry categoryRels in includes, otherwise orphanRemoval would delete the mapping. A category-scoped action is symmetric with the overrides and independent of the caller's includes.

Parameters

$categoryId : int
$rows : array<int, mixed>: [['feedId'=>int,'value'=>?string]] (untyped bridge payload, so every row is checked with is_array())

Return values

Result

saveParameterRels()

Deletes and rebuilds all overrides of the feed. Ownership guard: `feedParameterId` must belong to this feed; a foreign or unknown id is not in `$validParamIds` and the row is silently skipped.


    public
                    saveParameterRels(int $feedId, array<int, array<string, mixed>> $rows) : Result

Parameters

$feedId : int
$rows : array<int, array<string, mixed>>

Return values

Result

saveParameterRelsForSet()

Deletes and rebuilds the overrides of one product set.


    public
                    saveParameterRelsForSet(int $productSetId, array<int, mixed> $rows) : Result

IMPORTANT: the delete is limited to product_set_id = :setId (unlike the feed-scoped saveParameterRels()), so saving the tab of set A never deletes overrides of set B even when they share the same feed and parameters.

Ownership guard: feedParameterId must exist in any feed (a set spans feeds, so the guard cannot be narrowed to one feed); an unknown id is silently skipped.

IMPORTANT: an empty string is a valid positional placeholder and is not dropped (unlike in saveParameterRels()). For a multiple node with children the generator pairs repetition i with the i-th override row of each child separately (FeedXmlGenerator::writeRepetition()), so a child empty in one repetition and filled in the next needs a row for the empty one, otherwise the values shift by one position and the XML is silently scrambled. The generator treats an empty override as "no manual value" and computes it by the action. Whether a row is sent at all is decided by the form (FeedFieldsTrait::collectFeedOverrideRows()), not by this guard. null and non-scalar values are still dropped.

A mode other than change (typically none, meaning the tag is not sent to the feed) has nowhere else to live than the row, so the form sends a carrier row with an empty value even when nothing was filled in. If this guard dropped '', the mode would not be saved while the admin believes it was. An unknown or missing valueMode falls back to change (FeedParameterRel::setValueMode()).

Parameters

$productSetId : int
$rows : array<int, mixed>: [['feedParameterId'=>int,'value'=>?string, 'valueMode'=>?string]] (untyped bridge payload, so every row is checked with is_array())

Return values

Result

saveParameterTree()

Saves the parameter tree of the feed (see the class docblock).


    public
                    saveParameterTree(int $feedId, array<int, array<string, mixed>> $tree) : Result

An unchanged tree (the feed form posts it on every save) is a no-op: nothing is deleted, node ids and the manual values of all sets stay. A changed tree is deleted and rebuilt, and the manual values (FeedParameterRel, cascade-deleted with their node) are moved onto the new node with the same path (buildParameterPathKeys()): a kept node keeps its values, only the values of a removed or renamed node go away.

Parameters

$feedId : int
$tree : array<int, array<string, mixed>>: nested array in the same shape as getParameterTree()

Return values

Result

setAppContext()


    public
                    setAppContext(AppContext $appContext) : $this

Parameters

$appContext : AppContext

Return values

$this

setAssetFormatRegistry()


    public
                    setAssetFormatRegistry(AssetFormatRegistry $assetFormatRegistry) : static

Parameters

$assetFormatRegistry : AssetFormatRegistry

Return values

static

setCacheTagInvalidator()


    public
                    setCacheTagInvalidator(CacheTagInvalidator $cacheTagInvalidator) : static

Parameters

$cacheTagInvalidator : CacheTagInvalidator

Return values

static

setInternalCallContext()


    public
                    setInternalCallContext(InternalCallContext $internalCallContext) : static

Parameters

$internalCallContext : InternalCallContext

Return values

static

setLanguageContext()


    public
                    setLanguageContext(LanguageContext|null $languageContext) : $this

Parameters

$languageContext : LanguageContext|null

Return values

$this

setParamsConfig()


    public
                    setParamsConfig(Config $paramsConfig) : static

Parameters

$paramsConfig : Config

Return values

static

setPresenterContext()


    public
                    setPresenterContext(PresenterContext $presenterContext) : $this

Parameters

$presenterContext : PresenterContext

Return values

$this

setSettingContext()


    public
                    setSettingContext(SettingContext $settingContext) : $this

Parameters

$settingContext : SettingContext

Return values

$this

updateAllRelations()


    public
                    updateAllRelations(int|array<string|int, mixed> $entityId, string $property, array<string, mixed> $values) : Result

