DONE: create dump db into migration for all used database; WIP: merge bsas and api, add feature flags for commodity

Reviewed-on: #24
Co-authored-by: ISMAIL MASSERAN <ismail@koppkb.com>
Co-committed-by: ISMAIL MASSERAN <ismail@koppkb.com>

.dockerignore

@@ -0,0 +1,16 @@
+.git
+.gitea
+node_modules
+vendor
+.env
+.env.*
+!.env.example
+storage/logs
+storage/framework/cache
+storage/framework/sessions
+storage/framework/views
+storage/debugbar
+npm-debug.log
+Dockerfile
+docker-compose.yml
+docker-compose.staging.yml

.env.annur

@@ -0,0 +1,28 @@
+APP_NAME=Lumen
+APP_ENV=production
+APP_KEY=WbPGkYNmXZ6ZQplGlvl0iZ7zyW1b09xa
+APP_DEBUG=true
+APP_URL=https://apiannurv2.erahn.com.my
+APP_TIMEZONE=Asia/Kuala_Lumpur
+
+LOG_CHANNEL=stack
+LOG_SLACK_WEBHOOK_URL=
+
+DB_CONNECTION_2=mysql
+DB_HOST_2=192.168.1.216
+DB_PORT_2=3306
+DB_DATABASE_2=annur_tampoi
+DB_USERNAME_2=spider
+DB_PASSWORD_2=arrahn@123
+
+DB_CONNECTION_7=mysql
+DB_HOST_7=192.168.1.216
+DB_PORT_7=3306
+DB_DATABASE_7=master_annur
+DB_USERNAME_7=spider
+DB_PASSWORD_7=arrahn@123
+
+CACHE_DRIVER=file
+QUEUE_CONNECTION=sync
+
+TENNANT_MASTER_DB=master_annur

.env.docker

@@ -0,0 +1,82 @@
+APP_NAME=Lumen
+APP_ENV=local
+APP_KEY=WbPGkYNmXZ6ZQplGlvl0iZ7zyW1b09xa
+APP_DEBUG=true
+APP_URL=http://localhost
+APP_TIMEZONE=Asia/Kuala_Lumpur
+API_ARRAHNBID=http://lelong.test/api/
+API_ARRAHNBID_ANNUR=http://lelong-annur.test/api/
+
+LOG_CHANNEL=stack
+LOG_LEVEL=debug
+LOG_SLACK_WEBHOOK_URL=
+
+DB_CONNECTION=mysql
+DB_HOST=mysql
+DB_PORT=3306
+DB_DATABASE=erahn_xtra
+DB_USERNAME=root
+DB_PASSWORD=root
+
+DB_CONNECTION_7=mysql
+DB_HOST_7=mysql
+DB_PORT_7=3306
+DB_DATABASE_7=master_erahn
+DB_USERNAME_7=root
+DB_PASSWORD_7=root
+
+# DB_CONNECTION_3=mysql
+# DB_HOST_3=127.0.0.1
+# DB_PORT_3=3306
+# DB_DATABASE_3=erahn_baling
+# DB_USERNAME_3=root
+# DB_PASSWORD_3=root
+
+# DB_CONNECTION_4=mysql
+# DB_HOST_4=127.0.0.1
+# DB_PORT_4=3306
+# DB_DATABASE_4=arrahn_ld
+# DB_USERNAME_4=root
+# DB_PASSWORD_4=root
+
+# DB_CONNECTION_5=mysql
+# DB_HOST_5=127.0.0.1
+# DB_PORT_5=3306
+# DB_DATABASE_5=erahn_segamat
+# DB_USERNAME_5=root
+# DB_PASSWORD_5=root
+
+# DB_CONNECTION_6=mysql
+# DB_HOST_6=127.0.0.1
+# DB_PORT_6=3306
+# DB_DATABASE_6=arrahn_kb2
+# DB_USERNAME_6=spider
+# DB_PASSWORD_6=G0dz!ll42020
+
+
+# DB_CONNECTION_8=mysql
+# DB_HOST_8=127.0.0.1
+# DB_PORT_8=3306
+# DB_DATABASE_8=arrahn_klanas
+# DB_USERNAME_8=spider
+# DB_PASSWORD_8=G0dz!ll42020
+
+TENNANT_MASTER_DB=master_erahn
+TENNANT_KAUNTER_DB=kaunter_erahn
+
+KAUNTER_URL=http://host.docker.internal:8081
+INTERNAL_NOTIFICATION_SECRET=erahn-local-notification-secret
+
+CACHE_DRIVER=file
+QUEUE_CONNECTION=sync
+
+BSAS_BASE_URL=https://bsasdevapi.bursamalaysia.com/api
+BSAS_TOKEN_URL=https://bsasdevapi.bursamalaysia.com/oauth/token
+BSAS_CLIENT_ID=
+BSAS_CLIENT_SECRET=
+BSAS_MEMBER_SHORT_NAME=KOOPPKB
+BSAS_PRODUCT_CODE=CPO-MSIA-09
+BSAS_TENOR=00088
+BSAS_MAX_WAIT_TIME=10
+BSAS_HTTP_TIMEOUT=30
+BSAS_ORDER_RESULT_RETRIES=2

.env.example

@@ -5,6 +5,7 @@ APP_DEBUG=true
 APP_URL=http://api_arrahn.test
 APP_TIMEZONE=Asia/Kuala_Lumpur
 API_ARRAHNBID=http://lelong.test/api/
+API_ARRAHNBID_ANNUR=http://lelong-annur.test/api/
 
 LOG_CHANNEL=stack
 LOG_SLACK_WEBHOOK_URL=
@@ -86,172 +87,35 @@ DB_DATABASE_11=arrahn_pputeh
 DB_USERNAME_11=spider
 DB_PASSWORD_11=G0dz!ll42020
 
-DB_CONNECTION_12=mysql
-DB_HOST_12=127.0.0.1
-DB_PORT_12=3306
-DB_DATABASE_12=arrahn_rpanjang
-DB_USERNAME_12=spider
-DB_PASSWORD_12=G0dz!ll42020
-
-DB_CONNECTION_13=mysql
-DB_HOST_13=127.0.0.1
-DB_PORT_13=3306
-DB_DATABASE_13=arrahn_tmerah
-DB_USERNAME_13=spider
-DB_PASSWORD_13=G0dz!ll42020
-
-DB_CONNECTION_14=mysql
-DB_HOST_14=127.0.0.1
-DB_PORT_14=3306
-DB_DATABASE_14=arrahn_wb
-DB_USERNAME_14=spider
-DB_PASSWORD_14=G0dz!ll42020
-
-DB_CONNECTION_15=mysql
-DB_HOST_15=127.0.0.1
-DB_PORT_15=3306
-DB_DATABASE_15=arrahn_wcy
-DB_USERNAME_15=spider
-DB_PASSWORD_15=G0dz!ll42020
-
-DB_CONNECTION_16=mysql
-DB_HOST_16=127.0.0.1
-DB_PORT_16=3306
-DB_DATABASE_16=arrahn_bentong
-DB_USERNAME_16=spider
-DB_PASSWORD_16=G0dz!ll42020
-
-DB_CONNECTION_17=mysql
-DB_HOST_17=192.168.0.102
-DB_PORT_17=3306
-DB_DATABASE_17=arrahn_kajang
-DB_USERNAME_17=spider
-DB_PASSWORD_17=G0dz!ll42020
-
-DB_CONNECTION_18=mysql
-DB_HOST_18=192.168.0.102
-DB_PORT_18=3306
-DB_DATABASE_18=arrahn_kangar
-DB_USERNAME_18=spider
-DB_PASSWORD_18=G0dz!ll42020
-
-DB_CONNECTION_19=mysql
-DB_HOST_19=192.168.0.102
-DB_PORT_19=3306
-DB_DATABASE_19=arrahn_kuantan
-DB_USERNAME_19=spider
-DB_PASSWORD_19=G0dz!ll42020
-
-DB_CONNECTION_20=mysql
-DB_HOST_20=192.168.0.102
-DB_PORT_20=3306
-DB_DATABASE_20=arrahn_pgudang
-DB_USERNAME_20=spider
-DB_PASSWORD_20=G0dz!ll42020
-
-DB_CONNECTION_21=mysql
-DB_HOST_21=192.168.0.102
-DB_PORT_21=3306
-DB_DATABASE_21=arrahn_raub
-DB_USERNAME_21=spider
-DB_PASSWORD_21=G0dz!ll42020
-
-DB_CONNECTION_22=mysql
-DB_HOST_22=192.168.0.102
-DB_PORT_22=3306
-DB_DATABASE_22=arrahn_rlaut
-DB_USERNAME_22=spider
-DB_PASSWORD_22=G0dz!ll42020
-
-DB_CONNECTION_23=mysql
-DB_HOST_23=192.168.0.102
-DB_PORT_23=3306
-DB_DATABASE_23=arrahn_skudai
-DB_USERNAME_23=spider
-DB_PASSWORD_23=G0dz!ll42020
-
-DB_CONNECTION_24=mysql
-DB_HOST_24=192.168.0.102
-DB_PORT_24=3306
-DB_DATABASE_24=arrahn_spetani
-DB_USERNAME_24=spider
-DB_PASSWORD_24=G0dz!ll42020
-
-DB_CONNECTION_25=mysql
-DB_HOST_25=192.168.0.102
-DB_PORT_25=3306
-DB_DATABASE_25=arrahn_temerloh
-DB_USERNAME_25=spider
-DB_PASSWORD_25=G0dz!ll42020
-
-DB_CONNECTION_26=mysql
-DB_HOST_26=192.168.0.103
-DB_PORT_26=3306
-DB_DATABASE_26=arrahn_api2
-DB_USERNAME_26=spider
-DB_PASSWORD_26=G0dz!ll42020
-
-DB_CONNECTION_27=mysql
-DB_HOST_27=192.168.0.103
-DB_PORT_27=3306
-DB_DATABASE_27=arrahn_beaufort
-DB_USERNAME_27=spider
-DB_PASSWORD_27=G0dz!ll42020
-
-DB_CONNECTION_28=mysql
-DB_HOST_28=192.168.0.103
-DB_PORT_28=3306
-DB_DATABASE_28=arrahn_kbelud
-DB_USERNAME_28=spider
-DB_PASSWORD_28=G0dz!ll42020
-
-DB_CONNECTION_29=mysql
-DB_HOST_29=192.168.0.103
-DB_PORT_29=3306
-DB_DATABASE_29=arrahn_keningau
-DB_USERNAME_29=spider
-DB_PASSWORD_29=G0dz!ll42020
-
-DB_CONNECTION_30=mysql
-DB_HOST_30=192.168.0.103
-DB_PORT_30=3306
-DB_DATABASE_30=arrahn_putatan
-DB_USERNAME_30=spider
-DB_PASSWORD_30=G0dz!ll42020
-
-DB_CONNECTION_31=mysql
-DB_HOST_31=192.168.0.103
-DB_PORT_31=3306
-DB_DATABASE_31=arrahn_sandakan
-DB_USERNAME_31=spider
-DB_PASSWORD_31=G0dz!ll42020
-
-DB_CONNECTION_32=mysql
-DB_HOST_32=192.168.0.103
-DB_PORT_32=3306
-DB_DATABASE_32=arrahn_tawau
-DB_USERNAME_32=spider
-DB_PASSWORD_32=G0dz!ll42020
-
-DB_CONNECTION_33=mysql
-DB_HOST_33=192.168.0.103
-DB_PORT_33=3306
-DB_DATABASE_33=arrahn_tuaran
-DB_USERNAME_33=spider
-DB_PASSWORD_33=G0dz!ll42020
-
 CACHE_DRIVER=file
 QUEUE_CONNECTION=sync
 
-WABOT_API=https://md.wabot.my/api/send.php
-WABOT_INSTANCES_ID=63F40BD120DB4
-# WABOT_INSTANCES_ID=64892FD7440A6
-WABOT_TOKEN_KEYS=cbee7e95cf3ffbfa0531d5fddfd44f87
+MAX_MUTUEMAS=true
 
+TENNANT_MASTER_DB=master_erahn
+TENNANT_KAUNTER_DB=kaunter_erahn
 
-ONEWAYSMS_API=http://gateway.onewaysms.com.my:10001/api.aspx
-ONEWAYSMS_AUTH_USER=APIUK330HDAFO
-ONEWAYSMS_AUTH_PASS=APIUK330HDAFOUK330
+KAUNTER_URL=http://host.docker.internal:8081
+INTERNAL_NOTIFICATION_SECRET=
 
-ADMIN_PHONE_NUMBER=60178916936
-ACTIVE_JOB_SERVER=false
+LOGVIEWER_PASSWORD=
+
+WHATSAPP_TOKEN= # Paste token from Graph API explorer.
+WHATSAPP_PHONE_NUMBER_ID=1323449077519027
+WHATSAPP_API_VERSION=v25.0
+WHATSAPP_TEMPLATE=hello_world
+WHATSAPP_TEMPLATE_LANG=en_US
+WHATSAPP_VERIFY_TOKEN= # webhook verify token
+WHATSAPP_APP_SECRET= # X-Hub-Signature-256 checks; need to be enable first
+ADMIN_PHONE_NUMBER=60193450165
+
+BSAS_BASE_URL=https://bsasdevapi.bursamalaysia.com/api
+BSAS_TOKEN_URL=https://bsasdevapi.bursamalaysia.com/oauth/token
+BSAS_CLIENT_ID=
+BSAS_CLIENT_SECRET=
+BSAS_MEMBER_SHORT_NAME=KOOPPKB
+BSAS_PRODUCT_CODE=CPO-MSIA-09
+BSAS_TENOR=00088
+BSAS_MAX_WAIT_TIME=10
+BSAS_HTTP_TIMEOUT=30
+BSAS_ORDER_RESULT_RETRIES=2

.env.production

@@ -0,0 +1,89 @@
+APP_NAME=Lumen
+APP_ENV=production
+APP_KEY=WbPGkYNmXZ6ZQplGlvl0iZ7zyW1b09xa
+APP_DEBUG=false
+APP_URL=https://apiujrah.erahn.com.my
+APP_TIMEZONE=Asia/Kuala_Lumpur
+API_ARRAHNBID=https://adminbid-kopkb.erahn.com.my/api/
+API_ARRAHNBID_ANNUR=https://adminbid-annur.erahn.com.my/api/
+
+LOG_CHANNEL=stack
+LOG_SLACK_WEBHOOK_URL=
+LOGVIEWER_PASSWORD="$2y$10$k7eiUyZdm3BruwAaT1gbmelTm.PPgZptOEQT1nlBjyiR84a4KBMlm"
+
+DB_CONNECTION_2=mysql
+DB_HOST_2=192.168.1.216
+DB_PORT_2=3306
+DB_DATABASE_2=erahn_xtra
+DB_USERNAME_2=spider
+DB_PASSWORD_2=arrahn@123
+
+DB_CONNECTION_3=mysql
+DB_HOST_3=192.168.1.216
+DB_PORT_3=3306
+DB_DATABASE_3=erahn_baling
+DB_USERNAME_3=spider
+DB_PASSWORD_3=arrahn@123
+
+DB_CONNECTION_4=mysql
+DB_HOST_4=192.168.1.216
+DB_PORT_4=3306
+DB_DATABASE_4=arrahn_ld
+DB_USERNAME_4=spider
+DB_PASSWORD_4=arrahn@123
+
+DB_CONNECTION_5=mysql
+DB_HOST_5=192.168.1.216
+DB_PORT_5=3306
+DB_DATABASE_5=erahn_segamat
+DB_USERNAME_5=spider
+DB_PASSWORD_5=arrahn@123
+
+DB_CONNECTION_6=mysql
+DB_HOST_6=192.168.1.216
+DB_PORT_6=3306
+DB_DATABASE_6=erahn_terengganu
+DB_USERNAME_6=spider
+DB_PASSWORD_6=arrahn@123
+
+DB_CONNECTION_8=mysql
+DB_HOST_8=192.168.1.216
+DB_PORT_8=3306
+DB_DATABASE_8=erahn_benoni
+DB_USERNAME_8=spider
+DB_PASSWORD_8=arrahn@123
+
+DB_CONNECTION_7=mysql
+DB_HOST_7=192.168.1.216
+DB_PORT_7=3306
+DB_DATABASE_7=master_erahn
+DB_USERNAME_7=spider
+DB_PASSWORD_7=arrahn@123
+
+DB_CONNECTION_9=mysql
+DB_HOST_9=192.168.1.216
+DB_PORT_9=3306
+DB_DATABASE_9=annur_tampoi
+DB_USERNAME_9=spider
+DB_PASSWORD_9=arrahn@123
+
+CACHE_DRIVER=file
+QUEUE_CONNECTION=sync
+
+MAX_MUTUEMAS=true
+
+TENNANT_MASTER_DB=master_erahn
+TENNANT_KAUNTER_DB=kaunter_erahn
+
+KAUNTER_URL=https://ujrah.erahn.com.my
+INTERNAL_NOTIFICATION_SECRET="nIDTe(u@6[)VLJyd"
+
+WHATSAPP_CLOUD_ENABLED=true
+WHATSAPP_TOKEN=EAAZAonT56AO0BSnZAhWLi4UXDRT6iAldbiybxSQZAnGrzIke1QiNWvQkZAbQQTjWeVZC5bL1gEBhW6ff3Shf79nowXiTQEwyxqgZAZB6ZATwFCeTs8MZA5H6ZA76IJBuVqRiAZBvZCfkeSurbUNpEWyi9W7zsT2GWiZCLX8meX0KCfDHu7cp4aBgVu1Ps5ZCRO3bP4ZCQZDZD
+WHATSAPP_PHONE_NUMBER_ID=1375899418935337
+WHATSAPP_API_VERSION=v25.0
+WHATSAPP_TEMPLATE=hebahan_pembiayaan_online
+WHATSAPP_TEMPLATE_LANG=ms
+WHATSAPP_VERIFY_TOKEN=418ed86d49422071681c76bed25ae1cb7e90456c794a92f1c9ea417945a35a0a
+WHATSAPP_APP_SECRET=
+ADMIN_PHONE_NUMBER=

.env.staging

@@ -0,0 +1,100 @@
+APP_NAME=Lumen
+APP_ENV=staging
+APP_KEY=WbPGkYNmXZ6ZQplGlvl0iZ7zyW1b09xa
+APP_DEBUG=true
+APP_URL=http://127.0.0.1:8090
+APP_TIMEZONE=Asia/Kuala_Lumpur
+API_ARRAHNBID=http://lelong.test/api/
+API_ARRAHNBID_ANNUR=http://lelong-annur.test/api/
+
+HTTP_PORT=8090
+MYSQL_PUBLISH_PORT=3308
+
+LOG_CHANNEL=stack
+LOG_LEVEL=debug
+LOG_SLACK_WEBHOOK_URL=
+LOGVIEWER_PASSWORD=test123
+
+DB_CONNECTION=mysql
+DB_HOST=mysql
+DB_PORT=3306
+DB_DATABASE=erahn_xtra
+DB_USERNAME=root
+DB_PASSWORD=root
+
+DB_CONNECTION_7=mysql
+DB_HOST_7=mysql
+DB_PORT_7=3306
+DB_DATABASE_7=master_erahn
+DB_USERNAME_7=root
+DB_PASSWORD_7=root
+
+DB_CONNECTION_2=mysql
+DB_HOST_2=mysql
+DB_PORT_2=3306
+DB_DATABASE_2=erahn_xtra
+DB_USERNAME_2=root
+DB_PASSWORD_2=root
+
+DB_CONNECTION_3=mysql
+DB_HOST_3=mysql
+DB_PORT_3=3306
+DB_DATABASE_3=erahn_baling
+DB_USERNAME_3=root
+DB_PASSWORD_3=root
+
+DB_CONNECTION_4=mysql
+DB_HOST_4=mysql
+DB_PORT_4=3306
+DB_DATABASE_4=arrahn_ld
+DB_USERNAME_4=root
+DB_PASSWORD_4=root
+
+DB_CONNECTION_5=mysql
+DB_HOST_5=mysql
+DB_PORT_5=3306
+DB_DATABASE_5=erahn_segamat
+DB_USERNAME_5=root
+DB_PASSWORD_5=root
+
+DB_CONNECTION_7=mysql
+DB_HOST_7=mysql
+DB_PORT_7=3306
+DB_DATABASE_7=master_erahn
+DB_USERNAME_7=root
+DB_PASSWORD_7=root
+
+DB_CONNECTION_6=mysql
+DB_HOST_6=mysql
+DB_PORT_6=3306
+DB_DATABASE_6=erahn_test
+DB_USERNAME_6=root
+DB_PASSWORD_6=root
+
+DB_CONNECTION_9=mysql
+DB_HOST_9=mysql
+DB_PORT_9=3306
+DB_DATABASE_9=annur_tampoi
+DB_USERNAME_9=root
+DB_PASSWORD_9=root
+
+CACHE_DRIVER=file
+QUEUE_CONNECTION=sync
+
+MAX_MUTUEMAS=true
+
+TENNANT_MASTER_DB=master_erahn
+TENNANT_KAUNTER_DB=kaunter_erahn
+
+KAUNTER_URL=https://staging.erahn.com.my/login
+INTERNAL_NOTIFICATION_SECRET=staging_noti_secret
+
+WHATSAPP_CLOUD_ENABLED=false
+WHATSAPP_TOKEN=EAAZAonT56AO0BSnZAhWLi4UXDRT6iAldbiybxSQZAnGrzIke1QiNWvQkZAbQQTjWeVZC5bL1gEBhW6ff3Shf79nowXiTQEwyxqgZAZB6ZATwFCeTs8MZA5H6ZA76IJBuVqRiAZBvZCfkeSurbUNpEWyi9W7zsT2GWiZCLX8meX0KCfDHu7cp4aBgVu1Ps5ZCRO3bP4ZCQZDZD
+WHATSAPP_PHONE_NUMBER_ID=1375899418935337
+WHATSAPP_API_VERSION=v25.0
+WHATSAPP_TEMPLATE=hebahan_pembiayaan_online
+WHATSAPP_TEMPLATE_LANG=ms
+WHATSAPP_VERIFY_TOKEN=418ed86d49422071681c76bed25ae1cb7e90456c794a92f1c9ea417945a35a0a
+WHATSAPP_APP_SECRET=
+ADMIN_PHONE_NUMBER=

.env.tukar

@@ -1,244 +0,0 @@
-APP_NAME=Lumen
-APP_ENV=local
-APP_KEY=WbPGkYNmXZ6ZQplGlvl0iZ7zyW1b09xa
-APP_DEBUG=false
-APP_URL=https://api.arrahn.com.my
-APP_TIMEZONE=Asia/Kuala_Lumpur
-
-
-LOG_CHANNEL=stack
-LOG_SLACK_WEBHOOK_URL=
-
-DB_CONNECTION=mysql
-DB_HOST=172.16.4.102
-DB_PORT=3306
-DB_DATABASE=arrahn_kb2
-DB_USERNAME=zone2
-DB_PASSWORD=G0dz!ll4@2020
-
-DB_CONNECTION_2=mysql
-DB_HOST_2=172.16.4.102
-DB_PORT_2=3306
-DB_DATABASE_2=arrahn_wcy
-DB_USERNAME_2=zone2
-DB_PASSWORD_2=G0dz!ll4@2020
-
-DB_CONNECTION_3=mysql
-DB_HOST_3=172.16.4.102
-DB_PORT_3=3306
-DB_DATABASE_3=arrahn_1stop
-DB_USERNAME_3=zone2
-DB_PASSWORD_3=G0dz!ll4@2020
-
-DB_CONNECTION_4=mysql
-DB_HOST_4=172.16.4.102
-DB_PORT_4=3306
-DB_DATABASE_4=arrahn_jlwt
-DB_USERNAME_4=zone2
-DB_PASSWORD_4=G0dz!ll4@2020
-
-DB_CONNECTION_5=mysql
-DB_HOST_5=172.16.4.102
-DB_PORT_5=3306
-DB_DATABASE_5=arrahn_wb
-DB_USERNAME_5=zone2
-DB_PASSWORD_5=G0dz!ll4@2020
-
-DB_CONNECTION_6=mysql
-DB_HOST_6=172.16.4.102
-DB_PORT_6=3306
-DB_DATABASE_6=arrahn_kls
-DB_USERNAME_6=zone2
-DB_PASSWORD_6=G0dz!ll4@2020
-
-DB_CONNECTION_7=mysql
-DB_HOST_7=172.16.4.102
-DB_PORT_7=3306
-DB_DATABASE_7=online_arrahn
-DB_USERNAME_7=zone2
-DB_PASSWORD_7=G0dz!ll4@2020
-
-DB_CONNECTION_8=mysql
-DB_HOST_8=172.16.4.102
-DB_PORT_8=3306
-DB_DATABASE_8=arrahn_pp
-DB_USERNAME_8=zone2
-DB_PASSWORD_8=G0dz!ll4@2020
-
-DB_CONNECTION_9=mysql
-DB_HOST_9=172.16.4.102
-DB_PORT_9=3306
-DB_DATABASE_9=arrahn_mace
-DB_USERNAME_9=zone2
-DB_PASSWORD_9=G0dz!ll4@2020 
-
-DB_CONNECTION_10=mysql
-DB_HOST_10=172.16.4.102
-DB_PORT_10=3306
-DB_DATABASE_10=arrahn_pm                                                                                                                           
-DB_USERNAME_10=zone2
-DB_PASSWORD_10=G0dz!ll4@2020
-
-DB_CONNECTION_11=mysql
-DB_HOST_11=172.16.4.102
-DB_PORT_11=3306
-DB_DATABASE_11=arrahn_gm
-DB_USERNAME_11=zone2
-DB_PASSWORD_11=G0dz!ll4@2020
-
-DB_CONNECTION_12=mysql
-DB_HOST_12172.16.4.102
-DB_PORT_12=3306
-DB_DATABASE_12=arrahn_gcl
-DB_USERNAME_12=zone2
-DB_PASSWORD_12=G0dz!ll4@2020
-
-DB_CONNECTION_13=mysql
-DB_HOST_13=172.16.4.102
-DB_PORT_13=3306
-DB_DATABASE_13=arrahn_jli
-DB_USERNAME_13=zone2
-DB_PASSWORD_13=G0dz!ll4@2020
-
-DB_CONNECTION_14=mysql
-DB_HOST_14=172.16.4.102
-DB_PORT_14=3306
-DB_DATABASE_14=arrahn_rp
-DB_USERNAME_14=zone2
-DB_PASSWORD_14=G0dz!ll4@2020
-
-DB_CONNECTION_15=mysql
-DB_HOST_15=172.16.4.102
-DB_PORT_15=3306
-DB_DATABASE_15=arrahn_ktn
-DB_USERNAME_15=zone2
-DB_PASSWORD_15=G0dz!ll4@2020
-
-DB_CONNECTION_16=mysql
-DB_HOST_16=172.16.4.102
-DB_PORT_16=3306
-DB_DATABASE_16=arrahn_pg
-DB_USERNAME_16=zone2
-DB_PASSWORD_16=G0dz!ll4@2020
-
-DB_CONNECTION_17=mysql
-DB_HOST_17=172.16.4.102
-DB_PORT_17=3306
-DB_DATABASE_17=arrahn_skudai
-DB_USERNAME_17=zone2
-DB_PASSWORD_17=G0dz!ll4@2020
-
-DB_CONNECTION_18=mysql
-DB_HOST_18=172.16.4.102
-DB_PORT_18=3306
-DB_DATABASE_18=arrahn_pttn
-DB_USERNAME_18=zone2
-DB_PASSWORD_18=G0dz!ll4@2020
-
-DB_CONNECTION_19=mysql
-DB_HOST_19=172.16.4.102
-DB_PORT_19=3306
-DB_DATABASE_19=arrahn_btg
-DB_USERNAME_19=zone2
-DB_PASSWORD_19=G0dz!ll4@2020
-
-DB_CONNECTION_20=mysql
-DB_HOST_20=172.16.4.102
-DB_PORT_20=3306
-DB_DATABASE_20=arrahn_raub
-DB_USERNAME_20=zone2
-DB_PASSWORD_20=G0dz!ll4@2020
-
-DB_CONNECTION_21=mysql
-DB_HOST_21=172.16.4.102
-DB_PORT_21=3306
-DB_DATABASE_21=arrahn_kgr
-DB_USERNAME_21=zone2
-DB_PASSWORD_21=G0dz!ll4@2020
-
-DB_CONNECTION_22=mysql
-DB_HOST_22=172.16.4.102
-DB_PORT_22=3306
-DB_DATABASE_22=arrahn_sdk
-DB_USERNAME_22=zone2
-DB_PASSWORD_22=G0dz!ll4@2020
-
-DB_CONNECTION_23=mysql
-DB_HOST_23=172.16.4.102
-DB_PORT_23=3306
-DB_DATABASE_23=arrahn_sp
-DB_USERNAME_23=zone2
-DB_PASSWORD_23=G0dz!ll4@2020
-
-DB_CONNECTION_24=mysql
-DB_HOST_24=172.16.4.102
-DB_PORT_24=3306
-DB_DATABASE_24=arrahn_twu
-DB_USERNAME_24=zone2
-DB_PASSWORD_24=G0dz!ll4@2020
-
-DB_CONNECTION_25=mysql
-DB_HOST_25=172.16.4.102
-DB_PORT_25=3306
-DB_DATABASE_25=arrahn_api2
-DB_USERNAME_25=zone2
-DB_PASSWORD_25=G0dz!ll4@2020
-
-DB_CONNECTION_26=mysql
-DB_HOST_26=172.16.4.102
-DB_PORT_26=3306
-DB_DATABASE_26=arrahn_kjg
-DB_USERNAME_26=zone2
-DB_PASSWORD_26=G0dz!ll4@2020
-
-DB_CONNECTION_27=mysql
-DB_HOST_27=172.16.4.102
-DB_PORT_27=3306
-DB_DATABASE_27=arrahn_rl
-DB_USERNAME_27=zone2
-DB_PASSWORD_27=G0dz!ll4@2020
-
-DB_CONNECTION_28=mysql
-DB_HOST_28=172.16.4.102
-DB_PORT_28=3306
-DB_DATABASE_28=arrahn_bfort
-DB_USERNAME_28=zone2
-DB_PASSWORD_28=G0dz!ll4@2020
-
-DB_CONNECTION_29=mysql
-DB_HOST_29=172.16.4.102
-DB_PORT_29=3306
-DB_DATABASE_29=arrahn_kbelud
-DB_USERNAME_29=zone2
-DB_PASSWORD_29=G0dz!ll4@2020
-
-DB_CONNECTION_30=mysql
-DB_HOST_30=172.16.4.102
-DB_PORT_30=3306
-DB_DATABASE_30=arrahn_tuaran
-DB_USERNAME_30=zone2
-DB_PASSWORD_30=G0dz!ll4@2020
-
-DB_CONNECTION_31=mysql
-DB_HOST_31=172.16.4.102
-DB_PORT_31=3306
-DB_DATABASE_31=arrahn_kngau
-DB_USERNAME_31=zone2
-DB_PASSWORD_31=G0dz!ll4@2020
-
-DB_CONNECTION_32=mysql
-DB_HOST_32=172.16.4.102
-DB_PORT_32=3306
-DB_DATABASE_32=arrahn_tm
-DB_USERNAME_32=zone2
-DB_PASSWORD_32=G0dz!ll4@2020
-
-DB_CONNECTION_33=mysql
-DB_HOST_33=172.16.4.102
-DB_PORT_33=3306
-DB_DATABASE_33=arrahn_tmlh
-DB_USERNAME_33=zone2
-DB_PASSWORD_33=G0dz!ll4@2020
-
-CACHE_DRIVER=file
-QUEUE_CONNECTION=sync

.gitea/workflows/build.yml

@@ -0,0 +1,49 @@
+name: Build Docker Image
+
+on:
+  push:
+    branches:
+      - staging
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+jobs:
+  build-backend:
+    runs-on: docker
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Login to Docker registry
+        run: |
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
+            docker login git.koppkb.com \
+              -u "${{ secrets.REGISTRY_USERNAME }}" \
+              --password-stdin
+
+      - name: Build & push backend image
+        run: |
+          set -e
+
+          IMAGE="git.koppkb.com/kopkb/api_arrahn"
+          TAGS="-t ${IMAGE}:${{ gitea.sha }}"
+
+          if [ "${{ gitea.ref_type }}" = "tag" ] && echo "${{ gitea.ref_name }}" | grep -q '^v'; then
+            TAGS="${TAGS} -t ${IMAGE}:${{ gitea.ref_name }}"
+          fi
+
+          if [ "${{ gitea.ref_name }}" = "staging" ]; then
+            TAGS="${TAGS} -t ${IMAGE}:staging"
+          fi
+
+          echo "Building and pushing backend: ${TAGS}"
+          docker buildx build \
+            --target staging \
+            --platform linux/amd64 \
+            --cache-from type=registry,ref=${IMAGE}:buildcache,ignore-error=true \
+            --cache-to type=registry,ref=${IMAGE}:buildcache,mode=max \
+            -f docker/php/Dockerfile \
+            ${TAGS} \
+            --push .

.gitea/workflows/deploy-staging.yml

@@ -0,0 +1,141 @@
+name: Deploy to Staging
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      image_tag:
+        description: "Docker image tag to deploy (commit SHA, staging, or v*)"
+        required: true
+        default: "staging"
+        type: string
+
+env:
+  APP_IMAGE: git.koppkb.com/kopkb/api_arrahn
+  DEPLOY_DIR: /home/arrahn/Project/api_arrahn
+
+jobs:
+  deploy:
+    runs-on: host
+
+    steps:
+      - name: Resolve image tag
+        id: resolve
+        run: |
+          set -e
+          if [ "${{ gitea.event_name }}" = "workflow_dispatch" ]; then
+            IMAGE_TAG="${{ inputs.image_tag }}"
+          else
+            IMAGE_TAG="${{ gitea.ref_name }}"
+          fi
+          echo "IMAGE_TAG=${IMAGE_TAG}" >> "$GITHUB_OUTPUT"
+          echo "Deploying image tag: ${IMAGE_TAG}"
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ steps.resolve.outputs.IMAGE_TAG }}
+
+      - name: Login to Docker registry
+        run: |
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | \
+            docker login git.koppkb.com \
+              -u "${{ secrets.REGISTRY_USERNAME }}" \
+              --password-stdin
+
+      - name: Verify image exists in registry
+        run: |
+          set -e
+          IMAGE_TAG="${{ steps.resolve.outputs.IMAGE_TAG }}"
+          IMAGE="${APP_IMAGE}:${IMAGE_TAG}"
+
+          echo "Checking if image exists: ${IMAGE}"
+          # Tag pushes build in parallel — wait for the image to appear
+          for i in $(seq 1 30); do
+            if docker manifest inspect "${IMAGE}" > /dev/null 2>&1; then
+              echo "✓ ${IMAGE} found"
+              exit 0
+            fi
+            echo "Image not ready yet (attempt ${i}/30), waiting 20s..."
+            sleep 20
+          done
+
+          echo "ERROR: Image ${IMAGE} does not exist in registry after waiting!"
+          echo "Run the Build Docker Image workflow first."
+          exit 1
+
+      - name: Pull Docker image
+        run: |
+          set -e
+          IMAGE_TAG="${{ steps.resolve.outputs.IMAGE_TAG }}"
+          docker pull "${APP_IMAGE}:${IMAGE_TAG}"
+          echo "✓ Image pulled successfully"
+
+      - name: Sync compose file and deploy
+        run: |
+          set -e
+          IMAGE_TAG="${{ steps.resolve.outputs.IMAGE_TAG }}"
+
+          mkdir -p "${DEPLOY_DIR}/docker/nginx" "${DEPLOY_DIR}/docker/mysql"
+          cp docker-compose.staging.yml "${DEPLOY_DIR}/docker-compose.yml"
+          cp docker/nginx/default.conf "${DEPLOY_DIR}/docker/nginx/default.conf"
+          cp -R docker/mysql/init "${DEPLOY_DIR}/docker/mysql/"
+
+          if [ ! -f .env.staging ]; then
+            echo "ERROR: .env.staging is missing in the repository"
+            exit 1
+          fi
+          cp .env.staging "${DEPLOY_DIR}/.env.staging"
+          echo "✓ Synced .env.staging from repo"
+
+          cd "${DEPLOY_DIR}"
+
+          export APP_IMAGE
+          export IMAGE_TAG
+
+          docker compose --env-file .env.staging -f docker-compose.yml pull app
+          docker compose --env-file .env.staging -f docker-compose.yml up -d --no-build --force-recreate --remove-orphans app web
+
+          echo "✓ Deployed IMAGE_TAG=${IMAGE_TAG}"
+
+      - name: Verify deployment
+        run: |
+          set -e
+          cd "${DEPLOY_DIR}"
+
+          echo "Waiting for services to start..."
+          sleep 10
+
+          for SERVICE in app web mysql; do
+            STATUS=$(docker compose --env-file .env.staging -f docker-compose.yml ps --status running --format '{{.Name}}' "$SERVICE" 2>/dev/null || true)
+            if [ -z "$STATUS" ]; then
+              echo "ERROR: ${SERVICE} is not running"
+              docker compose --env-file .env.staging -f docker-compose.yml ps
+              docker compose --env-file .env.staging -f docker-compose.yml logs --tail=50 "$SERVICE" || true
+              exit 1
+            fi
+            echo "✓ ${SERVICE} is running (${STATUS})"
+          done
+
+          HTTP_PORT=$(grep -E '^HTTP_PORT=' .env.staging 2>/dev/null | cut -d= -f2- | tr -d '"' || true)
+          HTTP_PORT=${HTTP_PORT:-8090}
+
+          check_health() {
+            NAME=$1
+            URL=$2
+            for i in 1 2 3 4 5 6; do
+              if curl -sf "$URL" > /dev/null; then
+                echo "✓ ${NAME} health check passed (${URL})"
+                return 0
+              fi
+              echo "Waiting for ${NAME}... attempt ${i}/6"
+              sleep 5
+            done
+            echo "ERROR: ${NAME} health check failed (${URL})"
+            docker compose --env-file .env.staging -f docker-compose.yml logs --tail=50 app web || true
+            return 1
+          }
+
+          check_health "api" "http://127.0.0.1:${HTTP_PORT}/health"

.gitignore

@@ -5,6 +5,7 @@ Homestead.yaml
 .env
 .phpunit.result.cache
 ray.php
-docker-compose.yml
 /docker_src
 /.vscode
+**/.DS_Store
+db-dump

README.md

@@ -1 +1,30 @@
 You know what is this when you in this project
+
+If you does't know what is this you probably in wrong project
+
+```sql
+--- for all ip
+CREATE USER 'master_erahn'@'%' IDENTIFIED BY 'password';
+
+--- for specific ip
+CREATE USER 'kaunter_erahn'@'localhost' IDENTIFIED BY 'password';
+
+GRANT ALL PRIVILEGES ON kaunter_erahn.* TO 'kaunter_erahn'@'%';
+FLUSH PRIVILEGES;
+```
+
+Gadai=Pembiayaan
+Tebus=penyelesaian penuh/ansuran
+
+## Load db dump without using docker
+```bash
+docker exec -i api_arrahn_staging_mysql mysql -uroot -proot erahn_test < erahn_test.sql
+```
+
+## Disable the cawangan in arrahn_master_db using feature flag
+
+## Feature Flag
+1. Register the flag in api_arrahn/app/Feature.php
+2. Block the real work in the API
+3. Hide the UI in kaunter from the
+4. Enable a pilot from Admin → Ciri Cawangan (or SQL):

app/BatchPembiayaanOnline.php

@@ -0,0 +1,22 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class BatchPembiayaanOnline extends Model
+{
+    protected $table = 'batch_pembiayaan_online';
+
+    protected $fillable = [
+        'batch_no',
+        'kodcaw',
+        'tarikh',
+        'slot',
+        'bilangan',
+        'jumlah_keseluruhan',
+        'status',
+        'pc_submitted_by',
+        'submitted_at',
+    ];
+}

app/BsasOrder.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class BsasOrder extends Model
+{
+    protected $connection = 'mysql7';
+    protected $table = 'bsas_orders';
+
+    protected $fillable = [
+        'uuid',
+        'norujukan',
+        'kodcaw',
+        'serial_number',
+        'product_code',
+        'bid_value',
+        'otc_murabaha_value',
+        'otc_counter_party',
+        'status',
+        'status_code',
+        'status_message',
+        'e_cert_no',
+        'bid_ecert_response',
+        'otc_ecert_response',
+        'stb_ecert_response',
+        'request_payload',
+        'order_response',
+        'result_response',
+        'created_by',
+    ];
+
+    protected $casts = [
+        'bid_value' => 'decimal:2',
+        'otc_murabaha_value' => 'decimal:2',
+        'request_payload' => 'array',
+        'order_response' => 'array',
+        'result_response' => 'array',
+        'bid_ecert_response' => 'array',
+        'otc_ecert_response' => 'array',
+        'stb_ecert_response' => 'array',
+    ];
+}

app/Cawangan.php

@@ -11,6 +11,17 @@ class Cawangan extends Model
 
     public $timestamps = false;
 
