nis2-agile/application/cli/seed_framework.php

<?php
/**
 * NIS2 Agile — Importer idempotente del framework canonico (Epic C / C1).
 * ----------------------------------------------------------------------------
 * Crea (se mancanti) le tabelle di configurazione cfg_nis2_* (mig.046) e le
 * popola dal seed autoritativo application/data/nis2_framework_seed.json
 * (generato dai file docs/simon/*.xlsx — codifica NON variabile).
 *
 * Idempotente: CREATE TABLE IF NOT EXISTS + INSERT ... ON DUPLICATE KEY UPDATE.
 * Rilanciabile senza duplicare né rompere le FK. Pensato per ricreare/riseedare
 * un ambiente in modo versionato (sostituisce i runner temporanei usa-e-getta).
 *
 * Uso (dentro il container app):
 *   docker exec nis2-app php /var/www/nis2-agile/application/cli/seed_framework.php
 *
 * NB: solo CLI. DB API via PDO singleton (Database::getInstance()), TLS gestito
 * dalla config dell'app.
 */

if (PHP_SAPI !== 'cli') {
    http_response_code(403);
    exit("Solo da CLI.\n");
}

require_once __DIR__ . '/../config/env.php';
require_once __DIR__ . '/../config/database.php';

$pdo = Database::getInstance();
$pdo->exec("SET NAMES utf8mb4 COLLATE utf8mb4_unicode_ci");

$ddl = [
"CREATE TABLE IF NOT EXISTS cfg_nis2_ambiti (
  nist_code VARCHAR(16) NOT NULL, nist_descr TEXT NOT NULL,
  PRIMARY KEY (nist_code)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
"CREATE TABLE IF NOT EXISTS cfg_nis2_procedure (
  proc_code VARCHAR(16) NOT NULL, proc_descr TEXT NOT NULL,
  PRIMARY KEY (proc_code)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
"CREATE TABLE IF NOT EXISTS cfg_nis2_rischi (
  risk_code VARCHAR(16) NOT NULL, risk_descr TEXT NOT NULL,
  PRIMARY KEY (risk_code)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
"CREATE TABLE IF NOT EXISTS cfg_nis2_misure (
  misura_code VARCHAR(16) NOT NULL, nist_code VARCHAR(16) NOT NULL,
  area_politica VARCHAR(255) NOT NULL, misura_descr TEXT NOT NULL, ord INT NOT NULL,
  applies_important TINYINT(1) NOT NULL DEFAULT 1, applies_essential TINYINT(1) NOT NULL DEFAULT 1,
  PRIMARY KEY (misura_code), KEY idx_misura_nist (nist_code), KEY idx_misura_ord (ord),
  CONSTRAINT fk_misura_ambito FOREIGN KEY (nist_code) REFERENCES cfg_nis2_ambiti (nist_code)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
"CREATE TABLE IF NOT EXISTS cfg_nis2_requisiti (
  id INT NOT NULL AUTO_INCREMENT, n INT NULL, misura_code VARCHAR(16) NOT NULL,
  requisito_code VARCHAR(32) NOT NULL, requisito_descr TEXT NOT NULL,
  proc_code VARCHAR(16) NULL, risk_code VARCHAR(16) NULL,
  applies_important TINYINT(1) NOT NULL DEFAULT 0, applies_essential TINYINT(1) NOT NULL DEFAULT 0,
  PRIMARY KEY (id), UNIQUE KEY uq_req (misura_code, requisito_code),
  KEY idx_req_misura (misura_code), KEY idx_req_proc (proc_code), KEY idx_req_risk (risk_code),
  CONSTRAINT fk_req_misura FOREIGN KEY (misura_code) REFERENCES cfg_nis2_misure (misura_code),
  CONSTRAINT fk_req_proc FOREIGN KEY (proc_code) REFERENCES cfg_nis2_procedure (proc_code),
  CONSTRAINT fk_req_risk FOREIGN KEY (risk_code) REFERENCES cfg_nis2_rischi (risk_code)
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci",
];
foreach ($ddl as $stmt) {
    try { $pdo->exec($stmt); }
    catch (PDOException $e) { if (!in_array($e->errorInfo[1] ?? 0, [1050, 1061], true)) { throw $e; } }
}