Parameters

$entityId : int|array<string|int, mixed>: id, or a list of ids / composite-id arrays
$property : string
$values : array<string, mixed>: relation property name => value set on every row

Return values

Result

updateColumn()


    public
                    updateColumn(int|array<string|int, mixed> $entityId, string $property, mixed $value) : Result

Parameters

$entityId : int|array<string|int, mixed>: id, or a list of ids / composite-id arrays
$property : string
$value : mixed

Return values

Result

updateColumns()


    public
                    updateColumns(int|array<string|int, mixed> $entityId, array<string, mixed> $values) : Result

Parameters

$entityId : int|array<string|int, mixed>: id, or a list of ids / composite-id arrays
$values : array<string, mixed>: property name => new value

Return values

Result

updateRelations()


    public
                    updateRelations(int|array<string|int, mixed> $entityId, string $property, array<string|int, object> $relationEntities) : Result

Parameters

$entityId : int|array<string|int, mixed>: id, or a list of ids / composite-id arrays
$property : string
$relationEntities : array<string|int, object>: relation entities with updated values

Return values

Result

beforeSave()


    protected
                    beforeSave(bool $isInsert, Feed &$entity[, array<string, mixed> &$meta = [] ]) : Result|null

Parameters

$isInsert : bool
$entity : Feed
$meta : array<string, mixed> = []

Return values

Result|null

beginRejectedUploads()

Starts a save ({@see save()}): the list of rejected items belongs to this save only; the outer one (a nested save of the same manager) is returned to the caller and restored after the save through {@see finishRejectedUploads()}.


    protected
                    beginRejectedUploads() : array<int, array{name: string, reason: string}>

Return values

array<int, array{name: string, reason: string}> —

the outer save's list

bumpCacheTags()

Bumps cache tags for the entity after commit: its class, the owned-cascade classes from metadata and the optional `additionalCacheTags()` of the manager.


    protected
                    bumpCacheTags(object $entity) : void

Fail-open (the invalidator swallows exceptions). Called from the manager Save/Delete/Tree traits after the commit.

Parameters

$entity : object

bumpCacheTagsExplicit()

Bumps the given classes explicitly (raw-DBAL paths with a cross-entity effect).


    protected
                    bumpCacheTagsExplicit(array<string|int, string> $classes) : void

Parameters

$classes : array<string|int, string>

bumpCacheTagsForClass()

Bumps cache tags by class name when there is no instance (bulk delete, `updateColumns()`, raw DBAL, tree operations).


    protected
                    bumpCacheTagsForClass(class-string $rootClass[, array<string|int, string> $extraTags = [] ]) : void

Bumps the root class and its owned-cascade classes.

Parameters

$rootClass : class-string
$extraTags : array<string|int, string> = []

classCacheTags()

Returns extra tags for a bump that has no entity, typically tree operations ({@see \App\Core\Traits\Api\Models\Managers\TreeTrait::treeTransaction()}) that rewrite `lft`/`rgt` on many rows.


    protected
                    classCacheTags() : array<string|int, string>

IMPORTANT: additionalCacheTags(object) receives an entity, so a class-level bump cannot use it; without this hook a delete would lose the cross-entity tag (Comment to CommentThread). A manager whose cross-entity tag does not depend on a particular entity returns it here.

NOTE: unlike additionalCacheTags(), this hook is declared (with an empty default) instead of being an opt-in through method_exists(); method_exists() is always true in a manager that has the method, which phpstan reports as alreadyNarrowedType.

Return values

array<string|int, string>

finishRejectedUploads()

Ends a save: whatever {@see recordRejectedUpload()} wrote during it is added to the data of a successful result as `saveInfo.rejectedUploads` (the Api presenter passes it on to the caller, the admin builds a warning from it). A rejected item does not fail the save; the accepted files stay.


    protected
                    finishRejectedUploads(Result|null $result, array<int, array{name: string, reason: string}> $outer) : void

Parameters

$result : Result|null
$outer : array<int, array{name: string, reason: string}>: list from beginRejectedUploads()

getDeletedId()

Returns the id `$entity` had before the delete, from the snapshot in `$meta` that {@see delete()} hands to every hook. Null for an entity the snapshot does not know (not loaded by this delete, or without a simple id).


    protected
                    getDeletedId(array<string, mixed> $meta, object $entity) : int|null

Parameters

$meta : array<string, mixed>
$entity : object

Return values

int|null

getService()

Returns the service backing the manager traits.