+    /**
+     * Display name from master table (`details_caw`).
+     * Keep this as the single mapping so callers do not guess nama/namacaw.
+     */
+    public function getNamaCawanganAttribute()
+    {
+        $nama = trim((string) ($this->attributes['details_caw'] ?? ''));
+
+        return $nama !== '' ? $nama : (string) ($this->attributes['kodcaw'] ?? '');
+    }
+
     /**
      * The attributes that are mass assignable.
      *

app/CawanganFeature.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class CawanganFeature extends Model
+{
+    protected $table = 'cawangan_feature';
+    protected $connection = 'mysql7';
+
+    protected $fillable = [
+        'kodcaw',
+        'feature',
+        'enabled',
+    ];
+
+    protected $casts = [
+        'enabled' => 'integer',
+    ];
+}

app/Console/Commands/WhatsappTestSend.php

@@ -0,0 +1,56 @@
+<?php
+
+namespace App\Console\Commands;
+
+use App\Services\Whatsapp\WhatsappCloudClient;
+use Illuminate\Console\Command;
+
+class WhatsappTestSend extends Command
+{
+    protected $signature = 'whatsapp:test {--to= : Recipient MSISDN, default ADMIN_PHONE_NUMBER}';
+
+    protected $description = 'Send the configured WhatsApp Cloud template to a test number';
+
+    public function handle()
+    {
+        $client = new WhatsappCloudClient();
+
+        if (!$client->isConfigured()) {
+            $this->error('Set WHATSAPP_TOKEN and WHATSAPP_PHONE_NUMBER_ID in .env first.');
+            return 1;
+        }
+
+        $to = $client->normalizeMsisdn($this->option('to') ?: env('ADMIN_PHONE_NUMBER'));
+        if (!$to) {
+            $this->error('Pass --to=60193450165 or set ADMIN_PHONE_NUMBER.');
+            return 1;
+        }
+
+        $template = config('whatsapp.template', 'hello_world');
+        $lang = config('whatsapp.template_lang', 'en_US');
+        $bodyParams = [];
+
+        if (strtolower($template) !== 'hello_world') {
+            // pembiayaan_online_paid: SAG, amaun, bank, 4 digit akhir, tarikh, rujukan
+            $bodyParams = [
+                'TEST-SAG',
+                '100.00',
+                'Maybank',
+                '1234',
+                date('d/m/Y'),
+                'TEST-REF',
+            ];
+        }
+
+        $this->info("Sending {$template} ({$lang}) to {$to} …");
+        $response = $client->sendTemplate($to, $template, $lang, $bodyParams);
+
+        if ($response->successful()) {
+            $this->info('OK ' . $response->status() . ' ' . $response->body());
+            return 0;
+        }
+
+        $this->error('FAIL ' . $response->status() . ' ' . $response->body());
+        return 1;
+    }
+}

app/Console/Kernel.php

@@ -24,6 +24,7 @@ class Kernel extends ConsoleKernel
         Commands\ClearCachesAll::class,
         Commands\RestartSupervisor::class,
         Commands\InsertSempornaData::class,
+        Commands\WhatsappTestSend::class,
         //Commands\ImportCsv::class,
 
     ];

app/Customer.php

@@ -62,7 +62,8 @@ class Customer extends Model
         'telefon2',
         'nota_pekerjaan',
         'tagpelanggan',
-        'tag_anggota'   
+        'tag_anggota',
+        'gambar_mykad'
     ];
 
     /**

app/Feature.php

@@ -0,0 +1,172 @@
+<?php
+
+namespace App;
+
+class Feature
+{
+    const PEMBIAYAAN_ONLINE = 'pembiayaan_online';
+    const REBET_ANNUR = 'rebet_annur';
+
+    /**
+     * Known flag keys. New features: add a constant here, then INSERT rows for pilot kodcaw.
+     *
+     * @return string[]
+     */
+    public static function keys()
+    {
+        return [
+            self::PEMBIAYAAN_ONLINE,
+            self::REBET_ANNUR,
+        ];
+    }
+
+    /**
+     * @return array<string,int>
+     */
+    public static function defaults()
+    {
+        $map = [];
+        foreach (self::keys() as $key) {
+            $map[$key] = 0;
+        }
+
+        return $map;
+    }
+
+    /**
+     * Display labels for admin UI. New features: add a label here.
+     *
+     * @return array<string,string>
+     */
+    public static function labels()
+    {
+        return [
+            self::PEMBIAYAAN_ONLINE => 'Pembiayaan Online',
+            self::REBET_ANNUR => 'Rebet / diskaun Annur',
+        ];
+    }
+
+    /**
+     * Lelong portal base URL for this branch. rebet_annur branches (Annur/Tampoi)
+     * use API_ARRAHNBID_ANNUR; everyone else uses API_ARRAHNBID.
+     *
+     * Always returned with a trailing slash so callers can append 'portalApi'.
+     *
+     * @param string $kodcaw
+     * @return string
+     */
+    public static function arrahnbidUrl($kodcaw)
+    {
+        $url = config('app_parameter.api_arrahnbid');
+        if ($kodcaw && self::enabled($kodcaw, self::REBET_ANNUR)) {
+            $annur = config('app_parameter.api_arrahnbid_annur');
+            if ($annur) {
+                $url = $annur;
+            }
+        }
+
+        return rtrim((string) $url, '/') . '/';
+    }
+
+    /**
+     * Missing row is off (fail closed).
+     *
+     * @param string $kodcaw
+     * @param string $feature
+     * @return bool
+     */
+    public static function enabled($kodcaw, $feature)
+    {
+        return CawanganFeature::on('mysql7')
+            ->where('kodcaw', $kodcaw)
+            ->where('feature', $feature)
+            ->where('enabled', 1)
+            ->exists();
+    }
+
+    /**
+     * @param string $kodcaw
+     * @return array<string,int>
+     */
+    public static function mapFor($kodcaw)
+    {
+        $map = self::defaults();
+
+        $rows = CawanganFeature::on('mysql7')
+            ->where('kodcaw', $kodcaw)
+            ->get(['feature', 'enabled']);
+
+        foreach ($rows as $row) {
+            $map[$row->feature] = ((int) $row->enabled) === 1 ? 1 : 0;
+        }
+
+        return $map;
+    }
+
+    /**
+     * @param string[] $kodcaws
+     * @return array<string,array<string,int>>
+     */
+    public static function mapForMany(array $kodcaws)
+    {
+        $defaults = self::defaults();
+        $result = [];
+        foreach ($kodcaws as $kodcaw) {
+            $result[$kodcaw] = $defaults;
+        }
+
+        if (count($kodcaws) === 0) {
+            return $result;
+        }
+
+        $rows = CawanganFeature::on('mysql7')
+            ->whereIn('kodcaw', $kodcaws)
+            ->get(['kodcaw', 'feature', 'enabled']);
+
+        foreach ($rows as $row) {
+            $result[$row->kodcaw][$row->feature] = ((int) $row->enabled) === 1 ? 1 : 0;
+        }
+
+        return $result;
+    }
+
+    /**
+     * @param string $kodcaw
+     * @param string $feature
+     * @param bool|int $enabled
+     * @return bool
+     */
+    public static function setEnabled($kodcaw, $feature, $enabled)
+    {
+        if (!in_array($feature, self::keys(), true)) {
+            return false;
+        }
+
+        CawanganFeature::on('mysql7')->updateOrCreate(
+            [
+                'kodcaw' => $kodcaw,
+                'feature' => $feature,
+            ],
+            [
+                'enabled' => $enabled ? 1 : 0,
+            ]
+        );
+
+        return true;
+    }
+
+    /**
+     * @param string|null $message
+     * @return array{ok:bool,status:int,payload:array}
+     */
+    public static function denied($message = null)
+    {
+        return [
+            'ok' => false,
+            'status' => 403,
+            'payload' => [
+                'message' => $message ?: 'Ciri ini tidak diaktifkan untuk cawangan ini',
+            ],
+        ];
+    }
+}

app/Gadai.php

@@ -9,6 +9,10 @@ class Gadai extends Model
     protected $table = 'gadai';
     public $timestamps = false;
 
+    protected $attributes = [
+        'cara_terima' => 'TUNAI',
+    ];
+
     /**
      * The attributes that are mass assignable.
      *
@@ -25,6 +29,7 @@ class Gadai extends Model
         'nilaimarhun',
         'berat',
         'pinjaman',
+        'cara_terima',
         'telahbayar',
         'upahtelahbyr',
         'cajtelahbyr',
@@ -73,7 +78,9 @@ class Gadai extends Model
         'tagkomuditi',
         'tempohbayar',
         'lelong_tawarruq',
-        'tag_tebus'
+        'tag_tebus',
+        'kadarrebet',
+        'diskaun'
     ];
 
     /**

app/Http/Controllers/AdminPageController.php

@@ -30,6 +30,7 @@ use App\Status;
 use App\LookupStatus;
 use App\ARFiles;
 use App\WTDDraft;
+use App\WTDSimulasi;
 use App\SerahBaki;
 use App\WTD;
 use App\StokAudit1;
@@ -62,7 +63,6 @@ use Illuminate\Pagination\LengthAwarePaginator;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Log;
 use App\Jobs\AccountCheckJob;
-use App\Penyelarasan;
 use Illuminate\Support\Str;
 use Illuminate\Support\Facades\Cache;
 
@@ -2365,7 +2365,6 @@ class AdminPageController extends Controller
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$request->kodcaw)->first();
 
         //$latestbatch = SerahBaki::on($cawangan['mysql'])->where('norujukan','baru')->get()->toArray();
-        
         //new added
         $serahBaki = SerahBaki::on($cawangan['mysql'])
     ->where('norujukan', 'baru')
@@ -2374,28 +2373,28 @@ class AdminPageController extends Controller
         $allBatchNo = $serahBaki->pluck('batchno')->unique()->toArray();
 
         $wtddraftData = WTDDraft::on('mysql7')
-    ->selectRaw("
-        batchno_serah,
-        YEAR(t_jual) as tahun,
-        GROUP_CONCAT(
-            DISTINCT MONTH(t_jual)
-            ORDER BY MONTH(t_jual)
-            SEPARATOR ','
-        ) as bulan
-    ")
-    ->where('kodcaw', $request->kodcaw)
-    ->whereIn('batchno_serah', $allBatchNo)
-    ->groupBy('batchno_serah', DB::raw('YEAR(t_jual)'))
-    ->get()
-    ->groupBy('batchno_serah')
-    ->map(function ($rows) {
-        return $rows->map(function ($row) {
-            return [
-                'tahun' => $row->tahun,
-                'bulan' => $row->bulan
-            ];
-        })->values();
-    });
+                ->selectRaw("
+                        batchno_serah,
+                        YEAR(t_jual) as tahun,
+                        GROUP_CONCAT(
+                        DISTINCT MONTH(t_jual)
+                        ORDER BY MONTH(t_jual)
+                        SEPARATOR ','
+                        ) as bulan
+                ")
+                ->where('kodcaw', $request->kodcaw)
+                ->whereIn('batchno_serah', $allBatchNo)
+                ->groupBy('batchno_serah', DB::raw('YEAR(t_jual)'))
+                ->get()
+                ->groupBy('batchno_serah')
+                ->map(function ($rows) {
+                        return $rows->map(function ($row) {
+                        return [
+                                'tahun' => $row->tahun,
+                                'bulan' => $row->bulan
+                        ];
+                        })->values();
+                });
 
         $finalData = $serahBaki->map(function ($item) use ($wtddraftData) {
                 $batchno = $item->batchno;
@@ -2427,29 +2426,27 @@ class AdminPageController extends Controller
 
         $finalDataArray = $finalData->toArray();
         //end new added
-
+        
         $batch_old = WTDDraft::on('mysql7')->select('kodcaw')->where('batchno_serah',0)->where('kodcaw',$request->kodcaw)
         ->groupBy('kodcaw')->get();
 
         $batch_old_noruj = WTDDraft::on('mysql7')->where('batchno_serah',0)->where('kodcaw',$request->kodcaw)->pluck('norujukan');
         $lelong_data = Lelong::on($cawangan['mysql'])->whereIn('norujukan',$batch_old_noruj)->get();
-
+       
         foreach($batch_old as $index=>$bo)
         {
                 //array_push($latestbatch,['recno' => 0,'norujukan' => 'lama','batchno' => 0,'baki' => $lelong_data->sum('baki'),'aktif' => 1]);
                 array_push($finalDataArray,['recno' => 0,'norujukan' => 'lama','batchno' => 0,'baki' => $lelong_data->sum('baki'),'aktif' => 1]);
+
         }
 
         //$data = $this->paginate($latestbatch,8);
         $data = $this->paginate($finalDataArray,8);
 
-        //dd($data);
-
         return response()->json($data,200);
 
     }
 
-
     public function rekodWTDByBatchNo($batchno,Request $request){
 
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$request->kodcaw)->first();
@@ -2727,7 +2724,7 @@ class AdminPageController extends Controller
                                 'prkod' => "01",
                                 'teller' => "DM",
                                 'bakipjm' => ($lel['bakipjm']) ? $lel['bakipjm'] : 0,
-                                'bakiupah' => ($lel['bakiupah']) ? $lel['bakiupah'] : 0,
+                                'bakiupah' => $lel['bakiupah'],
                                 'cajlain' => '0.00',
                                 'cajlelong' => $lel['cajlelong'],
                                 'kodgl' => '',
@@ -2749,7 +2746,7 @@ class AdminPageController extends Controller
                                 't_jual' =>  $lel['t_jual'],
                                 'hargajual' =>  $lel['hargajual'],
                                 'pinjaman' =>  $lel['pinjaman'],
-                                'bakiupah' =>  ($lel['bakiupah']) ? $lel['bakiupah'] : 0,
+                                'bakiupah' =>  $lel['bakiupah'],
                                 'cajlelong' =>  $lel['cajlelong'],
                                 'gst_cl' => $lel['gst_cl'],
                                 'baki' => $lel['baki'],
@@ -2779,222 +2776,6 @@ class AdminPageController extends Controller
 
     }
 
-    public function janaSimulasiWTD(Request $request)
-    {
-        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $request->kodcaw)->first();
-
-        //listing sag belum tuntut cwgn
-        $sag_cwgn = collect(
-        Lelong::on($cawangan['mysql'])
-        ->selectRaw('norujukan')
-        ->whereYear('t_jual', $request->tahun)
-        ->whereNull('trkhtuntut')
-        ->where('baki', '>', 0)
-        ->pluck('norujukan')  // lebih bersih
-        );
-        
-        //listing sag blocked
-        $sag_online = collect(
-        WTDDraft::on('mysql7')
-        ->selectRaw('norujukan')
-        ->where('kodcaw', '=', $request->kodcaw)
-        ->pluck('norujukan')
-        );
-        //dd($sag_online);
-        //filter sag yg tk wujud dlm wtd_draft
-        $filtersag = $sag_cwgn->diff($sag_online);
-
-        //query baru
-        $tarikh_belum_tuntut = Lelong::on($cawangan['mysql'])
-                ->selectRaw('
-                MONTH(t_jual) as bulan, 
-                SUM(pinjaman) as pembiayaan, 
-                ABS(SUM(baki)) as baki, 
-                COUNT(DISTINCT norujukan) as jumlah_norujukan, 
-                kodcaw
-                ')
-                ->whereIn('norujukan', $filtersag)
-                ->groupBy('bulan', 'kodcaw') 
-                ->orderBy('bulan')
-                ->get();
-
-        $tarikh_belum_tuntut = $tarikh_belum_tuntut->map(function ($item) {
-                $item->bulan = \Carbon\Carbon::create()->month($item->bulan)->format('F');
-                return $item;
-        });
-
-        return response()->json($tarikh_belum_tuntut);
-   }
-
-   public function RekodSimulasiWTD(Request $request)
-        {
-        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $request->kodcaw)->first();
-
-        $rekod_simulasi = Lelong::on($cawangan['mysql'])
-        ->join('gadai','lelong.norujukan','=','gadai.norujukan')
-        ->selectRaw('ABS(lelong.baki) as baki, lelong.t_lelong, lelong.pinjaman, lelong.norujukan, gadai.nokp')
-        ->whereMonth('lelong.t_jual', $request->month)
-        ->whereYear('lelong.t_jual', $request->year)
-        ->whereNull('lelong.trkhtuntut')
-        ->where('lelong.baki', '>', 0)
-        ->get();
-
-        return response()->json($rekod_simulasi);
-        }
-
-        public function prosesSimulasiWTD(Request $request)
-        {
-        $proses = $request->input;
-
-        // dd($proses, $cawangan);
-
-        $baki = 0;
-        $jumlahPembiayaan = 0;
-        $simulasi = WTDSimulasi::max('simulasi')+1;
-
-        foreach ($proses as $item) {
-                WTDSimulasi::create([
-                        'bulan' => $item['bulan'],
-                        'tahun' => $item['tahun'],
-                        'kodcaw' => $item['kodcaw'],
-                        'jumlah_sag' => $item['jumlah_sag'],
-                        'pembiayaan'=> $item['pembiayaan'],
-                        'baki'=> $item['baki'],
-                        'simulasi' => $simulasi,
-                ]);     
-                $baki += $item['baki'];
-                $jumlahPembiayaan = $item['pembiayaan'];
-        }      
-
-        return response()->json(['status' => 'success','simulasi' => $simulasi,'baki' => $baki,'pinjaman' => $jumlahPembiayaan]);
-        }
-
-        public function pengesahanSimulasiWTD(Request $request)
-        {
-        // Decode the JSON records from the request
-        $records = json_decode($request->records, true);
-
-        // Retrieve and clean 'kodcaw' from the request
-        $kodcaw = $request->kodcaw;
-        $kodcaw_clean = str_replace('"', '', $kodcaw);
-
-        // Get the database connection for the branch (cawangan)
-        $cawangan = Cawangan::where('kodcaw', $kodcaw_clean)->first();
-
-        // Check if 'Cawangan' exists
-        if (!$cawangan) {
-                return response()->json(['status' => 'error', 'message' => 'Invalid branch code (kodcaw).'], 404);
-        }
-
-        $cawangan_connection = $cawangan->mysql;
-
-        // Get the latest batch number and increment it
-        $latestBatch = SerahBaki::on($cawangan_connection)->max('batchno') + 1;
-
-        // Initialize total variables
-        $totalPembiayaan = 0;
-        $totalBaki = 0;
-
-
-        try {
-                // Iterate through the records and save them to the WTDDraft table
-                foreach ($records as $record) {
-                // Check if 'bulan' and 'tahun' exist in the record
-                if (!isset($record['bulan']) || !isset($record['tahun'])) {
-                        return response()->json(['status' => 'error', 'message' => 'Missing bulan or tahun in records.'], 400);
-                }
-                $month = DateTime::createFromFormat('F', $record["bulan"])->format('n');
-
-
-                // Query norujukan records from the database
-                $query_norujukan = Lelong::on($cawangan_connection)
-                        ->join('gadai', 'lelong.norujukan', '=', 'gadai.norujukan')
-                        ->selectRaw('ABS(lelong.baki) as baki, lelong.t_lelong, lelong.pinjaman, lelong.norujukan, gadai.nokp, lelong.t_jual')
-                        ->whereMonth('lelong.t_jual', $month)
-                        ->whereYear('lelong.t_jual', $record["tahun"])
-                        ->whereNull('lelong.trkhtuntut')
-                        ->where('lelong.baki', '>', 0)
-                        ->get();
-
-                // Save each record to the WTDDraft table
-                foreach ($query_norujukan as $query) {
-                        $wtddraft = new WTDDraft();
-                        $wtddraft->nokp = $query['nokp'];
-                        $wtddraft->kodcaw = $kodcaw_clean;
-                        $wtddraft->norujukan = $query['norujukan'];
-                        $wtddraft->t_jual = $query['t_jual'];
-                        $wtddraft->t_gadai = $query['t_gadai'] ?? null; // Optional: ensure 't_gadai' exists
-                        $wtddraft->t_lelong = $query['t_lelong'];
-                        $wtddraft->batchno_serah = $latestBatch;
-                        $wtddraft->save();
-                }
-
-                // Accumulate totals
-                $totalPembiayaan += $record['pembiayaan'] ?? 0;
-                $totalBaki += $record['baki'] ?? 0;
-                }
-
-                // Create a new record in the SerahBaki table
-                SerahBaki::on($cawangan_connection)->create([
-                'norujukan' => 'baru',
-                'batchno' => $latestBatch,
-                'hargajual' => 0.00,
-                'pinjaman' => $totalPembiayaan,
-                'upah' => 0.00,
-                'cajlel' => 0.00,
-                'gst_cl' => 0.00,
-                'gst_hj' => 0.00,
-                'baki' => $totalBaki,
-                'tarikh' => Carbon::now()->toDateString(),
-                't_jual' => Carbon::now()->toDateString(),
-                'nopelanggan' => '',
-                'aktif' => 0,
-                ]);
-
-                // Return a success response with the new batch number
-                return response()->json(['status' => 'success', 'batchno' => $latestBatch], 200);
-
-        } catch (\Throwable $e) {
-                // Log the error and return a failure response
-                Log::error($e->getMessage());
-                Log::error($e->getLine());
-                return response()->json(['status' => 'error', 'message' => $e->getMessage()], 500);
-        }
-        }
-
-
-
-        public function simulasiToDraft(Request $request)
-        {
-                $bulan = $request->bulan;
-
-                if (!$bulan || count($bulan) === 0) {
-                        return response()->json(['error' => 'Sila pilih sekurang-kurangnya satu bulan.'], 400);
-                    }
-
-                $simulasi = WTDSimulasi::whereIn('bulan', $bulan)->get();
-
-                if ($simulasi->isEmpty()) {
-                        return response()->json(['error' => 'Tiada data untuk bulan yang dipilih.'], 404);
-                    }
-
-                //     foreach ($simulasi as $data) {
-                //         WTDDraft::create([
-                //             'nokp' => $data->nokp ?? null,
-                //             'kodcaw' => $data->kodcaw ?? null,
-                //             'norujukan' => $data->norujukan ?? null,
-                //             't_jual' => $data->t_jual ?? null,
-                //             't_gadai' => $data->t_gadai ?? null,
-                //             't_lelong' => $data->t_lelong ?? null,
-                //             'batchno_serah' => $data->simulasi, // Simpan sebagai rujukan
-                //         ]);
-                //     }
-                    
-                    dd($bulan, $simulasi);
-
-                    return response()->json(['message' => 'Data berjaya dipindahkan ke WTD Draft!']);
-
-        }
     public function PenjanaanPC(Request $request){
 
         $timeloni = Carbon::now();
@@ -3445,8 +3226,6 @@ class AdminPageController extends Controller
     
         return response()->json($customers);
     }
-    
-    
 
     public function AkruKeuntunganSebenar(Request $request){
 	
@@ -4045,13 +3824,13 @@ class AdminPageController extends Controller
 
                 $get_imbangduga = imbangdugabackup::on($cawangan['mysql'])->where('tarikh', $lastDayOfYear)->first();
                 $get_imbangduga = optional($get_imbangduga)->toArray() ?? [];
-                if(empty($get_imbangduga)){
-                        $requestData = new Request([
-                                'tarikh' => $request->tarikh,
-                                'kodcaw' => $kodcaw,
-                        ]);
-                        $exception_case = $this->AkruKeuntunganSebenar($requestData)->getData();
-                }
+                // if(empty($get_imbangduga)){
+                //         $requestData = new Request([
+                //                 'tarikh' => $request->tarikh,
+                //                 'kodcaw' => $kodcaw,
+                //         ]);
+                //         $exception_case = $this->AkruKeuntunganSebenar($requestData);
+                // }
 
                 $backdate_keun_sebenar += isset($get_imbangduga['keun_sebenar']) ? $get_imbangduga['keun_sebenar'] : 0;
                 $backdate_keun_sebenar += (float) ($exception_case ?? 0);
@@ -4070,14 +3849,7 @@ class AdminPageController extends Controller
         $total = ($utgrugilama + $lelong + $upahsimpantebus + $upahsimpanlelong + $upahsimpanansur + $gstcajlelong + $keuntungansebenar + $upahsimpankeuntungansebelumtawarruq + $available_akru + $total_keuntungan_sebenar + $akru_ujrah + $akru_1percent) + $parameter;
 
         if($kodcaw == '011229')
-                $total -= 45390.37;
-
-        if($kodcaw == 'KB2')
-                $total -= 64.8;
-
-        $total += Penyelarasan::on('mysql7')
-                ->where('kodcaw', $kodcaw)
-                ->sum(DB::raw('rugilelong + bakilelong + `lain-lain`'));
+            $total -= 45390.37;
 
         return response()->json($total,200);
     }
@@ -4250,4 +4022,222 @@ class AdminPageController extends Controller
                 'result' => $status === 'completed' ? $result : null,
         ]);
     }
+
+    //function wtd baru
+    public function janaSimulasiWTD(Request $request)
+    {
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $request->kodcaw)->first();
+
+        //listing sag belum tuntut cwgn
+        $sag_cwgn = collect(
+        Lelong::on($cawangan['mysql'])
+        ->selectRaw('norujukan')
+        ->whereYear('t_jual', $request->tahun)
+        ->whereNull('trkhtuntut')
+        ->where('baki', '>', 0)
+        ->pluck('norujukan')  // lebih bersih
+        );
+        
+        //listing sag blocked
+        $sag_online = collect(
+        WTDDraft::on('mysql7')
+        ->selectRaw('norujukan')
+        ->where('kodcaw', '=', $request->kodcaw)
+        ->pluck('norujukan')
+        );
+        //dd($sag_online);
+        //filter sag yg tk wujud dlm wtd_draft
+        $filtersag = $sag_cwgn->diff($sag_online);
+
+        //query baru
+        $tarikh_belum_tuntut = Lelong::on($cawangan['mysql'])
+                ->selectRaw('
+                MONTH(t_jual) as bulan, 
+                SUM(pinjaman) as pembiayaan, 
+                ABS(SUM(baki)) as baki, 
+                COUNT(DISTINCT norujukan) as jumlah_norujukan, 
+                kodcaw
+                ')
+                ->whereIn('norujukan', $filtersag)
+                ->groupBy('bulan', 'kodcaw') 
+                ->orderBy('bulan')
+                ->get();
+
+        $tarikh_belum_tuntut = $tarikh_belum_tuntut->map(function ($item) {
+                $item->bulan = \Carbon\Carbon::create()->month($item->bulan)->format('F');
+                return $item;
+        });
+
+        return response()->json($tarikh_belum_tuntut);
+   }
+
+   public function RekodSimulasiWTD(Request $request)
+        {
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $request->kodcaw)->first();
+
+        $rekod_simulasi = Lelong::on($cawangan['mysql'])
+        ->join('gadai','lelong.norujukan','=','gadai.norujukan')
+        ->selectRaw('ABS(lelong.baki) as baki, lelong.t_lelong, lelong.pinjaman, lelong.norujukan, gadai.nokp')
+        ->whereMonth('lelong.t_jual', $request->month)
+        ->whereYear('lelong.t_jual', $request->year)
+        ->whereNull('lelong.trkhtuntut')
+        ->where('lelong.baki', '>', 0)
+        ->get();
+
+        return response()->json($rekod_simulasi);
+        }
+
+        public function prosesSimulasiWTD(Request $request)
+        {
+        $proses = $request->input;
+
+        // dd($proses, $cawangan);
+
+        $baki = 0;
+        $jumlahPembiayaan = 0;
+        $simulasi = WTDSimulasi::max('simulasi')+1;
+
+        foreach ($proses as $item) {
+                WTDSimulasi::create([
+                        'bulan' => $item['bulan'],
+                        'tahun' => $item['tahun'],
+                        'kodcaw' => $item['kodcaw'],
+                        'jumlah_sag' => $item['jumlah_sag'],
+                        'pembiayaan'=> $item['pembiayaan'],
+                        'baki'=> $item['baki'],
+                        'simulasi' => $simulasi,
+                ]);     
+                $baki += $item['baki'];
+                $jumlahPembiayaan = $item['pembiayaan'];
+        }      
+
+        return response()->json(['status' => 'success','simulasi' => $simulasi,'baki' => $baki,'pinjaman' => $jumlahPembiayaan]);
+        }
+
+        public function pengesahanSimulasiWTD(Request $request)
+        {
+        // Decode the JSON records from the request
+        $records = json_decode($request->records, true);
+
+        // Retrieve and clean 'kodcaw' from the request
+        $kodcaw = $request->kodcaw;
+        $kodcaw_clean = str_replace('"', '', $kodcaw);
+
+        // Get the database connection for the branch (cawangan)
+        $cawangan = Cawangan::where('kodcaw', $kodcaw_clean)->first();
+
+        // Check if 'Cawangan' exists
+        if (!$cawangan) {
+                return response()->json(['status' => 'error', 'message' => 'Invalid branch code (kodcaw).'], 404);
+        }
+
+        $cawangan_connection = $cawangan->mysql;
+
+        // Get the latest batch number and increment it
+        $latestBatch = SerahBaki::on($cawangan_connection)->max('batchno') + 1;
+
+        // Initialize total variables
+        $totalPembiayaan = 0;
+        $totalBaki = 0;
+
+
+        try {
+                // Iterate through the records and save them to the WTDDraft table
+                foreach ($records as $record) {
+                // Check if 'bulan' and 'tahun' exist in the record
+                if (!isset($record['bulan']) || !isset($record['tahun'])) {
+                        return response()->json(['status' => 'error', 'message' => 'Missing bulan or tahun in records.'], 400);
+                }
+                $month = DateTime::createFromFormat('F', $record["bulan"])->format('n');
+
+
+                // Query norujukan records from the database
+                $query_norujukan = Lelong::on($cawangan_connection)
+                        ->join('gadai', 'lelong.norujukan', '=', 'gadai.norujukan')
+                        ->selectRaw('ABS(lelong.baki) as baki, lelong.t_lelong, lelong.pinjaman, lelong.norujukan, gadai.nokp, lelong.t_jual')
+                        ->whereMonth('lelong.t_jual', $month)
+                        ->whereYear('lelong.t_jual', $record["tahun"])
+                        ->whereNull('lelong.trkhtuntut')
+                        ->where('lelong.baki', '>', 0)
+                        ->get();
+
+                // Save each record to the WTDDraft table
+                foreach ($query_norujukan as $query) {
+                        $wtddraft = new WTDDraft();
+                        $wtddraft->nokp = $query['nokp'];
+                        $wtddraft->kodcaw = $kodcaw_clean;
+                        $wtddraft->norujukan = $query['norujukan'];
+                        $wtddraft->t_jual = $query['t_jual'];
+                        $wtddraft->t_gadai = $query['t_gadai'] ?? null; // Optional: ensure 't_gadai' exists
+                        $wtddraft->t_lelong = $query['t_lelong'];
+                        $wtddraft->batchno_serah = $latestBatch;
+                        $wtddraft->save();
+                }
+
+                // Accumulate totals
+                $totalPembiayaan += $record['pembiayaan'] ?? 0;
+                $totalBaki += $record['baki'] ?? 0;
+                }
+
+                // Create a new record in the SerahBaki table
+                SerahBaki::on($cawangan_connection)->create([
+                'norujukan' => 'baru',
+                'batchno' => $latestBatch,
+                'hargajual' => 0.00,
+                'pinjaman' => $totalPembiayaan,
+                'upah' => 0.00,
+                'cajlel' => 0.00,
+                'gst_cl' => 0.00,
+                'gst_hj' => 0.00,
+                'baki' => $totalBaki,
+                'tarikh' => Carbon::now()->toDateString(),
+                't_jual' => Carbon::now()->toDateString(),
+                'nopelanggan' => '',
+                'aktif' => 0,
+                ]);
+
+                // Return a success response with the new batch number
+                return response()->json(['status' => 'success', 'batchno' => $latestBatch], 200);
+
+        } catch (\Throwable $e) {
+                // Log the error and return a failure response
+                Log::error($e->getMessage());
+                Log::error($e->getLine());
+                return response()->json(['status' => 'error', 'message' => $e->getMessage()], 500);
+        }
+        }
+
+
+
+        public function simulasiToDraft(Request $request)
+        {
+                $bulan = $request->bulan;
+
+                if (!$bulan || count($bulan) === 0) {
+                        return response()->json(['error' => 'Sila pilih sekurang-kurangnya satu bulan.'], 400);
+                    }
+
+                $simulasi = WTDSimulasi::whereIn('bulan', $bulan)->get();
+
+                if ($simulasi->isEmpty()) {
+                        return response()->json(['error' => 'Tiada data untuk bulan yang dipilih.'], 404);
+                    }
+
+                //     foreach ($simulasi as $data) {
+                //         WTDDraft::create([
+                //             'nokp' => $data->nokp ?? null,
+                //             'kodcaw' => $data->kodcaw ?? null,
+                //             'norujukan' => $data->norujukan ?? null,
+                //             't_jual' => $data->t_jual ?? null,
+                //             't_gadai' => $data->t_gadai ?? null,
+                //             't_lelong' => $data->t_lelong ?? null,
+                //             'batchno_serah' => $data->simulasi, // Simpan sebagai rujukan
+                //         ]);
+                //     }
+                    
+                    //dd($bulan, $simulasi);
+
+                    return response()->json(['message' => 'Data berjaya dipindahkan ke WTD Draft!']);
+
+        }
 }

app/Http/Controllers/BarangkesController.php

@@ -59,7 +59,7 @@ class BarangkesController extends Controller
             $itemArray['gadaian_sudah_tebus'] = !is_null($item['tebus']);
 
             // Add nokp customer from gadai relationship
-            $itemArray['nokp'] = $item['gadai']['nokp'];
+            $itemArray['nokp'] = $item['gadai']['nokp'] ?? null;
 
             // Remove the tebus relationship data to keep response clean
             unset($itemArray['tebus']);

app/Http/Controllers/CawanganController.php

@@ -3,6 +3,7 @@
 namespace App\Http\Controllers;
 
 use App\Cawangan;
+use App\Feature;
 use Illuminate\Http\Request;
 
 class CawanganController extends Controller
@@ -18,7 +19,16 @@ class CawanganController extends Controller
         $cawangan = Cawangan::on('mysql7')
                     ->where('kodcaw','=',$code_cawangan)
                     ->first();
-        return response()->json($cawangan);
+
+        if (!$cawangan) {
+            return response()->json($cawangan);
+        }
+
+        $data = $cawangan->toArray();
+        $data['features'] = Feature::mapFor($code_cawangan);
+        $data['api_arrahnbid'] = Feature::arrahnbidUrl($code_cawangan);
+
+        return response()->json($data);
     }
 
     public function create(Request $request)

app/Http/Controllers/CustomerController.php

@@ -5,6 +5,7 @@ namespace App\Http\Controllers;
 use App\Audit;
 use App\Marhun;
 use App\BankMaster;
+use App\ARFiles;
 use App\Customer;
 use App\Gadai;
 use App\Lelong;
@@ -64,7 +65,7 @@ class CustomerController extends Controller
         ->orWhere('kpbaru','=',$ic)
         ->first();
 
-        return response()->json($customer);
+        return response()->json($this->withMykadPhoto($customer));
     }
 
     public function showOneCustomerByICAdmin(Request $request){
@@ -74,7 +75,7 @@ class CustomerController extends Controller
         ->orWhere('kpbaru','=',$request->ic)
         ->first();
 
-        return response()->json($customer);
+        return response()->json($this->withMykadPhoto($customer));
     }
 
     public function showOneCustomerByICMobile($ic){
@@ -368,6 +369,8 @@ class CustomerController extends Controller
             'tujuangadai'=>$request->tujuangadai
         ]);
 
+        $this->attachMykadPhoto($customer, $request);
+
         $audit = new Audit();
         $audit->users = $request->teller;
         $audit->actions = "Daftar Pelanggan Baru";
@@ -377,7 +380,7 @@ class CustomerController extends Controller
         $audit->updated_at = $current;
         $audit->save();
 
-        return response()->json($customer, 201);
+        return response()->json($this->withMykadPhoto($customer), 201);
     }
 
     public function customerUpdate($nokp,Request $request){
@@ -396,37 +399,38 @@ class CustomerController extends Controller
             // 'nota_arcc'=>$request->nota_arcc,
             'telefon' => $request->telefon1,
             'telefon2' => $request->telefon2,
+            'telefon2' => $request->telefon2,
         ));
 
         return response()->json($customer_update, 200);
     }
 
     public function assignAnggota($noic, Request $request)
-{
-    // Semak sama ada pelanggan wujud
-    $customer = Customer::on('mysql7')
-        ->where('kpbaru', $noic)
-        ->orWhere('kplama', $noic)
-        ->first();
+    {
+        // Semak sama ada pelanggan wujud
+        $customer = Customer::on('mysql7')
+            ->where('kpbaru', $noic)
+            ->orWhere('kplama', $noic)
+            ->first();
+
+        if (!$customer) {
+            return response()->json([
+                'success' => false,
+                'message' => 'Pelanggan tidak dijumpai.'
+            ], 404);
+        }
+
+        // Kemaskini tag_anggota
+        $customer->tag_anggota = 1;
+        $customer->save();
 
-    if (!$customer) {
         return response()->json([
-            'success' => false,
-            'message' => 'Pelanggan tidak dijumpai.'
-        ], 404);
+            'success' => true,
+            'message' => 'Tag anggota berjaya dikemaskini.',
+            'data' => $customer
+        ], 200);
     }
 
-    // Kemaskini tag_anggota
-    $customer->tag_anggota = 1;
-    $customer->save();
-
-    return response()->json([
-        'success' => true,
-        'message' => 'Tag anggota berjaya dikemaskini.',
-        'data' => $customer
-    ], 200);
-}
-
     public function customerUpdateKaunter($nokp,$kodcaw, Request $request){
         $current = Carbon::now();
 
@@ -1102,4 +1106,182 @@ public function AdminsearchCustomerBySAG(Request $request)
         return response()->json($results);
     }
 