$seedPath = __DIR__ . '/../data/nis2_framework_seed.json';
$seed = json_decode(@file_get_contents($seedPath), true);
if (!$seed) { fwrite(STDERR, "SEED non leggibile: $seedPath\n"); exit(1); }

$pdo->beginTransaction();
try {
    $st = $pdo->prepare("INSERT INTO cfg_nis2_ambiti (nist_code,nist_descr) VALUES (?,?)
        ON DUPLICATE KEY UPDATE nist_descr=VALUES(nist_descr)");
    foreach ($seed['ambiti_nist'] as $a) { $st->execute([$a['nist_code'], $a['nist_descr']]); }

    $st = $pdo->prepare("INSERT INTO cfg_nis2_procedure (proc_code,proc_descr) VALUES (?,?)
        ON DUPLICATE KEY UPDATE proc_descr=VALUES(proc_descr)");
    foreach ($seed['procedure'] as $p) { $st->execute([$p['proc_code'], $p['proc_descr']]); }

    $st = $pdo->prepare("INSERT INTO cfg_nis2_rischi (risk_code,risk_descr) VALUES (?,?)
        ON DUPLICATE KEY UPDATE risk_descr=VALUES(risk_descr)");
    foreach ($seed['rischi'] as $r) { $st->execute([$r['risk_code'], $r['risk_descr']]); }

    $st = $pdo->prepare("INSERT INTO cfg_nis2_misure
        (misura_code,nist_code,area_politica,misura_descr,ord,applies_important,applies_essential)
        VALUES (?,?,?,?,?,?,?)
        ON DUPLICATE KEY UPDATE nist_code=VALUES(nist_code),area_politica=VALUES(area_politica),
          misura_descr=VALUES(misura_descr),ord=VALUES(ord),
          applies_important=VALUES(applies_important),applies_essential=VALUES(applies_essential)");
    foreach ($seed['misure'] as $m) {
        $st->execute([$m['misura_code'], $m['nist_code'], $m['area_politica'], $m['misura_descr'],
                      $m['ord'], $m['applies_important'], $m['applies_essential']]);
    }

    $st = $pdo->prepare("INSERT INTO cfg_nis2_requisiti
        (n,misura_code,requisito_code,requisito_descr,proc_code,risk_code,applies_important,applies_essential)
        VALUES (?,?,?,?,?,?,?,?)
        ON DUPLICATE KEY UPDATE n=VALUES(n),requisito_descr=VALUES(requisito_descr),
          proc_code=VALUES(proc_code),risk_code=VALUES(risk_code),
          applies_important=VALUES(applies_important),applies_essential=VALUES(applies_essential)");
    foreach ($seed['requisiti'] as $q) {
        $st->execute([$q['n'], $q['misura_code'], $q['requisito_code'], $q['requisito_descr'],
                      $q['proc_code'], $q['risk_code'], $q['applies_important'], $q['applies_essential']]);
    }
    $pdo->commit();
} catch (Throwable $e) {
    $pdo->rollBack();
    fwrite(STDERR, "SEED FALLITO: " . $e->getMessage() . "\n");
    exit(1);
}

$counts = [
    'ambiti'    => (int) $pdo->query("SELECT COUNT(*) FROM cfg_nis2_ambiti")->fetchColumn(),
    'procedure' => (int) $pdo->query("SELECT COUNT(*) FROM cfg_nis2_procedure")->fetchColumn(),
    'rischi'    => (int) $pdo->query("SELECT COUNT(*) FROM cfg_nis2_rischi")->fetchColumn(),
    'misure'    => (int) $pdo->query("SELECT COUNT(*) FROM cfg_nis2_misure")->fetchColumn(),
    'requisiti' => (int) $pdo->query("SELECT COUNT(*) FROM cfg_nis2_requisiti")->fetchColumn(),
];
echo "OK seed-framework — " . json_encode($counts, JSON_UNESCAPED_UNICODE) . "\n";