    protected
                    getService() : Service<string|int, TEntity>

Return values

Service<string|int, TEntity>

readUploadedItem()

Reads the content of an uploaded item (`{name, data}` base64 or `{name, path}` from the dropzone) through the single reader {@see UploadedItem}.


    protected
                    readUploadedItem(array<string|int, mixed> $item[, bool $strictBase64 = true ][, int|null $maxBytes = null ]) : string|null

Call it right before processing and release the result before the next item, so that files never meet in memory. A path is accepted only during an internal bridge call ($internalCallContext) and only inside the dropzone root. A rejected path is logged to the auth channel and null is returned; callers treat it like unreadable data (skip the item or refuse the save).

Parameters

$item : array<string|int, mixed>
$strictBase64 : bool = true: false for callers that decode loosely (base64_decode($x))
$maxBytes : int|null = null: size limit; for path it is checked before reading

Return values

string|null

recordRejectedUpload()

Records a new uploaded item that the save skipped ({@see UploadRejection} `REASON_*`).


    protected
                    recordRejectedUpload(mixed $name, string $reason) : void

Called by the places that drop an item (processOrderedAssets(), advert attachments, product set gallery).

Parameters

$name : mixed
$reason : string

buildParameterPathKeys()

Returns `node id => path` for a stored tree ({@see getParameterTree()}). The path is the tag of every ancestor and the node, each with its occurrence among same-tag siblings (`PARAM#1/VAL#0`), so repeated `multiple` nodes stay distinct and a reorder of differently named nodes does not move values between them.


    private
            static        buildParameterPathKeys(array<string|int, mixed> $nodes[, string $prefix = '' ]) : array<int, string>

Parameters

$nodes : array<string|int, mixed>
$prefix : string = ''

Return values

array<int, string>

bumpDeleteCacheTags()

Post-commit bump after a delete. With entities it goes through {@see \App\Core\Base\BaseManager::bumpCacheTags()}, which also collects `additionalCacheTags()` (Comment → CommentThread); without them it falls back to bumping the manager class itself, the original behavior.


    private
                    bumpDeleteCacheTags(array<int, object> $entities) : void

Parameters

$entities : array<int, object>

captureDeletedIds()

Keys the ids by the loaded entity objects, not by the input ids: an input id that loaded nothing must not shift the pairing. A weak map, so the snapshot never keeps an entity alive.


    private
                    captureDeletedIds(array<int, object> $entities) : WeakMap<object, int>

Parameters

$entities : array<int, object>

Return values

WeakMap<object, int>

columnsInvalidateCache()


    private
                    columnsInvalidateCache(array<int, string> $columns) : bool

Parameters

$columns : array<int, string>

Return values

bool

countParameterNodes()


    private
            static        countParameterNodes(array<int, array{children: list}> $tree) : int

Parameters

$tree : array<int, array{children: list}>

Return values

int

deleteBatch()

Bulk delete of a list of ids as one transaction. `Service::deleteAll()` flushes per entity; in autocommit the rows deleted before a database failure would stay deleted while the caller got either an escaped `EntityManagerClosed` or an "OK" with an error text. Here the service stops at the technical failure, this wrapper rolls the whole batch back and returns the failure Result with `deletedCount = 0` and `rolledBack = true`: nothing of the batch is durable and nothing is attempted over the closed EntityManager. A domain partial success (missing ids) keeps the existing contract and is committed.


    private
                    deleteBatch(array<int, int|string|array<string|int, mixed>> $ids) : Result

Transaction ownership: the wrapper only opens its own level; inside a caller's transaction a rollback here marks the caller's transaction rollback-only, so its final commit rolls the whole scope back (TransactionManager counter contract, the same as the hooked delete() path).

Parameters

$ids : array<int, int|string|array<string|int, mixed>>

Return values

Result

flattenParameterTree()

Recursively creates (persists without flushing) `FeedParameter` entities from the nested array and computes `lft`/`rgt` (standard nested-set preorder, assigned structurally without real DB ids) and `level`/`order`. `parentId` is filled in only after the first flush (see {@see saveParameterTree()}), so only the parent object reference is kept here.


    private
                    flattenParameterTree(array<int, mixed> $nodes, FeedParameter|null $parentEntity, int $level, Feed $feed, array<int, FeedParameter}> &$flat, int &$lftCounter) : void

Parameters

$nodes : array<int, mixed>
$parentEntity : FeedParameter|null
$level : int
$feed : Feed
$flat : array<int, FeedParameter}>
$lftCounter : int

inRebuildTransaction()

Wraps a destructive rebuild (raw delete, persist, flush) in one transaction.


    private
                    inRebuildTransaction(callable(): Result $work) : Result

Without it the delete is a separate autocommit statement: when the following flush fails (deadlock, lost connection, FK conflict), the caller gets an error but the original rows are already gone and the new ones were not written.