+    public function updateTagPdpa(Request $request)
+    {
+        $tarikh_cetak_pdpa = Carbon::now()->toDateString();
+
+        $no_ic = $request->input('no_ic');
+
+        $customer = Customer::where('kplama', $no_ic)
+            ->orWhere('kpbaru', $no_ic)
+            ->first();
+
+        if (!$customer) {
+            return response()->json(['error' => 'Customer not found.'], 404);
+        }
+
+        $customer->tag_pdpa = $request->input('tag_pdpa');
+        $customer->tarikh_cetak_pdpa = $tarikh_cetak_pdpa;
+        $customer->save();
+
+        return response()->json(['message' => 'Customer PDPA updated successfully.'], 200);
+    }
+
+    /**
+     * Store MyKad photo for an existing customer only when gambar_mykad is empty.
+     */
+    public function storeMykadPhotoIfMissing($ic, Request $request)
+    {
+        $customer = Customer::on('mysql7')
+            ->where('kplama', '=', $ic)
+            ->orWhere('kpbaru', '=', $ic)
+            ->first();
+
+        if (!$customer) {
+            return response()->json(['error' => 'Customer not found.', 'stored' => false], 404);
+        }
+
+        if (!empty($customer->gambar_mykad)) {
+            return response()->json([
+                'message' => 'MyKad photo already stored.',
+                'gambar_mykad' => $customer->gambar_mykad,
+                'stored' => false,
+            ], 200);
+        }
+
+        $this->attachMykadPhoto($customer, $request);
+
+        return response()->json([
+            'message' => !empty($customer->gambar_mykad)
+                ? 'MyKad photo stored.'
+                : 'No photo provided or store failed.',
+            'gambar_mykad' => $customer->gambar_mykad,
+            'stored' => !empty($customer->gambar_mykad),
+        ], 200);
+    }
+
+    /**
+     * Save MyKad photo into arrahn_files and link it on customer.gambar_mykad.
+     */
+    protected function attachMykadPhoto($customer, Request $request)
+    {
+        if (!$customer) {
+            return;
+        }
+
+        $raw = $this->photoBase64FromRequest($request);
+        if ($raw === '') {
+            return;
+        }
+
+        try {
+            $fileId = $this->storeMykadPhoto($raw, $request->input('photo_mime', $request->json('photo_mime')), $customer);
+            if (!$fileId) {
+                return;
+            }
+
+            Customer::on('mysql7')
+                ->where('kpbaru', $customer->kpbaru)
+                ->where('kplama', $customer->kplama)
+                ->update(['gambar_mykad' => $fileId]);
+
+            $customer->gambar_mykad = $fileId;
+        } catch (\Throwable $e) {
+            Log::error('Failed to attach MyKad photo: ' . $e->getMessage());
+        }
+    }
+
+    protected function photoBase64FromRequest(Request $request)
+    {
+        $raw = $request->input('photo_base64');
+        if ($raw === null || $raw === '') {
+            $raw = $request->json('photo_base64');
+        }
+
+        return is_string($raw) ? $raw : '';
+    }
+
+    protected function storeMykadPhoto($raw, $mime, $customer)
+    {
+        $commaPos = strpos($raw, ',');
+        if ($commaPos !== false) {
+            $raw = substr($raw, $commaPos + 1);
+        }
+        $raw = preg_replace('/\s+/', '', $raw);
+
+        if ($raw === '') {
+            return null;
+        }
+
+        $decoded = base64_decode($raw, true);
+        if ($decoded === false) {
+            $decoded = base64_decode($raw);
+        }
+        if ($decoded === false || $decoded === '') {
+            Log::warning('MyKad photo skipped: invalid base64');
+            return null;
+        }
+
+        if (strlen($raw) > 400000) {
+            Log::warning('MyKad photo skipped: payload too large');
+            return null;
+        }
+
+        $mime = strtolower((string) ($mime ?: 'image/jpeg'));
+        if (!in_array($mime, ['image/jpeg', 'image/jpg', 'image/png'], true)) {
+            $mime = 'image/jpeg';
+        }
+
+        $nric = preg_replace('/[^0-9A-Za-z]/', '', (string) ($customer->kpbaru ?: ''));
+        $ext = $mime === 'image/png' ? 'png' : 'jpg';
+
+        $file = new ARFiles();
+        $file->data = $raw;
+        $file->filename = ($nric !== '' ? $nric : 'mykad') . '.' . $ext;
+        $file->type = $mime;
+        $file->tarikhmasa = Carbon::now()->toDateTimeString();
+        $file->save();
+
+        return $file->id;
+    }
+
+    protected function withMykadPhoto($customer)
+    {
+        if (!$customer) {
+            return $customer;
+        }
+
+        $payload = $customer->toArray();
+        $payload['photo_base64'] = null;
+        $payload['photo_mime'] = null;
+
+        if (empty($customer->gambar_mykad)) {
+            return $payload;
+        }
+
+        $file = ARFiles::on('mysql7')->where('id', $customer->gambar_mykad)->first();
+        if ($file && $file->data) {
+            $payload['photo_base64'] = $file->data;
+            $payload['photo_mime'] = $file->type ?: 'image/jpeg';
+        }
+
+        return $payload;
+    }
+
+//     public function createNotaArcc($kodcaw, Request $request)
+// {
+//     $current = Carbon::now();
+
+//     $customer = Customer::on('mysql7')->create([
+//         'kodcaw' => $kodcaw,
+//         'tarikhdaftar' => $current->toDateString(),
+//         'nota_arcc' => $request->nota_arcc,
+//         'teller' => $request->teller,
+//         'aktif' => 'A'
+//     ]);
+
+//     return response()->json($customer, 201);
+// }
+
+
 }

app/Http/Controllers/FeatureController.php

@@ -0,0 +1,59 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Cawangan;
+use App\Feature;
+use Illuminate\Http\Request;
+
+class FeatureController extends Controller
+{
+    public function index()
+    {
+        return response()->json([
+            'keys' => Feature::keys(),
+            'labels' => Feature::labels(),
+        ]);
+    }
+
+    public function cawangan()
+    {
+        $cawangan = Cawangan::on('mysql7')
+            ->orderBy('kodcaw')
+            ->get(['kodcaw', 'details_caw']);
+
+        $maps = Feature::mapForMany($cawangan->pluck('kodcaw')->all());
+
+        $data = $cawangan->map(function ($c) use ($maps) {
+            return [
+                'kodcaw' => $c->kodcaw,
+                'details_caw' => $c->nama_cawangan,
+                'features' => $maps[$c->kodcaw] ?? Feature::defaults(),
+            ];
+        });
+
+        return response()->json($data);
+    }
+
+    public function update($kodcaw, $feature, Request $request)
+    {
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', $kodcaw)->first();
+        if (!$cawangan) {
+            return response()->json(['message' => 'Cawangan tidak dijumpai'], 404);
+        }
+
+        if (!in_array($feature, Feature::keys(), true)) {
+            return response()->json(['message' => 'Ciri tidak sah'], 422);
+        }
+
+        $enabled = (int) $request->input('enabled') ? 1 : 0;
+        Feature::setEnabled($kodcaw, $feature, $enabled);
+
+        return response()->json([
+            'kodcaw' => $kodcaw,
+            'feature' => $feature,
+            'enabled' => $enabled,
+            'features' => Feature::mapFor($kodcaw),
+        ]);
+    }
+}

app/Http/Controllers/GadaiController.php

@@ -158,7 +158,6 @@ class GadaiController extends Controller
     }
 
     public function create($kodcaw,Request $request){
-
         $master = new MasterServices($kodcaw);
         $response = $master->createGadai($request);
 
@@ -228,11 +227,14 @@ class GadaiController extends Controller
     }
 
 
-    public function daftarGadaiMarhun($norujukan,Request $request){
-        // dd("ggwp");
-        $master = new MasterServices($request->kodcaw);
-        $response = $master->createMarhunGadai($request->norujukan,$request);
-
+    public function daftarGadaiMarhun($kodcaw, $norujukan, Request $request)
+    {
+        if (\App\ShorakaTransaction::where('norujukan', $norujukan)->exists()) {
+            abort(409, 'Kontrak telah dihantar ke Shoraka dan tidak boleh diubah.');
+        }
+        $request->merge(['kodcaw' => $kodcaw, 'norujukan' => $norujukan]);
+        $master = new MasterServices($kodcaw);
+        $response = $master->createMarhunGadai($norujukan, $request);
         return response()->json($response, 200);
     }
 
@@ -369,6 +371,9 @@ class GadaiController extends Controller
     }
 
     public function batalGadai($kodcaw, $norujukan,Request $request){
+        if (\App\ShorakaTransaction::where('norujukan', $norujukan)->exists()) {
+            abort(409, 'Transaksi Shoraka telah dihantar. Semakan operasi diperlukan sebelum pembatalan.');
+        }
 
         $current = Carbon::now();
         $current = new Carbon();
@@ -406,6 +411,11 @@ class GadaiController extends Controller
     }
 
     public function pembelianKomuditi($kodcaw,$norujukan){
+        if (\App\ShorakaTransaction::where('norujukan', $norujukan)->exists()
+            || !\App\KomuditiTransaksi::on('mysql7')->where('norujukan', $norujukan)->exists()) {
+            app(\App\Services\ShorakaGadaiService::class)->assertCompleted($kodcaw, $norujukan);
+        }
+
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
         $gadai = Gadai::on($cawangan['mysql'])
@@ -418,6 +428,10 @@ class GadaiController extends Controller
     }
 
     public function cetakSAG($kodcaw,$norujukan,Request $request){
+        if (\App\ShorakaTransaction::where('norujukan', $norujukan)->exists()) {
+            app(\App\Services\ShorakaGadaiService::class)->assertCompleted($kodcaw, $norujukan);
+        }
+
         $harini = Carbon::now();
 
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
@@ -442,6 +456,10 @@ class GadaiController extends Controller
     }
 
     public function serahMarhun($kodcaw,$norujukan){
+        if (\App\ShorakaTransaction::where('norujukan', $norujukan)->exists()) {
+            app(\App\Services\ShorakaGadaiService::class)->assertCompleted($kodcaw, $norujukan);
+        }
+
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
         $gadai = Gadai::on($cawangan['mysql'])
                 ->where('norujukan','=',$norujukan)
@@ -537,7 +555,7 @@ class GadaiController extends Controller
 
     public function getLaporanGadai($kodcaw,$tarikh){
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
-        $gadai_data = Gadai::on($cawangan['mysql'])->select('t_gadai','norujukan','nokp','semakbarcode','masa','berat','nilaimarhun','pinjaman','upah12','percentpinj','teller','nokp','ujrah','onepercent')
+        $gadai_data = Gadai::on($cawangan['mysql'])->select('cara_terima','t_gadai','norujukan','nokp','semakbarcode','masa','berat','nilaimarhun','pinjaman','upah12','percentpinj','teller','nokp','ujrah','onepercent','kadarrebet','diskaun')
         ->where('t_gadai','=',$tarikh)
         ->orderBy('teller')
         ->orderBy('sirig')
@@ -551,6 +569,7 @@ class GadaiController extends Controller
                 array_push($gadai,[
                     "t_gadai"=> $gadaiData['t_gadai'],
                     "norujukan"=> $gadaiData['norujukan'],
+                    "cara_terima"=> $gadaiData['cara_terima'],
                     "nama"=> $customer_info['nama'],
                     "nokp"=> $gadaiData['nokp'],
                     "semakbarcode"=> $gadaiData['semakbarcode'],
@@ -563,7 +582,9 @@ class GadaiController extends Controller
                     "alamat1"=> $customer_info['alamat1'],
                     "teller"=> $gadaiData['teller'],
                     "onepercent"=> $gadaiData['onepercent'],
-                    "ujrah"=> $gadaiData['ujrah']
+                    "ujrah"=> $gadaiData['ujrah'],
+                    "kadarrebet"=> $gadaiData['kadarrebet'],
+                    "diskaun"=> $gadaiData['diskaun']
                 ]);
             }
         }
@@ -626,7 +647,7 @@ class GadaiController extends Controller
                 "alamat1" => optional($customer)->alamat1,
                 "t_gadai" => $g->t_gadai,
                 "norujukan" => $g->norujukan,
-                "norujukan"=> $g->norujukan,
+                "cara_terima" => strtoupper((string) ($g->cara_terima ?: 'TUNAI')),
               
                 "nokp"=> $g->nokp,
                 "semakbarcode"=> $g->semakbarcode,
@@ -640,6 +661,8 @@ class GadaiController extends Controller
                 "teller"=> $g->teller,
                 "ujrah"=> $g->ujrah,
                 "onepercent"=> $g->onepercent,
+                "kadarrebet"=> $g->kadarrebet,
+                "diskaun"=> $g->diskaun,
                 "tagbaru"=> $g->tagbaru,
                 "kodkerja"=> optional($customer)->kodkerja,
                 "bangsa"=> optional($customer)->bangsa,

app/Http/Controllers/KelulusanController.php

@@ -8,6 +8,7 @@ use App\Cawangan;
 use App\Mohonid;
 use App\MohonAnggota;
 use App\Customer;
+use App\Services\StaffNotificationClient;
 
 use Carbon\Carbon;
 
@@ -444,6 +445,8 @@ public function create(REQUEST $request,$kodcaw,$norujukan,$roles)
         $audit->updated_at = $harini;
         $audit->save();
 
+        $this->notifyOperasiAssignAnggota($kodcaw, $cawangan, $kelulusan, $request);
+
         // ✅ Return JSON response ke frontend
         return response()->json([
             'success' => true,
@@ -466,6 +469,58 @@ public function create(REQUEST $request,$kodcaw,$norujukan,$roles)
     }
 }
 
+    /**
+     * Inbox for all operasi staff. Failures must not block the teller request.
+     *
+     * @param  string  $kodcaw
+     * @param  \App\Cawangan  $cawangan
+     * @param  \App\MohonAnggota  $kelulusan
+     * @param  \Illuminate\Http\Request  $request
+     * @return void
+     */
+    protected function notifyOperasiAssignAnggota($kodcaw, $cawangan, $kelulusan, Request $request)
+    {
+        try {
+            $nama = trim((string) ($request->nama ?? ''));
+            if ($nama === '' && !empty($kelulusan->nokp)) {
+                $customer = Customer::on('mysql7')
+                    ->where('kpbaru', $kelulusan->nokp)
+                    ->orWhere('kplama', $kelulusan->nokp)
+                    ->first();
+                if ($customer && !empty($customer->nama)) {
+                    $nama = trim((string) $customer->nama);
+                }
+            }
+
+            $namaCaw = $kodcaw;
+            if ($cawangan) {
+                $resolved = trim((string) $cawangan->nama_cawangan);
+                if ($resolved !== '') {
+                    $namaCaw = $resolved;
+                }
+            }
+
+            app(StaffNotificationClient::class)->notify([
+                'type' => 'anggota.pending_operasi',
+                'cawangan' => $kodcaw,
+                'audience' => ['role' => 'operasi'],
+                'data' => [
+                    'id' => $kelulusan->id,
+                    'nokp' => $kelulusan->nokp,
+                    'nama' => $nama,
+                    'teller' => $kelulusan->teller,
+                    'komen' => $kelulusan->komen,
+                    'cawangan_nama' => $namaCaw,
+                ],
+            ]);
+        } catch (\Throwable $e) {
+            Log::warning('Assign anggota operasi notification failed: '.$e->getMessage(), [
+                'kodcaw' => $kodcaw,
+                'nokp' => isset($kelulusan->nokp) ? $kelulusan->nokp : null,
+            ]);
+        }
+    }
+
    //KEPOHONAN EDIT DAN HAPUS
 
    public function kepohonancreate(REQUEST $request,$kodcaw,$norujukan)
@@ -600,26 +655,86 @@ public function create(REQUEST $request,$kodcaw,$norujukan,$roles)
       return response()->json($arraykelulusan,200);
    }
 
-   public function listoperasikelulusan()
+   public function listoperasikelulusan(Request $request)
    {
-      $harini = Carbon::now();
-      $harini = new Carbon;
+      $dateFrom = $request->query('date_from');
+      $dateTo = $request->query('date_to');
+      $search = trim((string) $request->query('search', ''));
+
+      // Default to last 30 days to avoid loading entire history
+      if (!$dateFrom && !$dateTo) {
+         $dateTo = Carbon::now()->toDateString();
+         $dateFrom = Carbon::now()->subDays(30)->toDateString();
+      }
+
+      $cawangan_all = Cawangan::on('mysql7')
+         ->select('mysql', 'details_caw', 'kodcaw')
+         ->get();
 
-      $cawangan_all = Cawangan::on('mysql7')->get();
       $arraykelulusan = [];
 
-      foreach($cawangan_all as $index=>$cawangan){
-         $kelulusan=Mohon::on($cawangan['mysql'])
-               ->where('peloperasi','=','operasi')
-               ->where('operasi','!=','')
-               ->get();
+      foreach ($cawangan_all as $cawangan) {
+         $query = Mohon::on($cawangan['mysql'])
+            ->select([
+               'tarikh',
+               'norujukan',
+               'komen',
+               'jumpinj',
+               'nilaimarhun',
+               'berat',
+               'margin',
+               'status',
+               'operasi',
+               'masalulus',
+            ])
+            ->where('peloperasi', '=', 'operasi')
+            ->where('operasi', '!=', '');
 
-         if(sizeof($kelulusan) != 0){
-             array_push($arraykelulusan,["kelulusanall" => $kelulusan,"cawangan" => $cawangan['details_caw'],"cawangankod" => $cawangan['kodcaw']]);
+         if ($dateFrom) {
+            $query->where('tarikh', '>=', $dateFrom);
+         }
+         if ($dateTo) {
+            $query->where('tarikh', '<=', $dateTo);
+         }
+         if ($search !== '') {
+            $query->where(function ($q) use ($search) {
+               $q->where('norujukan', 'like', "%{$search}%")
+                  ->orWhere('operasi', 'like', "%{$search}%")
+                  ->orWhere('status', 'like', "%{$search}%")
+                  ->orWhere('komen', 'like', "%{$search}%");
+            });
          }
-     }
 
-      return response()->json($arraykelulusan,200);
+         $kelulusan = $query->orderBy('tarikh', 'desc')->get();
+
+         foreach ($kelulusan as $kel) {
+            $komenParts = explode('|', (string) ($kel->komen ?? ''));
+            $komenParts = array_values(array_filter($komenParts, function ($part) {
+               return $part !== '';
+            }));
+
+            $arraykelulusan[] = [
+               'tarikh' => $kel->tarikh ?? '-',
+               'norujukan' => $kel->norujukan ?? '-',
+               'status' => $kel->status ?? '-',
+               'komen' => $komenParts[0] ?? ($kel->komen ?: '-'),
+               'pinjaman' => $kel->jumpinj ?? '-',
+               'nilaimarhun' => $komenParts[1] ?? ($kel->nilaimarhun ?? '-'),
+               'berat' => $komenParts[2] ?? ($kel->berat ?? '-'),
+               'margin' => $komenParts[3] ?? ($kel->margin ?? '-'),
+               'pelulus' => $kel->operasi ?? '-',
+               'masalulus' => $kel->masalulus ?? '-',
+               'cawangan' => $cawangan['details_caw'],
+               'cawangankod' => $cawangan['kodcaw'],
+            ];
+         }
+      }
+
+      usort($arraykelulusan, function ($a, $b) {
+         return strcmp((string) ($b['tarikh'] ?? ''), (string) ($a['tarikh'] ?? ''));
+      });
+
+      return response()->json($arraykelulusan, 200);
    }
 
    public function UpdateHapusAnsuranOperasi(Request $request){

app/Http/Controllers/KomuditiController.php

@@ -3,15 +3,18 @@
 namespace App\Http\Controllers;
 
 use App\Audit;
+use App\BsasOrder;
 use App\Komuditi;
 use App\KomuditiPurchase;
 use App\KomuditiTransaksi;
 use App\KomuditiProduk;
 use App\Cawangan;
+use App\Services\Bsas\BsasOrderService;
 use DB;
 
 use Illuminate\Http\Request;
 use Carbon\Carbon;
+use Illuminate\Support\Facades\Log;
 
 class KomuditiController extends Controller
 {
@@ -117,6 +120,9 @@ class KomuditiController extends Controller
     }
 
     public function updateKomuditi(Request $request){
+        if (\App\ShorakaTransaction::where('norujukan', $request->norujukan)->exists()) {
+            abort(409, 'Transaksi Shoraka memerlukan semakan operasi; stok lama tidak boleh diubah.');
+        }
         $current = Carbon::now();
         $current = new Carbon();
 
@@ -138,34 +144,20 @@ class KomuditiController extends Controller
         return response()->json($komuditi_transaksi);
     }
 
-    public function transaksiKomuditi(Request $request){
-        $current = Carbon::now();
-        $current = new Carbon();
-
-        $komuditi_current = KomuditiPurchase::on('mysql7')->where('date_purchase','=',$current->toDateString())->orderBy('created_at','desc')->first();
-
-        $unit_current = $komuditi_current['unit_komuditi'];
-
-        $update_unit = $unit_current - $request->unit_komuditi;
-
-        $update_komuditi = KomuditiPurchase::on('mysql7')->where('id','=',$komuditi_current['id'])->update([
-            'unit_komuditi' => $update_unit
-        ]);
-
-        $komuditi_transaksi = KomuditiTransaksi::on('mysql7')->create([
-            'unit_komuditi' => $request->unit_komuditi,
-            'nosijil'=>$komuditi_current['no_sijil'],
-            'norujukan' => $request->norujukan,
-            'kodcaw' => $request->kodcaw ,
-            'teller' => $request->teller ,
-            'masa' => $current->toTimeString(),
-            'tarikh' => $current->toDateString()
-        ]);
-
-        return response()->json($komuditi_transaksi);
+    public function transaksiKomuditi(Request $request)
+    {
+        $this->validate($request, ['kodcaw' => 'required|string', 'norujukan' => 'required|string']);
+        return app(ShorakaGadaiController::class)->submitGadai(
+            $request->kodcaw, $request->norujukan,
+            app(\App\Services\ShorakaGadaiService::class),
+            app(\App\Services\ShorakaService::class)
+        );
     }
 
     public function batalKomuditi(Request $request){
+        if (\App\ShorakaTransaction::where('norujukan', $request->norujukan)->exists()) {
+            abort(409, 'Transaksi Shoraka memerlukan semakan operasi; stok lama tidak boleh diubah.');
+        }
 
         $komuditi_current = KomuditiPurchase::on('mysql7')->orderBy('created_at','desc')->first();
 
@@ -335,4 +327,195 @@ class KomuditiController extends Controller
         return response()->json($rekodkomoditi);
     }
 
+    /**
+     * List BSAS commodity orders for operasi rekod view.
+     */
+    public function listBsasOrders(Request $request)
+    {
+        $query = BsasOrder::on('mysql7')
+            ->select([
+                'id',
+                'uuid',
+                'norujukan',
+                'kodcaw',
+                'serial_number',
+                'product_code',
+                'bid_value',
+                'otc_murabaha_value',
+                'otc_counter_party',
+                'status',
+                'status_code',
+                'status_message',
+                'e_cert_no',
+                'bid_ecert_response',
+                'otc_ecert_response',
+                'stb_ecert_response',
+                'created_by',
+                'created_at',
+                'updated_at',
+            ])
+            ->orderBy('created_at', 'desc')
+            ->orderBy('id', 'desc');
+
+        if ($request->filled('status')) {
+            $query->where('status', $request->input('status'));
+        }
+
+        if ($request->filled('kodcaw')) {
+            $query->where('kodcaw', $request->input('kodcaw'));
+        }
+
+        if ($request->filled('limit_view')) {
+            $query->limit((int) $request->input('limit_view'));
+        }
+
+        $rows = $query->get()->map(function (BsasOrder $order) {
+            $payload = $order->toArray();
+            $payload['has_bid_ecert'] = !empty($order->bid_ecert_response);
+            $payload['has_otc_ecert'] = !empty($order->otc_ecert_response);
+            $payload['has_stb_ecert'] = !empty($order->stb_ecert_response);
+            unset($payload['bid_ecert_response'], $payload['otc_ecert_response'], $payload['stb_ecert_response']);
+
+            return $payload;
+        });
+
+        return response()->json($rows);
+    }
+
+    /**
+     * SAG-ready komoditi/product payload from confirmed BSAS order for a norujukan.
+     * Replaces daily KomuditiPurchase lookup for per-Terima BSAS purchases.
+     */
+    public function getBsasOrderByNorujukan($norujukan)
+    {
+        $order = BsasOrder::on('mysql7')
+            ->where('norujukan', $norujukan)
+            ->where('status', 'confirmed')
+            ->orderBy('id', 'desc')
+            ->first();
+
+        if (!$order) {
+            return response()->json(['message' => 'BSAS order tidak dijumpai untuk norujukan ini.'], 404);
+        }
+
+        $otc = is_array($order->otc_ecert_response) ? $order->otc_ecert_response : [];
+        $productCode = (string) ($order->product_code ?: config('bsas.product_code'));
+        $description = trim((string) ($otc['PNAME'] ?? ''));
+        if ($description === '') {
+            $produk = KomuditiProduk::on('mysql7')->where('kodproduk', $productCode)->first();
+            $description = $produk ? (string) $produk->description : $productCode;
+        }
+
+        $price = (float) ($otc['PRICE_MYR_EQUIVALENT'] ?? $otc['PRICE'] ?? 0);
+        $volume = (float) ($otc['PVOLUME'] ?? 0);
+        $pinjaman = (float) $order->bid_value;
+        if ($volume <= 0 && $price > 0 && $pinjaman > 0) {
+            $volume = round($pinjaman / $price, 4);
+        }
+
+        return response()->json([
+            'source' => 'bsas',
+            'uuid' => $order->uuid,
+            'komoditi' => [
+                'no_sijil' => $order->e_cert_no ?: $order->uuid,
+                'kodproduct' => $productCode,
+                'nilai' => $price > 0 ? $price : null,
+            ],
+            'product' => [
+                'product_code' => $productCode,
+                'kodproduk' => $productCode,
+                'description' => $description,
+                'unit' => 'TAN',
+            ],
+            'kuantiti' => $volume,
+        ]);
+    }
+
+    /**
+     * Return stored BSAS eCert payload only (no live BSAS refresh).
+     */
+    public function getBsasOrderEcert($uuid)
+    {
+        $order = BsasOrder::on('mysql7')->where('uuid', $uuid)->first();
+
+        if (!$order) {
+            return response()->json(['message' => 'BSAS order tidak dijumpai.'], 404);
+        }
+
+        if (empty($order->bid_ecert_response) && empty($order->otc_ecert_response) && empty($order->stb_ecert_response)) {
+            return response()->json(['message' => 'eCert belum tersedia untuk order ini.'], 404);
+        }
+
+        return response()->json([
+            'uuid' => $order->uuid,
+            'norujukan' => $order->norujukan,
+            'e_cert_no' => $order->e_cert_no,
+            'serial_number' => $order->serial_number,
+            'product_code' => $order->product_code,
+            'bid_value' => $order->bid_value,
+            'otc_murabaha_value' => $order->otc_murabaha_value,
+            'otc_counter_party' => $order->otc_counter_party,
+            'bid_ecert' => $order->bid_ecert_response,
+            'otc_ecert' => $order->otc_ecert_response,
+            'stb_ecert' => $order->stb_ecert_response,
+        ]);
+    }
+
+    /**
+     * Place BSAS commodity order for a gadai Terima, long-poll result, fetch eCert.
+     */
+    public function placeBsasOrder(Request $request)
+    {
+        try {
+            $service = new BsasOrderService();
+            $order = $service->placeAndConfirm([
+                'norujukan' => $request->input('norujukan'),
+                'kodcaw' => $request->input('kodcaw'),
+                'pinjaman' => $request->input('pinjaman'),
+                'hargajualan' => $request->input('hargajualan'),
+                'nama_pelanggan' => $request->input('nama_pelanggan'),
+                'teller' => $request->input('teller'),
+            ]);
+
+            return response()->json([
+                'message' => 'BSAS order confirmed',
+                'order' => $order,
+            ], 200);
+        } catch (\Throwable $e) {
+            Log::error('BSAS place order failed', [
+                'norujukan' => $request->input('norujukan'),
+                'error' => $e->getMessage(),
+            ]);
+
+            return response()->json([
+                'message' => $e->getMessage() ?: 'Gagal pembelian komoditi BSAS.',
+            ], 422);
+        }
+    }
+
+    /**
+     * Re-query BSAS orderResult / retry eCert by stored uuid.
+     */
+    public function getBsasOrder($uuid)
+    {
+        try {
+            $service = new BsasOrderService();
+            $order = $service->refreshByUuid($uuid);
+
+            return response()->json([
+                'message' => 'OK',
+                'order' => $order,
+            ], 200);
+        } catch (\Throwable $e) {
+            Log::error('BSAS refresh order failed', [
+                'uuid' => $uuid,
+                'error' => $e->getMessage(),
+            ]);
+
+            return response()->json([
+                'message' => $e->getMessage() ?: 'Gagal semak status BSAS.',
+            ], 422);
+        }
+    }
+
 }

app/Http/Controllers/LaporanController.php

@@ -847,7 +847,7 @@ $date = new Carbon($request->tarikh);
         $bilangan_tebus = $tebus->count();
         // $bilangan_ansuran = $ansuran->count();
         //$bilangan_customer_baru = Customer::on($cawangan['mysql'])->where([['tarikhdaftar','>=',$request->mula],['tarikhdaftar','<=',$request->akhir]])->count();
-        $bilangan_customer_baru = Customer::on('mysql7')->where([['tarikhdaftar','>=',$request->mula],['tarikhdaftar','<=',$request->akhir]])->count();
+        $bilangan_customer_baru = Customer::on('mysql7')->whereBetween('tarikhdaftar', [$request->mula, $request->akhir])->where('kodcaw', $request->kodcaw)->count();
 
         //f
         $data_lelong = Lelong::on($cawangan['mysql'])->where([['t_jual','>=',$request->mula],['t_jual','<=',$request->akhir]])->get();
@@ -975,23 +975,11 @@ $date = new Carbon($request->tarikh);
     
         $gadaiDataKaunter = Gadai::on($cawangan['mysql'])->whereIn('norujukan',$total_keuntunganansuran_data_kaunter)->whereNotNull('hargajualan')->pluck('norujukan');
 
-        // $keuntunganansuran_kaunter_query = TransaksiKeuntungan::on('mysql7')
-        //                                     ->whereIn('norujukan',$gadaiDataKaunter)
-        //                                     ->whereDate('tarikh_bayaran','>=',$request->mula)
-        //                                     ->whereDate('tarikh_bayaran','<=',$request->akhir);
-        // //new update
         $keuntunganansuran_kaunter_query = TransaksiKeuntungan::on('mysql7')
-                    ->leftJoin('transaction as trans', function($join)
-                         {
-                             $join->on('transaksi_keuntungan.norujukan', '=', 'trans.norujukan');
-                             $join->on('transaksi_keuntungan.tarikh_bayaran', '=', 'trans.created_at');
-                         })
-                    ->whereDate('trans.created_at','>=',$request->mula)
-                    ->whereDate('trans.created_at','<=',$request->akhir)
-                    ->where('trans.teller','<>','Online')
-                    ->where('trans.trans_type','=','A')
-                    ->where('trans.kodcaw',$request->kodcaw)
-                    ->pluck('transaksi_keuntungan.norujukan');
+                                            ->whereIn('norujukan',$gadaiDataKaunter)
+                                            ->whereDate('tarikh_bayaran','>=',$request->mula)
+                                            ->whereDate('tarikh_bayaran','<=',$request->akhir);
+
                                             
                                             
         $total_keuntunganansuran_kaunter = $keuntunganansuran_kaunter_query->sum('bayaran_keuntungan');
@@ -1257,7 +1245,7 @@ $date = new Carbon($request->tarikh);
             array_push($atarray,[
                 'tarikh' => $tarikh,
                 'masa' => $masa,
-                'users' => isset($at['users']) && $at['users'] !== '' ? $at['users'] : '-',
+                'users' => $at['users'],
                 'pelulus' => isset($atnewdata['namapelulus']) ? $atnewdata['namapelulus'] : '-',
                 'actions' => $at['actions'],
                 'norujukan' => $at['norujukan'],

app/Http/Controllers/LelongController.php

@@ -11,6 +11,7 @@ use App\Negeri;
 use App\Lelong;
 use App\Transaction;
 use App\Cawangan;
+use App\Feature;
 use App\Gadai;
 use App\TuntutBaki;
 use App\WTD;
@@ -26,6 +27,7 @@ use App\Tunai;
 use App\Audit;
 use App\GlDetail;
 use App\Pembeli;
+use Illuminate\Http\Client\ConnectionException;
 use Illuminate\Http\Request;
 use Illuminate\Support\Facades\Http;
 use App\Services\RingkasanHarianServices;
@@ -604,16 +606,7 @@ class LelongController extends Controller
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$request->kodcaw)->first();
 
         if($cawangan['tagarrahnbid'] == 1){
-            if(env('APP_ENV') != 'production'){
-                $link = 'http://niklah.arrahn.com.my/api/portalApi';
-            }else{
-                $link = 'https://adminbid-kopkb.erahn.com.my/api/portalApi';
-            }
-
-            $lelong = Http::withOptions(['verify' => true])->get($link,[
-                'norujukan' => $request->norujukan
-            ])->json();
-            $lelong = ($lelong != null) ? $lelong['lelong'] : [];
+            $lelong = $this->fetchPortalLelong($request->kodcaw, $request->norujukan);
             if( $lelong == null )
             {
                 $lelong = Lelong::on($cawangan['mysql'])
@@ -656,10 +649,7 @@ class LelongController extends Controller
         $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $request->kodcaw)->first();
 
         if ($cawangan['tagarrahnbid'] == 0){
-            $lelong = Http::withOptions(['verify' => true])->get(config('app_parameter.api_arrahnbid').'portalApi',[
-                'norujukan' => $request->norujukan
-            ])->json();
-            $lelong = ($lelong != null) ? $lelong['lelong'] : [];
+            $lelong = $this->fetchPortalLelong($request->kodcaw, $request->norujukan);
             if( $lelong == null )
             {
                 $lelong = Lelong::on($cawangan['mysql'])
@@ -729,8 +719,8 @@ class LelongController extends Controller
 
         if($cawangan['tagarrahnbid'] == 1)
         {
-            $lelong = Http::withOptions(['verify' => true])->get(config('app_parameter.api_arrahnbid').'portalApi',['norujukan' => $request->norujukan])->json();
-            $lelong = ($lelong != null) ? $lelong['lelong'] : [];
+            $lelong = $this->fetchPortalLelong($request->kodcaw, $request->norujukan);
+            $lelong = ($lelong != null) ? $lelong : [];
         }else{
             $lelong = Lelong::on($cawangan['mysql'])->where([['norujukan',$request->norujukan]])->first();
         }
@@ -2009,4 +1999,31 @@ class LelongController extends Controller
             ], 200);
     }
 
+    /**
+     * Fetch lelong status from arrahnbid. Returns null when the portal is
+     * unreachable so callers can fall back to the local lelong table.
+     */
+    private function fetchPortalLelong($kodcaw, $norujukan)
+    {
+        try {
+            $payload = Http::withOptions(['verify' => true])
+                ->timeout(5)
+                ->get(Feature::arrahnbidUrl($kodcaw).'portalApi', [
+                    'norujukan' => $norujukan,
+                ])
+                ->json();
+
+            return ($payload != null) ? ($payload['lelong'] ?? null) : null;
+        } catch (ConnectionException $e) {
+            Log::warning('Arrahnbid portal unreachable; falling back to local lelong.', [
+                'kodcaw' => $kodcaw,
+                'norujukan' => $norujukan,
+                'url' => Feature::arrahnbidUrl($kodcaw).'portalApi',
+                'error' => $e->getMessage(),
+            ]);
+
+            return null;
+        }
+    }
+
 }

app/Http/Controllers/MarhunController.php

@@ -3,6 +3,7 @@
 namespace App\Http\Controllers;
 
 use App\Marhun;
+use App\Gadai;
 use App\Jemas;
 use App\Cawangan;
 use Illuminate\Http\Request;
@@ -58,6 +59,11 @@ class MarhunController extends Controller
 
     public function create($kodcaw,Request $request)
     {
+        $order = \App\ShorakaTransaction::where('norujukan', $request->norujukan)->first();
+        if ($order) {
+            abort(409, 'Kontrak Shoraka telah dihantar dan tidak boleh diubah.');
+        }
+
         $current = Carbon::now();
         $current = new Carbon();
 
@@ -126,6 +132,10 @@ class MarhunController extends Controller
 
     public function deletemarhun($kodcaw,$norujukan,Request $request)
     {
+        $order = \App\ShorakaTransaction::where('norujukan', $norujukan)->first();
+        if ($order) {
+            abort(409, 'Kontrak Shoraka telah dihantar dan tidak boleh diubah.');
+        }
 
         $current = Carbon::now();
         $current = new Carbon();
@@ -151,6 +161,11 @@ class MarhunController extends Controller
 
     public function editmarhun($kodcaw,$norujukan,Request $request)
     {
+        $order = \App\ShorakaTransaction::where('norujukan', $norujukan)->first();
+        if ($order) {
+            abort(409, 'Kontrak Shoraka telah dihantar dan tidak boleh diubah.');
+        }
+
 
 	    $current = Carbon::now();
         $current = new Carbon();
@@ -160,39 +175,53 @@ class MarhunController extends Controller
 
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
-        $old_data = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->first();
+        // Lock the parent first so concurrent edits to this SAG are serialized.
+        (new Marhun)->setConnection($cawangan['mysql'])->getConnection()->transaction(function () use ($cawangan, $norujukan, $request, $harga, $nilai_marhun, $kodcaw, $current) {
+            Gadai::on($cawangan['mysql'])->where('norujukan', $norujukan)->lockForUpdate()->firstOrFail();
+            $old_data = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->firstOrFail();
 
-        $marhunToUpdate = [
-            'karat' => $request->karat,
-            'marhun' => $request->marhun,
-            'nota' => $request->nota,
-            'tag_permata' => $request->tag_permata,
-            'berat_batu_permata' => $request->berat_batu_permata,
-            'berat' => $request->berat,
-            'harga' => $harga['harga'],
-            'n_marhun' => $nilai_marhun,
-            'bil' => $request->kuantiti,
-        ];
+            $marhunToUpdate = [
+                'karat' => $request->karat,
+                'marhun' => $request->marhun,
+                'nota' => $request->nota,
+                'tag_permata' => $request->tag_permata,
+                'berat_batu_permata' => $request->berat_batu_permata,
+                'berat' => $request->berat,
+                'harga' => $harga['harga'],
+                'n_marhun' => $nilai_marhun,
+                'bil' => $request->kuantiti,
+            ];
 
-        // Set value berat_batu_permata to null if value passed is null
-        if($marhunToUpdate['berat_batu_permata'] == '') {
-            $marhunToUpdate['berat_batu_permata'] = null;
-        };
+            // Set value berat_batu_permata to null if value passed is null
+            if($marhunToUpdate['berat_batu_permata'] == '') {
+                $marhunToUpdate['berat_batu_permata'] = null;
+            };
 
-        $jemas = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->update($marhunToUpdate);
+            $jemas = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->update($marhunToUpdate);
 
-        $new_data = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->first();
+            // Recalculate from every item belonging to this SAG, after the edit.
+            $totals = Marhun::on($cawangan['mysql'])->where('norujukan', $norujukan)
+                ->selectRaw('COALESCE(SUM(berat), 0) AS total_berat, COALESCE(SUM(n_marhun), 0) AS total_nilai, COALESCE(SUM(bil), 0) AS total_kuantiti')
+                ->first();
+            Gadai::on($cawangan['mysql'])->where('norujukan', $norujukan)->update([
+                'berat' => $totals->total_berat,
+                'nilaimarhun' => $totals->total_nilai,
+                'kuantiti' => $totals->total_kuantiti,
+            ]);
 
