using Distribution.Infra.Authorization; using Distribution.Models; using Microsoft.AspNetCore.Mvc; namespace Distribution.Features.Po; [ApiController] [Route("api/purchase-orders")] public class PoController(PoService service, ICurrentUserService currentUser) : ControllerBase { [HttpGet] public async Task GetAll([FromQuery] Guid? supplierId, [FromQuery] PurchaseOrderStatus? status) => Ok(await service.GetAllAsync(supplierId, status)); [HttpGet("{id:guid}")] public async Task GetById(Guid id) { var result = await service.GetByIdAsync(id); return result is null ? NotFound() : Ok(result); } [HttpPost] public async Task Create(CreatePoRequest request, CancellationToken ct) { // TEMPORARY: currentUser.UserId is always unset due to the broken auth middleware // (testbug.md #28) — fall back to the explicitly supplied user until that's fixed. var userId = currentUser.UserId ?? request.CreatedByUserId; if (userId is null) return BadRequest(new { error = "CreatedByUserId is required while auth is unavailable" }); try { var result = await service.CreateAsync(request, userId.Value, ct); return CreatedAtAction(nameof(GetById), new { id = result.Id }, result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPut("{id:guid}")] public async Task Update(Guid id, UpdatePoRequest request, CancellationToken ct) { try { var result = await service.UpdateAsync(id, request, ct); return result is null ? NotFound() : Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPost("{id:guid}/close")] public async Task Close(Guid id, CancellationToken ct) { try { var result = await service.CloseAsync(id, ct); return result is null ? NotFound() : Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPost("{id:guid}/cancel")] public async Task Cancel(Guid id, CancelPoRequest request, CancellationToken ct) { try { var result = await service.CancelAsync(id, request, ct); return result is null ? NotFound() : Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPost("{id:guid}/items/{itemId:guid}/cancel")] public async Task CancelLine(Guid id, Guid itemId, CancelPoLineRequest request, CancellationToken ct) { try { var result = await service.CancelLineAsync(id, itemId, request, ct); return result is null ? NotFound() : Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } [HttpPost("{id:guid}/match-invoice")] public async Task MatchInvoice(Guid id, [FromQuery] Guid? invoiceId, [FromQuery] Guid? grnId) { var result = await service.MatchInvoiceToPoAsync(id, invoiceId, grnId); return result is null ? NotFound() : Ok(result); } [HttpPost("{id:guid}/resolve-variance")] public async Task ResolveVariance(Guid id, ResolveInvoiceVarianceRequest request, CancellationToken ct) { try { var result = await service.ResolveInvoiceVarianceAsync(id, request, ct); return result is null ? NotFound() : Ok(result); } catch (InvalidOperationException ex) { return Conflict(new { error = ex.Message }); } } }