$this->em->clear() inside the transaction is fine, because the transaction lives on the connection, not on the identity map. When an outer transaction is already running (Api SaveTrait), it is neither started nor rolled back here: DBAL would turn a nested rollback into a rollback-only outer transaction. The exception bubbles up to the owner.

Parameters

$work : callable(): Result

Return values

Result

isAssetPathAllowed()

Checks only entities composing {@see AssetPathTrait}; the trait is the allowlist of "relative file path" columns, other `assetPath`-like fields are untouched.


    private
                    isAssetPathAllowed(BaseEntity $entity) : bool

Parameters

$entity : BaseEntity

Return values

bool

loadEntitiesForCacheTags()

Loads the entities being deleted only to find out their `additionalCacheTags()`. Fail-soft: what cannot be loaded is simply missing and the bump falls back to the class; it must never stop the delete.


    private
                    loadEntitiesForCacheTags(int|array<string|int, mixed> $id) : array<int, object>

Parameters

$id : int|array<string|int, mixed>

Return values

array<int, object>

normalizeParameterTree()

Normalizes a tree to what {@see flattenParameterTree()} would store (trimmed non-empty tags, at most {@see MAX_TREE_LEVEL} levels, `actionId` as int or null), so the submitted and the stored tree can be compared.


    private
            static        normalizeParameterTree(array<string|int, mixed> $nodes, int $level) : array<int, array{tag: string, multiple: bool, actionId: ?int, children: list}>

Parameters

$nodes : array<string|int, mixed>
$level : int

Return values

array<int, array{tag: string, multiple: bool, actionId: ?int, children: list}>

restoreParameterRelations()

Re-inserts the captured manual values onto the new node with the same path, under their original row id. Values of a node that is gone are dropped.


    private
                    restoreParameterRelations(array<int, array<string, mixed>> $relations, array<int, string> $oldPaths, array<int, string> $newPaths) : int

Parameters

$relations : array<int, array<string, mixed>>: rows captured before the delete
$oldPaths : array<int, string>: old node id => path
$newPaths : array<int, string>: new node id => path

Return values

int —

number of restored values

rollbackBatch()


    private
                    rollbackBatch() : void

saveWithHooks()

Runs the save itself: transaction, `beforeSave` / `afterSave` / `completedSave`, tree, cache.


    private
                    saveWithHooks(TEntity $entity, array<string, mixed> $meta, array<int, string> $skipFields) : Result

Parameters

$entity : TEntity
$meta : array<string, mixed>
$skipFields : array<int, string>

Return values

Result

usesAssetPathTrait()


    private
            static        usesAssetPathTrait(string $class) : bool

Parameters

$class : string

Return values

bool

FeedManager extends Manager in package Application

Tags

Table of Contents

Constants

Properties

Methods

Constants

DELETED_IDS_META

CATEGORY_RELATIONS_TABLE

MAX_TREE_LEVEL

PARAMETERS_TABLE

RELATIONS_TABLE

Properties

$service

$appContext

$assetFormatRegistry

$cacheTagInvalidator

$defaultSkipFields

$internalCallContext

$languageContext

$nonInvalidatingColumns

$paramsConfig

$presenterContext

$settingContext

$totalCount

$useTransactionForDelete

$useTransactionForSave

$em read-only

$rejectedUploads

$unitOfWorkReset read-only

$xmlGenerator read-only

Methods

__construct()

Parameters

delete()

Parameters

Return values

deleteAll()

Parameters

Return values

find()

Parameters

Return values

findAll()

Parameters

Return values

findBy()

Parameters

Return values

findRelatedIds()

Parameters

Return values

generateAll()

Parameters

Return values

getAppContext()

Return values

getCategoryRelsForCategory()

Parameters

Return values

getDefaultSkipFields()

Return values

getEntityClass()

Return values

getExternalMetaAllowlist()

Return values

getExternalOwnerData()

Parameters

Return values

getExternalRemoteIpData()

Parameters

Return values

getExternalUpdateColumnsAllowlist()

Return values

getGraphDataKeys()

Return values

getLanguageContext()

Return values

getParameterRels()

Parameters

FeedManager extends Manager
in package

Application