-        $audit = new Audit();
-        $audit->users = $request->teller;
-        $audit->actions = 'Ubah Marhun';
-        $audit->norujukan = $norujukan;
-        $audit->old_data = $old_data;
-        $audit->new_data = $new_data;
-        $audit->kodcaw = $kodcaw;
-        $audit->created_at = $current;
-        $audit->updated_at = $current;
-        $audit->save();
+            $new_data = Marhun::on($cawangan['mysql'])->where([['recno','=',$request->recno],['norujukan','=',$norujukan]])->first();
+
+            $audit = new Audit();
+            $audit->users = $request->teller;
+            $audit->actions = 'Ubah Marhun';
+            $audit->norujukan = $norujukan;
+            $audit->old_data = $old_data;
+            $audit->new_data = $new_data;
+            $audit->kodcaw = $kodcaw;
+            $audit->created_at = $current;
+            $audit->updated_at = $current;
+            $audit->save();
+        });
 
         return response('Edit Successfully', 200);
     }
@@ -203,7 +232,10 @@ class MarhunController extends Controller
         $marhun = Marhun::on($cawangan['mysql'])
                 ->select('marhun.norujukan','gadai.nokp','customer.nama','marhun.marhun','marhun.nota','marhun.berat','marhun.karat','marhun.harga','marhun.n_marhun','marhun.t_gadai','marhun.tag_permata', 'marhun.berat_batu_permata')
                 ->rightJoin('gadai', 'gadai.norujukan', '=', 'marhun.norujukan')
-                ->rightJoin(config('tennant_database.master_db') . '.customer as customer', 'customer.kpbaru','=','gadai.nokp')                
+                ->rightJoin('master_erahn.customer as customer', function($join) {
+                    $join->on('customer.kpbaru', '=', 'gadai.nokp')
+                    ->orOn('customer.kplama', '=', 'gadai.nokp');
+                    })                
                 ->where('marhun.t_gadai','=',$tarikh)
                 ->orderBy('marhun.t_gadai')
                 ->get();
@@ -221,7 +253,10 @@ class MarhunController extends Controller
         $marhun = Marhun::on($cawangan['mysql'])
                 ->select('marhun.norujukan','gadai.sttebus','gadai.pinjaman','gadai.nokp','customer.nama','marhun.marhun','marhun.nota','marhun.berat','marhun.karat','marhun.harga','marhun.n_marhun','marhun.t_gadai')
                 ->rightJoin('gadai', 'gadai.norujukan', '=', 'marhun.norujukan')
-                ->rightJoin(config('tennant_database.master_db') . '.customer as customer', 'customer.kpbaru','=','gadai.nokp')
+                 ->rightJoin('master_erahn.customer as customer', function($join) {
+                    $join->on('customer.kpbaru', '=', 'gadai.nokp')
+                    ->orOn('customer.kplama', '=', 'gadai.nokp');
+                 })
                 ->where('marhun.t_gadai','<=',$tarikh)
                 ->whereYear('marhun.t_gadai','=',$current->year)
                 ->where('gadai.sttebus','=','')

app/Http/Controllers/ModalOnlineController.php

@@ -0,0 +1,160 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Services\PembiayaanOnline\ModalOnlineService;
+use Illuminate\Http\Request;
+
+class ModalOnlineController extends Controller
+{
+    protected $service;
+
+    public function __construct(ModalOnlineService $service = null)
+    {
+        $this->service = $service ?: new ModalOnlineService();
+    }
+
+    protected function respond(array $result)
+    {
+        return response()->json($result['payload'], $result['status']);
+    }
+
+    /**
+     * GET /api/modal-online/{kodcaw}
+     * Read-only: does not create today's row.
+     */
+    public function get($kodcaw)
+    {
+        return $this->respond($this->service->get($kodcaw));
+    }
+
+    /**
+     * @deprecated Alias of get() — no longer auto-creates RM100k.
+     */
+    public function getOrCreate($kodcaw)
+    {
+        return $this->get($kodcaw);
+    }
+
+    /**
+     * POST /api/modal-online/{kodcaw}/reserve
+     */
+    public function reserve($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->reserve($kodcaw, $request->input('amaun', 0)));
+    }
+
+    /**
+     * GET /api/initiate/modal-online?zone=all|{zone}
+     */
+    public function initiate(Request $request)
+    {
+        return $this->respond($this->service->initiate($request->input('zone', 'all')));
+    }
+
+    /**
+     * POST /api/modal-online/{kodcaw}/topup/request
+     * PC mohon had (hari pertama) atau tambah modal. Body: amaun, dimohon_oleh, nota?
+     */
+    public function requestTopUp($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->requestTopUp(
+            $kodcaw,
+            $request->input('amaun', 0),
+            $request->input('dimohon_oleh', ''),
+            $request->input('nota')
+        ));
+    }
+
+    /**
+     * GET /api/modal-online/{kodcaw}/topup/requests?status=&tarikh=
+     */
+    public function listTopUpByCawangan($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->listTopUpRequests(
+            $kodcaw,
+            $request->input('status'),
+            $request->input('tarikh')
+        ));
+    }
+
+    /**
+     * GET /api/modal-online/operasi/topup/requests?status=PENDING&tarikh=
+     */
+    public function listTopUpOperasi(Request $request)
+    {
+        $status = $request->input('status', 'PENDING');
+        if ($status === 'all' || $status === '') {
+            $status = null;
+        }
+
+        return $this->respond($this->service->listTopUpRequests(
+            null,
+            $status,
+            $request->input('tarikh')
+        ));
+    }
+
+    /**
+     * POST /api/modal-online/operasi/topup/{id}/approve
+     * Body: diluluskan_oleh, nota?, amaun? (optional override)
+     */
+    public function approveTopUp($id, Request $request)
+    {
+        return $this->respond($this->service->approveTopUp(
+            $id,
+            $request->input('diluluskan_oleh', ''),
+            $request->input('nota'),
+            null,
+            $request->input('amaun')
+        ));
+    }
+
+    /**
+     * POST /api/modal-online/operasi/topup/{id}/reject
+     * Body: diluluskan_oleh, nota?
+     */
+    public function rejectTopUp($id, Request $request)
+    {
+        return $this->respond($this->service->rejectTopUp(
+            $id,
+            $request->input('diluluskan_oleh', ''),
+            $request->input('nota')
+        ));
+    }
+
+    /**
+     * POST /api/modal-online/{kodcaw}/close
+     * Body: ditutup_oleh
+     */
+    public function close($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->close(
+            $kodcaw,
+            $request->input('ditutup_oleh', '')
+        ));
+    }
+
+    /**
+     * GET /api/modal-online/operasi/eod?zone=all&tarikh=
+     */
+    public function listToday(Request $request)
+    {
+        return $this->respond($this->service->listToday(
+            $request->input('zone', 'all'),
+            $request->input('tarikh')
+        ));
+    }
+
+    /**
+     * POST /api/modal-online/operasi/eod/close-all
+     * Body: ditutup_oleh, zone?
+     */
+    public function closeAll(Request $request)
+    {
+        return $this->respond($this->service->closeAll(
+            $request->input('ditutup_oleh', ''),
+            $request->input('zone', 'all')
+        ));
+    }
+}

app/Http/Controllers/PembiayaanOnlineController.php

@@ -0,0 +1,250 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\Services\PembiayaanOnline\PembiayaanOnlineService;
+use Illuminate\Http\Request;
+
+class PembiayaanOnlineController extends Controller
+{
+    protected $service;
+
+    public function __construct(PembiayaanOnlineService $service = null)
+    {
+        $this->service = $service ?: new PembiayaanOnlineService();
+    }
+
+    protected function respond(array $result)
+    {
+        return response()->json($result['payload'], $result['status']);
+    }
+
+    /**
+     * POST /api/pembiayaan-online/{kodcaw}
+     */
+    public function store($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->store($kodcaw, $request->all()));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/by-norujukan/{norujukan}
+     */
+    public function show($kodcaw, $norujukan)
+    {
+        return $this->respond($this->service->show($kodcaw, $norujukan));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/lines/{id}
+     */
+    public function showLine($kodcaw, $id)
+    {
+        return $this->respond($this->service->showLine($kodcaw, $id));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/queue
+     */
+    public function queue($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->queue($kodcaw, $request->input('status')));
+    }
+
+    /**
+     * PUT /api/pembiayaan-online/{kodcaw}/lines/{id}
+     */
+    public function updateLine($kodcaw, $id, Request $request)
+    {
+        // Prefer only present keys so "has" semantics match previous controller.
+        $input = [];
+        foreach ([
+            'kodbank', 'noakaun', 'nama_bank', 'nama_akaun', 'nota',
+            'bukti_akaun_file_id', 'borang_file_id', 'update_customer_bank',
+            'bukti_akaun_data', 'bukti_akaun_filename', 'bukti_akaun_type',
+            'borang_data', 'borang_filename', 'borang_type',
+        ] as $key) {
+            if ($request->has($key)) {
+                $input[$key] = $request->input($key);
+            }
+        }
+
+        return $this->respond($this->service->updateLine($kodcaw, $id, $input));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/{kodcaw}/lines/{id}/verify
+     */
+    public function verifyLine($kodcaw, $id, Request $request)
+    {
+        return $this->respond($this->service->verifyLine(
+            $kodcaw,
+            $id,
+            $request->input('pc_verified_by', '')
+        ));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/{kodcaw}/lines/{id}/unverify
+     */
+    public function unverifyLine($kodcaw, $id)
+    {
+        return $this->respond($this->service->unverifyLine($kodcaw, $id));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/batches
+     */
+    public function listBatches($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->listBatches(
+            $kodcaw,
+            $request->input('tarikh'),
+            $request->input('status')
+        ));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/batches/{batchId}
+     */
+    public function showBatch($kodcaw, $batchId)
+    {
+        return $this->respond($this->service->showBatch($kodcaw, $batchId));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/{kodcaw}/batches/submit
+     */
+    public function submitBatch($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->submitBatch(
+            $kodcaw,
+            $request->input('ids', []),
+            $request->input('pc_submitted_by', ''),
+            $request->input('slot')
+        ));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/operasi/batches
+     */
+    public function operasiListBatches(Request $request)
+    {
+        return $this->respond($this->service->operasiListBatches(
+            $request->input('status', 'SUBMITTED'),
+            $request->input('tarikh')
+        ));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/operasi/{kodcaw}/batches/{batchId}
+     */
+    public function operasiShowBatch($kodcaw, $batchId)
+    {
+        return $this->showBatch($kodcaw, $batchId);
+    }
+
+    /**
+     * POST /api/pembiayaan-online/operasi/{kodcaw}/lines/{id}/approve
+     */
+    public function operasiApproveLine($kodcaw, $id, Request $request)
+    {
+        return $this->respond($this->service->operasiApproveLine(
+            $kodcaw,
+            $id,
+            $request->input('ops_by', '')
+        ));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/operasi/{kodcaw}/lines/{id}/reject
+     */
+    public function operasiRejectLine($kodcaw, $id, Request $request)
+    {
+        return $this->respond($this->service->operasiRejectLine(
+            $kodcaw,
+            $id,
+            $request->input('ops_by', ''),
+            $request->input('reject_reason', '')
+        ));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/operasi/{kodcaw}/batches/{batchId}/approve
+     */
+    public function operasiApproveBatch($kodcaw, $batchId, Request $request)
+    {
+        return $this->respond($this->service->operasiApproveBatch(
+            $kodcaw,
+            $batchId,
+            $request->input('ops_by', '')
+        ));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/operasi/{kodcaw}/lines/{id}/paid
+     * Body: ops_by, no_rujukan_bayaran, tarikh_bayaran?,
+     *   bukti_data + bukti_filename + bukti_type  OR  bukti_file_id
+     */
+    public function operasiMarkPaid($kodcaw, $id, Request $request)
+    {
+        return $this->respond($this->service->operasiMarkPaid($kodcaw, $id, $request->all()));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/operasi/{kodcaw}/batches/{batchId}/paid
+     */
+    public function operasiMarkPaidBatch($kodcaw, $batchId, Request $request)
+    {
+        return $this->respond($this->service->operasiMarkPaidBatch($kodcaw, $batchId, $request->all()));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/lines/{id}/bukti
+     */
+    public function getBukti($kodcaw, $id)
+    {
+        return $this->respond($this->service->getBukti($kodcaw, $id));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/lines/{id}/bukti-akaun
+     */
+    public function getBuktiAkaun($kodcaw, $id)
+    {
+        return $this->respond($this->service->getBuktiAkaun($kodcaw, $id));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/lines/{id}/borang
+     */
+    public function getBorang($kodcaw, $id)
+    {
+        return $this->respond($this->service->getBorang($kodcaw, $id));
+    }
+
+    /**
+     * GET /api/pembiayaan-online/{kodcaw}/paid?blast_sent=0
+     */
+    public function paidQueue($kodcaw, Request $request)
+    {
+        return $this->respond($this->service->paidQueue(
+            $kodcaw,
+            $request->input('blast_sent')
+        ));
+    }
+
+    /**
+     * POST /api/pembiayaan-online/{kodcaw}/paid/blast
+     * Body: ids[] (or ids), blast_by?
+     */
+    public function markBlastSent($kodcaw, Request $request)
+    {
+        $ids = $request->input('ids', $request->input('id'));
+        return $this->respond($this->service->markBlastSent(
+            $kodcaw,
+            $ids,
+            $request->input('blast_by')
+        ));
+    }
+}

app/Http/Controllers/Reports/GadaianController.php

@@ -48,7 +48,7 @@ class GadaianController extends Controller
         $summary_gadaian_data = array_map(function ($db_connection) use ($request) {
             $query = Gadai::on($db_connection);
 
-            $query->select(DB::raw('count(norujukan) as total_gadaian, sum(berat) as sum_berat, sum(nilaimarhun) as sum_nilai_marhun, sum(pinjaman) as sum_pinjaman'));
+             $query->select(DB::raw('count(norujukan) as total_gadaian, sum(berat) as sum_berat, sum(nilaimarhun) as sum_nilai_marhun, sum(pinjaman) as sum_pinjaman,  sum(upah12) as sum_upah_12'));
 
             $query->when($request->filled('startDate') and $request->filled('endDate'), function ($q) use ($request) {
                 return $q->where('t_gadai', '>=', $request->startDate)

app/Http/Controllers/ShorakaController.php

@@ -0,0 +1,291 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\ShorakaTransaction;
+use App\Services\ShorakaService;
+use Carbon\Carbon;
+use Illuminate\Database\QueryException;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+use Throwable;
+
+class ShorakaController extends Controller
+{
+    public function index(Request $request)
+    {
+        $this->validate($request, [
+            'kodcaw' => 'nullable|string|max:30',
+            'norujukan' => 'nullable|string|max:100',
+            'status' => 'nullable|string|max:30',
+            'date_from' => 'nullable|date_format:Y-m-d',
+            'date_to' => 'nullable|date_format:Y-m-d',
+            'per_page' => 'nullable|integer|min:1|max:100',
+            'page' => 'nullable|integer|min:1',
+            'branch_scope' => 'nullable|string|max:30',
+        ]);
+
+        $query = ShorakaTransaction::query();
+        foreach (['kodcaw', 'norujukan', 'status'] as $field) {
+            if ($request->filled($field)) {
+                $query->where($field, $request->input($field));
+            }
+        }
+        if ($request->filled('date_from')) {
+            $query->where('created_at', '>=', $request->input('date_from') . ' 00:00:00');
+        }
+        if ($request->filled('date_to')) {
+            $query->where('created_at', '<', Carbon::parse($request->input('date_to'))->addDay()->format('Y-m-d') . ' 00:00:00');
+        }
+        $records = $query->orderByDesc('created_at')->orderByDesc('id')
+            ->paginate(min(100, max(1, (int) $request->input('per_page', 25))));
+        $payload = [
+            'data' => $records->getCollection()->map(function (ShorakaTransaction $record) {
+                return [
+                    'id' => $record->id,
+                    'kodcaw' => $record->kodcaw,
+                    'norujukan' => $record->norujukan,
+                    'teller' => $record->teller,
+                    'status' => $record->status,
+                    'order_id' => $record->order_id,
+                    'created_at' => optional($record->created_at)->toDateTimeString(),
+                    'updated_at' => optional($record->updated_at)->toDateTimeString(),
+                ];
+            })->values(),
+            'total' => $records->total(),
+            'current_page' => $records->currentPage(),
+            'per_page' => $records->perPage(),
+            'last_page' => $records->lastPage(),
+        ];
+        if ($request->input('with_branches')) {
+            $branches = ShorakaTransaction::query()->whereNotNull('kodcaw');
+            if ($request->filled('branch_scope')) {
+                $branches->where('kodcaw', $request->input('branch_scope'));
+            }
+            $payload['branches'] = $branches->distinct()->orderBy('kodcaw')->pluck('kodcaw')->values();
+        }
+        return response()->json($payload);
+    }
+
+    public function submit(Request $request, ShorakaService $shoraka)
+    {
+        $validated = $this->validate($request, [
+            'norujukan' => 'required|string|max:255',
+            'ownership' => 'required|string|max:255',
+            'order_amount' => 'required|numeric|min:0.01|max:9999999999999.99',
+            'murabaha_amount' => 'required|numeric|min:0.01|max:9999999999999.99',
+            'tenor_other' => 'required|integer|min:1',
+            'teller' => 'nullable|string|max:255',
+        ]);
+        if (!$shoraka->configured()) {
+            return $this->unconfigured();
+        }
+
+        $existing = ShorakaTransaction::where('norujukan', $validated['norujukan'])->first();
+        if ($existing) {
+            return $this->duplicate($existing);
+        }
+
+        $payload = [
+            'product_type' => 'FINANCING',
+            'commodity_type' => '000-COPPER',
+            'ownership' => $validated['ownership'],
+            'ownership_doc_no' => $validated['norujukan'],
+            'value_date' => Carbon::now()->format('d/m/Y'),
+            'order_currency' => 'MYR',
+            'order_amount' => number_format((float) $validated['order_amount'], 2, '.', ''),
+            'murabaha_amount' => number_format((float) $validated['murabaha_amount'], 2, '.', ''),
+            // Appendix codes in v1.5: OTHERS and MONTH.
+            'tenor' => 'OTHERS',
+            'tenor_other' => $validated['tenor_other'],
+            'tenor_other_unit' => 'MONTH',
+            'order_type' => 'Buy & Sell',
+        ];
+
+        try {
+            // The unique norujukan index is the atomic claim for concurrent submissions.
+            $attributes = [
+                'norujukan' => $validated['norujukan'],
+                'kodcaw' => $request->attributes->get('shoraka_kodcaw'),
+                'teller' => $validated['teller'] ?? null,
+                'status' => 'PENDING',
+                'product_type' => $payload['product_type'],
+                'commodity_type' => $payload['commodity_type'],
+                'ownership_name' => $payload['ownership'],
+                'ownership_doc_no' => $payload['ownership_doc_no'],
+                'order_amount' => $payload['order_amount'],
+                'murabaha_amount' => $payload['murabaha_amount'],
+                'request_payload' => $payload,
+                'attempt_count' => 1,
+            ];
+            $transaction = ShorakaTransaction::create($attributes);
+        } catch (QueryException $exception) {
+            $existing = ShorakaTransaction::where('norujukan', $validated['norujukan'])->first();
+            if ($existing) {
+                return $this->duplicate($existing);
+            }
+            throw $exception;
+        }
+
+        try {
+            $response = $shoraka->submitOrder($payload);
+            $this->saveOrder($transaction, $response);
+
+            return response()->json([
+                'success' => true,
+                'message' => 'Order berjaya dihantar ke Shoraka.',
+                'data' => $this->orderData($transaction),
+            ]);
+        } catch (Throwable $exception) {
+            // A timeout or invalid response does not prove the remote trade failed.
+            // Block resubmission until this reference has been reconciled with Shoraka.
+            $transaction->update([
+                'status' => $transaction->order_id ? $transaction->status : 'UNKNOWN',
+                'error_message' => 'Submission outcome requires reconciliation with Shoraka.',
+            ]);
+
+            return $this->upstreamError('submit', $transaction, $exception);
+        }
+    }
+
+    public function refresh(string $norujukan, ShorakaService $shoraka)
+    {
+        if (!$shoraka->configured()) {
+            return $this->unconfigured();
+        }
+        $transaction = ShorakaTransaction::where('norujukan', $norujukan)->firstOrFail();
+        if (!$transaction->order_id) {
+            return $this->missingOrderId();
+        }
+
+        try {
+            $response = $shoraka->orderStatus($transaction->order_id);
+            $this->saveOrder($transaction, $response);
+
+            return response()->json(['success' => true, 'data' => $this->orderData($transaction)]);
+        } catch (Throwable $exception) {
+            return $this->upstreamError('status', $transaction, $exception);
+        }
+    }
+
+    public function certificate(string $norujukan, ShorakaService $shoraka)
+    {
+        if (!$shoraka->configured()) {
+            return $this->unconfigured();
+        }
+        $transaction = ShorakaTransaction::where('norujukan', $norujukan)->firstOrFail();
+        if (!$transaction->order_id) {
+            return $this->missingOrderId();
+        }
+
+        try {
+            $pdf = $shoraka->certificate($transaction->order_id);
+
+            return response($pdf, 200, [
+                'Content-Type' => 'application/pdf',
+                'Content-Disposition' => 'attachment; filename="shoraka-' . $transaction->id . '.pdf"',
+                'Cache-Control' => 'private, no-store',
+            ]);
+        } catch (Throwable $exception) {
+            return $this->upstreamError('certificate', $transaction, $exception);
+        }
+    }
+
+    public function callback(Request $request, ShorakaService $shoraka)
+    {
+        if (!$shoraka->configured()) {
+            return $this->unconfigured();
+        }
+        $payload = $request->json()->all();
+        if (!$shoraka->validCallback($payload)) {
+            return response()->json(['success' => false, 'message' => 'Invalid callback signature.'], 401);
+        }
+
+        // ownershipDocNo and certificateUrl are NOT signed. Never use them to link
+        // a callback to a local record or download a file.
+        $transaction = ShorakaTransaction::where('order_id', $payload['orderId'])->first();
+        if (!$transaction) {
+            return response()->json(['success' => false, 'message' => 'Order not found.'], 404);
+        }
+
+        try {
+            // There is no signed callback timestamp. Query the current order so a
+            // delayed/replayed callback cannot directly restore an old status.
+            $response = $shoraka->orderStatus($transaction->order_id);
+            unset($payload['signature']);
+            $this->saveOrder($transaction, $response, ['callback_payload' => $payload]);
+
+            // Exact acknowledgement required by section 6.
+            return response('OK', 200, ['Content-Type' => 'text/plain']);
+        } catch (Throwable $exception) {
+            return $this->upstreamError('callback', $transaction, $exception);
+        }
+    }
+
+    protected function saveOrder(ShorakaTransaction $transaction, array $response, array $extra = []): void
+    {
+        $transaction->update(array_merge([
+            'order_id' => (string) $response['orderId'],
+            'status' => $response['status'],
+            'certificate_url' => $response['certificateUrl'] ?? null,
+            'response_payload' => $response,
+            'submitted_at' => $transaction->submitted_at ?: Carbon::now(),
+            'completed_at' => $response['status'] === 'Completed'
+                ? ($transaction->completed_at ?: Carbon::now()) : $transaction->completed_at,
+            'error_message' => null,
+        ], $extra));
+        app(\App\Services\ShorakaGadaiService::class)->sync($transaction);
+    }
+
+    protected function orderData(ShorakaTransaction $transaction): array
+    {
+        return [
+            'norujukan' => $transaction->norujukan,
+            'kodcaw' => $transaction->kodcaw,
+            'teller' => $transaction->teller,
+            'order_id' => $transaction->order_id,
+            'status' => $transaction->status,
+            'certificate_url' => $transaction->certificate_url,
+        ];
+    }
+
+    protected function duplicate(ShorakaTransaction $transaction)
+    {
+        return response()->json([
+            'success' => false,
+            'message' => 'Transaksi telah direkodkan. Semak status dengan Shoraka sebelum penghantaran semula.',
+            'data' => $this->orderData($transaction),
+        ], 409);
+    }
+
+    protected function missingOrderId()
+    {
+        return response()->json([
+            'success' => false,
+            'message' => 'Order ID belum tersedia. Semakan dengan Shoraka diperlukan.',
+        ], 409);
+    }
+
+    protected function unconfigured()
+    {
+        return response()->json([
+            'success' => false,
+            'message' => 'API ID dan Secret Key Shoraka belum dikonfigurasi.',
+        ], 503);
+    }
+
+    protected function upstreamError(string $operation, ShorakaTransaction $transaction, Throwable $exception)
+    {
+        // Connection exceptions may include request details; log only the class.
+        Log::error('Shoraka request failed', [
+            'operation' => $operation,
+            'transaction_id' => $transaction->id,
+            'exception_type' => get_class($exception),
+        ]);
+
+        return response()->json([
+            'success' => false,
+            'message' => 'Permintaan Shoraka gagal. Semak status transaksi sebelum mencuba semula.',
+        ], 502);
+    }
+}

app/Http/Controllers/ShorakaGadaiController.php

@@ -0,0 +1,76 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use App\KomuditiTransaksi;
+use App\Services\ShorakaGadaiService;
+use App\Services\ShorakaService;
+use Illuminate\Http\Request;
+
+class ShorakaGadaiController extends ShorakaController
+{
+    public function readiness(ShorakaService $shoraka)
+    {
+        try {
+            \App\ShorakaTransaction::query()->limit(1)->exists();
+            $storeReady = true;
+        } catch (\Throwable $exception) {
+            $storeReady = false;
+        }
+        return response()->json(['provider' => 'shoraka', 'ready' => $storeReady && $shoraka->configured()]);
+    }
+
+    public function showGadai(string $kodcaw, string $norujukan, ShorakaGadaiService $gadaiService)
+    {
+        $gadai = $gadaiService->gadai($kodcaw, $norujukan);
+        $order = $gadaiService->transaction($kodcaw, $norujukan);
+        return response()->json([
+            'success' => true,
+            'data' => [
+                'norujukan' => $norujukan, 'kodcaw' => $kodcaw,
+                'order_amount' => $gadai->pinjaman, 'murabaha_amount' => $gadai->hargajualan,
+                'order' => $order ? $this->orderData($order) : null,
+                'details' => $order ? $order->response_payload : null,
+                'simulation' => $order && strpos((string) $order->order_id, 'SIM-') === 0,
+                'can_complete' => $gadai->exists && $order && $order->status === 'Completed'
+                    && number_format((float) $gadai->pinjaman, 2, '.', '') === $order->order_amount
+                    && number_format((float) $gadai->hargajualan, 2, '.', '') === $order->murabaha_amount,
+            ],
+        ]);
+    }
+
+    public function submitGadai(string $kodcaw, string $norujukan, Request $request, ShorakaGadaiService $gadaiService, ShorakaService $shoraka)
+    {
+        $gadai = $gadaiService->gadai($kodcaw, $norujukan);
+        $existing = $gadaiService->transaction($kodcaw, $norujukan);
+        if ($existing) {
+            return $this->duplicate($existing);
+        }
+        // Historical commodity purchases must never be traded again.
+        if (KomuditiTransaksi::on('mysql7')->where('norujukan', $norujukan)->exists()
+            || $gadai->cetak || $gadai->sttebus) {
+            abort(409, 'Gadaian lama atau telah selesai tidak boleh dihantar sebagai order baharu.');
+        }
+        $payload = $gadaiService->payload($gadai);
+        $teller = $request->input('teller');
+        if (is_string($teller) && $teller !== '') {
+            $payload['teller'] = $teller;
+        }
+        $submission = new Request($payload);
+        $submission->attributes->set('shoraka_kodcaw', $kodcaw);
+        return $this->submit($submission, $shoraka);
+    }
+
+    public function refreshGadai(string $kodcaw, string $norujukan, ShorakaGadaiService $gadaiService, ShorakaService $shoraka)
+    {
+        $gadaiService->gadai($kodcaw, $norujukan);
+        $gadaiService->transaction($kodcaw, $norujukan);
+        return $this->refresh($norujukan, $shoraka);
+    }
+
+    public function certificateGadai(string $kodcaw, string $norujukan, ShorakaGadaiService $gadaiService, ShorakaService $shoraka)
+    {
+        $gadaiService->assertCompleted($kodcaw, $norujukan);
+        return $this->certificate($norujukan, $shoraka);
+    }
+}

app/Http/Controllers/TebusController.php

@@ -20,6 +20,7 @@ use App\Panjar;
 use App\HargaEmas;
 use App\Moratorium;
 use App\Audit;
+use App\Feature;
 use App\LookupWakil;
 
 use App\StokAudit1;
@@ -193,7 +194,7 @@ class TebusController extends Controller
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
         $tebus_data = Tebus::on($cawangan['mysql'])
-                ->select('tebus.t_tebus', 'gad.t_gadai','gad.hargajualan','gad.bakihargajualan','gad.bakipjm as gadaibakipjm','tebus.nilaimarhun','tebus.tagterima', 'tebus.teller','tebus.jenistebus','tebus.pinjaman','tebus.bakiupah','tebus.bakipjm','gad.norujukan','gad.nokp','tebus.jbg','tebus.ujrah','tebus.onepercent','gad.tagbaru')
+                ->select('tebus.t_tebus', 'gad.t_gadai','gad.hargajualan','gad.bakihargajualan','gad.bakipjm as gadaibakipjm','tebus.nilaimarhun','tebus.tagterima', 'tebus.teller','tebus.jenistebus','tebus.pinjaman','tebus.bakiupah','tebus.bakipjm','gad.norujukan','gad.nokp','tebus.jbg','tebus.ujrah','tebus.onepercent','gad.tagbaru','tebus.diskaun_rebate')
                 ->join('gadai as gad','gad.norujukan','=','tebus.norujukan')
                // ->join('online_arrahn.customer as cust', function($join)
                // {
@@ -232,7 +233,8 @@ class TebusController extends Controller
                     "nokp"=>$tebusData['nokp'],
                     "jbg"=>$tebusData['jbg'],
                     "ujrah"=>$trans['ujrah_rebet'],
-                    "onepercent"=>$trans['onepercent_rebet']
+                    "onepercent"=>$trans['onepercent_rebet'],
+                    "diskaun_rebate"=>$tebusData['diskaun_rebate'],
 
                 ]);
             }
@@ -274,7 +276,8 @@ class TebusController extends Controller
         'tebus.jbg',
         'tebus.ujrah',
         'tebus.onepercent',
-        'gad.tagbaru'
+        'gad.tagbaru',
+        'tebus.diskaun_rebate'
     )
     ->join('gadai as gad', 'gad.norujukan', '=', 'tebus.norujukan')
     ->where('tebus.t_tebus', '>=', $request->mula)
@@ -310,7 +313,8 @@ class TebusController extends Controller
                     "jbg"=>$tebusData['jbg'],
                     "ujrah"=>$trans['ujrah_rebet'],
                     "onepercent"=>$trans['onepercent_rebet'],
-                    "tagbaru"=>$tebusData['tagbaru']
+                    "tagbaru"=>$tebusData['tagbaru'],
+                    "diskaun_rebate"=>$tebusData['diskaun_rebate'],
 
                 ]);
             }
@@ -1672,6 +1676,53 @@ class TebusController extends Controller
         return response($rebet);
     }
 
+    public function RebetPromoCalculation($kodcaw, Request $request)
+    {
+        $kodcaw = $request->kodcaw ?: $kodcaw;
+        if (!Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+            return response(0);
+        }
+
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
+
+        $rebet = Tebus::on($cawangan['mysql'])
+                ->join('gadai as db2', 'tebus.norujukan', '=', 'db2.norujukan')
+                ->where('tebus.t_tebus', '<=', $request->tarikh)
+                ->where('db2.hargajualan', '>', '0')
+                ->whereNotNull('db2.hargajualan')
+                ->sum('diskaun_rebate');
+
+        return response($rebet);
+    }
+
+    public function PelarasanRebate($kodcaw, Request $request)
+    {
+        $kodcaw = $request->kodcaw ?: $kodcaw;
+        if (!Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+            return response(0);
+        }
+
+        $cawangan = Cawangan::on('mysql7')
+            ->where('kodcaw', $kodcaw)
+            ->first();
+
+        $tarikhLaporan = Carbon::parse($request->tarikh)->toDateString();
+        $tarikhTamatPelarasan = '2026-09-02';
+        $tarikhAkhir = $tarikhLaporan > $tarikhTamatPelarasan
+            ? $tarikhTamatPelarasan
+            : $tarikhLaporan;
+
+        $rebet = Tebus::on($cawangan['mysql'])
+            ->join('gadai as db2', 'tebus.norujukan', '=', 'db2.norujukan')
+            ->whereDate('tebus.t_tebus', '>=', '2025-05-13')
+            ->whereDate('tebus.t_tebus', '<=', $tarikhAkhir)
+            ->where('db2.hargajualan', '>', 0)
+            ->whereDate('db2.t_gadai', '>', '2023-05-21')
+            ->sum('tebus.diskaun_rebate');
+
+        return response($rebet);
+    }
+
     public function RebetCalculationLejer($kodcaw,Request $request)
     {
         $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$request->kodcaw)->first();
@@ -1687,6 +1738,26 @@ class TebusController extends Controller
         return response($rebet);
     }
 
+    public function RebetPromoCalculationLejer($kodcaw, Request $request)
+    {
+        $kodcaw = $request->kodcaw ?: $kodcaw;
+        if (!Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+            return response(0);
+        }
+
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
+
+        $rebet = Tebus::on($cawangan['mysql'])
+                ->join('gadai as db2', 'tebus.norujukan', '=', 'db2.norujukan')
+                ->where('tebus.t_tebus', '>=', $request->mula)
+                ->where('tebus.t_tebus', '<=', $request->hingga)
+                ->where('db2.hargajualan', '>', '0')
+                ->whereNotNull('db2.hargajualan')
+                ->sum('diskaun_rebate');
+
+        return response($rebet);
+    }
+
     public function getUpahLamaToday($kodcaw,$norujukan)
     {
         $current = Carbon::now();

app/Http/Controllers/TunaiController.php

@@ -13,6 +13,7 @@ use App\Vault;
 use Auth0\SDK\API\Management\Users;
 use Illuminate\Http\Request;
 use Carbon\Carbon;
+use App\Services\StaffNotificationClient;
 use Illuminate\Support\Facades\Log;
 class TunaiController extends Controller
 {
@@ -476,10 +477,54 @@ class TunaiController extends Controller
         $audit->updated_at = $current;
         $audit->save();
 
+        $this->notifyKhazanahAliranTunai($kodcaw, $request, $reqteller);
 
         return response()->json($reqteller,200);
     }
 
+    /**
+     * Inbox for PC/PPC at the branch. Failures must not block the request.
+     *
+     * @param  string  $kodcaw
+     * @param  \Illuminate\Http\Request  $request
+     * @param  \App\RequestTeller  $reqteller
+     * @return void
+     */
+    protected function notifyKhazanahAliranTunai($kodcaw, Request $request, $reqteller)
+    {
+        try {
+            $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
+            $namaCaw = $kodcaw;
+            if ($cawangan) {
+                $nama = trim((string) $cawangan->nama_cawangan);
+                if ($nama !== '') {
+                    $namaCaw = $nama;
+                }
+            }
+
+            $modal = (float) $request->modal;
+            $serahan = (float) $request->serahan;
+
+            app(StaffNotificationClient::class)->notify([
+                'type' => 'aliran_tunai.pending_khazanah',
+                'cawangan' => $kodcaw,
+                'audience' => ['role' => 'pc'],
+                'data' => [
+                    'request_no' => isset($reqteller->no) ? $reqteller->no : null,
+                    'kodlaluan' => $request->kodlaluan,
+                    'modal' => $modal,
+                    'serahan' => $serahan,
+                    'cawangan_nama' => $namaCaw,
+                ],
+            ]);
+        } catch (\Throwable $e) {
+            Log::warning('Aliran tunai khazanah notification failed: '.$e->getMessage(), [
+                'kodcaw' => $kodcaw,
+                'kodlaluan' => $request->kodlaluan,
+            ]);
+        }
+    }
+
     public function getTunaiSemalam($kodcaw)
     {
         $current = new Carbon();

app/Http/Controllers/VaultController.php

@@ -12,6 +12,7 @@ use App\GlDetail;
 use App\imbangdugalama;
 use App\GlCode;
 use App\Panjar;
+use App\ModalOnline;
 
 use Illuminate\Http\Request;
 use Carbon\Carbon;
@@ -168,37 +169,64 @@ class VaultController extends Controller
    return response()->json($updateVault, 200);
  }
 
- public function updateVaultDeletePendahuluanSerahan($kodcaw, Request $request)
- {
-   $current = Carbon::now();
-   $current = new Carbon();
-   $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
-   $vault=Vault::on($cawangan['mysql'])->where('kodcaw','=',$kodcaw)->where('tarikh','=',$current->toDateString())->orderby('tarikh','desc')->first();
+public function updateVaultDeletePendahuluanSerahan($kodcaw, Request $request)
+{
+    $current = new Carbon();
 
-   $bakiawal = $vault['bakiawal'];
-   $keluar = $vault['keluar'];
-   $masuk = $vault['masuk'];
-   $bakiakhir = $vault['bakiakhir'];
-   $bakieod = $vault['bakieod'];
-   $pendahuluan = $vault['pendahuluan'];
-   $serahan = $vault['serahan'];
-   $totpanjaran = $vault['totpanjar'];
+    $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
 
-   $glpend = GlDetail::on($cawangan['mysql'])->where('tarikh','=', $current->toDateString())->sum('pendahuluan');
-   $glser = GlDetail::on($cawangan['mysql'])->where('tarikh','=', $current->toDateString())->where('teller','<>','ONLINE')->sum('serahan');
+    if (!$cawangan) {
+        return response()->json(['message' => 'Cawangan tidak dijumpai'], 404);
+    }
 
-   $bakiakhir = $bakiawal - $keluar + $masuk + $glpend - $glser - $totpanjaran;
+    $vault = Vault::on($cawangan['mysql'])
+        ->where('kodcaw', '=', $kodcaw)
+        ->where('tarikh', '=', $current->toDateString())
+        ->first();
 
-   $updateVault=Vault::on($cawangan['mysql'])->where([['tarikh','=',$current->toDateString()],['kodcaw','=', $kodcaw]])->update(array(
-      'pendahuluan' => $glpend,
-      'serahan' => $glser,
-      'bakiakhir'=>$bakiakhir,
-      'bakieod'=>$bakiakhir
-   ));
+    if (!$vault) {
+        return response()->json(['message' => 'Rekod vault hari ini tidak dijumpai'], 404);
+    }
 
-   return response()->json($updateVault, 200);
- }
+    $bakiawal    = $vault['bakiawal'];
+    $keluar      = $vault['keluar'];
+    $masuk       = $vault['masuk'];
+    $totpanjaran = $vault['totpanjar'];
+
+    // Pendahuluan HQ (dari GL)
+    $glpend = GlDetail::on($cawangan['mysql'])
+        ->where('tarikh', '=', $current->toDateString())
+        ->sum('pendahuluan');
+
+    // Serahan (GL, exclude teller ONLINE)
+    $glser = GlDetail::on($cawangan['mysql'])
+        ->where('tarikh', '=', $current->toDateString())
+        ->where('teller', '<>', 'ONLINE')
+        ->sum('serahan');
+
+    // Pendahuluan Online (had yang diluluskan hari ini)
+    $modalOnlineHad = ModalOnline::on($cawangan['mysql'])
+        ->where('kodcaw', '=', $kodcaw)
+        ->where('tarikh', '=', $current->toDateString())
+        ->value('had') ?? 0;
+
+    // Gabungan pendahuluan HQ + pendahuluan online
+    $totalPendahuluan = $glpend + $modalOnlineHad;
+
+    $bakiakhir = $bakiawal - $keluar + $masuk + $totalPendahuluan - $glser - $totpanjaran;
+
+    $updateVault = Vault::on($cawangan['mysql'])
+        ->where([['tarikh', '=', $current->toDateString()], ['kodcaw', '=', $kodcaw]])
+        ->update([
+            'pendahuluan' => $totalPendahuluan,
+            'serahan'     => $glser,
+            'bakiakhir'   => $bakiakhir,
+            'bakieod'     => $bakiakhir,
+        ]);
+
+    return response()->json($updateVault, 200);
+}
 
  public function create($kodcaw,Request $request)
  {
@@ -400,12 +428,14 @@ class VaultController extends Controller
       }
 
 
+      $bakiakhirVault = $vault ? $vault['bakiakhir'] : 0;
+
       if($total != 0)
       {
-         $totalbakiakhirtunai = $vault['bakiakhir'] + $total;
+         $totalbakiakhirtunai = $bakiakhirVault + $total;
       }else
       {
-         $totalbakiakhirtunai = $vault['bakiakhir'];
+         $totalbakiakhirtunai = $bakiakhirVault;
       }
 
       return response()->json($totalbakiakhirtunai);
@@ -479,25 +509,24 @@ class VaultController extends Controller
    }
 
    public function CalculationPendahuluanSerahan($kodcaw,Request $request)
-   {
-      $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
+{
+   $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
-      $serahanpkb = '1000/020';
-      $serahanjmc = '1000/026';
-      $pendahuluanpkb = '7000/102';
-      $pendahuluanjmc = '7000/106';
-      $serahankoperasi = '1000/090';
+   $serahanpkb = '1000/020';
+   $serahanjmc = '1000/026';
+   $pendahuluanpkb = '7000/102';
+   $pendahuluanjmc = '7000/106';
+   $serahankoperasi = '1000/090';
 
-      //Selepas Tawarruq
+   //Selepas Tawarruq
 
-      $serahanpkbTawarruq = GlDetail::on($cawangan['mysql'])
-         ->where('ktacct','=',$serahanpkb)
-         ->where('tarikh','<=', $request->tarikh)
-         ->where('tarikh','>','2021-03-24')
-         ->sum('serahan');
+   $serahanpkbTawarruq = GlDetail::on($cawangan['mysql'])
+      ->where('ktacct','=',$serahanpkb)
+      ->where('tarikh','<=', $request->tarikh)
+      ->where('tarikh','>','2021-03-24')
+      ->sum('serahan');
 
-
-      //Sebelum Tawarruq
+       //Sebelum Tawarruq
       if($kodcaw == 'KB2' || $kodcaw == 'WCY' || $kodcaw == '1STOP' || $kodcaw == 'ARM' || $kodcaw == 'APM' || $kodcaw == '010621' || $kodcaw == '010915' || $kodcaw == '020303')
       {
          $serahanpkb = GlDetail::on($cawangan['mysql'])
@@ -544,47 +573,53 @@ class VaultController extends Controller
 
 
 
-      //Selepas Tawarruq
+   //Selepas Tawarruq
 
-      $pendahuluanPKBtawarruq = GlDetail::on($cawangan['mysql'])
+   $pendahuluanPKBtawarruq = GlDetail::on($cawangan['mysql'])
       ->where('ktacct','=',$pendahuluanpkb)
       ->where([['tarikh','<=', $request->tarikh],['tarikh','>','2021-03-24']])
       ->sum('pendahuluan');
 
-      //Sebelum Tawarruq
+   //Sebelum Tawarruq
 
-      $pendahuluanPKB = GlDetail::on($cawangan['mysql'])
-         ->where('ktacct','=',$pendahuluanpkb)
-         ->where([['tarikh','<=', $request->tarikh],['tarikh','>','2013-12-31']])
-         ->sum('amaun');
-
-      $pendahuluanJMC = GlDetail::on($cawangan['mysql'])
-         ->where('ktacct','=','7000/106')
-         ->where([['tarikh','<=', $request->tarikh],['tarikh','>','2013-12-31']])
-         ->sum('amaun');
-
-      $pendahuluanpkblama = imbangdugalama::on($cawangan['mysql'])
-         ->sum('pendahuluan_pkb');
-
-      $pendahuluanjmclama = imbangdugalama::on($cawangan['mysql'])
-         ->sum('pendahuluan_jmc');
-
-      $total = $pendahuluanPKBtawarruq + $pendahuluanjmclama + $pendahuluanpkblama + $pendahuluanPKB + $pendahuluanJMC;
-
-      $pindahkekpkb = GlCode::on($cawangan['mysql'])
-      ->where('glcode','=',$serahankoperasi)
+   $pendahuluanPKB = GlDetail::on($cawangan['mysql'])
+      ->where('ktacct','=',$pendahuluanpkb)
+      ->where([['tarikh','<=', $request->tarikh],['tarikh','>','2013-12-31']])
       ->sum('amaun');
 
-      if($kodcaw == '011229')
-         $totalserahan -= 0.10;
+   $pendahuluanJMC = GlDetail::on($cawangan['mysql'])
+      ->where('ktacct','=','7000/106')
+      ->where([['tarikh','<=', $request->tarikh],['tarikh','>','2013-12-31']])
+      ->sum('amaun');
 
-      if($kodcaw == '011013')
-         $totalserahan += 641000;
+   $pendahuluanpkblama = imbangdugalama::on($cawangan['mysql'])
+      ->sum('pendahuluan_pkb');
 
-      $arraypend = ['pendahuluan' => $total,'serahan' => $totalserahan,'pindahkekpkb' => $pindahkekpkb];
+   $pendahuluanjmclama = imbangdugalama::on($cawangan['mysql'])
+      ->sum('pendahuluan_jmc');
 
-      return response()->json($arraypend);
-   }
+   //Pendahuluan Online (had)
+   $modalOnlineHad = ModalOnline::on($cawangan['mysql'])
+      ->where('kodcaw','=', $kodcaw)
+      ->where('tarikh','=', $request->tarikh)
+      ->value('had') ?? 0;
+
+   $total = $pendahuluanPKBtawarruq + $pendahuluanjmclama + $pendahuluanpkblama + $pendahuluanPKB + $pendahuluanJMC + $modalOnlineHad;
+
+   $pindahkekpkb = GlCode::on($cawangan['mysql'])
+   ->where('glcode','=',$serahankoperasi)
+   ->sum('amaun');
+
+   if($kodcaw == '011229')
+      $totalserahan -= 0.10;
+
+   if($kodcaw == '011013')
+      $totalserahan += 641000;
+
+   $arraypend = ['pendahuluan' => $total,'serahan' => $totalserahan,'pindahkekpkb' => $pindahkekpkb];
+
+   return response()->json($arraypend);
+}
 
 
    public function CalculationPendahuluanSerahanLejer($kodcaw,Request $request)
@@ -730,5 +765,19 @@ class VaultController extends Controller
 
       return response()->json($vault);
    }
+public function CalculationModalOnlineLejer($kodcaw, Request $request)
+{
+    $cawangan = Cawangan::on('mysql7')->where('kodcaw','=',$kodcaw)->first();
 
+    $tarikh = $request->hingga;
+
+    $modal_online = ModalOnline::on($cawangan['mysql'])
+        ->where('kodcaw', '=', $kodcaw)
+        ->where('tarikh', '=', $tarikh)
+        ->first();
+
+    return response()->json([
+        'had' => $modal_online ? floatval($modal_online->had) : 0,
+    ]);
+}
 }

app/Http/Controllers/WhatsappWebhookController.php

@@ -0,0 +1,122 @@
+<?php
+
+namespace App\Http\Controllers;
+
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Log;
+
+/**
+ * Meta WhatsApp Cloud webhook: verify challenge + acknowledge events.
+ * Sufficient for production onboarding; delivery statuses are logged only.
+ */
+class WhatsappWebhookController extends Controller
+{
+    /**
+     * GET /api/whatsapp/webhook
+     * Meta sends hub.mode, hub.verify_token, hub.challenge.
+     */
+    public function verify(Request $request)
+    {
+        $mode = $request->query('hub_mode', $request->query('hub.mode'));
+        $token = $request->query('hub_verify_token', $request->query('hub.verify_token'));
+        $challenge = $request->query('hub_challenge', $request->query('hub.challenge'));
+
+        $expected = (string) config('whatsapp.verify_token');
+
+        if ($mode === 'subscribe' && $expected !== '' && hash_equals($expected, (string) $token)) {
+            Log::info('WhatsApp webhook verified');
+            return response((string) $challenge, 200)
+                ->header('Content-Type', 'text/plain');
+        }
+
+        Log::warning('WhatsApp webhook verify failed', [
+            'mode' => $mode,
+            'token_match' => $expected !== '' && hash_equals($expected, (string) $token),
+        ]);
+
+        return response('Forbidden', 403);
+    }
+
+    /**
+     * POST /api/whatsapp/webhook
+     * Acknowledge quickly; optionally check X-Hub-Signature-256 when app secret is set.
+     */
+    public function handle(Request $request)
+    {
+        $raw = $request->getContent();
+
+        if (!$this->signatureOk($request, $raw)) {
+            Log::warning('WhatsApp webhook invalid signature');
+            return response('Invalid signature', 403);
+        }
+
+        $payload = json_decode($raw, true);
+        if (!is_array($payload)) {
+            return response('OK', 200);
+        }
+
+        try {
+            $this->logEvents($payload);
+        } catch (\Throwable $e) {
+            Log::error('WhatsApp webhook log failed: ' . $e->getMessage());
+        }
+
+        return response('OK', 200);
+    }
+
+    protected function signatureOk(Request $request, $raw)
+    {
+        $secret = trim((string) config('whatsapp.app_secret'));
+        if ($secret === '') {
+            return true;
+        }
+
+        $header = (string) $request->header('X-Hub-Signature-256', '');
+        if ($header === '' || strpos($header, 'sha256=') !== 0) {
+            return false;
+        }
+
+        $expected = 'sha256=' . hash_hmac('sha256', $raw, $secret);
+
+        return hash_equals($expected, $header);
+    }
+
+    protected function logEvents(array $payload)
+    {
+        $entries = $payload['entry'] ?? [];
+        if (!is_array($entries)) {
+            return;
+        }
+
+        foreach ($entries as $entry) {
+            $changes = $entry['changes'] ?? [];
+            if (!is_array($changes)) {
+                continue;
+            }
+
+            foreach ($changes as $change) {
+                $value = $change['value'] ?? [];
+                if (!is_array($value)) {
+                    continue;
+                }
+
+                foreach ($value['statuses'] ?? [] as $status) {
+                    Log::info('WhatsApp status', [
+                        'id' => $status['id'] ?? null,
+                        'status' => $status['status'] ?? null,
+                        'recipient' => $status['recipient_id'] ?? null,
+                        'errors' => $status['errors'] ?? null,
+                    ]);
+                }
+
+                foreach ($value['messages'] ?? [] as $message) {
+                    Log::info('WhatsApp inbound', [
+                        'from' => $message['from'] ?? null,
+                        'type' => $message['type'] ?? null,
+                        'id' => $message['id'] ?? null,
+                    ]);
+                }
+            }
+        }
+    }
+}

app/Http/Middleware/LogViewerPassword.php

@@ -0,0 +1,32 @@
+<?php
+
+namespace App\Http\Middleware;
+
+use Closure;
+
+class LogViewerPassword
+{
+    public function handle($request, Closure $next)
+    {
+        $passwordHash = config('logviewer.password');
+
+        if (!is_string($passwordHash) || $passwordHash === '') {
+            return response('Akses log belum dikonfigurasi.', 503)
+                ->header('Cache-Control', 'no-store');
+        }
+
+        $provided = $request->getPassword();
+        if ($request->getUser() !== 'logviewer' || !is_string($provided) ||
+            !password_verify($provided, $passwordHash)) {
+            return response('Kata laluan diperlukan untuk mengakses log.', 401, [
+                'WWW-Authenticate' => 'Basic realm="Log Viewer", charset="UTF-8"',
+                'Cache-Control' => 'no-store',
+            ]);
+        }
+
+        $response = $next($request);
+        $response->headers->set('Cache-Control', 'no-store');
+
+        return $response;
+    }
+}

app/Jobs/WhatsappPembiayaanOnlinePaid.php

@@ -0,0 +1,153 @@
+<?php
+
+namespace App\Jobs;
+
+use App\BlastWasap;
+use App\Customer;
+use App\Services\Whatsapp\WhatsappCloudClient;
+use Carbon\Carbon;
+use Illuminate\Support\Facades\Log;
+
+class WhatsappPembiayaanOnlinePaid extends Job
+{
+    public $kodcaw;
+    public $cawName;
+    public $nokp;
+    public $norujukan;
+    public $pinjaman;
+    public $namaBank;
+    public $noakaun;
+    public $tarikhBayaran;
+    public $noRujukanBayaran;
+
+    public function __construct(array $data)
+    {
+        $this->kodcaw = $data['kodcaw'] ?? null;
+        $this->cawName = $data['caw_name'] ?? null;
+        $this->nokp = $data['nokp'] ?? null;
+        $this->norujukan = $data['norujukan'] ?? null;
+        $this->pinjaman = $data['pinjaman'] ?? null;
+        $this->namaBank = $data['nama_bank'] ?? null;
+        $this->noakaun = $data['noakaun'] ?? null;
+        $this->tarikhBayaran = $data['tarikh_bayaran'] ?? null;
+        $this->noRujukanBayaran = $data['no_rujukan_bayaran'] ?? null;
+    }
+
+    public function handle()
+    {
+        $client = new WhatsappCloudClient();
+        $now = Carbon::now();
+
+        if (!$client->isConfigured()) {
+            Log::warning('WhatsApp Cloud skipped: token or phone_number_id missing', [
+                'norujukan' => $this->norujukan,
+            ]);
+            return;
+        }
+
+        $customer = Customer::on('mysql7')
+            ->where(function ($q) {
+                $q->where('kpbaru', $this->nokp)->orWhere('kplama', $this->nokp);
+            })
+            ->first();
+
+        $storedPhone = $customer ? ($customer->telefon ?: $customer->telefon2) : null;
+        $to = $client->normalizeMsisdn($storedPhone);
+
+        if (!config('whatsapp.whatsapp_cloud_enabled')) {
+            $admin = $client->normalizeMsisdn(env('ADMIN_PHONE_NUMBER'));
+            if (!$admin) {
+                Log::warning('WhatsApp Cloud skipped: ADMIN_PHONE_NUMBER required when WHATSAPP_ENABLED is false', [
+                    'norujukan' => $this->norujukan,
+                ]);
+                $this->logBlast($now, $storedPhone, 'skipped: ADMIN_PHONE_NUMBER empty');
+                return;
+            }
+            $to = $admin;
+        }
+
+        if (!$to) {
+            Log::warning('WhatsApp Cloud skipped: no phone', [
+                'nokp' => $this->nokp,
+                'norujukan' => $this->norujukan,
+            ]);
+            $this->logBlast($now, $storedPhone, 'skipped: no phone');
+            return;
+        }
+
+        $template = config('whatsapp.template', 'hello_world');
+        $lang = config('whatsapp.template_lang', 'en_US');
+        $bodyParams = $this->isHelloWorld($template) ? [] : $this->bodyParams();
+
+        try {
+            $response = $client->sendTemplate($to, $template, $lang, $bodyParams);
+            $this->logBlast($now, $to, $response->body());
+        } catch (\Throwable $e) {
+            Log::error('WhatsappPembiayaanOnlinePaid failed: ' . $e->getMessage(), [
+                'norujukan' => $this->norujukan,
+            ]);
+            $this->logBlast($now, $to, 'exception: ' . $e->getMessage());
+        }
+    }
+
+    protected function isHelloWorld($template)
+    {
+        return strtolower((string) $template) === 'hello_world';
+    }
+
+    /**
+     * Matches Meta template pembiayaan_online_paid (ms):
+     * AR-RAHN KoPKB: Pembiayaan bagi No. SAG *{{1}}* sebanyak *RM{{2}}*
+     * telah berjaya dikreditkan ke akaun *{{3}}* berakhir *{{4}}* pada *{{5}}*.
+     * Rujukan: *{{6}}*
+     *
+     * {{1}} SAG, {{2}} amaun, {{3}} nama bank/akaun, {{4}} 4 digit akhir, {{5}} tarikh, {{6}} rujukan bayaran
+     *
+     * @return array<int,string>
+     */
+    protected function bodyParams()
+    {
+        $bank = trim((string) $this->namaBank);
+        $tail = $this->accountTail($this->noakaun);
+
+        $tarikh = $this->tarikhBayaran
+            ? Carbon::parse($this->tarikhBayaran)->format('d/m/Y')
+            : Carbon::now()->format('d/m/Y');
+
+        return [
+            $this->norujukan ?: '-',
+            number_format((float) $this->pinjaman, 2, '.', ''),
+            $bank !== '' ? $bank : '-',
+            $tail !== '' ? $tail : '-',
+            $tarikh,
+            $this->noRujukanBayaran ?: '-',
+        ];
+    }
+
+    protected function accountTail($noakaun)
+    {
+        $digits = preg_replace('/\D+/', '', (string) $noakaun);
+        if ($digits === '') {
+            return '';
+        }
+
+        return substr($digits, -4);
+    }
+
+    protected function logBlast($now, $telefon, $status)
+    {
+        try {
+            $log = new BlastWasap();
+            $log->kodcaw = $this->kodcaw;
+            $log->nokp = $this->nokp;
+            $log->notelefon = $telefon;
+            $log->norujukan = $this->norujukan;
+            $log->status = is_string($status) ? $status : json_encode($status);
+            $log->created_at = $now;
+            $log->updated_at = $now;
+            $log->save();
+        } catch (\Throwable $e) {
+            Log::error('log_blast_wasap save failed: ' . $e->getMessage());
+        }
+    }
+}

app/KadarRebet.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class KadarRebet extends Model
+{
+    protected $table = 'kadar_rebet';
+    protected $connection = 'mysql7';
+    public $timestamps = false;
+
+    protected $fillable = [
+        'pembiayaan_min',
+        'pembiayaan_max',
+        'kadarrebet',
+    ];
+}

app/ModalOnline.php

@@ -0,0 +1,23 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class ModalOnline extends Model
+{
+    protected $table = 'modal_online';
+
+    protected $fillable = [
+        'tarikh',
+        'kodcaw',
+        'had',
+        'digunakan',
+        'baki',
+        'tambah',
+        'kurang',
+        'ditutup',
+        'ditutup_oleh',
+        'ditutup_at',
+    ];
+}

app/PembiayaanOnline.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class PembiayaanOnline extends Model
+{
+    protected $table = 'pembiayaan_online';
+
+    protected $fillable = [
+        'norujukan',
+        'nokp',
+        'nopelanggan',
+        'nama_pelanggan',
+        'kodcaw',
+        'pinjaman',
+        'kodbank',
+        'nama_bank',
+        'noakaun',
+        'nama_akaun',
+        'bukti_akaun_file_id',
+        'borang_file_id',
+        'status',
+        'reject_reason',
+        'rejected_by',
+        'rejected_at',
+        'batch_id',
+        'bukti_file_id',
+        'no_rujukan_bayaran',
+        'tarikh_bayaran',
+        'paid_at',
+        'created_by',
+        'pc_submitted_by',
+        'pc_verified_by',
+        'pc_verified_at',
+        'ops_by',
+        'nota',
+        'blast_sent',
+    ];
+}

app/RequestModalOnline.php

@@ -0,0 +1,21 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class RequestModalOnline extends Model
+{
+    protected $table = 'request_modal_online';
+    protected $connection = 'mysql7';
+
+    protected $fillable = [
+        'kodcaw',
+        'tarikh',
+        'amaun',
+        'dimohon_oleh',
+        'status',
+        'diluluskan_oleh',
+        'nota',
+    ];
+}

app/Services/Bsas/BsasClient.php

@@ -0,0 +1,193 @@
+<?php
+
+namespace App\Services\Bsas;
+
+use Illuminate\Http\Client\PendingRequest;
+use Illuminate\Support\Facades\Cache;
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+use RuntimeException;
+
+class BsasClient
+{
+    const TOKEN_CACHE_KEY = 'bsas.oauth.token';
+    const TOKEN_CACHE_SECONDS = 82800; // 23 hours
+
+    public function getAccessToken(): string
+    {
+        $cached = Cache::get(self::TOKEN_CACHE_KEY);
+        if (is_string($cached) && $cached !== '') {
+            return $cached;
+        }
+
+        // Drop bad cache entries (e.g. whole JSON array accidentally stored).
+        if ($cached !== null) {
+            Cache::forget(self::TOKEN_CACHE_KEY);
+        }
+
+        $tokenUrl = config('bsas.token_url');
+        $clientId = config('bsas.client_id');
+        $clientSecret = config('bsas.client_secret');
+
+        if (!$tokenUrl || !$clientId || !$clientSecret) {
+            throw new RuntimeException('BSAS OAuth is not configured (token_url / client_id / client_secret).');
+        }
+
+        $response = $this->http()
+            ->asForm()
+            ->post($tokenUrl, [
+                'grant_type' => 'client_credentials',
+                'client_id' => $clientId,
+                'client_secret' => $clientSecret,
+            ]);
+
+        $payload = $response->json();
+        if (!is_array($payload)) {
+            $payload = [];
+        }
+
+        if (!$response->successful()) {
+            Log::error('BSAS OAuth token request failed', [
+                'status' => $response->status(),
+                'body' => $payload ?: $response->body(),
+            ]);
+            throw new RuntimeException('Gagal mendapatkan BSAS access token.');
+        }
+
+        $token = $payload['access_token'] ?? null;
+        if (!is_string($token) || $token === '') {
+            Log::error('BSAS OAuth response missing string access_token', [
+                'body' => $payload,
+            ]);
+            throw new RuntimeException('BSAS OAuth response missing access_token.');
+        }
+
+        $expiresIn = (int) ($payload['expires_in'] ?? self::TOKEN_CACHE_SECONDS);
+        $ttl = max(60, min(self::TOKEN_CACHE_SECONDS, $expiresIn - 300));
+        Cache::put(self::TOKEN_CACHE_KEY, $token, $ttl);
+
+        return $token;
+    }
+
+    public function placeOrder(array $payload): array
+    {
+        return $this->requestJson('post', '/process/svc/bsas/order', $payload);
+    }
+
+    public function orderResult(string $uuid, array $body = []): array
+    {
+        $maxWait = (string) ($body['maxWaitTime'] ?? config('bsas.max_wait_time', 10));
+
+        $payload = [
+            'header' => [
+                'memberShortName' => config('bsas.member_short_name'),
+                'uuid' => $uuid,
+            ],
+            'body' => [
+                'serialNumbers' => (string) ($body['serialNumbers'] ?? '1'),
+                'forceYN' => (string) ($body['forceYN'] ?? 'Y'),
+                'maxWaitTime' => $maxWait,
+                'waitAllDoneYN' => (string) ($body['waitAllDoneYN'] ?? 'Y'),
+            ],
+        ];
+
+        // Long poll: client timeout must exceed BSAS maxWaitTime.
+        $timeout = max(
+            (int) config('bsas.http_timeout', 30),
+            (int) $maxWait + 20
+        );
+
+        return $this->requestJson('get', '/process/svc/bsas/orderResult', $payload, $timeout);
+    }
+
+    public function getBidEcert(string $ecertNo): array
+    {
+        return $this->requestEcert('/process/svc/bsas/bidXML', $ecertNo);
+    }
+
+    public function getOtcEcert(string $ecertNo): array
+    {
+        return $this->requestEcert('/process/svc/bsas/otcXML', $ecertNo);
+    }
+
+    public function getStbEcert(string $ecertNo): array
+    {
+        return $this->requestEcert('/process/svc/bsas/stbXML', $ecertNo);
+    }
+
+    protected function requestEcert(string $path, string $ecertNo): array
+    {
+        $payload = [
+            'input' => [
+                'ecertno' => $ecertNo,
+                'membershortname' => config('bsas.member_short_name'),
+            ],
+        ];
+
+        return $this->requestJson('get', $path, $payload);
+    }
+
+    protected function requestJson(string $method, string $path, array $payload, ?int $timeout = null): array
+    {
+        $url = rtrim(config('bsas.base_url'), '/') . '/' . ltrim($path, '/');
+        $timeout = $timeout ?? (int) config('bsas.http_timeout', 30);
+        $token = $this->getAccessToken();
+
+        $pending = $this->http($timeout)
+            ->withToken($token)
+            ->acceptJson();
+
+        if (strtolower($method) === 'get') {
+            $response = $pending
+                ->withHeaders(['Content-Type' => 'application/json'])
+                ->send('GET', $url, [
+                    'body' => json_encode($payload),
+                ]);
+        } else {
+            $response = $pending->asJson()->post($url, $payload);
+        }
+
+        $json = $response->json();
+        if (!is_array($json)) {
+            $body = $response->body();
+            $cloudflare = stripos($body, 'cloudflare') !== false || stripos($body, 'Attention Required') !== false;
+
+            if ($cloudflare) {
+                throw new RuntimeException(
+                    'BSAS blocked by Cloudflare (check IP whitelist). HTTP ' . $response->status()
+                );
+            }
+
+            throw new RuntimeException('BSAS returned invalid JSON response.');
+        }
+
+        if (!$response->successful()) {
+            Log::error('BSAS HTTP error', [
+                'method' => $method,
+                'url' => $url,
+                'status' => $response->status(),
+                'body' => $json,
+            ]);
+            throw new RuntimeException('BSAS request failed (HTTP ' . $response->status() . ').');
+        }
+
+        Log::info('BSAS API call', [
+            'method' => $method,
+            'path' => $path,
+            'status' => $response->status(),
+            'header' => $json['header'] ?? null,
+        ]);
+
+        return $json;
+    }
+
+    protected function http(?int $timeout = null): PendingRequest
+    {
+        $timeout = $timeout ?? (int) config('bsas.http_timeout', 30);
+
+        return Http::withOptions([
+            'timeout' => $timeout,
+            'connect_timeout' => min(15, $timeout),
+        ]);
+    }
+}

app/Services/Bsas/BsasOrderService.php

@@ -0,0 +1,374 @@
+<?php
+
+namespace App\Services\Bsas;
+
+use App\BsasOrder;
+use App\KomuditiTransaksi;
+use Carbon\Carbon;
+use Illuminate\Support\Facades\Log;
+use RuntimeException;
+
+class BsasOrderService
+{
+    /** @var BsasClient */
+    protected $client;
+
+    public function __construct(BsasClient $client = null)
+    {
+        $this->client = $client ?: new BsasClient();
+    }
+
+    /**
+     * Place BSAS order for a gadai Terima, long-poll result, fetch eCert.
+     *
+     * @param array $input norujukan, kodcaw, pinjaman, hargajualan, nama_pelanggan, teller
+     * @return BsasOrder
+     */
+    public function placeAndConfirm(array $input): BsasOrder
+    {
+        $norujukan = (string) ($input['norujukan'] ?? '');
+        $kodcaw = (string) ($input['kodcaw'] ?? '');
+        $pinjaman = round((float) ($input['pinjaman'] ?? 0), 2);
+        $hargajualan = round((float) ($input['hargajualan'] ?? 0), 2);
+        $counterParty = trim((string) ($input['nama_pelanggan'] ?? ''));
+        $createdBy = (string) ($input['teller'] ?? '');
+
+        if ($norujukan === '' || $kodcaw === '' || $pinjaman <= 0) {
+            throw new RuntimeException('BSAS order requires norujukan, kodcaw and pinjaman.');
+        }
+
+        $existing = BsasOrder::on('mysql7')
+            ->where('norujukan', $norujukan)
+            ->orderBy('id', 'desc')
+            ->first();
+
+        if ($existing && $existing->status === 'confirmed') {
+            if ($this->needsEcertFetch($existing)) {
+                $this->fetchAndStoreEcert($existing);
+            }
+            $this->ensureKomuditiTransaksi($existing, $createdBy);
+            return $existing->fresh();
+        }
+
+        if ($existing && in_array($existing->status, ['pending', 'submitted'], true) && !empty($existing->uuid)) {
+            return $this->completeSubmittedOrder($existing, $createdBy);
+        }
+
+        $serial = '1';
+        $payload = $this->buildOrderPayload($pinjaman, $hargajualan, $counterParty, $serial);
+
+        $order = BsasOrder::on('mysql7')->create([
+            'uuid' => null,
+            'norujukan' => $norujukan,
+            'kodcaw' => $kodcaw,
+            'serial_number' => $serial,
+            'product_code' => config('bsas.product_code'),
+            'bid_value' => $pinjaman,
+            'otc_murabaha_value' => $hargajualan,
+            'otc_counter_party' => $counterParty,
+            'status' => 'pending',
+            'request_payload' => $payload,
+            'created_by' => $createdBy,
+        ]);
+
+        try {
+            $orderResponse = $this->client->placeOrder($payload);
+        } catch (\Throwable $e) {
+            $order->status = 'failed';
+            $order->status_message = $e->getMessage();
+            $order->save();
+            throw $e;
+        }
+
+        $order->order_response = $orderResponse;
+        $uuid = data_get($orderResponse, 'header.uuid');
+        $errorCode = trim((string) data_get($orderResponse, 'header.errorCode', ''));
+        $errorMsg = trim((string) data_get($orderResponse, 'header.errorMsg', ''));
+
+        if ($errorCode !== '' || !$uuid) {
+            $order->status = 'failed';
+            $order->status_message = $errorMsg !== '' ? $errorMsg : 'BSAS order rejected (missing uuid or errorCode set).';
+            $order->save();
+            throw new RuntimeException($order->status_message);
+        }
+
+        $bodyStatus = data_get($orderResponse, 'body.0.statusCode');
+        if ($bodyStatus !== null && (int) $bodyStatus !== 0) {
+            $order->uuid = $uuid;
+            $order->status = 'failed';
+            $order->status_code = (int) $bodyStatus;
+            $order->status_message = (string) data_get($orderResponse, 'body.0.statusMessage', 'BSAS order body statusCode != 0');
+            $order->save();
+            throw new RuntimeException($order->status_message);
+        }
+
+        $order->uuid = $uuid;
+        $order->status = 'submitted';
+        $order->save();
+
+        return $this->completeSubmittedOrder($order, $createdBy);
+    }
+
+    /**
+     * Re-query orderResult / eCert for an existing uuid.
+     */
+    public function refreshByUuid(string $uuid): BsasOrder
+    {
+        $order = BsasOrder::on('mysql7')->where('uuid', $uuid)->first();
+        if (!$order) {
+            throw new RuntimeException('BSAS order not found for uuid.');
+        }
+
+        if ($order->status === 'confirmed') {
+            if ($this->needsEcertFetch($order)) {
+                $this->fetchAndStoreEcert($order);
+            }
+            return $order->fresh();
+        }
+
+        return $this->completeSubmittedOrder($order, (string) $order->created_by);
+    }
+
+    protected function completeSubmittedOrder(BsasOrder $order, string $createdBy): BsasOrder
+    {
+        if (empty($order->uuid)) {
+            throw new RuntimeException('BSAS order has no uuid to poll.');
+        }
+
+        $result = $this->longPollOrderResult($order->uuid, (string) $order->serial_number);
+        $order->result_response = $result;
+
+        $headerError = trim((string) data_get($result, 'header.errorCode', ''));
+        $headerMsg = trim((string) data_get($result, 'header.errorMsg', ''));
+        $statusCode = data_get($result, 'body.0.statusCode');
+        $statusMessage = (string) data_get($result, 'body.0.statusMessage', '');
+        $bidErrNo = trim((string) data_get($result, 'body.0.bidErrNo', ''));
+        $otcErrNo = trim((string) data_get($result, 'body.0.otcErrNo', ''));
+        $stbErrNo = trim((string) data_get($result, 'body.0.stbErrNo', ''));
+        $bidMsg = trim((string) data_get($result, 'body.0.bidMsg', ''));
+        $otcMsg = trim((string) data_get($result, 'body.0.otcMsg', ''));
+        $stbMsg = trim((string) data_get($result, 'body.0.stbMsg', ''));
+        $ecertNo = $this->extractEcertNo($result, $order->order_response);
+
+        if ($headerError !== '') {
+            $order->status = 'failed';
+            $order->status_code = is_numeric($statusCode) ? (int) $statusCode : null;
+            $order->status_message = $headerMsg !== '' ? $headerMsg : 'BSAS orderResult header errorCode set.';
+            $order->save();
+            throw new RuntimeException($order->status_message);
+        }
+
+        // Live BSAS result often has no statusCode; success is ecertNo and/or bid/otc/stb ErrNo=999 (OK).
+        $successByStatusCode = $statusCode !== null && (int) $statusCode === 0;
+        $successByErrNo = ($bidErrNo === '999' || strtoupper($bidMsg) === 'OK')
+            && ($otcErrNo === '999' || strtoupper($otcMsg) === 'OK')
+            && ($stbErrNo === '999' || strtoupper($stbMsg) === 'OK');
+        $successByEcert = $ecertNo !== null && $ecertNo !== '';
+
+        if (!$successByStatusCode && !$successByErrNo && !$successByEcert) {
+            if ($statusCode !== null && (int) $statusCode !== 0) {
+                $order->status = 'failed';
+                $order->status_code = (int) $statusCode;
+                $order->status_message = $statusMessage !== '' ? $statusMessage : 'BSAS orderResult statusCode != 0';
+                $order->save();
+                throw new RuntimeException($order->status_message);
+            }
+
+            $order->status = 'submitted';
+            $order->status_message = 'BSAS orderResult belum selesai / tiada ecert.';
+            $order->save();
+            throw new RuntimeException('BSAS orderResult belum selesai. Sila cuba semula.');
+        }
+
+        $order->status_code = $statusCode !== null ? (int) $statusCode : 0;
+        $order->status_message = $statusMessage !== '' ? $statusMessage : ($bidMsg ?: 'OK');
+        $order->status = 'confirmed';
+        if ($ecertNo) {
+            $order->e_cert_no = $ecertNo;
+        }
+        $order->save();
+
+        if ($this->needsEcertFetch($order)) {
+            $this->fetchAndStoreEcert($order);
+        }
+
+        if (empty($order->e_cert_no)) {
+            Log::warning('BSAS order confirmed but ecertno missing', [
+                'norujukan' => $order->norujukan,
+                'uuid' => $order->uuid,
+            ]);
+        }
+
+        $this->ensureKomuditiTransaksi($order, $createdBy);
+
+        return $order->fresh();
+    }
+
+    protected function longPollOrderResult(string $uuid, string $serial): array
+    {
+        $retries = max(1, (int) config('bsas.order_result_retries', 2));
+        $last = [];
+
+        for ($i = 0; $i < $retries; $i++) {
+            $last = $this->client->orderResult($uuid, [
+                'serialNumbers' => $serial,
+                'forceYN' => 'Y',
+                'maxWaitTime' => (string) config('bsas.max_wait_time', 10),
+                'waitAllDoneYN' => 'Y',
+            ]);
+
+            // Done when statusCode is set, or bid, OTC and STB have all reported.
+            $bidDone = trim((string) data_get($last, 'body.0.bidErrNo', '')) !== '';
+            $otcDone = trim((string) data_get($last, 'body.0.otcErrNo', '')) !== '';
+            $stbDone = trim((string) data_get($last, 'body.0.stbErrNo', '')) !== '';
+            $hasEcert = trim((string) data_get($last, 'body.0.ecertNo', '')) !== ''
+                || trim((string) data_get($last, 'body.0.eCertNo', '')) !== '';
+
+            if (
+                data_get($last, 'body.0.statusCode') !== null
+                || ($bidDone && $otcDone && $stbDone)
+                || ($hasEcert && $stbDone)
+            ) {
+                return $last;
+            }
+        }
+
+        return $last;
+    }
+
+    protected function needsEcertFetch(BsasOrder $order): bool
+    {
+        return empty($order->bid_ecert_response)
+            || empty($order->otc_ecert_response)
+            || empty($order->stb_ecert_response);
+    }
+
+    protected function fetchAndStoreEcert(BsasOrder $order): void
+    {
+        $ecertNo = $order->e_cert_no;
+        if (!$ecertNo) {
+            $ecertNo = $this->extractEcertNo($order->result_response, $order->order_response);
+            if ($ecertNo) {
+                $order->e_cert_no = $ecertNo;
+                $order->save();
+            }
+        }
+
+        if (!$ecertNo) {
+            return;
+        }
+
+        $calls = [
+            'bid_ecert_response' => 'getBidEcert',
+            'otc_ecert_response' => 'getOtcEcert',
+            'stb_ecert_response' => 'getStbEcert',
+        ];
+
+        foreach ($calls as $column => $method) {
+            if (!empty($order->{$column})) {
+                continue;
+            }
+
+            try {
+                $ecert = $this->client->{$method}($ecertNo);
+                $order->{$column} = $ecert;
+                if ($column === 'otc_ecert_response' && empty($order->e_cert_no) && !empty($ecert['ECERTNO'])) {
+                    $order->e_cert_no = $ecert['ECERTNO'];
+                }
+                $order->save();
+            } catch (\Throwable $e) {
+                Log::error('BSAS eCert fetch failed after confirmed order', [
+                    'norujukan' => $order->norujukan,
+                    'uuid' => $order->uuid,
+                    'e_cert_no' => $ecertNo,
+                    'certificate' => $column,
+                    'error' => $e->getMessage(),
+                ]);
+            }
+        }
+    }
+
+    protected function ensureKomuditiTransaksi(BsasOrder $order, string $teller): void
+    {
+        $exists = KomuditiTransaksi::on('mysql7')
+            ->where('norujukan', $order->norujukan)
+            ->first();
+
+        if ($exists) {
+            return;
+        }
+
+        $current = Carbon::now();
+        KomuditiTransaksi::on('mysql7')->create([
+            'unit_komuditi' => round((float) $order->bid_value, 2),
+            'nosijil' => $order->e_cert_no ?: $order->uuid,
+            'norujukan' => $order->norujukan,
+            'kodcaw' => $order->kodcaw,
+            'teller' => $teller !== '' ? $teller : $order->created_by,
+            'masa' => $current->toTimeString(),
+            'tarikh' => $current->toDateString(),
+        ]);
+    }
+
+    protected function buildOrderPayload(float $pinjaman, float $hargajualan, string $counterParty, string $serial): array
+    {
+        return [
+            'header' => [
+                'memberShortName' => config('bsas.member_short_name'),
+                'uuid' => $this->uuidV4(),
+            ],
+            'body' => [
+                'serialNumber' => $serial,
+                'bidOption' => 'Y',
+                'otcOption' => 'Y',
+                'stbOption' => 'Y',
+                'productCode' => config('bsas.product_code'),
+                'purchaseType' => 'P',
+                'clientName' => '',
+                'currency' => 'MYR',
+                'bidValue' => number_format($pinjaman, 2, '.', ''),
+                'valueDate' => Carbon::now()->format('Ymd'),
+                'tenor' => config('bsas.tenor'),
+                'otcCounterParty' => $counterParty,
+                'otcMurabaha' => '',
+                'otcMurabahaValue' => number_format($hargajualan, 2, '.', ''),
+                'eCertNo' => '',
+            ],
+        ];
+    }
+
+    /**
+     * Best-effort extract ecert number from result/order payloads.
+     */
+    protected function extractEcertNo($result, $orderResponse): ?string
+    {
+        $candidates = [
+            data_get($result, 'body.0.eCertNo'),
+            data_get($result, 'body.0.ecertNo'),
+            data_get($result, 'body.0.ECERTNO'),
+            data_get($result, 'body.0.ecertno'),
+            data_get($result, 'body.0.certificateNo'),
+            data_get($orderResponse, 'body.0.eCertNo'),
+            data_get($orderResponse, 'body.0.ecertNo'),
+            data_get($orderResponse, 'body.0.ECERTNO'),
+        ];
+
+        foreach ($candidates as $value) {
+            $value = trim((string) $value);
+            if ($value !== '') {
+                return $value;
+            }
+        }
+
+        return null;
+    }
+
+    protected function uuidV4(): string
+    {
+        $data = random_bytes(16);
+        $data[6] = chr((ord($data[6]) & 0x0f) | 0x40);
+        $data[8] = chr((ord($data[8]) & 0x3f) | 0x80);
+
+        return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($data), 4));
+    }
+}

app/Services/PembiayaanOnline/ModalOnlineService.php

@@ -0,0 +1,918 @@
+<?php
+
+namespace App\Services\PembiayaanOnline;
+
+use App\Cawangan;
+use App\Feature;
+use App\ModalOnline;
+use App\RequestModalOnline;
+use App\Services\StaffNotificationClient;
+use Carbon\Carbon;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Log;
+
+class ModalOnlineService
+{
+    /**
+     * @return array{ok:bool,status:int,payload:mixed,mysql?:string}
+     */
+    public function resolveMysql($kodcaw)
+    {
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
+
+        if (!$cawangan) {
+            return [
+                'ok' => false,
+                'status' => 404,
+                'payload' => ['message' => 'Cawangan tidak dijumpai'],
+            ];
+        }
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => null,
+            'mysql' => $cawangan['mysql'],
+        ];
+    }
+
+    protected function todayDate()
+    {
+        return Carbon::now()->toDateString();
+    }
+
+    protected function findPending($kodcaw)
+    {
+        return RequestModalOnline::on('mysql7')
+            ->where('kodcaw', $kodcaw)
+            ->where('status', 'PENDING')
+            ->first();
+    }
+
+    protected function pendingPayload($pending)
+    {
+        return $pending ? $pending->toArray() : null;
+    }
+
+    protected function missingSnapshot($kodcaw, $tarikh, $pending = null)
+    {
+        return [
+            'tarikh' => $tarikh,
+            'kodcaw' => $kodcaw,
+            'had' => 0.00,
+            'digunakan' => 0.00,
+            'baki' => 0.00,
+            'tambah' => 0.00,
+            'kurang' => 0.00,
+            'ditutup' => 0,
+            'missing' => true,
+            'pending_request' => $this->pendingPayload($pending),
+        ];
+    }
+
+    protected function recalcBaki($modal)
+    {
+        $modal->baki = round(
+            (float) $modal->had + (float) $modal->tambah - (float) $modal->kurang - (float) $modal->digunakan,
+            2
+        );
+    }
+
+    /**
+     * Get today's modal_online row. Does not create — PC must request had from Operasi.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function get($kodcaw)
+    {
+        $resolved = $this->resolveMysql($kodcaw);
+        if (!$resolved['ok']) {
+            return $resolved;
+        }
+
+        $mysql = $resolved['mysql'];
+        $tarikh = $this->todayDate();
+        $pending = $this->findPending($kodcaw);
+
+        $modal = ModalOnline::on($mysql)
+            ->where('kodcaw', $kodcaw)
+            ->where('tarikh', $tarikh)
+            ->first();
+
+        if (!$modal) {
+            return [
+                'ok' => true,
+                'status' => 200,
+                'payload' => $this->missingSnapshot($kodcaw, $tarikh, $pending),
+            ];
+        }
+
+        $payload = $modal->toArray();
+        $payload['missing'] = false;
+        $payload['pending_request'] = $this->pendingPayload($pending);
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => $payload,
+        ];
+    }
+
+    /**
+     * @deprecated Use get(). Kept so existing callers do not auto-seed RM100k.
+     */
+    public function getOrCreate($kodcaw)
+    {
+        return $this->get($kodcaw);
+    }
+
+    /**
+     * Reserve amount inside an existing branch DB connection (caller may wrap in transaction).
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function reserveAmountOnConnection($mysql, $kodcaw, $amaun, $tarikh = null)
+    {
+        $amaun = round((float) $amaun, 2);
+        if ($amaun <= 0) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'Amaun tidak sah'],
+            ];
+        }
+
+        $tarikh = $tarikh ?: Carbon::now()->toDateString();
+
+        $modal = ModalOnline::on($mysql)
+            ->where('kodcaw', $kodcaw)
+            ->where('tarikh', $tarikh)
+            ->lockForUpdate()
+            ->first();
+
+        if (!$modal) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Modal online belum diwujudkan. Sila mohon had daripada Operasi terlebih dahulu.',
+                    'missing' => true,
+                ],
+            ];
+        }
+
+        if ((int) ($modal->ditutup ?? 0) === 1) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Modal online hari ini sudah ditutup (EOD)',
+                    'modal_online' => $modal,
+                ],
+            ];
+        }
+
+        if ((float) $modal->baki < $amaun) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Baki modal online tidak mencukupi',
+                    'baki' => (float) $modal->baki,
+                    'amaun' => $amaun,
+                ],
+            ];
+        }
+
+        $modal->digunakan = round((float) $modal->digunakan + $amaun, 2);
+        $modal->baki = round(
+            (float) $modal->had + (float) $modal->tambah - (float) $modal->kurang - (float) $modal->digunakan,
+            2
+        );
+        $modal->save();
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => $modal,
+        ];
+    }
+
+    /**
+     * Reserve amount from today's online float (transactional).
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function reserve($kodcaw, $amaun)
+    {
+        $resolved = $this->resolveMysql($kodcaw);
+        if (!$resolved['ok']) {
+            return $resolved;
+        }
+
+        if (!Feature::enabled($kodcaw, Feature::PEMBIAYAAN_ONLINE)) {
+            return Feature::denied('Pembiayaan online tidak diaktifkan untuk cawangan ini');
+        }
+
+        $mysql = $resolved['mysql'];
+        $amaun = round((float) $amaun, 2);
+
+        if ($amaun <= 0) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'Amaun tidak sah'],
+            ];
+        }
+
+        try {
+            return DB::connection($mysql)->transaction(function () use ($mysql, $kodcaw, $amaun) {
+                return $this->reserveAmountOnConnection($mysql, $kodcaw, $amaun);
+            });
+        } catch (\Throwable $e) {
+            Log::error('ModalOnline reserve failed: ' . $e->getMessage());
+            return [
+                'ok' => false,
+                'status' => 500,
+                'payload' => ['message' => 'Gagal reserve modal online'],
+            ];
+        }
+    }
+
+    /**
+     * Had is no longer auto-seeded. Returns how many branches already have a row today.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function initiate($zone = 'all')
+    {
+        $current = $this->todayDate();
+
+        if ($zone == 'all') {
+            $cawanganAll = Cawangan::on('mysql7')->get();
+        } else {
+            $cawanganAll = Cawangan::on('mysql7')->where('zone', $zone)->get();
+        }
+
+        $existing = 0;
+        $missing = 0;
+
+        foreach ($cawanganAll as $cawangan) {
+            try {
+                $exists = ModalOnline::on($cawangan['mysql'])
+                    ->where('kodcaw', $cawangan['kodcaw'])
+                    ->where('tarikh', $current)
+                    ->exists();
+
+                if ($exists) {
+                    $existing++;
+                } else {
+                    $missing++;
+                }
+            } catch (\Throwable $e) {
+                Log::warning('initiate modal_online skip ' . $cawangan['kodcaw'] . ': ' . $e->getMessage());
+            }
+        }
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => [
+                'tarikh' => $current,
+                'created' => 0,
+                'existing' => $existing,
+                'missing' => $missing,
+                'message' => 'Modal online tidak di-initiate automatik. PC perlu mohon had daripada Operasi.',
+            ],
+        ];
+    }
+
+    /**
+     * PC request opening had (or extra top-up) from Operasi.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function requestTopUp($kodcaw, $amaun, $dimohonOleh, $nota = null)
+    {
+        $resolved = $this->resolveMysql($kodcaw);
+        if (!$resolved['ok']) {
+            return $resolved;
+        }
+        $mysql = $resolved['mysql'];
+
+        if (!Feature::enabled($kodcaw, Feature::PEMBIAYAAN_ONLINE)) {
+            return Feature::denied('Pembiayaan online tidak diaktifkan untuk cawangan ini');
+        }
+
+        $amaun = round((float) $amaun, 2);
+        $dimohonOleh = trim((string) $dimohonOleh);
+
+        if ($amaun <= 0) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'Amaun tidak sah'],
+            ];
+        }
+        if ($dimohonOleh === '') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'dimohon_oleh diperlukan'],
+            ];
+        }
+
+        $tarikh = $this->todayDate();
+        $pending = $this->findPending($kodcaw);
+
+        if ($pending) {
+            return [
+                'ok' => false,
+                'status' => 409,
+                'payload' => [
+                    'message' => 'Masih ada permohonan modal online PENDING untuk cawangan ini',
+                    'request' => $pending,
+                ],
+            ];
+        }
+
+        $modal = ModalOnline::on($mysql)
+            ->where('kodcaw', $kodcaw)
+            ->where('tarikh', $tarikh)
+            ->first();
+
+        if ($modal && (int) ($modal->ditutup ?? 0) === 1) {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Modal online hari ini sudah ditutup (EOD). Tidak boleh mohon.',
+                    'modal_online' => $modal,
+                ],
+            ];
+        }
+
+        $jenis = $modal ? 'TOPUP' : 'HAD';
+
+        $request = RequestModalOnline::on('mysql7')->create([
+            'kodcaw' => $kodcaw,
+            'tarikh' => $tarikh,
+            'amaun' => $amaun,
+            'dimohon_oleh' => $dimohonOleh,
+            'status' => 'PENDING',
+            'nota' => $nota,
+        ]);
+
+        $this->notifyOperasiModalRequest($kodcaw, $request, $jenis);
+
+        return [
+            'ok' => true,
+            'status' => 201,
+            'payload' => [
+                'request' => $request,
+                'jenis' => $jenis,
+                'modal_online' => $modal ?: $this->missingSnapshot($kodcaw, $tarikh, $request),
+            ],
+        ];
+    }
+
+    /**
+     * Inbox for all operasi staff. Failures must not block the request.
+     *
+     * @param  string  $kodcaw
+     * @param  \App\RequestModalOnline  $request
+     * @param  string  $jenis
+     * @return void
+     */
+    protected function notifyOperasiModalRequest($kodcaw, $request, $jenis)
+    {
+        try {
+            app(StaffNotificationClient::class)->notify([
+                'type' => 'modal_online.pending_operasi',
+                'cawangan' => $kodcaw,
+                'audience' => ['role' => 'operasi'],
+                'data' => [
+                    'request_id' => $request->id,
+                    'amaun' => (float) $request->amaun,
+                    'dimohon_oleh' => $request->dimohon_oleh,
+                    'jenis' => $jenis,
+                    'nota' => $request->nota,
+                    'cawangan_nama' => $this->cawanganNama($kodcaw),
+                ],
+            ]);
+        } catch (\Throwable $e) {
+            Log::warning('Operasi modal-online notification failed: '.$e->getMessage(), [
+                'kodcaw' => $kodcaw,
+                'request_id' => $request->id,
+            ]);
+        }
+    }
+
+    /**
+     * @param  string  $kodcaw
+     * @return string
+     */
+    protected function cawanganNama($kodcaw)
+    {
+        $cawangan = Cawangan::on('mysql7')->where('kodcaw', '=', $kodcaw)->first();
+        if (!$cawangan) {
+            return $kodcaw;
+        }
+
+        $nama = trim((string) $cawangan->nama_cawangan);
+
+        return $nama !== '' ? $nama : $kodcaw;
+    }
+
+    /**
+     * List top-up requests.
+     * For PC: pass kodcaw. For Operasi: omit kodcaw (all branches).
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function listTopUpRequests($kodcaw = null, $status = null, $tarikh = null)
+    {
+        $query = RequestModalOnline::on('mysql7')->newQuery();
+
+        if ($kodcaw) {
+            $query->where('kodcaw', $kodcaw);
+        }
+        if ($status) {
+            $query->where('status', $status);
+        }
+        if ($tarikh) {
+            $query->where('tarikh', $tarikh);
+        }
+
+        $rows = $query->orderBy('id', 'desc')->get();
+
+        $cawMap = [];
+        if (!$kodcaw) {
+            foreach (Cawangan::on('mysql7')->get() as $caw) {
+                $cawMap[$caw->kodcaw] = $caw->nama_cawangan;
+            }
+        }
+
+        $data = [];
+        foreach ($rows as $row) {
+            $item = $row->toArray();
+            if (!$kodcaw) {
+                $item['cawangan_nama'] = $cawMap[$row->kodcaw] ?? null;
+            }
+            $data[] = $item;
+        }
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => [
+                'bilangan' => count($data),
+                'data' => $data,
+            ],
+        ];
+    }
+
+    /**
+     * Operasi approve: first request of the day sets had; later requests add tambah.
+     * Optional $amaunOverride lets operasi lulus a different amount than dimohon.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function approveTopUp($requestId, $diluluskanOleh, $nota = null, $expectedKodcaw = null, $amaunOverride = null)
+    {
+        $diluluskanOleh = trim((string) $diluluskanOleh);
+        if ($diluluskanOleh === '') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'diluluskan_oleh diperlukan'],
+            ];
+        }
+
+        $req = RequestModalOnline::on('mysql7')->where('id', $requestId)->first();
+        if (!$req) {
+            return [
+                'ok' => false,
+                'status' => 404,
+                'payload' => ['message' => 'Permohonan tidak dijumpai'],
+            ];
+        }
+
+        if ($expectedKodcaw && $req->kodcaw !== $expectedKodcaw) {
+            return [
+                'ok' => false,
+                'status' => 404,
+                'payload' => ['message' => 'Permohonan tidak dijumpai'],
+            ];
+        }
+
+        if ($req->status !== 'PENDING') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Hanya permohonan PENDING boleh diluluskan',
+                    'status' => $req->status,
+                ],
+            ];
+        }
+
+        $kodcaw = $req->kodcaw;
+        $resolved = $this->resolveMysql($kodcaw);
+        if (!$resolved['ok']) {
+            return $resolved;
+        }
+        $mysql = $resolved['mysql'];
+        $amaunDimohon = round((float) $req->amaun, 2);
+        $amaun = $amaunDimohon;
+        if ($amaunOverride !== null && $amaunOverride !== '') {
+            $amaun = round((float) $amaunOverride, 2);
+            if ($amaun <= 0) {
+                return [
+                    'ok' => false,
+                    'status' => 422,
+                    'payload' => ['message' => 'Amaun diluluskan tidak sah'],
+                ];
+            }
+        }
+        $tarikh = $this->todayDate();
+
+        try {
+            $applied = DB::connection($mysql)->transaction(function () use ($mysql, $kodcaw, $tarikh, $amaun) {
+                $modal = ModalOnline::on($mysql)
+                    ->where('kodcaw', $kodcaw)
+                    ->where('tarikh', $tarikh)
+                    ->lockForUpdate()
+                    ->first();
+
+                $jenis = 'TOPUP';
+
+                if (!$modal) {
+                    $modal = ModalOnline::on($mysql)->create([
+                        'tarikh' => $tarikh,
+                        'kodcaw' => $kodcaw,
+                        'had' => $amaun,
+                        'digunakan' => 0.00,
+                        'baki' => $amaun,
+                        'tambah' => 0.00,
+                        'kurang' => 0.00,
+                        'ditutup' => 0,
+                    ]);
+                    $modal = ModalOnline::on($mysql)
+                        ->where('id', $modal->id)
+                        ->lockForUpdate()
+                        ->first();
+                    $jenis = 'HAD';
+                } else {
+                    if ((int) ($modal->ditutup ?? 0) === 1) {
+                        throw new \RuntimeException('MODAL_ONLINE_CLOSED');
+                    }
+
+                    $modal->tambah = round((float) $modal->tambah + $amaun, 2);
+                    $this->recalcBaki($modal);
+                    $modal->save();
+                }
+
+                return ['modal' => $modal, 'jenis' => $jenis];
+            });
+
+            $modal = $applied['modal'];
+            $jenis = $applied['jenis'];
+
+            $req->status = 'APPROVED';
+            $req->diluluskan_oleh = $diluluskanOleh;
+            $req->amaun = $amaun;
+
+            $notes = [];
+            if (abs($amaun - $amaunDimohon) >= 0.01) {
+                $notes[] = 'Amaun dimohon RM ' . number_format($amaunDimohon, 2)
+                    . ', diluluskan RM ' . number_format($amaun, 2);
+            }
+            if ($nota !== null && trim((string) $nota) !== '') {
+                $notes[] = trim((string) $nota);
+            }
+            if ($notes) {
+                $existing = trim((string) $req->nota);
+                $req->nota = $existing === ''
+                    ? implode(' | ', $notes)
+                    : $existing . ' | ' . implode(' | ', $notes);
+            }
+            $req->save();
+
+            return [
+                'ok' => true,
+                'status' => 200,
+                'payload' => [
+                    'request' => $req->fresh(),
+                    'jenis' => $jenis,
+                    'modal_online' => $modal,
+                ],
+            ];
+        } catch (\Throwable $e) {
+            if ($e->getMessage() === 'MODAL_ONLINE_CLOSED') {
+                return [
+                    'ok' => false,
+                    'status' => 422,
+                    'payload' => ['message' => 'Modal online hari ini sudah ditutup (EOD). Tidak boleh lulus permohonan.'],
+                ];
+            }
+            Log::error('approveTopUp failed: ' . $e->getMessage());
+            return [
+                'ok' => false,
+                'status' => 500,
+                'payload' => ['message' => 'Gagal lulus permohonan modal online'],
+            ];
+        }
+    }
+
+    /**
+     * Operasi reject top-up request.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function rejectTopUp($requestId, $diluluskanOleh, $nota = null, $expectedKodcaw = null)
+    {
+        $diluluskanOleh = trim((string) $diluluskanOleh);
+        if ($diluluskanOleh === '') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'diluluskan_oleh diperlukan'],
+            ];
+        }
+
+        $req = RequestModalOnline::on('mysql7')->where('id', $requestId)->first();
+        if (!$req) {
+            return [
+                'ok' => false,
+                'status' => 404,
+                'payload' => ['message' => 'Permohonan tidak dijumpai'],
+            ];
+        }
+
+        if ($expectedKodcaw && $req->kodcaw !== $expectedKodcaw) {
+            return [
+                'ok' => false,
+                'status' => 404,
+                'payload' => ['message' => 'Permohonan tidak dijumpai'],
+            ];
+        }
+
+        if ($req->status !== 'PENDING') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => [
+                    'message' => 'Hanya permohonan PENDING boleh ditolak',
+                    'status' => $req->status,
+                ],
+            ];
+        }
+
+        $req->status = 'REJECTED';
+        $req->diluluskan_oleh = $diluluskanOleh;
+        if ($nota !== null && trim((string) $nota) !== '') {
+            $req->nota = trim(
+                trim((string) $req->nota) === ''
+                    ? (string) $nota
+                    : $req->nota . ' | ' . $nota
+            );
+        }
+        $req->save();
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => ['request' => $req],
+        ];
+    }
+
+    /**
+     * EOD close for one branch: return unused baki via kurang, mark ditutup.
+     * Also auto-rejects PENDING top-up requests for the branch.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function close($kodcaw, $ditutupOleh)
+    {
+        $resolved = $this->resolveMysql($kodcaw);
+        if (!$resolved['ok']) {
+            return $resolved;
+        }
+        $mysql = $resolved['mysql'];
+
+        $ditutupOleh = trim((string) $ditutupOleh);
+        if ($ditutupOleh === '') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'ditutup_oleh diperlukan'],
+            ];
+        }
+
+        $tarikh = Carbon::now()->toDateString();
+        $now = Carbon::now();
+
+        try {
+            $result = DB::connection($mysql)->transaction(function () use ($mysql, $kodcaw, $tarikh, $ditutupOleh, $now) {
+                $modal = ModalOnline::on($mysql)
+                    ->where('kodcaw', $kodcaw)
+                    ->where('tarikh', $tarikh)
+                    ->lockForUpdate()
+                    ->first();
+
+                if (!$modal) {
+                    return [
+                        'ok' => false,
+                        'status' => 404,
+                        'payload' => [
+                            'message' => 'Tiada modal online hari ini untuk ditutup. Teller belum mohon / PC belum lulus had.',
+                            'missing' => true,
+                        ],
+                    ];
+                }
+
+                if ((int) ($modal->ditutup ?? 0) === 1) {
+                    return [
+                        'ok' => false,
+                        'status' => 409,
+                        'payload' => [
+                            'message' => 'Modal online sudah ditutup untuk hari ini',
+                            'modal_online' => $modal,
+                        ],
+                    ];
+                }
+
+                $unused = round((float) $modal->baki, 2);
+                $modal->kurang = round((float) $modal->kurang + $unused, 2);
+                $modal->baki = round(
+                    (float) $modal->had + (float) $modal->tambah - (float) $modal->kurang - (float) $modal->digunakan,
+                    2
+                );
+                $modal->ditutup = 1;
+                $modal->ditutup_oleh = $ditutupOleh;
+                $modal->ditutup_at = $now;
+                $modal->save();
+
+                return [
+                    'ok' => true,
+                    'status' => 200,
+                    'payload' => [
+                        'modal_online' => $modal,
+                        'dikembalikan' => $unused,
+                    ],
+                ];
+            });
+
+            if (!$result['ok']) {
+                return $result;
+            }
+
+            $pendingRejected = RequestModalOnline::on('mysql7')
+                ->where('kodcaw', $kodcaw)
+                ->where('status', 'PENDING')
+                ->get();
+
+            foreach ($pendingRejected as $req) {
+                $req->status = 'REJECTED';
+                $req->diluluskan_oleh = $ditutupOleh;
+                $tag = 'Auto reject: EOD close';
+                $req->nota = trim((string) $req->nota) === ''
+                    ? $tag
+                    : trim($req->nota) . ' | ' . $tag;
+                $req->save();
+            }
+
+            $result['payload']['pending_topup_ditolak'] = $pendingRejected->count();
+            return $result;
+        } catch (\Throwable $e) {
+            Log::error('modal online close failed: ' . $e->getMessage());
+            return [
+                'ok' => false,
+                'status' => 500,
+                'payload' => ['message' => 'Gagal tutup modal online'],
+            ];
+        }
+    }
+
+    /**
+     * Operasi: list today's modal_online across branches.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function listToday($zone = 'all', $tarikh = null)
+    {
+        $tarikh = $tarikh ?: Carbon::now()->toDateString();
+
+        if ($zone == 'all') {
+            $cawanganAll = Cawangan::on('mysql7')->get();
+        } else {
+            $cawanganAll = Cawangan::on('mysql7')->where('zone', $zone)->get();
+        }
+
+        $rows = [];
+        foreach ($cawanganAll as $cawangan) {
+            try {
+                $modal = ModalOnline::on($cawangan['mysql'])
+                    ->where('kodcaw', $cawangan['kodcaw'])
+                    ->where('tarikh', $tarikh)
+                    ->first();
+
+                $row = $modal ? $modal->toArray() : [
+                    'tarikh' => $tarikh,
+                    'kodcaw' => $cawangan['kodcaw'],
+                    'had' => 0,
+                    'digunakan' => 0,
+                    'baki' => 0,
+                    'tambah' => 0,
+                    'kurang' => 0,
+                    'ditutup' => 0,
+                    'missing' => true,
+                ];
+                $row['cawangan_nama'] = $cawangan->nama_cawangan;
+                $row['missing'] = empty($modal);
+                $rows[] = $row;
+            } catch (\Throwable $e) {
+                Log::warning('listToday modal_online skip ' . $cawangan['kodcaw'] . ': ' . $e->getMessage());
+            }
+        }
+
+        usort($rows, function ($a, $b) {
+            return strcmp((string) ($a['kodcaw'] ?? ''), (string) ($b['kodcaw'] ?? ''));
+        });
+
+        $open = 0;
+        $closed = 0;
+        $missing = 0;
+        foreach ($rows as $row) {
+            if (!empty($row['missing'])) {
+                $missing++;
+            } elseif ((int) ($row['ditutup'] ?? 0) === 1) {
+                $closed++;
+            } else {
+                $open++;
+            }
+        }
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => [
+                'tarikh' => $tarikh,
+                'bilangan' => count($rows),
+                'open' => $open,
+                'closed' => $closed,
+                'missing' => $missing,
+                'data' => $rows,
+            ],
+        ];
+    }
+
+    /**
+     * Operasi bulk EOD close for open branches today.
+     *
+     * @return array{ok:bool,status:int,payload:mixed}
+     */
+    public function closeAll($ditutupOleh, $zone = 'all')
+    {
+        $ditutupOleh = trim((string) $ditutupOleh);
+        if ($ditutupOleh === '') {
+            return [
+                'ok' => false,
+                'status' => 422,
+                'payload' => ['message' => 'ditutup_oleh diperlukan'],
+            ];
+        }
+
+        $list = $this->listToday($zone);
+        $closed = 0;
+        $skipped = 0;
+        $failed = [];
+
+        foreach ($list['payload']['data'] as $row) {
+            if (!empty($row['missing']) || (int) ($row['ditutup'] ?? 0) === 1) {
+                $skipped++;
+                continue;
+            }
+            $res = $this->close($row['kodcaw'], $ditutupOleh);
+            if ($res['ok']) {
+                $closed++;
+            } else {
+                $failed[] = [
+                    'kodcaw' => $row['kodcaw'],
+                    'message' => $res['payload']['message'] ?? 'gagal',
+                ];
+            }
+        }
+
+        return [
+            'ok' => true,
+            'status' => 200,
+            'payload' => [
+                'closed' => $closed,
+                'skipped' => $skipped,
+                'failed' => $failed,
+            ],
+        ];
+    }
+}

app/Services/Reports/OnePercentService.php

@@ -398,7 +398,7 @@ class OnePercentService
                     $t_gadai = Carbon::parse($gadai->t_gadai);
                     $t_bayaran = Carbon::parse($trans->tarikh_bayaran);
                     
-                    if ($t_gadai->month === $t_bayaran->month && $t_gadai->year === $t_bayaran->year) {
+                    if (($t_gadai->month == $t_bayaran->month) && ($t_gadai->year == $t_bayaran->year)) {
                         return false;
                     }else{
                         return true;

app/Services/ShorakaGadaiService.php

@@ -0,0 +1,77 @@
+<?php
+
+namespace App\Services;
+
+use App\Cawangan;
+use App\Customer;
+use App\Gadai;
+use App\ShorakaTransaction;
+use Illuminate\Validation\ValidationException;
+
+class ShorakaGadaiService
+{
+    public function gadai(string $kodcaw, string $norujukan): Gadai
+    {
+        $branch = Cawangan::on('mysql7')->where('kodcaw', $kodcaw)->firstOrFail();
+        return Gadai::on($branch->mysql)->where('kodcaw', $kodcaw)->where('norujukan', $norujukan)->first()
+            ?? abort(404, 'Maklumat gadaian tidak tersedia. Semakan diperlukan.');
+    }
+
+    public function payload(Gadai $gadai): array
+    {
+        $customer = Customer::on('mysql7')->where(function ($query) use ($gadai) {
+            $query->where('kpbaru', $gadai->nokp)->orWhere('kplama', $gadai->nokp);
+        })->firstOrFail();
+        if (!$customer->nama || $gadai->pinjaman <= 0 || $gadai->hargajualan < $gadai->pinjaman) {
+            throw ValidationException::withMessages([
+                'norujukan' => 'Nama pelanggan, pembiayaan dan harga jualan mesti lengkap.',
+            ]);
+        }
+
+        return [
+            'norujukan' => $gadai->norujukan,
+            'ownership' => $customer->nama,
+            'order_amount' => $gadai->pinjaman,
+            'murabaha_amount' => $gadai->hargajualan,
+            // Both GadaiV1 and GadaiV2 price the contract using upah12.
+            // "tempoh" is elapsed charge time, NOT the contractual tenor.
+            'tenor_other' => 12,
+        ];
+    }
+
+    public function transaction(string $kodcaw, string $norujukan)
+    {
+        $order = ShorakaTransaction::where('norujukan', $norujukan)->first();
+        if ($order && (string) $order->kodcaw !== $kodcaw) {
+            abort(409, 'Rekod Shoraka tidak dipadankan dengan cawangan ini.');
+        }
+        return $order;
+    }
+
+    public function sync(ShorakaTransaction $order): void
+    {
+        if (!$order->kodcaw) {
+            return;
+        }
+        $gadai = $this->gadai($order->kodcaw, $order->norujukan);
+        if (!$gadai->exists) {
+            return;
+        }
+        $sameAmounts = number_format((float) $gadai->pinjaman, 2, '.', '') === $order->order_amount
+            && number_format((float) $gadai->hargajualan, 2, '.', '') === $order->murabaha_amount;
+        $gadai->getConnection()->table('gadai')->where('norujukan', $order->norujukan)->update([
+            'tagkomuditi' => $order->status === 'Completed' && $sameAmounts ? 1 : 0,
+        ]);
+    }
+
+    public function assertCompleted(string $kodcaw, string $norujukan): void
+    {
+        $gadai = $this->gadai($kodcaw, $norujukan);
+        $order = $this->transaction($kodcaw, $norujukan);
+        if (!$gadai->exists || !$order || $order->status !== 'Completed'
+            || number_format((float) $gadai->pinjaman, 2, '.', '') !== $order->order_amount
+            || number_format((float) $gadai->hargajualan, 2, '.', '') !== $order->murabaha_amount) {
+            abort(409, 'Pembiayaan dan SAG ditahan sehingga transaksi Shoraka selesai dan amaun sepadan.');
+        }
+    }
+}

app/Services/ShorakaService.php

@@ -0,0 +1,220 @@
+<?php
+
+namespace App\Services;
+
+use Illuminate\Http\Client\Response;
+use Illuminate\Support\Facades\Http;
+use RuntimeException;
+
+class ShorakaService
+{
+    const STATUSES = ['Active', 'Completed', 'Cancelled', 'Pending Sell', 'Take Delivery'];
+
+    const CALLBACK_FIELDS = [
+        'orderId', 'status', 'bankName', 'ownershipName', 'commodityType',
+        'unit', 'volume', 'productType', 'valueDate', 'cancelDate', 'orderType',
+        'orderCurrency', 'orderAmount', 'murabahaAmount', 'tenor',
+        'tenorOther', 'tenorOtherUnit',
+    ];
+
+    protected $baseUrl;
+    protected $apiId;
+    protected $secretKey;
+    protected $timeout;
+
+    public function __construct()
+    {
+        $this->baseUrl = rtrim((string) config('services.shoraka.base_url'), '/');
+        $this->apiId = (string) config('services.shoraka.api_id');
+        $this->secretKey = (string) config('services.shoraka.secret_key');
+        $this->timeout = (int) config('services.shoraka.timeout', 60);
+    }
+
+    public function configured(): bool
+    {
+        if ($this->simulationRequested()) {
+            return $this->simulationAllowed() && in_array($this->simulationMode(), ['failed', 'pending'], true);
+        }
+        return $this->apiId !== '' && $this->secretKey !== '';
+    }
+
+    protected function simulationAllowed(): bool
+    {
+        return app()->environment('local', 'testing');
+    }
+
+    protected function simulationMode(): string
+    {
+        return strtolower(trim((string) config('services.shoraka.simulation', 'off')));
+    }
+
+    protected function simulationRequested(): bool
+    {
+        return !in_array($this->simulationMode(), ['', 'off'], true);
+    }
+
+    private function simulatedResponse(string $orderId): array
+    {
+        if (!$this->simulationAllowed()) {
+            throw new RuntimeException('Shoraka simulation is restricted to local/testing.');
+        }
+        if (strpos($orderId, 'SIM-FAILED-') === 0) {
+            return ['orderId' => $orderId, 'status' => 'Cancelled'];
+        }
+        if (strpos($orderId, 'SIM-PENDING-') === 0) {
+            return ['orderId' => $orderId, 'status' => 'Active'];
+        }
+        throw new RuntimeException('Invalid simulation order ID.');
+    }
+
+    public function submitOrder(array $data): array
+    {
+        if ($this->simulationRequested()) {
+            if (!$this->simulationAllowed() || !in_array($this->simulationMode(), ['failed', 'pending'], true)) {
+                throw new RuntimeException('Shoraka simulation configuration is not allowed.');
+            }
+            return $this->simulatedResponse('SIM-' . strtoupper($this->simulationMode()) . '-' . bin2hex(random_bytes(12)));
+        }
+
+        $payload = ['api_id' => $this->apiId];
+        foreach ([
+            'product_type', 'commodity_type', 'ownership', 'value_date',
+            'order_currency', 'order_amount', 'murabaha_amount', 'tenor',
+            'tenor_other', 'tenor_other_unit', 'order_type', 'ownership_doc_no',
+        ] as $field) {
+            $payload[$field] = $data[$field] ?? '';
+        }
+        foreach (['order_amount', 'murabaha_amount'] as $field) {
+            $payload[$field] = number_format((float) $payload[$field], 2, '.', '');
+        }
+
+        // ownership_doc_no is deliberately excluded by the v1.5 signature contract.
+        $signed = $payload;
+        unset($signed['api_id'], $signed['ownership_doc_no']);
+        $payload['signature'] = $this->signature(array_values($signed));
+
+        return $this->orderResponse($this->request()->post(
+            $this->baseUrl . '/api/submitorder', $payload
+        ));
+    }
+
+    public function orderStatus(string $orderId): array
+    {
+        if (strpos($orderId, 'SIM-') === 0) {
+            return $this->simulatedResponse($orderId); // Never send simulated references to the real provider.
+        }
+        if ($this->simulationRequested()) {
+            throw new RuntimeException('Real order status is unavailable while simulation is enabled.');
+        }
+
+        return $this->orderResponse($this->request()->post(
+            $this->baseUrl . '/api/orderstatus', $this->orderPayload($orderId)
+        ), $orderId);
+    }
+
+    public function certificate(string $orderId): string
+    {
+        if ($this->simulationRequested() || strpos($orderId, 'SIM-') === 0) {
+            throw new RuntimeException('Certificates are unavailable for simulation.');
+        }
+
+        // Section 5 specifies POST, despite GET in the document history.
+        $response = $this->request()->accept('application/pdf')->post(
+            $this->baseUrl . '/api/certificate', $this->orderPayload($orderId)
+        );
+        $this->checkResponse($response);
+        $type = strtolower(trim(explode(';', $response->header('Content-Type'))[0]));
+        if ($type !== 'application/pdf' || substr($response->body(), 0, 5) !== '%PDF-') {
+            throw new RuntimeException('Shoraka returned an invalid PDF certificate.');
+        }
+
+        return $response->body();
+    }
+
+    public function validCallback(array $payload): bool
+    {
+        if ($this->simulationRequested() || strpos((string) ($payload['orderId'] ?? ''), 'SIM-') === 0) {
+            return false;
+        }
+
+        if (!$this->configured()
+            || !isset($payload['apiId'], $payload['signature'])
+            || !is_string($payload['apiId'])
+            || !hash_equals($this->apiId, $payload['apiId'])
+            || !is_string($payload['signature'])
+            || !preg_match('/\A[0-9a-fA-F]{64}\z/', $payload['signature'])) {
+            return false;
+        }
+
+        $values = [];
+        foreach (self::CALLBACK_FIELDS as $field) {
+            // Preserve the original strings: decimal formatting affects the hash.
+            if (!array_key_exists($field, $payload) || !is_string($payload[$field])) {
+                return false;
+            }
+            $values[] = $payload[$field];
+        }
+
+        return $payload['orderId'] !== ''
+            && in_array($payload['status'], self::STATUSES, true)
+            && hash_equals($this->signature($values), strtolower($payload['signature']));
+    }
+
+    protected function signature(array $values): string
+    {
+        return hash('sha256', implode(';', array_merge(
+            [$this->secretKey, $this->apiId], $values
+        )));
+    }
+
+    protected function orderPayload(string $orderId): array
+    {
+        if ($orderId === '') {
+            throw new RuntimeException('Shoraka order ID is required.');
+        }
+
+        return [
+            'api_id' => $this->apiId,
+            'order_id' => $orderId,
+            'signature' => $this->signature([$orderId]),
+        ];
+    }
+
+    protected function request()
+    {
+        if (!$this->configured()) {
+            throw new RuntimeException('Shoraka credentials are not configured.');
+        }
+
+        // Never forward signed requests through redirects or retry a trade automatically.
+        return Http::asForm()->acceptJson()->timeout($this->timeout)
+            ->withOptions(['allow_redirects' => false]);
+    }
+
+    protected function checkResponse(Response $response): void
+    {
+        if (!$response->successful()) {
+            // Do not expose upstream bodies which may contain credentials or customer data.
+            throw new RuntimeException('Shoraka request failed. HTTP ' . $response->status());
+        }
+    }
+
+    protected function orderResponse(Response $response, string $expectedId = null): array
+    {
+        $this->checkResponse($response);
+        $data = $response->json();
+        if (!is_array($data)
+            || !isset($data['orderId'], $data['status'])
+            || !(is_string($data['orderId']) || is_int($data['orderId']))
+            || (string) $data['orderId'] === ''
+            || !in_array($data['status'], self::STATUSES, true)
+            || ($expectedId !== null && (string) $data['orderId'] !== $expectedId)) {
+            throw new RuntimeException('Shoraka returned an invalid order response.');
+        }
+        if (isset($data['certificateUrl']) && !is_string($data['certificateUrl'])) {
+            throw new RuntimeException('Shoraka returned an invalid certificate URL.');
+        }
+
+        return $data;
+    }
+}

app/Services/StaffNotificationClient.php

@@ -0,0 +1,53 @@
+<?php
+
+namespace App\Services;
+
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+
+class StaffNotificationClient
+{
+    /**
+     * Ask kaunter to persist a staff inbox row. Never throws.
+     *
+     * @param  array  $payload
+     * @return void
+     */
+    public function notify(array $payload)
+    {
+        $base = rtrim((string) config('kaunter.url'), '/');
+        $secret = (string) config('kaunter.notification_secret');
+
+        if ($base === '' || $secret === '') {
+            Log::info('Staff notification skipped: KAUNTER_URL or INTERNAL_NOTIFICATION_SECRET is empty');
+            return;
+        }
+
+        $timeout = (int) config('kaunter.notification_timeout', 3);
+        if ($timeout < 1) {
+            $timeout = 3;
+        }
+
+        try {
+            $response = Http::timeout($timeout)
+                ->withHeaders([
+                    'X-Internal-Token' => $secret,
+                    'Accept' => 'application/json',
+                ])
+                ->asJson()
+                ->post($base . '/internal/notifications', $payload);
+
+            if (!$response->successful()) {
+                Log::warning('Staff notification to kaunter failed', [
+                    'status' => $response->status(),
+                    'body' => $response->body(),
+                    'type' => isset($payload['type']) ? $payload['type'] : null,
+                ]);
+            }
+        } catch (\Throwable $e) {
+            Log::warning('Staff notification to kaunter errored: '.$e->getMessage(), [
+                'type' => isset($payload['type']) ? $payload['type'] : null,
+            ]);
+        }
+    }
+}

app/Services/Whatsapp/WhatsappCloudClient.php

@@ -0,0 +1,100 @@
+<?php
+
+namespace App\Services\Whatsapp;
+
+use Illuminate\Support\Facades\Http;
+use Illuminate\Support\Facades\Log;
+
+class WhatsappCloudClient
+{
+    public function isConfigured()
+    {
+        return trim((string) config('whatsapp.token')) !== ''
+            && trim((string) config('whatsapp.phone_number_id')) !== '';
+    }
+
+    /**
+     * Malaysia MSISDN for Graph API, e.g. 60193450165.
+     *
+     * @return string|null
+     */
+    public function normalizeMsisdn($raw)
+    {
+        $digits = preg_replace('/\D+/', '', (string) $raw);
+        if ($digits === '') {
+            return null;
+        }
+
+        if (strpos($digits, '60') === 0) {
+            return $digits;
+        }
+
+        if (strpos($digits, '0') === 0) {
+            return '60' . substr($digits, 1);
+        }
+
+        return '60' . $digits;
+    }
+
+    /**
+     * @param string $to
+     * @param string $templateName
+     * @param string $lang
+     * @param array<int,string> $bodyParams
+     * @return \Illuminate\Http\Client\Response
+     */
+    public function sendTemplate($to, $templateName, $lang, array $bodyParams = [])
+    {
+        $payload = [
+            'messaging_product' => 'whatsapp',
+            'to' => $to,
+            'type' => 'template',
+            'template' => [
+                'name' => $templateName,
+                'language' => ['code' => $lang],
+            ],
+        ];
+
+        if (count($bodyParams) > 0) {
+            $payload['template']['components'] = [[
+                'type' => 'body',
+                'parameters' => array_map(function ($text) {
+                    return [
+                        'type' => 'text',
+                        'text' => $this->sanitizeParam($text),
+                    ];
+                }, array_values($bodyParams)),
+            ]];
+        }
+
+        $version = config('whatsapp.api_version', 'v25.0');
+        $phoneId = config('whatsapp.phone_number_id');
+        $url = 'https://graph.facebook.com/' . $version . '/' . $phoneId . '/messages';
+
+        $response = Http::withToken(config('whatsapp.token'))
+            ->acceptJson()
+            ->asJson()
+            ->post($url, $payload);
+
+        if (!$response->successful()) {
+            Log::error('WhatsApp Cloud send failed', [
+                'to' => $to,
+                'template' => $templateName,
+                'status' => $response->status(),
+                'body' => $response->json() ?: $response->body(),
+            ]);
+        }
+
+        return $response;
+    }
+
+    protected function sanitizeParam($text)
+    {
+        $text = trim(preg_replace('/\s+/', ' ', (string) $text));
+        if ($text === '') {
+            return '-';
+        }
+
+        return mb_substr($text, 0, 200);
+    }
+}

app/ShorakaTransaction.php

@@ -0,0 +1,41 @@
+<?php
+
+namespace App;
+
+use Illuminate\Database\Eloquent\Model;
+
+class ShorakaTransaction extends Model
+{
+    protected $fillable = [
+        'norujukan',
+        'kodcaw',
+        'teller',
+        'order_id',
+        'status',
+        'product_type',
+        'commodity_type',
+        'ownership_name',
+        'ownership_doc_no',
+        'order_amount',
+        'murabaha_amount',
+        'certificate_url',
+        'certificate_path',
+        'request_payload',
+        'response_payload',
+        'callback_payload',
+        'attempt_count',
+        'error_message',
+        'submitted_at',
+        'completed_at',
+    ];
+
+    protected $casts = [
+        'order_amount' => 'decimal:2',
+        'murabaha_amount' => 'decimal:2',
+        'request_payload' => 'array',
+        'response_payload' => 'array',
+        'callback_payload' => 'array',
+        'submitted_at' => 'datetime',
+        'completed_at' => 'datetime',
+    ];
+}

app/Support/v1/GadaiV1.php

@@ -88,9 +88,7 @@ class GadaiV1
 
         $hargajualan = $request->pinjaman + $upah12;
 
-        $gadai = Gadai::on($cawangan['mysql'])
-            ->where('norujukan','=',$norujukan)
-            ->update(array(
+        $gadaiFields = array(
                 'nilaimarhun' => $total_nilai_marhun,
                 'berat'=> $total_berat,
                 'pinjaman' => $request->pinjaman,
@@ -115,7 +113,8 @@ class GadaiV1
                 'upahdibayar' => 0.00,
                 'tempohbayar' => 0.00,
                 'lelong_tawarruq' => 1
-            ));
+            );
+        $gadai = Gadai::on($cawangan['mysql'])->where('norujukan', $norujukan)->update($gadaiFields);
 
         $new_data = Gadai::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->first();
 

app/Support/v1/Penebusan.php

@@ -11,8 +11,6 @@ use Carbon\Carbon;
 use App\Gadai;
 use App\HargaEmas;
 use App\InOutMar;
-use App\KomuditiPurchase;
-use App\KomuditiTransaksi;
 use App\Marhun;
 use App\Moratorium;
 use App\Palsu;
@@ -809,19 +807,18 @@ class Penebusan
         $array_tebus = $request->only(['jeniskeuntungan', 'nopelanggan','jenistebus','addpinjaman','nowakil','marhun','teller','bakipinjaman','bakiupah']);
         $array_trans = $request->only(['nopelanggan', 'noic','jenisAT','pinjaman','pinjamanbaru','marhun','teller','jenistebus']);
         $array_tebus_base = $request->only(['totalbayaran', 'bakiupah','jeniskeuntungan','bakipinjaman','jenistebus','teller','nowakil','duitpelanggan']);
-        $array_trans_base = $request->only(['pinjaman','teller','pinjamanbaru']);
 
         try{
             DB::connection($cawangan['mysql'])->beginTransaction();
             $this->saveTebus($kodcaw,$norujukan,$gadai,$cawangan,$array_tebus);
-            $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
+            $newReference = $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
 
             DB::connection('mysql7')->beginTransaction();
             $this->saveTebusBase($kodcaw,$norujukan,$gadai,$array_tebus_base);
-            $this->createTransactionBase($norujukan,$kodcaw,$array_trans_base);
             $array_response = [
                 'result' => 'success',
-                'data' => 1
+                'data' => 1,
+                'norujukan_baru' => $newReference
             ];
 
             DB::connection($cawangan['mysql'])->commit();
@@ -949,7 +946,7 @@ class Penebusan
         $gadaiTransaction = Gadai::on($cawangan['mysql'])->where('t_gadai','=',$current->toDateString())->orderBy('sirig', 'desc')->first();
         $gadaiTransaction = optional($gadaiTransaction)->toArray();
 
-        $new_sirig = ($gadaiTransaction) ? $gadaiTransaction['sirig'] + 1 : 1;
+        $new_sirig = (int) ($gadaiTransaction['sirig'] ?? 0) + 1;
         $curent_year = substr($current->year,2,2);
         $curent_month = sprintf("%02d", $current->month);
         $current_day = sprintf("%02d", $current->day);
@@ -1077,37 +1074,11 @@ class Penebusan
                 't_update' => $current->toDateString(),
             ));
 
+            return $new_sag_number;
         }catch(\Exception $e){
             throw new \Exception("Error in Transaction: " . $e->getMessage());
         }
 
     }
 
-    private function createTransactionBase($norujukan,$kodcaw,$array_trans_base){
-        $current = Carbon::now();
-
-        $komuditi_current = KomuditiPurchase::on('mysql7')->where('date_purchase','=',$current->toDateString())->orderBy('created_at','desc')->first();
-
-        $unit_current = isset($komuditi_current['unit_komuditi']) ? $komuditi_current['unit_komuditi']: 0;
-
-        try{
-            $update_unit = $unit_current - $array_trans_base['pinjamanbaru'];
-
-            KomuditiPurchase::on('mysql7')->where('id','=',$komuditi_current['id'])->update([
-                'unit_komuditi' => $update_unit
-            ]);
-
-            KomuditiTransaksi::on('mysql7')->create([
-                'unit_komuditi' => $update_unit,
-                'nosijil'=>$komuditi_current['no_sijil'],
-                'norujukan' => $norujukan,
-                'kodcaw' => $kodcaw,
-                'teller' => $array_trans_base['teller'],
-                'masa' => $current->toTimeString(),
-                'tarikh' => $current->toDateString()
-            ]);
-        }catch(\Exception $e){
-            throw new \Exception("Error in TransactionBase: " . $e->getMessage());
-        }
-    }
-}
+}

app/Support/v2/Calculation.php

@@ -2,8 +2,11 @@
 
 namespace App\Support\v2;
 
+use App\Feature;
+use App\KadarRebet;
 use App\KadarUpah;
 use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Schema;
 
 class Calculation
 {
@@ -55,7 +58,7 @@ class Calculation
         return $ujrah_sebenar;
     }
 
-    public function kiraanKeuntunganRebet(float $pembiayaan = 0.0,float $nilaimarhun = 0.0,float $kadarujrah = 0.0,float $margin = 0.0){
+    public function kiraanKeuntunganRebet(float $pembiayaan = 0.0,float $nilaimarhun = 0.0,float $kadarujrah = 0.0,float $margin = 0.0, $kodcaw = null){
 
         $this->one_percent = $this->getKadarUpah($nilaimarhun);
 
@@ -66,8 +69,59 @@ class Calculation
         $ujrah_sebenar = (!empty($ujrah_sebenar)) ? $this->getRoundedMethod($ujrah_sebenar) : 0;
 
         $keuntungan = $onepercent + $ujrah_sebenar;
+        $annur = $this->kiraanDiskaunAnnur($kodcaw, $pembiayaan, $keuntungan);
 
-        return ['keuntungan' => $keuntungan,'onepercent' => $onepercent, 'ujrah' => $ujrah_sebenar];
+        return [
+            'keuntungan' => $keuntungan,
+            'onepercent' => $onepercent,
+            'ujrah' => $ujrah_sebenar,
+            'diskaun' => $annur['diskaun'],
+            'kadarrebet' => $annur['kadarrebet'],
+        ];
+    }
+
+    /**
+     * Annur promotional discount. Other cawangan get 0 unless rebet_annur is enabled.
+     */
+    public function kiraanDiskaunAnnur($kodcaw, float $pembiayaan = 0.0, float $keuntungan = 0.0)
+    {
+        $empty = ['kadarrebet' => 0, 'diskaun' => 0];
+
+        try {
+            if (!$kodcaw || !Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+                return $empty;
+            }
+        } catch (\Exception $e) {
+            return $empty;
+        }
+
+        $percent = $this->kiraanRebetAnnur($pembiayaan);
+        if ($percent <= 0 || $keuntungan <= 0) {
+            return ['kadarrebet' => $percent, 'diskaun' => 0];
+        }
+
+        return [
+            'kadarrebet' => $percent,
+            'diskaun' => $this->getRoundedMethod($keuntungan * ($percent / 100)),
+        ];
+    }
+
+    private function kiraanRebetAnnur(float $pembiayaan = 0.0)
+    {
+        try {
+            if (!Schema::connection('mysql7')->hasTable('kadar_rebet')) {
+                return 0;
+            }
+
+            $kadarrebet = KadarRebet::on('mysql7')
+                ->where('pembiayaan_min', '<=', $pembiayaan)
+                ->where('pembiayaan_max', '>=', $pembiayaan)
+                ->sum('kadarrebet');
+
+            return (float) $kadarrebet;
+        } catch (\Exception $e) {
+            return 0;
+        }
     }
 
     public function kiraanKeuntunganSebenar(float $pembiayaan = 0.0,float $nilaimarhun = 0.0,float $kadarujrah = 0.0,float $margin = 0.0){

app/Support/v2/GadaiV2.php

@@ -5,6 +5,7 @@ namespace App\Support\v2;
 use App\Audit;
 use App\Cawangan;
 use App\Customer;
+use App\Feature;
 use App\KadarUpah;
 use App\Support\v2\Calculation;
 use Carbon\Carbon;
@@ -58,31 +59,34 @@ class GadaiV2
         }
     }
 
-    private function getKadarUpahAnggota($nokp,$total_nilai_marhun = 0,$groupid = 2) : Float{
-        //Log::info('DEBUG NOKP:' . $nokp);
-        if($nokp){
-            $customer = Customer::on('mysql7')
-                ->select('tag_anggota')
-                ->where(function($q) use ($nokp) {
-                    $q->where('kpbaru', $nokp)
-                        ->orWhere('kplama', $nokp);
-                })
-                ->first();
-            $customer = $customer ? $customer->toArray() : [];
-            if(isset($customer) && $customer['tag_anggota'] == 1){
-                return 0.16;
-            }else{
-                return KadarUpah::where('min', '<=', $total_nilai_marhun)
-                    ->where('max', '>=', $total_nilai_marhun)
-                    ->where('group_id', $groupid)
-                    ->value('kadarujrah');
-            }
-        }
-
-        return 0.0;
-
+  private function getKadarUpahAnggota($nokp, $total_nilai_marhun = 0, $groupid = 2): ?float
+{
+    if (!$nokp) {
+        return null; // tiada nokp = tak boleh tentukan kadar
     }
 
+    $customer = Customer::on('mysql7')
+        ->select('tag_anggota')
+        ->where(function ($q) use ($nokp) {
+            $q->where('kpbaru', $nokp)
+              ->orWhere('kplama', $nokp);
+        })
+        ->first();
+
+    $customer = $customer ? $customer->toArray() : [];
+
+    if (isset($customer['tag_anggota']) && $customer['tag_anggota'] == 1) {
+        return 0.00; // ahli — kadar 0.00 memang sah
+    }
+
+    $kadar = KadarUpah::where('min', '<=', $total_nilai_marhun)
+        ->where('max', '>=', $total_nilai_marhun)
+        ->where('group_id', $groupid)
+        ->value('kadarujrah');
+
+    return is_null($kadar) ? null : (float) $kadar; // tak jumpa row = null (block)
+}
+
     public function createMarhun($norujukan,HttpRequest $request){
             $current = Carbon::now();
             $current = new Carbon();
@@ -108,19 +112,18 @@ class GadaiV2
             $total_nilai_marhun = Marhun::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->sum('n_marhun');
             $total_berat = Marhun::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->sum('berat');
 
-           $kadar_raw = $this->getKadarUpahAnggota($request->nokp, $total_nilai_marhun, $cawangan['group_id']);
+          $kadar_raw = $this->getKadarUpahAnggota($request->nokp, $total_nilai_marhun, $cawangan['group_id']);
 
-            if (empty($kadar_raw) || $kadar_raw == 0) {
-
-            Log::error('[BLOCKED] Kadar upah kosong / 0', [
-                'nokp' => $request->nokp,
-                'total_nilai_marhun' => $total_nilai_marhun,
-                'group_id' => $cawangan['group_id'],
-            ]);
-
-            throw new \Exception("Kadar upah kosong / 0, transaksi dibatalkan!");
-        }
+if (is_null($kadar_raw)) {
+    Log::error('[BLOCKED] Kadar upah tidak dijumpai', [
+        'nokp' => $request->nokp,
+        'total_nilai_marhun' => $total_nilai_marhun,
+        'group_id' => $cawangan['group_id'],
+    ]);
+    throw new \Exception("Kadar upah tidak dijumpai, transaksi dibatalkan!");
+}
 
+// $kadar_raw = 0.00 (ahli) akan lepas ke sini dan diteruskan
 
             // query kadar upah lama
             // $kadar_raw = KadarUpah::where('min','<=',$total_nilai_marhun)->where('max','>=',$total_nilai_marhun)->first();
@@ -135,14 +138,13 @@ class GadaiV2
             $upah12 = $onepercentservices->getRoundedMethod($upah1 * 12);
             $ujrah = $onepercentservices->getRoundedMethod($keuntungan['ujrah']);
             $onepercent = $onepercentservices->getRoundedMethod($keuntungan['onepercent']);
+            $annur = $onepercentservices->kiraanDiskaunAnnur($request->kodcaw, $request->pinjaman, $keuntungan['keuntungan']);
 
             $hargajualan = $request->pinjaman + $upah12;
 
             $akrual = $this->kiraupahTawarruqStokAuditUjrahOnePercent(0.5,0,$kadar_raw,$request->pinjaman,$total_nilai_marhun,$margin_pinjam);
 
-            $gadai = Gadai::on($cawangan['mysql'])
-                ->where('norujukan','=',$norujukan)
-                ->update(array(
+            $gadaiFields = [
                     'nilaimarhun' => $total_nilai_marhun,
                     'berat'=> $total_berat,
                     'pinjaman' => $request->pinjaman,
@@ -174,7 +176,23 @@ class GadaiV2
                     'tagbaru' => 1,
                     'tunggakanujrah' => $akrual['ujrah'],
                     'tunggakanonepercent' => $akrual['keuntungan'],
-                ));
+                ];
+            if (Feature::enabled($request->kodcaw, Feature::REBET_ANNUR)) {
+                $requestedKadar = (float) $request->input('kadar_rebate', 0);
+                $requestedDiskaun = (float) $request->input('rebate', 0);
+
+                if ($requestedKadar > 0 || $requestedDiskaun > 0) {
+                    $gadaiFields['kadarrebet'] = $requestedKadar;
+                    $gadaiFields['diskaun'] = $requestedDiskaun;
+                } elseif (($request->transaction ?? '') === 'Daftar Gadai') {
+                    $gadaiFields['kadarrebet'] = $annur['kadarrebet'];
+                    $gadaiFields['diskaun'] = $annur['diskaun'];
+                }
+            }
+
+            $gadai = Gadai::on($cawangan['mysql'])
+                ->where('norujukan','=',$norujukan)
+                ->update($gadaiFields);
 
             $new_data = Gadai::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->first();
 
@@ -238,14 +256,15 @@ class GadaiV2
         }
         $bilang_bln = $tempoh - $gadai_data['tempohbayar'];
 
-        $upah = $onepercentservices->kiraanKeuntunganRebet($gadai_data['bakipjm'],$gadai_data['nilaimarhun'],$gadai_data['kadarupah'],$gadai_data['margin_semasa']);
+        $upah = $onepercentservices->kiraanKeuntunganRebet($gadai_data['bakipjm'],$gadai_data['nilaimarhun'],$gadai_data['kadarupah'],$gadai_data['margin_semasa'], $this->kodcaw);
 
         //$upahrebet_raw = $bilang_bln * $upah['keuntungan'];
         $onepercent = $onepercentservices->getRoundedMethod($bilang_bln * $upah['onepercent']);
         $ujrah = $onepercentservices->getRoundedMethod($bilang_bln * $upah['ujrah']);
         $upahrebet_raw = $onepercent + $ujrah;
         $upahrebet_raw = $onepercentservices->getRoundedMethod($upahrebet_raw);
-        
+        $upahrebet_raw = $upahrebet_raw - ($upah['diskaun'] ?? 0);
+
         return $upahrebet_raw;
     }
 
@@ -280,7 +299,7 @@ class GadaiV2
 
             $margin_semasa = ($gadai['bakipjm'] / $gadai['nilaimarhun']) * 100;
 
-            $keuntungan = $onepercent->kiraanKeuntunganRebet($gadai['bakipjm'],$gadai['nilaimarhun'],$gadai['kadarupah'],$gadai['margin_semasa']);
+            $keuntungan = $onepercent->kiraanKeuntunganRebet($gadai['bakipjm'],$gadai['nilaimarhun'],$gadai['kadarupah'],$gadai['margin_semasa'], $kodcaw);
             $ujrahasal = $onepercent->kiraanUjrahSebenar($gadai['nilaimarhun'],$gadai['kadarupah'],$gadai['percentpinj']);
 
             $onepercentasal = $gadai['pinjaman'] * (1/100);
@@ -317,7 +336,7 @@ class GadaiV2
                     $keun = $onepercent->getRoundedMethod($onepercentasal * $bilang_bln);
                     $keuntungan_rebate = $onepercent->getRoundedMethod($keuntungan['onepercent'] * $bilang_bln);
 
-                    $transaction_upah = TransaksiKeuntungan::on('mysql7')->create([
+                    $transactionUpahFields = [
                         'norujukan' => $norujukan,
                         'bayaran_keuntungan' => $upahsemasa,
                         'bayaran_pembiayaan' => $baki_bayaran,
@@ -331,7 +350,12 @@ class GadaiV2
                         'tempoh' => $gadai['tempoh'],
                         'beza_tempoh' => $bilang_bln,
                         'margin_semasa' => $margin_semasa,
-                    ]);
+                    ];
+                    if (Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+                        $transactionUpahFields['kadardiskaun'] = $keuntungan['diskaun'] ?? 0;
+                    }
+
+                    $transaction_upah = TransaksiKeuntungan::on('mysql7')->create($transactionUpahFields);
 
                     $transaksi_gadai = TransaksiGadai::on('mysql7')->create([
                         'kodcaw' => $old_data['kodcaw'],

app/Support/v2/Penebusan.php

@@ -5,14 +5,13 @@ namespace App\Support\v2;
 use App\Advansur;
 use App\Audit;
 use App\Cawangan;
+use App\Feature;
 use App\KadarUpah;
 use App\Support\v2\Calculation;
 use Carbon\Carbon;
 use App\Gadai;
 use App\HargaEmas;
 use App\InOutMar;
-use App\KomuditiPurchase;
-use App\KomuditiTransaksi;
 use App\Marhun;
 use App\FailoverTransaction;
 use App\FailoverTransactionFailed;
@@ -39,6 +38,32 @@ class Penebusan
         $this->cawangan_info = $cawangan_info;
     }
 
+    private function diskaunAnnur($kodcaw, $gadai)
+    {
+        try {
+            if (!Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+                return 0.0;
+            }
+        } catch (\Exception $e) {
+            return 0.0;
+        }
+
+        return (float) ($gadai['diskaun'] ?? 0);
+    }
+
+    private function tebusAnnurFields($kodcaw, $diskaun)
+    {
+        try {
+            if (!Feature::enabled($kodcaw, Feature::REBET_ANNUR)) {
+                return [];
+            }
+        } catch (\Exception $e) {
+            return [];
+        }
+
+        return ['diskaun_rebate' => $diskaun];
+    }
+
     public function tebusTawarruq($kodcaw,$norujukan){
         $onepercentservices = new Calculation();
 
@@ -53,7 +78,8 @@ class Penebusan
         $jeniskeuntungan = ($gadai_data['tagbaru'] == 1) ? 'onepercent' : 'asal';
 
         $rebet = $this->rebetselepastawarruq($kodcaw,$norujukan,$jeniskeuntungan);
-        $harga_tebus = $gadai_data['bakihargajualan'] - $rebet;
+        $diskaun = $this->diskaunAnnur($kodcaw, $gadai_data);
+        $harga_tebus = $gadai_data['bakihargajualan'] - $rebet - $diskaun;
 
         // $hargatebus = round($harga_tebus,PHP_ROUND_HALF_UP);
         // $hargatebus = bcdiv(round($harga_tebus,2),1,1);
@@ -485,6 +511,8 @@ class Penebusan
 
         $gadai = Gadai::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->first();
 
+        $diskaun = $this->diskaunAnnur($kodcaw, $gadai);
+
         //check duplicate
         $data = Transaction::on('mysql7')->where('norujukan','=',$norujukan)->whereIn('trans_type', ['P', 'T', 'S'])->first();
 
@@ -502,7 +530,6 @@ class Penebusan
             $harga_tebus = $this->hargaTebusTawarruq($kodcaw,$norujukan,$request->jeniskeuntungan);
             $upah_tebus = $this->kiraupahTawarruq($norujukan);
             $upah_rebet = $this->kiraUpahRebetSebenar($kodcaw,$norujukan);
-            $upah_rebet_sebenar = $harga_tebus['harga'] - $gadai['bakipjm'];
 
             if($request->jeniskeuntungan == 'onepercent'){
                 $array_onepercent = $this->kiraupahUjrahOnePercent($kodcaw,$norujukan);
@@ -514,10 +541,15 @@ class Penebusan
                 $ujrah = $array_onepercent['ujrah'];
                 $onepercent = $array_onepercent['onepercent'];
             }
+
+            $harga_tebus['harga'] -= $diskaun;
+            $upah_rebet_sebenar = $harga_tebus['harga'] - $gadai['bakipjm'];
         }
 
+        $bayaran_keuntungan_bersih = max(0, $upah_rebet_sebenar);
 
-        $create_tebus = Tebus::on($cawangan['mysql'])->create([
+
+        $create_tebus = Tebus::on($cawangan['mysql'])->create(array_merge([
             'kodcaw'=> $kodcaw,
             'norujukan'=> $norujukan,
             'nopelanggan' => $request->nopelanggan,
@@ -543,7 +575,7 @@ class Penebusan
             'teller' => $request->teller,
             'ujrah' => $ujrah_rebet,
             'onepercent' => $onepercent_rebet,
-        ]);
+        ], $this->tebusAnnurFields($kodcaw, $diskaun)));
 
         $create_inoutmar = InOutMar::on($cawangan['mysql'])->create([
             'tarikh' => $current->toDateString(),
@@ -561,7 +593,7 @@ class Penebusan
 
         $transaction_upah = TransaksiKeuntungan::on('mysql7')->create([
             'norujukan' => $norujukan,
-            'bayaran_keuntungan' => $upah_tebus,
+            'bayaran_keuntungan' => $bayaran_keuntungan_bersih,
             'bayaran_pembiayaan' => $gadai['bakipjm'],
             'keuntungan_rebet' => $upah_rebet_sebenar,
             'tarikh_bayaran'=> $current,
@@ -651,6 +683,8 @@ class Penebusan
 
         $gadai = Gadai::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->first();
 
+        $diskaun = $this->diskaunAnnur($kodcaw, $gadai);
+
         //check duplicate
         $data = Transaction::on('mysql7')->where('norujukan','=',$norujukan)->where('trans_type','=','AT')->first();
 
@@ -668,7 +702,6 @@ class Penebusan
             $harga_tebus = $this->hargaTebusTawarruq($kodcaw,$norujukan,$request->jeniskeuntungan);
             $upah_tebus = $this->kiraupahTawarruq($norujukan);
             $upah_rebet = $this->kiraUpahRebetSebenar($kodcaw,$norujukan);
-            $upah_rebet_sebenar = $harga_tebus['harga'] - $gadai['bakipjm'];
 
             if($request->jeniskeuntungan == 'onepercent'){
                 $array_onepercent = $this->kiraupahUjrahOnePercent($kodcaw,$norujukan);
@@ -681,6 +714,9 @@ class Penebusan
                 $ujrah = $array_onepercent['ujrah'];
                 $onepercent = $array_onepercent['onepercent'];
             }
+
+            $harga_tebus['harga'] -= $diskaun;
+            $upah_rebet_sebenar = $harga_tebus['harga'] - $gadai['bakipjm'];
         }
 
         $update_gadai = Gadai::on($cawangan['mysql'])->where('norujukan','=',$norujukan)->update(array(
@@ -690,7 +726,7 @@ class Penebusan
 
         // $upah_rebet = $this->kiraUpahRebet($kodcaw,$norujukan);
 
-        $create_tebus = Tebus::on($cawangan['mysql'])->create([
+        $create_tebus = Tebus::on($cawangan['mysql'])->create(array_merge([
             'kodcaw'=> $kodcaw,
             'norujukan'=> $norujukan,
             'nopelanggan' => $request->nopelanggan,
@@ -716,7 +752,7 @@ class Penebusan
             'teller' => $request->teller,
             'ujrah' => $ujrah_rebet,
             'onepercent' => $onepercent_rebet,
-        ]);
+        ], $this->tebusAnnurFields($kodcaw, $diskaun)));
 
         $create_inoutmar = InOutMar::on($cawangan['mysql'])->create([
             'tarikh' => $current->toDateString(),
@@ -734,9 +770,11 @@ class Penebusan
 
         $bayaran_pembiayaan = $request->totalbayaran - $request->bakiupah;
 
+        $bayaran_keuntungan_bersih = max(0, $upah_rebet_sebenar);
+
         $transaction_upah = TransaksiKeuntungan::on('mysql7')->create([
             'norujukan' => $norujukan,
-            'bayaran_keuntungan' => $upah_tebus,
+            'bayaran_keuntungan' => $bayaran_keuntungan_bersih,
             'bayaran_pembiayaan' => $bayaran_pembiayaan,
             'keuntungan_rebet' => $upah_rebet_sebenar,
             'tarikh_bayaran'=> $current,
@@ -944,20 +982,19 @@ class Penebusan
         $array_tebus = $request->only(['jeniskeuntungan', 'nopelanggan','jenistebus','addpinjaman','nowakil','marhun','teller']);
         $array_trans = $request->only(['nopelanggan', 'noic','jenisAT','pinjaman','pinjamanbaru','marhun','teller','jenistebus']);
         $array_tebus_base = $request->only(['totalbayaran', 'bakiupah','jeniskeuntungan','bakipinjaman','jenistebus','teller','nowakil','duitpelanggan']);
-        $array_trans_base = $request->only(['pinjaman','teller','pinjamanbaru']);
 
         try{
 
             DB::connection($cawangan['mysql'])->beginTransaction();
             $this->saveTebus($kodcaw,$norujukan,$gadai,$cawangan,$array_tebus);
-            $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
+            $newReference = $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
 
             DB::connection('mysql7')->beginTransaction();
             $this->saveTebusBase($kodcaw,$norujukan,$gadai,$array_tebus_base);
-            $this->createTransactionBase($norujukan,$kodcaw,$array_trans_base);
             $array_response = [
                 'result' => 'success',
-                'data' => 1
+                'data' => 1,
+                'norujukan_baru' => $newReference
             ];
 
             DB::connection($cawangan['mysql'])->commit();
@@ -1004,19 +1041,18 @@ class Penebusan
         $array_tebus = $request->only(['jeniskeuntungan', 'nopelanggan','jenistebus','addpinjaman','nowakil','marhun','teller']);
         $array_trans = $request->only(['nopelanggan', 'noic','pinjaman','pinjamanbaru','marhun','teller','jenistebus']);
         $array_tebus_base = $request->only(['totalbayaran', 'bakiupah','jeniskeuntungan','bakipinjaman','jenistebus','teller','nowakil','duitpelanggan']);
-        $array_trans_base = $request->only(['pinjaman','teller','pinjamanbaru']);
 
         try{
             DB::connection($cawangan['mysql'])->beginTransaction();
             $this->saveTebus($kodcaw,$norujukan,$gadai,$cawangan,$array_tebus);
-            $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
+            $newReference = $this->createTransaction($cawangan,$kodcaw,$norujukan,$array_trans);
             DB::connection('mysql7')->beginTransaction();
             $this->saveTebusBase($kodcaw,$norujukan,$gadai,$array_tebus_base);
-            $this->createTransactionBase($norujukan,$kodcaw,$array_trans_base);
 
             $array_response = [
                 'result' => 'success',
-                'data' => 1
+                'data' => 1,
+                'norujukan_baru' => $newReference
             ];
 
             DB::connection($cawangan['mysql'])->commit();
@@ -1131,12 +1167,16 @@ class Penebusan
         $onepercent_rebet = $array_onepercent_rebet['onepercent'] - $upah_rebet['onepercent'];
         $ujrah_rebet = $array_onepercent_rebet['ujrah'] - $upah_rebet['ujrah'];
 
+        $diskaun = $this->diskaunAnnur($kodcaw, $gadai);
+        $harga_tebus['harga'] -= $diskaun;
         $upah_rebet_sebenar = $harga_tebus['harga'] - $gadai['bakipjm'];
 
+        $bayaran_keuntungan_bersih = max(0, $upah_rebet_sebenar);
+
         try{
             TransaksiKeuntungan::on('mysql7')->create([
                 'norujukan' => $norujukan,
-                'bayaran_keuntungan' => $upah_tebus,
+                'bayaran_keuntungan' => $bayaran_keuntungan_bersih,
                 'bayaran_pembiayaan' => $bayaran_pembiayaan,
                 'keuntungan_rebet' => $upah_rebet_sebenar,
                 'tarikh_bayaran'=> $current,
@@ -1184,7 +1224,7 @@ class Penebusan
         $gadaiTransaction = Gadai::on($cawangan['mysql'])->where('t_gadai','=',$current->toDateString())->orderBy('sirig', 'desc')->first();
         $gadaiTransaction = optional($gadaiTransaction)->toArray();
 
-        $new_sirig = ($gadaiTransaction) ? $gadaiTransaction['sirig'] + 1 : 1;
+        $new_sirig = (int) ($gadaiTransaction['sirig'] ?? 0) + 1;
         $curent_year = substr($current->year,2,2);
         $curent_month = sprintf("%02d", $current->month);
         $current_day = sprintf("%02d", $current->day);
@@ -1312,39 +1352,11 @@ class Penebusan
                 't_update' => $current->toDateString(),
             ));
 
+            return $new_sag_number;
         }catch(\Exception $e){
             throw new \Exception("Error in Transaction: " . $e->getMessage());
         }
 
     }
 
-    private function createTransactionBase($norujukan,$kodcaw,$array_trans_base){
-        $current = Carbon::now();
-
-        $komuditi_current = KomuditiPurchase::on('mysql7')->where('date_purchase','=',$current->toDateString())->orderBy('created_at','desc')->first();
-
-        $unit_current = isset($komuditi_current['unit_komuditi']) ? $komuditi_current['unit_komuditi']: 0;
-
-        try{
-            $update_unit = $unit_current - $array_trans_base['pinjamanbaru'];
-
-            KomuditiPurchase::on('mysql7')->where('id','=',$komuditi_current['id'])->update([
-                'unit_komuditi' => $update_unit
-            ]);
-
-            KomuditiTransaksi::on('mysql7')->create([
-                'unit_komuditi' => $update_unit,
-                'nosijil'=>$komuditi_current['no_sijil'],
-                'norujukan' => $norujukan,
-                'kodcaw' => $kodcaw,
-                'teller' => $array_trans_base['teller'],
-                'masa' => $current->toTimeString(),
-                'tarikh' => $current->toDateString()
-            ]);
-        }catch(\Exception $e){
-            throw new \Exception("Error in TransactionBase: " . $e->getMessage());
-        }
-    }
-
-
-}
+}

app/Tebus.php

@@ -52,7 +52,8 @@ class Tebus extends Model
         'pinjamanterkini',
         'tarikhbyrn',
         'ujrah',
-        'onepercent'
+        'onepercent',
+        'diskaun_rebate'
     ];
 
     /**

app/TransaksiKeuntungan.php

@@ -14,7 +14,7 @@ class TransaksiKeuntungan extends Model
      * @var array
      */
     protected $fillable = [
-      'norujukan','bayaran_keuntungan','tarikh_bayaran','kodcaw','bayaran_pembiayaan','keuntungan_rebet','ujrah','ujrah_rebet','onepercent','onepercent_rebet','tempoh','beza_tempoh','margin_semasa','rounded'
+      'norujukan','bayaran_keuntungan','tarikh_bayaran','kodcaw','bayaran_pembiayaan','keuntungan_rebet','ujrah','ujrah_rebet','onepercent','onepercent_rebet','tempoh','beza_tempoh','margin_semasa','rounded','kadardiskaun'
     ];
 
     /**

bootstrap/.gitignore

@@ -0,0 +1 @@
+/cache

bootstrap/app.php

@@ -23,6 +23,33 @@ $app = new Laravel\Lumen\Application(
     dirname(__DIR__)
 );
 
+/*
+| Laravel's storage_path() helper resolves app('path.storage'). Lumen does not
+| register that binding by default; config files that call storage_path() at
+| load time (e.g. config/logging.php) would fail without this.
+*/
+$app->instance('path.storage', $app->storagePath());
+
+/*
+| Laravel's Foundation helpers are loaded before Lumen's and win for names like
+| response() and url(). Those helpers resolve Illuminate\Contracts\* from the
+| container; Lumen only registers the "url" service, not the contracts. Map the
+| contracts to Lumen's implementations so helpers work across the app.
+*/
+$app->singleton(
+    \Illuminate\Contracts\Routing\ResponseFactory::class,
+    function () {
+        return new \Laravel\Lumen\Http\ResponseFactory();
+    }
+);
+
+$app->singleton(
+    \Illuminate\Contracts\Routing\UrlGenerator::class,
+    function ($app) {
+        return $app->make('url');
+    }
+);
+
 $app->withFacades();
 
 $app->withEloquent();
@@ -60,11 +87,17 @@ $app->singleton(
 */
 
 $app->configure('app');
+$app->configure('services');
+$app->configure('logging');
+$app->configure('logviewer');
 $app->configure('tinker');
 $app->configure('tennant_database');
 $app->configure('report');
 $app->configure('app_parameter');
 $app->configure('parameter');
+$app->configure('whatsapp');
+$app->configure('kaunter');
+$app->configure('bsas');
 /*
 |--------------------------------------------------------------------------
 | Register Middleware
@@ -80,9 +113,9 @@ $app->configure('parameter');
 //     App\Http\Middleware\ExampleMiddleware::class
 // ]);
 
-// $app->routeMiddleware([
-//     'auth' => App\Http\Middleware\Authenticate::class,
-// ]);
+$app->routeMiddleware([
+    'logviewer.password' => App\Http\Middleware\LogViewerPassword::class,
+]);
 
 /*
 |--------------------------------------------------------------------------
@@ -125,4 +158,7 @@ $app->middleware([
  $app->register(\Rap2hpoutre\LaravelLogViewer\LaravelLogViewerServiceProvider::class);
  $app->register(\Laravel\Tinker\TinkerServiceProvider::class);
  $app->register(\App\Providers\AppServiceProvider::class);
+
+ $app->register(\KitLoong\MigrationsGenerator\MigrationsGeneratorServiceProvider::class);
+
 return $app;

composer.json

@@ -15,6 +15,7 @@
     },
     "require-dev": {
         "fzaninotto/faker": "^1.9.1",
+        "kitloong/laravel-migrations-generator": "^6.11",
         "mockery/mockery": "^1.3.1",
         "phpunit/phpunit": "^8.5"
     },

composer.lock

@@ -4,7 +4,7 @@
         "Read more about it at https://getcomposer.org/doc/01-basic-usage.md#installing-dependencies",
         "This file is @generated automatically"
     ],
-    "content-hash": "2a35e67752107934701ceea957a4fd34",
+    "content-hash": "64c3d9455edb548f4cd5ec1f8d9f77be",
     "packages": [
         {
             "name": "auth0/auth0-php",
@@ -6686,6 +6686,81 @@
             },
             "time": "2020-07-09T08:09:16+00:00"
         },
+        {
+            "name": "kitloong/laravel-migrations-generator",
+            "version": "v6.11.1",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/kitloong/laravel-migrations-generator.git",
+                "reference": "0f007e86dce6e0cfd71dc0b757da18851c376c3b"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/kitloong/laravel-migrations-generator/zipball/0f007e86dce6e0cfd71dc0b757da18851c376c3b",
+                "reference": "0f007e86dce6e0cfd71dc0b757da18851c376c3b",
+                "shasum": ""
+            },
+            "require": {
+                "doctrine/dbal": "^2.4|^3.0",
+                "ext-pdo": "*",
+                "illuminate/support": "^5.6|^6.0|^7.0|^8.0|^9.0|^10.0",
+                "myclabs/php-enum": "^1.6|^1.7|^1.8",
+                "php": ">=7.1.3"
+            },
+            "require-dev": {
+                "barryvdh/laravel-ide-helper": "^2.5",
+                "friendsofphp/php-cs-fixer": "^2.19.0|^3.1",
+                "larastan/larastan": "^0.4|^0.5|^0.6|^0.7|^1.0|^2.0",
+                "mockery/mockery": "^1.0",
+                "orchestra/testbench": "^3.6|^4.0|^5.0|^6.0|^7.0|^8.0",
+                "phpmd/phpmd": "^2.10",
+                "slevomat/coding-standard": "^6.0|^7.0|^8.5",
+                "squizlabs/php_codesniffer": "^3.5"
+            },
+            "type": "library",
+            "extra": {
+                "laravel": {
+                    "providers": [
+                        "KitLoong\\MigrationsGenerator\\MigrationsGeneratorServiceProvider"
+                    ]
+                }
+            },
+            "autoload": {
+                "psr-4": {
+                    "KitLoong\\MigrationsGenerator\\": "src"
+                }
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "Kit Loong",
+                    "email": "kitloong1008@gmail.com"
+                }
+            ],
+            "description": "Generates Laravel Migrations from an existing database",
+            "keywords": [
+                "artisan",
+                "generator",
+                "laravel",
+                "lumen",
+                "migration",
+                "migrations"
+            ],
+            "support": {
+                "issues": "https://github.com/kitloong/laravel-migrations-generator/issues",
+                "source": "https://github.com/kitloong/laravel-migrations-generator/tree/v6.11.1"
+            },
+            "funding": [
+                {
+                    "url": "https://www.buymeacoffee.com/kitloong",
+                    "type": "custom"
+                }
+            ],
+            "time": "2024-02-06T14:42:33+00:00"
+        },
         {
             "name": "mockery/mockery",
             "version": "1.5.0",
@@ -6817,6 +6892,69 @@
             ],
             "time": "2022-03-03T13:19:32+00:00"
         },
+        {
+            "name": "myclabs/php-enum",
+            "version": "1.8.5",
+            "source": {
+                "type": "git",
+                "url": "https://github.com/myclabs/php-enum.git",
+                "reference": "e7be26966b7398204a234f8673fdad5ac6277802"
+            },
+            "dist": {
+                "type": "zip",
+                "url": "https://api.github.com/repos/myclabs/php-enum/zipball/e7be26966b7398204a234f8673fdad5ac6277802",
+                "reference": "e7be26966b7398204a234f8673fdad5ac6277802",
+                "shasum": ""
+            },
+            "require": {
+                "ext-json": "*",
+                "php": "^7.3 || ^8.0"
+            },
+            "require-dev": {
+                "phpunit/phpunit": "^9.5",
+                "squizlabs/php_codesniffer": "1.*",
+                "vimeo/psalm": "^4.6.2 || ^5.2"
+            },
+            "type": "library",
+            "autoload": {
+                "psr-4": {
+                    "MyCLabs\\Enum\\": "src/"
+                },
+                "classmap": [
+                    "stubs/Stringable.php"
+                ]
+            },
+            "notification-url": "https://packagist.org/downloads/",
+            "license": [
+                "MIT"
+            ],
+            "authors": [
+                {
+                    "name": "PHP Enum contributors",
+                    "homepage": "https://github.com/myclabs/php-enum/graphs/contributors"
+                }
+            ],
+            "description": "PHP Enum implementation",
+            "homepage": "https://github.com/myclabs/php-enum",
+            "keywords": [
+                "enum"
+            ],
+            "support": {
+                "issues": "https://github.com/myclabs/php-enum/issues",
+                "source": "https://github.com/myclabs/php-enum/tree/1.8.5"
+            },
+            "funding": [
+                {
+                    "url": "https://github.com/mnapoli",
+                    "type": "github"
+                },
+                {
+                    "url": "https://tidelift.com/funding/github/packagist/myclabs/php-enum",
+                    "type": "tidelift"
+                }
+            ],
+            "time": "2025-01-14T11:49:03+00:00"
+        },
         {
             "name": "phar-io/manifest",
             "version": "2.0.3",
@@ -8389,12 +8527,12 @@
     ],
     "aliases": [],
     "minimum-stability": "dev",
-    "stability-flags": [],
+    "stability-flags": {},
     "prefer-stable": true,
     "prefer-lowest": false,
     "platform": {
         "php": "^7.2.5"
     },
-    "platform-dev": [],
-    "plugin-api-version": "2.3.0"
+    "platform-dev": {},
+    "plugin-api-version": "2.9.0"
 }

composer_backuo.json

@@ -1,44 +0,0 @@
-{
-    "name": "laravel/lumen",
-    "description": "The Laravel Lumen Framework.",
-    "keywords": ["framework", "laravel", "lumen"],
-    "license": "MIT",
-    "type": "project",
-    "require": {
-        "php": "^7.2.5",
-        "auth0/auth0-php": "^7.4",
-        "laravel/lumen-framework": "^7.0",
-        "rap2hpoutre/laravel-log-viewer": "^1.7"
-    },
-    "require-dev": {
-        "fzaninotto/faker": "^1.9.1",
-        "mockery/mockery": "^1.3.1",
-        "phpunit/phpunit": "^8.5"
-    },
-    "autoload": {
-        "classmap": [
-            "database/seeds",
-            "database/factories"
-        ],
-        "psr-4": {
-            "App\\": "app/"
-        }
-    },
-    "autoload-dev": {
-        "classmap": [
-            "tests/"
-        ]
-    },
-    "config": {
-        "preferred-install": "dist",
-        "sort-packages": true,
-        "optimize-autoloader": true
-    },
-    "minimum-stability": "dev",
-    "prefer-stable": true,
-    "scripts": {
-        "post-root-package-install": [
-            "@php -r \"file_exists('.env') || copy('.env.example', '.env');\""
-        ]
-    }
-}

config/app_parameter.php

@@ -1,8 +1,9 @@
 <?php
 
 return [
-   'url' => env('APP_URL', url('/')),
+   'url' => env('APP_URL', 'http://localhost'),
    'api_arrahnbid' => env('API_ARRAHNBID', 'http://lelong.test/api/'),
+   'api_arrahnbid_annur' => env('API_ARRAHNBID_ANNUR', env('API_ARRAHNBID', 'http://lelong.test/api/')),
    'api_v3' => env('API_V3', 'http://apiv3.localhost/api/')
 ];
 

config/bsas.php

@@ -0,0 +1,14 @@
+<?php
+
+return [
+    'base_url' => rtrim(env('BSAS_BASE_URL', 'https://bsasdevapi.bursamalaysia.com/api'), '/'),
+    'token_url' => env('BSAS_TOKEN_URL', 'https://bsasdevapi.bursamalaysia.com/oauth/token'),
+    'client_id' => env('BSAS_CLIENT_ID'),
+    'client_secret' => env('BSAS_CLIENT_SECRET'),
+    'member_short_name' => env('BSAS_MEMBER_SHORT_NAME', 'KOOPPKB'),
+    'product_code' => env('BSAS_PRODUCT_CODE', 'CPO-MSIA-09'),
+    'tenor' => env('BSAS_TENOR', '00088'),
+    'max_wait_time' => (int) env('BSAS_MAX_WAIT_TIME', 10),
+    'http_timeout' => (int) env('BSAS_HTTP_TIMEOUT', 30),
+    'order_result_retries' => (int) env('BSAS_ORDER_RESULT_RETRIES', 2),
+];

config/kaunter.php

@@ -0,0 +1,7 @@
+<?php
+
+return [
+    'url' => env('KAUNTER_URL', ''),
+    'notification_secret' => env('INTERNAL_NOTIFICATION_SECRET', ''),
+    'notification_timeout' => (int) env('KAUNTER_NOTIFICATION_TIMEOUT', 3),
+];

config/logging.php

@@ -0,0 +1,103 @@
+<?php
+
+use Monolog\Handler\NullHandler;
+use Monolog\Handler\StreamHandler;
+use Monolog\Handler\SyslogUdpHandler;
+
+return [
+
+    /*
+    |--------------------------------------------------------------------------
+    | Default Log Channel
+    |--------------------------------------------------------------------------
+    |
+    | This option defines the default log channel that gets used when writing
+    | messages to the logs. The name specified in this option should match
+    | one of the channels defined in the "channels" configuration array.
+    |
+    */
+
+    'default' => env('LOG_CHANNEL', 'stack'),
+
+    /*
+    |--------------------------------------------------------------------------
+    | Log Channels
+    |--------------------------------------------------------------------------
+    |
+    | Here you may configure the log channels for your application. Out of
+    | the box, Laravel uses the Monolog PHP logging library. This gives
+    | you a variety of powerful log handlers / formatters to utilize.
+    |
+    | Available Drivers: "single", "daily", "slack", "syslog",
+    | "errorlog", "monolog", "custom", "stack"
+    |
+    */
+
+    'channels' => [
+        'stack' => [
+            'driver' => 'stack',
+            'channels' => ['single'],
+            'ignore_exceptions' => false,
+        ],
+
+        'single' => [
+            'driver' => 'single',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+        ],
+
+        'daily' => [
+            'driver' => 'daily',
+            'path' => storage_path('logs/laravel.log'),
+            'level' => env('LOG_LEVEL', 'debug'),
+            'days' => 14,
+        ],
+
+        'slack' => [
+            'driver' => 'slack',
+            'url' => env('LOG_SLACK_WEBHOOK_URL'),
+            'username' => 'Laravel Log',
+            'emoji' => ':boom:',
+            'level' => env('LOG_LEVEL', 'critical'),
+        ],
+
+        'papertrail' => [
+            'driver' => 'monolog',
+            'level' => env('LOG_LEVEL', 'debug'),
+            'handler' => SyslogUdpHandler::class,
+            'handler_with' => [
+                'host' => env('PAPERTRAIL_URL'),
+                'port' => env('PAPERTRAIL_PORT'),
+            ],
+        ],
+
+        'stderr' => [
+            'driver' => 'monolog',
+            'handler' => StreamHandler::class,
+            'formatter' => env('LOG_STDERR_FORMATTER'),
+            'with' => [
+                'stream' => 'php://stderr',
+            ],
+        ],
+
+        'syslog' => [
+            'driver' => 'syslog',
+            'level' => env('LOG_LEVEL', 'debug'),
+        ],
+
+        'errorlog' => [
+            'driver' => 'errorlog',
+            'level' => env('LOG_LEVEL', 'debug'),
+        ],
+
+        'null' => [
+            'driver' => 'monolog',
+            'handler' => NullHandler::class,
+        ],
+
+        'emergency' => [
+            'path' => storage_path('logs/laravel.log'),
+        ],
+    ],
+
+];

config/logviewer.php

@@ -0,0 +1,16 @@
+<?php
+
+return [
+    'password' => env('LOGVIEWER_PASSWORD'),
+    /*
+    |--------------------------------------------------------------------------
+    | Pattern and storage path settings
+    |--------------------------------------------------------------------------
+    |
+    | The env key for pattern and storage path with a default value
+    |
+    */
+    'max_file_size' => 52428800, // size in Byte
+    'pattern'       => env('LOGVIEWER_PATTERN', '*.log'),
+    'storage_path'  => env('LOGVIEWER_STORAGE_PATH', storage_path('logs')),
+];

config/services.php

@@ -0,0 +1,23 @@
+<?php
+
+return [
+
+    'shoraka' => [
+        // Local UI tests only: off, failed or pending. Success is deliberately excluded.
+        'simulation' => env('SHORAKA_SIMULATION', 'off'),
+        'base_url' => env(
+            'SHORAKA_BASE_URL',
+            'https://uat2.shorakagroup.com'
+        ),
+
+        'api_id' => env('SHORAKA_API_ID'),
+
+        'secret_key' => env('SHORAKA_SECRET_KEY'),
+
+        'timeout' => env(
+            'SHORAKA_TIMEOUT',
+            60
+        ),
+    ],
+
+];

config/whatsapp.php

@@ -0,0 +1,12 @@
+<?php
+
+return [
+    'whatsapp_cloud_enabled' => env('WHATSAPP_CLOUD_ENABLED', true),
+    'token' => env('WHATSAPP_TOKEN'),
+    'phone_number_id' => env('WHATSAPP_PHONE_NUMBER_ID'),
+    'api_version' => env('WHATSAPP_API_VERSION', 'v25.0'),
+    'template' => env('WHATSAPP_TEMPLATE', 'hello_world'),
+    'template_lang' => env('WHATSAPP_TEMPLATE_LANG', 'en_US'),
+    'verify_token' => env('WHATSAPP_VERIFY_TOKEN'),
+    'app_secret' => env('WHATSAPP_APP_SECRET'),
+];

database/migrations/2026_08_10_100001_create_modal_online_table.php

@@ -0,0 +1,53 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\DB;
+
+class CreateModalOnlineTable extends Migration
+{
+    public function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+                DB::connection($connection)->getPdo();
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (!Schema::connection($dbase)->hasTable('modal_online')) {
+                Schema::connection($dbase)->create('modal_online', function (Blueprint $table) {
+                    $table->bigIncrements('id');
+                    $table->date('tarikh');
+                    $table->string('kodcaw', 20);
+                    $table->decimal('had', 12, 2)->default(100000.00);
+                    $table->decimal('digunakan', 12, 2)->default(0.00);
+                    $table->decimal('baki', 12, 2)->default(100000.00);
+                    $table->decimal('tambah', 12, 2)->default(0.00);
+                    $table->decimal('kurang', 12, 2)->default(0.00);
+                    $table->timestamps();
+                    $table->unique(['tarikh', 'kodcaw']);
+                });
+            }
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            Schema::connection($dbase)->dropIfExists('modal_online');
+        }
+    }
+}

database/migrations/2026_08_10_100002_create_batch_pembiayaan_online_table.php

@@ -0,0 +1,55 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\DB;
+
+class CreateBatchPembiayaanOnlineTable extends Migration
+{
+    public function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+                DB::connection($connection)->getPdo();
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (!Schema::connection($dbase)->hasTable('batch_pembiayaan_online')) {
+                Schema::connection($dbase)->create('batch_pembiayaan_online', function (Blueprint $table) {
+                    $table->bigIncrements('id');
+                    $table->string('batch_no', 50);
+                    $table->string('kodcaw', 20);
+                    $table->date('tarikh');
+                    $table->string('slot', 20)->nullable()->comment('BATCH1 / BATCH2');
+                    $table->integer('bilangan')->default(0);
+                    $table->decimal('jumlah_keseluruhan', 12, 2)->default(0.00);
+                    $table->string('status', 30)->default('DRAFT');
+                    $table->string('pc_submitted_by', 100)->nullable();
+                    $table->timestamp('submitted_at')->nullable();
+                    $table->timestamps();
+                    $table->index(['kodcaw', 'tarikh', 'status']);
+                });
+            }
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            Schema::connection($dbase)->dropIfExists('batch_pembiayaan_online');
+        }
+    }
+}

database/migrations/2026_08_10_100003_create_pembiayaan_online_table.php

@@ -0,0 +1,74 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\DB;
+
+class CreatePembiayaanOnlineTable extends Migration
+{
+    public function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+                DB::connection($connection)->getPdo();
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (!Schema::connection($dbase)->hasTable('pembiayaan_online')) {
+                Schema::connection($dbase)->create('pembiayaan_online', function (Blueprint $table) {
+                    $table->bigIncrements('id');
+                    $table->string('norujukan', 50);
+                    $table->string('nokp', 20);
+                    $table->string('nopelanggan', 50)->nullable();
+                    $table->string('nama_pelanggan', 150)->nullable();
+                    $table->string('kodcaw', 20);
+                    $table->decimal('pinjaman', 12, 2);
+                    $table->string('kodbank', 20)->nullable();
+                    $table->string('nama_bank', 100)->nullable();
+                    $table->string('noakaun', 50)->nullable();
+                    $table->string('nama_akaun', 150)->nullable();
+                    $table->unsignedBigInteger('bukti_akaun_file_id')->nullable();
+                    $table->unsignedBigInteger('borang_file_id')->nullable();
+                    $table->string('status', 30)->default('PENDING_PC');
+                    $table->text('reject_reason')->nullable();
+                    $table->string('rejected_by', 100)->nullable();
+                    $table->timestamp('rejected_at')->nullable();
+                    $table->unsignedBigInteger('batch_id')->nullable();
+                    $table->unsignedBigInteger('bukti_file_id')->nullable();
+                    $table->string('no_rujukan_bayaran', 100)->nullable();
+                    $table->date('tarikh_bayaran')->nullable();
+                    $table->timestamp('paid_at')->nullable();
+                    $table->string('created_by', 100)->nullable();
+                    $table->string('pc_submitted_by', 100)->nullable();
+                    $table->string('ops_by', 100)->nullable();
+                    $table->text('nota')->nullable();
+                    $table->tinyInteger('blast_sent')->default(0);
+                    $table->timestamps();
+                    $table->index(['kodcaw', 'status']);
+                    $table->index('norujukan');
+                    $table->index('batch_id');
+                });
+            }
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            Schema::connection($dbase)->dropIfExists('pembiayaan_online');
+        }
+    }
+}

database/migrations/2026_08_10_100004_add_cara_terima_to_gadai_table.php

@@ -0,0 +1,54 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+use Illuminate\Support\Facades\DB;
+
+class AddCaraTerimaToGadaiTable extends Migration
+{
+    public function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+                DB::connection($connection)->getPdo();
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (
+                Schema::connection($dbase)->hasTable('gadai')
+                && !Schema::connection($dbase)->hasColumn('gadai', 'cara_terima')
+            ) {
+                Schema::connection($dbase)->table('gadai', function (Blueprint $table) {
+                    $table->string('cara_terima', 20)->nullable()->after('pinjaman');
+                });
+            }
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (
+                Schema::connection($dbase)->hasTable('gadai')
+                && Schema::connection($dbase)->hasColumn('gadai', 'cara_terima')
+            ) {
+                Schema::connection($dbase)->table('gadai', function (Blueprint $table) {
+                    $table->dropColumn('cara_terima');
+                });
+            }
+        }
+    }
+}

database/migrations/2026_08_10_100005_create_request_modal_online_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateRequestModalOnlineTable extends Migration
+{
+    public function up()
+    {
+        if (!Schema::connection('mysql7')->hasTable('request_modal_online')) {
+            Schema::connection('mysql7')->create('request_modal_online', function (Blueprint $table) {
+                $table->bigIncrements('id');
+                $table->string('kodcaw', 20);
+                $table->date('tarikh');
+                $table->decimal('amaun', 12, 2);
+                $table->string('dimohon_oleh', 100)->nullable();
+                $table->string('status', 20)->default('PENDING');
+                $table->string('diluluskan_oleh', 100)->nullable();
+                $table->text('nota')->nullable();
+                $table->timestamps();
+                $table->index(['kodcaw', 'tarikh', 'status']);
+            });
+        }
+    }
+
+    public function down()
+    {
+        Schema::connection('mysql7')->dropIfExists('request_modal_online');
+    }
+}

database/migrations/2026_08_11_100000_create_arrahn_files_table.php

@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateArrahnFilesTable extends Migration
+{
+    /**
+     * Master DB (mysql7) — shared file store for CIT / permohonan / bukti pembiayaan online.
+     * Matches App\ARFiles usage: data (base64), filename, type, tarikhmasa; id used as file reference.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        if (!Schema::connection('mysql7')->hasTable('arrahn_files')) {
+            Schema::connection('mysql7')->create('arrahn_files', function (Blueprint $table) {
+                $table->bigIncrements('id');
+                $table->unsignedBigInteger('files_id')->nullable()->index();
+                $table->longText('data')->nullable();
+                $table->string('filename', 255)->nullable();
+                $table->string('type', 100)->nullable();
+                $table->string('tarikhmasa', 50)->nullable();
+            });
+        }
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql7')->dropIfExists('arrahn_files');
+    }
+}

database/migrations/2026_08_12_100000_add_eod_close_columns_to_modal_online_table.php

@@ -0,0 +1,61 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+class AddEodCloseColumnsToModalOnlineTable extends Migration
+{
+    public function getActiveDB()
+    {
+        return array_filter(
+            array_keys(config('database.connections')),
+            function ($connection) {
+                try {
+                    if ($connection === 'mysql7') {
+                        return false;
+                    }
+
+                    DB::connection($connection)->getPdo();
+
+                    return true;
+                } catch (\Exception $e) {
+                    return false;
+                }
+            }
+        );
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            Schema::connection($dbase)->table('modal_online', function (Blueprint $table) {
+                $table->tinyInteger('ditutup')
+                    ->default(0)
+                    ->after('kurang');
+
+                $table->string('ditutup_oleh', 100)
+                    ->nullable()
+                    ->after('ditutup');
+
+                $table->timestamp('ditutup_at')
+                    ->nullable()
+                    ->after('ditutup_oleh');
+            });
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            Schema::connection($dbase)->table('modal_online', function (Blueprint $table) {
+                $table->dropColumn([
+                    'ditutup',
+                    'ditutup_oleh',
+                    'ditutup_at',
+                ]);
+            });
+        }
+    }
+}

database/migrations/2026_09_03_100000_add_gambar_mykad_to_customer_table.php

@@ -0,0 +1,46 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class AddGambarMykadToCustomerTable extends Migration
+{
+    /**
+     * Master DB (mysql7) — stores arrahn_files.id for the MyKad photo.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        if (
+            Schema::connection('mysql7')->hasTable('customer')
+            && !Schema::connection('mysql7')->hasColumn('customer', 'gambar_mykad')
+        ) {
+            Schema::connection('mysql7')->table('customer', function (Blueprint $table) {
+                if (Schema::connection('mysql7')->hasColumn('customer', 'tag_anggota')) {
+                    $table->unsignedBigInteger('gambar_mykad')->nullable()->after('tag_anggota');
+                } else {
+                    $table->unsignedBigInteger('gambar_mykad')->nullable();
+                }
+            });
+        }
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        if (
+            Schema::connection('mysql7')->hasTable('customer')
+            && Schema::connection('mysql7')->hasColumn('customer', 'gambar_mykad')
+        ) {
+            Schema::connection('mysql7')->table('customer', function (Blueprint $table) {
+                $table->dropColumn('gambar_mykad');
+            });
+        }
+    }
+}

database/migrations/2026_09_08_100000_create_cawangan_feature_table.php

@@ -0,0 +1,36 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateCawanganFeatureTable extends Migration
+{
+    /**
+     * Master DB (mysql7) — per-cawangan feature flags.
+     *
+     * Missing row = off. Enable a pilot after migrate:
+     *
+     *   INSERT INTO cawangan_feature (kodcaw, feature, enabled, created_at, updated_at)
+     *   VALUES ('X0301', 'pembiayaan_online', 1, NOW(), NOW())
+     *   ON DUPLICATE KEY UPDATE enabled = 1;
+     */
+    public function up()
+    {
+        if (!Schema::connection('mysql7')->hasTable('cawangan_feature')) {
+            Schema::connection('mysql7')->create('cawangan_feature', function (Blueprint $table) {
+                $table->bigIncrements('id');
+                $table->string('kodcaw', 20);
+                $table->string('feature', 64);
+                $table->tinyInteger('enabled')->default(0);
+                $table->timestamps();
+                $table->unique(['kodcaw', 'feature'], 'uniq_cawangan_feature');
+            });
+        }
+    }
+
+    public function down()
+    {
+        Schema::connection('mysql7')->dropIfExists('cawangan_feature');
+    }
+}

database/migrations/2026_09_13_100000_create_kadar_rebet_table.php

@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateKadarRebetTable extends Migration
+{
+    /**
+     * Master DB (mysql7) — Annur rebet bands by pembiayaan range.
+     * Empty table + feature flag off = other cawangan unchanged.
+     */
+    public function up()
+    {
+        if (Schema::connection('mysql7')->hasTable('kadar_rebet')) {
+            return;
+        }
+
+        Schema::connection('mysql7')->create('kadar_rebet', function (Blueprint $table) {
+            $table->increments('id');
+            $table->decimal('pembiayaan_min', 12, 2)->default(0);
+            $table->decimal('pembiayaan_max', 12, 2)->default(0);
+            $table->decimal('kadarrebet', 8, 4)->default(0);
+        });
+    }
+
+    public function down()
+    {
+        Schema::connection('mysql7')->dropIfExists('kadar_rebet');
+    }
+}

database/migrations/2026_09_13_100001_add_annur_diskaun_columns.php

@@ -0,0 +1,102 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+class AddAnnurDiskaunColumns extends Migration
+{
+    public function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+                DB::connection($connection)->getPdo();
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (Schema::connection($dbase)->hasTable('gadai')) {
+                $addKadar = !Schema::connection($dbase)->hasColumn('gadai', 'kadarrebet');
+                $addDiskaun = !Schema::connection($dbase)->hasColumn('gadai', 'diskaun');
+                if ($addKadar || $addDiskaun) {
+                    Schema::connection($dbase)->table('gadai', function (Blueprint $table) use ($addKadar, $addDiskaun) {
+                        if ($addKadar) {
+                            $table->decimal('kadarrebet', 8, 4)->nullable()->default(0);
+                        }
+                        if ($addDiskaun) {
+                            $table->decimal('diskaun', 12, 2)->nullable()->default(0);
+                        }
+                    });
+                }
+            }
+
+            if (
+                Schema::connection($dbase)->hasTable('tebus')
+                && !Schema::connection($dbase)->hasColumn('tebus', 'diskaun_rebate')
+            ) {
+                Schema::connection($dbase)->table('tebus', function (Blueprint $table) {
+                    $table->decimal('diskaun_rebate', 12, 2)->nullable()->default(0);
+                });
+            }
+        }
+
+        if (
+            Schema::connection('mysql7')->hasTable('transaksi_keuntungan')
+            && !Schema::connection('mysql7')->hasColumn('transaksi_keuntungan', 'kadardiskaun')
+        ) {
+            Schema::connection('mysql7')->table('transaksi_keuntungan', function (Blueprint $table) {
+                $table->decimal('kadardiskaun', 12, 2)->nullable()->default(0);
+            });
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (Schema::connection($dbase)->hasTable('gadai')) {
+                Schema::connection($dbase)->table('gadai', function (Blueprint $table) use ($dbase) {
+                    $drops = [];
+                    if (Schema::connection($dbase)->hasColumn('gadai', 'kadarrebet')) {
+                        $drops[] = 'kadarrebet';
+                    }
+                    if (Schema::connection($dbase)->hasColumn('gadai', 'diskaun')) {
+                        $drops[] = 'diskaun';
+                    }
+                    if ($drops) {
+                        $table->dropColumn($drops);
+                    }
+                });
+            }
+
+            if (
+                Schema::connection($dbase)->hasTable('tebus')
+                && Schema::connection($dbase)->hasColumn('tebus', 'diskaun_rebate')
+            ) {
+                Schema::connection($dbase)->table('tebus', function (Blueprint $table) {
+                    $table->dropColumn('diskaun_rebate');
+                });
+            }
+        }
+
+        if (
+            Schema::connection('mysql7')->hasTable('transaksi_keuntungan')
+            && Schema::connection('mysql7')->hasColumn('transaksi_keuntungan', 'kadardiskaun')
+        ) {
+            Schema::connection('mysql7')->table('transaksi_keuntungan', function (Blueprint $table) {
+                $table->dropColumn('kadardiskaun');
+            });
+        }
+    }
+}

database/migrations/2026_09_15_094818_create_shoraka_transactions_table.php

@@ -0,0 +1,87 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateShorakaTransactionsTable extends Migration
+{
+    public function up()
+    {
+        Schema::create(
+            'shoraka_transactions',
+            function (Blueprint $table) {
+                $table->id();
+
+                // Rujukan pembiayaan dalam eRahn
+                $table->string('norujukan')->unique();
+
+                // Maklumat daripada Shoraka
+                $table->string('order_id')
+                    ->nullable()
+                    ->unique();
+
+                $table->string('status')
+                    ->default('PENDING');
+
+                $table->string('product_type')
+                    ->default('FINANCING');
+
+                $table->string('commodity_type');
+
+                $table->string('ownership_name');
+                $table->string('ownership_doc_no')
+                    ->nullable();
+
+                $table->decimal(
+                    'order_amount',
+                    15,
+                    2
+                );
+
+                $table->decimal(
+                    'murabaha_amount',
+                    15,
+                    2
+                );
+
+                $table->string('certificate_url')
+                    ->nullable();
+
+                $table->string('certificate_path')
+                    ->nullable();
+
+                // Simpan payload untuk audit dan troubleshooting
+                $table->json('request_payload')
+                    ->nullable();
+
+                $table->json('response_payload')
+                    ->nullable();
+
+                $table->json('callback_payload')
+                    ->nullable();
+
+                $table->unsignedInteger('attempt_count')
+                    ->default(0);
+
+                $table->text('error_message')
+                    ->nullable();
+
+                $table->timestamp('submitted_at')
+                    ->nullable();
+
+                $table->timestamp('completed_at')
+                    ->nullable();
+
+                $table->timestamps();
+
+                $table->index('status');
+            }
+        );
+    }
+
+    public function down()
+    {
+        Schema::dropIfExists('shoraka_transactions');
+    }
+}

database/migrations/2026_09_17_100000_add_pc_verified_to_pembiayaan_online_table.php

@@ -0,0 +1,74 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+class AddPcVerifiedToPembiayaanOnlineTable extends Migration
+{
+    public function getActiveDB()
+    {
+        return array_filter(
+            array_keys(config('database.connections')),
+            function ($connection) {
+                try {
+                    if ($connection === 'mysql7') {
+                        return false;
+                    }
+
+                    DB::connection($connection)->getPdo();
+
+                    return true;
+                } catch (\Exception $e) {
+                    return false;
+                }
+            }
+        );
+    }
+
+    public function up()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (!Schema::connection($dbase)->hasTable('pembiayaan_online')) {
+                continue;
+            }
+
+            Schema::connection($dbase)->table('pembiayaan_online', function (Blueprint $table) use ($dbase) {
+                if (!Schema::connection($dbase)->hasColumn('pembiayaan_online', 'pc_verified_by')) {
+                    $table->string('pc_verified_by', 100)
+                        ->nullable()
+                        ->after('pc_submitted_by');
+                }
+
+                if (!Schema::connection($dbase)->hasColumn('pembiayaan_online', 'pc_verified_at')) {
+                    $table->timestamp('pc_verified_at')
+                        ->nullable()
+                        ->after('pc_verified_by');
+                }
+            });
+        }
+    }
+
+    public function down()
+    {
+        foreach ($this->getActiveDB() as $dbase) {
+            if (!Schema::connection($dbase)->hasTable('pembiayaan_online')) {
+                continue;
+            }
+
+            Schema::connection($dbase)->table('pembiayaan_online', function (Blueprint $table) use ($dbase) {
+                $cols = [];
+                if (Schema::connection($dbase)->hasColumn('pembiayaan_online', 'pc_verified_at')) {
+                    $cols[] = 'pc_verified_at';
+                }
+                if (Schema::connection($dbase)->hasColumn('pembiayaan_online', 'pc_verified_by')) {
+                    $cols[] = 'pc_verified_by';
+                }
+                if (!empty($cols)) {
+                    $table->dropColumn($cols);
+                }
+            });
+        }
+    }
+}

database/migrations/2026_10_05_120000_add_kodcaw_to_shoraka_transactions.php

@@ -0,0 +1,22 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class AddKodcawToShorakaTransactions extends Migration
+{
+    public function up()
+    {
+        Schema::table('shoraka_transactions', function (Blueprint $table) {
+            $table->string('kodcaw', 20)->nullable()->index();
+        });
+    }
+
+    public function down()
+    {
+        Schema::table('shoraka_transactions', function (Blueprint $table) {
+            $table->dropColumn('kodcaw');
+        });
+    }
+}

database/migrations/2026_10_13_160000_create_bsas_orders_table.php

@@ -0,0 +1,49 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateBsasOrdersTable extends Migration
+{
+    /**
+     * Master DB (mysql7) — per-Terima BSAS commodity orders.
+     */
+    public function up()
+    {
+        if (Schema::connection('mysql7')->hasTable('bsas_orders')) {
+            return;
+        }
+
+        Schema::connection('mysql7')->create('bsas_orders', function (Blueprint $table) {
+            $table->bigIncrements('id');
+            $table->string('uuid', 64)->nullable()->unique();
+            $table->string('norujukan', 50)->index();
+            $table->string('kodcaw', 20)->index();
+            $table->string('serial_number', 20)->default('1');
+            $table->string('product_code', 50)->nullable();
+            $table->decimal('bid_value', 14, 2)->nullable();
+            $table->decimal('otc_murabaha_value', 14, 2)->nullable();
+            $table->string('otc_counter_party', 150)->nullable();
+            $table->string('status', 30)->default('pending')->index();
+            $table->integer('status_code')->nullable();
+            $table->string('status_message', 255)->nullable();
+            $table->string('e_cert_no', 100)->nullable()->index();
+            $table->json('bid_ecert_response')->nullable();
+            $table->json('otc_ecert_response')->nullable();
+            $table->json('stb_ecert_response')->nullable();
+            $table->json('request_payload')->nullable();
+            $table->json('order_response')->nullable();
+            $table->json('result_response')->nullable();
+            $table->string('created_by', 100)->nullable();
+            $table->timestamps();
+
+            $table->index(['norujukan', 'status']);
+        });
+    }
+
+    public function down()
+    {
+        Schema::connection('mysql7')->dropIfExists('bsas_orders');
+    }
+}

database/migrations/2026_10_26_130000_add_teller_to_shoraka_transactions.php

@@ -0,0 +1,23 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\DB;
+use Illuminate\Support\Facades\Schema;
+
+class AddTellerToShorakaTransactions extends Migration
+{
+    public function up()
+    {
+        Schema::table('shoraka_transactions', function (Blueprint $table) {
+            $table->string('teller')->nullable();
+        });
+    }
+
+    public function down()
+    {
+        Schema::table('shoraka_transactions', function (Blueprint $table) {
+            $table->dropColumn('teller');
+        });
+    }
+}

database/migrations/2026_10_27_100000_drop_unused_cawangan_tables.php

@@ -0,0 +1,170 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+class DropUnusedCawanganTables extends Migration
+{
+    /**
+     * Empty legacy tables on every branch database.
+     * mysql7 is the master database and is skipped.
+     */
+    public function up()
+    {
+        $tables = [
+            'advansur',
+            'alert',
+            'ansrugi',
+            'auditbarcode',
+            'auditdaftar',
+            'auditrekodsemakan',
+            'audtrail',
+            'bajet',
+            'bakipelanggan',
+            'batchlel_xtra',
+            'bayaranpenebusan',
+            'belian',
+            'budgetgadai',
+            'budgettebus',
+            'budgetupah',
+            'checker',
+            'configkaunter',
+            'coordination',
+            'customer',
+            'gadaisimulasi',
+            'gadaitemp',
+            'gadaixtra',
+            'glejer',
+            'hapusgadaionline',
+            'hapuskira',
+            'hargaemasbeli',
+            'hargaemasjual',
+            'imbangan',
+            'imbang_duga_lama',
+            'inoutmarxtra',
+            'jemas00',
+            'jemasbeli',
+            'jemasxtra',
+            'jualan',
+            'jualemas',
+            'jumlahtebus',
+            'karatbeli',
+            'karatjual',
+            'karatxtra',
+            'kawalanstok',
+            'kawalanstokxtra',
+            'kawalanstok_lama',
+            'kumpulan',
+            'kurangxtra',
+            'ku_nm',
+            'ku_nmbaru',
+            'ku_nmxtra',
+            'lapringkasan',
+            'lapterkumpul',
+            'lapterkumpulharian',
+            'lelkarat',
+            'lelmarhun_xtra',
+            'lelongxtra',
+            'marhunbeli',
+            'marhunjual',
+            'marhunsimulasi',
+            'marhunxtra',
+            'model',
+            'outmarhun',
+            'outmarhunxtra',
+            'parameter',
+            'pelelong',
+            'pembeliemas',
+            'pemeriksaan',
+            'pengesahangadai',
+            'pengguna',
+            'percentonline',
+            'polisxtra',
+            'poskod',
+            'ramalan',
+            'rekodtangguh',
+            'sahabat',
+            'senhitam',
+            'serahbaki',
+            'simpanan',
+            'simulasi_batchlel',
+            'simulasi_batchlelxtra',
+            'simulasi_lelmarhun',
+            'simulasi_lelongxtra',
+            'syarikat',
+            'tagpelanggan',
+            'tebuslelong',
+            'tebus_xtra',
+            'tempimbang',
+            'tempnosiri',
+            'tempnosirixtra',
+            'temppwd',
+            'temptarikhaging',
+            'temp_ic',
+            'tunaigadteb',
+            'tuntutan',
+            'tuntutbakixtra',
+            'ubs_code',
+            'zparameter',
+            'zparameter1',
+        ];
+
+        foreach ($this->getActiveDB() as $connection) {
+            $this->dropTables($connection, $tables);
+        }
+    }
+
+    public function down()
+    {
+        // Original table definitions are not kept. This drop cannot be reversed.
+    }
+
+    private function getActiveDB()
+    {
+        $config_db = array_keys(config('database.connections'));
+
+        return array_filter($config_db, function ($connection) {
+            try {
+                if ($connection === 'mysql7') {
+                    return false;
+                }
+
+                DB::connection($connection)->getPdo();
+
+                return true;
+            } catch (\Exception $e) {
+                return false;
+            }
+        });
+    }
+
+    private function dropTables($connection, array $tables)
+    {
+        $db = DB::connection($connection);
+        $placeholders = implode(',', array_fill(0, count($tables), '?'));
+        $rows = $db->select(
+            "SELECT TABLE_NAME AS table_name
+             FROM information_schema.TABLES
+             WHERE TABLE_SCHEMA = DATABASE()
+               AND TABLE_TYPE = 'BASE TABLE'
+               AND LOWER(TABLE_NAME) IN ($placeholders)",
+            $tables
+        );
+
+        if (count($rows) === 0) {
+            return;
+        }
+
+        $quoted = array_map(function ($row) {
+            return '`'.str_replace('`', '``', $row->table_name).'`';
+        }, $rows);
+
+        $db->statement('SET FOREIGN_KEY_CHECKS=0');
+
+        try {
+            $db->statement('DROP TABLE IF EXISTS '.implode(', ', $quoted));
+        } finally {
+            $db->statement('SET FOREIGN_KEY_CHECKS=1');
+        }
+    }
+}

database/migrations/2026_10_27_100001_drop_unused_master_tables.php

@@ -0,0 +1,60 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Support\Facades\DB;
+
+class DropUnusedMasterTables extends Migration
+{
+    /**
+     * Empty legacy tables on the master database (mysql7).
+     */
+    public function up()
+    {
+        $tables = [
+            'approval_withdrawal',
+            'cawangan00',
+            'cawangan_notis',
+            'coordination',
+            'customers_main',
+            'log_blast_sms',
+            'log_blast_wasap',
+            'mobile_payment_info',
+            'mobile_payment_log',
+            'moratorium',
+            'otp_token',
+            'tac_express_payment',
+        ];
+
+        $db = DB::connection('mysql7');
+        $placeholders = implode(',', array_fill(0, count($tables), '?'));
+        $rows = $db->select(
+            "SELECT TABLE_NAME AS table_name
+             FROM information_schema.TABLES
+             WHERE TABLE_SCHEMA = DATABASE()
+               AND TABLE_TYPE = 'BASE TABLE'
+               AND LOWER(TABLE_NAME) IN ($placeholders)",
+            $tables
+        );
+
+        if (count($rows) === 0) {
+            return;
+        }
+
+        $quoted = array_map(function ($row) {
+            return '`'.str_replace('`', '``', $row->table_name).'`';
+        }, $rows);
+
+        $db->statement('SET FOREIGN_KEY_CHECKS=0');
+
+        try {
+            $db->statement('DROP TABLE IF EXISTS '.implode(', ', $quoted));
+        } finally {
+            $db->statement('SET FOREIGN_KEY_CHECKS=1');
+        }
+    }
+
+    public function down()
+    {
+        // Original table definitions are not kept. This drop cannot be reversed.
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_addtunai_table.php

@@ -0,0 +1,38 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateAddtunaiTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('addtunai', function (Blueprint $table) {
+            $table->integer('recno');
+            $table->date('tarikh')->nullable();
+            $table->string('kodcaw', 10)->nullable()->default('');
+            $table->string('kodlaluan', 100)->nullable()->default('');
+            $table->decimal('tambah', 11)->nullable()->default(0);
+            $table->decimal('kurang', 11)->nullable()->default(0);
+            $table->string('nota', 40)->nullable()->default('');
+            $table->integer('bil')->default(0);
+            $table->timestamp('created_at');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('addtunai');
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_akru_net_pecahan_table.php

@@ -0,0 +1,42 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateAkruNetPecahanTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('akru_net_pecahan', function (Blueprint $table) {
+            $table->unsignedBigInteger('id');
+            $table->integer('tahun');
+            $table->integer('bulan');
+            $table->decimal('persen_semasa', 9);
+            $table->decimal('ujrah_semasa', 9);
+            $table->decimal('persen_sebelum', 9);
+            $table->decimal('ujrah_sebelum', 9);
+            $table->decimal('keuntungan_semasa_1persen', 9);
+            $table->decimal('keuntungan_semasa_ujrah', 9);
+            $table->decimal('baki_keun_blm_byr_1persen', 9);
+            $table->decimal('baki_keun_blm_byr_ujrah', 9);
+            $table->decimal('pend_akru_1persen', 9);
+            $table->decimal('pend_akru_ujrah', 9);
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('akru_net_pecahan');
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_akru_net_table.php

@@ -0,0 +1,33 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateAkruNetTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('akru_net', function (Blueprint $table) {
+            $table->integer('id');
+            $table->integer('tahun')->nullable();
+            $table->integer('bulan')->nullable();
+            $table->decimal('jumlah', 9)->nullable();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('akru_net');
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_bandar_table.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateBandarTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('bandar', function (Blueprint $table) {
+            $table->string('kodbandar', 10)->nullable();
+            $table->string('namabandar', 30)->nullable();
+            $table->string('kodnegeri', 3)->nullable();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('bandar');
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_bank_table.php

@@ -0,0 +1,32 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateBankTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('bank', function (Blueprint $table) {
+            $table->string('bankcode', 10)->nullable();
+            $table->string('bankdesc', 30)->nullable();
+            $table->string('note', 30)->nullable();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('bank');
+    }
+}

database/migrations_generated/cawangan/2026_10_27_082510_create_batalgadai_table.php

@@ -0,0 +1,35 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+class CreateBatalgadaiTable extends Migration
+{
+    /**
+     * Run the migrations.
+     *
+     * @return void
+     */
+    public function up()
+    {
+        Schema::connection('mysql2')->create('batalgadai', function (Blueprint $table) {
+            $table->integer('recno');
+            $table->string('norujukan', 20)->nullable();
+            $table->string('tellerid', 50)->nullable();
+            $table->string('namateller', 30)->nullable();
+            $table->date('tarikh');
+            $table->time('masa');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     *
+     * @return void
+     */
+    public function down()
+    {
+        Schema::connection('mysql2')->dropIfExists('batalgadai');
+    }
+}